From b928e5da5d5ae5665947e5ca0304b265840beece Mon Sep 17 00:00:00 2001 From: Antonio Torres Date: Thu, 24 Nov 2022 16:26:42 +0100 Subject: [PATCH] Update translations to FreeIPA master state Signed-off-by: Antonio Torres --- po/bn_IN.po | 23891 +--------------------- po/ca.po | 24712 +--------------------- po/cs.po | 25734 +---------------------- po/de.po | 29126 ++++---------------------- po/en_GB.po | 23855 +--------------------- po/es.po | 40113 ++++++++++++------------------------ po/eu.po | 24790 +---------------------- po/fi.po | 26627 +++--------------------- po/fr.po | 45059 +++++++++++++++-------------------------- po/hi.po | 23901 +--------------------- po/hu.po | 24172 +--------------------- po/id.po | 25145 +---------------------- po/ja.po | 24670 +--------------------- po/ka.po | 24706 +--------------------- po/kn.po | 24917 +---------------------- po/ko.po | 28189 +------------------------- po/mr.po | 23943 +--------------------- po/nl.po | 23871 ---------------------- po/pa.po | 23937 +--------------------- po/pl.po | 25810 ++--------------------- po/pt.po | 24204 +--------------------- po/pt_BR.po | 24739 +--------------------- po/ru.po | 52218 +++++++++++++++++++++++------------------------ po/sk.po | 27240 +++---------------------- po/tg.po | 24329 +--------------------- po/tr.po | 25872 ++--------------------- po/uk.po | 55154 +++++++++++++++++++++++++------------------------- po/zh_CN.po | 35076 +++++++++++--------------------- 28 files changed, 109971 insertions(+), 696029 deletions(-) diff --git a/po/bn_IN.po b/po/bn_IN.po index 5dfad2d6a..235eae5b6 100644 --- a/po/bn_IN.po +++ b/po/bn_IN.po @@ -18,23900 +18,35 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, c-format -msgid "out of memory\n" -msgstr "" - -#, c-format -msgid "read error\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, c-format -msgid "Out of memory \n" -msgstr "" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -msgid "SASL Bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Out of Memory!\n" -msgstr "" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "পাসওয়ার্ড দুটি মিলছে না" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Output debug info" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -msgid "Server Name" -msgstr "" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -msgid "LDAP password" -msgstr "" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -msgid "Path to the IPA CA certificate" -msgstr "" - -msgid "IPA CA certificate" -msgstr "" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -msgid "Enter LDAP password" -msgstr "" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" - -#, c-format -msgid "Discovered server %s\n" -msgstr "" - -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Using provided server %s\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -msgid "New Principal Password" -msgstr "" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Out of memory!\n" -msgstr "" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "" - -#, c-format -msgid "Out of memory!" -msgstr "" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "" - -#, c-format -msgid "No values for %s" -msgstr "" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Host is already joined.\n" -msgstr "" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" - -#, c-format -msgid "json_dumps() failed\n" -msgstr "" - -#, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "" - -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" - -#, c-format -msgid "fork() failed\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "" - -#, c-format -msgid "child exited with %d\n" -msgstr "" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "" - -msgid "Quiet mode. Only errors are displayed." -msgstr "" - -msgid "Unenroll this host from IPA server" -msgstr "" - -msgid "Hostname of this server" -msgstr "" - -msgid "hostname" -msgstr "" - -msgid "IPA Server to use" -msgstr "" - -msgid "Specifies where to store keytab information." -msgstr "" - -msgid "filename" -msgstr "" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" - -msgid "LDAP password (if not using Kerberos)" -msgstr "" - -msgid "password" -msgstr "" - -msgid "LDAP basedn" -msgstr "" - -msgid "basedn" -msgstr "" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "" - -msgid "Failed to add" -msgstr "" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" - -msgid "Unrevoked" -msgstr "" - -msgid "Error" -msgstr "" - -msgid "Input filename" -msgstr "" - -msgid "File to load the certificate from." -msgstr "" - -msgid "cannot specify both raw certificate and file" -msgstr "" - -msgid "Input file" -msgstr "" - -msgid "File to load the certificate from" -msgstr "" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "" - -msgid "Split DNS record to parts" -msgstr "" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" - -msgid "DNS resource record type" -msgstr "" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" - -msgid "No option to modify specific record provided." -msgstr "" - -msgid "Current DNS record contents:\n" -msgstr "" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -msgid "No option to delete specific record provided." -msgstr "" - -msgid "Delete all?" -msgstr "" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "" - -msgid "Server will check DNS forwarder(s)." -msgstr "" - -msgid "This may take some time, please wait ..." -msgstr "" - -msgid "DNS forwarder" -msgstr "" - -msgid "file to store DNS records in nsupdate format" -msgstr "" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -msgid "Delete a user" -msgstr "" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - -msgid "maps not connected to /etc/auto.master:" -msgstr "" - -msgid "Import automount files for a specific location." -msgstr "" - -msgid "Master file" -msgstr "" - -msgid "Automount master file." -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" - -#, python-format -msgid "File %(file)s not found" -msgstr "" - -#, python-format -msgid "key %(key)s already exists" -msgstr "" - -#, python-format -msgid "map %(map)s already exists" -msgstr "" - -msgid "Imported maps:" -msgstr "" - -#, fuzzy, python-format -msgid "Added %(map)s" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Imported keys:" -msgstr "" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "" - -msgid "Ignored keys:" -msgstr "" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "" - -msgid "Duplicate maps skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(map)s" -msgstr "" - -msgid "Duplicate keys skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(key)s" -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -msgid "User ID" -msgstr "" - -msgid "Password" -msgstr "" - -msgid "First Code" -msgstr "" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "" - -msgid "Invalid credentials" -msgstr "" - -msgid "Create a new vault." -msgstr "" - -msgid "Vault password" -msgstr "" - -msgid "File containing the vault password" -msgstr "" - -msgid "File containing the vault public key" -msgstr "" - -msgid "Password can be specified only for symmetric vault" -msgstr "" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "" - -msgid "Password specified multiple times" -msgstr "" - -msgid "Public key specified multiple times" -msgstr "" - -msgid "Missing vault public key" -msgstr "" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "" - -msgid "Modify a vault." -msgstr "" - -msgid "Change password" -msgstr "" - -msgid "Old vault password" -msgstr "" - -msgid "File containing the old vault password" -msgstr "" - -msgid "New vault password" -msgstr "" - -msgid "File containing the new vault password" -msgstr "" - -msgid "Old vault private key" -msgstr "" - -msgid "File containing the old vault private key" -msgstr "" - -msgid "File containing the new vault public key" -msgstr "" - -msgid "New public key specified multiple times" -msgstr "" - -msgid "Missing new vault public key" -msgstr "" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "" - -msgid "Binary data to archive" -msgstr "" - -msgid "File containing data to archive" -msgstr "" - -msgid "Override existing password" -msgstr "" - -msgid "Input data specified multiple times" -msgstr "" - -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" - -msgid "Invalid vault type" -msgstr "" - -msgid "Retrieve a data from a vault." -msgstr "" - -msgid "File to store retrieved data" -msgstr "" - -msgid "Vault private key" -msgstr "" - -msgid "File containing the vault private key" -msgstr "" - -msgid "Data" -msgstr "" - -msgid "Private key specified multiple times" -msgstr "" - -msgid "Missing vault private key" -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "ACI name" -msgstr "" - -msgid "Permission" -msgstr "" - -msgid "Permission ACI grants access to" -msgstr "" - -msgid "User group" -msgstr "" - -msgid "User group ACI grants access to" -msgstr "" - -msgid "Permissions" -msgstr "" - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Attributes to which the permission applies" -msgstr "" - -msgid "Attributes" -msgstr "" - -msgid "Type" -msgstr "" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" - -msgid "Member of" -msgstr "" - -msgid "Member of a group" -msgstr "" - -msgid "Filter" -msgstr "" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "" - -msgid "Subtree" -msgstr "" - -msgid "Subtree to apply ACI to" -msgstr "" - -msgid "Target group" -msgstr "" - -msgid "Group to apply ACI to" -msgstr "" - -msgid "Target your own entry (self)" -msgstr "" - -msgid "Apply ACI to your own entry (self)" -msgstr "" - -msgid "Create new ACI." -msgstr "" - -msgid "ACI prefix" -msgstr "" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" - -msgid "Test the ACI syntax but don't write anything" -msgstr "" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" - -msgid "User-friendly description of action performed" -msgstr "" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" - -msgid "Delete ACI." -msgstr "" - -msgid "True means the operation was successful" -msgstr "" - -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" - -msgid "A string searched in all relevant object attributes" -msgstr "" - -msgid "Primary key only" -msgstr "" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" - -msgid "Number of entries returned" -msgstr "" - -msgid "True if not all results were returned" -msgstr "" - -msgid "Modify ACI." -msgstr "" - -msgid "Rename an ACI." -msgstr "" - -msgid "New ACI name" -msgstr "" - -msgid "Display a single ACI given an ACI name." -msgstr "" - -msgid "Location of the ACI" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Description" -msgstr "" - -msgid "A description of this auto member rule" -msgstr "" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "List of deletions that failed" -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Users" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Hosts" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" - -msgid "Key" -msgstr "" - -msgid "Automount key name." -msgstr "" - -msgid "Mount information" -msgstr "" - -msgid "description" -msgstr "" - -msgid "Location" -msgstr "" - -msgid "Automount location name." -msgstr "" - -msgid "Map" -msgstr "" - -msgid "Automount map name." -msgstr "" - -msgid "Create a new automount key." -msgstr "" - -msgid "Delete an automount key." -msgstr "" - -msgid "Continuous mode: Don't stop on errors." -msgstr "" - -msgid "Search for an automount key." -msgstr "" - -msgid "Time Limit" -msgstr "" - -msgid "Time limit of search in seconds" -msgstr "" - -msgid "Size Limit" -msgstr "" - -msgid "Maximum number of entries returned" -msgstr "" - -msgid "Modify an automount key." -msgstr "" - -msgid "New mount information" -msgstr "" - -msgid "Rename" -msgstr "" - -msgid "Rename the automount key object" -msgstr "" - -msgid "Display an automount key." -msgstr "" - -msgid "Create a new automount location." -msgstr "" - -msgid "Delete an automount location." -msgstr "" - -msgid "Search for an automount location." -msgstr "" - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" - -msgid "Display an automount location." -msgstr "" - -msgid "Generate automount files for a specific location." -msgstr "" - -msgid "Create a new automount map." -msgstr "" - -msgid "Create a new indirect mount point." -msgstr "" - -msgid "Mount point" -msgstr "" - -msgid "Parent map" -msgstr "" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" - -msgid "Delete an automount map." -msgstr "" - -msgid "Search for an automount map." -msgstr "" - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" - -msgid "Modify an automount map." -msgstr "" - -msgid "Display an automount map." -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" - -msgid "Nested Methods to execute" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason" -msgstr "" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -#, fuzzy -msgid "minimum serial number" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -#, fuzzy -msgid "maximum serial number" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Principal" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Dictionary mapping variable name to value" -msgstr "" - -msgid "Revoke a certificate." -msgstr "" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "Maximum username length" -msgstr "" - -msgid "Home directory base" -msgstr "" - -msgid "Default location of home directories" -msgstr "" - -msgid "Default shell" -msgstr "" - -msgid "Default shell for new users" -msgstr "" - -msgid "Default users group" -msgstr "" - -msgid "Default group for new users" -msgstr "" - -msgid "Default e-mail domain" -msgstr "" - -msgid "Search time limit" -msgstr "" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" - -msgid "Search size limit" -msgstr "" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "" - -msgid "User search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" - -msgid "Group search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" - -msgid "Enable migration mode" -msgstr "" - -msgid "Certificate Subject base" -msgstr "" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "" - -msgid "Default group objectclasses" -msgstr "" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "" - -msgid "Default user objectclasses" -msgstr "" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" - -msgid "Password Expiration Notification (days)" -msgstr "" - -msgid "Number of days's notice of impending password expiration" -msgstr "" - -msgid "Password plugin features" -msgstr "" - -msgid "Extra hashes to generate in password plug-in" -msgstr "" - -msgid "SELinux user map order" -msgstr "" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" - -msgid "Default SELinux user" -msgstr "" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" - -msgid "Default PAC types" -msgstr "" - -msgid "Default types of PAC supported for services" -msgstr "" - -msgid "Default user authentication types" -msgstr "" - -msgid "Default types of supported user authentication" -msgstr "" - -msgid "Modify configuration options." -msgstr "" - -msgid "Show the current configuration." -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "Delegation name" -msgstr "" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "" - -msgid "Attributes to which the delegation applies" -msgstr "" - -msgid "Member user group" -msgstr "" - -msgid "User group to apply delegation to" -msgstr "" - -msgid "Add a new delegation." -msgstr "" - -msgid "Delete a delegation." -msgstr "" - -msgid "Search for delegations." -msgstr "" - -msgid "Modify a delegation." -msgstr "" - -msgid "Display information about a delegation." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "Global forwarders" -msgstr "" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Forward policy" -msgstr "" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" - -msgid "Allow PTR sync" -msgstr "" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" - -msgid "Zone refresh interval" -msgstr "" - -msgid "Zone name" -msgstr "" - -msgid "Zone name (FQDN)" -msgstr "" - -msgid "Reverse zone IP network" -msgstr "" - -msgid "IP network to create reverse zone name from" -msgstr "" - -msgid "Active zone" -msgstr "" - -msgid "Is zone active?" -msgstr "" - -msgid "Zone forwarders" -msgstr "" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "Record name" -msgstr "" - -msgid "Time to live" -msgstr "" - -msgid "Records" -msgstr "" - -#, fuzzy -msgid "Record type" -msgstr "ভুল প্রকার" - -msgid "Record data" -msgstr "" - -msgid "A record" -msgstr "" - -msgid "Raw A records" -msgstr "" - -msgid "A IP Address" -msgstr "" - -msgid "IP Address" -msgstr "" - -msgid "A Create reverse" -msgstr "" - -msgid "Create reverse record for this IP Address" -msgstr "" - -msgid "AAAA record" -msgstr "" - -msgid "Raw AAAA records" -msgstr "" - -msgid "AAAA IP Address" -msgstr "" - -msgid "AAAA Create reverse" -msgstr "" - -msgid "A6 record" -msgstr "" - -msgid "Raw A6 records" -msgstr "" - -msgid "A6 Record data" -msgstr "" - -msgid "AFSDB record" -msgstr "" - -msgid "Raw AFSDB records" -msgstr "" - -msgid "AFSDB Subtype" -msgstr "" - -msgid "Subtype" -msgstr "" - -msgid "AFSDB Hostname" -msgstr "" - -msgid "Hostname" -msgstr "" - -msgid "APL record" -msgstr "" - -msgid "Raw APL records" -msgstr "" - -msgid "CERT record" -msgstr "" - -msgid "Raw CERT records" -msgstr "" - -msgid "CERT Certificate Type" -msgstr "" - -msgid "Certificate Type" -msgstr "" - -msgid "CERT Key Tag" -msgstr "" - -msgid "Key Tag" -msgstr "" - -msgid "CERT Algorithm" -msgstr "" - -msgid "Algorithm" -msgstr "" - -msgid "CERT Certificate/CRL" -msgstr "" - -msgid "Certificate/CRL" -msgstr "" - -msgid "CNAME record" -msgstr "" - -msgid "Raw CNAME records" -msgstr "" - -msgid "CNAME Hostname" -msgstr "" - -msgid "A hostname which this alias hostname points to" -msgstr "" - -msgid "DHCID record" -msgstr "" - -msgid "Raw DHCID records" -msgstr "" - -msgid "DLV record" -msgstr "" - -msgid "Raw DLV records" -msgstr "" - -msgid "DLV Key Tag" -msgstr "" - -msgid "DLV Algorithm" -msgstr "" - -msgid "DLV Digest Type" -msgstr "" - -msgid "Digest Type" -msgstr "" - -msgid "DLV Digest" -msgstr "" - -msgid "Digest" -msgstr "" - -msgid "DNAME record" -msgstr "" - -msgid "Raw DNAME records" -msgstr "" - -msgid "DNAME Target" -msgstr "" - -msgid "Target" -msgstr "" - -msgid "DNSKEY record" -msgstr "" - -msgid "Raw DNSKEY records" -msgstr "" - -msgid "DS record" -msgstr "" - -msgid "Raw DS records" -msgstr "" - -msgid "DS Key Tag" -msgstr "" - -msgid "DS Algorithm" -msgstr "" - -msgid "DS Digest Type" -msgstr "" - -msgid "DS Digest" -msgstr "" - -msgid "HIP record" -msgstr "" - -msgid "Raw HIP records" -msgstr "" - -msgid "IPSECKEY record" -msgstr "" - -msgid "Raw IPSECKEY records" -msgstr "" - -msgid "KEY record" -msgstr "" - -msgid "Raw KEY records" -msgstr "" - -msgid "KX record" -msgstr "" - -msgid "Raw KX records" -msgstr "" - -msgid "KX Preference" -msgstr "" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" - -msgid "KX Exchanger" -msgstr "" - -msgid "A host willing to act as a key exchanger" -msgstr "" - -msgid "LOC record" -msgstr "" - -msgid "Raw LOC records" -msgstr "" - -msgid "LOC Degrees Latitude" -msgstr "" - -msgid "Degrees Latitude" -msgstr "" - -msgid "LOC Minutes Latitude" -msgstr "" - -msgid "Minutes Latitude" -msgstr "" - -msgid "LOC Seconds Latitude" -msgstr "" - -msgid "Seconds Latitude" -msgstr "" - -msgid "LOC Direction Latitude" -msgstr "" - -msgid "Direction Latitude" -msgstr "" - -msgid "LOC Degrees Longitude" -msgstr "" - -msgid "Degrees Longitude" -msgstr "" - -msgid "LOC Minutes Longitude" -msgstr "" - -msgid "Minutes Longitude" -msgstr "" - -msgid "LOC Seconds Longitude" -msgstr "" - -msgid "Seconds Longitude" -msgstr "" - -msgid "LOC Direction Longitude" -msgstr "" - -msgid "Direction Longitude" -msgstr "" - -msgid "LOC Altitude" -msgstr "" - -msgid "Altitude" -msgstr "" - -msgid "LOC Size" -msgstr "" - -msgid "Size" -msgstr "" - -msgid "LOC Horizontal Precision" -msgstr "" - -msgid "Horizontal Precision" -msgstr "" - -msgid "LOC Vertical Precision" -msgstr "" - -msgid "Vertical Precision" -msgstr "" - -msgid "MX record" -msgstr "" - -msgid "Raw MX records" -msgstr "" - -msgid "MX Preference" -msgstr "" - -msgid "MX Exchanger" -msgstr "" - -msgid "A host willing to act as a mail exchanger" -msgstr "" - -msgid "NAPTR record" -msgstr "" - -msgid "Raw NAPTR records" -msgstr "" - -msgid "NAPTR Order" -msgstr "" - -msgid "Order" -msgstr "" - -msgid "NAPTR Preference" -msgstr "" - -msgid "Preference" -msgstr "" - -msgid "NAPTR Flags" -msgstr "" - -msgid "Flags" -msgstr "" - -msgid "NAPTR Service" -msgstr "" - -msgid "Service" -msgstr "" - -msgid "NAPTR Regular Expression" -msgstr "" - -msgid "Regular Expression" -msgstr "" - -msgid "NAPTR Replacement" -msgstr "" - -msgid "Replacement" -msgstr "" - -msgid "NS record" -msgstr "" - -msgid "Raw NS records" -msgstr "" - -msgid "NS Hostname" -msgstr "" - -msgid "NSEC record" -msgstr "" - -msgid "Raw NSEC records" -msgstr "" - -msgid "NSEC3 record" -msgstr "" - -msgid "Raw NSEC3 records" -msgstr "" - -msgid "PTR record" -msgstr "" - -msgid "Raw PTR records" -msgstr "" - -msgid "PTR Hostname" -msgstr "" - -msgid "The hostname this reverse record points to" -msgstr "" - -msgid "RRSIG record" -msgstr "" - -msgid "Raw RRSIG records" -msgstr "" - -msgid "RP record" -msgstr "" - -msgid "Raw RP records" -msgstr "" - -msgid "SIG record" -msgstr "" - -msgid "Raw SIG records" -msgstr "" - -msgid "SPF record" -msgstr "" - -msgid "Raw SPF records" -msgstr "" - -msgid "SRV record" -msgstr "" - -msgid "Raw SRV records" -msgstr "" - -msgid "SRV Priority" -msgstr "" - -msgid "Priority" -msgstr "" - -msgid "SRV Weight" -msgstr "" - -msgid "Weight" -msgstr "" - -msgid "SRV Port" -msgstr "" - -msgid "Port" -msgstr "" - -msgid "SRV Target" -msgstr "" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" - -msgid "SSHFP record" -msgstr "" - -msgid "Raw SSHFP records" -msgstr "" - -msgid "SSHFP Algorithm" -msgstr "" - -msgid "SSHFP Fingerprint Type" -msgstr "" - -msgid "Fingerprint Type" -msgstr "" - -msgid "SSHFP Fingerprint" -msgstr "" - -msgid "Fingerprint" -msgstr "" - -msgid "TA record" -msgstr "" - -msgid "Raw TA records" -msgstr "" - -msgid "TLSA record" -msgstr "" - -msgid "Raw TLSA records" -msgstr "" - -msgid "TLSA Certificate Usage" -msgstr "" - -msgid "Certificate Usage" -msgstr "" - -msgid "TLSA Selector" -msgstr "" - -msgid "Selector" -msgstr "" - -msgid "TLSA Matching Type" -msgstr "" - -msgid "Matching Type" -msgstr "" - -msgid "TLSA Certificate Association Data" -msgstr "" - -msgid "Certificate Association Data" -msgstr "" - -msgid "TKEY record" -msgstr "" - -msgid "Raw TKEY records" -msgstr "" - -msgid "TSIG record" -msgstr "" - -msgid "Raw TSIG records" -msgstr "" - -msgid "TXT record" -msgstr "" - -msgid "Raw TXT records" -msgstr "" - -msgid "TXT Text Data" -msgstr "" - -msgid "Text Data" -msgstr "" - -msgid "Authoritative nameserver" -msgstr "" - -msgid "Authoritative nameserver domain name" -msgstr "" - -msgid "Administrator e-mail address" -msgstr "" - -msgid "SOA serial" -msgstr "" - -msgid "SOA record serial number" -msgstr "" - -msgid "SOA refresh" -msgstr "" - -msgid "SOA record refresh time" -msgstr "" - -msgid "SOA retry" -msgstr "" - -msgid "SOA record retry time" -msgstr "" - -msgid "SOA expire" -msgstr "" - -msgid "SOA record expire time" -msgstr "" - -msgid "SOA minimum" -msgstr "" - -msgid "How long should negative responses be cached" -msgstr "" - -msgid "Time to live for records at zone apex" -msgstr "" - -msgid "BIND update policy" -msgstr "" - -msgid "Dynamic update" -msgstr "" - -msgid "Allow dynamic updates." -msgstr "" - -msgid "Allow query" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" - -msgid "Allow transfer" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" - -msgid "Allow in-line DNSSEC signing" -msgstr "" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "" - -msgid "NSEC3PARAM record" -msgstr "" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" - -msgid "Resolve a host name in DNS." -msgstr "" - -msgid "Modify global DNS configuration." -msgstr "" - -msgid "Show the current global DNS configuration." -msgstr "" - -msgid "Create new DNS forward zone." -msgstr "" - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" - -msgid "Permission value" -msgstr "" - -msgid "Delete DNS forward zone." -msgstr "" - -msgid "Disable DNS Forward Zone." -msgstr "" - -msgid "Enable DNS Forward Zone." -msgstr "" - -msgid "Search for DNS forward zones." -msgstr "" - -msgid "Modify DNS forward zone." -msgstr "" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" - -msgid "Display information about a DNS forward zone." -msgstr "" - -msgid "Add new DNS resource record." -msgstr "" - -msgid "Force" -msgstr "" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "" - -msgid "Structured" -msgstr "" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" - -msgid "Delete DNS resource record." -msgstr "" - -msgid "Delete all associated records" -msgstr "" - -msgid "Delete DNS record entry." -msgstr "" - -msgid "Search for DNS resources." -msgstr "" - -msgid "Modify a DNS resource record." -msgstr "" - -msgid "Rename the DNS resource record object" -msgstr "" - -msgid "Display DNS resource." -msgstr "" - -msgid "Create new DNS zone (SOA record)." -msgstr "" - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" - -msgid "Add a permission for per-zone access delegation." -msgstr "" - -msgid "Delete DNS zone (SOA record)." -msgstr "" - -msgid "Disable DNS Zone." -msgstr "" - -msgid "Enable DNS Zone." -msgstr "" - -msgid "Search for DNS zones (SOA records)." -msgstr "" - -msgid "Forward zones only" -msgstr "" - -msgid "Search for forward zones only" -msgstr "" - -msgid "Modify DNS zone (SOA record)." -msgstr "" - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" - -msgid "Remove a permission for per-zone access delegation." -msgstr "" - -msgid "Display information about a DNS zone (SOA record)." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "Group name" -msgstr "" - -msgid "Group description" -msgstr "" - -msgid "GID" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Member users" -msgstr "" - -msgid "Member groups" -msgstr "" - -msgid "Member of groups" -msgstr "" - -msgid "Roles" -msgstr "" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Suppress processing of membership attributes." -msgstr "" - -msgid "Add members to a group." -msgstr "" - -msgid "External member" -msgstr "" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -msgid "member group" -msgstr "" - -msgid "groups to add" -msgstr "" - -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - -msgid "Delete group." -msgstr "" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "user" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "group" -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "netgroup" -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "role" -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "HBAC rule" -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "sudo rule" -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Rule name" -msgstr "" - -msgid "Rule type" -msgstr "" - -msgid "Rule type (allow)" -msgstr "" - -msgid "User category" -msgstr "" - -msgid "User category the rule applies to" -msgstr "" - -msgid "Host category" -msgstr "" - -msgid "Host category the rule applies to" -msgstr "" - -msgid "Service category" -msgstr "" - -msgid "Service category the rule applies to" -msgstr "" - -msgid "Enabled" -msgstr "" - -msgid "User Groups" -msgstr "" - -msgid "Host Groups" -msgstr "" - -msgid "Services" -msgstr "" - -msgid "Service Groups" -msgstr "" - -msgid "External host" -msgstr "" - -msgid "Create a new HBAC rule." -msgstr "" - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "member host" -msgstr "" - -msgid "hosts to add" -msgstr "" - -msgid "member host group" -msgstr "" - -msgid "host groups to add" -msgstr "" - -msgid "Add services to an HBAC rule." -msgstr "" - -msgid "member HBAC service" -msgstr "" - -msgid "HBAC services to add" -msgstr "" - -msgid "member HBAC service group" -msgstr "" - -msgid "HBAC service groups to add" -msgstr "" - -msgid "Add users and groups to an HBAC rule." -msgstr "" - -msgid "Delete an HBAC rule." -msgstr "" - -msgid "Disable an HBAC rule." -msgstr "" - -msgid "Enable an HBAC rule." -msgstr "" - -msgid "Search for HBAC rules." -msgstr "" - -msgid "Modify an HBAC rule." -msgstr "" - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "hosts to remove" -msgstr "" - -msgid "host groups to remove" -msgstr "" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "" - -msgid "HBAC services to remove" -msgstr "" - -msgid "HBAC service groups to remove" -msgstr "" - -msgid "Remove users and groups from an HBAC rule." -msgstr "" - -msgid "Display the properties of an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" - -msgid "Service name" -msgstr "" - -msgid "HBAC service" -msgstr "" - -msgid "HBAC service description" -msgstr "" - -msgid "Member of HBAC service groups" -msgstr "" - -msgid "Add a new HBAC service." -msgstr "" - -msgid "Delete an existing HBAC service." -msgstr "" - -msgid "Search for HBAC services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" - -msgid "Modify an HBAC service." -msgstr "" - -msgid "Display information about an HBAC service." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "Service group name" -msgstr "" - -msgid "HBAC service group description" -msgstr "" - -msgid "Member HBAC service" -msgstr "" - -msgid "Add a new HBAC service group." -msgstr "" - -msgid "Add members to an HBAC service group." -msgstr "" - -msgid "Delete an HBAC service group." -msgstr "" - -msgid "Search for an HBAC service group." -msgstr "" - -msgid "Modify an HBAC service group." -msgstr "" - -msgid "Remove members from an HBAC service group." -msgstr "" - -msgid "Display information about an HBAC service group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -msgid "User name" -msgstr "" - -msgid "Target host" -msgstr "" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host name" -msgstr "" - -msgid "A description of this host" -msgstr "" - -msgid "Locality" -msgstr "" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "" - -msgid "Platform" -msgstr "" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "" - -msgid "Operating system" -msgstr "" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "" - -msgid "User password" -msgstr "" - -msgid "Password used in bulk enrollment" -msgstr "" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "" - -msgid "Random password" -msgstr "" - -msgid "Certificate" -msgstr "" - -msgid "Base-64 encoded server certificate" -msgstr "" - -msgid "Principal name" -msgstr "" - -msgid "MAC address" -msgstr "" - -msgid "Hardware MAC address(es) on this host" -msgstr "" - -msgid "SSH public key" -msgstr "" - -msgid "Class" -msgstr "" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "Assigned ID View" -msgstr "" - -msgid "Requires pre-authentication" -msgstr "" - -msgid "Pre-authentication is required for the service" -msgstr "" - -msgid "Trusted for delegation" -msgstr "" - -msgid "Client credentials may be delegated to the service" -msgstr "" - -msgid "Member of host-groups" -msgstr "" - -msgid "Indirect Member of host-group" -msgstr "" - -msgid "Keytab" -msgstr "" - -msgid "Managed by" -msgstr "" - -msgid "Managing" -msgstr "" - -msgid "Users allowed to retrieve keytab" -msgstr "" - -msgid "Groups allowed to retrieve keytab" -msgstr "" - -msgid "Hosts allowed to retrieve keytab" -msgstr "" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "" - -msgid "Users allowed to create keytab" -msgstr "" - -msgid "Groups allowed to create keytab" -msgstr "" - -msgid "Hosts allowed to create keytab" -msgstr "" - -msgid "Host Groups allowed to create keytab" -msgstr "" - -msgid "Add a new host." -msgstr "" - -msgid "force host name even if not in DNS" -msgstr "" - -msgid "skip reverse DNS detection" -msgstr "" - -msgid "Add the host to DNS with this IP address" -msgstr "" - -msgid "Add hosts that can manage this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" - -msgid "Delete a host." -msgstr "" - -msgid "Remove entries from DNS" -msgstr "" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" - -msgid "Search for hosts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" - -msgid "host group" -msgstr "" - -msgid "Search for hosts with these member of host groups." -msgstr "" - -msgid "Search for hosts without these member of host groups." -msgstr "" - -msgid "Search for hosts with these member of netgroups." -msgstr "" - -msgid "Search for hosts without these member of netgroups." -msgstr "" - -msgid "Search for hosts with these member of roles." -msgstr "" - -msgid "Search for hosts without these member of roles." -msgstr "" - -msgid "Search for hosts with these member of HBAC rules." -msgstr "" - -msgid "Search for hosts without these member of HBAC rules." -msgstr "" - -msgid "Search for hosts with these member of sudo rules." -msgstr "" - -msgid "Search for hosts without these member of sudo rules." -msgstr "" - -msgid "Search for hosts with these enrolled by users." -msgstr "" - -msgid "Search for hosts without these enrolled by users." -msgstr "" - -msgid "host" -msgstr "" - -msgid "Search for hosts with these managed by hosts." -msgstr "" - -msgid "Search for hosts without these managed by hosts." -msgstr "" - -msgid "Search for hosts with these managing hosts." -msgstr "" - -msgid "Search for hosts without these managing hosts." -msgstr "" - -msgid "Modify information about a host." -msgstr "" - -msgid "Kerberos principal name for this host" -msgstr "" - -msgid "Update DNS entries" -msgstr "" - -msgid "Remove hosts that can manage this host." -msgstr "" - -msgid "Display information about a host." -msgstr "" - -msgid "file to store certificate in" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "Host-group" -msgstr "" - -msgid "Name of host-group" -msgstr "" - -msgid "A description of this host-group" -msgstr "" - -msgid "Member hosts" -msgstr "" - -msgid "Member host-groups" -msgstr "" - -msgid "Indirect Member hosts" -msgstr "" - -msgid "Indirect Member host-groups" -msgstr "" - -msgid "Add a new hostgroup." -msgstr "" - -msgid "Add members to a hostgroup." -msgstr "" - -msgid "Delete a hostgroup." -msgstr "" - -msgid "Search for hostgroups." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" - -msgid "Search for host groups with these member hosts." -msgstr "" - -msgid "Search for host groups without these member hosts." -msgstr "" - -msgid "Search for host groups with these member host groups." -msgstr "" - -msgid "Search for host groups without these member host groups." -msgstr "" - -msgid "Search for host groups with these member of host groups." -msgstr "" - -msgid "Search for host groups without these member of host groups." -msgstr "" - -msgid "Search for host groups with these member of netgroups." -msgstr "" - -msgid "Search for host groups without these member of netgroups." -msgstr "" - -msgid "Search for host groups with these member of HBAC rules." -msgstr "" - -msgid "Search for host groups without these member of HBAC rules." -msgstr "" - -msgid "Search for host groups with these member of sudo rules." -msgstr "" - -msgid "Search for host groups without these member of sudo rules." -msgstr "" - -msgid "Modify a hostgroup." -msgstr "" - -msgid "Remove members from a hostgroup." -msgstr "" - -msgid "Display information about a hostgroup." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "Range name" -msgstr "" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -msgid "Anchor to override" -msgstr "" - -msgid "Group ID Number" -msgstr "" - -msgid "User login" -msgstr "" - -msgid "UID" -msgstr "" - -msgid "User ID Number" -msgstr "" - -msgid "GECOS" -msgstr "" - -msgid "Home directory" -msgstr "" - -msgid "Login shell" -msgstr "" - -msgid "ID View Name" -msgstr "" - -msgid "Add a new Group ID override." -msgstr "" - -msgid "Delete an Group ID override." -msgstr "" - -msgid "Search for an Group ID override." -msgstr "" - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" - -msgid "Modify an Group ID override." -msgstr "" - -msgid "Rename the Group ID override object" -msgstr "" - -msgid "Display information about an Group ID override." -msgstr "" - -msgid "Add a new User ID override." -msgstr "" - -msgid "Delete an User ID override." -msgstr "" - -msgid "Search for an User ID override." -msgstr "" - -msgid "Modify an User ID override." -msgstr "" - -msgid "Rename the User ID override object" -msgstr "" - -msgid "Display information about an User ID override." -msgstr "" - -msgid "Add a new ID View." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" - -msgid "hosts" -msgstr "" - -msgid "Hosts to apply the ID View to" -msgstr "" - -msgid "hostgroups" -msgstr "" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" - -msgid "Hosts that this ID View was applied to." -msgstr "" - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" - -msgid "Number of hosts the ID View was applied to:" -msgstr "" - -msgid "Delete an ID View." -msgstr "" - -msgid "Search for an ID View." -msgstr "" - -msgid "Modify an ID View." -msgstr "" - -msgid "Rename the ID View object" -msgstr "" - -msgid "Display information about an ID View." -msgstr "" - -msgid "Enumerate all the hosts the view applies to." -msgstr "" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" - -msgid "Hosts to clear (any) ID View from." -msgstr "" - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" - -msgid "Hosts that ID View was cleared from." -msgstr "" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" - -msgid "Dict of I18N messages" -msgstr "" - -msgid "Export plugin meta-data for the webUI." -msgstr "" - -msgid "Name of object to export" -msgstr "" - -msgid "Name of method to export" -msgstr "" - -msgid "Name of command to export" -msgstr "" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" - -msgid "Join an IPA domain" -msgstr "" - -msgid "The hostname to register as" -msgstr "" - -msgid "The IPA realm" -msgstr "" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "" - -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" - -msgid "Manage ticket policy for specific user" -msgstr "" - -msgid "Max life" -msgstr "" - -msgid "Maximum ticket life (seconds)" -msgstr "" - -msgid "Max renew" -msgstr "" - -msgid "Maximum renewable age (seconds)" -msgstr "" - -msgid "Modify Kerberos ticket policy." -msgstr "" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "" - -msgid "Display the current Kerberos ticket policy." -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," -"cn=accounts' --group-container='cn=groups,cn=accounts' " -"ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' --user-ignore-" -"objectclass=radiusprofile --user-ignore-" -"attribute=radiusgroupname ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -msgid "Migrate users and groups from DS to IPA." -msgstr "" - -msgid "LDAP URI" -msgstr "" - -msgid "LDAP URI of DS server to migrate from" -msgstr "" - -msgid "bind password" -msgstr "" - -msgid "Bind DN" -msgstr "" - -msgid "User container" -msgstr "" - -msgid "DN of container for users in DS relative to base DN" -msgstr "" - -msgid "Group container" -msgstr "" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "" - -msgid "User object class" -msgstr "" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "" - -msgid "Group object class" -msgstr "" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "" - -msgid "Ignore user object class" -msgstr "" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore user attribute" -msgstr "" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore group object class" -msgstr "" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "Ignore group attribute" -msgstr "" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "" - -msgid "Overwrite GID" -msgstr "" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" - -msgid "LDAP schema" -msgstr "" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" - -msgid "Continue" -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" - -msgid "Base DN" -msgstr "" - -msgid "Base DN on remote LDAP server" -msgstr "" - -msgid "Ignore compat plugin" -msgstr "" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" - -msgid "CA certificate" -msgstr "" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "" - -msgid "groups to exclude from migration" -msgstr "" - -msgid "users to exclude from migration" -msgstr "" - -msgid "Lists of objects migrated; categorized by type." -msgstr "" - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" - -msgid "False if migration mode was disabled." -msgstr "" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" - -msgid "Show environment variables." -msgstr "" - -msgid "Forward to server instead of running locally" -msgstr "" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Total number of variables env (>= count)" -msgstr "" - -msgid "Number of variables returned (<= total)" -msgstr "" - -msgid "Show all loaded plugins." -msgstr "" - -msgid "Dictionary mapping plugin names to bases" -msgstr "" - -#, fuzzy -msgid "Number of plugins loaded" -msgstr "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "Netgroup name" -msgstr "" - -msgid "Netgroup description" -msgstr "" - -msgid "NIS domain name" -msgstr "" - -msgid "IPA unique ID" -msgstr "" - -msgid "Member netgroups" -msgstr "" - -msgid "Indirect Member netgroups" -msgstr "" - -msgid "Member User" -msgstr "" - -msgid "Member Group" -msgstr "" - -msgid "Member Host" -msgstr "" - -msgid "Member Hostgroup" -msgstr "" - -msgid "Add a new netgroup." -msgstr "" - -msgid "Add members to a netgroup." -msgstr "" - -msgid "member netgroup" -msgstr "" - -msgid "netgroups to add" -msgstr "" - -msgid "Delete a netgroup." -msgstr "" - -msgid "Search for a netgroup." -msgstr "" - -msgid "search for managed groups" -msgstr "" - -msgid "Search for netgroups with these member netgroups." -msgstr "" - -msgid "Search for netgroups without these member netgroups." -msgstr "" - -msgid "Search for netgroups with these member users." -msgstr "" - -msgid "Search for netgroups without these member users." -msgstr "" - -msgid "Search for netgroups with these member groups." -msgstr "" - -msgid "Search for netgroups without these member groups." -msgstr "" - -msgid "Search for netgroups with these member hosts." -msgstr "" - -msgid "Search for netgroups without these member hosts." -msgstr "" - -msgid "Search for netgroups with these member host groups." -msgstr "" - -msgid "Search for netgroups without these member host groups." -msgstr "" - -msgid "Search for netgroups with these member of netgroups." -msgstr "" - -msgid "Search for netgroups without these member of netgroups." -msgstr "" - -msgid "Modify a netgroup." -msgstr "" - -msgid "Remove members from a netgroup." -msgstr "" - -msgid "netgroups to remove" -msgstr "" - -msgid "Display information about a netgroup." -msgstr "" - -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" - -msgid "TOTP authentication Window" -msgstr "" - -msgid "TOTP authentication time variance (seconds)" -msgstr "" - -msgid "TOTP Synchronization Window" -msgstr "" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "" - -msgid "HOTP Authentication Window" -msgstr "" - -msgid "HOTP authentication skip-ahead" -msgstr "" - -msgid "HOTP Synchronization Window" -msgstr "" - -msgid "HOTP synchronization skip-ahead" -msgstr "" - -msgid "Modify OTP configuration options." -msgstr "" - -msgid "Show the current OTP configuration." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -msgid "Serial" -msgstr "" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "Set a user's password." -msgstr "" - -msgid "New Password" -msgstr "" - -msgid "Current Password" -msgstr "" - -msgid "OTP" -msgstr "" - -msgid "One Time Password" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -"\n" -"Managed permissions\n" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "Permission name" -msgstr "" - -msgid "Granted rights" -msgstr "" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" - -msgid "Effective attributes" -msgstr "" - -msgid "All attributes to which the permission applies" -msgstr "" - -msgid "Included attributes" -msgstr "" - -msgid "User-specified attributes to which the permission applies" -msgstr "" - -msgid "Excluded attributes" -msgstr "" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" - -msgid "Default attributes" -msgstr "" - -msgid "Attributes to which the permission applies by default" -msgstr "" - -#, fuzzy -msgid "Bind rule type" -msgstr "ভুল প্রকার" - -msgid "Subtree to apply permissions to" -msgstr "" - -msgid "Extra target filter" -msgstr "" - -msgid "Raw target filter" -msgstr "" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" - -msgid "Target DN" -msgstr "" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" - -msgid "Member of group" -msgstr "" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "" - -msgid "User group to apply permissions to (sets target)" -msgstr "" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "" - -msgid "Deprecated; use extratargetfilter" -msgstr "" - -msgid "Deprecated; use ipapermlocation" -msgstr "" - -msgid "Deprecated; use ipapermright" -msgstr "" - -msgid "Granted to Privilege" -msgstr "" - -msgid "Indirect Member of roles" -msgstr "" - -msgid "Add a new permission." -msgstr "" - -msgid "Add members to a permission." -msgstr "" - -msgid "member privilege" -msgstr "" - -msgid "privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "" - -msgid "Permission flags" -msgstr "" - -msgid "Delete a permission." -msgstr "" - -msgid "force delete of SYSTEM permissions" -msgstr "" - -msgid "Search for permissions." -msgstr "" - -msgid "Modify a permission." -msgstr "" - -msgid "Rename the permission object" -msgstr "" - -msgid "Remove members from a permission." -msgstr "" - -msgid "privileges to remove" -msgstr "" - -msgid "Display information about a permission." -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "Ping a remote server." -msgstr "" - -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "" - -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" - -msgid "Privilege name" -msgstr "" - -msgid "Privilege description" -msgstr "" - -msgid "Granting privilege to roles" -msgstr "" - -msgid "Add a new privilege." -msgstr "" - -msgid "Add members to a privilege." -msgstr "" - -msgid "member role" -msgstr "" - -msgid "roles to add" -msgstr "" - -msgid "Add permissions to a privilege." -msgstr "" - -msgid "permission" -msgstr "" - -msgid "permissions" -msgstr "" - -msgid "Number of permissions added" -msgstr "" - -msgid "Delete a privilege." -msgstr "" - -msgid "Search for privileges." -msgstr "" - -msgid "Modify a privilege." -msgstr "" - -msgid "Rename the privilege object" -msgstr "" - -msgid "Remove members from a privilege" -msgstr "" - -msgid "roles to remove" -msgstr "" - -msgid "Remove permissions from a privilege." -msgstr "" - -msgid "Number of permissions removed" -msgstr "" - -msgid "Display information about a privilege." -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Group" -msgstr "" - -msgid "Manage password policy for specific group" -msgstr "" - -msgid "Max lifetime (days)" -msgstr "" - -msgid "Maximum password lifetime (in days)" -msgstr "" - -msgid "Min lifetime (hours)" -msgstr "" - -msgid "Minimum password lifetime (in hours)" -msgstr "" - -msgid "History size" -msgstr "" - -msgid "Password history size" -msgstr "" - -msgid "Character classes" -msgstr "" - -msgid "Minimum number of character classes" -msgstr "" - -msgid "Min length" -msgstr "" - -msgid "Minimum length of password" -msgstr "" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "" - -msgid "Max failures" -msgstr "" - -msgid "Consecutive failures before lockout" -msgstr "" - -msgid "Failure reset interval" -msgstr "" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "" - -msgid "Lockout duration" -msgstr "" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" - -msgid "Add a new group password policy." -msgstr "" - -msgid "Delete a group password policy." -msgstr "" - -msgid "Search for group password policies." -msgstr "" - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" - -msgid "Modify a group password policy." -msgstr "" - -msgid "Display information about password policy." -msgstr "" - -msgid "User" -msgstr "" - -msgid "Display effective policy for a specific user" -msgstr "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "RADIUS proxy server name" -msgstr "" - -msgid "A description of this RADIUS proxy server" -msgstr "" - -msgid "Server" -msgstr "" - -msgid "The hostname or IP (with or without port)" -msgstr "" - -msgid "Secret" -msgstr "" - -msgid "The secret used to encrypt data" -msgstr "" - -msgid "Timeout" -msgstr "" - -msgid "The total timeout across all retries (in seconds)" -msgstr "" - -msgid "Retries" -msgstr "" - -msgid "The number of times to retry authentication" -msgstr "" - -msgid "User attribute" -msgstr "" - -msgid "The username attribute on the user object" -msgstr "" - -msgid "Add a new RADIUS proxy server." -msgstr "" - -msgid "Delete a RADIUS proxy server." -msgstr "" - -msgid "Search for RADIUS proxy servers." -msgstr "" - -msgid "Modify a RADIUS proxy server." -msgstr "" - -msgid "Rename the RADIUS proxy server object" -msgstr "" - -msgid "Display information about a RADIUS proxy server." -msgstr "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Domain" -msgstr "" - -msgid "Add domain" -msgstr "" - -msgid "Delete domain" -msgstr "" - -msgid "Modify realm domains." -msgstr "" - -msgid "Force adding domain even if not in DNS" -msgstr "" - -msgid "Display the list of realm domains." -msgstr "" - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" - -msgid "Role name" -msgstr "" - -msgid "A description of this role-group" -msgstr "" - -msgid "Privileges" -msgstr "" - -msgid "Member services" -msgstr "" - -msgid "Add a new role." -msgstr "" - -msgid "Add members to a role." -msgstr "" - -msgid "member service" -msgstr "" - -msgid "services to add" -msgstr "" - -msgid "Add privileges to a role." -msgstr "" - -msgid "privilege" -msgstr "" - -msgid "privileges" -msgstr "" - -msgid "Number of privileges added" -msgstr "" - -msgid "Delete a role." -msgstr "" - -msgid "Search for roles." -msgstr "" - -msgid "Modify a role." -msgstr "" - -msgid "Rename the role object" -msgstr "" - -msgid "Remove members from a role." -msgstr "" - -msgid "services to remove" -msgstr "" - -msgid "Remove privileges from a role." -msgstr "" - -msgid "Number of privileges removed" -msgstr "" - -msgid "Display information about a role." -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "Self-service name" -msgstr "" - -msgid "Attributes to which the permission applies." -msgstr "" - -msgid "Add a new self-service permission." -msgstr "" - -msgid "Delete a self-service permission." -msgstr "" - -msgid "Search for a self-service permission." -msgstr "" - -msgid "Modify a self-service permission." -msgstr "" - -msgid "Display information about a self-service permission." -msgstr "" - -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" - -msgid "SELinux User" -msgstr "" - -msgid "HBAC Rule" -msgstr "" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "" - -msgid "Create a new SELinux User Map." -msgstr "" - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "" - -msgid "Delete a SELinux User Map." -msgstr "" - -msgid "Disable an SELinux User Map rule." -msgstr "" - -msgid "Enable an SELinux User Map rule." -msgstr "" - -msgid "Search for SELinux User Maps." -msgstr "" - -msgid "Modify a SELinux User Map." -msgstr "" - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "" - -msgid "Display the properties of a SELinux User Map rule." -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "Service principal" -msgstr "" - -msgid "PAC type" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" - -msgid "Add a new IPA new service." -msgstr "" - -msgid "force principal name even if not in DNS" -msgstr "" - -msgid "Add hosts that can manage this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Delete an IPA service." -msgstr "" - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Search for IPA services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" - -msgid "Search for services with these managed by hosts." -msgstr "" - -msgid "Search for services without these managed by hosts." -msgstr "" - -msgid "Modify an existing IPA service." -msgstr "" - -msgid "Remove hosts that can manage this service." -msgstr "" - -msgid "Display information about an IPA service." -msgstr "" - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" - -msgid "Sudo Command" -msgstr "" - -msgid "A description of this command" -msgstr "" - -msgid "Sudo Command Groups" -msgstr "" - -msgid "Create new Sudo Command." -msgstr "" - -msgid "Delete Sudo Command." -msgstr "" - -msgid "Search for Sudo Commands." -msgstr "" - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" - -msgid "Modify Sudo Command." -msgstr "" - -msgid "Display Sudo Command." -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "Sudo Command Group" -msgstr "" - -msgid "Commands" -msgstr "" - -msgid "Member Sudo commands" -msgstr "" - -msgid "Create new Sudo Command Group." -msgstr "" - -msgid "Add members to Sudo Command Group." -msgstr "" - -msgid "member sudo command" -msgstr "" - -msgid "sudo commands to add" -msgstr "" - -msgid "Delete Sudo Command Group." -msgstr "" - -msgid "Search for Sudo Command Groups." -msgstr "" - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" - -msgid "Modify Sudo Command Group." -msgstr "" - -msgid "Remove members from Sudo Command Group." -msgstr "" - -msgid "sudo commands to remove" -msgstr "" - -msgid "Display Sudo Command Group." -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -msgid "Domain name" -msgstr "" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "" - -msgid "Last name" -msgstr "" - -msgid "Full name" -msgstr "" - -msgid "Display name" -msgstr "" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Email address" -msgstr "" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -msgid "Pager Number" -msgstr "" - -msgid "Fax Number" -msgstr "" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Car License" -msgstr "" - -#, fuzzy -msgid "Account disabled" -msgstr "%(count)d ভেরিয়াবেল" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "" - -msgid "RADIUS proxy username" -msgstr "" - -msgid "Department Number" -msgstr "" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -msgid "Delete a user." -msgstr "" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "Command category" -msgstr "" - -msgid "Command category the rule applies to" -msgstr "" - -msgid "RunAs User category" -msgstr "" - -msgid "RunAs User category the rule applies to" -msgstr "" - -msgid "RunAs Group category" -msgstr "" - -msgid "RunAs Group category the rule applies to" -msgstr "" - -msgid "Sudo order" -msgstr "" - -msgid "integer to order the Sudo rules" -msgstr "" - -msgid "External User" -msgstr "" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -msgid "Host Masks" -msgstr "" - -msgid "Sudo Allow Commands" -msgstr "" - -msgid "Sudo Deny Commands" -msgstr "" - -msgid "Sudo Allow Command Groups" -msgstr "" - -msgid "Sudo Deny Command Groups" -msgstr "" - -msgid "RunAs Users" -msgstr "" - -msgid "Run as a user" -msgstr "" - -msgid "Groups of RunAs Users" -msgstr "" - -msgid "Run as any user within a specified group" -msgstr "" - -msgid "RunAs External User" -msgstr "" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -msgid "External Groups of RunAs Users" -msgstr "" - -msgid "External Groups of users that the command can run as" -msgstr "" - -msgid "RunAs Groups" -msgstr "" - -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -msgid "RunAs External Group" -msgstr "" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -msgid "Sudo Option" -msgstr "" - -msgid "Create new Sudo Rule." -msgstr "" - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "member sudo command group" -msgstr "" - -msgid "sudo command groups to add" -msgstr "" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "" - -msgid "Add group for Sudo to execute as." -msgstr "" - -msgid "Add users and groups for Sudo to execute as." -msgstr "" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "" - -msgid "Delete Sudo Rule." -msgstr "" - -msgid "Disable a Sudo Rule." -msgstr "" - -msgid "Enable a Sudo Rule." -msgstr "" - -msgid "Search for Sudo Rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -msgid "Modify Sudo Rule." -msgstr "" - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "sudo command groups to remove" -msgstr "" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "Remove an option from Sudo Rule." -msgstr "" - -msgid "Remove group for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "" - -msgid "Display Sudo Rule." -msgstr "" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "ACL name" -msgstr "" - -msgid "Profile category" -msgstr "" - -msgid "Profile category the ACL applies to" -msgstr "" - -msgid "User category the ACL applies to" -msgstr "" - -msgid "Host category the ACL applies to" -msgstr "" - -msgid "Service category the ACL applies to" -msgstr "" - -msgid "Profiles" -msgstr "" - -msgid "Create a new CA ACL." -msgstr "" - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "" - -msgid "Add profiles to a CA ACL." -msgstr "" - -msgid "member Certificate Profile" -msgstr "" - -msgid "Certificate Profiles to add" -msgstr "" - -msgid "Add services to a CA ACL." -msgstr "" - -msgid "Add users and groups to a CA ACL." -msgstr "" - -msgid "Delete a CA ACL." -msgstr "" - -msgid "Disable a CA ACL." -msgstr "" - -msgid "Enable a CA ACL." -msgstr "" - -msgid "Search for CA ACLs." -msgstr "" - -msgid "Modify a CA ACL." -msgstr "" - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "" - -msgid "Remove profiles from a CA ACL." -msgstr "" - -msgid "Certificate Profiles to remove" -msgstr "" - -msgid "Remove services from a CA ACL." -msgstr "" - -msgid "Remove users and groups from a CA ACL." -msgstr "" - -msgid "Display the properties of a CA ACL." -msgstr "" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" - -msgid "Query current Domain Level." -msgstr "" - -msgid "Current domain level:" -msgstr "" - -msgid "Change current Domain Level." -msgstr "" - -msgid "Domain Level" -msgstr "" - -msgid "Add certificates to host entry" -msgstr "" - -msgid "Remove certificates from host entry" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "Fallback to AD DC LDAP" -msgstr "" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" - -msgid "Add to default group" -msgstr "" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" - -msgid "Search scope" -msgstr "" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Target DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" - -msgid "Origin DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "Server name" -msgstr "" - -msgid "IPA server hostname" -msgstr "" - -msgid "Managed suffix" -msgstr "" - -msgid "Min domain level" -msgstr "" - -msgid "Minimum domain level" -msgstr "" - -msgid "Max domain level" -msgstr "" - -msgid "Maximum domain level" -msgstr "" - -msgid "Delete IPA server." -msgstr "" - -msgid "Search for IPA servers." -msgstr "" - -msgid "Show IPA server." -msgstr "" - -msgid "Add new certificates to a service" -msgstr "" - -msgid "Remove certificates from a service" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed Target" -msgstr "" - -msgid "Create a new service delegation rule." -msgstr "" - -msgid "Add member to a named service delegation rule." -msgstr "" - -msgid "member principal" -msgstr "" - -msgid "principal to add" -msgstr "" - -msgid "Add target to a named service delegation rule." -msgstr "" - -msgid "member service delegation target" -msgstr "" - -msgid "service delegation targets to add" -msgstr "" - -msgid "Delete service delegation." -msgstr "" - -msgid "Search for service delegations rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" - -msgid "Remove member from a named service delegation rule." -msgstr "" - -msgid "principal to remove" -msgstr "" - -msgid "Remove target from a named service delegation rule." -msgstr "" - -msgid "service delegation targets to remove" -msgstr "" - -msgid "Display information about a named service delegation rule." -msgstr "" - -msgid "Create a new service delegation target." -msgstr "" - -msgid "Add member to a named service delegation target." -msgstr "" - -msgid "Delete service delegation target." -msgstr "" - -msgid "Search for service delegation target." -msgstr "" - -msgid "Remove member from a named service delegation target." -msgstr "" - -msgid "Display information about a named service delegation target." -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" - -msgid "Activate a stage user." -msgstr "" - -msgid "Add a new stage user." -msgstr "" - -msgid "Create Stage user in from a delete user" -msgstr "" - -msgid "Delete a stage user." -msgstr "" - -msgid "Search for stage users." -msgstr "" - -msgid "Search for stage users with these member of groups." -msgstr "" - -msgid "Search for stage users without these member of groups." -msgstr "" - -msgid "Search for stage users with these member of netgroups." -msgstr "" - -msgid "Search for stage users without these member of netgroups." -msgstr "" - -msgid "Search for stage users with these member of roles." -msgstr "" - -msgid "Search for stage users without these member of roles." -msgstr "" - -msgid "Search for stage users with these member of HBAC rules." -msgstr "" - -msgid "Search for stage users without these member of HBAC rules." -msgstr "" - -msgid "Search for stage users with these member of sudo rules." -msgstr "" - -msgid "Search for stage users without these member of sudo rules." -msgstr "" - -msgid "Modify a stage user." -msgstr "" - -msgid "Rename the stage user object" -msgstr "" - -msgid "Display information about a stage user." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" - -msgid "Segment name" -msgstr "" - -msgid "Arbitrary string identifying the segment" -msgstr "" - -msgid "Left node" -msgstr "" - -msgid "Left replication node - an IPA server" -msgstr "" - -msgid "Right node" -msgstr "" - -msgid "Right replication node - an IPA server" -msgstr "" - -msgid "Connectivity" -msgstr "" - -msgid "Direction of replication between left and right replication node" -msgstr "" - -msgid "Attributes to strip" -msgstr "" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" - -msgid "Attributes to replicate" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" - -msgid "Attributes for total update" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" - -msgid "Session timeout" -msgstr "" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" - -msgid "Replication agreement enabled" -msgstr "" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" - -msgid "Suffix name" -msgstr "" - -msgid "LDAP suffix to be managed" -msgstr "" - -msgid "Add a new segment." -msgstr "" - -msgid "Delete a segment." -msgstr "" - -msgid "Search for topology segments." -msgstr "" - -msgid "Modify a segment." -msgstr "" - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" - -msgid "Initialize left node" -msgstr "" - -msgid "Initialize right node" -msgstr "" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "" - -msgid "Display a segment." -msgstr "" - -msgid "Add a new topology suffix to be managed." -msgstr "" - -msgid "Delete a topology suffix." -msgstr "" - -msgid "Search for topology suffices." -msgstr "" - -msgid "Modify a topology suffix." -msgstr "" - -msgid "Show managed suffix." -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "Preserved user" -msgstr "" - -msgid "Add one or more certificates to the user entry" -msgstr "" - -msgid "Remove one or more certificates to the user entry" -msgstr "" - -msgid "Move deleted user into staged area" -msgstr "" - -msgid "Undelete a delete user account." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "Vault name" -msgstr "" - -msgid "Vault description" -msgstr "" - -msgid "Vault type" -msgstr "" - -msgid "Salt" -msgstr "" - -msgid "Vault salt" -msgstr "" - -msgid "Public key" -msgstr "" - -msgid "Vault public key" -msgstr "" - -msgid "Owner users" -msgstr "" - -msgid "Owner groups" -msgstr "" - -msgid "Owner services" -msgstr "" - -msgid "Failed owners" -msgstr "" - -msgid "Vault service" -msgstr "" - -msgid "Shared vault" -msgstr "" - -msgid "Vault user" -msgstr "" - -msgid "Transport Certificate" -msgstr "" - -msgid "Service name of the service vault" -msgstr "" - -msgid "Username of the user vault" -msgstr "" - -msgid "Add members to a vault." -msgstr "" - -msgid "Add owners to a vault." -msgstr "" - -msgid "owner user" -msgstr "" - -msgid "owner group" -msgstr "" - -msgid "owner service" -msgstr "" - -msgid "Owners that could not be added" -msgstr "" - -msgid "Number of owners added" -msgstr "" - -msgid "Session key wrapped with transport certificate" -msgstr "" - -msgid "Vault data encrypted with session key" -msgstr "" - -msgid "Nonce" -msgstr "" - -msgid "Delete a vault." -msgstr "" - -msgid "Search for vaults." -msgstr "" - -msgid "List all service vaults" -msgstr "" - -msgid "List all user vaults" -msgstr "" - -msgid "Remove members from a vault." -msgstr "" - -msgid "Remove owners from a vault." -msgstr "" - -msgid "Owners that could not be removed" -msgstr "" - -msgid "Number of owners removed" -msgstr "" - -msgid "Display information about a vault." -msgstr "" - -msgid "Show vault configuration." -msgstr "" - -msgid "Output file to store the transport certificate" -msgstr "" - -msgid "Add owners to a vault container." -msgstr "" - -msgid "Delete a vault container." -msgstr "" - -msgid "Remove owners from a vault container." -msgstr "" - -msgid "Display information about a vault container." -msgstr "" - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "" - -msgid "Hostname (FQDN)" -msgstr "" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Managed suffixes" -msgstr "" - -msgid "Check connection to remote IPA server." -msgstr "" - -msgid "Remote server name" -msgstr "" - -msgid "Remote IPA server hostname" -msgstr "" - -msgid "suffix" -msgstr "" - -msgid "Search for servers with these managed suffixes." -msgstr "" - -msgid "Search for servers without these managed suffixes." -msgstr "" - -msgid "Add a manager to the stage user entry" -msgstr "" - -msgid "Remove a manager to the stage user entry" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -msgid "Managed LDAP suffix DN" -msgstr "" - -msgid "Search for topology suffixes." -msgstr "" - -msgid "Add a manager to the user entry" -msgstr "" - -msgid "Remove a manager to the user entry" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Comma-separated list of attributes" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" - -msgid "DNS class" -msgstr "" - -msgid "Comma-separated list of raw A records" -msgstr "" - -msgid "Comma-separated list of raw AAAA records" -msgstr "" - -msgid "Comma-separated list of raw A6 records" -msgstr "" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "" - -msgid "Comma-separated list of raw APL records" -msgstr "" - -msgid "Comma-separated list of raw CERT records" -msgstr "" - -msgid "Comma-separated list of raw CNAME records" -msgstr "" - -msgid "Comma-separated list of raw DHCID records" -msgstr "" - -msgid "Comma-separated list of raw DLV records" -msgstr "" - -msgid "Comma-separated list of raw DNAME records" -msgstr "" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "" - -msgid "Comma-separated list of raw DS records" -msgstr "" - -msgid "Comma-separated list of raw HIP records" -msgstr "" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "" - -msgid "Comma-separated list of raw KEY records" -msgstr "" - -msgid "KEY Flags" -msgstr "" - -msgid "KEY Protocol" -msgstr "" - -msgid "Protocol" -msgstr "" - -msgid "KEY Algorithm" -msgstr "" - -msgid "KEY Public Key" -msgstr "" - -msgid "Public Key" -msgstr "" - -msgid "Comma-separated list of raw KX records" -msgstr "" - -msgid "Comma-separated list of raw LOC records" -msgstr "" - -msgid "Comma-separated list of raw MX records" -msgstr "" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "" - -msgid "Comma-separated list of raw NS records" -msgstr "" - -msgid "Comma-separated list of raw NSEC records" -msgstr "" - -msgid "NSEC Next Domain Name" -msgstr "" - -msgid "Next Domain Name" -msgstr "" - -msgid "NSEC Type Map" -msgstr "" - -msgid "Type Map" -msgstr "" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "" - -msgid "Comma-separated list of raw PTR records" -msgstr "" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "" - -msgid "RRSIG Type Covered" -msgstr "" - -msgid "Type Covered" -msgstr "" - -msgid "RRSIG Algorithm" -msgstr "" - -msgid "RRSIG Labels" -msgstr "" - -msgid "Labels" -msgstr "" - -msgid "RRSIG Original TTL" -msgstr "" - -msgid "Original TTL" -msgstr "" - -msgid "RRSIG Signature Expiration" -msgstr "" - -msgid "Signature Expiration" -msgstr "" - -msgid "RRSIG Signature Inception" -msgstr "" - -msgid "Signature Inception" -msgstr "" - -msgid "RRSIG Key Tag" -msgstr "" - -msgid "RRSIG Signer's Name" -msgstr "" - -msgid "Signer's Name" -msgstr "" - -msgid "RRSIG Signature" -msgstr "" - -msgid "Signature" -msgstr "" - -msgid "Comma-separated list of raw RP records" -msgstr "" - -msgid "Comma-separated list of raw SIG records" -msgstr "" - -msgid "SIG Type Covered" -msgstr "" - -msgid "SIG Algorithm" -msgstr "" - -msgid "SIG Labels" -msgstr "" - -msgid "SIG Original TTL" -msgstr "" - -msgid "SIG Signature Expiration" -msgstr "" - -msgid "SIG Signature Inception" -msgstr "" - -msgid "SIG Key Tag" -msgstr "" - -msgid "SIG Signer's Name" -msgstr "" - -msgid "SIG Signature" -msgstr "" - -msgid "Comma-separated list of raw SPF records" -msgstr "" - -msgid "Comma-separated list of raw SRV records" -msgstr "" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "" - -msgid "Comma-separated list of raw TA records" -msgstr "" - -msgid "Comma-separated list of raw TKEY records" -msgstr "" - -msgid "Comma-separated list of raw TSIG records" -msgstr "" - -msgid "Comma-separated list of raw TXT records" -msgstr "" - -msgid "SOA time to live" -msgstr "" - -msgid "SOA record time to live" -msgstr "" - -msgid "SOA class" -msgstr "" - -msgid "SOA record class" -msgstr "" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" - -msgid "Consume an entitlement." -msgstr "" - -msgid "Quantity" -msgstr "" - -msgid "Search for entitlement accounts." -msgstr "" - -msgid "Retrieve the entitlement certs." -msgstr "" - -msgid "Import an entitlement certificate." -msgstr "" - -msgid "UUID" -msgstr "" - -msgid "Enrollment UUID" -msgstr "" - -msgid "Register to the entitlement system." -msgstr "" - -msgid "Username" -msgstr "" - -msgid "Enrollment UUID (not implemented)" -msgstr "" - -msgid "Registration password" -msgstr "" - -msgid "Display current entitlements." -msgstr "" - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" - -msgid "comma-separated list of users to add" -msgstr "" - -msgid "comma-separated list of groups to add" -msgstr "" - -msgid "comma-separated list of users to remove" -msgstr "" - -msgid "comma-separated list of groups to remove" -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Source host category" -msgstr "" - -msgid "Source host category the rule applies to" -msgstr "" - -msgid "Source Hosts" -msgstr "" - -msgid "Source Host Groups" -msgstr "" - -msgid "comma-separated list of hosts to add" -msgstr "" - -msgid "comma-separated list of host groups to add" -msgstr "" - -msgid "comma-separated list of HBAC services to add" -msgstr "" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "" - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "" - -msgid "comma-separated list of hosts to remove" -msgstr "" - -msgid "comma-separated list of host groups to remove" -msgstr "" - -msgid "comma-separated list of HBAC services to remove" -msgstr "" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" - -msgid "Source host" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "comma-separated list of netgroups to add" -msgstr "" - -msgid "comma-separated list of netgroups to remove" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" - -msgid "Target members of a group" -msgstr "" - -msgid "User group to apply permissions to" -msgstr "" - -msgid "comma-separated list of privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI" -msgstr "" - -msgid "Permission type" -msgstr "" - -msgid "comma-separated list of privileges to remove" -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "comma-separated list of roles to add" -msgstr "" - -msgid "comma-separated list of permissions" -msgstr "" - -msgid "comma-separated list of roles to remove" -msgstr "" - -msgid "comma-separated list of privileges" -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "comma-separated list of sudo commands to add" -msgstr "" - -msgid "comma-separated list of sudo commands to remove" -msgstr "" - -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" - -msgid "comma-separated list of sudo command groups to add" -msgstr "" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "" - -msgid "Failed members" -msgstr "" - -msgid "Failed source hosts/hostgroups" -msgstr "" - -msgid "Failed hosts/hostgroups" -msgstr "" - -msgid "Failed users/groups" -msgstr "" - -msgid "Failed service/service groups" -msgstr "" - -msgid "Failed to remove" -msgstr "" - -msgid "Failed RunAs" -msgstr "" - -msgid "Failed RunAsGroup" -msgstr "" - -msgid "Failed profiles" -msgstr "" - -msgid "Failed CAs" -msgstr "" - -msgid "Failed member manager" -msgstr "" - -msgid "Failed managedby" -msgstr "" - -msgid "Failed allowed to retrieve keytab" -msgstr "" - -msgid "Failed allowed to create keytab" -msgstr "" - -msgid "Failed targets" -msgstr "" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "" - -msgid "an internal error has occurred" -msgstr "" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "" - -msgid "did not receive Kerberos credentials" -msgstr "" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -msgid "No credentials cache found" -msgstr "" - -msgid "Ticket expired" -msgstr "" - -msgid "Credentials cache permissions incorrect" -msgstr "" - -msgid "Bad format in credentials cache" -msgstr "" - -msgid "Cannot resolve KDC for requested realm" -msgstr "" - -msgid "Session error" -msgstr "" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#, python-format -msgid "'%(name)s' is required" -msgstr "" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - -msgid "Passwords do not match" -msgstr "পাসওয়ার্ড দুটি মিলছে না" - -msgid "Command not implemented" -msgstr "" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -#, python-format -msgid "%(reason)s" -msgstr "" - -msgid "This entry already exists" -msgstr "" - -msgid "You must enroll a host in order to create a host service" -msgstr "" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" - -msgid "This command requires root access" -msgstr "" - -msgid "This is already a posix group" -msgstr "একটি পসিক্স (posix) গ্রুপ আগে থেকে উপস্থিত" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -msgid "This entry is already enabled" -msgstr "" - -msgid "This entry is already disabled" -msgstr "" - -msgid "This entry cannot be enabled or disabled" -msgstr "" - -msgid "This entry is not a member" -msgstr "" - -msgid "A group may not be a member of itself" -msgstr "" - -#, fuzzy -msgid "This entry is already a member" -msgstr "একটি পসিক্স (posix) গ্রুপ আগে থেকে উপস্থিত" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "" - -msgid "A group may not be added as a member of itself" -msgstr "" - -msgid "The default users group cannot be removed" -msgstr "" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -msgid "This group already allows external members" -msgstr "" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "change collided with another change" -msgstr "" - -msgid "no modifications to be performed" -msgstr "" - -#, fuzzy, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(info)s" - -msgid "limits exceeded for this query" -msgstr "" - -#, python-format -msgid "%(info)s" -msgstr "%(info)s" - -msgid "modifying primary key is not allowed" -msgstr "" - -#, fuzzy, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "কেবলমাত্র একটি মান অনুমদিত" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "" - -msgid "Already registered" -msgstr "" - -msgid "Not registered yet" -msgstr "" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, python-format -msgid "%(exception)s" -msgstr "" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d ভেরিয়াবেল" - #, python-format msgid "%(count)d plugin loaded" msgid_plural "%(count)d plugins loaded" msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgid "A dictionary representing an LDAP entry" -msgstr "" - -msgid "A list of LDAP entries" -msgstr "" - -msgid "All commands should at least have a result" -msgstr "" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "" - -#, fuzzy -msgid "Passwords do not match!" -msgstr "পাসওয়ার্ড দুটি মিলছে না" - -msgid "No matching entries found" -msgstr "" - -msgid "Topic or Command" -msgstr "" - -msgid "The topic or command name." -msgstr "" - -msgid "Topic commands:" -msgstr "" - -msgid "To get command help, use:" -msgstr "" - -msgid " ipa --help" -msgstr "" - -msgid "Command name" -msgstr "" - -msgid "Positional arguments" -msgstr "" - -#, python-format -msgid "Same as --%s" -msgstr "" - -msgid "Deprecated options" -msgstr "" - -msgid "No file to read" -msgstr "" - -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - -#, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - -msgid "Filename is empty" -msgstr "" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -msgid "invalid domain name" -msgstr "" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "incorrect type" -msgstr "ভুল প্রকার" - -msgid "Only one value is allowed" -msgstr "কেবলমাত্র একটি মান অনুমদিত" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "" - -#, fuzzy -msgid "must be an integer" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -#, fuzzy, python-format -msgid "must be at least %(minvalue)d" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -msgid "must be a decimal number" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -#, fuzzy, python-format -msgid "must be at least %(minvalue)s" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -msgid "must be binary data" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -#, fuzzy -msgid "must be a certificate" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -msgid "must be a certificate signing request" -msgstr "" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "" - -msgid "Leading and trailing spaces are not allowed" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "" - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "" - -#, fuzzy, python-format -msgid "must be '%(value)s'" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "must be one of %(values)s" -msgstr "" - -#, fuzzy -msgid "must be datetime value" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -#, fuzzy -msgid "must be DNS name" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -#, fuzzy -msgid "must be absolute" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -msgid "must be relative" -msgstr "" - -#, fuzzy -msgid "must be dictionary" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -msgid "must be Kerberos principal" -msgstr "" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -msgid "Service principal is required" -msgstr "" - -#, fuzzy -msgid "must be at least 0" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -msgid "invalid valid hex" -msgstr "" - -#, fuzzy -msgid "invalid serial number 0" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "" - -#, python-format -msgid "objectclass %s not found" -msgstr "" - -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "Failed to authenticate to CA REST API" -msgstr "" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "" - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -msgid "Automount Location" -msgstr "" - -#, fuzzy, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, fuzzy, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, fuzzy, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -#, fuzzy, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -msgid "ACI" -msgstr "" - -#, fuzzy, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, fuzzy, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, fuzzy, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Delete a DNS server" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "" - -msgid "User Group" -msgstr "" - -#, fuzzy, python-format -msgid "Added group \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "privileged group" -msgstr "" - -#, fuzzy, python-format -msgid "Modified group \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, fuzzy, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, fuzzy, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "host groups" -msgstr "" - -msgid "Host Group" -msgstr "" - -#, fuzzy, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "hostgroup" -msgstr "" - -msgid "privileged hostgroup" -msgstr "" - -#, fuzzy, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "Auto private groups" -msgstr "" - -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "" - -msgid "locations" -msgstr "" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -msgid "Location name" -msgstr "" - -msgid "IPA location name" -msgstr "" - -msgid "IPA Location description" -msgstr "" - -msgid "Servers" -msgstr "" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, fuzzy, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Delete an IPA location." -msgstr "" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -msgid "IPA Server" -msgstr "" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -msgid "netgroups" -msgstr "" - -msgid "Netgroups" -msgstr "" - -msgid "Netgroup" -msgstr "" - -#, fuzzy, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" -msgstr "" - -#, fuzzy, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "cannot be empty" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, fuzzy, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)d ভেরিয়াবেল" -msgstr[1] "%(count)d ভেরিয়াবেল" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, fuzzy, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "Role" -msgstr "" - -#, fuzzy, python-format -msgid "Added role \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified role \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -msgid "Self Service Permissions" -msgstr "" - -msgid "Self Service Permission" -msgstr "" - -#, fuzzy, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "IPA role name" -msgstr "" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, fuzzy, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, fuzzy, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -msgid "Subordinate id description" -msgstr "" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -msgid "SubUID range size" -msgstr "" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -msgid "SubGID range size" -msgstr "" - -msgid "Subordinate group ID count" -msgstr "" - -#, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "" - -#, python-format -msgid "'%(dn)s is not a valid user" -msgstr "" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -msgid "Add a new subordinate id." -msgstr "" - -#, fuzzy, python-format -msgid "Added subordinate id \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Delete a subordinate id." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Modify a subordinate id." -msgstr "" - -#, fuzzy, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Search for subordinate id." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "%(count)d ভেরিয়াবেল" -msgstr[1] "%(count)d ভেরিয়াবেল" - -msgid "Display information about a subordinate id." -msgstr "" - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -msgid "sudo command" -msgstr "" - -msgid "sudo commands" -msgstr "" - -msgid "Sudo Commands" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -#, fuzzy, python-format -msgid "Added segment \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -msgid "servers" -msgstr "" - -msgid "IPA Servers" -msgstr "" - -msgid "Server location" -msgstr "" - -msgid "Service weight" -msgstr "" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, fuzzy, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -msgid "Server state" -msgstr "" - -#, fuzzy, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "A list of ACI values" -msgstr "" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -#, fuzzy, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -#, fuzzy, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d ভেরিয়াবেল" -msgstr[1] "%(count)d ভেরিয়াবেল" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -msgstr "" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -msgid "" -"\n" -"Managed permissions\n" -msgstr "" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "must be enclosed in parentheses" -msgstr "" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, python-format -msgid "Deprecated; use %s" -msgstr "" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, python-format -msgid "Entry %s not found" -msgstr "" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, python-format -msgid "Entry %s does not exist" -msgstr "" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, fuzzy, python-format -msgid "Added permission \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, fuzzy, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, fuzzy, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -msgid "Help topic" -msgstr "" - -msgid "Version" -msgstr "" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -msgid "Method name" -msgstr "" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -#, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -msgid "CLI name" -msgstr "" - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "Trust direction" -msgstr "" - -msgid "Trust type" -msgstr "" - -msgid "Trust status" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "trust configuration" -msgstr "" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, fuzzy, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, fuzzy, python-format -msgid "Added vault \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "%(count)d ভেরিয়াবেল" -msgstr[1] "%(count)d ভেরিয়াবেল" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, fuzzy, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Vault configuration" -msgstr "" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -msgid "Key wrapping algorithm" -msgstr "" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." -msgstr "" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "Principal alias" -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -msgid "External IdP configuration" -msgstr "" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "Certificate mapping data" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -msgid "Issuer" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, fuzzy, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, fuzzy, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, fuzzy, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -msgid "users cannot be added when user category='all'" -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "" - -#, python-format -msgid "%i services added." -msgstr "" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -msgid "User logins" -msgstr "" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -#, fuzzy -msgid "must be at least 10" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -msgid "configuration options" -msgstr "" - -msgid "Configuration" -msgstr "" - -msgid "Maximum hostname length" -msgstr "" - -msgid "Enable adding subids to new users" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -msgid "IPA DNS servers" -msgstr "" - -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Setup SID configuration" -msgstr "" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -msgid "Add SIDs" -msgstr "" - -msgid "Add SIDs for existing users and groups" -msgstr "" - -msgid "NetBIOS name of the IPA domain" -msgstr "" - -msgid "Empty domain is not allowed" -msgstr "" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "not allowed to enable SID generation" -msgstr "" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -msgid "Failed to call DBus" -msgstr "" - -msgid "Configuration of SID failed. See details in the error log" -msgstr "" - -msgid "The group doesn't exist" -msgstr "" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, python-format -msgid "%s Record" -msgstr "" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -msgid "Priority (order)" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -#, fuzzy -msgid "Only one zone type is allowed per zone name" -msgstr "কেবলমাত্র একটি মান অনুমদিত" - -#, fuzzy, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "" - -#, fuzzy, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -msgid "Default time to live" -msgstr "" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "is required" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -msgid "DNS configuration options" -msgstr "" - -msgid "DNS Global Configuration" -msgstr "" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -msgid "Result of the command" -msgstr "" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, fuzzy, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -#, fuzzy, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "Serial Number" -msgstr "" - -msgid "Serial Number (hex)" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, fuzzy, python-format -msgid "Added host \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, fuzzy, python-format -msgid "Modified host \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -#, fuzzy, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" - -msgid "Invalid URI: not an https scheme" -msgstr "" - -msgid "Invalid URI: missing netloc" -msgstr "" - -msgid "Identity Provider server" -msgstr "" - -msgid "Identity Provider servers" -msgstr "" - -msgid "Identity Provider server name" -msgstr "" - -msgid "Authorization URI" -msgstr "" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -msgid "Token URI" -msgstr "" - -msgid "Token endpoint" -msgstr "" - -msgid "User info URI" -msgstr "" - -msgid "User information endpoint" -msgstr "" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -msgid "Client identifier" -msgstr "" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -msgid "Add a new Identity Provider server." -msgstr "" - -#, fuzzy, python-format -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -msgid "Base URL" -msgstr "" - -msgid "Base URL for IdP provider templates" -msgstr "" - -msgid "unknown provider" -msgstr "" - -msgid "value is missing" -msgstr "" - -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "" - -msgid "Delete an Identity Provider server." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Modify an Identity Provider server." -msgstr "" - -#, fuzzy, python-format -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Search for Identity Provider servers." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "%(count)d ভেরিয়াবেল" -msgstr[1] "%(count)d ভেরিয়াবেল" - -msgid "Display information about an Identity Provider server." -msgstr "" - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Apply" -msgstr "" - -msgid "Rebuild auto membership" -msgstr "" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -msgid "Actions" -msgstr "" - -msgid "Add" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -msgid "Direct Membership" -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -msgid "No entries." -msgstr "" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -msgid "Remove" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -msgid "Show Results" -msgstr "" - -msgid "Authentication indicators" -msgstr "" - -msgid "Authentication indicator" -msgstr "" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -msgid "RADIUS" -msgstr "" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "External Identity Provider" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "" - -msgid "Activate" -msgstr "" - -msgid "Add and Add Another" -msgstr "" - -msgid "Add and Close" -msgstr "" - -msgid "Add and Edit" -msgstr "" - -msgid "Add Many" -msgstr "" - -msgid "Back" -msgstr "" - -msgid "Cancel" -msgstr "" - -msgid "Clear" -msgstr "" - -msgid "Clear all fields on the page." -msgstr "" - -msgid "Close" -msgstr "" - -msgid "Disable" -msgstr "" - -msgid "Download" -msgstr "" - -msgid "Download certificate as PEM formatted file." -msgstr "" - -msgid "Edit" -msgstr "" - -msgid "Enable" -msgstr "" - -msgid "Find" -msgstr "" - -msgid "Get" -msgstr "" - -msgid "Hide" -msgstr "" - -msgid "Issue" -msgstr "" - -msgid "Match" -msgstr "" - -msgid "Match users according to certificate." -msgstr "" - -msgid "Migrate" -msgstr "" - -msgid "OK" -msgstr "" - -msgid "Refresh" -msgstr "" - -msgid "Reload current settings from the server." -msgstr "" - -msgid "Delete" -msgstr "" - -msgid "Remove hold" -msgstr "" - -msgid "Reset" -msgstr "" - -msgid "Reset Password" -msgstr "" - -msgid "Reset Password and Log in" -msgstr "" - -msgid "Restore" -msgstr "" - -msgid "Retry" -msgstr "" - -msgid "Revert" -msgstr "" - -msgid "Revoke" -msgstr "" - -msgid "Save" -msgstr "" - -msgid "Set" -msgstr "" - -msgid "Show" -msgstr "" - -msgid "Stage" -msgstr "" - -msgid "Update" -msgstr "" - -msgid "View" -msgstr "" - -msgid "Customization" -msgstr "" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "" - -msgid "Expand All" -msgstr "" - -msgid "General" -msgstr "" - -msgid "Identity Settings" -msgstr "" - -msgid "Record Settings" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -msgid "Back to Top" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -#, fuzzy -msgid "Add custom value" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Available" -msgstr "" - -msgid "Some operations failed." -msgstr "" - -msgid "Operations Error" -msgstr "" - -msgid "Confirmation" -msgstr "" - -msgid "Custom value" -msgstr "" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -msgid "Unsaved Changes" -msgstr "" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "" - -msgid "Hide details" -msgstr "" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -msgid "Redirection" -msgstr "" - -msgid "Select entries to be removed." -msgstr "" - -msgid "Result" -msgstr "" - -msgid "Show details" -msgstr "" - -msgid "Success" -msgstr "" - -msgid "Validation error" -msgstr "" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "" - -msgid "HTTP Error" -msgstr "" - -msgid "Internal Error" -msgstr "" - -msgid "IPA Error" -msgstr "" - -msgid "No response" -msgstr "" - -msgid "Unknown Error" -msgstr "" - -msgid "URL" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -msgid "Settings" -msgstr "" - -msgid "Search" -msgstr "" - -msgid "False" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Allowed to create keytab" -msgstr "" - -msgid "Allowed to retrieve keytab" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Add Kerberos Principal Alias" -msgstr "" - -msgid "New kerberos principal alias" -msgstr "" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "" - -msgid "Authenticating" -msgstr "" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -msgid "Kerberos Principal you entered is expired" -msgstr "" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -msgid "Log In Using Certificate" -msgstr "" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "" - -msgid "Synchronizing" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -msgid "number of passwords" -msgstr "" - -msgid "seconds" -msgstr "" - -msgid "Migrating" -msgstr "" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -msgid "Password migration was not successful" -msgstr "" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -msgid "Password migration was successful" -msgstr "" - -msgid "Attribute" -msgstr "" - -msgid "Add delegation" -msgstr "" - -msgid "Remove delegations" -msgstr "" - -msgid "Add permission" -msgstr "" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -msgid "Remove permissions" -msgstr "" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -msgid "Remove privileges" -msgstr "" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -msgid "Role Settings" -msgstr "" - -msgid "Add role" -msgstr "" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -msgid "Remove roles" -msgstr "" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -msgid "Add self service permission" -msgstr "" - -msgid "Remove self service permissions" -msgstr "" - -msgid "Add rule" -msgstr "" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to change default group?" -msgstr "" - -msgid "Default host group" -msgstr "" - -msgid "Default user group" -msgstr "" - -msgid "Exclusive" -msgstr "" - -msgid "Expression" -msgstr "" - -msgid "Host group rule" -msgstr "" - -msgid "Host group rules" -msgstr "" - -msgid "Inclusive" -msgstr "" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -msgid "User group rule" -msgstr "" - -msgid "User group rules" -msgstr "" - -msgid "Add automount key" -msgstr "" - -msgid "Remove automount keys" -msgstr "" - -msgid "Add automount location" -msgstr "" - -msgid "Automount Location Settings" -msgstr "" - -msgid "Remove automount locations" -msgstr "" - -msgid "Add automount map" -msgstr "" - -msgid "Map Type" -msgstr "" - -msgid "Direct" -msgstr "" - -msgid "Indirect" -msgstr "" - -msgid "Remove automount maps" -msgstr "" - -msgid "Add certificate authority" -msgstr "" - -msgid "Remove certificate authorities" -msgstr "" - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -msgid "All" -msgstr "" - -msgid "Any CA" -msgstr "" - -msgid "Any Host" -msgstr "" - -msgid "Any Service" -msgstr "" - -msgid "Any Profile" -msgstr "" - -msgid "Anyone" -msgstr "" - -msgid "Rule status" -msgstr "" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -msgid "Remove CA ACLs" -msgstr "" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -msgid "Specified CAs" -msgstr "" - -msgid "Specified Hosts and Groups" -msgstr "" - -msgid "Specified Profiles" -msgstr "" - -msgid "Specified Services and Groups" -msgstr "" - -msgid "Specified Users and Groups" -msgstr "" - -msgid "Permitted to have certificates issued" -msgstr "" - -msgid "Remove certificate profiles" -msgstr "" - -msgid "AA Compromise" -msgstr "" - -msgid "Add principal" -msgstr "" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" - -msgid "Certificates" -msgstr "" - -msgid "Certificate Hold" -msgstr "" - -msgid "Cessation of Operation" -msgstr "" - -msgid "Common Name" -msgstr "" - -msgid "the certificate with serial number " -msgstr "" - -msgid "Expires On" -msgstr "" - -msgid "Issued on from" -msgstr "" - -msgid "Issued on to" -msgstr "" - -#, fuzzy -msgid "Maximum serial number" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -#, fuzzy -msgid "Minimum serial number" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -msgid "Revoked on from" -msgstr "" - -msgid "Revoked on to" -msgstr "" - -msgid "Valid not after from" -msgstr "" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -msgid "Fingerprints" -msgstr "" - -msgid "Get Certificate" -msgstr "" - -msgid "Certificate Hold Removed" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -msgid "Issue new certificate" -msgstr "" - -msgid "Issued By" -msgstr "" - -msgid "Issued On" -msgstr "" - -msgid "Issued To" -msgstr "" - -msgid "Key Compromise" -msgstr "" - -msgid "No Valid Certificate" -msgstr "" - -msgid "New Certificate" -msgstr "" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -msgid "Note" -msgstr "" - -msgid "Organizational Unit" -msgstr "" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -msgid "Privilege Withdrawn" -msgstr "" - -msgid "Reason for Revocation" -msgstr "" - -msgid "Remove certificate hold" -msgstr "" - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -msgid "Certificate requested" -msgstr "" - -msgid "Revoke certificate" -msgstr "" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -msgid "Certificate Revoked" -msgstr "" - -msgid "REVOKED" -msgstr "" - -msgid "SHA1 Fingerprint" -msgstr "" - -msgid "SHA256 Fingerprint" -msgstr "" - -msgid "Status" -msgstr "" - -msgid "Superseded" -msgstr "" - -msgid "Unspecified" -msgstr "" - -msgid "Valid Certificate Present" -msgstr "" - -msgid "Valid from" -msgstr "" - -msgid "Valid to" -msgstr "" - -msgid "Validity" -msgstr "" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -msgid "View Certificate" -msgstr "" - -msgid "Certificate Data" -msgstr "" - -msgid "Certificate For Match" -msgstr "" - -msgid "Certificate Mapping Match" -msgstr "" - -msgid "Matched Users" -msgstr "" - -msgid "User Login" -msgstr "" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -msgid "Configuration string" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -msgid "Remove certificate mapping data" -msgstr "" - -msgid "Issuer and subject" -msgstr "" - -msgid "Remove certificate identity mapping rules" -msgstr "" - -msgid "Group Options" -msgstr "" - -msgid "Search Options" -msgstr "" - -msgid "SELinux Options" -msgstr "" - -msgid "Server Options" -msgstr "" - -msgid "Service Options" -msgstr "" - -msgid "User Options" -msgstr "" - -msgid "Forward first" -msgstr "" - -msgid "Forwarding disabled" -msgstr "" - -msgid "Forward only" -msgstr "" - -msgid "Options" -msgstr "" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -msgid "Other Record Types" -msgstr "" - -msgid "Address not valid, can't redirect" -msgstr "" - -msgid "Create dns record" -msgstr "" - -msgid "Creating record." -msgstr "" - -msgid "Record creation failed." -msgstr "" - -msgid "Checking if record exists." -msgstr "" - -msgid "Record not found." -msgstr "" - -msgid "Redirection to PTR record" -msgstr "" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -msgid "Target reverse zone not found." -msgstr "" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -msgid "Standard Record Types" -msgstr "" - -msgid "Records for DNS Zone" -msgstr "" - -msgid "Record Type" -msgstr "" - -msgid "Add DNS zone" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -msgid "DNS Zone Settings" -msgstr "" - -msgid "Remove DNS zones" -msgstr "" - -msgid "Remove Permission" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Level" -msgstr "" - -msgid "Set Domain Level" -msgstr "" - -msgid "Add user group" -msgstr "" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -msgid "Group Settings" -msgstr "" - -msgid "External" -msgstr "" - -msgid "Groups" -msgstr "" - -msgid "Group categories" -msgstr "" - -msgid "Change to external group" -msgstr "" - -msgid "Change to POSIX group" -msgstr "" - -msgid "Non-POSIX" -msgstr "" - -msgid "POSIX" -msgstr "" - -msgid "Remove user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -msgid "Group Type" -msgstr "" - -msgid "Add HBAC rule" -msgstr "" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -msgid "Accessing" -msgstr "" - -msgid "Remove HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -msgid "Via Service" -msgstr "" - -msgid "Who" -msgstr "" - -msgid "Add HBAC service" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -msgid "Remove HBAC services" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -msgid "Add HBAC service group" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -msgid "Remove HBAC service groups" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -msgid "Access Denied" -msgstr "" - -msgid "Access Granted" -msgstr "" - -msgid "Include Disabled" -msgstr "" - -msgid "Include Enabled" -msgstr "" - -msgid "HBAC Test" -msgstr "" - -msgid "Matched" -msgstr "" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" - -msgid "Rules" -msgstr "" - -msgid "Run Test" -msgstr "" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -msgid "Unmatched" -msgstr "" - -msgid "Add host" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -msgid "Host Certificate" -msgstr "" - -msgid "Host Name" -msgstr "" - -msgid "Delete Key, Unprovision" -msgstr "" - -msgid "Host Settings" -msgstr "" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -msgid "Generate OTP" -msgstr "" - -msgid "Generated OTP" -msgstr "" - -msgid "Kerberos Key" -msgstr "" - -msgid "Kerberos Key Not Present" -msgstr "" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -msgid "One-Time Password" -msgstr "" - -msgid "One-Time Password Not Present" -msgstr "" - -msgid "One-Time Password Present" -msgstr "" - -msgid "Reset OTP" -msgstr "" - -msgid "Reset One-Time Password" -msgstr "" - -msgid "Set OTP" -msgstr "" - -msgid "OTP set" -msgstr "" - -msgid "Set One-Time Password" -msgstr "" - -msgid "Remove hosts" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -msgid "Unprovision" -msgstr "" - -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -msgid "Add host group" -msgstr "" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -msgid "Host Group Settings" -msgstr "" - -msgid "Remove host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -msgid "Identity provider details" -msgstr "" - -msgid "Verify secret" -msgstr "" - -msgid "User to override" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -msgid "Profile" -msgstr "" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -msgid "Enter trusted group name." -msgstr "" - -msgid "Add ID view" -msgstr "" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -msgid "Apply to host groups" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -msgid "Remove ID views" -msgstr "" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -msgid "Un-apply from host groups" -msgstr "" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -msgid "Un-apply" -msgstr "" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "Add netgroup" -msgstr "" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -msgid "Netgroup Settings" -msgstr "" - -msgid "Remove netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -msgid "Add OTP token" -msgstr "" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -msgid "Configure your token" -msgstr "" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -msgid "OTP Token Settings" -msgstr "" - -msgid "Disable token" -msgstr "" - -msgid "Enable token" -msgstr "" - -msgid "Remove OTP tokens" -msgstr "" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "" - -msgid "Show configuration uri" -msgstr "" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -msgid "Add Custom Attribute" -msgstr "" - -msgid "Permission settings" -msgstr "" - -msgid "Attribute breakdown" -msgstr "" - -msgid "Privilege Settings" -msgstr "" - -msgid "Public key:" -msgstr "" - -msgid "Set public key" -msgstr "" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -msgid "Add password policy" -msgstr "" - -msgid "Password Policy" -msgstr "" - -msgid "Remove password policies" -msgstr "" - -msgid "Add ID range" -msgstr "" - -msgid "Range Settings" -msgstr "" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -msgid "Domain SID" -msgstr "" - -msgid "Secondary RID base" -msgstr "" - -msgid "Remove ID ranges" -msgstr "" - -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -msgid "Detect" -msgstr "" - -msgid "Local domain" -msgstr "" - -msgid "IPA trust" -msgstr "" - -msgid "Active Directory winsync" -msgstr "" - -msgid "Add RADIUS server" -msgstr "" - -msgid "RADIUS Proxy Server Settings" -msgstr "" - -msgid "Remove RADIUS servers" -msgstr "" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -msgid "Force Update" -msgstr "" - -msgid "Add SELinux user map" -msgstr "" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -msgid "Server Roles" -msgstr "" - -msgid "Server Role" -msgstr "" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -msgid "Delete Server" -msgstr "" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -msgid "Add service" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -msgid "Service Certificate" -msgstr "" - -msgid "Service Settings" -msgstr "" - -msgid "Provisioning" -msgstr "" - -msgid "Remove services" -msgstr "" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -msgid "Unprovisioning service" -msgstr "" - -msgid "Service unprovisioned" -msgstr "" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "" - -msgid "SSH public keys" -msgstr "" - -msgid "SSH public key:" -msgstr "" - -msgid "Set SSH key" -msgstr "" - -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" - -msgid "Add stage user" -msgstr "" - -msgid "Stage users" -msgstr "" - -msgid "Preserved users" -msgstr "" - -msgid "Remove preserved users" -msgstr "" - -msgid "Remove stage users" -msgstr "" - -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -msgid "User categories" -msgstr "" - -msgid "Add subid" -msgstr "" - -msgid "Assigned subids" -msgstr "" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -msgid "Add sudo command" -msgstr "" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -msgid "Remove sudo commands" -msgstr "" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -msgid "Add sudo command group" -msgstr "" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -msgid "Remove sudo command groups" -msgstr "" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -msgid "Add sudo rule" -msgstr "" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "" - -msgid "Any Command" -msgstr "" - -msgid "Any Group" -msgstr "" - -msgid "Run Commands" -msgstr "" - -msgid "Deny" -msgstr "" - -msgid "Access this host" -msgstr "" - -msgid "Option added" -msgstr "" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -msgid "Remove sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -msgid "Specified Commands and Groups" -msgstr "" - -msgid "Specified Groups" -msgstr "" - -msgid "Remove sudo options" -msgstr "" - -msgid "Autogenerated" -msgstr "" - -msgid "Segment details" -msgstr "" - -msgid "Replication configuration" -msgstr "" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -msgid "Account" -msgstr "" - -msgid "Add trust" -msgstr "" - -msgid "Administrative account" -msgstr "" - -msgid "SID blocklists" -msgstr "" - -msgid "Trust Settings" -msgstr "" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -msgid "Pre-shared password" -msgstr "" - -msgid "Remove trusts" -msgstr "" - -msgid "Remove domains" -msgstr "" - -msgid "Alternative UPN suffixes" -msgstr "" - -msgid "User attributes for SMB services" -msgstr "" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - -msgid "Account Settings" -msgstr "" - -msgid "Account Status" -msgstr "" - -msgid "Active users" -msgstr "" - -msgid "Add user" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -msgid "Auto assign subordinate ids" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "" - -msgid "Contact Settings" -msgstr "" - -msgid "Delete mode" -msgstr "" - -msgid "Employee Information" -msgstr "" - -msgid "Error changing account status" -msgstr "" - -msgid "Password expiration" -msgstr "" - -msgid "Mailing Address" -msgstr "" - -msgid "Misc. Information" -msgstr "" - -msgid "delete" -msgstr "" - -msgid "preserve" -msgstr "" - -msgid "No private group" -msgstr "" - -msgid "Remove users" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Unlock" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -msgid "Members" -msgstr "" - -msgid "My User Vaults" -msgstr "" - -msgid "Owners" -msgstr "" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -msgid "Service Vaults" -msgstr "" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -msgid "Vault Type" -msgstr "" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -msgid "User Vaults" -msgstr "" - -msgid "Current password is required" -msgstr "" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -msgid "First OTP" -msgstr "" - -msgid "New password is required" -msgstr "" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Password change complete" -msgstr "" - -msgid "Your password has expired. Please enter a new password." -msgstr "" - -#, fuzzy -msgid "Passwords must match" -msgstr "পাসওয়ার্ড দুটি মিলছে না" - -msgid "Password reset was not successful." -msgstr "" - -msgid "Reset your password." -msgstr "" - -msgid "Second OTP" -msgstr "" - -msgid "Verify Password" -msgstr "" - -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -msgid "Some entries were not deleted" -msgstr "" - -msgid "Quick Links" -msgstr "" - -msgid "Select All" -msgstr "" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -msgid "Unselect All" -msgstr "" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "" - -msgid "Audit" -msgstr "" - -msgid "Authentication" -msgstr "" - -msgid "Automount" -msgstr "" - -msgid "DNS" -msgstr "" - -msgid "Host-Based Access Control" -msgstr "" - -msgid "Identity" -msgstr "" - -msgid "Network Services" -msgstr "" - -msgid "Policy" -msgstr "" - -msgid "Role-Based Access Control" -msgstr "" - -msgid "Subordinate IDs" -msgstr "" - -msgid "Sudo" -msgstr "" - -msgid "Topology" -msgstr "" - -msgid "True" -msgstr "" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -msgid "First" -msgstr "" - -msgid "Last" -msgstr "" - -msgid "Next" -msgstr "" - -msgid "Page" -msgstr "" - -msgid "Prev" -msgstr "" - -msgid "Undo" -msgstr "" - -msgid "Undo this change." -msgstr "" - -msgid "Undo All" -msgstr "" - -msgid "Undo all changes in this field." -msgstr "" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -#, fuzzy -msgid "Must be a decimal number" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -msgid "Format error" -msgstr "" - -#, fuzzy -msgid "Must be an integer" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -msgid "Not a valid IP address" -msgstr "" - -msgid "Not a valid IPv4 address" -msgstr "" - -msgid "Not a valid IPv6 address" -msgstr "" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -msgid "Parse error" -msgstr "" - -#, fuzzy -msgid "Must be a positive number" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -msgid "Required field" -msgstr "" - -msgid "Unsupported value" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -msgid "IdP max life" -msgstr "" - -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "" - -msgid "IdP max renew" -msgstr "" - -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -msgid "password policy" -msgstr "" - -msgid "password policies" -msgstr "" - -msgid "Password Policies" -msgstr "" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "Grace login limit" -msgstr "" - -msgid "Number of LDAP authentications allowed after expiration" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#, fuzzy, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -msgid "service" -msgstr "" - -msgid "services" -msgstr "" - -msgid "Service principal alias" -msgstr "" - -msgid "Base-64 encoded service certificate" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." -msgstr "" - -#, fuzzy, python-format -msgid "Added service \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -msgid "Add a new SMB service." -msgstr "" - -msgid "SMB service NetBIOS name" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified service \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "%(count)d ভেরিয়াবেল" -msgstr[1] "%(count)d ভেরিয়াবেল" - -#, fuzzy, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a service" -msgstr "" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, fuzzy, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -#, fuzzy, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Delete an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Modify an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d ভেরিয়াবেল" -msgstr[1] "%(count)d ভেরিয়াবেল" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -msgid "Certificate Authority" -msgstr "" - -msgid "Certificate Authorities" -msgstr "" - -msgid "Name for referencing the CA" -msgstr "" - -msgid "Description of the purpose of the CA" -msgstr "" - -msgid "Authority ID" -msgstr "" - -msgid "Dogtag Authority ID" -msgstr "" - -msgid "Subject DN" -msgstr "" - -msgid "Subject Distinguished Name" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Issuer Distinguished Name" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "RSN Version" -msgstr "" - -msgid "Random Serial Number Version" -msgstr "" - -msgid "Search for CAs." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "Display the properties of a CA." -msgstr "" - -msgid "Create a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Created CA \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -msgid "Modify CA configuration." -msgstr "" - -#, fuzzy, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "IPA CA cannot be disabled" -msgstr "" - -msgid "Enable a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Subject email address" -msgstr "" - -msgid "Subject DNS name" -msgstr "" - -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -msgid "Subject URI" -msgstr "" - -msgid "Subject IP Address" -msgstr "" - -msgid "Subject OID" -msgstr "" - -msgid "Subject UPN" -msgstr "" - -msgid "Subject Kerberos principal name" -msgstr "" - -msgid "Subject Other Name" -msgstr "" - -msgid "Serial number (hex)" -msgstr "" - -msgid "Request status" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -#, fuzzy -msgid "Status of the certificate" -msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -msgid "command" -msgstr "" - -msgid "commands" -msgstr "" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -msgid "runAs groups" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "%(count)d প্লাগ-ইন লোড করা হয়েছে" -msgstr[1] "%(count)d প্লাগ-ইন লোড করা হয়েছে" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - #, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" +msgid "%(count)d variables" +msgstr "%(count)d ভেরিয়াবেল" #, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" +msgid "%(info)s" +msgstr "%(info)s" #, python-format msgid "Added user \"%(value)s\"" msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" -msgid "Default group for new users is not POSIX" -msgstr "" +msgid "Only one value is allowed" +msgstr "কেবলমাত্র একটি মান অনুমদিত" -#, fuzzy, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" +msgid "Passwords do not match" +msgstr "পাসওয়ার্ড দুটি মিলছে না" -#, fuzzy, python-format -msgid "Preserved user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" +msgid "This is already a posix group" +msgstr "একটি পসিক্স (posix) গ্রুপ আগে থেকে উপস্থিত" -#, python-format -msgid "%s: user is already preserved" -msgstr "" +msgid "incorrect type" +msgstr "ভুল প্রকার" -#, fuzzy, python-format -msgid "Modified user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, fuzzy, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, fuzzy, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, fuzzy, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -msgid "Password grace count" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "\"%(value)s\" ব্যবহারকারী যোগ করা হয়েছে" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" -msgstr "" - -msgid "Request must be a dict" -msgstr "" - -msgid "Request is missing \"method\"" -msgstr "" - -msgid "Request is missing \"params\"" -msgstr "" - -msgid "params must be a list" -msgstr "" - -msgid "params must contain [args, options]" -msgstr "" - -msgid "params[0] (aka args) must be a list" -msgstr "" - -msgid "params[1] (aka options) must be a dict" -msgstr "" - -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" - -msgid "CIFS server denied your credentials" -msgstr "" - -msgid "communication with CIFS server was unsuccessful" -msgstr "" - -msgid "AD domain controller" -msgstr "" - -msgid "unsupported functional level" -msgstr "" - -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" - -msgid "Cannot find specified domain or server name" -msgstr "" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" - -msgid "At least the domain or IP address should be specified" -msgstr "" - -#, python-format -msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" -msgstr "" - -msgid "no trusted domain is configured" -msgstr "" - -msgid "domain is not configured" -msgstr "" - -msgid "SID is not valid" -msgstr "" - -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "" - -msgid "SID does not match any trusted domain" -msgstr "" - -msgid "Trust setup" -msgstr "" - -msgid "Our domain is not configured" -msgstr "" - -msgid "No trusted domain is not configured" -msgstr "" - -msgid "trusted domain object" -msgstr "" - -msgid "domain is not trusted" -msgstr "" - -msgid "no trusted domain matched the specified flat name" -msgstr "" - -msgid "trusted domain object not found" -msgstr "" - -msgid "Object does not belong to a trusted domain" -msgstr "" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "" - -msgid "Ambiguous search, user domain was not specified" -msgstr "" - -msgid "Trusted domain did not return a unique object" -msgstr "" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "" - -msgid "trusted domain user not found" -msgstr "" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "" - -msgid "CIFS credentials object" -msgstr "" - -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "" - -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" - -#, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" - -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" - -msgid "Credentials" -msgstr "" - -msgid "Missing credentials for cross-forest communication" -msgstr "" - -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" - -#, python-format -msgid "must equal %r" -msgstr "" - -msgid "Hello world" -msgstr "" - -#, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "" - -#, fuzzy -msgid "must be at least 1" +msgid "must be a decimal number" msgstr "একটি দশমিক সংখ্যা হওয়া জরুরি" - -msgid "Out of memory\n" -msgstr "" - -msgid "Warning unrecognized encryption type.\n" -msgstr "" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -msgid "Out of memory!?\n" -msgstr "" - -msgid "Enctype comparison failed!\n" -msgstr "" - -msgid "Password is too long!\n" -msgstr "" - -msgid "Failed to create random key!\n" -msgstr "" - -msgid "Failed to create key!\n" -msgstr "" - -msgid "Bad or unsupported salt type.\n" -msgstr "" - -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" diff --git a/po/ca.po b/po/ca.po index 466e7fa70..a60cadedd 100644 --- a/po/ca.po +++ b/po/ca.po @@ -14,20078 +14,224 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" +msgid "Access Denied" +msgstr "S'ha denegat l'accés" -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "out of memory\n" -msgstr "Sense memòria\n" - -#, c-format -msgid "read error\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "Sortida de depuració" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -#, fuzzy -msgid "Realm name" -msgstr "Canvia el nom" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, fuzzy, c-format -msgid "Out of memory \n" -msgstr "Sense memòria\n" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -msgid "SASL Bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Out of Memory!\n" -msgstr "Sense memòria\n" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "Les contrasenyes no coincideixen" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Output debug info" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -msgid "Server Name" -msgstr "Nom del servidor" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -#, fuzzy -msgid "LDAP password" -msgstr "contrasenya" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -msgid "Path to the IPA CA certificate" -msgstr "" - -#, fuzzy -msgid "IPA CA certificate" -msgstr "Certificat" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -#, fuzzy -msgid "Enter LDAP password" -msgstr "Contrasenya nova" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" - -#, c-format -msgid "Discovered server %s\n" -msgstr "" - -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Using provided server %s\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -#, fuzzy -msgid "New Principal Password" -msgstr "Contrasenya nova" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Out of memory!\n" -msgstr "Sense memòria\n" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "" - -#, fuzzy, c-format -msgid "Out of memory!" -msgstr "Sense memòria\n" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "" - -#, c-format -msgid "No values for %s" -msgstr "" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Host is already joined.\n" -msgstr "" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" - -#, c-format -msgid "json_dumps() failed\n" -msgstr "" - -#, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "" - -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" - -#, c-format -msgid "fork() failed\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "" - -#, c-format -msgid "child exited with %d\n" -msgstr "" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "" - -msgid "Quiet mode. Only errors are displayed." -msgstr "" - -msgid "Unenroll this host from IPA server" -msgstr "" - -msgid "Hostname of this server" -msgstr "" - -#, fuzzy -msgid "hostname" -msgstr "Nom de l'ordinador" - -msgid "IPA Server to use" -msgstr "" - -msgid "Specifies where to store keytab information." -msgstr "" - -msgid "filename" -msgstr "nomdelfitxer" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" - -msgid "LDAP password (if not using Kerberos)" -msgstr "" - -msgid "password" -msgstr "contrasenya" - -msgid "LDAP basedn" -msgstr "" - -msgid "basedn" -msgstr "" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "" - -msgid "Failed to add" -msgstr "" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" - -#, fuzzy -msgid "Unrevoked" -msgstr "Revocat" - -msgid "Error" -msgstr "Error" - -#, fuzzy -msgid "Input filename" -msgstr "nomdelfitxer" - -msgid "File to load the certificate from." -msgstr "" - -msgid "cannot specify both raw certificate and file" -msgstr "" - -msgid "Input file" -msgstr "" - -msgid "File to load the certificate from" -msgstr "" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "" - -msgid "Split DNS record to parts" -msgstr "" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" - -msgid "DNS resource record type" -msgstr "" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" - -msgid "No option to modify specific record provided." -msgstr "" - -msgid "Current DNS record contents:\n" -msgstr "" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -msgid "No option to delete specific record provided." -msgstr "" - -#, fuzzy -msgid "Delete all?" -msgstr "Suprimeix" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "" - -msgid "Server will check DNS forwarder(s)." -msgstr "" - -msgid "This may take some time, please wait ..." -msgstr "" - -msgid "DNS forwarder" -msgstr "" - -msgid "file to store DNS records in nsupdate format" -msgstr "" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -#, fuzzy -msgid "Servers details:" -msgstr "Mostra els detalls" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -#, fuzzy -msgid "Delete a user" -msgstr "Suprimeix" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - -msgid "maps not connected to /etc/auto.master:" -msgstr "" - -msgid "Import automount files for a specific location." -msgstr "" - -msgid "Master file" -msgstr "" - -msgid "Automount master file." -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" - -#, python-format -msgid "File %(file)s not found" -msgstr "" - -#, python-format -msgid "key %(key)s already exists" -msgstr "" - -#, python-format -msgid "map %(map)s already exists" -msgstr "" - -msgid "Imported maps:" -msgstr "" - -#, python-format -msgid "Added %(map)s" -msgstr "" - -msgid "Imported keys:" -msgstr "" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "" - -msgid "Ignored keys:" -msgstr "" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "" - -msgid "Duplicate maps skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(map)s" -msgstr "" - -msgid "Duplicate keys skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(key)s" -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -#, fuzzy -msgid "User ID" -msgstr "Usuari" - -msgid "Password" -msgstr "Contrasenya" - -#, fuzzy -msgid "First Code" -msgstr "Nom" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "" - -msgid "Invalid credentials" -msgstr "Credencials no vàlides" - -msgid "Create a new vault." -msgstr "" - -#, fuzzy -msgid "Vault password" -msgstr "contrasenya" - -msgid "File containing the vault password" -msgstr "" - -msgid "File containing the vault public key" -msgstr "" - -msgid "Password can be specified only for symmetric vault" -msgstr "" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "" - -msgid "Password specified multiple times" -msgstr "" - -msgid "Public key specified multiple times" -msgstr "" - -msgid "Missing vault public key" -msgstr "" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "" - -msgid "Modify a vault." -msgstr "" - -#, fuzzy -msgid "Change password" -msgstr "contrasenya" - -#, fuzzy -msgid "Old vault password" -msgstr "contrasenya" - -msgid "File containing the old vault password" -msgstr "" - -#, fuzzy -msgid "New vault password" -msgstr "Contrasenya nova" - -msgid "File containing the new vault password" -msgstr "" - -msgid "Old vault private key" -msgstr "" - -msgid "File containing the old vault private key" -msgstr "" - -msgid "File containing the new vault public key" -msgstr "" - -msgid "New public key specified multiple times" -msgstr "" - -msgid "Missing new vault public key" -msgstr "" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "" - -msgid "Binary data to archive" -msgstr "" - -msgid "File containing data to archive" -msgstr "" - -msgid "Override existing password" -msgstr "" - -msgid "Input data specified multiple times" -msgstr "" - -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" - -msgid "Invalid vault type" -msgstr "" - -msgid "Retrieve a data from a vault." -msgstr "" - -msgid "File to store retrieved data" -msgstr "" - -msgid "Vault private key" -msgstr "" - -msgid "File containing the vault private key" -msgstr "" - -msgid "Data" -msgstr "Dades" - -msgid "Private key specified multiple times" -msgstr "" - -msgid "Missing vault private key" -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "ACI name" -msgstr "" - -msgid "Permission" -msgstr "Permís" - -msgid "Permission ACI grants access to" -msgstr "" - -#, fuzzy -msgid "User group" -msgstr "grup" - -msgid "User group ACI grants access to" -msgstr "" - -msgid "Permissions" -msgstr "Permisos" - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Attributes to which the permission applies" -msgstr "" - -msgid "Attributes" -msgstr "Atributs" - -msgid "Type" -msgstr "Tipus" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" - -msgid "Member of" -msgstr "" - -msgid "Member of a group" -msgstr "" - -msgid "Filter" -msgstr "Filtre" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "" - -msgid "Subtree" -msgstr "Subarbre" - -msgid "Subtree to apply ACI to" -msgstr "" - -#, fuzzy -msgid "Target group" -msgstr "Objectiu" - -msgid "Group to apply ACI to" -msgstr "" - -msgid "Target your own entry (self)" -msgstr "" - -msgid "Apply ACI to your own entry (self)" -msgstr "" - -msgid "Create new ACI." -msgstr "" - -msgid "ACI prefix" -msgstr "" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" - -msgid "Test the ACI syntax but don't write anything" -msgstr "" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" - -msgid "User-friendly description of action performed" -msgstr "" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" - -#, fuzzy -msgid "Delete ACI." -msgstr "Suprimeix" - -msgid "True means the operation was successful" -msgstr "" - -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" - -msgid "A string searched in all relevant object attributes" -msgstr "" - -msgid "Primary key only" -msgstr "" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" - -msgid "Number of entries returned" -msgstr "" - -msgid "True if not all results were returned" -msgstr "" - -msgid "Modify ACI." -msgstr "" - -#, fuzzy -msgid "Rename an ACI." -msgstr "Canvia el nom" - -msgid "New ACI name" -msgstr "" - -msgid "Display a single ACI given an ACI name." -msgstr "" - -msgid "Location of the ACI" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Description" -msgstr "Descripció" - -msgid "A description of this auto member rule" -msgstr "" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - -#, fuzzy -msgid "Grouping Type" -msgstr "Nom del grup" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -#, fuzzy -msgid "Exclusive Regex" -msgstr "Exclusiu" - -#, fuzzy -msgid "Attribute Key" -msgstr "Atribut" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "List of deletions that failed" -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "Drets" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Users" -msgstr "Usuaris" - -msgid "Rebuild membership for specified users" -msgstr "" - -#, fuzzy -msgid "Hosts" -msgstr "Ordinador central" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" - -msgid "Key" -msgstr "Tecla" - -msgid "Automount key name." -msgstr "" - -#, fuzzy -msgid "Mount information" -msgstr "Confirmació" - -msgid "description" -msgstr "descripció" - -msgid "Location" -msgstr "Ubicació" - -msgid "Automount location name." -msgstr "" - -msgid "Map" -msgstr "Mapa" - -msgid "Automount map name." -msgstr "" - -msgid "Create a new automount key." -msgstr "" - -msgid "Delete an automount key." -msgstr "" - -msgid "Continuous mode: Don't stop on errors." -msgstr "" - -msgid "Search for an automount key." -msgstr "" - -msgid "Time Limit" -msgstr "" - -msgid "Time limit of search in seconds" -msgstr "" - -msgid "Size Limit" -msgstr "" - -msgid "Maximum number of entries returned" -msgstr "" - -msgid "Modify an automount key." -msgstr "" - -#, fuzzy -msgid "New mount information" -msgstr "Confirmació" - -msgid "Rename" -msgstr "Canvia el nom" - -msgid "Rename the automount key object" -msgstr "" - -msgid "Display an automount key." -msgstr "" - -msgid "Create a new automount location." -msgstr "" - -msgid "Delete an automount location." -msgstr "" - -msgid "Search for an automount location." -msgstr "" - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" - -msgid "Display an automount location." -msgstr "" - -msgid "Generate automount files for a specific location." -msgstr "" - -msgid "Create a new automount map." -msgstr "" - -msgid "Create a new indirect mount point." -msgstr "" - -msgid "Mount point" -msgstr "Punt de muntatge" - -msgid "Parent map" -msgstr "" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" - -msgid "Delete an automount map." -msgstr "" - -msgid "Search for an automount map." -msgstr "" - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" - -msgid "Modify an automount map." -msgstr "" - -msgid "Display an automount map." -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" - -msgid "Nested Methods to execute" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason" -msgstr "Raó" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -#, fuzzy -msgid "minimum serial number" -msgstr "Número de sèrie" - -#, fuzzy -msgid "maximum serial number" -msgstr "Número de sèrie" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "Número de sèrie" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Principal" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Dictionary mapping variable name to value" -msgstr "" - -#, fuzzy -msgid "Revoke a certificate." -msgstr "Certificat" - -msgid "Retrieve an existing certificate." -msgstr "" - -#, fuzzy -msgid "Output filename" -msgstr "nomdelfitxer" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "Maximum username length" -msgstr "" - -#, fuzzy -msgid "Home directory base" -msgstr "Directori de l'usuari" - -msgid "Default location of home directories" -msgstr "" - -msgid "Default shell" -msgstr "" - -msgid "Default shell for new users" -msgstr "" - -msgid "Default users group" -msgstr "" - -msgid "Default group for new users" -msgstr "" - -msgid "Default e-mail domain" -msgstr "" - -msgid "Search time limit" -msgstr "" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" - -msgid "Search size limit" -msgstr "" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "" - -msgid "User search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" - -msgid "Group search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" - -msgid "Enable migration mode" -msgstr "" - -#, fuzzy -msgid "Certificate Subject base" -msgstr "Certificats" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "" - -msgid "Default group objectclasses" -msgstr "" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "" - -msgid "Default user objectclasses" -msgstr "" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" - -msgid "Password Expiration Notification (days)" -msgstr "" - -msgid "Number of days's notice of impending password expiration" -msgstr "" - -msgid "Password plugin features" -msgstr "" - -msgid "Extra hashes to generate in password plug-in" -msgstr "" - -msgid "SELinux user map order" -msgstr "" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" - -msgid "Default SELinux user" -msgstr "" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" - -msgid "Default PAC types" -msgstr "" - -msgid "Default types of PAC supported for services" -msgstr "" - -msgid "Default user authentication types" -msgstr "" - -msgid "Default types of supported user authentication" -msgstr "" - -msgid "Modify configuration options." -msgstr "" - -msgid "Show the current configuration." -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "Delegation name" -msgstr "" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "" - -msgid "Attributes to which the delegation applies" -msgstr "" - -msgid "Member user group" -msgstr "" - -msgid "User group to apply delegation to" -msgstr "" - -msgid "Add a new delegation." -msgstr "" - -msgid "Delete a delegation." -msgstr "" - -msgid "Search for delegations." -msgstr "" - -msgid "Modify a delegation." -msgstr "" - -msgid "Display information about a delegation." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "Global forwarders" -msgstr "" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Forward policy" -msgstr "" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" - -msgid "Allow PTR sync" -msgstr "" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" - -msgid "Zone refresh interval" -msgstr "" - -#, fuzzy -msgid "Zone name" -msgstr "Nom de l'amfitrió" - -msgid "Zone name (FQDN)" -msgstr "" - -msgid "Reverse zone IP network" -msgstr "" - -msgid "IP network to create reverse zone name from" -msgstr "" - -#, fuzzy -msgid "Active zone" -msgstr "Accions" - -msgid "Is zone active?" -msgstr "" - -msgid "Zone forwarders" -msgstr "" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -#, fuzzy -msgid "Record name" -msgstr "Tipus de registre" - -#, fuzzy -msgid "Time to live" -msgstr "L'hora actual" - -#, fuzzy -msgid "Records" -msgstr "Tipus de registre" - -#, fuzzy -msgid "Record type" -msgstr "Tipus de registre" - -#, fuzzy -msgid "Record data" -msgstr "Tipus de registre" - -msgid "A record" -msgstr "" - -msgid "Raw A records" -msgstr "" - -#, fuzzy -msgid "A IP Address" -msgstr "Adreça IP" - -msgid "IP Address" -msgstr "Adreça IP" - -msgid "A Create reverse" -msgstr "" - -msgid "Create reverse record for this IP Address" -msgstr "" - -msgid "AAAA record" -msgstr "" - -msgid "Raw AAAA records" -msgstr "" - -#, fuzzy -msgid "AAAA IP Address" -msgstr "Adreça IP" - -msgid "AAAA Create reverse" -msgstr "" - -msgid "A6 record" -msgstr "" - -msgid "Raw A6 records" -msgstr "" - -msgid "A6 Record data" -msgstr "" - -msgid "AFSDB record" -msgstr "" - -msgid "Raw AFSDB records" -msgstr "" - -#, fuzzy -msgid "AFSDB Subtype" -msgstr "Subtipus" - -msgid "Subtype" -msgstr "Subtipus" - -#, fuzzy -msgid "AFSDB Hostname" -msgstr "Nom de l'ordinador" - -msgid "Hostname" -msgstr "Nom de l'ordinador" - -msgid "APL record" -msgstr "" - -msgid "Raw APL records" -msgstr "" - -msgid "CERT record" -msgstr "" - -msgid "Raw CERT records" -msgstr "" - -#, fuzzy -msgid "CERT Certificate Type" -msgstr "Certificat" - -#, fuzzy -msgid "Certificate Type" -msgstr "Certificat" - -msgid "CERT Key Tag" -msgstr "" - -msgid "Key Tag" -msgstr "" - -#, fuzzy -msgid "CERT Algorithm" -msgstr "Algorisme" - -msgid "Algorithm" -msgstr "Algorisme" - -#, fuzzy -msgid "CERT Certificate/CRL" -msgstr "Certificat" - -#, fuzzy -msgid "Certificate/CRL" -msgstr "Certificat" - -msgid "CNAME record" -msgstr "" - -msgid "Raw CNAME records" -msgstr "" - -#, fuzzy -msgid "CNAME Hostname" -msgstr "Nom de l'ordinador" - -msgid "A hostname which this alias hostname points to" -msgstr "" - -msgid "DHCID record" -msgstr "" - -msgid "Raw DHCID records" -msgstr "" - -msgid "DLV record" -msgstr "" - -msgid "Raw DLV records" -msgstr "" - -msgid "DLV Key Tag" -msgstr "" - -#, fuzzy -msgid "DLV Algorithm" -msgstr "Algorisme" - -msgid "DLV Digest Type" -msgstr "" - -msgid "Digest Type" -msgstr "" - -msgid "DLV Digest" -msgstr "" - -msgid "Digest" -msgstr "" - -msgid "DNAME record" -msgstr "" - -msgid "Raw DNAME records" -msgstr "" - -#, fuzzy -msgid "DNAME Target" -msgstr "Objectiu" - -msgid "Target" -msgstr "Objectiu" - -msgid "DNSKEY record" -msgstr "" - -msgid "Raw DNSKEY records" -msgstr "" - -msgid "DS record" -msgstr "" - -msgid "Raw DS records" -msgstr "" - -msgid "DS Key Tag" -msgstr "" - -#, fuzzy -msgid "DS Algorithm" -msgstr "Algorisme" - -msgid "DS Digest Type" -msgstr "" - -msgid "DS Digest" -msgstr "" - -msgid "HIP record" -msgstr "" - -msgid "Raw HIP records" -msgstr "" - -msgid "IPSECKEY record" -msgstr "" - -msgid "Raw IPSECKEY records" -msgstr "" - -msgid "KEY record" -msgstr "" - -msgid "Raw KEY records" -msgstr "" - -msgid "KX record" -msgstr "" - -msgid "Raw KX records" -msgstr "" - -msgid "KX Preference" -msgstr "" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" - -msgid "KX Exchanger" -msgstr "" - -msgid "A host willing to act as a key exchanger" -msgstr "" - -msgid "LOC record" -msgstr "" - -msgid "Raw LOC records" -msgstr "" - -msgid "LOC Degrees Latitude" -msgstr "" - -msgid "Degrees Latitude" -msgstr "" - -msgid "LOC Minutes Latitude" -msgstr "" - -msgid "Minutes Latitude" -msgstr "" - -msgid "LOC Seconds Latitude" -msgstr "" - -msgid "Seconds Latitude" -msgstr "" - -msgid "LOC Direction Latitude" -msgstr "" - -msgid "Direction Latitude" -msgstr "" - -msgid "LOC Degrees Longitude" -msgstr "" - -msgid "Degrees Longitude" -msgstr "" - -msgid "LOC Minutes Longitude" -msgstr "" - -msgid "Minutes Longitude" -msgstr "" - -msgid "LOC Seconds Longitude" -msgstr "" - -msgid "Seconds Longitude" -msgstr "" - -msgid "LOC Direction Longitude" -msgstr "" - -msgid "Direction Longitude" -msgstr "" - -msgid "LOC Altitude" -msgstr "" - -msgid "Altitude" -msgstr "" - -#, fuzzy -msgid "LOC Size" -msgstr "Mida" - -msgid "Size" -msgstr "Mida" - -msgid "LOC Horizontal Precision" -msgstr "" - -msgid "Horizontal Precision" -msgstr "" - -msgid "LOC Vertical Precision" -msgstr "" - -msgid "Vertical Precision" -msgstr "" - -msgid "MX record" -msgstr "" - -msgid "Raw MX records" -msgstr "" - -msgid "MX Preference" -msgstr "" - -msgid "MX Exchanger" -msgstr "" - -msgid "A host willing to act as a mail exchanger" -msgstr "" - -msgid "NAPTR record" -msgstr "" - -msgid "Raw NAPTR records" -msgstr "" - -msgid "NAPTR Order" -msgstr "" - -msgid "Order" -msgstr "" - -msgid "NAPTR Preference" -msgstr "" - -msgid "Preference" -msgstr "" - -#, fuzzy -msgid "NAPTR Flags" -msgstr "Indicadors" - -msgid "Flags" -msgstr "Indicadors" - -#, fuzzy -msgid "NAPTR Service" -msgstr "Serveis" - -#, fuzzy -msgid "Service" -msgstr "Serveis" - -#, fuzzy -msgid "NAPTR Regular Expression" -msgstr "Expressió regular" - -msgid "Regular Expression" -msgstr "Expressió regular" - -msgid "NAPTR Replacement" -msgstr "" - -msgid "Replacement" -msgstr "" - -msgid "NS record" -msgstr "" - -msgid "Raw NS records" -msgstr "" - -#, fuzzy -msgid "NS Hostname" -msgstr "Nom de l'ordinador" - -msgid "NSEC record" -msgstr "" - -msgid "Raw NSEC records" -msgstr "" - -msgid "NSEC3 record" -msgstr "" - -msgid "Raw NSEC3 records" -msgstr "" - -msgid "PTR record" -msgstr "" - -msgid "Raw PTR records" -msgstr "" - -#, fuzzy -msgid "PTR Hostname" -msgstr "Nom de l'ordinador" - -msgid "The hostname this reverse record points to" -msgstr "" - -msgid "RRSIG record" -msgstr "" - -msgid "Raw RRSIG records" -msgstr "" - -#, fuzzy -msgid "RP record" -msgstr "Tipus de registre" - -msgid "Raw RP records" -msgstr "" - -msgid "SIG record" -msgstr "" - -msgid "Raw SIG records" -msgstr "" - -msgid "SPF record" -msgstr "" - -msgid "Raw SPF records" -msgstr "" - -msgid "SRV record" -msgstr "" - -msgid "Raw SRV records" -msgstr "" - -#, fuzzy -msgid "SRV Priority" -msgstr "Prioritat" - -msgid "Priority" -msgstr "Prioritat" - -#, fuzzy -msgid "SRV Weight" -msgstr "Pes" - -msgid "Weight" -msgstr "Pes" - -#, fuzzy -msgid "SRV Port" -msgstr "Port" - -msgid "Port" -msgstr "Port" - -#, fuzzy -msgid "SRV Target" -msgstr "Objectiu" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" - -msgid "SSHFP record" -msgstr "" - -msgid "Raw SSHFP records" -msgstr "" - -#, fuzzy -msgid "SSHFP Algorithm" -msgstr "Algorisme" - -#, fuzzy -msgid "SSHFP Fingerprint Type" -msgstr "Empremta digital SHA1" - -#, fuzzy -msgid "Fingerprint Type" -msgstr "Empremta" - -#, fuzzy -msgid "SSHFP Fingerprint" -msgstr "Empremta digital SHA1" - -msgid "Fingerprint" -msgstr "Empremta" - -msgid "TA record" -msgstr "" - -msgid "Raw TA records" -msgstr "" - -msgid "TLSA record" -msgstr "" - -msgid "Raw TLSA records" -msgstr "" - -#, fuzzy -msgid "TLSA Certificate Usage" -msgstr "Certificats" - -#, fuzzy -msgid "Certificate Usage" -msgstr "Certificats" - -msgid "TLSA Selector" -msgstr "" - -#, fuzzy -msgid "Selector" -msgstr "Selecciona-ho tot" - -msgid "TLSA Matching Type" -msgstr "" - -#, fuzzy -msgid "Matching Type" -msgstr "Coincideix" - -msgid "TLSA Certificate Association Data" -msgstr "" - -#, fuzzy -msgid "Certificate Association Data" -msgstr "Certificats" - -msgid "TKEY record" -msgstr "" - -msgid "Raw TKEY records" -msgstr "" - -msgid "TSIG record" -msgstr "" - -msgid "Raw TSIG records" -msgstr "" - -msgid "TXT record" -msgstr "" - -msgid "Raw TXT records" -msgstr "" - -msgid "TXT Text Data" -msgstr "" - -#, fuzzy -msgid "Text Data" -msgstr "Dades" - -msgid "Authoritative nameserver" -msgstr "" - -msgid "Authoritative nameserver domain name" -msgstr "" - -msgid "Administrator e-mail address" -msgstr "" - -msgid "SOA serial" -msgstr "" - -#, fuzzy -msgid "SOA record serial number" -msgstr "Número de sèrie" - -#, fuzzy -msgid "SOA refresh" -msgstr "Refresca" - -msgid "SOA record refresh time" -msgstr "" - -msgid "SOA retry" -msgstr "" - -msgid "SOA record retry time" -msgstr "" - -msgid "SOA expire" -msgstr "" - -msgid "SOA record expire time" -msgstr "" - -msgid "SOA minimum" -msgstr "" - -msgid "How long should negative responses be cached" -msgstr "" - -msgid "Time to live for records at zone apex" -msgstr "" - -msgid "BIND update policy" -msgstr "" - -msgid "Dynamic update" -msgstr "" - -msgid "Allow dynamic updates." -msgstr "" - -#, fuzzy -msgid "Allow query" -msgstr "Permet" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" - -msgid "Allow transfer" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" - -msgid "Allow in-line DNSSEC signing" -msgstr "" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "" - -msgid "NSEC3PARAM record" -msgstr "" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" - -msgid "Resolve a host name in DNS." -msgstr "" - -msgid "Modify global DNS configuration." -msgstr "" - -msgid "Show the current global DNS configuration." -msgstr "" - -msgid "Create new DNS forward zone." -msgstr "" - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" - -#, fuzzy -msgid "Permission value" -msgstr "Permís" - -msgid "Delete DNS forward zone." -msgstr "" - -msgid "Disable DNS Forward Zone." -msgstr "" - -msgid "Enable DNS Forward Zone." -msgstr "" - -msgid "Search for DNS forward zones." -msgstr "" - -msgid "Modify DNS forward zone." -msgstr "" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" - -msgid "Display information about a DNS forward zone." -msgstr "" - -msgid "Add new DNS resource record." -msgstr "" - -msgid "Force" -msgstr "Força" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "" - -msgid "Structured" -msgstr "" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" - -msgid "Delete DNS resource record." -msgstr "" - -msgid "Delete all associated records" -msgstr "" - -msgid "Delete DNS record entry." -msgstr "" - -msgid "Search for DNS resources." -msgstr "" - -msgid "Modify a DNS resource record." -msgstr "" - -msgid "Rename the DNS resource record object" -msgstr "" - -msgid "Display DNS resource." -msgstr "" - -msgid "Create new DNS zone (SOA record)." -msgstr "" - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" - -msgid "Add a permission for per-zone access delegation." -msgstr "" - -msgid "Delete DNS zone (SOA record)." -msgstr "" - -msgid "Disable DNS Zone." -msgstr "" - -msgid "Enable DNS Zone." -msgstr "" - -msgid "Search for DNS zones (SOA records)." -msgstr "" - -msgid "Forward zones only" -msgstr "" - -msgid "Search for forward zones only" -msgstr "" - -msgid "Modify DNS zone (SOA record)." -msgstr "" - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" - -msgid "Remove a permission for per-zone access delegation." -msgstr "" - -msgid "Display information about a DNS zone (SOA record)." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "Group name" -msgstr "Nom del grup" - -#, fuzzy -msgid "Group description" -msgstr "descripció" - -#, fuzzy -msgid "GID" -msgstr "UID" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Member users" -msgstr "" - -msgid "Member groups" -msgstr "" - -msgid "Member of groups" -msgstr "" - -#, fuzzy -msgid "Roles" -msgstr "Rol" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Suppress processing of membership attributes." -msgstr "" - -msgid "Add members to a group." -msgstr "" - -#, fuzzy -msgid "External member" -msgstr "Extern" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -msgid "member group" -msgstr "" - -msgid "groups to add" -msgstr "" - -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - -#, fuzzy -msgid "Delete group." -msgstr "Suprimeix" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "user" -msgstr "usuari" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "group" -msgstr "grup" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -#, fuzzy -msgid "netgroup" -msgstr "grup" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "role" -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "HBAC rule" -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "sudo rule" -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -#, fuzzy -msgid "Rule name" -msgstr "Canvia el nom" - -#, fuzzy -msgid "Rule type" -msgstr "Subtipus" - -msgid "Rule type (allow)" -msgstr "" - -#, fuzzy -msgid "User category" -msgstr "Nom d'usuari" - -msgid "User category the rule applies to" -msgstr "" - -#, fuzzy -msgid "Host category" -msgstr "Nom de l'ordinador" - -msgid "Host category the rule applies to" -msgstr "" - -msgid "Service category" -msgstr "" - -msgid "Service category the rule applies to" -msgstr "" - -msgid "Enabled" -msgstr "S'ha habilitat" - -#, fuzzy -msgid "User Groups" -msgstr "Grups" - -#, fuzzy -msgid "Host Groups" -msgstr "Grups" - -msgid "Services" -msgstr "Serveis" - -#, fuzzy -msgid "Service Groups" -msgstr "Serveis" - -#, fuzzy -msgid "External host" -msgstr "Extern" - -msgid "Create a new HBAC rule." -msgstr "" - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "member host" -msgstr "" - -msgid "hosts to add" -msgstr "" - -msgid "member host group" -msgstr "" - -msgid "host groups to add" -msgstr "" - -msgid "Add services to an HBAC rule." -msgstr "" - -msgid "member HBAC service" -msgstr "" - -msgid "HBAC services to add" -msgstr "" - -msgid "member HBAC service group" -msgstr "" - -msgid "HBAC service groups to add" -msgstr "" - -msgid "Add users and groups to an HBAC rule." -msgstr "" - -msgid "Delete an HBAC rule." -msgstr "" - -msgid "Disable an HBAC rule." -msgstr "" - -msgid "Enable an HBAC rule." -msgstr "" - -msgid "Search for HBAC rules." -msgstr "" - -msgid "Modify an HBAC rule." -msgstr "" - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "hosts to remove" -msgstr "" - -msgid "host groups to remove" -msgstr "" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "" - -msgid "HBAC services to remove" -msgstr "" - -msgid "HBAC service groups to remove" -msgstr "" - -msgid "Remove users and groups from an HBAC rule." -msgstr "" - -msgid "Display the properties of an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" - -#, fuzzy -msgid "Service name" -msgstr "Nom del servidor" - -#, fuzzy -msgid "HBAC service" -msgstr "serveis" - -#, fuzzy -msgid "HBAC service description" -msgstr "descripció" - -msgid "Member of HBAC service groups" -msgstr "" - -msgid "Add a new HBAC service." -msgstr "" - -msgid "Delete an existing HBAC service." -msgstr "" - -msgid "Search for HBAC services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" - -msgid "Modify an HBAC service." -msgstr "" - -msgid "Display information about an HBAC service." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -#, fuzzy -msgid "Service group name" -msgstr "Nom de grup de xarxa" - -msgid "HBAC service group description" -msgstr "" - -msgid "Member HBAC service" -msgstr "" - -msgid "Add a new HBAC service group." -msgstr "" - -msgid "Add members to an HBAC service group." -msgstr "" - -msgid "Delete an HBAC service group." -msgstr "" - -msgid "Search for an HBAC service group." -msgstr "" - -msgid "Modify an HBAC service group." -msgstr "" - -msgid "Remove members from an HBAC service group." -msgstr "" - -msgid "Display information about an HBAC service group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -msgid "User name" -msgstr "Nom d'usuari" - -#, fuzzy -msgid "Target host" -msgstr "Objectiu" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "Avís" - -#, fuzzy -msgid "Matched rules" -msgstr "Coincideix" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host name" -msgstr "Nom de l'amfitrió" - -msgid "A description of this host" -msgstr "" - -msgid "Locality" -msgstr "Localitat" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "" - -msgid "Platform" -msgstr "Plataforma" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "" - -msgid "Operating system" -msgstr "Sistema operatiu" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "" - -#, fuzzy -msgid "User password" -msgstr "contrasenya" - -msgid "Password used in bulk enrollment" -msgstr "" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "" - -#, fuzzy -msgid "Random password" -msgstr "contrasenya" - -msgid "Certificate" -msgstr "Certificat" - -msgid "Base-64 encoded server certificate" -msgstr "" - -msgid "Principal name" -msgstr "" - -#, fuzzy -msgid "MAC address" -msgstr "Adreça de correu electrònic" - -msgid "Hardware MAC address(es) on this host" -msgstr "" - -msgid "SSH public key" -msgstr "" - -msgid "Class" -msgstr "Classe" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "Assigned ID View" -msgstr "" - -msgid "Requires pre-authentication" -msgstr "" - -msgid "Pre-authentication is required for the service" -msgstr "" - -msgid "Trusted for delegation" -msgstr "" - -msgid "Client credentials may be delegated to the service" -msgstr "" - -msgid "Member of host-groups" -msgstr "" - -msgid "Indirect Member of host-group" -msgstr "" - -msgid "Keytab" -msgstr "" - -#, fuzzy -msgid "Managed by" -msgstr "Gestor" - -#, fuzzy -msgid "Managing" -msgstr "Gestor" - -msgid "Users allowed to retrieve keytab" -msgstr "" - -msgid "Groups allowed to retrieve keytab" -msgstr "" - -msgid "Hosts allowed to retrieve keytab" -msgstr "" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "" - -msgid "Users allowed to create keytab" -msgstr "" - -msgid "Groups allowed to create keytab" -msgstr "" - -msgid "Hosts allowed to create keytab" -msgstr "" - -msgid "Host Groups allowed to create keytab" -msgstr "" - -msgid "Add a new host." -msgstr "" - -msgid "force host name even if not in DNS" -msgstr "" - -msgid "skip reverse DNS detection" -msgstr "" - -msgid "Add the host to DNS with this IP address" -msgstr "" - -msgid "Add hosts that can manage this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" - -#, fuzzy -msgid "Delete a host." -msgstr "Suprimeix" - -msgid "Remove entries from DNS" -msgstr "" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" - -msgid "Search for hosts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" - -#, fuzzy -msgid "host group" -msgstr "grup" - -msgid "Search for hosts with these member of host groups." -msgstr "" - -msgid "Search for hosts without these member of host groups." -msgstr "" - -msgid "Search for hosts with these member of netgroups." -msgstr "" - -msgid "Search for hosts without these member of netgroups." -msgstr "" - -msgid "Search for hosts with these member of roles." -msgstr "" - -msgid "Search for hosts without these member of roles." -msgstr "" - -msgid "Search for hosts with these member of HBAC rules." -msgstr "" - -msgid "Search for hosts without these member of HBAC rules." -msgstr "" - -msgid "Search for hosts with these member of sudo rules." -msgstr "" - -msgid "Search for hosts without these member of sudo rules." -msgstr "" - -msgid "Search for hosts with these enrolled by users." -msgstr "" - -msgid "Search for hosts without these enrolled by users." -msgstr "" - -msgid "host" -msgstr "" - -msgid "Search for hosts with these managed by hosts." -msgstr "" - -msgid "Search for hosts without these managed by hosts." -msgstr "" - -msgid "Search for hosts with these managing hosts." -msgstr "" - -msgid "Search for hosts without these managing hosts." -msgstr "" - -msgid "Modify information about a host." -msgstr "" - -msgid "Kerberos principal name for this host" -msgstr "" - -msgid "Update DNS entries" -msgstr "" - -msgid "Remove hosts that can manage this host." -msgstr "" - -msgid "Display information about a host." -msgstr "" - -msgid "file to store certificate in" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -msgid "Host-group" -msgstr "grup" - -msgid "Name of host-group" -msgstr "" - -msgid "A description of this host-group" -msgstr "" - -msgid "Member hosts" -msgstr "" - -msgid "Member host-groups" -msgstr "" - -msgid "Indirect Member hosts" -msgstr "" - -msgid "Indirect Member host-groups" -msgstr "" - -msgid "Add a new hostgroup." -msgstr "" - -msgid "Add members to a hostgroup." -msgstr "" - -msgid "Delete a hostgroup." -msgstr "" - -msgid "Search for hostgroups." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" - -msgid "Search for host groups with these member hosts." -msgstr "" - -msgid "Search for host groups without these member hosts." -msgstr "" - -msgid "Search for host groups with these member host groups." -msgstr "" - -msgid "Search for host groups without these member host groups." -msgstr "" - -msgid "Search for host groups with these member of host groups." -msgstr "" - -msgid "Search for host groups without these member of host groups." -msgstr "" - -msgid "Search for host groups with these member of netgroups." -msgstr "" - -msgid "Search for host groups without these member of netgroups." -msgstr "" - -msgid "Search for host groups with these member of HBAC rules." -msgstr "" - -msgid "Search for host groups without these member of HBAC rules." -msgstr "" - -msgid "Search for host groups with these member of sudo rules." -msgstr "" - -msgid "Search for host groups without these member of sudo rules." -msgstr "" - -msgid "Modify a hostgroup." -msgstr "" - -msgid "Remove members from a hostgroup." -msgstr "" - -msgid "Display information about a hostgroup." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "Canvia el nom" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -msgid "Anchor to override" -msgstr "" - -#, fuzzy -msgid "Group ID Number" -msgstr "Nom del grup" - -msgid "User login" -msgstr "Entrada" - -msgid "UID" -msgstr "UID" - -#, fuzzy -msgid "User ID Number" -msgstr "Número de buscapersones" - -msgid "GECOS" -msgstr "" - -msgid "Home directory" -msgstr "Directori de l'usuari" - -msgid "Login shell" -msgstr "Shell d'inici de sessió" - -msgid "ID View Name" -msgstr "" - -msgid "Add a new Group ID override." -msgstr "" - -msgid "Delete an Group ID override." -msgstr "" - -msgid "Search for an Group ID override." -msgstr "" - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" - -msgid "Modify an Group ID override." -msgstr "" - -msgid "Rename the Group ID override object" -msgstr "" - -msgid "Display information about an Group ID override." -msgstr "" - -msgid "Add a new User ID override." -msgstr "" - -msgid "Delete an User ID override." -msgstr "" - -msgid "Search for an User ID override." -msgstr "" - -msgid "Modify an User ID override." -msgstr "" - -msgid "Rename the User ID override object" -msgstr "" - -msgid "Display information about an User ID override." -msgstr "" - -msgid "Add a new ID View." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" - -msgid "hosts" -msgstr "" - -msgid "Hosts to apply the ID View to" -msgstr "" - -#, fuzzy -msgid "hostgroups" -msgstr "grup" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" - -msgid "Hosts that this ID View was applied to." -msgstr "" - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" - -msgid "Number of hosts the ID View was applied to:" -msgstr "" - -msgid "Delete an ID View." -msgstr "" - -msgid "Search for an ID View." -msgstr "" - -msgid "Modify an ID View." -msgstr "" - -msgid "Rename the ID View object" -msgstr "" - -msgid "Display information about an ID View." -msgstr "" - -msgid "Enumerate all the hosts the view applies to." -msgstr "" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" - -msgid "Hosts to clear (any) ID View from." -msgstr "" - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" - -msgid "Hosts that ID View was cleared from." -msgstr "" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" - -msgid "Dict of I18N messages" -msgstr "" - -msgid "Export plugin meta-data for the webUI." -msgstr "" - -msgid "Name of object to export" -msgstr "" - -msgid "Name of method to export" -msgstr "" - -msgid "Name of command to export" -msgstr "" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" - -msgid "Join an IPA domain" -msgstr "" - -msgid "The hostname to register as" -msgstr "" - -msgid "The IPA realm" -msgstr "" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "" - -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" - -msgid "Manage ticket policy for specific user" -msgstr "" - -msgid "Max life" -msgstr "" - -msgid "Maximum ticket life (seconds)" -msgstr "" - -msgid "Max renew" -msgstr "" - -msgid "Maximum renewable age (seconds)" -msgstr "" - -msgid "Modify Kerberos ticket policy." -msgstr "" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "" - -msgid "Display the current Kerberos ticket policy." -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," -"cn=accounts' --group-container='cn=groups,cn=accounts' " -"ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' --user-ignore-" -"objectclass=radiusprofile --user-ignore-" -"attribute=radiusgroupname ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -msgid "Migrate users and groups from DS to IPA." -msgstr "" - -msgid "LDAP URI" -msgstr "" - -msgid "LDAP URI of DS server to migrate from" -msgstr "" - -#, fuzzy -msgid "bind password" -msgstr "contrasenya" - -msgid "Bind DN" -msgstr "" - -#, fuzzy -msgid "User container" -msgstr "Nom d'usuari" - -msgid "DN of container for users in DS relative to base DN" -msgstr "" - -#, fuzzy -msgid "Group container" -msgstr "Nom del grup" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "" - -msgid "User object class" -msgstr "" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "" - -msgid "Group object class" -msgstr "" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "" - -msgid "Ignore user object class" -msgstr "" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore user attribute" -msgstr "" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore group object class" -msgstr "" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "Ignore group attribute" -msgstr "" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "" - -msgid "Overwrite GID" -msgstr "" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" - -msgid "LDAP schema" -msgstr "" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" - -msgid "Continue" -msgstr "Continua" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" - -msgid "Base DN" -msgstr "" - -msgid "Base DN on remote LDAP server" -msgstr "" - -msgid "Ignore compat plugin" -msgstr "" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" - -#, fuzzy -msgid "CA certificate" -msgstr "Certificat" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "" - -msgid "groups to exclude from migration" -msgstr "" - -msgid "users to exclude from migration" -msgstr "" - -msgid "Lists of objects migrated; categorized by type." -msgstr "" - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" - -msgid "False if migration mode was disabled." -msgstr "" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" - -msgid "Show environment variables." -msgstr "" - -msgid "Forward to server instead of running locally" -msgstr "" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Total number of variables env (>= count)" -msgstr "" - -msgid "Number of variables returned (<= total)" -msgstr "" - -msgid "Show all loaded plugins." -msgstr "" - -msgid "Dictionary mapping plugin names to bases" -msgstr "" - -msgid "Number of plugins loaded" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "Netgroup name" -msgstr "Nom de grup de xarxa" - -#, fuzzy -msgid "Netgroup description" -msgstr "descripció" - -msgid "NIS domain name" -msgstr "" - -msgid "IPA unique ID" -msgstr "" - -msgid "Member netgroups" -msgstr "" - -msgid "Indirect Member netgroups" -msgstr "" - -msgid "Member User" -msgstr "" - -msgid "Member Group" -msgstr "" - -msgid "Member Host" -msgstr "" - -msgid "Member Hostgroup" -msgstr "" - -msgid "Add a new netgroup." -msgstr "" - -msgid "Add members to a netgroup." -msgstr "" - -msgid "member netgroup" -msgstr "" - -#, fuzzy -msgid "netgroups to add" -msgstr "Nom de grup de xarxa" - -msgid "Delete a netgroup." -msgstr "" - -msgid "Search for a netgroup." -msgstr "" - -msgid "search for managed groups" -msgstr "" - -msgid "Search for netgroups with these member netgroups." -msgstr "" - -msgid "Search for netgroups without these member netgroups." -msgstr "" - -msgid "Search for netgroups with these member users." -msgstr "" - -msgid "Search for netgroups without these member users." -msgstr "" - -msgid "Search for netgroups with these member groups." -msgstr "" - -msgid "Search for netgroups without these member groups." -msgstr "" - -msgid "Search for netgroups with these member hosts." -msgstr "" - -msgid "Search for netgroups without these member hosts." -msgstr "" - -msgid "Search for netgroups with these member host groups." -msgstr "" - -msgid "Search for netgroups without these member host groups." -msgstr "" - -msgid "Search for netgroups with these member of netgroups." -msgstr "" - -msgid "Search for netgroups without these member of netgroups." -msgstr "" - -msgid "Modify a netgroup." -msgstr "" - -msgid "Remove members from a netgroup." -msgstr "" - -#, fuzzy -msgid "netgroups to remove" -msgstr "Nom de grup de xarxa" - -msgid "Display information about a netgroup." -msgstr "" - -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" - -msgid "TOTP authentication Window" -msgstr "" - -msgid "TOTP authentication time variance (seconds)" -msgstr "" - -msgid "TOTP Synchronization Window" -msgstr "" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "" - -msgid "HOTP Authentication Window" -msgstr "" - -msgid "HOTP authentication skip-ahead" -msgstr "" - -msgid "HOTP Synchronization Window" -msgstr "" - -msgid "HOTP synchronization skip-ahead" -msgstr "" - -msgid "Modify OTP configuration options." -msgstr "" - -msgid "Show the current OTP configuration." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Manager" -msgstr "Gestor" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "Inhabilitat" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -#, fuzzy -msgid "Validity start" -msgstr "Validesa" - -msgid "First date/time the token can be used" -msgstr "" - -#, fuzzy -msgid "Validity end" -msgstr "Validesa" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -#, fuzzy -msgid "Serial" -msgstr "Número de sèrie" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -#, fuzzy -msgid "Set a user's password." -msgstr "Reinicia la contrasenya" - -msgid "New Password" -msgstr "Contrasenya nova" - -#, fuzzy -msgid "Current Password" -msgstr "Reinicia la contrasenya" - -msgid "OTP" -msgstr "" - -#, fuzzy -msgid "One Time Password" -msgstr "Reinicia la contrasenya" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -"\n" -"Managed permissions\n" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -#, fuzzy -msgid "Permission name" -msgstr "Permís" - -msgid "Granted rights" -msgstr "" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" - -#, fuzzy -msgid "Effective attributes" -msgstr "Atributs" - -msgid "All attributes to which the permission applies" -msgstr "" - -#, fuzzy -msgid "Included attributes" -msgstr "Atributs" - -msgid "User-specified attributes to which the permission applies" -msgstr "" - -#, fuzzy -msgid "Excluded attributes" -msgstr "Atributs" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" - -#, fuzzy -msgid "Default attributes" -msgstr "Atributs" - -msgid "Attributes to which the permission applies by default" -msgstr "" - -msgid "Bind rule type" -msgstr "" - -msgid "Subtree to apply permissions to" -msgstr "" - -msgid "Extra target filter" -msgstr "" - -msgid "Raw target filter" -msgstr "" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" - -#, fuzzy -msgid "Target DN" -msgstr "Objectiu" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" - -msgid "Member of group" -msgstr "" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "" - -msgid "User group to apply permissions to (sets target)" -msgstr "" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "" - -msgid "Deprecated; use extratargetfilter" -msgstr "" - -msgid "Deprecated; use ipapermlocation" -msgstr "" - -msgid "Deprecated; use ipapermright" -msgstr "" - -msgid "Granted to Privilege" -msgstr "" - -msgid "Indirect Member of roles" -msgstr "" - -#, fuzzy -msgid "Add a new permission." -msgstr "permisos" - -msgid "Add members to a permission." -msgstr "" - -msgid "member privilege" -msgstr "" - -msgid "privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "" - -#, fuzzy -msgid "Permission flags" -msgstr "Permisos" - -#, fuzzy -msgid "Delete a permission." -msgstr "permisos" - -msgid "force delete of SYSTEM permissions" -msgstr "" - -#, fuzzy -msgid "Search for permissions." -msgstr "permisos" - -#, fuzzy -msgid "Modify a permission." -msgstr "permisos" - -msgid "Rename the permission object" -msgstr "" - -msgid "Remove members from a permission." -msgstr "" - -msgid "privileges to remove" -msgstr "" - -msgid "Display information about a permission." -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "Ping a remote server." -msgstr "" - -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "" - -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" - -#, fuzzy -msgid "Privilege name" -msgstr "nomdelfitxer" - -#, fuzzy -msgid "Privilege description" -msgstr "descripció" - -msgid "Granting privilege to roles" -msgstr "" - -msgid "Add a new privilege." -msgstr "" - -msgid "Add members to a privilege." -msgstr "" - -msgid "member role" -msgstr "" - -msgid "roles to add" -msgstr "" - -msgid "Add permissions to a privilege." -msgstr "" - -#, fuzzy -msgid "permission" -msgstr "permisos" - -msgid "permissions" -msgstr "permisos" - -msgid "Number of permissions added" -msgstr "" - -msgid "Delete a privilege." -msgstr "" - -msgid "Search for privileges." -msgstr "" - -msgid "Modify a privilege." -msgstr "" - -msgid "Rename the privilege object" -msgstr "" - -msgid "Remove members from a privilege" -msgstr "" - -msgid "roles to remove" -msgstr "" - -msgid "Remove permissions from a privilege." -msgstr "" - -msgid "Number of permissions removed" -msgstr "" - -msgid "Display information about a privilege." -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Group" -msgstr "Grup" - -msgid "Manage password policy for specific group" -msgstr "" - -msgid "Max lifetime (days)" -msgstr "" - -msgid "Maximum password lifetime (in days)" -msgstr "" - -msgid "Min lifetime (hours)" -msgstr "" - -msgid "Minimum password lifetime (in hours)" -msgstr "" - -msgid "History size" -msgstr "" - -msgid "Password history size" -msgstr "" - -msgid "Character classes" -msgstr "" - -msgid "Minimum number of character classes" -msgstr "" - -msgid "Min length" -msgstr "" - -msgid "Minimum length of password" -msgstr "" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "" - -msgid "Max failures" -msgstr "" - -msgid "Consecutive failures before lockout" -msgstr "" - -msgid "Failure reset interval" -msgstr "" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "" - -#, fuzzy -msgid "Lockout duration" -msgstr "Ubicació" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" - -msgid "Add a new group password policy." -msgstr "" - -msgid "Delete a group password policy." -msgstr "" - -msgid "Search for group password policies." -msgstr "" - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" - -msgid "Modify a group password policy." -msgstr "" - -msgid "Display information about password policy." -msgstr "" - -msgid "User" -msgstr "Usuari" - -msgid "Display effective policy for a specific user" -msgstr "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "RADIUS proxy server name" -msgstr "" - -msgid "A description of this RADIUS proxy server" -msgstr "" - -msgid "Server" -msgstr "Servidor" - -msgid "The hostname or IP (with or without port)" -msgstr "" - -msgid "Secret" -msgstr "" - -msgid "The secret used to encrypt data" -msgstr "" - -#, fuzzy -msgid "Timeout" -msgstr "L'hora actual" - -msgid "The total timeout across all retries (in seconds)" -msgstr "" - -#, fuzzy -msgid "Retries" -msgstr "Reintent" - -msgid "The number of times to retry authentication" -msgstr "" - -#, fuzzy -msgid "User attribute" -msgstr "Atribut" - -msgid "The username attribute on the user object" -msgstr "" - -msgid "Add a new RADIUS proxy server." -msgstr "" - -msgid "Delete a RADIUS proxy server." -msgstr "" - -msgid "Search for RADIUS proxy servers." -msgstr "" - -msgid "Modify a RADIUS proxy server." -msgstr "" - -msgid "Rename the RADIUS proxy server object" -msgstr "" - -msgid "Display information about a RADIUS proxy server." -msgstr "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Domain" -msgstr "Domini" - -#, fuzzy -msgid "Add domain" -msgstr "Domini" - -#, fuzzy -msgid "Delete domain" -msgstr "Suprimeix" - -msgid "Modify realm domains." -msgstr "" - -msgid "Force adding domain even if not in DNS" -msgstr "" - -msgid "Display the list of realm domains." -msgstr "" - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" - -#, fuzzy -msgid "Role name" -msgstr "Canvia el nom" - -msgid "A description of this role-group" -msgstr "" - -msgid "Privileges" -msgstr "" - -#, fuzzy -msgid "Member services" -msgstr "serveis" - -msgid "Add a new role." -msgstr "" - -msgid "Add members to a role." -msgstr "" - -#, fuzzy -msgid "member service" -msgstr "serveis" - -#, fuzzy -msgid "services to add" -msgstr "serveis" - -msgid "Add privileges to a role." -msgstr "" - -msgid "privilege" -msgstr "" - -msgid "privileges" -msgstr "" - -msgid "Number of privileges added" -msgstr "" - -#, fuzzy -msgid "Delete a role." -msgstr "Suprimeix" - -msgid "Search for roles." -msgstr "" - -msgid "Modify a role." -msgstr "" - -msgid "Rename the role object" -msgstr "" - -msgid "Remove members from a role." -msgstr "" - -#, fuzzy -msgid "services to remove" -msgstr "serveis" - -msgid "Remove privileges from a role." -msgstr "" - -msgid "Number of privileges removed" -msgstr "" - -msgid "Display information about a role." -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -#, fuzzy -msgid "Self-service name" -msgstr "Nom d'usuari" - -msgid "Attributes to which the permission applies." -msgstr "" - -msgid "Add a new self-service permission." -msgstr "" - -msgid "Delete a self-service permission." -msgstr "" - -msgid "Search for a self-service permission." -msgstr "" - -msgid "Modify a self-service permission." -msgstr "" - -msgid "Display information about a self-service permission." -msgstr "" - -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" - -msgid "SELinux User" -msgstr "" - -msgid "HBAC Rule" -msgstr "" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "" - -msgid "Create a new SELinux User Map." -msgstr "" - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "" - -msgid "Delete a SELinux User Map." -msgstr "" - -msgid "Disable an SELinux User Map rule." -msgstr "" - -msgid "Enable an SELinux User Map rule." -msgstr "" - -msgid "Search for SELinux User Maps." -msgstr "" - -msgid "Modify a SELinux User Map." -msgstr "" - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "" - -msgid "Display the properties of a SELinux User Map rule." -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "Service principal" -msgstr "" - -msgid "PAC type" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" - -msgid "Add a new IPA new service." -msgstr "" - -msgid "force principal name even if not in DNS" -msgstr "" - -msgid "Add hosts that can manage this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Delete an IPA service." -msgstr "" - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Search for IPA services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" - -msgid "Search for services with these managed by hosts." -msgstr "" - -msgid "Search for services without these managed by hosts." -msgstr "" - -msgid "Modify an existing IPA service." -msgstr "" - -msgid "Remove hosts that can manage this service." -msgstr "" - -msgid "Display information about an IPA service." -msgstr "" - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" - -#, fuzzy -msgid "Sudo Command" -msgstr "Ordres" - -msgid "A description of this command" -msgstr "" - -msgid "Sudo Command Groups" -msgstr "" - -msgid "Create new Sudo Command." -msgstr "" - -msgid "Delete Sudo Command." -msgstr "" - -msgid "Search for Sudo Commands." -msgstr "" - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" - -msgid "Modify Sudo Command." -msgstr "" - -msgid "Display Sudo Command." -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "Sudo Command Group" -msgstr "" - -msgid "Commands" -msgstr "Ordres" - -msgid "Member Sudo commands" -msgstr "" - -msgid "Create new Sudo Command Group." -msgstr "" - -msgid "Add members to Sudo Command Group." -msgstr "" - -msgid "member sudo command" -msgstr "" - -msgid "sudo commands to add" -msgstr "" - -msgid "Delete Sudo Command Group." -msgstr "" - -msgid "Search for Sudo Command Groups." -msgstr "" - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" - -msgid "Modify Sudo Command Group." -msgstr "" - -msgid "Remove members from Sudo Command Group." -msgstr "" - -msgid "sudo commands to remove" -msgstr "" - -msgid "Display Sudo Command Group." -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -#, fuzzy -msgid "NetBIOS name" -msgstr "Nom de grup de xarxa" - -#, fuzzy -msgid "Domain GUID" -msgstr "Domini" - -msgid "Fallback primary group" -msgstr "" - -#, fuzzy -msgid "Domain name" -msgstr "Domini" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -#, fuzzy -msgid "Active Directory domain administrator" -msgstr "Domini d'Active Directory" - -#, fuzzy -msgid "Active Directory domain administrator's password" -msgstr "Domini d'Active Directory" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "Nom" - -msgid "Last name" -msgstr "Cognom" - -msgid "Full name" -msgstr "Nom complet" - -#, fuzzy -msgid "Display name" -msgstr "Nom" - -msgid "Initials" -msgstr "Inicials" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Email address" -msgstr "Adreça de correu electrònic" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "Ciutat" - -msgid "State/Province" -msgstr "Estat/província" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "Número de telèfon" - -#, fuzzy -msgid "Mobile Telephone Number" -msgstr "Número de telèfon" - -msgid "Pager Number" -msgstr "Número de buscapersones" - -msgid "Fax Number" -msgstr "Número de fax" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "Càrrec" - -msgid "Car License" -msgstr "" - -#, fuzzy -msgid "Account disabled" -msgstr "Paràmetres dels comptes" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -#, fuzzy -msgid "RADIUS proxy configuration" -msgstr "Configuració" - -msgid "RADIUS proxy username" -msgstr "" - -#, fuzzy -msgid "Department Number" -msgstr "Número de buscapersones" - -#, fuzzy -msgid "Employee Number" -msgstr "Número de telèfon" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -#, fuzzy -msgid "Delete a user." -msgstr "Suprimeix" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "Ell mateix" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "Command category" -msgstr "" - -msgid "Command category the rule applies to" -msgstr "" - -msgid "RunAs User category" -msgstr "" - -msgid "RunAs User category the rule applies to" -msgstr "" - -msgid "RunAs Group category" -msgstr "" - -msgid "RunAs Group category the rule applies to" -msgstr "" - -msgid "Sudo order" -msgstr "" - -msgid "integer to order the Sudo rules" -msgstr "" - -#, fuzzy -msgid "External User" -msgstr "Extern" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -#, fuzzy -msgid "Host Masks" -msgstr "Nom de l'ordinador" - -msgid "Sudo Allow Commands" -msgstr "" - -#, fuzzy -msgid "Sudo Deny Commands" -msgstr "Ordres" - -msgid "Sudo Allow Command Groups" -msgstr "" - -msgid "Sudo Deny Command Groups" -msgstr "" - -#, fuzzy -msgid "RunAs Users" -msgstr "Usuaris" - -msgid "Run as a user" -msgstr "" - -msgid "Groups of RunAs Users" -msgstr "" - -msgid "Run as any user within a specified group" -msgstr "" - -msgid "RunAs External User" -msgstr "" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -msgid "External Groups of RunAs Users" -msgstr "" - -msgid "External Groups of users that the command can run as" -msgstr "" - -#, fuzzy -msgid "RunAs Groups" -msgstr "Grups" - -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -msgid "RunAs External Group" -msgstr "" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -#, fuzzy -msgid "Sudo Option" -msgstr "Opcions" - -msgid "Create new Sudo Rule." -msgstr "" - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "member sudo command group" -msgstr "" - -msgid "sudo command groups to add" -msgstr "" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "" - -msgid "Add group for Sudo to execute as." -msgstr "" - -msgid "Add users and groups for Sudo to execute as." -msgstr "" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "" - -msgid "Delete Sudo Rule." -msgstr "" - -msgid "Disable a Sudo Rule." -msgstr "" - -msgid "Enable a Sudo Rule." -msgstr "" - -msgid "Search for Sudo Rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -msgid "Modify Sudo Rule." -msgstr "" - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "sudo command groups to remove" -msgstr "" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "Remove an option from Sudo Rule." -msgstr "" - -msgid "Remove group for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "" - -msgid "Display Sudo Rule." -msgstr "" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -#, fuzzy -msgid "ACL name" -msgstr "Cognom" - -msgid "Profile category" -msgstr "" - -msgid "Profile category the ACL applies to" -msgstr "" - -msgid "User category the ACL applies to" -msgstr "" - -msgid "Host category the ACL applies to" -msgstr "" - -msgid "Service category the ACL applies to" -msgstr "" - -msgid "Profiles" -msgstr "" - -msgid "Create a new CA ACL." -msgstr "" - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "" - -msgid "Add profiles to a CA ACL." -msgstr "" - -#, fuzzy -msgid "member Certificate Profile" -msgstr "Retenció del certificat" - -#, fuzzy -msgid "Certificate Profiles to add" -msgstr "Retenció del certificat" - -msgid "Add services to a CA ACL." -msgstr "" - -msgid "Add users and groups to a CA ACL." -msgstr "" - -msgid "Delete a CA ACL." -msgstr "" - -msgid "Disable a CA ACL." -msgstr "" - -msgid "Enable a CA ACL." -msgstr "" - -msgid "Search for CA ACLs." -msgstr "" - -msgid "Modify a CA ACL." -msgstr "" - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "" - -msgid "Remove profiles from a CA ACL." -msgstr "" - -#, fuzzy -msgid "Certificate Profiles to remove" -msgstr "Retenció del certificat" - -msgid "Remove services from a CA ACL." -msgstr "" - -msgid "Remove users and groups from a CA ACL." -msgstr "" - -msgid "Display the properties of a CA ACL." -msgstr "" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -#, fuzzy -msgid "Certificate Profile to use" -msgstr "Retenció del certificat" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -#, fuzzy -msgid "Profile description" -msgstr "descripció" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -#, fuzzy -msgid "Delete a Certificate Profile." -msgstr "Retenció del certificat" - -msgid "Search for Certificate Profiles." -msgstr "" - -#, fuzzy -msgid "Import a Certificate Profile." -msgstr "Retenció del certificat" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" - -msgid "Query current Domain Level." -msgstr "" - -msgid "Current domain level:" -msgstr "" - -msgid "Change current Domain Level." -msgstr "" - -#, fuzzy -msgid "Domain Level" -msgstr "Domini" - -msgid "Add certificates to host entry" -msgstr "" - -msgid "Remove certificates from host entry" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "Fallback to AD DC LDAP" -msgstr "" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" - -msgid "Add to default group" -msgstr "" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" - -#, fuzzy -msgid "Search scope" -msgstr "Cerca" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Target DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" - -msgid "Origin DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -#, fuzzy -msgid "Server name" -msgstr "Nom del servidor" - -#, fuzzy -msgid "IPA server hostname" -msgstr "Nom del servidor" - -msgid "Managed suffix" -msgstr "" - -msgid "Min domain level" -msgstr "" - -msgid "Minimum domain level" -msgstr "" - -msgid "Max domain level" -msgstr "" - -msgid "Maximum domain level" -msgstr "" - -msgid "Delete IPA server." -msgstr "" - -msgid "Search for IPA servers." -msgstr "" - -msgid "Show IPA server." -msgstr "" - -msgid "Add new certificates to a service" -msgstr "" - -msgid "Remove certificates from a service" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -#, fuzzy -msgid "Allowed Target" -msgstr "Objectiu" - -msgid "Create a new service delegation rule." -msgstr "" - -msgid "Add member to a named service delegation rule." -msgstr "" - -msgid "member principal" -msgstr "" - -msgid "principal to add" -msgstr "" - -msgid "Add target to a named service delegation rule." -msgstr "" - -msgid "member service delegation target" -msgstr "" - -msgid "service delegation targets to add" -msgstr "" - -msgid "Delete service delegation." -msgstr "" - -msgid "Search for service delegations rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" - -msgid "Remove member from a named service delegation rule." -msgstr "" - -msgid "principal to remove" -msgstr "" - -msgid "Remove target from a named service delegation rule." -msgstr "" - -msgid "service delegation targets to remove" -msgstr "" - -msgid "Display information about a named service delegation rule." -msgstr "" - -msgid "Create a new service delegation target." -msgstr "" - -msgid "Add member to a named service delegation target." -msgstr "" - -msgid "Delete service delegation target." -msgstr "" - -msgid "Search for service delegation target." -msgstr "" - -msgid "Remove member from a named service delegation target." -msgstr "" - -msgid "Display information about a named service delegation target." -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" - -msgid "Activate a stage user." -msgstr "" - -msgid "Add a new stage user." -msgstr "" - -msgid "Create Stage user in from a delete user" -msgstr "" - -msgid "Delete a stage user." -msgstr "" - -msgid "Search for stage users." -msgstr "" - -msgid "Search for stage users with these member of groups." -msgstr "" - -msgid "Search for stage users without these member of groups." -msgstr "" - -msgid "Search for stage users with these member of netgroups." -msgstr "" - -msgid "Search for stage users without these member of netgroups." -msgstr "" - -msgid "Search for stage users with these member of roles." -msgstr "" - -msgid "Search for stage users without these member of roles." -msgstr "" - -msgid "Search for stage users with these member of HBAC rules." -msgstr "" - -msgid "Search for stage users without these member of HBAC rules." -msgstr "" - -msgid "Search for stage users with these member of sudo rules." -msgstr "" - -msgid "Search for stage users without these member of sudo rules." -msgstr "" - -msgid "Modify a stage user." -msgstr "" - -msgid "Rename the stage user object" -msgstr "" - -msgid "Display information about a stage user." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" - -msgid "Segment name" -msgstr "" - -msgid "Arbitrary string identifying the segment" -msgstr "" - -msgid "Left node" -msgstr "" - -msgid "Left replication node - an IPA server" -msgstr "" - -#, fuzzy -msgid "Right node" -msgstr "Drets" - -msgid "Right replication node - an IPA server" -msgstr "" - -msgid "Connectivity" -msgstr "" - -msgid "Direction of replication between left and right replication node" -msgstr "" - -#, fuzzy -msgid "Attributes to strip" -msgstr "Atributs" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" - -#, fuzzy -msgid "Attributes to replicate" -msgstr "Atributs" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" - -msgid "Attributes for total update" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" - -#, fuzzy -msgid "Session timeout" -msgstr "Temps d'accés" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" - -msgid "Replication agreement enabled" -msgstr "" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" - -#, fuzzy -msgid "Suffix name" -msgstr "nomdelfitxer" - -msgid "LDAP suffix to be managed" -msgstr "" - -msgid "Add a new segment." -msgstr "" - -msgid "Delete a segment." -msgstr "" - -msgid "Search for topology segments." -msgstr "" - -msgid "Modify a segment." -msgstr "" - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" - -msgid "Initialize left node" -msgstr "" - -msgid "Initialize right node" -msgstr "" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "" - -msgid "Display a segment." -msgstr "" - -msgid "Add a new topology suffix to be managed." -msgstr "" - -msgid "Delete a topology suffix." -msgstr "" - -msgid "Search for topology suffices." -msgstr "" - -msgid "Modify a topology suffix." -msgstr "" - -msgid "Show managed suffix." -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "Preserved user" -msgstr "" - -msgid "Add one or more certificates to the user entry" -msgstr "" - -msgid "Remove one or more certificates to the user entry" -msgstr "" - -msgid "Move deleted user into staged area" -msgstr "" - -msgid "Undelete a delete user account." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -#, fuzzy -msgid "Vault name" -msgstr "Cognom" - -#, fuzzy -msgid "Vault description" -msgstr "descripció" - -msgid "Vault type" -msgstr "" - -msgid "Salt" -msgstr "" - -msgid "Vault salt" -msgstr "" - -msgid "Public key" -msgstr "" - -msgid "Vault public key" -msgstr "" - -#, fuzzy -msgid "Owner users" -msgstr "usuaris" - -msgid "Owner groups" -msgstr "" - -#, fuzzy -msgid "Owner services" -msgstr "serveis" - -msgid "Failed owners" -msgstr "" - -#, fuzzy -msgid "Vault service" -msgstr "serveis" - -msgid "Shared vault" -msgstr "" - -msgid "Vault user" -msgstr "" - -#, fuzzy -msgid "Transport Certificate" -msgstr "Certificat" - -msgid "Service name of the service vault" -msgstr "" - -msgid "Username of the user vault" -msgstr "" - -msgid "Add members to a vault." -msgstr "" - -msgid "Add owners to a vault." -msgstr "" - -msgid "owner user" -msgstr "" - -#, fuzzy -msgid "owner group" -msgstr "grup" - -#, fuzzy -msgid "owner service" -msgstr "serveis" - -msgid "Owners that could not be added" -msgstr "" - -msgid "Number of owners added" -msgstr "" - -msgid "Session key wrapped with transport certificate" -msgstr "" - -msgid "Vault data encrypted with session key" -msgstr "" - -msgid "Nonce" -msgstr "" - -msgid "Delete a vault." -msgstr "" - -msgid "Search for vaults." -msgstr "" - -msgid "List all service vaults" -msgstr "" - -msgid "List all user vaults" -msgstr "" - -msgid "Remove members from a vault." -msgstr "" - -msgid "Remove owners from a vault." -msgstr "" - -msgid "Owners that could not be removed" -msgstr "" - -msgid "Number of owners removed" -msgstr "" - -msgid "Display information about a vault." -msgstr "" - -#, fuzzy -msgid "Show vault configuration." -msgstr "Configuració" - -msgid "Output file to store the transport certificate" -msgstr "" - -msgid "Add owners to a vault container." -msgstr "" - -msgid "Delete a vault container." -msgstr "" - -msgid "Remove owners from a vault container." -msgstr "" - -msgid "Display information about a vault container." -msgstr "" - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "" - -#, fuzzy -msgid "Hostname (FQDN)" -msgstr "Nom de l'ordinador" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Managed suffixes" -msgstr "" - -msgid "Check connection to remote IPA server." -msgstr "" - -#, fuzzy -msgid "Remote server name" -msgstr "Nom del servidor" - -msgid "Remote IPA server hostname" -msgstr "" - -msgid "suffix" -msgstr "" - -msgid "Search for servers with these managed suffixes." -msgstr "" - -msgid "Search for servers without these managed suffixes." -msgstr "" - -msgid "Add a manager to the stage user entry" -msgstr "" - -msgid "Remove a manager to the stage user entry" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -msgid "Managed LDAP suffix DN" -msgstr "" - -msgid "Search for topology suffixes." -msgstr "" - -msgid "Add a manager to the user entry" -msgstr "" - -msgid "Remove a manager to the user entry" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Comma-separated list of attributes" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" - -msgid "DNS class" -msgstr "" - -msgid "Comma-separated list of raw A records" -msgstr "" - -msgid "Comma-separated list of raw AAAA records" -msgstr "" - -msgid "Comma-separated list of raw A6 records" -msgstr "" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "" - -msgid "Comma-separated list of raw APL records" -msgstr "" - -msgid "Comma-separated list of raw CERT records" -msgstr "" - -msgid "Comma-separated list of raw CNAME records" -msgstr "" - -msgid "Comma-separated list of raw DHCID records" -msgstr "" - -msgid "Comma-separated list of raw DLV records" -msgstr "" - -msgid "Comma-separated list of raw DNAME records" -msgstr "" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "" - -msgid "Comma-separated list of raw DS records" -msgstr "" - -msgid "Comma-separated list of raw HIP records" -msgstr "" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "" - -msgid "Comma-separated list of raw KEY records" -msgstr "" - -#, fuzzy -msgid "KEY Flags" -msgstr "Indicadors" - -msgid "KEY Protocol" -msgstr "" - -msgid "Protocol" -msgstr "" - -#, fuzzy -msgid "KEY Algorithm" -msgstr "Algorisme" - -msgid "KEY Public Key" -msgstr "" - -msgid "Public Key" -msgstr "" - -msgid "Comma-separated list of raw KX records" -msgstr "" - -msgid "Comma-separated list of raw LOC records" -msgstr "" - -msgid "Comma-separated list of raw MX records" -msgstr "" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "" - -msgid "Comma-separated list of raw NS records" -msgstr "" - -msgid "Comma-separated list of raw NSEC records" -msgstr "" - -msgid "NSEC Next Domain Name" -msgstr "" - -msgid "Next Domain Name" -msgstr "" - -msgid "NSEC Type Map" -msgstr "" - -#, fuzzy -msgid "Type Map" -msgstr "Tipus" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "" - -msgid "Comma-separated list of raw PTR records" -msgstr "" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "" - -msgid "RRSIG Type Covered" -msgstr "" - -msgid "Type Covered" -msgstr "" - -#, fuzzy -msgid "RRSIG Algorithm" -msgstr "Algorisme" - -msgid "RRSIG Labels" -msgstr "" - -msgid "Labels" -msgstr "" - -msgid "RRSIG Original TTL" -msgstr "" - -msgid "Original TTL" -msgstr "" - -msgid "RRSIG Signature Expiration" -msgstr "" - -msgid "Signature Expiration" -msgstr "" - -msgid "RRSIG Signature Inception" -msgstr "" - -msgid "Signature Inception" -msgstr "" - -msgid "RRSIG Key Tag" -msgstr "" - -msgid "RRSIG Signer's Name" -msgstr "" - -#, fuzzy -msgid "Signer's Name" -msgstr "Nom del servidor" - -msgid "RRSIG Signature" -msgstr "" - -msgid "Signature" -msgstr "" - -msgid "Comma-separated list of raw RP records" -msgstr "" - -msgid "Comma-separated list of raw SIG records" -msgstr "" - -msgid "SIG Type Covered" -msgstr "" - -#, fuzzy -msgid "SIG Algorithm" -msgstr "Algorisme" - -msgid "SIG Labels" -msgstr "" - -msgid "SIG Original TTL" -msgstr "" - -msgid "SIG Signature Expiration" -msgstr "" - -msgid "SIG Signature Inception" -msgstr "" - -msgid "SIG Key Tag" -msgstr "" - -msgid "SIG Signer's Name" -msgstr "" - -msgid "SIG Signature" -msgstr "" - -msgid "Comma-separated list of raw SPF records" -msgstr "" - -msgid "Comma-separated list of raw SRV records" -msgstr "" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "" - -msgid "Comma-separated list of raw TA records" -msgstr "" - -msgid "Comma-separated list of raw TKEY records" -msgstr "" - -msgid "Comma-separated list of raw TSIG records" -msgstr "" - -msgid "Comma-separated list of raw TXT records" -msgstr "" - -msgid "SOA time to live" -msgstr "" - -msgid "SOA record time to live" -msgstr "" - -msgid "SOA class" -msgstr "" - -msgid "SOA record class" -msgstr "" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" - -#, fuzzy -msgid "Consume an entitlement." -msgstr "No s'ha implementat l'ordre" - -#, fuzzy -msgid "Quantity" -msgstr "Identitat" - -msgid "Search for entitlement accounts." -msgstr "" - -msgid "Retrieve the entitlement certs." -msgstr "" - -msgid "Import an entitlement certificate." -msgstr "" - -msgid "UUID" -msgstr "" - -msgid "Enrollment UUID" -msgstr "" - -msgid "Register to the entitlement system." -msgstr "" - -msgid "Username" -msgstr "Nom d'usuari" - -#, fuzzy -msgid "Enrollment UUID (not implemented)" -msgstr "No s'ha implementat l'ordre" - -#, fuzzy -msgid "Registration password" -msgstr "Reinicia la contrasenya" - -msgid "Display current entitlements." -msgstr "" - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" - -msgid "comma-separated list of users to add" -msgstr "" - -msgid "comma-separated list of groups to add" -msgstr "" - -msgid "comma-separated list of users to remove" -msgstr "" - -msgid "comma-separated list of groups to remove" -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Source host category" -msgstr "" - -msgid "Source host category the rule applies to" -msgstr "" - -msgid "Source Hosts" -msgstr "" - -msgid "Source Host Groups" -msgstr "" - -msgid "comma-separated list of hosts to add" -msgstr "" - -msgid "comma-separated list of host groups to add" -msgstr "" - -msgid "comma-separated list of HBAC services to add" -msgstr "" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "" - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "" - -msgid "comma-separated list of hosts to remove" -msgstr "" - -msgid "comma-separated list of host groups to remove" -msgstr "" - -msgid "comma-separated list of HBAC services to remove" -msgstr "" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" - -msgid "Source host" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "comma-separated list of netgroups to add" -msgstr "" - -msgid "comma-separated list of netgroups to remove" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" - -msgid "Target members of a group" -msgstr "" - -msgid "User group to apply permissions to" -msgstr "" - -msgid "comma-separated list of privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI" -msgstr "" - -#, fuzzy -msgid "Permission type" -msgstr "Permís" - -msgid "comma-separated list of privileges to remove" -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "comma-separated list of roles to add" -msgstr "" - -msgid "comma-separated list of permissions" -msgstr "" - -msgid "comma-separated list of roles to remove" -msgstr "" - -msgid "comma-separated list of privileges" -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "comma-separated list of sudo commands to add" -msgstr "" - -msgid "comma-separated list of sudo commands to remove" -msgstr "" - -#, fuzzy -msgid "Active directory domain administrator's password" -msgstr "Domini d'Active Directory" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" - -msgid "comma-separated list of sudo command groups to add" -msgstr "" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "" - -msgid "Failed members" -msgstr "" - -msgid "Failed source hosts/hostgroups" -msgstr "" - -msgid "Failed hosts/hostgroups" -msgstr "" - -msgid "Failed users/groups" -msgstr "" - -msgid "Failed service/service groups" -msgstr "" - -msgid "Failed to remove" -msgstr "" - -msgid "Failed RunAs" -msgstr "" - -msgid "Failed RunAsGroup" -msgstr "" - -msgid "Failed profiles" -msgstr "" - -msgid "Failed CAs" -msgstr "" - -msgid "Failed member manager" -msgstr "" - -msgid "Failed managedby" -msgstr "" - -msgid "Failed allowed to retrieve keytab" -msgstr "" - -msgid "Failed allowed to create keytab" -msgstr "" - -msgid "Failed targets" -msgstr "" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "" - -msgid "an internal error has occurred" -msgstr "" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "" - -msgid "did not receive Kerberos credentials" -msgstr "" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -msgid "No credentials cache found" -msgstr "" - -msgid "Ticket expired" -msgstr "" - -msgid "Credentials cache permissions incorrect" -msgstr "" - -msgid "Bad format in credentials cache" -msgstr "" - -msgid "Cannot resolve KDC for requested realm" -msgstr "" - -msgid "Session error" -msgstr "" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#, python-format -msgid "'%(name)s' is required" -msgstr "" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - -msgid "Passwords do not match" -msgstr "Les contrasenyes no coincideixen" - -msgid "Command not implemented" -msgstr "No s'ha implementat l'ordre" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -#, fuzzy, python-format -msgid "%(reason)s" -msgstr "Raó" - -msgid "This entry already exists" -msgstr "" - -msgid "You must enroll a host in order to create a host service" -msgstr "" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" - -msgid "This command requires root access" -msgstr "" - -msgid "This is already a posix group" -msgstr "" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -msgid "This entry is already enabled" -msgstr "" - -msgid "This entry is already disabled" -msgstr "" - -msgid "This entry cannot be enabled or disabled" -msgstr "" - -msgid "This entry is not a member" -msgstr "" - -msgid "A group may not be a member of itself" -msgstr "" - -msgid "This entry is already a member" -msgstr "" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "" - -msgid "A group may not be added as a member of itself" -msgstr "" - -msgid "The default users group cannot be removed" -msgstr "" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -msgid "This group already allows external members" -msgstr "" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "change collided with another change" -msgstr "" - -msgid "no modifications to be performed" -msgstr "" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "" - -msgid "limits exceeded for this query" -msgstr "" - -#, python-format -msgid "%(info)s" -msgstr "" - -msgid "modifying primary key is not allowed" -msgstr "" - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "" - -msgid "Already registered" -msgstr "" - -msgid "Not registered yet" -msgstr "" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, fuzzy, python-format -msgid "%(exception)s" -msgstr "Opcions" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -#, python-format -msgid "%(count)d variables" -msgstr "" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" -msgstr[1] "" - -msgid "A dictionary representing an LDAP entry" -msgstr "" - -msgid "A list of LDAP entries" -msgstr "" - -msgid "All commands should at least have a result" -msgstr "" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "" - -#, fuzzy -msgid "Passwords do not match!" -msgstr "Les contrasenyes no coincideixen" - -msgid "No matching entries found" -msgstr "" - -msgid "Topic or Command" -msgstr "" - -msgid "The topic or command name." -msgstr "" - -#, fuzzy -msgid "Topic commands:" -msgstr "Ordres" - -msgid "To get command help, use:" -msgstr "" - -msgid " ipa --help" -msgstr "" - -#, fuzzy -msgid "Command name" -msgstr "Nom comú" - -msgid "Positional arguments" -msgstr "" - -#, python-format -msgid "Same as --%s" -msgstr "" - -msgid "Deprecated options" -msgstr "" - -msgid "No file to read" -msgstr "" - -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - -#, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - -msgid "Filename is empty" -msgstr "" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -msgid "invalid domain name" -msgstr "" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "incorrect type" -msgstr "" - -msgid "Only one value is allowed" -msgstr "" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "" - -msgid "must be an integer" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -msgid "must be a decimal number" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -msgid "must be binary data" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -#, fuzzy -msgid "must be a certificate" -msgstr "Certificat" - -msgid "must be a certificate signing request" -msgstr "" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "" - -msgid "Leading and trailing spaces are not allowed" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "" - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "" - -#, python-format -msgid "must be '%(value)s'" -msgstr "" - -#, python-format -msgid "must be one of %(values)s" -msgstr "" - -msgid "must be datetime value" -msgstr "" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -msgid "must be DNS name" -msgstr "" - -msgid "must be absolute" -msgstr "" - -msgid "must be relative" -msgstr "" - -#, fuzzy -msgid "must be dictionary" -msgstr "Directori de l'usuari" - -msgid "must be Kerberos principal" -msgstr "" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -msgid "Service principal is required" -msgstr "" - -#, fuzzy -msgid "must be at least 0" -msgstr "Certificat" - -msgid "invalid valid hex" -msgstr "" - -#, fuzzy -msgid "invalid serial number 0" -msgstr "Número de sèrie" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "" - -#, python-format -msgid "objectclass %s not found" -msgstr "" - -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "Desconegut" - -#, fuzzy -msgid "Non-Active Directory domain" -msgstr "Domini d'Active Directory" - -msgid "Active Directory domain" -msgstr "Domini d'Active Directory" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "Failed to authenticate to CA REST API" -msgstr "" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "" - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -#, fuzzy -msgid "Automount Location" -msgstr "Ubicació" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -#, fuzzy -msgid "Certificate Profile" -msgstr "Retenció del certificat" - -#, fuzzy -msgid "Certificate Profiles" -msgstr "Retenció del certificat" - -#, fuzzy -msgid "Profile configuration" -msgstr "Configuració" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -#, fuzzy -msgid "Delegation" -msgstr "Suprimeix" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "" -"\n" -"DNS server configuration\n" -msgstr "Configuració" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -#, fuzzy -msgid "DNS server" -msgstr "Servidor" - -#, fuzzy -msgid "DNS servers" -msgstr "Servidor" - -#, fuzzy -msgid "DNS Servers" -msgstr "Servidor" - -#, fuzzy -msgid "DNS Server" -msgstr "Servidor" - -#, fuzzy -msgid "DNS Server name" -msgstr "Nom del servidor" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -msgid "groups" -msgstr "grup" - -#, fuzzy -msgid "User Group" -msgstr "Grup" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -#, fuzzy -msgid "HBAC services" -msgstr "serveis" - -#, fuzzy -msgid "HBAC Services" -msgstr "Serveis" - -#, fuzzy -msgid "HBAC Service" -msgstr "Serveis" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -msgid "host groups" -msgstr "grup" - -#, fuzzy -msgid "Host Group" -msgstr "Grup" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "hostgroup" -msgstr "grup" - -msgid "privileged hostgroup" -msgstr "" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -#, fuzzy -msgid "Active Directory domain range" -msgstr "Domini d'Active Directory" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -#, fuzzy -msgid "Auto private groups" -msgstr "grup" - -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -#, fuzzy -msgid "" -"\n" -"IPA locations\n" -msgstr "Accions" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -#, fuzzy -msgid "location" -msgstr "Ubicació" - -#, fuzzy -msgid "locations" -msgstr "Ubicació" - -#, fuzzy -msgid "IPA Locations" -msgstr "Ubicació" - -#, fuzzy -msgid "IPA Location" -msgstr "Ubicació" - -#, fuzzy -msgid "Location name" -msgstr "Ubicació" - -msgid "IPA location name" -msgstr "" - -#, fuzzy -msgid "IPA Location description" -msgstr "descripció" - -#, fuzzy -msgid "Servers" -msgstr "Servidor" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -msgid "Delete an IPA location." -msgstr "" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "IPA Server" -msgstr "Servidor" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -#, fuzzy -msgid "netgroups" -msgstr "grup" - -#, fuzzy -msgid "Netgroups" -msgstr "Nom de grup de xarxa" - -#, fuzzy -msgid "Netgroup" -msgstr "grup" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "One time password commands" -msgstr "" - -#, fuzzy -msgid "OTP configuration options" -msgstr "Configuració" - -#, fuzzy -msgid "OTP Configuration" -msgstr "Configuració" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -#, fuzzy -msgid "URI" -msgstr "UID" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" -msgstr "" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -#, fuzzy -msgid "invalid port number" -msgstr "Número de sèrie" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -#, fuzzy -msgid "RADIUS Servers" -msgstr "Servidor" - -#, fuzzy -msgid "RADIUS Server" -msgstr "Servidor" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -#, fuzzy -msgid "Realm Domains" -msgstr "Domini" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "Role" -msgstr "Rol" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "self service permission" -msgstr "" - -#, fuzzy -msgid "self service permissions" -msgstr "permisos" - -#, fuzzy -msgid "Self Service Permissions" -msgstr "Permisos" - -#, fuzzy -msgid "Self Service Permission" -msgstr "Permís" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -#, fuzzy -msgid "server role" -msgstr "Nom del servidor" - -#, fuzzy -msgid "server roles" -msgstr "Nom del servidor" - -msgid "IPA Server Roles" -msgstr "" - -#, fuzzy -msgid "IPA Server Role" -msgstr "Nom del servidor" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -#, fuzzy -msgid "IPA role name" -msgstr "Nom del grup" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -#, fuzzy -msgid "Subordinate id description" -msgstr "descripció" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -msgid "SubUID range size" -msgstr "" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -msgid "SubGID range size" -msgstr "" - -msgid "Subordinate group ID count" -msgstr "" - -#, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "" - -#, python-format -msgid "'%(dn)s is not a valid user" -msgstr "" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -#, fuzzy -msgid "Add a new subordinate id." -msgstr "permisos" - -#, python-format -msgid "Added subordinate id \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Delete a subordinate id." -msgstr "Retenció del certificat" - -#, python-format -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "" - -msgid "Modify a subordinate id." -msgstr "" - -#, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Search for subordinate id." -msgstr "permisos" - -#, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a subordinate id." -msgstr "" - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -#, fuzzy -msgid "sudo command" -msgstr "Ordres" - -#, fuzzy -msgid "sudo commands" -msgstr "Ordres" - -#, fuzzy -msgid "Sudo Commands" -msgstr "Ordres" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -#, fuzzy -msgid "server" -msgstr "Servidor" - -#, fuzzy -msgid "servers" -msgstr "serveis" - -#, fuzzy -msgid "IPA Servers" -msgstr "Servidor" - -#, fuzzy -msgid "Server location" -msgstr "Nom del servidor" - -#, fuzzy -msgid "Service weight" -msgstr "Serveis" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -#, fuzzy -msgid "State" -msgstr "Estat" - -#, fuzzy -msgid "Server state" -msgstr "Nom del servidor" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "A list of ACI values" -msgstr "" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "entrada" - -#, fuzzy -msgid "entries" -msgstr "entrada" - -#, fuzzy -msgid "Entry" -msgstr "entrada" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, fuzzy, python-format -msgid "Access granted: %s" +msgid "Access Granted" msgstr "Accés permès" -#, fuzzy -msgid "" -"\n" -"Permissions\n" -msgstr "Permisos" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Managed permissions\n" -msgstr "permisos" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "must be enclosed in parentheses" -msgstr "" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, python-format -msgid "Deprecated; use %s" -msgstr "" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, python-format -msgid "Entry %s not found" -msgstr "" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, python-format -msgid "Entry %s does not exist" -msgstr "" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -#, fuzzy -msgid "Name" -msgstr "Nom de l'ordinador" - -#, fuzzy -msgid "Documentation" -msgstr "Ubicació" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -msgid "Help topic" -msgstr "" - -#, fuzzy -msgid "Version" -msgstr "Permís" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "Nom de grup de xarxa" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -#, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "Cognom" - -#, fuzzy -msgid "Confirm (password)" -msgstr "contrasenya" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -#, fuzzy -msgid "Option group" -msgstr "Opcions" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -#, fuzzy -msgid "trust" -msgstr "Confiança" - -#, fuzzy -msgid "trusts" -msgstr "Confiança" - -#, fuzzy -msgid "Trusts" -msgstr "Confiança" - -msgid "Trust" -msgstr "Confiança" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "Trust direction" -msgstr "" - -#, fuzzy -msgid "Trust type" -msgstr "Confiança" - -msgid "Trust status" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -#, fuzzy -msgid "External trust" -msgstr "Extern" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -#, fuzzy -msgid "domain" -msgstr "Domini" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "trust configuration" -msgstr "Configuració" - -#, fuzzy -msgid "Global Trust Configuration" -msgstr "Configuració" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -#, fuzzy -msgid "SID" -msgstr "UID" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -#, fuzzy -msgid "Domain enabled" -msgstr "Inhabilitat" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -#, fuzzy -msgid "Vault Container" -msgstr "Continua" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Vault configuration" -msgstr "Configuració" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -msgid "Key wrapping algorithm" -msgstr "" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." -msgstr "" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "Principal alias" -msgstr "" - -msgid "User password expiration" -msgstr "" - -#, fuzzy -msgid "SSH public key fingerprint" -msgstr "Empremta digital SHA1" - -#, fuzzy -msgid "External IdP configuration" -msgstr "Configuració" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -#, fuzzy -msgid "Certificate mapping data" -msgstr "Retenció del certificat" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -#, fuzzy -msgid "SMB Home Directory" -msgstr "Directori de l'usuari" - -#, fuzzy -msgid "SMB Home Directory Drive" -msgstr "Directori de l'usuari" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -msgid "Issuer" -msgstr "Emissor" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject" -msgstr "Assumpte" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -msgid "users cannot be added when user category='all'" -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "" - -#, fuzzy, python-format -msgid "%i services added." -msgstr "serveis" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -#, fuzzy -msgid "Matching rule" -msgstr "Coincideix" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -#, fuzzy -msgid "User logins" -msgstr "Entrada" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "must be at least 10" -msgstr "" - -#, fuzzy -msgid "configuration options" -msgstr "Configuració" - -msgid "Configuration" -msgstr "Configuració" - -msgid "Maximum hostname length" -msgstr "" - -msgid "Enable adding subids to new users" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -msgid "IPA DNS servers" -msgstr "" - -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -#, fuzzy -msgid "Setup SID configuration" -msgstr "Configuració" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -#, fuzzy -msgid "Add SIDs" -msgstr "usuari" - -msgid "Add SIDs for existing users and groups" -msgstr "" - -msgid "NetBIOS name of the IPA domain" -msgstr "" - -msgid "Empty domain is not allowed" -msgstr "" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "not allowed to enable SID generation" -msgstr "" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -msgid "Failed to call DBus" -msgstr "" - -msgid "Configuration of SID failed. See details in the error log" -msgstr "" - -msgid "The group doesn't exist" -msgstr "" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, fuzzy, python-format -msgid "%s Record" -msgstr "Tipus de registre" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -#, fuzzy -msgid "Priority (order)" -msgstr "Prioritat" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -#, fuzzy -msgid "Managedby permission" -msgstr "permisos" - -msgid "cannot be used when a zone is specified" -msgstr "" - -msgid "Only one zone type is allowed per zone name" -msgstr "" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -msgid "Default time to live" -msgstr "" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "" - -msgid "is required" -msgstr "" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -#, fuzzy -msgid "DNS configuration options" -msgstr "Configuració" - -#, fuzzy -msgid "DNS Global Configuration" -msgstr "Configuració" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -msgid "Result of the command" -msgstr "" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -#, fuzzy -msgid "HBAC Rules" -msgstr "Regles" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - msgid "Access time" msgstr "Temps d'accés" -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" +msgid "Account" +msgstr "Compte" -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host" -msgstr "Ordinador central" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "Serial Number" -msgstr "Número de sèrie" - -#, fuzzy -msgid "Serial Number (hex)" -msgstr "Número de sèrie" - -msgid "Not Before" -msgstr "No abans" - -msgid "Not After" -msgstr "No després" - -#, fuzzy -msgid "Fingerprint (SHA1)" -msgstr "Empremta" - -#, fuzzy -msgid "Fingerprint (SHA256)" -msgstr "Empremta" - -msgid "Revocation reason" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" - -msgid "Invalid URI: not an https scheme" -msgstr "" - -msgid "Invalid URI: missing netloc" -msgstr "" - -msgid "Identity Provider server" -msgstr "" - -msgid "Identity Provider servers" -msgstr "" - -#, fuzzy -msgid "Identity Provider server name" -msgstr "Nom del servidor" - -#, fuzzy -msgid "Authorization URI" -msgstr "Confirmació" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -msgid "Token URI" -msgstr "" - -#, fuzzy -#| msgid "Mount point" -msgid "Token endpoint" -msgstr "Punt de muntatge" - -#, fuzzy -#| msgid "User login" -msgid "User info URI" -msgstr "Entrada" - -msgid "User information endpoint" -msgstr "" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -msgid "Client identifier" -msgstr "" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -msgid "Add a new Identity Provider server." -msgstr "" - -#, python-format -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "Organització" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -msgid "Base URL" -msgstr "" - -msgid "Base URL for IdP provider templates" -msgstr "" - -#, fuzzy -#| msgid "Unknown Error" -msgid "unknown provider" -msgstr "Error desconegut" - -msgid "value is missing" -msgstr "" - -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "" - -#, fuzzy -msgid "Delete an Identity Provider server." -msgstr "Retenció del certificat" - -#, python-format -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "Modify an Identity Provider server." -msgstr "" - -#, python-format -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "Search for Identity Provider servers." -msgstr "" - -#, python-format -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an Identity Provider server." -msgstr "" - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Apply" -msgstr "Aplica" - -msgid "Rebuild auto membership" -msgstr "" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" +msgid "Account Settings" +msgstr "Paràmetres dels comptes" msgid "Actions" msgstr "Accions" +msgid "Active Directory domain" +msgstr "Domini d'Active Directory" + msgid "Add" msgstr "Afegeix-ho" -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -msgid "Direct Membership" -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -msgid "No entries." -msgstr "" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -msgid "Remove" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -#, fuzzy -msgid "Show Results" -msgstr "Mostra els detalls" - -msgid "Authentication indicators" -msgstr "" - -msgid "Authentication indicator" -msgstr "" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -msgid "RADIUS" -msgstr "" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "External Identity Provider" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "" - -msgid "Activate" -msgstr "" - -msgid "Add and Add Another" -msgstr "" - -msgid "Add and Close" -msgstr "" - -msgid "Add and Edit" -msgstr "" - -msgid "Add Many" -msgstr "" - -msgid "Back" -msgstr "Enrere" - -msgid "Cancel" -msgstr "Cancel·la" - -msgid "Clear" -msgstr "" - -msgid "Clear all fields on the page." -msgstr "" - -msgid "Close" -msgstr "Tanca" - -msgid "Disable" -msgstr "Inhabilita" - -msgid "Download" -msgstr "" - -msgid "Download certificate as PEM formatted file." -msgstr "" - -msgid "Edit" -msgstr "Edita" - -msgid "Enable" -msgstr "Habilita" - -msgid "Find" -msgstr "Cerca" - -#, fuzzy -msgid "Get" -msgstr "Aplica" - -msgid "Hide" -msgstr "" - -#, fuzzy -msgid "Issue" -msgstr "Emissor" - -#, fuzzy -msgid "Match" -msgstr "Coincideix" - -msgid "Match users according to certificate." -msgstr "" - -msgid "Migrate" -msgstr "" - -msgid "OK" -msgstr "D'acord" - -msgid "Refresh" -msgstr "Refresca" - -msgid "Reload current settings from the server." -msgstr "" - -msgid "Delete" -msgstr "Suprimeix" - -msgid "Remove hold" -msgstr "" - -msgid "Reset" -msgstr "Reinicia" - -msgid "Reset Password" -msgstr "Reinicia la contrasenya" - -#, fuzzy -msgid "Reset Password and Log in" -msgstr "Reinicia la contrasenya" - -msgid "Restore" -msgstr "Restaura" - -msgid "Retry" -msgstr "Reintent" - -msgid "Revert" -msgstr "" - -msgid "Revoke" -msgstr "Revoca" - -msgid "Save" -msgstr "" - -msgid "Set" -msgstr "Aplica" - -msgid "Show" -msgstr "" - -msgid "Stage" -msgstr "" - -msgid "Update" -msgstr "Actualització" - -msgid "View" -msgstr "Visualització" - -#, fuzzy -msgid "Customization" -msgstr "Confirmació" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "" - -msgid "Expand All" -msgstr "" - -msgid "General" -msgstr "General" - -msgid "Identity Settings" -msgstr "Paràmetres de la identitat" - -#, fuzzy -msgid "Record Settings" -msgstr "Paràmetres dels comptes" - -#, fuzzy, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "Paràmetres de la identitat" - -msgid "Back to Top" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -msgid "Add custom value" -msgstr "" - -msgid "Available" -msgstr "Disponible" - -msgid "Some operations failed." -msgstr "" - -#, fuzzy -msgid "Operations Error" -msgstr "Opcions" - -msgid "Confirmation" -msgstr "Confirmació" - -msgid "Custom value" -msgstr "" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -msgid "Unsaved Changes" -msgstr "Canvis sense desar" - -#, fuzzy, python-brace-format -msgid "Edit ${entity}" -msgstr "Identitat" - -#, fuzzy -msgid "Hide details" -msgstr "Mostra els detalls" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -#, fuzzy -msgid "Redirection" -msgstr "Directori de l'usuari" - -msgid "Select entries to be removed." -msgstr "" - -msgid "Result" -msgstr "" - -msgid "Show details" -msgstr "Mostra els detalls" - -msgid "Success" -msgstr "" - -msgid "Validation error" -msgstr "" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "" - -#, fuzzy -msgid "HTTP Error" -msgstr "Error" - -msgid "Internal Error" -msgstr "" - -#, fuzzy -msgid "IPA Error" -msgstr "Error" - -msgid "No response" -msgstr "" - -msgid "Unknown Error" -msgstr "Error desconegut" - -msgid "URL" -msgstr "URL" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -msgid "Settings" -msgstr "Paràmetres" - -msgid "Search" -msgstr "Cerca" - -msgid "False" -msgstr "Fals" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Allowed to create keytab" -msgstr "" - -msgid "Allowed to retrieve keytab" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Add Kerberos Principal Alias" -msgstr "" - -msgid "New kerberos principal alias" -msgstr "" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "" - -#, fuzzy -msgid "Authenticating" -msgstr "Paràmetres dels comptes" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -msgid "Kerberos Principal you entered is expired" -msgstr "" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -#, fuzzy -msgid "Log In Using Certificate" -msgstr "Certificat" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "" - -msgid "Synchronizing" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -msgid "number of passwords" -msgstr "" - -msgid "seconds" -msgstr "segons" - -#, fuzzy -msgid "Migrating" -msgstr "Configuració" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -msgid "Password migration was not successful" -msgstr "" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -msgid "Password migration was successful" -msgstr "" - -msgid "Attribute" -msgstr "Atribut" - -msgid "Add delegation" -msgstr "" - -msgid "Remove delegations" -msgstr "" - -#, fuzzy -msgid "Add permission" -msgstr "permisos" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove permissions" -msgstr "permisos" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -msgid "Remove privileges" -msgstr "" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Role Settings" -msgstr "Paràmetres" - -msgid "Add role" -msgstr "" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -msgid "Remove roles" -msgstr "" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -msgid "Add self service permission" -msgstr "" - -msgid "Remove self service permissions" -msgstr "" - -msgid "Add rule" -msgstr "" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to change default group?" -msgstr "" - -msgid "Default host group" -msgstr "" - -msgid "Default user group" -msgstr "" - -msgid "Exclusive" -msgstr "Exclusiu" - -msgid "Expression" -msgstr "Expressió" - -msgid "Host group rule" -msgstr "" - -msgid "Host group rules" -msgstr "" - -#, fuzzy -msgid "Inclusive" -msgstr "Exclusiu" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -msgid "User group rule" -msgstr "" - -msgid "User group rules" -msgstr "" - -msgid "Add automount key" -msgstr "" - -msgid "Remove automount keys" -msgstr "" - -msgid "Add automount location" -msgstr "" - -#, fuzzy -msgid "Automount Location Settings" -msgstr "Paràmetres dels comptes" - -msgid "Remove automount locations" -msgstr "" - -msgid "Add automount map" -msgstr "" - -#, fuzzy -msgid "Map Type" -msgstr "Tipus" - -msgid "Direct" -msgstr "" - -msgid "Indirect" -msgstr "" - -msgid "Remove automount maps" -msgstr "" - -msgid "Add certificate authority" -msgstr "" - -msgid "Remove certificate authorities" -msgstr "" - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "All" -msgstr "Permet" - -msgid "Any CA" -msgstr "" - -#, fuzzy -msgid "Any Host" -msgstr "Ordinador central" - -#, fuzzy -msgid "Any Service" -msgstr "Serveis" - -msgid "Any Profile" -msgstr "" - -msgid "Anyone" -msgstr "Qualsevol" - -#, fuzzy -msgid "Rule status" -msgstr "Regles" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -msgid "Remove CA ACLs" -msgstr "" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Specified CAs" -msgstr "Sense especificar" - -msgid "Specified Hosts and Groups" -msgstr "" - -msgid "Specified Profiles" -msgstr "" - -msgid "Specified Services and Groups" -msgstr "" - -msgid "Specified Users and Groups" -msgstr "" - -msgid "Permitted to have certificates issued" -msgstr "" - -#, fuzzy -msgid "Remove certificate profiles" -msgstr "Retenció del certificat" - -#, fuzzy -msgid "AA Compromise" -msgstr "CA en compromís" - -msgid "Add principal" -msgstr "" - msgid "Affiliation Changed" msgstr "L'afiliació ha canviat" -msgid "CA" -msgstr "" +msgid "Algorithm" +msgstr "Algorisme" + +msgid "Allow" +msgstr "Permet" + +msgid "Anyone" +msgstr "Qualsevol" + +msgid "Apply" +msgstr "Aplica" + +msgid "Attribute" +msgstr "Atribut" + +msgid "Attributes" +msgstr "Atributs" + +msgid "Available" +msgstr "Disponible" + +msgid "Back" +msgstr "Enrere" msgid "CA Compromise" msgstr "CA en compromís" -msgid "Certificates" -msgstr "Certificats" +msgid "Cancel" +msgstr "Cancel·la" + +msgid "Certificate" +msgstr "Certificat" msgid "Certificate Hold" msgstr "Retenció del certificat" +msgid "Certificates" +msgstr "Certificats" + msgid "Cessation of Operation" msgstr "Cessació de l'operació" +msgid "City" +msgstr "Ciutat" + +msgid "Class" +msgstr "Classe" + +msgid "Close" +msgstr "Tanca" + +msgid "Command not implemented" +msgstr "No s'ha implementat l'ordre" + +msgid "Commands" +msgstr "Ordres" + msgid "Common Name" msgstr "Nom comú" -msgid "the certificate with serial number " -msgstr "" +msgid "Configuration" +msgstr "Configuració" + +msgid "Confirmation" +msgstr "Confirmació" + +msgid "Continue" +msgstr "Continua" + +msgid "DNS" +msgstr "DNS" + +msgid "Data" +msgstr "Dades" + +msgid "Debugging output" +msgstr "Sortida de depuració" + +msgid "Delete" +msgstr "Suprimeix" + +msgid "Description" +msgstr "Descripció" + +msgid "Disable" +msgstr "Inhabilita" + +msgid "Disabled" +msgstr "Inhabilitat" + +msgid "Domain" +msgstr "Domini" + +msgid "Edit" +msgstr "Edita" + +msgid "Email address" +msgstr "Adreça de correu electrònic" + +msgid "Enable" +msgstr "Habilita" + +msgid "Enabled" +msgstr "S'ha habilitat" + +msgid "Error" +msgstr "Error" + +msgid "Exclusive" +msgstr "Exclusiu" msgid "Expires On" msgstr "Data de venciment" -#, fuzzy -msgid "Issued on from" -msgstr "Data d'emissió" +msgid "Expression" +msgstr "Expressió" -#, fuzzy -msgid "Issued on to" -msgstr "Data d'emissió" +msgid "External" +msgstr "Extern" -#, fuzzy -msgid "Maximum serial number" -msgstr "Número de sèrie" +msgid "False" +msgstr "Fals" -#, fuzzy -msgid "Minimum serial number" -msgstr "Número de sèrie" +msgid "Fax Number" +msgstr "Número de fax" -#, fuzzy -msgid "Revoked on from" -msgstr "Revocat" +msgid "Filter" +msgstr "Filtre" -#, fuzzy -msgid "Revoked on to" -msgstr "Revocat" +msgid "Find" +msgstr "Cerca" -msgid "Valid not after from" -msgstr "" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" +msgid "Fingerprint" +msgstr "Empremta" msgid "Fingerprints" msgstr "Empremtes digitals" -#, fuzzy -msgid "Get Certificate" -msgstr "Certificat" +msgid "First name" +msgstr "Nom" -#, fuzzy -msgid "Certificate Hold Removed" -msgstr "Retenció del certificat" +msgid "Flags" +msgstr "Indicadors" -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" +msgid "Force" +msgstr "Força" -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" +msgid "Full name" +msgstr "Nom complet" -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" +msgid "General" +msgstr "General" -#, fuzzy -msgid "Issue new certificate" -msgstr "Certificat" +msgid "Group" +msgstr "Grup" + +msgid "Group name" +msgstr "Nom del grup" + +msgid "Groups" +msgstr "Grups" + +msgid "Home directory" +msgstr "Directori de l'usuari" + +msgid "Host" +msgstr "Ordinador central" + +msgid "Host Name" +msgstr "Nom de l'ordinador" + +msgid "Host name" +msgstr "Nom de l'amfitrió" + +msgid "Hostname" +msgstr "Nom de l'ordinador" + +msgid "IP Address" +msgstr "Adreça IP" + +msgid "Identity" +msgstr "Identitat" + +msgid "Identity Settings" +msgstr "Paràmetres de la identitat" + +msgid "Initials" +msgstr "Inicials" + +msgid "Invalid credentials" +msgstr "Credencials no vàlides" msgid "Issued By" msgstr "Emès per" @@ -20096,4307 +242,317 @@ msgstr "Data d'emissió" msgid "Issued To" msgstr "Emès a nom de" +msgid "Issuer" +msgstr "Emissor" + +msgid "Job Title" +msgstr "Càrrec" + +msgid "Key" +msgstr "Tecla" + msgid "Key Compromise" msgstr "Clau en compromís" -#, fuzzy -msgid "No Valid Certificate" -msgstr "Certificat" +msgid "Last name" +msgstr "Cognom" -#, fuzzy -msgid "New Certificate" -msgstr "Certificat" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -msgid "Note" -msgstr "Nota" - -msgid "Organizational Unit" -msgstr "Unitat organitzativa" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -msgid "Privilege Withdrawn" -msgstr "" - -#, fuzzy -msgid "Reason for Revocation" -msgstr "Cessació de l'operació" - -#, fuzzy -msgid "Remove certificate hold" -msgstr "Retenció del certificat" - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -#, fuzzy -msgid "Certificate requested" -msgstr "Certificats" - -#, fuzzy -msgid "Revoke certificate" -msgstr "Certificat" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -#, fuzzy -msgid "Certificate Revoked" -msgstr "Retenció del certificat" - -msgid "REVOKED" -msgstr "" - -msgid "SHA1 Fingerprint" -msgstr "Empremta digital SHA1" - -#, fuzzy -msgid "SHA256 Fingerprint" -msgstr "Empremta digital SHA1" - -msgid "Status" -msgstr "Estat" - -msgid "Superseded" -msgstr "Substituït" - -msgid "Unspecified" -msgstr "Sense especificar" - -#, fuzzy -msgid "Valid Certificate Present" -msgstr "Certificats" - -msgid "Valid from" -msgstr "" - -#, fuzzy -msgid "Valid to" -msgstr "Validesa" - -msgid "Validity" -msgstr "Validesa" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -#, fuzzy -msgid "View Certificate" -msgstr "Certificat" - -#, fuzzy -msgid "Certificate Data" -msgstr "Certificat" - -#, fuzzy -msgid "Certificate For Match" -msgstr "Retenció del certificat" - -#, fuzzy -msgid "Certificate Mapping Match" -msgstr "Certificat" - -#, fuzzy -msgid "Matched Users" -msgstr "Coincideix" - -#, fuzzy -msgid "User Login" -msgstr "Entrada" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -#, fuzzy -msgid "Configuration string" -msgstr "Configuració" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -msgid "Remove certificate mapping data" -msgstr "" - -msgid "Issuer and subject" -msgstr "" - -msgid "Remove certificate identity mapping rules" -msgstr "" - -#, fuzzy -msgid "Group Options" -msgstr "Opcions" - -#, fuzzy -msgid "Search Options" -msgstr "Opcions" - -#, fuzzy -msgid "SELinux Options" -msgstr "Opcions" - -#, fuzzy -msgid "Server Options" -msgstr "Opcions" - -#, fuzzy -msgid "Service Options" -msgstr "Serveis" - -#, fuzzy -msgid "User Options" -msgstr "Opcions" - -msgid "Forward first" -msgstr "" - -msgid "Forwarding disabled" -msgstr "" - -msgid "Forward only" -msgstr "" - -msgid "Options" -msgstr "Opcions" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -#, fuzzy -msgid "Other Record Types" -msgstr "Tipus de registre" - -msgid "Address not valid, can't redirect" -msgstr "" - -msgid "Create dns record" -msgstr "" - -msgid "Creating record." -msgstr "" - -msgid "Record creation failed." -msgstr "" - -msgid "Checking if record exists." -msgstr "" - -msgid "Record not found." -msgstr "" - -msgid "Redirection to PTR record" -msgstr "" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -msgid "Target reverse zone not found." -msgstr "" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -#, fuzzy -msgid "Standard Record Types" -msgstr "Tipus de registre" - -msgid "Records for DNS Zone" -msgstr "" - -msgid "Record Type" -msgstr "Tipus de registre" - -msgid "Add DNS zone" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -#, fuzzy -msgid "DNS Zone Settings" -msgstr "Paràmetres dels comptes" - -msgid "Remove DNS zones" -msgstr "" - -#, fuzzy -msgid "Remove Permission" -msgstr "Permís" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Level" -msgstr "" - -msgid "Set Domain Level" -msgstr "" - -msgid "Add user group" -msgstr "" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Group Settings" -msgstr "Paràmetres dels comptes" - -msgid "External" -msgstr "Extern" - -msgid "Groups" -msgstr "Grups" - -#, fuzzy -msgid "Group categories" -msgstr "Nom del grup" - -msgid "Change to external group" -msgstr "" - -msgid "Change to POSIX group" -msgstr "" - -msgid "Non-POSIX" -msgstr "" - -msgid "POSIX" -msgstr "" - -msgid "Remove user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Group Type" -msgstr "Nom del grup" - -msgid "Add HBAC rule" -msgstr "" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Accessing" -msgstr "Temps d'accés" - -msgid "Remove HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Via Service" -msgstr "Serveis" - -msgid "Who" -msgstr "Qui" - -msgid "Add HBAC service" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -msgid "Remove HBAC services" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -msgid "Add HBAC service group" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -msgid "Remove HBAC service groups" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -msgid "Access Denied" -msgstr "S'ha denegat l'accés" - -msgid "Access Granted" -msgstr "Accés permès" - -#, fuzzy -msgid "Include Disabled" -msgstr "Inhabilitat" - -#, fuzzy -msgid "Include Enabled" -msgstr "S'ha habilitat" - -msgid "HBAC Test" -msgstr "" - -msgid "Matched" -msgstr "Coincideix" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" - -msgid "Rules" -msgstr "Regles" - -msgid "Run Test" -msgstr "" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -msgid "Unmatched" -msgstr "No coincideix" - -msgid "Add host" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -#, fuzzy -msgid "Host Certificate" -msgstr "Certificat" - -msgid "Host Name" -msgstr "Nom de l'ordinador" - -msgid "Delete Key, Unprovision" -msgstr "" - -#, fuzzy -msgid "Host Settings" -msgstr "Paràmetres" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -#, fuzzy -msgid "Generate OTP" -msgstr "General" - -#, fuzzy -msgid "Generated OTP" -msgstr "General" - -msgid "Kerberos Key" -msgstr "" - -msgid "Kerberos Key Not Present" -msgstr "" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -#, fuzzy -msgid "One-Time Password" -msgstr "Reinicia la contrasenya" - -msgid "One-Time Password Not Present" -msgstr "" - -msgid "One-Time Password Present" -msgstr "" - -#, fuzzy -msgid "Reset OTP" -msgstr "Reinicia" - -#, fuzzy -msgid "Reset One-Time Password" -msgstr "Reinicia la contrasenya" - -msgid "Set OTP" -msgstr "" - -msgid "OTP set" -msgstr "" - -#, fuzzy -msgid "Set One-Time Password" -msgstr "Reinicia la contrasenya" - -msgid "Remove hosts" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -#, fuzzy -msgid "Unprovision" -msgstr "permisos" - -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -msgid "Add host group" -msgstr "" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Host Group Settings" -msgstr "Paràmetres dels comptes" - -msgid "Remove host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -#, fuzzy -msgid "Identity provider details" -msgstr "Mostra els detalls" - -#, fuzzy -msgid "Verify secret" -msgstr "Contrasenya nova" - -msgid "User to override" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -msgid "Profile" -msgstr "" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -#, fuzzy -msgid "Enter trusted group name." -msgstr "Nom de grup de xarxa" - -msgid "Add ID view" -msgstr "" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -msgid "Apply to host groups" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -msgid "Remove ID views" -msgstr "" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -msgid "Un-apply from host groups" -msgstr "" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -#, fuzzy -msgid "Un-apply" -msgstr "Aplica" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "Add netgroup" -msgstr "" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Netgroup Settings" -msgstr "Paràmetres dels comptes" - -msgid "Remove netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -msgid "Add OTP token" -msgstr "" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -#, fuzzy -msgid "Configure your token" -msgstr "Configuració" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -#, fuzzy -msgid "OTP Token Settings" -msgstr "Paràmetres dels comptes" - -#, fuzzy -msgid "Disable token" -msgstr "Inhabilita" - -#, fuzzy -msgid "Enable token" -msgstr "Habilita" - -msgid "Remove OTP tokens" -msgstr "" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "" - -#, fuzzy -msgid "Show configuration uri" -msgstr "Configuració" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -#, fuzzy -msgid "Add Custom Attribute" -msgstr "Atribut" - -#, fuzzy -msgid "Permission settings" -msgstr "Permisos" - -#, fuzzy -msgid "Attribute breakdown" -msgstr "Atribut" - -#, fuzzy -msgid "Privilege Settings" -msgstr "Paràmetres" - -msgid "Public key:" -msgstr "" - -msgid "Set public key" -msgstr "" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "Modificat" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -msgid "Add password policy" -msgstr "" - -#, fuzzy -msgid "Password Policy" -msgstr "Contrasenya" - -msgid "Remove password policies" -msgstr "" - -msgid "Add ID range" -msgstr "" - -#, fuzzy -msgid "Range Settings" -msgstr "Paràmetres" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -#, fuzzy -msgid "Domain SID" -msgstr "Domini" - -msgid "Secondary RID base" -msgstr "" - -msgid "Remove ID ranges" -msgstr "" - -#, fuzzy -msgid "Active Directory domain with POSIX attributes" -msgstr "Domini d'Active Directory" - -msgid "Detect" -msgstr "" - -#, fuzzy -msgid "Local domain" +msgid "Locality" msgstr "Localitat" -msgid "IPA trust" -msgstr "" +msgid "Location" +msgstr "Ubicació" -#, fuzzy -msgid "Active Directory winsync" -msgstr "Domini d'Active Directory" - -msgid "Add RADIUS server" -msgstr "" - -msgid "RADIUS Proxy Server Settings" -msgstr "" - -msgid "Remove RADIUS servers" -msgstr "" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -#, fuzzy -msgid "Force Update" -msgstr "Actualització" - -msgid "Add SELinux user map" -msgstr "" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Server Roles" -msgstr "Nom del servidor" - -#, fuzzy -msgid "Server Role" -msgstr "Nom del servidor" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -#, fuzzy -msgid "Delete Server" -msgstr "Suprimeix" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -#, fuzzy -msgid "Add service" -msgstr "serveis" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -#, fuzzy -msgid "Service Certificate" -msgstr "Certificat" - -#, fuzzy -msgid "Service Settings" -msgstr "Paràmetres de la identitat" - -#, fuzzy -msgid "Provisioning" -msgstr "Permís" - -#, fuzzy -msgid "Remove services" -msgstr "serveis" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -msgid "Unprovisioning service" -msgstr "" - -msgid "Service unprovisioned" -msgstr "" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "" - -msgid "SSH public keys" -msgstr "" - -msgid "SSH public key:" -msgstr "" - -msgid "Set SSH key" -msgstr "" - -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" - -msgid "Add stage user" -msgstr "" - -#, fuzzy -msgid "Stage users" -msgstr "usuaris" - -msgid "Preserved users" -msgstr "" - -msgid "Remove preserved users" -msgstr "" - -msgid "Remove stage users" -msgstr "" - -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -msgid "User categories" -msgstr "" - -#, fuzzy -msgid "Add subid" -msgstr "serveis" - -msgid "Assigned subids" -msgstr "" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -msgid "Add sudo command" -msgstr "" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -msgid "Remove sudo commands" -msgstr "" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -msgid "Add sudo command group" -msgstr "" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -msgid "Remove sudo command groups" -msgstr "" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -msgid "Add sudo rule" -msgstr "" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "Permet" - -#, fuzzy -msgid "Any Command" -msgstr "Ordres" - -#, fuzzy -msgid "Any Group" -msgstr "Grup" - -#, fuzzy -msgid "Run Commands" -msgstr "Ordres" - -msgid "Deny" -msgstr "" - -#, fuzzy -msgid "Access this host" -msgstr "Temps d'accés" - -#, fuzzy -msgid "Option added" -msgstr "Opcions" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -msgid "Remove sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -msgid "Specified Commands and Groups" -msgstr "" - -msgid "Specified Groups" -msgstr "" - -msgid "Remove sudo options" -msgstr "" - -msgid "Autogenerated" -msgstr "" - -#, fuzzy -msgid "Segment details" -msgstr "Mostra els detalls" - -#, fuzzy -msgid "Replication configuration" -msgstr "Cessació de l'operació" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -msgid "Account" -msgstr "Compte" - -msgid "Add trust" -msgstr "" - -msgid "Administrative account" -msgstr "" - -msgid "SID blocklists" -msgstr "" - -#, fuzzy -msgid "Trust Settings" -msgstr "Paràmetres dels comptes" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -#, fuzzy -msgid "Pre-shared password" -msgstr "Reinicia la contrasenya" - -msgid "Remove trusts" -msgstr "" - -msgid "Remove domains" -msgstr "" - -msgid "Alternative UPN suffixes" -msgstr "" - -msgid "User attributes for SMB services" -msgstr "" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - -msgid "Account Settings" -msgstr "Paràmetres dels comptes" - -#, fuzzy -msgid "Account Status" -msgstr "Paràmetres dels comptes" - -msgid "Active users" -msgstr "" - -#, fuzzy -msgid "Add user" -msgstr "usuari" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -msgid "Auto assign subordinate ids" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "" - -#, fuzzy -msgid "Contact Settings" -msgstr "Paràmetres dels comptes" - -#, fuzzy -msgid "Delete mode" -msgstr "Suprimeix" - -#, fuzzy -msgid "Employee Information" -msgstr "Confirmació" - -msgid "Error changing account status" -msgstr "" - -msgid "Password expiration" -msgstr "" +msgid "Login shell" +msgstr "Shell d'inici de sessió" msgid "Mailing Address" msgstr "Adreça postal" -#, fuzzy -msgid "Misc. Information" -msgstr "Confirmació" +msgid "Manager" +msgstr "Gestor" -#, fuzzy -msgid "delete" -msgstr "Suprimeix" +msgid "Map" +msgstr "Mapa" -#, fuzzy -msgid "preserve" -msgstr "serveis" +msgid "Matched" +msgstr "Coincideix" -msgid "No private group" -msgstr "" +msgid "Modified" +msgstr "Modificat" -msgid "Remove users" -msgstr "" +msgid "Mount point" +msgstr "Punt de muntatge" -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" +msgid "Netgroup name" +msgstr "Nom de grup de xarxa" -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Unlock" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -msgid "Members" -msgstr "" - -msgid "My User Vaults" -msgstr "" - -msgid "Owners" -msgstr "" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Service Vaults" -msgstr "Serveis" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -msgid "Vault Type" -msgstr "" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -#, fuzzy -msgid "User Vaults" -msgstr "Usuaris" - -msgid "Current password is required" -msgstr "" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -#, fuzzy -msgid "First OTP" -msgstr "Nom" - -#, fuzzy -msgid "New password is required" +msgid "New Password" msgstr "Contrasenya nova" -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Password change complete" -msgstr "" - -msgid "Your password has expired. Please enter a new password." -msgstr "" - -#, fuzzy -msgid "Passwords must match" -msgstr "Les contrasenyes no coincideixen" - -msgid "Password reset was not successful." -msgstr "" - -#, fuzzy -msgid "Reset your password." -msgstr "Reinicia la contrasenya" - -msgid "Second OTP" -msgstr "" - -#, fuzzy -msgid "Verify Password" -msgstr "Contrasenya nova" - -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -msgid "Some entries were not deleted" -msgstr "" - -msgid "Quick Links" -msgstr "" - -msgid "Select All" -msgstr "Selecciona-ho tot" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -msgid "Unselect All" -msgstr "No seleccionis res" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "" - -msgid "Audit" -msgstr "" - -msgid "Authentication" -msgstr "" - -#, fuzzy -msgid "Automount" -msgstr "Compte" - -msgid "DNS" -msgstr "DNS" - -msgid "Host-Based Access Control" -msgstr "" - -msgid "Identity" -msgstr "Identitat" - -#, fuzzy -msgid "Network Services" -msgstr "Serveis" - -msgid "Policy" -msgstr "Política" - -msgid "Role-Based Access Control" -msgstr "" - -msgid "Subordinate IDs" -msgstr "" - -msgid "Sudo" -msgstr "" - -msgid "Topology" -msgstr "" - -msgid "True" -msgstr "Cert" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -#, fuzzy -msgid "First" -msgstr "Nom" - -#, fuzzy -msgid "Last" -msgstr "Cognom" - msgid "Next" msgstr "Següent" -msgid "Page" -msgstr "Pàgina" +msgid "Not After" +msgstr "No després" -msgid "Prev" -msgstr "Anterior" +msgid "Not Before" +msgstr "No abans" -msgid "Undo" -msgstr "" +msgid "Note" +msgstr "Nota" -msgid "Undo this change." -msgstr "" +msgid "OK" +msgstr "D'acord" -#, fuzzy -msgid "Undo All" -msgstr "No seleccionis res" +msgid "Operating system" +msgstr "Sistema operatiu" -msgid "Undo all changes in this field." -msgstr "" +msgid "Options" +msgstr "Opcions" -msgid "Text does not match field pattern" -msgstr "" +msgid "Organization" +msgstr "Organització" -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -msgid "Must be a decimal number" -msgstr "" - -msgid "Format error" -msgstr "" - -msgid "Must be an integer" -msgstr "" - -msgid "Not a valid IP address" -msgstr "" - -msgid "Not a valid IPv4 address" -msgstr "" - -msgid "Not a valid IPv6 address" -msgstr "" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -msgid "Parse error" -msgstr "" - -msgid "Must be a positive number" -msgstr "" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -msgid "Required field" -msgstr "" - -msgid "Unsupported value" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -msgid "IdP max life" -msgstr "" - -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "" - -msgid "IdP max renew" -msgstr "" - -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -#, fuzzy -msgid "password policy" -msgstr "contrasenya" - -#, fuzzy -msgid "password policies" -msgstr "contrasenya" - -#, fuzzy -msgid "Password Policies" -msgstr "Contrasenya" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -msgid "User check" -msgstr "Nom d'usuari" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "Grace login limit" -msgstr "" - -msgid "Number of LDAP authentications allowed after expiration" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -#, fuzzy -msgid "service" -msgstr "serveis" - -msgid "services" -msgstr "serveis" - -msgid "Service principal alias" -msgstr "" - -msgid "Base-64 encoded service certificate" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." -msgstr "" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -msgid "Add a new SMB service." -msgstr "" - -msgid "SMB service NetBIOS name" -msgstr "" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a service" -msgstr "" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -#, fuzzy -msgid "Stage Users" -msgstr "Usuaris" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -#, fuzzy -msgid "stage users" -msgstr "usuaris" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -#, fuzzy -msgid "ID View" -msgstr "Visualització" - -msgid "system ID View" -msgstr "" - -#, fuzzy -msgid "ID Views" -msgstr "Visualització" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -#, fuzzy -msgid "Certificate Authority" -msgstr "Retenció del certificat" - -#, fuzzy -msgid "Certificate Authorities" -msgstr "Certificats" - -msgid "Name for referencing the CA" -msgstr "" - -msgid "Description of the purpose of the CA" -msgstr "" - -msgid "Authority ID" -msgstr "" - -msgid "Dogtag Authority ID" -msgstr "" - -#, fuzzy -msgid "Subject DN" -msgstr "Assumpte" - -msgid "Subject Distinguished Name" -msgstr "" - -#, fuzzy -msgid "Issuer DN" -msgstr "Emissor" - -msgid "Issuer Distinguished Name" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -#, fuzzy -msgid "Certificate chain" -msgstr "Certificat" - -msgid "X.509 certificate chain" -msgstr "" - -#, fuzzy -msgid "RSN Version" -msgstr "Permís" - -#, fuzzy -msgid "Random Serial Number Version" -msgstr "Número de sèrie" - -msgid "Search for CAs." -msgstr "" - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "Display the properties of a CA." -msgstr "" - -msgid "Create a CA." -msgstr "" - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -#, fuzzy -msgid "Modify CA configuration." -msgstr "Configuració" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -#, fuzzy -msgid "Disable a CA." -msgstr "Inhabilita" - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "" - -msgid "IPA CA cannot be disabled" -msgstr "" - -#, fuzzy -msgid "Enable a CA." -msgstr "Habilita" - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -#, fuzzy -msgid " * 0 - unspecified\n" -msgstr "Sense especificar" - -#, fuzzy -msgid " * 1 - keyCompromise\n" -msgstr "Clau en compromís" - -#, fuzzy -msgid " * 2 - cACompromise\n" -msgstr "CA en compromís" - -#, fuzzy -msgid " * 3 - affiliationChanged\n" -msgstr "L'afiliació ha canviat" - -msgid " * 4 - superseded\n" -msgstr "" - -#, fuzzy -msgid " * 5 - cessationOfOperation\n" -msgstr "Cessació de l'operació" - -#, fuzzy -msgid " * 6 - certificateHold\n" -msgstr "Retenció del certificat" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -#, fuzzy -msgid "Subject email address" -msgstr "Adreça de correu electrònic" - -#, fuzzy -msgid "Subject DNS name" -msgstr "Assumpte" - -msgid "Subject X.400 address" -msgstr "" - -#, fuzzy -msgid "Subject directory name" -msgstr "Directori de l'usuari" - -msgid "Subject EDI Party name" -msgstr "" - -#, fuzzy -msgid "Subject URI" -msgstr "Assumpte" - -#, fuzzy -msgid "Subject IP Address" -msgstr "Adreça IP" - -#, fuzzy -msgid "Subject OID" -msgstr "Assumpte" - -#, fuzzy -msgid "Subject UPN" -msgstr "Assumpte" - -msgid "Subject Kerberos principal name" -msgstr "" - -#, fuzzy -msgid "Subject Other Name" -msgstr "Nom del servidor" - -#, fuzzy -msgid "Serial number (hex)" -msgstr "Número de sèrie" - -msgid "Request status" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "Revocat" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -#, fuzzy -msgid "Status of the certificate" -msgstr "Certificat" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -#, fuzzy -msgid "Sudo Rules" -msgstr "Regles" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "usuaris" - -#, fuzzy -msgid "command" -msgstr "Ordres" - -#, fuzzy -msgid "commands" -msgstr "Ordres" - -msgid "runAs user" -msgstr "" - -#, fuzzy -msgid "runAs users" -msgstr "usuaris" - -#, fuzzy -msgid "group runAs" -msgstr "grup" - -msgid "runAs groups" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Preserved user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Failed logins" -msgstr "Entrada" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "L'hora actual" - -msgid "Password grace count" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" -msgstr "" - -msgid "Request must be a dict" -msgstr "" - -msgid "Request is missing \"method\"" -msgstr "" - -msgid "Request is missing \"params\"" -msgstr "" - -msgid "params must be a list" -msgstr "" - -msgid "params must contain [args, options]" -msgstr "" - -msgid "params[0] (aka args) must be a list" -msgstr "" - -msgid "params[1] (aka options) must be a dict" -msgstr "" - -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" - -msgid "CIFS server denied your credentials" -msgstr "" - -msgid "communication with CIFS server was unsuccessful" -msgstr "" - -msgid "AD domain controller" -msgstr "" - -msgid "unsupported functional level" -msgstr "" - -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" - -msgid "Cannot find specified domain or server name" -msgstr "" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" - -msgid "At least the domain or IP address should be specified" -msgstr "" - -#, python-format -msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" -msgstr "" - -msgid "no trusted domain is configured" -msgstr "" - -msgid "domain is not configured" -msgstr "" - -msgid "SID is not valid" -msgstr "" - -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "" - -msgid "SID does not match any trusted domain" -msgstr "" - -#, fuzzy -msgid "Trust setup" -msgstr "Confiança" - -msgid "Our domain is not configured" -msgstr "" - -msgid "No trusted domain is not configured" -msgstr "" - -msgid "trusted domain object" -msgstr "" - -msgid "domain is not trusted" -msgstr "" - -msgid "no trusted domain matched the specified flat name" -msgstr "" - -msgid "trusted domain object not found" -msgstr "" - -msgid "Object does not belong to a trusted domain" -msgstr "" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "" - -msgid "Ambiguous search, user domain was not specified" -msgstr "" - -msgid "Trusted domain did not return a unique object" -msgstr "" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "" - -msgid "trusted domain user not found" -msgstr "" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "" - -#, fuzzy -msgid "CIFS credentials object" -msgstr "Credencials no vàlides" - -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "" - -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" - -#, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" - -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" - -#, fuzzy -msgid "Credentials" -msgstr "Credencials no vàlides" - -msgid "Missing credentials for cross-forest communication" -msgstr "" - -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" - -#, python-format -msgid "must equal %r" -msgstr "" - -msgid "Hello world" -msgstr "" - -#, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "" - -msgid "must be at least 1" -msgstr "" +msgid "Organizational Unit" +msgstr "Unitat organitzativa" msgid "Out of memory\n" msgstr "Sense memòria\n" -msgid "Warning unrecognized encryption type.\n" -msgstr "" +msgid "Page" +msgstr "Pàgina" -msgid "Warning unrecognized salt type.\n" -msgstr "" +msgid "Pager Number" +msgstr "Número de buscapersones" -#, fuzzy -msgid "Out of memory!?\n" -msgstr "Sense memòria\n" +msgid "Password" +msgstr "Contrasenya" -msgid "Enctype comparison failed!\n" -msgstr "" +msgid "Passwords do not match" +msgstr "Les contrasenyes no coincideixen" -msgid "Password is too long!\n" -msgstr "" +msgid "Permission" +msgstr "Permís" -msgid "Failed to create random key!\n" -msgstr "" +msgid "Permissions" +msgstr "Permisos" -msgid "Failed to create key!\n" -msgstr "" +msgid "Platform" +msgstr "Plataforma" -msgid "Bad or unsupported salt type.\n" -msgstr "" +msgid "Policy" +msgstr "Política" -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" +msgid "Port" +msgstr "Port" -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" +msgid "Prev" +msgstr "Anterior" -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" +msgid "Priority" +msgstr "Prioritat" -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" +msgid "Reason" +msgstr "Raó" -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" +msgid "Record Type" +msgstr "Tipus de registre" -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" +msgid "Refresh" +msgstr "Refresca" -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" +msgid "Regular Expression" +msgstr "Expressió regular" -msgid "Unable to initialize STARTTLS session\n" -msgstr "" +msgid "Rename" +msgstr "Canvia el nom" + +msgid "Reset" +msgstr "Reinicia" + +msgid "Reset Password" +msgstr "Reinicia la contrasenya" + +msgid "Restore" +msgstr "Restaura" + +msgid "Retry" +msgstr "Reintent" + +msgid "Revoke" +msgstr "Revoca" + +msgid "Revoked" +msgstr "Revocat" + +msgid "Rights" +msgstr "Drets" + +msgid "Role" +msgstr "Rol" + +msgid "Rules" +msgstr "Regles" + +msgid "SHA1 Fingerprint" +msgstr "Empremta digital SHA1" + +msgid "Search" +msgstr "Cerca" + +msgid "Select All" +msgstr "Selecciona-ho tot" + +msgid "Self" +msgstr "Ell mateix" + +msgid "Serial Number" +msgstr "Número de sèrie" + +msgid "Serial number" +msgstr "Número de sèrie" + +msgid "Server" +msgstr "Servidor" + +msgid "Server Name" +msgstr "Nom del servidor" + +msgid "Services" +msgstr "Serveis" + +msgid "Set" +msgstr "Aplica" + +msgid "Settings" +msgstr "Paràmetres" + +msgid "Show details" +msgstr "Mostra els detalls" + +msgid "Size" +msgstr "Mida" + +msgid "State/Province" +msgstr "Estat/província" + +msgid "Status" +msgstr "Estat" + +msgid "Subject" +msgstr "Assumpte" + +msgid "Subtree" +msgstr "Subarbre" + +msgid "Subtype" +msgstr "Subtipus" + +msgid "Superseded" +msgstr "Substituït" + +msgid "Target" +msgstr "Objectiu" + +msgid "Telephone Number" +msgstr "Número de telèfon" + +msgid "Time now" +msgstr "L'hora actual" + +msgid "True" +msgstr "Cert" + +msgid "Trust" +msgstr "Confiança" + +msgid "Type" +msgstr "Tipus" + +msgid "UID" +msgstr "UID" + +msgid "URL" +msgstr "URL" + +msgid "Unknown" +msgstr "Desconegut" + +msgid "Unknown Error" +msgstr "Error desconegut" + +msgid "Unmatched" +msgstr "No coincideix" + +msgid "Unsaved Changes" +msgstr "Canvis sense desar" + +msgid "Unselect All" +msgstr "No seleccionis res" + +msgid "Unspecified" +msgstr "Sense especificar" + +msgid "Update" +msgstr "Actualització" + +msgid "User" +msgstr "Usuari" + +msgid "User login" +msgstr "Entrada" + +msgid "User name" +msgstr "Nom d'usuari" + +msgid "Username" +msgstr "Nom d'usuari" + +msgid "Users" +msgstr "Usuaris" + +msgid "Validity" +msgstr "Validesa" + +msgid "View" +msgstr "Visualització" + +msgid "Warning" +msgstr "Avís" + +msgid "Weight" +msgstr "Pes" + +msgid "Who" +msgstr "Qui" + +msgid "description" +msgstr "descripció" + +msgid "entry" +msgstr "entrada" + +msgid "filename" +msgstr "nomdelfitxer" + +msgid "group" +msgstr "grup" + +msgid "password" +msgstr "contrasenya" + +msgid "permissions" +msgstr "permisos" + +msgid "seconds" +msgstr "segons" + +msgid "services" +msgstr "serveis" + +msgid "user" +msgstr "usuari" + +msgid "users" +msgstr "usuaris" diff --git a/po/cs.po b/po/cs.po index 45594c28e..e03f02f13 100644 --- a/po/cs.po +++ b/po/cs.po @@ -16,12080 +16,8 @@ msgstr "" "Plural-Forms: nplurals=3; plural=(n==1) ? 0 : (n>=2 && n<=4) ? 1 : 2\n" "X-Generator: Zanata 4.6.2\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy, c-format -msgid "out of memory\n" -msgstr "Nedostatek paměti\n" - -#, c-format -msgid "read error\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -# auto translated by TM merge from project: dnf, version: master, DocId: dnf -#, fuzzy -msgid "Realm name" -msgstr "Uživatelské jméno" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy, c-format -msgid "Out of memory \n" -msgstr "Nedostatek paměti\n" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -msgid "SASL Bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy, c-format -msgid "Out of Memory!\n" -msgstr "Nedostatek paměti\n" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "Hesla se neshodují!" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Output debug info" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org -#, fuzzy -msgid "Server Name" -msgstr "Server" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -# auto translated by TM merge from project: authconfig, version: master, -# DocId: po/authconfig -msgid "LDAP password" -msgstr "LDAP heslo" - -msgid "password to use if not using kerberos" -msgstr "" - -# auto translated by TM merge from project: authconfig, version: master, -# DocId: po/authconfig -#, fuzzy -msgid "Prompt for LDAP password" -msgstr "LDAP heslo" - -msgid "Path to the IPA CA certificate" -msgstr "" - -msgid "IPA CA certificate" -msgstr "" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource -msgid "url" -msgstr "url" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -# auto translated by TM merge from project: authconfig, version: master, -# DocId: po/authconfig -#, fuzzy -msgid "Enter LDAP password" -msgstr "LDAP heslo" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" - -#, c-format -msgid "Discovered server %s\n" -msgstr "" - -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Using provided server %s\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -msgid "New Principal Password" -msgstr "" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, c-format -msgid "Out of memory!\n" -msgstr "Nedostatek paměti\n" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy, c-format -msgid "Out of memory!" -msgstr "Nedostatek paměti\n" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "" - -#, c-format -msgid "No values for %s" -msgstr "" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Host is already joined.\n" -msgstr "" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" - -#, c-format -msgid "json_dumps() failed\n" -msgstr "" - -#, fuzzy, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "Neplatný požadavek JSON-RPC: %(error)s" - -#, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "" - -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" - -#, c-format -msgid "fork() failed\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "" - -#, c-format -msgid "child exited with %d\n" -msgstr "" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "" - -#, fuzzy, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "neobdrženy ověřovací údaje Kerberos" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "" - -msgid "Quiet mode. Only errors are displayed." -msgstr "" - -msgid "Unenroll this host from IPA server" -msgstr "" - -msgid "Hostname of this server" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -#, fuzzy -msgid "hostname" -msgstr "Název počítače" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "IPA Server to use" -msgstr "Serverové role" - -msgid "Specifies where to store keytab information." -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "filename" -msgstr "Jméno uživatele" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" - -msgid "LDAP password (if not using Kerberos)" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -msgid "password" -msgstr "heslo" - -# auto translated by TM merge from project: authconfig, version: master, -# DocId: po/authconfig -#, fuzzy -msgid "LDAP basedn" -msgstr "LDAP heslo" - -msgid "basedn" -msgstr "" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "" - -#, fuzzy -msgid "Failed to add" -msgstr "Žádný soubor k přečtení" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" - -msgid "Unrevoked" -msgstr "" - -# auto translated by TM merge from project: python-simpleline, version: -# master, DocId: python-simpleline -msgid "Error" -msgstr "Chyba" - -msgid "Input filename" -msgstr "" - -msgid "File to load the certificate from." -msgstr "" - -msgid "cannot specify both raw certificate and file" -msgstr "" - -msgid "Input file" -msgstr "" - -msgid "File to load the certificate from" -msgstr "" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "" - -msgid "Split DNS record to parts" -msgstr "" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" - -msgid "DNS resource record type" -msgstr "" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" - -msgid "No option to modify specific record provided." -msgstr "" - -msgid "Current DNS record contents:\n" -msgstr "" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -msgid "No option to delete specific record provided." -msgstr "" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -#, fuzzy -msgid "Delete all?" -msgstr "Smazat" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "" - -msgid "Server will check DNS forwarder(s)." -msgstr "" - -msgid "This may take some time, please wait ..." -msgstr "" - -msgid "DNS forwarder" -msgstr "" - -msgid "file to store DNS records in nsupdate format" -msgstr "" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "Servers details:" -msgstr "Serverové role" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -#, fuzzy -msgid "Delete a user" -msgstr "Smazat" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - -msgid "maps not connected to /etc/auto.master:" -msgstr "" - -msgid "Import automount files for a specific location." -msgstr "" - -msgid "Master file" -msgstr "" - -msgid "Automount master file." -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" - -#, python-format -msgid "File %(file)s not found" -msgstr "" - -#, python-format -msgid "key %(key)s already exists" -msgstr "" - -#, python-format -msgid "map %(map)s already exists" -msgstr "" - -msgid "Imported maps:" -msgstr "" - -#, python-format -msgid "Added %(map)s" -msgstr "" - -msgid "Imported keys:" -msgstr "" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "" - -msgid "Ignored keys:" -msgstr "" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "" - -msgid "Duplicate maps skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(map)s" -msgstr "" - -msgid "Duplicate keys skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(key)s" -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -msgid "User ID" -msgstr "ID uživatele" - -# auto translated by TM merge from project: python-simpleline, version: -# master, DocId: python-simpleline -msgid "Password" -msgstr "Heslo" - -# auto translated by TM merge from project: Fedora Websites, version: -# fedoraproject.org, DocId: po/fedora-web -#, fuzzy -msgid "First Code" -msgstr "Prvenství " - -msgid "Second Code" -msgstr "" - -msgid "Token ID" -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "" - -#, fuzzy, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "nelze se připojit k '%(uri)s': %(error)s" - -msgid "Invalid credentials" -msgstr "" - -msgid "Create a new vault." -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -#, fuzzy -msgid "Vault password" -msgstr "heslo" - -msgid "File containing the vault password" -msgstr "" - -msgid "File containing the vault public key" -msgstr "" - -msgid "Password can be specified only for symmetric vault" -msgstr "" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "" - -msgid "Password specified multiple times" -msgstr "" - -msgid "Public key specified multiple times" -msgstr "" - -msgid "Missing vault public key" -msgstr "" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "" - -msgid "Modify a vault." -msgstr "" - -#, fuzzy -msgid "Change password" -msgstr "Uživatelské heslo" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -#, fuzzy -msgid "Old vault password" -msgstr "heslo" - -msgid "File containing the old vault password" -msgstr "" - -#, fuzzy -msgid "New vault password" -msgstr "Uživatelské heslo" - -msgid "File containing the new vault password" -msgstr "" - -msgid "Old vault private key" -msgstr "" - -msgid "File containing the old vault private key" -msgstr "" - -msgid "File containing the new vault public key" -msgstr "" - -msgid "New public key specified multiple times" -msgstr "" - -msgid "Missing new vault public key" -msgstr "" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "" - -msgid "Binary data to archive" -msgstr "" - -msgid "File containing data to archive" -msgstr "" - -msgid "Override existing password" -msgstr "" - -msgid "Input data specified multiple times" -msgstr "" - -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" - -msgid "Invalid vault type" -msgstr "" - -msgid "Retrieve a data from a vault." -msgstr "" - -msgid "File to store retrieved data" -msgstr "" - -msgid "Vault private key" -msgstr "" - -msgid "File containing the vault private key" -msgstr "" - -msgid "Data" -msgstr "" - -msgid "Private key specified multiple times" -msgstr "" - -msgid "Missing vault private key" -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -#, fuzzy -msgid "ACI name" -msgstr "Název příkazu" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Permission" -msgstr "Verze" - -msgid "Permission ACI grants access to" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "User group" -msgstr "skupinu" - -msgid "User group ACI grants access to" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Permissions" -msgstr "Verze" - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Attributes to which the permission applies" -msgstr "" - -msgid "Attributes" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Type" -msgstr "Typ" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Member of" -msgstr "Členové" - -msgid "Member of a group" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Filter" -msgstr "Filtr" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "" - -msgid "Subtree" -msgstr "" - -msgid "Subtree to apply ACI to" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Target group" -msgstr "Cíl" - -msgid "Group to apply ACI to" -msgstr "" - -msgid "Target your own entry (self)" -msgstr "" - -msgid "Apply ACI to your own entry (self)" -msgstr "" - -msgid "Create new ACI." -msgstr "" - -msgid "ACI prefix" -msgstr "" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" - -msgid "Test the ACI syntax but don't write anything" -msgstr "" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" - -msgid "User-friendly description of action performed" -msgstr "" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -#, fuzzy -msgid "Delete ACI." -msgstr "Smazat" - -msgid "True means the operation was successful" -msgstr "" - -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" - -msgid "A string searched in all relevant object attributes" -msgstr "Řetězec vyhledávaný ve všech odpovídajících atributech objektu" - -msgid "Primary key only" -msgstr "" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" - -msgid "Number of entries returned" -msgstr "" - -msgid "True if not all results were returned" -msgstr "" - -msgid "Modify ACI." -msgstr "" - -msgid "Rename an ACI." -msgstr "" - -msgid "New ACI name" -msgstr "" - -msgid "Display a single ACI given an ACI name." -msgstr "" - -msgid "Location of the ACI" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Description" -msgstr "Popis" - -msgid "A description of this auto member rule" -msgstr "" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "List of deletions that failed" -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -# auto translated by TM merge from project: dnf, version: master, DocId: -# po/dnf -msgid "Rights" -msgstr "Práva" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Users" -msgstr "Uživatelé" - -msgid "Rebuild membership for specified users" -msgstr "" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -#, fuzzy -msgid "Hosts" -msgstr "Počítač" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -msgid "Key" -msgstr "Klíč" - -msgid "Automount key name." -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Mount information" -msgstr "Místo připojení" - -# auto translated by TM merge from project: anaconda, version: f22-branch, -# DocId: anaconda -msgid "description" -msgstr "popis" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -msgid "Location" -msgstr "Umístění" - -msgid "Automount location name." -msgstr "" - -msgid "Map" -msgstr "" - -msgid "Automount map name." -msgstr "" - -msgid "Create a new automount key." -msgstr "" - -msgid "Delete an automount key." -msgstr "" - -msgid "Continuous mode: Don't stop on errors." -msgstr "" - -msgid "Search for an automount key." -msgstr "" - -msgid "Time Limit" -msgstr "" - -msgid "Time limit of search in seconds" -msgstr "" - -msgid "Size Limit" -msgstr "" - -msgid "Maximum number of entries returned" -msgstr "" - -msgid "Modify an automount key." -msgstr "" - -msgid "New mount information" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "Rename" -msgstr "Jméno uživatele" - -msgid "Rename the automount key object" -msgstr "" - -msgid "Display an automount key." -msgstr "" - -msgid "Create a new automount location." -msgstr "" - -msgid "Delete an automount location." -msgstr "" - -msgid "Search for an automount location." -msgstr "" - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" - -msgid "Display an automount location." -msgstr "" - -msgid "Generate automount files for a specific location." -msgstr "" - -msgid "Create a new automount map." -msgstr "" - -msgid "Create a new indirect mount point." -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "Mount point" -msgstr "Místo připojení" - -msgid "Parent map" -msgstr "" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" - -msgid "Delete an automount map." -msgstr "" - -msgid "Search for an automount map." -msgstr "" - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" - -msgid "Modify an automount map." -msgstr "" - -msgid "Display an automount map." -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" - -msgid "Nested Methods to execute" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -#, fuzzy -msgid "Reason" -msgstr "%(reason)s" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "minimum serial number" -msgstr "Sériové číslo" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "maximum serial number" -msgstr "Sériové číslo" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "Serial number" -msgstr "Sériové číslo" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Principal" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Dictionary mapping variable name to value" -msgstr "" - -msgid "Revoke a certificate." -msgstr "" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "Maximum username length" -msgstr "" - -msgid "Home directory base" -msgstr "" - -msgid "Default location of home directories" -msgstr "" - -# auto translated by TM merge from project: ibus-input-pad, version: head, -# DocId: ibus-input-pad -#, fuzzy -msgid "Default shell" -msgstr "Výchozí" - -msgid "Default shell for new users" -msgstr "" - -msgid "Default users group" -msgstr "" - -msgid "Default group for new users" -msgstr "" - -msgid "Default e-mail domain" -msgstr "" - -msgid "Search time limit" -msgstr "" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" - -msgid "Search size limit" -msgstr "" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "" - -msgid "User search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" - -msgid "Group search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" - -msgid "Enable migration mode" -msgstr "" - -msgid "Certificate Subject base" -msgstr "" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "" - -msgid "Default group objectclasses" -msgstr "" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "" - -msgid "Default user objectclasses" -msgstr "" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" - -msgid "Password Expiration Notification (days)" -msgstr "" - -msgid "Number of days's notice of impending password expiration" -msgstr "" - -msgid "Password plugin features" -msgstr "" - -msgid "Extra hashes to generate in password plug-in" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "SELinux user map order" -msgstr "Uživatel SELinuxu" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Default SELinux user" -msgstr "Uživatel SELinuxu" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" - -msgid "Default PAC types" -msgstr "" - -msgid "Default types of PAC supported for services" -msgstr "" - -msgid "Default user authentication types" -msgstr "" - -msgid "Default types of supported user authentication" -msgstr "" - -msgid "Modify configuration options." -msgstr "" - -msgid "Show the current configuration." -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "Delegation name" -msgstr "" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "" - -msgid "Attributes to which the delegation applies" -msgstr "" - -msgid "Member user group" -msgstr "" - -msgid "User group to apply delegation to" -msgstr "" - -msgid "Add a new delegation." -msgstr "" - -msgid "Delete a delegation." -msgstr "" - -msgid "Search for delegations." -msgstr "" - -msgid "Modify a delegation." -msgstr "" - -msgid "Display information about a delegation." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "Global forwarders" -msgstr "" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Forward policy" -msgstr "" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" - -msgid "Allow PTR sync" -msgstr "" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" - -msgid "Zone refresh interval" -msgstr "" - -#, fuzzy -msgid "Zone name" -msgstr "Název příkazu" - -msgid "Zone name (FQDN)" -msgstr "" - -msgid "Reverse zone IP network" -msgstr "" - -msgid "IP network to create reverse zone name from" -msgstr "" - -msgid "Active zone" -msgstr "" - -msgid "Is zone active?" -msgstr "" - -msgid "Zone forwarders" -msgstr "" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "Record name" -msgstr "Typ záznamu" - -msgid "Time to live" -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "Records" -msgstr "Typ záznamu" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "Record type" -msgstr "Typ záznamu" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "Record data" -msgstr "Typ záznamu" - -msgid "A record" -msgstr "" - -msgid "Raw A records" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "A IP Address" -msgstr "IP adresa" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "IP Address" -msgstr "IP adresa" - -msgid "A Create reverse" -msgstr "" - -msgid "Create reverse record for this IP Address" -msgstr "" - -msgid "AAAA record" -msgstr "" - -msgid "Raw AAAA records" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "AAAA IP Address" -msgstr "IP adresa" - -msgid "AAAA Create reverse" -msgstr "" - -msgid "A6 record" -msgstr "" - -msgid "Raw A6 records" -msgstr "" - -msgid "A6 Record data" -msgstr "" - -msgid "AFSDB record" -msgstr "" - -msgid "Raw AFSDB records" -msgstr "" - -msgid "AFSDB Subtype" -msgstr "" - -msgid "Subtype" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -#, fuzzy -msgid "AFSDB Hostname" -msgstr "Název počítače" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -#, fuzzy -msgid "Hostname" -msgstr "Název počítače" - -msgid "APL record" -msgstr "" - -msgid "Raw APL records" -msgstr "" - -msgid "CERT record" -msgstr "" - -msgid "Raw CERT records" -msgstr "" - -msgid "CERT Certificate Type" -msgstr "" - -msgid "Certificate Type" -msgstr "" - -msgid "CERT Key Tag" -msgstr "" - -msgid "Key Tag" -msgstr "" - -msgid "CERT Algorithm" -msgstr "" - -msgid "Algorithm" -msgstr "" - -msgid "CERT Certificate/CRL" -msgstr "" - -msgid "Certificate/CRL" -msgstr "" - -msgid "CNAME record" -msgstr "" - -msgid "Raw CNAME records" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -#, fuzzy -msgid "CNAME Hostname" -msgstr "Název počítače" - -msgid "A hostname which this alias hostname points to" -msgstr "" - -msgid "DHCID record" -msgstr "" - -msgid "Raw DHCID records" -msgstr "" - -msgid "DLV record" -msgstr "" - -msgid "Raw DLV records" -msgstr "" - -msgid "DLV Key Tag" -msgstr "" - -msgid "DLV Algorithm" -msgstr "" - -msgid "DLV Digest Type" -msgstr "" - -msgid "Digest Type" -msgstr "" - -msgid "DLV Digest" -msgstr "" - -msgid "Digest" -msgstr "" - -msgid "DNAME record" -msgstr "" - -msgid "Raw DNAME records" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "DNAME Target" -msgstr "Cíl" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "Target" -msgstr "Cíl" - -msgid "DNSKEY record" -msgstr "" - -msgid "Raw DNSKEY records" -msgstr "" - -msgid "DS record" -msgstr "" - -msgid "Raw DS records" -msgstr "" - -msgid "DS Key Tag" -msgstr "" - -msgid "DS Algorithm" -msgstr "" - -msgid "DS Digest Type" -msgstr "" - -msgid "DS Digest" -msgstr "" - -msgid "HIP record" -msgstr "" - -msgid "Raw HIP records" -msgstr "" - -msgid "IPSECKEY record" -msgstr "" - -msgid "Raw IPSECKEY records" -msgstr "" - -msgid "KEY record" -msgstr "" - -msgid "Raw KEY records" -msgstr "" - -msgid "KX record" -msgstr "" - -msgid "Raw KX records" -msgstr "" - -msgid "KX Preference" -msgstr "" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" - -msgid "KX Exchanger" -msgstr "" - -msgid "A host willing to act as a key exchanger" -msgstr "" - -msgid "LOC record" -msgstr "" - -msgid "Raw LOC records" -msgstr "" - -msgid "LOC Degrees Latitude" -msgstr "" - -msgid "Degrees Latitude" -msgstr "" - -msgid "LOC Minutes Latitude" -msgstr "" - -msgid "Minutes Latitude" -msgstr "" - -msgid "LOC Seconds Latitude" -msgstr "" - -msgid "Seconds Latitude" -msgstr "" - -msgid "LOC Direction Latitude" -msgstr "" - -msgid "Direction Latitude" -msgstr "" - -msgid "LOC Degrees Longitude" -msgstr "" - -msgid "Degrees Longitude" -msgstr "" - -msgid "LOC Minutes Longitude" -msgstr "" - -msgid "Minutes Longitude" -msgstr "" - -msgid "LOC Seconds Longitude" -msgstr "" - -msgid "Seconds Longitude" -msgstr "" - -msgid "LOC Direction Longitude" -msgstr "" - -msgid "Direction Longitude" -msgstr "" - -msgid "LOC Altitude" -msgstr "" - -msgid "Altitude" -msgstr "" - -# auto translated by TM merge from project: blivet-gui, version: f23-branch, -# DocId: blivet-gui -#, fuzzy -msgid "LOC Size" -msgstr "Velikost" - -# auto translated by TM merge from project: blivet-gui, version: f23-branch, -# DocId: blivet-gui -msgid "Size" -msgstr "Velikost" - -msgid "LOC Horizontal Precision" -msgstr "" - -msgid "Horizontal Precision" -msgstr "" - -msgid "LOC Vertical Precision" -msgstr "" - -msgid "Vertical Precision" -msgstr "" - -msgid "MX record" -msgstr "" - -msgid "Raw MX records" -msgstr "" - -msgid "MX Preference" -msgstr "" - -msgid "MX Exchanger" -msgstr "" - -msgid "A host willing to act as a mail exchanger" -msgstr "" - -msgid "NAPTR record" -msgstr "" - -msgid "Raw NAPTR records" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "NAPTR Order" -msgstr "Další" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "Order" -msgstr "Další" - -msgid "NAPTR Preference" -msgstr "" - -msgid "Preference" -msgstr "" - -# auto translated by TM merge from project: ibus, version: head, DocId: ibus10 -#, fuzzy -msgid "NAPTR Flags" -msgstr "Vlajky" - -# auto translated by TM merge from project: ibus, version: head, DocId: ibus10 -msgid "Flags" -msgstr "Vlajky" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "NAPTR Service" -msgstr "Služba" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Service" -msgstr "Služba" - -msgid "NAPTR Regular Expression" -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "Regular Expression" -msgstr "Výraz" - -msgid "NAPTR Replacement" -msgstr "" - -msgid "Replacement" -msgstr "" - -msgid "NS record" -msgstr "" - -msgid "Raw NS records" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -#, fuzzy -msgid "NS Hostname" -msgstr "Název počítače" - -msgid "NSEC record" -msgstr "" - -msgid "Raw NSEC records" -msgstr "" - -msgid "NSEC3 record" -msgstr "" - -msgid "Raw NSEC3 records" -msgstr "" - -msgid "PTR record" -msgstr "" - -msgid "Raw PTR records" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -#, fuzzy -msgid "PTR Hostname" -msgstr "Název počítače" - -msgid "The hostname this reverse record points to" -msgstr "" - -msgid "RRSIG record" -msgstr "" - -msgid "Raw RRSIG records" -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "RP record" -msgstr "Typ záznamu" - -msgid "Raw RP records" -msgstr "" - -msgid "SIG record" -msgstr "" - -msgid "Raw SIG records" -msgstr "" - -msgid "SPF record" -msgstr "" - -msgid "Raw SPF records" -msgstr "" - -msgid "SRV record" -msgstr "" - -msgid "Raw SRV records" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "SRV Priority" -msgstr "Priorita" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Priority" -msgstr "Priorita" - -# auto translated by TM merge from project: dnf, version: master, DocId: -# po/dnf -#, fuzzy -msgid "SRV Weight" -msgstr "Práva" - -# auto translated by TM merge from project: dnf, version: master, DocId: -# po/dnf -#, fuzzy -msgid "Weight" -msgstr "Práva" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "SRV Port" -msgstr "Port" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Port" -msgstr "Port" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "SRV Target" -msgstr "Cíl" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" - -msgid "SSHFP record" -msgstr "" - -msgid "Raw SSHFP records" -msgstr "" - -msgid "SSHFP Algorithm" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "SSHFP Fingerprint Type" -msgstr "Otisk" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "Fingerprint Type" -msgstr "Otisk" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "SSHFP Fingerprint" -msgstr "Otisk" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -msgid "Fingerprint" -msgstr "Otisk" - -msgid "TA record" -msgstr "" - -msgid "Raw TA records" -msgstr "" - -msgid "TLSA record" -msgstr "" - -msgid "Raw TLSA records" -msgstr "" - -msgid "TLSA Certificate Usage" -msgstr "" - -msgid "Certificate Usage" -msgstr "" - -msgid "TLSA Selector" -msgstr "" - -msgid "Selector" -msgstr "" - -msgid "TLSA Matching Type" -msgstr "" - -msgid "Matching Type" -msgstr "" - -msgid "TLSA Certificate Association Data" -msgstr "" - -msgid "Certificate Association Data" -msgstr "" - -msgid "TKEY record" -msgstr "" - -msgid "Raw TKEY records" -msgstr "" - -msgid "TSIG record" -msgstr "" - -msgid "Raw TSIG records" -msgstr "" - -msgid "TXT record" -msgstr "" - -msgid "Raw TXT records" -msgstr "" - -msgid "TXT Text Data" -msgstr "" - -msgid "Text Data" -msgstr "" - -msgid "Authoritative nameserver" -msgstr "" - -msgid "Authoritative nameserver domain name" -msgstr "" - -msgid "Administrator e-mail address" -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "SOA serial" -msgstr "Sériový" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "SOA record serial number" -msgstr "Sériové číslo" - -# auto translated by TM merge from project: virt-viewer, version: master, -# DocId: virt-viewer -#, fuzzy -msgid "SOA refresh" -msgstr "Obnovit" - -msgid "SOA record refresh time" -msgstr "" - -msgid "SOA retry" -msgstr "" - -msgid "SOA record retry time" -msgstr "" - -msgid "SOA expire" -msgstr "" - -msgid "SOA record expire time" -msgstr "" - -msgid "SOA minimum" -msgstr "" - -msgid "How long should negative responses be cached" -msgstr "" - -msgid "Time to live for records at zone apex" -msgstr "" - -msgid "BIND update policy" -msgstr "" - -msgid "Dynamic update" -msgstr "" - -msgid "Allow dynamic updates." -msgstr "" - -msgid "Allow query" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" - -msgid "Allow transfer" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" - -msgid "Allow in-line DNSSEC signing" -msgstr "" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "" - -msgid "NSEC3PARAM record" -msgstr "" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" - -msgid "Resolve a host name in DNS." -msgstr "" - -msgid "Modify global DNS configuration." -msgstr "" - -msgid "Show the current global DNS configuration." -msgstr "" - -msgid "Create new DNS forward zone." -msgstr "" - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" - -msgid "Permission value" -msgstr "" - -msgid "Delete DNS forward zone." -msgstr "" - -msgid "Disable DNS Forward Zone." -msgstr "" - -msgid "Enable DNS Forward Zone." -msgstr "" - -msgid "Search for DNS forward zones." -msgstr "" - -msgid "Modify DNS forward zone." -msgstr "" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" - -msgid "Display information about a DNS forward zone." -msgstr "" - -msgid "Add new DNS resource record." -msgstr "" - -msgid "Force" -msgstr "" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "" - -msgid "Structured" -msgstr "" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" - -msgid "Delete DNS resource record." -msgstr "" - -msgid "Delete all associated records" -msgstr "" - -msgid "Delete DNS record entry." -msgstr "" - -msgid "Search for DNS resources." -msgstr "" - -msgid "Modify a DNS resource record." -msgstr "" - -msgid "Rename the DNS resource record object" -msgstr "" - -msgid "Display DNS resource." -msgstr "" - -msgid "Create new DNS zone (SOA record)." -msgstr "" - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" - -msgid "Add a permission for per-zone access delegation." -msgstr "" - -msgid "Delete DNS zone (SOA record)." -msgstr "" - -msgid "Disable DNS Zone." -msgstr "" - -msgid "Enable DNS Zone." -msgstr "" - -msgid "Search for DNS zones (SOA records)." -msgstr "" - -msgid "Forward zones only" -msgstr "" - -msgid "Search for forward zones only" -msgstr "" - -msgid "Modify DNS zone (SOA record)." -msgstr "" - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" - -msgid "Remove a permission for per-zone access delegation." -msgstr "" - -msgid "Display information about a DNS zone (SOA record)." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -# auto translated by TM merge from project: dnf, version: master, DocId: -# po/dnf -#, fuzzy -msgid "Group name" -msgstr "Skupina" - -# auto translated by TM merge from project: anaconda, version: f22-branch, -# DocId: anaconda -#, fuzzy -msgid "Group description" -msgstr "popis" - -msgid "GID" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Member users" -msgstr "Členové" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Member groups" -msgstr "Členové" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Member of groups" -msgstr "Členové" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Roles" -msgstr "Role" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Suppress processing of membership attributes." -msgstr "" - -msgid "Add members to a group." -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "External member" -msgstr "Sériové číslo" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "member user" -msgstr "Členové" - -msgid "users to add" -msgstr "" - -msgid "member group" -msgstr "" - -msgid "groups to add" -msgstr "" - -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -#, fuzzy -msgid "Delete group." -msgstr "Smazat" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -msgid "user" -msgstr "uživatel" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -msgid "group" -msgstr "skupinu" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "netgroup" -msgstr "skupinu" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "role" -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "HBAC rule" -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "sudo rule" -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -# auto translated by TM merge from project: dnf, version: master, DocId: dnf -#, fuzzy -msgid "Rule name" -msgstr "Uživatelské jméno" - -msgid "Rule type" -msgstr "" - -msgid "Rule type (allow)" -msgstr "" - -# auto translated by TM merge from project: dnf, version: master, DocId: dnf -#, fuzzy -msgid "User category" -msgstr "Uživatelské jméno" - -msgid "User category the rule applies to" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Host category" -msgstr "Název počítače" - -msgid "Host category the rule applies to" -msgstr "" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Service category" -msgstr "Nastavení služeb" - -msgid "Service category the rule applies to" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Enabled" -msgstr "Povoleno" - -# auto translated by TM merge from project: libreport, version: rhel6, DocId: -# libreport -#, fuzzy -msgid "User Groups" -msgstr "Skupiny" - -# auto translated by TM merge from project: libreport, version: rhel6, DocId: -# libreport -#, fuzzy -msgid "Host Groups" -msgstr "Skupiny" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -msgid "Services" -msgstr "Služby" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -#, fuzzy -msgid "Service Groups" -msgstr "Služby" - -msgid "External host" -msgstr "" - -msgid "Create a new HBAC rule." -msgstr "" - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "member host" -msgstr "Členové" - -msgid "hosts to add" -msgstr "" - -msgid "member host group" -msgstr "" - -msgid "host groups to add" -msgstr "" - -msgid "Add services to an HBAC rule." -msgstr "" - -msgid "member HBAC service" -msgstr "" - -msgid "HBAC services to add" -msgstr "" - -msgid "member HBAC service group" -msgstr "" - -msgid "HBAC service groups to add" -msgstr "" - -msgid "Add users and groups to an HBAC rule." -msgstr "" - -msgid "Delete an HBAC rule." -msgstr "" - -msgid "Disable an HBAC rule." -msgstr "" - -msgid "Enable an HBAC rule." -msgstr "" - -msgid "Search for HBAC rules." -msgstr "" - -msgid "Modify an HBAC rule." -msgstr "" - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "hosts to remove" -msgstr "" - -msgid "host groups to remove" -msgstr "" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "" - -msgid "HBAC services to remove" -msgstr "" - -msgid "HBAC service groups to remove" -msgstr "" - -msgid "Remove users and groups from an HBAC rule." -msgstr "" - -msgid "Display the properties of an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Service name" -msgstr "Služba" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "HBAC service" -msgstr "službu" - -# auto translated by TM merge from project: anaconda, version: f22-branch, -# DocId: anaconda -#, fuzzy -msgid "HBAC service description" -msgstr "popis" - -msgid "Member of HBAC service groups" -msgstr "" - -msgid "Add a new HBAC service." -msgstr "" - -msgid "Delete an existing HBAC service." -msgstr "" - -msgid "Search for HBAC services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" - -msgid "Modify an HBAC service." -msgstr "" - -msgid "Display information about an HBAC service." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "Service group name" -msgstr "" - -msgid "HBAC service group description" -msgstr "" - -msgid "Member HBAC service" -msgstr "" - -msgid "Add a new HBAC service group." -msgstr "" - -msgid "Add members to an HBAC service group." -msgstr "" - -msgid "Delete an HBAC service group." -msgstr "" - -msgid "Search for an HBAC service group." -msgstr "" - -msgid "Modify an HBAC service group." -msgstr "" - -msgid "Remove members from an HBAC service group." -msgstr "" - -msgid "Display information about an HBAC service group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -# auto translated by TM merge from project: dnf, version: master, DocId: dnf -msgid "User name" -msgstr "Uživatelské jméno" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Target host" -msgstr "Cíl" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -# auto translated by TM merge from project: authconfig, version: master, -# DocId: po/authconfig -msgid "Warning" -msgstr "Varování" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -msgid "Host name" -msgstr "Název počítače" - -msgid "A description of this host" -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Locality" -msgstr "Umístění" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -msgid "Platform" -msgstr "Platforma" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "" - -msgid "Operating system" -msgstr "Operační systém" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "" - -msgid "User password" -msgstr "Uživatelské heslo" - -msgid "Password used in bulk enrollment" -msgstr "" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -#, fuzzy -msgid "Random password" -msgstr "heslo" - -msgid "Certificate" -msgstr "" - -msgid "Base-64 encoded server certificate" -msgstr "" - -msgid "Principal name" -msgstr "" - -# auto translated by TM merge from project: libvirt, version: master, DocId: -# libvirt -msgid "MAC address" -msgstr "MAC adresa" - -msgid "Hardware MAC address(es) on this host" -msgstr "" - -msgid "SSH public key" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Class" -msgstr "Třída" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "Assigned ID View" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Requires pre-authentication" -msgstr "Autentizace" - -msgid "Pre-authentication is required for the service" -msgstr "" - -msgid "Trusted for delegation" -msgstr "" - -msgid "Client credentials may be delegated to the service" -msgstr "" - -msgid "Member of host-groups" -msgstr "" - -msgid "Indirect Member of host-group" -msgstr "" - -msgid "Keytab" -msgstr "" - -msgid "Managed by" -msgstr "" - -msgid "Managing" -msgstr "" - -msgid "Users allowed to retrieve keytab" -msgstr "" - -msgid "Groups allowed to retrieve keytab" -msgstr "" - -msgid "Hosts allowed to retrieve keytab" -msgstr "" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "" - -msgid "Users allowed to create keytab" -msgstr "" - -msgid "Groups allowed to create keytab" -msgstr "" - -msgid "Hosts allowed to create keytab" -msgstr "" - -msgid "Host Groups allowed to create keytab" -msgstr "" - -msgid "Add a new host." -msgstr "" - -msgid "force host name even if not in DNS" -msgstr "" - -msgid "skip reverse DNS detection" -msgstr "" - -msgid "Add the host to DNS with this IP address" -msgstr "" - -msgid "Add hosts that can manage this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -#, fuzzy -msgid "Delete a host." -msgstr "Smazat" - -msgid "Remove entries from DNS" -msgstr "" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" - -msgid "Search for hosts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "host group" -msgstr "skupinu" - -msgid "Search for hosts with these member of host groups." -msgstr "" - -msgid "Search for hosts without these member of host groups." -msgstr "" - -msgid "Search for hosts with these member of netgroups." -msgstr "" - -msgid "Search for hosts without these member of netgroups." -msgstr "" - -msgid "Search for hosts with these member of roles." -msgstr "" - -msgid "Search for hosts without these member of roles." -msgstr "" - -msgid "Search for hosts with these member of HBAC rules." -msgstr "" - -msgid "Search for hosts without these member of HBAC rules." -msgstr "" - -msgid "Search for hosts with these member of sudo rules." -msgstr "" - -msgid "Search for hosts without these member of sudo rules." -msgstr "" - -msgid "Search for hosts with these enrolled by users." -msgstr "" - -msgid "Search for hosts without these enrolled by users." -msgstr "" - -msgid "host" -msgstr "" - -msgid "Search for hosts with these managed by hosts." -msgstr "" - -msgid "Search for hosts without these managed by hosts." -msgstr "" - -msgid "Search for hosts with these managing hosts." -msgstr "" - -msgid "Search for hosts without these managing hosts." -msgstr "" - -msgid "Modify information about a host." -msgstr "" - -msgid "Kerberos principal name for this host" -msgstr "" - -msgid "Update DNS entries" -msgstr "" - -msgid "Remove hosts that can manage this host." -msgstr "" - -msgid "Display information about a host." -msgstr "" - -msgid "file to store certificate in" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "Host-group" -msgstr "skupinu" - -msgid "Name of host-group" -msgstr "" - -msgid "A description of this host-group" -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Member hosts" -msgstr "Členové" - -msgid "Member host-groups" -msgstr "" - -msgid "Indirect Member hosts" -msgstr "" - -msgid "Indirect Member host-groups" -msgstr "" - -msgid "Add a new hostgroup." -msgstr "" - -msgid "Add members to a hostgroup." -msgstr "" - -msgid "Delete a hostgroup." -msgstr "" - -msgid "Search for hostgroups." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" - -msgid "Search for host groups with these member hosts." -msgstr "" - -msgid "Search for host groups without these member hosts." -msgstr "" - -msgid "Search for host groups with these member host groups." -msgstr "" - -msgid "Search for host groups without these member host groups." -msgstr "" - -msgid "Search for host groups with these member of host groups." -msgstr "" - -msgid "Search for host groups without these member of host groups." -msgstr "" - -msgid "Search for host groups with these member of netgroups." -msgstr "" - -msgid "Search for host groups without these member of netgroups." -msgstr "" - -msgid "Search for host groups with these member of HBAC rules." -msgstr "" - -msgid "Search for host groups without these member of HBAC rules." -msgstr "" - -msgid "Search for host groups with these member of sudo rules." -msgstr "" - -msgid "Search for host groups without these member of sudo rules." -msgstr "" - -msgid "Modify a hostgroup." -msgstr "" - -msgid "Remove members from a hostgroup." -msgstr "" - -msgid "Display information about a hostgroup." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "Název příkazu" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -msgid "Anchor to override" -msgstr "" - -msgid "Group ID Number" -msgstr "" - -# auto translated by TM merge from project: dnf, version: master, DocId: dnf -#, fuzzy -msgid "User login" -msgstr "Uživatelské jméno" - -# auto translated by TM merge from project: libvirt, version: master, DocId: -# libvirt -#, fuzzy -msgid "UID" -msgstr "UUID:" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "User ID Number" -msgstr "Sériové číslo" - -msgid "GECOS" -msgstr "" - -msgid "Home directory" -msgstr "" - -msgid "Login shell" -msgstr "" - -msgid "ID View Name" -msgstr "" - -msgid "Add a new Group ID override." -msgstr "" - -msgid "Delete an Group ID override." -msgstr "" - -msgid "Search for an Group ID override." -msgstr "" - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" - -msgid "Modify an Group ID override." -msgstr "" - -msgid "Rename the Group ID override object" -msgstr "" - -msgid "Display information about an Group ID override." -msgstr "" - -msgid "Add a new User ID override." -msgstr "" - -msgid "Delete an User ID override." -msgstr "" - -msgid "Search for an User ID override." -msgstr "" - -msgid "Modify an User ID override." -msgstr "" - -msgid "Rename the User ID override object" -msgstr "" - -msgid "Display information about an User ID override." -msgstr "" - -msgid "Add a new ID View." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" - -msgid "hosts" -msgstr "" - -msgid "Hosts to apply the ID View to" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "hostgroups" -msgstr "skupinu" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" - -msgid "Hosts that this ID View was applied to." -msgstr "" - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" - -msgid "Number of hosts the ID View was applied to:" -msgstr "" - -msgid "Delete an ID View." -msgstr "" - -msgid "Search for an ID View." -msgstr "" - -msgid "Modify an ID View." -msgstr "" - -msgid "Rename the ID View object" -msgstr "" - -msgid "Display information about an ID View." -msgstr "" - -msgid "Enumerate all the hosts the view applies to." -msgstr "" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" - -msgid "Hosts to clear (any) ID View from." -msgstr "" - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" - -msgid "Hosts that ID View was cleared from." -msgstr "" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" - -msgid "Dict of I18N messages" -msgstr "" - -msgid "Export plugin meta-data for the webUI." -msgstr "" - -msgid "Name of object to export" -msgstr "" - -msgid "Name of method to export" -msgstr "" - -msgid "Name of command to export" -msgstr "" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" - -msgid "Join an IPA domain" -msgstr "" - -msgid "The hostname to register as" -msgstr "" - -msgid "The IPA realm" -msgstr "" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "" - -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" - -msgid "Manage ticket policy for specific user" -msgstr "" - -msgid "Max life" -msgstr "" - -msgid "Maximum ticket life (seconds)" -msgstr "" - -msgid "Max renew" -msgstr "" - -msgid "Maximum renewable age (seconds)" -msgstr "" - -msgid "Modify Kerberos ticket policy." -msgstr "" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "" - -msgid "Display the current Kerberos ticket policy." -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," -"cn=accounts' --group-container='cn=groups,cn=accounts' " -"ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' --user-ignore-" -"objectclass=radiusprofile --user-ignore-" -"attribute=radiusgroupname ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -msgid "Migrate users and groups from DS to IPA." -msgstr "" - -# auto translated by TM merge from project: authconfig, version: master, -# DocId: po/authconfig -#, fuzzy -msgid "LDAP URI" -msgstr "Neplatné URI pro LDAP." - -msgid "LDAP URI of DS server to migrate from" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -#, fuzzy -msgid "bind password" -msgstr "heslo" - -msgid "Bind DN" -msgstr "" - -# auto translated by TM merge from project: dnf, version: master, DocId: dnf -#, fuzzy -msgid "User container" -msgstr "Uživatelské jméno" - -msgid "DN of container for users in DS relative to base DN" -msgstr "" - -msgid "Group container" -msgstr "" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "" - -msgid "User object class" -msgstr "" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "" - -msgid "Group object class" -msgstr "" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "" - -msgid "Ignore user object class" -msgstr "" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore user attribute" -msgstr "" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore group object class" -msgstr "" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "Ignore group attribute" -msgstr "" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "" - -msgid "Overwrite GID" -msgstr "" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" - -msgid "LDAP schema" -msgstr "" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "Continue" -msgstr "Pokračovat" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" - -msgid "Base DN" -msgstr "" - -msgid "Base DN on remote LDAP server" -msgstr "" - -msgid "Ignore compat plugin" -msgstr "" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" - -msgid "CA certificate" -msgstr "" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "" - -msgid "groups to exclude from migration" -msgstr "" - -msgid "users to exclude from migration" -msgstr "" - -msgid "Lists of objects migrated; categorized by type." -msgstr "" - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" - -msgid "False if migration mode was disabled." -msgstr "" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" - -msgid "Show environment variables." -msgstr "" - -msgid "Forward to server instead of running locally" -msgstr "" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Total number of variables env (>= count)" -msgstr "" - -msgid "Number of variables returned (<= total)" -msgstr "" - -msgid "Show all loaded plugins." -msgstr "" - -msgid "Dictionary mapping plugin names to bases" -msgstr "" - -msgid "Number of plugins loaded" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -# auto translated by TM merge from project: dnf, version: master, DocId: dnf -#, fuzzy -msgid "Netgroup name" -msgstr "Uživatelské jméno" - -# auto translated by TM merge from project: anaconda, version: f22-branch, -# DocId: anaconda -#, fuzzy -msgid "Netgroup description" -msgstr "popis" - -#, fuzzy -msgid "NIS domain name" -msgstr "Název příkazu" - -msgid "IPA unique ID" -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Member netgroups" -msgstr "Členové" - -msgid "Indirect Member netgroups" -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Member User" -msgstr "Členové" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Member Group" -msgstr "Členové" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Member Host" -msgstr "Členové" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Member Hostgroup" -msgstr "Členové" - -msgid "Add a new netgroup." -msgstr "" - -msgid "Add members to a netgroup." -msgstr "" - -msgid "member netgroup" -msgstr "" - -msgid "netgroups to add" -msgstr "" - -msgid "Delete a netgroup." -msgstr "" - -msgid "Search for a netgroup." -msgstr "" - -msgid "search for managed groups" -msgstr "" - -msgid "Search for netgroups with these member netgroups." -msgstr "" - -msgid "Search for netgroups without these member netgroups." -msgstr "" - -msgid "Search for netgroups with these member users." -msgstr "" - -msgid "Search for netgroups without these member users." -msgstr "" - -msgid "Search for netgroups with these member groups." -msgstr "" - -msgid "Search for netgroups without these member groups." -msgstr "" - -msgid "Search for netgroups with these member hosts." -msgstr "" - -msgid "Search for netgroups without these member hosts." -msgstr "" - -msgid "Search for netgroups with these member host groups." -msgstr "" - -msgid "Search for netgroups without these member host groups." -msgstr "" - -msgid "Search for netgroups with these member of netgroups." -msgstr "" - -msgid "Search for netgroups without these member of netgroups." -msgstr "" - -msgid "Modify a netgroup." -msgstr "" - -msgid "Remove members from a netgroup." -msgstr "" - -msgid "netgroups to remove" -msgstr "" - -msgid "Display information about a netgroup." -msgstr "" - -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "TOTP authentication Window" -msgstr "Autentizace" - -msgid "TOTP authentication time variance (seconds)" -msgstr "" - -msgid "TOTP Synchronization Window" -msgstr "" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "HOTP Authentication Window" -msgstr "Autentizace" - -msgid "HOTP authentication skip-ahead" -msgstr "" - -msgid "HOTP Synchronization Window" -msgstr "" - -msgid "HOTP synchronization skip-ahead" -msgstr "" - -msgid "Modify OTP configuration options." -msgstr "" - -msgid "Show the current OTP configuration." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -# auto translated by TM merge from project: Cockpit, version: master, DocId: -# cockpit -msgid "Disabled" -msgstr "Zakázáno" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "Vendor" -msgstr "Výrobce" - -msgid "Token vendor name (informational only)" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "Model" -msgstr "Model" - -msgid "Token model (informational only)" -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -msgid "Serial" -msgstr "Sériový" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -#, fuzzy -msgid "(deprecated)" -msgstr "Zastaralé volby" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -#, fuzzy -msgid "Set a user's password." -msgstr "Uživatelské heslo" - -# auto translated by TM merge from project: python-simpleline, version: -# master, DocId: python-simpleline -#, fuzzy -msgid "New Password" -msgstr "Heslo" - -# auto translated by TM merge from project: python-simpleline, version: -# master, DocId: python-simpleline -#, fuzzy -msgid "Current Password" -msgstr "Heslo" - -msgid "OTP" -msgstr "" - -# auto translated by TM merge from project: python-simpleline, version: -# master, DocId: python-simpleline -#, fuzzy -msgid "One Time Password" -msgstr "Heslo" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -"\n" -"Managed permissions\n" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "Permission name" -msgstr "" - -msgid "Granted rights" -msgstr "" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" - -msgid "Effective attributes" -msgstr "" - -msgid "All attributes to which the permission applies" -msgstr "" - -msgid "Included attributes" -msgstr "" - -msgid "User-specified attributes to which the permission applies" -msgstr "" - -msgid "Excluded attributes" -msgstr "" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" - -msgid "Default attributes" -msgstr "" - -msgid "Attributes to which the permission applies by default" -msgstr "" - -#, fuzzy -msgid "Bind rule type" -msgstr "nesprávný typ" - -msgid "Subtree to apply permissions to" -msgstr "" - -msgid "Extra target filter" -msgstr "" - -msgid "Raw target filter" -msgstr "" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Target DN" -msgstr "Cíl" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" - -msgid "Member of group" -msgstr "" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "" - -msgid "User group to apply permissions to (sets target)" -msgstr "" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "" - -msgid "Deprecated; use extratargetfilter" -msgstr "" - -#, fuzzy -msgid "Deprecated; use ipapermlocation" -msgstr "Zastaralé volby" - -msgid "Deprecated; use ipapermright" -msgstr "" - -msgid "Granted to Privilege" -msgstr "" - -msgid "Indirect Member of roles" -msgstr "" - -msgid "Add a new permission." -msgstr "" - -msgid "Add members to a permission." -msgstr "" - -msgid "member privilege" -msgstr "" - -msgid "privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "" - -msgid "Permission flags" -msgstr "" - -msgid "Delete a permission." -msgstr "" - -msgid "force delete of SYSTEM permissions" -msgstr "" - -msgid "Search for permissions." -msgstr "" - -msgid "Modify a permission." -msgstr "" - -msgid "Rename the permission object" -msgstr "" - -msgid "Remove members from a permission." -msgstr "" - -msgid "privileges to remove" -msgstr "" - -msgid "Display information about a permission." -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "Ping a remote server." -msgstr "" - -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "" - -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" - -msgid "Privilege name" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f22-branch, -# DocId: anaconda -#, fuzzy -msgid "Privilege description" -msgstr "popis" - -msgid "Granting privilege to roles" -msgstr "" - -msgid "Add a new privilege." -msgstr "" - -msgid "Add members to a privilege." -msgstr "" - -msgid "member role" -msgstr "" - -#, fuzzy -msgid "roles to add" -msgstr "Žádný soubor k přečtení" - -msgid "Add permissions to a privilege." -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "permission" -msgstr "Verze" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "permissions" -msgstr "Výraz" - -msgid "Number of permissions added" -msgstr "" - -msgid "Delete a privilege." -msgstr "" - -msgid "Search for privileges." -msgstr "" - -msgid "Modify a privilege." -msgstr "" - -msgid "Rename the privilege object" -msgstr "" - -msgid "Remove members from a privilege" -msgstr "" - -#, fuzzy -msgid "roles to remove" -msgstr "Žádný soubor k přečtení" - -msgid "Remove permissions from a privilege." -msgstr "" - -msgid "Number of permissions removed" -msgstr "" - -msgid "Display information about a privilege." -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -# auto translated by TM merge from project: dnf, version: master, DocId: -# po/dnf -msgid "Group" -msgstr "Skupina" - -msgid "Manage password policy for specific group" -msgstr "" - -msgid "Max lifetime (days)" -msgstr "" - -msgid "Maximum password lifetime (in days)" -msgstr "" - -msgid "Min lifetime (hours)" -msgstr "" - -msgid "Minimum password lifetime (in hours)" -msgstr "" - -msgid "History size" -msgstr "" - -msgid "Password history size" -msgstr "" - -msgid "Character classes" -msgstr "" - -msgid "Minimum number of character classes" -msgstr "" - -msgid "Min length" -msgstr "" - -msgid "Minimum length of password" -msgstr "" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "" - -msgid "Max failures" -msgstr "" - -msgid "Consecutive failures before lockout" -msgstr "" - -msgid "Failure reset interval" -msgstr "" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Lockout duration" -msgstr "Umístění" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" - -msgid "Add a new group password policy." -msgstr "" - -msgid "Delete a group password policy." -msgstr "" - -msgid "Search for group password policies." -msgstr "" - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" - -msgid "Modify a group password policy." -msgstr "" - -msgid "Display information about password policy." -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -msgid "User" -msgstr "Uživatel" - -msgid "Display effective policy for a specific user" -msgstr "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "RADIUS proxy server name" -msgstr "" - -msgid "A description of this RADIUS proxy server" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org -msgid "Server" -msgstr "Server" - -msgid "The hostname or IP (with or without port)" -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -msgid "Secret" -msgstr "Tajné" - -msgid "The secret used to encrypt data" -msgstr "" - -# auto translated by TM merge from project: Pulseaudio, version: 6.0, DocId: -# pulseaudio.pot -msgid "Timeout" -msgstr "Časový limit" - -msgid "The total timeout across all retries (in seconds)" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Retries" -msgstr "Opakovat" - -msgid "The number of times to retry authentication" -msgstr "" - -# auto translated by TM merge from project: dnf, version: master, DocId: dnf -#, fuzzy -msgid "User attribute" -msgstr "Uživatelské jméno" - -msgid "The username attribute on the user object" -msgstr "" - -msgid "Add a new RADIUS proxy server." -msgstr "" - -msgid "Delete a RADIUS proxy server." -msgstr "" - -msgid "Search for RADIUS proxy servers." -msgstr "" - -msgid "Modify a RADIUS proxy server." -msgstr "" - -msgid "Rename the RADIUS proxy server object" -msgstr "" - -msgid "Display information about a RADIUS proxy server." -msgstr "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Domain" -msgstr "" - -msgid "Add domain" -msgstr "" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -#, fuzzy -msgid "Delete domain" -msgstr "Smazat" - -msgid "Modify realm domains." -msgstr "" - -msgid "Force adding domain even if not in DNS" -msgstr "" - -msgid "Display the list of realm domains." -msgstr "" - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -#, fuzzy -msgid "Role name" -msgstr "Název počítače" - -msgid "A description of this role-group" -msgstr "" - -msgid "Privileges" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "Member services" -msgstr "službu" - -msgid "Add a new role." -msgstr "" - -msgid "Add members to a role." -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "member service" -msgstr "službu" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "services to add" -msgstr "službu" - -msgid "Add privileges to a role." -msgstr "" - -msgid "privilege" -msgstr "" - -msgid "privileges" -msgstr "" - -msgid "Number of privileges added" -msgstr "" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -#, fuzzy -msgid "Delete a role." -msgstr "Smazat" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "Search for roles." -msgstr "Serverové role" - -msgid "Modify a role." -msgstr "" - -msgid "Rename the role object" -msgstr "" - -msgid "Remove members from a role." -msgstr "" - -msgid "services to remove" -msgstr "" - -msgid "Remove privileges from a role." -msgstr "" - -msgid "Number of privileges removed" -msgstr "" - -msgid "Display information about a role." -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -# auto translated by TM merge from project: dnf, version: master, DocId: dnf -#, fuzzy -msgid "Self-service name" -msgstr "Uživatelské jméno" - -msgid "Attributes to which the permission applies." -msgstr "" - -msgid "Add a new self-service permission." -msgstr "" - -msgid "Delete a self-service permission." -msgstr "" - -msgid "Search for a self-service permission." -msgstr "" - -msgid "Modify a self-service permission." -msgstr "" - -msgid "Display information about a self-service permission." -msgstr "" - -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "SELinux User" -msgstr "Uživatel SELinuxu" - -msgid "HBAC Rule" -msgstr "" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "" - -msgid "Create a new SELinux User Map." -msgstr "" - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Delete a SELinux User Map." -msgstr "Uživatel SELinuxu" - -msgid "Disable an SELinux User Map rule." -msgstr "" - -msgid "Enable an SELinux User Map rule." -msgstr "" - -msgid "Search for SELinux User Maps." -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Modify a SELinux User Map." -msgstr "Uživatel SELinuxu" - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "" - -msgid "Display the properties of a SELinux User Map rule." -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Service principal" -msgstr "Nastavení služeb" - -msgid "PAC type" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" - -msgid "Add a new IPA new service." -msgstr "" - -msgid "force principal name even if not in DNS" -msgstr "" - -msgid "Add hosts that can manage this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Delete an IPA service." -msgstr "" - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Search for IPA services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" - -msgid "Search for services with these managed by hosts." -msgstr "" - -msgid "Search for services without these managed by hosts." -msgstr "" - -msgid "Modify an existing IPA service." -msgstr "" - -msgid "Remove hosts that can manage this service." -msgstr "" - -msgid "Display information about an IPA service." -msgstr "" - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" - -#, fuzzy -msgid "Sudo Command" -msgstr "Téma nebo příkaz" - -msgid "A description of this command" -msgstr "" - -msgid "Sudo Command Groups" -msgstr "" - -msgid "Create new Sudo Command." -msgstr "" - -msgid "Delete Sudo Command." -msgstr "" - -msgid "Search for Sudo Commands." -msgstr "" - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" - -#, fuzzy -msgid "Modify Sudo Command." -msgstr "Téma nebo příkaz" - -msgid "Display Sudo Command." -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "Sudo Command Group" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Commands" -msgstr "příkazy" - -msgid "Member Sudo commands" -msgstr "" - -msgid "Create new Sudo Command Group." -msgstr "" - -msgid "Add members to Sudo Command Group." -msgstr "" - -msgid "member sudo command" -msgstr "" - -msgid "sudo commands to add" -msgstr "" - -msgid "Delete Sudo Command Group." -msgstr "" - -msgid "Search for Sudo Command Groups." -msgstr "" - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" - -msgid "Modify Sudo Command Group." -msgstr "" - -msgid "Remove members from Sudo Command Group." -msgstr "" - -msgid "sudo commands to remove" -msgstr "" - -msgid "Display Sudo Command Group." -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -#, fuzzy -msgid "Domain name" -msgstr "Název příkazu" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -#, fuzzy -msgid "First name" -msgstr "Název počítače" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -#, fuzzy -msgid "Last name" -msgstr "Název počítače" - -msgid "Full name" -msgstr "" - -msgid "Display name" -msgstr "" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource -#, fuzzy -msgid "Email address" -msgstr "Poštovní adresa" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -# auto translated by TM merge from project: libvirt, version: master, DocId: -# libvirt -#, fuzzy -msgid "Street address" -msgstr "MAC adresa" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "City" -msgstr "Město" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "Telephone Number" -msgstr "Sériové číslo" - -msgid "Mobile Telephone Number" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "Pager Number" -msgstr "Sériové číslo" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "Fax Number" -msgstr "Sériové číslo" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Car License" -msgstr "" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource -#, fuzzy -msgid "Account disabled" -msgstr "Účet" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "User authentication types" -msgstr "Autentizace" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "RADIUS proxy configuration" -msgstr "Nastavení" - -msgid "RADIUS proxy username" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "Department Number" -msgstr "Sériové číslo" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -#, fuzzy -msgid "Delete a user." -msgstr "Smazat" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -#, fuzzy -msgid "Command category" -msgstr "Název příkazu" - -msgid "Command category the rule applies to" -msgstr "" - -msgid "RunAs User category" -msgstr "" - -msgid "RunAs User category the rule applies to" -msgstr "" - -msgid "RunAs Group category" -msgstr "" - -msgid "RunAs Group category the rule applies to" -msgstr "" - -msgid "Sudo order" -msgstr "" - -msgid "integer to order the Sudo rules" -msgstr "" - -msgid "External User" -msgstr "" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Host Masks" -msgstr "Název počítače" - -#, fuzzy -msgid "Sudo Allow Commands" -msgstr "Téma nebo příkaz" - -msgid "Sudo Deny Commands" -msgstr "" - -msgid "Sudo Allow Command Groups" -msgstr "" - -msgid "Sudo Deny Command Groups" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "RunAs Users" -msgstr "Uživatelé" - -msgid "Run as a user" -msgstr "" - -msgid "Groups of RunAs Users" -msgstr "" - -msgid "Run as any user within a specified group" -msgstr "" - -msgid "RunAs External User" -msgstr "" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -msgid "External Groups of RunAs Users" -msgstr "" - -msgid "External Groups of users that the command can run as" -msgstr "" - -# auto translated by TM merge from project: Fedora Elections Guide, version: -# master, DocId: Casting -#, fuzzy -msgid "RunAs Groups" -msgstr "Jakákoli skupina" - -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -msgid "RunAs External Group" -msgstr "" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "Sudo Option" -msgstr "Přepínače" - -msgid "Create new Sudo Rule." -msgstr "" - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "member sudo command group" -msgstr "" - -msgid "sudo command groups to add" -msgstr "" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "" - -msgid "Add group for Sudo to execute as." -msgstr "" - -msgid "Add users and groups for Sudo to execute as." -msgstr "" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "" - -msgid "Delete Sudo Rule." -msgstr "" - -msgid "Disable a Sudo Rule." -msgstr "" - -msgid "Enable a Sudo Rule." -msgstr "" - -msgid "Search for Sudo Rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -msgid "Modify Sudo Rule." -msgstr "" - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "sudo command groups to remove" -msgstr "" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "Remove an option from Sudo Rule." -msgstr "" - -msgid "Remove group for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "" - -msgid "Display Sudo Rule." -msgstr "" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -#, fuzzy -msgid "ACL name" -msgstr "Název příkazu" - -# auto translated by TM merge from project: OSCAP Anaconda Addon, version: -# master, DocId: oscap-anaconda-addon -#, fuzzy -msgid "Profile category" -msgstr "Profil" - -msgid "Profile category the ACL applies to" -msgstr "" - -msgid "User category the ACL applies to" -msgstr "" - -msgid "Host category the ACL applies to" -msgstr "" - -msgid "Service category the ACL applies to" -msgstr "" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource -msgid "Profiles" -msgstr "Profily" - -msgid "Create a new CA ACL." -msgstr "" - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "" - -msgid "Add profiles to a CA ACL." -msgstr "" - -msgid "member Certificate Profile" -msgstr "" - -msgid "Certificate Profiles to add" -msgstr "" - -msgid "Add services to a CA ACL." -msgstr "" - -msgid "Add users and groups to a CA ACL." -msgstr "" - -msgid "Delete a CA ACL." -msgstr "" - -msgid "Disable a CA ACL." -msgstr "" - -msgid "Enable a CA ACL." -msgstr "" - -msgid "Search for CA ACLs." -msgstr "" - -msgid "Modify a CA ACL." -msgstr "" - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "" - -msgid "Remove profiles from a CA ACL." -msgstr "" - -msgid "Certificate Profiles to remove" -msgstr "" - -msgid "Remove services from a CA ACL." -msgstr "" - -msgid "Remove users and groups from a CA ACL." -msgstr "" - -msgid "Display the properties of a CA ACL." -msgstr "" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -# auto translated by TM merge from project: OSCAP Anaconda Addon, version: -# master, DocId: oscap-anaconda-addon -#, fuzzy -msgid "Profile ID" -msgstr "Profil" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f22-branch, -# DocId: anaconda -#, fuzzy -msgid "Profile description" -msgstr "popis" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" - -msgid "Query current Domain Level." -msgstr "" - -msgid "Current domain level:" -msgstr "" - -msgid "Change current Domain Level." -msgstr "" - -msgid "Domain Level" -msgstr "" - -msgid "Add certificates to host entry" -msgstr "" - -msgid "Remove certificates from host entry" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "Fallback to AD DC LDAP" -msgstr "" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" - -msgid "Add to default group" -msgstr "" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" - -# auto translated by TM merge from project: libreport, version: rhel6, DocId: -# libreport -#, fuzzy -msgid "Search scope" -msgstr "Hledat" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Target DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" - -msgid "Origin DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org -#, fuzzy -msgid "Server name" -msgstr "Server" - -msgid "IPA server hostname" -msgstr "" - -msgid "Managed suffix" -msgstr "" - -msgid "Min domain level" -msgstr "" - -msgid "Minimum domain level" -msgstr "" - -msgid "Max domain level" -msgstr "" - -msgid "Maximum domain level" -msgstr "" - -msgid "Delete IPA server." -msgstr "" - -msgid "Search for IPA servers." -msgstr "" - -msgid "Show IPA server." -msgstr "" - -msgid "Add new certificates to a service" -msgstr "" - -msgid "Remove certificates from a service" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Allowed Target" -msgstr "Cíl" - -msgid "Create a new service delegation rule." -msgstr "" - -msgid "Add member to a named service delegation rule." -msgstr "" - -msgid "member principal" -msgstr "" - -msgid "principal to add" -msgstr "" - -msgid "Add target to a named service delegation rule." -msgstr "" - -msgid "member service delegation target" -msgstr "" - -msgid "service delegation targets to add" -msgstr "" - -msgid "Delete service delegation." -msgstr "" - -msgid "Search for service delegations rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" - -msgid "Remove member from a named service delegation rule." -msgstr "" - -msgid "principal to remove" -msgstr "" - -msgid "Remove target from a named service delegation rule." -msgstr "" - -msgid "service delegation targets to remove" -msgstr "" - -msgid "Display information about a named service delegation rule." -msgstr "" - -msgid "Create a new service delegation target." -msgstr "" - -msgid "Add member to a named service delegation target." -msgstr "" - -msgid "Delete service delegation target." -msgstr "" - -msgid "Search for service delegation target." -msgstr "" - -msgid "Remove member from a named service delegation target." -msgstr "" - -msgid "Display information about a named service delegation target." -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" - -msgid "Activate a stage user." -msgstr "" - -msgid "Add a new stage user." -msgstr "" - -msgid "Create Stage user in from a delete user" -msgstr "" - -msgid "Delete a stage user." -msgstr "" - -msgid "Search for stage users." -msgstr "" - -msgid "Search for stage users with these member of groups." -msgstr "" - -msgid "Search for stage users without these member of groups." -msgstr "" - -msgid "Search for stage users with these member of netgroups." -msgstr "" - -msgid "Search for stage users without these member of netgroups." -msgstr "" - -msgid "Search for stage users with these member of roles." -msgstr "" - -msgid "Search for stage users without these member of roles." -msgstr "" - -msgid "Search for stage users with these member of HBAC rules." -msgstr "" - -msgid "Search for stage users without these member of HBAC rules." -msgstr "" - -msgid "Search for stage users with these member of sudo rules." -msgstr "" - -msgid "Search for stage users without these member of sudo rules." -msgstr "" - -msgid "Modify a stage user." -msgstr "" - -msgid "Rename the stage user object" -msgstr "" - -msgid "Display information about a stage user." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" - -msgid "Segment name" -msgstr "" - -msgid "Arbitrary string identifying the segment" -msgstr "" - -msgid "Left node" -msgstr "" - -msgid "Left replication node - an IPA server" -msgstr "" - -# auto translated by TM merge from project: dnf, version: master, DocId: -# po/dnf -#, fuzzy -msgid "Right node" -msgstr "Práva" - -msgid "Right replication node - an IPA server" -msgstr "" - -msgid "Connectivity" -msgstr "" - -msgid "Direction of replication between left and right replication node" -msgstr "" - -msgid "Attributes to strip" -msgstr "" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" - -msgid "Attributes to replicate" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" - -msgid "Attributes for total update" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" - -msgid "Session timeout" -msgstr "" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" - -msgid "Replication agreement enabled" -msgstr "" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" - -msgid "Suffix name" -msgstr "" - -msgid "LDAP suffix to be managed" -msgstr "" - -msgid "Add a new segment." -msgstr "" - -msgid "Delete a segment." -msgstr "" - -msgid "Search for topology segments." -msgstr "" - -msgid "Modify a segment." -msgstr "" - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" - -msgid "Initialize left node" -msgstr "" - -msgid "Initialize right node" -msgstr "" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "" - -msgid "Display a segment." -msgstr "" - -msgid "Add a new topology suffix to be managed." -msgstr "" - -msgid "Delete a topology suffix." -msgstr "" - -msgid "Search for topology suffices." -msgstr "" - -msgid "Modify a topology suffix." -msgstr "" - -msgid "Show managed suffix." -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "Preserved user" -msgstr "" - -msgid "Add one or more certificates to the user entry" -msgstr "" - -msgid "Remove one or more certificates to the user entry" -msgstr "" - -msgid "Move deleted user into staged area" -msgstr "" - -msgid "Undelete a delete user account." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -#, fuzzy -msgid "Vault name" -msgstr "Název počítače" - -# auto translated by TM merge from project: anaconda, version: f22-branch, -# DocId: anaconda -#, fuzzy -msgid "Vault description" -msgstr "popis" - -msgid "Vault type" -msgstr "" - -msgid "Salt" -msgstr "" - -msgid "Vault salt" -msgstr "" - -msgid "Public key" -msgstr "" - -msgid "Vault public key" -msgstr "" - -msgid "Owner users" -msgstr "" - -msgid "Owner groups" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "Owner services" -msgstr "službu" - -msgid "Failed owners" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "Vault service" -msgstr "službu" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Shared vault" -msgstr "Sdílená" - -msgid "Vault user" -msgstr "" - -msgid "Transport Certificate" -msgstr "" - -msgid "Service name of the service vault" -msgstr "" - -msgid "Username of the user vault" -msgstr "" - -msgid "Add members to a vault." -msgstr "" - -msgid "Add owners to a vault." -msgstr "" - -msgid "owner user" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "owner group" -msgstr "skupinu" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "owner service" -msgstr "službu" - -msgid "Owners that could not be added" -msgstr "" - -msgid "Number of owners added" -msgstr "" - -msgid "Session key wrapped with transport certificate" -msgstr "" - -msgid "Vault data encrypted with session key" -msgstr "" - -msgid "Nonce" -msgstr "" - -msgid "Delete a vault." -msgstr "" - -msgid "Search for vaults." -msgstr "" - -msgid "List all service vaults" -msgstr "" - -msgid "List all user vaults" -msgstr "" - -msgid "Remove members from a vault." -msgstr "" - -msgid "Remove owners from a vault." -msgstr "" - -msgid "Owners that could not be removed" -msgstr "" - -msgid "Number of owners removed" -msgstr "" - -msgid "Display information about a vault." -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "Show vault configuration." -msgstr "Nastavení" - -msgid "Output file to store the transport certificate" -msgstr "" - -msgid "Add owners to a vault container." -msgstr "" - -msgid "Delete a vault container." -msgstr "" - -msgid "Remove owners from a vault container." -msgstr "" - -msgid "Display information about a vault container." -msgstr "" - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -#, fuzzy -msgid "Hostname (FQDN)" -msgstr "Název počítače" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Managed suffixes" -msgstr "" - -msgid "Check connection to remote IPA server." -msgstr "" - -msgid "Remote server name" -msgstr "" - -msgid "Remote IPA server hostname" -msgstr "" - -msgid "suffix" -msgstr "" - -msgid "Search for servers with these managed suffixes." -msgstr "" - -msgid "Search for servers without these managed suffixes." -msgstr "" - -msgid "Add a manager to the stage user entry" -msgstr "" - -msgid "Remove a manager to the stage user entry" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -msgid "Managed LDAP suffix DN" -msgstr "" - -msgid "Search for topology suffixes." -msgstr "" - -msgid "Add a manager to the user entry" -msgstr "" - -msgid "Remove a manager to the user entry" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Comma-separated list of attributes" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" - -msgid "DNS class" -msgstr "" - -msgid "Comma-separated list of raw A records" -msgstr "" - -msgid "Comma-separated list of raw AAAA records" -msgstr "" - -msgid "Comma-separated list of raw A6 records" -msgstr "" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "" - -msgid "Comma-separated list of raw APL records" -msgstr "" - -msgid "Comma-separated list of raw CERT records" -msgstr "" - -msgid "Comma-separated list of raw CNAME records" -msgstr "" - -msgid "Comma-separated list of raw DHCID records" -msgstr "" - -msgid "Comma-separated list of raw DLV records" -msgstr "" - -msgid "Comma-separated list of raw DNAME records" -msgstr "" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "" - -msgid "Comma-separated list of raw DS records" -msgstr "" - -msgid "Comma-separated list of raw HIP records" -msgstr "" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "" - -msgid "Comma-separated list of raw KEY records" -msgstr "" - -# auto translated by TM merge from project: ibus, version: head, DocId: ibus10 -#, fuzzy -msgid "KEY Flags" -msgstr "Vlajky" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "KEY Protocol" -msgstr "Protokol" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Protocol" -msgstr "Protokol" - -msgid "KEY Algorithm" -msgstr "" - -msgid "KEY Public Key" -msgstr "" - -msgid "Public Key" -msgstr "" - -msgid "Comma-separated list of raw KX records" -msgstr "" - -msgid "Comma-separated list of raw LOC records" -msgstr "" - -msgid "Comma-separated list of raw MX records" -msgstr "" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "" - -msgid "Comma-separated list of raw NS records" -msgstr "" - -msgid "Comma-separated list of raw NSEC records" -msgstr "" - -msgid "NSEC Next Domain Name" -msgstr "" - -msgid "Next Domain Name" -msgstr "" - -msgid "NSEC Type Map" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Type Map" -msgstr "Typ" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "" - -msgid "Comma-separated list of raw PTR records" -msgstr "" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "" - -msgid "RRSIG Type Covered" -msgstr "" - -msgid "Type Covered" -msgstr "" - -msgid "RRSIG Algorithm" -msgstr "" - -msgid "RRSIG Labels" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "Labels" -msgstr "Název" - -msgid "RRSIG Original TTL" -msgstr "" - -msgid "Original TTL" -msgstr "" - -msgid "RRSIG Signature Expiration" -msgstr "" - -msgid "Signature Expiration" -msgstr "" - -msgid "RRSIG Signature Inception" -msgstr "" - -msgid "Signature Inception" -msgstr "" - -msgid "RRSIG Key Tag" -msgstr "" - -msgid "RRSIG Signer's Name" -msgstr "" - -msgid "Signer's Name" -msgstr "" - -msgid "RRSIG Signature" -msgstr "" - -msgid "Signature" -msgstr "" - -msgid "Comma-separated list of raw RP records" -msgstr "" - -msgid "Comma-separated list of raw SIG records" -msgstr "" - -msgid "SIG Type Covered" -msgstr "" - -msgid "SIG Algorithm" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "SIG Labels" -msgstr "Název" - -msgid "SIG Original TTL" -msgstr "" - -msgid "SIG Signature Expiration" -msgstr "" - -msgid "SIG Signature Inception" -msgstr "" - -msgid "SIG Key Tag" -msgstr "" - -msgid "SIG Signer's Name" -msgstr "" - -msgid "SIG Signature" -msgstr "" - -msgid "Comma-separated list of raw SPF records" -msgstr "" - -msgid "Comma-separated list of raw SRV records" -msgstr "" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "" - -msgid "Comma-separated list of raw TA records" -msgstr "" - -msgid "Comma-separated list of raw TKEY records" -msgstr "" - -msgid "Comma-separated list of raw TSIG records" -msgstr "" - -msgid "Comma-separated list of raw TXT records" -msgstr "" - -msgid "SOA time to live" -msgstr "" - -msgid "SOA record time to live" -msgstr "" - -msgid "SOA class" -msgstr "" - -msgid "SOA record class" -msgstr "" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" - -msgid "Consume an entitlement." -msgstr "" - -msgid "Quantity" -msgstr "" - -msgid "Search for entitlement accounts." -msgstr "" - -msgid "Retrieve the entitlement certs." -msgstr "" - -msgid "Import an entitlement certificate." -msgstr "" - -# auto translated by TM merge from project: libvirt, version: master, DocId: -# libvirt -msgid "UUID" -msgstr "UUID:" - -msgid "Enrollment UUID" -msgstr "" - -msgid "Register to the entitlement system." -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -msgid "Username" -msgstr "Jméno uživatele" - -msgid "Enrollment UUID (not implemented)" -msgstr "" - -#, fuzzy -msgid "Registration password" -msgstr "Uživatelské heslo" - -msgid "Display current entitlements." -msgstr "" - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" - -msgid "comma-separated list of users to add" -msgstr "" - -msgid "comma-separated list of groups to add" -msgstr "" - -msgid "comma-separated list of users to remove" -msgstr "" - -msgid "comma-separated list of groups to remove" -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Source host category" -msgstr "" - -msgid "Source host category the rule applies to" -msgstr "" - -msgid "Source Hosts" -msgstr "" - -msgid "Source Host Groups" -msgstr "" - -msgid "comma-separated list of hosts to add" -msgstr "" - -msgid "comma-separated list of host groups to add" -msgstr "" - -msgid "comma-separated list of HBAC services to add" -msgstr "" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "" - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "" - -msgid "comma-separated list of hosts to remove" -msgstr "" - -msgid "comma-separated list of host groups to remove" -msgstr "" - -msgid "comma-separated list of HBAC services to remove" -msgstr "" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" - -msgid "Source host" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "comma-separated list of netgroups to add" -msgstr "" - -msgid "comma-separated list of netgroups to remove" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" - -msgid "Target members of a group" -msgstr "" - -msgid "User group to apply permissions to" -msgstr "" - -msgid "comma-separated list of privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI" -msgstr "" - -msgid "Permission type" -msgstr "" - -msgid "comma-separated list of privileges to remove" -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "comma-separated list of roles to add" -msgstr "" - -msgid "comma-separated list of permissions" -msgstr "" - -msgid "comma-separated list of roles to remove" -msgstr "" - -msgid "comma-separated list of privileges" -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "comma-separated list of sudo commands to add" -msgstr "" - -msgid "comma-separated list of sudo commands to remove" -msgstr "" - -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" - -msgid "comma-separated list of sudo command groups to add" -msgstr "" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "" - -msgid "Failed members" -msgstr "" - -msgid "Failed source hosts/hostgroups" -msgstr "" - -msgid "Failed hosts/hostgroups" -msgstr "" - -msgid "Failed users/groups" -msgstr "" - -msgid "Failed service/service groups" -msgstr "" - -msgid "Failed to remove" -msgstr "" - -msgid "Failed RunAs" -msgstr "" - -msgid "Failed RunAsGroup" -msgstr "" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource -#, fuzzy -msgid "Failed profiles" -msgstr "Profily" - -msgid "Failed CAs" -msgstr "" - -msgid "Failed member manager" -msgstr "" - -msgid "Failed managedby" -msgstr "" - -msgid "Failed allowed to retrieve keytab" -msgstr "" - -msgid "Failed allowed to create keytab" -msgstr "" - -msgid "Failed targets" -msgstr "" +msgid " ipa --help" +msgstr " ipa --help" #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" @@ -12097,7778 +25,53 @@ msgstr "" "Verze %(cver)s klienta není kompatibilní s verzí %(sver)s serveru " "'%(server)s'" -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "neznámý kód %(code)d chyby ze serveru %(server)s: %(error)s" - -msgid "an internal error has occurred" -msgstr "Vyskytla se vnitřní chyba" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "na serveru '%(server)s' se vyskytla interní chyba" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "neznámý příkaz '%(name)s'" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "chyba na serveru '%(server)s': %(error)s" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "nelze se připojit k '%(uri)s': %(error)s" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Neplatný požadavek JSON-RPC: %(error)s" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "chyba marshallingu dat pro přenos XML-RPC: %(error)s" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "Chybějící nebo neplatný HTTP Referer, %(referer)s" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Chyba Kerberos: %(major)s/%(minor)s" - -msgid "did not receive Kerberos credentials" -msgstr "neobdrženy ověřovací údaje Kerberos" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "Služba '%(service)s' nenalezena v databázi Kerberosu" - -msgid "No credentials cache found" -msgstr "Nenalezena mezipamět ověřovacích údajů" - -msgid "Ticket expired" -msgstr "Platnost lístku skončila" - -msgid "Credentials cache permissions incorrect" -msgstr "" - -#, fuzzy -msgid "Bad format in credentials cache" -msgstr "Nenalezena mezipamět ověřovacích údajů" - -msgid "Cannot resolve KDC for requested realm" -msgstr "" - -msgid "Session error" -msgstr "" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#, python-format -msgid "'%(name)s' is required" -msgstr "" - -#, fuzzy, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "Neplatný požadavek JSON-RPC: %(error)s" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -msgid "Passwords do not match" -msgstr "Hesla nejsou stejná." - -#, fuzzy -msgid "Command not implemented" -msgstr "Název příkazu" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - #, python-format msgid "%(reason)s" msgstr "%(reason)s" -msgid "This entry already exists" -msgstr "" - -msgid "You must enroll a host in order to create a host service" -msgstr "" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" - -msgid "This command requires root access" -msgstr "" - -msgid "This is already a posix group" -msgstr "" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -msgid "This entry is already enabled" -msgstr "" - -msgid "This entry is already disabled" -msgstr "" - -msgid "This entry cannot be enabled or disabled" -msgstr "" - -msgid "This entry is not a member" -msgstr "" - -msgid "A group may not be a member of itself" -msgstr "" - -msgid "This entry is already a member" -msgstr "" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "" - -msgid "A group may not be added as a member of itself" -msgstr "" - -msgid "The default users group cannot be removed" -msgstr "" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -msgid "This group already allows external members" -msgstr "" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "change collided with another change" -msgstr "" - -msgid "no modifications to be performed" -msgstr "" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "" - -msgid "limits exceeded for this query" -msgstr "" - -#, python-format -msgid "%(info)s" -msgstr "" - -msgid "modifying primary key is not allowed" -msgstr "" - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -# auto translated by TM merge from project: Pulseaudio, version: 6.0, DocId: -# pulseaudio.pot -#, fuzzy -msgid "LDAP timeout" -msgstr "Časový limit" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "" - -msgid "Already registered" -msgstr "" - -msgid "Not registered yet" -msgstr "" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, fuzzy, python-format -msgid "%(exception)s" -msgstr "%(reason)s" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, fuzzy, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "chyba na serveru '%(server)s': %(error)s" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -#, python-format -msgid "%(count)d variables" -msgstr "" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "A dictionary representing an LDAP entry" -msgstr "" - -msgid "A list of LDAP entries" -msgstr "" - -msgid "All commands should at least have a result" -msgstr "" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "Vložte znovu své %(label)s, aby se ověřila jeho správnost." - -msgid "Passwords do not match!" -msgstr "Hesla se neshodují!" - -msgid "No matching entries found" -msgstr "Nenalezeny žádné shodné položky" - -msgid "Topic or Command" -msgstr "Téma nebo příkaz" - -msgid "The topic or command name." -msgstr "Název tématu nebo příkazu." - -msgid "Topic commands:" -msgstr "Příkazy tématu:" - -msgid "To get command help, use:" -msgstr "Chceteli získat nápovědu k příkazu, použijte:" - -msgid " ipa --help" -msgstr " ipa --help" - -msgid "Command name" -msgstr "Název příkazu" - -msgid "Positional arguments" -msgstr "Poziční argumenty" - -#, python-format -msgid "Same as --%s" -msgstr "Stejné jako --%s" - -msgid "Deprecated options" -msgstr "Zastaralé volby" - -msgid "No file to read" -msgstr "Žádný soubor k přečtení" - -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - -#, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - -msgid "Filename is empty" -msgstr "" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" -msgstr "" - -#, fuzzy, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "chyba na serveru '%(server)s': %(error)s" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -msgid "invalid domain name" -msgstr "" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "incorrect type" -msgstr "nesprávný typ" - -msgid "Only one value is allowed" -msgstr "" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "" - -msgid "must be an integer" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -msgid "must be a decimal number" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -msgid "must be binary data" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -msgid "must be a certificate" -msgstr "" - -msgid "must be a certificate signing request" -msgstr "" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "" - -msgid "Leading and trailing spaces are not allowed" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "" - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "" - -#, python-format -msgid "must be '%(value)s'" -msgstr "" - -#, python-format -msgid "must be one of %(values)s" -msgstr "" - -msgid "must be datetime value" -msgstr "" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -msgid "must be DNS name" -msgstr "" - -msgid "must be absolute" -msgstr "" - -msgid "must be relative" -msgstr "" - -msgid "must be dictionary" -msgstr "" - -msgid "must be Kerberos principal" -msgstr "" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -msgid "Service principal is required" -msgstr "" - -msgid "must be at least 0" -msgstr "" - -msgid "invalid valid hex" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "invalid serial number 0" -msgstr "Sériové číslo" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "" - -#, python-format -msgid "objectclass %s not found" -msgstr "" - -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: master, DocId: -# main -msgid "Unknown" -msgstr "Neznámý" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "Failed to authenticate to CA REST API" -msgstr "" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "" - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "automount location" -msgstr "Autentizace" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "automount locations" -msgstr "Autentizace" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Automount Locations" -msgstr "Autentizace" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Automount Location" -msgstr "Autentizace" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "Profile configuration" -msgstr "Nastavení" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -#, fuzzy -msgid "Delegations" -msgstr "Zastaralé volby" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -#, fuzzy -msgid "Delegation" -msgstr "Smazat" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "" -"\n" -"DNS server configuration\n" -msgstr "Nastavení" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org -#, fuzzy -msgid "DNS server" -msgstr "Server" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -#, fuzzy -msgid "DNS servers" -msgstr "Servery" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -#, fuzzy -msgid "DNS Servers" -msgstr "Servery" - -# auto translated by TM merge from project: Fedora Websites, version: -# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org -#, fuzzy -msgid "DNS Server" -msgstr "Server" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "groups" -msgstr "skupinu" - -# auto translated by TM merge from project: dnf, version: master, DocId: -# po/dnf -#, fuzzy -msgid "User Group" -msgstr "Skupina" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "HBAC services" -msgstr "službu" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -#, fuzzy -msgid "HBAC Services" -msgstr "Služby" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "HBAC Service" -msgstr "Služba" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "host groups" -msgstr "skupinu" - -# auto translated by TM merge from project: dnf, version: master, DocId: -# po/dnf -#, fuzzy -msgid "Host Group" -msgstr "Skupina" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "hostgroup" -msgstr "skupinu" - -msgid "privileged hostgroup" -msgstr "" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "Auto private groups" -msgstr "skupinu" - -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "" -"\n" -"IPA locations\n" -msgstr "Umístění" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "location" -msgstr "Umístění" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "locations" -msgstr "Umístění" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "IPA Locations" -msgstr "Umístění" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "IPA Location" -msgstr "Umístění" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Location name" -msgstr "Umístění" - -msgid "IPA location name" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f22-branch, -# DocId: anaconda -#, fuzzy -msgid "IPA Location description" -msgstr "popis" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -msgid "Servers" -msgstr "Servery" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -msgid "Delete an IPA location." -msgstr "" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org -#, fuzzy -msgid "IPA Server" -msgstr "Server" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "netgroups" -msgstr "skupinu" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "Netgroups" -msgstr "skupinu" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "Netgroup" -msgstr "skupinu" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "One time password commands" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "OTP configuration options" -msgstr "Nastavení" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "OTP Configuration" -msgstr "Nastavení" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -# auto translated by TM merge from project: dnf, version: master, DocId: -# po/dnf -#, fuzzy -msgid "URI" -msgstr "URL" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" -msgstr "" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -#, fuzzy -msgid "RADIUS Servers" -msgstr "Servery" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "RADIUS Server" -msgstr "RADIUS" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "roles" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Role" -msgstr "Role" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Self Service Permissions" -msgstr "Nastavení služeb" - -msgid "Self Service Permission" -msgstr "" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "" -"\n" -"IPA server roles\n" -msgstr "Serverové role" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "server role" -msgstr "Serverové role" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "server roles" -msgstr "Serverové role" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "IPA Server Roles" -msgstr "Serverové role" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "IPA Server Role" -msgstr "Serverové role" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "IPA role name" -msgstr "" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy, python-format -msgid "member %s" -msgstr "Členové" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "service delegation rules" -msgstr "Nastavení služeb" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Service delegation rules" -msgstr "Nastavení služeb" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Service delegation rule" -msgstr "Nastavení služeb" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "service delegation target" -msgstr "" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "service delegation targets" -msgstr "Nastavení služeb" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Service delegation targets" -msgstr "Nastavení služeb" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Service delegation target" -msgstr "Nastavení služeb" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f22-branch, -# DocId: anaconda -#, fuzzy -msgid "Subordinate id description" -msgstr "popis" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -msgid "SubUID range size" -msgstr "" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -msgid "SubGID range size" -msgstr "" - -msgid "Subordinate group ID count" -msgstr "" - -#, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "" - -#, python-format -msgid "'%(dn)s is not a valid user" -msgstr "" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -msgid "Add a new subordinate id." -msgstr "" - -#, python-format -msgid "Added subordinate id \"%(value)s\"" -msgstr "" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -#, fuzzy -msgid "Delete a subordinate id." -msgstr "Smazat" - -#, python-format -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "" - -msgid "Modify a subordinate id." -msgstr "" - -#, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Search for subordinate id." -msgstr "Téma nebo příkaz" - -#, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "Display information about a subordinate id." -msgstr "" - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "sudo command" -msgstr "příkaz" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "sudo commands" -msgstr "příkazy" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Sudo Commands" -msgstr "příkazy" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -#, fuzzy -msgid "" -"\n" -"IPA servers\n" -msgstr "Servery" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org -#, fuzzy -msgid "server" -msgstr "Server" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -#, fuzzy -msgid "servers" -msgstr "Servery" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -#, fuzzy -msgid "IPA Servers" -msgstr "Servery" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Server location" -msgstr "Umístění" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Service weight" -msgstr "Nastavení služeb" - -msgid "Weight for server services" -msgstr "" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Service relative weight" -msgstr "Nastavení služeb" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "Enabled server roles" -msgstr "Serverové role" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, fuzzy, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "chyba na serveru '%(server)s': %(error)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, fuzzy, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "chyba na serveru '%(server)s': %(error)s" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "State" -msgstr "Stav" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -#, fuzzy -msgid "Server state" -msgstr "Servery" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "A list of ACI values" -msgstr "" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -#, fuzzy -msgid "entry" -msgstr "Položka" - -msgid "entries" -msgstr "" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -msgid "Entry" -msgstr "Položka" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - # auto translated by TM merge from project: libguestfs, version: master, # DocId: po/libguestfs #, python-format msgid "%s" msgstr "%s" -#, python-format -msgid "%s to add" -msgstr "" +msgid "A string searched in all relevant object attributes" +msgstr "Řetězec vyhledávaný ve všech odpovídajících atributech objektu" -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "" -"\n" -"Permissions\n" -msgstr "Verze" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -msgid "" -"\n" -"Managed permissions\n" -msgstr "" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "must be enclosed in parentheses" -msgstr "" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, fuzzy, python-format -msgid "Deprecated; use %s" -msgstr "Zastaralé volby" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, python-format -msgid "Entry %s not found" -msgstr "" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, python-format -msgid "Entry %s does not exist" -msgstr "" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Name" -msgstr "Název" - -# auto translated by TM merge from project: Fedora Websites, version: -# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org -msgid "Documentation" -msgstr "Dokumentace" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -msgid "Help topic" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Version" -msgstr "Verze" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "Název příkazu" - -msgid "Display information about a command." -msgstr "" - -#, fuzzy -msgid "Search for commands." -msgstr "Téma nebo příkaz" - -msgid "Return command defaults" -msgstr "" - -#, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "Název příkazu" - -#, fuzzy -msgid "Confirm (password)" -msgstr "Uživatelské heslo" - -# auto translated by TM merge from project: ibus-input-pad, version: head, -# DocId: ibus-input-pad -msgid "Default" -msgstr "Výchozí" - -# auto translated by TM merge from project: ibus-input-pad, version: head, -# DocId: ibus-input-pad -#, fuzzy -msgid "Default from" -msgstr "Výchozí" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -msgid "Label" -msgstr "Název" - -msgid "Convert on server" -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "Option group" -msgstr "Přepínače" - -msgid "Sensitive" -msgstr "" - -#, fuzzy -msgid "Positional argument" -msgstr "Poziční argumenty" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "Trust direction" -msgstr "" - -msgid "Trust type" -msgstr "" - -msgid "Trust status" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "trust configuration" -msgstr "Nastavení" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "Global Trust Configuration" -msgstr "Nastavení" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -# auto translated by TM merge from project: Cockpit, version: master, DocId: -# cockpit -#, fuzzy -msgid "Domain enabled" -msgstr "Zakázáno" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Vault Container" -msgstr "Pokračovat" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -# auto translated by TM merge from project: ibus-input-pad, version: head, -# DocId: ibus-input-pad -#, fuzzy -msgid "vault" -msgstr "Výchozí" - -# auto translated by TM merge from project: ibus-input-pad, version: head, -# DocId: ibus-input-pad -#, fuzzy -msgid "vaults" -msgstr "Výchozí" - -# auto translated by TM merge from project: ibus-input-pad, version: head, -# DocId: ibus-input-pad -#, fuzzy -msgid "Vaults" -msgstr "Výchozí" - -# auto translated by TM merge from project: ibus-input-pad, version: head, -# DocId: ibus-input-pad -#, fuzzy -msgid "Vault" -msgstr "Výchozí" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "Vault configuration" -msgstr "Nastavení" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -msgid "Key wrapping algorithm" -msgstr "" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." -msgstr "" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "Principal alias" -msgstr "" - -#, fuzzy -msgid "User password expiration" -msgstr "Uživatelské heslo" - -msgid "SSH public key fingerprint" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "External IdP configuration" -msgstr "Nastavení" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "Certificate mapping data" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -msgid "Issuer" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -# auto translated by TM merge from project: libreport, version: master, DocId: -# libreport -msgid "Subject" -msgstr "Předmět" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -msgid "users cannot be added when user category='all'" -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "" - -#, python-format -msgid "%i services added." -msgstr "" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "User logins" -msgstr "Uživatelé" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "must be at least 10" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "configuration options" -msgstr "Nastavení" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -msgid "Configuration" -msgstr "Nastavení" - -msgid "Maximum hostname length" -msgstr "" - -msgid "Enable adding subids to new users" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Deployment_Guide -#, fuzzy -msgid "IPA DNS servers" -msgstr "Servery" - -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "Setup SID configuration" -msgstr "Nastavení" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "Add SIDs" -msgstr "uživatel" - -msgid "Add SIDs for existing users and groups" -msgstr "" - -msgid "NetBIOS name of the IPA domain" -msgstr "" - -msgid "Empty domain is not allowed" -msgstr "" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "not allowed to enable SID generation" -msgstr "" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -#, fuzzy -msgid "Failed to call DBus" -msgstr "Žádný soubor k přečtení" - -msgid "Configuration of SID failed. See details in the error log" -msgstr "" - -msgid "The group doesn't exist" -msgstr "" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, fuzzy, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "chyba na serveru '%(server)s': %(error)s" - -msgid "SELinux user map default user not in order list" -msgstr "" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy, python-format -msgid "%s Record" -msgstr "Typ záznamu" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Priority (order)" -msgstr "Priorita" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -msgid "Only one zone type is allowed per zone name" -msgstr "" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -msgid "Default time to live" -msgstr "" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "" - -msgid "is required" -msgstr "" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "DNS configuration options" -msgstr "Nastavení" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "DNS Global Configuration" -msgstr "Nastavení" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -msgid "Result of the command" -msgstr "" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -#, fuzzy -msgid "HBAC Rules" -msgstr "Pravidla" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -msgid "Host" -msgstr "Počítač" - -msgid "Base-64 encoded host certificate" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -msgid "Serial Number" -msgstr "Sériové číslo" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "Serial Number (hex)" -msgstr "Sériové číslo" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "Fingerprint (SHA1)" -msgstr "Otisk" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "Fingerprint (SHA256)" -msgstr "Otisk" - -msgid "Revocation reason" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Authentication Indicators" -msgstr "Autentizace" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" - -msgid "Invalid URI: not an https scheme" -msgstr "" - -msgid "Invalid URI: missing netloc" -msgstr "" - -msgid "Identity Provider server" -msgstr "" - -msgid "Identity Provider servers" -msgstr "" - -msgid "Identity Provider server name" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "Authorization URI" -msgstr "Nastavení" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -msgid "Token URI" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -#| msgid "Mount point" -msgid "Token endpoint" -msgstr "Místo připojení" - -# auto translated by TM merge from project: dnf, version: master, DocId: dnf -#, fuzzy -msgid "User info URI" -msgstr "Uživatelské jméno" - -msgid "User information endpoint" -msgstr "" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -msgid "Client identifier" -msgstr "" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -msgid "Add a new Identity Provider server." -msgstr "" - -#, python-format -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -msgid "Base URL" -msgstr "" - -msgid "Base URL for IdP provider templates" -msgstr "" - -# auto translated by TM merge from project: GSS NTLMSSP, version: master, -# DocId: gssntlmssp -#, fuzzy -#| msgid "Unknown Error" -msgid "unknown provider" -msgstr "Neznámá chyba" - -msgid "value is missing" -msgstr "" - -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "" - -msgid "Delete an Identity Provider server." -msgstr "" - -#, python-format -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "Modify an Identity Provider server." -msgstr "" - -#, python-format -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "Search for Identity Provider servers." -msgstr "" - -#, python-format -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "Display information about an Identity Provider server." -msgstr "" - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Apply" -msgstr "Použít" - -msgid "Rebuild auto membership" -msgstr "" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "Actions" -msgstr "Přepínače" +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource +msgid "Account" +msgstr "Účet" # auto translated by TM merge from project: selinux (policycoreutils), # version: master, DocId: policycoreutils msgid "Add" msgstr "Přidat" -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" +# auto translated by TM merge from project: Fedora Elections Guide, version: +# master, DocId: Casting +msgid "Any Group" +msgstr "Jakákoli skupina" -msgid "Direct Membership" -msgstr "" +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Apply" +msgstr "Použít" -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -msgid "No entries." -msgstr "" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -msgid "Remove" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -msgid "Show Results" -msgstr "" +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +msgid "Audit" +msgstr "Auditovat" # auto translated by TM merge from project: anaconda, version: f25, DocId: # main -#, fuzzy -msgid "Authentication indicators" +msgid "Authentication" msgstr "Autentizace" -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Authentication indicator" -msgstr "Autentizace" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -msgid "RADIUS" -msgstr "RADIUS" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "External Identity Provider" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "" - -msgid "Activate" -msgstr "" - -msgid "Add and Add Another" -msgstr "" - -msgid "Add and Close" -msgstr "" - -msgid "Add and Edit" -msgstr "" - -msgid "Add Many" -msgstr "" +# auto translated by TM merge from project: libvirt, version: master, DocId: +# libvirt +msgid "Available" +msgstr "Dostupný" # auto translated by TM merge from project: authconfig, version: master, # DocId: po/authconfig @@ -19880,32 +83,82 @@ msgstr "Zpět" msgid "Cancel" msgstr "Zrušit" +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "City" +msgstr "Město" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Class" +msgstr "Třída" + # auto translated by TM merge from project: ibus-libpinyin, version: master, # DocId: ibus-libpinyin msgid "Clear" msgstr "Vymazat" -msgid "Clear all fields on the page." -msgstr "" - # auto translated by TM merge from project: SETroubleShoot, version: stable, # DocId: framework/po/setroubleshoot msgid "Close" msgstr "Zavřít" +msgid "Command name" +msgstr "Název příkazu" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +msgid "Configuration" +msgstr "Nastavení" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "Continue" +msgstr "Pokračovat" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "DNS" +msgstr "DNS" + +# auto translated by TM merge from project: ibus-input-pad, version: head, +# DocId: ibus-input-pad +msgid "Default" +msgstr "Výchozí" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +msgid "Delete" +msgstr "Smazat" + +msgid "Deprecated options" +msgstr "Zastaralé volby" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Description" +msgstr "Popis" + # auto translated by TM merge from project: selinux (policycoreutils), # version: master, DocId: policycoreutils msgid "Disable" msgstr "Zakázat" +# auto translated by TM merge from project: Cockpit, version: master, DocId: +# cockpit +msgid "Disabled" +msgstr "Zakázáno" + +# auto translated by TM merge from project: Fedora Websites, version: +# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org +msgid "Documentation" +msgstr "Dokumentace" + # auto translated by TM merge from project: Fedora Websites, version: # alt.fedoraproject.org, DocId: po/alt.fedoraproject.org msgid "Download" msgstr "Stáhnout" -msgid "Download certificate as PEM formatted file." -msgstr "" - # auto translated by TM merge from project: ibus-libpinyin, version: master, # DocId: ibus-libpinyin msgid "Edit" @@ -19916,66 +169,293 @@ msgstr "Upravit" msgid "Enable" msgstr "Povolit" +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Enabled" +msgstr "Povoleno" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "Vložte znovu své %(label)s, aby se ověřila jeho správnost." + +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +msgid "Entry" +msgstr "Položka" + +# auto translated by TM merge from project: python-simpleline, version: +# master, DocId: python-simpleline +msgid "Error" +msgstr "Chyba" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +msgid "Expression" +msgstr "Výraz" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Filter" +msgstr "Filtr" + # auto translated by TM merge from project: system-config-printer, version: # master, DocId: system-config-printer msgid "Find" msgstr "Hledat" -# auto translated by TM merge from project: docbook-locales, version: master, -# DocId: locale -#, fuzzy -msgid "Get" -msgstr "Sada" +# auto translated by TM merge from project: Fedora Websites, version: +# getfedora.org, DocId: po/getfedora +msgid "Fingerprint" +msgstr "Otisk" + +# auto translated by TM merge from project: Fedora Websites, version: +# fedoraproject.org, DocId: po/fedora-web +msgid "First" +msgstr "Prvenství " + +# auto translated by TM merge from project: ibus, version: head, DocId: ibus10 +msgid "Flags" +msgstr "Vlajky" + +# auto translated by TM merge from project: asknot-ng, version: 0.1, DocId: +# locale/asknot-ng +msgid "General" +msgstr "Obecné" + +# auto translated by TM merge from project: dnf, version: master, DocId: +# po/dnf +msgid "Group" +msgstr "Skupina" + +# auto translated by TM merge from project: libreport, version: rhel6, DocId: +# libreport +msgid "Groups" +msgstr "Skupiny" # auto translated by TM merge from project: abrt, version: rhel7, DocId: abrt msgid "Hide" msgstr "Skrýt" -msgid "Issue" -msgstr "" +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +msgid "Host" +msgstr "Počítač" -msgid "Match" -msgstr "" +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "Host Name" +msgstr "Název počítače" -msgid "Match users according to certificate." -msgstr "" +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +msgid "Host name" +msgstr "Název počítače" -msgid "Migrate" -msgstr "" +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "IP Address" +msgstr "IP adresa" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Neplatný požadavek JSON-RPC: %(error)s" + +# auto translated by TM merge from project: authconfig, version: master, +# DocId: po/authconfig +msgid "Invalid LDAP URI." +msgstr "Neplatné URI pro LDAP." + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Chyba Kerberos: %(major)s/%(minor)s" + +# auto translated by TM merge from project: system-config-audit, version: +# master, DocId: system-config-audit +msgid "Key" +msgstr "Klíč" + +# auto translated by TM merge from project: authconfig, version: master, +# DocId: po/authconfig +msgid "LDAP password" +msgstr "LDAP heslo" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +msgid "Label" +msgstr "Název" + +# auto translated by TM merge from project: abrt, version: master, DocId: abrt +msgid "Last" +msgstr "Poslední" + +# auto translated by TM merge from project: docbook-locales, version: master, +# DocId: locale +msgid "Level" +msgstr "Úroveň" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +msgid "Location" +msgstr "Umístění" + +# auto translated by TM merge from project: libvirt, version: master, DocId: +# libvirt +msgid "MAC address" +msgstr "MAC adresa" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource +msgid "Mailing Address" +msgstr "Poštovní adresa" + +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +msgid "Members" +msgstr "Členové" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "Chybějící nebo neplatný HTTP Referer, %(referer)s" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "Model" +msgstr "Model" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "Mount point" +msgstr "Místo připojení" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Name" +msgstr "Název" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +msgid "Next" +msgstr "Další" + +msgid "No credentials cache found" +msgstr "Nenalezena mezipamět ověřovacích údajů" + +msgid "No file to read" +msgstr "Žádný soubor k přečtení" + +msgid "No matching entries found" +msgstr "Nenalezeny žádné shodné položky" + +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Network_Interfaces +msgid "Note" +msgstr "Poznámka" # auto translated by TM merge from project: Fedora Websites, version: # alt.fedoraproject.org, DocId: po/alt.fedoraproject.org msgid "OK" msgstr "Budiž" +msgid "Operating system" +msgstr "Operační systém" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +msgid "Options" +msgstr "Přepínače" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "Order" +msgstr "Další" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +#, c-format +msgid "Out of memory!\n" +msgstr "Nedostatek paměti\n" + +# auto translated by TM merge from project: docbook-locales, version: master, +# DocId: locale +msgid "Page" +msgstr "Strana" + +# auto translated by TM merge from project: python-simpleline, version: +# master, DocId: python-simpleline +msgid "Password" +msgstr "Heslo" + +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +msgid "Passwords do not match" +msgstr "Hesla nejsou stejná." + +msgid "Passwords do not match!" +msgstr "Hesla se neshodují!" + +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +msgid "Platform" +msgstr "Platforma" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Port" +msgstr "Port" + +msgid "Positional arguments" +msgstr "Poziční argumenty" + +# auto translated by TM merge from project: docbook-locales, version: master, +# DocId: locale +msgid "Prev" +msgstr "Předchozí" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Priority" +msgstr "Priorita" + +# auto translated by TM merge from project: OSCAP Anaconda Addon, version: +# master, DocId: oscap-anaconda-addon +msgid "Profile" +msgstr "Profil" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource +msgid "Profiles" +msgstr "Profily" + +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Protocol" +msgstr "Protokol" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/database/StringResource +msgid "Provisioning" +msgstr "Zajištění" + +# auto translated by TM merge from project: system-config-firewall, version: +# master, DocId: po/system-config-firewall +msgid "RADIUS" +msgstr "RADIUS" + +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +msgid "Record Type" +msgstr "Typ záznamu" + # auto translated by TM merge from project: virt-viewer, version: master, # DocId: virt-viewer msgid "Refresh" msgstr "Obnovit" -msgid "Reload current settings from the server." -msgstr "" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -msgid "Delete" -msgstr "Smazat" - -msgid "Remove hold" -msgstr "" - # auto translated by TM merge from project: system-config-printer, version: # master, DocId: system-config-printer msgid "Reset" msgstr "Reset" -#, fuzzy -msgid "Reset Password" -msgstr "Uživatelské heslo" - -msgid "Reset Password and Log in" -msgstr "" - # auto translated by TM merge from project: Fedora Media Writer, version: # master, DocId: mediawriter msgid "Restore" @@ -19991,4970 +471,256 @@ msgstr "Opakovat" msgid "Revert" msgstr "Vrátit" -msgid "Revoke" -msgstr "" - -# auto translated by TM merge from project: fedora-software, version: master, -# DocId: template/django -msgid "Save" -msgstr "Uložit" - -# auto translated by TM merge from project: docbook-locales, version: master, -# DocId: locale -msgid "Set" -msgstr "Sada" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -msgid "Show" -msgstr "Ukázat" - -# auto translated by TM merge from project: Fedora Websites, version: -# labs.fedoraproject.org, DocId: po/labs.fedoraproject.org -msgid "Stage" -msgstr "Stage" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Update" -msgstr "Aktualizovat" - -msgid "View" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "Customization" -msgstr "Nastavení" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "" - -msgid "Expand All" -msgstr "" - -# auto translated by TM merge from project: asknot-ng, version: 0.1, DocId: -# locale/asknot-ng -msgid "General" -msgstr "Obecné" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Identity Settings" -msgstr "Nastavení služeb" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Record Settings" -msgstr "Nastavení služeb" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -msgid "Back to Top" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -msgid "Add custom value" -msgstr "" - -# auto translated by TM merge from project: libvirt, version: master, DocId: -# libvirt -msgid "Available" -msgstr "Dostupný" - -msgid "Some operations failed." -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "Operations Error" -msgstr "Přepínače" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "Confirmation" -msgstr "Nastavení" - -msgid "Custom value" -msgstr "" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -msgid "Unsaved Changes" -msgstr "" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "" - -msgid "Hide details" -msgstr "" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f22-branch, -# DocId: anaconda -#, fuzzy -msgid "Redirection" -msgstr "popis" - -msgid "Select entries to be removed." -msgstr "" - -msgid "Result" -msgstr "" - -msgid "Show details" -msgstr "" - -# auto translated by TM merge from project: Linux PAM, version: master, DocId: -# po/Linux-PAM -msgid "Success" -msgstr "Úspěch" - -msgid "Validation error" -msgstr "" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, fuzzy, python-brace-format -msgid "An error has occurred (${error})" -msgstr "Vyskytla se vnitřní chyba" - -# auto translated by TM merge from project: python-simpleline, version: -# master, DocId: python-simpleline -#, fuzzy -msgid "HTTP Error" -msgstr "Chyba" - -msgid "Internal Error" -msgstr "" - -# auto translated by TM merge from project: python-simpleline, version: -# master, DocId: python-simpleline -#, fuzzy -msgid "IPA Error" -msgstr "Chyba" - -msgid "No response" -msgstr "" - -# auto translated by TM merge from project: GSS NTLMSSP, version: master, -# DocId: gssntlmssp -msgid "Unknown Error" -msgstr "Neznámá chyba" - # auto translated by TM merge from project: dnf, version: master, DocId: # po/dnf -msgid "URL" -msgstr "URL" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -# auto translated by TM merge from project: fedora-software, version: master, -# DocId: template/django -msgid "Settings" -msgstr "Nastavení" - -# auto translated by TM merge from project: libreport, version: rhel6, DocId: -# libreport -msgid "Search" -msgstr "Hledat" - -msgid "False" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Allowed to create keytab" -msgstr "" - -msgid "Allowed to retrieve keytab" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Add Kerberos Principal Alias" -msgstr "" - -msgid "New kerberos principal alias" -msgstr "" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Authenticating" -msgstr "Autentizace" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -msgid "Kerberos Principal you entered is expired" -msgstr "" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -msgid "Log In Using Certificate" -msgstr "" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "" - -msgid "Synchronizing" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -#, fuzzy -msgid "number of passwords" -msgstr "Uživatelské heslo" - -# auto translated by TM merge from project: virt-manager, version: master, -# DocId: virt-manager -msgid "seconds" -msgstr "sekund" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "Migrating" -msgstr "Nastavení" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -msgid "Password migration was not successful" -msgstr "" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -msgid "Password migration was successful" -msgstr "" - -msgid "Attribute" -msgstr "" - -msgid "Add delegation" -msgstr "" - -msgid "Remove delegations" -msgstr "" - -msgid "Add permission" -msgstr "" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -msgid "Remove permissions" -msgstr "" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -msgid "Remove privileges" -msgstr "" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -# auto translated by TM merge from project: fedora-software, version: master, -# DocId: template/django -#, fuzzy -msgid "Role Settings" -msgstr "Nastavení" - -msgid "Add role" -msgstr "" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "Remove roles" -msgstr "Serverové role" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -msgid "Add self service permission" -msgstr "" - -msgid "Remove self service permissions" -msgstr "" - -msgid "Add rule" -msgstr "" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to change default group?" -msgstr "" - -msgid "Default host group" -msgstr "" - -msgid "Default user group" -msgstr "" - -msgid "Exclusive" -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -msgid "Expression" -msgstr "Výraz" - -msgid "Host group rule" -msgstr "" - -msgid "Host group rules" -msgstr "" - -msgid "Inclusive" -msgstr "" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -msgid "User group rule" -msgstr "" - -msgid "User group rules" -msgstr "" - -msgid "Add automount key" -msgstr "" - -msgid "Remove automount keys" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Add automount location" -msgstr "Autentizace" - -msgid "Automount Location Settings" -msgstr "" - -msgid "Remove automount locations" -msgstr "" - -msgid "Add automount map" -msgstr "" +msgid "Rights" +msgstr "Práva" # auto translated by TM merge from project: selinux (policycoreutils), # version: master, DocId: policycoreutils -#, fuzzy -msgid "Map Type" -msgstr "Typ" - -msgid "Direct" -msgstr "" - -msgid "Indirect" -msgstr "" - -msgid "Remove automount maps" -msgstr "" - -msgid "Add certificate authority" -msgstr "" - -msgid "Remove certificate authorities" -msgstr "" - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -msgid "All" -msgstr "" - -msgid "Any CA" -msgstr "" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -#, fuzzy -msgid "Any Host" -msgstr "Počítač" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Any Service" -msgstr "Služba" - -# auto translated by TM merge from project: OSCAP Anaconda Addon, version: -# master, DocId: oscap-anaconda-addon -#, fuzzy -msgid "Any Profile" -msgstr "Profil" - -msgid "Anyone" -msgstr "" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -#, fuzzy -msgid "Rule status" -msgstr "Pravidla" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -msgid "Remove CA ACLs" -msgstr "" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "Specified CAs" -msgstr "Nespecifikováno" - -msgid "Specified Hosts and Groups" -msgstr "" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource -#, fuzzy -msgid "Specified Profiles" -msgstr "Profily" - -msgid "Specified Services and Groups" -msgstr "" - -msgid "Specified Users and Groups" -msgstr "" - -msgid "Permitted to have certificates issued" -msgstr "" - -msgid "Remove certificate profiles" -msgstr "" - -msgid "AA Compromise" -msgstr "" - -msgid "Add principal" -msgstr "" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" - -msgid "Certificates" -msgstr "" - -msgid "Certificate Hold" -msgstr "" - -msgid "Cessation of Operation" -msgstr "" - -#, fuzzy -msgid "Common Name" -msgstr "Název příkazu" - -msgid "the certificate with serial number " -msgstr "" - -msgid "Expires On" -msgstr "" - -msgid "Issued on from" -msgstr "" - -msgid "Issued on to" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "Maximum serial number" -msgstr "Sériové číslo" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "Minimum serial number" -msgstr "Sériové číslo" - -msgid "Revoked on from" -msgstr "" - -msgid "Revoked on to" -msgstr "" - -msgid "Valid not after from" -msgstr "" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "Fingerprints" -msgstr "Otisk" - -msgid "Get Certificate" -msgstr "" - -msgid "Certificate Hold Removed" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -msgid "Issue new certificate" -msgstr "" - -msgid "Issued By" -msgstr "" - -msgid "Issued On" -msgstr "" - -msgid "Issued To" -msgstr "" - -msgid "Key Compromise" -msgstr "" - -msgid "No Valid Certificate" -msgstr "" - -msgid "New Certificate" -msgstr "" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -# auto translated by TM merge from project: System Administrator's Guide, -# version: master, DocId: Network_Interfaces -msgid "Note" -msgstr "Poznámka" - -msgid "Organizational Unit" -msgstr "" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -msgid "Privilege Withdrawn" -msgstr "" - -msgid "Reason for Revocation" -msgstr "" - -msgid "Remove certificate hold" -msgstr "" - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -msgid "Certificate requested" -msgstr "" - -msgid "Revoke certificate" -msgstr "" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -msgid "Certificate Revoked" -msgstr "" - -msgid "REVOKED" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "SHA1 Fingerprint" -msgstr "Otisk" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "SHA256 Fingerprint" -msgstr "Otisk" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -msgid "Status" -msgstr "Stav" - -msgid "Superseded" -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -msgid "Unspecified" -msgstr "Nespecifikováno" - -msgid "Valid Certificate Present" -msgstr "" - -msgid "Valid from" -msgstr "" - -msgid "Valid to" -msgstr "" - -msgid "Validity" -msgstr "" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -msgid "View Certificate" -msgstr "" - -msgid "Certificate Data" -msgstr "" - -msgid "Certificate For Match" -msgstr "" - -msgid "Certificate Mapping Match" -msgstr "" - -msgid "Matched Users" -msgstr "" - -# auto translated by TM merge from project: dnf, version: master, DocId: dnf -#, fuzzy -msgid "User Login" -msgstr "Uživatelské jméno" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "Configuration string" -msgstr "Nastavení" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -msgid "Remove certificate mapping data" -msgstr "" - -msgid "Issuer and subject" -msgstr "" - -msgid "Remove certificate identity mapping rules" -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "Group Options" -msgstr "Přepínače" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "Search Options" -msgstr "Přepínače" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "SELinux Options" -msgstr "Uživatel SELinuxu" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "Server Options" -msgstr "Serverové role" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Service Options" -msgstr "Nastavení služeb" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "User Options" -msgstr "Přepínače" - -msgid "Forward first" -msgstr "" - -msgid "Forwarding disabled" -msgstr "" - -msgid "Forward only" -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -msgid "Options" -msgstr "Přepínače" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "Other Record Types" -msgstr "Typ záznamu" - -msgid "Address not valid, can't redirect" -msgstr "" - -msgid "Create dns record" -msgstr "" - -msgid "Creating record." -msgstr "" - -msgid "Record creation failed." -msgstr "" - -msgid "Checking if record exists." -msgstr "" - -msgid "Record not found." -msgstr "" - -msgid "Redirection to PTR record" -msgstr "" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -msgid "Target reverse zone not found." -msgstr "" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "Standard Record Types" -msgstr "Typ záznamu" - -msgid "Records for DNS Zone" -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -msgid "Record Type" -msgstr "Typ záznamu" - -msgid "Add DNS zone" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "DNS Zone Settings" -msgstr "Nastavení služeb" - -msgid "Remove DNS zones" -msgstr "" - -msgid "Remove Permission" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -# auto translated by TM merge from project: docbook-locales, version: master, -# DocId: locale -msgid "Level" -msgstr "Úroveň" - -msgid "Set Domain Level" -msgstr "" - -msgid "Add user group" -msgstr "" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -# auto translated by TM merge from project: fedora-software, version: master, -# DocId: template/django -#, fuzzy -msgid "Group Settings" -msgstr "Nastavení" - -msgid "External" -msgstr "" - -# auto translated by TM merge from project: libreport, version: rhel6, DocId: -# libreport -msgid "Groups" -msgstr "Skupiny" - -msgid "Group categories" -msgstr "" - -msgid "Change to external group" -msgstr "" - -msgid "Change to POSIX group" -msgstr "" - -msgid "Non-POSIX" -msgstr "" - -msgid "POSIX" -msgstr "" - -msgid "Remove user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -# auto translated by TM merge from project: dnf, version: master, DocId: -# po/dnf -#, fuzzy -msgid "Group Type" -msgstr "Skupina" - -msgid "Add HBAC rule" -msgstr "" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -# auto translated by TM merge from project: Linux PAM, version: master, DocId: -# po/Linux-PAM -#, fuzzy -msgid "Accessing" -msgstr "Úspěch" - -msgid "Remove HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Via Service" -msgstr "Služba" - -msgid "Who" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "Add HBAC service" -msgstr "službu" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -msgid "Remove HBAC services" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -msgid "Add HBAC service group" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -msgid "Remove HBAC service groups" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -msgid "Access Denied" -msgstr "" - -msgid "Access Granted" -msgstr "" - -# auto translated by TM merge from project: Cockpit, version: master, DocId: -# cockpit -#, fuzzy -msgid "Include Disabled" -msgstr "Zakázáno" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Include Enabled" -msgstr "Povoleno" - -msgid "HBAC Test" -msgstr "" - -msgid "Matched" -msgstr "" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" +msgid "Role" +msgstr "Role" # auto translated by TM merge from project: firewalld, version: master, DocId: # po/firewalld msgid "Rules" msgstr "Pravidla" -msgid "Run Test" -msgstr "" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -msgid "Unmatched" -msgstr "" - -msgid "Add host" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -msgid "Host Certificate" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "Host Name" -msgstr "Název počítače" - -msgid "Delete Key, Unprovision" -msgstr "" - -# auto translated by TM merge from project: fedora-software, version: master, -# DocId: template/django -#, fuzzy -msgid "Host Settings" -msgstr "Nastavení" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -# auto translated by TM merge from project: asknot-ng, version: 0.1, DocId: -# locale/asknot-ng -#, fuzzy -msgid "Generate OTP" -msgstr "Obecné" - -# auto translated by TM merge from project: asknot-ng, version: 0.1, DocId: -# locale/asknot-ng -#, fuzzy -msgid "Generated OTP" -msgstr "Obecné" - -msgid "Kerberos Key" -msgstr "" - -msgid "Kerberos Key Not Present" -msgstr "" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -# auto translated by TM merge from project: python-simpleline, version: -# master, DocId: python-simpleline -#, fuzzy -msgid "One-Time Password" -msgstr "Heslo" - -msgid "One-Time Password Not Present" -msgstr "" - -msgid "One-Time Password Present" -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Reset OTP" -msgstr "Reset" - -msgid "Reset One-Time Password" -msgstr "" - -msgid "Set OTP" -msgstr "" - -msgid "OTP set" -msgstr "" - -msgid "Set One-Time Password" -msgstr "" - -msgid "Remove hosts" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/database/StringResource -#, fuzzy -msgid "Unprovision" -msgstr "Zajištění" - -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/database/StringResource -#, fuzzy -msgid "Unprovisioning host" -msgstr "Zajištění" - -msgid "Host unprovisioned" -msgstr "" - -msgid "Add host group" -msgstr "" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -msgid "Host Group Settings" -msgstr "" - -msgid "Remove host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "Identity provider details" -msgstr "Serverové role" - -#, fuzzy -msgid "Verify secret" -msgstr "Uživatelské heslo" - -msgid "User to override" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -# auto translated by TM merge from project: OSCAP Anaconda Addon, version: -# master, DocId: oscap-anaconda-addon -msgid "Profile" -msgstr "Profil" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -msgid "Enter trusted group name." -msgstr "" - -msgid "Add ID view" -msgstr "" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -msgid "Apply to host groups" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -msgid "Remove ID views" -msgstr "" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -msgid "Un-apply from host groups" -msgstr "" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - # auto translated by TM merge from project: selinux (policycoreutils), # version: master, DocId: policycoreutils -#, fuzzy -msgid "Un-apply" -msgstr "Použít" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "Add netgroup" -msgstr "" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Netgroup Settings" -msgstr "Nastavení služeb" - -msgid "Remove netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -msgid "Add OTP token" -msgstr "" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "Configure your token" -msgstr "Nastavení" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -# auto translated by TM merge from project: fedora-software, version: master, -# DocId: template/django -#, fuzzy -msgid "OTP Token Settings" -msgstr "Nastavení" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Disable token" -msgstr "Zakázat" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Enable token" -msgstr "Povolit" - -msgid "Remove OTP tokens" -msgstr "" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "Show configuration uri" -msgstr "Nastavení" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -msgid "Add Custom Attribute" -msgstr "" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/database/StringResource -#, fuzzy -msgid "Permission settings" -msgstr "Zajištění" - -msgid "Attribute breakdown" -msgstr "" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Privilege Settings" -msgstr "Nastavení služeb" - -msgid "Public key:" -msgstr "" - -msgid "Set public key" -msgstr "" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -# auto translated by TM merge from project: authconfig, version: master, -# DocId: po/authconfig -#, fuzzy -msgid "Add password policy" -msgstr "LDAP heslo" - -# auto translated by TM merge from project: python-simpleline, version: -# master, DocId: python-simpleline -#, fuzzy -msgid "Password Policy" -msgstr "Heslo" - -msgid "Remove password policies" -msgstr "" - -msgid "Add ID range" -msgstr "" - -# auto translated by TM merge from project: fedora-software, version: master, -# DocId: template/django -#, fuzzy -msgid "Range Settings" -msgstr "Nastavení" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -msgid "Domain SID" -msgstr "" - -msgid "Secondary RID base" -msgstr "" - -msgid "Remove ID ranges" -msgstr "" - -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -msgid "Detect" -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Local domain" -msgstr "Umístění" - -msgid "IPA trust" -msgstr "" - -msgid "Active Directory winsync" -msgstr "" - -msgid "Add RADIUS server" -msgstr "" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "RADIUS Proxy Server Settings" -msgstr "Nastavení služeb" - -msgid "Remove RADIUS servers" -msgstr "" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Force Update" -msgstr "Aktualizovat" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Add SELinux user map" +msgid "SELinux User" msgstr "Uživatel SELinuxu" -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" +#, python-format +msgid "Same as --%s" +msgstr "Stejné jako --%s" -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" +# auto translated by TM merge from project: fedora-software, version: master, +# DocId: template/django +msgid "Save" +msgstr "Uložit" -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" +# auto translated by TM merge from project: libreport, version: rhel6, DocId: +# libreport +msgid "Search" +msgstr "Hledat" -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +msgid "Secret" +msgstr "Tajné" -msgid "Remove selinux user maps" -msgstr "" +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +msgid "Serial" +msgstr "Sériový" -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" +# auto translated by TM merge from project: anaconda, version: rhel6-branch, +# DocId: anaconda +msgid "Serial Number" +msgstr "Sériové číslo" -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" +# auto translated by TM merge from project: Fedora Websites, version: +# alt.fedoraproject.org, DocId: po/alt.fedoraproject.org +msgid "Server" +msgstr "Server" # auto translated by TM merge from project: Fedora Websites, version: # getfedora.org, DocId: po/getfedora msgid "Server Roles" msgstr "Serverové role" -# auto translated by TM merge from project: Fedora Websites, version: -# getfedora.org, DocId: po/getfedora -#, fuzzy -msgid "Server Role" -msgstr "Serverové role" +# auto translated by TM merge from project: System Administrator's Guide, +# version: master, DocId: Deployment_Guide +msgid "Servers" +msgstr "Servery" -msgid "Warning: Consider service replication" -msgstr "" +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Service" +msgstr "Služba" -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -#, fuzzy -msgid "Delete Server" -msgstr "Smazat" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "Add service" -msgstr "službu" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -# auto translated by TM merge from project: system-config-firewall, version: -# master, DocId: po/system-config-firewall -#, fuzzy -msgid "Service Certificate" -msgstr "Nastavení služeb" +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "Služba '%(service)s' nenalezena v databázi Kerberosu" # auto translated by TM merge from project: system-config-firewall, version: # master, DocId: po/system-config-firewall msgid "Service Settings" msgstr "Nastavení služeb" -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/database/StringResource -msgid "Provisioning" -msgstr "Zajištění" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "Remove services" -msgstr "službu" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/database/StringResource -#, fuzzy -msgid "Unprovisioning service" -msgstr "Zajištění" - -msgid "Service unprovisioned" -msgstr "" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "" - -msgid "SSH public keys" -msgstr "" - -msgid "SSH public key:" -msgstr "" - -msgid "Set SSH key" -msgstr "" - -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" - -msgid "Add stage user" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# labs.fedoraproject.org, DocId: po/labs.fedoraproject.org -#, fuzzy -msgid "Stage users" -msgstr "Stage" - -msgid "Preserved users" -msgstr "" - -msgid "Remove preserved users" -msgstr "" - -msgid "Remove stage users" -msgstr "" - -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -msgid "User categories" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "Add subid" -msgstr "službu" - -msgid "Assigned subids" -msgstr "" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "Add sudo command" -msgstr "příkaz" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -msgid "Remove sudo commands" -msgstr "" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -msgid "Add sudo command group" -msgstr "" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -msgid "Remove sudo command groups" -msgstr "" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -msgid "Add sudo rule" -msgstr "" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "Any Command" -msgstr "příkaz" - -# auto translated by TM merge from project: Fedora Elections Guide, version: -# master, DocId: Casting -msgid "Any Group" -msgstr "Jakákoli skupina" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Run Commands" -msgstr "příkazy" - -msgid "Deny" -msgstr "" - -msgid "Access this host" -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid "Option added" -msgstr "Přepínače" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -msgid "Remove sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -msgid "Specified Commands and Groups" -msgstr "" - -msgid "Specified Groups" -msgstr "" - -msgid "Remove sudo options" -msgstr "" - -msgid "Autogenerated" -msgstr "" - -msgid "Segment details" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "Replication configuration" -msgstr "Nastavení" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource -msgid "Account" -msgstr "Účet" - -msgid "Add trust" -msgstr "" - -msgid "Administrative account" -msgstr "" - -msgid "SID blocklists" -msgstr "" - -# auto translated by TM merge from project: fedora-software, version: master, -# DocId: template/django -#, fuzzy -msgid "Trust Settings" -msgstr "Nastavení" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -#, fuzzy -msgid "Pre-shared password" -msgstr "Uživatelské heslo" - -msgid "Remove trusts" -msgstr "" - -msgid "Remove domains" -msgstr "" - -msgid "Alternative UPN suffixes" -msgstr "" - -msgid "User attributes for SMB services" -msgstr "" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - -# auto translated by TM merge from project: fedora-software, version: master, -# DocId: template/django -#, fuzzy -msgid "Account Settings" -msgstr "Nastavení" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource -#, fuzzy -msgid "Account Status" -msgstr "Účet" - -msgid "Active users" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "Add user" -msgstr "uživatel" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -msgid "Auto assign subordinate ids" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "" - -# auto translated by TM merge from project: fedora-software, version: master, -# DocId: template/django -#, fuzzy -msgid "Contact Settings" -msgstr "Nastavení" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -#, fuzzy -msgid "Delete mode" -msgstr "Smazat" - -msgid "Employee Information" -msgstr "" - -msgid "Error changing account status" -msgstr "" - -msgid "Password expiration" -msgstr "" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource -msgid "Mailing Address" -msgstr "Poštovní adresa" - -msgid "Misc. Information" -msgstr "" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -#, fuzzy -msgid "delete" -msgstr "Smazat" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "preserve" -msgstr "službu" - -msgid "No private group" -msgstr "" - -msgid "Remove users" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Unlock" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -msgid "Members" -msgstr "Členové" - -msgid "My User Vaults" -msgstr "" - -msgid "Owners" -msgstr "" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - # auto translated by TM merge from project: firewalld, version: master, DocId: # po/firewalld -#, fuzzy -msgid "Service Vaults" +msgid "Services" msgstr "Služby" +# auto translated by TM merge from project: docbook-locales, version: master, +# DocId: locale +msgid "Set" +msgstr "Sada" + +# auto translated by TM merge from project: fedora-software, version: master, +# DocId: template/django +msgid "Settings" +msgstr "Nastavení" + # auto translated by TM merge from project: system-config-printer, version: # master, DocId: system-config-printer msgid "Shared" msgstr "Sdílená" -# auto translated by TM merge from project: system-config-printer, version: -# master, DocId: system-config-printer -#, fuzzy -msgid "Shared Vaults" -msgstr "Sdílená" +# auto translated by TM merge from project: SETroubleShoot, version: master, +# DocId: framework/po/setroubleshoot +msgid "Show" +msgstr "Ukázat" + +# auto translated by TM merge from project: blivet-gui, version: f23-branch, +# DocId: blivet-gui +msgid "Size" +msgstr "Velikost" + +# auto translated by TM merge from project: Fedora Websites, version: +# labs.fedoraproject.org, DocId: po/labs.fedoraproject.org +msgid "Stage" +msgstr "Stage" # auto translated by TM merge from project: ibus-libpinyin, version: master, # DocId: ibus-libpinyin msgid "Standard" msgstr "Standard" -msgid "Symmetric" -msgstr "" +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Status" +msgstr "Stav" -msgid "Vault Type" -msgstr "" +# auto translated by TM merge from project: libreport, version: master, DocId: +# libreport +msgid "Subject" +msgstr "Předmět" -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" +# auto translated by TM merge from project: Linux PAM, version: master, DocId: +# po/Linux-PAM +msgid "Success" +msgstr "Úspěch" + +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "Target" +msgstr "Cíl" + +msgid "The topic or command name." +msgstr "Název tématu nebo příkazu." + +msgid "Ticket expired" +msgstr "Platnost lístku skončila" + +# auto translated by TM merge from project: Pulseaudio, version: 6.0, DocId: +# pulseaudio.pot +msgid "Timeout" +msgstr "Časový limit" + +msgid "To get command help, use:" +msgstr "Chceteli získat nápovědu k příkazu, použijte:" + +msgid "Topic commands:" +msgstr "Příkazy tématu:" + +msgid "Topic or Command" +msgstr "Téma nebo příkaz" # auto translated by TM merge from project: selinux (policycoreutils), # version: master, DocId: policycoreutils -#, fuzzy -msgid "User Vaults" -msgstr "Uživatelé" +msgid "Type" +msgstr "Typ" -msgid "Current password is required" -msgstr "" +# auto translated by TM merge from project: dnf, version: master, DocId: +# po/dnf +msgid "URL" +msgstr "URL" -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" +# auto translated by TM merge from project: libvirt, version: master, DocId: +# libvirt +msgid "UUID" +msgstr "UUID:" -# auto translated by TM merge from project: Fedora Websites, version: -# fedoraproject.org, DocId: po/fedora-web -#, fuzzy -msgid "First OTP" -msgstr "Prvenství " +# auto translated by TM merge from project: anaconda, version: master, DocId: +# main +msgid "Unknown" +msgstr "Neznámý" -msgid "New password is required" -msgstr "" +# auto translated by TM merge from project: GSS NTLMSSP, version: master, +# DocId: gssntlmssp +msgid "Unknown Error" +msgstr "Neznámá chyba" -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" +# auto translated by TM merge from project: audit-viewer, version: default, +# DocId: audit-viewer +msgid "Unspecified" +msgstr "Nespecifikováno" -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Update" +msgstr "Aktualizovat" -msgid "Token synchronization failed" -msgstr "" +# auto translated by TM merge from project: system-config-printer, version: +# master, DocId: system-config-printer +msgid "User" +msgstr "Uživatel" -msgid "The username, password or token codes are not correct" -msgstr "" +# auto translated by TM merge from project: firewalld, version: master, DocId: +# po/firewalld +msgid "User ID" +msgstr "ID uživatele" -msgid "Token was synchronized" -msgstr "" +# auto translated by TM merge from project: dnf, version: master, DocId: dnf +msgid "User name" +msgstr "Uživatelské jméno" -msgid "Password change complete" -msgstr "" - -msgid "Your password has expired. Please enter a new password." -msgstr "" +msgid "User password" +msgstr "Uživatelské heslo" # auto translated by TM merge from project: anaconda, version: rhel6-branch, # DocId: anaconda -#, fuzzy -msgid "Passwords must match" -msgstr "Hesla nejsou stejná." +msgid "Username" +msgstr "Jméno uživatele" -msgid "Password reset was not successful." -msgstr "" +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Users" +msgstr "Uživatelé" -#, fuzzy -msgid "Reset your password." -msgstr "Uživatelské heslo" +# auto translated by TM merge from project: anaconda, version: f25, DocId: +# main +msgid "Vendor" +msgstr "Výrobce" -msgid "Second OTP" -msgstr "" +# auto translated by TM merge from project: selinux (policycoreutils), +# version: master, DocId: policycoreutils +msgid "Version" +msgstr "Verze" -#, fuzzy -msgid "Verify Password" -msgstr "Uživatelské heslo" - -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -msgid "Some entries were not deleted" -msgstr "" - -msgid "Quick Links" -msgstr "" - -msgid "Select All" -msgstr "" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -msgid "Unselect All" -msgstr "" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" +# auto translated by TM merge from project: authconfig, version: master, +# DocId: po/authconfig +msgid "Warning" +msgstr "Varování" # auto translated by TM merge from project: anaconda, version: f25, DocId: # main msgid "Working" msgstr "Pracuje" -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -msgid "Audit" -msgstr "Auditovat" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "Authentication" -msgstr "Autentizace" - -# auto translated by TM merge from project: Spacewalk Web UI, version: master, -# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource -#, fuzzy -msgid "Automount" -msgstr "Účet" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -msgid "DNS" -msgstr "DNS" - -msgid "Host-Based Access Control" -msgstr "" - -msgid "Identity" -msgstr "" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -#, fuzzy -msgid "Network Services" -msgstr "Služby" - -msgid "Policy" -msgstr "" - -msgid "Role-Based Access Control" -msgstr "" - -msgid "Subordinate IDs" -msgstr "" - -msgid "Sudo" -msgstr "" - -msgid "Topology" -msgstr "" - -msgid "True" -msgstr "" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# fedoraproject.org, DocId: po/fedora-web -msgid "First" -msgstr "Prvenství " - -# auto translated by TM merge from project: abrt, version: master, DocId: abrt -msgid "Last" -msgstr "Poslední" - -# auto translated by TM merge from project: SETroubleShoot, version: master, -# DocId: framework/po/setroubleshoot -msgid "Next" -msgstr "Další" - -# auto translated by TM merge from project: docbook-locales, version: master, -# DocId: locale -msgid "Page" -msgstr "Strana" - -# auto translated by TM merge from project: docbook-locales, version: master, -# DocId: locale -msgid "Prev" -msgstr "Předchozí" - -msgid "Undo" -msgstr "" - -msgid "Undo this change." -msgstr "" - -msgid "Undo All" -msgstr "" - -msgid "Undo all changes in this field." -msgstr "" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -msgid "Must be a decimal number" -msgstr "" - -msgid "Format error" -msgstr "" - -msgid "Must be an integer" -msgstr "" - -msgid "Not a valid IP address" -msgstr "" - -msgid "Not a valid IPv4 address" -msgstr "" - -msgid "Not a valid IPv6 address" -msgstr "" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -msgid "Parse error" -msgstr "" - -msgid "Must be a positive number" -msgstr "" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -msgid "Required field" -msgstr "" - -msgid "Unsupported value" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -msgid "IdP max life" -msgstr "" - -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "" - -msgid "IdP max renew" -msgstr "" - -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -# auto translated by TM merge from project: authconfig, version: master, -# DocId: po/authconfig -msgid "Invalid LDAP URI." -msgstr "Neplatné URI pro LDAP." - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -#, fuzzy -msgid "password policy" -msgstr "heslo" - -# auto translated by TM merge from project: anaconda, version: rhel7-branch, -# DocId: anaconda -#, fuzzy -msgid "password policies" -msgstr "heslo" - -# auto translated by TM merge from project: python-simpleline, version: -# master, DocId: python-simpleline -#, fuzzy -msgid "Password Policies" -msgstr "Heslo" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -# auto translated by TM merge from project: dnf, version: master, DocId: dnf -#, fuzzy -msgid "User check" -msgstr "Uživatelské jméno" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "Grace login limit" -msgstr "" - -msgid "Number of LDAP authentications allowed after expiration" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "SELinux User Map rule" -msgstr "Uživatel SELinuxu" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "SELinux User Map rules" -msgstr "Uživatel SELinuxu" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "SELinux User Maps" -msgstr "Uživatel SELinuxu" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "SELinux User Map" -msgstr "Uživatel SELinuxu" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "Autentizace" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -msgid "service" -msgstr "službu" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "services" -msgstr "službu" - -msgid "Service principal alias" -msgstr "" - -msgid "Base-64 encoded service certificate" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." -msgstr "" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -msgid "Add a new SMB service." -msgstr "" - -msgid "SMB service NetBIOS name" -msgstr "" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "" +msgid "an internal error has occurred" +msgstr "Vyskytla se vnitřní chyba" #, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "" +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "na serveru '%(server)s' se vyskytla interní chyba" #, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a service" -msgstr "" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -# auto translated by TM merge from project: Fedora Websites, version: -# labs.fedoraproject.org, DocId: po/labs.fedoraproject.org -#, fuzzy -msgid "Stage Users" -msgstr "Stage" - -# auto translated by TM merge from project: Fedora Websites, version: -# labs.fedoraproject.org, DocId: po/labs.fedoraproject.org -#, fuzzy -msgid "Stage User" -msgstr "Stage" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "Display information about an ID override." -msgstr "" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -#, fuzzy -msgid "User ID override" -msgstr "ID uživatele" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -msgid "Certificate Authority" -msgstr "" - -msgid "Certificate Authorities" -msgstr "" - -msgid "Name for referencing the CA" -msgstr "" - -msgid "Description of the purpose of the CA" -msgstr "" - -msgid "Authority ID" -msgstr "" - -msgid "Dogtag Authority ID" -msgstr "" - -# auto translated by TM merge from project: libreport, version: master, DocId: -# libreport -#, fuzzy -msgid "Subject DN" -msgstr "Předmět" - -msgid "Subject Distinguished Name" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Issuer Distinguished Name" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -#| msgid "Version" -msgid "RSN Version" -msgstr "Verze" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "Random Serial Number Version" -msgstr "Sériové číslo" - -msgid "Search for CAs." -msgstr "" - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "Display the properties of a CA." -msgstr "" - -msgid "Create a CA." -msgstr "" - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -# auto translated by TM merge from project: system-config-audit, version: -# master, DocId: system-config-audit -#, fuzzy -msgid "Modify CA configuration." -msgstr "Nastavení" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Disable a CA." -msgstr "Zakázat" - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "" - -msgid "IPA CA cannot be disabled" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Enable a CA." -msgstr "Povolit" - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "Zastaralé volby" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -# auto translated by TM merge from project: audit-viewer, version: default, -# DocId: audit-viewer -#, fuzzy -msgid " * 0 - unspecified\n" -msgstr "Nespecifikováno" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Subject email address" -msgstr "" - -# auto translated by TM merge from project: libreport, version: master, DocId: -# libreport -#, fuzzy -msgid "Subject DNS name" -msgstr "Předmět" - -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -# auto translated by TM merge from project: libreport, version: master, DocId: -# libreport -#, fuzzy -msgid "Subject URI" -msgstr "Předmět" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Subject IP Address" -msgstr "IP adresa" - -# auto translated by TM merge from project: libreport, version: master, DocId: -# libreport -#, fuzzy -msgid "Subject OID" -msgstr "Předmět" - -# auto translated by TM merge from project: libreport, version: master, DocId: -# libreport -#, fuzzy -msgid "Subject UPN" -msgstr "Předmět" - -msgid "Subject Kerberos principal name" -msgstr "" - -msgid "Subject Other Name" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: rhel6-branch, -# DocId: anaconda -#, fuzzy -msgid "Serial number (hex)" -msgstr "Sériové číslo" - -msgid "Request status" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -#, fuzzy -msgid "'add' option" -msgstr "Zastaralé volby" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Status of the certificate" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -# auto translated by TM merge from project: firewalld, version: master, DocId: -# po/firewalld -#, fuzzy -msgid "Sudo Rules" -msgstr "Pravidla" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -# auto translated by TM merge from project: Fedora Cheat Cubes, version: -# master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "users" -msgstr "uživatel" +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "nelze se připojit k '%(uri)s': %(error)s" # auto translated by TM merge from project: Fedora Cheat Cubes, version: # master, DocId: Fedora_Cheat_Cube_Users @@ -24966,453 +732,59 @@ msgstr "příkaz" msgid "commands" msgstr "příkazy" -msgid "runAs user" -msgstr "" +# auto translated by TM merge from project: anaconda, version: f22-branch, +# DocId: anaconda +msgid "description" +msgstr "popis" -msgid "runAs users" -msgstr "" +msgid "did not receive Kerberos credentials" +msgstr "neobdrženy ověřovací údaje Kerberos" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "chyba marshallingu dat pro přenos XML-RPC: %(error)s" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "chyba na serveru '%(server)s': %(error)s" # auto translated by TM merge from project: Fedora Cheat Cubes, version: # master, DocId: Fedora_Cheat_Cube_Users -#, fuzzy -msgid "group runAs" +msgid "group" msgstr "skupinu" -msgid "runAs groups" -msgstr "" +msgid "incorrect type" +msgstr "nesprávný typ" + +# auto translated by TM merge from project: anaconda, version: rhel7-branch, +# DocId: anaconda +msgid "password" +msgstr "heslo" + +# auto translated by TM merge from project: virt-manager, version: master, +# DocId: virt-manager +msgid "seconds" +msgstr "sekund" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +msgid "service" +msgstr "službu" #, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" +msgid "unknown command '%(name)s'" +msgstr "neznámý příkaz '%(name)s'" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Preserved user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -# auto translated by TM merge from project: anaconda, version: f25, DocId: -# main -#, fuzzy -msgid "Last failed authentication" -msgstr "Autentizace" - -# auto translated by TM merge from project: Pulseaudio, version: 6.0, DocId: -# pulseaudio.pot -#, fuzzy -msgid "Time now" -msgstr "Časový limit" - -msgid "Password grace count" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" -msgstr "" - -msgid "Request must be a dict" -msgstr "" - -msgid "Request is missing \"method\"" -msgstr "" - -msgid "Request is missing \"params\"" -msgstr "" - -msgid "params must be a list" -msgstr "" - -msgid "params must contain [args, options]" -msgstr "" - -msgid "params[0] (aka args) must be a list" -msgstr "" - -msgid "params[1] (aka options) must be a dict" -msgstr "" - -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" - -msgid "CIFS server denied your credentials" -msgstr "" - -msgid "communication with CIFS server was unsuccessful" -msgstr "" - -msgid "AD domain controller" -msgstr "" - -msgid "unsupported functional level" -msgstr "" - -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" - -msgid "Cannot find specified domain or server name" -msgstr "" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" - -msgid "At least the domain or IP address should be specified" -msgstr "" - -#, python-format -msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" -msgstr "" - -msgid "no trusted domain is configured" -msgstr "" - -msgid "domain is not configured" -msgstr "" - -msgid "SID is not valid" -msgstr "" - -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "" - -msgid "SID does not match any trusted domain" -msgstr "" - -msgid "Trust setup" -msgstr "" - -msgid "Our domain is not configured" -msgstr "" - -msgid "No trusted domain is not configured" -msgstr "" - -msgid "trusted domain object" -msgstr "" - -msgid "domain is not trusted" -msgstr "" - -msgid "no trusted domain matched the specified flat name" -msgstr "" - -msgid "trusted domain object not found" -msgstr "" - -msgid "Object does not belong to a trusted domain" -msgstr "" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "" - -msgid "Ambiguous search, user domain was not specified" -msgstr "" - -msgid "Trusted domain did not return a unique object" -msgstr "" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "" - -msgid "trusted domain user not found" -msgstr "" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "" - -msgid "CIFS credentials object" -msgstr "" - -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "" - -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" - -#, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" - -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" - -msgid "Credentials" -msgstr "" - -msgid "Missing credentials for cross-forest communication" -msgstr "" - -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" - -#, python-format -msgid "must equal %r" -msgstr "" - -msgid "Hello world" -msgstr "" - -#, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "" - -msgid "must be at least 1" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Out of memory\n" -msgstr "Nedostatek paměti\n" - -msgid "Warning unrecognized encryption type.\n" -msgstr "" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -# auto translated by TM merge from project: selinux (policycoreutils), -# version: master, DocId: policycoreutils -#, fuzzy -msgid "Out of memory!?\n" -msgstr "Nedostatek paměti\n" - -msgid "Enctype comparison failed!\n" -msgstr "" - -#, fuzzy -msgid "Password is too long!\n" -msgstr "Hesla se neshodují!" - -msgid "Failed to create random key!\n" -msgstr "" - -msgid "Failed to create key!\n" -msgstr "" - -msgid "Bad or unsupported salt type.\n" -msgstr "" - -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "neznámý kód %(code)d chyby ze serveru %(server)s: %(error)s" + +# auto translated by TM merge from project: Spacewalk Web UI, version: master, +# DocId: java/code/src/com/redhat/rhn/frontend/strings/java/StringResource +msgid "url" +msgstr "url" + +# auto translated by TM merge from project: Fedora Cheat Cubes, version: +# master, DocId: Fedora_Cheat_Cube_Users +msgid "user" +msgstr "uživatel" diff --git a/po/de.po b/po/de.po index c8b064756..e3cdc30df 100644 --- a/po/de.po +++ b/po/de.po @@ -21,945 +21,94 @@ msgstr "" "Plural-Forms: nplurals=2; plural=n != 1;\n" "X-Generator: Weblate 4.4.2\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "Konfigurationsdatei %s konnte nicht geöffnet werden\n" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "Aufruf von »stat« für Konfigurationsdatei %s nicht möglich\n" - -#, c-format -msgid "out of memory\n" -msgstr "Nicht genügend Speicher\n" - -#, c-format -msgid "read error\n" -msgstr "Lesefehler\n" - -#, fuzzy, c-format -msgid "Unable to parse principal name\n" -msgstr "" -"Anmeldedaten-Zwischenspeicher für Kerberos konnte nicht erzeugt werden\n" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "Principal %s wird entfernt\n" - -#, fuzzy, c-format -msgid "Failed to open keytab\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -#, c-format -msgid "principal not found\n" -msgstr "Principal nicht gefunden\n" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Unable to remove entry\n" -msgstr "Entfernen fehlgeschlagen" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, fuzzy, c-format -msgid "Unable to parse principal\n" -msgstr "Kerberos-Principal" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "Realm nicht gefunden\n" - -msgid "Print debugging information" -msgstr "Ausgabe von Debug-Informationen" - -msgid "Debugging output" -msgstr "Debugging-Ausgabe" - msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -#, fuzzy -msgid "Kerberos Service Principal Name" -msgstr "Kerberos-Principal" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "Alle Principals in diesem Realm entfernen" - -msgid "Realm name" -msgstr "Realm-Name" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "Initialisierung des Kerberos-Kontexts fehlgschlagen\n" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "Initialisierung des Kerberos-Kontexts fehlgschlagen\n" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "KDC akzeptiert keine Schlüssel\n" - -#, c-format -msgid "Out of memory \n" -msgstr "Nicht genügend Speicher\n" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "ldap-Bibliothek konnte nicht initialisiert werden!\n" - -msgid "Simple bind failed\n" -msgstr "" - -msgid "SASL Bind failed\n" -msgstr "" - -#, fuzzy, c-format -msgid "Operation failed: %s\n" -msgstr "Konfigurationsdatei %s konnte nicht geöffnet werden\n" - -#, fuzzy, c-format -msgid "Failed to get result: %s\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to parse result: %s\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Out of Memory!\n" -msgstr "Nicht genügend Speicher!\n" - -#, fuzzy, c-format -msgid "Failed to create control!\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -#, fuzzy, c-format -msgid "Failed to bind to server!\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -#, fuzzy, c-format -msgid "Failed to get keytab!\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to retrieve any keys" -msgstr "Zufallsschlüssel konnte nicht erzeugt werden!\n" - -#, fuzzy -msgid "Failed to decode control reply!\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "Passwörter stimmen nicht überein!" - -#, fuzzy, c-format -msgid "Failed to open config file %s\n" -msgstr "Konfigurationsdatei %s konnte nicht geöffnet werden\n" - -#, fuzzy, c-format -msgid "Failed to parse config file %s\n" -msgstr "Konfigurationsdatei %s konnte nicht geöffnet werden\n" - -#, fuzzy -msgid "Failed to resolve symlink to keytab.\n" -msgstr "Zufallsschlüssel konnte nicht erzeugt werden!\n" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "Ausgabe nur bei Fehlern" - -msgid "Output debug info" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -msgid "Server Name" -msgstr "Servername" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -#, fuzzy -msgid "Comma separated encryption types list" -msgstr "Unterstützte Verschlüsselungstypen:\n" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -#, fuzzy -msgid "Permitted Encryption Types" -msgstr "Unterstützte Verschlüsselungstypen:\n" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -#, fuzzy -msgid "LDAP DN" -msgstr "LDAP-URI" - -#, fuzzy -msgid "DN to bind as if not using kerberos" -msgstr "LDAP-Passwort (falls Kerberos nicht verwendet wird)" - -msgid "LDAP password" -msgstr "LDAP-Passwort" - -#, fuzzy -msgid "password to use if not using kerberos" -msgstr "LDAP-Passwort (falls Kerberos nicht verwendet wird)" - -#, fuzzy -msgid "Prompt for LDAP password" -msgstr "LDAP-Passwort" - -#, fuzzy -msgid "Path to the IPA CA certificate" -msgstr "Datei, in der das Zertifikat gespeichert werden soll." - -#, fuzzy -msgid "IPA CA certificate" -msgstr "Zertifikat" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "Unterstützte Verschlüsselungstypen:\n" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "Warnung: Typ konnte nicht umgewandelt werden (#%d)\n" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -#, fuzzy -msgid "Enter LDAP password" -msgstr "LDAP-Passwort" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" - -#, c-format -msgid "Discovered server %s\n" -msgstr "" - -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Using provided server %s\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -msgid "New Principal Password" -msgstr "Neues Principal-Passwort" - -msgid "Verify Principal Password" -msgstr "Principal-Passwort bestätigen" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, fuzzy, c-format -msgid "Invalid Service Principal Name\n" -msgstr "Dienst-Principal" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to open Keytab\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to create key material\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -#, fuzzy, c-format -msgid "Failed to get keytab\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -#, fuzzy, c-format -msgid "Failed to add key to the keytab\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -#, fuzzy, c-format -msgid "Failed to close the keytab\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Out of memory!\n" -msgstr "Nicht genügend Speicher!?\n" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "" - -#, c-format -msgid "Out of memory!" -msgstr "Nicht genügend Speicher!" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "" - -#, c-format -msgid "No values for %s" -msgstr "Keine Werte für %s" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "" - -#, fuzzy, c-format -msgid "IPA namingContext not found\n" -msgstr "ipa-getkeytab nicht gefunden\n" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "Principal nicht gefunden\n" - -#, fuzzy, c-format -msgid "Host is already joined.\n" -msgstr "Dieser Eintrag ist bereits aktiviert" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" - -#, fuzzy, c-format -msgid "json_dumps() failed\n" -msgstr "fork() fehlgeschlagen\n" - -#, fuzzy, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "Ungültige JSON-RPC-Anfrage: %(error)s" - -#, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#, fuzzy, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "Keine Antwort" - -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "fork() fehlgeschlagen\n" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "Initialisierung des Kerberos-Kontexts fehlgschlagen\n" - -#, fuzzy, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" -"Anmeldedaten-Zwischenspeicher für Kerberos konnte nicht erzeugt werden\n" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" - -#, c-format -msgid "fork() failed\n" -msgstr "fork() fehlgeschlagen\n" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "ipa-getkeytab nicht gefunden\n" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "ipa-getkeytab hat falsche Zugriffsrechte?\n" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "Ausführen von ipa-getkeytab fehgeschlagen, errno %d\n" - -#, c-format -msgid "child exited with %d\n" -msgstr "" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "" - -#, fuzzy, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "Fehler beim Holen der initialen Anmeldedaten: %s.\n" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "Fehler beim Holen der initialen Anmeldedaten: %s.\n" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "" -"Anmeldedaten-Zwischenspeicher für Kerberos konnte nicht erzeugt werden\n" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" -"Fehler beim Speichern der Anmeldedaten im Anmeldedaten-Zwischenspeicher: " -"%s.\n" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "Die rohe XML-RPC-Ausgabe im GSSAPI-Modus anzeigen" - -msgid "Quiet mode. Only errors are displayed." -msgstr "Stiller Modus. Nur Fehler werden ausgegeben." - -msgid "Unenroll this host from IPA server" -msgstr "" - -msgid "Hostname of this server" -msgstr "Hostname dieses Servers" - -msgid "hostname" -msgstr "Hostname" - -msgid "IPA Server to use" -msgstr "Zu verwendender IPA-Server" - -msgid "Specifies where to store keytab information." -msgstr "" - -msgid "filename" -msgstr "Dateiname" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" - -msgid "LDAP password (if not using Kerberos)" -msgstr "LDAP-Passwort (falls Kerberos nicht verwendet wird)" - -msgid "password" -msgstr "Passwort" - -#, fuzzy -msgid "LDAP basedn" -msgstr "LDAP-Passwort" - -msgid "basedn" -msgstr "" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "" - -msgid "Failed to add" -msgstr "Hinzufügen fehlgeschlagen" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" - -msgid "Unrevoked" -msgstr "Nicht widerrufen" - -msgid "Error" -msgstr "Fehler" - -#, fuzzy -msgid "Input filename" -msgstr "Name der Ausgabedatei" - -#, fuzzy -msgid "File to load the certificate from." -msgstr "Datei, in der das Zertifikat gespeichert werden soll." - -msgid "cannot specify both raw certificate and file" -msgstr "" - -#, fuzzy -msgid "Input file" -msgstr "Name der Ausgabedatei" - -#, fuzzy -msgid "File to load the certificate from" -msgstr "Datei, in der das Zertifikat gespeichert werden soll." - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "" - -msgid "Split DNS record to parts" -msgstr "" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" - -msgid "DNS resource record type" -msgstr "" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" - -msgid "No option to modify specific record provided." -msgstr "Keine Option zum Ändern des spezifischen Datensatzes angegeben." - -msgid "Current DNS record contents:\n" -msgstr "Derzeitiger Inhalt des DNS-Datensatzes:\n" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "Wert von %(name)s auf »%(value)s« ändern?" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -msgid "No option to delete specific record provided." -msgstr "Keine Option zum Löschen des spezifischen Datensatzes angegeben." - -msgid "Delete all?" -msgstr "Alles löschen?" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "Wert von %(name)s auf »%(value)s« löschen?" - -msgid "Server will check DNS forwarder(s)." -msgstr "" - -msgid "This may take some time, please wait ..." -msgstr "" - -msgid "DNS forwarder" -msgstr "" - -msgid "file to store DNS records in nsupdate format" -msgstr "" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -#, fuzzy -msgid "Servers details:" -msgstr "Segment Details" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -#, fuzzy -msgid "Maximum number of agreements per replica" -msgstr "Maximale Anzahl der zurückgegebenen Einträge" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "Einen Benutzer löschen, Eintrag für zukünfigte Verwendung aufbewahren" - -msgid "Delete a user" -msgstr "Einen Benutzer löschen" - -msgid "preserve and no-preserve cannot be both set" -msgstr "preserve und no-preserve kann nicht gleichzeitig gesetzt sein" - -msgid "maps not connected to /etc/auto.master:" -msgstr "" - -msgid "Import automount files for a specific location." -msgstr "" - -msgid "Master file" -msgstr "Masterdatei" - -msgid "Automount master file." -msgstr "Automount-Masterdatei" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" - -#, python-format -msgid "File %(file)s not found" -msgstr "Datei %(file)s nicht gefunden" - -#, fuzzy, python-format -msgid "key %(key)s already exists" -msgstr "Dieser Eintrag existiert bereits" - -#, fuzzy, python-format -msgid "map %(map)s already exists" -msgstr "%(oname)s mit dem Namen »%(pkey)s« existiert bereits" - -msgid "Imported maps:" -msgstr "" - -#, fuzzy, python-format -msgid "Added %(map)s" -msgstr "Host \"%(value)s\" hinzugefügt" - -msgid "Imported keys:" -msgstr "" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "" - -msgid "Ignored keys:" -msgstr "" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "" - -msgid "Duplicate maps skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(map)s" -msgstr "" - -msgid "Duplicate keys skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(key)s" -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "OTP Token synchronisieren." - -msgid "User ID" -msgstr "Benutzer-ID" - -msgid "Password" -msgstr "Passwort" - -msgid "First Code" -msgstr "Erster Code" - -msgid "Second Code" -msgstr "Zweiter Code" - -msgid "Token ID" -msgstr "Token ID" - -msgid "python-yubico is not installed." +"\n" +" Add an automember rule.\n" +" " msgstr "" +"\n" +" Auto-Mitgliedschaftsregel hinzufügen.\n" +" " msgid "" "\n" -"YubiKey Tokens\n" +" Add conditions to an automember rule.\n" +" " msgstr "" "\n" -"YubiKey Tokens\n" +" Bedigungen zu einer Auto-Mitgliedschaftsregel hinzufügen.\n" +" " + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" +"\n" +" Auto-Mitgliedschaftsregel löschen.\n" +" " + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" +"\n" +" Informationen über Auto-Mitgliedschaftsregel anzeigen.\n" +" " + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" +"\n" +" Auto-Mitgliedschaftsregel bearbeiten. " + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" +"\n" +" Bedingungen von einer einer Auto-Mitglieschaftsregel entfernen. " + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" +"\n" +" Suche nach Auto-Mitgliedschaftsregeln.\n" +" " + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" +"\n" +"Regel für Auto-Mitgliedschaft\n" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" +"\n" +"Domain Name System (DNS)\n" + +msgid "" +"\n" +"IPA servers\n" +msgstr "" +"\n" +"IPA-Server\n" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" +"\n" +"OTP-Tokens bearbeiten.\n" msgid "" "\n" @@ -970,7864 +119,10 @@ msgstr "" msgid "" "\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" +"OTP Tokens\n" msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -#, fuzzy -msgid "Add a new YubiKey OTP token." -msgstr "Neuen OTP-Token hinzufügen" - -#, fuzzy -msgid "YubiKey slot" -msgstr "" -"\n" -"YubiKey Tokens\n" - -msgid "No free YubiKey slot!" -msgstr "" - -#, fuzzy, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "Ungültig '%(name)s': %(error)s" - -#, fuzzy, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "Kann nicht zu '%(uri)s' verbinden: %(error)s" - -msgid "Invalid credentials" -msgstr "Ungültige Zugangsdaten" - -#, fuzzy -msgid "Create a new vault." -msgstr "Eine neue Gruppe erstellen." - -#, fuzzy -msgid "Vault password" -msgstr "Passwort" - -msgid "File containing the vault password" -msgstr "" - -msgid "File containing the vault public key" -msgstr "" - -msgid "Password can be specified only for symmetric vault" -msgstr "" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "" - -#, fuzzy -msgid "Password specified multiple times" -msgstr "Passwortänderung abgeschlossen" - -msgid "Public key specified multiple times" -msgstr "" - -#, fuzzy -msgid "Missing vault public key" -msgstr "Ungültiger öffentlicher SSH-Schlüssel" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "" - -#, fuzzy -msgid "Modify a vault." -msgstr "Rolle ändern." - -msgid "Change password" -msgstr "Passwort ändern" - -#, fuzzy -msgid "Old vault password" -msgstr "Bind-Passwort" - -msgid "File containing the old vault password" -msgstr "" - -#, fuzzy -msgid "New vault password" -msgstr "Neues Passwort" - -msgid "File containing the new vault password" -msgstr "" - -#, fuzzy -msgid "Old vault private key" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -msgid "File containing the old vault private key" -msgstr "" - -msgid "File containing the new vault public key" -msgstr "" - -msgid "New public key specified multiple times" -msgstr "" - -#, fuzzy -msgid "Missing new vault public key" -msgstr "Ungültiger öffentlicher SSH-Schlüssel" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "" - -msgid "Binary data to archive" -msgstr "" - -msgid "File containing data to archive" -msgstr "" - -#, fuzzy -msgid "Override existing password" -msgstr "Vererbte Einstellungen überschreiben" - -msgid "Input data specified multiple times" -msgstr "" - -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" - -msgid "Invalid vault type" -msgstr "" - -msgid "Retrieve a data from a vault." -msgstr "" - -#, fuzzy -msgid "File to store retrieved data" -msgstr "Datei, in der das Zertifikat gespeichert werden soll." - -#, fuzzy -msgid "Vault private key" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -msgid "File containing the vault private key" -msgstr "" - -msgid "Data" -msgstr "Daten" - -msgid "Private key specified multiple times" -msgstr "" - -#, fuzzy -msgid "Missing vault private key" -msgstr "Fehlende Werte:" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "Sudo-Regel »%s« wurde aktiviert." - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "Sudo-Regel »%s« wurde deaktiviert." - -#, fuzzy, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "Bedingung(en) zu \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "ACI name" -msgstr "ACI-Name" - -msgid "Permission" -msgstr "Berechtigung" - -msgid "Permission ACI grants access to" -msgstr "Berechtigungs-ACI erlaubt Zugriff auf" - -msgid "User group" -msgstr "Benutzer-Gruppe" - -msgid "User group ACI grants access to" -msgstr "Benutzergruppen-ACI erlaubt Zugriff auf" - -msgid "Permissions" -msgstr "Berechtigungen" - -#, fuzzy -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "Berechtigungen (read, write). Standard ist write" - -msgid "Attributes to which the permission applies" -msgstr "Attribute auf die die Berechtigung angewendet wird" - -msgid "Attributes" -msgstr "Attribute" - -msgid "Type" -msgstr "Typ" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "Typ des IPA-Objekts (user, group, host, hostgroup, service, netgroup)" - -msgid "Member of" -msgstr "Mitglied von" - -msgid "Member of a group" -msgstr "Mitglied einer Gruppe" - -msgid "Filter" -msgstr "Filter" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "Gültiger LDAP filter (z.B. ou=Engineering)" - -msgid "Subtree" -msgstr "Subtree" - -msgid "Subtree to apply ACI to" -msgstr "Subtree auf den ACI angewendet wird" - -msgid "Target group" -msgstr "Ziel-Gruppe" - -#, fuzzy -msgid "Group to apply ACI to" -msgstr "Subtree auf den ACI angewendet wird" - -msgid "Target your own entry (self)" -msgstr "Auf eigenen Eintrag anwenden (self)" - -#, fuzzy -msgid "Apply ACI to your own entry (self)" -msgstr "Auf eigenen Eintrag anwenden (self)" - -#, fuzzy -msgid "Create new ACI." -msgstr "Erstelle eine neue CA ACL." - -msgid "ACI prefix" -msgstr "ACI-Präfix" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" -"Präfix zur Unterscheidung der ACI-Typen (permission, delegation, " -"selfservice, none)" - -msgid "Test the ACI syntax but don't write anything" -msgstr "ACI-Syntax testen, aber nicht schreiben" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" -"Ermittelt alle Attribute des Servers und gibt diese aus. Dies wirkt sich auf " -"die Befehlsausgabe aus." - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" -"Gibt die Einträge so aus, wie sie auf dem Server gespeichert sind. Dies " -"wirkt sich nur auf das Ausgabeformat aus." - -msgid "User-friendly description of action performed" -msgstr "Benutzerfreundliche Beschreibung der ausgeführten Aktion" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" -"Der Wert von »primary_key« des Eintrags, z.B. »jdoe« für einen Benutzer" - -#, fuzzy -msgid "Delete ACI." -msgstr "CA ACL löschen." - -msgid "True means the operation was successful" -msgstr "»True« bedeutet, dass die Operation erfolgreich abgeschlossen wurde." - -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" - -msgid "A string searched in all relevant object attributes" -msgstr "" -"Eine Zeichenkette, nach der in allen relevanten Objektattributen gesucht wird" - -msgid "Primary key only" -msgstr "Nur primärer Schlüssel" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" - -msgid "Number of entries returned" -msgstr "Anzahl der zurückgegebenen Einträge" - -msgid "True if not all results were returned" -msgstr "»True«, falls nicht alle Ergebnisse ausgegeben wurden" - -#, fuzzy -msgid "Modify ACI." -msgstr "CA ACL ändern" - -#, fuzzy -msgid "Rename an ACI." -msgstr "Umbenennen" - -msgid "New ACI name" -msgstr "Neuer ACI-Name" - -msgid "Display a single ACI given an ACI name." -msgstr "" - -msgid "Location of the ACI" -msgstr "Ort der ACI" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Description" -msgstr "Beschreibung" - -msgid "A description of this auto member rule" -msgstr "Beschreibung der Auto-Mitgliedschaftsregel" - -msgid "Default (fallback) Group" -msgstr "Standard (Rückfall) Gruppe" - -msgid "Default group for entries to land" -msgstr "Vorgegebene Gruppe für Einträge" - -#, fuzzy -msgid "Add an automember rule." -msgstr "" -"\n" -" Auto-Mitgliedschaftsregel hinzufügen.\n" -" " - -msgid "Automember Rule" -msgstr "Auto-Mitgliedschaftsregel" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" -"Ein Attribut für ein Attribut-Wert-Paar setzen. Das Format ist " -"Attribut=Wert.\n" -"Bei Attributen mit mehreren Werten ersetzt der Befehl die bereits " -"vorhandenen Werte." - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" -"Ein Attribut-Wert-Paar hinzufügen. Das Format ist Attribut=Wert.\n" -"Das Attribut muss Teil des Schemas sein." - -msgid "Grouping Type" -msgstr "Gruppierungstyp" - -msgid "Grouping to which the rule applies" -msgstr "Gruppierung, auf die die Regel angewendet wird" - -#, fuzzy -msgid "Add conditions to an automember rule." -msgstr "" -"\n" -" Bedigungen zu einer Auto-Mitgliedschaftsregel hinzufügen.\n" -" " - -msgid "Inclusive Regex" -msgstr "Einschließende Regex" - -msgid "Exclusive Regex" -msgstr "Ausschließende Regex" - -msgid "Attribute Key" -msgstr "Attribut Schlüssel" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" -"Dieses Attribut wird per Regex gefiltert. Zum Beispiel FQDN für einen Host, " -"oder Manager für einen Benutzer" - -msgid "Conditions that could not be added" -msgstr "Bedingungen, die nicht hinzugefügt werden konnten" - -msgid "Number of conditions added" -msgstr "Anzahl der hinzugefügten Bedingungen" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -#, fuzzy -msgid "Default (fallback) group for entries to land" -msgstr "Vorgegebene Gruppe für Einträge" - -#, fuzzy -msgid "Display information about the default (fallback) automember groups." -msgstr "Informationen zu einer genannten Gruppe anzeigen." - -#, fuzzy -msgid "Delete an automember rule." -msgstr "" -"\n" -" Auto-Mitgliedschaftsregel löschen.\n" -" " - -msgid "List of deletions that failed" -msgstr "Liste der fehlgeschlagenen Löschvorgänge" - -#, fuzzy -msgid "Search for automember rules." -msgstr "" -"\n" -" Suche nach Auto-Mitgliedschaftsregeln.\n" -" " - -#, fuzzy -msgid "Modify an automember rule." -msgstr "" -"\n" -" Auto-Mitgliedschaftsregel bearbeiten. " - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" -"Ein Attribut-Wert-Paar löschen. Diese Option wird zuletzt angewendet,\n" -"nach allen Optionen, die etwas festlegen oder hinzufügen." - -msgid "Rights" -msgstr "Rechte" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" -"Zugriffsrechte dieses Eintrags anzeigen (erfordert --all). In der " -"Handbuchseite zu ipa finden Sie weitere Details." - -msgid "Rebuild auto membership." -msgstr "Auto-Mitgliedschaft neu erstellen" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" -"Auto-Mitgliedschaft für alle Mitglieder einer Gruppierung neu erstellen" - -msgid "Users" -msgstr "Benutzer" - -msgid "Rebuild membership for specified users" -msgstr "Auto-Mitgliedschaft für ausgewählte Benutzer neu erstellen" - -msgid "Hosts" -msgstr "Hosts" - -msgid "Rebuild membership for specified hosts" -msgstr "Auto-Mitgliedschaft für ausgewählte Hosts neu erstellen" - -msgid "No wait" -msgstr "Keine Wartezeit" - -#, fuzzy -msgid "Don't wait for rebuilding membership" -msgstr "" -"Sind Sie sicher, dass sie die Auto-Mitgliedschaft neu erstellen wollen?" - -#, fuzzy -msgid "Remove conditions from an automember rule." -msgstr "" -"\n" -" Bedingungen von einer einer Auto-Mitglieschaftsregel entfernen. " - -msgid "Conditions that could not be removed" -msgstr "Bedingungen, die nicht entfernt werden konnten" - -msgid "Number of conditions removed" -msgstr "Anzahl der entfernten Bedingungen" - -#, fuzzy -msgid "Display information about an automember rule." -msgstr "" -"\n" -" Informationen über Auto-Mitgliedschaftsregel anzeigen.\n" -" " - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" - -msgid "Key" -msgstr "Schlüssel" - -#, fuzzy -msgid "Automount key name." -msgstr "Automount-Map Name." - -msgid "Mount information" -msgstr "Einhänge-Informationen" - -msgid "description" -msgstr "Beschreibung" - -msgid "Location" -msgstr "Ort" - -msgid "Automount location name." -msgstr "Automount-Ort" - -msgid "Map" -msgstr "Karte" - -msgid "Automount map name." -msgstr "Automount-Map Name." - -#, fuzzy -msgid "Create a new automount key." -msgstr "Neuen Automount-Ort erstellen." - -#, fuzzy -msgid "Delete an automount key." -msgstr "Automount-Ort löschen." - -msgid "Continuous mode: Don't stop on errors." -msgstr "Fortlaufender Modus: Kein Abbruch bei Fehlern." - -#, fuzzy -msgid "Search for an automount key." -msgstr "Automount-Ort suchen." - -msgid "Time Limit" -msgstr "Zeitbegrenzung" - -msgid "Time limit of search in seconds" -msgstr "Zeitbegrenzung für den Suchvorgang in Sekunden" - -msgid "Size Limit" -msgstr "Größenbeschränkung" - -msgid "Maximum number of entries returned" -msgstr "Maximale Anzahl der zurückgegebenen Einträge" - -#, fuzzy -msgid "Modify an automount key." -msgstr "OTP Token bearbeiten" - -#, fuzzy -msgid "New mount information" -msgstr "Einhänge-Informationen" - -msgid "Rename" -msgstr "Umbenennen" - -#, fuzzy -msgid "Rename the automount key object" -msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" - -#, fuzzy -msgid "Display an automount key." -msgstr "Automount-Ort anzeigen." - -msgid "Create a new automount location." -msgstr "Neuen Automount-Ort erstellen." - -msgid "Delete an automount location." -msgstr "Automount-Ort löschen." - -msgid "Search for an automount location." -msgstr "Automount-Ort suchen." - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" - -msgid "Display an automount location." -msgstr "Automount-Ort anzeigen." - -#, fuzzy -msgid "Generate automount files for a specific location." -msgstr "Automount-Ort löschen." - -#, fuzzy -msgid "Create a new automount map." -msgstr "Neuen Automount-Ort erstellen." - -#, fuzzy -msgid "Create a new indirect mount point." -msgstr "Neuen Automount-Ort erstellen." - -msgid "Mount point" -msgstr "Einhängepunkt" - -#, fuzzy -msgid "Parent map" -msgstr "Automount-Map" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" - -#, fuzzy -msgid "Delete an automount map." -msgstr "Automount-Ort löschen." - -#, fuzzy -msgid "Search for an automount map." -msgstr "Automount-Ort suchen." - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" - -#, fuzzy -msgid "Modify an automount map." -msgstr "Automount-Map" - -#, fuzzy -msgid "Display an automount map." -msgstr "Automount-Ort anzeigen." - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" - -#, fuzzy -msgid "Nested Methods to execute" -msgstr "Name des zu exportierenden Methode" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -#, fuzzy -msgid "Search for existing certificates." -msgstr "Ein existierendes Zertifikat holen." - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason" -msgstr "Grund" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "Grund für den Widerruf des Zertifikats (0-10)" - -#, fuzzy -msgid "minimum serial number" -msgstr "Seriennummer" - -#, fuzzy -msgid "maximum serial number" -msgstr "Seriennummer" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -#, fuzzy -msgid "Maximum number of certs returned" -msgstr "Maximale Anzahl der zurückgegebenen Einträge" - -#, fuzzy -msgid "Take a revoked certificate off hold." -msgstr "Ein Zertifikat widerrufen." - -msgid "Serial number" -msgstr "Seriennummer" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" -"Seriennummer in Dezimalschreibweise oder (bei Präfix 0x) in " -"Hexadezimalschreibweise" - -msgid "Submit a certificate signing request." -msgstr "Eine Signaturanfrage (CSR) senden." - -msgid "CSR" -msgstr "CSR" - -msgid "Principal" -msgstr "Principal" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "Dienst-Principal für dieses Zertifikat (z.B. HTTP/test.example.com)" - -msgid "automatically add the principal if it doesn't exist" -msgstr "Den Principal automatisch hinzufügen, falls dieser nicht existiert" - -msgid "Dictionary mapping variable name to value" -msgstr "" - -msgid "Revoke a certificate." -msgstr "Ein Zertifikat widerrufen." - -msgid "Retrieve an existing certificate." -msgstr "Ein existierendes Zertifikat holen." - -msgid "Output filename" -msgstr "Name der Ausgabedatei" - -msgid "File to store the certificate in." -msgstr "Datei, in der das Zertifikat gespeichert werden soll." - -msgid "Check the status of a certificate signing request." -msgstr "Den Status der Signaturanfrage des Zertifikats überprüfen." - -msgid "Request id" -msgstr "Anfrage-ID" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "Maximum username length" -msgstr "Maximale Länge des Benutzernamens" - -msgid "Home directory base" -msgstr "Basis für Home-Verzeichnisse" - -msgid "Default location of home directories" -msgstr "Vorgegebener Ort für Home-Verzeichnisse" - -msgid "Default shell" -msgstr "Vorgabe-Shell" - -msgid "Default shell for new users" -msgstr "Vorgegebene Shell für neue Benutzer" - -msgid "Default users group" -msgstr "Vorgegebene Gruppe des Benutzers" - -msgid "Default group for new users" -msgstr "Vorgegebene Gruppe für neue Benutzer" - -msgid "Default e-mail domain" -msgstr "" - -msgid "Search time limit" -msgstr "Zeitlimit für Suche" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "Maximale Zeit in Sekunden für eine Suche (>0 oder -1 für unbegrenzt)" - -msgid "Search size limit" -msgstr "Größenlimit für Suche" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "Maximale Anzahl an Ergebnissen für Suche (-1 ist unbegrenzt)" - -msgid "User search fields" -msgstr "Benutzer Suchfelder" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" -"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach " -"Benutzern durchsucht werden" - -#, fuzzy -msgid "Group search fields" -msgstr "Benutzer Suchfelder" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" -"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach Gruppen " -"durchsucht werden" - -msgid "Enable migration mode" -msgstr "Migrationsmodus aktivieren" - -#, fuzzy -msgid "Certificate Subject base" -msgstr "Benutze Zertifikatsprofil" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "" - -msgid "Default group objectclasses" -msgstr "Standard objectclass für Gruppen" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "Standard objectclass für Gruppen (komma-separierte Liste)" - -msgid "Default user objectclasses" -msgstr "Standard objectclass für Benutzer" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "Standard objectclass für Benutzer (komma-separierte Liste)" - -msgid "Password Expiration Notification (days)" -msgstr "Benachrichtigung über den Passwortablauf (Tage)" - -msgid "Number of days's notice of impending password expiration" -msgstr "Anzahl der Tage die vor einem Passwortablauf gewarnt wird" - -msgid "Password plugin features" -msgstr "Passwort-Plugin-Funktionen" - -msgid "Extra hashes to generate in password plug-in" -msgstr "Im Passwort-Plugin zusätzlich zu erzeugende Prüfsummen" - -msgid "SELinux user map order" -msgstr "" - -#, fuzzy -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "$-getrennte Liste von SELinux Benutzern erwartet" - -msgid "Default SELinux user" -msgstr "Vorgegebener SELinux-Benutzer" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" -"Vorgegebener SELinux-Benutzer, sofern in den Zuweisungsregeln von SELinux " -"nichts anderes bestimmt ist" - -msgid "Default PAC types" -msgstr "Standard PAC-Typen" - -msgid "Default types of PAC supported for services" -msgstr "" - -msgid "Default user authentication types" -msgstr "Standard Authentifizierungsmethoden" - -#, fuzzy -msgid "Default types of supported user authentication" -msgstr "Unterstützte Authentifizierungsmethoden" - -msgid "Modify configuration options." -msgstr "Konfigurationsoptionen bearbeiten." - -msgid "Show the current configuration." -msgstr "Die aktuelle Konfiguration anzeigen." - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "Delegation name" -msgstr "Delegationsname" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "Berechtigungen (read, write). Standard ist write" - -#, fuzzy -msgid "Attributes to which the delegation applies" -msgstr "Attribute auf die die Berechtigung angewendet wird" - -#, fuzzy -msgid "Member user group" -msgstr "Mitglieds-Dienstgruppen" - -msgid "User group to apply delegation to" -msgstr "" - -#, fuzzy -msgid "Add a new delegation." -msgstr "Neue Rolle hinzufügen." - -#, fuzzy -msgid "Delete a delegation." -msgstr "Rolle löschen." - -#, fuzzy -msgid "Search for delegations." -msgstr "Nach Rollen suchen." - -#, fuzzy -msgid "Modify a delegation." -msgstr "Rolle ändern." - -#, fuzzy -msgid "Display information about a delegation." -msgstr "Informationen über eine Rolle anzeigen." - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "Global forwarders" -msgstr "" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -#, fuzzy -msgid "Forward policy" -msgstr "Passwortregel" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" - -msgid "Allow PTR sync" -msgstr "" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" - -#, fuzzy -msgid "Zone refresh interval" -msgstr "Fehler Resetintervall" - -msgid "Zone name" -msgstr "Zonenname" - -msgid "Zone name (FQDN)" -msgstr "Zonenname (FQDN)" - -msgid "Reverse zone IP network" -msgstr "" - -msgid "IP network to create reverse zone name from" -msgstr "" - -msgid "Active zone" -msgstr "Aktive Zone" - -msgid "Is zone active?" -msgstr "Ist die Zone aktiv?" - -msgid "Zone forwarders" -msgstr "" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "Record name" -msgstr "Datensatzname" - -msgid "Time to live" -msgstr "Lebensdauer" - -msgid "Records" -msgstr "Datensätze" - -msgid "Record type" -msgstr "Datensatztyp" - -#, fuzzy -msgid "Record data" -msgstr "Datensatzname" - -#, fuzzy -msgid "A record" -msgstr "Datensätze" - -#, fuzzy -msgid "Raw A records" -msgstr "Datensätze" - -#, fuzzy -msgid "A IP Address" -msgstr "IP-Adresse" - -msgid "IP Address" -msgstr "IP-Adresse" - -msgid "A Create reverse" -msgstr "" - -msgid "Create reverse record for this IP Address" -msgstr "" - -msgid "AAAA record" -msgstr "" - -#, fuzzy -msgid "Raw AAAA records" -msgstr "Datensätze" - -#, fuzzy -msgid "AAAA IP Address" -msgstr "IP-Adresse" - -msgid "AAAA Create reverse" -msgstr "" - -#, fuzzy -msgid "A6 record" -msgstr "Datensätze" - -#, fuzzy -msgid "Raw A6 records" -msgstr "Datensätze" - -#, fuzzy -msgid "A6 Record data" -msgstr "Datensatzname" - -msgid "AFSDB record" -msgstr "" - -msgid "Raw AFSDB records" -msgstr "" - -#, fuzzy -msgid "AFSDB Subtype" -msgstr "Untertyp" - -msgid "Subtype" -msgstr "Untertyp" - -#, fuzzy -msgid "AFSDB Hostname" -msgstr "Hostname" - -msgid "Hostname" -msgstr "Hostname" - -msgid "APL record" -msgstr "" - -#, fuzzy -msgid "Raw APL records" -msgstr "Datensätze" - -#, fuzzy -msgid "CERT record" -msgstr "Datensätze" - -#, fuzzy -msgid "Raw CERT records" -msgstr "Datensätze" - -#, fuzzy -msgid "CERT Certificate Type" -msgstr "Zertifikattyp" - -msgid "Certificate Type" -msgstr "Zertifikattyp" - -msgid "CERT Key Tag" -msgstr "" - -msgid "Key Tag" -msgstr "" - -#, fuzzy -msgid "CERT Algorithm" -msgstr "Algorithmus" - -msgid "Algorithm" -msgstr "Algorithmus" - -#, fuzzy -msgid "CERT Certificate/CRL" -msgstr "Zertifikat/CRL" - -msgid "Certificate/CRL" -msgstr "Zertifikat/CRL" - -msgid "CNAME record" -msgstr "" - -msgid "Raw CNAME records" -msgstr "" - -#, fuzzy -msgid "CNAME Hostname" -msgstr "Hostname" - -msgid "A hostname which this alias hostname points to" -msgstr "" - -msgid "DHCID record" -msgstr "" - -msgid "Raw DHCID records" -msgstr "" - -msgid "DLV record" -msgstr "" - -#, fuzzy -msgid "Raw DLV records" -msgstr "Datensätze" - -msgid "DLV Key Tag" -msgstr "" - -#, fuzzy -msgid "DLV Algorithm" -msgstr "Algorithmus" - -#, fuzzy -msgid "DLV Digest Type" -msgstr "Prüfsummentyp" - -msgid "Digest Type" -msgstr "Prüfsummentyp" - -#, fuzzy -msgid "DLV Digest" -msgstr "Prüfsumme" - -msgid "Digest" -msgstr "Prüfsumme" - -msgid "DNAME record" -msgstr "" - -msgid "Raw DNAME records" -msgstr "" - -#, fuzzy -msgid "DNAME Target" -msgstr "Ziel" - -msgid "Target" -msgstr "Ziel" - -msgid "DNSKEY record" -msgstr "" - -msgid "Raw DNSKEY records" -msgstr "" - -#, fuzzy -msgid "DS record" -msgstr "Datensätze" - -#, fuzzy -msgid "Raw DS records" -msgstr "Datensätze" - -msgid "DS Key Tag" -msgstr "" - -#, fuzzy -msgid "DS Algorithm" -msgstr "Algorithmus" - -#, fuzzy -msgid "DS Digest Type" -msgstr "Prüfsummentyp" - -#, fuzzy -msgid "DS Digest" -msgstr "Prüfsumme" - -msgid "HIP record" -msgstr "" - -#, fuzzy -msgid "Raw HIP records" -msgstr "Datensätze" - -msgid "IPSECKEY record" -msgstr "" - -msgid "Raw IPSECKEY records" -msgstr "" - -msgid "KEY record" -msgstr "" - -#, fuzzy -msgid "Raw KEY records" -msgstr "Datensätze" - -#, fuzzy -msgid "KX record" -msgstr "Datensätze" - -#, fuzzy -msgid "Raw KX records" -msgstr "Datensätze" - -#, fuzzy -msgid "KX Preference" -msgstr "Bevorzugung" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" - -msgid "KX Exchanger" -msgstr "" - -msgid "A host willing to act as a key exchanger" -msgstr "" - -msgid "LOC record" -msgstr "" - -#, fuzzy -msgid "Raw LOC records" -msgstr "Datensätze" - -msgid "LOC Degrees Latitude" -msgstr "" - -msgid "Degrees Latitude" -msgstr "" - -msgid "LOC Minutes Latitude" -msgstr "" - -msgid "Minutes Latitude" -msgstr "" - -msgid "LOC Seconds Latitude" -msgstr "" - -#, fuzzy -msgid "Seconds Latitude" -msgstr "Zweiter Code" - -msgid "LOC Direction Latitude" -msgstr "" - -msgid "Direction Latitude" -msgstr "" - -msgid "LOC Degrees Longitude" -msgstr "" - -msgid "Degrees Longitude" -msgstr "" - -msgid "LOC Minutes Longitude" -msgstr "" - -msgid "Minutes Longitude" -msgstr "" - -#, fuzzy -msgid "LOC Seconds Longitude" -msgstr "Zweiter Code" - -#, fuzzy -msgid "Seconds Longitude" -msgstr "Zweiter Code" - -msgid "LOC Direction Longitude" -msgstr "" - -msgid "Direction Longitude" -msgstr "" - -#, fuzzy -msgid "LOC Altitude" -msgstr "Höhe" - -msgid "Altitude" -msgstr "Höhe" - -#, fuzzy -msgid "LOC Size" -msgstr "Größe" - -msgid "Size" -msgstr "Größe" - -#, fuzzy -msgid "LOC Horizontal Precision" -msgstr "Horizontale Genauigkeit" - -msgid "Horizontal Precision" -msgstr "Horizontale Genauigkeit" - -#, fuzzy -msgid "LOC Vertical Precision" -msgstr "Vertikale Genauigkeit" - -msgid "Vertical Precision" -msgstr "Vertikale Genauigkeit" - -#, fuzzy -msgid "MX record" -msgstr "Datensätze" - -#, fuzzy -msgid "Raw MX records" -msgstr "Datensätze" - -#, fuzzy -msgid "MX Preference" -msgstr "Bevorzugung" - -msgid "MX Exchanger" -msgstr "" - -msgid "A host willing to act as a mail exchanger" -msgstr "" - -#, fuzzy -msgid "NAPTR record" -msgstr "Datensätze" - -msgid "Raw NAPTR records" -msgstr "" - -#, fuzzy -msgid "NAPTR Order" -msgstr "Reihenfolge" - -msgid "Order" -msgstr "Reihenfolge" - -#, fuzzy -msgid "NAPTR Preference" -msgstr "Bevorzugung" - -msgid "Preference" -msgstr "Bevorzugung" - -#, fuzzy -msgid "NAPTR Flags" -msgstr "Flags" - -msgid "Flags" -msgstr "Flags" - -#, fuzzy -msgid "NAPTR Service" -msgstr "Jeder Dienst" - -msgid "Service" -msgstr "Dienst" - -#, fuzzy -msgid "NAPTR Regular Expression" -msgstr "Regulärer Ausdruck" - -msgid "Regular Expression" -msgstr "Regulärer Ausdruck" - -#, fuzzy -msgid "NAPTR Replacement" -msgstr "Ersetzung" - -msgid "Replacement" -msgstr "Ersetzung" - -#, fuzzy -msgid "NS record" -msgstr "Datensätze" - -#, fuzzy -msgid "Raw NS records" -msgstr "Datensätze" - -#, fuzzy -msgid "NS Hostname" -msgstr "Hostname" - -msgid "NSEC record" -msgstr "" - -#, fuzzy -msgid "Raw NSEC records" -msgstr "Datensätze" - -msgid "NSEC3 record" -msgstr "" - -msgid "Raw NSEC3 records" -msgstr "" - -#, fuzzy -msgid "PTR record" -msgstr "Datensätze" - -#, fuzzy -msgid "Raw PTR records" -msgstr "Datensätze" - -#, fuzzy -msgid "PTR Hostname" -msgstr "Hostname" - -msgid "The hostname this reverse record points to" -msgstr "" - -#, fuzzy -msgid "RRSIG record" -msgstr "Datensätze" - -msgid "Raw RRSIG records" -msgstr "" - -#, fuzzy -msgid "RP record" -msgstr "Datensätze" - -#, fuzzy -msgid "Raw RP records" -msgstr "Datensätze" - -msgid "SIG record" -msgstr "" - -#, fuzzy -msgid "Raw SIG records" -msgstr "Datensätze" - -msgid "SPF record" -msgstr "" - -#, fuzzy -msgid "Raw SPF records" -msgstr "Datensätze" - -#, fuzzy -msgid "SRV record" -msgstr "Datensätze" - -#, fuzzy -msgid "Raw SRV records" -msgstr "Datensätze" - -#, fuzzy -msgid "SRV Priority" -msgstr "Priorität" - -msgid "Priority" -msgstr "Priorität" - -#, fuzzy -msgid "SRV Weight" -msgstr "Gewicht" - -msgid "Weight" -msgstr "Gewicht" - -#, fuzzy -msgid "SRV Port" -msgstr "Port" - -msgid "Port" -msgstr "Port" - -#, fuzzy -msgid "SRV Target" -msgstr "Ziel" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" - -msgid "SSHFP record" -msgstr "" - -msgid "Raw SSHFP records" -msgstr "" - -#, fuzzy -msgid "SSHFP Algorithm" -msgstr "Algorithmus" - -#, fuzzy -msgid "SSHFP Fingerprint Type" -msgstr "Fingerabdruck-Typ" - -msgid "Fingerprint Type" -msgstr "Fingerabdruck-Typ" - -#, fuzzy -msgid "SSHFP Fingerprint" -msgstr "SHA1-Fingerabdruck" - -msgid "Fingerprint" -msgstr "Fingerabdruck" - -#, fuzzy -msgid "TA record" -msgstr "Datensätze" - -#, fuzzy -msgid "Raw TA records" -msgstr "Datensätze" - -msgid "TLSA record" -msgstr "" - -#, fuzzy -msgid "Raw TLSA records" -msgstr "Datensätze" - -#, fuzzy -msgid "TLSA Certificate Usage" -msgstr "Zertifikate" - -#, fuzzy -msgid "Certificate Usage" -msgstr "Zertifikate" - -msgid "TLSA Selector" -msgstr "" - -#, fuzzy -msgid "Selector" -msgstr "Alle auswählen" - -msgid "TLSA Matching Type" -msgstr "" - -#, fuzzy -msgid "Matching Type" -msgstr "Gruppierungstyp" - -msgid "TLSA Certificate Association Data" -msgstr "" - -#, fuzzy -msgid "Certificate Association Data" -msgstr "Benutze Zertifikatsprofil" - -msgid "TKEY record" -msgstr "" - -#, fuzzy -msgid "Raw TKEY records" -msgstr "Datensätze" - -msgid "TSIG record" -msgstr "" - -#, fuzzy -msgid "Raw TSIG records" -msgstr "Datensätze" - -msgid "TXT record" -msgstr "" - -#, fuzzy -msgid "Raw TXT records" -msgstr "Datensätze" - -#, fuzzy -msgid "TXT Text Data" -msgstr "Textdaten" - -msgid "Text Data" -msgstr "Textdaten" - -msgid "Authoritative nameserver" -msgstr "" - -msgid "Authoritative nameserver domain name" -msgstr "" - -msgid "Administrator e-mail address" -msgstr "E-Mail-Adresse des Administrators" - -#, fuzzy -msgid "SOA serial" -msgstr "Seriennummer" - -#, fuzzy -msgid "SOA record serial number" -msgstr "Seriennummer" - -#, fuzzy -msgid "SOA refresh" -msgstr "Neu laden" - -msgid "SOA record refresh time" -msgstr "" - -msgid "SOA retry" -msgstr "" - -msgid "SOA record retry time" -msgstr "" - -msgid "SOA expire" -msgstr "" - -msgid "SOA record expire time" -msgstr "" - -msgid "SOA minimum" -msgstr "" - -msgid "How long should negative responses be cached" -msgstr "" - -msgid "Time to live for records at zone apex" -msgstr "" - -msgid "BIND update policy" -msgstr "" - -msgid "Dynamic update" -msgstr "Dynamische Aktualisierung" - -msgid "Allow dynamic updates." -msgstr "Dynamische Aktualisierungen erlauben." - -#, fuzzy -msgid "Allow query" -msgstr "Erlauben" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" - -msgid "Allow transfer" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" - -msgid "Allow in-line DNSSEC signing" -msgstr "" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "" - -msgid "NSEC3PARAM record" -msgstr "" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" - -#, fuzzy -msgid "Resolve a host name in DNS." -msgstr "Hostname erzwingen auch wenn nicht im DNS" - -#, fuzzy -msgid "Modify global DNS configuration." -msgstr "Konfigurationsoptionen bearbeiten." - -#, fuzzy -msgid "Show the current global DNS configuration." -msgstr "Die aktuelle Konfiguration anzeigen." - -#, fuzzy -msgid "Create new DNS forward zone." -msgstr "Neuen Sudo-Befehl erzeugen." - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" - -msgid "Permission value" -msgstr "Berechtigungswert" - -#, fuzzy -msgid "Delete DNS forward zone." -msgstr "Rolle löschen." - -msgid "Disable DNS Forward Zone." -msgstr "" - -msgid "Enable DNS Forward Zone." -msgstr "" - -#, fuzzy -msgid "Search for DNS forward zones." -msgstr "Nach DNS-Ressourcen suchen." - -#, fuzzy -msgid "Modify DNS forward zone." -msgstr "Rolle ändern." - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" - -#, fuzzy -msgid "Display information about a DNS forward zone." -msgstr "Informationen über eine Rolle anzeigen." - -msgid "Add new DNS resource record." -msgstr "" - -msgid "Force" -msgstr "" - -#, fuzzy -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "Hostname erzwingen auch wenn nicht im DNS" - -msgid "Structured" -msgstr "Strukturiert" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" - -#, fuzzy -msgid "Delete DNS resource record." -msgstr "Alle zugehörigen Datensätze löschen" - -msgid "Delete all associated records" -msgstr "Alle zugehörigen Datensätze löschen" - -#, fuzzy -msgid "Delete DNS record entry." -msgstr "Derzeitiger Inhalt des DNS-Datensatzes:\n" - -msgid "Search for DNS resources." -msgstr "Nach DNS-Ressourcen suchen." - -#, fuzzy -msgid "Modify a DNS resource record." -msgstr "DNS-Ressource anzeigen." - -msgid "Rename the DNS resource record object" -msgstr "" - -msgid "Display DNS resource." -msgstr "DNS-Ressource anzeigen." - -msgid "Create new DNS zone (SOA record)." -msgstr "" - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" - -msgid "Add a permission for per-zone access delegation." -msgstr "" - -msgid "Delete DNS zone (SOA record)." -msgstr "" - -#, fuzzy -msgid "Disable DNS Zone." -msgstr "Token deaktivieren" - -#, fuzzy -msgid "Enable DNS Zone." -msgstr "DNS-Zone" - -#, fuzzy -msgid "Search for DNS zones (SOA records)." -msgstr "Nach DNS-Ressourcen suchen." - -msgid "Forward zones only" -msgstr "" - -#, fuzzy -msgid "Search for forward zones only" -msgstr "Nach Rollen suchen." - -msgid "Modify DNS zone (SOA record)." -msgstr "" - -#, fuzzy -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "Hostname erzwingen auch wenn nicht im DNS" - -msgid "Remove a permission for per-zone access delegation." -msgstr "" - -#, fuzzy -msgid "Display information about a DNS zone (SOA record)." -msgstr "Informationen zu einer genannten Gruppe anzeigen." - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "Group name" -msgstr "Gruppenname" - -msgid "Group description" -msgstr "Gruppenbeschreibung" - -msgid "GID" -msgstr "Gruppen-ID" - -msgid "GID (use this option to set it manually)" -msgstr "Gruppen-ID (verwenden Sie diese Option, um die ID manuell anzugeben)" - -msgid "Member users" -msgstr "Mitglieds-Benutzer" - -msgid "Member groups" -msgstr "Mitglieds-Gruppen" - -msgid "Member of groups" -msgstr "Mitglied der Gruppen" - -msgid "Roles" -msgstr "Rollen" - -#, fuzzy -msgid "Member of netgroups" -msgstr "Mitglied der Gruppen" - -#, fuzzy -msgid "Member of Sudo rule" -msgstr "Mitglied einer Gruppe" - -#, fuzzy -msgid "Member of HBAC rule" -msgstr "Mitglieds-HBAC-Dienst" - -msgid "Indirect Member users" -msgstr "Indirekte Mitglieds-Benutzer" - -msgid "Indirect Member groups" -msgstr "Indirekte Mitglieds-Gruppen" - -#, fuzzy -msgid "Indirect Member of group" -msgstr "Indirekte Mitglieds-Gruppen" - -#, fuzzy -msgid "Indirect Member of netgroup" -msgstr "Indirekte Mitglieds-Gruppen" - -#, fuzzy -msgid "Indirect Member of role" -msgstr "Indirektes Mitglied von Rollen" - -#, fuzzy -msgid "Indirect Member of Sudo rule" -msgstr "Indirektes Mitglied von Rollen" - -#, fuzzy -msgid "Indirect Member of HBAC rule" -msgstr "Indirektes Mitglied von Rollen" - -msgid "Create a new group." -msgstr "Eine neue Gruppe erstellen." - -msgid "Create as a non-POSIX group" -msgstr "Als Nicht-POSIX-Gruppe erstellen" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Suppress processing of membership attributes." -msgstr "" - -msgid "Add members to a group." -msgstr "Mitglieder zu einer Gruppe hinzufügen." - -msgid "External member" -msgstr "Externes Mitglied" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -#, fuzzy -msgid "member user" -msgstr "Mitglieds-Benutzer" - -#, fuzzy -msgid "users to add" -msgstr "%s zum hinzufügen" - -#, fuzzy -msgid "member group" -msgstr "Mitglieds-Gruppen" - -#, fuzzy -msgid "groups to add" -msgstr "%s zum hinzufügen" - -msgid "Members that could not be added" -msgstr "Mitglieder, die nicht hinzugefügt werden konnten" - -msgid "Number of members added" -msgstr "Zahl der hinzugefügten Mitglieder" - -msgid "Delete group." -msgstr "Gruppe löschen." - -#, fuzzy -msgid "Detach a managed group from a user." -msgstr "Keine verwaltete Gruppe" - -msgid "Search for groups." -msgstr "Nach Gruppen suchen." - -msgid "search for private groups" -msgstr "nach privaten Gruppen suchen" - -#, fuzzy -msgid "search for POSIX groups" -msgstr "Nach Gruppen suchen." - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -#, fuzzy -msgid "search for non-POSIX groups" -msgstr "Nach Gruppen suchen." - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "user" -msgstr "Benutzer" - -#, fuzzy -msgid "Search for groups with these member users." -msgstr "Nach vorbereiteten Benutzern suchen." - -#, fuzzy -msgid "Search for groups without these member users." -msgstr "Nach vorbereiteten Benutzern suchen." - -msgid "group" -msgstr "Gruppe" - -#, fuzzy -msgid "Search for groups with these member groups." -msgstr "Nach Hostgruppen suchen." - -#, fuzzy -msgid "Search for groups without these member groups." -msgstr "Nach Hostgruppen suchen." - -#, fuzzy -msgid "Search for groups with these member of groups." -msgstr "Nach Hostgruppen suchen." - -msgid "Search for groups without these member of groups." -msgstr "" - -#, fuzzy -msgid "netgroup" -msgstr "Gruppe" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "role" -msgstr "Rolle" - -#, fuzzy -msgid "Search for groups with these member of roles." -msgstr "Suche nach Gruppen-Passwortregeln" - -#, fuzzy -msgid "Search for groups without these member of roles." -msgstr "Suche nach Gruppen-Passwortregeln" - -msgid "HBAC rule" -msgstr "HBAC-Regel" - -#, fuzzy -msgid "Search for groups with these member of HBAC rules." -msgstr "Nach HBAC-Regeln suchen." - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "sudo rule" -msgstr "Sudo-Regel" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "Eine Gruppe ändern." - -msgid "change to a POSIX group" -msgstr "in eine POSIC-Gruppe ändern" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -#, fuzzy -msgid "Rename the group object" -msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" - -msgid "Remove members from a group." -msgstr "Mitglieder aus einer Gruppe entfernen." - -#, fuzzy -msgid "users to remove" -msgstr "%s zum entfernen" - -#, fuzzy -msgid "groups to remove" -msgstr "%s zum entfernen" - -msgid "Members that could not be removed" -msgstr "Mitglieder, die nicht entfernt werden konnten" - -msgid "Number of members removed" -msgstr "Anzahl der entfernten Mitglieder" - -msgid "Display information about a named group." -msgstr "Informationen zu einer genannten Gruppe anzeigen." - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Rule name" -msgstr "Regelname" - -msgid "Rule type" -msgstr "Regeltyp" - -msgid "Rule type (allow)" -msgstr "Regeltyp (erlauben)" - -msgid "User category" -msgstr "Benutzerkategorie" - -msgid "User category the rule applies to" -msgstr "Benutzerkategorie, auf welche die Regel angewendet werden soll" - -msgid "Host category" -msgstr "Host-Kategorie" - -msgid "Host category the rule applies to" -msgstr "Host-Kategorie, auf welche die Regel angewendet werden soll" - -msgid "Service category" -msgstr "Dienstkategorie" - -#, fuzzy -msgid "Service category the rule applies to" -msgstr "Dienstkategorie auf die ACL angewendet wird" - -msgid "Enabled" -msgstr "Aktiviert" - -msgid "User Groups" -msgstr "Benutzergruppen" - -msgid "Host Groups" -msgstr "Host-Gruppen" - -msgid "Services" -msgstr "Dienste" - -msgid "Service Groups" -msgstr "Dienstgruppen" - -msgid "External host" -msgstr "Externer Host" - -msgid "Create a new HBAC rule." -msgstr "Neue HBAC-Regel erstellen." - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "Ziel-Hosts und Hostgruppen zu einer HBAC-Regel hinzufügen." - -#, fuzzy -msgid "member host" -msgstr "Mitglieds-Hosts" - -#, fuzzy -msgid "hosts to add" -msgstr "%s zum hinzufügen" - -#, fuzzy -msgid "member host group" -msgstr "Mitglieds-Hostgruppen" - -#, fuzzy -msgid "host groups to add" -msgstr "Hostgruppen" - -msgid "Add services to an HBAC rule." -msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." - -#, fuzzy -msgid "member HBAC service" -msgstr "Mitglieds-HBAC-Dienst" - -#, fuzzy -msgid "HBAC services to add" -msgstr "HBAC-Dienste" - -#, fuzzy -msgid "member HBAC service group" -msgstr "Mitglieds-HBAC-Servicegruppen" - -#, fuzzy -msgid "HBAC service groups to add" -msgstr "HBAC-Dienstgruppen" - -msgid "Add users and groups to an HBAC rule." -msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." - -msgid "Delete an HBAC rule." -msgstr "HBAC-Regel löschen" - -#, fuzzy -msgid "Disable an HBAC rule." -msgstr "HBAC-Regel aktivieren." - -msgid "Enable an HBAC rule." -msgstr "HBAC-Regel aktivieren." - -msgid "Search for HBAC rules." -msgstr "Nach HBAC-Regeln suchen." - -msgid "Modify an HBAC rule." -msgstr "HBAC-Regel ändern" - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "Ziel-Hosts und Hostgruppen von einer HBAC-Regel entfernen." - -#, fuzzy -msgid "hosts to remove" -msgstr "%s zum entfernen" - -#, fuzzy -msgid "host groups to remove" -msgstr "Hostgruppen" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "Dienste von einer HBAC-Gruppe entfernen." - -#, fuzzy -msgid "HBAC services to remove" -msgstr "HBAC-Dienstgruppe" - -#, fuzzy -msgid "HBAC service groups to remove" -msgstr "HBAC-Dienstgruppen" - -msgid "Remove users and groups from an HBAC rule." -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -msgid "Display the properties of an HBAC rule." -msgstr "Einstellungen der HBAC-Regel anzeigen." - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" - -msgid "Service name" -msgstr "Dienstname" - -msgid "HBAC service" -msgstr "HBAC-Dienst" - -msgid "HBAC service description" -msgstr "Beschreibung des HBAC-Dienstes" - -#, fuzzy -msgid "Member of HBAC service groups" -msgstr "Mitglieds-HBAC-Servicegruppen" - -msgid "Add a new HBAC service." -msgstr "Einen neuen HBAC-Dienst hinzufügen." - -msgid "Delete an existing HBAC service." -msgstr "Einen existierenden HBAC Dienst löschen." - -msgid "Search for HBAC services." -msgstr "Nach HBAC-Diensten suchen." - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" - -msgid "Modify an HBAC service." -msgstr "HBAC Dienst ändern" - -msgid "Display information about an HBAC service." -msgstr "Informationen zu einem HBAC-Dienst anzeigen." - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "Service group name" -msgstr "Dienstgruppenname" - -msgid "HBAC service group description" -msgstr "Beschreibung der HBAC-Dienstgruppe" - -msgid "Member HBAC service" -msgstr "Mitglieds-HBAC-Dienst" - -msgid "Add a new HBAC service group." -msgstr "Eine neue HBAC-Dienstgruppe hinzufügen." - -msgid "Add members to an HBAC service group." -msgstr "Mitglieder zur einer HBAC-Dienstgruppe hinzufügen." - -msgid "Delete an HBAC service group." -msgstr "HBAC-Dienstgruppe löschen" - -msgid "Search for an HBAC service group." -msgstr "Suche nach HBAC Dienstgruppe" - -msgid "Modify an HBAC service group." -msgstr "HBAC-Dienstgruppe bearbeiten" - -msgid "Remove members from an HBAC service group." -msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." - -msgid "Display information about an HBAC service group." -msgstr "Informationen über eine HBAC-Dienstgruppe anzeigen" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "HBAC Nutzung simulieren" - -msgid "User name" -msgstr "Benutzername" - -msgid "Target host" -msgstr "Ziel-Host" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -#, fuzzy -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "Maximale Anzahl an Ergebnissen für Suche (-1 ist unbegrenzt)" - -msgid "Warning" -msgstr "Warnung" - -msgid "Matched rules" -msgstr "Zutreffende Regeln" - -msgid "Not matched rules" -msgstr "Nicht zutreffende Regeln" - -msgid "Non-existent or invalid rules" -msgstr "Nicht-existente oder ungültige Regeln" - -msgid "Result of simulation" -msgstr "Ergebnis der Simulation" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host name" -msgstr "Hostname" - -msgid "A description of this host" -msgstr "Beschreibung des Hosts" - -msgid "Locality" -msgstr "Ort" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "Ort des Hosts (z.B. \"Baltimore, MD\")" - -#, fuzzy -msgid "Host location (e.g. \"Lab 2\")" -msgstr "Ort des Hosts (z.B. \"Baltimore, MD\")" - -msgid "Platform" -msgstr "Plattform" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "Hardwareplattform (z.B. \"Lenovo T61\")" - -msgid "Operating system" -msgstr "Betriebssystem" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "Betriebssystem und Version (z.B. \"Fedora 9\")" - -msgid "User password" -msgstr "Benutzerpasswort" - -msgid "Password used in bulk enrollment" -msgstr "" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "" - -msgid "Random password" -msgstr "Zufälliges Passwort" - -msgid "Certificate" -msgstr "Zertifikat" - -msgid "Base-64 encoded server certificate" -msgstr "Base-64-kodiertes Serverzertifikat" - -msgid "Principal name" -msgstr "Principal-Name" - -msgid "MAC address" -msgstr "MAC-Adresse" - -msgid "Hardware MAC address(es) on this host" -msgstr "" - -msgid "SSH public key" -msgstr "Öffentlicher SSH Schlüssel" - -msgid "Class" -msgstr "Klasse" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "Assigned ID View" -msgstr "" - -#, fuzzy -msgid "Requires pre-authentication" -msgstr "Authentifizierungsmethoden" - -msgid "Pre-authentication is required for the service" -msgstr "" - -#, fuzzy -msgid "Trusted for delegation" -msgstr "Delegation" - -msgid "Client credentials may be delegated to the service" -msgstr "" - -msgid "Member of host-groups" -msgstr "Mitglied von Host-Gruppen" - -#, fuzzy -msgid "Indirect Member of host-group" -msgstr "Indirekte Mitglieds-Hostgruppen" - -msgid "Keytab" -msgstr "Schlüsseltabelle" - -#, fuzzy -msgid "Managed by" -msgstr "Manager" - -#, fuzzy -msgid "Managing" -msgstr "Manager" - -msgid "Users allowed to retrieve keytab" -msgstr "Benutzer die Schlüsseltabelle abrufen dürfen" - -msgid "Groups allowed to retrieve keytab" -msgstr "Gruppen die Schlüsseltabelle abrufen dürfen" - -msgid "Hosts allowed to retrieve keytab" -msgstr "Hosts die Schlüsseltabelle abrufen dürfen" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "Hostgruppen die Schlüsseltabelle abrufen dürfen" - -msgid "Users allowed to create keytab" -msgstr "Benutzer die Schlüsseltabelle erstellen dürfen" - -msgid "Groups allowed to create keytab" -msgstr "Gruppen die Schlüsseltabelle erstellen dürfen" - -msgid "Hosts allowed to create keytab" -msgstr "Hosts die Schlüsseltabelle erstellen dürfen" - -msgid "Host Groups allowed to create keytab" -msgstr "Hostgruppen die Schlüsseltabelle erstellen dürfen" - -msgid "Add a new host." -msgstr "Neuen Host hinzufügen." - -msgid "force host name even if not in DNS" -msgstr "Hostname erzwingen auch wenn nicht im DNS" - -msgid "skip reverse DNS detection" -msgstr "" - -msgid "Add the host to DNS with this IP address" -msgstr "Host mit dieser IP zum DNS hinzufügen" - -msgid "Add hosts that can manage this host." -msgstr "Hosts hinzufügen die diesen Host verwalten dürfen." - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " -"erstellen." - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " -"erhalten." - -msgid "Delete a host." -msgstr "Host löschen." - -msgid "Remove entries from DNS" -msgstr "DNS Einträge löschen" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" -"Kerberos-Schlüssel, SSL-Zertifikat und alle Dienste des Hosts deaktivieren." - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " -"erstellen." - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " -"erhalten." - -msgid "Search for hosts." -msgstr "Nach Hosts suchen." - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" - -msgid "host group" -msgstr "Hostgruppe" - -#, fuzzy -msgid "Search for hosts with these member of host groups." -msgstr "Nach Hostgruppen suchen." - -msgid "Search for hosts without these member of host groups." -msgstr "" - -#, fuzzy -msgid "Search for hosts with these member of netgroups." -msgstr "Nach Hostgruppen suchen." - -#, fuzzy -msgid "Search for hosts without these member of netgroups." -msgstr "Nach Hostgruppen suchen." - -msgid "Search for hosts with these member of roles." -msgstr "" - -msgid "Search for hosts without these member of roles." -msgstr "" - -#, fuzzy -msgid "Search for hosts with these member of HBAC rules." -msgstr "Nach HBAC-Regeln suchen." - -msgid "Search for hosts without these member of HBAC rules." -msgstr "" - -msgid "Search for hosts with these member of sudo rules." -msgstr "" - -msgid "Search for hosts without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Search for hosts with these enrolled by users." -msgstr "Nach vorbereiteten Benutzern suchen." - -msgid "Search for hosts without these enrolled by users." -msgstr "" - -msgid "host" -msgstr "host" - -#, fuzzy -msgid "Search for hosts with these managed by hosts." -msgstr "Hosts entfernen die diesen Host verwalten dürfen." - -#, fuzzy -msgid "Search for hosts without these managed by hosts." -msgstr "Hosts entfernen die diesen Host verwalten dürfen." - -#, fuzzy -msgid "Search for hosts with these managing hosts." -msgstr "Hosts entfernen die diesen Host verwalten dürfen." - -#, fuzzy -msgid "Search for hosts without these managing hosts." -msgstr "Hosts entfernen die diesen Host verwalten dürfen." - -msgid "Modify information about a host." -msgstr "Hostinformationen ändern." - -msgid "Kerberos principal name for this host" -msgstr "Kerberos-Principal für diesen Host" - -msgid "Update DNS entries" -msgstr "DNS Einträge aktualisieren" - -msgid "Remove hosts that can manage this host." -msgstr "Hosts entfernen die diesen Host verwalten dürfen." - -msgid "Display information about a host." -msgstr "Informationen über Host anzeigen." - -#, fuzzy -msgid "file to store certificate in" -msgstr "Datei, in der das Zertifikat gespeichert werden soll." - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "Host-group" -msgstr "Hostgruppen" - -msgid "Name of host-group" -msgstr "Name der Hostgruppe" - -msgid "A description of this host-group" -msgstr "Beschreibung der Hostgruppe" - -msgid "Member hosts" -msgstr "Mitglieds-Hosts" - -msgid "Member host-groups" -msgstr "Mitglieds-Hostgruppen" - -msgid "Indirect Member hosts" -msgstr "Indirekte Mitglieds-Hosts" - -msgid "Indirect Member host-groups" -msgstr "Indirekte Mitglieds-Hostgruppen" - -msgid "Add a new hostgroup." -msgstr "Hostgruppe hinzufügen." - -msgid "Add members to a hostgroup." -msgstr "Mitglieder zur Hostgruppe hinzufügen." - -msgid "Delete a hostgroup." -msgstr "Hostgruppe löschen." - -msgid "Search for hostgroups." -msgstr "Nach Hostgruppen suchen." - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" - -#, fuzzy -msgid "Search for host groups with these member hosts." -msgstr "Nach Hostgruppen suchen." - -#, fuzzy -msgid "Search for host groups without these member hosts." -msgstr "Nach Hostgruppen suchen." - -msgid "Search for host groups with these member host groups." -msgstr "" - -msgid "Search for host groups without these member host groups." -msgstr "" - -msgid "Search for host groups with these member of host groups." -msgstr "" - -msgid "Search for host groups without these member of host groups." -msgstr "" - -msgid "Search for host groups with these member of netgroups." -msgstr "" - -msgid "Search for host groups without these member of netgroups." -msgstr "" - -msgid "Search for host groups with these member of HBAC rules." -msgstr "" - -msgid "Search for host groups without these member of HBAC rules." -msgstr "" - -msgid "Search for host groups with these member of sudo rules." -msgstr "" - -msgid "Search for host groups without these member of sudo rules." -msgstr "" - -msgid "Modify a hostgroup." -msgstr "Hostgruppe ändern." - -msgid "Remove members from a hostgroup." -msgstr "Mitglieder von Hostgruppe entfernen." - -msgid "Display information about a hostgroup." -msgstr "Informationen über die Hostgruppe anzeigen." - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "Umbenennen" - -msgid "First Posix ID of the range" -msgstr "" - -#, fuzzy -msgid "Number of IDs in the range" -msgstr "Anzahl der zurückgegebenen Einträge" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -#, fuzzy -msgid "Name of the trusted domain" -msgstr "DN der gestarteten Aufgabe" - -#, fuzzy -msgid "Range type" -msgstr "Regeltyp" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -#, fuzzy -msgid "Delete an ID range." -msgstr "Einen IPA-Dienst entfernen." - -#, fuzzy -msgid "Search for ranges." -msgstr "Nach Rollen suchen." - -#, fuzzy -msgid "Modify ID range." -msgstr "Rolle ändern." - -#, fuzzy -msgid "Display information about a range." -msgstr "Informationen über eine Rolle anzeigen." - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -#, fuzzy -msgid "Anchor to override" -msgstr "Benutzer zum Überschreiben" - -msgid "Group ID Number" -msgstr "Gruppen-ID" - -msgid "User login" -msgstr "Anmeldename" - -msgid "UID" -msgstr "UID" - -#, fuzzy -msgid "User ID Number" -msgstr "Gruppen-ID" - -msgid "GECOS" -msgstr "GECOS" - -msgid "Home directory" -msgstr "Home-Verzeichnis" - -msgid "Login shell" -msgstr "Anmeldeshell" - -msgid "ID View Name" -msgstr "" - -#, fuzzy -msgid "Add a new Group ID override." -msgstr "Gruppe zum Überschreiben" - -#, fuzzy -msgid "Delete an Group ID override." -msgstr "Einen IPA-Dienst entfernen." - -#, fuzzy -msgid "Search for an Group ID override." -msgstr "Nach IPA-Diensten suchen." - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" - -#, fuzzy -msgid "Modify an Group ID override." -msgstr "Gruppe zum Überschreiben" - -#, fuzzy -msgid "Rename the Group ID override object" -msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" - -#, fuzzy -msgid "Display information about an Group ID override." -msgstr "Informationen zu einem IPA-Dienst anzeigen." - -#, fuzzy -msgid "Add a new User ID override." -msgstr "Einen neuen HBAC-Dienst hinzufügen." - -#, fuzzy -msgid "Delete an User ID override." -msgstr "Einen IPA-Dienst entfernen." - -#, fuzzy -msgid "Search for an User ID override." -msgstr "Nach IPA-Diensten suchen." - -#, fuzzy -msgid "Modify an User ID override." -msgstr "HBAC Dienst ändern" - -msgid "Rename the User ID override object" -msgstr "" - -#, fuzzy -msgid "Display information about an User ID override." -msgstr "Informationen zu einem IPA-Dienst anzeigen." - -#, fuzzy -msgid "Add a new ID View." -msgstr "Neue Rolle hinzufügen." - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" - -msgid "hosts" -msgstr "hosts" - -#, fuzzy -msgid "Hosts to apply the ID View to" -msgstr "Hostkategorie auf die ACL angewendet wird" - -#, fuzzy -msgid "hostgroups" -msgstr "Hostgruppen" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" - -#, fuzzy -msgid "Hosts that this ID View was applied to." -msgstr "Hostkategorie auf die ACL angewendet wird" - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" - -msgid "Number of hosts the ID View was applied to:" -msgstr "" - -#, fuzzy -msgid "Delete an ID View." -msgstr "Einen IPA-Dienst entfernen." - -#, fuzzy -msgid "Search for an ID View." -msgstr "Nach IPA-Diensten suchen." - -#, fuzzy -msgid "Modify an ID View." -msgstr "Rolle ändern." - -#, fuzzy -msgid "Rename the ID View object" -msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" - -#, fuzzy -msgid "Display information about an ID View." -msgstr "Informationen zu einem IPA-Dienst anzeigen." - -#, fuzzy -msgid "Enumerate all the hosts the view applies to." -msgstr "Benutzerkategorie, auf welche die Regel angewendet werden soll" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" - -msgid "Hosts to clear (any) ID View from." -msgstr "" - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" - -msgid "Hosts that ID View was cleared from." -msgstr "" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" - -msgid "Dict of I18N messages" -msgstr "" - -msgid "Export plugin meta-data for the webUI." -msgstr "" - -msgid "Name of object to export" -msgstr "Name des zu exportierenden Objekts" - -msgid "Name of method to export" -msgstr "Name des zu exportierenden Methode" - -msgid "Name of command to export" -msgstr "Name des zu exportierenden Befehls" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" - -msgid "Join an IPA domain" -msgstr "" - -msgid "The hostname to register as" -msgstr "" - -msgid "The IPA realm" -msgstr "Der IPA-Realm" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "Hardwareplattform des Hosts (z.B. Lenovo T400)" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "Betriebssystem und Version des Hosts (z.B. Fedora 20)" - -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" - -#, fuzzy -msgid "Manage ticket policy for specific user" -msgstr "Passwortregel für eine bestimmte Gruppe bearbeiten" - -#, fuzzy -msgid "Max life" -msgstr "Maximale Fehler" - -msgid "Maximum ticket life (seconds)" -msgstr "" - -msgid "Max renew" -msgstr "" - -msgid "Maximum renewable age (seconds)" -msgstr "" - -#, fuzzy -msgid "Modify Kerberos ticket policy." -msgstr "Kerberos-Ticket Richtlinien" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "" - -#, fuzzy -msgid "Display the current Kerberos ticket policy." -msgstr "Benutzer-Datensatz für den aktuellen Kerberos-Principal anzeigen" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," -"cn=accounts' --group-container='cn=groups,cn=accounts' " -"ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' --user-ignore-" -"objectclass=radiusprofile --user-ignore-" -"attribute=radiusgroupname ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, fuzzy -msgid "Migrate users and groups from DS to IPA." -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -msgid "LDAP URI" -msgstr "LDAP-URI" - -msgid "LDAP URI of DS server to migrate from" -msgstr "" - -msgid "bind password" -msgstr "Bind-Passwort" - -msgid "Bind DN" -msgstr "Bind-DN" - -#, fuzzy -msgid "User container" -msgstr "Benutzername" - -msgid "DN of container for users in DS relative to base DN" -msgstr "" - -#, fuzzy -msgid "Group container" -msgstr "Gruppenname" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "" - -#, fuzzy -msgid "User object class" -msgstr "Standard objectclass für Benutzer" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "" - -#, fuzzy -msgid "Group object class" -msgstr "Standard objectclass für Gruppen" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "" - -#, fuzzy -msgid "Ignore user object class" -msgstr "Standard objectclass für Benutzer" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore user attribute" -msgstr "" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "" - -#, fuzzy -msgid "Ignore group object class" -msgstr "Standard objectclass für Gruppen" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "Ignore group attribute" -msgstr "" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "" - -msgid "Overwrite GID" -msgstr "" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" - -msgid "LDAP schema" -msgstr "LDAP-Schema" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" -"Das auf dem LDAP-Server verwendete Schema. Zulässige Werte sind RFC2307 und " -"RFC2307bis. Der Vorgabewert ist RFC2307bis." - -msgid "Continue" -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" - -msgid "Base DN" -msgstr "" - -msgid "Base DN on remote LDAP server" -msgstr "" - -msgid "Ignore compat plugin" -msgstr "" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" - -#, fuzzy -msgid "CA certificate" -msgstr "Zertifikat" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "" - -msgid "groups to exclude from migration" -msgstr "" - -msgid "users to exclude from migration" -msgstr "" - -msgid "Lists of objects migrated; categorized by type." -msgstr "Liste der migrierten Objekte, nach Typ geordnet." - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" -"Liste der Objekte, die nicht migriert werden konnten, nach Typ geordnet." - -#, fuzzy -msgid "False if migration mode was disabled." -msgstr "Migrationsmodus aktivieren" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" - -msgid "Show environment variables." -msgstr "Umgebungsvariablen anzeigen." - -msgid "Forward to server instead of running locally" -msgstr "Zum Server weiterleiten, anstatt lokal auszuführen" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" -"Ermittelt alle Attribute des Servers und gibt diese aus. Dies wirkt sich auf " -"die Befehlsausgabe aus." - -msgid "Total number of variables env (>= count)" -msgstr "" - -#, fuzzy -msgid "Number of variables returned (<= total)" -msgstr "Anzahl der zurückgegebenen Einträge" - -msgid "Show all loaded plugins." -msgstr "Alle geladenen Plugins anzeigen." - -msgid "Dictionary mapping plugin names to bases" -msgstr "" - -msgid "Number of plugins loaded" -msgstr "Anzahl der geladenen Plugins" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -#, fuzzy -msgid "Netgroup name" -msgstr "Gruppenname" - -#, fuzzy -msgid "Netgroup description" -msgstr "Gruppenbeschreibung" - -#, fuzzy -msgid "NIS domain name" -msgstr "Befehlsname" - -#, fuzzy -msgid "IPA unique ID" -msgstr "Eindeutige ID" - -#, fuzzy -msgid "Member netgroups" -msgstr "Mitglieds-Gruppen" - -#, fuzzy -msgid "Indirect Member netgroups" -msgstr "Indirekte Mitglieds-Gruppen" - -#, fuzzy -msgid "Member User" -msgstr "Mitglieds-Benutzer" - -#, fuzzy -msgid "Member Group" -msgstr "Mitglieds-Gruppen" - -msgid "Member Host" -msgstr "Mitglieds-Host" - -#, fuzzy -msgid "Member Hostgroup" -msgstr "Mitglieds-Hostgruppen" - -#, fuzzy -msgid "Add a new netgroup." -msgstr "Hostgruppe hinzufügen." - -#, fuzzy -msgid "Add members to a netgroup." -msgstr "Mitglieder zu einer Gruppe hinzufügen." - -#, fuzzy -msgid "member netgroup" -msgstr "Mitglieds-Gruppen" - -#, fuzzy -msgid "netgroups to add" -msgstr "%s zum hinzufügen" - -#, fuzzy -msgid "Delete a netgroup." -msgstr "Hostgruppe löschen." - -#, fuzzy -msgid "Search for a netgroup." -msgstr "Nach Gruppen suchen." - -#, fuzzy -msgid "search for managed groups" -msgstr "nach privaten Gruppen suchen" - -msgid "Search for netgroups with these member netgroups." -msgstr "" - -msgid "Search for netgroups without these member netgroups." -msgstr "" - -#, fuzzy -msgid "Search for netgroups with these member users." -msgstr "Nach vorbereiteten Benutzern suchen." - -msgid "Search for netgroups without these member users." -msgstr "" - -#, fuzzy -msgid "Search for netgroups with these member groups." -msgstr "Nach Hostgruppen suchen." - -msgid "Search for netgroups without these member groups." -msgstr "" - -msgid "Search for netgroups with these member hosts." -msgstr "" - -msgid "Search for netgroups without these member hosts." -msgstr "" - -#, fuzzy -msgid "Search for netgroups with these member host groups." -msgstr "Nach Hostgruppen suchen." - -msgid "Search for netgroups without these member host groups." -msgstr "" - -msgid "Search for netgroups with these member of netgroups." -msgstr "" - -msgid "Search for netgroups without these member of netgroups." -msgstr "" - -#, fuzzy -msgid "Modify a netgroup." -msgstr "Eine Gruppe ändern." - -#, fuzzy -msgid "Remove members from a netgroup." -msgstr "Mitglieder aus einer Gruppe entfernen." - -#, fuzzy -msgid "netgroups to remove" -msgstr "%s zum entfernen" - -#, fuzzy -msgid "Display information about a netgroup." -msgstr "Informationen zu einer genannten Gruppe anzeigen." - -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" - -msgid "TOTP authentication Window" -msgstr "TOTP Authentifizierungsfenster" - -#, fuzzy -msgid "TOTP authentication time variance (seconds)" -msgstr "TOTP Authentifizierungsfenster" - -msgid "TOTP Synchronization Window" -msgstr "TOTP Sychnronisierungsfenster" - -#, fuzzy -msgid "TOTP synchronization time variance (seconds)" -msgstr "TOTP Sychnronisierungsfenster" - -msgid "HOTP Authentication Window" -msgstr "HOTP Authentifizierungsfenster" - -#, fuzzy -msgid "HOTP authentication skip-ahead" -msgstr "TOTP Authentifizierungsfenster" - -msgid "HOTP Synchronization Window" -msgstr "HOTP Sychnronisierungsfenster" - -#, fuzzy -msgid "HOTP synchronization skip-ahead" -msgstr "HOTP Sychnronisierungsfenster" - -msgid "Modify OTP configuration options." -msgstr "OTP Konfigurationsoptionen bearbeiten." - -msgid "Show the current OTP configuration." -msgstr "Aktuelle OTP Konfiguration anzeigen" - -msgid "" "\n" "OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "Eindeutige ID" - -msgid "Type of the token" -msgstr "Token-Typ" - -msgid "Token description (informational only)" -msgstr "Token Beschriebung (nur informativ)" - -msgid "Owner" -msgstr "Eigentümer" - -msgid "Assigned user of the token (default: self)" -msgstr "Zugewiesener Token-Benutzer (Standard: selbst)" - -msgid "Manager" -msgstr "Manager" - -msgid "Assigned manager of the token (default: self)" -msgstr "Zugewiesener Token-Verwalter (Standard: selbst)" - -msgid "Disabled" -msgstr "Deaktiviert" - -msgid "Mark the token as disabled (default: false)" -msgstr "Token als deaktiviert markieren (Standard: false)" - -msgid "Validity start" -msgstr "Gültig ab" - -msgid "First date/time the token can be used" -msgstr "Ab diesem Datum kann der Token benutzt werden" - -msgid "Validity end" -msgstr "Gültig bis" - -msgid "Last date/time the token can be used" -msgstr "Bis zu diesem Datum kann der Token benutzt werden" - -msgid "Vendor" -msgstr "Hersteller" - -msgid "Token vendor name (informational only)" -msgstr "Token-Hersteller (nur informativ)" - -msgid "Model" -msgstr "Modell" - -msgid "Token model (informational only)" -msgstr "Token-Modell (nur informativ)" - -msgid "Serial" -msgstr "Seriennummer" - -msgid "Token serial (informational only)" -msgstr "Token-Seriennummer (nur informativ)" - -msgid "Token secret (Base32; default: random)" -msgstr "Token-Geheimis (Base32; Standard: zufällig)" - -msgid "Token hash algorithm" -msgstr "Token Hash-Algorithmus" - -msgid "Digits" -msgstr "Zeichen" - -msgid "Number of digits each token code will have" -msgstr "Zeichenanzahl die jeder Token-Code haben wird" - -msgid "Clock offset" -msgstr "Zeit-Offset" - -msgid "TOTP token / IPA server time difference" -msgstr "Differenz zwischen Token und Serverzeit" - -msgid "Clock interval" -msgstr "Zeitintervall" - -msgid "Length of TOTP token code validity" -msgstr "Dauer die ein TOTP Code gültig ist " - -msgid "Counter" -msgstr "Zähler" - -msgid "Initial counter for the HOTP token" -msgstr "Startwert des HOTP-Zählers" - -msgid "Add a new OTP token." -msgstr "Neuen OTP-Token hinzufügen" - -msgid "(deprecated)" -msgstr "(veraltet)" - -msgid "Do not display QR code" -msgstr "Keinen QR Code zeigen" - -msgid "Add users that can manage this token." -msgstr "Nutzer hinzufügen die diesen Token verwalten können" - -msgid "Delete an OTP token." -msgstr "OTP Token löschen" - -msgid "Search for OTP token." -msgstr "OTP Token suchen." - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "OTP Token bearbeiten" - -#, fuzzy -msgid "Rename the OTP token object" -msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" - -msgid "Display information about an OTP token." -msgstr "Informationen über OTP Token anzeigen." - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "Set a user's password." -msgstr "Passwort für einen Benutzer setzen." - -msgid "New Password" -msgstr "Neues Passwort" - -msgid "Current Password" -msgstr "Aktuelles Passwort" - -msgid "OTP" -msgstr "OTP" - -msgid "One Time Password" -msgstr "Einmalpasswort" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -"\n" -"Managed permissions\n" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "Permission name" -msgstr "Berechtigungsname" - -msgid "Granted rights" -msgstr "" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" - -#, fuzzy -msgid "Effective attributes" -msgstr "Attribute" - -#, fuzzy -msgid "All attributes to which the permission applies" -msgstr "Attribute auf die die Berechtigung angewendet wird" - -#, fuzzy -msgid "Included attributes" -msgstr "Aktivierte einschließen" - -#, fuzzy -msgid "User-specified attributes to which the permission applies" -msgstr "Attribute auf die die Berechtigung angewendet wird" - -#, fuzzy -msgid "Excluded attributes" -msgstr "Attribute" - -#, fuzzy -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "Attribute auf die die Berechtigung angewendet wird" - -#, fuzzy -msgid "Default attributes" -msgstr "Attribute" - -#, fuzzy -msgid "Attributes to which the permission applies by default" -msgstr "Attribute auf die die Berechtigung angewendet wird" - -#, fuzzy -msgid "Bind rule type" -msgstr "Regeltyp" - -#, fuzzy -msgid "Subtree to apply permissions to" -msgstr "Subtree auf den ACI angewendet wird" - -msgid "Extra target filter" -msgstr "" - -#, fuzzy -msgid "Raw target filter" -msgstr "Filter ist leer" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" - -#, fuzzy -msgid "Target DN" -msgstr "Ziel" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" - -#, fuzzy -msgid "Member of group" -msgstr "Mitglied der Gruppen" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "" - -msgid "User group to apply permissions to (sets target)" -msgstr "" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "" - -msgid "Deprecated; use extratargetfilter" -msgstr "" - -#, fuzzy -msgid "Deprecated; use ipapermlocation" -msgstr "Veraltete Optionen" - -msgid "Deprecated; use ipapermright" -msgstr "" - -msgid "Granted to Privilege" -msgstr "" - -msgid "Indirect Member of roles" -msgstr "Indirektes Mitglied von Rollen" - -#, fuzzy -msgid "Add a new permission." -msgstr "Neue Rolle hinzufügen." - -#, fuzzy -msgid "Add members to a permission." -msgstr "Mitglieder zur Rolle hinzufügen." - -#, fuzzy -msgid "member privilege" -msgstr "Anzahl der hinzugefügten Berechtigungen" - -#, fuzzy -msgid "privileges to add" -msgstr "Berechtigungen zur Rolle hinzufügen." - -msgid "Add a system permission without an ACI (internal command)" -msgstr "" - -#, fuzzy -msgid "Permission flags" -msgstr "Berechtigungen" - -#, fuzzy -msgid "Delete a permission." -msgstr "Rolle löschen." - -msgid "force delete of SYSTEM permissions" -msgstr "" - -#, fuzzy -msgid "Search for permissions." -msgstr "Nach Rollen suchen." - -#, fuzzy -msgid "Modify a permission." -msgstr "Rolle ändern." - -#, fuzzy -msgid "Rename the permission object" -msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" - -#, fuzzy -msgid "Remove members from a permission." -msgstr "Mitglieder von Rolle entfernen." - -#, fuzzy -msgid "privileges to remove" -msgstr "Berechtigungen zur Rolle hinzufügen." - -#, fuzzy -msgid "Display information about a permission." -msgstr "Informationen über eine Rolle anzeigen." - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "Ping a remote server." -msgstr "" - -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "" - -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" - -#, fuzzy -msgid "Privilege name" -msgstr "Principal-Name" - -#, fuzzy -msgid "Privilege description" -msgstr "Beschreibung des HBAC-Dienstes" - -msgid "Granting privilege to roles" -msgstr "Gebe Berechtigung den Rollen" - -#, fuzzy -msgid "Add a new privilege." -msgstr "Neue Rolle hinzufügen." - -#, fuzzy -msgid "Add members to a privilege." -msgstr "Mitglieder zur Rolle hinzufügen." - -#, fuzzy -msgid "member role" -msgstr "Mitglied %s" - -#, fuzzy -msgid "roles to add" -msgstr "%s zum hinzufügen" - -#, fuzzy -msgid "Add permissions to a privilege." -msgstr "Berechtigungen zur Rolle hinzufügen." - -msgid "permission" -msgstr "Berechtigung" - -msgid "permissions" -msgstr "Berechtigungen" - -#, fuzzy -msgid "Number of permissions added" -msgstr "Anzahl der hinzugefügten Bedingungen" - -#, fuzzy -msgid "Delete a privilege." -msgstr "Rolle löschen." - -#, fuzzy -msgid "Search for privileges." -msgstr "Nach Rollen suchen." - -#, fuzzy -msgid "Modify a privilege." -msgstr "Rolle ändern." - -#, fuzzy -msgid "Rename the privilege object" -msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" - -#, fuzzy -msgid "Remove members from a privilege" -msgstr "Mitglieder von Rolle entfernen." - -#, fuzzy -msgid "roles to remove" -msgstr "%s zum entfernen" - -#, fuzzy -msgid "Remove permissions from a privilege." -msgstr "Berechtigungen von Rolle entfernen." - -#, fuzzy -msgid "Number of permissions removed" -msgstr "Anzahl der entfernten Bedingungen" - -#, fuzzy -msgid "Display information about a privilege." -msgstr "Informationen über eine Rolle anzeigen." - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Group" -msgstr "Gruppe" - -msgid "Manage password policy for specific group" -msgstr "Passwortregel für eine bestimmte Gruppe bearbeiten" - -msgid "Max lifetime (days)" -msgstr "Max Dauer (Tage)" - -msgid "Maximum password lifetime (in days)" -msgstr "Maximale Passwortlebensdauer (in Tagen)" - -msgid "Min lifetime (hours)" -msgstr "Min Dauer (Stunden)" - -msgid "Minimum password lifetime (in hours)" -msgstr "Minimale Passwortlebensdauer (in Stunden)" - -msgid "History size" -msgstr "Historie" - -msgid "Password history size" -msgstr "Größe der Passworthistorie" - -msgid "Character classes" -msgstr "Zeichenklassen" - -msgid "Minimum number of character classes" -msgstr "Minimale Anzahl an Zeichenklassen" - -msgid "Min length" -msgstr "Min Länge" - -msgid "Minimum length of password" -msgstr "Minimale Passwortlänge" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "Priorität der Regel (höhere Zahl meint niedrigere Priorität)" - -msgid "Max failures" -msgstr "Maximale Fehler" - -msgid "Consecutive failures before lockout" -msgstr "Aufeinanderfolgende Falscheingaben bevor gesperrt wird" - -msgid "Failure reset interval" -msgstr "Fehler Resetintervall" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "Nach dieser Zeit wird der Fehlerzähler zurückgesetzt" - -msgid "Lockout duration" -msgstr "Sperrdauer" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "Während dieser Zeit wird der Login gesperrt (Sekunden)" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" - -msgid "Add a new group password policy." -msgstr "Neue Gruppen-Passwortregel hinzufügen." - -msgid "Delete a group password policy." -msgstr "Gruppen-Passwortregel löschen." - -msgid "Search for group password policies." -msgstr "Suche nach Gruppen-Passwortregeln" - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" - -msgid "Modify a group password policy." -msgstr "Gruppen-Passwortregel bearbeiten." - -msgid "Display information about password policy." -msgstr "Informationen über Passwortregel anzeigen." - -msgid "User" -msgstr "Benutzer" - -msgid "Display effective policy for a specific user" -msgstr "Aktive Passwortregel für einen bestimmten Benutzer anzeigen" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -#, fuzzy -msgid "RADIUS proxy server name" -msgstr "RADIUS-Proxy Benutzername" - -#, fuzzy -msgid "A description of this RADIUS proxy server" -msgstr "Beschreibung des Hosts" - -msgid "Server" -msgstr "Server" - -msgid "The hostname or IP (with or without port)" -msgstr "" - -msgid "Secret" -msgstr "" - -msgid "The secret used to encrypt data" -msgstr "" - -#, fuzzy -msgid "Timeout" -msgstr "Aktuelle Zeit" - -msgid "The total timeout across all retries (in seconds)" -msgstr "" - -#, fuzzy -msgid "Retries" -msgstr "Einträge" - -#, fuzzy -msgid "The number of times to retry authentication" -msgstr "Unterstützte Authentifizierungsmethoden" - -#, fuzzy -msgid "User attribute" -msgstr "Attribut" - -msgid "The username attribute on the user object" -msgstr "" - -#, fuzzy -msgid "Add a new RADIUS proxy server." -msgstr "Einen neuen HBAC-Dienst hinzufügen." - -#, fuzzy -msgid "Delete a RADIUS proxy server." -msgstr "RADIUS-Proxy Benutzername" - -#, fuzzy -msgid "Search for RADIUS proxy servers." -msgstr "Nach IPA-Diensten suchen." - -#, fuzzy -msgid "Modify a RADIUS proxy server." -msgstr "RADIUS-Proxy Benutzername" - -msgid "Rename the RADIUS proxy server object" -msgstr "" - -#, fuzzy -msgid "Display information about a RADIUS proxy server." -msgstr "Informationen zu einem IPA-Dienst anzeigen." - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Domain" -msgstr "Domain" - -#, fuzzy -msgid "Add domain" -msgstr "Mehrere hinzufügen" - -#, fuzzy -msgid "Delete domain" -msgstr "Sudo-Befehl löschen." - -#, fuzzy -msgid "Modify realm domains." -msgstr "Sudo-Befehl ändern." - -#, fuzzy -msgid "Force adding domain even if not in DNS" -msgstr "Hostname erzwingen auch wenn nicht im DNS" - -msgid "Display the list of realm domains." -msgstr "" - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" - -msgid "Role name" -msgstr "Rollenname" - -msgid "A description of this role-group" -msgstr "Beschreibung der Rollengruppe" - -msgid "Privileges" -msgstr "" - -msgid "Member services" -msgstr "Mitglieds-Dienste" - -msgid "Add a new role." -msgstr "Neue Rolle hinzufügen." - -msgid "Add members to a role." -msgstr "Mitglieder zur Rolle hinzufügen." - -#, fuzzy -msgid "member service" -msgstr "Mitglieds-Dienste" - -#, fuzzy -msgid "services to add" -msgstr "Dienste" - -msgid "Add privileges to a role." -msgstr "Berechtigungen zur Rolle hinzufügen." - -msgid "privilege" -msgstr "" - -msgid "privileges" -msgstr "" - -msgid "Number of privileges added" -msgstr "Anzahl der hinzugefügten Berechtigungen" - -msgid "Delete a role." -msgstr "Rolle löschen." - -msgid "Search for roles." -msgstr "Nach Rollen suchen." - -msgid "Modify a role." -msgstr "Rolle ändern." - -#, fuzzy -msgid "Rename the role object" -msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" - -msgid "Remove members from a role." -msgstr "Mitglieder von Rolle entfernen." - -#, fuzzy -msgid "services to remove" -msgstr "%s zum entfernen" - -msgid "Remove privileges from a role." -msgstr "Berechtigungen von Rolle entfernen." - -msgid "Number of privileges removed" -msgstr "Anzahl der entfernten Berechtigungen" - -msgid "Display information about a role." -msgstr "Informationen über eine Rolle anzeigen." - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -#, fuzzy -msgid "Self-service name" -msgstr "Dienstname" - -#, fuzzy -msgid "Attributes to which the permission applies." -msgstr "Attribute auf die die Berechtigung angewendet wird" - -#, fuzzy -msgid "Add a new self-service permission." -msgstr "Eine neue HBAC-Dienstgruppe hinzufügen." - -#, fuzzy -msgid "Delete a self-service permission." -msgstr "HBAC-Dienstgruppe löschen" - -#, fuzzy -msgid "Search for a self-service permission." -msgstr "Nach IPA-Diensten suchen." - -#, fuzzy -msgid "Modify a self-service permission." -msgstr "HBAC-Dienstgruppe bearbeiten" - -#, fuzzy -msgid "Display information about a self-service permission." -msgstr "Informationen über eine HBAC-Dienstgruppe anzeigen" - -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" - -#, fuzzy -msgid "SELinux User" -msgstr "Vorgegebener SELinux-Benutzer" - -msgid "HBAC Rule" -msgstr "HBAC-Regel" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "HBAC Regel die Benutzer, Gruppen und Hostgruppen definiert" - -#, fuzzy -msgid "Create a new SELinux User Map." -msgstr "Eine neue Gruppe erstellen." - -#, fuzzy -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "Ziel-Hosts und Hostgruppen zu einer HBAC-Regel hinzufügen." - -#, fuzzy -msgid "Add users and groups to an SELinux User Map rule." -msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." - -#, fuzzy -msgid "Delete a SELinux User Map." -msgstr "Einen Benutzer löschen." - -#, fuzzy -msgid "Disable an SELinux User Map rule." -msgstr "Ein Benutzerkonto deaktivieren." - -#, fuzzy -msgid "Enable an SELinux User Map rule." -msgstr "Ein Benutzerkonto aktivieren." - -#, fuzzy -msgid "Search for SELinux User Maps." -msgstr "Nach Benutzern suchen." - -#, fuzzy -msgid "Modify a SELinux User Map." -msgstr "Einen Benutzer bearbeiten." - -#, fuzzy -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "Ziel-Hosts und Hostgruppen von einer HBAC-Regel entfernen." - -#, fuzzy -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, fuzzy -msgid "Display the properties of a SELinux User Map rule." -msgstr "Einstellungen der HBAC-Regel anzeigen." - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "Service principal" -msgstr "Dienst-Principal" - -#, fuzzy -msgid "PAC type" -msgstr "Standard PAC-Typen" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" - -msgid "Add a new IPA new service." -msgstr "Einen neuen IPA-Dienst hinzufügen." - -#, fuzzy -msgid "force principal name even if not in DNS" -msgstr "Hostname erzwingen auch wenn nicht im DNS" - -msgid "Add hosts that can manage this service." -msgstr "Hosts hinzufügen, die diesen Dienst verwalten können." - -#, fuzzy -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " -"erstellen." - -#, fuzzy -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " -"erhalten." - -msgid "Delete an IPA service." -msgstr "Einen IPA-Dienst entfernen." - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "" -"Den Kerberos-Schlüssel und das SSL-Zertifikat eines Dienstes deaktivieren." - -#, fuzzy -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " -"erstellen." - -#, fuzzy -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " -"erhalten." - -msgid "Search for IPA services." -msgstr "Nach IPA-Diensten suchen." - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" - -msgid "Search for services with these managed by hosts." -msgstr "" - -msgid "Search for services without these managed by hosts." -msgstr "" - -msgid "Modify an existing IPA service." -msgstr "Einen existierenden IPA-Dienst bearbeiten." - -msgid "Remove hosts that can manage this service." -msgstr "Hosts entfernen, die diesen Dienst verwalten können." - -msgid "Display information about an IPA service." -msgstr "Informationen zu einem IPA-Dienst anzeigen." - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" - -msgid "Sudo Command" -msgstr "Sudo-Befehl" - -msgid "A description of this command" -msgstr "Eine Beschreibung dieses Befehls" - -msgid "Sudo Command Groups" -msgstr "Sudo-Befehlsgruppen" - -msgid "Create new Sudo Command." -msgstr "Neuen Sudo-Befehl erzeugen." - -msgid "Delete Sudo Command." -msgstr "Sudo-Befehl löschen." - -msgid "Search for Sudo Commands." -msgstr "Nach Sudo-Befehlen suchen." - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" - -msgid "Modify Sudo Command." -msgstr "Sudo-Befehl ändern." - -msgid "Display Sudo Command." -msgstr "Sudo-Befehl anzeigen." - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "Sudo Command Group" -msgstr "Sudo-Befehlsgruppe" - -msgid "Commands" -msgstr "Befehle" - -#, fuzzy -msgid "Member Sudo commands" -msgstr "Sudo-Befehle" - -#, fuzzy -msgid "Create new Sudo Command Group." -msgstr "Neuen Sudo-Befehl erzeugen." - -#, fuzzy -msgid "Add members to Sudo Command Group." -msgstr "Mitglieder zu einer Gruppe hinzufügen." - -#, fuzzy -msgid "member sudo command" -msgstr "Sudo-Befehl" - -#, fuzzy -msgid "sudo commands to add" -msgstr "Sudo-Befehle" - -#, fuzzy -msgid "Delete Sudo Command Group." -msgstr "Sudo-Befehl löschen." - -#, fuzzy -msgid "Search for Sudo Command Groups." -msgstr "Nach Sudo-Befehlen suchen." - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" - -#, fuzzy -msgid "Modify Sudo Command Group." -msgstr "Sudo-Befehl ändern." - -#, fuzzy -msgid "Remove members from Sudo Command Group." -msgstr "Mitglieder aus einer Gruppe entfernen." - -#, fuzzy -msgid "sudo commands to remove" -msgstr "Sudo-Befehlsgruppe" - -#, fuzzy -msgid "Display Sudo Command Group." -msgstr "Sudo-Befehl anzeigen." - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, fuzzy -msgid "Domain NetBIOS name" -msgstr "Domäne aktiviert" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -#, fuzzy -msgid "NetBIOS name" -msgstr "Neuer ACI-Name" - -#, fuzzy -msgid "Domain GUID" -msgstr "Domain" - -msgid "Fallback primary group" -msgstr "" - -#, fuzzy -msgid "Domain name" -msgstr "Domäne aktiviert" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -#, fuzzy -msgid "Delete a trust." -msgstr "Host löschen." - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -#, fuzzy -msgid "Search for trusts." -msgstr "Nach Hosts suchen." - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -#, fuzzy -msgid "Display information about a trust." -msgstr "Informationen über Host anzeigen." - -#, fuzzy -msgid "Modify global trust configuration." -msgstr "Konfigurationsoptionen bearbeiten." - -#, fuzzy -msgid "Show global trust configuration." -msgstr "Die aktuelle Konfiguration anzeigen." - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "Vorname" - -msgid "Last name" -msgstr "Nachname" - -msgid "Full name" -msgstr "Vollständiger Name" - -msgid "Display name" -msgstr "Angezeigter Name" - -msgid "Initials" -msgstr "Initialen" - -msgid "Kerberos principal" -msgstr "Kerberos-Principal" - -msgid "Kerberos principal expiration" -msgstr "Kerberos-Principal Ablauf" - -msgid "Email address" -msgstr "Email-Adresse" - -msgid "Prompt to set the user password" -msgstr "Zum Setzen des Passworts auffordern" - -msgid "Generate a random user password" -msgstr "Ein zufälliges Benutzerpasswort erzeugen" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" -"Benutzer-ID (wird durch das System zugewiesen, falls diese nicht angegeben " -"wird)" - -msgid "Street address" -msgstr "Straße" - -msgid "City" -msgstr "Ort" - -msgid "State/Province" -msgstr "Staat/Bundesland" - -msgid "ZIP" -msgstr "Postleitzahl" - -msgid "Telephone Number" -msgstr "Telefonnummer" - -msgid "Mobile Telephone Number" -msgstr "Mobiltelefonnummer" - -msgid "Pager Number" -msgstr "Pagernummer" - -msgid "Fax Number" -msgstr "Faxnummer" - -msgid "Org. Unit" -msgstr "Org. Einheit" - -msgid "Job Title" -msgstr "Tätigkeit" - -msgid "Car License" -msgstr "Kfz-Kennzeichen" - -msgid "Account disabled" -msgstr "Konto ist deaktiviert" - -msgid "User authentication types" -msgstr "Authentifizierungsmethoden" - -msgid "Types of supported user authentication" -msgstr "Unterstützte Authentifizierungsmethoden" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "RADIUS-Proxy Konfiguration" - -msgid "RADIUS proxy username" -msgstr "RADIUS-Proxy Benutzername" - -msgid "Department Number" -msgstr "Abteilungsnummer" - -msgid "Employee Number" -msgstr "Personalnummer" - -msgid "Employee Type" -msgstr "Personaltyp" - -msgid "Preferred Language" -msgstr "Bevorzugte Sprache" - -msgid "Kerberos keys available" -msgstr "Kerberos-Schlüssel verfügbar" - -msgid "Add a new user." -msgstr "Einen neuen Benutzer hinzufügen." - -#, fuzzy -msgid "Don't create user private group" -msgstr "nach privaten Gruppen suchen" - -msgid "Delete a user." -msgstr "Einen Benutzer löschen." - -msgid "Disable a user account." -msgstr "Ein Benutzerkonto deaktivieren." - -msgid "Enable a user account." -msgstr "Ein Benutzerkonto aktivieren." - -msgid "Search for users." -msgstr "Nach Benutzern suchen." - -msgid "Self" -msgstr "Selbst" - -msgid "Display user record for current Kerberos principal" -msgstr "Benutzer-Datensatz für den aktuellen Kerberos-Principal anzeigen" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -#, fuzzy -msgid "Search for users with these member of groups." -msgstr "nach privaten Gruppen suchen" - -#, fuzzy -msgid "Search for users without these member of groups." -msgstr "Nach Hostgruppen suchen." - -#, fuzzy -msgid "Search for users with these member of netgroups." -msgstr "Nach Hostgruppen suchen." - -#, fuzzy -msgid "Search for users without these member of netgroups." -msgstr "Nach Hostgruppen suchen." - -#, fuzzy -msgid "Search for users with these member of roles." -msgstr "" -"\n" -" Suche nach Auto-Mitgliedschaftsregeln.\n" -" " - -#, fuzzy -msgid "Search for users without these member of roles." -msgstr "" -"\n" -" Suche nach Auto-Mitgliedschaftsregeln.\n" -" " - -#, fuzzy -msgid "Search for users with these member of HBAC rules." -msgstr "Nach HBAC-Regeln suchen." - -#, fuzzy -msgid "Search for users without these member of HBAC rules." -msgstr "" -"\n" -" Suche nach Auto-Mitgliedschaftsregeln.\n" -" " - -msgid "Search for users with these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Search for users without these member of sudo rules." -msgstr "" -"\n" -" Suche nach Auto-Mitgliedschaftsregeln.\n" -" " - -msgid "Modify a user." -msgstr "Einen Benutzer bearbeiten." - -#, fuzzy -msgid "Rename the user object" -msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" - -msgid "Display information about a user." -msgstr "Informationen zu einem Benutzer anzeigen." - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "Command category" -msgstr "Befehlskategorie" - -msgid "Command category the rule applies to" -msgstr "Befehlskategorie, auf die die Regel angewendet werden soll" - -#, fuzzy -msgid "RunAs User category" -msgstr "Benutzerkategorie" - -#, fuzzy -msgid "RunAs User category the rule applies to" -msgstr "Benutzerkategorie, auf welche die Regel angewendet werden soll" - -#, fuzzy -msgid "RunAs Group category" -msgstr "Benutzerkategorie" - -#, fuzzy -msgid "RunAs Group category the rule applies to" -msgstr "Benutzerkategorie, auf welche die Regel angewendet werden soll" - -#, fuzzy -msgid "Sudo order" -msgstr "Sudo-Befehl" - -msgid "integer to order the Sudo rules" -msgstr "" - -msgid "External User" -msgstr "Externer Benutzer" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -#, fuzzy -msgid "Host Masks" -msgstr "Hosts" - -#, fuzzy -msgid "Sudo Allow Commands" -msgstr "Sudo-Befehle" - -#, fuzzy -msgid "Sudo Deny Commands" -msgstr "Sudo-Befehle" - -#, fuzzy -msgid "Sudo Allow Command Groups" -msgstr "Sudo-Befehlsgruppen" - -#, fuzzy -msgid "Sudo Deny Command Groups" -msgstr "Sudo-Befehlsgruppen" - -#, fuzzy -msgid "RunAs Users" -msgstr "Benutzer" - -#, fuzzy -msgid "Run as a user" -msgstr "Vorbereiteter Benutzer" - -msgid "Groups of RunAs Users" -msgstr "" - -msgid "Run as any user within a specified group" -msgstr "" - -#, fuzzy -msgid "RunAs External User" -msgstr "Externer Benutzer" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -#, fuzzy -msgid "External Groups of RunAs Users" -msgstr "Externer Benutzer" - -msgid "External Groups of users that the command can run as" -msgstr "" - -#, fuzzy -msgid "RunAs Groups" -msgstr "Host-Gruppen" - -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -#, fuzzy -msgid "RunAs External Group" -msgstr "Externe Vertrauensstellung" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -msgid "Sudo Option" -msgstr "Sudo-Option" - -#, fuzzy -msgid "Create new Sudo Rule." -msgstr "Neuen Sudo-Befehl erzeugen." - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "member sudo command group" -msgstr "Sudo-Befehlsgruppe" - -#, fuzzy -msgid "sudo command groups to add" -msgstr "Sudo-Befehlsgruppen" - -#, fuzzy -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "Ziel-Hosts und Hostgruppen zu einer HBAC-Regel hinzufügen." - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "" - -msgid "Add group for Sudo to execute as." -msgstr "" - -#, fuzzy -msgid "Add users and groups for Sudo to execute as." -msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." - -#, fuzzy -msgid "Add users and groups affected by Sudo Rule." -msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." - -#, fuzzy -msgid "Delete Sudo Rule." -msgstr "Eine Sudo-Regel deaktivieren." - -msgid "Disable a Sudo Rule." -msgstr "Eine Sudo-Regel deaktivieren." - -msgid "Enable a Sudo Rule." -msgstr "Eine Sudo-Regel aktivieren." - -msgid "Search for Sudo Rule." -msgstr "Nach Sudo-Regel suchen." - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -#, fuzzy -msgid "Modify Sudo Rule." -msgstr "Sudo-Regel anzeigen." - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "sudo command groups to remove" -msgstr "Sudo-Befehlsgruppen" - -#, fuzzy -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "Ziel-Hosts und Hostgruppen von einer HBAC-Regel entfernen." - -#, fuzzy -msgid "Remove an option from Sudo Rule." -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -msgid "Remove group for Sudo to execute as." -msgstr "" - -#, fuzzy -msgid "Remove users and groups for Sudo to execute as." -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, fuzzy -msgid "Remove users and groups affected by Sudo Rule." -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -msgid "Display Sudo Rule." -msgstr "Sudo-Regel anzeigen." - -#, fuzzy -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "Zeitbegrenzung für den Suchvorgang in Sekunden" - -#, fuzzy -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "Maximale Anzahl der zurückgegebenen Einträge" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "ACL name" -msgstr "ACL Name" - -msgid "Profile category" -msgstr "Profilkategorie" - -msgid "Profile category the ACL applies to" -msgstr "Profilkategorie auf die ACL angewendet wird" - -msgid "User category the ACL applies to" -msgstr "Benutzerkategorie auf die ACL angewendet wird" - -msgid "Host category the ACL applies to" -msgstr "Hostkategorie auf die ACL angewendet wird" - -msgid "Service category the ACL applies to" -msgstr "Dienstkategorie auf die ACL angewendet wird" - -msgid "Profiles" -msgstr "Profile" - -msgid "Create a new CA ACL." -msgstr "Erstelle eine neue CA ACL." - -#, fuzzy -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "Ziel-Hosts und Hostgruppen zu einer HBAC-Regel hinzufügen." - -#, fuzzy -msgid "Add profiles to a CA ACL." -msgstr "Berechtigungen zur Rolle hinzufügen." - -#, fuzzy -msgid "member Certificate Profile" -msgstr "Benutze Zertifikatsprofil" - -#, fuzzy -msgid "Certificate Profiles to add" -msgstr "Benutze Zertifikatsprofil" - -#, fuzzy -msgid "Add services to a CA ACL." -msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." - -#, fuzzy -msgid "Add users and groups to a CA ACL." -msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." - -msgid "Delete a CA ACL." -msgstr "CA ACL löschen." - -#, fuzzy -msgid "Disable a CA ACL." -msgstr "CA ACL löschen." - -#, fuzzy -msgid "Enable a CA ACL." -msgstr "CA ACL löschen." - -#, fuzzy -msgid "Search for CA ACLs." -msgstr "Nach HBAC-Regeln suchen." - -msgid "Modify a CA ACL." -msgstr "CA ACL ändern" - -#, fuzzy -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "Ziel-Hosts und Hostgruppen von einer HBAC-Regel entfernen." - -#, fuzzy -msgid "Remove profiles from a CA ACL." -msgstr "Berechtigungen von Rolle entfernen." - -#, fuzzy -msgid "Certificate Profiles to remove" -msgstr "Benutze Zertifikatsprofil" - -#, fuzzy -msgid "Remove services from a CA ACL." -msgstr "Berechtigungen von Rolle entfernen." - -#, fuzzy -msgid "Remove users and groups from a CA ACL." -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, fuzzy -msgid "Display the properties of a CA ACL." -msgstr "Einstellungen der HBAC-Regel anzeigen." - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "Principal für dieses Zertifikat (z.B. HTTP/test.example.com)" - -msgid "Profile ID" -msgstr "Profil-ID" - -msgid "Certificate Profile to use" -msgstr "Benutze Zertifikatsprofil" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -#, fuzzy -msgid "Profile description" -msgstr "Gruppenbeschreibung" - -#, fuzzy -msgid "Brief description of this profile" -msgstr "Beschreibung der Rollengruppe" - -#, fuzzy -msgid "Store issued certificates" -msgstr "Kein gültiges Zertifikat" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -#, fuzzy -msgid "Delete a Certificate Profile." -msgstr "Benutze Zertifikatsprofil" - -#, fuzzy -msgid "Search for Certificate Profiles." -msgstr "Nach Rollen suchen." - -#, fuzzy -msgid "Import a Certificate Profile." -msgstr "Benutze Zertifikatsprofil" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -#, fuzzy -msgid "Modify Certificate Profile configuration." -msgstr "Benutze Zertifikatsprofil" - -#, fuzzy -msgid "File containing profile configuration" -msgstr "Replikationseinstellungen" - -#, fuzzy -msgid "Display the properties of a Certificate Profile." -msgstr "Einstellungen der HBAC-Regel anzeigen." - -#, fuzzy -msgid "Write profile configuration to file" -msgstr "Konfigurationsdatei %s konnte nicht geöffnet werden\n" - -#, fuzzy -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "Maximale Zeit in Sekunden für eine Suche (>0 oder -1 für unbegrenzt)" - -#, fuzzy -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "Maximale Anzahl an Ergebnissen für Suche (-1 ist unbegrenzt)" msgid "" "\n" @@ -8836,3777 +131,197 @@ msgstr "" "\n" "IPA Domain Level erhöhen.\n" -msgid "Query current Domain Level." -msgstr "Aktuelles Domain Level abfragen." - -msgid "Current domain level:" -msgstr "Aktuelles Domain Level:" - -msgid "Change current Domain Level." -msgstr "Aktuelles Domain Level ändern." - -msgid "Domain Level" -msgstr "Domain Level" - -msgid "Add certificates to host entry" -msgstr "" - -#, fuzzy -msgid "Remove certificates from host entry" -msgstr "Mitglieder von Hostgruppe entfernen." - msgid "" "\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "Fallback to AD DC LDAP" -msgstr "" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" - -#, fuzzy -msgid "Add to default group" -msgstr "Mitglieder zu einer Gruppe hinzufügen." - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" - -#, fuzzy -msgid "Search scope" -msgstr "Suchen" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "Nutzer entfernen die diesen Token verwalten können" - -#, fuzzy -msgid "Target DN subtree" -msgstr "Ziel-Host" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" - -msgid "Origin DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "Server name" -msgstr "Servername" - -msgid "IPA server hostname" -msgstr "IPA-Server Hostname" - -msgid "Managed suffix" -msgstr "" - -#, fuzzy -msgid "Min domain level" -msgstr "Aktuelles Domain Level:" - -#, fuzzy -msgid "Minimum domain level" -msgstr "Aktuelles Domain Level:" - -#, fuzzy -msgid "Max domain level" -msgstr "Domain Level" - -#, fuzzy -msgid "Maximum domain level" -msgstr "Aktuelles Domain Level:" - -#, fuzzy -msgid "Delete IPA server." -msgstr "Einen IPA-Dienst entfernen." - -#, fuzzy -msgid "Search for IPA servers." -msgstr "Nach IPA-Diensten suchen." - -#, fuzzy -msgid "Show IPA server." -msgstr "Nach IPA-Diensten suchen." - -#, fuzzy -msgid "Add new certificates to a service" -msgstr "%(name)s Zertifikat ist ungültig" - -#, fuzzy -msgid "Remove certificates from a service" -msgstr "Berechtigungen von Rolle entfernen." - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -#, fuzzy -msgid "Allowed Target" -msgstr "Ziel" - -#, fuzzy -msgid "Create a new service delegation rule." -msgstr "Neue HBAC-Regel erstellen." - -#, fuzzy -msgid "Add member to a named service delegation rule." -msgstr "Mitglieder zur einer HBAC-Dienstgruppe hinzufügen." - -#, fuzzy -msgid "member principal" -msgstr "Kerberos-Principal" - -#, fuzzy -msgid "principal to add" -msgstr "Principal nicht gefunden\n" - -#, fuzzy -msgid "Add target to a named service delegation rule." -msgstr "Ziel-Hosts und Hostgruppen zu einer HBAC-Regel hinzufügen." - -#, fuzzy -msgid "member service delegation target" -msgstr "Mitglieds-Dienstgruppen" - -msgid "service delegation targets to add" -msgstr "" - -#, fuzzy -msgid "Delete service delegation." -msgstr "HBAC-Dienstgruppe löschen" - -#, fuzzy -msgid "Search for service delegations rule." -msgstr "Suche nach HBAC Dienstgruppe" - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" - -#, fuzzy -msgid "Remove member from a named service delegation rule." -msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." - -#, fuzzy -msgid "principal to remove" -msgstr "Entfernen fehlgeschlagen" - -#, fuzzy -msgid "Remove target from a named service delegation rule." -msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." - -msgid "service delegation targets to remove" -msgstr "" - -#, fuzzy -msgid "Display information about a named service delegation rule." -msgstr "Informationen zu einer genannten Gruppe anzeigen." - -msgid "Create a new service delegation target." -msgstr "" - -#, fuzzy -msgid "Add member to a named service delegation target." -msgstr "Mitglieder zur einer HBAC-Dienstgruppe hinzufügen." - -msgid "Delete service delegation target." -msgstr "" - -#, fuzzy -msgid "Search for service delegation target." -msgstr "Suche nach HBAC Dienstgruppe" - -#, fuzzy -msgid "Remove member from a named service delegation target." -msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." - -#, fuzzy -msgid "Display information about a named service delegation target." -msgstr "Informationen über eine HBAC-Dienstgruppe anzeigen" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" - -msgid "Activate a stage user." -msgstr "Vorbereiteten Benutzer aktivieren." - -msgid "Add a new stage user." -msgstr "Einen neuen vorbereiteten Benutzer hinzufügen." - -msgid "Create Stage user in from a delete user" -msgstr "Erstelle vorbereiteten Benutzer aus einem gelöschten Benutzer" - -msgid "Delete a stage user." -msgstr "Einen vorbereiteten Benutzer löschen." - -msgid "Search for stage users." -msgstr "Nach vorbereiteten Benutzern suchen." - -#, fuzzy -msgid "Search for stage users with these member of groups." -msgstr "Nach vorbereiteten Benutzern suchen." - -msgid "Search for stage users without these member of groups." -msgstr "" - -msgid "Search for stage users with these member of netgroups." -msgstr "" - -msgid "Search for stage users without these member of netgroups." -msgstr "" - -#, fuzzy -msgid "Search for stage users with these member of roles." -msgstr "Nach vorbereiteten Benutzern suchen." - -#, fuzzy -msgid "Search for stage users without these member of roles." -msgstr "Nach vorbereiteten Benutzern suchen." - -msgid "Search for stage users with these member of HBAC rules." -msgstr "" - -msgid "Search for stage users without these member of HBAC rules." -msgstr "" - -msgid "Search for stage users with these member of sudo rules." -msgstr "" - -msgid "Search for stage users without these member of sudo rules." -msgstr "" - -msgid "Modify a stage user." -msgstr "Einen vorbereiteten Benutzer ändern." - -#, fuzzy -msgid "Rename the stage user object" -msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" - -msgid "Display information about a stage user." -msgstr "Informationen zu einem vorbereiteten Benutzer anzeigen." - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" - -#, fuzzy -msgid "Segment name" -msgstr "Servername" - -msgid "Arbitrary string identifying the segment" -msgstr "" - -msgid "Left node" -msgstr "" - -msgid "Left replication node - an IPA server" -msgstr "" - -#, fuzzy -msgid "Right node" -msgstr "Rechte" - -#, fuzzy -msgid "Right replication node - an IPA server" -msgstr "Informationen zu einem IPA-Dienst anzeigen." - -msgid "Connectivity" -msgstr "" - -msgid "Direction of replication between left and right replication node" -msgstr "" - -#, fuzzy -msgid "Attributes to strip" -msgstr "Attribute" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" - -#, fuzzy -msgid "Attributes to replicate" -msgstr "Attribut Schlüssel" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" - -msgid "Attributes for total update" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" - -#, fuzzy -msgid "Session timeout" -msgstr "Sitzungsfehler" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" - -msgid "Replication agreement enabled" -msgstr "" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" - -#, fuzzy -msgid "Suffix name" -msgstr "Dateiname" - -msgid "LDAP suffix to be managed" -msgstr "" - -#, fuzzy -msgid "Add a new segment." -msgstr "Neuen Host hinzufügen." - -#, fuzzy -msgid "Delete a segment." -msgstr "Host löschen." - -#, fuzzy -msgid "Search for topology segments." -msgstr "Nach Hosts suchen." - -#, fuzzy -msgid "Modify a segment." -msgstr "Einen Benutzer bearbeiten." - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" - -msgid "Initialize left node" -msgstr "" - -msgid "Initialize right node" -msgstr "" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "" - -#, fuzzy -msgid "Display a segment." -msgstr "Angezeigter Name" - -msgid "Add a new topology suffix to be managed." -msgstr "" - -#, fuzzy -msgid "Delete a topology suffix." -msgstr "Einen vorbereiteten Benutzer löschen." - -#, fuzzy -msgid "Search for topology suffices." -msgstr "Nach Rollen suchen." - -#, fuzzy -msgid "Modify a topology suffix." -msgstr "Einen vorbereiteten Benutzer ändern." - -msgid "Show managed suffix." -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "Preserved user" -msgstr "Aufbewahrter Benutzer" - -#, fuzzy -msgid "Add one or more certificates to the user entry" -msgstr "Manager zum Benutzer hinzufügen" - -#, fuzzy -msgid "Remove one or more certificates to the user entry" -msgstr "Manager vom Benutzer entfernen" - -msgid "Move deleted user into staged area" -msgstr "Gelöschten Benutzer in vorbereitete Benutzer verschieben" - -msgid "Undelete a delete user account." -msgstr "Gelöschten Benutzer wiederherstellen" - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -#, fuzzy -msgid "Vault name" -msgstr "Nachname" - -#, fuzzy -msgid "Vault description" -msgstr "Beschreibung" - -#, fuzzy -msgid "Vault type" -msgstr "Regeltyp" - -msgid "Salt" -msgstr "" - -#, fuzzy -msgid "Vault salt" -msgstr "Vorgabe-Shell" - -#, fuzzy -msgid "Public key" -msgstr "Öffentlicher SSH Schlüssel" - -#, fuzzy -msgid "Vault public key" -msgstr "Öffentlicher SSH Schlüssel" - -#, fuzzy -msgid "Owner users" -msgstr "Mitglieds-Benutzer" - -#, fuzzy -msgid "Owner groups" -msgstr "Benutzer-Gruppe" - -#, fuzzy -msgid "Owner services" -msgstr "Mitglieds-Dienste" - -#, fuzzy -msgid "Failed owners" -msgstr "Fehlgeschlagene Logins" - -#, fuzzy -msgid "Vault service" -msgstr "Mit Dienst" - -msgid "Shared vault" -msgstr "" - -#, fuzzy -msgid "Vault user" -msgstr "Standard Benutzergruppe" - -#, fuzzy -msgid "Transport Certificate" -msgstr "Host-Zertifikat" - -msgid "Service name of the service vault" -msgstr "" - -#, fuzzy -msgid "Username of the user vault" -msgstr "Hostname dieses Servers" - -#, fuzzy -msgid "Add members to a vault." -msgstr "Mitglieder zur Rolle hinzufügen." - -#, fuzzy -msgid "Add owners to a vault." -msgstr "Mitglieder zur Rolle hinzufügen." - -#, fuzzy -msgid "owner user" -msgstr "Mitglieds-Benutzer" - -#, fuzzy -msgid "owner group" -msgstr "Benutzer-Gruppe" - -#, fuzzy -msgid "owner service" -msgstr "Mitglieds-Dienste" - -#, fuzzy -msgid "Owners that could not be added" -msgstr "Mitglieder, die nicht hinzugefügt werden konnten" - -#, fuzzy -msgid "Number of owners added" -msgstr "Zahl der hinzugefügten Mitglieder" - -msgid "Session key wrapped with transport certificate" -msgstr "" - -msgid "Vault data encrypted with session key" -msgstr "" - -msgid "Nonce" -msgstr "" - -#, fuzzy -msgid "Delete a vault." -msgstr "Host löschen." - -#, fuzzy -msgid "Search for vaults." -msgstr "Nach Hosts suchen." - -#, fuzzy -msgid "List all service vaults" -msgstr "Dienst »%(value)s« deaktiviert" - -#, fuzzy -msgid "List all user vaults" -msgstr "Ein Benutzerkonto deaktivieren." - -#, fuzzy -msgid "Remove members from a vault." -msgstr "Mitglieder von Rolle entfernen." - -#, fuzzy -msgid "Remove owners from a vault." -msgstr "Mitglieder von Rolle entfernen." - -#, fuzzy -msgid "Owners that could not be removed" -msgstr "Mitglieder, die nicht entfernt werden konnten" - -#, fuzzy -msgid "Number of owners removed" -msgstr "Anzahl der entfernten Mitglieder" - -#, fuzzy -msgid "Display information about a vault." -msgstr "Informationen über Host anzeigen." - -#, fuzzy -msgid "Show vault configuration." -msgstr "Die aktuelle Konfiguration anzeigen." - -#, fuzzy -msgid "Output file to store the transport certificate" -msgstr "Datei, in der das Zertifikat gespeichert werden soll." - -msgid "Add owners to a vault container." -msgstr "" - -#, fuzzy -msgid "Delete a vault container." -msgstr "Automount-Ort löschen." - -#, fuzzy -msgid "Remove owners from a vault container." -msgstr "Mitglieder von Rolle entfernen." - -#, fuzzy -msgid "Display information about a vault container." -msgstr "Informationen zu einem Benutzer anzeigen." - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "" - -#, fuzzy -msgid "Hostname (FQDN)" -msgstr "Zonenname (FQDN)" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -#, fuzzy -msgid "Managed suffixes" -msgstr "UPN Suffixe" - -msgid "Check connection to remote IPA server." -msgstr "" - -#, fuzzy -msgid "Remote server name" -msgstr "Servername" - -#, fuzzy -msgid "Remote IPA server hostname" -msgstr "IPA-Server Hostname" - -#, fuzzy -msgid "suffix" -msgstr "UPN Suffixe" - -#, fuzzy -msgid "Search for servers with these managed suffixes." -msgstr "Nach vorbereiteten Benutzern suchen." - -msgid "Search for servers without these managed suffixes." -msgstr "" - -msgid "Add a manager to the stage user entry" -msgstr "Manager zum vorbereiteten Benutzer hinzufügen" - -#, fuzzy -msgid "Remove a manager to the stage user entry" -msgstr "Manager vom Benutzer entfernen" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -msgid "Managed LDAP suffix DN" -msgstr "" - -#, fuzzy -msgid "Search for topology suffixes." -msgstr "Nach Rollen suchen." - -msgid "Add a manager to the user entry" -msgstr "Manager zum Benutzer hinzufügen" - -msgid "Remove a manager to the user entry" -msgstr "Manager vom Benutzer entfernen" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Comma-separated list of attributes" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -#, fuzzy -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "Berechtigungen (read, write). Standard ist write" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" - -msgid "DNS class" -msgstr "DNS-Klasse" - -msgid "Comma-separated list of raw A records" -msgstr "" - -msgid "Comma-separated list of raw AAAA records" -msgstr "" - -msgid "Comma-separated list of raw A6 records" -msgstr "" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "" - -msgid "Comma-separated list of raw APL records" -msgstr "" - -msgid "Comma-separated list of raw CERT records" -msgstr "" - -msgid "Comma-separated list of raw CNAME records" -msgstr "" - -msgid "Comma-separated list of raw DHCID records" -msgstr "" - -msgid "Comma-separated list of raw DLV records" -msgstr "" - -msgid "Comma-separated list of raw DNAME records" -msgstr "" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "" - -msgid "Comma-separated list of raw DS records" -msgstr "" - -msgid "Comma-separated list of raw HIP records" -msgstr "" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "" - -msgid "Comma-separated list of raw KEY records" -msgstr "" - -#, fuzzy -msgid "KEY Flags" -msgstr "Flags" - -msgid "KEY Protocol" -msgstr "" - -msgid "Protocol" -msgstr "" - -#, fuzzy -msgid "KEY Algorithm" -msgstr "Algorithmus" - -#, fuzzy -msgid "KEY Public Key" -msgstr "Öffentlicher SSH Schlüssel" - -#, fuzzy -msgid "Public Key" -msgstr "Öffentlicher SSH Schlüssel" - -msgid "Comma-separated list of raw KX records" -msgstr "" - -msgid "Comma-separated list of raw LOC records" -msgstr "" - -msgid "Comma-separated list of raw MX records" -msgstr "" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "" - -msgid "Comma-separated list of raw NS records" -msgstr "" - -msgid "Comma-separated list of raw NSEC records" -msgstr "" - -msgid "NSEC Next Domain Name" -msgstr "" - -#, fuzzy -msgid "Next Domain Name" -msgstr "Domäne aktiviert" - -msgid "NSEC Type Map" -msgstr "" - -#, fuzzy -msgid "Type Map" -msgstr "Typ" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "" - -msgid "Comma-separated list of raw PTR records" -msgstr "" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "" - -msgid "RRSIG Type Covered" -msgstr "" - -msgid "Type Covered" -msgstr "" - -#, fuzzy -msgid "RRSIG Algorithm" -msgstr "Algorithmus" - -msgid "RRSIG Labels" -msgstr "" - -msgid "Labels" -msgstr "" - -msgid "RRSIG Original TTL" -msgstr "" - -msgid "Original TTL" -msgstr "" - -msgid "RRSIG Signature Expiration" -msgstr "" - -#, fuzzy -msgid "Signature Expiration" -msgstr "Passwortablauf" - -msgid "RRSIG Signature Inception" -msgstr "" - -msgid "Signature Inception" -msgstr "" - -msgid "RRSIG Key Tag" -msgstr "" - -msgid "RRSIG Signer's Name" -msgstr "" - -#, fuzzy -msgid "Signer's Name" -msgstr "Servername" - -msgid "RRSIG Signature" -msgstr "" - -msgid "Signature" -msgstr "" - -msgid "Comma-separated list of raw RP records" -msgstr "" - -msgid "Comma-separated list of raw SIG records" -msgstr "" - -msgid "SIG Type Covered" -msgstr "" - -#, fuzzy -msgid "SIG Algorithm" -msgstr "Algorithmus" - -msgid "SIG Labels" -msgstr "" - -msgid "SIG Original TTL" -msgstr "" - -msgid "SIG Signature Expiration" -msgstr "" - -msgid "SIG Signature Inception" -msgstr "" - -msgid "SIG Key Tag" -msgstr "" - -msgid "SIG Signer's Name" -msgstr "" - -msgid "SIG Signature" -msgstr "" - -msgid "Comma-separated list of raw SPF records" -msgstr "" - -msgid "Comma-separated list of raw SRV records" -msgstr "" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "" - -msgid "Comma-separated list of raw TA records" -msgstr "" - -msgid "Comma-separated list of raw TKEY records" -msgstr "" - -msgid "Comma-separated list of raw TSIG records" -msgstr "" - -msgid "Comma-separated list of raw TXT records" -msgstr "" - -#, fuzzy -msgid "SOA time to live" -msgstr "Lebensdauer" - -#, fuzzy -msgid "SOA record time to live" -msgstr "Lebensdauer" - -#, fuzzy -msgid "SOA class" -msgstr "DNS-Klasse" - -msgid "SOA record class" -msgstr "" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" - -#, fuzzy -msgid "Consume an entitlement." -msgstr "Befehl nicht implementiert" - -#, fuzzy -msgid "Quantity" -msgstr "Identität" - -#, fuzzy -msgid "Search for entitlement accounts." -msgstr "Automount-Ort suchen." - -#, fuzzy -msgid "Retrieve the entitlement certs." -msgstr "Ein existierendes Zertifikat holen." - -#, fuzzy -msgid "Import an entitlement certificate." -msgstr "Ein existierendes Zertifikat holen." - -msgid "UUID" -msgstr "" - -msgid "Enrollment UUID" -msgstr "" - -msgid "Register to the entitlement system." -msgstr "" - -msgid "Username" -msgstr "Benutzername" - -#, fuzzy -msgid "Enrollment UUID (not implemented)" -msgstr "Befehl nicht implementiert" - -#, fuzzy -msgid "Registration password" -msgstr "Passwort zurücksetzen" - -msgid "Display current entitlements." -msgstr "" - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" -"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach " -"Benutzern durchsucht werden" - -msgid "comma-separated list of users to add" -msgstr "" - -msgid "comma-separated list of groups to add" -msgstr "" - -#, fuzzy -msgid "comma-separated list of users to remove" -msgstr "" -"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach " -"Benutzern durchsucht werden" - -#, fuzzy -msgid "comma-separated list of groups to remove" -msgstr "" -"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach " -"Benutzern durchsucht werden" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -#, fuzzy -msgid "Source host category" -msgstr "Host-Kategorie" - -#, fuzzy -msgid "Source host category the rule applies to" -msgstr "Host-Kategorie, auf welche die Regel angewendet werden soll" - -msgid "Source Hosts" -msgstr "" - -#, fuzzy -msgid "Source Host Groups" -msgstr "Host-Gruppen" - -msgid "comma-separated list of hosts to add" -msgstr "" - -msgid "comma-separated list of host groups to add" -msgstr "" - -msgid "comma-separated list of HBAC services to add" -msgstr "" - -#, fuzzy -msgid "comma-separated list of HBAC service groups to add" -msgstr "" -"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach Gruppen " -"durchsucht werden" - -#, fuzzy -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "Ziel-Hosts und Hostgruppen zu einer HBAC-Regel hinzufügen." - -#, fuzzy -msgid "comma-separated list of hosts to remove" -msgstr "" -"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach " -"Benutzern durchsucht werden" - -msgid "comma-separated list of host groups to remove" -msgstr "" - -#, fuzzy -msgid "comma-separated list of HBAC services to remove" -msgstr "" -"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach Gruppen " -"durchsucht werden" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "" - -#, fuzzy -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "Ziel-Hosts und Hostgruppen von einer HBAC-Regel entfernen." - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" - -#, fuzzy -msgid "Source host" -msgstr "Ziel-Host" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -#, fuzzy -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" -"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach " -"Benutzern durchsucht werden" - -#, fuzzy -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" -"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach Gruppen " -"durchsucht werden" - -#, fuzzy -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" -"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach " -"Benutzern durchsucht werden" - -#, fuzzy -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" -"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach " -"Benutzern durchsucht werden" - -#, fuzzy -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" -"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach Gruppen " -"durchsucht werden" - -#, fuzzy -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" -"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach Gruppen " -"durchsucht werden" - -#, fuzzy -msgid "comma-separated list of groups to exclude from migration" -msgstr "" -"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach Gruppen " -"durchsucht werden" - -#, fuzzy -msgid "comma-separated list of users to exclude from migration" -msgstr "" -"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach Gruppen " -"durchsucht werden" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "comma-separated list of netgroups to add" +"YubiKey Tokens\n" msgstr "" - -#, fuzzy -msgid "comma-separated list of netgroups to remove" -msgstr "" -"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach " -"Benutzern durchsucht werden" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" - -#, fuzzy -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "Typ des IPA-Objekts (user, group, host, hostgroup, service, netgroup)" - -#, fuzzy -msgid "Target members of a group" -msgstr "Mitglied einer Gruppe" - -#, fuzzy -msgid "User group to apply permissions to" -msgstr "Benutzergruppen-ACI erlaubt Zugriff auf" - -#, fuzzy -msgid "comma-separated list of privileges to add" -msgstr "Anzahl der hinzugefügten Berechtigungen" - -msgid "Add a system permission without an ACI" -msgstr "" - -#, fuzzy -msgid "Permission type" -msgstr "Berechtigungsname" - -#, fuzzy -msgid "comma-separated list of privileges to remove" -msgstr "Anzahl der entfernten Berechtigungen" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "comma-separated list of roles to add" -msgstr "" - -msgid "comma-separated list of permissions" -msgstr "" - -#, fuzzy -msgid "comma-separated list of roles to remove" -msgstr "" -"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach " -"Benutzern durchsucht werden" - -msgid "comma-separated list of privileges" -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" "\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "comma-separated list of sudo commands to add" -msgstr "" - -msgid "comma-separated list of sudo commands to remove" -msgstr "" - -msgid "Active directory domain administrator's password" -msgstr "" - -#, fuzzy -msgid "GECOS field" -msgstr "GECOS" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" - -#, fuzzy -msgid "comma-separated list of sudo command groups to add" -msgstr "" -"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach Gruppen " -"durchsucht werden" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "" - -msgid "Failed members" -msgstr "Fehler bei Mitgliedern" - -#, fuzzy -msgid "Failed source hosts/hostgroups" -msgstr "Fehler bei Hosts/Hostgruppen" - -msgid "Failed hosts/hostgroups" -msgstr "Fehler bei Hosts/Hostgruppen" - -msgid "Failed users/groups" -msgstr "Fehlerhafte Benutzer/Gruppen" - -msgid "Failed service/service groups" -msgstr "Fehler bei Diensten/Dienstgruppen" - -msgid "Failed to remove" -msgstr "Entfernen fehlgeschlagen" - -msgid "Failed RunAs" -msgstr "RunAs fehlgeschlagen" - -msgid "Failed RunAsGroup" -msgstr "RunAsGroup fehlgeschlagen" - -#, fuzzy -msgid "Failed profiles" -msgstr "Fehlgeschlagene Logins" - -#, fuzzy -msgid "Failed CAs" -msgstr "RunAs fehlgeschlagen" - -#, fuzzy -msgid "Failed member manager" -msgstr "Fehler bei Mitgliedern" - -#, fuzzy -msgid "Failed managedby" -msgstr "Fehler bei Mitgliedern" - -#, fuzzy -msgid "Failed allowed to retrieve keytab" -msgstr "Benutzer die Schlüsseltabelle abrufen dürfen" - -#, fuzzy -msgid "Failed allowed to create keytab" -msgstr "Benutzer die Schlüsseltabelle erstellen dürfen" - -#, fuzzy -msgid "Failed targets" -msgstr "Hinzufügen fehlgeschlagen" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "%(cver)s Client ist inkompatibel mit %(sver)s Server auf '%(server)s'" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "Unbekannter Fehler %(code)d von %(server)s: %(error)s" - -msgid "an internal error has occurred" -msgstr "Ein interner Fehler ist aufgetreten" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "In interner Fehler ist auf dem Server '%(server)s' aufgetreten." - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "Unbekannter Befehl '%(name)s'" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "Fehler auf Server '%(server)s': %(error)s" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "Kann nicht zu '%(uri)s' verbinden: %(error)s" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Ungültige JSON-RPC-Anfrage: %(error)s" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" -"Fehler beim Zusammenstellen der Daten für den XML-RPC-Transport: %(error)s" +"YubiKey Tokens\n" -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "Fehlende oder ungültige HTTP-Referenz, %(referer)s" +msgid " ipa --help" +msgstr " ipa --help" #, python-format msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +" Alternatively, following servers are capable of running this command: " +"%(masters)s" msgstr "" +"Alternativ sind folgende Server in der Lage den Befehl auszuführen: " +"%(masters)s" -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Kerberos-Fehler: %(major)s/%(minor)s" +#, python-brace-format +msgid "${count} item(s) added" +msgstr "${count} Einträge hinzugefügt" -msgid "did not receive Kerberos credentials" -msgstr "Kerberos-Anmeldedaten wurden nicht empfangen" +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "${count} Einträge gelöscht" -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "Service '%(service)s' in Kerberos-Datenbank nicht gefunden" +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "${count} Einträge deaktiviert" -msgid "No credentials cache found" -msgstr "Keine Anmeldeinformationen-Cache gefunden" +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "${count} Einträge aktiviert" -msgid "Ticket expired" -msgstr "Ticket abgelaufen" +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "${count} Einträge gelöscht" -msgid "Credentials cache permissions incorrect" -msgstr "Zugriffsrechte des Anmeldedaten-Zwischenspeichers sind inkorrekt." +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "${count} Option(en) entfernt" -msgid "Bad format in credentials cache" -msgstr "Falsches Format im Anmeldedaten-Zwischenspeicher" +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "${count} Benutzer aktiviert" -msgid "Cannot resolve KDC for requested realm" -msgstr "KDC für angeforderten Realm konnte nicht aufgelöst werden." +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "${count} user(s) wiederhergestellt" -msgid "Session error" -msgstr "Sitzungsfehler" +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "${entity} ${primary_key} Einstellungen" -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" -"Der Principal %(principal)s kann nicht authentifiziert werden: %(message)s" +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "${entity} ${primary_key} aktualisiert" -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Unzureichender Zugriff: %(info)s" +#, python-brace-format +msgid "${entity} successfully added" +msgstr "${entity} erfolgreich hinzugefügt" -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "Befehl '%(name)s' nimmt keine Argumente" +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "${primary_key} ist Mitglied von:" -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "Befehl '%(name)s' nimmt maximal %(count)d Argument" -msgstr[1] "Befehl '%(name)s' nimmt maximal %(count)d Argumente" +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "${primary_key} wird verwaltet von:" -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "Überlappende Argumente und Optionen: %(names)s" +#, python-brace-format +msgid "${primary_key} members:" +msgstr "${primary_key} Mitglieder:" -#, python-format -msgid "'%(name)s' is required" -msgstr "'%(name)s' wird benötigt" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "Ungültig '%(name)s': %(error)s" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "Der Namensraum '%(name)s' existiert in der API nicht" - -msgid "Passwords do not match" -msgstr "Passwörter stimmen nicht überein" - -msgid "Command not implemented" -msgstr "Befehl nicht implementiert" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "Client ist nicht konfiguriert. Rufen Sie ipa-client-install auf." - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "%(name)s konnte nicht interaktiv ermittelt werden" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "Befehl '%(name)s' ist veraltet" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" -"Die Domäne '%(domain)s' ist keine Root Domäne für den Forest '%(forest)s'" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -msgid "This entry already exists" -msgstr "Dieser Eintrag existiert bereits" - -msgid "You must enroll a host in order to create a host service" -msgstr "" -"Sie müssen einen Host registrieren, bevor Sie einen Dienst für diesen Host " -"anlegen können." - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" -"Principal des Dienstes folgt nicht der Form »Dienst/voll ausgeschriebener " -"Hostname«: %(reason)s" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "Der Realm des Principals passt nicht zum Realm dieses IPA-Servers." - -msgid "This command requires root access" -msgstr "Dieser Befehl erfordert Root-Zugriff" - -msgid "This is already a posix group" -msgstr "Dies ist bereits eine POSIX-Gruppe" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "Principal ist nicht in der Form user@REALM: '%(principal)s'" - -msgid "This entry is already enabled" -msgstr "Dieser Eintrag ist bereits aktiviert" - -msgid "This entry is already disabled" -msgstr "Dieser Eintrag ist bereits deaktiviert" - -msgid "This entry cannot be enabled or disabled" -msgstr "Dieser Eintrag kann nicht aktiviert oder deaktiviert werden" - -msgid "This entry is not a member" -msgstr "Dieser Eintrag ist kein Mitglied" - -msgid "A group may not be a member of itself" -msgstr "Eine Gruppe kann kein Mitglied von sich selbst sein" - -msgid "This entry is already a member" -msgstr "Dieser Eintrag ist bereits ein Mitglied" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Base64-Dekodierung fehlgeschlagen: %(reason)s" - -msgid "A group may not be added as a member of itself" -msgstr "Eine Gruppe kann nicht als Mitglied von sich selbst hinzugefügt werden" - -msgid "The default users group cannot be removed" -msgstr "Die vorgegebene Benutzergruppe kann nicht entfernt werden" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" -"Das Löschen einer verwalteten Gruppe ist unzulässig. Sie muss zuerst aus der " -"Verwaltung entfernt werden." - -msgid "A managed group cannot have a password policy." -msgstr "Eine verwaltete Gruppe kann keine Passwort-Policy haben." - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "»%(entry)s« verfügt nicht über ein Zertifikat." - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" -"Die private Gruppe konnte nicht erstellt werden. Eine Gruppe »%(group)s« " -"existiert bereits." - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" -"Ein Problem trat bei der Überprüfung auf, ob alle Mitglieder %(verb)s waren: " -"%(exc)s" +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "${product}, Version: ${version}" #, python-format msgid "%(attr)s does not contain '%(value)s'" msgstr "%(attr)s enthält nicht »%(value)s«" #, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" -"Die Suchkriterien waren nicht spezifisch genug. 1 wurde erwartet, aber " -"%(found)d gefunden." - -msgid "This group already allows external members" -msgstr "Diese Gruppe erlaubt bereits externe Mitglieder" - -msgid "This group cannot be posix because it is external" -msgstr "Diese Gruppe kann nicht POSIX sein, weil sie extern ist" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" -"Dies ist bereits eine POSIX-Gruppe, sie kann nicht zu einer externen " -"konvertiert werden" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "Entfernen des Servers abgebrochen: %(reason)s." - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "%(operation)s wird für %(principal_type)s Principals nicht unterstützt" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "Anfrage mit Status %(status)s fehlgeschlagen: %(reason)s" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, fuzzy, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "%(attr)s enthält nicht »%(value)s«" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "kein Befehl oder Hilfethema '%(topic)s'" - -msgid "change collided with another change" -msgstr "Änderung kollidiert mit einer anderen Änderung" - -msgid "no modifications to be performed" -msgstr "Keine anzuwendenden Änderungen" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(desc)s: %(info)s" - -msgid "limits exceeded for this query" -msgstr "Begrenzung wurde für diese Abfrage überschritten." - -#, python-format -msgid "%(info)s" -msgstr "%(info)s" - -msgid "modifying primary key is not allowed" -msgstr "Ändern des primären Schlüssels ist nicht erlaubt." +msgid "%(attr)s: Invalid syntax." +msgstr "%(attr)s: Ungültige Syntax." #, python-format msgid "%(attr)s: Only one value allowed." msgstr "%(attr)s: Nur ein Wert erlaubt." #, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "%(attr)s: Ungültige Syntax." +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d ACI gefunden" +msgstr[1] "%(count)d ACIs gefunden" #, python-format -msgid "Bad search filter %(info)s" -msgstr "Falscher Suchfilter %(info)s" - -msgid "Not allowed on non-leaf entry" -msgstr "Bei einem Nicht-Blatt-Eintrag nicht erlaubt" - -msgid "LDAP timeout" -msgstr "LDAP Timeout" +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "%(count)d HBAC-Regel gefunden" +msgstr[1] "%(count)d HBAC-Regeln gefunden" #, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "LDAP Zeitüberschreitung für %(task)s , Task DN: '%(task_dn)s'" - -msgid "Configured time limit exceeded" -msgstr "Vorgegebenes Zeitlimit überschritten" - -msgid "Configured size limit exceeded" -msgstr "Vorgegebene Größenbeschränkung überschritten" - -msgid "Configured administrative server limit exceeded" -msgstr "Vorgegebene administrative Serverbeschränkung überschritten" +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "%(count)d HBAC-Dienstgruppe gefunden" +msgstr[1] "%(count)d HBAC-Dienstgruppen gefunden" #, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "Zertifikat-Operation kann nicht abgeschlossen werden: %(error)s" +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "%(count)d HBAC-Dienst gefunden" +msgstr[1] "%(count)d HBAC-Dienste gefunden" #, python-format -msgid "Certificate format error: %(error)s" -msgstr "Formatfehler im Zertifikat: %(error)s" +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "%(count)d OTP Token gefunden" +msgstr[1] "%(count)d OTP Tokens gefunden" -msgid "Already registered" -msgstr "Bereits registriert" +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "%(count)d Automount-Ort gefunden" +msgstr[1] "%(count)d Automount-Orte gefunden" -msgid "Not registered yet" -msgstr "Noch nicht registriert" +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d passende Gruppe" +msgstr[1] "%(count)d passende Gruppen" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "%(count)d Host gefunden" +msgstr[1] "%(count)d Hosts gefunden" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "%(count)d Hostgruppe gefunden" +msgstr[1] "%(count)d Hostgruppen gefunden" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "%(count)d Plugin geladen" +msgstr[1] "%(count)d Plugins geladen" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d Rolle gefunden" +msgstr[1] "%(count)d Rollen gefunden" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "%(count)d passender Dienst" +msgstr[1] "%(count)d passende Dienste" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d passender Benutzer" +msgstr[1] "%(count)d passende Benutzer" + +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d Variablen" + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "%(cver)s Client ist inkompatibel mit %(sver)s Server auf '%(server)s'" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "%(desc)s: %(info)s" + +#, python-format +msgid "%(exception)s" +msgstr "%(exception)s" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "%(filename)s: Datei nicht gefunden" + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" #, python-format msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" @@ -12626,3775 +341,26 @@ msgstr "" msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" msgstr "%(label)s %(key)s kann nicht gelöscht/bearbeitet werden: %(reason)s" -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "%(name)s Zertifikat ist ungültig" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "Schema ist aktuell (FP '%(fingerprint)s', TTL %(ttl)s s)" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "Der Host '%(hostname)s' besitzt keinen zugehörigen DNS A/AAAA Record" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "DNS Check fehlerhaft: Erwartet {%(expected)s} bekommen {%(got)s}" - -#, python-format -msgid "%(exception)s" -msgstr "%(exception)s" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" -"Der Forest '%(forest)s' besitzt bereits eine Vertrauensstellung zu Forest(s) " -"%(domains)s und kann daher keine Vertrauensstellung zu '%(conflict)s' " -"aufbauen" - -msgid "Additional instructions:" -msgstr "Zusätzliche Anweisungen:" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" -"API Versionsnummer wurde nicht gesendet, Vorwärtskompatibiltät nicht " -"garantiert. Nehme API Version %(server_version)s für Server an." - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" -"Die DNS-Forwarder Semantiken haben sich seit IPA 4.0 geändert.\n" -"Nutzen Sie stattdessen Forward Zones (dnsforwardzone-*).\n" -"Für weitere Details schlagen Sie bitte in der Dokumentation nach." - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" -"DNSSEC Unterstützung ist experimentell.\n" -"%(additional_info)s" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "'%(option)s' Option ist veraltet. %(additional_info)s" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" -"Semantik von %(label)s wurde geändert. %(current_behavior)s\n" -"%(hint)s" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "DNS Server %(server)s: %(error)s." - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"DNS Server %(server)s unterstützt kein DNSSEC: %(error)s.\n" -"Wenn DNSSEC-Überprüfung auf den IPA Servern aktiviert ist bitte deaktivieren." - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" -"Die Forward Zone \"%(fwzone)s\" ist nicht aktiv, da eine ordnungsgemäße NS " -"Delegation in der autoritativen Zone \"%(authzone)s\" nicht vorhanden ist. " -"Bitte fügen Sie den NS Record \"%(ns_rec)s\" zur übergeordneten Zone " -"\"%(authzone)s\" hinzu." - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"Der DNS server %(server)s unterstützt EDNS0 (RFC 6891) nicht: %(error)s.\n" -"Falls DNSSEC auf IPA Server(n) aktiviert ist, deaktivieren Sie diese." - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" -"DNSSEC Überprüfung fehlgeschlagen: %(error)s.\n" -"Bitte überprüfen Sie die DNSSEC Konfigurationen oder deaktivieren die DNSSEC " -"Überprüfung auf allen IPA Servern." - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "'%(command)s' ist veraltet. %(additional_info)s" - #, python-format msgid "%(line)s" msgstr "%(line)s" #, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "Das Suchergebnis wurde gekürzt: %(reason)s" +msgid "%(name)s certificate is not valid" +msgstr "%(name)s Zertifikat ist ungültig" #, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" -"Die Vertrauensstellung zu %(domain)s ist beschädigt. Bitte erneuern Sie sie " -"durch erneuten Aufruf von 'ipa trust-add'." - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" -"DNS Record(s) von Host %(host)s konnten nicht entfernt werden. (%(reason)s)" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" -"Keine DNS Server in der IPA Lokation %(location)s. Ohne DNS Servers arbeitet " -"die Lokation nicht wie erwartet." - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d Variablen" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "%(count)d Plugin geladen" -msgstr[1] "%(count)d Plugins geladen" - -msgid "A dictionary representing an LDAP entry" -msgstr "" - -msgid "A list of LDAP entries" -msgstr "Eine Liste von LDAP-Einträgen" - -msgid "All commands should at least have a result" -msgstr "Alle Befehle sollten mindestens ein Ergebnis haben." - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "Geben Sie %(label)s zur Bestätigung nochmals ein: " - -msgid "Passwords do not match!" -msgstr "Passwörter stimmen nicht überein!" - -msgid "No matching entries found" -msgstr "Keine passenden Einträge gefunden" - -msgid "Topic or Command" -msgstr "Thema oder Befehl" - -msgid "The topic or command name." -msgstr "Das Thema oder der Befehlsname" - -msgid "Topic commands:" -msgstr "Thema-Befehle:" - -msgid "To get command help, use:" -msgstr "Um Hilfe zu Befehlen zu bekommen benutzen sie:" - -msgid " ipa --help" -msgstr " ipa --help" - -msgid "Command name" -msgstr "Befehlsname" - -msgid "Positional arguments" -msgstr "Positionale Argumente" - -#, python-format -msgid "Same as --%s" -msgstr "Das gleiche wie --%s" - -msgid "Deprecated options" -msgstr "Veraltete Optionen" - -msgid "No file to read" -msgstr "Keine Datei zum Lesen" - -msgid "Results are truncated, try a more specific search" -msgstr "" -"Ergebnisse wurden abgeschnitten, versuchen Sie eine spezifischere Suche." - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "Unbekannte Option: %(option)s" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" -"Client-Version. Dadurch wird bestimmt, ob der Server die Anfrage akzeptiert." - -#, python-format -msgid "%(filename)s: file not found" -msgstr "%(filename)s: Datei nicht gefunden" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "any of the configured servers" -msgstr "einer der konfigurierten Server" - -msgid "Exceeded number of tries to forward a request." -msgstr "Anzahl der Versuche zur Weiterleitung der Anfrage überschritten" - -msgid "Filename is empty" -msgstr "" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "Zugriff verweigert: %(file)s" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "Zu viele »@«-Zeichen" - -#, fuzzy -msgid "cannot be longer that {} characters" -msgstr "darf höchstens %(maxlength)d Zeichen lang sein" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "nicht voll ausgeschrieben" - -msgid "invalid SSH public key" -msgstr "Ungültiger öffentlicher SSH-Schlüssel" - -#, fuzzy -msgid "options are not allowed" -msgstr "Eine leere Domäne ist nicht zulässig" - -#, fuzzy -msgid "invalid hostmask" -msgstr "Ungültiger Domainname: %s" - -#, fuzzy, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "Fehler auf Server '%(server)s': %(error)s" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -#, fuzzy -msgid "invalid escape code in domain name" -msgstr "Ungültiger Domainname: %s" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -#, fuzzy -msgid "invalid domain name" -msgstr "Ungültiger Domainname: %s" - -#, fuzzy, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "Ungültiger Domänenname '%(domain)s': %(e)s" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "Ungültiger Domainname: %s" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" -"Ungültige IP-Adressversion (ist %(value)d, muss %(required_value)d) sein!" - -msgid "invalid IP address format" -msgstr "Ungültiges IP-Adressformat" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "%(port)s kein gültiger Port" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "incorrect type" -msgstr "inkorrekter Typ" - -msgid "Only one value is allowed" -msgstr "Nur ein Wert ist erlaubt" - -msgid "this option is deprecated" -msgstr "diese Option ist veraltet" - -msgid "must be True or False" -msgstr "muss »True« oder »False« sein" - -msgid "must be an integer" -msgstr "muss eine Ganzzahl sein" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "muss mindestens %(minvalue)d sein" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "darf höchstens %(maxvalue)d sein" - -msgid "must be a decimal number" -msgstr "muss eine Dezimalzahl sein" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "muss mindestens %(minvalue)s sein" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "darf höchstens %(maxvalue)s sein" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "muss dem Muster »%(pattern)s« entsprechen" - -msgid "must be binary data" -msgstr "muss im Binärformat sein" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "muss mindestens %(minlength)d Bytes groß sein" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "darf höchstens %(maxlength)d Bytes groß sein" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "muss genau %(length)d Bytes groß sein" - -#, fuzzy -msgid "must be a certificate" -msgstr "Ein Zertifikat widerrufen." - -#, fuzzy -msgid "must be a certificate signing request" -msgstr "Eine Signaturanfrage (CSR) senden." - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "Fehler beim Dekodieren der Signaturanfrage für das Zertifikat: %s" - -msgid "must be Unicode text" -msgstr "muss Unicode-Text sein" - -msgid "Leading and trailing spaces are not allowed" -msgstr "Führende und angehängte Leerzeichen sind nicht erlaubt." - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "muss mindestens %(minlength)d Zeichen lang sein" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "darf höchstens %(maxlength)d Zeichen lang sein" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "muss genau %(length)d Zeichen lang sein" - -#, fuzzy, python-format -msgid "The character %(char)r is not allowed." -msgstr "Attribut \"%(attribute)s\" ist nicht erlaubt" - -#, python-format -msgid "must be '%(value)s'" -msgstr "muss '%(value)s' sein" - -#, python-format -msgid "must be one of %(values)s" -msgstr "muss eines von %(values)s sein" - -msgid "must be datetime value" -msgstr "muss ein datetime-Wert sein" - -msgid "does not match any of accepted formats: " -msgstr "" - -#, fuzzy -msgid "incomplete time value" -msgstr "muss ein datetime-Wert sein" - -msgid "must be DNS name" -msgstr "muss ein DNS-Name sein" - -msgid "must be absolute" -msgstr "muss absolut sein" - -msgid "must be relative" -msgstr "muss relativ sein" - -#, fuzzy -msgid "must be dictionary" -msgstr "muss im Binärformat sein" - -#, fuzzy -msgid "must be Kerberos principal" -msgstr "Kerberos-Principal" - -#, fuzzy, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "Wert von %(name)s auf »%(value)s« ändern?" - -#, fuzzy -msgid "Service principal is required" -msgstr "Dienst-Principal" - -#, fuzzy -msgid "must be at least 0" -msgstr "muss mindestens %(minvalue)d sein" - -#, fuzzy -msgid "invalid valid hex" -msgstr "Ungültiger Domainname: %s" - -#, fuzzy -msgid "invalid serial number 0" -msgstr "Seriennummer" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "Abruf der Zertifikatkette fehlgeschlagen: %s" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "Anfrage fehlgeschlagen, HTTP-Status: %d" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "Abfrage des CA-Status fehlgeschlagen: %s" - -#, fuzzy, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "Abfrage des CA-Status fehlgeschlagen: %s" - -#, python-format -msgid "objectclass %s not found" -msgstr "Objektklasse %s nicht gefunden" - -#, fuzzy -msgid "Trusting forest" -msgstr "Vertrauenseinstellungen" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "Unbekannt" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "Failed to authenticate to CA REST API" -msgstr "" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "" - -#, fuzzy, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "%(parent)s: %(oname)s nicht gefunden" - -msgid "automount location" -msgstr "Automount-Ort" - -msgid "automount locations" -msgstr "Automount-Orte" - -msgid "Automount Locations" -msgstr "Automount-Orte" - -msgid "Automount Location" -msgstr "Automount-Ort" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "Automount Ort \"%(value)s\" hinzugefügt" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "Automount-Ort \"%(value)s\" gelöscht" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "%(count)d Automount-Ort gefunden" -msgstr[1] "%(count)d Automount-Orte gefunden" - -msgid "automount map" -msgstr "Automount-Map" - -msgid "automount maps" -msgstr "Automount-Maps" - -msgid "Automount Maps" -msgstr "Automount-Maps" - -msgid "Automount Map" -msgstr "Automount-Map" - -#, fuzzy, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "Automount Ort \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "Automount-Ort \"%(value)s\" gelöscht" - -#, fuzzy, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "Gruppe »%(value)s« geändert" - -#, fuzzy, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "%(count)d Automount-Ort gefunden" -msgstr[1] "%(count)d Automount-Orte gefunden" - -#, fuzzy -msgid "Automount key object." -msgstr "Automount-Ort" - -#, fuzzy -msgid "automount key" -msgstr "Automount-Map" - -#, fuzzy -msgid "automount keys" -msgstr "Automount-Maps" - -#, fuzzy -msgid "Automount Keys" -msgstr "Automount-Maps" - -#, fuzzy -msgid "Automount Key" -msgstr "Automount" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, fuzzy, python-format -msgid "key named %(key)s already exists" +msgid "%(oname)s with name \"%(pkey)s\" already exists" msgstr "%(oname)s mit dem Namen »%(pkey)s« existiert bereits" #, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, fuzzy, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "Automount Ort \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "Automount Ort \"%(value)s\" hinzugefügt" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "Automount-Ort \"%(value)s\" gelöscht" - -#, fuzzy, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" bearbeitet" - -#, fuzzy, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "%(count)d Automount-Ort gefunden" -msgstr[1] "%(count)d Automount-Orte gefunden" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "CA ist nicht konfiguriert" - -#, fuzzy -msgid "invalid Profile ID" -msgstr "Profil-ID" - -#, fuzzy -msgid "Certificate Profile" -msgstr "Benutze Zertifikatsprofil" - -#, fuzzy -msgid "Certificate Profiles" -msgstr "Benutze Zertifikatsprofil" - -#, fuzzy -msgid "Profile configuration" -msgstr "OTP Konfiguration" - -#, fuzzy, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "%(count)d Rolle gefunden" -msgstr[1] "%(count)d Rollen gefunden" - -#, fuzzy, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "Rolle \"%(value)s\" gelöscht" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "Rolle \"%(value)s\" gelöscht" - -#, fuzzy, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" - -#, fuzzy, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "Rolle \"%(value)s\" geändert" - -#, fuzzy -msgid "Certificate profiles cannot be renamed" -msgstr "Benutze Zertifikatsprofil" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -msgid "delegation" -msgstr "Delegation" - -msgid "delegations" -msgstr "Delegationen" - -msgid "Delegations" -msgstr "Delegationen" - -msgid "Delegation" -msgstr "Delegation" - -msgid "ACI" -msgstr "ACI" - -#, fuzzy, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "Rolle \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "Rolle \"%(value)s\" gelöscht" - -#, fuzzy, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "Rolle \"%(value)s\" geändert" - -#, fuzzy, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "%(count)d Rolle gefunden" -msgstr[1] "%(count)d Rollen gefunden" - -#, fuzzy -msgid "" -"\n" -"DNS server configuration\n" -msgstr "RADIUS-Proxy Konfiguration" - -#, fuzzy -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "Vererbt von Serverkonfiguration" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -#, fuzzy -msgid "DNS server" -msgstr "Server" - -#, fuzzy -msgid "DNS servers" -msgstr "Server" - -#, fuzzy -msgid "DNS Servers" -msgstr "Radius Server" - -#, fuzzy -msgid "DNS Server" -msgstr "Radius Server" - -#, fuzzy -msgid "DNS Server name" -msgstr "Servername" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "DNS ist nicht konfiguriert" - -#, fuzzy -msgid "Modify DNS server configuration" -msgstr "Vererbt von Serverkonfiguration" - -#, fuzzy, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "Dienst »%(value)s« geändert" - -#, fuzzy -msgid "Search for DNS servers." -msgstr "Nach DNS-Ressourcen suchen." - -#, fuzzy, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -#, fuzzy -msgid "IPA DNS Server is not installed" -msgstr "Zu verwendender IPA-Server" - -#, fuzzy -msgid "Display configuration of a DNS server." -msgstr "Informationen zu einem IPA-Dienst anzeigen." - -#, fuzzy -msgid "Add a new DNS server." -msgstr "Einen neuen Benutzer hinzufügen." - -#, fuzzy, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "Dienst »%(value)s« hinzugefügt" - -#, fuzzy -msgid "Delete a DNS server" -msgstr "Einen Benutzer löschen" - -#, fuzzy, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -#, fuzzy, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" -"Domain Level kann nicht auf {0} erhöht werden, Server {1} unterstützt das " -"nicht." - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "Domain Level kann nicht gesenkt werden." - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" -"Domain Level kann nicht auf {0} erhöht werden, Server {1} unterstützt das " -"nicht." - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "Gruppen" - -msgid "User Group" -msgstr "Benutzergruppe" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "Gruppe »%(value)s« hinzugefügt" - -#, fuzzy -msgid "gid cannot be set for external group" -msgstr "In externe Gruppe umwandeln" - -#, fuzzy -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "Attribut \"%s\" ist nicht erlaubt" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Gruppe »%(value)s« gelöscht" - -#, fuzzy -msgid "privileged group" -msgstr "Keine private Gruppe" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Gruppe »%(value)s« geändert" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "%(count)d passende Gruppe" -msgstr[1] "%(count)d passende Gruppen" - -#, fuzzy -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"Kann den ausgewählten Befehl nicht ohne Samba 4 Unterstützung ausführen. " -"Stellen Sie sicher, dass das server-trust-ad Paket von IPA installiert ist." - -#, fuzzy -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" -"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " -"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " -"auf dieser Maschine ausgeführt wurde." - -#, fuzzy, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer \"%(value)s\" gelöscht" - -msgid "not allowed to modify user entries" -msgstr "Es ist nicht erlaubt, Benutzereinträge zu ändern." - -msgid "not allowed to modify group entries" -msgstr "Es ist nicht erlaubt, Gruppeneinträge zu ändern." - -msgid "Not a managed group" -msgstr "Keine verwaltete Gruppe" - -#, fuzzy -msgid "Add users that can manage members of this group." -msgstr "Nutzer hinzufügen die diesen Token verwalten können" - -#, fuzzy -msgid "Remove users that can manage members of this group." -msgstr "Nutzer entfernen die diesen Token verwalten können" - -#, fuzzy -msgid "Host-based access control commands" -msgstr "HBAC Nutzung simulieren" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "HBAC-Dienste" - -msgid "HBAC Services" -msgstr "HBAC-Dienste" - -msgid "HBAC Service" -msgstr "HBAC-Dienst" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "HBAC Dienst \"%(value)s\" hinzugefügt" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "HBAC Dienst \"%(value)s\" gelöscht" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "HBAC Dienst \"%(value)s\" geändert" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "%(count)d HBAC-Dienst gefunden" -msgstr[1] "%(count)d HBAC-Dienste gefunden" - -msgid "HBAC service group" -msgstr "HBAC-Dienstgruppe" - -msgid "HBAC service groups" -msgstr "HBAC-Dienstgruppen" - -msgid "HBAC Service Groups" -msgstr "HBAC-Dienstgruppen" - -msgid "HBAC Service Group" -msgstr "HBAC-Dienstgruppe" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "HBAC-Dienstgruppe »%(value)s« hinzugefügt" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "HBAC-Dienstgruppe »%(value)s« gelöscht" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "HBAC-Dienstgruppe »%(value)s« geändert" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "%(count)d HBAC-Dienstgruppe gefunden" -msgstr[1] "%(count)d HBAC-Dienstgruppen gefunden" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "host groups" -msgstr "Hostgruppen" - -msgid "Host Group" -msgstr "Hostgruppe" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Hostgruppe \"%(value)s\" hinzugefügt" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Hostgruppe \"%(value)s\" gelöscht" - -#, fuzzy -msgid "hostgroup" -msgstr "Hostgruppe" - -#, fuzzy -msgid "privileged hostgroup" -msgstr "Hostgruppe löschen." - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Hostgruppe \"%(value)s\" geändert" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "%(count)d Hostgruppe gefunden" -msgstr[1] "%(count)d Hostgruppen gefunden" - -#, fuzzy -msgid "Add users that can manage members of this hostgroup." -msgstr "Nutzer hinzufügen die diesen Token verwalten können" - -#, fuzzy -msgid "Remove users that can manage members of this hostgroup." -msgstr "Nutzer entfernen die diesen Token verwalten können" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -#, fuzzy -#| msgid "No private group" -msgid "Auto private groups" -msgstr "Keine private Gruppe" - -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -#, fuzzy -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"Kann den ausgewählten Befehl nicht ohne Samba 4 Unterstützung ausführen. " -"Stellen Sie sicher, dass das server-trust-ad Paket von IPA installiert ist." - -#, fuzzy -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" -"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " -"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " -"auf dieser Maschine ausgeführt wurde." - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "Rolle \"%(value)s\" hinzugefügt" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "Rolle \"%(value)s\" gelöscht" - -#, fuzzy, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d Rolle gefunden" -msgstr[1] "%(count)d Rollen gefunden" - -#, fuzzy -msgid "" -"Modify ID range.\n" -"\n" -msgstr "Rolle ändern." - -#, fuzzy, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "Rolle \"%(value)s\" geändert" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -#, fuzzy -msgid "" -"\n" -"IPA locations\n" -msgstr "Aktionen" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -#, fuzzy -msgid "location" -msgstr "Ort" - -#, fuzzy -msgid "locations" -msgstr "Ort" - -#, fuzzy -msgid "IPA Locations" -msgstr "Ort" - -#, fuzzy -msgid "IPA Location" -msgstr "Ort" - -#, fuzzy -msgid "Location name" -msgstr "Ort" - -#, fuzzy -msgid "IPA location name" -msgstr "Automount-Ort" - -#, fuzzy -msgid "IPA Location description" -msgstr "Gruppenbeschreibung" - -#, fuzzy -msgid "Servers" -msgstr "Server" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -#, fuzzy -msgid "Add a new IPA location." -msgstr "Neuen OTP-Token hinzufügen" - -#, fuzzy, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "Automount Ort \"%(value)s\" hinzugefügt" - -#, fuzzy -msgid "Delete an IPA location." -msgstr "Automount-Ort löschen." - -#, fuzzy, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Automount-Ort \"%(value)s\" gelöscht" - -msgid "IPA Server" -msgstr "IPA-Server" - -#, fuzzy -msgid "Modify information about an IPA location." -msgstr "Hostinformationen ändern." - -#, fuzzy, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "OTP Token \"%(value)s\" geändert" - -#, fuzzy -msgid "Search for IPA locations." -msgstr "OTP Token suchen." - -#, fuzzy, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "%(count)d Automount-Ort gefunden" -msgstr[1] "%(count)d Automount-Orte gefunden" - -#, fuzzy -msgid "Display information about an IPA location." -msgstr "Informationen über OTP Token anzeigen." - -#, fuzzy -msgid "Servers in location" -msgstr "Servername" - -#, fuzzy -msgid "netgroups" -msgstr "Gruppen" - -#, fuzzy -msgid "Netgroups" -msgstr "Gruppen" - -#, fuzzy -msgid "Netgroup" -msgstr "Gruppe" - -#, fuzzy, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "Gruppe »%(value)s« hinzugefügt" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Gruppe »%(value)s« gelöscht" - -#, fuzzy, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "Gruppe »%(value)s« geändert" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" -"Benutzerkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " -"Benutzer gibt" - -#, fuzzy -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" -"Benutzerkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " -"Benutzer gibt" - -#, fuzzy, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "%(count)d passende Gruppe" -msgstr[1] "%(count)d passende Gruppen" - -msgid "One time password commands" -msgstr "Einmalpasswort Befehle" - -msgid "OTP configuration options" -msgstr "OTP-Konfigurationsoptionen" - -msgid "OTP Configuration" -msgstr "OTP Konfiguration" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" -"\n" -"OTP Tokens\n" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" -"\n" -"OTP-Tokens bearbeiten.\n" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "OTP Token" - -msgid "OTP tokens" -msgstr "OTP Tokens" - -msgid "OTP Tokens" -msgstr "OTP Token" - -msgid "OTP Token" -msgstr "OTP Token" - -msgid "URI" -msgstr "URI" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "OTP token \"%(value)s\" hinzugefügt" - -#, fuzzy -msgid "cannot be empty" -msgstr "Darf nicht leer sein" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "OTP token \"%(value)s\" gelöscht" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "OTP Token \"%(value)s\" geändert" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "%(count)d OTP Token gefunden" -msgstr[1] "%(count)d OTP Tokens gefunden" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Passwort für \"%(value)s\" geändert" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "PKINIT" - -#, fuzzy -msgid "PKINIT status" -msgstr "PKINIT" - -#, fuzzy -msgid "Whether PKINIT is enabled or disabled" -msgstr "Dieser Eintrag kann nicht aktiviert oder deaktiviert werden" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -#, fuzzy -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "Radius Server" - -#, fuzzy -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "Radius Server" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -#, fuzzy -msgid "invalid attribute name" -msgstr "%s ist kein gültiges Attribut" - -#, fuzzy -msgid "invalid port number" -msgstr "Seriennummer" - -#, fuzzy -msgid "RADIUS proxy server" -msgstr "RADIUS-Proxy Benutzername" - -#, fuzzy -msgid "RADIUS proxy servers" -msgstr "RADIUS-Proxy Benutzername" - -msgid "RADIUS Servers" -msgstr "Radius Server" - -#, fuzzy -msgid "RADIUS Server" -msgstr "Radius Server" - -#, fuzzy, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "HBAC Dienst \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "HBAC Dienst \"%(value)s\" gelöscht" - -#, fuzzy, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "HBAC Dienst \"%(value)s\" geändert" - -#, fuzzy, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "%(count)d HBAC-Dienst gefunden" -msgstr[1] "%(count)d HBAC-Dienste gefunden" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -#, fuzzy -msgid "Realm domains" -msgstr "Realm-Name" - -#, fuzzy -msgid "Realm Domains" -msgstr "Domain" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -#, fuzzy -msgid "IPA server domain cannot be deleted" -msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" - -msgid "roles" -msgstr "Rollen" - -msgid "Role" -msgstr "Rolle" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "Rolle \"%(value)s\" hinzugefügt" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "Rolle \"%(value)s\" gelöscht" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "Rolle \"%(value)s\" geändert" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d Rolle gefunden" -msgstr[1] "%(count)d Rollen gefunden" - -#, fuzzy -msgid "self service permission" -msgstr "Beschreibung des HBAC-Dienstes" - -#, fuzzy -msgid "self service permissions" -msgstr "Berechtigungen" - -#, fuzzy -msgid "Self Service Permissions" -msgstr "Berechtigungen" - -#, fuzzy -msgid "Self Service Permission" -msgstr "Berechtigung" - -#, fuzzy, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "Dienst »%(value)s« hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -#, fuzzy, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "Dienst »%(value)s« geändert" - -#, fuzzy, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -#, fuzzy -msgid "" -"\n" -"IPA server roles\n" -msgstr "" -"\n" -"IPA-Server\n" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -#, fuzzy -msgid "server role" -msgstr "Server" - -#, fuzzy -msgid "server roles" -msgstr "Server" - -#, fuzzy -msgid "IPA Server Roles" -msgstr "IPA-Server" - -#, fuzzy -msgid "IPA Server Role" -msgstr "Zu verwendender IPA-Server" - -#, fuzzy -msgid "IPA server role name" -msgstr "IPA-Server Hostname" - -#, fuzzy -msgid "Role status" -msgstr "Regelstatus" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "%(count)d Rolle gefunden" -msgstr[1] "%(count)d Rollen gefunden" - -msgid "Include IPA master entries" -msgstr "" - -#, fuzzy -msgid "IPA role name" -msgstr "Rollenname" - -#, fuzzy, python-brace-format -msgid "{role}: role not found" -msgstr "Realm nicht gefunden\n" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -#, fuzzy -msgid "Member principals" -msgstr "Kerberos-Principal" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "Mitglied %s" - -#, fuzzy -msgid "Remove member from a named service delegation." -msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." - -#, fuzzy -msgid "service delegation rule" -msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." - -#, fuzzy -msgid "service delegation rules" -msgstr "Delegationen" - -#, fuzzy -msgid "Service delegation rules" -msgstr "Diensteinstellungen" - -#, fuzzy -msgid "Service delegation rule" -msgstr "Diensteinstellungen" - -#, fuzzy, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "Dienst »%(value)s« hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -msgid "privileged service delegation rule" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -#, fuzzy -msgid "service delegation target" -msgstr "Delegationsname" - -#, fuzzy -msgid "service delegation targets" -msgstr "Diensteinstellungen" - -#, fuzzy -msgid "Service delegation targets" -msgstr "Diensteinstellungen" - -#, fuzzy -msgid "Service delegation target" -msgstr "Diensteinstellungen" - -#, fuzzy, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "Dienst »%(value)s« hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -msgid "privileged service delegation target" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -#, fuzzy -msgid "Subordinate id description" -msgstr "Gruppenbeschreibung" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -msgid "SubUID range size" -msgstr "" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -msgid "SubGID range size" -msgstr "" - -msgid "Subordinate group ID count" -msgstr "" - -#, fuzzy, python-format -#| msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "%(oname)s mit dem Namen »%(pkey)s« existiert bereits" - -#, fuzzy, python-format -#| msgid "%(port)s is not a valid port" -msgid "'%(dn)s is not a valid user" -msgstr "%(port)s kein gültiger Port" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -#, fuzzy -#| msgid "Add a new stage user." -msgid "Add a new subordinate id." -msgstr "Einen neuen vorbereiteten Benutzer hinzufügen." - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added subordinate id \"%(value)s\"" -msgstr "Dienst »%(value)s« hinzugefügt" - -#, fuzzy -msgid "Delete a subordinate id." -msgstr "Benutze Zertifikatsprofil" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -#, fuzzy -#| msgid "Modify a stage user." -msgid "Modify a subordinate id." -msgstr "Einen vorbereiteten Benutzer ändern." - -#, fuzzy, python-format -#| msgid "Modified service \"%(value)s\"" -msgid "Modified subordinate id \"%(value)s\"" -msgstr "Dienst »%(value)s« geändert" - -#, fuzzy -msgid "Search for subordinate id." -msgstr "Nach Rollen suchen." - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -#, fuzzy -msgid "Display information about a subordinate id." -msgstr "Informationen über eine Rolle anzeigen." - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "Befehle zum Steuern der sudo-Konfiguration" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -msgid "sudo command" -msgstr "Sudo-Befehl" - -msgid "sudo commands" -msgstr "Sudo-Befehle" - -msgid "Sudo Commands" -msgstr "Sudo-Befehle" - -#, fuzzy, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "CA ACL \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "ACI gelöscht \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "ACI geändert \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "%(count)d ACI gefunden" -msgstr[1] "%(count)d ACIs gefunden" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "Sudo-Befehlsgruppe" - -msgid "sudo command groups" -msgstr "Sudo-Befehlsgruppen" - -#, fuzzy, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Gruppe »%(value)s« hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Gruppe »%(value)s« gelöscht" - -#, fuzzy, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Gruppe »%(value)s« geändert" - -#, fuzzy, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "%(count)d passende Gruppe" -msgstr[1] "%(count)d passende Gruppen" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -#, fuzzy -msgid "segments" -msgstr "Segment Details" - -#, fuzzy -msgid "Topology Segments" -msgstr "Topologie" - -#, fuzzy -msgid "Topology Segment" -msgstr "Topologie" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "%(count)d Host gefunden" -msgstr[1] "%(count)d Hosts gefunden" - -#, fuzzy, python-format -msgid "Added segment \"%(value)s\"" -msgstr "Host \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "Host \"%(value)s\" gelöscht" - -#, fuzzy, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "Host \"%(value)s\" geändert" - -#, fuzzy, python-format -msgid "%(value)s" -msgstr "»%(value)s« gefunden" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, fuzzy -msgid "suffixes" -msgstr "UPN Suffixe" - -#, fuzzy -msgid "Topology suffixes" -msgstr "Topologie" - -#, fuzzy -msgid "Topology suffix" -msgstr "Topologie" - -#, fuzzy, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "%(count)d Host gefunden" -msgstr[1] "%(count)d Hosts gefunden" - -#, fuzzy, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Host \"%(value)s\" gelöscht" - -#, fuzzy, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "Host \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "Host \"%(value)s\" geändert" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, fuzzy, python-format -msgid "not allowed to perform operation: %s" -msgstr "Es ist nicht erlaubt, Gruppeneinträge zu ändern." - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" -"\n" -"IPA-Server\n" - -#, fuzzy -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "Informationen zu einem IPA-Dienst anzeigen." - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "Server" - -msgid "servers" -msgstr "Server" - -msgid "IPA Servers" -msgstr "IPA-Server" - -#, fuzzy -msgid "Server location" -msgstr "Dienstkategorie" - -#, fuzzy -msgid "Service weight" -msgstr "Diensteinstellungen" - -#, fuzzy -msgid "Weight for server services" -msgstr "Nach IPA-Diensten suchen." - -#, fuzzy -msgid "Service relative weight" -msgstr "Diensteinstellungen" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -#, fuzzy -msgid "Enabled server roles" -msgstr "Dienst »%(value)s« deaktiviert" - -msgid "List of enabled roles" -msgstr "" - -#, fuzzy -msgid "Modify information about an IPA server." -msgstr "Informationen zu einem IPA-Dienst anzeigen." - -#, fuzzy, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "Dienst »%(value)s« geändert" - -#, fuzzy, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -#, fuzzy, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, fuzzy, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "Fehler auf Server '%(server)s': %(error)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, fuzzy, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "Fehler auf Server '%(server)s': %(error)s" - -#, fuzzy -msgid "Server has already been deleted" -msgstr "Dieser Eintrag ist bereits aktiviert" - -msgid "Agreements deleted" -msgstr "" - -#, fuzzy -msgid "Following segments were not deleted:" -msgstr "Einige Einträge wurden nicht gelöscht" - -#, fuzzy, python-format -msgid "must be \"%s\"" -msgstr "muss '%(value)s' sein" - -#, fuzzy -msgid "not allowed to perform server connection check" -msgstr "Es ist nicht erlaubt, Benutzereinträge zu ändern." - -msgid "Set enabled/hidden state of a server." -msgstr "" - -#, fuzzy -msgid "State" -msgstr "Status" - -#, fuzzy -msgid "Server state" -msgstr "Servername" - -#, fuzzy, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "Passwort für \"%(value)s\" geändert" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "A list of ACI values" -msgstr "Liste von ACI-Werten" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" -"»type«, »filter«, »subtree« und »targetgroup« schließen sich gegenseitig aus." - -msgid "ACI prefix is required" -msgstr "ACI-Präfix ist erforderlich" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" -"mindestens eines von »type«, »filter«, »subtree«, »targetgroup«, »attrs« " -"oder »memberof« wird benötigt" - -msgid "filter and memberof are mutually exclusive" -msgstr "»filter« und »memberof« schließen sich gegenseitig aus" - -msgid "group, permission and self are mutually exclusive" -msgstr "»group«, »permission« und »self« schließen sich gegenseitig aus" - -msgid "One of group, permission or self is required" -msgstr "Eines von »group«, »permission« oder »self« wird benötigt" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "Gruppe »%s« existiert nicht" - -msgid "empty filter" -msgstr "Filter ist leer" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Syntaxfehler: %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "ungültiger DN (%s)" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "ACI mit dem Namen »%s« nicht gefunden" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "ACIs" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "ACI erstellt \"%(value)s\"" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "ACI gelöscht \"%(value)s\"" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "ACI geändert \"%(value)s\"" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d ACI gefunden" -msgstr[1] "%(count)d ACIs gefunden" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "ACI umbenannt zu \"%(value)s\"" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" -"\n" -"Regel für Auto-Mitgliedschaft\n" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" -"\n" -" Auto-Mitgliedschaftsregel bearbeiten. " - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" -"Auto-Mitgliedschaft für alle Mitglieder einer Gruppierung neu erstellen" - -#, fuzzy -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" -"Auto-Mitgliedschaft für alle Mitglieder einer Gruppierung neu erstellen" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "Regel für Auto-Mitgliedschaft" +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "%(operation)s wird für %(principal_type)s Principals nicht unterstützt" #, python-format msgid "%(otype)s \"%(oname)s\" not found" msgstr "%(otype)s \"%(oname)s\" nicht gefunden" -#, python-format -msgid "%s is not a valid attribute." -msgstr "%s ist kein gültiges Attribut" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" -"\n" -" Auto-Mitgliedschaftsregel hinzufügen.\n" -" " - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" hinzugefügt" - -msgid "Auto Membership is not configured" -msgstr "Auto-Mitgliedschaft ist nicht konfiguriert" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" -"\n" -" Bedigungen zu einer Auto-Mitgliedschaftsregel hinzufügen.\n" -" " - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Bedingung(en) zu \"%(value)s\" hinzugefügt" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "Auto-Mitgliedschaftsregel: %s nicht gefunden!" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" -"\n" -" Bedingungen von einer einer Auto-Mitglieschaftsregel entfernen. " - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" -"\n" -" Auto-Mitgliedschaftsregel bearbeiten. " - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" bearbeitet" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" -"\n" -" Auto-Mitgliedschaftsregel löschen.\n" -" " - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" gelöscht" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" -"\n" -" Suche nach Auto-Mitgliedschaftsregeln.\n" -" " - -#, fuzzy, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d Rolle gefunden" -msgstr[1] "%(count)d Rollen gefunden" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" -"\n" -" Informationen über Auto-Mitgliedschaftsregel anzeigen.\n" -" " - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -#, fuzzy -msgid "No default (fallback) group set" -msgstr "Standard (Rückfall) Gruppe" - -#, fuzzy -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" -"\n" -" Informationen über Auto-Mitgliedschaftsregel anzeigen.\n" -" " - -msgid "Task DN" -msgstr "Aufgaben DN" - -msgid "DN of the started task" -msgstr "DN der gestarteten Aufgabe" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "Mindestens eine der Optionen: type, users, hosts muss gesetzt sein" - -msgid "users and hosts cannot both be set" -msgstr "Benutzer und Host können nicht gleichzeitig gesetzt sein." - -msgid "hosts cannot be set when type is 'group'" -msgstr "hosts kann nicht gesetzt sein wenn Typ 'group' ist" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "users kann nicht gesetzt sein wenn Typ 'hostgroup' ist" - -msgid "Automember rebuild membership task started" -msgstr "Aufgabe für die Neuerstellung der Auto-Mitgliedschaft gestartet" - -msgid "Automember rebuild membership task completed" -msgstr "Aufgabe für die Neuerstellung der Auto-Mitgliedschaft abgeschlossen" - -#, python-format -msgid "Task DN = '%s'" -msgstr "Aufgaben DN = '%s'" - -msgid "Automember" -msgstr "Auto-Mitgliedschaft" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -#, fuzzy -msgid "Remove orphan automember rules" -msgstr "" -"\n" -" Bedingungen von einer einer Auto-Mitglieschaftsregel entfernen. " - -msgid "Member service groups" -msgstr "Mitglieds-Dienstgruppen" - -msgid "Member HBAC service groups" -msgstr "Mitglieds-HBAC-Servicegruppen" - -#, fuzzy -msgid "Member ID user overrides" -msgstr "Mitglieds-Dienste" - -#, fuzzy -msgid "Indirect Member ID user overrides" -msgstr "Indirekte Mitglieds-Benutzer" - -msgid "Indirect Member permissions" -msgstr "Indirekte Mitglieds-Berechtigungen" - -msgid "Indirect Member HBAC service" -msgstr "Indirekte Mitgli" - -msgid "Indirect Member HBAC service group" -msgstr "Indirekte Mitglieds-HBAC-Servicegruppe" - -msgid "Invalid format. Should be name=value" -msgstr "Ungültiges Format. Sollte name=wert sein." - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "Ein IPA Masterhost kann nicht deaktiviert oder gelöscht werden" - -msgid "entry" -msgstr "Eintrag" - -msgid "entries" -msgstr "Einträge" - -msgid "Entry" -msgstr "Eintrag" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "Container-Eintrag (%(container)s) nicht gefunden" - #, python-format msgid "%(parent)s: %(oname)s not found" msgstr "%(parent)s: %(oname)s nicht gefunden" @@ -16404,34 +370,25 @@ msgid "%(pkey)s: %(oname)s not found" msgstr "%(pkey)s: %(oname)s nicht gefunden" #, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "%(oname)s mit dem Namen »%(pkey)s« existiert bereits" +msgid "%(port)s is not a valid port" +msgstr "%(port)s kein gültiger Port" #, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "Attribut \"%(attribute)s\" ist nicht erlaubt" - -#, fuzzy, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "Attribut \"%s\" ist nicht erlaubt" - -msgid "attribute is not configurable" -msgstr "Attribut ist nicht konfigurierbar" - -msgid "No such attribute on this entry" -msgstr "" +msgid "%(reason)s" +msgstr "%(reason)s" #, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" - -msgid "the entry was deleted while being modified" -msgstr "Der Eintrag wurde während der Änderung entfernt." +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "LDAP Zeitüberschreitung für %(task)s , Task DN: '%(task_dn)s'" #, python-format msgid "%s" msgstr "%s" +#, python-format +msgid "%s is not a valid attribute." +msgstr "%s ist kein gültiges Attribut" + #, python-format msgid "%s to add" msgstr "%s zum hinzufügen" @@ -16441,3674 +398,234 @@ msgid "%s to remove" msgstr "%s zum entfernen" #, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" +msgid "%s: user is already preserved" +msgstr "%s: Benutzer ist bereits aufbewahrt" #, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "'%(command)s' ist veraltet. %(additional_info)s" #, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, fuzzy, python-format -msgid "added attribute value to entry %(value)s" -msgstr "Automount Ort \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" +msgid "'%(entry)s' doesn't have a certificate." +msgstr "»%(entry)s« verfügt nicht über ein Zertifikat." #, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -#, fuzzy -msgid "pyhbac is not installed." -msgstr "Eine leere Domäne ist nicht zulässig" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -#, fuzzy -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" -"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " -"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " -"auf dieser Maschine ausgeführt wurde." +msgid "'%(name)s' is required" +msgstr "'%(name)s' wird benötigt" #, python-format -msgid "Access granted: %s" -msgstr "Zugriff gewährt: %s" - -#, fuzzy -msgid "" -"\n" -"Permissions\n" -msgstr "Berechtigungen" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Managed permissions\n" -msgstr "Berechtigungen" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -#, fuzzy -msgid "must be enclosed in parentheses" -msgstr "muss eine Ganzzahl sein" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, fuzzy, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "%s ist kein gültiges Attribut" - -#, fuzzy, python-format -msgid "Deprecated; use %s" -msgstr "Veraltete Optionen" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, fuzzy, python-format -msgid "Entry %s not found" -msgstr "Objektklasse %s nicht gefunden" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, fuzzy, python-format -msgid "%s: group not found" -msgstr "Realm nicht gefunden\n" - -#, fuzzy -msgid "target and targetgroup are mutually exclusive" -msgstr "" -"»type«, »filter«, »subtree« und »targetgroup« schließen sich gegenseitig aus." - -#, fuzzy -msgid "subtree and type are mutually exclusive" -msgstr "»filter« und »memberof« schließen sich gegenseitig aus" - -#, fuzzy -msgid "Bad search filter" -msgstr "Falscher Suchfilter %(info)s" - -#, fuzzy, python-format -msgid "Entry %s does not exist" -msgstr "Gruppe »%s« existiert nicht" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, fuzzy, python-format -msgid "Added permission \"%(value)s\"" -msgstr "Rolle \"%(value)s\" hinzugefügt" - -#, fuzzy -msgid "attrs and included attributes are mutually exclusive" -msgstr "»filter« und »memberof« schließen sich gegenseitig aus" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "Rolle \"%(value)s\" gelöscht" - -#, fuzzy -msgid "cannot delete managed permissions" -msgstr "Indirekte Mitglieds-Berechtigungen" - -#, fuzzy, python-format -msgid "ACI of permission %s was not found" -msgstr "ACI mit dem Namen »%s« nicht gefunden" - -#, fuzzy, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "Rolle \"%(value)s\" geändert" - -#, fuzzy -msgid "cannot rename managed permissions" -msgstr "Indirekte Mitglieds-Berechtigungen" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -#, fuzzy -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "»filter« und »memberof« schließen sich gegenseitig aus" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "%(count)d Rolle gefunden" -msgstr[1] "%(count)d Rollen gefunden" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, fuzzy, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "Rolle \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "Rolle \"%(value)s\" gelöscht" - -#, fuzzy, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "Rolle \"%(value)s\" geändert" - -#, fuzzy, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)d Rolle gefunden" -msgstr[1] "%(count)d Rollen gefunden" - -#, fuzzy -msgid "" -"\n" -"API Schema\n" -msgstr "LDAP-Schema" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -#, fuzzy -msgid "Name" -msgstr "Host-Name" - -#, fuzzy -msgid "Documentation" -msgstr "Authentifizierung" - -msgid "Exclude from" -msgstr "" - -#, fuzzy -msgid "Include in" -msgstr "Aktivierte einschließen" - -msgid "Help topic" -msgstr "" - -#, fuzzy -msgid "Version" -msgstr "Berechtigung" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "Datensatzname" - -#, fuzzy -msgid "Display information about a command." -msgstr "Informationen über Host anzeigen." - -#, fuzzy -msgid "Search for commands." -msgstr "Nach Sudo-Befehlen suchen." - -#, fuzzy -msgid "Return command defaults" -msgstr "Befehle ausführen" - -#, fuzzy, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "Realm nicht gefunden\n" - -#, fuzzy -msgid "Display information about a class." -msgstr "Informationen über Host anzeigen." - -#, fuzzy -msgid "Search for classes." -msgstr "Nach Rollen suchen." - -#, fuzzy -msgid "Display information about a help topic." -msgstr "Informationen über Host anzeigen." - -#, fuzzy -msgid "Search for help topics." -msgstr "Nach Hostgruppen suchen." - -#, fuzzy -msgid "Required" -msgstr "Anfrage-ID" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "ACI-Name" - -#, fuzzy -msgid "Confirm (password)" -msgstr "Passwort ändern" - -#, fuzzy -msgid "Default" -msgstr "Vorgabe-Shell" - -#, fuzzy -msgid "Default from" -msgstr "Standard Hostgruppe" - -msgid "Label" -msgstr "" - -#, fuzzy -msgid "Convert on server" -msgstr "Hostname dieses Servers" - -#, fuzzy -msgid "Option group" -msgstr "Hostgruppe" - -msgid "Sensitive" -msgstr "" - -#, fuzzy -msgid "Positional argument" -msgstr "Positionale Argumente" - -#, fuzzy, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(parent)s: %(oname)s nicht gefunden" - -#, fuzzy -msgid "Display information about a command parameter." -msgstr "Informationen zu einer genannten Gruppe anzeigen." - -#, fuzzy -msgid "Search command parameters." -msgstr "Nach vorbereiteten Benutzern suchen." - -#, fuzzy, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(parent)s: %(oname)s nicht gefunden" - -#, fuzzy -msgid "Display information about a command output." -msgstr "Informationen zu einer genannten Gruppe anzeigen." - -#, fuzzy -msgid "Search for command outputs." -msgstr "Nach Sudo-Befehlen suchen." - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" -"Alternativ sind folgende Server in der Lage den Befehl auszuführen: " -"%(masters)s" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" -"Kann den ausgewählten Befehl nicht ohne Samba 4 Unterstützung ausführen. " -"Stellen Sie sicher, dass das server-trust-ad Paket von IPA installiert ist." - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" -"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " -"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " -"auf dieser Maschine ausgeführt wurde." - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "Vertrauensstellung" - -msgid "trusts" -msgstr "Vertrauensstellungen" - -#, fuzzy -msgid "Trusts" -msgstr "Vertrauensstellung" - -msgid "Trust" -msgstr "Vertrauensstellung" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -#, fuzzy -msgid "Trust direction" -msgstr "Umleitung" - -#, fuzzy -msgid "Trust type" -msgstr "Vertrauensstellungstyp" - -#, fuzzy -msgid "Trust status" -msgstr "Anfragestatus" - -msgid "UPN suffixes" -msgstr "UPN Suffixe" - -#, fuzzy, python-brace-format -msgid "invalid SID: {SID}" -msgstr "ungültiger DN (%s)" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "Externe Vertrauensstellung" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, fuzzy, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Automount-Ort \"%(value)s\" gelöscht" - -msgid "missing base_id" -msgstr "fehlende base_id" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "Vertrauensstellungstyp" - -msgid "only \"ad\" is supported" -msgstr "nur \"ad\" ist unterstützt" - -#, fuzzy -msgid "domain" -msgstr "Domain" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" -"Zum Aufbau einer Vertrauensstellung mit einem Active Directory müssen " -"Domänenname und Realm des IPA Servers übereinstimmen" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "Host \"%(value)s\" gelöscht" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "%(count)d Host gefunden" -msgstr[1] "%(count)d Hosts gefunden" - -#, fuzzy -msgid "trust configuration" -msgstr "Konfiguration" - -#, fuzzy -msgid "Global Trust Configuration" -msgstr "OTP Konfiguration" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "nicht unterstützte Vetrauensstellung" - -#, fuzzy, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "ACI geändert \"%(value)s\"" - -msgid "SID" -msgstr "SID" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" -"Dieser Befehl erfordert die Existenz der \"editors\" Gruppe, diese wurde " -"jedoch nicht gefunden." - -msgid "trust domain" -msgstr "" - -#, fuzzy -msgid "trust domains" -msgstr "Vertrauensstellungen" - -#, fuzzy -msgid "Trusted domains" -msgstr "Vertrauenseinstellungen" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "Domäne aktiviert" - -#, fuzzy, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "Der Server hat keine Informationen über die Domäne '%(domain)s'" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, fuzzy -msgid "not allowed to remotely add agent" -msgstr "Es ist nicht erlaubt, Benutzereinträge zu ändern." - -#, fuzzy, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "Benutzerkonto »%(value)s« wurde aktiviert" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "Host \"%(value)s\" deaktiviert" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" -"\n" -"OTP-Tokens bearbeiten.\n" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -#, fuzzy -msgid "Host is not supported" -msgstr "nur \"ad\" ist unterstützt" - -msgid "KRA service is not enabled" -msgstr "" - -#, fuzzy -msgid "Deleted vault container" -msgstr "Automount-Ort löschen." - -#, fuzzy, python-format -msgid "owner %s" -msgstr "Eigentümer" - -#, fuzzy -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" -"\n" -" Auto-Mitgliedschaftsregel hinzufügen.\n" -" " - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, fuzzy, python-format -msgid "Added vault \"%(value)s\"" -msgstr "Host \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "Host \"%(value)s\" gelöscht" - -#, fuzzy, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "%(count)d Host gefunden" -msgstr[1] "%(count)d Hosts gefunden" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, fuzzy, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "Host \"%(value)s\" geändert" - -#, fuzzy -msgid "Vault configuration" -msgstr "Konfiguration" - -#, fuzzy -msgid "IPA KRA servers" -msgstr "" -"\n" -"IPA-Server\n" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -#, fuzzy -#| msgid "Token hash algorithm" -msgid "Key wrapping algorithm" -msgstr "Token Hash-Algorithmus" - -#, fuzzy, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." - -msgid "Retrieve data from a vault." -msgstr "" - -#, fuzzy, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "muss TRUE oder FALSE sein" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -#, fuzzy -msgid "Principal alias" -msgstr "Principal-Name" - -#, fuzzy -msgid "User password expiration" -msgstr "Passwortablauf" - -msgid "SSH public key fingerprint" -msgstr "Fingerabdruck des öffentlichen SSH-Schlüssels" - -#, fuzzy -msgid "External IdP configuration" -msgstr "Konfiguration" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -#, fuzzy -msgid "Base-64 encoded user certificate" -msgstr "Base-64-kodiertes Serverzertifikat" - -#, fuzzy -msgid "Certificate mapping data" -msgstr "Zertifikattyp" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -#, fuzzy -msgid "SMB Home Directory" -msgstr "Home-Verzeichnis" - -#, fuzzy -msgid "SMB Home Directory Drive" -msgstr "Basis für Home-Verzeichnisse" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "Ungültiges E-Mail-Format: %(email)s" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "Manager %(manager)s nicht gefunden" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "darf höchstens %(len)d Zeichen lang sein" - -msgid "Issuer" -msgstr "Ausgabestelle" - -#, fuzzy -msgid "Issuer of the certificate" -msgstr "Datei, in der das Zertifikat gespeichert werden soll." - -msgid "Subject" -msgstr "Betreff" - -#, fuzzy -msgid "Subject of the certificate" -msgstr "Datei, in der das Zertifikat gespeichert werden soll." - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -#, fuzzy -msgid "Add one or more certificate mappings to the user entry." -msgstr "Manager vom Benutzer entfernen" - -#, fuzzy, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." - -#, fuzzy -msgid "Remove one or more certificate mappings from the user entry." -msgstr "Manager vom Benutzer entfernen" - -#, fuzzy, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "CA ACL" - -msgid "CA ACLs" -msgstr "CA ACLs" - -#, fuzzy -msgid "CA category" -msgstr "Host-Kategorie" - -#, fuzzy -msgid "CA category the ACL applies to" -msgstr "Hostkategorie auf die ACL angewendet wird" - -#, fuzzy -msgid "CAs" -msgstr "CA ACLs" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "CA ACL \"%(value)s\" hinzugefügt" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "CA ACL \"%(value)s\" gelöscht" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "CA ACL \"%(value)s\" geändert" - -#, fuzzy -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" -"Benutzerkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " -"Benutzer gibt" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" -"Profilkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " -"Profile gibt" - -#, fuzzy -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" -"Benutzerkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " -"Benutzer gibt" - -#, fuzzy, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "%(count)d ACI gefunden" -msgstr[1] "%(count)d ACIs gefunden" - -#, fuzzy, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "CA ACL \"%(value)s\" gelöscht" - -#, fuzzy, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "CA ACL \"%(value)s\" gelöscht" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, fuzzy, python-format -msgid "%i users or groups added." -msgstr "Nach Gruppen suchen." - -#, fuzzy -msgid "users cannot be added when user category='all'" -msgstr "users kann nicht gesetzt sein wenn Typ 'hostgroup' ist" - -#, fuzzy, python-format -msgid "%i user or group removed." -msgstr "Anzahl der entfernten Mitglieder" - -#, fuzzy, python-format -msgid "%i users or groups removed." -msgstr "Anzahl der entfernten Mitglieder" - -#, fuzzy, python-format -msgid "%i host or hostgroup added." -msgstr "%(count)d Hostgruppe gefunden" - -#, fuzzy, python-format -msgid "%i hosts or hostgroups added." -msgstr "Fehler bei Hosts/Hostgruppen" - -#, fuzzy -msgid "hosts cannot be added when host category='all'" -msgstr "hosts kann nicht gesetzt sein wenn Typ 'group' ist" - -#, fuzzy, python-format -msgid "%i host or hostgroup removed." -msgstr "%(count)d Hostgruppe gefunden" - -#, fuzzy, python-format -msgid "%i hosts or hostgroups removed." -msgstr "Fehler bei Hosts/Hostgruppen" - -#, fuzzy, python-format -msgid "%i service added." -msgstr "Dienstname" - -#, fuzzy, python-format -msgid "%i services added." -msgstr "Dienste" - -#, fuzzy -msgid "services cannot be added when service category='all'" -msgstr "users kann nicht gesetzt sein wenn Typ 'hostgroup' ist" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, fuzzy, python-format -msgid "%i services removed." -msgstr "Einträge zum löschen auswählen." - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, fuzzy, python-format -msgid "%i profile removed." -msgstr "%s zum entfernen" - -#, fuzzy, python-format -msgid "%i profiles removed." -msgstr "Anzahl der entfernten Berechtigungen" - -#, fuzzy -msgid "Add CAs to a CA ACL." -msgstr "CA ACL löschen." - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -#, fuzzy -msgid "Remove CAs from a CA ACL." -msgstr "Mitglieder von Rolle entfernen." - -#, fuzzy, python-format -msgid "%i CA removed." -msgstr "%s zum entfernen" - -#, fuzzy, python-format -msgid "%i CAs removed." -msgstr "%s zum entfernen" - -#, fuzzy -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "Zertifikattyp" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -#, fuzzy -msgid "Certificate Identity Mapping configuration options" -msgstr "Konfigurationsoptionen bearbeiten." - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -#, fuzzy -msgid "Prompt for the username" -msgstr "Zum Setzen des Passworts auffordern" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -#, fuzzy -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "Die aktuelle Konfiguration anzeigen." - -#, fuzzy -msgid "Certificate Identity Mapping Rules" -msgstr "Zertifikattyp" - -#, fuzzy -msgid "Certificate Identity Mapping Rule" -msgstr "Zertifikattyp" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -#, fuzzy -msgid "Rule used to map the certificate with a user entry" -msgstr "Datei, in der das Zertifikat gespeichert werden soll." - -#, fuzzy -msgid "Matching rule" -msgstr "Zutreffende Regeln" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -#, fuzzy -msgid "Priority of the rule (higher number means lower priority" -msgstr "Priorität der Regel (höhere Zahl meint niedrigere Priorität)" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "HBAC-Dienstgruppe »%(value)s« hinzugefügt" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "HBAC-Dienstgruppe »%(value)s« geändert" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "%(count)d HBAC-Dienstgruppe gefunden" -msgstr[1] "%(count)d HBAC-Dienstgruppen gefunden" - -#, fuzzy -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "Informationen zu einem vorbereiteten Benutzer anzeigen." - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "HBAC-Dienstgruppe »%(value)s« gelöscht" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" aktiviert" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Dienst »%(value)s« deaktiviert" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -#, fuzzy -msgid "User logins" -msgstr "Anmeldename" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "%(count)d passender Benutzer" -msgstr[1] "%(count)d passende Benutzer" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -#, fuzzy -msgid "must be at least 10" -msgstr "muss mindestens %(minvalue)d sein" - -msgid "configuration options" -msgstr "Konfigurationsoptionen" - -msgid "Configuration" -msgstr "Konfiguration" - -#, fuzzy -msgid "Maximum hostname length" -msgstr "Maximale Länge des Benutzernamens" - -msgid "Enable adding subids to new users" -msgstr "" - -#, fuzzy -msgid "IPA masters" -msgstr "" -"\n" -"IPA-Server\n" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "IPA Master mit Fähigkeit für PKINIT " - -msgid "IPA master which can process PKINIT requests" -msgstr "IPA Master, der PKINIT Anfragen bearbeiten kann" - -#, fuzzy -msgid "IPA CA servers" -msgstr "" -"\n" -"IPA-Server\n" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -#, fuzzy -msgid "Hidden IPA CA servers" -msgstr "" -"\n" -"IPA-Server\n" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -#, fuzzy -msgid "Hidden IPA KRA servers" -msgstr "" -"\n" -"IPA-Server\n" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -#, fuzzy -msgid "IPA DNS servers" -msgstr "IPA-Server" - -msgid "IPA servers configured as domain name server" -msgstr "" - -#, fuzzy -msgid "Hidden IPA DNS servers" -msgstr "IPA-Server" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -#, fuzzy -msgid "DNSec key master" -msgstr "Neu: Schlüssel gesetzt" - -#, fuzzy -msgid "Setup SID configuration" -msgstr "Konfiguration" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -#, fuzzy -msgid "Add SIDs" -msgstr "Neuen Host hinzufügen." - -msgid "Add SIDs for existing users and groups" -msgstr "" - -#, fuzzy -msgid "NetBIOS name of the IPA domain" -msgstr "DN der gestarteten Aufgabe" - -msgid "Empty domain is not allowed" -msgstr "Eine leere Domäne ist nicht zulässig" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "Ungültiger Domänenname '%(domain)s': %(e)s" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "Der Server hat keine Informationen über die Domäne '%(domain)s'" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "Deaktivierte Domäne '%(domain)s' ist nicht zulässig" - -#, fuzzy -msgid "not allowed to enable SID generation" -msgstr "Es ist nicht erlaubt, Gruppeneinträge zu ändern." - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -#, fuzzy -#| msgid "Failed to add" -msgid "Failed to call DBus" -msgstr "Hinzufügen fehlgeschlagen" - -msgid "Configuration of SID failed. See details in the error log" -msgstr "" - -msgid "The group doesn't exist" -msgstr "Die Gruppe existiert nicht" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "Attribut \"%s\" ist nicht erlaubt" - -msgid "May not be empty" -msgstr "Darf nicht leer sein" - -#, fuzzy, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "Attribut \"%(attribute)s\" ist nicht erlaubt" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "$-getrennte Liste von SELinux Benutzern erwartet" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "SELinux Benutzer '%(user)s' ist ungültig: %(error)s" - -msgid "SELinux user map default user not in order list" -msgstr "" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" -"\n" -"Domain Name System (DNS)\n" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "Ungültiges IP-Netzwerkformat" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "Jedes ACL-Element muss mit einem Semikolon enden" - -msgid "invalid address format" -msgstr "Ungültiges Adressformat" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -#, fuzzy -msgid "invalid domain-name: not fully qualified" -msgstr "Ungültiger Domainname: %s" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "DNS Zone %(zone)s nicht gefunden" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "IP-Adresse %(ip)s ist bereits Domain %(domain)s zugewiesen." - -#, fuzzy, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "IP-Adresse %(ip)s ist bereits Domain %(domain)s zugewiesen." - -#, fuzzy, python-format -msgid "%s record" -msgstr "Datensätze" - -#, fuzzy, python-format -msgid "Raw %s records" -msgstr "Datensätze" - -#, fuzzy, python-format -msgid "%s Record" -msgstr "Datensätze" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "(siehe RFC %s für Details)" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "»%s« ist ein erforderlicher Teil des DNS-Datensatzes" - -#, fuzzy -msgid "Invalid number of parts!" -msgstr "Anzahl der Passwörter" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "Format muss als »%(format)s« %(rfcs)s angegeben werden" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "'%(option)s' Option ist veraltet. %(additional_info)s" #, python-format msgid "'%(required)s' must not be empty when '%(name)s' is set" msgstr "»%(required)s« darf nicht leer sein, wenn »%(name)s« gesetzt ist." -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "»%s« ist ein erforderlicher Teil des DNS-Datensatzes" -#, fuzzy -msgid "Priority (order)" -msgstr "Priorität" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, fuzzy, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "Der Host '%(hostname)s' besitzt keinen zugehörigen DNS A/AAAA Record" - -#, fuzzy -msgid "Managedby permission" -msgstr "Berechtigung" - -#, fuzzy -msgid "cannot be used when a zone is specified" -msgstr "hosts kann nicht gesetzt sein wenn Typ 'group' ist" - -#, fuzzy -msgid "Only one zone type is allowed per zone name" -msgstr "Nur ein Wert ist erlaubt" - -#, fuzzy, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" - -#, fuzzy, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "Aktiver Benutzer mit Name \"%(user)s\" existiert bereits" - -#, fuzzy, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "Vorbereiteten Benutzer \"%(value)s\" gelöscht" - -msgid "DNS zone" -msgstr "DNS-Zone" - -msgid "DNS zones" -msgstr "DNS-Zonen" - -msgid "DNS Zones" -msgstr "DNS-Zonen" - -msgid "DNS Zone" -msgstr "DNS-Zone" - -#, fuzzy -msgid "Default time to live" -msgstr "Lebensdauer" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -#, fuzzy -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "Es können nicht mehrere DNS-Datensätze aktualisiert werden." - -#, fuzzy -msgid "" -msgstr "IPA-Server" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "Rolle \"%(value)s\" gelöscht" - -#, fuzzy -msgid "is required" -msgstr "sn wird benötigt" - -#, fuzzy, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "Host \"%(value)s\" deaktiviert" - -#, fuzzy, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" aktiviert" - -#, fuzzy -msgid "DNS resource record" -msgstr "DNS-Ressource anzeigen." - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" +msgid "(deprecated)" +msgstr "(veraltet)" #, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" +msgid "(see RFC %s for details)" +msgstr "(siehe RFC %s für Details)" + +msgid "7 is not a valid revocation reason" +msgstr "7 ist kein gültiger Grund für einen Widerruf." + +msgid "A comma-separated list of fields to search in when searching for groups" msgstr "" +"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach Gruppen " +"durchsucht werden" -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" +msgid "A comma-separated list of fields to search in when searching for users" msgstr "" +"Eine mit Komma getrennte Liste von Feldnamen die bei der Suche nach " +"Benutzern durchsucht werden" -msgid "only master zones can contain records" -msgstr "" +msgid "A description of this auto member rule" +msgstr "Beschreibung der Auto-Mitgliedschaftsregel" -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -#, fuzzy -msgid "DNS zone root record cannot be renamed" -msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" - -msgid "DNS records can be only updated one at a time" -msgstr "Es können nicht mehrere DNS-Datensätze aktualisiert werden." - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "Datensatz »%(value)s« gelöscht" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" - -#, python-format -msgid "Found '%(value)s'" -msgstr "»%(value)s« gefunden" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "Host »%(host)s« nicht gefunden" - -#, fuzzy -msgid "DNS configuration options" -msgstr "Konfigurationsoptionen" - -#, fuzzy -msgid "DNS Global Configuration" -msgstr "Konfiguration" - -#, fuzzy -msgid "IPA DNS version" -msgstr "IPA-Server" - -#, fuzzy -msgid "List of IPA masters configured as DNS servers" -msgstr "einer der konfigurierten Server" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -#, fuzzy -msgid "Global DNS configuration is empty" -msgstr "Konfigurations-URL zeigen" - -#, fuzzy -msgid "DNS forward zone" -msgstr "DNS-Zone" - -#, fuzzy -msgid "DNS forward zones" -msgstr "DNS-Zonen" - -#, fuzzy -msgid "DNS Forward Zones" -msgstr "DNS-Zonen" - -#, fuzzy -msgid "DNS Forward Zone" -msgstr "DNS-Zone" - -msgid "Please specify forwarders." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "Rolle \"%(value)s\" gelöscht" - -#, fuzzy, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" deaktiviert" - -#, fuzzy, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" aktiviert" - -#, fuzzy -msgid "IPA DNS records" -msgstr "IPA-Server" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -#, fuzzy -msgid "Result of the command" +msgid "A description of this command" msgstr "Eine Beschreibung dieses Befehls" -msgid "Dry run" -msgstr "" +msgid "A description of this host" +msgstr "Beschreibung des Hosts" -msgid "Do not update records only return expected records" -msgstr "" +msgid "A description of this host-group" +msgstr "Beschreibung der Hostgruppe" -#, fuzzy -msgid "The deny type has been deprecated." -msgstr "Diese Option ist veraltet." +msgid "A description of this role-group" +msgstr "Beschreibung der Rollengruppe" -msgid "HBAC rules" -msgstr "HBAC-Regeln" +msgid "A group may not be a member of itself" +msgstr "Eine Gruppe kann kein Mitglied von sich selbst sein" -msgid "HBAC Rules" -msgstr "HBAC-Regeln" +msgid "A group may not be added as a member of itself" +msgstr "Eine Gruppe kann nicht als Mitglied von sich selbst hinzugefügt werden" + +msgid "A list of ACI values" +msgstr "Liste von ACI-Werten" + +msgid "A list of LDAP entries" +msgstr "Eine Liste von LDAP-Einträgen" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "$-getrennte Liste von SELinux Benutzern erwartet" + +msgid "A managed group cannot have a password policy." +msgstr "Eine verwaltete Gruppe kann keine Passwort-Policy haben." #, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" hinzugefügt" +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" +"Ein Problem trat bei der Überprüfung auf, ob alle Mitglieder %(verb)s waren: " +"%(exc)s" + +msgid "A string searched in all relevant object attributes" +msgstr "" +"Eine Zeichenkette, nach der in allen relevanten Objektattributen gesucht wird" + +msgid "ACI" +msgstr "ACI" + +msgid "ACI name" +msgstr "ACI-Name" + +msgid "ACI prefix" +msgstr "ACI-Präfix" + +msgid "ACI prefix is required" +msgstr "ACI-Präfix ist erforderlich" #, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" gelöscht" +msgid "ACI with name \"%s\" not found" +msgstr "ACI mit dem Namen »%s« nicht gefunden" + +msgid "ACIs" +msgstr "ACIs" + +msgid "ACL name" +msgstr "ACL Name" #, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" geändert" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "%(count)d HBAC-Regel gefunden" -msgstr[1] "%(count)d HBAC-Regeln gefunden" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" aktiviert" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" deaktiviert" - -msgid "Access time" -msgstr "Zugriffszeit" - -#, fuzzy -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "Ziel-Hosts und Hostgruppen zu einer HBAC-Regel hinzufügen." - msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" -"Kerberos-Schlüssel, SSL-Zertifikat und alle Dienste des Hosts deaktivieren." - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host" -msgstr "Host" - -#, fuzzy -msgid "Base-64 encoded host certificate" -msgstr "Base-64-kodiertes Serverzertifikat" - -msgid "Serial Number" -msgstr "Seriennummer" - -msgid "Serial Number (hex)" -msgstr "Seriennummer (hex)" - -msgid "Not Before" -msgstr "Nicht vor" - -msgid "Not After" -msgstr "Nicht nach" - -msgid "Fingerprint (SHA1)" -msgstr "Fingerabdruck (SHA1)" - -#, fuzzy -msgid "Fingerprint (SHA256)" -msgstr "Fingerabdruck (SHA1)" - -msgid "Revocation reason" -msgstr "Grund des Widerrufs" - -#, fuzzy -msgid "Authentication Indicators" -msgstr "Authentifizierung" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "Host \"%(value)s\" hinzugefügt" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Host \"%(value)s\" gelöscht" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Host \"%(value)s\" geändert" - -#, fuzzy -msgid "Password cannot be set on enrolled host." -msgstr "Priorität der globalen Regel kann nicht gesetzt werden" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "%(count)d Host gefunden" -msgstr[1] "%(count)d Hosts gefunden" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "Host \"%(value)s\" deaktiviert" - -#, fuzzy, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "Host \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Host \"%(value)s\" hinzugefügt" - -#, fuzzy -msgid "Remove principal alias from a host entry" -msgstr "Berechtigungen von Rolle entfernen." - -#, fuzzy, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "Radius Server" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" - -msgid "Invalid URI: not an https scheme" -msgstr "" - -msgid "Invalid URI: missing netloc" -msgstr "" - -msgid "Identity Provider server" -msgstr "" - -msgid "Identity Provider servers" -msgstr "" - -#, fuzzy -msgid "Identity Provider server name" -msgstr "Servername" - -#, fuzzy -msgid "Authorization URI" -msgstr "Bestätigung" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -#, fuzzy -#| msgid "Token ID" -msgid "Token URI" -msgstr "Token ID" - -#, fuzzy -#| msgid "Mount point" -msgid "Token endpoint" -msgstr "Einhängepunkt" - -#, fuzzy -#| msgid "User login" -msgid "User info URI" -msgstr "Anmeldename" - -#, fuzzy -#| msgid "Token serial (informational only)" -msgid "User information endpoint" -msgstr "Token-Seriennummer (nur informativ)" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -msgid "Client identifier" -msgstr "" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -#, fuzzy -msgid "Add a new Identity Provider server." -msgstr "Einen neuen HBAC-Dienst hinzufügen." - -#, fuzzy, python-format -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "HBAC Dienst \"%(value)s\" hinzugefügt" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "Organisation" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -msgid "Base URL" -msgstr "" - -msgid "Base URL for IdP provider templates" -msgstr "" - -#, fuzzy -#| msgid "Unknown Error" -msgid "unknown provider" -msgstr "Unbekannter Fehler" - -msgid "value is missing" -msgstr "" - -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "" - -#, fuzzy -#| msgid "Delete an IPA service." -msgid "Delete an Identity Provider server." -msgstr "Einen IPA-Dienst entfernen." - -#, fuzzy, python-format -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -#, fuzzy -#| msgid "Modify an existing IPA service." -msgid "Modify an Identity Provider server." -msgstr "Einen existierenden IPA-Dienst bearbeiten." - -#, fuzzy, python-format -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "Dienst »%(value)s« geändert" - -#, fuzzy -msgid "Search for Identity Provider servers." -msgstr "Nach IPA-Diensten suchen." - -#, fuzzy, python-format -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -#, fuzzy -#| msgid "Display information about an IPA service." -msgid "Display information about an Identity Provider server." -msgstr "Informationen zu einem IPA-Dienst anzeigen." - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Apply" -msgstr "Anwenden" - -msgid "Rebuild auto membership" -msgstr "Auto-Mitgliedschaft neu erstellen" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" -"Sind Sie sicher, dass sie die Auto-Mitgliedschaft neu erstellen wollen?" - -msgid "Are you sure you want to proceed with the action?" -msgstr "Sind Sie sicher, dass Sie mit dieser Aktion fortfahren wollen?" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "SInd Sie sicher, dass Sie ${object} löschen wollen?" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "SInd Sie sicher, dass Sie ${object} deaktivieren wollen?" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "SInd Sie sicher, dass Sie ${object} aktivieren wollen?" - -msgid "Actions" -msgstr "Aktionen" - -msgid "Add" -msgstr "Hinzufügen" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "${count} Einträge hinzugefügt" - -msgid "Direct Membership" -msgstr "Direkte Migliedschaft" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "Indirekte Mitgliedschaft" - -msgid "No entries." -msgstr "Keine Einträge." - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "Zeige ${start} bis ${end} von ${total} Einträgen." - -msgid "Remove" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "${count} Einträge gelöscht" - -msgid "Show Results" -msgstr "Ergebnisse anzeigen" - -#, fuzzy -msgid "Authentication indicators" -msgstr "HOTP Authentifizierungsfenster" - -#, fuzzy -msgid "Authentication indicator" -msgstr "HOTP Authentifizierungsfenster" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -#, fuzzy -msgid "Add Custom Authentication Indicator" -msgstr "HOTP Authentifizierungsfenster" - -msgid "Two factor authentication (password + OTP)" -msgstr "Zwei-Faktor-Authentifizierung (Passwort + OTP)" - -#, fuzzy -msgid "RADIUS" -msgstr "Radius Server" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "External Identity Provider" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" msgstr "" +"API Versionsnummer wurde nicht gesendet, Vorwärtskompatibiltät nicht " +"garantiert. Nehme API Version %(server_version)s für Server an." msgid "About" msgstr "Über" +msgid "Access Denied" +msgstr "Zugriff verweigert" + +msgid "Access Granted" +msgstr "Zugriff gewährt" + +#, python-format +msgid "Access granted: %s" +msgstr "Zugriff gewährt: %s" + +msgid "Access this host" +msgstr "Zugriff auf diesen Host" + +msgid "Access time" +msgstr "Zugriffszeit" + +msgid "Accessing" +msgstr "Greift zu" + +msgid "Account" +msgstr "Konto" + +msgid "Account Settings" +msgstr "Kontoeinstellungen" + +msgid "Account Status" +msgstr "Kontostatus" + +msgid "Account disabled" +msgstr "Konto ist deaktiviert" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "Konto deaktiviert: %(disabled)s" + +msgid "Actions" +msgstr "Aktionen" + msgid "Activate" msgstr "Aktivieren" +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." + +msgid "Activate a stage user." +msgstr "Vorbereiteten Benutzer aktivieren." + +msgid "Active users" +msgstr "Aktive Benutzer" + +msgid "Active zone" +msgstr "Aktive Zone" + +msgid "Add" +msgstr "Hinzufügen" + +msgid "Add Many" +msgstr "Mehrere hinzufügen" + +msgid "Add a manager to the stage user entry" +msgstr "Manager zum vorbereiteten Benutzer hinzufügen" + +msgid "Add a manager to the user entry" +msgstr "Manager zum Benutzer hinzufügen" + +msgid "Add a new HBAC service group." +msgstr "Eine neue HBAC-Dienstgruppe hinzufügen." + +msgid "Add a new HBAC service." +msgstr "Einen neuen HBAC-Dienst hinzufügen." + +msgid "Add a new IPA new service." +msgstr "Einen neuen IPA-Dienst hinzufügen." + +msgid "Add a new OTP token." +msgstr "Neuen OTP-Token hinzufügen" + +msgid "Add a new group password policy." +msgstr "Neue Gruppen-Passwortregel hinzufügen." + +msgid "Add a new host." +msgstr "Neuen Host hinzufügen." + +msgid "Add a new hostgroup." +msgstr "Hostgruppe hinzufügen." + +msgid "Add a new role." +msgstr "Neue Rolle hinzufügen." + +msgid "Add a new stage user." +msgstr "Einen neuen vorbereiteten Benutzer hinzufügen." + +msgid "Add a new user." +msgstr "Einen neuen Benutzer hinzufügen." + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" +"Ein Attribut-Wert-Paar hinzufügen. Das Format ist Attribut=Wert.\n" +"Das Attribut muss Teil des Schemas sein." + msgid "Add and Add Another" msgstr "Hinzufügen und weitere hinzufügen" @@ -20118,772 +635,153 @@ msgstr "Hinzufügen und schließen" msgid "Add and Edit" msgstr "Hinzufügen und bearbeiten" -msgid "Add Many" -msgstr "Mehrere hinzufügen" +msgid "Add hosts that can manage this host." +msgstr "Hosts hinzufügen die diesen Host verwalten dürfen." -msgid "Back" -msgstr "Zurück" +msgid "Add hosts that can manage this service." +msgstr "Hosts hinzufügen, die diesen Dienst verwalten können." -msgid "Cancel" -msgstr "Abbrechen" +msgid "Add members to a group." +msgstr "Mitglieder zu einer Gruppe hinzufügen." -msgid "Clear" -msgstr "" +msgid "Add members to a hostgroup." +msgstr "Mitglieder zur Hostgruppe hinzufügen." -#, fuzzy -msgid "Clear all fields on the page." -msgstr "Seite neu laden." +msgid "Add members to a role." +msgstr "Mitglieder zur Rolle hinzufügen." -msgid "Close" -msgstr "Schließen" +msgid "Add members to an HBAC service group." +msgstr "Mitglieder zur einer HBAC-Dienstgruppe hinzufügen." -msgid "Disable" -msgstr "Deaktivieren" +msgid "Add privileges to a role." +msgstr "Berechtigungen zur Rolle hinzufügen." -msgid "Download" -msgstr "" +msgid "Add services to an HBAC rule." +msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." -msgid "Download certificate as PEM formatted file." -msgstr "" +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "Ziel-Hosts und Hostgruppen zu einer HBAC-Regel hinzufügen." -msgid "Edit" -msgstr "Bearbeiten" +msgid "Add the host to DNS with this IP address" +msgstr "Host mit dieser IP zum DNS hinzufügen" -msgid "Enable" -msgstr "Aktivieren" +msgid "Add users and groups to an HBAC rule." +msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." -msgid "Find" -msgstr "Suchen" +msgid "Add users that can manage this token." +msgstr "Nutzer hinzufügen die diesen Token verwalten können" -msgid "Get" -msgstr "Abrufen" +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "CA ACL \"%(value)s\" hinzugefügt" -msgid "Hide" -msgstr "" +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" hinzugefügt" -msgid "Issue" -msgstr "Ausgeben" +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "HBAC Dienst \"%(value)s\" hinzugefügt" -#, fuzzy -msgid "Match" -msgstr "Gefunden" +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "HBAC-Dienstgruppe »%(value)s« hinzugefügt" -msgid "Match users according to certificate." -msgstr "" +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "OTP token \"%(value)s\" hinzugefügt" -msgid "Migrate" -msgstr "" +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" hinzugefügt" -msgid "OK" -msgstr "OK" +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "Automount Ort \"%(value)s\" hinzugefügt" -msgid "Refresh" -msgstr "Neu laden" +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "Bedingung(en) zu \"%(value)s\" hinzugefügt" -msgid "Reload current settings from the server." -msgstr "" +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Gruppe »%(value)s« hinzugefügt" -msgid "Delete" -msgstr "Löschen" - -msgid "Remove hold" -msgstr "" - -msgid "Reset" -msgstr "Zurücksetzen" - -msgid "Reset Password" -msgstr "Passwort zurücksetzen" - -#, fuzzy -msgid "Reset Password and Log in" -msgstr "Passwort zurücksetzen" - -msgid "Restore" -msgstr "Wiederherstellen" - -msgid "Retry" -msgstr "Erneut versuchen" - -msgid "Revert" -msgstr "Rückgängig" - -msgid "Revoke" -msgstr "Widerrufen" - -msgid "Save" -msgstr "Speichern" - -msgid "Set" -msgstr "Setzen" - -msgid "Show" -msgstr "" - -msgid "Stage" -msgstr "Vorbereiten" - -msgid "Update" -msgstr "Speichern" - -msgid "View" -msgstr "Ansicht" - -#, fuzzy -msgid "Customization" -msgstr "Bestätigung" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "Alle einklappen" - -msgid "Expand All" -msgstr "Alle aufklappen" - -msgid "General" -msgstr "Allgemein" - -msgid "Identity Settings" -msgstr "Identitätseinstellungen" - -#, fuzzy -msgid "Record Settings" -msgstr "Host Einstellungen" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "${entity} ${primary_key} Einstellungen" - -msgid "Back to Top" -msgstr "Zurück nach oben" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "${entity} ${primary_key} aktualisiert" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "${entity} erfolgreich hinzugefügt" - -#, fuzzy -msgid "Add custom value" +#, python-format +msgid "Added host \"%(value)s\"" msgstr "Host \"%(value)s\" hinzugefügt" -msgid "Available" -msgstr "Verfügbar" +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Hostgruppe \"%(value)s\" hinzugefügt" -#, fuzzy -msgid "Some operations failed." -msgstr "Token-Synchronisierung fehlgeschlagen" +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "Rolle \"%(value)s\" hinzugefügt" -#, fuzzy -msgid "Operations Error" -msgstr "Überprüfungsfehler" +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "Dienst »%(value)s« hinzugefügt" -msgid "Confirmation" -msgstr "Bestätigung" +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" -msgid "Custom value" +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "Benutzer »%(value)s« hinzugefügt" + +msgid "Additional instructions:" +msgstr "Zusätzliche Anweisungen:" + +msgid "Administrative account" +msgstr "Administratives Konto" + +msgid "Administrator e-mail address" +msgstr "E-Mail-Adresse des Administrators" + +msgid "Algorithm" +msgstr "Algorithmus" + +msgid "All commands should at least have a result" +msgstr "Alle Befehle sollten mindestens ein Ergebnis haben." + +msgid "Allow" +msgstr "Erlauben" + +msgid "Allow dynamic updates." +msgstr "Dynamische Aktualisierungen erlauben." + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " +"erstellen." -msgid "This page has unsaved changes. Please save or revert." +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." msgstr "" -"Diese Seite hat nicht gespeicherte Änderungen. Bitte Speichern oder " -"Rückgängig machen" +"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " +"erhalten." -msgid "Unsaved Changes" -msgstr "Ungespeicherte Änderungen" +msgid "Already registered" +msgstr "Bereits registriert" -#, python-brace-format -msgid "Edit ${entity}" -msgstr "${entity} bearbeiten" +msgid "Altitude" +msgstr "Höhe" -msgid "Hide details" -msgstr "Details verbergen" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "${product}, Version: ${version}" - -msgid "Prospective" -msgstr "" - -msgid "Redirection" -msgstr "Umleitung" - -msgid "Select entries to be removed." -msgstr "Einträge zum löschen auswählen." - -#, fuzzy -msgid "Result" -msgstr "Ergebnisse anzeigen" - -msgid "Show details" -msgstr "Details anzeigen" - -msgid "Success" -msgstr "Erfolgreich" - -msgid "Validation error" -msgstr "Überprüfungsfehler" - -msgid "Input form contains invalid or missing values." -msgstr "Eingabeformular enthält ungültige oder fehlende Werte." - -msgid "Please try the following options:" -msgstr "Bitte versuchen Sie die folgenden Optionen:" - -msgid "If the problem persists please contact the system administrator." -msgstr "" -"Bei dauerhaftem Problem wenden Sie sich bitte an den Systemadministrator." - -msgid "Refresh the page." -msgstr "Seite neu laden." - -msgid "Reload the browser." -msgstr "Browser neu laden." - -msgid "Return to the main page and retry the operation" -msgstr "Zur Hauptseite zurückkehren und Vorgang wiederholen" +msgid "An IPA master host cannot be deleted or disabled" +msgstr "Ein IPA Masterhost kann nicht deaktiviert oder gelöscht werden" #, python-brace-format msgid "An error has occurred (${error})" msgstr "Ein Fehler ist aufgetreten (${error})" -msgid "HTTP Error" -msgstr "HTTP-Fehler" +msgid "Any Command" +msgstr "Jeder Befehl" -msgid "Internal Error" -msgstr "Interner Fehler" - -msgid "IPA Error" -msgstr "IPA-Fehler" - -msgid "No response" -msgstr "Keine Antwort" - -msgid "Unknown Error" -msgstr "Unbekannter Fehler" - -msgid "URL" -msgstr "URL" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "${primary_key} wird verwaltet von:" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "${primary_key} Mitglieder:" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "${primary_key} ist Mitglied von:" - -#, fuzzy, python-brace-format -msgid "${primary_key} member managers:" -msgstr "${primary_key} Mitglieder:" - -msgid "Settings" -msgstr "Einstellungen" - -msgid "Search" -msgstr "Suchen" - -msgid "False" -msgstr "Falsch" - -#, fuzzy, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " -"erstellen." - -#, fuzzy, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " -"erhalten." - -#, fuzzy, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " -"erstellen." - -#, fuzzy, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen erlauben die Schlüsseltabelle zu " -"erhalten." - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Allowed to create keytab" -msgstr "Hosts die Schlüsseltabelle erstellen dürfen" - -#, fuzzy -msgid "Allowed to retrieve keytab" -msgstr "Hosts die Schlüsseltabelle abrufen dürfen" - -#, fuzzy, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " -"erstellen." - -#, fuzzy, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " -"erhalten." - -#, fuzzy, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " -"erstellen." - -#, fuzzy, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " -"erhalten." - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "Benutzer die Schlüsseltabelle abrufen dürfen" - -#, fuzzy -msgid "Add Kerberos Principal Alias" -msgstr "Kerberos-Principal" - -#, fuzzy -msgid "New kerberos principal alias" -msgstr "Kerberos-Principal" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "Vererbt von Serverkonfiguration" - -msgid "MS-PAC" -msgstr "MS-PAC" - -msgid "Override inherited settings" -msgstr "Vererbte Einstellungen überschreiben" - -msgid "PAD" -msgstr "PAD" - -#, fuzzy -msgid "Authenticating" -msgstr "Authentifizierung" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "Angemeldet als" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -#, fuzzy -msgid "Kerberos Principal you entered is expired" -msgstr "Kerberos-Principal Ablauf" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -#, fuzzy -msgid "Log In Using Certificate" -msgstr "Host-Zertifikat" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "OTP Token synchronisieren" - -#, fuzzy -msgid "Synchronizing" -msgstr "HOTP Sychnronisierungsfenster" - -msgid "The user account you entered is locked" -msgstr "" - -msgid "number of passwords" -msgstr "Anzahl der Passwörter" - -msgid "seconds" -msgstr "Sekunden" - -#, fuzzy -msgid "Migrating" -msgstr "Konfiguration" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -#, fuzzy -msgid "Password migration was not successful" -msgstr "Passwort konnte nicht zurückgesetzt werden" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -#, fuzzy -msgid "The password or username you entered is incorrect" -msgstr "Benutzername, Passwort oder Einmalpasswort waren falsch." - -#, fuzzy -msgid "Password migration was successful" -msgstr "Passwort konnte nicht zurückgesetzt werden" - -msgid "Attribute" -msgstr "Attribut" - -#, fuzzy -msgid "Add delegation" -msgstr "Delegation" - -#, fuzzy -msgid "Remove delegations" -msgstr "Delegationen" - -#, fuzzy -msgid "Add permission" -msgstr "Berechtigung" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove permissions" -msgstr "Berechtigungen" - -#, fuzzy, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "Berechtigungen von Rolle entfernen." - -#, fuzzy -msgid "Add privilege" -msgstr "Berechtigungen zur Rolle hinzufügen." - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove privileges" -msgstr "Berechtigungen von Rolle entfernen." - -#, fuzzy, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "Berechtigungen von Rolle entfernen." - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Role Settings" -msgstr "Host Einstellungen" - -#, fuzzy -msgid "Add role" -msgstr "Neue Rolle hinzufügen." - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -msgid "Remove roles" -msgstr "" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "Berechtigungen von Rolle entfernen." - -#, fuzzy, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "Mitglieder von Rolle entfernen." - -#, fuzzy -msgid "Add self service permission" -msgstr "Beschreibung des HBAC-Dienstes" - -msgid "Remove self service permissions" -msgstr "" - -#, fuzzy -msgid "Add rule" -msgstr "HBAC-Regel" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to change default group?" -msgstr "SInd Sie sicher, dass Sie die ausgewählten Benutzer aktivieren wollen?" - -msgid "Default host group" -msgstr "Standard Hostgruppe" - -msgid "Default user group" -msgstr "Standard Benutzergruppe" - -msgid "Exclusive" -msgstr "Exklusiv" - -msgid "Expression" -msgstr "Ausdruck" - -#, fuzzy -msgid "Host group rule" -msgstr "Hostgruppe" - -#, fuzzy -msgid "Host group rules" -msgstr "Hostgruppen" - -#, fuzzy -msgid "Inclusive" -msgstr "Exklusiv" - -#, fuzzy -msgid "Remove auto membership rules" -msgstr "Regel für Auto-Mitgliedschaft" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "User group rule" -msgstr "Benutzer-Gruppe" - -#, fuzzy -msgid "User group rules" -msgstr "Benutzer-Gruppe" - -#, fuzzy -msgid "Add automount key" -msgstr "Automount" - -#, fuzzy -msgid "Remove automount keys" -msgstr "Automount-Maps" - -#, fuzzy -msgid "Add automount location" -msgstr "Automount-Ort" - -#, fuzzy -msgid "Automount Location Settings" -msgstr "Automount-Orte" - -#, fuzzy -msgid "Remove automount locations" -msgstr "Automount-Orte" - -#, fuzzy -msgid "Add automount map" -msgstr "Automount-Map" - -#, fuzzy -msgid "Map Type" -msgstr "Gruppentyp" - -msgid "Direct" -msgstr "Direkt" - -msgid "Indirect" -msgstr "Indirekt" - -#, fuzzy -msgid "Remove automount maps" -msgstr "Automount-Maps" - -msgid "Add certificate authority" -msgstr "" - -#, fuzzy -msgid "Remove certificate authorities" -msgstr "Ein Zertifikat widerrufen." - -#, fuzzy -msgid "Add CA ACL" -msgstr "CA ACL" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "All" -msgstr "Erlauben" - -msgid "Any CA" -msgstr "" +msgid "Any Group" +msgstr "Jede Gruppe" msgid "Any Host" msgstr "Jeder Host" @@ -20891,1185 +789,303 @@ msgstr "Jeder Host" msgid "Any Service" msgstr "Jeder Dienst" -#, fuzzy -msgid "Any Profile" -msgstr "Profile" - msgid "Anyone" msgstr "Jeder" -msgid "Rule status" -msgstr "Regelstatus" +msgid "Apply" +msgstr "Anwenden" -msgid "If no CAs are specified, requests to the default CA are allowed." +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." msgstr "" +"Sind sie sicher, dass sie den Nutzer ${action} möchten?
Die Änderung " +"wird sofort aktiv." -#, fuzzy -msgid "Remove CA ACLs" +msgid "Are you sure you want to activate selected users?" +msgstr "SInd Sie sicher, dass Sie die ausgewählten Benutzer aktivieren wollen?" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "SInd Sie sicher, dass Sie ${object} löschen wollen?" + +msgid "Are you sure you want to delete selected entries?" +msgstr "Sind Sie sicher, dass Sie die ausgewählten Einträge löschen wollen?" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "SInd Sie sicher, dass Sie ${object} deaktivieren wollen?" + +msgid "Are you sure you want to disable selected entries?" +msgstr "" +"Sind Sie sicher, dass Sie die ausgewählten Einträge deaktivieren wollen?" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "SInd Sie sicher, dass Sie ${object} aktivieren wollen?" + +msgid "Are you sure you want to enable selected entries?" +msgstr "Sind Sie sicher, dass Sie die ausgewählten Einträge aktivieren wollen?" + +msgid "Are you sure you want to proceed with the action?" +msgstr "Sind Sie sicher, dass Sie mit dieser Aktion fortfahren wollen?" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "" +"Sind Sie sicher, dass sie die Auto-Mitgliedschaft neu erstellen wollen?" + +msgid "Are you sure you want to restore selected users?" +msgstr "" +"SInd Sie sicher, dass Sie die ausgewählten Benutzer wiederherstellen wollen?" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "SInd Sie sicher, dass Sie den Benutzer ${object} entsperren möchten?" + +msgid "As Whom" +msgstr "Als Wer" + +msgid "Assigned manager of the token (default: self)" +msgstr "Zugewiesener Token-Verwalter (Standard: selbst)" + +msgid "Assigned user of the token (default: self)" +msgstr "Zugewiesener Token-Benutzer (Standard: selbst)" + +msgid "Attribute" +msgstr "Attribut" + +msgid "Attribute Key" +msgstr "Attribut Schlüssel" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" +"Dieses Attribut wird per Regex gefiltert. Zum Beispiel FQDN für einen Host, " +"oder Manager für einen Benutzer" + +msgid "Attributes" +msgstr "Attribute" + +msgid "Attributes to which the permission applies" +msgstr "Attribute auf die die Berechtigung angewendet wird" + +msgid "Audit" +msgstr "Audit" + +msgid "Authentication" +msgstr "Authentifizierung" + +msgid "Auto Membership Rule" +msgstr "Regel für Auto-Mitgliedschaft" + +msgid "Auto Membership is not configured" +msgstr "Auto-Mitgliedschaft ist nicht konfiguriert" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "Auto-Mitgliedschaftsregel: %s nicht gefunden!" + +msgid "Automember" +msgstr "Auto-Mitgliedschaft" + +msgid "Automember Rule" +msgstr "Auto-Mitgliedschaftsregel" + +msgid "Automember rebuild membership task completed" +msgstr "Aufgabe für die Neuerstellung der Auto-Mitgliedschaft abgeschlossen" + +msgid "Automember rebuild membership task started" +msgstr "Aufgabe für die Neuerstellung der Auto-Mitgliedschaft gestartet" + +msgid "Automount" +msgstr "Automount" + +msgid "Automount Location" +msgstr "Automount-Ort" + +msgid "Automount Locations" +msgstr "Automount-Orte" + +msgid "Automount Map" +msgstr "Automount-Map" + +msgid "Automount Maps" +msgstr "Automount-Maps" + +msgid "Automount location name." +msgstr "Automount-Ort" + +msgid "Automount map name." +msgstr "Automount-Map Name." + +msgid "Automount master file." +msgstr "Automount-Masterdatei" + +msgid "Available" +msgstr "Verfügbar" + +msgid "Back" +msgstr "Zurück" + +msgid "Back to Top" +msgstr "Zurück nach oben" + +msgid "Bad format in credentials cache" +msgstr "Falsches Format im Anmeldedaten-Zwischenspeicher" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "Falscher Suchfilter %(info)s" + +msgid "Base-64 encoded server certificate" +msgstr "Base-64-kodiertes Serverzertifikat" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Base64-Dekodierung fehlgeschlagen: %(reason)s" + +msgid "Bind DN" +msgstr "Bind-DN" + +msgid "CA ACL" +msgstr "CA ACL" + +msgid "CA ACLs" msgstr "CA ACLs" -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgid "CA is not configured" +msgstr "CA ist nicht konfiguriert" + +msgid "CSR" +msgstr "CSR" + +msgid "Cancel" +msgstr "Abbrechen" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." msgstr "" +"Kann den ausgewählten Befehl nicht ohne eine konfigurierte Samba 4 Instanz " +"auf dieser Maschine ausführen. Stellen Sie sicher, dass ipa-adtrust-install " +"auf dieser Maschine ausgeführt wurde." -#, fuzzy, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, fuzzy, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." msgstr "" +"Kann den ausgewählten Befehl nicht ohne Samba 4 Unterstützung ausführen. " +"Stellen Sie sicher, dass das server-trust-ad Paket von IPA installiert ist." -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" +msgid "Cannot resolve KDC for requested realm" +msgstr "KDC für angeforderten Realm konnte nicht aufgelöst werden." -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" +msgid "Car License" +msgstr "Kfz-Kennzeichen" -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" +msgid "Certificate" +msgstr "Zertifikat" -#, fuzzy -msgid "Specified CAs" -msgstr "Spezifische Gruppe" - -msgid "Specified Hosts and Groups" -msgstr "Spezifische Hosts und Gruppen" - -#, fuzzy -msgid "Specified Profiles" -msgstr "Spezifische Gruppe" - -msgid "Specified Services and Groups" -msgstr "Spezifische Dienste und Gruppen" - -msgid "Specified Users and Groups" -msgstr "Spezifische Benutzer und Gruppen" - -#, fuzzy -msgid "Permitted to have certificates issued" -msgstr "Datei, in der das Zertifikat gespeichert werden soll." - -#, fuzzy -msgid "Remove certificate profiles" +msgid "Certificate Profile to use" msgstr "Benutze Zertifikatsprofil" -msgid "AA Compromise" -msgstr "" +msgid "Certificate Type" +msgstr "Zertifikattyp" -#, fuzzy -msgid "Add principal" -msgstr "Principal" +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "Formatfehler im Zertifikat: %(error)s" -msgid "Affiliation Changed" -msgstr "" +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "Zertifikat-Operation kann nicht abgeschlossen werden: %(error)s" -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" +msgid "Certificate/CRL" +msgstr "Zertifikat/CRL" msgid "Certificates" msgstr "Zertifikate" -#, fuzzy -msgid "Certificate Hold" -msgstr "Zertifikat" +msgid "Change current Domain Level." +msgstr "Aktuelles Domain Level ändern." -#, fuzzy -msgid "Cessation of Operation" -msgstr "Replikationseinstellungen" - -#, fuzzy -msgid "Common Name" -msgstr "Befehlsname" - -msgid "the certificate with serial number " -msgstr "" - -msgid "Expires On" -msgstr "Läuft ab am" - -#, fuzzy -msgid "Issued on from" -msgstr "Ausgegeben am" - -#, fuzzy -msgid "Issued on to" -msgstr "Ausgegeben am" - -#, fuzzy -msgid "Maximum serial number" -msgstr "Seriennummer" - -#, fuzzy -msgid "Minimum serial number" -msgstr "Seriennummer" - -#, fuzzy -msgid "Revoked on from" -msgstr "Widerrufen" - -#, fuzzy -msgid "Revoked on to" -msgstr "Widerrufen" - -#, fuzzy -msgid "Valid not after from" -msgstr "Überprüfungsfehler" - -#, fuzzy -msgid "Valid not after to" -msgstr "Gültig ab" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -#, fuzzy -msgid "Fingerprints" -msgstr "Fingerabdruck" - -#, fuzzy -msgid "Get Certificate" -msgstr "Neues Zertifikat" - -#, fuzzy -msgid "Certificate Hold Removed" -msgstr "Benutze Zertifikatsprofil" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Issue new certificate" -msgstr "Neues Zertifikat" - -msgid "Issued By" -msgstr "Ausgegeben von" - -msgid "Issued On" -msgstr "Ausgegeben am" - -msgid "Issued To" -msgstr "Ausgegeben an" - -msgid "Key Compromise" -msgstr "" - -msgid "No Valid Certificate" -msgstr "Kein gültiges Zertifikat" - -msgid "New Certificate" -msgstr "Neues Zertifikat" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -msgid "Note" -msgstr "" - -msgid "Organizational Unit" -msgstr "Organisationseinheit" - -#, fuzzy, python-brace-format -msgid "${count} certificate(s) present" -msgstr "${count} Einträge gelöscht" - -msgid "Privilege Withdrawn" -msgstr "" - -msgid "Reason for Revocation" -msgstr "" - -#, fuzzy -msgid "Remove certificate hold" -msgstr "Ein Zertifikat widerrufen." - -#, fuzzy -msgid "Do you want to remove the certificate hold?" -msgstr "Datei, in der das Zertifikat gespeichert werden soll." - -#, fuzzy -msgid "Remove from CRL" -msgstr "DNS Einträge löschen" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -#, fuzzy -msgid "Certificate requested" -msgstr "Zertifikate" - -#, fuzzy -msgid "Revoke certificate" -msgstr "Ein Zertifikat widerrufen." - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -#, fuzzy -msgid "Certificate Revoked" -msgstr "Zertifikattyp" - -msgid "REVOKED" -msgstr "" - -msgid "SHA1 Fingerprint" -msgstr "SHA1-Fingerabdruck" - -#, fuzzy -msgid "SHA256 Fingerprint" -msgstr "SHA1-Fingerabdruck" - -msgid "Status" -msgstr "Status" - -msgid "Superseded" -msgstr "" - -msgid "Unspecified" -msgstr "Nicht angegeben" - -#, fuzzy -msgid "Valid Certificate Present" -msgstr "Kein gültiges Zertifikat" - -#, fuzzy -msgid "Valid from" -msgstr "Überprüfungsfehler" - -#, fuzzy -msgid "Valid to" -msgstr "Gültigkeit" - -msgid "Validity" -msgstr "Gültigkeit" - -#, fuzzy, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "${entity} ${primary_key} aktualisiert" - -#, fuzzy -msgid "View Certificate" -msgstr "Neues Zertifikat" - -#, fuzzy -msgid "Certificate Data" -msgstr "Zertifikat" - -#, fuzzy -msgid "Certificate For Match" -msgstr "Zertifikat" - -#, fuzzy -msgid "Certificate Mapping Match" -msgstr "Zertifikattyp" - -#, fuzzy -msgid "Matched Users" -msgstr "Zutreffende Regeln" - -#, fuzzy -msgid "User Login" -msgstr "Anmeldename" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -#, fuzzy -msgid "Configuration string" -msgstr "Konfiguration" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -#, fuzzy -msgid "Remove certificate mapping data" -msgstr "Ein Zertifikat widerrufen." - -msgid "Issuer and subject" -msgstr "" - -#, fuzzy -msgid "Remove certificate identity mapping rules" -msgstr "Eine Signaturanfrage (CSR) senden." - -msgid "Group Options" -msgstr "Gruppenoptionen" - -msgid "Search Options" -msgstr "Suchoptionen" - -msgid "SELinux Options" -msgstr "SELinux-Optionen" - -#, fuzzy -msgid "Server Options" -msgstr "Suchoptionen" - -#, fuzzy -msgid "Service Options" -msgstr "Suchoptionen" - -msgid "User Options" -msgstr "Benutzeroptionen" - -msgid "Forward first" -msgstr "" - -#, fuzzy -msgid "Forwarding disabled" -msgstr "Konto ist deaktiviert" - -msgid "Forward only" -msgstr "" - -msgid "Options" -msgstr "Optionen" - -#, fuzzy -msgid "Update System DNS Records" -msgstr "DNS Einträge aktualisieren" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -msgid "Other Record Types" -msgstr "Andere Datensatztypen" - -msgid "Address not valid, can't redirect" -msgstr "" - -#, fuzzy -msgid "Create dns record" -msgstr "Eine neue Gruppe erstellen." - -msgid "Creating record." -msgstr "" - -#, fuzzy -msgid "Record creation failed." -msgstr "Token-Synchronisierung fehlgeschlagen" - -msgid "Checking if record exists." -msgstr "" - -msgid "Record not found." -msgstr "Datensatz nicht gefunden." - -#, fuzzy -msgid "Redirection to PTR record" -msgstr "Umleitung" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -#, fuzzy -msgid "Target reverse zone not found." -msgstr "%(parent)s: %(oname)s nicht gefunden" - -#, fuzzy -msgid "Fetching DNS zones." -msgstr "DNS-Zonen" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -#, fuzzy -msgid "Remove DNS resource records" -msgstr "Nach DNS-Ressourcen suchen." - -#, fuzzy -msgid "Standard Record Types" -msgstr "Andere Datensatztypen" - -msgid "Records for DNS Zone" -msgstr "" - -#, fuzzy -msgid "Record Type" -msgstr "Datensatztyp" - -#, fuzzy -msgid "Add DNS zone" -msgstr "DNS-Zone" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "SInd Sie sicher, dass Sie ${object} deaktivieren wollen?" - -#, fuzzy -msgid "DNS Zone Settings" -msgstr "DNS-Zonen" - -#, fuzzy -msgid "Remove DNS zones" -msgstr "DNS-Zonen" - -#, fuzzy -msgid "Remove Permission" -msgstr "Berechtigung" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "SInd Sie sicher, dass Sie ${object} löschen wollen?" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Level" -msgstr "Level" - -#, fuzzy -msgid "Set Domain Level" -msgstr "Domain Level" - -#, fuzzy -msgid "Add user group" -msgstr "Benutzer-Gruppe" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -msgid "Group Settings" -msgstr "Gruppeneinstellungen" - -msgid "External" -msgstr "Extern" - -msgid "Groups" -msgstr "Gruppen" - -#, fuzzy -msgid "Group categories" -msgstr "Benutzerkategorien" - -msgid "Change to external group" -msgstr "In externe Gruppe umwandeln" +msgid "Change password" +msgstr "Passwort ändern" msgid "Change to POSIX group" msgstr "In POSIX-Gruppe umwandeln" -#, fuzzy -msgid "Non-POSIX" -msgstr "POSIX" +msgid "Change to external group" +msgstr "In externe Gruppe umwandeln" -msgid "POSIX" -msgstr "POSIX" +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Passwort für \"%(value)s\" geändert" -#, fuzzy -msgid "Remove user groups" -msgstr "Mitglieds-Dienstgruppen" +msgid "Character classes" +msgstr "Zeichenklassen" + +msgid "Check the status of a certificate signing request." +msgstr "Den Status der Signaturanfrage des Zertifikats überprüfen." + +msgid "City" +msgstr "Ort" + +msgid "Class" +msgstr "Klasse" #, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, fuzzy, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, fuzzy, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, fuzzy, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "Dienste von einer HBAC-Gruppe entfernen." - -#, fuzzy, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "Mitglieder aus einer Gruppe entfernen." - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -msgid "Group Type" -msgstr "Gruppentyp" - -#, fuzzy -msgid "Add HBAC rule" -msgstr "HBAC-Regel" - -#, fuzzy, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "Benutzer und Gruppen zu einer HBAC-Regel hinzufügen." - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." - -#, fuzzy, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." - -msgid "Accessing" -msgstr "Greift zu" - -#, fuzzy -msgid "Remove HBAC rules" -msgstr "HBAC-Regeln" - -#, fuzzy, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, fuzzy, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "Dienste von einer HBAC-Gruppe entfernen." - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -msgid "Via Service" -msgstr "Mit Dienst" - -msgid "Who" -msgstr "Wer" - -#, fuzzy -msgid "Add HBAC service" -msgstr "HBAC-Dienst" - -#, fuzzy, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "Mitglieder zur einer HBAC-Dienstgruppe hinzufügen." - -#, fuzzy -msgid "Remove HBAC services" -msgstr "Mitglieds-HBAC-Dienst" - -#, fuzzy, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." - -#, fuzzy -msgid "Add HBAC service group" -msgstr "HBAC-Dienstgruppe" - -#, fuzzy, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "Mitglieder zur einer HBAC-Dienstgruppe hinzufügen." - -#, fuzzy -msgid "Remove HBAC service groups" -msgstr "Mitglieds-HBAC-Servicegruppen" - -#, fuzzy, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." - -msgid "Access Denied" -msgstr "Zugriff verweigert" - -msgid "Access Granted" -msgstr "Zugriff gewährt" - -msgid "Include Disabled" -msgstr "Deaktivierte einschließen" - -msgid "Include Enabled" -msgstr "Aktivierte einschließen" - -msgid "HBAC Test" -msgstr "HBAC Test" - -msgid "Matched" -msgstr "Gefunden" - -msgid "Missing values: " -msgstr "Fehlende Werte:" - -msgid "New Test" -msgstr "Neuer Test" - -msgid "Rules" -msgstr "Regeln" - -msgid "Run Test" -msgstr "Test Starten" - -#, fuzzy, python-brace-format -msgid "Specify external ${entity}" -msgstr "${entity} bearbeiten" - -#, fuzzy -msgid "Unmatched" -msgstr "Gefunden" - -#, fuzzy -msgid "Add host" -msgstr "Neuen Host hinzufügen." - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -msgid "Host Certificate" -msgstr "Host-Zertifikat" - -msgid "Host Name" -msgstr "Host-Name" - -msgid "Delete Key, Unprovision" -msgstr "" - -msgid "Host Settings" -msgstr "Host Einstellungen" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -#, fuzzy -msgid "Generate OTP" -msgstr "OTP zurücksetzen" - -#, fuzzy -msgid "Generated OTP" -msgstr "OTP zurücksetzen" - -msgid "Kerberos Key" -msgstr "Kerberos-Schlüssel" - -msgid "Kerberos Key Not Present" -msgstr "Kerberos-Schlüssel nicht vorhanden" - -#, fuzzy -msgid "Kerberos Key Present, Host Provisioned" -msgstr "Kerberos-Schlüssel nicht vorhanden" - -#, fuzzy -msgid "One-Time Password" -msgstr "Einmalpasswort" - -#, fuzzy -msgid "One-Time Password Not Present" -msgstr "Einmalpasswort" - -#, fuzzy -msgid "One-Time Password Present" -msgstr "Einmalpasswort" - -msgid "Reset OTP" -msgstr "OTP zurücksetzen" - -#, fuzzy -msgid "Reset One-Time Password" -msgstr "Einmalpasswort" - -msgid "Set OTP" -msgstr "OTP setzen" - -msgid "OTP set" -msgstr "OTP gesetzt" - -#, fuzzy -msgid "Set One-Time Password" -msgstr "Einmalpasswort" - -#, fuzzy -msgid "Remove hosts" -msgstr "Mitglieds-Hosts" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "Mitglieder von Hostgruppe entfernen." - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "Berechtigungen von Rolle entfernen." - -#, fuzzy, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -#, fuzzy -msgid "Unprovision" -msgstr "Provisioning" - -#, fuzzy -msgid "Are you sure you want to unprovision this host?" -msgstr "Sind Sie sicher, dass Sie mit dieser Aktion fortfahren wollen?" - -#, fuzzy -msgid "Unprovisioning host" -msgstr "Provisioning" - -msgid "Host unprovisioned" -msgstr "" - -#, fuzzy -msgid "Add host group" -msgstr "Hostgruppe" +msgid "Click to ${action}" +msgstr "Klicken um zu ${action}" -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" +msgid "Client is not configured. Run ipa-client-install." +msgstr "Client ist nicht konfiguriert. Rufen Sie ipa-client-install auf." -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" +msgid "Client version. Used to determine if server will accept request." msgstr "" +"Client-Version. Dadurch wird bestimmt, ob der Server die Anfrage akzeptiert." -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" +msgid "Clock interval" +msgstr "Zeitintervall" -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" +msgid "Clock offset" +msgstr "Zeit-Offset" -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" +msgid "Close" +msgstr "Schließen" -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" +msgid "Collapse All" +msgstr "Alle einklappen" -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "Befehl '%(name)s' ist veraltet" -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" +msgid "Command category" +msgstr "Befehlskategorie" -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" +msgid "Command category the rule applies to" +msgstr "Befehlskategorie, auf die die Regel angewendet werden soll" -msgid "Host Group Settings" -msgstr "Hostgruppen-Einstellungen" +msgid "Command name" +msgstr "Befehlsname" -#, fuzzy -msgid "Remove host groups" -msgstr "Mitglieds-Hostgruppen" +msgid "Command not implemented" +msgstr "Befehl nicht implementiert" -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" +msgid "Commands" +msgstr "Befehle" -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" +msgid "Conditions that could not be added" +msgstr "Bedingungen, die nicht hinzugefügt werden konnten" -#, fuzzy, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." +msgid "Conditions that could not be removed" +msgstr "Bedingungen, die nicht entfernt werden konnten" -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -#, fuzzy -msgid "Identity provider details" -msgstr "Segment Details" - -#, fuzzy -#| msgid "Verify Password" -msgid "Verify secret" -msgstr "Passwort verifizieren" - -msgid "User to override" -msgstr "Benutzer zum Überschreiben" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -#, fuzzy -msgid "Profile" -msgstr "Profile" - -msgid "Group to override" -msgstr "Gruppe zum Überschreiben" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -#, fuzzy -msgid "Enter trusted group name." -msgstr "Dienstgruppenname" - -msgid "Add ID view" -msgstr "" - -#, fuzzy -msgid "Add group ID override" -msgstr "Gruppe zum Überschreiben" - -#, fuzzy -msgid "Add user ID override" -msgstr "Benutzer zum Überschreiben" - -#, fuzzy, python-brace-format -msgid "${primary_key} applies to:" -msgstr "${primary_key} Mitglieder:" - -msgid "Applied to hosts" -msgstr "" - -#, fuzzy -msgid "Apply to host groups" -msgstr "Hostgruppen" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, fuzzy, python-brace-format -msgid "${primary_key} overrides:" -msgstr "${primary_key} Mitglieder:" - -msgid "Remove ID views" -msgstr "" - -#, fuzzy -msgid "Remove user ID overrides" -msgstr "Benutzer zum Überschreiben" - -#, fuzzy -msgid "Remove group ID overrides" -msgstr "Gruppe zum Überschreiben" - -#, fuzzy -msgid "Un-apply from host groups" -msgstr "Nach Hostgruppen suchen." - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -#, fuzzy -msgid "Un-apply" -msgstr "Anwenden" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "Sind Sie sicher, dass Sie die ausgewählten Einträge aktivieren wollen?" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "Kerberos-Ticket Richtlinien" - -#, fuzzy -msgid "Add netgroup" -msgstr "Hostgruppe hinzufügen." - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Netgroup Settings" -msgstr "Gruppeneinstellungen" - -#, fuzzy -msgid "Remove netgroups" -msgstr "Mitglieds-Gruppen" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add OTP token" -msgstr "OTP Token" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" -"Sie können FreeOTP als " -"Softwaretoken einsetzen." +msgid "Configuration" +msgstr "Konfiguration" msgid "Configure your token" msgstr "Token konfigurieren" @@ -22082,67 +1098,1527 @@ msgstr "" "Sie auf den QR Code wenn Sie dies auf dem Gerät sehen welches Sie " "konfigurieren möchten." -msgid "OTP Token Settings" -msgstr "OTP Token Einstellungen" +msgid "Configured administrative server limit exceeded" +msgstr "Vorgegebene administrative Serverbeschränkung überschritten" -msgid "Disable token" -msgstr "Token deaktivieren" +msgid "Configured size limit exceeded" +msgstr "Vorgegebene Größenbeschränkung überschritten" -msgid "Enable token" -msgstr "Token aktivieren" +msgid "Configured time limit exceeded" +msgstr "Vorgegebenes Zeitlimit überschritten" -#, fuzzy -msgid "Remove OTP tokens" -msgstr "OTP Tokens" +msgid "Confirmation" +msgstr "Bestätigung" -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" +msgid "Consecutive failures before lockout" +msgstr "Aufeinanderfolgende Falscheingaben bevor gesperrt wird" -msgid "Show QR code" -msgstr "QR Code zeigen" +msgid "Contact Settings" +msgstr "Kontakteinstellungen" -msgid "Show configuration uri" -msgstr "Konfigurations-URL zeigen" +msgid "Continuous mode: Don't stop on errors." +msgstr "Fortlaufender Modus: Kein Abbruch bei Fehlern." + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "%(name)s konnte nicht interaktiv ermittelt werden" + +msgid "Counter" +msgstr "Zähler" msgid "Counter-based (HOTP)" msgstr "Zählerbasiert (HOTP)" -msgid "Time-based (TOTP)" -msgstr "Zeitbasiert (TOTP)" +msgid "Create Stage user in from a delete user" +msgstr "Erstelle vorbereiteten Benutzer aus einem gelöschten Benutzer" -#, fuzzy -msgid "Add Custom Attribute" -msgstr "Attribut" +msgid "Create a new CA ACL." +msgstr "Erstelle eine neue CA ACL." -#, fuzzy -msgid "Permission settings" -msgstr "Berechtigungen" +msgid "Create a new HBAC rule." +msgstr "Neue HBAC-Regel erstellen." -#, fuzzy -msgid "Attribute breakdown" -msgstr "Attribut Schlüssel" +msgid "Create a new automount location." +msgstr "Neuen Automount-Ort erstellen." -#, fuzzy -msgid "Privilege Settings" -msgstr "Diensteinstellungen" +msgid "Create a new group." +msgstr "Eine neue Gruppe erstellen." -#, fuzzy -msgid "Public key:" -msgstr "Öffentliche SSH Schlüssel" +msgid "Create as a non-POSIX group" +msgstr "Als Nicht-POSIX-Gruppe erstellen" -#, fuzzy -msgid "Set public key" -msgstr "Öffentlicher SSH Schlüssel" +msgid "Create new Sudo Command." +msgstr "Neuen Sudo-Befehl erzeugen." -msgid "Show/Set key" -msgstr "Zeige/Setze Schlüssel" +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "ACI erstellt \"%(value)s\"" + +msgid "Credentials cache permissions incorrect" +msgstr "Zugriffsrechte des Anmeldedaten-Zwischenspeichers sind inkorrekt." + +msgid "Current DNS record contents:\n" +msgstr "Derzeitiger Inhalt des DNS-Datensatzes:\n" + +msgid "Current Password" +msgstr "Aktuelles Passwort" + +msgid "Current domain level:" +msgstr "Aktuelles Domain Level:" + +msgid "Current password is required" +msgstr "Aktuelles Passwort ist erforderlich" + +msgid "DN of the started task" +msgstr "DN der gestarteten Aufgabe" + +msgid "DNS" +msgstr "DNS" + +msgid "DNS Zone" +msgstr "DNS-Zone" + +msgid "DNS Zones" +msgstr "DNS-Zonen" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "DNS Check fehlerhaft: Erwartet {%(expected)s} bekommen {%(got)s}" + +msgid "DNS class" +msgstr "DNS-Klasse" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" +"Die DNS-Forwarder Semantiken haben sich seit IPA 4.0 geändert.\n" +"Nutzen Sie stattdessen Forward Zones (dnsforwardzone-*).\n" +"Für weitere Details schlagen Sie bitte in der Dokumentation nach." + +msgid "DNS is not configured" +msgstr "DNS ist nicht konfiguriert" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" +"DNS Record(s) von Host %(host)s konnten nicht entfernt werden. (%(reason)s)" + +msgid "DNS records can be only updated one at a time" +msgstr "Es können nicht mehrere DNS-Datensätze aktualisiert werden." + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"DNS Server %(server)s unterstützt kein DNSSEC: %(error)s.\n" +"Wenn DNSSEC-Überprüfung auf den IPA Servern aktiviert ist bitte deaktivieren." + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"Der DNS server %(server)s unterstützt EDNS0 (RFC 6891) nicht: %(error)s.\n" +"Falls DNSSEC auf IPA Server(n) aktiviert ist, deaktivieren Sie diese." + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "DNS Server %(server)s: %(error)s." + +msgid "DNS zone" +msgstr "DNS-Zone" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "DNS Zone %(zone)s nicht gefunden" + +msgid "DNS zones" +msgstr "DNS-Zonen" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" +"DNSSEC Unterstützung ist experimentell.\n" +"%(additional_info)s" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" +"DNSSEC Überprüfung fehlgeschlagen: %(error)s.\n" +"Bitte überprüfen Sie die DNSSEC Konfigurationen oder deaktivieren die DNSSEC " +"Überprüfung auf allen IPA Servern." + +msgid "Data" +msgstr "Daten" + +msgid "Debugging output" +msgstr "Debugging-Ausgabe" + +msgid "Default (fallback) Group" +msgstr "Standard (Rückfall) Gruppe" + +msgid "Default PAC types" +msgstr "Standard PAC-Typen" + +msgid "Default SELinux user" +msgstr "Vorgegebener SELinux-Benutzer" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" +"Vorgegebener SELinux-Benutzer, sofern in den Zuweisungsregeln von SELinux " +"nichts anderes bestimmt ist" + +msgid "Default group for entries to land" +msgstr "Vorgegebene Gruppe für Einträge" + +msgid "Default group for new users" +msgstr "Vorgegebene Gruppe für neue Benutzer" + +msgid "Default group objectclasses" +msgstr "Standard objectclass für Gruppen" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "Standard objectclass für Gruppen (komma-separierte Liste)" + +msgid "Default host group" +msgstr "Standard Hostgruppe" + +msgid "Default location of home directories" +msgstr "Vorgegebener Ort für Home-Verzeichnisse" + +msgid "Default shell" +msgstr "Vorgabe-Shell" + +msgid "Default shell for new users" +msgstr "Vorgegebene Shell für neue Benutzer" + +msgid "Default user authentication types" +msgstr "Standard Authentifizierungsmethoden" + +msgid "Default user group" +msgstr "Standard Benutzergruppe" + +msgid "Default user objectclasses" +msgstr "Standard objectclass für Benutzer" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "Standard objectclass für Benutzer (komma-separierte Liste)" + +msgid "Default users group" +msgstr "Vorgegebene Gruppe des Benutzers" + +msgid "Delegation" +msgstr "Delegation" + +msgid "Delegation name" +msgstr "Delegationsname" + +msgid "Delegations" +msgstr "Delegationen" + +msgid "Delete" +msgstr "Löschen" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "Wert von %(name)s auf »%(value)s« löschen?" + +msgid "Delete Sudo Command." +msgstr "Sudo-Befehl löschen." + +msgid "Delete a CA ACL." +msgstr "CA ACL löschen." + +msgid "Delete a group password policy." +msgstr "Gruppen-Passwortregel löschen." + +msgid "Delete a host." +msgstr "Host löschen." + +msgid "Delete a hostgroup." +msgstr "Hostgruppe löschen." + +msgid "Delete a role." +msgstr "Rolle löschen." + +msgid "Delete a stage user." +msgstr "Einen vorbereiteten Benutzer löschen." + +msgid "Delete a user" +msgstr "Einen Benutzer löschen" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "Einen Benutzer löschen, Eintrag für zukünfigte Verwendung aufbewahren" + +msgid "Delete a user." +msgstr "Einen Benutzer löschen." + +msgid "Delete all associated records" +msgstr "Alle zugehörigen Datensätze löschen" + +msgid "Delete all?" +msgstr "Alles löschen?" + +msgid "Delete an HBAC rule." +msgstr "HBAC-Regel löschen" + +msgid "Delete an HBAC service group." +msgstr "HBAC-Dienstgruppe löschen" + +msgid "Delete an IPA service." +msgstr "Einen IPA-Dienst entfernen." + +msgid "Delete an OTP token." +msgstr "OTP Token löschen" + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" +"Ein Attribut-Wert-Paar löschen. Diese Option wird zuletzt angewendet,\n" +"nach allen Optionen, die etwas festlegen oder hinzufügen." + +msgid "Delete an automount location." +msgstr "Automount-Ort löschen." + +msgid "Delete an existing HBAC service." +msgstr "Einen existierenden HBAC Dienst löschen." + +msgid "Delete group." +msgstr "Gruppe löschen." + +msgid "Delete mode" +msgstr "Lösch-Modus" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "ACI gelöscht \"%(value)s\"" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "CA ACL \"%(value)s\" gelöscht" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" gelöscht" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "HBAC Dienst \"%(value)s\" gelöscht" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "HBAC-Dienstgruppe »%(value)s« gelöscht" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "OTP token \"%(value)s\" gelöscht" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" gelöscht" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "Automount-Ort \"%(value)s\" gelöscht" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Gruppe »%(value)s« gelöscht" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "Host \"%(value)s\" gelöscht" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Hostgruppe \"%(value)s\" gelöscht" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "Datensatz »%(value)s« gelöscht" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "Rolle \"%(value)s\" gelöscht" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "Dienst »%(value)s« gelöscht" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer \"%(value)s\" gelöscht" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Benutzer »%(value)s« gelöscht" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" +"Das Löschen einer verwalteten Gruppe ist unzulässig. Sie muss zuerst aus der " +"Verwaltung entfernt werden." + +msgid "Deny" +msgstr "Verweigern" + +msgid "Department Number" +msgstr "Abteilungsnummer" + +msgid "Deprecated options" +msgstr "Veraltete Optionen" + +msgid "Description" +msgstr "Beschreibung" + +msgid "Digest" +msgstr "Prüfsumme" + +msgid "Digest Type" +msgstr "Prüfsummentyp" + +msgid "Digits" +msgstr "Zeichen" + +msgid "Direct" +msgstr "Direkt" + +msgid "Direct Membership" +msgstr "Direkte Migliedschaft" + +msgid "Disable" +msgstr "Deaktivieren" + +msgid "Disable a Sudo Rule." +msgstr "Eine Sudo-Regel deaktivieren." + +msgid "Disable a user account." +msgstr "Ein Benutzerkonto deaktivieren." + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "" +"Den Kerberos-Schlüssel und das SSL-Zertifikat eines Dienstes deaktivieren." + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "" +"Kerberos-Schlüssel, SSL-Zertifikat und alle Dienste des Hosts deaktivieren." + +msgid "Disable token" +msgstr "Token deaktivieren" + +msgid "Disabled" +msgstr "Deaktiviert" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" deaktiviert" + +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "Sudo-Regel »%s« wurde deaktiviert." + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "Deaktivierte Domäne '%(domain)s' ist nicht zulässig" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "Host \"%(value)s\" deaktiviert" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "Dienst »%(value)s« deaktiviert" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "Benutzerkonto »%(value)s« wurde deaktiviert" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " +"erstellen." + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" +"Benutzern, Gruppen, Hosts und Hostgruppen verbieten die Schlüsseltabelle zu " +"erhalten." + +msgid "Display DNS resource." +msgstr "DNS-Ressource anzeigen." + +msgid "Display Sudo Command." +msgstr "Sudo-Befehl anzeigen." + +msgid "Display Sudo Rule." +msgstr "Sudo-Regel anzeigen." + +msgid "Display an automount location." +msgstr "Automount-Ort anzeigen." + +msgid "Display effective policy for a specific user" +msgstr "Aktive Passwortregel für einen bestimmten Benutzer anzeigen" + +msgid "Display information about a host." +msgstr "Informationen über Host anzeigen." + +msgid "Display information about a hostgroup." +msgstr "Informationen über die Hostgruppe anzeigen." + +msgid "Display information about a named group." +msgstr "Informationen zu einer genannten Gruppe anzeigen." + +msgid "Display information about a role." +msgstr "Informationen über eine Rolle anzeigen." + +msgid "Display information about a stage user." +msgstr "Informationen zu einem vorbereiteten Benutzer anzeigen." + +msgid "Display information about a user." +msgstr "Informationen zu einem Benutzer anzeigen." + +msgid "Display information about an HBAC service group." +msgstr "Informationen über eine HBAC-Dienstgruppe anzeigen" + +msgid "Display information about an HBAC service." +msgstr "Informationen zu einem HBAC-Dienst anzeigen." + +msgid "Display information about an IPA service." +msgstr "Informationen zu einem IPA-Dienst anzeigen." + +msgid "Display information about an OTP token." +msgstr "Informationen über OTP Token anzeigen." + +msgid "Display information about password policy." +msgstr "Informationen über Passwortregel anzeigen." + +msgid "Display name" +msgstr "Angezeigter Name" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" +"Zugriffsrechte dieses Eintrags anzeigen (erfordert --all). In der " +"Handbuchseite zu ipa finden Sie weitere Details." + +msgid "Display the properties of an HBAC rule." +msgstr "Einstellungen der HBAC-Regel anzeigen." + +msgid "Display user record for current Kerberos principal" +msgstr "Benutzer-Datensatz für den aktuellen Kerberos-Principal anzeigen" + +msgid "Do not display QR code" +msgstr "Keinen QR Code zeigen" + +msgid "Domain" +msgstr "Domain" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" +"Die Domäne '%(domain)s' ist keine Root Domäne für den Forest '%(forest)s'" + +msgid "Domain Level" +msgstr "Domain Level" + +msgid "Domain Level cannot be lowered." +msgstr "Domain Level kann nicht gesenkt werden." + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" +"Domain Level kann nicht auf {0} erhöht werden, Server {1} unterstützt das " +"nicht." + +msgid "Domain enabled" +msgstr "Domäne aktiviert" + +msgid "Dynamic update" +msgstr "Dynamische Aktualisierung" + +msgid "Edit" +msgstr "Bearbeiten" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "${entity} bearbeiten" + +msgid "Email address" +msgstr "Email-Adresse" + +msgid "Employee Information" +msgstr "Mitarbeiterinformationen" + +msgid "Employee Number" +msgstr "Personalnummer" + +msgid "Employee Type" +msgstr "Personaltyp" + +msgid "Empty domain is not allowed" +msgstr "Eine leere Domäne ist nicht zulässig" + +msgid "Enable" +msgstr "Aktivieren" + +msgid "Enable a Sudo Rule." +msgstr "Eine Sudo-Regel aktivieren." + +msgid "Enable a user account." +msgstr "Ein Benutzerkonto aktivieren." + +msgid "Enable an HBAC rule." +msgstr "HBAC-Regel aktivieren." + +msgid "Enable migration mode" +msgstr "Migrationsmodus aktivieren" + +msgid "Enable token" +msgstr "Token aktivieren" + +msgid "Enabled" +msgstr "Aktiviert" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" aktiviert" + +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "Sudo-Regel »%s« wurde aktiviert." + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "Benutzerkonto »%(value)s« wurde aktiviert" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "Geben Sie %(label)s zur Bestätigung nochmals ein: " + +msgid "Entry" +msgstr "Eintrag" + +msgid "Error" +msgstr "Fehler" + +msgid "Error changing account status" +msgstr "Fehler beim Ändern des Kontostatus" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "Fehler beim Holen der initialen Anmeldedaten: %s.\n" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "" +"Fehler beim Speichern der Anmeldedaten im Anmeldedaten-Zwischenspeicher: " +"%s.\n" + +msgid "Exceeded number of tries to forward a request." +msgstr "Anzahl der Versuche zur Weiterleitung der Anfrage überschritten" + +msgid "Exclusive" +msgstr "Exklusiv" + +msgid "Exclusive Regex" +msgstr "Ausschließende Regex" + +msgid "Expand All" +msgstr "Alle aufklappen" + +msgid "Expires On" +msgstr "Läuft ab am" + +msgid "Expression" +msgstr "Ausdruck" + +msgid "External" +msgstr "Extern" + +msgid "External User" +msgstr "Externer Benutzer" + +msgid "External host" +msgstr "Externer Host" + +msgid "External member" +msgstr "Externes Mitglied" + +msgid "External trust" +msgstr "Externe Vertrauensstellung" + +msgid "Extra hashes to generate in password plug-in" +msgstr "Im Passwort-Plugin zusätzlich zu erzeugende Prüfsummen" + +msgid "Failed RunAs" +msgstr "RunAs fehlgeschlagen" + +msgid "Failed RunAsGroup" +msgstr "RunAsGroup fehlgeschlagen" + +msgid "Failed hosts/hostgroups" +msgstr "Fehler bei Hosts/Hostgruppen" + +msgid "Failed logins" +msgstr "Fehlgeschlagene Logins" + +msgid "Failed members" +msgstr "Fehler bei Mitgliedern" + +msgid "Failed service/service groups" +msgstr "Fehler bei Diensten/Dienstgruppen" + +msgid "Failed to add" +msgstr "Hinzufügen fehlgeschlagen" + +msgid "Failed to create key!\n" +msgstr "Schlüssel konnte nicht erzeugt werden!\n" + +msgid "Failed to create random key!\n" +msgstr "Zufallsschlüssel konnte nicht erzeugt werden!\n" + +msgid "Failed to remove" +msgstr "Entfernen fehlgeschlagen" + +msgid "Failed users/groups" +msgstr "Fehlerhafte Benutzer/Gruppen" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "Fehler beim Dekodieren der Signaturanfrage für das Zertifikat: %s" + +msgid "Failure reset interval" +msgstr "Fehler Resetintervall" + +msgid "False" +msgstr "Falsch" + +msgid "Fax Number" +msgstr "Faxnummer" + +#, python-format +msgid "File %(file)s not found" +msgstr "Datei %(file)s nicht gefunden" + +msgid "File to store the certificate in." +msgstr "Datei, in der das Zertifikat gespeichert werden soll." + +msgid "Filter" +msgstr "Filter" + +msgid "Find" +msgstr "Suchen" + +msgid "Fingerprint" +msgstr "Fingerabdruck" + +msgid "Fingerprint (SHA1)" +msgstr "Fingerabdruck (SHA1)" + +msgid "Fingerprint Type" +msgstr "Fingerabdruck-Typ" + +msgid "First" +msgstr "Erste" + +msgid "First Code" +msgstr "Erster Code" + +msgid "First OTP" +msgstr "Erstes OTP" + +msgid "First date/time the token can be used" +msgstr "Ab diesem Datum kann der Token benutzt werden" + +msgid "First name" +msgstr "Vorname" + +msgid "Flags" +msgstr "Flags" + +msgid "Force Update" +msgstr "Update erzwingen" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" +"Der Forest '%(forest)s' besitzt bereits eine Vertrauensstellung zu Forest(s) " +"%(domains)s und kann daher keine Vertrauensstellung zu '%(conflict)s' " +"aufbauen" + +msgid "Forward to server instead of running locally" +msgstr "Zum Server weiterleiten, anstatt lokal auszuführen" + +#, python-format +msgid "Found '%(value)s'" +msgstr "»%(value)s« gefunden" + +msgid "Full name" +msgstr "Vollständiger Name" + +msgid "GECOS" +msgstr "GECOS" + +msgid "GID" +msgstr "Gruppen-ID" + +msgid "GID (use this option to set it manually)" +msgstr "Gruppen-ID (verwenden Sie diese Option, um die ID manuell anzugeben)" + +msgid "General" +msgstr "Allgemein" + +msgid "Generate a random user password" +msgstr "Ein zufälliges Benutzerpasswort erzeugen" + +msgid "Get" +msgstr "Abrufen" + +msgid "Granting privilege to roles" +msgstr "Gebe Berechtigung den Rollen" + +msgid "Group" +msgstr "Gruppe" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "Gruppe »%s« existiert nicht" + +msgid "Group ID Number" +msgstr "Gruppen-ID" + +msgid "Group Options" +msgstr "Gruppenoptionen" + +msgid "Group Settings" +msgstr "Gruppeneinstellungen" + +msgid "Group Type" +msgstr "Gruppentyp" + +msgid "Group description" +msgstr "Gruppenbeschreibung" + +msgid "Group name" +msgstr "Gruppenname" + +msgid "Group to override" +msgstr "Gruppe zum Überschreiben" + +msgid "Grouping Type" +msgstr "Gruppierungstyp" + +msgid "Grouping to which the rule applies" +msgstr "Gruppierung, auf die die Regel angewendet wird" + +msgid "Groups" +msgstr "Gruppen" + +msgid "Groups allowed to create keytab" +msgstr "Gruppen die Schlüsseltabelle erstellen dürfen" + +msgid "Groups allowed to retrieve keytab" +msgstr "Gruppen die Schlüsseltabelle abrufen dürfen" + +msgid "HBAC Rule" +msgstr "HBAC-Regel" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "HBAC Regel die Benutzer, Gruppen und Hostgruppen definiert" + +msgid "HBAC Rules" +msgstr "HBAC-Regeln" + +msgid "HBAC Service" +msgstr "HBAC-Dienst" + +msgid "HBAC Service Group" +msgstr "HBAC-Dienstgruppe" + +msgid "HBAC Service Groups" +msgstr "HBAC-Dienstgruppen" + +msgid "HBAC Services" +msgstr "HBAC-Dienste" + +msgid "HBAC Test" +msgstr "HBAC Test" + +msgid "HBAC rule" +msgstr "HBAC-Regel" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "HBAC-Regel %(rule)s nicht gefunden" + +msgid "HBAC rules" +msgstr "HBAC-Regeln" + +msgid "HBAC service" +msgstr "HBAC-Dienst" + +msgid "HBAC service description" +msgstr "Beschreibung des HBAC-Dienstes" + +msgid "HBAC service group" +msgstr "HBAC-Dienstgruppe" + +msgid "HBAC service group description" +msgstr "Beschreibung der HBAC-Dienstgruppe" + +msgid "HBAC service groups" +msgstr "HBAC-Dienstgruppen" + +msgid "HBAC services" +msgstr "HBAC-Dienste" + +msgid "HOTP Authentication Window" +msgstr "HOTP Authentifizierungsfenster" + +msgid "HOTP Synchronization Window" +msgstr "HOTP Sychnronisierungsfenster" + +msgid "HTTP Error" +msgstr "HTTP-Fehler" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "Hardwareplattform des Hosts (z.B. Lenovo T400)" + +msgid "Hide details" +msgstr "Details verbergen" + +msgid "History size" +msgstr "Historie" + +msgid "Home directory" +msgstr "Home-Verzeichnis" + +msgid "Home directory base" +msgstr "Basis für Home-Verzeichnisse" + +msgid "Horizontal Precision" +msgstr "Horizontale Genauigkeit" + +msgid "Host" +msgstr "Host" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "Host »%(host)s« nicht gefunden" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "Der Host '%(hostname)s' besitzt keinen zugehörigen DNS A/AAAA Record" + +msgid "Host Certificate" +msgstr "Host-Zertifikat" + +msgid "Host Group" +msgstr "Hostgruppe" + +msgid "Host Group Settings" +msgstr "Hostgruppen-Einstellungen" + +msgid "Host Groups" +msgstr "Host-Gruppen" + +msgid "Host Groups allowed to create keytab" +msgstr "Hostgruppen die Schlüsseltabelle erstellen dürfen" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "Hostgruppen die Schlüsseltabelle abrufen dürfen" + +msgid "Host Name" +msgstr "Host-Name" + +msgid "Host Settings" +msgstr "Host Einstellungen" + +msgid "Host category" +msgstr "Host-Kategorie" + +msgid "Host category the ACL applies to" +msgstr "Hostkategorie auf die ACL angewendet wird" + +msgid "Host category the rule applies to" +msgstr "Host-Kategorie, auf welche die Regel angewendet werden soll" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "Hardwareplattform (z.B. \"Lenovo T61\")" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "Ort des Hosts (z.B. \"Baltimore, MD\")" + +msgid "Host name" +msgstr "Hostname" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "Betriebssystem und Version (z.B. \"Fedora 9\")" + +msgid "Host-group" +msgstr "Hostgruppen" + +msgid "Hostname" +msgstr "Hostname" + +msgid "Hostname of this server" +msgstr "Hostname dieses Servers" + +msgid "Hosts" +msgstr "Hosts" + +msgid "Hosts allowed to create keytab" +msgstr "Hosts die Schlüsseltabelle erstellen dürfen" + +msgid "Hosts allowed to retrieve keytab" +msgstr "Hosts die Schlüsseltabelle abrufen dürfen" + +msgid "IP Address" +msgstr "IP-Adresse" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "IP-Adresse %(ip)s ist bereits Domain %(domain)s zugewiesen." + +msgid "IPA Error" +msgstr "IPA-Fehler" + +msgid "IPA Server" +msgstr "IPA-Server" + +msgid "IPA Server to use" +msgstr "Zu verwendender IPA-Server" + +msgid "IPA Servers" +msgstr "IPA-Server" + +msgid "IPA master capable of PKINIT" +msgstr "IPA Master mit Fähigkeit für PKINIT " + +msgid "IPA master which can process PKINIT requests" +msgstr "IPA Master, der PKINIT Anfragen bearbeiten kann" + +msgid "IPA server hostname" +msgstr "IPA-Server Hostname" + +msgid "Identity" +msgstr "Identität" + +msgid "Identity Settings" +msgstr "Identitätseinstellungen" + +msgid "If the problem persists please contact the system administrator." +msgstr "" +"Bei dauerhaftem Problem wenden Sie sich bitte an den Systemadministrator." + +msgid "Include Disabled" +msgstr "Deaktivierte einschließen" + +msgid "Include Enabled" +msgstr "Aktivierte einschließen" + +msgid "Inclusive Regex" +msgstr "Einschließende Regex" + +msgid "Indirect" +msgstr "Indirekt" + +msgid "Indirect Member HBAC service" +msgstr "Indirekte Mitgli" + +msgid "Indirect Member HBAC service group" +msgstr "Indirekte Mitglieds-HBAC-Servicegruppe" + +msgid "Indirect Member groups" +msgstr "Indirekte Mitglieds-Gruppen" + +msgid "Indirect Member host-groups" +msgstr "Indirekte Mitglieds-Hostgruppen" + +msgid "Indirect Member hosts" +msgstr "Indirekte Mitglieds-Hosts" + +msgid "Indirect Member of roles" +msgstr "Indirektes Mitglied von Rollen" + +msgid "Indirect Member permissions" +msgstr "Indirekte Mitglieds-Berechtigungen" + +msgid "Indirect Member users" +msgstr "Indirekte Mitglieds-Benutzer" + +msgid "Indirect Membership" +msgstr "Indirekte Mitgliedschaft" + +msgid "Inherited from server configuration" +msgstr "Vererbt von Serverkonfiguration" + +msgid "Initial counter for the HOTP token" +msgstr "Startwert des HOTP-Zählers" + +msgid "Initials" +msgstr "Initialen" + +msgid "Input form contains invalid or missing values." +msgstr "Eingabeformular enthält ungültige oder fehlende Werte." + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Unzureichender Zugriff: %(info)s" + +msgid "Internal Error" +msgstr "Interner Fehler" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Ungültige JSON-RPC-Anfrage: %(error)s" + +msgid "Invalid credentials" +msgstr "Ungültige Zugangsdaten" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "Ungültiger Domänenname '%(domain)s': %(e)s" + +msgid "Invalid format. Should be name=value" +msgstr "Ungültiges Format. Sollte name=wert sein." + +msgid "Is zone active?" +msgstr "Ist die Zone aktiv?" + +msgid "Issue" +msgstr "Ausgeben" + +msgid "Issued By" +msgstr "Ausgegeben von" + +msgid "Issued On" +msgstr "Ausgegeben am" + +msgid "Issued To" +msgstr "Ausgegeben an" + +msgid "Issuer" +msgstr "Ausgabestelle" + +msgid "Job Title" +msgstr "Tätigkeit" + +msgid "Kerberos Key" +msgstr "Kerberos-Schlüssel" + +msgid "Kerberos Key Not Present" +msgstr "Kerberos-Schlüssel nicht vorhanden" + +msgid "Kerberos Ticket Policy" +msgstr "Kerberos-Ticket Richtlinien" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "Initialisierung des Kerberos-Kontexts fehlgschlagen\n" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Kerberos-Fehler: %(major)s/%(minor)s" + +msgid "Kerberos keys available" +msgstr "Kerberos-Schlüssel verfügbar" + +msgid "Kerberos principal" +msgstr "Kerberos-Principal" + +msgid "Kerberos principal expiration" +msgstr "Kerberos-Principal Ablauf" + +msgid "Kerberos principal name for this host" +msgstr "Kerberos-Principal für diesen Host" + +msgid "Key" +msgstr "Schlüssel" + +msgid "Keytab" +msgstr "Schlüsseltabelle" + +msgid "LDAP URI" +msgstr "LDAP-URI" + +msgid "LDAP password" +msgstr "LDAP-Passwort" + +msgid "LDAP password (if not using Kerberos)" +msgstr "LDAP-Passwort (falls Kerberos nicht verwendet wird)" + +msgid "LDAP schema" +msgstr "LDAP-Schema" + +msgid "LDAP timeout" +msgstr "LDAP Timeout" + +msgid "Last" +msgstr "Letzte" + +msgid "Last date/time the token can be used" +msgstr "Bis zu diesem Datum kann der Token benutzt werden" + +msgid "Last failed authentication" +msgstr "Letzte fehlgeschlagene Authentifizierung" + +msgid "Last name" +msgstr "Nachname" + +msgid "Last successful authentication" +msgstr "Letzte erfolgreiche Authentifizierung" + +msgid "Leading and trailing spaces are not allowed" +msgstr "Führende und angehängte Leerzeichen sind nicht erlaubt." + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "Gültiger LDAP filter (z.B. ou=Engineering)" + +msgid "Length of TOTP token code validity" +msgstr "Dauer die ein TOTP Code gültig ist " + +msgid "Level" +msgstr "Level" + +msgid "List of deletions that failed" +msgstr "Liste der fehlgeschlagenen Löschvorgänge" + +msgid "Lists of objects migrated; categorized by type." +msgstr "Liste der migrierten Objekte, nach Typ geordnet." + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" +"Liste der Objekte, die nicht migriert werden konnten, nach Typ geordnet." + +msgid "Locality" +msgstr "Ort" + +msgid "Location" +msgstr "Ort" + +msgid "Location of the ACI" +msgstr "Ort der ACI" + +msgid "Lockout duration" +msgstr "Sperrdauer" + +msgid "Logged In As" +msgstr "Angemeldet als" + +msgid "Login shell" +msgstr "Anmeldeshell" + +msgid "MAC address" +msgstr "MAC-Adresse" + +msgid "MS-PAC" +msgstr "MS-PAC" + +msgid "Mailing Address" +msgstr "Anschrift" + +msgid "Manage password policy for specific group" +msgstr "Passwortregel für eine bestimmte Gruppe bearbeiten" + +msgid "Manager" +msgstr "Manager" + +msgid "Map" +msgstr "Karte" + +msgid "Mark the token as disabled (default: false)" +msgstr "Token als deaktiviert markieren (Standard: false)" + +msgid "Master file" +msgstr "Masterdatei" + +msgid "Matched" +msgstr "Gefunden" + +msgid "Matched rules" +msgstr "Zutreffende Regeln" + +msgid "Max failures" +msgstr "Maximale Fehler" + +msgid "Max lifetime (days)" +msgstr "Max Dauer (Tage)" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "Maximale Zeit in Sekunden für eine Suche (>0 oder -1 für unbegrenzt)" + +msgid "Maximum number of entries returned" +msgstr "Maximale Anzahl der zurückgegebenen Einträge" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "Maximale Anzahl an Ergebnissen für Suche (-1 ist unbegrenzt)" + +msgid "Maximum password lifetime (in days)" +msgstr "Maximale Passwortlebensdauer (in Tagen)" + +msgid "Maximum username length" +msgstr "Maximale Länge des Benutzernamens" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "Maximaler Wert ist ${value}" + +msgid "May not be empty" +msgstr "Darf nicht leer sein" + +msgid "Member HBAC service" +msgstr "Mitglieds-HBAC-Dienst" + +msgid "Member HBAC service groups" +msgstr "Mitglieds-HBAC-Servicegruppen" + +msgid "Member Host" +msgstr "Mitglieds-Host" + +msgid "Member groups" +msgstr "Mitglieds-Gruppen" + +msgid "Member host-groups" +msgstr "Mitglieds-Hostgruppen" + +msgid "Member hosts" +msgstr "Mitglieds-Hosts" + +msgid "Member of" +msgstr "Mitglied von" + +msgid "Member of a group" +msgstr "Mitglied einer Gruppe" + +msgid "Member of groups" +msgstr "Mitglied der Gruppen" + +msgid "Member of host-groups" +msgstr "Mitglied von Host-Gruppen" + +msgid "Member service groups" +msgstr "Mitglieds-Dienstgruppen" + +msgid "Member services" +msgstr "Mitglieds-Dienste" + +msgid "Member users" +msgstr "Mitglieds-Benutzer" + +msgid "Members that could not be added" +msgstr "Mitglieder, die nicht hinzugefügt werden konnten" + +msgid "Members that could not be removed" +msgstr "Mitglieder, die nicht entfernt werden konnten" + +msgid "Min length" +msgstr "Min Länge" + +msgid "Min lifetime (hours)" +msgstr "Min Dauer (Stunden)" + +msgid "Minimum length of password" +msgstr "Minimale Passwortlänge" + +msgid "Minimum number of character classes" +msgstr "Minimale Anzahl an Zeichenklassen" + +msgid "Minimum password lifetime (in hours)" +msgstr "Minimale Passwortlebensdauer (in Stunden)" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "Minimaler Wert ist ${value}" + +msgid "Misc. Information" +msgstr "Weitere Informationen" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "Fehlende oder ungültige HTTP-Referenz, %(referer)s" + +msgid "Missing values: " +msgstr "Fehlende Werte:" + +msgid "Mobile Telephone Number" +msgstr "Mobiltelefonnummer" + +msgid "Model" +msgstr "Modell" + +msgid "Modified" +msgstr "Geändert" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "ACI geändert \"%(value)s\"" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "CA ACL \"%(value)s\" geändert" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "HBAC-Regel \"%(value)s\" geändert" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "HBAC Dienst \"%(value)s\" geändert" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "HBAC-Dienstgruppe »%(value)s« geändert" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "OTP Token \"%(value)s\" geändert" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "Auto-Mitgliedschaftsregel \"%(value)s\" bearbeitet" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Gruppe »%(value)s« geändert" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "Host \"%(value)s\" geändert" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Hostgruppe \"%(value)s\" geändert" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "Rolle \"%(value)s\" geändert" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "Dienst »%(value)s« geändert" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "Vorbereiteten Benutzer »%(value)s« geändert" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Benutzer »%(value)s« geändert" msgid "Modified: key not set" msgstr "Geändert: Schlüssel nicht gesetzt" -msgid "Modified" -msgstr "Geändert" +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "Wert von %(name)s auf »%(value)s« ändern?" + +msgid "Modify OTP configuration options." +msgstr "OTP Konfigurationsoptionen bearbeiten." + +msgid "Modify Sudo Command." +msgstr "Sudo-Befehl ändern." + +msgid "Modify a CA ACL." +msgstr "CA ACL ändern" + +msgid "Modify a OTP token." +msgstr "OTP Token bearbeiten" + +msgid "Modify a group password policy." +msgstr "Gruppen-Passwortregel bearbeiten." + +msgid "Modify a group." +msgstr "Eine Gruppe ändern." + +msgid "Modify a hostgroup." +msgstr "Hostgruppe ändern." + +msgid "Modify a role." +msgstr "Rolle ändern." + +msgid "Modify a stage user." +msgstr "Einen vorbereiteten Benutzer ändern." + +msgid "Modify a user." +msgstr "Einen Benutzer bearbeiten." + +msgid "Modify an HBAC rule." +msgstr "HBAC-Regel ändern" + +msgid "Modify an HBAC service group." +msgstr "HBAC-Dienstgruppe bearbeiten" + +msgid "Modify an HBAC service." +msgstr "HBAC Dienst ändern" + +msgid "Modify an existing IPA service." +msgstr "Einen existierenden IPA-Dienst bearbeiten." + +msgid "Modify configuration options." +msgstr "Konfigurationsoptionen bearbeiten." + +msgid "Modify information about a host." +msgstr "Hostinformationen ändern." + +msgid "Mount information" +msgstr "Einhänge-Informationen" + +msgid "Mount point" +msgstr "Einhängepunkt" + +msgid "Move deleted user into staged area" +msgstr "Gelöschten Benutzer in vorbereitete Benutzer verschieben" + +msgid "Must be an integer" +msgstr "Muss eine Ganzzahl sein" + +msgid "Name of command to export" +msgstr "Name des zu exportierenden Befehls" + +msgid "Name of host-group" +msgstr "Name der Hostgruppe" + +msgid "Name of method to export" +msgstr "Name des zu exportierenden Methode" + +msgid "Name of object to export" +msgstr "Name des zu exportierenden Objekts" + +msgid "Network Services" +msgstr "Netzwerkdienste" + +msgid "New ACI name" +msgstr "Neuer ACI-Name" + +msgid "New Certificate" +msgstr "Neues Zertifikat" + +msgid "New Password" +msgstr "Neues Passwort" + +msgid "New Principal Password" +msgstr "Neues Principal-Passwort" + +msgid "New Test" +msgstr "Neuer Test" + +msgid "New password is required" +msgstr "Neues Passwort wird benötigt" msgid "New: key not set" msgstr "Neu: Schlüssel nicht gesetzt" @@ -22150,1144 +2626,66 @@ msgstr "Neu: Schlüssel nicht gesetzt" msgid "New: key set" msgstr "Neu: Schlüssel gesetzt" -#, fuzzy -msgid "Add password policy" -msgstr "Passwortregel" - -msgid "Password Policy" -msgstr "Passwort-Regeln" - -#, fuzzy -msgid "Remove password policies" -msgstr "Passwortregeln" - -#, fuzzy -msgid "Add ID range" -msgstr "Mehrere hinzufügen" - -#, fuzzy -msgid "Range Settings" -msgstr "Einstellungen" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -#, fuzzy -msgid "Domain SID" -msgstr "Domain" - -msgid "Secondary RID base" -msgstr "" - -msgid "Remove ID ranges" -msgstr "" - -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -msgid "Detect" -msgstr "" - -#, fuzzy -msgid "Local domain" -msgstr "Ort" - -#, fuzzy -msgid "IPA trust" -msgstr "Vertrauensstellung" - -msgid "Active Directory winsync" -msgstr "" - -#, fuzzy -msgid "Add RADIUS server" -msgstr "Radius Server" - -#, fuzzy -msgid "RADIUS Proxy Server Settings" -msgstr "Radius Server" - -#, fuzzy -msgid "Remove RADIUS servers" -msgstr "Radius Server" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -msgid "Force Update" -msgstr "Update erzwingen" - -#, fuzzy -msgid "Add SELinux user map" -msgstr "Vorgegebener SELinux-Benutzer" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Server Roles" -msgstr "Servername" - -#, fuzzy -msgid "Server Role" -msgstr "Servername" - -msgid "Warning: Consider service replication" -msgstr "" +msgid "Next" +msgstr "Nächste" +#, python-format msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." msgstr "" +"Keine DNS Server in der IPA Lokation %(location)s. Ohne DNS Servers arbeitet " +"die Lokation nicht wie erwartet." -#, fuzzy -msgid "Delete Server" -msgstr "Einen Benutzer löschen" +msgid "No Valid Certificate" +msgstr "Kein gültiges Zertifikat" -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" +msgid "No credentials cache found" +msgstr "Keine Anmeldeinformationen-Cache gefunden" -#, fuzzy -msgid "Add service" -msgstr "HBAC-Dienst" +msgid "No entries." +msgstr "Keine Einträge." -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" +msgid "No file to read" +msgstr "Keine Datei zum Lesen" -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "KDC akzeptiert keine Schlüssel\n" -#, fuzzy -msgid "Service Certificate" -msgstr "Neues Zertifikat" +msgid "No matching entries found" +msgstr "Keine passenden Einträge gefunden" -msgid "Service Settings" -msgstr "Diensteinstellungen" +msgid "No option to delete specific record provided." +msgstr "Keine Option zum Löschen des spezifischen Datensatzes angegeben." -msgid "Provisioning" -msgstr "Provisioning" - -#, fuzzy -msgid "Remove services" -msgstr "Mitglieds-Dienste" - -#, fuzzy, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "Berechtigungen von Rolle entfernen." - -#, fuzzy, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "Hosts entfernen, die diesen Dienst verwalten können." - -#, fuzzy -msgid "Are you sure you want to unprovision this service?" -msgstr "" -"SInd Sie sicher, dass Sie die ausgewählten Benutzer wiederherstellen wollen?" - -#, fuzzy -msgid "Unprovisioning service" -msgstr "Provisioning" - -#, fuzzy -msgid "Service unprovisioned" -msgstr "Dienst-Principal" - -#, fuzzy -msgid "Kerberos Key Present, Service Provisioned" -msgstr "Kerberos-Schlüssel nicht vorhanden" - -msgid "SSH public keys" -msgstr "Öffentlicher SSH Schlüssel" - -msgid "SSH public key:" -msgstr "Öffentliche SSH Schlüssel" - -msgid "Set SSH key" -msgstr "SSH Schlüssel speichern" - -msgid "Are you sure you want to activate selected users?" -msgstr "SInd Sie sicher, dass Sie die ausgewählten Benutzer aktivieren wollen?" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "SInd Sie sicher, dass Sie ${object} deaktivieren wollen?" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "${count} Benutzer aktiviert" - -#, fuzzy -msgid "Add stage user" -msgstr "Vorbereiteter Benutzer" - -msgid "Stage users" -msgstr "Vorbereitete Benutzer" - -msgid "Preserved users" -msgstr "Aufbewahrte Benutzer" - -#, fuzzy -msgid "Remove preserved users" -msgstr "Aufbewahrte Benutzer" - -#, fuzzy -msgid "Remove stage users" -msgstr "Vorbereitete Benutzer" - -#, fuzzy -msgid "Are you sure you want to stage selected users?" -msgstr "" -"SInd Sie sicher, dass Sie die ausgewählten Benutzer wiederherstellen wollen?" - -#, fuzzy, python-brace-format -msgid "${count} users(s) staged" -msgstr "${count} user(s) wiederhergestellt" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "SInd Sie sicher, dass Sie ${object} deaktivieren wollen?" - -msgid "Are you sure you want to restore selected users?" -msgstr "" -"SInd Sie sicher, dass Sie die ausgewählten Benutzer wiederherstellen wollen?" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "SInd Sie sicher, dass Sie ${object} löschen wollen?" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "${count} user(s) wiederhergestellt" - -msgid "User categories" -msgstr "Benutzerkategorien" - -#, fuzzy -msgid "Add subid" -msgstr "Sudo-Regel" - -msgid "Assigned subids" -msgstr "" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -#, fuzzy -msgid "Add sudo command" -msgstr "Sudo-Befehl" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -#, fuzzy -msgid "Remove sudo commands" -msgstr "Sudo-Befehle" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -#, fuzzy -msgid "Add sudo command group" -msgstr "Sudo-Befehlsgruppe" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove sudo command groups" -msgstr "Sudo-Befehlsgruppen" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add sudo rule" -msgstr "Sudo-Regel" - -#, fuzzy -msgid "Add sudo option" -msgstr "Sudo-Option" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "Erlauben" - -msgid "Any Command" -msgstr "Jeder Befehl" - -msgid "Any Group" -msgstr "Jede Gruppe" - -msgid "Run Commands" -msgstr "Befehle ausführen" - -msgid "Deny" -msgstr "Verweigern" - -msgid "Access this host" -msgstr "Zugriff auf diesen Host" - -msgid "Option added" -msgstr "Optionen hinzugefügt" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "${count} Option(en) entfernt" - -#, fuzzy -msgid "Remove sudo rules" -msgstr "Sudo-Regeln" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "Als Wer" - -msgid "Specified Commands and Groups" -msgstr "Spezifische Befehle und Gruppen" - -msgid "Specified Groups" -msgstr "Spezifische Gruppe" - -#, fuzzy -msgid "Remove sudo options" -msgstr "Sudo-Option" - -#, fuzzy -msgid "Autogenerated" -msgstr "Auto-Mitgliedschaft" - -msgid "Segment details" -msgstr "Segment Details" - -msgid "Replication configuration" -msgstr "Replikationseinstellungen" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove IPA locations" -msgstr "Automount-Orte" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -msgid "Account" -msgstr "Konto" - -#, fuzzy -msgid "Add trust" -msgstr "Vertrauensstellung" - -msgid "Administrative account" -msgstr "Administratives Konto" - -msgid "SID blocklists" -msgstr "" - -msgid "Trust Settings" -msgstr "Vertrauenseinstellungen" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -#, fuzzy -msgid "Pre-shared password" -msgstr "Passwort ändern" - -#, fuzzy -msgid "Remove trusts" -msgstr "Vertrauensstellungen" - -msgid "Remove domains" -msgstr "" - -#, fuzzy -msgid "Alternative UPN suffixes" -msgstr "UPN Suffixe" - -#, fuzzy -msgid "User attributes for SMB services" -msgstr "Nach HBAC-Diensten suchen." - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -#, fuzzy -msgid "Drive to mount a home directory" -msgstr "Vorgegebener Ort für Home-Verzeichnisse" - -msgid "Account Settings" -msgstr "Kontoeinstellungen" - -msgid "Account Status" -msgstr "Kontostatus" - -msgid "Active users" -msgstr "Aktive Benutzer" - -#, fuzzy -msgid "Add user" -msgstr "Einen neuen Benutzer hinzufügen." - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "Dienste zu einer HBAC-Gruppe hinzufügen." - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -msgid "Auto assign subordinate ids" -msgstr "" - -#, fuzzy, python-brace-format -#| msgid "Are you sure you want to unlock user ${object}?" -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "SInd Sie sicher, dass Sie den Benutzer ${object} entsperren möchten?" - -msgid "Contact Settings" -msgstr "Kontakteinstellungen" - -msgid "Delete mode" -msgstr "Lösch-Modus" - -msgid "Employee Information" -msgstr "Mitarbeiterinformationen" - -msgid "Error changing account status" -msgstr "Fehler beim Ändern des Kontostatus" - -msgid "Password expiration" -msgstr "Passwortablauf" - -msgid "Mailing Address" -msgstr "Anschrift" - -msgid "Misc. Information" -msgstr "Weitere Informationen" - -msgid "delete" -msgstr "löschen" - -msgid "preserve" -msgstr "aufbewahren" +msgid "No option to modify specific record provided." +msgstr "Keine Option zum Ändern des spezifischen Datensatzes angegeben." msgid "No private group" msgstr "Keine private Gruppe" -#, fuzzy -msgid "Remove users" -msgstr "Mitglieds-Benutzer" +msgid "No response" +msgstr "Keine Antwort" -#, fuzzy, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "Mitglieder aus einer Gruppe entfernen." +#, c-format +msgid "No values for %s" +msgstr "Keine Werte für %s" -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" +msgid "No wait" +msgstr "Keine Wartezeit" -#, fuzzy, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "Berechtigungen von Rolle entfernen." +msgid "Non-existent or invalid rules" +msgstr "Nicht-existente oder ungültige Regeln" -#, fuzzy, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." +msgid "Not After" +msgstr "Nicht nach" -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" +msgid "Not Before" +msgstr "Nicht vor" -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" -"Sind sie sicher, dass sie den Nutzer ${action} möchten?
Die Änderung " -"wird sofort aktiv." - -#, python-brace-format -msgid "Click to ${action}" -msgstr "Klicken um zu ${action}" - -msgid "Unlock" -msgstr "Entsperren" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "SInd Sie sicher, dass Sie den Benutzer ${object} entsperren möchten?" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -#, fuzzy -msgid "Members" -msgstr "Mitglieds-Host" - -msgid "My User Vaults" -msgstr "" - -#, fuzzy -msgid "Owners" -msgstr "Eigentümer" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Service Vaults" -msgstr "Dienste" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -#, fuzzy -msgid "Vault Type" -msgstr "Gruppentyp" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -#, fuzzy -msgid "User Vaults" -msgstr "Benutzergruppen" - -msgid "Current password is required" -msgstr "Aktuelles Passwort ist erforderlich" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "Ihr Passwort läuft in ${days} Tagen ab." - -msgid "First OTP" -msgstr "Erstes OTP" - -msgid "New password is required" -msgstr "Neues Passwort wird benötigt" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "Token-Synchronisierung fehlgeschlagen" - -msgid "The username, password or token codes are not correct" -msgstr "Benutzername, Passwort oder Einmalpasswort waren falsch." - -msgid "Token was synchronized" -msgstr "Token wurde synchronisiert" - -msgid "Password change complete" -msgstr "Passwortänderung abgeschlossen" - -#, fuzzy -msgid "Your password has expired. Please enter a new password." -msgstr "Ihr Passwort läuft in ${days} Tagen ab." - -msgid "Passwords must match" -msgstr "Passwörter müssen übereinstimmen" - -msgid "Password reset was not successful." -msgstr "Passwort konnte nicht zurückgesetzt werden" - -msgid "Reset your password." -msgstr "Passwort zurücksetzen." - -msgid "Second OTP" -msgstr "Zweites OTP" - -msgid "Verify Password" -msgstr "Passwort verifizieren" - -msgid "Are you sure you want to delete selected entries?" -msgstr "Sind Sie sicher, dass Sie die ausgewählten Einträge löschen wollen?" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "${count} Einträge gelöscht" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" -"Sind Sie sicher, dass Sie die ausgewählten Einträge deaktivieren wollen?" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "${count} Einträge deaktiviert" - -msgid "Are you sure you want to enable selected entries?" -msgstr "Sind Sie sicher, dass Sie die ausgewählten Einträge aktivieren wollen?" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "${count} Einträge aktiviert" - -msgid "Some entries were not deleted" -msgstr "Einige Einträge wurden nicht gelöscht" - -msgid "Quick Links" -msgstr "Schnell Links" - -msgid "Select All" -msgstr "Alle auswählen" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" -"Abfrage hat mehr Ergebnisse erzeugt als das konfigurierte Maximum. Zeige die " -"ersten ${counter} Ergebnisse." - -msgid "Unselect All" -msgstr "Alle abwählen" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "Arbeite" - -msgid "Audit" -msgstr "Audit" - -msgid "Authentication" -msgstr "Authentifizierung" - -msgid "Automount" -msgstr "Automount" - -msgid "DNS" -msgstr "DNS" - -#, fuzzy -msgid "Host-Based Access Control" -msgstr "HBAC Nutzung simulieren" - -msgid "Identity" -msgstr "Identität" - -msgid "Network Services" -msgstr "Netzwerkdienste" - -msgid "Policy" -msgstr "Regeln" - -msgid "Role-Based Access Control" -msgstr "" - -msgid "Subordinate IDs" -msgstr "" - -msgid "Sudo" -msgstr "Sudo" - -msgid "Topology" -msgstr "Topologie" - -msgid "True" -msgstr "Wahr" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -msgid "First" -msgstr "Erste" - -msgid "Last" -msgstr "Letzte" - -msgid "Next" -msgstr "Nächste" - -msgid "Page" -msgstr "Seite" - -msgid "Prev" -msgstr "Vorherige" - -msgid "Undo" -msgstr "Rückgängig" - -msgid "Undo this change." -msgstr "" - -msgid "Undo All" -msgstr "Alle Rückgängig" - -#, fuzzy -msgid "Undo all changes in this field." -msgstr "Alle Principals in diesem Realm entfernen" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -#, fuzzy -msgid "Must be a decimal number" -msgstr "muss eine Dezimalzahl sein" - -#, fuzzy -msgid "Format error" -msgstr "Lesefehler\n" - -msgid "Must be an integer" -msgstr "Muss eine Ganzzahl sein" +msgid "Not a managed group" +msgstr "Keine verwaltete Gruppe" msgid "Not a valid IP address" msgstr "Keine gültige IP-Adresse" @@ -23298,547 +2696,1839 @@ msgstr "Keine gültige IPv4-Adresse" msgid "Not a valid IPv6 address" msgstr "Keine gültige IPv6-Adresse" -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "Maximaler Wert ist ${value}" +msgid "Not allowed on non-leaf entry" +msgstr "Bei einem Nicht-Blatt-Eintrag nicht erlaubt" -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "Minimaler Wert ist ${value}" +msgid "Not matched rules" +msgstr "Nicht zutreffende Regeln" -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" +msgid "Not registered yet" +msgstr "Noch nicht registriert" -#, fuzzy -msgid "Parse error" -msgstr "Lesefehler\n" +msgid "Number of conditions added" +msgstr "Anzahl der hinzugefügten Bedingungen" -#, fuzzy -msgid "Must be a positive number" -msgstr "Muss eine Ganzzahl sein" +msgid "Number of conditions removed" +msgstr "Anzahl der entfernten Bedingungen" -#, fuzzy, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "%(port)s kein gültiger Port" +msgid "Number of days's notice of impending password expiration" +msgstr "Anzahl der Tage die vor einem Passwortablauf gewarnt wird" -#, fuzzy -msgid "Required field" -msgstr "Anfrage-ID" +msgid "Number of digits each token code will have" +msgstr "Zeichenanzahl die jeder Token-Code haben wird" -#, fuzzy -msgid "Unsupported value" -msgstr "nicht unterstützte Vetrauensstellung" +msgid "Number of entries returned" +msgstr "Anzahl der zurückgegebenen Einträge" -#, fuzzy -msgid "kerberos ticket policy settings" -msgstr "Kerberos-Ticket Richtlinien" +msgid "Number of members added" +msgstr "Zahl der hinzugefügten Mitglieder" -msgid "OTP max life" -msgstr "" +msgid "Number of members removed" +msgstr "Anzahl der entfernten Mitglieder" -msgid "OTP token maximum ticket life (seconds)" -msgstr "" +msgid "Number of plugins loaded" +msgstr "Anzahl der geladenen Plugins" -msgid "OTP max renew" -msgstr "" +msgid "Number of privileges added" +msgstr "Anzahl der hinzugefügten Berechtigungen" -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" +msgid "Number of privileges removed" +msgstr "Anzahl der entfernten Berechtigungen" -msgid "RADIUS max life" -msgstr "" +msgid "OK" +msgstr "OK" -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" +msgid "OTP" +msgstr "OTP" -#, fuzzy -msgid "RADIUS max renew" -msgstr "RADIUS-Proxy Benutzername" +msgid "OTP Configuration" +msgstr "OTP Konfiguration" -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" +msgid "OTP Token" +msgstr "OTP Token" -msgid "PKINIT max life" -msgstr "" +msgid "OTP Token Settings" +msgstr "OTP Token Einstellungen" -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" +msgid "OTP Tokens" +msgstr "OTP Token" -msgid "PKINIT max renew" -msgstr "" +msgid "OTP configuration options" +msgstr "OTP-Konfigurationsoptionen" -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" +msgid "OTP set" +msgstr "OTP gesetzt" -msgid "Hardened max life" -msgstr "" +msgid "OTP token" +msgstr "OTP Token" -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" +msgid "OTP tokens" +msgstr "OTP Tokens" -msgid "Hardened max renew" -msgstr "" +msgid "One Time Password" +msgstr "Einmalpasswort" -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" +msgid "One of group, permission or self is required" +msgstr "Eines von »group«, »permission« oder »self« wird benötigt" -#, fuzzy -msgid "IdP max life" -msgstr "Maximale Fehler" +msgid "One time password commands" +msgstr "Einmalpasswort Befehle" -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "" +msgid "Only one value is allowed" +msgstr "Nur ein Wert ist erlaubt" -#, fuzzy -msgid "IdP max renew" -msgstr "RADIUS-Proxy Benutzername" +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "Betriebssystem und Version des Hosts (z.B. Fedora 20)" -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "" +msgid "Operating system" +msgstr "Betriebssystem" -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" +msgid "Option added" +msgstr "Optionen hinzugefügt" -msgid "Default ticket policy could not be read" -msgstr "" +msgid "Options" +msgstr "Optionen" -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" +msgid "Order" +msgstr "Reihenfolge" -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" +msgid "Org. Unit" +msgstr "Org. Einheit" -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" +msgid "Organization" +msgstr "Organisation" -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" +msgid "Organizational Unit" +msgstr "Organisationseinheit" -msgid "Migration of LDAP search reference is not supported." -msgstr "" +msgid "Other Record Types" +msgstr "Andere Datensatztypen" -msgid "Malformed DN" -msgstr "" +#, c-format +msgid "Out of Memory!\n" +msgstr "Nicht genügend Speicher!\n" -#, fuzzy, python-format -msgid "%(user)s is not a POSIX user" -msgstr "%(port)s kein gültiger Port" +msgid "Out of memory\n" +msgstr "Nicht genügend Speicher\n" -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" +#, c-format +msgid "Out of memory \n" +msgstr "Nicht genügend Speicher\n" -#, fuzzy -msgid "Invalid LDAP URI." -msgstr "LDAP-URI" +#, c-format +msgid "Out of memory!" +msgstr "Nicht genügend Speicher!" -#, python-format -msgid "%s to exclude from migration" -msgstr "" +msgid "Out of memory!?\n" +msgstr "Nicht genügend Speicher!?\n" -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" +msgid "Output filename" +msgstr "Name der Ausgabedatei" -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" +msgid "Output only on errors" +msgstr "Ausgabe nur bei Fehlern" -#, fuzzy -msgid "Default group for new users not found" -msgstr "Vorgegebene Gruppe für neue Benutzer" +msgid "Override inherited settings" +msgstr "Vererbte Einstellungen überschreiben" -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" +msgid "Owner" +msgstr "Eigentümer" -msgid "Class of Service object used for linking policies with groups" -msgstr "" +msgid "PAD" +msgstr "PAD" -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" +msgid "PKINIT" +msgstr "PKINIT" -msgid "Add Class of Service entry" -msgstr "" +msgid "POSIX" +msgstr "POSIX" -#, fuzzy -msgid "Delete Class of Service entry" -msgstr "Einen IPA-Dienst entfernen." +msgid "Page" +msgstr "Seite" -#, fuzzy -msgid "Modify Class of Service entry" -msgstr "HBAC-Dienstgruppe bearbeiten" +msgid "Pager Number" +msgstr "Pagernummer" -msgid "Display Class of Service entry" -msgstr "" +msgid "Password" +msgstr "Passwort" -#, fuzzy -msgid "Search for Class of Service entry" -msgstr "Suche nach HBAC Dienstgruppe" - -msgid "password policy" -msgstr "Passwortregel" - -msgid "password policies" -msgstr "Passwortregeln" +msgid "Password Expiration Notification (days)" +msgstr "Benachrichtigung über den Passwortablauf (Tage)" msgid "Password Policies" msgstr "Passwortregeln" -msgid "Max repeat" -msgstr "" +msgid "Password Policy" +msgstr "Passwort-Regeln" -#, fuzzy -msgid "Maximum number of same consecutive characters" -msgstr "Maximale Anzahl der zurückgegebenen Einträge" +msgid "Password change complete" +msgstr "Passwortänderung abgeschlossen" -msgid "Max sequence" -msgstr "" +msgid "Password expiration" +msgstr "Passwortablauf" -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" +msgid "Password history size" +msgstr "Größe der Passworthistorie" -msgid "Dictionary check" -msgstr "" +msgid "Password plugin features" +msgstr "Passwort-Plugin-Funktionen" -msgid "Check if the password is a dictionary word" -msgstr "" +msgid "Password reset was not successful." +msgstr "Passwort konnte nicht zurückgesetzt werden" -#, fuzzy -msgid "User check" -msgstr "Benutzername" +msgid "Passwords do not match" +msgstr "Passwörter stimmen nicht überein" -msgid "Check if the password contains the username" -msgstr "" +msgid "Passwords do not match!" +msgstr "Passwörter stimmen nicht überein!" -msgid "Grace login limit" -msgstr "" +msgid "Passwords must match" +msgstr "Passwörter müssen übereinstimmen" -msgid "Number of LDAP authentications allowed after expiration" -msgstr "" +msgid "Period after which failure count will be reset (seconds)" +msgstr "Nach dieser Zeit wird der Fehlerzähler zurückgesetzt" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "Während dieser Zeit wird der Login gesperrt (Sekunden)" + +msgid "Permission" +msgstr "Berechtigung" + +msgid "Permission ACI grants access to" +msgstr "Berechtigungs-ACI erlaubt Zugriff auf" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "Zugriff verweigert: %(file)s" + +msgid "Permission name" +msgstr "Berechtigungsname" + +msgid "Permission value" +msgstr "Berechtigungswert" + +msgid "Permissions" +msgstr "Berechtigungen" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "Berechtigungen (read, write). Standard ist write" + +msgid "Platform" +msgstr "Plattform" + +msgid "Please try the following options:" +msgstr "Bitte versuchen Sie die folgenden Optionen:" + +msgid "Policy" +msgstr "Regeln" + +msgid "Port" +msgstr "Port" + +msgid "Positional arguments" +msgstr "Positionale Argumente" + +msgid "Preference" +msgstr "Bevorzugung" + +msgid "Preferred Language" +msgstr "Bevorzugte Sprache" msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" msgstr "" +"Präfix zur Unterscheidung der ACI-Typen (permission, delegation, " +"selfservice, none)" -#, fuzzy -#| msgid "Maximum password life must be greater than minimum." -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "Maximale Lebensdauer muss größer als das Minimum sein." +msgid "Preserved user" +msgstr "Aufbewahrter Benutzer" + +msgid "Preserved users" +msgstr "Aufbewahrte Benutzer" + +msgid "Prev" +msgstr "Vorherige" + +msgid "Primary key only" +msgstr "Nur primärer Schlüssel" + +msgid "Principal" +msgstr "Principal" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" +"Der Principal %(principal)s kann nicht authentifiziert werden: %(message)s" + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "Principal für dieses Zertifikat (z.B. HTTP/test.example.com)" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "Principal ist nicht in der Form user@REALM: '%(principal)s'" + +msgid "Principal name" +msgstr "Principal-Name" + +msgid "Print debugging information" +msgstr "Ausgabe von Debug-Informationen" + +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" +"Gibt die Einträge so aus, wie sie auf dem Server gespeichert sind. Dies " +"wirkt sich nur auf das Ausgabeformat aus." + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "Die rohe XML-RPC-Ausgabe im GSSAPI-Modus anzeigen" + +msgid "Priority" +msgstr "Priorität" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "Priorität der Regel (höhere Zahl meint niedrigere Priorität)" + +msgid "Profile ID" +msgstr "Profil-ID" + +msgid "Profile category" +msgstr "Profilkategorie" + +msgid "Profile category the ACL applies to" +msgstr "Profilkategorie auf die ACL angewendet wird" + +msgid "Profiles" +msgstr "Profile" + +msgid "Prompt to set the user password" +msgstr "Zum Setzen des Passworts auffordern" + +msgid "Provisioning" +msgstr "Provisioning" + +msgid "Query current Domain Level." +msgstr "Aktuelles Domain Level abfragen." + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" +"Abfrage hat mehr Ergebnisse erzeugt als das konfigurierte Maximum. Zeige die " +"ersten ${counter} Ergebnisse." + +msgid "Quick Links" +msgstr "Schnell Links" + +msgid "Quiet mode. Only errors are displayed." +msgstr "Stiller Modus. Nur Fehler werden ausgegeben." + +msgid "RADIUS Servers" +msgstr "Radius Server" + +msgid "RADIUS proxy configuration" +msgstr "RADIUS-Proxy Konfiguration" + +msgid "RADIUS proxy username" +msgstr "RADIUS-Proxy Benutzername" + +msgid "Random password" +msgstr "Zufälliges Passwort" + +msgid "Realm name" +msgstr "Realm-Name" + +msgid "Reason" +msgstr "Grund" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "Grund für den Widerruf des Zertifikats (0-10)" + +msgid "Rebuild auto membership" +msgstr "Auto-Mitgliedschaft neu erstellen" + +msgid "Rebuild auto membership." +msgstr "Auto-Mitgliedschaft neu erstellen" + +msgid "Rebuild membership for all members of a grouping" +msgstr "" +"Auto-Mitgliedschaft für alle Mitglieder einer Gruppierung neu erstellen" + +msgid "Rebuild membership for specified hosts" +msgstr "Auto-Mitgliedschaft für ausgewählte Hosts neu erstellen" + +msgid "Rebuild membership for specified users" +msgstr "Auto-Mitgliedschaft für ausgewählte Benutzer neu erstellen" + +msgid "Record name" +msgstr "Datensatzname" + +msgid "Record not found." +msgstr "Datensatz nicht gefunden." + +msgid "Record type" +msgstr "Datensatztyp" + +msgid "Records" +msgstr "Datensätze" + +msgid "Redirection" +msgstr "Umleitung" + +msgid "Refresh" +msgstr "Neu laden" + +msgid "Refresh the page." +msgstr "Seite neu laden." + +msgid "Regular Expression" +msgstr "Regulärer Ausdruck" + +msgid "Reload the browser." +msgstr "Browser neu laden." + +msgid "Remove a manager to the user entry" +msgstr "Manager vom Benutzer entfernen" + +msgid "Remove all principals in this realm" +msgstr "Alle Principals in diesem Realm entfernen" + +msgid "Remove entries from DNS" +msgstr "DNS Einträge löschen" + +msgid "Remove hosts that can manage this host." +msgstr "Hosts entfernen die diesen Host verwalten dürfen." + +msgid "Remove hosts that can manage this service." +msgstr "Hosts entfernen, die diesen Dienst verwalten können." + +msgid "Remove members from a group." +msgstr "Mitglieder aus einer Gruppe entfernen." + +msgid "Remove members from a hostgroup." +msgstr "Mitglieder von Hostgruppe entfernen." + +msgid "Remove members from a role." +msgstr "Mitglieder von Rolle entfernen." + +msgid "Remove members from an HBAC service group." +msgstr "Mitglieder von einer HBAC-Dienstgruppe entfernen." + +msgid "Remove privileges from a role." +msgstr "Berechtigungen von Rolle entfernen." + +msgid "Remove service and service groups from an HBAC rule." +msgstr "Dienste von einer HBAC-Gruppe entfernen." + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "Ziel-Hosts und Hostgruppen von einer HBAC-Regel entfernen." + +msgid "Remove users and groups from an HBAC rule." +msgstr "Benutzer und Gruppen von einer HBAC-Regel entfernen." + +msgid "Remove users that can manage this token." +msgstr "Nutzer entfernen die diesen Token verwalten können" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "Bedingung(en) von \"%(value)s\" entfernt" + +#, c-format +msgid "Removing principal %s\n" +msgstr "Principal %s wird entfernt\n" + +msgid "Rename" +msgstr "Umbenennen" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "Das %(ldap_obj_name)s-Objekt umbenennen" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "ACI umbenannt zu \"%(value)s\"" + +msgid "Replacement" +msgstr "Ersetzung" + +msgid "Replication configuration" +msgstr "Replikationseinstellungen" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "Anfrage mit Status %(status)s fehlgeschlagen: %(reason)s" + +msgid "Request id" +msgstr "Anfrage-ID" + +msgid "Request status" +msgstr "Anfragestatus" + +msgid "Reset" +msgstr "Zurücksetzen" + +msgid "Reset OTP" +msgstr "OTP zurücksetzen" + +msgid "Reset Password" +msgstr "Passwort zurücksetzen" + +msgid "Reset your password." +msgstr "Passwort zurücksetzen." + +msgid "Restore" +msgstr "Wiederherstellen" + +msgid "Result of simulation" +msgstr "Ergebnis der Simulation" + +msgid "Results are truncated, try a more specific search" +msgstr "" +"Ergebnisse wurden abgeschnitten, versuchen Sie eine spezifischere Suche." + +msgid "Retrieve an existing certificate." +msgstr "Ein existierendes Zertifikat holen." + +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "" +"Ermittelt alle Attribute des Servers und gibt diese aus. Dies wirkt sich auf " +"die Befehlsausgabe aus." + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "Abruf der Zertifikatkette fehlgeschlagen: %s" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "Abfrage des CA-Status fehlgeschlagen: %s" + +msgid "Retry" +msgstr "Erneut versuchen" + +msgid "Return to the main page and retry the operation" +msgstr "Zur Hauptseite zurückkehren und Vorgang wiederholen" + +msgid "Revert" +msgstr "Rückgängig" + +msgid "Revocation reason" +msgstr "Grund des Widerrufs" + +msgid "Revoke" +msgstr "Widerrufen" + +msgid "Revoke a certificate." +msgstr "Ein Zertifikat widerrufen." + +msgid "Revoked" +msgstr "Widerrufen" + +msgid "Rights" +msgstr "Rechte" + +msgid "Role" +msgstr "Rolle" + +msgid "Role name" +msgstr "Rollenname" + +msgid "Roles" +msgstr "Rollen" + +msgid "Rule name" +msgstr "Regelname" + +msgid "Rule status" +msgstr "Regelstatus" + +msgid "Rule type" +msgstr "Regeltyp" + +msgid "Rule type (allow)" +msgstr "Regeltyp (erlauben)" + +msgid "Rules" +msgstr "Regeln" + +msgid "Run Commands" +msgstr "Befehle ausführen" + +msgid "Run Test" +msgstr "Test Starten" + +msgid "SELinux Options" +msgstr "SELinux-Optionen" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "SELinux Benutzer '%(user)s' ist ungültig: %(error)s" + +msgid "SHA1 Fingerprint" +msgstr "SHA1-Fingerabdruck" + +msgid "SID" +msgstr "SID" + +msgid "SSH public key" +msgstr "Öffentlicher SSH Schlüssel" + +msgid "SSH public key fingerprint" +msgstr "Fingerabdruck des öffentlichen SSH-Schlüssels" + +msgid "SSH public key:" +msgstr "Öffentliche SSH Schlüssel" + +msgid "SSH public keys" +msgstr "Öffentlicher SSH Schlüssel" + +#, python-format +msgid "Same as --%s" +msgstr "Das gleiche wie --%s" + +msgid "Save" +msgstr "Speichern" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "Schema ist aktuell (FP '%(fingerprint)s', TTL %(ttl)s s)" + +msgid "Search" +msgstr "Suchen" + +msgid "Search Options" +msgstr "Suchoptionen" + +msgid "Search for DNS resources." +msgstr "Nach DNS-Ressourcen suchen." + +msgid "Search for HBAC rules." +msgstr "Nach HBAC-Regeln suchen." + +msgid "Search for HBAC services." +msgstr "Nach HBAC-Diensten suchen." + +msgid "Search for IPA services." +msgstr "Nach IPA-Diensten suchen." + +msgid "Search for OTP token." +msgstr "OTP Token suchen." + +msgid "Search for Sudo Commands." +msgstr "Nach Sudo-Befehlen suchen." + +msgid "Search for Sudo Rule." +msgstr "Nach Sudo-Regel suchen." + +msgid "Search for an HBAC service group." +msgstr "Suche nach HBAC Dienstgruppe" + +msgid "Search for an automount location." +msgstr "Automount-Ort suchen." + +msgid "Search for group password policies." +msgstr "Suche nach Gruppen-Passwortregeln" + +msgid "Search for groups." +msgstr "Nach Gruppen suchen." + +msgid "Search for hostgroups." +msgstr "Nach Hostgruppen suchen." + +msgid "Search for hosts." +msgstr "Nach Hosts suchen." + +msgid "Search for roles." +msgstr "Nach Rollen suchen." + +msgid "Search for stage users." +msgstr "Nach vorbereiteten Benutzern suchen." + +msgid "Search for users." +msgstr "Nach Benutzern suchen." + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "Das Suchergebnis wurde gekürzt: %(reason)s" + +msgid "Search size limit" +msgstr "Größenlimit für Suche" + +msgid "Search time limit" +msgstr "Zeitlimit für Suche" + +msgid "Second Code" +msgstr "Zweiter Code" + +msgid "Second OTP" +msgstr "Zweites OTP" + +msgid "Segment details" +msgstr "Segment Details" + +msgid "Select All" +msgstr "Alle auswählen" + +msgid "Select entries to be removed." +msgstr "Einträge zum löschen auswählen." + +msgid "Self" +msgstr "Selbst" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" +"Semantik von %(label)s wurde geändert. %(current_behavior)s\n" +"%(hint)s" + +msgid "Serial" +msgstr "Seriennummer" + +msgid "Serial Number" +msgstr "Seriennummer" + +msgid "Serial Number (hex)" +msgstr "Seriennummer (hex)" + +msgid "Serial number" +msgstr "Seriennummer" + +msgid "Serial number (hex)" +msgstr "Seriennummer (hex)" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" +"Seriennummer in Dezimalschreibweise oder (bei Präfix 0x) in " +"Hexadezimalschreibweise" + +msgid "Server" +msgstr "Server" + +msgid "Server Name" +msgstr "Servername" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "Der Server hat keine Informationen über die Domäne '%(domain)s'" + +msgid "Server name" +msgstr "Servername" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "Entfernen des Servers abgebrochen: %(reason)s." + +msgid "Service" +msgstr "Dienst" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "Service '%(service)s' in Kerberos-Datenbank nicht gefunden" + +msgid "Service Groups" +msgstr "Dienstgruppen" + +msgid "Service Settings" +msgstr "Diensteinstellungen" + +msgid "Service category" +msgstr "Dienstkategorie" + +msgid "Service category the ACL applies to" +msgstr "Dienstkategorie auf die ACL angewendet wird" + +msgid "Service group name" +msgstr "Dienstgruppenname" + +msgid "Service name" +msgstr "Dienstname" + +msgid "Service principal" +msgstr "Dienst-Principal" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "Dienst-Principal für dieses Zertifikat (z.B. HTTP/test.example.com)" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" +"Principal des Dienstes folgt nicht der Form »Dienst/voll ausgeschriebener " +"Hostname«: %(reason)s" + +msgid "Services" +msgstr "Dienste" + +msgid "Session error" +msgstr "Sitzungsfehler" + +msgid "Set" +msgstr "Setzen" + +msgid "Set OTP" +msgstr "OTP setzen" + +msgid "Set SSH key" +msgstr "SSH Schlüssel speichern" + +msgid "Set a user's password." +msgstr "Passwort für einen Benutzer setzen." + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" +"Ein Attribut für ein Attribut-Wert-Paar setzen. Das Format ist " +"Attribut=Wert.\n" +"Bei Attributen mit mehreren Werten ersetzt der Befehl die bereits " +"vorhandenen Werte." + +msgid "Settings" +msgstr "Einstellungen" + +msgid "Show QR code" +msgstr "QR Code zeigen" + +msgid "Show Results" +msgstr "Ergebnisse anzeigen" + +msgid "Show all loaded plugins." +msgstr "Alle geladenen Plugins anzeigen." + +msgid "Show configuration uri" +msgstr "Konfigurations-URL zeigen" + +msgid "Show details" +msgstr "Details anzeigen" + +msgid "Show environment variables." +msgstr "Umgebungsvariablen anzeigen." + +msgid "Show the current OTP configuration." +msgstr "Aktuelle OTP Konfiguration anzeigen" + +msgid "Show the current configuration." +msgstr "Die aktuelle Konfiguration anzeigen." + +msgid "Show/Set key" +msgstr "Zeige/Setze Schlüssel" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "Zeige ${start} bis ${end} von ${total} Einträgen." + +msgid "Simulate use of Host-based access controls" +msgstr "HBAC Nutzung simulieren" + +msgid "Size" +msgstr "Größe" + +msgid "Size Limit" +msgstr "Größenbeschränkung" + +msgid "Some entries were not deleted" +msgstr "Einige Einträge wurden nicht gelöscht" + +msgid "Specified Commands and Groups" +msgstr "Spezifische Befehle und Gruppen" + +msgid "Specified Groups" +msgstr "Spezifische Gruppe" + +msgid "Specified Hosts and Groups" +msgstr "Spezifische Hosts und Gruppen" + +msgid "Specified Services and Groups" +msgstr "Spezifische Dienste und Gruppen" + +msgid "Specified Users and Groups" +msgstr "Spezifische Benutzer und Gruppen" + +msgid "Stage" +msgstr "Vorbereiten" + +msgid "Stage User" +msgstr "Vorbereiteter Benutzer" + +msgid "Stage Users" +msgstr "Vorbereitete Benutzer" + +#, python-format +msgid "Stage user %s activated" +msgstr "Vorbereiteten Benutzer %s aktiviert" + +msgid "Stage users" +msgstr "Vorbereitete Benutzer" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "Vorbereitetes Benutzerkonto \"%(value)s\"" + +msgid "State/Province" +msgstr "Staat/Bundesland" + +msgid "Status" +msgstr "Status" + +msgid "Street address" +msgstr "Straße" + +msgid "Structured" +msgstr "Strukturiert" + +msgid "Subject" +msgstr "Betreff" + +msgid "Submit a certificate signing request." +msgstr "Eine Signaturanfrage (CSR) senden." + +msgid "Subtree" +msgstr "Subtree" + +msgid "Subtree to apply ACI to" +msgstr "Subtree auf den ACI angewendet wird" + +msgid "Subtype" +msgstr "Untertyp" + +msgid "Success" +msgstr "Erfolgreich" + +msgid "Sudo" +msgstr "Sudo" + +msgid "Sudo Command" +msgstr "Sudo-Befehl" + +msgid "Sudo Command Group" +msgstr "Sudo-Befehlsgruppe" + +msgid "Sudo Command Groups" +msgstr "Sudo-Befehlsgruppen" + +msgid "Sudo Commands" +msgstr "Sudo-Befehle" + +msgid "Sudo Option" +msgstr "Sudo-Option" + +msgid "Sudo Rule" +msgstr "Sudo-Regel" + +msgid "Sudo Rules" +msgstr "Sudo-Regeln" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "Unterstützte Verschlüsselungstypen:\n" + +msgid "Sync OTP Token" +msgstr "OTP Token synchronisieren" + +msgid "Synchronize an OTP token." +msgstr "OTP Token synchronisieren." + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Syntaxfehler: %(error)s" + +msgid "TOTP Synchronization Window" +msgstr "TOTP Sychnronisierungsfenster" + +msgid "TOTP authentication Window" +msgstr "TOTP Authentifizierungsfenster" + +msgid "TOTP token / IPA server time difference" +msgstr "Differenz zwischen Token und Serverzeit" + +msgid "Target" +msgstr "Ziel" + +msgid "Target group" +msgstr "Ziel-Gruppe" + +msgid "Target host" +msgstr "Ziel-Host" + +msgid "Target your own entry (self)" +msgstr "Auf eigenen Eintrag anwenden (self)" + +msgid "Task DN" +msgstr "Aufgaben DN" + +#, python-format +msgid "Task DN = '%s'" +msgstr "Aufgaben DN = '%s'" + +msgid "Telephone Number" +msgstr "Telefonnummer" + +msgid "Test the ACI syntax but don't write anything" +msgstr "ACI-Syntax testen, aber nicht schreiben" + +msgid "Text Data" +msgstr "Textdaten" + +msgid "The IPA realm" +msgstr "Der IPA-Realm" + +msgid "The default users group cannot be removed" +msgstr "Die vorgegebene Benutzergruppe kann nicht entfernt werden" + +msgid "The group doesn't exist" +msgstr "Die Gruppe existiert nicht" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" +msgstr "" +"Der Wert von »primary_key« des Eintrags, z.B. »jdoe« für einen Benutzer" + +msgid "The principal for this request doesn't exist." +msgstr "Der Principal für diese Anfrage existiert nicht" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "Der Realm des Principals passt nicht zum Realm dieses IPA-Servers." + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" +"Das auf dem LDAP-Server verwendete Schema. Zulässige Werte sind RFC2307 und " +"RFC2307bis. Der Vorgabewert ist RFC2307bis." + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" +"Die Suchkriterien waren nicht spezifisch genug. 1 wurde erwartet, aber " +"%(found)d gefunden." + +msgid "The topic or command name." +msgstr "Das Thema oder der Befehlsname" + +msgid "The username, password or token codes are not correct" +msgstr "Benutzername, Passwort oder Einmalpasswort waren falsch." + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" +"Dieser Befehl erfordert die Existenz der \"editors\" Gruppe, diese wurde " +"jedoch nicht gefunden." + +msgid "This command requires root access" +msgstr "Dieser Befehl erfordert Root-Zugriff" + +msgid "This entry already exists" +msgstr "Dieser Eintrag existiert bereits" + +msgid "This entry cannot be enabled or disabled" +msgstr "Dieser Eintrag kann nicht aktiviert oder deaktiviert werden" + +msgid "This entry is already a member" +msgstr "Dieser Eintrag ist bereits ein Mitglied" + +msgid "This entry is already disabled" +msgstr "Dieser Eintrag ist bereits deaktiviert" + +msgid "This entry is already enabled" +msgstr "Dieser Eintrag ist bereits aktiviert" + +msgid "This entry is not a member" +msgstr "Dieser Eintrag ist kein Mitglied" + +msgid "This group already allows external members" +msgstr "Diese Gruppe erlaubt bereits externe Mitglieder" + +msgid "This group cannot be posix because it is external" +msgstr "Diese Gruppe kann nicht POSIX sein, weil sie extern ist" + +msgid "This is already a posix group" +msgstr "Dies ist bereits eine POSIX-Gruppe" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" +"Dies ist bereits eine POSIX-Gruppe, sie kann nicht zu einer externen " +"konvertiert werden" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" +"Diese Seite hat nicht gespeicherte Änderungen. Bitte Speichern oder " +"Rückgängig machen" + +msgid "Ticket expired" +msgstr "Ticket abgelaufen" + +msgid "Time Limit" +msgstr "Zeitbegrenzung" + +msgid "Time limit of search in seconds" +msgstr "Zeitbegrenzung für den Suchvorgang in Sekunden" + +msgid "Time now" +msgstr "Aktuelle Zeit" + +msgid "Time to live" +msgstr "Lebensdauer" + +msgid "Time-based (TOTP)" +msgstr "Zeitbasiert (TOTP)" + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" +"Zum Aufbau einer Vertrauensstellung mit einem Active Directory müssen " +"Domänenname und Realm des IPA Servers übereinstimmen" + +msgid "To get command help, use:" +msgstr "Um Hilfe zu Befehlen zu bekommen benutzen sie:" + +msgid "Token ID" +msgstr "Token ID" + +msgid "Token description (informational only)" +msgstr "Token Beschriebung (nur informativ)" + +msgid "Token hash algorithm" +msgstr "Token Hash-Algorithmus" + +msgid "Token model (informational only)" +msgstr "Token-Modell (nur informativ)" + +msgid "Token secret (Base32; default: random)" +msgstr "Token-Geheimis (Base32; Standard: zufällig)" + +msgid "Token serial (informational only)" +msgstr "Token-Seriennummer (nur informativ)" + +msgid "Token synchronization failed" +msgstr "Token-Synchronisierung fehlgeschlagen" + +msgid "Token vendor name (informational only)" +msgstr "Token-Hersteller (nur informativ)" + +msgid "Token was synchronized" +msgstr "Token wurde synchronisiert" + +msgid "Topic commands:" +msgstr "Thema-Befehle:" + +msgid "Topic or Command" +msgstr "Thema oder Befehl" + +msgid "Topology" +msgstr "Topologie" + +msgid "True" +msgstr "Wahr" + +msgid "True if not all results were returned" +msgstr "»True«, falls nicht alle Ergebnisse ausgegeben wurden" + +msgid "True means the operation was successful" +msgstr "»True« bedeutet, dass die Operation erfolgreich abgeschlossen wurde." + +msgid "Trust" +msgstr "Vertrauensstellung" + +msgid "Trust Settings" +msgstr "Vertrauenseinstellungen" + +msgid "Two factor authentication (password + OTP)" +msgstr "Zwei-Faktor-Authentifizierung (Passwort + OTP)" + +msgid "Type" +msgstr "Typ" + +msgid "Type of the token" +msgstr "Token-Typ" + +msgid "Types of supported user authentication" +msgstr "Unterstützte Authentifizierungsmethoden" + +msgid "UID" +msgstr "UID" + +msgid "UPN suffixes" +msgstr "UPN Suffixe" + +msgid "URI" +msgstr "URI" + +msgid "URL" +msgstr "URL" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" +"Die private Gruppe konnte nicht erstellt werden. Eine Gruppe »%(group)s« " +"existiert bereits." + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "" +"Anmeldedaten-Zwischenspeicher für Kerberos konnte nicht erzeugt werden\n" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "ldap-Bibliothek konnte nicht initialisiert werden!\n" + +msgid "Undelete a delete user account." +msgstr "Gelöschten Benutzer wiederherstellen" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "Benutzerkonto \"%(value)s\" wiederhergestellt" + +msgid "Undo" +msgstr "Rückgängig" + +msgid "Undo All" +msgstr "Alle Rückgängig" + +msgid "Unique ID" +msgstr "Eindeutige ID" + +msgid "Unknown" +msgstr "Unbekannt" + +msgid "Unknown Error" +msgstr "Unbekannter Fehler" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "Unbekannte Option: %(option)s" + +msgid "Unlock" +msgstr "Entsperren" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "Konto »%(value)s« wurde entsperrt" + +msgid "Unrevoked" +msgstr "Nicht widerrufen" + +msgid "Unsaved Changes" +msgstr "Ungespeicherte Änderungen" + +msgid "Unselect All" +msgstr "Alle abwählen" + +msgid "Unspecified" +msgstr "Nicht angegeben" + +msgid "Update" +msgstr "Speichern" + +msgid "Update DNS entries" +msgstr "DNS Einträge aktualisieren" + +msgid "User" +msgstr "Benutzer" + +msgid "User Group" +msgstr "Benutzergruppe" + +msgid "User Groups" +msgstr "Benutzergruppen" + +msgid "User ID" +msgstr "Benutzer-ID" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" +"Benutzer-ID (wird durch das System zugewiesen, falls diese nicht angegeben " +"wird)" + +msgid "User Options" +msgstr "Benutzeroptionen" + +msgid "User authentication types" +msgstr "Authentifizierungsmethoden" + +msgid "User categories" +msgstr "Benutzerkategorien" + +msgid "User category" +msgstr "Benutzerkategorie" + +msgid "User category the ACL applies to" +msgstr "Benutzerkategorie auf die ACL angewendet wird" + +msgid "User category the rule applies to" +msgstr "Benutzerkategorie, auf welche die Regel angewendet werden soll" + +msgid "User group" +msgstr "Benutzer-Gruppe" + +msgid "User group ACI grants access to" +msgstr "Benutzergruppen-ACI erlaubt Zugriff auf" + +msgid "User login" +msgstr "Anmeldename" + +msgid "User name" +msgstr "Benutzername" + +msgid "User password" +msgstr "Benutzerpasswort" + +msgid "User search fields" +msgstr "Benutzer Suchfelder" + +msgid "User to override" +msgstr "Benutzer zum Überschreiben" + +msgid "User-friendly description of action performed" +msgstr "Benutzerfreundliche Beschreibung der ausgeführten Aktion" + +msgid "Username" +msgstr "Benutzername" + +msgid "Users" +msgstr "Benutzer" + +msgid "Users allowed to create keytab" +msgstr "Benutzer die Schlüsseltabelle erstellen dürfen" + +msgid "Users allowed to retrieve keytab" +msgstr "Benutzer die Schlüsseltabelle abrufen dürfen" + +msgid "Validation error" +msgstr "Überprüfungsfehler" + +msgid "Validity" +msgstr "Gültigkeit" + +msgid "Validity end" +msgstr "Gültig bis" + +msgid "Validity start" +msgstr "Gültig ab" + +msgid "Vendor" +msgstr "Hersteller" + +msgid "Verify Password" +msgstr "Passwort verifizieren" + +msgid "Verify Principal Password" +msgstr "Principal-Passwort bestätigen" + +msgid "Vertical Precision" +msgstr "Vertikale Genauigkeit" + +msgid "Via Service" +msgstr "Mit Dienst" + +msgid "View" +msgstr "Ansicht" + +msgid "Warning" +msgstr "Warnung" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "Warnung: Typ konnte nicht umgewandelt werden (#%d)\n" + +msgid "Weight" +msgstr "Gewicht" + +msgid "Who" +msgstr "Wer" + +msgid "Working" +msgstr "Arbeite" + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" +"Sie können FreeOTP als " +"Softwaretoken einsetzen." + +msgid "You must enroll a host in order to create a host service" +msgstr "" +"Sie müssen einen Host registrieren, bevor Sie einen Dienst für diesen Host " +"anlegen können." + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "Ihr Passwort läuft in ${days} Tagen ab." + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" +"Die Vertrauensstellung zu %(domain)s ist beschädigt. Bitte erneuern Sie sie " +"durch erneuten Aufruf von 'ipa trust-add'." + +msgid "ZIP" +msgstr "Postleitzahl" + +msgid "Zone name" +msgstr "Zonenname" + +msgid "Zone name (FQDN)" +msgstr "Zonenname (FQDN)" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "Aktiver Benutzer mit Name \"%(user)s\" existiert bereits" + +msgid "an internal error has occurred" +msgstr "Ein interner Fehler ist aufgetreten" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "In interner Fehler ist auf dem Server '%(server)s' aufgetreten." + +msgid "any of the configured servers" +msgstr "einer der konfigurierten Server" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "Der Namensraum '%(name)s' existiert in der API nicht" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "Mindestens eine der Optionen: type, users, hosts muss gesetzt sein" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" +"mindestens eines von »type«, »filter«, »subtree«, »targetgroup«, »attrs« " +"oder »memberof« wird benötigt" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "Attribut \"%(attribute)s\" ist nicht erlaubt" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "Attribut \"%s\" ist nicht erlaubt" + +msgid "attribute is not configurable" +msgstr "Attribut ist nicht konfigurierbar" + +msgid "automatically add the principal if it doesn't exist" +msgstr "Den Principal automatisch hinzufügen, falls dieser nicht existiert" + +msgid "automount location" +msgstr "Automount-Ort" + +msgid "automount locations" +msgstr "Automount-Orte" + +msgid "automount map" +msgstr "Automount-Map" + +msgid "automount maps" +msgstr "Automount-Maps" + +msgid "bind password" +msgstr "Bind-Passwort" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "darf höchstens %(len)d Zeichen lang sein" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "darf höchstens %(maxlength)d Bytes groß sein" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "darf höchstens %(maxlength)d Zeichen lang sein" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "darf höchstens %(maxvalue)d sein" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "darf höchstens %(maxvalue)s sein" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "Kann nicht zu '%(uri)s' verbinden: %(error)s" msgid "cannot delete global password policy" msgstr "Die Globale Passwortregel kann nicht gelöscht werden" +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "Konfigurationsdatei %s konnte nicht geöffnet werden\n" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "Aufruf von »stat« für Konfigurationsdatei %s nicht möglich\n" + +msgid "change collided with another change" +msgstr "Änderung kollidiert mit einer anderen Änderung" + +msgid "change to a POSIX group" +msgstr "in eine POSIC-Gruppe ändern" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "Befehl '%(name)s' nimmt maximal %(count)d Argument" +msgstr[1] "Befehl '%(name)s' nimmt maximal %(count)d Argumente" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "Befehl '%(name)s' nimmt keine Argumente" + +msgid "commands for controlling sudo configuration" +msgstr "Befehle zum Steuern der sudo-Konfiguration" + +msgid "configuration options" +msgstr "Konfigurationsoptionen" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "Container-Eintrag (%(container)s) nicht gefunden" + +msgid "delegation" +msgstr "Delegation" + +msgid "delegations" +msgstr "Delegationen" + +msgid "delete" +msgstr "löschen" + +msgid "description" +msgstr "Beschreibung" + +msgid "did not receive Kerberos credentials" +msgstr "Kerberos-Anmeldedaten wurden nicht empfangen" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "Jedes ACL-Element muss mit einem Semikolon enden" + +msgid "empty filter" +msgstr "Filter ist leer" + +msgid "entries" +msgstr "Einträge" + +msgid "entry" +msgstr "Eintrag" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" +"Fehler beim Zusammenstellen der Daten für den XML-RPC-Transport: %(error)s" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "Fehler auf Server '%(server)s': %(error)s" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "Ausführen von ipa-getkeytab fehgeschlagen, errno %d\n" + +msgid "filename" +msgstr "Dateiname" + +msgid "filter and memberof are mutually exclusive" +msgstr "»filter« und »memberof« schließen sich gegenseitig aus" + +msgid "force host name even if not in DNS" +msgstr "Hostname erzwingen auch wenn nicht im DNS" + +#, c-format +msgid "fork() failed\n" +msgstr "fork() fehlgeschlagen\n" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "Format muss als »%(format)s« %(rfcs)s angegeben werden" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" +"Die Forward Zone \"%(fwzone)s\" ist nicht aktiv, da eine ordnungsgemäße NS " +"Delegation in der autoritativen Zone \"%(authzone)s\" nicht vorhanden ist. " +"Bitte fügen Sie den NS Record \"%(ns_rec)s\" zur übergeordneten Zone " +"\"%(authzone)s\" hinzu." + +msgid "givenname is required" +msgstr "givenname wird benötigt" + +msgid "group" +msgstr "Gruppe" + +msgid "group, permission and self are mutually exclusive" +msgstr "»group«, »permission« und »self« schließen sich gegenseitig aus" + +msgid "groups" +msgstr "Gruppen" + +msgid "host" +msgstr "host" + +msgid "host group" +msgstr "Hostgruppe" + +msgid "host groups" +msgstr "Hostgruppen" + +msgid "hostname" +msgstr "Hostname" + +msgid "hosts" +msgstr "hosts" + +msgid "hosts cannot be set when type is 'group'" +msgstr "hosts kann nicht gesetzt sein wenn Typ 'group' ist" + +msgid "incorrect type" +msgstr "inkorrekter Typ" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "Ungültig '%(name)s': %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "ungültiger DN (%s)" + +msgid "invalid IP address format" +msgstr "Ungültiges IP-Adressformat" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" +"Ungültige IP-Adressversion (ist %(value)d, muss %(required_value)d) sein!" + +msgid "invalid IP network format" +msgstr "Ungültiges IP-Netzwerkformat" + +msgid "invalid SSH public key" +msgstr "Ungültiger öffentlicher SSH-Schlüssel" + +msgid "invalid address format" +msgstr "Ungültiges Adressformat" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "Ungültiger Domainname: %s" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "Ungültiges E-Mail-Format: %(email)s" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "ipa-getkeytab hat falsche Zugriffsrechte?\n" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "ipa-getkeytab nicht gefunden\n" + +msgid "limits exceeded for this query" +msgstr "Begrenzung wurde für diese Abfrage überschritten." + +#, python-format +msgid "manager %(manager)s not found" +msgstr "Manager %(manager)s nicht gefunden" + +#, python-format +msgid "member %s" +msgstr "Mitglied %s" + +msgid "missing base_id" +msgstr "fehlende base_id" + +msgid "modifying primary key is not allowed" +msgstr "Ändern des primären Schlüssels ist nicht erlaubt." + +#, python-format +msgid "must be '%(value)s'" +msgstr "muss '%(value)s' sein" + +msgid "must be DNS name" +msgstr "muss ein DNS-Name sein" + +msgid "must be TRUE or FALSE" +msgstr "muss TRUE oder FALSE sein" + +msgid "must be True or False" +msgstr "muss »True« oder »False« sein" + +msgid "must be Unicode text" +msgstr "muss Unicode-Text sein" + +msgid "must be a decimal number" +msgstr "muss eine Dezimalzahl sein" + +msgid "must be absolute" +msgstr "muss absolut sein" + +msgid "must be an integer" +msgstr "muss eine Ganzzahl sein" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "muss mindestens %(minlength)d Bytes groß sein" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "muss mindestens %(minlength)d Zeichen lang sein" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "muss mindestens %(minvalue)d sein" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "muss mindestens %(minvalue)s sein" + +msgid "must be binary data" +msgstr "muss im Binärformat sein" + +msgid "must be datetime value" +msgstr "muss ein datetime-Wert sein" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "muss genau %(length)d Bytes groß sein" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "muss genau %(length)d Zeichen lang sein" + +#, python-format +msgid "must be one of %(values)s" +msgstr "muss eines von %(values)s sein" + +msgid "must be relative" +msgstr "muss relativ sein" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "muss dem Muster »%(pattern)s« entsprechen" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "kein Befehl oder Hilfethema '%(topic)s'" + +msgid "no modifications to be performed" +msgstr "Keine anzuwendenden Änderungen" + +msgid "not allowed to modify group entries" +msgstr "Es ist nicht erlaubt, Gruppeneinträge zu ändern." + +msgid "not allowed to modify user entries" +msgstr "Es ist nicht erlaubt, Benutzereinträge zu ändern." + +msgid "not fully qualified" +msgstr "nicht voll ausgeschrieben" + +msgid "number of passwords" +msgstr "Anzahl der Passwörter" + +#, python-format +msgid "objectclass %s not found" +msgstr "Objektklasse %s nicht gefunden" + +msgid "only \"ad\" is supported" +msgstr "nur \"ad\" ist unterstützt" + +#, c-format +msgid "out of memory\n" +msgstr "Nicht genügend Speicher\n" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "Überlappende Argumente und Optionen: %(names)s" + +msgid "password" +msgstr "Passwort" + +msgid "password policies" +msgstr "Passwortregeln" + +msgid "password policy" +msgstr "Passwortregel" + +msgid "permission" +msgstr "Berechtigung" + +msgid "permissions" +msgstr "Berechtigungen" + +msgid "preserve" +msgstr "aufbewahren" + +msgid "preserve and no-preserve cannot be both set" +msgstr "preserve und no-preserve kann nicht gleichzeitig gesetzt sein" + +#, c-format +msgid "principal not found\n" +msgstr "Principal nicht gefunden\n" + msgid "priority cannot be set on global policy" msgstr "Priorität der globalen Regel kann nicht gesetzt werden" -#, fuzzy -msgid "HBAC rule and local members cannot both be set" -msgstr "Benutzer und Host können nicht gleichzeitig gesetzt sein." - -msgid "Invalid SELinux user name, must match {}" +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" msgstr "" +"Profilkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " +"Profile gibt" -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" +#, c-format +msgid "read error\n" +msgstr "Lesefehler\n" -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" +#, c-format +msgid "realm not found\n" +msgstr "Realm nicht gefunden\n" #, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -#, fuzzy -msgid "SELinux User Maps" -msgstr "SELinux-Optionen" - -#, fuzzy -msgid "SELinux User Map" -msgstr "Vorgegebener SELinux-Benutzer" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "HBAC-Regel %(rule)s nicht gefunden" - -#, fuzzy, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "Benutzer »%(value)s« hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "Benutzer »%(value)s« gelöscht" - -#, fuzzy, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "Benutzer »%(value)s« geändert" - -#, fuzzy, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "%(count)d passender Benutzer" -msgstr[1] "%(count)d passende Benutzer" - -#, fuzzy, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "Benutzerkonto »%(value)s« wurde aktiviert" - -#, fuzzy, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "Benutzerkonto »%(value)s« wurde deaktiviert" +msgid "request failed with HTTP status %d" +msgstr "Anfrage fehlgeschlagen, HTTP-Status: %d" msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"retrieve and print all attributes from the server. Affects command output." msgstr "" +"Ermittelt alle Attribute des Servers und gibt diese aus. Dies wirkt sich auf " +"die Befehlsausgabe aus." -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" +msgid "role" +msgstr "Rolle" -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" +msgid "roles" +msgstr "Rollen" -msgid "Trusted to authenticate as user" -msgstr "" +msgid "search for private groups" +msgstr "nach privaten Gruppen suchen" -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" +msgid "seconds" +msgstr "Sekunden" -#, fuzzy, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "HOTP Authentifizierungsfenster" +msgid "server" +msgstr "Server" -#, fuzzy -msgid "Malformed principal" -msgstr "Dienst-Principal" - -msgid "{} is required by the IPA master" -msgstr "" +msgid "servers" +msgstr "Server" msgid "service" msgstr "Dienst" @@ -23846,151 +4536,8 @@ msgstr "Dienst" msgid "services" msgstr "Dienste" -#, fuzzy -msgid "Service principal alias" -msgstr "Dienst-Principal" - -#, fuzzy -msgid "Base-64 encoded service certificate" -msgstr "Base-64-kodiertes Serverzertifikat" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -#, fuzzy -msgid "Add a new IPA service." -msgstr "Einen neuen IPA-Dienst hinzufügen." - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "Dienst »%(value)s« hinzugefügt" - -#, fuzzy -msgid "force principal name even if host not in DNS" -msgstr "Hostname erzwingen auch wenn nicht im DNS" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -#, fuzzy -msgid "Add a new SMB service." -msgstr "Einen neuen HBAC-Dienst hinzufügen." - -#, fuzzy -msgid "SMB service NetBIOS name" -msgstr "Dienstname" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "Dienst »%(value)s« geändert" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "Dienst »%(value)s« deaktiviert" - -#, fuzzy, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "HBAC-Dienstgruppe »%(value)s« hinzugefügt" - -#, fuzzy, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "HBAC-Dienstgruppe »%(value)s« geändert" - -msgid "Add new principal alias to a service" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "HBAC-Dienstgruppe »%(value)s« hinzugefügt" - -#, fuzzy -msgid "Remove principal alias from a service" -msgstr "Berechtigungen von Rolle entfernen." - -#, fuzzy, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "Vorbereitete Benutzer" - -msgid "Stage User" -msgstr "Vorbereiteter Benutzer" +msgid "sn is required" +msgstr "sn wird benötigt" msgid "stage user" msgstr "Vorbereiteter Benutzer" @@ -23998,1036 +4545,71 @@ msgstr "Vorbereiteter Benutzer" msgid "stage users" msgstr "Vorbereitete Benutzer" -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" +msgid "sudo command" +msgstr "Sudo-Befehl" -msgid "givenname is required" -msgstr "givenname wird benötigt" +msgid "sudo command group" +msgstr "Sudo-Befehlsgruppe" -msgid "sn is required" -msgstr "sn wird benötigt" +msgid "sudo command groups" +msgstr "Sudo-Befehlsgruppen" -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer \"%(value)s\" gelöscht" +msgid "sudo commands" +msgstr "Sudo-Befehle" -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer »%(value)s« geändert" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d passender Benutzer" -msgstr[1] "%(count)d passende Benutzer" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "Aktiver Benutzer mit Name \"%(user)s\" existiert bereits" - -#, python-format -msgid "Stage user %s activated" -msgstr "Vorbereiteten Benutzer %s aktiviert" - -#, fuzzy -msgid "Add one or more certificates to the stageuser entry" -msgstr "Manager zum vorbereiteten Benutzer hinzufügen" - -#, fuzzy, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." - -#, fuzzy -msgid "Remove one or more certificates to the stageuser entry" -msgstr "Manager vom Benutzer entfernen" - -#, fuzzy, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "Vorbereiteten Benutzer \"%(value)s\" aktivieren." - -#, fuzzy -msgid "Add new principal alias to the stageuser entry" -msgstr "Manager zum vorbereiteten Benutzer hinzufügen" - -#, fuzzy, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" - -#, fuzzy -msgid "Remove principal alias from the stageuser entry" -msgstr "Manager vom Benutzer entfernen" - -#, fuzzy, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "Vorbereiteten Benutzer »%(value)s« geändert" - -#, fuzzy -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "Manager zum vorbereiteten Benutzer hinzufügen" - -#, fuzzy -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "Manager vom Benutzer entfernen" - -#, fuzzy -msgid "ID View" -msgstr "Ansicht" - -msgid "system ID View" -msgstr "" - -#, fuzzy -msgid "ID Views" -msgstr "Ansicht" - -#, fuzzy -msgid "User object overrides" -msgstr "Benutzer zum Überschreiben" - -#, fuzzy -msgid "Group object overrides" -msgstr "Gruppe zum Überschreiben" - -#, fuzzy -msgid "Hosts the view applies to" -msgstr "Host-Kategorie, auf welche die Regel angewendet werden soll" - -#, fuzzy, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "Rolle \"%(value)s\" hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "ACI gelöscht \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "ACI geändert \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "%(count)d ACI gefunden" -msgstr[1] "%(count)d ACIs gefunden" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -#, fuzzy -msgid "not found" -msgstr "Realm nicht gefunden\n" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, fuzzy, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "Bedingungen, die nicht entfernt werden konnten" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -#, fuzzy -msgid "Add a new ID override." -msgstr "Einen neuen HBAC-Dienst hinzufügen." - -#, fuzzy, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "Dienst »%(value)s« hinzugefügt" - -#, fuzzy -msgid "Delete an ID override." -msgstr "Einen IPA-Dienst entfernen." - -#, fuzzy, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -#, fuzzy -msgid "Modify an ID override." -msgstr "HBAC Dienst ändern" - -#, fuzzy, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "Dienst »%(value)s« geändert" - -#, fuzzy -msgid "ID override" -msgstr "Benutzer zum Überschreiben" - -#, fuzzy -msgid "ID overrides cannot be renamed" -msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" - -#, fuzzy -msgid "Search for an ID override." -msgstr "Nach IPA-Diensten suchen." - -#, fuzzy, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -#, fuzzy -msgid "Display information about an ID override." -msgstr "Informationen zu einem IPA-Dienst anzeigen." - -#, fuzzy -msgid "User ID override" -msgstr "Benutzer zum Überschreiben" - -#, fuzzy -msgid "User ID overrides" -msgstr "Benutzer zum Überschreiben" - -#, fuzzy -msgid "Group ID override" -msgstr "Gruppe zum Überschreiben" - -#, fuzzy -msgid "Group ID overrides" -msgstr "Gruppe zum Überschreiben" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" - -#, fuzzy -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "Manager vom Benutzer entfernen" - -#, fuzzy, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -#, fuzzy, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "Dienst »%(value)s« hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Dienst »%(value)s« gelöscht" - -#, fuzzy, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "Dienst »%(value)s« geändert" - -#, fuzzy, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -#, fuzzy, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "Gruppe »%(value)s« hinzugefügt" - -#, fuzzy, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Gruppe »%(value)s« gelöscht" - -#, fuzzy, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "Gruppe »%(value)s« geändert" - -#, fuzzy, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "%(count)d passende Gruppe" -msgstr[1] "%(count)d passende Gruppen" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -#, fuzzy -msgid "Certificate Authority" -msgstr "Zertifikattyp" - -#, fuzzy -msgid "Certificate Authorities" -msgstr "Zertifikate" - -msgid "Name for referencing the CA" -msgstr "" - -#, fuzzy -msgid "Description of the purpose of the CA" -msgstr "Beschreibung des Hosts" - -msgid "Authority ID" -msgstr "" - -msgid "Dogtag Authority ID" -msgstr "" - -#, fuzzy -msgid "Subject DN" -msgstr "Betreff" - -msgid "Subject Distinguished Name" -msgstr "" - -#, fuzzy -msgid "Issuer DN" -msgstr "Ausgabestelle" - -msgid "Issuer Distinguished Name" -msgstr "" - -#, fuzzy -msgid "Base-64 encoded certificate." -msgstr "Base-64-kodiertes Serverzertifikat" - -#, fuzzy -msgid "Certificate chain" -msgstr "Zertifikat" - -msgid "X.509 certificate chain" -msgstr "" - -#, fuzzy -msgid "RSN Version" -msgstr "Berechtigung" - -#, fuzzy -#| msgid "Serial Number (hex)" -msgid "Random Serial Number Version" -msgstr "Seriennummer (hex)" - -#, fuzzy -msgid "Search for CAs." -msgstr "Nach Hosts suchen." - -#, fuzzy, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "%(count)d ACI gefunden" -msgstr[1] "%(count)d ACIs gefunden" - -msgid "Include certificate chain in output" -msgstr "" - -#, fuzzy -msgid "Display the properties of a CA." -msgstr "Einstellungen der HBAC-Regel anzeigen." - -#, fuzzy -msgid "Create a CA." -msgstr "Erstelle eine neue CA ACL." - -#, fuzzy, python-format -msgid "Created CA \"%(value)s\"" -msgstr "ACI erstellt \"%(value)s\"" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "ACI gelöscht \"%(value)s\"" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -#, fuzzy -msgid "IPA CA cannot be deleted" -msgstr "Zonen-Datensatz »%s« kann nicht gelöscht werden" - -#, fuzzy -msgid "Must be disabled first" -msgstr "Muss eine Ganzzahl sein" - -#, fuzzy -msgid "Modify CA configuration." -msgstr "Konfigurationsoptionen bearbeiten." - -#, fuzzy, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "ACI geändert \"%(value)s\"" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -#, fuzzy -msgid "Disable a CA." -msgstr "Deaktivieren" - -#, fuzzy, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "Host \"%(value)s\" deaktiviert" - -#, fuzzy -msgid "IPA CA cannot be disabled" -msgstr "Konto ist deaktiviert" - -#, fuzzy -msgid "Enable a CA." -msgstr "HBAC-Regel aktivieren." - -#, fuzzy, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "HBAC-Regel \"%(value)s\" aktiviert" - -#, fuzzy -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "Veraltete Optionen" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "Ein existierendes Zertifikat holen." - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "Den Status der Signaturanfrage des Zertifikats überprüfen." - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -#, fuzzy -msgid " * 0 - unspecified\n" -msgstr "Nicht angegeben" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, fuzzy, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "Host »%(host)s« nicht gefunden" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -#, fuzzy -msgid "Subject email address" -msgstr "Email-Adresse" - -#, fuzzy -msgid "Subject DNS name" -msgstr "muss ein DNS-Name sein" - -#, fuzzy -msgid "Subject X.400 address" -msgstr "Straße" - -#, fuzzy -msgid "Subject directory name" -msgstr "Basis für Home-Verzeichnisse" - -msgid "Subject EDI Party name" -msgstr "" - -#, fuzzy -msgid "Subject URI" -msgstr "Betreff" - -#, fuzzy -msgid "Subject IP Address" -msgstr "IP-Adresse" - -#, fuzzy -msgid "Subject OID" -msgstr "Betreff" - -#, fuzzy -msgid "Subject UPN" -msgstr "Betreff" - -#, fuzzy -msgid "Subject Kerberos principal name" -msgstr "Kerberos-Principal" - -#, fuzzy -msgid "Subject Other Name" -msgstr "Servername" - -msgid "Serial number (hex)" -msgstr "Seriennummer (hex)" - -msgid "Request status" -msgstr "Anfragestatus" - -#, fuzzy -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "Den Principal automatisch hinzufügen, falls dieser nicht existiert" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, fuzzy, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "Der Principal für diese Anfrage existiert nicht" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -#, fuzzy -msgid "'add' option" -msgstr "Sudo-Option" - -msgid "The principal for this request doesn't exist." -msgstr "Der Principal für diese Anfrage existiert nicht" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "Widerrufen" - -#, fuzzy -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "Grund für den Widerruf des Zertifikats (0-10)" - -#, fuzzy, python-format -msgid "Owner %s" -msgstr "Eigentümer" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "7 ist kein gültiger Grund für einen Widerruf." - -#, fuzzy -msgid "Status of the certificate" -msgstr "Datei, in der das Zertifikat gespeichert werden soll." - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "%(count)d passender Dienst" -msgstr[1] "%(count)d passende Dienste" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, fuzzy, python-format -msgid "Search for certificates without these owner %s." -msgstr "Nach vorbereiteten Benutzern suchen." - -#, fuzzy -msgid "" -"\n" -"Sudo Rules\n" -msgstr "Sudo-Regeln" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "Diese Option ist veraltet." +msgid "sudo rule" +msgstr "Sudo-Regel" msgid "sudo rules" msgstr "Sudo-Regeln" -msgid "Sudo Rules" -msgstr "Sudo-Regeln" +msgid "the entry was deleted while being modified" +msgstr "Der Eintrag wurde während der Änderung entfernt." -msgid "Sudo Rule" -msgstr "Sudo-Regel" +msgid "this option has been deprecated." +msgstr "Diese Option ist veraltet." + +msgid "this option is deprecated" +msgstr "diese Option ist veraltet" + +msgid "too many '@' characters" +msgstr "Zu viele »@«-Zeichen" + +msgid "trust" +msgstr "Vertrauensstellung" + +msgid "trust type" +msgstr "Vertrauensstellungstyp" + +msgid "trusts" +msgstr "Vertrauensstellungen" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "Typ des IPA-Objekts (user, group, host, hostgroup, service, netgroup)" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" +"»type«, »filter«, »subtree« und »targetgroup« schließen sich gegenseitig aus." #, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" +msgid "unknown command '%(name)s'" +msgstr "Unbekannter Befehl '%(name)s'" -#, fuzzy, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "Rolle \"%(value)s\" hinzugefügt" +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "Unbekannter Fehler %(code)d von %(server)s: %(error)s" -#, fuzzy, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Rolle \"%(value)s\" gelöscht" +msgid "unsupported trust type" +msgstr "nicht unterstützte Vetrauensstellung" -#, fuzzy, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "Rolle \"%(value)s\" geändert" +msgid "user" +msgstr "Benutzer" -#, fuzzy, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +#, python-format +msgid "user \"%s\" is already active" +msgstr "Benutzer \"%s\" ist bereits aktiv" + +msgid "user category cannot be set to 'all' while there are allowed users" msgstr "" "Benutzerkategorie kann nicht auf 'Alle' gesetzt werden wenn es erlaubte " "Benutzer gibt" @@ -25035,472 +4617,8 @@ msgstr "" msgid "users" msgstr "Benutzer" -#, fuzzy -msgid "command" -msgstr "Befehle" +msgid "users and hosts cannot both be set" +msgstr "Benutzer und Host können nicht gleichzeitig gesetzt sein." -#, fuzzy -msgid "commands" -msgstr "Befehle" - -#, fuzzy -msgid "runAs user" -msgstr "Vorbereiteter Benutzer" - -#, fuzzy -msgid "runAs users" -msgstr "Vorbereitete Benutzer" - -#, fuzzy -msgid "group runAs" -msgstr "Gruppen" - -#, fuzzy -msgid "runAs groups" -msgstr "Hostgruppen" - -#, fuzzy, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "%(count)d Rolle gefunden" -msgstr[1] "%(count)d Rollen gefunden" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -#, fuzzy -msgid "users cannot be added when runAs user or runAs group category='all'" +msgid "users cannot be set when type is 'hostgroup'" msgstr "users kann nicht gesetzt sein wenn Typ 'hostgroup' ist" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "Benutzer »%(value)s« hinzugefügt" - -#, fuzzy -msgid "Default group for new users is not POSIX" -msgstr "Vorgegebene Gruppe für neue Benutzer" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Benutzer »%(value)s« gelöscht" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Preserved user \"%(value)s\"" -msgstr "Benutzer »%(value)s« gelöscht" - -#, python-format -msgid "%s: user is already preserved" -msgstr "%s: Benutzer ist bereits aufbewahrt" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Benutzer »%(value)s« geändert" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "Benutzerkonto \"%(value)s\" wiederhergestellt" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "Benutzer \"%s\" ist bereits aktiv" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "Vorbereitetes Benutzerkonto \"%(value)s\"" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "Benutzerkonto »%(value)s« wurde deaktiviert" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "Benutzerkonto »%(value)s« wurde aktiviert" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "Konto »%(value)s« wurde entsperrt" - -msgid "Failed logins" -msgstr "Fehlgeschlagene Logins" - -msgid "Last successful authentication" -msgstr "Letzte erfolgreiche Authentifizierung" - -msgid "Last failed authentication" -msgstr "Letzte fehlgeschlagene Authentifizierung" - -msgid "Time now" -msgstr "Aktuelle Zeit" - -#, fuzzy -#| msgid "Password change complete" -msgid "Password grace count" -msgstr "Passwortänderung abgeschlossen" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, fuzzy, python-format -msgid "%(host)s failed" -msgstr "fork() fehlgeschlagen\n" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "Konto deaktiviert: %(disabled)s" - -#, fuzzy, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" - -#, fuzzy, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -#, fuzzy -msgid "Add new principal alias to the user entry" -msgstr "Manager zum Benutzer hinzufügen" - -#, fuzzy, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "Vorbereiteten Benutzer »%(value)s« hinzugefügt" - -#, fuzzy -msgid "Remove principal alias from the user entry" -msgstr "Manager vom Benutzer entfernen" - -#, fuzzy, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "Bedingung(en) von \"%(value)s\" entfernt" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" -msgstr "" - -#, fuzzy -msgid "Request must be a dict" -msgstr "Anfragestatus" - -msgid "Request is missing \"method\"" -msgstr "" - -msgid "Request is missing \"params\"" -msgstr "" - -#, fuzzy -msgid "params must be a list" -msgstr "muss eine Ganzzahl sein" - -msgid "params must contain [args, options]" -msgstr "" - -msgid "params[0] (aka args) must be a list" -msgstr "" - -msgid "params[1] (aka options) must be a dict" -msgstr "" - -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" - -msgid "CIFS server denied your credentials" -msgstr "" - -msgid "communication with CIFS server was unsuccessful" -msgstr "" - -msgid "AD domain controller" -msgstr "" - -#, fuzzy -msgid "unsupported functional level" -msgstr "nicht unterstützte Vetrauensstellung" - -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" - -msgid "Cannot find specified domain or server name" -msgstr "" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" - -msgid "At least the domain or IP address should be specified" -msgstr "" - -#, python-format -msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" -msgstr "" - -#, fuzzy -msgid "no trusted domain is configured" -msgstr "Attribut ist nicht konfigurierbar" - -#, fuzzy -msgid "domain is not configured" -msgstr "CA ist nicht konfiguriert" - -msgid "SID is not valid" -msgstr "" - -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "" - -msgid "SID does not match any trusted domain" -msgstr "" - -#, fuzzy -msgid "Trust setup" -msgstr "Vertrauensstellungstyp" - -#, fuzzy -msgid "Our domain is not configured" -msgstr "CA ist nicht konfiguriert" - -#, fuzzy -msgid "No trusted domain is not configured" -msgstr "Attribut ist nicht konfigurierbar" - -msgid "trusted domain object" -msgstr "" - -#, fuzzy -msgid "domain is not trusted" -msgstr "Eine leere Domäne ist nicht zulässig" - -msgid "no trusted domain matched the specified flat name" -msgstr "" - -msgid "trusted domain object not found" -msgstr "" - -msgid "Object does not belong to a trusted domain" -msgstr "" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "" - -msgid "Ambiguous search, user domain was not specified" -msgstr "" - -msgid "Trusted domain did not return a unique object" -msgstr "" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "" - -#, fuzzy -msgid "trusted domain user not found" -msgstr "Eine leere Domäne ist nicht zulässig" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "" - -#, fuzzy -msgid "CIFS credentials object" -msgstr "Ungültige Zugangsdaten" - -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "" - -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" - -#, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" - -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" - -#, fuzzy -msgid "Credentials" -msgstr "Ungültige Zugangsdaten" - -msgid "Missing credentials for cross-forest communication" -msgstr "" - -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" - -#, python-format -msgid "must equal %r" -msgstr "" - -msgid "Hello world" -msgstr "" - -#, fuzzy, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "RADIUS-Proxy Benutzername" - -#, fuzzy, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "Aktiver Benutzer mit Name \"%(user)s\" existiert bereits" - -#, fuzzy -msgid "must be at least 1" -msgstr "muss mindestens %(minvalue)d sein" - -msgid "Out of memory\n" -msgstr "Nicht genügend Speicher\n" - -#, fuzzy -msgid "Warning unrecognized encryption type.\n" -msgstr "Unterstützte Verschlüsselungstypen:\n" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -msgid "Out of memory!?\n" -msgstr "Nicht genügend Speicher!?\n" - -msgid "Enctype comparison failed!\n" -msgstr "" - -#, fuzzy -msgid "Password is too long!\n" -msgstr "Größe der Passworthistorie" - -msgid "Failed to create random key!\n" -msgstr "Zufallsschlüssel konnte nicht erzeugt werden!\n" - -msgid "Failed to create key!\n" -msgstr "Schlüssel konnte nicht erzeugt werden!\n" - -#, fuzzy -msgid "Bad or unsupported salt type.\n" -msgstr "nicht unterstützte Vetrauensstellung" - -#, fuzzy, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "ldap-Bibliothek konnte nicht initialisiert werden!\n" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -#, fuzzy -msgid "Unable to initialize STARTTLS session\n" -msgstr "ldap-Bibliothek konnte nicht initialisiert werden!\n" diff --git a/po/en_GB.po b/po/en_GB.po index c6f6fba59..6f22d3e83 100644 --- a/po/en_GB.po +++ b/po/en_GB.po @@ -15,23877 +15,38 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, c-format -msgid "out of memory\n" -msgstr "" - -#, c-format -msgid "read error\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -msgid "realm not found\n" -msgstr "objectclass %s not found" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, c-format -msgid "Out of memory \n" -msgstr "" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -msgid "SASL Bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Out of Memory!\n" -msgstr "" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, c-format -msgid "Passwords do not match!\n" -msgstr "" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Output debug info" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -msgid "Server Name" -msgstr "" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -msgid "LDAP password" -msgstr "" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -msgid "Path to the IPA CA certificate" -msgstr "" - -msgid "IPA CA certificate" -msgstr "" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -msgid "Enter LDAP password" -msgstr "" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" - -#, c-format -msgid "Discovered server %s\n" -msgstr "" - -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Using provided server %s\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -msgid "New Principal Password" -msgstr "" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Out of memory!\n" -msgstr "" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "" - -#, c-format -msgid "Out of memory!" -msgstr "" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "" - -#, c-format -msgid "No values for %s" -msgstr "" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Host is already joined.\n" -msgstr "" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" - -#, c-format -msgid "json_dumps() failed\n" -msgstr "" - -#, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "" - -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" - -#, c-format -msgid "fork() failed\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "" - -#, c-format -msgid "child exited with %d\n" -msgstr "" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "" - -msgid "Quiet mode. Only errors are displayed." -msgstr "" - -msgid "Unenroll this host from IPA server" -msgstr "" - -msgid "Hostname of this server" -msgstr "" - -msgid "hostname" -msgstr "" - -msgid "IPA Server to use" -msgstr "" - -msgid "Specifies where to store keytab information." -msgstr "" - -msgid "filename" -msgstr "" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" - -msgid "LDAP password (if not using Kerberos)" -msgstr "" - -msgid "password" -msgstr "" - -msgid "LDAP basedn" -msgstr "" - -msgid "basedn" -msgstr "" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "" - -msgid "Failed to add" -msgstr "" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" - -msgid "Unrevoked" -msgstr "" - -msgid "Error" -msgstr "" - -msgid "Input filename" -msgstr "" - -msgid "File to load the certificate from." -msgstr "" - -msgid "cannot specify both raw certificate and file" -msgstr "" - -msgid "Input file" -msgstr "" - -msgid "File to load the certificate from" -msgstr "" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "" - -msgid "Split DNS record to parts" -msgstr "" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" - -msgid "DNS resource record type" -msgstr "" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" - -msgid "No option to modify specific record provided." -msgstr "" - -msgid "Current DNS record contents:\n" -msgstr "" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -msgid "No option to delete specific record provided." -msgstr "" - -msgid "Delete all?" -msgstr "" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "" - -msgid "Server will check DNS forwarder(s)." -msgstr "" - -msgid "This may take some time, please wait ..." -msgstr "" - -msgid "DNS forwarder" -msgstr "" - -msgid "file to store DNS records in nsupdate format" -msgstr "" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -msgid "Delete a user" -msgstr "" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - -msgid "maps not connected to /etc/auto.master:" -msgstr "" - -msgid "Import automount files for a specific location." -msgstr "" - -msgid "Master file" -msgstr "" - -msgid "Automount master file." -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" - -#, fuzzy, python-format -msgid "File %(file)s not found" -msgstr "%(filename)s: file not found" - -#, python-format -msgid "key %(key)s already exists" -msgstr "" - -#, python-format -msgid "map %(map)s already exists" -msgstr "" - -msgid "Imported maps:" -msgstr "" - -#, python-format -msgid "Added %(map)s" -msgstr "" - -msgid "Imported keys:" -msgstr "" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "" - -msgid "Ignored keys:" -msgstr "" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "" - -msgid "Duplicate maps skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(map)s" -msgstr "" - -msgid "Duplicate keys skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(key)s" -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -msgid "User ID" -msgstr "" - -msgid "Password" -msgstr "" - -msgid "First Code" -msgstr "" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "" - -msgid "Invalid credentials" -msgstr "" - -msgid "Create a new vault." -msgstr "" - -msgid "Vault password" -msgstr "" - -msgid "File containing the vault password" -msgstr "" - -msgid "File containing the vault public key" -msgstr "" - -msgid "Password can be specified only for symmetric vault" -msgstr "" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "" - -msgid "Password specified multiple times" -msgstr "" - -msgid "Public key specified multiple times" -msgstr "" - -msgid "Missing vault public key" -msgstr "" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "" - -msgid "Modify a vault." -msgstr "" - -msgid "Change password" -msgstr "" - -msgid "Old vault password" -msgstr "" - -msgid "File containing the old vault password" -msgstr "" - -msgid "New vault password" -msgstr "" - -msgid "File containing the new vault password" -msgstr "" - -msgid "Old vault private key" -msgstr "" - -msgid "File containing the old vault private key" -msgstr "" - -msgid "File containing the new vault public key" -msgstr "" - -msgid "New public key specified multiple times" -msgstr "" - -msgid "Missing new vault public key" -msgstr "" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "" - -msgid "Binary data to archive" -msgstr "" - -msgid "File containing data to archive" -msgstr "" - -msgid "Override existing password" -msgstr "" - -msgid "Input data specified multiple times" -msgstr "" - -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" - -msgid "Invalid vault type" -msgstr "" - -msgid "Retrieve a data from a vault." -msgstr "" - -msgid "File to store retrieved data" -msgstr "" - -msgid "Vault private key" -msgstr "" - -msgid "File containing the vault private key" -msgstr "" - -msgid "Data" -msgstr "" - -msgid "Private key specified multiple times" -msgstr "" - -msgid "Missing vault private key" -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "ACI name" -msgstr "" - -msgid "Permission" -msgstr "" - -msgid "Permission ACI grants access to" -msgstr "" - -msgid "User group" -msgstr "" - -msgid "User group ACI grants access to" -msgstr "" - -msgid "Permissions" -msgstr "" - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Attributes to which the permission applies" -msgstr "" - -msgid "Attributes" -msgstr "" - -msgid "Type" -msgstr "" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" - -msgid "Member of" -msgstr "" - -msgid "Member of a group" -msgstr "" - -msgid "Filter" -msgstr "" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "" - -msgid "Subtree" -msgstr "" - -msgid "Subtree to apply ACI to" -msgstr "" - -msgid "Target group" -msgstr "" - -msgid "Group to apply ACI to" -msgstr "" - -msgid "Target your own entry (self)" -msgstr "" - -msgid "Apply ACI to your own entry (self)" -msgstr "" - -msgid "Create new ACI." -msgstr "" - -msgid "ACI prefix" -msgstr "" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" - -msgid "Test the ACI syntax but don't write anything" -msgstr "" - -#, fuzzy -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" -"retrieve and print all attributes from the server. Affects command output." - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" - -msgid "User-friendly description of action performed" -msgstr "" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" - -msgid "Delete ACI." -msgstr "" - -msgid "True means the operation was successful" -msgstr "" - -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" - -msgid "A string searched in all relevant object attributes" -msgstr "" - -msgid "Primary key only" -msgstr "" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" - -msgid "Number of entries returned" -msgstr "" - -msgid "True if not all results were returned" -msgstr "" - -msgid "Modify ACI." -msgstr "" - -msgid "Rename an ACI." -msgstr "" - -msgid "New ACI name" -msgstr "" - -msgid "Display a single ACI given an ACI name." -msgstr "" - -msgid "Location of the ACI" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Description" -msgstr "" - -msgid "A description of this auto member rule" -msgstr "" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "List of deletions that failed" -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Users" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Hosts" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" - -msgid "Key" -msgstr "" - -msgid "Automount key name." -msgstr "" - -msgid "Mount information" -msgstr "" - -msgid "description" -msgstr "" - -msgid "Location" -msgstr "" - -msgid "Automount location name." -msgstr "" - -msgid "Map" -msgstr "" - -msgid "Automount map name." -msgstr "" - -msgid "Create a new automount key." -msgstr "" - -msgid "Delete an automount key." -msgstr "" - -msgid "Continuous mode: Don't stop on errors." -msgstr "" - -msgid "Search for an automount key." -msgstr "" - -msgid "Time Limit" -msgstr "" - -msgid "Time limit of search in seconds" -msgstr "" - -msgid "Size Limit" -msgstr "" - -msgid "Maximum number of entries returned" -msgstr "" - -msgid "Modify an automount key." -msgstr "" - -msgid "New mount information" -msgstr "" - -msgid "Rename" -msgstr "" - -msgid "Rename the automount key object" -msgstr "" - -msgid "Display an automount key." -msgstr "" - -msgid "Create a new automount location." -msgstr "" - -msgid "Delete an automount location." -msgstr "" - -msgid "Search for an automount location." -msgstr "" - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" - -msgid "Display an automount location." -msgstr "" - -msgid "Generate automount files for a specific location." -msgstr "" - -msgid "Create a new automount map." -msgstr "" - -msgid "Create a new indirect mount point." -msgstr "" - -msgid "Mount point" -msgstr "" - -msgid "Parent map" -msgstr "" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" - -msgid "Delete an automount map." -msgstr "" - -msgid "Search for an automount map." -msgstr "" - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" - -msgid "Modify an automount map." -msgstr "" - -msgid "Display an automount map." -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" - -msgid "Nested Methods to execute" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason" -msgstr "" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -msgid "minimum serial number" -msgstr "" - -msgid "maximum serial number" -msgstr "" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Principal" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Dictionary mapping variable name to value" -msgstr "" - -msgid "Revoke a certificate." -msgstr "" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "Maximum username length" -msgstr "" - -msgid "Home directory base" -msgstr "" - -msgid "Default location of home directories" -msgstr "" - -msgid "Default shell" -msgstr "" - -msgid "Default shell for new users" -msgstr "" - -msgid "Default users group" -msgstr "" - -msgid "Default group for new users" -msgstr "" - -msgid "Default e-mail domain" -msgstr "" - -msgid "Search time limit" -msgstr "" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" - -msgid "Search size limit" -msgstr "" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "" - -msgid "User search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" - -msgid "Group search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" - -msgid "Enable migration mode" -msgstr "" - -msgid "Certificate Subject base" -msgstr "" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "" - -msgid "Default group objectclasses" -msgstr "" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "" - -msgid "Default user objectclasses" -msgstr "" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" - -msgid "Password Expiration Notification (days)" -msgstr "" - -msgid "Number of days's notice of impending password expiration" -msgstr "" - -msgid "Password plugin features" -msgstr "" - -msgid "Extra hashes to generate in password plug-in" -msgstr "" - -msgid "SELinux user map order" -msgstr "" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" - -msgid "Default SELinux user" -msgstr "" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" - -msgid "Default PAC types" -msgstr "" - -msgid "Default types of PAC supported for services" -msgstr "" - -msgid "Default user authentication types" -msgstr "" - -msgid "Default types of supported user authentication" -msgstr "" - -msgid "Modify configuration options." -msgstr "" - -msgid "Show the current configuration." -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "Delegation name" -msgstr "" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "" - -msgid "Attributes to which the delegation applies" -msgstr "" - -msgid "Member user group" -msgstr "" - -msgid "User group to apply delegation to" -msgstr "" - -msgid "Add a new delegation." -msgstr "" - -msgid "Delete a delegation." -msgstr "" - -msgid "Search for delegations." -msgstr "" - -msgid "Modify a delegation." -msgstr "" - -msgid "Display information about a delegation." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "Global forwarders" -msgstr "" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Forward policy" -msgstr "" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" - -msgid "Allow PTR sync" -msgstr "" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" - -msgid "Zone refresh interval" -msgstr "" - -msgid "Zone name" -msgstr "" - -msgid "Zone name (FQDN)" -msgstr "" - -msgid "Reverse zone IP network" -msgstr "" - -msgid "IP network to create reverse zone name from" -msgstr "" - -msgid "Active zone" -msgstr "" - -msgid "Is zone active?" -msgstr "" - -msgid "Zone forwarders" -msgstr "" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "Record name" -msgstr "" - -msgid "Time to live" -msgstr "" - -msgid "Records" -msgstr "" - -msgid "Record type" -msgstr "" - -msgid "Record data" -msgstr "" - -msgid "A record" -msgstr "" - -msgid "Raw A records" -msgstr "" - -msgid "A IP Address" -msgstr "" - -msgid "IP Address" -msgstr "" - -msgid "A Create reverse" -msgstr "" - -msgid "Create reverse record for this IP Address" -msgstr "" - -msgid "AAAA record" -msgstr "" - -msgid "Raw AAAA records" -msgstr "" - -msgid "AAAA IP Address" -msgstr "" - -msgid "AAAA Create reverse" -msgstr "" - -msgid "A6 record" -msgstr "" - -msgid "Raw A6 records" -msgstr "" - -msgid "A6 Record data" -msgstr "" - -msgid "AFSDB record" -msgstr "" - -msgid "Raw AFSDB records" -msgstr "" - -msgid "AFSDB Subtype" -msgstr "" - -msgid "Subtype" -msgstr "" - -msgid "AFSDB Hostname" -msgstr "" - -msgid "Hostname" -msgstr "" - -msgid "APL record" -msgstr "" - -msgid "Raw APL records" -msgstr "" - -msgid "CERT record" -msgstr "" - -msgid "Raw CERT records" -msgstr "" - -msgid "CERT Certificate Type" -msgstr "" - -msgid "Certificate Type" -msgstr "" - -msgid "CERT Key Tag" -msgstr "" - -msgid "Key Tag" -msgstr "" - -msgid "CERT Algorithm" -msgstr "" - -msgid "Algorithm" -msgstr "" - -msgid "CERT Certificate/CRL" -msgstr "" - -msgid "Certificate/CRL" -msgstr "" - -msgid "CNAME record" -msgstr "" - -msgid "Raw CNAME records" -msgstr "" - -msgid "CNAME Hostname" -msgstr "" - -msgid "A hostname which this alias hostname points to" -msgstr "" - -msgid "DHCID record" -msgstr "" - -msgid "Raw DHCID records" -msgstr "" - -msgid "DLV record" -msgstr "" - -msgid "Raw DLV records" -msgstr "" - -msgid "DLV Key Tag" -msgstr "" - -msgid "DLV Algorithm" -msgstr "" - -msgid "DLV Digest Type" -msgstr "" - -msgid "Digest Type" -msgstr "" - -msgid "DLV Digest" -msgstr "" - -msgid "Digest" -msgstr "" - -msgid "DNAME record" -msgstr "" - -msgid "Raw DNAME records" -msgstr "" - -msgid "DNAME Target" -msgstr "" - -msgid "Target" -msgstr "" - -msgid "DNSKEY record" -msgstr "" - -msgid "Raw DNSKEY records" -msgstr "" - -msgid "DS record" -msgstr "" - -msgid "Raw DS records" -msgstr "" - -msgid "DS Key Tag" -msgstr "" - -msgid "DS Algorithm" -msgstr "" - -msgid "DS Digest Type" -msgstr "" - -msgid "DS Digest" -msgstr "" - -msgid "HIP record" -msgstr "" - -msgid "Raw HIP records" -msgstr "" - -msgid "IPSECKEY record" -msgstr "" - -msgid "Raw IPSECKEY records" -msgstr "" - -msgid "KEY record" -msgstr "" - -msgid "Raw KEY records" -msgstr "" - -msgid "KX record" -msgstr "" - -msgid "Raw KX records" -msgstr "" - -msgid "KX Preference" -msgstr "" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" - -msgid "KX Exchanger" -msgstr "" - -msgid "A host willing to act as a key exchanger" -msgstr "" - -msgid "LOC record" -msgstr "" - -msgid "Raw LOC records" -msgstr "" - -msgid "LOC Degrees Latitude" -msgstr "" - -msgid "Degrees Latitude" -msgstr "" - -msgid "LOC Minutes Latitude" -msgstr "" - -msgid "Minutes Latitude" -msgstr "" - -msgid "LOC Seconds Latitude" -msgstr "" - -msgid "Seconds Latitude" -msgstr "" - -msgid "LOC Direction Latitude" -msgstr "" - -msgid "Direction Latitude" -msgstr "" - -msgid "LOC Degrees Longitude" -msgstr "" - -msgid "Degrees Longitude" -msgstr "" - -msgid "LOC Minutes Longitude" -msgstr "" - -msgid "Minutes Longitude" -msgstr "" - -msgid "LOC Seconds Longitude" -msgstr "" - -msgid "Seconds Longitude" -msgstr "" - -msgid "LOC Direction Longitude" -msgstr "" - -msgid "Direction Longitude" -msgstr "" - -msgid "LOC Altitude" -msgstr "" - -msgid "Altitude" -msgstr "" - -msgid "LOC Size" -msgstr "" - -msgid "Size" -msgstr "" - -msgid "LOC Horizontal Precision" -msgstr "" - -msgid "Horizontal Precision" -msgstr "" - -msgid "LOC Vertical Precision" -msgstr "" - -msgid "Vertical Precision" -msgstr "" - -msgid "MX record" -msgstr "" - -msgid "Raw MX records" -msgstr "" - -msgid "MX Preference" -msgstr "" - -msgid "MX Exchanger" -msgstr "" - -msgid "A host willing to act as a mail exchanger" -msgstr "" - -msgid "NAPTR record" -msgstr "" - -msgid "Raw NAPTR records" -msgstr "" - -msgid "NAPTR Order" -msgstr "" - -msgid "Order" -msgstr "" - -msgid "NAPTR Preference" -msgstr "" - -msgid "Preference" -msgstr "" - -msgid "NAPTR Flags" -msgstr "" - -msgid "Flags" -msgstr "" - -msgid "NAPTR Service" -msgstr "" - -msgid "Service" -msgstr "" - -msgid "NAPTR Regular Expression" -msgstr "" - -msgid "Regular Expression" -msgstr "" - -msgid "NAPTR Replacement" -msgstr "" - -msgid "Replacement" -msgstr "" - -msgid "NS record" -msgstr "" - -msgid "Raw NS records" -msgstr "" - -msgid "NS Hostname" -msgstr "" - -msgid "NSEC record" -msgstr "" - -msgid "Raw NSEC records" -msgstr "" - -msgid "NSEC3 record" -msgstr "" - -msgid "Raw NSEC3 records" -msgstr "" - -msgid "PTR record" -msgstr "" - -msgid "Raw PTR records" -msgstr "" - -msgid "PTR Hostname" -msgstr "" - -msgid "The hostname this reverse record points to" -msgstr "" - -msgid "RRSIG record" -msgstr "" - -msgid "Raw RRSIG records" -msgstr "" - -msgid "RP record" -msgstr "" - -msgid "Raw RP records" -msgstr "" - -msgid "SIG record" -msgstr "" - -msgid "Raw SIG records" -msgstr "" - -msgid "SPF record" -msgstr "" - -msgid "Raw SPF records" -msgstr "" - -msgid "SRV record" -msgstr "" - -msgid "Raw SRV records" -msgstr "" - -msgid "SRV Priority" -msgstr "" - -msgid "Priority" -msgstr "" - -msgid "SRV Weight" -msgstr "" - -msgid "Weight" -msgstr "" - -msgid "SRV Port" -msgstr "" - -msgid "Port" -msgstr "" - -msgid "SRV Target" -msgstr "" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" - -msgid "SSHFP record" -msgstr "" - -msgid "Raw SSHFP records" -msgstr "" - -msgid "SSHFP Algorithm" -msgstr "" - -msgid "SSHFP Fingerprint Type" -msgstr "" - -msgid "Fingerprint Type" -msgstr "" - -msgid "SSHFP Fingerprint" -msgstr "" - -msgid "Fingerprint" -msgstr "" - -msgid "TA record" -msgstr "" - -msgid "Raw TA records" -msgstr "" - -msgid "TLSA record" -msgstr "" - -msgid "Raw TLSA records" -msgstr "" - -msgid "TLSA Certificate Usage" -msgstr "" - -msgid "Certificate Usage" -msgstr "" - -msgid "TLSA Selector" -msgstr "" - -msgid "Selector" -msgstr "" - -msgid "TLSA Matching Type" -msgstr "" - -msgid "Matching Type" -msgstr "" - -msgid "TLSA Certificate Association Data" -msgstr "" - -msgid "Certificate Association Data" -msgstr "" - -msgid "TKEY record" -msgstr "" - -msgid "Raw TKEY records" -msgstr "" - -msgid "TSIG record" -msgstr "" - -msgid "Raw TSIG records" -msgstr "" - -msgid "TXT record" -msgstr "" - -msgid "Raw TXT records" -msgstr "" - -msgid "TXT Text Data" -msgstr "" - -msgid "Text Data" -msgstr "" - -msgid "Authoritative nameserver" -msgstr "" - -msgid "Authoritative nameserver domain name" -msgstr "" - -msgid "Administrator e-mail address" -msgstr "" - -msgid "SOA serial" -msgstr "" - -msgid "SOA record serial number" -msgstr "" - -msgid "SOA refresh" -msgstr "" - -msgid "SOA record refresh time" -msgstr "" - -msgid "SOA retry" -msgstr "" - -msgid "SOA record retry time" -msgstr "" - -msgid "SOA expire" -msgstr "" - -msgid "SOA record expire time" -msgstr "" - -msgid "SOA minimum" -msgstr "" - -msgid "How long should negative responses be cached" -msgstr "" - -msgid "Time to live for records at zone apex" -msgstr "" - -msgid "BIND update policy" -msgstr "" - -msgid "Dynamic update" -msgstr "" - -msgid "Allow dynamic updates." -msgstr "" - -msgid "Allow query" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" - -msgid "Allow transfer" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" - -msgid "Allow in-line DNSSEC signing" -msgstr "" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "" - -msgid "NSEC3PARAM record" -msgstr "" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" - -msgid "Resolve a host name in DNS." -msgstr "" - -msgid "Modify global DNS configuration." -msgstr "" - -msgid "Show the current global DNS configuration." -msgstr "" - -msgid "Create new DNS forward zone." -msgstr "" - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" - -msgid "Permission value" -msgstr "" - -msgid "Delete DNS forward zone." -msgstr "" - -msgid "Disable DNS Forward Zone." -msgstr "" - -msgid "Enable DNS Forward Zone." -msgstr "" - -msgid "Search for DNS forward zones." -msgstr "" - -msgid "Modify DNS forward zone." -msgstr "" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" - -msgid "Display information about a DNS forward zone." -msgstr "" - -msgid "Add new DNS resource record." -msgstr "" - -msgid "Force" -msgstr "" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "" - -msgid "Structured" -msgstr "" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" - -msgid "Delete DNS resource record." -msgstr "" - -msgid "Delete all associated records" -msgstr "" - -msgid "Delete DNS record entry." -msgstr "" - -msgid "Search for DNS resources." -msgstr "" - -msgid "Modify a DNS resource record." -msgstr "" - -msgid "Rename the DNS resource record object" -msgstr "" - -msgid "Display DNS resource." -msgstr "" - -msgid "Create new DNS zone (SOA record)." -msgstr "" - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" - -msgid "Add a permission for per-zone access delegation." -msgstr "" - -msgid "Delete DNS zone (SOA record)." -msgstr "" - -msgid "Disable DNS Zone." -msgstr "" - -msgid "Enable DNS Zone." -msgstr "" - -msgid "Search for DNS zones (SOA records)." -msgstr "" - -msgid "Forward zones only" -msgstr "" - -msgid "Search for forward zones only" -msgstr "" - -msgid "Modify DNS zone (SOA record)." -msgstr "" - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" - -msgid "Remove a permission for per-zone access delegation." -msgstr "" - -msgid "Display information about a DNS zone (SOA record)." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "Group name" -msgstr "" - -msgid "Group description" -msgstr "" - -msgid "GID" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Member users" -msgstr "" - -msgid "Member groups" -msgstr "" - -msgid "Member of groups" -msgstr "" - -msgid "Roles" -msgstr "" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Suppress processing of membership attributes." -msgstr "" - -msgid "Add members to a group." -msgstr "" - -msgid "External member" -msgstr "" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -msgid "member group" -msgstr "" - -msgid "groups to add" -msgstr "" - -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - -msgid "Delete group." -msgstr "" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "user" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "group" -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "netgroup" -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "role" -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "HBAC rule" -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "sudo rule" -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Rule name" -msgstr "" - -msgid "Rule type" -msgstr "" - -msgid "Rule type (allow)" -msgstr "" - -msgid "User category" -msgstr "" - -msgid "User category the rule applies to" -msgstr "" - -msgid "Host category" -msgstr "" - -msgid "Host category the rule applies to" -msgstr "" - -msgid "Service category" -msgstr "" - -msgid "Service category the rule applies to" -msgstr "" - -msgid "Enabled" -msgstr "" - -msgid "User Groups" -msgstr "" - -msgid "Host Groups" -msgstr "" - -msgid "Services" -msgstr "" - -msgid "Service Groups" -msgstr "" - -msgid "External host" -msgstr "" - -msgid "Create a new HBAC rule." -msgstr "" - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "member host" -msgstr "" - -msgid "hosts to add" -msgstr "" - -msgid "member host group" -msgstr "" - -msgid "host groups to add" -msgstr "" - -msgid "Add services to an HBAC rule." -msgstr "" - -msgid "member HBAC service" -msgstr "" - -msgid "HBAC services to add" -msgstr "" - -msgid "member HBAC service group" -msgstr "" - -msgid "HBAC service groups to add" -msgstr "" - -msgid "Add users and groups to an HBAC rule." -msgstr "" - -msgid "Delete an HBAC rule." -msgstr "" - -msgid "Disable an HBAC rule." -msgstr "" - -msgid "Enable an HBAC rule." -msgstr "" - -msgid "Search for HBAC rules." -msgstr "" - -msgid "Modify an HBAC rule." -msgstr "" - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "hosts to remove" -msgstr "" - -msgid "host groups to remove" -msgstr "" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "" - -msgid "HBAC services to remove" -msgstr "" - -msgid "HBAC service groups to remove" -msgstr "" - -msgid "Remove users and groups from an HBAC rule." -msgstr "" - -msgid "Display the properties of an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" - -msgid "Service name" -msgstr "" - -msgid "HBAC service" -msgstr "" - -msgid "HBAC service description" -msgstr "" - -msgid "Member of HBAC service groups" -msgstr "" - -msgid "Add a new HBAC service." -msgstr "" - -msgid "Delete an existing HBAC service." -msgstr "" - -msgid "Search for HBAC services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" - -msgid "Modify an HBAC service." -msgstr "" - -msgid "Display information about an HBAC service." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "Service group name" -msgstr "" - -msgid "HBAC service group description" -msgstr "" - -msgid "Member HBAC service" -msgstr "" - -msgid "Add a new HBAC service group." -msgstr "" - -msgid "Add members to an HBAC service group." -msgstr "" - -msgid "Delete an HBAC service group." -msgstr "" - -msgid "Search for an HBAC service group." -msgstr "" - -msgid "Modify an HBAC service group." -msgstr "" - -msgid "Remove members from an HBAC service group." -msgstr "" - -msgid "Display information about an HBAC service group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -msgid "User name" -msgstr "" - -msgid "Target host" -msgstr "" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host name" -msgstr "" - -msgid "A description of this host" -msgstr "" - -msgid "Locality" -msgstr "" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "" - -msgid "Platform" -msgstr "" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "" - -msgid "Operating system" -msgstr "" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "" - -msgid "User password" -msgstr "" - -msgid "Password used in bulk enrollment" -msgstr "" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "" - -msgid "Random password" -msgstr "" - -msgid "Certificate" -msgstr "" - -msgid "Base-64 encoded server certificate" -msgstr "" - -msgid "Principal name" -msgstr "" - -msgid "MAC address" -msgstr "" - -msgid "Hardware MAC address(es) on this host" -msgstr "" - -msgid "SSH public key" -msgstr "" - -msgid "Class" -msgstr "" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "Assigned ID View" -msgstr "" - -msgid "Requires pre-authentication" -msgstr "" - -msgid "Pre-authentication is required for the service" -msgstr "" - -msgid "Trusted for delegation" -msgstr "" - -msgid "Client credentials may be delegated to the service" -msgstr "" - -msgid "Member of host-groups" -msgstr "" - -msgid "Indirect Member of host-group" -msgstr "" - -msgid "Keytab" -msgstr "" - -msgid "Managed by" -msgstr "" - -msgid "Managing" -msgstr "" - -msgid "Users allowed to retrieve keytab" -msgstr "" - -msgid "Groups allowed to retrieve keytab" -msgstr "" - -msgid "Hosts allowed to retrieve keytab" -msgstr "" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "" - -msgid "Users allowed to create keytab" -msgstr "" - -msgid "Groups allowed to create keytab" -msgstr "" - -msgid "Hosts allowed to create keytab" -msgstr "" - -msgid "Host Groups allowed to create keytab" -msgstr "" - -msgid "Add a new host." -msgstr "" - -msgid "force host name even if not in DNS" -msgstr "" - -msgid "skip reverse DNS detection" -msgstr "" - -msgid "Add the host to DNS with this IP address" -msgstr "" - -msgid "Add hosts that can manage this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" - -msgid "Delete a host." -msgstr "" - -msgid "Remove entries from DNS" -msgstr "" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" - -msgid "Search for hosts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" - -msgid "host group" -msgstr "" - -msgid "Search for hosts with these member of host groups." -msgstr "" - -msgid "Search for hosts without these member of host groups." -msgstr "" - -msgid "Search for hosts with these member of netgroups." -msgstr "" - -msgid "Search for hosts without these member of netgroups." -msgstr "" - -msgid "Search for hosts with these member of roles." -msgstr "" - -msgid "Search for hosts without these member of roles." -msgstr "" - -msgid "Search for hosts with these member of HBAC rules." -msgstr "" - -msgid "Search for hosts without these member of HBAC rules." -msgstr "" - -msgid "Search for hosts with these member of sudo rules." -msgstr "" - -msgid "Search for hosts without these member of sudo rules." -msgstr "" - -msgid "Search for hosts with these enrolled by users." -msgstr "" - -msgid "Search for hosts without these enrolled by users." -msgstr "" - -msgid "host" -msgstr "" - -msgid "Search for hosts with these managed by hosts." -msgstr "" - -msgid "Search for hosts without these managed by hosts." -msgstr "" - -msgid "Search for hosts with these managing hosts." -msgstr "" - -msgid "Search for hosts without these managing hosts." -msgstr "" - -msgid "Modify information about a host." -msgstr "" - -msgid "Kerberos principal name for this host" -msgstr "" - -msgid "Update DNS entries" -msgstr "" - -msgid "Remove hosts that can manage this host." -msgstr "" - -msgid "Display information about a host." -msgstr "" - -msgid "file to store certificate in" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "Host-group" -msgstr "" - -msgid "Name of host-group" -msgstr "" - -msgid "A description of this host-group" -msgstr "" - -msgid "Member hosts" -msgstr "" - -msgid "Member host-groups" -msgstr "" - -msgid "Indirect Member hosts" -msgstr "" - -msgid "Indirect Member host-groups" -msgstr "" - -msgid "Add a new hostgroup." -msgstr "" - -msgid "Add members to a hostgroup." -msgstr "" - -msgid "Delete a hostgroup." -msgstr "" - -msgid "Search for hostgroups." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" - -msgid "Search for host groups with these member hosts." -msgstr "" - -msgid "Search for host groups without these member hosts." -msgstr "" - -msgid "Search for host groups with these member host groups." -msgstr "" - -msgid "Search for host groups without these member host groups." -msgstr "" - -msgid "Search for host groups with these member of host groups." -msgstr "" - -msgid "Search for host groups without these member of host groups." -msgstr "" - -msgid "Search for host groups with these member of netgroups." -msgstr "" - -msgid "Search for host groups without these member of netgroups." -msgstr "" - -msgid "Search for host groups with these member of HBAC rules." -msgstr "" - -msgid "Search for host groups without these member of HBAC rules." -msgstr "" - -msgid "Search for host groups with these member of sudo rules." -msgstr "" - -msgid "Search for host groups without these member of sudo rules." -msgstr "" - -msgid "Modify a hostgroup." -msgstr "" - -msgid "Remove members from a hostgroup." -msgstr "" - -msgid "Display information about a hostgroup." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "Range name" -msgstr "" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -msgid "Anchor to override" -msgstr "" - -msgid "Group ID Number" -msgstr "" - -msgid "User login" -msgstr "" - -msgid "UID" -msgstr "" - -msgid "User ID Number" -msgstr "" - -msgid "GECOS" -msgstr "" - -msgid "Home directory" -msgstr "" - -msgid "Login shell" -msgstr "" - -msgid "ID View Name" -msgstr "" - -msgid "Add a new Group ID override." -msgstr "" - -msgid "Delete an Group ID override." -msgstr "" - -msgid "Search for an Group ID override." -msgstr "" - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" - -msgid "Modify an Group ID override." -msgstr "" - -msgid "Rename the Group ID override object" -msgstr "" - -msgid "Display information about an Group ID override." -msgstr "" - -msgid "Add a new User ID override." -msgstr "" - -msgid "Delete an User ID override." -msgstr "" - -msgid "Search for an User ID override." -msgstr "" - -msgid "Modify an User ID override." -msgstr "" - -msgid "Rename the User ID override object" -msgstr "" - -msgid "Display information about an User ID override." -msgstr "" - -msgid "Add a new ID View." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" - -msgid "hosts" -msgstr "" - -msgid "Hosts to apply the ID View to" -msgstr "" - -msgid "hostgroups" -msgstr "" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" - -msgid "Hosts that this ID View was applied to." -msgstr "" - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" - -msgid "Number of hosts the ID View was applied to:" -msgstr "" - -msgid "Delete an ID View." -msgstr "" - -msgid "Search for an ID View." -msgstr "" - -msgid "Modify an ID View." -msgstr "" - -msgid "Rename the ID View object" -msgstr "" - -msgid "Display information about an ID View." -msgstr "" - -msgid "Enumerate all the hosts the view applies to." -msgstr "" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" - -msgid "Hosts to clear (any) ID View from." -msgstr "" - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" - -msgid "Hosts that ID View was cleared from." -msgstr "" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" - -msgid "Dict of I18N messages" -msgstr "" - -msgid "Export plugin meta-data for the webUI." -msgstr "" - -msgid "Name of object to export" -msgstr "" - -msgid "Name of method to export" -msgstr "" - -msgid "Name of command to export" -msgstr "" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" - -msgid "Join an IPA domain" -msgstr "" - -msgid "The hostname to register as" -msgstr "" - -msgid "The IPA realm" -msgstr "" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "" - -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" - -msgid "Manage ticket policy for specific user" -msgstr "" - -msgid "Max life" -msgstr "" - -msgid "Maximum ticket life (seconds)" -msgstr "" - -msgid "Max renew" -msgstr "" - -msgid "Maximum renewable age (seconds)" -msgstr "" - -msgid "Modify Kerberos ticket policy." -msgstr "" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "" - -msgid "Display the current Kerberos ticket policy." -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," -"cn=accounts' --group-container='cn=groups,cn=accounts' " -"ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' --user-ignore-" -"objectclass=radiusprofile --user-ignore-" -"attribute=radiusgroupname ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -msgid "Migrate users and groups from DS to IPA." -msgstr "" - -msgid "LDAP URI" -msgstr "" - -msgid "LDAP URI of DS server to migrate from" -msgstr "" - -msgid "bind password" -msgstr "" - -msgid "Bind DN" -msgstr "" - -msgid "User container" -msgstr "" - -msgid "DN of container for users in DS relative to base DN" -msgstr "" - -msgid "Group container" -msgstr "" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "" - -msgid "User object class" -msgstr "" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "" - -msgid "Group object class" -msgstr "" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "" - -msgid "Ignore user object class" -msgstr "" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore user attribute" -msgstr "" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore group object class" -msgstr "" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "Ignore group attribute" -msgstr "" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "" - -msgid "Overwrite GID" -msgstr "" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" - -msgid "LDAP schema" -msgstr "" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" - -msgid "Continue" -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" - -msgid "Base DN" -msgstr "" - -msgid "Base DN on remote LDAP server" -msgstr "" - -msgid "Ignore compat plugin" -msgstr "" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" - -msgid "CA certificate" -msgstr "" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "" - -msgid "groups to exclude from migration" -msgstr "" - -msgid "users to exclude from migration" -msgstr "" - -msgid "Lists of objects migrated; categorized by type." -msgstr "" - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" - -msgid "False if migration mode was disabled." -msgstr "" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" - -msgid "Show environment variables." -msgstr "Show environment variables." - -msgid "Forward to server instead of running locally" -msgstr "" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" -"retrieve and print all attributes from the server. Affects command output." - -msgid "Total number of variables env (>= count)" -msgstr "" - -msgid "Number of variables returned (<= total)" -msgstr "" - -msgid "Show all loaded plugins." -msgstr "" - -msgid "Dictionary mapping plugin names to bases" -msgstr "" - -msgid "Number of plugins loaded" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "Netgroup name" -msgstr "" - -msgid "Netgroup description" -msgstr "" - -msgid "NIS domain name" -msgstr "" - -msgid "IPA unique ID" -msgstr "" - -msgid "Member netgroups" -msgstr "" - -msgid "Indirect Member netgroups" -msgstr "" - -msgid "Member User" -msgstr "" - -msgid "Member Group" -msgstr "" - -msgid "Member Host" -msgstr "" - -msgid "Member Hostgroup" -msgstr "" - -msgid "Add a new netgroup." -msgstr "" - -msgid "Add members to a netgroup." -msgstr "" - -msgid "member netgroup" -msgstr "" - -msgid "netgroups to add" -msgstr "" - -msgid "Delete a netgroup." -msgstr "" - -msgid "Search for a netgroup." -msgstr "" - -msgid "search for managed groups" -msgstr "" - -msgid "Search for netgroups with these member netgroups." -msgstr "" - -msgid "Search for netgroups without these member netgroups." -msgstr "" - -msgid "Search for netgroups with these member users." -msgstr "" - -msgid "Search for netgroups without these member users." -msgstr "" - -msgid "Search for netgroups with these member groups." -msgstr "" - -msgid "Search for netgroups without these member groups." -msgstr "" - -msgid "Search for netgroups with these member hosts." -msgstr "" - -msgid "Search for netgroups without these member hosts." -msgstr "" - -msgid "Search for netgroups with these member host groups." -msgstr "" - -msgid "Search for netgroups without these member host groups." -msgstr "" - -msgid "Search for netgroups with these member of netgroups." -msgstr "" - -msgid "Search for netgroups without these member of netgroups." -msgstr "" - -msgid "Modify a netgroup." -msgstr "" - -msgid "Remove members from a netgroup." -msgstr "" - -msgid "netgroups to remove" -msgstr "" - -msgid "Display information about a netgroup." -msgstr "" - -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" - -msgid "TOTP authentication Window" -msgstr "" - -msgid "TOTP authentication time variance (seconds)" -msgstr "" - -msgid "TOTP Synchronization Window" -msgstr "" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "" - -msgid "HOTP Authentication Window" -msgstr "" - -msgid "HOTP authentication skip-ahead" -msgstr "" - -msgid "HOTP Synchronization Window" -msgstr "" - -msgid "HOTP synchronization skip-ahead" -msgstr "" - -msgid "Modify OTP configuration options." -msgstr "" - -msgid "Show the current OTP configuration." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -msgid "Serial" -msgstr "" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "Set a user's password." -msgstr "" - -msgid "New Password" -msgstr "" - -msgid "Current Password" -msgstr "" - -msgid "OTP" -msgstr "" - -msgid "One Time Password" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -"\n" -"Managed permissions\n" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "Permission name" -msgstr "" - -msgid "Granted rights" -msgstr "" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" - -msgid "Effective attributes" -msgstr "" - -msgid "All attributes to which the permission applies" -msgstr "" - -msgid "Included attributes" -msgstr "" - -msgid "User-specified attributes to which the permission applies" -msgstr "" - -msgid "Excluded attributes" -msgstr "" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" - -msgid "Default attributes" -msgstr "" - -msgid "Attributes to which the permission applies by default" -msgstr "" - -msgid "Bind rule type" -msgstr "" - -msgid "Subtree to apply permissions to" -msgstr "" - -msgid "Extra target filter" -msgstr "" - -msgid "Raw target filter" -msgstr "" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" - -msgid "Target DN" -msgstr "" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" - -msgid "Member of group" -msgstr "" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "" - -msgid "User group to apply permissions to (sets target)" -msgstr "" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "" - -msgid "Deprecated; use extratargetfilter" -msgstr "" - -msgid "Deprecated; use ipapermlocation" -msgstr "" - -msgid "Deprecated; use ipapermright" -msgstr "" - -msgid "Granted to Privilege" -msgstr "" - -msgid "Indirect Member of roles" -msgstr "" - -msgid "Add a new permission." -msgstr "" - -msgid "Add members to a permission." -msgstr "" - -msgid "member privilege" -msgstr "" - -msgid "privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "" - -msgid "Permission flags" -msgstr "" - -msgid "Delete a permission." -msgstr "" - -msgid "force delete of SYSTEM permissions" -msgstr "" - -msgid "Search for permissions." -msgstr "" - -msgid "Modify a permission." -msgstr "" - -msgid "Rename the permission object" -msgstr "" - -msgid "Remove members from a permission." -msgstr "" - -msgid "privileges to remove" -msgstr "" - -msgid "Display information about a permission." -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "Ping a remote server." -msgstr "" - -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "" - -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" - -msgid "Privilege name" -msgstr "" - -msgid "Privilege description" -msgstr "" - -msgid "Granting privilege to roles" -msgstr "" - -msgid "Add a new privilege." -msgstr "" - -msgid "Add members to a privilege." -msgstr "" - -msgid "member role" -msgstr "" - -msgid "roles to add" -msgstr "" - -msgid "Add permissions to a privilege." -msgstr "" - -msgid "permission" -msgstr "" - -msgid "permissions" -msgstr "" - -msgid "Number of permissions added" -msgstr "" - -msgid "Delete a privilege." -msgstr "" - -msgid "Search for privileges." -msgstr "" - -msgid "Modify a privilege." -msgstr "" - -msgid "Rename the privilege object" -msgstr "" - -msgid "Remove members from a privilege" -msgstr "" - -msgid "roles to remove" -msgstr "" - -msgid "Remove permissions from a privilege." -msgstr "" - -msgid "Number of permissions removed" -msgstr "" - -msgid "Display information about a privilege." -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Group" -msgstr "" - -msgid "Manage password policy for specific group" -msgstr "" - -msgid "Max lifetime (days)" -msgstr "" - -msgid "Maximum password lifetime (in days)" -msgstr "" - -msgid "Min lifetime (hours)" -msgstr "" - -msgid "Minimum password lifetime (in hours)" -msgstr "" - -msgid "History size" -msgstr "" - -msgid "Password history size" -msgstr "" - -msgid "Character classes" -msgstr "" - -msgid "Minimum number of character classes" -msgstr "" - -msgid "Min length" -msgstr "" - -msgid "Minimum length of password" -msgstr "" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "" - -msgid "Max failures" -msgstr "" - -msgid "Consecutive failures before lockout" -msgstr "" - -msgid "Failure reset interval" -msgstr "" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "" - -msgid "Lockout duration" -msgstr "" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" - -msgid "Add a new group password policy." -msgstr "" - -msgid "Delete a group password policy." -msgstr "" - -msgid "Search for group password policies." -msgstr "" - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" - -msgid "Modify a group password policy." -msgstr "" - -msgid "Display information about password policy." -msgstr "" - -msgid "User" -msgstr "" - -msgid "Display effective policy for a specific user" -msgstr "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "RADIUS proxy server name" -msgstr "" - -msgid "A description of this RADIUS proxy server" -msgstr "" - -msgid "Server" -msgstr "" - -msgid "The hostname or IP (with or without port)" -msgstr "" - -msgid "Secret" -msgstr "" - -msgid "The secret used to encrypt data" -msgstr "" - -msgid "Timeout" -msgstr "" - -msgid "The total timeout across all retries (in seconds)" -msgstr "" - -msgid "Retries" -msgstr "" - -msgid "The number of times to retry authentication" -msgstr "" - -msgid "User attribute" -msgstr "" - -msgid "The username attribute on the user object" -msgstr "" - -msgid "Add a new RADIUS proxy server." -msgstr "" - -msgid "Delete a RADIUS proxy server." -msgstr "" - -msgid "Search for RADIUS proxy servers." -msgstr "" - -msgid "Modify a RADIUS proxy server." -msgstr "" - -msgid "Rename the RADIUS proxy server object" -msgstr "" - -msgid "Display information about a RADIUS proxy server." -msgstr "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Domain" -msgstr "" - -msgid "Add domain" -msgstr "" - -msgid "Delete domain" -msgstr "" - -msgid "Modify realm domains." -msgstr "" - -msgid "Force adding domain even if not in DNS" -msgstr "" - -msgid "Display the list of realm domains." -msgstr "" - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" - -msgid "Role name" -msgstr "" - -msgid "A description of this role-group" -msgstr "" - -msgid "Privileges" -msgstr "" - -msgid "Member services" -msgstr "" - -msgid "Add a new role." -msgstr "" - -msgid "Add members to a role." -msgstr "" - -msgid "member service" -msgstr "" - -msgid "services to add" -msgstr "" - -msgid "Add privileges to a role." -msgstr "" - -msgid "privilege" -msgstr "" - -msgid "privileges" -msgstr "" - -msgid "Number of privileges added" -msgstr "" - -msgid "Delete a role." -msgstr "" - -msgid "Search for roles." -msgstr "" - -msgid "Modify a role." -msgstr "" - -msgid "Rename the role object" -msgstr "" - -msgid "Remove members from a role." -msgstr "" - -msgid "services to remove" -msgstr "" - -msgid "Remove privileges from a role." -msgstr "" - -msgid "Number of privileges removed" -msgstr "" - -msgid "Display information about a role." -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "Self-service name" -msgstr "" - -msgid "Attributes to which the permission applies." -msgstr "" - -msgid "Add a new self-service permission." -msgstr "" - -msgid "Delete a self-service permission." -msgstr "" - -msgid "Search for a self-service permission." -msgstr "" - -msgid "Modify a self-service permission." -msgstr "" - -msgid "Display information about a self-service permission." -msgstr "" - -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" - -msgid "SELinux User" -msgstr "" - -msgid "HBAC Rule" -msgstr "" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "" - -msgid "Create a new SELinux User Map." -msgstr "" - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "" - -msgid "Delete a SELinux User Map." -msgstr "" - -msgid "Disable an SELinux User Map rule." -msgstr "" - -msgid "Enable an SELinux User Map rule." -msgstr "" - -msgid "Search for SELinux User Maps." -msgstr "" - -msgid "Modify a SELinux User Map." -msgstr "" - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "" - -msgid "Display the properties of a SELinux User Map rule." -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "Service principal" -msgstr "" - -msgid "PAC type" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" - -msgid "Add a new IPA new service." -msgstr "" - -msgid "force principal name even if not in DNS" -msgstr "" - -msgid "Add hosts that can manage this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Delete an IPA service." -msgstr "" - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Search for IPA services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" - -msgid "Search for services with these managed by hosts." -msgstr "" - -msgid "Search for services without these managed by hosts." -msgstr "" - -msgid "Modify an existing IPA service." -msgstr "" - -msgid "Remove hosts that can manage this service." -msgstr "" - -msgid "Display information about an IPA service." -msgstr "" - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" - -msgid "Sudo Command" -msgstr "" - -msgid "A description of this command" -msgstr "" - -msgid "Sudo Command Groups" -msgstr "" - -msgid "Create new Sudo Command." -msgstr "" - -msgid "Delete Sudo Command." -msgstr "" - -msgid "Search for Sudo Commands." -msgstr "" - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" - -msgid "Modify Sudo Command." -msgstr "" - -msgid "Display Sudo Command." -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "Sudo Command Group" -msgstr "" - -msgid "Commands" -msgstr "" - -msgid "Member Sudo commands" -msgstr "" - -msgid "Create new Sudo Command Group." -msgstr "" - -msgid "Add members to Sudo Command Group." -msgstr "" - -msgid "member sudo command" -msgstr "" - -msgid "sudo commands to add" -msgstr "" - -msgid "Delete Sudo Command Group." -msgstr "" - -msgid "Search for Sudo Command Groups." -msgstr "" - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" - -msgid "Modify Sudo Command Group." -msgstr "" - -msgid "Remove members from Sudo Command Group." -msgstr "" - -msgid "sudo commands to remove" -msgstr "" - -msgid "Display Sudo Command Group." -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -msgid "Domain name" -msgstr "" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "" - -msgid "Last name" -msgstr "" - -msgid "Full name" -msgstr "" - -msgid "Display name" -msgstr "" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Email address" -msgstr "" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -msgid "Pager Number" -msgstr "" - -msgid "Fax Number" -msgstr "" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Car License" -msgstr "" - -#, fuzzy -msgid "Account disabled" -msgstr "%(count)d variables" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "" - -msgid "RADIUS proxy username" -msgstr "" - -msgid "Department Number" -msgstr "" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -msgid "Delete a user." -msgstr "" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "Command category" -msgstr "" - -msgid "Command category the rule applies to" -msgstr "" - -msgid "RunAs User category" -msgstr "" - -msgid "RunAs User category the rule applies to" -msgstr "" - -msgid "RunAs Group category" -msgstr "" - -msgid "RunAs Group category the rule applies to" -msgstr "" - -msgid "Sudo order" -msgstr "" - -msgid "integer to order the Sudo rules" -msgstr "" - -msgid "External User" -msgstr "" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -msgid "Host Masks" -msgstr "" - -msgid "Sudo Allow Commands" -msgstr "" - -msgid "Sudo Deny Commands" -msgstr "" - -msgid "Sudo Allow Command Groups" -msgstr "" - -msgid "Sudo Deny Command Groups" -msgstr "" - -msgid "RunAs Users" -msgstr "" - -msgid "Run as a user" -msgstr "" - -msgid "Groups of RunAs Users" -msgstr "" - -msgid "Run as any user within a specified group" -msgstr "" - -msgid "RunAs External User" -msgstr "" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -msgid "External Groups of RunAs Users" -msgstr "" - -msgid "External Groups of users that the command can run as" -msgstr "" - -msgid "RunAs Groups" -msgstr "" - -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -msgid "RunAs External Group" -msgstr "" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -msgid "Sudo Option" -msgstr "" - -msgid "Create new Sudo Rule." -msgstr "" - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "member sudo command group" -msgstr "" - -msgid "sudo command groups to add" -msgstr "" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "" - -msgid "Add group for Sudo to execute as." -msgstr "" - -msgid "Add users and groups for Sudo to execute as." -msgstr "" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "" - -msgid "Delete Sudo Rule." -msgstr "" - -msgid "Disable a Sudo Rule." -msgstr "" - -msgid "Enable a Sudo Rule." -msgstr "" - -msgid "Search for Sudo Rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -msgid "Modify Sudo Rule." -msgstr "" - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "sudo command groups to remove" -msgstr "" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "Remove an option from Sudo Rule." -msgstr "" - -msgid "Remove group for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "" - -msgid "Display Sudo Rule." -msgstr "" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "ACL name" -msgstr "" - -msgid "Profile category" -msgstr "" - -msgid "Profile category the ACL applies to" -msgstr "" - -msgid "User category the ACL applies to" -msgstr "" - -msgid "Host category the ACL applies to" -msgstr "" - -msgid "Service category the ACL applies to" -msgstr "" - -msgid "Profiles" -msgstr "" - -msgid "Create a new CA ACL." -msgstr "" - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "" - -msgid "Add profiles to a CA ACL." -msgstr "" - -msgid "member Certificate Profile" -msgstr "" - -msgid "Certificate Profiles to add" -msgstr "" - -msgid "Add services to a CA ACL." -msgstr "" - -msgid "Add users and groups to a CA ACL." -msgstr "" - -msgid "Delete a CA ACL." -msgstr "" - -msgid "Disable a CA ACL." -msgstr "" - -msgid "Enable a CA ACL." -msgstr "" - -msgid "Search for CA ACLs." -msgstr "" - -msgid "Modify a CA ACL." -msgstr "" - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "" - -msgid "Remove profiles from a CA ACL." -msgstr "" - -msgid "Certificate Profiles to remove" -msgstr "" - -msgid "Remove services from a CA ACL." -msgstr "" - -msgid "Remove users and groups from a CA ACL." -msgstr "" - -msgid "Display the properties of a CA ACL." -msgstr "" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" - -msgid "Query current Domain Level." -msgstr "" - -msgid "Current domain level:" -msgstr "" - -msgid "Change current Domain Level." -msgstr "" - -msgid "Domain Level" -msgstr "" - -msgid "Add certificates to host entry" -msgstr "" - -msgid "Remove certificates from host entry" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "Fallback to AD DC LDAP" -msgstr "" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" - -msgid "Add to default group" -msgstr "" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" - -msgid "Search scope" -msgstr "" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Target DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" - -msgid "Origin DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "Server name" -msgstr "" - -msgid "IPA server hostname" -msgstr "" - -msgid "Managed suffix" -msgstr "" - -msgid "Min domain level" -msgstr "" - -msgid "Minimum domain level" -msgstr "" - -msgid "Max domain level" -msgstr "" - -msgid "Maximum domain level" -msgstr "" - -msgid "Delete IPA server." -msgstr "" - -msgid "Search for IPA servers." -msgstr "" - -msgid "Show IPA server." -msgstr "" - -msgid "Add new certificates to a service" -msgstr "" - -msgid "Remove certificates from a service" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed Target" -msgstr "" - -msgid "Create a new service delegation rule." -msgstr "" - -msgid "Add member to a named service delegation rule." -msgstr "" - -msgid "member principal" -msgstr "" - -msgid "principal to add" -msgstr "" - -msgid "Add target to a named service delegation rule." -msgstr "" - -msgid "member service delegation target" -msgstr "" - -msgid "service delegation targets to add" -msgstr "" - -msgid "Delete service delegation." -msgstr "" - -msgid "Search for service delegations rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" - -msgid "Remove member from a named service delegation rule." -msgstr "" - -msgid "principal to remove" -msgstr "" - -msgid "Remove target from a named service delegation rule." -msgstr "" - -msgid "service delegation targets to remove" -msgstr "" - -msgid "Display information about a named service delegation rule." -msgstr "" - -msgid "Create a new service delegation target." -msgstr "" - -msgid "Add member to a named service delegation target." -msgstr "" - -msgid "Delete service delegation target." -msgstr "" - -msgid "Search for service delegation target." -msgstr "" - -msgid "Remove member from a named service delegation target." -msgstr "" - -msgid "Display information about a named service delegation target." -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" - -msgid "Activate a stage user." -msgstr "" - -msgid "Add a new stage user." -msgstr "" - -msgid "Create Stage user in from a delete user" -msgstr "" - -msgid "Delete a stage user." -msgstr "" - -msgid "Search for stage users." -msgstr "" - -msgid "Search for stage users with these member of groups." -msgstr "" - -msgid "Search for stage users without these member of groups." -msgstr "" - -msgid "Search for stage users with these member of netgroups." -msgstr "" - -msgid "Search for stage users without these member of netgroups." -msgstr "" - -msgid "Search for stage users with these member of roles." -msgstr "" - -msgid "Search for stage users without these member of roles." -msgstr "" - -msgid "Search for stage users with these member of HBAC rules." -msgstr "" - -msgid "Search for stage users without these member of HBAC rules." -msgstr "" - -msgid "Search for stage users with these member of sudo rules." -msgstr "" - -msgid "Search for stage users without these member of sudo rules." -msgstr "" - -msgid "Modify a stage user." -msgstr "" - -msgid "Rename the stage user object" -msgstr "" - -msgid "Display information about a stage user." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" - -msgid "Segment name" -msgstr "" - -msgid "Arbitrary string identifying the segment" -msgstr "" - -msgid "Left node" -msgstr "" - -msgid "Left replication node - an IPA server" -msgstr "" - -msgid "Right node" -msgstr "" - -msgid "Right replication node - an IPA server" -msgstr "" - -msgid "Connectivity" -msgstr "" - -msgid "Direction of replication between left and right replication node" -msgstr "" - -msgid "Attributes to strip" -msgstr "" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" - -msgid "Attributes to replicate" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" - -msgid "Attributes for total update" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" - -msgid "Session timeout" -msgstr "" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" - -msgid "Replication agreement enabled" -msgstr "" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" - -msgid "Suffix name" -msgstr "" - -msgid "LDAP suffix to be managed" -msgstr "" - -msgid "Add a new segment." -msgstr "" - -msgid "Delete a segment." -msgstr "" - -msgid "Search for topology segments." -msgstr "" - -msgid "Modify a segment." -msgstr "" - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" - -msgid "Initialize left node" -msgstr "" - -msgid "Initialize right node" -msgstr "" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "" - -msgid "Display a segment." -msgstr "" - -msgid "Add a new topology suffix to be managed." -msgstr "" - -msgid "Delete a topology suffix." -msgstr "" - -msgid "Search for topology suffices." -msgstr "" - -msgid "Modify a topology suffix." -msgstr "" - -msgid "Show managed suffix." -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "Preserved user" -msgstr "" - -msgid "Add one or more certificates to the user entry" -msgstr "" - -msgid "Remove one or more certificates to the user entry" -msgstr "" - -msgid "Move deleted user into staged area" -msgstr "" - -msgid "Undelete a delete user account." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "Vault name" -msgstr "" - -msgid "Vault description" -msgstr "" - -msgid "Vault type" -msgstr "" - -msgid "Salt" -msgstr "" - -msgid "Vault salt" -msgstr "" - -msgid "Public key" -msgstr "" - -msgid "Vault public key" -msgstr "" - -msgid "Owner users" -msgstr "" - -msgid "Owner groups" -msgstr "" - -msgid "Owner services" -msgstr "" - -msgid "Failed owners" -msgstr "" - -msgid "Vault service" -msgstr "" - -msgid "Shared vault" -msgstr "" - -msgid "Vault user" -msgstr "" - -msgid "Transport Certificate" -msgstr "" - -msgid "Service name of the service vault" -msgstr "" - -msgid "Username of the user vault" -msgstr "" - -msgid "Add members to a vault." -msgstr "" - -msgid "Add owners to a vault." -msgstr "" - -msgid "owner user" -msgstr "" - -msgid "owner group" -msgstr "" - -msgid "owner service" -msgstr "" - -msgid "Owners that could not be added" -msgstr "" - -msgid "Number of owners added" -msgstr "" - -msgid "Session key wrapped with transport certificate" -msgstr "" - -msgid "Vault data encrypted with session key" -msgstr "" - -msgid "Nonce" -msgstr "" - -msgid "Delete a vault." -msgstr "" - -msgid "Search for vaults." -msgstr "" - -msgid "List all service vaults" -msgstr "" - -msgid "List all user vaults" -msgstr "" - -msgid "Remove members from a vault." -msgstr "" - -msgid "Remove owners from a vault." -msgstr "" - -msgid "Owners that could not be removed" -msgstr "" - -msgid "Number of owners removed" -msgstr "" - -msgid "Display information about a vault." -msgstr "" - -msgid "Show vault configuration." -msgstr "" - -msgid "Output file to store the transport certificate" -msgstr "" - -msgid "Add owners to a vault container." -msgstr "" - -msgid "Delete a vault container." -msgstr "" - -msgid "Remove owners from a vault container." -msgstr "" - -msgid "Display information about a vault container." -msgstr "" - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "" - -msgid "Hostname (FQDN)" -msgstr "" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Managed suffixes" -msgstr "" - -msgid "Check connection to remote IPA server." -msgstr "" - -msgid "Remote server name" -msgstr "" - -msgid "Remote IPA server hostname" -msgstr "" - -msgid "suffix" -msgstr "" - -msgid "Search for servers with these managed suffixes." -msgstr "" - -msgid "Search for servers without these managed suffixes." -msgstr "" - -msgid "Add a manager to the stage user entry" -msgstr "" - -msgid "Remove a manager to the stage user entry" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -msgid "Managed LDAP suffix DN" -msgstr "" - -msgid "Search for topology suffixes." -msgstr "" - -msgid "Add a manager to the user entry" -msgstr "" - -msgid "Remove a manager to the user entry" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Comma-separated list of attributes" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" - -msgid "DNS class" -msgstr "" - -msgid "Comma-separated list of raw A records" -msgstr "" - -msgid "Comma-separated list of raw AAAA records" -msgstr "" - -msgid "Comma-separated list of raw A6 records" -msgstr "" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "" - -msgid "Comma-separated list of raw APL records" -msgstr "" - -msgid "Comma-separated list of raw CERT records" -msgstr "" - -msgid "Comma-separated list of raw CNAME records" -msgstr "" - -msgid "Comma-separated list of raw DHCID records" -msgstr "" - -msgid "Comma-separated list of raw DLV records" -msgstr "" - -msgid "Comma-separated list of raw DNAME records" -msgstr "" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "" - -msgid "Comma-separated list of raw DS records" -msgstr "" - -msgid "Comma-separated list of raw HIP records" -msgstr "" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "" - -msgid "Comma-separated list of raw KEY records" -msgstr "" - -msgid "KEY Flags" -msgstr "" - -msgid "KEY Protocol" -msgstr "" - -msgid "Protocol" -msgstr "" - -msgid "KEY Algorithm" -msgstr "" - -msgid "KEY Public Key" -msgstr "" - -msgid "Public Key" -msgstr "" - -msgid "Comma-separated list of raw KX records" -msgstr "" - -msgid "Comma-separated list of raw LOC records" -msgstr "" - -msgid "Comma-separated list of raw MX records" -msgstr "" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "" - -msgid "Comma-separated list of raw NS records" -msgstr "" - -msgid "Comma-separated list of raw NSEC records" -msgstr "" - -msgid "NSEC Next Domain Name" -msgstr "" - -msgid "Next Domain Name" -msgstr "" - -msgid "NSEC Type Map" -msgstr "" - -msgid "Type Map" -msgstr "" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "" - -msgid "Comma-separated list of raw PTR records" -msgstr "" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "" - -msgid "RRSIG Type Covered" -msgstr "" - -msgid "Type Covered" -msgstr "" - -msgid "RRSIG Algorithm" -msgstr "" - -msgid "RRSIG Labels" -msgstr "" - -msgid "Labels" -msgstr "" - -msgid "RRSIG Original TTL" -msgstr "" - -msgid "Original TTL" -msgstr "" - -msgid "RRSIG Signature Expiration" -msgstr "" - -msgid "Signature Expiration" -msgstr "" - -msgid "RRSIG Signature Inception" -msgstr "" - -msgid "Signature Inception" -msgstr "" - -msgid "RRSIG Key Tag" -msgstr "" - -msgid "RRSIG Signer's Name" -msgstr "" - -msgid "Signer's Name" -msgstr "" - -msgid "RRSIG Signature" -msgstr "" - -msgid "Signature" -msgstr "" - -msgid "Comma-separated list of raw RP records" -msgstr "" - -msgid "Comma-separated list of raw SIG records" -msgstr "" - -msgid "SIG Type Covered" -msgstr "" - -msgid "SIG Algorithm" -msgstr "" - -msgid "SIG Labels" -msgstr "" - -msgid "SIG Original TTL" -msgstr "" - -msgid "SIG Signature Expiration" -msgstr "" - -msgid "SIG Signature Inception" -msgstr "" - -msgid "SIG Key Tag" -msgstr "" - -msgid "SIG Signer's Name" -msgstr "" - -msgid "SIG Signature" -msgstr "" - -msgid "Comma-separated list of raw SPF records" -msgstr "" - -msgid "Comma-separated list of raw SRV records" -msgstr "" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "" - -msgid "Comma-separated list of raw TA records" -msgstr "" - -msgid "Comma-separated list of raw TKEY records" -msgstr "" - -msgid "Comma-separated list of raw TSIG records" -msgstr "" - -msgid "Comma-separated list of raw TXT records" -msgstr "" - -msgid "SOA time to live" -msgstr "" - -msgid "SOA record time to live" -msgstr "" - -msgid "SOA class" -msgstr "" - -msgid "SOA record class" -msgstr "" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" - -msgid "Consume an entitlement." -msgstr "" - -msgid "Quantity" -msgstr "" - -msgid "Search for entitlement accounts." -msgstr "" - -msgid "Retrieve the entitlement certs." -msgstr "" - -msgid "Import an entitlement certificate." -msgstr "" - -msgid "UUID" -msgstr "" - -msgid "Enrollment UUID" -msgstr "" - -msgid "Register to the entitlement system." -msgstr "" - -msgid "Username" -msgstr "" - -msgid "Enrollment UUID (not implemented)" -msgstr "" - -msgid "Registration password" -msgstr "" - -msgid "Display current entitlements." -msgstr "" - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" - -msgid "comma-separated list of users to add" -msgstr "" - -msgid "comma-separated list of groups to add" -msgstr "" - -msgid "comma-separated list of users to remove" -msgstr "" - -msgid "comma-separated list of groups to remove" -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Source host category" -msgstr "" - -msgid "Source host category the rule applies to" -msgstr "" - -msgid "Source Hosts" -msgstr "" - -msgid "Source Host Groups" -msgstr "" - -msgid "comma-separated list of hosts to add" -msgstr "" - -msgid "comma-separated list of host groups to add" -msgstr "" - -msgid "comma-separated list of HBAC services to add" -msgstr "" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "" - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "" - -msgid "comma-separated list of hosts to remove" -msgstr "" - -msgid "comma-separated list of host groups to remove" -msgstr "" - -msgid "comma-separated list of HBAC services to remove" -msgstr "" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" - -msgid "Source host" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "comma-separated list of netgroups to add" -msgstr "" - -msgid "comma-separated list of netgroups to remove" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" - -msgid "Target members of a group" -msgstr "" - -msgid "User group to apply permissions to" -msgstr "" - -msgid "comma-separated list of privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI" -msgstr "" - -msgid "Permission type" -msgstr "" - -msgid "comma-separated list of privileges to remove" -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "comma-separated list of roles to add" -msgstr "" - -msgid "comma-separated list of permissions" -msgstr "" - -msgid "comma-separated list of roles to remove" -msgstr "" - -msgid "comma-separated list of privileges" -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "comma-separated list of sudo commands to add" -msgstr "" - -msgid "comma-separated list of sudo commands to remove" -msgstr "" - -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" - -msgid "comma-separated list of sudo command groups to add" -msgstr "" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "" - -msgid "Failed members" -msgstr "" - -msgid "Failed source hosts/hostgroups" -msgstr "" - -msgid "Failed hosts/hostgroups" -msgstr "" - -msgid "Failed users/groups" -msgstr "" - -msgid "Failed service/service groups" -msgstr "" - -msgid "Failed to remove" -msgstr "" - -msgid "Failed RunAs" -msgstr "" - -msgid "Failed RunAsGroup" -msgstr "" - -msgid "Failed profiles" -msgstr "" - -msgid "Failed CAs" -msgstr "" - -msgid "Failed member manager" -msgstr "" - -msgid "Failed managedby" -msgstr "" - -msgid "Failed allowed to retrieve keytab" -msgstr "" - -msgid "Failed allowed to create keytab" -msgstr "" - -msgid "Failed targets" -msgstr "" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "" - -msgid "an internal error has occurred" -msgstr "" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "" - -msgid "did not receive Kerberos credentials" -msgstr "" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -msgid "No credentials cache found" -msgstr "" - -msgid "Ticket expired" -msgstr "" - -msgid "Credentials cache permissions incorrect" -msgstr "" - -msgid "Bad format in credentials cache" -msgstr "" - -msgid "Cannot resolve KDC for requested realm" -msgstr "" - -msgid "Session error" -msgstr "" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#, python-format -msgid "'%(name)s' is required" -msgstr "" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - -msgid "Passwords do not match" -msgstr "" - -msgid "Command not implemented" -msgstr "" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -#, python-format -msgid "%(reason)s" -msgstr "" - -msgid "This entry already exists" -msgstr "" - -msgid "You must enroll a host in order to create a host service" -msgstr "" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" - -msgid "This command requires root access" -msgstr "" - -msgid "This is already a posix group" -msgstr "" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -msgid "This entry is already enabled" -msgstr "" - -msgid "This entry is already disabled" -msgstr "" - -msgid "This entry cannot be enabled or disabled" -msgstr "" - -msgid "This entry is not a member" -msgstr "" - -msgid "A group may not be a member of itself" -msgstr "" - -msgid "This entry is already a member" -msgstr "" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "" - -msgid "A group may not be added as a member of itself" -msgstr "" - -msgid "The default users group cannot be removed" -msgstr "" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -msgid "This group already allows external members" -msgstr "" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, fuzzy, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "request failed with HTTP status %d" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "change collided with another change" -msgstr "" - -msgid "no modifications to be performed" -msgstr "" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "" - -msgid "limits exceeded for this query" -msgstr "" - -#, python-format -msgid "%(info)s" -msgstr "" - -msgid "modifying primary key is not allowed" -msgstr "" - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "" - -msgid "Already registered" -msgstr "" - -msgid "Not registered yet" -msgstr "" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, python-format -msgid "%(exception)s" -msgstr "" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - #, python-format msgid "%(count)d variables" msgstr "%(count)d variables" -#, fuzzy, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "A dictionary representing an LDAP entry" -msgstr "" - -msgid "A list of LDAP entries" -msgstr "" - -msgid "All commands should at least have a result" -msgstr "" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "" - -msgid "Passwords do not match!" -msgstr "" - -msgid "No matching entries found" -msgstr "" - -msgid "Topic or Command" -msgstr "" - -msgid "The topic or command name." -msgstr "" - -msgid "Topic commands:" -msgstr "" - -msgid "To get command help, use:" -msgstr "" - -msgid " ipa --help" -msgstr "" - -msgid "Command name" -msgstr "" - -msgid "Positional arguments" -msgstr "" - -#, python-format -msgid "Same as --%s" -msgstr "" - -msgid "Deprecated options" -msgstr "" - -msgid "No file to read" -msgstr "" - -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - #, python-format msgid "%(filename)s: file not found" msgstr "%(filename)s: file not found" -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - -msgid "Filename is empty" -msgstr "" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -msgid "invalid domain name" -msgstr "" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "incorrect type" -msgstr "" - -msgid "Only one value is allowed" -msgstr "" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "" - -msgid "must be an integer" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -msgid "must be a decimal number" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -msgid "must be binary data" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -msgid "must be a certificate" -msgstr "" - -msgid "must be a certificate signing request" -msgstr "" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "" - -msgid "Leading and trailing spaces are not allowed" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "" - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "" - -#, python-format -msgid "must be '%(value)s'" -msgstr "" - -#, python-format -msgid "must be one of %(values)s" -msgstr "" - -msgid "must be datetime value" -msgstr "" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -msgid "must be DNS name" -msgstr "" - -msgid "must be absolute" -msgstr "" - -msgid "must be relative" -msgstr "" - -msgid "must be dictionary" -msgstr "" - -msgid "must be Kerberos principal" -msgstr "" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -msgid "Service principal is required" -msgstr "" - -msgid "must be at least 0" -msgstr "" - -msgid "invalid valid hex" -msgstr "" - -msgid "invalid serial number 0" -msgstr "" - #, python-format msgid "Retrieving CA cert chain failed: %s" msgstr "Retrieving CA cert chain failed: %s" #, python-format -msgid "request failed with HTTP status %d" -msgstr "request failed with HTTP status %d" +msgid "Retrieving CA status failed with status %d" +msgstr "Retrieving CA status failed with status %d" #, python-format msgid "Retrieving CA status failed: %s" msgstr "Retrieving CA status failed: %s" -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "Retrieving CA status failed with status %d" +msgid "Show environment variables." +msgstr "Show environment variables." #, python-format msgid "objectclass %s not found" msgstr "objectclass %s not found" -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "Failed to authenticate to CA REST API" -msgstr "" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "" - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -msgid "Automount Location" -msgstr "" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "" - -msgid "User Group" -msgstr "" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "host groups" -msgstr "" - -msgid "Host Group" -msgstr "" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" - -msgid "hostgroup" -msgstr "" - -msgid "privileged hostgroup" -msgstr "" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "Auto private groups" -msgstr "" - -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "" - -msgid "locations" -msgstr "" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -msgid "Location name" -msgstr "" - -msgid "IPA location name" -msgstr "" - -msgid "IPA Location description" -msgstr "" - -msgid "Servers" -msgstr "" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -msgid "Delete an IPA location." -msgstr "" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -msgid "IPA Server" -msgstr "" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -msgid "netgroups" -msgstr "" - -msgid "Netgroups" -msgstr "" - -msgid "Netgroup" -msgstr "" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" -msgstr "" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" -msgstr "" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "Role" -msgstr "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -msgid "Self Service Permissions" -msgstr "" - -msgid "Self Service Permission" -msgstr "" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "IPA role name" -msgstr "" - -#, fuzzy, python-brace-format -msgid "{role}: role not found" -msgstr "%(filename)s: file not found" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -msgid "Subordinate id description" -msgstr "" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -msgid "SubUID range size" -msgstr "" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -msgid "SubGID range size" -msgstr "" - -msgid "Subordinate group ID count" -msgstr "" - -#, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "" - -#, python-format -msgid "'%(dn)s is not a valid user" -msgstr "" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -msgid "Add a new subordinate id." -msgstr "" - -#, python-format -msgid "Added subordinate id \"%(value)s\"" -msgstr "" - -msgid "Delete a subordinate id." -msgstr "" - -#, python-format -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "" - -msgid "Modify a subordinate id." -msgstr "" - -#, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "" - -msgid "Search for subordinate id." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "Display information about a subordinate id." -msgstr "" - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -msgid "sudo command" -msgstr "" - -msgid "sudo commands" -msgstr "" - -msgid "Sudo Commands" -msgstr "" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -msgid "servers" -msgstr "" - -msgid "IPA Servers" -msgstr "" - -msgid "Server location" -msgstr "" - -msgid "Service weight" -msgstr "" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -msgid "Server state" -msgstr "" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "A list of ACI values" -msgstr "" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, fuzzy, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(filename)s: file not found" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Auto member rule: %s not found!" -msgstr "objectclass %s not found" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, fuzzy, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(filename)s: file not found" - -#, fuzzy, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(filename)s: file not found" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -msgstr "" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -msgid "" -"\n" -"Managed permissions\n" -msgstr "" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "must be enclosed in parentheses" -msgstr "" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, python-format -msgid "Deprecated; use %s" -msgstr "" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, fuzzy, python-format -msgid "Entry %s not found" -msgstr "objectclass %s not found" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, python-format -msgid "Entry %s does not exist" -msgstr "" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -msgid "Help topic" -msgstr "" - -msgid "Version" -msgstr "" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -msgid "Method name" -msgstr "" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -#, fuzzy, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "%(filename)s: file not found" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -msgid "CLI name" -msgstr "" - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, fuzzy, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "objectclass %s not found" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, fuzzy, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(filename)s: file not found" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "Trust direction" -msgstr "" - -msgid "Trust type" -msgstr "" - -msgid "Trust status" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "trust configuration" -msgstr "" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -msgid "Vault configuration" -msgstr "" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -msgid "Key wrapping algorithm" -msgstr "" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." -msgstr "" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "Principal alias" -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -msgid "External IdP configuration" -msgstr "" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "Certificate mapping data" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -msgid "Issuer" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -msgid "users cannot be added when user category='all'" -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "" - -#, python-format -msgid "%i services added." -msgstr "" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -msgid "User logins" -msgstr "" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "must be at least 10" -msgstr "" - -msgid "configuration options" -msgstr "" - -msgid "Configuration" -msgstr "" - -msgid "Maximum hostname length" -msgstr "" - -msgid "Enable adding subids to new users" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -msgid "IPA DNS servers" -msgstr "" - -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Setup SID configuration" -msgstr "" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -msgid "Add SIDs" -msgstr "" - -msgid "Add SIDs for existing users and groups" -msgstr "" - -msgid "NetBIOS name of the IPA domain" -msgstr "" - -msgid "Empty domain is not allowed" -msgstr "" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "not allowed to enable SID generation" -msgstr "" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -msgid "Failed to call DBus" -msgstr "" - -msgid "Configuration of SID failed. See details in the error log" -msgstr "" - -msgid "The group doesn't exist" -msgstr "" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, python-format -msgid "%s Record" -msgstr "" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -msgid "Priority (order)" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -msgid "Only one zone type is allowed per zone name" -msgstr "" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -msgid "Default time to live" -msgstr "" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "" - -msgid "is required" -msgstr "" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#, fuzzy, python-format -msgid "Host '%(host)s' not found" -msgstr "objectclass %s not found" - -msgid "DNS configuration options" -msgstr "" - -msgid "DNS Global Configuration" -msgstr "" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -msgid "Result of the command" -msgstr "" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "Serial Number" -msgstr "" - -msgid "Serial Number (hex)" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" - -msgid "Invalid URI: not an https scheme" -msgstr "" - -msgid "Invalid URI: missing netloc" -msgstr "" - -msgid "Identity Provider server" -msgstr "" - -msgid "Identity Provider servers" -msgstr "" - -msgid "Identity Provider server name" -msgstr "" - -msgid "Authorization URI" -msgstr "" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -msgid "Token URI" -msgstr "" - -msgid "Token endpoint" -msgstr "" - -msgid "User info URI" -msgstr "" - -msgid "User information endpoint" -msgstr "" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -msgid "Client identifier" -msgstr "" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -msgid "Add a new Identity Provider server." -msgstr "" - -#, python-format -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -msgid "Base URL" -msgstr "" - -msgid "Base URL for IdP provider templates" -msgstr "" - -msgid "unknown provider" -msgstr "" - -msgid "value is missing" -msgstr "" - -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "" - -msgid "Delete an Identity Provider server." -msgstr "" - -#, python-format -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "Modify an Identity Provider server." -msgstr "" - -#, python-format -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "Search for Identity Provider servers." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "Display information about an Identity Provider server." -msgstr "" - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Apply" -msgstr "" - -msgid "Rebuild auto membership" -msgstr "" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -msgid "Actions" -msgstr "" - -msgid "Add" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -msgid "Direct Membership" -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -msgid "No entries." -msgstr "" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -msgid "Remove" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -msgid "Show Results" -msgstr "" - -msgid "Authentication indicators" -msgstr "" - -msgid "Authentication indicator" -msgstr "" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -msgid "RADIUS" -msgstr "" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "External Identity Provider" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "" - -msgid "Activate" -msgstr "" - -msgid "Add and Add Another" -msgstr "" - -msgid "Add and Close" -msgstr "" - -msgid "Add and Edit" -msgstr "" - -msgid "Add Many" -msgstr "" - -msgid "Back" -msgstr "" - -msgid "Cancel" -msgstr "" - -msgid "Clear" -msgstr "" - -msgid "Clear all fields on the page." -msgstr "" - -msgid "Close" -msgstr "" - -msgid "Disable" -msgstr "" - -msgid "Download" -msgstr "" - -msgid "Download certificate as PEM formatted file." -msgstr "" - -msgid "Edit" -msgstr "" - -msgid "Enable" -msgstr "" - -msgid "Find" -msgstr "" - -msgid "Get" -msgstr "" - -msgid "Hide" -msgstr "" - -msgid "Issue" -msgstr "" - -msgid "Match" -msgstr "" - -msgid "Match users according to certificate." -msgstr "" - -msgid "Migrate" -msgstr "" - -msgid "OK" -msgstr "" - -msgid "Refresh" -msgstr "" - -msgid "Reload current settings from the server." -msgstr "" - -msgid "Delete" -msgstr "" - -msgid "Remove hold" -msgstr "" - -msgid "Reset" -msgstr "" - -msgid "Reset Password" -msgstr "" - -msgid "Reset Password and Log in" -msgstr "" - -msgid "Restore" -msgstr "" - -msgid "Retry" -msgstr "" - -msgid "Revert" -msgstr "" - -msgid "Revoke" -msgstr "" - -msgid "Save" -msgstr "" - -msgid "Set" -msgstr "" - -msgid "Show" -msgstr "" - -msgid "Stage" -msgstr "" - -msgid "Update" -msgstr "" - -msgid "View" -msgstr "" - -msgid "Customization" -msgstr "" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "" - -msgid "Expand All" -msgstr "" - -msgid "General" -msgstr "" - -msgid "Identity Settings" -msgstr "" - -msgid "Record Settings" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -msgid "Back to Top" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -msgid "Add custom value" -msgstr "" - -msgid "Available" -msgstr "" - -msgid "Some operations failed." -msgstr "" - -msgid "Operations Error" -msgstr "" - -msgid "Confirmation" -msgstr "" - -msgid "Custom value" -msgstr "" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -msgid "Unsaved Changes" -msgstr "" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "" - -msgid "Hide details" -msgstr "" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -msgid "Redirection" -msgstr "" - -msgid "Select entries to be removed." -msgstr "" - -msgid "Result" -msgstr "" - -msgid "Show details" -msgstr "" - -msgid "Success" -msgstr "" - -msgid "Validation error" -msgstr "" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "" - -msgid "HTTP Error" -msgstr "" - -msgid "Internal Error" -msgstr "" - -msgid "IPA Error" -msgstr "" - -msgid "No response" -msgstr "" - -msgid "Unknown Error" -msgstr "" - -msgid "URL" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -msgid "Settings" -msgstr "" - -msgid "Search" -msgstr "" - -msgid "False" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Allowed to create keytab" -msgstr "" - -msgid "Allowed to retrieve keytab" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Add Kerberos Principal Alias" -msgstr "" - -msgid "New kerberos principal alias" -msgstr "" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "" - -msgid "Authenticating" -msgstr "" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -msgid "Kerberos Principal you entered is expired" -msgstr "" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -msgid "Log In Using Certificate" -msgstr "" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "" - -msgid "Synchronizing" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -msgid "number of passwords" -msgstr "" - -msgid "seconds" -msgstr "" - -msgid "Migrating" -msgstr "" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -msgid "Password migration was not successful" -msgstr "" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -msgid "Password migration was successful" -msgstr "" - -msgid "Attribute" -msgstr "" - -msgid "Add delegation" -msgstr "" - -msgid "Remove delegations" -msgstr "" - -msgid "Add permission" -msgstr "" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -msgid "Remove permissions" -msgstr "" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -msgid "Remove privileges" -msgstr "" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -msgid "Role Settings" -msgstr "" - -msgid "Add role" -msgstr "" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -msgid "Remove roles" -msgstr "" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -msgid "Add self service permission" -msgstr "" - -msgid "Remove self service permissions" -msgstr "" - -msgid "Add rule" -msgstr "" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to change default group?" -msgstr "" - -msgid "Default host group" -msgstr "" - -msgid "Default user group" -msgstr "" - -msgid "Exclusive" -msgstr "" - -msgid "Expression" -msgstr "" - -msgid "Host group rule" -msgstr "" - -msgid "Host group rules" -msgstr "" - -msgid "Inclusive" -msgstr "" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -msgid "User group rule" -msgstr "" - -msgid "User group rules" -msgstr "" - -msgid "Add automount key" -msgstr "" - -msgid "Remove automount keys" -msgstr "" - -msgid "Add automount location" -msgstr "" - -msgid "Automount Location Settings" -msgstr "" - -msgid "Remove automount locations" -msgstr "" - -msgid "Add automount map" -msgstr "" - -msgid "Map Type" -msgstr "" - -msgid "Direct" -msgstr "" - -msgid "Indirect" -msgstr "" - -msgid "Remove automount maps" -msgstr "" - -msgid "Add certificate authority" -msgstr "" - -msgid "Remove certificate authorities" -msgstr "" - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -msgid "All" -msgstr "" - -msgid "Any CA" -msgstr "" - -msgid "Any Host" -msgstr "" - -msgid "Any Service" -msgstr "" - -msgid "Any Profile" -msgstr "" - -msgid "Anyone" -msgstr "" - -msgid "Rule status" -msgstr "" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -msgid "Remove CA ACLs" -msgstr "" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -msgid "Specified CAs" -msgstr "" - -msgid "Specified Hosts and Groups" -msgstr "" - -msgid "Specified Profiles" -msgstr "" - -msgid "Specified Services and Groups" -msgstr "" - -msgid "Specified Users and Groups" -msgstr "" - -msgid "Permitted to have certificates issued" -msgstr "" - -msgid "Remove certificate profiles" -msgstr "" - -msgid "AA Compromise" -msgstr "" - -msgid "Add principal" -msgstr "" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" - -msgid "Certificates" -msgstr "" - -msgid "Certificate Hold" -msgstr "" - -msgid "Cessation of Operation" -msgstr "" - -msgid "Common Name" -msgstr "" - -msgid "the certificate with serial number " -msgstr "" - -msgid "Expires On" -msgstr "" - -msgid "Issued on from" -msgstr "" - -msgid "Issued on to" -msgstr "" - -msgid "Maximum serial number" -msgstr "" - -msgid "Minimum serial number" -msgstr "" - -msgid "Revoked on from" -msgstr "" - -msgid "Revoked on to" -msgstr "" - -msgid "Valid not after from" -msgstr "" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -msgid "Fingerprints" -msgstr "" - -msgid "Get Certificate" -msgstr "" - -msgid "Certificate Hold Removed" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -msgid "Issue new certificate" -msgstr "" - -msgid "Issued By" -msgstr "" - -msgid "Issued On" -msgstr "" - -msgid "Issued To" -msgstr "" - -msgid "Key Compromise" -msgstr "" - -msgid "No Valid Certificate" -msgstr "" - -msgid "New Certificate" -msgstr "" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -msgid "Note" -msgstr "" - -msgid "Organizational Unit" -msgstr "" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -msgid "Privilege Withdrawn" -msgstr "" - -msgid "Reason for Revocation" -msgstr "" - -msgid "Remove certificate hold" -msgstr "" - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -msgid "Certificate requested" -msgstr "" - -msgid "Revoke certificate" -msgstr "" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -msgid "Certificate Revoked" -msgstr "" - -msgid "REVOKED" -msgstr "" - -msgid "SHA1 Fingerprint" -msgstr "" - -msgid "SHA256 Fingerprint" -msgstr "" - -msgid "Status" -msgstr "" - -msgid "Superseded" -msgstr "" - -msgid "Unspecified" -msgstr "" - -msgid "Valid Certificate Present" -msgstr "" - -msgid "Valid from" -msgstr "" - -msgid "Valid to" -msgstr "" - -msgid "Validity" -msgstr "" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -msgid "View Certificate" -msgstr "" - -msgid "Certificate Data" -msgstr "" - -msgid "Certificate For Match" -msgstr "" - -msgid "Certificate Mapping Match" -msgstr "" - -msgid "Matched Users" -msgstr "" - -msgid "User Login" -msgstr "" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -msgid "Configuration string" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -msgid "Remove certificate mapping data" -msgstr "" - -msgid "Issuer and subject" -msgstr "" - -msgid "Remove certificate identity mapping rules" -msgstr "" - -msgid "Group Options" -msgstr "" - -msgid "Search Options" -msgstr "" - -msgid "SELinux Options" -msgstr "" - -msgid "Server Options" -msgstr "" - -msgid "Service Options" -msgstr "" - -msgid "User Options" -msgstr "" - -msgid "Forward first" -msgstr "" - -msgid "Forwarding disabled" -msgstr "" - -msgid "Forward only" -msgstr "" - -msgid "Options" -msgstr "" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -msgid "Other Record Types" -msgstr "" - -msgid "Address not valid, can't redirect" -msgstr "" - -msgid "Create dns record" -msgstr "" - -msgid "Creating record." -msgstr "" - -msgid "Record creation failed." -msgstr "" - -msgid "Checking if record exists." -msgstr "" - -msgid "Record not found." -msgstr "" - -msgid "Redirection to PTR record" -msgstr "" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -msgid "Target reverse zone not found." -msgstr "" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -msgid "Standard Record Types" -msgstr "" - -msgid "Records for DNS Zone" -msgstr "" - -msgid "Record Type" -msgstr "" - -msgid "Add DNS zone" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -msgid "DNS Zone Settings" -msgstr "" - -msgid "Remove DNS zones" -msgstr "" - -msgid "Remove Permission" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Level" -msgstr "" - -msgid "Set Domain Level" -msgstr "" - -msgid "Add user group" -msgstr "" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -msgid "Group Settings" -msgstr "" - -msgid "External" -msgstr "" - -msgid "Groups" -msgstr "" - -msgid "Group categories" -msgstr "" - -msgid "Change to external group" -msgstr "" - -msgid "Change to POSIX group" -msgstr "" - -msgid "Non-POSIX" -msgstr "" - -msgid "POSIX" -msgstr "" - -msgid "Remove user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -msgid "Group Type" -msgstr "" - -msgid "Add HBAC rule" -msgstr "" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -msgid "Accessing" -msgstr "" - -msgid "Remove HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -msgid "Via Service" -msgstr "" - -msgid "Who" -msgstr "" - -msgid "Add HBAC service" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -msgid "Remove HBAC services" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -msgid "Add HBAC service group" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -msgid "Remove HBAC service groups" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -msgid "Access Denied" -msgstr "" - -msgid "Access Granted" -msgstr "" - -msgid "Include Disabled" -msgstr "" - -msgid "Include Enabled" -msgstr "" - -msgid "HBAC Test" -msgstr "" - -msgid "Matched" -msgstr "" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" - -msgid "Rules" -msgstr "" - -msgid "Run Test" -msgstr "" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -msgid "Unmatched" -msgstr "" - -msgid "Add host" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -msgid "Host Certificate" -msgstr "" - -msgid "Host Name" -msgstr "" - -msgid "Delete Key, Unprovision" -msgstr "" - -msgid "Host Settings" -msgstr "" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -msgid "Generate OTP" -msgstr "" - -msgid "Generated OTP" -msgstr "" - -msgid "Kerberos Key" -msgstr "" - -msgid "Kerberos Key Not Present" -msgstr "" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -msgid "One-Time Password" -msgstr "" - -msgid "One-Time Password Not Present" -msgstr "" - -msgid "One-Time Password Present" -msgstr "" - -msgid "Reset OTP" -msgstr "" - -msgid "Reset One-Time Password" -msgstr "" - -msgid "Set OTP" -msgstr "" - -msgid "OTP set" -msgstr "" - -msgid "Set One-Time Password" -msgstr "" - -msgid "Remove hosts" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -msgid "Unprovision" -msgstr "" - -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -msgid "Add host group" -msgstr "" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -msgid "Host Group Settings" -msgstr "" - -msgid "Remove host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -msgid "Identity provider details" -msgstr "" - -msgid "Verify secret" -msgstr "" - -msgid "User to override" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -msgid "Profile" -msgstr "" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -msgid "Enter trusted group name." -msgstr "" - -msgid "Add ID view" -msgstr "" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -msgid "Apply to host groups" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -msgid "Remove ID views" -msgstr "" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -msgid "Un-apply from host groups" -msgstr "" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -msgid "Un-apply" -msgstr "" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "Add netgroup" -msgstr "" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -msgid "Netgroup Settings" -msgstr "" - -msgid "Remove netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -msgid "Add OTP token" -msgstr "" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -msgid "Configure your token" -msgstr "" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -msgid "OTP Token Settings" -msgstr "" - -msgid "Disable token" -msgstr "" - -msgid "Enable token" -msgstr "" - -msgid "Remove OTP tokens" -msgstr "" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "" - -msgid "Show configuration uri" -msgstr "" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -msgid "Add Custom Attribute" -msgstr "" - -msgid "Permission settings" -msgstr "" - -msgid "Attribute breakdown" -msgstr "" - -msgid "Privilege Settings" -msgstr "" - -msgid "Public key:" -msgstr "" - -msgid "Set public key" -msgstr "" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -msgid "Add password policy" -msgstr "" - -msgid "Password Policy" -msgstr "" - -msgid "Remove password policies" -msgstr "" - -msgid "Add ID range" -msgstr "" - -msgid "Range Settings" -msgstr "" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -msgid "Domain SID" -msgstr "" - -msgid "Secondary RID base" -msgstr "" - -msgid "Remove ID ranges" -msgstr "" - -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -msgid "Detect" -msgstr "" - -msgid "Local domain" -msgstr "" - -msgid "IPA trust" -msgstr "" - -msgid "Active Directory winsync" -msgstr "" - -msgid "Add RADIUS server" -msgstr "" - -msgid "RADIUS Proxy Server Settings" -msgstr "" - -msgid "Remove RADIUS servers" -msgstr "" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -msgid "Force Update" -msgstr "" - -msgid "Add SELinux user map" -msgstr "" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -msgid "Server Roles" -msgstr "" - -msgid "Server Role" -msgstr "" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -msgid "Delete Server" -msgstr "" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -msgid "Add service" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -msgid "Service Certificate" -msgstr "" - -msgid "Service Settings" -msgstr "" - -msgid "Provisioning" -msgstr "" - -msgid "Remove services" -msgstr "" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -msgid "Unprovisioning service" -msgstr "" - -msgid "Service unprovisioned" -msgstr "" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "" - -msgid "SSH public keys" -msgstr "" - -msgid "SSH public key:" -msgstr "" - -msgid "Set SSH key" -msgstr "" - -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" - -msgid "Add stage user" -msgstr "" - -msgid "Stage users" -msgstr "" - -msgid "Preserved users" -msgstr "" - -msgid "Remove preserved users" -msgstr "" - -msgid "Remove stage users" -msgstr "" - -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -msgid "User categories" -msgstr "" - -msgid "Add subid" -msgstr "" - -msgid "Assigned subids" -msgstr "" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -msgid "Add sudo command" -msgstr "" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -msgid "Remove sudo commands" -msgstr "" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -msgid "Add sudo command group" -msgstr "" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -msgid "Remove sudo command groups" -msgstr "" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -msgid "Add sudo rule" -msgstr "" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "" - -msgid "Any Command" -msgstr "" - -msgid "Any Group" -msgstr "" - -msgid "Run Commands" -msgstr "" - -msgid "Deny" -msgstr "" - -msgid "Access this host" -msgstr "" - -msgid "Option added" -msgstr "" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -msgid "Remove sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -msgid "Specified Commands and Groups" -msgstr "" - -msgid "Specified Groups" -msgstr "" - -msgid "Remove sudo options" -msgstr "" - -msgid "Autogenerated" -msgstr "" - -msgid "Segment details" -msgstr "" - -msgid "Replication configuration" -msgstr "" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -msgid "Account" -msgstr "" - -msgid "Add trust" -msgstr "" - -msgid "Administrative account" -msgstr "" - -msgid "SID blocklists" -msgstr "" - -msgid "Trust Settings" -msgstr "" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -msgid "Pre-shared password" -msgstr "" - -msgid "Remove trusts" -msgstr "" - -msgid "Remove domains" -msgstr "" - -msgid "Alternative UPN suffixes" -msgstr "" - -msgid "User attributes for SMB services" -msgstr "" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - -msgid "Account Settings" -msgstr "" - -msgid "Account Status" -msgstr "" - -msgid "Active users" -msgstr "" - -msgid "Add user" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -msgid "Auto assign subordinate ids" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "" - -msgid "Contact Settings" -msgstr "" - -msgid "Delete mode" -msgstr "" - -msgid "Employee Information" -msgstr "" - -msgid "Error changing account status" -msgstr "" - -msgid "Password expiration" -msgstr "" - -msgid "Mailing Address" -msgstr "" - -msgid "Misc. Information" -msgstr "" - -msgid "delete" -msgstr "" - -msgid "preserve" -msgstr "" - -msgid "No private group" -msgstr "" - -msgid "Remove users" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Unlock" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -msgid "Members" -msgstr "" - -msgid "My User Vaults" -msgstr "" - -msgid "Owners" -msgstr "" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -msgid "Service Vaults" -msgstr "" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -msgid "Vault Type" -msgstr "" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -msgid "User Vaults" -msgstr "" - -msgid "Current password is required" -msgstr "" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -msgid "First OTP" -msgstr "" - -msgid "New password is required" -msgstr "" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Password change complete" -msgstr "" - -msgid "Your password has expired. Please enter a new password." -msgstr "" - -msgid "Passwords must match" -msgstr "" - -msgid "Password reset was not successful." -msgstr "" - -msgid "Reset your password." -msgstr "" - -msgid "Second OTP" -msgstr "" - -msgid "Verify Password" -msgstr "" - -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -msgid "Some entries were not deleted" -msgstr "" - -msgid "Quick Links" -msgstr "" - -msgid "Select All" -msgstr "" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -msgid "Unselect All" -msgstr "" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "" - -msgid "Audit" -msgstr "" - -msgid "Authentication" -msgstr "" - -msgid "Automount" -msgstr "" - -msgid "DNS" -msgstr "" - -msgid "Host-Based Access Control" -msgstr "" - -msgid "Identity" -msgstr "" - -msgid "Network Services" -msgstr "" - -msgid "Policy" -msgstr "" - -msgid "Role-Based Access Control" -msgstr "" - -msgid "Subordinate IDs" -msgstr "" - -msgid "Sudo" -msgstr "" - -msgid "Topology" -msgstr "" - -msgid "True" -msgstr "" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -msgid "First" -msgstr "" - -msgid "Last" -msgstr "" - -msgid "Next" -msgstr "" - -msgid "Page" -msgstr "" - -msgid "Prev" -msgstr "" - -msgid "Undo" -msgstr "" - -msgid "Undo this change." -msgstr "" - -msgid "Undo All" -msgstr "" - -msgid "Undo all changes in this field." -msgstr "" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -msgid "Must be a decimal number" -msgstr "" - -msgid "Format error" -msgstr "" - -msgid "Must be an integer" -msgstr "" - -msgid "Not a valid IP address" -msgstr "" - -msgid "Not a valid IPv4 address" -msgstr "" - -msgid "Not a valid IPv6 address" -msgstr "" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -msgid "Parse error" -msgstr "" - -msgid "Must be a positive number" -msgstr "" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -msgid "Required field" -msgstr "" - -msgid "Unsupported value" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -msgid "IdP max life" -msgstr "" - -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "" - -msgid "IdP max renew" -msgstr "" - -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -msgid "password policy" -msgstr "" - -msgid "password policies" -msgstr "" - -msgid "Password Policies" -msgstr "" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "Grace login limit" -msgstr "" - -msgid "Number of LDAP authentications allowed after expiration" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -msgid "service" -msgstr "" - -msgid "services" -msgstr "" - -msgid "Service principal alias" -msgstr "" - -msgid "Base-64 encoded service certificate" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." -msgstr "" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -msgid "Add a new SMB service." -msgstr "" - -msgid "SMB service NetBIOS name" -msgstr "" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a service" -msgstr "" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -msgid "Certificate Authority" -msgstr "" - -msgid "Certificate Authorities" -msgstr "" - -msgid "Name for referencing the CA" -msgstr "" - -msgid "Description of the purpose of the CA" -msgstr "" - -msgid "Authority ID" -msgstr "" - -msgid "Dogtag Authority ID" -msgstr "" - -msgid "Subject DN" -msgstr "" - -msgid "Subject Distinguished Name" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Issuer Distinguished Name" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "RSN Version" -msgstr "" - -msgid "Random Serial Number Version" -msgstr "" - -msgid "Search for CAs." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "%(count)d variables" -msgstr[1] "%(count)d variables" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "Display the properties of a CA." -msgstr "" - -msgid "Create a CA." -msgstr "" - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -msgid "Modify CA configuration." -msgstr "" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "" - -msgid "IPA CA cannot be disabled" -msgstr "" - -msgid "Enable a CA." -msgstr "" - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Subject email address" -msgstr "" - -msgid "Subject DNS name" -msgstr "" - -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -msgid "Subject URI" -msgstr "" - -msgid "Subject IP Address" -msgstr "" - -msgid "Subject OID" -msgstr "" - -msgid "Subject UPN" -msgstr "" - -msgid "Subject Kerberos principal name" -msgstr "" - -msgid "Subject Other Name" -msgstr "" - -msgid "Serial number (hex)" -msgstr "" - -msgid "Request status" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Status of the certificate" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -msgid "command" -msgstr "" - -msgid "commands" -msgstr "" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -msgid "runAs groups" -msgstr "" - #, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Preserved user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -msgid "Password grace count" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" -msgstr "" - -msgid "Request must be a dict" -msgstr "" - -msgid "Request is missing \"method\"" -msgstr "" - -msgid "Request is missing \"params\"" -msgstr "" - -msgid "params must be a list" -msgstr "" - -msgid "params must contain [args, options]" -msgstr "" - -msgid "params[0] (aka args) must be a list" -msgstr "" - -msgid "params[1] (aka options) must be a dict" -msgstr "" - -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" - -msgid "CIFS server denied your credentials" -msgstr "" - -msgid "communication with CIFS server was unsuccessful" -msgstr "" - -msgid "AD domain controller" -msgstr "" - -msgid "unsupported functional level" -msgstr "" - -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" - -msgid "Cannot find specified domain or server name" -msgstr "" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" - -msgid "At least the domain or IP address should be specified" -msgstr "" - -#, python-format -msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" -msgstr "" - -msgid "no trusted domain is configured" -msgstr "" - -msgid "domain is not configured" -msgstr "" - -msgid "SID is not valid" -msgstr "" - -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "" - -msgid "SID does not match any trusted domain" -msgstr "" - -msgid "Trust setup" -msgstr "" - -msgid "Our domain is not configured" -msgstr "" - -msgid "No trusted domain is not configured" -msgstr "" - -msgid "trusted domain object" -msgstr "" - -msgid "domain is not trusted" -msgstr "" - -msgid "no trusted domain matched the specified flat name" -msgstr "" - -msgid "trusted domain object not found" -msgstr "" - -msgid "Object does not belong to a trusted domain" -msgstr "" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "" - -msgid "Ambiguous search, user domain was not specified" -msgstr "" - -msgid "Trusted domain did not return a unique object" -msgstr "" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "" - -msgid "trusted domain user not found" -msgstr "" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "" - -msgid "CIFS credentials object" -msgstr "" - -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "" - -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" - -#, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" - -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" - -msgid "Credentials" -msgstr "" - -msgid "Missing credentials for cross-forest communication" -msgstr "" - -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" - -#, python-format -msgid "must equal %r" -msgstr "" - -msgid "Hello world" -msgstr "" - -#, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "" - -msgid "must be at least 1" -msgstr "" - -msgid "Out of memory\n" -msgstr "" - -msgid "Warning unrecognized encryption type.\n" -msgstr "" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -msgid "Out of memory!?\n" -msgstr "" - -msgid "Enctype comparison failed!\n" -msgstr "" - -msgid "Password is too long!\n" -msgstr "" - -msgid "Failed to create random key!\n" -msgstr "" - -msgid "Failed to create key!\n" -msgstr "" - -msgid "Bad or unsupported salt type.\n" -msgstr "" - -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" +msgid "request failed with HTTP status %d" +msgstr "request failed with HTTP status %d" msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" +"retrieve and print all attributes from the server. Affects command output." msgstr "" +"retrieve and print all attributes from the server. Affects command output." diff --git a/po/es.po b/po/es.po index cfee818ab..93fff9129 100644 --- a/po/es.po +++ b/po/es.po @@ -20,989 +20,457 @@ msgstr "" "Plural-Forms: nplurals=2; plural=n != 1;\n" "X-Generator: Weblate 4.6\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "no se puede abrir archivo de configuración %s\\n\n" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "no puede stat () del archivo de configuración%s\n" - -#, c-format -msgid "out of memory\n" -msgstr "sin Memoria\n" - -#, c-format -msgid "read error\n" -msgstr "Error de lectura\n" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "No se puede analizar nombre principal\n" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "krb5_parse_name %1$d: %2$s\n" - -#, c-format -msgid "Removing principal %s\n" -msgstr "Eliminando %s principales\n" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "No pudo abrir la tabla de claves\n" - -#, c-format -msgid "principal not found\n" -msgstr "principal no se encuentra\n" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "krb5_kt_get_entry %1$d: %2$s\n" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "No se puede eliminar la entrada\n" - -#, c-format -msgid "kvno %d\n" -msgstr "kvno %d\n" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "krb5_kt_remove_entry %1$d: %2$s\n" - -#, fuzzy, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "Falló al obtener resultados: %s\n" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "No es posible analizar los principales\n" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "krb5_unparse_name %1$d: %2$s\n" - -#, c-format -msgid "realm not found\n" -msgstr "reino no encontrado\n" - -msgid "Print debugging information" -msgstr "Imprimir la información de depuración" - -msgid "Debugging output" -msgstr "Salida de depuración" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"El principal para borrar desde keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" - -msgid "Kerberos Service Principal Name" -msgstr "Nombre principal del servicio de kerberos" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "El fichero keytab fpara borrar el principal(s) desde" - -msgid "Keytab File Name" -msgstr "Nombre de archivo de tabla de claves" - -msgid "Remove all principals in this realm" -msgstr "Quite todos los principales en este ámbito" - -msgid "Realm name" -msgstr "Nombre de reino " - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "Inicio de contexto de kerberos falló\n" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "Fallo al abrir keytab '%1$s': %2$s\n" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "Cierre de tabla de claves falló\n" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "krb5_kt_close %1$d: %2$s\n" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "Inicialización del contexto Kerberos falló: %1$s (%2$d)\n" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "Incapaz de analizar el principal: %1$s (%2$d)\n" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "No hay claves aceptadas por KDC\n" - -#, c-format -msgid "Out of memory \n" -msgstr "¡Memoria insuficiente!\n" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "¡No puede iniciar biblioteca IDAP!\n" - -msgid "Simple bind failed\n" -msgstr "¡Falló vinculación sencilla!\n" - -msgid "SASL Bind failed\n" -msgstr "Falló SASL Bind\n" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "Falló operación: %s\n" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "Falló al obtener resultados: %s\n" - -#, c-format -msgid "Timeout exceeded." -msgstr "Tiempo de espera superado." - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "Falló al analizar el resultado extendido: %s\n" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "Falló al analizar el resultado: %s\n" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "Pérdida la contestación de la lista de control!\n" - -#, c-format -msgid "Missing reply control!\n" -msgstr "¡Falta control de respuesta!\n" - -#, c-format -msgid "Out of Memory!\n" -msgstr "¡Memoria insuficiente!\n" - -#, c-format -msgid "Failed to create control!\n" -msgstr "¡Falló crear control!\n" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "Falló al enlazar al servidor!\n" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "Falló para obtener keytab!\n" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "Falló ber_init(), ¿control inválido?\n" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "ber_scanf() falló, incapaz de encontrar kvno ?!\n" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "Falló al recuperar el tipo de encriptación tipo #%d\n" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "Falló al recuperar la encriptación tipo %1$s (#%2$d)\n" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "Falló al recuperar algunas teclas" - -msgid "Failed to decode control reply!\n" -msgstr "Falló al decodificar la respuesta de control!\n" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "Las contraseñas no coinciden." - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "Falló al abrir el fichero de configuración %s\n" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "Falló al analizar el fichero de configuración %s\n" - -#, fuzzy -msgid "Failed to resolve symlink to keytab.\n" -msgstr "No pudo abrir la tabla de claves\n" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "Imprimir lo mínimo posible" - -msgid "Output only on errors" -msgstr "Solamente salida sobre errores" - -msgid "Output debug info" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "Contactar este servidor KDC específico" - -msgid "Server Name" -msgstr "Nombre de servidor" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"La principal para obtener una tabla de claves para (ex: ftp/ftp.example." -"com@EXAMPLE.COM)" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" -"El archivo keytab para añadir a la nueva clave (será creado si no existe)." - -msgid "Encryption types to request" -msgstr "Solicitud de tipos de cifrado" - -msgid "Comma separated encryption types list" -msgstr "Lista de tipos de cifrado separados por coma" - -msgid "Show the list of permitted encryption types and exit" -msgstr "Mostrar la lista de los tipos cifrados permitidos y salir" - -msgid "Permitted Encryption Types" -msgstr "Tipos de cifrado permitidos" - -msgid "Asks for a non-random password to use for the principal" -msgstr "Pregunta por una contraseña no aleatoria para la principal" - -msgid "LDAP DN" -msgstr "LDAP DN" - -msgid "DN to bind as if not using kerberos" -msgstr "DN a vincular como si no usara kerberos" - -msgid "LDAP password" -msgstr "Contraseña LDAP" - -msgid "password to use if not using kerberos" -msgstr "Contraseña a usar si no usa kerberos" - -#, fuzzy -msgid "Prompt for LDAP password" -msgstr "Contraseña LDAP" - -msgid "Path to the IPA CA certificate" -msgstr "Ruta al certificado IPA CA" - -msgid "IPA CA certificate" -msgstr "Certificado IPA CA" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "LDAP uri para conectar a. Mutuamente exclusiva con --server" - -msgid "url" -msgstr "url" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "LDAP SASL enlaza mecanismo si no bindd/bindpw" - -msgid "GSSAPI|EXTERNAL" -msgstr "GSSAPI|EXTERNAL" - -msgid "Retrieve current keys without changing them" -msgstr "Recupera las claves actuales sin cambiarlas" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "¿Ningún sistema enctypes preferido?\n" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "Tipos de cifrado suportado\n" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "Advertencia: Tipo para convertir falló (#%d)⏎\n" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -#, fuzzy -msgid "Enter LDAP password" -msgstr "Contraseña LDAP" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" -"No pudde especificar el mecanismo SASL y el enlace DN simultáneamente.\n" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "Mecanismo de enlace SASL no válido\n" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "No se puede especificar servidor y LDAP uri simultáneamente.\n" - -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Discovered server %s\n" -msgstr "Anunciado por los servidores" - -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "El nombre del servidor no se ha suministrado y es indisponible\n" - -#, fuzzy, c-format -msgid "Using provided server %s\n" -msgstr "Hacer ping a un servidor remoto." - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "Opciones suministradas incompatibles (-r y -P)\n" - -msgid "New Principal Password" -msgstr "Nueva contraseña principal" - -msgid "Verify Principal Password" -msgstr "Verificar contraseña principal" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" -"Advertencia: tipos salt no se aceptan con contraseñas aleatorias (ver opt.\n" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "Nombre de servicio principal inválido\n" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" -"No se encontró la cache de credencial kerberos. ¿Tiene un tiquete de " -"kerberos?\n" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" -"No se encontró usuario principal de kerberos. ¿Tiene una cache de credencial " -"válida?\n" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "Fallo abrir clave de tablas.\n" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "Reintentando con el método de recuperacióm pre-4.0 keytab...\n" - -#, c-format -msgid "Failed to create key material\n" -msgstr "Error al crear el material de clave\n" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "Falló al obtener keytab\n" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "No se pudo agregar clave de la tabla de claves\n" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "No se pudo cerrar la tabla de claves\n" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "Tabla de claves recuperada y almacenada correctamente en:%s\n" - -#, c-format -msgid "Out of memory!\n" -msgstr "¡Memoria insuficiente!\n" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "No tiene permiso para vincular este equipo al dominio de la API.\n" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "No escribir permisos en archivo de tabla de claves'%s\n" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "access() sobre %1$s falló: errno = %2$d\n" - -#, c-format -msgid "Out of memory!" -msgstr "¡Memoria insuficiente!" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "No se puede habilitar SSL en LDAP\n" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "Búsqueda de %1$s en rootdse falló con error %2$d\n" - -#, c-format -msgid "No values for %s" -msgstr "No hay valores para %s" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "Búsqueda de IPA namingContext fallada con error %d \n" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "IPA namingContext no encontrado \n" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "No se puede determinar DN de root de%s\n" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "Inscripción fallada. %s\n" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "principales no se encuentran en respuesta XML-RPC\n" - -#, c-format -msgid "Host is already joined.\n" -msgstr "Host ya está vinculado\n" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "curl_slist_append() falló para valor: '%s'\n" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "curl_easy_setopt() falló\n" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "Expandir el búfer en jsonrpc_handle_response falló" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "curl_global_init() falló\n" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "curl_easy_init() falló\n" - -#, c-format -msgid "json_dumps() failed\n" -msgstr "json_dumps() falló\n" - -#, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "" -"Petición JSON-RPC:\n" -"%s\n" - -#, fuzzy, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "Falló operación: %s\n" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#, fuzzy, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "" -"Petición JSON-RPC:\n" -"%s\n" - -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "json_dumps() falló\n" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "Cancelación de registro exitoso.\n" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "Cancelación falló.\n" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "resultado no se encuentra en respuesta XML-RPC\n" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "No se puede determinar servidor de la IPA de%s\n" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" -"No se puede unir host: la inicialización de contexto de Kerberos falló\n" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" -"No se puede unir host: cache de credenciales de Kerberos no se encuentra\n" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" -"No se puede unir host: principal de usuario no se encuentra y contraseña de " -"host no se proporciona.\n" - -#, c-format -msgid "fork() failed\n" -msgstr "bifurcación () falló\n" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "ipa-getkeytab no se encuentra\n" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "¿Tiene ipa-getkeytab permisos errados?\n" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "la ejecución de ipa-getkeytab falló, errno %d\n" - -#, c-format -msgid "child exited with %d\n" -msgstr "hijo terminó con %d\n" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "Error al resolver tabla de claves:%s.\n" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "Error al obtener el dominio predeterminado Kerberos:%s.\n" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "Error de análisis \"%1$s\": %2$s.\n" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "Error al obtener credenciales de iniciales:%s.\n" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "No se puede generar la cache de credenciales de Kerberos\n" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "Error de almacenamiento de credenciales en cache de credenciales:%s.\n" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "Imprimir la salida cruda de XML-RPC en modo de GSSAPI" - -msgid "Quiet mode. Only errors are displayed." -msgstr "Modo silencioso. Sólo se muestran los errores." - -msgid "Unenroll this host from IPA server" -msgstr "Cancelar registro de host de servidor IPA" - -msgid "Hostname of this server" -msgstr "Nombre de host de este servidor" - -msgid "hostname" -msgstr "nombre de host" - -msgid "IPA Server to use" -msgstr "Servidor de IPA a utilizar" - -msgid "Specifies where to store keytab information." -msgstr "Especifica dónde almacenar la información de tabla de claves." - -msgid "filename" -msgstr "nombre de archivo" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "Forzar la unión del host. Reunirlo aunque ya este unido." - -msgid "LDAP password (if not using Kerberos)" -msgstr "contraseña de LDAP (si no usa Kerberos)" - -msgid "password" -msgstr "contraseña" - -msgid "LDAP basedn" -msgstr "LDAP basedn" - -msgid "basedn" -msgstr "basedn" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "El nombre de host debe ser totalmente calificado:%s\n" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "El nombre del equipo no debe ser: %s\n" - -msgid "Failed to add" -msgstr "Fallo al añadir" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "Escribir certificado (chain if --chain used) a archivo" - -msgid "Unrevoked" -msgstr "No revocado" - -msgid "Error" -msgstr "Error" - -msgid "Input filename" -msgstr "Entrada nombre de archivo" - -msgid "File to load the certificate from." -msgstr "Archivo desde donde cargar el certificado" - -msgid "cannot specify both raw certificate and file" -msgstr "no puede especificar un certificado RAW y un archivo" - -msgid "Input file" -msgstr "Archivo de entrada" - -msgid "File to load the certificate from" -msgstr "Archivo desde el que cargar el certificado" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "Perfil de configuración guardado en el archivo '%(file)s'" - -msgid "Split DNS record to parts" -msgstr "Divide registro DNS en partes" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "Por favor seleccione un tipo de origen de DNS para ser agregado" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "Los tipos mas comunes para este tipo de zona son: %s\n" - -msgid "DNS resource record type" -msgstr "Registro de tipo de recurso DNS " - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "Invalido o tipo no soportado. Valores permitidos son: %s" - -msgid "No option to modify specific record provided." -msgstr "No hay opción para modificar registro específico proporcionado." - -msgid "Current DNS record contents:\n" -msgstr "Contenidos actuales del registro DNS:\n" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "Modificar %(name)s '%(value)s'?" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -"%(count)d %(type)s registro omitido. Sólo un valor por DNS tipo de registro " -"puede ser modificado a la vez." -msgstr[1] "" -"%(count)d %(type)s registros omitidos. Sólo un valor por DNS tipo de " -"registro puede ser modificado a la vez." - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" -"Ni --del-all ni opciones para borrar un registro en concreto ha sido " -"especificado.\n" -"El comando de ayuda puede ser consultado para ver los tipos de registros " -"soportados." - -msgid "No option to delete specific record provided." -msgstr "Ninguna opción para borrar un registro en concreto especificado." - -msgid "Delete all?" -msgstr "¿Borrar todos?" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "Borrar %(name)s '%(value)s'?" - -msgid "Server will check DNS forwarder(s)." -msgstr "El servidor revisará los \"DNS forwarder(s)\"." - -msgid "This may take some time, please wait ..." -msgstr "Esto puede tomar un poco mas de tiempo. Por favor espere ..." - -msgid "DNS forwarder" -msgstr "Reenviador DNS" - -msgid "file to store DNS records in nsupdate format" -msgstr "archivo para almacenar los registros DNS en formato nsupdate" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "Certificados(s) almacenados en el archivo '%(file)s'" - -msgid "Servers details:" -msgstr "Detalles de los servidores:" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" -"El modo migración esta desactivado.\n" -"Use 'ip confi-mod --enable-migration=TRUE' para activarlo." - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" -"Las contraseñas han sido migradas en formato pre-hashed.\n" -"IPA es incapaz de generar claves de Kerberos a menos que le sean\n" -"provistas contraseñas de texto claras. Todos los usuarios migrados\n" -"necesitan registrarse en https://your.domain/ipa/migration/ antes de\n" -"poder utilizar sus respectivas cuentas Kerberos." - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "Quitando %(servers)s desde la copia de topología, por favor espere..." - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "La repica de la topologia de sufijo \"%(suffix)s\" está en orden." - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "La replica de la topología con sufijo \"%(suffix)s\" contiene errores." - -msgid "Topology is disconnected" -msgstr "La topología está desconectada" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" -"El servidor %(srv)s no puede contactar con los servidores: %(replicas)s" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "Número máximo de acuerdo recomendados por replica sobrepasado" - -msgid "Maximum number of agreements per replica" -msgstr "Número máximo de acuerdos por replica" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "El servidor \"%(srv)s\" tiene %(n)d acuerdos con servidores:" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "Borrar un usuario manteniendo la entrada disponible para un uso futuro" - -msgid "Delete a user" -msgstr "Borrar un usuario" - -msgid "preserve and no-preserve cannot be both set" -msgstr "preserve y no-preserve no pueden estar ambos ajustados" - -msgid "maps not connected to /etc/auto.master:" -msgstr "mapa no conectado a /etc/auto.master" - -msgid "Import automount files for a specific location." -msgstr "Importar ficheros de automontaje para una localización específica." - -msgid "Master file" -msgstr " Archivo maestro" - -msgid "Automount master file." -msgstr " Archivo maestro automount." - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" -" Modo de funcionamiento continuo. Reporta los errores, pero el proceso " -"continúa." - -#, python-format -msgid "File %(file)s not found" -msgstr "No se encontró el archivo %(file)s " - -#, python-format -msgid "key %(key)s already exists" -msgstr "key %(key)s ya existe" - -#, python-format -msgid "map %(map)s already exists" -msgstr "map %(map)s ya existe" - -msgid "Imported maps:" -msgstr "Mapas importados" - -#, python-format -msgid "Added %(map)s" -msgstr "%(map)s agregados" - -msgid "Imported keys:" -msgstr "Llaves (keys) importadas" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "Agregado %(src)s a %(dst)s" - -msgid "Ignored keys:" -msgstr "Llaves ignoradas: " - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "%(src)s a %(dst)s ignorados" - -msgid "Duplicate maps skipped:" -msgstr "Mapa duplicado omitido" - -#, python-format -msgid "Skipped %(map)s" -msgstr "%(map)s omitido" - -msgid "Duplicate keys skipped:" -msgstr "Llaves duplicadas omitidas" - -#, python-format -msgid "Skipped %(key)s" -msgstr "%(key)s omitida" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" -"Incapaz de mostrar el código QR usando la codificación de salida " -"configurada. Por favor use la ficha URI para configurar su dispositivo OTP" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" -"El código QR es más grande que el de la salida tty. Por favor modifique el " -"tamaño de su terminal." - -msgid "Synchronize an OTP token." -msgstr "Sincronice una ficha OTP" - -msgid "User ID" -msgstr "ID de usuario" - -msgid "Password" -msgstr "Contraseña" - -msgid "First Code" -msgstr "Primer Código" - -msgid "Second Code" -msgstr "Segundo Código" - -msgid "Token ID" -msgstr "ID de ficha" - -msgid "python-yubico is not installed." -msgstr "python-yubico no está instalado." - msgid "" "\n" -"YubiKey Tokens\n" -msgstr "" -"\n" -"Fichas YubiKey\n" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" -"\n" -"Gestionar fichas YubiKey.\n" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" -"\n" -"Este código es una extensión del plugin otptoken y suministra el soporte " -"para\n" -" leer/escribir directamente en las fichasYubiKey.\n" - -msgid "" "\n" "EXAMPLES:\n" msgstr "" "\n" +"\n" "EJEMPLOS:\n" +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" +"\n" +"\n" +"CONFIGURACIÓN GLOBAL DNS\n" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" +"\n" +" Anula esto de modo que podamos añadir completados y fallados al " +"resultado devuelto.\n" +" " + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" +"\n" +" Anula esto de modo que podamos fijar completados y fallados.\n" +" " + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" +"\n" +" Añadir una regla automiembro.\n" +" " + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" +"\n" +" Añadir condiciones a una regla automiembro.\n" +" " + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" +"\n" +" Borra una regla automiembro.\n" +" " + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" +"\n" +" Muestra información sobre una regla automiembro.\n" +" " + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" +"\n" +" Estado de bloqueo de una cuenta de usuario\n" +"\n" +" Una cuenta de usuario puede resultar bloqueada si la contraseña se " +"introduce\n" +" incorrectamente muchas veces dentro de un período especifico de tiempo\n" +" controlado por la política de contraseña. Un bloqueo de cuenta es una " +"condición\n" +" temporal y debe ser desbloqueada por un administrador.\n" +"\n" +" Esto conecta con el máster IPA y muestra el estado de bloqueo de cada " +"uno.\n" +"\n" +" Para determinar si una cuenta está bloqueada en un servidor dado usted\n" +" necesita comparar el número de accesos fallido y la hora del último " +"fallo. Para\n" +" que una cuenta se bloquee debe exceder maxfail dentro de la duración\n" +" failinterval según se especifique en la política de contraseña asociada " +"con el\n" +" usuario.\n" +"\n" +" El contador de acceso fallado se modifica solo cuando un usuario intenta " +"acceder\n" +" por lo que es posible que una cuenta puede aparecer bloqueada pero el " +"último\n" +" acceso fallado sea más antiguo que el lockouttime de la política de " +"contraseña.\n" +" Esto significa que el usuario puede intentar acceder otra vez." + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" +"\n" +" Modificar una confianza (para uso futuro).\n" +"\n" +" Actualmente solo está disponible la opción predeterminada para modificar " +"los\n" +" atributos LDAP. Opciones más especificas serán añadidas en futuras " +"versiones.\n" +" " + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" +"\n" +" Modificar una regla automiembro.\n" +" " + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" +"\n" +" Modificar dominios reino\n" +"\n" +" Comprobación DNS: Cuando añade manualmente un dominio a la lista, por\n" +" defecto se lleva a cabo una comprobación DNS. Asegura que el dominio " +"está\n" +" asociado con el reino IPA, comprobando si el dominio tiene un registro " +"_kerberos\n" +" TXT que contenga el nombre del reino IPA realm name. Esta comprobación " +"se\n" +" puede saltar especificando la opción --force.\n" +"\n" +" Eliminación: cuando un dominio reino que tiene una zona DNS coincidente\n" +" gestionada por IPA se borra, el registro _kerberos TXT correspondiente " +"en la\n" +" es borrado automáticamente también. Los demás registros en la zona o la " +"zona\n" +" no son afectados.\n" +" " + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" +"\n" +" Borrar condiciones de una regla automiembro.\n" +" " + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" +"\n" +" Búsqueda reglas automiembro.\n" +" " + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" +"\n" +" Buscar usuarios que coincidan con el certificado suministrado.\n" +"\n" +" Este comando se basa en SSSD para recuperar la lista de los usuarios\n" +" coincidentes y puede devolver los datos en cache. Para más información " +"sobre \n" +" la purga del cache SSSD, vea por favor la documentación sss_cache.\n" +" " + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" +"\n" +"Desbloquear una cuenta de usuario\n" +"\n" +" Una cuenta de usuario puede llegar a bloquearse si la contraseña se ha " +"introducido incorrectamente demasiadas\n" +"veces dentro de un período de tiempo controlado por la política de\n" +"contraseña. Una cuenta bloqueada es una condición temporal y puede ser " +"desbloqueada por\n" +"un administrador." + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" +"\n" +" Este es el equivalente:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" +"\n" +" Añadir localización:\n" +" ipa location-add location --description 'My location'\n" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" +"\n" +" Borrar localización:\n" +" ipa location-del location\n" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" +"\n" +" Encontrar todas las localizaciones:\n" +" ipa location-find\n" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" +"\n" +" Encuentra todos los servidores:\n" +" ipa server-find\n" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" +"\n" +" Mostar la configuración de un servidor DNS especifico:\n" +" ipa dnsserver-show\n" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" +"\n" +" Muestra el rol maestro IPA implícito:\n" +" ipa server-role-find --include-master\n" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" +"\n" +" Mostrar localización específica:\n" +" ipa location-show location\n" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" +"\n" +" Mostrar un servidor específico:\n" +" ipa server-show ipa.example.com\n" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" +"\n" +" Muestra el estado del rol 'DNS server' sobre un servidor:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" +"\n" +" Muestra el estado de todos los roles configurados en un servidor:\n" +" ipa server-role-find ipa.example.com\n" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" +"\n" +" Muestra el estado de todos los roles que contienen 'AD' sobre un " +"servidor:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" +"\n" +" Actualizar la configuración de un servidor DNS especifico:\n" +" ipa dnsserver-mod\n" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" +"\n" +" Añadir registro LOC para example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" +"\n" +" Añadir un host que pueda manejar la tabla de teclas y certificado del " +"host:\n" +" ipa host-add-managedby --hosts=test2 test\n" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" +"\n" +" Añadir un servidor de correo para example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" +"\n" +" Añadir un nuevo host con una contraseña de un uso:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" +"\n" +" Añadir un nuevo host con una contraseña aleatoria de un uso:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" +"\n" +" Añadir un nuevo host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" +"\n" +" Añadir un nuevo servidor:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" +"\n" +" Añadir una nueva ficha:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" + msgid "" "\n" " Add a new token:\n" @@ -1012,881 +480,1084 @@ msgstr "" " Añadir una nueva ficha:\n" " ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgid "Add a new YubiKey OTP token." -msgstr "Añadir una nueva ficha YubiKey OTP." - -msgid "YubiKey slot" -msgstr "Espacio YubiKey" - -msgid "No free YubiKey slot!" -msgstr "¡No hay espacio YubiKey libre!" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "No puede leer el fichero '%(filename)s': %(exc)s" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "No puede decodificar fichero '%(filename)s': %(exc)s" - -msgid "Invalid credentials" -msgstr "Credenciales no válidas" - -msgid "Create a new vault." -msgstr "Crear una nueva bóveda." - -msgid "Vault password" -msgstr "Contraseña de la bóveda" - -msgid "File containing the vault password" -msgstr "Fichero que contiene la contraseña de bóveda" - -msgid "File containing the vault public key" -msgstr "Fichero que contiene la clave pública de la bóveda" - -msgid "Password can be specified only for symmetric vault" -msgstr "La contraseña solo se debe especificar para bóveda simétrica" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "La clave pública puede ser especificada solo para la bóveda asimétrica" - -msgid "Password specified multiple times" -msgstr "Contraseña especificada múltiples veces" - -msgid "Public key specified multiple times" -msgstr "Clave pública especificada múltiples veces" - -msgid "Missing vault public key" -msgstr "Clave pública de la bóveda desaparecida" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "Clave pública de bóveda no válida o no soportada: %s" - -msgid "Modify a vault." -msgstr "Modificar una bóveda" - -msgid "Change password" -msgstr "Cambiar contraseña" - -msgid "Old vault password" -msgstr "Contraseña de bóveda antigua" - -msgid "File containing the old vault password" -msgstr "Fichero conteniendo la contraseña de bóveda antigua" - -msgid "New vault password" -msgstr "Nueva contraseña de bóveda" - -msgid "File containing the new vault password" -msgstr "Fichero que contiene la nueva contraseña de bóveda" - -msgid "Old vault private key" -msgstr "Clave privada de bóveda antigua" - -msgid "File containing the old vault private key" -msgstr "Fichero que contiene la clave privada de bóveda antigua" - -msgid "File containing the new vault public key" -msgstr "Fichero que contiene la nueva clave pública de bóveda" - -msgid "New public key specified multiple times" -msgstr "Nueva clave pública especificada múltiples veces" - -msgid "Missing new vault public key" -msgstr "Nueva clave pública de bóveda desaparecida" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "Datos archivados en una bóveda" - -msgid "Binary data to archive" -msgstr "Datos binarios para archivar" - -msgid "File containing data to archive" -msgstr "Fichero conteniendo datos para archivar" - -msgid "Override existing password" -msgstr "Anular contraseña existente" - -#, fuzzy -msgid "Input data specified multiple times" -msgstr "Clave pública especificada múltiples veces" - -#, python-format msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" msgstr "" - -#, fuzzy -msgid "Invalid vault type" -msgstr "Tipo de regla de enlace" - -#, fuzzy -msgid "Retrieve a data from a vault." -msgstr "Datos archivados en una bóveda" - -#, fuzzy -msgid "File to store retrieved data" -msgstr "Falló permitir recuperar una KeyTab" - -#, fuzzy -msgid "Vault private key" -msgstr "Clave privada de bóveda antigua" - -#, fuzzy -msgid "File containing the vault private key" -msgstr "Fichero que contiene la clave privada de bóveda antigua" - -msgid "Data" -msgstr "Datos" - -#, fuzzy -msgid "Private key specified multiple times" -msgstr "Clave pública especificada múltiples veces" - -#, fuzzy -msgid "Missing vault private key" -msgstr "Clave pública de la bóveda desaparecida" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "Regla Sudo Habilitada “%s”" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "Regla Sudo Deshabilitada “%s”" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "Añadiendo la opción \"%(option)s\" a Sudo Rule \"%(rule)s\"" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "Quitada opción \"%(option)s\" de Sudo Rule \"%(rule)s\"" +"\n" +" Añadir un permiso que conceda la capacidad de gestionar la membresía de un " +"grupo:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Gestiona Miembros de Grupo\"\n" msgid "" "\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" msgstr "" "\n" -"Instrucciones de Control de Acceso al Servidor de Directorio (ACIs)\n" +" Añadir un permiso que concede la creación de usuarios:\n" +" ipa permission-add --type=user --permissions=add \"Añadir Usuarios\"\n" + +msgid "" "\n" -"ACIs son usados para permitir o denegar acceso a la información. Este módulo " +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" +"\n" +" Añadir otro registro usando las opciones específicas de registro MX:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" +"\n" +" Añadir otro registro usando el modo interactivo (iniciado cuando dnsrecord-" +"add, dnsrecord-mod,\n" +" o dnsrecord-del son ejecutados sin opciones:\n" +" ipa dnsrecord-add example.com @\n" +" Por favor elija un tipo de recurso de registro DNS a añadir\n" +" Los tipos más comunes para este tipo de zona son: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" +"\n" +" Añadir un nuevo registro A para www.example.com. Crear un registro inverso " +"en la zona\n" +" inversa apropiada también. En esta caso un registro PTR \"2\" apuntando a " +"www.example.com\n" +" será creado en la zona 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" +"\n" +" Añadir nuevo registro PTR para www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" +"\n" +" Añadir nuevos registros SRV para servidores LDAP. Tres cuartos de las " +"peticiones\n" +"debería ir a fast.example.com, un cuarto a slow.example.com. Si ninguno " "está\n" -" actualmente diseñado para permitir, no denegar, acceso.\n" -"\n" -"Los comandos aci están diseñados para conceder permisos que permitan la\n" -"actualización de entradas existentes o el añadido o borrado de nuevas. El " -"objetivo\n" -"de los ACIs que van con IPA es suministrar un conjunto de permisos de bajo " -"nivel\n" -"que conceden acceso a grupos espaciales llamados grupos de tareas. Estos\n" -"permisos de bajo nivel pueden ser combinados en roles que conceden un " -"acceso\n" -"más amplio. Estos roles son otro tipo de grupo, roles.\n" -"\n" -"Por ejemplo, si usted tiene un grupo de tareas que le permiten añadir y " -"modificar\n" -"usuarios usted podría crear un role, useradmin. Debería asignar usuarios al " -"role\n" -"useradmin que les permitirá hacer operaciones definidas en el grupo de " -"tareas.\n" -"\n" -"Usted puede crear ACIs que deleguen permisos así usuarios del grupo A " -"pueden\n" -"escribir atributos en el grupo B.\n" -"\n" -"La opción type es un mapa que aplica a todas las entradas en la localización " -"de\n" -"usuarios, grupos o host. Está diseñada principalmente para ser usada cuando " -"se\n" -"otorgan permisos de añadir (para escribir nuevas entradas).\n" -"\n" -"Un ACI consta de tres partes:\n" -"1. objetivo\n" -"2. permisos\n" -"3. reglas de enlace\n" -"\n" -"El objetivo es un conjunto de reglas que definen que objetos LDAP son " -"objetivos.\n" -"Esto puede incluir una lista de atributos, un área del árbol LDAP o un " -"filtro LDAP.\n" -"\n" -"Los objetivos incluyen:\n" -"- attrs: lista de atributos afectados\n" -"- type: un tipo de objeto (usuario, grupo, host, servicio, etc)\n" -"- memberof: miembros de un grupo\n" -"- targetgroup: concede acceso para modificar un grupo específico. Está " -"diseñado\n" -" principalmente para habilitar a los usuarios para añadir o borrar miembros " -"de un\n" -" grupo específico.\n" -"- filter: Un filtro LDAP legal usado para reducir el alcance del objetivo.\n" -"- subtree: Usado para aplicar una regla a lo largo de un conjunto de " -"objetos. Por\n" -" ejemplo, para añadir usuarios usted necesita conceder permisos \"add\" al " -"subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. La opción subtree es " -"a\n" -" prueba de fallos para objetos que pueden no estar cubiertos por la opción " -"type.\n" -"\n" -"Los permisos definidos que ACI tiene permitidos hacer son uno o más de:\n" -"1. write - escribir uno o mas atributos\n" -"2. read - leer uno o más atributos\n" -"3. add - añadir una nueva entrada al árbol\n" -"4. delete - borrar una entrada existente\n" -"5. all - se conceden todos los permisos\n" -"\n" -"Advierta la diferencia entre atributos y entradas. Los permisos son " -"independientes,\n" -"de esta manera ser capaz de añadir un usuario no significa que el usuario " -"será\n" -"editable.\n" -"\n" -"La regla bind define a quien concede ACI estos permisos. El servidor LDAP " -"permite\n" -"esto para cualquier entrada LDAP válida pero recomendamos el uso de grupos " -"de\n" -"tareas de modo que los derechos puedan ser fácilmente compartidos entre los\n" -"roles.\n" -"\n" -"Para una descripción más completa de los controles de acceso vea\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EJEMPLOS:\n" -"\n" -"AVISO: Los ACIs se añaden ahora por medio del plugin permisos. Estos " -"ejemplos\n" -"son para demostrar como trabajan diversas opciones pero esto está hecho por\n" -"medio de los permisos de linea de comandos ahora (vea último ejemplo).\n" -"\n" -" Añadir un ACI de modo que el grupo \"secretaries\" pueda actualizar la " -"dirección de cualquier usuario:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Mostrar el nuevo ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Añadir un ACI que permita a los miembros del permiso \"addusers\" añadir " -"nuevos usuarios:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Añadir un ACI que permita a los miembros de los editores manejar miembros " -"del grupo admins:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Añadir un ACI que permita a los miembros del grupo admins manejar la calle " -"y el código postal de los que estén en el grupo editors:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Añadir un ACI que permita a los miembros del grupo admins manejar la calle " -"y el código postal de aquellos que trabajan para el jefe:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Añadir un clase de registro totalmente nueva para IPA que no esté cubierta " -"por ninguna de las opciones –type, creando un permiso:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"El comando show muestra el ACI 389-ds en bruto.\n" -"\n" -"IMPORTANTE: Cuando modifique los atributos target de un ACI existente debe\n" -"incluir todos los atributos existentes también. Cuando haga un aci-mod " -"targetattr\n" -"REEMPLAZA los atributos actuales, no los añade.\n" - -msgid "ACI name" -msgstr "Nombre de ACI" - -msgid "Permission" -msgstr "Permiso" - -msgid "Permission ACI grants access to" -msgstr "El permiso ACI permite el acceso a" - -msgid "User group" -msgstr "Grupo de usuarios" - -msgid "User group ACI grants access to" -msgstr "El grupo de usuarios ACI permite el acceso a" - -msgid "Permissions" -msgstr "Permisos" - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "Permisos a obtener(lectura, escritura, añadir, borrar, todos)" - -msgid "Attributes to which the permission applies" -msgstr "Atributos a los que aplican los permisos" - -msgid "Attributes" -msgstr "Atributos" - -msgid "Type" -msgstr "Tipo" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" -"Objeto de tipo IPA (usuario, grupo, grupo de host, servicio, grupo de red)" - -msgid "Member of" -msgstr "Miembro de" - -msgid "Member of a group" -msgstr "Miembro de un grupo" - -msgid "Filter" -msgstr "Filtro" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "Filtro legal LDAP (p.ej. ou=Ingeniería)" - -msgid "Subtree" -msgstr "Subárbol" - -msgid "Subtree to apply ACI to" -msgstr "Subárbol al que aplicar ACI" - -msgid "Target group" -msgstr "Grupo elegido" - -msgid "Group to apply ACI to" -msgstr "Grupo al que aplicar API" - -msgid "Target your own entry (self)" -msgstr "Dirija su propia entrada (usted)" - -msgid "Apply ACI to your own entry (self)" -msgstr "Aplique ACI a su propia entrada (usted)" - -msgid "Create new ACI." -msgstr "Crear nuevo ACI." - -msgid "ACI prefix" -msgstr "Prefijo ACI" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" -"Prefijo utilizado para distinguir los tipos de ACI (permiso,delegación, " -"autoservicio, ninguno)" - -msgid "Test the ACI syntax but don't write anything" -msgstr "Probar la sintaxis pero no escribir nada" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" -"Recuperar e imprimir todos los atributos del servidor. Afecta a la salida " -"del comando." - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" -"Imprimir entradas como almacenadas en el servidor. Solamente afecta formato " -"de salida." - -msgid "User-friendly description of action performed" -msgstr "Descripción sencilla de la acción realizada" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "El valor de primary_key de la entrada, p.ej., «jperez» para un usuario" - -msgid "Delete ACI." -msgstr "Borrar ACI." - -msgid "True means the operation was successful" -msgstr "«Verdadero» significa que la operación fue exitosa" +"disponible conmutar a backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" msgid "" "\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" msgstr "" "\n" -"Buscar ACIs.\n" -"\n" -" Devolver una lista de ACIs\n" -"\n" -" EJEMPLOS:\n" -"\n" -" Para encontrar todos los ACIs que se aplican directamente a miembros " -"del grupo ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" Para encontrar todos los ACIs que obtienen acceso añadir:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Advierta que el comando find solo busca el texto dado en el conjunto de " -"ACIs, no\n" -" evalúa los ACIs a ver si aplicaría alguno.\n" -" Por ejemplo, la búsqueda sobre memberof=ipausers encontrará todos los " -"ACIs\n" -" que tengan ipausers como memberof. Allí puede haber otros ACIs que se\n" -" apliquen a miembros de ese grupo indirectamente.\n" -" " - -msgid "A string searched in all relevant object attributes" -msgstr "Buscada una cadena en todos los atributos de objeto relevantes" - -msgid "Primary key only" -msgstr "Sólo clave primaria" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" -"Los resultados deberían contener solo la clave del atributo primario (\"name" -"\")" - -msgid "Number of entries returned" -msgstr "Cantidad de entradas devueltas" - -msgid "True if not all results were returned" -msgstr "Verdadero si no todos los resultados se devolvieron" - -msgid "Modify ACI." -msgstr "Modificar ACI." - -msgid "Rename an ACI." -msgstr "Renombrar un ACI." - -msgid "New ACI name" -msgstr " Nuevo nombre de ACI" - -msgid "Display a single ACI given an ACI name." -msgstr "Muestra un único ACI dando un nombre de ACI." - -msgid "Location of the ACI" -msgstr "Localización del ACI" +" Añadir nueva zona reversa especificada por la dirección IP de red:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" msgid "" "\n" -"Auto Membership Rule.\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" "\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" +" Añadir nueva zona:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" + +msgid "" "\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" +"\n" +" Añadir segundo servidor de nombres para example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" +"\n" +" Añadir permiso de sistema que puede ser usado para delegación de privilegio " +"por zona:\n" +" ipa dnszone-add-permission example.com\n" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" +"\n" +" Después de esta modificación tres quintos de las peticiones deberían ir a \n" +" fast.example.com y dos quintos a slow.example.com.\n" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" +"\n" +" Permitir al usuario crear una tabla de teclas:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" +"\n" +" Permitir al usuario crear una tabla de claves:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" +"\n" +" Un ejemplo del modom interactivo para el comando dnsrecord-del:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" +"\n" +" Cambia la política de reenvío para external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" +"\n" +" Cambiar el secreto:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " +"Hat\"\n" +msgstr "" +"\n" +" Cambiar el vendedor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " +"Hat\"\n" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" +"\n" +" Comprueba el estado de una petición de firma:\n" +" ipa cert-status 10\n" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" +"\n" +" Crea una nueva Regla de Mapeo de Identidad de Certificado:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" +"\n" +" Delegar zona sub.example a otro servidor de nombres:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" +"\n" +" Borra una Regla de Mapeo de Identidad de Certificado:\n" +" ipa certmaprule-del rule1\n" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" +"\n" +" Borrar una configuración:\n" +" ipa radiusproxy-del MyRADIUS\n" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" +"\n" +" Borrar un host:\n" +" ipa host-del test.example.com\n" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +" Borrar una ficha:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" +"\n" +" Borra la zona de reenvío external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" +"\n" +" Borrar ujn servidor de nombres previamente añadido desde example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" +"\n" +" Borrar zona example.com con todos los registros de recursos:\n" +" ipa dnszone-del example.com\n" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" +"\n" +" Deshabilitar una Regla de Mapeo de Identidad de Certificado:\n" +" ipa certmaprule-disable rule1\n" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" +"\n" +" Deshabilita el reenvío global para el sub-árbol dado:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" +"\n" +" Deshabilitar la clave Kerberos de host, el certificado SSL y todos sus " +"servicios:\n" +" ipa host-disable test.example.com\n" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" +"\n" +" Muestra información sobre una Regla de Mapeo de Identidad de Certificado:\n" +" ipa certmaprule-show rule1\n" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" +"\n" +" Mostrar la configuración global del Mapeo de Identidad de Certificado:\n" +" ipa certmapconfig-show\n" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" +"\n" +" Habilitar una Regla de Mapeo de Identidad de Certificado:\n" +" ipa certmaprule-enable rule1\n" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" +"\n" +" Examinar la configuración:\n" +" ipa radiusproxy-show MyRADIUS\n" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +" Examinar la ficha:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" +"\n" +" Encontrar registros A con el valor 192.0.2.2 en zona example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" +"\n" +" Encuentra todas las Reglas de Mapeo de Identidad de Certificado con el " +"dominio especificado:\n" +" ipa certmaprule-find --domain example.com\n" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" +"\n" +" Encontrar todos los servidores cuyas entradas incluyan la cadena \"example." +"com\":\n" +" ipa radiusproxy-find example.com\n" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" +"\n" +" Encontrar registros para recursos con \"www\" en su nombre en la zona " +"example.com:\n" +" ipa dnsrecord-find example.com www\n" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" +"\n" +" Encontrar una zona con \"example\" en su nombre de dominio:\n" +" ipa dnszone-find example\n" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" +"\n" +" Reenvía todas las peticiones para la zona external.example.com a otro " +"reenviador\n" +" usando una política \"first\" (enviará las peticiones al reenviador " +"seleccionado y si\n" +" no hay respuesta usará los servidores raíz globales):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" +"\n" +" Generar y recuperar un tabla de clave para un servicio IPA:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" +"\n" +" Si se configura un reenviador global, todas las peticiones para las que " +"este\n" +" servidor no está autorizado (e.g. sub.example.com) serán enrutados al " +"reenviador global.\n" +" La configuración de reenvío global se puede anular por zona.\n" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" +"\n" +" Lista todas las zonas de reenvío:\n" +" ipa dnsforwardzone-find\n" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Listar bóvedas:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" +"\n" +" Modificar la configuración global del Mapeo de Identidad de Certificado:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" +"\n" +" Modificar una Regla de Identidad de Certificado:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" +"\n" +" Modifica la configuración DNS global y establece una lista de reenviadores " +"globales:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" +"\n" +" Modificar información sobre un host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" +"\n" +" Modificar la zona para permitir actualizaciones dinámicas desde los propios " +"registros del host en el reino EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" +"\n" +" Modificar la zona para permitir transferencias de zona solo para la red " +"local:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" +"\n" +" Quitar las claves públicas SSH de un host y actualizar DNS para reflejar " +"este cambio:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" +"\n" +" Quita un certificado del estado de cogido para revocación:\n" +" ipa cert-remove-hold 1032\n" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" +"\n" +" Pide un nuevo certificado y añade el principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" +"\n" +" Resuelve un nombre de host para ver si existe (añadirá el dominio IPA\n" +" predeterminado si no se ha incluido ninguno):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" +"\n" +" Recupera un certificado existente:\n" +" ipa cert-show 1032\n" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" +"\n" +" Revocar un certificado (vea RFC 5280 para detalles de la razón):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" +"\n" +" Búsqueda de certificados por nombre de host:\n" +" ipa cert-find --subject=ipaserver.example.com\n" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" +"\n" +" La semántica de reenvío en IPA coincide con la semántica en BIND y depende " +"del\n" +" tipo de zona:\n" +" * Zona Maestra: BIND local responde con autoridad a las consultas de " +"datos en la\n" +" zona dada (incluyendo las respuestas de autoridad NXDOMAIN) y el reenvío\n" +" afecta solo a las peticiones para nombres debajo de los cortes de zona " +"(registros \n" +" NS) de las zonas servidas localmente.\n" +"\n" +" * Zona de Reenvío:la zona de reenvío no contiene datos autorizados. las\n" +" las consultas de reenvío BIND, que no pueden ser contestadas desde su " +"cache\n" +" local, para configurar reenviadores.\n" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" +"\n" +" Semánticas de la opción --forward-policy:\n" +" * none - deshabilita el reenvío para una zona dada.\n" +" * first - reenvía todas las peticiones a los reenviadores configurados. " +"Si fallan,\n" +" resuelven usando los servidores raíz DNS.\n" +" * only - reenvía todas las peticiones a los reenviadores configurados y " +"si fallan,\n" +" devuelve un fallo.\n" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" +"\n" +" Muestra la zona de reenvío external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" +"\n" +" Muestra la configuración DNS global:\n" +" ipa dnsconfig-show\n" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" +"\n" +" Mostrar registros para el recurso www en zona example.com\n" +" ipa dnsrecord-show example.com www\n" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" +"\n" +" Mostrar zona example.com:\n" +" ipa dnszone-show example.com\n" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" +"\n" +" El modo interactivo puede ser usado para modificación fácil:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No se suministra opción para modificar registro específico.\n" +" El registro actual DNS contiene:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modificar registro SRV '0 3 389 fast.example.com'? Si/No (predeterminado " +"No):\n" +" Modificar registro SRV '0 1 389 slow.example.com'? Si/No (predeterminado " +"No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" +"\n" +" Esta configuración reenvia todas las peticiones para nombres fuera del sub " +"árbol example.com\n" +" a reenviadores globales. Se utiliza el proceso de resolución recursiva " +"normal para \n" +" los nombres dentro del sub-árbol example.com (i.e. registros NS son " +"seguidos etc.).\n" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" +"\n" +"* Un permiso concede acceso a leer, escribir, añadir, borrar, buscar o " +"comparar.\n" +"* Un privilegio combina permisos similares (por ejemplo todos los permisos\n" +" necesarios para añadir un usuario).\n" +"* Un rol concede un conjunto de privilegios a usuarios, grupos, hosts o " +"grupos de host.\n" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" +"\n" +"* El host debe existir\n" +"* El servicio debe existir (o debe usar la opción --add para añadirlo " +"automáticamente)\n" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" +"\n" +"Se ha almacenado un certificado con un servicio principal y un servicio " +"principal\n" +"necesita un host.\n" + +msgid "" "\n" "A condition is a regular expression used by 389-ds to match a new incoming\n" "entry with an automember rule. If it matches an inclusive rule then the\n" "entry is added to the appropriate group or hostgroup.\n" +msgstr "" +"\n" +"Una condición es una expresión regular usada por 389-ds para coincidir una " +"nueva\n" +"entrada entrtante con una regla de auto miembro. Si la coincidencia es una " +"regla\n" +"inclusiva la entrada se añade al grupo o grupo de host apopiado.\n" + +msgid "" "\n" "A default group or hostgroup could be specified for entries that do not\n" "match any rule. In case of user entries this group will be a fallback group\n" "because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Description" -msgstr "Descripción" - -msgid "A description of this auto member rule" -msgstr "Una descripción de esta regla auto miembro" - -#, fuzzy -msgid "Default (fallback) Group" -msgstr "Grupo de usuarios predeterminado" - -#, fuzzy -msgid "Default group for entries to land" -msgstr "Grupo predeterminado para nuevos usuarios no encontrado" - -#, fuzzy -msgid "Add an automember rule." msgstr "" "\n" -" Añadir una regla automiembro.\n" -" " - -msgid "Automember Rule" -msgstr "Regla Automiembro" +"Se podría especificar un grupo o grupo de host predeterminado para las " +"entradas\n" +"que no coincidan con ninguna regla. En caso de entradas de usuario, este " +"grupo\n" +"será un grupo de reserva puesto que todos los usuarios son por defecto " +"miembros del grupo especificado en la configuración IPA.\n" msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" msgstr "" -"Establecer un atributo a un par nombre y valor. El formato es attr=value. \n" -"Para los atributos de valor múltiple, el comando sustituye los valores ya " -"presentes." +"\n" +"Un permiso habilita una delegación de derechos de grano fino. Un permiso es " +"una\n" +"vuelta alrededor legible por humanos de una Regla de Control de Acceso (ACI) " +"o\n" +"instrucción 389-ds.\n" +"Un permiso concede el derecho de llevar a cabo una tarea especifica como " +"añadir\n" +"un usuario, modificar un grupo, etc.\n" msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" -"Añadir un par atributo/valor. El formato es attr=value. El atributo debe ser " -"parte del esquema." - -msgid "Grouping Type" -msgstr "Tipo de Agrupamiento" - -msgid "Grouping to which the rule applies" -msgstr "Agrupamiento al cual se aplican las reglas" - -#, fuzzy -msgid "Add conditions to an automember rule." +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" msgstr "" "\n" -" Añadir condiciones a una regla automiembro.\n" -" " - -msgid "Inclusive Regex" -msgstr "Regex inclusivo" - -msgid "Exclusive Regex" -msgstr "Regex exclusivo" - -msgid "Attribute Key" -msgstr "Atributo Clave" +"Un permiso está constituido por diversas partes:\n" +"\n" +"1. El nombre del permiso.\n" +"2. El objetivo del permiso.\n" +"3. Los derechos concedidos por el permiso.\n" msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" -"Atributo a filtrar por medio de regex. Por ejemplo fqdn para un host o " -"gestor para un usuario" - -msgid "Conditions that could not be added" -msgstr "Condiciones que no pueden ser agregadas" - -msgid "Number of conditions added" -msgstr "Número de condiciones agregadas" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -#, fuzzy -msgid "Default (fallback) group for entries to land" -msgstr "Grupo predeterminado para nuevos usuarios no encontrado" - -#, fuzzy -msgid "Display information about the default (fallback) automember groups." -msgstr "Mostrar información sobre un grupo denominado." - -#, fuzzy -msgid "Delete an automember rule." +"\n" +"A permission may not contain other permissions.\n" msgstr "" "\n" -" Borra una regla automiembro.\n" +"Un permiso puede contener otros permisos.\n" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" +"\n" +"Un regla está directamente asociada con un grupo por nombre, de modo que " +"usted\n" +"no puede crear un regla sin un grupo o grupo de host que lo acompañen.\n" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" " " - -msgid "List of deletions that failed" -msgstr "Lista de eliminaciones fallidas" - -#, fuzzy -msgid "Search for automember rules." msgstr "" "\n" -" Búsqueda reglas automiembro.\n" -" " - -#, fuzzy -msgid "Modify an automember rule." -msgstr "" +"Añadir un nuevo rango de ID.\n" "\n" -" Modificar una regla automiembro.\n" +" Para añadir un nuevo rango de ID siempre debe especificar\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Adicionalmente\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" puede ser dado para un nuevo rango de ID para el dominio local mientras\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" deben ser dados para añadir un nuevo rango para un AD de dominio de " +"confianza.\n" +"\n" +" PRECAUCIÓN:\n" +"\n" +" El plugin DNA en 389-ds ubicará IDs en base a los rangos configurados " +"para el dominio\n" +" local. Actualmente el plugin DNA \"no puede\" ser reconfigurado por si " +"mismo en base a\n" +" los rangos locales ajustados por medio de esta familia de comandos.\n" +"\n" +" El cambio manual de configuración ha sido hecho en la configuración del " +"plugin DNA\n" +" para el nuevo rango local. Específicamente, el atributo dnaNextRange de " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' ha " +"sido\n" +" modificado para coincidir con el nuevo rango.\n" " " msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " msgstr "" -"Borrar un par atributo/valor. La opción será evaluada al final, después de " -"todos los ajustes y añadidos." - -msgid "Rights" -msgstr "Derechos" +"\n" +"Añadir nueva confianza a usar.\n" +"\n" +"Este comando establece la relación de confianza con otro dominio que llegar " +"a ser \n" +"trusted'. Como resultado, los usuarios del dominio de confianza puede " +"acceder a\n" +"los recursos de este dominio.\n" +"\n" +"Solo están soportados ahora la confianza con dominios Active Directory.\n" +"\n" +"El comando se puede ejecutar seguramente múltiples veces contra el mismo\n" +"dominio, esto causará cambios en las credenciales de relaciones de confianza " +"en\n" +"ambos lados.\n" +"\n" +"Advierta que si el comando se ejecuta previamente con un tipo de rango " +"específico\n" +"o con detección automática del tipo de rango y usted desea configurar un " +"tipo de\n" +"rango diferente, usted puede necesitar borrar primero la ID del rango " +"usando \n" +"ipa idrange-del antes de reintentar el comando con el rango deseado.\n" +" " msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" -"Mostrar los derechos de acceso de esta entrada (requiere --all). Consulte la " -"página man de IPA para más detalles." - -#, fuzzy -msgid "Rebuild auto membership." -msgstr "Reconstruir auto membresía" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Users" -msgstr "Usuarios" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Hosts" -msgstr "Equipos" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -#, fuzzy -msgid "Don't wait for rebuilding membership" -msgstr "¿Está seguro de que quiere reconstruir la auto membresía?" - -#, fuzzy -msgid "Remove conditions from an automember rule." +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" msgstr "" "\n" -" Borrar condiciones de una regla automiembro.\n" -" " +"Adicionalmente, existen las siguientes opciones de conveniencia.\n" +"Fijando una de estas opcines ajustará el correspondiente atributo(s).\n" +"1. type: un tipo de objeto (usuario, grupo, etc); fija sub-árbol y filtro " +"objetivo.\n" +"2. memberof: se aplica a los miembros de un grupo; fija filtro objetivo\n" +"3. targetgroup: concede acceso para modificar un grupo específico (como\n" +" concediendo los derechos para gestiona la membresía de grupo); fija " +"objetivo.\n" -msgid "Conditions that could not be removed" -msgstr "Condiciones que no pueden ser eliminadas" - -msgid "Number of conditions removed" -msgstr "Número de condiciones eliminadas" - -#, fuzzy -msgid "Display information about an automember rule." +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" msgstr "" "\n" -" Muestra información sobre una regla automiembro.\n" -" " +"Todas las CAs excepto la CA 'IPA' pueden ser deshabilitadas y vueltas a " +"habilitar.\n" +"Deshabilitar una CA evita que envíe certificados pero no afecta a la validez " +"de sus \n" +"certificados.\n" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" +"\n" +"La bóveda asymmetric es similar a la bóveda standard, pero\n" +"encripta el secreto usando una clave pública antes del transporte.\n" +"El secreto sólo se puede recuperar usando la clave privada.\n" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" +"\n" +"Regla de Membresía Automática.\n" msgid "" "\n" @@ -2033,8 +1704,8 @@ msgstr "" "define una localización dentro del mapa que referencia a otro mapa. Esto " "puede ser\n" "hecho bien usando utomountmap-add-indirect –parentmap o manualmente con\n" -"automountkey-add estableciendo la información a \"-type=autofs :" -"\".\n" +"automountkey-add estableciendo la información a \"-type=autofs :" +"\".\n" "\n" "EJEMPLOS:\n" "\n" @@ -2109,6708 +1780,110 @@ msgstr "" " Borrar la clave man desde el mapa auto.share:\n" " ipa automountkey-del baltimore auto.share --key=man\n" -msgid "Key" -msgstr "Llave" - -msgid "Automount key name." -msgstr " Nombre de clave de montaje automático" - -msgid "Mount information" -msgstr "Información de montaje" - -msgid "description" -msgstr "descripción" - -msgid "Location" -msgstr "Ubicación" - -msgid "Automount location name." -msgstr "Nombre de la ubicación de montaje automático." - -msgid "Map" -msgstr "Mapa" - -msgid "Automount map name." -msgstr " Nombre del mapa automount." - -msgid "Create a new automount key." -msgstr "Crear una nueva clave de automontaje." - -msgid "Delete an automount key." -msgstr "Borrar una clave de automontaje." - -msgid "Continuous mode: Don't stop on errors." -msgstr "Modo continuo: No se detenga en los errores." - -msgid "Search for an automount key." -msgstr "Buscar una clave de automontaje." - -msgid "Time Limit" -msgstr "Tiempo límite" - -msgid "Time limit of search in seconds" -msgstr "Tiempo máximo de búsqueda en segundos" - -msgid "Size Limit" -msgstr "Tamaño límite" - -msgid "Maximum number of entries returned" -msgstr "Cantidad máxima de entradas obtenidas" - -msgid "Modify an automount key." -msgstr "Modificar una clave de automontaje." - -msgid "New mount information" -msgstr "Nueva información de montaje" - -msgid "Rename" -msgstr "Cambiar el nombre de" - -#, fuzzy -msgid "Rename the automount key object" -msgstr "Objeto clave de automontaje" - -msgid "Display an automount key." -msgstr "Mostrar una clave de automontaje." - -msgid "Create a new automount location." -msgstr "Crear una nueva localización de automontaje." - -msgid "Delete an automount location." -msgstr "Borrar una localización de automontaje." - -msgid "Search for an automount location." -msgstr "Buscar una localización de automontaje." - -#, fuzzy -msgid "Results should contain primary key attribute only (\"location\")" +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" msgstr "" -"Los resultados deberían contener solo la clave del atributo primario (\"name" -"\")" - -msgid "Display an automount location." -msgstr "Mostrar una localización de automontaje" - -msgid "Generate automount files for a specific location." -msgstr "Generar ficheros de automontaje para una localización específica." - -msgid "Create a new automount map." -msgstr "Crear un nuevo mapa de automontaje" - -msgid "Create a new indirect mount point." -msgstr "Crear un nuevo punto de montaje indirecto." - -msgid "Mount point" -msgstr "Punto de montaje" - -msgid "Parent map" -msgstr "Mapa del padre" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" -"Nombre del mapa de montaje automático de padre (por defecto: auto.master)." - -msgid "Delete an automount map." -msgstr "Borrar un mapa de automontaje." - -msgid "Search for an automount map." -msgstr "Buscar un mapa de automontaje." - -#, fuzzy -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" -"Los resultados deberían contener solo la clave del atributo primario (\"name" -"\")" - -msgid "Modify an automount map." -msgstr "Modificar un mapa de automontaje" - -msgid "Display an automount map." -msgstr "Mostrar un mapa de automontaje" +"\n" +"En base al propietario hay tres categorías de bóveda:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" msgid "" "\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" msgstr "" - -msgid "Nested Methods to execute" -msgstr "Métodos anidados para ejecutar" +"\n" +"En base al mecanismos de seguridad hay tres tipos de\n" +"bóvedas:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" msgid "" "\n" -"IPA certificate operations\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" "\n" -"Implements a set of commands for managing server SSL certificates.\n" +"Brinde claridad a la membresía de hosts y usuarios configurando patrones\n" +"inclusivos o exclusivos de expresiones regulares, usted puede " +"automáticamente\n" +"asignar una nuevas entradas a un grupo o grupo de host en base a la " +"información del atributo.\n" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" +"\n" +"Las CAs (todas excepto la CA 'IPA') pueden ser borradas. El borrado de una " +"CA\n" +"origina que la su firma sea revocada y su clave privada borrada.\n" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" +"\n" +"Las CAs están habilitadas en la creación, pero su uso está sujeto a las ACLs " +"de CA\n" +"a no ser que el operador haya permitido saltarse las ACLs de CA.\n" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" +"\n" +"Mapeando la Identidad del Certificado\n" + +msgid "" "\n" "Certificate requests exist in the form of a Certificate Signing Request " "(CSR)\n" "in PEM format.\n" +msgstr "" "\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" +"Las peticiones de certificado existen en la forma de una Petición de Firma " +"de\n" +"Certificado (CSR) en formato PEM.\n" + +msgid "" "\n" "Certificates may be searched on by certificate subject, serial number,\n" "revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -#, fuzzy -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" -"Comprueba si alguno de los servidores tiene un servicio DNS habilitado." - -#, fuzzy -msgid "Search for existing certificates." -msgstr "Recuperar un certificado existente." - -#, fuzzy -msgid "Match cn attribute in subject" -msgstr "El atributo username sobre el objeto usuario" - -msgid "Reason" -msgstr "Motivo" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "Motivo por el cual el certificado ha sido revocado (0-10)" - -#, fuzzy -msgid "minimum serial number" -msgstr "Número de serie" - -#, fuzzy -msgid "maximum serial number" -msgstr "Número de serie" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -#, fuzzy -msgid "Maximum number of certs returned" -msgstr "Cantidad máxima de entradas obtenidas" - -msgid "Take a revoked certificate off hold." -msgstr "Tomar un certificado revocado de espera." - -msgid "Serial number" -msgstr "Número de serie" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "Número de serie en decimales, o hexadecimales, si tiene un prefijo 0x" - -msgid "Submit a certificate signing request." -msgstr "Enviar una petición de firma de certificado." - -msgid "CSR" -msgstr "CSR" - -msgid "Principal" -msgstr "Principal" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" -"Principal del servicio para este certificado (p.ej. HTTP/prueba.ejemplo.com)" - -msgid "automatically add the principal if it doesn't exist" -msgstr "si no existe, agregar automáticamente el principal" - -msgid "Dictionary mapping variable name to value" -msgstr "Nombre de la variable de mapeo de dicionario a valorizar " - -msgid "Revoke a certificate." -msgstr "Revocar un certificado." - -msgid "Retrieve an existing certificate." -msgstr "Recuperar un certificado existente." - -msgid "Output filename" -msgstr "Nombre de archivo de salida" - -msgid "File to store the certificate in." -msgstr "Archivo para almacenar el certificado" - -msgid "Check the status of a certificate signing request." -msgstr "Verificar el estado de una solicitud de firma de certificado." - -msgid "Request id" -msgstr "Id de la petición" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "Maximum username length" -msgstr "Largo máximo para nombre de usuario" - -msgid "Home directory base" -msgstr "Base del directorio principal" - -msgid "Default location of home directories" -msgstr "Localización por defecto de los directorios home" - -msgid "Default shell" -msgstr "Shell predeterminada" - -msgid "Default shell for new users" -msgstr "Shell predeterminada para usuarios nuevos" - -msgid "Default users group" -msgstr "Grupo de usuarios predeterminado" - -msgid "Default group for new users" -msgstr "Grupo predeterminado para usuarios nuevos" - -msgid "Default e-mail domain" -msgstr "Dominio de correo electrónico por defecto" - -msgid "Search time limit" -msgstr "Buscar límite de tiempo" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" -"Máxima cantidad de tiempo (segundos) parab una búsqueda (> 0, o -1 para " -"ilimitado)" - -msgid "Search size limit" -msgstr "Límite del tamaño de la búsqueda" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "Máximo número de registros a buscar (-1 es ilimitado)" - -msgid "User search fields" -msgstr "Campos de búsqueda de usuario" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" -"Una lista separada por comas de los campos a buscar cuando se está buscando " -"usuarios" - -#, fuzzy -msgid "Group search fields" -msgstr "Campos de búsqueda de usuario" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" -"Una lista separada por comas de los campos a buscar cuando se está buscando " -"grupos" - -msgid "Enable migration mode" -msgstr "Habilitar modo migración" - -msgid "Certificate Subject base" -msgstr "Base de certificado de asunto" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "Base para sujetos certificados (OU=Prueba,O=Ejemplo)" - -msgid "Default group objectclasses" -msgstr "Grupo predeterminado objectclass" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "Clases de objeto grupo por defecto (lista separada por comas)" - -msgid "Default user objectclasses" -msgstr "Usuario predeterminado objectclasses" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "Clases de objeto usuario por defecto (lista separada por comas)" - -msgid "Password Expiration Notification (days)" -msgstr "Notificación de Expiración de Contraseña (días)" - -msgid "Number of days's notice of impending password expiration" -msgstr "Aviso de número de días de expiración inminente de contraseña" - -msgid "Password plugin features" -msgstr "Funciones del complemento de contraseña" - -msgid "Extra hashes to generate in password plug-in" -msgstr "Hashes extra para generar en el plugin de contraseña" - -#, fuzzy -msgid "SELinux user map order" -msgstr "Regla Mapa de Usuario SELinux" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" - -#, fuzzy -msgid "Default SELinux user" -msgstr "Borrar un Mapa de Usuario SELinux." - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" - -#, fuzzy -msgid "Default PAC types" -msgstr "Tipo PAC" - -msgid "Default types of PAC supported for services" -msgstr "" - -#, fuzzy -msgid "Default user authentication types" -msgstr "Última autenticación fallada" - -#, fuzzy -msgid "Default types of supported user authentication" -msgstr "El número de veces para reintentar la autenticación" - -msgid "Modify configuration options." -msgstr "Modificar opciones de configuración." - -msgid "Show the current configuration." -msgstr "Muestra la configuración actual" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" -"\n" -"Grupo a Delegación de Grupo\n" -"\n" -"Un permiso habilita una delegación de grano fino de permisos. Reglas de " -"Control\n" -"de Acceso o instrucciones (ACIs), otorgan permisos a los permisos para " -"llevar a\n" -"cabo tareas dadas como añadir un usuario, modificar un grupo, etc.\n" -"\n" -"Grupo a Delegaciones de Grupo concede a los miembros de un grupo para\n" -"actualizar un conjunto de atributos de miembros de otro grupo.\n" -"\n" -"EJEMPLOS:\n" -"\n" -"Añadir una regla de delegación para permitir a los gestores editar las " -"direcciones de los empleados:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Cuando gestiona una lista de atributos usted necesita incluir todos los " -"atributos en \n" -" la lista, incluyendo los existentes. Añadir postalCode a la lista:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Mostrar nuestra regla actualizada:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Borrar una regla:\n" -" ipa delegation-del \"managers edit employees' street\"\n" - -msgid "Delegation name" -msgstr "Nombre de delegación" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "Permisos a conceder (read, write). Predeterminado es write." - -msgid "Attributes to which the delegation applies" -msgstr "Atributos a los que aplica la delegación" - -msgid "Member user group" -msgstr "Miembro del grupo de usuarios" - -msgid "User group to apply delegation to" -msgstr "Grupo de usuarios para solicitar a la delegación" - -msgid "Add a new delegation." -msgstr "Añadir una nueva delegación." - -msgid "Delete a delegation." -msgstr "Borrar una delegación." - -msgid "Search for delegations." -msgstr "Buscar delegaciones." - -msgid "Modify a delegation." -msgstr "Modificar una delegación." - -msgid "Display information about a delegation." -msgstr "Mostrar información sobre una delegación." - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "Global forwarders" -msgstr "Promotores globales" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Promotores globales. Se puede especificar un pueeto personalizado por cada " -"promotor usando el formato estándar \"IP_ADDRESS port PORT\"" - -msgid "Forward policy" -msgstr "Política de envío" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" -"Política de reenvío global. Establecer a \"none\" para deshabilitar " -"cualquier promotor global." - -msgid "Allow PTR sync" -msgstr "Permitir sincronización PTR" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" -"Permite la sincronización de registros de reenvío (A, AAAA) y reversa (PTR)" - -msgid "Zone refresh interval" -msgstr "Intervalo de refresco de zona" - -msgid "Zone name" -msgstr "Nombre de la zona" - -msgid "Zone name (FQDN)" -msgstr "Nombre de la zona (FQDN)" - -msgid "Reverse zone IP network" -msgstr "Zona reversa de red IP" - -msgid "IP network to create reverse zone name from" -msgstr "Red IP para crear un nombre de zona reversa desde" - -msgid "Active zone" -msgstr "Activar zona" - -msgid "Is zone active?" -msgstr "¿Está la zona activa?" - -msgid "Zone forwarders" -msgstr "Zona de expedidores" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Expedidores por zona. Se puede especificar un puerto personalizado para cada " -"exedidor usando el formato estándar \"IP_ADDRESS port PORT\"" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" -"Política de envío condicional por zona. Se establece a \"none\" para " -"deshabilitar el envío a expedidores globales para esta zona. En este caso, " -"la zona condicional de expedidores es ignorada." - -msgid "Record name" -msgstr "Nombre de registro" - -msgid "Time to live" -msgstr "Tiempo para abandonar" - -msgid "Records" -msgstr "Registros" - -msgid "Record type" -msgstr "Tipo de registro" - -msgid "Record data" -msgstr "Registrar datos" - -#, fuzzy -msgid "A record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw A records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "A IP Address" -msgstr "Dirección IP" - -msgid "IP Address" -msgstr "Dirección IP" - -#, fuzzy -msgid "A Create reverse" -msgstr "Crear reversa" - -msgid "Create reverse record for this IP Address" -msgstr "Crear registro reverso para esta Dirección IP" - -#, fuzzy -msgid "AAAA record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw AAAA records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "AAAA IP Address" -msgstr "Dirección IP" - -#, fuzzy -msgid "AAAA Create reverse" -msgstr "Crear reversa" - -#, fuzzy -msgid "A6 record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw A6 records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "A6 Record data" -msgstr "Registrar datos" - -#, fuzzy -msgid "AFSDB record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw AFSDB records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "AFSDB Subtype" -msgstr "Subtipo" - -msgid "Subtype" -msgstr "Subtipo" - -#, fuzzy -msgid "AFSDB Hostname" -msgstr "Nombre del equipo anfitrión" - -msgid "Hostname" -msgstr "Nombre del equipo anfitrión" - -#, fuzzy -msgid "APL record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw APL records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "CERT record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw CERT records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "CERT Certificate Type" -msgstr "Tipo de certificado" - -msgid "Certificate Type" -msgstr "Tipo de certificado" - -#, fuzzy -msgid "CERT Key Tag" -msgstr "Etiqueta de clave" - -msgid "Key Tag" -msgstr "Etiqueta de clave" - -#, fuzzy -msgid "CERT Algorithm" -msgstr "Algoritmo" - -msgid "Algorithm" -msgstr "Algoritmo" - -#, fuzzy -msgid "CERT Certificate/CRL" -msgstr "Certificado/CRL" - -msgid "Certificate/CRL" -msgstr "Certificado/CRL" - -#, fuzzy -msgid "CNAME record" -msgstr "Registro NSEC3PARAM" - -#, fuzzy -msgid "Raw CNAME records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "CNAME Hostname" -msgstr "Nombre del equipo anfitrión" - -msgid "A hostname which this alias hostname points to" -msgstr "Un nombre de host al que este nombre de host alias apunta" - -#, fuzzy -msgid "DHCID record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw DHCID records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "DLV record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw DLV records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "DLV Key Tag" -msgstr "Etiqueta de clave" - -#, fuzzy -msgid "DLV Algorithm" -msgstr "Algoritmo" - -#, fuzzy -msgid "DLV Digest Type" -msgstr "Tipo de Resumen" - -msgid "Digest Type" -msgstr "Tipo de Resumen" - -#, fuzzy -msgid "DLV Digest" -msgstr "Resumen" - -msgid "Digest" -msgstr "Resumen" - -#, fuzzy -msgid "DNAME record" -msgstr "Registro NSEC3PARAM" - -#, fuzzy -msgid "Raw DNAME records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "DNAME Target" -msgstr "Meta" - -msgid "Target" -msgstr "Meta" - -#, fuzzy -msgid "DNSKEY record" -msgstr "Registros IPA DNS" - -#, fuzzy -msgid "Raw DNSKEY records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "DS record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw DS records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "DS Key Tag" -msgstr "Etiqueta de clave" - -#, fuzzy -msgid "DS Algorithm" -msgstr "Algoritmo" - -#, fuzzy -msgid "DS Digest Type" -msgstr "Tipo de Resumen" - -#, fuzzy -msgid "DS Digest" -msgstr "Resumen" - -#, fuzzy -msgid "HIP record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw HIP records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "IPSECKEY record" -msgstr "Registros IPA DNS" - -#, fuzzy -msgid "Raw IPSECKEY records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "KEY record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw KEY records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "KX record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw KX records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "KX Preference" -msgstr "Preferencia" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" -"Se ha dado preferencia a este intercambiador. Se prefieren más los valores " -"más bajos" - -#, fuzzy -msgid "KX Exchanger" -msgstr "Intercambiador" - -msgid "A host willing to act as a key exchanger" -msgstr "Un host dispuesto a actuar como un intercambiador clave" - -#, fuzzy -msgid "LOC record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw LOC records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "LOC Degrees Latitude" -msgstr "Latitud en grados" - -msgid "Degrees Latitude" -msgstr "Latitud en grados" - -#, fuzzy -msgid "LOC Minutes Latitude" -msgstr "Latitud en minutos" - -msgid "Minutes Latitude" -msgstr "Latitud en minutos" - -#, fuzzy -msgid "LOC Seconds Latitude" -msgstr "Latitud en segundos" - -msgid "Seconds Latitude" -msgstr "Latitud en segundos" - -#, fuzzy -msgid "LOC Direction Latitude" -msgstr "Latitud de dirección" - -msgid "Direction Latitude" -msgstr "Latitud de dirección" - -#, fuzzy -msgid "LOC Degrees Longitude" -msgstr "Grados de Longitud" - -msgid "Degrees Longitude" -msgstr "Grados de Longitud" - -#, fuzzy -msgid "LOC Minutes Longitude" -msgstr "Minutos de Longitud" - -msgid "Minutes Longitude" -msgstr "Minutos de Longitud" - -#, fuzzy -msgid "LOC Seconds Longitude" -msgstr "Segundos de Longitud" - -msgid "Seconds Longitude" -msgstr "Segundos de Longitud" - -#, fuzzy -msgid "LOC Direction Longitude" -msgstr "Dirección de la Longitud" - -msgid "Direction Longitude" -msgstr "Dirección de la Longitud" - -#, fuzzy -msgid "LOC Altitude" -msgstr "Altitud" - -msgid "Altitude" -msgstr "Altitud" - -#, fuzzy -msgid "LOC Size" -msgstr "Tamaño" - -msgid "Size" -msgstr "Tamaño" - -#, fuzzy -msgid "LOC Horizontal Precision" -msgstr "Precisión horizontal" - -msgid "Horizontal Precision" -msgstr "Precisión horizontal" - -#, fuzzy -msgid "LOC Vertical Precision" -msgstr "Precisión vertical" - -msgid "Vertical Precision" -msgstr "Precisión vertical" - -#, fuzzy -msgid "MX record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw MX records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "MX Preference" -msgstr "Preferencia" - -#, fuzzy -msgid "MX Exchanger" -msgstr "Intercambiador" - -msgid "A host willing to act as a mail exchanger" -msgstr "Un host dispuesto a actuar como un intercambiador de correo" - -#, fuzzy -msgid "NAPTR record" -msgstr "Registro NSEC3PARAM" - -#, fuzzy -msgid "Raw NAPTR records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "NAPTR Order" -msgstr "Orden" - -msgid "Order" -msgstr "Orden" - -#, fuzzy -msgid "NAPTR Preference" -msgstr "Preferencia" - -msgid "Preference" -msgstr "Preferencia" - -#, fuzzy -msgid "NAPTR Flags" -msgstr "Banderas" - -msgid "Flags" -msgstr "Banderas" - -#, fuzzy -msgid "NAPTR Service" -msgstr "Cualquier servicio" - -msgid "Service" -msgstr "Servicio" - -#, fuzzy -msgid "NAPTR Regular Expression" -msgstr "Expresión regular" - -msgid "Regular Expression" -msgstr "Expresión regular" - -#, fuzzy -msgid "NAPTR Replacement" -msgstr "Reemplazo" - -msgid "Replacement" -msgstr "Reemplazo" - -#, fuzzy -msgid "NS record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw NS records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "NS Hostname" -msgstr "Nombre del equipo anfitrión" - -#, fuzzy -msgid "NSEC record" -msgstr "Registro NSEC3PARAM" - -#, fuzzy -msgid "Raw NSEC records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "NSEC3 record" -msgstr "Registro NSEC3PARAM" - -#, fuzzy -msgid "Raw NSEC3 records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "PTR record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw PTR records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "PTR Hostname" -msgstr "Nombre del equipo anfitrión" - -msgid "The hostname this reverse record points to" -msgstr "El nombre de host al que apunta este registro inverso" - -#, fuzzy -msgid "RRSIG record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw RRSIG records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "RP record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw RP records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "SIG record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw SIG records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "SPF record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw SPF records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "SRV record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw SRV records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "SRV Priority" -msgstr "Prioridad" - -msgid "Priority" -msgstr "Prioridad" - -#, fuzzy -msgid "SRV Weight" -msgstr "Peso" - -msgid "Weight" -msgstr "Peso" - -#, fuzzy -msgid "SRV Port" -msgstr "Puerto" - -msgid "Port" -msgstr "Puerto" - -#, fuzzy -msgid "SRV Target" -msgstr "Meta" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" -"El nombre de dominio del host objetivo o '.' si el servicio es decididamente " -"no disponible en este dominio" - -#, fuzzy -msgid "SSHFP record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw SSHFP records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "SSHFP Algorithm" -msgstr "Algoritmo" - -#, fuzzy -msgid "SSHFP Fingerprint Type" -msgstr "Tipo de huella digital" - -msgid "Fingerprint Type" -msgstr "Tipo de huella digital" - -#, fuzzy -msgid "SSHFP Fingerprint" -msgstr "Huella digital SHA1" - -msgid "Fingerprint" -msgstr "Huella digital" - -#, fuzzy -msgid "TA record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw TA records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "TLSA record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw TLSA records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "TLSA Certificate Usage" -msgstr "Utilización del Certificado" - -msgid "Certificate Usage" -msgstr "Utilización del Certificado" - -#, fuzzy -msgid "TLSA Selector" -msgstr "Selector" - -msgid "Selector" -msgstr "Selector" - -#, fuzzy -msgid "TLSA Matching Type" -msgstr "Tipo de Coincidencia" - -msgid "Matching Type" -msgstr "Tipo de Coincidencia" - -#, fuzzy -msgid "TLSA Certificate Association Data" -msgstr "Datos de Asociación del Certificado" - -msgid "Certificate Association Data" -msgstr "Datos de Asociación del Certificado" - -#, fuzzy -msgid "TKEY record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw TKEY records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "TSIG record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw TSIG records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "TXT record" -msgstr "%s registro" - -#, fuzzy -msgid "Raw TXT records" -msgstr "Registros brutos %s" - -#, fuzzy -msgid "TXT Text Data" -msgstr "Datos de texto" - -msgid "Text Data" -msgstr "Datos de texto" - -msgid "Authoritative nameserver" -msgstr "Nombre de servidor autoritativo" - -msgid "Authoritative nameserver domain name" -msgstr "Nombre de dominio servidor de nombre autorizado" - -msgid "Administrator e-mail address" -msgstr "Correo-e de administrador" - -msgid "SOA serial" -msgstr "Serie SOA" - -msgid "SOA record serial number" -msgstr "Número de serie de registro SOA" - -msgid "SOA refresh" -msgstr "Actualizar SOA" - -msgid "SOA record refresh time" -msgstr "registro SOA tiempo de actualización" - -msgid "SOA retry" -msgstr "Reintentar SOA" - -msgid "SOA record retry time" -msgstr "tiempo de reintento de " - -msgid "SOA expire" -msgstr "Expirar SOA" - -msgid "SOA record expire time" -msgstr "tiempo de expiración de registro SOA" - -msgid "SOA minimum" -msgstr "Mínimo SOA" - -msgid "How long should negative responses be cached" -msgstr "¿Por cuánto tiempo las respuestas negativas deben guardarse en cache?" - -msgid "Time to live for records at zone apex" -msgstr "Tiempo de vida de los registros en zona apéndice" - -msgid "BIND update policy" -msgstr "Política de actualización de BIND" - -msgid "Dynamic update" -msgstr "Actualización dinámica" - -msgid "Allow dynamic updates." -msgstr "Permitir actualizaciones dinámicas." - -msgid "Allow query" -msgstr "Permitir consulta" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" -"Lista separada por punto y coma de direcciones IP o redes que tiene " -"permitido enviar peticiones" - -msgid "Allow transfer" -msgstr "Permitir transferencia" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" -"Lista separada por punto y coma de direcciones IP o redes que tiene " -"permitido transferir la zona" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" -"Permitir la sincronización de registros adelante (A, AAAA) y atrás (PTR) en " -"la zona" - -msgid "Allow in-line DNSSEC signing" -msgstr "Permitida la firma DNSSEC en línea" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "Permitida la firma DNSSEC de registros en la zona" - -msgid "NSEC3PARAM record" -msgstr "Registro NSEC3PARAM" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" -"Registro NSEC3PARAM rpara la zona en formato: hash_algorithm flags " -"iterations salt" - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" -"Comprueba si alguno de los servidores tiene un servicio DNS habilitado." - -msgid "Resolve a host name in DNS." -msgstr "Resolver un nombre de host en DNS." - -msgid "Modify global DNS configuration." -msgstr "Modificar la configuración global DNS." - -msgid "Show the current global DNS configuration." -msgstr "Mostrar la configuración global DNS actual." - -msgid "Create new DNS forward zone." -msgstr "Crear una zona de envío DNS." - -msgid "Add a permission for per-forward zone access delegation." -msgstr "Añadir un permiso para una delegación de acceso a zona por reenvío." - -msgid "Permission value" -msgstr "Valor de permiso" - -msgid "Delete DNS forward zone." -msgstr "Borrar forma de reenvío DNS." - -msgid "Disable DNS Forward Zone." -msgstr "Deshabilitar la Zona de Reenvío DNS." - -msgid "Enable DNS Forward Zone." -msgstr "Habilitar Zona de Reenvío DNS." - -msgid "Search for DNS forward zones." -msgstr "Buscar zonas de reenvío DNS." - -msgid "Modify DNS forward zone." -msgstr "Modificar zona de reenvío DNS." - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "Quitar un permiso para una delegación de acceso a zona por reenvío." - -msgid "Display information about a DNS forward zone." -msgstr "Mostrar información sobre una zona de reenvío DNS." - -msgid "Add new DNS resource record." -msgstr "Añadir nuevo registro de recurso DNS." - -msgid "Force" -msgstr "Forzar" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "Forzar la creación del registro DNS, aunque su nombre no sea absoluto" - -msgid "Structured" -msgstr "Estructurado" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" -"Analiza todos los registros DNS crudos y los devuelve de modo estructurado" - -msgid "Delete DNS resource record." -msgstr "Borrar un registro de recurso DNS." - -msgid "Delete all associated records" -msgstr "Eliminar todos los registros asociados" - -msgid "Delete DNS record entry." -msgstr "Borrar entrada de registro DNS." - -msgid "Search for DNS resources." -msgstr "Buscar recursos DNS." - -msgid "Modify a DNS resource record." -msgstr "Modificar un registro de recurso DNS." - -#, fuzzy -msgid "Rename the DNS resource record object" -msgstr "Borrar un registro de recurso DNS." - -msgid "Display DNS resource." -msgstr "Mostrar un recurso DNS." - -msgid "Create new DNS zone (SOA record)." -msgstr "Crear nueva zona DNS (registro SOA)." - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" -"Fuerza la creación de zona DNS aunque el servidor de nombre no se pueda " -"resolver." - -msgid "Add a permission for per-zone access delegation." -msgstr "Añade un permiso para una delegación de acceso por zona." - -msgid "Delete DNS zone (SOA record)." -msgstr "Borrar zona DNS (registro SOA)." - -msgid "Disable DNS Zone." -msgstr "Deshabilitar Zona DNS." - -msgid "Enable DNS Zone." -msgstr "Habilitar Zona DNS." - -msgid "Search for DNS zones (SOA records)." -msgstr "Buscar zonas DNS (registros SOA)." - -msgid "Forward zones only" -msgstr "Zonas de reenvío sólo" - -msgid "Search for forward zones only" -msgstr "Buscar zonas de reenvío sólo" - -msgid "Modify DNS zone (SOA record)." -msgstr "Modificar zona DNS (registro SOA)." - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" -"Fuerza el cambio del servidor de nombre aunque el servidor de nombre no en " -"DNS" - -msgid "Remove a permission for per-zone access delegation." -msgstr "Quita un permiso para una delegación de acceso por zona." - -msgid "Display information about a DNS zone (SOA record)." -msgstr "Mostrar información sobre una zona DNS (registro SOA)." - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "Group name" -msgstr "Nombre del grupo" - -msgid "Group description" -msgstr "Descripción del grupo" - -msgid "GID" -msgstr "GID" - -msgid "GID (use this option to set it manually)" -msgstr "GID (utilice esta opción para definirlo manualmente)" - -msgid "Member users" -msgstr "Usuarios miembros" - -msgid "Member groups" -msgstr "Grupos de miembros" - -msgid "Member of groups" -msgstr "Miembros de los grupos" - -msgid "Roles" -msgstr " Roles" - -msgid "Member of netgroups" -msgstr "Miembros de netgroups" - -#, fuzzy -msgid "Member of Sudo rule" -msgstr "Miembro de un grupo" - -#, fuzzy -msgid "Member of HBAC rule" -msgstr "Miembro del servicio HBAC" - -msgid "Indirect Member users" -msgstr "Usuarios indirectos miembros" - -msgid "Indirect Member groups" -msgstr "Grupos de miembros indirectos" - -#, fuzzy -msgid "Indirect Member of group" -msgstr "Grupos de miembros indirectos" - -#, fuzzy -msgid "Indirect Member of netgroup" -msgstr "Miembros indirectos netgroups" - -#, fuzzy -msgid "Indirect Member of role" -msgstr "Roles de miembros indirectos" - -#, fuzzy -msgid "Indirect Member of Sudo rule" -msgstr "Roles de miembros indirectos" - -#, fuzzy -msgid "Indirect Member of HBAC rule" -msgstr "Roles de miembros indirectos" - -msgid "Create a new group." -msgstr "Crear un grupo nuevo." - -msgid "Create as a non-POSIX group" -msgstr " Crear como un grupo no POSIX" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" -"Permitir el añadido de miembros externos no IPA desde dominios de confianza" - -msgid "Suppress processing of membership attributes." -msgstr "" - -msgid "Add members to a group." -msgstr "Agregar miembro a un grupo." - -msgid "External member" -msgstr "Miembro externo" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "Miembros de un dominio de confianza en formato DOM\\name o name@domain" - -msgid "member user" -msgstr "usuario miembro" - -#, fuzzy -msgid "users to add" -msgstr "%s a añadir" - -msgid "member group" -msgstr "miembro de grupo" - -#, fuzzy -msgid "groups to add" -msgstr "%s a añadir" - -msgid "Members that could not be added" -msgstr "Miembros que no han podido ser añadidos" - -msgid "Number of members added" -msgstr "Cantidad de miembros añadidos" - -msgid "Delete group." -msgstr "Eliminar grupo." - -msgid "Detach a managed group from a user." -msgstr "Desenganchar un grupo gestionado desde un usuario." - -msgid "Search for groups." -msgstr "Buscar grupos." - -msgid "search for private groups" -msgstr "Búsqueda de grupos privados" - -msgid "search for POSIX groups" -msgstr "buscar por grupos POXIS" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" -"búsqueda de grupos con soporte de miembros externos no IPA desde dominios de " -"confianza" - -msgid "search for non-POSIX groups" -msgstr "búsqueda de grupos no POSIX" - -#, fuzzy -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" -"Los resultados deberían contener solo la clave del atributo primario (\"name" -"\")" - -msgid "user" -msgstr "usuario" - -#, fuzzy -msgid "Search for groups with these member users." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for groups without these member users." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -msgid "group" -msgstr "grupo" - -#, fuzzy -msgid "Search for groups with these member groups." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for groups without these member groups." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for groups with these member of groups." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for groups without these member of groups." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -msgid "netgroup" -msgstr "grupo de red" - -#, fuzzy -msgid "Search for groups with these member of netgroups." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for groups without these member of netgroups." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -msgid "role" -msgstr "rol" - -#, fuzzy -msgid "Search for groups with these member of roles." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for groups without these member of roles." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -msgid "HBAC rule" -msgstr "Regla HBAC" - -#, fuzzy -msgid "Search for groups with these member of HBAC rules." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for groups without these member of HBAC rules." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -msgid "sudo rule" -msgstr "regla sudo" - -#, fuzzy -msgid "Search for groups with these member of sudo rules." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for groups without these member of sudo rules." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -msgid "Modify a group." -msgstr "Modificar un grupo." - -msgid "change to a POSIX group" -msgstr "Cambiar a un grupo POSIX" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" -"cambio para soportar miembros externos no IPA desde dominios de confianza" - -#, fuzzy -msgid "Rename the group object" -msgstr "Renombrar el permiso del objeto" - -msgid "Remove members from a group." -msgstr "Eliminar miembro desde un grupo." - -#, fuzzy -msgid "users to remove" -msgstr "%s a eliminar" - -#, fuzzy -msgid "groups to remove" -msgstr "%s a eliminar" - -msgid "Members that could not be removed" -msgstr "Miembros que no han podido ser eliminados" - -msgid "Number of members removed" -msgstr "Cantidad de miembros eliminados" - -msgid "Display information about a named group." -msgstr "Mostrar información sobre un grupo denominado." - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Rule name" -msgstr "Nombre de la regla" - -msgid "Rule type" -msgstr "Tipo de regla" - -msgid "Rule type (allow)" -msgstr "Tipo de regla (permitir)" - -msgid "User category" -msgstr "Categoría de usuario" - -msgid "User category the rule applies to" -msgstr "Categoría de usuario al que se aplica la regla" - -msgid "Host category" -msgstr "Categoría del equipo" - -msgid "Host category the rule applies to" -msgstr "Categoría del equipo al que se aplica la regla" - -msgid "Service category" -msgstr " Añadir servicios a una regla de HBAC" - -msgid "Service category the rule applies to" -msgstr "Categoría de servicio a la que se aplica la regla" - -msgid "Enabled" -msgstr "Habilitado" - -msgid "User Groups" -msgstr "Grupos de usuarios" - -msgid "Host Groups" -msgstr "Grupos de equipo" - -msgid "Services" -msgstr "Sevicios HBAC" - -msgid "Service Groups" -msgstr " Búsqueda de servicios HBAC." - -msgid "External host" -msgstr "Equipo externo" - -msgid "Create a new HBAC rule." -msgstr "Crear una nueva regla HBAC." - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "Añadir hosts objetivos y grupos de host a una regla HBAC." - -msgid "member host" -msgstr "host miembro" - -#, fuzzy -msgid "hosts to add" -msgstr "%s a añadir" - -msgid "member host group" -msgstr "miembro del grupo de host" - -#, fuzzy -msgid "host groups to add" -msgstr "grupos de host" - -msgid "Add services to an HBAC rule." -msgstr "Añadir servicios a una regla HBAC." - -#, fuzzy -msgid "member HBAC service" -msgstr "Miembro del servicio HBAC" - -#, fuzzy -msgid "HBAC services to add" -msgstr "Servicios HBAC" - -#, fuzzy -msgid "member HBAC service group" -msgstr "Grupos de servicio de Miembros HBAC" - -#, fuzzy -msgid "HBAC service groups to add" -msgstr "Grupos de servicio HBAC" - -msgid "Add users and groups to an HBAC rule." -msgstr "Añadir usuarios y grupos a una regla HBAC." - -msgid "Delete an HBAC rule." -msgstr "Borrar una regla HBAC." - -msgid "Disable an HBAC rule." -msgstr "Deshabilitar una regla HBAC." - -msgid "Enable an HBAC rule." -msgstr "Habilitar una regla HBAC." - -msgid "Search for HBAC rules." -msgstr "Buscar reglas HBAC." - -msgid "Modify an HBAC rule." -msgstr "Modificar una regla HBAC." - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "Borrar hosts objetivos y grupos de host de una regla HBAC." - -#, fuzzy -msgid "hosts to remove" -msgstr "%s a eliminar" - -#, fuzzy -msgid "host groups to remove" -msgstr "grupos de host" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "Borrar servicio y grupos de servicio de una regla HBAC." - -#, fuzzy -msgid "HBAC services to remove" -msgstr "Grupo de servicio HBAC" - -#, fuzzy -msgid "HBAC service groups to remove" -msgstr "Grupos de servicio HBAC" - -msgid "Remove users and groups from an HBAC rule." -msgstr "Borrar usuarios y grupos de una regla HBAC." - -msgid "Display the properties of an HBAC rule." -msgstr "Mostrar las propiedades de una regla HBAC." - -#, fuzzy -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" -"\n" -"Servicios de HBAC\n" -"\n" -"Los servicios PAM a los que HBAC puede controlar el acceso. El nombre " -"utilizado aquí debe coincidir\n" -"con el nombre del servicio que PAM está evaluando.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Añadir un nuevo servicio:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modificar un servicio de HBAC:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Buscar servicios para HBAC. Este ejemplo retornará dos resultados, el " -"servicio FTP\n" -" y el servicio recién añadido tftp:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Borrar un servicio de HBAC:\n" -" ipa hbacsvc-del tftp\n" -"\n" - -msgid "Service name" -msgstr "% (Count) d HBAC servicios encontrados" - -msgid "HBAC service" -msgstr "Servicio HBAC" - -msgid "HBAC service description" -msgstr "Descripción de servicio HBAC" - -#, fuzzy -msgid "Member of HBAC service groups" -msgstr "Grupos de servicio de Miembros HBAC" - -msgid "Add a new HBAC service." -msgstr "Añadir un nuevo servicio HBAC." - -msgid "Delete an existing HBAC service." -msgstr "Borrar un servicio HBAC existente." - -msgid "Search for HBAC services." -msgstr "Buscar un servicio HBAC." - -#, fuzzy -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" -"Los resultados deberían contener sólo atributo de clave primaria (“%s”)" - -msgid "Modify an HBAC service." -msgstr "Modificar un servicio HBAC." - -msgid "Display information about an HBAC service." -msgstr "Mostrar información sobre un servicio HBAC." - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "Service group name" -msgstr "" -" Desactivar la tecla de Kerberos, certificado SSL y todos los servicios " -"de un host." - -msgid "HBAC service group description" -msgstr "Servicios y grupos especificados" - -msgid "Member HBAC service" -msgstr "Miembro del servicio HBAC" - -msgid "Add a new HBAC service group." -msgstr "Añadir un nuevo grupo de servicio HBAC." - -msgid "Add members to an HBAC service group." -msgstr "Añadir miembros a un grupo de servicio HBAC." - -msgid "Delete an HBAC service group." -msgstr "Borrar un grupo de servicio HBAC." - -msgid "Search for an HBAC service group." -msgstr "Buscar un grupo de servicio HBAC." - -msgid "Modify an HBAC service group." -msgstr "Modificar un grupo de servicio HBAC." - -msgid "Remove members from an HBAC service group." -msgstr "Borrar miembros de un grupo de servicio HBAC." - -msgid "Display information about an HBAC service group." -msgstr "Mostrar información sobre un grupo de servicio HBAC." - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "Simular el uso de controles de acceso basados en Host" - -msgid "User name" -msgstr "Nombre de usuario" - -msgid "Target host" -msgstr "Host objetivo" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "Reglas para probar. Si no se especifica, - se asume que habilitado" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" -"Esconder detalles de que reglas coinciden, no coinciden o son no válidas" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "Incluir todas las reglas IPA habilitadas en la prueba [por defecto]" - -msgid "Include all disabled IPA rules into test" -msgstr "Incluir todas las reglas IPA deshabilitadas en la prueba" - -#, fuzzy -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "Máximo número de registros a buscar (-1 es ilimitado)" - -msgid "Warning" -msgstr "Aviso" - -msgid "Matched rules" -msgstr "Reglas coincidentes" - -msgid "Not matched rules" -msgstr "Reglas no coincidentes" - -msgid "Non-existent or invalid rules" -msgstr "Reglas no existentes o no válidas" - -msgid "Result of simulation" -msgstr "Resultado de la simulación" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host name" -msgstr "Nombre del equipo" - -msgid "A description of this host" -msgstr "Una descripción de este equipo" - -msgid "Locality" -msgstr "Localidad" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "Localidad del equipo (p.ej. \"Barrio latino, París\") " - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "Ubicación del equipo (p. ej. \"Laboratorio\")" - -msgid "Platform" -msgstr "Plataforma" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "Plataforma de hardware del equipo (p. ej. \"Lenovo T61\")" - -msgid "Operating system" -msgstr "Sistema operativo" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "" -"Sistema operativo que utiliza el equipo y versión (p.ej. \"Fedora 11\")" - -msgid "User password" -msgstr "Contraseña de usuario" - -msgid "Password used in bulk enrollment" -msgstr "Contraseña utilizada en el registro bruto" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "Generar una contraseña aleatoria que se utilizará en la inscripción " - -msgid "Random password" -msgstr "Contraseña aleatoria" - -msgid "Certificate" -msgstr "Certificado" - -msgid "Base-64 encoded server certificate" -msgstr "Certificado del servidor codificado con base-64" - -msgid "Principal name" -msgstr "Nombre principal" - -msgid "MAC address" -msgstr "Dirección MAC" - -msgid "Hardware MAC address(es) on this host" -msgstr "Dirección(es) Hardware MAC en este host" - -msgid "SSH public key" -msgstr "Clave pública SSH" - -msgid "Class" -msgstr "Clase" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" -"Categoría de host (las semánticas situadas en este atributo son para " -"interpretación local)" - -msgid "Assigned ID View" -msgstr "Vista ID asignada" - -msgid "Requires pre-authentication" -msgstr "Requiere autenticación previa" - -msgid "Pre-authentication is required for the service" -msgstr "Se requiere autenticación previa para el servicio" - -msgid "Trusted for delegation" -msgstr "Confiable para la delegación" - -msgid "Client credentials may be delegated to the service" -msgstr "Las credenciales del cliente pueden delegarse al servicio" - -msgid "Member of host-groups" -msgstr "Miembro de los grupos de equipo" - -#, fuzzy -msgid "Indirect Member of host-group" -msgstr "Miembros indirectos de host-groups" - -msgid "Keytab" -msgstr "Keytab" - -msgid "Managed by" -msgstr "Gestionado por" - -#, fuzzy -msgid "Managing" -msgstr "Manager" - -msgid "Users allowed to retrieve keytab" -msgstr "Los usuarios pueden recuperar keytab" - -msgid "Groups allowed to retrieve keytab" -msgstr "Los grupos pueden recuperar keytab" - -msgid "Hosts allowed to retrieve keytab" -msgstr "Los hosts pueden recuperar keytab" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "Los Grupos de Host pueden recuperar keytab" - -msgid "Users allowed to create keytab" -msgstr "Los usuarios pueden crear keytab" - -msgid "Groups allowed to create keytab" -msgstr "Los grupos pueden crear keytab" - -msgid "Hosts allowed to create keytab" -msgstr "Los hosts pueden crear keytab" - -msgid "Host Groups allowed to create keytab" -msgstr "Los Grupos de Host pueden crear keytab" - -msgid "Add a new host." -msgstr "Añadir un n uevo host." - -msgid "force host name even if not in DNS" -msgstr "" -"fuerza el nombre del equipo anfitrión, incluso si no se encuentra en DNS" - -msgid "skip reverse DNS detection" -msgstr "Ignorar la detección inversa de DNS" - -msgid "Add the host to DNS with this IP address" -msgstr "Agregar el host de DNS con esta dirección IP" - -msgid "Add hosts that can manage this host." -msgstr "Añadir hosts que pueda manejar este host." - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" -"Permite a usuarios, grupos, hosts o grupos de host crear una keytab de este " -"host." - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" -"Permite a usuarios, grupos, hosts o grupos de host recuperar una keytab de " -"este host." - -msgid "Delete a host." -msgstr "Borrar un host." - -msgid "Remove entries from DNS" -msgstr "Eliminar entradas de DNS" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" -"Deshabilitar la clave Kerberos, el certificado SSL y todos los servicios de " -"un host." - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" -"No permite a usuarios, grupos, hosts o grupos de host crear una keytab de " -"este host." - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" -"No permite a usuarios, grupos, hosts o grupos de host recuperar una keytab " -"de este host." - -msgid "Search for hosts." -msgstr "Buscar hosts." - -#, fuzzy -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" -"Los resultados deberían contener solo la clave del atributo primario (\"name" -"\")" - -msgid "host group" -msgstr "grupo de host" - -#, fuzzy -msgid "Search for hosts with these member of host groups." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for hosts without these member of host groups." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for hosts with these member of netgroups." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for hosts without these member of netgroups." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for hosts with these member of roles." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for hosts without these member of roles." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for hosts with these member of HBAC rules." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for hosts without these member of HBAC rules." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for hosts with these member of sudo rules." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for hosts without these member of sudo rules." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for hosts with these enrolled by users." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for hosts without these enrolled by users." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -msgid "host" -msgstr "host" - -#, fuzzy -msgid "Search for hosts with these managed by hosts." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for hosts without these managed by hosts." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for hosts with these managing hosts." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for hosts without these managing hosts." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -msgid "Modify information about a host." -msgstr "Modificar información sobre un host." - -msgid "Kerberos principal name for this host" -msgstr "Nombre del prinicpal de Kerberos para este equipo" - -msgid "Update DNS entries" -msgstr "Actualizar las entradas DNS" - -msgid "Remove hosts that can manage this host." -msgstr "Borrar hosts que puede manejar este host." - -msgid "Display information about a host." -msgstr "Mostrar información sobre un host." - -msgid "file to store certificate in" -msgstr "archivo para almacenar" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "Host-group" -msgstr "Grupo de equipo" - -msgid "Name of host-group" -msgstr "Nombre del grupo de equipo" - -msgid "A description of this host-group" -msgstr "Una descripción de este grupo de equipo" - -msgid "Member hosts" -msgstr "Equipos miembro" - -msgid "Member host-groups" -msgstr "Grupos de equipo miembro" - -msgid "Indirect Member hosts" -msgstr "Hosts de miembros indirectos" - -msgid "Indirect Member host-groups" -msgstr "Miembros indirectos de host-groups" - -msgid "Add a new hostgroup." -msgstr "Añadir un nuevo grupo de host." - -msgid "Add members to a hostgroup." -msgstr "Añadir miembros a un grupo de host." - -msgid "Delete a hostgroup." -msgstr "Borrar un grupo de host." - -msgid "Search for hostgroups." -msgstr "Buscar grupos de host." - -#, fuzzy -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" -"Los resultados deberían contener solo atributo de clave primaria " -"(\"sudocmdgroup-name\")" - -#, fuzzy -msgid "Search for host groups with these member hosts." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for host groups without these member hosts." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for host groups with these member host groups." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for host groups without these member host groups." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for host groups with these member of host groups." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for host groups without these member of host groups." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for host groups with these member of netgroups." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for host groups without these member of netgroups." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for host groups with these member of HBAC rules." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for host groups without these member of HBAC rules." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for host groups with these member of sudo rules." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for host groups without these member of sudo rules." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -msgid "Modify a hostgroup." -msgstr "Modificar un grupo de host." - -msgid "Remove members from a hostgroup." -msgstr "Borrar miembros de un grupo de host." - -msgid "Display information about a hostgroup." -msgstr "Mostrar información sobre un grupo de host." - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "Range name" -msgstr "Nombre del intervalo" - -msgid "First Posix ID of the range" -msgstr "Primer Posix ID del rango" - -msgid "Number of IDs in the range" -msgstr "Número de IDs en el rango" - -msgid "First RID of the corresponding RID range" -msgstr "Primer RID del correspondiente rango RID" - -msgid "First RID of the secondary RID range" -msgstr "Primer RID del rango RID secundario" - -msgid "Domain SID of the trusted domain" -msgstr "SID de dominio del dominio de confianza" - -msgid "Name of the trusted domain" -msgstr "Nombre del dominio de confianza" - -msgid "Range type" -msgstr "Tipo de intervalo" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" -"\n" -"Añadir un nuevo rango de ID.\n" -"\n" -" Para añadir un nuevo rango de ID siempre debe especificar\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Adicionalmente\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" puede ser dado para un nuevo rango de ID para el dominio local mientras\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" deben ser dados para añadir un nuevo rango para un AD de dominio de " -"confianza.\n" -"\n" -" PRECAUCIÓN:\n" -"\n" -" El plugin DNA en 389-ds ubicará IDs en base a los rangos configurados " -"para el dominio\n" -" local. Actualmente el plugin DNA \"no puede\" ser reconfigurado por si " -"mismo en base a\n" -" los rangos locales ajustados por medio de esta familia de comandos.\n" -"\n" -" El cambio manual de configuración ha sido hecho en la configuración del " -"plugin DNA\n" -" para el nuevo rango local. Específicamente, el atributo dnaNextRange de " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' ha " -"sido\n" -" modificado para coincidir con el nuevo rango.\n" -" " - -msgid "Delete an ID range." -msgstr "Eliminar un intervalo de ID." - -msgid "Search for ranges." -msgstr "Buscar intervalos." - -msgid "Modify ID range." -msgstr "Modificar rango de ID." - -msgid "Display information about a range." -msgstr "Mostrar información sobre un rango." - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -msgid "Anchor to override" -msgstr "" - -msgid "Group ID Number" -msgstr "Número de Identificación de Grupo" - -msgid "User login" -msgstr "Ingreso de usuario" - -msgid "UID" -msgstr "UID" - -#, fuzzy -msgid "User ID Number" -msgstr "Número de Identificación de Grupo" - -msgid "GECOS" -msgstr "" - -msgid "Home directory" -msgstr "Directorio principal" - -msgid "Login shell" -msgstr "Shell de ingreso" - -msgid "ID View Name" -msgstr "" - -#, fuzzy -msgid "Add a new Group ID override." -msgstr "Añadir un nuevo servicio IPA." - -#, fuzzy -msgid "Delete an Group ID override." -msgstr "Eliminar un intervalo de ID." - -#, fuzzy -msgid "Search for an Group ID override." -msgstr "Buscar un grupo de red." - -#, fuzzy -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" -"Los resultados deberían contener solo la clave del atributo primario (\"name" -"\")" - -#, fuzzy -msgid "Modify an Group ID override." -msgstr "Modificar un grupo." - -#, fuzzy -msgid "Rename the Group ID override object" -msgstr "Renombrar el permiso del objeto" - -#, fuzzy -msgid "Display information about an Group ID override." -msgstr "Mostrar información sobre un servicio IPA." - -#, fuzzy -msgid "Add a new User ID override." -msgstr "Añadir un nuevo servicio IPA." - -#, fuzzy -msgid "Delete an User ID override." -msgstr "Eliminar un intervalo de ID." - -#, fuzzy -msgid "Search for an User ID override." -msgstr "Buscar servidores IPA." - -#, fuzzy -msgid "Modify an User ID override." -msgstr "Modificar un servicio HBAC." - -#, fuzzy -msgid "Rename the User ID override object" -msgstr "Renombrar el permiso del objeto" - -#, fuzzy -msgid "Display information about an User ID override." -msgstr "Mostrar información sobre un servicio IPA." - -#, fuzzy -msgid "Add a new ID View." -msgstr "Añadir un nuevo servicio IPA." - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" - -msgid "hosts" -msgstr "hosts" - -#, fuzzy -msgid "Hosts to apply the ID View to" -msgstr "Categoría del equipo al que se aplica la regla" - -#, fuzzy -msgid "hostgroups" -msgstr "grupos de host" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" - -#, fuzzy -msgid "Hosts that this ID View was applied to." -msgstr "Categoría del equipo al que se aplica la regla" - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" - -msgid "Number of hosts the ID View was applied to:" -msgstr "" - -#, fuzzy -msgid "Delete an ID View." -msgstr "Eliminar un intervalo de ID." - -#, fuzzy -msgid "Search for an ID View." -msgstr "Buscar intervalos." - -#, fuzzy -msgid "Modify an ID View." -msgstr "Modificar rango de ID." - -#, fuzzy -msgid "Rename the ID View object" -msgstr "Renombrar el permiso del objeto" - -#, fuzzy -msgid "Display information about an ID View." -msgstr "Mostrar información sobre un servicio IPA." - -#, fuzzy -msgid "Enumerate all the hosts the view applies to." -msgstr "Categoría de servicio a la que se aplica la regla" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" - -msgid "Hosts to clear (any) ID View from." -msgstr "" - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" - -msgid "Hosts that ID View was cleared from." -msgstr "" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" -"\n" -"Los plugins no son accesibles a través d CLI, comandos usados internamente\n" - -msgid "Dict of I18N messages" -msgstr "Dictado de los mensajes regionales" - -msgid "Export plugin meta-data for the webUI." -msgstr "Exportar los metadatos del plugin para webUI." - -msgid "Name of object to export" -msgstr "Nombre del objeto a exportar" - -msgid "Name of method to export" -msgstr "Nombre del método para exportación" - -msgid "Name of command to export" -msgstr "Nombre de comando a exportar" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "El dict de JSON ha codificado objetos IPA" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "Métodos IPA codificados de Dict de JSON " - -msgid "Dict of JSON encoded IPA Commands" -msgstr "Dict de JSON comandos codificados IPA" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" -"\n" -"Uniendo un dominio IPA\n" - -msgid "Join an IPA domain" -msgstr "Unir un dominio IPA" - -msgid "The hostname to register as" -msgstr "El nombre del equipo a ser registrado como" - -msgid "The IPA realm" -msgstr "El reinado IPA" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "Plataforma de hardware del equipo (p. ej. Lenovo T61)" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "Sistema operativo que utiliza el equipo y versión (p.ej. Fedora 9)" - -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" -"\n" -"Funciones \n" -"\n" -"Un rol se utiliza para la delegación de grano fino. Un permiso otorga la " -"capacidad de realizar tareas de bajo nivel (añadir un usuario, modificar un " -"grupo, etc.) Un privilegio combina uno o más permisos en una abstracción \n" -"de nivel superior tales como useradmin. Un useradmin sería capaz de añadir, " -"eliminar y modificar usuarios. \n" -"\n" -"Los privilegios son asignados a roles.\n" -"\n" -"Los usuarios, grupos, hosts y hostgroups pueden ser miembros de un Rol. \n" -"\n" -"Los Roles no pueden contener otros roles.\n" -"\n" -"EJEMPLOS:\n" -"\n" -"Añadir un nuevo rol: \n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege=add_user_to_default_group\n" -"junioradmin\n" -"\n" -"Agregar un grupo de usuarios a este rol:\n" -" ipa group-add --desc=\"User admins\" useradmins \n" -" ipa role-add-member --groups=useradmins junioradmin \n" -"\n" -"Mostrar información sobre el rol:\n" -" ipa role-show junioradmin\n" -"\n" -"El resultado de esto es que cualquier usuario en el grupo 'useradmins' puede " -"agregar usuarios, restablecer contraseñas o añadir un usuario al grupo de " -"usuarios predeterminado de la IPA.\n" - -msgid "Manage ticket policy for specific user" -msgstr "Administra política de ticket para un usuario específico" - -msgid "Max life" -msgstr "Vida máxima" - -msgid "Maximum ticket life (seconds)" -msgstr "Duración máxima del ticket (en segundos)" - -msgid "Max renew" -msgstr "Renovación máxima" - -msgid "Maximum renewable age (seconds)" -msgstr "Duración máxima renovable (en segundos)" - -msgid "Modify Kerberos ticket policy." -msgstr "Modificar entrada de política Kerberos." - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "Reajustar la entrada de política Kerberos a los valores por defecto." - -msgid "Display the current Kerberos ticket policy." -msgstr "Mostrar la actual entrada de política Kerberos." - -#, fuzzy -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," -"cn=accounts' --group-container='cn=groups,cn=accounts' " -"ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' --user-ignore-" -"objectclass=radiusprofile --user-ignore-" -"attribute=radiusgroupname ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" -"\n" -"Migración a IPA\n" -"\n" -"Migrar usuarios y grupos desde un servidor LDAP a IPA.\n" -"\n" -"Esto lleva a cabo una consulta LDAP contra el servidor remoto buscando \n" -"usuarios y grupos en un contenedor. Con el objetivo de migrar las " -"contraseñas\n" -"usted necesita enlazar como un usuario que pueda leer el atributo " -"userPassword\n" -"sobre el servidor remoto. Esto normalmente está restringido a " -"administradores de\n" -"alto nivel como cn=Directory Manager en 389-ds (este es el usuario de enlace " -"por defecto).\n" -"\n" -"El contenedor de usuario por defecto es ou=People.\n" -"\n" -"El contenedor de grupo por defecto es ou=Groups.\n" -"\n" -"Los usuarios y grupos que ya existen en el servidor IPA son saltados.\n" -"\n" -"Dos esquemas LDAP definen como se almacenan los miembros del grupo:\n" -"RFC2307 y RFC2307bis. RFC2307bis usa miembro y miembro único para\n" -"especificar los miembros del grupo. RFC2307 usa memberUid. El esquema por " -"defecto es RFC2307bis.\n" -"\n" -"La característica de compatibilidad de esquema permite a IPA reformatear " -"datos\n" -"para sistemas que no soportan RFC2307bis. Se recomienda deshabilitar esta\n" -"característica durante la migración para reducir la sobrecarga del sistema. " -"Puede\n" -"ser rehabilitado después de la migración. Para migrar con esto habilitado " -"use la opción \"--with-compat\".\n" -"\n" -"Los usuarios migrados no tienen credenciales Kerberos, solo tienen su " -"contraseña\n" -"LDAP. Para completar el proceso de migración los usuarios necesitan ir a\n" -"to http://ipa.example.com/ipa/migration y autenticar usando su contraseña " -"LDAP\n" -" con el objetivo de generar sus credenciales Kerberos.\n" -"\n" -"La migración está deshabilitada por defecto. Use el comando ips config-mod " -"para\n" -" habilitarla:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"Si no se ha suministrado una base DN con –basedn IPA usará en su lugar el " -"valor\n" -"de defaultNamingContext si se ha establecido o el primer valor establecido " -"en\n" -"namingContexts en la raíz el servidor LDAP remoto.\n" -"\n" -"Los usuarios son añadidos como miembros del grupo de usuarios " -"predeterminado.\n" -"Esta puede ser una tarea que consuma mucho tiempo de modo que durante la\n" -"migración se hace por lotes para cada 100 usuarios. Como resultado habrá una " -"ventana en la que los usuarios se añadirán a IPA pero no serán miembros del\n" -"grupo de usuario predeterminado.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" La migración más sencilla, aceptando todo lo predeterminado:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Especificar el contenedor de usuario y grupo. Esto se puede usar para " -"migrar datos\n" -" de usuario y grupo desde un servidor IPA v1:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -"Puesto que el servidor IPA v2 ya contiene grupos predefinidos que pueden " -"chocar\n" -"con los grupos en servidor migrado (IPA v1) (por ejemplo admins, ipausers), " -"los\n" -"usuarios que tengan un grupo que choque con su grupo primario puede suceder\n" -"que pertenezcan a un grupo desconocido sobre el nuevo servidor IPA v2\n" -"Use la opción --group-overwrite-gid para sobreescribir la GID de los grupos " -"ya\n" -"existentes y evitar esta cuestión:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -"Los usuarios o grupos migrados pueden tener objetos clase y atributos\n" -"acompañantes desconocidos por el servidor IPS v2. Estos objetos clase y " -"atributos\n" -"pueden ser dejados fuera durante el proceso de migración:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"REGISTRO\n" -"\n" -"La migración registrará alarmas y errores en el registro de error Apache. " -"Este\n" -"fichero debería ser evaluado después de la migración para corregir o " -"investigar\n" -"cualquier cuestión que se descubra.\n" -"\n" -"Por cada 100 usuarios migrados y mensaje de nivel informativo será mostrado\n" -"dando el progreso actual y l duración para hacer posible rastrear el " -"progreso de la\n" -"migración.\n" -"\n" -"Si el nivel de registro es depuración, bien porque se haya fijado debug = " -"True en\n" -"etcipa/default.conf o etcipa/server.conf, se añadirá una entrada por cada " -"usuario\n" -"añadido más un resumen cuando el grupo de usuario predeterminado se haya\n" -"actualizado.\n" - -msgid "Migrate users and groups from DS to IPA." -msgstr "Migrar usuarios y grupos de DS a IPA." - -msgid "LDAP URI" -msgstr "LDAP URI" - -msgid "LDAP URI of DS server to migrate from" -msgstr "LDAP URI del servidor DS desde donde realizar la migración" - -msgid "bind password" -msgstr "asociar contraseña" - -msgid "Bind DN" -msgstr "Asociar DN" - -msgid "User container" -msgstr "Contenedor de usuario" - -msgid "DN of container for users in DS relative to base DN" -msgstr "DN de contendor para usuarios es DS relativo a base DN" - -msgid "Group container" -msgstr "Contenedor de grupoi" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "DN de contenedor para grupos es DS relativo a DN" - -msgid "User object class" -msgstr "Clase de objeto de usuario" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "Objectclasses usado para buscar entradas de usuario en DS" - -msgid "Group object class" -msgstr "Clase de objeto de grupo" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "Objectclasses usado para buscar entradas de grupo en DS" - -msgid "Ignore user object class" -msgstr "Ignorar clase de objeto usuario" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "Objectclasses a se ignorado para entradas de usuario en DS" - -msgid "Ignore user attribute" -msgstr "Ignorar atributo de usuario" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "Atributos a ignorar para las entradas de usuario en DS" - -msgid "Ignore group object class" -msgstr "Ignorar clase de objeto grupo" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "Objectclasses a ignorar para las entradas de grupo en DS" - -msgid "Ignore group attribute" -msgstr "Ignorar atributo de grupo" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "Atributos a ignorar para las entradas de grupo en DS" - -msgid "Overwrite GID" -msgstr "Sobrescribir GID" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" -"Cuando se migra un grupo que ya existe en el dominio IPA se sobrescribe el " -"GID de grupo e informa como conseguido" - -msgid "LDAP schema" -msgstr "Esquema LDAP" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" -"El esquema utilizado en el servidor LDAP. Los valores admitidos son RFC2307 " -"y RFC2307bis. El valor predeterminado es RFC2307bis" - -msgid "Continue" -msgstr "Continuar" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" -"Modo de funcionamiento continuo. Se reportan errores, pero el proceso " -"continúa" - -msgid "Base DN" -msgstr "Base DN" - -msgid "Base DN on remote LDAP server" -msgstr "Base DN sobre servidor LDAP remoto" - -msgid "Ignore compat plugin" -msgstr "Ignorar plugin de compatibilidad" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" -"Permitir la migración a pesar de la utilización del plugin de compatibilidad" - -msgid "CA certificate" -msgstr "Certificado CA" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "Cargar certificado CA del servidor LDAP desde FILE" - -#, fuzzy -msgid "groups to exclude from migration" -msgstr "%s a excluir desde la migración" - -#, fuzzy -msgid "users to exclude from migration" -msgstr "%s a excluir desde la migración" - -msgid "Lists of objects migrated; categorized by type." -msgstr "Lista de objetos migrados; clasificados por tipo." - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "Lista de objetos que no pueden ser migrados; categorizados por tipo." - -msgid "False if migration mode was disabled." -msgstr "\"False\", si el modo de migración fue inhabilitado." - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" -"False si la migración falla porque el plug-in de compatibilidad está " -"habilitado." - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" -"\n" -"Misc plug-ins\n" - -msgid "Show environment variables." -msgstr "Mostrar variables de entorno." - -msgid "Forward to server instead of running locally" -msgstr "Reenvía al servidor en lugar de ejecutarse localmente" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" -" Determinar si la ACI es un autoservicio de ACI y hacer una excepción " -"si\n" -" no lo es.\n" -" Devolver el resultado si se trata de un autoservicio de ACI." - -msgid "Total number of variables env (>= count)" -msgstr "Cantidad total de variables env (>= count)" - -msgid "Number of variables returned (<= total)" -msgstr "Cantidad de variables devueltas (<= total)" - -msgid "Show all loaded plugins." -msgstr "Mostrar todos los plugins cargados." - -#, fuzzy -msgid "Dictionary mapping plugin names to bases" -msgstr "Nombre de la variable de mapeo de dicionario a valorizar " - -msgid "Number of plugins loaded" -msgstr "Cantidad de complementos cargados" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" -"\n" -"Netgroups\n" -"\n" -"Un netgroup es un grupo usado para comprobación de permisos. Puede contener\n" -"valores tanto de usuario como de host.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Añadir un nuevo netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Añadir miembros al netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Quitar un miembro del netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Mostrar información sobre un netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Borrar un netgroup:\n" -" ipa netgroup-del admins\n" - -msgid "Netgroup name" -msgstr "Nombre de grupo de red" - -msgid "Netgroup description" -msgstr "Descripción del grupo de red" - -msgid "NIS domain name" -msgstr "Nombre del dominio NIS" - -msgid "IPA unique ID" -msgstr "ID unico de IPA" - -msgid "Member netgroups" -msgstr " Miembros de netgroups" - -msgid "Indirect Member netgroups" -msgstr "Miembros indirectos netgroups" - -#, fuzzy -msgid "Member User" -msgstr "Usuarios miembros" - -#, fuzzy -msgid "Member Group" -msgstr "Grupos de miembros" - -msgid "Member Host" -msgstr "Miembro del equipo anfitrión" - -#, fuzzy -msgid "Member Hostgroup" -msgstr "Grupos de equipo miembro" - -msgid "Add a new netgroup." -msgstr "Añadir un nuevo grupo de red." - -msgid "Add members to a netgroup." -msgstr "Añadir miembros a un grupo de red." - -#, fuzzy -msgid "member netgroup" -msgstr " Miembros de netgroups" - -#, fuzzy -msgid "netgroups to add" -msgstr "grupos de red" - -msgid "Delete a netgroup." -msgstr "Borrar un grupo de red." - -msgid "Search for a netgroup." -msgstr "Buscar un grupo de red." - -msgid "search for managed groups" -msgstr "buscar grupos gestionados" - -#, fuzzy -msgid "Search for netgroups with these member netgroups." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for netgroups without these member netgroups." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for netgroups with these member users." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for netgroups without these member users." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for netgroups with these member groups." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for netgroups without these member groups." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for netgroups with these member hosts." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for netgroups without these member hosts." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for netgroups with these member host groups." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for netgroups without these member host groups." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for netgroups with these member of netgroups." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for netgroups without these member of netgroups." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -msgid "Modify a netgroup." -msgstr "Modificar un grupo de red." - -msgid "Remove members from a netgroup." -msgstr "Borrar miembros de un grupo de red." - -#, fuzzy -msgid "netgroups to remove" -msgstr "%s a eliminar" - -msgid "Display information about a netgroup." -msgstr "Mostrar información sobre un grupo de red." - -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" -"\n" -"Configuración OTP\n" -"\n" -"Gestiona los valores por defecto que IPA usa para las fichas OTP.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Muestra a configuración OTP básica:\n" -" ipa otpconfig-show\n" -"\n" -" Muestra todas las opciones de configuración OTP:\n" -" ipa otpconfig-show --all\n" -"\n" -" Cambia la ventana máxima de autenticación TOTP a 10 minutos:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Cambia la ventana máxima de sincronización TOTP a 12 horas:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Cambia la ventana máxima de autenticación HOTP a 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Cambia la ventana máxima de sincronización a 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" - -msgid "TOTP authentication Window" -msgstr "Ventana de autenticación TOTP" - -msgid "TOTP authentication time variance (seconds)" -msgstr "Variación del tiempo de autenticación TOTP (segundos)" - -msgid "TOTP Synchronization Window" -msgstr "Ventana de Sincronización TOTP" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "Variación del tiempo de sincronización TOTP (segundos)" - -msgid "HOTP Authentication Window" -msgstr "Ventana de Autenticación HOTP" - -msgid "HOTP authentication skip-ahead" -msgstr "Vaya directamente a la autenticación HOTP" - -msgid "HOTP Synchronization Window" -msgstr "Ventana de Sincronización HOTP" - -msgid "HOTP synchronization skip-ahead" -msgstr "Vaya directamente a la sincronización HOTP" - -msgid "Modify OTP configuration options." -msgstr "Modificar opciones de configuración OTP." - -msgid "Show the current OTP configuration." -msgstr "Mostrar la configuración OTP actual." - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "ID única" - -msgid "Type of the token" -msgstr "Tipo de ficha" - -msgid "Token description (informational only)" -msgstr "Descripción de la ficha (solo informativo)" - -msgid "Owner" -msgstr "Propietario" - -msgid "Assigned user of the token (default: self)" -msgstr "Usuario asignado de la ficha (predeterminado: self)" - -msgid "Manager" -msgstr "Manager" - -msgid "Assigned manager of the token (default: self)" -msgstr "Gestor asignado de la ficha (predeterminado: self)" - -msgid "Disabled" -msgstr "Desactivado" - -msgid "Mark the token as disabled (default: false)" -msgstr "Marcar la ficha como deshabilitada (predeterminado: false)" - -msgid "Validity start" -msgstr "Validar inicio" - -msgid "First date/time the token can be used" -msgstr "Primera fecha/hora en que puede usar la ficha" - -msgid "Validity end" -msgstr "Validar final" - -msgid "Last date/time the token can be used" -msgstr "Último día/hora en que puede ser usada la ficha" - -msgid "Vendor" -msgstr "Vendedor" - -msgid "Token vendor name (informational only)" -msgstr "Ficha nombre de vendedor (solo informativo)" - -msgid "Model" -msgstr "Modelo" - -msgid "Token model (informational only)" -msgstr "Ficha modelo (solo informativo)" - -msgid "Serial" -msgstr "Serie" - -msgid "Token serial (informational only)" -msgstr "Ficha serie (solo informativa)" - -msgid "Token secret (Base32; default: random)" -msgstr "Ficha secreto (Base32; predeterminado: random)" - -msgid "Token hash algorithm" -msgstr "Algoritmo de ficha picada" - -msgid "Digits" -msgstr "Dígitos" - -msgid "Number of digits each token code will have" -msgstr "Número de digitos que cada código de ficha tendrá" - -msgid "Clock offset" -msgstr "Desplazamiento del reloj" - -msgid "TOTP token / IPA server time difference" -msgstr "Ficha TOTP / Diferencia de hora del servidor IPA" - -msgid "Clock interval" -msgstr "Intervalo de reloj" - -msgid "Length of TOTP token code validity" -msgstr "Longitud de la ficha TOTP de validación de código" - -msgid "Counter" -msgstr "Contador" - -msgid "Initial counter for the HOTP token" -msgstr "Contador inicial para a ficha HOTP" - -msgid "Add a new OTP token." -msgstr "Añadir una nueva ficha OTP." - -msgid "(deprecated)" -msgstr "(obsoleto)" - -msgid "Do not display QR code" -msgstr "No visualiza código QR" - -msgid "Add users that can manage this token." -msgstr "Añadir usuarios que pueden manejar esta ficha." - -msgid "Delete an OTP token." -msgstr "Borrar una ficha OTP." - -msgid "Search for OTP token." -msgstr "Búsqueda de ficha OTP." - -#, fuzzy -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" -"Los resultados deberían contener sólo atributo de clave primaria (“%s”)" - -msgid "Modify a OTP token." -msgstr "MOdificar una ficha OTP." - -#, fuzzy -msgid "Rename the OTP token object" -msgstr "Renombrar el permiso del objeto" - -msgid "Display information about an OTP token." -msgstr "Mostrar información sobre una ficha OTP." - -#, fuzzy -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" -"\n" -"Este código es una extensión del plugin otptoken y suministra el soporte " -"para\n" -" leer/escribir directamente en las fichasYubiKey.\n" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" -"\n" -"Establecer contraseña de un usuario\n" -"\n" -"Si alguien que no sea un usuario cambia la contraseña del usuario (por " -"ejemplo, Servicio de Ayuda la restablece), entonces la contraseña tendrá que " -"ser cambiada la primera vez que se utiliza. Esto es para que el usuario " -"final sea el único que conoce la contraseña.\n" -"La directiva de contraseñas IPA controla la frecuencia de cambio de una " -"contraseña, los requisitos de fortaleza y longitud del historial de " -"contraseñas. EJEMPLOS:\n" -"Para restablecer su contraseña:\n" -" ipa passwd tuser1\n" -"\n" -" Para cambiar la contraseña de otro usuario:\n" -" ipa passwd tuser1\n" - -msgid "Set a user's password." -msgstr "Fijar una contraseña de usuario." - -msgid "New Password" -msgstr "Nueva Contraseña" - -msgid "Current Password" -msgstr "Contraseña Actual" - -msgid "OTP" -msgstr "OTP" - -#, fuzzy -msgid "One Time Password" -msgstr "Restablecer contraseña" - -#, fuzzy -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -"\n" -"Managed permissions\n" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" -"\n" -"Permisos\n" -"\n" -"Un permiso habilita una delegación de grano fino de derechos. Un permiso es " -"un formato\n" -"legible por el hombre de una Regla de Control de Acceso (ACL) 389-ds o una " -"instrucción (ACI).\n" -"Un permiso otorga el derecho de llevar a cabo una tarea específica como " -"añadir un\n" -"usuario, modificar un grupo, etc.\n" -"\n" -"Un permiso puede contener otros permisos.\n" -"\n" -"* Un permiso otorga acceso de escritura, lectura, añadir o borrar.\n" -"* Un privilegio combina permisos similares (por ejemplo los permisos " -"necesarios para \n" -" añadir un usuario).\n" -"* Un rol otorga un conjunto de privilegios a usuarios, grupos, hosts o " -"grupos de hosts.\n" -"\n" -"Un permiso consta de diversas partes:\n" -"\n" -"1. El nombre del permiso.\n" -"2. El objetivo del permiso.\n" -"3. Los derechos otorgados por el permiso.\n" -"\n" -"Los derechos definen que operaciones están permitidas y pueden ser una o más " -"de las\n" -"siguientes:\n" -"1. write - escribir uno o más atributos\n" -"2. read - leer uno o más atributos\n" -"3. add - añadir una nueva entrada al árbol\n" -"4. delete - borrar una entrada existente\n" -"5. all - se otorgan todos los permisos\n" -"\n" -"El permiso de lectura se otorga para la mayoría de los atributos por " -"defectos de modo que\n" -"el permiso de lectura no se espera que use con frecuencia.\n" -"\n" -"Advierta la distinción entre atributos y entradas. Los permisos son " -"independientes, de\n" -"modo que ser capaz de añadir un usuario no siginifica que el usuario será " -"editable.\n" -"\n" -"Hay diversos objetivos permitidos:\n" -"1. type: un tipo de objeto (usuario, grupo, etc).\n" -"2. memberof: un miembro de un grupo o grupo de host\n" -"3. filter: un filtro LDAP\n" -"4. subtree: un filtro LDAP especificando parte del LDAP DIT. Esto es un " -"superconjunto del\n" -" objetivo \"type\".\n" -"5. targetgroup: otorga acceso a modificar un grupo específico (como " -"obteniendo\n" -" derechos para manejar la pertenencia al grupo)\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Añadir un permiso que otorga la creación de usuarios:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Añadir un permiso que otorga la capacidad de manejar la pertenencia al " -"grupo:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" - -msgid "Permission name" -msgstr "Nombre de permiso" - -msgid "Granted rights" -msgstr "Derechos concedidos" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "Derechos a conceder (read, search, compare, write, add, delete, all)" - -msgid "Effective attributes" -msgstr "Atributos efectivos" - -msgid "All attributes to which the permission applies" -msgstr "Todos los atributos a los que aplica el permiso" - -msgid "Included attributes" -msgstr "Atributos incluidos" - -msgid "User-specified attributes to which the permission applies" -msgstr "Atributos especificados por el usuario a los que aplica el permiso" - -msgid "Excluded attributes" -msgstr "Atributos excluidos" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" -"Atributos especificados por el usuario a los cuales no se les aplica " -"explícitamente el permiso" - -msgid "Default attributes" -msgstr "Atributos predeterminados" - -msgid "Attributes to which the permission applies by default" -msgstr "Atributos a los que el permiso se aplica por defecto" - -msgid "Bind rule type" -msgstr "Tipo de regla de enlace" - -msgid "Subtree to apply permissions to" -msgstr "Subárbol para aplicar permisos" - -msgid "Extra target filter" -msgstr "Filtro de objetivo adicional" - -msgid "Raw target filter" -msgstr "Filtro objetivo en bruto" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" -"Todos los filtros objetivo, incluyendo aquellos implicados por el tipo y " -"menbresia" - -msgid "Target DN" -msgstr "DN objetivo" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" -"DN opcional a aplicar al permiso (debe estar en el sub-árbol, pero puede no " -"existir todavía)" - -msgid "Member of group" -msgstr "Miembro del grupo" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "Miembros objetivos de un grupo (establece memberOf targetfilter)" - -msgid "User group to apply permissions to (sets target)" -msgstr "Usuario de grupo a aplicar permisos (establece target)" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "Tipo de objeto IPA (establece subtree y objectClass targetfilter)" - -#, fuzzy -msgid "Deprecated; use extratargetfilter" -msgstr "Obsoleto; use %s" - -#, fuzzy -msgid "Deprecated; use ipapermlocation" -msgstr "Obsoleto; use %s" - -#, fuzzy -msgid "Deprecated; use ipapermright" -msgstr "Obsoleto; use %s" - -msgid "Granted to Privilege" -msgstr "Concedido al Privilegio" - -msgid "Indirect Member of roles" -msgstr "Roles de miembros indirectos" - -msgid "Add a new permission." -msgstr "Añadir un nuevo permiso." - -msgid "Add members to a permission." -msgstr "Añadir miembros a un permiso." - -msgid "member privilege" -msgstr "miembro privilegio" - -#, fuzzy -msgid "privileges to add" -msgstr "privilegios" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "Añadir un permiso de sistema sin un ACI (comando interno)" - -msgid "Permission flags" -msgstr "Banderas de permiso" - -msgid "Delete a permission." -msgstr "Borrar un permiso." - -msgid "force delete of SYSTEM permissions" -msgstr "fuerza el borrado de permisos SYSTEM" - -msgid "Search for permissions." -msgstr "Buscar permisos." - -msgid "Modify a permission." -msgstr "Modificar un permiso." - -msgid "Rename the permission object" -msgstr "Renombrar el permiso del objeto" - -msgid "Remove members from a permission." -msgstr "Borrar miembros desde un permiso." - -#, fuzzy -msgid "privileges to remove" -msgstr "Añadir privilegios a un rol." - -msgid "Display information about a permission." -msgstr "Mostrar información sobre un permiso." - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" -"\n" -"Haga ping al servidor IPA remoto para asegurarse que está corriendo.\n" -"\n" -"El comando ping envía una petición de eco al servidor IPA. El servidor " -"devuelve\n" -"su información de versión. Esto se usa por un cliente IPA para confirmar que " -"el\n" -"servidor está disponible y acepta peticiones.\n" -"\n" -"El servidor de xmlrpc_uri en /etc/ipa/default.conf es el primero en " -"contactarse. Si no\n" -"responde el clinte contactará con cualquier de los servidores definidos por " -"los\n" -"registros ldap SRV en DNS.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Hacer ping a un servidor IPA:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Hacer ping a un servidor IPA verbosamente:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" - -msgid "Ping a remote server." -msgstr "Hacer ping a un servidor remoto." - -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" -"\n" -"Opciones de kerberos pkinit\n" -"Activan o desactivan pkinit anónimo mediante el principal\n" -"WELLKNOWN/ANONYMOUS@REALM. El servidor debe haber sido instalado con soporte " -"pkinit.\n" -"EJEMPLOS:\n" -"Activar pkinit anónimo\n" -" ipa pkinit-anonymous enable\n" -"Desactivar pkinit anónimo:\n" -" ipa pkinit-anonymous disable\n" -"Para obtener mayor información sobre pkinit anónimo, por favor consulte: \n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -"\n" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "Habilitar o Deshabilitar PKINIT Anónimo." - -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" -"\n" -"Privilegios\n" -"Un privilegio combina permisos dentro de una tarea lógica. Un permiso " -"proporciona\n" -"los derechos para realizar una tarea específica.\n" -"Por ejemplo, añadir un usuario requiere los siguientes permisos:\n" -"Crear una nueva entradasd de usuario\n" -"Restablecer una contraseña de usuario\n" -"Añadir el nuevo usuario al grupo de usuario predeterminado de IPA\n" -"Combinar estos tres niveles inferiores dentro de una tarea de nivel superior " -"en forma de un privilegio \n" -"denominado \"Add User\" facilita el manejo de roles.\n" -"\n" -"Un privilegio no puede contener otros privilegios.\n" -"\n" -"Ver el rol y el permiso para información adicional. \n" -"\n" -" \n" -"\n" -"\n" - -msgid "Privilege name" -msgstr " Añadir un nuevo servicio de la nueva IPA." - -msgid "Privilege description" -msgstr "" -" \n" -" Eliminar un servicio de la IPA." - -msgid "Granting privilege to roles" -msgstr "Concesión de privilegios a los roles" - -msgid "Add a new privilege." -msgstr "Añadir un nuevo privilegio." - -msgid "Add members to a privilege." -msgstr "Añadir miembros a un privilegio." - -#, fuzzy -msgid "member role" -msgstr "miembro de grupo" - -#, fuzzy -msgid "roles to add" -msgstr "%s a añadir" - -msgid "Add permissions to a privilege." -msgstr "Añadir permisos a un privilegio." - -msgid "permission" -msgstr "permiso" - -msgid "permissions" -msgstr "permisos" - -msgid "Number of permissions added" -msgstr "Número de permisos añadidos" - -msgid "Delete a privilege." -msgstr "Borrar un privilegio." - -msgid "Search for privileges." -msgstr "Buscar privilegios." - -msgid "Modify a privilege." -msgstr "Modificar un privilegio." - -#, fuzzy -msgid "Rename the privilege object" -msgstr "Renombrar el permiso del objeto" - -#, fuzzy -msgid "Remove members from a privilege" -msgstr "Borrar miembros de un rol." - -#, fuzzy -msgid "roles to remove" -msgstr "%s a eliminar" - -msgid "Remove permissions from a privilege." -msgstr "Borrar permisos de un privilegio." - -msgid "Number of permissions removed" -msgstr "Número de permisos eliminados" - -msgid "Display information about a privilege." -msgstr "Mostrar información sobre un privilegio." - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" -"\n" -"Política de contraseñas\n" -"\n" -"Una contraseña establece límites en contraseñas de IPA, incluyendo máxima y " -"mínima duración, el número de contraseñas a guardar en historial, el número " -"de clases de caracteresrequeridos (para contraseñas ás fuertes)\n" -"y el mínimo de longitud de una contraseña.\n" -"\n" -"Por defecto es una única política global para todos los usuarios. También " -"puede crear una política de contraseña para aplicar a un grupo. Cada usuario " -"está sujeto solamente a una política de contraseña, ya sea de grupo o " -"global. Una política de grupo es autónoma; no es uper-set de la política " -"global mas los parámetros personalizados.\n" -"Cada política de contraseña requiere una configuración única . Si un usuario " -"está en varios grupos que tienen políticas de contraseñas, esta prioridad " -"determina qué política de contraseña aplica. Un valor inferior indica una " -"política de prioridad superior.\n" -"\n" -"Las políticas de contraseña de grupo se eliminan automáticamente cuando se " -"eliminan los grupos a los cuales están asociados.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Modificar la política global:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Agregar una política de contraseña de nuevo grupo:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Mostrar una política de contraseña global:\n" -" ipa pwpolicy-show\n" -"\n" -" Mostrar una política de contraseña de grupo:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Mostrar la política que sería aplicada al usuario dado:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modificar una polítca de contraseña de grupo:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" - -msgid "Group" -msgstr "Grupo" - -msgid "Manage password policy for specific group" -msgstr "Administra la política de contraseña de un grupo específico" - -msgid "Max lifetime (days)" -msgstr "Vida máxima (días)" - -msgid "Maximum password lifetime (in days)" -msgstr "Vida máxima de la contraseña (días)" - -msgid "Min lifetime (hours)" -msgstr "Vida mínima (horas)" - -msgid "Minimum password lifetime (in hours)" -msgstr "Vida mínima de la contraseña (en horas)" - -msgid "History size" -msgstr "Tamaño del historial" - -msgid "Password history size" -msgstr "Tamaño del historial de la contraseña" - -msgid "Character classes" -msgstr "Clases de caracteres" - -msgid "Minimum number of character classes" -msgstr "Cantidad mínima de clases de caracteres" - -msgid "Min length" -msgstr "Longitud mínima" - -msgid "Minimum length of password" -msgstr "Longitud mínima de la contraseña" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "" -"Prioridad de la política (a mayor número corresponde una política menor)" - -msgid "Max failures" -msgstr "Número máximo de fallas" - -msgid "Consecutive failures before lockout" -msgstr "Fallos consecutivos antes del bloqueo" - -msgid "Failure reset interval" -msgstr "Falló reajuste de intervalo" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "Período tras el cual se restablecerá (segundos) el conteo de errores" - -msgid "Lockout duration" -msgstr "Duración de bloqueo" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "Período durante el cual se fuerza el bloqueo (segundos)" - -#, fuzzy -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" -"Los resultados deberían contener solo la clave del atributo primario (\"name" -"\")" - -msgid "Add a new group password policy." -msgstr "Añadir un nuevo grupo de política de contraseña." - -msgid "Delete a group password policy." -msgstr "Borrar un grupo de política de contraseña." - -msgid "Search for group password policies." -msgstr "Buscar grupo de políticas de contraseña." - -#, fuzzy -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" -"Los resultados deberían contener sólo atributo de clave primaria (“%s”)" - -msgid "Modify a group password policy." -msgstr "Modificar un grupo de política de contraseña." - -msgid "Display information about password policy." -msgstr "Mostrar información sobre la política de contraseña." - -msgid "User" -msgstr "Usuario" - -msgid "Display effective policy for a specific user" -msgstr "Ofrece la política efectiva para un determinado usuario" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "RADIUS proxy server name" -msgstr "Nombre del servidor proxy RADIUS" - -msgid "A description of this RADIUS proxy server" -msgstr "Una descripción de este servidor proxy RADIUS" - -msgid "Server" -msgstr "Servidor" - -msgid "The hostname or IP (with or without port)" -msgstr "El nombre de host o IP (con o sin puerto)" - -msgid "Secret" -msgstr "Secreto" - -msgid "The secret used to encrypt data" -msgstr "El secreto usado para encriptar datos" - -msgid "Timeout" -msgstr "Tiempo de espera" - -msgid "The total timeout across all retries (in seconds)" -msgstr "" -"El tiempo de espera total después de todos los reintentos (en segundos)" - -msgid "Retries" -msgstr "Reintentos" - -msgid "The number of times to retry authentication" -msgstr "El número de veces para reintentar la autenticación" - -msgid "User attribute" -msgstr "Atributo de usuario" - -msgid "The username attribute on the user object" -msgstr "El atributo username sobre el objeto usuario" - -msgid "Add a new RADIUS proxy server." -msgstr "Añadir un nuevo servidor proxy RADIUS." - -msgid "Delete a RADIUS proxy server." -msgstr "Borrar un servidor proxy RADIUS." - -msgid "Search for RADIUS proxy servers." -msgstr "Búsqueda de servidores proxy RADIUS." - -msgid "Modify a RADIUS proxy server." -msgstr "Modificar un servidor proxy RADIUS." - -#, fuzzy -msgid "Rename the RADIUS proxy server object" -msgstr "Borrar un servidor proxy RADIUS." - -msgid "Display information about a RADIUS proxy server." -msgstr "Muestra información sobre un servidor proxy RADIUS." - -#, fuzzy -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" -"\n" -"Dominios de reino\n" -"\n" -"Gestiona la lista de dominios asociados con el reino IPA.\n" -"\n" -"Esta lista es útil para los Controladores de Dominio de otros reinos que " -"tienen\n" -"establecida confianza con este reino IPA. Necesitan la información para " -"saber que \n" -"peticiones deberían ser reenviadas a KDC de este reino IPA.\n" -"\n" -"Gestión automática: se añade un dominio automáticamente a la lista de " -"dominios\n" -"cuando se crea una nueva Zona DNS gestionada por IPA. Lo mismo se aplica " -"para el borrado.\n" -"\n" -"DNS extermanete gestionado: los dominios que no son gestionados en el " -"servidor\n" -"IPA DNA necesitan ser añadidos manualmente a la lista usando el comando ipa " -"realmdomains-mod command.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Muestra la lista actual de dominios reino:\n" -" ipa realmdomains-show\n" -"\n" -" Reemplaza la lista de dominios reino:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Añade un dominio a la lista de dominios reino:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Borra un dominio de la lista de dominios reino:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" - -msgid "Domain" -msgstr "Dominio" - -msgid "Add domain" -msgstr "Añadir dominio" - -msgid "Delete domain" -msgstr "Borrar dominio" - -#, fuzzy -msgid "Modify realm domains." -msgstr "Dominios reino" - -msgid "Force adding domain even if not in DNS" -msgstr "Forzar el añadir un dominio aunque no esté en DNS" - -msgid "Display the list of realm domains." -msgstr "Muestra la lista de dominios reino." - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" - -msgid "Role name" -msgstr "Nombre de rol" - -msgid "A description of this role-group" -msgstr "Una descripción de este grupo de roles" - -msgid "Privileges" -msgstr " Objeto de servicio." - -msgid "Member services" -msgstr "Servicios de miembros" - -msgid "Add a new role." -msgstr "Añadir un nuevo rol." - -msgid "Add members to a role." -msgstr "Añadir miembros a un rol." - -#, fuzzy -msgid "member service" -msgstr "Servicios de miembros" - -#, fuzzy -msgid "services to add" -msgstr "servicios" - -msgid "Add privileges to a role." -msgstr "Añadir privilegios a un rol." - -msgid "privilege" -msgstr "privilegio" - -msgid "privileges" -msgstr "privilegios" - -msgid "Number of privileges added" -msgstr "Número de privilegios agregados" - -msgid "Delete a role." -msgstr "Borrar un rol." - -msgid "Search for roles." -msgstr "Buscar roles." - -msgid "Modify a role." -msgstr "Modificar un rol." - -#, fuzzy -msgid "Rename the role object" -msgstr "Renombrar el permiso del objeto" - -msgid "Remove members from a role." -msgstr "Borrar miembros de un rol." - -#, fuzzy -msgid "services to remove" -msgstr "%s a eliminar" - -msgid "Remove privileges from a role." -msgstr "Borrar privilegios de un rol." - -msgid "Number of privileges removed" -msgstr "Número de privilegios eliminados" - -msgid "Display information about a role." -msgstr "Mostrar información sobre un rol." - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" -"\n" -"Permisos de Auto-Servicio\n" -"\n" -"Un permiso habilita una delegación de permisos de. Las Reglas de Control " -"Acceso, o instrucciones (ACIs), conceden permiso a los permisos para llevar " -"a cabo tareas\n" -"dadas como añadir un usuario, modificar un grupo, etc.\n" -"\n" -"Un permiso de Auto-Servicio define que un objeto puede cambiar en su propia " -"entrada.\n" -"\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Añadir una regla de auto-servicio para permitir a los usuarios gestionar " -"su\n" -" dirección (usando una expresión Bash brace):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Los usuarios gestionan sus propias direcciones\"\n" -"\n" -" Cuando está gestionando la lista de atributos usted necesita incluir todos " -"los\n" -" atributos en la lista, incluyendo los existentes.\n" -" Añadir telephoneNumber a la lista (usando expansión Bash brace):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Los usuarios gestionan sus propias direcciones\"\n" -"\n" -" Mostrar nuestra regla actualizada:\n" -" ipa selfservice-show \"Los usuarios gestionan sus propias direcciones\"\n" -"\n" -" Borrar una regla:\n" -" ipa selfservice-del \"Los usuarios gestionan sus propias direcciones\"\n" - -msgid "Self-service name" -msgstr "Auto-servicio de nombres" - -msgid "Attributes to which the permission applies." -msgstr "Atributos a los que aplican los permisos." - -msgid "Add a new self-service permission." -msgstr "Añadir un nuevo auto servicio de permiso." - -msgid "Delete a self-service permission." -msgstr "Borrar un auto servicio de permiso." - -msgid "Search for a self-service permission." -msgstr "Buscar un auto servicio de permiso." - -msgid "Modify a self-service permission." -msgstr "Modificar un auto servicio de permiso." - -msgid "Display information about a self-service permission." -msgstr "Mostrar información sobre un auto servicio de permiso." - -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" -"\n" -"Mapeo de Usuario SELinux\n" -"\n" -"Mapeo de usuarios IPA a usuarios SELinux por host.\n" -"\n" -"Hosts, grupos de hosts, usuarios y grupos pueden ser definidos bien dentro " -"de\n" -"una regla o pueden apuntar a una regla HBAC existente. Cuando se utiliza la\n" -"opción –hbacrule para selinuxusermap-find se hace una coincidencia exacta " -"con\n" -"el nombre de regla HBAC, de modo que solo se devolverán entradas uno o " -"cero.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Crear una regla, \"test1\", que ajuste a todos los usuarios a xguest_u:s0 " -"en el \"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Crear una regla, \"test2\", que fije todos los usuarios a guest_u:s0 y un " -"regla HBAC existente para los usuarios y hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Mostrar las propiedades de una regla:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Crear una regla para un usuario especifico. Esto ajusta el contexto SELinux " -"para el \n" -" usuario john a unconfined_u:s0-s0:c0.c1023 sobre cualquier máquina:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Deshabilita una regla:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Habilita una regla:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Encontrar una regla con referencia a un regla HBAC específica:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Borrar una regla:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"VEA TAMBIÉN:\n" -"\n" -" La lista controlando el orden en el cual se aplica el mapeo de usuario " -"SELinux\n" -" y el usuario SELinux predeterminado está disponible en el comando config-" -"show.\n" - -msgid "SELinux User" -msgstr "Usuario SELinux" - -msgid "HBAC Rule" -msgstr "REgla HBAC" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "Regla HBAC que define los usuarios, grupos y grupos de host" - -msgid "Create a new SELinux User Map." -msgstr "Crear un nuevo Mapa de Usuario SELinux." - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" -"Añadir hosts y grupos de host objetivo a una regla de Mapa de Usuario " -"SELinux." - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "Añadir usuarios y grupos a una regla de Mapa de Usuario SELinux." - -msgid "Delete a SELinux User Map." -msgstr "Borrar un Mapa de Usuario SELinux." - -msgid "Disable an SELinux User Map rule." -msgstr "Deshabilitar una regla de Mapa de Usuario SELinux." - -msgid "Enable an SELinux User Map rule." -msgstr "Habilitar una regla de Mapa de Usuario SELinux." - -msgid "Search for SELinux User Maps." -msgstr "Búsqueda de Mapas de Usuario SELinux." - -msgid "Modify a SELinux User Map." -msgstr "Modificar un Mapa de Usuario SELinux." - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" -"Borrar hosts y grupos de host objetivo de una regla de Mapa de Usuario " -"SELinux." - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "Borrar usuarios y grupos desde una regla de Mapa de Usuario SELinux." - -msgid "Display the properties of a SELinux User Map rule." -msgstr "Mostrar las propiedades de una regla de Mapa de Usuario SELinux." - -#, fuzzy -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" -"\n" -"Servicios\n" -"\n" -"Un servicio IPA representa un servicio que corre en un host. El registro del " -"servicio \n" -"IPA puede almacenar un principal Kerberos, un certificado SSL o ambos.\n" -"\n" -"Un servicio IPA puede ser manejado directamente desde la maquina, siempre " -"que\n" -"la maquina haya recibido el permiso correcto. Esto es cierto aún en " -"maquinas\n" -"distintas a las que el servicio está asociado. Por ejemplo, solicitar un " -"certificado\n" -"SSL utilizando las credenciales principales del servicio de host del " -"anfitrión. Para\n" -"administrar un servicio utilizando las credenciales de host usted debe kinit " -"como\n" -"host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"Agregar un servicio IPA permite que el servicio asociado solicite un " -"certificado SSL\n" -"o tabla de claves, pero esto se realiza como un paso separado; no se " -"produce\n" -"como resultado de agregar el servicio.\n" -"\n" -"Solo se almacena en el registro del servicio el aspecto público del " -"certificado; la\n" -"clave privada no se almacena.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Añadir un nuevo servicio IPA:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Permitir a un host gestionar un certificado de servicio IPA:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Anular la lista predeterminada de tipos de PAC soportados para el " -"servicio:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -"Un caso de uso típico donde es necesario anular el tipo PAC es Nfs. " -"Actualmente\n" -"el código relacionado en el kernel Linux puede solo manejar tickets Kerberos " -"hasta\n" -"un tamaño máximo. Como los datos PAC pueden ser bastante largos se\n" -"recomienda establecer –pac-type=NONE para servicios NFS.\n" -"\n" -" Borrar un servicio IPA:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Encontrar todos los servicios IPA asociados con un host:\n" -" ipa service-find web.example.com\n" -"\n" -" Encontrar todos los servicios HTTP:\n" -" ipa service-find HTTP\n" -"\n" -" Deshabilitar la clave de servicio Kerberos y el certificado SSL:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Pedir un certificado para un servicio IPA:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" - -msgid "Service principal" -msgstr " Búsqueda de servicios IPA" - -msgid "PAC type" -msgstr "Tipo PAC" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" -"Anular la lista predeterminada de tipos de PAC soportados. Use 'NONE' para " -"deshabilitar el soporte PAC para este servicio, e.g. esto podría ser " -"necesario para servicios NFS." - -msgid "Add a new IPA new service." -msgstr "Añadir un nuevo servicio nuevo IPA." - -msgid "force principal name even if not in DNS" -msgstr "fuerza el nombre del prinicpal, aún si no se encuentra en DNS" - -msgid "Add hosts that can manage this service." -msgstr "Añadir hosts que pueden gestionar este servicio." - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" -"Permitir a los usuarios, grupos, hosts o grupos de host crear una tabla de " -"claves de este servicio." - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" -"Permitir a los usuarios, grupos, hosts o grupos de host recuperar una tabla " -"de claves de este servicio." - -msgid "Delete an IPA service." -msgstr "Borrar un servicio IPA." - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "Deshabilitar la clave Kerberos y el certificado SSL de un servicio." - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" -"Dejar de permitir a los usuarios, grupos, hosts o grupos de host crear una " -"tabla de claves de este servicio." - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" -"Dejar de permitir a los usuarios, grupos, hosts o grupos de host recuperar " -"una tabla de claves de este servicio." - -msgid "Search for IPA services." -msgstr "Buscar servicios IPA." - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" -"Los resultados deberían contener solo atributos de clave primaria " -"(\"principal\")" - -msgid "Search for services with these managed by hosts." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -msgid "Search for services without these managed by hosts." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -msgid "Modify an existing IPA service." -msgstr "Modificar un servicio IPA existente." - -msgid "Remove hosts that can manage this service." -msgstr "Borrar hosts que puedan gestionar este servicio." - -msgid "Display information about an IPA service." -msgstr "Mostrar información sobre un servicio IPA." - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" -"\n" -"Comandos de Sudo\n" -"\n" -"Comandos usados como partes integrantes de sudo\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Crear un comando nuevo\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Eliminar un comando\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" - -msgid "Sudo Command" -msgstr "Comando sudo " - -msgid "A description of this command" -msgstr "Una descripción de este comando " - -msgid "Sudo Command Groups" -msgstr "Grupos de comando sudo" - -msgid "Create new Sudo Command." -msgstr "Crear un nuevo Comando Sudo." - -msgid "Delete Sudo Command." -msgstr "Borrar Comando Sudo." - -msgid "Search for Sudo Commands." -msgstr "Buscar Comandos Sudo." - -#, fuzzy -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" -"Los resultados deberían contener solo la clave del atributo primario (\"name" -"\")" - -msgid "Modify Sudo Command." -msgstr "Modificar Comando Sudo." - -msgid "Display Sudo Command." -msgstr "Mostrar Comando Sudo." - -#, fuzzy -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" msgstr "" "\n" -"Grupos de Comandos Sudo\n" -"\n" -"Gestionar grupos de Comandos Sudo.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Añadir un nuevo Grupo de Comandos Sudo:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Borrar un Grupo de Comando Sudo:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Gestionar pertenencia a Grupo de Comando Sudo, comandos:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Gestionar pertenencia a Grupo de Comando Sudo, comandos:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Mostrat un Grupo de Comando Sudo:\n" -" ipa group-show localadmins\n" - -msgid "Sudo Command Group" -msgstr "Grupo de comando sudo" - -msgid "Commands" -msgstr "Comandos" - -msgid "Member Sudo commands" -msgstr "Comandos Miembro Sudo" - -msgid "Create new Sudo Command Group." -msgstr "Crear un nuevo Grupo de Comando Sudo." - -msgid "Add members to Sudo Command Group." -msgstr "Añadir miembros a Grupo de Comando Sudo." - -msgid "member sudo command" -msgstr "miembro de comando sudo" - -#, fuzzy -msgid "sudo commands to add" -msgstr "comandos sudo" - -msgid "Delete Sudo Command Group." -msgstr "Borrado Grupo de Comando Sudo." - -msgid "Search for Sudo Command Groups." -msgstr "Buscar Grupos de Comando Sudo." - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" -"Los resultados deberían contener solo atributo de clave primaria " -"(\"sudocmdgroup-name\")" - -msgid "Modify Sudo Command Group." -msgstr "Modificar Grupo de Comando Sudo." - -msgid "Remove members from Sudo Command Group." -msgstr "Quitar miembros de un Grupo de Comando Sudo." - -#, fuzzy -msgid "sudo commands to remove" -msgstr "grupo de comando sudo" - -msgid "Display Sudo Command Group." -msgstr "Mostrar Grupo de Comando Sudo." +"Los certificados pueden ser buscados por sujeto del certificado, número de " +"serie,\n" +"razón de la revocación, fechas de validez y fecha de envío.\n" -#, fuzzy msgid "" "\n" "Cross-realm trusts\n" "\n" "Manage trust relationship between IPA and Active Directory domains.\n" "\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" "\n" "Please note that DNS on both IPA and Active Directory domain sides should " "be\n" @@ -8822,8 +1895,8 @@ msgid "" "1. Establish cross-realm trust with Active Directory using AD administrator\n" " credentials:\n" "\n" -" ipa trust-add --type=ad --admin --" -"password\n" +" ipa trust-add --type=ad --admin --password\n" "\n" "2. List all existing trust relationships:\n" "\n" @@ -8838,42 +1911,40 @@ msgid "" " ipa trust-del \n" "\n" "Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" "\n" "Example:\n" "\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" "group:\n" "\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" " ipa group-add --desc=' admins' ad_admins\n" "\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" "\n" " ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" "\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" "\n" " ipa group-add-member ad_admins --groups ad_admins_external\n" "\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" "\n" " ipa group-show ad_admins_external\n" "\n" "\n" "GLOBAL TRUST CONFIGURATION\n" "\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" "identifiers are then used when communicating with a trusted domain of the\n" "particular type.\n" "\n" @@ -8883,21 +1954,20 @@ msgid "" "\n" "2. Modify global configuration for all trusts of Active Directory type and " "set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" "\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD " "group\"\n" "\n" "3. Change primary fallback group back to default hidden group (any group " "with\n" " posixGroup object class is allowed):\n" "\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " +"Group\"\n" msgstr "" "\n" "Confianza de reino cruzado\n" @@ -8997,2772 +2067,55 @@ msgstr "" "IPA no\n" " tiene ningún otro GID primario establecido ya):\n" "\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD " +"group\"\n" "\n" "3. Cambiar el grupo primario de retroceso al grupo escondido predeterminado\n" " (cualquier grupo con un objeto clae posixGroup está permitido):\n" "\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" - -msgid "Domain NetBIOS name" -msgstr "Nombre de dominio NetBIOS" - -msgid "Domain Security Identifier" -msgstr "Identificador de Seguridad de Dominio" - -msgid "SID blacklist incoming" -msgstr "Lista negra de SID entrante" - -msgid "SID blacklist outgoing" -msgstr "Lista negra de SID saliente" - -msgid "Security Identifier" -msgstr "Identificador de Seguridad" - -msgid "NetBIOS name" -msgstr "Nombre de NetBIOS" - -msgid "Domain GUID" -msgstr "GUID de Dominio" - -msgid "Fallback primary group" -msgstr "Grupo primario de respaldo" - -msgid "Domain name" -msgstr "Nombre de dominio" - -#, fuzzy -msgid "Trusted domain partner" -msgstr "Dominio de confianza" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" -"Determina si ipa-adtrust-install ha estado corriendo sobre este sistema" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" -"Determina si el plugin Schema Compatibility está configurado para servir a " -"los usuarios y grupos de los dominios de confianza" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "Determina si ipa-adtrust-install ha estado corriendo con tarea sidgen" - -#, fuzzy -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" -"\n" -"Añadir nueva confianza a usar.\n" -"\n" -"Este comando establece la relación de confianza con otro dominio que llegar " -"a ser \n" -"trusted'. Como resultado, los usuarios del dominio de confianza puede " -"acceder a\n" -"los recursos de este dominio.\n" -"\n" -"Solo están soportados ahora la confianza con dominios Active Directory.\n" -"\n" -"El comando se puede ejecutar seguramente múltiples veces contra el mismo\n" -"dominio, esto causará cambios en las credenciales de relaciones de confianza " -"en\n" -"ambos lados.\n" -"\n" -"Advierta que si el comando se ejecuta previamente con un tipo de rango " -"específico\n" -"o con detección automática del tipo de rango y usted desea configurar un " -"tipo de\n" -"rango diferente, usted puede necesitar borrar primero la ID del rango " -"usando \n" -"ipa idrange-del antes de reintentar el comando con el rango deseado.\n" -" " - -msgid "Trust type (ad for Active Directory, default)" -msgstr "Tipo de confianza (ad para Active Directory, predeterminado)" - -msgid "Active Directory domain administrator" -msgstr "Administrador de dominio Active Directory" - -msgid "Active Directory domain administrator's password" -msgstr "Contraseña del administrador de dominio Active Directory" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "Controlador de dominio para el dominio Active Directory opcional)" - -msgid "Shared secret for the trust" -msgstr "Secreto compartido para la confianza" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "Primera ID Posix ID del rango reservado para los dominios de confianza" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "Tamaña del rango de ID reservado para los dominios de confianza" - -#, fuzzy -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" -"Tipo de rango de ID de dominios de confianza, uno de los valores permitidos" - -msgid "Delete a trust." -msgstr "Borrar una confianza." - -msgid "Refresh list of the domains associated with the trust" -msgstr "Refrescar la lista de dominios asociados con la confianza" - -msgid "Search for trusts." -msgstr "Búsqueda de confianzas." - -#, fuzzy -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" -"Los resultados deberían contener solo la clave del atributo primario (\"name" -"\")" - -#, fuzzy -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" -"\n" -" Modificar una confianza (para uso futuro).\n" -"\n" -" Actualmente solo está disponible la opción predeterminada para modificar " -"los\n" -" atributos LDAP. Opciones más especificas serán añadidas en futuras " -"versiones.\n" -" " - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" -"Resolver los identificadores de seguridad de los usuario y grupos en los " -"dominios de confianza" - -msgid "Security Identifiers (SIDs)" -msgstr "Identificadores de Seguridad (SIDs)" - -msgid "Display information about a trust." -msgstr "Mostrar información sobre una confianza." - -msgid "Modify global trust configuration." -msgstr "Modificar la configuración global de confianza." - -msgid "Show global trust configuration." -msgstr "Mostrar la configuración de confianza global." - -msgid "Allow access from the trusted domain" -msgstr "Permitir acceso desde el dominio de confianza" - -msgid "Remove information about the domain associated with the trust." -msgstr "Borrar información sobre el dominio asociado con la confianza." - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "Deshabilitar el uso de recursos IPA por el dominio de la confianza" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "Permitir el uso de recursos IPA por el dominio de la confianza" - -msgid "Search domains of the trust" -msgstr "Buscar dominios de confianza" - -#, fuzzy -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" -"Los resultados deberían contener solo la clave del atributo primario (\"name" -"\")" - -msgid "Modify trustdomain of the trust" -msgstr "Modificar trustdomain de la confianza" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " +"Group\"\n" msgid "" "\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" msgstr "" "\n" -"Usuarios\n" -"\n" -"Gestiona entradas de usuario. Todos los usuarios son usuarios POXIS.\n" -"\n" -"IPA soporta un amplio rango de formatos de nombre de usuario, pero usted " -"debe estar atento a cualquier restricción que se pueda aplicar a su entorno " -"concreto. Por ejemplo, nombres de usuario que empiezan con un dígito o " -"nombres de usuario que superan cierta longitud pueden causar problemas en " -"algunos sistemas UNIX.\n" -"Use 'ipa config-mod' para cambiar el nombre de usuario permitido por las " -"herramientas IPA.\n" -"\n" -"Deshabilitando una cuenta de usuario evita que el usuario obtenga nuevas\n" -"credenciales Kerberos. Esto no invalida cualquier credencial que ya hay " -"sido\n" -"enviada.\n" -"\n" -"La gestión de contraseña no es parte de este módulo. Para más información " -"sobre \n" -"este punto vea por favor: ipa help passwd\n" -"\n" -"El cierre de una cuenta ante un fallo de contraseña sucede por el master " -"IPA. El\n" -"comando user-status se puede usar para identificar en que master está " -"bloqueado\n" -"el usuario. Y sobre ese master debe el administrador desbloquear al " -"usuario.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Añadir un nuevo usuario:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Encontrar todos los usuarios cuyas entradas incluyen la cadena \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Encontrar todos los usuarios con “Tim” como primer nombre:\n" -" ipa user-find --first=Tim\n" -"\n" -" Deshabilitar una cuenta de usuario:\n" -" ipa user-disable tuser1\n" -"\n" -" Habilitar una cuenta de usuario\n" -" ipa user-enable tuser1\n" -"\n" -" Borrar un usuario:\n" -" ipa user-del tuser1\n" +"La configuración de DNS que se pasa al script de instalación de la línea de\n" +"comandos está almacenado en un fichero de configuración local en cada " +"servidor\n" +"IPA donde el servicio DNS está configurado. Estos ajustes locales pueden ser " +"anulados con una configuración común almacenada en el servidor LDAP:\n" -msgid "First name" -msgstr "Nombre" - -msgid "Last name" -msgstr "Apellido" - -msgid "Full name" -msgstr "Nombre y apellidos" - -msgid "Display name" -msgstr "Mostrar nombre" - -msgid "Initials" -msgstr "Iniciales" - -msgid "Kerberos principal" -msgstr "Principal kerberos" - -#, fuzzy -msgid "Kerberos principal expiration" -msgstr "Principal kerberos" - -msgid "Email address" -msgstr "Dirección de correo electrónico" - -msgid "Prompt to set the user password" -msgstr "Solicita establecer la contraseña de usuario" - -#, fuzzy -msgid "Generate a random user password" -msgstr "Fijar una contraseña de usuario." - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" -"Número de ID de usuario (el sistema le asignará uno si no se indica ninguno)" - -msgid "Street address" -msgstr "Dirección postal" - -msgid "City" -msgstr "Ciudad" - -msgid "State/Province" -msgstr "Estado / Provincia" - -msgid "ZIP" -msgstr "Zona " - -msgid "Telephone Number" -msgstr "Número de teléfono" - -msgid "Mobile Telephone Number" -msgstr "Número de teléfono celular" - -msgid "Pager Number" -msgstr "Número de página" - -msgid "Fax Number" -msgstr "Número de fx" - -msgid "Org. Unit" -msgstr "Unidad. org" - -msgid "Job Title" -msgstr "Cargo" - -msgid "Car License" -msgstr "Licencia de conducción" - -msgid "Account disabled" -msgstr "Cuenta inhabilitada " - -#, fuzzy -msgid "User authentication types" -msgstr "Última autenticación fallada" - -#, fuzzy -msgid "Types of supported user authentication" -msgstr "El número de veces para reintentar la autenticación" - -#, fuzzy msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" -"Categoría de host (las semánticas situadas en este atributo son para " -"interpretación local)" - -#, fuzzy -msgid "RADIUS proxy configuration" +"\n" +"DNS server configuration\n" msgstr "" "\n" "Configuración del servidor DNS\n" -#, fuzzy -msgid "RADIUS proxy username" -msgstr "Nombre del servidor proxy RADIUS" - -#, fuzzy -msgid "Department Number" -msgstr "Número de página" - -#, fuzzy -msgid "Employee Number" -msgstr "Número de teléfono" - -msgid "Employee Type" -msgstr "" - -#, fuzzy -msgid "Preferred Language" -msgstr "Preferencia" - -msgid "Kerberos keys available" -msgstr "Claves Kerberos disponibles" - -msgid "Add a new user." -msgstr "Añadir un nuevo usuario." - -msgid "Don't create user private group" -msgstr "No crear grupo privado de usuario" - -msgid "Delete a user." -msgstr "Borrar un usuario." - -msgid "Disable a user account." -msgstr "Deshabilitar una cuenta de usuario." - -msgid "Enable a user account." -msgstr "Habilitar una cuenta de usuario." - -msgid "Search for users." -msgstr "Buscar usuarios." - -msgid "Self" -msgstr "Self" - -msgid "Display user record for current Kerberos principal" -msgstr "Muestra el registro del usuario para el principal de Kerberos actual" - -#, fuzzy -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" -"Los resultados deberían contener solo la clave del atributo primario (\"name" -"\")" - -#, fuzzy -msgid "Search for users with these member of groups." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for users without these member of groups." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for users with these member of netgroups." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for users without these member of netgroups." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for users with these member of roles." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for users without these member of roles." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for users with these member of HBAC rules." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for users without these member of HBAC rules." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for users with these member of sudo rules." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for users without these member of sudo rules." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -msgid "Modify a user." -msgstr "Modificar un usuario." - -#, fuzzy -msgid "Rename the user object" -msgstr "Renombrar el permiso del objeto" - -msgid "Display information about a user." -msgstr "Mostrar información sobre un usuario." - -#, fuzzy msgid "" "\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " +"Dates are treated as GMT to match the dates in the certificates.\n" msgstr "" "\n" -" Estado de bloqueo de una cuenta de usuario\n" -"\n" -" Una cuenta de usuario puede resultar bloqueada si la contraseña se " -"introduce\n" -" incorrectamente muchas veces dentro de un período especifico de tiempo\n" -" controlado por la política de contraseña. Un bloqueo de cuenta es una " -"condición\n" -" temporal y debe ser desbloqueada por un administrador.\n" -"\n" -" Esto conecta con el máster IPA y muestra el estado de bloqueo de cada " -"uno.\n" -"\n" -" Para determinar si una cuenta está bloqueada en un servidor dado usted\n" -" necesita comparar el número de accesos fallido y la hora del último " -"fallo. Para\n" -" que una cuenta se bloquee debe exceder maxfail dentro de la duración\n" -" failinterval según se especifique en la política de contraseña asociada " -"con el\n" -" usuario.\n" -"\n" -" El contador de acceso fallado se modifica solo cuando un usuario intenta " -"acceder\n" -" por lo que es posible que una cuenta puede aparecer bloqueada pero el " -"último\n" -" acceso fallado sea más antiguo que el lockouttime de la política de " -"contraseña.\n" -" Esto significa que el usuario puede intentar acceder otra vez." - -#, fuzzy -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" -"\n" -"Desbloquear una cuenta de usuario\n" -"\n" -" Una cuenta de usuario puede llegar a bloquearse si la contraseña se ha " -"introducido incorrectamente demasiadas\n" -"veces dentro de un período de tiempo controlado por la política de\n" -"contraseña. Una cuenta bloqueada es una condición temporal y puede ser " -"desbloqueada por\n" -"un administrador." - -#, fuzzy -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" -"\n" -"Reglas Sudo\n" -"\n" -"Sudo (su \"do\") permite a un administrador de sistema delegar autoridad a " -"ciertos\n" -"usuarios dados(o grupos de usuarios) para tener la posibilidad de ejecutar " -"algunos (o\n" -" todos) los comandos como root u otro usuario mientras suministra pistas de " -"auditoria de\n" -" los comandos y sus argumentos.\n" -"\n" -"IPA proporciona un medio para configurar diversos aspectos de Sudo:\n" -" Users: Los usuario(s)/grupos(s) que tienen permitido llamar a Sudo.\n" -" Hosts: Loshost(s)/grupo(s) de host a los que el usuario permite llamar a " -"Sudo.\n" -" Allow Command: El comando(s) específico que tiene permitido ejecutarse " -"por medio de Sudo.\n" -" Deny Command: El comando(s) específico que tiene prohibido ejecutarse por " -"medio de Sudo.\n" -" RunAsUser: El usuario(s) o grupo(s) de usuarios con cuyos derechos será " -"invocado Sudo.\n" -" RunAsGroup: El grupo(s) con cuyos derechos gid será invocado Sudo.\n" -" Options: Las diversas opciones Sudoers que pueden modificar el " -"comportamiento de Sudo.\n" -"\n" -"Su puede aadir un orden a una regla sudo para controlar el orden en el que " -"será evaluada\n" -"(si el cliente lo soporta). Este orden es un entero y debe ser único.\n" -"\n" -"IPA suministra un binddn designado para usar con Sudo situado en :\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"Para habilitar el binddn ejecute el siguiente comando para fijar la " -"contraseña:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -" -"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example," -"dc=com\n" -"\n" -"Para más información, vea la Documentación IPA para Sudo.\n" - -msgid "Command category" -msgstr "Categoría de comandos" - -msgid "Command category the rule applies to" -msgstr "Categoría de comandos la regla se aplica a" - -msgid "RunAs User category" -msgstr "Categoría de Usuario RunAs" - -msgid "RunAs User category the rule applies to" -msgstr "RunAs Usuario categoría la regla aplica a " - -msgid "RunAs Group category" -msgstr "RunAs Grupo categoría" - -msgid "RunAs Group category the rule applies to" -msgstr "RunAs Grupo categoría la regla aplica a" - -msgid "Sudo order" -msgstr "Orden Sudo" - -msgid "integer to order the Sudo rules" -msgstr "entero para ordenar las reglas Sudo" - -msgid "External User" -msgstr "De usuarios externos" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "Usuario Externo la regla aplica a (sudorule-find sólo)" - -#, fuzzy -msgid "Host Masks" -msgstr "Equipos" - -msgid "Sudo Allow Commands" -msgstr "Comandos Allow de sudo" - -msgid "Sudo Deny Commands" -msgstr "Comandos Deny de sudo" - -msgid "Sudo Allow Command Groups" -msgstr "Sudo Permitir Grupos de Comando" - -msgid "Sudo Deny Command Groups" -msgstr "Sudo Denegar Grupos de Comandos" - -msgid "RunAs Users" -msgstr "RunAs Usuarios" - -msgid "Run as a user" -msgstr "Ejecutar como un usuario" - -msgid "Groups of RunAs Users" -msgstr "Grupos de Usuarios RunAs" - -msgid "Run as any user within a specified group" -msgstr "Ejecutar como cualquier usuario dentro de un grupo especificado" - -msgid "RunAs External User" -msgstr "RunAs de usuarios externos" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "Usuario Externo los comandos pueden correr como (sudorule-find sólo)" - -#, fuzzy -msgid "External Groups of RunAs Users" -msgstr "Grupos de Usuarios RunAs" - -#, fuzzy -msgid "External Groups of users that the command can run as" -msgstr "Grupo Externo los comandos pueden correr como (sudorule-find sólo)" - -msgid "RunAs Groups" -msgstr "Grupos RunAs" - -msgid "Run with the gid of a specified POSIX group" -msgstr "Ejecutar con la gid de un grupo POSIX especificado" - -msgid "RunAs External Group" -msgstr "Grupo externo RunAs" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "Grupo Externo los comandos pueden correr como (sudorule-find sólo)" - -msgid "Sudo Option" -msgstr "Opción de sudo" - -msgid "Create new Sudo Rule." -msgstr "Crear nueva Regla Sudo." - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "Añadir comandos y grupos de comando sudo afectados por Regla Sudo." - -msgid "member sudo command group" -msgstr "miembro de grupo de comando sudo" - -#, fuzzy -msgid "sudo command groups to add" -msgstr "grupos de comando sudo" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "Añadir hosts y grupos de hosts afectados por Regla Sudo." - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "Añadir una opción a la Regla Sudo." - -msgid "Add group for Sudo to execute as." -msgstr "Añadir grupo para Sudo a ejecutar como." - -msgid "Add users and groups for Sudo to execute as." -msgstr "Añadir usuarios y grupos para Sudo a ejecutar como." - -msgid "Add users and groups affected by Sudo Rule." -msgstr "Añadir usuarios y grupos afectados por Regla Sudo." - -msgid "Delete Sudo Rule." -msgstr "Borrar Regla Sudo." - -msgid "Disable a Sudo Rule." -msgstr "Deshabilitar Regla Sudo." - -msgid "Enable a Sudo Rule." -msgstr "Habilitar Regla Sudo." - -msgid "Search for Sudo Rule." -msgstr "Buscar Regla Sudo." - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" -"Los resultados deberían contener solo el atributo de clave primaria " -"(\"sudorule-name\")" - -msgid "Modify Sudo Rule." -msgstr "Modificar Regla Sudo." - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "Quitar comandos y grupos de comando sudo afectados por Regla Sudo." - -#, fuzzy -msgid "sudo command groups to remove" -msgstr "grupos de comando sudo" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "Quitar hosts y grupos de hosts afectados por Regla Sudo." - -msgid "Remove an option from Sudo Rule." -msgstr "Quitar una opción de la Regla Sudo." - -msgid "Remove group for Sudo to execute as." -msgstr "Quitar grupo para Sudo a ejecutar como." - -msgid "Remove users and groups for Sudo to execute as." -msgstr "Quitar usuarios y grupos para Sudo a ejecutar como." - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "Quitar usuarios y grupos afectados por Regla Sudo." - -msgid "Display Sudo Rule." -msgstr "Mostrar Regla Sudo." - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "Tiempo límite de búsqueda en segundos (0 es ilimitado)" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "Número máximo de entradas devueltas (0 es ilimitado)" +"Las fechas se tratan como GMT para coincidir con las fechas de los " +"certificados.\n" msgid "" "\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -#, fuzzy -msgid "ACL name" -msgstr "Nombre de ACI" - -#, fuzzy -msgid "Profile category" -msgstr " Añadir servicios a una regla de HBAC" - -#, fuzzy -msgid "Profile category the ACL applies to" -msgstr "Categoría de servicio a la que se aplica la regla" - -#, fuzzy -msgid "User category the ACL applies to" -msgstr "Categoría de usuario al que se aplica la regla" - -#, fuzzy -msgid "Host category the ACL applies to" -msgstr "Categoría del equipo al que se aplica la regla" - -#, fuzzy -msgid "Service category the ACL applies to" -msgstr "Categoría de servicio a la que se aplica la regla" - -#, fuzzy -msgid "Profiles" -msgstr "ID del Perfil" - -#, fuzzy -msgid "Create a new CA ACL." -msgstr "Crear nuevo ACI." - -#, fuzzy -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "Añadir hosts objetivos y grupos de host a una regla HBAC." - -#, fuzzy -msgid "Add profiles to a CA ACL." -msgstr "Añadir privilegios a un rol." - -#, fuzzy -msgid "member Certificate Profile" -msgstr "Certificado de Perfil" - -#, fuzzy -msgid "Certificate Profiles to add" -msgstr "Certificado de Perfiles" - -#, fuzzy -msgid "Add services to a CA ACL." -msgstr "Añadir servicios a una regla HBAC." - -#, fuzzy -msgid "Add users and groups to a CA ACL." -msgstr "Añadir usuarios y grupos a una regla HBAC." - -#, fuzzy -msgid "Delete a CA ACL." -msgstr "Borrar ACI." - -#, fuzzy -msgid "Disable a CA ACL." -msgstr "Deshabilitar una CA." - -#, fuzzy -msgid "Enable a CA ACL." -msgstr "Habilitar una CA." - -#, fuzzy -msgid "Search for CA ACLs." -msgstr "Búsqueda de CAs." - -#, fuzzy -msgid "Modify a CA ACL." -msgstr "Modificar ACI." - -#, fuzzy -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "Borrar hosts objetivos y grupos de host de una regla HBAC." - -#, fuzzy -msgid "Remove profiles from a CA ACL." -msgstr "Borrar privilegios de un rol." - -#, fuzzy -msgid "Certificate Profiles to remove" -msgstr "Certificado de Perfiles" - -#, fuzzy -msgid "Remove services from a CA ACL." -msgstr "Borrar privilegios de un rol." - -#, fuzzy -msgid "Remove users and groups from a CA ACL." -msgstr "Borrar usuarios y grupos de una regla HBAC." - -#, fuzzy -msgid "Display the properties of a CA ACL." -msgstr "Muestra las propiedades de una CA." - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "Principal para este certificado (e.g. HTTP/test.example.com)" - -msgid "Profile ID" -msgstr "ID del Perfil" - -#, fuzzy -msgid "Certificate Profile to use" -msgstr "Certificado de Perfiles" - -#, fuzzy -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" msgstr "" "\n" -"Gestión de los Certificados de Perfil\n" -"\n" -"LOs Certificados de Perfil son usados por una Autoridad de Certificación " -"(CA) en la\n" -"firma de certificados si una Petición de Firma de Certificado (CSR) es " -"aceptable y\n" -"que características y extensiones estarán presentes en el certificado.\n" -"\n" -"El formato del Cetificado de Perfil es la lista de propiedad entendida por " -"Dogtag\n" -"o Red Hat Certificate System CA.\n" -"\n" -"SINTAXIS DEL ID DE PERFIL:\n" -"\n" -"Una ID de Perfil es una cadena sin espacios o puntuación que empieza con " -"una\n" -"letra y seguida por una secuencia de letras, dígitos o guiones bajos (\"_" -"\").\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Importar un perfil que no almacenará los certificados enviados:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Borrar un certificado de perfil:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Mostrar información sobre un perfil:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Guardar la configuración del perfil en un fichero:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Búsqueda de perfiles que almacenan certificados:\n" -" ipa certprofile-find --store=false\n" -"\n" -"FORMATO DE CONFIGURACIÓN DE PERFIL:\n" -"\n" -"El formato de configuración de perfil es el formato crudo de lista de " -"propiedad\n" -"usado por Dogtag Certificate System. No está soportado el formato XML.\n" -"\n" -"A los perfiles manejados por IPA se les aplican las siguientes " -"restricciones:\n" -"\n" -"- Cuando se importa un perfil el campo \"profileId\", si está presente, debe " -"coincidir\n" -" con la ID dada en la linea de comandos.\n" -"\n" -"- El campo \"classId\" debe estar fijado a \"caEnrollImpl\"\n" -"\n" -"- El campo \"auth.instance_id\" debe estar fijado a \"raCertAuth\"\n" -"\n" -"- La clase de entrada \"certReqInputImpl\" y la de salida \"certOutputImpl\" " -"se deben\n" -" usar.\n" -"\n" +"El borrado o renombrado de un permiso gestionado, así como el cambio de su\n" +"objetivo, no está permitido.\n" -msgid "Profile ID for referring to this profile" -msgstr "ID de Perfil para referirse a este perfil" - -msgid "Profile description" -msgstr "Descripción del perfil" - -msgid "Brief description of this profile" -msgstr "Breve descripción de este perfil" - -msgid "Store issued certificates" -msgstr "Almacén de certificados enviados" - -msgid "Whether to store certs issued using this profile" -msgstr "Si se almacenan los certificados enviados usando este perfil" - -msgid "Delete a Certificate Profile." -msgstr "Borrar un Certificado Perfil" - -msgid "Search for Certificate Profiles." -msgstr "Búsqueda de Certificados de Perfiles" - -msgid "Import a Certificate Profile." -msgstr "Importar un Certificado Perfil" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "Nombre de fichero de un perfil crudo. El formato XML no se soporta" - -msgid "Modify Certificate Profile configuration." -msgstr "Modificar la configuración del Certificado Perfil" - -msgid "File containing profile configuration" -msgstr "Fichero que contiene la configuración del perfil" - -msgid "Display the properties of a Certificate Profile." -msgstr "Muestra las propiedades de un Certificado de Perfil" - -msgid "Write profile configuration to file" -msgstr "Escribir configuración de perfil a fichero" - -#, fuzzy -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" -"Máxima cantidad de tiempo (segundos) parab una búsqueda (> 0, o -1 para " -"ilimitado)" - -#, fuzzy -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "Máximo número de registros a buscar (-1 es ilimitado)" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" - -msgid "Query current Domain Level." -msgstr "" - -#, fuzzy -msgid "Current domain level:" -msgstr "Nivel de dominio Min" - -msgid "Change current Domain Level." -msgstr "" - -#, fuzzy -msgid "Domain Level" -msgstr "Nivel de dominio Max" - -msgid "Add certificates to host entry" -msgstr "Añade certificados a la entrada de host" - -msgid "Remove certificates from host entry" -msgstr "Borra certificados de una entrada de host" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" -"\n" -"Añadir un nuevo rango de ID.\n" -"\n" -" Para añadir un nuevo rango de ID siempre debe especificar\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Adicionalmente\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" puede ser dado para un nuevo rango de ID para el dominio local mientras\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" deben ser dados para añadir un nuevo rango para un AD de dominio de " -"confianza.\n" -"\n" -" PRECAUCIÓN:\n" -"\n" -" El plugin DNA en 389-ds ubicará IDs en base a los rangos configurados " -"para el dominio\n" -" local. Actualmente el plugin DNA \"no puede\" ser reconfigurado por si " -"mismo en base a\n" -" los rangos locales ajustados por medio de esta familia de comandos.\n" -"\n" -" El cambio manual de configuración ha sido hecho en la configuración del " -"plugin DNA\n" -" para el nuevo rango local. Específicamente, el atributo dnaNextRange de " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' ha " -"sido\n" -" modificado para coincidir con el nuevo rango.\n" -" " - -#, fuzzy -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" -"=======\n" -"ADVERTENCIA:\n" -"\n" -"El plugin DNA en 389-ds asignará IDs basados en el rango configurado para " -"el\n" -"dominio local. Actualmente el plugin DNA *no puede* ser reconfigurado en " -"base a\n" -"los rangos locales establecidos por medio de esta familia de comandos.\n" -"\n" -"El cambio de configuración manual ha de ser hecho en la configuración del " -"plugin\n" -"DNA para e nuevo rango local. Especialmente, el atributo dnaNextRange de\n" -"'cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " -"ha\n" -"sido modificado para coincidir con el nuevo rango.\n" -"=======\n" - -msgid "Fallback to AD DC LDAP" -msgstr "" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" - -msgid "Add to default group" -msgstr "Añadir a grupo predeterminado" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" -"Añadir usuarios migrados sin grupo a un grupo predeterminado (por defecto: " -"true)" - -msgid "Search scope" -msgstr "Alcance de búsqueda" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" -"Alcance de búsqueda LDAP para usuarios y grupos: base, un nivel o sub árbol. " -"Predeterminado a un nivel" - -msgid "Remove users that can manage this token." -msgstr "Quitar usuarios que puedan manejar esta ficha." - -msgid "Target DN subtree" -msgstr "Sub-árbol DN objetivo" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" -"Sub-árbol DN opcional donde una entrada puede ser movida (debe estar en el " -"sub-árbol, pero puede no existir todavía)" - -msgid "Origin DN subtree" -msgstr "Subárbol DN origen" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" -"Subárbol opcional DN desde donde se puede mover una entrada (debe estar en " -"el subárbol pero puede ser que todavía no exista)" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "Server name" -msgstr "Nombre del servidor" - -msgid "IPA server hostname" -msgstr "Nombre de host del servidor IPA" - -#, fuzzy -msgid "Managed suffix" -msgstr "Sufijos gestionados" - -msgid "Min domain level" -msgstr "Nivel de dominio Min" - -msgid "Minimum domain level" -msgstr "Nivel mínimo de dominio" - -msgid "Max domain level" -msgstr "Nivel de dominio Max" - -msgid "Maximum domain level" -msgstr "Nivel máximo de dominio" - -msgid "Delete IPA server." -msgstr "Eliminar servidor IPA." - -msgid "Search for IPA servers." -msgstr "Buscar servidores IPA." - -msgid "Show IPA server." -msgstr "Mostrar servidor IPA." - -msgid "Add new certificates to a service" -msgstr "Añadir nuevos certificados a un servicio" - -msgid "Remove certificates from a service" -msgstr "Quitar certificados de un servicio" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -#, fuzzy -msgid "Allowed Target" -msgstr "Error en Objetivos" - -#, fuzzy -msgid "Create a new service delegation rule." -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy -msgid "Add member to a named service delegation rule." -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy -msgid "member principal" -msgstr "Principal kerberos" - -#, fuzzy -msgid "principal to add" -msgstr "principal no se encuentra\n" - -#, fuzzy -msgid "Add target to a named service delegation rule." -msgstr "objetivo de delegación de miembro de servicio" - -msgid "member service delegation target" -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy -msgid "service delegation targets to add" -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy -msgid "Delete service delegation." -msgstr "Borrar una delegación." - -#, fuzzy -msgid "Search for service delegations rule." -msgstr "Buscar delegaciones." - -#, fuzzy -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" -"Los resultados deberían contener solo la clave del atributo primario (\"name" -"\")" - -#, fuzzy -msgid "Remove member from a named service delegation rule." -msgstr "Borrar miembros de un grupo de servicio HBAC." - -#, fuzzy -msgid "principal to remove" -msgstr "Error al remover " - -#, fuzzy -msgid "Remove target from a named service delegation rule." -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy -msgid "service delegation targets to remove" -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy -msgid "Display information about a named service delegation rule." -msgstr "Mostrar información sobre una delegación." - -#, fuzzy -msgid "Create a new service delegation target." -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy -msgid "Add member to a named service delegation target." -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy -msgid "Delete service delegation target." -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy -msgid "Search for service delegation target." -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy -msgid "Remove member from a named service delegation target." -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy -msgid "Display information about a named service delegation target." -msgstr "Mostrar información sobre una delegación." - -#, fuzzy -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" -"\n" -"Escenógrafos\n" -"\n" -"Gestionar las entradas de escenario de usuario.\n" -"\n" -"Las entradas de escenario de usuario están directamente bajo el contenedor.\n" -" \"cn=stage users, cn=accounts, cn=provisioning, SUFFIX\". Los usuarios no " -"se\n" -" pueden autenticar con estas entradas (aunque las entradas contengan\n" -" credenciales). Estas entradas son solo candidatas a llegar a ser entradas " -"Activas.\n" -"\n" -"Las entradas Activas de usuario son usuarios Posix directamente bajo el " -"contenedor. \"cn=accounts, SUFFIX\".\n" -"Los usuario se pueden autenticar con entradas Activas con la condición de " -"que \n" -"tengan credenciales.\n" -"\n" -"Las entradas borradas de usuario son usuaruios Posix directamente bajo el " -"contenedor. \"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Los usuarios no se pueden autenticas con estas entradas, aunque estas " -"entradas contengan credenciales.\n" -"\n" -"El contenedor escenario de usuario contiene entradas:\n" -" - crreadas por comandos 'stageuser-add' que son usuarios Posix,\n" -" - creadas por un sistema externa de aprovisionamiento.\n" -"\n" -"Una entrada de escenario de usuario valida DEBE tener:\n" -" - entrada RDN es 'uid',\n" -" - ipaUniqueID es 'autogenerate'.\n" -"\n" -"IPA soporta un amplia rango de formatos de nombre de usuario, pero usted " -"debe\n" -"estar atento a algunas restricciones que pueden aplicarse a su entorno " -"concreto.\n" -"Por ejemplo, los nombres de usuario que empiezan con un dígito o los nombres " -"de \n" -"usuario que exceden cierta longitud pueden causar problemas en algunos " -"sistemas UNIX.\n" -"Use 'ipa config-mod' para cambiar el formato de nombre de usuario permitido " -"por las herramientas IPA.\n" -"\n" -"\n" -"EJEMPLOS:\n" -"\n" -"Añadir un uevo escenógrafo:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Añadir un escenografo desde un contenedor de usuarios borrados:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" - -#, fuzzy -msgid "Activate a stage user." -msgstr "Borrar un escenario usuario." - -msgid "Add a new stage user." -msgstr "Añadir un nuevo escenario usuario." - -msgid "Create Stage user in from a delete user" -msgstr "Crear Escenario usuario desde un usuario borrado" - -msgid "Delete a stage user." -msgstr "Borrar un escenario usuario." - -#, fuzzy -msgid "Search for stage users." -msgstr "Buscar usuarios." - -#, fuzzy -msgid "Search for stage users with these member of groups." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for stage users without these member of groups." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for stage users with these member of netgroups." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for stage users without these member of netgroups." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for stage users with these member of roles." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for stage users without these member of roles." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for stage users with these member of HBAC rules." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for stage users without these member of HBAC rules." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for stage users with these member of sudo rules." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for stage users without these member of sudo rules." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -msgid "Modify a stage user." -msgstr "Modificar un escenario usuario." - -#, fuzzy -msgid "Rename the stage user object" -msgstr "Renombrar el permiso del objeto" - -#, fuzzy -msgid "Display information about a stage user." -msgstr "Mostrar información sobre un usuario." - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" - -#, fuzzy -msgid "Segment name" -msgstr "Nombre del servidor" - -msgid "Arbitrary string identifying the segment" -msgstr "" - -msgid "Left node" -msgstr "" - -#, fuzzy -msgid "Left replication node - an IPA server" -msgstr "Modificar información sobre un servidor IPA." - -#, fuzzy -msgid "Right node" -msgstr "Derechos" - -#, fuzzy -msgid "Right replication node - an IPA server" -msgstr "Modificar información sobre un servidor IPA." - -msgid "Connectivity" -msgstr "" - -msgid "Direction of replication between left and right replication node" -msgstr "" - -#, fuzzy -msgid "Attributes to strip" -msgstr "Atributos" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" - -#, fuzzy -msgid "Attributes to replicate" -msgstr "Atributo Clave" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" - -msgid "Attributes for total update" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" - -#, fuzzy -msgid "Session timeout" -msgstr "Error de sesión" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" - -#, fuzzy -msgid "Replication agreement enabled" -msgstr "Acuerdo de replicación para %(hostname)s no encontrado" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" - -#, fuzzy -msgid "Suffix name" -msgstr "nombre de archivo" - -msgid "LDAP suffix to be managed" -msgstr "" - -#, fuzzy -msgid "Add a new segment." -msgstr "Añadir un n uevo host." - -#, fuzzy -msgid "Delete a segment." -msgstr "Borrar un host." - -#, fuzzy -msgid "Search for topology segments." -msgstr "Buscar privilegios." - -#, fuzzy -msgid "Modify a segment." -msgstr "Modificar un usuario." - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" - -msgid "Initialize left node" -msgstr "" - -msgid "Initialize right node" -msgstr "" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "" - -#, fuzzy -msgid "Display a segment." -msgstr "Mostrar nombre" - -msgid "Add a new topology suffix to be managed." -msgstr "" - -#, fuzzy -msgid "Delete a topology suffix." -msgstr "Borrar un escenario usuario." - -#, fuzzy -msgid "Search for topology suffices." -msgstr "Buscar roles." - -#, fuzzy -msgid "Modify a topology suffix." -msgstr "Modificar un escenario usuario." - -#, fuzzy -msgid "Show managed suffix." -msgstr "Sufijos gestionados" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" - -msgid "Two-way trust" -msgstr "Confianza de dos sentidos" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" -"Establecida confianza bidireccional. Por defecto la confianza es de un solo " -"sentido entrante." - -msgid "Preserved user" -msgstr "Usuario preservado" - -msgid "Add one or more certificates to the user entry" -msgstr "Añade uno o más certificados a la entrada del usuario" - -msgid "Remove one or more certificates to the user entry" -msgstr "Borra uno o más certificados de la entrada de usuario" - -msgid "Move deleted user into staged area" -msgstr "Mover el usuario borrado al área de escena" - -msgid "Undelete a delete user account." -msgstr "Recuperar una cuenta de usuario borrada." - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -#, fuzzy -msgid "Vault name" -msgstr "Apellido" - -#, fuzzy -msgid "Vault description" -msgstr "descripción" - -#, fuzzy -msgid "Vault type" -msgstr "Tipo de regla" - -msgid "Salt" -msgstr "" - -#, fuzzy -msgid "Vault salt" -msgstr "" -"\n" -"Bóvedas\n" - -#, fuzzy -msgid "Public key" -msgstr "Clave pública SSH" - -#, fuzzy -msgid "Vault public key" -msgstr "Clave pública de la bóveda desaparecida" - -#, fuzzy -msgid "Owner users" -msgstr "Usuarios miembros" - -#, fuzzy -msgid "Owner groups" -msgstr "grupos de red" - -#, fuzzy -msgid "Owner services" -msgstr "Servicios de miembros" - -msgid "Failed owners" -msgstr "Error en Propietarios" - -#, fuzzy -msgid "Vault service" -msgstr "Vía de servicio" - -msgid "Shared vault" -msgstr "" - -#, fuzzy -msgid "Vault user" -msgstr "Contraseña de la bóveda" - -#, fuzzy -msgid "Transport Certificate" -msgstr "Certificado de host" - -#, fuzzy -msgid "Service name of the service vault" -msgstr "Categoría de servicio a la que se aplica la regla" - -#, fuzzy -msgid "Username of the user vault" -msgstr "Nombre de host de este servidor" - -#, fuzzy -msgid "Add members to a vault." -msgstr "Añadir miembros a un rol." - -#, fuzzy -msgid "Add owners to a vault." -msgstr "Añadir miembros a un rol." - -#, fuzzy -msgid "owner user" -msgstr "usuario miembro" - -#, fuzzy -msgid "owner group" -msgstr "Grupo de usuarios" - -#, fuzzy -msgid "owner service" -msgstr "Servicios de miembros" - -#, fuzzy -msgid "Owners that could not be added" -msgstr "Miembros que no han podido ser añadidos" - -#, fuzzy -msgid "Number of owners added" -msgstr "Cantidad de miembros añadidos" - -msgid "Session key wrapped with transport certificate" -msgstr "" - -msgid "Vault data encrypted with session key" -msgstr "" - -msgid "Nonce" -msgstr "" - -#, fuzzy -msgid "Delete a vault." -msgstr "Borrar una confianza." - -#, fuzzy -msgid "Search for vaults." -msgstr "Búsqueda de confianzas." - -#, fuzzy -msgid "List all service vaults" -msgstr "Servicio inhabilitado \"%(value)s\"" - -#, fuzzy -msgid "List all user vaults" -msgstr "Deshabilitar una cuenta de usuario." - -#, fuzzy -msgid "Remove members from a vault." -msgstr "Borrar miembros de un rol." - -#, fuzzy -msgid "Remove owners from a vault." -msgstr "Borrar miembros de un rol." - -#, fuzzy -msgid "Owners that could not be removed" -msgstr "Miembros que no han podido ser eliminados" - -#, fuzzy -msgid "Number of owners removed" -msgstr "Cantidad de miembros eliminados" - -#, fuzzy -msgid "Display information about a vault." -msgstr "Mostrar información sobre una confianza." - -#, fuzzy -msgid "Show vault configuration." -msgstr "Mostrar la configuración de confianza global." - -#, fuzzy -msgid "Output file to store the transport certificate" -msgstr "Archivo para almacenar el certificado" - -msgid "Add owners to a vault container." -msgstr "" - -#, fuzzy -msgid "Delete a vault container." -msgstr "Borrar una localización de automontaje." - -#, fuzzy -msgid "Remove owners from a vault container." -msgstr "Borrar miembros de un rol." - -#, fuzzy -msgid "Display information about a vault container." -msgstr "Mostrar información sobre un usuario." - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "Resuelve un nombre de host en DNS. (Obsoleto)" - -msgid "Hostname (FQDN)" -msgstr "Nombre de host (FQDN)" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" -"Fuerza la creación de zona DNS aún en el caso de que se superponga con una " -"zona existente." - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" -"Fuerza la creación de zona DNS aunque el servidor de nombre no se pueda " -"resolver. (Obsoleto)" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Managed suffixes" -msgstr "Sufijos gestionados" - -msgid "Check connection to remote IPA server." -msgstr "Comprobar la conexión al servidor IPA remoto." - -msgid "Remote server name" -msgstr "Nombre del servidor remoto" - -msgid "Remote IPA server hostname" -msgstr "Nombre de host del servidor IPA remoto" - -#, fuzzy -msgid "suffix" -msgstr "Sufijos UPN" - -#, fuzzy -msgid "Search for servers with these managed suffixes." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy -msgid "Search for servers without these managed suffixes." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "Add a manager to the stage user entry" -msgstr "Añade un gestor a entrada de usuario" - -#, fuzzy -msgid "Remove a manager to the stage user entry" -msgstr "Borra un gestor a la entrada de usuario" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, fuzzy -msgid "Managed LDAP suffix DN" -msgstr "Sufijos gestionados" - -#, fuzzy -msgid "Search for topology suffixes." -msgstr "Buscar roles." - -msgid "Add a manager to the user entry" -msgstr "Añade un gestor a entrada de usuario" - -msgid "Remove a manager to the user entry" -msgstr "Borra un gestor a la entrada de usuario" - -#, fuzzy msgid "" "\n" "Directory Server Access Control Instructions (ACIs)\n" @@ -11861,14 +2214,15 @@ msgid "" " Add an ACI that allows members of the admins group to manage the street and " "zip code of those in the editors group:\n" " ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" +"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " +"editors\"\n" "\n" " Add an ACI that allows the admins group manage the street and zipcode of " "those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" +" ipa aci-add --permissions=write --group=admins --attrs=street --" +"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," +"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " +"the boss\"\n" "\n" " Add an entirely new kind of record to IPA that isn't covered by any of the " "--type options, creating a permission:\n" @@ -12021,740 +2375,48 @@ msgstr "" "targetattr\n" "REEMPLAZA los atributos actuales, no los añade.\n" -#, fuzzy -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" -"Lista separada por comas de permisos a obtener (lectura, escritura, borrado, " -"todos)" - -msgid "Comma-separated list of attributes" -msgstr "Lista separada por comas de atributos" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" -"\n" -"Grupo a Delegación de Grupo\n" -"\n" -"Un permiso habilita una delegación de grano fino de permisos. Reglas de " -"Control\n" -"de Acceso o instrucciones (ACIs), otorgan permisos a los permisos para " -"llevar a\n" -"cabo tareas dadas como añadir un usuario, modificar un grupo, etc.\n" -"\n" -"Grupo a Delegaciones de Grupo concede a los miembros de un grupo para\n" -"actualizar un conjunto de atributos de miembros de otro grupo.\n" -"\n" -"EJEMPLOS:\n" -"\n" -"Añadir una regla de delegación para permitir a los gestores editar las " -"direcciones de los empleados:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Cuando gestiona una lista de atributos usted necesita incluir todos los " -"atributos en \n" -" la lista, incluyendo los existentes. Añadir postalCode a la lista:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Mostrar nuestra regla actualizada:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Borrar una regla:\n" -" ipa delegation-del \"managers edit employees' street\"\n" - -#, fuzzy -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" -"Lista separada por comas de permisos a obtener (lectura, escritura, borrado, " -"todos)" - msgid "" "\n" "Domain Name System (DNS)\n" +msgstr "" "\n" -"Manage DNS zone and resource records.\n" +"Sistema de Nombre de Dominio (DNS)\n" + +msgid "" "\n" +"ENROLLMENT:\n" "\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" +"There are three enrollment scenarios when enrolling a new client:\n" "\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" "\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" +"INSCRIPCIÓN:\n" "\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"Hay tres escenarios de inscripción cuando se inscribe un nuevo cliente:\n" "\n" +"1. Se está inscribiendo como administrador total. La entrada de host puede " +"existir o\n" +" no. Un administrador total es miembro del rol hostadmin role o del grupo " +"admins.\n" +"2. Se está inscribiendo como administrador limitado. El host debe existir " +"ya. Un\n" +" administrador limitado es miembro de un rol con el privilegio Host " +"Enrollment.\n" +"3. El host ha sido creado con una contraseña de una vez.\n" + +msgid "" "\n" "EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" - -#, fuzzy -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Promotores globales. Se puede especificar un pueeto personalizado por cada " -"promotor usando el formato estándar \"IP_ADDRESS port PORT\"" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" -"Un intervalo entre preguntas regulares del servidor de nombre sobre nuevas " -"zonas DNS" - -msgid "DNS class" -msgstr "Clase DNS" - -#, fuzzy -msgid "Comma-separated list of raw A records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw AAAA records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw A6 records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw AFSDB records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw APL records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw CERT records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw CNAME records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw DHCID records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw DLV records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw DNAME records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw DNSKEY records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw DS records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw HIP records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw KEY records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "KEY Flags" -msgstr "Banderas" - -msgid "KEY Protocol" -msgstr "" - -msgid "Protocol" -msgstr "" - -#, fuzzy -msgid "KEY Algorithm" -msgstr "Algoritmo" - -#, fuzzy -msgid "KEY Public Key" -msgstr "Clave pública SSH" - -#, fuzzy -msgid "Public Key" -msgstr "Clave pública SSH" - -#, fuzzy -msgid "Comma-separated list of raw KX records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw LOC records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw MX records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw NAPTR records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw NS records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw NSEC records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "NSEC Next Domain Name" -msgstr "Nombre del dominio NIS" - -#, fuzzy -msgid "Next Domain Name" -msgstr "Nombre de dominio" - -msgid "NSEC Type Map" -msgstr "" - -#, fuzzy -msgid "Type Map" -msgstr "Tipo" - -#, fuzzy -msgid "Comma-separated list of raw NSEC3 records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw PTR records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw RRSIG records" -msgstr "Lista separada por comas de atributos" - -msgid "RRSIG Type Covered" -msgstr "" - -msgid "Type Covered" -msgstr "" - -#, fuzzy -msgid "RRSIG Algorithm" -msgstr "Algoritmo" - -msgid "RRSIG Labels" -msgstr "" - -msgid "Labels" -msgstr "" - -msgid "RRSIG Original TTL" -msgstr "" - -msgid "Original TTL" -msgstr "" - -msgid "RRSIG Signature Expiration" -msgstr "" - -#, fuzzy -msgid "Signature Expiration" -msgstr "Caducidad de la contraseña" - -msgid "RRSIG Signature Inception" -msgstr "" - -msgid "Signature Inception" -msgstr "" - -#, fuzzy -msgid "RRSIG Key Tag" -msgstr "Etiqueta de clave" - -msgid "RRSIG Signer's Name" -msgstr "" - -#, fuzzy -msgid "Signer's Name" -msgstr "Nombre de servidor" - -msgid "RRSIG Signature" -msgstr "" - -msgid "Signature" -msgstr "" - -#, fuzzy -msgid "Comma-separated list of raw RP records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw SIG records" -msgstr "Lista separada por comas de atributos" - -msgid "SIG Type Covered" -msgstr "" - -#, fuzzy -msgid "SIG Algorithm" -msgstr "Algoritmo" - -msgid "SIG Labels" -msgstr "" - -msgid "SIG Original TTL" -msgstr "" - -msgid "SIG Signature Expiration" -msgstr "" - -msgid "SIG Signature Inception" -msgstr "" - -#, fuzzy -msgid "SIG Key Tag" -msgstr "Etiqueta de clave" - -msgid "SIG Signer's Name" -msgstr "" - -msgid "SIG Signature" -msgstr "" - -#, fuzzy -msgid "Comma-separated list of raw SPF records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw SRV records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw SSHFP records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw TA records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw TKEY records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw TSIG records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "Comma-separated list of raw TXT records" -msgstr "Lista separada por comas de atributos" - -#, fuzzy -msgid "SOA time to live" -msgstr "Tiempo para abandonar" - -#, fuzzy -msgid "SOA record time to live" -msgstr "tiempo de expiración de registro SOA" - -msgid "SOA class" -msgstr "Clase SOA" - -msgid "SOA record class" -msgstr "Clase de registro SOA " - -#, fuzzy -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Expedidores por zona. Se puede especificar un puerto personalizado para cada " -"exedidor usando el formato estándar \"IP_ADDRESS port PORT\"" - -msgid "Add forward record for nameserver located in the created zone" msgstr "" +"\n" +"EJEMPLOS:\n" msgid "" "\n" @@ -12832,1216 +2494,79 @@ msgstr "" "Los cambios en /etc/rhsm/rhsm.conf requieren un reinicio del servicio " "httpd.\n" -msgid "Consume an entitlement." -msgstr "Consumir un derecho." - -msgid "Quantity" -msgstr "Cantidad" - -msgid "Search for entitlement accounts." -msgstr "Búsqueda por cuentas de derechos." - -msgid "Retrieve the entitlement certs." -msgstr "Recuperar el certificado del derecho." - -msgid "Import an entitlement certificate." -msgstr "Importar un certificado de derecho." - -msgid "UUID" -msgstr "UUID" - -msgid "Enrollment UUID" -msgstr "Inscripción UUID" - -msgid "Register to the entitlement system." -msgstr "Registro al sistema de derechos." - -msgid "Username" -msgstr "Nombre de usuario" - -msgid "Enrollment UUID (not implemented)" -msgstr "Inscripción de UUID (no implementada)" - -msgid "Registration password" -msgstr "Contraseña de registro" - -msgid "Display current entitlements." -msgstr "Mostrar los derechos actuales." - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" -"Volver a sincronizar el cache de derechos local con el servidor de derechos." - msgid "" "\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "Miembros de un dominio de confianza en formato DOM\\name o name@domain" - -msgid "comma-separated list of users to add" -msgstr "lista separada por comas de usuarios a añadir" - -msgid "comma-separated list of groups to add" -msgstr "listas separada por comas de grupos a añadir" - -msgid "comma-separated list of users to remove" -msgstr "lista separada por comas de usuarios a quitar" - -msgid "comma-separated list of groups to remove" -msgstr "lista separada por comas de grupos a quitar" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -#, fuzzy -msgid "Source host category" -msgstr "Categoría del equipo" - -#, fuzzy -msgid "Source host category the rule applies to" -msgstr "Categoría del equipo al que se aplica la regla" - -msgid "Source Hosts" -msgstr "" - -#, fuzzy -msgid "Source Host Groups" -msgstr "Grupos de equipo" - -msgid "comma-separated list of hosts to add" -msgstr "lista separada por comas de hosts a añadir" - -msgid "comma-separated list of host groups to add" -msgstr "lista separada por comas de grupos de host a añadir" - -#, fuzzy -msgid "comma-separated list of HBAC services to add" -msgstr "lista separada por comas de usuarios a añadir" - -#, fuzzy -msgid "comma-separated list of HBAC service groups to add" -msgstr "listas separada por comas de grupos a añadir" - -#, fuzzy -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "Añadir hosts objetivos y grupos de host a una regla HBAC." - -msgid "comma-separated list of hosts to remove" -msgstr "lista separada por comas de hosts a quitar" - -msgid "comma-separated list of host groups to remove" -msgstr "lista separada por comas de grupos de host a quitar" - -#, fuzzy -msgid "comma-separated list of HBAC services to remove" -msgstr "lista separada por comas de usuarios a quitar" - -#, fuzzy -msgid "comma-separated list of HBAC service groups to remove" -msgstr "lista separada por comas de grupos a quitar" - -#, fuzzy -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "Borrar hosts objetivos y grupos de host de una regla HBAC." - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" - -#, fuzzy -msgid "Source host" -msgstr "Host objetivo" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " +"Get information about installed IPA servers.\n" msgstr "" "\n" -"Añadir un nuevo rango de ID.\n" -"\n" -" Para añadir un nuevo rango de ID siempre debe especificar\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Adicionalmente\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" puede ser dado para un nuevo rango de ID para el dominio local mientras\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" deben ser dados para añadir un nuevo rango para un AD de dominio de " -"confianza.\n" -"\n" -" PRECAUCIÓN:\n" -"\n" -" El plugin DNA en 389-ds ubicará IDs en base a los rangos configurados " -"para el dominio\n" -" local. Actualmente el plugin DNA \"no puede\" ser reconfigurado por si " -"mismo en base a\n" -" los rangos locales ajustados por medio de esta familia de comandos.\n" -"\n" -" El cambio manual de configuración ha sido hecho en la configuración del " -"plugin DNA\n" -" para el nuevo rango local. Específicamente, el atributo dnaNextRange de " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' ha " -"sido\n" -" modificado para coincidir con el nuevo rango.\n" -" " +"Obtener información sobre los servidores IPA instalados.\n" -#, fuzzy -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "Objectclasses usado para buscar entradas de usuario en DS" - -#, fuzzy -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "Objectclasses usado para buscar entradas de grupo en DS" - -#, fuzzy -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "Objectclasses a se ignorado para entradas de usuario en DS" - -#, fuzzy -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "Atributos a ignorar para las entradas de usuario en DS" - -#, fuzzy -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "Objectclasses a ignorar para las entradas de grupo en DS" - -#, fuzzy -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "Atributos a ignorar para las entradas de grupo en DS" - -#, fuzzy -msgid "comma-separated list of groups to exclude from migration" -msgstr "lista separada por comas de grupos a quitar" - -#, fuzzy -msgid "comma-separated list of users to exclude from migration" -msgstr "lista separada por comas de usuarios a quitar" - -#, fuzzy msgid "" "\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" msgstr "" "\n" -"Netgroups\n" -"\n" -"Un netgroup es un grupo usado para comprobación de permisos. Puede contener\n" -"valores tanto de usuario como de host.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Añadir un nuevo netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Añadir miembros al netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Quitar un miembro del netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Mostrar información sobre un netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Borrar un netgroup:\n" -" ipa netgroup-del admins\n" - -#, fuzzy -msgid "comma-separated list of netgroups to add" -msgstr "listas separada por comas de grupos a añadir" - -#, fuzzy -msgid "comma-separated list of netgroups to remove" -msgstr "lista separada por comas de grupos a quitar" +"Obtener el estado de los roles (servidor DNS, CA, etc.) suministrado por los " +"IPA maestros.\n" msgid "" "\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" -"\n" -"Permisos\n" -"\n" -"Un permiso habilita una delegación de grano fino de derechos. Un permiso es " -"un formato\n" -"legible por el hombre de una Regla de Control de Acceso (ACL) 389-ds o una " -"instrucción (ACI).\n" -"Un permiso otorga el derecho de llevar a cabo una tarea específica como " -"añadir un\n" -"usuario, modificar un grupo, etc.\n" -"\n" -"Un permiso puede contener otros permisos.\n" -"\n" -"* Un permiso otorga acceso de escritura, lectura, añadir o borrar.\n" -"* Un privilegio combina permisos similares (por ejemplo los permisos " -"necesarios para \n" -" añadir un usuario).\n" -"* Un rol otorga un conjunto de privilegios a usuarios, grupos, hosts o " -"grupos de hosts.\n" -"\n" -"Un permiso consta de diversas partes:\n" -"\n" -"1. El nombre del permiso.\n" -"2. El objetivo del permiso.\n" -"3. Los derechos otorgados por el permiso.\n" -"\n" -"Los derechos definen que operaciones están permitidas y pueden ser una o más " -"de las\n" -"siguientes:\n" -"1. write - escribir uno o más atributos\n" -"2. read - leer uno o más atributos\n" -"3. add - añadir una nueva entrada al árbol\n" -"4. delete - borrar una entrada existente\n" -"5. all - se otorgan todos los permisos\n" -"\n" -"El permiso de lectura se otorga para la mayoría de los atributos por " -"defectos de modo que\n" -"el permiso de lectura no se espera que use con frecuencia.\n" -"\n" -"Advierta la distinción entre atributos y entradas. Los permisos son " -"independientes, de\n" -"modo que ser capaz de añadir un usuario no siginifica que el usuario será " -"editable.\n" -"\n" -"Hay diversos objetivos permitidos:\n" -"1. type: un tipo de objeto (usuario, grupo, etc).\n" -"2. memberof: un miembro de un grupo o grupo de host\n" -"3. filter: un filtro LDAP\n" -"4. subtree: un filtro LDAP especificando parte del LDAP DIT. Esto es un " -"superconjunto del\n" -" objetivo \"type\".\n" -"5. targetgroup: otorga acceso a modificar un grupo específico (como " -"obteniendo\n" -" derechos para manejar la pertenencia al grupo)\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Añadir un permiso que otorga la creación de usuarios:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Añadir un permiso que otorga la capacidad de manejar la pertenencia al " -"grupo:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" -"Lista separada por comas de permisos a obtener (lectura, escritura, borrado, " -"todos)" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" -"Tipo de objeto IPA (usuario, grupo, host, grupo de host, servicio, grupo de " -"red, dns)" - -msgid "Target members of a group" -msgstr "Miembros objetivo de un grupo" - -msgid "User group to apply permissions to" -msgstr "Grupo de usuario a aplicar los permisos para" - -msgid "comma-separated list of privileges to add" -msgstr "lista separada por comas de privilegios a añadir" - -msgid "Add a system permission without an ACI" -msgstr "Añadir un permiso al sistema sin un ACI" - -msgid "Permission type" -msgstr "Tipo de permiso" - -msgid "comma-separated list of privileges to remove" -msgstr "lista separada por comas de privilegios a borrar" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" -"\n" -"Haga ping al servidor IPA remoto para asegurar que está corriendo.\n" -"\n" -"El comando ping envía una petición de eco a un servidor IPA. El servidor " -"devuelve su\n" -"información de versión. Esto se usa por un cliente IPA para confirmar que el " -"servidor está\n" -"disponible y acepta peticiones.\n" -"\n" -"El servidor desde xmlrpc_uri en /etc/ipa/default.conf es contactado primero. " -"Si no\n" -"el cliente contactará con cualquier de los servidores definidos por los " -"registros ldap SRV\n" -"en DNS.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Ping a un servidor IPA:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping a un servidor IPA verbosamente:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" - -#, fuzzy -msgid "comma-separated list of roles to add" -msgstr "listas separada por comas de grupos a añadir" - -#, fuzzy -msgid "comma-separated list of permissions" -msgstr "lista separada por comas de usuarios a añadir" - -#, fuzzy -msgid "comma-separated list of roles to remove" -msgstr "lista separada por comas de grupos a quitar" - -#, fuzzy -msgid "comma-separated list of privileges" -msgstr "lista separada por comas de privilegios a añadir" - -msgid "" -"\n" -"Self-service Permissions\n" +"Group to Group Delegation\n" "\n" "A permission enables fine-grained delegation of permissions. Access Control\n" "Rules, or instructions (ACIs), grant permission to permissions to perform\n" "given tasks such as adding a user, modifying a group, etc.\n" "\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" "\n" "EXAMPLES:\n" "\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" "\n" " When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" "\n" " Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" +" ipa delegation-show \"managers edit employees' street\"\n" "\n" " Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" +" ipa delegation-del \"managers edit employees' street\"\n" msgstr "" "\n" -"Auto servicio de Permisos\n" +"Grupo a Delegación de Grupo\n" "\n" -"Un permiso habilita una delegación de grano fino de permisos. Las Reglas de " -"Control de\n" -"Acceso o instrucciones (ACIs), conceden permisos a los permisos para llevar " -"a cabo tareas\n" -"dadas como añadir un usuario, modificar un grupo, etc.\n" -"\n" -"Un Permiso de Auto servicio define lo que un objeto puede cambiar en su " -"propia entrada.\n" +"Un permiso habilita una delegación de grano fino de permisos. Reglas de " +"Control\n" +"de Acceso o instrucciones (ACIs), otorgan permisos a los permisos para " +"llevar a\n" +"cabo tareas dadas como añadir un usuario, modificar un grupo, etc.\n" "\n" +"Grupo a Delegaciones de Grupo concede a los miembros de un grupo para\n" +"actualizar un conjunto de atributos de miembros de otro grupo.\n" "\n" "EJEMPLOS:\n" "\n" -" Añadir una regla de auto servicio para permitir a los usuarios gestionar " -"sus direcciones:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Los usuarios maejan sus propias direcciones\"\n" +"Añadir una regla de delegación para permitir a los gestores editar las " +"direcciones de los empleados:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" "\n" -" Cuando maneje una lista de atributos usted necesita incluir todos los " -"atributos en la lista, incluyendo los existentes. Añadir un Número de " -"teléfono a la lista:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Los usuarios manejan sus propias direcciones\"\n" +" Cuando gestiona una lista de atributos usted necesita incluir todos los " +"atributos en \n" +" la lista, incluyendo los existentes. Añadir postalCode a la lista:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" "\n" -" Visualizar nuestra regla actualizada:\n" -" ipa selfservice-show \"Los Usuarios manejan sus propias direcciones\"\n" +" Mostrar nuestra regla actualizada:\n" +" ipa delegation-show \"managers edit employees' street\"\n" "\n" " Borrar una regla:\n" -" ipa selfservice-del \"Los usuarios manejan sus propias direcciones\"\n" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" -"\n" -"Servicios\n" -"\n" -"Un servicio IPA representa un servicio que corre en un host. El registro del " -"servicio IPA\n" -"puede almacenar un principal Kerberos, un certificado SSL a ambos.\n" -"\n" -"Un servicio IPA puede ser manejado directamente desde una máquina, siempre " -"que la\n" -"máquina haya recibido los permisos correctos. Esto es cierto aún para " -"máquinas distintas\n" -"a aquella a la que el servicio está asociado. Por ejemplo, pidiendo un " -"certificado SSL\n" -"usando las credenciales de servicio principal de host del anfitrión. Para " -"manejar un\n" -" servicio usando las credenciales del anfitrión usted necesita tokinit como " -"el anfitrión:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Añadir un servicio IPA permite al servicios asociado pedir un certificado " -"SSL o keytab, pero esto se lleva a cabo como un paso separado; esto no se " -"produce como resultado de añadir el servicio.\n" -"\n" -"Solo se almacena el aspecto público de un certificado en un registro de " -"servicio la clave\n" -"privada no se almacena.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Añadir un nuevo servicio IPA:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Permitir a un host manejar un certificado de servicio IPA:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Anular una lista predeterminada de tipos PAC soportados para el servicio:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Borrar un servicio IPA:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Encontrar todos los servicios IPA asociados con un host:\n" -" ipa service-find web.example.com\n" -"\n" -" Encontrar todos los servicios HTTP:\n" -" ipa service-find HTTP\n" -"\n" -" Deshabilitar la clave del servicio Kerberos y el certificado SSL:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Pedir un certificado para un servicio IPA:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generar y recuperar una keytab para un servicio IPA:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" -"Anular una lista predeterminada de tipos PAC soportados. Use 'NONE' para " -"deshabilitar eñ soporte PAC para este servicio" +" ipa delegation-del \"managers edit employees' street\"\n" msgid "" "\n" @@ -14090,1262 +2615,351 @@ msgstr "" " Mostrat un Grupo de Comando Sudo:\n" " ipa group-show localadmins\n" -msgid "comma-separated list of sudo commands to add" -msgstr "lista separada or comas de comandos sudo a añadir" - -msgid "comma-separated list of sudo commands to remove" -msgstr "lista separada por comas de comandos sudo a quitar" - -#, fuzzy -msgid "Active directory domain administrator's password" -msgstr "Contraseña del administrador de dominio Active Directory" - -msgid "GECOS field" -msgstr "" - -#, fuzzy msgid "" "\n" -"Sudo Rules\n" +"HBAC Services\n" "\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" "\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"EXAMPLES:\n" "\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" "\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" "\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" "\n" -"For more information, see the IPA Documentation to Sudo.\n" msgstr "" "\n" -"Reglas Sudo\n" +"Servicios de HBAC\n" "\n" -"Sudo (su \"do\") permite a un administrador de sistema delegar autoridad a " -"ciertos\n" -"usuarios dados(o grupos de usuarios) para tener la posibilidad de ejecutar " -"algunos (o\n" -" todos) los comandos como root u otro usuario mientras suministra pistas de " -"auditoria de\n" -" los comandos y sus argumentos.\n" +"Los servicios PAM a los que HBAC puede controlar el acceso. El nombre " +"utilizado aquí debe coincidir\n" +"con el nombre del servicio que PAM está evaluando.\n" "\n" -"IPA proporciona un medio para configurar diversos aspectos de Sudo:\n" -" Users: Los usuario(s)/grupos(s) que tienen permitido llamar a Sudo.\n" -" Hosts: Loshost(s)/grupo(s) de host a los que el usuario permite llamar a " -"Sudo.\n" -" Allow Command: El comando(s) específico que tiene permitido ejecutarse " -"por medio de Sudo.\n" -" Deny Command: El comando(s) específico que tiene prohibido ejecutarse por " -"medio de Sudo.\n" -" RunAsUser: El usuario(s) o grupo(s) de usuarios con cuyos derechos será " -"invocado Sudo.\n" -" RunAsGroup: El grupo(s) con cuyos derechos gid será invocado Sudo.\n" -" Options: Las diversas opciones Sudoers que pueden modificar el " -"comportamiento de Sudo.\n" +"EJEMPLOS:\n" "\n" -"Su puede aadir un orden a una regla sudo para controlar el orden en el que " -"será evaluada\n" -"(si el cliente lo soporta). Este orden es un entero y debe ser único.\n" +" Añadir un nuevo servicio:\n" +" ipa hbacsvc-add tftp\n" "\n" -"IPA suministra un binddn designado para usar con Sudo situado en :\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +" Modificar un servicio de HBAC:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" "\n" -"Para habilitar el binddn ejecute el siguiente comando para fijar la " -"contraseña:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" +" Buscar servicios para HBAC. Este ejemplo retornará dos resultados, el " +"servicio FTP\n" +" y el servicio recién añadido tftp:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Borrar un servicio de HBAC:\n" +" ipa hbacsvc-del tftp\n" "\n" -"Para más información, vea la Documentación IPA para Sudo.\n" - -msgid "comma-separated list of sudo command groups to add" -msgstr "lista separada por comas de grupos de comandos sudo a añadir" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "lista separada por comas de grupos de comandos sudo a quitar" - -msgid "Failed members" -msgstr "Miembros fallidos" - -msgid "Failed source hosts/hostgroups" -msgstr "Host o grupo de hosts origenes fallidos" - -msgid "Failed hosts/hostgroups" -msgstr "Host o grupo de Host fallidos" - -msgid "Failed users/groups" -msgstr "Usuario o grupos de usuario incorrectos" - -msgid "Failed service/service groups" -msgstr "Error en el/los servicio(s)" - -msgid "Failed to remove" -msgstr "Error al remover " - -msgid "Failed RunAs" -msgstr "Error al ejecutar como" - -msgid "Failed RunAsGroup" -msgstr "Erro al ejecutar grupo como" - -msgid "Failed profiles" -msgstr "Errores en los perfiles" - -msgid "Failed CAs" -msgstr "Error en CAs" - -#, fuzzy -msgid "Failed member manager" -msgstr "Miembros fallidos" - -msgid "Failed managedby" -msgstr "Falló managedby" - -msgid "Failed allowed to retrieve keytab" -msgstr "Falló permitir recuperar una KeyTab" - -msgid "Failed allowed to create keytab" -msgstr "Falló permitir crear una KeyTab" - -msgid "Failed targets" -msgstr "Error en Objetivos" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "%(cver)s cliente incompatible con servidor %(sver)s en '%(server)s'" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "error %(code)d desconocido de %(server)s: %(error)s" - -msgid "an internal error has occurred" -msgstr "ha ocurrido un error interno" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "ha ocurrido un error interno en el servidor en '%(server)s'" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "comando desconocido '%(name)s'" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "error sobre el servidor '%(server)s': %(error)s" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "no se pudo conectar a '%(uri)s': %(error)s" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Petición JSON-RPC no válida: %(error)s" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "error de clasificación para el transporte de datos XML-RPC: %(error)s " - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "Arbitro HTTP desaparecido o no válido, %(referer)s" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" -"La codificación del sistema debe ser UTF-8, '%(encoding)s' no está(n) " -"soportada(s). Ajuste LC_ALL=\"C.UTF-8\", o LC_ALL=\"\" y LC_CTYPE=\"C." -"UTF-8\"." - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Error de kerberos: %(major)s/%(minor)s" - -msgid "did not receive Kerberos credentials" -msgstr "no se ha recibido ninguna credencial de Kerberos" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" -"El servicio '%(service)s' no se encontró en la base de datos de Kerberos" - -msgid "No credentials cache found" -msgstr "No se han encontrado credenciales de cache" - -msgid "Ticket expired" -msgstr "El ticket ha expirado" - -msgid "Credentials cache permissions incorrect" -msgstr "Los permisos de credenciales de caché son incorrectos" - -msgid "Bad format in credentials cache" -msgstr "Las credenciales de caché están mal formadas" - -msgid "Cannot resolve KDC for requested realm" -msgstr "No es posible resolver KDC para el reinado solicitado" - -msgid "Session error" -msgstr "Error de sesión" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "El principal %(principal)s no puede ser autenticado: %(message)s" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Acceso insuficiente: %(info)s" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "comando '%(name)s' no toma argumentos" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "comando '%(name)s' toma la mayoria %(count)d argumento" -msgstr[1] "comando '%(name)s' toma la mayoría %(count)d argumentos" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "superposición de argumentos y opciones: %(names)s" - -#, python-format -msgid "'%(name)s' is required" -msgstr "'%(name)s' se requiere" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "'%(name)s' inválido: %(error)s" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "api no tiene dicho espacio de nombres: '%(name)s'" - -msgid "Passwords do not match" -msgstr "Las contraseñas no coinciden" - -msgid "Command not implemented" -msgstr "El comando no se ha implementado" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "El cliente no está configurado. Ejecutar la API de cliente a instalar." - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "No se pudo obtener %(name)s interactivamente" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "Comando '%(name)s' es obsoleto" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "Dominio '%(domain)s' no es el dominio raíz para el bosque '%(forest)s'" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -msgid "This entry already exists" -msgstr "Esta entrada ya existe" - -msgid "You must enroll a host in order to create a host service" -msgstr "Debe registrar el equipo para poder generar un servicio de host" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" -"El servicio principal no tiene la forma de servicio/nombre de equipo " -"totalmente calificado: %(reason)s" msgid "" -"The realm for the principal does not match the realm for this IPA server" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" msgstr "" -"El reinado para el principal no coincide con el reinado para este servidor " -"IPA" - -msgid "This command requires root access" -msgstr "Este comando necesita acceso de usuario root" - -msgid "This is already a posix group" -msgstr "Este ya es un grupo posix" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "El principal no es de la forma user@REALM: '%(principal)s'" - -msgid "This entry is already enabled" -msgstr "Esta entrada ya está habilitada" - -msgid "This entry is already disabled" -msgstr "Esta entrada ya está desactivada" - -msgid "This entry cannot be enabled or disabled" -msgstr "Esta entrada no puede ser activada o desactivada" - -msgid "This entry is not a member" -msgstr "Esta entrada no es miembro" - -msgid "A group may not be a member of itself" -msgstr "Un grupo no puede ser miembro de sí mismo" - -msgid "This entry is already a member" -msgstr "Esta entrada ya es un miembro" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Falló la decodificación base64: %(reason)s" - -msgid "A group may not be added as a member of itself" -msgstr "Un grupo no puede ser agregado como miembro de sí mismo" - -msgid "The default users group cannot be removed" -msgstr "El grupo de usuarios predeterminado no puede ser eliminado" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" -"No se permite eliminar un grupo administrado. Primero debe ser desasociado. " - -msgid "A managed group cannot have a password policy." -msgstr "Un grupo administrado no puede tener una política de contraseñas." - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "'%(entry)s' no tiene certificado" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "No se puede crear un grupo privado. Un grupo de '%(group)s' ya existe." - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" -"Se encontró un problema al verificar si todos los miembros eran %(verb)s: " -"%(exc)s" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "%(attr)s no contiene '%(value)s'" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" -"El criterio de búsqueda no fue bastante específico. Se esperaba 1 y se " -"encontró %(found)d." - -msgid "This group already allows external members" -msgstr "Este grupo ya acepta miembros externos" - -msgid "This group cannot be posix because it is external" -msgstr "Este grupo o puede ser posix porque es externo" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "Esto es ya un grupo posix y no puede ser convertido en uno externo" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "Borrado del servidor abortado: %(reason)s." - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "%(operation)s no está soportada para principal %(principal_type)s" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "Fallo en petición con estado %(status)s: %(reason)s" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" -"El conjunto de reglas de mapeo \"%(ruleset)s\" tiene más de una regla para " -"el auxiliar %(helper)s" - -#, fuzzy, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "%(attr)s no contiene '%(value)s'" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "ni comando no tópico de ayuda '%(topic)s'" - -msgid "change collided with another change" -msgstr "la modificación choca con otra modificación diferente" - -msgid "no modifications to be performed" -msgstr "no existen modificaciones a ser realizadas" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(desc)s:%(info)s" - -msgid "limits exceeded for this query" -msgstr "han sido excedidos los límites para esta consulta" - -#, python-format -msgid "%(info)s" -msgstr "%(info)s" - -msgid "modifying primary key is not allowed" -msgstr "modificar la clave principal no está permitido" - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr " %(attr)s : Solamente un valor permitido." - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "%(attr)s: sintaxis inválida." - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "%(info)s de filtro de búsqueda errado" - -msgid "Not allowed on non-leaf entry" -msgstr "No permitido sobre entrada no hoja" - -msgid "LDAP timeout" -msgstr "Tiempo de espera LDAP" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "Tiempo de espera de la tares LDAP %(task)s, Task DN: '%(task_dn)s'" - -msgid "Configured time limit exceeded" -msgstr "El tiempo límite configurado sobrepasado" - -msgid "Configured size limit exceeded" -msgstr "Tamaño límite configurado sobrepasado" - -msgid "Configured administrative server limit exceeded" -msgstr "Límite administrativo del servidor configurado sobrepasado" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "La operación certificada no puede ser completada: %(error)s" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "Error de certificado de formato: %(error)s " - -msgid "Already registered" -msgstr "Ya está registrado" - -msgid "Not registered yet" -msgstr "Aún no está registrado" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" -"No se puede eliminar %(key)s porque %(label)s %(dependent)s lo requiere" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" -"%(key)s no puede ser borrado o deshabilitado porque es el último miembro de " -"%(label)s %(container)s" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "%(label)s %(key)s no puede ser borrado/modificado: %(reason)s" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "%(name)s certificado no válido" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "El esquema está actualizado (FP '%(fingerprint)s', TTL %(ttl)s s)" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "Host '%(hostname)s' no tiene el registro correspondiente DNS A/AAAA" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" -"Fallo en la comprobación DNS: Esperado {%(expected)s} obtenido {%(got)s}" - -#, python-format -msgid "%(exception)s" -msgstr "%(exception)s" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" -"Bosque '%(forest)s' tiene confianza existente para forest(s) %(domains)s que " -"evita una confianza en '%(conflict)s'" - -msgid "Additional instructions:" -msgstr "Instrucciones adicionales:" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" -"Número de Versión API no fue enviado, la compatibilidad de envío no está " -"garantizada. Asumiendo la versión API del servidor, %(server_version)s" +"\n" +"Hosts/Máquinas\n" +"\n" +"Un host representa una máquina. Puede ser usado en distintos contextos:\n" +"- las entradas de servicio están asociadas con un host\n" +"- un host almacena el host/ servicio principal\n" +"- un host puede ser usado en reglas de Control de Acceso basado en Host " +"(HBAC)\n" +"- cada cliente inscrito genera una entrada de host\n" msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." +"\n" +"IPA certificate operations\n" msgstr "" -"Las semánticas del promotor cambió desde IPA 4.0.\n" -"Usted puede desear usar las zonas de envío (dnsforwardzone-*) en su lugar.\n" -"Lea los documentos para más detalles." - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" -"El soporte DNSSEC es experimental.\n" -"%(additional_info)s" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "'%(option)s' opción obsoleta. %(additional_info)s" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" -"La semántica de %(label)s fue cambiada. %(current_behavior)s\n" -"%(hint)s" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "Servidor DNS %(server)s: %(error)s." - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"Servidor DNS %(server)s no soporta DNSSEC: %(error)s.\n" -"Si está habilitada la validación DNSSEC sobre servidor(es) IPA, " -"deshabilitélo por favor." - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" -"zona de envío \"%(fwzone)s\" no es efectiva por desaarición de la delegacion " -"NS apropiada en zona autorizada \"%(authzone)s\". Por favor añada registro " -"NS record \"%(ns_rec)s\" a la zona padre \"%(authzone)s\"." - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"Servidor DNS %(server)s no soporta EDNS0 (RFC 6891): %(error)s.\n" -"Si la validación DNSSEC está habilitada sobre servidor(es) IPA, por favor " -"deshabilitélo." - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" -"Fallo en la validación DNSSEC: %(error)s.\n" -"Por favor verifique su configuración DNSSEC o deshabilite la validación " -"DNSSEC en todos los servidores IPA." - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" -"El registro _kerberos TXT del dominio %(domain)s podría no ser creado " -"(%(error)s).\n" -"Esto puede suceder si la zona no es manejada por IPA. Por favor cree el " -"registro manualmente, conteniendo el siguiente valor: '%(realm)s'" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" -"El registro _kerberos TXT del dominio %(domain)s podría no ser quitado " -"(%(error)s).\n" -"Esto puede suceder si la zona no está manejada por IPA. Por favor quite el " -"registro manualmente." +"\n" +"Operaciones de certificado IPA\n" msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." +"\n" +"IPA locations\n" msgstr "" -"No se ha instalado clave maestra DNSSEC. La firma en la zona DNSSEC no " -"trabajará hasta que esté instalada la clave maestra DNSSEC." - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" -"El nombre relativo de registro '%(record)s' contiene como sufijo el nonbre " -"de zona '%(zone)s', que resulta de FQDN '%(fqdn)s'. Esto es normalmente una " -"equivocación causada por un punto perdido al final de la especificación del " -"nombre." - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "'%(command)s' es obsoleto. %(additional_info)s" - -#, python-format -msgid "%(line)s" -msgstr "%(line)s" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "Los resultados de la búsqueda han sido truncados: %(reason)s" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" -"Su confianza en %(domain)s se ha roto. Vuelva a creara ejecutando 'ipa trust-" -"add' otra vez." - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "Registro(s) DNS del host %(host)s podría no ser removido. (%(reason)s)" +"\n" +"Localizaciones IPA\n" msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." +"\n" +"IPA server roles\n" msgstr "" -"Conflictos de la política de envío con algunas zonas vacías automáticas. Las " -"peticiones para las zonas especificadas por RFC 6303 ignorarán el envío y " -"recursión y siempre tendrán por resultado respuestas NXDOMAIN. Para evitar " -"este comportamiento use la política de envío 'only'." - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" -"Actualización del registro del sistema '%(record)s' falló con error: " -"%(error)s" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" -"IPA no maneja la zona %(zone)s, por favor añada registros a su servidor DNS " -"manualmente" +"\n" +"Roles del servidor IPA\n" msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." +"\n" +"IPA servers\n" msgstr "" -"Actualización automática de registros DNS del sistema falló. Por favor " -"vuelva a ejecutar manualmente la actualización de registros del sistema para " -"obtener la lista de los registros desaparecidos." - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" -"El servicio %(service)s requiere ser reiniciado sobre el servidor IPA " -"%(server)s para aplicar los cambios de configuración." - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" -"No hay servidores DNS en la localización IPA %(location)s. Sin la " -"localización de servidores DNS no se trabaja como se espera." - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "%(subject)s: Certificado mal formado. %(reason)s" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "El host fue añadido pero la actualización DNS falló por: %(reason)s" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "El certificado para %(ca)s no está disponible en este servidor." - -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d variables" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "%(count)d complemento cargado" -msgstr[1] "%(count)d complementos cargados" - -msgid "A dictionary representing an LDAP entry" -msgstr "Un diccionario representando una entrada LDAP" - -msgid "A list of LDAP entries" -msgstr "Una lista de entradas LDAP" - -msgid "All commands should at least have a result" -msgstr "Todos los comandos deberían por lo menos tener un resultado" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "Ingrese %(label)s nuevamente para verificar: " - -msgid "Passwords do not match!" -msgstr "Las contraseñas no coinciden." - -msgid "No matching entries found" -msgstr "No se encontraron entradas coincidentes" - -msgid "Topic or Command" -msgstr "Tópico o Comando" - -msgid "The topic or command name." -msgstr "Nombre de tópico o comando." - -msgid "Topic commands:" -msgstr "Tema comandos:" - -msgid "To get command help, use:" -msgstr "Para obtener ayuda sobre el comando, utilice:" - -msgid " ipa --help" -msgstr " ipa --help" - -msgid "Command name" -msgstr "Nombre del comando" - -msgid "Positional arguments" -msgstr "Argumentos posicionales" - -#, python-format -msgid "Same as --%s" -msgstr "Lo mismo que --%s" - -msgid "Deprecated options" -msgstr "Opciones obsoletas" - -msgid "No file to read" -msgstr "No existe el fichero para leer" - -msgid "Results are truncated, try a more specific search" -msgstr "" -"Los resultados se encuentran truncados, intente realizar una búsqueda más " -"específica" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "Opción desconocida: %(option)s" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" -"Versión de cliente. Se utiliza para determinar si el servidor va a aceptar " -"la solicitud." - -#, python-format -msgid "%(filename)s: file not found" -msgstr "%(filename)s: fichero no encontrado" - -#, fuzzy, python-brace-format -msgid "Unable to parse option {item}" -msgstr "No es posible analizar los principales\n" - -msgid "any of the configured servers" -msgstr "cualquiera de los servidores configurados" - -msgid "Exceeded number of tries to forward a request." -msgstr "Excedido el número de intentos para enviar una petición." - -msgid "Filename is empty" -msgstr "El nombre de fichero está vacío" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "Permiso denegado:%(file)s " - -msgid "empty DNS label" -msgstr "etiqueta DNS vacía" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "La etiqueta DNS no puede ser más larga de 63 caracteres" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" -"sólo se permiten letras, números y %(chars)s. La etiqueta DNS no debe " -"empezar ni terminar con %(chars2)s" - -msgid "single label {}s are not supported" -msgstr "etiqueta sencilla {}s no está soportada" - -msgid "too many '@' characters" -msgstr "demasiados ‘@’ caracteres" - -msgid "cannot be longer that {} characters" -msgstr "no puede ser mayor de {} caracteres" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "el nombre de host contiene una etiqueta vacía (puntos consecutivos)" - -msgid "not fully qualified" -msgstr "no totalmente cualificado" - -msgid "invalid SSH public key" -msgstr "clave SSH pública no válida" - -msgid "options are not allowed" -msgstr "las opciones no están permitidas" - -msgid "invalid hostmask" -msgstr "máscara de host no válida" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "consulta'%(owner)s %(rtype)s': %(error)s" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "consulta '%(owner)s %(rtype)s' con EDNS0: %(error)s" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" -"respuesta a la consulta '%(owner)s %(rtype)s' tiene firmas DNSSEC " -"desaparecidas (sin datos RRSIG)" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" -"registro '%(owner)s %(rtype)s' fallo de validación DNSSEC sobre el servidor " -"%(ip)s" - -msgid "invalid escape code in domain name" -msgstr "código de salida no válido en el nombre de dominio" - -msgid "domain name cannot be longer than 255 characters" -msgstr "el nombre de dominio no puede ser mas largo de 255 caracteres" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "la etiqueta DNS no puede ser más larga de 63 caracteres" - -msgid "invalid domain name" -msgstr "nombre de domino no válido" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" -"el nombre de dominio '%(domain)s' debería ser normalizado a: %(normalized)s" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "nombre de dominio no válido: %s" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" -"versión de dirección IP no válida (es %(value)d, debe ser " -"%(required_value)d)!" - -msgid "invalid IP address format" -msgstr "formato no válido de dirección IP" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "%(port)s no es un puerto válido" +"\n" +"IPA servers\n" msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" -"al menos un valor igual al nombre canónico principal debe estar presente" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" -"el dominio o sufijo UPN se superpone con el espacio de nombres de dominio de " -"confianza" - -msgid "incorrect type" -msgstr "tipo incorrecto" - -msgid "Only one value is allowed" -msgstr "Sólo se permite un valor" - -msgid "this option is deprecated" -msgstr "esta opción es obsoleta" - -msgid "must be True or False" -msgstr "debe ser True o False" - -msgid "must be an integer" -msgstr "debe ser un entero" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "debe ser como mínimo %(minvalue)d" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "puede ser como máximo %(maxvalue)d" - -msgid "must be a decimal number" -msgstr "debe ser un número decimal" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "debe ser al menos %(minvalue)s" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "puede ser como mucho %(maxvalue)s" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" -"el número de clase '%(cls)s' no está incluido en una lista de los números de " -"clases permitidos: %(allowed)s" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "debe coincidir con el modelo \"%(pattern)s" - -msgid "must be binary data" -msgstr "debe ser un dato binario" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "debe ser como mínimo de %(minlength)d bytes" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "puede ser a lo sumo de %(maxlength)d bytes" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "debe ser exactamente de %(length)d bytes" - -msgid "must be a certificate" -msgstr "debe ser un certificado" - -msgid "must be a certificate signing request" -msgstr "debe ser una petición de firma de certificado" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" -"Falla al intentar decodificar la petición de identificación de certificado: " -"%s" - -msgid "must be Unicode text" -msgstr "debe ser texto Unicode" - -msgid "Leading and trailing spaces are not allowed" -msgstr "No están permitidos espacios iniciales ni finales" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "debe tener como mínimo %(minlength)d caracteres" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "puede tener a lo sumo %(maxlength)d caracteres" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "debe tener exactamente %(length)d caracteres" - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "El carácter %(char)r no está permitido." - -#, python-format -msgid "must be '%(value)s'" -msgstr "debe ser «%(value)s»" - -#, python-format -msgid "must be one of %(values)s" -msgstr "debe ser uno de %(values)s" - -msgid "must be datetime value" -msgstr "debe ser un valor de fecha y hora" - -msgid "does not match any of accepted formats: " -msgstr "no coincide con ninguno de los formatos aceptados: " - -msgid "incomplete time value" -msgstr "valor de hora incompleto" - -msgid "must be DNS name" -msgstr "debe ser nombre DNS" - -msgid "must be absolute" -msgstr "debe ser absoluto" - -msgid "must be relative" -msgstr "debe ser relativo" - -msgid "must be dictionary" -msgstr "debe ser diccionario" - -msgid "must be Kerberos principal" -msgstr "debe ser Kerberos principal" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "Principal mal construido: '%(value)s'" - -msgid "Service principal is required" -msgstr "Se requiere el servicio principal" - -#, fuzzy -msgid "must be at least 0" -msgstr "debe ser al menos 1" - -#, fuzzy -msgid "invalid valid hex" -msgstr "Tipo de regla de enlace" - -#, fuzzy -msgid "invalid serial number 0" -msgstr "Número de serie" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "Fallo en recuperación de la cadena CA cert: %s" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "fallo en la petición con estado HTTP %d" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "Falló la obtención del estado de CA: %s" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "Fallo en la recuperación del estado CA con estado %d" - -#, python-format -msgid "objectclass %s not found" -msgstr "clase objeto %s no encontrada" - -#, fuzzy -msgid "Trusting forest" -msgstr "Dirección de confianza" - -#, fuzzy -msgid "Trusted forest" -msgstr "Confiable para la delegación" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "Desconocido" - -#, fuzzy -msgid "Non-Active Directory domain" -msgstr "Intervalo de dominios de Active Directory" - -#, fuzzy -msgid "Active Directory domain" -msgstr "Intervalo de dominios de Active Directory" - -msgid "RFC4120-compliant Kerberos realm" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" msgstr "" +"\n" +"IPA soporta el uso de fichas OTP para la autenticación de varios factores. " +"Este\n" +"código habilita la gestión de las fichas OTP.\n" msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" msgstr "" +"\n" +"IPA soporta el uso de servidores proxy RADIUS externos para autenticaciones " +"krb5\n" +"OTP. Esto permite una gran oferta de flexibilidad cuando se integra con " +"servicios de \n" +"autenticación de tercera parte.\n" -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "Failed to authenticate to CA REST API" -msgstr "Falló al autenticarse a CA REST API" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "Incapaz de comunicar con CMS (estado %d)" - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "Acuerdo de replicación para %(hostname)s no encontrado" - -msgid "automount location" -msgstr "localización automontaje" - -msgid "automount locations" -msgstr "localizaciones de automontaje" - -msgid "Automount Locations" -msgstr "Ubicaciones de automontado" - -msgid "Automount Location" -msgstr "Localización de Automontaje" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "Añadida localización de automontaje \"%(value)s\"" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "Borrada una localización de automontaje \"%(value)s\"" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "%(count)d localización de automontaje coincidente" -msgstr[1] "%(count)d localizaciones de automontaje coincidentes" - -msgid "automount map" -msgstr "mapa de automontaje" - -msgid "automount maps" -msgstr "mapas de automontaje" - -msgid "Automount Maps" -msgstr "Mapas de montaje automático" - -msgid "Automount Map" -msgstr "Mapa de Automontaje" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "Añadido mapa de automontaje \"%(value)s\"" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "Borrado un mapa de automontaje \"%(value)s\"" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "Modificado un mapa de automontaje \"%(value)s\"" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "%(count)d mapa de automontaje coincidente" -msgstr[1] "%(count)d mapas de automontaje coincidentes" - -msgid "Automount key object." -msgstr "Objeto clave de automontaje" - -msgid "automount key" -msgstr "clave de automontaje" - -msgid "automount keys" -msgstr "claves de automontaje" - -msgid "Automount Keys" -msgstr "Llaves de montaje automático" - -msgid "Automount Key" -msgstr "Clave de Automontaje" - -#, python-format msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" msgstr "" -"El par de claves, la información debe ser único. Un nombre clave %(key)s " -"con información %(info)s ya existe" +"\n" +"IPA soporta el uso de certificados para la autenticación. Las certificados " +"pueden ser\n" +"bien almacenados en la entrada del usuario (el certificado completo en el " +"atributo\n" +"usercertificate) o simplemente enlazado a la entrada de usuario a través de " +"un\n" +"mapeo. Esta código habilita la gestión de las reglas permitiendo enlazar un\n" +"certificado a una entrada de usuario.\n" -#, python-format -msgid "key named %(key)s already exists" -msgstr "ya existe una llave denominada %(key)s" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "La clave de montaje automático %(key)s con info %(info)s no existe" - -#, python-format msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." +"\n" +"Implements a set of commands for managing server SSL certificates.\n" msgstr "" -"Se ha encontrado más de una entrada con la llave %(key)s, utilice --info " -"para seleccionar una entrada específica." +"\n" +"Implementa un conjunto de comandos para manejar los certificados de servidor " +"SSL.\n" -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "Añadida clave de automontaje \"%(value)s\"" +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" +"\n" +"Con el objetivo de pedir un certificado:\n" -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "Añadido mapa de automontaje indirecto \"%(value)s\"" +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" +"\n" +"Puede ser difícil manipular estos registros DNS sin hacer un error e " +"introducir un\n" +"valor no válido. El módulo DNS suministra una abstracción sobre estos " +"registros\n" +"brutos y permite manipular cada tipo RR con opciones específicas. Por cada " +"tipo\n" +"RR soportado, el módulo DNS suministra una opción estándar para manipular\n" +"unos registros brutos con el formato ---rec, e.g. --mx-rec y " +"opciones\n" +"especiales para cada parte de la estructura RR con formato ---" +",\n" +"e. g. --mx-preference and --mx-exchanger.\n" -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "el punto de montaje es relativo al mapa padre, no puede empezar con /" +msgid "" +"\n" +"Joining an IPA domain\n" +msgstr "" +"\n" +"Uniendo un dominio IPA\n" -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "Borrada clave de automontaje \"%(value)s\"" +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" +"\n" +"Herramientas de informe de estados de características Kerberos PKINIT.\n" +"\n" +"Informa de los másters IPA sobre los cuales Kerberos PKINIT está habilitado " +"o deshabilitado\n" +"\n" +"EJEMPLOS:\n" +" Lista el estado PKINIT sobre todos los másters:\n" +" ipa pkinit-status\n" +"\n" +" Comprueba el estado PKINIT sobre `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" Lista todos los másters IPA con PKINIT deshabilitado:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"Para más información sobre soporte PKINIT vea:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "Modificada clave de automontaje \"%(value)s\"" +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" +"\n" +"Opciones de kerberos pkinit\n" +"Activan o desactivan pkinit anónimo mediante el principal\n" +"WELLKNOWN/ANONYMOUS@REALM. El servidor debe haber sido instalado con soporte " +"pkinit.\n" +"EJEMPLOS:\n" +"Activar pkinit anónimo\n" +" ipa pkinit-anonymous enable\n" +"Desactivar pkinit anónimo:\n" +" ipa pkinit-anonymous disable\n" +"Para obtener mayor información sobre pkinit anónimo, por favor consulte: \n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +"\n" -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "%(count)d clave de automontaje coincidente" -msgstr[1] "%(count)d claves de automontaje coincidentes" +msgid "" +"\n" +"Kerberos ticket policy\n" +"\n" +"There is a single Kerberos ticket policy. This policy defines the\n" +"maximum ticket lifetime and the maximum renewal age, the period during\n" +"which the ticket is renewable.\n" +"\n" +"You can also create a per-user ticket policy by specifying the user login.\n" +"\n" +"For changes to the global policy to take effect, restarting the KDC service\n" +"is required, which can be achieved using:\n" +"\n" +"service krb5kdc restart\n" +"\n" +"Changes to per-user policies take effect immediately for newly requested\n" +"tickets (e.g. when the user next runs kinit).\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current Kerberos ticket policy:\n" +" ipa krbtpolicy-show\n" +"\n" +" Reset the policy to the default:\n" +" ipa krbtpolicy-reset\n" +"\n" +" Modify the policy to 8 hours max life, 1-day max renewal:\n" +" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" +"\n" +" Display effective Kerberos ticket policy for user 'admin':\n" +" ipa krbtpolicy-show admin\n" +"\n" +" Reset per-user policy for user 'admin':\n" +" ipa krbtpolicy-reset admin\n" +"\n" +" Modify per-user policy for user 'admin':\n" +" ipa krbtpolicy-mod admin --maxlife=3600\n" +msgstr "" +"\n" +"Funciones \n" +"\n" +"Un rol se utiliza para la delegación de grano fino. Un permiso otorga la " +"capacidad de realizar tareas de bajo nivel (añadir un usuario, modificar un " +"grupo, etc.) Un privilegio combina uno o más permisos en una abstracción \n" +"de nivel superior tales como useradmin. Un useradmin sería capaz de añadir, " +"eliminar y modificar usuarios. \n" +"\n" +"Los privilegios son asignados a roles.\n" +"\n" +"Los usuarios, grupos, hosts y hostgroups pueden ser miembros de un Rol. \n" +"\n" +"Los Roles no pueden contener otros roles.\n" +"\n" +"EJEMPLOS:\n" +"\n" +"Añadir un nuevo rol: \n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege=add_user_to_default_group\n" +"junioradmin\n" +"\n" +"Agregar un grupo de usuarios a este rol:\n" +" ipa group-add --desc=\"User admins\" useradmins \n" +" ipa role-add-member --groups=useradmins junioradmin \n" +"\n" +"Mostrar información sobre el rol:\n" +" ipa role-show junioradmin\n" +"\n" +"El resultado de esto es que cualquier usuario en el grupo 'useradmins' puede " +"agregar usuarios, restablecer contraseñas o añadir un usuario al grupo de " +"usuarios predeterminado de la IPA.\n" + +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" +"\n" +"Manejar Autoridades de Certificado\n" + +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" +"\n" +"Gestionar la configuración y las reglas del Mapeo de Identidad del " +"Certificado.\n" msgid "" "\n" @@ -15421,8 +3035,8 @@ msgstr "" "\n" "Una ID de Perfil es una cadena sin espacios o puntuación que empieza con " "una\n" -"letra y seguida por una secuencia de letras, dígitos o guiones bajos (\"_" -"\").\n" +"letra y seguida por una secuencia de letras, dígitos o guiones bajos " +"(\"_\").\n" "\n" "EJEMPLOS:\n" "\n" @@ -15465,1174 +3079,12 @@ msgstr "" " usar.\n" "\n" -msgid "CA is not configured" -msgstr "CA no está configurado" - -msgid "invalid Profile ID" -msgstr "ID de perfil no válido" - -msgid "Certificate Profile" -msgstr "Certificado de Perfil" - -msgid "Certificate Profiles" -msgstr "Certificado de Perfiles" - -msgid "Profile configuration" -msgstr "Configuración de perfil" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "%(count)d perfil coincidente" -msgstr[1] "%(count)d perfiles coincidentes" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "Perfil importado \"%(value)s\"" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "Los datos del perfil especifican profileId múltiples veces: %(values)s" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" -"ID de perfil '%(cli_value)s' no coincide con los datos de perfil " -"'%(file_value)s'" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "Perfil borrado \"%(value)s\"" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "El perfil predefinido '%(profile_id)s' no puede ser borrado" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "Modificado Certificado Perfil \"%(value)s\"" - -msgid "Certificate profiles cannot be renamed" -msgstr "Certificado de los perfiles no pueden ser renombrado" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "Privilegio insuficiente para modificar un certificado perfil" - -msgid "delegation" -msgstr "delegación" - -msgid "delegations" -msgstr "delegaciones" - -msgid "Delegations" -msgstr "Delegaciones" - -msgid "Delegation" -msgstr "Delegación" - -msgid "ACI" -msgstr "ACI" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "Delegación añadida \"%(value)s\"" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "Delegación eliminada \"%(value)s\"" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "Delegación modificada \"%(value)s\"" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "%(count)d delegación coincidente" -msgstr[1] "%(count)d delegaciones coincidentes" - msgid "" "\n" -"DNS server configuration\n" +"Manage DNS zone and resource records.\n" msgstr "" "\n" -"Configuración del servidor DNS\n" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" -"\n" -"Manipular la configuración del servidor DNS\n" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" -"\n" -" Mostar la configuración de un servidor DNS especifico:\n" -" ipa dnsserver-show\n" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" -"\n" -" Actualizar la configuración de un servidor DNS especifico:\n" -" ipa dnsserver-mod\n" - -msgid "DNS server" -msgstr "Servidor DNS" - -msgid "DNS servers" -msgstr "Servidores DNS" - -#, fuzzy -msgid "DNS Servers" -msgstr "Servidores DNS" - -#, fuzzy -msgid "DNS Server" -msgstr "Servidor DNS" - -#, fuzzy -msgid "DNS Server name" -msgstr "Nombre del servidor" - -msgid "SOA mname override" -msgstr "" - -#, fuzzy -msgid "SOA mname (authoritative server) override" -msgstr "Nombre de dominio servidor de nombre autorizado" - -#, fuzzy -msgid "Forwarders" -msgstr "Zona de expedidores" - -#, fuzzy -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Expedidores por zona. Se puede especificar un puerto personalizado para cada " -"exedidor usando el formato estándar \"IP_ADDRESS port PORT\"" - -#, fuzzy -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" -"Política de envío condicional por zona. Se establece a \"none\" para " -"deshabilitar el envío a expedidores globales para esta zona. En este caso, " -"la zona condicional de expedidores es ignorada." - -msgid "DNS is not configured" -msgstr "DNS no está configurado" - -#, fuzzy -msgid "Modify DNS server configuration" -msgstr "" -"\n" -"Configuración del servidor DNS\n" - -#, fuzzy, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "Modificado servidor IPA \"%(value)s\"" - -#, fuzzy -msgid "Search for DNS servers." -msgstr "Buscar servidores IPA." - -#, fuzzy, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "%(count)d servidor IPA coincide" -msgstr[1] "%(count)d servidores IPA coinciden" - -#, fuzzy -msgid "IPA DNS Server is not installed" -msgstr "Servidor de IPA a utilizar" - -#, fuzzy -msgid "Display configuration of a DNS server." -msgstr "Muestra información sobre un servidor proxy RADIUS." - -#, fuzzy -msgid "Add a new DNS server." -msgstr "Añadir un nuevo servicio SMB." - -#, fuzzy, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "Ha sido agregado el servicio \"%(value)s\"" - -#, fuzzy -msgid "Delete a DNS server" -msgstr "Eliminar servidor IPA." - -#, fuzzy, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "Eliminado servidor IPA \"%(value)s\"" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -#, fuzzy -msgid "Domain Level cannot be lowered." -msgstr "Servidor de dominio IPA no puede ser borrado" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "grupos" - -msgid "User Group" -msgstr "Grupo Usuario" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "Ha sido agregado el grupo \"%(value)s\"" - -msgid "gid cannot be set for external group" -msgstr "gid no puede ser fijado para un grupo externo" - -#, fuzzy -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "atributo \"%s\" no permitido" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Ha sido eliminado el grupo \"%(value)s\"" - -msgid "privileged group" -msgstr "grupo privilegiado" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Ha sido modificado el grupo \"%(value)s\"" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "%(count)d grupo coincidente" -msgstr[1] "%(count)d grupos coincidentes" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"No se puede llevar a cabo la validación del miembro externo sin el soporte " -"para Samba 4 instalado. Asegúrese de que tiene instalado el sub-paquete " -"server-trust-ad de IPA en el servidor" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" -"No puede llevar a cabo la operación de unión si el dominio propio " -"configurado. Asegúrese primero que está corriendo ipa-adtrust-install sobre " -"el servidor IPA" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "Ha sido desasociado el grupo \"%(value)s\" del usuario \"%(value)s\"" - -msgid "not allowed to modify user entries" -msgstr "no se permite modificar las entradas de los usuarios" - -msgid "not allowed to modify group entries" -msgstr "no se permite modificar las entradas de los grupos" - -msgid "Not a managed group" -msgstr "No es un grupo administrado" - -#, fuzzy -msgid "Add users that can manage members of this group." -msgstr "Añadir usuarios que pueden manejar esta ficha." - -#, fuzzy -msgid "Remove users that can manage members of this group." -msgstr "Quitar usuarios que puedan manejar esta ficha." - -msgid "Host-based access control commands" -msgstr "Comandos de control de acceso basado en host" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" -"\n" -"Servicios de HBAC\n" -"\n" -"Los servicios PAM a los que HBAC puede controlar el acceso. El nombre " -"utilizado aquí debe coincidir\n" -"con el nombre del servicio que PAM está evaluando.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Añadir un nuevo servicio:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modificar un servicio de HBAC:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Buscar servicios para HBAC. Este ejemplo retornará dos resultados, el " -"servicio FTP\n" -" y el servicio recién añadido tftp:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Borrar un servicio de HBAC:\n" -" ipa hbacsvc-del tftp\n" -"\n" - -msgid "HBAC services" -msgstr "Servicios HBAC" - -msgid "HBAC Services" -msgstr "Servicios HBAC" - -msgid "HBAC Service" -msgstr "Servicio HBAC" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "Servicio de HBAC \"%(value)s\" añadido" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "Suprimido el servicio HBAC \"%(value)s\"" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr " Servicio modificado HBAC \"%(value)s\"" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "Servicio HBAC %(count)d coincidente" -msgstr[1] "Servicios HBAC %(count)d coincidentes" - -msgid "HBAC service group" -msgstr "Grupo de servicio HBAC" - -msgid "HBAC service groups" -msgstr "Grupos de servicio HBAC" - -msgid "HBAC Service Groups" -msgstr "Grupos de Servicios HBAC" - -msgid "HBAC Service Group" -msgstr "Grupo de Servicio HBAC" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "Agregado servicio de grupo HBAC \"%(value)s\"" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr " Suprimido el servicio HBAC grupo \"%(value)s\"" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "Servicio modificado HBAC grupo \"%(value)s\"" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "%(count)d grupo de servicio HBAC coincidente" -msgstr[1] "%(count)d grupos de servicio HBAC coincidentes" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "host groups" -msgstr "grupos de host" - -msgid "Host Group" -msgstr "Grupo de Host" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Ha sido agregado el grupo de equipo \"%(value)s\"" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"grupo de red con nombre “%s” ya existe. Los grupos de host y grupos de red " -"comparten un espacio de nombre común" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Ha sido eliminado el grupo de equipo \"%(value)s\"" - -#, fuzzy -msgid "hostgroup" -msgstr "grupo de host" - -#, fuzzy -msgid "privileged hostgroup" -msgstr "grupo privilegiado" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Ha sido modificado el grupo de equipo \"%(value)s\"" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "%(count)d grupo de equipos coincidente" -msgstr[1] "%(count)d grupos de equipos coincidentes" - -#, fuzzy -msgid "Add users that can manage members of this hostgroup." -msgstr "Añadir usuarios que pueden manejar esta ficha." - -#, fuzzy -msgid "Remove users that can manage members of this hostgroup." -msgstr "Quitar usuarios que puedan manejar esta ficha." - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" -"=======\n" -"ADVERTENCIA:\n" -"\n" -"El plugin DNA en 389-ds asignará IDs basados en el rango configurado para " -"el\n" -"dominio local. Actualmente el plugin DNA *no puede* ser reconfigurado en " -"base a\n" -"los rangos locales establecidos por medio de esta familia de comandos.\n" -"\n" -"El cambio de configuración manual ha de ser hecho en la configuración del " -"plugin\n" -"DNA para e nuevo rango local. Especialmente, el atributo dnaNextRange de\n" -"'cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " -"ha\n" -"sido modificado para coincidir con el nuevo rango.\n" -"=======\n" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "Intervalos de ID" - -msgid "ID Range" -msgstr "Intervalo de ID" - -msgid "local domain range" -msgstr "intervalo de dominios locales" - -msgid "Active Directory domain range" -msgstr "Intervalo de dominios de Active Directory" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "Rango de confianza Active Directory con atributos POSIX" - -msgid "ID range type, one of allowed values" -msgstr "Tipo de rango ID, uno de los siguientes valores" - -#, fuzzy -msgid "Auto private groups" -msgstr "Búsqueda de grupos privados" - -#, fuzzy -msgid "Auto creation of private groups, one of allowed values" -msgstr "Tipo de rango ID, uno de los siguientes valores" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" -"la modificación de rango dejando objetos con ID fuera del rango definido no " -"está permitida" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"No se puede llevar a cabo la validación SID sin el soporte de Samba 4 " -"instalado. Asegúrese de que tiene instalado el sub paquete server-trust-ad " -"de IPA en el servidor" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" -"Los fideicomisos a través del reino no están instalados. Asegúrese de que " -"está corriendo ipa-adtrust-install en el servidor IPA primero" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "SID no es reconocido como un SID válido para el dominio de confianza" - -#, fuzzy -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" -"\n" -" Añadir un nuevo rango ID.\n" -"\n" -" Para añadir un nuevo rango ID usted debe especificar siempre\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Adicionalmente\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" puede ser dado para un nuevo rangi ID para el dominio local mientras\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" debe ser dado para añadir un nuevo rango para un dominio AD de " -"confianza.\n" -"\n" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "Se añadió el intervalo de ID «%(value)s»" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "Las opciones dom-sid y dom-name no pueden ser usadas juntas" - -msgid "Specified trusted domain name could not be found." -msgstr "" -"El nombre especificado de dominio de confianza podría no ser encontrado." - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "Las opciones dom-sid/dom-name y rid-base se deben usar juntas" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" -"La opción rid-base no se debe usar cuando el tipo de rango IPA es ipa-ad-" -"trust-posix" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" -"El tipo de Rango IPA debe ser uno de ipa-ad-trust o ipa-ad-trust-posix " -"cuando se especifica el SID del dominio de confianza" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" -"Las opciones dom-sid/dom-name y secondary-rid-base no pueden ser usados " -"juntos" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" -"El tipo de Rango IPA Range no debe ser ni ipa-ad-trust ni ipa-ad-trust-posix " -"cuando no se especifica el SID del dominio de confianza." - -#, fuzzy -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" -"El tipo de Rango IPA debe ser uno de ipa-ad-trust o ipa-ad-trust-posix " -"cuando se especifica el SID del dominio de confianza" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "Las opciones secondary-rid-base y rid-base ser deben usar juntas" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "El rango RID primario y el secundario no pueden superponerse" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" -"Debe especificar las opciones tanto rid-base como secondary-rid-base " -"options, puesto que ipa-adtrust-install ya ha estado corriendo." - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "Se eliminó el intervalo de ID «%(value)s»" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d rango coincide" -msgstr[1] "%(count)d rangos coinciden" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" -"Modificar rango ID.\n" -"\n" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "Modificar rango ID \"%(value)s\"" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" -"Este comando no puede ser usado para cambiar la asignación de ID para el " -"dominio IPA local. Ejecute `ipa help idrange` para más información" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" -"El SID para el nombre de dominio de confianza especificado podría no ser " -"encontrado. Por favor especifique directamente el SID usando la opción dom-" -"sid." - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "Las opciones dom-sid y secondary-rid-base no podrían ser usadas juntas" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "Las opciones dom-sid y rid-base deben ser usadas juntas" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" -"Privilegio 'write' insuficiente al atributo 'krbLastPwdChange' de la entrada " -"'%s'." - -msgid "" -"\n" -"IPA locations\n" -msgstr "" -"\n" -"Localizaciones IPA\n" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" -"\n" -"Manipular localizaciones DNS\n" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" -"\n" -" Encontrar todas las localizaciones:\n" -" ipa location-find\n" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" -"\n" -" Mostrar localización específica:\n" -" ipa location-show location\n" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" -"\n" -" Añadir localización:\n" -" ipa location-add location --description 'My location'\n" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" -"\n" -" Borrar localización:\n" -" ipa location-del location\n" - -msgid "location" -msgstr "localización" - -msgid "locations" -msgstr "localizaciones" - -msgid "IPA Locations" -msgstr "Localizaciones IPA" - -msgid "IPA Location" -msgstr "Localización IPA" - -msgid "Location name" -msgstr "Nombre de localización" - -msgid "IPA location name" -msgstr "Nombre de localización IPA" - -msgid "IPA Location description" -msgstr "Descripción de Localización IPA" - -msgid "Servers" -msgstr "Servidores" - -msgid "Servers that belongs to the IPA location" -msgstr "Servidores que pertenecen a la localización IPA" - -msgid "Advertised by servers" -msgstr "Anunciado por los servidores" - -msgid "List of servers which advertise the given location" -msgstr "Lista de servidores que anuncian la localización dada" - -msgid "Add a new IPA location." -msgstr "Añadir una nueva localización IPA." - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "Añadida localización IPA \"%(value)s\"" - -msgid "Delete an IPA location." -msgstr "Borrar una localización IPA." - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Borrada localización IPA \"%(value)s\"" - -msgid "IPA Server" -msgstr "Servidor IPA" - -msgid "Modify information about an IPA location." -msgstr "Modificar información sobre localización IPA." - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "Modificada localización IPA \"%(value)s\"" - -msgid "Search for IPA locations." -msgstr "Buscar localizaciones IPA." - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "%(count)d localización IPA emparejada" -msgstr[1] "%(count)d localizaciones IPA emparejadas" - -msgid "Display information about an IPA location." -msgstr "Muestra información sobre una localización IPA." - -msgid "Servers in location" -msgstr "Servidores en localización" - -msgid "netgroups" -msgstr "grupos de red" - -msgid "Netgroups" -msgstr "Grupos de red" - -msgid "Netgroup" -msgstr "Grupo de red" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "\"%(value)s\"netgroup añadido" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"grupo de host con nombre “%s” ya existe. Los grupos de nombres y los grupos " -"de red comparten un espacio de nombre común" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "%(value)s\" de netgroup eliminados" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "netgroup modificado \"%(value)s\"" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" -"la categoría de usuario no puede ser establecida a 'all' mientras hay " -"usuarios permitidos" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" -"la categoría de host no puede ser establecida a 'all' mientras hay host " -"permitidos" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "%(count)d autoservicio coincidente" -msgstr[1] "%(count)d autoservicios coincidentes" - -msgid "One time password commands" -msgstr "Comandos de contraseña de una vez" - -msgid "OTP configuration options" -msgstr "Opciones de configuración OTP" - -msgid "OTP Configuration" -msgstr "Configuración OTP" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" -"\n" -"Fichas OTP\n" +"Gestionar zona DNS y registro de recursos.\n" msgid "" "\n" @@ -16641,213 +3093,6 @@ msgstr "" "\n" "Gestionar fichas OTP.\n" -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" -"\n" -"IPA soporta el uso de fichas OTP para la autenticación de varios factores. " -"Este\n" -"código habilita la gestión de las fichas OTP.\n" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" -"\n" -" Añadir una nueva ficha:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" -"\n" -" Examinar la ficha:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" -"\n" -" Cambiar el vendedor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" -"\n" -" Borrar una ficha:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" - -msgid "OTP token" -msgstr "Ficha OTP" - -msgid "OTP tokens" -msgstr "Fichas OTP" - -msgid "OTP Tokens" -msgstr "Fichas OTP" - -msgid "OTP Token" -msgstr "Ficha OTP" - -msgid "URI" -msgstr "URI" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "Añadir ficha OTP \"%(value)s\"" - -msgid "cannot be empty" -msgstr "no puede estar vacío" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Ficha OTP borrada \"%(value)s\"" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "Ficha OTP modificada \"%(value)s\"" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "%(count)d OTP ficha coincidente" -msgstr[1] "%(count)d OTP fichas coincidentes" - -#, fuzzy -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" -"\n" -"Establecer contraseña de un usuario\n" -"\n" -"Si alguien que no sea un usuario cambia la contraseña del usuario (por " -"ejemplo, Servicio de Ayuda la restablece), entonces la contraseña tendrá que " -"ser cambiada la primera vez que se utiliza. Esto es para que el usuario " -"final sea el único que conoce la contraseña.\n" -"La directiva de contraseñas IPA controla la frecuencia de cambio de una " -"contraseña, los requisitos de fortaleza y longitud del historial de " -"contraseñas. EJEMPLOS:\n" -"Para restablecer su contraseña:\n" -" ipa passwd tuser1\n" -"\n" -" Para cambiar la contraseña de otro usuario:\n" -" ipa passwd tuser1\n" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Cambio de contraseña para \"%(value)s\"" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" -"\n" -"Herramientas de informe de estados de características Kerberos PKINIT.\n" -"\n" -"Informa de los másters IPA sobre los cuales Kerberos PKINIT está habilitado " -"o deshabilitado\n" -"\n" -"EJEMPLOS:\n" -" Lista el estado PKINIT sobre todos los másters:\n" -" ipa pkinit-status\n" -"\n" -" Comprueba el estado PKINIT sobre `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" Lista todos los másters IPA con PKINIT deshabilitado:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"Para más información sobre soporte PKINIT vea:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" - -msgid "pkinit" -msgstr "pkinit" - -msgid "PKINIT" -msgstr "" -" Los certificados de entrada deben estar codificados en DER. \n" -" Tenga en cuenta que no puede ser un normalizador en la Param, ya que " -"solamente las variables de \n" -" Unicode se normalizan.\n" -" " - -msgid "PKINIT status" -msgstr "Estado PKINIT" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "Sí PKINIT está habilitado o deshabilitado" - -msgid "Report PKINIT status on the IPA masters" -msgstr "Informa el estado PKINIT sobre los másters IPA" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)s servidor coincide" -msgstr[1] "%(count)s servidores coinciden" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" -"\n" -"Servidores Proxy RADIUS\n" - msgid "" "\n" "Manage RADIUS Proxy Servers.\n" @@ -16857,3426 +3102,10 @@ msgstr "" msgid "" "\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" +"Manage YubiKey tokens.\n" msgstr "" "\n" -"IPA soporta el uso de servidores proxy RADIUS externos para autenticaciones " -"krb5\n" -"OTP. Esto permite una gran oferta de flexibilidad cuando se integra con " -"servicios de \n" -"autenticación de tercera parte.\n" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" -"\n" -" Añadir un nuevo servidor:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" -"\n" -" Encontrar todos los servidores cuyas entradas incluyan la cadena \"example." -"com\":\n" -" ipa radiusproxy-find example.com\n" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" -"\n" -" Examinar la configuración:\n" -" ipa radiusproxy-show MyRADIUS\n" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" -"\n" -" Cambiar el secreto:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" -"\n" -" Borrar una configuración:\n" -" ipa radiusproxy-del MyRADIUS\n" - -msgid "invalid attribute name" -msgstr "nombre de atributo no válido" - -msgid "invalid port number" -msgstr "número de puerto no válido" - -msgid "RADIUS proxy server" -msgstr "Servidor proxy RADIUS" - -msgid "RADIUS proxy servers" -msgstr "Servidores proxy RADIUS" - -msgid "RADIUS Servers" -msgstr "Servidores RADIUS" - -msgid "RADIUS Server" -msgstr "Servidor RADIUS" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "Añadido servidor proxy RADIUS \"%(value)s\"" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "Borrado servidor proxy RADIUS \"%(value)s\"" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "Modificado servidor proxy RADIUS \"%(value)s\"" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "%(count)d servidor proxy RADIUS coincidente" -msgstr[1] "%(count)d servidores proxy RADIUS coincidentes" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" -"\n" -"Dominios de reino\n" -"\n" -"Gestiona la lista de dominios asociados con el reino IPA.\n" -"\n" -"Esta lista es útil para los Controladores de Dominio de otros reinos que " -"tienen\n" -"establecida confianza con este reino IPA. Necesitan la información para " -"saber que \n" -"peticiones deberían ser reenviadas a KDC de este reino IPA.\n" -"\n" -"Gestión automática: se añade un dominio automáticamente a la lista de " -"dominios\n" -"cuando se crea una nueva Zona DNS gestionada por IPA. Lo mismo se aplica " -"para el borrado.\n" -"\n" -"DNS extermanete gestionado: los dominios que no son gestionados en el " -"servidor\n" -"IPA DNA necesitan ser añadidos manualmente a la lista usando el comando ipa " -"realmdomains-mod command.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Muestra la lista actual de dominios reino:\n" -" ipa realmdomains-show\n" -"\n" -" Reemplaza la lista de dominios reino:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Añade un dominio a la lista de dominios reino:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Borra un dominio de la lista de dominios reino:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" - -msgid "Realm domains" -msgstr "Dominios reino" - -msgid "Realm Domains" -msgstr "Dominios Reino" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" -"\n" -" Modificar dominios reino\n" -"\n" -" Comprobación DNS: Cuando añade manualmente un dominio a la lista, por\n" -" defecto se lleva a cabo una comprobación DNS. Asegura que el dominio " -"está\n" -" asociado con el reino IPA, comprobando si el dominio tiene un registro " -"_kerberos\n" -" TXT que contenga el nombre del reino IPA realm name. Esta comprobación " -"se\n" -" puede saltar especificando la opción --force.\n" -"\n" -" Eliminación: cuando un dominio reino que tiene una zona DNS coincidente\n" -" gestionada por IPA se borra, el registro _kerberos TXT correspondiente " -"en la\n" -" es borrado automáticamente también. Los demás registros en la zona o la " -"zona\n" -" no son afectados.\n" -" " - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" -"La zona DNS para cada realmdomain debe contener registros SOA o NS. No se " -"han encontrado registros para: %s" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "Los siguientes dominio no pertenecen a este reino: %(domains)s" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" -"El reino de los siguientes dominios podrían no ser detectados: %(domains)s. " -"Si estos dominios pertenecen a este reino, cree por favor un registro " -"_kerberos TXT que contenga \"%(realm)s\" en cada uno." - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" -"La opción --domain no puede ser usada junto con --add-domain o --del-domain. " -"Use --domain para especificar explícitamente la lista de todo el dominio, " -"para añadir/borrar dominios concretos, use --add-domain/del-domain." - -msgid "IPA server domain cannot be omitted" -msgstr "Servidor de domino IPA no puede ser omitido" - -msgid "IPA server domain cannot be deleted" -msgstr "Servidor de dominio IPA no puede ser borrado" - -msgid "roles" -msgstr "roles" - -msgid "Role" -msgstr "Rol" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "Rol agregado \"%(value)s\"" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "Rol eliminado \"%(value)s\"" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "Rol modificado \"%(value)s\"" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d rol coincidente" -msgstr[1] "%(count)d roles coincidentes" - -msgid "self service permission" -msgstr "auto servicio de permiso" - -msgid "self service permissions" -msgstr "auto servicio de permisos" - -msgid "Self Service Permissions" -msgstr "Permisos de autoservicio" - -msgid "Self Service Permission" -msgstr "Auto Servicio de Permiso" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "Añadido autoservicio \"%(value)s\"" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "autoservicio eliminados \"%(value)s\"" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "Autoservicio modificado \"%(value)s\"" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "%(count)d autoservicio coincidente" -msgstr[1] "%(count)d autoservicios coincidentes" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" -"\n" -"Roles del servidor IPA\n" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" -"\n" -"Obtener el estado de los roles (servidor DNS, CA, etc.) suministrado por los " -"IPA maestros.\n" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" -"\n" -"El estado de un rol es habilitado, configurado o ausente.\n" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" -"\n" -" Muestra el estado del rol 'DNS server' sobre un servidor:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" -"\n" -" Muestra el estado de todos los roles que contienen 'AD' sobre un " -"servidor:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" -"\n" -" Muestra el estado de todos los roles configurados en un servidor:\n" -" ipa server-role-find ipa.example.com\n" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" -"\n" -" Muestra el rol maestro IPA implícito:\n" -" ipa server-role-find --include-master\n" - -msgid "server role" -msgstr "rol servidor" - -msgid "server roles" -msgstr "roles de servidor" - -msgid "IPA Server Roles" -msgstr "Roles de Servidor IPA" - -msgid "IPA Server Role" -msgstr "Rol de Servidor IPA" - -msgid "IPA server role name" -msgstr "Nombre de rol del servidor IPA" - -msgid "Role status" -msgstr "Estado rol" - -msgid "Status of the role" -msgstr "Estado del rol" - -msgid "Show role status on a server" -msgstr "Muestra el rol de estado sobre un servidor" - -msgid "Find a server role on a server(s)" -msgstr "Encontrar un rol de servidor sobre un servidor(s)" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "%(count)s rol servidor coincidente" -msgstr[1] "%(count)s roles servidor coincidentes" - -msgid "Include IPA master entries" -msgstr "Incluir entradas IPA maestro" - -msgid "IPA role name" -msgstr "Nombre de rol IPA" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "{role}: rol no encontrado" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "{attr}: no existe tal atributo" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -#, fuzzy -msgid "Allowed to Impersonate" -msgstr "Permitido crear tabla de teclas" - -#, fuzzy -msgid "Member principals" -msgstr "Principal kerberos" - -#, fuzzy, python-format -msgid "Malformed principal: %(error)s" -msgstr "Principal mal construido: '%(value)s'" - -#, fuzzy -msgid "Add target to a named service delegation." -msgstr "Añadir una nueva delegación." - -#, python-format -msgid "member %s" -msgstr "miembro %s" - -#, fuzzy -msgid "Remove member from a named service delegation." -msgstr "Borrar miembros de un grupo de servicio HBAC." - -#, fuzzy -msgid "service delegation rule" -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy -msgid "service delegation rules" -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy -msgid "Service delegation rules" -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy -msgid "Service delegation rule" -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "Delegación añadida \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "Delegación eliminada \"%(value)s\"" - -#, fuzzy -msgid "privileged service delegation rule" -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "%(count)d delegación coincidente" -msgstr[1] "%(count)d delegaciones coincidentes" - -#, fuzzy -msgid "service delegation target" -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy -msgid "service delegation targets" -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy -msgid "Service delegation targets" -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy -msgid "Service delegation target" -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "Delegación añadida \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "Delegación eliminada \"%(value)s\"" - -#, fuzzy -msgid "privileged service delegation target" -msgstr "objetivo de delegación de miembro de servicio" - -#, fuzzy, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "%(count)d delegación coincidente" -msgstr[1] "%(count)d delegaciones coincidentes" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -#, fuzzy -msgid "Subordinate id description" -msgstr "Descripción del perfil" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -#, fuzzy -msgid "SubUID range size" -msgstr "Nombre del intervalo" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -#, fuzzy -msgid "SubGID range size" -msgstr "Nombre del intervalo" - -msgid "Subordinate group ID count" -msgstr "" - -#, fuzzy, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr " %(oname)s con el nombre \"%(pkey)s\" ya existe" - -#, fuzzy, python-format -msgid "'%(dn)s is not a valid user" -msgstr "%(port)s no es un puerto válido" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -#, fuzzy -msgid "Add a new subordinate id." -msgstr "Añadir un nuevo escenario usuario." - -#, fuzzy, python-format -msgid "Added subordinate id \"%(value)s\"" -msgstr "Ha sido agregado el servicio \"%(value)s\"" - -#, fuzzy -msgid "Delete a subordinate id." -msgstr "Borrar un Certificado Perfil" - -#, fuzzy, python-format -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "Ha sido eliminado el servicio \"%(value)s\"" - -#, fuzzy -msgid "Modify a subordinate id." -msgstr "Modificar un escenario usuario." - -#, fuzzy, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "Ha sido modificado el servicio \"%(value)s\"" - -#, fuzzy -msgid "Search for subordinate id." -msgstr "Buscar intervalos." - -#, fuzzy, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "%(count)d servicio coincidente" -msgstr[1] "%(count)d servicios coincidentes\t\t\t" - -#, fuzzy -msgid "Display information about a subordinate id." -msgstr "Mostrar información sobre un rango." - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "comandos para controlar la configuración sudo" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" -"\n" -"Comandos de Sudo\n" -"\n" -"Comandos usados como partes integrantes de sudo\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Crear un comando nuevo\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Eliminar un comando\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -msgid "sudo command" -msgstr "comando sudo" - -msgid "sudo commands" -msgstr "comandos sudo" - -msgid "Sudo Commands" -msgstr "Comandos de sudo" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "Añadido Comando Sudo “%(value)s”" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "Borrado Comando Sudo “%(value)s”" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "Modificado Comando Sudo “%(value)s”" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "%(count)d Comando Sudo emparejado" -msgstr[1] "%(count)d Comandos Sudo emparejados" - -#, fuzzy -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" -"\n" -"Grupos de Comandos Sudo\n" -"\n" -"Gestionar grupos de Comandos Sudo.\n" -"\n" -"EJEMPLOS:\n" -"\n" -" Añadir un nuevo Grupo de Comandos Sudo:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Borrar un Grupo de Comando Sudo:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Gestionar pertenencia a Grupo de Comando Sudo, comandos:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Gestionar pertenencia a Grupo de Comando Sudo, comandos:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Mostrat un Grupo de Comando Sudo:\n" -" ipa group-show localadmins\n" - -msgid "sudo command group" -msgstr "grupo de comando sudo" - -msgid "sudo command groups" -msgstr "grupos de comando sudo" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Añadido Grupo de Comando Sudo “%(value)s”" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Borrado Grupo de Comando Sudo “%(value)s”" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Modificado Grupo de Comando Sudo “%(value)s”" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "%(count)d Grupo de Comando Sudo emparejado" -msgstr[1] "%(count)d Grupos de Comando Sudo emparejados" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -" Encuentra todos los servidores:\n" -" ipa server-find\n" - -#, fuzzy -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" -"\n" -" Encuentra todos los servidores:\n" -" ipa server-find\n" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "%(count)d equipo coincidente" -msgstr[1] "%(count)d equipos coincidentes" - -#, fuzzy, python-format -msgid "Added segment \"%(value)s\"" -msgstr "Ha sido agregado el equipo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "Ha sido eliminado el equipo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "Ha sido modificado el equipo \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(value)s" -msgstr "Ha sido encontrado '%(value)s'" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, fuzzy -msgid "suffixes" -msgstr "Sufijos UPN" - -#, fuzzy -msgid "Topology suffixes" -msgstr "Sufijos UPN" - -msgid "Topology suffix" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "%(count)d perfil coincidente" -msgstr[1] "%(count)d perfiles coincidentes" - -#, fuzzy, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Perfil borrado \"%(value)s\"" - -#, fuzzy, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "Ha sido agregado el equipo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "Ha sido modificado el equipo \"%(value)s\"" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "operation not defined" -msgstr "operación no definida" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "no está permitido llevar a cabo la operación: %s" - -msgid "No such virtual command" -msgstr "Ningún comando virtual" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" -"\n" -"Información devuelta sobre la identidad actualmente autentificada\n" -"\n" -"El comando quien soy devuelve información sobre como obtener más detalles " -"sobre la identidad autentificada para esta petición. La información " -"incluye:\n" -"\n" -" * tipo de objeto\n" -" * comando para recuperar detalles del objeto\n" -" * argumentos y opciones a pasar al comando\n" -"\n" -"La información se devuelve como un diccionario. Los ejemplos de abajo usan " -"la salida 'key: value' con propósitos ilustrativos.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Buscar como usuario IPA:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Buscar como un usuario desde un dominio de confianza:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Buscar como host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Buscar como servicio Kerberos:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" - -msgid "Describe currently authenticated identity." -msgstr "Describe la identidad actualmente autentificada." - -msgid "Object class name" -msgstr "Nombre de clase objeto" - -msgid "Function to get details" -msgstr "Función para obtener detalles" - -msgid "Arguments to details function" -msgstr "Argumentos para detalles de la función" - -msgid "Cannot query Directory Manager with API" -msgstr "No se puede cosultar al Administrador de Directorios con API" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" -"\n" -"IPA servers\n" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" -"\n" -"Obtener información sobre los servidores IPA instalados.\n" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -" Encuentra todos los servidores:\n" -" ipa server-find\n" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" -"\n" -" Mostrar un servidor específico:\n" -" ipa server-show ipa.example.com\n" - -msgid "server" -msgstr "servidor" - -msgid "servers" -msgstr "servidores" - -msgid "IPA Servers" -msgstr "Servidores IPA" - -msgid "Server location" -msgstr "Localización de servidor" - -msgid "Service weight" -msgstr "Peso del servicio" - -msgid "Weight for server services" -msgstr "Peso para los servicios del servidor" - -msgid "Service relative weight" -msgstr "Peso relativo del servicio" - -msgid "Relative weight for server services (counts per location)" -msgstr "" -"Pero relativo para los servicios del servidor (cuentas por localización)" - -msgid "Enabled server roles" -msgstr "Rolkes de servidor habilitados" - -msgid "List of enabled roles" -msgstr "Listra de roles habilitados" - -msgid "Modify information about an IPA server." -msgstr "Modificar información sobre un servidor IPA." - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "Modificado servidor IPA \"%(value)s\"" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "%(count)d servidor IPA coincide" -msgstr[1] "%(count)d servidores IPA coinciden" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "Eliminado servidor IPA \"%(value)s\"" - -msgid "Ignore topology errors" -msgstr "Ignorar errores de topología" - -msgid "Ignore topology connectivity problems after removal" -msgstr "Ignorar problemas de conectividad de topología después de quitarla" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "Ignorar la comprobación del último servidor CA o DNS que queda" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" -"Saltar una comprobación si el último maestro CA o servidor DNS se ha quitado" - -msgid "Force server removal" -msgstr "Forzar la eliminación del servidor" - -msgid "Force server removal even if it does not exist" -msgstr "Fuerza el borrado del servidor aunque no exista" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" -"La replica de la clave maestra DNSSEC está activa. Desinstalarla podría " -"romper su sistema DNS. Por favor deshabilite o reemplace la clave maestra " -"DNSSEC primero." - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "Borrando este servidor dejará su instalación sin un DNS." - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" -"El borrado de este servidor no está permitido puesto que dejaría su " -"instalación sin un KRA." - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" -"El borrado de este servidor no está permitido puesto que dejaría su " -"instalción sin una CA." - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "Ignorar estos avisos y continuar con el borrado" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" -"Fallo al limpiar memberPrincipal %(principal)s de la entrada s4u2proxy " -"%(dn)s: %(err)s" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "Fallo al limpiar entradas DNA hostname para %(master)s: %(err)s" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" -"Fallo al quitar el servidor %(master)s de la lista de servidores: %(err)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "Fallo al limpiar claves Custodia para %(master)s: %(err)s" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "Fallo al limpiar principales/claves del servidor: %(err)s" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "Fallo al limpiar entradas %(hostname)s DNS: %(err)s" - -msgid "You may need to manually remove them from the tree" -msgstr "Usted puede necesitar borrarlo manualmente del árbol" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "Forzando el borrado de %(hostname)s" - -msgid "Ignoring topology connectivity errors." -msgstr "Ignorando los errores de topología de conectividad." - -#, fuzzy, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "" -"Fallo al quitar el servidor %(master)s de la lista de servidores: %(err)s" - -msgid "Server has already been deleted" -msgstr "El servidor ya ha sido borrado" - -msgid "Agreements deleted" -msgstr "Acuerdos borrados" - -msgid "Following segments were not deleted:" -msgstr "Los siguientes segmentos no fueron borrados:" - -#, python-format -msgid "must be \"%s\"" -msgstr "debe ser \"%s\"" - -msgid "not allowed to perform server connection check" -msgstr "no permitido llevar a cabo la comprobación de conexión del servidor" - -msgid "Set enabled/hidden state of a server." -msgstr "Establecer estado habilitado/escondido de un servidor." - -msgid "State" -msgstr "Estado" - -msgid "Server state" -msgstr "Estado del servidor" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "Cambiado el estado del servidor de \"%(value)s\"." - -msgid "Cannot hide CA renewal master." -msgstr "No se puede ocultar el maestro de renovación de CA." - -msgid "Cannot hide DNSSec key master." -msgstr "No se puede ocultar la clave maestra DNSSec." - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "No se puede ocultar el último servidor habilitado %(name)s." - -msgid "A list of ACI values" -msgstr "Una lista de valores ACI" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "tipo, filtro, subárbol y grupo de destino, se excluyen mutuamente" - -msgid "ACI prefix is required" -msgstr "Se requiere prefijo de ACI " - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" -"es necesario como mínimo alguno de: tipo, filtro, subárbol, grupo de " -"destino, atributos, o miembro de " - -msgid "filter and memberof are mutually exclusive" -msgstr "filtro y memberof son mutuamente excluyentes" - -msgid "group, permission and self are mutually exclusive" -msgstr "grupo, permisos y auto son mutuamente excluyentes" - -msgid "One of group, permission or self is required" -msgstr "Uno de grupo, permiso o self es necesario" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "El grupo '%s' no existe" - -msgid "empty filter" -msgstr "Vaciar filtro" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Error de sintaxis:%(error)s " - -#, python-format -msgid "invalid DN (%s)" -msgstr "DN no válido (%s)" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "No se encuentra un ACI cuyo nombre sea \"%s\"" - -msgid "ACI object." -msgstr "Objeto ACI." - -msgid "ACIs" -msgstr "ACI" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "Ha sido creado ACI \"%(value)s\"" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "Ha sido eliminado ACI \"%(value)s\"" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "Ha sido modificado ACI \"%(value)s\"" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d ACI coincidente" -msgstr[1] "%(count)d ACIs coincidentes" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "ACI renombrado a \"%(value)s\"" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" -"\n" -"Regla de Membresía Automática.\n" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" -"\n" -"Brinde claridad a la membresía de hosts y usuarios configurando patrones\n" -"inclusivos o exclusivos de expresiones regulares, usted puede " -"automáticamente\n" -"asignar una nuevas entradas a un grupo o grupo de host en base a la " -"información del atributo.\n" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" -"\n" -"Un regla está directamente asociada con un grupo por nombre, de modo que " -"usted\n" -"no puede crear un regla sin un grupo o grupo de host que lo acompañen.\n" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" -"\n" -"Una condición es una expresión regular usada por 389-ds para coincidir una " -"nueva\n" -"entrada entrtante con una regla de auto miembro. Si la coincidencia es una " -"regla\n" -"inclusiva la entrada se añade al grupo o grupo de host apopiado.\n" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" -"\n" -"Se podría especificar un grupo o grupo de host predeterminado para las " -"entradas\n" -"que no coincidan con ninguna regla. En caso de entradas de usuario, este " -"grupo\n" -"será un grupo de reserva puesto que todos los usuarios son por defecto " -"miembros del grupo especificado en la configuración IPA.\n" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" -"\n" -"El comando de reconstrucción de auto miembro puede ser usado para ejecutar \n" -"retroactivamente reglas de auto miembro contra las entradas existentes, así " -"reconstruirá su membresía.\n" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" -"\n" -" Borrar un host:\n" -" ipa host-del test.example.com\n" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" -"\n" -" Modificar una regla automiembro.\n" -" " - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" -"\n" -" Encuentra todos los servidores:\n" -" ipa server-find\n" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "Regla Auto Afiliación" - -#, fuzzy, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(pkey)s: no se encuentra %(oname)s" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "%s no es un atributo válido." - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" -"\n" -" Añadir una regla automiembro.\n" -" " - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "Regla automiembro añadida \"%(value)s\"" - -msgid "Auto Membership is not configured" -msgstr "Auto Afiliación no está configurada" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" -"\n" -" Añadir condiciones a una regla automiembro.\n" -" " - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Añadida condición(es) a \"%(value)s\"" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "Regla auto miembro: %s no encontrada!" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" -"\n" -" Anula esto de modo que podamos añadir completados y fallados al " -"resultado devuelto.\n" -" " - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" -"\n" -" Borrar condiciones de una regla automiembro.\n" -" " - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Condición(es) eliminada(s) de «%(value)s»" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" -"\n" -" Anula esto de modo que podamos fijar completados y fallados.\n" -" " - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" -"\n" -" Modificar una regla automiembro.\n" -" " - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "Modificada regla de automiembro \"%(value)s\"" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" -"\n" -" Borra una regla automiembro.\n" -" " - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Borrada regla automiembro \"%(value)s\"" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" -"\n" -" Búsqueda reglas automiembro.\n" -" " - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d reglas coincidentes" -msgstr[1] "%(count)d reglas coincidentes" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" -"\n" -" Muestra información sobre una regla automiembro.\n" -" " - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "Certificados borrados del usuario \"%(value)s\"" - -msgid "No default (fallback) group set" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" -"\n" -" Muestra información sobre una regla automiembro.\n" -" " - -msgid "Task DN" -msgstr "" - -#, fuzzy -msgid "DN of the started task" -msgstr "Nombre del dominio de confianza" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -#, fuzzy -msgid "users and hosts cannot both be set" -msgstr "Regla HBAC y miembros locales no pueden ser fijados" - -#, fuzzy -msgid "hosts cannot be set when type is 'group'" -msgstr "hosts no puede ser añadido con categoría de host='all'" - -#, fuzzy -msgid "users cannot be set when type is 'hostgroup'" -msgstr "no se pueden añadir usuarios cuando la categoría de usuario='all'" - -#, fuzzy -msgid "Automember rebuild membership task started" -msgstr "Tarea completada de reconstruir la membresía del miembro" - -msgid "Automember rebuild membership task completed" -msgstr "Tarea completada de reconstruir la membresía del miembro" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -#, fuzzy -msgid "Automember" -msgstr "Regla Automiembro" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -#, fuzzy -msgid "Remove orphan automember rules" -msgstr "" -"\n" -" Borrar condiciones de una regla automiembro.\n" -" " - -msgid "Member service groups" -msgstr "Grupos de miembro de servicio" - -msgid "Member HBAC service groups" -msgstr "Grupos de servicio de Miembros HBAC" - -#, fuzzy -msgid "Member ID user overrides" -msgstr "Servicios de miembros" - -#, fuzzy -msgid "Indirect Member ID user overrides" -msgstr "Usuarios indirectos miembros" - -msgid "Indirect Member permissions" -msgstr "" -"\\n\n" -"Permisos indirectos de miembro " - -msgid "Indirect Member HBAC service" -msgstr "Servicio HBAC de miembro indirecto" - -msgid "Indirect Member HBAC service group" -msgstr "Grupo de servicio HBAC de miembros indirectos " - -msgid "Invalid format. Should be name=value" -msgstr "" - -#, fuzzy -msgid "An IPA master host cannot be deleted or disabled" -msgstr "Esta entrada no puede ser activada o desactivada" - -msgid "entry" -msgstr "entrada" - -msgid "entries" -msgstr "entradas" - -msgid "Entry" -msgstr "Entrada" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "no se encuentra la entrada (%(container)s) de contenedor" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s: no se encuentra %(oname)s" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s: no se encuentra %(oname)s" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr " %(oname)s con el nombre \"%(pkey)s\" ya existe" - -#, fuzzy, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "atributo \"%s\" no permitido" - -#, fuzzy, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "atributo \"%s\" no permitido" - -#, fuzzy -msgid "attribute is not configurable" -msgstr "el dominio no está configurado" - -#, fuzzy -msgid "No such attribute on this entry" -msgstr "El atributo username sobre el objeto usuario" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "Cambie el nombre del %(ldap_obj_name)s objeto" - -msgid "the entry was deleted while being modified" -msgstr "la entrada fue eliminada mientras estaba siendo modificada" - -#, python-format -msgid "%s" -msgstr "%s" - -#, python-format -msgid "%s to add" -msgstr "%s a añadir" - -#, python-format -msgid "%s to remove" -msgstr "%s a eliminar" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" -"Los resultados deberían contener sólo atributo de clave primaria (“%s”)" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, fuzzy, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy, python-format -msgid "added attribute value to entry %(value)s" -msgstr "Añade nuevos alias al usuario \"%(value)s\"" - -#, fuzzy, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "Borrados alias del usuario \"%(value)s\"" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "REST API is not logged in." -msgstr "REST API no ha iniciado sesión." - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "No hay respuesta 2xx desde CA REST API: %(status)d. %(explanation)s" - -msgid "Unable to communicate with CMS" -msgstr "Incapaz de comunicar con CMS" - -msgid "Response from CA was not valid JSON" -msgstr "La respuesta desde CA no era JSON válido" - -msgid "pyhbac is not installed." -msgstr "pyhbac no está instalado." - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "Eliminar miembro desde un grupo." - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" -"No puede buscar en los dominios de confianza sin un dominio propio " -"configurado. Asegúrese que tiene corriendo ipa-adtrust-install sobre el " -"servidor IPA primero" - -#, python-format -msgid "Access granted: %s" -msgstr "Acceso obtenido: %s" - -msgid "" -"\n" -"Permissions\n" -msgstr "" -"\n" -"Permisos\n" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" -"\n" -"Un permiso habilita una delegación de derechos de grano fino. Un permiso es " -"una\n" -"vuelta alrededor legible por humanos de una Regla de Control de Acceso (ACI) " -"o\n" -"instrucción 389-ds.\n" -"Un permiso concede el derecho de llevar a cabo una tarea especifica como " -"añadir\n" -"un usuario, modificar un grupo, etc.\n" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" -"\n" -"Un permiso puede contener otros permisos.\n" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" -"\n" -"* Un permiso concede acceso a leer, escribir, añadir, borrar, buscar o " -"comparar.\n" -"* Un privilegio combina permisos similares (por ejemplo todos los permisos\n" -" necesarios para añadir un usuario).\n" -"* Un rol concede un conjunto de privilegios a usuarios, grupos, hosts o " -"grupos de host.\n" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" -"\n" -"Un permiso está constituido por diversas partes:\n" -"\n" -"1. El nombre del permiso.\n" -"2. El objetivo del permiso.\n" -"3. Los derechos concedidos por el permiso.\n" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" -"\n" -"Los derechos definen que operaciones están permitidas y pueden ser una o " -"mas\n" -"de las siguientes:\n" -"1. write - escribe uno o más atributos\n" -"2. read - lee uno o más atributos\n" -"3. search - busca uno o más atributos\n" -"4. compare - compara uno o más atributos\n" -"5. add - añade una nueva entrada al árbol\n" -"6. delete - borra una entrada existente\n" -"7. all - concede todos los permisos\n" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" -"\n" -"Advierta la diferencia entre atributos y entradas. Los permisos son " -"independientes,\n" -"de este modo ser capaz de añadir un usuario no significa que el usuario sea\n" -"editable.\n" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" -"\n" -"Existen distinto objetivos permitidos:\n" -"1. subtree: un DN; el permiso se aplica al sub-árbol bajo este DN\n" -"2. target filter: un filtro LDAP\n" -"3. target: DN con posibles comodines, especifica las entradas a las que se " -"aplica\n" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" -"\n" -"Adicionalmente, existen las siguientes opciones de conveniencia.\n" -"Fijando una de estas opcines ajustará el correspondiente atributo(s).\n" -"1. type: un tipo de objeto (usuario, grupo, etc); fija sub-árbol y filtro " -"objetivo.\n" -"2. memberof: se aplica a los miembros de un grupo; fija filtro objetivo\n" -"3. targetgroup: concede acceso para modificar un grupo específico (como\n" -" concediendo los derechos para gestiona la membresía de grupo); fija " -"objetivo.\n" - -msgid "" -"\n" -"Managed permissions\n" -msgstr "" -"\n" -"Permisos gestionados\n" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" -"\n" -"Los permisos que vienen con IPA por defecto se pueden llamar permisos\n" -"\"gestionados\". Estos tienen un conjunto de atributos predeterminados que " -"aplican,\n" -"pero el administrador puede añadir/borrar atributos individuales de/a el " -"conjunto.\n" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" -"\n" -"El borrado o renombrado de un permiso gestionado, así como el cambio de su\n" -"objetivo, no está permitido.\n" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" -"\n" -" Añadir un permiso que concede la creación de usuarios:\n" -" ipa permission-add --type=user --permissions=add \"Añadir Usuarios\"\n" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" -"\n" -" Añadir un permiso que conceda la capacidad de gestionar la membresía de un " -"grupo:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Gestiona Miembros de Grupo\"\n" - -msgid "must be enclosed in parentheses" -msgstr "debe estar cerrado entre paréntesis" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "\"%s\" no es un tipo de objeto" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "\"%s\" no es un tipo válido de permiso" - -#, python-format -msgid "Deprecated; use %s" -msgstr "Obsoleto; use %s" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "Permiso con bandera desconocida %s puede no ser modificado o quitado" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "Un permiso SYSTEM no puede ser modificado o quitado" - -#, python-format -msgid "Entry %s not found" -msgstr "Entrada %s no encontrada" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "El ACI para el permiso %(name)s no fue encontrado en %(dn)s " - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" -"no puede especificar filtro de objetivo completo y filtro de objetivo extra " -"simultáneamente" - -#, python-format -msgid "option was renamed; use %s" -msgstr "la opción fue renombrada; use %s" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "No puede usar %(old_name)s con %(new_name)s" - -#, python-format -msgid "%s: group not found" -msgstr "%s: grupo no encontrado" - -msgid "target and targetgroup are mutually exclusive" -msgstr "target y targetgroup son mutuamente exclusivos" - -msgid "subtree and type are mutually exclusive" -msgstr "subtree y type son mutuamente exclusivos" - -msgid "Bad search filter" -msgstr "Mal filtro de búsqueda" - -#, python-format -msgid "Entry %s does not exist" -msgstr "Entrada %s no existe" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" -"debe haber al menos una entrada objetivo especifica (e.g. target, " -"targetfilter, attrs)" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "Permiso agregado \"%(value)s\"" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "los atributos attrs e included son mutuamente exclusivos" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "No puede almacenar permiso ACI a %s" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "Permiso borrado \"%(value)s\"" - -msgid "cannot delete managed permissions" -msgstr "no puede borrar permisos gestionados" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "ACI de permiso %s no fue encontrado" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "Modificado el permiso \"%(value)s\"" - -msgid "cannot rename managed permissions" -msgstr "no puede renombrar permisos gestionados" - -msgid "not modifiable on managed permissions" -msgstr "no modificable sobre permisos gestionados" - -msgid "only available on managed permissions" -msgstr "solo disponible sobre permisos gestionados" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "los atributos attrs e included/excluded son mutuamente exclusivos" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" -"no puede establecer bindtype para un permiso que se ha asignado a un " -"privilegio" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "%(count)d permiso coincidente" -msgstr[1] " %(count)d permisos coincidentes" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "Privilegio" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "Privilegio añadido \"%(value)s\"" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "Privilegio eliminado \"%(value)s \"" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "Privilegio modificado \"%(value)s \"" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)d privilegio coincidente" -msgstr[1] "%(count)d privilegios coincidentes" - -#, fuzzy -msgid "" -"\n" -"API Schema\n" -msgstr "Esquema LDAP" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" -"\n" -" Mostrar localización específica:\n" -" ipa location-show location\n" - -#, fuzzy -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" -"\n" -" Encuentra todos los servidores:\n" -" ipa server-find\n" - -msgid "Name" -msgstr "Nombre" - -#, fuzzy -msgid "Documentation" -msgstr "Ubicación" - -msgid "Exclude from" -msgstr "" - -#, fuzzy -msgid "Include in" -msgstr "Include Habilitado" - -msgid "Help topic" -msgstr "" - -#, fuzzy -msgid "Version" -msgstr "Permiso" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "Nombre de registro" - -#, fuzzy -msgid "Display information about a command." -msgstr "Mostrar información sobre un rango." - -#, fuzzy -msgid "Search for commands." -msgstr "Buscar Comandos Sudo." - -#, fuzzy -msgid "Return command defaults" -msgstr "Ejecutar comandos" - -#, fuzzy, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "{role}: rol no encontrado" - -#, fuzzy -msgid "Display information about a class." -msgstr "Mostrar información sobre un host." - -#, fuzzy -msgid "Search for classes." -msgstr "Buscar roles." - -#, fuzzy -msgid "Display information about a help topic." -msgstr "Mostrar información sobre un grupo de red." - -#, fuzzy -msgid "Search for help topics." -msgstr "Buscar grupos de host." - -#, fuzzy -msgid "Required" -msgstr "se requiere" - -#, fuzzy -msgid "Multi-value" -msgstr "Valor personal" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "Nombre de ACI" - -#, fuzzy -msgid "Confirm (password)" -msgstr "Cambiar contraseña" - -#, fuzzy -msgid "Default" -msgstr "Shell predeterminada" - -#, fuzzy -msgid "Default from" -msgstr "Grupo de usuarios predeterminado" - -msgid "Label" -msgstr "" - -#, fuzzy -msgid "Convert on server" -msgstr "Anunciado por los servidores" - -#, fuzzy -msgid "Option group" -msgstr "Error en Operaciones" - -msgid "Sensitive" -msgstr "" - -#, fuzzy -msgid "Positional argument" -msgstr "Argumentos posicionales" - -#, fuzzy, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(parent)s: no se encuentra %(oname)s" - -#, fuzzy -msgid "Display information about a command parameter." -msgstr "Mostrar información sobre un rango." - -#, fuzzy -msgid "Search command parameters." -msgstr "Buscar intervalos." - -#, fuzzy, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(parent)s: no se encuentra %(oname)s" - -#, fuzzy -msgid "Display information about a command output." -msgstr "Mostrar información sobre un grupo denominado." - -#, fuzzy -msgid "Search for command outputs." -msgstr "Buscar Grupos de Comando Sudo." - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" -"\n" -"Confianza de reino cruzado\n" -"\n" -"Gestionar relaciones de confianza entre los dominios IPA y Active " -"Directory.\n" -"\n" -"Con el objetivo de permitir a los usuarios de un dominio remoto acceder a " -"los\n" -"recursos en el dominio IPA, se necesita establecer relaciones de confianza.\n" -"Actualmente IPA soporta solo confianza entre dominios IPA y Active Directory " -"bajo \n" -"el control de Windows Server 2008 o posterior, con nivel funcional 2008 o " -"posterior.\n" -"\n" -"Por favor advierta que el DNS en ambos lados de los dominios IPA y Active\n" -"Directory deberían ser configurados apropiadamente para descubrir a cada " -"uno.\n" -"Las relaciones de confianza se apoyan en la capacidad de descubrir recursos " -"especiales en el otro dominio por medio de los registros DNS.\n" -"\n" -"Ejemplos:\n" -"\n" -"1. Establecer confianza de reino cruzado con Active Directory usando el \n" -" dministrador de credenciales AD:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. Listar todas las relaciones de confianza existentes:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Mostrar detalles de la relación de confianza específica:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Borrar relaciones de confianza existentes:\n" -"\n" -" ipa trust-del \n" -"\n" -"Una vez que la relación de confianza está establecida, los usuarios remotos\n" -"necesitarán ser mapeados a grupos POSIX locales con el objetivo de usar " -"recursos\n" -"IPA. El mapeado debería ser hecho por medio del uso de la membresía externa " -"de\n" -"grupo no-POSIX y después este grupo debería ser incluido en uno de los " -"grupos locales POSIX.\n" -"\n" -"Ejemplo:\n" -"\n" -"1. Crear un grupo para el mapeo de administrador de dominio de confianza y " -"su\n" -"grupo POSIX local:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Añadir identificador de seguridad de Domain Admins del al " -"grupo\n" -" ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Permitir a los miembros del grupo admins_external ser asociados con el " -"grupo\n" -" POSIX ad-admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Lista de miembros de miembros externos del grupo ad_admins_external para " -"ver\n" -" sus SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"CONFIGURACIÓN GLOBAL DE CONFIANZA\n" -"\n" -"Cuando se instale un subpaquete de confianza IPA AD y está corriendo ipa-" -"adtrust-\n" -"install, se genera una configuración de dominio local (SID, GUID, nombre\n" -"NetBIOS). Estos identificadores se usan entonces cuando se comunica con un\n" -"dominio de confianza de un tipo concreto.\n" -"\n" -"1. Mostrar la configuración de confianza global para el tipo de confianza " -"Active Directory:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modificar la configuración global de todos los confiados de tipo Active " -"Directory y\n" -" establecer un grupo primario de retroceso (el GID del grupo primario de " -"retroceso\n" -" se usa como GID de usuario primario y el usuario autenticando al dominio " -"IPA no\n" -" tiene ningún otro GID primario establecido ya):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Cambiar el grupo primario de retroceso al grupo escondido predeterminado\n" -" (cualquier grupo con un objeto clae posixGroup está permitido):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" -" Alternativamente, los siguientes servidores son capaces de ejecutar este " -"comando: %(masters)s" - -msgid "AD Trust setup" -msgstr "Ajuste de Confianza AD" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" -"No puede llevar a cabo el comando seleccionado sin el soporte de Samba 4 " -"instalad. Asegúrese de tener el instalado el sub-paquete server-trust-ad de " -"IPA." - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" -"No puede llevar a cabo el comando seleccionado sin una instancia Samba 4 " -"configurada en este máquina. Asegúrese de estar ejecutando ipa-adtrust-" -"install sobre este servidor." - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" -"No se pudo recuperar dominios del bosque de confianza. Vea detalles en " -"error_log" - -msgid "trust" -msgstr "confianza" - -msgid "trusts" -msgstr "confianzas" - -msgid "Trusts" -msgstr "Confianzas" - -msgid "Trust" -msgstr "Confianza" - -#, fuzzy -msgid "SID blocklist incoming" -msgstr "Lista negra de SID entrante" - -#, fuzzy -msgid "SID blocklist outgoing" -msgstr "Lista negra de SID saliente" - -msgid "Trust direction" -msgstr "Dirección de confianza" - -msgid "Trust type" -msgstr "Tipo de confianza" - -msgid "Trust status" -msgstr "Estado de confianza" - -msgid "UPN suffixes" -msgstr "Sufijos UPN" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "SID no válido: {SID}" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" -"\n" -"Añadir nueva confianza a usar.\n" -"\n" -"Este comando establece la relación de confianza con otro dominio que llegar " -"a ser \n" -"trusted'. Como resultado, los usuarios del dominio de confianza puede " -"acceder a\n" -"los recursos de este dominio.\n" -"\n" -"Solo están soportados ahora la confianza con dominios Active Directory.\n" -"\n" -"El comando se puede ejecutar seguramente múltiples veces contra el mismo\n" -"dominio, esto causará cambios en las credenciales de relaciones de confianza " -"en\n" -"ambos lados.\n" -"\n" -"Advierta que si el comando se ejecuta previamente con un tipo de rango " -"específico\n" -"o con detección automática del tipo de rango y usted desea configurar un " -"tipo de\n" -"rango diferente, usted puede necesitar borrar primero la ID del rango " -"usando \n" -"ipa idrange-del antes de reintentar el comando con el rango deseado.\n" -" " - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" -"Tipo de rango de ID de dominios de confianza, uno de los valores permitidos" - -msgid "External trust" -msgstr "Confianza externa" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" -"Establecida confianza externa a un dominio en otro bosque. La confianza no " -"es transitiva más allá del dominio." - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "Añadida confianza Active Directory para el reino \"%(value)s\"" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Restablecida la confianza al dominio \"%(value)s\"" - -msgid "missing base_id" -msgstr "base_id desaparecida" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" -"pysss_murmur no está disponible en el servidor y no se ha dado base-id." - -msgid "trust type" -msgstr "tipo de confianza" - -msgid "only \"ad\" is supported" -msgstr "solo se admite «ad»" - -msgid "domain" -msgstr "dominio" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" -"No puede establecer confianza al AD desplegado en el mismo dominio que IPA. " -"Este ajuste no se soporta." - -msgid "Realm-domain mismatch" -msgstr "Flata de coincidencia de dominio reino" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" -"Para establecer confianza con Active Directory, el nombre de dominio y el " -"nombre de reino del servidor IPA deben coincidir" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" -"El dominio de confianza %(domain)s está incluido entre los dominios del " -"reino IPA realm. Necesita ser quitado antes de establecer la confianza. Vea " -"el comando \"ipa realmdomains-mod --del-domain\"." - -msgid "Trusted domain and administrator account use different realms" -msgstr "" -"El dominio de confianza y la cuenta del administrador usan reinos diferentes" - -msgid "Realm administrator password should be specified" -msgstr "Debería especificarse la contraseña del administrador del reino" - -msgid "id range type" -msgstr "tipo de rango de id" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" -"Solo se permiten los valores ipa-ad-trust e ipa-ad-trust-posix para --range-" -"type cuando se añade una confianza AD." - -msgid "id range" -msgstr "rango id" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" -"Ya existe un rango id para esta confianza. Usted debería bien borrar el " -"antiguo rango o excluir las opciones --base-id/--range-size del comando." - -msgid "range exists" -msgstr "el intervalo existe" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" -"Rango de ID con el mismo nombre pero diferente SID de dominio ya existe. El " -"nuevo rango de ID para el nuevo dominio de confianza debe ser creado " -"manualmente." - -msgid "range type change" -msgstr "cambio de tipo de rango" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" -"El rango de ID para el dominio de confianza ya existe, pero tiene un tipo " -"diferente. Por favor borre manualmente el rango viejo o no haga cumplir el " -"tipo por medio de la opción --range-type." - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" -"Incapaz de resolver el controlador de dominio para el dominio {domain}. " - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" -"La política de reenvío se define para ello en IPA DNS, ¿tal vez el " -"reenviador apunta al host incorrecto?" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" -"IPA gestiona DNS, por favor verifique su configuración DNS y asegúrese que " -"el servicio de registros del dominio '{domain}' puede ser resuelto. Se " -"pueden encontrar ejemplos de como configurar DNS con comandos CLI o con Web " -"UI en la documentación. " - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" -"Puesto que IPA no gestiona los registros DNS, asegúrese de que DNS está " -"configurado para resolver el dominio '{domain}' desde los hosts IPA y vuelta." - -msgid "Unable to verify write permissions to the AD" -msgstr "Incapaz de verificar los permisos de escritura al AD" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" -"No se especifican bastantes argumentos para llevar a cabo un ajusta de " -"confianza" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "Confianza borrada \"%(value)s\"" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" -"\n" -" Modificar una confianza (para uso futuro).\n" -"\n" -" Actualmente solo está disponible la opción predeterminada para modificar " -"los\n" -" atributos LDAP. Opciones más especificas serán añadidas en futuras " -"versiones.\n" -" " - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" -"Confianza modificada \"%(value)s\" (el cambio será efectivo en 60 segundos)" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "%(count)d confianza encontrada" -msgstr[1] "%(count)d confianzas encontradas" - -msgid "trust configuration" -msgstr "configuración de la confianza" - -msgid "Global Trust Configuration" -msgstr "Configuración Global de Confianza" - -msgid "IPA AD trust agents" -msgstr "IPA AD agentes de confianza" - -msgid "IPA servers configured as AD trust agents" -msgstr "Servidores IPA configurados como agentes de confianza AD" - -msgid "IPA AD trust controllers" -msgstr "Controladores de confianza IPA AD" - -msgid "IPA servers configured as AD trust controllers" -msgstr "Servidores IPA configurados como controladores de confianza AD" - -msgid "unsupported trust type" -msgstr "tipo de confianza no soportado" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "Modificada \"%(value)s\" configuración de confianza" - -msgid "SID" -msgstr "SID" - -msgid "sidgen_was_run" -msgstr "sidgen_was_run" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" -"Este comando se basa en la existencia del grupo \"editors\" pero este grupo " -"no h sido encontrado." - -msgid "trust domain" -msgstr "dominio de confianza" - -msgid "trust domains" -msgstr "dominios de confianza" - -msgid "Trusted domains" -msgstr "Dominios de confianza" - -msgid "Trusted domain" -msgstr "Dominio de confianza" - -msgid "Domain enabled" -msgstr "Dominio habilitado" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "Borrada información sobre el dominio de confianza \"%(value)s\"" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" -"no puede borrar el dominio raíz de la confianza, use trust-del para borrarla " -"misma confianza" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" -"Lista de dominios de confianza refrescados con éxito. Use el comando " -"trustdomain-find para listarlos." - -#, fuzzy -msgid "Configure this server as a trust agent." -msgstr "Servidores IPA configurados como agentes de confianza AD" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, fuzzy -msgid "not allowed to remotely add agent" -msgstr "no se permite modificar las entradas de los usuarios" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "Habilitado dominio de confianza \"%(value)s\"" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" -"El dominio raíz de la confianza está siempre habilitado para la confianza " -"existente" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "Deshabilitar dominio de confianza \"%(value)s\"" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" -"no puede deshabilitar el dominio raíz de la confianza, use trust-del para " -"borrar la confianza misma" - -msgid "" -"\n" -"Vaults\n" -msgstr "" -"\n" -"Bóvedas\n" +"Gestionar fichas YubiKey.\n" msgid "" "\n" @@ -20287,6466 +3116,24 @@ msgstr "" msgid "" "\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" +"Managed permissions\n" msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" -"\n" -"En base al propietario hay tres categorías de bóveda:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" -"\n" -"Las bóvedas de usuario son bóvedas propietarias usadas por un usuario " -"concreto. Las bóvedas\n" -"privadas son bóvedas propiedad del usuario actual. Las bóvedas de servcio " -"son\n" -"bóvedas propiedad de un servicio. Las bóvedas compartidas son propiedad del " -"administrador\n" -"pero pueden ser usadas por otros usuarios o sevicios.\n" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" -"\n" -"En base al mecanismos de seguridad hay tres tipos de\n" -"bóvedas:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" -"\n" -"La bóveda standard usa un mecanismo seguro para transportar y\n" -"almacenar el secreto. El secreto puede ser sólo recuperado por los usuarios\n" -"que tiene acceso a la bovéda.\n" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" -"\n" -"La bóveda symmetric es similar a la standard, pero\n" -"encripta previamente el secreto usando una contraseña antes de transportar.\n" -"El secreto sólo se puede recuperar usando la misma contraseña.\n" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" -"\n" -"La bóveda asymmetric es similar a la bóveda standard, pero\n" -"encripta el secreto usando una clave pública antes del transporte.\n" -"El secreto sólo se puede recuperar usando la clave privada.\n" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" -"\n" -" Muestra la configuración DNS global:\n" -" ipa dnsconfig-show\n" - -#, fuzzy -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -#, fuzzy -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Listar bóvedas:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -#, fuzzy -msgid "vaultcontainer" -msgstr "Contenedor de grupoi" - -#, fuzzy -msgid "vaultcontainers" -msgstr "Contenedor de grupoi" - -#, fuzzy -msgid "Vault Containers" -msgstr "Contenedor de grupoi" - -#, fuzzy -msgid "Vault Container" -msgstr "Contenedor de grupoi" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -#, fuzzy -msgid "Host is not supported" -msgstr "solo se admite «ad»" - -msgid "KRA service is not enabled" -msgstr "" - -#, fuzzy -msgid "Deleted vault container" -msgstr "Borrar una localización de automontaje." - -#, fuzzy, python-format -msgid "owner %s" -msgstr "Propietario" - -#, fuzzy -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" -"\n" -" Añadir una regla automiembro.\n" -" " - -#, fuzzy -msgid "vault" -msgstr "" -"\n" -"Bóvedas\n" - -#, fuzzy -msgid "vaults" -msgstr "" -"\n" -"Bóvedas\n" - -#, fuzzy -msgid "Vaults" -msgstr "" -"\n" -"Bóvedas\n" - -#, fuzzy -msgid "Vault" -msgstr "" -"\n" -"Bóvedas\n" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -#, fuzzy -msgid "Add a vault." -msgstr "Modificar una bóveda" - -#, fuzzy, python-format -msgid "Added vault \"%(value)s\"" -msgstr "Ha sido agregado el equipo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "Confianza borrada \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "%(count)d confianza encontrada" -msgstr[1] "%(count)d confianzas encontradas" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, fuzzy, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "Ha sido modificado el equipo \"%(value)s\"" - -#, fuzzy -msgid "Vault configuration" -msgstr "configuración de la confianza" - -#, fuzzy -msgid "IPA KRA servers" -msgstr "Servidores IPA DNS" - -#, fuzzy -msgid "IPA servers configured as key recovery agents" -msgstr "Servidores IPA configurados como agentes de confianza AD" - -#, fuzzy -msgid "Key wrapping algorithm" -msgstr "Algoritmo de ficha picada" - -#, fuzzy, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "Datos archivados en una bóveda" - -#, fuzzy -msgid "Retrieve data from a vault." -msgstr "Datos archivados en una bóveda" - -#, fuzzy, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "Borrados alias del host \"%(value)s\"" - -msgid "No archived data." -msgstr "" - -#, fuzzy -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" -"Comprueba si alguno de los servidores tiene un servicio DNS habilitado." - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -#, fuzzy -msgid "must be TRUE or FALSE" -msgstr "debe ser True o False" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "Principal alias" -msgstr "Alias principal" - -#, fuzzy -msgid "User password expiration" -msgstr "Caducidad de la contraseña" - -msgid "SSH public key fingerprint" -msgstr "Huella digital de clave pública SSH" - -#, fuzzy -#| msgid "trust configuration" -msgid "External IdP configuration" -msgstr "configuración de la confianza" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "Certificado de usuario codificado en Base-64" - -#, fuzzy -msgid "Certificate mapping data" -msgstr "Cadena de certificado" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -#, fuzzy -msgid "SMB Home Directory" -msgstr "Directorio principal" - -#, fuzzy -msgid "SMB Home Directory Drive" -msgstr "Base del directorio principal" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "Administrador %(manager)s no encontrado" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "puede ser a lo sumo%(len)d caracteres" - -msgid "Issuer" -msgstr "Emisor" - -#, fuzzy -msgid "Issuer of the certificate" -msgstr "archivo para almacenar" - -msgid "Subject" -msgstr "Asunto" - -#, fuzzy -msgid "Subject of the certificate" -msgstr "debe ser un certificado" - -#, fuzzy -msgid "cannot have an empty subject" -msgstr "no puede estar vacío" - -#, fuzzy -msgid "cannot specify both subject/issuer and certificate" -msgstr "no puede especificar un certificado RAW y un archivo" - -#, fuzzy -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "no puede especificar un certificado RAW y un archivo" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "Añade uno o más mapeados de certificados a la entrada de usuario." - -#, fuzzy, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "Añadidos certificados al usuario \"%(value)s\"" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "Borra uno o más mapeados de certificados de la entrada de usuario." - -#, fuzzy, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "Certificados borrados del usuario \"%(value)s\"" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -#, fuzzy -msgid "CA category" -msgstr "Categoría del equipo" - -#, fuzzy -msgid "CA category the ACL applies to" -msgstr "Categoría del equipo al que se aplica la regla" - -#, fuzzy -msgid "CAs" -msgstr "CA" - -#, fuzzy, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "Añadida regla HBAC \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "Borrada CA \"%(value)s\"" - -#, fuzzy -msgid "default CA ACL can be only disabled" -msgstr "IPA CA no puede ser deshabilitada" - -#, fuzzy, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "Modificada CA \"%(value)s\"" - -#, fuzzy -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" -"la categoría de host no puede ser establecida a 'all' mientras hay host " -"permitidos" - -#, fuzzy -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" -"la categoría de host no puede ser establecida a 'all' mientras hay host " -"permitidos" - -#, fuzzy -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" -"la categoría de usuario no puede ser establecida a 'all' mientras hay " -"usuarios permitidos" - -#, fuzzy, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "%(count)d CA coincidente" -msgstr[1] "%(count)d CAs coincidentes" - -#, fuzzy, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "Habilitada CA \"%(value)s\"" - -#, fuzzy, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "Deshabilitada CA \"%(value)s\"" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, fuzzy, python-format -msgid "%i users or groups added." -msgstr "Buscar grupos." - -msgid "users cannot be added when user category='all'" -msgstr "no se pueden añadir usuarios cuando la categoría de usuario='all'" - -#, fuzzy, python-format -msgid "%i user or group removed." -msgstr "Cantidad de miembros eliminados" - -#, fuzzy, python-format -msgid "%i users or groups removed." -msgstr "Cantidad de miembros eliminados" - -#, fuzzy, python-format -msgid "%i host or hostgroup added." -msgstr "%(count)d grupo de equipos coincidente" - -#, fuzzy, python-format -msgid "%i hosts or hostgroups added." -msgstr "Host o grupo de Host fallidos" - -msgid "hosts cannot be added when host category='all'" -msgstr "hosts no puede ser añadido con categoría de host='all'" - -#, fuzzy, python-format -msgid "%i host or hostgroup removed." -msgstr "%(count)d grupo de equipos coincidente" - -#, fuzzy, python-format -msgid "%i hosts or hostgroups removed." -msgstr "lista separada por comas de grupos de host a quitar" - -#, fuzzy, python-format -msgid "%i service added." -msgstr "% (Count) d HBAC servicios encontrados" - -#, fuzzy, python-format -msgid "%i services added." -msgstr "servicios" - -#, fuzzy -msgid "services cannot be added when service category='all'" -msgstr "no se pueden añadir usuarios cuando la categoría de usuario='all'" - -#, fuzzy, python-format -msgid "%i service removed." -msgstr "Forzar la eliminación del servidor" - -#, fuzzy, python-format -msgid "%i services removed." -msgstr "Las entradas seleccionadas han sido quitadas." - -#, fuzzy, python-format -msgid "%i profile added." -msgstr "%(count)d perfil coincidente" - -#, fuzzy, python-format -msgid "%i profiles added." -msgstr "Errores en los perfiles" - -#, fuzzy -msgid "profiles cannot be added when profile category='all'" -msgstr "hosts no puede ser añadido con categoría de host='all'" - -#, fuzzy, python-format -msgid "%i profile removed." -msgstr "%s a eliminar" - -#, fuzzy, python-format -msgid "%i profiles removed." -msgstr "Número de privilegios eliminados" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -#, fuzzy -msgid "CAs cannot be added when CA category='all'" -msgstr "hosts no puede ser añadido con categoría de host='all'" - -#, fuzzy -msgid "Remove CAs from a CA ACL." -msgstr "Borrar de CRL" - -#, fuzzy, python-format -msgid "%i CA removed." -msgstr "%s a eliminar" - -#, fuzzy, python-format -msgid "%i CAs removed." -msgstr "%s a eliminar" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" -"\n" -"Mapeando la Identidad del Certificado\n" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" -"\n" -"Gestionar la configuración y las reglas del Mapeo de Identidad del " -"Certificado.\n" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" -"\n" -"IPA soporta el uso de certificados para la autenticación. Las certificados " -"pueden ser\n" -"bien almacenados en la entrada del usuario (el certificado completo en el " -"atributo\n" -"usercertificate) o simplemente enlazado a la entrada de usuario a través de " -"un\n" -"mapeo. Esta código habilita la gestión de las reglas permitiendo enlazar un\n" -"certificado a una entrada de usuario.\n" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" -"\n" -" Mostrar la configuración global del Mapeo de Identidad de Certificado:\n" -" ipa certmapconfig-show\n" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" -"\n" -" Modificar la configuración global del Mapeo de Identidad de Certificado:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" -"\n" -" Crea una nueva Regla de Mapeo de Identidad de Certificado:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" -"\n" -" Modificar una Regla de Identidad de Certificado:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" -"\n" -" Deshabilitar una Regla de Mapeo de Identidad de Certificado:\n" -" ipa certmaprule-disable rule1\n" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" -"\n" -" Habilitar una Regla de Mapeo de Identidad de Certificado:\n" -" ipa certmaprule-enable rule1\n" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" -"\n" -" Muestra información sobre una Regla de Mapeo de Identidad de Certificado:\n" -" ipa certmaprule-show rule1\n" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" -"\n" -" Encuentra todas las Reglas de Mapeo de Identidad de Certificado con el " -"dominio especificado:\n" -" ipa certmaprule-find --domain example.com\n" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" -"\n" -" Borra una Regla de Mapeo de Identidad de Certificado:\n" -" ipa certmaprule-del rule1\n" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" -"El dominio(s) \"%s\" no puede ser usado para aplicar la comprobación " -"altSecurityIdentities." - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" -"La regla de mapeo con altSecurityIdentities debería ser aplicada a un " -"dominio Active Directory de confianza pero ningún dominio fue asociado con " -"la regla." - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "El dominio %s no es un dominio IPA ni un dominio de confianza." - -msgid "Certificate Identity Mapping configuration options" -msgstr "Opciones de configuración del Mapeo de Identidad de Certificado" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "Configuración Global del Mapeo de Identidad de Certificado" - -msgid "Prompt for the username" -msgstr "Pedir el nombre de usuario" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" -"Pedir el nombre de usuario cuando múltiples identidades están mapeadas a un " -"certificado" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "Modificar la configuración de Mapeo de Identidad de Certificado." - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "Muestra la configuración actual del Mapeo de Identidad de Certificado." - -msgid "Certificate Identity Mapping Rules" -msgstr "Reglas de Mapeo de Identidad de Certificado" - -msgid "Certificate Identity Mapping Rule" -msgstr "Regla de Mapeo de Identidad de Certificado" - -msgid "Certificate Identity Mapping Rule name" -msgstr "Nombre de Regla de Mapeo de Identidad de Certificado" - -msgid "Certificate Identity Mapping Rule description" -msgstr "Descripción de la Regla de Mapeo de Identidad de Certificado" - -msgid "Mapping rule" -msgstr "Regla de mapeo" - -msgid "Rule used to map the certificate with a user entry" -msgstr "Regla usada para mapear el certificado con una entrada de usuario" - -msgid "Matching rule" -msgstr "Regla de coincidencia" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" -"Regla usada para comprobar si un certificado puede ser usado para " -"autenticación" - -msgid "Domain where the user entry will be searched" -msgstr "Dominio donde se buscará la entrada de usuario" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" -"Prioridad de la regla (el número más alto significa la prioridad más baja" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "Crear una nueva Regla de Mapeo de Identidad de Certificado." - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Añadida Regla de Mapeo de Identidad de Certificado \"%(value)s\"" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "Modificar una Regla de Mapeo de Identidad de Certificado." - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Regla de Mapeo de Identidad de Certificado modificada \"%(value)s\"" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "Buscar Reglas de Mapeo de Identidad de Certificado." - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "%(count)d Regla de Mapeo de Identidad de Certificado coincidente" -msgstr[1] "%(count)d Reglas de Mapeo de Identidad de Certificado coincidentes" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" -"Visualizar información sobre una Regla de Mapeo de Identidad de Certificado." - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "Borrar una Regla de Mapeo de Identidad de Certificado." - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Regla de Mapeo de Identidad de Certificado \"%(value)s\" borrada" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "Habilitar una Regla de Mapeo de Identidad de Certificado." - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Regla de Mapeo de Identidad de Certificado \"%(value)s\" habilitada" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "Deshabilitar una Regla de Mapeo de Identidad de Certificado." - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Regla de Mapeo de Identidad de Certificado \"%(value)s\" deshabilitada" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "Fallo al conectar sssd sobre SystemBus. Vea detalles en error_log" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" -"Fallo al encontrar usuarios sobre SystemBus. Vea detalles en error_log" - -msgid "User logins" -msgstr "Accesos de usuario" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" -"\n" -" Buscar usuarios que coincidan con el certificado suministrado.\n" -"\n" -" Este comando se basa en SSSD para recuperar la lista de los usuarios\n" -" coincidentes y puede devolver los datos en cache. Para más información " -"sobre \n" -" la purga del cache SSSD, vea por favor la documentación sss_cache.\n" -" " - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "%(count)s usuario coincidente" -msgstr[1] "%(count)s usuarios coincidentes" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -#, fuzzy -msgid "must be at least 10" -msgstr "debe ser al menos 1" - -msgid "configuration options" -msgstr "opciones de configuración" - -msgid "Configuration" -msgstr "Configuración" - -#, fuzzy -msgid "Maximum hostname length" -msgstr "Largo máximo para nombre de usuario" - -msgid "Enable adding subids to new users" -msgstr "" - -#, fuzzy -msgid "IPA masters" -msgstr "" -"\n" -"IPA servers\n" - -msgid "List of all IPA masters" -msgstr "" - -#, fuzzy -msgid "Hidden IPA masters" -msgstr "Incluir entradas IPA maestro" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -#, fuzzy -msgid "IPA CA servers" -msgstr "Servidores IPA DNS" - -#, fuzzy -msgid "IPA servers configured as certificate authority" -msgstr "Servidor IPA configurado como clave maestra DNSSec" - -#, fuzzy -msgid "Hidden IPA CA servers" -msgstr "Servidores IPA DNS" - -#, fuzzy -msgid "Hidden IPA servers configured as certificate authority" -msgstr "Servidor IPA configurado como clave maestra DNSSec" - -#, fuzzy -msgid "IPA CA renewal master" -msgstr "No se puede ocultar el maestro de renovación de CA." - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -#, fuzzy -msgid "IPA servers configured as key recovery agent" -msgstr "Servidores IPA configurados como agentes de confianza AD" - -#, fuzzy -msgid "Hidden IPA KRA servers" -msgstr "Servidores IPA DNS" - -#, fuzzy -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "Servidores IPA configurados como agentes de confianza AD" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -msgid "IPA DNS servers" -msgstr "Servidores IPA DNS" - -#, fuzzy -msgid "IPA servers configured as domain name server" -msgstr "Servidor IPA configurado como clave maestra DNSSec" - -#, fuzzy -msgid "Hidden IPA DNS servers" -msgstr "Servidores IPA DNS" - -#, fuzzy -msgid "Hidden IPA servers configured as domain name server" -msgstr "Lista de los maestros IPA configurados como servidores DNS" - -msgid "IPA DNSSec key master" -msgstr "Clave maestra IPA DNSSec" - -#, fuzzy -msgid "DNSec key master" -msgstr "Clave maestra IPA DNSSec" - -#, fuzzy -msgid "Setup SID configuration" -msgstr "configuración de la confianza" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -#, fuzzy -msgid "Add SIDs" -msgstr "Vista ID asignada" - -msgid "Add SIDs for existing users and groups" -msgstr "" - -#, fuzzy -msgid "NetBIOS name of the IPA domain" -msgstr "Nombre del dominio de confianza" - -#, fuzzy -msgid "Empty domain is not allowed" -msgstr "las opciones no están permitidas" - -#, fuzzy, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "nombre de dominio no válido: %s" - -#, fuzzy, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "Borrada información sobre el dominio de confianza \"%(value)s\"" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -#, fuzzy -msgid "not allowed to enable SID generation" -msgstr "no está permitido llevar a cabo la operación: %s" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -#, fuzzy -msgid "Failed to call DBus" -msgstr "Fallo al añadir" - -#, fuzzy -msgid "Configuration of SID failed. See details in the error log" -msgstr "" -"No se pudo recuperar dominios del bosque de confianza. Vea detalles en " -"error_log" - -msgid "The group doesn't exist" -msgstr "El grupo no existe" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "atributo \"%s\" no permitido" - -msgid "May not be empty" -msgstr "Puede no estar vacío" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, fuzzy, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "error sobre el servidor '%(server)s': %(error)s" - -#, fuzzy -msgid "SELinux user map default user not in order list" -msgstr "" -"Usuario SELinux %(user)s no encontrado en la lista de pedidos (en config)" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" -"\n" -"Sistema de Nombre de Dominio (DNS)\n" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" -"\n" -"Gestionar zona DNS y registro de recursos.\n" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" -"\n" -"TIPOS DE ZONA SOPORTADOS\n" -"\n" -" * Zona maestro (dnszone-*), contiene datos autoritativos.\n" -" * Zona de información (dnsforwardzone-*), envía solicitudes a otros " -"servidores \n" -" (un conjunto de servidores DNS).\n" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" -"\n" -"USANDO OPCIONES ESTRUCTURADAS POR TIPO\n" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" -"\n" -"Hay muchos tipos de DNS RR estructurados donde los datos DNS almacenados\n" -"en el servidor LDAP no son solo un valor escalar, por ejemplo una dirección " -"IP o\n" -"un nombre de dominio, pero es una estructura de datos que puede ser con\n" -"frecuencia compleja. Un buen ejemplo es un registro LOC [RFC1876] que " -"consta\n" -"de muchas partes obligatorias y opcionales (grados,minutos, segundos de " -"latitud y longitud, altitud o precisión).\n" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" -"\n" -"Puede ser difícil manipular estos registros DNS sin hacer un error e " -"introducir un\n" -"valor no válido. El módulo DNS suministra una abstracción sobre estos " -"registros\n" -"brutos y permite manipular cada tipo RR con opciones específicas. Por cada " -"tipo\n" -"RR soportado, el módulo DNS suministra una opción estándar para manipular\n" -"unos registros brutos con el formato ---rec, e.g. --mx-rec y " -"opciones\n" -"especiales para cada parte de la estructura RR con formato ---" -",\n" -"e. g. --mx-preference and --mx-exchanger.\n" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" -"\n" -"Cuando se añade un registro, cualquiera de las opciones RR especificas o\n" -"estándar para un valor bruto se puede usar, simplemente no deben combinarse " -"en\n" -"operación de adicción. Cuando se modifica una entrada existente, se pueden " -"usar\n" -"nuevas opciones RR para cambiar una parte de un registro DNS, donde la " -"opción\n" -"estándar para el valor bruto se usa para especificar el valor modificado. El " -"siguiente\n" -"ejemplo muestra una modificación de la preferencia de un registro MX de 0 a " -"1 en\n" -"un registro sin modificación del intercambiador:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" -"\n" -"\n" -"EJEMPLOS:\n" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" -"\n" -" Añadir nueva zona:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" -"\n" -" Añadir permiso de sistema que puede ser usado para delegación de privilegio " -"por zona:\n" -" ipa dnszone-add-permission example.com\n" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" -"\n" -" Modificar la zona para permitir actualizaciones dinámicas desde los propios " -"registros del host en el reino EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" -"\n" -" Este es el equivalente:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" -"\n" -" Modificar la zona para permitir transferencias de zona solo para la red " -"local:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" -"\n" -" Añadir nueva zona reversa especificada por la dirección IP de red:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" -"\n" -" Añadir segundo servidor de nombres para example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" -"\n" -" Añadir un servidor de correo para example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" -"\n" -" Añadir otro registro usando las opciones específicas de registro MX:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" -"\n" -" Añadir otro registro usando el modo interactivo (iniciado cuando dnsrecord-" -"add, dnsrecord-mod,\n" -" o dnsrecord-del son ejecutados sin opciones:\n" -" ipa dnsrecord-add example.com @\n" -" Por favor elija un tipo de recurso de registro DNS a añadir\n" -" Los tipos más comunes para este tipo de zona son: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" -"\n" -" Borrar ujn servidor de nombres previamente añadido desde example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" -"\n" -" Añadir registro LOC para example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" -"\n" -" Añadir un nuevo registro A para www.example.com. Crear un registro inverso " -"en la zona\n" -" inversa apropiada también. En esta caso un registro PTR \"2\" apuntando a " -"www.example.com\n" -" será creado en la zona 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" -"\n" -" Añadir nuevo registro PTR para www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" -"\n" -" Añadir nuevos registros SRV para servidores LDAP. Tres cuartos de las " -"peticiones\n" -"debería ir a fast.example.com, un cuarto a slow.example.com. Si ninguno " -"está\n" -"disponible conmutar a backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" -"\n" -" El modo interactivo puede ser usado para modificación fácil:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No se suministra opción para modificar registro específico.\n" -" El registro actual DNS contiene:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modificar registro SRV '0 3 389 fast.example.com'? Si/No (predeterminado " -"No):\n" -" Modificar registro SRV '0 1 389 slow.example.com'? Si/No (predeterminado " -"No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" -"\n" -" Después de esta modificación tres quintos de las peticiones deberían ir a \n" -" fast.example.com y dos quintos a slow.example.com.\n" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" -"\n" -" Un ejemplo del modom interactivo para el comando dnsrecord-del:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" -"\n" -" Mostrar zona example.com:\n" -" ipa dnszone-show example.com\n" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" -"\n" -" Encontrar una zona con \"example\" en su nombre de dominio:\n" -" ipa dnszone-find example\n" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" -"\n" -" Encontrar registros para recursos con \"www\" en su nombre en la zona " -"example.com:\n" -" ipa dnsrecord-find example.com www\n" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" -"\n" -" Encontrar registros A con el valor 192.0.2.2 en zona example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" -"\n" -" Mostrar registros para el recurso www en zona example.com\n" -" ipa dnsrecord-show example.com www\n" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" -"\n" -" Delegar zona sub.example a otro servidor de nombres:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" -"\n" -" Borrar zona example.com con todos los registros de recursos:\n" -" ipa dnszone-del example.com\n" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" -"\n" -" Si se configura un reenviador global, todas las peticiones para las que " -"este\n" -" servidor no está autorizado (e.g. sub.example.com) serán enrutados al " -"reenviador global.\n" -" La configuración de reenvío global se puede anular por zona.\n" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" -"\n" -" La semántica de reenvío en IPA coincide con la semántica en BIND y depende " -"del\n" -" tipo de zona:\n" -" * Zona Maestra: BIND local responde con autoridad a las consultas de " -"datos en la\n" -" zona dada (incluyendo las respuestas de autoridad NXDOMAIN) y el reenvío\n" -" afecta solo a las peticiones para nombres debajo de los cortes de zona " -"(registros \n" -" NS) de las zonas servidas localmente.\n" -"\n" -" * Zona de Reenvío:la zona de reenvío no contiene datos autorizados. las\n" -" las consultas de reenvío BIND, que no pueden ser contestadas desde su " -"cache\n" -" local, para configurar reenviadores.\n" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" -"\n" -" Semánticas de la opción --forward-policy:\n" -" * none - deshabilita el reenvío para una zona dada.\n" -" * first - reenvía todas las peticiones a los reenviadores configurados. " -"Si fallan,\n" -" resuelven usando los servidores raíz DNS.\n" -" * only - reenvía todas las peticiones a los reenviadores configurados y " -"si fallan,\n" -" devuelve un fallo.\n" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" -"\n" -" Deshabilita el reenvío global para el sub-árbol dado:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" -"\n" -" Esta configuración reenvia todas las peticiones para nombres fuera del sub " -"árbol example.com\n" -" a reenviadores globales. Se utiliza el proceso de resolución recursiva " -"normal para \n" -" los nombres dentro del sub-árbol example.com (i.e. registros NS son " -"seguidos etc.).\n" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" -"\n" -" Reenvía todas las peticiones para la zona external.example.com a otro " -"reenviador\n" -" usando una política \"first\" (enviará las peticiones al reenviador " -"seleccionado y si\n" -" no hay respuesta usará los servidores raíz globales):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" -"\n" -" Cambia la política de reenvío para external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" -"\n" -" Muestra la zona de reenvío external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" -"\n" -" Lista todas las zonas de reenvío:\n" -" ipa dnsforwardzone-find\n" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" -"\n" -" Borra la zona de reenvío external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" -"\n" -" Resuelve un nombre de host para ver si existe (añadirá el dominio IPA\n" -" predeterminado si no se ha incluido ninguno):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" -"\n" -"\n" -"CONFIGURACIÓN GLOBAL DNS\n" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" -"\n" -"La configuración de DNS que se pasa al script de instalación de la línea de\n" -"comandos está almacenado en un fichero de configuración local en cada " -"servidor\n" -"IPA donde el servicio DNS está configurado. Estos ajustes locales pueden ser " -"anulados con una configuración común almacenada en el servidor LDAP:\n" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" -"\n" -" Muestra la configuración DNS global:\n" -" ipa dnsconfig-show\n" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" -"\n" -" Modifica la configuración DNS global y establece una lista de reenviadores " -"globales:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" - -msgid "invalid IP network format" -msgstr "formato no válido de red IP" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "cada elemento ACL debe estar terminado con un punto y coma" - -msgid "invalid address format" -msgstr "formato de dirección no válido" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" -"formato esperado: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" - -msgid "algorithm value: allowed interval 0-255" -msgstr "valor del algoritmo: intervalo permitido 0-255" - -msgid "flags value: allowed interval 0-255" -msgstr "valor de banderas: intervalo permitido 0-255" - -msgid "iterations value: allowed interval 0-65535" -msgstr "iterations value: intervalo permitido 0-65535" - -#, python-format -msgid "salt value: %(err)s" -msgstr "valor salt: %(err)s" - -msgid "invalid domain-name: not fully qualified" -msgstr "nombre de dominio no válido: no totalmente cualificado" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "no debe ser un nombre de dominio comodín (RFC 4592 sección 4)" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" -"Todos los servidores de nombre fallaron al responder a la consulta sobre la " -"zona reversa DNS %(revdns)s" - -#, fuzzy, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" -"Todos los servidores de nombre fallaron al responder a la consulta sobre la " -"zona reversa DNS %(revdns)s" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" -"Zona reversa DNS %(revzone)s para dirección IP %(addr)s no está manejada por " -"este servidor" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "Zona DNS %(zone)s no encontrado" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "Dirección IP %(ip)s ya está asignada en el dominio %(domain)s." - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" -"Registro reverso para dirección IP %(ip)s ya existe en la zona reversa " -"%(zone)s." - -#, python-format -msgid "%s record" -msgstr "%s registro" - -#, python-format -msgid "Raw %s records" -msgstr "Registros brutos %s" - -#, python-format -msgid "%s Record" -msgstr "%s registro" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "(vea detalles en el RFC %s)" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "«%s» es una parte requerida del registro DNS" - -msgid "Invalid number of parts!" -msgstr "El número de partes no es válido." - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "Tipo DNS RR \"%s\" no es soportado por el complemento bind-dyndb-ldap" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "el formato se debe especificar como \"%(format)s\" %(rfcs)s" - -msgid "Create reverse" -msgstr "Crear reversa" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "No puede crear registro reverso para \"%(value)s\": %(exc)s" - -msgid "Exchanger" -msgstr "Intercambiador" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" -"\"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] [siz[\"m" -"\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -"donde:\n" -"d1: [0 .. 90] (grados de latitud)\n" -"d2: [0 .. 180] (grados de longitud)\n" -"m1, m2: [0 .. 59] (minutos de latitud/longitud)\n" -"s1, s2: [0 .. 59.999] (segundos de latitud/longitud)\n" -"alt: [-100000.00 .. 42849672.95] BY .01 (altitud en metros)\n" -"siz, hp, vp: [0 .. 90000000.00] (tamaño/precisión en metros)\n" -"Vea RFC 1876 para detalles" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "'%(required)s' no debe estar vacío cuando '%(name)s' está establecido" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "las banderas deben ser una de \"S\", \"A\", \"U\" o \"P\"" - -msgid "Priority (order)" -msgstr "Prioridad (orden)" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" -"El número más bajo significa la prioridad más alta. Los clientes intentarán " -"contactar con el servidor con la prioridad de número más bajo que ellos " -"puedan alcanzar." - -msgid "Relative weight for entries with the same priority." -msgstr "Peso relativo de las entradas con la misma prioridad." - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "este valor no sigue el formato de hora \"YYYYMMDDHHMMSS\"" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" -"El número más bajo significa la prioridad más alta. Los clientes intentarán " -"contactar con la URI con la prioridad numerada más bajo que puedan alcanzar." - -msgid "Target Uniform Resource Identifier" -msgstr "Identificador Uniforme de Recursos Objetivo" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "Identificador Uniforme de Recursos Objetivo de acuerdo al RFC 3986" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" -"El servidor de nombre '%(host)s' no tiene su correspondiente registro A/AAAA" - -msgid "Managedby permission" -msgstr "Gestionado con permiso" - -msgid "cannot be used when a zone is specified" -msgstr "" - -msgid "Only one zone type is allowed per zone name" -msgstr "Solo se permite un tipo de zona por nombre de zona" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "Añadido permiso de sistema \"%(value)s\"" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "permiso \"%(value)s\" ya existe" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "Quitado permiso de sistema \"%(value)s\"" - -msgid "DNS zone" -msgstr "zona DNS" - -msgid "DNS zones" -msgstr "zonas DNS" - -msgid "DNS Zones" -msgstr "Zonas DNS" - -msgid "DNS Zone" -msgstr "Zona DNS" - -msgid "Default time to live" -msgstr "Tiempo de vida predeterminado" - -msgid "Time to live for records without explicit TTL definition" -msgstr "Tiempo de vida para los registros sin definición explícita TTL" - -msgid "setting Authoritative nameserver" -msgstr "Fijando el servidor de nombre Autoritario" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "ISe usa solo para el establecimiento del atributo SOA MNAME." - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "Registro(s) NS puede(n) ser editado(s) en zona apéndice - '@'. " - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" -"El servidor de nombre para la zona reversa no puede ser un nombre DNS " -"relativo" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "Borrada zona DNS \"%(value)s\"" - -msgid "is required" -msgstr "se requiere" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "Zona de DNS desactivada \"%(value)s\" " - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "Zona DNS habilitada \" %(value)s \"" - -msgid "DNS resource record" -msgstr "Registro de recursos DNS" - -msgid "DNS resource records" -msgstr "Registros de recurso DNS" - -msgid "DNS Resource Records" -msgstr "Registros de Recursos DNS" - -msgid "DNS Resource Record" -msgstr "Registro de Recurso de DNS" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "El registro DS no debe estar en zona apéndice (RFC 4035 sección 2.4)" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" -"datos fuera de zona: el nombre de registro debe ser un subdominio de la zona " -"o un nombre relativo" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" -"el propietario de registros %(types)s no debería ser un nombre de dominio " -"comodín (RFC 4592 sección 4)" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" -"La zona reversa %(name)s requiere exactamente %(count)d direcciones IP " -"componentes, %(user_count)d dado" - -msgid "only master zones can contain records" -msgstr "solo las zonas maestras pueden contener registros" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "solo se permite un registro CNAME por nombre (RFC 2136, sección 1.1.5)" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" -"Registro CNAME no está permitido que coexista con ningún otro registro (RFC " -"1034, sección 3.6.2)" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "solo se permite un registro DNAME por nombre (RFC 6672, sección 2.4)" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" -"El registro NS no está permitido que coexista con un registro %(type)s " -"excepto cuando se localice en un registro de zona raíz (RFC 2181, sección " -"6.1)" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" -"El registro DS requiere coexistir con un registro NS record (RFC 4592 " -"sección 4.6, RFC 4035 sección 2.4)" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" -"El valor crudo de un registro DNS fue establecido siempre por la opción " -"\"%(name)s\"" - -msgid "DNS zone root record cannot be renamed" -msgstr "El registro DNS de zona raíz no puede ser renombrado" - -msgid "DNS records can be only updated one at a time" -msgstr "Los registros DNS solo pueden ser actualizados de uno en uno" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "Registro eliminado \"%(value)s\"" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "No se puede eliminar el registro de zona «%s»" - -#, python-format -msgid "Found '%(value)s'" -msgstr "Ha sido encontrado '%(value)s'" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "No ha sido encontrado el equipo anfitrión '%(host)s' " - -msgid "DNS configuration options" -msgstr "Opciones de configuración de DNS" - -msgid "DNS Global Configuration" -msgstr "Configuración global de DNS" - -msgid "IPA DNS version" -msgstr "Versión IPA DNS" - -msgid "List of IPA masters configured as DNS servers" -msgstr "Lista de los maestros IPA configurados como servidores DNS" - -msgid "IPA server configured as DNSSec key master" -msgstr "Servidor IPA configurado como clave maestra DNSSec" - -msgid "Global DNS configuration is empty" -msgstr "La configuración global DNS está vacía" - -msgid "DNS forward zone" -msgstr "Zona de envío DNS" - -msgid "DNS forward zones" -msgstr "Zonas de envío DNS" - -msgid "DNS Forward Zones" -msgstr "Zonas de Envío DNS" - -msgid "DNS Forward Zone" -msgstr "Zona de Envío DNS" - -msgid "Please specify forwarders." -msgstr "Por favor especifique los reenviadores." - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "Borrada forma de reenvío DNS \"%(value)s\"" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "Deshabilitada zona de reenvío DNS \"%(value)s\"" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "Habilitada zona de reenvío DNS \"%(value)s\"" - -msgid "IPA DNS records" -msgstr "Registros IPA DNS" - -msgid "IPA location records" -msgstr "Registros de ubicación IPA" - -msgid "Update location and IPA server DNS records" -msgstr "Actualizar registros de ubicación y servidor IPA DNS" - -msgid "Result of the command" -msgstr "Resultado del comando" - -msgid "Dry run" -msgstr "Correr en seco" - -msgid "Do not update records only return expected records" -msgstr "No actualizar registros solo devolver registros esperados" - -msgid "The deny type has been deprecated." -msgstr "El tipo deny ha quedado obsoleto." - -msgid "HBAC rules" -msgstr "Reglas HBAC" - -msgid "HBAC Rules" -msgstr "Reglas HBAC" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "Añadida regla HBAC \"%(value)s\"" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "Suprimida regla HBAC \"%(value)s\"" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "Modificada regla HBAC \"%(value)s\"" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "%(count)d regla coincidente de HBAC" -msgstr[1] "%(count)d reglas coincidentes de HBAC " - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "Habilitada regla HBAC \"%(value)s\"" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" regla HBAC desactivada " - -msgid "Access time" -msgstr "Hora de acceso" - -#, fuzzy -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "Añadir hosts objetivos y grupos de host a una regla HBAC." - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" -"\n" -"Hosts/Máquinas\n" -"\n" -"Un host representa una máquina. Puede ser usado en distintos contextos:\n" -"- las entradas de servicio están asociadas con un host\n" -"- un host almacena el host/ servicio principal\n" -"- un host puede ser usado en reglas de Control de Acceso basado en Host " -"(HBAC)\n" -"- cada cliente inscrito genera una entrada de host\n" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" -"\n" -"INSCRIPCIÓN:\n" -"\n" -"Hay tres escenarios de inscripción cuando se inscribe un nuevo cliente:\n" -"\n" -"1. Se está inscribiendo como administrador total. La entrada de host puede " -"existir o\n" -" no. Un administrador total es miembro del rol hostadmin role o del grupo " -"admins.\n" -"2. Se está inscribiendo como administrador limitado. El host debe existir " -"ya. Un\n" -" administrador limitado es miembro de un rol con el privilegio Host " -"Enrollment.\n" -"3. El host ha sido creado con una contraseña de una vez.\n" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" -"\n" -"RE-INSCRIPCIÓN:\n" -"\n" -"El host que ha sido inscrito en algún punto y pierde su configuración (e.g. " -"VM destruido) puede ser reinscrito.\n" -"\n" -"Para mas información, consulte las páginas de manual para ipa-client-" -"install.\n" -"\n" -"Un host puede almacenar opcionalmente información como donde está " -"localizado,\n" -"el SO que ejecuta, etc.\n" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" -"\n" -" Añadir un nuevo host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" -"\n" -" Borrar un host:\n" -" ipa host-del test.example.com\n" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" -"\n" -" Añadir un nuevo host con una contraseña de un uso:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" -"\n" -" Añadir un nuevo host con una contraseña aleatoria de un uso:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" -"\n" -" Modificar información sobre un host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" -"\n" -" Quitar las claves públicas SSH de un host y actualizar DNS para reflejar " -"este cambio:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" -"\n" -" Deshabilitar la clave Kerberos de host, el certificado SSL y todos sus " -"servicios:\n" -" ipa host-disable test.example.com\n" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" -"\n" -" Añadir un host que pueda manejar la tabla de teclas y certificado del " -"host:\n" -" ipa host-add-managedby --hosts=test2 test\n" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" -"\n" -" Permitir al usuario crear una tabla de teclas:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" - -msgid "Host" -msgstr "Host" - -msgid "Base-64 encoded host certificate" -msgstr "Certificado de host codificado en Base-64" - -msgid "Serial Number" -msgstr "Número de serie" - -msgid "Serial Number (hex)" -msgstr "N.º de serie (hex.)" - -msgid "Not Before" -msgstr "No antes de" - -msgid "Not After" -msgstr "No luego de" - -msgid "Fingerprint (SHA1)" -msgstr "Huella digital (SHA1)" - -msgid "Fingerprint (SHA256)" -msgstr "Huella digital (SHA256)" - -msgid "Revocation reason" -msgstr "Motivo de la revocación" - -msgid "Authentication Indicators" -msgstr "Indicadores de Autenticación" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "Ha sido agregado el equipo \"%(value)s\"" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Ha sido eliminado el equipo \"%(value)s\"" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" -"Borrar los registros A, AAAA, SSHFP y PTR del host(s) gestionado por IPA DNS" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "Sin registros A, AAAA, SSHFP o PTR encontrados." - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Ha sido modificado el equipo \"%(value)s\"" - -msgid "Password cannot be set on enrolled host." -msgstr "La contraseña no puede ser fijada en el host matriculado." - -msgid "cn is immutable" -msgstr "cn es inmutable" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "%(count)d equipo coincidente" -msgstr[1] "%(count)d equipos coincidentes" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "Host desactivado \"%(value)s\"" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "Añadidos certificados a host \"%(value)s\"" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "Borrados certificados del host \"%(value)s\"" - -msgid "Add new principal alias to host entry" -msgstr "Añade un nuevo alias principal a una entrada de host" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Añadidos nuevos alias al host \"%(value)s\"" - -msgid "Remove principal alias from a host entry" -msgstr "Borra alias principal de la entrada de host" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "Borrados alias del host \"%(value)s\"" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| "Manage RADIUS Proxy Servers.\n" -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" -"\n" -"Gestionar Servidores Proxy RADIUS.\n" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Find all servers whose entries include the string \"example.com\":\n" -#| " ipa radiusproxy-find example.com\n" -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" -"\n" -" Encontrar todos los servidores cuyas entradas incluyan la cadena \"example." -"com\":\n" -" ipa radiusproxy-find example.com\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Examine the configuration:\n" -#| " ipa radiusproxy-show MyRADIUS\n" -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" -"\n" -" Examinar la configuración:\n" -" ipa radiusproxy-show MyRADIUS\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Change the secret:\n" -#| " ipa radiusproxy-mod MyRADIUS --secret\n" -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" -"\n" -" Cambiar el secreto:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Delete a Certificate Identity Mapping Rule:\n" -#| " ipa certmaprule-del rule1\n" -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" -"\n" -" Borra una Regla de Mapeo de Identidad de Certificado:\n" -" ipa certmaprule-del rule1\n" - -msgid "Invalid URI: not an https scheme" -msgstr "" - -msgid "Invalid URI: missing netloc" -msgstr "" - -#, fuzzy -msgid "Identity Provider server" -msgstr "Hacer ping a un servidor remoto." - -#, fuzzy -msgid "Identity Provider servers" -msgstr "Hacer ping a un servidor remoto." - -#, fuzzy -#| msgid "Remote server name" -msgid "Identity Provider server name" -msgstr "Nombre del servidor remoto" - -#, fuzzy -#| msgid "Authority ID" -msgid "Authorization URI" -msgstr "ID de la Autoridad" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -#, fuzzy -#| msgid "Token ID" -msgid "Token URI" -msgstr "ID de ficha" - -#, fuzzy -#| msgid "Mount point" -msgid "Token endpoint" -msgstr "Punto de montaje" - -#, fuzzy -#| msgid "User login" -msgid "User info URI" -msgstr "Ingreso de usuario" - -#, fuzzy -#| msgid "Token serial (informational only)" -msgid "User information endpoint" -msgstr "Ficha serie (solo informativa)" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -#, fuzzy -#| msgid "Security Identifier" -msgid "Client identifier" -msgstr "Identificador de Seguridad" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -#, fuzzy -#| msgid "Add a new RADIUS proxy server." -msgid "Add a new Identity Provider server." -msgstr "Añadir un nuevo servidor proxy RADIUS." - -#, fuzzy, python-format -#| msgid "Added RADIUS proxy server \"%(value)s\"" -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "Añadido servidor proxy RADIUS \"%(value)s\"" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "Organización" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -#, fuzzy -#| msgid "Base DN" -msgid "Base URL" -msgstr "Base DN" - -msgid "Base URL for IdP provider templates" -msgstr "" - -#, fuzzy -#| msgid "Unknown Error" -msgid "unknown provider" -msgstr "Error Desconocido" - -#, fuzzy -#| msgid "Request is missing \"method\"" -msgid "value is missing" -msgstr "La petición está con \"method\" desaparecido" - -#, fuzzy -#| msgid "cannot specify both raw certificate and file" -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "no puede especificar un certificado RAW y un archivo" - -#, fuzzy -#| msgid "Delete an IPA service." -msgid "Delete an Identity Provider server." -msgstr "Borrar un servicio IPA." - -#, fuzzy, python-format -#| msgid "Deleted IPA server \"%(value)s\"" -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "Eliminado servidor IPA \"%(value)s\"" - -#, fuzzy -#| msgid "Modify an existing IPA service." -msgid "Modify an Identity Provider server." -msgstr "Modificar un servicio IPA existente." - -#, fuzzy, python-format -#| msgid "Modified IPA server \"%(value)s\"" -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "Modificado servidor IPA \"%(value)s\"" - -#, fuzzy -#| msgid "Search for IPA servers." -msgid "Search for Identity Provider servers." -msgstr "Buscar servidores IPA." - -#, fuzzy, python-format -#| msgid "%(count)d IPA server matched" -#| msgid_plural "%(count)d IPA servers matched" -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "%(count)d servidor IPA coincide" -msgstr[1] "%(count)d servidores IPA coinciden" - -#, fuzzy -#| msgid "Display information about an IPA service." -msgid "Display information about an Identity Provider server." -msgstr "Mostrar información sobre un servicio IPA." - -msgid "Internationalization messages" -msgstr "Mensajes de internacionalización" - -msgid "Your session has expired. Please log in again." -msgstr "Su sesión ha expirado. Por favor acceda otra vez." - -msgid "Apply" -msgstr "Aplicar" - -msgid "Rebuild auto membership" -msgstr "Reconstruir auto membresía" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "¿Está seguro de que quiere reconstruir la auto membresía?" - -msgid "Are you sure you want to proceed with the action?" -msgstr "¿Está seguro de que desea seguir adelante con la acción?" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "¿Está seguro de que desea borrar ${object}?" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "¿Está seguro de que desea deshabilitar ${object}?" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "Está seguro de que desea habilitar ${object}?" - -msgid "Actions" -msgstr "Acciones" - -msgid "Add" -msgstr "Agregar" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "${count} item(s) añadido" - -msgid "Direct Membership" -msgstr "Afiliación Directa" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "Filtro disponible ${other_entity}" - -msgid "Indirect Membership" -msgstr "Afiliación Indirecta" - -msgid "No entries." -msgstr "Sin entradas." - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "Mostrando ${start} a ${end} de ${total} entradas." - -msgid "Remove" -msgstr "Borrar" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "${count} item(s) borrado" - -msgid "Show Results" -msgstr "Mostrar Resultados" - -msgid "Authentication indicators" -msgstr "Indicadores de autenticación" - -msgid "Authentication indicator" -msgstr "Indicador de autenticación" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" -"

Método implícito (conraseña) será usado si no se ha elegido método.

Contraseña + Dos factores: LDAP y Kerberos permiten la " -"autenticación con uno de lostipos de autenticación pero Kerberos usa un " -"método de pre autenticacion que requiere usar armadura ccache.

RADIUS con otro tipo: Kerberos siempre usa RADIUS, " -"pero LDAP nunca lo hace. LDAP solo reconoce las opciones de contraseña y dos " -"factores.

" - -msgid "Add Custom Authentication Indicator" -msgstr "Añadir Indicador de Autenticación Personal" - -msgid "Two factor authentication (password + OTP)" -msgstr "Autenticación dos factores (contraseña + OTP)" - -msgid "RADIUS" -msgstr "RADIUS" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "External Identity Provider" -msgstr "" - -msgid "Disable per-user override" -msgstr "Deshabilitar la anulación por uso" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" -"

Configuración por uso, sobre escribe la configuracion global si cualquier " -"opción esta marcada.

Contraseña + Dos factores: LDAP " -"y Kerberos permiten la autenticación con uno de lostipos de autenticación " -"pero Kerberos usa un método de pre autenticacion que requiere usar armadura " -"ccache

RADIUS con otro tipo: Kerberos siempre usa " -"RADIUS, pero LDAP nunca lo hace. LDAP solo reconoce las opciones de " -"autenticación contraseña y dos factores.

" - -msgid "About" -msgstr "Sobre" - -msgid "Activate" -msgstr "Activar" - -msgid "Add and Add Another" -msgstr "Agregar y agregar otro" - -msgid "Add and Close" -msgstr "Añadir y cerrar" - -msgid "Add and Edit" -msgstr "Agregar y Editar" - -msgid "Add Many" -msgstr "Añadir Muchos" - -msgid "Back" -msgstr "Atrás" - -msgid "Cancel" -msgstr "Cancelar" - -msgid "Clear" -msgstr "Limpiar" - -msgid "Clear all fields on the page." -msgstr "Limpiar todos los campos en la página." - -msgid "Close" -msgstr "Cerrar" - -msgid "Disable" -msgstr "Desactivar" - -msgid "Download" -msgstr "Descargar" - -msgid "Download certificate as PEM formatted file." -msgstr "Descargar certificado como fichero formateado PEM." - -msgid "Edit" -msgstr "Editar" - -msgid "Enable" -msgstr "Activar" - -msgid "Find" -msgstr "Buscar" - -msgid "Get" -msgstr "Obtener" - -msgid "Hide" -msgstr "Ocultar" - -msgid "Issue" -msgstr "Tema" - -msgid "Match" -msgstr "Emparejar" - -msgid "Match users according to certificate." -msgstr "Emparejar usuarios de acuerdo al certificado" - -msgid "Migrate" -msgstr "Migrar" - -msgid "OK" -msgstr "Aceptar" - -msgid "Refresh" -msgstr "Actualizar" - -msgid "Reload current settings from the server." -msgstr "Recargar ajustes actuales desde el servidor." - -msgid "Delete" -msgstr "Eliminar" - -msgid "Remove hold" -msgstr "Quitar espera" - -msgid "Reset" -msgstr "Resetear" - -msgid "Reset Password" -msgstr "Restablecer contraseña" - -msgid "Reset Password and Log in" -msgstr "Resetear la Contraseña y Acceder" - -msgid "Restore" -msgstr "Restaurar" - -msgid "Retry" -msgstr "Reintentar" - -msgid "Revert" -msgstr "Revertir" - -msgid "Revoke" -msgstr "Revocar" - -msgid "Save" -msgstr "Guardar" - -msgid "Set" -msgstr "Definir" - -msgid "Show" -msgstr "Mostrar" - -msgid "Stage" -msgstr "Escenario" - -msgid "Update" -msgstr "Actualizar" - -msgid "View" -msgstr "Ver" - -msgid "Customization" -msgstr "Personalización" - -msgid "Pagination Size" -msgstr "Tamaño de Paginación" - -msgid "Collapse All" -msgstr "Cerrar Todo" - -msgid "Expand All" -msgstr "Expandir Todo" - -msgid "General" -msgstr "General" - -msgid "Identity Settings" -msgstr "Configuración de identidad" - -#, fuzzy -msgid "Record Settings" -msgstr "Configuración de rol" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "Configuraciones de ${entity} ${primary_key}" - -msgid "Back to Top" -msgstr "Volver al comienzo" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "${entity} ${primary_key} actualizado" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "${entity} añadido con éxito" - -msgid "Add custom value" -msgstr "Añadir valor personal" - -msgid "Available" -msgstr "Disponible" - -msgid "Some operations failed." -msgstr "Algunas operaciones fallaron." - -msgid "Operations Error" -msgstr "Error en Operaciones" - -msgid "Confirmation" -msgstr "Confirmación " - -msgid "Custom value" -msgstr "Valor personal" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "Esta página tiene cambios sin guardar. Por favor, guardar o deshacer." - -msgid "Unsaved Changes" -msgstr "Cambios No Guardados" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "Editar ${entity}" - -msgid "Hide details" -msgstr "Esconder detalles" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "${product}, versión: ${version}" - -msgid "Prospective" -msgstr "Prospectivo" - -msgid "Redirection" -msgstr "Redirección " - -msgid "Select entries to be removed." -msgstr "Las entradas seleccionadas han sido quitadas." - -msgid "Result" -msgstr "Resultado" - -msgid "Show details" -msgstr "Mostrar detalles" - -msgid "Success" -msgstr "Éxito" - -msgid "Validation error" -msgstr "Error de validación" - -msgid "Input form contains invalid or missing values." -msgstr "La entrada contiene valores no válidos o desaparecidos." - -msgid "Please try the following options:" -msgstr "Por favor intentar las siguientes opciones:" - -msgid "If the problem persists please contact the system administrator." -msgstr "" -"Si el problema persiste por favor contacte con el administrador del sistema." - -msgid "Refresh the page." -msgstr "Refrescar la página." - -msgid "Reload the browser." -msgstr "Recargar el navegador." - -msgid "Return to the main page and retry the operation" -msgstr "Volver a la página principal y reintentar la operación" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "Ha ocurrido un error (${error})" - -msgid "HTTP Error" -msgstr "Error HTTP" - -msgid "Internal Error" -msgstr "Error Interno" - -msgid "IPA Error" -msgstr "Error IPA" - -msgid "No response" -msgstr "Sin respuesta" - -msgid "Unknown Error" -msgstr "Error Desconocido" - -msgid "URL" -msgstr "URL" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "${primary_key} es gestionada por:" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "${primary_key} miembros:" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "${primary_key} es un miembro de:" - -#, fuzzy, python-brace-format -msgid "${primary_key} member managers:" -msgstr "${primary_key} miembros:" - -msgid "Settings" -msgstr "Configuración" - -msgid "Search" -msgstr "Búsqueda" - -msgid "False" -msgstr "Falso" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Permitir a grupo de usuarios recuperar tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Permitir a grupos de host recuperar tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "Permitir a hosts recuperar tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" - -msgid "Allowed to create keytab" -msgstr "Permitido crear tabla de teclas" - -msgid "Allowed to retrieve keytab" -msgstr "Permitido recuperar tabla de teclas" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" -"Rechazar que los grupos de usuario creen tabla de tecla de '${primary_key}'" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Rechazar que los grupos de usuario recuperen tabla de teclas de " -"'${primary_key}'" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" -"Rechazar que los grupos de host creen tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Rechazar que los grupos de host recuperen tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "Rechazar que los hosts creen tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "Rechazar que los hosts recuperen tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "Rechazar que los usuarios creen tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "Rechazar que los usuarios recuperen taa de teclas de '${primary_key}'" - -msgid "Add Kerberos Principal Alias" -msgstr "Añadir Alias Principal Kerberos" - -msgid "New kerberos principal alias" -msgstr "Nuevo alias principal Kerberos" - -msgid "Remove Kerberos Alias" -msgstr "Quitar Alias Kerberos" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "¿Desea quitar el alias kerberos ${alias}?" - -msgid "Inherited from server configuration" -msgstr "Heredado de la configuración del servidor" - -msgid "MS-PAC" -msgstr "MS-PAC" - -msgid "Override inherited settings" -msgstr "Anular la configuración heredada" - -msgid "PAD" -msgstr "PAD" - -msgid "Authenticating" -msgstr "Autenticando" - -msgid "Authentication with personal certificate failed" -msgstr "Autenticación con certificado persona falló" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" -" Para acceder con certificado, por favor asegúrese de tener un certificado personal valido. " - -msgid "Continue to next page" -msgstr "Continúe a la siguiente página" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" -" Para acceder con nombre de " -"usuario y contraseña, introduzcalos en los correspondientes campos " -"después pulse 'Entrar'." - -msgid "Login failed due to an unknown reason" -msgstr "Acceso fallado debido a una razón desconocida" - -msgid "Logged In As" -msgstr "Registrado como" - -msgid "Authentication with Kerberos failed" -msgstr "Autenticación con Kerberos fallada" - -#, fuzzy, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" -" Para acceder con certificado, por favor asegúrese de tener un certificado personal valido. " - -msgid "Loading" -msgstr "Cargando" - -msgid "Kerberos Principal you entered is expired" -msgstr "Kerberos Principal su entrada ha expirado" - -msgid "Loading data" -msgstr "Cargando datos" - -msgid "Log in" -msgstr "Iniciar sesión" - -msgid "Log In Using Certificate" -msgstr "Iniciar sesión Usando Certificado" - -msgid "Log in using personal certificate" -msgstr "Iniciar sesión usando certificado personal" - -msgid "Log out" -msgstr "Cerrar sesión" - -#, fuzzy -msgid "Log out error" -msgstr "Cerrar sesión" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, fuzzy, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "Será redirigido a Zona DNS." - -#, fuzzy -msgid "Sync OTP Token" -msgstr "Ficha OTP" - -#, fuzzy -msgid "Synchronizing" -msgstr "Ventana de Sincronización HOTP" - -msgid "The user account you entered is locked" -msgstr "" - -#, fuzzy -msgid "number of passwords" -msgstr "Longitud mínima de la contraseña" - -msgid "seconds" -msgstr "" - -#, fuzzy -msgid "Migrating" -msgstr "Migrar" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -#, fuzzy -msgid "Password migration was not successful" -msgstr "«Verdadero» significa que la operación fue exitosa" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -#, fuzzy -msgid "Password migration was successful" -msgstr "«Verdadero» significa que la operación fue exitosa" - -msgid "Attribute" -msgstr "Atributo" - -#, fuzzy -msgid "Add delegation" -msgstr "delegación" - -#, fuzzy -msgid "Remove delegations" -msgstr "delegaciones" - -#, fuzzy -msgid "Add permission" -msgstr "permiso" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove permissions" -msgstr "permisos" - -#, fuzzy, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "Borrar privilegios de un rol." - -#, fuzzy -msgid "Add privilege" -msgstr "privilegio" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "Permitir a hosts recuperar tabla de teclas de '${primary_key}'" - -#, fuzzy -msgid "Remove privileges" -msgstr "miembro privilegio" - -#, fuzzy, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "Borrar miembros desde un permiso." - -#, fuzzy, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "Borrar permisos de un privilegio." - -msgid "Role Settings" -msgstr "Configuración de rol" - -#, fuzzy -msgid "Add role" -msgstr "Añadir un nuevo rol." - -#, fuzzy, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" - -#, fuzzy -msgid "Remove roles" -msgstr "Quitar espera" - -#, fuzzy, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "Borrar permisos de un privilegio." - -#, fuzzy, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" - -#, fuzzy -msgid "Add self service permission" -msgstr "auto servicio de permiso" - -#, fuzzy -msgid "Remove self service permissions" -msgstr "auto servicio de permisos" - -#, fuzzy -msgid "Add rule" -msgstr "Regla HBAC" - -#, fuzzy, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" - -#, fuzzy -msgid "Are you sure you want to change default group?" -msgstr "¿Está seguro de que desea borrar ${object}?" - -#, fuzzy -msgid "Default host group" -msgstr "Grupo de usuarios predeterminado" - -#, fuzzy -msgid "Default user group" -msgstr "Grupo de usuarios predeterminado" - -#, fuzzy -msgid "Exclusive" -msgstr "Regex exclusivo" - -msgid "Expression" -msgstr "Expresión" - -#, fuzzy -msgid "Host group rule" -msgstr "grupo de host" - -#, fuzzy -msgid "Host group rules" -msgstr "grupos de host" - -#, fuzzy -msgid "Inclusive" -msgstr "Regex inclusivo" - -#, fuzzy -msgid "Remove auto membership rules" -msgstr "Regla Auto Afiliación" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "User group rule" -msgstr "Grupo de usuarios" - -#, fuzzy -msgid "User group rules" -msgstr "Grupo de usuarios" - -#, fuzzy -msgid "Add automount key" -msgstr "clave de automontaje" - -#, fuzzy -msgid "Remove automount keys" -msgstr "claves de automontaje" - -#, fuzzy -msgid "Add automount location" -msgstr "localización automontaje" - -msgid "Automount Location Settings" -msgstr "Configuración de ubicación de automount" - -#, fuzzy -msgid "Remove automount locations" -msgstr "localizaciones de automontaje" - -#, fuzzy -msgid "Add automount map" -msgstr "mapa de automontaje" - -msgid "Map Type" -msgstr "Tipo de Mapa" - -msgid "Direct" -msgstr "Directo" - -msgid "Indirect" -msgstr "Indirecto" - -#, fuzzy -msgid "Remove automount maps" -msgstr "mapas de automontaje" - -#, fuzzy -msgid "Add certificate authority" -msgstr "Autoridad de Certificado" - -#, fuzzy -msgid "Remove certificate authorities" -msgstr "Autoridades de Certificado" - -msgid "Add CA ACL" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "Certificado para ${entity} ${primary_key}" - -#, fuzzy, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "Certificado para ${entity} ${primary_key}" - -#, fuzzy, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" - -#, fuzzy -msgid "All" -msgstr "Permitir" - -msgid "Any CA" -msgstr "" - -msgid "Any Host" -msgstr "Cualquier host" - -msgid "Any Service" -msgstr "Cualquier servicio" - -#, fuzzy -msgid "Any Profile" -msgstr "ID del Perfil" - -msgid "Anyone" -msgstr "Cualquiera" - -msgid "Rule status" -msgstr "Estatus de reglas" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -#, fuzzy -msgid "Remove CA ACLs" -msgstr "Borrar de CRL" - -#, fuzzy, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "Certificado para ${entity} ${primary_key}" - -#, fuzzy, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "Borrar usuarios y grupos de una regla HBAC." - -#, fuzzy, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "Quitar certificados de un servicio" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" - -#, fuzzy -msgid "Specified CAs" -msgstr "Grupos especificados" - -msgid "Specified Hosts and Groups" -msgstr "Hosts y grupos especificados" - -#, fuzzy -msgid "Specified Profiles" -msgstr "Grupos especificados" - -msgid "Specified Services and Groups" -msgstr "Servicios y grupos especificados" - -msgid "Specified Users and Groups" -msgstr "Usuarios y grupos específicos" - -#, fuzzy -msgid "Permitted to have certificates issued" -msgstr "archivo para almacenar" - -#, fuzzy -msgid "Remove certificate profiles" -msgstr "Certificado de Perfiles" - -msgid "AA Compromise" -msgstr "AA transacción" - -#, fuzzy -msgid "Add principal" -msgstr "Principal" - -msgid "Affiliation Changed" -msgstr "Afiliación cambiada" - -msgid "CA" -msgstr "CA" - -msgid "CA Compromise" -msgstr "CA de transacción" - -msgid "Certificates" -msgstr "Certificados" - -msgid "Certificate Hold" -msgstr "Certificado retenido" - -msgid "Cessation of Operation" -msgstr "Cese de operaciones" - -msgid "Common Name" -msgstr "Nombre común" - -#, fuzzy -msgid "the certificate with serial number " -msgstr "Regla usada para mapear el certificado con una entrada de usuario" - -msgid "Expires On" -msgstr "Expira el" - -#, fuzzy -msgid "Issued on from" -msgstr "Expiración" - -#, fuzzy -msgid "Issued on to" -msgstr "Expiración" - -#, fuzzy -msgid "Maximum serial number" -msgstr "Número de serie" - -#, fuzzy -msgid "Minimum serial number" -msgstr "Número de serie" - -#, fuzzy -msgid "Revoked on from" -msgstr "Revocado" - -#, fuzzy -msgid "Revoked on to" -msgstr "Revocado" - -#, fuzzy -msgid "Valid not after from" -msgstr "Error de validación" - -#, fuzzy -msgid "Valid not after to" -msgstr "Validar inicio" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -msgid "Fingerprints" -msgstr "Las huellas dactilares" - -#, fuzzy -msgid "Get Certificate" -msgstr "Un nuevo certificado" - -#, fuzzy -msgid "Certificate Hold Removed" -msgstr "Certificado retenido" - -#, fuzzy, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "Certificado para ${entity} ${primary_key}" - -#, fuzzy, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "Certificado para ${entity} ${primary_key}" - -#, fuzzy, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "Certificado para ${entity} ${primary_key}" - -#, fuzzy -msgid "Issue new certificate" -msgstr "Un nuevo certificado" - -msgid "Issued By" -msgstr "Expedido por" - -msgid "Issued On" -msgstr "Expiración" - -msgid "Issued To" -msgstr "Expedido para" - -msgid "Key Compromise" -msgstr "Clave de transacción" - -msgid "No Valid Certificate" -msgstr "Certificado no válido" - -msgid "New Certificate" -msgstr "Un nuevo certificado" - -#, fuzzy -msgid "Certificate in base64 or PEM format" -msgstr "Descargar certificado como fichero formateado PEM." - -msgid "Note" -msgstr "Nota" - -msgid "Organizational Unit" -msgstr "Unidad organizativa" - -#, fuzzy, python-brace-format -msgid "${count} certificate(s) present" -msgstr "${count} item(s) borrado" - -msgid "Privilege Withdrawn" -msgstr "Retirada de privilegios" - -msgid "Reason for Revocation" -msgstr "Motivo de la revocación" - -#, fuzzy -msgid "Remove certificate hold" -msgstr "Revocar un certificado." - -#, fuzzy -msgid "Do you want to remove the certificate hold?" -msgstr "¿Desea quitar el alias kerberos ${alias}?" - -msgid "Remove from CRL" -msgstr "Borrar de CRL" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -#, fuzzy -msgid "Certificate requested" -msgstr "Certificado revocado" - -#, fuzzy -msgid "Revoke certificate" -msgstr "Revocar un certificado." - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -msgid "Certificate Revoked" -msgstr "Certificado revocado" - -msgid "REVOKED" -msgstr "" - -msgid "SHA1 Fingerprint" -msgstr "Huella digital SHA1" - -#, fuzzy -msgid "SHA256 Fingerprint" -msgstr "Huella digital SHA1" - -msgid "Status" -msgstr "Estatus" - -msgid "Superseded" -msgstr "Obsoleta" - -msgid "Unspecified" -msgstr "No especificada" - -msgid "Valid Certificate Present" -msgstr "Presentar certificado válido" - -#, fuzzy -msgid "Valid from" -msgstr "Error de validación" - -#, fuzzy -msgid "Valid to" -msgstr "Validez" - -msgid "Validity" -msgstr "Validez" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "Certificado para ${entity} ${primary_key}" - -#, fuzzy -msgid "View Certificate" -msgstr "Un nuevo certificado" - -#, fuzzy -msgid "Certificate Data" -msgstr "Certificado" - -#, fuzzy -msgid "Certificate For Match" -msgstr "Cadena de certificado" - -#, fuzzy -msgid "Certificate Mapping Match" -msgstr "Cadena de certificado" - -#, fuzzy -msgid "Matched Users" -msgstr "Reglas coincidentes" - -#, fuzzy -msgid "User Login" -msgstr "Ingreso de usuario" - -#, fuzzy -msgid "Add certificate identity mapping rule" -msgstr "Regla de Mapeo de Identidad de Certificado" - -#, fuzzy -msgid "Add certificate mapping data" -msgstr "Datos de Asociación del Certificado" - -#, fuzzy -msgid "Configuration string" -msgstr "Configuración" - -#, fuzzy, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "¿Desea quitar el alias kerberos ${alias}?" - -#, fuzzy -msgid "Remove certificate mapping data" -msgstr "Quitar certificados de un servicio" - -msgid "Issuer and subject" -msgstr "" - -#, fuzzy -msgid "Remove certificate identity mapping rules" -msgstr "Reglas de Mapeo de Identidad de Certificado" - -msgid "Group Options" -msgstr "Opciones de Grupo" - -msgid "Search Options" -msgstr "Opciones de Búsqueda" - -#, fuzzy -msgid "SELinux Options" -msgstr "Opción de sudo" - -#, fuzzy -msgid "Server Options" -msgstr "Opciones de Búsqueda" - -#, fuzzy -msgid "Service Options" -msgstr "Opciones de Búsqueda" - -msgid "User Options" -msgstr "Opciones de Usuario" - -#, fuzzy -msgid "Forward first" -msgstr "Política de envío" - -#, fuzzy -msgid "Forwarding disabled" -msgstr "Cuenta inhabilitada " - -#, fuzzy -msgid "Forward only" -msgstr "Política de envío" - -msgid "Options" -msgstr "Opciones" - -#, fuzzy -msgid "Update System DNS Records" -msgstr "Actualizar las entradas DNS" - -msgid "Do you want to update system DNS records?" -msgstr "" - -#, fuzzy -msgid "System DNS records updated" -msgstr "Divide registro DNS en partes" - -#, fuzzy -msgid "Add DNS forward zone" -msgstr "Zona de envío DNS" - -#, fuzzy -msgid "Remove DNS forward zones" -msgstr "Zonas de envío DNS" - -#, fuzzy -msgid "Add DNS resource record" -msgstr "Registro de recursos DNS" - -msgid "DNS record was deleted because it contained no data." -msgstr "Registro DNS fue borrado porque no contenía datos." - -msgid "Other Record Types" -msgstr "Otros Tipos de Registro" - -msgid "Address not valid, can't redirect" -msgstr "" - -msgid "Create dns record" -msgstr "Crear registro DNS" - -msgid "Creating record." -msgstr "Creando el registro." - -msgid "Record creation failed." -msgstr "Falló la creación del registro." - -msgid "Checking if record exists." -msgstr "Comprobando que el registro existe." - -msgid "Record not found." -msgstr "No se encontró el registro." - -#, fuzzy -msgid "Redirection to PTR record" -msgstr "Redirección " - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -#, fuzzy -msgid "Target reverse zone not found." -msgstr "%(parent)s: no se encuentra %(oname)s" - -#, fuzzy -msgid "Fetching DNS zones." -msgstr "zonas DNS" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "Será redirigido a Zona DNS." - -#, fuzzy -msgid "Remove DNS resource records" -msgstr "Registros de recurso DNS" - -msgid "Standard Record Types" -msgstr "Tipos de Registro Estándar" - -msgid "Records for DNS Zone" -msgstr "Los registros para la zona DNS" - -msgid "Record Type" -msgstr "Tipo de Registro" - -#, fuzzy -msgid "Add DNS zone" -msgstr "zona DNS" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "¿Está seguro de que desea deshabilitar ${object}?" - -msgid "DNS Zone Settings" -msgstr "Configuración de la Zona DNS" - -#, fuzzy -msgid "Remove DNS zones" -msgstr "zonas DNS" - -#, fuzzy -msgid "Remove Permission" -msgstr "Permiso" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "¿Está seguro de que desea borrar ${object}?" - -#, fuzzy -msgid "Skip DNS check" -msgstr "Salta la comprobación de host" - -#, fuzzy -msgid "Skip overlap check" -msgstr "Salta la comprobación de host" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -#, fuzzy -msgid "Authoritative nameserver change" -msgstr "Nombre de servidor autoritativo" - -msgid "Level" -msgstr "" - -#, fuzzy -msgid "Set Domain Level" -msgstr "Nivel de dominio Max" - -#, fuzzy -msgid "Add user group" -msgstr "Grupo de usuarios" - -#, fuzzy, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" -"Permitir a grupo de usuarios recuperar tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "Añadir usuarios y grupos a una regla HBAC." - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" - -msgid "Group Settings" -msgstr "Configuración del grupo" - -msgid "External" -msgstr "Externos" - -msgid "Groups" -msgstr "Grupos" - -#, fuzzy -msgid "Group categories" -msgstr "RunAs Grupo categoría" - -#, fuzzy -msgid "Change to external group" -msgstr "gid no puede ser fijado para un grupo externo" - -#, fuzzy -msgid "Change to POSIX group" -msgstr "Cambiar a un grupo POSIX" - -#, fuzzy -msgid "Non-POSIX" -msgstr "POSIX" - -msgid "POSIX" -msgstr "POSIX" - -#, fuzzy -msgid "Remove user groups" -msgstr "Miembro del grupo de usuarios" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "Borrar miembros de un grupo de red." - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "Borrar usuarios y grupos de una regla HBAC." - -#, fuzzy, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "Borrar usuarios y grupos de una regla HBAC." - -#, fuzzy, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" -"Permitir a grupo de usuarios recuperar tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "Borrar servicio y grupos de servicio de una regla HBAC." - -#, fuzzy, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" - -msgid "Group Type" -msgstr "Tipo de grupo" - -#, fuzzy -msgid "Add HBAC rule" -msgstr "Regla HBAC" - -#, fuzzy, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "Añadir servicios a una regla HBAC." - -#, fuzzy, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" - -msgid "Accessing" -msgstr "Acceso" - -#, fuzzy -msgid "Remove HBAC rules" -msgstr "Reglas HBAC" - -#, fuzzy, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "Borrar usuarios y grupos de una regla HBAC." - -#, fuzzy, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "Borrar servicio y grupos de servicio de una regla HBAC." - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" - -msgid "Via Service" -msgstr "Vía de servicio" - -msgid "Who" -msgstr "¿Quién?" - -#, fuzzy -msgid "Add HBAC service" -msgstr "Servicio HBAC" - -#, fuzzy, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "Añadir miembros a un grupo de servicio HBAC." - -#, fuzzy -msgid "Remove HBAC services" -msgstr "Miembro del servicio HBAC" - -#, fuzzy, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "Borrar miembros de un grupo de servicio HBAC." - -#, fuzzy -msgid "Add HBAC service group" -msgstr "Grupo de servicio HBAC" - -#, fuzzy, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" - -#, fuzzy -msgid "Remove HBAC service groups" -msgstr "Grupos de servicio de Miembros HBAC" - -#, fuzzy, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "Borrar miembros de un grupo de servicio HBAC." - -msgid "Access Denied" -msgstr "Acceso Denegado" - -msgid "Access Granted" -msgstr "Acceso Obtenido" - -msgid "Include Disabled" -msgstr "Include Deshabilitado" - -msgid "Include Enabled" -msgstr "Include Habilitado" - -msgid "HBAC Test" -msgstr "Prueba HBAC" - -msgid "Matched" -msgstr "Emparejado" - -msgid "Missing values: " -msgstr "Valores faltantes:" - -msgid "New Test" -msgstr "Nueva Prueba" - -msgid "Rules" -msgstr "Reglas" - -msgid "Run Test" -msgstr "Ejecutar Prueba" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "Especificar ${entity} externa" - -msgid "Unmatched" -msgstr "Desemparejado" - -#, fuzzy -msgid "Add host" -msgstr "Añadir un n uevo host." - -#, fuzzy, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "Añadir servicios a una regla HBAC." - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -msgid "Host Certificate" -msgstr "Certificado de host" - -msgid "Host Name" -msgstr "Nombre de host" - -msgid "Delete Key, Unprovision" -msgstr "La eliminación de clave, unprovision" - -msgid "Host Settings" -msgstr "Configuración del host" - -#, fuzzy -msgid "Enrolled" -msgstr "Inscripción" - -msgid "Enrollment" -msgstr "Inscripción" - -msgid "Fully Qualified Host Name" -msgstr "Nombre de host totalmente calificado" - -#, fuzzy -msgid "Generate OTP" -msgstr "Reajustar OTP" - -#, fuzzy -msgid "Generated OTP" -msgstr "Reajustar OTP" - -msgid "Kerberos Key" -msgstr "Clave Kerberos" - -msgid "Kerberos Key Not Present" -msgstr "No hay clave Kerberos Presente" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "Claves de Kerberos presente, Host aprovisionado" - -#, fuzzy -msgid "One-Time Password" -msgstr "Restablecer contraseña" - -#, fuzzy -msgid "One-Time Password Not Present" -msgstr "Comandos de contraseña de una vez" - -#, fuzzy -msgid "One-Time Password Present" -msgstr "Comandos de contraseña de una vez" - -msgid "Reset OTP" -msgstr "Reajustar OTP" - -#, fuzzy -msgid "Reset One-Time Password" -msgstr "Restablecer contraseña" - -msgid "Set OTP" -msgstr "Establecer OTP" - -#, fuzzy -msgid "OTP set" -msgstr "Ficha OTP" - -#, fuzzy -msgid "Set One-Time Password" -msgstr "Restablecer contraseña" - -#, fuzzy -msgid "Remove hosts" -msgstr "Quitar espera" - -#, fuzzy, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "Borrar miembros de un grupo de host." - -#, fuzzy, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "Borrar miembros de un grupo de red." - -#, fuzzy, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "Borrar privilegios de un rol." - -#, fuzzy, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "Borrar usuarios y grupos de una regla HBAC." - -#, fuzzy, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "Quitar una opción de la Regla Sudo." - -msgid "Unprovision" -msgstr "Unprovision" - -msgid "Are you sure you want to unprovision this host?" -msgstr "¿Está seguro que desea unprovision este equipo?" - -#, fuzzy -msgid "Unprovisioning host" -msgstr "Unprovision" - -#, fuzzy -msgid "Host unprovisioned" -msgstr "Unprovision" - -#, fuzzy -msgid "Add host group" -msgstr "grupo de host" - -#, fuzzy, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" - -msgid "Host Group Settings" -msgstr "Configuraciones del Grupo de Host" - -#, fuzzy -msgid "Remove host groups" -msgstr "miembro del grupo de host" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "Borrar usuarios y grupos de una regla HBAC." - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -#, fuzzy -#| msgid "Servers details:" -msgid "Identity provider details" -msgstr "Detalles de los servidores:" - -#, fuzzy -#| msgid "Verify Password" -msgid "Verify secret" -msgstr "Verificar Contraseña" - -#, fuzzy -msgid "User to override" -msgstr "Atributo de usuario" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -#, fuzzy -msgid "Profile" -msgstr "ID del Perfil" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -#, fuzzy -msgid "Enter trusted group name." -msgstr "" -" Desactivar la tecla de Kerberos, certificado SSL y todos los servicios " -"de un host." - -#, fuzzy -msgid "Add ID view" -msgstr "Vista ID asignada" - -msgid "Add group ID override" -msgstr "" - -#, fuzzy -msgid "Add user ID override" -msgstr "Deshabilitar la anulación por uso" - -#, fuzzy, python-brace-format -msgid "${primary_key} applies to:" -msgstr "${primary_key} miembros:" - -msgid "Applied to hosts" -msgstr "" - -#, fuzzy -msgid "Apply to host groups" -msgstr "grupos de host" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, fuzzy, python-brace-format -msgid "${primary_key} overrides:" -msgstr "${primary_key} miembros:" - -msgid "Remove ID views" -msgstr "" - -#, fuzzy -msgid "Remove user ID overrides" -msgstr "Nombre del servidor remoto" - -msgid "Remove group ID overrides" -msgstr "" - -#, fuzzy -msgid "Un-apply from host groups" -msgstr "Buscar grupos de host." - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -#, fuzzy -msgid "Un-apply" -msgstr "Aplicar" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "¿Está seguro que desea eliminar las entradas seleccionadas?" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr " Política de tiquete de Kerberos" - -#, fuzzy -msgid "Add netgroup" -msgstr "grupo de red" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" -"Permitir a grupos de host recuperar tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" -"Permitir a grupo de usuarios recuperar tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "Permitir a hosts recuperar tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" -"Permitir a grupos de host recuperar tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" - -msgid "Netgroup Settings" -msgstr "Configuración de Netgroup" - -#, fuzzy -msgid "Remove netgroups" -msgstr " Miembros de netgroups" - -#, fuzzy, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "Borrar miembros de un grupo de red." - -#, fuzzy, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" -"Permitir a grupo de usuarios recuperar tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "Permitir a hosts recuperar tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" -"Permitir a grupos de host recuperar tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" -"Permitir a grupos de host recuperar tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" - -#, fuzzy -msgid "Add OTP token" -msgstr "Ficha OTP" - -#, fuzzy, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -#, fuzzy -msgid "Configure your token" -msgstr "Configuración" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -#, fuzzy -msgid "OTP Token Settings" -msgstr "Fichas OTP" - -#, fuzzy -msgid "Disable token" -msgstr "Desactivar" - -#, fuzzy -msgid "Enable token" -msgstr "Activar" - -#, fuzzy -msgid "Remove OTP tokens" -msgstr "Fichas OTP" - -#, fuzzy, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" - -msgid "Show QR code" -msgstr "" - -#, fuzzy -msgid "Show configuration uri" -msgstr "Opciones de configuración de DNS" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -#, fuzzy -msgid "Add Custom Attribute" -msgstr "Añadir valor personal" - -#, fuzzy -msgid "Permission settings" -msgstr "Banderas de permiso" - -#, fuzzy -msgid "Attribute breakdown" -msgstr "Atributo Clave" - -msgid "Privilege Settings" -msgstr "Configuración de privilegios" - -#, fuzzy -msgid "Public key:" -msgstr "Clave pública SSH" - -#, fuzzy -msgid "Set public key" -msgstr "Clave pública SSH" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -#, fuzzy -msgid "Add password policy" -msgstr "política de contraseña" - -msgid "Password Policy" -msgstr "Directiva de contraseñas" - -#, fuzzy -msgid "Remove password policies" -msgstr "políticas de contraseña" - -#, fuzzy -msgid "Add ID range" -msgstr "Modificar rango de ID." - -#, fuzzy -msgid "Range Settings" -msgstr "Configuración de rol" - -#, fuzzy -msgid "Base ID" -msgstr "Base DN" - -msgid "Primary RID base" -msgstr "" - -#, fuzzy -msgid "Range size" -msgstr "Nombre del intervalo" - -#, fuzzy -msgid "Domain SID" -msgstr "GUID de Dominio" - -msgid "Secondary RID base" -msgstr "" - -#, fuzzy -msgid "Remove ID ranges" -msgstr "Intervalos de ID" - -#, fuzzy -msgid "Active Directory domain with POSIX attributes" -msgstr "Rango de confianza Active Directory con atributos POSIX" - -msgid "Detect" -msgstr "" - -#, fuzzy -msgid "Local domain" -msgstr "intervalo de dominios locales" - -#, fuzzy -msgid "IPA trust" -msgstr "confianza" - -#, fuzzy -msgid "Active Directory winsync" -msgstr "Intervalo de dominios de Active Directory" - -#, fuzzy -msgid "Add RADIUS server" -msgstr "Servidor RADIUS" - -#, fuzzy -msgid "RADIUS Proxy Server Settings" -msgstr "" -"\n" -"Servidores Proxy RADIUS\n" - -#, fuzzy -msgid "Remove RADIUS servers" -msgstr "Servidores RADIUS" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -#, fuzzy -msgid "Force Update" -msgstr "Actualizar" - -#, fuzzy -msgid "Add SELinux user map" -msgstr "Mapa de Usuario SELinux" - -#, fuzzy, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "Añadir usuarios y grupos a una regla de Mapa de Usuario SELinux." - -#, fuzzy, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" -"Permitir a grupos de host recuperar tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "Permitir a hosts recuperar tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" - -msgid "Remove selinux user maps" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "Borrar usuarios y grupos desde una regla de Mapa de Usuario SELinux." - -#, fuzzy, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "Borrar usuarios y grupos desde una regla de Mapa de Usuario SELinux." - -#, fuzzy, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "Permitir a hosts recuperar tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "Borrar usuarios y grupos desde una regla de Mapa de Usuario SELinux." - -#, fuzzy -msgid "Server Roles" -msgstr "Roles de Servidor IPA" - -#, fuzzy -msgid "Server Role" -msgstr "Rol de Servidor IPA" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -#, fuzzy -msgid "Delete Server" -msgstr "Eliminar servidor IPA." - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -#, fuzzy -msgid "Add service" -msgstr "Servicio HBAC" - -#, fuzzy, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "Permitir a hosts recuperar tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -msgid "Service Certificate" -msgstr "Certificado de servicio" - -msgid "Service Settings" -msgstr "Configuración del servicio" - -msgid "Provisioning" -msgstr "Aprovisionamiento" - -#, fuzzy -msgid "Remove services" -msgstr "Servicios de miembros" - -#, fuzzy, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "Borrar privilegios de un rol." - -#, fuzzy, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "Permitir a hosts recuperar tabla de teclas de '${primary_key}'" - -msgid "Are you sure you want to unprovision this service?" -msgstr "¿Está seguro de que desea no suministrar este servicio?" - -#, fuzzy -msgid "Unprovisioning service" -msgstr "Unprovision" - -#, fuzzy -msgid "Service unprovisioned" -msgstr "Auto Servicio de Permiso" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "Claves de Kerberos actuales, Servicio suministrado" - -#, fuzzy -msgid "SSH public keys" -msgstr "Clave pública SSH" - -#, fuzzy -msgid "SSH public key:" -msgstr "Clave pública SSH" - -msgid "Set SSH key" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to activate selected users?" -msgstr "¿Está seguro que desea eliminar las entradas seleccionadas?" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "¿Está seguro de que desea deshabilitar ${object}?" - -#, fuzzy, python-brace-format -msgid "${count} user(s) activated" -msgstr "${count} item(s) añadido" - -#, fuzzy -msgid "Add stage user" -msgstr "escenario usuario" - -#, fuzzy -msgid "Stage users" -msgstr "escenario usuarios" - -#, fuzzy -msgid "Preserved users" -msgstr "Usuario preservado" - -#, fuzzy -msgid "Remove preserved users" -msgstr "Usuario preservado" - -#, fuzzy -msgid "Remove stage users" -msgstr "escenario usuarios" - -#, fuzzy -msgid "Are you sure you want to stage selected users?" -msgstr "¿Está seguro que desea eliminar las entradas seleccionadas?" - -#, fuzzy, python-brace-format -msgid "${count} users(s) staged" -msgstr "${count} item(s) añadido" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "¿Está seguro de que desea deshabilitar ${object}?" - -#, fuzzy -msgid "Are you sure you want to restore selected users?" -msgstr "¿Está seguro que desea eliminar las entradas seleccionadas?" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "¿Está seguro de que desea borrar ${object}?" - -#, fuzzy, python-brace-format -msgid "${count} user(s) restored" -msgstr "${count} item(s) borrado" - -#, fuzzy -msgid "User categories" -msgstr "Categoría de usuario" - -#, fuzzy -msgid "Add subid" -msgstr "regla sudo" - -#, fuzzy -msgid "Assigned subids" -msgstr "Vista ID asignada" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -#, fuzzy -msgid "Add sudo command" -msgstr "comando sudo" - -#, fuzzy, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "lista separada por comas de grupos de comandos sudo a añadir" - -#, fuzzy -msgid "Remove sudo commands" -msgstr "miembro de comando sudo" - -#, fuzzy, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "Quitar miembros de un Grupo de Comando Sudo." - -#, fuzzy -msgid "Add sudo command group" -msgstr "grupo de comando sudo" - -#, fuzzy, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "Añadir comandos y grupos de comando sudo afectados por Regla Sudo." - -#, fuzzy -msgid "Remove sudo command groups" -msgstr "miembro de grupo de comando sudo" - -#, fuzzy, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "Quitar comandos y grupos de comando sudo afectados por Regla Sudo." - -#, fuzzy -msgid "Add sudo rule" -msgstr "regla sudo" - -#, fuzzy -msgid "Add sudo option" -msgstr "Opción de sudo" - -#, fuzzy, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "Añadir comandos y grupos de comando sudo afectados por Regla Sudo." - -#, fuzzy, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" - -msgid "Allow" -msgstr "Permitir" - -msgid "Any Command" -msgstr "Cualquier comando" - -msgid "Any Group" -msgstr "Cualquier grupo" - -msgid "Run Commands" -msgstr "Ejecutar comandos" - -msgid "Deny" -msgstr "Negar" - -msgid "Access this host" -msgstr "Acceder a este host" - -#, fuzzy -msgid "Option added" -msgstr "Opciones" - -#, fuzzy, python-brace-format -msgid "${count} option(s) removed" -msgstr "${count} item(s) borrado" - -#, fuzzy -msgid "Remove sudo rules" -msgstr "reglas sudo" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "Quitar comandos y grupos de comando sudo afectados por Regla Sudo." - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "Quitar comandos y grupos de comando sudo afectados por Regla Sudo." - -#, fuzzy, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" - -msgid "As Whom" -msgstr "Como Whom" - -msgid "Specified Commands and Groups" -msgstr "Comandos especificados y grupos" - -msgid "Specified Groups" -msgstr "Grupos especificados" - -#, fuzzy -msgid "Remove sudo options" -msgstr "Opción de sudo" - -msgid "Autogenerated" -msgstr "" - -#, fuzzy -msgid "Segment details" -msgstr "Detalles de los servidores:" - -#, fuzzy -msgid "Replication configuration" -msgstr "configuración de la confianza" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -#, fuzzy -msgid "Add IPA location" -msgstr "Añadir una nueva localización IPA." - -#, fuzzy, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" - -#, fuzzy -msgid "Remove IPA locations" -msgstr "" -"\n" -"Localizaciones IPA\n" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -#, fuzzy -msgid "Remove topology segments" -msgstr "Ignorar errores de topología" - -msgid "Account" -msgstr "Cuenta" - -#, fuzzy -msgid "Add trust" -msgstr "confianza" - -msgid "Administrative account" -msgstr "" - -#, fuzzy -msgid "SID blocklists" -msgstr "Lista negra de SID entrante" - -#, fuzzy -msgid "Trust Settings" -msgstr "Configuración del host" - -msgid "Establish using" -msgstr "" - -#, fuzzy -msgid "Fetch domains" -msgstr "Dominios reino" - -msgid "Pre-shared password" -msgstr "Contraseña precompartida" - -#, fuzzy -msgid "Remove trusts" -msgstr "Borrar" - -#, fuzzy -msgid "Remove domains" -msgstr "Dominios reino" - -#, fuzzy -msgid "Alternative UPN suffixes" -msgstr "Sufijos UPN" - -#, fuzzy -msgid "User attributes for SMB services" -msgstr "Buscar un servicio HBAC." - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -#, fuzzy -msgid "Drive to mount a home directory" -msgstr "Localización por defecto de los directorios home" - -msgid "Account Settings" -msgstr "Configuración de la cuenta" - -msgid "Account Status" -msgstr "Estado de Cuenta" - -#, fuzzy -msgid "Active users" -msgstr "Activar zona" - -#, fuzzy -msgid "Add user" -msgstr "Añadir un nuevo usuario." - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "Añadir servicios a una regla HBAC." - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -msgid "Auto assign subordinate ids" -msgstr "" - -#, fuzzy, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "Está seguro de que desea habilitar ${object}?" - -msgid "Contact Settings" -msgstr "Configuración de contactos" - -#, fuzzy -msgid "Delete mode" -msgstr "Borrar un rol." - -msgid "Employee Information" -msgstr "Información del Empleado" - -msgid "Error changing account status" -msgstr "Error al cambiar el estado de cuenta" - -msgid "Password expiration" -msgstr "Caducidad de la contraseña" - -msgid "Mailing Address" -msgstr "Dirección de correo" - -msgid "Misc. Information" -msgstr "Información diversa" - -#, fuzzy -msgid "delete" -msgstr "Eliminar" - -#, fuzzy -msgid "preserve" -msgstr "servidor" - -#, fuzzy -msgid "No private group" -msgstr "Búsqueda de grupos privados" - -#, fuzzy -msgid "Remove users" -msgstr "Usuarios miembros" - -#, fuzzy, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "Eliminar miembro desde un grupo." - -#, fuzzy, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "Borrar miembros de un grupo de red." - -#, fuzzy, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "Borrar privilegios de un rol." - -#, fuzzy, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "Borrar usuarios y grupos de una regla HBAC." - -#, fuzzy, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "Quitar una opción de la Regla Sudo." - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" -"¿Está seguro que desea ${action} el usuario?
El cambio tendrá efecto " -"inmediatamente." - -#, python-brace-format -msgid "Click to ${action}" -msgstr "Pulse para ${action}" - -msgid "Unlock" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "Está seguro de que desea habilitar ${object}?" - -msgid "Add vault" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" -"Permitir a grupo de usuarios recuperar tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -#, fuzzy -msgid "Members" -msgstr "Miembro del equipo anfitrión" - -msgid "My User Vaults" -msgstr "" - -#, fuzzy -msgid "Owners" -msgstr "Propietario" - -#, fuzzy -msgid "Remove vaults" -msgstr "Quitar espera" - -#, fuzzy, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" -"Permitir a grupo de usuarios recuperar tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" - -#, fuzzy -msgid "Service Vaults" -msgstr "Sevicios HBAC" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -#, fuzzy -msgid "Vault Type" -msgstr "Tipo de Mapa" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -#, fuzzy -msgid "User Vaults" -msgstr "Atributo de usuario" - -msgid "Current password is required" -msgstr "Se necesita contraseña actual" - -#, fuzzy, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "Vida máxima de la contraseña (días)" - -#, fuzzy -msgid "First OTP" -msgstr "Reajustar OTP" - -#, fuzzy -msgid "New password is required" -msgstr "Se necesita contraseña actual" - -#, fuzzy -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" -" Para acceder con nombre de " -"usuario y contraseña, introduzcalos en los correspondientes campos " -"después pulse 'Entrar'." - -#, fuzzy -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" -" Para acceder con nombre de " -"usuario y contraseña, introduzcalos en los correspondientes campos " -"después pulse 'Entrar'." - -#, fuzzy -msgid "Token synchronization failed" -msgstr "Vaya directamente a la sincronización HOTP" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Password change complete" -msgstr "Cambiar la contraseña completa" - -#, fuzzy -msgid "Your password has expired. Please enter a new password." -msgstr "Su sesión ha expirado. Por favor acceda otra vez." - -msgid "Passwords must match" -msgstr "Las contraseñas deben coincidir" - -msgid "Password reset was not successful." -msgstr "" - -#, fuzzy -msgid "Reset your password." -msgstr "Restablecer contraseña" - -#, fuzzy -msgid "Second OTP" -msgstr "Establecer OTP" - -msgid "Verify Password" -msgstr "Verificar Contraseña" - -msgid "Are you sure you want to delete selected entries?" -msgstr "¿Está seguro que desea eliminar las entradas seleccionadas?" - -#, fuzzy, python-brace-format -msgid "${count} item(s) deleted" -msgstr "${count} item(s) añadido" - -#, fuzzy -msgid "Are you sure you want to disable selected entries?" -msgstr "¿Está seguro que desea eliminar las entradas seleccionadas?" - -#, fuzzy, python-brace-format -msgid "${count} item(s) disabled" -msgstr "${count} item(s) añadido" - -#, fuzzy -msgid "Are you sure you want to enable selected entries?" -msgstr "¿Está seguro que desea eliminar las entradas seleccionadas?" - -#, fuzzy, python-brace-format -msgid "${count} item(s) enabled" -msgstr "${count} item(s) añadido" - -msgid "Some entries were not deleted" -msgstr "Algunas entradas no fueron borradas" - -msgid "Quick Links" -msgstr "Enlaces rápidos" - -msgid "Select All" -msgstr " Seleccionar todo" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" -"La solicitud devolvió más resultados que el límite de tamaño configurado. " -"Mostrando los primeros resultados ${counter}." - -msgid "Unselect All" -msgstr "Anular selección" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" "\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" +"Permisos gestionados\n" msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" "\n" +"Manipulate DNS locations\n" msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" "\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" +"Manipular localizaciones DNS\n" msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" "\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "" - -msgid "Audit" -msgstr "Auditoría" - -#, fuzzy -msgid "Authentication" -msgstr "Autenticando" - -msgid "Automount" -msgstr "Montaje automático" - -msgid "DNS" -msgstr "DNS" - -#, fuzzy -msgid "Host-Based Access Control" -msgstr "Comandos de control de acceso basado en host" - -msgid "Identity" -msgstr "Identidad" - -#, fuzzy -msgid "Network Services" -msgstr "Sevicios HBAC" - -msgid "Policy" -msgstr "Política" - -#, fuzzy -msgid "Role-Based Access Control" -msgstr "Comandos de control de acceso basado en host" - -msgid "Subordinate IDs" +"Manipulate DNS server configuration\n" msgstr "" - -msgid "Sudo" -msgstr "Sudo" - -msgid "Topology" -msgstr "" - -msgid "True" -msgstr "Verdad" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" "\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -#, fuzzy -msgid "First" -msgstr "Primer Código" - -#, fuzzy -msgid "Last" -msgstr "Apellido" - -msgid "Next" -msgstr "Siguiente" - -msgid "Page" -msgstr "Página" - -msgid "Prev" -msgstr "Anterior" - -msgid "Undo" -msgstr "" - -msgid "Undo this change." -msgstr "" - -#, fuzzy -msgid "Undo All" -msgstr "Expandir Todo" - -#, fuzzy -msgid "Undo all changes in this field." -msgstr "Quite todos los principales en este ámbito" - -msgid "Text does not match field pattern" -msgstr "El texto no coincide con el patrón de campo" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -#, fuzzy -msgid "Must be a decimal number" -msgstr "debe ser un número decimal" - -#, fuzzy -msgid "Format error" -msgstr "Error de lectura\n" - -msgid "Must be an integer" -msgstr "Debe ser un entero" - -msgid "Not a valid IP address" -msgstr "No es una dirección IP válida" - -msgid "Not a valid IPv4 address" -msgstr "No es una dirección IPv4 válida" - -msgid "Not a valid IPv6 address" -msgstr "No es una dirección IPv6 válida" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "Valor máximo es ${value}" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "Valor mínimo es ${value}" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -#, fuzzy -msgid "Parse error" -msgstr "Error de lectura\n" - -#, fuzzy -msgid "Must be a positive number" -msgstr "Debe ser un entero" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "«${port}» no es un puerto válido" - -msgid "Required field" -msgstr "Campo requerido" - -msgid "Unsupported value" -msgstr "Valor no admitido" - -msgid "kerberos ticket policy settings" -msgstr "ajustes de la entrada de política kerberos" - -#, fuzzy -msgid "OTP max life" -msgstr "Vida máxima" - -#, fuzzy -msgid "OTP token maximum ticket life (seconds)" -msgstr "Duración máxima del ticket (en segundos)" - -#, fuzzy -msgid "OTP max renew" -msgstr "Renovación máxima" - -#, fuzzy -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "Duración máxima renovable (en segundos)" - -#, fuzzy -msgid "RADIUS max life" -msgstr "Vida máxima" - -#, fuzzy -msgid "RADIUS maximum ticket life (seconds)" -msgstr "Duración máxima del ticket (en segundos)" - -#, fuzzy -msgid "RADIUS max renew" -msgstr "Nombre del servidor proxy RADIUS" - -#, fuzzy -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "Duración máxima renovable (en segundos)" - -#, fuzzy -msgid "PKINIT max life" -msgstr "Vida máxima" - -#, fuzzy -msgid "PKINIT maximum ticket life (seconds)" -msgstr "Duración máxima del ticket (en segundos)" - -#, fuzzy -msgid "PKINIT max renew" -msgstr "Renovación máxima" - -#, fuzzy -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "Duración máxima renovable (en segundos)" - -msgid "Hardened max life" -msgstr "" - -#, fuzzy -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "Duración máxima del ticket (en segundos)" - -msgid "Hardened max renew" -msgstr "" - -#, fuzzy -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "Duración máxima renovable (en segundos)" - -#, fuzzy -msgid "IdP max life" -msgstr "Vida máxima" - -#, fuzzy -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "Duración máxima del ticket (en segundos)" - -#, fuzzy -msgid "IdP max renew" -msgstr "Renovación máxima" - -#, fuzzy -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "Duración máxima renovable (en segundos)" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "La política de entrada para %s podría no ser leída" - -msgid "Default ticket policy could not be read" -msgstr "La política de entrada por defecto podría no ser leída" +"Manipular la configuración del servidor DNS\n" msgid "" "\n" @@ -26960,119 +3347,130 @@ msgstr "" "añadido más un resumen cuando el grupo de usuario predeterminado se haya\n" "actualizado.\n" -#, python-format msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +"\n" +"Misc plug-ins\n" msgstr "" -"El principal %s de Kerberos ya existe. Utilice 'ipa user-mod' para definirlo " -"manualmente." - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" -"Incapaz de determinar si el principal Kerberos %s ya existe. Use 'ipa user-" -"mod' para establecerlo manualmente." +"\n" +"Misc plug-ins\n" msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" msgstr "" -"Falló al intenatar agregar al usuario al grupo predeterminado. Utilice 'ipa " -"group-add-member' para agregarlo manualmente. " - -msgid "Migration of LDAP search reference is not supported." -msgstr "Migración de búsqueda de referencia LDAP no está soportada." - -msgid "Malformed DN" -msgstr "DN Malformado" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "%(user)s no es un usuario POSIX" +"\n" +"Netgroups\n" +"\n" +"Un netgroup es un grupo usado para comprobación de permisos. Puede contener\n" +"valores tanto de usuario como de host.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Añadir un nuevo netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Añadir miembros al netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Quitar un miembro del netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Mostrar información sobre un netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Borrar un netgroup:\n" +" ipa netgroup-del admins\n" msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" msgstr "" -". Comprobar GID del grupo existente. Use la opción --group-overwrite-gid " -"para anular la GID" - -msgid "Invalid LDAP URI." -msgstr " URI LDAP no válida." - -#, python-format -msgid "%s to exclude from migration" -msgstr "%s a excluir desde la migración" +"\n" +"Advierta la diferencia entre atributos y entradas. Los permisos son " +"independientes,\n" +"de este modo ser capaz de añadir un usuario no significa que el usuario sea\n" +"editable.\n" msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" +"\n" +"OTP Tokens\n" msgstr "" -"los resultados de la búsqueda de los objetos que se van a migrar se han " -"truncado por el servidor; el proceso de migración puede estar incompleto\n" +"\n" +"Fichas OTP\n" -#, python-format msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" +"\n" +"OTP configuration\n" +"\n" +"Manage the default values that IPA uses for OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic OTP configuration:\n" +" ipa otpconfig-show\n" +"\n" +" Show all OTP configuration options:\n" +" ipa otpconfig-show --all\n" +"\n" +" Change maximum TOTP authentication window to 10 minutes:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Change maximum TOTP synchronization window to 12 hours:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Change maximum HOTP authentication window to 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Change maximum HOTP synchronization window to 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" msgstr "" -"%(container)s búsqueda LDAP no devolvió ningún resultado (buscar base: " -"%(search_base)s, objectclass: %(objectclass)s)" +"\n" +"Configuración OTP\n" +"\n" +"Gestiona los valores por defecto que IPA usa para las fichas OTP.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Muestra a configuración OTP básica:\n" +" ipa otpconfig-show\n" +"\n" +" Muestra todas las opciones de configuración OTP:\n" +" ipa otpconfig-show --all\n" +"\n" +" Cambia la ventana máxima de autenticación TOTP a 10 minutos:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Cambia la ventana máxima de sincronización TOTP a 12 horas:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Cambia la ventana máxima de autenticación HOTP a 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Cambia la ventana máxima de sincronización a 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgid "Default group for new users not found" -msgstr "Grupo predeterminado para nuevos usuarios no encontrado" - -#, fuzzy -#| msgid "" -#| "\n" -#| "Password policy\n" -#| "\n" -#| "A password policy sets limitations on IPA passwords, including maximum\n" -#| "lifetime, minimum lifetime, the number of passwords to save in\n" -#| "history, the number of character classes required (for stronger " -#| "passwords)\n" -#| "and the minimum password length.\n" -#| "\n" -#| "By default there is a single, global policy for all users. You can also\n" -#| "create a password policy to apply to a group. Each user is only subject\n" -#| "to one password policy, either the group policy or the global policy. A\n" -#| "group policy stands alone; it is not a super-set of the global policy " -#| "plus\n" -#| "custom settings.\n" -#| "\n" -#| "Each group password policy requires a unique priority setting. If a user\n" -#| "is in multiple groups that have password policies, this priority " -#| "determines\n" -#| "which password policy is applied. A lower value indicates a higher " -#| "priority\n" -#| "policy.\n" -#| "\n" -#| "Group password policies are automatically removed when the groups they\n" -#| "are associated with are removed.\n" -#| "\n" -#| "EXAMPLES:\n" -#| "\n" -#| " Modify the global policy:\n" -#| " ipa pwpolicy-mod --minlength=10\n" -#| "\n" -#| " Add a new group password policy:\n" -#| " ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 " -#| "--minlength=8 --priority=10 localadmins\n" -#| "\n" -#| " Display the global password policy:\n" -#| " ipa pwpolicy-show\n" -#| "\n" -#| " Display a group password policy:\n" -#| " ipa pwpolicy-show localadmins\n" -#| "\n" -#| " Display the policy that would be applied to a given user:\n" -#| " ipa pwpolicy-show --user=tuser1\n" -#| "\n" -#| " Modify a group password policy:\n" -#| " ipa pwpolicy-mod --minclasses=2 localadmins\n" msgid "" "\n" "Password policy\n" @@ -27096,10 +3494,6 @@ msgid "" "Group password policies are automatically removed when the groups they\n" "are associated with are removed.\n" "\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" "EXAMPLES:\n" "\n" " Modify the global policy:\n" @@ -27163,151 +3557,871 @@ msgstr "" " Modificar una polítca de contraseña de grupo:\n" " ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgid "Class of Service object used for linking policies with groups" -msgstr "Objeto Class of Service enlazando políticas con grupos" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" -"la prioridad debe ser un valor único (%(prio)d que ya esté siendo utilizado " -"por %(gname)s)" - -msgid "Add Class of Service entry" -msgstr "Añadir entrada Class of Service" - -msgid "Delete Class of Service entry" -msgstr "Borrar entrada Class of Service" - -msgid "Modify Class of Service entry" -msgstr "Modificar entrada Class of Service" - -msgid "Display Class of Service entry" -msgstr "Visualizar entrada Class of Service" - -msgid "Search for Class of Service entry" -msgstr "Búsqueda de entrada Class of Service" - -msgid "password policy" -msgstr "política de contraseña" - -msgid "password policies" -msgstr "políticas de contraseña" - -msgid "Password Policies" -msgstr "Políticas de Contraseña" - -#, fuzzy -msgid "Max repeat" -msgstr "Renovación máxima" - -#, fuzzy -msgid "Maximum number of same consecutive characters" -msgstr "Cantidad máxima de entradas obtenidas" - -#, fuzzy -msgid "Max sequence" -msgstr "Renovación máxima" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -msgid "User check" -msgstr "Nombre de usuario" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "Grace login limit" -msgstr "" - -msgid "Number of LDAP authentications allowed after expiration" +msgid "" +"\n" +"Permissions\n" msgstr "" +"\n" +"Permisos\n" msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" msgstr "" +"\n" +"Permisos\n" +"\n" +"Un permiso habilita una delegación de grano fino de derechos. Un permiso es " +"un formato\n" +"legible por el hombre de una Regla de Control de Acceso (ACL) 389-ds o una " +"instrucción (ACI).\n" +"Un permiso otorga el derecho de llevar a cabo una tarea específica como " +"añadir un\n" +"usuario, modificar un grupo, etc.\n" +"\n" +"Un permiso puede contener otros permisos.\n" +"\n" +"* Un permiso otorga acceso de escritura, lectura, añadir o borrar.\n" +"* Un privilegio combina permisos similares (por ejemplo los permisos " +"necesarios para \n" +" añadir un usuario).\n" +"* Un rol otorga un conjunto de privilegios a usuarios, grupos, hosts o " +"grupos de hosts.\n" +"\n" +"Un permiso consta de diversas partes:\n" +"\n" +"1. El nombre del permiso.\n" +"2. El objetivo del permiso.\n" +"3. Los derechos otorgados por el permiso.\n" +"\n" +"Los derechos definen que operaciones están permitidas y pueden ser una o más " +"de las\n" +"siguientes:\n" +"1. write - escribir uno o más atributos\n" +"2. read - leer uno o más atributos\n" +"3. add - añadir una nueva entrada al árbol\n" +"4. delete - borrar una entrada existente\n" +"5. all - se otorgan todos los permisos\n" +"\n" +"El permiso de lectura se otorga para la mayoría de los atributos por " +"defectos de modo que\n" +"el permiso de lectura no se espera que use con frecuencia.\n" +"\n" +"Advierta la distinción entre atributos y entradas. Los permisos son " +"independientes, de\n" +"modo que ser capaz de añadir un usuario no siginifica que el usuario será " +"editable.\n" +"\n" +"Hay diversos objetivos permitidos:\n" +"1. type: un tipo de objeto (usuario, grupo, etc).\n" +"2. memberof: un miembro de un grupo o grupo de host\n" +"3. filter: un filtro LDAP\n" +"4. subtree: un filtro LDAP especificando parte del LDAP DIT. Esto es un " +"superconjunto del\n" +" objetivo \"type\".\n" +"5. targetgroup: otorga acceso a modificar un grupo específico (como " +"obteniendo\n" +" derechos para manejar la pertenencia al grupo)\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Añadir un permiso que otorga la creación de usuarios:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Añadir un permiso que otorga la capacidad de manejar la pertenencia al " +"grupo:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" -#, fuzzy -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "La duración máxima de la contraseña debe ser mayor que la mínima." - -msgid "cannot delete global password policy" -msgstr "no puede borrar la Política global de contraseña" - -msgid "priority cannot be set on global policy" -msgstr "la prioridad no puede ser definida en una plítica global" - -msgid "HBAC rule and local members cannot both be set" -msgstr "Regla HBAC y miembros locales no pueden ser fijados" - -msgid "Invalid SELinux user name, must match {}" +msgid "" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" msgstr "" +"\n" +"Los permisos que vienen con IPA por defecto se pueden llamar permisos\n" +"\"gestionados\". Estos tienen un conjunto de atributos predeterminados que " +"aplican,\n" +"pero el administrador puede añadir/borrar atributos individuales de/a el " +"conjunto.\n" -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" msgstr "" +"\n" +"Haga ping al servidor IPA remoto para asegurarse que está corriendo.\n" +"\n" +"El comando ping envía una petición de eco al servidor IPA. El servidor " +"devuelve\n" +"su información de versión. Esto se usa por un cliente IPA para confirmar que " +"el\n" +"servidor está disponible y acepta peticiones.\n" +"\n" +"El servidor de xmlrpc_uri en /etc/ipa/default.conf es el primero en " +"contactarse. Si no\n" +"responde el clinte contactará con cualquier de los servidores definidos por " +"los\n" +"registros ldap SRV en DNS.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Hacer ping a un servidor IPA:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Hacer ping a un servidor IPA verbosamente:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" msgstr "" +"\n" +"Haga ping al servidor IPA remoto para asegurar que está corriendo.\n" +"\n" +"El comando ping envía una petición de eco a un servidor IPA. El servidor " +"devuelve su\n" +"información de versión. Esto se usa por un cliente IPA para confirmar que el " +"servidor está\n" +"disponible y acepta peticiones.\n" +"\n" +"El servidor desde xmlrpc_uri en /etc/ipa/default.conf es contactado primero. " +"Si no\n" +"el cliente contactará con cualquier de los servidores definidos por los " +"registros ldap SRV\n" +"en DNS.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Ping a un servidor IPA:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping a un servidor IPA verbosamente:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" -msgid "SELinux user map list not found in configuration" -msgstr "Lista de mapeo de usuario SELinux no encontrado en la configuración" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" msgstr "" -"Usuario SELinux %(user)s no encontrado en la lista de pedidos (en config)" +"\n" +"Los plugins no son accesibles a través d CLI, comandos usados internamente\n" -msgid "SELinux User Map rule" -msgstr "Regla Mapa de Usuario SELinux" +msgid "" +"\n" +"Privileges\n" +"\n" +"A privilege combines permissions into a logical task. A permission provides\n" +"the rights to do a single task. There are some IPA operations that require\n" +"multiple permissions to succeed. A privilege is where permissions are\n" +"combined in order to perform a specific task.\n" +"\n" +"For example, adding a user requires the following permissions:\n" +" * Creating a new user entry\n" +" * Resetting a user password\n" +" * Adding the new user to the default IPA users group\n" +"\n" +"Combining these three low-level tasks into a higher level task in the\n" +"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" +"\n" +"A privilege may not contain other privileges.\n" +"\n" +"See role and permission for additional information.\n" +msgstr "" +"\n" +"Privilegios\n" +"Un privilegio combina permisos dentro de una tarea lógica. Un permiso " +"proporciona\n" +"los derechos para realizar una tarea específica.\n" +"Por ejemplo, añadir un usuario requiere los siguientes permisos:\n" +"Crear una nueva entradasd de usuario\n" +"Restablecer una contraseña de usuario\n" +"Añadir el nuevo usuario al grupo de usuario predeterminado de IPA\n" +"Combinar estos tres niveles inferiores dentro de una tarea de nivel superior " +"en forma de un privilegio \n" +"denominado \"Add User\" facilita el manejo de roles.\n" +"\n" +"Un privilegio no puede contener otros privilegios.\n" +"\n" +"Ver el rol y el permiso para información adicional. \n" +"\n" +" \n" +"\n" +"\n" -msgid "SELinux User Map rules" -msgstr "Reglas Mapa de Usuario SELinux" +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" +"\n" +"Servidores Proxy RADIUS\n" -msgid "SELinux User Maps" -msgstr "Mapas de Usuario SELinux" +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" +"\n" +"RE-INSCRIPCIÓN:\n" +"\n" +"El host que ha sido inscrito en algún punto y pierde su configuración (e.g. " +"VM destruido) puede ser reinscrito.\n" +"\n" +"Para mas información, consulte las páginas de manual para ipa-client-" +"install.\n" +"\n" +"Un host puede almacenar opcionalmente información como donde está " +"localizado,\n" +"el SO que ejecuta, etc.\n" -msgid "SELinux User Map" -msgstr "Mapa de Usuario SELinux" +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" +"\n" +"Dominios de reino\n" +"\n" +"Gestiona la lista de dominios asociados con el reino IPA.\n" +"\n" +"Esta lista es útil para los Controladores de Dominio de otros reinos que " +"tienen\n" +"establecida confianza con este reino IPA. Necesitan la información para " +"saber que \n" +"peticiones deberían ser reenviadas a KDC de este reino IPA.\n" +"\n" +"Gestión automática: se añade un dominio automáticamente a la lista de " +"dominios\n" +"cuando se crea una nueva Zona DNS gestionada por IPA. Lo mismo se aplica " +"para el borrado.\n" +"\n" +"DNS extermanete gestionado: los dominios que no son gestionados en el " +"servidor\n" +"IPA DNA necesitan ser añadidos manualmente a la lista usando el comando ipa " +"realmdomains-mod command.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Muestra la lista actual de dominios reino:\n" +" ipa realmdomains-show\n" +"\n" +" Reemplaza la lista de dominios reino:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Añade un dominio a la lista de dominios reino:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Borra un dominio de la lista de dominios reino:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" #, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "Regla HBAC %(rule)s no encontrada" +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" +"\n" +"La eliminación de '%(hostname)s' lleva a desconectar la topología en sufijo " +"'%(suffix)s':\n" +"%(errors)s" #, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "Añadido Mapa de Usuario SELinux \"%(value)s\"" +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" +"\n" +"La replica de la topología en el sufijo '%(suffix)s' está desconectada:\n" +"%(errors)s" -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "Borrado Mapa de Usuario SELinux \"%(value)s\"" +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" +"\n" +"Información devuelta sobre la identidad actualmente autentificada\n" +"\n" +"El comando quien soy devuelve información sobre como obtener más detalles " +"sobre la identidad autentificada para esta petición. La información " +"incluye:\n" +"\n" +" * tipo de objeto\n" +" * comando para recuperar detalles del objeto\n" +" * argumentos y opciones a pasar al comando\n" +"\n" +"La información se devuelve como un diccionario. Los ejemplos de abajo usan " +"la salida 'key: value' con propósitos ilustrativos.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Buscar como usuario IPA:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Buscar como un usuario desde un dominio de confianza:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Buscar como host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Buscar como servicio Kerberos:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "Modificado Mapa de Usuario SELinux \"%(value)s\"" +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" +"\n" +"Los derechos definen que operaciones están permitidas y pueden ser una o " +"mas\n" +"de las siguientes:\n" +"1. write - escribe uno o más atributos\n" +"2. read - lee uno o más atributos\n" +"3. search - busca uno o más atributos\n" +"4. compare - compara uno o más atributos\n" +"5. add - añade una nueva entrada al árbol\n" +"6. delete - borra una entrada existente\n" +"7. all - concede todos los permisos\n" -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "%(count)d Mapa de Usuario SELinux coincidente" -msgstr[1] "%(count)d Mapas de Usuario SELinux coincidentes" +msgid "" +"\n" +"SEARCHING:\n" +msgstr "" +"\n" +"BUSCANDO:\n" -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "Habilitado Mapa de Usuario SELinux \"%(value)s\"" +msgid "" +"\n" +"SELinux User Mapping\n" +"\n" +"Map IPA users to SELinux users by host.\n" +"\n" +"Hosts, hostgroups, users and groups can be either defined within\n" +"the rule or it may point to an existing HBAC rule. When using\n" +"--hbacrule option to selinuxusermap-find an exact match is made on the\n" +"HBAC rule name, so only one or zero entries will be returned.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " +"\"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " +"existing HBAC rule for users and hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Display the properties of a rule:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Create a rule for a specific user. This sets the SELinux context for\n" +" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Disable a rule:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Enable a rule:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Find a rule referencing a specific HBAC rule:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Remove a rule:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"SEEALSO:\n" +"\n" +" The list controlling the order in which the SELinux user map is applied\n" +" and the default SELinux user are available in the config-show command.\n" +msgstr "" +"\n" +"Mapeo de Usuario SELinux\n" +"\n" +"Mapeo de usuarios IPA a usuarios SELinux por host.\n" +"\n" +"Hosts, grupos de hosts, usuarios y grupos pueden ser definidos bien dentro " +"de\n" +"una regla o pueden apuntar a una regla HBAC existente. Cuando se utiliza la\n" +"opción –hbacrule para selinuxusermap-find se hace una coincidencia exacta " +"con\n" +"el nombre de regla HBAC, de modo que solo se devolverán entradas uno o " +"cero.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Crear una regla, \"test1\", que ajuste a todos los usuarios a xguest_u:s0 " +"en el \"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Crear una regla, \"test2\", que fije todos los usuarios a guest_u:s0 y un " +"regla HBAC existente para los usuarios y hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Mostrar las propiedades de una regla:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Crear una regla para un usuario especifico. Esto ajusta el contexto SELinux " +"para el \n" +" usuario john a unconfined_u:s0-s0:c0.c1023 sobre cualquier máquina:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Deshabilita una regla:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Habilita una regla:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Encontrar una regla con referencia a un regla HBAC específica:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Borrar una regla:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"VEA TAMBIÉN:\n" +"\n" +" La lista controlando el orden en el cual se aplica el mapeo de usuario " +"SELinux\n" +" y el usuario SELinux predeterminado está disponible en el comando config-" +"show.\n" -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "Deshabilitado Mapa de Usuario SELinux \"%(value)s\"" +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" +"\n" +"TIPOS DE ZONA SOPORTADOS\n" +"\n" +" * Zona maestro (dnszone-*), contiene datos autoritativos.\n" +" * Zona de información (dnsforwardzone-*), envía solicitudes a otros " +"servidores \n" +" (un conjunto de servidores DNS).\n" + +msgid "" +"\n" +"Search for ACIs.\n" +"\n" +" Returns a list of ACIs\n" +"\n" +" EXAMPLES:\n" +"\n" +" To find all ACIs that apply directly to members of the group ipausers:\n" +" ipa aci-find --memberof=ipausers\n" +"\n" +" To find all ACIs that grant add access:\n" +" ipa aci-find --permissions=add\n" +"\n" +" Note that the find command only looks for the given text in the set of\n" +" ACIs, it does not evaluate the ACIs to see if something would apply.\n" +" For example, searching on memberof=ipausers will find all ACIs that\n" +" have ipausers as a memberof. There may be other ACIs that apply to\n" +" members of that group indirectly.\n" +" " +msgstr "" +"\n" +"Buscar ACIs.\n" +"\n" +" Devolver una lista de ACIs\n" +"\n" +" EJEMPLOS:\n" +"\n" +" Para encontrar todos los ACIs que se aplican directamente a miembros " +"del grupo ipausers:\n" +" ipa aci-find --memberof=ipausers\n" +"\n" +" Para encontrar todos los ACIs que obtienen acceso añadir:\n" +" ipa aci-find --permissions=add\n" +"\n" +" Advierta que el comando find solo busca el texto dado en el conjunto de " +"ACIs, no\n" +" evalúa los ACIs a ver si aplicaría alguno.\n" +" Por ejemplo, la búsqueda sobre memberof=ipausers encontrará todos los " +"ACIs\n" +" que tengan ipausers como memberof. Allí puede haber otros ACIs que se\n" +" apliquen a miembros de ese grupo indirectamente.\n" +" " + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" +"\n" +"Permisos de Auto-Servicio\n" +"\n" +"Un permiso habilita una delegación de permisos de. Las Reglas de Control " +"Acceso, o instrucciones (ACIs), conceden permiso a los permisos para llevar " +"a cabo tareas\n" +"dadas como añadir un usuario, modificar un grupo, etc.\n" +"\n" +"Un permiso de Auto-Servicio define que un objeto puede cambiar en su propia " +"entrada.\n" +"\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Añadir una regla de auto-servicio para permitir a los usuarios gestionar " +"su\n" +" dirección (usando una expresión Bash brace):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Los usuarios gestionan sus propias direcciones\"\n" +"\n" +" Cuando está gestionando la lista de atributos usted necesita incluir todos " +"los\n" +" atributos en la lista, incluyendo los existentes.\n" +" Añadir telephoneNumber a la lista (usando expansión Bash brace):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Los usuarios gestionan sus propias direcciones\"\n" +"\n" +" Mostrar nuestra regla actualizada:\n" +" ipa selfservice-show \"Los usuarios gestionan sus propias direcciones\"\n" +"\n" +" Borrar una regla:\n" +" ipa selfservice-del \"Los usuarios gestionan sus propias direcciones\"\n" + +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" +"\n" +"Auto servicio de Permisos\n" +"\n" +"Un permiso habilita una delegación de grano fino de permisos. Las Reglas de " +"Control de\n" +"Acceso o instrucciones (ACIs), conceden permisos a los permisos para llevar " +"a cabo tareas\n" +"dadas como añadir un usuario, modificar un grupo, etc.\n" +"\n" +"Un Permiso de Auto servicio define lo que un objeto puede cambiar en su " +"propia entrada.\n" +"\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Añadir una regla de auto servicio para permitir a los usuarios gestionar " +"sus direcciones:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Los usuarios maejan sus propias direcciones\"\n" +"\n" +" Cuando maneje una lista de atributos usted necesita incluir todos los " +"atributos en la lista, incluyendo los existentes. Añadir un Número de " +"teléfono a la lista:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Los usuarios manejan sus propias direcciones\"\n" +"\n" +" Visualizar nuestra regla actualizada:\n" +" ipa selfservice-show \"Los Usuarios manejan sus propias direcciones\"\n" +"\n" +" Borrar una regla:\n" +" ipa selfservice-del \"Los usuarios manejan sus propias direcciones\"\n" msgid "" "\n" @@ -27432,132 +4546,151 @@ msgstr "" msgid "" "\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" +"Services\n" "\n" -" Permitir al usuario crear una tabla de claves:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" - -msgid "" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" "\n" " Generate and retrieve a keytab for an IPA service:\n" " ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" "httpd.keytab\n" -"\n" msgstr "" "\n" -" Generar y recuperar un tabla de clave para un servicio IPA:\n" +"Servicios\n" +"\n" +"Un servicio IPA representa un servicio que corre en un host. El registro del " +"servicio IPA\n" +"puede almacenar un principal Kerberos, un certificado SSL a ambos.\n" +"\n" +"Un servicio IPA puede ser manejado directamente desde una máquina, siempre " +"que la\n" +"máquina haya recibido los permisos correctos. Esto es cierto aún para " +"máquinas distintas\n" +"a aquella a la que el servicio está asociado. Por ejemplo, pidiendo un " +"certificado SSL\n" +"usando las credenciales de servicio principal de host del anfitrión. Para " +"manejar un\n" +" servicio usando las credenciales del anfitrión usted necesita tokinit como " +"el anfitrión:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Añadir un servicio IPA permite al servicios asociado pedir un certificado " +"SSL o keytab, pero esto se lleva a cabo como un paso separado; esto no se " +"produce como resultado de añadir el servicio.\n" +"\n" +"Solo se almacena el aspecto público de un certificado en un registro de " +"servicio la clave\n" +"privada no se almacena.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Añadir un nuevo servicio IPA:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Permitir a un host manejar un certificado de servicio IPA:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Anular una lista predeterminada de tipos PAC soportados para el servicio:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Borrar un servicio IPA:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Encontrar todos los servicios IPA asociados con un host:\n" +" ipa service-find web.example.com\n" +"\n" +" Encontrar todos los servicios HTTP:\n" +" ipa service-find HTTP\n" +"\n" +" Deshabilitar la clave del servicio Kerberos y el certificado SSL:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Pedir un certificado para un servicio IPA:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generar y recuperar una keytab para un servicio IPA:\n" " ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" "httpd.keytab\n" + +msgid "" "\n" - -msgid "Trusted to authenticate as user" -msgstr "Confiable pata autenticarse como usuario" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "El servicio puede autenticarse en nombre de un cliente" - -#, fuzzy, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "Indicadores de autenticación" - -msgid "Malformed principal" -msgstr "Director malformado" - -msgid "{} is required by the IPA master" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" msgstr "" - -msgid "service" -msgstr "servicio" - -msgid "services" -msgstr "servicios" - -msgid "Service principal alias" -msgstr "Alias principal del servicio" - -msgid "Base-64 encoded service certificate" -msgstr "Certificado de servicio codificado en Base-64" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "El valor NONE no puede ser combinado con otros tipos de PAC" - -msgid "Add a new IPA service." -msgstr "Añadir un nuevo servicio IPA." - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "Ha sido agregado el servicio \"%(value)s\"" - -msgid "force principal name even if host not in DNS" -msgstr "fuerza el nombre del principal si el host no está en el DNS" - -msgid "Skip host check" -msgstr "Salta la comprobación de host" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" -"fuerza la creación del servicio aún cuando el host no exista para manejarlo" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "El '%s' no existe para añadirle un servicio." - -msgid "Add a new SMB service." -msgstr "Añadir un nuevo servicio SMB." - -msgid "SMB service NetBIOS name" -msgstr "Nombre del servicio SMB de NetBIOS" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "Ha sido eliminado el servicio \"%(value)s\"" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "Ha sido modificado el servicio \"%(value)s\"" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "%(count)d servicio coincidente" -msgstr[1] "%(count)d servicios coincidentes\t\t\t" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "Servicio inhabilitado \"%(value)s\"" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "Añadidos certificados al servicio principal \"%(value)s\"" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "Quitados certificados del servicio principal \"%(value)s\"" - -msgid "Add new principal alias to a service" -msgstr "Añadir un nuevo alias principal a un servicio" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "Añadidos nuevos alias al servicio principal \"%(value)s\"" - -msgid "Remove principal alias from a service" -msgstr "Borrar alias principal de un servicio" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "Borrados alias al servicio principal \"%(value)s\"" +"\n" +"Establecer contraseña de un usuario\n" +"\n" +"Si alguien que no sea un usuario cambia la contraseña del usuario (por " +"ejemplo, Servicio de Ayuda la restablece), entonces la contraseña tendrá que " +"ser cambiada la primera vez que se utiliza. Esto es para que el usuario " +"final sea el único que conoce la contraseña.\n" +"La directiva de contraseñas IPA controla la frecuencia de cambio de una " +"contraseña, los requisitos de fortaleza y longitud del historial de " +"contraseñas. EJEMPLOS:\n" +"Para restablecer su contraseña:\n" +" ipa passwd tuser1\n" +"\n" +" Para cambiar la contraseña de otro usuario:\n" +" ipa passwd tuser1\n" msgid "" "\n" @@ -27660,319 +4793,16 @@ msgstr "" " ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" "\n" -msgid "Stage Users" -msgstr "Escenario Usuarios" - -msgid "Stage User" -msgstr "Escenario de Usuario" - -msgid "stage user" -msgstr "escenario usuario" - -msgid "stage users" -msgstr "escenario usuarios" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "Añadido escenario usuario \"%(value)s\"" - -msgid "givenname is required" -msgstr "se requiere nombre" - -msgid "sn is required" -msgstr "se requiere sn" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Borrado escenario usuario \"%(value)s\"" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "Modificado escenario usuario \"%(value)s\"" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d usuario coincidente" -msgstr[1] "%(count)d usuarios coincidentes" - -#, fuzzy, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "Añadido escenario usuario \"%(value)s\"" - -#, fuzzy -msgid "Entry RDN is not 'uid'" -msgstr "Entrada %s no encontrada" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, fuzzy, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr " %(oname)s con el nombre \"%(pkey)s\" ya existe" - -#, fuzzy, python-format -msgid "Stage user %s activated" -msgstr "Cuenta de usuario por etapas \"%(value)s\"" - -#, fuzzy -msgid "Add one or more certificates to the stageuser entry" -msgstr "Añade uno o más certificados a la entrada del usuario" - -#, fuzzy, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "Añadidos certificados al usuario \"%(value)s\"" - -#, fuzzy -msgid "Remove one or more certificates to the stageuser entry" -msgstr "Borra uno o más certificados de la entrada de usuario" - -#, fuzzy, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "Certificados borrados del usuario \"%(value)s\"" - -#, fuzzy -msgid "Add new principal alias to the stageuser entry" -msgstr "Añade un nuevo alias principal a la entrada de usuario" - -#, fuzzy, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "Añade nuevos alias al usuario \"%(value)s\"" - -#, fuzzy -msgid "Remove principal alias from the stageuser entry" -msgstr "Borra el alias principal de la entrada de usuario" - -#, fuzzy, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "Borrados alias del usuario \"%(value)s\"" - -#, fuzzy -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "Añade uno o más mapeados de certificados a la entrada de usuario." - -#, fuzzy -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "Borra uno o más mapeados de certificados de la entrada de usuario." - -#, fuzzy -msgid "ID View" -msgstr "Ver" - -#, fuzzy -msgid "system ID View" -msgstr "Vista ID asignada" - -#, fuzzy -msgid "ID Views" -msgstr "Ver" - -#, fuzzy -msgid "User object overrides" -msgstr "Clase de objeto de usuario" - -#, fuzzy -msgid "Group object overrides" -msgstr "Clase de objeto de grupo" - -#, fuzzy -msgid "Hosts the view applies to" -msgstr "Categoría del equipo al que se aplica la regla" - -#, fuzzy, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "Se añadió el intervalo de ID «%(value)s»" - -#, fuzzy, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "Se eliminó el intervalo de ID «%(value)s»" - -#, fuzzy, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "Modificar rango ID \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "%(count)d ACI coincidente" -msgstr[1] "%(count)d ACIs coincidentes" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -#, fuzzy -msgid "not found" -msgstr "reino no encontrado\n" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -#, fuzzy -msgid "IPA object" -msgstr "Objeto ACI." - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, fuzzy, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "Condiciones que no pueden ser eliminadas" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -#, fuzzy -msgid "Add a new ID override." -msgstr "Añadir un nuevo servicio IPA." - -#, fuzzy, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "Se añadió el intervalo de ID «%(value)s»" - -#, fuzzy -msgid "Delete an ID override." -msgstr "Eliminar un intervalo de ID." - -#, fuzzy, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "Se eliminó el intervalo de ID «%(value)s»" - -#, fuzzy -msgid "Modify an ID override." -msgstr "Modificar un servicio HBAC." - -#, fuzzy, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "Modificar rango ID \"%(value)s\"" - -msgid "ID override" -msgstr "" - -#, fuzzy -msgid "ID overrides cannot be renamed" -msgstr "El registro DNS de zona raíz no puede ser renombrado" - -#, fuzzy -msgid "Search for an ID override." -msgstr "Buscar servicios IPA." - -#, fuzzy, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d servicio coincidente" -msgstr[1] "%(count)d servicios coincidentes\t\t\t" - -#, fuzzy -msgid "Display information about an ID override." -msgstr "Mostrar información sobre un servicio IPA." - -#, fuzzy -msgid "User ID override" -msgstr "ID de usuario" - -msgid "User ID overrides" -msgstr "" - -#, fuzzy -msgid "Group ID override" -msgstr "Número de Identificación de Grupo" - -#, fuzzy -msgid "Group ID overrides" -msgstr "Número de Identificación de Grupo" - -#, fuzzy -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "Añade uno o más certificados a la entrada del usuario" - -#, fuzzy, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "Añadidos certificados al usuario \"%(value)s\"" - -#, fuzzy -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "Borra uno o más certificados de la entrada de usuario" - -#, fuzzy, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "Certificados borrados del usuario \"%(value)s\"" - -#, fuzzy, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "Ha sido agregado el servicio \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Ha sido eliminado el servicio \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "Ha sido modificado el servicio \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "%(count)d servicio coincidente" -msgstr[1] "%(count)d servicios coincidentes\t\t\t" - -#, fuzzy, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "Ha sido agregado el grupo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Ha sido eliminado el grupo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "Ha sido modificado el grupo \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "%(count)d grupo coincidente" -msgstr[1] "%(count)d grupos coincidentes" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - msgid "" "\n" -"Manage Certificate Authorities\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" msgstr "" "\n" -"Manejar Autoridades de Certificado\n" +"La bóveda standard usa un mecanismo seguro para transportar y\n" +"almacenar el secreto. El secreto puede ser sólo recuperado por los usuarios\n" +"que tiene acceso a la bovéda.\n" msgid "" "\n" @@ -27986,221 +4816,61 @@ msgstr "" msgid "" "\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" msgstr "" "\n" -"Las CAs están habilitadas en la creación, pero su uso está sujeto a las ACLs " -"de CA\n" -"a no ser que el operador haya permitido saltarse las ACLs de CA.\n" +"Comandos de Sudo\n" +"\n" +"Comandos usados como partes integrantes de sudo\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Crear un comando nuevo\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Eliminar un comando\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" msgid "" "\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" msgstr "" "\n" -"Todas las CAs excepto la CA 'IPA' pueden ser deshabilitadas y vueltas a " -"habilitar.\n" -"Deshabilitar una CA evita que envíe certificados pero no afecta a la validez " -"de sus \n" -"certificados.\n" +"La bóveda symmetric es similar a la standard, pero\n" +"encripta previamente el secreto usando una contraseña antes de transportar.\n" +"El secreto sólo se puede recuperar usando la misma contraseña.\n" msgid "" "\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" msgstr "" "\n" -"Las CAs (todas excepto la CA 'IPA') pueden ser borradas. El borrado de una " -"CA\n" -"origina que la su firma sea revocada y su clave privada borrada.\n" +"El comando de reconstrucción de auto miembro puede ser usado para ejecutar \n" +"retroactivamente reglas de auto miembro contra las entradas existentes, así " +"reconstruirá su membresía.\n" msgid "" "\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -msgid "Certificate Authority" -msgstr "Autoridad de Certificado" - -msgid "Certificate Authorities" -msgstr "Autoridades de Certificado" - -msgid "Name for referencing the CA" -msgstr "Nombre para referenciar la CA" - -msgid "Description of the purpose of the CA" -msgstr "Descripción del propósito de la CA" - -msgid "Authority ID" -msgstr "ID de la Autoridad" - -msgid "Dogtag Authority ID" -msgstr "ID de la Placa de Identidad de la Autoridad" - -msgid "Subject DN" -msgstr "Sujeto DN" - -msgid "Subject Distinguished Name" -msgstr "Nombre Distinguido del Sujeto" - -msgid "Issuer DN" -msgstr "Editor DN" - -msgid "Issuer Distinguished Name" -msgstr "Nombre Distinguido de Editor" - -msgid "Base-64 encoded certificate." -msgstr "Certificado codificado en Base-64." - -msgid "Certificate chain" -msgstr "Cadena de certificado" - -msgid "X.509 certificate chain" -msgstr "Cadena de certificado X.509" - -#, fuzzy -msgid "RSN Version" -msgstr "Permiso" - -#, fuzzy -#| msgid "Serial Number (hex)" -msgid "Random Serial Number Version" -msgstr "N.º de serie (hex.)" - -msgid "Search for CAs." -msgstr "Búsqueda de CAs." - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "%(count)d CA coincidente" -msgstr[1] "%(count)d CAs coincidentes" - -msgid "Include certificate chain in output" -msgstr "Incluir la cadena del certificado en la salida" - -msgid "Display the properties of a CA." -msgstr "Muestra las propiedades de una CA." - -msgid "Create a CA." -msgstr "Crear una CA." - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "Creada CA \"%(value)s\"" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "Privilegio 'add' insuficiente para la entrada '%s'." - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "Atributos no reconocidos: %(attrs)s" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "Sujeto DN ya está usado por CA '%s'" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "Borrada CA \"%(value)s\"" - -msgid "Insufficient privilege to delete a CA." -msgstr "Privilegio insuficiente para borrar una CA." - -msgid "IPA CA cannot be deleted" -msgstr "IPA CA no puede ser borrada" - -#, fuzzy -msgid "Must be disabled first" -msgstr "Debe ser un entero" - -msgid "Modify CA configuration." -msgstr "Modificar configuración de CA." - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "Modificada CA \"%(value)s\"" - -msgid "Insufficient privilege to modify a CA." -msgstr "Privilegio insuficiente para modificar una CA." - -msgid "Disable a CA." -msgstr "Deshabilitar una CA." - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "Deshabilitada CA \"%(value)s\"" - -msgid "IPA CA cannot be disabled" -msgstr "IPA CA no puede ser deshabilitada" - -msgid "Enable a CA." -msgstr "Habilitar una CA." - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "Habilitada CA \"%(value)s\"" - -msgid "" -"\n" -"IPA certificate operations\n" +"The date format is YYYY-mm-dd.\n" msgstr "" "\n" -"Operaciones de certificado IPA\n" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" -"\n" -"Implementa un conjunto de comandos para manejar los certificados de servidor " -"SSL.\n" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" -"\n" -"Las peticiones de certificado existen en la forma de una Petición de Firma " -"de\n" -"Certificado (CSR) en formato PEM.\n" +"El formato de fecha es YYYY-mm-dd.\n" msgid "" "\n" @@ -28214,48 +4884,204 @@ msgstr "" msgid "" "\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" +"The status of a role is either enabled, configured, or absent.\n" msgstr "" "\n" -"Se ha almacenado un certificado con un servicio principal y un servicio " -"principal\n" -"necesita un host.\n" +"El estado de un rol es habilitado, configurado o ausente.\n" msgid "" "\n" -"In order to request a certificate:\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" msgstr "" "\n" -"Con el objetivo de pedir un certificado:\n" +"Existen distinto objetivos permitidos:\n" +"1. subtree: un DN; el permiso se aplica al sub-árbol bajo este DN\n" +"2. target filter: un filtro LDAP\n" +"3. target: DN con posibles comodines, especifica las entradas a las que se " +"aplica\n" msgid "" "\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" msgstr "" "\n" -"* El host debe existir\n" -"* El servicio debe existir (o debe usar la opción --add para añadirlo " -"automáticamente)\n" +"Hay muchos tipos de DNS RR estructurados donde los datos DNS almacenados\n" +"en el servidor LDAP no son solo un valor escalar, por ejemplo una dirección " +"IP o\n" +"un nombre de dominio, pero es una estructura de datos que puede ser con\n" +"frecuencia compleja. Un buen ejemplo es un registro LOC [RFC1876] que " +"consta\n" +"de muchas partes obligatorias y opcionales (grados,minutos, segundos de " +"latitud y longitud, altitud o precisión).\n" msgid "" "\n" -"SEARCHING:\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" msgstr "" "\n" -"BUSCANDO:\n" +"Este código es una extensión del plugin otptoken y suministra el soporte " +"para\n" +" leer/escribir directamente en las fichasYubiKey.\n" msgid "" "\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" msgstr "" "\n" -"Los certificados pueden ser buscados por sujeto del certificado, número de " -"serie,\n" -"razón de la revocación, fechas de validez y fecha de envío.\n" +"USANDO OPCIONES ESTRUCTURADAS POR TIPO\n" + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" +"\n" +"Las bóvedas de usuario son bóvedas propietarias usadas por un usuario " +"concreto. Las bóvedas\n" +"privadas son bóvedas propiedad del usuario actual. Las bóvedas de servcio " +"son\n" +"bóvedas propiedad de un servicio. Las bóvedas compartidas son propiedad del " +"administrador\n" +"pero pueden ser usadas por otros usuarios o sevicios.\n" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" +"\n" +"Usuarios\n" +"\n" +"Gestiona entradas de usuario. Todos los usuarios son usuarios POXIS.\n" +"\n" +"IPA soporta un amplio rango de formatos de nombre de usuario, pero usted " +"debe estar atento a cualquier restricción que se pueda aplicar a su entorno " +"concreto. Por ejemplo, nombres de usuario que empiezan con un dígito o " +"nombres de usuario que superan cierta longitud pueden causar problemas en " +"algunos sistemas UNIX.\n" +"Use 'ipa config-mod' para cambiar el nombre de usuario permitido por las " +"herramientas IPA.\n" +"\n" +"Deshabilitando una cuenta de usuario evita que el usuario obtenga nuevas\n" +"credenciales Kerberos. Esto no invalida cualquier credencial que ya hay " +"sido\n" +"enviada.\n" +"\n" +"La gestión de contraseña no es parte de este módulo. Para más información " +"sobre \n" +"este punto vea por favor: ipa help passwd\n" +"\n" +"El cierre de una cuenta ante un fallo de contraseña sucede por el master " +"IPA. El\n" +"comando user-status se puede usar para identificar en que master está " +"bloqueado\n" +"el usuario. Y sobre ese master debe el administrador desbloquear al " +"usuario.\n" +"\n" +"EJEMPLOS:\n" +"\n" +" Añadir un nuevo usuario:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Encontrar todos los usuarios cuyas entradas incluyen la cadena \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Encontrar todos los usuarios con “Tim” como primer nombre:\n" +" ipa user-find --first=Tim\n" +"\n" +" Deshabilitar una cuenta de usuario:\n" +" ipa user-disable tuser1\n" +"\n" +" Habilitar una cuenta de usuario\n" +" ipa user-enable tuser1\n" +"\n" +" Borrar un usuario:\n" +" ipa user-del tuser1\n" + +msgid "" +"\n" +"Vaults\n" +msgstr "" +"\n" +"Bóvedas\n" + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" +"\n" +"Cuando se añade un registro, cualquiera de las opciones RR especificas o\n" +"estándar para un valor bruto se puede usar, simplemente no deben combinarse " +"en\n" +"operación de adicción. Cuando se modifica una entrada existente, se pueden " +"usar\n" +"nuevas opciones RR para cambiar una parte de un registro DNS, donde la " +"opción\n" +"estándar para el valor bruto se usa para especificar el valor modificado. El " +"siguiente\n" +"ejemplo muestra una modificación de la preferencia de un registro MX de 0 a " +"1 en\n" +"un registro sin modificación del intercambiador:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" msgid "" "\n" @@ -28268,558 +5094,177 @@ msgstr "" msgid "" "\n" -"Dates are treated as GMT to match the dates in the certificates.\n" +"YubiKey Tokens\n" msgstr "" "\n" -"Las fechas se tratan como GMT para coincidir con las fechas de los " -"certificados.\n" +"Fichas YubiKey\n" -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" -"\n" -"El formato de fecha es YYYY-mm-dd.\n" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" -"\n" -" Pide un nuevo certificado y añade el principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" -"\n" -" Recupera un certificado existente:\n" -" ipa cert-show 1032\n" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" -"\n" -" Revocar un certificado (vea RFC 5280 para detalles de la razón):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" -"\n" -" Quita un certificado del estado de cogido para revocación:\n" -" ipa cert-remove-hold 1032\n" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" -"\n" -" Comprueba el estado de una petición de firma:\n" -" ipa cert-status 10\n" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" -"\n" -" Búsqueda de certificados por nombre de host:\n" -" ipa cert-find --subject=ipaserver.example.com\n" - -#, fuzzy -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" -"\n" -" Búsqueda de certificados por nombre de host:\n" -" ipa cert-find --subject=ipaserver.example.com\n" - -#, fuzzy -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" -"\n" -" Búsqueda de certificados por nombre de host:\n" -" ipa cert-find --subject=ipaserver.example.com\n" - -#, fuzzy -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" -"\n" -" Búsqueda de certificados por nombre de host:\n" -" ipa cert-find --subject=ipaserver.example.com\n" - -#, fuzzy -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" -"\n" -" Búsqueda de certificados por nombre de host:\n" -" ipa cert-find --subject=ipaserver.example.com\n" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -#, fuzzy -msgid " * 0 - unspecified\n" -msgstr "No especificada" - -#, fuzzy -msgid " * 1 - keyCompromise\n" -msgstr "Clave de transacción" - -#, fuzzy -msgid " * 2 - cACompromise\n" -msgstr "AA transacción" - -#, fuzzy -msgid " * 3 - affiliationChanged\n" -msgstr "Afiliación cambiada" - -msgid " * 4 - superseded\n" -msgstr "" - -#, fuzzy -msgid " * 5 - cessationOfOperation\n" -msgstr "Cese de operaciones" - -#, fuzzy -msgid " * 6 - certificateHold\n" -msgstr "Certificado retenido" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -#, fuzzy -msgid " * 9 - privilegeWithdrawn\n" -msgstr "Retirada de privilegios" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" +msgid " ipa --help" +msgstr " ipa --help" #, python-format msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." +" Alternatively, following servers are capable of running this command: " +"%(masters)s" msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, fuzzy, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "No ha sido encontrado el equipo anfitrión '%(host)s' " - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -#, fuzzy -msgid "Subject email address" -msgstr "Dirección de correo electrónico" - -#, fuzzy -msgid "Subject DNS name" -msgstr "Sujeto DN" - -#, fuzzy -msgid "Subject X.400 address" -msgstr "Dirección postal" - -#, fuzzy -msgid "Subject directory name" -msgstr "Base del directorio principal" - -#, fuzzy -msgid "Subject EDI Party name" -msgstr "Nombre de clase objeto" - -#, fuzzy -msgid "Subject URI" -msgstr "Asunto" - -#, fuzzy -msgid "Subject IP Address" -msgstr "Dirección IP" - -#, fuzzy -msgid "Subject OID" -msgstr "Sujeto DN" - -#, fuzzy -msgid "Subject UPN" -msgstr "Sujeto DN" - -#, fuzzy -msgid "Subject Kerberos principal name" -msgstr "debe ser Kerberos principal" - -#, fuzzy -msgid "Subject Other Name" -msgstr "Nombre Distinguido del Sujeto" - -msgid "Serial number (hex)" -msgstr "N.º de serie (hex.)" - -msgid "Request status" -msgstr "Estado de la petición" - -#, fuzzy -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "si no existe, agregar automáticamente el principal" +" Alternativamente, los siguientes servidores son capaces de ejecutar este " +"comando: %(masters)s" #, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" +msgid "\"%s\" is not a valid permission type" +msgstr "\"%s\" no es un tipo válido de permiso" -msgid "No Common Name was found in subject of request." -msgstr "" +#, python-format +msgid "\"%s\" is not an object type" +msgstr "\"%s\" no es un tipo de objeto" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "${count} item(s) añadido" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "${count} item(s) borrado" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "Configuraciones de ${entity} ${primary_key}" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "${entity} ${primary_key} actualizado" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "${entity} añadido con éxito" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "${primary_key} es un miembro de:" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "${primary_key} es gestionada por:" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "${primary_key} miembros:" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "${product}, versión: ${version}" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "%(attr)s no contiene '%(value)s'" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "%(attr)s: sintaxis inválida." + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr " %(attr)s : Solamente un valor permitido." #, python-format msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" msgstr "" +"%(container)s búsqueda LDAP no devolvió ningún resultado (buscar base: " +"%(search_base)s, objectclass: %(objectclass)s)" #, python-format msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, fuzzy, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" -"Privilegio 'write' insuficiente al atributo 'krbLastPwdChange' de la entrada " -"'%s'." +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +"%(count)d %(type)s registro omitido. Sólo un valor por DNS tipo de registro " +"puede ser modificado a la vez." +msgstr[1] "" +"%(count)d %(type)s registros omitidos. Sólo un valor por DNS tipo de " +"registro puede ser modificado a la vez." #, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, fuzzy, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "El principal para esta petición no existe." - -#, fuzzy, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "Privilegio insuficiente para modificar un certificado perfil" +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d ACI coincidente" +msgstr[1] "%(count)d ACIs coincidentes" #, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "%(count)d CA coincidente" +msgstr[1] "%(count)d CAs coincidentes" #, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "%(count)d Regla de Mapeo de Identidad de Certificado coincidente" +msgstr[1] "%(count)d Reglas de Mapeo de Identidad de Certificado coincidentes" #, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "%(count)d regla coincidente de HBAC" +msgstr[1] "%(count)d reglas coincidentes de HBAC " #, python-format -msgid "CA '%s' is disabled" -msgstr "" - -#, fuzzy -msgid "'add' option" -msgstr "Opción de sudo" - -msgid "The principal for this request doesn't exist." -msgstr "El principal para esta petición no existe." +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "%(count)d grupo de servicio HBAC coincidente" +msgstr[1] "%(count)d grupos de servicio HBAC coincidentes" #, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "Servicio HBAC %(count)d coincidente" +msgstr[1] "Servicios HBAC %(count)d coincidentes" #, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "%(count)d localización IPA emparejada" +msgstr[1] "%(count)d localizaciones IPA emparejadas" #, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "Revocado" - -#, fuzzy -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "Motivo por el cual el certificado ha sido revocado (0-10)" - -#, fuzzy, python-format -msgid "Owner %s" -msgstr "Propietario" +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "%(count)d servidor IPA coincide" +msgstr[1] "%(count)d servidores IPA coinciden" #, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "7 no es una razón válida de revocación" - -#, fuzzy -msgid "Status of the certificate" -msgstr "debe ser un certificado" - -#, fuzzy -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" -"Los resultados deberían contener solo la clave del atributo primario (\"name" -"\")" - -#, fuzzy, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "%(count)d servicio coincidente" -msgstr[1] "%(count)d servicios coincidentes\t\t\t" - -#, fuzzy, python-format -msgid "Search for certificates with these owner %s." -msgstr "Búsqueda de servicios con aquellos gestionados por hosts." - -#, fuzzy, python-format -msgid "Search for certificates without these owner %s." -msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." - -#, fuzzy -msgid "" -"\n" -"Sudo Rules\n" -msgstr "Reglas Sudo" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "esta opción ha quedado obsoleta." - -msgid "sudo rules" -msgstr "reglas sudo" - -msgid "Sudo Rules" -msgstr "Reglas Sudo" - -msgid "Sudo Rule" -msgstr "Regla Sudo" - -#, fuzzy, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" -"la prioridad debe ser un valor único (%(prio)d que ya esté siendo utilizado " -"por %(gname)s)" +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "%(count)d OTP ficha coincidente" +msgstr[1] "%(count)d OTP fichas coincidentes" #, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "Añadida Regla Sudo “%(value)s”" +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "%(count)d servidor proxy RADIUS coincidente" +msgstr[1] "%(count)d servidores proxy RADIUS coincidentes" #, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Borrada Regla Sudo “%(value)s”" +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "%(count)d Mapa de Usuario SELinux coincidente" +msgstr[1] "%(count)d Mapas de Usuario SELinux coincidentes" #, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "Regla Sudo Modificada “%(value)s”" +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "%(count)d Grupo de Comando Sudo emparejado" +msgstr[1] "%(count)d Grupos de Comando Sudo emparejados" -#, fuzzy, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" -"la categoría de host no puede ser establecida a 'all' mientras hay host " -"permitidos" - -msgid "users" -msgstr "usuarios" - -#, fuzzy -msgid "command" -msgstr "Comandos" - -#, fuzzy -msgid "commands" -msgstr "Comandos" - -#, fuzzy -msgid "runAs user" -msgstr "RunAs Usuarios" - -#, fuzzy -msgid "runAs users" -msgstr "RunAs Usuarios" - -#, fuzzy -msgid "group runAs" -msgstr "grupos" - -#, fuzzy -msgid "runAs groups" -msgstr "Grupos RunAs" +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "%(count)d Comando Sudo emparejado" +msgstr[1] "%(count)d Comandos Sudo emparejados" #, python-format msgid "%(count)d Sudo Rule matched" @@ -28827,215 +5272,6189 @@ msgid_plural "%(count)d Sudo Rules matched" msgstr[0] "%(count)d Regla Sudo emparejada" msgstr[1] "%(count)d Reglas Sudo emparejadas" -#, fuzzy -msgid "commands cannot be added when command category='all'" -msgstr "hosts no puede ser añadido con categoría de host='all'" - -#, fuzzy -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "no se pueden añadir usuarios cuando la categoría de usuario='all'" +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "%(count)d clave de automontaje coincidente" +msgstr[1] "%(count)d claves de automontaje coincidentes" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "%(count)d localización de automontaje coincidente" +msgstr[1] "%(count)d localizaciones de automontaje coincidentes" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "%(count)d mapa de automontaje coincidente" +msgstr[1] "%(count)d mapas de automontaje coincidentes" #, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "%(count)d delegación coincidente" +msgstr[1] "%(count)d delegaciones coincidentes" #, python-format -msgid "Added user \"%(value)s\"" -msgstr "Ha sido agregado el usuario \"%(value)s\"" - -msgid "Default group for new users is not POSIX" -msgstr "El grupo predeterminado para nuevos usuarios no es POSIX" +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d grupo coincidente" +msgstr[1] "%(count)d grupos coincidentes" #, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Ha sido eliminado el usuario \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Preserved user \"%(value)s\"" -msgstr "Ha sido eliminado el usuario \"%(value)s\"" +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "%(count)d equipo coincidente" +msgstr[1] "%(count)d equipos coincidentes" #, python-format -msgid "%s: user is already preserved" -msgstr "%s: usuario ya preservado" +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "%(count)d grupo de equipos coincidente" +msgstr[1] "%(count)d grupos de equipos coincidentes" #, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Ha sido modificado el usuario \"%(value)s\"" +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "%(count)d autoservicio coincidente" +msgstr[1] "%(count)d autoservicios coincidentes" #, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "Recuperada cuenta de usuario \"%(value)s\"" +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "%(count)d permiso coincidente" +msgstr[1] " %(count)d permisos coincidentes" #, python-format -msgid "user \"%s\" is already active" -msgstr "usuario \"%s\" ya está activo" +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "%(count)d complemento cargado" +msgstr[1] "%(count)d complementos cargados" #, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "Cuenta de usuario por etapas \"%(value)s\"" +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)d privilegio coincidente" +msgstr[1] "%(count)d privilegios coincidentes" #, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr " \"%(value)s\" de cuenta de usuario desactivada" +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d perfil coincidente" +msgstr[1] "%(count)d perfiles coincidentes" #, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr " \"%(value)s\" de cuenta de usuario activada" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" -"\n" -"Desbloquear una cuenta de usuario\n" -"\n" -" Una cuenta de usuario puede llegar a bloquearse si la contraseña se ha " -"introducido incorrectamente demasiadas\n" -"veces dentro de un período de tiempo controlado por la política de\n" -"contraseña. Una cuenta bloqueada es una condición temporal y puede ser " -"desbloqueada por\n" -"un administrador." +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "%(count)d rango coincide" +msgstr[1] "%(count)d rangos coinciden" #, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "Cuenta desbloqueada \" %(value)s \"" - -msgid "Failed logins" -msgstr "Inicios de sesión fallidos" - -msgid "Last successful authentication" -msgstr "Última autenticación exitosa" - -msgid "Last failed authentication" -msgstr "Última autenticación fallada" - -msgid "Time now" -msgstr "Ahora" - -#, fuzzy -#| msgid "Password change complete" -msgid "Password grace count" -msgstr "Cambiar la contraseña completa" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" -"\n" -" Estado de bloqueo de una cuenta de usuario\n" -"\n" -" Una cuenta de usuario puede resultar bloqueada si la contraseña se " -"introduce\n" -" incorrectamente muchas veces dentro de un período especifico de tiempo\n" -" controlado por la política de contraseña. Un bloqueo de cuenta es una " -"condición\n" -" temporal y debe ser desbloqueada por un administrador.\n" -"\n" -" Esto conecta con el máster IPA y muestra el estado de bloqueo de cada " -"uno.\n" -"\n" -" Para determinar si una cuenta está bloqueada en un servidor dado usted\n" -" necesita comparar el número de accesos fallido y la hora del último " -"fallo. Para\n" -" que una cuenta se bloquee debe exceder maxfail dentro de la duración\n" -" failinterval según se especifique en la política de contraseña asociada " -"con el\n" -" usuario.\n" -"\n" -" El contador de acceso fallado se modifica solo cuando un usuario intenta " -"acceder\n" -" por lo que es posible que una cuenta puede aparecer bloqueada pero el " -"último\n" -" acceso fallado sea más antiguo que el lockouttime de la política de " -"contraseña.\n" -" Esto significa que el usuario puede intentar acceder otra vez." +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d rol coincidente" +msgstr[1] "%(count)d roles coincidentes" #, python-format -msgid "%(host)s failed: %(error)s" -msgstr "%(host)s falló: %(error)s" +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "%(count)d reglas coincidentes" +msgstr[1] "%(count)d reglas coincidentes" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "%(count)d autoservicio coincidente" +msgstr[1] "%(count)d autoservicios coincidentes" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "%(count)d servicio coincidente" +msgstr[1] "%(count)d servicios coincidentes\t\t\t" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "%(count)d confianza encontrada" +msgstr[1] "%(count)d confianzas encontradas" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d usuario coincidente" +msgstr[1] "%(count)d usuarios coincidentes" + +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d variables" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)s servidor coincide" +msgstr[1] "%(count)s servidores coinciden" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "%(count)s rol servidor coincidente" +msgstr[1] "%(count)s roles servidor coincidentes" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "%(count)s usuario coincidente" +msgstr[1] "%(count)s usuarios coincidentes" + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "%(cver)s cliente incompatible con servidor %(sver)s en '%(server)s'" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "%(desc)s:%(info)s" + +#, python-format +msgid "%(exception)s" +msgstr "%(exception)s" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "%(filename)s: fichero no encontrado" #, python-format msgid "%(host)s failed" msgstr "%(host)s falló" +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "%(host)s falló: %(error)s" + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" +"No se puede eliminar %(key)s porque %(label)s %(dependent)s lo requiere" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" +"%(key)s no puede ser borrado o deshabilitado porque es el último miembro de " +"%(label)s %(container)s" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "%(label)s %(key)s no puede ser borrado/modificado: %(reason)s" + +#, python-format +msgid "%(line)s" +msgstr "%(line)s" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "%(name)s certificado no válido" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr " %(oname)s con el nombre \"%(pkey)s\" ya existe" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "%(operation)s no está soportada para principal %(principal_type)s" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s: no se encuentra %(oname)s" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s: no se encuentra %(oname)s" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "%(port)s no es un puerto válido" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "%(subject)s: Certificado mal formado. %(reason)s" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "Tiempo de espera de la tares LDAP %(task)s, Task DN: '%(task_dn)s'" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "%(user)s no es un usuario POSIX" + +#, python-format +msgid "%s" +msgstr "%s" + +#, python-format +msgid "%s Record" +msgstr "%s registro" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "%s no es un atributo válido." + +#, python-format +msgid "%s record" +msgstr "%s registro" + +#, python-format +msgid "%s to add" +msgstr "%s a añadir" + +#, python-format +msgid "%s to exclude from migration" +msgstr "%s a excluir desde la migración" + +#, python-format +msgid "%s to remove" +msgstr "%s a eliminar" + +#, python-format +msgid "%s: RADIUS proxy server not found" +msgstr "%s: servidor proxy RADIUS no encontrado" + +#, python-format +msgid "%s: group not found" +msgstr "%s: grupo no encontrado" + +#, python-format +msgid "%s: user is already preserved" +msgstr "%s: usuario ya preservado" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "«${port}» no es un puerto válido" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "'%(command)s' es obsoleto. %(additional_info)s" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "'%(entry)s' no tiene certificado" + +#, python-format +msgid "'%(name)s' is required" +msgstr "'%(name)s' se requiere" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "'%(option)s' opción obsoleta. %(additional_info)s" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "'%(required)s' no debe estar vacío cuando '%(name)s' está establecido" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "«%s» es una parte requerida del registro DNS" + +msgid "(deprecated)" +msgstr "(obsoleto)" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "(vea detalles en el RFC %s)" + +msgid "" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "" +". Comprobar GID del grupo existente. Use la opción --group-overwrite-gid " +"para anular la GID" + +msgid "7 is not a valid revocation reason" +msgstr "7 no es una razón válida de revocación" + +msgid "" +msgstr "" + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" +" Para acceder con certificado, por favor asegúrese de tener un certificado personal valido. " + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" +" Para acceder con nombre de " +"usuario y contraseña, introduzcalos en los correspondientes campos " +"después pulse 'Entrar'." + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" +"

Método implícito (conraseña) será usado si no se ha elegido método.

Contraseña + Dos factores: LDAP y Kerberos permiten la " +"autenticación con uno de lostipos de autenticación pero Kerberos usa un " +"método de pre autenticacion que requiere usar armadura ccache.

RADIUS con otro tipo: Kerberos siempre usa RADIUS, " +"pero LDAP nunca lo hace. LDAP solo reconoce las opciones de contraseña y dos " +"factores.

" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" +"

Configuración por uso, sobre escribe la configuracion global si cualquier " +"opción esta marcada.

Contraseña + Dos factores: LDAP " +"y Kerberos permiten la autenticación con uno de lostipos de autenticación " +"pero Kerberos usa un método de pre autenticacion que requiere usar armadura " +"ccache

RADIUS con otro tipo: Kerberos siempre usa " +"RADIUS, pero LDAP nunca lo hace. LDAP solo reconoce las opciones de " +"autenticación contraseña y dos factores.

" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" +"=======\n" +"ADVERTENCIA:\n" +"\n" +"El plugin DNA en 389-ds asignará IDs basados en el rango configurado para " +"el\n" +"dominio local. Actualmente el plugin DNA *no puede* ser reconfigurado en " +"base a\n" +"los rangos locales establecidos por medio de esta familia de comandos.\n" +"\n" +"El cambio de configuración manual ha de ser hecho en la configuración del " +"plugin\n" +"DNA para e nuevo rango local. Especialmente, el atributo dnaNextRange de\n" +"'cn=Posix IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " +"ha\n" +"sido modificado para coincidir con el nuevo rango.\n" +"=======\n" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "Un permiso SYSTEM no puede ser modificado o quitado" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" +"Una lista separada por comas de los campos a buscar cuando se está buscando " +"grupos" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" +"Una lista separada por comas de los campos a buscar cuando se está buscando " +"usuarios" + +msgid "A description of this RADIUS proxy server" +msgstr "Una descripción de este servidor proxy RADIUS" + +msgid "A description of this auto member rule" +msgstr "Una descripción de esta regla auto miembro" + +msgid "A description of this command" +msgstr "Una descripción de este comando " + +msgid "A description of this host" +msgstr "Una descripción de este equipo" + +msgid "A description of this host-group" +msgstr "Una descripción de este grupo de equipo" + +msgid "A description of this role-group" +msgstr "Una descripción de este grupo de roles" + +msgid "A dictionary representing an LDAP entry" +msgstr "Un diccionario representando una entrada LDAP" + +msgid "A group may not be a member of itself" +msgstr "Un grupo no puede ser miembro de sí mismo" + +msgid "A group may not be added as a member of itself" +msgstr "Un grupo no puede ser agregado como miembro de sí mismo" + +msgid "A host willing to act as a key exchanger" +msgstr "Un host dispuesto a actuar como un intercambiador clave" + +msgid "A host willing to act as a mail exchanger" +msgstr "Un host dispuesto a actuar como un intercambiador de correo" + +msgid "A hostname which this alias hostname points to" +msgstr "Un nombre de host al que este nombre de host alias apunta" + +msgid "A list of ACI values" +msgstr "Una lista de valores ACI" + +msgid "A list of LDAP entries" +msgstr "Una lista de entradas LDAP" + +msgid "A managed group cannot have a password policy." +msgstr "Un grupo administrado no puede tener una política de contraseñas." + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" +"Se encontró un problema al verificar si todos los miembros eran %(verb)s: " +"%(exc)s" + +msgid "A string searched in all relevant object attributes" +msgstr "Buscada una cadena en todos los atributos de objeto relevantes" + +msgid "AA Compromise" +msgstr "AA transacción" + +msgid "ACI" +msgstr "ACI" + +msgid "ACI name" +msgstr "Nombre de ACI" + +msgid "ACI object." +msgstr "Objeto ACI." + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "ACI de permiso %s no fue encontrado" + +msgid "ACI prefix" +msgstr "Prefijo ACI" + +msgid "ACI prefix is required" +msgstr "Se requiere prefijo de ACI " + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "No se encuentra un ACI cuyo nombre sea \"%s\"" + +msgid "ACIs" +msgstr "ACI" + +msgid "AD Trust setup" +msgstr "Ajuste de Confianza AD" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" +"Número de Versión API no fue enviado, la compatibilidad de envío no está " +"garantizada. Asumiendo la versión API del servidor, %(server_version)s" + +msgid "About" +msgstr "Sobre" + +msgid "Access Denied" +msgstr "Acceso Denegado" + +msgid "Access Granted" +msgstr "Acceso Obtenido" + +#, python-format +msgid "Access granted: %s" +msgstr "Acceso obtenido: %s" + +msgid "Access this host" +msgstr "Acceder a este host" + +msgid "Access time" +msgstr "Hora de acceso" + +msgid "Accessing" +msgstr "Acceso" + +msgid "Account" +msgstr "Cuenta" + +msgid "Account Settings" +msgstr "Configuración de la cuenta" + +msgid "Account Status" +msgstr "Estado de Cuenta" + +msgid "Account disabled" +msgstr "Cuenta inhabilitada " + #, python-format msgid "Account disabled: %(disabled)s" msgstr "Cuenta deshabilitada: %(disabled)s" +msgid "Actions" +msgstr "Acciones" + +msgid "Activate" +msgstr "Activar" + +msgid "Active Directory domain administrator" +msgstr "Administrador de dominio Active Directory" + +msgid "Active Directory domain administrator's password" +msgstr "Contraseña del administrador de dominio Active Directory" + +msgid "Active Directory domain range" +msgstr "Intervalo de dominios de Active Directory" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "Rango de confianza Active Directory con atributos POSIX" + +msgid "Active zone" +msgstr "Activar zona" + +msgid "Add" +msgstr "Agregar" + +msgid "Add Class of Service entry" +msgstr "Añadir entrada Class of Service" + +msgid "Add Custom Authentication Indicator" +msgstr "Añadir Indicador de Autenticación Personal" + +msgid "Add Kerberos Principal Alias" +msgstr "Añadir Alias Principal Kerberos" + +msgid "Add Many" +msgstr "Añadir Muchos" + +msgid "Add a manager to the user entry" +msgstr "Añade un gestor a entrada de usuario" + +msgid "Add a new HBAC service group." +msgstr "Añadir un nuevo grupo de servicio HBAC." + +msgid "Add a new HBAC service." +msgstr "Añadir un nuevo servicio HBAC." + +msgid "Add a new IPA location." +msgstr "Añadir una nueva localización IPA." + +msgid "Add a new IPA new service." +msgstr "Añadir un nuevo servicio nuevo IPA." + +msgid "Add a new IPA service." +msgstr "Añadir un nuevo servicio IPA." + +msgid "Add a new OTP token." +msgstr "Añadir una nueva ficha OTP." + +msgid "Add a new RADIUS proxy server." +msgstr "Añadir un nuevo servidor proxy RADIUS." + +msgid "Add a new SMB service." +msgstr "Añadir un nuevo servicio SMB." + +msgid "Add a new YubiKey OTP token." +msgstr "Añadir una nueva ficha YubiKey OTP." + +msgid "Add a new delegation." +msgstr "Añadir una nueva delegación." + +msgid "Add a new group password policy." +msgstr "Añadir un nuevo grupo de política de contraseña." + +msgid "Add a new host." +msgstr "Añadir un n uevo host." + +msgid "Add a new hostgroup." +msgstr "Añadir un nuevo grupo de host." + +msgid "Add a new netgroup." +msgstr "Añadir un nuevo grupo de red." + +msgid "Add a new permission." +msgstr "Añadir un nuevo permiso." + +msgid "Add a new privilege." +msgstr "Añadir un nuevo privilegio." + +msgid "Add a new role." +msgstr "Añadir un nuevo rol." + +msgid "Add a new self-service permission." +msgstr "Añadir un nuevo auto servicio de permiso." + +msgid "Add a new stage user." +msgstr "Añadir un nuevo escenario usuario." + +msgid "Add a new user." +msgstr "Añadir un nuevo usuario." + +msgid "Add a permission for per-forward zone access delegation." +msgstr "Añadir un permiso para una delegación de acceso a zona por reenvío." + +msgid "Add a permission for per-zone access delegation." +msgstr "Añade un permiso para una delegación de acceso por zona." + +msgid "Add a system permission without an ACI" +msgstr "Añadir un permiso al sistema sin un ACI" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "Añadir un permiso de sistema sin un ACI (comando interno)" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" +"Añadir un par atributo/valor. El formato es attr=value. El atributo debe ser " +"parte del esquema." + +msgid "Add an option to the Sudo Rule." +msgstr "Añadir una opción a la Regla Sudo." + +msgid "Add and Add Another" +msgstr "Agregar y agregar otro" + +msgid "Add and Close" +msgstr "Añadir y cerrar" + +msgid "Add and Edit" +msgstr "Agregar y Editar" + +msgid "Add certificates to host entry" +msgstr "Añade certificados a la entrada de host" + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "Añadir comandos y grupos de comando sudo afectados por Regla Sudo." + +msgid "Add custom value" +msgstr "Añadir valor personal" + +msgid "Add domain" +msgstr "Añadir dominio" + +msgid "Add group for Sudo to execute as." +msgstr "Añadir grupo para Sudo a ejecutar como." + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "Añadir hosts y grupos de hosts afectados por Regla Sudo." + +msgid "Add hosts that can manage this host." +msgstr "Añadir hosts que pueda manejar este host." + +msgid "Add hosts that can manage this service." +msgstr "Añadir hosts que pueden gestionar este servicio." + +msgid "Add members to Sudo Command Group." +msgstr "Añadir miembros a Grupo de Comando Sudo." + +msgid "Add members to a group." +msgstr "Agregar miembro a un grupo." + +msgid "Add members to a hostgroup." +msgstr "Añadir miembros a un grupo de host." + +msgid "Add members to a netgroup." +msgstr "Añadir miembros a un grupo de red." + +msgid "Add members to a permission." +msgstr "Añadir miembros a un permiso." + +msgid "Add members to a privilege." +msgstr "Añadir miembros a un privilegio." + +msgid "Add members to a role." +msgstr "Añadir miembros a un rol." + +msgid "Add members to an HBAC service group." +msgstr "Añadir miembros a un grupo de servicio HBAC." + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" +"Añadir usuarios migrados sin grupo a un grupo predeterminado (por defecto: " +"true)" + +msgid "Add new DNS resource record." +msgstr "Añadir nuevo registro de recurso DNS." + +msgid "Add new certificates to a service" +msgstr "Añadir nuevos certificados a un servicio" + +msgid "Add new principal alias to a service" +msgstr "Añadir un nuevo alias principal a un servicio" + +msgid "Add new principal alias to host entry" +msgstr "Añade un nuevo alias principal a una entrada de host" + +msgid "Add new principal alias to the user entry" +msgstr "Añade un nuevo alias principal a la entrada de usuario" + +msgid "Add one or more certificate mappings to the user entry." +msgstr "Añade uno o más mapeados de certificados a la entrada de usuario." + +msgid "Add one or more certificates to the user entry" +msgstr "Añade uno o más certificados a la entrada del usuario" + +msgid "Add permissions to a privilege." +msgstr "Añadir permisos a un privilegio." + +msgid "Add privileges to a role." +msgstr "Añadir privilegios a un rol." + +msgid "Add services to an HBAC rule." +msgstr "Añadir servicios a una regla HBAC." + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "Añadir hosts objetivos y grupos de host a una regla HBAC." + +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "" +"Añadir hosts y grupos de host objetivo a una regla de Mapa de Usuario " +"SELinux." + +msgid "Add the host to DNS with this IP address" +msgstr "Agregar el host de DNS con esta dirección IP" + +msgid "Add to default group" +msgstr "Añadir a grupo predeterminado" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "Añadir usuarios y grupos afectados por Regla Sudo." + +msgid "Add users and groups for Sudo to execute as." +msgstr "Añadir usuarios y grupos para Sudo a ejecutar como." + +msgid "Add users and groups to an HBAC rule." +msgstr "Añadir usuarios y grupos a una regla HBAC." + +msgid "Add users and groups to an SELinux User Map rule." +msgstr "Añadir usuarios y grupos a una regla de Mapa de Usuario SELinux." + +msgid "Add users that can manage this token." +msgstr "Añadir usuarios que pueden manejar esta ficha." + +#, python-format +msgid "Added %(map)s" +msgstr "%(map)s agregados" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "Agregado %(src)s a %(dst)s" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "Añadida confianza Active Directory para el reino \"%(value)s\"" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Añadida Regla de Mapeo de Identidad de Certificado \"%(value)s\"" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "Añadida regla HBAC \"%(value)s\"" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "Servicio de HBAC \"%(value)s\" añadido" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "Agregado servicio de grupo HBAC \"%(value)s\"" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "Se añadió el intervalo de ID «%(value)s»" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "Añadida localización IPA \"%(value)s\"" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "Añadir ficha OTP \"%(value)s\"" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "Añadido servidor proxy RADIUS \"%(value)s\"" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "Añadido Mapa de Usuario SELinux \"%(value)s\"" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Añadido Comando Sudo “%(value)s”" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Añadido Grupo de Comando Sudo “%(value)s”" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Añadida Regla Sudo “%(value)s”" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "Regla automiembro añadida \"%(value)s\"" + +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "Añadido mapa de automontaje indirecto \"%(value)s\"" + +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "Añadida clave de automontaje \"%(value)s\"" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "Añadida localización de automontaje \"%(value)s\"" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "Añadido mapa de automontaje \"%(value)s\"" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "Añadidos certificados a host \"%(value)s\"" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "Añadidos certificados al servicio principal \"%(value)s\"" + #, python-format msgid "Added certificates to user \"%(value)s\"" msgstr "Añadidos certificados al usuario \"%(value)s\"" #, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "Certificados borrados del usuario \"%(value)s\"" +msgid "Added condition(s) to \"%(value)s\"" +msgstr "Añadida condición(es) a \"%(value)s\"" -msgid "Add new principal alias to the user entry" -msgstr "Añade un nuevo alias principal a la entrada de usuario" +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "Delegación añadida \"%(value)s\"" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Ha sido agregado el grupo \"%(value)s\"" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "Ha sido agregado el equipo \"%(value)s\"" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Ha sido agregado el grupo de equipo \"%(value)s\"" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "\"%(value)s\"netgroup añadido" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Añadidos nuevos alias al host \"%(value)s\"" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "Añadidos nuevos alias al servicio principal \"%(value)s\"" #, python-format msgid "Added new aliases to user \"%(value)s\"" msgstr "Añade nuevos alias al usuario \"%(value)s\"" +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "Añadiendo la opción \"%(option)s\" a Sudo Rule \"%(rule)s\"" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "Permiso agregado \"%(value)s\"" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "Privilegio añadido \"%(value)s\"" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "Rol agregado \"%(value)s\"" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "Añadido autoservicio \"%(value)s\"" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "Ha sido agregado el servicio \"%(value)s\"" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "Añadido escenario usuario \"%(value)s\"" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "Añadido permiso de sistema \"%(value)s\"" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "Ha sido agregado el usuario \"%(value)s\"" + +msgid "Additional instructions:" +msgstr "Instrucciones adicionales:" + +msgid "Administrator e-mail address" +msgstr "Correo-e de administrador" + +msgid "Advertised by servers" +msgstr "Anunciado por los servidores" + +msgid "Affiliation Changed" +msgstr "Afiliación cambiada" + +msgid "Agreements deleted" +msgstr "Acuerdos borrados" + +msgid "Algorithm" +msgstr "Algoritmo" + +msgid "All attributes to which the permission applies" +msgstr "Todos los atributos a los que aplica el permiso" + +msgid "All commands should at least have a result" +msgstr "Todos los comandos deberían por lo menos tener un resultado" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" +"Todos los servidores de nombre fallaron al responder a la consulta sobre la " +"zona reversa DNS %(revdns)s" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" +"Todos los filtros objetivo, incluyendo aquellos implicados por el tipo y " +"menbresia" + +msgid "Allow" +msgstr "Permitir" + +msgid "Allow PTR sync" +msgstr "Permitir sincronización PTR" + +msgid "Allow access from the trusted domain" +msgstr "Permitir acceso desde el dominio de confianza" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" +"Permitir el añadido de miembros externos no IPA desde dominios de confianza" + +msgid "Allow dynamic updates." +msgstr "Permitir actualizaciones dinámicas." + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "Permitir a grupos de host crear tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Permitir a grupos de host recuperar tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "Permitir a hosts crear tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "Permitir a hosts recuperar tabla de teclas de '${primary_key}'" + +msgid "Allow in-line DNSSEC signing" +msgstr "Permitida la firma DNSSEC en línea" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "Permitida la firma DNSSEC de registros en la zona" + +msgid "Allow query" +msgstr "Permitir consulta" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "" +"Permite la sincronización de registros de reenvío (A, AAAA) y reversa (PTR)" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" +"Permitir la sincronización de registros adelante (A, AAAA) y atrás (PTR) en " +"la zona" + +msgid "Allow transfer" +msgstr "Permitir transferencia" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "Permitir el uso de recursos IPA por el dominio de la confianza" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "Permitir a grupos de usuario crear tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Permitir a grupo de usuarios recuperar tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "Permitir a los usuarios crear tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "Permitir a los usuarios recuperar tabla de teclas de '${primary_key}'" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" +"Permite a usuarios, grupos, hosts o grupos de host crear una keytab de este " +"host." + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" +"Permitir a los usuarios, grupos, hosts o grupos de host crear una tabla de " +"claves de este servicio." + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" +"Permite a usuarios, grupos, hosts o grupos de host recuperar una keytab de " +"este host." + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" +"Permitir a los usuarios, grupos, hosts o grupos de host recuperar una tabla " +"de claves de este servicio." + +msgid "Allowed to create keytab" +msgstr "Permitido crear tabla de teclas" + +msgid "Allowed to retrieve keytab" +msgstr "Permitido recuperar tabla de teclas" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "" +"Permitir la migración a pesar de la utilización del plugin de compatibilidad" + +msgid "Already registered" +msgstr "Ya está registrado" + +msgid "Altitude" +msgstr "Altitud" + +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "Ha ocurrido un error (${error})" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" +"Ya existe un rango id para esta confianza. Usted debería bien borrar el " +"antiguo rango o excluir las opciones --base-id/--range-size del comando." + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "" +"Un intervalo entre preguntas regulares del servidor de nombre sobre nuevas " +"zonas DNS" + +msgid "Any Command" +msgstr "Cualquier comando" + +msgid "Any Group" +msgstr "Cualquier grupo" + +msgid "Any Host" +msgstr "Cualquier host" + +msgid "Any Service" +msgstr "Cualquier servicio" + +msgid "Anyone" +msgstr "Cualquiera" + +msgid "Apply" +msgstr "Aplicar" + +msgid "Apply ACI to your own entry (self)" +msgstr "Aplique ACI a su propia entrada (usted)" + +msgid "Archive data into a vault." +msgstr "Datos archivados en una bóveda" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" +"¿Está seguro que desea ${action} el usuario?
El cambio tendrá efecto " +"inmediatamente." + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "¿Está seguro de que desea borrar ${object}?" + +msgid "Are you sure you want to delete selected entries?" +msgstr "¿Está seguro que desea eliminar las entradas seleccionadas?" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "¿Está seguro de que desea deshabilitar ${object}?" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "Está seguro de que desea habilitar ${object}?" + +msgid "Are you sure you want to proceed with the action?" +msgstr "¿Está seguro de que desea seguir adelante con la acción?" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "¿Está seguro de que quiere reconstruir la auto membresía?" + +msgid "Are you sure you want to unprovision this host?" +msgstr "¿Está seguro que desea unprovision este equipo?" + +msgid "Are you sure you want to unprovision this service?" +msgstr "¿Está seguro de que desea no suministrar este servicio?" + +msgid "Arguments to details function" +msgstr "Argumentos para detalles de la función" + +msgid "As Whom" +msgstr "Como Whom" + +msgid "Asks for a non-random password to use for the principal" +msgstr "Pregunta por una contraseña no aleatoria para la principal" + +msgid "Assigned ID View" +msgstr "Vista ID asignada" + +msgid "Assigned manager of the token (default: self)" +msgstr "Gestor asignado de la ficha (predeterminado: self)" + +msgid "Assigned user of the token (default: self)" +msgstr "Usuario asignado de la ficha (predeterminado: self)" + +msgid "Attribute" +msgstr "Atributo" + +msgid "Attribute Key" +msgstr "Atributo Clave" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" +"Atributo a filtrar por medio de regex. Por ejemplo fqdn para un host o " +"gestor para un usuario" + +msgid "Attributes" +msgstr "Atributos" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "Atributos a ignorar para las entradas de grupo en DS" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "Atributos a ignorar para las entradas de usuario en DS" + +msgid "Attributes to which the delegation applies" +msgstr "Atributos a los que aplica la delegación" + +msgid "Attributes to which the permission applies" +msgstr "Atributos a los que aplican los permisos" + +msgid "Attributes to which the permission applies by default" +msgstr "Atributos a los que el permiso se aplica por defecto" + +msgid "Attributes to which the permission applies." +msgstr "Atributos a los que aplican los permisos." + +msgid "Audit" +msgstr "Auditoría" + +msgid "Authenticating" +msgstr "Autenticando" + +msgid "Authentication Indicators" +msgstr "Indicadores de Autenticación" + +msgid "Authentication indicator" +msgstr "Indicador de autenticación" + +msgid "Authentication indicators" +msgstr "Indicadores de autenticación" + +msgid "Authentication with Kerberos failed" +msgstr "Autenticación con Kerberos fallada" + +msgid "Authentication with personal certificate failed" +msgstr "Autenticación con certificado persona falló" + +msgid "Authoritative nameserver" +msgstr "Nombre de servidor autoritativo" + +msgid "Authoritative nameserver domain name" +msgstr "Nombre de dominio servidor de nombre autorizado" + +msgid "Authority ID" +msgstr "ID de la Autoridad" + +msgid "Auto Membership Rule" +msgstr "Regla Auto Afiliación" + +msgid "Auto Membership is not configured" +msgstr "Auto Afiliación no está configurada" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "Regla auto miembro: %s no encontrada!" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" +"Actualización automática de registros DNS del sistema falló. Por favor " +"vuelva a ejecutar manualmente la actualización de registros del sistema para " +"obtener la lista de los registros desaparecidos." + +msgid "Automember Rule" +msgstr "Regla Automiembro" + +msgid "Automember rebuild membership task completed" +msgstr "Tarea completada de reconstruir la membresía del miembro" + +msgid "Automount" +msgstr "Montaje automático" + +msgid "Automount Key" +msgstr "Clave de Automontaje" + +msgid "Automount Keys" +msgstr "Llaves de montaje automático" + +msgid "Automount Location" +msgstr "Localización de Automontaje" + +msgid "Automount Location Settings" +msgstr "Configuración de ubicación de automount" + +msgid "Automount Locations" +msgstr "Ubicaciones de automontado" + +msgid "Automount Map" +msgstr "Mapa de Automontaje" + +msgid "Automount Maps" +msgstr "Mapas de montaje automático" + +msgid "Automount key name." +msgstr " Nombre de clave de montaje automático" + +msgid "Automount key object." +msgstr "Objeto clave de automontaje" + +msgid "Automount location name." +msgstr "Nombre de la ubicación de montaje automático." + +msgid "Automount map name." +msgstr " Nombre del mapa automount." + +msgid "Automount master file." +msgstr " Archivo maestro automount." + +msgid "Available" +msgstr "Disponible" + +msgid "BIND update policy" +msgstr "Política de actualización de BIND" + +msgid "Back" +msgstr "Atrás" + +msgid "Back to Top" +msgstr "Volver al comienzo" + +msgid "Bad format in credentials cache" +msgstr "Las credenciales de caché están mal formadas" + +msgid "Bad or unsupported salt type.\n" +msgstr "Tipo de sal malo o no soportado.\n" + +msgid "Bad search filter" +msgstr "Mal filtro de búsqueda" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "%(info)s de filtro de búsqueda errado" + +msgid "Base DN" +msgstr "Base DN" + +msgid "Base DN on remote LDAP server" +msgstr "Base DN sobre servidor LDAP remoto" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "Base para sujetos certificados (OU=Prueba,O=Ejemplo)" + +msgid "Base-64 encoded certificate." +msgstr "Certificado codificado en Base-64." + +msgid "Base-64 encoded host certificate" +msgstr "Certificado de host codificado en Base-64" + +msgid "Base-64 encoded server certificate" +msgstr "Certificado del servidor codificado con base-64" + +msgid "Base-64 encoded service certificate" +msgstr "Certificado de servicio codificado en Base-64" + +msgid "Base-64 encoded user certificate" +msgstr "Certificado de usuario codificado en Base-64" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Falló la decodificación base64: %(reason)s" + +msgid "Binary data to archive" +msgstr "Datos binarios para archivar" + +msgid "Bind DN" +msgstr "Asociar DN" + +msgid "Bind rule type" +msgstr "Tipo de regla de enlace" + +msgid "Brief description of this profile" +msgstr "Breve descripción de este perfil" + +msgid "CA" +msgstr "CA" + +msgid "CA Compromise" +msgstr "CA de transacción" + +msgid "CA certificate" +msgstr "Certificado CA" + +msgid "CA is not configured" +msgstr "CA no está configurado" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" +"Registro CNAME no está permitido que coexista con ningún otro registro (RFC " +"1034, sección 3.6.2)" + +msgid "CSR" +msgstr "CSR" + +msgid "Cancel" +msgstr "Cancelar" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "No puede crear registro reverso para \"%(value)s\": %(exc)s" + +#, python-format +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "No puede decodificar fichero '%(filename)s': %(exc)s" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" +"No puede establecer confianza al AD desplegado en el mismo dominio que IPA. " +"Este ajuste no se soporta." + +msgid "Cannot hide CA renewal master." +msgstr "No se puede ocultar el maestro de renovación de CA." + +msgid "Cannot hide DNSSec key master." +msgstr "No se puede ocultar la clave maestra DNSSec." + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "No se puede ocultar el último servidor habilitado %(name)s." + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"No se puede llevar a cabo la validación SID sin el soporte de Samba 4 " +"instalado. Asegúrese de que tiene instalado el sub paquete server-trust-ad " +"de IPA en el servidor" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"No se puede llevar a cabo la validación del miembro externo sin el soporte " +"para Samba 4 instalado. Asegúrese de que tiene instalado el sub-paquete " +"server-trust-ad de IPA en el servidor" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" +"No puede llevar a cabo la operación de unión si el dominio propio " +"configurado. Asegúrese primero que está corriendo ipa-adtrust-install sobre " +"el servidor IPA" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" +"No puede llevar a cabo el comando seleccionado sin una instancia Samba 4 " +"configurada en este máquina. Asegúrese de estar ejecutando ipa-adtrust-" +"install sobre este servidor." + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" +"No puede llevar a cabo el comando seleccionado sin el soporte de Samba 4 " +"instalad. Asegúrese de tener el instalado el sub-paquete server-trust-ad de " +"IPA." + +msgid "Cannot query Directory Manager with API" +msgstr "No se puede cosultar al Administrador de Directorios con API" + +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "No puede leer el fichero '%(filename)s': %(exc)s" + +msgid "Cannot resolve KDC for requested realm" +msgstr "No es posible resolver KDC para el reinado solicitado" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" +"No puede buscar en los dominios de confianza sin un dominio propio " +"configurado. Asegúrese que tiene corriendo ipa-adtrust-install sobre el " +"servidor IPA primero" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "" +"No pudde especificar el mecanismo SASL y el enlace DN simultáneamente.\n" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "No se puede especificar servidor y LDAP uri simultáneamente.\n" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "No puede almacenar permiso ACI a %s" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "No puede usar %(old_name)s con %(new_name)s" + +msgid "Car License" +msgstr "Licencia de conducción" + +msgid "Certificate" +msgstr "Certificado" + +msgid "Certificate Association Data" +msgstr "Datos de Asociación del Certificado" + +msgid "Certificate Authorities" +msgstr "Autoridades de Certificado" + +msgid "Certificate Authority" +msgstr "Autoridad de Certificado" + +msgid "Certificate Hold" +msgstr "Certificado retenido" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "Configuración Global del Mapeo de Identidad de Certificado" + +msgid "Certificate Identity Mapping Rule" +msgstr "Regla de Mapeo de Identidad de Certificado" + +msgid "Certificate Identity Mapping Rule description" +msgstr "Descripción de la Regla de Mapeo de Identidad de Certificado" + +msgid "Certificate Identity Mapping Rule name" +msgstr "Nombre de Regla de Mapeo de Identidad de Certificado" + +msgid "Certificate Identity Mapping Rules" +msgstr "Reglas de Mapeo de Identidad de Certificado" + +msgid "Certificate Identity Mapping configuration options" +msgstr "Opciones de configuración del Mapeo de Identidad de Certificado" + +msgid "Certificate Profile" +msgstr "Certificado de Perfil" + +msgid "Certificate Profiles" +msgstr "Certificado de Perfiles" + +msgid "Certificate Revoked" +msgstr "Certificado revocado" + +msgid "Certificate Subject base" +msgstr "Base de certificado de asunto" + +msgid "Certificate Type" +msgstr "Tipo de certificado" + +msgid "Certificate Usage" +msgstr "Utilización del Certificado" + +msgid "Certificate chain" +msgstr "Cadena de certificado" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "Certificado para ${entity} ${primary_key}" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "Error de certificado de formato: %(error)s " + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "La operación certificada no puede ser completada: %(error)s" + +msgid "Certificate profiles cannot be renamed" +msgstr "Certificado de los perfiles no pueden ser renombrado" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "Certificados(s) almacenados en el archivo '%(file)s'" + +msgid "Certificate/CRL" +msgstr "Certificado/CRL" + +msgid "Certificates" +msgstr "Certificados" + +msgid "Cessation of Operation" +msgstr "Cese de operaciones" + +msgid "Change password" +msgstr "Cambiar contraseña" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Cambio de contraseña para \"%(value)s\"" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "Cambiado el estado del servidor de \"%(value)s\"." + +msgid "Character classes" +msgstr "Clases de caracteres" + +msgid "Check connection to remote IPA server." +msgstr "Comprobar la conexión al servidor IPA remoto." + +msgid "Check the status of a certificate signing request." +msgstr "Verificar el estado de una solicitud de firma de certificado." + +msgid "Checking if record exists." +msgstr "Comprobando que el registro existe." + +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "" +"Comprueba si alguno de los servidores tiene un servicio DNS habilitado." + +msgid "City" +msgstr "Ciudad" + +msgid "Class" +msgstr "Clase" + +msgid "Class of Service object used for linking policies with groups" +msgstr "Objeto Class of Service enlazando políticas con grupos" + +msgid "Clear" +msgstr "Limpiar" + +msgid "Clear all fields on the page." +msgstr "Limpiar todos los campos en la página." + +#, python-brace-format +msgid "Click to ${action}" +msgstr "Pulse para ${action}" + +msgid "Client credentials may be delegated to the service" +msgstr "Las credenciales del cliente pueden delegarse al servicio" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "El cliente no está configurado. Ejecutar la API de cliente a instalar." + +msgid "Client version. Used to determine if server will accept request." +msgstr "" +"Versión de cliente. Se utiliza para determinar si el servidor va a aceptar " +"la solicitud." + +msgid "Clock interval" +msgstr "Intervalo de reloj" + +msgid "Clock offset" +msgstr "Desplazamiento del reloj" + +msgid "Close" +msgstr "Cerrar" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "Cierre de tabla de claves falló\n" + +msgid "Collapse All" +msgstr "Cerrar Todo" + +msgid "Comma separated encryption types list" +msgstr "Lista de tipos de cifrado separados por coma" + +msgid "Comma-separated list of attributes" +msgstr "Lista separada por comas de atributos" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" +"Lista separada por comas de permisos a obtener (lectura, escritura, borrado, " +"todos)" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "Comando '%(name)s' es obsoleto" + +msgid "Command category" +msgstr "Categoría de comandos" + +msgid "Command category the rule applies to" +msgstr "Categoría de comandos la regla se aplica a" + +msgid "Command name" +msgstr "Nombre del comando" + +msgid "Command not implemented" +msgstr "El comando no se ha implementado" + +msgid "Commands" +msgstr "Comandos" + +msgid "Common Name" +msgstr "Nombre común" + +msgid "Conditions that could not be added" +msgstr "Condiciones que no pueden ser agregadas" + +msgid "Conditions that could not be removed" +msgstr "Condiciones que no pueden ser eliminadas" + +msgid "Configuration" +msgstr "Configuración" + +msgid "Configured administrative server limit exceeded" +msgstr "Límite administrativo del servidor configurado sobrepasado" + +msgid "Configured size limit exceeded" +msgstr "Tamaño límite configurado sobrepasado" + +msgid "Configured time limit exceeded" +msgstr "El tiempo límite configurado sobrepasado" + +msgid "Confirmation" +msgstr "Confirmación " + +msgid "Consecutive failures before lockout" +msgstr "Fallos consecutivos antes del bloqueo" + +msgid "Consume an entitlement." +msgstr "Consumir un derecho." + +msgid "Contact Settings" +msgstr "Configuración de contactos" + +msgid "Contact this specific KDC Server" +msgstr "Contactar este servidor KDC específico" + +msgid "Continue" +msgstr "Continuar" + +msgid "Continue to next page" +msgstr "Continúe a la siguiente página" + +msgid "Continuous mode: Don't stop on errors." +msgstr "Modo continuo: No se detenga en los errores." + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" +"Modo de funcionamiento continuo. Se reportan errores, pero el proceso " +"continúa" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "" +" Modo de funcionamiento continuo. Reporta los errores, pero el proceso " +"continúa." + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "No se pudo obtener %(name)s interactivamente" + +msgid "Counter" +msgstr "Contador" + +msgid "Create Stage user in from a delete user" +msgstr "Crear Escenario usuario desde un usuario borrado" + +msgid "Create a CA." +msgstr "Crear una CA." + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "Crear una nueva Regla de Mapeo de Identidad de Certificado." + +msgid "Create a new HBAC rule." +msgstr "Crear una nueva regla HBAC." + +msgid "Create a new SELinux User Map." +msgstr "Crear un nuevo Mapa de Usuario SELinux." + +msgid "Create a new automount key." +msgstr "Crear una nueva clave de automontaje." + +msgid "Create a new automount location." +msgstr "Crear una nueva localización de automontaje." + +msgid "Create a new automount map." +msgstr "Crear un nuevo mapa de automontaje" + +msgid "Create a new group." +msgstr "Crear un grupo nuevo." + +msgid "Create a new indirect mount point." +msgstr "Crear un nuevo punto de montaje indirecto." + +msgid "Create a new vault." +msgstr "Crear una nueva bóveda." + +msgid "Create as a non-POSIX group" +msgstr " Crear como un grupo no POSIX" + +msgid "Create dns record" +msgstr "Crear registro DNS" + +msgid "Create new ACI." +msgstr "Crear nuevo ACI." + +msgid "Create new DNS forward zone." +msgstr "Crear una zona de envío DNS." + +msgid "Create new DNS zone (SOA record)." +msgstr "Crear nueva zona DNS (registro SOA)." + +msgid "Create new Sudo Command Group." +msgstr "Crear un nuevo Grupo de Comando Sudo." + +msgid "Create new Sudo Command." +msgstr "Crear un nuevo Comando Sudo." + +msgid "Create new Sudo Rule." +msgstr "Crear nueva Regla Sudo." + +msgid "Create reverse" +msgstr "Crear reversa" + +msgid "Create reverse record for this IP Address" +msgstr "Crear registro reverso para esta Dirección IP" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "Ha sido creado ACI \"%(value)s\"" + +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "Creada CA \"%(value)s\"" + +msgid "Creating record." +msgstr "Creando el registro." + +msgid "Credentials cache permissions incorrect" +msgstr "Los permisos de credenciales de caché son incorrectos" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" +"Los fideicomisos a través del reino no están instalados. Asegúrese de que " +"está corriendo ipa-adtrust-install en el servidor IPA primero" + +msgid "Current DNS record contents:\n" +msgstr "Contenidos actuales del registro DNS:\n" + +msgid "Current Password" +msgstr "Contraseña Actual" + +msgid "Current password is required" +msgstr "Se necesita contraseña actual" + +msgid "Custom value" +msgstr "Valor personal" + +msgid "Customization" +msgstr "Personalización" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "DN de contenedor para grupos es DS relativo a DN" + +msgid "DN of container for users in DS relative to base DN" +msgstr "DN de contendor para usuarios es DS relativo a base DN" + +msgid "DN to bind as if not using kerberos" +msgstr "DN a vincular como si no usara kerberos" + +msgid "DNS" +msgstr "DNS" + +msgid "DNS Forward Zone" +msgstr "Zona de Envío DNS" + +msgid "DNS Forward Zones" +msgstr "Zonas de Envío DNS" + +msgid "DNS Global Configuration" +msgstr "Configuración global de DNS" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "Tipo DNS RR \"%s\" no es soportado por el complemento bind-dyndb-ldap" + +msgid "DNS Resource Record" +msgstr "Registro de Recurso de DNS" + +msgid "DNS Resource Records" +msgstr "Registros de Recursos DNS" + +msgid "DNS Zone" +msgstr "Zona DNS" + +msgid "DNS Zone Settings" +msgstr "Configuración de la Zona DNS" + +msgid "DNS Zones" +msgstr "Zonas DNS" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" +"Fallo en la comprobación DNS: Esperado {%(expected)s} obtenido {%(got)s}" + +msgid "DNS class" +msgstr "Clase DNS" + +msgid "DNS configuration options" +msgstr "Opciones de configuración de DNS" + +msgid "DNS forward zone" +msgstr "Zona de envío DNS" + +msgid "DNS forward zones" +msgstr "Zonas de envío DNS" + +msgid "DNS forwarder" +msgstr "Reenviador DNS" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" +"Las semánticas del promotor cambió desde IPA 4.0.\n" +"Usted puede desear usar las zonas de envío (dnsforwardzone-*) en su lugar.\n" +"Lea los documentos para más detalles." + +msgid "DNS is not configured" +msgstr "DNS no está configurado" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "la etiqueta DNS no puede ser más larga de 63 caracteres" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "La etiqueta DNS no puede ser más larga de 63 caracteres" + +msgid "DNS record was deleted because it contained no data." +msgstr "Registro DNS fue borrado porque no contenía datos." + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "Registro(s) DNS del host %(host)s podría no ser removido. (%(reason)s)" + +msgid "DNS records can be only updated one at a time" +msgstr "Los registros DNS solo pueden ser actualizados de uno en uno" + +msgid "DNS resource record" +msgstr "Registro de recursos DNS" + +msgid "DNS resource record type" +msgstr "Registro de tipo de recurso DNS " + +msgid "DNS resource records" +msgstr "Registros de recurso DNS" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" +"Zona reversa DNS %(revzone)s para dirección IP %(addr)s no está manejada por " +"este servidor" + +msgid "DNS server" +msgstr "Servidor DNS" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"Servidor DNS %(server)s no soporta DNSSEC: %(error)s.\n" +"Si está habilitada la validación DNSSEC sobre servidor(es) IPA, " +"deshabilitélo por favor." + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"Servidor DNS %(server)s no soporta EDNS0 (RFC 6891): %(error)s.\n" +"Si la validación DNSSEC está habilitada sobre servidor(es) IPA, por favor " +"deshabilitélo." + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "Servidor DNS %(server)s: %(error)s." + +msgid "DNS servers" +msgstr "Servidores DNS" + +msgid "DNS zone" +msgstr "zona DNS" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "Zona DNS %(zone)s no encontrado" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" +"La zona DNS para cada realmdomain debe contener registros SOA o NS. No se " +"han encontrado registros para: %s" + +msgid "DNS zone root record cannot be renamed" +msgstr "El registro DNS de zona raíz no puede ser renombrado" + +msgid "DNS zones" +msgstr "zonas DNS" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" +"El soporte DNSSEC es experimental.\n" +"%(additional_info)s" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" +"Fallo en la validación DNSSEC: %(error)s.\n" +"Por favor verifique su configuración DNSSEC o deshabilite la validación " +"DNSSEC en todos los servidores IPA." + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "El registro DS no debe estar en zona apéndice (RFC 4035 sección 2.4)" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" +"El registro DS requiere coexistir con un registro NS record (RFC 4592 " +"sección 4.6, RFC 4035 sección 2.4)" + +msgid "Data" +msgstr "Datos" + +msgid "Debugging output" +msgstr "Salida de depuración" + +msgid "Default attributes" +msgstr "Atributos predeterminados" + +msgid "Default e-mail domain" +msgstr "Dominio de correo electrónico por defecto" + +msgid "Default group for new users" +msgstr "Grupo predeterminado para usuarios nuevos" + +msgid "Default group for new users is not POSIX" +msgstr "El grupo predeterminado para nuevos usuarios no es POSIX" + +msgid "Default group for new users not found" +msgstr "Grupo predeterminado para nuevos usuarios no encontrado" + +msgid "Default group objectclasses" +msgstr "Grupo predeterminado objectclass" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "Clases de objeto grupo por defecto (lista separada por comas)" + +msgid "Default location of home directories" +msgstr "Localización por defecto de los directorios home" + +msgid "Default shell" +msgstr "Shell predeterminada" + +msgid "Default shell for new users" +msgstr "Shell predeterminada para usuarios nuevos" + +msgid "Default ticket policy could not be read" +msgstr "La política de entrada por defecto podría no ser leída" + +msgid "Default time to live" +msgstr "Tiempo de vida predeterminado" + +msgid "Default user objectclasses" +msgstr "Usuario predeterminado objectclasses" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "Clases de objeto usuario por defecto (lista separada por comas)" + +msgid "Default users group" +msgstr "Grupo de usuarios predeterminado" + +msgid "Degrees Latitude" +msgstr "Latitud en grados" + +msgid "Degrees Longitude" +msgstr "Grados de Longitud" + +msgid "Delegation" +msgstr "Delegación" + +msgid "Delegation name" +msgstr "Nombre de delegación" + +msgid "Delegations" +msgstr "Delegaciones" + +msgid "Delete" +msgstr "Eliminar" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "Borrar %(name)s '%(value)s'?" + +msgid "Delete ACI." +msgstr "Borrar ACI." + +msgid "Delete Class of Service entry" +msgstr "Borrar entrada Class of Service" + +msgid "Delete DNS forward zone." +msgstr "Borrar forma de reenvío DNS." + +msgid "Delete DNS record entry." +msgstr "Borrar entrada de registro DNS." + +msgid "Delete DNS resource record." +msgstr "Borrar un registro de recurso DNS." + +msgid "Delete DNS zone (SOA record)." +msgstr "Borrar zona DNS (registro SOA)." + +msgid "Delete IPA server." +msgstr "Eliminar servidor IPA." + +msgid "Delete Key, Unprovision" +msgstr "La eliminación de clave, unprovision" + +msgid "Delete Sudo Command Group." +msgstr "Borrado Grupo de Comando Sudo." + +msgid "Delete Sudo Command." +msgstr "Borrar Comando Sudo." + +msgid "Delete Sudo Rule." +msgstr "Borrar Regla Sudo." + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "Borrar una Regla de Mapeo de Identidad de Certificado." + +msgid "Delete a Certificate Profile." +msgstr "Borrar un Certificado Perfil" + +msgid "Delete a RADIUS proxy server." +msgstr "Borrar un servidor proxy RADIUS." + +msgid "Delete a SELinux User Map." +msgstr "Borrar un Mapa de Usuario SELinux." + +msgid "Delete a delegation." +msgstr "Borrar una delegación." + +msgid "Delete a group password policy." +msgstr "Borrar un grupo de política de contraseña." + +msgid "Delete a host." +msgstr "Borrar un host." + +msgid "Delete a hostgroup." +msgstr "Borrar un grupo de host." + +msgid "Delete a netgroup." +msgstr "Borrar un grupo de red." + +msgid "Delete a permission." +msgstr "Borrar un permiso." + +msgid "Delete a privilege." +msgstr "Borrar un privilegio." + +msgid "Delete a role." +msgstr "Borrar un rol." + +msgid "Delete a self-service permission." +msgstr "Borrar un auto servicio de permiso." + +msgid "Delete a stage user." +msgstr "Borrar un escenario usuario." + +msgid "Delete a trust." +msgstr "Borrar una confianza." + +msgid "Delete a user" +msgstr "Borrar un usuario" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "Borrar un usuario manteniendo la entrada disponible para un uso futuro" + +msgid "Delete a user." +msgstr "Borrar un usuario." + +msgid "Delete all associated records" +msgstr "Eliminar todos los registros asociados" + +msgid "Delete all?" +msgstr "¿Borrar todos?" + +msgid "Delete an HBAC rule." +msgstr "Borrar una regla HBAC." + +msgid "Delete an HBAC service group." +msgstr "Borrar un grupo de servicio HBAC." + +msgid "Delete an ID range." +msgstr "Eliminar un intervalo de ID." + +msgid "Delete an IPA location." +msgstr "Borrar una localización IPA." + +msgid "Delete an IPA service." +msgstr "Borrar un servicio IPA." + +msgid "Delete an OTP token." +msgstr "Borrar una ficha OTP." + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" +"Borrar un par atributo/valor. La opción será evaluada al final, después de " +"todos los ajustes y añadidos." + +msgid "Delete an automount key." +msgstr "Borrar una clave de automontaje." + +msgid "Delete an automount location." +msgstr "Borrar una localización de automontaje." + +msgid "Delete an automount map." +msgstr "Borrar un mapa de automontaje." + +msgid "Delete an existing HBAC service." +msgstr "Borrar un servicio HBAC existente." + +msgid "Delete domain" +msgstr "Borrar dominio" + +msgid "Delete group." +msgstr "Eliminar grupo." + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "Ha sido eliminado ACI \"%(value)s\"" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "Borrada CA \"%(value)s\"" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Regla de Mapeo de Identidad de Certificado \"%(value)s\" borrada" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "Borrada forma de reenvío DNS \"%(value)s\"" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "Borrada zona DNS \"%(value)s\"" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "Suprimida regla HBAC \"%(value)s\"" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "Suprimido el servicio HBAC \"%(value)s\"" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr " Suprimido el servicio HBAC grupo \"%(value)s\"" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "Se eliminó el intervalo de ID «%(value)s»" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Borrada localización IPA \"%(value)s\"" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "Eliminado servidor IPA \"%(value)s\"" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Ficha OTP borrada \"%(value)s\"" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "Borrado servidor proxy RADIUS \"%(value)s\"" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "Borrado Mapa de Usuario SELinux \"%(value)s\"" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "Borrado Comando Sudo “%(value)s”" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Borrado Grupo de Comando Sudo “%(value)s”" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Borrada Regla Sudo “%(value)s”" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "Borrada regla automiembro \"%(value)s\"" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "Borrada clave de automontaje \"%(value)s\"" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "Borrada una localización de automontaje \"%(value)s\"" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "Borrado un mapa de automontaje \"%(value)s\"" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "Delegación eliminada \"%(value)s\"" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Ha sido eliminado el grupo \"%(value)s\"" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "Ha sido eliminado el equipo \"%(value)s\"" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Ha sido eliminado el grupo de equipo \"%(value)s\"" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "%(value)s\" de netgroup eliminados" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "Permiso borrado \"%(value)s\"" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "Privilegio eliminado \"%(value)s \"" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "Perfil borrado \"%(value)s\"" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "Registro eliminado \"%(value)s\"" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "Rol eliminado \"%(value)s\"" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "autoservicio eliminados \"%(value)s\"" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "Ha sido eliminado el servicio \"%(value)s\"" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "Borrado escenario usuario \"%(value)s\"" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "Confianza borrada \"%(value)s\"" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Ha sido eliminado el usuario \"%(value)s\"" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" +"No se permite eliminar un grupo administrado. Primero debe ser desasociado. " + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" +"El borrado de este servidor no está permitido puesto que dejaría su " +"instalción sin una CA." + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" +"El borrado de este servidor no está permitido puesto que dejaría su " +"instalación sin un KRA." + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "Borrando este servidor dejará su instalación sin un DNS." + +msgid "Deny" +msgstr "Negar" + +msgid "Deprecated options" +msgstr "Opciones obsoletas" + +#, python-format +msgid "Deprecated; use %s" +msgstr "Obsoleto; use %s" + +msgid "Describe currently authenticated identity." +msgstr "Describe la identidad actualmente autentificada." + +msgid "Description" +msgstr "Descripción" + +msgid "Description of the purpose of the CA" +msgstr "Descripción del propósito de la CA" + +msgid "Detach a managed group from a user." +msgstr "Desenganchar un grupo gestionado desde un usuario." + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Ha sido desasociado el grupo \"%(value)s\" del usuario \"%(value)s\"" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" +"Determina si el plugin Schema Compatibility está configurado para servir a " +"los usuarios y grupos de los dominios de confianza" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" +"Determina si ipa-adtrust-install ha estado corriendo sobre este sistema" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "Determina si ipa-adtrust-install ha estado corriendo con tarea sidgen" + +msgid "Dict of I18N messages" +msgstr "Dictado de los mensajes regionales" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "Dict de JSON comandos codificados IPA" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "Métodos IPA codificados de Dict de JSON " + +msgid "Dict of JSON encoded IPA Objects" +msgstr "El dict de JSON ha codificado objetos IPA" + +msgid "Dictionary mapping variable name to value" +msgstr "Nombre de la variable de mapeo de dicionario a valorizar " + +msgid "Digest" +msgstr "Resumen" + +msgid "Digest Type" +msgstr "Tipo de Resumen" + +msgid "Digits" +msgstr "Dígitos" + +msgid "Direct" +msgstr "Directo" + +msgid "Direct Membership" +msgstr "Afiliación Directa" + +msgid "Direction Latitude" +msgstr "Latitud de dirección" + +msgid "Direction Longitude" +msgstr "Dirección de la Longitud" + +msgid "Disable" +msgstr "Desactivar" + +msgid "Disable DNS Forward Zone." +msgstr "Deshabilitar la Zona de Reenvío DNS." + +msgid "Disable DNS Zone." +msgstr "Deshabilitar Zona DNS." + +msgid "Disable a CA." +msgstr "Deshabilitar una CA." + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "Deshabilitar una Regla de Mapeo de Identidad de Certificado." + +msgid "Disable a Sudo Rule." +msgstr "Deshabilitar Regla Sudo." + +msgid "Disable a user account." +msgstr "Deshabilitar una cuenta de usuario." + +msgid "Disable an HBAC rule." +msgstr "Deshabilitar una regla HBAC." + +msgid "Disable an SELinux User Map rule." +msgstr "Deshabilitar una regla de Mapa de Usuario SELinux." + +msgid "Disable per-user override" +msgstr "Deshabilitar la anulación por uso" + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "Deshabilitar la clave Kerberos y el certificado SSL de un servicio." + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "" +"Deshabilitar la clave Kerberos, el certificado SSL y todos los servicios de " +"un host." + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "Deshabilitar el uso de recursos IPA por el dominio de la confianza" + +msgid "Disabled" +msgstr "Desactivado" + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "Deshabilitada CA \"%(value)s\"" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Regla de Mapeo de Identidad de Certificado \"%(value)s\" deshabilitada" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "Deshabilitada zona de reenvío DNS \"%(value)s\"" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "Zona de DNS desactivada \"%(value)s\" " + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "\"%(value)s\" regla HBAC desactivada " + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "Deshabilitado Mapa de Usuario SELinux \"%(value)s\"" + +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "Regla Sudo Deshabilitada “%s”" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "Host desactivado \"%(value)s\"" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "Servicio inhabilitado \"%(value)s\"" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "Deshabilitar dominio de confianza \"%(value)s\"" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr " \"%(value)s\" de cuenta de usuario desactivada" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "" +"Rechazar que los grupos de host creen tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Rechazar que los grupos de host recuperen tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "Rechazar que los hosts creen tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "Rechazar que los hosts recuperen tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" +"Rechazar que los grupos de usuario creen tabla de tecla de '${primary_key}'" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Rechazar que los grupos de usuario recuperen tabla de teclas de " +"'${primary_key}'" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "Rechazar que los usuarios creen tabla de teclas de '${primary_key}'" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "Rechazar que los usuarios recuperen taa de teclas de '${primary_key}'" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" +"No permite a usuarios, grupos, hosts o grupos de host crear una keytab de " +"este host." + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" +"Dejar de permitir a los usuarios, grupos, hosts o grupos de host crear una " +"tabla de claves de este servicio." + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" +"No permite a usuarios, grupos, hosts o grupos de host recuperar una keytab " +"de este host." + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" +"Dejar de permitir a los usuarios, grupos, hosts o grupos de host recuperar " +"una tabla de claves de este servicio." + +msgid "Display Class of Service entry" +msgstr "Visualizar entrada Class of Service" + +msgid "Display DNS resource." +msgstr "Mostrar un recurso DNS." + +msgid "Display Sudo Command Group." +msgstr "Mostrar Grupo de Comando Sudo." + +msgid "Display Sudo Command." +msgstr "Mostrar Comando Sudo." + +msgid "Display Sudo Rule." +msgstr "Mostrar Regla Sudo." + +msgid "Display a single ACI given an ACI name." +msgstr "Muestra un único ACI dando un nombre de ACI." + +msgid "Display an automount key." +msgstr "Mostrar una clave de automontaje." + +msgid "Display an automount location." +msgstr "Mostrar una localización de automontaje" + +msgid "Display an automount map." +msgstr "Mostrar un mapa de automontaje" + +msgid "Display current entitlements." +msgstr "Mostrar los derechos actuales." + +msgid "Display effective policy for a specific user" +msgstr "Ofrece la política efectiva para un determinado usuario" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" +"Visualizar información sobre una Regla de Mapeo de Identidad de Certificado." + +msgid "Display information about a DNS forward zone." +msgstr "Mostrar información sobre una zona de reenvío DNS." + +msgid "Display information about a DNS zone (SOA record)." +msgstr "Mostrar información sobre una zona DNS (registro SOA)." + +msgid "Display information about a RADIUS proxy server." +msgstr "Muestra información sobre un servidor proxy RADIUS." + +msgid "Display information about a delegation." +msgstr "Mostrar información sobre una delegación." + +msgid "Display information about a host." +msgstr "Mostrar información sobre un host." + +msgid "Display information about a hostgroup." +msgstr "Mostrar información sobre un grupo de host." + +msgid "Display information about a named group." +msgstr "Mostrar información sobre un grupo denominado." + +msgid "Display information about a netgroup." +msgstr "Mostrar información sobre un grupo de red." + +msgid "Display information about a permission." +msgstr "Mostrar información sobre un permiso." + +msgid "Display information about a privilege." +msgstr "Mostrar información sobre un privilegio." + +msgid "Display information about a range." +msgstr "Mostrar información sobre un rango." + +msgid "Display information about a role." +msgstr "Mostrar información sobre un rol." + +msgid "Display information about a self-service permission." +msgstr "Mostrar información sobre un auto servicio de permiso." + +msgid "Display information about a trust." +msgstr "Mostrar información sobre una confianza." + +msgid "Display information about a user." +msgstr "Mostrar información sobre un usuario." + +msgid "Display information about an HBAC service group." +msgstr "Mostrar información sobre un grupo de servicio HBAC." + +msgid "Display information about an HBAC service." +msgstr "Mostrar información sobre un servicio HBAC." + +msgid "Display information about an IPA location." +msgstr "Muestra información sobre una localización IPA." + +msgid "Display information about an IPA service." +msgstr "Mostrar información sobre un servicio IPA." + +msgid "Display information about an OTP token." +msgstr "Mostrar información sobre una ficha OTP." + +msgid "Display information about password policy." +msgstr "Mostrar información sobre la política de contraseña." + +msgid "Display name" +msgstr "Mostrar nombre" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" +"Mostrar los derechos de acceso de esta entrada (requiere --all). Consulte la " +"página man de IPA para más detalles." + +msgid "Display the current Kerberos ticket policy." +msgstr "Mostrar la actual entrada de política Kerberos." + +msgid "Display the list of realm domains." +msgstr "Muestra la lista de dominios reino." + +msgid "Display the properties of a CA." +msgstr "Muestra las propiedades de una CA." + +msgid "Display the properties of a Certificate Profile." +msgstr "Muestra las propiedades de un Certificado de Perfil" + +msgid "Display the properties of a SELinux User Map rule." +msgstr "Mostrar las propiedades de una regla de Mapa de Usuario SELinux." + +msgid "Display the properties of an HBAC rule." +msgstr "Mostrar las propiedades de una regla HBAC." + +msgid "Display user record for current Kerberos principal" +msgstr "Muestra el registro del usuario para el principal de Kerberos actual" + +msgid "Do not display QR code" +msgstr "No visualiza código QR" + +msgid "Do not update records only return expected records" +msgstr "No actualizar registros solo devolver registros esperados" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "¿Desea quitar el alias kerberos ${alias}?" + +msgid "Dogtag Authority ID" +msgstr "ID de la Placa de Identidad de la Autoridad" + +msgid "Domain" +msgstr "Dominio" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "Dominio '%(domain)s' no es el dominio raíz para el bosque '%(forest)s'" + +msgid "Domain GUID" +msgstr "GUID de Dominio" + +msgid "Domain NetBIOS name" +msgstr "Nombre de dominio NetBIOS" + +msgid "Domain SID of the trusted domain" +msgstr "SID de dominio del dominio de confianza" + +msgid "Domain Security Identifier" +msgstr "Identificador de Seguridad de Dominio" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "Controlador de dominio para el dominio Active Directory opcional)" + +msgid "Domain enabled" +msgstr "Dominio habilitado" + +msgid "Domain name" +msgstr "Nombre de dominio" + +msgid "Domain where the user entry will be searched" +msgstr "Dominio donde se buscará la entrada de usuario" + +msgid "Don't create user private group" +msgstr "No crear grupo privado de usuario" + +msgid "Download" +msgstr "Descargar" + +msgid "Download certificate as PEM formatted file." +msgstr "Descargar certificado como fichero formateado PEM." + +msgid "Dry run" +msgstr "Correr en seco" + +msgid "Duplicate keys skipped:" +msgstr "Llaves duplicadas omitidas" + +msgid "Duplicate maps skipped:" +msgstr "Mapa duplicado omitido" + +msgid "Dynamic update" +msgstr "Actualización dinámica" + +msgid "Edit" +msgstr "Editar" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "Editar ${entity}" + +msgid "Effective attributes" +msgstr "Atributos efectivos" + +msgid "Email address" +msgstr "Dirección de correo electrónico" + +msgid "Employee Information" +msgstr "Información del Empleado" + +msgid "Enable" +msgstr "Activar" + +msgid "Enable DNS Forward Zone." +msgstr "Habilitar Zona de Reenvío DNS." + +msgid "Enable DNS Zone." +msgstr "Habilitar Zona DNS." + +msgid "Enable a CA." +msgstr "Habilitar una CA." + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "Habilitar una Regla de Mapeo de Identidad de Certificado." + +msgid "Enable a Sudo Rule." +msgstr "Habilitar Regla Sudo." + +msgid "Enable a user account." +msgstr "Habilitar una cuenta de usuario." + +msgid "Enable an HBAC rule." +msgstr "Habilitar una regla HBAC." + +msgid "Enable an SELinux User Map rule." +msgstr "Habilitar una regla de Mapa de Usuario SELinux." + +msgid "Enable migration mode" +msgstr "Habilitar modo migración" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "Habilitar o Deshabilitar PKINIT Anónimo." + +msgid "Enabled" +msgstr "Habilitado" + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "Habilitada CA \"%(value)s\"" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Regla de Mapeo de Identidad de Certificado \"%(value)s\" habilitada" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "Habilitada zona de reenvío DNS \"%(value)s\"" + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "Zona DNS habilitada \" %(value)s \"" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "Habilitada regla HBAC \"%(value)s\"" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "Habilitado Mapa de Usuario SELinux \"%(value)s\"" + +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "Regla Sudo Habilitada “%s”" + +msgid "Enabled server roles" +msgstr "Rolkes de servidor habilitados" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "Habilitado dominio de confianza \"%(value)s\"" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr " \"%(value)s\" de cuenta de usuario activada" + +msgid "Encryption types to request" +msgstr "Solicitud de tipos de cifrado" + +msgid "Enctype comparison failed!\n" +msgstr "¡Falló comparación de Enctype!\n" + +msgid "Enrollment" +msgstr "Inscripción" + +msgid "Enrollment UUID" +msgstr "Inscripción UUID" + +msgid "Enrollment UUID (not implemented)" +msgstr "Inscripción de UUID (no implementada)" + +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "Inscripción fallada. %s\n" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "Ingrese %(label)s nuevamente para verificar: " + +msgid "Entry" +msgstr "Entrada" + +#, python-format +msgid "Entry %s does not exist" +msgstr "Entrada %s no existe" + +#, python-format +msgid "Entry %s not found" +msgstr "Entrada %s no encontrada" + +msgid "Error" +msgstr "Error" + +msgid "Error changing account status" +msgstr "Error al cambiar el estado de cuenta" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "Error al obtener el dominio predeterminado Kerberos:%s.\n" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "Error al obtener credenciales de iniciales:%s.\n" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "Error de análisis \"%1$s\": %2$s.\n" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "Error al resolver tabla de claves:%s.\n" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "Error de almacenamiento de credenciales en cache de credenciales:%s.\n" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" +"Establecida confianza bidireccional. Por defecto la confianza es de un solo " +"sentido entrante." + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" +"Establecida confianza externa a un dominio en otro bosque. La confianza no " +"es transitiva más allá del dominio." + +msgid "Exceeded number of tries to forward a request." +msgstr "Excedido el número de intentos para enviar una petición." + +msgid "Exchanger" +msgstr "Intercambiador" + +msgid "Excluded attributes" +msgstr "Atributos excluidos" + +msgid "Exclusive Regex" +msgstr "Regex exclusivo" + +msgid "Expand All" +msgstr "Expandir Todo" + +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "Expandir el búfer en jsonrpc_handle_response falló" + +msgid "Expires On" +msgstr "Expira el" + +msgid "Export plugin meta-data for the webUI." +msgstr "Exportar los metadatos del plugin para webUI." + +msgid "Expression" +msgstr "Expresión" + +msgid "External" +msgstr "Externos" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "Grupo Externo los comandos pueden correr como (sudorule-find sólo)" + +msgid "External User" +msgstr "De usuarios externos" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "Usuario Externo los comandos pueden correr como (sudorule-find sólo)" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "Usuario Externo la regla aplica a (sudorule-find sólo)" + +msgid "External host" +msgstr "Equipo externo" + +msgid "External member" +msgstr "Miembro externo" + +msgid "External trust" +msgstr "Confianza externa" + +msgid "Extra hashes to generate in password plug-in" +msgstr "Hashes extra para generar en el plugin de contraseña" + +msgid "Extra target filter" +msgstr "Filtro de objetivo adicional" + +msgid "Failed CAs" +msgstr "Error en CAs" + +msgid "Failed RunAs" +msgstr "Error al ejecutar como" + +msgid "Failed RunAsGroup" +msgstr "Erro al ejecutar grupo como" + +msgid "Failed allowed to create keytab" +msgstr "Falló permitir crear una KeyTab" + +msgid "Failed allowed to retrieve keytab" +msgstr "Falló permitir recuperar una KeyTab" + +msgid "Failed hosts/hostgroups" +msgstr "Host o grupo de Host fallidos" + +msgid "Failed logins" +msgstr "Inicios de sesión fallidos" + +msgid "Failed managedby" +msgstr "Falló managedby" + +msgid "Failed members" +msgstr "Miembros fallidos" + +msgid "Failed owners" +msgstr "Error en Propietarios" + +msgid "Failed profiles" +msgstr "Errores en los perfiles" + +msgid "Failed service/service groups" +msgstr "Error en el/los servicio(s)" + +msgid "Failed source hosts/hostgroups" +msgstr "Host o grupo de hosts origenes fallidos" + +msgid "Failed targets" +msgstr "Error en Objetivos" + +msgid "Failed to add" +msgstr "Fallo al añadir" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "No se pudo agregar clave de la tabla de claves\n" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" +"Falló al intenatar agregar al usuario al grupo predeterminado. Utilice 'ipa " +"group-add-member' para agregarlo manualmente. " + +msgid "Failed to authenticate to CA REST API" +msgstr "Falló al autenticarse a CA REST API" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "Falló al enlazar al servidor!\n" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" +"Fallo al limpiar memberPrincipal %(principal)s de la entrada s4u2proxy " +"%(dn)s: %(err)s" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "Fallo al limpiar claves Custodia para %(master)s: %(err)s" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "Fallo al limpiar entradas DNA hostname para %(master)s: %(err)s" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "Fallo al limpiar entradas %(hostname)s DNS: %(err)s" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "Fallo al limpiar principales/claves del servidor: %(err)s" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "No se pudo cerrar la tabla de claves\n" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "Fallo al conectar sssd sobre SystemBus. Vea detalles en error_log" + +#, c-format +msgid "Failed to create control!\n" +msgstr "¡Falló crear control!\n" + +#, c-format +msgid "Failed to create key material\n" +msgstr "Error al crear el material de clave\n" + +msgid "Failed to create key!\n" +msgstr "¡Falló la creación de clave!\n" + +msgid "Failed to create random key!\n" +msgstr "Falló la creación de clave aleatoria\n" + +msgid "Failed to decode control reply!\n" +msgstr "Falló al decodificar la respuesta de control!\n" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" +"Fallo al encontrar usuarios sobre SystemBus. Vea detalles en error_log" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "Falló al obtener keytab\n" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "Falló para obtener keytab!\n" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "Falló al obtener resultados: %s\n" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "Fallo abrir clave de tablas.\n" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "Falló al abrir el fichero de configuración %s\n" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "No pudo abrir la tabla de claves\n" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "Fallo al abrir keytab '%1$s': %2$s\n" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "Falló al analizar el fichero de configuración %s\n" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "Falló al analizar el resultado extendido: %s\n" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "Falló al analizar el resultado: %s\n" + +msgid "Failed to remove" +msgstr "Error al remover " + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" +"Fallo al quitar el servidor %(master)s de la lista de servidores: %(err)s" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "Falló al recuperar algunas teclas" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "Falló al recuperar la encriptación tipo %1$s (#%2$d)\n" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "Falló al recuperar el tipo de encriptación tipo #%d\n" + +msgid "Failed users/groups" +msgstr "Usuario o grupos de usuario incorrectos" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" +"Falla al intentar decodificar la petición de identificación de certificado: " +"%s" + +msgid "Failure reset interval" +msgstr "Falló reajuste de intervalo" + +msgid "Fallback primary group" +msgstr "Grupo primario de respaldo" + +msgid "False" +msgstr "Falso" + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" +"False si la migración falla porque el plug-in de compatibilidad está " +"habilitado." + +msgid "False if migration mode was disabled." +msgstr "\"False\", si el modo de migración fue inhabilitado." + +msgid "Fax Number" +msgstr "Número de fx" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" +"No se pudo recuperar dominios del bosque de confianza. Vea detalles en " +"error_log" + +#, python-format +msgid "File %(file)s not found" +msgstr "No se encontró el archivo %(file)s " + +msgid "File containing data to archive" +msgstr "Fichero conteniendo datos para archivar" + +msgid "File containing profile configuration" +msgstr "Fichero que contiene la configuración del perfil" + +msgid "File containing the new vault password" +msgstr "Fichero que contiene la nueva contraseña de bóveda" + +msgid "File containing the new vault public key" +msgstr "Fichero que contiene la nueva clave pública de bóveda" + +msgid "File containing the old vault password" +msgstr "Fichero conteniendo la contraseña de bóveda antigua" + +msgid "File containing the old vault private key" +msgstr "Fichero que contiene la clave privada de bóveda antigua" + +msgid "File containing the vault password" +msgstr "Fichero que contiene la contraseña de bóveda" + +msgid "File containing the vault public key" +msgstr "Fichero que contiene la clave pública de la bóveda" + +msgid "File to load the certificate from" +msgstr "Archivo desde el que cargar el certificado" + +msgid "File to load the certificate from." +msgstr "Archivo desde donde cargar el certificado" + +msgid "File to store the certificate in." +msgstr "Archivo para almacenar el certificado" + +msgid "Filename is empty" +msgstr "El nombre de fichero está vacío" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "Nombre de fichero de un perfil crudo. El formato XML no se soporta" + +msgid "Filter" +msgstr "Filtro" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "Filtro disponible ${other_entity}" + +msgid "Find" +msgstr "Buscar" + +msgid "Find a server role on a server(s)" +msgstr "Encontrar un rol de servidor sobre un servidor(s)" + +msgid "Fingerprint" +msgstr "Huella digital" + +msgid "Fingerprint (SHA1)" +msgstr "Huella digital (SHA1)" + +msgid "Fingerprint (SHA256)" +msgstr "Huella digital (SHA256)" + +msgid "Fingerprint Type" +msgstr "Tipo de huella digital" + +msgid "Fingerprints" +msgstr "Las huellas dactilares" + +msgid "First Code" +msgstr "Primer Código" + +msgid "First Posix ID of the range" +msgstr "Primer Posix ID del rango" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "Primera ID Posix ID del rango reservado para los dominios de confianza" + +msgid "First RID of the corresponding RID range" +msgstr "Primer RID del correspondiente rango RID" + +msgid "First RID of the secondary RID range" +msgstr "Primer RID del rango RID secundario" + +msgid "First date/time the token can be used" +msgstr "Primera fecha/hora en que puede usar la ficha" + +msgid "First name" +msgstr "Nombre" + +msgid "Flags" +msgstr "Banderas" + +msgid "Following segments were not deleted:" +msgstr "Los siguientes segmentos no fueron borrados:" + +msgid "Force" +msgstr "Forzar" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" +"Fuerza la creación de zona DNS aún en el caso de que se superponga con una " +"zona existente." + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" +"Fuerza la creación de zona DNS aunque el servidor de nombre no se pueda " +"resolver." + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" +"Fuerza la creación de zona DNS aunque el servidor de nombre no se pueda " +"resolver. (Obsoleto)" + +msgid "Force adding domain even if not in DNS" +msgstr "Forzar el añadir un dominio aunque no esté en DNS" + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "" +"Fuerza el cambio del servidor de nombre aunque el servidor de nombre no en " +"DNS" + +msgid "Force server removal" +msgstr "Forzar la eliminación del servidor" + +msgid "Force server removal even if it does not exist" +msgstr "Fuerza el borrado del servidor aunque no exista" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "Forzar la unión del host. Reunirlo aunque ya este unido." + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "Forzando el borrado de %(hostname)s" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" +"Bosque '%(forest)s' tiene confianza existente para forest(s) %(domains)s que " +"evita una confianza en '%(conflict)s'" + +msgid "Forward policy" +msgstr "Política de envío" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" +"La política de reenvío se define para ello en IPA DNS, ¿tal vez el " +"reenviador apunta al host incorrecto?" + +msgid "Forward to server instead of running locally" +msgstr "Reenvía al servidor en lugar de ejecutarse localmente" + +msgid "Forward zones only" +msgstr "Zonas de reenvío sólo" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" +"Conflictos de la política de envío con algunas zonas vacías automáticas. Las " +"peticiones para las zonas especificadas por RFC 6303 ignorarán el envío y " +"recursión y siempre tendrán por resultado respuestas NXDOMAIN. Para evitar " +"este comportamiento use la política de envío 'only'." + +#, python-format +msgid "Found '%(value)s'" +msgstr "Ha sido encontrado '%(value)s'" + +msgid "Full name" +msgstr "Nombre y apellidos" + +msgid "Fully Qualified Host Name" +msgstr "Nombre de host totalmente calificado" + +msgid "Function to get details" +msgstr "Función para obtener detalles" + +msgid "GID" +msgstr "GID" + +msgid "GID (use this option to set it manually)" +msgstr "GID (utilice esta opción para definirlo manualmente)" + +msgid "GSSAPI|EXTERNAL" +msgstr "GSSAPI|EXTERNAL" + +msgid "General" +msgstr "General" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "Generar una contraseña aleatoria que se utilizará en la inscripción " + +msgid "Generate automount files for a specific location." +msgstr "Generar ficheros de automontaje para una localización específica." + +msgid "Get" +msgstr "Obtener" + +msgid "Global DNS configuration is empty" +msgstr "La configuración global DNS está vacía" + +msgid "Global Trust Configuration" +msgstr "Configuración Global de Confianza" + +msgid "Global forwarders" +msgstr "Promotores globales" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Promotores globales. Se puede especificar un pueeto personalizado por cada " +"promotor usando el formato estándar \"IP_ADDRESS port PORT\"" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" +"Política de reenvío global. Establecer a \"none\" para deshabilitar " +"cualquier promotor global." + +msgid "Granted rights" +msgstr "Derechos concedidos" + +msgid "Granted to Privilege" +msgstr "Concedido al Privilegio" + +msgid "Granting privilege to roles" +msgstr "Concesión de privilegios a los roles" + +msgid "Group" +msgstr "Grupo" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "El grupo '%s' no existe" + +msgid "Group ID Number" +msgstr "Número de Identificación de Grupo" + +msgid "Group Options" +msgstr "Opciones de Grupo" + +msgid "Group Settings" +msgstr "Configuración del grupo" + +msgid "Group Type" +msgstr "Tipo de grupo" + +msgid "Group container" +msgstr "Contenedor de grupoi" + +msgid "Group description" +msgstr "Descripción del grupo" + +msgid "Group name" +msgstr "Nombre del grupo" + +msgid "Group object class" +msgstr "Clase de objeto de grupo" + +msgid "Group to apply ACI to" +msgstr "Grupo al que aplicar API" + +msgid "Grouping Type" +msgstr "Tipo de Agrupamiento" + +msgid "Grouping to which the rule applies" +msgstr "Agrupamiento al cual se aplican las reglas" + +msgid "Groups" +msgstr "Grupos" + +msgid "Groups allowed to create keytab" +msgstr "Los grupos pueden crear keytab" + +msgid "Groups allowed to retrieve keytab" +msgstr "Los grupos pueden recuperar keytab" + +msgid "Groups of RunAs Users" +msgstr "Grupos de Usuarios RunAs" + +msgid "HBAC Rule" +msgstr "REgla HBAC" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "Regla HBAC que define los usuarios, grupos y grupos de host" + +msgid "HBAC Rules" +msgstr "Reglas HBAC" + +msgid "HBAC Service" +msgstr "Servicio HBAC" + +msgid "HBAC Service Group" +msgstr "Grupo de Servicio HBAC" + +msgid "HBAC Service Groups" +msgstr "Grupos de Servicios HBAC" + +msgid "HBAC Services" +msgstr "Servicios HBAC" + +msgid "HBAC Test" +msgstr "Prueba HBAC" + +msgid "HBAC rule" +msgstr "Regla HBAC" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "Regla HBAC %(rule)s no encontrada" + +msgid "HBAC rule and local members cannot both be set" +msgstr "Regla HBAC y miembros locales no pueden ser fijados" + +msgid "HBAC rules" +msgstr "Reglas HBAC" + +msgid "HBAC service" +msgstr "Servicio HBAC" + +msgid "HBAC service description" +msgstr "Descripción de servicio HBAC" + +msgid "HBAC service group" +msgstr "Grupo de servicio HBAC" + +msgid "HBAC service group description" +msgstr "Servicios y grupos especificados" + +msgid "HBAC service groups" +msgstr "Grupos de servicio HBAC" + +msgid "HBAC services" +msgstr "Servicios HBAC" + +msgid "HOTP Authentication Window" +msgstr "Ventana de Autenticación HOTP" + +msgid "HOTP Synchronization Window" +msgstr "Ventana de Sincronización HOTP" + +msgid "HOTP authentication skip-ahead" +msgstr "Vaya directamente a la autenticación HOTP" + +msgid "HOTP synchronization skip-ahead" +msgstr "Vaya directamente a la sincronización HOTP" + +msgid "HTTP Error" +msgstr "Error HTTP" + +msgid "Hardware MAC address(es) on this host" +msgstr "Dirección(es) Hardware MAC en este host" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "Plataforma de hardware del equipo (p. ej. Lenovo T61)" + +msgid "Hello world" +msgstr "Hola mundo" + +msgid "Hide" +msgstr "Ocultar" + +msgid "Hide details" +msgstr "Esconder detalles" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" +"Esconder detalles de que reglas coinciden, no coinciden o son no válidas" + +msgid "History size" +msgstr "Tamaño del historial" + +msgid "Home directory" +msgstr "Directorio principal" + +msgid "Home directory base" +msgstr "Base del directorio principal" + +msgid "Horizontal Precision" +msgstr "Precisión horizontal" + +msgid "Host" +msgstr "Host" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "No ha sido encontrado el equipo anfitrión '%(host)s' " + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "Host '%(hostname)s' no tiene el registro correspondiente DNS A/AAAA" + +msgid "Host Certificate" +msgstr "Certificado de host" + +msgid "Host Group" +msgstr "Grupo de Host" + +msgid "Host Group Settings" +msgstr "Configuraciones del Grupo de Host" + +msgid "Host Groups" +msgstr "Grupos de equipo" + +msgid "Host Groups allowed to create keytab" +msgstr "Los Grupos de Host pueden crear keytab" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "Los Grupos de Host pueden recuperar keytab" + +msgid "Host Name" +msgstr "Nombre de host" + +msgid "Host Settings" +msgstr "Configuración del host" + +msgid "Host category" +msgstr "Categoría del equipo" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" +"Categoría de host (las semánticas situadas en este atributo son para " +"interpretación local)" + +msgid "Host category the rule applies to" +msgstr "Categoría del equipo al que se aplica la regla" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "Plataforma de hardware del equipo (p. ej. \"Lenovo T61\")" + +#, c-format +msgid "Host is already joined.\n" +msgstr "Host ya está vinculado\n" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "Localidad del equipo (p.ej. \"Barrio latino, París\") " + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "Ubicación del equipo (p. ej. \"Laboratorio\")" + +msgid "Host name" +msgstr "Nombre del equipo" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "" +"Sistema operativo que utiliza el equipo y versión (p.ej. \"Fedora 11\")" + +msgid "Host-based access control commands" +msgstr "Comandos de control de acceso basado en host" + +msgid "Host-group" +msgstr "Grupo de equipo" + +msgid "Hostname" +msgstr "Nombre del equipo anfitrión" + +msgid "Hostname (FQDN)" +msgstr "Nombre de host (FQDN)" + +msgid "Hostname of this server" +msgstr "Nombre de host de este servidor" + +msgid "Hosts" +msgstr "Equipos" + +msgid "Hosts allowed to create keytab" +msgstr "Los hosts pueden crear keytab" + +msgid "Hosts allowed to retrieve keytab" +msgstr "Los hosts pueden recuperar keytab" + +msgid "How long should negative responses be cached" +msgstr "¿Por cuánto tiempo las respuestas negativas deben guardarse en cache?" + +msgid "ID Range" +msgstr "Intervalo de ID" + +msgid "ID Ranges" +msgstr "Intervalos de ID" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" +"El rango de ID para el dominio de confianza ya existe, pero tiene un tipo " +"diferente. Por favor borre manualmente el rango viejo o no haga cumplir el " +"tipo por medio de la opción --range-type." + +msgid "ID range type, one of allowed values" +msgstr "Tipo de rango ID, uno de los siguientes valores" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" +"Rango de ID con el mismo nombre pero diferente SID de dominio ya existe. El " +"nuevo rango de ID para el nuevo dominio de confianza debe ser creado " +"manualmente." + +msgid "IP Address" +msgstr "Dirección IP" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "Dirección IP %(ip)s ya está asignada en el dominio %(domain)s." + +msgid "IP network to create reverse zone name from" +msgstr "Red IP para crear un nombre de zona reversa desde" + +msgid "IPA AD trust agents" +msgstr "IPA AD agentes de confianza" + +msgid "IPA AD trust controllers" +msgstr "Controladores de confianza IPA AD" + +msgid "IPA CA cannot be deleted" +msgstr "IPA CA no puede ser borrada" + +msgid "IPA CA cannot be disabled" +msgstr "IPA CA no puede ser deshabilitada" + +msgid "IPA CA certificate" +msgstr "Certificado IPA CA" + +msgid "IPA DNS records" +msgstr "Registros IPA DNS" + +msgid "IPA DNS servers" +msgstr "Servidores IPA DNS" + +msgid "IPA DNS version" +msgstr "Versión IPA DNS" + +msgid "IPA DNSSec key master" +msgstr "Clave maestra IPA DNSSec" + +msgid "IPA Error" +msgstr "Error IPA" + +msgid "IPA Location" +msgstr "Localización IPA" + +msgid "IPA Location description" +msgstr "Descripción de Localización IPA" + +msgid "IPA Locations" +msgstr "Localizaciones IPA" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" +"El tipo de Rango IPA debe ser uno de ipa-ad-trust o ipa-ad-trust-posix " +"cuando se especifica el SID del dominio de confianza" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" +"El tipo de Rango IPA Range no debe ser ni ipa-ad-trust ni ipa-ad-trust-posix " +"cuando no se especifica el SID del dominio de confianza." + +msgid "IPA Server" +msgstr "Servidor IPA" + +msgid "IPA Server Role" +msgstr "Rol de Servidor IPA" + +msgid "IPA Server Roles" +msgstr "Roles de Servidor IPA" + +msgid "IPA Server to use" +msgstr "Servidor de IPA a utilizar" + +msgid "IPA Servers" +msgstr "Servidores IPA" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" +"IPA no maneja la zona %(zone)s, por favor añada registros a su servidor DNS " +"manualmente" + +msgid "IPA location name" +msgstr "Nombre de localización IPA" + +msgid "IPA location records" +msgstr "Registros de ubicación IPA" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" +"IPA gestiona DNS, por favor verifique su configuración DNS y asegúrese que " +"el servicio de registros del dominio '{domain}' puede ser resuelto. Se " +"pueden encontrar ejemplos de como configurar DNS con comandos CLI o con Web " +"UI en la documentación. " + +#, c-format +msgid "IPA namingContext not found\n" +msgstr "IPA namingContext no encontrado \n" + +msgid "IPA role name" +msgstr "Nombre de rol IPA" + +msgid "IPA server configured as DNSSec key master" +msgstr "Servidor IPA configurado como clave maestra DNSSec" + +msgid "IPA server domain cannot be deleted" +msgstr "Servidor de dominio IPA no puede ser borrado" + +msgid "IPA server domain cannot be omitted" +msgstr "Servidor de domino IPA no puede ser omitido" + +msgid "IPA server hostname" +msgstr "Nombre de host del servidor IPA" + +msgid "IPA server role name" +msgstr "Nombre de rol del servidor IPA" + +msgid "IPA servers configured as AD trust agents" +msgstr "Servidores IPA configurados como agentes de confianza AD" + +msgid "IPA servers configured as AD trust controllers" +msgstr "Servidores IPA configurados como controladores de confianza AD" + +msgid "IPA unique ID" +msgstr "ID unico de IPA" + +msgid "Identity" +msgstr "Identidad" + +msgid "Identity Settings" +msgstr "Configuración de identidad" + +msgid "If the problem persists please contact the system administrator." +msgstr "" +"Si el problema persiste por favor contacte con el administrador del sistema." + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "Ignorar la comprobación del último servidor CA o DNS que queda" + +msgid "Ignore compat plugin" +msgstr "Ignorar plugin de compatibilidad" + +msgid "Ignore group attribute" +msgstr "Ignorar atributo de grupo" + +msgid "Ignore group object class" +msgstr "Ignorar clase de objeto grupo" + +msgid "Ignore topology connectivity problems after removal" +msgstr "Ignorar problemas de conectividad de topología después de quitarla" + +msgid "Ignore topology errors" +msgstr "Ignorar errores de topología" + +msgid "Ignore user attribute" +msgstr "Ignorar atributo de usuario" + +msgid "Ignore user object class" +msgstr "Ignorar clase de objeto usuario" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "%(src)s a %(dst)s ignorados" + +msgid "Ignored keys:" +msgstr "Llaves ignoradas: " + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "Ignorar estos avisos y continuar con el borrado" + +msgid "Ignoring topology connectivity errors." +msgstr "Ignorando los errores de topología de conectividad." + +msgid "Import a Certificate Profile." +msgstr "Importar un Certificado Perfil" + +msgid "Import an entitlement certificate." +msgstr "Importar un certificado de derecho." + +msgid "Import automount files for a specific location." +msgstr "Importar ficheros de automontaje para una localización específica." + +msgid "Imported keys:" +msgstr "Llaves (keys) importadas" + +msgid "Imported maps:" +msgstr "Mapas importados" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "Perfil importado \"%(value)s\"" + +msgid "Include Disabled" +msgstr "Include Deshabilitado" + +msgid "Include Enabled" +msgstr "Include Habilitado" + +msgid "Include IPA master entries" +msgstr "Incluir entradas IPA maestro" + +msgid "Include all disabled IPA rules into test" +msgstr "Incluir todas las reglas IPA deshabilitadas en la prueba" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "Incluir todas las reglas IPA habilitadas en la prueba [por defecto]" + +msgid "Include certificate chain in output" +msgstr "Incluir la cadena del certificado en la salida" + +msgid "Included attributes" +msgstr "Atributos incluidos" + +msgid "Inclusive Regex" +msgstr "Regex inclusivo" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "Opciones suministradas incompatibles (-r y -P)\n" + +msgid "Indirect" +msgstr "Indirecto" + +msgid "Indirect Member HBAC service" +msgstr "Servicio HBAC de miembro indirecto" + +msgid "Indirect Member HBAC service group" +msgstr "Grupo de servicio HBAC de miembros indirectos " + +msgid "Indirect Member groups" +msgstr "Grupos de miembros indirectos" + +msgid "Indirect Member host-groups" +msgstr "Miembros indirectos de host-groups" + +msgid "Indirect Member hosts" +msgstr "Hosts de miembros indirectos" + +msgid "Indirect Member netgroups" +msgstr "Miembros indirectos netgroups" + +msgid "Indirect Member of roles" +msgstr "Roles de miembros indirectos" + +msgid "Indirect Member permissions" +msgstr "" +"\\n\n" +"Permisos indirectos de miembro " + +msgid "Indirect Member users" +msgstr "Usuarios indirectos miembros" + +msgid "Indirect Membership" +msgstr "Afiliación Indirecta" + +msgid "Inherited from server configuration" +msgstr "Heredado de la configuración del servidor" + +msgid "Initial counter for the HOTP token" +msgstr "Contador inicial para a ficha HOTP" + +msgid "Initials" +msgstr "Iniciales" + +msgid "Input file" +msgstr "Archivo de entrada" + +msgid "Input filename" +msgstr "Entrada nombre de archivo" + +msgid "Input form contains invalid or missing values." +msgstr "La entrada contiene valores no válidos o desaparecidos." + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "Privilegio 'add' insuficiente para la entrada '%s'." + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" +"Privilegio 'write' insuficiente al atributo 'krbLastPwdChange' de la entrada " +"'%s'." + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Acceso insuficiente: %(info)s" + +msgid "Insufficient privilege to delete a CA." +msgstr "Privilegio insuficiente para borrar una CA." + +msgid "Insufficient privilege to modify a CA." +msgstr "Privilegio insuficiente para modificar una CA." + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "Privilegio insuficiente para modificar un certificado perfil" + +msgid "Internal Error" +msgstr "Error Interno" + +msgid "Internationalization messages" +msgstr "Mensajes de internacionalización" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Petición JSON-RPC no válida: %(error)s" + +msgid "Invalid LDAP URI." +msgstr " URI LDAP no válida." + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "Mecanismo de enlace SASL no válido\n" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "Nombre de servicio principal inválido\n" + +msgid "Invalid credentials" +msgstr "Credenciales no válidas" + +msgid "Invalid number of parts!" +msgstr "El número de partes no es válido." + +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "Invalido o tipo no soportado. Valores permitidos son: %s" + +#, python-format +msgid "Invalid or unsupported vault public key: %s" +msgstr "Clave pública de bóveda no válida o no soportada: %s" + +msgid "Is zone active?" +msgstr "¿Está la zona activa?" + +msgid "Issue" +msgstr "Tema" + +msgid "Issued By" +msgstr "Expedido por" + +msgid "Issued On" +msgstr "Expiración" + +msgid "Issued To" +msgstr "Expedido para" + +msgid "Issuer" +msgstr "Emisor" + +msgid "Issuer DN" +msgstr "Editor DN" + +msgid "Issuer Distinguished Name" +msgstr "Nombre Distinguido de Editor" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "ISe usa solo para el establecimiento del atributo SOA MNAME." + +#, c-format +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "" +"Petición JSON-RPC:\n" +"%s\n" + +msgid "Job Title" +msgstr "Cargo" + +msgid "Join an IPA domain" +msgstr "Unir un dominio IPA" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" +"No se encontró la cache de credencial kerberos. ¿Tiene un tiquete de " +"kerberos?\n" + +msgid "Kerberos Key" +msgstr "Clave Kerberos" + +msgid "Kerberos Key Not Present" +msgstr "No hay clave Kerberos Presente" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "Claves de Kerberos presente, Host aprovisionado" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "Claves de Kerberos actuales, Servicio suministrado" + +msgid "Kerberos Principal you entered is expired" +msgstr "Kerberos Principal su entrada ha expirado" + +msgid "Kerberos Service Principal Name" +msgstr "Nombre principal del servicio de kerberos" + +msgid "Kerberos Ticket Policy" +msgstr " Política de tiquete de Kerberos" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" +"No se encontró usuario principal de kerberos. ¿Tiene una cache de credencial " +"válida?\n" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "Inicio de contexto de kerberos falló\n" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "Inicialización del contexto Kerberos falló: %1$s (%2$d)\n" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Error de kerberos: %(major)s/%(minor)s" + +msgid "Kerberos keys available" +msgstr "Claves Kerberos disponibles" + +msgid "Kerberos principal" +msgstr "Principal kerberos" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" +"El principal %s de Kerberos ya existe. Utilice 'ipa user-mod' para definirlo " +"manualmente." + +msgid "Kerberos principal name for this host" +msgstr "Nombre del prinicpal de Kerberos para este equipo" + +msgid "Key" +msgstr "Llave" + +msgid "Key Compromise" +msgstr "Clave de transacción" + +msgid "Key Tag" +msgstr "Etiqueta de clave" + +msgid "Keytab" +msgstr "Keytab" + +msgid "Keytab File Name" +msgstr "Nombre de archivo de tabla de claves" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "Tabla de claves recuperada y almacenada correctamente en:%s\n" + +msgid "LDAP DN" +msgstr "LDAP DN" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "LDAP SASL enlaza mecanismo si no bindd/bindpw" + +msgid "LDAP URI" +msgstr "LDAP URI" + +msgid "LDAP URI of DS server to migrate from" +msgstr "LDAP URI del servidor DS desde donde realizar la migración" + +msgid "LDAP basedn" +msgstr "LDAP basedn" + +msgid "LDAP password" +msgstr "Contraseña LDAP" + +msgid "LDAP password (if not using Kerberos)" +msgstr "contraseña de LDAP (si no usa Kerberos)" + +msgid "LDAP schema" +msgstr "Esquema LDAP" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" +"Alcance de búsqueda LDAP para usuarios y grupos: base, un nivel o sub árbol. " +"Predeterminado a un nivel" + +msgid "LDAP timeout" +msgstr "Tiempo de espera LDAP" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "LDAP uri para conectar a. Mutuamente exclusiva con --server" + +msgid "Last date/time the token can be used" +msgstr "Último día/hora en que puede ser usada la ficha" + +msgid "Last failed authentication" +msgstr "Última autenticación fallada" + +msgid "Last name" +msgstr "Apellido" + +msgid "Last successful authentication" +msgstr "Última autenticación exitosa" + +msgid "Leading and trailing spaces are not allowed" +msgstr "No están permitidos espacios iniciales ni finales" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "Filtro legal LDAP (p.ej. ou=Ingeniería)" + +msgid "Length of TOTP token code validity" +msgstr "Longitud de la ficha TOTP de validación de código" + +msgid "List of IPA masters configured as DNS servers" +msgstr "Lista de los maestros IPA configurados como servidores DNS" + +msgid "List of deletions that failed" +msgstr "Lista de eliminaciones fallidas" + +msgid "List of enabled roles" +msgstr "Listra de roles habilitados" + +msgid "List of servers which advertise the given location" +msgstr "Lista de servidores que anuncian la localización dada" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" +"Lista de dominios de confianza refrescados con éxito. Use el comando " +"trustdomain-find para listarlos." + +msgid "Lists of objects migrated; categorized by type." +msgstr "Lista de objetos migrados; clasificados por tipo." + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "Lista de objetos que no pueden ser migrados; categorizados por tipo." + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "Cargar certificado CA del servidor LDAP desde FILE" + +msgid "Loading" +msgstr "Cargando" + +msgid "Loading data" +msgstr "Cargando datos" + +msgid "Locality" +msgstr "Localidad" + +msgid "Location" +msgstr "Ubicación" + +msgid "Location name" +msgstr "Nombre de localización" + +msgid "Location of the ACI" +msgstr "Localización del ACI" + +msgid "Lockout duration" +msgstr "Duración de bloqueo" + +msgid "Log In Using Certificate" +msgstr "Iniciar sesión Usando Certificado" + +msgid "Log in" +msgstr "Iniciar sesión" + +msgid "Log in using personal certificate" +msgstr "Iniciar sesión usando certificado personal" + +msgid "Log out" +msgstr "Cerrar sesión" + +msgid "Logged In As" +msgstr "Registrado como" + +msgid "Login failed due to an unknown reason" +msgstr "Acceso fallado debido a una razón desconocida" + +msgid "Login shell" +msgstr "Shell de ingreso" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" +"El número más bajo significa la prioridad más alta. Los clientes intentarán " +"contactar con la URI con la prioridad numerada más bajo que puedan alcanzar." + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" +"El número más bajo significa la prioridad más alta. Los clientes intentarán " +"contactar con el servidor con la prioridad de número más bajo que ellos " +"puedan alcanzar." + +msgid "MAC address" +msgstr "Dirección MAC" + +msgid "MS-PAC" +msgstr "MS-PAC" + +msgid "Mailing Address" +msgstr "Dirección de correo" + +msgid "Malformed DN" +msgstr "DN Malformado" + +msgid "Malformed principal" +msgstr "Director malformado" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "Principal mal construido: '%(value)s'" + +msgid "Manage password policy for specific group" +msgstr "Administra la política de contraseña de un grupo específico" + +msgid "Manage ticket policy for specific user" +msgstr "Administra política de ticket para un usuario específico" + +msgid "Managed by" +msgstr "Gestionado por" + +msgid "Managed suffixes" +msgstr "Sufijos gestionados" + +msgid "Managedby permission" +msgstr "Gestionado con permiso" + +msgid "Manager" +msgstr "Manager" + +msgid "Map" +msgstr "Mapa" + +msgid "Map Type" +msgstr "Tipo de Mapa" + +msgid "Mapping rule" +msgstr "Regla de mapeo" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" +"El conjunto de reglas de mapeo \"%(ruleset)s\" tiene más de una regla para " +"el auxiliar %(helper)s" + +msgid "Mark the token as disabled (default: false)" +msgstr "Marcar la ficha como deshabilitada (predeterminado: false)" + +msgid "Master file" +msgstr " Archivo maestro" + +msgid "Match" +msgstr "Emparejar" + +msgid "Match users according to certificate." +msgstr "Emparejar usuarios de acuerdo al certificado" + +msgid "Matched" +msgstr "Emparejado" + +msgid "Matched rules" +msgstr "Reglas coincidentes" + +msgid "Matching Type" +msgstr "Tipo de Coincidencia" + +msgid "Matching rule" +msgstr "Regla de coincidencia" + +msgid "Max domain level" +msgstr "Nivel de dominio Max" + +msgid "Max failures" +msgstr "Número máximo de fallas" + +msgid "Max life" +msgstr "Vida máxima" + +msgid "Max lifetime (days)" +msgstr "Vida máxima (días)" + +msgid "Max renew" +msgstr "Renovación máxima" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "" +"Máxima cantidad de tiempo (segundos) parab una búsqueda (> 0, o -1 para " +"ilimitado)" + +msgid "Maximum domain level" +msgstr "Nivel máximo de dominio" + +msgid "Maximum number of agreements per replica" +msgstr "Número máximo de acuerdos por replica" + +msgid "Maximum number of entries returned" +msgstr "Cantidad máxima de entradas obtenidas" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "Número máximo de entradas devueltas (0 es ilimitado)" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "Máximo número de registros a buscar (-1 es ilimitado)" + +msgid "Maximum password lifetime (in days)" +msgstr "Vida máxima de la contraseña (días)" + +msgid "Maximum renewable age (seconds)" +msgstr "Duración máxima renovable (en segundos)" + +msgid "Maximum ticket life (seconds)" +msgstr "Duración máxima del ticket (en segundos)" + +msgid "Maximum username length" +msgstr "Largo máximo para nombre de usuario" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "Valor máximo es ${value}" + +msgid "May not be empty" +msgstr "Puede no estar vacío" + +msgid "Member HBAC service" +msgstr "Miembro del servicio HBAC" + +msgid "Member HBAC service groups" +msgstr "Grupos de servicio de Miembros HBAC" + +msgid "Member Host" +msgstr "Miembro del equipo anfitrión" + +msgid "Member Sudo commands" +msgstr "Comandos Miembro Sudo" + +msgid "Member groups" +msgstr "Grupos de miembros" + +msgid "Member host-groups" +msgstr "Grupos de equipo miembro" + +msgid "Member hosts" +msgstr "Equipos miembro" + +msgid "Member netgroups" +msgstr " Miembros de netgroups" + +msgid "Member of" +msgstr "Miembro de" + +msgid "Member of a group" +msgstr "Miembro de un grupo" + +msgid "Member of group" +msgstr "Miembro del grupo" + +msgid "Member of groups" +msgstr "Miembros de los grupos" + +msgid "Member of host-groups" +msgstr "Miembro de los grupos de equipo" + +msgid "Member of netgroups" +msgstr "Miembros de netgroups" + +msgid "Member service groups" +msgstr "Grupos de miembro de servicio" + +msgid "Member services" +msgstr "Servicios de miembros" + +msgid "Member user group" +msgstr "Miembro del grupo de usuarios" + +msgid "Member users" +msgstr "Usuarios miembros" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "Miembros de un dominio de confianza en formato DOM\\name o name@domain" + +msgid "Members that could not be added" +msgstr "Miembros que no han podido ser añadidos" + +msgid "Members that could not be removed" +msgstr "Miembros que no han podido ser eliminados" + +msgid "Migrate" +msgstr "Migrar" + +msgid "Migrate users and groups from DS to IPA." +msgstr "Migrar usuarios y grupos de DS a IPA." + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" +"El modo migración esta desactivado.\n" +"Use 'ip confi-mod --enable-migration=TRUE' para activarlo." + +msgid "Migration of LDAP search reference is not supported." +msgstr "Migración de búsqueda de referencia LDAP no está soportada." + +msgid "Min domain level" +msgstr "Nivel de dominio Min" + +msgid "Min length" +msgstr "Longitud mínima" + +msgid "Min lifetime (hours)" +msgstr "Vida mínima (horas)" + +msgid "Minimum domain level" +msgstr "Nivel mínimo de dominio" + +msgid "Minimum length of password" +msgstr "Longitud mínima de la contraseña" + +msgid "Minimum number of character classes" +msgstr "Cantidad mínima de clases de caracteres" + +msgid "Minimum password lifetime (in hours)" +msgstr "Vida mínima de la contraseña (en horas)" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "Valor mínimo es ${value}" + +msgid "Minutes Latitude" +msgstr "Latitud en minutos" + +msgid "Minutes Longitude" +msgstr "Minutos de Longitud" + +msgid "Misc. Information" +msgstr "Información diversa" + +msgid "Missing new vault public key" +msgstr "Nueva clave pública de bóveda desaparecida" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "Arbitro HTTP desaparecido o no válido, %(referer)s" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "Pérdida la contestación de la lista de control!\n" + +#, c-format +msgid "Missing reply control!\n" +msgstr "¡Falta control de respuesta!\n" + +msgid "Missing values: " +msgstr "Valores faltantes:" + +msgid "Missing vault public key" +msgstr "Clave pública de la bóveda desaparecida" + +msgid "Mobile Telephone Number" +msgstr "Número de teléfono celular" + +msgid "Model" +msgstr "Modelo" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "Modificada \"%(value)s\" configuración de confianza" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "Ha sido modificado ACI \"%(value)s\"" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "Modificada CA \"%(value)s\"" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Regla de Mapeo de Identidad de Certificado modificada \"%(value)s\"" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Modificado Certificado Perfil \"%(value)s\"" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "Modificada regla HBAC \"%(value)s\"" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr " Servicio modificado HBAC \"%(value)s\"" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "Servicio modificado HBAC grupo \"%(value)s\"" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "Modificar rango ID \"%(value)s\"" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "Modificada localización IPA \"%(value)s\"" + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "Modificado servidor IPA \"%(value)s\"" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "Ficha OTP modificada \"%(value)s\"" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "Modificado servidor proxy RADIUS \"%(value)s\"" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "Modificado Mapa de Usuario SELinux \"%(value)s\"" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "Modificado Comando Sudo “%(value)s”" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Modificado Grupo de Comando Sudo “%(value)s”" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Regla Sudo Modificada “%(value)s”" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "Modificada regla de automiembro \"%(value)s\"" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "Modificada clave de automontaje \"%(value)s\"" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "Modificado un mapa de automontaje \"%(value)s\"" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "Delegación modificada \"%(value)s\"" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Ha sido modificado el grupo \"%(value)s\"" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "Ha sido modificado el equipo \"%(value)s\"" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Ha sido modificado el grupo de equipo \"%(value)s\"" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "netgroup modificado \"%(value)s\"" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "Modificado el permiso \"%(value)s\"" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "Privilegio modificado \"%(value)s \"" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "Rol modificado \"%(value)s\"" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "Autoservicio modificado \"%(value)s\"" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "Ha sido modificado el servicio \"%(value)s\"" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "Modificado escenario usuario \"%(value)s\"" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" +"Confianza modificada \"%(value)s\" (el cambio será efectivo en 60 segundos)" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Ha sido modificado el usuario \"%(value)s\"" + +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "Modificar %(name)s '%(value)s'?" + +msgid "Modify ACI." +msgstr "Modificar ACI." + +msgid "Modify CA configuration." +msgstr "Modificar configuración de CA." + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "Modificar la configuración de Mapeo de Identidad de Certificado." + +msgid "Modify Certificate Profile configuration." +msgstr "Modificar la configuración del Certificado Perfil" + +msgid "Modify Class of Service entry" +msgstr "Modificar entrada Class of Service" + +msgid "Modify DNS forward zone." +msgstr "Modificar zona de reenvío DNS." + +msgid "Modify DNS zone (SOA record)." +msgstr "Modificar zona DNS (registro SOA)." + +msgid "Modify ID range." +msgstr "Modificar rango de ID." + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" +"Modificar rango ID.\n" +"\n" + +msgid "Modify Kerberos ticket policy." +msgstr "Modificar entrada de política Kerberos." + +msgid "Modify OTP configuration options." +msgstr "Modificar opciones de configuración OTP." + +msgid "Modify Sudo Command Group." +msgstr "Modificar Grupo de Comando Sudo." + +msgid "Modify Sudo Command." +msgstr "Modificar Comando Sudo." + +msgid "Modify Sudo Rule." +msgstr "Modificar Regla Sudo." + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "Modificar una Regla de Mapeo de Identidad de Certificado." + +msgid "Modify a DNS resource record." +msgstr "Modificar un registro de recurso DNS." + +msgid "Modify a OTP token." +msgstr "MOdificar una ficha OTP." + +msgid "Modify a RADIUS proxy server." +msgstr "Modificar un servidor proxy RADIUS." + +msgid "Modify a SELinux User Map." +msgstr "Modificar un Mapa de Usuario SELinux." + +msgid "Modify a delegation." +msgstr "Modificar una delegación." + +msgid "Modify a group password policy." +msgstr "Modificar un grupo de política de contraseña." + +msgid "Modify a group." +msgstr "Modificar un grupo." + +msgid "Modify a hostgroup." +msgstr "Modificar un grupo de host." + +msgid "Modify a netgroup." +msgstr "Modificar un grupo de red." + +msgid "Modify a permission." +msgstr "Modificar un permiso." + +msgid "Modify a privilege." +msgstr "Modificar un privilegio." + +msgid "Modify a role." +msgstr "Modificar un rol." + +msgid "Modify a self-service permission." +msgstr "Modificar un auto servicio de permiso." + +msgid "Modify a stage user." +msgstr "Modificar un escenario usuario." + +msgid "Modify a user." +msgstr "Modificar un usuario." + +msgid "Modify a vault." +msgstr "Modificar una bóveda" + +msgid "Modify an HBAC rule." +msgstr "Modificar una regla HBAC." + +msgid "Modify an HBAC service group." +msgstr "Modificar un grupo de servicio HBAC." + +msgid "Modify an HBAC service." +msgstr "Modificar un servicio HBAC." + +msgid "Modify an automount key." +msgstr "Modificar una clave de automontaje." + +msgid "Modify an automount map." +msgstr "Modificar un mapa de automontaje" + +msgid "Modify an existing IPA service." +msgstr "Modificar un servicio IPA existente." + +msgid "Modify configuration options." +msgstr "Modificar opciones de configuración." + +msgid "Modify global DNS configuration." +msgstr "Modificar la configuración global DNS." + +msgid "Modify global trust configuration." +msgstr "Modificar la configuración global de confianza." + +msgid "Modify information about a host." +msgstr "Modificar información sobre un host." + +msgid "Modify information about an IPA location." +msgstr "Modificar información sobre localización IPA." + +msgid "Modify information about an IPA server." +msgstr "Modificar información sobre un servidor IPA." + +msgid "Modify trustdomain of the trust" +msgstr "Modificar trustdomain de la confianza" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" +"Se ha encontrado más de una entrada con la llave %(key)s, utilice --info " +"para seleccionar una entrada específica." + +msgid "Mount information" +msgstr "Información de montaje" + +msgid "Mount point" +msgstr "Punto de montaje" + +msgid "Move deleted user into staged area" +msgstr "Mover el usuario borrado al área de escena" + +msgid "Must be an integer" +msgstr "Debe ser un entero" + +msgid "NIS domain name" +msgstr "Nombre del dominio NIS" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "El valor NONE no puede ser combinado con otros tipos de PAC" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" +"El registro NS no está permitido que coexista con un registro %(type)s " +"excepto cuando se localice en un registro de zona raíz (RFC 2181, sección " +"6.1)" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "Registro(s) NS puede(n) ser editado(s) en zona apéndice - '@'. " + +msgid "NSEC3PARAM record" +msgstr "Registro NSEC3PARAM" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" +"Registro NSEC3PARAM rpara la zona en formato: hash_algorithm flags " +"iterations salt" + +msgid "Name" +msgstr "Nombre" + +msgid "Name for referencing the CA" +msgstr "Nombre para referenciar la CA" + +msgid "Name of command to export" +msgstr "Nombre de comando a exportar" + +msgid "Name of host-group" +msgstr "Nombre del grupo de equipo" + +msgid "Name of method to export" +msgstr "Nombre del método para exportación" + +msgid "Name of object to export" +msgstr "Nombre del objeto a exportar" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" +"Nombre del mapa de montaje automático de padre (por defecto: auto.master)." + +msgid "Name of the trusted domain" +msgstr "Nombre del dominio de confianza" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" +"El servidor de nombre '%(host)s' no tiene su correspondiente registro A/AAAA" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "" +"El servidor de nombre para la zona reversa no puede ser un nombre DNS " +"relativo" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" +"Ni --del-all ni opciones para borrar un registro en concreto ha sido " +"especificado.\n" +"El comando de ayuda puede ser consultado para ver los tipos de registros " +"soportados." + +msgid "Nested Methods to execute" +msgstr "Métodos anidados para ejecutar" + +msgid "NetBIOS name" +msgstr "Nombre de NetBIOS" + +msgid "Netgroup" +msgstr "Grupo de red" + +msgid "Netgroup Settings" +msgstr "Configuración de Netgroup" + +msgid "Netgroup description" +msgstr "Descripción del grupo de red" + +msgid "Netgroup name" +msgstr "Nombre de grupo de red" + +msgid "Netgroups" +msgstr "Grupos de red" + +msgid "New ACI name" +msgstr " Nuevo nombre de ACI" + +msgid "New Certificate" +msgstr "Un nuevo certificado" + +msgid "New Password" +msgstr "Nueva Contraseña" + +msgid "New Principal Password" +msgstr "Nueva contraseña principal" + +msgid "New Test" +msgstr "Nueva Prueba" + +msgid "New kerberos principal alias" +msgstr "Nuevo alias principal Kerberos" + +msgid "New mount information" +msgstr "Nueva información de montaje" + +msgid "New public key specified multiple times" +msgstr "Nueva clave pública especificada múltiples veces" + +msgid "New vault password" +msgstr "Nueva contraseña de bóveda" + +msgid "Next" +msgstr "Siguiente" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "Sin registros A, AAAA, SSHFP o PTR encontrados." + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" +"No hay servidores DNS en la localización IPA %(location)s. Sin la " +"localización de servidores DNS no se trabaja como se espera." + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" +"No se ha instalado clave maestra DNSSEC. La firma en la zona DNSSEC no " +"trabajará hasta que esté instalada la clave maestra DNSSEC." + +msgid "No Valid Certificate" +msgstr "Certificado no válido" + +msgid "No credentials cache found" +msgstr "No se han encontrado credenciales de cache" + +msgid "No entries." +msgstr "Sin entradas." + +msgid "No file to read" +msgstr "No existe el fichero para leer" + +msgid "No free YubiKey slot!" +msgstr "¡No hay espacio YubiKey libre!" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "No hay claves aceptadas por KDC\n" + +msgid "No matching entries found" +msgstr "No se encontraron entradas coincidentes" + +msgid "No option to delete specific record provided." +msgstr "Ninguna opción para borrar un registro en concreto especificado." + +msgid "No option to modify specific record provided." +msgstr "No hay opción para modificar registro específico proporcionado." + +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "No tiene permiso para vincular este equipo al dominio de la API.\n" + +msgid "No response" +msgstr "Sin respuesta" + +msgid "No such virtual command" +msgstr "Ningún comando virtual" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "¿Ningún sistema enctypes preferido?\n" + +#, c-format +msgid "No values for %s" +msgstr "No hay valores para %s" + +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "No escribir permisos en archivo de tabla de claves'%s\n" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "No hay respuesta 2xx desde CA REST API: %(status)d. %(explanation)s" + +msgid "Non-existent or invalid rules" +msgstr "Reglas no existentes o no válidas" + +msgid "Not After" +msgstr "No luego de" + +msgid "Not Before" +msgstr "No antes de" + +msgid "Not a managed group" +msgstr "No es un grupo administrado" + +msgid "Not a valid IP address" +msgstr "No es una dirección IP válida" + +msgid "Not a valid IPv4 address" +msgstr "No es una dirección IPv4 válida" + +msgid "Not a valid IPv6 address" +msgstr "No es una dirección IPv6 válida" + +msgid "Not allowed on non-leaf entry" +msgstr "No permitido sobre entrada no hoja" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" +"No se especifican bastantes argumentos para llevar a cabo un ajusta de " +"confianza" + +msgid "Not matched rules" +msgstr "Reglas no coincidentes" + +msgid "Not registered yet" +msgstr "Aún no está registrado" + +msgid "Note" +msgstr "Nota" + +msgid "Number of IDs in the range" +msgstr "Número de IDs en el rango" + +msgid "Number of conditions added" +msgstr "Número de condiciones agregadas" + +msgid "Number of conditions removed" +msgstr "Número de condiciones eliminadas" + +msgid "Number of days's notice of impending password expiration" +msgstr "Aviso de número de días de expiración inminente de contraseña" + +msgid "Number of digits each token code will have" +msgstr "Número de digitos que cada código de ficha tendrá" + +msgid "Number of entries returned" +msgstr "Cantidad de entradas devueltas" + +msgid "Number of members added" +msgstr "Cantidad de miembros añadidos" + +msgid "Number of members removed" +msgstr "Cantidad de miembros eliminados" + +msgid "Number of permissions added" +msgstr "Número de permisos añadidos" + +msgid "Number of permissions removed" +msgstr "Número de permisos eliminados" + +msgid "Number of plugins loaded" +msgstr "Cantidad de complementos cargados" + +msgid "Number of privileges added" +msgstr "Número de privilegios agregados" + +msgid "Number of privileges removed" +msgstr "Número de privilegios eliminados" + +msgid "Number of variables returned (<= total)" +msgstr "Cantidad de variables devueltas (<= total)" + +msgid "OK" +msgstr "Aceptar" + +msgid "OTP" +msgstr "OTP" + +msgid "OTP Configuration" +msgstr "Configuración OTP" + +msgid "OTP Token" +msgstr "Ficha OTP" + +msgid "OTP Tokens" +msgstr "Fichas OTP" + +msgid "OTP configuration options" +msgstr "Opciones de configuración OTP" + +msgid "OTP token" +msgstr "Ficha OTP" + +msgid "OTP tokens" +msgstr "Fichas OTP" + +msgid "Object class name" +msgstr "Nombre de clase objeto" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "Objectclasses a ignorar para las entradas de grupo en DS" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "Objectclasses a se ignorado para entradas de usuario en DS" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "Objectclasses usado para buscar entradas de grupo en DS" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "Objectclasses usado para buscar entradas de usuario en DS" + +msgid "Old vault password" +msgstr "Contraseña de bóveda antigua" + +msgid "Old vault private key" +msgstr "Clave privada de bóveda antigua" + +msgid "One of group, permission or self is required" +msgstr "Uno de grupo, permiso o self es necesario" + +msgid "One time password commands" +msgstr "Comandos de contraseña de una vez" + +msgid "Only one value is allowed" +msgstr "Sólo se permite un valor" + +msgid "Only one zone type is allowed per zone name" +msgstr "Solo se permite un tipo de zona por nombre de zona" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" +"Solo se permiten los valores ipa-ad-trust e ipa-ad-trust-posix para --range-" +"type cuando se añade una confianza AD." + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "Sistema operativo que utiliza el equipo y versión (p.ej. Fedora 9)" + +msgid "Operating system" +msgstr "Sistema operativo" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "Falló operación: %s\n" + +msgid "Operations Error" +msgstr "Error en Operaciones" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" +"La opción rid-base no se debe usar cuando el tipo de rango IPA es ipa-ad-" +"trust-posix" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" +"Subárbol opcional DN desde donde se puede mover una entrada (debe estar en " +"el subárbol pero puede ser que todavía no exista)" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" +"Sub-árbol DN opcional donde una entrada puede ser movida (debe estar en el " +"sub-árbol, pero puede no existir todavía)" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" +"DN opcional a aplicar al permiso (debe estar en el sub-árbol, pero puede no " +"existir todavía)" + +msgid "Options" +msgstr "Opciones" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "Las opciones dom-sid y dom-name no pueden ser usadas juntas" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "Las opciones dom-sid y rid-base deben ser usadas juntas" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "Las opciones dom-sid y secondary-rid-base no podrían ser usadas juntas" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "Las opciones dom-sid/dom-name y rid-base se deben usar juntas" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" +"Las opciones dom-sid/dom-name y secondary-rid-base no pueden ser usados " +"juntos" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "Las opciones secondary-rid-base y rid-base ser deben usar juntas" + +msgid "Order" +msgstr "Orden" + +msgid "Org. Unit" +msgstr "Unidad. org" + +msgid "Organization" +msgstr "Organización" + +msgid "Organizational Unit" +msgstr "Unidad organizativa" + +msgid "Origin DN subtree" +msgstr "Subárbol DN origen" + +msgid "Other Record Types" +msgstr "Otros Tipos de Registro" + +#, c-format +msgid "Out of Memory!\n" +msgstr "¡Memoria insuficiente!\n" + +msgid "Out of memory\n" +msgstr "¡Memoria insuficiente!\n" + +#, c-format +msgid "Out of memory \n" +msgstr "¡Memoria insuficiente!\n" + +#, c-format +msgid "Out of memory!" +msgstr "¡Memoria insuficiente!" + +#, c-format +msgid "Out of memory!\n" +msgstr "¡Memoria insuficiente!\n" + +msgid "Out of memory!?\n" +msgstr "" +"¡Memoria insuficiente!\n" +"\n" + +msgid "Output filename" +msgstr "Nombre de archivo de salida" + +msgid "Output only on errors" +msgstr "Solamente salida sobre errores" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" +"Anular una lista predeterminada de tipos PAC soportados. Use 'NONE' para " +"deshabilitar eñ soporte PAC para este servicio" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" +"Anular la lista predeterminada de tipos de PAC soportados. Use 'NONE' para " +"deshabilitar el soporte PAC para este servicio, e.g. esto podría ser " +"necesario para servicios NFS." + +msgid "Override existing password" +msgstr "Anular contraseña existente" + +msgid "Override inherited settings" +msgstr "Anular la configuración heredada" + +msgid "Overwrite GID" +msgstr "Sobrescribir GID" + +msgid "Owner" +msgstr "Propietario" + +msgid "PAC type" +msgstr "Tipo PAC" + +msgid "PAD" +msgstr "PAD" + +msgid "PKINIT" +msgstr "" +" Los certificados de entrada deben estar codificados en DER. \n" +" Tenga en cuenta que no puede ser un normalizador en la Param, ya que " +"solamente las variables de \n" +" Unicode se normalizan.\n" +" " + +msgid "PKINIT status" +msgstr "Estado PKINIT" + +msgid "POSIX" +msgstr "POSIX" + +msgid "Page" +msgstr "Página" + +msgid "Pager Number" +msgstr "Número de página" + +msgid "Pagination Size" +msgstr "Tamaño de Paginación" + +msgid "Parent map" +msgstr "Mapa del padre" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" +"Analiza todos los registros DNS crudos y los devuelve de modo estructurado" + +msgid "Password" +msgstr "Contraseña" + +msgid "Password Expiration Notification (days)" +msgstr "Notificación de Expiración de Contraseña (días)" + +msgid "Password Policies" +msgstr "Políticas de Contraseña" + +msgid "Password Policy" +msgstr "Directiva de contraseñas" + +msgid "Password can be specified only for symmetric vault" +msgstr "La contraseña solo se debe especificar para bóveda simétrica" + +msgid "Password cannot be set on enrolled host." +msgstr "La contraseña no puede ser fijada en el host matriculado." + +msgid "Password change complete" +msgstr "Cambiar la contraseña completa" + +msgid "Password expiration" +msgstr "Caducidad de la contraseña" + +msgid "Password history size" +msgstr "Tamaño del historial de la contraseña" + +msgid "Password plugin features" +msgstr "Funciones del complemento de contraseña" + +msgid "Password specified multiple times" +msgstr "Contraseña especificada múltiples veces" + +msgid "Password used in bulk enrollment" +msgstr "Contraseña utilizada en el registro bruto" + +msgid "Passwords do not match" +msgstr "Las contraseñas no coinciden" + +msgid "Passwords do not match!" +msgstr "Las contraseñas no coinciden." + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" +"Las contraseñas han sido migradas en formato pre-hashed.\n" +"IPA es incapaz de generar claves de Kerberos a menos que le sean\n" +"provistas contraseñas de texto claras. Todos los usuarios migrados\n" +"necesitan registrarse en https://your.domain/ipa/migration/ antes de\n" +"poder utilizar sus respectivas cuentas Kerberos." + +msgid "Passwords must match" +msgstr "Las contraseñas deben coincidir" + +msgid "Path to the IPA CA certificate" +msgstr "Ruta al certificado IPA CA" + +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" +"Política de envío condicional por zona. Se establece a \"none\" para " +"deshabilitar el envío a expedidores globales para esta zona. En este caso, " +"la zona condicional de expedidores es ignorada." + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Expedidores por zona. Se puede especificar un puerto personalizado para cada " +"exedidor usando el formato estándar \"IP_ADDRESS port PORT\"" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "Período tras el cual se restablecerá (segundos) el conteo de errores" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "Período durante el cual se fuerza el bloqueo (segundos)" + +msgid "Permission" +msgstr "Permiso" + +msgid "Permission ACI grants access to" +msgstr "El permiso ACI permite el acceso a" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "Permiso denegado:%(file)s " + +msgid "Permission flags" +msgstr "Banderas de permiso" + +msgid "Permission name" +msgstr "Nombre de permiso" + +msgid "Permission type" +msgstr "Tipo de permiso" + +msgid "Permission value" +msgstr "Valor de permiso" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "Permiso con bandera desconocida %s puede no ser modificado o quitado" + +msgid "Permissions" +msgstr "Permisos" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "Permisos a conceder (read, write). Predeterminado es write." + +msgid "Permissions to grant(read, write, add, delete, all)" +msgstr "Permisos a obtener(lectura, escritura, añadir, borrar, todos)" + +msgid "Permitted Encryption Types" +msgstr "Tipos de cifrado permitidos" + +msgid "Ping a remote server." +msgstr "Hacer ping a un servidor remoto." + +msgid "Platform" +msgstr "Plataforma" + +msgid "Please choose a type of DNS resource record to be added" +msgstr "Por favor seleccione un tipo de origen de DNS para ser agregado" + +msgid "Please specify forwarders." +msgstr "Por favor especifique los reenviadores." + +msgid "Please try the following options:" +msgstr "Por favor intentar las siguientes opciones:" + +msgid "Policy" +msgstr "Política" + +msgid "Port" +msgstr "Puerto" + +msgid "Positional arguments" +msgstr "Argumentos posicionales" + +msgid "Pre-authentication is required for the service" +msgstr "Se requiere autenticación previa para el servicio" + +msgid "Pre-shared password" +msgstr "Contraseña precompartida" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "El perfil predefinido '%(profile_id)s' no puede ser borrado" + +msgid "Preference" +msgstr "Preferencia" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" +"Se ha dado preferencia a este intercambiador. Se prefieren más los valores " +"más bajos" + +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "" +"Prefijo utilizado para distinguir los tipos de ACI (permiso,delegación, " +"autoservicio, ninguno)" + +msgid "Preserved user" +msgstr "Usuario preservado" + +msgid "Prev" +msgstr "Anterior" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "El rango RID primario y el secundario no pueden superponerse" + +msgid "Primary key only" +msgstr "Sólo clave primaria" + +msgid "Principal" +msgstr "Principal" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "El principal %(principal)s no puede ser autenticado: %(message)s" + +msgid "Principal alias" +msgstr "Alias principal" + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "Principal para este certificado (e.g. HTTP/test.example.com)" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "El principal no es de la forma user@REALM: '%(principal)s'" + +msgid "Principal name" +msgstr "Nombre principal" + +msgid "Print as little as possible" +msgstr "Imprimir lo mínimo posible" + +msgid "Print debugging information" +msgstr "Imprimir la información de depuración" + +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" +"Imprimir entradas como almacenadas en el servidor. Solamente afecta formato " +"de salida." + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "Imprimir la salida cruda de XML-RPC en modo de GSSAPI" + +msgid "Priority" +msgstr "Prioridad" + +msgid "Priority (order)" +msgstr "Prioridad (orden)" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "" +"Prioridad de la política (a mayor número corresponde una política menor)" + +msgid "Priority of the rule (higher number means lower priority" +msgstr "" +"Prioridad de la regla (el número más alto significa la prioridad más baja" + +msgid "Privilege" +msgstr "Privilegio" + +msgid "Privilege Settings" +msgstr "Configuración de privilegios" + +msgid "Privilege Withdrawn" +msgstr "Retirada de privilegios" + +msgid "Privilege description" +msgstr "" +" \n" +" Eliminar un servicio de la IPA." + +msgid "Privilege name" +msgstr " Añadir un nuevo servicio de la nueva IPA." + +msgid "Privileges" +msgstr " Objeto de servicio." + +msgid "Profile ID" +msgstr "ID del Perfil" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" +"ID de perfil '%(cli_value)s' no coincide con los datos de perfil " +"'%(file_value)s'" + +msgid "Profile ID for referring to this profile" +msgstr "ID de Perfil para referirse a este perfil" + +msgid "Profile configuration" +msgstr "Configuración de perfil" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "Perfil de configuración guardado en el archivo '%(file)s'" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "Los datos del perfil especifican profileId múltiples veces: %(values)s" + +msgid "Profile description" +msgstr "Descripción del perfil" + +msgid "Prompt for the username" +msgstr "Pedir el nombre de usuario" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" +"Pedir el nombre de usuario cuando múltiples identidades están mapeadas a un " +"certificado" + +msgid "Prompt to set the user password" +msgstr "Solicita establecer la contraseña de usuario" + +msgid "Prospective" +msgstr "Prospectivo" + +msgid "Provisioning" +msgstr "Aprovisionamiento" + +msgid "Public key can be specified only for asymmetric vault" +msgstr "La clave pública puede ser especificada solo para la bóveda asimétrica" + +msgid "Public key specified multiple times" +msgstr "Clave pública especificada múltiples veces" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" +"El código QR es más grande que el de la salida tty. Por favor modifique el " +"tamaño de su terminal." + +msgid "Quantity" +msgstr "Cantidad" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" +"La solicitud devolvió más resultados que el límite de tamaño configurado. " +"Mostrando los primeros resultados ${counter}." + +msgid "Quick Links" +msgstr "Enlaces rápidos" + +msgid "Quiet mode. Only errors are displayed." +msgstr "Modo silencioso. Sólo se muestran los errores." + +msgid "RADIUS" +msgstr "RADIUS" + +msgid "RADIUS Server" +msgstr "Servidor RADIUS" + +msgid "RADIUS Servers" +msgstr "Servidores RADIUS" + +msgid "RADIUS proxy server" +msgstr "Servidor proxy RADIUS" + +msgid "RADIUS proxy server name" +msgstr "Nombre del servidor proxy RADIUS" + +#, python-format +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "Servidor proxy RADIUS con nombre \"%s\" ya existe" + +msgid "RADIUS proxy servers" +msgstr "Servidores proxy RADIUS" + +msgid "REST API is not logged in." +msgstr "REST API no ha iniciado sesión." + +msgid "Random password" +msgstr "Contraseña aleatoria" + +msgid "Range name" +msgstr "Nombre del intervalo" + +msgid "Range type" +msgstr "Tipo de intervalo" + +#, python-format +msgid "Raw %s records" +msgstr "Registros brutos %s" + +msgid "Raw target filter" +msgstr "Filtro objetivo en bruto" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" +"El valor crudo de un registro DNS fue establecido siempre por la opción " +"\"%(name)s\"" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Restablecida la confianza al dominio \"%(value)s\"" + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "" +"Volver a sincronizar el cache de derechos local con el servidor de derechos." + +msgid "Realm Domains" +msgstr "Dominios Reino" + +msgid "Realm administrator password should be specified" +msgstr "Debería especificarse la contraseña del administrador del reino" + +msgid "Realm domains" +msgstr "Dominios reino" + +msgid "Realm name" +msgstr "Nombre de reino " + +msgid "Realm-domain mismatch" +msgstr "Flata de coincidencia de dominio reino" + +msgid "Reason" +msgstr "Motivo" + +msgid "Reason for Revocation" +msgstr "Motivo de la revocación" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "Motivo por el cual el certificado ha sido revocado (0-10)" + +msgid "Rebuild auto membership" +msgstr "Reconstruir auto membresía" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "Número máximo de acuerdo recomendados por replica sobrepasado" + +msgid "Record Type" +msgstr "Tipo de Registro" + +msgid "Record creation failed." +msgstr "Falló la creación del registro." + +msgid "Record data" +msgstr "Registrar datos" + +msgid "Record name" +msgstr "Nombre de registro" + +msgid "Record not found." +msgstr "No se encontró el registro." + +msgid "Record type" +msgstr "Tipo de registro" + +msgid "Records" +msgstr "Registros" + +msgid "Records for DNS Zone" +msgstr "Los registros para la zona DNS" + +msgid "Redirection" +msgstr "Redirección " + +msgid "Refresh" +msgstr "Actualizar" + +msgid "Refresh list of the domains associated with the trust" +msgstr "Refrescar la lista de dominios asociados con la confianza" + +msgid "Refresh the page." +msgstr "Refrescar la página." + +msgid "Register to the entitlement system." +msgstr "Registro al sistema de derechos." + +msgid "Registration password" +msgstr "Contraseña de registro" + +msgid "Regular Expression" +msgstr "Expresión regular" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" +"El nombre relativo de registro '%(record)s' contiene como sufijo el nonbre " +"de zona '%(zone)s', que resulta de FQDN '%(fqdn)s'. Esto es normalmente una " +"equivocación causada por un punto perdido al final de la especificación del " +"nombre." + +msgid "Relative weight for entries with the same priority." +msgstr "Peso relativo de las entradas con la misma prioridad." + +msgid "Relative weight for server services (counts per location)" +msgstr "" +"Pero relativo para los servicios del servidor (cuentas por localización)" + +msgid "Reload current settings from the server." +msgstr "Recargar ajustes actuales desde el servidor." + +msgid "Reload the browser." +msgstr "Recargar el navegador." + +msgid "Remote IPA server hostname" +msgstr "Nombre de host del servidor IPA remoto" + +msgid "Remote server name" +msgstr "Nombre del servidor remoto" + +msgid "Remove" +msgstr "Borrar" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" +"Borrar los registros A, AAAA, SSHFP y PTR del host(s) gestionado por IPA DNS" + +msgid "Remove Kerberos Alias" +msgstr "Quitar Alias Kerberos" + +msgid "Remove a manager to the user entry" +msgstr "Borra un gestor a la entrada de usuario" + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "Quitar un permiso para una delegación de acceso a zona por reenvío." + +msgid "Remove a permission for per-zone access delegation." +msgstr "Quita un permiso para una delegación de acceso por zona." + +msgid "Remove all principals in this realm" +msgstr "Quite todos los principales en este ámbito" + +msgid "Remove an option from Sudo Rule." +msgstr "Quitar una opción de la Regla Sudo." + +msgid "Remove certificates from a service" +msgstr "Quitar certificados de un servicio" + +msgid "Remove certificates from host entry" +msgstr "Borra certificados de una entrada de host" + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "Quitar comandos y grupos de comando sudo afectados por Regla Sudo." + +msgid "Remove entries from DNS" +msgstr "Eliminar entradas de DNS" + +msgid "Remove from CRL" +msgstr "Borrar de CRL" + +msgid "Remove group for Sudo to execute as." +msgstr "Quitar grupo para Sudo a ejecutar como." + +msgid "Remove hold" +msgstr "Quitar espera" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "Quitar hosts y grupos de hosts afectados por Regla Sudo." + +msgid "Remove hosts that can manage this host." +msgstr "Borrar hosts que puede manejar este host." + +msgid "Remove hosts that can manage this service." +msgstr "Borrar hosts que puedan gestionar este servicio." + +msgid "Remove information about the domain associated with the trust." +msgstr "Borrar información sobre el dominio asociado con la confianza." + +msgid "Remove members from Sudo Command Group." +msgstr "Quitar miembros de un Grupo de Comando Sudo." + +msgid "Remove members from a group." +msgstr "Eliminar miembro desde un grupo." + +msgid "Remove members from a hostgroup." +msgstr "Borrar miembros de un grupo de host." + +msgid "Remove members from a netgroup." +msgstr "Borrar miembros de un grupo de red." + +msgid "Remove members from a permission." +msgstr "Borrar miembros desde un permiso." + +msgid "Remove members from a role." +msgstr "Borrar miembros de un rol." + +msgid "Remove members from an HBAC service group." +msgstr "Borrar miembros de un grupo de servicio HBAC." + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "Borra uno o más mapeados de certificados de la entrada de usuario." + +msgid "Remove one or more certificates to the user entry" +msgstr "Borra uno o más certificados de la entrada de usuario" + +msgid "Remove permissions from a privilege." +msgstr "Borrar permisos de un privilegio." + +msgid "Remove principal alias from a host entry" +msgstr "Borra alias principal de la entrada de host" + +msgid "Remove principal alias from a service" +msgstr "Borrar alias principal de un servicio" + msgid "Remove principal alias from the user entry" msgstr "Borra el alias principal de la entrada de usuario" +msgid "Remove privileges from a role." +msgstr "Borrar privilegios de un rol." + +msgid "Remove service and service groups from an HBAC rule." +msgstr "Borrar servicio y grupos de servicio de una regla HBAC." + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "Borrar hosts objetivos y grupos de host de una regla HBAC." + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "" +"Borrar hosts y grupos de host objetivo de una regla de Mapa de Usuario " +"SELinux." + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "Quitar usuarios y grupos afectados por Regla Sudo." + +msgid "Remove users and groups for Sudo to execute as." +msgstr "Quitar usuarios y grupos para Sudo a ejecutar como." + +msgid "Remove users and groups from an HBAC rule." +msgstr "Borrar usuarios y grupos de una regla HBAC." + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "Borrar usuarios y grupos desde una regla de Mapa de Usuario SELinux." + +msgid "Remove users that can manage this token." +msgstr "Quitar usuarios que puedan manejar esta ficha." + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "Borrados alias del host \"%(value)s\"" + #, python-format msgid "Removed aliases from user \"%(value)s\"" msgstr "Borrados alias del usuario \"%(value)s\"" #, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "todos los maestros deben tener el rol %(role)s habilitado" +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "Borrados alias al servicio principal \"%(value)s\"" #, python-format -msgid "must have %(role)s role enabled" -msgstr "debe tener el rol %(role)s habilitado" +msgid "Removed certificates from host \"%(value)s\"" +msgstr "Borrados certificados del host \"%(value)s\"" -#, fuzzy -msgid "must be enabled only on a single master" -msgstr "debe estar cerrado entre paréntesis" +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "Quitados certificados del servicio principal \"%(value)s\"" -msgid "Request must be a dict" -msgstr "La petición debe ser un diccionario" +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "Certificados borrados del usuario \"%(value)s\"" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "Condición(es) eliminada(s) de «%(value)s»" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "Borrada información sobre el dominio de confianza \"%(value)s\"" + +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "Quitada opción \"%(option)s\" de Sudo Rule \"%(rule)s\"" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "Quitado permiso de sistema \"%(value)s\"" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "Quitando %(servers)s desde la copia de topología, por favor espere..." + +#, c-format +msgid "Removing principal %s\n" +msgstr "Eliminando %s principales\n" + +msgid "Rename" +msgstr "Cambiar el nombre de" + +msgid "Rename an ACI." +msgstr "Renombrar un ACI." + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "Cambie el nombre del %(ldap_obj_name)s objeto" + +msgid "Rename the permission object" +msgstr "Renombrar el permiso del objeto" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "ACI renombrado a \"%(value)s\"" + +msgid "Replacement" +msgstr "Reemplazo" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" +"La replica de la clave maestra DNSSEC está activa. Desinstalarla podría " +"romper su sistema DNS. Por favor deshabilite o reemplace la clave maestra " +"DNSSEC primero." + +#, python-format +msgid "Replication agreement for %(hostname)s not found" +msgstr "Acuerdo de replicación para %(hostname)s no encontrado" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "La replica de la topología con sufijo \"%(suffix)s\" contiene errores." + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "La repica de la topologia de sufijo \"%(suffix)s\" está en orden." + +msgid "Report PKINIT status on the IPA masters" +msgstr "Informa el estado PKINIT sobre los másters IPA" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "Fallo en petición con estado %(status)s: %(reason)s" + +msgid "Request id" +msgstr "Id de la petición" msgid "Request is missing \"method\"" msgstr "La petición está con \"method\" desaparecido" @@ -29043,6 +11462,2708 @@ msgstr "La petición está con \"method\" desaparecido" msgid "Request is missing \"params\"" msgstr "La petición está con \"params\" desaparecido" +msgid "Request must be a dict" +msgstr "La petición debe ser un diccionario" + +msgid "Request status" +msgstr "Estado de la petición" + +msgid "Required field" +msgstr "Campo requerido" + +msgid "Requires pre-authentication" +msgstr "Requiere autenticación previa" + +msgid "Reset" +msgstr "Resetear" + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "Reajustar la entrada de política Kerberos a los valores por defecto." + +msgid "Reset OTP" +msgstr "Reajustar OTP" + +msgid "Reset Password" +msgstr "Restablecer contraseña" + +msgid "Reset Password and Log in" +msgstr "Resetear la Contraseña y Acceder" + +msgid "Resolve a host name in DNS." +msgstr "Resolver un nombre de host en DNS." + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "Resuelve un nombre de host en DNS. (Obsoleto)" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" +"Resolver los identificadores de seguridad de los usuario y grupos en los " +"dominios de confianza" + +msgid "Response from CA was not valid JSON" +msgstr "La respuesta desde CA no era JSON válido" + +msgid "Restore" +msgstr "Restaurar" + +msgid "Result" +msgstr "Resultado" + +msgid "Result of simulation" +msgstr "Resultado de la simulación" + +msgid "Result of the command" +msgstr "Resultado del comando" + +msgid "Results are truncated, try a more specific search" +msgstr "" +"Los resultados se encuentran truncados, intente realizar una búsqueda más " +"específica" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" +"Los resultados deberían contener sólo atributo de clave primaria (“%s”)" + +msgid "Results should contain primary key attribute only (\"name\")" +msgstr "" +"Los resultados deberían contener solo la clave del atributo primario " +"(\"name\")" + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "" +"Los resultados deberían contener solo atributos de clave primaria " +"(\"principal\")" + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" +"Los resultados deberían contener solo atributo de clave primaria " +"(\"sudocmdgroup-name\")" + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" +"Los resultados deberían contener solo el atributo de clave primaria " +"(\"sudorule-name\")" + +msgid "Retries" +msgstr "Reintentos" + +msgid "Retrieve an existing certificate." +msgstr "Recuperar un certificado existente." + +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "" +"Recuperar e imprimir todos los atributos del servidor. Afecta a la salida " +"del comando." + +msgid "Retrieve current keys without changing them" +msgstr "Recupera las claves actuales sin cambiarlas" + +msgid "Retrieve the entitlement certs." +msgstr "Recuperar el certificado del derecho." + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "Fallo en recuperación de la cadena CA cert: %s" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "Fallo en la recuperación del estado CA con estado %d" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "Falló la obtención del estado de CA: %s" + +msgid "Retry" +msgstr "Reintentar" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "Reintentando con el método de recuperacióm pre-4.0 keytab...\n" + +msgid "Return to the main page and retry the operation" +msgstr "Volver a la página principal y reintentar la operación" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" +"Registro reverso para dirección IP %(ip)s ya existe en la zona reversa " +"%(zone)s." + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" +"La zona reversa %(name)s requiere exactamente %(count)d direcciones IP " +"componentes, %(user_count)d dado" + +msgid "Reverse zone IP network" +msgstr "Zona reversa de red IP" + +msgid "Revert" +msgstr "Revertir" + +msgid "Revocation reason" +msgstr "Motivo de la revocación" + +msgid "Revoke" +msgstr "Revocar" + +msgid "Revoke a certificate." +msgstr "Revocar un certificado." + +msgid "Revoked" +msgstr "Revocado" + +msgid "Rights" +msgstr "Derechos" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "Derechos a conceder (read, search, compare, write, add, delete, all)" + +msgid "Role" +msgstr "Rol" + +msgid "Role Settings" +msgstr "Configuración de rol" + +msgid "Role name" +msgstr "Nombre de rol" + +msgid "Role status" +msgstr "Estado rol" + +msgid "Roles" +msgstr " Roles" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" +"El dominio raíz de la confianza está siempre habilitado para la confianza " +"existente" + +msgid "Rule name" +msgstr "Nombre de la regla" + +msgid "Rule status" +msgstr "Estatus de reglas" + +msgid "Rule type" +msgstr "Tipo de regla" + +msgid "Rule type (allow)" +msgstr "Tipo de regla (permitir)" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" +"Regla usada para comprobar si un certificado puede ser usado para " +"autenticación" + +msgid "Rule used to map the certificate with a user entry" +msgstr "Regla usada para mapear el certificado con una entrada de usuario" + +msgid "Rules" +msgstr "Reglas" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "Reglas para probar. Si no se especifica, - se asume que habilitado" + +msgid "Run Commands" +msgstr "Ejecutar comandos" + +msgid "Run Test" +msgstr "Ejecutar Prueba" + +msgid "Run as a user" +msgstr "Ejecutar como un usuario" + +msgid "Run as any user within a specified group" +msgstr "Ejecutar como cualquier usuario dentro de un grupo especificado" + +msgid "Run with the gid of a specified POSIX group" +msgstr "Ejecutar con la gid de un grupo POSIX especificado" + +msgid "RunAs External Group" +msgstr "Grupo externo RunAs" + +msgid "RunAs External User" +msgstr "RunAs de usuarios externos" + +msgid "RunAs Group category" +msgstr "RunAs Grupo categoría" + +msgid "RunAs Group category the rule applies to" +msgstr "RunAs Grupo categoría la regla aplica a" + +msgid "RunAs Groups" +msgstr "Grupos RunAs" + +msgid "RunAs User category" +msgstr "Categoría de Usuario RunAs" + +msgid "RunAs User category the rule applies to" +msgstr "RunAs Usuario categoría la regla aplica a " + +msgid "RunAs Users" +msgstr "RunAs Usuarios" + +msgid "SASL Bind failed\n" +msgstr "Falló SASL Bind\n" + +msgid "SELinux User" +msgstr "Usuario SELinux" + +msgid "SELinux User Map" +msgstr "Mapa de Usuario SELinux" + +msgid "SELinux User Map rule" +msgstr "Regla Mapa de Usuario SELinux" + +msgid "SELinux User Map rules" +msgstr "Reglas Mapa de Usuario SELinux" + +msgid "SELinux User Maps" +msgstr "Mapas de Usuario SELinux" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" +"Usuario SELinux %(user)s no encontrado en la lista de pedidos (en config)" + +msgid "SELinux user map list not found in configuration" +msgstr "Lista de mapeo de usuario SELinux no encontrado en la configuración" + +msgid "SHA1 Fingerprint" +msgstr "Huella digital SHA1" + +msgid "SID" +msgstr "SID" + +msgid "SID blacklist incoming" +msgstr "Lista negra de SID entrante" + +msgid "SID blacklist outgoing" +msgstr "Lista negra de SID saliente" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" +"El SID para el nombre de dominio de confianza especificado podría no ser " +"encontrado. Por favor especifique directamente el SID usando la opción dom-" +"sid." + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "SID no es reconocido como un SID válido para el dominio de confianza" + +msgid "SID is not valid" +msgstr "el SID no es válido" + +msgid "SMB service NetBIOS name" +msgstr "Nombre del servicio SMB de NetBIOS" + +msgid "SOA class" +msgstr "Clase SOA" + +msgid "SOA expire" +msgstr "Expirar SOA" + +msgid "SOA minimum" +msgstr "Mínimo SOA" + +msgid "SOA record class" +msgstr "Clase de registro SOA " + +msgid "SOA record expire time" +msgstr "tiempo de expiración de registro SOA" + +msgid "SOA record refresh time" +msgstr "registro SOA tiempo de actualización" + +msgid "SOA record retry time" +msgstr "tiempo de reintento de " + +msgid "SOA record serial number" +msgstr "Número de serie de registro SOA" + +msgid "SOA refresh" +msgstr "Actualizar SOA" + +msgid "SOA retry" +msgstr "Reintentar SOA" + +msgid "SOA serial" +msgstr "Serie SOA" + +msgid "SSH public key" +msgstr "Clave pública SSH" + +msgid "SSH public key fingerprint" +msgstr "Huella digital de clave pública SSH" + +#, python-format +msgid "Same as --%s" +msgstr "Lo mismo que --%s" + +msgid "Save" +msgstr "Guardar" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "El esquema está actualizado (FP '%(fingerprint)s', TTL %(ttl)s s)" + +msgid "Search" +msgstr "Búsqueda" + +msgid "Search Options" +msgstr "Opciones de Búsqueda" + +msgid "Search domains of the trust" +msgstr "Buscar dominios de confianza" + +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "Búsqueda de %1$s en rootdse falló con error %2$d\n" + +msgid "Search for CAs." +msgstr "Búsqueda de CAs." + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "Buscar Reglas de Mapeo de Identidad de Certificado." + +msgid "Search for Certificate Profiles." +msgstr "Búsqueda de Certificados de Perfiles" + +msgid "Search for Class of Service entry" +msgstr "Búsqueda de entrada Class of Service" + +msgid "Search for DNS forward zones." +msgstr "Buscar zonas de reenvío DNS." + +msgid "Search for DNS resources." +msgstr "Buscar recursos DNS." + +msgid "Search for DNS zones (SOA records)." +msgstr "Buscar zonas DNS (registros SOA)." + +msgid "Search for HBAC rules." +msgstr "Buscar reglas HBAC." + +msgid "Search for HBAC services." +msgstr "Buscar un servicio HBAC." + +msgid "Search for IPA locations." +msgstr "Buscar localizaciones IPA." + +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "Búsqueda de IPA namingContext fallada con error %d \n" + +msgid "Search for IPA servers." +msgstr "Buscar servidores IPA." + +msgid "Search for IPA services." +msgstr "Buscar servicios IPA." + +msgid "Search for OTP token." +msgstr "Búsqueda de ficha OTP." + +msgid "Search for RADIUS proxy servers." +msgstr "Búsqueda de servidores proxy RADIUS." + +msgid "Search for SELinux User Maps." +msgstr "Búsqueda de Mapas de Usuario SELinux." + +msgid "Search for Sudo Command Groups." +msgstr "Buscar Grupos de Comando Sudo." + +msgid "Search for Sudo Commands." +msgstr "Buscar Comandos Sudo." + +msgid "Search for Sudo Rule." +msgstr "Buscar Regla Sudo." + +msgid "Search for a netgroup." +msgstr "Buscar un grupo de red." + +msgid "Search for a self-service permission." +msgstr "Buscar un auto servicio de permiso." + +msgid "Search for an HBAC service group." +msgstr "Buscar un grupo de servicio HBAC." + +msgid "Search for an automount key." +msgstr "Buscar una clave de automontaje." + +msgid "Search for an automount location." +msgstr "Buscar una localización de automontaje." + +msgid "Search for an automount map." +msgstr "Buscar un mapa de automontaje." + +msgid "Search for delegations." +msgstr "Buscar delegaciones." + +msgid "Search for entitlement accounts." +msgstr "Búsqueda por cuentas de derechos." + +msgid "Search for forward zones only" +msgstr "Buscar zonas de reenvío sólo" + +msgid "Search for group password policies." +msgstr "Buscar grupo de políticas de contraseña." + +msgid "Search for groups." +msgstr "Buscar grupos." + +msgid "Search for hostgroups." +msgstr "Buscar grupos de host." + +msgid "Search for hosts." +msgstr "Buscar hosts." + +msgid "Search for permissions." +msgstr "Buscar permisos." + +msgid "Search for privileges." +msgstr "Buscar privilegios." + +msgid "Search for ranges." +msgstr "Buscar intervalos." + +msgid "Search for roles." +msgstr "Buscar roles." + +msgid "Search for services with these managed by hosts." +msgstr "Búsqueda de servicios con aquellos gestionados por hosts." + +msgid "Search for services without these managed by hosts." +msgstr "Búsqueda de servicios sin aquellos gestionados por hosts." + +msgid "Search for trusts." +msgstr "Búsqueda de confianzas." + +msgid "Search for users." +msgstr "Buscar usuarios." + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "Los resultados de la búsqueda han sido truncados: %(reason)s" + +msgid "Search scope" +msgstr "Alcance de búsqueda" + +msgid "Search size limit" +msgstr "Límite del tamaño de la búsqueda" + +msgid "Search time limit" +msgstr "Buscar límite de tiempo" + +msgid "Second Code" +msgstr "Segundo Código" + +msgid "Seconds Latitude" +msgstr "Latitud en segundos" + +msgid "Seconds Longitude" +msgstr "Segundos de Longitud" + +msgid "Secret" +msgstr "Secreto" + +msgid "Security Identifier" +msgstr "Identificador de Seguridad" + +msgid "Security Identifiers (SIDs)" +msgstr "Identificadores de Seguridad (SIDs)" + +msgid "Select All" +msgstr " Seleccionar todo" + +msgid "Select entries to be removed." +msgstr "Las entradas seleccionadas han sido quitadas." + +msgid "Selector" +msgstr "Selector" + +msgid "Self" +msgstr "Self" + +msgid "Self Service Permission" +msgstr "Auto Servicio de Permiso" + +msgid "Self Service Permissions" +msgstr "Permisos de autoservicio" + +msgid "Self-service name" +msgstr "Auto-servicio de nombres" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" +"La semántica de %(label)s fue cambiada. %(current_behavior)s\n" +"%(hint)s" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" +"Lista separada por punto y coma de direcciones IP o redes que tiene " +"permitido enviar peticiones" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" +"Lista separada por punto y coma de direcciones IP o redes que tiene " +"permitido transferir la zona" + +msgid "Serial" +msgstr "Serie" + +msgid "Serial Number" +msgstr "Número de serie" + +msgid "Serial Number (hex)" +msgstr "N.º de serie (hex.)" + +msgid "Serial number" +msgstr "Número de serie" + +msgid "Serial number (hex)" +msgstr "N.º de serie (hex.)" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "Número de serie en decimales, o hexadecimales, si tiene un prefijo 0x" + +msgid "Server" +msgstr "Servidor" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "El servidor \"%(srv)s\" tiene %(n)d acuerdos con servidores:" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "" +"El servidor %(srv)s no puede contactar con los servidores: %(replicas)s" + +msgid "Server Name" +msgstr "Nombre de servidor" + +msgid "Server has already been deleted" +msgstr "El servidor ya ha sido borrado" + +msgid "Server location" +msgstr "Localización de servidor" + +msgid "Server name" +msgstr "Nombre del servidor" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "El nombre del servidor no se ha suministrado y es indisponible\n" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "Borrado del servidor abortado: %(reason)s." + +msgid "Server state" +msgstr "Estado del servidor" + +msgid "Server will check DNS forwarder(s)." +msgstr "El servidor revisará los \"DNS forwarder(s)\"." + +msgid "Servers" +msgstr "Servidores" + +msgid "Servers details:" +msgstr "Detalles de los servidores:" + +msgid "Servers in location" +msgstr "Servidores en localización" + +msgid "Servers that belongs to the IPA location" +msgstr "Servidores que pertenecen a la localización IPA" + +msgid "Service" +msgstr "Servicio" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" +"El servicio %(service)s requiere ser reiniciado sobre el servidor IPA " +"%(server)s para aplicar los cambios de configuración." + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "" +"El servicio '%(service)s' no se encontró en la base de datos de Kerberos" + +msgid "Service Certificate" +msgstr "Certificado de servicio" + +msgid "Service Groups" +msgstr " Búsqueda de servicios HBAC." + +msgid "Service Settings" +msgstr "Configuración del servicio" + +msgid "Service category" +msgstr " Añadir servicios a una regla de HBAC" + +msgid "Service category the rule applies to" +msgstr "Categoría de servicio a la que se aplica la regla" + +msgid "Service group name" +msgstr "" +" Desactivar la tecla de Kerberos, certificado SSL y todos los servicios " +"de un host." + +msgid "Service name" +msgstr "% (Count) d HBAC servicios encontrados" + +msgid "Service principal" +msgstr " Búsqueda de servicios IPA" + +msgid "Service principal alias" +msgstr "Alias principal del servicio" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" +"Principal del servicio para este certificado (p.ej. HTTP/prueba.ejemplo.com)" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" +"El servicio principal no tiene la forma de servicio/nombre de equipo " +"totalmente calificado: %(reason)s" + +msgid "Service principal is required" +msgstr "Se requiere el servicio principal" + +msgid "Service relative weight" +msgstr "Peso relativo del servicio" + +msgid "Service weight" +msgstr "Peso del servicio" + +msgid "Services" +msgstr "Sevicios HBAC" + +msgid "Session error" +msgstr "Error de sesión" + +msgid "Set" +msgstr "Definir" + +msgid "Set OTP" +msgstr "Establecer OTP" + +msgid "Set a user's password." +msgstr "Fijar una contraseña de usuario." + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" +"Establecer un atributo a un par nombre y valor. El formato es attr=value. \n" +"Para los atributos de valor múltiple, el comando sustituye los valores ya " +"presentes." + +msgid "Set enabled/hidden state of a server." +msgstr "Establecer estado habilitado/escondido de un servidor." + +msgid "Settings" +msgstr "Configuración" + +msgid "Shared secret for the trust" +msgstr "Secreto compartido para la confianza" + +msgid "Show" +msgstr "Mostrar" + +msgid "Show IPA server." +msgstr "Mostrar servidor IPA." + +msgid "Show Results" +msgstr "Mostrar Resultados" + +msgid "Show all loaded plugins." +msgstr "Mostrar todos los plugins cargados." + +msgid "Show details" +msgstr "Mostrar detalles" + +msgid "Show environment variables." +msgstr "Mostrar variables de entorno." + +msgid "Show global trust configuration." +msgstr "Mostrar la configuración de confianza global." + +msgid "Show role status on a server" +msgstr "Muestra el rol de estado sobre un servidor" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "Muestra la configuración actual del Mapeo de Identidad de Certificado." + +msgid "Show the current OTP configuration." +msgstr "Mostrar la configuración OTP actual." + +msgid "Show the current configuration." +msgstr "Muestra la configuración actual" + +msgid "Show the current global DNS configuration." +msgstr "Mostrar la configuración global DNS actual." + +msgid "Show the list of permitted encryption types and exit" +msgstr "Mostrar la lista de los tipos cifrados permitidos y salir" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "Mostrando ${start} a ${end} de ${total} entradas." + +msgid "Simple bind failed\n" +msgstr "¡Falló vinculación sencilla!\n" + +msgid "Simulate use of Host-based access controls" +msgstr "Simular el uso de controles de acceso basados en Host" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" +"Puesto que IPA no gestiona los registros DNS, asegúrese de que DNS está " +"configurado para resolver el dominio '{domain}' desde los hosts IPA y vuelta." + +msgid "Size" +msgstr "Tamaño" + +msgid "Size Limit" +msgstr "Tamaño límite" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "Tamaña del rango de ID reservado para los dominios de confianza" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" +"Saltar una comprobación si el último maestro CA o servidor DNS se ha quitado" + +msgid "Skip host check" +msgstr "Salta la comprobación de host" + +#, python-format +msgid "Skipped %(key)s" +msgstr "%(key)s omitida" + +#, python-format +msgid "Skipped %(map)s" +msgstr "%(map)s omitido" + +msgid "Some entries were not deleted" +msgstr "Algunas entradas no fueron borradas" + +msgid "Some operations failed." +msgstr "Algunas operaciones fallaron." + +msgid "Specified Commands and Groups" +msgstr "Comandos especificados y grupos" + +msgid "Specified Groups" +msgstr "Grupos especificados" + +msgid "Specified Hosts and Groups" +msgstr "Hosts y grupos especificados" + +msgid "Specified Services and Groups" +msgstr "Servicios y grupos especificados" + +msgid "Specified Users and Groups" +msgstr "Usuarios y grupos específicos" + +msgid "Specified trusted domain name could not be found." +msgstr "" +"El nombre especificado de dominio de confianza podría no ser encontrado." + +msgid "Specifies where to store keytab information." +msgstr "Especifica dónde almacenar la información de tabla de claves." + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "Especificar ${entity} externa" + +msgid "Split DNS record to parts" +msgstr "Divide registro DNS en partes" + +msgid "Stage" +msgstr "Escenario" + +msgid "Stage User" +msgstr "Escenario de Usuario" + +msgid "Stage Users" +msgstr "Escenario Usuarios" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "Cuenta de usuario por etapas \"%(value)s\"" + +msgid "Standard Record Types" +msgstr "Tipos de Registro Estándar" + +msgid "State" +msgstr "Estado" + +msgid "State/Province" +msgstr "Estado / Provincia" + +msgid "Status" +msgstr "Estatus" + +msgid "Status of the role" +msgstr "Estado del rol" + +msgid "Store issued certificates" +msgstr "Almacén de certificados enviados" + +msgid "Street address" +msgstr "Dirección postal" + +msgid "Structured" +msgstr "Estructurado" + +msgid "Subject" +msgstr "Asunto" + +msgid "Subject DN" +msgstr "Sujeto DN" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "Sujeto DN ya está usado por CA '%s'" + +msgid "Subject Distinguished Name" +msgstr "Nombre Distinguido del Sujeto" + +msgid "Submit a certificate signing request." +msgstr "Enviar una petición de firma de certificado." + +msgid "Subtree" +msgstr "Subárbol" + +msgid "Subtree to apply ACI to" +msgstr "Subárbol al que aplicar ACI" + +msgid "Subtree to apply permissions to" +msgstr "Subárbol para aplicar permisos" + +msgid "Subtype" +msgstr "Subtipo" + +msgid "Success" +msgstr "Éxito" + +msgid "Sudo" +msgstr "Sudo" + +msgid "Sudo Allow Command Groups" +msgstr "Sudo Permitir Grupos de Comando" + +msgid "Sudo Allow Commands" +msgstr "Comandos Allow de sudo" + +msgid "Sudo Command" +msgstr "Comando sudo " + +msgid "Sudo Command Group" +msgstr "Grupo de comando sudo" + +msgid "Sudo Command Groups" +msgstr "Grupos de comando sudo" + +msgid "Sudo Commands" +msgstr "Comandos de sudo" + +msgid "Sudo Deny Command Groups" +msgstr "Sudo Denegar Grupos de Comandos" + +msgid "Sudo Deny Commands" +msgstr "Comandos Deny de sudo" + +msgid "Sudo Option" +msgstr "Opción de sudo" + +msgid "Sudo Rule" +msgstr "Regla Sudo" + +msgid "Sudo Rules" +msgstr "Reglas Sudo" + +msgid "Sudo order" +msgstr "Orden Sudo" + +msgid "Superseded" +msgstr "Obsoleta" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "Tipos de cifrado suportado\n" + +msgid "Synchronize an OTP token." +msgstr "Sincronice una ficha OTP" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Error de sintaxis:%(error)s " + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set " +"LC_ALL=\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" +"La codificación del sistema debe ser UTF-8, '%(encoding)s' no está(n) " +"soportada(s). Ajuste LC_ALL=\"C.UTF-8\", o LC_ALL=\"\" y LC_CTYPE=\"C." +"UTF-8\"." + +msgid "TOTP Synchronization Window" +msgstr "Ventana de Sincronización TOTP" + +msgid "TOTP authentication Window" +msgstr "Ventana de autenticación TOTP" + +msgid "TOTP authentication time variance (seconds)" +msgstr "Variación del tiempo de autenticación TOTP (segundos)" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "Variación del tiempo de sincronización TOTP (segundos)" + +msgid "TOTP token / IPA server time difference" +msgstr "Ficha TOTP / Diferencia de hora del servidor IPA" + +msgid "Take a revoked certificate off hold." +msgstr "Tomar un certificado revocado de espera." + +msgid "Target" +msgstr "Meta" + +msgid "Target DN" +msgstr "DN objetivo" + +msgid "Target DN subtree" +msgstr "Sub-árbol DN objetivo" + +msgid "Target Uniform Resource Identifier" +msgstr "Identificador Uniforme de Recursos Objetivo" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "Identificador Uniforme de Recursos Objetivo de acuerdo al RFC 3986" + +msgid "Target group" +msgstr "Grupo elegido" + +msgid "Target host" +msgstr "Host objetivo" + +msgid "Target members of a group" +msgstr "Miembros objetivo de un grupo" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "Miembros objetivos de un grupo (establece memberOf targetfilter)" + +msgid "Target your own entry (self)" +msgstr "Dirija su propia entrada (usted)" + +msgid "Telephone Number" +msgstr "Número de teléfono" + +msgid "Test the ACI syntax but don't write anything" +msgstr "Probar la sintaxis pero no escribir nada" + +msgid "Text Data" +msgstr "Datos de texto" + +msgid "Text does not match field pattern" +msgstr "El texto no coincide con el patrón de campo" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" +"La opción --domain no puede ser usada junto con --add-domain o --del-domain. " +"Use --domain para especificar explícitamente la lista de todo el dominio, " +"para añadir/borrar dominios concretos, use --add-domain/del-domain." + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "El ACI para el permiso %(name)s no fue encontrado en %(dn)s " + +msgid "The IPA realm" +msgstr "El reinado IPA" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" +"El registro _kerberos TXT del dominio %(domain)s podría no ser creado " +"(%(error)s).\n" +"Esto puede suceder si la zona no es manejada por IPA. Por favor cree el " +"registro manualmente, conteniendo el siguiente valor: '%(realm)s'" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" +"El registro _kerberos TXT del dominio %(domain)s podría no ser quitado " +"(%(error)s).\n" +"Esto puede suceder si la zona no está manejada por IPA. Por favor quite el " +"registro manualmente." + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "La clave de montaje automático %(key)s con info %(info)s no existe" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "El certificado para %(ca)s no está disponible en este servidor." + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "El carácter %(char)r no está permitido." + +msgid "The default users group cannot be removed" +msgstr "El grupo de usuarios predeterminado no puede ser eliminado" + +msgid "The deny type has been deprecated." +msgstr "El tipo deny ha quedado obsoleto." + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "El dominio %s no es un dominio IPA ni un dominio de confianza." + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" +"El nombre de dominio del host objetivo o '.' si el servicio es decididamente " +"no disponible en este dominio" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" +"El dominio(s) \"%s\" no puede ser usado para aplicar la comprobación " +"altSecurityIdentities." + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "Los siguientes dominio no pertenecen a este reino: %(domains)s" + +msgid "The group doesn't exist" +msgstr "El grupo no existe" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "El '%s' no existe para añadirle un servicio." + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "El host fue añadido pero la actualización DNS falló por: %(reason)s" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "El nombre de host debe ser totalmente calificado:%s\n" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "El nombre del equipo no debe ser: %s\n" + +msgid "The hostname or IP (with or without port)" +msgstr "El nombre de host o IP (con o sin puerto)" + +msgid "The hostname this reverse record points to" +msgstr "El nombre de host al que apunta este registro inverso" + +msgid "The hostname to register as" +msgstr "El nombre del equipo a ser registrado como" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" +"El par de claves, la información debe ser único. Un nombre clave %(key)s " +"con información %(info)s ya existe" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" +"El archivo keytab para añadir a la nueva clave (será creado si no existe)." + +msgid "The keytab file to remove the principcal(s) from" +msgstr "El fichero keytab fpara borrar el principal(s) desde" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" +"La regla de mapeo con altSecurityIdentities debería ser aplicada a un " +"dominio Active Directory de confianza pero ningún dominio fue asociado con " +"la regla." + +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "Los tipos mas comunes para este tipo de zona son: %s\n" + +msgid "The number of times to retry authentication" +msgstr "El número de veces para reintentar la autenticación" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" +msgstr "El valor de primary_key de la entrada, p.ej., «jperez» para un usuario" + +msgid "The principal for this request doesn't exist." +msgstr "El principal para esta petición no existe." + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" +"La principal para obtener una tabla de claves para (ex: ftp/ftp.example." +"com@EXAMPLE.COM)" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" +"El principal para borrar desde keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "" +"El reinado para el principal no coincide con el reinado para este servidor " +"IPA" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" +"El reino de los siguientes dominios podrían no ser detectados: %(domains)s. " +"Si estos dominios pertenecen a este reino, cree por favor un registro " +"_kerberos TXT que contenga \"%(realm)s\" en cada uno." + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" +"El esquema utilizado en el servidor LDAP. Los valores admitidos son RFC2307 " +"y RFC2307bis. El valor predeterminado es RFC2307bis" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" +"El criterio de búsqueda no fue bastante específico. Se esperaba 1 y se " +"encontró %(found)d." + +msgid "The secret used to encrypt data" +msgstr "El secreto usado para encriptar datos" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "El servicio puede autenticarse en nombre de un cliente" + +msgid "The topic or command name." +msgstr "Nombre de tópico o comando." + +msgid "The total timeout across all retries (in seconds)" +msgstr "" +"El tiempo de espera total después de todos los reintentos (en segundos)" + +msgid "The username attribute on the user object" +msgstr "El atributo username sobre el objeto usuario" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" +"Este comando no puede ser usado para cambiar la asignación de ID para el " +"dominio IPA local. Ejecute `ipa help idrange` para más información" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" +"Este comando se basa en la existencia del grupo \"editors\" pero este grupo " +"no h sido encontrado." + +msgid "This command requires root access" +msgstr "Este comando necesita acceso de usuario root" + +msgid "This entry already exists" +msgstr "Esta entrada ya existe" + +msgid "This entry cannot be enabled or disabled" +msgstr "Esta entrada no puede ser activada o desactivada" + +msgid "This entry is already a member" +msgstr "Esta entrada ya es un miembro" + +msgid "This entry is already disabled" +msgstr "Esta entrada ya está desactivada" + +msgid "This entry is already enabled" +msgstr "Esta entrada ya está habilitada" + +msgid "This entry is not a member" +msgstr "Esta entrada no es miembro" + +msgid "This group already allows external members" +msgstr "Este grupo ya acepta miembros externos" + +msgid "This group cannot be posix because it is external" +msgstr "Este grupo o puede ser posix porque es externo" + +msgid "This is already a posix group" +msgstr "Este ya es un grupo posix" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "Esto es ya un grupo posix y no puede ser convertido en uno externo" + +msgid "This may take some time, please wait ..." +msgstr "Esto puede tomar un poco mas de tiempo. Por favor espere ..." + +msgid "This page has unsaved changes. Please save or revert." +msgstr "Esta página tiene cambios sin guardar. Por favor, guardar o deshacer." + +msgid "Ticket expired" +msgstr "El ticket ha expirado" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "La política de entrada para %s podría no ser leída" + +msgid "Time Limit" +msgstr "Tiempo límite" + +msgid "Time limit of search in seconds" +msgstr "Tiempo máximo de búsqueda en segundos" + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "Tiempo límite de búsqueda en segundos (0 es ilimitado)" + +msgid "Time now" +msgstr "Ahora" + +msgid "Time to live" +msgstr "Tiempo para abandonar" + +msgid "Time to live for records at zone apex" +msgstr "Tiempo de vida de los registros en zona apéndice" + +msgid "Time to live for records without explicit TTL definition" +msgstr "Tiempo de vida para los registros sin definición explícita TTL" + +msgid "Timeout" +msgstr "Tiempo de espera" + +#, c-format +msgid "Timeout exceeded." +msgstr "Tiempo de espera superado." + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" +"Para establecer confianza con Active Directory, el nombre de dominio y el " +"nombre de reino del servidor IPA deben coincidir" + +msgid "To get command help, use:" +msgstr "Para obtener ayuda sobre el comando, utilice:" + +msgid "Token ID" +msgstr "ID de ficha" + +msgid "Token description (informational only)" +msgstr "Descripción de la ficha (solo informativo)" + +msgid "Token hash algorithm" +msgstr "Algoritmo de ficha picada" + +msgid "Token model (informational only)" +msgstr "Ficha modelo (solo informativo)" + +msgid "Token secret (Base32; default: random)" +msgstr "Ficha secreto (Base32; predeterminado: random)" + +msgid "Token serial (informational only)" +msgstr "Ficha serie (solo informativa)" + +msgid "Token vendor name (informational only)" +msgstr "Ficha nombre de vendedor (solo informativo)" + +msgid "Topic commands:" +msgstr "Tema comandos:" + +msgid "Topic or Command" +msgstr "Tópico o Comando" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" +"La topologia no permite al servidor %(server)s replicar con servidores:" + +msgid "Topology is disconnected" +msgstr "La topología está desconectada" + +msgid "Total number of variables env (>= count)" +msgstr "Cantidad total de variables env (>= count)" + +msgid "True" +msgstr "Verdad" + +msgid "True if not all results were returned" +msgstr "Verdadero si no todos los resultados se devolvieron" + +msgid "True means the operation was successful" +msgstr "«Verdadero» significa que la operación fue exitosa" + +msgid "Trust" +msgstr "Confianza" + +msgid "Trust direction" +msgstr "Dirección de confianza" + +msgid "Trust status" +msgstr "Estado de confianza" + +msgid "Trust type" +msgstr "Tipo de confianza" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "Tipo de confianza (ad para Active Directory, predeterminado)" + +msgid "Trusted domain" +msgstr "Dominio de confianza" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" +"El dominio de confianza %(domain)s está incluido entre los dominios del " +"reino IPA realm. Necesita ser quitado antes de establecer la confianza. Vea " +"el comando \"ipa realmdomains-mod --del-domain\"." + +msgid "Trusted domain and administrator account use different realms" +msgstr "" +"El dominio de confianza y la cuenta del administrador usan reinos diferentes" + +msgid "Trusted domains" +msgstr "Dominios de confianza" + +msgid "Trusted for delegation" +msgstr "Confiable para la delegación" + +msgid "Trusted to authenticate as user" +msgstr "Confiable pata autenticarse como usuario" + +msgid "Trusts" +msgstr "Confianzas" + +msgid "Two factor authentication (password + OTP)" +msgstr "Autenticación dos factores (contraseña + OTP)" + +msgid "Two-way trust" +msgstr "Confianza de dos sentidos" + +msgid "Type" +msgstr "Tipo" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "Tipo de objeto IPA (establece subtree y objectClass targetfilter)" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" +"Tipo de objeto IPA (usuario, grupo, host, grupo de host, servicio, grupo de " +"red, dns)" + +msgid "Type of the token" +msgstr "Tipo de ficha" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" +"Tipo de rango de ID de dominios de confianza, uno de los valores permitidos" + +msgid "UID" +msgstr "UID" + +msgid "UPN suffixes" +msgstr "Sufijos UPN" + +msgid "URI" +msgstr "URI" + +msgid "URL" +msgstr "URL" + +msgid "UUID" +msgstr "UUID" + +msgid "Unable to communicate with CMS" +msgstr "Incapaz de comunicar con CMS" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "Incapaz de comunicar con CMS (estado %d)" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "No se puede crear un grupo privado. Un grupo de '%(group)s' ya existe." + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "No se puede determinar servidor de la IPA de%s\n" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" +"Incapaz de determinar si el principal Kerberos %s ya existe. Use 'ipa user-" +"mod' para establecerlo manualmente." + +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "No se puede determinar DN de root de%s\n" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" +"Incapaz de mostrar el código QR usando la codificación de salida " +"configurada. Por favor use la ficha URI para configurar su dispositivo OTP" + +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "No se puede habilitar SSL en LDAP\n" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "No se puede generar la cache de credenciales de Kerberos\n" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "Incapaz de inicializar la sesión STARTTLS\n" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "¡No puede iniciar biblioteca IDAP!\n" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" +"No se puede unir host: cache de credenciales de Kerberos no se encuentra\n" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" +"No se puede unir host: principal de usuario no se encuentra y contraseña de " +"host no se proporciona.\n" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" +"No se puede unir host: la inicialización de contexto de Kerberos falló\n" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "No es posible analizar los principales\n" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "No se puede analizar nombre principal\n" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "Incapaz de analizar el principal: %1$s (%2$d)\n" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "No se puede eliminar la entrada\n" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "" +"Incapaz de resolver el controlador de dominio para el dominio {domain}. " + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "Incapaz de ajustar LDAP_OPT_PROTOCOL_VERSION\n" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "Incapaz de fijar LDAP_OPT_X_SASL_NOCANON \n" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "Incapaz de ajustar LDAP_OPT_X_TLS_REQUIRE_CERT\n" + +msgid "Unable to verify write permissions to the AD" +msgstr "Incapaz de verificar los permisos de escritura al AD" + +msgid "Undelete a delete user account." +msgstr "Recuperar una cuenta de usuario borrada." + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "Recuperada cuenta de usuario \"%(value)s\"" + +msgid "Unenroll this host from IPA server" +msgstr "Cancelar registro de host de servidor IPA" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "Cancelación falló.\n" + +#, c-format +msgid "Unenrollment successful.\n" +msgstr "Cancelación de registro exitoso.\n" + +msgid "Unique ID" +msgstr "ID única" + +msgid "Unknown" +msgstr "Desconocido" + +msgid "Unknown Error" +msgstr "Error Desconocido" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "Opción desconocida: %(option)s" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "Cuenta desbloqueada \" %(value)s \"" + +msgid "Unmatched" +msgstr "Desemparejado" + +msgid "Unprovision" +msgstr "Unprovision" + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "Atributos no reconocidos: %(attrs)s" + +msgid "Unresolved rules in --rules" +msgstr "Eliminar miembro desde un grupo." + +msgid "Unrevoked" +msgstr "No revocado" + +msgid "Unsaved Changes" +msgstr "Cambios No Guardados" + +msgid "Unselect All" +msgstr "Anular selección" + +msgid "Unspecified" +msgstr "No especificada" + +msgid "Unsupported value" +msgstr "Valor no admitido" + +msgid "Update" +msgstr "Actualizar" + +msgid "Update DNS entries" +msgstr "Actualizar las entradas DNS" + +msgid "Update location and IPA server DNS records" +msgstr "Actualizar registros de ubicación y servidor IPA DNS" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" +"Actualización del registro del sistema '%(record)s' falló con error: " +"%(error)s" + +msgid "User" +msgstr "Usuario" + +msgid "User Group" +msgstr "Grupo Usuario" + +msgid "User Groups" +msgstr "Grupos de usuarios" + +msgid "User ID" +msgstr "ID de usuario" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" +"Número de ID de usuario (el sistema le asignará uno si no se indica ninguno)" + +msgid "User Options" +msgstr "Opciones de Usuario" + +msgid "User attribute" +msgstr "Atributo de usuario" + +msgid "User category" +msgstr "Categoría de usuario" + +msgid "User category the rule applies to" +msgstr "Categoría de usuario al que se aplica la regla" + +msgid "User container" +msgstr "Contenedor de usuario" + +msgid "User group" +msgstr "Grupo de usuarios" + +msgid "User group ACI grants access to" +msgstr "El grupo de usuarios ACI permite el acceso a" + +msgid "User group to apply delegation to" +msgstr "Grupo de usuarios para solicitar a la delegación" + +msgid "User group to apply permissions to" +msgstr "Grupo de usuario a aplicar los permisos para" + +msgid "User group to apply permissions to (sets target)" +msgstr "Usuario de grupo a aplicar permisos (establece target)" + +msgid "User login" +msgstr "Ingreso de usuario" + +msgid "User logins" +msgstr "Accesos de usuario" + +msgid "User name" +msgstr "Nombre de usuario" + +msgid "User object class" +msgstr "Clase de objeto de usuario" + +msgid "User password" +msgstr "Contraseña de usuario" + +msgid "User search fields" +msgstr "Campos de búsqueda de usuario" + +msgid "User-friendly description of action performed" +msgstr "Descripción sencilla de la acción realizada" + +msgid "User-specified attributes to which the permission applies" +msgstr "Atributos especificados por el usuario a los que aplica el permiso" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" +"Atributos especificados por el usuario a los cuales no se les aplica " +"explícitamente el permiso" + +msgid "Username" +msgstr "Nombre de usuario" + +msgid "Users" +msgstr "Usuarios" + +msgid "Users allowed to create keytab" +msgstr "Los usuarios pueden crear keytab" + +msgid "Users allowed to retrieve keytab" +msgstr "Los usuarios pueden recuperar keytab" + +msgid "Valid Certificate Present" +msgstr "Presentar certificado válido" + +msgid "Validation error" +msgstr "Error de validación" + +msgid "Validity" +msgstr "Validez" + +msgid "Validity end" +msgstr "Validar final" + +msgid "Validity start" +msgstr "Validar inicio" + +msgid "Vault password" +msgstr "Contraseña de la bóveda" + +msgid "Vendor" +msgstr "Vendedor" + +msgid "Verify Password" +msgstr "Verificar Contraseña" + +msgid "Verify Principal Password" +msgstr "Verificar contraseña principal" + +msgid "Vertical Precision" +msgstr "Precisión vertical" + +msgid "Via Service" +msgstr "Vía de servicio" + +msgid "View" +msgstr "Ver" + +msgid "Warning" +msgstr "Aviso" + +msgid "Warning unrecognized encryption type.\n" +msgstr "Precaución tipo de encriptación no reconocido.\n" + +msgid "Warning unrecognized salt type.\n" +msgstr "Advertencia de tipo de sal no reconocido.\n" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "Advertencia: Tipo para convertir falló (#%d)⏎\n" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" +"Advertencia: tipos salt no se aceptan con contraseñas aleatorias (ver opt.\n" + +msgid "Weight" +msgstr "Peso" + +msgid "Weight for server services" +msgstr "Peso para los servicios del servidor" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" +"Cuando se migra un grupo que ya existe en el dominio IPA se sobrescribe el " +"GID de grupo e informa como conseguido" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "Sí PKINIT está habilitado o deshabilitado" + +msgid "Whether to store certs issued using this profile" +msgstr "Si se almacenan los certificados enviados usando este perfil" + +msgid "Who" +msgstr "¿Quién?" + +msgid "Write certificate (chain if --chain used) to file" +msgstr "Escribir certificado (chain if --chain used) a archivo" + +msgid "Write profile configuration to file" +msgstr "Escribir configuración de perfil a fichero" + +msgid "X.509 certificate chain" +msgstr "Cadena de certificado X.509" + +msgid "You may need to manually remove them from the tree" +msgstr "Usted puede necesitar borrarlo manualmente del árbol" + +msgid "You must enroll a host in order to create a host service" +msgstr "Debe registrar el equipo para poder generar un servicio de host" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" +"Debe especificar las opciones tanto rid-base como secondary-rid-base " +"options, puesto que ipa-adtrust-install ya ha estado corriendo." + +msgid "You will be redirected to DNS Zone." +msgstr "Será redirigido a Zona DNS." + +msgid "Your session has expired. Please log in again." +msgstr "Su sesión ha expirado. Por favor acceda otra vez." + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" +"Su confianza en %(domain)s se ha roto. Vuelva a creara ejecutando 'ipa trust-" +"add' otra vez." + +msgid "YubiKey slot" +msgstr "Espacio YubiKey" + +msgid "ZIP" +msgstr "Zona " + +msgid "Zone forwarders" +msgstr "Zona de expedidores" + +msgid "Zone name" +msgstr "Nombre de la zona" + +msgid "Zone name (FQDN)" +msgstr "Nombre de la zona (FQDN)" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "No se puede eliminar el registro de zona «%s»" + +msgid "Zone refresh interval" +msgstr "Intervalo de refresco de zona" + +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "access() sobre %1$s falló: errno = %2$d\n" + +msgid "algorithm value: allowed interval 0-255" +msgstr "valor del algoritmo: intervalo permitido 0-255" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "todos los maestros deben tener el rol %(role)s habilitado" + +msgid "an internal error has occurred" +msgstr "ha ocurrido un error interno" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "ha ocurrido un error interno en el servidor en '%(server)s'" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" +"respuesta a la consulta '%(owner)s %(rtype)s' tiene firmas DNSSEC " +"desaparecidas (sin datos RRSIG)" + +msgid "any of the configured servers" +msgstr "cualquiera de los servidores configurados" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "api no tiene dicho espacio de nombres: '%(name)s'" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" +"es necesario como mínimo alguno de: tipo, filtro, subárbol, grupo de " +"destino, atributos, o miembro de " + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" +"al menos un valor igual al nombre canónico principal debe estar presente" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "atributo \"%s\" no permitido" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "los atributos attrs e included son mutuamente exclusivos" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "los atributos attrs e included/excluded son mutuamente exclusivos" + +msgid "automatically add the principal if it doesn't exist" +msgstr "si no existe, agregar automáticamente el principal" + +msgid "automount key" +msgstr "clave de automontaje" + +msgid "automount keys" +msgstr "claves de automontaje" + +msgid "automount location" +msgstr "localización automontaje" + +msgid "automount locations" +msgstr "localizaciones de automontaje" + +msgid "automount map" +msgstr "mapa de automontaje" + +msgid "automount maps" +msgstr "mapas de automontaje" + +msgid "basedn" +msgstr "basedn" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "Falló ber_init(), ¿control inválido?\n" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "ber_scanf() falló, incapaz de encontrar kvno ?!\n" + +msgid "bind password" +msgstr "asociar contraseña" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "puede ser a lo sumo%(len)d caracteres" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "puede ser a lo sumo de %(maxlength)d bytes" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "puede tener a lo sumo %(maxlength)d caracteres" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "puede ser como máximo %(maxvalue)d" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "puede ser como mucho %(maxvalue)s" + +msgid "cannot be empty" +msgstr "no puede estar vacío" + +msgid "cannot be longer that {} characters" +msgstr "no puede ser mayor de {} caracteres" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "no se pudo conectar a '%(uri)s': %(error)s" + +msgid "cannot delete global password policy" +msgstr "no puede borrar la Política global de contraseña" + +msgid "cannot delete managed permissions" +msgstr "no puede borrar permisos gestionados" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" +"no puede borrar el dominio raíz de la confianza, use trust-del para borrarla " +"misma confianza" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" +"no puede deshabilitar el dominio raíz de la confianza, use trust-del para " +"borrar la confianza misma" + +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "no se puede abrir archivo de configuración %s\\n\n" + +msgid "cannot rename managed permissions" +msgstr "no puede renombrar permisos gestionados" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" +"no puede establecer bindtype para un permiso que se ha asignado a un " +"privilegio" + +msgid "cannot specify both raw certificate and file" +msgstr "no puede especificar un certificado RAW y un archivo" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" +"no puede especificar filtro de objetivo completo y filtro de objetivo extra " +"simultáneamente" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "no puede stat () del archivo de configuración%s\n" + +msgid "change collided with another change" +msgstr "la modificación choca con otra modificación diferente" + +msgid "change to a POSIX group" +msgstr "Cambiar a un grupo POSIX" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" +"cambio para soportar miembros externos no IPA desde dominios de confianza" + +#, c-format +msgid "child exited with %d\n" +msgstr "hijo terminó con %d\n" + +msgid "cn is immutable" +msgstr "cn es inmutable" + +msgid "comma-separated list of groups to add" +msgstr "listas separada por comas de grupos a añadir" + +msgid "comma-separated list of groups to remove" +msgstr "lista separada por comas de grupos a quitar" + +msgid "comma-separated list of host groups to add" +msgstr "lista separada por comas de grupos de host a añadir" + +msgid "comma-separated list of host groups to remove" +msgstr "lista separada por comas de grupos de host a quitar" + +msgid "comma-separated list of hosts to add" +msgstr "lista separada por comas de hosts a añadir" + +msgid "comma-separated list of hosts to remove" +msgstr "lista separada por comas de hosts a quitar" + +msgid "comma-separated list of privileges to add" +msgstr "lista separada por comas de privilegios a añadir" + +msgid "comma-separated list of privileges to remove" +msgstr "lista separada por comas de privilegios a borrar" + +msgid "comma-separated list of sudo command groups to add" +msgstr "lista separada por comas de grupos de comandos sudo a añadir" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "lista separada por comas de grupos de comandos sudo a quitar" + +msgid "comma-separated list of sudo commands to add" +msgstr "lista separada or comas de comandos sudo a añadir" + +msgid "comma-separated list of sudo commands to remove" +msgstr "lista separada por comas de comandos sudo a quitar" + +msgid "comma-separated list of users to add" +msgstr "lista separada por comas de usuarios a añadir" + +msgid "comma-separated list of users to remove" +msgstr "lista separada por comas de usuarios a quitar" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "comando '%(name)s' toma la mayoria %(count)d argumento" +msgstr[1] "comando '%(name)s' toma la mayoría %(count)d argumentos" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "comando '%(name)s' no toma argumentos" + +msgid "commands for controlling sudo configuration" +msgstr "comandos para controlar la configuración sudo" + +msgid "configuration options" +msgstr "opciones de configuración" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "no se encuentra la entrada (%(container)s) de contenedor" + +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "curl_easy_init() falló\n" + +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "curl_easy_setopt() falló\n" + +#, c-format +msgid "curl_global_init() failed\n" +msgstr "curl_global_init() falló\n" + +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "curl_slist_append() falló para valor: '%s'\n" + +msgid "delegation" +msgstr "delegación" + +msgid "delegations" +msgstr "delegaciones" + +msgid "description" +msgstr "descripción" + +msgid "did not receive Kerberos credentials" +msgstr "no se ha recibido ninguna credencial de Kerberos" + +msgid "does not match any of accepted formats: " +msgstr "no coincide con ninguno de los formatos aceptados: " + +msgid "domain" +msgstr "dominio" + +msgid "domain is not configured" +msgstr "el dominio no está configurado" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" +"el nombre de dominio '%(domain)s' debería ser normalizado a: %(normalized)s" + +msgid "domain name cannot be longer than 255 characters" +msgstr "el nombre de dominio no puede ser mas largo de 255 caracteres" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "cada elemento ACL debe estar terminado con un punto y coma" + +msgid "empty DNS label" +msgstr "etiqueta DNS vacía" + +msgid "empty filter" +msgstr "Vaciar filtro" + +msgid "entries" +msgstr "entradas" + +msgid "entry" +msgstr "entrada" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "error de clasificación para el transporte de datos XML-RPC: %(error)s " + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "error sobre el servidor '%(server)s': %(error)s" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "la ejecución de ipa-getkeytab falló, errno %d\n" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" +"formato esperado: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" + +msgid "file to store DNS records in nsupdate format" +msgstr "archivo para almacenar los registros DNS en formato nsupdate" + +msgid "file to store certificate in" +msgstr "archivo para almacenar" + +msgid "filename" +msgstr "nombre de archivo" + +msgid "filter and memberof are mutually exclusive" +msgstr "filtro y memberof son mutuamente excluyentes" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "las banderas deben ser una de \"S\", \"A\", \"U\" o \"P\"" + +msgid "flags value: allowed interval 0-255" +msgstr "valor de banderas: intervalo permitido 0-255" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "Forzar la creación del registro DNS, aunque su nombre no sea absoluto" + +msgid "force delete of SYSTEM permissions" +msgstr "fuerza el borrado de permisos SYSTEM" + +msgid "force host name even if not in DNS" +msgstr "" +"fuerza el nombre del equipo anfitrión, incluso si no se encuentra en DNS" + +msgid "force principal name even if host not in DNS" +msgstr "fuerza el nombre del principal si el host no está en el DNS" + +msgid "force principal name even if not in DNS" +msgstr "fuerza el nombre del prinicpal, aún si no se encuentra en DNS" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" +"fuerza la creación del servicio aún cuando el host no exista para manejarlo" + +#, c-format +msgid "fork() failed\n" +msgstr "bifurcación () falló\n" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" +"\"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +"donde:\n" +"d1: [0 .. 90] (grados de latitud)\n" +"d2: [0 .. 180] (grados de longitud)\n" +"m1, m2: [0 .. 59] (minutos de latitud/longitud)\n" +"s1, s2: [0 .. 59.999] (segundos de latitud/longitud)\n" +"alt: [-100000.00 .. 42849672.95] BY .01 (altitud en metros)\n" +"siz, hp, vp: [0 .. 90000000.00] (tamaño/precisión en metros)\n" +"Vea RFC 1876 para detalles" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "el formato se debe especificar como \"%(format)s\" %(rfcs)s" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" +"zona de envío \"%(fwzone)s\" no es efectiva por desaarición de la delegacion " +"NS apropiada en zona autorizada \"%(authzone)s\". Por favor añada registro " +"NS record \"%(ns_rec)s\" a la zona padre \"%(authzone)s\"." + +msgid "gid cannot be set for external group" +msgstr "gid no puede ser fijado para un grupo externo" + +msgid "givenname is required" +msgstr "se requiere nombre" + +msgid "group" +msgstr "grupo" + +msgid "group, permission and self are mutually exclusive" +msgstr "grupo, permisos y auto son mutuamente excluyentes" + +msgid "groups" +msgstr "grupos" + +msgid "host" +msgstr "host" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" +"la categoría de host no puede ser establecida a 'all' mientras hay host " +"permitidos" + +msgid "host group" +msgstr "grupo de host" + +msgid "host groups" +msgstr "grupos de host" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"grupo de host con nombre “%s” ya existe. Los grupos de nombres y los grupos " +"de red comparten un espacio de nombre común" + +msgid "hostname" +msgstr "nombre de host" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "el nombre de host contiene una etiqueta vacía (puntos consecutivos)" + +msgid "hosts" +msgstr "hosts" + +msgid "hosts cannot be added when host category='all'" +msgstr "hosts no puede ser añadido con categoría de host='all'" + +msgid "id range" +msgstr "rango id" + +msgid "id range type" +msgstr "tipo de rango de id" + +msgid "incomplete time value" +msgstr "valor de hora incompleto" + +msgid "incorrect type" +msgstr "tipo incorrecto" + +msgid "integer to order the Sudo rules" +msgstr "entero para ordenar las reglas Sudo" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "'%(name)s' inválido: %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "DN no válido (%s)" + +msgid "invalid IP address format" +msgstr "formato no válido de dirección IP" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" +"versión de dirección IP no válida (es %(value)d, debe ser " +"%(required_value)d)!" + +msgid "invalid IP network format" +msgstr "formato no válido de red IP" + +msgid "invalid Profile ID" +msgstr "ID de perfil no válido" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "SID no válido: {SID}" + +msgid "invalid SSH public key" +msgstr "clave SSH pública no válida" + +msgid "invalid address format" +msgstr "formato de dirección no válido" + +msgid "invalid attribute name" +msgstr "nombre de atributo no válido" + +msgid "invalid domain name" +msgstr "nombre de domino no válido" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "nombre de dominio no válido: %s" + +msgid "invalid domain-name: not fully qualified" +msgstr "nombre de dominio no válido: no totalmente cualificado" + +msgid "invalid escape code in domain name" +msgstr "código de salida no válido en el nombre de dominio" + +msgid "invalid hostmask" +msgstr "máscara de host no válida" + +msgid "invalid port number" +msgstr "número de puerto no válido" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "¿Tiene ipa-getkeytab permisos errados?\n" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "ipa-getkeytab no se encuentra\n" + +msgid "is required" +msgstr "se requiere" + +msgid "iterations value: allowed interval 0-65535" +msgstr "iterations value: intervalo permitido 0-65535" + +#, c-format +msgid "json_dumps() failed\n" +msgstr "json_dumps() falló\n" + +msgid "kerberos ticket policy settings" +msgstr "ajustes de la entrada de política kerberos" + +#, python-format +msgid "key %(key)s already exists" +msgstr "key %(key)s ya existe" + +#, python-format +msgid "key named %(key)s already exists" +msgstr "ya existe una llave denominada %(key)s" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "krb5_kt_close %1$d: %2$s\n" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "krb5_kt_get_entry %1$d: %2$s\n" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "krb5_kt_remove_entry %1$d: %2$s\n" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "krb5_parse_name %1$d: %2$s\n" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "krb5_unparse_name %1$d: %2$s\n" + +#, c-format +msgid "kvno %d\n" +msgstr "kvno %d\n" + +msgid "limits exceeded for this query" +msgstr "han sido excedidos los límites para esta consulta" + +msgid "local domain range" +msgstr "intervalo de dominios locales" + +msgid "location" +msgstr "localización" + +msgid "locations" +msgstr "localizaciones" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "Administrador %(manager)s no encontrado" + +#, python-format +msgid "map %(map)s already exists" +msgstr "map %(map)s ya existe" + +msgid "maps not connected to /etc/auto.master:" +msgstr "mapa no conectado a /etc/auto.master" + +#, python-format +msgid "member %s" +msgstr "miembro %s" + +msgid "member group" +msgstr "miembro de grupo" + +msgid "member host" +msgstr "host miembro" + +msgid "member host group" +msgstr "miembro del grupo de host" + +msgid "member privilege" +msgstr "miembro privilegio" + +msgid "member service delegation target" +msgstr "objetivo de delegación de miembro de servicio" + +msgid "member sudo command" +msgstr "miembro de comando sudo" + +msgid "member sudo command group" +msgstr "miembro de grupo de comando sudo" + +msgid "member user" +msgstr "usuario miembro" + +msgid "missing base_id" +msgstr "base_id desaparecida" + +msgid "modifying primary key is not allowed" +msgstr "modificar la clave principal no está permitido" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "el punto de montaje es relativo al mapa padre, no puede empezar con /" + +#, python-format +msgid "must be \"%s\"" +msgstr "debe ser \"%s\"" + +#, python-format +msgid "must be '%(value)s'" +msgstr "debe ser «%(value)s»" + +msgid "must be DNS name" +msgstr "debe ser nombre DNS" + +msgid "must be Kerberos principal" +msgstr "debe ser Kerberos principal" + +msgid "must be True or False" +msgstr "debe ser True o False" + +msgid "must be Unicode text" +msgstr "debe ser texto Unicode" + +msgid "must be a certificate" +msgstr "debe ser un certificado" + +msgid "must be a certificate signing request" +msgstr "debe ser una petición de firma de certificado" + +msgid "must be a decimal number" +msgstr "debe ser un número decimal" + +msgid "must be absolute" +msgstr "debe ser absoluto" + +msgid "must be an integer" +msgstr "debe ser un entero" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "debe ser como mínimo de %(minlength)d bytes" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "debe tener como mínimo %(minlength)d caracteres" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "debe ser como mínimo %(minvalue)d" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "debe ser al menos %(minvalue)s" + +msgid "must be at least 1" +msgstr "debe ser al menos 1" + +msgid "must be binary data" +msgstr "debe ser un dato binario" + +msgid "must be datetime value" +msgstr "debe ser un valor de fecha y hora" + +msgid "must be dictionary" +msgstr "debe ser diccionario" + +msgid "must be enclosed in parentheses" +msgstr "debe estar cerrado entre paréntesis" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "debe ser exactamente de %(length)d bytes" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "debe tener exactamente %(length)d caracteres" + +#, python-format +msgid "must be one of %(values)s" +msgstr "debe ser uno de %(values)s" + +msgid "must be relative" +msgstr "debe ser relativo" + +#, python-format +msgid "must equal %r" +msgstr "debe ser igual a %r" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "debe tener el rol %(role)s habilitado" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "debe coincidir con el modelo \"%(pattern)s" + +msgid "netgroup" +msgstr "grupo de red" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"grupo de red con nombre “%s” ya existe. Los grupos de host y grupos de red " +"comparten un espacio de nombre común" + +msgid "netgroups" +msgstr "grupos de red" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "ni comando no tópico de ayuda '%(topic)s'" + +msgid "no modifications to be performed" +msgstr "no existen modificaciones a ser realizadas" + +msgid "not allowed to modify group entries" +msgstr "no se permite modificar las entradas de los grupos" + +msgid "not allowed to modify user entries" +msgstr "no se permite modificar las entradas de los usuarios" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "no está permitido llevar a cabo la operación: %s" + +msgid "not allowed to perform server connection check" +msgstr "no permitido llevar a cabo la comprobación de conexión del servidor" + +msgid "not fully qualified" +msgstr "no totalmente cualificado" + +msgid "not modifiable on managed permissions" +msgstr "no modificable sobre permisos gestionados" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" +"el número de clase '%(cls)s' no está incluido en una lista de los números de " +"clases permitidos: %(allowed)s" + +#, python-format +msgid "objectclass %s not found" +msgstr "clase objeto %s no encontrada" + +msgid "only \"ad\" is supported" +msgstr "solo se admite «ad»" + +msgid "only available on managed permissions" +msgstr "solo disponible sobre permisos gestionados" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" +"sólo se permiten letras, números y %(chars)s. La etiqueta DNS no debe " +"empezar ni terminar con %(chars2)s" + +msgid "only master zones can contain records" +msgstr "solo las zonas maestras pueden contener registros" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "solo se permite un registro CNAME por nombre (RFC 2136, sección 1.1.5)" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "solo se permite un registro DNAME por nombre (RFC 6672, sección 2.4)" + +msgid "operation not defined" +msgstr "operación no definida" + +#, python-format +msgid "option was renamed; use %s" +msgstr "la opción fue renombrada; use %s" + +msgid "options are not allowed" +msgstr "las opciones no están permitidas" + +#, c-format +msgid "out of memory\n" +msgstr "sin Memoria\n" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" +"datos fuera de zona: el nombre de registro debe ser un subdominio de la zona " +"o un nombre relativo" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "superposición de argumentos y opciones: %(names)s" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" +"el propietario de registros %(types)s no debería ser un nombre de dominio " +"comodín (RFC 4592 sección 4)" + msgid "params must be a list" msgstr "params debe ser una lista" @@ -29055,267 +14176,321 @@ msgstr "params[0] (aka args) debe ser una lista" msgid "params[1] (aka options) must be a dict" msgstr "params[1] (aka options) debe ser un diccionario" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" -"\n" -"La replica de la topología en el sufijo '%(suffix)s' está desconectada:\n" -"%(errors)s" +msgid "password" +msgstr "contraseña" + +msgid "password policies" +msgstr "políticas de contraseña" + +msgid "password policy" +msgstr "política de contraseña" + +msgid "password to use if not using kerberos" +msgstr "Contraseña a usar si no usa kerberos" + +msgid "permission" +msgstr "permiso" #, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" -"\n" -"La eliminación de '%(hostname)s' lleva a desconectar la topología en sufijo " -"'%(suffix)s':\n" -"%(errors)s" +msgid "permission \"%(value)s\" already exists" +msgstr "permiso \"%(value)s\" ya existe" + +msgid "permissions" +msgstr "permisos" + +msgid "pkinit" +msgstr "pkinit" + +msgid "preserve and no-preserve cannot be both set" +msgstr "preserve y no-preserve no pueden estar ambos ajustados" + +#, c-format +msgid "principal not found\n" +msgstr "principal no se encuentra\n" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "principales no se encuentran en respuesta XML-RPC\n" + +msgid "priority cannot be set on global policy" +msgstr "la prioridad no puede ser definida en una plítica global" #, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" msgstr "" -"La topologia no permite al servidor %(server)s replicar con servidores:" +"la prioridad debe ser un valor único (%(prio)d que ya esté siendo utilizado " +"por %(gname)s)" + +msgid "privilege" +msgstr "privilegio" + +msgid "privileged group" +msgstr "grupo privilegiado" + +msgid "privileges" +msgstr "privilegios" + +msgid "pyhbac is not installed." +msgstr "pyhbac no está instalado." + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" +"pysss_murmur no está disponible en el servidor y no se ha dado base-id." + +msgid "python-yubico is not installed." +msgstr "python-yubico no está instalado." + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "consulta '%(owner)s %(rtype)s' con EDNS0: %(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "consulta'%(owner)s %(rtype)s': %(error)s" + +msgid "range exists" +msgstr "el intervalo existe" msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" +"range modification leaving objects with ID out of the defined range is not " +"allowed" msgstr "" +"la modificación de rango dejando objetos con ID fuera del rango definido no " +"está permitida" -msgid "CIFS server denied your credentials" +msgid "range type change" +msgstr "cambio de tipo de rango" + +#, c-format +msgid "read error\n" +msgstr "Error de lectura\n" + +#, c-format +msgid "realm not found\n" +msgstr "reino no encontrado\n" + +msgid "realm or UPN suffix overlaps with trusted domain namespace" msgstr "" +"el dominio o sufijo UPN se superpone con el espacio de nombres de dominio de " +"confianza" -msgid "communication with CIFS server was unsuccessful" +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" msgstr "" +"registro '%(owner)s %(rtype)s' fallo de validación DNSSEC sobre el servidor " +"%(ip)s" -#, fuzzy -msgid "AD domain controller" -msgstr "Controladores de confianza IPA AD" +#, python-format +msgid "request failed with HTTP status %d" +msgstr "fallo en la petición con estado HTTP %d" -#, fuzzy -msgid "unsupported functional level" +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "resultado no se encuentra en respuesta XML-RPC\n" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "" +" Determinar si la ACI es un autoservicio de ACI y hacer una excepción " +"si\n" +" no lo es.\n" +" Devolver el resultado si se trata de un autoservicio de ACI." + +msgid "role" +msgstr "rol" + +msgid "roles" +msgstr "roles" + +#, python-format +msgid "salt value: %(err)s" +msgstr "valor salt: %(err)s" + +msgid "search for POSIX groups" +msgstr "buscar por grupos POXIS" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" +"búsqueda de grupos con soporte de miembros externos no IPA desde dominios de " +"confianza" + +msgid "search for managed groups" +msgstr "buscar grupos gestionados" + +msgid "search for non-POSIX groups" +msgstr "búsqueda de grupos no POSIX" + +msgid "search for private groups" +msgstr "Búsqueda de grupos privados" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" +"los resultados de la búsqueda de los objetos que se van a migrar se han " +"truncado por el servidor; el proceso de migración puede estar incompleto\n" + +msgid "self service permission" +msgstr "auto servicio de permiso" + +msgid "self service permissions" +msgstr "auto servicio de permisos" + +msgid "server" +msgstr "servidor" + +msgid "server role" +msgstr "rol servidor" + +msgid "server roles" +msgstr "roles de servidor" + +msgid "servers" +msgstr "servidores" + +msgid "service" +msgstr "servicio" + +msgid "services" +msgstr "servicios" + +msgid "setting Authoritative nameserver" +msgstr "Fijando el servidor de nombre Autoritario" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "no debe ser un nombre de dominio comodín (RFC 4592 sección 4)" + +msgid "sidgen_was_run" +msgstr "sidgen_was_run" + +msgid "single label {}s are not supported" +msgstr "etiqueta sencilla {}s no está soportada" + +msgid "skip reverse DNS detection" +msgstr "Ignorar la detección inversa de DNS" + +msgid "sn is required" +msgstr "se requiere sn" + +msgid "stage user" +msgstr "escenario usuario" + +msgid "stage users" +msgstr "escenario usuarios" + +msgid "subtree and type are mutually exclusive" +msgstr "subtree y type son mutuamente exclusivos" + +msgid "sudo command" +msgstr "comando sudo" + +msgid "sudo command group" +msgstr "grupo de comando sudo" + +msgid "sudo command groups" +msgstr "grupos de comando sudo" + +msgid "sudo commands" +msgstr "comandos sudo" + +msgid "sudo rule" +msgstr "regla sudo" + +msgid "sudo rules" +msgstr "reglas sudo" + +msgid "target and targetgroup are mutually exclusive" +msgstr "target y targetgroup son mutuamente exclusivos" + +msgid "the entry was deleted while being modified" +msgstr "la entrada fue eliminada mientras estaba siendo modificada" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "este valor no sigue el formato de hora \"YYYYMMDDHHMMSS\"" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" +"debe haber al menos una entrada objetivo especifica (e.g. target, " +"targetfilter, attrs)" + +msgid "this option has been deprecated." +msgstr "esta opción ha quedado obsoleta." + +msgid "this option is deprecated" +msgstr "esta opción es obsoleta" + +msgid "too many '@' characters" +msgstr "demasiados ‘@’ caracteres" + +msgid "trust" +msgstr "confianza" + +msgid "trust configuration" +msgstr "configuración de la confianza" + +msgid "trust domain" +msgstr "dominio de confianza" + +msgid "trust domains" +msgstr "dominios de confianza" + +msgid "trust type" +msgstr "tipo de confianza" + +msgid "trusts" +msgstr "confianzas" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "" +"Objeto de tipo IPA (usuario, grupo, grupo de host, servicio, grupo de red)" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "tipo, filtro, subárbol y grupo de destino, se excluyen mutuamente" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "comando desconocido '%(name)s'" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "error %(code)d desconocido de %(server)s: %(error)s" + +msgid "unsupported trust type" msgstr "tipo de confianza no soportado" -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" +msgid "url" +msgstr "url" -msgid "Cannot find specified domain or server name" -msgstr "" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" - -#, fuzzy -msgid "At least the domain or IP address should be specified" -msgstr "Debería especificarse la contraseña del administrador del reino" +msgid "user" +msgstr "usuario" #, python-format -msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" +msgid "user \"%s\" is already active" +msgstr "usuario \"%s\" ya está activo" + +msgid "user category cannot be set to 'all' while there are allowed users" msgstr "" +"la categoría de usuario no puede ser establecida a 'all' mientras hay " +"usuarios permitidos" -#, fuzzy -msgid "no trusted domain is configured" -msgstr "el dominio no está configurado" +msgid "users" +msgstr "usuarios" -msgid "domain is not configured" -msgstr "el dominio no está configurado" - -msgid "SID is not valid" -msgstr "el SID no es válido" - -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "" - -#, fuzzy -msgid "SID does not match any trusted domain" -msgstr "no coincide con ninguno de los formatos aceptados: " - -#, fuzzy -msgid "Trust setup" -msgstr "Ajuste de Confianza AD" - -#, fuzzy -msgid "Our domain is not configured" -msgstr "el dominio no está configurado" - -#, fuzzy -msgid "No trusted domain is not configured" -msgstr "el dominio no está configurado" - -#, fuzzy -msgid "trusted domain object" -msgstr "Dominio de confianza" - -#, fuzzy -msgid "domain is not trusted" -msgstr "el dominio no está configurado" - -msgid "no trusted domain matched the specified flat name" -msgstr "" - -#, fuzzy -msgid "trusted domain object not found" -msgstr "" -"El nombre especificado de dominio de confianza podría no ser encontrado." - -#, fuzzy -msgid "Object does not belong to a trusted domain" -msgstr "Nombre del dominio de confianza" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "" - -msgid "Ambiguous search, user domain was not specified" -msgstr "" - -msgid "Trusted domain did not return a unique object" -msgstr "" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "" - -#, fuzzy -msgid "trusted domain user not found" -msgstr "" -"El nombre especificado de dominio de confianza podría no ser encontrado." - -#, fuzzy -msgid "Cannot retrieve trusted domain GC list" -msgstr "Nombre del dominio de confianza" - -#, fuzzy -msgid "CIFS credentials object" -msgstr "Credenciales no válidas" - -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "" - -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" +msgid "users cannot be added when user category='all'" +msgstr "no se pueden añadir usuarios cuando la categoría de usuario='all'" #, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" +msgid "{attr}: no such attribute" +msgstr "{attr}: no existe tal atributo" -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" - -#, fuzzy -msgid "Credentials" -msgstr "Credenciales no válidas" - -msgid "Missing credentials for cross-forest communication" -msgstr "" - -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" - -#, python-format -msgid "must equal %r" -msgstr "debe ser igual a %r" - -msgid "Hello world" -msgstr "Hola mundo" - -#, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "%s: servidor proxy RADIUS no encontrado" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "Servidor proxy RADIUS con nombre \"%s\" ya existe" - -msgid "must be at least 1" -msgstr "debe ser al menos 1" - -msgid "Out of memory\n" -msgstr "¡Memoria insuficiente!\n" - -msgid "Warning unrecognized encryption type.\n" -msgstr "Precaución tipo de encriptación no reconocido.\n" - -msgid "Warning unrecognized salt type.\n" -msgstr "Advertencia de tipo de sal no reconocido.\n" - -msgid "Out of memory!?\n" -msgstr "" -"¡Memoria insuficiente!\n" -"\n" - -msgid "Enctype comparison failed!\n" -msgstr "¡Falló comparación de Enctype!\n" - -#, fuzzy -msgid "Password is too long!\n" -msgstr "Tamaño del historial de la contraseña" - -msgid "Failed to create random key!\n" -msgstr "Falló la creación de clave aleatoria\n" - -msgid "Failed to create key!\n" -msgstr "¡Falló la creación de clave!\n" - -msgid "Bad or unsupported salt type.\n" -msgstr "Tipo de sal malo o no soportado.\n" - -#, fuzzy, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "¡No puede iniciar biblioteca IDAP!\n" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "Incapaz de ajustar LDAP_OPT_PROTOCOL_VERSION\n" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "Incapaz de fijar LDAP_OPT_X_SASL_NOCANON \n" - -#, fuzzy -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "Incapaz de ajustar LDAP_OPT_X_TLS_REQUIRE_CERT\n" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "Incapaz de ajustar LDAP_OPT_X_TLS_REQUIRE_CERT\n" - -#, fuzzy -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "Incapaz de ajustar LDAP_OPT_PROTOCOL_VERSION\n" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "Incapaz de inicializar la sesión STARTTLS\n" +#, python-brace-format +msgid "{role}: role not found" +msgstr "{role}: rol no encontrado" #~ msgid "" #~ "\n" @@ -29361,177 +14536,6 @@ msgstr "Incapaz de inicializar la sesión STARTTLS\n" #~ "confianza.\n" #~ "\n" -#~ msgid "Maximum password life must be greater than minimum." -#~ msgstr "La duración máxima de la contraseña debe ser mayor que la mínima." - -#, fuzzy -#~ msgid "" -#~ "\n" -#~ "Sudo Rules\n" -#~ "\n" -#~ "Sudo (su \"do\") allows a system administrator to delegate authority to\n" -#~ "give certain users (or groups of users) the ability to run some (or all)\n" -#~ "commands as root or another user while providing an audit trail of the\n" -#~ "commands and their arguments.\n" -#~ "\n" -#~ "IPA provides a means to configure the various aspects of Sudo:\n" -#~ " Users: The user(s)/group(s) allowed to invoke Sudo.\n" -#~ " Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -#~ "Sudo.\n" -#~ " Allow Command: The specific command(s) permitted to be run via Sudo.\n" -#~ " Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -#~ " RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -#~ "invoked with.\n" -#~ " RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -#~ " Options: The various Sudoers Options that can modify Sudo's behavior.\n" -#~ "\n" -#~ "An order can be added to a sudorule to control the order in which they\n" -#~ "are evaluated (if the client supports it). This order is an integer and\n" -#~ "must be unique.\n" -#~ "\n" -#~ "IPA provides a designated binddn to use with Sudo located at:\n" -#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -#~ "\n" -#~ "To enable the binddn run the following command to set the password:\n" -#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." -#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -#~ "dc=example,dc=com\n" -#~ "\n" -#~ "EXAMPLES:\n" -#~ "\n" -#~ " Create a new rule:\n" -#~ " ipa sudorule-add readfiles\n" -#~ "\n" -#~ " Add sudo command object and add it as allowed command in the rule:\n" -#~ " ipa sudocmd-add /usr/bin/less\n" -#~ " ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -#~ "\n" -#~ " Add a host to the rule:\n" -#~ " ipa sudorule-add-host readfiles --hosts server.example.com\n" -#~ "\n" -#~ " Add a user to the rule:\n" -#~ " ipa sudorule-add-user readfiles --users jsmith\n" -#~ "\n" -#~ " Add a special Sudo rule for default Sudo server configuration:\n" -#~ " ipa sudorule-add defaults\n" -#~ "\n" -#~ " Set a default Sudo option:\n" -#~ " ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -#~ msgstr "" -#~ "\n" -#~ "Reglas Sudo\n" -#~ "\n" -#~ "Sudo (su \"do\") permite a un administrador de sistema delegar autoridad " -#~ "a ciertos\n" -#~ "usuarios dados(o grupos de usuarios) para tener la posibilidad de " -#~ "ejecutar algunos (o\n" -#~ " todos) los comandos como root u otro usuario mientras suministra pistas " -#~ "de auditoria de\n" -#~ " los comandos y sus argumentos.\n" -#~ "\n" -#~ "IPA proporciona un medio para configurar diversos aspectos de Sudo:\n" -#~ " Users: Los usuario(s)/grupos(s) que tienen permitido llamar a Sudo.\n" -#~ " Hosts: Loshost(s)/grupo(s) de host a los que el usuario permite llamar " -#~ "a Sudo.\n" -#~ " Allow Command: El comando(s) específico que tiene permitido ejecutarse " -#~ "por medio de Sudo.\n" -#~ " Deny Command: El comando(s) específico que tiene prohibido ejecutarse " -#~ "por medio de Sudo.\n" -#~ " RunAsUser: El usuario(s) o grupo(s) de usuarios con cuyos derechos " -#~ "será invocado Sudo.\n" -#~ " RunAsGroup: El grupo(s) con cuyos derechos gid será invocado Sudo.\n" -#~ " Options: Las diversas opciones Sudoers que pueden modificar el " -#~ "comportamiento de Sudo.\n" -#~ "\n" -#~ "Su puede aadir un orden a una regla sudo para controlar el orden en el " -#~ "que será evaluada\n" -#~ "(si el cliente lo soporta). Este orden es un entero y debe ser único.\n" -#~ "\n" -#~ "IPA suministra un binddn designado para usar con Sudo situado en :\n" -#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -#~ "\n" -#~ "Para habilitar el binddn ejecute el siguiente comando para fijar la " -#~ "contraseña:\n" -#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." -#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -#~ "dc=example,dc=com\n" -#~ "\n" -#~ "Para más información, vea la Documentación IPA para Sudo.\n" - -#~ msgid "" -#~ "\n" -#~ "Sudo Rules\n" -#~ "\n" -#~ "Sudo (su \"do\") allows a system administrator to delegate authority to\n" -#~ "give certain users (or groups of users) the ability to run some (or all)\n" -#~ "commands as root or another user while providing an audit trail of the\n" -#~ "commands and their arguments.\n" -#~ "\n" -#~ "IPA provides a means to configure the various aspects of Sudo:\n" -#~ " Users: The user(s)/group(s) allowed to invoke Sudo.\n" -#~ " Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -#~ "Sudo.\n" -#~ " Allow Command: The specific command(s) permitted to be run via Sudo.\n" -#~ " Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -#~ " RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -#~ "invoked with.\n" -#~ " RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -#~ " Options: The various Sudoers Options that can modify Sudo's behavior.\n" -#~ "\n" -#~ "An order can be added to a sudorule to control the order in which they\n" -#~ "are evaluated (if the client supports it). This order is an integer and\n" -#~ "must be unique.\n" -#~ "\n" -#~ "IPA provides a designated binddn to use with Sudo located at:\n" -#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -#~ "\n" -#~ "To enable the binddn run the following command to set the password:\n" -#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." -#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -#~ "dc=example,dc=com\n" -#~ "\n" -#~ "For more information, see the IPA Documentation to Sudo.\n" -#~ msgstr "" -#~ "\n" -#~ "Reglas Sudo\n" -#~ "\n" -#~ "Sudo (su \"do\") permite a un administrador de sistema delegar autoridad " -#~ "a ciertos\n" -#~ "usuarios dados(o grupos de usuarios) para tener la posibilidad de " -#~ "ejecutar algunos (o\n" -#~ " todos) los comandos como root u otro usuario mientras suministra pistas " -#~ "de auditoria de\n" -#~ " los comandos y sus argumentos.\n" -#~ "\n" -#~ "IPA proporciona un medio para configurar diversos aspectos de Sudo:\n" -#~ " Users: Los usuario(s)/grupos(s) que tienen permitido llamar a Sudo.\n" -#~ " Hosts: Loshost(s)/grupo(s) de host a los que el usuario permite llamar " -#~ "a Sudo.\n" -#~ " Allow Command: El comando(s) específico que tiene permitido ejecutarse " -#~ "por medio de Sudo.\n" -#~ " Deny Command: El comando(s) específico que tiene prohibido ejecutarse " -#~ "por medio de Sudo.\n" -#~ " RunAsUser: El usuario(s) o grupo(s) de usuarios con cuyos derechos " -#~ "será invocado Sudo.\n" -#~ " RunAsGroup: El grupo(s) con cuyos derechos gid será invocado Sudo.\n" -#~ " Options: Las diversas opciones Sudoers que pueden modificar el " -#~ "comportamiento de Sudo.\n" -#~ "\n" -#~ "Su puede aadir un orden a una regla sudo para controlar el orden en el " -#~ "que será evaluada\n" -#~ "(si el cliente lo soporta). Este orden es un entero y debe ser único.\n" -#~ "\n" -#~ "IPA suministra un binddn designado para usar con Sudo situado en :\n" -#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -#~ "\n" -#~ "Para habilitar el binddn ejecute el siguiente comando para fijar la " -#~ "contraseña:\n" -#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." -#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -#~ "dc=example,dc=com\n" -#~ "\n" -#~ "Para más información, vea la Documentación IPA para Sudo.\n" - #~ msgid "" #~ "\n" #~ " Delete a CA.\n" @@ -29624,6 +14628,80 @@ msgstr "Incapaz de inicializar la sesión STARTTLS\n" #~ "\n" #~ "Para más información, vea la Documentación IPA para Sudo.\n" +#~ msgid "" +#~ "\n" +#~ "Sudo Rules\n" +#~ "\n" +#~ "Sudo (su \"do\") allows a system administrator to delegate authority to\n" +#~ "give certain users (or groups of users) the ability to run some (or all)\n" +#~ "commands as root or another user while providing an audit trail of the\n" +#~ "commands and their arguments.\n" +#~ "\n" +#~ "IPA provides a means to configure the various aspects of Sudo:\n" +#~ " Users: The user(s)/group(s) allowed to invoke Sudo.\n" +#~ " Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +#~ "Sudo.\n" +#~ " Allow Command: The specific command(s) permitted to be run via Sudo.\n" +#~ " Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +#~ " RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +#~ "invoked with.\n" +#~ " RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +#~ " Options: The various Sudoers Options that can modify Sudo's behavior.\n" +#~ "\n" +#~ "An order can be added to a sudorule to control the order in which they\n" +#~ "are evaluated (if the client supports it). This order is an integer and\n" +#~ "must be unique.\n" +#~ "\n" +#~ "IPA provides a designated binddn to use with Sudo located at:\n" +#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +#~ "\n" +#~ "To enable the binddn run the following command to set the password:\n" +#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." +#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +#~ "dc=example,dc=com\n" +#~ "\n" +#~ "For more information, see the IPA Documentation to Sudo.\n" +#~ msgstr "" +#~ "\n" +#~ "Reglas Sudo\n" +#~ "\n" +#~ "Sudo (su \"do\") permite a un administrador de sistema delegar autoridad " +#~ "a ciertos\n" +#~ "usuarios dados(o grupos de usuarios) para tener la posibilidad de " +#~ "ejecutar algunos (o\n" +#~ " todos) los comandos como root u otro usuario mientras suministra pistas " +#~ "de auditoria de\n" +#~ " los comandos y sus argumentos.\n" +#~ "\n" +#~ "IPA proporciona un medio para configurar diversos aspectos de Sudo:\n" +#~ " Users: Los usuario(s)/grupos(s) que tienen permitido llamar a Sudo.\n" +#~ " Hosts: Loshost(s)/grupo(s) de host a los que el usuario permite llamar " +#~ "a Sudo.\n" +#~ " Allow Command: El comando(s) específico que tiene permitido ejecutarse " +#~ "por medio de Sudo.\n" +#~ " Deny Command: El comando(s) específico que tiene prohibido ejecutarse " +#~ "por medio de Sudo.\n" +#~ " RunAsUser: El usuario(s) o grupo(s) de usuarios con cuyos derechos " +#~ "será invocado Sudo.\n" +#~ " RunAsGroup: El grupo(s) con cuyos derechos gid será invocado Sudo.\n" +#~ " Options: Las diversas opciones Sudoers que pueden modificar el " +#~ "comportamiento de Sudo.\n" +#~ "\n" +#~ "Su puede aadir un orden a una regla sudo para controlar el orden en el " +#~ "que será evaluada\n" +#~ "(si el cliente lo soporta). Este orden es un entero y debe ser único.\n" +#~ "\n" +#~ "IPA suministra un binddn designado para usar con Sudo situado en :\n" +#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +#~ "\n" +#~ "Para habilitar el binddn ejecute el siguiente comando para fijar la " +#~ "contraseña:\n" +#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." +#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +#~ "dc=example,dc=com\n" +#~ "\n" +#~ "Para más información, vea la Documentación IPA para Sudo.\n" + #~ msgid "CSR Generation Profile to use" #~ msgstr "Perfil de Generación CSR a usar" @@ -29643,6 +14721,9 @@ msgstr "Incapaz de inicializar la sesión STARTTLS\n" #~ msgid "Generated CSR was empty" #~ msgstr "El CSR generado estaba vacío" +#~ msgid "Maximum password life must be greater than minimum." +#~ msgstr "La duración máxima de la contraseña debe ser mayor que la mínima." + #~ msgid "Name of CSR generation profile (if not the same as profile_id)" #~ msgstr "" #~ "Nombre del perfil de generación CSR (si no es el mismo que en profile_id)" diff --git a/po/eu.po b/po/eu.po index 655653f24..ce218d717 100644 --- a/po/eu.po +++ b/po/eu.po @@ -18,2122 +18,126 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, c-format -msgid "out of memory\n" -msgstr "" - -#, c-format -msgid "read error\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, fuzzy, c-format -msgid "principal not found\n" -msgstr "ez da ipa-getkeytab aurkitu\n" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -msgid "realm not found\n" -msgstr "ez da ipa-getkeytab aurkitu\n" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -#, fuzzy -msgid "Realm name" -msgstr "Berrizendatu" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, c-format -msgid "Out of memory \n" -msgstr "" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -msgid "SASL Bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Out of Memory!\n" -msgstr "" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "Pasahitzak ez datoz bat!" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Output debug info" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -#, fuzzy -msgid "Server Name" -msgstr "Zerbitzuaren izena" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -msgid "LDAP password" -msgstr "LDAP pasahitza" - -msgid "password to use if not using kerberos" -msgstr "" - -#, fuzzy -msgid "Prompt for LDAP password" -msgstr "LDAP pasahitza" - -msgid "Path to the IPA CA certificate" -msgstr "" - -#, fuzzy -msgid "IPA CA certificate" -msgstr "Ziurtagiria" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -#, fuzzy -msgid "Enter LDAP password" -msgstr "LDAP pasahitza" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" - -#, c-format -msgid "Discovered server %s\n" -msgstr "" - -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Using provided server %s\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -#, fuzzy -msgid "New Principal Password" -msgstr "Pasahitz berria" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Out of memory!\n" -msgstr "" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "" - -#, c-format -msgid "Out of memory!" -msgstr "" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "" - -#, c-format -msgid "No values for %s" -msgstr "" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "" - -#, fuzzy, c-format -msgid "IPA namingContext not found\n" -msgstr "ez da ipa-getkeytab aurkitu\n" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Host is already joined.\n" -msgstr "" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" - -#, c-format -msgid "json_dumps() failed\n" -msgstr "" - -#, fuzzy, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "Baliogabeko JSON-RPC eskaera: %(error)s" - -#, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "" - -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" - -#, c-format -msgid "fork() failed\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "ez da ipa-getkeytab aurkitu\n" - -#, fuzzy, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "ez da ipa-getkeytab aurkitu\n" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "" - -#, c-format -msgid "child exited with %d\n" -msgstr "" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "" - -msgid "Quiet mode. Only errors are displayed." -msgstr "" - -msgid "Unenroll this host from IPA server" -msgstr "" - -msgid "Hostname of this server" -msgstr "" - -msgid "hostname" -msgstr "ostalari-izena" - -msgid "IPA Server to use" -msgstr "Erabili beharreko IPA zerbitzaria" - -msgid "Specifies where to store keytab information." -msgstr "" - -msgid "filename" -msgstr "fitxategi-izena" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" - -msgid "LDAP password (if not using Kerberos)" -msgstr "" - -msgid "password" -msgstr "pasahitza" - -#, fuzzy -msgid "LDAP basedn" -msgstr "LDAP pasahitza" - -msgid "basedn" -msgstr "" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "" - -msgid "Failed to add" -msgstr "" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" - -msgid "Unrevoked" -msgstr "" - -msgid "Error" -msgstr "Errorea" - -#, fuzzy -msgid "Input filename" -msgstr "Irteerako fitxategi-izena" - -msgid "File to load the certificate from." -msgstr "" - -msgid "cannot specify both raw certificate and file" -msgstr "" - -#, fuzzy -msgid "Input file" -msgstr "Irteerako fitxategi-izena" - -msgid "File to load the certificate from" -msgstr "" +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "%(desc)s: %(info)s" #, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "" - -msgid "Split DNS record to parts" -msgstr "" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "" +msgid "%(info)s" +msgstr "%(info)s" #, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" +msgid "%(reason)s" +msgstr "%(reason)s" -msgid "DNS resource record type" -msgstr "" +msgid "A description of this host" +msgstr "Ostalari honen deskribapena" -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" +msgid "A description of this host-group" +msgstr "Ostalari-talde honen deskribapena" -msgid "No option to modify specific record provided." -msgstr "" +msgid "A list of ACI values" +msgstr "ACI balioen zerrenda bat" -msgid "Current DNS record contents:\n" -msgstr "" - -#, fuzzy, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -msgid "No option to delete specific record provided." -msgstr "" - -msgid "Delete all?" -msgstr "" - -#, fuzzy, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "Server will check DNS forwarder(s)." -msgstr "" - -msgid "This may take some time, please wait ..." -msgstr "" - -msgid "DNS forwarder" -msgstr "" - -msgid "file to store DNS records in nsupdate format" -msgstr "" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -#, fuzzy -msgid "Delete a user" -msgstr "Ezabatu taldea." - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - -msgid "maps not connected to /etc/auto.master:" -msgstr "" - -msgid "Import automount files for a specific location." -msgstr "" - -msgid "Master file" -msgstr "" - -msgid "Automount master file." -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" - -#, python-format -msgid "File %(file)s not found" -msgstr "" - -#, fuzzy, python-format -msgid "key %(key)s already exists" -msgstr "Sarrera hau dagoeneko existitzen da" - -#, fuzzy, python-format -msgid "map %(map)s already exists" -msgstr "Sarrera hau dagoeneko existitzen da" - -msgid "Imported maps:" -msgstr "" - -#, fuzzy, python-format -msgid "Added %(map)s" -msgstr "\"%(value)s\" ostalaria gehituta" - -msgid "Imported keys:" -msgstr "" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "" - -msgid "Ignored keys:" -msgstr "" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "" - -msgid "Duplicate maps skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(map)s" -msgstr "" - -msgid "Duplicate keys skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(key)s" -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -#, fuzzy -msgid "User ID" -msgstr "Erabiltzailea" - -msgid "Password" -msgstr "Pasahitza" - -#, fuzzy -msgid "First Code" -msgstr "Izena" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "" - -msgid "Invalid credentials" -msgstr "" - -#, fuzzy -msgid "Create a new vault." -msgstr "Sortu talde berri bat." - -#, fuzzy -msgid "Vault password" -msgstr "pasahitza" - -msgid "File containing the vault password" -msgstr "" - -msgid "File containing the vault public key" -msgstr "" - -msgid "Password can be specified only for symmetric vault" -msgstr "" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "" - -msgid "Password specified multiple times" -msgstr "" - -msgid "Public key specified multiple times" -msgstr "" - -msgid "Missing vault public key" -msgstr "" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "" - -#, fuzzy -msgid "Modify a vault." -msgstr "Aldatu talde bat." - -#, fuzzy -msgid "Change password" -msgstr "Ausazko pasahitza" - -#, fuzzy -msgid "Old vault password" -msgstr "pasahitza" - -msgid "File containing the old vault password" -msgstr "" - -#, fuzzy -msgid "New vault password" -msgstr "Pasahitz berria" - -msgid "File containing the new vault password" -msgstr "" - -msgid "Old vault private key" -msgstr "" - -msgid "File containing the old vault private key" -msgstr "" - -msgid "File containing the new vault public key" -msgstr "" - -msgid "New public key specified multiple times" -msgstr "" - -msgid "Missing new vault public key" -msgstr "" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "" - -msgid "Binary data to archive" -msgstr "" - -msgid "File containing data to archive" -msgstr "" - -msgid "Override existing password" -msgstr "" - -msgid "Input data specified multiple times" -msgstr "" - -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" - -msgid "Invalid vault type" -msgstr "" - -msgid "Retrieve a data from a vault." -msgstr "" - -msgid "File to store retrieved data" -msgstr "" - -msgid "Vault private key" -msgstr "" - -msgid "File containing the vault private key" -msgstr "" - -msgid "Data" -msgstr "Datuak" - -msgid "Private key specified multiple times" -msgstr "" - -msgid "Missing vault private key" -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" +msgid "ACI" +msgstr "ACI" msgid "ACI name" msgstr "ACI izena" -msgid "Permission" -msgstr "Baimena" +msgid "ACI prefix" +msgstr "ACI aurrizkia" -msgid "Permission ACI grants access to" -msgstr "" +msgid "ACIs" +msgstr "ACIak" -msgid "User group" -msgstr "Erabiltzaile-taldea" +msgid "Account Settings" +msgstr "Kontuaren ezarpenak" -msgid "User group ACI grants access to" -msgstr "" +msgid "Add Many" +msgstr "Gehitu hainbat" -msgid "Permissions" -msgstr "Baimenak" +msgid "Add and Add Another" +msgstr "Gehitu eta gehitu beste bat" -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "" +msgid "Add and Close" +msgstr "Gehitu eta itxi" -msgid "Attributes to which the permission applies" -msgstr "" +msgid "Add and Edit" +msgstr "Gehitu eta editatu" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria gehituta" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ostalari-taldea gehituta" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua gehituta" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea gehituta" + +msgid "Administrator e-mail address" +msgstr "Administratzailearen e-posta helbidea" + +msgid "Allow" +msgstr "Onartu" + +msgid "Any Command" +msgstr "Edozein komando" + +msgid "Any Group" +msgstr "Edozein talde" + +msgid "Are you sure you want to delete selected entries?" +msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" + +msgid "Attribute" +msgstr "Atributua" msgid "Attributes" msgstr "Atributuak" -msgid "Type" -msgstr "Mota" +msgid "Cancel" +msgstr "Utzi" -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" +msgid "Certificate" +msgstr "Ziurtagiria" -msgid "Member of" -msgstr "" +msgid "Class" +msgstr "Klasea" -#, fuzzy -msgid "Member of a group" -msgstr "Aldatu talde bat." +msgid "Close" +msgstr "Itxi" -msgid "Filter" -msgstr "Iragazkia" +msgid "Command name" +msgstr "Komandoaren izena" -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "" - -msgid "Subtree" -msgstr "Azpi-zuhaitza" - -msgid "Subtree to apply ACI to" -msgstr "" - -msgid "Target group" -msgstr "Helburuko taldea" - -msgid "Group to apply ACI to" -msgstr "" - -msgid "Target your own entry (self)" -msgstr "" - -msgid "Apply ACI to your own entry (self)" -msgstr "" - -#, fuzzy -msgid "Create new ACI." -msgstr "Sortu talde berri bat." - -msgid "ACI prefix" -msgstr "ACI aurrizkia" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" - -msgid "Test the ACI syntax but don't write anything" -msgstr "" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" - -msgid "User-friendly description of action performed" -msgstr "" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" - -#, fuzzy -msgid "Delete ACI." -msgstr "Ezabatu taldea." - -msgid "True means the operation was successful" -msgstr "" - -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" - -msgid "A string searched in all relevant object attributes" -msgstr "" - -msgid "Primary key only" -msgstr "" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" - -msgid "Number of entries returned" -msgstr "" - -msgid "True if not all results were returned" -msgstr "" - -#, fuzzy -msgid "Modify ACI." -msgstr "Aldatu talde bat." - -#, fuzzy -msgid "Rename an ACI." -msgstr "Berrizendatu" - -msgid "New ACI name" -msgstr "ACI izen berria" - -msgid "Display a single ACI given an ACI name." -msgstr "" - -msgid "Location of the ACI" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Description" -msgstr "Deskribapena" - -#, fuzzy -msgid "A description of this auto member rule" -msgstr "Ostalari honen deskribapena" - -#, fuzzy -msgid "Default (fallback) Group" -msgstr "Erabiltzaile-talde lehenetsia" - -#, fuzzy -msgid "Default group for entries to land" -msgstr "Erabiltzaile berrientzako talde lehenetsia" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -#, fuzzy -msgid "Attribute Key" -msgstr "Atributua" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "List of deletions that failed" -msgstr "" - -#, fuzzy -msgid "Search for automember rules." -msgstr "Bilatu taldeak." - -msgid "Modify an automember rule." -msgstr "" - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Users" -msgstr "Erabiltzaileak" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Hosts" -msgstr "Ostalariak" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" - -msgid "Key" -msgstr "" - -msgid "Automount key name." -msgstr "" - -#, fuzzy -msgid "Mount information" +msgid "Configuration" msgstr "Konfigurazioa" -msgid "description" -msgstr "deskribapena" +msgid "Contact Settings" +msgstr "Kontaktuaren ezarpenak" -msgid "Location" -msgstr "" - -msgid "Automount location name." -msgstr "" - -msgid "Map" -msgstr "" - -msgid "Automount map name." -msgstr "" - -#, fuzzy -msgid "Create a new automount key." +msgid "Create a new group." msgstr "Sortu talde berri bat." -msgid "Delete an automount key." -msgstr "" +msgid "DNS" +msgstr "DNS" -msgid "Continuous mode: Don't stop on errors." -msgstr "" +msgid "Data" +msgstr "Datuak" -#, fuzzy -msgid "Search for an automount key." -msgstr "Bilatu taldeak." +msgid "Default e-mail domain" +msgstr "E-posta domeinu lehenetsia" -msgid "Time Limit" -msgstr "" - -msgid "Time limit of search in seconds" -msgstr "" - -msgid "Size Limit" -msgstr "" - -msgid "Maximum number of entries returned" -msgstr "" - -#, fuzzy -msgid "Modify an automount key." -msgstr "Aldatu talde bat." - -msgid "New mount information" -msgstr "" - -msgid "Rename" -msgstr "Berrizendatu" - -#, fuzzy -msgid "Rename the automount key object" -msgstr "%(ldap_obj_name)s objektua berrizendatu" - -#, fuzzy -msgid "Display an automount key." -msgstr "Bistaratu izena" - -#, fuzzy -msgid "Create a new automount location." -msgstr "Sortu talde berri bat." - -msgid "Delete an automount location." -msgstr "" - -msgid "Search for an automount location." -msgstr "" - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" - -msgid "Display an automount location." -msgstr "" - -msgid "Generate automount files for a specific location." -msgstr "" - -#, fuzzy -msgid "Create a new automount map." -msgstr "Sortu talde berri bat." - -#, fuzzy -msgid "Create a new indirect mount point." -msgstr "Sortu talde berri bat." - -msgid "Mount point" -msgstr "" - -msgid "Parent map" -msgstr "" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" - -msgid "Delete an automount map." -msgstr "" - -#, fuzzy -msgid "Search for an automount map." -msgstr "Bilatu taldeak." - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" - -#, fuzzy -msgid "Modify an automount map." -msgstr "Aldatu talde bat." - -msgid "Display an automount map." -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" - -msgid "Nested Methods to execute" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason" -msgstr "Arrazoia" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -#, fuzzy -msgid "minimum serial number" -msgstr "Serie-zenbakia" - -#, fuzzy -msgid "maximum serial number" -msgstr "Serie-zenbakia" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "Serie-zenbakia" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Principal" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Dictionary mapping variable name to value" -msgstr "" - -#, fuzzy -msgid "Revoke a certificate." -msgstr "Ziurtagiri berria" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "Irteerako fitxategi-izena" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "Maximum username length" -msgstr "Erabiltzaile-izenaren gehienezko luzera" - -msgid "Home directory base" -msgstr "Direktorio nagusiaren oinarria" +msgid "Default group for new users" +msgstr "Erabiltzaile berrientzako talde lehenetsia" msgid "Default location of home directories" msgstr "Karpeta nagusien kokaleku lehenetsia" @@ -2147,1765 +151,89 @@ msgstr "Erabiltzaile berrientzako shell lehenetsia" msgid "Default users group" msgstr "Erabiltzaile-talde lehenetsia" -msgid "Default group for new users" -msgstr "Erabiltzaile berrientzako talde lehenetsia" - -msgid "Default e-mail domain" -msgstr "E-posta domeinu lehenetsia" - -msgid "Search time limit" -msgstr "" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" - -msgid "Search size limit" -msgstr "" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "" - -msgid "User search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" - -msgid "Group search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" - -msgid "Enable migration mode" -msgstr "" - -#, fuzzy -msgid "Certificate Subject base" -msgstr "Ziurtagiria" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "" - -#, fuzzy -msgid "Default group objectclasses" -msgstr "Erabiltzaile berrientzako talde lehenetsia" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "" - -#, fuzzy -msgid "Default user objectclasses" -msgstr "Erabiltzaile-talde lehenetsia" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" - -msgid "Password Expiration Notification (days)" -msgstr "" - -msgid "Number of days's notice of impending password expiration" -msgstr "" - -msgid "Password plugin features" -msgstr "" - -msgid "Extra hashes to generate in password plug-in" -msgstr "" - -msgid "SELinux user map order" -msgstr "" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" - -#, fuzzy -msgid "Default SELinux user" -msgstr "Erabiltzaile-talde lehenetsia" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" - -#, fuzzy -msgid "Default PAC types" -msgstr "Shell lehenetsia" - -msgid "Default types of PAC supported for services" -msgstr "" - -msgid "Default user authentication types" -msgstr "" - -msgid "Default types of supported user authentication" -msgstr "" - -msgid "Modify configuration options." -msgstr "" - -msgid "Show the current configuration." -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "Delegation name" -msgstr "" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "" - -msgid "Attributes to which the delegation applies" -msgstr "" - -#, fuzzy -msgid "Member user group" -msgstr "Erabiltzaile-taldea" - -msgid "User group to apply delegation to" -msgstr "" - -msgid "Add a new delegation." -msgstr "" - -#, fuzzy -msgid "Delete a delegation." -msgstr "Ezabatu taldea." - -#, fuzzy -msgid "Search for delegations." -msgstr "Bilatu taldeak." - -#, fuzzy -msgid "Modify a delegation." -msgstr "Aldatu talde bat." - -msgid "Display information about a delegation." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "Global forwarders" -msgstr "" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Forward policy" -msgstr "" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" - -msgid "Allow PTR sync" -msgstr "" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" - -msgid "Zone refresh interval" -msgstr "" - -#, fuzzy -msgid "Zone name" -msgstr "Komandoaren izena" - -msgid "Zone name (FQDN)" -msgstr "" - -msgid "Reverse zone IP network" -msgstr "" - -msgid "IP network to create reverse zone name from" -msgstr "" - -msgid "Active zone" -msgstr "" - -msgid "Is zone active?" -msgstr "" - -msgid "Zone forwarders" -msgstr "" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -#, fuzzy -msgid "Record name" -msgstr "Berrizendatu" - -msgid "Time to live" -msgstr "" - -msgid "Records" -msgstr "" - -#, fuzzy -msgid "Record type" -msgstr "Arau-mota" - -msgid "Record data" -msgstr "" - -msgid "A record" -msgstr "" - -msgid "Raw A records" -msgstr "" - -msgid "A IP Address" -msgstr "" - -#, fuzzy -msgid "IP Address" -msgstr "E-posta helbidea" - -msgid "A Create reverse" -msgstr "" - -msgid "Create reverse record for this IP Address" -msgstr "" - -msgid "AAAA record" -msgstr "" - -msgid "Raw AAAA records" -msgstr "" - -msgid "AAAA IP Address" -msgstr "" - -msgid "AAAA Create reverse" -msgstr "" - -msgid "A6 record" -msgstr "" - -msgid "Raw A6 records" -msgstr "" - -msgid "A6 Record data" -msgstr "" - -msgid "AFSDB record" -msgstr "" - -msgid "Raw AFSDB records" -msgstr "" - -msgid "AFSDB Subtype" -msgstr "" - -#, fuzzy -msgid "Subtype" -msgstr "Azpi-zuhaitza" - -#, fuzzy -msgid "AFSDB Hostname" -msgstr "Ostalari-izena" - -msgid "Hostname" -msgstr "Ostalari-izena" - -msgid "APL record" -msgstr "" - -msgid "Raw APL records" -msgstr "" - -msgid "CERT record" -msgstr "" - -msgid "Raw CERT records" -msgstr "" - -#, fuzzy -msgid "CERT Certificate Type" -msgstr "Ziurtagiria" - -#, fuzzy -msgid "Certificate Type" -msgstr "Ziurtagiria" - -msgid "CERT Key Tag" -msgstr "" - -msgid "Key Tag" -msgstr "" - -msgid "CERT Algorithm" -msgstr "" - -msgid "Algorithm" -msgstr "" - -#, fuzzy -msgid "CERT Certificate/CRL" -msgstr "Ziurtagiria" - -#, fuzzy -msgid "Certificate/CRL" -msgstr "Ziurtagiria" - -msgid "CNAME record" -msgstr "" - -msgid "Raw CNAME records" -msgstr "" - -#, fuzzy -msgid "CNAME Hostname" -msgstr "Ostalari-izena" - -msgid "A hostname which this alias hostname points to" -msgstr "" - -msgid "DHCID record" -msgstr "" - -msgid "Raw DHCID records" -msgstr "" - -msgid "DLV record" -msgstr "" - -msgid "Raw DLV records" -msgstr "" - -msgid "DLV Key Tag" -msgstr "" - -msgid "DLV Algorithm" -msgstr "" - -msgid "DLV Digest Type" -msgstr "" - -msgid "Digest Type" -msgstr "" - -msgid "DLV Digest" -msgstr "" - -msgid "Digest" -msgstr "" - -msgid "DNAME record" -msgstr "" - -msgid "Raw DNAME records" -msgstr "" - -msgid "DNAME Target" -msgstr "" - -#, fuzzy -msgid "Target" -msgstr "Helburuko taldea" - -msgid "DNSKEY record" -msgstr "" - -msgid "Raw DNSKEY records" -msgstr "" - -msgid "DS record" -msgstr "" - -msgid "Raw DS records" -msgstr "" - -msgid "DS Key Tag" -msgstr "" - -msgid "DS Algorithm" -msgstr "" - -msgid "DS Digest Type" -msgstr "" - -msgid "DS Digest" -msgstr "" - -msgid "HIP record" -msgstr "" - -msgid "Raw HIP records" -msgstr "" - -msgid "IPSECKEY record" -msgstr "" - -msgid "Raw IPSECKEY records" -msgstr "" - -msgid "KEY record" -msgstr "" - -msgid "Raw KEY records" -msgstr "" - -msgid "KX record" -msgstr "" - -msgid "Raw KX records" -msgstr "" - -msgid "KX Preference" -msgstr "" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" - -msgid "KX Exchanger" -msgstr "" - -msgid "A host willing to act as a key exchanger" -msgstr "" - -msgid "LOC record" -msgstr "" - -msgid "Raw LOC records" -msgstr "" - -msgid "LOC Degrees Latitude" -msgstr "" - -msgid "Degrees Latitude" -msgstr "" - -msgid "LOC Minutes Latitude" -msgstr "" - -msgid "Minutes Latitude" -msgstr "" - -msgid "LOC Seconds Latitude" -msgstr "" - -msgid "Seconds Latitude" -msgstr "" - -msgid "LOC Direction Latitude" -msgstr "" - -msgid "Direction Latitude" -msgstr "" - -msgid "LOC Degrees Longitude" -msgstr "" - -msgid "Degrees Longitude" -msgstr "" - -msgid "LOC Minutes Longitude" -msgstr "" - -msgid "Minutes Longitude" -msgstr "" - -msgid "LOC Seconds Longitude" -msgstr "" - -msgid "Seconds Longitude" -msgstr "" - -msgid "LOC Direction Longitude" -msgstr "" - -msgid "Direction Longitude" -msgstr "" - -msgid "LOC Altitude" -msgstr "" - -msgid "Altitude" -msgstr "" - -msgid "LOC Size" -msgstr "" - -msgid "Size" -msgstr "" - -msgid "LOC Horizontal Precision" -msgstr "" - -msgid "Horizontal Precision" -msgstr "" - -msgid "LOC Vertical Precision" -msgstr "" - -msgid "Vertical Precision" -msgstr "" - -msgid "MX record" -msgstr "" - -msgid "Raw MX records" -msgstr "" - -msgid "MX Preference" -msgstr "" - -msgid "MX Exchanger" -msgstr "" - -msgid "A host willing to act as a mail exchanger" -msgstr "" - -msgid "NAPTR record" -msgstr "" - -msgid "Raw NAPTR records" -msgstr "" - -msgid "NAPTR Order" -msgstr "" - -msgid "Order" -msgstr "" - -msgid "NAPTR Preference" -msgstr "" - -msgid "Preference" -msgstr "" - -msgid "NAPTR Flags" -msgstr "" - -msgid "Flags" -msgstr "" - -#, fuzzy -msgid "NAPTR Service" -msgstr "HBAC zerbitzuak" - -#, fuzzy -msgid "Service" -msgstr "Zerbitzuak" - -msgid "NAPTR Regular Expression" -msgstr "" - -msgid "Regular Expression" -msgstr "" - -msgid "NAPTR Replacement" -msgstr "" - -msgid "Replacement" -msgstr "" - -msgid "NS record" -msgstr "" - -msgid "Raw NS records" -msgstr "" - -#, fuzzy -msgid "NS Hostname" -msgstr "Ostalari-izena" - -msgid "NSEC record" -msgstr "" - -msgid "Raw NSEC records" -msgstr "" - -msgid "NSEC3 record" -msgstr "" - -msgid "Raw NSEC3 records" -msgstr "" - -msgid "PTR record" -msgstr "" - -msgid "Raw PTR records" -msgstr "" - -#, fuzzy -msgid "PTR Hostname" -msgstr "Ostalari-izena" - -msgid "The hostname this reverse record points to" -msgstr "" - -msgid "RRSIG record" -msgstr "" - -msgid "Raw RRSIG records" -msgstr "" - -msgid "RP record" -msgstr "" - -msgid "Raw RP records" -msgstr "" - -msgid "SIG record" -msgstr "" - -msgid "Raw SIG records" -msgstr "" - -msgid "SPF record" -msgstr "" - -msgid "Raw SPF records" -msgstr "" - -msgid "SRV record" -msgstr "" - -msgid "Raw SRV records" -msgstr "" - -msgid "SRV Priority" -msgstr "" - -msgid "Priority" -msgstr "" - -msgid "SRV Weight" -msgstr "" - -msgid "Weight" -msgstr "" - -msgid "SRV Port" -msgstr "" - -msgid "Port" -msgstr "" - -msgid "SRV Target" -msgstr "" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" - -msgid "SSHFP record" -msgstr "" - -msgid "Raw SSHFP records" -msgstr "" - -msgid "SSHFP Algorithm" -msgstr "" - -#, fuzzy -msgid "SSHFP Fingerprint Type" -msgstr "SHA1 hatz-marka" - -#, fuzzy -msgid "Fingerprint Type" -msgstr "Hatz-markak" - -#, fuzzy -msgid "SSHFP Fingerprint" -msgstr "SHA1 hatz-marka" - -#, fuzzy -msgid "Fingerprint" -msgstr "Hatz-markak" - -msgid "TA record" -msgstr "" - -msgid "Raw TA records" -msgstr "" - -msgid "TLSA record" -msgstr "" - -msgid "Raw TLSA records" -msgstr "" - -#, fuzzy -msgid "TLSA Certificate Usage" -msgstr "Ziurtagiria" - -#, fuzzy -msgid "Certificate Usage" -msgstr "Ziurtagiria" - -msgid "TLSA Selector" -msgstr "" - -msgid "Selector" -msgstr "" - -msgid "TLSA Matching Type" -msgstr "" - -msgid "Matching Type" -msgstr "" - -msgid "TLSA Certificate Association Data" -msgstr "" - -msgid "Certificate Association Data" -msgstr "" - -msgid "TKEY record" -msgstr "" - -msgid "Raw TKEY records" -msgstr "" - -msgid "TSIG record" -msgstr "" - -msgid "Raw TSIG records" -msgstr "" - -msgid "TXT record" -msgstr "" - -msgid "Raw TXT records" -msgstr "" - -msgid "TXT Text Data" -msgstr "" - -#, fuzzy -msgid "Text Data" -msgstr "Datuak" - -msgid "Authoritative nameserver" -msgstr "" - -msgid "Authoritative nameserver domain name" -msgstr "" - -msgid "Administrator e-mail address" -msgstr "Administratzailearen e-posta helbidea" - -msgid "SOA serial" -msgstr "" - -#, fuzzy -msgid "SOA record serial number" -msgstr "Serie-zenbakia" - -msgid "SOA refresh" -msgstr "" - -msgid "SOA record refresh time" -msgstr "" - -msgid "SOA retry" -msgstr "" - -msgid "SOA record retry time" -msgstr "" - -msgid "SOA expire" -msgstr "" - -msgid "SOA record expire time" -msgstr "" - -msgid "SOA minimum" -msgstr "" - -msgid "How long should negative responses be cached" -msgstr "" - -msgid "Time to live for records at zone apex" -msgstr "" - -msgid "BIND update policy" -msgstr "" - -msgid "Dynamic update" -msgstr "" - -msgid "Allow dynamic updates." -msgstr "" - -#, fuzzy -msgid "Allow query" -msgstr "Onartu" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" - -msgid "Allow transfer" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" - -msgid "Allow in-line DNSSEC signing" -msgstr "" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "" - -msgid "NSEC3PARAM record" -msgstr "" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" - -msgid "Resolve a host name in DNS." -msgstr "" - -msgid "Modify global DNS configuration." -msgstr "" - -msgid "Show the current global DNS configuration." -msgstr "" - -msgid "Create new DNS forward zone." -msgstr "" - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" - -#, fuzzy -msgid "Permission value" -msgstr "Baimena" - -msgid "Delete DNS forward zone." -msgstr "" - -msgid "Disable DNS Forward Zone." -msgstr "" - -msgid "Enable DNS Forward Zone." -msgstr "" - -#, fuzzy -msgid "Search for DNS forward zones." -msgstr "Bilatu taldeak." - -msgid "Modify DNS forward zone." -msgstr "" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" - -msgid "Display information about a DNS forward zone." -msgstr "" - -msgid "Add new DNS resource record." -msgstr "" - -msgid "Force" -msgstr "Behartu" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "" - -msgid "Structured" -msgstr "" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" - -msgid "Delete DNS resource record." -msgstr "" - -msgid "Delete all associated records" -msgstr "" - -msgid "Delete DNS record entry." -msgstr "" - -#, fuzzy -msgid "Search for DNS resources." -msgstr "Bilatu taldeak." - -msgid "Modify a DNS resource record." -msgstr "" - -msgid "Rename the DNS resource record object" -msgstr "" - -msgid "Display DNS resource." -msgstr "" - -msgid "Create new DNS zone (SOA record)." -msgstr "" - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" - -msgid "Add a permission for per-zone access delegation." -msgstr "" - -msgid "Delete DNS zone (SOA record)." -msgstr "" - -msgid "Disable DNS Zone." -msgstr "" - -msgid "Enable DNS Zone." -msgstr "" - -msgid "Search for DNS zones (SOA records)." -msgstr "" - -msgid "Forward zones only" -msgstr "" - -msgid "Search for forward zones only" -msgstr "" - -msgid "Modify DNS zone (SOA record)." -msgstr "" - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" - -msgid "Remove a permission for per-zone access delegation." -msgstr "" - -msgid "Display information about a DNS zone (SOA record)." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -msgid "Group name" -msgstr "Taldea" - -#, fuzzy -msgid "Group description" -msgstr "deskribapena" - -#, fuzzy -msgid "GID" -msgstr "UID" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Member users" -msgstr "" - -#, fuzzy -msgid "Member groups" -msgstr "Erabiltzaile-taldea" - -#, fuzzy -msgid "Member of groups" -msgstr "Bilatu taldeak." - -msgid "Roles" -msgstr "" - -#, fuzzy -msgid "Member of netgroups" -msgstr "Ostalari-taldearen izena" - -msgid "Member of Sudo rule" -msgstr "" - -#, fuzzy -msgid "Member of HBAC rule" -msgstr "HBAC araua" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - -msgid "Create a new group." -msgstr "Sortu talde berri bat." - -#, fuzzy -msgid "Create as a non-POSIX group" -msgstr "Sortu talde berri bat." - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Suppress processing of membership attributes." -msgstr "" - -msgid "Add members to a group." -msgstr "" - -#, fuzzy -msgid "External member" -msgstr "Kanpoko erabiltzailea" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -#, fuzzy -msgid "member group" -msgstr "Erabiltzaile-taldea" - -#, fuzzy -msgid "groups to add" -msgstr "taldeak" - -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - msgid "Delete group." msgstr "Ezabatu taldea." -msgid "Detach a managed group from a user." -msgstr "" +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "\"%(value)s\" ostalaria ezabatuta" -msgid "Search for groups." -msgstr "Bilatu taldeak." +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "\"%(value)s\" zerbitzua ezabatuta" -#, fuzzy -msgid "search for private groups" -msgstr "Bilatu taldeak." +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "\"%(value)s\" erabiltzailea ezabatuta" -#, fuzzy -msgid "search for POSIX groups" -msgstr "Bilatu taldeak." +msgid "Deny" +msgstr "Ukatu" -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" +msgid "Description" +msgstr "Deskribapena" -#, fuzzy -msgid "search for non-POSIX groups" -msgstr "Bilatu taldeak." +msgid "Display name" +msgstr "Bistaratu izena" -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "user" -msgstr "" - -#, fuzzy -msgid "Search for groups with these member users." -msgstr "Bilatu taldeak." - -msgid "Search for groups without these member users." -msgstr "" - -msgid "group" -msgstr "taldea" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -#, fuzzy -msgid "netgroup" -msgstr "taldea" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "role" -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "HBAC rule" -msgstr "HBAC araua" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "sudo rule" -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "Aldatu talde bat." - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -#, fuzzy -msgid "Rename the group object" -msgstr "%(ldap_obj_name)s objektua berrizendatu" - -msgid "Remove members from a group." -msgstr "" - -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -#, fuzzy -msgid "Rule name" -msgstr "Berrizendatu" - -msgid "Rule type" -msgstr "Arau-mota" - -#, fuzzy -msgid "Rule type (allow)" -msgstr "Arau-mota" - -#, fuzzy -msgid "User category" -msgstr "Erabiltzailearen pasahitza" - -msgid "User category the rule applies to" -msgstr "" - -#, fuzzy -msgid "Host category" -msgstr "Ostalari-izena" - -msgid "Host category the rule applies to" -msgstr "" - -#, fuzzy -msgid "Service category" -msgstr "Zerbitzuaren izena" - -msgid "Service category the rule applies to" -msgstr "" +msgid "Email address" +msgstr "E-posta helbidea" msgid "Enabled" msgstr "Gaituta" -msgid "User Groups" -msgstr "Erabiltzaile-taldeak" +msgid "Error" +msgstr "Errorea" -msgid "Host Groups" -msgstr "Ostalari-taldeak" - -msgid "Services" -msgstr "Zerbitzuak" - -msgid "Service Groups" -msgstr "Zerbitzu-taldeak" +msgid "External User" +msgstr "Kanpoko erabiltzailea" msgid "External host" msgstr "Kanpoko ostalaria" -#, fuzzy -msgid "Create a new HBAC rule." -msgstr "Sortu talde berri bat." +msgid "Fax Number" +msgstr "Fax-zenbakia" -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "" +msgid "Filter" +msgstr "Iragazkia" -msgid "member host" -msgstr "" +msgid "Fingerprint (SHA1)" +msgstr "Hatz-marka (SHA1)" -msgid "hosts to add" -msgstr "" +msgid "Fingerprints" +msgstr "Hatz-markak" -#, fuzzy -msgid "member host group" -msgstr "Ostalari-taldearen izena" +msgid "First name" +msgstr "Izena" -#, fuzzy -msgid "host groups to add" -msgstr "Ostalari-taldeak" +msgid "Force" +msgstr "Behartu" -msgid "Add services to an HBAC rule." -msgstr "" +msgid "Full name" +msgstr "Izen osoa" -#, fuzzy -msgid "member HBAC service" -msgstr "HBAC zerbitzua" +msgid "General" +msgstr "Orokorra" -#, fuzzy -msgid "HBAC services to add" -msgstr "HBAC zerbitzua" +msgid "Group" +msgstr "Taldea" -#, fuzzy -msgid "member HBAC service group" -msgstr "HBAC zerbitzu-taldearen deskribapena" +msgid "Group Settings" +msgstr "Taldearen ezarpenak" -#, fuzzy -msgid "HBAC service groups to add" -msgstr "HBAC zerbitzu-taldearen deskribapena" +msgid "Groups" +msgstr "Taldeak" -msgid "Add users and groups to an HBAC rule." -msgstr "" +msgid "HBAC Rules" +msgstr "HBAC arauak" -#, fuzzy -msgid "Delete an HBAC rule." +msgid "HBAC Services" +msgstr "HBAC zerbitzuak" + +msgid "HBAC rule" msgstr "HBAC araua" -#, fuzzy -msgid "Disable an HBAC rule." -msgstr "HBAC araua" - -#, fuzzy -msgid "Enable an HBAC rule." -msgstr "HBAC araua" - -#, fuzzy -msgid "Search for HBAC rules." -msgstr "Bilatu taldeak." - -#, fuzzy -msgid "Modify an HBAC rule." -msgstr "Aldatu talde bat." - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "hosts to remove" -msgstr "" - -msgid "host groups to remove" -msgstr "" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "" - -#, fuzzy -msgid "HBAC services to remove" -msgstr "HBAC zerbitzua" - -#, fuzzy -msgid "HBAC service groups to remove" -msgstr "HBAC zerbitzu-taldearen deskribapena" - -msgid "Remove users and groups from an HBAC rule." -msgstr "" - -msgid "Display the properties of an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" - -msgid "Service name" -msgstr "Zerbitzuaren izena" +msgid "HBAC rules" +msgstr "HBAC arauak" msgid "HBAC service" msgstr "HBAC zerbitzua" @@ -3913,20680 +241,300 @@ msgstr "HBAC zerbitzua" msgid "HBAC service description" msgstr "HBAC zerbitzuaren deskribapena" -#, fuzzy -msgid "Member of HBAC service groups" -msgstr "HBAC zerbitzu-taldearen deskribapena" - -#, fuzzy -msgid "Add a new HBAC service." -msgstr "HBAC zerbitzua" - -msgid "Delete an existing HBAC service." -msgstr "" - -#, fuzzy -msgid "Search for HBAC services." -msgstr "Bilatu taldeak." - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" - -#, fuzzy -msgid "Modify an HBAC service." -msgstr "HBAC zerbitzua" - -msgid "Display information about an HBAC service." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "Service group name" -msgstr "Zerbitzu-taldearen izena" - msgid "HBAC service group description" msgstr "HBAC zerbitzu-taldearen deskribapena" -#, fuzzy -msgid "Member HBAC service" -msgstr "HBAC zerbitzua" - -#, fuzzy -msgid "Add a new HBAC service group." -msgstr "HBAC zerbitzu-taldearen deskribapena" - -msgid "Add members to an HBAC service group." -msgstr "" - -#, fuzzy -msgid "Delete an HBAC service group." -msgstr "Ezabatu taldea." - -#, fuzzy -msgid "Search for an HBAC service group." -msgstr "Bilatu taldeak." - -#, fuzzy -msgid "Modify an HBAC service group." -msgstr "Aldatu talde bat." - -msgid "Remove members from an HBAC service group." -msgstr "" - -msgid "Display information about an HBAC service group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -#, fuzzy -msgid "User name" -msgstr "Erabiltzaile-izena" - -#, fuzzy -msgid "Target host" -msgstr "Helburuko taldea" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host name" -msgstr "Ostalari-izena" - -msgid "A description of this host" -msgstr "Ostalari honen deskribapena" - -msgid "Locality" -msgstr "" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "" - -msgid "Platform" -msgstr "" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "" - -msgid "Operating system" -msgstr "Sistema eragilea" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "Ostalariaren sistema eragilea eta bertsioa (adibidez, \"Fedora 9\")" - -msgid "User password" -msgstr "Erabiltzailearen pasahitza" - -msgid "Password used in bulk enrollment" -msgstr "" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "" - -msgid "Random password" -msgstr "Ausazko pasahitza" - -msgid "Certificate" -msgstr "Ziurtagiria" - -msgid "Base-64 encoded server certificate" -msgstr "" - -#, fuzzy -msgid "Principal name" -msgstr "Bistaratu izena" - -#, fuzzy -msgid "MAC address" -msgstr "E-posta helbidea" - -msgid "Hardware MAC address(es) on this host" -msgstr "" - -msgid "SSH public key" -msgstr "" - -msgid "Class" -msgstr "Klasea" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "Assigned ID View" -msgstr "" - -msgid "Requires pre-authentication" -msgstr "" - -msgid "Pre-authentication is required for the service" -msgstr "" - -msgid "Trusted for delegation" -msgstr "" - -msgid "Client credentials may be delegated to the service" -msgstr "" - -#, fuzzy -msgid "Member of host-groups" -msgstr "Ostalari-taldearen izena" - -#, fuzzy -msgid "Indirect Member of host-group" -msgstr "Ostalari-taldearen izena" - -msgid "Keytab" -msgstr "" - -#, fuzzy -msgid "Managed by" -msgstr "Kudeatzailea" - -#, fuzzy -msgid "Managing" -msgstr "Kudeatzailea" - -msgid "Users allowed to retrieve keytab" -msgstr "" - -msgid "Groups allowed to retrieve keytab" -msgstr "" - -msgid "Hosts allowed to retrieve keytab" -msgstr "" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "" - -msgid "Users allowed to create keytab" -msgstr "" - -msgid "Groups allowed to create keytab" -msgstr "" - -msgid "Hosts allowed to create keytab" -msgstr "" - -msgid "Host Groups allowed to create keytab" -msgstr "" - -#, fuzzy -msgid "Add a new host." -msgstr "Gehitu eta itxi" - -msgid "force host name even if not in DNS" -msgstr "" - -msgid "skip reverse DNS detection" -msgstr "" - -msgid "Add the host to DNS with this IP address" -msgstr "" - -msgid "Add hosts that can manage this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" - -#, fuzzy -msgid "Delete a host." -msgstr "Ezabatu taldea." - -msgid "Remove entries from DNS" -msgstr "" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" - -#, fuzzy -msgid "Search for hosts." -msgstr "Bilatu taldeak." - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" - -#, fuzzy -msgid "host group" -msgstr "Ostalari-taldea" - -msgid "Search for hosts with these member of host groups." -msgstr "" - -msgid "Search for hosts without these member of host groups." -msgstr "" - -msgid "Search for hosts with these member of netgroups." -msgstr "" - -msgid "Search for hosts without these member of netgroups." -msgstr "" - -msgid "Search for hosts with these member of roles." -msgstr "" - -msgid "Search for hosts without these member of roles." -msgstr "" - -msgid "Search for hosts with these member of HBAC rules." -msgstr "" - -msgid "Search for hosts without these member of HBAC rules." -msgstr "" - -msgid "Search for hosts with these member of sudo rules." -msgstr "" - -msgid "Search for hosts without these member of sudo rules." -msgstr "" - -msgid "Search for hosts with these enrolled by users." -msgstr "" - -msgid "Search for hosts without these enrolled by users." -msgstr "" - -#, fuzzy -msgid "host" -msgstr "ostalari-izena" - -msgid "Search for hosts with these managed by hosts." -msgstr "" - -msgid "Search for hosts without these managed by hosts." -msgstr "" - -msgid "Search for hosts with these managing hosts." -msgstr "" - -msgid "Search for hosts without these managing hosts." -msgstr "" - -msgid "Modify information about a host." -msgstr "" - -msgid "Kerberos principal name for this host" -msgstr "" - -msgid "Update DNS entries" -msgstr "" - -msgid "Remove hosts that can manage this host." -msgstr "" - -msgid "Display information about a host." -msgstr "" - -msgid "file to store certificate in" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "Host-group" -msgstr "Ostalari-taldea" - -msgid "Name of host-group" -msgstr "Ostalari-taldearen izena" - -msgid "A description of this host-group" -msgstr "Ostalari-talde honen deskribapena" - -msgid "Member hosts" -msgstr "" - -#, fuzzy -msgid "Member host-groups" -msgstr "Ostalari-taldearen izena" - -msgid "Indirect Member hosts" -msgstr "" - -msgid "Indirect Member host-groups" -msgstr "" - -#, fuzzy -msgid "Add a new hostgroup." -msgstr "Sortu talde berri bat." - -#, fuzzy -msgid "Add members to a hostgroup." -msgstr "Ostalari-taldearen izena" - -#, fuzzy -msgid "Delete a hostgroup." -msgstr "Ezabatu taldea." - -#, fuzzy -msgid "Search for hostgroups." -msgstr "Bilatu taldeak." - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" - -msgid "Search for host groups with these member hosts." -msgstr "" - -msgid "Search for host groups without these member hosts." -msgstr "" - -msgid "Search for host groups with these member host groups." -msgstr "" - -msgid "Search for host groups without these member host groups." -msgstr "" - -msgid "Search for host groups with these member of host groups." -msgstr "" - -msgid "Search for host groups without these member of host groups." -msgstr "" - -msgid "Search for host groups with these member of netgroups." -msgstr "" - -msgid "Search for host groups without these member of netgroups." -msgstr "" - -msgid "Search for host groups with these member of HBAC rules." -msgstr "" - -msgid "Search for host groups without these member of HBAC rules." -msgstr "" - -msgid "Search for host groups with these member of sudo rules." -msgstr "" - -msgid "Search for host groups without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a hostgroup." -msgstr "Aldatu talde bat." - -msgid "Remove members from a hostgroup." -msgstr "" - -msgid "Display information about a hostgroup." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "Berrizendatu" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -#, fuzzy -msgid "Range type" -msgstr "Arau-mota" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -#, fuzzy -msgid "Search for ranges." -msgstr "Bilatu taldeak." - -#, fuzzy -msgid "Modify ID range." -msgstr "Aldatu talde bat." - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -msgid "Anchor to override" -msgstr "" - -msgid "Group ID Number" -msgstr "" - -#, fuzzy -msgid "User login" -msgstr "Erabiltzaile-taldea" - -msgid "UID" -msgstr "UID" - -#, fuzzy -msgid "User ID Number" -msgstr "Bilagailu-zenbakia" - -msgid "GECOS" -msgstr "" - -#, fuzzy -msgid "Home directory" -msgstr "Direktorio nagusiaren oinarria" - -msgid "Login shell" -msgstr "" - -msgid "ID View Name" -msgstr "" - -msgid "Add a new Group ID override." -msgstr "" - -msgid "Delete an Group ID override." -msgstr "" - -#, fuzzy -msgid "Search for an Group ID override." -msgstr "Bilatu taldeak." - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" - -#, fuzzy -msgid "Modify an Group ID override." -msgstr "Aldatu talde bat." - -#, fuzzy -msgid "Rename the Group ID override object" -msgstr "%(ldap_obj_name)s objektua berrizendatu" - -msgid "Display information about an Group ID override." -msgstr "" - -msgid "Add a new User ID override." -msgstr "" - -msgid "Delete an User ID override." -msgstr "" - -msgid "Search for an User ID override." -msgstr "" - -msgid "Modify an User ID override." -msgstr "" - -msgid "Rename the User ID override object" -msgstr "" - -msgid "Display information about an User ID override." -msgstr "" - -msgid "Add a new ID View." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" - -#, fuzzy -msgid "hosts" -msgstr "Ostalariak" - -msgid "Hosts to apply the ID View to" -msgstr "" - -#, fuzzy -msgid "hostgroups" -msgstr "Ostalari-taldea" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" - -msgid "Hosts that this ID View was applied to." -msgstr "" - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" - -msgid "Number of hosts the ID View was applied to:" -msgstr "" - -msgid "Delete an ID View." -msgstr "" - -#, fuzzy -msgid "Search for an ID View." -msgstr "Bilatu taldeak." - -#, fuzzy -msgid "Modify an ID View." -msgstr "Aldatu talde bat." - -#, fuzzy -msgid "Rename the ID View object" -msgstr "%(ldap_obj_name)s objektua berrizendatu" - -msgid "Display information about an ID View." -msgstr "" - -msgid "Enumerate all the hosts the view applies to." -msgstr "" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" - -msgid "Hosts to clear (any) ID View from." -msgstr "" - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" - -msgid "Hosts that ID View was cleared from." -msgstr "" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" - -msgid "Dict of I18N messages" -msgstr "" - -msgid "Export plugin meta-data for the webUI." -msgstr "" - -msgid "Name of object to export" -msgstr "" - -#, fuzzy -msgid "Name of method to export" -msgstr "Ostalari-taldearen izena" - -msgid "Name of command to export" -msgstr "" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" - -msgid "Join an IPA domain" -msgstr "" - -msgid "The hostname to register as" -msgstr "" - -msgid "The IPA realm" -msgstr "" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "" - -#, fuzzy -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "Ostalariaren sistema eragilea eta bertsioa (adibidez, \"Fedora 9\")" - -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" - -msgid "Manage ticket policy for specific user" -msgstr "" - -msgid "Max life" -msgstr "" - -msgid "Maximum ticket life (seconds)" -msgstr "" - -msgid "Max renew" -msgstr "" - -msgid "Maximum renewable age (seconds)" -msgstr "" - -msgid "Modify Kerberos ticket policy." -msgstr "" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "" - -msgid "Display the current Kerberos ticket policy." -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," -"cn=accounts' --group-container='cn=groups,cn=accounts' " -"ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' --user-ignore-" -"objectclass=radiusprofile --user-ignore-" -"attribute=radiusgroupname ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -msgid "Migrate users and groups from DS to IPA." -msgstr "" - -#, fuzzy -msgid "LDAP URI" -msgstr "LDAP URI baliogabea." - -msgid "LDAP URI of DS server to migrate from" -msgstr "" - -#, fuzzy -msgid "bind password" -msgstr "Ausazko pasahitza" - -msgid "Bind DN" -msgstr "" - -#, fuzzy -msgid "User container" -msgstr "Erabiltzaile-izena" - -msgid "DN of container for users in DS relative to base DN" -msgstr "" - -#, fuzzy -msgid "Group container" -msgstr "Taldearen ezarpenak" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "" - -msgid "User object class" -msgstr "" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "" - -msgid "Group object class" -msgstr "" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "" - -msgid "Ignore user object class" -msgstr "" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore user attribute" -msgstr "" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore group object class" -msgstr "" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "Ignore group attribute" -msgstr "" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "" - -msgid "Overwrite GID" -msgstr "" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" - -msgid "LDAP schema" -msgstr "" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" - -msgid "Continue" -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" - -msgid "Base DN" -msgstr "" - -msgid "Base DN on remote LDAP server" -msgstr "" - -msgid "Ignore compat plugin" -msgstr "" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" - -#, fuzzy -msgid "CA certificate" -msgstr "Ziurtagiria" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "" - -msgid "groups to exclude from migration" -msgstr "" - -msgid "users to exclude from migration" -msgstr "" - -msgid "Lists of objects migrated; categorized by type." -msgstr "" - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" - -msgid "False if migration mode was disabled." -msgstr "" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" - -msgid "Show environment variables." -msgstr "" - -msgid "Forward to server instead of running locally" -msgstr "" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Total number of variables env (>= count)" -msgstr "" - -msgid "Number of variables returned (<= total)" -msgstr "" - -msgid "Show all loaded plugins." -msgstr "" - -msgid "Dictionary mapping plugin names to bases" -msgstr "" - -msgid "Number of plugins loaded" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -#, fuzzy -msgid "Netgroup name" -msgstr "Zerbitzu-taldearen izena" - -#, fuzzy -msgid "Netgroup description" -msgstr "HBAC zerbitzu-taldearen deskribapena" - -msgid "NIS domain name" -msgstr "NIS domeinu-izena" - -msgid "IPA unique ID" -msgstr "" - -#, fuzzy -msgid "Member netgroups" -msgstr "Erabiltzaile-taldea" - -msgid "Indirect Member netgroups" -msgstr "" - -msgid "Member User" -msgstr "" - -#, fuzzy -msgid "Member Group" -msgstr "Erabiltzaile-taldea" - -msgid "Member Host" -msgstr "" - -#, fuzzy -msgid "Member Hostgroup" -msgstr "Ostalari-taldea" - -#, fuzzy -msgid "Add a new netgroup." -msgstr "Sortu talde berri bat." - -msgid "Add members to a netgroup." -msgstr "" - -#, fuzzy -msgid "member netgroup" -msgstr "Erabiltzaile-taldea" - -msgid "netgroups to add" -msgstr "" - -#, fuzzy -msgid "Delete a netgroup." -msgstr "Ezabatu taldea." - -#, fuzzy -msgid "Search for a netgroup." -msgstr "Bilatu taldeak." - -#, fuzzy -msgid "search for managed groups" -msgstr "Bilatu taldeak." - -msgid "Search for netgroups with these member netgroups." -msgstr "" - -msgid "Search for netgroups without these member netgroups." -msgstr "" - -msgid "Search for netgroups with these member users." -msgstr "" - -msgid "Search for netgroups without these member users." -msgstr "" - -msgid "Search for netgroups with these member groups." -msgstr "" - -msgid "Search for netgroups without these member groups." -msgstr "" - -msgid "Search for netgroups with these member hosts." -msgstr "" - -msgid "Search for netgroups without these member hosts." -msgstr "" - -msgid "Search for netgroups with these member host groups." -msgstr "" - -msgid "Search for netgroups without these member host groups." -msgstr "" - -msgid "Search for netgroups with these member of netgroups." -msgstr "" - -msgid "Search for netgroups without these member of netgroups." -msgstr "" - -#, fuzzy -msgid "Modify a netgroup." -msgstr "Aldatu talde bat." - -msgid "Remove members from a netgroup." -msgstr "" - -msgid "netgroups to remove" -msgstr "" - -msgid "Display information about a netgroup." -msgstr "" - -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" - -msgid "TOTP authentication Window" -msgstr "" - -msgid "TOTP authentication time variance (seconds)" -msgstr "" - -msgid "TOTP Synchronization Window" -msgstr "" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "" - -msgid "HOTP Authentication Window" -msgstr "" - -msgid "HOTP authentication skip-ahead" -msgstr "" - -msgid "HOTP Synchronization Window" -msgstr "" - -msgid "HOTP synchronization skip-ahead" -msgstr "" - -msgid "Modify OTP configuration options." -msgstr "" - -msgid "Show the current OTP configuration." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Manager" -msgstr "Kudeatzailea" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -#, fuzzy -msgid "Disabled" -msgstr "Gaituta" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -#, fuzzy -msgid "Serial" -msgstr "Serie-zenbakia" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -#, fuzzy -msgid "Search for OTP token." -msgstr "Bilatu taldeak." - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -#, fuzzy -msgid "Modify a OTP token." -msgstr "Aldatu talde bat." - -#, fuzzy -msgid "Rename the OTP token object" -msgstr "%(ldap_obj_name)s objektua berrizendatu" - -msgid "Display information about an OTP token." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -#, fuzzy -msgid "Set a user's password." -msgstr "Erabiltzailearen pasahitza" - -msgid "New Password" -msgstr "Pasahitz berria" - -#, fuzzy -msgid "Current Password" -msgstr "Berrezarri pasahitza" - -#, fuzzy -msgid "OTP" -msgstr "Ezarri OTP" - -#, fuzzy -msgid "One Time Password" -msgstr "Berrezarri pasahitza" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -"\n" -"Managed permissions\n" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -#, fuzzy -msgid "Permission name" -msgstr "Baimena" - -msgid "Granted rights" -msgstr "" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" - -#, fuzzy -msgid "Effective attributes" -msgstr "Atributuak" - -msgid "All attributes to which the permission applies" -msgstr "" - -#, fuzzy -msgid "Included attributes" -msgstr "Atributuak" - -msgid "User-specified attributes to which the permission applies" -msgstr "" - -#, fuzzy -msgid "Excluded attributes" -msgstr "Atributuak" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" - -#, fuzzy -msgid "Default attributes" -msgstr "Atributuak" - -msgid "Attributes to which the permission applies by default" -msgstr "" - -#, fuzzy -msgid "Bind rule type" -msgstr "Arau-mota" - -msgid "Subtree to apply permissions to" -msgstr "" - -msgid "Extra target filter" -msgstr "" - -msgid "Raw target filter" -msgstr "" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" - -#, fuzzy -msgid "Target DN" -msgstr "Helburuko taldea" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" - -#, fuzzy -msgid "Member of group" -msgstr "Ostalari-taldearen izena" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "" - -msgid "User group to apply permissions to (sets target)" -msgstr "" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "" - -msgid "Deprecated; use extratargetfilter" -msgstr "" - -msgid "Deprecated; use ipapermlocation" -msgstr "" - -msgid "Deprecated; use ipapermright" -msgstr "" - -msgid "Granted to Privilege" -msgstr "" - -msgid "Indirect Member of roles" -msgstr "" - -msgid "Add a new permission." -msgstr "" - -msgid "Add members to a permission." -msgstr "" - -msgid "member privilege" -msgstr "" - -msgid "privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "" - -#, fuzzy -msgid "Permission flags" -msgstr "Baimenak" - -#, fuzzy -msgid "Delete a permission." -msgstr "Ezabatu taldea." - -msgid "force delete of SYSTEM permissions" -msgstr "" - -#, fuzzy -msgid "Search for permissions." -msgstr "Bilatu taldeak." - -#, fuzzy -msgid "Modify a permission." -msgstr "Aldatu talde bat." - -#, fuzzy -msgid "Rename the permission object" -msgstr "%(ldap_obj_name)s objektua berrizendatu" - -msgid "Remove members from a permission." -msgstr "" - -msgid "privileges to remove" -msgstr "" - -msgid "Display information about a permission." -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "Ping a remote server." -msgstr "" - -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "" - -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" - -#, fuzzy -msgid "Privilege name" -msgstr "Zerbitzuaren izena" - -#, fuzzy -msgid "Privilege description" -msgstr "HBAC zerbitzuaren deskribapena" - -msgid "Granting privilege to roles" -msgstr "" - -msgid "Add a new privilege." -msgstr "" - -msgid "Add members to a privilege." -msgstr "" - -msgid "member role" -msgstr "" - -msgid "roles to add" -msgstr "" - -msgid "Add permissions to a privilege." -msgstr "" - -#, fuzzy -msgid "permission" -msgstr "Baimena" - -#, fuzzy -msgid "permissions" -msgstr "Baimenak" - -msgid "Number of permissions added" -msgstr "" - -msgid "Delete a privilege." -msgstr "" - -#, fuzzy -msgid "Search for privileges." -msgstr "Bilatu taldeak." - -#, fuzzy -msgid "Modify a privilege." -msgstr "Aldatu talde bat." - -#, fuzzy -msgid "Rename the privilege object" -msgstr "%(ldap_obj_name)s objektua berrizendatu" - -msgid "Remove members from a privilege" -msgstr "" - -msgid "roles to remove" -msgstr "" - -msgid "Remove permissions from a privilege." -msgstr "" - -msgid "Number of permissions removed" -msgstr "" - -msgid "Display information about a privilege." -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Group" -msgstr "Taldea" - -msgid "Manage password policy for specific group" -msgstr "" - -msgid "Max lifetime (days)" -msgstr "" - -msgid "Maximum password lifetime (in days)" -msgstr "" - -msgid "Min lifetime (hours)" -msgstr "" - -msgid "Minimum password lifetime (in hours)" -msgstr "" - msgid "History size" msgstr "Historiaren tamaina" -#, fuzzy -msgid "Password history size" -msgstr "Historiaren tamaina" +msgid "Home directory base" +msgstr "Direktorio nagusiaren oinarria" -msgid "Character classes" -msgstr "" - -msgid "Minimum number of character classes" -msgstr "" - -#, fuzzy -msgid "Min length" -msgstr "Erabiltzaile-izenaren gehienezko luzera" - -msgid "Minimum length of password" -msgstr "" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "" - -msgid "Max failures" -msgstr "" - -msgid "Consecutive failures before lockout" -msgstr "" - -msgid "Failure reset interval" -msgstr "" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "" - -msgid "Lockout duration" -msgstr "" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" - -msgid "Add a new group password policy." -msgstr "" - -msgid "Delete a group password policy." -msgstr "" - -#, fuzzy -msgid "Search for group password policies." -msgstr "Bilatu taldeak." - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" - -#, fuzzy -msgid "Modify a group password policy." -msgstr "Aldatu talde bat." - -msgid "Display information about password policy." -msgstr "" - -msgid "User" -msgstr "Erabiltzailea" - -msgid "Display effective policy for a specific user" -msgstr "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "RADIUS proxy server name" -msgstr "" - -#, fuzzy -msgid "A description of this RADIUS proxy server" -msgstr "Ostalari honen deskribapena" - -#, fuzzy -msgid "Server" -msgstr "IPA zerbitzaria" - -msgid "The hostname or IP (with or without port)" -msgstr "" - -msgid "Secret" -msgstr "" - -msgid "The secret used to encrypt data" -msgstr "" - -msgid "Timeout" -msgstr "" - -msgid "The total timeout across all retries (in seconds)" -msgstr "" - -#, fuzzy -msgid "Retries" -msgstr "sarrerak" - -msgid "The number of times to retry authentication" -msgstr "" - -#, fuzzy -msgid "User attribute" -msgstr "Atributua" - -msgid "The username attribute on the user object" -msgstr "" - -msgid "Add a new RADIUS proxy server." -msgstr "" - -msgid "Delete a RADIUS proxy server." -msgstr "" - -#, fuzzy -msgid "Search for RADIUS proxy servers." -msgstr "Bilatu taldeak." - -msgid "Modify a RADIUS proxy server." -msgstr "" - -msgid "Rename the RADIUS proxy server object" -msgstr "" - -msgid "Display information about a RADIUS proxy server." -msgstr "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Domain" -msgstr "" - -#, fuzzy -msgid "Add domain" -msgstr "Gehitu hainbat" - -#, fuzzy -msgid "Delete domain" -msgstr "E-posta domeinu lehenetsia" - -#, fuzzy -msgid "Modify realm domains." -msgstr "Aldatu talde bat." - -msgid "Force adding domain even if not in DNS" -msgstr "" - -msgid "Display the list of realm domains." -msgstr "" - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" - -#, fuzzy -msgid "Role name" -msgstr "Berrizendatu" - -#, fuzzy -msgid "A description of this role-group" -msgstr "Ostalari-talde honen deskribapena" - -msgid "Privileges" -msgstr "" - -#, fuzzy -msgid "Member services" -msgstr "Zerbitzuak" - -#, fuzzy -msgid "Add a new role." -msgstr "Gehitu eta itxi" - -msgid "Add members to a role." -msgstr "" - -#, fuzzy -msgid "member service" -msgstr "HBAC zerbitzua" - -#, fuzzy -msgid "services to add" -msgstr "Zerbitzuak" - -msgid "Add privileges to a role." -msgstr "" - -msgid "privilege" -msgstr "" - -msgid "privileges" -msgstr "" - -msgid "Number of privileges added" -msgstr "" - -#, fuzzy -msgid "Delete a role." -msgstr "Ezabatu taldea." - -#, fuzzy -msgid "Search for roles." -msgstr "Bilatu taldeak." - -#, fuzzy -msgid "Modify a role." -msgstr "Aldatu talde bat." - -#, fuzzy -msgid "Rename the role object" -msgstr "%(ldap_obj_name)s objektua berrizendatu" - -msgid "Remove members from a role." -msgstr "" - -#, fuzzy -msgid "services to remove" -msgstr "Zerbitzu-taldearen izena" - -msgid "Remove privileges from a role." -msgstr "" - -msgid "Number of privileges removed" -msgstr "" - -msgid "Display information about a role." -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -#, fuzzy -msgid "Self-service name" -msgstr "Zerbitzuaren izena" - -msgid "Attributes to which the permission applies." -msgstr "" - -msgid "Add a new self-service permission." -msgstr "" - -msgid "Delete a self-service permission." -msgstr "" - -msgid "Search for a self-service permission." -msgstr "" - -msgid "Modify a self-service permission." -msgstr "" - -msgid "Display information about a self-service permission." -msgstr "" - -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" - -msgid "SELinux User" -msgstr "" - -#, fuzzy -msgid "HBAC Rule" -msgstr "HBAC arauak" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "" - -#, fuzzy -msgid "Create a new SELinux User Map." -msgstr "Sortu talde berri bat." - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "" - -msgid "Delete a SELinux User Map." -msgstr "" - -msgid "Disable an SELinux User Map rule." -msgstr "" - -msgid "Enable an SELinux User Map rule." -msgstr "" - -#, fuzzy -msgid "Search for SELinux User Maps." -msgstr "Bilatu taldeak." - -msgid "Modify a SELinux User Map." -msgstr "" - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "" - -msgid "Display the properties of a SELinux User Map rule." -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -#, fuzzy -msgid "Service principal" -msgstr "Zerbitzuaren izena" - -msgid "PAC type" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" - -msgid "Add a new IPA new service." -msgstr "" - -msgid "force principal name even if not in DNS" -msgstr "" - -msgid "Add hosts that can manage this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Delete an IPA service." -msgstr "" - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -#, fuzzy -msgid "Search for IPA services." -msgstr "Bilatu taldeak." - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" - -msgid "Search for services with these managed by hosts." -msgstr "" - -msgid "Search for services without these managed by hosts." -msgstr "" - -msgid "Modify an existing IPA service." -msgstr "" - -msgid "Remove hosts that can manage this service." -msgstr "" - -msgid "Display information about an IPA service." -msgstr "" - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" - -#, fuzzy -msgid "Sudo Command" -msgstr "Sudo komandoak" - -#, fuzzy -msgid "A description of this command" -msgstr "Ostalari honen deskribapena" - -#, fuzzy -msgid "Sudo Command Groups" -msgstr "Sudo komando-taldea" - -#, fuzzy -msgid "Create new Sudo Command." -msgstr "Sudo komandoak" - -#, fuzzy -msgid "Delete Sudo Command." -msgstr "Sudo komandoak" - -#, fuzzy -msgid "Search for Sudo Commands." -msgstr "Sudo komandoak" - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" - -#, fuzzy -msgid "Modify Sudo Command." -msgstr "Sudo komandoak" - -#, fuzzy -msgid "Display Sudo Command." -msgstr "Sudo komandoak" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "Sudo Command Group" -msgstr "Sudo komando-taldea" - -#, fuzzy -msgid "Commands" -msgstr "Exekutatu komandoak" - -#, fuzzy -msgid "Member Sudo commands" -msgstr "Sudo komandoak" - -#, fuzzy -msgid "Create new Sudo Command Group." -msgstr "Sudo komando-taldea" - -#, fuzzy -msgid "Add members to Sudo Command Group." -msgstr "Sudo komando-taldea" - -#, fuzzy -msgid "member sudo command" -msgstr "Sudo komandoak" - -#, fuzzy -msgid "sudo commands to add" -msgstr "Sudo komandoak" - -#, fuzzy -msgid "Delete Sudo Command Group." -msgstr "Sudo komando-taldea" - -#, fuzzy -msgid "Search for Sudo Command Groups." -msgstr "Sudo komando-taldea" - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" - -#, fuzzy -msgid "Modify Sudo Command Group." -msgstr "Sudo komando-taldea" - -#, fuzzy -msgid "Remove members from Sudo Command Group." -msgstr "Sudo komando-taldea" - -#, fuzzy -msgid "sudo commands to remove" -msgstr "Sudo komando-taldea" - -#, fuzzy -msgid "Display Sudo Command Group." -msgstr "Sudo komando-taldea" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -#, fuzzy -msgid "NetBIOS name" -msgstr "ACI izen berria" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -#, fuzzy -msgid "Domain name" -msgstr "Komandoaren izena" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -#, fuzzy -msgid "Delete a trust." -msgstr "Ezabatu taldea." - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -#, fuzzy -msgid "Search for trusts." -msgstr "Bilatu taldeak." - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "Izena" - -msgid "Last name" -msgstr "Abizena" - -msgid "Full name" -msgstr "Izen osoa" - -msgid "Display name" -msgstr "Bistaratu izena" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Email address" -msgstr "E-posta helbidea" - -msgid "Prompt to set the user password" -msgstr "" - -#, fuzzy -msgid "Generate a random user password" -msgstr "Ausazko pasahitza" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "Kalea" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "Telefono-zenbakia" - -msgid "Mobile Telephone Number" -msgstr "Mugikor-zenbakia" - -msgid "Pager Number" -msgstr "Bilagailu-zenbakia" - -msgid "Fax Number" -msgstr "Fax-zenbakia" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Car License" -msgstr "" - -#, fuzzy -msgid "Account disabled" -msgstr "Kontuaren ezarpenak" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -#, fuzzy -msgid "RADIUS proxy configuration" -msgstr "Konfigurazioa" - -msgid "RADIUS proxy username" -msgstr "" - -#, fuzzy -msgid "Department Number" -msgstr "Bilagailu-zenbakia" - -#, fuzzy -msgid "Employee Number" -msgstr "Telefono-zenbakia" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -#, fuzzy -msgid "Add a new user." -msgstr "Gehitu eta itxi" - -#, fuzzy -msgid "Don't create user private group" -msgstr "Erabiltzaile-talde lehenetsia" - -#, fuzzy -msgid "Delete a user." -msgstr "Ezabatu taldea." - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -#, fuzzy -msgid "Search for users." -msgstr "Bilatu taldeak." - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a user." -msgstr "Aldatu talde bat." - -#, fuzzy -msgid "Rename the user object" -msgstr "%(ldap_obj_name)s objektua berrizendatu" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -#, fuzzy -msgid "Command category" -msgstr "Komandoaren izena" - -msgid "Command category the rule applies to" -msgstr "" - -msgid "RunAs User category" -msgstr "" - -msgid "RunAs User category the rule applies to" -msgstr "" - -msgid "RunAs Group category" -msgstr "" - -msgid "RunAs Group category the rule applies to" -msgstr "" - -#, fuzzy -msgid "Sudo order" -msgstr "Sudo komandoak" - -msgid "integer to order the Sudo rules" -msgstr "" - -msgid "External User" -msgstr "Kanpoko erabiltzailea" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -#, fuzzy -msgid "Host Masks" -msgstr "Ostalariak" - -#, fuzzy -msgid "Sudo Allow Commands" -msgstr "Sudo komandoak" - -#, fuzzy -msgid "Sudo Deny Commands" -msgstr "Sudo komandoak" - -#, fuzzy -msgid "Sudo Allow Command Groups" -msgstr "Sudo komando-taldea" - -#, fuzzy -msgid "Sudo Deny Command Groups" -msgstr "Sudo komando-taldea" - -#, fuzzy -msgid "RunAs Users" -msgstr "Exekutatu kanpoko erabiltzaile bezala" - -msgid "Run as a user" -msgstr "" - -msgid "Groups of RunAs Users" -msgstr "" - -msgid "Run as any user within a specified group" -msgstr "" - -msgid "RunAs External User" -msgstr "Exekutatu kanpoko erabiltzaile bezala" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -#, fuzzy -msgid "External Groups of RunAs Users" -msgstr "Kanpoko erabiltzailea" - -msgid "External Groups of users that the command can run as" -msgstr "" - -#, fuzzy -msgid "RunAs Groups" +msgid "Host Groups" msgstr "Ostalari-taldeak" -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -msgid "RunAs External Group" -msgstr "Exekutatu kanpoko talde bezala" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -msgid "Sudo Option" -msgstr "Sudo aukera" - -#, fuzzy -msgid "Create new Sudo Rule." -msgstr "Sortu talde berri bat." - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "member sudo command group" -msgstr "Sudo komando-taldea" - -#, fuzzy -msgid "sudo command groups to add" -msgstr "Sudo komando-taldea" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "" - -msgid "Add group for Sudo to execute as." -msgstr "" - -msgid "Add users and groups for Sudo to execute as." -msgstr "" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "Delete Sudo Rule." -msgstr "Ezabatu taldea." - -msgid "Disable a Sudo Rule." -msgstr "" - -msgid "Enable a Sudo Rule." -msgstr "" - -#, fuzzy -msgid "Search for Sudo Rule." -msgstr "Bilatu taldeak." - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -#, fuzzy -msgid "Modify Sudo Rule." -msgstr "Aldatu talde bat." - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "sudo command groups to remove" -msgstr "Sudo komando-taldea" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "Remove an option from Sudo Rule." -msgstr "" - -msgid "Remove group for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "Display Sudo Rule." -msgstr "Bistaratu izena" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -#, fuzzy -msgid "ACL name" -msgstr "ACI izena" - -msgid "Profile category" -msgstr "" - -msgid "Profile category the ACL applies to" -msgstr "" - -msgid "User category the ACL applies to" -msgstr "" - -msgid "Host category the ACL applies to" -msgstr "" - -msgid "Service category the ACL applies to" -msgstr "" - -msgid "Profiles" -msgstr "" - -#, fuzzy -msgid "Create a new CA ACL." -msgstr "Sortu talde berri bat." - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "" - -msgid "Add profiles to a CA ACL." -msgstr "" - -#, fuzzy -msgid "member Certificate Profile" -msgstr "Ziurtagiri berria" - -msgid "Certificate Profiles to add" -msgstr "" - -msgid "Add services to a CA ACL." -msgstr "" - -msgid "Add users and groups to a CA ACL." -msgstr "" - -msgid "Delete a CA ACL." -msgstr "" - -msgid "Disable a CA ACL." -msgstr "" - -msgid "Enable a CA ACL." -msgstr "" - -#, fuzzy -msgid "Search for CA ACLs." -msgstr "Bilatu taldeak." - -#, fuzzy -msgid "Modify a CA ACL." -msgstr "Aldatu talde bat." - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "" - -msgid "Remove profiles from a CA ACL." -msgstr "" - -msgid "Certificate Profiles to remove" -msgstr "" - -msgid "Remove services from a CA ACL." -msgstr "" - -msgid "Remove users and groups from a CA ACL." -msgstr "" - -msgid "Display the properties of a CA ACL." -msgstr "" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -#, fuzzy -msgid "Profile description" -msgstr "deskribapena" - -#, fuzzy -msgid "Brief description of this profile" -msgstr "Ostalari honen deskribapena" - -#, fuzzy -msgid "Store issued certificates" -msgstr "Ziurtagiri berria" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -#, fuzzy -msgid "Search for Certificate Profiles." -msgstr "Bilatu taldeak." - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" - -msgid "Query current Domain Level." -msgstr "" - -msgid "Current domain level:" -msgstr "" - -msgid "Change current Domain Level." -msgstr "" - -msgid "Domain Level" -msgstr "" - -msgid "Add certificates to host entry" -msgstr "" - -msgid "Remove certificates from host entry" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "Fallback to AD DC LDAP" -msgstr "" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" - -#, fuzzy -msgid "Add to default group" -msgstr "Erabiltzaile-talde lehenetsia" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" - -#, fuzzy -msgid "Search scope" -msgstr "Bilatu" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Target DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" - -msgid "Origin DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -#, fuzzy -msgid "Server name" -msgstr "Zerbitzuaren izena" - -#, fuzzy -msgid "IPA server hostname" -msgstr "Erabili beharreko IPA zerbitzaria" - -msgid "Managed suffix" -msgstr "" - -msgid "Min domain level" -msgstr "" - -msgid "Minimum domain level" -msgstr "" - -msgid "Max domain level" -msgstr "" - -msgid "Maximum domain level" -msgstr "" - -#, fuzzy -msgid "Delete IPA server." -msgstr "IPA zerbitzaria" - -#, fuzzy -msgid "Search for IPA servers." -msgstr "Bilatu taldeak." - -#, fuzzy -msgid "Show IPA server." -msgstr "IPA zerbitzaria" - -msgid "Add new certificates to a service" -msgstr "" - -msgid "Remove certificates from a service" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed Target" -msgstr "" - -#, fuzzy -msgid "Create a new service delegation rule." -msgstr "Sortu talde berri bat." - -msgid "Add member to a named service delegation rule." -msgstr "" - -msgid "member principal" -msgstr "" - -msgid "principal to add" -msgstr "" - -msgid "Add target to a named service delegation rule." -msgstr "" - -msgid "member service delegation target" -msgstr "" - -msgid "service delegation targets to add" -msgstr "" - -#, fuzzy -msgid "Delete service delegation." -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -msgid "Search for service delegations rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" - -msgid "Remove member from a named service delegation rule." -msgstr "" - -msgid "principal to remove" -msgstr "" - -msgid "Remove target from a named service delegation rule." -msgstr "" - -msgid "service delegation targets to remove" -msgstr "" - -msgid "Display information about a named service delegation rule." -msgstr "" - -msgid "Create a new service delegation target." -msgstr "" - -msgid "Add member to a named service delegation target." -msgstr "" - -msgid "Delete service delegation target." -msgstr "" - -msgid "Search for service delegation target." -msgstr "" - -msgid "Remove member from a named service delegation target." -msgstr "" - -msgid "Display information about a named service delegation target." -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" - -msgid "Activate a stage user." -msgstr "" - -msgid "Add a new stage user." -msgstr "" - -msgid "Create Stage user in from a delete user" -msgstr "" - -#, fuzzy -msgid "Delete a stage user." -msgstr "Ezabatu taldea." - -#, fuzzy -msgid "Search for stage users." -msgstr "Bilatu taldeak." - -msgid "Search for stage users with these member of groups." -msgstr "" - -msgid "Search for stage users without these member of groups." -msgstr "" - -msgid "Search for stage users with these member of netgroups." -msgstr "" - -msgid "Search for stage users without these member of netgroups." -msgstr "" - -msgid "Search for stage users with these member of roles." -msgstr "" - -msgid "Search for stage users without these member of roles." -msgstr "" - -msgid "Search for stage users with these member of HBAC rules." -msgstr "" - -msgid "Search for stage users without these member of HBAC rules." -msgstr "" - -msgid "Search for stage users with these member of sudo rules." -msgstr "" - -msgid "Search for stage users without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a stage user." -msgstr "Aldatu talde bat." - -#, fuzzy -msgid "Rename the stage user object" -msgstr "%(ldap_obj_name)s objektua berrizendatu" - -msgid "Display information about a stage user." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" - -#, fuzzy -msgid "Segment name" -msgstr "Zerbitzuaren izena" - -msgid "Arbitrary string identifying the segment" -msgstr "" - -msgid "Left node" -msgstr "" - -msgid "Left replication node - an IPA server" -msgstr "" - -msgid "Right node" -msgstr "" - -msgid "Right replication node - an IPA server" -msgstr "" - -msgid "Connectivity" -msgstr "" - -msgid "Direction of replication between left and right replication node" -msgstr "" - -#, fuzzy -msgid "Attributes to strip" -msgstr "Atributuak" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" - -#, fuzzy -msgid "Attributes to replicate" -msgstr "Atributuak" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" - -msgid "Attributes for total update" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" - -msgid "Session timeout" -msgstr "" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" - -msgid "Replication agreement enabled" -msgstr "" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" - -#, fuzzy -msgid "Suffix name" -msgstr "fitxategi-izena" - -msgid "LDAP suffix to be managed" -msgstr "" - -msgid "Add a new segment." -msgstr "" - -#, fuzzy -msgid "Delete a segment." -msgstr "Ezabatu taldea." - -#, fuzzy -msgid "Search for topology segments." -msgstr "Bilatu taldeak." - -#, fuzzy -msgid "Modify a segment." -msgstr "Aldatu talde bat." - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" - -msgid "Initialize left node" -msgstr "" - -msgid "Initialize right node" -msgstr "" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "" - -#, fuzzy -msgid "Display a segment." -msgstr "Bistaratu izena" - -msgid "Add a new topology suffix to be managed." -msgstr "" - -msgid "Delete a topology suffix." -msgstr "" - -#, fuzzy -msgid "Search for topology suffices." -msgstr "Bilatu taldeak." - -#, fuzzy -msgid "Modify a topology suffix." -msgstr "Aldatu talde bat." - -msgid "Show managed suffix." -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "Preserved user" -msgstr "" - -msgid "Add one or more certificates to the user entry" -msgstr "" - -msgid "Remove one or more certificates to the user entry" -msgstr "" - -msgid "Move deleted user into staged area" -msgstr "" - -msgid "Undelete a delete user account." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -#, fuzzy -msgid "Vault name" -msgstr "Abizena" - -#, fuzzy -msgid "Vault description" -msgstr "deskribapena" - -#, fuzzy -msgid "Vault type" -msgstr "Arau-mota" - -msgid "Salt" -msgstr "" - -#, fuzzy -msgid "Vault salt" -msgstr "Shell lehenetsia" - -msgid "Public key" -msgstr "" - -msgid "Vault public key" -msgstr "" - -msgid "Owner users" -msgstr "" - -#, fuzzy -msgid "Owner groups" -msgstr "Erabiltzaile-taldea" - -#, fuzzy -msgid "Owner services" -msgstr "Zerbitzuak" - -msgid "Failed owners" -msgstr "" - -#, fuzzy -msgid "Vault service" -msgstr "HBAC zerbitzua" - -msgid "Shared vault" -msgstr "" - -#, fuzzy -msgid "Vault user" -msgstr "Erabiltzaile-talde lehenetsia" - -#, fuzzy -msgid "Transport Certificate" -msgstr "Ziurtagiria" - -msgid "Service name of the service vault" -msgstr "" - -msgid "Username of the user vault" -msgstr "" - -msgid "Add members to a vault." -msgstr "" - -msgid "Add owners to a vault." -msgstr "" - -msgid "owner user" -msgstr "" - -#, fuzzy -msgid "owner group" -msgstr "Erabiltzaile-taldea" - -#, fuzzy -msgid "owner service" -msgstr "HBAC zerbitzua" - -msgid "Owners that could not be added" -msgstr "" - -msgid "Number of owners added" -msgstr "" - -msgid "Session key wrapped with transport certificate" -msgstr "" - -msgid "Vault data encrypted with session key" -msgstr "" - -msgid "Nonce" -msgstr "" - -#, fuzzy -msgid "Delete a vault." -msgstr "Ezabatu taldea." - -#, fuzzy -msgid "Search for vaults." -msgstr "Bilatu taldeak." - -msgid "List all service vaults" -msgstr "" - -msgid "List all user vaults" -msgstr "" - -msgid "Remove members from a vault." -msgstr "" - -msgid "Remove owners from a vault." -msgstr "" - -msgid "Owners that could not be removed" -msgstr "" - -msgid "Number of owners removed" -msgstr "" - -msgid "Display information about a vault." -msgstr "" - -#, fuzzy -msgid "Show vault configuration." -msgstr "Konfigurazioa" - -msgid "Output file to store the transport certificate" -msgstr "" - -msgid "Add owners to a vault container." -msgstr "" - -msgid "Delete a vault container." -msgstr "" - -msgid "Remove owners from a vault container." -msgstr "" - -msgid "Display information about a vault container." -msgstr "" - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "" - -#, fuzzy -msgid "Hostname (FQDN)" +msgid "Host Name" msgstr "Ostalari-izena" -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" +msgid "Host name" +msgstr "Ostalari-izena" -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "Ostalariaren sistema eragilea eta bertsioa (adibidez, \"Fedora 9\")" -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" +msgid "Host-group" +msgstr "Ostalari-taldea" -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" +msgid "Hostname" +msgstr "Ostalari-izena" -msgid "Managed suffixes" -msgstr "" +msgid "Hosts" +msgstr "Ostalariak" -msgid "Check connection to remote IPA server." -msgstr "" +msgid "IPA Server" +msgstr "IPA zerbitzaria" -#, fuzzy -msgid "Remote server name" -msgstr "Zerbitzuaren izena" - -#, fuzzy -msgid "Remote IPA server hostname" +msgid "IPA Server to use" msgstr "Erabili beharreko IPA zerbitzaria" -msgid "suffix" -msgstr "" - -msgid "Search for servers with these managed suffixes." -msgstr "" - -msgid "Search for servers without these managed suffixes." -msgstr "" - -msgid "Add a manager to the stage user entry" -msgstr "" - -msgid "Remove a manager to the stage user entry" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -msgid "Managed LDAP suffix DN" -msgstr "" - -#, fuzzy -msgid "Search for topology suffixes." -msgstr "Bilatu taldeak." - -msgid "Add a manager to the user entry" -msgstr "" - -msgid "Remove a manager to the user entry" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Comma-separated list of attributes" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" - -msgid "DNS class" -msgstr "" - -msgid "Comma-separated list of raw A records" -msgstr "" - -msgid "Comma-separated list of raw AAAA records" -msgstr "" - -msgid "Comma-separated list of raw A6 records" -msgstr "" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "" - -msgid "Comma-separated list of raw APL records" -msgstr "" - -msgid "Comma-separated list of raw CERT records" -msgstr "" - -msgid "Comma-separated list of raw CNAME records" -msgstr "" - -msgid "Comma-separated list of raw DHCID records" -msgstr "" - -msgid "Comma-separated list of raw DLV records" -msgstr "" - -msgid "Comma-separated list of raw DNAME records" -msgstr "" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "" - -msgid "Comma-separated list of raw DS records" -msgstr "" - -msgid "Comma-separated list of raw HIP records" -msgstr "" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "" - -msgid "Comma-separated list of raw KEY records" -msgstr "" - -msgid "KEY Flags" -msgstr "" - -msgid "KEY Protocol" -msgstr "" - -msgid "Protocol" -msgstr "" - -msgid "KEY Algorithm" -msgstr "" - -msgid "KEY Public Key" -msgstr "" - -msgid "Public Key" -msgstr "" - -msgid "Comma-separated list of raw KX records" -msgstr "" - -msgid "Comma-separated list of raw LOC records" -msgstr "" - -msgid "Comma-separated list of raw MX records" -msgstr "" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "" - -msgid "Comma-separated list of raw NS records" -msgstr "" - -msgid "Comma-separated list of raw NSEC records" -msgstr "" - -#, fuzzy -msgid "NSEC Next Domain Name" -msgstr "NIS domeinu-izena" - -#, fuzzy -msgid "Next Domain Name" -msgstr "NIS domeinu-izena" - -msgid "NSEC Type Map" -msgstr "" - -#, fuzzy -msgid "Type Map" -msgstr "Mota" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "" - -msgid "Comma-separated list of raw PTR records" -msgstr "" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "" - -msgid "RRSIG Type Covered" -msgstr "" - -msgid "Type Covered" -msgstr "" - -msgid "RRSIG Algorithm" -msgstr "" - -msgid "RRSIG Labels" -msgstr "" - -msgid "Labels" -msgstr "" - -msgid "RRSIG Original TTL" -msgstr "" - -msgid "Original TTL" -msgstr "" - -msgid "RRSIG Signature Expiration" -msgstr "" - -msgid "Signature Expiration" -msgstr "" - -msgid "RRSIG Signature Inception" -msgstr "" - -msgid "Signature Inception" -msgstr "" - -msgid "RRSIG Key Tag" -msgstr "" - -msgid "RRSIG Signer's Name" -msgstr "" - -msgid "Signer's Name" -msgstr "" - -msgid "RRSIG Signature" -msgstr "" - -msgid "Signature" -msgstr "" - -msgid "Comma-separated list of raw RP records" -msgstr "" - -msgid "Comma-separated list of raw SIG records" -msgstr "" - -msgid "SIG Type Covered" -msgstr "" - -msgid "SIG Algorithm" -msgstr "" - -msgid "SIG Labels" -msgstr "" - -msgid "SIG Original TTL" -msgstr "" - -msgid "SIG Signature Expiration" -msgstr "" - -msgid "SIG Signature Inception" -msgstr "" - -msgid "SIG Key Tag" -msgstr "" - -msgid "SIG Signer's Name" -msgstr "" - -msgid "SIG Signature" -msgstr "" - -msgid "Comma-separated list of raw SPF records" -msgstr "" - -msgid "Comma-separated list of raw SRV records" -msgstr "" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "" - -msgid "Comma-separated list of raw TA records" -msgstr "" - -msgid "Comma-separated list of raw TKEY records" -msgstr "" - -msgid "Comma-separated list of raw TSIG records" -msgstr "" - -msgid "Comma-separated list of raw TXT records" -msgstr "" - -msgid "SOA time to live" -msgstr "" - -msgid "SOA record time to live" -msgstr "" - -msgid "SOA class" -msgstr "" - -msgid "SOA record class" -msgstr "" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" - -msgid "Consume an entitlement." -msgstr "" - -msgid "Quantity" -msgstr "" - -#, fuzzy -msgid "Search for entitlement accounts." -msgstr "Bilatu taldeak." - -msgid "Retrieve the entitlement certs." -msgstr "" - -msgid "Import an entitlement certificate." -msgstr "" - -msgid "UUID" -msgstr "" - -msgid "Enrollment UUID" -msgstr "" - -msgid "Register to the entitlement system." -msgstr "" - -msgid "Username" -msgstr "Erabiltzaile-izena" - -msgid "Enrollment UUID (not implemented)" -msgstr "" - -#, fuzzy -msgid "Registration password" -msgstr "Berrezarri pasahitza" - -msgid "Display current entitlements." -msgstr "" - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" - -msgid "comma-separated list of users to add" -msgstr "" - -msgid "comma-separated list of groups to add" -msgstr "" - -msgid "comma-separated list of users to remove" -msgstr "" - -msgid "comma-separated list of groups to remove" -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Source host category" -msgstr "" - -msgid "Source host category the rule applies to" -msgstr "" - -msgid "Source Hosts" -msgstr "" - -#, fuzzy -msgid "Source Host Groups" -msgstr "Ostalari-taldeak" - -msgid "comma-separated list of hosts to add" -msgstr "" - -msgid "comma-separated list of host groups to add" -msgstr "" - -msgid "comma-separated list of HBAC services to add" -msgstr "" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "" - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "" - -msgid "comma-separated list of hosts to remove" -msgstr "" - -msgid "comma-separated list of host groups to remove" -msgstr "" - -msgid "comma-separated list of HBAC services to remove" -msgstr "" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" - -msgid "Source host" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "comma-separated list of netgroups to add" -msgstr "" - -msgid "comma-separated list of netgroups to remove" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" - -#, fuzzy -msgid "Target members of a group" -msgstr "Helburuko taldea" - -msgid "User group to apply permissions to" -msgstr "" - -msgid "comma-separated list of privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI" -msgstr "" - -#, fuzzy -msgid "Permission type" -msgstr "Baimena" - -msgid "comma-separated list of privileges to remove" -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "comma-separated list of roles to add" -msgstr "" - -msgid "comma-separated list of permissions" -msgstr "" - -msgid "comma-separated list of roles to remove" -msgstr "" - -msgid "comma-separated list of privileges" -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "comma-separated list of sudo commands to add" -msgstr "" - -msgid "comma-separated list of sudo commands to remove" -msgstr "" - -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" - -msgid "comma-separated list of sudo command groups to add" -msgstr "" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "" - -msgid "Failed members" -msgstr "" - -msgid "Failed source hosts/hostgroups" -msgstr "" - -#, fuzzy -msgid "Failed hosts/hostgroups" -msgstr "Ostalari-taldearen izena" - -#, fuzzy -msgid "Failed users/groups" -msgstr "Erabiltzaile-talde lehenetsia" - -msgid "Failed service/service groups" -msgstr "" - -msgid "Failed to remove" -msgstr "" - -msgid "Failed RunAs" -msgstr "" - -msgid "Failed RunAsGroup" -msgstr "" - -msgid "Failed profiles" -msgstr "" - -msgid "Failed CAs" -msgstr "" - -msgid "Failed member manager" -msgstr "" - -msgid "Failed managedby" -msgstr "" - -msgid "Failed allowed to retrieve keytab" -msgstr "" - -msgid "Failed allowed to create keytab" -msgstr "" - -msgid "Failed targets" -msgstr "" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "" - -msgid "an internal error has occurred" -msgstr "barne-errore bat gertatu da" - -#, fuzzy, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "barne-errore bat gertatu da" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "" - #, python-format msgid "Invalid JSON-RPC request: %(error)s" msgstr "Baliogabeko JSON-RPC eskaera: %(error)s" -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" +msgid "Invalid LDAP URI." +msgstr "LDAP URI baliogabea." #, python-format msgid "Kerberos error: %(major)s/%(minor)s" msgstr "Kerberos errorea: %(major)s/%(minor)s" -msgid "did not receive Kerberos credentials" -msgstr "" +msgid "LDAP password" +msgstr "LDAP pasahitza" -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -msgid "No credentials cache found" -msgstr "" - -msgid "Ticket expired" -msgstr "" - -msgid "Credentials cache permissions incorrect" -msgstr "" - -msgid "Bad format in credentials cache" -msgstr "" - -msgid "Cannot resolve KDC for requested realm" -msgstr "" - -msgid "Session error" -msgstr "" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#, python-format -msgid "'%(name)s' is required" -msgstr "" - -#, fuzzy, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "Baliogabeko JSON-RPC eskaera: %(error)s" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - -msgid "Passwords do not match" -msgstr "Pasahitzak ez datoz bat" - -#, fuzzy -msgid "Command not implemented" -msgstr "Komandoaren izena" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -msgid "This entry already exists" -msgstr "Sarrera hau dagoeneko existitzen da" - -msgid "You must enroll a host in order to create a host service" -msgstr "" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" - -msgid "This command requires root access" -msgstr "" - -msgid "This is already a posix group" -msgstr "" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -#, fuzzy -msgid "This entry is already enabled" -msgstr "Sarrera hau dagoeneko existitzen da" - -#, fuzzy -msgid "This entry is already disabled" -msgstr "Sarrera hau dagoeneko existitzen da" - -msgid "This entry cannot be enabled or disabled" -msgstr "" - -msgid "This entry is not a member" -msgstr "" - -msgid "A group may not be a member of itself" -msgstr "" - -#, fuzzy -msgid "This entry is already a member" -msgstr "Sarrera hau dagoeneko existitzen da" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "" - -msgid "A group may not be added as a member of itself" -msgstr "" - -#, fuzzy -msgid "The default users group cannot be removed" -msgstr "Erabiltzaile-talde lehenetsia" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -msgid "This group already allows external members" -msgstr "" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "change collided with another change" -msgstr "" - -msgid "no modifications to be performed" -msgstr "" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(desc)s: %(info)s" - -msgid "limits exceeded for this query" -msgstr "" - -#, python-format -msgid "%(info)s" -msgstr "%(info)s" - -msgid "modifying primary key is not allowed" -msgstr "" - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "" - -#, fuzzy, python-format -msgid "Certificate format error: %(error)s" -msgstr "Sintaxi-errorea: %(error)s" - -msgid "Already registered" -msgstr "" - -msgid "Not registered yet" -msgstr "" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, fuzzy, python-format -msgid "%(exception)s" -msgstr "%(reason)s" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -#, python-format -msgid "%(count)d variables" -msgstr "" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" -msgstr[1] "" - -msgid "A dictionary representing an LDAP entry" -msgstr "" - -#, fuzzy -msgid "A list of LDAP entries" -msgstr "ACI balioen zerrenda bat" - -msgid "All commands should at least have a result" -msgstr "" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "" - -msgid "Passwords do not match!" -msgstr "Pasahitzak ez datoz bat!" - -msgid "No matching entries found" -msgstr "" - -#, fuzzy -msgid "Topic or Command" -msgstr "Sudo komandoak" - -msgid "The topic or command name." -msgstr "" - -#, fuzzy -msgid "Topic commands:" -msgstr "Sudo komandoak" - -msgid "To get command help, use:" -msgstr "" - -msgid " ipa --help" -msgstr "" - -msgid "Command name" -msgstr "Komandoaren izena" - -msgid "Positional arguments" -msgstr "" - -#, python-format -msgid "Same as --%s" -msgstr "" - -msgid "Deprecated options" -msgstr "" - -msgid "No file to read" -msgstr "" - -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - -#, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - -msgid "Filename is empty" -msgstr "" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -#, fuzzy -msgid "invalid domain name" -msgstr "NIS domeinu-izena" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "IP helbide formatu baliogabea" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "incorrect type" -msgstr "" - -msgid "Only one value is allowed" -msgstr "" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "" - -msgid "must be an integer" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -msgid "must be a decimal number" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#, fuzzy, python-format -msgid "can be at most %(maxvalue)s" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -msgid "must be binary data" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -#, fuzzy -msgid "must be a certificate" -msgstr "Ziurtagiri berria" - -msgid "must be a certificate signing request" -msgstr "" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "" - -msgid "Leading and trailing spaces are not allowed" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "" - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "" - -#, fuzzy, python-format -msgid "must be '%(value)s'" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -#, python-format -msgid "must be one of %(values)s" -msgstr "" - -msgid "must be datetime value" -msgstr "" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -msgid "must be DNS name" -msgstr "" - -msgid "must be absolute" -msgstr "" - -msgid "must be relative" -msgstr "" - -msgid "must be dictionary" -msgstr "" - -msgid "must be Kerberos principal" -msgstr "" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -msgid "Service principal is required" -msgstr "" - -#, fuzzy -msgid "must be at least 0" -msgstr "Ziurtagiri berria" - -#, fuzzy -msgid "invalid valid hex" -msgstr "NIS domeinu-izena" - -#, fuzzy -msgid "invalid serial number 0" -msgstr "Serie-zenbakia" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "" - -#, python-format -msgid "objectclass %s not found" -msgstr "" - -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "Failed to authenticate to CA REST API" -msgstr "" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "" - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -msgid "Automount Location" -msgstr "" - -#, fuzzy, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, fuzzy, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "\"%(value)s\" ostalari-taldea gehituta" - -#, fuzzy, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, fuzzy, python-format -msgid "key named %(key)s already exists" -msgstr "Sarrera hau dagoeneko existitzen da" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, fuzzy, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "\"%(value)s\" ostalari-taldea gehituta" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -#, fuzzy -msgid "Certificate Profile" -msgstr "Ziurtagiria" - -#, fuzzy -msgid "Certificate Profiles" -msgstr "Ziurtagiria" - -#, fuzzy -msgid "Profile configuration" -msgstr "Konfigurazioa" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, fuzzy, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -msgid "ACI" -msgstr "ACI" - -#, fuzzy, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "" -"\n" -"DNS server configuration\n" -msgstr "Konfigurazioa" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -#, fuzzy -msgid "DNS server" -msgstr "IPA zerbitzaria" - -msgid "DNS servers" -msgstr "" - -#, fuzzy -msgid "DNS Servers" -msgstr "IPA zerbitzaria" - -#, fuzzy -msgid "DNS Server" -msgstr "IPA zerbitzaria" - -#, fuzzy -msgid "DNS Server name" -msgstr "Zerbitzuaren izena" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, fuzzy, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, fuzzy -msgid "Search for DNS servers." -msgstr "Bilatu taldeak." - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "IPA DNS Server is not installed" -msgstr "Erabili beharreko IPA zerbitzaria" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, fuzzy, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -msgid "Delete a DNS server" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "taldeak" - -msgid "User Group" -msgstr "Erabiltzaile-taldea" - -#, fuzzy, python-format -msgid "Added group \"%(value)s\"" -msgstr "\"%(value)s\" ostalari-taldea gehituta" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy -msgid "privileged group" -msgstr "Helburuko taldea" - -#, fuzzy, python-format -msgid "Modified group \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, fuzzy, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -#, fuzzy -msgid "Not a managed group" -msgstr "Sortu talde berri bat." - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -#, fuzzy -msgid "HBAC services" -msgstr "HBAC zerbitzua" - -msgid "HBAC Services" -msgstr "HBAC zerbitzuak" - -#, fuzzy -msgid "HBAC Service" -msgstr "HBAC zerbitzuak" - -#, fuzzy, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, fuzzy, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "HBAC service group" -msgstr "HBAC zerbitzua" - -#, fuzzy -msgid "HBAC service groups" -msgstr "HBAC zerbitzu-taldearen deskribapena" - -#, fuzzy -msgid "HBAC Service Groups" -msgstr "Zerbitzu-taldeak" - -#, fuzzy -msgid "HBAC Service Group" -msgstr "Zerbitzu-taldeak" - -#, fuzzy, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, fuzzy, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, fuzzy, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "HBAC zerbitzu-taldearen deskribapena" -msgstr[1] "HBAC zerbitzu-taldearen deskribapena" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -msgid "host groups" -msgstr "Ostalari-taldeak" - -#, fuzzy -msgid "Host Group" -msgstr "Ostalari-taldeak" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ostalari-taldea gehituta" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy -msgid "hostgroup" -msgstr "Ostalari-taldea" - -msgid "privileged hostgroup" -msgstr "" - -#, fuzzy, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -#, fuzzy -msgid "local domain range" -msgstr "NIS domeinu-izena" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -#, fuzzy -msgid "Auto private groups" -msgstr "Bilatu taldeak." - -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "" -"Modify ID range.\n" -"\n" -msgstr "Aldatu talde bat." - -#, fuzzy, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "" - -msgid "locations" -msgstr "" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -#, fuzzy -msgid "Location name" +msgid "Last name" msgstr "Abizena" -#, fuzzy -msgid "IPA location name" -msgstr "NIS domeinu-izena" +msgid "Manager" +msgstr "Kudeatzailea" -#, fuzzy -msgid "IPA Location description" -msgstr "deskribapena" - -#, fuzzy -msgid "Servers" -msgstr "Zerbitzuak" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, fuzzy, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -msgid "Delete an IPA location." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "IPA Server" -msgstr "IPA zerbitzaria" - -msgid "Modify information about an IPA location." -msgstr "" - -#, fuzzy, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, fuzzy -msgid "Search for IPA locations." -msgstr "Bilatu taldeak." - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -#, fuzzy -msgid "netgroups" -msgstr "taldeak" - -#, fuzzy -msgid "Netgroups" -msgstr "taldeak" - -#, fuzzy -msgid "Netgroup" -msgstr "taldea" - -#, fuzzy, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "\"%(value)s\" ostalari-taldea gehituta" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "One time password commands" -msgstr "" - -#, fuzzy -msgid "OTP configuration options" -msgstr "Konfigurazioa" - -#, fuzzy -msgid "OTP Configuration" -msgstr "Konfigurazioa" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -#, fuzzy -msgid "URI" -msgstr "UID" - -#, fuzzy, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -msgid "cannot be empty" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, fuzzy, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "PKINIT" - -#, fuzzy -msgid "PKINIT status" -msgstr "PKINIT" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -#, fuzzy -msgid "invalid port number" -msgstr "Serie-zenbakia" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -#, fuzzy -msgid "RADIUS Servers" -msgstr "IPA zerbitzaria" - -#, fuzzy -msgid "RADIUS Server" -msgstr "IPA zerbitzaria" - -#, fuzzy, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, fuzzy, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -#, fuzzy -msgid "Realm domains" -msgstr "E-posta domeinu lehenetsia" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "Role" -msgstr "" - -#, fuzzy, python-format -msgid "Added role \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -msgid "Modified role \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "self service permission" -msgstr "HBAC zerbitzuaren deskribapena" - -#, fuzzy -msgid "self service permissions" -msgstr "HBAC zerbitzuaren deskribapena" - -#, fuzzy -msgid "Self Service Permissions" -msgstr "Baimenak" - -#, fuzzy -msgid "Self Service Permission" -msgstr "Baimena" - -#, fuzzy, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, fuzzy, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "" -"\n" -"IPA server roles\n" -msgstr "Erabili beharreko IPA zerbitzaria" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -#, fuzzy -msgid "IPA Server Roles" -msgstr "Erabili beharreko IPA zerbitzaria" - -#, fuzzy -msgid "IPA Server Role" -msgstr "Erabili beharreko IPA zerbitzaria" - -#, fuzzy -msgid "IPA server role name" -msgstr "Erabili beharreko IPA zerbitzaria" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "IPA role name" -msgstr "" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, fuzzy, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -#, fuzzy -msgid "Service delegation target" -msgstr "Zerbitzu-taldearen izena" - -#, fuzzy, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -#, fuzzy -msgid "Subordinate id description" -msgstr "deskribapena" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -msgid "SubUID range size" -msgstr "" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -msgid "SubGID range size" -msgstr "" - -msgid "Subordinate group ID count" -msgstr "" - -#, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "" - -#, python-format -msgid "'%(dn)s is not a valid user" -msgstr "" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -#, fuzzy -msgid "Add a new subordinate id." -msgstr "Gehitu eta itxi" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added subordinate id \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy -msgid "Delete a subordinate id." -msgstr "Ezabatu taldea." - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, fuzzy -msgid "Modify a subordinate id." -msgstr "Aldatu talde bat." - -#, fuzzy, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, fuzzy -msgid "Search for subordinate id." -msgstr "Bilatu taldeak." - -#, fuzzy, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "HBAC zerbitzu-taldearen deskribapena" -msgstr[1] "HBAC zerbitzu-taldearen deskribapena" - -msgid "Display information about a subordinate id." -msgstr "" - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -#, fuzzy -msgid "sudo command" -msgstr "Sudo komandoak" - -#, fuzzy -msgid "sudo commands" -msgstr "Sudo komandoak" - -msgid "Sudo Commands" -msgstr "Sudo komandoak" - -#, fuzzy, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -#, fuzzy -msgid "sudo command group" -msgstr "Sudo komando-taldea" - -#, fuzzy -msgid "sudo command groups" -msgstr "Sudo komando-taldea" - -#, fuzzy, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "\"%(value)s\" ostalari-taldea gehituta" - -#, fuzzy, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, fuzzy, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "Sudo komando-taldea" -msgstr[1] "Sudo komando-taldea" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Added segment \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"IPA servers\n" -msgstr "IPA zerbitzaria" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -#, fuzzy -msgid "server" -msgstr "IPA zerbitzaria" - -msgid "servers" -msgstr "" - -#, fuzzy -msgid "IPA Servers" -msgstr "IPA zerbitzaria" - -msgid "Server location" -msgstr "" - -#, fuzzy -msgid "Service weight" -msgstr "Zerbitzuaren izena" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, fuzzy, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -#, fuzzy -msgid "State" -msgstr "Egoera" - -#, fuzzy -msgid "Server state" -msgstr "Zerbitzuaren izena" - -#, fuzzy, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "\"%(value)s\" zerbitzua gehituta" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "A list of ACI values" -msgstr "ACI balioen zerrenda bat" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -#, fuzzy -msgid "ACI prefix is required" -msgstr "ACI aurrizkia" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, fuzzy, python-format -msgid "Group '%s' does not exist" -msgstr "Taldea ez da existitzen" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Sintaxi-errorea: %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "ACIak" - -#, fuzzy, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -#, fuzzy -msgid "Member service groups" -msgstr "Zerbitzu-taldeak" - -#, fuzzy -msgid "Member HBAC service groups" -msgstr "HBAC zerbitzu-taldearen deskribapena" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -#, fuzzy -msgid "Indirect Member HBAC service" -msgstr "HBAC zerbitzua" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "sarrera" - -msgid "entries" -msgstr "sarrerak" - -#, fuzzy -msgid "Entry" -msgstr "sarrera" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "%(ldap_obj_name)s objektua berrizendatu" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Permissions\n" -msgstr "Baimenak" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Managed permissions\n" -msgstr "Baimenak" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "must be enclosed in parentheses" -msgstr "" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, fuzzy, python-format -msgid "Deprecated; use %s" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, python-format -msgid "Entry %s not found" -msgstr "" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, fuzzy, python-format -msgid "Entry %s does not exist" -msgstr "Taldea ez da existitzen" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, fuzzy, python-format -msgid "Added permission \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, fuzzy, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, fuzzy, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, fuzzy, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -#, fuzzy -msgid "Name" -msgstr "Ostalari-izena" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -msgid "Help topic" -msgstr "" - -#, fuzzy -msgid "Version" -msgstr "Baimena" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "ostalari-izena" - -msgid "Display information about a command." -msgstr "" - -#, fuzzy -msgid "Search for commands." -msgstr "Bilatu taldeak." - -#, fuzzy -msgid "Return command defaults" -msgstr "Exekutatu komandoak" - -#, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -#, fuzzy -msgid "Search for classes." -msgstr "Bilatu taldeak." - -msgid "Display information about a help topic." -msgstr "" - -#, fuzzy -msgid "Search for help topics." -msgstr "Bilatu taldeak." - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "ACI izena" - -#, fuzzy -msgid "Confirm (password)" -msgstr "Ausazko pasahitza" - -#, fuzzy -msgid "Default" -msgstr "Shell lehenetsia" - -#, fuzzy -msgid "Default from" -msgstr "Erabiltzaile-talde lehenetsia" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -#, fuzzy -msgid "Search for command outputs." -msgstr "Bilatu taldeak." - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "Trust direction" -msgstr "" - -#, fuzzy -msgid "Trust type" -msgstr "Arau-mota" - -msgid "Trust status" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -#, fuzzy -msgid "External trust" -msgstr "Kanpoko ostalaria" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -#, fuzzy -msgid "trust type" -msgstr "Arau-mota" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "trust configuration" -msgstr "Konfigurazioa" - -#, fuzzy -msgid "Global Trust Configuration" -msgstr "Konfigurazioa" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, fuzzy, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, fuzzy -msgid "SID" -msgstr "UID" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -#, fuzzy -msgid "Domain enabled" -msgstr "NIS domeinu-izena" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, fuzzy, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, fuzzy, python-format -msgid "Added vault \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, fuzzy, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -#, fuzzy -msgid "Vault configuration" -msgstr "Konfigurazioa" - -#, fuzzy -msgid "IPA KRA servers" -msgstr "IPA zerbitzaria" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -msgid "Key wrapping algorithm" -msgstr "" - -#, fuzzy, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -msgid "Retrieve data from a vault." -msgstr "" - -#, fuzzy, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "Principal alias" -msgstr "" - -#, fuzzy -msgid "User password expiration" -msgstr "Erabiltzailearen pasahitza" - -#, fuzzy -msgid "SSH public key fingerprint" -msgstr "SHA1 hatz-marka" - -#, fuzzy -msgid "External IdP configuration" -msgstr "Konfigurazioa" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -#, fuzzy -msgid "Certificate mapping data" -msgstr "Ziurtagiria" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -#, fuzzy -msgid "SMB Home Directory" -msgstr "Direktorio nagusiaren oinarria" - -#, fuzzy -msgid "SMB Home Directory Drive" -msgstr "Direktorio nagusiaren oinarria" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -msgid "Issuer" -msgstr "" - -#, fuzzy -msgid "Issuer of the certificate" -msgstr "Ziurtagiri berria" - -msgid "Subject" -msgstr "Gaia" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, fuzzy, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, fuzzy, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, fuzzy, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, fuzzy, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, fuzzy, python-format -msgid "%i users or groups added." -msgstr "Bilatu taldeak." - -msgid "users cannot be added when user category='all'" -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, fuzzy, python-format -msgid "%i service added." -msgstr "Zerbitzuaren izena" - -#, fuzzy, python-format -msgid "%i services added." -msgstr "Zerbitzuaren izena" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -#, fuzzy -msgid "User logins" -msgstr "Erabiltzaile-taldeak" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "must be at least 10" -msgstr "" - -#, fuzzy -msgid "configuration options" -msgstr "Konfigurazioa" - -msgid "Configuration" -msgstr "Konfigurazioa" - -#, fuzzy -msgid "Maximum hostname length" +msgid "Maximum username length" msgstr "Erabiltzaile-izenaren gehienezko luzera" -msgid "Enable adding subids to new users" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -#, fuzzy -msgid "IPA CA servers" -msgstr "IPA zerbitzaria" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -#, fuzzy -msgid "IPA DNS servers" -msgstr "IPA zerbitzaria" - -msgid "IPA servers configured as domain name server" -msgstr "" - -#, fuzzy -msgid "Hidden IPA DNS servers" -msgstr "IPA zerbitzaria" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -#, fuzzy -msgid "Setup SID configuration" -msgstr "Konfigurazioa" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -#, fuzzy -msgid "Add SIDs" -msgstr "Gehitu hainbat" - -msgid "Add SIDs for existing users and groups" -msgstr "" - -msgid "NetBIOS name of the IPA domain" -msgstr "" - -msgid "Empty domain is not allowed" -msgstr "" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "not allowed to enable SID generation" -msgstr "" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -msgid "Failed to call DBus" -msgstr "" - -msgid "Configuration of SID failed. See details in the error log" -msgstr "" - -msgid "The group doesn't exist" -msgstr "Taldea ez da existitzen" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "IP sare formatu baliogabea" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -#, fuzzy -msgid "invalid address format" -msgstr "IP helbide formatu baliogabea" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, python-format -msgid "%s Record" -msgstr "" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -msgid "Priority (order)" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -#, fuzzy -msgid "Managedby permission" -msgstr "Baimena" - -msgid "cannot be used when a zone is specified" -msgstr "" - -msgid "Only one zone type is allowed per zone name" -msgstr "" - -#, fuzzy, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -#, fuzzy, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "Sarrera hau dagoeneko existitzen da" - -#, fuzzy, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -#, fuzzy -msgid "Default time to live" -msgstr "Karpeta nagusien kokaleku lehenetsia" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -#, fuzzy -msgid "" -msgstr "IPA zerbitzaria" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "is required" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -#, fuzzy -msgid "DNS configuration options" -msgstr "Konfigurazioa" - -#, fuzzy -msgid "DNS Global Configuration" -msgstr "Konfigurazioa" - -#, fuzzy -msgid "IPA DNS version" -msgstr "IPA zerbitzaria" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "IPA DNS records" -msgstr "IPA zerbitzaria" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -msgid "Result of the command" -msgstr "" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "HBAC arauak" - -msgid "HBAC Rules" -msgstr "HBAC arauak" - -#, fuzzy, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -#, fuzzy, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#, fuzzy -msgid "Host" -msgstr "Ostalariak" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "Serial Number" -msgstr "Serie-zenbakia" - -#, fuzzy -msgid "Serial Number (hex)" -msgstr "Serie-zenbakia" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "Hatz-marka (SHA1)" - -#, fuzzy -msgid "Fingerprint (SHA256)" -msgstr "Hatz-marka (SHA1)" - -msgid "Revocation reason" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" +msgid "Mobile Telephone Number" +msgstr "Mugikor-zenbakia" #, python-format msgid "Modified host \"%(value)s\"" msgstr "\"%(value)s\" ostalaria aldatuta" -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, fuzzy, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -#, fuzzy, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria gehituta" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" - -msgid "Invalid URI: not an https scheme" -msgstr "" - -msgid "Invalid URI: missing netloc" -msgstr "" - -msgid "Identity Provider server" -msgstr "" - -msgid "Identity Provider servers" -msgstr "" - -#, fuzzy -msgid "Identity Provider server name" -msgstr "Zerbitzuaren izena" - -#, fuzzy -msgid "Authorization URI" -msgstr "Konfigurazioa" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -msgid "Token URI" -msgstr "" - -msgid "Token endpoint" -msgstr "" - -#, fuzzy -msgid "User info URI" -msgstr "Erabiltzaile-taldea" - -msgid "User information endpoint" -msgstr "" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -msgid "Client identifier" -msgstr "" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -msgid "Add a new Identity Provider server." -msgstr "" - -#, fuzzy, python-format -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "Erakundea" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -msgid "Base URL" -msgstr "" - -msgid "Base URL for IdP provider templates" -msgstr "" - -msgid "unknown provider" -msgstr "" - -msgid "value is missing" -msgstr "" - -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "" - -#, fuzzy -msgid "Delete an Identity Provider server." -msgstr "IPA zerbitzaria" - -#, fuzzy, python-format -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, fuzzy -msgid "Modify an Identity Provider server." -msgstr "Aldatu talde bat." - -#, fuzzy, python-format -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, fuzzy -msgid "Search for Identity Provider servers." -msgstr "Bilatu taldeak." - -#, fuzzy, python-format -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "HBAC zerbitzu-taldearen deskribapena" -msgstr[1] "HBAC zerbitzu-taldearen deskribapena" - -msgid "Display information about an Identity Provider server." -msgstr "" - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Apply" -msgstr "" - -msgid "Rebuild auto membership" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to rebuild auto membership?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, fuzzy -msgid "Are you sure you want to proceed with the action?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -msgid "Actions" -msgstr "" - -msgid "Add" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -msgid "Direct Membership" -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -#, fuzzy -msgid "No entries." -msgstr "sarrerak" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -msgid "Remove" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -msgid "Show Results" -msgstr "" - -msgid "Authentication indicators" -msgstr "" - -msgid "Authentication indicator" -msgstr "" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -msgid "RADIUS" -msgstr "" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "External Identity Provider" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "" - -msgid "Activate" -msgstr "" - -msgid "Add and Add Another" -msgstr "Gehitu eta gehitu beste bat" - -msgid "Add and Close" -msgstr "Gehitu eta itxi" - -msgid "Add and Edit" -msgstr "Gehitu eta editatu" - -msgid "Add Many" -msgstr "Gehitu hainbat" - -msgid "Back" -msgstr "" - -msgid "Cancel" -msgstr "Utzi" - -msgid "Clear" -msgstr "" - -msgid "Clear all fields on the page." -msgstr "" - -msgid "Close" -msgstr "Itxi" - -msgid "Disable" -msgstr "" - -msgid "Download" -msgstr "" - -msgid "Download certificate as PEM formatted file." -msgstr "" - -msgid "Edit" -msgstr "" - -#, fuzzy -msgid "Enable" -msgstr "Gaituta" - -msgid "Find" -msgstr "" - -msgid "Get" -msgstr "" - -msgid "Hide" -msgstr "" - -msgid "Issue" -msgstr "" - -msgid "Match" -msgstr "" - -msgid "Match users according to certificate." -msgstr "" - -msgid "Migrate" -msgstr "" - -msgid "OK" -msgstr "Ados" - -msgid "Refresh" -msgstr "" - -msgid "Reload current settings from the server." -msgstr "" - -#, fuzzy -msgid "Delete" -msgstr "Ezabatu taldea." - -msgid "Remove hold" -msgstr "" - -msgid "Reset" -msgstr "" - -msgid "Reset Password" -msgstr "Berrezarri pasahitza" - -#, fuzzy -msgid "Reset Password and Log in" -msgstr "Berrezarri pasahitza" - -msgid "Restore" -msgstr "" - -msgid "Retry" -msgstr "Saiatu berriz" - -msgid "Revert" -msgstr "" - -msgid "Revoke" -msgstr "" - -msgid "Save" -msgstr "" - -#, fuzzy -msgid "Set" -msgstr "Ezarri OTP" - -msgid "Show" -msgstr "" - -msgid "Stage" -msgstr "" - -msgid "Update" -msgstr "" - -msgid "View" -msgstr "Ikusi" - -#, fuzzy -msgid "Customization" -msgstr "Konfigurazioa" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "" - -msgid "Expand All" -msgstr "" - -msgid "General" -msgstr "Orokorra" - -#, fuzzy -msgid "Identity Settings" -msgstr "Kontaktuaren ezarpenak" - -#, fuzzy -msgid "Record Settings" -msgstr "Kontuaren ezarpenak" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -msgid "Back to Top" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -#, fuzzy -msgid "Add custom value" -msgstr "\"%(value)s\" ostalaria gehituta" - -msgid "Available" -msgstr "" - -msgid "Some operations failed." -msgstr "" - -msgid "Operations Error" -msgstr "" - -#, fuzzy -msgid "Confirmation" -msgstr "Konfigurazioa" - -msgid "Custom value" -msgstr "" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -msgid "Unsaved Changes" -msgstr "" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "" - -msgid "Hide details" -msgstr "" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -#, fuzzy -msgid "Redirection" -msgstr "deskribapena" - -msgid "Select entries to be removed." -msgstr "" - -msgid "Result" -msgstr "" - -msgid "Show details" -msgstr "" - -msgid "Success" -msgstr "" - -msgid "Validation error" -msgstr "" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, fuzzy, python-brace-format -msgid "An error has occurred (${error})" -msgstr "barne-errore bat gertatu da" - -#, fuzzy -msgid "HTTP Error" -msgstr "Errorea" - -msgid "Internal Error" -msgstr "" - -#, fuzzy -msgid "IPA Error" -msgstr "Errorea" - -msgid "No response" -msgstr "" - -msgid "Unknown Error" -msgstr "" - -msgid "URL" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -msgid "Settings" -msgstr "Ezarpenak" - -msgid "Search" -msgstr "Bilatu" - -msgid "False" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Allowed to create keytab" -msgstr "" - -msgid "Allowed to retrieve keytab" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Add Kerberos Principal Alias" -msgstr "" - -msgid "New kerberos principal alias" -msgstr "" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "" - -#, fuzzy -msgid "Authenticating" -msgstr "Kontuaren ezarpenak" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -msgid "Kerberos Principal you entered is expired" -msgstr "" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -#, fuzzy -msgid "Log In Using Certificate" -msgstr "Ziurtagiria" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "" - -msgid "Synchronizing" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -#, fuzzy -msgid "number of passwords" -msgstr "Erabiltzailearen pasahitza" - -msgid "seconds" -msgstr "" - -#, fuzzy -msgid "Migrating" -msgstr "Konfigurazioa" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -msgid "Password migration was not successful" -msgstr "" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -msgid "Password migration was successful" -msgstr "" - -msgid "Attribute" -msgstr "Atributua" - -msgid "Add delegation" -msgstr "" - -msgid "Remove delegations" -msgstr "" - -#, fuzzy -msgid "Add permission" -msgstr "Baimena" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove permissions" -msgstr "Baimenak" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -msgid "Remove privileges" -msgstr "" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Role Settings" -msgstr "Ezarpenak" - -msgid "Add role" -msgstr "" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -msgid "Remove roles" -msgstr "" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add self service permission" -msgstr "HBAC zerbitzuaren deskribapena" - -msgid "Remove self service permissions" -msgstr "" - -#, fuzzy -msgid "Add rule" -msgstr "HBAC araua" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to change default group?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, fuzzy -msgid "Default host group" -msgstr "Erabiltzaile-talde lehenetsia" - -#, fuzzy -msgid "Default user group" -msgstr "Erabiltzaile-talde lehenetsia" - -msgid "Exclusive" -msgstr "" - -#, fuzzy -msgid "Expression" -msgstr "Baimena" - -#, fuzzy -msgid "Host group rule" -msgstr "Ostalari-taldea" - -#, fuzzy -msgid "Host group rules" -msgstr "Ostalari-taldeak" - -msgid "Inclusive" -msgstr "" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "User group rule" -msgstr "Erabiltzaile-taldea" - -#, fuzzy -msgid "User group rules" -msgstr "Erabiltzaile-taldea" - -msgid "Add automount key" -msgstr "" - -msgid "Remove automount keys" -msgstr "" - -msgid "Add automount location" -msgstr "" - -#, fuzzy -msgid "Automount Location Settings" -msgstr "Kontuaren ezarpenak" - -msgid "Remove automount locations" -msgstr "" - -msgid "Add automount map" -msgstr "" - -#, fuzzy -msgid "Map Type" -msgstr "Mota" - -msgid "Direct" -msgstr "" - -msgid "Indirect" -msgstr "" - -msgid "Remove automount maps" -msgstr "" - -msgid "Add certificate authority" -msgstr "" - -msgid "Remove certificate authorities" -msgstr "" - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "All" -msgstr "Onartu" - -msgid "Any CA" -msgstr "" - -#, fuzzy -msgid "Any Host" -msgstr "Ostalariak" - -#, fuzzy -msgid "Any Service" -msgstr "HBAC zerbitzuak" - -#, fuzzy -msgid "Any Profile" -msgstr "Edozein talde" - -msgid "Anyone" -msgstr "" - -#, fuzzy -msgid "Rule status" -msgstr "Arau-mota" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -msgid "Remove CA ACLs" -msgstr "" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Specified CAs" -msgstr "Zehazturiko taldeak" - -#, fuzzy -msgid "Specified Hosts and Groups" -msgstr "Zehazturiko taldeak" - -#, fuzzy -msgid "Specified Profiles" -msgstr "Zehazturiko taldeak" - -#, fuzzy -msgid "Specified Services and Groups" -msgstr "Zehazturiko taldeak" - -#, fuzzy -msgid "Specified Users and Groups" -msgstr "Zehazturiko taldeak" - -msgid "Permitted to have certificates issued" -msgstr "" - -msgid "Remove certificate profiles" -msgstr "" - -msgid "AA Compromise" -msgstr "" - -msgid "Add principal" -msgstr "" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" - -#, fuzzy -msgid "Certificates" -msgstr "Ziurtagiria" - -#, fuzzy -msgid "Certificate Hold" -msgstr "Ziurtagiria" - -msgid "Cessation of Operation" -msgstr "" - -#, fuzzy -msgid "Common Name" -msgstr "Komandoaren izena" - -msgid "the certificate with serial number " -msgstr "" - -msgid "Expires On" -msgstr "" - -msgid "Issued on from" -msgstr "" - -msgid "Issued on to" -msgstr "" - -#, fuzzy -msgid "Maximum serial number" -msgstr "Serie-zenbakia" - -#, fuzzy -msgid "Minimum serial number" -msgstr "Serie-zenbakia" - -msgid "Revoked on from" -msgstr "" - -msgid "Revoked on to" -msgstr "" - -msgid "Valid not after from" -msgstr "" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -msgid "Fingerprints" -msgstr "Hatz-markak" - -#, fuzzy -msgid "Get Certificate" -msgstr "Ziurtagiri berria" - -#, fuzzy -msgid "Certificate Hold Removed" -msgstr "Ziurtagiria" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Issue new certificate" -msgstr "Ziurtagiri berria" - -msgid "Issued By" -msgstr "" - -msgid "Issued On" -msgstr "" - -msgid "Issued To" -msgstr "" - -msgid "Key Compromise" -msgstr "" - -#, fuzzy -msgid "No Valid Certificate" -msgstr "Ziurtagiri berria" - -msgid "New Certificate" -msgstr "Ziurtagiri berria" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -msgid "Note" -msgstr "" - -#, fuzzy -msgid "Organizational Unit" -msgstr "Erakundea" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -msgid "Privilege Withdrawn" -msgstr "" - -msgid "Reason for Revocation" -msgstr "" - -#, fuzzy -msgid "Remove certificate hold" -msgstr "Ziurtagiri berria" - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -#, fuzzy -msgid "Certificate requested" -msgstr "Ziurtagiria" - -#, fuzzy -msgid "Revoke certificate" -msgstr "Ziurtagiri berria" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -#, fuzzy -msgid "Certificate Revoked" -msgstr "Ziurtagiria" - -msgid "REVOKED" -msgstr "" - -msgid "SHA1 Fingerprint" -msgstr "SHA1 hatz-marka" - -#, fuzzy -msgid "SHA256 Fingerprint" -msgstr "SHA1 hatz-marka" - -msgid "Status" -msgstr "Egoera" - -msgid "Superseded" -msgstr "" - -msgid "Unspecified" -msgstr "" - -#, fuzzy -msgid "Valid Certificate Present" -msgstr "Ziurtagiria" - -msgid "Valid from" -msgstr "" - -msgid "Valid to" -msgstr "" - -msgid "Validity" -msgstr "" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -#, fuzzy -msgid "View Certificate" -msgstr "Ziurtagiri berria" - -#, fuzzy -msgid "Certificate Data" -msgstr "Ziurtagiria" - -#, fuzzy -msgid "Certificate For Match" -msgstr "Ziurtagiria" - -#, fuzzy -msgid "Certificate Mapping Match" -msgstr "Ziurtagiria" - -msgid "Matched Users" -msgstr "" - -#, fuzzy -msgid "User Login" -msgstr "Erabiltzaile-taldea" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -#, fuzzy -msgid "Configuration string" -msgstr "Konfigurazioa" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -msgid "Remove certificate mapping data" -msgstr "" - -msgid "Issuer and subject" -msgstr "" - -msgid "Remove certificate identity mapping rules" -msgstr "" - -#, fuzzy -msgid "Group Options" -msgstr "Taldearen ezarpenak" - -#, fuzzy -msgid "Search Options" -msgstr "Sudo aukera" - -#, fuzzy -msgid "SELinux Options" -msgstr "Sudo aukera" - -#, fuzzy -msgid "Server Options" -msgstr "Erabili beharreko IPA zerbitzaria" - -#, fuzzy -msgid "Service Options" -msgstr "Zerbitzuak" - -#, fuzzy -msgid "User Options" -msgstr "Sudo aukera" - -msgid "Forward first" -msgstr "" - -msgid "Forwarding disabled" -msgstr "" - -msgid "Forward only" -msgstr "" - -#, fuzzy -msgid "Options" -msgstr "Sudo aukera" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -msgid "Other Record Types" -msgstr "" - -msgid "Address not valid, can't redirect" -msgstr "" - -#, fuzzy -msgid "Create dns record" -msgstr "Sortu talde berri bat." - -msgid "Creating record." -msgstr "" - -msgid "Record creation failed." -msgstr "" - -msgid "Checking if record exists." -msgstr "" - -msgid "Record not found." -msgstr "" - -msgid "Redirection to PTR record" -msgstr "" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -msgid "Target reverse zone not found." -msgstr "" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -msgid "Standard Record Types" -msgstr "" - -msgid "Records for DNS Zone" -msgstr "" - -msgid "Record Type" -msgstr "" - -msgid "Add DNS zone" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -#, fuzzy -msgid "DNS Zone Settings" -msgstr "Kontuaren ezarpenak" - -msgid "Remove DNS zones" -msgstr "" - -#, fuzzy -msgid "Remove Permission" -msgstr "Baimena" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Level" -msgstr "" - -msgid "Set Domain Level" -msgstr "" - -#, fuzzy -msgid "Add user group" -msgstr "Erabiltzaile-taldea" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -msgid "Group Settings" -msgstr "Taldearen ezarpenak" - -#, fuzzy -msgid "External" -msgstr "Kanpoko erabiltzailea" - -msgid "Groups" -msgstr "Taldeak" - -#, fuzzy -msgid "Group categories" -msgstr "Taldearen ezarpenak" - -#, fuzzy -msgid "Change to external group" -msgstr "Exekutatu kanpoko talde bezala" - -#, fuzzy -msgid "Change to POSIX group" -msgstr "Helburuko taldea" - -msgid "Non-POSIX" -msgstr "" - -msgid "POSIX" -msgstr "" - -#, fuzzy -msgid "Remove user groups" -msgstr "Erabiltzaile-talde lehenetsia" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Group Type" -msgstr "Taldea" - -#, fuzzy -msgid "Add HBAC rule" -msgstr "HBAC araua" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -msgid "Accessing" -msgstr "" - -#, fuzzy -msgid "Remove HBAC rules" -msgstr "HBAC arauak" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Via Service" -msgstr "Zerbitzuak" - -msgid "Who" -msgstr "" - -#, fuzzy -msgid "Add HBAC service" -msgstr "HBAC zerbitzua" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -#, fuzzy -msgid "Remove HBAC services" -msgstr "HBAC zerbitzua" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -#, fuzzy -msgid "Add HBAC service group" -msgstr "HBAC zerbitzua" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove HBAC service groups" -msgstr "HBAC zerbitzu-taldearen deskribapena" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -msgid "Access Denied" -msgstr "" - -msgid "Access Granted" -msgstr "" - -msgid "Include Disabled" -msgstr "" - -#, fuzzy -msgid "Include Enabled" -msgstr "Gaituta" - -#, fuzzy -msgid "HBAC Test" -msgstr "HBAC arauak" - -msgid "Matched" -msgstr "" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" - -#, fuzzy -msgid "Rules" -msgstr "HBAC arauak" - -msgid "Run Test" -msgstr "" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -msgid "Unmatched" -msgstr "" - -msgid "Add host" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -#, fuzzy -msgid "Host Certificate" -msgstr "Ziurtagiria" - -msgid "Host Name" -msgstr "Ostalari-izena" - -msgid "Delete Key, Unprovision" -msgstr "" - -#, fuzzy -msgid "Host Settings" -msgstr "Ezarpenak" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -#, fuzzy -msgid "Generate OTP" -msgstr "Orokorra" - -#, fuzzy -msgid "Generated OTP" -msgstr "Orokorra" - -msgid "Kerberos Key" -msgstr "" - -msgid "Kerberos Key Not Present" -msgstr "" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -#, fuzzy -msgid "One-Time Password" -msgstr "Berrezarri pasahitza" - -msgid "One-Time Password Not Present" -msgstr "" - -msgid "One-Time Password Present" -msgstr "" - -#, fuzzy -msgid "Reset OTP" -msgstr "Ezarri OTP" - -#, fuzzy -msgid "Reset One-Time Password" -msgstr "Berrezarri pasahitza" - -msgid "Set OTP" -msgstr "Ezarri OTP" - -msgid "OTP set" -msgstr "" - -#, fuzzy -msgid "Set One-Time Password" -msgstr "Berrezarri pasahitza" - -msgid "Remove hosts" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -msgid "Unprovision" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to unprovision this host?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -#, fuzzy -msgid "Add host group" -msgstr "Ostalari-taldea" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Host Group Settings" -msgstr "Taldearen ezarpenak" - -#, fuzzy -msgid "Remove host groups" -msgstr "Ostalari-taldearen izena" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -#, fuzzy -msgid "Identity provider details" -msgstr "Kontaktuaren ezarpenak" - -#, fuzzy -msgid "Verify secret" -msgstr "Pasahitz berria" - -msgid "User to override" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -msgid "Profile" -msgstr "" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -#, fuzzy -msgid "Enter trusted group name." -msgstr "Zerbitzu-taldearen izena" - -msgid "Add ID view" -msgstr "" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -#, fuzzy -msgid "Apply to host groups" -msgstr "Ostalari-taldearen izena" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -msgid "Remove ID views" -msgstr "" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -#, fuzzy -msgid "Un-apply from host groups" -msgstr "Ostalari-taldearen izena" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -msgid "Un-apply" -msgstr "" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "Add netgroup" -msgstr "" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Netgroup Settings" -msgstr "Taldearen ezarpenak" - -#, fuzzy -msgid "Remove netgroups" -msgstr "Zerbitzu-taldeak" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -msgid "Add OTP token" -msgstr "" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -#, fuzzy -msgid "Configure your token" -msgstr "Konfigurazioa" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -#, fuzzy -msgid "OTP Token Settings" -msgstr "Kontuaren ezarpenak" - -msgid "Disable token" -msgstr "" - -#, fuzzy -msgid "Enable token" -msgstr "Gaituta" - -msgid "Remove OTP tokens" -msgstr "" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "" - -#, fuzzy -msgid "Show configuration uri" -msgstr "Konfigurazioa" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -#, fuzzy -msgid "Add Custom Attribute" -msgstr "Atributua" - -#, fuzzy -msgid "Permission settings" -msgstr "Baimenak" - -#, fuzzy -msgid "Attribute breakdown" -msgstr "Atributua" - -#, fuzzy -msgid "Privilege Settings" -msgstr "Taldearen ezarpenak" - -msgid "Public key:" -msgstr "" - -msgid "Set public key" -msgstr "" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -#, fuzzy -msgid "Add password policy" -msgstr "LDAP pasahitza" - -#, fuzzy -msgid "Password Policy" -msgstr "Pasahitza" - -msgid "Remove password policies" -msgstr "" - -#, fuzzy -msgid "Add ID range" -msgstr "Gehitu hainbat" - -#, fuzzy -msgid "Range Settings" -msgstr "Ezarpenak" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -msgid "Domain SID" -msgstr "" - -msgid "Secondary RID base" -msgstr "" - -msgid "Remove ID ranges" -msgstr "" - -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -msgid "Detect" -msgstr "" - -msgid "Local domain" -msgstr "" - -msgid "IPA trust" -msgstr "" - -msgid "Active Directory winsync" -msgstr "" - -msgid "Add RADIUS server" -msgstr "" - -msgid "RADIUS Proxy Server Settings" -msgstr "" - -msgid "Remove RADIUS servers" -msgstr "" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -msgid "Force Update" -msgstr "" - -msgid "Add SELinux user map" -msgstr "" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Server Roles" -msgstr "Erabili beharreko IPA zerbitzaria" - -#, fuzzy -msgid "Server Role" -msgstr "Erabili beharreko IPA zerbitzaria" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -#, fuzzy -msgid "Delete Server" -msgstr "Ezabatu taldea." - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -#, fuzzy -msgid "Add service" -msgstr "HBAC zerbitzua" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -#, fuzzy -msgid "Service Certificate" -msgstr "Ziurtagiri berria" - -#, fuzzy -msgid "Service Settings" -msgstr "Taldearen ezarpenak" - -#, fuzzy -msgid "Provisioning" -msgstr "Baimena" - -#, fuzzy -msgid "Remove services" -msgstr "Zerbitzuak" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to unprovision this service?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -msgid "Unprovisioning service" -msgstr "" - -#, fuzzy -msgid "Service unprovisioned" -msgstr "Zerbitzu-taldeak" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "" - -msgid "SSH public keys" -msgstr "" - -msgid "SSH public key:" -msgstr "" - -msgid "Set SSH key" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to activate selected users?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" - -msgid "Add stage user" -msgstr "" - -msgid "Stage users" -msgstr "" - -msgid "Preserved users" -msgstr "" - -msgid "Remove preserved users" -msgstr "" - -msgid "Remove stage users" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to stage selected users?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, fuzzy -msgid "Are you sure you want to restore selected users?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -msgid "User categories" -msgstr "" - -#, fuzzy -msgid "Add subid" -msgstr "Gehitu eta itxi" - -msgid "Assigned subids" -msgstr "" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -#, fuzzy -msgid "Add sudo command" -msgstr "Sudo komandoak" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -#, fuzzy -msgid "Remove sudo commands" -msgstr "Sudo komandoak" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -#, fuzzy -msgid "Add sudo command group" -msgstr "Sudo komando-taldea" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove sudo command groups" -msgstr "Sudo komando-taldea" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add sudo rule" -msgstr "Gehitu eta itxi" - -#, fuzzy -msgid "Add sudo option" -msgstr "Sudo aukera" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "Onartu" - -msgid "Any Command" -msgstr "Edozein komando" - -msgid "Any Group" -msgstr "Edozein talde" - -msgid "Run Commands" -msgstr "Exekutatu komandoak" - -msgid "Deny" -msgstr "Ukatu" - -#, fuzzy -msgid "Access this host" -msgstr "Ostalari honen deskribapena" - -msgid "Option added" -msgstr "" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -msgid "Remove sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -#, fuzzy -msgid "Specified Commands and Groups" -msgstr "Zehazturiko taldeak" - -msgid "Specified Groups" -msgstr "Zehazturiko taldeak" - -#, fuzzy -msgid "Remove sudo options" -msgstr "Sudo aukera" - -msgid "Autogenerated" -msgstr "" - -msgid "Segment details" -msgstr "" - -#, fuzzy -msgid "Replication configuration" -msgstr "Konfigurazioa" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -#, fuzzy -msgid "Account" -msgstr "Kontuaren ezarpenak" - -msgid "Add trust" -msgstr "" - -msgid "Administrative account" -msgstr "" - -msgid "SID blocklists" -msgstr "" - -#, fuzzy -msgid "Trust Settings" -msgstr "Taldearen ezarpenak" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -#, fuzzy -msgid "Pre-shared password" -msgstr "Erabiltzailearen pasahitza" - -msgid "Remove trusts" -msgstr "" - -msgid "Remove domains" -msgstr "" - -msgid "Alternative UPN suffixes" -msgstr "" - -msgid "User attributes for SMB services" -msgstr "" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -#, fuzzy -msgid "Drive to mount a home directory" -msgstr "Karpeta nagusien kokaleku lehenetsia" - -msgid "Account Settings" -msgstr "Kontuaren ezarpenak" - -#, fuzzy -msgid "Account Status" -msgstr "Kontuaren ezarpenak" - -msgid "Active users" -msgstr "" - -msgid "Add user" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -msgid "Auto assign subordinate ids" -msgstr "" - -#, fuzzy, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -msgid "Contact Settings" -msgstr "Kontaktuaren ezarpenak" - -#, fuzzy -msgid "Delete mode" -msgstr "Ezabatu taldea." - -msgid "Employee Information" -msgstr "" - -msgid "Error changing account status" -msgstr "" - -msgid "Password expiration" -msgstr "" - -#, fuzzy -msgid "Mailing Address" -msgstr "E-posta helbidea" - -msgid "Misc. Information" -msgstr "" - -msgid "delete" -msgstr "" - -msgid "preserve" -msgstr "" - -msgid "No private group" -msgstr "" - -msgid "Remove users" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Unlock" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -msgid "Members" -msgstr "" - -msgid "My User Vaults" -msgstr "" - -msgid "Owners" -msgstr "" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Service Vaults" -msgstr "Zerbitzuak" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -msgid "Vault Type" -msgstr "" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -#, fuzzy -msgid "User Vaults" -msgstr "Erabiltzaile-taldeak" - -msgid "Current password is required" -msgstr "" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -#, fuzzy -msgid "First OTP" -msgstr "Izena" - -#, fuzzy -msgid "New password is required" -msgstr "Pasahitz berria" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Password change complete" -msgstr "" - -msgid "Your password has expired. Please enter a new password." -msgstr "" - -msgid "Passwords must match" -msgstr "Pasahitzek bat etorri behar dute" - -msgid "Password reset was not successful." -msgstr "" - -#, fuzzy -msgid "Reset your password." -msgstr "Berrezarri pasahitza" - -#, fuzzy -msgid "Second OTP" -msgstr "Ezarri OTP" - -#, fuzzy -msgid "Verify Password" -msgstr "Pasahitz berria" - -msgid "Are you sure you want to delete selected entries?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to disable selected entries?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to enable selected entries?" -msgstr "Ziur zaude hautatutako sarrerak ezabatu nahi dituzula?" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -msgid "Some entries were not deleted" -msgstr "" - -msgid "Quick Links" -msgstr "" - -msgid "Select All" -msgstr "" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -msgid "Unselect All" -msgstr "" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "" - -msgid "Audit" -msgstr "" - -msgid "Authentication" -msgstr "" - -msgid "Automount" -msgstr "" - -msgid "DNS" -msgstr "DNS" - -msgid "Host-Based Access Control" -msgstr "" - -msgid "Identity" -msgstr "" - -#, fuzzy -msgid "Network Services" -msgstr "Zerbitzuak" - -msgid "Policy" -msgstr "" - -msgid "Role-Based Access Control" -msgstr "" - -msgid "Subordinate IDs" -msgstr "" - -msgid "Sudo" -msgstr "Sudo" - -msgid "Topology" -msgstr "" - -msgid "True" -msgstr "" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -#, fuzzy -msgid "First" -msgstr "Izena" - -#, fuzzy -msgid "Last" -msgstr "Abizena" - -msgid "Next" -msgstr "" - -msgid "Page" -msgstr "" - -msgid "Prev" -msgstr "" - -msgid "Undo" -msgstr "" - -msgid "Undo this change." -msgstr "" - -msgid "Undo All" -msgstr "" - -msgid "Undo all changes in this field." -msgstr "" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -msgid "Must be a decimal number" -msgstr "" - -msgid "Format error" -msgstr "" - -msgid "Must be an integer" -msgstr "" - -#, fuzzy -msgid "Not a valid IP address" -msgstr "IP helbide formatu baliogabea" - -#, fuzzy -msgid "Not a valid IPv4 address" -msgstr "IP helbide formatu baliogabea" - -#, fuzzy -msgid "Not a valid IPv6 address" -msgstr "IP helbide formatu baliogabea" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -msgid "Parse error" -msgstr "" - -msgid "Must be a positive number" -msgstr "" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -msgid "Required field" -msgstr "" - -msgid "Unsupported value" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -msgid "IdP max life" -msgstr "" - -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "" - -msgid "IdP max renew" -msgstr "" - -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "LDAP URI baliogabea." - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -#, fuzzy -msgid "Default group for new users not found" -msgstr "Erabiltzaile berrientzako talde lehenetsia" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -#, fuzzy -msgid "password policy" -msgstr "pasahitza" - -#, fuzzy -msgid "password policies" -msgstr "pasahitza" - -#, fuzzy -msgid "Password Policies" -msgstr "Pasahitza" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "Grace login limit" -msgstr "" - -msgid "Number of LDAP authentications allowed after expiration" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#, fuzzy, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -#, fuzzy, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -#, fuzzy -msgid "service" -msgstr "Zerbitzuak" - -#, fuzzy -msgid "services" -msgstr "Zerbitzuak" - -msgid "Service principal alias" -msgstr "" - -msgid "Base-64 encoded service certificate" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." -msgstr "" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -msgid "Add a new SMB service." -msgstr "" - -#, fuzzy -msgid "SMB service NetBIOS name" -msgstr "Zerbitzuaren izena" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, fuzzy, python-format -msgid "Modified service \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, fuzzy, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -msgid "Remove principal alias from a service" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -#, fuzzy -msgid "Stage Users" -msgstr "Erabiltzaileak" - -#, fuzzy -msgid "Stage User" -msgstr "Kanpoko erabiltzailea" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, fuzzy, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -#, fuzzy -msgid "ID View" -msgstr "Ikusi" - -msgid "system ID View" -msgstr "" - -#, fuzzy -msgid "ID Views" -msgstr "Ikusi" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -#, fuzzy, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -msgid "Delete an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -msgid "Modify an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua gehituta" - -#, fuzzy, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "\"%(value)s\" zerbitzua ezabatuta" - -#, fuzzy, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -#, fuzzy, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -#, fuzzy -msgid "Certificate Authority" -msgstr "Ziurtagiria" - -#, fuzzy -msgid "Certificate Authorities" -msgstr "Ziurtagiria" - -msgid "Name for referencing the CA" -msgstr "" - -#, fuzzy -msgid "Description of the purpose of the CA" -msgstr "Ostalari honen deskribapena" - -msgid "Authority ID" -msgstr "" - -msgid "Dogtag Authority ID" -msgstr "" - -#, fuzzy -msgid "Subject DN" -msgstr "Gaia" - -msgid "Subject Distinguished Name" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Issuer Distinguished Name" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -#, fuzzy -msgid "Certificate chain" -msgstr "Ziurtagiria" - -msgid "X.509 certificate chain" -msgstr "" - -#, fuzzy -msgid "RSN Version" -msgstr "Baimena" - -#, fuzzy -msgid "Random Serial Number Version" -msgstr "Serie-zenbakia" - -#, fuzzy -msgid "Search for CAs." -msgstr "Bilatu taldeak." - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "Display the properties of a CA." -msgstr "" - -#, fuzzy -msgid "Create a CA." -msgstr "Sortu talde berri bat." - -#, fuzzy, python-format -msgid "Created CA \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -#, fuzzy -msgid "Modify CA configuration." -msgstr "Konfigurazioa" - -#, fuzzy, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria aldatuta" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "IPA CA cannot be disabled" -msgstr "" - -#, fuzzy -msgid "Enable a CA." -msgstr "Gaituta" - -#, fuzzy, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -#, fuzzy -msgid "Subject email address" -msgstr "E-posta helbidea" - -#, fuzzy -msgid "Subject DNS name" -msgstr "Gaia" - -#, fuzzy -msgid "Subject X.400 address" -msgstr "Kalea" - -#, fuzzy -msgid "Subject directory name" -msgstr "Direktorio nagusiaren oinarria" - -msgid "Subject EDI Party name" -msgstr "" - -#, fuzzy -msgid "Subject URI" -msgstr "Gaia" - -#, fuzzy -msgid "Subject IP Address" -msgstr "Kalea" - -#, fuzzy -msgid "Subject OID" -msgstr "Gaia" - -#, fuzzy -msgid "Subject UPN" -msgstr "Gaia" - -msgid "Subject Kerberos principal name" -msgstr "" - -msgid "Subject Other Name" -msgstr "" - -#, fuzzy -msgid "Serial number (hex)" -msgstr "Serie-zenbakia" - -msgid "Request status" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -#, fuzzy -msgid "'add' option" -msgstr "Sudo aukera" - -#, fuzzy -msgid "The principal for this request doesn't exist." -msgstr "Taldea ez da existitzen" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -#, fuzzy -msgid "Status of the certificate" -msgstr "Ziurtagiri berria" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -#, fuzzy -msgid "sudo rules" -msgstr "HBAC arauak" - -#, fuzzy -msgid "Sudo Rules" -msgstr "HBAC arauak" - -#, fuzzy -msgid "Sudo Rule" -msgstr "Sudo" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -#, fuzzy, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -#, fuzzy -msgid "users" -msgstr "Erabiltzaileak" - -#, fuzzy -msgid "command" -msgstr "Edozein komando" - -#, fuzzy -msgid "commands" -msgstr "Exekutatu komandoak" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -#, fuzzy -msgid "group runAs" -msgstr "taldeak" - -#, fuzzy -msgid "runAs groups" -msgstr "taldeak" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -#, fuzzy -msgid "Default group for new users is not POSIX" -msgstr "Erabiltzaile berrientzako talde lehenetsia" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Preserved user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - #, python-format msgid "Modified user \"%(value)s\"" msgstr "\"%(value)s\" erabiltzailea aldatuta" -#, fuzzy, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" +msgid "Modify a group." +msgstr "Aldatu talde bat." -#, python-format -msgid "user \"%s\" is already active" -msgstr "" +msgid "NIS domain name" +msgstr "NIS domeinu-izena" -#, fuzzy, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" +msgid "Name of host-group" +msgstr "Ostalari-taldearen izena" -#, fuzzy, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" +msgid "New ACI name" +msgstr "ACI izen berria" -#, fuzzy, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea ezabatuta" +msgid "New Certificate" +msgstr "Ziurtagiri berria" -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" +msgid "New Password" +msgstr "Pasahitz berria" -#, fuzzy, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "\"%(value)s\" ostalaria ezabatuta" +msgid "OK" +msgstr "Ados" -msgid "Failed logins" -msgstr "" +msgid "Operating system" +msgstr "Sistema eragilea" -msgid "Last successful authentication" -msgstr "" +msgid "Organization" +msgstr "Erakundea" -msgid "Last failed authentication" -msgstr "" +msgid "Output filename" +msgstr "Irteerako fitxategi-izena" -msgid "Time now" -msgstr "" +msgid "PKINIT" +msgstr "PKINIT" -msgid "Password grace count" -msgstr "" +msgid "Pager Number" +msgstr "Bilagailu-zenbakia" -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" +msgid "Password" +msgstr "Pasahitza" -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" +msgid "Passwords do not match" +msgstr "Pasahitzak ez datoz bat" -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -#, fuzzy, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea gehituta" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "\"%(value)s\" erabiltzailea aldatuta" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" -msgstr "" - -msgid "Request must be a dict" -msgstr "" - -msgid "Request is missing \"method\"" -msgstr "" - -msgid "Request is missing \"params\"" -msgstr "" - -msgid "params must be a list" -msgstr "" - -msgid "params must contain [args, options]" -msgstr "" - -msgid "params[0] (aka args) must be a list" -msgstr "" - -msgid "params[1] (aka options) must be a dict" -msgstr "" - -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" - -msgid "CIFS server denied your credentials" -msgstr "" - -msgid "communication with CIFS server was unsuccessful" -msgstr "" - -msgid "AD domain controller" -msgstr "" - -msgid "unsupported functional level" -msgstr "" - -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" - -msgid "Cannot find specified domain or server name" -msgstr "" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" - -msgid "At least the domain or IP address should be specified" -msgstr "" - -#, python-format -msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" -msgstr "" - -msgid "no trusted domain is configured" -msgstr "" - -msgid "domain is not configured" -msgstr "" - -msgid "SID is not valid" -msgstr "" - -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "" - -msgid "SID does not match any trusted domain" -msgstr "" - -msgid "Trust setup" -msgstr "" - -msgid "Our domain is not configured" -msgstr "" - -msgid "No trusted domain is not configured" -msgstr "" - -msgid "trusted domain object" -msgstr "" - -msgid "domain is not trusted" -msgstr "" - -msgid "no trusted domain matched the specified flat name" -msgstr "" - -msgid "trusted domain object not found" -msgstr "" - -msgid "Object does not belong to a trusted domain" -msgstr "" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "" - -msgid "Ambiguous search, user domain was not specified" -msgstr "" - -msgid "Trusted domain did not return a unique object" -msgstr "" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "" - -msgid "trusted domain user not found" -msgstr "" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "" - -msgid "CIFS credentials object" -msgstr "" - -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "" - -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" - -#, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" - -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" - -msgid "Credentials" -msgstr "" - -msgid "Missing credentials for cross-forest communication" -msgstr "" - -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" - -#, python-format -msgid "must equal %r" -msgstr "" - -msgid "Hello world" -msgstr "" - -#, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "" - -msgid "must be at least 1" -msgstr "" - -msgid "Out of memory\n" -msgstr "" - -msgid "Warning unrecognized encryption type.\n" -msgstr "" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -msgid "Out of memory!?\n" -msgstr "" - -msgid "Enctype comparison failed!\n" -msgstr "" - -#, fuzzy -msgid "Password is too long!\n" +msgid "Passwords do not match!" msgstr "Pasahitzak ez datoz bat!" -msgid "Failed to create random key!\n" -msgstr "" +msgid "Passwords must match" +msgstr "Pasahitzek bat etorri behar dute" -msgid "Failed to create key!\n" -msgstr "" +msgid "Permission" +msgstr "Baimena" -msgid "Bad or unsupported salt type.\n" -msgstr "" +msgid "Permissions" +msgstr "Baimenak" + +msgid "Random password" +msgstr "Ausazko pasahitza" + +msgid "Reason" +msgstr "Arrazoia" + +msgid "Rename" +msgstr "Berrizendatu" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "%(ldap_obj_name)s objektua berrizendatu" + +msgid "Reset Password" +msgstr "Berrezarri pasahitza" + +msgid "Retry" +msgstr "Saiatu berriz" + +msgid "Rule type" +msgstr "Arau-mota" + +msgid "Run Commands" +msgstr "Exekutatu komandoak" + +msgid "RunAs External Group" +msgstr "Exekutatu kanpoko talde bezala" + +msgid "RunAs External User" +msgstr "Exekutatu kanpoko erabiltzaile bezala" + +msgid "SHA1 Fingerprint" +msgstr "SHA1 hatz-marka" + +msgid "Search" +msgstr "Bilatu" + +msgid "Search for groups." +msgstr "Bilatu taldeak." + +msgid "Serial Number" +msgstr "Serie-zenbakia" + +msgid "Serial number" +msgstr "Serie-zenbakia" + +msgid "Service Groups" +msgstr "Zerbitzu-taldeak" + +msgid "Service group name" +msgstr "Zerbitzu-taldearen izena" + +msgid "Service name" +msgstr "Zerbitzuaren izena" + +msgid "Services" +msgstr "Zerbitzuak" + +msgid "Set OTP" +msgstr "Ezarri OTP" + +msgid "Settings" +msgstr "Ezarpenak" + +msgid "Specified Groups" +msgstr "Zehazturiko taldeak" + +msgid "Status" +msgstr "Egoera" + +msgid "Street address" +msgstr "Kalea" + +msgid "Subject" +msgstr "Gaia" + +msgid "Subtree" +msgstr "Azpi-zuhaitza" + +msgid "Sudo" +msgstr "Sudo" + +msgid "Sudo Command Group" +msgstr "Sudo komando-taldea" + +msgid "Sudo Commands" +msgstr "Sudo komandoak" + +msgid "Sudo Option" +msgstr "Sudo aukera" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Sintaxi-errorea: %(error)s" + +msgid "Target group" +msgstr "Helburuko taldea" + +msgid "Telephone Number" +msgstr "Telefono-zenbakia" + +msgid "The group doesn't exist" +msgstr "Taldea ez da existitzen" + +msgid "This entry already exists" +msgstr "Sarrera hau dagoeneko existitzen da" + +msgid "Type" +msgstr "Mota" + +msgid "UID" +msgstr "UID" + +msgid "User" +msgstr "Erabiltzailea" + +msgid "User Group" +msgstr "Erabiltzaile-taldea" + +msgid "User Groups" +msgstr "Erabiltzaile-taldeak" + +msgid "User group" +msgstr "Erabiltzaile-taldea" + +msgid "User password" +msgstr "Erabiltzailearen pasahitza" + +msgid "Username" +msgstr "Erabiltzaile-izena" + +msgid "Users" +msgstr "Erabiltzaileak" + +msgid "View" +msgstr "Ikusi" + +msgid "an internal error has occurred" +msgstr "barne-errore bat gertatu da" + +msgid "description" +msgstr "deskribapena" + +msgid "entries" +msgstr "sarrerak" + +msgid "entry" +msgstr "sarrera" + +msgid "filename" +msgstr "fitxategi-izena" + +msgid "group" +msgstr "taldea" + +msgid "groups" +msgstr "taldeak" + +msgid "hostname" +msgstr "ostalari-izena" + +msgid "invalid IP address format" +msgstr "IP helbide formatu baliogabea" + +msgid "invalid IP network format" +msgstr "IP sare formatu baliogabea" #, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" +msgid "ipa-getkeytab not found\n" +msgstr "ez da ipa-getkeytab aurkitu\n" -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" +msgid "password" +msgstr "pasahitza" diff --git a/po/fi.po b/po/fi.po index 112c3b91d..98127c6f8 100644 --- a/po/fi.po +++ b/po/fi.po @@ -19,152 +19,899 @@ msgstr "" "Plural-Forms: nplurals=2; plural=n != 1;\n" "X-Generator: Weblate 4.13\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "asetustiedostoa %s ei voi avata\n" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "ei voi stat()-määritystiedostoa %s\n" - -#, c-format -msgid "out of memory\n" -msgstr "muisti lopussa\n" - -#, c-format -msgid "read error\n" -msgstr "lukuvirhe\n" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "Prinsipaalinimen jäsentäminen ei onnistu\n" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "krb5_parse_name %1$d: %2$s\n" - -#, c-format -msgid "Removing principal %s\n" -msgstr "Poistetaan ensisijaista %s\n" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "Avaintaulun avaaminen epäonnistui\n" - -#, c-format -msgid "principal not found\n" -msgstr "toimeksiantajaa ei löydy\n" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "Merkintää ei voi poistaa\n" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "Kohdistimen '%1$s' asettaminen epäonnistui\n" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "Ensisijaista ei voi jäsentää\n" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "aluetta ei löydy\n" - -msgid "Print debugging information" -msgstr "Tulosta virheenkorjaustiedot" - -msgid "Debugging output" +msgid "" +"\n" +"DNS server configuration\n" msgstr "" +"\n" +"DNS-palvelimen kokoonpano\n" msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +"\n" +"IPA locations\n" msgstr "" +"\n" +"IPA sijainnit\n" -msgid "Kerberos Service Principal Name" +msgid "" +"\n" +"IPA server roles\n" msgstr "" +"\n" +"IPA-palvelinroolit\n" -msgid "The keytab file to remove the principcal(s) from" +msgid "" +"\n" +"IPA servers\n" msgstr "" +"\n" +"IPA-palvelimet\n" -msgid "Keytab File Name" +msgid "" +"\n" +"Managed permissions\n" msgstr "" +"\n" +"Hallitut käyttöoikeudet\n" -msgid "Remove all principals in this realm" +msgid "" +"\n" +"OTP Tokens\n" msgstr "" +"\n" +"OTP-tunnukset\n" -msgid "Realm name" -msgstr "Alueen nimi" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "Kerberos-kontekstin alustus epäonnistui\n" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "Näppäinvälilehden '%1$s' avaaminen epäonnistui: %2$s\n" - -#, c-format -msgid "Closing keytab failed\n" +msgid "" +"\n" +"Permissions\n" msgstr "" +"\n" +"Käyttöoikeudet\n" -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" +msgid "" +"\n" +"Sudo Rules\n" msgstr "" +"\n" +"Sudo-säännöt\n" + +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" +"\n" +"YubiKey Tokenit\n" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "%(count)d SELinux-käyttäjäkartta löytyi" +msgstr[1] "%(count)d SELinux-käyttäjäkarttoja löytyi" + +#, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "%(count)d alisteinen tunnus löytyi" +msgstr[1] "%(count)d alisteista tunnusta löytyi" + +#, python-format +msgid "%(exception)s" +msgstr "%(exception)s" + +#, python-format +msgid "%(host)s failed" +msgstr "%(host)s epäonnistui" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +#, python-format +msgid "%(value)s" +msgstr "%(value)s" + +#, python-format +msgid "%i service added." +msgstr "%i palvelu lisätty." + +#, python-format +msgid "%i services added." +msgstr "%i palvelua lisätty." + +#, python-format +msgid "%s" +msgstr "%s" + +#, python-format +msgid "%s Record" +msgstr "%s Tietue" + +#, python-format +msgid "%s record" +msgstr "%s tietue" + +#, python-format +msgid "%s: group not found" +msgstr "%s: ryhmää ei löydy" + +msgid "A IP Address" +msgstr "IP-osoite" + +msgid "A record" +msgstr "Tietue" + +msgid "A6 record" +msgstr "A6-tietue" + +msgid "AAAA IP Address" +msgstr "AAAA:n IP-osoite" + +msgid "AFSDB Hostname" +msgstr "AFSDB-isäntänimi" + +msgid "APL record" +msgstr "APL-tietue" + +msgid "About" +msgstr "Tietoja" + +msgid "Access Denied" +msgstr "Pääsy evätty" + +#, python-format +msgid "Access granted: %s" +msgstr "Käyttöoikeus myönnetty: %s" + +msgid "Account" +msgstr "Tili" + +msgid "Account Settings" +msgstr "Tilin asetukset" + +msgid "Actions" +msgstr "Toimet" + +msgid "Activate" +msgstr "Aktivoi" + +msgid "Active zone" +msgstr "Aktiivinen vyöhyke" + +msgid "Add" +msgstr "Lisää" + +msgid "Add OTP token" +msgstr "Lisää OTP-tunnus" + +msgid "Add a new HBAC service." +msgstr "Lisää uusi HBAC-palvelu." + +msgid "Add a new ID View." +msgstr "Lisää uusi tunnusnäkymä." + +msgid "Add a new IPA new service." +msgstr "Lisää uusi IPA-palvelu." + +msgid "Add a new IPA service." +msgstr "Lisää uusi IPA-palvelu." + +msgid "Add a new OTP token." +msgstr "Lisää uusi OTP-tunnus." + +msgid "Add a new SMB service." +msgstr "Lisää uusi SMB-palvelu." + +msgid "Add a new YubiKey OTP token." +msgstr "Lisää uusi YubiKey:n OTP-token." + +msgid "Add a new delegation." +msgstr "Lisää uusi valtuuskunta." + +msgid "Add a new host." +msgstr "Lisää uusi isäntä." + +msgid "Add a new hostgroup." +msgstr "Lisää uusi isäntäryhmä." + +msgid "Add a new netgroup." +msgstr "Lisää uusi verkkoryhmä." + +msgid "Add a vault." +msgstr "Lisää holvi." + +msgid "Add and Close" +msgstr "Lisää ja sulje" + +msgid "Add host" +msgstr "Lisää isäntä" + +msgid "Add role" +msgstr "Lisää rooli" + +msgid "Add rule" +msgstr "Lisää sääntö" + +msgid "Add service" +msgstr "Lisää palvelu" + +msgid "Add services to a CA ACL." +msgstr "Lisää palveluita CA ACL:ään." + +msgid "Add user" +msgstr "Lisää käyttäjä" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "Lisätty CA ACL \"%(value)s\"" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "Lisätty HBAC sääntö \"%(value)s\"" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "Lisätty HBAC palvelu \"%(value)s\"" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "Lisätty HBAC palveluryhmä \"%(value)s\"" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "Lisätty OTP-tunnus \"%(value)s\"" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "Lisätty SELinux-käyttäjäkartta \"%(value)s\"" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Lisätty sudosääntö \"%(value)s\"" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Lisätty ryhmä \"%(value)s\"" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "Lisätty isäntäkone \"%(value)s\"" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Lisätty isäntäryhmä \"%(value)s\"" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "Lisätty verkkoryhmä \"%(value)s\"" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "Lisätty oikeus \"%(value)s\"" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "Lisätty rooli \"%(value)s\"" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "Lisätty segmentti \"%(value)s\"" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "Lisätty itsepalvelu \"%(value)s\"" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "Lisätty palvelu \"%(value)s\"" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "Lisätty stagen käyttäjä \"%(value)s\"" + +#, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "Lisätty alisteinen tunnus \"%(value)s\"" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "Lisätty käyttäjä \"%(value)s\"" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "Lisätty holvi \"%(value)s\"" + +msgid "Administrative account" +msgstr "Hallinnollinen tili" + +msgid "All" +msgstr "Kaikki" + +msgid "Allowed to create keytab" +msgstr "Keytabin luominen sallittu" + +msgid "Any Service" +msgstr "Mikä tahansa palvelu" + +msgid "Apply" +msgstr "Toteuta" + +msgid "Attribute" +msgstr "Attribuutti" + +msgid "Attributes" +msgstr "Attribuutit" + +msgid "Audit" +msgstr "Auditointi" + +msgid "Authenticating" +msgstr "Tunnistaudutaan" + +msgid "Authentication" +msgstr "Tunnistatuminen" + +msgid "Available" +msgstr "Saatavilla" + +msgid "Back" +msgstr "Takaisin" + +msgid "Bad format in credentials cache" +msgstr "Virheellinen muoto valtuustietojen välimuistissa" + +msgid "Bad or unsupported salt type.\n" +msgstr "Huono tai ei-tuettu suolatyyppi.\n" + +msgid "CERT record" +msgstr "CERT-tietue" + +msgid "CNAME Hostname" +msgstr "CNAME-isäntänimi" + +msgid "Cancel" +msgstr "Peru" #, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "Kerberos-kontekstin alustus epäonnistui: %1$s (%2$d)\n" +msgid "Cannot get host's FQDN!\n" +msgstr "Ei voida saada koneen FQDN:ia!\n" + +msgid "Change password" +msgstr "Vaihda salasana" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Vaihdettu salasana kohteelle \"%(value)s\"" + +msgid "City" +msgstr "Kaupunki" + +msgid "Class" +msgstr "Luokka" + +msgid "Clear" +msgstr "Tyhjennä" + +msgid "Close" +msgstr "Sulje" + +msgid "Commands" +msgstr "Komennot" + +msgid "Configuration" +msgstr "Asetukset" + +msgid "Confirm (password)" +msgstr "Vahvista (salasana)" + +msgid "Confirmation" +msgstr "Vahvistus" + +msgid "Continue" +msgstr "Jatka" + +msgid "Create a new SELinux User Map." +msgstr "Luo uusi SELinux-käyttäjäkartta." + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "Luodut ACI \"%(value)s\"" + +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "Luotu CA \"%(value)s\"" + +msgid "Current Password" +msgstr "Nykyinen salasana" + +msgid "DLV record" +msgstr "DLV-tietue" + +msgid "DN to bind as if not using kerberos" +msgstr "Yhdistettävä DN kuin et käyttäisi Kerberosia" + +msgid "DNAME Target" +msgstr "DNAME kohde" + +msgid "DNS" +msgstr "DNS" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "DNS-nimi voi sisältää enintään 63 merkkiä" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "DNS-nimi voi sisältää enintään 63 merkkiä" + +msgid "DS record" +msgstr "DS-tietue" + +msgid "Data" +msgstr "Tiedot" + +msgid "Default" +msgstr "Oletus" + +msgid "Default SELinux user" +msgstr "SELinux-oletuskäyttäjä" + +msgid "Default from" +msgstr "Oletusarvo kohteesta" + +msgid "Default shell" +msgstr "Oletuskomentorivitulkki" + +msgid "Default types of supported user authentication" +msgstr "Tuetun käyttäjän todennuksen oletustyypit" + +msgid "Default user authentication types" +msgstr "Käyttäjän todennustyyppien oletukset" + +msgid "Delegation" +msgstr "Valtuutus" + +msgid "Delegation name" +msgstr "Valtuuskunnan nimi" + +msgid "Delegations" +msgstr "Valtuutukset" + +msgid "Delete" +msgstr "Poista" + +msgid "Delete ACI." +msgstr "Poista ACI." + +msgid "Delete IPA server." +msgstr "Poista IPA-palvelin." + +msgid "Delete Sudo Rule." +msgstr "Poista Sudo-sääntö." + +msgid "Delete a CA ACL." +msgstr "Poista CA ACL." + +msgid "Delete a SELinux User Map." +msgstr "Poista SELinux-käyttäjäkartta." + +msgid "Delete a delegation." +msgstr "Poista valtuuskunta." + +msgid "Delete a host." +msgstr "Poista isäntä." + +msgid "Delete a hostgroup." +msgstr "Poista isäntäryhmä." + +msgid "Delete a netgroup." +msgstr "Poista verkkoryhmä." + +msgid "Delete a permission." +msgstr "Poista lupa." + +msgid "Delete a privilege." +msgstr "Poista etuoikeus." + +msgid "Delete a role." +msgstr "Poista rooli." + +msgid "Delete a segment." +msgstr "Poista segmentti." + +msgid "Delete a stage user." +msgstr "Poista stagen käyttäjä." + +msgid "Delete a subordinate id." +msgstr "Poista alisteinen tunnus." + +msgid "Delete a trust." +msgstr "Poista luottamus." + +msgid "Delete a user" +msgstr "Poista käyttäjä" + +msgid "Delete a user." +msgstr "Poista käyttäjä." + +msgid "Delete a vault container." +msgstr "Poista holvikontti." + +msgid "Delete a vault." +msgstr "Poista holvi." + +msgid "Delete all?" +msgstr "Poista kaikki?" + +msgid "Delete an Group ID override." +msgstr "Poista ryhmätunnuksen ohitus." + +msgid "Delete an HBAC rule." +msgstr "Poista HBAC-sääntö." + +msgid "Delete an ID View." +msgstr "Poista tunnusnäkymä." + +msgid "Delete an ID override." +msgstr "Poista tunnuksen ohitus." + +msgid "Delete an ID range." +msgstr "Poista tunnusalue." + +msgid "Delete an IPA service." +msgstr "Poista IPA-palvelu." + +msgid "Delete an User ID override." +msgstr "Poista ryhmätunnuksen ohitus." + +msgid "Delete an automember rule." +msgstr "Poista automember-sääntö." + +msgid "Delete domain" +msgstr "Poista toimialue" + +msgid "Delete group." +msgstr "Poista ryhmä." + +msgid "Delete mode" +msgstr "Poista moodi" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "Poistettu ACI \"%(value)s\"" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "Poistettu CA \"%(value)s\"" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "Poistettu CA ACL \"%(value)s\"" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "Poistettu HBAC sääntö \"%(value)s\"" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "Poistettu HBAC palvelu \"%(value)s\"" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "Poistettu HBAC palveluryhmä \"%(value)s\"" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "Poistettu IPA palvelin \"%(value)s\"" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Poistettu OTP-tunnus \"%(value)s\"" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "Poistettu SELinux-käyttäjäkartta \"%(value)s\"" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Poistettu ryhmä \"%(value)s\"" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "Poistettu isäntäkone \"%(value)s\"" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Poistettu isäntäryhmä \"%(value)s\"" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Poistettu verkkoryhmä \"%(value)s\"" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "Poistettu oikeus \"%(value)s\"" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "Poistettu profiili \"%(value)s\"" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "Poistettu tietue \"%(value)s\"" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "Poistettu rooli \"%(value)s\"" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "Poistettu segmentti \"%(value)s\"" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "Poistettu itsepalvelu \"%(value)s\"" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "Poistettu palvelu \"%(value)s\"" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "Poistettu stagen käyttäjä \"%(value)s\"" + +#, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "Poistettu alisteinen tunnus \"%(value)s\"" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "Poistettu luottamus \"%(value)s\"" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Poistettu käyttäjä \"%(value)s\"" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "Poistettu holvi \"%(value)s\"" + +msgid "Deleted vault container" +msgstr "Poistettu holvikontti" + +msgid "Description" +msgstr "Kuvaus" + +msgid "Digest" +msgstr "Tarkistussumma" + +msgid "Direct" +msgstr "Suora" + +msgid "Disable" +msgstr "Poista käytöstä" + +msgid "Disable a CA." +msgstr "Poista CA käytöstä." + +msgid "Disable an SELinux User Map rule." +msgstr "Poista SELinux-käyttäjäkartan sääntö käytöstä." + +msgid "Disabled" +msgstr "Ei käytössä" + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "Poistettu CA \"%(value)s\" käytöstä" + +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "Poistettu CA ACL \"%(value)s\" käytöstä" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "Poistettu HBAC sääntö \"%(value)s\" käytöstä" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "Poistettu SELinux-käyttäjäkartta \"%(value)s\" käytöstä" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "Poistettu isäntäkone \"%(value)s\" käytöstä" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "Poistettu palvelu \"%(value)s\" käytöstä" + +msgid "Display Sudo Rule." +msgstr "Näytä Sudo-sääntö." + +msgid "Display a segment." +msgstr "Näytä segmentti." + +msgid "Display an automount key." +msgstr "Näytä automount-avain." + +msgid "Display an automount map." +msgstr "Näytä automount-kartta." + +msgid "Display name" +msgstr "Näyttönimi" + +msgid "Documentation" +msgstr "Dokumentaatio" + +msgid "Domain" +msgstr "Toimialue" + +msgid "Domain name" +msgstr "Toimialueen nimi" + +msgid "Download" +msgstr "Lataa" + +msgid "Edit" +msgstr "Muokkaa" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "Muokkaa ${entity}" + +msgid "Email address" +msgstr "Sähköpostiosoite" + +msgid "Enable" +msgstr "Ota käyttöön" + +msgid "Enable a CA." +msgstr "Ota CA käyttöön." + +msgid "Enable an SELinux User Map rule." +msgstr "Ota SELinux-käyttäjäkartan sääntö käyttöön." + +msgid "Enabled" +msgstr "Käytössä" + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "Otettu CA \"%(value)s\" käyttöön" + +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "Otettu CA ACL \"%(value)s\" käyttöön" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "Otettu HBAC sääntö \"%(value)s\" käyttöön" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "Otettu SELinux-käyttäjäkartta \"%(value)s\" käyttöön" + +msgid "Enrollment" +msgstr "Rekisteröinti" #, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "Prinsipaalin jäsentäminen ei onnistu: %1$s (%2$d)\n" +msgid "Enrollment failed. %s\n" +msgstr "Rekisteröinti epäonnistui. %s\n" + +msgid "Enter LDAP password" +msgstr "Anna LDAP salasana" + +msgid "Entry" +msgstr "Tietue" + +#, python-format +msgid "Entry %s not found" +msgstr "Kohtaa %s ei löydy" + +msgid "Error" +msgstr "Virhe" #, c-format -msgid "No keys accepted by KDC\n" -msgstr "KDC ei hyväksy avaimia\n" +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "Kerberos-oletusalueen hakemisessa tapahtui virhe: %s\n" #, c-format -msgid "Out of memory \n" -msgstr "Muisti loppui \n" +msgid "Error obtaining initial credentials: %s.\n" +msgstr "Virhe ensimmäisten tunnistetietojen hankinnassa: %s\n" #, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "LDAP-kirjaston alustaminen epäonnistui!\n" - -msgid "Simple bind failed\n" -msgstr "Yksinkertainen sidonta epäonnistui\n" - -msgid "SASL Bind failed\n" -msgstr "SASL-sidonta epäonnistui\n" +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "Virhe jäsennettäessä \"%1$s\": %2$s.\n" #, c-format -msgid "Operation failed: %s\n" -msgstr "Toimenpide epäonnistui: %s\n" +msgid "Error resolving keytab: %s.\n" +msgstr "Virhe keytabin selvittämisessä: %s\n" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "" +"Virhe tallennettaessa valtuustietoja kirjautumistietojen välimuistiin: %s\n" + +msgid "Excluded attributes" +msgstr "Laajennetut määreet" + +msgid "Exclusive" +msgstr "Poissulkeva" + +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "jsonrpc_handle_response puskurin laajennus epäonnistui" + +msgid "External" +msgstr "Ulkoinen" + +msgid "External host" +msgstr "Ulkoinen isäntä" + +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "Tiedon purkaminen JSON-RPC-vastauksesta epäonnistui: %s\n" + +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "Virheen purkaminen JSON-RPC-vastauksesta epäonnistui: %s\n" + +msgid "Failed allowed to create keytab" +msgstr "Avainvälilehden luominen epäonnistui" + +msgid "Failed allowed to retrieve keytab" +msgstr "Avaintaulun haun sallinta epäonnistui" + +msgid "Failed profiles" +msgstr "Epäonnistuneet profiilit" + +msgid "Failed targets" +msgstr "Epäonnistuneita kohteita" + +msgid "Failed to call DBus" +msgstr "DBusin kutsuminen epäonnistui" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "Keytabin sulkeminen epäonnistui!\n" + +#, c-format +msgid "Failed to create control!\n" +msgstr "Tarkistuksen luominen epäonnistui!\n" + +#, c-format +msgid "Failed to create key material\n" +msgstr "Avainmateriaalin luominen epäonnistui\n" + +msgid "Failed to decode control reply!\n" +msgstr "Tarkistusvastauksen purkaminen epäonnistui!\n" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "Keytabin saaminen epäonnistui\n" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "Keytabin saaminen epäonnistui!\n" #, c-format msgid "Failed to get result: %s\n" msgstr "Tuloksen saaminen epäonnistui: %s\n" #, c-format -msgid "Timeout exceeded." -msgstr "Aikakatkaisu ylitetty." +msgid "Failed to open Keytab\n" +msgstr "Keytabin avaaminen epäonnistui\n" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "Kokoonpanotiedoston %s avaaminen epäonnistui\n" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "Avaintaulun avaaminen epäonnistui\n" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "Näppäinvälilehden '%1$s' avaaminen epäonnistui: %2$s\n" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "Asetustiedoston %s jäsentäminen epäonnistui\n" #, c-format msgid "Failed to parse extended result: %s\n" @@ -174,351 +921,243 @@ msgstr "Laajennetun tuloksen jäsentäminen epäonnistui: %s\n" msgid "Failed to parse result: %s\n" msgstr "Tuloksen jäsentäminen epäonnistui: %s\n" -#, c-format -msgid "Missing reply control list!\n" -msgstr "Puuttuu vastausten tarkistusluettelo!\n" +msgid "Failed to remove" +msgstr "Poistaminen epäonnistui" #, c-format -msgid "Missing reply control!\n" -msgstr "Puuttuu vastausten tarkistus!\n" - -#, c-format -msgid "Out of Memory!\n" -msgstr "Muisti loppui!\n" - -#, c-format -msgid "Failed to create control!\n" -msgstr "Tarkistuksen luominen epäonnistui!\n" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "Keytabin saaminen epäonnistui!\n" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "Salaustyypin #%d hakeminen ei onnistunut\n" +msgid "Failed to retrieve any keys" +msgstr "Yhtään avainta ei saatu" #, c-format msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" msgstr "Salaustyypin %1$s hakeminen ei onnistunut (#%2$d)\n" #, c-format -msgid "Failed to retrieve any keys" -msgstr "Yhtään avainta ei saatu" - -msgid "Failed to decode control reply!\n" -msgstr "Tarkistusvastauksen purkaminen epäonnistui!\n" +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "Salaustyypin #%d hakeminen ei onnistunut\n" #, c-format -msgid "Passwords do not match!\n" -msgstr "Salasanat eivät täsmää!\n" +msgid "Failed to set cursor '%1$s'\n" +msgstr "Kohdistimen '%1$s' asettaminen epäonnistui\n" -#, c-format -msgid "Failed to open config file %s\n" -msgstr "Kokoonpanotiedoston %s avaaminen epäonnistui\n" +msgid "False" +msgstr "Epätosi" -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "Asetustiedoston %s jäsentäminen epäonnistui\n" +msgid "Filter" +msgstr "Suodin" -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" +msgid "Find" +msgstr "Etsi" -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" +msgid "Fingerprint" +msgstr "Sormenjälki" -msgid "Print as little as possible" -msgstr "" +msgid "Fingerprint Type" +msgstr "Sormenjälkityyppi" -msgid "Output only on errors" -msgstr "" +msgid "Fingerprints" +msgstr "Sormenjäljet" -msgid "Output debug info" -msgstr "" +msgid "First Code" +msgstr "Ensimmäinen koodi" -msgid "Contact this specific KDC Server" -msgstr "" +msgid "First OTP" +msgstr "Ensimmäinen OTP" -msgid "Server Name" -msgstr "Palvelimen nimi" +msgid "First name" +msgstr "Etunimi" -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" +msgid "Force the host join. Rejoin even if already joined." +msgstr "Pakota kone liittymään. Liity uudelleen, vaikka olisit jo liittynyt." -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" +msgid "Full name" +msgstr "Koko nimi" -msgid "Encryption types to request" -msgstr "" +msgid "General" +msgstr "Yleinen" -msgid "Comma separated encryption types list" -msgstr "" +msgid "Group" +msgstr "Ryhmä" -msgid "Show the list of permitted encryption types and exit" -msgstr "" +#, python-format +msgid "Group '%s' does not exist" +msgstr "Ryhmää '%s' ei ole olemassa" -msgid "Permitted Encryption Types" -msgstr "" +msgid "Group ID Number" +msgstr "Ryhmän tunnusnumero" -msgid "Asks for a non-random password to use for the principal" -msgstr "" +msgid "Group container" +msgstr "Ryhmäkontti" -msgid "LDAP DN" -msgstr "" +msgid "Group name" +msgstr "Ryhmän nimi" -msgid "DN to bind as if not using kerberos" -msgstr "Yhdistettävä DN kuin et käyttäisi Kerberosia" +msgid "Groups" +msgstr "Ryhmät" -msgid "LDAP password" -msgstr "LDAP salasana" +msgid "Groups allowed to create keytab" +msgstr "Ryhmät joiden sallitaan luoda avaintaulu" -msgid "password to use if not using kerberos" -msgstr "käytettävä salasana, jos ei käytetä kerberosia" +msgid "Groups allowed to retrieve keytab" +msgstr "Ryhmät, joilla on oikeus noutaa avaintaulu" -msgid "Prompt for LDAP password" -msgstr "" +msgid "HBAC Rule" +msgstr "HBAC-sääntö" -msgid "Path to the IPA CA certificate" -msgstr "" +msgid "HBAC Rules" +msgstr "HBAC-säännöt" -msgid "IPA CA certificate" -msgstr "" +msgid "HBAC Service" +msgstr "HBAC-palvelu" -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" +msgid "HBAC Services" +msgstr "HBAC-palvelut" -msgid "url" -msgstr "" +msgid "HBAC rule" +msgstr "HBAC-sääntö" -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" +msgid "HBAC rules" +msgstr "HBAC-säännöt" -msgid "GSSAPI|EXTERNAL" -msgstr "" +msgid "HBAC service" +msgstr "HBAC-palvelu" -msgid "Retrieve current keys without changing them" -msgstr "" +msgid "HBAC service description" +msgstr "HBAC-palvelun kuvaus" -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" +msgid "HBAC service group description" +msgstr "HBAC-palveluryhmän kuvaus" -#, c-format -msgid "Supported encryption types:\n" -msgstr "Tuetut salaustyypit:\n" +msgid "HBAC services" +msgstr "HBAC-palvelut" -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" +msgid "HIP record" +msgstr "HIP-tietue" -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" +msgid "HOTP Authentication Window" +msgstr "HOTP-tunnistautumisikkuna" -msgid "Enter LDAP password" -msgstr "Anna LDAP salasana" +msgid "Hide" +msgstr "Piilota" -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" +msgid "Home directory" +msgstr "Kotihakemisto" -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" +msgid "Home directory base" +msgstr "Kotihakemistopohja" -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" +msgid "Host" +msgstr "Kone" -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" +msgid "Host Group" +msgstr "Isäntäryhmä" -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" +msgid "Host Groups" +msgstr "Isäntäryhmät" -#, c-format -msgid "Discovered server %s\n" -msgstr "" +msgid "Host Groups allowed to create keytab" +msgstr "Isäntälaitteiden ryhmät joiden sallitaan luoda avaintaulu" -#, c-format -msgid "Using discovered server %s\n" -msgstr "" +msgid "Host Groups allowed to retrieve keytab" +msgstr "Ryhmät, joilla on oikeus noutaa avaintaulu" -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" +msgid "Host Name" +msgstr "Koneen nimi" -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Using provided server %s\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -msgid "New Principal Password" -msgstr "Uusi pääsalasana" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "Keytabin avaaminen epäonnistui\n" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "Avainmateriaalin luominen epäonnistui\n" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "Keytabin saaminen epäonnistui\n" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "Keytabin sulkeminen epäonnistui!\n" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Out of memory!\n" -msgstr "Muisti loppui!\n" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "Ei lupaa liittää tätä isäntää IPA toimialueeseen.\n" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "Ei kirjoitusoikeuksia keytab-tiedostoon '%s'\n" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "pääsy() kohteeseen %1$s epäonnistui: virhenro = %2$d\n" - -#, c-format -msgid "Out of memory!" -msgstr "Muisti loppui!" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "SSL:n ottaminen käyttöön LDAP:ssa ei onnistu\n" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "%1$s:n haku rootdse:stä epäonnistui virheellä %2$d\n" - -#, c-format -msgid "No values for %s" -msgstr "Ei arvoja kohteelle %s" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "IPA-nimeämiskontekstin haku epäonnistui virheellä %d\n" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "IPA-nimeämiskontekstia ei löytynyt\n" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "%s: root DN:ää ei voida määrittää\n" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "Rekisteröinti epäonnistui. %s\n" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "toimeksiantajaa ei löydy XML-RPC-vastauksesta\n" +msgid "Host category" +msgstr "Isäntäluokka" #, c-format msgid "Host is already joined.\n" msgstr "Kone on jo liittynyt.\n" -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "curl_slist_append() epäonnistui arvolle: '%s'\n" +msgid "Host name" +msgstr "Koneen nimi" + +msgid "Host-group" +msgstr "Isäntäryhmä" + +msgid "Hostname" +msgstr "Koneen nimi" + +msgid "Hostname of this server" +msgstr "Palvelimen isäntänimi" + +msgid "Hosts" +msgstr "Koneet" + +msgid "Hosts allowed to create keytab" +msgstr "Isännät joiden sallitaan luoda avaintaulu" + +msgid "Hosts allowed to retrieve keytab" +msgstr "Isäntälaitteet, joilla on oikeus noutaa avaintaulu" + +msgid "IP Address" +msgstr "IP-osoite" + +msgid "IPA CA servers" +msgstr "IPA:n CA-palvelimet" + +msgid "IPA DNS servers" +msgstr "IPA:n DNS-palvelimet" + +msgid "IPA KRA servers" +msgstr "IPA:n KRA-palvelimet" + +msgid "IPA Location" +msgstr "IPA-sijainti" + +msgid "IPA Locations" +msgstr "IPA sijainnit" + +msgid "IPA Server to use" +msgstr "Käytettävä IPA-palvelin" #, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "curl_easy_setopt() epäonnistui\n" +msgid "IPA namingContext not found\n" +msgstr "IPA-nimeämiskontekstia ei löytynyt\n" + +msgid "IPA role name" +msgstr "IPA-roolin nimi" + +msgid "Identity" +msgstr "Identiteetti" + +msgid "Identity provider details" +msgstr "Identiteetin tarjoajan tiedot" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "Tuotu profiili \"%(value)s\"" + +msgid "Included attributes" +msgstr "Sisälletyt attribuutit" + +msgid "Indirect" +msgstr "Epäsuora" + +msgid "Input file" +msgstr "Syötetiedosto" + +msgid "Input filename" +msgstr "Syötetiedoston nimi" + +msgid "Internal Error" +msgstr "Sisäinen virhe" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Virheellinen JSON-RPC-pyyntö: %(error)s" + +msgid "Invalid credentials" +msgstr "Virheelliset tunnistautumistiedot" + +msgid "Invalid number of parts!" +msgstr "Virheellinen osien lukumäärä!" #, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "jsonrpc_handle_response puskurin laajennus epäonnistui" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "curl_global_init() epäonnistui\n" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "curl_easy_init() epäonnistui\n" - -#, c-format -msgid "json_dumps() failed\n" -msgstr "json_dumps() epäonnistui\n" - -#, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "" -"JSON-RPC pyyntö:\n" -"%s\n" +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "JSON-RPC kutsu epäonnistui statuskoodilla: %li\n" #, c-format msgid "JSON-RPC call failed: %s\n" @@ -529,8 +1168,12 @@ msgid "JSON-RPC call was unauthorized. Check your credentials.\n" msgstr "JSON-RPC kutsu oli käyttöoikeudeton. Tarkista valtuustietosi .\n" #, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "JSON-RPC kutsu epäonnistui statuskoodilla: %li\n" +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "" +"JSON-RPC pyyntö:\n" +"%s\n" #, c-format msgid "" @@ -540,9 +1183,500 @@ msgstr "" "JSON-RPC vastaus:\n" "%s\n" +msgid "KEY record" +msgstr "KEY-tietue" + +msgid "KX Preference" +msgstr "KX etusija" + +msgid "KX record" +msgstr "KX-tietue" + #, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "Virheen purkaminen JSON-RPC-vastauksesta epäonnistui: %s\n" +msgid "Kerberos context initialization failed\n" +msgstr "Kerberos-kontekstin alustus epäonnistui\n" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "Kerberos-kontekstin alustus epäonnistui: %1$s (%2$d)\n" + +msgid "Key" +msgstr "Avain" + +msgid "LDAP basedn" +msgstr "LDAP:in BaseDN" + +msgid "LDAP password" +msgstr "LDAP salasana" + +msgid "LDAP password (if not using Kerberos)" +msgstr "LDAP-salasana (jos et käytä Kerberosia)" + +msgid "LDAP schema" +msgstr "LDAP:in skeema" + +msgid "LOC Size" +msgstr "LOC:n koko" + +msgid "Label" +msgstr "Nimiö" + +msgid "Labels" +msgstr "Nimiöt" + +msgid "Last name" +msgstr "Sukunimi" + +msgid "Level" +msgstr "Taso" + +msgid "Locality" +msgstr "Sijainti" + +msgid "Location" +msgstr "Sijainti" + +msgid "Log in" +msgstr "Kirjaudu sisään" + +msgid "Log out" +msgstr "Kirjaudu ulos" + +msgid "MAC address" +msgstr "MAC-osoite" + +msgid "MX Preference" +msgstr "MX etusija" + +msgid "MX record" +msgstr "MX-tietue" + +msgid "Member Group" +msgstr "Jäsenryhmä" + +msgid "Member HBAC service" +msgstr "Jäsen HBAC-palvelu" + +msgid "Member Host" +msgstr "Jäsenisännät" + +msgid "Member Hostgroup" +msgstr "Jäsenisäntäryhmät" + +msgid "Member User" +msgstr "Jäsenkäyttäjä" + +msgid "Member groups" +msgstr "Jäsenryhmät" + +msgid "Member host-groups" +msgstr "Jäsenisäntäryhmät" + +msgid "Member hosts" +msgstr "Jäsenisännät" + +msgid "Member netgroups" +msgstr "Jäsen verkkoryhmät" + +msgid "Member of" +msgstr "Tämän jäsen" + +msgid "Member of a group" +msgstr "Ryhmän jäsen" + +msgid "Member of group" +msgstr "Ryhmän jäsen" + +msgid "Member of groups" +msgstr "Jäsen ryhmissä" + +msgid "Member of host-groups" +msgstr "Jäsen isäntäryhmissä" + +msgid "Member of netgroups" +msgstr "Jäsen verkkoryhmissä" + +msgid "Member users" +msgstr "Jäsenkäyttäjät" + +msgid "Members" +msgstr "Jäsenet" + +msgid "Migrate" +msgstr "Suorita migraatio" + +msgid "Migrating" +msgstr "Suoritetaan migraatiota" + +msgid "Minimum length of password" +msgstr "salasanan vähimmäispituus" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "Puuttuu vastausten tarkistusluettelo!\n" + +#, c-format +msgid "Missing reply control!\n" +msgstr "Puuttuu vastausten tarkistus!\n" + +msgid "Model" +msgstr "Malli" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "Muokattu ACI:ta \"%(value)s\"" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "Muokattu CA:ta \"%(value)s\"" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "Muokattu CA ACL:ää \"%(value)s\"" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "Muokattu DNS palvelinta \"%(value)s\"" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "Muokattu HBAC sääntöä \"%(value)s\"" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "Muokattu HBAC palvelua \"%(value)s\"" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "Muokattu HBAC palveluryhmää \"%(value)s\"" + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "Muokattu IPA palvelinta \"%(value)s\"" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "Muokattu OTP-tunnus \"%(value)s\"" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "Muokattu SELinux-käyttäjäkarttaa \"%(value)s\"" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Muokattu sudosääntöä \"%(value)s\"" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Muokattu ryhmää \"%(value)s\"" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "Muokattu isäntää \"%(value)s\"" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Muokattu isäntäryhmää \"%(value)s\"" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "Muokattu verkkoryhmää \"%(value)s\"" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "Muokattu oikeutta \"%(value)s\"" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "Muokattu roolia \"%(value)s\"" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "Muokattu segmenttiä \"%(value)s\"" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "Muokattu itsepalvelua \"%(value)s\"" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "Muokattu palvelua \"%(value)s\"" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "Muokattu stagen käyttäjää \"%(value)s\"" + +#, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "Muokattu alisteista tunnusta \"%(value)s\"" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Muokattu käyttäjää \"%(value)s\"" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "Muokattu holvia \"%(value)s\"" + +msgid "Modify ACI." +msgstr "Muokkaa ACI:ta." + +msgid "Modify CA configuration." +msgstr "Muokkaa CA-asetuksia." + +msgid "Modify ID range." +msgstr "Muokkaa ID-aluetta." + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" +"Muokkaa ID-aluetta.\n" +"\n" + +msgid "Modify OTP configuration options." +msgstr "Muokkaa kertakäyttöisen salasanan määrityksiä." + +msgid "Modify a OTP token." +msgstr "Muokkaa OTP-tunnusta." + +msgid "Modify a SELinux User Map." +msgstr "Muokkaa SELinux-käyttäjäkarttaa." + +msgid "Modify a delegation." +msgstr "Muokkaa valtuuskuntaa." + +msgid "Modify a group." +msgstr "Muokkaa ryhmää." + +msgid "Modify a hostgroup." +msgstr "Muokkaa isäntäryhmää." + +msgid "Modify a netgroup." +msgstr "Muokkaa verkkoryhmää." + +msgid "Modify a vault." +msgstr "Muokkaa holvia." + +msgid "Modify an Group ID override." +msgstr "Muokkaa ryhmätunnuksen ohitusta." + +msgid "Modify an HBAC rule." +msgstr "Muokkaa HBAC-sääntöä." + +msgid "Modify an HBAC service group." +msgstr "Muokkaa HBAC-palveluryhmää." + +msgid "Modify an ID View." +msgstr "Muokkaa tunnusnäkymää." + +msgid "Modify an ID override." +msgstr "Muokkaa tunnuksen ohitusta." + +msgid "Modify an User ID override." +msgstr "Muokkaa ryhmätunnuksen ohitusta." + +msgid "Modify an automount key." +msgstr "Muokkaa automount-avainta." + +msgid "Modify an automount map." +msgstr "Muokkaa automaattisesti liitettävän karttaa." + +msgid "Modify configuration options." +msgstr "Muokkaa asetuksia." + +msgid "Mount information" +msgstr "Tietoja liitoksesta" + +msgid "Mount point" +msgstr "Liitospiste" + +msgid "Must be a positive number" +msgstr "Tulee olla positiivinen numero" + +msgid "NAPTR Order" +msgstr "NAPTR :n järjestys" + +msgid "NAPTR Preference" +msgstr "NAPTR etusija" + +msgid "NAPTR Service" +msgstr "NAPTR-palvelu" + +msgid "NAPTR record" +msgstr "NAPTR-tietue" + +msgid "NIS domain name" +msgstr "NIS-toimialueen nimi" + +msgid "NS Hostname" +msgstr "NS-isäntänimi" + +msgid "NS record" +msgstr "NS-tietue" + +msgid "NSEC record" +msgstr "NSEC-tietue" + +msgid "NSEC3 record" +msgstr "NSEC3-tietue" + +msgid "Name" +msgstr "Nimi" + +msgid "Netgroup" +msgstr "Verkkoryhmä" + +msgid "Netgroup description" +msgstr "Verkkoryhmän kuvaus" + +msgid "Netgroup name" +msgstr "Verkkoryhmän nimi" + +msgid "Netgroups" +msgstr "Verkkoryhmät" + +msgid "Network Services" +msgstr "Verkon palvelut" + +msgid "New Password" +msgstr "Uusi salasana" + +msgid "New Principal Password" +msgstr "Uusi pääsalasana" + +msgid "New mount information" +msgstr "Uudet liitostiedot" + +msgid "New vault password" +msgstr "Uusi holvin salasana" + +msgid "Next" +msgstr "Seuraava" + +msgid "No entries." +msgstr "Ei merkintöjä." + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "KDC ei hyväksy avaimia\n" + +msgid "No matching entries found" +msgstr "Vastaavia tietueita ei löytynyt" + +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "Ei lupaa liittää tätä isäntää IPA toimialueeseen.\n" + +msgid "No response" +msgstr "Ei vastausta" + +#, c-format +msgid "No values for %s" +msgstr "Ei arvoja kohteelle %s" + +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "Ei kirjoitusoikeuksia keytab-tiedostoon '%s'\n" + +msgid "Note" +msgstr "Huomautus" + +msgid "OK" +msgstr "OK" + +msgid "OTP" +msgstr "Kertakäyttöinen salasana" + +msgid "OTP Configuration" +msgstr "Kertakäyttöisen salasanan määritykset" + +msgid "OTP Token" +msgstr "OTP-tunnus" + +msgid "OTP Tokens" +msgstr "OTP-tunnukset" + +msgid "OTP token" +msgstr "OTP-tunnus" + +msgid "OTP tokens" +msgstr "OTP-tunnukset" + +msgid "Old vault password" +msgstr "Vanha holvin salasana" + +msgid "One Time Password" +msgstr "Kertakäyttöinen salasana" + +msgid "One-Time Password" +msgstr "Kertakäyttöinen salasana" + +msgid "Operating system" +msgstr "Käyttöjärjestelmä" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "Toimenpide epäonnistui: %s\n" + +msgid "Options" +msgstr "Valinnat" + +msgid "Order" +msgstr "Järjestys" + +msgid "Organization" +msgstr "Organisaatio" + +#, c-format +msgid "Out of Memory!\n" +msgstr "Muisti loppui!\n" + +msgid "Out of memory\n" +msgstr "Muisti loppui\n" + +#, c-format +msgid "Out of memory \n" +msgstr "Muisti loppui \n" + +#, c-format +msgid "Out of memory!" +msgstr "Muisti loppui!" + +#, c-format +msgid "Out of memory!\n" +msgstr "Muisti loppui!\n" + +msgid "Out of memory!?\n" +msgstr "Muisti loppui!?\n" + +msgid "Output filename" +msgstr "Vientitiedoston nimi" + +msgid "Owner" +msgstr "Omistaja" + +#, python-format +msgid "Owner %s" +msgstr "Omistaja %s" + +msgid "Owner groups" +msgstr "Omistajaryhmät" + +msgid "Owner services" +msgstr "Omistajapalvelut" + +msgid "Owners" +msgstr "Omistajat" + +msgid "PTR Hostname" +msgstr "PTR-isäntänimi" + +msgid "PTR record" +msgstr "PTR-tietue" + +msgid "Parse error" +msgstr "Jäsennysvirhe" #, c-format msgid "Parsing JSON-RPC response failed: %s\n" @@ -553,33 +1687,705 @@ msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" msgstr "" "JSON-RPC-vastauksen jäsentäminen epäonnistui: \"Tulos\"arvoa ei löytynyt.\n" -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "Tiedon purkaminen JSON-RPC-vastauksesta epäonnistui: %s\n" +msgid "Password" +msgstr "Salasana" + +msgid "Password Expiration Notification (days)" +msgstr "Ilmoitus salasanan vanhenemisesta (päiviä)" + +msgid "Password expiration" +msgstr "Salasanan vanheneminen" + +msgid "Password or Password+One-Time Password" +msgstr "Salasana tai salasana + Kertakäyttöinen salasana (eng. OTP)" + +msgid "Password plugin features" +msgstr "Salasanalaajennuksen ominaisuudet" + +msgid "Passwords do not match" +msgstr "Salasanat eivät täsmää" + +msgid "Passwords do not match!" +msgstr "Salasanat eivät täsmää!" #, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "json_pack_ex() epäonnistui: %s\n" +msgid "Passwords do not match!\n" +msgstr "Salasanat eivät täsmää!\n" + +msgid "Passwords must match" +msgstr "Salasanojen täytyy täsmätä" + +msgid "Permission" +msgstr "Käyttöoikeus" + +msgid "Permission flags" +msgstr "Käyttöoikeusmerkinnät" + +msgid "Permission name" +msgstr "Käyttöoikeuden nimi" + +msgid "Permission type" +msgstr "Käyttöoikeuden tyyppi" + +msgid "Permission value" +msgstr "Käyttöoikeuden arvo" + +msgid "Permissions" +msgstr "Käyttöoikeudet" + +msgid "Platform" +msgstr "Alusta" + +msgid "Port" +msgstr "Portti" + +msgid "Positional arguments" +msgstr "Sijainnilliset parametrit" + +msgid "Preference" +msgstr "Etusija" + +msgid "Principal name" +msgstr "Ensisijaisen nimi" + +msgid "Print debugging information" +msgstr "Tulosta virheenkorjaustiedot" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "Tulosta XML-RPC-raaka-tuloste GSSAPI-tilassa" + +msgid "Priority" +msgstr "Prioriteetti" + +msgid "Profile" +msgstr "Profiili" + +msgid "Profile ID" +msgstr "Profiilin tunnus" + +msgid "Profile description" +msgstr "Profiilin kuvaus" + +msgid "Profiles" +msgstr "Profiilit" + +msgid "Protocol" +msgstr "Protokolla" + +msgid "Public Key" +msgstr "Julkinen avain" + +msgid "Public key" +msgstr "Julkinen avain" + +msgid "Public key:" +msgstr "Julkinen avain:" + +msgid "Quiet mode. Only errors are displayed." +msgstr "Hiljainen tila. Vain virheet näytetään." + +msgid "RP record" +msgstr "RP-tietue" + +msgid "RRSIG record" +msgstr "RRSIG-tietue" + +msgid "Random password" +msgstr "Satunnainen salasana" + +#, python-format +msgid "Raw %s records" +msgstr "Raaka %s tietueet" + +msgid "Raw A records" +msgstr "Raw A -tietueet" + +msgid "Raw A6 records" +msgstr "Raw A6 -tietueet" + +msgid "Raw AAAA records" +msgstr "Raw AAAA -tietueet" + +msgid "Raw APL records" +msgstr "Raw APL -tietueet" + +msgid "Raw CERT records" +msgstr "Raw CERT -tietueet" + +msgid "Raw DHCID records" +msgstr "Raw DHCID -tietueet" + +msgid "Raw DLV records" +msgstr "Raw DLV -tietueet" + +msgid "Raw DNSKEY records" +msgstr "Raw DNSKEY -tietueet" + +msgid "Raw DS records" +msgstr "Raw DS -tietueet" + +msgid "Raw HIP records" +msgstr "Raw HIP -tietueet" + +msgid "Raw IPSECKEY records" +msgstr "Raw IPSECKEY -tietueet" + +msgid "Raw KEY records" +msgstr "Raw KEY -tietueet" + +msgid "Raw KX records" +msgstr "Raw KX -tietueet" + +msgid "Raw LOC records" +msgstr "Raw LOC -tietueet" + +msgid "Raw MX records" +msgstr "Raw MX -tietueet" + +msgid "Raw NAPTR records" +msgstr "Raw NAPTR -tietueet" + +msgid "Raw NS records" +msgstr "Raw NS -tietueet" + +msgid "Raw NSEC records" +msgstr "Raw NSEC -tietueet" + +msgid "Raw NSEC3 records" +msgstr "Raw NSEC3 -tietueet" + +msgid "Raw PTR records" +msgstr "Raw PTR -tietueet" + +msgid "Raw RP records" +msgstr "Raw RP -tietueet" + +msgid "Raw RRSIG records" +msgstr "Raw RRSIG -tietueet" + +msgid "Raw SIG records" +msgstr "Raw SIG -tietueet" + +msgid "Raw SPF records" +msgstr "Raw SPF -tietueet" + +msgid "Raw SRV records" +msgstr "Raw SRV -tietueet" + +msgid "Raw SSHFP records" +msgstr "Raw SSHFP -tietueet" + +msgid "Raw TA records" +msgstr "Raw TA -tietueet" + +msgid "Raw TKEY records" +msgstr "Raw TKEY -tietueet" + +msgid "Raw TLSA records" +msgstr "Raw TLSA -tietueet" + +msgid "Raw TSIG records" +msgstr "Raw TSIG -tietueet" + +msgid "Raw TXT records" +msgstr "Raw TXT -tietueet" + +msgid "Realm name" +msgstr "Alueen nimi" + +msgid "Reason" +msgstr "Syy" + +msgid "Record Type" +msgstr "Tietueen tyyppi" + +msgid "Record creation failed." +msgstr "Tietueen luominen epäonnistui." + +msgid "Record data" +msgstr "Tietueen tiedot" + +msgid "Record name" +msgstr "Tietueen nimi" + +msgid "Record not found." +msgstr "Tietuetta ei löydy." + +msgid "Record type" +msgstr "Tietueen tyyppi" + +msgid "Records" +msgstr "Merkinnät" + +msgid "Redirection" +msgstr "Uudelleenohjeus" + +msgid "Refresh" +msgstr "Päivitä" + +msgid "Remove" +msgstr "Poista" + +msgid "Remove Kerberos Alias" +msgstr "Poista Kerberos-alias" + +msgid "Remove entries from DNS" +msgstr "Poista tietueet DNS:stä" + +msgid "Remove hold" +msgstr "Poista pito" + +msgid "Remove hosts" +msgstr "Poista isännät" + +msgid "Remove profiles from a CA ACL." +msgstr "Poista profiileita CA ACL:stä." + +msgid "Remove roles" +msgstr "Poista rooleja" + +msgid "Remove services" +msgstr "Poista palveluita" + +msgid "Remove services from a CA ACL." +msgstr "Poista palveluita CA ACL:stä." + +msgid "Remove users" +msgstr "Poista käyttäjiä" + +msgid "Remove vaults" +msgstr "Poista holveja" #, c-format -msgid "Unenrollment successful.\n" -msgstr "Rekisteröinnin purkaminen onnistui.\n" +msgid "Removing principal %s\n" +msgstr "Poistetaan ensisijaista %s\n" + +msgid "Rename" +msgstr "Nimeä uudelleen" + +msgid "Rename an ACI." +msgstr "Nimeä uudelleen ACI." + +msgid "Required" +msgstr "Vaaditaan" + +msgid "Requires pre-authentication" +msgstr "Vaatii ennakkotunnistautumisen" + +msgid "Reset" +msgstr "Nollaa" + +msgid "Reset your password." +msgstr "Nollaa salasanasi." + +msgid "Restore" +msgstr "Palauta" + +msgid "Retries" +msgstr "Uudelleenyritykset" + +msgid "Retry" +msgstr "Yritä uudelleen" + +msgid "Revert" +msgstr "Palaa takaisin" + +msgid "Rights" +msgstr "Oikeudet" + +msgid "Role" +msgstr "Rooli" + +msgid "Roles" +msgstr "Roolit" + +msgid "Rule name" +msgstr "Säännön nimi" + +msgid "Rules" +msgstr "Säännöt" + +msgid "RunAs Users" +msgstr "Suorita käyttäjinä" + +msgid "SASL Bind failed\n" +msgstr "SASL-sidonta epäonnistui\n" + +msgid "SELinux User" +msgstr "SELinux-käyttäjä" + +msgid "SELinux User Map" +msgstr "SELinux-käyttäjäkartta" + +msgid "SELinux User Maps" +msgstr "SELinux-käyttäjäkartat" + +msgid "SELinux user map order" +msgstr "SELinux käyttäjäkarttajärjestys" + +msgid "SHA1 Fingerprint" +msgstr "SHA1-sormenjälki" + +msgid "SHA256 Fingerprint" +msgstr "SHA256-sormenjälki" + +msgid "SIG record" +msgstr "SIG-tietue" + +msgid "SMB Home Directory Drive" +msgstr "SMB-kotihakemisto-osio" + +msgid "SOA record serial number" +msgstr "SOA-tietueen sarjanumero" + +msgid "SOA refresh" +msgstr "SOA-virkistys" + +msgid "SOA serial" +msgstr "SOA-sarjanumero" + +msgid "SPF record" +msgstr "SPF-tietue" + +msgid "SRV Port" +msgstr "SRV-portti" + +msgid "SRV Priority" +msgstr "SRV-etusija" + +msgid "SRV Target" +msgstr "SRV-kohde" + +msgid "SRV Weight" +msgstr "SRV-paino" + +msgid "SRV record" +msgstr "SRV-tietue" + +msgid "SSH public key" +msgstr "Julkinen SSH-avain" + +msgid "SSH public key fingerprint" +msgstr "SSH julkisen avaimen sormenjälki" + +msgid "SSH public key:" +msgstr "Julkinen SSH-avain:" + +msgid "SSH public keys" +msgstr "Julkisia SSH-avaimia" + +msgid "SSHFP Fingerprint" +msgstr "SSHFP-sormenjälki" + +msgid "SSHFP Fingerprint Type" +msgstr "SSHFP-sormenjälkityyppi" + +msgid "Save" +msgstr "Tallenna" + +msgid "Search" +msgstr "Haku" #, c-format -msgid "Unenrollment failed.\n" -msgstr "Rekisteröinnin purkaminen epäonnistui.\n" +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "%1$s:n haku rootdse:stä epäonnistui virheellä %2$d\n" #, c-format -msgid "result not found in XML-RPC response\n" -msgstr "tulosta ei löydy XML-RPC-vastauksesta\n" +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "IPA-nimeämiskontekstin haku epäonnistui virheellä %d\n" + +msgid "Search for Identity Provider servers." +msgstr "Etsi Identity Provider -palvelimia." + +msgid "Search for SELinux User Maps." +msgstr "Etsi SELinux-käyttäjäkarttoja." + +msgid "Search for groups." +msgstr "Etsi ryhmiä." + +msgid "Search for hostgroups." +msgstr "Etsi isäntäryhmiä." + +msgid "Second Code" +msgstr "Toinen koodi" + +msgid "Second OTP" +msgstr "Toinen OTP" + +msgid "Secret" +msgstr "Salainen" + +msgid "Select All" +msgstr "Valitse kaikki" + +msgid "Selector" +msgstr "Valitsin" + +msgid "Serial" +msgstr "Sarjanumero" + +msgid "Serial Number" +msgstr "Sarjanumero" + +msgid "Serial Number (hex)" +msgstr "Sarjanumero (hex)" + +msgid "Serial number" +msgstr "Sarjanumero" + +msgid "Serial number (hex)" +msgstr "Sarjanumero (hex)" + +msgid "Server" +msgstr "Palvelin" + +msgid "Server Name" +msgstr "Palvelimen nimi" + +msgid "Server Role" +msgstr "Palvelimen rooli" + +msgid "Server Roles" +msgstr "Palvelinrooleja" + +msgid "Server name" +msgstr "Palvelimen nimi" + +msgid "Servers" +msgstr "Palvelimet" + +msgid "Servers details:" +msgstr "Palvelimen yksityiskohdat:" + +msgid "Service" +msgstr "Palvelu" + +msgid "Service Groups" +msgstr "Palveluryhmät" + +msgid "Service Options" +msgstr "Palveluvalinnat" + +msgid "Service Settings" +msgstr "Palvelun asetukset" + +msgid "Service category" +msgstr "Palveluluokka" + +msgid "Service delegation rules" +msgstr "Palveluvalinnat" + +msgid "Service group name" +msgstr "Palveluryhmän nimi" + +msgid "Service name" +msgstr "Palvelun nimi" + +msgid "Services" +msgstr "Palvelut" + +msgid "Set" +msgstr "Aseta" + +msgid "Set a user's password." +msgstr "Aseta käyttäjän salasana." + +msgid "Settings" +msgstr "Asetukset" + +msgid "Shared" +msgstr "Jaettu" + +msgid "Shared Vaults" +msgstr "Jaetut holvit" + +msgid "Shared vault" +msgstr "Jaettu holvi" + +msgid "Show" +msgstr "Näytä" + +msgid "Show the current OTP configuration." +msgstr "Näytä nykyiset kertakäyttöisen salasanan määritykset." + +msgid "Show the current configuration." +msgstr "Näytä nykyiset määritykset." + +msgid "Show vault configuration." +msgstr "Näytä holvin asetukset." + +msgid "Signature" +msgstr "Allekirjoitus" + +msgid "Simple bind failed\n" +msgstr "Yksinkertainen sidonta epäonnistui\n" + +msgid "Size" +msgstr "Koko" + +msgid "Some operations failed." +msgstr "Jotkut toiminnot epäonnistuivat." + +msgid "Source Hosts" +msgstr "Lähde koneet" + +msgid "Source host" +msgstr "Lähde kone" + +msgid "Specifies where to store keytab information." +msgstr "Määrittää, mihin keytab tiedot tallennetaan." + +msgid "Stage" +msgstr "Vaihe" + +msgid "Standard" +msgstr "Tavallinen" + +msgid "State" +msgstr "Tila" + +msgid "Status" +msgstr "Tila" + +msgid "Subject" +msgstr "Aihe" + +msgid "Subject OID" +msgstr "Aihe OID" + +msgid "Success" +msgstr "Onnistui" + +msgid "Sudo Deny Commands" +msgstr "Sudo Deny -komennot" + +msgid "Sudo Rule" +msgstr "Sudo-sääntö" + +msgid "Sudo Rules" +msgstr "sudo-säännöt" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "Tuetut salaustyypit:\n" + +msgid "Sync OTP Token" +msgstr "Synkronointi-OTP-tunnus" + +msgid "Synchronize an OTP token." +msgstr "Synkronoi OTP-tunnus." + +msgid "Synchronizing" +msgstr "Synkronoidaan" + +msgid "TA record" +msgstr "TA-tietue" + +msgid "TKEY record" +msgstr "TKEY-tietue" + +msgid "TLSA record" +msgstr "TLSA-tietue" + +msgid "TOTP authentication Window" +msgstr "TOTP-tunnistautumisikkuna" + +msgid "TSIG record" +msgstr "TSIG-tietue" + +msgid "TXT record" +msgstr "TXT-tietue" + +msgid "Target" +msgstr "Kohde" + +msgid "Target group" +msgstr "Kohderyhmä" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "Koneen nimen on oltava täysin määritelty: %s\n" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "Koneen nimi ei voi olla: %s\n" + +msgid "The hostname to register as" +msgstr "Isäntänimi rekisteröitäväksi" + +msgid "This entry is already disabled" +msgstr "Tämä merkintä on jo poistettu käytöstä" + +msgid "This entry is already enabled" +msgstr "Tämä merkintä on jo käytössä" + +msgid "Timeout" +msgstr "Aikakatkaisu" + +#, c-format +msgid "Timeout exceeded." +msgstr "Aikakatkaisu ylitetty." + +msgid "Token ID" +msgstr "Token-tunniste" + +msgid "Topic commands:" +msgstr "Aiheen komennot:" + +msgid "Topology" +msgstr "Topologia" + +msgid "Topology suffix" +msgstr "Topologian pääte" + +msgid "Topology suffixes" +msgstr "Topologian pääteitä" + +msgid "Type" +msgstr "Tyyppi" + +msgid "Types of supported user authentication" +msgstr "Tuetut käyttäjän todennuksen tyypit" + +msgid "UID" +msgstr "UID" + +msgid "URL" +msgstr "URL" + +msgid "UUID" +msgstr "UUID" + +msgid "Unable to communicate with CMS" +msgstr "Kommunikaatio CMS:n kanssa epäonnistui" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "Kommunikaatio CMS:n kanssa epäonnistui (tila %d)" #, c-format msgid "Unable to determine IPA server from %s\n" msgstr "IPA-palvelinta ei voida määrittää kohteesta %s\n" #, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "Ei voida liittyä isäntään: Kerberos-kontekstin alustus epäonnistui\n" +msgid "Unable to determine root DN of %s\n" +msgstr "%s: root DN:ää ei voida määrittää\n" + +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "SSL:n ottaminen käyttöön LDAP:ssa ei onnistu\n" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "Kerberos-kirjautumistietovälimuistia ei voi luoda\n" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "Yhteyttä LDAP-palvelimeen %1$s ei voi alustaa: %2$s\n" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "LDAP-kirjaston alustaminen epäonnistui!\n" #, c-format msgid "Unable to join host: Kerberos Credential Cache not found\n" @@ -595,23319 +2401,175 @@ msgstr "" "isäntäsalasanaa ei annettu.\n" #, c-format -msgid "fork() failed\n" -msgstr "fork() epäonnistui\n" +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "Ei voida liittyä isäntään: Kerberos-kontekstin alustus epäonnistui\n" #, c-format -msgid "ipa-getkeytab not found\n" -msgstr "ipa-getkeytabia ei löydy\n" +msgid "Unable to parse principal\n" +msgstr "Ensisijaista ei voi jäsentää\n" #, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "ipa-getkeytabilla on väärät käyttöoikeudet?\n" +msgid "Unable to parse principal name\n" +msgstr "Prinsipaalinimen jäsentäminen ei onnistu\n" #, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "ipa-getkeytabin suorittaminen epäonnistui, virhe %d\n" +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "Prinsipaalin jäsentäminen ei onnistu: %1$s (%2$d)\n" #, c-format -msgid "child exited with %d\n" -msgstr "lapsi poistui viestillä %d\n" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "Virhe keytabin selvittämisessä: %s\n" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "Kerberos-oletusalueen hakemisessa tapahtui virhe: %s\n" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "Virhe jäsennettäessä \"%1$s\": %2$s.\n" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "Virhe ensimmäisten tunnistetietojen hankinnassa: %s\n" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "Kerberos-kirjautumistietovälimuistia ei voi luoda\n" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" -"Virhe tallennettaessa valtuustietoja kirjautumistietojen välimuistiin: %s\n" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "Tulosta XML-RPC-raaka-tuloste GSSAPI-tilassa" - -msgid "Quiet mode. Only errors are displayed." -msgstr "Hiljainen tila. Vain virheet näytetään." +msgid "Unable to remove entry\n" +msgstr "Merkintää ei voi poistaa\n" msgid "Unenroll this host from IPA server" msgstr "Poista tämän koneen rekisteröinti IPA-palvelimelta" -msgid "Hostname of this server" -msgstr "Palvelimen isäntänimi" - -msgid "hostname" -msgstr "koneen nimi" - -msgid "IPA Server to use" -msgstr "Käytettävä IPA-palvelin" - -msgid "Specifies where to store keytab information." -msgstr "Määrittää, mihin keytab tiedot tallennetaan." - -msgid "filename" -msgstr "tiedostonimi" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "Pakota kone liittymään. Liity uudelleen, vaikka olisit jo liittynyt." - -msgid "LDAP password (if not using Kerberos)" -msgstr "LDAP-salasana (jos et käytä Kerberosia)" - -msgid "password" -msgstr "salasana" - -msgid "LDAP basedn" -msgstr "LDAP:in BaseDN" - -msgid "basedn" -msgstr "BaseDN" +#, c-format +msgid "Unenrollment failed.\n" +msgstr "Rekisteröinnin purkaminen epäonnistui.\n" #, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "Ei voida saada koneen FQDN:ia!\n" +msgid "Unenrollment successful.\n" +msgstr "Rekisteröinnin purkaminen onnistui.\n" -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "Koneen nimen on oltava täysin määritelty: %s\n" +msgid "Unknown" +msgstr "Tuntematon" -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "Koneen nimi ei voi olla: %s\n" +msgid "Unknown Error" +msgstr "Tuntematon virhe" -msgid "Failed to add" -msgstr "" +msgid "Unlock" +msgstr "Avaa" -msgid "Write certificate (chain if --chain used) to file" -msgstr "" +msgid "Unspecified" +msgstr "Määrittämätön" -msgid "Unrevoked" -msgstr "" +msgid "Unsupported value" +msgstr "Ei tuettu arvo" -msgid "Error" -msgstr "Virhe" - -msgid "Input filename" -msgstr "Syötetiedoston nimi" - -msgid "File to load the certificate from." -msgstr "" - -msgid "cannot specify both raw certificate and file" -msgstr "" - -msgid "Input file" -msgstr "Syötetiedosto" - -msgid "File to load the certificate from" -msgstr "" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "" - -msgid "Split DNS record to parts" -msgstr "" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" - -msgid "DNS resource record type" -msgstr "" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" - -msgid "No option to modify specific record provided." -msgstr "" - -msgid "Current DNS record contents:\n" -msgstr "" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -msgid "No option to delete specific record provided." -msgstr "" - -msgid "Delete all?" -msgstr "Poista kaikki?" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "" - -msgid "Server will check DNS forwarder(s)." -msgstr "" - -msgid "This may take some time, please wait ..." -msgstr "" - -msgid "DNS forwarder" -msgstr "" - -msgid "file to store DNS records in nsupdate format" -msgstr "" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "Palvelimen yksityiskohdat:" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -msgid "Delete a user" -msgstr "Poista käyttäjä" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - -msgid "maps not connected to /etc/auto.master:" -msgstr "" - -msgid "Import automount files for a specific location." -msgstr "" - -msgid "Master file" -msgstr "" - -msgid "Automount master file." -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" - -#, python-format -msgid "File %(file)s not found" -msgstr "" - -#, python-format -msgid "key %(key)s already exists" -msgstr "" - -#, python-format -msgid "map %(map)s already exists" -msgstr "" - -msgid "Imported maps:" -msgstr "" - -#, python-format -msgid "Added %(map)s" -msgstr "" - -msgid "Imported keys:" -msgstr "" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "" - -msgid "Ignored keys:" -msgstr "" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "" - -msgid "Duplicate maps skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(map)s" -msgstr "" - -msgid "Duplicate keys skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(key)s" -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "Synkronoi OTP-tunnus." - -msgid "User ID" -msgstr "Käyttäjä ID" - -msgid "Password" -msgstr "Salasana" - -msgid "First Code" -msgstr "Ensimmäinen koodi" - -msgid "Second Code" -msgstr "Toinen koodi" - -msgid "Token ID" -msgstr "Token-tunniste" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" -"\n" -"YubiKey Tokenit\n" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "Lisää uusi YubiKey:n OTP-token." - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "" - -msgid "Invalid credentials" -msgstr "Virheelliset tunnistautumistiedot" - -msgid "Create a new vault." -msgstr "" - -#, fuzzy -msgid "Vault password" -msgstr "salasana" - -msgid "File containing the vault password" -msgstr "" - -msgid "File containing the vault public key" -msgstr "" - -msgid "Password can be specified only for symmetric vault" -msgstr "" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "" - -msgid "Password specified multiple times" -msgstr "" - -msgid "Public key specified multiple times" -msgstr "" - -msgid "Missing vault public key" -msgstr "" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "" - -msgid "Modify a vault." -msgstr "Muokkaa holvia." - -msgid "Change password" -msgstr "Vaihda salasana" - -msgid "Old vault password" -msgstr "Vanha holvin salasana" - -msgid "File containing the old vault password" -msgstr "" - -msgid "New vault password" -msgstr "Uusi holvin salasana" - -msgid "File containing the new vault password" -msgstr "" - -msgid "Old vault private key" -msgstr "" - -msgid "File containing the old vault private key" -msgstr "" - -msgid "File containing the new vault public key" -msgstr "" - -msgid "New public key specified multiple times" -msgstr "" - -msgid "Missing new vault public key" -msgstr "" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "" - -msgid "Binary data to archive" -msgstr "" - -msgid "File containing data to archive" -msgstr "" - -msgid "Override existing password" -msgstr "" - -msgid "Input data specified multiple times" -msgstr "" - -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" - -msgid "Invalid vault type" -msgstr "" - -msgid "Retrieve a data from a vault." -msgstr "" - -msgid "File to store retrieved data" -msgstr "" - -msgid "Vault private key" -msgstr "" - -msgid "File containing the vault private key" -msgstr "" - -msgid "Data" -msgstr "Tiedot" - -msgid "Private key specified multiple times" -msgstr "" - -msgid "Missing vault private key" -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "ACI name" -msgstr "" - -msgid "Permission" -msgstr "Käyttöoikeus" - -msgid "Permission ACI grants access to" -msgstr "" - -msgid "User group" -msgstr "Käyttäjäryhmä" - -msgid "User group ACI grants access to" -msgstr "" - -msgid "Permissions" -msgstr "Käyttöoikeudet" - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Attributes to which the permission applies" -msgstr "" - -msgid "Attributes" -msgstr "Attribuutit" - -msgid "Type" -msgstr "Tyyppi" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" - -msgid "Member of" -msgstr "Tämän jäsen" - -msgid "Member of a group" -msgstr "Ryhmän jäsen" - -msgid "Filter" -msgstr "Suodin" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "" - -msgid "Subtree" -msgstr "" - -msgid "Subtree to apply ACI to" -msgstr "" - -msgid "Target group" -msgstr "Kohderyhmä" - -msgid "Group to apply ACI to" -msgstr "" - -msgid "Target your own entry (self)" -msgstr "" - -msgid "Apply ACI to your own entry (self)" -msgstr "" - -msgid "Create new ACI." -msgstr "" - -msgid "ACI prefix" -msgstr "" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" - -msgid "Test the ACI syntax but don't write anything" -msgstr "" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" - -msgid "User-friendly description of action performed" -msgstr "" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" - -msgid "Delete ACI." -msgstr "Poista ACI." - -msgid "True means the operation was successful" -msgstr "" - -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" - -msgid "A string searched in all relevant object attributes" -msgstr "" - -msgid "Primary key only" -msgstr "" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" - -msgid "Number of entries returned" -msgstr "" - -msgid "True if not all results were returned" -msgstr "" - -msgid "Modify ACI." -msgstr "Muokkaa ACI:ta." - -msgid "Rename an ACI." -msgstr "Nimeä uudelleen ACI." - -msgid "New ACI name" -msgstr "" - -msgid "Display a single ACI given an ACI name." -msgstr "" - -msgid "Location of the ACI" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Description" -msgstr "Kuvaus" - -msgid "A description of this auto member rule" -msgstr "" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - -#, fuzzy -msgid "Grouping Type" -msgstr "Ryhmän nimi" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -#, fuzzy -msgid "Exclusive Regex" -msgstr "Poissulkeva" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "Poista automember-sääntö." - -msgid "List of deletions that failed" -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "Oikeudet" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Users" -msgstr "Käyttäjät" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Hosts" -msgstr "Koneet" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" - -msgid "Key" -msgstr "Avain" - -msgid "Automount key name." -msgstr "" - -msgid "Mount information" -msgstr "Tietoja liitoksesta" - -msgid "description" -msgstr "kuvaus" - -msgid "Location" -msgstr "Sijainti" - -msgid "Automount location name." -msgstr "" - -msgid "Map" -msgstr "" - -msgid "Automount map name." -msgstr "" - -msgid "Create a new automount key." -msgstr "" - -msgid "Delete an automount key." -msgstr "" - -msgid "Continuous mode: Don't stop on errors." -msgstr "" - -msgid "Search for an automount key." -msgstr "" - -msgid "Time Limit" -msgstr "" - -msgid "Time limit of search in seconds" -msgstr "" - -msgid "Size Limit" -msgstr "" - -msgid "Maximum number of entries returned" -msgstr "" - -msgid "Modify an automount key." -msgstr "Muokkaa automount-avainta." - -msgid "New mount information" -msgstr "Uudet liitostiedot" - -msgid "Rename" -msgstr "Nimeä uudelleen" - -msgid "Rename the automount key object" -msgstr "" - -msgid "Display an automount key." -msgstr "Näytä automount-avain." - -msgid "Create a new automount location." -msgstr "" - -msgid "Delete an automount location." -msgstr "" - -msgid "Search for an automount location." -msgstr "" - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" - -msgid "Display an automount location." -msgstr "" - -msgid "Generate automount files for a specific location." -msgstr "" - -msgid "Create a new automount map." -msgstr "" - -msgid "Create a new indirect mount point." -msgstr "" - -msgid "Mount point" -msgstr "Liitospiste" - -msgid "Parent map" -msgstr "" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" - -msgid "Delete an automount map." -msgstr "" - -msgid "Search for an automount map." -msgstr "" - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" - -msgid "Modify an automount map." -msgstr "Muokkaa automaattisesti liitettävän karttaa." - -msgid "Display an automount map." -msgstr "Näytä automount-kartta." - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" - -msgid "Nested Methods to execute" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason" -msgstr "Syy" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -#, fuzzy -msgid "minimum serial number" -msgstr "Sarjanumero" - -#, fuzzy -msgid "maximum serial number" -msgstr "Sarjanumero" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "Sarjanumero" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Principal" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Dictionary mapping variable name to value" -msgstr "" - -msgid "Revoke a certificate." -msgstr "" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "Vientitiedoston nimi" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -#, fuzzy -msgid "Request id" -msgstr "Vaaditaan" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "Maximum username length" -msgstr "" - -msgid "Home directory base" -msgstr "Kotihakemistopohja" - -msgid "Default location of home directories" -msgstr "" - -msgid "Default shell" -msgstr "Oletuskomentorivitulkki" - -msgid "Default shell for new users" -msgstr "" - -msgid "Default users group" -msgstr "" - -msgid "Default group for new users" -msgstr "" - -msgid "Default e-mail domain" -msgstr "" - -msgid "Search time limit" -msgstr "" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" - -msgid "Search size limit" -msgstr "" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "" - -msgid "User search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" - -msgid "Group search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" - -msgid "Enable migration mode" -msgstr "" - -msgid "Certificate Subject base" -msgstr "" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "" - -msgid "Default group objectclasses" -msgstr "" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "" - -msgid "Default user objectclasses" -msgstr "" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" - -msgid "Password Expiration Notification (days)" -msgstr "Ilmoitus salasanan vanhenemisesta (päiviä)" - -msgid "Number of days's notice of impending password expiration" -msgstr "" - -msgid "Password plugin features" -msgstr "Salasanalaajennuksen ominaisuudet" - -msgid "Extra hashes to generate in password plug-in" -msgstr "" - -msgid "SELinux user map order" -msgstr "SELinux käyttäjäkarttajärjestys" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" - -msgid "Default SELinux user" -msgstr "SELinux-oletuskäyttäjä" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" - -msgid "Default PAC types" -msgstr "" - -msgid "Default types of PAC supported for services" -msgstr "" - -msgid "Default user authentication types" -msgstr "Käyttäjän todennustyyppien oletukset" - -msgid "Default types of supported user authentication" -msgstr "Tuetun käyttäjän todennuksen oletustyypit" - -msgid "Modify configuration options." -msgstr "Muokkaa asetuksia." - -msgid "Show the current configuration." -msgstr "Näytä nykyiset määritykset." - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "Delegation name" -msgstr "Valtuuskunnan nimi" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "" - -msgid "Attributes to which the delegation applies" -msgstr "" - -msgid "Member user group" -msgstr "" - -msgid "User group to apply delegation to" -msgstr "" - -msgid "Add a new delegation." -msgstr "Lisää uusi valtuuskunta." - -msgid "Delete a delegation." -msgstr "Poista valtuuskunta." - -msgid "Search for delegations." -msgstr "" - -msgid "Modify a delegation." -msgstr "Muokkaa valtuuskuntaa." - -msgid "Display information about a delegation." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "Global forwarders" -msgstr "" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Forward policy" -msgstr "" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" - -msgid "Allow PTR sync" -msgstr "" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" - -msgid "Zone refresh interval" -msgstr "" - -msgid "Zone name" -msgstr "Vyöhykkeen nimi" - -msgid "Zone name (FQDN)" -msgstr "" - -msgid "Reverse zone IP network" -msgstr "" - -msgid "IP network to create reverse zone name from" -msgstr "" - -msgid "Active zone" -msgstr "Aktiivinen vyöhyke" - -msgid "Is zone active?" -msgstr "" - -msgid "Zone forwarders" -msgstr "" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "Record name" -msgstr "Tietueen nimi" - -msgid "Time to live" -msgstr "" - -msgid "Records" -msgstr "Merkinnät" - -msgid "Record type" -msgstr "Tietueen tyyppi" - -msgid "Record data" -msgstr "Tietueen tiedot" - -msgid "A record" -msgstr "Tietue" - -msgid "Raw A records" -msgstr "Raw A -tietueet" - -msgid "A IP Address" -msgstr "IP-osoite" - -msgid "IP Address" -msgstr "IP-osoite" - -msgid "A Create reverse" -msgstr "" - -msgid "Create reverse record for this IP Address" -msgstr "" - -msgid "AAAA record" -msgstr "" - -msgid "Raw AAAA records" -msgstr "Raw AAAA -tietueet" - -msgid "AAAA IP Address" -msgstr "AAAA:n IP-osoite" - -msgid "AAAA Create reverse" -msgstr "" - -msgid "A6 record" -msgstr "A6-tietue" - -msgid "Raw A6 records" -msgstr "Raw A6 -tietueet" - -msgid "A6 Record data" -msgstr "" - -msgid "AFSDB record" -msgstr "" - -msgid "Raw AFSDB records" -msgstr "" - -msgid "AFSDB Subtype" -msgstr "" - -msgid "Subtype" -msgstr "" - -msgid "AFSDB Hostname" -msgstr "AFSDB-isäntänimi" - -msgid "Hostname" -msgstr "Koneen nimi" - -msgid "APL record" -msgstr "APL-tietue" - -msgid "Raw APL records" -msgstr "Raw APL -tietueet" - -msgid "CERT record" -msgstr "CERT-tietue" - -msgid "Raw CERT records" -msgstr "Raw CERT -tietueet" - -msgid "CERT Certificate Type" -msgstr "" - -msgid "Certificate Type" -msgstr "" - -msgid "CERT Key Tag" -msgstr "" - -msgid "Key Tag" -msgstr "" - -msgid "CERT Algorithm" -msgstr "" - -msgid "Algorithm" -msgstr "" - -msgid "CERT Certificate/CRL" -msgstr "" - -msgid "Certificate/CRL" -msgstr "" - -msgid "CNAME record" -msgstr "" - -msgid "Raw CNAME records" -msgstr "" - -msgid "CNAME Hostname" -msgstr "CNAME-isäntänimi" - -msgid "A hostname which this alias hostname points to" -msgstr "" - -msgid "DHCID record" -msgstr "" - -msgid "Raw DHCID records" -msgstr "Raw DHCID -tietueet" - -msgid "DLV record" -msgstr "DLV-tietue" - -msgid "Raw DLV records" -msgstr "Raw DLV -tietueet" - -msgid "DLV Key Tag" -msgstr "" - -msgid "DLV Algorithm" -msgstr "" - -msgid "DLV Digest Type" -msgstr "" - -msgid "Digest Type" -msgstr "" - -msgid "DLV Digest" -msgstr "" - -msgid "Digest" -msgstr "Tarkistussumma" - -msgid "DNAME record" -msgstr "" - -msgid "Raw DNAME records" -msgstr "" - -msgid "DNAME Target" -msgstr "DNAME kohde" - -msgid "Target" -msgstr "Kohde" - -msgid "DNSKEY record" -msgstr "" - -msgid "Raw DNSKEY records" -msgstr "Raw DNSKEY -tietueet" - -msgid "DS record" -msgstr "DS-tietue" - -msgid "Raw DS records" -msgstr "Raw DS -tietueet" - -msgid "DS Key Tag" -msgstr "" - -msgid "DS Algorithm" -msgstr "" - -msgid "DS Digest Type" -msgstr "" - -msgid "DS Digest" -msgstr "" - -msgid "HIP record" -msgstr "HIP-tietue" - -msgid "Raw HIP records" -msgstr "Raw HIP -tietueet" - -msgid "IPSECKEY record" -msgstr "" - -msgid "Raw IPSECKEY records" -msgstr "Raw IPSECKEY -tietueet" - -msgid "KEY record" -msgstr "KEY-tietue" - -msgid "Raw KEY records" -msgstr "Raw KEY -tietueet" - -msgid "KX record" -msgstr "KX-tietue" - -msgid "Raw KX records" -msgstr "Raw KX -tietueet" - -msgid "KX Preference" -msgstr "KX etusija" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" - -msgid "KX Exchanger" -msgstr "" - -msgid "A host willing to act as a key exchanger" -msgstr "" - -msgid "LOC record" -msgstr "" - -msgid "Raw LOC records" -msgstr "Raw LOC -tietueet" - -msgid "LOC Degrees Latitude" -msgstr "" - -msgid "Degrees Latitude" -msgstr "" - -msgid "LOC Minutes Latitude" -msgstr "" - -msgid "Minutes Latitude" -msgstr "" - -msgid "LOC Seconds Latitude" -msgstr "" - -msgid "Seconds Latitude" -msgstr "" - -msgid "LOC Direction Latitude" -msgstr "" - -msgid "Direction Latitude" -msgstr "" - -msgid "LOC Degrees Longitude" -msgstr "" - -msgid "Degrees Longitude" -msgstr "" - -msgid "LOC Minutes Longitude" -msgstr "" - -msgid "Minutes Longitude" -msgstr "" - -msgid "LOC Seconds Longitude" -msgstr "" - -msgid "Seconds Longitude" -msgstr "" - -msgid "LOC Direction Longitude" -msgstr "" - -msgid "Direction Longitude" -msgstr "" - -msgid "LOC Altitude" -msgstr "" - -msgid "Altitude" -msgstr "" - -msgid "LOC Size" -msgstr "LOC:n koko" - -msgid "Size" -msgstr "Koko" - -msgid "LOC Horizontal Precision" -msgstr "" - -msgid "Horizontal Precision" -msgstr "" - -msgid "LOC Vertical Precision" -msgstr "" - -msgid "Vertical Precision" -msgstr "" - -msgid "MX record" -msgstr "MX-tietue" - -msgid "Raw MX records" -msgstr "Raw MX -tietueet" - -msgid "MX Preference" -msgstr "MX etusija" - -msgid "MX Exchanger" -msgstr "" - -msgid "A host willing to act as a mail exchanger" -msgstr "" - -msgid "NAPTR record" -msgstr "NAPTR-tietue" - -msgid "Raw NAPTR records" -msgstr "Raw NAPTR -tietueet" - -msgid "NAPTR Order" -msgstr "NAPTR :n järjestys" - -msgid "Order" -msgstr "Järjestys" - -msgid "NAPTR Preference" -msgstr "NAPTR etusija" - -msgid "Preference" -msgstr "Etusija" - -msgid "NAPTR Flags" -msgstr "" - -msgid "Flags" -msgstr "" - -msgid "NAPTR Service" -msgstr "NAPTR-palvelu" - -msgid "Service" -msgstr "Palvelu" - -msgid "NAPTR Regular Expression" -msgstr "" - -msgid "Regular Expression" -msgstr "" - -msgid "NAPTR Replacement" -msgstr "" - -msgid "Replacement" -msgstr "" - -msgid "NS record" -msgstr "NS-tietue" - -msgid "Raw NS records" -msgstr "Raw NS -tietueet" - -msgid "NS Hostname" -msgstr "NS-isäntänimi" - -msgid "NSEC record" -msgstr "NSEC-tietue" - -msgid "Raw NSEC records" -msgstr "Raw NSEC -tietueet" - -msgid "NSEC3 record" -msgstr "NSEC3-tietue" - -msgid "Raw NSEC3 records" -msgstr "Raw NSEC3 -tietueet" - -msgid "PTR record" -msgstr "PTR-tietue" - -msgid "Raw PTR records" -msgstr "Raw PTR -tietueet" - -msgid "PTR Hostname" -msgstr "PTR-isäntänimi" - -msgid "The hostname this reverse record points to" -msgstr "" - -msgid "RRSIG record" -msgstr "RRSIG-tietue" - -msgid "Raw RRSIG records" -msgstr "Raw RRSIG -tietueet" - -msgid "RP record" -msgstr "RP-tietue" - -msgid "Raw RP records" -msgstr "Raw RP -tietueet" - -msgid "SIG record" -msgstr "SIG-tietue" - -msgid "Raw SIG records" -msgstr "Raw SIG -tietueet" - -msgid "SPF record" -msgstr "SPF-tietue" - -msgid "Raw SPF records" -msgstr "Raw SPF -tietueet" - -msgid "SRV record" -msgstr "SRV-tietue" - -msgid "Raw SRV records" -msgstr "Raw SRV -tietueet" - -msgid "SRV Priority" -msgstr "SRV-etusija" - -msgid "Priority" -msgstr "Prioriteetti" - -msgid "SRV Weight" -msgstr "SRV-paino" - -msgid "Weight" -msgstr "Paino" - -msgid "SRV Port" -msgstr "SRV-portti" - -msgid "Port" -msgstr "Portti" - -msgid "SRV Target" -msgstr "SRV-kohde" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" - -msgid "SSHFP record" -msgstr "" - -msgid "Raw SSHFP records" -msgstr "Raw SSHFP -tietueet" - -msgid "SSHFP Algorithm" -msgstr "" - -msgid "SSHFP Fingerprint Type" -msgstr "SSHFP-sormenjälkityyppi" - -msgid "Fingerprint Type" -msgstr "Sormenjälkityyppi" - -msgid "SSHFP Fingerprint" -msgstr "SSHFP-sormenjälki" - -msgid "Fingerprint" -msgstr "Sormenjälki" - -msgid "TA record" -msgstr "TA-tietue" - -msgid "Raw TA records" -msgstr "Raw TA -tietueet" - -msgid "TLSA record" -msgstr "TLSA-tietue" - -msgid "Raw TLSA records" -msgstr "Raw TLSA -tietueet" - -msgid "TLSA Certificate Usage" -msgstr "" - -msgid "Certificate Usage" -msgstr "" - -msgid "TLSA Selector" -msgstr "" - -msgid "Selector" -msgstr "Valitsin" - -msgid "TLSA Matching Type" -msgstr "" - -msgid "Matching Type" -msgstr "" - -msgid "TLSA Certificate Association Data" -msgstr "" - -msgid "Certificate Association Data" -msgstr "" - -msgid "TKEY record" -msgstr "TKEY-tietue" - -msgid "Raw TKEY records" -msgstr "Raw TKEY -tietueet" - -msgid "TSIG record" -msgstr "TSIG-tietue" - -msgid "Raw TSIG records" -msgstr "Raw TSIG -tietueet" - -msgid "TXT record" -msgstr "TXT-tietue" - -msgid "Raw TXT records" -msgstr "Raw TXT -tietueet" - -msgid "TXT Text Data" -msgstr "" - -msgid "Text Data" -msgstr "" - -msgid "Authoritative nameserver" -msgstr "" - -msgid "Authoritative nameserver domain name" -msgstr "" - -msgid "Administrator e-mail address" -msgstr "" - -msgid "SOA serial" -msgstr "SOA-sarjanumero" - -msgid "SOA record serial number" -msgstr "SOA-tietueen sarjanumero" - -msgid "SOA refresh" -msgstr "SOA-virkistys" - -msgid "SOA record refresh time" -msgstr "" - -msgid "SOA retry" -msgstr "" - -msgid "SOA record retry time" -msgstr "" - -msgid "SOA expire" -msgstr "" - -msgid "SOA record expire time" -msgstr "" - -msgid "SOA minimum" -msgstr "" - -msgid "How long should negative responses be cached" -msgstr "" - -msgid "Time to live for records at zone apex" -msgstr "" - -msgid "BIND update policy" -msgstr "" - -msgid "Dynamic update" -msgstr "" - -msgid "Allow dynamic updates." -msgstr "" - -msgid "Allow query" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" - -msgid "Allow transfer" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" - -msgid "Allow in-line DNSSEC signing" -msgstr "" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "" - -msgid "NSEC3PARAM record" -msgstr "" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" - -msgid "Resolve a host name in DNS." -msgstr "" - -msgid "Modify global DNS configuration." -msgstr "" - -msgid "Show the current global DNS configuration." -msgstr "" - -msgid "Create new DNS forward zone." -msgstr "" - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" - -msgid "Permission value" -msgstr "Käyttöoikeuden arvo" - -msgid "Delete DNS forward zone." -msgstr "" - -msgid "Disable DNS Forward Zone." -msgstr "" - -msgid "Enable DNS Forward Zone." -msgstr "" - -msgid "Search for DNS forward zones." -msgstr "" - -msgid "Modify DNS forward zone." -msgstr "" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" - -msgid "Display information about a DNS forward zone." -msgstr "" - -msgid "Add new DNS resource record." -msgstr "" - -msgid "Force" -msgstr "" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "" - -msgid "Structured" -msgstr "" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" - -msgid "Delete DNS resource record." -msgstr "" - -msgid "Delete all associated records" -msgstr "" - -msgid "Delete DNS record entry." -msgstr "" - -msgid "Search for DNS resources." -msgstr "" - -msgid "Modify a DNS resource record." -msgstr "" - -msgid "Rename the DNS resource record object" -msgstr "" - -msgid "Display DNS resource." -msgstr "" - -msgid "Create new DNS zone (SOA record)." -msgstr "" - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" - -msgid "Add a permission for per-zone access delegation." -msgstr "" - -msgid "Delete DNS zone (SOA record)." -msgstr "" - -msgid "Disable DNS Zone." -msgstr "" - -msgid "Enable DNS Zone." -msgstr "" - -msgid "Search for DNS zones (SOA records)." -msgstr "" - -msgid "Forward zones only" -msgstr "" - -msgid "Search for forward zones only" -msgstr "" - -msgid "Modify DNS zone (SOA record)." -msgstr "" - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" - -msgid "Remove a permission for per-zone access delegation." -msgstr "" - -msgid "Display information about a DNS zone (SOA record)." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "Group name" -msgstr "Ryhmän nimi" - -#, fuzzy -msgid "Group description" -msgstr "Verkkoryhmän kuvaus" - -msgid "GID" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Member users" -msgstr "Jäsenkäyttäjät" - -msgid "Member groups" -msgstr "Jäsenryhmät" - -msgid "Member of groups" -msgstr "Jäsen ryhmissä" - -msgid "Roles" -msgstr "Roolit" - -msgid "Member of netgroups" -msgstr "Jäsen verkkoryhmissä" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Suppress processing of membership attributes." -msgstr "" - -msgid "Add members to a group." -msgstr "" - -#, fuzzy -msgid "External member" -msgstr "Ulkoinen" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "member user" -msgstr "jäsenkäyttäjä" - -msgid "users to add" -msgstr "" - -msgid "member group" -msgstr "jäsenryhmä" - -msgid "groups to add" -msgstr "lisättävät ryhmät" - -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - -msgid "Delete group." -msgstr "Poista ryhmä." - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "Etsi ryhmiä." - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "user" -msgstr "käyttäjä" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "group" -msgstr "ryhmä" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "netgroup" -msgstr "verkkoryhmä" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "role" -msgstr "rooli" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "HBAC rule" -msgstr "HBAC-sääntö" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "sudo rule" -msgstr "sudo-sääntö" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "Muokkaa ryhmää." - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Rule name" -msgstr "Säännön nimi" - -msgid "Rule type" -msgstr "" - -msgid "Rule type (allow)" -msgstr "" - -msgid "User category" -msgstr "Käyttäjäluokka" - -msgid "User category the rule applies to" -msgstr "" - -msgid "Host category" -msgstr "Isäntäluokka" - -msgid "Host category the rule applies to" -msgstr "" - -msgid "Service category" -msgstr "Palveluluokka" - -msgid "Service category the rule applies to" -msgstr "" - -msgid "Enabled" -msgstr "Käytössä" - -msgid "User Groups" -msgstr "Käyttäjäryhmät" - -msgid "Host Groups" -msgstr "Isäntäryhmät" - -msgid "Services" -msgstr "Palvelut" - -msgid "Service Groups" -msgstr "Palveluryhmät" - -msgid "External host" -msgstr "Ulkoinen isäntä" - -msgid "Create a new HBAC rule." -msgstr "" - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "member host" -msgstr "isäntäjäsen" - -msgid "hosts to add" -msgstr "" - -msgid "member host group" -msgstr "Jäsenisäntäryhmä" - -msgid "host groups to add" -msgstr "" - -msgid "Add services to an HBAC rule." -msgstr "" - -msgid "member HBAC service" -msgstr "jäsen HBAC-palvelu" - -msgid "HBAC services to add" -msgstr "" - -msgid "member HBAC service group" -msgstr "" - -msgid "HBAC service groups to add" -msgstr "" - -msgid "Add users and groups to an HBAC rule." -msgstr "" - -msgid "Delete an HBAC rule." -msgstr "Poista HBAC-sääntö." - -msgid "Disable an HBAC rule." -msgstr "" - -msgid "Enable an HBAC rule." -msgstr "" - -msgid "Search for HBAC rules." -msgstr "" - -msgid "Modify an HBAC rule." -msgstr "Muokkaa HBAC-sääntöä." - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "hosts to remove" -msgstr "" - -msgid "host groups to remove" -msgstr "" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "" - -msgid "HBAC services to remove" -msgstr "" - -msgid "HBAC service groups to remove" -msgstr "" - -msgid "Remove users and groups from an HBAC rule." -msgstr "" - -msgid "Display the properties of an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" - -msgid "Service name" -msgstr "Palvelun nimi" - -msgid "HBAC service" -msgstr "HBAC-palvelu" - -msgid "HBAC service description" -msgstr "HBAC-palvelun kuvaus" - -msgid "Member of HBAC service groups" -msgstr "" - -msgid "Add a new HBAC service." -msgstr "Lisää uusi HBAC-palvelu." - -msgid "Delete an existing HBAC service." -msgstr "" - -msgid "Search for HBAC services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" - -msgid "Modify an HBAC service." -msgstr "" - -msgid "Display information about an HBAC service." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "Service group name" -msgstr "Palveluryhmän nimi" - -msgid "HBAC service group description" -msgstr "HBAC-palveluryhmän kuvaus" - -msgid "Member HBAC service" -msgstr "Jäsen HBAC-palvelu" - -msgid "Add a new HBAC service group." -msgstr "" - -msgid "Add members to an HBAC service group." -msgstr "" - -msgid "Delete an HBAC service group." -msgstr "" - -msgid "Search for an HBAC service group." -msgstr "" - -msgid "Modify an HBAC service group." -msgstr "Muokkaa HBAC-palveluryhmää." - -msgid "Remove members from an HBAC service group." -msgstr "" - -msgid "Display information about an HBAC service group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -msgid "User name" -msgstr "Käyttäjätunnus" - -#, fuzzy -msgid "Target host" -msgstr "Kohde" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "Varoitus" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host name" -msgstr "Koneen nimi" - -msgid "A description of this host" -msgstr "" - -msgid "Locality" -msgstr "Sijainti" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "" - -msgid "Platform" -msgstr "Alusta" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "" - -msgid "Operating system" -msgstr "Käyttöjärjestelmä" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "" - -msgid "User password" -msgstr "Käyttäjän salasana" - -msgid "Password used in bulk enrollment" -msgstr "" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "" - -msgid "Random password" -msgstr "Satunnainen salasana" - -msgid "Certificate" -msgstr "" - -msgid "Base-64 encoded server certificate" -msgstr "" - -msgid "Principal name" -msgstr "Ensisijaisen nimi" - -msgid "MAC address" -msgstr "MAC-osoite" - -msgid "Hardware MAC address(es) on this host" -msgstr "" - -msgid "SSH public key" -msgstr "Julkinen SSH-avain" - -msgid "Class" -msgstr "Luokka" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "Assigned ID View" -msgstr "" - -msgid "Requires pre-authentication" -msgstr "Vaatii ennakkotunnistautumisen" - -msgid "Pre-authentication is required for the service" -msgstr "" - -msgid "Trusted for delegation" -msgstr "" - -msgid "Client credentials may be delegated to the service" -msgstr "" - -msgid "Member of host-groups" -msgstr "Jäsen isäntäryhmissä" - -msgid "Indirect Member of host-group" -msgstr "" - -msgid "Keytab" -msgstr "" - -msgid "Managed by" -msgstr "" - -msgid "Managing" -msgstr "" - -msgid "Users allowed to retrieve keytab" -msgstr "Käyttäjät, joilla on oikeus noutaa avaintaulu" - -msgid "Groups allowed to retrieve keytab" -msgstr "Ryhmät, joilla on oikeus noutaa avaintaulu" - -msgid "Hosts allowed to retrieve keytab" -msgstr "Isäntälaitteet, joilla on oikeus noutaa avaintaulu" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "Ryhmät, joilla on oikeus noutaa avaintaulu" - -msgid "Users allowed to create keytab" -msgstr "Käyttäjät joiden sallitaan luoda avaintaulu" - -msgid "Groups allowed to create keytab" -msgstr "Ryhmät joiden sallitaan luoda avaintaulu" - -msgid "Hosts allowed to create keytab" -msgstr "Isännät joiden sallitaan luoda avaintaulu" - -msgid "Host Groups allowed to create keytab" -msgstr "Isäntälaitteiden ryhmät joiden sallitaan luoda avaintaulu" - -msgid "Add a new host." -msgstr "Lisää uusi isäntä." - -msgid "force host name even if not in DNS" -msgstr "" - -msgid "skip reverse DNS detection" -msgstr "" - -msgid "Add the host to DNS with this IP address" -msgstr "" - -msgid "Add hosts that can manage this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" - -msgid "Delete a host." -msgstr "Poista isäntä." - -msgid "Remove entries from DNS" -msgstr "Poista tietueet DNS:stä" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" - -msgid "Search for hosts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" - -msgid "host group" -msgstr "isäntäryhmä" - -msgid "Search for hosts with these member of host groups." -msgstr "" - -msgid "Search for hosts without these member of host groups." -msgstr "" - -msgid "Search for hosts with these member of netgroups." -msgstr "" - -msgid "Search for hosts without these member of netgroups." -msgstr "" - -msgid "Search for hosts with these member of roles." -msgstr "" - -msgid "Search for hosts without these member of roles." -msgstr "" - -msgid "Search for hosts with these member of HBAC rules." -msgstr "" - -msgid "Search for hosts without these member of HBAC rules." -msgstr "" - -msgid "Search for hosts with these member of sudo rules." -msgstr "" - -msgid "Search for hosts without these member of sudo rules." -msgstr "" - -msgid "Search for hosts with these enrolled by users." -msgstr "" - -msgid "Search for hosts without these enrolled by users." -msgstr "" - -msgid "host" -msgstr "kone" - -msgid "Search for hosts with these managed by hosts." -msgstr "" - -msgid "Search for hosts without these managed by hosts." -msgstr "" - -msgid "Search for hosts with these managing hosts." -msgstr "" - -msgid "Search for hosts without these managing hosts." -msgstr "" - -msgid "Modify information about a host." -msgstr "" - -msgid "Kerberos principal name for this host" -msgstr "" - -msgid "Update DNS entries" -msgstr "" - -msgid "Remove hosts that can manage this host." -msgstr "" - -msgid "Display information about a host." -msgstr "" - -msgid "file to store certificate in" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "Host-group" -msgstr "Isäntäryhmä" - -msgid "Name of host-group" -msgstr "" - -msgid "A description of this host-group" -msgstr "" - -msgid "Member hosts" -msgstr "Jäsenisännät" - -msgid "Member host-groups" -msgstr "Jäsenisäntäryhmät" - -msgid "Indirect Member hosts" -msgstr "" - -msgid "Indirect Member host-groups" -msgstr "" - -msgid "Add a new hostgroup." -msgstr "Lisää uusi isäntäryhmä." - -msgid "Add members to a hostgroup." -msgstr "" - -msgid "Delete a hostgroup." -msgstr "Poista isäntäryhmä." - -msgid "Search for hostgroups." -msgstr "Etsi isäntäryhmiä." - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" - -msgid "Search for host groups with these member hosts." -msgstr "" - -msgid "Search for host groups without these member hosts." -msgstr "" - -msgid "Search for host groups with these member host groups." -msgstr "" - -msgid "Search for host groups without these member host groups." -msgstr "" - -msgid "Search for host groups with these member of host groups." -msgstr "" - -msgid "Search for host groups without these member of host groups." -msgstr "" - -msgid "Search for host groups with these member of netgroups." -msgstr "" - -msgid "Search for host groups without these member of netgroups." -msgstr "" - -msgid "Search for host groups with these member of HBAC rules." -msgstr "" - -msgid "Search for host groups without these member of HBAC rules." -msgstr "" - -msgid "Search for host groups with these member of sudo rules." -msgstr "" - -msgid "Search for host groups without these member of sudo rules." -msgstr "" - -msgid "Modify a hostgroup." -msgstr "Muokkaa isäntäryhmää." - -msgid "Remove members from a hostgroup." -msgstr "" - -msgid "Display information about a hostgroup." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "Nimeä uudelleen" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -#, fuzzy -msgid "Domain SID of the trusted domain" -msgstr "toimialueseen ei luoteta" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "Poista tunnusalue." - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "Muokkaa ID-aluetta." - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -msgid "Anchor to override" -msgstr "" - -msgid "Group ID Number" -msgstr "Ryhmän tunnusnumero" - -msgid "User login" -msgstr "Käyttäjän kirjautuminen" - -msgid "UID" -msgstr "UID" - -msgid "User ID Number" -msgstr "Käyttäjän tunnusnumero" - -msgid "GECOS" -msgstr "" - -msgid "Home directory" -msgstr "Kotihakemisto" - -msgid "Login shell" -msgstr "" - -msgid "ID View Name" -msgstr "" - -msgid "Add a new Group ID override." -msgstr "" - -msgid "Delete an Group ID override." -msgstr "Poista ryhmätunnuksen ohitus." - -msgid "Search for an Group ID override." -msgstr "" - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" - -msgid "Modify an Group ID override." -msgstr "Muokkaa ryhmätunnuksen ohitusta." - -msgid "Rename the Group ID override object" -msgstr "" - -msgid "Display information about an Group ID override." -msgstr "" - -msgid "Add a new User ID override." -msgstr "" - -msgid "Delete an User ID override." -msgstr "Poista ryhmätunnuksen ohitus." - -msgid "Search for an User ID override." -msgstr "" - -msgid "Modify an User ID override." -msgstr "Muokkaa ryhmätunnuksen ohitusta." - -msgid "Rename the User ID override object" -msgstr "" - -msgid "Display information about an User ID override." -msgstr "" - -msgid "Add a new ID View." -msgstr "Lisää uusi tunnusnäkymä." - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" - -msgid "hosts" -msgstr "koneet" - -msgid "Hosts to apply the ID View to" -msgstr "" - -msgid "hostgroups" -msgstr "isäntäryhmät" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" - -msgid "Hosts that this ID View was applied to." -msgstr "" - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" - -msgid "Number of hosts the ID View was applied to:" -msgstr "" - -msgid "Delete an ID View." -msgstr "Poista tunnusnäkymä." - -msgid "Search for an ID View." -msgstr "" - -msgid "Modify an ID View." -msgstr "Muokkaa tunnusnäkymää." - -msgid "Rename the ID View object" -msgstr "" - -msgid "Display information about an ID View." -msgstr "" - -msgid "Enumerate all the hosts the view applies to." -msgstr "" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" - -msgid "Hosts to clear (any) ID View from." -msgstr "" - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" - -msgid "Hosts that ID View was cleared from." -msgstr "" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" - -msgid "Dict of I18N messages" -msgstr "" - -msgid "Export plugin meta-data for the webUI." -msgstr "" - -msgid "Name of object to export" -msgstr "" - -msgid "Name of method to export" -msgstr "" - -msgid "Name of command to export" -msgstr "" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" - -msgid "Join an IPA domain" -msgstr "" - -msgid "The hostname to register as" -msgstr "Isäntänimi rekisteröitäväksi" - -msgid "The IPA realm" -msgstr "" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "" - -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" - -msgid "Manage ticket policy for specific user" -msgstr "" - -msgid "Max life" -msgstr "" - -msgid "Maximum ticket life (seconds)" -msgstr "" - -msgid "Max renew" -msgstr "" - -msgid "Maximum renewable age (seconds)" -msgstr "" - -msgid "Modify Kerberos ticket policy." -msgstr "" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "" - -msgid "Display the current Kerberos ticket policy." -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," -"cn=accounts' --group-container='cn=groups,cn=accounts' " -"ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' --user-ignore-" -"objectclass=radiusprofile --user-ignore-" -"attribute=radiusgroupname ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -msgid "Migrate users and groups from DS to IPA." -msgstr "" - -msgid "LDAP URI" -msgstr "" - -msgid "LDAP URI of DS server to migrate from" -msgstr "" - -msgid "bind password" -msgstr "sido salasana" - -msgid "Bind DN" -msgstr "" - -msgid "User container" -msgstr "Käyttäjän kontti" - -msgid "DN of container for users in DS relative to base DN" -msgstr "" - -msgid "Group container" -msgstr "Ryhmäkontti" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "" - -msgid "User object class" -msgstr "" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "" - -msgid "Group object class" -msgstr "" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "" - -msgid "Ignore user object class" -msgstr "" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore user attribute" -msgstr "" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore group object class" -msgstr "" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "Ignore group attribute" -msgstr "" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "" - -msgid "Overwrite GID" -msgstr "" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" - -msgid "LDAP schema" -msgstr "LDAP:in skeema" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" - -msgid "Continue" -msgstr "Jatka" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" - -msgid "Base DN" -msgstr "" - -msgid "Base DN on remote LDAP server" -msgstr "" - -msgid "Ignore compat plugin" -msgstr "" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" - -msgid "CA certificate" -msgstr "" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "" - -msgid "groups to exclude from migration" -msgstr "" - -msgid "users to exclude from migration" -msgstr "" - -msgid "Lists of objects migrated; categorized by type." -msgstr "" - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" - -msgid "False if migration mode was disabled." -msgstr "" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" - -msgid "Show environment variables." -msgstr "" - -msgid "Forward to server instead of running locally" -msgstr "" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Total number of variables env (>= count)" -msgstr "" - -msgid "Number of variables returned (<= total)" -msgstr "" - -msgid "Show all loaded plugins." -msgstr "" - -msgid "Dictionary mapping plugin names to bases" -msgstr "" - -msgid "Number of plugins loaded" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "Netgroup name" -msgstr "Verkkoryhmän nimi" - -msgid "Netgroup description" -msgstr "Verkkoryhmän kuvaus" - -msgid "NIS domain name" -msgstr "NIS-toimialueen nimi" - -msgid "IPA unique ID" -msgstr "" - -msgid "Member netgroups" -msgstr "Jäsen verkkoryhmät" - -msgid "Indirect Member netgroups" -msgstr "" - -msgid "Member User" -msgstr "Jäsenkäyttäjä" - -msgid "Member Group" -msgstr "Jäsenryhmä" - -msgid "Member Host" -msgstr "Jäsenisännät" - -msgid "Member Hostgroup" -msgstr "Jäsenisäntäryhmät" - -msgid "Add a new netgroup." -msgstr "Lisää uusi verkkoryhmä." - -msgid "Add members to a netgroup." -msgstr "" - -msgid "member netgroup" -msgstr "jäsen verkkoryhmä" - -msgid "netgroups to add" -msgstr "lisättävät verkkoryhmät" - -msgid "Delete a netgroup." -msgstr "Poista verkkoryhmä." - -msgid "Search for a netgroup." -msgstr "" - -msgid "search for managed groups" -msgstr "" - -msgid "Search for netgroups with these member netgroups." -msgstr "" - -msgid "Search for netgroups without these member netgroups." -msgstr "" - -msgid "Search for netgroups with these member users." -msgstr "" - -msgid "Search for netgroups without these member users." -msgstr "" - -msgid "Search for netgroups with these member groups." -msgstr "" - -msgid "Search for netgroups without these member groups." -msgstr "" - -msgid "Search for netgroups with these member hosts." -msgstr "" - -msgid "Search for netgroups without these member hosts." -msgstr "" - -msgid "Search for netgroups with these member host groups." -msgstr "" - -msgid "Search for netgroups without these member host groups." -msgstr "" - -msgid "Search for netgroups with these member of netgroups." -msgstr "" - -msgid "Search for netgroups without these member of netgroups." -msgstr "" - -msgid "Modify a netgroup." -msgstr "Muokkaa verkkoryhmää." - -msgid "Remove members from a netgroup." -msgstr "" - -msgid "netgroups to remove" -msgstr "" - -msgid "Display information about a netgroup." -msgstr "" - -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" - -msgid "TOTP authentication Window" -msgstr "TOTP-tunnistautumisikkuna" - -msgid "TOTP authentication time variance (seconds)" -msgstr "" - -#, fuzzy -msgid "TOTP Synchronization Window" -msgstr "Synkronoidaan" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "" - -msgid "HOTP Authentication Window" -msgstr "HOTP-tunnistautumisikkuna" - -msgid "HOTP authentication skip-ahead" -msgstr "" - -#, fuzzy -msgid "HOTP Synchronization Window" -msgstr "Synkronoidaan" - -msgid "HOTP synchronization skip-ahead" -msgstr "" - -msgid "Modify OTP configuration options." -msgstr "Muokkaa kertakäyttöisen salasanan määrityksiä." - -msgid "Show the current OTP configuration." -msgstr "Näytä nykyiset kertakäyttöisen salasanan määritykset." - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "Omistaja" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "Ei käytössä" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "Toimittaja" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "Malli" - -msgid "Token model (informational only)" -msgstr "" - -msgid "Serial" -msgstr "Sarjanumero" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "Lisää uusi OTP-tunnus." - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -#, fuzzy -msgid "Delete an OTP token." -msgstr "Synkronoi OTP-tunnus." - -#, fuzzy -msgid "Search for OTP token." -msgstr "Synkronoi OTP-tunnus." - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "Muokkaa OTP-tunnusta." - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "Set a user's password." -msgstr "Aseta käyttäjän salasana." - -msgid "New Password" -msgstr "Uusi salasana" - -msgid "Current Password" -msgstr "Nykyinen salasana" - -msgid "OTP" -msgstr "Kertakäyttöinen salasana" - -msgid "One Time Password" -msgstr "Kertakäyttöinen salasana" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -"\n" -"Managed permissions\n" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "Permission name" -msgstr "Käyttöoikeuden nimi" - -msgid "Granted rights" -msgstr "" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" - -msgid "Effective attributes" -msgstr "" - -msgid "All attributes to which the permission applies" -msgstr "" - -msgid "Included attributes" -msgstr "Sisälletyt attribuutit" - -msgid "User-specified attributes to which the permission applies" -msgstr "" - -msgid "Excluded attributes" -msgstr "Laajennetut määreet" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" - -msgid "Default attributes" -msgstr "" - -msgid "Attributes to which the permission applies by default" -msgstr "" - -msgid "Bind rule type" -msgstr "" - -msgid "Subtree to apply permissions to" -msgstr "" - -msgid "Extra target filter" -msgstr "" - -msgid "Raw target filter" -msgstr "" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" - -#, fuzzy -msgid "Target DN" -msgstr "Kohde" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" - -msgid "Member of group" -msgstr "Ryhmän jäsen" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "" - -msgid "User group to apply permissions to (sets target)" -msgstr "" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "" - -msgid "Deprecated; use extratargetfilter" -msgstr "" - -msgid "Deprecated; use ipapermlocation" -msgstr "" - -msgid "Deprecated; use ipapermright" -msgstr "" - -msgid "Granted to Privilege" -msgstr "" - -msgid "Indirect Member of roles" -msgstr "" - -#, fuzzy -msgid "Add a new permission." -msgstr "Lisää uusi isäntä." - -msgid "Add members to a permission." -msgstr "" - -msgid "member privilege" -msgstr "" - -msgid "privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "" - -msgid "Permission flags" -msgstr "Käyttöoikeusmerkinnät" - -msgid "Delete a permission." -msgstr "Poista lupa." - -msgid "force delete of SYSTEM permissions" -msgstr "" - -msgid "Search for permissions." -msgstr "" - -#, fuzzy -msgid "Modify a permission." -msgstr "Muokkaa ryhmää." - -msgid "Rename the permission object" -msgstr "" - -msgid "Remove members from a permission." -msgstr "" - -msgid "privileges to remove" -msgstr "" - -msgid "Display information about a permission." -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "Ping a remote server." -msgstr "" - -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "" - -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" - -#, fuzzy -msgid "Privilege name" -msgstr "Palvelun nimi" - -#, fuzzy -msgid "Privilege description" -msgstr "Profiilin kuvaus" - -msgid "Granting privilege to roles" -msgstr "" - -#, fuzzy -msgid "Add a new privilege." -msgstr "Lisää uusi isäntä." - -msgid "Add members to a privilege." -msgstr "" - -#, fuzzy -msgid "member role" -msgstr "Poista rooleja" - -msgid "roles to add" -msgstr "" - -msgid "Add permissions to a privilege." -msgstr "" - -msgid "permission" -msgstr "käyttöoikeus" - -msgid "permissions" -msgstr "käyttöoikeudet" - -msgid "Number of permissions added" -msgstr "" - -msgid "Delete a privilege." -msgstr "Poista etuoikeus." - -msgid "Search for privileges." -msgstr "" - -#, fuzzy -msgid "Modify a privilege." -msgstr "Muokkaa ryhmää." - -msgid "Rename the privilege object" -msgstr "" - -msgid "Remove members from a privilege" -msgstr "" - -msgid "roles to remove" -msgstr "" - -msgid "Remove permissions from a privilege." -msgstr "" - -msgid "Number of permissions removed" -msgstr "" - -msgid "Display information about a privilege." -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Group" -msgstr "Ryhmä" - -msgid "Manage password policy for specific group" -msgstr "" - -msgid "Max lifetime (days)" -msgstr "" - -msgid "Maximum password lifetime (in days)" -msgstr "" - -msgid "Min lifetime (hours)" -msgstr "" - -msgid "Minimum password lifetime (in hours)" -msgstr "" - -msgid "History size" -msgstr "" - -#, fuzzy -msgid "Password history size" -msgstr "Salasanan vanheneminen" - -msgid "Character classes" -msgstr "" - -msgid "Minimum number of character classes" -msgstr "" - -msgid "Min length" -msgstr "" - -msgid "Minimum length of password" -msgstr "salasanan vähimmäispituus" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "" - -msgid "Max failures" -msgstr "" - -msgid "Consecutive failures before lockout" -msgstr "" - -msgid "Failure reset interval" -msgstr "" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "" - -#, fuzzy -msgid "Lockout duration" -msgstr "Sijainti" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" - -msgid "Add a new group password policy." -msgstr "" - -msgid "Delete a group password policy." -msgstr "" - -msgid "Search for group password policies." -msgstr "" - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" - -#, fuzzy -msgid "Modify a group password policy." -msgstr "Muokkaa ryhmää." - -msgid "Display information about password policy." -msgstr "" +msgid "Update" +msgstr "Päivitä" msgid "User" msgstr "Käyttäjä" -msgid "Display effective policy for a specific user" -msgstr "" +msgid "User Group" +msgstr "Käyttäjäryhmä" -msgid "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" +msgid "User Groups" +msgstr "Käyttäjäryhmät" -#, fuzzy -msgid "RADIUS proxy server name" -msgstr "Palvelimen nimi" +msgid "User ID" +msgstr "Käyttäjä ID" -msgid "A description of this RADIUS proxy server" -msgstr "" +msgid "User ID Number" +msgstr "Käyttäjän tunnusnumero" -msgid "Server" -msgstr "Palvelin" +msgid "User Login" +msgstr "Käyttäjän kirjautuminen" -msgid "The hostname or IP (with or without port)" -msgstr "" +msgid "User categories" +msgstr "Käyttäjäluokkia" -msgid "Secret" -msgstr "Salainen" +msgid "User category" +msgstr "Käyttäjäluokka" -msgid "The secret used to encrypt data" -msgstr "" +msgid "User container" +msgstr "Käyttäjän kontti" -msgid "Timeout" -msgstr "Aikakatkaisu" +msgid "User group" +msgstr "Käyttäjäryhmä" -msgid "The total timeout across all retries (in seconds)" -msgstr "" +msgid "User login" +msgstr "Käyttäjän kirjautuminen" -msgid "Retries" -msgstr "Uudelleenyritykset" +msgid "User logins" +msgstr "Käyttäjän kirjautumiset" -#, fuzzy -msgid "The number of times to retry authentication" -msgstr "Vaatii ennakkotunnistautumisen" - -#, fuzzy -msgid "User attribute" +msgid "User name" msgstr "Käyttäjätunnus" -msgid "The username attribute on the user object" -msgstr "" - -msgid "Add a new RADIUS proxy server." -msgstr "" - -msgid "Delete a RADIUS proxy server." -msgstr "" - -msgid "Search for RADIUS proxy servers." -msgstr "" - -msgid "Modify a RADIUS proxy server." -msgstr "" - -msgid "Rename the RADIUS proxy server object" -msgstr "" - -msgid "Display information about a RADIUS proxy server." -msgstr "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Domain" -msgstr "Toimialue" - -#, fuzzy -msgid "Add domain" -msgstr "toimialue" - -msgid "Delete domain" -msgstr "Poista toimialue" - -#, fuzzy -msgid "Modify realm domains." -msgstr "Muokkaa ryhmää." - -msgid "Force adding domain even if not in DNS" -msgstr "" - -msgid "Display the list of realm domains." -msgstr "" - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" - -#, fuzzy -msgid "Role name" -msgstr "Nimeä uudelleen" - -msgid "A description of this role-group" -msgstr "" - -msgid "Privileges" -msgstr "" - -#, fuzzy -msgid "Member services" -msgstr "Poista palveluita" - -#, fuzzy -msgid "Add a new role." -msgstr "Lisää uusi isäntä." - -msgid "Add members to a role." -msgstr "" - -#, fuzzy -msgid "member service" -msgstr "Poista palveluita" - -#, fuzzy -msgid "services to add" -msgstr "palvelut" - -msgid "Add privileges to a role." -msgstr "" - -msgid "privilege" -msgstr "" - -msgid "privileges" -msgstr "" - -msgid "Number of privileges added" -msgstr "" - -msgid "Delete a role." -msgstr "Poista rooli." - -msgid "Search for roles." -msgstr "" - -#, fuzzy -msgid "Modify a role." -msgstr "Muokkaa ryhmää." - -msgid "Rename the role object" -msgstr "" - -msgid "Remove members from a role." -msgstr "" - -#, fuzzy -msgid "services to remove" -msgstr "palvelut" - -msgid "Remove privileges from a role." -msgstr "" - -msgid "Number of privileges removed" -msgstr "" - -msgid "Display information about a role." -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -#, fuzzy -msgid "Self-service name" -msgstr "Palvelun nimi" - -msgid "Attributes to which the permission applies." -msgstr "" - -msgid "Add a new self-service permission." -msgstr "" - -msgid "Delete a self-service permission." -msgstr "" - -msgid "Search for a self-service permission." -msgstr "" - -msgid "Modify a self-service permission." -msgstr "" - -msgid "Display information about a self-service permission." -msgstr "" - -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" - -msgid "SELinux User" -msgstr "SELinux-käyttäjä" - -msgid "HBAC Rule" -msgstr "HBAC-sääntö" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "" - -msgid "Create a new SELinux User Map." -msgstr "Luo uusi SELinux-käyttäjäkartta." - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "" - -msgid "Delete a SELinux User Map." -msgstr "Poista SELinux-käyttäjäkartta." - -msgid "Disable an SELinux User Map rule." -msgstr "Poista SELinux-käyttäjäkartan sääntö käytöstä." - -msgid "Enable an SELinux User Map rule." -msgstr "Ota SELinux-käyttäjäkartan sääntö käyttöön." - -msgid "Search for SELinux User Maps." -msgstr "Etsi SELinux-käyttäjäkarttoja." - -msgid "Modify a SELinux User Map." -msgstr "Muokkaa SELinux-käyttäjäkarttaa." - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "" - -msgid "Display the properties of a SELinux User Map rule." -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -#, fuzzy -msgid "Service principal" -msgstr "Palvelun nimi" - -msgid "PAC type" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" - -msgid "Add a new IPA new service." -msgstr "Lisää uusi IPA-palvelu." - -msgid "force principal name even if not in DNS" -msgstr "" - -msgid "Add hosts that can manage this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Delete an IPA service." -msgstr "Poista IPA-palvelu." - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Search for IPA services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" - -msgid "Search for services with these managed by hosts." -msgstr "" - -msgid "Search for services without these managed by hosts." -msgstr "" - -msgid "Modify an existing IPA service." -msgstr "" - -msgid "Remove hosts that can manage this service." -msgstr "" - -msgid "Display information about an IPA service." -msgstr "" - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" - -#, fuzzy -msgid "Sudo Command" -msgstr "Komennot" - -msgid "A description of this command" -msgstr "" - -msgid "Sudo Command Groups" -msgstr "" - -msgid "Create new Sudo Command." -msgstr "" - -msgid "Delete Sudo Command." -msgstr "" - -msgid "Search for Sudo Commands." -msgstr "" - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" - -msgid "Modify Sudo Command." -msgstr "" - -msgid "Display Sudo Command." -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "Sudo Command Group" -msgstr "" - -msgid "Commands" -msgstr "Komennot" - -msgid "Member Sudo commands" -msgstr "" - -msgid "Create new Sudo Command Group." -msgstr "" - -msgid "Add members to Sudo Command Group." -msgstr "" - -msgid "member sudo command" -msgstr "" - -msgid "sudo commands to add" -msgstr "" - -msgid "Delete Sudo Command Group." -msgstr "" - -msgid "Search for Sudo Command Groups." -msgstr "" - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" - -#, fuzzy -msgid "Modify Sudo Command Group." -msgstr "Muokkaa ryhmää." - -msgid "Remove members from Sudo Command Group." -msgstr "" - -msgid "sudo commands to remove" -msgstr "" - -msgid "Display Sudo Command Group." -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, fuzzy -msgid "Domain NetBIOS name" -msgstr "Toimialueen nimi" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -#, fuzzy -msgid "Domain GUID" -msgstr "Toimialue" - -msgid "Fallback primary group" -msgstr "" - -msgid "Domain name" -msgstr "Toimialueen nimi" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "Poista luottamus." - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -#, fuzzy -msgid "Search domains of the trust" -msgstr "toimialueseen ei luoteta" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "Etunimi" - -msgid "Last name" -msgstr "Sukunimi" - -msgid "Full name" -msgstr "Koko nimi" - -msgid "Display name" -msgstr "Näyttönimi" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Email address" -msgstr "Sähköpostiosoite" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -#, fuzzy -msgid "Street address" -msgstr "MAC-osoite" - -msgid "City" -msgstr "Kaupunki" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -#, fuzzy -msgid "Telephone Number" -msgstr "Sarjanumero" - -msgid "Mobile Telephone Number" -msgstr "" - -#, fuzzy -msgid "Pager Number" -msgstr "Sarjanumero" - -#, fuzzy -msgid "Fax Number" -msgstr "Sarjanumero" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Car License" -msgstr "" - -#, fuzzy -msgid "Account disabled" -msgstr "Tilin asetukset" - -#, fuzzy -msgid "User authentication types" -msgstr "Tunnistatuminen" - -msgid "Types of supported user authentication" -msgstr "Tuetut käyttäjän todennuksen tyypit" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -#, fuzzy -msgid "RADIUS proxy configuration" -msgstr "Asetukset" - -msgid "RADIUS proxy username" -msgstr "" - -#, fuzzy -msgid "Department Number" -msgstr "Sarjanumero" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -#, fuzzy -msgid "Preferred Language" -msgstr "Etusija" - -msgid "Kerberos keys available" -msgstr "" - -#, fuzzy -msgid "Add a new user." -msgstr "Lisää uusi isäntä." - -msgid "Don't create user private group" -msgstr "" - -msgid "Delete a user." -msgstr "Poista käyttäjä." - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a user." -msgstr "Muokkaa ryhmää." - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "Command category" -msgstr "" - -msgid "Command category the rule applies to" -msgstr "" - -msgid "RunAs User category" -msgstr "" - -msgid "RunAs User category the rule applies to" -msgstr "" - -msgid "RunAs Group category" -msgstr "" - -msgid "RunAs Group category the rule applies to" -msgstr "" - -msgid "Sudo order" -msgstr "" - -msgid "integer to order the Sudo rules" -msgstr "" - -#, fuzzy -msgid "External User" -msgstr "Ulkoinen" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -#, fuzzy -msgid "Host Masks" -msgstr "Koneet" - -msgid "Sudo Allow Commands" -msgstr "" - -msgid "Sudo Deny Commands" -msgstr "Sudo Deny -komennot" - -msgid "Sudo Allow Command Groups" -msgstr "" - -msgid "Sudo Deny Command Groups" -msgstr "" - -msgid "RunAs Users" -msgstr "Suorita käyttäjinä" - -msgid "Run as a user" -msgstr "" - -msgid "Groups of RunAs Users" -msgstr "" - -msgid "Run as any user within a specified group" -msgstr "" - -msgid "RunAs External User" -msgstr "" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -msgid "External Groups of RunAs Users" -msgstr "" - -msgid "External Groups of users that the command can run as" -msgstr "" - -#, fuzzy -msgid "RunAs Groups" -msgstr "Ryhmät" - -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -msgid "RunAs External Group" -msgstr "" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -#, fuzzy -msgid "Sudo Option" -msgstr "Valinnat" - -msgid "Create new Sudo Rule." -msgstr "" - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "member sudo command group" -msgstr "" - -msgid "sudo command groups to add" -msgstr "" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "" - -msgid "Add group for Sudo to execute as." -msgstr "" - -msgid "Add users and groups for Sudo to execute as." -msgstr "" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "" - -msgid "Delete Sudo Rule." -msgstr "Poista Sudo-sääntö." - -msgid "Disable a Sudo Rule." -msgstr "" - -msgid "Enable a Sudo Rule." -msgstr "" - -msgid "Search for Sudo Rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -#, fuzzy -msgid "Modify Sudo Rule." -msgstr "Muokkaa ryhmää." - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "sudo command groups to remove" -msgstr "" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "Remove an option from Sudo Rule." -msgstr "" - -msgid "Remove group for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "" - -msgid "Display Sudo Rule." -msgstr "Näytä Sudo-sääntö." - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -#, fuzzy -msgid "ACL name" -msgstr "Sukunimi" - -#, fuzzy -msgid "Profile category" -msgstr "Profiilin kuvaus" - -msgid "Profile category the ACL applies to" -msgstr "" - -msgid "User category the ACL applies to" -msgstr "" - -msgid "Host category the ACL applies to" -msgstr "" - -msgid "Service category the ACL applies to" -msgstr "" - -msgid "Profiles" -msgstr "Profiilit" - -msgid "Create a new CA ACL." -msgstr "" - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "" - -msgid "Add profiles to a CA ACL." -msgstr "" - -msgid "member Certificate Profile" -msgstr "" - -msgid "Certificate Profiles to add" -msgstr "" - -msgid "Add services to a CA ACL." -msgstr "Lisää palveluita CA ACL:ään." - -msgid "Add users and groups to a CA ACL." -msgstr "" - -msgid "Delete a CA ACL." -msgstr "Poista CA ACL." - -msgid "Disable a CA ACL." -msgstr "" - -msgid "Enable a CA ACL." -msgstr "" - -msgid "Search for CA ACLs." -msgstr "" - -#, fuzzy -msgid "Modify a CA ACL." -msgstr "Muokkaa ryhmää." - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "" - -msgid "Remove profiles from a CA ACL." -msgstr "Poista profiileita CA ACL:stä." - -msgid "Certificate Profiles to remove" -msgstr "" - -msgid "Remove services from a CA ACL." -msgstr "Poista palveluita CA ACL:stä." - -msgid "Remove users and groups from a CA ACL." -msgstr "" - -msgid "Display the properties of a CA ACL." -msgstr "" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "Profiilin tunnus" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "Profiilin kuvaus" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" - -msgid "Query current Domain Level." -msgstr "" - -msgid "Current domain level:" -msgstr "" - -msgid "Change current Domain Level." -msgstr "" - -#, fuzzy -msgid "Domain Level" -msgstr "Toimialueen nimi" - -msgid "Add certificates to host entry" -msgstr "" - -msgid "Remove certificates from host entry" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "Fallback to AD DC LDAP" -msgstr "" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" - -msgid "Add to default group" -msgstr "" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" - -#, fuzzy -msgid "Search scope" -msgstr "Haku" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Target DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" - -msgid "Origin DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "Server name" -msgstr "Palvelimen nimi" - -#, fuzzy -msgid "IPA server hostname" -msgstr "Käytettävä IPA-palvelin" - -msgid "Managed suffix" -msgstr "" - -msgid "Min domain level" -msgstr "" - -msgid "Minimum domain level" -msgstr "" - -msgid "Max domain level" -msgstr "" - -msgid "Maximum domain level" -msgstr "" - -msgid "Delete IPA server." -msgstr "Poista IPA-palvelin." - -msgid "Search for IPA servers." -msgstr "" - -msgid "Show IPA server." -msgstr "" - -msgid "Add new certificates to a service" -msgstr "" - -msgid "Remove certificates from a service" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -#, fuzzy -msgid "Allowed Target" -msgstr "Kohde" - -msgid "Create a new service delegation rule." -msgstr "" - -msgid "Add member to a named service delegation rule." -msgstr "" - -msgid "member principal" -msgstr "" - -msgid "principal to add" -msgstr "" - -msgid "Add target to a named service delegation rule." -msgstr "" - -msgid "member service delegation target" -msgstr "" - -msgid "service delegation targets to add" -msgstr "" - -msgid "Delete service delegation." -msgstr "" - -msgid "Search for service delegations rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" - -msgid "Remove member from a named service delegation rule." -msgstr "" - -msgid "principal to remove" -msgstr "" - -msgid "Remove target from a named service delegation rule." -msgstr "" - -msgid "service delegation targets to remove" -msgstr "" - -msgid "Display information about a named service delegation rule." -msgstr "" - -msgid "Create a new service delegation target." -msgstr "" - -msgid "Add member to a named service delegation target." -msgstr "" - -msgid "Delete service delegation target." -msgstr "" - -msgid "Search for service delegation target." -msgstr "" - -msgid "Remove member from a named service delegation target." -msgstr "" - -msgid "Display information about a named service delegation target." -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" - -msgid "Activate a stage user." -msgstr "" - -#, fuzzy -msgid "Add a new stage user." -msgstr "Lisää uusi isäntä." - -msgid "Create Stage user in from a delete user" -msgstr "" - -msgid "Delete a stage user." -msgstr "Poista stagen käyttäjä." - -msgid "Search for stage users." -msgstr "" - -msgid "Search for stage users with these member of groups." -msgstr "" - -msgid "Search for stage users without these member of groups." -msgstr "" - -msgid "Search for stage users with these member of netgroups." -msgstr "" - -msgid "Search for stage users without these member of netgroups." -msgstr "" - -msgid "Search for stage users with these member of roles." -msgstr "" - -msgid "Search for stage users without these member of roles." -msgstr "" - -msgid "Search for stage users with these member of HBAC rules." -msgstr "" - -msgid "Search for stage users without these member of HBAC rules." -msgstr "" - -msgid "Search for stage users with these member of sudo rules." -msgstr "" - -msgid "Search for stage users without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a stage user." -msgstr "Muokkaa ryhmää." - -msgid "Rename the stage user object" -msgstr "" - -msgid "Display information about a stage user." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" - -#, fuzzy -msgid "Segment name" -msgstr "Palvelimen nimi" - -msgid "Arbitrary string identifying the segment" -msgstr "" - -msgid "Left node" -msgstr "" - -msgid "Left replication node - an IPA server" -msgstr "" - -#, fuzzy -msgid "Right node" -msgstr "Oikeudet" - -msgid "Right replication node - an IPA server" -msgstr "" - -msgid "Connectivity" -msgstr "" - -msgid "Direction of replication between left and right replication node" -msgstr "" - -msgid "Attributes to strip" -msgstr "" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" - -msgid "Attributes to replicate" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" - -msgid "Attributes for total update" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" - -msgid "Session timeout" -msgstr "" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" - -msgid "Replication agreement enabled" -msgstr "" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" - -#, fuzzy -msgid "Suffix name" -msgstr "tiedostonimi" - -msgid "LDAP suffix to be managed" -msgstr "" - -#, fuzzy -msgid "Add a new segment." -msgstr "Lisää uusi isäntä." - -msgid "Delete a segment." -msgstr "Poista segmentti." - -msgid "Search for topology segments." -msgstr "" - -#, fuzzy -msgid "Modify a segment." -msgstr "Muokkaa ryhmää." - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" - -msgid "Initialize left node" -msgstr "" - -msgid "Initialize right node" -msgstr "" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "" - -msgid "Display a segment." -msgstr "Näytä segmentti." - -msgid "Add a new topology suffix to be managed." -msgstr "" - -msgid "Delete a topology suffix." -msgstr "" - -msgid "Search for topology suffices." -msgstr "" - -#, fuzzy -msgid "Modify a topology suffix." -msgstr "Muokkaa ryhmää." - -msgid "Show managed suffix." -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -#, fuzzy -msgid "Preserved user" -msgstr "säilytä" - -msgid "Add one or more certificates to the user entry" -msgstr "" - -msgid "Remove one or more certificates to the user entry" -msgstr "" - -msgid "Move deleted user into staged area" -msgstr "" - -msgid "Undelete a delete user account." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -#, fuzzy -msgid "Vault name" -msgstr "Sukunimi" - -#, fuzzy -msgid "Vault description" -msgstr "kuvaus" - -msgid "Vault type" -msgstr "" - -msgid "Salt" -msgstr "" - -msgid "Vault salt" -msgstr "" - -msgid "Public key" -msgstr "Julkinen avain" - -#, fuzzy -msgid "Vault public key" -msgstr "Julkinen SSH-avain" - -#, fuzzy -msgid "Owner users" -msgstr "Omistajaryhmät" - -msgid "Owner groups" -msgstr "Omistajaryhmät" - -msgid "Owner services" -msgstr "Omistajapalvelut" - -msgid "Failed owners" -msgstr "" - -#, fuzzy -msgid "Vault service" -msgstr "palvelu" - -msgid "Shared vault" -msgstr "Jaettu holvi" - -#, fuzzy -msgid "Vault user" -msgstr "Poista käyttäjä" - -msgid "Transport Certificate" -msgstr "" - -msgid "Service name of the service vault" -msgstr "" - -#, fuzzy -msgid "Username of the user vault" -msgstr "Palvelimen isäntänimi" - -msgid "Add members to a vault." -msgstr "" - -msgid "Add owners to a vault." -msgstr "" - -#, fuzzy -msgid "owner user" -msgstr "Omistajaryhmät" - -#, fuzzy -msgid "owner group" -msgstr "Omistajaryhmät" - -msgid "owner service" -msgstr "Omistajapalvelut" - -msgid "Owners that could not be added" -msgstr "" - -msgid "Number of owners added" -msgstr "" - -msgid "Session key wrapped with transport certificate" -msgstr "" - -msgid "Vault data encrypted with session key" -msgstr "" - -msgid "Nonce" -msgstr "" - -msgid "Delete a vault." -msgstr "Poista holvi." - -msgid "Search for vaults." -msgstr "" - -msgid "List all service vaults" -msgstr "" - -msgid "List all user vaults" -msgstr "" - -msgid "Remove members from a vault." -msgstr "" - -msgid "Remove owners from a vault." -msgstr "" - -msgid "Owners that could not be removed" -msgstr "" - -msgid "Number of owners removed" -msgstr "" - -msgid "Display information about a vault." -msgstr "" - -msgid "Show vault configuration." -msgstr "Näytä holvin asetukset." - -msgid "Output file to store the transport certificate" -msgstr "" - -msgid "Add owners to a vault container." -msgstr "" - -msgid "Delete a vault container." -msgstr "Poista holvikontti." - -msgid "Remove owners from a vault container." -msgstr "" - -msgid "Display information about a vault container." -msgstr "" - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "" - -#, fuzzy -msgid "Hostname (FQDN)" -msgstr "Koneen nimi" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Managed suffixes" -msgstr "" - -msgid "Check connection to remote IPA server." -msgstr "" - -#, fuzzy -msgid "Remote server name" -msgstr "Palvelimen nimi" - -#, fuzzy -msgid "Remote IPA server hostname" -msgstr "Käytettävä IPA-palvelin" - -msgid "suffix" -msgstr "" - -msgid "Search for servers with these managed suffixes." -msgstr "" - -msgid "Search for servers without these managed suffixes." -msgstr "" - -msgid "Add a manager to the stage user entry" -msgstr "" - -msgid "Remove a manager to the stage user entry" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -msgid "Managed LDAP suffix DN" -msgstr "" - -msgid "Search for topology suffixes." -msgstr "" - -msgid "Add a manager to the user entry" -msgstr "" - -msgid "Remove a manager to the user entry" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Comma-separated list of attributes" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" - -msgid "DNS class" -msgstr "" - -msgid "Comma-separated list of raw A records" -msgstr "" - -msgid "Comma-separated list of raw AAAA records" -msgstr "" - -msgid "Comma-separated list of raw A6 records" -msgstr "" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "" - -msgid "Comma-separated list of raw APL records" -msgstr "" - -msgid "Comma-separated list of raw CERT records" -msgstr "" - -msgid "Comma-separated list of raw CNAME records" -msgstr "" - -msgid "Comma-separated list of raw DHCID records" -msgstr "" - -msgid "Comma-separated list of raw DLV records" -msgstr "" - -msgid "Comma-separated list of raw DNAME records" -msgstr "" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "" - -msgid "Comma-separated list of raw DS records" -msgstr "" - -msgid "Comma-separated list of raw HIP records" -msgstr "" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "" - -msgid "Comma-separated list of raw KEY records" -msgstr "" - -msgid "KEY Flags" -msgstr "" - -#, fuzzy -msgid "KEY Protocol" -msgstr "Protokolla" - -msgid "Protocol" -msgstr "Protokolla" - -msgid "KEY Algorithm" -msgstr "" - -#, fuzzy -msgid "KEY Public Key" -msgstr "Julkinen avain" - -msgid "Public Key" -msgstr "Julkinen avain" - -msgid "Comma-separated list of raw KX records" -msgstr "" - -msgid "Comma-separated list of raw LOC records" -msgstr "" - -msgid "Comma-separated list of raw MX records" -msgstr "" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "" - -msgid "Comma-separated list of raw NS records" -msgstr "" - -msgid "Comma-separated list of raw NSEC records" -msgstr "" - -#, fuzzy -msgid "NSEC Next Domain Name" -msgstr "Toimialueen nimi" - -#, fuzzy -msgid "Next Domain Name" -msgstr "Toimialueen nimi" - -msgid "NSEC Type Map" -msgstr "" - -#, fuzzy -msgid "Type Map" -msgstr "Tyyppi" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "" - -msgid "Comma-separated list of raw PTR records" -msgstr "" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "" - -msgid "RRSIG Type Covered" -msgstr "" - -msgid "Type Covered" -msgstr "" - -msgid "RRSIG Algorithm" -msgstr "" - -#, fuzzy -msgid "RRSIG Labels" -msgstr "Nimiöt" - -msgid "Labels" -msgstr "Nimiöt" - -msgid "RRSIG Original TTL" -msgstr "" - -msgid "Original TTL" -msgstr "" - -msgid "RRSIG Signature Expiration" -msgstr "" - -#, fuzzy -msgid "Signature Expiration" -msgstr "Allekirjoitus" - -msgid "RRSIG Signature Inception" -msgstr "" - -#, fuzzy -msgid "Signature Inception" -msgstr "Allekirjoitus" - -msgid "RRSIG Key Tag" -msgstr "" - -msgid "RRSIG Signer's Name" -msgstr "" - -#, fuzzy -msgid "Signer's Name" -msgstr "Palvelimen nimi" - -#, fuzzy -msgid "RRSIG Signature" -msgstr "Allekirjoitus" - -msgid "Signature" -msgstr "Allekirjoitus" - -msgid "Comma-separated list of raw RP records" -msgstr "" - -msgid "Comma-separated list of raw SIG records" -msgstr "" - -msgid "SIG Type Covered" -msgstr "" - -msgid "SIG Algorithm" -msgstr "" - -#, fuzzy -msgid "SIG Labels" -msgstr "Nimiöt" - -msgid "SIG Original TTL" -msgstr "" - -msgid "SIG Signature Expiration" -msgstr "" - -msgid "SIG Signature Inception" -msgstr "" - -msgid "SIG Key Tag" -msgstr "" - -msgid "SIG Signer's Name" -msgstr "" - -#, fuzzy -msgid "SIG Signature" -msgstr "Allekirjoitus" - -msgid "Comma-separated list of raw SPF records" -msgstr "" - -msgid "Comma-separated list of raw SRV records" -msgstr "" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "" - -msgid "Comma-separated list of raw TA records" -msgstr "" - -msgid "Comma-separated list of raw TKEY records" -msgstr "" - -msgid "Comma-separated list of raw TSIG records" -msgstr "" - -msgid "Comma-separated list of raw TXT records" -msgstr "" - -msgid "SOA time to live" -msgstr "" - -msgid "SOA record time to live" -msgstr "" - -msgid "SOA class" -msgstr "" - -msgid "SOA record class" -msgstr "" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" - -msgid "Consume an entitlement." -msgstr "" - -#, fuzzy -msgid "Quantity" -msgstr "Identiteetti" - -msgid "Search for entitlement accounts." -msgstr "" - -msgid "Retrieve the entitlement certs." -msgstr "" - -msgid "Import an entitlement certificate." -msgstr "" - -msgid "UUID" -msgstr "UUID" - -msgid "Enrollment UUID" -msgstr "" - -msgid "Register to the entitlement system." -msgstr "" +msgid "User password" +msgstr "Käyttäjän salasana" msgid "Username" msgstr "Käyttäjätunnus" -msgid "Enrollment UUID (not implemented)" -msgstr "" +msgid "Users" +msgstr "Käyttäjät" -#, fuzzy -msgid "Registration password" -msgstr "Käyttäjän salasana" +msgid "Users allowed to create keytab" +msgstr "Käyttäjät joiden sallitaan luoda avaintaulu" -msgid "Display current entitlements." -msgstr "" +msgid "Users allowed to retrieve keytab" +msgstr "Käyttäjät, joilla on oikeus noutaa avaintaulu" -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" +msgid "Validity" +msgstr "Oikeellisuus" -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" +msgid "Vendor" +msgstr "Toimittaja" -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" +msgid "Version" +msgstr "Versio" -msgid "comma-separated list of users to add" -msgstr "" +msgid "View" +msgstr "Näytä" -msgid "comma-separated list of groups to add" -msgstr "" +msgid "Warning" +msgstr "Varoitus" -msgid "comma-separated list of users to remove" -msgstr "" +msgid "Weight" +msgstr "Paino" -msgid "comma-separated list of groups to remove" -msgstr "" +msgid "Working" +msgstr "Toimii" -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" +msgid "Your session has expired. Please log in again." +msgstr "Istuntosi on vahventunut. Ole hyvä ja kirjaudu uudelleen sisään." -#, fuzzy -msgid "Source host category" -msgstr "Lähde kone" +msgid "Zone name" +msgstr "Vyöhykkeen nimi" -msgid "Source host category the rule applies to" -msgstr "" - -msgid "Source Hosts" -msgstr "Lähde koneet" - -#, fuzzy -msgid "Source Host Groups" -msgstr "Lähde koneet" - -msgid "comma-separated list of hosts to add" -msgstr "" - -msgid "comma-separated list of host groups to add" -msgstr "" - -msgid "comma-separated list of HBAC services to add" -msgstr "" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "" - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "" - -msgid "comma-separated list of hosts to remove" -msgstr "" - -msgid "comma-separated list of host groups to remove" -msgstr "" - -msgid "comma-separated list of HBAC services to remove" -msgstr "" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" - -msgid "Source host" -msgstr "Lähde kone" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "comma-separated list of netgroups to add" -msgstr "" - -msgid "comma-separated list of netgroups to remove" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" - -msgid "Target members of a group" -msgstr "" - -msgid "User group to apply permissions to" -msgstr "" - -msgid "comma-separated list of privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI" -msgstr "" - -msgid "Permission type" -msgstr "Käyttöoikeuden tyyppi" - -msgid "comma-separated list of privileges to remove" -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "comma-separated list of roles to add" -msgstr "" - -msgid "comma-separated list of permissions" -msgstr "" - -msgid "comma-separated list of roles to remove" -msgstr "" - -msgid "comma-separated list of privileges" -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "comma-separated list of sudo commands to add" -msgstr "" - -msgid "comma-separated list of sudo commands to remove" -msgstr "" - -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" - -msgid "comma-separated list of sudo command groups to add" -msgstr "" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "" - -msgid "Failed members" -msgstr "" - -msgid "Failed source hosts/hostgroups" -msgstr "" - -msgid "Failed hosts/hostgroups" -msgstr "" - -msgid "Failed users/groups" -msgstr "" - -msgid "Failed service/service groups" -msgstr "" - -msgid "Failed to remove" -msgstr "Poistaminen epäonnistui" - -msgid "Failed RunAs" -msgstr "" - -msgid "Failed RunAsGroup" -msgstr "" - -msgid "Failed profiles" -msgstr "Epäonnistuneet profiilit" - -msgid "Failed CAs" -msgstr "" - -msgid "Failed member manager" -msgstr "" - -msgid "Failed managedby" -msgstr "" - -msgid "Failed allowed to retrieve keytab" -msgstr "Avaintaulun haun sallinta epäonnistui" - -msgid "Failed allowed to create keytab" -msgstr "Avainvälilehden luominen epäonnistui" - -msgid "Failed targets" -msgstr "Epäonnistuneita kohteita" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "" - -msgid "an internal error has occurred" -msgstr "" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "" +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "pääsy() kohteeseen %1$s epäonnistui: virhenro = %2$d\n" #, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "" +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "Tunnistautumisviitteet eivät ole sallittuja palvelussa \"%s\"" -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Virheellinen JSON-RPC-pyyntö: %(error)s" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "" - -msgid "did not receive Kerberos credentials" -msgstr "ei saanut Kerberos-tunnuksia" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -msgid "No credentials cache found" -msgstr "" - -msgid "Ticket expired" -msgstr "" - -msgid "Credentials cache permissions incorrect" -msgstr "" - -msgid "Bad format in credentials cache" -msgstr "Virheellinen muoto valtuustietojen välimuistissa" - -msgid "Cannot resolve KDC for requested realm" -msgstr "" - -msgid "Session error" -msgstr "" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#, python-format -msgid "'%(name)s' is required" -msgstr "" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - -msgid "Passwords do not match" -msgstr "Salasanat eivät täsmää" - -msgid "Command not implemented" -msgstr "" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -msgid "This entry already exists" -msgstr "" - -msgid "You must enroll a host in order to create a host service" -msgstr "" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" - -msgid "This command requires root access" -msgstr "" - -msgid "This is already a posix group" -msgstr "" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -msgid "This entry is already enabled" -msgstr "Tämä merkintä on jo käytössä" - -msgid "This entry is already disabled" -msgstr "Tämä merkintä on jo poistettu käytöstä" - -msgid "This entry cannot be enabled or disabled" -msgstr "" - -msgid "This entry is not a member" -msgstr "" - -msgid "A group may not be a member of itself" -msgstr "" - -msgid "This entry is already a member" -msgstr "" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "" - -msgid "A group may not be added as a member of itself" -msgstr "" - -msgid "The default users group cannot be removed" -msgstr "" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -msgid "This group already allows external members" -msgstr "" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "change collided with another change" -msgstr "" - -msgid "no modifications to be performed" -msgstr "" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "" - -msgid "limits exceeded for this query" -msgstr "" - -#, python-format -msgid "%(info)s" -msgstr "" - -msgid "modifying primary key is not allowed" -msgstr "" - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -#, fuzzy -msgid "LDAP timeout" -msgstr "Aikakatkaisu" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "" - -msgid "Already registered" -msgstr "" - -msgid "Not registered yet" -msgstr "" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, python-format -msgid "%(exception)s" -msgstr "%(exception)s" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -#, python-format -msgid "%(count)d variables" -msgstr "" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" -msgstr[1] "" - -msgid "A dictionary representing an LDAP entry" -msgstr "" - -msgid "A list of LDAP entries" -msgstr "" - -msgid "All commands should at least have a result" -msgstr "" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "" - -msgid "Passwords do not match!" -msgstr "Salasanat eivät täsmää!" - -msgid "No matching entries found" -msgstr "Vastaavia tietueita ei löytynyt" - -#, fuzzy -msgid "Topic or Command" -msgstr "komento" - -msgid "The topic or command name." -msgstr "" - -msgid "Topic commands:" -msgstr "Aiheen komennot:" - -msgid "To get command help, use:" -msgstr "" - -msgid " ipa --help" -msgstr "" - -#, fuzzy -msgid "Command name" -msgstr "Toimialueen nimi" - -msgid "Positional arguments" -msgstr "Sijainnilliset parametrit" - -#, python-format -msgid "Same as --%s" -msgstr "" - -#, fuzzy -msgid "Deprecated options" -msgstr "Palveluvalinnat" - -msgid "No file to read" -msgstr "" - -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - -#, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - -msgid "Filename is empty" -msgstr "" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "DNS-nimi voi sisältää enintään 63 merkkiä" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "voi sisältää enintään {} merkkiä" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -#, fuzzy -msgid "invalid SSH public key" -msgstr "Julkinen SSH-avain" - -msgid "options are not allowed" -msgstr "" - -#, fuzzy -msgid "invalid hostmask" -msgstr "virheellinen porttinumero" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -#, fuzzy -msgid "domain name cannot be longer than 255 characters" -msgstr "DNS-nimi voi sisältää enintään 63 merkkiä" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "DNS-nimi voi sisältää enintään 63 merkkiä" - -#, fuzzy -msgid "invalid domain name" -msgstr "virheellinen porttinumero" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "incorrect type" -msgstr "" - -msgid "Only one value is allowed" -msgstr "" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "" - -#, fuzzy -msgid "must be an integer" -msgstr "Tulee olla positiivinen numero" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -#, fuzzy -msgid "must be a decimal number" -msgstr "Tulee olla positiivinen numero" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" +msgid "basedn" +msgstr "BaseDN" -msgid "must be binary data" -msgstr "" +msgid "bind password" +msgstr "sido salasana" #, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "" +msgid "can be at most %(len)d characters" +msgstr "voi sisältää enintään %(len)d merkkiä" #, python-format msgid "can be at most %(maxlength)d bytes" msgstr "voi sisältää enintään %(maxlength)d tavua" -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -msgid "must be a certificate" -msgstr "" - -msgid "must be a certificate signing request" -msgstr "" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "" - -msgid "Leading and trailing spaces are not allowed" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "" - #, python-format msgid "can be at most %(maxlength)d characters" msgstr "voi sisältää enintään %(maxlength)d merkkiä" -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "" +msgid "cannot be longer that {} characters" +msgstr "voi sisältää enintään {} merkkiä" -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "" +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "asetustiedostoa %s ei voi avata\n" -#, python-format -msgid "must be '%(value)s'" -msgstr "" +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "ei voi stat()-määritystiedostoa %s\n" -#, python-format -msgid "must be one of %(values)s" -msgstr "" - -msgid "must be datetime value" -msgstr "" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -msgid "must be DNS name" -msgstr "" - -msgid "must be absolute" -msgstr "" - -msgid "must be relative" -msgstr "" - -#, fuzzy -msgid "must be dictionary" -msgstr "Kotihakemisto" - -msgid "must be Kerberos principal" -msgstr "" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -msgid "Service principal is required" -msgstr "" - -#, fuzzy -msgid "must be at least 0" -msgstr "Tulee olla positiivinen numero" - -#, fuzzy -msgid "invalid valid hex" -msgstr "virheellinen porttinumero" - -#, fuzzy -msgid "invalid serial number 0" -msgstr "Sarjanumero" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "" - -#, python-format -msgid "objectclass %s not found" -msgstr "" - -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "Tuntematon" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "Failed to authenticate to CA REST API" -msgstr "" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "Kommunikaatio CMS:n kanssa epäonnistui (tila %d)" - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "" - -#, fuzzy -msgid "automount location" -msgstr "Tietoja liitoksesta" - -#, fuzzy -msgid "automount locations" -msgstr "Tietoja liitoksesta" - -#, fuzzy -msgid "Automount Locations" -msgstr "Tunnistatuminen" - -#, fuzzy -msgid "Automount Location" -msgstr "Tunnistatuminen" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -#, fuzzy -msgid "Profile configuration" -msgstr "Kertakäyttöisen salasanan määritykset" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "Tuotu profiili \"%(value)s\"" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "Poistettu profiili \"%(value)s\"" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -msgid "delegation" -msgstr "valtuutukset" - -msgid "delegations" -msgstr "valtuutukset" - -msgid "Delegations" -msgstr "Valtuutukset" - -msgid "Delegation" -msgstr "Valtuutus" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" -"\n" -"DNS-palvelimen kokoonpano\n" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -#, fuzzy -msgid "DNS server" -msgstr "palvelin" - -#, fuzzy -msgid "DNS servers" -msgstr "palvelimet" - -#, fuzzy -msgid "DNS Servers" -msgstr "Palvelimet" - -#, fuzzy -msgid "DNS Server" -msgstr "Palvelin" - -#, fuzzy -msgid "DNS Server name" -msgstr "Palvelimen nimi" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "Muokattu DNS palvelinta \"%(value)s\"" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "IPA DNS Server is not installed" -msgstr "Käytettävä IPA-palvelin" - -msgid "Display configuration of a DNS server." -msgstr "" - -#, fuzzy -msgid "Add a new DNS server." -msgstr "Lisää uusi isäntä." - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Delete a DNS server" -msgstr "Poista käyttäjä" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "ryhmät" - -msgid "User Group" -msgstr "Käyttäjäryhmä" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "Lisätty ryhmä \"%(value)s\"" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Poistettu ryhmä \"%(value)s\"" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Muokattu ryhmää \"%(value)s\"" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "HBAC-palvelut" - -msgid "HBAC Services" -msgstr "HBAC-palvelut" - -msgid "HBAC Service" -msgstr "HBAC-palvelu" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "Lisätty HBAC palvelu \"%(value)s\"" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "Poistettu HBAC palvelu \"%(value)s\"" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "Muokattu HBAC palvelua \"%(value)s\"" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "HBAC service group" -msgstr "Lisää palvelu" - -#, fuzzy -msgid "HBAC service groups" -msgstr "Lisää palvelu" - -#, fuzzy -msgid "HBAC Service Groups" -msgstr "Käytettävä IPA-palvelin" - -#, fuzzy -msgid "HBAC Service Group" -msgstr "Mikä tahansa palvelu" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "Lisätty HBAC palveluryhmä \"%(value)s\"" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "Poistettu HBAC palveluryhmä \"%(value)s\"" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "Muokattu HBAC palveluryhmää \"%(value)s\"" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "host groups" -msgstr "isäntäryhmät" - -msgid "Host Group" -msgstr "Isäntäryhmä" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Lisätty isäntäryhmä \"%(value)s\"" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Poistettu isäntäryhmä \"%(value)s\"" - -msgid "hostgroup" -msgstr "isäntäryhmä" - -msgid "privileged hostgroup" -msgstr "" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Muokattu isäntäryhmää \"%(value)s\"" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -#, fuzzy -msgid "Auto private groups" -msgstr "Lisää palvelu" - -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" -"Muokkaa ID-aluetta.\n" -"\n" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" -"\n" -"IPA sijainnit\n" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "sijainti" - -#, fuzzy -msgid "locations" -msgstr "sijainti" - -msgid "IPA Locations" -msgstr "IPA sijainnit" - -msgid "IPA Location" -msgstr "IPA-sijainti" - -#, fuzzy -msgid "Location name" -msgstr "Sijainti" - -#, fuzzy -msgid "IPA location name" -msgstr "Toimialueen nimi" - -#, fuzzy -msgid "IPA Location description" -msgstr "Profiilin kuvaus" - -msgid "Servers" -msgstr "Palvelimet" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -#, fuzzy -msgid "Add a new IPA location." -msgstr "Lisää uusi isäntä." - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -msgid "Delete an IPA location." -msgstr "" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "IPA Server" -msgstr "Palvelin" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an IPA location." -msgstr "" - -#, fuzzy -msgid "Servers in location" -msgstr "Palvelimen nimi" - -msgid "netgroups" -msgstr "verkkoryhmät" - -msgid "Netgroups" -msgstr "Verkkoryhmät" - -msgid "Netgroup" -msgstr "Verkkoryhmä" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "Lisätty verkkoryhmä \"%(value)s\"" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Poistettu verkkoryhmä \"%(value)s\"" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "Muokattu verkkoryhmää \"%(value)s\"" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "One time password commands" -msgstr "Kertakäyttöinen salasana" - -#, fuzzy -msgid "OTP configuration options" -msgstr "Kertakäyttöisen salasanan määritykset" - -msgid "OTP Configuration" -msgstr "Kertakäyttöisen salasanan määritykset" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" -"\n" -"OTP-tunnukset\n" - -#, fuzzy -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" -"\n" -"OTP-tunnukset\n" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "OTP-tunnus" - -msgid "OTP tokens" -msgstr "OTP-tunnukset" - -msgid "OTP Tokens" -msgstr "OTP-tunnukset" - -msgid "OTP Token" -msgstr "OTP-tunnus" - -#, fuzzy -msgid "URI" -msgstr "URL" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "Lisätty OTP-tunnus \"%(value)s\"" - -msgid "cannot be empty" -msgstr "" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Poistettu OTP-tunnus \"%(value)s\"" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "Muokattu OTP-tunnus \"%(value)s\"" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Vaihdettu salasana kohteelle \"%(value)s\"" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -#, fuzzy -msgid "invalid attribute name" -msgstr "virheellinen porttinumero" - -msgid "invalid port number" -msgstr "virheellinen porttinumero" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -#, fuzzy -msgid "RADIUS Servers" -msgstr "Palvelimet" - -#, fuzzy -msgid "RADIUS Server" -msgstr "Palvelin" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -#, fuzzy -msgid "Realm domains" -msgstr "toimialue" - -#, fuzzy -msgid "Realm Domains" -msgstr "Toimialue" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "roles" -msgstr "roolit" - -msgid "Role" -msgstr "Rooli" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "Lisätty rooli \"%(value)s\"" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "Poistettu rooli \"%(value)s\"" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "Muokattu roolia \"%(value)s\"" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "self service permission" -msgstr "" - -#, fuzzy -msgid "self service permissions" -msgstr "Palveluvalinnat" - -#, fuzzy -msgid "Self Service Permissions" -msgstr "Palveluvalinnat" - -#, fuzzy -msgid "Self Service Permission" -msgstr "Käyttöoikeus" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "Lisätty itsepalvelu \"%(value)s\"" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "Poistettu itsepalvelu \"%(value)s\"" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "Muokattu itsepalvelua \"%(value)s\"" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" -"\n" -"IPA-palvelinroolit\n" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "palvelinrooli" - -msgid "server roles" -msgstr "Palvelinrooleja" - -#, fuzzy -msgid "IPA Server Roles" -msgstr "Käytettävä IPA-palvelin" - -#, fuzzy -msgid "IPA Server Role" -msgstr "Käytettävä IPA-palvelin" - -#, fuzzy -msgid "IPA server role name" -msgstr "Käytettävä IPA-palvelin" - -#, fuzzy -msgid "Role status" -msgstr "Roolit" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "IPA role name" -msgstr "IPA-roolin nimi" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "jäsen %s" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -#, fuzzy -msgid "service delegation rules" -msgstr "Palveluvalinnat" - -msgid "Service delegation rules" -msgstr "Palveluvalinnat" - -#, fuzzy -msgid "Service delegation rule" -msgstr "Palveluvalinnat" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -#, fuzzy -msgid "service delegation targets" -msgstr "Palvelun asetukset" - -#, fuzzy -msgid "Service delegation targets" -msgstr "Palvelun asetukset" - -#, fuzzy -msgid "Service delegation target" -msgstr "Palvelun asetukset" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -#, fuzzy -#| msgid "Profile description" -msgid "Subordinate id description" -msgstr "Profiilin kuvaus" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -msgid "SubUID range size" -msgstr "" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -msgid "SubGID range size" -msgstr "" - -msgid "Subordinate group ID count" -msgstr "" - -#, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "" - -#, python-format -msgid "'%(dn)s is not a valid user" -msgstr "" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -#, fuzzy -msgid "Add a new subordinate id." -msgstr "Lisää uusi isäntä." - -#, python-format -msgid "Added subordinate id \"%(value)s\"" -msgstr "Lisätty alisteinen tunnus \"%(value)s\"" - -msgid "Delete a subordinate id." -msgstr "Poista alisteinen tunnus." - -#, python-format -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "Poistettu alisteinen tunnus \"%(value)s\"" - -#, fuzzy -msgid "Modify a subordinate id." -msgstr "Muokkaa ryhmää." - -#, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "Muokattu alisteista tunnusta \"%(value)s\"" - -msgid "Search for subordinate id." -msgstr "" - -#, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "%(count)d alisteinen tunnus löytyi" -msgstr[1] "%(count)d alisteista tunnusta löytyi" - -msgid "Display information about a subordinate id." -msgstr "" - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -#, fuzzy -msgid "sudo command" -msgstr "komento" - -#, fuzzy -msgid "sudo commands" -msgstr "komennot" - -#, fuzzy -msgid "Sudo Commands" -msgstr "Komennot" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -#, fuzzy -msgid "Topology Segments" -msgstr "Topologia" - -#, fuzzy -msgid "Topology Segment" -msgstr "Topologia" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "Lisätty segmentti \"%(value)s\"" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "Poistettu segmentti \"%(value)s\"" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "Muokattu segmenttiä \"%(value)s\"" - -#, python-format -msgid "%(value)s" -msgstr "%(value)s" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "Topologian pääteitä" - -msgid "Topology suffix" -msgstr "Topologian pääte" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "operation not defined" -msgstr "toimintoa ei ole määritelty" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" -"\n" -"IPA-palvelimet\n" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "palvelin" - -msgid "servers" -msgstr "palvelimet" - -#, fuzzy -msgid "IPA Servers" -msgstr "Käytettävä IPA-palvelin" - -#, fuzzy -msgid "Server location" -msgstr "sijainti" - -#, fuzzy -msgid "Service weight" -msgstr "Palvelun asetukset" - -#, fuzzy -msgid "Weight for server services" -msgstr "Poista palveluita" - -#, fuzzy -msgid "Service relative weight" -msgstr "Palvelun asetukset" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "Muokattu IPA palvelinta \"%(value)s\"" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "Poistettu IPA palvelin \"%(value)s\"" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "Tila" - -#, fuzzy -msgid "Server state" -msgstr "Palvelimen nimi" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "A list of ACI values" -msgstr "" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "Ryhmää '%s' ei ole olemassa" - -#, fuzzy -msgid "empty filter" -msgstr "Syötetiedosto" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "Luodut ACI \"%(value)s\"" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "Poistettu ACI \"%(value)s\"" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "Muokattu ACI:ta \"%(value)s\"" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -#, fuzzy -msgid "Member service groups" -msgstr "Poista palveluita" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "tietue" - -msgid "entries" -msgstr "tietueet" - -msgid "Entry" -msgstr "Tietue" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "%s" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "Kommunikaatio CMS:n kanssa epäonnistui" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "Käyttöoikeus myönnetty: %s" - -msgid "" -"\n" -"Permissions\n" -msgstr "" -"\n" -"Käyttöoikeudet\n" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -msgid "" -"\n" -"Managed permissions\n" -msgstr "" -"\n" -"Hallitut käyttöoikeudet\n" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "must be enclosed in parentheses" -msgstr "" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, python-format -msgid "Deprecated; use %s" -msgstr "" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, python-format -msgid "Entry %s not found" -msgstr "Kohtaa %s ei löydy" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "%s: ryhmää ei löydy" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, fuzzy, python-format -msgid "Entry %s does not exist" -msgstr "Ryhmää '%s' ei ole olemassa" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "Lisätty oikeus \"%(value)s\"" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "Poistettu oikeus \"%(value)s\"" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "Muokattu oikeutta \"%(value)s\"" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "Nimi" - -msgid "Documentation" -msgstr "Dokumentaatio" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -msgid "Help topic" -msgstr "" - -msgid "Version" -msgstr "Versio" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "koneen nimi" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -#, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "Vaaditaan" - -#, fuzzy -msgid "Multi-value" -msgstr "arvo" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "Sukunimi" - -msgid "Confirm (password)" -msgstr "Vahvista (salasana)" - -msgid "Default" -msgstr "Oletus" - -msgid "Default from" -msgstr "Oletusarvo kohteesta" - -msgid "Label" -msgstr "Nimiö" - -#, fuzzy -msgid "Convert on server" -msgstr "Palvelimen isäntänimi" - -#, fuzzy -msgid "Option group" -msgstr "Omistajaryhmät" - -msgid "Sensitive" -msgstr "" - -#, fuzzy -msgid "Positional argument" -msgstr "Sijainnilliset parametrit" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -#, fuzzy -msgid "Trust direction" -msgstr "Uudelleenohjeus" - -msgid "Trust type" -msgstr "" - -msgid "Trust status" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -#, fuzzy -msgid "External trust" -msgstr "Ulkoinen" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -#, fuzzy -msgid "trust type" -msgstr "luottamustyyppi, jota ei tueta" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "toimialue" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "Poistettu luottamus \"%(value)s\"" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "trust configuration" -msgstr "Asetukset" - -#, fuzzy -msgid "Global Trust Configuration" -msgstr "Kertakäyttöisen salasanan määritykset" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "luottamustyyppi, jota ei tueta" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -#, fuzzy -msgid "trust domain" -msgstr "toimialue" - -#, fuzzy -msgid "trust domains" -msgstr "toimialue" - -msgid "Trusted domains" -msgstr "" - -#, fuzzy -msgid "Trusted domain" -msgstr "toimialue" - -#, fuzzy -msgid "Domain enabled" -msgstr "Toimialueen nimi" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -#, fuzzy -msgid "Vault Container" -msgstr "Jatka" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -#, fuzzy -msgid "Host is not supported" -msgstr "toimialueseen ei luoteta" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "Poistettu holvikontti" - -#, python-format -msgid "owner %s" -msgstr "omistaja %s" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -#, fuzzy -msgid "vault" -msgstr "Oletus" - -#, fuzzy -msgid "vaults" -msgstr "Oletus" - -#, fuzzy -msgid "Vaults" -msgstr "Oletus" - -#, fuzzy -msgid "Vault" -msgstr "Oletus" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "Lisää holvi." - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "Lisätty holvi \"%(value)s\"" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "Poistettu holvi \"%(value)s\"" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "Muokattu holvia \"%(value)s\"" - -#, fuzzy -msgid "Vault configuration" -msgstr "Asetukset" - -msgid "IPA KRA servers" -msgstr "IPA:n KRA-palvelimet" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -msgid "Key wrapping algorithm" -msgstr "" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." -msgstr "" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "Principal alias" -msgstr "" - -#, fuzzy -msgid "User password expiration" -msgstr "Salasanan vanheneminen" - -msgid "SSH public key fingerprint" -msgstr "SSH julkisen avaimen sormenjälki" - -#, fuzzy -msgid "External IdP configuration" -msgstr "Asetukset" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "Certificate mapping data" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -#, fuzzy -msgid "SMB Home Directory" -msgstr "Kotihakemisto" - -msgid "SMB Home Directory Drive" -msgstr "SMB-kotihakemisto-osio" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "voi sisältää enintään %(len)d merkkiä" - -msgid "Issuer" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject" -msgstr "Aihe" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "Lisätty CA ACL \"%(value)s\"" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "Poistettu CA ACL \"%(value)s\"" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "Muokattu CA ACL:ää \"%(value)s\"" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "Otettu CA ACL \"%(value)s\" käyttöön" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "Poistettu CA ACL \"%(value)s\" käytöstä" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -msgid "users cannot be added when user category='all'" -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "%i palvelu lisätty." - -#, python-format -msgid "%i services added." -msgstr "%i palvelua lisätty." - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -msgid "User logins" -msgstr "Käyttäjän kirjautumiset" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "must be at least 10" -msgstr "" - -#, fuzzy -msgid "configuration options" -msgstr "Asetukset" - -msgid "Configuration" -msgstr "Asetukset" - -msgid "Maximum hostname length" -msgstr "" - -msgid "Enable adding subids to new users" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "IPA:n CA-palvelimet" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -msgid "IPA DNS servers" -msgstr "IPA:n DNS-palvelimet" - -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -#, fuzzy -msgid "Setup SID configuration" -msgstr "Asetukset" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -#, fuzzy -msgid "Add SIDs" -msgstr "Lisää palvelu" - -msgid "Add SIDs for existing users and groups" -msgstr "" - -msgid "NetBIOS name of the IPA domain" -msgstr "" - -#, fuzzy -msgid "Empty domain is not allowed" -msgstr "toimialueseen ei luoteta" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "not allowed to enable SID generation" -msgstr "" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -msgid "Failed to call DBus" -msgstr "DBusin kutsuminen epäonnistui" - -msgid "Configuration of SID failed. See details in the error log" -msgstr "" - -#, fuzzy -msgid "The group doesn't exist" -msgstr "Ryhmää '%s' ei ole olemassa" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "%s tietue" - -#, python-format -msgid "Raw %s records" -msgstr "Raaka %s tietueet" - -#, python-format -msgid "%s Record" -msgstr "%s Tietue" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "Virheellinen osien lukumäärä!" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -#, fuzzy -msgid "Priority (order)" -msgstr "Prioriteetti" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -#, fuzzy -msgid "Managedby permission" -msgstr "Käyttöoikeus" - -msgid "cannot be used when a zone is specified" -msgstr "" - -msgid "Only one zone type is allowed per zone name" -msgstr "" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -msgid "Default time to live" -msgstr "" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "is required" -msgstr "Vaaditaan" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "Poistettu tietue \"%(value)s\"" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -#, fuzzy -msgid "DNS configuration options" -msgstr "Asetukset" - -#, fuzzy -msgid "DNS Global Configuration" -msgstr "Asetukset" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -msgid "Result of the command" -msgstr "" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "HBAC-säännöt" - -msgid "HBAC Rules" -msgstr "HBAC-säännöt" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "Lisätty HBAC sääntö \"%(value)s\"" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "Poistettu HBAC sääntö \"%(value)s\"" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "Muokattu HBAC sääntöä \"%(value)s\"" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "Otettu HBAC sääntö \"%(value)s\" käyttöön" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "Poistettu HBAC sääntö \"%(value)s\" käytöstä" - -#, fuzzy -msgid "Access time" -msgstr "Pääsy evätty" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host" -msgstr "Kone" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "Serial Number" -msgstr "Sarjanumero" - -msgid "Serial Number (hex)" -msgstr "Sarjanumero (hex)" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -#, fuzzy -msgid "Fingerprint (SHA1)" -msgstr "Sormenjälki" - -#, fuzzy -msgid "Fingerprint (SHA256)" -msgstr "Sormenjälki" - -msgid "Revocation reason" -msgstr "" - -#, fuzzy -msgid "Authentication Indicators" -msgstr "Tunnistatuminen" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "Lisätty isäntäkone \"%(value)s\"" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Poistettu isäntäkone \"%(value)s\"" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Muokattu isäntää \"%(value)s\"" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "Poistettu isäntäkone \"%(value)s\" käytöstä" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" - -msgid "Invalid URI: not an https scheme" -msgstr "" - -msgid "Invalid URI: missing netloc" -msgstr "" - -msgid "Identity Provider server" -msgstr "" - -msgid "Identity Provider servers" -msgstr "" - -#, fuzzy -msgid "Identity Provider server name" -msgstr "Palvelimen nimi" - -#, fuzzy -msgid "Authorization URI" -msgstr "Asetukset" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -#, fuzzy -#| msgid "Token ID" -msgid "Token URI" -msgstr "Token-tunniste" - -#, fuzzy -#| msgid "Mount point" -msgid "Token endpoint" -msgstr "Liitospiste" - -#, fuzzy -#| msgid "User login" -msgid "User info URI" -msgstr "Käyttäjän kirjautuminen" - -msgid "User information endpoint" -msgstr "" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -msgid "Client identifier" -msgstr "" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -#, fuzzy -#| msgid "Add a new IPA service." -msgid "Add a new Identity Provider server." -msgstr "Lisää uusi IPA-palvelu." - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "Lisätty palvelu \"%(value)s\"" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "Organisaatio" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -msgid "Base URL" -msgstr "" - -msgid "Base URL for IdP provider templates" -msgstr "" - -#, fuzzy -#| msgid "Unknown Error" -msgid "unknown provider" -msgstr "Tuntematon virhe" - -msgid "value is missing" -msgstr "" - -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "" - -#, fuzzy -#| msgid "Delete an IPA service." -msgid "Delete an Identity Provider server." -msgstr "Poista IPA-palvelu." - -#, fuzzy, python-format -#| msgid "Deleted IPA server \"%(value)s\"" -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "Poistettu IPA palvelin \"%(value)s\"" - -#, fuzzy -#| msgid "Modify an ID override." -msgid "Modify an Identity Provider server." -msgstr "Muokkaa tunnuksen ohitusta." - -#, fuzzy, python-format -#| msgid "Modified IPA server \"%(value)s\"" -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "Muokattu IPA palvelinta \"%(value)s\"" - -msgid "Search for Identity Provider servers." -msgstr "Etsi Identity Provider -palvelimia." - -#, fuzzy, python-format -#| msgid "%(count)d subordinate id matched" -#| msgid_plural "%(count)d subordinate ids matched" -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "%(count)d alisteinen tunnus löytyi" -msgstr[1] "%(count)d alisteista tunnusta löytyi" - -msgid "Display information about an Identity Provider server." -msgstr "" - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "Istuntosi on vahventunut. Ole hyvä ja kirjaudu uudelleen sisään." - -msgid "Apply" -msgstr "Toteuta" - -msgid "Rebuild auto membership" -msgstr "" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -msgid "Actions" -msgstr "Toimet" - -msgid "Add" -msgstr "Lisää" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -msgid "Direct Membership" -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -msgid "No entries." -msgstr "Ei merkintöjä." - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -msgid "Remove" -msgstr "Poista" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -msgid "Show Results" -msgstr "" - -#, fuzzy -msgid "Authentication indicators" -msgstr "Tunnistatuminen" - -#, fuzzy -msgid "Authentication indicator" -msgstr "Tunnistatuminen" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -msgid "RADIUS" -msgstr "" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "External Identity Provider" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "Tietoja" - -msgid "Activate" -msgstr "Aktivoi" - -msgid "Add and Add Another" -msgstr "" - -msgid "Add and Close" -msgstr "Lisää ja sulje" - -msgid "Add and Edit" -msgstr "" - -msgid "Add Many" -msgstr "" - -msgid "Back" -msgstr "Takaisin" - -msgid "Cancel" -msgstr "Peru" - -msgid "Clear" -msgstr "Tyhjennä" - -msgid "Clear all fields on the page." -msgstr "" - -msgid "Close" -msgstr "Sulje" - -msgid "Disable" -msgstr "Poista käytöstä" - -msgid "Download" -msgstr "Lataa" - -msgid "Download certificate as PEM formatted file." -msgstr "" - -msgid "Edit" -msgstr "Muokkaa" - -msgid "Enable" -msgstr "Ota käyttöön" - -msgid "Find" -msgstr "Etsi" - -msgid "Get" -msgstr "" - -msgid "Hide" -msgstr "Piilota" - -msgid "Issue" -msgstr "" - -msgid "Match" -msgstr "" - -msgid "Match users according to certificate." -msgstr "" - -msgid "Migrate" -msgstr "Suorita migraatio" - -msgid "OK" -msgstr "OK" - -msgid "Refresh" -msgstr "Päivitä" - -msgid "Reload current settings from the server." -msgstr "" - -msgid "Delete" -msgstr "Poista" - -msgid "Remove hold" -msgstr "Poista pito" - -msgid "Reset" -msgstr "Nollaa" - -#, fuzzy -msgid "Reset Password" -msgstr "Uusi salasana" - -msgid "Reset Password and Log in" -msgstr "" - -msgid "Restore" -msgstr "Palauta" - -msgid "Retry" -msgstr "Yritä uudelleen" - -msgid "Revert" -msgstr "Palaa takaisin" - -msgid "Revoke" -msgstr "" - -msgid "Save" -msgstr "Tallenna" - -msgid "Set" -msgstr "Aseta" - -msgid "Show" -msgstr "Näytä" - -msgid "Stage" -msgstr "Vaihe" - -msgid "Update" -msgstr "Päivitä" - -msgid "View" -msgstr "Näytä" - -#, fuzzy -msgid "Customization" -msgstr "Asetukset" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "" - -msgid "Expand All" -msgstr "" - -msgid "General" -msgstr "Yleinen" - -#, fuzzy -msgid "Identity Settings" -msgstr "Tilin asetukset" - -#, fuzzy -msgid "Record Settings" -msgstr "Tilin asetukset" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -msgid "Back to Top" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -msgid "Add custom value" -msgstr "" - -msgid "Available" -msgstr "Saatavilla" - -msgid "Some operations failed." -msgstr "Jotkut toiminnot epäonnistuivat." - -#, fuzzy -msgid "Operations Error" -msgstr "Valinnat" - -msgid "Confirmation" -msgstr "Vahvistus" - -msgid "Custom value" -msgstr "" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -msgid "Unsaved Changes" -msgstr "" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "Muokkaa ${entity}" - -msgid "Hide details" -msgstr "" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -msgid "Redirection" -msgstr "Uudelleenohjeus" - -msgid "Select entries to be removed." -msgstr "" - -msgid "Result" -msgstr "" - -msgid "Show details" -msgstr "" - -msgid "Success" -msgstr "Onnistui" - -msgid "Validation error" -msgstr "" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "" - -#, fuzzy -msgid "HTTP Error" -msgstr "Virhe" - -msgid "Internal Error" -msgstr "Sisäinen virhe" - -#, fuzzy -msgid "IPA Error" -msgstr "Virhe" - -msgid "No response" -msgstr "Ei vastausta" - -msgid "Unknown Error" -msgstr "Tuntematon virhe" - -msgid "URL" -msgstr "URL" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -msgid "Settings" -msgstr "Asetukset" - -msgid "Search" -msgstr "Haku" - -msgid "False" -msgstr "Epätosi" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Allowed to create keytab" -msgstr "Keytabin luominen sallittu" - -msgid "Allowed to retrieve keytab" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Add Kerberos Principal Alias" -msgstr "" - -msgid "New kerberos principal alias" -msgstr "" - -msgid "Remove Kerberos Alias" -msgstr "Poista Kerberos-alias" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "" - -msgid "Authenticating" -msgstr "Tunnistaudutaan" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -msgid "Kerberos Principal you entered is expired" -msgstr "" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "Kirjaudu sisään" - -msgid "Log In Using Certificate" -msgstr "" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "Kirjaudu ulos" - -#, fuzzy -msgid "Log out error" -msgstr "Kirjaudu ulos" - -msgid "Password or Password+One-Time Password" -msgstr "Salasana tai salasana + Kertakäyttöinen salasana (eng. OTP)" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "Synkronointi-OTP-tunnus" - -msgid "Synchronizing" -msgstr "Synkronoidaan" - -msgid "The user account you entered is locked" -msgstr "" - -#, fuzzy -msgid "number of passwords" -msgstr "Käyttäjän salasana" - -msgid "seconds" -msgstr "sekuntia" - -msgid "Migrating" -msgstr "Suoritetaan migraatiota" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -msgid "Password migration was not successful" -msgstr "" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -#, fuzzy -msgid "Password migration was successful" -msgstr "Salasanan vanheneminen" - -msgid "Attribute" -msgstr "Attribuutti" - -msgid "Add delegation" -msgstr "" - -#, fuzzy -msgid "Remove delegations" -msgstr "Poista rooleja" - -#, fuzzy -msgid "Add permission" -msgstr "Käyttöoikeus" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove permissions" -msgstr "Poista rooleja" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add privilege" -msgstr "Lisää rooli" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove privileges" -msgstr "Poista rooleja" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Role Settings" -msgstr "Asetukset" - -msgid "Add role" -msgstr "Lisää rooli" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -msgid "Remove roles" -msgstr "Poista rooleja" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -msgid "Add self service permission" -msgstr "" - -#, fuzzy -msgid "Remove self service permissions" -msgstr "Poista palveluita" - -msgid "Add rule" -msgstr "Lisää sääntö" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to change default group?" -msgstr "" - -msgid "Default host group" -msgstr "" - -msgid "Default user group" -msgstr "" - -msgid "Exclusive" -msgstr "Poissulkeva" - -#, fuzzy -msgid "Expression" -msgstr "Käyttöoikeus" - -msgid "Host group rule" -msgstr "" - -msgid "Host group rules" -msgstr "" - -#, fuzzy -msgid "Inclusive" -msgstr "Poissulkeva" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -msgid "User group rule" -msgstr "" - -#, fuzzy -msgid "User group rules" -msgstr "Omistajaryhmät" - -msgid "Add automount key" -msgstr "" - -#, fuzzy -msgid "Remove automount keys" -msgstr "Poista rooleja" - -#, fuzzy -msgid "Add automount location" -msgstr "Tunnistatuminen" - -#, fuzzy -msgid "Automount Location Settings" -msgstr "Tilin asetukset" - -msgid "Remove automount locations" -msgstr "" - -msgid "Add automount map" -msgstr "" - -#, fuzzy -msgid "Map Type" -msgstr "Tyyppi" - -msgid "Direct" -msgstr "Suora" - -msgid "Indirect" -msgstr "Epäsuora" - -msgid "Remove automount maps" -msgstr "" - -msgid "Add certificate authority" -msgstr "" - -msgid "Remove certificate authorities" -msgstr "" - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -msgid "All" -msgstr "Kaikki" - -msgid "Any CA" -msgstr "" - -#, fuzzy -msgid "Any Host" -msgstr "Kone" - -msgid "Any Service" -msgstr "Mikä tahansa palvelu" - -#, fuzzy -msgid "Any Profile" -msgstr "Profiili" - -msgid "Anyone" -msgstr "" - -#, fuzzy -msgid "Rule status" -msgstr "Säännöt" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -#, fuzzy -msgid "Remove CA ACLs" -msgstr "Poista rooleja" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -msgid "Specified CAs" -msgstr "" - -msgid "Specified Hosts and Groups" -msgstr "" - -#, fuzzy -msgid "Specified Profiles" -msgstr "Profiilit" - -msgid "Specified Services and Groups" -msgstr "" - -msgid "Specified Users and Groups" -msgstr "" - -msgid "Permitted to have certificates issued" -msgstr "" - -#, fuzzy -msgid "Remove certificate profiles" -msgstr "Poista palveluita" - -msgid "AA Compromise" -msgstr "" - -msgid "Add principal" -msgstr "" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" - -msgid "Certificates" -msgstr "" - -msgid "Certificate Hold" -msgstr "" - -msgid "Cessation of Operation" -msgstr "" - -#, fuzzy -msgid "Common Name" -msgstr "Koneen nimi" - -msgid "the certificate with serial number " -msgstr "" - -msgid "Expires On" -msgstr "" - -msgid "Issued on from" -msgstr "" - -msgid "Issued on to" -msgstr "" - -#, fuzzy -msgid "Maximum serial number" -msgstr "Sarjanumero" - -#, fuzzy -msgid "Minimum serial number" -msgstr "Sarjanumero" - -msgid "Revoked on from" -msgstr "" - -msgid "Revoked on to" -msgstr "" - -msgid "Valid not after from" -msgstr "" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -msgid "Fingerprints" -msgstr "Sormenjäljet" - -msgid "Get Certificate" -msgstr "" - -msgid "Certificate Hold Removed" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -msgid "Issue new certificate" -msgstr "" - -msgid "Issued By" -msgstr "" - -msgid "Issued On" -msgstr "" - -msgid "Issued To" -msgstr "" - -msgid "Key Compromise" -msgstr "" - -msgid "No Valid Certificate" -msgstr "" - -msgid "New Certificate" -msgstr "" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -msgid "Note" -msgstr "Huomautus" - -#, fuzzy -msgid "Organizational Unit" -msgstr "Organisaatio" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -msgid "Privilege Withdrawn" -msgstr "" - -msgid "Reason for Revocation" -msgstr "" - -#, fuzzy -msgid "Remove certificate hold" -msgstr "Poista palveluita" - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -#, fuzzy -msgid "Remove from CRL" -msgstr "Poista rooleja" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -msgid "Certificate requested" -msgstr "" - -msgid "Revoke certificate" -msgstr "" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -msgid "Certificate Revoked" -msgstr "" - -msgid "REVOKED" -msgstr "" - -msgid "SHA1 Fingerprint" -msgstr "SHA1-sormenjälki" - -msgid "SHA256 Fingerprint" -msgstr "SHA256-sormenjälki" - -msgid "Status" -msgstr "Tila" - -msgid "Superseded" -msgstr "" - -msgid "Unspecified" -msgstr "Määrittämätön" - -msgid "Valid Certificate Present" -msgstr "" - -msgid "Valid from" -msgstr "" - -msgid "Valid to" -msgstr "" - -msgid "Validity" -msgstr "Oikeellisuus" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -msgid "View Certificate" -msgstr "" - -msgid "Certificate Data" -msgstr "" - -msgid "Certificate For Match" -msgstr "" - -msgid "Certificate Mapping Match" -msgstr "" - -msgid "Matched Users" -msgstr "" - -msgid "User Login" -msgstr "Käyttäjän kirjautuminen" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -#, fuzzy -msgid "Configuration string" -msgstr "Asetukset" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -msgid "Remove certificate mapping data" -msgstr "" - -msgid "Issuer and subject" -msgstr "" - -msgid "Remove certificate identity mapping rules" -msgstr "" - -#, fuzzy -msgid "Group Options" -msgstr "Valinnat" - -#, fuzzy -msgid "Search Options" -msgstr "Palveluvalinnat" - -#, fuzzy -msgid "SELinux Options" -msgstr "SELinux-käyttäjä" - -#, fuzzy -msgid "Server Options" -msgstr "Palveluvalinnat" - -msgid "Service Options" -msgstr "Palveluvalinnat" - -#, fuzzy -msgid "User Options" -msgstr "Palveluvalinnat" - -msgid "Forward first" -msgstr "" - -msgid "Forwarding disabled" -msgstr "" - -msgid "Forward only" -msgstr "" - -msgid "Options" -msgstr "Valinnat" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -#, fuzzy -msgid "Remove DNS forward zones" -msgstr "Poista rooleja" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -msgid "Other Record Types" -msgstr "" - -msgid "Address not valid, can't redirect" -msgstr "" - -msgid "Create dns record" -msgstr "" - -msgid "Creating record." -msgstr "" - -msgid "Record creation failed." -msgstr "Tietueen luominen epäonnistui." - -msgid "Checking if record exists." -msgstr "" - -msgid "Record not found." -msgstr "Tietuetta ei löydy." - -#, fuzzy -msgid "Redirection to PTR record" -msgstr "Uudelleenohjeus" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -msgid "Target reverse zone not found." -msgstr "" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -msgid "Standard Record Types" -msgstr "" - -msgid "Records for DNS Zone" -msgstr "" - -msgid "Record Type" -msgstr "Tietueen tyyppi" - -#, fuzzy -msgid "Add DNS zone" -msgstr "Lisää rooli" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -#, fuzzy -msgid "DNS Zone Settings" -msgstr "Palvelun asetukset" - -#, fuzzy -msgid "Remove DNS zones" -msgstr "Poista rooleja" - -#, fuzzy -msgid "Remove Permission" -msgstr "Käyttöoikeus" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Level" -msgstr "Taso" - -msgid "Set Domain Level" -msgstr "" - -#, fuzzy -msgid "Add user group" -msgstr "Lisää käyttäjä" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Group Settings" -msgstr "Tilin asetukset" - -msgid "External" -msgstr "Ulkoinen" - -msgid "Groups" -msgstr "Ryhmät" - -#, fuzzy -msgid "Group categories" -msgstr "Ryhmän nimi" - -msgid "Change to external group" -msgstr "" - -msgid "Change to POSIX group" -msgstr "" - -msgid "Non-POSIX" -msgstr "" - -msgid "POSIX" -msgstr "" - -#, fuzzy -msgid "Remove user groups" -msgstr "Poista käyttäjiä" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Group Type" -msgstr "Ryhmän nimi" - -#, fuzzy -msgid "Add HBAC rule" -msgstr "Lisää sääntö" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Accessing" -msgstr "Pääsy evätty" - -#, fuzzy -msgid "Remove HBAC rules" -msgstr "Poista rooleja" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Via Service" -msgstr "Palvelu" - -msgid "Who" -msgstr "" - -#, fuzzy -msgid "Add HBAC service" -msgstr "Lisää palvelu" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -#, fuzzy -msgid "Remove HBAC services" -msgstr "Poista palveluita" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -#, fuzzy -msgid "Add HBAC service group" -msgstr "Lisää palvelu" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove HBAC service groups" -msgstr "Poista palveluita" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -msgid "Access Denied" -msgstr "Pääsy evätty" - -#, fuzzy -msgid "Access Granted" -msgstr "Pääsy evätty" - -#, fuzzy -msgid "Include Disabled" -msgstr "Ei käytössä" - -#, fuzzy -msgid "Include Enabled" -msgstr "Käytössä" - -msgid "HBAC Test" -msgstr "" - -msgid "Matched" -msgstr "" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" - -msgid "Rules" -msgstr "Säännöt" - -msgid "Run Test" -msgstr "" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -msgid "Unmatched" -msgstr "" - -msgid "Add host" -msgstr "Lisää isäntä" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -msgid "Host Certificate" -msgstr "" - -msgid "Host Name" -msgstr "Koneen nimi" - -msgid "Delete Key, Unprovision" -msgstr "" - -#, fuzzy -msgid "Host Settings" -msgstr "Asetukset" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "Rekisteröinti" - -msgid "Fully Qualified Host Name" -msgstr "" - -#, fuzzy -msgid "Generate OTP" -msgstr "Yleinen" - -#, fuzzy -msgid "Generated OTP" -msgstr "Toinen OTP" - -msgid "Kerberos Key" -msgstr "" - -msgid "Kerberos Key Not Present" -msgstr "" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -msgid "One-Time Password" -msgstr "Kertakäyttöinen salasana" - -#, fuzzy -msgid "One-Time Password Not Present" -msgstr "Kertakäyttöinen salasana" - -#, fuzzy -msgid "One-Time Password Present" -msgstr "Kertakäyttöinen salasana" - -#, fuzzy -msgid "Reset OTP" -msgstr "Nollaa" - -#, fuzzy -msgid "Reset One-Time Password" -msgstr "Kertakäyttöinen salasana" - -#, fuzzy -msgid "Set OTP" -msgstr "Toinen OTP" - -#, fuzzy -msgid "OTP set" -msgstr "OTP-tunnus" - -#, fuzzy -msgid "Set One-Time Password" -msgstr "Kertakäyttöinen salasana" - -msgid "Remove hosts" -msgstr "Poista isännät" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -msgid "Unprovision" -msgstr "" - -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -msgid "Add host group" -msgstr "" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Host Group Settings" -msgstr "Tilin asetukset" - -#, fuzzy -msgid "Remove host groups" -msgstr "Poista rooleja" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -msgid "Identity provider details" -msgstr "Identiteetin tarjoajan tiedot" - -#, fuzzy -msgid "Verify secret" -msgstr "Uusi salasana" - -msgid "User to override" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -msgid "Profile" -msgstr "Profiili" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -msgid "Enter trusted group name." -msgstr "" - -#, fuzzy -msgid "Add ID view" -msgstr "Lisää palvelu" - -msgid "Add group ID override" -msgstr "" - -#, fuzzy -msgid "Add user ID override" -msgstr "Lisää palvelu" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -msgid "Apply to host groups" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -#, fuzzy -msgid "Remove ID views" -msgstr "Poista palveluita" - -#, fuzzy -msgid "Remove user ID overrides" -msgstr "Poista palveluita" - -#, fuzzy -msgid "Remove group ID overrides" -msgstr "Poista palveluita" - -msgid "Un-apply from host groups" -msgstr "" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -#, fuzzy -msgid "Un-apply" -msgstr "Toteuta" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -#, fuzzy -msgid "Add netgroup" -msgstr "Lisää rooli" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Netgroup Settings" -msgstr "Verkkoryhmän kuvaus" - -#, fuzzy -msgid "Remove netgroups" -msgstr "Poista rooleja" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -msgid "Add OTP token" -msgstr "Lisää OTP-tunnus" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -#, fuzzy -msgid "Configure your token" -msgstr "Asetukset" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -#, fuzzy -msgid "OTP Token Settings" -msgstr "OTP-tunnukset" - -#, fuzzy -msgid "Disable token" -msgstr "Poista käytöstä" - -#, fuzzy -msgid "Enable token" -msgstr "Ota käyttöön" - -#, fuzzy -msgid "Remove OTP tokens" -msgstr "OTP-tunnukset" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "" - -#, fuzzy -msgid "Show configuration uri" -msgstr "Asetukset" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -msgid "Add Custom Attribute" -msgstr "" - -#, fuzzy -msgid "Permission settings" -msgstr "Käyttöoikeus" - -msgid "Attribute breakdown" -msgstr "" - -#, fuzzy -msgid "Privilege Settings" -msgstr "Palvelun asetukset" - -msgid "Public key:" -msgstr "Julkinen avain:" - -#, fuzzy -msgid "Set public key" -msgstr "Julkinen SSH-avain" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -msgid "Add password policy" -msgstr "" - -#, fuzzy -msgid "Password Policy" -msgstr "Salasana" - -#, fuzzy -msgid "Remove password policies" -msgstr "Poista rooleja" - -#, fuzzy -msgid "Add ID range" -msgstr "Lisää rooli" - -#, fuzzy -msgid "Range Settings" -msgstr "Asetukset" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -#, fuzzy -msgid "Domain SID" -msgstr "Toimialue" - -msgid "Secondary RID base" -msgstr "" - -#, fuzzy -msgid "Remove ID ranges" -msgstr "Poista rooleja" - -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -msgid "Detect" -msgstr "" - -#, fuzzy -msgid "Local domain" -msgstr "toimialue" - -msgid "IPA trust" -msgstr "" - -msgid "Active Directory winsync" -msgstr "" - -#, fuzzy -msgid "Add RADIUS server" -msgstr "Lisää palvelu" - -#, fuzzy -msgid "RADIUS Proxy Server Settings" -msgstr "Palvelun asetukset" - -#, fuzzy -msgid "Remove RADIUS servers" -msgstr "Poista palveluita" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -#, fuzzy -msgid "Force Update" -msgstr "Päivitä" - -#, fuzzy -msgid "Add SELinux user map" -msgstr "SELinux-käyttäjäkartta" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove selinux user maps" -msgstr "Poista käyttäjiä" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -msgid "Server Roles" -msgstr "Palvelinrooleja" - -msgid "Server Role" -msgstr "Palvelimen rooli" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -#, fuzzy -msgid "Delete Server" -msgstr "Poista käyttäjä" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -msgid "Add service" -msgstr "Lisää palvelu" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -#, fuzzy -msgid "Service Certificate" -msgstr "Palvelun nimi" - -msgid "Service Settings" -msgstr "Palvelun asetukset" - -#, fuzzy -msgid "Provisioning" -msgstr "Käyttöoikeus" - -msgid "Remove services" -msgstr "Poista palveluita" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -msgid "Unprovisioning service" -msgstr "" - -#, fuzzy -msgid "Service unprovisioned" -msgstr "Palveluvalinnat" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "" - -msgid "SSH public keys" -msgstr "Julkisia SSH-avaimia" - -msgid "SSH public key:" -msgstr "Julkinen SSH-avain:" - -msgid "Set SSH key" -msgstr "" - -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" - -#, fuzzy -msgid "Add stage user" -msgstr "Lisää käyttäjä" - -#, fuzzy -msgid "Stage users" -msgstr "Vaihe" - -#, fuzzy -msgid "Preserved users" -msgstr "Poista käyttäjiä" - -#, fuzzy -msgid "Remove preserved users" -msgstr "Poista käyttäjiä" - -#, fuzzy -msgid "Remove stage users" -msgstr "Poista käyttäjiä" - -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -msgid "User categories" -msgstr "Käyttäjäluokkia" - -#, fuzzy -msgid "Add subid" -msgstr "Lisää sääntö" - -msgid "Assigned subids" -msgstr "" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -#, fuzzy -msgid "Add sudo command" -msgstr "komento" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -msgid "Remove sudo commands" -msgstr "" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -msgid "Add sudo command group" -msgstr "" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -msgid "Remove sudo command groups" -msgstr "" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add sudo rule" -msgstr "Lisää sääntö" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "" - -#, fuzzy -msgid "Any Command" -msgstr "Komennot" - -#, fuzzy -msgid "Any Group" -msgstr "Ryhmä" - -#, fuzzy -msgid "Run Commands" -msgstr "Komennot" - -msgid "Deny" -msgstr "" - -msgid "Access this host" -msgstr "" - -#, fuzzy -msgid "Option added" -msgstr "Valinnat" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -#, fuzzy -msgid "Remove sudo rules" -msgstr "Poista rooleja" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -msgid "Specified Commands and Groups" -msgstr "" - -msgid "Specified Groups" -msgstr "" - -msgid "Remove sudo options" -msgstr "" - -msgid "Autogenerated" -msgstr "" - -msgid "Segment details" -msgstr "" - -#, fuzzy -msgid "Replication configuration" -msgstr "Asetukset" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -#, fuzzy -msgid "Add IPA location" -msgstr "sijainti" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -#, fuzzy -msgid "Remove topology segments" -msgstr "Poista rooleja" - -msgid "Account" -msgstr "Tili" - -#, fuzzy -msgid "Add trust" -msgstr "Lisää sääntö" - -msgid "Administrative account" -msgstr "Hallinnollinen tili" - -msgid "SID blocklists" -msgstr "" - -#, fuzzy -msgid "Trust Settings" -msgstr "Tilin asetukset" - -msgid "Establish using" -msgstr "" - -#, fuzzy -msgid "Fetch domains" -msgstr "toimialue" - -#, fuzzy -msgid "Pre-shared password" -msgstr "Vaihda salasana" - -#, fuzzy -msgid "Remove trusts" -msgstr "Poista käyttäjiä" - -#, fuzzy -msgid "Remove domains" -msgstr "Poista rooleja" - -msgid "Alternative UPN suffixes" -msgstr "" - -msgid "User attributes for SMB services" -msgstr "" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - -msgid "Account Settings" -msgstr "Tilin asetukset" - -#, fuzzy -msgid "Account Status" -msgstr "Tilin asetukset" - -#, fuzzy -msgid "Active users" -msgstr "Poista käyttäjiä" - -msgid "Add user" -msgstr "Lisää käyttäjä" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -msgid "Auto assign subordinate ids" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "" - -#, fuzzy -msgid "Contact Settings" -msgstr "Tilin asetukset" - -msgid "Delete mode" -msgstr "Poista moodi" - -#, fuzzy -msgid "Employee Information" -msgstr "Tietoja liitoksesta" - -msgid "Error changing account status" -msgstr "" - -msgid "Password expiration" -msgstr "Salasanan vanheneminen" - -#, fuzzy -msgid "Mailing Address" -msgstr "Sähköpostiosoite" - -#, fuzzy -msgid "Misc. Information" -msgstr "Tietoja liitoksesta" - -msgid "delete" -msgstr "poista" - -msgid "preserve" -msgstr "säilytä" - -msgid "No private group" -msgstr "" - -msgid "Remove users" -msgstr "Poista käyttäjiä" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Unlock" -msgstr "Avaa" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -#, fuzzy -msgid "Add vault" -msgstr "Lisää sääntö" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -msgid "Members" -msgstr "Jäsenet" - -msgid "My User Vaults" -msgstr "" - -msgid "Owners" -msgstr "Omistajat" - -msgid "Remove vaults" -msgstr "Poista holveja" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Service Vaults" -msgstr "Palvelut" - -msgid "Shared" -msgstr "Jaettu" - -msgid "Shared Vaults" -msgstr "Jaetut holvit" - -msgid "Standard" -msgstr "Tavallinen" - -msgid "Symmetric" -msgstr "" - -msgid "Vault Type" -msgstr "" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -#, fuzzy -msgid "User Vaults" -msgstr "Käyttäjät" - -#, fuzzy -msgid "Current password is required" -msgstr "Nykyinen salasana" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -msgid "First OTP" -msgstr "Ensimmäinen OTP" - -#, fuzzy -msgid "New password is required" -msgstr "Uusi salasana" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Password change complete" -msgstr "" - -#, fuzzy -msgid "Your password has expired. Please enter a new password." -msgstr "Istuntosi on vahventunut. Ole hyvä ja kirjaudu uudelleen sisään." - -msgid "Passwords must match" -msgstr "Salasanojen täytyy täsmätä" - -msgid "Password reset was not successful." -msgstr "" - -msgid "Reset your password." -msgstr "Nollaa salasanasi." - -msgid "Second OTP" -msgstr "Toinen OTP" - -#, fuzzy -msgid "Verify Password" -msgstr "Uusi salasana" - -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -msgid "Some entries were not deleted" -msgstr "" - -msgid "Quick Links" -msgstr "" - -msgid "Select All" -msgstr "Valitse kaikki" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -#, fuzzy -msgid "Unselect All" -msgstr "Valitse kaikki" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "Toimii" - -msgid "Audit" -msgstr "Auditointi" - -msgid "Authentication" -msgstr "Tunnistatuminen" - -#, fuzzy -msgid "Automount" -msgstr "Tili" - -msgid "DNS" -msgstr "DNS" - -msgid "Host-Based Access Control" -msgstr "" - -msgid "Identity" -msgstr "Identiteetti" - -msgid "Network Services" -msgstr "Verkon palvelut" - -msgid "Policy" -msgstr "" - -msgid "Role-Based Access Control" -msgstr "" - -msgid "Subordinate IDs" -msgstr "" - -msgid "Sudo" -msgstr "" - -msgid "Topology" -msgstr "Topologia" - -msgid "True" -msgstr "" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -#, fuzzy -msgid "First" -msgstr "Ensimmäinen OTP" - -#, fuzzy -msgid "Last" -msgstr "Sukunimi" - -msgid "Next" -msgstr "Seuraava" - -msgid "Page" -msgstr "" - -msgid "Prev" -msgstr "" - -msgid "Undo" -msgstr "" - -msgid "Undo this change." -msgstr "" - -msgid "Undo All" -msgstr "" - -msgid "Undo all changes in this field." -msgstr "" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -#, fuzzy -msgid "Must be a decimal number" -msgstr "Tulee olla positiivinen numero" - -#, fuzzy -msgid "Format error" -msgstr "Jäsennysvirhe" - -#, fuzzy -msgid "Must be an integer" -msgstr "Tulee olla positiivinen numero" - -msgid "Not a valid IP address" -msgstr "" - -msgid "Not a valid IPv4 address" -msgstr "" - -msgid "Not a valid IPv6 address" -msgstr "" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -msgid "Parse error" -msgstr "Jäsennysvirhe" - -msgid "Must be a positive number" -msgstr "Tulee olla positiivinen numero" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -#, fuzzy -msgid "Required field" -msgstr "Vaaditaan" - -msgid "Unsupported value" -msgstr "Ei tuettu arvo" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -msgid "IdP max life" -msgstr "" - -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "" - -msgid "IdP max renew" -msgstr "" - -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -#, fuzzy -msgid "password policy" -msgstr "salasana" - -#, fuzzy -msgid "password policies" -msgstr "salasana" - -#, fuzzy -msgid "Password Policies" -msgstr "Salasana" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -msgid "User check" -msgstr "Käyttäjätunnus" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "Grace login limit" -msgstr "" - -msgid "Number of LDAP authentications allowed after expiration" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -#, fuzzy -msgid "SELinux User Map rule" -msgstr "SELinux-käyttäjäkartta" - -#, fuzzy -msgid "SELinux User Map rules" -msgstr "SELinux-käyttäjäkartat" - -msgid "SELinux User Maps" -msgstr "SELinux-käyttäjäkartat" - -msgid "SELinux User Map" -msgstr "SELinux-käyttäjäkartta" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "Lisätty SELinux-käyttäjäkartta \"%(value)s\"" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "Poistettu SELinux-käyttäjäkartta \"%(value)s\"" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "Muokattu SELinux-käyttäjäkarttaa \"%(value)s\"" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "%(count)d SELinux-käyttäjäkartta löytyi" -msgstr[1] "%(count)d SELinux-käyttäjäkarttoja löytyi" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "Otettu SELinux-käyttäjäkartta \"%(value)s\" käyttöön" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "Poistettu SELinux-käyttäjäkartta \"%(value)s\" käytöstä" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "Tunnistautumisviitteet eivät ole sallittuja palvelussa \"%s\"" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -msgid "service" -msgstr "palvelu" - -msgid "services" -msgstr "palvelut" - -#, fuzzy -msgid "Service principal alias" -msgstr "Palveluvalinnat" - -msgid "Base-64 encoded service certificate" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." -msgstr "Lisää uusi IPA-palvelu." - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "Lisätty palvelu \"%(value)s\"" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -msgid "Add a new SMB service." -msgstr "Lisää uusi SMB-palvelu." - -#, fuzzy -msgid "SMB service NetBIOS name" -msgstr "Palvelun nimi" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "Poistettu palvelu \"%(value)s\"" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "Muokattu palvelua \"%(value)s\"" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "Poistettu palvelu \"%(value)s\" käytöstä" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a service" -msgstr "" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -#, fuzzy -msgid "Stage Users" -msgstr "Vaihe" - -#, fuzzy -msgid "Stage User" -msgstr "Vaihe" - -#, fuzzy -msgid "stage user" -msgstr "Poista käyttäjä" - -#, fuzzy -msgid "stage users" -msgstr "käyttäjät" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "Lisätty stagen käyttäjä \"%(value)s\"" - -msgid "givenname is required" -msgstr "" - -#, fuzzy -msgid "sn is required" -msgstr "Vaaditaan" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Poistettu stagen käyttäjä \"%(value)s\"" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "Muokattu stagen käyttäjää \"%(value)s\"" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -#, fuzzy -msgid "ID View" -msgstr "Näytä" - -msgid "system ID View" -msgstr "" - -#, fuzzy -msgid "ID Views" -msgstr "Näytä" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "ei löytynyt" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "arvo" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -#, fuzzy -msgid "Add a new ID override." -msgstr "Lisää uusi isäntä." - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "Poista tunnuksen ohitus." - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "Muokkaa tunnuksen ohitusta." - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an ID override." -msgstr "" - -#, fuzzy -msgid "User ID override" -msgstr "Käyttäjä ID" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -msgid "Certificate Authority" -msgstr "" - -msgid "Certificate Authorities" -msgstr "" - -msgid "Name for referencing the CA" -msgstr "" - -msgid "Description of the purpose of the CA" -msgstr "" - -msgid "Authority ID" -msgstr "" - -msgid "Dogtag Authority ID" -msgstr "" - -#, fuzzy -msgid "Subject DN" -msgstr "Aihe" - -msgid "Subject Distinguished Name" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Issuer Distinguished Name" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -#, fuzzy -#| msgid "Version" -msgid "RSN Version" -msgstr "Versio" - -#, fuzzy -#| msgid "Serial Number (hex)" -msgid "Random Serial Number Version" -msgstr "Sarjanumero (hex)" - -msgid "Search for CAs." -msgstr "" - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "Display the properties of a CA." -msgstr "" - -msgid "Create a CA." -msgstr "" - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "Luotu CA \"%(value)s\"" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "Poistettu CA \"%(value)s\"" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -msgid "Modify CA configuration." -msgstr "Muokkaa CA-asetuksia." - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "Muokattu CA:ta \"%(value)s\"" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "Poista CA käytöstä." - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "Poistettu CA \"%(value)s\" käytöstä" - -msgid "IPA CA cannot be disabled" -msgstr "" - -msgid "Enable a CA." -msgstr "Ota CA käyttöön." - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "Otettu CA \"%(value)s\" käyttöön" - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -#, fuzzy -msgid "Subject email address" -msgstr "Sähköpostiosoite" - -#, fuzzy -msgid "Subject DNS name" -msgstr "Aihe" - -msgid "Subject X.400 address" -msgstr "" - -#, fuzzy -msgid "Subject directory name" -msgstr "Kotihakemisto" - -msgid "Subject EDI Party name" -msgstr "" - -#, fuzzy -msgid "Subject URI" -msgstr "Aihe" - -#, fuzzy -msgid "Subject IP Address" -msgstr "IP-osoite" - -msgid "Subject OID" -msgstr "Aihe OID" - -#, fuzzy -msgid "Subject UPN" -msgstr "Aihe" - -msgid "Subject Kerberos principal name" -msgstr "" - -#, fuzzy -msgid "Subject Other Name" -msgstr "Palvelimen nimi" - -msgid "Serial number (hex)" -msgstr "Sarjanumero (hex)" - -msgid "Request status" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "Omistaja %s" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Status of the certificate" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" -"\n" -"Sudo-säännöt\n" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "sudo-säännöt" - -msgid "Sudo Rules" -msgstr "sudo-säännöt" - -msgid "Sudo Rule" -msgstr "Sudo-sääntö" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "Lisätty sudosääntö \"%(value)s\"" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "Muokattu sudosääntöä \"%(value)s\"" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "käyttäjät" +#, c-format +msgid "child exited with %d\n" +msgstr "lapsi poistui viestillä %d\n" msgid "command" msgstr "komento" @@ -23915,454 +2577,249 @@ msgstr "komento" msgid "commands" msgstr "komennot" +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "curl_easy_init() epäonnistui\n" + +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "curl_easy_setopt() epäonnistui\n" + +#, c-format +msgid "curl_global_init() failed\n" +msgstr "curl_global_init() epäonnistui\n" + +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "curl_slist_append() epäonnistui arvolle: '%s'\n" + +msgid "delegation" +msgstr "valtuutukset" + +msgid "delegations" +msgstr "valtuutukset" + +msgid "delete" +msgstr "poista" + +msgid "description" +msgstr "kuvaus" + +msgid "did not receive Kerberos credentials" +msgstr "ei saanut Kerberos-tunnuksia" + +msgid "domain" +msgstr "toimialue" + +msgid "domain is not trusted" +msgstr "toimialueseen ei luoteta" + +msgid "entries" +msgstr "tietueet" + +msgid "entry" +msgstr "tietue" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "ipa-getkeytabin suorittaminen epäonnistui, virhe %d\n" + +msgid "filename" +msgstr "tiedostonimi" + +#, c-format +msgid "fork() failed\n" +msgstr "fork() epäonnistui\n" + +msgid "group" +msgstr "ryhmä" + +msgid "groups" +msgstr "ryhmät" + +msgid "groups to add" +msgstr "lisättävät ryhmät" + +msgid "host" +msgstr "kone" + +msgid "host group" +msgstr "isäntäryhmä" + +msgid "host groups" +msgstr "isäntäryhmät" + +msgid "hostgroup" +msgstr "isäntäryhmä" + +msgid "hostgroups" +msgstr "isäntäryhmät" + +msgid "hostname" +msgstr "koneen nimi" + +msgid "hosts" +msgstr "koneet" + +msgid "invalid port number" +msgstr "virheellinen porttinumero" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "ipa-getkeytabilla on väärät käyttöoikeudet?\n" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "ipa-getkeytabia ei löydy\n" + +#, c-format +msgid "json_dumps() failed\n" +msgstr "json_dumps() epäonnistui\n" + +#, c-format +msgid "json_pack_ex() failed: %s\n" +msgstr "json_pack_ex() epäonnistui: %s\n" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "krb5_parse_name %1$d: %2$s\n" + +msgid "location" +msgstr "sijainti" + +#, python-format +msgid "member %s" +msgstr "jäsen %s" + +msgid "member HBAC service" +msgstr "jäsen HBAC-palvelu" + +msgid "member group" +msgstr "jäsenryhmä" + +msgid "member host" +msgstr "isäntäjäsen" + +msgid "member host group" +msgstr "Jäsenisäntäryhmä" + +msgid "member netgroup" +msgstr "jäsen verkkoryhmä" + +msgid "member user" +msgstr "jäsenkäyttäjä" + +msgid "netgroup" +msgstr "verkkoryhmä" + +msgid "netgroups" +msgstr "verkkoryhmät" + +msgid "netgroups to add" +msgstr "lisättävät verkkoryhmät" + +msgid "not found" +msgstr "ei löytynyt" + +msgid "operation not defined" +msgstr "toimintoa ei ole määritelty" + +#, c-format +msgid "out of memory\n" +msgstr "muisti lopussa\n" + +#, python-format +msgid "owner %s" +msgstr "omistaja %s" + +msgid "owner service" +msgstr "Omistajapalvelut" + +msgid "password" +msgstr "salasana" + +msgid "password to use if not using kerberos" +msgstr "käytettävä salasana, jos ei käytetä kerberosia" + +msgid "permission" +msgstr "käyttöoikeus" + +msgid "permissions" +msgstr "käyttöoikeudet" + +msgid "preserve" +msgstr "säilytä" + +#, c-format +msgid "principal not found\n" +msgstr "toimeksiantajaa ei löydy\n" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "toimeksiantajaa ei löydy XML-RPC-vastauksesta\n" + +#, c-format +msgid "read error\n" +msgstr "lukuvirhe\n" + +#, c-format +msgid "realm not found\n" +msgstr "aluetta ei löydy\n" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "tulosta ei löydy XML-RPC-vastauksesta\n" + +msgid "role" +msgstr "rooli" + +msgid "roles" +msgstr "roolit" + msgid "runAs user" msgstr "suorita käyttäjänä" msgid "runAs users" msgstr "suorita käyttäjinä" -#, fuzzy -msgid "group runAs" -msgstr "ryhmät" +msgid "seconds" +msgstr "sekuntia" -#, fuzzy -msgid "runAs groups" -msgstr "Omistajaryhmät" +msgid "server" +msgstr "palvelin" -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" +msgid "server role" +msgstr "palvelinrooli" -msgid "commands cannot be added when command category='all'" -msgstr "" +msgid "server roles" +msgstr "Palvelinrooleja" -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" +msgid "servers" +msgstr "palvelimet" -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" +msgid "service" +msgstr "palvelu" -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" +msgid "services" +msgstr "palvelut" -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" +msgid "sudo rule" +msgstr "sudo-sääntö" -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "Lisätty käyttäjä \"%(value)s\"" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Poistettu käyttäjä \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Preserved user \"%(value)s\"" -msgstr "Poistettu käyttäjä \"%(value)s\"" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Muokattu käyttäjää \"%(value)s\"" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -msgid "Failed logins" -msgstr "" - -#, fuzzy -msgid "Last successful authentication" -msgstr "Vaatii ennakkotunnistautumisen" - -#, fuzzy -msgid "Last failed authentication" -msgstr "Tunnistatuminen" - -#, fuzzy -msgid "Time now" -msgstr "Aikakatkaisu" - -#, fuzzy -#| msgid "Password expiration" -msgid "Password grace count" -msgstr "Salasanan vanheneminen" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "%(host)s epäonnistui" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" -msgstr "" - -msgid "Request must be a dict" -msgstr "" - -msgid "Request is missing \"method\"" -msgstr "" - -msgid "Request is missing \"params\"" -msgstr "" - -msgid "params must be a list" -msgstr "" - -msgid "params must contain [args, options]" -msgstr "" - -msgid "params[0] (aka args) must be a list" -msgstr "" - -msgid "params[1] (aka options) must be a dict" -msgstr "" - -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" - -msgid "CIFS server denied your credentials" -msgstr "" - -msgid "communication with CIFS server was unsuccessful" -msgstr "" - -msgid "AD domain controller" -msgstr "" +msgid "sudo rules" +msgstr "sudo-säännöt" msgid "unsupported functional level" msgstr "luottamustyyppi, jota ei tueta" -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" +msgid "unsupported trust type" +msgstr "luottamustyyppi, jota ei tueta" -msgid "Cannot find specified domain or server name" -msgstr "" +msgid "user" +msgstr "käyttäjä" -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" +msgid "users" +msgstr "käyttäjät" -msgid "At least the domain or IP address should be specified" -msgstr "" - -#, python-format -msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" -msgstr "" - -msgid "no trusted domain is configured" -msgstr "" - -#, fuzzy -msgid "domain is not configured" -msgstr "toimialueseen ei luoteta" - -msgid "SID is not valid" -msgstr "" - -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "" - -msgid "SID does not match any trusted domain" -msgstr "" - -msgid "Trust setup" -msgstr "" - -#, fuzzy -msgid "Our domain is not configured" -msgstr "toimialueseen ei luoteta" - -#, fuzzy -msgid "No trusted domain is not configured" -msgstr "toimialueseen ei luoteta" - -msgid "trusted domain object" -msgstr "" - -msgid "domain is not trusted" -msgstr "toimialueseen ei luoteta" - -msgid "no trusted domain matched the specified flat name" -msgstr "" - -msgid "trusted domain object not found" -msgstr "" - -msgid "Object does not belong to a trusted domain" -msgstr "" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "" - -msgid "Ambiguous search, user domain was not specified" -msgstr "" - -msgid "Trusted domain did not return a unique object" -msgstr "" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "" - -#, fuzzy -msgid "trusted domain user not found" -msgstr "toimialueseen ei luoteta" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "" - -#, fuzzy -msgid "CIFS credentials object" -msgstr "Virheelliset tunnistautumistiedot" - -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "" - -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" - -#, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" - -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" - -#, fuzzy -msgid "Credentials" -msgstr "Virheelliset tunnistautumistiedot" - -msgid "Missing credentials for cross-forest communication" -msgstr "" - -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" - -#, python-format -msgid "must equal %r" -msgstr "" - -msgid "Hello world" -msgstr "" - -#, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "" - -msgid "must be at least 1" -msgstr "" - -msgid "Out of memory\n" -msgstr "Muisti loppui\n" - -msgid "Warning unrecognized encryption type.\n" -msgstr "" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -msgid "Out of memory!?\n" -msgstr "Muisti loppui!?\n" - -msgid "Enctype comparison failed!\n" -msgstr "" - -#, fuzzy -msgid "Password is too long!\n" -msgstr "Salasanat eivät täsmää!\n" - -#, fuzzy -msgid "Failed to create random key!\n" -msgstr "Tarkistuksen luominen epäonnistui!\n" - -#, fuzzy -msgid "Failed to create key!\n" -msgstr "Tarkistuksen luominen epäonnistui!\n" - -msgid "Bad or unsupported salt type.\n" -msgstr "Huono tai ei-tuettu suolatyyppi.\n" - -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "Yhteyttä LDAP-palvelimeen %1$s ei voi alustaa: %2$s\n" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -#, fuzzy -msgid "Unable to initialize STARTTLS session\n" -msgstr "LDAP-kirjaston alustaminen epäonnistui!\n" +msgid "value" +msgstr "arvo" diff --git a/po/fr.po b/po/fr.po index f7a416e83..870a5684c 100644 --- a/po/fr.po +++ b/po/fr.po @@ -18,1007 +18,549 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n > 1)\n" "X-Generator: Zanata 4.6.2\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "impossible d'ouvrir le fichier de configuration %s\n" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "impossible d'utiliser « stat() » sur le fichier de configuration %s\n" - -#, c-format -msgid "out of memory\n" -msgstr "mémoire saturée\n" - -#, c-format -msgid "read error\n" -msgstr "erreur en lecture\n" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "Impossible d'analyser le nom du principal\n" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "« krb5_parse_name » %1$d : %2$s\n" - -#, c-format -msgid "Removing principal %s\n" -msgstr "Suppression du principal %s\n" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "Impossible d'ouvrir le tableau de clés\n" - -#, c-format -msgid "principal not found\n" -msgstr "principal introuvable\n" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "« krb5_kt_get_entry » %1$d : %2$s\n" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "Impossible de supprimer l'entrée\n" - -#, c-format -msgid "kvno %d\n" -msgstr "« kvno » %d\n" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "« krb5_kt_remove_entry » %1$d : %2$s\n" - -#, fuzzy, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "Impossible d'obtenir le résultat : %s\n" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "Impossible d'analyser le principal\n" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "« krb5_unparse_name » %1$d : %2$s\n" - -#, c-format -msgid "realm not found\n" -msgstr "domaine introuvable\n" - -msgid "Print debugging information" -msgstr "Affiche les informations de débogage" - -msgid "Debugging output" -msgstr "Sortie de débogage" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"Le principal à supprimer d'un tableau de clés (par ex. : ftp/ftp.example." -"com@EXAMPLE.COM)" - -msgid "Kerberos Service Principal Name" -msgstr "Nom de principal de service Kerberos" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" -"Le fichier tableau de clés duquel il faut retirer le principal ou les " -"principaux." - -msgid "Keytab File Name" -msgstr "Nom de fichier du tableau de clés" - -msgid "Remove all principals in this realm" -msgstr "Supprimer tous les principaux de ce royaume" - -msgid "Realm name" -msgstr "Nom du royaume" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "Échec de l'initialisation du contexte Kerberos\n" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "Échec de l'ouverture du tableau de clés « %1$s » : %2$s\n" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "La fermeture du tableau des clés a échoué\n" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "« krb5_kt_close » %1$d : %2$s\n" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "Échec de l'initialisation du contexte Kerberos : %1$s (%2$d)\n" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "Impossible d'analyser le principal : %1$s (%2$d)\n" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "Aucune clé acceptée par le KDC\n" - -#, c-format -msgid "Out of memory \n" -msgstr "Mémoire saturée\n" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "Impossible d'initialiser la bibliothèque LDAP !\n" - -msgid "Simple bind failed\n" -msgstr "Échec de la connexion simple\n" - -#, fuzzy -msgid "SASL Bind failed\n" -msgstr "Échec de la connexion simple\n" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "Opération échouée : %s\n" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "Impossible d'obtenir le résultat : %s\n" - -#, c-format -msgid "Timeout exceeded." -msgstr "Délai d'attente dépassé." - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "Impossible d'analyser le résultat étendu : %s\n" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "Impossible d'analyser le résultat : %s\n" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "Absence de liste de contrôle des réponses !\n" - -#, c-format -msgid "Missing reply control!\n" -msgstr "Absence de contrôle de réponse !\n" - -#, c-format -msgid "Out of Memory!\n" -msgstr "Mémoire saturée !\n" - -#, c-format -msgid "Failed to create control!\n" -msgstr "Échec à la création du contrôle !\n" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "La liaison au serveur a échoué !\n" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "Échec d'obtention du tableau de clés !\n" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "Échec de « ber_init() », contrôle invalide ?!\n" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "échec de « ber_scanf() », « kvno » introuvable ?!\n" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "Échec lors de la récupération du type de chiffrement #%d\n" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "Échec lors de la récupération du type de chiffrement %1$s (#%2$d)\n" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "Échec lors de la récupération de toute clé" - -msgid "Failed to decode control reply!\n" -msgstr "Impossible de décoder la réponse de contrôle !\n" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "Les mots de passe ne correspondent pas !" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "impossible d'ouvrir le fichier de configuration %s\n" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "Impossible d'analyser le fichier de configuration %s\n" - -#, fuzzy -msgid "Failed to resolve symlink to keytab.\n" -msgstr "Impossible d'ouvrir le tableau de clés\n" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "Afficher aussi peu que possible" - -msgid "Output only on errors" -msgstr "N'afficher que les erreurs" - -msgid "Output debug info" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "Contacter ce serveur KDC particulier" - -msgid "Server Name" -msgstr "Nom du serveur" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"Le principal pour lequel obtenir un tableau de clés (par ex: ftp/ftp.example." -"com@EXAMPLE.COM)" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Encryption types to request" -msgstr "Type de chiffrement à demander" - -msgid "Comma separated encryption types list" -msgstr "Liste, séparée par des virgules, des types de chiffrement" - -msgid "Show the list of permitted encryption types and exit" -msgstr "Affiche la liste des types de chiffrement autorisés, et sort." - -msgid "Permitted Encryption Types" -msgstr "Type de chiffrements autorisés" - -msgid "Asks for a non-random password to use for the principal" -msgstr "Demande un mot de passe non aléatoire à utiliser pour le principal" - -msgid "LDAP DN" -msgstr "DN LDAP" - -msgid "DN to bind as if not using kerberos" -msgstr "DN à utiliser pour la connexion en cas de non-utilisation de Kerberos" - -msgid "LDAP password" -msgstr "Mot de passe LDAP" - -msgid "password to use if not using kerberos" -msgstr "" -"mot de passe à utiliser pour la connexion en cas de non-utilisation de " -"Kerberos" - -#, fuzzy -msgid "Prompt for LDAP password" -msgstr "Mot de passe LDAP" - -#, fuzzy -msgid "Path to the IPA CA certificate" -msgstr "Certificat d'AC" - -#, fuzzy -msgid "IPA CA certificate" -msgstr "Certificat d'AC" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "Retrouver les clés courantes sans les modifier" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "Aucune préférence de type de chiffrement sur le système ?!\n" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "Type de chiffrements pris en charge :\n" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "Avertissement : échec de conversion de type (#%d)\n" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -#, fuzzy -msgid "Enter LDAP password" -msgstr "Mot de passe LDAP" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, fuzzy, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" -"impossible de définir simultanément un filtre de cible totale et un filtre " -"de cible complémentaire" - -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Discovered server %s\n" -msgstr "Publié par les serveurs" - -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "Nom de serveur non fourni et indisponible\n" - -#, fuzzy, c-format -msgid "Using provided server %s\n" -msgstr "« Ping » sur un serveur distant." - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "Options incompatibles indiquées (-r et -P)\n" - -msgid "New Principal Password" -msgstr "Nouveau mot de passe du principal" - -msgid "Verify Principal Password" -msgstr "Vérifier le mot de passe du principal" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" -"Avertissement : les types « salt » ne sont pas traités avec des mots de " -"passe aléatoires (cf. option -P)\n" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "Nom de principal de service invalide\n" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" -"Cache des justificatifs d'identité Kerberos introuvable. Possédez-vous un " -"ticket Kerberos ?\n" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" -"Principal d'utilisateur Kerberos introuvable. Avez-vous un cache de " -"justificatifs d'identité Kerberos ?\n" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "Échec à l'ouverture du tableau de clés\n" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "Nouvelle tentative de récupération avec la méthode pre-4.0...\n" - -#, c-format -msgid "Failed to create key material\n" -msgstr "Échec de création du contenu de la clé\n" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "Échec à l'obtention du tableau de clés\n" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "Échec lors de l'ajout de la clé au tableau\n" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "Échec à la fermeture du tableau de clés\n" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "Récupération du tableau de clés et stockage avec succès dans : %s\n" - -#, c-format -msgid "Out of memory!\n" -msgstr "Mémoire saturée !\n" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "Pas d'autorisation pour joindre cet hôte dans le domaine IPA.\n" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "" -"Pas de permission en écriture sur le fichier « %s » du tableau de clés\n" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "Échec de « access() » sur %1$s : erreur n°= %2$d\n" - -#, c-format -msgid "Out of memory!" -msgstr "Mémoire saturée !" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "Impossible d'activer SSL dans LDAP\n" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "La recherche de %1$s sur « rootdse » a échoué avec l'erreur %2$d\n" - -#, c-format -msgid "No values for %s" -msgstr "Aucune valeur pour %s" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "La recherche du « namingContext » d'IPA a échoué avec l'erreur %d\n" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "« namingContext » d'IPA introuvable\n" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "Impossible de déterminer le DN racine de %s\n" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "Échec de l'enregistrement. %s\n" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "principal introuvable dans la réponse XML-RPC\n" - -#, c-format -msgid "Host is already joined.\n" -msgstr "Hôte déjà joint.\n" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" - -#, fuzzy, c-format -msgid "json_dumps() failed\n" -msgstr "echec de « fork() »\n" - -#, fuzzy, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "Requête JSON-RPC invalide : %(error)s" - -#, fuzzy, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "Opération échouée : %s\n" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#, fuzzy, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "Pas de réponse" - -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "echec de « fork() »\n" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "Désinscription réussie.\n" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "Échec de la désinscription.\n" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "résultat de la réponse XML-RPC introuvable\n" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "Impossible de déterminer le serveur IPA depuis %s\n" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" -"Impossible de joindre l'hôte : l'initialisation du contexte Kerberos a " -"échoué\n" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" -"Impossible de joindre l'hôte : cache des justificatifs d'identité Kerberos " -"introuvable\n" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" -"Impossible de joindre l'hôte : principal d'utilisateur Kerberos introuvable " -"et mot de passe non fourni.\n" - -#, c-format -msgid "fork() failed\n" -msgstr "echec de « fork() »\n" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "« ipa-getkeytab » introuvable\n" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "« ipa-getkeytab » a des permissions incorrectes ?\n" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "échec de l'exécution de « ipa-getkeytab », erreur n° %d\n" - -#, c-format -msgid "child exited with %d\n" -msgstr "processus fils terminé avec %d\n" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "Erreur à la résolution du tableau de clés : %s.\n" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "Erreur à l'obtention du royaume Kerberos par défaut : %s.\n" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "Erreur à l'analyse de « %1$s » : %2$s.\n" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "Impossible d'obtenir les justificatifs d'identité initiaux : %s.\n" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "Impossible de créer le cache des justificatifs d'identité Kerberos\n" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" -"Erreur lors du stockage des justificatifs d'identité dans le cache : %s.\n" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "Affiche la sortie XML-RPC brute en mode GSSAPI" - -msgid "Quiet mode. Only errors are displayed." -msgstr "Mode discret. Seules les erreurs sont affichées." - -msgid "Unenroll this host from IPA server" -msgstr "Désinscrire cet hôte du serveur IPA" - -msgid "Hostname of this server" -msgstr "Nom d'hôte de ce serveur" - -msgid "hostname" -msgstr "nom d'hôte" - -msgid "IPA Server to use" -msgstr "Serveur IPA à utiliser" - -msgid "Specifies where to store keytab information." -msgstr "Indique où stocker l'information du tableau de clés." - -msgid "filename" -msgstr "nom de fichier" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" -"Forcer l'hôte à rejoindre le domaine. Rejoindre à nouveau même s'il a déjà " -"rejoint le domaine." - -msgid "LDAP password (if not using Kerberos)" -msgstr "Mot de passe LDAP (hors utilisation de Kerberos)" - -msgid "password" -msgstr "mot de passe" - -msgid "LDAP basedn" -msgstr "« basedn » de LDAP" - -msgid "basedn" -msgstr "« basedn »" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "Le nom d'hôte doit être pleinement qualifié : %s\n" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "Le nom d'hôte ne doit pas être : %s\n" - -msgid "Failed to add" -msgstr "Échec lors de l'ajout" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" - -msgid "Unrevoked" -msgstr "Réintégré" - -msgid "Error" -msgstr "Erreur" - -msgid "Input filename" -msgstr "Nom du fichier en entrée" - -msgid "File to load the certificate from." -msgstr "Fichier depuis lequel charger le certificat." - -msgid "cannot specify both raw certificate and file" -msgstr "impossible d'indiquer à la fois certificat brut et un nom de fichier" - -#, fuzzy -msgid "Input file" -msgstr "Nom du fichier en entrée" - -#, fuzzy -msgid "File to load the certificate from" -msgstr "Fichier depuis lequel charger le certificat." - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "Profil de configuration enregistré dans le fichier « %(file)s »" - -#, fuzzy -msgid "Split DNS record to parts" -msgstr "Enregistrements DNS du système mis à jour" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "Veuillez choisir un type d'enregistrement de ressource DNS à ajouter" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "Les types les plus courants pour ce type de zone sont : %s\n" - -msgid "DNS resource record type" -msgstr "Type d'enregistrement de ressource DNS" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "Type invalide ou non pris en compte. Les valeurs autorisées sont : %s" - -msgid "No option to modify specific record provided." -msgstr "Aucune option fournie pour modifier un enregistrement donné." - -msgid "Current DNS record contents:\n" -msgstr "Contenu actuel de l'enregistrement DNS :\n" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "Modifier '%(value)s' pour %(name)s ?" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -"%(count)d enregistrement %(type)s sauté. Une seule valeur modifiable par " -"enregistrement DNS." -msgstr[1] "" -"%(count)d enregistrements %(type)s sautés. Une seule valeur modifiable par " -"enregistrement DNS." - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" -"Ni « --del-all », ni aucune option de suppression d'enregistrement donné n'a " -"été indiqué.\n" -"Consulter l'aide pour connaître tous les types d'enregistrements pris en " -"charge." - -msgid "No option to delete specific record provided." -msgstr "Pas d'option fournie pour supprimer un enregistrement donné." - -msgid "Delete all?" -msgstr "Tout supprimer ?" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "Supprimer '%(value)s' pour %(name)s ?" - -msgid "Server will check DNS forwarder(s)." -msgstr "Le serveur vérifiera le ou les serveurs de redirection DNS." - -msgid "This may take some time, please wait ..." -msgstr "Cela peut prendre un peu de temps, veuillez patienter..." - -msgid "DNS forwarder" -msgstr "Transmetteur DNS" - -#, fuzzy -msgid "file to store DNS records in nsupdate format" -msgstr "Enregistrements DNS du système mis à jour" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "Certificat(s) enregistré(s) dans le fichier '%(file)s'" - -msgid "Servers details:" -msgstr "Informations sur les serveurs :" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" -"Mode migration désactivé.\n" -"Utiliser la commande « ipa config-mod --enable-migration=TRUE » pour " -"l'activer." - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" -"Les mots de passe ont été migrés dans un format chiffré.\n" -"IPA est incapable de créer des clés Kerberos sauf à\n" -"utiliser les mots de passe en clair. Tous les utilisateurs\n" -"migrés devront se connecter à https://your.domain/ipa/migration/\n" -"avant de pouvoir utiliser leur compte Kerberos." - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" -"Suppression de %(servers)s de la topologie de réplication, merci de " -"patienter..." - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "La topologie de réplication du suffixe « %(suffix)s » est en ordre." - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" -"La topologie de réplication du suffixe « %(suffix)s » contient des erreurs." - -msgid "Topology is disconnected" -msgstr "La topologie est déconnectée" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "Le serveur %(srv)s ne peut contacter les serveurs : %(replicas)s" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "Le nombre maximal d'agréments de réplication est dépassé" - -msgid "Maximum number of agreements per replica" -msgstr "Le nombre maximal d'agréments par réplique" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "Le serveur « %(srv)s » possède %(n)d agréments avec les serveurs :" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" -"Supprimer un utilisateur en préservant l'entrée correspondantes pour un " -"usage futur" - -msgid "Delete a user" -msgstr "Supprimer un utilisateur" - -msgid "preserve and no-preserve cannot be both set" -msgstr "preserve et no-preserve ne peuvent être indiqués simultanément" - -msgid "maps not connected to /etc/auto.master:" -msgstr "cartes non connectées à « /etc/auto.master » :" - -msgid "Import automount files for a specific location." -msgstr "Importer des fichiers « automount » pour un emplacement donné." - -msgid "Master file" -msgstr "Fichier maître" - -msgid "Automount master file." -msgstr "Fichier maître « automount »" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" -"Mode opératoire continu. Les erreurs sont notées, mais le processus continue." - -#, python-format -msgid "File %(file)s not found" -msgstr "Fichier %(file)s introuvable" - -#, python-format -msgid "key %(key)s already exists" -msgstr "La clé %(key)s existe déjà" - -#, python-format -msgid "map %(map)s already exists" -msgstr "La carte %(map)s existe déjà" - -msgid "Imported maps:" -msgstr "Cartes importées :" - -#, python-format -msgid "Added %(map)s" -msgstr " %(map)s ajoutée" - -msgid "Imported keys:" -msgstr "Clés importées :" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "Ajout de %(src)s à %(dst)s" - -msgid "Ignored keys:" -msgstr "Clés ignorées :" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "%(src)s ignoré pour %(dst)s" - -msgid "Duplicate maps skipped:" -msgstr "Cartes dupliquées ignorées :" - -#, python-format -msgid "Skipped %(map)s" -msgstr "%(map)s ignoré" - -msgid "Duplicate keys skipped:" -msgstr "Clés dupliquées ignorées :" - -#, python-format -msgid "Skipped %(key)s" -msgstr "%(key)s ignoré" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" -"Impossible d'afficher le code QR avec l'encodage configuré sur la sortie. " -"Merci d'utiliser l'URI du jeton pour configurer votre jeton OTP" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" -"La largeur du code QR est supérieure à celle du terminal. Merci d'agrandir " -"votre fenêtre de terminal." - -msgid "Synchronize an OTP token." -msgstr "Synchroniser un jeton OTP." - -msgid "User ID" -msgstr "Identifiant utilisateur" - -msgid "Password" -msgstr "Mot de passe" - -msgid "First Code" -msgstr "Premier code" - -msgid "Second Code" -msgstr "Second code" - -msgid "Token ID" -msgstr "ID du jeton" - -msgid "python-yubico is not installed." -msgstr "" - msgid "" "\n" -"YubiKey Tokens\n" -msgstr "" -"\n" -"Jetons YubiKey\n" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" -"\n" -"Gestion de jetons YubiKey.\n" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" -"\n" -"Ce code est une extension du greffon « otptoken » ; il fournit la prise en\n" -"charge pour lire/écrire des jetons YubiKey directement.\n" - -msgid "" "\n" "EXAMPLES:\n" msgstr "" "\n" +"\n" "EXEMPLES :\n" +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" +"\n" +"\n" +"Exemples :\n" +" Trouver tous les serveurs :\n" +" ipa server-find\n" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" +"\n" +"\n" +"CONFIGURATION GLOBALE du DNS\n" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" +"\n" +" Surcharger ceci afin de pouvoir ajouter réussites et échecs aux\n" +" résultats renvoyés.\n" +" " + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" +"\n" +" Surcharger ceci afin de pouvoir définir réussites et échecs.\n" +" " + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" +"\n" +" Ajouter une règle d'auto-adhésion.\n" +" " + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" +"\n" +" Ajouter des conditions à une règle d'auto-adhésion.\n" +" " + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" +"\n" +" Supprimer une règle d'auto-adhésion.\n" +" " + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" +"\n" +" Afficher des informations au sujet d'une règle d'auto-adhésion.\n" +" " + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" +"\n" +" Afficher des informations pour les groupes d'auto-adhésion par défaut " +"(repli).\n" +" " + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" +"\n" +" État verrouillé d'un compte utilisateur\n" +"\n" +" Un compte peut être verrouillé si un mot de passe incorrect est entre à\n" +" plusieurs reprises dans un laps de temps donnée selon la politique de\n" +" contrôle des mots de passe. Le verrouillage du compte est un état\n" +" temporaire ; le compte peut être déverrouillé par un administrateur.\n" +"\n" +" Ce dernier se connecte sur l'IPA maître et affiche l'état du\n" +" verrouillage de chacun.\n" +"\n" +" Pour savoir si un compte est verrouillé sur un serveur donné, vous " +"devez\n" +" comparer le nombre d'échecs de connexion et l'heure du dernier échec.\n" +" Pour qu'un compte soit verrouillé, le nombre d'échecs doit dépasser le\n" +" maximum autorisé dans l'intervalle de temps donné tel que défini dans " +"la\n" +" politique de mot de passe propre à l'utilisateur.\n" +"\n" +" Le compteur d'échecs de connexion n'est incrémenté que lorsqu'un\n" +" utilisateur tente une connexion, il est donc possible qu'un compte\n" +" paraisse bloqué mais que la dernière tentative de connexion soit\n" +" antérieure à la durée de verrouillage de la règle. Cela\n" +" signifie que l'utilisateur peut tenter de se connecter à nouveau." + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" +"\n" +" Modifier la confiance (pour utilisation future).\n" +"\n" +" Actuellement seule l'option par défaut pour modifier les attributs LDAP\n" +" est disponible. D'autres options particulières seront ajoutées\n" +" dans les versions à venir.\n" +" " + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" +"\n" +" Modifier une règle d'auto-adhésion.\n" +" " + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" +"\n" +" Supprimer des conditions d'une règle d'auto-adhésion.\n" +" " + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" +"\n" +" Supprimer le groupe par défaut (repli) pour toute entrée sans " +"correspondance.\n" +" " + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" +"\n" +" Rechercher des règles d'auto-adhésion.\n" +" " + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" +"\n" +" Définit un groupe par défaut (repli) pour toutes les entrées sans " +"correspondance.\n" +" " + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" +"\n" +" Déverrouiller un compte utilisateur\n" +"\n" +" Un compte utilisateur peut se verrouiller si le mot de passe n'est pas\n" +" saisi correctement plusieurs fois de suite dans un laps de temps donné\n" +" défini par la politique du mot de passe. Le verrouillage d'un compte " +"est\n" +" un état temporaire ; il peut être déverrouillé par un administrateur." + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" +"\n" +" Objet conteneur de coffre-fort.\n" +" " + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" +"\n" +" Objet coffre-fort.\n" +" " + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" +"\n" +" C'est l'équivalent de :\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" +"\n" +" Ajouter un emplacement :\n" +" ipa location-add location --description 'Mon emplacement'\n" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" +"\n" +" Ajouter un segment de topologie au suffixe « ca » :\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" +"\n" +" Ajouter un segment de topologie au suffixe du domaine :\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" +"\n" +" Supprimer un emplacement :\n" +" ipa location-del location\n" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" +"\n" +" Supprimer un segment de topologie du suffixe « ca » :\n" +" ipa topologysegment-del ca segment_name\n" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" +"\n" +" Supprimer un segment de topologie du suffixe du domaine :\n" +" ipa topologysegment-del domain segment_name\n" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" +"\n" +" Trouver tous les emplacements :\n" +" ipa location-find\n" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" +"\n" +" Trouver tous les serveurs :\n" +" ipa server-find\n" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" +"\n" +" Trouver tous les suffixes :\n" +" ipa topologysuffix-find\n" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" +"\n" +" Énumérer tous les segments de topologie dans le suffixe « ca » :\n" +" ipa topologysegment-find ca\n" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" +"\n" +" Énumérer tous les segments de topologie dans le suffixe du domaine :\n" +" ipa topologysegment-find domain\n" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" +"\n" +"Afficher la configuration d'un serveur DNS spécifique :\n" +" ipa dnsserver-show\n" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" +"\n" +" Afficher un emplacement spécifique :\n" +" ipa location-show location\n" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" +"\n" +" Afficher les informations d'un serveur en particulier :\n" +" ipa server-show ipa.example.com\n" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" +"\n" +" Afficher l'état du rôle « Serveur DNS » d'un serveur :\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" +"\n" +" Afficher l'état de tous les rôles configurés sur un serveur :\n" +" ipa server-role-find ipa.example.com\n" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" +"\n" +" Modifier la configuration d'un serveur DNS spécifique :\n" +" ipa dnsserver-mod\n" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" +"\n" +" Vérification de la topologie du suffixe « ca » :\n" +" ipa topologysuffix-verify ca\n" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" +"\n" +" Vérification de la topologie du suffixe du domaine :\n" +" ipa topologysuffix-verify domain\n" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" +"\n" +" Ajouter un enregistrement LOC pour « example.com » :\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" +"\n" +" Ajouter une condition à la règle :\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" +"\n" +" Ajouter un hôte pouvant gérer tableau de clés et certificat d'un hôte " +"donné :\n" +" ipa host-add-managedby --hosts=test2 test\n" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" +"\n" +" Ajout d'un hôte à la règle :\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" +"\n" +" Ajouter un hôte :\n" +" ipa host-add web1.example.com\n" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" +"\n" +" Ajouter un serveur courriel pour « example.com » :\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" +"\n" +" Ajouter un nouvel hôte à l'aide d'un mot de passe à usage unique :\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" +"\n" +"Ajouter un nouvel hôte avec un mot de passe aléatoire :\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" +"\n" +" Ajouter un nouvel hôte :\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" +"\n" +" Ajouter un nouveau serveur :\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" +"\n" +" Ajouter un nouveau jeton :\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" + msgid "" "\n" " Add a new token:\n" @@ -1028,490 +570,1146 @@ msgstr "" " Ajouter un nouveau jeton :\n" " ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgid "Add a new YubiKey OTP token." -msgstr "Ajouter un nouveau jeton OTP YubiKey." - -msgid "YubiKey slot" -msgstr "Connecteur YubiKey" - -msgid "No free YubiKey slot!" -msgstr "Aucun connecteur YubiKey libre !" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "Impossible de lire le fichier « %(filename)s » : %(exc)s" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "Impossible de décoder le fichier « %(filename)s » : %(exc)s" - -msgid "Invalid credentials" -msgstr "Données d'authentification invalides" - -msgid "Create a new vault." -msgstr "Créer un nouveau coffre-fort." - -msgid "Vault password" -msgstr "Mot de passe du coffre-fort" - -msgid "File containing the vault password" -msgstr "Fichier contenant le mot de passe du coffre-fort" - -msgid "File containing the vault public key" -msgstr "Fichier contenant la clé publique du coffre-fort" - -msgid "Password can be specified only for symmetric vault" -msgstr "" -"Un mot de passe ne peut être indiqué que pour un coffre-fort symétrique" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "" -"Une clé publique ne peut être indiquée que pour un coffre-fort asymétrique" - -msgid "Password specified multiple times" -msgstr "Mot de passe indiqué plusieurs fois" - -msgid "Public key specified multiple times" -msgstr "Clé publique indiquée plusieurs fois" - -msgid "Missing vault public key" -msgstr "Clé publique du coffre-fort manquante" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "Clé publique invalide ou non prise en charge : %s" - -msgid "Modify a vault." -msgstr "Modifier un coffre-fort." - -msgid "Change password" -msgstr "Modifier le mot de passe" - -msgid "Old vault password" -msgstr "Ancien mot de passe du coffre-fort" - -msgid "File containing the old vault password" -msgstr "Fichier contenant l'ancien mot de passe du coffre-fort" - -msgid "New vault password" -msgstr "Nouveau mot de passe du coffre-fort" - -msgid "File containing the new vault password" -msgstr "Fichier contenant le nouveau mot de passe du coffre-fort" - -msgid "Old vault private key" -msgstr "Ancienne clé privée du coffre-fort" - -msgid "File containing the old vault private key" -msgstr "Fichier contenant l'ancienne clé privée du coffre-fort" - -msgid "File containing the new vault public key" -msgstr "Fichier contenant la nouvelle clé publique du coffre-fort" - -msgid "New public key specified multiple times" -msgstr "Nouvelle clé publique indiquée plusieurs fois" - -msgid "Missing new vault public key" -msgstr "Nouvelle clé publique du coffre-fort manquante" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "Archiver des données dans un coffre-fort." - -msgid "Binary data to archive" -msgstr "Fichier binaire à archiver" - -msgid "File containing data to archive" -msgstr "Fichier contenant les données à archiver" - -msgid "Override existing password" -msgstr "Réécrire le mot de passe existant" - -msgid "Input data specified multiple times" -msgstr "Les données en entrée ont été indiquées plusieurs fois" - -#, python-format msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" msgstr "" -"La taille des données excède la limite actuelle fixée à %(limit)d octets." - -msgid "Invalid vault type" -msgstr "Type de coffre-fort invalide" - -msgid "Retrieve a data from a vault." -msgstr "Récupérer une donnée depuis un coffre-fort" - -msgid "File to store retrieved data" -msgstr "Fichier duquel récupérer les données" - -msgid "Vault private key" -msgstr "Clé privée du coffre-fort" - -msgid "File containing the vault private key" -msgstr "Fichier contenant la clé privée du coffre-fort" - -msgid "Data" -msgstr "Données" - -msgid "Private key specified multiple times" -msgstr "Clé privée indiquée plusieurs fois" - -msgid "Missing vault private key" -msgstr "Clé privée du coffre-fort manquante" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "Règle sudo « %s » activée" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "Règle sudo « %s » désactivée" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "Option « %(option)s » ajoutée à la règle sudo « %(rule)s »" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "Option « %(option)s » supprimée de la règle sudo « %(rule)s »" +"\n" +" Ajouter une permission autorisant de gérer l'appartenance à un groupe :\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" msgid "" "\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" msgstr "" - -msgid "ACI name" -msgstr "Nom d'ACI" - -msgid "Permission" -msgstr "Permission" - -msgid "Permission ACI grants access to" -msgstr "L'ACI « permission » permet un accès à" - -msgid "User group" -msgstr "Groupe d'utilisateurs" - -msgid "User group ACI grants access to" -msgstr "L'ACI d'un groupe utilisateur permet un accès à" - -msgid "Permissions" -msgstr "Permissions" - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "" -"Permissions à accorder (« read », « write », « add », « delete », « all »)" - -msgid "Attributes to which the permission applies" -msgstr "Attributs auxquels les permissions s'appliquent" - -msgid "Attributes" -msgstr "Attributs" - -msgid "Type" -msgstr "Type" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" -"type d'objet IPA (« user », « group », « host », « hostgroup », « service », " -"« netgroup »)" - -msgid "Member of" -msgstr "Membre de" - -msgid "Member of a group" -msgstr "Membre d'un groupe" - -msgid "Filter" -msgstr "Filtre" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "Filtre LDAP valide (i.e. ou=Engineering)" - -msgid "Subtree" -msgstr "Sous-arbre" - -msgid "Subtree to apply ACI to" -msgstr "Sous-arbre auquel appliquer l'ACI" - -msgid "Target group" -msgstr "Groupe cible" - -msgid "Group to apply ACI to" -msgstr "Groupe auquel appliquer l'ACI" - -msgid "Target your own entry (self)" -msgstr "Cibler votre propre entrée (« self »)" - -msgid "Apply ACI to your own entry (self)" -msgstr "Appliquer l'ACI à votre propre entrée (« self »)" - -msgid "Create new ACI." -msgstr "Créer une nouvelle ICA." - -msgid "ACI prefix" -msgstr "Préfixe d'ACI" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" -"Préfixe utilisé pour distinguer les types d'ACI (« permission », " -"« delegation », « selfservice », « none »)" - -msgid "Test the ACI syntax but don't write anything" -msgstr "Tester la syntaxe de l'ACI, sans rien écrire" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" -"Récupérer et afficher tous les attributs à partir du serveur. Affecte la " -"sortie de la commande." - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" -"Afficher les entrées telles qu'enregistrées sur le serveur. Affecte " -"uniquement le format de sortie." - -msgid "User-friendly description of action performed" -msgstr "Description intelligible de l'action effectuée" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" -"La valeur de la clé principale de l'entrée, par ex. « jdoe » pour un " -"utilisateur" - -msgid "Delete ACI." -msgstr "Supprimer une ICA." - -msgid "True means the operation was successful" -msgstr "Vrai signifie que l'opération a réussi" +"\n" +" Ajouter une permission autorisant la création d'utilisateurs :\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" msgid "" "\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" msgstr "" - -msgid "A string searched in all relevant object attributes" -msgstr "" -"Une chaîne de caractères recherchée dans tous les attributs d'objets " -"pertinents" - -msgid "Primary key only" -msgstr "Clé principale uniquement" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« name »)" - -msgid "Number of entries returned" -msgstr "Nombre d'entrées renvoyées" - -msgid "True if not all results were returned" -msgstr "Vrai si tous les résultats n'ont pas été renvoyés" - -msgid "Modify ACI." -msgstr "Modifier une ICA." - -msgid "Rename an ACI." -msgstr "Renommer une ICA." - -msgid "New ACI name" -msgstr "Nouveau nom de l'ACI" - -msgid "Display a single ACI given an ACI name." -msgstr "Afficher une ICA d'après son nom." - -msgid "Location of the ACI" -msgstr "Emplacement de l'ACI" +"\n" +" Ajout d'une règle sudo spéciale pour la configuration du serveur sudo par " +"défaut :\n" +" ipa sudorule-add defaults\n" msgid "" "\n" -"Auto Membership Rule.\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" "\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" +" Ajouter un coffre-fort standard :\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" + +msgid "" "\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" "\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" +" Ajouter un coffre-fort symétrique :\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file mot_de_passe.txt\n" + +msgid "" "\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" "\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" +" Ajout d'un utilisateur à la règle :\n" +" ipa sudorule-add-user readfiles --users jsmith\n" + +msgid "" "\n" -"EXAMPLES:\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" "\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" +" Ajouter un utilisateur :\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" + +msgid "" "\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" "\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" +" Ajouter un coffre-fort symétrique :\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --public-key-file public.pem\n" + +msgid "" "\n" " Add an exclusive condition to the rule to prevent auto assignment:\n" " ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" "regex=^web5\\.example\\.com webservers\n" +msgstr "" "\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" +" Ajouter une condition d'exclusion à la règle pour empêcher l'auto-" +"assignation :\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" + +msgid "" "\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" +"\n" +" Ajouter un autre enregistrement avec des options propres à MX :\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" + +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" +"\n" +" Ajouter un autre enregistrement en mode interactif (lancé si dnsrecord-" +"add,\n" +" dnsrecord-mod, ou dnsrecord-del sont exécutés sans options) :\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" + +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" +"\n" +" Ajouter un nouvel enregistrement A à www.example.com. Créer son inverse\n" +" dans la zone inverse appropriée. Dans ce cas, un enregistrement PTR « 2 »\n" +" pointant sur www.example.com sera créé dans la zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" + +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" +"\n" +" Ajoutez un nouvel enregistrement PTR pour www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" +"\n" +" Ajouter de nouveaux enregistrements SRV pour serveurs LDAP. 3 requêtes\n" +" sur 4 iront vers fast.example.com, unes sur 4 vers slow.example.com. Si ni\n" +" l'un ni l'autre, n'est disponible, basculer sur backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" +"\n" +" Ajouter une nouvelle zone inverse spécifiée par adresse IP de réseau :\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" +"\n" +" Ajouter une nouvelle zone :\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" +"\n" +" Ajouter un second serveur de noms pour « example.com » :\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" +"\n" +" Ajout d'un objet de commande sudo et ajout en tant que commande autorisée " +"dans la règle :\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" +"\n" +" Ajouter une permission système pour une délégation de privilège par zone :\n" +" ipa dnszone-add-permission example.com\n" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" +"\n" +" Ajouter le groupe ou le groupe d'hôtes initial :\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" +"\n" +" Ajouter la règle initiale :\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Ajouter des membres à un coffre-fort :\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services " +"]\n" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Ajouter des propriétaires à un coffre-fort :\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services " +"]\n" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" +"\n" +" Après cette modification, 3 requêtes sur 5 iront vers fast.example.com\n" +" et 2 sur 5 vers slow.example.com.\n" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" +"\n" +" Autoriser un utilisateur à créer un tableau de clé :\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" +"\n" +" Autoriser un utilisateur à créer un tableau de clé :\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" +"\n" +" Voici un exemple du mode interactif pour la commande dnsrecord-del :\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" +"\n" +" Archiver des données dans un coffre-fort asymétrique :\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" +"\n" +" Archiver des données dans un coffre-fort standard :\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" +"\n" +" Archiver des données dans un coffre-fort symétrique :\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file mot_de_passe.txt\n" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" +"\n" +" Modifier la politique de redirection pour « external.example.com » :\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" +"\n" +" Changer le secret :\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " +"Hat\"\n" +msgstr "" +"\n" +" Modifier le fournisseur :\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " +"Hat\"\n" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" +"\n" +" Création d'une nouvelle règle :\n" +" ipa sudorule-add readfiles\n" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" +"\n" +" Déléguer la zone sub.example à un autre nom de serveur :\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" +"\n" +" Supprimer une configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" +"\n" +" Supprimer un hôte :\n" +" ipa host-del test.example.com\n" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +" Supprimer un jeton :\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Supprimer un coffre-fort :\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" +"\n" +" Supprimer une règle d'adhésion automatique :\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" +"\n" +" Supprimer la rediretion de zone « external.example.com » :\n" +" ipa dnsforwardzone-del external.example.com\n" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" +"\n" +" Supprimer le serveur de noms précédemment ajouté à « example.com » :\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Supprimer des membres d'un coffre-fort :\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services " +"]\n" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Supprimer des propriétaires d'un coffre-fort :\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services " +"]\n" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" +"\n" +" Supprimer la zone « example.com » avec tous les enregistrements de " +"ressources :\n" +" ipa dnszone-del example.com\n" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" +"\n" +" Désactive la redirection globale pour les sous-arbres donnés :\n" +" ipa dnszone-mod example.com --forward-policy=none\n" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" +"\n" +"Désactiver la clé Kerberos, les certificats SSL et tout service d'un hôte :\n" +" ipa host-disable test.example.com\n" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" +"\n" +" Afficher une règle d'adhésion automatique :\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" +"\n" +" Afficher la configuration des coffres-forts :\n" +" ipa vaultconfig-show\n" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" +"\n" +" Examiner la configuration :\n" +" ipa radiusproxy-show MyRADIUS\n" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +" Examiner un jeton :\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" +"\n" +" Trouver des enregistrements A avec la valeur 192.0.2.2 dans la zone\n" +" « example.com » :\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" +"\n" +" Retrouver toutes les règles d'adhésion automatique :\n" +" ipa automember-find\n" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" +"\n" +" Trouver tous serveurs dont les entrées incluent la chaîne « example." +"com » :\n" +" ipa radiusproxy-find example.com\n" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" +"\n" +" Trouver des enregistrements de ressources avec « www » dans le nom dans la\n" +" zone « example.com » :\n" +" ipa dnsrecord-find example.com www\n" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" +"\n" +" Trouver les arguments disponibles pour user-find :\n" +" ipa param-find user-find\n" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" +"\n" +" Trouver une zone avec « example » dans son nom de domaine :\n" +" ipa dnszone-find example\n" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" +"\n" +" Redirige toutes les requêtes pour la zone « external.example.com » vers un\n" +" autre redirecteur avec la politique « first » (il adresse les requêtes au\n" +" redirecteur sélectionné et s'il n'y a pas de réponse, les serveurs racines\n" +" globaux sont sollicités) :\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" +"\n" +" Générer et récupérer un tableau de clés d'un service IPA :\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" +"\n" +" Si une redirection globale est configurée, toute requête pour laquelle ce\n" +" serveur ne fait pas autorité (ex. sub.example.com) sera routée vers le \n" +" redirecteur global.\n" +" La configuration d'une redirection globale peut être surchargée par zone.\n" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" +"\n" +" Lister toutes les redirections de zones :\n" +" ipa dnsforwardzone-find\n" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Énumérer les coffres-forts pour un service :\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" +"\n" +" Modifier les clés d'un coffre-fort asymétrique :\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" +"\n" +" Modifier la configuration DNS globale et définir une liste de redirecteurs\n" +" globaux :\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" +"\n" +" Modifier les informations d'un hôte :\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" +"\n" +" Modifier un coffre-fort symétrique :\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" +"\n" +" Modifier la règle d'adhésion automatique :\n" +" ipa automember-mod\n" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" +"\n" +" Modifier la zone pour permettre des mises à jour dynamiques des propres\n" +" enregistrements des hôtes dans le royaume EXAMPLE.COM :\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" +"\n" +" Modifier la zone pour permettre des transferts de zone pour le réseau local " +"uniquement :\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" +"\n" +" Modifier la description d'un coffre-fort :\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" +"\n" +" Modifier le type d'un coffre-fort :\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [ancient mot de passe/clé privée]\n" +" [nouveau mot de passe/clé publique]\n" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" +"\n" +" Reconstruire l'appartenance de tous les hôtes :\n" +" ipa automember-rebuild --type=hostgroup\n" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" +"\n" +" Reconstruire l'appartenance de tous les utilisateurs :\n" +" ipa automember-rebuild --type=group\n" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" +"\n" +" Reconstruire l'appartenance d'hôtes donnés :\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" +"\n" +" Reconstruire l'appartenance d'utilisateurs donnés :\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" +"\n" +" Supprimer les clés publiques SSH d'un hôte et modifier DNS en " +"conséquence :\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" +"\n" +" Supprimer une condition de la règle :\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" +"\n" +" Supprimer le groupe cible par défaut (repli) ::\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" +"\n" +" Résoudre un nom d'hôte pour voir s'il existe (ajoute le domaine IPA par\n" +" défaut s'il n'est pas inclus) :\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" +"\n" +" Récupérer des données d'un coffre-fort asymétrique :\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file clé_privée.pem\n" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" +"\n" +" Récupérer des données d'un coffre-fort standard :\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" +"\n" +" Récupérer des données d'un coffre-fort symétrique :\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file mot_de_passe.txt\n" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" +"\n" +" La sémantique de la redirection de zone dans IPA est la même que \n" +" celle de BIND, et dépend du type de zone :\n" +" * Zone maître : le serveur BIND local répond avec autorité aux " +"requêtes \n" +" de données dans la zone donnée (y compris les réponses ayant autorité\n" +" NXDOMAIN) et transfère uniquement les requêtes sur les noms dans les \n" +" sous-zones (enregistrements NS) des zones locales servies.\n" +" \n" +" * Zone redirigée : les zones transférées ne contiennent aucune donnée \n" +" faisant autorité. BIND transmet les requêtes qui ne peuvent être \n" +" servies par son cache local aux serveurs de redirection configurés.\n" +" \n" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" +"\n" +" Définition d'une option par défaut pour sudo :\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" +"\n" +" Définir le groupe cible par défaut (recours) :\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Afficher un coffre-fort :\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" +"\n" +" Afficher la politique de redirection pour la zone « external.example." +"com » :\n" +" ipa dnsforwardzone-show external.example.com\n" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" +"\n" +"Afficher la configuration DNS globale :\n" +" ipa dnsconfig-show\n" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" +"\n" +" Afficher les enregistrements de ressources « www » dans la zone\n" +" « example.com » :\n" +" ipa dnsrecord-show example.com www\n" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" +"\n" +" Afficher le groupe cible par défaut (repki) :\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" +"\n" +" Afficher les informations sur user-find :\n" +" ipa command-show user-find\n" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" +"\n" +" Afficher la zone « example.com » :\n" +" ipa dnszone-show example.com\n" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" +"\n" +" On peut utiliser le mode interactif pour faciliter les modifications :\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" +"\n" +" Cette configuration redirige toutes les requêtes pour les noms en dehors\n" +" du sous-arbre « example.com » vers les redirecteurs globaux. Le processus\n" +" normal de résolution récursive est utilisé pour les noms dans le sous-" +"arbre\n" +" « example.com » (ex. les enregistrements NS sont suivis, etc.).\n" + +msgid "" "\n" " Verify automembership:\n" " ipa hostgroup-show webservers\n" @@ -1524,200 +1722,283 @@ msgid "" " Description: Developers\n" " GID: 1004200000\n" " Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" msgstr "" - -msgid "Description" -msgstr "Description" - -msgid "A description of this auto member rule" -msgstr "Une description de cette règle d'auto-adhésion" - -msgid "Default (fallback) Group" -msgstr "Groupe par défaut (repli)" - -msgid "Default group for entries to land" -msgstr "Groupe par défaut pour les nouvelles entrées" - -msgid "Add an automember rule." -msgstr "Ajouter une règle d'auto-adhésion." - -msgid "Automember Rule" -msgstr "Règle d'auto-adhésion" +"\n" +" Vérifier une adhésion automatique :\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" msgstr "" -"Modifie un attribut d'une paire nom/valeur. Le format est attribut=valeur.\n" -"Pour des attributs à valeurs multiples, la commande remplace les valeurs " -"déjà présentes." +"\n" +"* Une permission donne le droit de lire, écrire, ajouter, supprimer,\n" +" rechercher, ou comparer.\n" +"* Un privilège combine des permissions semblables (par exemple\n" +" toutes les permissions nécessaires pour ajouter un utilisateur).\n" +"* Un rôle garantit un ensemble de privilèges pour des utilisateurs, des " +"groupes, des hôtes ou des groupes d'hôtes.\n" msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" msgstr "" -"Ajouter une paire attribut/valeur. Format : attribut=valeur. Les\n" -"attributs doivent faire partie du schéma." - -msgid "Grouping Type" -msgstr "Type de groupe" - -msgid "Grouping to which the rule applies" -msgstr "Type de groupe auquel la règle s'applique" - -msgid "Add conditions to an automember rule." -msgstr "Ajouter une condition à une règle d'auto-adhésion." - -msgid "Inclusive Regex" -msgstr "« Regex » d'inclusion" - -msgid "Exclusive Regex" -msgstr "« Regex » d'exclusion" - -msgid "Attribute Key" -msgstr "Clé d'attribut" +"\n" +"Une condition est une expression rationnelle dont se sert « 389-ds » pour\n" +"associer nouvelle entrée et règle d'adhésion. Si l'entrée correspond à une\n" +"règle d'inclusion, elle est ajoutée au groupe ou groupe d'hôte approprié.\n" msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" msgstr "" -"Attribut à filtrer via « regex ». Ex. FQDN pour un hôte, ou « manager » pour " -"un utilisateur" +"\n" +"Un groupe ou groupe d'hôte par défaut peut être défini pour des entrées ne\n" +"correspondant à aucune règle. Tout utilisateur a ce groupe comme repli, car\n" +"il est par défaut membre du groupe indiqué dans la configuration de IPA.\n" -msgid "Conditions that could not be added" -msgstr "Conditions n'ayant pu être ajoutées" - -msgid "Number of conditions added" -msgstr "Nombre de conditions ajoutées" - -msgid "Remove default (fallback) group for all unmatched entries." +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" msgstr "" -"Supprimer le groupe par défaut (repli) pour toute entrée sans correspondance." +"\n" +"Une permission permet une délégation de droits finement nuancée. Elle est\n" +"une enveloppe lisible par le commun de Règles de contrôle d'accès 389-ds,\n" +"ou d'instruction (ACI).\n" +"Une permission donne le droit d'effectuer des tâches données comme ajouter\n" +"un utilisateur, modifier un groupe, etc.\n" -msgid "Set default (fallback) group for all unmatched entries." +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" msgstr "" -"Définir un groupe par défaut (repli) pour toutes les entrées sans " -"correspondance." +"\n" +"Une permission se compose de plusieurs parties :\n" +"\n" +"1. le nom de la permission.\n" +"2. la cible de la permission.\n" +"3. les droits garantis par la permission.\n" -msgid "Default (fallback) group for entries to land" -msgstr "Groupe par défaut (repli) pour ranger des entrées" - -msgid "Display information about the default (fallback) automember groups." +msgid "" +"\n" +"A permission may not contain other permissions.\n" msgstr "" -"Afficher des informations pour les groupes d'auto-adhésion par défaut " -"(repli).\n" +"\n" +"Une permission ne peut pas contenir d'autres permissions.\n" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" +"\n" +"Une règle est directement associée à un groupe par le nom, donc il n'est " +"pas\n" +"possible de créer une règle sans groupe ou groupe d'hôtes d'accompagnement.\n" + +msgid "" +"\n" +"API Schema\n" +msgstr "" +"\n" +"Schéma de l'API\n" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" " " - -msgid "Delete an automember rule." -msgstr "Supprimer une règle d'auto-adhésion." - -msgid "List of deletions that failed" -msgstr "Liste des suppressions ayant échoué" - -msgid "Search for automember rules." -msgstr "Rechercher des règles d'auto-adhésion." - -msgid "Modify an automember rule." msgstr "" -"Modifier une règle d'auto-adhésion.\n" +"\n" +"Ajouter une nouvelle plage d'identifiants.\n" +"\n" +" Pour ajouter une nouvelle plage d'identifiants vous devez toujours " +"préciser\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" En outre,\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" seront indiqués pour une nouvelle plage d'ID dans le domaine local alors " +"que\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" doivent l'être pour ajouter une nouvelle plage pour un domaine AD de " +"confiance.\n" +"\n" +" AVERTISSEMENT :\n" +"\n" +" Le greffon DNA dans 389-ds alloue des ID selon les plages configurées au\n" +" titre du domaine local. Actuellement le greffon DNA *ne peut pas* être\n" +" lui-même reconfiguré selon les plages locales définies par " +"l'intermédiaire\n" +" de cette famille de commandes.\n" +"\n" +" Un changement manuel de configuration doit être opéré dans la " +"configuration\n" +" du greffon DNA pour cadrer avec la nouvelle plage locale. En particulier,\n" +" l'attribut « dnaNextRange » de « cn=Posix IDs »,^n« cn=Distributed Numeric " +"Assignment Plugin », « cn=plugins », « cn=config »\n" +" doivent être modifiés pour correspondre à cette nouvelle plage.\n" " " msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " msgstr "" -"Supprimer une paire attribut/valeur. L'option sera évaluée\n" -"en dernier, après toutes les modifications et ajouts." - -msgid "Rights" -msgstr "Droits" +"\n" +"Ajout d'une nouvelle relation de confiance.\n" +"\n" +"Cette commande établit une relation de confiance avec un autre domaine\n" +"qui ainsi devient « de confiance ». En conséquence, des utilisateurs du\n" +"domaine approuvé peuvent avoir accès aux ressources de ce domaine.\n" +"\n" +"Actuellement, seules les relations d'approbation avec les domaines\n" +"Active Directory sont prises en charge.\n" +"\n" +"Cette commande peut être lancée plusieurs fois en toute sécurité à\n" +"l'encontre du même domaine, elle modifiera les références de la relation de\n" +"confiance des deux côtés.\n" +" " msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" msgstr "" -"Affiche les droits d'accès sur cette entrée (requiert --all). Cf. la page de " -"manuel de « ipa » pour plus d'informations." +"\n" +"En plus, il y a les options de commodité suivantes.\n" +"Activer une de ces options définit l'attribut correspondant.\n" +"1. type: un type d'objet (utilisateur, groupe, etc) ; définit le filtre du\n" +"sous-arbre et de la cible.\n" +"2. memberof : s'applique aux membres d'un groupe ; définit le filtre de la\n" +"cible.\n" +"3. targetgroup : permet la modification d'un groupe donné (comme ceux\n" +" de gestion de l'appartenance à un groupe); définit la cible.\n" -msgid "Rebuild auto membership." -msgstr "Reconstruire les appartenances automatiques." +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" +"\n" +"Les agréments sont représentés par des segments de topologie. Un segment de " +"topologie\n" +"représente par défaut deux agréments de réplication, un pour chaque " +"direction, par exemple\n" +"de A vers B et de B vers A. La création de segments unidirectionnels n'est " +"pas permise.\n" -msgid "Rebuild membership for all members of a grouping" -msgstr "Reconstruire l'appartenance pour tous les membres d'un groupe" +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" +"\n" +"Il est possible d'ajouter aux règles sudo l'indication de l'ordre dans\n" +"lequel elles doivent être examinées (si le client le prend en charge).\n" +"Cet ordre est défini par un entier, qui doit être unique.\n" -msgid "Users" -msgstr "Utilisateurs" +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" +"\n" +"Le coffre-fort asymétrique est similaire au coffre standard, mais il \n" +"pré-chiffre le secret à l'aide d'une clé publique avant son transport.\n" +"Le secret ne peut être récupéré qu'avec la clé privée correspondante.\n" -msgid "Rebuild membership for specified users" -msgstr "Reconstruire l'appartenance pour les utilisateurs indiqués " - -msgid "Hosts" -msgstr "Hôtes" - -msgid "Rebuild membership for specified hosts" -msgstr "Reconstruire l'appartenance pour les hôtes indiqués" - -msgid "No wait" -msgstr "Pas d'attente" - -msgid "Don't wait for rebuilding membership" -msgstr "Ne pas attendre pour reconstruire l'appartenance" - -msgid "Remove conditions from an automember rule." -msgstr "Supprimer des conditions d'une règle d'auto-adhésion. " - -msgid "Conditions that could not be removed" -msgstr "Conditions n'ayant pu être supprimées" - -msgid "Number of conditions removed" -msgstr "Nombre de conditions supprimées" - -msgid "Display information about an automember rule." -msgstr "Afficher des informations au sujet d'une règle d'auto-adhésion. " +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" +"\n" +"Règle d'adhésion automatique.\n" msgid "" "\n" @@ -1932,154 +2213,977 @@ msgstr "" " Supprimer la clé « man » de la carte « auto.share » :\n" " ipa automountkey-del baltimore auto.share --key=man\n" -msgid "Key" -msgstr "Clé" - -msgid "Automount key name." -msgstr "Nom de clé « automount »." - -msgid "Mount information" -msgstr "Information de montage" - -msgid "description" -msgstr "description" - -msgid "Location" -msgstr "Emplacement" - -msgid "Automount location name." -msgstr "Nom d'emplacement ." - -msgid "Map" -msgstr "Carte" - -msgid "Automount map name." -msgstr "Nom de carte « automount »." - -msgid "Create a new automount key." -msgstr "Créer une nouvelle clé « automount »." - -msgid "Delete an automount key." -msgstr "Supprimer une clé « automount »." - -msgid "Continuous mode: Don't stop on errors." -msgstr "Mode continu : pas d'arrêt sur erreurs." - -msgid "Search for an automount key." -msgstr "Rechercher une clé « automount »." - -msgid "Time Limit" -msgstr "Limitation de durée" - -msgid "Time limit of search in seconds" -msgstr "Limite de la durée de la recherche en secondes" - -msgid "Size Limit" -msgstr "Limitation de taille" - -msgid "Maximum number of entries returned" -msgstr "Nombre maximal d'entrées renvoyées" - -msgid "Modify an automount key." -msgstr "Modifier une clé « automount »." - -msgid "New mount information" -msgstr "Nouvelle information de montage" - -msgid "Rename" -msgstr "Renommer" - -msgid "Rename the automount key object" -msgstr "Renommer l'objet clé d'automontage" - -msgid "Display an automount key." -msgstr "Afficher une clé « automount »." - -msgid "Create a new automount location." -msgstr "Créer un nouvel emplacement " - -msgid "Delete an automount location." -msgstr "Supprimer un emplacement « automount »." - -msgid "Search for an automount location." -msgstr "Rechercher un emplacement « automount »." - -msgid "Results should contain primary key attribute only (\"location\")" +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« location »)" - -msgid "Display an automount location." -msgstr "Afficher un emplacement « automount »" - -msgid "Generate automount files for a specific location." -msgstr "Créer les fichiers « automount » pour un emplacement donné." - -msgid "Create a new automount map." -msgstr "Créer une nouvelle carte « automount »." - -msgid "Create a new indirect mount point." -msgstr "Créer un nouveau point de montage indirect." - -msgid "Mount point" -msgstr "Point de montage" - -msgid "Parent map" -msgstr "Carte parente" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "Nom de la carte parente (par défaut : auto.master)." - -msgid "Delete an automount map." -msgstr "Supprimer une carte « automount »." - -msgid "Search for an automount map." -msgstr "Rechercher une carte « automount »." - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« map »)" - -msgid "Modify an automount map." -msgstr "Modifier une carte « automount »." - -msgid "Display an automount map." -msgstr "Afficher une carte « automount »." +"\n" +"Il existe trois types de coffres-forts en fonction de leur propriété :\n" +"* coffre utilisateur/privé\n" +"* coffre de service\n" +"* coffre-fort partagé (shared)\n" msgid "" "\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" msgstr "" +"\n" +"Il existe trois types de coffres-forts en fonction de leur mécanisme\n" +"de sécurité :\n" +"* coffre-fort standard\n" +"* coffre-fort symétrique\n" +"* coffre-fort asymétrique\n" -msgid "Nested Methods to execute" -msgstr "Commandes imbriquées à exécuter" +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" +"\n" +"Utilisateur de base\n" +"\n" +"Ceci contient les définitions communes pour les utilisateurs et utilisateurs " +"en attente\n" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" +"\n" +"Clarifie l'adhésion d'hôtes et d'utilisateurs en configurant des motifs\n" +"« regex » d'inclusion ou exclusion à assigner automatiquement aux nouvelles\n" +"entrées dans un groupe ou un groupe d'hôtes selon l'information d'attribut.\n" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" +"\n" +"Classes pour gérer des jonctions de confiance avec des appels DCE-RPC\n" +"\n" +"Le code de ce module s'appuie pour l'essentiel sur le paquet\n" +"« samba4-python » et les liaisons python de Samba4.\n" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " +"Group\"\n" +msgstr "" +"\n" +"Relations d'approbation entre domaines\n" +"\n" +"Gestion des relations d'approbation entre les domaines IPA et Active " +"Directory.\n" +"\n" +"Pour permettre aux utilisateurs d'un domaine distant l'accès aux ressources\n" +"d'un domaine IPA, des relations d'approbation doivent être établies.\n" +"Actuellement IPA ne prend en charge que les relations d'approbation entre " +"des\n" +"domaines IPA et Active Directory sous le contrôle de Windows Server 2008 ou\n" +"ultérieur, avec le niveau fonctionnel 2008 ou ultérieur.\n" +"\n" +"Veuillez noter que DNS doit être correctement configuré à la fois côté\n" +"domaine IPA et côté Active Directory pour une découverte mutuelle. La\n" +"relation de confiance repose sur la capacité à repérer des ressources\n" +"spéciales dans l'autre domaine via des enregistrements DNS.\n" +"\n" +"Exemples :\n" +"\n" +"1. Établir des relations d'approbation croisées entre royaumes avec Active\n" +"Directory avec les autorisations d'accès d'un administrateur AD :\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. Lister toutes les relations d'approbation existantes :\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Voir les détails d'une relation de confiance donnée :\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Supprimer une relation de confiance existante :\n" +"\n" +" ipa trust-del \n" +"\n" +"Une fois la relation de confiance établie, les utilisateurs distants " +"doivent\n" +"être mis en relation avec des groupes POSIX locaux pour utiliser réellement\n" +"des ressources IPA. La relation doit se faire via l'appartenance à un " +"groupe\n" +"non-POSIX externe, puis ce groupe doit être intégré dans l'un des groupes\n" +"POSIX locaux.\n" +"\n" +"Exemples :\n" +"\n" +"1. Créer un groupe pour la mise en relation avec le domaine approuvé\n" +" « admins » et leur groupe POSIX local :\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Ajouter un identifiant de sécurité de de Domain Admins au\n" +" groupe « ad_admins_external » :\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Autoriser des membres du groupe « ad_admins_external » à s'associer\n" +" avec le groupe POSIX ad_admins :\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Lister les membres externes du groupe externe « ad_admins_external »\n" +" pour voir leur SID :\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"CONFIGURATION D'UNE CONFIANCE GLOBALE\n" +"\n" +"Une fois le sous-paquet « IPA AD trust » installé et « ipa-adtrust-" +"install »\n" +"exécuté, une configuration de domaine local (SID, GUID, nom NetBIOS) est\n" +"créée. Ces identifiants sont alors utilisés lors de communications avec un\n" +"domaine approuvé de type particulier.\n" +"\n" +"1. Afficher la configuration de confiance globale pour les types de\n" +" confiance Active Directory :\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modifier la configuration globale de toutes les confiances de type\n" +" Active Directory et définir un groupe principal de recours (le GID du\n" +" groupe principal de recours est utilisé comme GID d'utilisateur " +"principal\n" +" si l'utilisateur s'authentifiant auprès du domaine IPA n'a pas d'autre\n" +" GID principal déjà défini) :\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Revenir au groupe caché par défaut comme groupe de recours principal\n" +" (tout groupe de la classe objet « posixGroup » est autorisé) :\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " +"Group\"\n" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" +"\n" +"La configuration DNS, passée en ligne de commande du script d'installation,\n" +"est stockée dans un ficher de configuration local sur chaque serveur IPA \n" +"dans lequel le service DNS est configuré. Ces réglages locaux peuvent être\n" +"surchargés par une configuration commune stockée dans le serveur LDAP :\n" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" +"\n" +"Configuration du serveur DNS\n" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" +"\n" +"Les données enregistrées dans les serveurs IPA sont répliquées vers les " +"autres\n" +"serveurs IPA. Les agréments de réplication définissent la manière dont la \n" +"réplication s'opère. Les agréments de réplication doivent être définis " +"pour \n" +"les deux suffixes de manière séparée. Sur les domaines de niveau 0, ils " +"sont\n" +"gérés par les outils ipa-replica-manage et ipa-csreplica-manage tools. Sur \n" +"les domaines de niveau 1, ils sont gérés de manière centralisée par les " +"commandes\n" +"« ipa topology* ».\n" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" +"\n" +"Supprimer ou renommer une permission administrée, ou changer sa cible,\n" +"n'est pas autorisé.\n" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" +"\n" +"Domain Name System (DNS)\n" + +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" +"\n" +"INSCRIPTION :\n" +"\n" +"Trois scenarii d'inscriptions d'un nouveau client sont possibles :\n" +"\n" +"1. La machine est enregistrée par un administrateur de plein droit.\n" +" L'entrée système peut pré-exister ou non. Un administrateur de\n" +" plein droit est membre du rôle hostadmin ou du groupe admins\n" +"2. L'inscription est faite par un administrateur limité. L'hôte\n" +" doit avoir été préalablement créé. Un administrateur limité\n" +" possède le privilège Host Enrollment.\n" +"3. Le système a été créé avec un mot de passe à usage unique.\n" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" +"\n" +"EXEMPLES :\n" + +msgid "" +"\n" +"Get information about installed IPA servers.\n" +msgstr "" +"\n" +"Afficher les informations au sujet des serveurs IPA installés.\n" + +msgid "" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" +msgstr "" +"\n" +"Obtenir l'état des rôles (serveur DNS, AC, etc. )fournis par les maîtres " +"IPA.\n" + +msgid "" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" +msgstr "" +"\n" +"Délégation de groupe à groupe\n" +"\n" +"Une permission permet une délégation fine des autorisations. Les règles de\n" +"contrôle d'accès, ou les instructions (ACI), accordent la possibilité aux\n" +"permissions de réaliser certaines tâches comme l'ajout d'utilisateur, la\n" +"modification d'un groupe, etc.\n" +"\n" +"La délégation de groupe à groupe permet aux membres d'un groupe de modifier\n" +"un jeu d'attributs de membres d'un autre groupe.\n" +"\n" +"EXEMPLES:\n" +"\n" +" Ajouter une règle de délégation permettant aux gestionnaires de modifier\n" +" les adresses des employés :\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" En gérant une liste d'attributs, vous devez inclure tous les attributs,\n" +" y compris les existants. Ajouter « postalCode » à la liste :\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Afficher la règle modifiée :\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Supprimer une règle :\n" +" ipa delegation-del \"managers edit employees' street\"\n" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" +msgstr "" +"\n" +"Groupes de commandes sudo\n" +"\n" +"Administre les groupes de commandes sudo.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouveau groupe de commandes sudo :\n" +" ipa sudocmdgroup-add --desc='commandes administrateurs' admincmds\n" +"\n" +" Supprimer un groupe de commandes sudo :\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Gérer les commandes, l'appartenance d'un groupe de commandes sudo :\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Administrer les commandes, l'appartenance d'un groupe de commandes sudo :\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Afficher un groupe de commandes sudo :\n" +" ipa group-show localadmins\n" + +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" +msgstr "" +"\n" +"Groupes de commandes sudo\n" +"\n" +"Administre les groupes de commandes sudo.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouveau groupe de commandes sudo :\n" +" ipa sudocmdgroup-add --desc='commandes administrateurs' admincmds\n" +"\n" +" Supprimer un groupe de commandes sudo :\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Gérer les commandes, l'appartenance d'un groupe de commandes sudo :\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Administrer les commandes, l'appartenance d'un groupe de commandes sudo :\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Afficher un groupe de commandes sudo :\n" +" ipa sudocmdgroup-show admincmds\n" + +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" +msgstr "" +"\n" +"Groupes d'hôtes.\n" +"\n" +"Gestion des groupes d'hôtes. Permet d'appliquer des contrôles d'accès\n" +"à plusieurs hôtes en utilisant HBAC (Host-based Access Control).\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouveau groupe d'hôtes :\n" +" ipa hostgroup-add --desc=\"Systèmes de Baltimore\" baltimore\n" +"\n" +" Ajouter un nouveau groupe d'hôtes :\n" +" ipa hostgroup-add --desc=\"Systèmes du Maryland\" maryland\n" +"\n" +" Ajouter des membres à un groupe d'hôtes :\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Ajouter un groupe d'hôtes en tant que membre d'un autre groupe d'hôtes :\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Supprimer un hôte d'un groupe :\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Afficher un groupe d'hôtes :\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Supprimer un groupe d'hôtes :\n" +" ipa hostgroup-del baltimore\n" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" +"\n" +"Groupes d'utilisateurs\n" +"\n" +"Gérer des groupes d'utilisateurs. Par défaut, tout nouveau groupe est " +"POSIX.\n" +"On peut ajouter l'option « --nonposix » à la commande « group-add » pour\n" +"marquer un nouveau groupe comme non-POSIX et utiliser l'option « --posix »\n" +"de la commande « group-mod » pour convertir un groupe non-POSIX en groupe\n" +"POSIX. Les groupes POSIX ne peuvent pas être convertis en groupes non-" +"POSIX.\n" +"\n" +"Chaque groupe doit avoir une description.\n" +"\n" +"Les groupes POSIX doivent avoir un numéro d'ID de groupe (GID). Modifier un\n" +"GID est faisable, mais cela peut avoir un impact sur vos droits d'accès aux\n" +"fichiers. Il n'est pas nécessaire d'indiquer un GID à la création du " +"groupe.\n" +"IPA en générera un automatiquement s'il n'est pas fourni.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouveau groupe :\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Ajouter un nouveau groupe non-POSIX :\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convertir un groupe non-POSIX en groupe POSIX :\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Ajouter un nouveau groupe POSIX avec un numéro d'ID de groupe donné :\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Ajouter un nouveau groupe POSIX et laisser IPA assigner un numéro d'ID de " +"groupe :\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Supprimer un groupe :\n" +" ipa group-del unixadmins\n" +"\n" +" Ajouter le groupe « remoteadmins » au groupe « localadmins » :\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Ajouter plusieurs utilisateurs au groupe « localadmins » :\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Supprimer un utilisateur du groupe « localadmins » :\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Afficher des informations à propos d'un groupe donné :\n" +" ipa group-show localadmins\n" +"\n" +"L'adhésion à un groupe externe est conçue pour permettre aux utilisateurs " +"de\n" +"domaines approuvés d'être assimilés aux groupes POSIX locaux pour pouvoir\n" +"utiliser réellement les ressources IPA. Des membres externes peuvent être\n" +"ajoutés aux groupes spécifiquement crées comme externes et non-POSIX. Un " +"tel\n" +"groupe peut plus tard être incorporé dans un des groupes POSIX\n" +"\n" +"Un membre de groupe externe est actuellement identifié par un « Security\n" +"Identifier (SID) » tel que défini pour le domaine approuvé. Pour ajouter\n" +"un membre de groupe externe, il est possible de le définir, soit au format\n" +"SID, soit DOM\\name, soit name@domain. IPA essayera de résoudre le nom " +"passé\n" +"en SID en se servant du « Global Catalog » des domaines approuvés.\n" +"\n" +"Exemple:\n" +"\n" +"1. Créer un groupe par assimilation au domaine approuvé « admins »\n" +" et à leur groupe POSIX local :\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Ajouter l'identifiant de sécurité de « Domain Admins » au\n" +" groupe externe « ad_admins_external » :\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Autoriser des membres du groupe « ad_admins_external » à être associés " +"au\n" +" groupe POSIX « ad_admins » :\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Lister les membres externes du groupe « ad_admins_external » pour voir\n" +" leur SID :\n" +"\n" +" ipa group-show ad_admins_external\n" + +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" +"\n" +"Groupes de services HBAC\n" +"\n" +"Les groupes de services HBAC peuvent contenir n'importe quel nombre de\n" +"services « membres » individuels. Chaque groupe doit avoir une description.\n" +"\n" +"EXEMPLES:\n" +"\n" +" Ajouter un nouveau groupe de services HBAC :\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Ajouter des membres à un groupe de services HBAC :\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Afficher les informations d'un groupe nommé :\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Supprimer un groupe de services HBAC :\n" +" ipa hbacsvcgroup-del login\n" + +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" +"\n" +"Services HBAC\n" +"\n" +"Les services PAM dont le système HBAC peut contrôler l'accès. Le nom " +"utilisé\n" +"ici doit correspondre au nom du service analysé par PAM.\n" +"EXEMPLES:\n" +"\n" +" Ajouter un nouveau service HBAC :\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modifier un service HBAC existant :\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Chercher des services HBAC. Cet exemple renvoie deux résultats, le service\n" +" FTP et le service tftp nouvellement ajouté :\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Supprimer un service HBAC :\n" +" ipa hbacsvc-del tftp\n" +"\n" + +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts. You\n" +"can use HBAC to control which users or groups can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users and target hosts.\n" +"This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host " +"\"server\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +" ipa hbacrule-add --hostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" +"\n" +"Contrôle d'accès des systèmes (HBAC)\n" +"\n" +"HBAC (Host-based acces control) permet de contrôler qui peut accéder\n" +"à quels services sur quels systèmes, et d'où. Il est possible\n" +"d'utiliser le système HBAC afin de contrôler quels utilisateurs ou quels\n" +"groupes d'un système source peuvent accéder à quels services, ou groupes\n" +"de services, sur un hôte cible.\n" +"\n" +"Vous pouvez aussi indiquer une catégorie d'utilisateur, d'hôtes cibles.\n" +"La seule catégorie existante pour le moment est \"all\", mais elles\n" +"pourront être étendues dans le futur.\n" +"\n" +"Les hôtes cible des règles HBAC doivent être des hôtes administrés par IPA.\n" +"\n" +"Les services et groupes de services disponibles sont gérés respectivement\n" +"par les greffons « hbacsvc » et « hbacsvcgroup ».\n" +"\n" +"EXEMPLES:\n" +"\n" +" Créer une règle \"test1\" autorisant tous les utilisateurs à accéder\n" +" le serveur « server » depuis n'importe où :\n" +" ipa hbacrule-add --usercat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Afficher les propriétés d'une règle HBAC nommée :\n" +" ipa hbacrule-show test1\n" +"\n" +" Créer une règle pour un service donné. Elle permet d'avoir accés au\n" +" service sshd sur toute machine depuis n'importe quelle autre machine :\n" +" ipa hbacrule-add --hostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Créer une règle pour un nouveau groupe de services. Elle permet d'avoir\n" +" accès au service FTP de toute machine depuis n'importe quelle machine.\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" +" ipa hbacrule-add --hostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Désactiver une règle HBAC nommée :\n" +" ipa hbacrule-disable test1\n" +"\n" +" Supprimer une règle HBAC nommée :\n" +" ipa hbacrule-del allow_server\n" +"\n" + +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" +"\n" +"Hôtes/Machines\n" +"\n" +"Un hôte représente une machine. Il peut être utilisé dans de nombreux " +"contextes :\n" +"- les entrées de services sont associées à un hôte,\n" +"- un hôte stocke le principal des hôtes/des services,\n" +"- un hôte est utilisable dans les règles HBAC (Host-based Access Control),\n" +"- chaque client enregistré génère une entrée d'hôte.\n" msgid "" "\n" @@ -2243,429 +3347,102 @@ msgstr "" "http://www.ietf.org/rfc/rfc5280.txt\n" "\n" -msgid "Checks if any of the servers has the CA service enabled." +msgid "" +"\n" +"IPA locations\n" msgstr "" -"Vérifier si l'un des serveurs a activé le service autorité de certification." - -msgid "Search for existing certificates." -msgstr "Recherche de certificats existants." - -#, fuzzy -msgid "Match cn attribute in subject" -msgstr "L'attribut de nom d'utilisateur de l'objet utilisateur" - -msgid "Reason" -msgstr "Raison" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "Raison de révocation du certificat (0-10)" - -msgid "minimum serial number" -msgstr "numéro de série plancher" - -msgid "maximum serial number" -msgstr "numéro de série plafond" - -msgid "match the common name exactly" -msgstr "correspond exactement au nom commun" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "Valide à partir de cette date (AAAA-mm-jj)" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "Valide jusqu'à cette date (AAAA-mm-jj)" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "Valide à partir de cette date (AAAA-mm-jj), non valide avant" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "Valide à cette date (AAAA-mm-jj), non valide avant" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "Émis à partir de cette date (AAAA-mm-jj)" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "Émis à cette date (AAAA-mm-jj)" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "Révoqué à partir de cette date (AAAA-mm-jj)" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "Révoqué à cette date (AAAA-mm-jj)" - -msgid "Maximum number of certs returned" -msgstr "Nombre maximum de certificats renvoyés" - -msgid "Take a revoked certificate off hold." -msgstr "Ôter un certificat révoqué en attente." - -msgid "Serial number" -msgstr "Numéro de série" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "Numéro de série en décimal (ou en hexadécimal avec le préfixe 0x)" - -msgid "Submit a certificate signing request." -msgstr "Soumettre une demande de signature de certificat." - -msgid "CSR" -msgstr "CSR" - -msgid "Principal" -msgstr "Principal" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" -"Principal de service pour ce certificat (par ex.: HTTP/test.example.com)" - -msgid "automatically add the principal if it doesn't exist" -msgstr "ajoute automatiquement le principal s'il n'existe pas" - -msgid "Dictionary mapping variable name to value" -msgstr "Annuaire associant un nom de variable à une valeur" - -msgid "Revoke a certificate." -msgstr "Révoquer un certificat." - -msgid "Retrieve an existing certificate." -msgstr "Récupérer un certificat existant." - -msgid "Output filename" -msgstr "Nom de fichier de sortie" - -msgid "File to store the certificate in." -msgstr "Fichier dans lequel stocker le certificat." - -msgid "Check the status of a certificate signing request." -msgstr "Vérifier l'état d'une demande de signature de certificat." - -msgid "Request id" -msgstr "Identifiant de la demande" +"\n" +"Emplacements IPA\n" msgid "" "\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" msgstr "" "\n" -"Configuration du serveur\n" -"\n" -"Gérer les valeurs par défaut utilisées par IPA ainsi que certains de ses\n" -"paramètres d'ajustement.\n" -"\n" -"NOTES :\n" -"\n" -"La valeur de notification du mot de passe (--pwdexpnotify) est stockée ici\n" -"en vue de sa réplication. Elle n'est pas actuellement utilisée pour " -"notifier\n" -"par avance aux utilisateurs l'expiration de leur mot de passe.\n" -"\n" -"Certains attributs sont en lecture seule, fournis à titre d'information ;\n" -"ils comprennent :\n" -"\n" -"* la base sujet de certificat : la base de sujet de certificat configuré,\n" -" ex. O=EXAMPLE.COM, configurable uniquement à l'installation.\n" -"* les fonctions du greffon mots de passe : définit les hachages " -"additionnels\n" -" qu'un mot de passe va générer (d'autres conditions peuvent s'appliquer).\n" -"\n" -"En fixant la liste ordonnée pour le mappage des utilisateurs SELinux, vous\n" -"devez mettre entre guillemets les valeurs pour éviter leur interprétation.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Afficher la configuration de base du serveur :\n" -" ipa config-show\n" -"\n" -" Afficher toutes les options de configuration :\n" -" ipa config-show --all\n" -"\n" -" Modifier la longueur maximale d'un nom d'utilisateur à 99 caractères :\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Augmenter délais et limites de taille des recherches sur le serveur IPA :\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Définir le domaine pour les courriels de l'utilisateur par défaut :\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Activer le mode migration pour que « ipa migrate-ds » soit opérationelle :\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Définir l'ordre de la mappe des utilisateurs SELinux :\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" - -msgid "Maximum username length" -msgstr "Longueur maximale du nom d'utilisateur" - -msgid "Home directory base" -msgstr "Base du répertoire utilisateur" - -msgid "Default location of home directories" -msgstr "Emplacement par défaut des répertoires utilisateur" - -msgid "Default shell" -msgstr "Interpréteur de commande par défaut" - -msgid "Default shell for new users" -msgstr "Interpréteur de commande par défaut pour les nouveaux utilisateurs" - -msgid "Default users group" -msgstr "Groupe utilisateur par défaut" - -msgid "Default group for new users" -msgstr "Groupe utilisateur par défaut pour les nouveaux utilisateurs" - -msgid "Default e-mail domain" -msgstr "Domaine par défaut pour les courriels" - -msgid "Search time limit" -msgstr "Limite de temps d'une recherche" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "Durée maximale (secondes) pour une recherche (> 0, -1 pour illimitée)" - -msgid "Search size limit" -msgstr "Limite de taille d'une recherche" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "Nombre maximum d'entrées à rechercher (-1 pour illimité)" - -msgid "User search fields" -msgstr "Champs de recherche utilisateur" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" -"Une liste, séparée avec des virgules, des champs à explorer pour une " -"recherche d'utilisateurs" - -msgid "Group search fields" -msgstr "Champs de recherche de groupe" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" -"Une liste séparée par des virgules des champs à explorer pour une recherche " -"de groupes" - -msgid "Enable migration mode" -msgstr "Activer le mode migration" - -msgid "Certificate Subject base" -msgstr "Base de sujet de certificat" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "Base pour les sujets de certificat (OU=Test,O=Example)" - -msgid "Default group objectclasses" -msgstr "Classes d'objets de groupe par défaut" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "Classes d'objets de groupe par défaut (liste séparée par des virgules)" - -msgid "Default user objectclasses" -msgstr "Classes d'objets utilisateur par défaut" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" -"Classes d'objets utilisateurs par défaut (liste séparée par des virgules)" - -msgid "Password Expiration Notification (days)" -msgstr "Notification d'expiration de mot de passe (jours)" - -msgid "Number of days's notice of impending password expiration" -msgstr "Nombre de jours de préavis d'expiration de mot de passe" - -msgid "Password plugin features" -msgstr "Fonctionnalités du greffon mots de passe" - -msgid "Extra hashes to generate in password plug-in" -msgstr "Hachages additionnels à générer dans le greffon mots de passe" - -msgid "SELinux user map order" -msgstr "Ordre de la mappe des utilisateurs SELinux" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" -"Ordre des utilisateurs SELinux par priorité croissante, délimités par $" - -msgid "Default SELinux user" -msgstr "Utilisateur SELinux par défaut" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" -"Utilisateur SELinux par défaut quand il n'y a aucune correspondance dans la " -"règle de mappe SELinux" - -msgid "Default PAC types" -msgstr "Types de PAC par défaut" - -msgid "Default types of PAC supported for services" -msgstr "Types de PAC par défaut pris en charge pour des services" - -msgid "Default user authentication types" -msgstr "Types d'authentification utilisateur par défaut" - -msgid "Default types of supported user authentication" -msgstr "Types d'authentification utilisateur pris en charge par défaut" - -msgid "Modify configuration options." -msgstr "Modifier les options de configuration." - -msgid "Show the current configuration." -msgstr "Afficher la configuration actuelle." +"IPA permet la désignation d'un « binddn » à utiliser avec sudo situé à :\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" msgid "" "\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" msgstr "" "\n" -"Délégation de groupe à groupe\n" -"\n" -"Une permission permet une délégation fine des autorisations. Les règles de\n" -"contrôle d'accès, ou les instructions (ACI), accordent la possibilité aux\n" -"permissions de réaliser certaines tâches comme l'ajout d'utilisateur, la\n" -"modification d'un groupe, etc.\n" -"\n" -"La délégation de groupe à groupe permet aux membres d'un groupe de modifier\n" -"un jeu d'attributs de membres d'un autre groupe.\n" -"\n" -"EXEMPLES:\n" -"\n" -" Ajouter une règle de délégation permettant aux gestionnaires de modifier\n" -" les adresses des employés :\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" En gérant une liste d'attributs, vous devez inclure tous les attributs,\n" -" y compris les existants. Ajouter « postalCode » à la liste :\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Afficher la règle modifiée :\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Supprimer une règle :\n" -" ipa delegation-del \"managers edit employees' street\"\n" - -msgid "Delegation name" -msgstr "Nom de délégation" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "Permissions à accorder (« read », « write »). Par défaut : « write »." - -msgid "Attributes to which the delegation applies" -msgstr "Attributs auxquels la délégation s'applique" - -msgid "Member user group" -msgstr "Groupe d'utilisateurs membre" - -msgid "User group to apply delegation to" -msgstr "Groupe d'utilisateur auquel s'applique la délégation" - -msgid "Add a new delegation." -msgstr "Ajouter une nouvelle délégation." - -msgid "Delete a delegation." -msgstr "Supprimer une délégation." - -msgid "Search for delegations." -msgstr "Rechercher des délégations." - -msgid "Modify a delegation." -msgstr "Modifier une délégation." - -msgid "Display information about a delegation." -msgstr "Afficher les informations sur une délégation." +"IPA offre les moyens de configurer les divers aspects de sudo :\n" +" Users : utilisateur/groupe autorisés à invoquer sudo.\n" +" Hosts : hôte/groupe d'hôte dont l'utilisateur peut invoquer sudo.\n" +" Allow Command : commande donnée pouvant être exécutée via sudo.\n" +" Deny Command : commande donnée interdite d'exécution avec sudo.\n" +" RunAsUser : utilisateur ou groupe dont les droits sudo pourront être " +"invoqués.\n" +" RunAsGroup : groupe dont les droits sudo associés au GID pourront être " +"invoqués.\n" +" Options : les diverses options de sudoers pouvant modifier le " +"comportement de sudo.\n" msgid "" "\n" -"Domain Name System (DNS)\n" +"IPA server roles\n" +msgstr "" "\n" -"Manage DNS zone and resource records.\n" +"Rôles serveurs IPA\n" + +msgid "" "\n" -"SUPPORTED ZONE TYPES\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" "\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" +"Les données des serveurs IPA sont enregistrées dans le serveur LDAP\n" +"sous deux suffixes :\n" +"* le suffixe de domain, par exemple « dc=example,dc=com », qui contient " +"toutes\n" +" les informations relatives au domaine ;\n" +"* le suffixe ca, « o=ipaca », qui n'est présent que sur les serveurs où " +"l'autorité de certification\n" +" est installée. Il contient les données nécessaire au composant " +"Certificate Server\n" + +msgid "" "\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" +"IPA servers\n" +msgstr "" "\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" +"Serveurs IPA\n" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" +"\n" +"IPA prend en charge l'utilisation de jetons OTP pour une authentification\n" +"à facteurs multiples. Ce code active la gestion des jetons OTP.\n" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" +"\n" +"IPA prend en charge l'utilisation d'un serveur mandataire externe RADIUS\n" +"pour des authentifications OTP « krb5 ». Cela procure une grande souplesse\n" +"pour l'intégration des services d'authentification tierce partie.\n" + +msgid "" "\n" "It may be difficult to manipulate such DNS records without making a mistake\n" "and entering an invalid value. DNS module provides an abstraction over " @@ -2677,3224 +3454,17 @@ msgid "" "options\n" "for every part of the RR structure with format ---, e.g.\n" "--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "Global forwarders" -msgstr "Redirecteurs globaux" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Redirecteurs globaux. Un port personnalisé peut être indiqué pour chaque " -"redirecteur en utilisant le format standard « adresse_IP port PORT »" - -msgid "Forward policy" -msgstr "Politique de redirection" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" -"Politique globale de redirection. Mettre à « none » pour désactiver tout " -"redirecteur global configuré." - -msgid "Allow PTR sync" -msgstr "Autoriser la synchronisation PTR" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" -"Autoriser la synchronisation des enregistrements directs (A, AAAA) et " -"inverses (PTR)" - -msgid "Zone refresh interval" -msgstr "Intervalle de rafraîchissement de zone" - -msgid "Zone name" -msgstr "Nom de zone" - -msgid "Zone name (FQDN)" -msgstr "Nom de zone (FQDN)" - -msgid "Reverse zone IP network" -msgstr "Réseau IP de zone inverse" - -msgid "IP network to create reverse zone name from" -msgstr "Réseau IP pour lequel créer un nom de zone inverse" - -msgid "Active zone" -msgstr "Zone active" - -msgid "Is zone active?" -msgstr "La zone est-elle active ?" - -msgid "Zone forwarders" -msgstr "Redirection de zone" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Redirecteurs par zone. Un port personnalisé peut être indiqué pour chaque " -"redirecteur avec le format standard « adresse_IP port PORT »" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" -"Politique de redirection conditionnelle par zone. Mettre à « none » pour " -"désactiver la redirection vers un redireteur global pour cette zone. Dans ce " -"cas, les redirecteurs de zone conditionnels sont ignorés." - -msgid "Record name" -msgstr "Nom d'enregistrement" - -msgid "Time to live" -msgstr "Durée de vie" - -msgid "Records" -msgstr "Enregistrements" - -msgid "Record type" -msgstr "Type d'enregistrement" - -msgid "Record data" -msgstr "Données d'enregistrement" - -msgid "A record" -msgstr "Enregistrement A" - -msgid "Raw A records" -msgstr "Enregistrements A bruts" - -msgid "A IP Address" -msgstr "A Adresse IP" - -msgid "IP Address" -msgstr "Adresse IP" - -msgid "A Create reverse" -msgstr "A Créer un enregistrement inverse" - -msgid "Create reverse record for this IP Address" -msgstr "Créer l'enregistrement inverse pour cette adresse IP" - -msgid "AAAA record" -msgstr "Enregistrement AAAA" - -msgid "Raw AAAA records" -msgstr "Enregistrements AAAA bruts" - -msgid "AAAA IP Address" -msgstr "AAAA Adresse IP" - -msgid "AAAA Create reverse" -msgstr "AAAA Créer un enregistrement inverse" - -msgid "A6 record" -msgstr "Enregistrement A6" - -msgid "Raw A6 records" -msgstr "Enregistrements A6 bruts" - -msgid "A6 Record data" -msgstr "Données d'enregistrement A6" - -msgid "AFSDB record" -msgstr "Enregistrement AFSDB" - -msgid "Raw AFSDB records" -msgstr "Enregistrements AFSDB bruts" - -msgid "AFSDB Subtype" -msgstr "Sous-type AFSDB" - -msgid "Subtype" -msgstr "Sous-type" - -msgid "AFSDB Hostname" -msgstr "Nom d'hôte AFSDB" - -msgid "Hostname" -msgstr "Nom d'hôte" - -msgid "APL record" -msgstr "Enregistrement APL" - -msgid "Raw APL records" -msgstr "Enregistrements APL bruts" - -msgid "CERT record" -msgstr "Enregistrement CERT" - -msgid "Raw CERT records" -msgstr "Enregistrements CERT bruts" - -msgid "CERT Certificate Type" -msgstr "Type de certificat CERT" - -msgid "Certificate Type" -msgstr "Type de certificat" - -msgid "CERT Key Tag" -msgstr "Étiquette de clé CERT" - -msgid "Key Tag" -msgstr "Étiquette de clé" - -msgid "CERT Algorithm" -msgstr "Algorithme CERT" - -msgid "Algorithm" -msgstr "Algorithme" - -msgid "CERT Certificate/CRL" -msgstr "Certificat/CRL CERT" - -msgid "Certificate/CRL" -msgstr "Certificat/CRL" - -msgid "CNAME record" -msgstr "Enregistrement CNAME" - -msgid "Raw CNAME records" -msgstr "Enregistrements CNAME bruts" - -msgid "CNAME Hostname" -msgstr "Nom d'hôte CNAME" - -msgid "A hostname which this alias hostname points to" -msgstr "Un nom d'hôte vers lequel cet alias pointe" - -msgid "DHCID record" -msgstr "Enregistrement DHCID" - -msgid "Raw DHCID records" -msgstr "Enregistrements DHCID bruts" - -msgid "DLV record" -msgstr "Enregistrement DLV" - -msgid "Raw DLV records" -msgstr "Enregistrements DLV bruts" - -msgid "DLV Key Tag" -msgstr "Étiquette de clé DLV" - -msgid "DLV Algorithm" -msgstr "Algorithme DLV" - -msgid "DLV Digest Type" -msgstr "Type de condensé DLV" - -msgid "Digest Type" -msgstr "Type de condensé" - -msgid "DLV Digest" -msgstr "Condensé DLV" - -msgid "Digest" -msgstr "Condensé" - -msgid "DNAME record" -msgstr "Enregistrement DNAME" - -msgid "Raw DNAME records" -msgstr "Enregistrements DNAME bruts" - -msgid "DNAME Target" -msgstr "Cible DNAME" - -msgid "Target" -msgstr "Cible" - -msgid "DNSKEY record" -msgstr "Enregistrement DNSKEY" - -msgid "Raw DNSKEY records" -msgstr "Enregistrements DNSKEY bruts" - -msgid "DS record" -msgstr "Enregistrement DS" - -msgid "Raw DS records" -msgstr "Enregistrements DS bruts" - -msgid "DS Key Tag" -msgstr "Étiquette de clé DS" - -msgid "DS Algorithm" -msgstr "Algorithme DS" - -msgid "DS Digest Type" -msgstr "Type de condensé DS" - -msgid "DS Digest" -msgstr "Condensé DS" - -msgid "HIP record" -msgstr "Enregistrement HIP" - -msgid "Raw HIP records" -msgstr "Enregistrements HIP bruts" - -msgid "IPSECKEY record" -msgstr "Enregistrement IPSECKEY" - -msgid "Raw IPSECKEY records" -msgstr "Enregistrements IPSECKEY bruts" - -msgid "KEY record" -msgstr "Enregistrement KEY" - -msgid "Raw KEY records" -msgstr "Enregistrements KEY bruts" - -msgid "KX record" -msgstr "Enregistrement KX" - -msgid "Raw KX records" -msgstr "Enregistrements KX bruts" - -msgid "KX Preference" -msgstr "Préférence KX" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" -"Préférence donnée à cet échangeur. Les plus petites valeurs sont les " -"premières choisies" - -msgid "KX Exchanger" -msgstr "Échangeur KX" - -msgid "A host willing to act as a key exchanger" -msgstr "Un hôte prêt à jouer le rôle de changeur de clé" - -msgid "LOC record" -msgstr "Enregistrement LOC" - -msgid "Raw LOC records" -msgstr "Enregistrements LOC bruts" - -msgid "LOC Degrees Latitude" -msgstr "Degrés de latitude LOC" - -msgid "Degrees Latitude" -msgstr "Degrés de latitude" - -msgid "LOC Minutes Latitude" -msgstr "Minutes de latitude LOC" - -msgid "Minutes Latitude" -msgstr "Minutes de latitude" - -msgid "LOC Seconds Latitude" -msgstr "Secondes de latitude LOC" - -msgid "Seconds Latitude" -msgstr "Secondes de latitude" - -msgid "LOC Direction Latitude" -msgstr "Direction de latitude LOC" - -msgid "Direction Latitude" -msgstr "Direction de latitude" - -msgid "LOC Degrees Longitude" -msgstr "Degrés de longitude LOC" - -msgid "Degrees Longitude" -msgstr "Degrés de longitude" - -msgid "LOC Minutes Longitude" -msgstr "Minutes de longitude LOC" - -msgid "Minutes Longitude" -msgstr "Minutes de longitude" - -msgid "LOC Seconds Longitude" -msgstr "Secondes de longitude LOC" - -msgid "Seconds Longitude" -msgstr "Secondes de longitude" - -msgid "LOC Direction Longitude" -msgstr "Direction de longitude LOC" - -msgid "Direction Longitude" -msgstr "Direction de longitude" - -msgid "LOC Altitude" -msgstr "Altitude LOC" - -msgid "Altitude" -msgstr "Altitude" - -msgid "LOC Size" -msgstr "Taille LOC" - -msgid "Size" -msgstr "Taille" - -msgid "LOC Horizontal Precision" -msgstr "Précision horizontale LOC" - -msgid "Horizontal Precision" -msgstr "Précision horizontale" - -msgid "LOC Vertical Precision" -msgstr "Précision verticale LOC" - -msgid "Vertical Precision" -msgstr "Précision verticale" - -msgid "MX record" -msgstr "Enregistrement MX" - -msgid "Raw MX records" -msgstr "Enregistrements MX bruts" - -msgid "MX Preference" -msgstr "Préférence MX" - -msgid "MX Exchanger" -msgstr "Échangeur MX" - -msgid "A host willing to act as a mail exchanger" -msgstr "Un hôte pouvant agir comme changeur de messagerie" - -msgid "NAPTR record" -msgstr "Enregistrement NAPTR" - -msgid "Raw NAPTR records" -msgstr "Enregistrements NAPTR bruts" - -msgid "NAPTR Order" -msgstr "Ordre NAPTR" - -msgid "Order" -msgstr "Ordre" - -msgid "NAPTR Preference" -msgstr "Préférence NAPTR" - -msgid "Preference" -msgstr "Préférence" - -msgid "NAPTR Flags" -msgstr "Drapeaux NAPTR" - -msgid "Flags" -msgstr "Marqueurs" - -msgid "NAPTR Service" -msgstr "Service NAPTR" - -msgid "Service" -msgstr "Service" - -msgid "NAPTR Regular Expression" -msgstr "Expression rationnelle NAPTR" - -msgid "Regular Expression" -msgstr "Expression rationnelle" - -msgid "NAPTR Replacement" -msgstr "Remplacement NAPTR" - -msgid "Replacement" -msgstr "Remplacement" - -msgid "NS record" -msgstr "Enregistrement NS" - -msgid "Raw NS records" -msgstr "Enregistrements NS bruts" - -msgid "NS Hostname" -msgstr "Nom d'hôte NS" - -msgid "NSEC record" -msgstr "Enregistrement NSEC" - -msgid "Raw NSEC records" -msgstr "Enregistrements NSEC bruts" - -msgid "NSEC3 record" -msgstr "Enregistrement NSEC3" - -msgid "Raw NSEC3 records" -msgstr "Enregistrements NSEC3 bruts" - -msgid "PTR record" -msgstr "Enregistrement PTR" - -msgid "Raw PTR records" -msgstr "Enregistrements PTR bruts" - -msgid "PTR Hostname" -msgstr "Nom d'hôte PTR" - -msgid "The hostname this reverse record points to" -msgstr "Le nom d'hôte vers lequel cet enregistrement inverse pointe" - -msgid "RRSIG record" -msgstr "Enregistrement RRSIG" - -msgid "Raw RRSIG records" -msgstr "Enregistrements RRSIG bruts" - -msgid "RP record" -msgstr "Enregistrement RP" - -msgid "Raw RP records" -msgstr "Enregistrements RP bruts" - -msgid "SIG record" -msgstr "Enregistrement SIG" - -msgid "Raw SIG records" -msgstr "Enregistrements SIG bruts" - -msgid "SPF record" -msgstr "Enregistrement SPF" - -msgid "Raw SPF records" -msgstr "Enregistrements SPF bruts" - -msgid "SRV record" -msgstr "Enregistrement SRV" - -msgid "Raw SRV records" -msgstr "Enregistrements SRV bruts" - -msgid "SRV Priority" -msgstr "Priorité SRV" - -msgid "Priority" -msgstr "Priorité" - -msgid "SRV Weight" -msgstr "Poids SRV" - -msgid "Weight" -msgstr "Poids" - -msgid "SRV Port" -msgstr "Port SRV" - -msgid "Port" -msgstr "Port" - -msgid "SRV Target" -msgstr "Cible SRV" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" -"Le nom de domaine de l'hôte cible ou '.' si le service n'est vraiment pas " -"disponible dans ce domaine" - -msgid "SSHFP record" -msgstr "Enregistrement SSHFP" - -msgid "Raw SSHFP records" -msgstr "Enregistrements SSHFP bruts" - -msgid "SSHFP Algorithm" -msgstr "Algorithme SSHFP" - -msgid "SSHFP Fingerprint Type" -msgstr "Type d'empreinte SSHFP" - -msgid "Fingerprint Type" -msgstr "Type d'empreinte" - -msgid "SSHFP Fingerprint" -msgstr "Empreinte SSHFP" - -msgid "Fingerprint" -msgstr "Empreinte" - -msgid "TA record" -msgstr "Enregistrement TA" - -msgid "Raw TA records" -msgstr "Enregistrements TA bruts" - -msgid "TLSA record" -msgstr "Enregistrement TLSA" - -msgid "Raw TLSA records" -msgstr "Enregistrements TLSA bruts" - -msgid "TLSA Certificate Usage" -msgstr "Utilisation du certificat TLSA" - -msgid "Certificate Usage" -msgstr "Utilisation du certificat" - -msgid "TLSA Selector" -msgstr "Sélecteur TLSA" - -msgid "Selector" -msgstr "Sélecteur" - -msgid "TLSA Matching Type" -msgstr "Type de correspondance TLSA" - -msgid "Matching Type" -msgstr "Type correspondant" - -msgid "TLSA Certificate Association Data" -msgstr "Donnée d'association du certificat TLSA" - -msgid "Certificate Association Data" -msgstr "Donnée associée au certificat" - -msgid "TKEY record" -msgstr "Enregistrement TKEY" - -msgid "Raw TKEY records" -msgstr "Enregistrements TKEY bruts" - -msgid "TSIG record" -msgstr "Enregistrement TSIG" - -msgid "Raw TSIG records" -msgstr "Enregistrements TSIG bruts" - -#, fuzzy -msgid "TXT record" -msgstr "Enregistrement KX" - -#, fuzzy -msgid "Raw TXT records" -msgstr "Enregistrements TA bruts" - -#, fuzzy -msgid "TXT Text Data" -msgstr "Donnée texte" - -msgid "Text Data" -msgstr "Donnée texte" - -msgid "Authoritative nameserver" -msgstr "Serveur de nom faisant autorité" - -msgid "Authoritative nameserver domain name" -msgstr "Nom de domaine du serveur de nom faisant autorité" - -msgid "Administrator e-mail address" -msgstr "Adresse courriel de l'administrateur" - -msgid "SOA serial" -msgstr "Numéro de série SOA" - -msgid "SOA record serial number" -msgstr "Numéro de série de l'enregistrement SOA" - -msgid "SOA refresh" -msgstr "Actualisation SOA" - -msgid "SOA record refresh time" -msgstr "Durée d'actualisation de l'enregistrement SOA" - -msgid "SOA retry" -msgstr "Nouvel essai SOA" - -msgid "SOA record retry time" -msgstr "Durée avant nouvel essai d'enregistrement SOA" - -msgid "SOA expire" -msgstr "Expiration SOA" - -msgid "SOA record expire time" -msgstr "Heure d'expiration de l'enregistrement SOA" - -msgid "SOA minimum" -msgstr "Minimum SOA" - -msgid "How long should negative responses be cached" -msgstr "Durée de maintien en cache des réponses négatives" - -msgid "Time to live for records at zone apex" -msgstr "Durée de vie des enregistrements en sommet de zone" - -msgid "BIND update policy" -msgstr "Politique de mise à jour de BIND" - -msgid "Dynamic update" -msgstr "Mise à jour dynamique" - -msgid "Allow dynamic updates." -msgstr "Autoriser les mises à jour dynamiques." - -msgid "Allow query" -msgstr "Autoriser requête" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" -"Liste séparée par des points-virgules d'adresses IP ou de réseaux autorisés " -"à émettre des requêtes" - -msgid "Allow transfer" -msgstr "Autoriser le transfert" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" -"Liste séparée par des points-virgules d'adresses IP ou de réseaux autorisés " -"à effectuer des transferts" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" -"Autoriser la synchronisation des enregistrements directs (A, AAAA) et " -"inverses (PTR) dans la zone" - -msgid "Allow in-line DNSSEC signing" -msgstr "Autoriser la signature DNSSEC en ligne" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "" -"Autoriser la signature DNSSEC en ligne des enregistrements dans la zone" - -msgid "NSEC3PARAM record" -msgstr "Enregistrement NSEC3PARAM" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" -"Enregistrement NSEC3PARAM pour une zone au format : algorithme_hachage " -"marqueurs itérations salt." - -#, fuzzy -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" -"Vérifier si l'un des serveurs a activé le service autorité de certification." - -msgid "Resolve a host name in DNS." -msgstr "Résoudre un nom de système DNS." - -msgid "Modify global DNS configuration." -msgstr "Modifier la configuration DNS globale." - -msgid "Show the current global DNS configuration." -msgstr "Afficher la configuration DNS globale." - -msgid "Create new DNS forward zone." -msgstr "Créer une nouvelle zone de redirection DNS" - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" -"Ajouter une permission pour une délégation d'accès de zone de redirection." - -msgid "Permission value" -msgstr "Valeur de permission" - -msgid "Delete DNS forward zone." -msgstr "Supprimer une zone de redirection DNS." - -msgid "Disable DNS Forward Zone." -msgstr "Désactiver une zone de redirection DNS." - -msgid "Enable DNS Forward Zone." -msgstr "Activer une zone de redirection DNS." - -msgid "Search for DNS forward zones." -msgstr "Rechercher des zones de redirection DNS." - -msgid "Modify DNS forward zone." -msgstr "Modifier une zone de redirection DNS." - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" -"Supprimer la permission pour une délégation d'accès de zone de redirection." - -msgid "Display information about a DNS forward zone." -msgstr "Afficher des informations à propos des zones de redirection DNS." - -msgid "Add new DNS resource record." -msgstr "Ajouter un nouvel enregistrement de ressources DNS." - -msgid "Force" -msgstr "Forcer" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "" -"forcer la création d'un enregistrement NS même si le nom du système n'est " -"pas dans le DNS" - -msgid "Structured" -msgstr "Structuré" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" -"Analyser tous les enregistrements DNS et les renvoyer sous forme structurée" - -msgid "Delete DNS resource record." -msgstr "Supprimer un enregistrement de ressources DNS." - -msgid "Delete all associated records" -msgstr "Supprimer les enregistrements associés" - -#, fuzzy -msgid "Delete DNS record entry." -msgstr "Supprimer un enregistrement de ressources DNS." - -msgid "Search for DNS resources." -msgstr "Rechercher des enregistrements de ressources DNS." - -msgid "Modify a DNS resource record." -msgstr "Modifier un enregistrement de ressources DNS." - -#, fuzzy -msgid "Rename the DNS resource record object" -msgstr "Supprimer un enregistrement de ressources DNS." - -msgid "Display DNS resource." -msgstr "Afficher un enregistrement de ressources DNS." - -msgid "Create new DNS zone (SOA record)." -msgstr "Créer une nouvelle zone DNS (enregistrement SOA)." - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" -"Forcer la création de la zone DNS même si le serveur de nom n'est pas " -"résoluble." - -msgid "Add a permission for per-zone access delegation." -msgstr "Ajouter une permission pour une délégation d'accès par zone." - -msgid "Delete DNS zone (SOA record)." -msgstr "Supprimer la zone DNS (enregistrement SOA)." - -msgid "Disable DNS Zone." -msgstr "Désactiver la zone DNS." - -msgid "Enable DNS Zone." -msgstr "Activer la zone DNS." - -msgid "Search for DNS zones (SOA records)." -msgstr "Rechercher des zones DNS (enregistrements SOA)." - -msgid "Forward zones only" -msgstr "Zones redirigées uniquement" - -msgid "Search for forward zones only" -msgstr "Rechercher des zones redirigées uniquement" - -msgid "Modify DNS zone (SOA record)." -msgstr "Modifier la zone DNS (enregistrement SOA)." - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" -"Forcer un changement de serveur de nom même si le serveur de nom n'est pas " -"dans le DNS" - -msgid "Remove a permission for per-zone access delegation." -msgstr "Supprimer une permission pour une délégation d'accès par zone." - -msgid "Display information about a DNS zone (SOA record)." -msgstr "" -"Afficher les informations au sujet d'une zone DNS (enregistrement SOA)." - -#, fuzzy -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" msgstr "" "\n" -"Groupes d'utilisateurs\n" -"\n" -"Gérer des groupes d'utilisateurs. Par défaut, tout nouveau groupe est " -"POSIX.\n" -"On peut ajouter l'option « --nonposix » à la commande « group-add » pour\n" -"marquer un nouveau groupe comme non-POSIX et utiliser l'option « --posix »\n" -"de la commande « group-mod » pour convertir un groupe non-POSIX en groupe\n" -"POSIX. Les groupes POSIX ne peuvent pas être convertis en groupes non-" -"POSIX.\n" -"\n" -"Chaque groupe doit avoir une description.\n" -"\n" -"Les groupes POSIX doivent avoir un numéro d'ID de groupe (GID). Modifier un\n" -"GID est faisable, mais cela peut avoir un impact sur vos droits d'accès aux\n" -"fichiers. Il n'est pas nécessaire d'indiquer un GID à la création du " -"groupe.\n" -"IPA en générera un automatiquement s'il n'est pas fourni.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouveau groupe :\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Ajouter un nouveau groupe non-POSIX :\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convertir un groupe non-POSIX en groupe POSIX :\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Ajouter un nouveau groupe POSIX avec un numéro d'ID de groupe donné :\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Ajouter un nouveau groupe POSIX et laisser IPA assigner un numéro d'ID de " -"groupe :\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Supprimer un groupe :\n" -" ipa group-del unixadmins\n" -"\n" -" Ajouter le groupe « remoteadmins » au groupe « localadmins » :\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Ajouter plusieurs utilisateurs au groupe « localadmins » :\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Supprimer un utilisateur du groupe « localadmins » :\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Afficher des informations à propos d'un groupe donné :\n" -" ipa group-show localadmins\n" -"\n" -"L'adhésion à un groupe externe est conçue pour permettre aux utilisateurs " -"de\n" -"domaines approuvés d'être assimilés aux groupes POSIX locaux pour pouvoir\n" -"utiliser réellement les ressources IPA. Des membres externes peuvent être\n" -"ajoutés aux groupes spécifiquement crées comme externes et non-POSIX. Un " -"tel\n" -"groupe peut plus tard être incorporé dans un des groupes POSIX\n" -"\n" -"Un membre de groupe externe est actuellement identifié par un « Security\n" -"Identifier (SID) » tel que défini pour le domaine approuvé. Pour ajouter\n" -"un membre de groupe externe, il est possible de le définir, soit au format\n" -"SID, soit DOM\\name, soit name@domain. IPA essayera de résoudre le nom " -"passé\n" -"en SID en se servant du « Global Catalog » des domaines approuvés.\n" -"\n" -"Exemple:\n" -"\n" -"1. Créer un groupe par assimilation au domaine approuvé « admins »\n" -" et à leur groupe POSIX local :\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Ajouter l'identifiant de sécurité de « Domain Admins » au\n" -" groupe externe « ad_admins_external » :\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Autoriser des membres du groupe « ad_admins_external » à être associés " -"au\n" -" groupe POSIX « ad_admins » :\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Lister les membres externes du groupe « ad_admins_external » pour voir\n" -" leur SID :\n" -"\n" -" ipa group-show ad_admins_external\n" - -msgid "Group name" -msgstr "Nom du groupe" - -msgid "Group description" -msgstr "Description du groupe" - -msgid "GID" -msgstr "GID" - -msgid "GID (use this option to set it manually)" -msgstr "GID (utiliser cette option pour le définir manuellement)" - -msgid "Member users" -msgstr "Utilisateurs membres" - -msgid "Member groups" -msgstr "Groupes de membres" - -msgid "Member of groups" -msgstr "Membre des groupes" - -msgid "Roles" -msgstr "Rôles" - -msgid "Member of netgroups" -msgstr "Membre des groupes réseau" - -msgid "Member of Sudo rule" -msgstr "Membre de règle Sudo" - -msgid "Member of HBAC rule" -msgstr "Membre de règle HBAC" - -msgid "Indirect Member users" -msgstr "Utilisateurs membres indirects" - -msgid "Indirect Member groups" -msgstr "Groupes membres indirects" - -#, fuzzy -msgid "Indirect Member of group" -msgstr "Groupes membres indirects" - -#, fuzzy -msgid "Indirect Member of netgroup" -msgstr "Groupes réseau de membres indirects" - -#, fuzzy -msgid "Indirect Member of role" -msgstr "Membres indirect des rôles" - -#, fuzzy -msgid "Indirect Member of Sudo rule" -msgstr "Membres indirect des rôles" - -#, fuzzy -msgid "Indirect Member of HBAC rule" -msgstr "Membres indirect des rôles" - -msgid "Create a new group." -msgstr "Créer un nouveau groupe." - -msgid "Create as a non-POSIX group" -msgstr "Créer en tant que groupe non-POSIX" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" -"Autoriser l'ajout de membres externes non-IPA depuis des domaines approuvés" - -msgid "Suppress processing of membership attributes." -msgstr "Suppression du traitement des attributs d'adhésion." - -msgid "Add members to a group." -msgstr "Ajouter des membres à un groupe." - -msgid "External member" -msgstr "Membre externe" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "Membres d'un domaine approuvé sous la forme DOM\\nom ou nom@domaine" - -#, fuzzy -msgid "member user" -msgstr "Utilisateurs membres" - -#, fuzzy -msgid "users to add" -msgstr "%s à ajouter" - -msgid "member group" -msgstr "groupe membre" - -msgid "groups to add" -msgstr "groupes à ajouter" - -msgid "Members that could not be added" -msgstr "Membres n'ayant pu être ajoutés" - -msgid "Number of members added" -msgstr "Nombre de membres ajoutés" - -msgid "Delete group." -msgstr "Supprimer un groupe." - -msgid "Detach a managed group from a user." -msgstr "Détacher un groupe administré d'un utilisateur." - -msgid "Search for groups." -msgstr "Rechercher des groupes." - -msgid "search for private groups" -msgstr "rechercher des groupes privés" - -msgid "search for POSIX groups" -msgstr "rechercher des groupes POSIX" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" -"rechercher des groupes autorisant la prise en charge des membres externes " -"non-IPA depuis les domaines approuvés" - -msgid "search for non-POSIX groups" -msgstr "rechercher des groupes non-POSIX" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« group-name »)" - -msgid "user" -msgstr "utilisateur" - -#, fuzzy -msgid "Search for groups with these member users." -msgstr "Rechercher des groupes réseaux dont les membres sont ces utilisateurs." - -#, fuzzy -msgid "Search for groups without these member users." -msgstr "" -"Rechercher des groupes réseaux dont les membres ne sont pas ces utilisateurs." - -msgid "group" -msgstr "groupe" - -#, fuzzy -msgid "Search for groups with these member groups." -msgstr "Rechercher des groupes réseaux dont les membres sont ces groupes." - -#, fuzzy -msgid "Search for groups without these member groups." -msgstr "" -"Rechercher des groupes réseaux dont les membres ne sont pas ces groupes." - -#, fuzzy -msgid "Search for groups with these member of groups." -msgstr "Rechercher des groupes réseaux avec ces membres de groupes réseau." - -#, fuzzy -msgid "Search for groups without these member of groups." -msgstr "Rechercher des groupes réseaux sans ces membres de groupes réseau." - -msgid "netgroup" -msgstr "groupe réseau" - -#, fuzzy -msgid "Search for groups with these member of netgroups." -msgstr "Rechercher des groupes réseaux avec ces membres de groupes réseau." - -#, fuzzy -msgid "Search for groups without these member of netgroups." -msgstr "Rechercher des groupes réseaux sans ces membres de groupes réseau." - -msgid "role" -msgstr "rôle" - -#, fuzzy -msgid "Search for groups with these member of roles." -msgstr "Rechercher des hôtes sans ces membres de rôles." - -#, fuzzy -msgid "Search for groups without these member of roles." -msgstr "Rechercher des hôtes sans ces membres de rôles." - -msgid "HBAC rule" -msgstr "Règle HBAC" - -#, fuzzy -msgid "Search for groups with these member of HBAC rules." -msgstr "Rechercher des hôtes avec ces membres de règles HBAC." - -#, fuzzy -msgid "Search for groups without these member of HBAC rules." -msgstr "Rechercher des hôtes avec ces membres de règles HBAC." - -msgid "sudo rule" -msgstr "règle sudo" - -#, fuzzy -msgid "Search for groups with these member of sudo rules." -msgstr "Rechercher des systèmes sans ces membres de règles sudo." - -#, fuzzy -msgid "Search for groups without these member of sudo rules." -msgstr "Rechercher des systèmes sans ces membres de règles sudo." - -msgid "Modify a group." -msgstr "Modifier un groupe." - -msgid "change to a POSIX group" -msgstr "Transformer en groupe POSIX" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" -"modifier afin de permettre une prise en charge des membres externes non-IPA " -"depuis des domaines approuvés" - -msgid "Rename the group object" -msgstr "Renommer l'objet groupe" - -msgid "Remove members from a group." -msgstr "Supprimer des membres d'un groupe." - -msgid "users to remove" -msgstr "utilisateurs à supprimer" - -msgid "groups to remove" -msgstr "groupes à supprimer" - -msgid "Members that could not be removed" -msgstr "Membres n'ayant pas pu être supprimés" - -msgid "Number of members removed" -msgstr "Nombre de membres supprimés" - -msgid "Display information about a named group." -msgstr "Afficher les informations d'un groupe nommé." - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" -"\n" -"Contrôle d'accès des systèmes (HBAC)\n" -"\n" -"HBAC (Host-based acces control) permet de contrôler qui peut accéder\n" -"à quels services sur quels systèmes, et d'où. Il est possible\n" -"d'utiliser le système HBAC afin de contrôler quels utilisateurs ou quels\n" -"groupes d'un système source peuvent accéder à quels services, ou groupes\n" -"de services, sur un hôte cible.\n" -"\n" -"Vous pouvez aussi indiquer une catégorie d'utilisateur, d'hôtes cibles.\n" -"La seule catégorie existante pour le moment est \"all\", mais elles\n" -"pourront être étendues dans le futur.\n" -"\n" -"Les hôtes cible des règles HBAC doivent être des hôtes administrés par IPA.\n" -"\n" -"Les services et groupes de services disponibles sont gérés respectivement\n" -"par les greffons « hbacsvc » et « hbacsvcgroup ».\n" -"\n" -"EXEMPLES:\n" -"\n" -" Créer une règle \"test1\" autorisant tous les utilisateurs à accéder\n" -" le serveur « server » depuis n'importe où :\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Afficher les propriétés d'une règle HBAC nommée :\n" -" ipa hbacrule-show test1\n" -"\n" -" Créer une règle pour un service donné. Elle permet d'avoir accés au\n" -" service sshd sur toute machine depuis n'importe quelle autre machine :\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Créer une règle pour un nouveau groupe de services. Elle permet d'avoir\n" -" accès au service FTP de toute machine depuis n'importe quelle machine.\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Désactiver une règle HBAC nommée :\n" -" ipa hbacrule-disable test1\n" -"\n" -" Supprimer une règle HBAC nommée :\n" -" ipa hbacrule-del allow_server\n" -"\n" - -msgid "Rule name" -msgstr "Nom de règle" - -msgid "Rule type" -msgstr "Type de règle" - -msgid "Rule type (allow)" -msgstr "Type de règle (allow)" - -msgid "User category" -msgstr "Catégorie d'utilisateur" - -msgid "User category the rule applies to" -msgstr "Catégorie d'utilisateurs à laquelle la règle s'applique" - -msgid "Host category" -msgstr "Catégorie de systèmes" - -msgid "Host category the rule applies to" -msgstr "Catégorie d'hôtes à laquelle la règle s'applique" - -msgid "Service category" -msgstr "Catégorie de service" - -msgid "Service category the rule applies to" -msgstr "Catégorie de services à laquelle la règle s'applique" - -msgid "Enabled" -msgstr "Activé(e)" - -msgid "User Groups" -msgstr "Groupes d'utilisateurs" - -msgid "Host Groups" -msgstr "Groupes d'hôtes" - -msgid "Services" -msgstr "Services" - -msgid "Service Groups" -msgstr "Groupes de services" - -msgid "External host" -msgstr "Système externe" - -msgid "Create a new HBAC rule." -msgstr "Créer une nouvelle règle HBAC." - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "Ajouter des hôtes et des groupes d'hôtes cibles à une règle HBAC." - -msgid "member host" -msgstr "hôte membre" - -msgid "hosts to add" -msgstr "hôtes à ajouter" - -msgid "member host group" -msgstr "groupe d'hôte membre" - -msgid "host groups to add" -msgstr "groupes d'hôtes à ajouter" - -msgid "Add services to an HBAC rule." -msgstr "Ajouter des services à une règle HBAC." - -msgid "member HBAC service" -msgstr "Service HBAC membre" - -msgid "HBAC services to add" -msgstr "Services HBAC à ajouter" - -msgid "member HBAC service group" -msgstr "Groupe de services HBAC membre" - -msgid "HBAC service groups to add" -msgstr "Groupes de services HBAC à ajouter" - -msgid "Add users and groups to an HBAC rule." -msgstr "Ajouter des utilisateurs et groupes à une règle HBAC." - -msgid "Delete an HBAC rule." -msgstr "Supprimer une règle HBAC." - -msgid "Disable an HBAC rule." -msgstr "Désactiver une règle HBAC." - -msgid "Enable an HBAC rule." -msgstr "Activer une règle HBAC." - -msgid "Search for HBAC rules." -msgstr "Rechercher des règles HBAC." - -msgid "Modify an HBAC rule." -msgstr "Modifier une règle HBAC." - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "Retirer des hôtes et des groupes d'hôtes cibles d'une règle HBAC." - -msgid "hosts to remove" -msgstr "hôtes à supprimer" - -msgid "host groups to remove" -msgstr "groupes d'hôtes à supprimer" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "Ajouter des services et des groupes de services d'une règle HBAC." - -msgid "HBAC services to remove" -msgstr "Services HBAC à supprimer" - -msgid "HBAC service groups to remove" -msgstr "Groupes de services HBAC à supprimer" - -msgid "Remove users and groups from an HBAC rule." -msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." - -msgid "Display the properties of an HBAC rule." -msgstr "Afficher les propriétés d'une règle HBAC." - -#, fuzzy -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" -"\n" -"Services HBAC\n" -"\n" -"Les services PAM dont le système HBAC peut contrôler l'accès. Le nom " -"utilisé\n" -"ici doit correspondre au nom du service analysé par PAM.\n" -"EXEMPLES:\n" -"\n" -" Ajouter un nouveau service HBAC :\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modifier un service HBAC existant :\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Chercher des services HBAC. Cet exemple renvoie deux résultats, le service\n" -" FTP et le service tftp nouvellement ajouté :\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Supprimer un service HBAC :\n" -" ipa hbacsvc-del tftp\n" -"\n" - -msgid "Service name" -msgstr "Nom de service" - -msgid "HBAC service" -msgstr "Service HBAC" - -msgid "HBAC service description" -msgstr "Description de service HBAC" - -#, fuzzy -msgid "Member of HBAC service groups" -msgstr "Groupes de services HBAC membres" - -msgid "Add a new HBAC service." -msgstr "Ajouter un nouveau service HBAC." - -msgid "Delete an existing HBAC service." -msgstr "Supprimer un service HBAC existant." - -msgid "Search for HBAC services." -msgstr "Rechercher des services HBAC." - -#, fuzzy -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« %s »)" - -msgid "Modify an HBAC service." -msgstr "Modifier un service HBAC." - -msgid "Display information about an HBAC service." -msgstr "Afficher des informations sur un service HBAC." - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" -"\n" -"Groupes de services HBAC\n" -"\n" -"Les groupes de services HBAC peuvent contenir n'importe quel nombre de\n" -"services « membres » individuels. Chaque groupe doit avoir une description.\n" -"\n" -"EXEMPLES:\n" -"\n" -" Ajouter un nouveau groupe de services HBAC :\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Ajouter des membres à un groupe de services HBAC :\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Afficher les informations d'un groupe nommé :\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Supprimer un groupe de services HBAC :\n" -" ipa hbacsvcgroup-del login\n" - -msgid "Service group name" -msgstr "Nom de groupe de services HBAC" - -msgid "HBAC service group description" -msgstr "Description de groupe de services HBAC" - -msgid "Member HBAC service" -msgstr "Services HBAC membres" - -msgid "Add a new HBAC service group." -msgstr "Ajouter un nouveau groupe de services HBAC." - -msgid "Add members to an HBAC service group." -msgstr "Ajouter des membres à un groupe de services HBAC." - -msgid "Delete an HBAC service group." -msgstr "Supprimer un groupe de services HBAC." - -msgid "Search for an HBAC service group." -msgstr "Rechercher des groupes de services HBAC." - -msgid "Modify an HBAC service group." -msgstr "Supprimer un groupe de services HBAC." - -msgid "Remove members from an HBAC service group." -msgstr "Supprimer des membres d'un groupe de services HBAC." - -msgid "Display information about an HBAC service group." -msgstr "Afficher les informations sur un groupe de services HBAC." - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" -"\n" -"Simuler l'utilisation des contrôles d'accès fondés sur l'hôte\n" -"\n" -"Les règles HBAC contrôlent qui peut accéder à quel service sur quels hôtes.\n" -"Vous pouvez utiliser HBAC pour contrôler quels utilisateurs ou quels " -"groupes\n" -"ont accés à un service ou à un groupe de services, sur un hôte cible.\n" -"\n" -"L'application de règles HBAC présuppose un environnement de production ;\n" -"ce greffon a pour objet de fournir une simulation de l'évaluation des " -"règles\n" -"HBAC sans nécessiter d'accès à cet environnement.\n" -"\n" -" Tester l'arrivée d'un utilisateur dans un service sur un hôte donné\n" -" vis à vis des règles actives existantes.\n" -"\n" -"ipa hbactest --user= --host= --service=\\\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\\\n" -" [--sizelimit= ]\n" -"\n" -"--user, --host et --service sont obligatoires, les autres sont " -"optionnelles.\n" -"\n" -" Si --rules est défini, simule l'activation des règles « rules-list » et\n" -" teste la connexion de l'utilisateur uniquement sur ces règles.\n" -"\n" -" Si --enabled est défini, toutes les règles HBAC activées sont ajoutées à\n" -" la simulation\n" -"\n" -" Si --disabled est défini, toutes les règles HBAC désactivées sont ajoutées\n" -" à la simulation\n" -"\n" -" Si --nodetail est défini, il n'est pas renvoyé d'information sur les " -"règles satisfaites ou non satisfaites.\n" -"\n" -" Si --rules et --enabled sont définis tous deux, la simulation est " -"appliquée\n" -" à --rules _et_ à tous les règles IPA activées.\n" -"\n" -" Si --rules n'est pas défini, la simulation est lancée vis à sis de toutes\n" -" les règles IPA activées.\n" -" Par défaut, il y a une limite globale IPA pour le nombre d'entrées\n" -" renvoyées, vous pouvez la modifier avec l'option « --sizelimit ».\n" -"\n" -"EXEMPLES :\n" -"\n" -" 1. Utiliser toutes les règles HBAC activées dans la base de données IPA\n" -" pour la simulation :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Désactiver le résumé détaillé sur l'application des règles :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Tester explicitement les règles HBAC indiquées :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" -"--rules=my-second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Utiliser toutes les règles HBAC activées de la base de données IPA\n" -" plus les règles explicitement définies :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" -"--rules=my-second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Tester toutes les règles HBAC désactivées de la base de données " -"IPA :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Tester toutes les règles HBAC désactivées de la base de données IPA\n" -" plus les règles explicitement définies :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" -"--rules=my-second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Tester toutes les règles HBAC (activées et désactivées) de la base\n" -" de données IPA :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -"\n" -"\n" -"TEST HBAC ET domaines approuvés\n" -"\n" -"Si un domaine approuvé externe est configuré dans IPA, les règles HBAC\n" -"sont aussi appliquées aux utilisateurs accédant aux ressources IPA à partir\n" -"du domaine approuvé. Les utilisateurs des domaines approuvés et les\n" -"groupes (et leur SID) peuvent être assignés à des groupes externes pouvant\n" -"être membres de groupes POSIX d'IPA éligibles aux règles HBAC, ce qui\n" -"autorise un accès aux ressources protégées par le système HBAC.\n" -"\n" -"Le greffon « hbactest » peut tester des accès, à la fois d'utilisateurs\n" -"IPA locaux et d'utilisateurs de domaines approuvés à partir, soit du\n" -"nom d'utilisateur pleinement qualifié, soit du SID utilisateur. De tels " -"noms\n" -"d'utilisateur doivent avoir un domaine approuvé précisé comme nom court\n" -"(DOMAINE\\Administrateur) ou avec un nom de principal d'utilisateur (UPN),\n" -"Administrator@ad.test.\n" -"\n" -"Veuillez noter que « hbactest » exécuté avec un utilisateur de domaine de\n" -"confiance en tant que paramètre --user ne peut être lancé que par des\n" -"membres du groupe des « administrateurs de confiance ».\n" -"\n" -"EXEMPLES :\n" -"\n" -" 1. Tester si un utilisateur d'un domaine approuvé défini par son\n" -" nom court satisfait à toute règle :\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Tester si un utilisateur d'un domaine approuvé défini par son\n" -" nom de domaine satisfait à toute règle :\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Tester si un utilisateur d'un domaine approuvé défini par son\n" -" SID satisfait à toute règle :\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Tester si un autre utilisateur d'un domaine approuvé défini\n" -" par son SID satisfait à toute règle :\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Tester si un autre utilisateur d'un domaine approuvé défini par\n" -" son nom court satisfait à toute règle :\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" - -msgid "Simulate use of Host-based access controls" -msgstr "Simulation de l'utilisation des contrôles d'accès basées sur les hôtes" - -msgid "User name" -msgstr "Nom d'utilisateur" - -msgid "Target host" -msgstr "Hôte cible" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "Règles à tester. Si non précisé, --enabled est implicite" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "Masquer les détails des règles satisfaites ou pas, ou invalides" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "Inclure toutes les règles IPA actives dans le test [par défaut]" - -msgid "Include all disabled IPA rules into test" -msgstr "Inclure toutes les règles IPA inactives dans le test" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "Nombre maximal de règles à traiter quand « --rules » n'est défini" - -msgid "Warning" -msgstr "Attention" - -msgid "Matched rules" -msgstr "Règles satisfaites" - -msgid "Not matched rules" -msgstr "Règles non satisfaites" - -msgid "Non-existent or invalid rules" -msgstr "Règles inexistantes ou invalides" - -msgid "Result of simulation" -msgstr "Résultat de la simulation" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host name" -msgstr "Nom d'hôte" - -msgid "A description of this host" -msgstr "Une description de cet hôte" - -msgid "Locality" -msgstr "Localité" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "Localité de l'hôte (par ex. « Paris, IDF »)" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "Emplacement de l'hôte (par ex. \"Lab 2\")" - -msgid "Platform" -msgstr "Plate-forme" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "Plate-forme matérielle de l'hôte (par ex. « Lenovo T61 »)" - -msgid "Operating system" -msgstr "Système d'exploitation" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "Système d'exploitation et version (par ex. « Fedora 9 »)" - -msgid "User password" -msgstr "Mot de passe utilisateur" - -msgid "Password used in bulk enrollment" -msgstr "Mot de passe utilisé pour les inscriptions en masse" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "Créer un mot de passe aléatoire utilisé pour l'inscription en masse" - -msgid "Random password" -msgstr "Mot de passe aléatoire" - -msgid "Certificate" -msgstr "Certificat" - -msgid "Base-64 encoded server certificate" -msgstr "Certificat du serveur codé en Base-64" - -msgid "Principal name" -msgstr "Nom principal" - -msgid "MAC address" -msgstr "Adresse MAC" - -msgid "Hardware MAC address(es) on this host" -msgstr "Adresse(s) MAC du matériel sur cet hôte" - -msgid "SSH public key" -msgstr "Clé publique SSH" - -msgid "Class" -msgstr "Classe" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" -"Catégorie d'hôte (les sémantiques associées à cet attribut vous sont propres)" - -msgid "Assigned ID View" -msgstr "Vue d'identifiants attribuée" - -msgid "Requires pre-authentication" -msgstr "Nécessite une authentification préalable" - -msgid "Pre-authentication is required for the service" -msgstr "Une authentification préalable est requise pour le service" - -msgid "Trusted for delegation" -msgstr "Approuvé pour délégation." - -msgid "Client credentials may be delegated to the service" -msgstr "" -"Les informations d'identification du client peuvent être déléguées au service" - -msgid "Member of host-groups" -msgstr "Membre du groupe d'hôtes" - -msgid "Indirect Member of host-group" -msgstr "Membre indirect des groupes d'hôtes" - -msgid "Keytab" -msgstr "Tableau de clés" - -msgid "Managed by" -msgstr "Géré par" - -msgid "Managing" -msgstr "Gérant" - -msgid "Users allowed to retrieve keytab" -msgstr "Utilisateurs autorisés à récupérer un tableau de clés" - -msgid "Groups allowed to retrieve keytab" -msgstr "Groupes autorisés à récupérer un tableau de clés" - -msgid "Hosts allowed to retrieve keytab" -msgstr "Hôtes autorisés à récupérer un tableau de clés" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "Groupes d'hôtes autorisés à récupérer un tableau de clés" - -msgid "Users allowed to create keytab" -msgstr "Utilisateurs autorisés à créer un tableau de clés" - -msgid "Groups allowed to create keytab" -msgstr "Groupes autorisés à créer un tableau de clés" - -msgid "Hosts allowed to create keytab" -msgstr "Hôtes autorisés à créer un tableau de clés" - -msgid "Host Groups allowed to create keytab" -msgstr "Groupes d'hôtes autorisés à créer un tableau de clés" - -msgid "Add a new host." -msgstr "Ajouter un nouvel hôte." - -msgid "force host name even if not in DNS" -msgstr "forcer le nom même si absent des DNS" - -msgid "skip reverse DNS detection" -msgstr "sauter la détection du DNS inverse" - -msgid "Add the host to DNS with this IP address" -msgstr "Ajouter l'hôte aux DNS avec cette adresse IP" - -msgid "Add hosts that can manage this host." -msgstr "Ajouter les hôtes qui peuvent gérer cet hôte." - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" -"Autoriser des utilisateurs, hôtes ou groupes d'hôtes à créer un tableau de " -"clés de cet hôte." - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" -"Autoriser des utilisateurs, hôtes ou groupes d'hôtes à récupérer un tableau " -"de clés de cet hôte." - -msgid "Delete a host." -msgstr "Supprimer un hôte." - -msgid "Remove entries from DNS" -msgstr "Supprimer les entrées du DNS" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" -"Désactiver la clé Kerberos, les certificats SSL et tous les services d'un " -"hôte." - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" -"Interdire aux utilisateurs, hôtes ou groupes d'hôtes de créer un tableau de " -"clés de cet hôte." - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" -"Interdire aux utilisateurs, hôtes ou groupes d'hôtes à récupérer un tableau " -"de clés de cet hôte." - -msgid "Search for hosts." -msgstr "Rechercher des hôtes." - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« hostname »)" - -msgid "host group" -msgstr "groupe d'hôtes" - -msgid "Search for hosts with these member of host groups." -msgstr "Rechercher des hôtes avec ces membres de groupes d'hôtes." - -msgid "Search for hosts without these member of host groups." -msgstr "Rechercher des hôtes sans ces membres de groupes d'hôtes." - -#, fuzzy -msgid "Search for hosts with these member of netgroups." -msgstr "Rechercher des hôtes avec ces membres de groupes d'hôtes." - -#, fuzzy -msgid "Search for hosts without these member of netgroups." -msgstr "Rechercher des hôtes sans ces membres de groupes d'hôtes." - -#, fuzzy -msgid "Search for hosts with these member of roles." -msgstr "Rechercher des hôtes sans ces membres de rôles." - -msgid "Search for hosts without these member of roles." -msgstr "Rechercher des hôtes sans ces membres de rôles." - -msgid "Search for hosts with these member of HBAC rules." -msgstr "Rechercher des hôtes avec ces membres de règles HBAC." - -#, fuzzy -msgid "Search for hosts without these member of HBAC rules." -msgstr "Rechercher des hôtes avec ces membres de règles HBAC." - -#, fuzzy -msgid "Search for hosts with these member of sudo rules." -msgstr "Rechercher des systèmes sans ces membres de règles sudo." - -msgid "Search for hosts without these member of sudo rules." -msgstr "Rechercher des systèmes sans ces membres de règles sudo." - -#, fuzzy -msgid "Search for hosts with these enrolled by users." -msgstr "Rechercher des hôtes avec ces membres de règles HBAC." - -#, fuzzy -msgid "Search for hosts without these enrolled by users." -msgstr "Rechercher des systèmes sans ces membres de règles sudo." - -msgid "host" -msgstr "hôte" - -#, fuzzy -msgid "Search for hosts with these managed by hosts." -msgstr "Rechercher des hôtes avec ces membres de groupes d'hôtes." - -#, fuzzy -msgid "Search for hosts without these managed by hosts." -msgstr "Rechercher des hôtes sans ces membres de groupes d'hôtes." - -#, fuzzy -msgid "Search for hosts with these managing hosts." -msgstr "Rechercher des hôtes avec ces membres de groupes d'hôtes." - -#, fuzzy -msgid "Search for hosts without these managing hosts." -msgstr "Rechercher des hôtes sans ces membres de groupes d'hôtes." - -msgid "Modify information about a host." -msgstr "Modifier les informations d'un hôte." - -msgid "Kerberos principal name for this host" -msgstr "Nom du principal Kerberos pour cet hôte" - -msgid "Update DNS entries" -msgstr "Mettre à jour les entrées DNS" - -msgid "Remove hosts that can manage this host." -msgstr "Supprimer les hôtes qui peuvent gérer cet hôte." - -msgid "Display information about a host." -msgstr "Afficher les informations sur un hôte." - -msgid "file to store certificate in" -msgstr "fichier où stocker le certificat" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" -"\n" -"Groupes d'hôtes.\n" -"\n" -"Gestion des groupes d'hôtes. Permet d'appliquer des contrôles d'accès\n" -"à plusieurs hôtes en utilisant HBAC (Host-based Access Control).\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouveau groupe d'hôtes :\n" -" ipa hostgroup-add --desc=\"Systèmes de Baltimore\" baltimore\n" -"\n" -" Ajouter un nouveau groupe d'hôtes :\n" -" ipa hostgroup-add --desc=\"Systèmes du Maryland\" maryland\n" -"\n" -" Ajouter des membres à un groupe d'hôtes :\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Ajouter un groupe d'hôtes en tant que membre d'un autre groupe d'hôtes :\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Supprimer un hôte d'un groupe :\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Afficher un groupe d'hôtes :\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Supprimer un groupe d'hôtes :\n" -" ipa hostgroup-del baltimore\n" - -msgid "Host-group" -msgstr "Groupe d'hôtes" - -msgid "Name of host-group" -msgstr "Nom du groupe d'hôtes" - -msgid "A description of this host-group" -msgstr "Description de ce groupe d'hôtes" - -msgid "Member hosts" -msgstr "Hôtes membres" - -msgid "Member host-groups" -msgstr "Groupes d'hôtes membres" - -msgid "Indirect Member hosts" -msgstr "Hôtes membres indirects" - -msgid "Indirect Member host-groups" -msgstr "Groupes d'hôtes membres indirects" - -msgid "Add a new hostgroup." -msgstr "Ajouter un nouveau groupe d'hôtes." - -msgid "Add members to a hostgroup." -msgstr "Ajouter des membres à un groupe d'hôtes." - -msgid "Delete a hostgroup." -msgstr "Supprimer un groupe d'hôtes." - -msgid "Search for hostgroups." -msgstr "Rechercher un groupe d'hôtes." - -#, fuzzy -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« group-name »)" - -#, fuzzy -msgid "Search for host groups with these member hosts." -msgstr "Rechercher des groupes réseaux dont les membres sont ces hôtes." - -#, fuzzy -msgid "Search for host groups without these member hosts." -msgstr "Rechercher des groupes réseaux dont les membres ne sont pas ces hôtes." - -#, fuzzy -msgid "Search for host groups with these member host groups." -msgstr "" -"Rechercher des groupes réseaux dont les membres sont ces groupes d'hôtes." - -#, fuzzy -msgid "Search for host groups without these member host groups." -msgstr "" -"Rechercher des groupes réseaux dont les membres ne sont pas ces groupes " -"d'hôtes." - -#, fuzzy -msgid "Search for host groups with these member of host groups." -msgstr "Rechercher des hôtes avec ces membres de groupes d'hôtes." - -#, fuzzy -msgid "Search for host groups without these member of host groups." -msgstr "Rechercher des hôtes sans ces membres de groupes d'hôtes." - -#, fuzzy -msgid "Search for host groups with these member of netgroups." -msgstr "Rechercher des groupes réseaux avec ces membres de groupes réseau." - -#, fuzzy -msgid "Search for host groups without these member of netgroups." -msgstr "Rechercher des groupes réseaux sans ces membres de groupes réseau." - -#, fuzzy -msgid "Search for host groups with these member of HBAC rules." -msgstr "Rechercher des hôtes avec ces membres de règles HBAC." - -#, fuzzy -msgid "Search for host groups without these member of HBAC rules." -msgstr "Rechercher des hôtes avec ces membres de règles HBAC." - -#, fuzzy -msgid "Search for host groups with these member of sudo rules." -msgstr "Rechercher des systèmes sans ces membres de règles sudo." - -#, fuzzy -msgid "Search for host groups without these member of sudo rules." -msgstr "Rechercher des systèmes sans ces membres de règles sudo." - -msgid "Modify a hostgroup." -msgstr "Modifier un groupe d'hôtes." - -msgid "Remove members from a hostgroup." -msgstr "Supprimer des membres d'un groupe d'hôtes." - -msgid "Display information about a hostgroup." -msgstr "Afficher des informations sur un groupe d'hôtes." - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "Range name" -msgstr "Nom de la plage" - -msgid "First Posix ID of the range" -msgstr "Premier ID POSIX de la plage" - -msgid "Number of IDs in the range" -msgstr "Nombre d'IDs dans la plage" - -msgid "First RID of the corresponding RID range" -msgstr "Premier RID dans la plage de RID correspondante" - -msgid "First RID of the secondary RID range" -msgstr "Premier RID dans la plage de RID secondaire" - -msgid "Domain SID of the trusted domain" -msgstr "SID du domaine approuvé" - -msgid "Name of the trusted domain" -msgstr "Nom du domaine approuvé" - -msgid "Range type" -msgstr "Type de plage" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" -"Type de plage d'identifiants, doit être ipa-ad-trust-posix, ipa-ad-trust ou " -"ipa-local" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" -"\n" -"Ajouter une nouvelle plage d'identifiants.\n" -"\n" -" Pour ajouter une nouvelle plage d'identifiants vous devez toujours " -"préciser\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" En outre,\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" seront indiqués pour une nouvelle plage d'ID dans le domaine local alors " -"que\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" doivent l'être pour ajouter une nouvelle plage pour un domaine AD de " -"confiance.\n" -"\n" -" AVERTISSEMENT :\n" -"\n" -" Le greffon DNA dans 389-ds alloue des ID selon les plages configurées au\n" -" titre du domaine local. Actuellement le greffon DNA *ne peut pas* être\n" -" lui-même reconfiguré selon les plages locales définies par " -"l'intermédiaire\n" -" de cette famille de commandes.\n" -"\n" -" Un changement manuel de configuration doit être opéré dans la " -"configuration\n" -" du greffon DNA pour cadrer avec la nouvelle plage locale. En particulier,\n" -" l'attribut « dnaNextRange » de « cn=Posix IDs »,^n« cn=Distributed Numeric " -"Assignment Plugin », « cn=plugins », « cn=config »\n" -" doivent être modifiés pour correspondre à cette nouvelle plage.\n" -" " - -msgid "Delete an ID range." -msgstr "Supprimer une plage d'ID.." - -msgid "Search for ranges." -msgstr "Rechercher des plages." - -msgid "Modify ID range." -msgstr "Modifier une plage." - -msgid "Display information about a range." -msgstr "Afficher les informations sur une plage." - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -msgid "Anchor to override" -msgstr "Balise à surcharger" - -msgid "Group ID Number" -msgstr "Numéro d'identifiant de groupe" - -msgid "User login" -msgstr "Identifiant de connexion" - -msgid "UID" -msgstr "UID" - -msgid "User ID Number" -msgstr "Numéro d'identifiant utilisateur" - -msgid "GECOS" -msgstr "GECOS" - -msgid "Home directory" -msgstr "Répertoire personnel" - -msgid "Login shell" -msgstr "Interpréteur de commande" - -msgid "ID View Name" -msgstr "Nom de la vue d'identifiants" - -msgid "Add a new Group ID override." -msgstr "Ajouter une nouvelle surcharge d'identifiants de groupes." - -msgid "Delete an Group ID override." -msgstr "Supprimer une surcharge d'identifiants de groupes." - -msgid "Search for an Group ID override." -msgstr "Rechercher une surcharge d'identifiants de groupes" - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« anchor »)" - -msgid "Modify an Group ID override." -msgstr "Modifier une surcharge d'identifiants de groupes." - -msgid "Rename the Group ID override object" -msgstr "Renommer l'objet surcharge d'identifiant de groupe" - -msgid "Display information about an Group ID override." -msgstr "Afficher les informations d'une surcharge d'identifiants de groupes." - -msgid "Add a new User ID override." -msgstr "Ajouter une nouvelle surcharge d'identifiants utilisateurs." - -msgid "Delete an User ID override." -msgstr "Supprimer une surcharge d'identifiants utilisateurs." - -msgid "Search for an User ID override." -msgstr "Rechercher une surcharge d'identifiants utilisateurs" - -msgid "Modify an User ID override." -msgstr "Modifier une surcharge d'identifiants utilisateurs." - -msgid "Rename the User ID override object" -msgstr "Renommer l'objet surcharge d'identifiant d'utilisateur" - -msgid "Display information about an User ID override." -msgstr "Afficher les informations d'une surcharge d'identifiants utilisateurs." - -msgid "Add a new ID View." -msgstr "Ajouter une nouvelle vue d'identifiants" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" -"Applique une vue d'identifiants aux hôtes ou aux membres des groupes d'hôtes " -"indiqués. Si une autre vue d'identifiants était appliquée à l'hôte, elle est " -"remplacée." - -msgid "hosts" -msgstr "hôtes" - -msgid "Hosts to apply the ID View to" -msgstr "Hôtes auxquels appliquer la vue" - -msgid "hostgroups" -msgstr "groupe d'hôtes" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" -"Groupes d'hôtes auxquels s'applique la vue d'identifiants. Veuillez noter " -"que cette vue ne s'applique pas automatiquement aux hôtes ajoutés au groupe " -"après l'exécution de la commande idview-apply." - -msgid "Hosts that this ID View was applied to." -msgstr "Hôtes auxquels s'applique cette vue d'identifiants." - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" -"Hôtes ou groupes d'hôtes auxquels cette vue d'identifiants ne pourra pas " -"être appliquée." - -msgid "Number of hosts the ID View was applied to:" -msgstr "Nombre d'hôtes auxquels la vue d'identifiants a été appliquée :" - -msgid "Delete an ID View." -msgstr "Supprimer une vue d'identifiants." - -msgid "Search for an ID View." -msgstr "Rechercher une vue d'identifiants." - -msgid "Modify an ID View." -msgstr "Modifier une vue d'identifiants." - -msgid "Rename the ID View object" -msgstr "Renommer l'objet surcharge de vue d'identifiants" - -msgid "Display information about an ID View." -msgstr "Afficher les informations d'une vue d'identifiants." - -msgid "Enumerate all the hosts the view applies to." -msgstr "Énumérer tous les hôtes auxquels la vue s'applique." - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" -"Retire l'application de la vue d'identifiants des hôtes ou membres des " -"groupes d'hôtes indiqués." - -msgid "Hosts to clear (any) ID View from." -msgstr "Hôtes dont on va retirer toute vue d'identifiants." - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" -"Groupes d'hôtes dont les hôtes doivent se voir la vue d'identifiants " -"retirée. Veuillez noter que la vue n'est pas automatiquement retirée de tout " -"hôte ajouté au groupe d'hôte après l'exécution de la commande idview-unapply." - -msgid "Hosts that ID View was cleared from." -msgstr "Hôtes dont la vue d'identifiants a été retirée." - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" -"Hôtes ou groupes d'hôtes dont la vue d'identifiants n'a pu être retirée." - -msgid "Number of hosts that had a ID View was unset:" -msgstr "Nombre d'hôtes dont une vue d'identifiants a été retirée :" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" -"\n" -"Greffons non accessibles depuis la ligne de commande, commandes utilisées en " -"interne\n" - -msgid "Dict of I18N messages" -msgstr "Dictionnaire de messages I18N" - -msgid "Export plugin meta-data for the webUI." -msgstr "Exporter les meta-données du greffons pour l'interface Web" - -msgid "Name of object to export" -msgstr "Nom de l'objet à exporter" - -msgid "Name of method to export" -msgstr "Nom de la méthode à exporter" - -msgid "Name of command to export" -msgstr "Nom de la commande à exporter" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "Dictionnaire d'objets IPA codés JSON" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "Dictionnaire de méthode IPA codées JSON" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "Dictionnaire de commande IPA codées JSON" +"Il peut être difficile de manier de tels enregistrements DNS sans erreurs " +"et\n" +"sans entrer de valeur invalide. Le module DNS fournit une abstraction pour\n" +"ces enregistrements bruts afin de manier chaque type RR avec des options\n" +"données. Pour tout type RR pris en charge, le module DNS fournit une option\n" +"standard pour manier l'enregistrement brut avec le format ---rec,\n" +"ex. --mx-rec, et des options spéciales pour chaque élément de structure RR\n" +"avec le format ---, ex. --mx-preference ou --mx-" +"exchanger.\n" msgid "" "\n" @@ -5903,20 +3473,44 @@ msgstr "" "\n" "Rejoindre un domaine IPA\n" -msgid "Join an IPA domain" -msgstr "Rejoindre un domaine IPA" - -msgid "The hostname to register as" -msgstr "Le nom d'hôte sous lequel enregistrer" - -msgid "The IPA realm" -msgstr "Le domaine IPA" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "Plate-forme matérielle de l'hôte (par ex. Lenovo T61)" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "Système d'exploitation et version de l'hôte (par ex. Fedora 9)" +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" +"\n" +"Options de « pkinit » de Kerberos\n" +"\n" +"Activer ou désactiver l'opération « pkinit » anonyme en utilisant le\n" +"principal WELLKNOWN/ANONYMOUS@REALM. Le serveur doit avoir\n" +"été installé avec la prise en charge de « pkinit ».\n" +"\n" +"EXEMPLES :\n" +"\n" +" Activer le « pkinit » anonyme :\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Désactiver le « pkinit » anonyme :\n" +" ipa pkinit-anonymous disable\n" +"\n" +"Pour plus d'informations sur « pkinit » anonyme, cf. :\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" msgid "" "\n" @@ -6000,29 +3594,250 @@ msgstr "" " Modifie la politique de ticket Kerberos de l'utilisateur 'admin' :\n" " ipa krbtpolicy-mod admin --maxlife=3600\n" -msgid "Manage ticket policy for specific user" -msgstr "Administrer la politique de ticket pour un utilisateur donné" +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" +"\n" +"Gestion des règles de LCA de l'AC.\n" +"\n" +"Ce grffon est utilisé pour définir les règles gouvernant quels principaux \n" +"sont autorisés à se voir attribuer des certificats à l'aide d'un profil\n" +"donné de certificat.\n" +"\n" +"SYNTAXE D'IDENTIFIANT DE PROFIL :\n" +"\n" +"Un identifiant de profil est une chaîne sans espace ni ponctuation débutant " +"par\n" +"une lettre et suivie d'une séquence de lettres, chiffres, ou caractère " +"souligné (\"_\").\n" +"\n" +"EXEMPLES :\n" +"\n" +" Créer une LCA d'AC « test » autorisant tous les utilisateurs à accéder \n" +" au profil « UserCert » :\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Afficher les propriétés d'une LCA d'AC nommée :\n" +" ipa caacl-show test\n" +"\n" +" Créer une LCA d'AC autorisant l'utilisatrice « alice » à utiliser le " +"profile « DNP3 » :\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Désactiver une LCA d'AC :\n" +" ipa caacl-disable test\n" +"\n" +" Supprimer une LCA d'AC :\n" +" ipa caacl-del test\n" -msgid "Max life" -msgstr "Vie max." +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" +"\n" +"Gestion des profils de certificats\n" +"\n" +"Les profils de certificats sont utilisés par l'autorité de certification " +"(AC) dans\n" +"la signature de certificats afin de déterminer si une demande de signature " +"de\n" +"certificat (Certificate Signing Request, CSR) est acceptable, et si oui, " +"quelles\n" +"fonctionnalités et extensions doivent figurer dans le certificat.\n" +"\n" +"Le format du profil de certificat est un format de liste de propriétés qui " +"sera\n" +"compris par une autorité de certification Dogtag ou Red Hat Certificate " +"System.\n" +"\n" +"SYNTAXE DE L'IDENTIFIANT DE PROFIL :\n" +"\n" +"Un identifiant de profil est une chaîne de caractères sans espaces ni " +"caractère de\n" +"ponctuation débutant par une lettre suivie d'une séquence de lettres, de " +"chiffres et\n" +"de caractère souligné (« _ »).\n" +"\n" +"EXEMPLES :\n" +"\n" +" Importer un profil qui ne stockera pas les certificats émis :\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --summary \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Supprimer un profil de certificat :\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Afficher les informations sur un profil :\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Enregistrer la configuration du profil dans un fichier :\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Rechercher des profils ne stockant pas les certificats :\n" +" ipa certprofile-find --store=false\n" +"\n" +"FORMAT DE LA CONFIGURATION DE PROFIL :\n" +"\n" +"Le format de configuration de profil est un format brut de liste de \n" +"propriété utilisé par Dogtag Certificate System. Le format XML n'est\n" +"pas pris en charge.\n" +"\n" +"Les restrictions suivantes s'appliquent aux profils gérés par IPA :\n" +"\n" +"- Lors de l'import d'un profil, le champ « profileId » s'il est présent " +"doit\n" +" correspondre à l'identifiant donné sur la ligne de commande.\n" +"\n" +"- Le champ « classId » doit être « caEnrollImpl »\n" +"\n" +"- Le champ « auth.instance_id  doit être « raCertAuth »\n" +"\n" +"- Les classe d'entrée « certReqInputImpl » et de sortie « certOutputImpl » " +"doivent \n" +" être utilisées.\n" -msgid "Maximum ticket life (seconds)" -msgstr "Durée de vie maximale (secondes)" +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" +"\n" +"Gérer la zone DNS et les enregistrements de ressources.\n" -msgid "Max renew" -msgstr "Renouvellement max." +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" +"\n" +"Gérer les jetons OTP.\n" -msgid "Maximum renewable age (seconds)" -msgstr "Durée maximale de la période de renouvellement (secondes)" +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" +"\n" +"Gestion des serveurs mandataires RADIUS.\n" -msgid "Modify Kerberos ticket policy." -msgstr "Modifier la politique de tickets Kerberos." +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" +"\n" +"Gestion de jetons YubiKey.\n" -msgid "Reset Kerberos ticket policy to the default values." -msgstr "Réinitialiser la politique de tickets Kerberos." +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" +"\n" +"Gestion des coffres-forts.\n" -msgid "Display the current Kerberos ticket policy." -msgstr "Afficher la politique de tickets Kerberos." +msgid "" +"\n" +"Managed permissions\n" +msgstr "" +"\n" +"Permissions administrées\n" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" +"\n" +"Manipulation des emplacements DNS\n" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" +"\n" +"Manipulation de la configuration du serveur DNS\n" msgid "" "\n" @@ -6222,21559 +4037,6 @@ msgstr "" "alors une entrée est inscrite pour chaque utilisateur ajouté, plus un\n" "résumé quand le groupe utilisateur par défaut est mis à jour.\n" -msgid "Migrate users and groups from DS to IPA." -msgstr "Migrer les utilisateurs et groupes de DS vers IPA." - -msgid "LDAP URI" -msgstr "URI LDAP" - -msgid "LDAP URI of DS server to migrate from" -msgstr "URI LDAP du serveur DS depuis lequel effectuer la migration" - -msgid "bind password" -msgstr "mot de passe de connexion" - -msgid "Bind DN" -msgstr "DN de connexion" - -msgid "User container" -msgstr "Conteneur d'utilisateur" - -msgid "DN of container for users in DS relative to base DN" -msgstr "DN du conteneur pour les utilisateurs dans le DS relatif au DN de base" - -msgid "Group container" -msgstr "Conteneur de groupes" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "DN du conteneur pour des groupes dans le DS relatif au DN de base" - -msgid "User object class" -msgstr "Classe d'objets utilisateur" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "" -"Classes d'objets à utiliser pour la recherche d'entrées utilisateurs dans DS" - -msgid "Group object class" -msgstr "Classe d'objets groupe" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "Classes d'objets à utiliser pour la recherche d'entrées groupe dans DS" - -msgid "Ignore user object class" -msgstr "Classe d'objets utilisateur à ignorer" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "Classes d'objets à ignorer pour des entrées utilisateur dans DS" - -msgid "Ignore user attribute" -msgstr "Attribut utilisateur à ignorer" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "Attributs à ignorer dans des entrées utilisateur dans DS" - -msgid "Ignore group object class" -msgstr "Classe d'objets groupe à ignorer" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "Classes d'objets à ignorer pour les entrées groupe dans DS" - -msgid "Ignore group attribute" -msgstr "Attribut groupe à ignorer" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "Attributs à ignorer dans les entrées groupe dans DS" - -msgid "Overwrite GID" -msgstr "Surcharger le GID" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" -"Lors de la migration d'un groupe existant déjà dans le domaine IPA, " -"surcharger le GID du groupe et renvoyer un succès" - -msgid "LDAP schema" -msgstr "Schéma LDAP" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" -"Le schéma utilisé sur le serveur LDAP. Les valeurs prises en charge sont " -"RFC2307 et RFC2307bis. La valeur par défaut est RFC2307bis" - -msgid "Continue" -msgstr "Continuer" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" -"Mode continu. Les erreurs sont rapportées mais le processus se poursuit" - -msgid "Base DN" -msgstr "DN de base" - -msgid "Base DN on remote LDAP server" -msgstr "DN de base sur le serveur LDAP distant" - -msgid "Ignore compat plugin" -msgstr "Ignorer le greffon « compat »" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "Autoriser la migration malgré l'utilisation du greffon « compat »" - -msgid "CA certificate" -msgstr "Certificat d'AC" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "Charger le certificat de l'AC du serveur LDAP depuis FILE" - -msgid "groups to exclude from migration" -msgstr "groupes à exclure de la migration" - -msgid "users to exclude from migration" -msgstr "utilisateurs à exclure de la migration" - -msgid "Lists of objects migrated; categorized by type." -msgstr "Liste des objets migrés, catégorisés par type." - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "Liste des objets n'ayant pu être migrés, catégorisés par type." - -msgid "False if migration mode was disabled." -msgstr "Faux si le mode de migration a été désactivé." - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" -"False si la migration échoue parce que le greffon « compat » est activé." - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" -"\n" -"Greffons divers\n" - -msgid "Show environment variables." -msgstr "Afficher les variables d'environnement." - -msgid "Forward to server instead of running locally" -msgstr "Rediriger vers le serveur au lieu d'exécuter localement" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" -"récupère et affiche tous les attributs du serveur. Modifie la sortie de la " -"commande." - -msgid "Total number of variables env (>= count)" -msgstr "Nombre total de variables d'environnement (>= count)" - -msgid "Number of variables returned (<= total)" -msgstr "Nombre de variables renvoyées (<= total)" - -msgid "Show all loaded plugins." -msgstr "Afficher tous les greffons chargés." - -#, fuzzy -msgid "Dictionary mapping plugin names to bases" -msgstr "Annuaire associant un nom de variable à une valeur" - -msgid "Number of plugins loaded" -msgstr "Nombre de greffons chargés" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" -"\n" -"Groupes réseau\n" -"\n" -"Un groupe réseau est un groupe utilisé pour la vérification des droits.\n" -"Il peut contenir à la fois des valeurs utilisateur et hôte.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouveau groupe réseau :\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Ajouter des membres au groupe réseau :\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Retirer un membre du groupe réseau :\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Afficher les informations sur un groupe réseau :\n" -" ipa netgroup-show admins\n" -"\n" -" Supprimer un groupe réseau :\n" -" ipa netgroup-del admins\n" - -msgid "Netgroup name" -msgstr "Nom de groupe réseau" - -msgid "Netgroup description" -msgstr "Description de groupe réseau" - -msgid "NIS domain name" -msgstr "Nom de domaine NIS" - -msgid "IPA unique ID" -msgstr "ID unique IPA" - -msgid "Member netgroups" -msgstr "Groupes réseau membre" - -msgid "Indirect Member netgroups" -msgstr "Groupes réseau de membres indirects" - -msgid "Member User" -msgstr "Utilisateur membre" - -msgid "Member Group" -msgstr "Groupe membre" - -msgid "Member Host" -msgstr "Hôte membre" - -msgid "Member Hostgroup" -msgstr "Groupe d'hôtes membre" - -msgid "Add a new netgroup." -msgstr "Ajouter un nouveau groupe réseau." - -msgid "Add members to a netgroup." -msgstr "Ajouter des membres à un groupe réseau." - -msgid "member netgroup" -msgstr "Groupe réseau membre" - -msgid "netgroups to add" -msgstr "Groupes réseau à ajouter" - -msgid "Delete a netgroup." -msgstr "Supprimer un groupe réseau." - -msgid "Search for a netgroup." -msgstr "Rechercher un groupe réseau." - -msgid "search for managed groups" -msgstr "rechercher les groupes administrés" - -msgid "Search for netgroups with these member netgroups." -msgstr "" -"Rechercher des groupes réseaux dont les membres sont ces groupes réseau." - -msgid "Search for netgroups without these member netgroups." -msgstr "" -"Rechercher des groupes réseaux dont les membres ne sont pas ces groupes " -"réseau." - -msgid "Search for netgroups with these member users." -msgstr "Rechercher des groupes réseaux dont les membres sont ces utilisateurs." - -msgid "Search for netgroups without these member users." -msgstr "" -"Rechercher des groupes réseaux dont les membres ne sont pas ces utilisateurs." - -msgid "Search for netgroups with these member groups." -msgstr "Rechercher des groupes réseaux dont les membres sont ces groupes." - -msgid "Search for netgroups without these member groups." -msgstr "" -"Rechercher des groupes réseaux dont les membres ne sont pas ces groupes." - -msgid "Search for netgroups with these member hosts." -msgstr "Rechercher des groupes réseaux dont les membres sont ces hôtes." - -msgid "Search for netgroups without these member hosts." -msgstr "Rechercher des groupes réseaux dont les membres ne sont pas ces hôtes." - -msgid "Search for netgroups with these member host groups." -msgstr "" -"Rechercher des groupes réseaux dont les membres sont ces groupes d'hôtes." - -msgid "Search for netgroups without these member host groups." -msgstr "" -"Rechercher des groupes réseaux dont les membres ne sont pas ces groupes " -"d'hôtes." - -msgid "Search for netgroups with these member of netgroups." -msgstr "Rechercher des groupes réseaux avec ces membres de groupes réseau." - -msgid "Search for netgroups without these member of netgroups." -msgstr "Rechercher des groupes réseaux sans ces membres de groupes réseau." - -msgid "Modify a netgroup." -msgstr "Modifier un groupe réseau." - -msgid "Remove members from a netgroup." -msgstr "Supprimer des membres d'un groupe réseau." - -msgid "netgroups to remove" -msgstr "Groupes réseau à supprimer" - -msgid "Display information about a netgroup." -msgstr "Afficher l'information sur un groupe réseau." - -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" -"\n" -"Configuration OTP\n" -"\n" -"Gestion des valeurs par défaut utilisées par IPA pour les jetons OTP.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Afficher la configuration de base OTP :\n" -" ipa otpconfig-show\n" -"\n" -" Afficher toutes les options de configuration OTP :\n" -" ipa otpconfig-show --all\n" -"\n" -" Modifier la fenêtre maximale d'authentification TOTP à 10 minutes :\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Modifier la fenêtre maximale d'authentification TOTP à 12 heures :\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Modifier la fenêtre maximale d'authentification HOTP à 5 :\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Modifier la fenêtre maximale d'authentification HOTP à 50 :\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" - -msgid "TOTP authentication Window" -msgstr "Fenêtre d'authentification TOTP" - -msgid "TOTP authentication time variance (seconds)" -msgstr "Durée de la fenêtre d'authentification TOTP (secondes)" - -msgid "TOTP Synchronization Window" -msgstr "Fenêtre de synchronisation TOTP" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "Variance temporelle de synchronisation TOTP (secondes)" - -msgid "HOTP Authentication Window" -msgstr "Fenêtre d'authentification HOTP" - -msgid "HOTP authentication skip-ahead" -msgstr "passage d'occurrence d'authentification HOTP" - -msgid "HOTP Synchronization Window" -msgstr "Fenêtre de synchronisation HOTP" - -msgid "HOTP synchronization skip-ahead" -msgstr "passage d'occurrence de synchronisation HOTP" - -msgid "Modify OTP configuration options." -msgstr "Modifier les options de configuration OTP." - -msgid "Show the current OTP configuration." -msgstr "Afficher la configuration OTP actuelle." - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" -"\n" -"Jetons OTP\n" -"\n" -"Configuration des jetons OTP.\n" -"\n" -"IPA prend en charge l'utilisation de jetons OTP pour une authentification\n" -"à facteurs multiples. Ce code active la gestion des jetons OTP.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouveau jeton :\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examiner un jeton :\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Modifier le fournisseur :\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Supprimer un jeton :\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" - -msgid "Unique ID" -msgstr "ID unique" - -msgid "Type of the token" -msgstr "Type du jeton" - -msgid "Token description (informational only)" -msgstr "Description du jeton (à titre d'information)" - -msgid "Owner" -msgstr "Propriétaire" - -msgid "Assigned user of the token (default: self)" -msgstr "Utilisateur assigné au jeton (par défaut : soi-même)" - -msgid "Manager" -msgstr "Gestionnaire" - -msgid "Assigned manager of the token (default: self)" -msgstr "Administrateur assigné au jeton (par défaut : soi-même)" - -msgid "Disabled" -msgstr "Désactivé" - -msgid "Mark the token as disabled (default: false)" -msgstr "Marquer le jeton comme désactivé (par défaut : faux, false)" - -msgid "Validity start" -msgstr "Départ de validation" - -msgid "First date/time the token can be used" -msgstr "Date et heure à partir desquels le jeton peut être utilisé" - -msgid "Validity end" -msgstr "Fin de validation" - -msgid "Last date/time the token can be used" -msgstr "Date et heure au delà desquels le jeton ne peut plus être utilisé" - -msgid "Vendor" -msgstr "Fournisseur" - -msgid "Token vendor name (informational only)" -msgstr "Nom du fabricant du jeton (à titre d'information)" - -msgid "Model" -msgstr "Modèle" - -msgid "Token model (informational only)" -msgstr "Modèle du jeton (à titre d'information)" - -msgid "Serial" -msgstr "Numéro de série" - -msgid "Token serial (informational only)" -msgstr "Numéro de série du jeton (à titre d'information)" - -msgid "Token secret (Base32; default: random)" -msgstr "Secret du jeton (Base32 ; par défaut : aléatoire)" - -msgid "Token hash algorithm" -msgstr "Algorithme de hachage du jeton" - -msgid "Digits" -msgstr "Chiffres" - -msgid "Number of digits each token code will have" -msgstr "Nombre de chiffres des codes du jeton" - -msgid "Clock offset" -msgstr "Décalage d'horloge" - -msgid "TOTP token / IPA server time difference" -msgstr "Différence entre le jeton TOTP et le serveur IPA" - -msgid "Clock interval" -msgstr "Intervalle d'horloge" - -msgid "Length of TOTP token code validity" -msgstr "Durée de validité du code du jeton TOTP" - -msgid "Counter" -msgstr "Compteur" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "Ajouter un nouveau jeton OTP" - -msgid "(deprecated)" -msgstr "(obsolète)" - -msgid "Do not display QR code" -msgstr "Ne pas afficher le code QR" - -msgid "Add users that can manage this token." -msgstr "Ajouter des utilisateurs pouvant gérer ce jeton." - -msgid "Delete an OTP token." -msgstr "Supprimer un jeton OTP" - -msgid "Search for OTP token." -msgstr "Rechercher un jeton OTP" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« id »)" - -msgid "Modify a OTP token." -msgstr "Modifier un jeton OTP" - -msgid "Rename the OTP token object" -msgstr "Renommer l'objet jeton OTP" - -msgid "Display information about an OTP token." -msgstr "Afficher des informations au sujet du jeton OTP" - -#, fuzzy -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" -"\n" -"Ce code est une extension du greffon « otptoken » ; il fournit la prise en\n" -"charge pour lire/écrire des jetons YubiKey directement.\n" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" -"\n" -"Définir le mot de passe d'un utilisateur\n" -"\n" -"Si une personne autre que l'utilisateur change le mot de passe de cet\n" -"utilisateur (par exemple en cas de réinitialisation par les services\n" -"d'assistance technique), le mot de passe devra être modifié la première\n" -"fois qu'il sera utilisé, afin que l'utilisateur soit le seul à connaître\n" -"son mot de passe.\n" -"\n" -"La politique de mot de passe de IPA contrôle la fréquence de changement\n" -"des mots de passe, les prérequis de leur résistance, et la taille\n" -"de l'historique des mots de passe.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Réinitialiser son propre mot de passe :\n" -" ipa passwd\n" -"\n" -" Modifier le mot de passe d'un utilisateur :\n" -" ipa passwd tuser1\n" - -msgid "Set a user's password." -msgstr "Définir le mot de passe d'un utilisateur." - -msgid "New Password" -msgstr "Nouveau mot de passe" - -msgid "Current Password" -msgstr "Mot de passe actuel" - -msgid "OTP" -msgstr "OTP" - -msgid "One Time Password" -msgstr "Mots de passe à usage unique" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -"\n" -"Managed permissions\n" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "Permission name" -msgstr "Nom de permission" - -msgid "Granted rights" -msgstr "Droits accordés" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "Droits à accorder (read, search, compare, write, add, delete, all)" - -msgid "Effective attributes" -msgstr "Attributs impactés" - -msgid "All attributes to which the permission applies" -msgstr "Tous les attributs auxquels la permission s'applique" - -msgid "Included attributes" -msgstr "Attributs inclus" - -msgid "User-specified attributes to which the permission applies" -msgstr "Attributs propres à un utilisateur auxquels la permission s'applique" - -msgid "Excluded attributes" -msgstr "Attributs exclus" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" -"Attributs propres à un utilisateur auxquels la permission ne s'applique " -"explicitement pas" - -msgid "Default attributes" -msgstr "Attributs par défaut" - -msgid "Attributes to which the permission applies by default" -msgstr "Attributs auxquels la permission s'applique par défaut" - -msgid "Bind rule type" -msgstr "Type de règle liée" - -msgid "Subtree to apply permissions to" -msgstr "Branche à laquelle appliquer les permissions" - -msgid "Extra target filter" -msgstr "Filtre cible supplémentaire" - -msgid "Raw target filter" -msgstr "Filtre cible brut" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" -"Tous les filtres cible, y compris ceux définis avec « type » et « memberof »" - -msgid "Target DN" -msgstr "DN cible" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" -"DN optionnel auquel appliquer les permissions (doit être dans le sous-arbre, " -"mais peut ne pas encore exister)" - -msgid "Member of group" -msgstr "Membre du groupe" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "Membres cibles d'un groupe (définit « memberof » du filtre cible)" - -msgid "User group to apply permissions to (sets target)" -msgstr "" -"Groupe d'utilisateurs auquel appliquer les permissions (définit « target »)" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "" -"Type d'objets IPA (définit le sous-arbre et le filtre cible de la classe " -"d'objets)" - -#, fuzzy -msgid "Deprecated; use extratargetfilter" -msgstr "Abandonné ; utiliser %s" - -#, fuzzy -msgid "Deprecated; use ipapermlocation" -msgstr "Abandonné ; utiliser %s" - -#, fuzzy -msgid "Deprecated; use ipapermright" -msgstr "Abandonné ; utiliser %s" - -#, fuzzy -msgid "Granted to Privilege" -msgstr "Droits accordés" - -msgid "Indirect Member of roles" -msgstr "Membres indirect des rôles" - -msgid "Add a new permission." -msgstr "Ajouter une nouvelle permission." - -#, fuzzy -msgid "Add members to a permission." -msgstr "Ajouter des membres à un privilège." - -#, fuzzy -msgid "member privilege" -msgstr "Ajouter des membres à un privilège." - -#, fuzzy -msgid "privileges to add" -msgstr "privilèges" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "Ajout d'une permission système sans ACI (commande interne)" - -msgid "Permission flags" -msgstr "Marqueurs de permission" - -msgid "Delete a permission." -msgstr "Supprimer une permission." - -msgid "force delete of SYSTEM permissions" -msgstr "forcer la suppression des permissions SYSTEM" - -msgid "Search for permissions." -msgstr "Recherche des permissions." - -msgid "Modify a permission." -msgstr "Modifier une permission." - -#, fuzzy -msgid "Rename the permission object" -msgstr "Renommer l'objet groupe" - -#, fuzzy -msgid "Remove members from a permission." -msgstr "Supprimer des membres d'un rôle." - -#, fuzzy -msgid "privileges to remove" -msgstr "rôles à supprimer" - -msgid "Display information about a permission." -msgstr "Afficher les informations sur une permission." - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" -"\n" -"« Ping » sur un serveur IPA distant pour s'assurer de son fonctionnement.\n" -"\n" -"La commande « ping » envoie une requête « echo « au serveur IPA. Le serveur\n" -"renvoie ses informations de version. Ce mécanisme est utilisé par le client\n" -"IPA pour confirmer que le serveur est disponible et est en mesure " -"d'accepter\n" -"les requêtes.\n" -"\n" -"Le serveur indiqué par « xmlrpc_uri » dans « /etc/ipa/default.conf » est\n" -"contacté en premier. S'il ne répond pas alors le client contactera " -"n'importe\n" -"quel autre serveur défini dans les enregistrements SRV du DNS.\n" -"\n" -"EXEMPLES :\n" -"\n" -" « Ping » d'un serveur IPA :\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" « Ping » verbeux d'un serveur IPA :\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" - -msgid "Ping a remote server." -msgstr "« Ping » sur un serveur distant." - -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" -"\n" -"Options de « pkinit » de Kerberos\n" -"\n" -"Activer ou désactiver l'opération « pkinit » anonyme en utilisant le\n" -"principal WELLKNOWN/ANONYMOUS@REALM. Le serveur doit avoir\n" -"été installé avec la prise en charge de « pkinit ».\n" -"\n" -"EXEMPLES :\n" -"\n" -" Activer le « pkinit » anonyme :\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Désactiver le « pkinit » anonyme :\n" -" ipa pkinit-anonymous disable\n" -"\n" -"Pour plus d'informations sur « pkinit » anonyme, cf. :\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "Active ou désactive un PKINIT anonyme" - -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" -"\n" -"Privilèges\n" -"\n" -"Un privilège combine les permissions en tâches logiques. Une permission\n" -"fournit les droits de réaliser une tâche unique. Certaines opérations IPA\n" -"requièrent une combinaison de plusieurs permissions. Un privilège est la\n" -"combinaison de ces permissions pour réaliser une tâche.\n" -"\n" -"Par exemple, la création d'utilisateurs requiert les permissions " -"suivantes :\n" -" * création d'une nouvelle entrée\n" -" * réinitialisation du mot de passe\n" -" * ajout du nouvel utilisateur au groupe d'utilisateurs par défaut de IPA\n" -"\n" -"La combinaison de ces trois tâches de bas niveau en privilège nommé\n" -"« Add User » facilite la gestion des rôles.\n" -"\n" -"Un privilège ne peut contenir d'autres privilèges.\n" -"\n" -"Reportez-vous la gestion des rôles et des permissions pour plus " -"d'informations.\n" - -msgid "Privilege name" -msgstr "Nom du privilège" - -msgid "Privilege description" -msgstr "Description du privilège" - -msgid "Granting privilege to roles" -msgstr "Privilèges accordés aux rôles" - -msgid "Add a new privilege." -msgstr "Ajouter un nouveau privilège." - -msgid "Add members to a privilege." -msgstr "Ajouter des membres à un privilège." - -#, fuzzy -msgid "member role" -msgstr "groupe membre" - -#, fuzzy -msgid "roles to add" -msgstr "groupes à ajouter" - -msgid "Add permissions to a privilege." -msgstr "Ajouter des permissions à un privilège." - -msgid "permission" -msgstr "permission" - -msgid "permissions" -msgstr "permissions" - -msgid "Number of permissions added" -msgstr "Nombre de permissions ajoutées" - -msgid "Delete a privilege." -msgstr "Supprimer un privilège" - -msgid "Search for privileges." -msgstr "Rechercher des privilèges." - -msgid "Modify a privilege." -msgstr "Modifier un privilège." - -#, fuzzy -msgid "Rename the privilege object" -msgstr "Renommer l'objet surcharge de vue d'identifiants" - -msgid "Remove members from a privilege" -msgstr "Supprimer les membres d'un privilège" - -msgid "roles to remove" -msgstr "rôles à supprimer" - -msgid "Remove permissions from a privilege." -msgstr "Supprimer des permissions d'un privilège." - -msgid "Number of permissions removed" -msgstr "Nombre de permissions supprimées" - -msgid "Display information about a privilege." -msgstr "Afficher les informations sur un privilège." - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" -"\n" -"Politique de mots de passe\n" -"\n" -"Une politique de mots de passe permet de définir des limites sur les mots " -"de\n" -"passe dans IPA, comme leur durée de vie, minimale ou maximale, la taille de\n" -"l'historique de mots de passe, le nombre de classes de caractères requises\n" -"(pour la résistance à force brute) et la longueur minimale du mot de passe.\n" -"\n" -"Par défaut, une politique unique et globale est définie pour tous les\n" -"utilisateurs. Vous pouvez aussi créer une politique à appliquer à un " -"groupe.\n" -"Chaque utilisateur est l'objet d'une seule politique de mots de passe, par\n" -"un groupe ou par la politique globale. Une politique de groupe remplace\n" -"totalement la politique globale ; elle n'est pas la somme de la politique\n" -"globale plus quelques paramètres spécifiques.\n" -"\n" -"Chaque politique de groupe requiert un paramètre de priorité unique. Si un\n" -"utilisateur appartient à plusieurs groupes ayant des politiques " -"différentes,\n" -"la priorité sera utilisée afin de déterminer quelle politique appliquer.\n" -"Une petite valeur indique une priorité élevée de politique.\n" -"\n" -"Les politiques de mots de passe sont automatiquement supprimées quand les\n" -"groupes auxquels elles ont été associées sont supprimés.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Modifier la politique globale :\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Ajouter une nouvelle politique de groupe :\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Afficher la politique de mots de passe globale :\n" -" ipa pwpolicy-show\n" -"\n" -" Afficher une politique de mots de passe de groupe :\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Afficher la politique applicable à un utilisateur :\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modifier une politique de mots de passe de groupe :\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" - -msgid "Group" -msgstr "Groupe" - -msgid "Manage password policy for specific group" -msgstr "Gérer la politique de mots de passe d'un groupe spécifique" - -msgid "Max lifetime (days)" -msgstr "Durée de vie maximale (jours)" - -msgid "Maximum password lifetime (in days)" -msgstr "Durée de vie maximale d'un mot de passe (en jours)" - -msgid "Min lifetime (hours)" -msgstr "Durée de vie minimale (jours)" - -msgid "Minimum password lifetime (in hours)" -msgstr "Durée de vie maximale d'un mot de passe (en jours)" - -msgid "History size" -msgstr "Taille de l'historique" - -msgid "Password history size" -msgstr "Taille de l'historique des mots de passe" - -msgid "Character classes" -msgstr "Classes de caractères" - -msgid "Minimum number of character classes" -msgstr "Nombre minimal de classes de caractères" - -msgid "Min length" -msgstr "Longueur minimale" - -msgid "Minimum length of password" -msgstr "Taille minimale d'un mot de passe" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "Priorité de la politique (une valeur élevé indique une priorité basse)" - -msgid "Max failures" -msgstr "Nombre maximal d'échecs" - -msgid "Consecutive failures before lockout" -msgstr "Échecs consécutifs avant verrouillage" - -msgid "Failure reset interval" -msgstr "Délai de réinitialisation après échec" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "Temps après lequel le compteur d'échecs sera réinitialisé (secondes)" - -msgid "Lockout duration" -msgstr "Durée du verrouillage" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "Durée pendant laquelle le verrouillage est actif (secondes)" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« cn »)" - -msgid "Add a new group password policy." -msgstr "Ajouter une nouvelle politique de mot de passe." - -msgid "Delete a group password policy." -msgstr "Supprimer une politique de mot de passe." - -msgid "Search for group password policies." -msgstr "Rechercher des politiques de mot de passe de groupe." - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale (« " -"group »)" - -msgid "Modify a group password policy." -msgstr "Modifier une politique de mot de passe de groupe." - -msgid "Display information about password policy." -msgstr "Afficher les informations sur une politique de mot de passe." - -msgid "User" -msgstr "Utilisateur" - -msgid "Display effective policy for a specific user" -msgstr "Afficher la politique effective d'un utilisateur donné" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Gestion des serveurs mandataires RADIUS.\n" -"\n" -"IPA prend en charge l'utilisation d'un serveur mandataire externe RADIUS\n" -"pour des authentifications OTP « krb5 ». Cela procure une grande souplesse\n" -"pour l'intégration des services d'authentification tierce partie.\n" -"\n" -"\n" -"EXEMPLES:\n" -"\n" -" Ajouter un nouveau serveur :\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Rechercher tous les serveurs dont les entrées incluent la chaîne « example." -"com » :\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Afficher la configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Modifier le secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Supprimer la configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" - -msgid "RADIUS proxy server name" -msgstr "Nom du serveur mandataire RADIUS" - -msgid "A description of this RADIUS proxy server" -msgstr "Description de ce serveur mandataire RADIUS" - -msgid "Server" -msgstr "Serveur" - -msgid "The hostname or IP (with or without port)" -msgstr "Nom d'hôte ou adresse IP (avec ou sans port)" - -msgid "Secret" -msgstr "Secret" - -msgid "The secret used to encrypt data" -msgstr "Secret utilisé pour chiffrer les données" - -msgid "Timeout" -msgstr "Délai d'expiration" - -msgid "The total timeout across all retries (in seconds)" -msgstr "Délai d'expiration total pour toutes les tentatives (en secondes)" - -msgid "Retries" -msgstr "Tentatives" - -msgid "The number of times to retry authentication" -msgstr "Le nombre de fois autorisées pour tenter une authentification" - -msgid "User attribute" -msgstr "Attribut utilisateur" - -msgid "The username attribute on the user object" -msgstr "L'attribut de nom d'utilisateur de l'objet utilisateur" - -msgid "Add a new RADIUS proxy server." -msgstr "Ajouter un nouveau serveur mandataire RADIUS." - -msgid "Delete a RADIUS proxy server." -msgstr "Supprimer un serveur mandataire RADIUS." - -msgid "Search for RADIUS proxy servers." -msgstr "Rechercher des serveurs mandataires RADIUS." - -msgid "Modify a RADIUS proxy server." -msgstr "Modifier un serveur mandataire RADIUS" - -#, fuzzy -msgid "Rename the RADIUS proxy server object" -msgstr "Supprimer un serveur mandataire RADIUS." - -msgid "Display information about a RADIUS proxy server." -msgstr "Afficher les informations sur un serveur mandataire RADIUS." - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" -"\n" -"Domaines du royaume\n" -"\n" -"Gérer la liste des domaines associés au royaume IPA.\n" -"\n" -"EXEMPLES:\n" -"\n" -" Afficher la liste actuelle des domaines du royaume :\n" -" ipa realmdomains-show\n" -"\n" -" Remplacer la liste des domaines du royaume :\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Ajouter un domaine à la liste des domaines du royaume :\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Supprimer un domaine de la liste des domaines du royaume :\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" - -msgid "Domain" -msgstr "Domaine" - -msgid "Add domain" -msgstr "Ajouter un domaine" - -msgid "Delete domain" -msgstr "Supprimer un domaine" - -msgid "Modify realm domains." -msgstr "Modifier les domaines du royaume." - -msgid "Force adding domain even if not in DNS" -msgstr "Forcer l'ajout d'un domaine même si absent des DNS" - -msgid "Display the list of realm domains." -msgstr "Afficher la liste des domaines du royaume." - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" -"\n" -"Rôles\n" -"\n" -"Les rôles sont utilisés pour affiner les délégations. Une permission " -"accorde\n" -"la capacité d'effectuer une tâche de bas niveau (ajouter un utilisateur,\n" -"modifier un groupe, etc.). Un privilège combine une ou plusieurs\n" -"permissions en une abstraction de plus haut niveau comme « useradmin ». Un\n" -"administrateur d'utilisateur (useradmin) sera capable d'ajouter, modifier\n" -"et supprimer des utilisateurs.\n" -"\n" -"Les privilèges sont assignés aux rôles.\n" -"\n" -"Peuvent être membres d'un rôle des utilisateurs, des groupes, des systèmes\n" -"et des groupes de systèmes.\n" -"\n" -"Les rôles ne peuvent contenir d'autres rôles.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouveau rôle :\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Ajouter des privilèges à ce rôle :\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Ajouter un groupe d'utilisateurs à ce rôle :\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Afficher les informations sur un rôle :\n" -" ipa role-show junioradmin\n" -"\n" -" Le résultat des commandes ci-dessus fait que le groupe « junioradmin »\n" -" peut ajouter des utilisateurs, réinitialiser des mots de passe, ou ajouter\n" -" un utilisateur au groupe d'utilisateur par défaut de IPA.\n" - -msgid "Role name" -msgstr "Nom du rôle" - -msgid "A description of this role-group" -msgstr "Description de ce groupe de rôles" - -msgid "Privileges" -msgstr "Privilèges" - -msgid "Member services" -msgstr "Services membres" - -msgid "Add a new role." -msgstr "Ajouter un nouveau rôle." - -msgid "Add members to a role." -msgstr "Ajouter des membres à un rôle." - -#, fuzzy -msgid "member service" -msgstr "Services membres" - -#, fuzzy -msgid "services to add" -msgstr "Services HBAC à ajouter" - -msgid "Add privileges to a role." -msgstr "Ajouter des privilèges à un rôle." - -msgid "privilege" -msgstr "privilège" - -msgid "privileges" -msgstr "privilèges" - -msgid "Number of privileges added" -msgstr "Nombre de privilèges ajoutés" - -msgid "Delete a role." -msgstr "Supprimer un rôle" - -msgid "Search for roles." -msgstr "Rechercher des rôles." - -msgid "Modify a role." -msgstr "Modifier un rôle." - -#, fuzzy -msgid "Rename the role object" -msgstr "Renommer l'objet groupe" - -msgid "Remove members from a role." -msgstr "Supprimer des membres d'un rôle." - -#, fuzzy -msgid "services to remove" -msgstr "Services HBAC à supprimer" - -msgid "Remove privileges from a role." -msgstr "Supprimer des privilèges d'un rôle." - -msgid "Number of privileges removed" -msgstr "Nombre de privilèges retirés" - -msgid "Display information about a role." -msgstr "Afficher les informations sur un rôle." - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" -"\n" -"Permissions de libre service\n" -"\n" -"Une permission permet d'affiner une délégation de permissions. Les règles " -"ou\n" -"instructions de contrôle d'accès (ACI) accordent la permission de donner " -"les\n" -"permissions d'effectuer des tâches données comme ajouter un utilisateur,\n" -"modifier un groupe, etc.\n" -"\n" -"Une permission de libre service définit ce qu'un objet peut modifier dans " -"sa\n" -"propre entrée.\n" -"\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter une règle de libre service permettant aux utilisateurs de gérer\n" -"leurs adresses (avec les extensions entre accolades de Bash) :\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" En gérant les listes d'attributs, vous devez incorporer tous les attributs\n" -"dans la liste, y compris les existants.\n" -" Ajouter « telephoneNumber » à la liste (avec extension entre accolades " -"Bash) :\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Afficher la règle modifiée :\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Supprimer une règle :\n" -" ipa selfservice-del \"Users manage their own address\"\n" - -msgid "Self-service name" -msgstr "Nom de la permission de libre service" - -msgid "Attributes to which the permission applies." -msgstr "Attributs auxquels les permissions s'appliquent." - -msgid "Add a new self-service permission." -msgstr "Ajouter une nouvelle permission de libre service." - -msgid "Delete a self-service permission." -msgstr "Supprimer une permission de libre service." - -msgid "Search for a self-service permission." -msgstr "Rechercher des permissions de libre service." - -msgid "Modify a self-service permission." -msgstr "Modifier une permission de libre service." - -msgid "Display information about a self-service permission." -msgstr "Afficher les informations sur une permission de libre service." - -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" -"\n" -"Mappage d'utilisateur SELinux\n" -"\n" -"Fait correspondre des utilisateurs IPA aux utilisateurs SELinux par hôte.\n" -"\n" -"Hôtes, groupes d'hôtes, utilisateurs et groupes peuvent être définis par\n" -"rapport, soit à la règle, soit en pointant vers une règle HBAC existante.\n" -"En utilisant l'option « --hbacrule » de « selinuxusermap-find », une\n" -"recherche de correspondance exacte est faite sur le nom de la règle HBAC,\n" -"de sorte qu'une seule entrée sera renvoyée ou bien aucune.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Créer une règle « test1 » qui attribue à tous les utilisateurs le contexte\n" -"« xguest_u:s0 » sur l'hôte « server » :\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Créer une règle « test2 » qui attribue à tous les utilisateurs le contexte\n" -"« guest_u:s0 » et utilise une règle HBAC existante pour utilisateurs et " -"hôtes :\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test1\n" -"\n" -" Afficher les propriétés d'une règle :\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Créer une règle pour un utilisateur donné. Elle fixe le contexte\n" -" SELinux de l'utilisateur « john » à « unconfined_u:s0-s0:c0.c1023 »\n" -" sur toute machine :\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Désactiver une règle :\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Activer une règle :\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Trouver une règle référençant une règle HBAC donnée :\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Supprimer une règle :\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"VOIR AUSSI :\n" -"\n" -" La liste contrôlant l'ordre dans lequel la mappe d'utilisateurs SELinux\n" -" est appliquée, ainsi que l'utilisateur SELinux par défaut, sont " -"disponibles\n" -" avec la commande « config-show ».\n" - -msgid "SELinux User" -msgstr "Utilisateur SELinux" - -msgid "HBAC Rule" -msgstr "Règle HBAC" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "" -"Règle HBAC délimitant les utilisateurs, les groupes et les groupes d'hôtes" - -msgid "Create a new SELinux User Map." -msgstr "Créer une nouvelle mappe d'utilisateurs SELinux" - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" -"Ajouter des hôtes et groupes d'hôtes cibles à une mappe d'utilisateurs " -"SELinux" - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "Ajouter des utilisateurs et groupes à une mappe d'utilisateurs SELinux" - -msgid "Delete a SELinux User Map." -msgstr "Supprimer une mappe d'utilisateurs SELinux" - -msgid "Disable an SELinux User Map rule." -msgstr "Désactiver une mappe d'utilisateurs SELinux" - -msgid "Enable an SELinux User Map rule." -msgstr "Activer une mappe d'utilisateurs SELinux" - -msgid "Search for SELinux User Maps." -msgstr "Rechercher des mappes d'utilisateurs SELinux" - -msgid "Modify a SELinux User Map." -msgstr "Modifier une mappe d'utilisateurs SELinux" - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" -"Supprimer des hôtes et groupes d'hôtes cibles d'une mappe d'utilisateurs " -"SELinux" - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "" -"Supprimer des utilisateurs et groupes d'une mappe d'utilisateurs SELinux" - -msgid "Display the properties of a SELinux User Map rule." -msgstr "Afficher les propriétés d'une mappe d'utilisateurs SELinux" - -#, fuzzy -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" -"\n" -"Services\n" -"\n" -"Un service IPA représente un service qui s'exécute sur un hôte. " -"L'enregistrement du\n" -"service IPA peut contenir un principal Kerberos, un certificat SSL ou les " -"deux.\n" -"\n" -"Un service IPA peut être directement géré à partir d'une machine, pour\n" -"autant que des permissions adéquates aient été données à la machine. Ceci\n" -"est vrai même pour les machines autres que celle à laquelle le service est\n" -"associé. Par exemple, demander un certificat SSL en utilisant les\n" -"justificatifs d'identité du principal du service de l'hôte. Pour gérer un\n" -"service en utilisant les références de l'hôte, vous devrez exécuter\n" -"« kinit » en tant qu'hôte :\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Ajouter un service IPA permet au service associé de demander un certificat\n" -"SSL ou un tableau de clés, mais cela est réalisé dans une étape distincte ;\n" -"cela n'est pas le résultat de l'ajout du service.\n" -"\n" -"Seule la composante publique du certificat est stockée dans un\n" -"enregistrement de service ; la clé privée n'y est pas enregistrée.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouveau service IPA :\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Autoriser un hôte à gérer un certificat de service IPA :\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Écraser la liste par défaut des types PAC pris en charge pour le service :\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" NFS est un cas classique où la surcharge du type PAC est nécessaire.\n" -" Actuellement, le code relatif à cette fonction dans le noyau Linux ne " -"gère\n" -" les tickets Kerberos que jusqu'à une taille maximale donnée. Comme les\n" -" données PAC peuvent devenir bien plus grandes, il est recommandé de " -"fixer\n" -" « --pac-type=NONE » pour les services NFS.\n" -"\n" -" Supprimer un service IPA :\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Trouver tous les services IPA associés à un hôte :\n" -" ipa service-find web.example.com\n" -"\n" -" Trouver tous les service HTTP :\n" -" ipa service-find HTTP\n" -"\n" -" Désactiver la clé Kerberos et le certificat SSL d'un service :\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Demander un certificat pour un service IPA :\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" - -msgid "Service principal" -msgstr "Principal du service" - -msgid "PAC type" -msgstr "type de PAC" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" -"Surcharger la liste par défaut des types PAC pris en charge. Utiliser « NONE " -"» pour désactiver la prise en charge PAC pour ce service, ce qui peut être " -"nécessaire pour les services NFS par exemple." - -msgid "Add a new IPA new service." -msgstr "Ajouter un nouveau service IPA." - -msgid "force principal name even if not in DNS" -msgstr "forcer le nom du principal même si absent du DNS" - -msgid "Add hosts that can manage this service." -msgstr "Ajouter des hôtes pouvant administrer ce service." - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" -"Autoriser utilisateurs, hôtes ou groupes d'hôtes à créer un tableau de clés " -"de ce service." - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" -"Autoriser les utilisateurs, groupes, hôtes ou groupes d'hôtes à récupérer un " -"tableau de clés pour ce service." - -msgid "Delete an IPA service." -msgstr "Supprimer un service IPA." - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "Désactiver la clé Kerberos et le certificat SSL d'un service." - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" -"Interdire aux utilisateurs, hôtes ou groupes d'hôtes de créer un tableau de " -"clés de ce service." - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" -"Interdire aux utilisateurs, hôtes ou groupes d'hôtes de récupérer un tableau " -"de clés de ce service." - -msgid "Search for IPA services." -msgstr "Rechercher des services IPA." - -#, fuzzy -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« name »)" - -#, fuzzy -msgid "Search for services with these managed by hosts." -msgstr "Rechercher des groupes réseaux dont les membres sont ces hôtes." - -#, fuzzy -msgid "Search for services without these managed by hosts." -msgstr "Rechercher des groupes réseaux dont les membres ne sont pas ces hôtes." - -msgid "Modify an existing IPA service." -msgstr "Modifier un service IPA." - -msgid "Remove hosts that can manage this service." -msgstr "Supprimer des hôtes pouvant administrer ce service." - -msgid "Display information about an IPA service." -msgstr "Afficher les informations sur un service IPA." - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" -"\n" -"Commandes sudo\n" -"\n" -"Commandes utilisées en tant que briques de base pour sudo\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter une nouvelle commande\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Supprimer une commande\n" -" ipa sudocmd-del /usr/bin/less\n" - -msgid "Sudo Command" -msgstr "Commande sudo" - -msgid "A description of this command" -msgstr "Description de la commande" - -msgid "Sudo Command Groups" -msgstr "Groupes de commandes sudo" - -msgid "Create new Sudo Command." -msgstr "Créer une nouvelle commande sudo." - -msgid "Delete Sudo Command." -msgstr "Supprimer une commande sudo." - -msgid "Search for Sudo Commands." -msgstr "Rechercher des commandes sudo." - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« command »)" - -msgid "Modify Sudo Command." -msgstr "Modifier une commande sudo." - -msgid "Display Sudo Command." -msgstr "Afficher une commande sudo." - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" -"\n" -"Groupes de commandes sudo\n" -"\n" -"Administre les groupes de commandes sudo.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouveau groupe de commandes sudo :\n" -" ipa sudocmdgroup-add --desc='commandes administrateurs' admincmds\n" -"\n" -" Supprimer un groupe de commandes sudo :\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Gérer les commandes, l'appartenance d'un groupe de commandes sudo :\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Administrer les commandes, l'appartenance d'un groupe de commandes sudo :\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Afficher un groupe de commandes sudo :\n" -" ipa group-show localadmins\n" - -msgid "Sudo Command Group" -msgstr "Groupe de commandes sudo" - -msgid "Commands" -msgstr "Commandes" - -msgid "Member Sudo commands" -msgstr "Membres de commandes sudo" - -msgid "Create new Sudo Command Group." -msgstr "Créer un nouveau groupe de commandes sudo." - -msgid "Add members to Sudo Command Group." -msgstr "Ajouter des membres à un groupe de commandes sudo." - -msgid "member sudo command" -msgstr "commande membre de règle sudo" - -msgid "sudo commands to add" -msgstr "commandes sudo à ajouter" - -msgid "Delete Sudo Command Group." -msgstr "Supprimer un groupe de commandes sudo." - -msgid "Search for Sudo Command Groups." -msgstr "Rechercher des groupes de commandes sudo." - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« sudocmdgroup-name »)" - -msgid "Modify Sudo Command Group." -msgstr "Modifier un groupe de commandes sudo." - -msgid "Remove members from Sudo Command Group." -msgstr "Supprimer des membres d'un groupe de commandes sudo." - -msgid "sudo commands to remove" -msgstr "commandes sudo à supprimer" - -msgid "Display Sudo Command Group." -msgstr "Afficher un groupe de commandes sudo." - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" -"\n" -"Relations d'approbation entre domaines\n" -"\n" -"Gestion des relations d'approbation entre les domaines IPA et Active " -"Directory.\n" -"\n" -"Pour permettre aux utilisateurs d'un domaine distant l'accès aux ressources\n" -"d'un domaine IPA, des relations d'approbation doivent être établies.\n" -"Actuellement IPA ne prend en charge que les relations d'approbation entre " -"des\n" -"domaines IPA et Active Directory sous le contrôle de Windows Server 2008 ou\n" -"ultérieur, avec le niveau fonctionnel 2008 ou ultérieur.\n" -"\n" -"Veuillez noter que DNS doit être correctement configuré à la fois côté\n" -"domaine IPA et côté Active Directory pour une découverte mutuelle. La\n" -"relation de confiance repose sur la capacité à repérer des ressources\n" -"spéciales dans l'autre domaine via des enregistrements DNS.\n" -"\n" -"Exemples :\n" -"\n" -"1. Établir des relations d'approbation croisées entre royaumes avec Active\n" -"Directory avec les autorisations d'accès d'un administrateur AD :\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. Lister toutes les relations d'approbation existantes :\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Voir les détails d'une relation de confiance donnée :\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Supprimer une relation de confiance existante :\n" -"\n" -" ipa trust-del \n" -"\n" -"Une fois la relation de confiance établie, les utilisateurs distants " -"doivent\n" -"être mis en relation avec des groupes POSIX locaux pour utiliser réellement\n" -"des ressources IPA. La relation doit se faire via l'appartenance à un " -"groupe\n" -"non-POSIX externe, puis ce groupe doit être intégré dans l'un des groupes\n" -"POSIX locaux.\n" -"\n" -"Exemples :\n" -"\n" -"1. Créer un groupe pour la mise en relation avec le domaine approuvé\n" -" « admins » et leur groupe POSIX local :\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Ajouter un identifiant de sécurité de de Domain Admins au\n" -" groupe « ad_admins_external » :\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Autoriser des membres du groupe « ad_admins_external » à s'associer\n" -" avec le groupe POSIX ad_admins :\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Lister les membres externes du groupe externe « ad_admins_external »\n" -" pour voir leur SID :\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"CONFIGURATION D'UNE CONFIANCE GLOBALE\n" -"\n" -"Une fois le sous-paquet « IPA AD trust » installé et « ipa-adtrust-" -"install »\n" -"exécuté, une configuration de domaine local (SID, GUID, nom NetBIOS) est\n" -"créée. Ces identifiants sont alors utilisés lors de communications avec un\n" -"domaine approuvé de type particulier.\n" -"\n" -"1. Afficher la configuration de confiance globale pour les types de\n" -" confiance Active Directory :\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modifier la configuration globale de toutes les confiances de type\n" -" Active Directory et définir un groupe principal de recours (le GID du\n" -" groupe principal de recours est utilisé comme GID d'utilisateur " -"principal\n" -" si l'utilisateur s'authentifiant auprès du domaine IPA n'a pas d'autre\n" -" GID principal déjà défini) :\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Revenir au groupe caché par défaut comme groupe de recours principal\n" -" (tout groupe de la classe objet « posixGroup » est autorisé) :\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" - -msgid "Domain NetBIOS name" -msgstr "Nom de domaine NetBIOS" - -msgid "Domain Security Identifier" -msgstr "Identifiant de sécurité du domaine" - -msgid "SID blacklist incoming" -msgstr "Entrant dans liste noire de SID" - -msgid "SID blacklist outgoing" -msgstr "Sortant de liste noire de SID" - -msgid "Security Identifier" -msgstr "Identifiant de sécurité" - -msgid "NetBIOS name" -msgstr "Nom NetBIOS" - -msgid "Domain GUID" -msgstr "GUID du domaine" - -msgid "Fallback primary group" -msgstr "Groupe principal de repli" - -msgid "Domain name" -msgstr "Nom de domaine" - -msgid "Trusted domain partner" -msgstr "Partenaire de domaine approuvé" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" -"Déterminer si la commande « ipa-adtrust-install » a été exécutée sur ce " -"système" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" -"Déterminer si le greffon de compatibilité de schéma est configuré pour " -"servir les utilisateurs et groupes du domaine" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" -"Déterminer si la commande « ipa-adtrust-install » a été exécutée avec la " -"tâche « sidgen »" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" -"\n" -"Ajout d'une nouvelle relation de confiance.\n" -"\n" -"Cette commande établit une relation de confiance avec un autre domaine\n" -"qui ainsi devient « de confiance ». En conséquence, des utilisateurs du\n" -"domaine approuvé peuvent avoir accès aux ressources de ce domaine.\n" -"\n" -"Actuellement, seules les relations d'approbation avec les domaines\n" -"Active Directory sont prises en charge.\n" -"\n" -"Cette commande peut être lancée plusieurs fois en toute sécurité à\n" -"l'encontre du même domaine, elle modifiera les références de la relation de\n" -"confiance des deux côtés.\n" -" " - -msgid "Trust type (ad for Active Directory, default)" -msgstr "Type de confiance (par défaut, ad pour Active Directory)" - -msgid "Active Directory domain administrator" -msgstr "Administrateur du domaine Active Directory" - -msgid "Active Directory domain administrator's password" -msgstr "Mot de passe de l'administrateur de domaine Active Directory" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "Contrôleur de domaine pour le domaine Active Directory (optionnel)" - -msgid "Shared secret for the trust" -msgstr "Secret partagé pour la confiance" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "Premier ID POSIX de la plage réservée au domaine approuvé" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "Taille de la plage d'ID réservée au domaine approuvé" - -#, fuzzy -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" -"Type de plage d'identifiants, doit être ipa-ad-trust-posix, ipa-ad-trust ou " -"ipa-local" - -msgid "Delete a trust." -msgstr "Supprimer la confiance." - -msgid "Refresh list of the domains associated with the trust" -msgstr "Rafraîchir la liste des domaines associés à la relation de confiance" - -msgid "Search for trusts." -msgstr "Rechercher des confiances." - -#, fuzzy -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« name »)" - -#, fuzzy -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" -"\n" -" Modifier la confiance (pour utilisation future).\n" -"\n" -" Actuellement seule l'option par défaut pour modifier les attributs LDAP\n" -" est disponible. D'autres options particulières seront ajoutées\n" -" dans les versions à venir.\n" -" " - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" -"Résoudre les identifiants de sécurité des groupes et utilisateurs dans des " -"domaines approuvés" - -msgid "Security Identifiers (SIDs)" -msgstr "Identifiants de sécurité (SID)" - -msgid "Display information about a trust." -msgstr "Afficher des informations sur une relation de confiance." - -msgid "Modify global trust configuration." -msgstr "Modifier la configuration globale des relations d'approbation." - -msgid "Show global trust configuration." -msgstr "Afficher la configuration globale des relations d'approbation." - -msgid "Allow access from the trusted domain" -msgstr "Autoriser l'accès depuis le domaine approuvé" - -#, fuzzy -msgid "Remove information about the domain associated with the trust." -msgstr "Rafraîchir la liste des domaines associés à la relation de confiance" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "Interdire l'utilisation de ressources IPA par le domaine approuvé" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "Autoriser l'utilisation des ressources IPA par le domaine approuvé" - -msgid "Search domains of the trust" -msgstr "Recherches dans les domaines approuvés" - -#, fuzzy -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« command »)" - -msgid "Modify trustdomain of the trust" -msgstr "Modifier le domaine approuvé de la confiance" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" -"\n" -"Utilisateurs\n" -"\n" -"Gestion des utilisateurs. Tous les utilisateurs sont de type POSIX.\n" -"\n" -"IPA prend en charge un grand nombre de formats de noms d'utilisateurs.\n" -"Certaines restrictions peuvent cependant s'appliquer dans un environnement\n" -"particulier. Par exemple, les noms d'utilisateurs commençant par un chiffre\n" -"ou ceux dépassant une certaine longueur peuvent poser problème à certains\n" -"systèmes UNIX.\n" -"Utiliser la commande « ipa config-mod » afin de modifier le format de nom\n" -"d'utilisateur autorisé par les outils IPA.\n" -"\n" -"La désactivation d'un compte utilisateur lui interdit d'obtenir de\n" -"nouveaux justificatifs d'identité Kerberos. Elle n'invalide pas les\n" -"justificatifs déjà obtenus.\n" -"\n" -"L'administration des mots de passe ne fait pas partie de ce module. Pour\n" -"plus d'informations sur ce sujet, cf. : « ipa help passwd »\n" -"\n" -"Le verrouillage de compte en cas d'échec de mot de passe est déclenché par\n" -"le maître IPA de l'utilisateur. La commande « user-status » permet de\n" -"l'identifier. C'est sur ​​ce maître que l'administrateur doit déverrouiller\n" -"l'utilisateur.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouvel utilisateur :\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Trouver tous les utilisateurs dont l'entrée contient la chaîne « Tim » :\n" -" ipa user-find Tim\n" -"\n" -" Trouver tous les utilisateurs ayant « Tim » comme prénom :\n" -" ipa user-find --first=Tim\n" -"\n" -" Désactiver un compte utilisateur :\n" -" ipa user-disable tuser1\n" -"\n" -" Activer un compte utilisateur :\n" -" ipa user-enable tuser1\n" -"\n" -" Supprimer un utilisateur :\n" -" ipa user-del tuser1\n" -"\n" - -msgid "First name" -msgstr "Prénom" - -msgid "Last name" -msgstr "Nom" - -msgid "Full name" -msgstr "Nom complet" - -msgid "Display name" -msgstr "Nom affiché" - -msgid "Initials" -msgstr "Initiales" - -msgid "Kerberos principal" -msgstr "Principal Kerberos" - -msgid "Kerberos principal expiration" -msgstr "Expiration du principal Kerberos" - -msgid "Email address" -msgstr "Adresse courriel" - -msgid "Prompt to set the user password" -msgstr "Invite de définition du mot de passe utilisateur" - -msgid "Generate a random user password" -msgstr "Créer un mot de passe aléatoire" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" -"Numéro identifiant d'utilisateur (le système en assigne un si non défini)" - -msgid "Street address" -msgstr "Adresse" - -msgid "City" -msgstr "Ville" - -msgid "State/Province" -msgstr "État/Province" - -msgid "ZIP" -msgstr "Code postal" - -msgid "Telephone Number" -msgstr "Numéro de téléphone" - -msgid "Mobile Telephone Number" -msgstr "Numéro de téléphone mobile" - -msgid "Pager Number" -msgstr "Numéro de téléavertisseur" - -msgid "Fax Number" -msgstr "Numéro de fax" - -msgid "Org. Unit" -msgstr "Unité organisationnelle" - -msgid "Job Title" -msgstr "Titre de poste" - -msgid "Car License" -msgstr "Permis de conduire/carte d'identité" - -msgid "Account disabled" -msgstr "Compte désactivé" - -msgid "User authentication types" -msgstr "Types d'authentification utilisateur" - -msgid "Types of supported user authentication" -msgstr "Types d'authentification utilisateur pris en charge" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" -"Catégorie d'utilisateurs (la sémantique associée à cet attribut est " -"interprétée localement)" - -msgid "RADIUS proxy configuration" -msgstr "Configuration du serveur mandataire RADIUS" - -msgid "RADIUS proxy username" -msgstr "Nom d'utilisateur sur serveur mandataire RADIUS" - -msgid "Department Number" -msgstr "Numéro du service" - -msgid "Employee Number" -msgstr "Matricule" - -msgid "Employee Type" -msgstr "Type d'employé" - -msgid "Preferred Language" -msgstr "Langue préférée" - -msgid "Kerberos keys available" -msgstr "Clés Kerberos disponibles" - -msgid "Add a new user." -msgstr "Ajouter un nouvel utilisateur." - -msgid "Don't create user private group" -msgstr "Ne pas créer de groupe privé" - -msgid "Delete a user." -msgstr "Supprimer un utilisateur." - -msgid "Disable a user account." -msgstr "Désactiver un compte utilisateur." - -msgid "Enable a user account." -msgstr "Activer un compte utilisateur." - -msgid "Search for users." -msgstr "Rechercher des utilisateurs." - -msgid "Self" -msgstr "Moi-même" - -msgid "Display user record for current Kerberos principal" -msgstr "" -"Afficher l'enregistrement utilisateur pour le principal Kerberos en cours" - -#, fuzzy -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« location »)" - -#, fuzzy -msgid "Search for users with these member of groups." -msgstr "Rechercher des groupes réseaux avec ces membres de groupes réseau." - -#, fuzzy -msgid "Search for users without these member of groups." -msgstr "Rechercher des groupes réseaux sans ces membres de groupes réseau." - -#, fuzzy -msgid "Search for users with these member of netgroups." -msgstr "Rechercher des groupes réseaux avec ces membres de groupes réseau." - -#, fuzzy -msgid "Search for users without these member of netgroups." -msgstr "Rechercher des groupes réseaux sans ces membres de groupes réseau." - -#, fuzzy -msgid "Search for users with these member of roles." -msgstr "Rechercher des hôtes sans ces membres de rôles." - -#, fuzzy -msgid "Search for users without these member of roles." -msgstr "Rechercher des hôtes sans ces membres de rôles." - -#, fuzzy -msgid "Search for users with these member of HBAC rules." -msgstr "Rechercher des hôtes avec ces membres de règles HBAC." - -#, fuzzy -msgid "Search for users without these member of HBAC rules." -msgstr "Rechercher des hôtes avec ces membres de règles HBAC." - -#, fuzzy -msgid "Search for users with these member of sudo rules." -msgstr "Rechercher des systèmes sans ces membres de règles sudo." - -#, fuzzy -msgid "Search for users without these member of sudo rules." -msgstr "Rechercher des systèmes sans ces membres de règles sudo." - -msgid "Modify a user." -msgstr "Modifier un utilisateur." - -#, fuzzy -msgid "Rename the user object" -msgstr "Renommer l'objet groupe" - -msgid "Display information about a user." -msgstr "Afficher l'information sur un utilisateur." - -#, fuzzy -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" -"\n" -" État verrouillé d'un compte utilisateur\n" -"\n" -" Un compte peut être verrouillé si un mot de passe incorrect est entre à\n" -" plusieurs reprises dans un laps de temps donnée selon la politique de\n" -" contrôle des mots de passe. Le verrouillage du compte est un état\n" -" temporaire ; le compte peut être déverrouillé par un administrateur.\n" -"\n" -" Ce dernier se connecte sur l'IPA maître et affiche l'état du\n" -" verrouillage de chacun.\n" -"\n" -" Pour savoir si un compte est verrouillé sur un serveur donné, vous " -"devez\n" -" comparer le nombre d'échecs de connexion et l'heure du dernier échec.\n" -" Pour qu'un compte soit verrouillé, le nombre d'échecs doit dépasser le\n" -" maximum autorisé dans l'intervalle de temps donné tel que défini dans " -"la\n" -" politique de mot de passe propre à l'utilisateur.\n" -"\n" -" Le compteur d'échecs de connexion n'est incrémenté que lorsqu'un\n" -" utilisateur tente une connexion, il est donc possible qu'un compte\n" -" paraisse bloqué mais que la dernière tentative de connexion soit\n" -" antérieure à la durée de verrouillage de la règle. Cela\n" -" signifie que l'utilisateur peut tenter de se connecter à nouveau." - -#, fuzzy -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" -"\n" -" Déverrouiller un compte utilisateur\n" -"\n" -" Un compte utilisateur peut se verrouiller si le mot de passe n'est pas\n" -" saisi correctement plusieurs fois de suite dans un laps de temps donné\n" -" défini par la politique du mot de passe. Le verrouillage d'un compte " -"est\n" -" un état temporaire ; il peut être déverrouillé par un administrateur." - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "Command category" -msgstr "Catégorie de commande" - -msgid "Command category the rule applies to" -msgstr "Catégorie de commande à laquelle la règle s'applique" - -msgid "RunAs User category" -msgstr "Catégorie « RunAs User »" - -msgid "RunAs User category the rule applies to" -msgstr "Catégorie « RunAs User » à laquelle la règle s'applique" - -msgid "RunAs Group category" -msgstr "Catégorie « RunAs Group »" - -msgid "RunAs Group category the rule applies to" -msgstr "Catégorie « RunAs Group » à laquelle la règle s'applique" - -msgid "Sudo order" -msgstr "Ordre sudo" - -msgid "integer to order the Sudo rules" -msgstr "entier pour ordonner les règles sudo" - -msgid "External User" -msgstr "Utilisateur externe" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" -"Utilisateur externe auquel la règle s'applique (« sudorule-find » uniquement)" - -msgid "Host Masks" -msgstr "Masques d'hôtes" - -msgid "Sudo Allow Commands" -msgstr "Commandes « sudo allow »" - -msgid "Sudo Deny Commands" -msgstr "Commande « sudo deny »" - -msgid "Sudo Allow Command Groups" -msgstr "Groupes de commandes « sudo allow »" - -msgid "Sudo Deny Command Groups" -msgstr "Groupes de commandes « sudo deny »" - -msgid "RunAs Users" -msgstr "« RunAs Users »" - -msgid "Run as a user" -msgstr "Lancer en tant qu'un utilisateur donné" - -msgid "Groups of RunAs Users" -msgstr "Groupe de « RunAs Users »" - -msgid "Run as any user within a specified group" -msgstr "Lancer en tant que n'importe quel utilisateur du groupe indiqué" - -msgid "RunAs External User" -msgstr "Utilisateur « RunAs External »" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" -"Utilisateur externe comme tel les commandes peuvent être lancées (« sudorule-" -"find » uniquement)" - -msgid "External Groups of RunAs Users" -msgstr "Groupes externes de « RunAs Users »" - -msgid "External Groups of users that the command can run as" -msgstr "" -"Groupes externes d'utilisateurs comme tel la commande peut être exécutée" - -msgid "RunAs Groups" -msgstr "« RunAs Groups»" - -msgid "Run with the gid of a specified POSIX group" -msgstr "Lancer avec le GID d'un groupe POSIX donné" - -msgid "RunAs External Group" -msgstr "Groupe « RunAs External »" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" -"Groupe externe en tant que tel les commandes sont lancées (« sudorule-find » " -"uniquement)" - -msgid "Sudo Option" -msgstr "Option sudo" - -msgid "Create new Sudo Rule." -msgstr "Créer une nouvelle règle sudo." - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" -"Ajouter des commandes et groupes de commandes sudo affectés par la règle " -"sudo." - -#, fuzzy -msgid "member sudo command group" -msgstr "commande membre de règle sudo" - -#, fuzzy -msgid "sudo command groups to add" -msgstr "commandes sudo à ajouter" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "Ajouter des hôtes et groupes d'hôtes affectés par la règle sudo." - -msgid "host masks of allowed hosts" -msgstr "masques d'hôtes des hôtes autorisés" - -msgid "Add an option to the Sudo Rule." -msgstr "Ajouter une option à la règle sudo." - -msgid "Add group for Sudo to execute as." -msgstr "Ajouter un groupe dans sudo pour exécution comme." - -msgid "Add users and groups for Sudo to execute as." -msgstr "Ajouter des utilisateurs et groupes dans sudo pour exécution comme." - -msgid "Add users and groups affected by Sudo Rule." -msgstr "Ajouter des utilisateurs et groupes affectés par la règle sudo." - -msgid "Delete Sudo Rule." -msgstr "Règle sudo supprimée." - -msgid "Disable a Sudo Rule." -msgstr "Désactiver une règle sudo." - -msgid "Enable a Sudo Rule." -msgstr "Activer une règle sudo." - -msgid "Search for Sudo Rule." -msgstr "Rechercher une règle sudo." - -#, fuzzy -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« sudocmdgroup-name »)" - -msgid "Modify Sudo Rule." -msgstr "Modifier une règle sudo." - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" -"Retirer des commandes et groupes de commandes sudo affectés par la règle " -"sudo." - -#, fuzzy -msgid "sudo command groups to remove" -msgstr "commandes sudo à supprimer" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "Retirer des hôtes et groupes d'hôtes affectés par la règle sudo." - -msgid "Remove an option from Sudo Rule." -msgstr "Retirer une option d'une règle sudo." - -msgid "Remove group for Sudo to execute as." -msgstr "Retirer un groupe de sudo pour exécution comme." - -msgid "Remove users and groups for Sudo to execute as." -msgstr "Retirer des utilisateurs et groupes dans sudo pour exécution comme." - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "Retirer des utilisateurs et groupes affectés par la règle sudo." - -msgid "Display Sudo Rule." -msgstr "Afficher une règle sudo." - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "Limite de la durée de la recherche en secondes (0 pour illimité)" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "Nombre maximal d'entrées renvoyées (0 pour illimité)" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" -"\n" -"Gestion des règles de LCA de l'AC.\n" -"\n" -"Ce grffon est utilisé pour définir les règles gouvernant quels principaux \n" -"sont autorisés à se voir attribuer des certificats à l'aide d'un profil\n" -"donné de certificat.\n" -"\n" -"SYNTAXE D'IDENTIFIANT DE PROFIL :\n" -"\n" -"Un identifiant de profil est une chaîne sans espace ni ponctuation débutant " -"par\n" -"une lettre et suivie d'une séquence de lettres, chiffres, ou caractère " -"souligné (\"_\").\n" -"\n" -"EXEMPLES :\n" -"\n" -" Créer une LCA d'AC « test » autorisant tous les utilisateurs à accéder \n" -" au profil « UserCert » :\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Afficher les propriétés d'une LCA d'AC nommée :\n" -" ipa caacl-show test\n" -"\n" -" Créer une LCA d'AC autorisant l'utilisatrice « alice » à utiliser le " -"profile « DNP3 » :\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Désactiver une LCA d'AC :\n" -" ipa caacl-disable test\n" -"\n" -" Supprimer une LCA d'AC :\n" -" ipa caacl-del test\n" - -msgid "ACL name" -msgstr "Nom de la LCA" - -msgid "Profile category" -msgstr "Catégorie de profil" - -msgid "Profile category the ACL applies to" -msgstr "Catégorie de profil à laquelle la LCA s'applique" - -msgid "User category the ACL applies to" -msgstr "Catégorie d'utilisateur à laquelle la LCA s'applique" - -msgid "Host category the ACL applies to" -msgstr "Catégorie d'hôte à laquelle la LCA s'applique" - -msgid "Service category the ACL applies to" -msgstr "Catégorie de service à laquelle la LCA s'applique" - -msgid "Profiles" -msgstr "Profils" - -msgid "Create a new CA ACL." -msgstr "Créer une nouvelle LCA d'AC." - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "Ajouter des hôtes cibles et groupes d'hôtes à une LCA d'AC." - -msgid "Add profiles to a CA ACL." -msgstr "Ajouter des profils à une LCA d'AC." - -#, fuzzy -msgid "member Certificate Profile" -msgstr "Profil de certificat" - -#, fuzzy -msgid "Certificate Profiles to add" -msgstr "Profil de certificat à utiliser" - -msgid "Add services to a CA ACL." -msgstr "Ajouter des services à une LCA d'AC." - -msgid "Add users and groups to a CA ACL." -msgstr "Ajouter des utilisateurs et groupes à une LCA d'AC." - -msgid "Delete a CA ACL." -msgstr "Supprimer une LCA d'AC." - -msgid "Disable a CA ACL." -msgstr "Désactiver une LCA d'AC." - -msgid "Enable a CA ACL." -msgstr "Activer une LCA d'AC." - -msgid "Search for CA ACLs." -msgstr "Rechercher des LCA d'AC." - -msgid "Modify a CA ACL." -msgstr "Modifier une LCA d'AC." - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "Retirer des utilisateurs et groupes d'une LCA d'AC." - -msgid "Remove profiles from a CA ACL." -msgstr "Retirer des profils d'une LCA d'AC." - -#, fuzzy -msgid "Certificate Profiles to remove" -msgstr "Profil de certificat à utiliser" - -msgid "Remove services from a CA ACL." -msgstr "Retirer des services d'une LCA d'AC." - -msgid "Remove users and groups from a CA ACL." -msgstr "Retirer des utilisateurs et groupes d'une LCA d'AC." - -msgid "Display the properties of a CA ACL." -msgstr "Afficher les propriétés d'une LCA d'AC." - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "Principal de ce certificate (par exemple : HTTP/test.example.com)" - -msgid "Profile ID" -msgstr "ID de profil" - -msgid "Certificate Profile to use" -msgstr "Profil de certificat à utiliser" - -#, fuzzy -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" -"\n" -"Gestion des profils de certificats\n" -"\n" -"Les profils de certificats sont utilisés par l'autorité de certification " -"(AC) dans\n" -"la signature de certificats afin de déterminer si une demande de signature " -"de\n" -"certificat (Certificate Signing Request, CSR) est acceptable, et si oui, " -"quelles\n" -"fonctionnalités et extensions doivent figurer dans le certificat.\n" -"\n" -"Le format du profil de certificat est un format de liste de propriétés qui " -"sera\n" -"compris par une autorité de certification Dogtag ou Red Hat Certificate " -"System.\n" -"\n" -"SYNTAXE DE L'IDENTIFIANT DE PROFIL :\n" -"\n" -"Un identifiant de profil est une chaîne de caractères sans espaces ni " -"caractère de\n" -"ponctuation débutant par une lettre suivie d'une séquence de lettres, de " -"chiffres et\n" -"de caractère souligné (« _ »).\n" -"\n" -"EXEMPLES :\n" -"\n" -" Importer un profil qui ne stockera pas les certificats émis :\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --summary \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Supprimer un profil de certificat :\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Afficher les informations sur un profil :\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Enregistrer la configuration du profil dans un fichier :\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Rechercher des profils ne stockant pas les certificats :\n" -" ipa certprofile-find --store=false\n" -"\n" -"FORMAT DE LA CONFIGURATION DE PROFIL :\n" -"\n" -"Le format de configuration de profil est un format brut de liste de \n" -"propriété utilisé par Dogtag Certificate System. Le format XML n'est\n" -"pas pris en charge.\n" -"\n" -"Les restrictions suivantes s'appliquent aux profils gérés par IPA :\n" -"\n" -"- Lors de l'import d'un profil, le champ « profileId » s'il est présent " -"doit\n" -" correspondre à l'identifiant donné sur la ligne de commande.\n" -"\n" -"- Le champ « classId » doit être « caEnrollImpl »\n" -"\n" -"- Le champ « auth.instance_id  doit être « raCertAuth »\n" -"\n" -"- Les classe d'entrée « certReqInputImpl » et de sortie « certOutputImpl » " -"doivent \n" -" être utilisées.\n" - -msgid "Profile ID for referring to this profile" -msgstr "Identifiant de profil" - -msgid "Profile description" -msgstr "Description de profil" - -msgid "Brief description of this profile" -msgstr "Brève description de ce profil" - -msgid "Store issued certificates" -msgstr "Stocker les certificats émis" - -msgid "Whether to store certs issued using this profile" -msgstr "Stocker ou non les certificats émis à partir de ce profil" - -msgid "Delete a Certificate Profile." -msgstr "Supprimer un profil de certificat." - -msgid "Search for Certificate Profiles." -msgstr "Rechercher des profils de certificats." - -msgid "Import a Certificate Profile." -msgstr "Importer un profil de certificat." - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "Nom de fichier du profil brut. Le format XML n'est pas pris en charge." - -msgid "Modify Certificate Profile configuration." -msgstr "Modifier la configuration d'un profil de certificat." - -msgid "File containing profile configuration" -msgstr "Fichier contenant la configuration du profil" - -msgid "Display the properties of a Certificate Profile." -msgstr "Afficher les propriétés d'un profil de certificat." - -msgid "Write profile configuration to file" -msgstr "Écrire le profil de configuration dans un fichier" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "Durée maximale (secondes) pour une recherche (0 ou -1 pour illimitée)" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "Nombre maximum d'entrées à rechercher (-1 ou 0 pour illimité)" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" -"\n" -"Relever le niveau du domaine IPA.\n" - -msgid "Query current Domain Level." -msgstr "Interroger le niveau actuel du domaine." - -msgid "Current domain level:" -msgstr "Niveau actuel du domaine :" - -msgid "Change current Domain Level." -msgstr "Modifier le niveau actuel du domaine." - -msgid "Domain Level" -msgstr "Niveau du domaine" - -msgid "Add certificates to host entry" -msgstr "Ajouter les certificats à l'entrée de l'hôte" - -msgid "Remove certificates from host entry" -msgstr "Supprimer les certificats de l'entrée de l'hôte" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" -"\n" -"Ajouter une nouvelle plage d'identifiants.\n" -"\n" -" Pour ajouter une nouvelle plage d'identifiants vous devez toujours " -"préciser\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" En outre,\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" seront indiqués pour une nouvelle plage d'ID dans le domaine local alors " -"que\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" doivent l'être pour ajouter une nouvelle plage pour un domaine AD de " -"confiance.\n" -"\n" -" AVERTISSEMENT :\n" -"\n" -" Le greffon DNA dans 389-ds alloue des ID selon les plages configurées au\n" -" titre du domaine local. Actuellement le greffon DNA *ne peut pas* être\n" -" lui-même reconfiguré selon les plages locales définies par " -"l'intermédiaire\n" -" de cette famille de commandes.\n" -"\n" -" Un changement manuel de configuration doit être opéré dans la " -"configuration\n" -" du greffon DNA pour cadrer avec la nouvelle plage locale. En particulier,\n" -" l'attribut « dnaNextRange » de « cn=Posix IDs »,^n« cn=Distributed Numeric " -"Assignment Plugin », « cn=plugins », « cn=config »\n" -" doivent être modifiés pour correspondre à cette nouvelle plage.\n" -" " - -#, fuzzy -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" -"\n" -"Ajouter une nouvelle plage d'identifiants.\n" -"\n" -" Pour ajouter une nouvelle plage d'identifiants vous devez toujours " -"préciser\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" En outre,\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" seront indiqués pour une nouvelle plage d'ID dans le domaine local alors " -"que\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" doivent l'être pour ajouter une nouvelle plage pour un domaine AD de " -"confiance.\n" -"\n" -" AVERTISSEMENT :\n" -"\n" -" Le greffon DNA dans 389-ds alloue des ID selon les plages configurées au\n" -" titre du domaine local. Actuellement le greffon DNA *ne peut pas* être\n" -" lui-même reconfiguré selon les plages locales définies par " -"l'intermédiaire\n" -" de cette famille de commandes.\n" -"\n" -" Un changement manuel de configuration doit être opéré dans la " -"configuration\n" -" du greffon DNA pour cadrer avec la nouvelle plage locale. En particulier,\n" -" l'attribut « dnaNextRange » de « cn=Posix IDs »,^n« cn=Distributed Numeric " -"Assignment Plugin », « cn=plugins », « cn=config »\n" -" doivent être modifiés pour correspondre à cette nouvelle plage.\n" -" " - -msgid "Fallback to AD DC LDAP" -msgstr "Repli sur l'annuaire LDAP du contrôleur de domaine AD" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" -"Autorise l'utilisation en repli de l'annuaire LDAP du contrôleur de domaine " -"AD. Pour les relations d'approbation bidirectionnelles uniquement." - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" -"Applique une vue d'identifiants aux hôtes ou aux membres des groupes d'hôtes " -"indiqués. Si une autre vue d'identifiants était appliquée à l'hôte, elle est " -"remplacée." - -msgid "Add to default group" -msgstr "Ajouter au groupe par défaut" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" -"Ajouter les utilisateurs migrés n'ayant pas de groupe à un groupe par défaut " -"(par défaut : vrai)" - -msgid "Search scope" -msgstr "Étendue de la recherche" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" -"Portée de recherche LDAP pour les utilisateurs et les groupes : base, " -"onelevel, ou subtree. Valeur par défaut : onelevel" - -msgid "Remove users that can manage this token." -msgstr "Supprimer des utilisateurs pouvant gérer ce jeton." - -msgid "Target DN subtree" -msgstr "Sous-arbre des DN cibles" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" -"Sous-arbre optionnel de DN dans lequel une entrée peut être déplacée (doit " -"être dans le sous-arbre, mais peut ne pas encore exister)" - -msgid "Origin DN subtree" -msgstr "Sous-arbre des DN origines" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" -"Sous-arbre optionnel de DN dans lequel une entrée peut être déplacée (doit " -"être dans le sous-arbre, mais peut ne pas encore exister)" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "Server name" -msgstr "Nom du serveur" - -msgid "IPA server hostname" -msgstr "Nom d'hôte du serveur IPA" - -msgid "Managed suffix" -msgstr "Suffixe administré" - -msgid "Min domain level" -msgstr "Niveau de domaine mini" - -msgid "Minimum domain level" -msgstr "Niveau de domaine minimal" - -msgid "Max domain level" -msgstr "Niveau de domaine maxi" - -msgid "Maximum domain level" -msgstr "Niveau de domaine maximal" - -msgid "Delete IPA server." -msgstr "Supprimer un serveur IPA." - -msgid "Search for IPA servers." -msgstr "Rechercher des serveurs IPA." - -msgid "Show IPA server." -msgstr "Afficher les informations sur le serveur IPA." - -msgid "Add new certificates to a service" -msgstr "Ajouter un nouveau certificat à un service" - -msgid "Remove certificates from a service" -msgstr "Supprimer les certificats d'un service" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" -"\n" -"Délégation contrainte de services\n" -"\n" -"Gérez les règles permettant la délégation contrainte d'informations\n" -"d'authentification de façon à ce qu'un service puisse se faire passer\n" -"pour un utilisateur lors de la communication avec un service sans\n" -"que cela ne nécessite de la part de l'utilisateur de transmettre son TGT.\n" -"Cela constitue une méthode bien meilleure de délégation d'identification\n" -"car elle évite l'exposition du secret court terme de l'utilisateur.\n" -"\n" -"La convention de nommage est d'ajouter le mot « target » ou « targets »\n" -"au nom de la règle de correspondance. Ce poitn n'est pas obligatoire mais\n" -"aide à visualiser l'association entre règles et cibles.\n" -"\n" -"Une règle est constituée de deux choses :\n" -" - une liste de cibles auxquelles la règle s'applique,\n" -" - une liste de memberPrincipals qui sont autorisés à leur déléguer\n" -" leurs droits.\n" -"\n" -"Une cible consiste en une liste de principaux qui peuvent être délégués.\n" -"\n" -"En anglais, une règle que ce principal peut déléguer comme cette liste\n" -"de principaux, tels que définis par ces cibles.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter une nouvelle règle de délégation contrainte :\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Ajouter une nouvelle cible de délégation contrainte :\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Ajouter un principal à la règle :\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Ajouter notre cible à la règle :\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add un principal à la cible :\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Afficher les informations au sujet d'une règle de délégation et sa cible :\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Supprimer une délégation contrainte :\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"Dans cet exemple, le service ftp peut obtenir un TGT pour le service ldap\n" -"au nom de l'utilisateur associé.\n" -"\n" -"Il est fortement découragé de modifier les délégations livrées avec IPA,\n" -"ipa-http-delegation et ses cibles ipa-cifs-delegation-targets et\n" -"ipa-ldap-delegation-targets. Des modifications erronées peuvent obérer\n" -"la capacité de délégation, en provoquant l'arrêt de fonctionnement du\n" -"moteur.\n" - -msgid "Allowed Target" -msgstr "Cibles autorisées" - -msgid "Create a new service delegation rule." -msgstr "Créer une nouvelle règle de délégation de service" - -msgid "Add member to a named service delegation rule." -msgstr "Ajouter un membre à une règle nommée de délégation de service." - -#, fuzzy -msgid "member principal" -msgstr "Principaux membres de" - -#, fuzzy -msgid "principal to add" -msgstr "principal introuvable\n" - -msgid "Add target to a named service delegation rule." -msgstr "Ajouter une cible à une règle nommée de délégation de service." - -#, fuzzy -msgid "member service delegation target" -msgstr "cible de délégation de service" - -#, fuzzy -msgid "service delegation targets to add" -msgstr "cibles de délégation de service" - -msgid "Delete service delegation." -msgstr "Supprimer une règle de délégation de service." - -msgid "Search for service delegations rule." -msgstr "Rechercher des règle de délégation de service." - -#, fuzzy -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« group-name »)" - -msgid "Remove member from a named service delegation rule." -msgstr "Supprimer un membre d'une règle nommée de délégation de service." - -#, fuzzy -msgid "principal to remove" -msgstr "rôles à supprimer" - -msgid "Remove target from a named service delegation rule." -msgstr "Supprimer une cible d'une règle nommée de délégation de service." - -#, fuzzy -msgid "service delegation targets to remove" -msgstr "cibles de délégation de service" - -msgid "Display information about a named service delegation rule." -msgstr "" -"Afficher les informations au sujet d'une règle de délégation de service." - -msgid "Create a new service delegation target." -msgstr "Créer une nouvelle cible de délégation de service" - -msgid "Add member to a named service delegation target." -msgstr "Ajouter un membre à une cible de délégation de service." - -msgid "Delete service delegation target." -msgstr "Supprimer une cible de délégation de service." - -msgid "Search for service delegation target." -msgstr "Rechercher des cibles de délégation de service" - -msgid "Remove member from a named service delegation target." -msgstr "Supprimer un membre d'une cible de délégation de service." - -msgid "Display information about a named service delegation target." -msgstr "Afficher les informations sur une cible de délégation de service." - -#, fuzzy -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" -"\n" -"Utilisateurs en attente\n" -"\n" -"Gestion des entrées des utilisateurs en attente (« stage users »).\n" -"\n" -"Les entrées des utilisateurs en attente sont situées directement dans le \n" -"conteneur « cn=stage users, cn=accounts, cn=provisioning, SUFFIXE x.\n" -"Les utilisateurs ne peuvent utiliser ces entrées pour s'authentifier (même\n" -"si les entrées contiennent des données d'authentification) et ne sont que\n" -"candidates à devenir des entrées actives.\n" -"\n" -"Les entrées d'utilisateurs actifs sont des utilisateurs Posix situées dans " -"le \n" -"conteneur « cn=accounts, SUFFIXE ». Les utilisateurs peuvent les utiliser " -"pour \n" -"s'authentifier à la condition qu'elles comportent des données " -"d'authentification.\n" -"\n" -"Les entrées d'utilisateurs supprimés sont des entrées d'utilisateurs Posix " -"situées\n" -"dans le conteneur « cn=deleted users, cn=accounts, cn=provisioning, " -"SUFFIXE ».\n" -"Un utilisateur ne peut s'authentifier à l'aide de ces entrées , même si " -"elles contiennent\n" -"des données d'authentification valides.\n" -"\n" -"Le conteneur d'entrées utilisateurs en attente contient des entrées :\n" -" - créées par les commandes « stageuser-add », qui sont des utilisateurs " -"Posix,\n" -" - créées par des systèmes d'approvisionnement externes.\n" -"\n" -"Un utilisateur en attente valide DOIT posséder les propriétés suivantes :\n" -" - le RDN de l'entrée est « uid »\n" -" - l'attribut « ipaUniqueID » est « autogenerate »\n" -"\n" -"IPA prend en charge une grande variété de formats de noms d'utilisateurs, " -"mais\n" -"il est important de savoir que des restrictions peuvent s'appliquer dans un " -"environnement\n" -"particulier. Ainsi, les noms d'utilisateurs débutant par un chiffre ou ceux " -"excédant une \n" -"certaine taille peuvent poser problème sur certains systèmes UNIX.\n" -"Utiliser la commande « ipa config-mod » pour modifier le format autorisé par " -"les outils IPA.\n" -"\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouvel utilisateur en attente :\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Ajouter un utilisateur en attente depuis le conteneur des utilisateurs " -"supprimés :\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" - -msgid "Activate a stage user." -msgstr "Activer un utilisateur en attente." - -msgid "Add a new stage user." -msgstr "Ajouter un nouvel utilisateur en attente." - -msgid "Create Stage user in from a delete user" -msgstr "Créer un utilisateur en attente depuis un utilisateur supprimé" - -msgid "Delete a stage user." -msgstr "Supprimer un utilisateur en attente." - -msgid "Search for stage users." -msgstr "Rechercher des utilisateurs en attente." - -#, fuzzy -msgid "Search for stage users with these member of groups." -msgstr "Rechercher des groupes réseaux avec ces membres de groupes réseau." - -#, fuzzy -msgid "Search for stage users without these member of groups." -msgstr "Rechercher des groupes réseaux sans ces membres de groupes réseau." - -#, fuzzy -msgid "Search for stage users with these member of netgroups." -msgstr "Rechercher des groupes réseaux avec ces membres de groupes réseau." - -#, fuzzy -msgid "Search for stage users without these member of netgroups." -msgstr "Rechercher des groupes réseaux sans ces membres de groupes réseau." - -#, fuzzy -msgid "Search for stage users with these member of roles." -msgstr "Rechercher des hôtes sans ces membres de rôles." - -#, fuzzy -msgid "Search for stage users without these member of roles." -msgstr "Rechercher des hôtes sans ces membres de rôles." - -#, fuzzy -msgid "Search for stage users with these member of HBAC rules." -msgstr "Rechercher des hôtes avec ces membres de règles HBAC." - -#, fuzzy -msgid "Search for stage users without these member of HBAC rules." -msgstr "Rechercher des hôtes avec ces membres de règles HBAC." - -#, fuzzy -msgid "Search for stage users with these member of sudo rules." -msgstr "Rechercher des systèmes sans ces membres de règles sudo." - -#, fuzzy -msgid "Search for stage users without these member of sudo rules." -msgstr "Rechercher des systèmes sans ces membres de règles sudo." - -msgid "Modify a stage user." -msgstr "Modifier un utilisateur en attente." - -#, fuzzy -msgid "Rename the stage user object" -msgstr "Renommer l'objet groupe" - -msgid "Display information about a stage user." -msgstr "Afficher les informations sur un utilisateur en attente." - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" -"\n" -"Topologie\n" -"\n" -"Gestion de la topologie de réplication.\n" -"\n" -"Nécessite a minima le niveau 1 de domaine.\n" - -msgid "Segment name" -msgstr "Nom de segment" - -msgid "Arbitrary string identifying the segment" -msgstr "Chaîne arbitraire identifiant le segment" - -msgid "Left node" -msgstr "Nœud de gauche" - -msgid "Left replication node - an IPA server" -msgstr "Nœud de réplication à gauche - un serveur IPA" - -msgid "Right node" -msgstr "Nœud de droite" - -msgid "Right replication node - an IPA server" -msgstr "Nœud de réplication à droite - un serveur IPA" - -msgid "Connectivity" -msgstr "Connectivité" - -msgid "Direction of replication between left and right replication node" -msgstr "" -"Direction de la réplication entre les nœuds gauche et droit de réplication" - -msgid "Attributes to strip" -msgstr "Attributs à supprimer" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" -"Une liste séparée par des espaces d'attributs qui seront supprimés lors des " -"mises à jour de la réplication." - -#, fuzzy -msgid "Attributes to replicate" -msgstr "Attributs à supprimer" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" -"Attributs qui ne seront pas répliqués vers un serveur consommateur lors " -"d'une réplication partielle. Par exemple, `(objectclass=*) $ EXCLUDE " -"accountlockout memberof" - -msgid "Attributes for total update" -msgstr "Attributs pour une mise à jour complète" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" -"Les attributs qui ne sont pas répliqués vers un serveur consommateur pendant " -"une mise à jour complète. Par exemple : (objectclass=*) $ EXCLUDE " -"accountlockout" - -msgid "Session timeout" -msgstr "Délai d'expiration de la session" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" -"Durée en secondes à attendre le bon achèvement des requêtes LDAP sortantes " -"de la part d'un replica distant avant mise en échec" - -msgid "Replication agreement enabled" -msgstr "Agrément de réplication activé" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" -"Activation ou non d'un agrément de réplication, signifiant que la " -"réplication fonctionne par le biais de cet agrément" - -msgid "Suffix name" -msgstr "Nom du suffixe" - -msgid "LDAP suffix to be managed" -msgstr "Suffixe LDAP qui sera géré" - -msgid "Add a new segment." -msgstr "Ajouter un noveau segment." - -msgid "Delete a segment." -msgstr "Supprimer un segment." - -msgid "Search for topology segments." -msgstr "Rechercher des segments de topologie." - -msgid "Modify a segment." -msgstr "Modifier un segment." - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" -"Demander une réinitialisation complète du nœud en récupérant les données " -"d'un autre nœud." - -msgid "Initialize left node" -msgstr "Initialiser le nœud de gauche" - -msgid "Initialize right node" -msgstr "Initialiser le nœud de droite" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "Arrêter un rafraichissement en cours du ou des nœuds choisis." - -msgid "Display a segment." -msgstr "Afficher un segment." - -msgid "Add a new topology suffix to be managed." -msgstr "Ajouter un nouveau suffixe de topologie à gérer." - -msgid "Delete a topology suffix." -msgstr "Supprimer un suffixe de topologie." - -msgid "Search for topology suffices." -msgstr "Rechercher des suffixes de topologie." - -msgid "Modify a topology suffix." -msgstr "Modifier un suffixe de topologie." - -msgid "Show managed suffix." -msgstr "Afficher le suffixe géré." - -#, fuzzy -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" -"\n" -"Vérifier la topologie de réplication pour le suffixe.\n" -"\n" -"Vérifications effectuées :\n" -" 1. vérfier si la topologie n'est pas déconnectée. En d'autres mots, si des " -"chemins\n" -" de réplication existent bien entre tous les serveurs.\n" -" 2. vérifier si tous les serveurs n'ont pas un nombre supérieur à celui " -"recommandé\n" -" d'agrément de réplication.\n" - -msgid "Two-way trust" -msgstr "Confiance réciproque" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" -"Établir une relation d'approbation bidirectionnelle. Par défaut, la relation " -"est unilatérale entrante uniquement." - -msgid "Preserved user" -msgstr "Utilisateurs préservés" - -msgid "Add one or more certificates to the user entry" -msgstr "Ajouter un ou plusieurs certificats à l'entrée utilisateur" - -msgid "Remove one or more certificates to the user entry" -msgstr "Supprimer les certificats de l'entrée de l'utilisateur" - -msgid "Move deleted user into staged area" -msgstr "Déplacer l'utilisateur supprimé dans l'espace en attente" - -msgid "Undelete a delete user account." -msgstr "Restaurer un compte utilisateur supprimé." - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "Vault name" -msgstr "Nom du coffre-fort" - -msgid "Vault description" -msgstr "Description du coffre-fort" - -msgid "Vault type" -msgstr "Type de coffre-fort" - -msgid "Salt" -msgstr "Sel" - -msgid "Vault salt" -msgstr "Sel du coffre-fort" - -msgid "Public key" -msgstr "Clé publique" - -msgid "Vault public key" -msgstr "Clé publique du coffre-fort" - -msgid "Owner users" -msgstr "Utilisateurs propriétaires" - -msgid "Owner groups" -msgstr "Groupes propriétaires" - -msgid "Owner services" -msgstr "Services propriétaires" - -msgid "Failed owners" -msgstr "Propriétaires en échec" - -msgid "Vault service" -msgstr "Service du coffre-fort" - -msgid "Shared vault" -msgstr "Coffre-fort partagé" - -msgid "Vault user" -msgstr "Utilisateur du coffre-fort" - -msgid "Transport Certificate" -msgstr "Certificat de transport" - -msgid "Service name of the service vault" -msgstr "Nom de service du service coffre" - -msgid "Username of the user vault" -msgstr "Nom d'utilisateur du coffre-fort personnel" - -msgid "Add members to a vault." -msgstr "Ajouter des membres à un coffre-fort." - -msgid "Add owners to a vault." -msgstr "Ajouter des propriétaires à un coffre-fort." - -#, fuzzy -msgid "owner user" -msgstr "Utilisateurs propriétaires" - -#, fuzzy -msgid "owner group" -msgstr "Groupes propriétaires" - -#, fuzzy -msgid "owner service" -msgstr "Services propriétaires" - -msgid "Owners that could not be added" -msgstr "Propriétaires n'ayant pu être ajoutés" - -msgid "Number of owners added" -msgstr "Nombre de propriétaires ajoutés" - -msgid "Session key wrapped with transport certificate" -msgstr "Clé de session emballée avec le certificat de transport" - -msgid "Vault data encrypted with session key" -msgstr "Les données du coffre-fort sont chiffrées avec la clé de session" - -msgid "Nonce" -msgstr "Usage unique" - -msgid "Delete a vault." -msgstr "Supprimer un coffre-fort." - -msgid "Search for vaults." -msgstr "Rechercher des coffres-forts" - -msgid "List all service vaults" -msgstr "Énumérer tous les coffres-forts de services" - -msgid "List all user vaults" -msgstr "Énumérer tous les coffres-forts d'utilisateurs" - -msgid "Remove members from a vault." -msgstr "Supprimer les membres d'un coffre-fort." - -msgid "Remove owners from a vault." -msgstr "Supprimer les propriétaires d'un coffre-fort." - -msgid "Owners that could not be removed" -msgstr "Propriétaires n'ayant pu être supprimés" - -msgid "Number of owners removed" -msgstr "Nombre de propriétaires supprimés" - -msgid "Display information about a vault." -msgstr "Afficher des informations sur un coffre-fort." - -msgid "Show vault configuration." -msgstr "Afficher la configuration du coffre-fort." - -msgid "Output file to store the transport certificate" -msgstr "Fichier où stocker le certificat de transport" - -msgid "Add owners to a vault container." -msgstr "Ajouter des propriétaires à un conteneur de coffre-fort." - -msgid "Delete a vault container." -msgstr "Supprimer un conteneur de coffre-fort." - -msgid "Remove owners from a vault container." -msgstr "Supprimer des propriétaires d'un conteneur de coffre-fort." - -msgid "Display information about a vault container." -msgstr "Afficher les informations sur un conteneur de coffre-fort." - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "Résoudre un nom de système DNS. (Obsolète)" - -msgid "Hostname (FQDN)" -msgstr "Nom d'hôte (FQDN)" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" -"Forcer la création de la zone DNS même si elle recouvre une zone existante." - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" -"Forcer la création de la zone DNS même si le serveur de nom n'est pas " -"résoluble. (Obsolète)" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" -"\n" -"Groupes d'utilisateurs\n" -"\n" -"Gérer des groupes d'utilisateurs. Par défaut, tout nouveau groupe est " -"POSIX.\n" -"On peut ajouter l'option « --nonposix » à la commande « group-add » pour\n" -"marquer un nouveau groupe comme non-POSIX et utiliser l'option « --posix »\n" -"de la commande « group-mod » pour convertir un groupe non-POSIX en groupe\n" -"POSIX. Les groupes POSIX ne peuvent pas être convertis en groupes non-" -"POSIX.\n" -"\n" -"Chaque groupe doit avoir une description.\n" -"\n" -"Les groupes POSIX doivent avoir un numéro d'ID de groupe (GID). Modifier un\n" -"GID est faisable, mais cela peut avoir un impact sur vos droits d'accès aux\n" -"fichiers. Il n'est pas nécessaire d'indiquer un GID à la création du " -"groupe.\n" -"IPA en générera un automatiquement s'il n'est pas fourni.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouveau groupe :\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Ajouter un nouveau groupe non-POSIX :\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convertir un groupe non-POSIX en groupe POSIX :\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Ajouter un nouveau groupe POSIX avec un numéro d'ID de groupe donné :\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Ajouter un nouveau groupe POSIX et laisser IPA assigner un numéro d'ID de " -"groupe :\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Supprimer un groupe :\n" -" ipa group-del unixadmins\n" -"\n" -" Ajouter le groupe « remoteadmins » au groupe « localadmins » :\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Ajouter plusieurs utilisateurs au groupe « localadmins » :\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Supprimer un utilisateur du groupe « localadmins » :\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Afficher des informations à propos d'un groupe donné :\n" -" ipa group-show localadmins\n" -"\n" -"L'adhésion à un groupe externe est conçue pour permettre aux utilisateurs " -"de\n" -"domaines approuvés d'être assimilés aux groupes POSIX locaux pour pouvoir\n" -"utiliser réellement les ressources IPA. Des membres externes peuvent être\n" -"ajoutés aux groupes spécifiquement crées comme externes et non-POSIX. Un " -"tel\n" -"groupe peut plus tard être incorporé dans un des groupes POSIX\n" -"\n" -"Un membre de groupe externe est actuellement identifié par un « Security\n" -"Identifier (SID) » tel que défini pour le domaine approuvé. Pour ajouter\n" -"un membre de groupe externe, il est possible de le définir, soit au format\n" -"SID, soit DOM\\name, soit name@domain. IPA essayera de résoudre le nom " -"passé\n" -"en SID en se servant du « Global Catalog » des domaines approuvés.\n" -"\n" -"Exemple:\n" -"\n" -"1. Créer un groupe par assimilation au domaine approuvé « admins »\n" -" et à leur groupe POSIX local :\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Ajouter l'identifiant de sécurité de « Domain Admins » au\n" -" groupe externe « ad_admins_external » :\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Autoriser des membres du groupe « ad_admins_external » à être associés " -"au\n" -" groupe POSIX « ad_admins » :\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Lister les membres externes du groupe « ad_admins_external » pour voir\n" -" leur SID :\n" -"\n" -" ipa group-show ad_admins_external\n" - -#, fuzzy -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" -"\n" -"Simuler l'utilisation des contrôles d'accès fondés sur l'hôte\n" -"\n" -"Les règles HBAC contrôlent qui peut accéder à quel service sur quels hôtes.\n" -"Vous pouvez utiliser HBAC pour contrôler quels utilisateurs ou quels " -"groupes\n" -"ont accés à un service ou à un groupe de services, sur un hôte cible.\n" -"\n" -"L'application de règles HBAC présuppose un environnement de production ;\n" -"ce greffon a pour objet de fournir une simulation de l'évaluation des " -"règles\n" -"HBAC sans nécessiter d'accès à cet environnement.\n" -"\n" -" Tester l'arrivée d'un utilisateur dans un service sur un hôte donné\n" -" vis à vis des règles actives existantes.\n" -"\n" -"ipa hbactest --user= --host= --service=\\\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\\\n" -" [--sizelimit= ]\n" -"\n" -"--user, --host et --service sont obligatoires, les autres sont " -"optionnelles.\n" -"\n" -" Si --rules est défini, simule l'activation des règles « rules-list » et\n" -" teste la connexion de l'utilisateur uniquement sur ces règles.\n" -"\n" -" Si --enabled est défini, toutes les règles HBAC activées sont ajoutées à\n" -" la simulation\n" -"\n" -" Si --disabled est défini, toutes les règles HBAC désactivées sont ajoutées\n" -" à la simulation\n" -"\n" -" Si --nodetail est défini, il n'est pas renvoyé d'information sur les " -"règles satisfaites ou non satisfaites.\n" -"\n" -" Si --rules et --enabled sont définis tous deux, la simulation est " -"appliquée\n" -" à --rules _et_ à tous les règles IPA activées.\n" -"\n" -" Si --rules n'est pas défini, la simulation est lancée vis à sis de toutes\n" -" les règles IPA activées.\n" -" Par défaut, il y a une limite globale IPA pour le nombre d'entrées\n" -" renvoyées, vous pouvez la modifier avec l'option « --sizelimit ».\n" -"\n" -"EXEMPLES :\n" -"\n" -" 1. Utiliser toutes les règles HBAC activées dans la base de données IPA\n" -" pour la simulation :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Désactiver le résumé détaillé sur l'application des règles :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Tester explicitement les règles HBAC indiquées :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" -"--rules=my-second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Utiliser toutes les règles HBAC activées de la base de données IPA\n" -" plus les règles explicitement définies :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" -"--rules=my-second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Tester toutes les règles HBAC désactivées de la base de données " -"IPA :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Tester toutes les règles HBAC désactivées de la base de données IPA\n" -" plus les règles explicitement définies :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" -"--rules=my-second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Tester toutes les règles HBAC (activées et désactivées) de la base\n" -" de données IPA :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -"\n" -"\n" -"TEST HBAC ET domaines approuvés\n" -"\n" -"Si un domaine approuvé externe est configuré dans IPA, les règles HBAC\n" -"sont aussi appliquées aux utilisateurs accédant aux ressources IPA à partir\n" -"du domaine approuvé. Les utilisateurs des domaines approuvés et les\n" -"groupes (et leur SID) peuvent être assignés à des groupes externes pouvant\n" -"être membres de groupes POSIX d'IPA éligibles aux règles HBAC, ce qui\n" -"autorise un accès aux ressources protégées par le système HBAC.\n" -"\n" -"Le greffon « hbactest » peut tester des accès, à la fois d'utilisateurs\n" -"IPA locaux et d'utilisateurs de domaines approuvés à partir, soit du\n" -"nom d'utilisateur pleinement qualifié, soit du SID utilisateur. De tels " -"noms\n" -"d'utilisateur doivent avoir un domaine approuvé précisé comme nom court\n" -"(DOMAINE\\Administrateur) ou avec un nom de principal d'utilisateur (UPN),\n" -"Administrator@ad.test.\n" -"\n" -"Veuillez noter que « hbactest » exécuté avec un utilisateur de domaine de\n" -"confiance en tant que paramètre --user ne peut être lancé que par des\n" -"membres du groupe des « administrateurs de confiance ».\n" -"\n" -"EXEMPLES :\n" -"\n" -" 1. Tester si un utilisateur d'un domaine approuvé défini par son\n" -" nom court satisfait à toute règle :\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Tester si un utilisateur d'un domaine approuvé défini par son\n" -" nom de domaine satisfait à toute règle :\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Tester si un utilisateur d'un domaine approuvé défini par son\n" -" SID satisfait à toute règle :\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Tester si un autre utilisateur d'un domaine approuvé défini\n" -" par son SID satisfait à toute règle :\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Tester si un autre utilisateur d'un domaine approuvé défini par\n" -" son nom court satisfait à toute règle :\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" - -msgid "Managed suffixes" -msgstr "Suffixes administrés" - -msgid "Check connection to remote IPA server." -msgstr "Vérifier la connexion au serveur IPA distant." - -msgid "Remote server name" -msgstr "Nom du serveur distant" - -msgid "Remote IPA server hostname" -msgstr "Nom d'hôte du serveur IPA distant" - -msgid "suffix" -msgstr "suffixe" - -#, fuzzy -msgid "Search for servers with these managed suffixes." -msgstr "Rechercher des groupes réseaux dont les membres sont ces utilisateurs." - -#, fuzzy -msgid "Search for servers without these managed suffixes." -msgstr "" -"Rechercher des groupes réseaux dont les membres ne sont pas ces utilisateurs." - -msgid "Add a manager to the stage user entry" -msgstr "Ajouter un responsable à l'entrée d'utilisateur en attente" - -msgid "Remove a manager to the stage user entry" -msgstr "Supprimer un responsable de l'entrée de l'utilisateur en attente." - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -msgid "Managed LDAP suffix DN" -msgstr "DN du suffixe LDAP administré" - -msgid "Search for topology suffixes." -msgstr "Rechercher des suffixes de topologie." - -msgid "Add a manager to the user entry" -msgstr "Ajouter un responsable à l'entrée de l'utilisateur" - -msgid "Remove a manager to the user entry" -msgstr "Supprimer un responsable de l'entrée de l'utilisateur" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -#, fuzzy -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" -"Permissions à accorder (« read », « write », « add », « delete », « all »)" - -msgid "Comma-separated list of attributes" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" -"\n" -"Gestion de certficats IPA\n" -"\n" -"Implémente un jeu de commandes pour gérer les certificats SSL du serveur.\n" -"\n" -"Les demandes de certificats existent sous la forme de\n" -"« Certificate Signing Request (CSR) » au format PEM.\n" -"\n" -"La plaque d'identité CA n'utilise que la valeur CN du CSR et force le reste\n" -"du sujet aux valeurs configurées dans le serveur.\n" -"\n" -"Un certificat est enregistré avec un principal de service et un principal\n" -" de service a besoin d'un hôte.\n" -"\n" -"Donc, pour demander un certificat :\n" -"\n" -"* l'hôte doit exister\n" -"* le service doit exister (utiliser --add pour l'ajouter automatiquement)\n" -"\n" -"RECHERCHE :\n" -"\n" -"Les certificats peuvent être recherchés par sujet, numéro de série,\n" -"motif de révocation, dates de validité et date d'émission.\n" -"\n" -"En recherchant par dates, _from effectue une recherche >= à la date et _to\n" -"une recherche <= à la date. Combinées, elles sont équivalentes à un AND.\n" -"\n" -"La date est traitée comme GMT pour correspondre aux dates de certificats.\n" -"\n" -"La date est au format YYYY-mm-dd.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Demander un nouveau certificat et ajouter le principal :\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrouver un certificat existant :\n" -" ipa cert-show 1032\n" -"\n" -" Révoquer un certificat (voir RFC 5280 pour le détail des raisons) :\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Lever l'état de maintien de révocation d'un certificat :\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Vérifier l'état d'une demande de signature :\n" -" ipa cert-status 10\n" -"\n" -" Rechercher des certificats par nom d'hôte :\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Rechercher les certificats révoqués par motif :\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Rechercher les certificats selon la date d'émission :\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"Actuellement IPA émet (ou refuse) aussitôt toute demande de certificat, " -"donc\n" -"l'état d'une requête ne sert normalement pas. C'est en vue d'une " -"utilisation\n" -"future ou au cas où un CA n'émettrait pas immédiatement un certificat.\n" -"\n" -"Les motifs de révocation suivants sont pris en charge :\n" -"\n" -" * 0 - « unspecified » (non précisé)\n" -" * 1 - « keyCompromise » (clé compromise)\n" -" * 2 - « cACompromise » (CA compromis)\n" -" * 3 - « affiliationChanged » (affiliation modifiée)\n" -" * 4 - « superseded » (remplacé)\n" -" * 5 - « cessationOfOperation » (arrêt d'opération)\n" -" * 6 - « certificateHold » (certificat retenu)\n" -" * 8 - « removeFromCRL » (sorti du CRL)\n" -" * 9 - « privilegeWithdrawn » (retrait de privilège)\n" -" * 10 - « aACompromise » (compromission)\n" -"\n" -"Notez que le motif code 7 ne sert pas. Voir RFC 5280 pour plus de détails :\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" - -#, fuzzy -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" -"\n" -"Délégation de groupe à groupe\n" -"\n" -"Une permission permet une délégation fine des autorisations. Les règles de\n" -"contrôle d'accès, ou les instructions (ACI), accordent la possibilité aux\n" -"permissions de réaliser certaines tâches comme l'ajout d'utilisateur, la\n" -"modification d'un groupe, etc.\n" -"\n" -"La délégation de groupe à groupe permet aux membres d'un groupe de modifier\n" -"un jeu d'attributs de membres d'un autre groupe.\n" -"\n" -"EXEMPLES:\n" -"\n" -" Ajouter une règle de délégation permettant aux gestionnaires de modifier\n" -" les adresses des employés :\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" En gérant une liste d'attributs, vous devez inclure tous les attributs,\n" -" y compris les existants. Ajouter « postalCode » à la liste :\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Afficher la règle modifiée :\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Supprimer une règle :\n" -" ipa delegation-del \"managers edit employees' street\"\n" - -#, fuzzy -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "Permissions à accorder (« read », « write »). Par défaut : « write »." - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" - -#, fuzzy -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Redirecteurs globaux. Un port personnalisé peut être indiqué pour chaque " -"redirecteur en utilisant le format standard « adresse_IP port PORT »" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" -"Délai entre deux interrogations du serveur de noms pour la recherche de " -"nouvelles zones" - -msgid "DNS class" -msgstr "Classe de DNS" - -msgid "Comma-separated list of raw A records" -msgstr "" - -msgid "Comma-separated list of raw AAAA records" -msgstr "" - -msgid "Comma-separated list of raw A6 records" -msgstr "" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "" - -msgid "Comma-separated list of raw APL records" -msgstr "" - -msgid "Comma-separated list of raw CERT records" -msgstr "" - -msgid "Comma-separated list of raw CNAME records" -msgstr "" - -msgid "Comma-separated list of raw DHCID records" -msgstr "" - -msgid "Comma-separated list of raw DLV records" -msgstr "" - -msgid "Comma-separated list of raw DNAME records" -msgstr "" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "" - -msgid "Comma-separated list of raw DS records" -msgstr "" - -msgid "Comma-separated list of raw HIP records" -msgstr "" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "" - -msgid "Comma-separated list of raw KEY records" -msgstr "" - -#, fuzzy -msgid "KEY Flags" -msgstr "Marqueurs" - -#, fuzzy -msgid "KEY Protocol" -msgstr "Enregistrement KEY" - -msgid "Protocol" -msgstr "" - -#, fuzzy -msgid "KEY Algorithm" -msgstr "Algorithme" - -#, fuzzy -msgid "KEY Public Key" -msgstr "Clé publique" - -#, fuzzy -msgid "Public Key" -msgstr "Clé publique" - -msgid "Comma-separated list of raw KX records" -msgstr "" - -msgid "Comma-separated list of raw LOC records" -msgstr "" - -msgid "Comma-separated list of raw MX records" -msgstr "" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "" - -msgid "Comma-separated list of raw NS records" -msgstr "" - -msgid "Comma-separated list of raw NSEC records" -msgstr "" - -#, fuzzy -msgid "NSEC Next Domain Name" -msgstr "Nom de domaine NIS" - -#, fuzzy -msgid "Next Domain Name" -msgstr "Nom de domaine" - -msgid "NSEC Type Map" -msgstr "" - -#, fuzzy -msgid "Type Map" -msgstr "Type" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "" - -msgid "Comma-separated list of raw PTR records" -msgstr "" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "" - -#, fuzzy -msgid "RRSIG Type Covered" -msgstr "Enregistrement RRSIG" - -msgid "Type Covered" -msgstr "" - -#, fuzzy -msgid "RRSIG Algorithm" -msgstr "Algorithme DS" - -msgid "RRSIG Labels" -msgstr "" - -#, fuzzy -msgid "Labels" -msgstr "Étiquette" - -msgid "RRSIG Original TTL" -msgstr "" - -msgid "Original TTL" -msgstr "" - -msgid "RRSIG Signature Expiration" -msgstr "" - -#, fuzzy -msgid "Signature Expiration" -msgstr "Expiration de mot de passe" - -msgid "RRSIG Signature Inception" -msgstr "" - -msgid "Signature Inception" -msgstr "" - -#, fuzzy -msgid "RRSIG Key Tag" -msgstr "Étiquette de clé DS" - -msgid "RRSIG Signer's Name" -msgstr "" - -#, fuzzy -msgid "Signer's Name" -msgstr "Nom du serveur" - -msgid "RRSIG Signature" -msgstr "" - -msgid "Signature" -msgstr "" - -msgid "Comma-separated list of raw RP records" -msgstr "" - -msgid "Comma-separated list of raw SIG records" -msgstr "" - -#, fuzzy -msgid "SIG Type Covered" -msgstr "Enregistrement SIG" - -#, fuzzy -msgid "SIG Algorithm" -msgstr "Algorithme DS" - -#, fuzzy -msgid "SIG Labels" -msgstr "Étiquette" - -msgid "SIG Original TTL" -msgstr "" - -msgid "SIG Signature Expiration" -msgstr "" - -msgid "SIG Signature Inception" -msgstr "" - -#, fuzzy -msgid "SIG Key Tag" -msgstr "Étiquette de clé DS" - -#, fuzzy -msgid "SIG Signer's Name" -msgstr "Nom de la vue d'identifiants" - -msgid "SIG Signature" -msgstr "" - -msgid "Comma-separated list of raw SPF records" -msgstr "" - -msgid "Comma-separated list of raw SRV records" -msgstr "" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "" - -msgid "Comma-separated list of raw TA records" -msgstr "" - -msgid "Comma-separated list of raw TKEY records" -msgstr "" - -msgid "Comma-separated list of raw TSIG records" -msgstr "" - -msgid "Comma-separated list of raw TXT records" -msgstr "" - -#, fuzzy -msgid "SOA time to live" -msgstr "Durée de vie" - -#, fuzzy -msgid "SOA record time to live" -msgstr "Heure d'expiration de l'enregistrement SOA" - -msgid "SOA class" -msgstr "Classe SOA" - -msgid "SOA record class" -msgstr "Classe d'enregistrement SOA " - -#, fuzzy -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Redirecteurs par zone. Un port personnalisé peut être indiqué pour chaque " -"redirecteur avec le format standard « adresse_IP port PORT »" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" -"Ajouter un enregistrement direct pour les serveurs de noms situés dans la " -"zone créée" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" - -#, fuzzy -msgid "Consume an entitlement." -msgstr "Commande non implémentée" - -#, fuzzy -msgid "Quantity" -msgstr "Identité" - -#, fuzzy -msgid "Search for entitlement accounts." -msgstr "Rechercher des délégations." - -#, fuzzy -msgid "Retrieve the entitlement certs." -msgstr "Récupérer un certificat existant." - -#, fuzzy -msgid "Import an entitlement certificate." -msgstr "Récupérer un certificat existant." - -msgid "UUID" -msgstr "" - -#, fuzzy -msgid "Enrollment UUID" -msgstr "Inscription" - -msgid "Register to the entitlement system." -msgstr "" - -msgid "Username" -msgstr "Nom d'utilisateur" - -#, fuzzy -msgid "Enrollment UUID (not implemented)" -msgstr "Commande non implémentée" - -#, fuzzy -msgid "Registration password" -msgstr "Réinitialiser le mot de passe" - -#, fuzzy -msgid "Display current entitlements." -msgstr "Afficher un segment." - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" -"\n" -"Groupes d'utilisateurs\n" -"\n" -"Gérer des groupes d'utilisateurs. Par défaut, tout nouveau groupe est " -"POSIX.\n" -"On peut ajouter l'option « --nonposix » à la commande « group-add » pour\n" -"marquer un nouveau groupe comme non-POSIX et utiliser l'option « --posix »\n" -"de la commande « group-mod » pour convertir un groupe non-POSIX en groupe\n" -"POSIX. Les groupes POSIX ne peuvent pas être convertis en groupes non-" -"POSIX.\n" -"\n" -"Chaque groupe doit avoir une description.\n" -"\n" -"Les groupes POSIX doivent avoir un numéro d'ID de groupe (GID). Modifier un\n" -"GID est faisable, mais cela peut avoir un impact sur vos droits d'accès aux\n" -"fichiers. Il n'est pas nécessaire d'indiquer un GID à la création du " -"groupe.\n" -"IPA en générera un automatiquement s'il n'est pas fourni.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouveau groupe :\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Ajouter un nouveau groupe non-POSIX :\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convertir un groupe non-POSIX en groupe POSIX :\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Ajouter un nouveau groupe POSIX avec un numéro d'ID de groupe donné :\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Ajouter un nouveau groupe POSIX et laisser IPA assigner un numéro d'ID de " -"groupe :\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Supprimer un groupe :\n" -" ipa group-del unixadmins\n" -"\n" -" Ajouter le groupe « remoteadmins » au groupe « localadmins » :\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Ajouter plusieurs utilisateurs au groupe « localadmins » :\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Supprimer un utilisateur du groupe « localadmins » :\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Afficher des informations à propos d'un groupe donné :\n" -" ipa group-show localadmins\n" -"\n" -"L'adhésion à un groupe externe est conçue pour permettre aux utilisateurs " -"de\n" -"domaines approuvés d'être assimilés aux groupes POSIX locaux pour pouvoir\n" -"utiliser réellement les ressources IPA. Des membres externes peuvent être\n" -"ajoutés aux groupes spécifiquement crées comme externes et non-POSIX. Un " -"tel\n" -"groupe peut plus tard être incorporé dans un des groupes POSIX\n" -"\n" -"Un membre de groupe externe est actuellement identifié par un « Security\n" -"Identifier (SID) » tel que défini pour le domaine approuvé. Pour ajouter\n" -"un membre de groupe externe, il est possible de le définir, soit au format\n" -"SID, soit DOM\\name, soit name@domain. IPA essayera de résoudre le nom " -"passé\n" -"en SID en se servant du « Global Catalog » des domaines approuvés.\n" -"\n" -"Exemple:\n" -"\n" -"1. Créer un groupe par assimilation au domaine approuvé « admins »\n" -" et à leur groupe POSIX local :\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Ajouter l'identifiant de sécurité de « Domain Admins » au\n" -" groupe externe « ad_admins_external » :\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Autoriser des membres du groupe « ad_admins_external » à être associés " -"au\n" -" groupe POSIX « ad_admins » :\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Lister les membres externes du groupe « ad_admins_external » pour voir\n" -" leur SID :\n" -"\n" -" ipa group-show ad_admins_external\n" - -#, fuzzy -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "Membres d'un domaine approuvé sous la forme DOM\\nom ou nom@domaine" - -msgid "comma-separated list of users to add" -msgstr "" - -#, fuzzy -msgid "comma-separated list of groups to add" -msgstr "groupes d'hôtes à ajouter" - -#, fuzzy -msgid "comma-separated list of users to remove" -msgstr "" -"Une liste, séparée avec des virgules, des champs à explorer pour une " -"recherche d'utilisateurs" - -#, fuzzy -msgid "comma-separated list of groups to remove" -msgstr "groupes d'hôtes à supprimer" - -#, fuzzy -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" -"\n" -"Contrôle d'accès des systèmes (HBAC)\n" -"\n" -"HBAC (Host-based acces control) permet de contrôler qui peut accéder\n" -"à quels services sur quels systèmes, et d'où. Il est possible\n" -"d'utiliser le système HBAC afin de contrôler quels utilisateurs ou quels\n" -"groupes d'un système source peuvent accéder à quels services, ou groupes\n" -"de services, sur un hôte cible.\n" -"\n" -"Vous pouvez aussi indiquer une catégorie d'utilisateur, d'hôtes cibles.\n" -"La seule catégorie existante pour le moment est \"all\", mais elles\n" -"pourront être étendues dans le futur.\n" -"\n" -"Les hôtes cible des règles HBAC doivent être des hôtes administrés par IPA.\n" -"\n" -"Les services et groupes de services disponibles sont gérés respectivement\n" -"par les greffons « hbacsvc » et « hbacsvcgroup ».\n" -"\n" -"EXEMPLES:\n" -"\n" -" Créer une règle \"test1\" autorisant tous les utilisateurs à accéder\n" -" le serveur « server » depuis n'importe où :\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Afficher les propriétés d'une règle HBAC nommée :\n" -" ipa hbacrule-show test1\n" -"\n" -" Créer une règle pour un service donné. Elle permet d'avoir accés au\n" -" service sshd sur toute machine depuis n'importe quelle autre machine :\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Créer une règle pour un nouveau groupe de services. Elle permet d'avoir\n" -" accès au service FTP de toute machine depuis n'importe quelle machine.\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Désactiver une règle HBAC nommée :\n" -" ipa hbacrule-disable test1\n" -"\n" -" Supprimer une règle HBAC nommée :\n" -" ipa hbacrule-del allow_server\n" -"\n" - -msgid "Source host category" -msgstr "Catégorie d'hôtes sources" - -msgid "Source host category the rule applies to" -msgstr "Catégorie d'hôtes sources à laquelle la règle s'applique" - -msgid "Source Hosts" -msgstr "Hôtes sources" - -msgid "Source Host Groups" -msgstr "Groupes d'hôtes sources" - -msgid "comma-separated list of hosts to add" -msgstr "" - -#, fuzzy -msgid "comma-separated list of host groups to add" -msgstr "groupes d'hôtes à ajouter" - -#, fuzzy -msgid "comma-separated list of HBAC services to add" -msgstr "Services HBAC à ajouter" - -#, fuzzy -msgid "comma-separated list of HBAC service groups to add" -msgstr "Groupes de services HBAC à ajouter" - -#, fuzzy -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "Ajouter des hôtes et des groupes d'hôtes cibles à une règle HBAC." - -#, fuzzy -msgid "comma-separated list of hosts to remove" -msgstr "" -"Une liste, séparée avec des virgules, des champs à explorer pour une " -"recherche d'utilisateurs" - -#, fuzzy -msgid "comma-separated list of host groups to remove" -msgstr "groupes d'hôtes à supprimer" - -#, fuzzy -msgid "comma-separated list of HBAC services to remove" -msgstr "Services HBAC à supprimer" - -#, fuzzy -msgid "comma-separated list of HBAC service groups to remove" -msgstr "Groupes de services HBAC à supprimer" - -#, fuzzy -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "Retirer des hôtes et des groupes d'hôtes cibles d'une règle HBAC." - -#, fuzzy -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" -"\n" -"Groupes de services HBAC\n" -"\n" -"Les groupes de services HBAC peuvent contenir n'importe quel nombre de\n" -"services « membres » individuels. Chaque groupe doit avoir une description.\n" -"\n" -"EXEMPLES:\n" -"\n" -" Ajouter un nouveau groupe de services HBAC :\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Ajouter des membres à un groupe de services HBAC :\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Afficher les informations d'un groupe nommé :\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Supprimer un groupe de services HBAC :\n" -" ipa hbacsvcgroup-del login\n" - -#, fuzzy -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" -"\n" -"Simuler l'utilisation des contrôles d'accès fondés sur l'hôte\n" -"\n" -"Les règles HBAC contrôlent qui peut accéder à quel service sur quels hôtes.\n" -"Vous pouvez utiliser HBAC pour contrôler quels utilisateurs ou quels " -"groupes\n" -"ont accés à un service ou à un groupe de services, sur un hôte cible.\n" -"\n" -"L'application de règles HBAC présuppose un environnement de production ;\n" -"ce greffon a pour objet de fournir une simulation de l'évaluation des " -"règles\n" -"HBAC sans nécessiter d'accès à cet environnement.\n" -"\n" -" Tester l'arrivée d'un utilisateur dans un service sur un hôte donné\n" -" vis à vis des règles actives existantes.\n" -"\n" -"ipa hbactest --user= --host= --service=\\\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\\\n" -" [--sizelimit= ]\n" -"\n" -"--user, --host et --service sont obligatoires, les autres sont " -"optionnelles.\n" -"\n" -" Si --rules est défini, simule l'activation des règles « rules-list » et\n" -" teste la connexion de l'utilisateur uniquement sur ces règles.\n" -"\n" -" Si --enabled est défini, toutes les règles HBAC activées sont ajoutées à\n" -" la simulation\n" -"\n" -" Si --disabled est défini, toutes les règles HBAC désactivées sont ajoutées\n" -" à la simulation\n" -"\n" -" Si --nodetail est défini, il n'est pas renvoyé d'information sur les " -"règles satisfaites ou non satisfaites.\n" -"\n" -" Si --rules et --enabled sont définis tous deux, la simulation est " -"appliquée\n" -" à --rules _et_ à tous les règles IPA activées.\n" -"\n" -" Si --rules n'est pas défini, la simulation est lancée vis à sis de toutes\n" -" les règles IPA activées.\n" -" Par défaut, il y a une limite globale IPA pour le nombre d'entrées\n" -" renvoyées, vous pouvez la modifier avec l'option « --sizelimit ».\n" -"\n" -"EXEMPLES :\n" -"\n" -" 1. Utiliser toutes les règles HBAC activées dans la base de données IPA\n" -" pour la simulation :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Désactiver le résumé détaillé sur l'application des règles :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Tester explicitement les règles HBAC indiquées :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" -"--rules=my-second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Utiliser toutes les règles HBAC activées de la base de données IPA\n" -" plus les règles explicitement définies :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" -"--rules=my-second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Tester toutes les règles HBAC désactivées de la base de données " -"IPA :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Tester toutes les règles HBAC désactivées de la base de données IPA\n" -" plus les règles explicitement définies :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" -"--rules=my-second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Tester toutes les règles HBAC (activées et désactivées) de la base\n" -" de données IPA :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -"\n" -"\n" -"TEST HBAC ET domaines approuvés\n" -"\n" -"Si un domaine approuvé externe est configuré dans IPA, les règles HBAC\n" -"sont aussi appliquées aux utilisateurs accédant aux ressources IPA à partir\n" -"du domaine approuvé. Les utilisateurs des domaines approuvés et les\n" -"groupes (et leur SID) peuvent être assignés à des groupes externes pouvant\n" -"être membres de groupes POSIX d'IPA éligibles aux règles HBAC, ce qui\n" -"autorise un accès aux ressources protégées par le système HBAC.\n" -"\n" -"Le greffon « hbactest » peut tester des accès, à la fois d'utilisateurs\n" -"IPA locaux et d'utilisateurs de domaines approuvés à partir, soit du\n" -"nom d'utilisateur pleinement qualifié, soit du SID utilisateur. De tels " -"noms\n" -"d'utilisateur doivent avoir un domaine approuvé précisé comme nom court\n" -"(DOMAINE\\Administrateur) ou avec un nom de principal d'utilisateur (UPN),\n" -"Administrator@ad.test.\n" -"\n" -"Veuillez noter que « hbactest » exécuté avec un utilisateur de domaine de\n" -"confiance en tant que paramètre --user ne peut être lancé que par des\n" -"membres du groupe des « administrateurs de confiance ».\n" -"\n" -"EXEMPLES :\n" -"\n" -" 1. Tester si un utilisateur d'un domaine approuvé défini par son\n" -" nom court satisfait à toute règle :\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Tester si un utilisateur d'un domaine approuvé défini par son\n" -" nom de domaine satisfait à toute règle :\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Tester si un utilisateur d'un domaine approuvé défini par son\n" -" SID satisfait à toute règle :\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Tester si un autre utilisateur d'un domaine approuvé défini\n" -" par son SID satisfait à toute règle :\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Tester si un autre utilisateur d'un domaine approuvé défini par\n" -" son nom court satisfait à toute règle :\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" - -msgid "Source host" -msgstr "Hôte source" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" -"\n" -"Groupes d'hôtes.\n" -"\n" -"Gestion des groupes d'hôtes. Permet d'appliquer des contrôles d'accès\n" -"à plusieurs hôtes en utilisant HBAC (Host-based Access Control).\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouveau groupe d'hôtes :\n" -" ipa hostgroup-add --desc=\"Systèmes de Baltimore\" baltimore\n" -"\n" -" Ajouter un nouveau groupe d'hôtes :\n" -" ipa hostgroup-add --desc=\"Systèmes du Maryland\" maryland\n" -"\n" -" Ajouter des membres à un groupe d'hôtes :\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Ajouter un groupe d'hôtes en tant que membre d'un autre groupe d'hôtes :\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Supprimer un hôte d'un groupe :\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Afficher un groupe d'hôtes :\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Supprimer un groupe d'hôtes :\n" -" ipa hostgroup-del baltimore\n" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" -"\n" -"Ajouter une nouvelle plage d'identifiants.\n" -"\n" -" Pour ajouter une nouvelle plage d'identifiants vous devez toujours " -"préciser\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" En outre,\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" seront indiqués pour une nouvelle plage d'ID dans le domaine local alors " -"que\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" doivent l'être pour ajouter une nouvelle plage pour un domaine AD de " -"confiance.\n" -"\n" -" AVERTISSEMENT :\n" -"\n" -" Le greffon DNA dans 389-ds alloue des ID selon les plages configurées au\n" -" titre du domaine local. Actuellement le greffon DNA *ne peut pas* être\n" -" lui-même reconfiguré selon les plages locales définies par " -"l'intermédiaire\n" -" de cette famille de commandes.\n" -"\n" -" Un changement manuel de configuration doit être opéré dans la " -"configuration\n" -" du greffon DNA pour cadrer avec la nouvelle plage locale. En particulier,\n" -" l'attribut « dnaNextRange » de « cn=Posix IDs »,^n« cn=Distributed Numeric " -"Assignment Plugin », « cn=plugins », « cn=config »\n" -" doivent être modifiés pour correspondre à cette nouvelle plage.\n" -" " - -#, fuzzy -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" -"Classes d'objets à utiliser pour la recherche d'entrées utilisateurs dans DS" - -#, fuzzy -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "Classes d'objets à utiliser pour la recherche d'entrées groupe dans DS" - -#, fuzzy -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "Classes d'objets à ignorer pour des entrées utilisateur dans DS" - -#, fuzzy -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "Attributs à ignorer dans des entrées utilisateur dans DS" - -#, fuzzy -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "Classes d'objets à ignorer pour les entrées groupe dans DS" - -#, fuzzy -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "Attributs à ignorer dans les entrées groupe dans DS" - -#, fuzzy -msgid "comma-separated list of groups to exclude from migration" -msgstr "groupes à exclure de la migration" - -#, fuzzy -msgid "comma-separated list of users to exclude from migration" -msgstr "utilisateurs à exclure de la migration" - -#, fuzzy -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" -"\n" -"Groupes réseau\n" -"\n" -"Un groupe réseau est un groupe utilisé pour la vérification des droits.\n" -"Il peut contenir à la fois des valeurs utilisateur et hôte.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouveau groupe réseau :\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Ajouter des membres au groupe réseau :\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Retirer un membre du groupe réseau :\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Afficher les informations sur un groupe réseau :\n" -" ipa netgroup-show admins\n" -"\n" -" Supprimer un groupe réseau :\n" -" ipa netgroup-del admins\n" - -msgid "comma-separated list of netgroups to add" -msgstr "" - -#, fuzzy -msgid "comma-separated list of netgroups to remove" -msgstr "groupes d'hôtes à supprimer" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -#, fuzzy -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" -"Permissions à accorder (« read », « write », « add », « delete », « all »)" - -#, fuzzy -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" -"type d'objet IPA (« user », « group », « host », « hostgroup », « service », " -"« netgroup »)" - -#, fuzzy -msgid "Target members of a group" -msgstr "Membre d'un groupe" - -#, fuzzy -msgid "User group to apply permissions to" -msgstr "" -"Groupe d'utilisateurs auquel appliquer les permissions (définit « target »)" - -#, fuzzy -msgid "comma-separated list of privileges to add" -msgstr "Nombre de privilèges ajoutés" - -#, fuzzy -msgid "Add a system permission without an ACI" -msgstr "Ajout d'une permission système sans ACI (commande interne)" - -#, fuzzy -msgid "Permission type" -msgstr "Nom de permission" - -#, fuzzy -msgid "comma-separated list of privileges to remove" -msgstr "Nombre de privilèges retirés" - -#, fuzzy -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" -"\n" -"« Ping » sur un serveur IPA distant pour s'assurer de son fonctionnement.\n" -"\n" -"La commande « ping » envoie une requête « echo « au serveur IPA. Le serveur\n" -"renvoie ses informations de version. Ce mécanisme est utilisé par le client\n" -"IPA pour confirmer que le serveur est disponible et est en mesure " -"d'accepter\n" -"les requêtes.\n" -"\n" -"Le serveur indiqué par « xmlrpc_uri » dans « /etc/ipa/default.conf » est\n" -"contacté en premier. S'il ne répond pas alors le client contactera " -"n'importe\n" -"quel autre serveur défini dans les enregistrements SRV du DNS.\n" -"\n" -"EXEMPLES :\n" -"\n" -" « Ping » d'un serveur IPA :\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" « Ping » verbeux d'un serveur IPA :\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" - -msgid "comma-separated list of roles to add" -msgstr "" - -#, fuzzy -msgid "comma-separated list of permissions" -msgstr "Liste, séparée par des virgules, des types de chiffrement" - -#, fuzzy -msgid "comma-separated list of roles to remove" -msgstr "" -"Une liste, séparée avec des virgules, des champs à explorer pour une " -"recherche d'utilisateurs" - -msgid "comma-separated list of privileges" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" -"\n" -"Permissions de libre service\n" -"\n" -"Une permission permet d'affiner une délégation de permissions. Les règles " -"ou\n" -"instructions de contrôle d'accès (ACI) accordent la permission de donner " -"les\n" -"permissions d'effectuer des tâches données comme ajouter un utilisateur,\n" -"modifier un groupe, etc.\n" -"\n" -"Une permission de libre service définit ce qu'un objet peut modifier dans " -"sa\n" -"propre entrée.\n" -"\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter une règle de libre service permettant aux utilisateurs de gérer\n" -"leurs adresses (avec les extensions entre accolades de Bash) :\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" En gérant les listes d'attributs, vous devez incorporer tous les attributs\n" -"dans la liste, y compris les existants.\n" -" Ajouter « telephoneNumber » à la liste (avec extension entre accolades " -"Bash) :\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Afficher la règle modifiée :\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Supprimer une règle :\n" -" ipa selfservice-del \"Users manage their own address\"\n" - -#, fuzzy -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" -"\n" -"Services\n" -"\n" -"Un service IPA représente un service qui s'exécute sur un hôte. " -"L'enregistrement du\n" -"service IPA peut contenir un principal Kerberos, un certificat SSL ou les " -"deux.\n" -"\n" -"Un service IPA peut être directement géré à partir d'une machine, pour\n" -"autant que des permissions adéquates aient été données à la machine. Ceci\n" -"est vrai même pour les machines autres que celle à laquelle le service est\n" -"associé. Par exemple, demander un certificat SSL en utilisant les\n" -"justificatifs d'identité du principal du service de l'hôte. Pour gérer un\n" -"service en utilisant les références de l'hôte, vous devrez exécuter\n" -"« kinit » en tant qu'hôte :\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Ajouter un service IPA permet au service associé de demander un certificat\n" -"SSL ou un tableau de clés, mais cela est réalisé dans une étape distincte ;\n" -"cela n'est pas le résultat de l'ajout du service.\n" -"\n" -"Seule la composante publique du certificat est stockée dans un\n" -"enregistrement de service ; la clé privée n'y est pas enregistrée.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouveau service IPA :\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Autoriser un hôte à gérer un certificat de service IPA :\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Écraser la liste par défaut des types PAC pris en charge pour le service :\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" NFS est un cas classique où la surcharge du type PAC est nécessaire.\n" -" Actuellement, le code relatif à cette fonction dans le noyau Linux ne " -"gère\n" -" les tickets Kerberos que jusqu'à une taille maximale donnée. Comme les\n" -" données PAC peuvent devenir bien plus grandes, il est recommandé de " -"fixer\n" -" « --pac-type=NONE » pour les services NFS.\n" -"\n" -" Supprimer un service IPA :\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Trouver tous les services IPA associés à un hôte :\n" -" ipa service-find web.example.com\n" -"\n" -" Trouver tous les service HTTP :\n" -" ipa service-find HTTP\n" -"\n" -" Désactiver la clé Kerberos et le certificat SSL d'un service :\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Demander un certificat pour un service IPA :\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" - -#, fuzzy -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" -"Surcharger la liste par défaut des types PAC pris en charge. Utiliser « NONE " -"» pour désactiver la prise en charge PAC pour ce service, ce qui peut être " -"nécessaire pour les services NFS par exemple." - -#, fuzzy -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" -"\n" -"Groupes de commandes sudo\n" -"\n" -"Administre les groupes de commandes sudo.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouveau groupe de commandes sudo :\n" -" ipa sudocmdgroup-add --desc='commandes administrateurs' admincmds\n" -"\n" -" Supprimer un groupe de commandes sudo :\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Gérer les commandes, l'appartenance d'un groupe de commandes sudo :\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Administrer les commandes, l'appartenance d'un groupe de commandes sudo :\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Afficher un groupe de commandes sudo :\n" -" ipa group-show localadmins\n" - -#, fuzzy -msgid "comma-separated list of sudo commands to add" -msgstr "commandes sudo à ajouter" - -#, fuzzy -msgid "comma-separated list of sudo commands to remove" -msgstr "commandes sudo à supprimer" - -msgid "Active directory domain administrator's password" -msgstr "Mot de passe de l'administrateur du domaine Active Directory" - -#, fuzzy -msgid "GECOS field" -msgstr "GECOS" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" - -#, fuzzy -msgid "comma-separated list of sudo command groups to add" -msgstr "" -"Une liste séparée par des virgules des champs à explorer pour une recherche " -"de groupes" - -#, fuzzy -msgid "comma-separated list of sudo command groups to remove" -msgstr "commandes sudo à supprimer" - -msgid "Failed members" -msgstr "Membres en échec" - -msgid "Failed source hosts/hostgroups" -msgstr "Hôtes/groupes d'hôtes source en échec" - -msgid "Failed hosts/hostgroups" -msgstr "Hôtes/groupes d'hôtes en échec" - -msgid "Failed users/groups" -msgstr "Utilisateurs/groupes en échec" - -msgid "Failed service/service groups" -msgstr "Services/groupes de service en échec" - -msgid "Failed to remove" -msgstr "Échec à la suppression" - -msgid "Failed RunAs" -msgstr "Échec de « RunAs »" - -msgid "Failed RunAsGroup" -msgstr "Échec de « RunAsGroup »" - -msgid "Failed profiles" -msgstr "Profils en échec" - -msgid "Failed CAs" -msgstr "AC en échec" - -#, fuzzy -msgid "Failed member manager" -msgstr "Membres en échec" - -msgid "Failed managedby" -msgstr "Échec de « managedby »" - -msgid "Failed allowed to retrieve keytab" -msgstr "Échec de l'autorisation de récupération des tableaux de clés" - -msgid "Failed allowed to create keytab" -msgstr "Échec de l'autorisation de création de tableaux de clés" - -msgid "Failed targets" -msgstr "Échec de la cible" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "Client %(cver)s incompatible avec le serveur %(sver)s à « %(server)s »" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "Erreur %(code)d inconnue renvoyée par %(server)s : %(error)s" - -msgid "an internal error has occurred" -msgstr "une erreur interne est survenue" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "une erreur interne est survenue sur le serveur à « %(server)s »" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "commande « %(name)s » inconnue" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "erreur sur le serveur « %(server)s » : %(error)s" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "impossible de se connecter à « %(uri)s » : %(error)s" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Requête JSON-RPC invalide : %(error)s" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "erreur de conversion des données lors du transport XML-RPC : %(error)s" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "Référence HTTP manquante ou invalide, %(referer)s" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Erreur Kerberos : %(major)s/%(minor)s" - -msgid "did not receive Kerberos credentials" -msgstr "Justificatifs Kerberos non reçus" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "Service « %(service)s » introuvable dans la base de données Kerberos" - -msgid "No credentials cache found" -msgstr "Cache des justificatifs d'identité introuvable" - -msgid "Ticket expired" -msgstr "Ticket périmé" - -msgid "Credentials cache permissions incorrect" -msgstr "Droits d'accès incorrects au cache des justificatifs d'identité" - -msgid "Bad format in credentials cache" -msgstr "Mauvais format de cache des justificatifs d'identité" - -msgid "Cannot resolve KDC for requested realm" -msgstr "Impossible de résoudre le KDC pour le domaine demandé" - -msgid "Session error" -msgstr "Erreur de session" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "Le principal %(principal)s n'a pas pu être authentifié : %(message)s" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Accès insuffisant : %(info)s" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "la commande « %(name)s » ne prend pas d'argument" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "la commande « %(name)s » prend au plus %(count)d argument" -msgstr[1] "la commande « %(name)s » prend au plus %(count)d arguments" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "les arguments et options se chevauchent : %(names)s" - -#, python-format -msgid "'%(name)s' is required" -msgstr "« %(name)s » est requis" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "« %(name)s » invalide : %(error)s" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "l'API n'a pas un tel espace de noms : « %(name)s »" - -msgid "Passwords do not match" -msgstr "Les mots de passe ne correspondent pas" - -msgid "Command not implemented" -msgstr "Commande non implémentée" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "Le client n'est pas configuré. Lancer « ipa-client-install »." - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "Impossible d'obtenir %(name)s de façon interactive" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "La commande « %(name)s » a été abandonnée." - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" -"Le domaine « %(domain)s » n'est pas un domaine racine pour la forêt " -"« %(forest)s »" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -msgid "This entry already exists" -msgstr "Cette entrée existe déjà" - -msgid "You must enroll a host in order to create a host service" -msgstr "Vous devez enregistrer un hôte afin de créer un service" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" -"Le principal de service n'est pas de la forme : service/fully-qualified host " -"name: %(reason)s" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "Le domaine du principal ne correspond pas au domaine de ce serveur IPA" - -msgid "This command requires root access" -msgstr "Cette commande requiert un accès administrateur" - -msgid "This is already a posix group" -msgstr "Ce groupe est déjà de type POSIX" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "Le principal n'est pas de la forme user@REALM : « %(principal)s »" - -msgid "This entry is already enabled" -msgstr "Cette entrée est déjà activée" - -msgid "This entry is already disabled" -msgstr "Cette entrée est déjà désactivée" - -msgid "This entry cannot be enabled or disabled" -msgstr "Cette entrée ne peut être activée ou désactivée" - -msgid "This entry is not a member" -msgstr "Cette entrée n'est pas un membre" - -msgid "A group may not be a member of itself" -msgstr "Un groupe ne peut être membre de lui-même" - -msgid "This entry is already a member" -msgstr "Cette entrée est déjà membre" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Échec du décodage « base64 » : %(reason)s" - -msgid "A group may not be added as a member of itself" -msgstr "Un groupe ne peut être ajouté comme membre de lui-même" - -msgid "The default users group cannot be removed" -msgstr "Le groupe par défaut ne peut être supprimé" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" -"La suppression d'un groupe géré est interdite. Il doit d'abord être détaché." - -msgid "A managed group cannot have a password policy." -msgstr "Un groupe géré ne peut pas avoir de politique de mot de passe." - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "'%(entry)s' ne possède pas de certificat." - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" -"Impossible de créer un groupe privé. Un groupe '%(group)s' existe déjà." - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" -"Un problème est survenu en vérifiant que tous les membres étaient %(verb)s : " -"%(exc)s" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "%(attr)s ne contient pas '%(value)s'" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" -"Le critère de recherche n'est pas suffisamment précis. Une valeur attendue, " -"mais %(found)d trouvées." - -msgid "This group already allows external members" -msgstr "Ce groupe autorise déjà des membres externes" - -msgid "This group cannot be posix because it is external" -msgstr "Ce groupe ne peut être de type POSIX car il est externe" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" -"Ce groupe est déjà de type POSIX et ne peut être converti en groupe externe" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "Arrêt brutal de la suppression du serveur : %(reason)s." - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, fuzzy, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "échec de la requête avec le code état HTTP %d" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, fuzzy, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "%(attr)s ne contient pas '%(value)s'" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "pas de commande ou de sujet d'aide pour « %(topic)s »" - -msgid "change collided with another change" -msgstr "la modification s'est heurtée à une autre" - -msgid "no modifications to be performed" -msgstr "pas de modification à effectuer" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(desc)s : %(info)s" - -msgid "limits exceeded for this query" -msgstr "limites dépassées pour cette requête" - -#, python-format -msgid "%(info)s" -msgstr "%(info)s" - -msgid "modifying primary key is not allowed" -msgstr "la modification de clé principale n'est pas autorisée" - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "%(attr)s : une seule valeur autorisée." - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "%(attr)s : syntaxe invalide." - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "Filtre de recherche invalide %(info)s" - -msgid "Not allowed on non-leaf entry" -msgstr "Interdit sur une entrée qui n'est pas une feuille" - -msgid "LDAP timeout" -msgstr "Délai d'expiration LDAP" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" -"Délai échu pour la tâche LDAP %(task)s, DN de la tâche : « %(task_dn)s »" - -msgid "Configured time limit exceeded" -msgstr "Limite configurée de durée dépassée" - -msgid "Configured size limit exceeded" -msgstr "Limite configurée de taille dépassée" - -msgid "Configured administrative server limit exceeded" -msgstr "Limite configurée côté serveur dépassée" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "L'opération de certification ne peut être effectuée : %(error)s" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "Erreur de format de certificat : %(error)s" - -msgid "Already registered" -msgstr "Déjà enregistré" - -msgid "Not registered yet" -msgstr "Pas encore enregistré" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" -"%(key)s ne peut pas être supprimé car %(label)s %(dependent)s le requiert" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" -"%(key)s ne peut être supprimé ou désactivé étant le dernier membre de " -"%(container)s %(label)s" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "%(label)s %(key)s ne peut être supprimé ou modifié : %(reason)s" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "le certificat %(name)s est invalide" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" -"L'hôte « %(hostname)s » n'a pas d'enregistrement DNS de type A/" -"AAAA correspondant" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" -"Échec de vérification du DNS : {%(expected)s} attendu, {%(got)s} obtenu" - -#, python-format -msgid "%(exception)s" -msgstr "%(exception)s" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - -msgid "Additional instructions:" -msgstr "Instructions complémentaires :" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" -"Le numéro de version de l'API n'a pas été envoyé, la compatibilité " -"ascendante n'est pas garantie. La version de l'API du serveur est supposée " -"être %(server_version)s" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" -"La sémantique de redirection DNS a été modifié depuis IPA 4.0.\n" -"Utilisez à la place les redirections de zones (dnsforwardzone-*).\n" -"Pour plus de détails, lisez la documentation." - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" -"La prise en charge de DNSSEC est expérimentale.\n" -"%(additional_info)s" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "L'option « %(option)s » est obsolète. %(additional_info)s" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" -"La sémantique de %(label)s a changé. %(current_behavior)s\n" -"%(hint)s" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "Serveur DNS %(server)s : %(error)s." - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"Le serveur DNS %(server)s ne prend pas en charge : %(error)s.\n" -"Si la validation DNSSEC est activée sur le ou les serveurs IPA, merci de la " -"désactiver." - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" -"La zone redirigiée « %(fwzone)s » n'est pas en fonction car il lui manque " -"une délégation NS correcte dans la zone faisant autorité « %(authzone)s ». " -"Merci d'ajouter les enregistrement NS « %(ns_rec)s » à la zone " -"« %(authzone)s »." - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"Le serveur DNS %(server)s ne prend pas en charge EDNS0 (RFC 6891) : " -"%(error)s.\n" -"Si la validation DNSSEC est activée sur le ou les serveurs, merci de la " -"désactiver." - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" -"Échec de la validation DNSSEC : %(error)s.\n" -"Merci de vérifier votre configuration DNSSEC ou de désactiver la validation " -"DNSSEC sur tous les serveurs IPA." - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" -"L'enregistrement TXT _kerberos du domaine %(domain)s ne peut être créé " -"(%(error)s).\n" -"Cela peut arriver si la zone n'est pas gérée par IPA. Merci de créer " -"manuellement l'enregistrement, qui doit contenir la valeur suivante : " -"« %(realm)s »" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" -"L'enregistrement TXT _kerberos du domaine %(domain)s ne peut être supprimé " -"(%(error)s).\n" -"Cela peut arriver si la zone n'est pas gérée par IPA. Merci de le supprimer " -"manuellement." - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" -"Aucune clé maîtresse DNSSEC n'est installée. La signature de zone DNSSEC ne " -"pourra pas fonctionner tant qu'une clé maîtresse n'est installée." - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" -"Le nom d'enregistrement relatif « %(record)s » contient le nom de la zone " -"« %(zone)s » comme suffixe, ce qui aboutit au FQDN « %(fqdn)s ». Cela " -"constitue généralement une erreur du fait du point final manquant à la fin " -"du nom indiqué." - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "La commande « %(command)s » est obsolète. %(additional_info)s" - -#, python-format -msgid "%(line)s" -msgstr "%(line)s" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "Les résultats de la recherche ont été tronqués : %(reason)s" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" -"Votre relation d'approbation avec %(domain)s est cassée. Merci de la recréer " -"à l'aide de « ipa trust-add »." - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" -"Le ou les enregistrements DNS de l'hôte %(host)s n'ont pu être supprimés. " -"(%(reason)s)" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" -"La politique de transfert entre en conflit avec certaines zones automatiques " -"vides. Les requêtes pour les zones spécifiées dans la RFC 6303 ignoreront le " -"transfert et la récursion et résulteront toujours en des réponses NXDOMAIN. " -"Pour surcharger ce comportement, utiliser la politique de transfert « only »." - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" -"Échec de la à jour de l'enregistrement du système « %(record)s », erreur : " -"%(error)s" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" -"IPA ne gère pas la zone %(zone)s, merci de modifier vos serveurs " -"DNS manuellement" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" -"Échec de la mise à jour automatique des enregistrements DNS du système. " -"Merci de relancer la mise à jour des enregistrements du système manuellement " -"pour obtenir la liste des enregistrements manquants." - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" -"Le service %(service)s doit être redémarré sur le serveur IPA %(server)s " -"pour permettre la prise en compte de la nouvelle configuration." - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" -"Aucun serveur DNS dans l'emplacement IPA %(location)s. Sans serveur DNS, " -"l'emplacement ne fonctionnera pas comme attendu." - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, fuzzy, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "Le caractère « %(char)r » n'est pas autorisé." - -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d variables" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "%(count)d greffon chargé" -msgstr[1] "%(count)d greffons chargés" - -msgid "A dictionary representing an LDAP entry" -msgstr "Un annuaire représentant une entrée LDAP" - -msgid "A list of LDAP entries" -msgstr "Une liste d'entrées LDAP" - -msgid "All commands should at least have a result" -msgstr "Toutes les commandes doivent avoir au moins un résultat" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "Entrer à nouveau %(label)s pour validation :" - -msgid "Passwords do not match!" -msgstr "Les mots de passe ne correspondent pas !" - -msgid "No matching entries found" -msgstr "Aucune entrée correspondante trouvée" - -msgid "Topic or Command" -msgstr "Thème ou commande" - -msgid "The topic or command name." -msgstr "Le nom du thème ou de la commande." - -msgid "Topic commands:" -msgstr "Commandes du thème :" - -msgid "To get command help, use:" -msgstr "Pour obtenir de l'aide, utiliser :" - -msgid " ipa --help" -msgstr " ipa --help" - -msgid "Command name" -msgstr "Nom de commande" - -msgid "Positional arguments" -msgstr "Arguments positionnels" - -#, python-format -msgid "Same as --%s" -msgstr "Identique à --%s" - -msgid "Deprecated options" -msgstr "Options obsolètes" - -msgid "No file to read" -msgstr "Pas de fichier à lire" - -msgid "Results are truncated, try a more specific search" -msgstr "Résultats tronqués, essayer un recherche plus précise" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "Option inconnue : %(option)s" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" -"Version client. Utilisée pour déterminer si le serveur accepte la requête." - -#, fuzzy, python-format -msgid "%(filename)s: file not found" -msgstr "Fichier %(file)s introuvable" - -#, fuzzy, python-brace-format -msgid "Unable to parse option {item}" -msgstr "Impossible d'analyser le principal\n" - -msgid "any of the configured servers" -msgstr "n'importe quel serveur configuré" - -#, fuzzy -msgid "Exceeded number of tries to forward a request." -msgstr "Le nombre de fois autorisées pour tenter une authentification" - -msgid "Filename is empty" -msgstr "Le nom de fichier est vide" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "Autorisation refusée : %(file)s" - -msgid "empty DNS label" -msgstr "libellé DNS vide" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "un libellé DNS ne peut pas dépasser 63 caractères" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" -"uniquement lettres, nombres, %(chars)s sont autorisés. Les noms DNS ne " -"peuvent commencer ou se terminer par %(chars2)s" - -#, fuzzy -msgid "single label {}s are not supported" -msgstr "L'hôte n'est pas pris en charge" - -msgid "too many '@' characters" -msgstr "trop de caractères « @ »" - -#, fuzzy -msgid "cannot be longer that {} characters" -msgstr "un libellé DNS ne peut pas dépasser 63 caractères" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "le nom d'hôte contient un libellé vide (plusieurs points consécutifs)" - -msgid "not fully qualified" -msgstr "pas pleinement qualifié" - -msgid "invalid SSH public key" -msgstr "clé publique SSH invalide" - -msgid "options are not allowed" -msgstr "les options ne sont pas autorisées" - -msgid "invalid hostmask" -msgstr "masque d'hôte invalide" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "requête « %(owner)s %(rtype)s » : %(error)s" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "requête « %(owner)s %(rtype)s » avec EDNS0: %(error)s" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" -"la réponse à la requête « %(owner)s %(rtype)s » ne comporte pas de " -"signatures DNSSEC (pas de données RRSIG)" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" -"la validation DNSSEC de l'enregistrement « %(owner)s %(rtype)s » a échoué " -"sur le serveur %(ip)s" - -msgid "invalid escape code in domain name" -msgstr "code d'échappement invalide dans le nom du domaine" - -msgid "domain name cannot be longer than 255 characters" -msgstr "le nom de domaine ne peut pas dépasser 255 caractères" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "un libellé de DNS ne peut pas dépasser 63 caractères" - -msgid "invalid domain name" -msgstr "nom de domaine invalide" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" -"le nom de domaine « %(domain)s » doit être normalisé à : %(normalized)s" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "nom de domaine invalide : %s" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" -"version d'adresse IP invalide (est %(value)d, doit être %(required_value)d) !" - -msgid "invalid IP address format" -msgstr "format d'adresse IP invalide" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "%(port)s n'est pas un port valide" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "incorrect type" -msgstr "type incorrect" - -msgid "Only one value is allowed" -msgstr "Une seule valeur est autorisée" - -msgid "this option is deprecated" -msgstr "cette option est obsolète" - -msgid "must be True or False" -msgstr "doit être « True » ou « False »" - -msgid "must be an integer" -msgstr "doit être un nombre entier" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "doit être supérieur ou égal à %(minvalue)d" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "doit être inférieur ou égal à %(maxvalue)d" - -msgid "must be a decimal number" -msgstr "doit être un nombre décimal" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "doit valoir a minima %(minvalue)s" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "doit valoir au plus %(maxvalue)s" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" -"La classe de nombres « %(cls)s » n'est pas dans la liste des classes de " -"nombres autorisées : %(allowed)s" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "doit correspondre au motif « %(pattern)s »" - -msgid "must be binary data" -msgstr "doivent être des données binaires" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "doit être d'au moins %(minlength)d octets" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "peut être d'au plus %(maxlength)d octets" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "doit être d'exactement %(length)d octets" - -#, fuzzy -msgid "must be a certificate" -msgstr "Révoquer un certificat." - -#, fuzzy -msgid "must be a certificate signing request" -msgstr "Soumettre une demande de signature de certificat." - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "Échec dans le décodage du « Certificate Signing Request » : %s" - -msgid "must be Unicode text" -msgstr "doit être un texte Unicode" - -msgid "Leading and trailing spaces are not allowed" -msgstr "Les espaces de début et de fin ne sont pas autorisées" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "doit être d'au moins %(minlength)d caractères" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "peut être d'au plus %(maxlength)d caractères" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "doit être d'exactement %(length)d caractères" - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "Le caractère « %(char)r » n'est pas autorisé." - -#, python-format -msgid "must be '%(value)s'" -msgstr "doit être « %(value)s »" - -#, python-format -msgid "must be one of %(values)s" -msgstr "doit être une valeur parmi %(values)s" - -msgid "must be datetime value" -msgstr "doit être une valeur date/heure" - -msgid "does not match any of accepted formats: " -msgstr "ne correspond à aucun des formats acceptés :" - -msgid "incomplete time value" -msgstr "valeur de temps incomplète" - -msgid "must be DNS name" -msgstr "doit être un nom de DNS" - -msgid "must be absolute" -msgstr "doit être absolu" - -msgid "must be relative" -msgstr "doit être relatif" - -msgid "must be dictionary" -msgstr "doit être un dictionnaire" - -#, fuzzy -msgid "must be Kerberos principal" -msgstr "Principal Kerberos" - -#, fuzzy, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "Principal malformé" - -#, fuzzy -msgid "Service principal is required" -msgstr "Alias de principal de service" - -#, fuzzy -msgid "must be at least 0" -msgstr "doit être supérieur ou égal à %(minvalue)d" - -#, fuzzy -#| msgid "Invalid vault type" -msgid "invalid valid hex" -msgstr "Type de coffre-fort invalide" - -#, fuzzy -#| msgid "Minimum serial number" -msgid "invalid serial number 0" -msgstr "Numéro de série minimum" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "Échec de la récupération de la chaîne de certificat de l'AC : %s" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "échec de la requête avec le code état HTTP %d" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "Échec de la récupération de l'état de l'AC : %s" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "Échec de la récupération de l'état de l'AC avec l'état %d" - -#, python-format -msgid "objectclass %s not found" -msgstr "classe d'objet %s introuvable" - -msgid "Trusting forest" -msgstr "Forêt en cours de mise en confiance" - -msgid "Trusted forest" -msgstr "Forêt de confiance" - -msgid "Established and verified" -msgstr "Établie et vérifiée" - -msgid "Waiting for confirmation by remote side" -msgstr "En attente de confirmation par la partie distante" - -msgid "Unknown" -msgstr "Inconnu" - -msgid "Non-Active Directory domain" -msgstr "Domaine autre que Active Directory" - -msgid "Active Directory domain" -msgstr "Domaine Active Directory" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "Domaine Kerberos conforme à la RFC4120" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" -"Relation d'approbation externe non transitive vers un domaine dans une autre " -"forêt Active Directory" - -#, fuzzy -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" -"Relation d'approbation externe non transitive vers un domaine dans une autre " -"forêt Active Directory" - -msgid "Failed to authenticate to CA REST API" -msgstr "Échec de l'authentification auprès de l'API REST de l'AC" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "Impossible de communiquer avec le CMS (état %d)" - -#, fuzzy, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "Agrément de réplication activé" - -msgid "automount location" -msgstr "emplacement de montage automatique" - -msgid "automount locations" -msgstr "emplacements de montage automatique" - -msgid "Automount Locations" -msgstr "Emplacements de montage automatique" - -msgid "Automount Location" -msgstr "Emplacement de montage automatique" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "Emplacement « automount » « %(value)s » ajouté" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "Emplacement « automount » « %(value)s » supprimé" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "%(count)d emplacement « automount » correspondant" -msgstr[1] "%(count)d emplacements « automount » correspondants" - -msgid "automount map" -msgstr "carte « automount »" - -msgid "automount maps" -msgstr "cartes « automount »" - -msgid "Automount Maps" -msgstr "Cartes « automount »" - -msgid "Automount Map" -msgstr "Carte « automount »" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "Carte « automount » « %(value)s » ajoutée" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "Carte « automount » « %(value)s » supprimée" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "Carte « automount » « %(value)s » modifiée" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "%(count)d carte « automount » correspondante" -msgstr[1] "%(count)d cartes « automount » correspondantes" - -msgid "Automount key object." -msgstr "Objet clé « automount »." - -msgid "automount key" -msgstr "clé « automount »" - -msgid "automount keys" -msgstr "clés « automount »" - -msgid "Automount Keys" -msgstr "Clés « automount »" - -msgid "Automount Key" -msgstr "Clé « automount »" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" -"La paire « key/info » doit être unique. Une clé nommée %(key)s avec l'info" -"%(info)s existe déjà." - -#, python-format -msgid "key named %(key)s already exists" -msgstr "la clé nommée %(key)s existe déjà" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "La clé « automount » %(key)s avec l'info %(info)s n'existe pas" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" -"Plus d'une entrée avec la clé %(key)s trouvée, utilisez --info pour " -"sélectionner l'entrée donnée." - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "Clé « automount » « %(value)s » créée" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "Carte « automount » indirect « %(value)s » créée" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" -"point de montage relatif à la carte parente, ne peut pas commencer par /" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "Clé « automount » « %(value)s » supprimée" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "Clé « automount » « %(value)s » modifiée" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "%(count)d clé « automount » correspondante" -msgstr[1] "%(count)d clés « automount » correspondantes" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" -"\n" -"Gestion des profils de certificats\n" -"\n" -"Les profils de certificats sont utilisés par l'autorité de certification " -"(AC) dans\n" -"la signature de certificats afin de déterminer si une demande de signature " -"de\n" -"certificat (Certificate Signing Request, CSR) est acceptable, et si oui, " -"quelles\n" -"fonctionnalités et extensions doivent figurer dans le certificat.\n" -"\n" -"Le format du profil de certificat est un format de liste de propriétés qui " -"sera\n" -"compris par une autorité de certification Dogtag ou Red Hat Certificate " -"System.\n" -"\n" -"SYNTAXE DE L'IDENTIFIANT DE PROFIL :\n" -"\n" -"Un identifiant de profil est une chaîne de caractères sans espaces ni " -"caractère de\n" -"ponctuation débutant par une lettre suivie d'une séquence de lettres, de " -"chiffres et\n" -"de caractère souligné (« _ »).\n" -"\n" -"EXEMPLES :\n" -"\n" -" Importer un profil qui ne stockera pas les certificats émis :\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --summary \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Supprimer un profil de certificat :\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Afficher les informations sur un profil :\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Enregistrer la configuration du profil dans un fichier :\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Rechercher des profils ne stockant pas les certificats :\n" -" ipa certprofile-find --store=false\n" -"\n" -"FORMAT DE LA CONFIGURATION DE PROFIL :\n" -"\n" -"Le format de configuration de profil est un format brut de liste de \n" -"propriété utilisé par Dogtag Certificate System. Le format XML n'est\n" -"pas pris en charge.\n" -"\n" -"Les restrictions suivantes s'appliquent aux profils gérés par IPA :\n" -"\n" -"- Lors de l'import d'un profil, le champ « profileId » s'il est présent " -"doit\n" -" correspondre à l'identifiant donné sur la ligne de commande.\n" -"\n" -"- Le champ « classId » doit être « caEnrollImpl »\n" -"\n" -"- Le champ « auth.instance_id  doit être « raCertAuth »\n" -"\n" -"- Les classe d'entrée « certReqInputImpl » et de sortie « certOutputImpl » " -"doivent \n" -" être utilisées.\n" - -msgid "CA is not configured" -msgstr "L'AC n'est pas configurée" - -msgid "invalid Profile ID" -msgstr "Identifiant de profil invalide" - -msgid "Certificate Profile" -msgstr "Profil de certificat" - -msgid "Certificate Profiles" -msgstr "Profils de certificats" - -msgid "Profile configuration" -msgstr "Configuration de profil" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "%(count)d profil correspondant" -msgstr[1] "%(count)d profils correspondants" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "Profil « %(value)s » importé" - -#, fuzzy, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "Les données en entrée ont été indiquées plusieurs fois" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" -"L'identifiant de profil « %(cli_value)s » ne correspond pas aux données du " -"profil « %(file_value)s »" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "Profil « %(value)s » supprimé" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "Le profil prédéfini « %(profile_id)s » ne peut être supprimé" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "Profil de certificat « %(value)s » modifié" - -msgid "Certificate profiles cannot be renamed" -msgstr "Les profils de certificats ne peuvent être renommés" - -#, fuzzy -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" -"Privilège insuffisant pour créer un certificat avec le nom de sujet « %s » " -"alternatif." - -msgid "delegation" -msgstr "délégation" - -msgid "delegations" -msgstr "délégations" - -msgid "Delegations" -msgstr "Délégations" - -msgid "Delegation" -msgstr "Délégation" - -msgid "ACI" -msgstr "ACI" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "Délégation « %(value)s » ajoutée" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "Délégation « %(value)s » supprimée" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "Délégation « %(value)s » modifiée" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "%(count)d délégation correspondante" -msgstr[1] "%(count)d délégations correspondantes" - -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" -"\n" -"Configuration du serveur DNS\n" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" -"\n" -"Manipulation de la configuration du serveur DNS\n" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" -"\n" -"Afficher la configuration d'un serveur DNS spécifique :\n" -" ipa dnsserver-show\n" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" -"\n" -" Modifier la configuration d'un serveur DNS spécifique :\n" -" ipa dnsserver-mod\n" - -msgid "DNS server" -msgstr "Serveur DNS" - -msgid "DNS servers" -msgstr "Serveurs DNS" - -msgid "DNS Servers" -msgstr "Serveurs DNS" - -msgid "DNS Server" -msgstr "Serveur DNS" - -msgid "DNS Server name" -msgstr "Nom du serveur DNS" - -#, fuzzy -msgid "SOA mname override" -msgstr "Ajouter une nouvelle surcharge d'identifiant." - -#, fuzzy -msgid "SOA mname (authoritative server) override" -msgstr "Nom de domaine du serveur de nom faisant autorité" - -msgid "Forwarders" -msgstr "Redirecteurs de zone" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Redirecteurs par serveur. Un port personnalisé peut être indiqué pour chaque " -"redirecteur avec le format standard « adresse_IP port PORT »" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" -"Politique de redirection conditionnelle par serveur. Mettre à « none » pour " -"désactiver la redirection vers un redireteur global pour cette zone. Dans ce " -"cas, les redirecteurs de zone conditionnels sont ignorés." - -msgid "DNS is not configured" -msgstr "Le DNS n'est pas configuré" - -msgid "Modify DNS server configuration" -msgstr "Modifier la configuration du serveur DNS" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "Serveur DNS « %(value)s » modifié" - -msgid "Search for DNS servers." -msgstr "Rechercher des serveurs DNS." - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "%(count)d serveur DNS correspondant" -msgstr[1] "%(count)d serveurs DNS correspondants" - -#, fuzzy -msgid "IPA DNS Server is not installed" -msgstr "Le service KRA est désactivé" - -msgid "Display configuration of a DNS server." -msgstr "Afficher la configuration d'un nouveau serveur DNS." - -msgid "Add a new DNS server." -msgstr "Ajouter un nouveau serveur DNS." - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "Nouveau serveur DNS « %(value)s » ajouté" - -msgid "Delete a DNS server" -msgstr "Supprimer un serveur DNS" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "Serveur DNS « %(value)s » supprimé" - -#, fuzzy, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" -"Le niveau actuel du domaine ne peut être relevé à {0}, le serveur {1} ne le " -"prend pas en charge." - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "Le niveau du domaine ne peut être redescendu." - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" -"Le niveau actuel du domaine ne peut être relevé à {0}, le serveur {1} ne le " -"prend pas en charge." - -#, fuzzy -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" -"\n" -"Groupes d'utilisateurs\n" -"\n" -"Gérer des groupes d'utilisateurs. Par défaut, tout nouveau groupe est " -"POSIX.\n" -"On peut ajouter l'option « --nonposix » à la commande « group-add » pour\n" -"marquer un nouveau groupe comme non-POSIX et utiliser l'option « --posix »\n" -"de la commande « group-mod » pour convertir un groupe non-POSIX en groupe\n" -"POSIX. Les groupes POSIX ne peuvent pas être convertis en groupes non-" -"POSIX.\n" -"\n" -"Chaque groupe doit avoir une description.\n" -"\n" -"Les groupes POSIX doivent avoir un numéro d'ID de groupe (GID). Modifier un\n" -"GID est faisable, mais cela peut avoir un impact sur vos droits d'accès aux\n" -"fichiers. Il n'est pas nécessaire d'indiquer un GID à la création du " -"groupe.\n" -"IPA en générera un automatiquement s'il n'est pas fourni.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouveau groupe :\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Ajouter un nouveau groupe non-POSIX :\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convertir un groupe non-POSIX en groupe POSIX :\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Ajouter un nouveau groupe POSIX avec un numéro d'ID de groupe donné :\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Ajouter un nouveau groupe POSIX et laisser IPA assigner un numéro d'ID de " -"groupe :\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Supprimer un groupe :\n" -" ipa group-del unixadmins\n" -"\n" -" Ajouter le groupe « remoteadmins » au groupe « localadmins » :\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Ajouter plusieurs utilisateurs au groupe « localadmins » :\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Supprimer un utilisateur du groupe « localadmins » :\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Afficher des informations à propos d'un groupe donné :\n" -" ipa group-show localadmins\n" -"\n" -"L'adhésion à un groupe externe est conçue pour permettre aux utilisateurs " -"de\n" -"domaines approuvés d'être assimilés aux groupes POSIX locaux pour pouvoir\n" -"utiliser réellement les ressources IPA. Des membres externes peuvent être\n" -"ajoutés aux groupes spécifiquement crées comme externes et non-POSIX. Un " -"tel\n" -"groupe peut plus tard être incorporé dans un des groupes POSIX\n" -"\n" -"Un membre de groupe externe est actuellement identifié par un « Security\n" -"Identifier (SID) » tel que défini pour le domaine approuvé. Pour ajouter\n" -"un membre de groupe externe, il est possible de le définir, soit au format\n" -"SID, soit DOM\\name, soit name@domain. IPA essayera de résoudre le nom " -"passé\n" -"en SID en se servant du « Global Catalog » des domaines approuvés.\n" -"\n" -"Exemple:\n" -"\n" -"1. Créer un groupe par assimilation au domaine approuvé « admins »\n" -" et à leur groupe POSIX local :\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Ajouter l'identifiant de sécurité de « Domain Admins » au\n" -" groupe externe « ad_admins_external » :\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Autoriser des membres du groupe « ad_admins_external » à être associés " -"au\n" -" groupe POSIX « ad_admins » :\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Lister les membres externes du groupe « ad_admins_external » pour voir\n" -" leur SID :\n" -"\n" -" ipa group-show ad_admins_external\n" - -msgid "groups" -msgstr "groupes" - -msgid "User Group" -msgstr "Groupe d'Utilisateurs" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "Groupe « %(value)s » créé" - -msgid "gid cannot be set for external group" -msgstr "l'identifiant de groupe ne peut être défini pour un groupe externe" - -#, fuzzy -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "attribut « %s » interdit" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Groupe « %(value)s » supprimé" - -msgid "privileged group" -msgstr "groupe avec privilèges" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Groupe « %(value)s » modifié" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "%(count)d groupe correspondant" -msgstr[1] "%(count)d groupes correspondants" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"Impossible de réaliser la validation de membre externe sans installer " -"Samba 4. Assurez-vous d'avoir installé le sous-paquet « IPAserver-trust-ad » " -"sur le serveur" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" -"Impossible de rejoindre un domaine sans avoir au préalable configuré son " -"propre domaine. Assurez-vous d'avoir lancé « ipa-adtrust-install » au " -"préalable sur le serveur" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "Groupe « %(value)s » détaché de l'utilisateur « %(value)s »" - -msgid "not allowed to modify user entries" -msgstr "modification des entrées d'un utilisateur interdite" - -msgid "not allowed to modify group entries" -msgstr "modification des entrées de groupe interdite" - -msgid "Not a managed group" -msgstr "Pas un groupe administré" - -#, fuzzy -msgid "Add users that can manage members of this group." -msgstr "Ajouter des utilisateurs pouvant gérer ce jeton." - -#, fuzzy -msgid "Remove users that can manage members of this group." -msgstr "Supprimer des utilisateurs pouvant gérer ce jeton." - -msgid "Host-based access control commands" -msgstr "Commandes de contrôle d'accès basé sur l'hôte" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" -"\n" -"Services HBAC\n" -"\n" -"Les services PAM dont le système HBAC peut contrôler l'accès. Le nom " -"utilisé\n" -"ici doit correspondre au nom du service analysé par PAM.\n" -"EXEMPLES:\n" -"\n" -" Ajouter un nouveau service HBAC :\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modifier un service HBAC existant :\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Chercher des services HBAC. Cet exemple renvoie deux résultats, le service\n" -" FTP et le service tftp nouvellement ajouté :\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Supprimer un service HBAC :\n" -" ipa hbacsvc-del tftp\n" -"\n" - -msgid "HBAC services" -msgstr "Services HBAC" - -msgid "HBAC Services" -msgstr "Services HBAC" - -msgid "HBAC Service" -msgstr "Service HBAC" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "Service HBAC « %(value)s » ajouté" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "Service HBAC « %(value)s » supprimé" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "Service HBAC « %(value)s » modifié" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "%(count)d service HBAC correspondant" -msgstr[1] "%(count)d services HBAC correspondant" - -msgid "HBAC service group" -msgstr "Groupe de services HBAC" - -msgid "HBAC service groups" -msgstr "Groupes de services HBAC" - -msgid "HBAC Service Groups" -msgstr "Groupes de services HBAC" - -msgid "HBAC Service Group" -msgstr "Groupe de services HBAC" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "Groupe de services HBAC « %(value)s » ajouté" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "Groupe de services HBAC « %(value)s » supprimé" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "Groupe de services HBAC « %(value)s » modifié" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "%(count)d groupe de services HBAC correspondant" -msgstr[1] "%(count)d groupes de services HBAC correspondant" - -#, fuzzy -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" -"\n" -"Groupes d'hôtes.\n" -"\n" -"Gestion des groupes d'hôtes. Permet d'appliquer des contrôles d'accès\n" -"à plusieurs hôtes en utilisant HBAC (Host-based Access Control).\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouveau groupe d'hôtes :\n" -" ipa hostgroup-add --desc=\"Systèmes de Baltimore\" baltimore\n" -"\n" -" Ajouter un nouveau groupe d'hôtes :\n" -" ipa hostgroup-add --desc=\"Systèmes du Maryland\" maryland\n" -"\n" -" Ajouter des membres à un groupe d'hôtes :\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Ajouter un groupe d'hôtes en tant que membre d'un autre groupe d'hôtes :\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Supprimer un hôte d'un groupe :\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Afficher un groupe d'hôtes :\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Supprimer un groupe d'hôtes :\n" -" ipa hostgroup-del baltimore\n" - -msgid "host groups" -msgstr "groupes d'hôtes" - -msgid "Host Group" -msgstr "Groupe d'hôtes" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Groupe d'hôtes « %(value)s » ajouté" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"Un groupe réseau nommé « %s » existe déjà. Les groupes d'hôtes et les " -"groupes réseau partagent un même espace de noms." - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Groupe d'hôtes « %(value)s » supprimé" - -msgid "hostgroup" -msgstr "groupe d'hôtes" - -msgid "privileged hostgroup" -msgstr "groupe d'hôtes privilégiés" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Groupe d'hôtes « %(value)s » modifié" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "%(count)d groupe d'hôtes correspondant" -msgstr[1] "%(count)d groupes d'hôtes correspondant" - -#, fuzzy -msgid "Add users that can manage members of this hostgroup." -msgstr "Ajouter des utilisateurs pouvant gérer ce jeton." - -#, fuzzy -msgid "Remove users that can manage members of this hostgroup." -msgstr "Supprimer des utilisateurs pouvant gérer ce jeton." - -#, fuzzy -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" -"\n" -"Ajouter une nouvelle plage d'identifiants.\n" -"\n" -" Pour ajouter une nouvelle plage d'identifiants vous devez toujours " -"préciser\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" En outre,\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" seront indiqués pour une nouvelle plage d'ID dans le domaine local alors " -"que\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" doivent l'être pour ajouter une nouvelle plage pour un domaine AD de " -"confiance.\n" -"\n" -" AVERTISSEMENT :\n" -"\n" -" Le greffon DNA dans 389-ds alloue des ID selon les plages configurées au\n" -" titre du domaine local. Actuellement le greffon DNA *ne peut pas* être\n" -" lui-même reconfiguré selon les plages locales définies par " -"l'intermédiaire\n" -" de cette famille de commandes.\n" -"\n" -" Un changement manuel de configuration doit être opéré dans la " -"configuration\n" -" du greffon DNA pour cadrer avec la nouvelle plage locale. En particulier,\n" -" l'attribut « dnaNextRange » de « cn=Posix IDs »,^n« cn=Distributed Numeric " -"Assignment Plugin », « cn=plugins », « cn=config »\n" -" doivent être modifiés pour correspondre à cette nouvelle plage.\n" -" " - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "Plages d'ID" - -msgid "ID Range" -msgstr "Plage d'ID" - -msgid "local domain range" -msgstr "Plage pour domaine local" - -msgid "Active Directory domain range" -msgstr "Plage pour les domaines Active Directory" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" -"Plage pour les relations d'approbation Active Directory avec attributs POSIX" - -msgid "ID range type, one of allowed values" -msgstr "" - -#, fuzzy -msgid "Auto private groups" -msgstr "Pas de groupe privé" - -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" -"une modification de plage laissant des objets avec un ID en dehors de la " -"plage définie n'est pas autorisée" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"Impossible de réaliser la validation du SID sans installer la prise en " -"charge de Samba 4. Assurez-vous d'avoir installé le sous-paquet d'IPA " -"« server-trust-ad » sur le serveur" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" -"Les confiances croisées entre domaines n'ont pas été configurées. Assurez-" -"vous d'avoir préalablement exécuté « ipa-adtrust-install » sur le serveur" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" -"Le SID n'est pas reconnu en tant que SID valide pour un domaine approuvé" - -#, fuzzy -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" -"\n" -"Ajouter une nouvelle plage d'identifiants.\n" -"\n" -" Pour ajouter une nouvelle plage d'identifiants vous devez toujours " -"préciser\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" En outre,\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" seront indiqués pour une nouvelle plage d'ID dans le domaine local alors " -"que\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" doivent l'être pour ajouter une nouvelle plage pour un domaine AD de " -"confiance.\n" -"\n" -" AVERTISSEMENT :\n" -"\n" -" Le greffon DNA dans 389-ds alloue des ID selon les plages configurées au\n" -" titre du domaine local. Actuellement le greffon DNA *ne peut pas* être\n" -" lui-même reconfiguré selon les plages locales définies par " -"l'intermédiaire\n" -" de cette famille de commandes.\n" -"\n" -" Un changement manuel de configuration doit être opéré dans la " -"configuration\n" -" du greffon DNA pour cadrer avec la nouvelle plage locale. En particulier,\n" -" l'attribut « dnaNextRange » de « cn=Posix IDs »,^n« cn=Distributed Numeric " -"Assignment Plugin », « cn=plugins », « cn=config »\n" -" doivent être modifiés pour correspondre à cette nouvelle plage.\n" -" " - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "Plage d'ID « %(value)s » ajoutée" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" -"Les options dom-sid et dom-name ne peuvent pas être utilisées simultanément" - -#, fuzzy -msgid "Specified trusted domain name could not be found." -msgstr "objet relation de confiance introuvable" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" -"Les options « dom-sid/dom-name » et « rid-base » doivent être utilisées " -"simultanément" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" -"L'option rid-base ne doit pas être utilisée lorsque le type de plage IPA est " -"ipa-ad-trust-posix" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" -"Le type de plage IPA doit être « ipa-ad-trust » ou « ipa-ad-trust-posix » " -"lorsque le SID du domaine approuvé est indiqué." - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" -"Les options « dom-sid/dom-name » et « secondary-rid-base » ne peuvent pas " -"être utilisées simultanément" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" -"Le type de plage IPA ne doit être ni « ipa-ad-trust », ni « ipa-ad-trust-" -"posix » lorsque le SID du domaine approuvé n'est pas indiqué." - -#, fuzzy -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" -"Le type de plage IPA doit être « ipa-ad-trust » ou « ipa-ad-trust-posix » " -"lorsque le SID du domaine approuvé est indiqué." - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" -"Les options « secondary-rid-base » et « rid-base » doivent être utilisées " -"simultanément" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "Les plages de RID principales et secondaires ne peuvent se recouvrir" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" -"Vous devez préciser les deux options « rid-base » et « secondary-rid-base », " -"car « ipa-adtrust-install » a déjà été exécuté." - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "Plage d'ID « %(value)s » supprimée" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d plage correspondant" -msgstr[1] "%(count)d plages correspondant" - -#, fuzzy -msgid "" -"Modify ID range.\n" -"\n" -msgstr "Modifier une plage." - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "Plage d'ID « %(value)s » modifiée" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" -"Cette commande ne peut être utilisée que pour modifier l'allocation d'ID " -"pour le domaine local. Utilisez « ipa help idrange » pour plus " -"d'informations." - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" -"Impossible de trouver le SID du domaine approuvé désigné. Veuillez indiquer " -"directement le SID avec l'option « dom-sid »." - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" -"Les options « dom-sid » et « secondary-rid-base » ne peuvent pas être " -"utilisées simultanément" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" -"Les options « dom-sid » et « rid-base » doivent être utilisées simultanément" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" -"Privilège « write » insuffisant pour l'attribut « krbLastPwdChange » de " -"l'entrée « %s »." - -msgid "" -"\n" -"IPA locations\n" -msgstr "" -"\n" -"Emplacements IPA\n" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" -"\n" -"Manipulation des emplacements DNS\n" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" -"\n" -" Trouver tous les emplacements :\n" -" ipa location-find\n" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" -"\n" -" Afficher un emplacement spécifique :\n" -" ipa location-show location\n" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" -"\n" -" Ajouter un emplacement :\n" -" ipa location-add location --description 'Mon emplacement'\n" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" -"\n" -" Supprimer un emplacement :\n" -" ipa location-del location\n" - -msgid "location" -msgstr "emplacement" - -msgid "locations" -msgstr "emplacements" - -msgid "IPA Locations" -msgstr "Emplacements IPA" - -msgid "IPA Location" -msgstr "Emplacement IPA" - -msgid "Location name" -msgstr "Nom de l'emplacement" - -msgid "IPA location name" -msgstr "Nom de l'emplacement IPA" - -msgid "IPA Location description" -msgstr "Description de l'emplacement IPA" - -msgid "Servers" -msgstr "Serveurs" - -msgid "Servers that belongs to the IPA location" -msgstr "Serveurs appartenants à l'emplacement IPA" - -msgid "Advertised by servers" -msgstr "Publié par les serveurs" - -msgid "List of servers which advertise the given location" -msgstr "Liste des serveurs qui publient un emplacement donné" - -msgid "Add a new IPA location." -msgstr "Ajouter un nouvel emplacement IPA." - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "Emplacement IPA « %(value)s » ajouté" - -msgid "Delete an IPA location." -msgstr "Supprimer un emplacement IPA." - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Emplacement IPA « %(value)s » supprimé" - -msgid "IPA Server" -msgstr "Serveur IPA" - -msgid "Modify information about an IPA location." -msgstr "Modifier les informations d'un emplacement IPA." - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "Emplacement IPA « %(value)s » modifié" - -msgid "Search for IPA locations." -msgstr "Rechercher des emplacements IPA." - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "%(count)d emplacement IPA correspondant" -msgstr[1] "%(count)d emplacements IPA correspondants" - -msgid "Display information about an IPA location." -msgstr "Afficher les informations d'un emplacement IPA." - -msgid "Servers in location" -msgstr "Serveurs situés à l'emplacement" - -msgid "netgroups" -msgstr "groupes réseau" - -msgid "Netgroups" -msgstr "Groupes réseau" - -msgid "Netgroup" -msgstr "Groupe réseau" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "Groupe réseau « %(value)s » ajouté" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"Un groupe d'hôtes nommé « %s » existe déjà. Les groupes d'hôtes et les " -"groupes réseau partagent le même espace de nommage" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Groupe réseau « %(value)s » supprimé" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "Groupe réseau « %(value)s » supprimé" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" -"une catégorie d'utilisateurs ne peut pas être définie à « all » tant qu'il " -"reste des utilisateurs autorisés" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" -"une catégorie d'hôtes ne peut pas être définie à « all » tant qu'il reste " -"des hôtes autorisés" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "%(count)d groupe réseau correspondant" -msgstr[1] "%(count)d groupes réseau correspondant" - -msgid "One time password commands" -msgstr "Commandes mots de passe à usage unique (OTP)" - -msgid "OTP configuration options" -msgstr "Options de configuration pour les mots de passe à usage unique" - -msgid "OTP Configuration" -msgstr "Configuration pour les mots de passe à usage unique" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" -"\n" -"Jetons OTP\n" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" -"\n" -"Gérer les jetons OTP.\n" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" -"\n" -"IPA prend en charge l'utilisation de jetons OTP pour une authentification\n" -"à facteurs multiples. Ce code active la gestion des jetons OTP.\n" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" -"\n" -" Ajouter un nouveau jeton :\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" -"\n" -" Examiner un jeton :\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" -"\n" -" Modifier le fournisseur :\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" -"\n" -" Supprimer un jeton :\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" - -msgid "OTP token" -msgstr "jeton OTP" - -msgid "OTP tokens" -msgstr "jetons OTP" - -msgid "OTP Tokens" -msgstr "Jetons OTP" - -msgid "OTP Token" -msgstr "Jeton OTP" - -msgid "URI" -msgstr "URI" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "Jeton OTP « %(value)s » ajouté" - -msgid "cannot be empty" -msgstr "ne peut pas être vide" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Jeton OTP « %(value)s » supprimé" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "Jeton OTP « %(value)s » modifié" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "%(count)d jeton OTP correspond" -msgstr[1] "%(count)d jetons OTP correspondant" - -#, fuzzy -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" -"\n" -"Définir le mot de passe d'un utilisateur\n" -"\n" -"Si une personne autre que l'utilisateur change le mot de passe de cet\n" -"utilisateur (par exemple en cas de réinitialisation par les services\n" -"d'assistance technique), le mot de passe devra être modifié la première\n" -"fois qu'il sera utilisé, afin que l'utilisateur soit le seul à connaître\n" -"son mot de passe.\n" -"\n" -"La politique de mot de passe de IPA contrôle la fréquence de changement\n" -"des mots de passe, les prérequis de leur résistance, et la taille\n" -"de l'historique des mots de passe.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Réinitialiser son propre mot de passe :\n" -" ipa passwd\n" -"\n" -" Modifier le mot de passe d'un utilisateur :\n" -" ipa passwd tuser1\n" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Mot de passe modifié pour « %(value)s »" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "« pkinit »" - -msgid "PKINIT" -msgstr "PKINIT" - -#, fuzzy -msgid "PKINIT status" -msgstr "État de la confiance" - -#, fuzzy -msgid "Whether PKINIT is enabled or disabled" -msgstr "Cette entrée ne peut être activée ou désactivée" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)s rôle serveur correspondant" -msgstr[1] "%(count)s rôles serveur correspondants" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" -"\n" -"Serveurs mandataires RADIUS\n" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" -"\n" -"Gestion des serveurs mandataires RADIUS.\n" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" -"\n" -"IPA prend en charge l'utilisation d'un serveur mandataire externe RADIUS\n" -"pour des authentifications OTP « krb5 ». Cela procure une grande souplesse\n" -"pour l'intégration des services d'authentification tierce partie.\n" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" -"\n" -" Ajouter un nouveau serveur :\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" -"\n" -" Trouver tous serveurs dont les entrées incluent la chaîne « example." -"com » :\n" -" ipa radiusproxy-find example.com\n" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" -"\n" -" Examiner la configuration :\n" -" ipa radiusproxy-show MyRADIUS\n" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" -"\n" -" Changer le secret :\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" -"\n" -" Supprimer une configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" - -msgid "invalid attribute name" -msgstr "nom d'attribut invalide" - -msgid "invalid port number" -msgstr "numéro de port invalide" - -msgid "RADIUS proxy server" -msgstr "Serveur mandataire RADIUS" - -msgid "RADIUS proxy servers" -msgstr "Serveurs mandataires RADIUS" - -msgid "RADIUS Servers" -msgstr "Serveurs RADIUS" - -msgid "RADIUS Server" -msgstr "Serveur RADIUS" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "Serveur mandataire RADIUS « %(value)s » ajouté" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "Serveur mandataire RADIUS « %(value)s » supprimé" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "Serveur mandataire RADIUS « %(value)s » modifié" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "%(count)d serveur mandataire RADIUS correspondant" -msgstr[1] "%(count)d serveurs mandataires RADIUS correspondant" - -#, fuzzy -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" -"\n" -"Domaines du royaume\n" -"\n" -"Gérer la liste des domaines associés au royaume IPA.\n" -"\n" -"EXEMPLES:\n" -"\n" -" Afficher la liste actuelle des domaines du royaume :\n" -" ipa realmdomains-show\n" -"\n" -" Remplacer la liste des domaines du royaume :\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Ajouter un domaine à la liste des domaines du royaume :\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Supprimer un domaine de la liste des domaines du royaume :\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" - -msgid "Realm domains" -msgstr "Domaines du royaume" - -msgid "Realm Domains" -msgstr "Domaines pour le royaume" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" -"La zone DNS de chaque domaine Kerberos doit contenir des enregistrements SOA " -"et NS. Aucun enregistrement trouvé pour : %s" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" -"Les domaines suivants n'appartiennent pas à ce domaine Kerberos : %(domains)s" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" -"Le domaine Kerberos des domaines suivants ne peuvent être détectés : " -"%(domains)s. S'il existe des domaines appartenant à ce royaume, merci de " -"créer un enregistrement TXT kerberos contenant « %(realm)s » dans chacun " -"d'entre eux." - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" -"L'option « --domain » ne peut être utilisée conjointement avec les options " -"« --add-domain » or « --del-domain ». Utilisez « --domain » pour indiquer " -"explicitement la liste complète des domaines du royaume, utilisez « --add-" -"domain » et « --del-domain » pour ajouter et supprimer les domaines de " -"manière individuelle." - -msgid "IPA server domain cannot be omitted" -msgstr "Le domaine du serveur IPA ne peut être omis" - -msgid "IPA server domain cannot be deleted" -msgstr "Le domaine du serveur IPA ne peut être supprimé" - -msgid "roles" -msgstr "rôles" - -msgid "Role" -msgstr "Rôle" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "Rôle « %(value)s » ajouté" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "Rôle « %(value)s » supprimé" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "Rôle « %(value)s » modifié" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d rôle correspondant" -msgstr[1] "%(count)d rôles correspondant" - -msgid "self service permission" -msgstr "permission de libre service" - -msgid "self service permissions" -msgstr "permissions de libre service" - -msgid "Self Service Permissions" -msgstr "Permissions de libre service" - -msgid "Self Service Permission" -msgstr "Permission de libre service" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "Permission de libre service « %(value)s » ajoutée" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "Permission de libre service « %(value)s » supprimée" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "Permission de libre service « %(value)s » modifiée" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "%(count)d permission de libre service correspondant" -msgstr[1] "%(count)d permissions de libre service correspondant" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" -"\n" -"Rôles serveurs IPA\n" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" -"\n" -"Obtenir l'état des rôles (serveur DNS, AC, etc. )fournis par les maîtres " -"IPA.\n" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" -"\n" -" Afficher l'état du rôle « Serveur DNS » d'un serveur :\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" - -#, fuzzy -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" -"\n" -" Afficher l'état de tous les rôles configurés sur un serveur :\n" -" ipa server-role-find ipa.example.com\n" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" -"\n" -" Afficher l'état de tous les rôles configurés sur un serveur :\n" -" ipa server-role-find ipa.example.com\n" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "rôle serveur" - -msgid "server roles" -msgstr "rôles serveur" - -msgid "IPA Server Roles" -msgstr "Rôles serveur IPA" - -msgid "IPA Server Role" -msgstr "Rôle serveur IPA" - -msgid "IPA server role name" -msgstr "Nom du rôle serveur IPA" - -msgid "Role status" -msgstr "État du rôle" - -msgid "Status of the role" -msgstr "État du rôle" - -msgid "Show role status on a server" -msgstr "Afficher l'état du rôle sur un serveur" - -msgid "Find a server role on a server(s)" -msgstr "Trouver les rôles serveur de serveurs" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "%(count)s rôle serveur correspondant" -msgstr[1] "%(count)s rôles serveur correspondants" - -#, fuzzy -msgid "Include IPA master entries" -msgstr "Attributs inclus" - -msgid "IPA role name" -msgstr "Nom du rôle IPA" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "{role} : rôle introuvable" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "{attr} : attribut introuvable" - -#, fuzzy -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" -"\n" -"Délégation contrainte de services\n" -"\n" -"Gérez les règles permettant la délégation contrainte d'informations\n" -"d'authentification de façon à ce qu'un service puisse se faire passer\n" -"pour un utilisateur lors de la communication avec un service sans\n" -"que cela ne nécessite de la part de l'utilisateur de transmettre son TGT.\n" -"Cela constitue une méthode bien meilleure de délégation d'identification\n" -"car elle évite l'exposition du secret court terme de l'utilisateur.\n" -"\n" -"La convention de nommage est d'ajouter le mot « target » ou « targets »\n" -"au nom de la règle de correspondance. Ce poitn n'est pas obligatoire mais\n" -"aide à visualiser l'association entre règles et cibles.\n" -"\n" -"Une règle est constituée de deux choses :\n" -" - une liste de cibles auxquelles la règle s'applique,\n" -" - une liste de memberPrincipals qui sont autorisés à leur déléguer\n" -" leurs droits.\n" -"\n" -"Une cible consiste en une liste de principaux qui peuvent être délégués.\n" -"\n" -"En anglais, une règle que ce principal peut déléguer comme cette liste\n" -"de principaux, tels que définis par ces cibles.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter une nouvelle règle de délégation contrainte :\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Ajouter une nouvelle cible de délégation contrainte :\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Ajouter un principal à la règle :\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Ajouter notre cible à la règle :\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add un principal à la cible :\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Afficher les informations au sujet d'une règle de délégation et sa cible :\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Supprimer une délégation contrainte :\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"Dans cet exemple, le service ftp peut obtenir un TGT pour le service ldap\n" -"au nom de l'utilisateur associé.\n" -"\n" -"Il est fortement découragé de modifier les délégations livrées avec IPA,\n" -"ipa-http-delegation et ses cibles ipa-cifs-delegation-targets et\n" -"ipa-ldap-delegation-targets. Des modifications erronées peuvent obérer\n" -"la capacité de délégation, en provoquant l'arrêt de fonctionnement du\n" -"moteur.\n" - -msgid "Allowed to Impersonate" -msgstr "Autorisé à prendre l'identité" - -msgid "Member principals" -msgstr "Principaux membres de" - -#, fuzzy, python-format -msgid "Malformed principal: %(error)s" -msgstr "Principal malformé" - -msgid "Add target to a named service delegation." -msgstr "Ajouter des cibles à une délégation de service nommé" - -#, python-format -msgid "member %s" -msgstr "%s membre" - -msgid "Remove member from a named service delegation." -msgstr "Retirer des membres d'une délégation de service nommé" - -msgid "service delegation rule" -msgstr "règle de délégation de service" - -msgid "service delegation rules" -msgstr "règles de délégation de service" - -msgid "Service delegation rules" -msgstr "Règles de délégation de service" - -msgid "Service delegation rule" -msgstr "Règle de délégation de service" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "Règle de délégation de service « %(value)s » ajoutée" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "Règle de délégation de service « %(value)s » supprimée" - -msgid "privileged service delegation rule" -msgstr "règle de délégation de service privilégié" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "%(count)d règle de délégation de service correspondante" -msgstr[1] "%(count)d règles de délégation de service correspondantes" - -msgid "service delegation target" -msgstr "cible de délégation de service" - -msgid "service delegation targets" -msgstr "cibles de délégation de service" - -msgid "Service delegation targets" -msgstr "Cibles de délégation de service" - -msgid "Service delegation target" -msgstr "Cible de délégation de service" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "Cible de délégation de service « %(value)s » ajoutée" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "Cible de délégation de service « %(value)s » supprimée" - -msgid "privileged service delegation target" -msgstr "cible de délégation de service privilégiée" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "%(count)d cible de délégation de service correspondante" -msgstr[1] "%(count)d cibles de délégation de service correspondantes" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -#, fuzzy -msgid "Subordinate id description" -msgstr "Description de profil" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -#, fuzzy -msgid "SubUID range size" -msgstr "Taille de la plage" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -#, fuzzy -msgid "SubGID range size" -msgstr "Taille de la plage" - -msgid "Subordinate group ID count" -msgstr "" - -#, fuzzy, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "L'objet %(oname)s avec le nom « %(pkey)s » existe déjà" - -#, fuzzy, python-format -msgid "'%(dn)s is not a valid user" -msgstr "%(port)s n'est pas un port valide" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -#, fuzzy -msgid "Add a new subordinate id." -msgstr "Ajouter un nouvel utilisateur en attente." - -#, fuzzy, python-format -msgid "Added subordinate id \"%(value)s\"" -msgstr "Service « %(value)s » ajouté" - -#, fuzzy -msgid "Delete a subordinate id." -msgstr "Supprimer un profil de certificat." - -#, fuzzy, python-format -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "Service « %(value)s » supprimé" - -#, fuzzy -msgid "Modify a subordinate id." -msgstr "Modifier un utilisateur en attente." - -#, fuzzy, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "Service « %(value)s » modifié" - -#, fuzzy -msgid "Search for subordinate id." -msgstr "Rechercher des plages." - -#, fuzzy, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "%(count)d service correspondant" -msgstr[1] "%(count)d services correspondant" - -#, fuzzy -msgid "Display information about a subordinate id." -msgstr "Afficher les informations sur une plage." - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "commandes pour contrôler la configuration sudo" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" -"\n" -"Commandes sudo\n" -"\n" -"Commandes utilisées en tant que briques de base pour sudo\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter une nouvelle commande\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Supprimer une commande\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -msgid "sudo command" -msgstr "commande sudo" - -msgid "sudo commands" -msgstr "commandes sudo" - -msgid "Sudo Commands" -msgstr "Commandes sudo" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "Commande sudo « %(value)s » ajoutée" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "Commande sudo « %(value)s » supprimée" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "Commande sudo « %(value)s » modifiée" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "%(count)d commande sudo correspondant" -msgstr[1] "%(count)d commandes sudo correspondant" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" -"\n" -"Groupes de commandes sudo\n" -"\n" -"Administre les groupes de commandes sudo.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Ajouter un nouveau groupe de commandes sudo :\n" -" ipa sudocmdgroup-add --desc='commandes administrateurs' admincmds\n" -"\n" -" Supprimer un groupe de commandes sudo :\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Gérer les commandes, l'appartenance d'un groupe de commandes sudo :\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Administrer les commandes, l'appartenance d'un groupe de commandes sudo :\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Afficher un groupe de commandes sudo :\n" -" ipa sudocmdgroup-show admincmds\n" - -msgid "sudo command group" -msgstr "groupe de commandes sudo" - -msgid "sudo command groups" -msgstr "groupes de commandes sudo" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Groupe de commandes sudo « %(value)s » ajouté" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Groupe de commandes sudo « %(value)s » supprimé" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Groupe de commandes sudo « %(value)s » modifié." - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "%(count)d groupe de commandes Sudo correspondant" -msgstr[1] "%(count)d groupes de commandes Sudo correspondant" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" -"\n" -"Topologie\n" -"\n" -"Gestion de la topologie de réplication.\n" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" -"\n" -"Les données des serveurs IPA sont enregistrées dans le serveur LDAP\n" -"sous deux suffixes :\n" -"* le suffixe de domain, par exemple « dc=example,dc=com », qui contient " -"toutes\n" -" les informations relatives au domaine ;\n" -"* le suffixe ca, « o=ipaca », qui n'est présent que sur les serveurs où " -"l'autorité de certification\n" -" est installée. Il contient les données nécessaire au composant " -"Certificate Server\n" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" -"\n" -"Les données enregistrées dans les serveurs IPA sont répliquées vers les " -"autres\n" -"serveurs IPA. Les agréments de réplication définissent la manière dont la \n" -"réplication s'opère. Les agréments de réplication doivent être définis " -"pour \n" -"les deux suffixes de manière séparée. Sur les domaines de niveau 0, ils " -"sont\n" -"gérés par les outils ipa-replica-manage et ipa-csreplica-manage tools. Sur \n" -"les domaines de niveau 1, ils sont gérés de manière centralisée par les " -"commandes\n" -"« ipa topology* ».\n" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" -"\n" -"Les agréments sont représentés par des segments de topologie. Un segment de " -"topologie\n" -"représente par défaut deux agréments de réplication, un pour chaque " -"direction, par exemple\n" -"de A vers B et de B vers A. La création de segments unidirectionnels n'est " -"pas permise.\n" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" -"\n" -"Afin de vérifier qu'aucun serveur n'est déconnecté dans la topologie d'un\n" -"suffixe donné, utiliser :\n" -" ipa topologysuffix-verify $suffix\n" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -"\n" -"Exemples :\n" -" Trouver tous les serveurs :\n" -" ipa server-find\n" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" -"\n" -" Trouver tous les suffixes :\n" -" ipa topologysuffix-find\n" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" -"\n" -" Ajouter un segment de topologie au suffixe du domaine :\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" -"\n" -" Ajouter un segment de topologie au suffixe « ca » :\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" -"\n" -" Énumérer tous les segments de topologie dans le suffixe du domaine :\n" -" ipa topologysegment-find domain\n" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" -"\n" -" Énumérer tous les segments de topologie dans le suffixe « ca » :\n" -" ipa topologysegment-find ca\n" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" -"\n" -" Supprimer un segment de topologie du suffixe du domaine :\n" -" ipa topologysegment-del domain segment_name\n" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" -"\n" -" Supprimer un segment de topologie du suffixe « ca » :\n" -" ipa topologysegment-del ca segment_name\n" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" -"\n" -" Vérification de la topologie du suffixe du domaine :\n" -" ipa topologysuffix-verify domain\n" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" -"\n" -" Vérification de la topologie du suffixe « ca » :\n" -" ipa topologysuffix-verify ca\n" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "La gestion de la topologie nécessite le niveau de domaine minimal {0}" - -msgid "segment" -msgstr "segment" - -msgid "segments" -msgstr "segments" - -msgid "Topology Segments" -msgstr "Segments de topologie" - -msgid "Topology Segment" -msgstr "Segment de topologie" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "le nœud de gauche n'est pas un nœud de la topologie : %(leftnode)s" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "le nœud de droite n'est pas un nœud de la topologie : %(rightnode)s" - -msgid "left node and right node must not be the same" -msgstr "les nœuds de gauche et de droite ne peuvent être identiques" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "%(count)d segment correspondant" -msgstr[1] "%(count)d segment correspondants" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "Segment « %(value)s » ajouté" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "Segment « %(value)s » supprimé" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "Segment « %(value)s » modifié" - -#, python-format -msgid "%(value)s" -msgstr "%(value)s" - -msgid "left or right node has to be specified" -msgstr "le nœud de gauche ou de droite doit être indiqué" - -msgid "only one node can be specified" -msgstr "seul un nœud peut être indiqué" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" -"Raffraichissement demandé pour la réplication via le segment « %(pkey)s »." - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" -"Arrêt du raffraichissement demandé pour la réplication via le segment « " -"%(pkey)s »." - -msgid "suffixes" -msgstr "suffixes" - -msgid "Topology suffixes" -msgstr "Suffixes de topologie" - -msgid "Topology suffix" -msgstr "Suffixe de topologie" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "%(count)d suffixe de topologie correspondant" -msgstr[1] "%(count)d suffixes de topologie correspondants" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Suffixe de topologie « %(value)s » supprimé" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "Suffixe de topologie « %(value)s » ajouté" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "Suffixe de topologie « %(value)s » modifié" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" -"\n" -"Vérifier la topologie de réplication pour le suffixe.\n" -"\n" -"Vérifications effectuées :\n" -" 1. vérfier si la topologie n'est pas déconnectée. En d'autres mots, si des " -"chemins\n" -" de réplication existent bien entre tous les serveurs.\n" -" 2. vérifier si tous les serveurs n'ont pas un nombre supérieur à celui " -"recommandé\n" -" d'agrément de réplication.\n" - -msgid "operation not defined" -msgstr "opération non définie" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "non autorisé à effectuer l'opération : %s" - -msgid "No such virtual command" -msgstr "Commande virtuelle inconnue" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -#, fuzzy -msgid "Object class name" -msgstr "Classe d'objets utilisateur" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" -"\n" -"Serveurs IPA\n" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" -"\n" -"Afficher les informations au sujet des serveurs IPA installés.\n" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -" Trouver tous les serveurs :\n" -" ipa server-find\n" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" -"\n" -" Afficher les informations d'un serveur en particulier :\n" -" ipa server-show ipa.example.com\n" - -msgid "server" -msgstr "serveur" - -msgid "servers" -msgstr "serveurs" - -msgid "IPA Servers" -msgstr "Serveurs IPA" - -msgid "Server location" -msgstr "Emplacement de serveur" - -msgid "Service weight" -msgstr "Poids du service" - -msgid "Weight for server services" -msgstr "Poids des services des serveurs" - -msgid "Service relative weight" -msgstr "Poids relatif du service" - -msgid "Relative weight for server services (counts per location)" -msgstr "Poids relatifs des services des serveurs (compte par emplacement)" - -msgid "Enabled server roles" -msgstr "Rôles serveur activés" - -msgid "List of enabled roles" -msgstr "Liste des rôles activés" - -msgid "Modify information about an IPA server." -msgstr "Modifier les informations d'un serveur IPA." - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "Serveur IPA \"%(value)s\" modifié" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "%(count)d serveur IPA correspondant" -msgstr[1] "%(count)d serveurs IPA correspondants" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "Serveur IPA « %(value)s » supprimé" - -msgid "Ignore topology errors" -msgstr "Ignorer les erreurs de topologie" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" -"Ignorer les problèmes de connectivité dans la topologie après suppression" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "Ignorer la vérification de dernier serveur d'AC ou DNS" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" -"Passer la vérification lorsque le dernier serveur DNS ou AC maître est " -"supprimé" - -msgid "Force server removal" -msgstr "Forcer la suppression du serveur" - -msgid "Force server removal even if it does not exist" -msgstr "Forcer la suppression du serveur même s'il n'existe pas" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" -"La réplique est un serveur de clés DNSSEC actif. Le désinstaller pourrait " -"casser votre système DNS. Merci de d'abord désactiver ou de remplacer votre " -"serveur de clés DNSSEC." - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "La suppression de ce serveur laissera votre installation sans DNS." - -#, fuzzy -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" -"La suppression de ce serveur n'est pas autorisée, elle laisserait votre " -"installation sans AC." - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" -"La suppression de ce serveur n'est pas autorisée, elle laisserait votre " -"installation sans AC." - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "On ignore ces avertissements et lancement de la suppression" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" -"Échec du nettoyage du memberPrincipal %(principal)s dans l'entrée s4u2proxy " -"%(dn)s : %(err)s" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" -"Échec du nettoyage des entrées du nom d'hôte DNA pour %(master)s : %(err)s" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" -"Échec de la suppression du serveur %(master)s de la liste de serveurs : " -"%(err)s" - -#, fuzzy, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" -"Échec du nettoyage des entrées du nom d'hôte DNA pour %(master)s : %(err)s" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "Échec du nettoyage du principal ou des clés du serveur : %(err)s" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "Échec du nettoyage des entrées DNS de %(hostname)s : %(err)s" - -msgid "You may need to manually remove them from the tree" -msgstr "Vous pouvez avoir besoin de les supprimer manuellement de l'arbre" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "On force la suppression de %(hostname)s" - -msgid "Ignoring topology connectivity errors." -msgstr "On ignore les erreurs de connectivité de la topologie." - -#, fuzzy, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "" -"Échec de la suppression du serveur %(master)s de la liste de serveurs : " -"%(err)s" - -msgid "Server has already been deleted" -msgstr "Le serveur a déjà été supprimé" - -msgid "Agreements deleted" -msgstr "Agréments supprimés" - -msgid "Following segments were not deleted:" -msgstr "Les segments suivants n'ont pas été supprimés :" - -#, python-format -msgid "must be \"%s\"" -msgstr "doit être « %s »" - -msgid "not allowed to perform server connection check" -msgstr "impossible d'effectuer la vérification de la connexion au serveur" - -#, fuzzy -msgid "Set enabled/hidden state of a server." -msgstr "Afficher l'état du rôle sur un serveur" - -#, fuzzy -msgid "State" -msgstr "État" - -#, fuzzy -msgid "Server state" -msgstr "Nom du serveur" - -#, fuzzy, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "Mot de passe modifié pour « %(value)s »" - -#, fuzzy -msgid "Cannot hide CA renewal master." -msgstr "Maître de renouvellement d'AC IPA" - -#, fuzzy -msgid "Cannot hide DNSSec key master." -msgstr "Maître des clés DNSSec IPA" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "A list of ACI values" -msgstr "Une liste de valeurs d'ACI" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" -"« type », « filter », « subtree » et « targetgroup » s'excluent mutuellement" - -msgid "ACI prefix is required" -msgstr "Un préfixe ACI est requis" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" -"au moins un parmi « type », « filter », « subtree », « targetgroup », " -"« attrs » ou « memberof » est requis" - -msgid "filter and memberof are mutually exclusive" -msgstr "« filter » et « memberof » s'excluent mutuellement" - -msgid "group, permission and self are mutually exclusive" -msgstr "« group », « permission » et « self » s'excluent mutuellement" - -msgid "One of group, permission or self is required" -msgstr "Un parmi « group », « permission » ou « self » est requis" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "Le groupe « %s » n'existe pas" - -msgid "empty filter" -msgstr "filtre vide" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Erreur de syntaxe : %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "DN invalide (%s)" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "ACI de nom « %s » introuvable" - -#, fuzzy -msgid "ACI object." -msgstr "objet IPA" - -msgid "ACIs" -msgstr "ACI" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "ACI « %(value)s » créée" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "ACI « %(value)s » supprimée" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "ACI « %(value)s » modifiée" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d ACI correspondant" -msgstr[1] "%(count)d ACI correspondant" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "ACI renommée en « %(value)s »" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" -"\n" -"Règle d'adhésion automatique.\n" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" -"\n" -"Clarifie l'adhésion d'hôtes et d'utilisateurs en configurant des motifs\n" -"« regex » d'inclusion ou exclusion à assigner automatiquement aux nouvelles\n" -"entrées dans un groupe ou un groupe d'hôtes selon l'information d'attribut.\n" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" -"\n" -"Une règle est directement associée à un groupe par le nom, donc il n'est " -"pas\n" -"possible de créer une règle sans groupe ou groupe d'hôtes d'accompagnement.\n" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" -"\n" -"Une condition est une expression rationnelle dont se sert « 389-ds » pour\n" -"associer nouvelle entrée et règle d'adhésion. Si l'entrée correspond à une\n" -"règle d'inclusion, elle est ajoutée au groupe ou groupe d'hôte approprié.\n" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" -"\n" -"Un groupe ou groupe d'hôte par défaut peut être défini pour des entrées ne\n" -"correspondant à aucune règle. Tout utilisateur a ce groupe comme repli, car\n" -"il est par défaut membre du groupe indiqué dans la configuration de IPA.\n" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" -"\n" -"« automember-rebuild » s'utilise pour appliquer rétroactivement les règles\n" -"d'adhésion automatique aux entrées présentes, et ainsi revoir leur " -"adhésion.\n" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" -"\n" -" Ajouter le groupe ou le groupe d'hôtes initial :\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" -"\n" -" Ajouter la règle initiale :\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" -"\n" -" Ajouter une condition à la règle :\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" -"\n" -" Ajouter une condition d'exclusion à la règle pour empêcher l'auto-" -"assignation :\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" -"\n" -" Ajouter un hôte :\n" -" ipa host-add web1.example.com\n" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" -"\n" -" Ajouter un utilisateur :\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" -"\n" -" Vérifier une adhésion automatique :\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" -"\n" -" Supprimer une condition de la règle :\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" -"\n" -" Modifier la règle d'adhésion automatique :\n" -" ipa automember-mod\n" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" -"\n" -" Définir le groupe cible par défaut (recours) :\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" -"\n" -" Supprimer le groupe cible par défaut (repli) ::\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" -"\n" -" Afficher le groupe cible par défaut (repki) :\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" -"\n" -" Retrouver toutes les règles d'adhésion automatique :\n" -" ipa automember-find\n" - -#, fuzzy -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" -"\n" -" Supprimer une règle d'adhésion automatique :\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" -"\n" -" Afficher une règle d'adhésion automatique :\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" -"\n" -" Supprimer une règle d'adhésion automatique :\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" -"\n" -" Reconstruire l'appartenance de tous les utilisateurs :\n" -" ipa automember-rebuild --type=group\n" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" -"\n" -" Reconstruire l'appartenance de tous les hôtes :\n" -" ipa automember-rebuild --type=hostgroup\n" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" -"\n" -" Reconstruire l'appartenance d'utilisateurs donnés :\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" -"\n" -" Reconstruire l'appartenance d'hôtes donnés :\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" - -msgid "Auto Membership Rule" -msgstr "Règle d'appartenance automatique" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "« %(oname)s » de « %(otype)s » introuvable" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "%s n'est pas un attribut valide." - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" -"\n" -" Ajouter une règle d'auto-adhésion.\n" -" " - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "Règle d'auto-adhésion « %(value)s » ajoutée" - -msgid "Auto Membership is not configured" -msgstr "L'auto-adhésion n'est pas configurée" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" -"\n" -" Ajouter des conditions à une règle d'auto-adhésion.\n" -" " - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Condition(s) ajoutées à « %(value)s »" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "Règle d'auto-adhésion : %s introuvable !" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" -"\n" -" Surcharger ceci afin de pouvoir ajouter réussites et échecs aux\n" -" résultats renvoyés.\n" -" " - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" -"\n" -" Supprimer des conditions d'une règle d'auto-adhésion.\n" -" " - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Conditions supprimées de « %(value)s »" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" -"\n" -" Surcharger ceci afin de pouvoir définir réussites et échecs.\n" -" " - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" -"\n" -" Modifier une règle d'auto-adhésion.\n" -" " - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "Règle d'auto-adhésion « %(value)s » modifiée" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" -"\n" -" Supprimer une règle d'auto-adhésion.\n" -" " - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Règle d'auto-adhésion « %(value)s » supprimée" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" -"\n" -" Rechercher des règles d'auto-adhésion.\n" -" " - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d règle correspondante" -msgstr[1] "%(count)d règles correspondantes" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" -"\n" -" Afficher des informations au sujet d'une règle d'auto-adhésion.\n" -" " - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" -"\n" -" Définit un groupe par défaut (repli) pour toutes les entrées sans " -"correspondance.\n" -" " - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" -"Définir le groupe « %(value)s » par défaut (repli) pour l'auto-adhésion" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" -"\n" -" Supprimer le groupe par défaut (repli) pour toute entrée sans " -"correspondance.\n" -" " - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "Groupe « %(value)s » par défaut (repli) supprimé pour l'auto-adhésion" - -msgid "No default (fallback) group set" -msgstr "Pas de groupe par défaut (repli) défini" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" -"\n" -" Afficher des informations pour les groupes d'auto-adhésion par défaut " -"(repli).\n" -" " - -msgid "Task DN" -msgstr "DN de la tâche" - -msgid "DN of the started task" -msgstr "DN de la tâche lancée" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" -"au moins une des options « type », « users » ou « hosts » doit être indiquée" - -msgid "users and hosts cannot both be set" -msgstr "impossible de définir à la fois des utilisateurs et des hôtes" - -msgid "hosts cannot be set when type is 'group'" -msgstr "des hôtes ne peuvent pas être définis quand le type est « group »" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "impossible de définir des utilisateurs quand le type est « hostgroup »" - -msgid "Automember rebuild membership task started" -msgstr "" -"Tâche de reconstruction de l'appartenance avec adhésion automatique démarrée" - -msgid "Automember rebuild membership task completed" -msgstr "La tâche de reconstruction des appartenances automatiques est terminée" - -#, python-format -msgid "Task DN = '%s'" -msgstr "DN de la tâche = « %s »" - -msgid "Automember" -msgstr "Auto-adhésion" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -#, fuzzy -msgid "Remove orphan automember rules" -msgstr "Supprimer des conditions d'une règle d'auto-adhésion. " - -msgid "Member service groups" -msgstr "Groupes de services membres" - -msgid "Member HBAC service groups" -msgstr "Groupes de services HBAC membres" - -#, fuzzy -msgid "Member ID user overrides" -msgstr "Surcharges d'identifiants utilisateurs" - -#, fuzzy -msgid "Indirect Member ID user overrides" -msgstr "Utilisateurs membres indirects" - -msgid "Indirect Member permissions" -msgstr "Droits d'accès de membre indirect" - -msgid "Indirect Member HBAC service" -msgstr "Service HBAC de membre indirect" - -msgid "Indirect Member HBAC service group" -msgstr "Groupe de services de membre indirect" - -msgid "Invalid format. Should be name=value" -msgstr "Format invalide. Doit être nom=valeur" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "Un serveur maître IPA ne peut ni être supprimé ni désactivé" - -msgid "entry" -msgstr "entrée" - -msgid "entries" -msgstr "entrées" - -msgid "Entry" -msgstr "Entrée" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "entrée conteneur (%(container)s) introuvable" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s : %(oname)s introuvable" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s : %(oname)s introuvable" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "L'objet %(oname)s avec le nom « %(pkey)s » existe déjà" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "l'attribut « %(attribute)s » n'est pas autorisé" - -#, fuzzy, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "attribut « %s » interdit" - -msgid "attribute is not configurable" -msgstr "l'attribut n'est pas configurable" - -msgid "No such attribute on this entry" -msgstr "Pas d'attribut de ce type sur cette entrée" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "Renomme l'objet %(ldap_obj_name)s" - -msgid "the entry was deleted while being modified" -msgstr "cette entrée a été supprimée pendant sa modification" - -#, python-format -msgid "%s" -msgstr "%s" - -#, python-format -msgid "%s to add" -msgstr "%s à ajouter" - -#, python-format -msgid "%s to remove" -msgstr "%s à supprimer" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« %s »)" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" -"Recherche des %(searched_object)s avec ceux de %(ldap_object)s de " -"%(relationship)s." - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" -"Recherche des %(searched_object)s sans ceux de %(ldap_object)s de " -"%(relationship)s." - -#, fuzzy, python-format -msgid "added attribute value to entry %(value)s" -msgstr "Alias ajoutés à l'hôte « %(value)s »" - -#, fuzzy, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "Alias supprimés pour l'hôte « %(value)s »" - -msgid "one or more values to remove" -msgstr "une ou plusieurs valeurs à supprimer" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "doit contenir un tuple (liste, dict)" - -msgid "REST API is not logged in." -msgstr "L'API REST n'est pas connectée." - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" -"Réponse non 2xx reçue de l'API REST de l'AC : %(status)d. %(explanation)s" - -msgid "Unable to communicate with CMS" -msgstr "Impossible de communiquer avec le CMS" - -msgid "Response from CA was not valid JSON" -msgstr "La réponse de l'AC n'est pas dans un format JSON valide" - -msgid "pyhbac is not installed." -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" -"\n" -"Simuler l'utilisation des contrôles d'accès fondés sur l'hôte\n" -"\n" -"Les règles HBAC contrôlent qui peut accéder à quel service sur quels hôtes.\n" -"Vous pouvez utiliser HBAC pour contrôler quels utilisateurs ou quels " -"groupes\n" -"ont accés à un service ou à un groupe de services, sur un hôte cible.\n" -"\n" -"L'application de règles HBAC présuppose un environnement de production ;\n" -"ce greffon a pour objet de fournir une simulation de l'évaluation des " -"règles\n" -"HBAC sans nécessiter d'accès à cet environnement.\n" -"\n" -" Tester l'arrivée d'un utilisateur dans un service sur un hôte donné\n" -" vis à vis des règles actives existantes.\n" -"\n" -"ipa hbactest --user= --host= --service=\\\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\\\n" -" [--sizelimit= ]\n" -"\n" -"--user, --host et --service sont obligatoires, les autres sont " -"optionnelles.\n" -"\n" -" Si --rules est défini, simule l'activation des règles « rules-list » et\n" -" teste la connexion de l'utilisateur uniquement sur ces règles.\n" -"\n" -" Si --enabled est défini, toutes les règles HBAC activées sont ajoutées à\n" -" la simulation\n" -"\n" -" Si --disabled est défini, toutes les règles HBAC désactivées sont ajoutées\n" -" à la simulation\n" -"\n" -" Si --nodetail est défini, il n'est pas renvoyé d'information sur les " -"règles satisfaites ou non satisfaites.\n" -"\n" -" Si --rules et --enabled sont définis tous deux, la simulation est " -"appliquée\n" -" à --rules _et_ à tous les règles IPA activées.\n" -"\n" -" Si --rules n'est pas défini, la simulation est lancée vis à sis de toutes\n" -" les règles IPA activées.\n" -" Par défaut, il y a une limite globale IPA pour le nombre d'entrées\n" -" renvoyées, vous pouvez la modifier avec l'option « --sizelimit ».\n" -"\n" -"EXEMPLES :\n" -"\n" -" 1. Utiliser toutes les règles HBAC activées dans la base de données IPA\n" -" pour la simulation :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Désactiver le résumé détaillé sur l'application des règles :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Tester explicitement les règles HBAC indiquées :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" -"--rules=my-second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Utiliser toutes les règles HBAC activées de la base de données IPA\n" -" plus les règles explicitement définies :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" -"--rules=my-second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Tester toutes les règles HBAC désactivées de la base de données " -"IPA :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Tester toutes les règles HBAC désactivées de la base de données IPA\n" -" plus les règles explicitement définies :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" -"--rules=my-second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Tester toutes les règles HBAC (activées et désactivées) de la base\n" -" de données IPA :\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -"\n" -"\n" -"TEST HBAC ET domaines approuvés\n" -"\n" -"Si un domaine approuvé externe est configuré dans IPA, les règles HBAC\n" -"sont aussi appliquées aux utilisateurs accédant aux ressources IPA à partir\n" -"du domaine approuvé. Les utilisateurs des domaines approuvés et les\n" -"groupes (et leur SID) peuvent être assignés à des groupes externes pouvant\n" -"être membres de groupes POSIX d'IPA éligibles aux règles HBAC, ce qui\n" -"autorise un accès aux ressources protégées par le système HBAC.\n" -"\n" -"Le greffon « hbactest » peut tester des accès, à la fois d'utilisateurs\n" -"IPA locaux et d'utilisateurs de domaines approuvés à partir, soit du\n" -"nom d'utilisateur pleinement qualifié, soit du SID utilisateur. De tels " -"noms\n" -"d'utilisateur doivent avoir un domaine approuvé précisé comme nom court\n" -"(DOMAINE\\Administrateur) ou avec un nom de principal d'utilisateur (UPN),\n" -"Administrator@ad.test.\n" -"\n" -"Veuillez noter que « hbactest » exécuté avec un utilisateur de domaine de\n" -"confiance en tant que paramètre --user ne peut être lancé que par des\n" -"membres du groupe des « administrateurs de confiance ».\n" -"\n" -"EXEMPLES :\n" -"\n" -" 1. Tester si un utilisateur d'un domaine approuvé défini par son\n" -" nom court satisfait à toute règle :\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Tester si un utilisateur d'un domaine approuvé défini par son\n" -" nom de domaine satisfait à toute règle :\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Tester si un utilisateur d'un domaine approuvé défini par son\n" -" SID satisfait à toute règle :\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Tester si un autre utilisateur d'un domaine approuvé défini\n" -" par son SID satisfait à toute règle :\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Tester si un autre utilisateur d'un domaine approuvé défini par\n" -" son nom court satisfait à toute règle :\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" - -msgid "Unresolved rules in --rules" -msgstr "Règles non résolues dans « --rules »" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" -"Impossible d'effectuer une recherche sur les domaines approuvés sans avoir " -"au préalable configuré son propre domaine. Assurez-vous d'avoir au préalable " -"lancé « ipa-adtrust-install » sur le serveur" - -#, python-format -msgid "Access granted: %s" -msgstr "Accès autorisé : %s" - -msgid "" -"\n" -"Permissions\n" -msgstr "" -"\n" -"Permissions\n" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" -"\n" -"Une permission permet une délégation de droits finement nuancée. Elle est\n" -"une enveloppe lisible par le commun de Règles de contrôle d'accès 389-ds,\n" -"ou d'instruction (ACI).\n" -"Une permission donne le droit d'effectuer des tâches données comme ajouter\n" -"un utilisateur, modifier un groupe, etc.\n" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" -"\n" -"Une permission ne peut pas contenir d'autres permissions.\n" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" -"\n" -"* Une permission donne le droit de lire, écrire, ajouter, supprimer,\n" -" rechercher, ou comparer.\n" -"* Un privilège combine des permissions semblables (par exemple\n" -" toutes les permissions nécessaires pour ajouter un utilisateur).\n" -"* Un rôle garantit un ensemble de privilèges pour des utilisateurs, des " -"groupes, des hôtes ou des groupes d'hôtes.\n" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" -"\n" -"Une permission se compose de plusieurs parties :\n" -"\n" -"1. le nom de la permission.\n" -"2. la cible de la permission.\n" -"3. les droits garantis par la permission.\n" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" -"\n" -"Les droits définissent les opérations permises ; ce sont un ou plusieurs\n" -"des éléments suivants :\n" -"1. write - écrire un ou plusieurs attributs\n" -"2. read - lire un ou plusieurs attributs\n" -"3. search - rechercher un ou plusieurs attributs\n" -"4. compare - comparer un ou plusieurs attributs\n" -"5. add - ajouter une nouvelle entrée dans l'arbre\n" -"6. delete - supprimer une entrée existante\n" -"7. all - toutes les permissions sont garanties\n" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" -"\n" -"Notez la distinction entre attributs et entrées. Les permissions sont\n" -"indépendantes, donc la possibilité d'ajouter un utilisateur ne signifie\n" -"pas qu'il est possible de les modifier.\n" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" -"\n" -"Il y a un certain nombre de cibles autorisées :\n" -"1. sous-arbre : un DN ; la permission s'applique au sous-arbre sous ce DN\n" -"2. filtre de cibles : un filtre LDAP\n" -"3. cible : un DN avec possiblement des jokers, indique les entrées\n" -"auxquelles la permission s'applique\n" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" -"\n" -"En plus, il y a les options de commodité suivantes.\n" -"Activer une de ces options définit l'attribut correspondant.\n" -"1. type: un type d'objet (utilisateur, groupe, etc) ; définit le filtre du\n" -"sous-arbre et de la cible.\n" -"2. memberof : s'applique aux membres d'un groupe ; définit le filtre de la\n" -"cible.\n" -"3. targetgroup : permet la modification d'un groupe donné (comme ceux\n" -" de gestion de l'appartenance à un groupe); définit la cible.\n" - -msgid "" -"\n" -"Managed permissions\n" -msgstr "" -"\n" -"Permissions administrées\n" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" -"\n" -"Les permissions venant par défaut avec IPA sont dites « administrées ».\n" -"Un jeu d'attributs par défaut leur a été appliqué, mais l'administrateur\n" -"peut ajouter/supprimer des attributs individualisés à cet ensemble.\n" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" -"\n" -"Supprimer ou renommer une permission administrée, ou changer sa cible,\n" -"n'est pas autorisé.\n" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" -"\n" -" Ajouter une permission autorisant la création d'utilisateurs :\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" -"\n" -" Ajouter une permission autorisant de gérer l'appartenance à un groupe :\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" - -msgid "must be enclosed in parentheses" -msgstr "doit être mis entre parenthèses" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "« %s » n'est pas un type d'objet" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "« %s » n'est pas un type de permission autorisé" - -#, python-format -msgid "Deprecated; use %s" -msgstr "Abandonné ; utiliser %s" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" -"Une permission avec un marqueur inconnu %s ne peut pas être modifiée ou " -"supprimée" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "Une permission SYSTEM ne peut ni être modifiée, ni supprimée" - -#, python-format -msgid "Entry %s not found" -msgstr "Entrée %s introuvable" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "L'ACI de la permission %(name)s n'a pas été trouvée dans %(dn)s " - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" -"impossible de définir simultanément un filtre de cible totale et un filtre " -"de cible complémentaire" - -#, python-format -msgid "option was renamed; use %s" -msgstr "option renommée ; utiliser %s" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "Impossible d'utiliser %(old_name)s avec %(new_name)s" - -#, python-format -msgid "%s: group not found" -msgstr "%s : groupe introuvable" - -msgid "target and targetgroup are mutually exclusive" -msgstr "« target » et « targetgroup » s'excluent mutuellement" - -msgid "subtree and type are mutually exclusive" -msgstr "« subtree » et « type » s'excluent mutuellement" - -msgid "Bad search filter" -msgstr "Mauvais filtre de recherche" - -#, python-format -msgid "Entry %s does not exist" -msgstr "L'entrée %s n'existe pas" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" -"il doit y avoir au moins une définition d'entrée cible (ex. « target », " -"« targetfilter », « attrs »)" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "Permission « %(value)s » ajoutée" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "« attrs » et attributs inclus s'excluent mutuellement" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "Impossible d'enregistrer les ACI de permissions dans %s" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "Permission « %(value)s » supprimée" - -msgid "cannot delete managed permissions" -msgstr "impossible de supprimer des permissions administrées" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "ACI de la permission %s introuvable" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "Permission « %(value)s » modifiée" - -msgid "cannot rename managed permissions" -msgstr "impossible de renommer les permissions administrées" - -msgid "not modifiable on managed permissions" -msgstr "non modifiable sur les permissions administrées" - -msgid "only available on managed permissions" -msgstr "uniquement disponible sur les permissions administrées" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "« attrs » et attributs inclus/exclus s'excluent mutuellement" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" -"impossible de définir le type de liaison d'une permission assignée à un " -"privilège" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "%(count)d permission correspondant" -msgstr[1] "%(count)d permissions correspondant" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" -"impossible d'ajouter la permission « %(perm)s » avec le type de liaison " -"« %(bindtype)s » à un privilège" - -msgid "Privilege" -msgstr "Privilège" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "Privilège « %(value)s » ajouté" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "Privilège « %(value)s » supprimé" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "Privilège « %(value)s » supprimé" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)d privilège correspondant" -msgstr[1] "%(count)d privilèges correspondant" - -msgid "" -"\n" -"API Schema\n" -msgstr "" -"\n" -"Schéma de l'API\n" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" -"\n" -"Fournit des capacités d'introspection de l'API.\n" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" -"\n" -" Afficher les informations sur user-find :\n" -" ipa command-show user-find\n" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" -"\n" -" Trouver les arguments disponibles pour user-find :\n" -" ipa param-find user-find\n" - -msgid "Name" -msgstr "Nom" - -msgid "Documentation" -msgstr "Documentation" - -msgid "Exclude from" -msgstr "Exclure de" - -msgid "Include in" -msgstr "Inclure dans" - -msgid "Help topic" -msgstr "Sujet de l'aide" - -msgid "Version" -msgstr "Version" - -msgid "Parameters" -msgstr "Paramètres" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "Nom d'enregistrement" - -msgid "Display information about a command." -msgstr "Afficher des informations sur une commande." - -msgid "Search for commands." -msgstr "Rechercher des commandes." - -#, fuzzy -msgid "Return command defaults" -msgstr "Exécute les commandes" - -#, fuzzy, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "{role} : rôle introuvable" - -#, fuzzy -msgid "Display information about a class." -msgstr "Afficher les informations sur un hôte." - -#, fuzzy -msgid "Search for classes." -msgstr "Rechercher des rôles." - -msgid "Display information about a help topic." -msgstr "Afficher les informations sur un sujet de l'aide." - -msgid "Search for help topics." -msgstr "Rechercher des sujets de l'aide." - -msgid "Required" -msgstr "Requis" - -msgid "Multi-value" -msgstr "Multi-valué" - -msgid "Always ask" -msgstr "Toujours demander" - -msgid "CLI metavar" -msgstr "Metavariable CLI" - -msgid "CLI name" -msgstr "Nom CLI" - -msgid "Confirm (password)" -msgstr "Confirmer le mot de passe" - -msgid "Default" -msgstr "Par défaut" - -msgid "Default from" -msgstr "Valeur par défaut depuis" - -msgid "Label" -msgstr "Étiquette" - -msgid "Convert on server" -msgstr "Convertir sur le serveur" - -msgid "Option group" -msgstr "Groupe d'options" - -msgid "Sensitive" -msgstr "Sensible" - -#, fuzzy -msgid "Positional argument" -msgstr "Arguments positionnels" - -#, fuzzy, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(parent)s : %(oname)s introuvable" - -msgid "Display information about a command parameter." -msgstr "Afficher des informations sur un paramètre de commande." - -msgid "Search command parameters." -msgstr "Rechercher des paramètres de commandes." - -#, fuzzy, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(parent)s : %(oname)s introuvable" - -msgid "Display information about a command output." -msgstr "Afficher les informations sur une sortie de commande." - -msgid "Search for command outputs." -msgstr "Rechercher des sorties de commande." - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" -"\n" -"Relations d'approbation entre domaines\n" -"\n" -"Gestion des relations d'approbation entre les domaines IPA et Active " -"Directory.\n" -"\n" -"Pour permettre aux utilisateurs d'un domaine distant l'accès aux ressources\n" -"d'un domaine IPA, des relations d'approbation doivent être établies.\n" -"Actuellement IPA ne prend en charge que les relations d'approbation entre " -"des\n" -"domaines IPA et Active Directory sous le contrôle de Windows Server 2008 ou\n" -"ultérieur, avec le niveau fonctionnel 2008 ou ultérieur.\n" -"\n" -"Veuillez noter que DNS doit être correctement configuré à la fois côté\n" -"domaine IPA et côté Active Directory pour une découverte mutuelle. La\n" -"relation de confiance repose sur la capacité à repérer des ressources\n" -"spéciales dans l'autre domaine via des enregistrements DNS.\n" -"\n" -"Exemples :\n" -"\n" -"1. Établir des relations d'approbation croisées entre royaumes avec Active\n" -"Directory avec les autorisations d'accès d'un administrateur AD :\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. Lister toutes les relations d'approbation existantes :\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Voir les détails d'une relation de confiance donnée :\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Supprimer une relation de confiance existante :\n" -"\n" -" ipa trust-del \n" -"\n" -"Une fois la relation de confiance établie, les utilisateurs distants " -"doivent\n" -"être mis en relation avec des groupes POSIX locaux pour utiliser réellement\n" -"des ressources IPA. La relation doit se faire via l'appartenance à un " -"groupe\n" -"non-POSIX externe, puis ce groupe doit être intégré dans l'un des groupes\n" -"POSIX locaux.\n" -"\n" -"Exemples :\n" -"\n" -"1. Créer un groupe pour la mise en relation avec le domaine approuvé\n" -" « admins » et leur groupe POSIX local :\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Ajouter un identifiant de sécurité de de Domain Admins au\n" -" groupe « ad_admins_external » :\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Autoriser des membres du groupe « ad_admins_external » à s'associer\n" -" avec le groupe POSIX ad_admins :\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Lister les membres externes du groupe externe « ad_admins_external »\n" -" pour voir leur SID :\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"CONFIGURATION D'UNE CONFIANCE GLOBALE\n" -"\n" -"Une fois le sous-paquet « IPA AD trust » installé et « ipa-adtrust-" -"install »\n" -"exécuté, une configuration de domaine local (SID, GUID, nom NetBIOS) est\n" -"créée. Ces identifiants sont alors utilisés lors de communications avec un\n" -"domaine approuvé de type particulier.\n" -"\n" -"1. Afficher la configuration de confiance globale pour les types de\n" -" confiance Active Directory :\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modifier la configuration globale de toutes les confiances de type\n" -" Active Directory et définir un groupe principal de recours (le GID du\n" -" groupe principal de recours est utilisé comme GID d'utilisateur " -"principal\n" -" si l'utilisateur s'authentifiant auprès du domaine IPA n'a pas d'autre\n" -" GID principal déjà défini) :\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Revenir au groupe caché par défaut comme groupe de recours principal\n" -" (tout groupe de la classe objet « posixGroup » est autorisé) :\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" -" De manière alternative, les serveurs suivants sont capables d'exécuter " -"cette commande : %(masters)s" - -msgid "AD Trust setup" -msgstr "Configuration de la confiance AD" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" -"Impossible d'effectuer la commande sélectionnée sans installation de " -"Samba 4. Assurez-vous de bien avoir installé sur le serveur le paquet IPA " -"« server-trust-ad »." - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" -"Impossible d'effectuer la commande sélectionnée sans configuration de Samba " -"4. Assurez-vous de bien avoir configuré ce serveur avec la commande « ipa-" -"adtrust-install »." - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" -"Échec de la récupération des domaines depuis la forêt approuvée. Voir les " -"informations détaillées dans le journal d'erreur." - -msgid "trust" -msgstr "confiance" - -msgid "trusts" -msgstr "confiances" - -msgid "Trusts" -msgstr "Confiances" - -msgid "Trust" -msgstr "Confiance" - -#, fuzzy -msgid "SID blocklist incoming" -msgstr "Entrant dans liste noire de SID" - -#, fuzzy -msgid "SID blocklist outgoing" -msgstr "Sortant de liste noire de SID" - -msgid "Trust direction" -msgstr "Sens de la confiance" - -msgid "Trust type" -msgstr "Type de confiance" - -msgid "Trust status" -msgstr "État de la confiance" - -msgid "UPN suffixes" -msgstr "Suffixes UPN" - -#, fuzzy, python-brace-format -msgid "invalid SID: {SID}" -msgstr "Identifiant de profil invalide" - -#, fuzzy -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" -"\n" -"Ajout d'une nouvelle relation de confiance.\n" -"\n" -"Cette commande établit une relation de confiance avec un autre domaine\n" -"qui ainsi devient « de confiance ». En conséquence, des utilisateurs du\n" -"domaine approuvé peuvent avoir accès aux ressources de ce domaine.\n" -"\n" -"Actuellement, seules les relations d'approbation avec les domaines\n" -"Active Directory sont prises en charge.\n" -"\n" -"Cette commande peut être lancée plusieurs fois en toute sécurité à\n" -"l'encontre du même domaine, elle modifiera les références de la relation de\n" -"confiance des deux côtés.\n" -" " - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "Relation d'approbation externe" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" -"Établit une relation d'approbation externe vers un domaine dans une autre " -"forêt. La relation n'est pas transitive au delà du domaine." - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "Confiance Active Directory ajoutée pour le royaume « %(value)s »" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Rétablissement de la confiance pour le domaine « %(value)s »" - -msgid "missing base_id" -msgstr "« base_id » manquant" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" -"« pysss_murmur » non disponible sur le serveur et aucun « base-id » fourni." - -msgid "trust type" -msgstr "type de confiance" - -msgid "only \"ad\" is supported" -msgstr "seul « ad » est pris en charge" - -msgid "domain" -msgstr "domaine" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" -"Impossible d'établir une relation d'approbation vers un AD déployé dans le " -"même domaine que IPA. Une telle configuration ne peut être prise en charge." - -msgid "Realm-domain mismatch" -msgstr "Incohérence domaine-royaume" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" -"Pour établir la confiance avec Active Directory, le nom de domaine et le nom " -"de royaume du serveur IPA doivent correspondre" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" -"Le domaine approuvé %(domain)s est inclus parmi les royaumes de domaines " -"IPA. Il doit être retiré de manière préalable à l'établissement de la " -"relation d'approbation. Cf. la commande « ipa realmdomains-mod --del-" -"domain »." - -msgid "Trusted domain and administrator account use different realms" -msgstr "" -"Le domaine approuvé et le compte administrateur utilisent des domaines " -"différents" - -msgid "Realm administrator password should be specified" -msgstr "Le mot de passe de l'administrateur du domaine doit être indiqué" - -msgid "id range type" -msgstr "type de plage d'id" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" -"Seules les valeurs « ipa-ad-trust » et « ipa-ad-trust-posix » sont " -"autorisées pour « --range-type » lors de l'ajout d'une relation de confiance " -"AD." - -msgid "id range" -msgstr "plage id" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" -"Une plage d'identifiants existe déjà pour cette relation de confiance. Vous " -"devez soit supprimer l'ancienne plage, soit exclure les options « --base-" -"id » ou « --range-size » de la commande." - -msgid "range exists" -msgstr "la plage existe" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" -"Une plage d'ID avec le même nom, mais pour un SID de domaine différent " -"existe déjà. La plage d'ID pour le nouveau domaine approuvé doit être créée " -"manuellement." - -msgid "range type change" -msgstr "modifier le type de plage" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" -"La plage ID existe déjà pour ce domaine approuvé, mais est d'un type " -"différent. Vous devez soit supprimer l'ancienne plage manuellement, soit ne " -"pas forcer le type via l'option « --range-type »." - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" -"La politique de redirection est définie pour lui dans le DNS d'IPA, peut-" -"être le redirecteur pointe-t'il vers un hôte incorrect ?" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "Impossible de vérifier les permissions en écriture vers AD" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "Arguments insuffisants pour établir la relation de confiance" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "Confiance « %(value)s » supprimée" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" -"\n" -" Modifier la confiance (pour utilisation future).\n" -"\n" -" Actuellement seule l'option par défaut pour modifier les attributs LDAP\n" -" est disponible. D'autres options particulières seront ajoutées\n" -" dans les versions à venir.\n" -" " - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" -"Relation de confiance « %(value)s » modifiée (la modification sera effective " -"dans 60 secondes)" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "%(count)d confiance correspondante" -msgstr[1] "%(count)d confiances correspondantes" - -msgid "trust configuration" -msgstr "configuration des relations d'approbation" - -msgid "Global Trust Configuration" -msgstr "Configuration globale des relations d'approbation" - -msgid "IPA AD trust agents" -msgstr "Agents IPA de relation d'approbation AD" - -msgid "IPA servers configured as AD trust agents" -msgstr "Serveurs IPA configurés comme agents de relation d'approbation AD" - -msgid "IPA AD trust controllers" -msgstr "Contrôleurs IPA de relation d'approbation AD" - -msgid "IPA servers configured as AD trust controllers" -msgstr "Serveurs IPA configurés comme contrôleurs de relation d'approbation AD" - -msgid "unsupported trust type" -msgstr "type de relation de confiance non pris en charge" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "Configuration de la relation de confiance « %(value)s » modifiée." - -msgid "SID" -msgstr "SID" - -msgid "sidgen_was_run" -msgstr "« sidgen_was_run »" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" -"Cette commande s'appuie sur l'existence du groupe « editors », mais ce " -"groupe n'a pas été trouvé." - -msgid "trust domain" -msgstr "domaine approuvé" - -msgid "trust domains" -msgstr "domaines approuvés" - -msgid "Trusted domains" -msgstr "domaines approuvés" - -msgid "Trusted domain" -msgstr "domaine approuvé" - -msgid "Domain enabled" -msgstr "Domaine activé" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "Informations sur le domaine approuvé « %(value)s » supprimées" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" -"impossible de supprimer le domaine racine de la relation de confiance, " -"utiliser la commande « trust-del » pour supprimer la relation de confiance" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" -"Liste des domaines approuvés rafraîchie avec succès. Utiliser la commande " -"« trustdomain-find » pour les énumérer." - -#, fuzzy -msgid "Configure this server as a trust agent." -msgstr "Serveurs IPA configurés comme agents de relation d'approbation AD" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, fuzzy -msgid "not allowed to remotely add agent" -msgstr "modification des entrées d'un utilisateur interdite" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "Activation du domaine approuvé « %(value)s »" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" -"Le domaine racine de la relation de confiance est toujours activé pour la " -"confiance existante" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "domaine approuvé « %(value)s » désactivé" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" -"impossible de désactiver le domaine racine de la relation de confiance, " -"utiliser la commande « trust-del » pour supprimer la relation de confiance " -"elle-même" - -msgid "" -"\n" -"Vaults\n" -msgstr "" -"\n" -"Coffres-forts (vaults)\n" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" -"\n" -"Gestion des coffres-forts.\n" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" -"\n" -"Il existe trois types de coffres-forts en fonction de leur propriété :\n" -"* coffre utilisateur/privé\n" -"* coffre de service\n" -"* coffre-fort partagé (shared)\n" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" -"\n" -"Les coffres-forts utilisateurs sont des coffres appartenant à un " -"utilisateur\n" -"en particulier. Les coffres privés appartiennent à l'utilisateur courant. " -"Les\n" -"coffres de services appartiennent à un service. Les coffres partagés \n" -"appartiennent à l'administrateur, mais peuvent être utilisés par d'autres\n" -"utilisateurs ou services.\n" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" -"\n" -"Il existe trois types de coffres-forts en fonction de leur mécanisme\n" -"de sécurité :\n" -"* coffre-fort standard\n" -"* coffre-fort symétrique\n" -"* coffre-fort asymétrique\n" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" -"\n" -"Le coffre-fort standard utilise un mécanisme sécurisé pour le\n" -"transport et le stockage du secret. Le secret ne peut être récupéré\n" -"que par les utilisateurs ayant accès au coffre.\n" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" -"\n" -"Le coffre-fort symétrique est similaire au coffre standard, mais il \n" -"pré-chiffre le secret à l'aide d'un mot de passe avant son transport.\n" -"Le secret ne peut être récupéré qu'à l'aide du même mot de passe.\n" -"\n" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" -"\n" -"Le coffre-fort asymétrique est similaire au coffre standard, mais il \n" -"pré-chiffre le secret à l'aide d'une clé publique avant son transport.\n" -"Le secret ne peut être récupéré qu'avec la clé privée correspondante.\n" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Énumérer les coffres-forts pour un service :\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" -"\n" -" Ajouter un coffre-fort standard :\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" -"\n" -" Ajouter un coffre-fort symétrique :\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file mot_de_passe.txt\n" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" -"\n" -" Ajouter un coffre-fort symétrique :\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --public-key-file public.pem\n" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Afficher un coffre-fort :\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" -"\n" -" Modifier la description d'un coffre-fort :\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" -"\n" -" Modifier le type d'un coffre-fort :\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [ancient mot de passe/clé privée]\n" -" [nouveau mot de passe/clé publique]\n" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" -"\n" -" Modifier un coffre-fort symétrique :\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" -"\n" -" Modifier les clés d'un coffre-fort asymétrique :\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Supprimer un coffre-fort :\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" -"\n" -" Afficher la configuration des coffres-forts :\n" -" ipa vaultconfig-show\n" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" -"\n" -" Archiver des données dans un coffre-fort standard :\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" -"\n" -" Archiver des données dans un coffre-fort symétrique :\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file mot_de_passe.txt\n" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" -"\n" -" Archiver des données dans un coffre-fort asymétrique :\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" -"\n" -" Récupérer des données d'un coffre-fort standard :\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" -"\n" -" Récupérer des données d'un coffre-fort symétrique :\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file mot_de_passe.txt\n" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" -"\n" -" Récupérer des données d'un coffre-fort asymétrique :\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file clé_privée.pem\n" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Ajouter des propriétaires à un coffre-fort :\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services " -"]\n" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Supprimer des propriétaires d'un coffre-fort :\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services " -"]\n" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Ajouter des membres à un coffre-fort :\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services " -"]\n" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Supprimer des membres d'un coffre-fort :\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services " -"]\n" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" -"\n" -" Objet conteneur de coffre-fort.\n" -" " - -msgid "vaultcontainer" -msgstr "vaultcontainer" - -msgid "vaultcontainers" -msgstr "vaultcontainers" - -msgid "Vault Containers" -msgstr "Conteneurs de coffres-forts" - -msgid "Vault Container" -msgstr "Conteneur de coffres-forts" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" -"Les options de service, d'utilisateur ou de coffre-fort partagé ne peuvent " -"être utilisées simultanément" - -msgid "Host is not supported" -msgstr "L'hôte n'est pas pris en charge" - -msgid "KRA service is not enabled" -msgstr "Le service KRA est désactivé" - -msgid "Deleted vault container" -msgstr "Conteneur de coffre-fort supprimé" - -#, python-format -msgid "owner %s" -msgstr "propriétaire %s" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" -"\n" -" Objet coffre-fort.\n" -" " - -msgid "vault" -msgstr "coffre-fort" - -msgid "vaults" -msgstr "coffres-forts" - -msgid "Vaults" -msgstr "Coffres-forts" - -msgid "Vault" -msgstr "Coffre-fort" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" -"Les options de service, de partage et d'utilisateur ne peuvent être " -"utilisées simultanément." - -#, fuzzy -msgid "Add a vault." -msgstr "Modifier un coffre-fort." - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "Ajout de « %(value)s » au coffre" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "Valeur « %(value)s » supprimée du coffre" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "%(count)d coffre-fort correspondant" -msgstr[1] "%(count)d coffre-forts correspondants" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" -"Les options de service(s), d'utilisateur(s) ou de coffres-forts partagé(s) " -"ne peuvent être utilisées simultanément" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "Coffre-fort « %(value)s » modifié" - -msgid "Vault configuration" -msgstr "Configuration du coffre-fort" - -msgid "IPA KRA servers" -msgstr "Serveurs KRA IPA" - -msgid "IPA servers configured as key recovery agents" -msgstr "Serveurs IPA configurés comme agents de recouvrement de clés" - -#, fuzzy -msgid "Key wrapping algorithm" -msgstr "Algorithme de hachage du jeton" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "Données archivées dans le coffre-fort « %(value)s »" - -#, fuzzy -msgid "Retrieve data from a vault." -msgstr "Récupérer une donnée depuis un coffre-fort" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "Donnée récupérée depuis le coffre-fort « %(value)s »" - -msgid "No archived data." -msgstr "Aucune donnée archivée." - -#, fuzzy -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" -"Vérifier si l'un des serveurs a activé le service autorité de certification." - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" -"\n" -"Utilisateur de base\n" -"\n" -"Ceci contient les définitions communes pour les utilisateurs et utilisateurs " -"en attente\n" - -msgid "must be TRUE or FALSE" -msgstr "doit être « TRUE » ou « FALSE »" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -#, fuzzy -msgid "Principal alias" -msgstr "Nom principal" - -#, fuzzy -msgid "User password expiration" -msgstr "Expiration de mot de passe" - -msgid "SSH public key fingerprint" -msgstr "Empreinte de clé publique SSH" - -#, fuzzy -#| msgid "Vault configuration" -msgid "External IdP configuration" -msgstr "Configuration du coffre-fort" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "Certificat de l'utilisateur encodé en Base-64" - -#, fuzzy -msgid "Certificate mapping data" -msgstr "Donnée associée au certificat" - -msgid "SMB logon script path" -msgstr "" - -#, fuzzy -msgid "SMB profile path" -msgstr "%i profil ajouté." - -#, fuzzy -msgid "SMB Home Directory" -msgstr "Répertoire personnel" - -#, fuzzy -msgid "SMB Home Directory Drive" -msgstr "Base du répertoire utilisateur" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "format d'e-mail invalide : %(email)s" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "responsable %(manager)s introuvable" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "doit contenir au plus %(len)d caractères" - -msgid "Issuer" -msgstr "Émetteur" - -#, fuzzy -msgid "Issuer of the certificate" -msgstr "fichier où stocker le certificat" - -msgid "Subject" -msgstr "Sujet" - -#, fuzzy -msgid "Subject of the certificate" -msgstr "Fichier dans lequel stocker le certificat." - -#, fuzzy -msgid "cannot have an empty subject" -msgstr "ne peut pas être vide" - -#, fuzzy -msgid "cannot specify both subject/issuer and certificate" -msgstr "impossible d'indiquer à la fois certificat brut et un nom de fichier" - -#, fuzzy -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "impossible d'indiquer à la fois certificat brut et un nom de fichier" - -#, fuzzy -msgid "Add one or more certificate mappings to the user entry." -msgstr "Ajouter un ou plusieurs certificats à l'entrée utilisateur" - -#, fuzzy, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "Certificats ajoutés à l'utilisateur « %(value)s »" - -#, fuzzy -msgid "Remove one or more certificate mappings from the user entry." -msgstr "Supprimer les certificats de l'entrée de l'utilisateur" - -#, fuzzy, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "Certificats supprimés de l'utilisateur « %(value)s »" - -#, fuzzy -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" -"\n" -"Gestion des règles de LCA de l'AC.\n" -"\n" -"Ce grffon est utilisé pour définir les règles gouvernant quels principaux \n" -"sont autorisés à se voir attribuer des certificats à l'aide d'un profil\n" -"donné de certificat.\n" -"\n" -"SYNTAXE D'IDENTIFIANT DE PROFIL :\n" -"\n" -"Un identifiant de profil est une chaîne sans espace ni ponctuation débutant " -"par\n" -"une lettre et suivie d'une séquence de lettres, chiffres, ou caractère " -"souligné (\"_\").\n" -"\n" -"EXEMPLES :\n" -"\n" -" Créer une LCA d'AC « test » autorisant tous les utilisateurs à accéder \n" -" au profil « UserCert » :\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Afficher les propriétés d'une LCA d'AC nommée :\n" -" ipa caacl-show test\n" -"\n" -" Créer une LCA d'AC autorisant l'utilisatrice « alice » à utiliser le " -"profile « DNP3 » :\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Désactiver une LCA d'AC :\n" -" ipa caacl-disable test\n" -"\n" -" Supprimer une LCA d'AC :\n" -" ipa caacl-del test\n" - -msgid "CA ACL" -msgstr "LCA de l'AC" - -msgid "CA ACLs" -msgstr "LCA de l'AC" - -msgid "CA category" -msgstr "Catégorie d'AC" - -msgid "CA category the ACL applies to" -msgstr "Catégorie d'AC à laquelle l'ACL s'applique" - -msgid "CAs" -msgstr "AC" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "LCA d'AC « %(value)s » créée" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "LCA d'AC « %(value)s » supprimée" - -msgid "default CA ACL can be only disabled" -msgstr "La LCA d'AC par défaut ne peut qu'être désactivée" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "LCA d'AC « %(value)s » modifiée" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" -"une catégorie d'AC ne peut pas être définie à « all » tant qu'il reste des " -"AC autorisées" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" -"la catégorie de profil ne peut être positionnée à 'all' tant qu'il existe " -"des profils autorisés" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" -"une catégorie de services ne peut pas être définie à « all » tant qu'il " -"reste des services autorisés" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "%(count)d LCA d'AC correspondante" -msgstr[1] "%(count)d LCA d'AC correspondantes" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "LCA d'AC « %(value)s » activée" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "LCA d'AC « %(value)s » désactivée" - -#, python-format -msgid "%i user or group added." -msgstr "%i utilisateur ou groupe ajouté." - -#, python-format -msgid "%i users or groups added." -msgstr "%i utilisateurs ou groupes ajoutés." - -msgid "users cannot be added when user category='all'" -msgstr "" -"des utilisateurs ne peuvent pas être ajoutés quand la catégorie de " -"l'utilisateur est « all »" - -#, python-format -msgid "%i user or group removed." -msgstr "%i utilisateur ou groupe supprimé." - -#, python-format -msgid "%i users or groups removed." -msgstr "%i utilisateurs ou groupes supprimés." - -#, python-format -msgid "%i host or hostgroup added." -msgstr "%i hôte ou groupe d'hôtes ajouté." - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "%i hôtes ou groupes d'hôtes ajoutés." - -msgid "hosts cannot be added when host category='all'" -msgstr "" -"des hôtes ne peuvent pas être ajoutés quand la catégorie de l'hôte est " -"« all »" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "%i hôte ou groupe d'hôtes supprimé." - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "%i hôtes ou groupes d'hôtes supprimés." - -#, python-format -msgid "%i service added." -msgstr "%i service ajouté." - -#, python-format -msgid "%i services added." -msgstr "%i services ajoutés." - -msgid "services cannot be added when service category='all'" -msgstr "" -"aucun service ne peut être ajouté quand la catégorie de services est « all »" - -#, python-format -msgid "%i service removed." -msgstr "%i service supprimé." - -#, python-format -msgid "%i services removed." -msgstr "%i services supprimés." - -#, python-format -msgid "%i profile added." -msgstr "%i profil ajouté." - -#, python-format -msgid "%i profiles added." -msgstr "%i profils ajoutés." - -msgid "profiles cannot be added when profile category='all'" -msgstr "" -"des profils ne peuvent pas être ajoutés quand la catégorie de profil est " -"« all »" - -#, python-format -msgid "%i profile removed." -msgstr "%i profil supprimé." - -#, python-format -msgid "%i profiles removed." -msgstr "%i profils supprimés." - -msgid "Add CAs to a CA ACL." -msgstr "Ajouter des AC à une LCA d'AC" - -#, python-format -msgid "%i CA added." -msgstr "%i AC ajoutée." - -#, python-format -msgid "%i CAs added." -msgstr "%i AC ajoutées." - -msgid "CAs cannot be added when CA category='all'" -msgstr "" -"des AC ne peuvent pas être ajoutées quand la catégorie de l'AC est « all »" - -msgid "Remove CAs from a CA ACL." -msgstr "Supprimer des AC d'une LCA d'AC" - -#, python-format -msgid "%i CA removed." -msgstr "%i AC supprimée." - -#, python-format -msgid "%i CAs removed." -msgstr "%i AC supprimées." - -#, fuzzy -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "Autorité de certification" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" -"\n" -" Afficher la configuration des coffres-forts :\n" -" ipa vaultconfig-show\n" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" -"Afficher les informations au sujet d'une règle de délégation de service." - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -#, fuzzy -msgid "Certificate Identity Mapping configuration options" -msgstr "Modifier les options de configuration." - -#, fuzzy -msgid "Certificate Identity Mapping Global Configuration" -msgstr "Modifier la configuration d'un profil de certificat." - -#, fuzzy -msgid "Prompt for the username" -msgstr "Invite de définition du mot de passe utilisateur" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -#, fuzzy -msgid "Modify Certificate Identity Mapping configuration." -msgstr "Modifier la configuration d'un profil de certificat." - -#, fuzzy -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "Afficher la configuration actuelle." - -#, fuzzy -msgid "Certificate Identity Mapping Rules" -msgstr "Autorités de certification" - -#, fuzzy -msgid "Certificate Identity Mapping Rule" -msgstr "Type de certificat" - -#, fuzzy -msgid "Certificate Identity Mapping Rule name" -msgstr "Les profils de certificats ne peuvent être renommés" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -#, fuzzy -msgid "Rule used to map the certificate with a user entry" -msgstr "Supprimer les certificats de l'entrée de l'utilisateur" - -#, fuzzy -msgid "Matching rule" -msgstr "Type correspondant" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -#, fuzzy -msgid "Priority of the rule (higher number means lower priority" -msgstr "Priorité de la politique (une valeur élevé indique une priorité basse)" - -#, fuzzy -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "Créer une nouvelle règle de délégation de service" - -#, fuzzy, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Certificats ajoutés à l'utilisateur « %(value)s »" - -#, fuzzy -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "Modifier la configuration d'un profil de certificat." - -#, fuzzy, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Profil de certificat « %(value)s » modifié" - -#, fuzzy -msgid "Search for Certificate Identity Mapping Rules." -msgstr "Rechercher des profils de certificats." - -#, fuzzy, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "%(count)d règle de délégation de service correspondante" -msgstr[1] "%(count)d règles de délégation de service correspondantes" - -#, fuzzy -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" -"Afficher les informations au sujet d'une règle de délégation de service." - -#, fuzzy -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "Supprimer un profil de certificat." - -#, fuzzy, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Cible de délégation de service « %(value)s » supprimée" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Certificats ajoutés à l'utilisateur « %(value)s »" - -#, fuzzy -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "Supprimer un profil de certificat." - -#, fuzzy, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Profil de certificat « %(value)s » modifié" - -#, fuzzy -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" -"Échec de la récupération des domaines depuis la forêt approuvée. Voir les " -"informations détaillées dans le journal d'erreur." - -#, fuzzy -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" -"Échec de la récupération des domaines depuis la forêt approuvée. Voir les " -"informations détaillées dans le journal d'erreur." - -#, fuzzy -msgid "User logins" -msgstr "Identifiant de connexion" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "%(count)d utilisateur correspondant" -msgstr[1] "%(count)d utilisateurs correspondant" - -#, fuzzy -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" -"\n" -"Configuration du serveur\n" -"\n" -"Gérer les valeurs par défaut utilisées par IPA ainsi que certains de ses\n" -"paramètres d'ajustement.\n" -"\n" -"NOTES :\n" -"\n" -"La valeur de notification du mot de passe (--pwdexpnotify) est stockée ici\n" -"en vue de sa réplication. Elle n'est pas actuellement utilisée pour " -"notifier\n" -"par avance aux utilisateurs l'expiration de leur mot de passe.\n" -"\n" -"Certains attributs sont en lecture seule, fournis à titre d'information ;\n" -"ils comprennent :\n" -"\n" -"* la base sujet de certificat : la base de sujet de certificat configuré,\n" -" ex. O=EXAMPLE.COM, configurable uniquement à l'installation.\n" -"* les fonctions du greffon mots de passe : définit les hachages " -"additionnels\n" -" qu'un mot de passe va générer (d'autres conditions peuvent s'appliquer).\n" -"\n" -"En fixant la liste ordonnée pour le mappage des utilisateurs SELinux, vous\n" -"devez mettre entre guillemets les valeurs pour éviter leur interprétation.\n" -"\n" -"EXEMPLES :\n" -"\n" -" Afficher la configuration de base du serveur :\n" -" ipa config-show\n" -"\n" -" Afficher toutes les options de configuration :\n" -" ipa config-show --all\n" -"\n" -" Modifier la longueur maximale d'un nom d'utilisateur à 99 caractères :\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Augmenter délais et limites de taille des recherches sur le serveur IPA :\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Définir le domaine pour les courriels de l'utilisateur par défaut :\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Activer le mode migration pour que « ipa migrate-ds » soit opérationelle :\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Définir l'ordre de la mappe des utilisateurs SELinux :\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" - -#, fuzzy -msgid "must be at least 10" -msgstr "doit être supérieur ou égal à %(minvalue)d" - -msgid "configuration options" -msgstr "options de configuration" - -msgid "Configuration" -msgstr "Configuration" - -#, fuzzy -msgid "Maximum hostname length" -msgstr "Longueur maximale du nom d'utilisateur" - -msgid "Enable adding subids to new users" -msgstr "" - -msgid "IPA masters" -msgstr "Maîtres IPA" - -msgid "List of all IPA masters" -msgstr "Liste des maîtres IPA" - -#, fuzzy -msgid "Hidden IPA masters" -msgstr "Maîtres IPA" - -#, fuzzy -msgid "List of all hidden IPA masters" -msgstr "Liste des maîtres IPA" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "Serveurs d'AC IPA" - -msgid "IPA servers configured as certificate authority" -msgstr "Serveurs IPA configurés comme autorité de certification" - -#, fuzzy -msgid "Hidden IPA CA servers" -msgstr "Serveurs d'AC IPA" - -#, fuzzy -msgid "Hidden IPA servers configured as certificate authority" -msgstr "Serveurs IPA configurés comme autorité de certification" - -msgid "IPA CA renewal master" -msgstr "Maître de renouvellement d'AC IPA" - -msgid "Renewal master for IPA certificate authority" -msgstr "Maître en charge du renouvellement de l'autorité de certification" - -#, fuzzy -msgid "IPA servers configured as key recovery agent" -msgstr "Serveurs IPA configurés comme agents de recouvrement de clés" - -#, fuzzy -msgid "Hidden IPA KRA servers" -msgstr "Serveurs KRA IPA" - -#, fuzzy -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "Serveurs IPA configurés comme agents de recouvrement de clés" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -msgid "IPA DNS servers" -msgstr "Serveurs DNS IPA" - -#, fuzzy -msgid "IPA servers configured as domain name server" -msgstr "Serveur IPA configuré comme maître des clés DNSSec" - -#, fuzzy -msgid "Hidden IPA DNS servers" -msgstr "Serveurs DNS IPA" - -#, fuzzy -msgid "Hidden IPA servers configured as domain name server" -msgstr "Serveurs IPA configurés comme agents de recouvrement de clés" - -msgid "IPA DNSSec key master" -msgstr "Maître des clés DNSSec IPA" - -#, fuzzy -msgid "DNSec key master" -msgstr "Maître des clés DNSSec IPA" - -#, fuzzy -msgid "Setup SID configuration" -msgstr "configuration des relations d'approbation" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -#, fuzzy -msgid "Add SIDs" -msgstr "Ajouter une nouvelle vue d'identifiants" - -msgid "Add SIDs for existing users and groups" -msgstr "" - -#, fuzzy -msgid "NetBIOS name of the IPA domain" -msgstr "Nom du domaine approuvé" - -#, fuzzy -msgid "Empty domain is not allowed" -msgstr "les options ne sont pas autorisées" - -#, fuzzy, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "nom de domaine invalide : %s" - -#, fuzzy, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "Informations sur le domaine approuvé « %(value)s » supprimées" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -#, fuzzy -msgid "not allowed to enable SID generation" -msgstr "non autorisé à effectuer l'opération : %s" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -#, fuzzy -msgid "Failed to call DBus" -msgstr "Échec lors de l'ajout" - -#, fuzzy -msgid "Configuration of SID failed. See details in the error log" -msgstr "" -"Échec de la récupération des domaines depuis la forêt approuvée. Voir les " -"informations détaillées dans le journal d'erreur." - -msgid "The group doesn't exist" -msgstr "Le groupe n'existe pas" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "attribut « %s » interdit" - -msgid "May not be empty" -msgstr "Ne peut pas être vide" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "L'attribut par défaut %(attr)s de %(obj)s n'est pas autorisé !" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "Est attendue une liste des utilisateurs SELinux, délimités par des $" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "L'utilisateur SELinux « %(user)s » n'est pas valide : %(error)s" - -msgid "SELinux user map default user not in order list" -msgstr "" -"L'utilisateur par défaut de la mappe utilisateur SELinux n'est pas dans la " -"liste d'ordre" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" -"\n" -"Domain Name System (DNS)\n" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" -"\n" -"Gérer la zone DNS et les enregistrements de ressources.\n" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" -"\n" -"TYPES DE ZONE PRIS EN CHARGE\n" -"\n" -" * Zone maître (dnszone-*), contient les données faisant autorité.\n" -" * Zone redirigée (dnsforwardzone-*), qui transfère les requêtes aux " -"redirecteurs\n" -" configurés (un ensemble de serveurs DNS).\n" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" -"\n" -"UTILISATION d'OPTIONS STRUCTURÉES PAR TYPE\n" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" -"\n" -"Dans beaucoup de types RR de DNS, les données DNS mises dans un serveur " -"LDAP\n" -"ne sont pas qu'un scalaire, ex. adresse IP ou nom de domaine, mais une\n" -"structure de données parfois complexe. Un bon exemple est l'enregistrement\n" -"LOC [RFC1876] constitué de nombre de parties obligatoires ou optionnelles\n" -"(degrés-minutes-secondes de latitude et longitude, altitude ou précision).\n" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" -"\n" -"Il peut être difficile de manier de tels enregistrements DNS sans erreurs " -"et\n" -"sans entrer de valeur invalide. Le module DNS fournit une abstraction pour\n" -"ces enregistrements bruts afin de manier chaque type RR avec des options\n" -"données. Pour tout type RR pris en charge, le module DNS fournit une option\n" -"standard pour manier l'enregistrement brut avec le format ---rec,\n" -"ex. --mx-rec, et des options spéciales pour chaque élément de structure RR\n" -"avec le format ---, ex. --mx-preference ou --mx-" -"exchanger.\n" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" -"\n" -"À l'ajout d'un enregistrement, on peut utiliser des options RR spécifiques\n" -"ou standard pour une valeur brute, mais elles ne doivent pas être combinées\n" -"dans une même opération. En modifiant une entrée existante, des options RR\n" -"spécifiques peuvent s'utiliser pour modifier une partie d'un enregistrement\n" -"DNS où l'option standard est utilisée pour indiquer la valeur modifiée.\n" -"Cet exemple démontre une modification de préférence d'enregistrement MX de\n" -"0 à 1 dans un enregistrement sans modifier l'échangeur :\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" -"\n" -"\n" -"EXEMPLES :\n" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" -"\n" -" Ajouter une nouvelle zone :\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" -"\n" -" Ajouter une permission système pour une délégation de privilège par zone :\n" -" ipa dnszone-add-permission example.com\n" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" -"\n" -" Modifier la zone pour permettre des mises à jour dynamiques des propres\n" -" enregistrements des hôtes dans le royaume EXAMPLE.COM :\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" -"\n" -" C'est l'équivalent de :\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" -"\n" -" Modifier la zone pour permettre des transferts de zone pour le réseau local " -"uniquement :\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" -"\n" -" Ajouter une nouvelle zone inverse spécifiée par adresse IP de réseau :\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" -"\n" -" Ajouter un second serveur de noms pour « example.com » :\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" -"\n" -" Ajouter un serveur courriel pour « example.com » :\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" -"\n" -" Ajouter un autre enregistrement avec des options propres à MX :\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" -"\n" -" Ajouter un autre enregistrement en mode interactif (lancé si dnsrecord-" -"add,\n" -" dnsrecord-mod, ou dnsrecord-del sont exécutés sans options) :\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" -"\n" -" Supprimer le serveur de noms précédemment ajouté à « example.com » :\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" -"\n" -" Ajouter un enregistrement LOC pour « example.com » :\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" -"\n" -" Ajouter un nouvel enregistrement A à www.example.com. Créer son inverse\n" -" dans la zone inverse appropriée. Dans ce cas, un enregistrement PTR « 2 »\n" -" pointant sur www.example.com sera créé dans la zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" -"\n" -" Ajoutez un nouvel enregistrement PTR pour www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" -"\n" -" Ajouter de nouveaux enregistrements SRV pour serveurs LDAP. 3 requêtes\n" -" sur 4 iront vers fast.example.com, unes sur 4 vers slow.example.com. Si ni\n" -" l'un ni l'autre, n'est disponible, basculer sur backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" -"\n" -" On peut utiliser le mode interactif pour faciliter les modifications :\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" -"\n" -" Après cette modification, 3 requêtes sur 5 iront vers fast.example.com\n" -" et 2 sur 5 vers slow.example.com.\n" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" -"\n" -" Voici un exemple du mode interactif pour la commande dnsrecord-del :\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" -"\n" -" Afficher la zone « example.com » :\n" -" ipa dnszone-show example.com\n" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" -"\n" -" Trouver une zone avec « example » dans son nom de domaine :\n" -" ipa dnszone-find example\n" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" -"\n" -" Trouver des enregistrements de ressources avec « www » dans le nom dans la\n" -" zone « example.com » :\n" -" ipa dnsrecord-find example.com www\n" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" -"\n" -" Trouver des enregistrements A avec la valeur 192.0.2.2 dans la zone\n" -" « example.com » :\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" -"\n" -" Afficher les enregistrements de ressources « www » dans la zone\n" -" « example.com » :\n" -" ipa dnsrecord-show example.com www\n" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" -"\n" -" Déléguer la zone sub.example à un autre nom de serveur :\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" -"\n" -" Supprimer la zone « example.com » avec tous les enregistrements de " -"ressources :\n" -" ipa dnszone-del example.com\n" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" -"\n" -" Si une redirection globale est configurée, toute requête pour laquelle ce\n" -" serveur ne fait pas autorité (ex. sub.example.com) sera routée vers le \n" -" redirecteur global.\n" -" La configuration d'une redirection globale peut être surchargée par zone.\n" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" -"\n" -" La sémantique de la redirection de zone dans IPA est la même que \n" -" celle de BIND, et dépend du type de zone :\n" -" * Zone maître : le serveur BIND local répond avec autorité aux " -"requêtes \n" -" de données dans la zone donnée (y compris les réponses ayant autorité\n" -" NXDOMAIN) et transfère uniquement les requêtes sur les noms dans les \n" -" sous-zones (enregistrements NS) des zones locales servies.\n" -" \n" -" * Zone redirigée : les zones transférées ne contiennent aucune donnée \n" -" faisant autorité. BIND transmet les requêtes qui ne peuvent être \n" -" servies par son cache local aux serveurs de redirection configurés.\n" -" \n" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" -"\n" -" Désactive la redirection globale pour les sous-arbres donnés :\n" -" ipa dnszone-mod example.com --forward-policy=none\n" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" -"\n" -" Cette configuration redirige toutes les requêtes pour les noms en dehors\n" -" du sous-arbre « example.com » vers les redirecteurs globaux. Le processus\n" -" normal de résolution récursive est utilisé pour les noms dans le sous-" -"arbre\n" -" « example.com » (ex. les enregistrements NS sont suivis, etc.).\n" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" -"\n" -" Redirige toutes les requêtes pour la zone « external.example.com » vers un\n" -" autre redirecteur avec la politique « first » (il adresse les requêtes au\n" -" redirecteur sélectionné et s'il n'y a pas de réponse, les serveurs racines\n" -" globaux sont sollicités) :\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" -"\n" -" Modifier la politique de redirection pour « external.example.com » :\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" -"\n" -" Afficher la politique de redirection pour la zone « external.example." -"com » :\n" -" ipa dnsforwardzone-show external.example.com\n" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" -"\n" -" Lister toutes les redirections de zones :\n" -" ipa dnsforwardzone-find\n" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" -"\n" -" Supprimer la rediretion de zone « external.example.com » :\n" -" ipa dnsforwardzone-del external.example.com\n" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" -"\n" -" Résoudre un nom d'hôte pour voir s'il existe (ajoute le domaine IPA par\n" -" défaut s'il n'est pas inclus) :\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" -"\n" -"\n" -"CONFIGURATION GLOBALE du DNS\n" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" -"\n" -"La configuration DNS, passée en ligne de commande du script d'installation,\n" -"est stockée dans un ficher de configuration local sur chaque serveur IPA \n" -"dans lequel le service DNS est configuré. Ces réglages locaux peuvent être\n" -"surchargés par une configuration commune stockée dans le serveur LDAP :\n" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" -"\n" -"Afficher la configuration DNS globale :\n" -" ipa dnsconfig-show\n" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" -"\n" -" Modifier la configuration DNS globale et définir une liste de redirecteurs\n" -" globaux :\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" - -msgid "invalid IP network format" -msgstr "format de réseau IP invalide" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "chaque élément de LCA doit se terminer par un point-virgule" - -msgid "invalid address format" -msgstr "format d'adresse invalide" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" -"format attendu : <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen (nombre impair de chiffres hexadécimaux " -"ou tiret)" - -msgid "algorithm value: allowed interval 0-255" -msgstr "valeur de l'algorithme : intervalle autorisé 0-255" - -msgid "flags value: allowed interval 0-255" -msgstr "valeur des marqueurs : intervalle autorisé 0-255" - -msgid "iterations value: allowed interval 0-65535" -msgstr "valeur des itérations : intervalle autorisé 0-65535" - -#, python-format -msgid "salt value: %(err)s" -msgstr "valeur « salt » : %(err)s" - -msgid "invalid domain-name: not fully qualified" -msgstr "nom de domaine invalide : doit être pleinement qualifié" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "ne doit pas être un nom de domaine avec joker (RFC 4592 section 4)" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" -"La zone DNS inverse %(revzone)s pour l'adresse IP %(addr)s n'est pas gérée " -"par ce serveur." - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "Zone DNS %(zone)s introuvable" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "L'adresse IP %(ip)s est déjà assignée au domaine %(domain)s." - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" -"L'enregistrement inverse pour l'adresse IP %(ip)s existe déjà dans la zone " -"inverse %(zone)s." - -#, python-format -msgid "%s record" -msgstr "enregistrement %s" - -#, python-format -msgid "Raw %s records" -msgstr "Enregistrements %s bruts" - -#, python-format -msgid "%s Record" -msgstr "Enregistrement %s" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "(cf. RFC %s pour plus de détails)" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "'%s' est une partie requise d'un enregistrement DNS" - -msgid "Invalid number of parts!" -msgstr "Nombre de parties invalide !" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" -"Le type DNS RR « %s » n'est pas pris en charge par le greffon bind-dyndb-ldap" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "le format doit être spécifié comme « %(format)s » %(rfcs)s" - -msgid "Create reverse" -msgstr "Créer un enregistrement inverse" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" -"Impossible de créer l'enregistrement inverse pour « %(value)s » : %(exc)s" - -msgid "Exchanger" -msgstr "Changeur" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" -"le format doit être définit sous la forme\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" où :\n" -" d1: [0 .. 90] (degrés de latitude)\n" -" d2: [0 .. 180] (degrés de longitude)\n" -" m1, m2: [0 .. 59] (minutes de latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (secondes de latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] PAR .01 (altitude en mètres)\n" -" siz, hp, vp: [0 .. 90000000.00] (taille/précision en mètres)\n" -" Cf. RFC 1876 plus de détails" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "'%(required)s' ne doit pas être vide lorsque '%(name)s' est défini" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" -"les marqueurs doivent être une valeur parmi « S », « A », « U », ou « P »" - -#, fuzzy -msgid "Priority (order)" -msgstr "Priorité" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -#, fuzzy -msgid "Relative weight for entries with the same priority." -msgstr "Poids relatifs des services des serveurs (compte par emplacement)" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "la valeur ne suit pas le format d'horodatage « YYYYMMDDHHMMSS »" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" -"Le serveur de noms '%(host)s' n'a pas d'enregistrement A/AAAA correspondant" - -msgid "Managedby permission" -msgstr "Permission « managedby »" - -#, fuzzy -msgid "cannot be used when a zone is specified" -msgstr "des hôtes ne peuvent pas être définis quand le type est « group »" - -msgid "Only one zone type is allowed per zone name" -msgstr "Un seul type de zone autorisé par nom de zone" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "Permission système « %(value)s » ajoutée" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "la permisison « %(value)s » existe déjà" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "Permission système « %(value)s » supprimée" - -msgid "DNS zone" -msgstr "Zone DNS" - -msgid "DNS zones" -msgstr "Zones DNS" - -msgid "DNS Zones" -msgstr "Zones DNS" - -msgid "DNS Zone" -msgstr "Zone DNS" - -#, fuzzy -msgid "Default time to live" -msgstr "Durée de vie" - -#, fuzzy -msgid "Time to live for records without explicit TTL definition" -msgstr "Durée de vie des enregistrements en sommet de zone" - -msgid "setting Authoritative nameserver" -msgstr "configuration du serveur de nom ayant autorité" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "Ceci est uniquement utilisée pour définir l'attribut SOA MNAME." - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" -"Les enregistrements NS peuvent être modifiés dans la somme sommet - '@'. " - -#, fuzzy -msgid "" -msgstr "Serveurs DNS IPA" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "Le serveur de nom pour la zone inverse ne peut être un nom DNS relatif" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "Zone DNS « %(value)s » supprimée" - -msgid "is required" -msgstr "est requis" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "Zone DNS « %(value)s » désactivée" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "Zone DNS « %(value)s » activée" - -msgid "DNS resource record" -msgstr "Enregistrement de ressource DNS" - -msgid "DNS resource records" -msgstr "Enregistrements de ressources DNS" - -msgid "DNS Resource Records" -msgstr "Enregistrements de ressources DNS" - -msgid "DNS Resource Record" -msgstr "Enregistrement de ressources DNS" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" -"L'enregistrement DS ne doit pas être dans la zone sommet (RFC 4035 section " -"2.4)" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" -"donnée hors zone : le nom de l'enregistrement doit être un sous-domaine de " -"la zone ou un nom relatif" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" -"le propriétaire des enregistrements %(types)s ne doit pas être un nom de " -"domaine comportant des jokers (RFC 4592 section 4)" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" -"La zone inverse %(name)s requiert exactement %(count)d composants d'adresses " -"IP, %(user_count)d donnés" - -msgid "only master zones can contain records" -msgstr "seules les zones maître peuvent contenir des enregistrements" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" -"seul un unique enregistrement CNAME est autorisé par nom (RFC 2136, section " -"1.1.5)" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" -"Un enregistrement CNAME ne peut coexister avec aucun autre enregistrement " -"(RFC 1034, section 3.6.2)" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" -"un seul enregistrement DNAME est autorisé par nom (RFC 6672, section 2.4)" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" -"l'enregistrement NS n'est pas autorisé à coexister avec un enregistrement " -"%(type)s sauf quand ils sont situés dans enregistrement de zone racine (RFC " -"2181, section 6.1)" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" -"l'enregistrement DS doit coexister avec un enregistrement NS (RFC 4592 " -"section 4.6, RFC 4035 section 2.4)" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" -"La valeur brute d'un enregistrement DNS a déjà été configurée avec l'option " -"« %(name)s »" - -msgid "DNS zone root record cannot be renamed" -msgstr "L'enregistrement racine de la zone DNS ne peut être renommé" - -msgid "DNS records can be only updated one at a time" -msgstr "" -"Les enregistrements DNS ne peuvent être mis à jour qu'un seul à la fois" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "Enregistrement « %(value)s » supprimé" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "L'enregistrement '%s' de zone ne peut être supprimé" - -#, python-format -msgid "Found '%(value)s'" -msgstr "'%(value)s' trouvé." - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "Hôte « %(host)s » introuvable" - -msgid "DNS configuration options" -msgstr "Options de configuration DNS" - -msgid "DNS Global Configuration" -msgstr "Configuration DNS globale" - -msgid "IPA DNS version" -msgstr "Version du DNS de IPA." - -msgid "List of IPA masters configured as DNS servers" -msgstr "Liste des maîtres IPA configurés comme serveurs DNS" - -msgid "IPA server configured as DNSSec key master" -msgstr "Serveur IPA configuré comme maître des clés DNSSec" - -msgid "Global DNS configuration is empty" -msgstr "La configuration globale DNS est vide" - -msgid "DNS forward zone" -msgstr "Zone de redirection DNS" - -msgid "DNS forward zones" -msgstr "Zones de redirection DNS" - -msgid "DNS Forward Zones" -msgstr "Zones de redirection DNS" - -msgid "DNS Forward Zone" -msgstr "Zone de redirection DNS" - -msgid "Please specify forwarders." -msgstr "Veuillez indiquer les redirecteurs." - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "Zone de redirection DNS « %(value)s » supprimée" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "Zone de redirection DNS « %(value)s » désactivée" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "Zone de redirection DNS « %(value)s » activée" - -msgid "IPA DNS records" -msgstr "Enregistrements DNS IPA" - -msgid "IPA location records" -msgstr "Enregistrements du ou des emplacements IPA" - -msgid "Update location and IPA server DNS records" -msgstr "Mettre à jour les enregistrements DNS des emplacements et serveurs IPA" - -msgid "Result of the command" -msgstr "Résultat de la commande" - -msgid "Dry run" -msgstr "Essai à blanc" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "Le type « deny » est obsolète." - -msgid "HBAC rules" -msgstr "Règles HBAC" - -msgid "HBAC Rules" -msgstr "Règles HBAC" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "Règle HBAC « %(value)s » ajoutée" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "Règle HBAC « %(value)s » supprimée" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "Règle HBAC « %(value)s » modifiée" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "%(count)d règle HBAC correspondante" -msgstr[1] "%(count)d règles HBAC correspondantes" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "Règle HBAC « %(value)s » activée" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "Règle HBAC « %(value)s » désactivée" - -msgid "Access time" -msgstr "Horaire d'accès" - -#, fuzzy -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "Ajouter des hôtes et des groupes d'hôtes cibles à une règle HBAC." - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" -"\n" -"Hôtes/Machines\n" -"\n" -"Un hôte représente une machine. Il peut être utilisé dans de nombreux " -"contextes :\n" -"- les entrées de services sont associées à un hôte,\n" -"- un hôte stocke le principal des hôtes/des services,\n" -"- un hôte est utilisable dans les règles HBAC (Host-based Access Control),\n" -"- chaque client enregistré génère une entrée d'hôte.\n" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" -"\n" -"INSCRIPTION :\n" -"\n" -"Trois scenarii d'inscriptions d'un nouveau client sont possibles :\n" -"\n" -"1. La machine est enregistrée par un administrateur de plein droit.\n" -" L'entrée système peut pré-exister ou non. Un administrateur de\n" -" plein droit est membre du rôle hostadmin ou du groupe admins\n" -"2. L'inscription est faite par un administrateur limité. L'hôte\n" -" doit avoir été préalablement créé. Un administrateur limité\n" -" possède le privilège Host Enrollment.\n" -"3. Le système a été créé avec un mot de passe à usage unique.\n" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" -"\n" -"RÉINSCRIPTION :\n" -"\n" -"Un hôte déjà inscrit à un certain endroit ayant perdu sa configuration\n" -"(ex.: parce que sa VM a été supprimée), peut être réinscrit.\n" -"\n" -"Pour plus d'informations, consulter les pages « man » de ipa-client-" -"install.\n" -"\n" -"Un hôte peut facultativement stocker des informations complémentaires\n" -"comme sa localisation, le système d'exploitation qu'il exécute, etc.\n" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" -"\n" -" Ajouter un nouvel hôte :\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" -"\n" -" Supprimer un hôte :\n" -" ipa host-del test.example.com\n" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" -"\n" -" Ajouter un nouvel hôte à l'aide d'un mot de passe à usage unique :\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" -"\n" -"Ajouter un nouvel hôte avec un mot de passe aléatoire :\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" -"\n" -" Modifier les informations d'un hôte :\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" -"\n" -" Supprimer les clés publiques SSH d'un hôte et modifier DNS en " -"conséquence :\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" -"\n" -"Désactiver la clé Kerberos, les certificats SSL et tout service d'un hôte :\n" -" ipa host-disable test.example.com\n" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" -"\n" -" Ajouter un hôte pouvant gérer tableau de clés et certificat d'un hôte " -"donné :\n" -" ipa host-add-managedby --hosts=test2 test\n" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" -"\n" -" Autoriser un utilisateur à créer un tableau de clé :\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" - -msgid "Host" -msgstr "Hôte" - -msgid "Base-64 encoded host certificate" -msgstr "Certificat de l'hôte encodé en Base-64" - -msgid "Serial Number" -msgstr "Numéro de série" - -msgid "Serial Number (hex)" -msgstr "Numéro de série (hex)" - -msgid "Not Before" -msgstr "Pas avant" - -msgid "Not After" -msgstr "Pas après" - -msgid "Fingerprint (SHA1)" -msgstr "Empreinte (SHA1)" - -#, fuzzy -msgid "Fingerprint (SHA256)" -msgstr "Empreinte (SHA1)" - -msgid "Revocation reason" -msgstr "Raison de la révocation" - -msgid "Authentication Indicators" -msgstr "Indicateurs d'authentification" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "Hôte « %(value)s » ajouté" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Hôte « %(value)s » supprimé" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" -"Supprimer les enregistrements A, AAAA, SSHFP et PTR de l'hôte géré par le " -"DNS de IPA." - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "Aucun enregistrement A, AAAA, SSHFP ou PTR trouvé." - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Hôte « %(value)s » modifié" - -msgid "Password cannot be set on enrolled host." -msgstr "Le mot de passe ne peut être défini pour l'hôte enregistré." - -msgid "cn is immutable" -msgstr "cn est immuable" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "%(count)d hôte correspondant" -msgstr[1] "%(count)d hôtes correspondant" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "Hôte « %(value)s » désactivé" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "Certificats ajoutés à l'hôte « %(value)s »" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "Certificats supprimés pour l'hôte « %(value)s »" - -msgid "Add new principal alias to host entry" -msgstr "Ajouter un nouvel alias de principal à l'entrée de l'hôte" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Alias ajoutés à l'hôte « %(value)s »" - -msgid "Remove principal alias from a host entry" -msgstr "Supprimer un alias de principal de l'entrée d'un hôte" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "Alias supprimés pour l'hôte « %(value)s »" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| "Manage RADIUS Proxy Servers.\n" -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" -"\n" -"Gestion des serveurs mandataires RADIUS.\n" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Find all servers whose entries include the string \"example.com\":\n" -#| " ipa radiusproxy-find example.com\n" -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" -"\n" -" Trouver tous serveurs dont les entrées incluent la chaîne « example." -"com » :\n" -" ipa radiusproxy-find example.com\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Examine the configuration:\n" -#| " ipa radiusproxy-show MyRADIUS\n" -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" -"\n" -" Examiner la configuration :\n" -" ipa radiusproxy-show MyRADIUS\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Change the secret:\n" -#| " ipa radiusproxy-mod MyRADIUS --secret\n" -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" -"\n" -" Changer le secret :\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" - -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" - -msgid "Invalid URI: not an https scheme" -msgstr "" - -msgid "Invalid URI: missing netloc" -msgstr "" - -#, fuzzy -msgid "Identity Provider server" -msgstr "« Ping » sur un serveur distant." - -#, fuzzy -msgid "Identity Provider servers" -msgstr "« Ping » sur un serveur distant." - -#, fuzzy -#| msgid "Remote server name" -msgid "Identity Provider server name" -msgstr "Nom du serveur distant" - -#, fuzzy -#| msgid "Authority ID" -msgid "Authorization URI" -msgstr "ID de l'autorité" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -#, fuzzy -#| msgid "Token ID" -msgid "Token URI" -msgstr "ID du jeton" - -#, fuzzy -#| msgid "Mount point" -msgid "Token endpoint" -msgstr "Point de montage" - -#, fuzzy -#| msgid "User login" -msgid "User info URI" -msgstr "Identifiant de connexion" - -#, fuzzy -#| msgid "Token serial (informational only)" -msgid "User information endpoint" -msgstr "Numéro de série du jeton (à titre d'information)" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -#, fuzzy -#| msgid "Security Identifier" -msgid "Client identifier" -msgstr "Identifiant de sécurité" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -#, fuzzy -#| msgid "Add a new RADIUS proxy server." -msgid "Add a new Identity Provider server." -msgstr "Ajouter un nouveau serveur mandataire RADIUS." - -#, fuzzy, python-format -#| msgid "Added RADIUS proxy server \"%(value)s\"" -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "Serveur mandataire RADIUS « %(value)s » ajouté" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "Organisation" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -#, fuzzy -#| msgid "Base DN" -msgid "Base URL" -msgstr "DN de base" - -msgid "Base URL for IdP provider templates" -msgstr "" - -#, fuzzy -#| msgid "Unknown Error" -msgid "unknown provider" -msgstr "Erreur inconnue" - -#, fuzzy -#| msgid "Request is missing \"method\"" -msgid "value is missing" -msgstr "Il manque le paramètre « method » à la requête" - -#, fuzzy -#| msgid "cannot specify both raw certificate and file" -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "impossible d'indiquer à la fois certificat brut et un nom de fichier" - -#, fuzzy -#| msgid "Delete an IPA service." -msgid "Delete an Identity Provider server." -msgstr "Supprimer un service IPA." - -#, fuzzy, python-format -#| msgid "Deleted IPA server \"%(value)s\"" -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "Serveur IPA « %(value)s » supprimé" - -#, fuzzy -#| msgid "Modify an existing IPA service." -msgid "Modify an Identity Provider server." -msgstr "Modifier un service IPA." - -#, fuzzy, python-format -#| msgid "Modified IPA server \"%(value)s\"" -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "Serveur IPA \"%(value)s\" modifié" - -#, fuzzy -#| msgid "Search for IPA servers." -msgid "Search for Identity Provider servers." -msgstr "Rechercher des serveurs IPA." - -#, fuzzy, python-format -#| msgid "%(count)d IPA server matched" -#| msgid_plural "%(count)d IPA servers matched" -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "%(count)d serveur IPA correspondant" -msgstr[1] "%(count)d serveurs IPA correspondants" - -#, fuzzy -#| msgid "Display information about an IPA service." -msgid "Display information about an Identity Provider server." -msgstr "Afficher les informations sur un service IPA." - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Apply" -msgstr "Appliquer" - -msgid "Rebuild auto membership" -msgstr "Reconstruction des adhésions automatiques" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "Êtes-vous sûr de vouloir reconstruire l'adhésion automatique ?" - -msgid "Are you sure you want to proceed with the action?" -msgstr "Êtes-vous sûr de vouloir engager cette action ?" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "Êtes-vous sûr de vouloir supprimer ${object} ?" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "Êtes-vous sûr de vouloir désactiver ${object} ?" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "Êtes-vous sûr de vouloir activer ${object} ?" - -msgid "Actions" -msgstr "Actions" - -msgid "Add" -msgstr "Ajouter" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "${count} élément(s) ajouté(s)" - -msgid "Direct Membership" -msgstr "Adhésion directe" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "Filtre disponible ${other_entity}" - -msgid "Indirect Membership" -msgstr "Adhésion indirecte" - -msgid "No entries." -msgstr "Pas d'entrées." - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "Affichage des entrées ${start} à ${end} sur ${total}." - -#, fuzzy -msgid "Remove" -msgstr "Supprimer le blocage" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "${count} élément(s) supprimé(s)" - -msgid "Show Results" -msgstr "Afficher les résultats" - -msgid "Authentication indicators" -msgstr "Indicateurs d'authentification" - -msgid "Authentication indicator" -msgstr "Indicateur d'authentification" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" -"

La méthode implicite (mot de passe) est celle utilisée si aucune méthode " -"n'est choisie.

Mot de passe + double facteur : LDAP " -"et Kerberos permettent l'authentification avec l'un ou l'autre des type " -"d'authentification, mais Kerberos utilise une méthode de pré-" -"authentification qui nécessite d'utiliser un ccache blindé.

RADIUS avec un autre type : Kerberos utilise toujours " -"RADIUS, mais pas LDAP. LDAP ne reconnait que le mot de passe et une des " -"options d'authentification à double facteur.

" - -msgid "Add Custom Authentication Indicator" -msgstr "Ajouter un indicateur d'authentification personnalisé" - -msgid "Two factor authentication (password + OTP)" -msgstr "Authentification à deux-facteurs" - -msgid "RADIUS" -msgstr "RADIUS" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "External Identity Provider" -msgstr "" - -msgid "Disable per-user override" -msgstr "Désactiver la surcharge par utilisateur" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" -"

Paramètrage spécifique à l'utilisateur, surcharge la configuration " -"globale si l'une des options est cochée.

Mot de passe + double " -"facteur : LDAP est Kerberos permettent l'authentification avec l'un " -"ou l'autre des types d'authentification, mais Kerberos utilise une méthode " -"de pré-authentification qui nécessite d'utiliser un ccache blindé.

RADIUS avec un autre type : Kerberos utilise toujours " -"RADIUS, mais pas LDAP. LDAP ne reconnait que le mot de passe et une des " -"options d'authentification à double facteur.

" - -msgid "About" -msgstr "À propos de" - -msgid "Activate" -msgstr "Activer" - -msgid "Add and Add Another" -msgstr "Ajouter, puis ajouter un autre" - -msgid "Add and Close" -msgstr "Ajouter et fermer" - -msgid "Add and Edit" -msgstr "Ajouter et modifier" - -msgid "Add Many" -msgstr "Ajouter plusieurs" - -msgid "Back" -msgstr "Retour" - -msgid "Cancel" -msgstr "Annuler" - -msgid "Clear" -msgstr "" - -#, fuzzy -msgid "Clear all fields on the page." -msgstr "Rafraîchir la page." - -msgid "Close" -msgstr "Fermer" - -msgid "Disable" -msgstr "Désactiver" - -msgid "Download" -msgstr "Téléchargement" - -msgid "Download certificate as PEM formatted file." -msgstr "Télécharger le certificat dans un fichier au format PEM." - -msgid "Edit" -msgstr "Modifier" - -msgid "Enable" -msgstr "Activer" - -msgid "Find" -msgstr "Rechercher" - -msgid "Get" -msgstr "Obtenir" - -msgid "Hide" -msgstr "Masquer" - -msgid "Issue" -msgstr "Émettre" - -#, fuzzy -msgid "Match" -msgstr "Correspondance" - -#, fuzzy -msgid "Match users according to certificate." -msgstr "Recherche de certificats existants." - -msgid "Migrate" -msgstr "" - -msgid "OK" -msgstr "OK" - -msgid "Refresh" -msgstr "Rafraîchir" - -msgid "Reload current settings from the server." -msgstr "Recharger la configuration actuelle depuis le serveur." - -msgid "Delete" -msgstr "Supprimer" - -msgid "Remove hold" -msgstr "Supprimer le blocage" - -msgid "Reset" -msgstr "Réinitialiser" - -msgid "Reset Password" -msgstr "Réinitialiser le mot de passe" - -#, fuzzy -msgid "Reset Password and Log in" -msgstr "Réinitialiser le mot de passe" - -msgid "Restore" -msgstr "Restaurer" - -msgid "Retry" -msgstr "Réessayer" - -msgid "Revert" -msgstr "Rétablir" - -msgid "Revoke" -msgstr "Révoquer" - -msgid "Save" -msgstr "Enregistrer" - -msgid "Set" -msgstr "Définir" - -msgid "Show" -msgstr "Afficher" - -msgid "Stage" -msgstr "Mette en attente" - -msgid "Update" -msgstr "Modifier" - -msgid "View" -msgstr "Afficher" - -#, fuzzy -msgid "Customization" -msgstr "Confirmation" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "Tout replier" - -msgid "Expand All" -msgstr "Tout déplier" - -msgid "General" -msgstr "Général" - -msgid "Identity Settings" -msgstr "Paramètres d'identité" - -#, fuzzy -msgid "Record Settings" -msgstr "Paramètres du rôle" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "Réglages de ${primary_key} de ${entity}" - -msgid "Back to Top" -msgstr "Retour en haut de page" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "${primary_key} de ${entity} modifié" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "${entity} ajoutée avec succès" - -msgid "Add custom value" -msgstr "Ajouter une valeur personnalisée" - -msgid "Available" -msgstr "Disponible" - -msgid "Some operations failed." -msgstr "Certaines opérations ont échoué." - -msgid "Operations Error" -msgstr "Erreur sur les opérations" - -msgid "Confirmation" -msgstr "Confirmation" - -msgid "Custom value" -msgstr "Valeur personnalisée" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" -"Cette page comporte des modifications non-sauvegardées. Veuillez les " -"enregistrer ou les annuler." - -msgid "Unsaved Changes" -msgstr "Modifications non sauvegardées" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "Modifier ${entity}" - -msgid "Hide details" -msgstr "Cacher les détails" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "${product}, version : ${version}" - -msgid "Prospective" -msgstr "Possibilité future" - -msgid "Redirection" -msgstr "Redirection" - -msgid "Select entries to be removed." -msgstr "Sélectionner les entrées à supprimer." - -msgid "Result" -msgstr "Résultat" - -msgid "Show details" -msgstr "Afficher les détails" - -msgid "Success" -msgstr "Succès" - -msgid "Validation error" -msgstr "Erreur de validation" - -msgid "Input form contains invalid or missing values." -msgstr "" -"Le formulaire de saisie comporte des valeurs non-valides ou manquantes." - -msgid "Please try the following options:" -msgstr "Veuillez essayer les options suivantes :" - -msgid "If the problem persists please contact the system administrator." -msgstr "" -"Si le problème persiste, veuillez contacter l'administrateur du système." - -msgid "Refresh the page." -msgstr "Rafraîchir la page." - -msgid "Reload the browser." -msgstr "Recharger le navigateur." - -msgid "Return to the main page and retry the operation" -msgstr "Retourner à la page principale et tenter à nouveau l'opération" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "Une erreur est survenue (${error})" - -msgid "HTTP Error" -msgstr "Erreur HTTP" - -msgid "Internal Error" -msgstr "Erreur interne" - -msgid "IPA Error" -msgstr "Erreur IPA" - -msgid "No response" -msgstr "Pas de réponse" - -msgid "Unknown Error" -msgstr "Erreur inconnue" - -msgid "URL" -msgstr "URL" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "${primary_key} est géré par :" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "membres de ${primary_key} :" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "${primary_key} est membre de :" - -#, fuzzy, python-brace-format -msgid "${primary_key} member managers:" -msgstr "membres de ${primary_key} :" - -msgid "Settings" -msgstr "Paramètres" - -msgid "Search" -msgstr "Rechercher" - -msgid "False" -msgstr "Faux" - -#, fuzzy, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" -"Autoriser utilisateurs, hôtes ou groupes d'hôtes à créer un tableau de clés " -"de ce service." - -#, fuzzy, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Autoriser les utilisateurs, groupes, hôtes ou groupes d'hôtes à récupérer un " -"tableau de clés pour ce service." - -#, fuzzy, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" -"Autoriser utilisateurs, hôtes ou groupes d'hôtes à créer un tableau de clés " -"de ce service." - -#, fuzzy, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Autoriser les utilisateurs, groupes, hôtes ou groupes d'hôtes à récupérer un " -"tableau de clés pour ce service." - -#, fuzzy, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "Autorisé à créer un tableau de clés" - -#, fuzzy, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "Autorisé à récupérer un tableau de clés" - -#, fuzzy, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "Autorisé à créer un tableau de clés" - -#, fuzzy, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "Autorisé à récupérer un tableau de clés" - -msgid "Allowed to create keytab" -msgstr "Autorisé à créer un tableau de clés" - -msgid "Allowed to retrieve keytab" -msgstr "Autorisé à récupérer un tableau de clés" - -#, fuzzy, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" -"Interdire aux utilisateurs, hôtes ou groupes d'hôtes de créer un tableau de " -"clés de ce service." - -#, fuzzy, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Interdire aux utilisateurs, hôtes ou groupes d'hôtes de récupérer un tableau " -"de clés de ce service." - -#, fuzzy, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" -"Interdire aux utilisateurs, hôtes ou groupes d'hôtes de créer un tableau de " -"clés de ce service." - -#, fuzzy, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Interdire aux utilisateurs, hôtes ou groupes d'hôtes de récupérer un tableau " -"de clés de ce service." - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "Utilisateurs autorisés à récupérer un tableau de clés" - -msgid "Add Kerberos Principal Alias" -msgstr "Ajouter un nouvel alias de principal Kerberos" - -msgid "New kerberos principal alias" -msgstr "Nouvel alias de principal Kerberos" - -msgid "Remove Kerberos Alias" -msgstr "Supprimer un alias Kerberos" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "Voulez-vous supprimer l'alias kerberos ${alias} ?" - -msgid "Inherited from server configuration" -msgstr "Hérité de la configuration du serveur" - -msgid "MS-PAC" -msgstr "MS-PAC" - -msgid "Override inherited settings" -msgstr "Surcharger la configuration héritée" - -msgid "PAD" -msgstr "PAD" - -#, fuzzy -msgid "Authenticating" -msgstr "Authentification" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "Connecté en tant que" - -#, fuzzy -msgid "Authentication with Kerberos failed" -msgstr "Indicateurs d'authentification" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -#, fuzzy -msgid "Kerberos Principal you entered is expired" -msgstr "Expiration du principal Kerberos" - -#, fuzzy -msgid "Loading data" -msgstr "Données d'enregistrement" - -msgid "Log in" -msgstr "" - -#, fuzzy -msgid "Log In Using Certificate" -msgstr "Certificat de l'hôte" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -#, fuzzy -msgid "Log out error" -msgstr "Erreur de format" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, fuzzy, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "Vous allez être redirigé vers la zone DNS." - -msgid "Sync OTP Token" -msgstr "Synchroniser le jeton OTP" - -#, fuzzy -msgid "Synchronizing" -msgstr "Fenêtre de synchronisation HOTP" - -msgid "The user account you entered is locked" -msgstr "" - -msgid "number of passwords" -msgstr "nombre de mots de passe" - -msgid "seconds" -msgstr "secondes" - -#, fuzzy -msgid "Migrating" -msgstr "Configuration" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -#, fuzzy -msgid "Password migration was not successful" -msgstr "La réinitialisation du mot de passe a échoué." - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -#, fuzzy -msgid "The password or username you entered is incorrect" -msgstr "" -"Le nom d'utilisateur, mot de passe ou code du jeton ne sont pas corrects" - -#, fuzzy -msgid "Password migration was successful" -msgstr "La réinitialisation du mot de passe a échoué." - -msgid "Attribute" -msgstr "Attribut" - -#, fuzzy -msgid "Add delegation" -msgstr "délégation" - -#, fuzzy -msgid "Remove delegations" -msgstr "délégations" - -#, fuzzy -msgid "Add permission" -msgstr "permission" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove permissions" -msgstr "Supprimer une permission" - -#, fuzzy, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "Supprimer des privilèges d'un rôle." - -#, fuzzy -msgid "Add privilege" -msgstr "privilège" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove privileges" -msgstr "privilèges" - -#, fuzzy, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "Supprimer des privilèges d'un rôle." - -#, fuzzy, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "Supprimer les membres d'un privilège" - -msgid "Role Settings" -msgstr "Paramètres du rôle" - -#, fuzzy -msgid "Add role" -msgstr "Ajouter un nouveau rôle." - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "groupes d'hôtes à supprimer" - -#, fuzzy, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "Surcharges de ${primary_key} :" - -#, fuzzy, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "Certificat pour ${primary_key} de ${entity}" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove roles" -msgstr "Supprimer le blocage" - -#, fuzzy, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "Supprimer les membres d'un privilège" - -#, fuzzy, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "Retirer des services d'une LCA d'AC." - -#, fuzzy, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "Supprimer des membres d'un rôle." - -#, fuzzy -msgid "Add self service permission" -msgstr "permission de libre service" - -#, fuzzy -msgid "Remove self service permissions" -msgstr "permissions de libre service" - -#, fuzzy -msgid "Add rule" -msgstr "Règle HBAC" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to change default group?" -msgstr "" -"Êtes-vous sûrs de vouloir mettre en attente les utilisateurs sélectionnés ?" - -msgid "Default host group" -msgstr "Groupe d'hôte par défaut" - -msgid "Default user group" -msgstr "Groupe d'utilisateur par défaut" - -msgid "Exclusive" -msgstr "Exclusion" - -msgid "Expression" -msgstr "Expression" - -msgid "Host group rule" -msgstr "Règle de groupes d'hôtes" - -msgid "Host group rules" -msgstr "Règles de groupes d'hôtes" - -msgid "Inclusive" -msgstr "Inclusion" - -#, fuzzy -msgid "Remove auto membership rules" -msgstr "Règle d'appartenance automatique" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -msgid "User group rule" -msgstr "Règle de groupe utilisateur" - -msgid "User group rules" -msgstr "Règles de groupes d'utilisateurs" - -#, fuzzy -msgid "Add automount key" -msgstr "clé « automount »" - -#, fuzzy -msgid "Remove automount keys" -msgstr "clés « automount »" - -#, fuzzy -msgid "Add automount location" -msgstr "emplacement de montage automatique" - -msgid "Automount Location Settings" -msgstr "Détail d'un emplacement « automount »" - -#, fuzzy -msgid "Remove automount locations" -msgstr "emplacements de montage automatique" - -#, fuzzy -msgid "Add automount map" -msgstr "carte « automount »" - -msgid "Map Type" -msgstr "Type de mappe" - -msgid "Direct" -msgstr "Direct" - -msgid "Indirect" -msgstr "Indirect" - -#, fuzzy -msgid "Remove automount maps" -msgstr "cartes « automount »" - -#, fuzzy -msgid "Add certificate authority" -msgstr "Autorité de certification" - -#, fuzzy -msgid "Remove certificate authorities" -msgstr "Autorités de certification" - -#, fuzzy -msgid "Add CA ACL" -msgstr "LCA de l'AC" - -#, fuzzy, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "Certificat pour ${primary_key} de ${entity}" - -#, fuzzy, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "Ajouter des utilisateurs et groupes à une LCA d'AC." - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "Certificat pour ${primary_key} de ${entity}" - -#, fuzzy, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "Ajouter des services à une LCA d'AC." - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -msgid "All" -msgstr "Tou(te)s" - -msgid "Any CA" -msgstr "Toute AC" - -msgid "Any Host" -msgstr "N'importe quel hôte" - -msgid "Any Service" -msgstr "N'importe quel service" - -msgid "Any Profile" -msgstr "Tout profil" - -msgid "Anyone" -msgstr "N'importe qui" - -msgid "Rule status" -msgstr "État de la règle" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" -"Si aucune AC n'est indiquée, les requêtes à l'autorité de certification par " -"défaut sont autorisées." - -#, fuzzy -msgid "Remove CA ACLs" -msgstr "Retrait de la LRC" - -#, fuzzy, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "Certificat pour ${primary_key} de ${entity}" - -#, fuzzy, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "Retirer des utilisateurs et groupes d'une LCA d'AC." - -#, fuzzy, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "Retirer des utilisateurs et groupes d'une LCA d'AC." - -#, fuzzy, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "Supprimer des AC d'une LCA d'AC" - -#, fuzzy, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "Supprimer les certificats d'un service" - -#, fuzzy, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "Retirer des services d'une LCA d'AC." - -#, fuzzy, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "Retirer des services d'une LCA d'AC." - -msgid "Specified CAs" -msgstr "AC indiquées" - -msgid "Specified Hosts and Groups" -msgstr "Hôtes et groupes indiqués" - -msgid "Specified Profiles" -msgstr "Prodils indiqués" - -msgid "Specified Services and Groups" -msgstr "Services et groupes indiqués" - -msgid "Specified Users and Groups" -msgstr "Utilisateurs et groupes indiqués" - -msgid "Permitted to have certificates issued" -msgstr "Autorisés à se voir émettre des certificats" - -#, fuzzy -msgid "Remove certificate profiles" -msgstr "Profils de certificats" - -msgid "AA Compromise" -msgstr "AA compromis" - -msgid "Add principal" -msgstr "Ajouter un principal" - -msgid "Affiliation Changed" -msgstr "Affiliation modifiée" - -msgid "CA" -msgstr "AC" - -msgid "CA Compromise" -msgstr "AC compromis" - -msgid "Certificates" -msgstr "Certificats" - -msgid "Certificate Hold" -msgstr "Certificat bloqué" - -msgid "Cessation of Operation" -msgstr "Cessation d'activité" - -msgid "Common Name" -msgstr "Nom usuel" - -msgid "the certificate with serial number " -msgstr "le certificat ayant le numéro de série " - -msgid "Expires On" -msgstr "Expire le" - -msgid "Issued on from" -msgstr "Émis à partir du" - -msgid "Issued on to" -msgstr "Émis jusqu'au" - -msgid "Maximum serial number" -msgstr "Numéro de série maximum" - -msgid "Minimum serial number" -msgstr "Numéro de série minimum" - -msgid "Revoked on from" -msgstr "Révoqué à partir du" - -msgid "Revoked on to" -msgstr "Révoqué jusqu'au" - -msgid "Valid not after from" -msgstr "Invalide après à partir du" - -msgid "Valid not after to" -msgstr "Invalide après jusqu'au" - -msgid "Valid not before from" -msgstr "Invalide avant à partir du" - -msgid "Valid not before to" -msgstr "Invalide avant jusqu'au" - -msgid "Fingerprints" -msgstr "Empreintes" - -msgid "Get Certificate" -msgstr "Obtenir le certificat" - -msgid "Certificate Hold Removed" -msgstr "Blocage de certificat supprimé" - -#, fuzzy, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "Certificat pour ${primary_key} de ${entity}" - -#, fuzzy, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "Certificat pour ${primary_key} de ${entity}" - -#, fuzzy, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "Certificat pour ${primary_key} de ${entity}" - -#, fuzzy -msgid "Issue new certificate" -msgstr "Nouveau certificat" - -msgid "Issued By" -msgstr "Émis par" - -msgid "Issued On" -msgstr "Émis le" - -msgid "Issued To" -msgstr "Émis pour" - -msgid "Key Compromise" -msgstr "Clé compromise" - -msgid "No Valid Certificate" -msgstr "Pas de certificat valide" - -msgid "New Certificate" -msgstr "Nouveau certificat" - -msgid "Certificate in base64 or PEM format" -msgstr "Certificat au format Base64 ou PEM" - -msgid "Note" -msgstr "Note" - -msgid "Organizational Unit" -msgstr "Unité organisationnelle" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "${count} certificate(s) présent(s)" - -msgid "Privilege Withdrawn" -msgstr "Privilège retiré" - -msgid "Reason for Revocation" -msgstr "Raison de la révocation" - -#, fuzzy -msgid "Remove certificate hold" -msgstr "Révoquer un certificat." - -msgid "Do you want to remove the certificate hold?" -msgstr "Voulez-vous supprimer le blocage du certificat ?" - -msgid "Remove from CRL" -msgstr "Retrait de la LRC" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" -"
  1. Créer une base de données de certificats ou utiliser une base " -"existante. Pour créer une nouvelle base :
    # certutil -N -d <" -"database path>
  2. Créer un CSR avec le sujet CN=<" -"${cn_name}>,O=<realm>, par exemple :
    # certutil -R -" -"d <database path> -a -g <key size> -s 'CN=${cn},O=${realm}'${san}" -"
  3. Copier/coller le CSR (depuis -----BEGIN NEW " -"CERTIFICATE REQUEST----- jusque -----END NEW CERTIFICATE " -"REQUEST-----) dans la zone de texte ci-dessous :
" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr " -8 '${cn}'" - -msgid "Certificate requested" -msgstr "Certificat demandé" - -#, fuzzy -msgid "Revoke certificate" -msgstr "Révoquer un certificat." - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" -"Voulez-vous révoquer ce certificat ? Sélectionnez une raison depuis la liste " -"déroulante." - -msgid "Certificate Revoked" -msgstr "Certificat révoqué" - -msgid "REVOKED" -msgstr "RÉVOQUÉ" - -msgid "SHA1 Fingerprint" -msgstr "Empreinte SHA1" - -msgid "SHA256 Fingerprint" -msgstr "Empreinte SHA256" - -msgid "Status" -msgstr "État" - -msgid "Superseded" -msgstr "Remplacé" - -msgid "Unspecified" -msgstr "Non-spécifié" - -msgid "Valid Certificate Present" -msgstr "Certificat valide présent" - -msgid "Valid from" -msgstr "Valide à partir du" - -msgid "Valid to" -msgstr "Valide jusqu'au" - -msgid "Validity" -msgstr "Validité" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "Certificat pour ${primary_key} de ${entity}" - -msgid "View Certificate" -msgstr "Afficher le certificat" - -#, fuzzy -msgid "Certificate Data" -msgstr "Certificat" - -#, fuzzy -msgid "Certificate For Match" -msgstr "Autorité de certification" - -#, fuzzy -msgid "Certificate Mapping Match" -msgstr "Donnée associée au certificat" - -#, fuzzy -msgid "Matched Users" -msgstr "Règles satisfaites" - -#, fuzzy -msgid "User Login" -msgstr "Identifiant de connexion" - -#, fuzzy -msgid "Add certificate identity mapping rule" -msgstr "Ajouter un nouveau certificat à un service" - -#, fuzzy -msgid "Add certificate mapping data" -msgstr "Donnée d'association du certificat TLSA" - -#, fuzzy -msgid "Configuration string" -msgstr "Configuration" - -#, fuzzy, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "Voulez-vous supprimer le blocage du certificat ?" - -#, fuzzy -msgid "Remove certificate mapping data" -msgstr "Supprimer les certificats d'un service" - -#, fuzzy -msgid "Issuer and subject" -msgstr "Émis jusqu'au" - -#, fuzzy -msgid "Remove certificate identity mapping rules" -msgstr "Supprimer les certificats d'un service" - -msgid "Group Options" -msgstr "Options de groupe" - -msgid "Search Options" -msgstr "Options de recherche" - -msgid "SELinux Options" -msgstr "Options SELinux" - -#, fuzzy -msgid "Server Options" -msgstr "Options du service" - -msgid "Service Options" -msgstr "Options du service" - -msgid "User Options" -msgstr "Options utilisateurs" - -msgid "Forward first" -msgstr "Redirection prioritaire" - -msgid "Forwarding disabled" -msgstr "Redirection désactivée" - -msgid "Forward only" -msgstr "Redirection uniquement" - -msgid "Options" -msgstr "Options" - -msgid "Update System DNS Records" -msgstr "Mettre à jour les enregistrements DNS du serveur" - -msgid "Do you want to update system DNS records?" -msgstr "Voulez-vous mettre à jour les enregistrements DNS du système ?" - -msgid "System DNS records updated" -msgstr "Enregistrements DNS du système mis à jour" - -#, fuzzy -msgid "Add DNS forward zone" -msgstr "Zone de redirection DNS" - -#, fuzzy -msgid "Remove DNS forward zones" -msgstr "Zones de redirection DNS" - -#, fuzzy -msgid "Add DNS resource record" -msgstr "Enregistrement de ressource DNS" - -msgid "DNS record was deleted because it contained no data." -msgstr "L'enregistrement DNS a été supprimé car vide" - -msgid "Other Record Types" -msgstr "Autres types d'enregistrements" - -msgid "Address not valid, can't redirect" -msgstr "Adresse invalide, impossible de rediriger" - -msgid "Create dns record" -msgstr "Créer un enregistrement DNS" - -msgid "Creating record." -msgstr "Création de l'enregistrement." - -msgid "Record creation failed." -msgstr "La création de l'enregistrement a échoué." - -msgid "Checking if record exists." -msgstr "Vérification de l'existence de l'enregistrement." - -msgid "Record not found." -msgstr "Enregistrement non trouvé." - -msgid "Redirection to PTR record" -msgstr "Redirection vers l'enregistrement PTR" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "Zone trouvée : ${zone}" - -msgid "Target reverse zone not found." -msgstr "Zone inverse cible non trouvée." - -msgid "Fetching DNS zones." -msgstr "Récupération des zones DNS." - -msgid "An error occurred while fetching dns zones." -msgstr "Une erreur est survenue lors de la récupération des zones DNS." - -msgid "You will be redirected to DNS Zone." -msgstr "Vous allez être redirigé vers la zone DNS." - -#, fuzzy -msgid "Remove DNS resource records" -msgstr "Enregistrements de ressources DNS" - -msgid "Standard Record Types" -msgstr "Types d'enregistrement standard" - -msgid "Records for DNS Zone" -msgstr "Enregistrements pour la zone DNS" - -msgid "Record Type" -msgstr "Type d'enregistrement" - -#, fuzzy -msgid "Add DNS zone" -msgstr "Zone DNS" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" -"Êtes-vous sûr de vouloir ajouter une permission pour la zone DNS ${object} ?" - -msgid "DNS Zone Settings" -msgstr "Paramètres de zone DNS" - -#, fuzzy -msgid "Remove DNS zones" -msgstr "Zones DNS" - -msgid "Remove Permission" -msgstr "Supprimer une permission" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" -"Êtes-vous sûr de vouloir supprimer la permission pour la zone DNS ${object} ?" - -msgid "Skip DNS check" -msgstr "Passer la vérification DNS" - -msgid "Skip overlap check" -msgstr "Passer la vérification de recouvrement" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" -"Voulez-vous vérifier si l'adresse du nouveau serveur faisant autorité est " -"dans le DNS" - -msgid "Authoritative nameserver change" -msgstr "Changement de serveur de nom faisant autorité" - -msgid "Level" -msgstr "Niveau" - -msgid "Set Domain Level" -msgstr "Définir le niveau du domaine" - -#, fuzzy -msgid "Add user group" -msgstr "Groupe d'utilisateurs" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "Ajouter des utilisateurs et groupes à une règle HBAC." - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -msgid "Group Settings" -msgstr "Paramètres de groupe" - -msgid "External" -msgstr "Externe" - -msgid "Groups" -msgstr "Groupes" - -#, fuzzy -msgid "Group categories" -msgstr "Catégories d'utilisateurs" - -msgid "Change to external group" -msgstr "Transformer en groupe externe" - -msgid "Change to POSIX group" -msgstr "Transformer en groupe POSIX" - -#, fuzzy -msgid "Non-POSIX" -msgstr "POSIX" - -msgid "POSIX" -msgstr "POSIX" - -#, fuzzy -msgid "Remove user groups" -msgstr "Groupe d'utilisateurs membre" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "Supprimer des membres d'un groupe réseau." - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." - -#, fuzzy, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." - -#, fuzzy, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" -"Supprimer des utilisateurs et groupes d'une mappe d'utilisateurs SELinux" - -#, fuzzy, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "Ajouter des services et des groupes de services d'une règle HBAC." - -#, fuzzy, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "Supprimer des membres d'un groupe." - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -msgid "Group Type" -msgstr "Type de groupe" - -#, fuzzy -msgid "Add HBAC rule" -msgstr "Règle HBAC" - -#, fuzzy, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "Ajouter des utilisateurs et groupes à une règle HBAC." - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "Groupes de services HBAC à supprimer" - -#, fuzzy, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "Ajouter des services à une règle HBAC." - -#, fuzzy, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "Ajouter des services à une règle HBAC." - -msgid "Accessing" -msgstr "Accédant à" - -#, fuzzy -msgid "Remove HBAC rules" -msgstr "Règles HBAC" - -#, fuzzy, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." - -#, fuzzy, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "Ajouter des services et des groupes de services d'une règle HBAC." - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." - -msgid "Via Service" -msgstr "Via le service" - -msgid "Who" -msgstr "Qui" - -#, fuzzy -msgid "Add HBAC service" -msgstr "Service HBAC" - -#, fuzzy, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "Ajouter des membres à un groupe de services HBAC." - -#, fuzzy -msgid "Remove HBAC services" -msgstr "Services HBAC membres" - -#, fuzzy, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "Supprimer des membres d'un groupe de services HBAC." - -#, fuzzy -msgid "Add HBAC service group" -msgstr "Groupe de services HBAC" - -#, fuzzy, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "Ajouter des membres à un groupe de services HBAC." - -#, fuzzy -msgid "Remove HBAC service groups" -msgstr "Groupes de services HBAC membres" - -#, fuzzy, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "Supprimer des membres d'un groupe de services HBAC." - -msgid "Access Denied" -msgstr "Accès interdit" - -msgid "Access Granted" -msgstr "Accès autorisé" - -msgid "Include Disabled" -msgstr "Inclusion désactivée" - -msgid "Include Enabled" -msgstr "Inclusion activée" - -msgid "HBAC Test" -msgstr "Test HBAC" - -msgid "Matched" -msgstr "Correspondance" - -msgid "Missing values: " -msgstr "Valeurs manquantes :" - -msgid "New Test" -msgstr "Nouveau test" - -msgid "Rules" -msgstr "Règles" - -msgid "Run Test" -msgstr "Lancer test" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "Définir un ${entity} externe" - -msgid "Unmatched" -msgstr "Pas de correspondance" - -#, fuzzy -msgid "Add host" -msgstr "Ajouter un nouvel hôte." - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "Ajouter des services à une règle HBAC." - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "Surcharges de ${primary_key} :" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -msgid "Host Certificate" -msgstr "Certificat de l'hôte" - -msgid "Host Name" -msgstr "Nom d'hôte" - -msgid "Delete Key, Unprovision" -msgstr "Supprimer une clé, ôter les permissions" - -msgid "Host Settings" -msgstr "Paramètres d'hôte" - -msgid "Enrolled" -msgstr "Enregistré" - -msgid "Enrollment" -msgstr "Inscription" - -msgid "Fully Qualified Host Name" -msgstr "Nom d'hôte pleinement qualifié" - -msgid "Generate OTP" -msgstr "Créer un OTP" - -msgid "Generated OTP" -msgstr "OTP créé" - -msgid "Kerberos Key" -msgstr "Clé Kerberos" - -msgid "Kerberos Key Not Present" -msgstr "Clé Kerberos absente" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "Clé Kerberos présente, hôte muni de permissions" - -#, fuzzy -msgid "One-Time Password" -msgstr "Mots de passe à usage unique" - -#, fuzzy -msgid "One-Time Password Not Present" -msgstr "Mots de passe à usage unique" - -#, fuzzy -msgid "One-Time Password Present" -msgstr "Mots de passe à usage unique" - -msgid "Reset OTP" -msgstr "Remise à zéro OTP" - -#, fuzzy -msgid "Reset One-Time Password" -msgstr "Mots de passe à usage unique" - -msgid "Set OTP" -msgstr "Paramétrer le mot de passe à usage unique" - -msgid "OTP set" -msgstr "OTP configuré" - -#, fuzzy -msgid "Set One-Time Password" -msgstr "Mots de passe à usage unique" - -#, fuzzy -msgid "Remove hosts" -msgstr "Supprimer le blocage" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "Supprimer des membres d'un groupe d'hôtes." - -#, fuzzy, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "Supprimer des membres d'un groupe réseau." - -#, fuzzy, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "Supprimer des privilèges d'un rôle." - -#, fuzzy, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." - -#, fuzzy, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "Retirer une option d'une règle sudo." - -msgid "Unprovision" -msgstr "Suppression des permissions" - -msgid "Are you sure you want to unprovision this host?" -msgstr "Êtes-vous sûr de vouloir supprimer les permissions à cet hôte ?" - -#, fuzzy -msgid "Unprovisioning host" -msgstr "Suppression des permissions" - -msgid "Host unprovisioned" -msgstr "Permissions de l'hôte supprimées" - -#, fuzzy -msgid "Add host group" -msgstr "groupe d'hôtes" - -#, fuzzy, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "%i hôtes ou groupes d'hôtes supprimés." - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -msgid "Host Group Settings" -msgstr "Paramètres des groupe d'hôtes" - -#, fuzzy -msgid "Remove host groups" -msgstr "groupe d'hôte membre" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -#, fuzzy -#| msgid "Servers details:" -msgid "Identity provider details" -msgstr "Informations sur les serveurs :" - -#, fuzzy -#| msgid "Verify Password" -msgid "Verify secret" -msgstr "Vérifier le mot de passe" - -msgid "User to override" -msgstr "Utilisateurs à surcharger" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" -"Saisir le nom de l'utilisateur approuvé ou de l'utilisateur IPA. N.B. : la " -"recherche n'indique pas les utilisateurs des domaines approuvés." - -msgid "Enter trusted user login." -msgstr "Saisir le nom de l'utilisateur approuvé." - -#, fuzzy -msgid "Profile" -msgstr "Profils" - -msgid "Group to override" -msgstr "Groupes à surcharger" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" -"Saisir le nom du groupe approuvé ou du groupe IPA. N.B. : la recherche " -"n'indique pas les groupes des domaines approuvés." - -msgid "Enter trusted group name." -msgstr "Saisir le nom du groupe approuvé." - -#, fuzzy -msgid "Add ID view" -msgstr "Ajouter une nouvelle vue d'identifiants" - -#, fuzzy -msgid "Add group ID override" -msgstr "Surcharge d'identifiant de groupe" - -#, fuzzy -msgid "Add user ID override" -msgstr "Surcharge d'identifiant utilisateur" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "${primary_key} s'applique à :" - -msgid "Applied to hosts" -msgstr "Appliquée aux hôtes" - -msgid "Apply to host groups" -msgstr "Appliquée aux groupes d'hôtes" - -#, fuzzy, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" -"Retire l'application de la vue d'identifiants des hôtes de groupes d'hôtes" - -msgid "Apply to hosts" -msgstr "Appliquer aux hôtes" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "Surcharges de ${primary_key} :" - -#, fuzzy -msgid "Remove ID views" -msgstr "Vue d'identifiants du système" - -#, fuzzy -msgid "Remove user ID overrides" -msgstr "Surcharges d'identifiants utilisateurs" - -#, fuzzy -msgid "Remove group ID overrides" -msgstr "Surcharges d'identifiants de groupes" - -msgid "Un-apply from host groups" -msgstr "Ne plus appliquer aux groupes d'hôtes" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" -"Retire l'application de la vue d'identifiants des hôtes de groupes d'hôtes" - -msgid "Un-apply" -msgstr "Ne plus appliquer" - -msgid "Un-apply from hosts" -msgstr "Ne plus appliquer aux hôtes " - -msgid "Un-apply ID Views from hosts" -msgstr "Retirer l'application de la vue d'identifiants d'hôtes" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" -"Êtes-vous sûr(e) de retirer l'application de la vue d'identifiants des " -"entrées sélectionnées ?" - -#, fuzzy, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "Retirer l'application de la vue d'identifiants d'hôtes" - -msgid "Kerberos Ticket Policy" -msgstr "Politique de tickets Kerberos" - -#, fuzzy -msgid "Add netgroup" -msgstr "groupe réseau" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -msgid "Netgroup Settings" -msgstr "Paramètres du groupe réseau" - -#, fuzzy -msgid "Remove netgroups" -msgstr "Groupes réseau membre" - -#, fuzzy, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "Supprimer des membres d'un groupe réseau." - -#, fuzzy, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "Supprimer des membres d'un groupe réseau." - -#, fuzzy, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "Supprimer des membres d'un groupe réseau." - -#, fuzzy -msgid "Add OTP token" -msgstr "jeton OTP" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" -"Vous pouvez utiliser FreeOTP comme " -"application de jeton logiciel OTP." - -msgid "Configure your token" -msgstr "Configurer votre jeton" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" -"Configurez le code QR en reconnaissant le code QR ci-dessous. Cliquez sur le " -"code QR si vous voyez ceci sur le périphérique que vous souhaitez configurer." - -msgid "OTP Token Settings" -msgstr "Paramètres de jetons OTP" - -msgid "Disable token" -msgstr "Désactiver un jeton" - -msgid "Enable token" -msgstr "Activer un jeton" - -#, fuzzy -msgid "Remove OTP tokens" -msgstr "jetons OTP" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "Montrer le code QR" - -msgid "Show configuration uri" -msgstr "Afficher l'uri de configuration" - -msgid "Counter-based (HOTP)" -msgstr "Basé sur un compteur (HOTP)" - -msgid "Time-based (TOTP)" -msgstr "Jetons temporels (TOTP)" - -msgid "Add Custom Attribute" -msgstr "Ajouter un attribut personnalisé" - -msgid "Permission settings" -msgstr "Réglages des permissions" - -msgid "Attribute breakdown" -msgstr "Répartition des attributs" - -msgid "Privilege Settings" -msgstr "Paramètres du privilège" - -#, fuzzy -msgid "Public key:" -msgstr "Clé publique" - -#, fuzzy -msgid "Set public key" -msgstr "Clé publique SSH" - -msgid "Show/Set key" -msgstr "Afficher/définir la clé" - -msgid "Modified: key not set" -msgstr "Modifié : clé non définie" - -msgid "Modified" -msgstr "Modifié" - -msgid "New: key not set" -msgstr "Ajout : clé non définie" - -msgid "New: key set" -msgstr "Ajout : clé définie" - -#, fuzzy -msgid "Add password policy" -msgstr "politique de mots de passe" - -msgid "Password Policy" -msgstr "Politique de gestion des mots de passe" - -#, fuzzy -msgid "Remove password policies" -msgstr "politiques de mot de passe" - -#, fuzzy -msgid "Add ID range" -msgstr "Modifier une plage." - -msgid "Range Settings" -msgstr "Configuration des plages" - -msgid "Base ID" -msgstr "ID de base" - -msgid "Primary RID base" -msgstr "Base de RID principale" - -msgid "Range size" -msgstr "Taille de la plage" - -msgid "Domain SID" -msgstr "SID du domaine" - -msgid "Secondary RID base" -msgstr "Base de RID secondaire" - -#, fuzzy -msgid "Remove ID ranges" -msgstr "Plages d'ID" - -msgid "Active Directory domain with POSIX attributes" -msgstr "Domaine Active Directory avec attributs POSIX" - -msgid "Detect" -msgstr "Détection" - -msgid "Local domain" -msgstr "Domaine local :" - -msgid "IPA trust" -msgstr "Relation d'approbation IPA" - -msgid "Active Directory winsync" -msgstr "Active Directory winsync" - -#, fuzzy -msgid "Add RADIUS server" -msgstr "Serveur RADIUS" - -msgid "RADIUS Proxy Server Settings" -msgstr "Réglages du serveur mandataire RADIUS" - -#, fuzzy -msgid "Remove RADIUS servers" -msgstr "Serveurs RADIUS" - -msgid "Check DNS" -msgstr "Vérification DNS" - -msgid "Do you also want to perform DNS check?" -msgstr "Voulez-vous aussi faire une vérification DNS ?" - -msgid "Force Update" -msgstr "Forcer la mise à jour" - -#, fuzzy -msgid "Add SELinux user map" -msgstr "Mappe d'utilisateurs SELinux" - -#, fuzzy, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "Ajouter des utilisateurs et groupes à une mappe d'utilisateurs SELinux" - -#, fuzzy, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "Ajouter des utilisateurs et groupes à une mappe d'utilisateurs SELinux" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "Ajouter des utilisateurs et groupes à une mappe d'utilisateurs SELinux" - -msgid "Remove selinux user maps" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" -"Supprimer des utilisateurs et groupes d'une mappe d'utilisateurs SELinux" - -#, fuzzy, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" -"Supprimer des utilisateurs et groupes d'une mappe d'utilisateurs SELinux" - -#, fuzzy, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" -"Supprimer des utilisateurs et groupes d'une mappe d'utilisateurs SELinux" - -#, fuzzy, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" -"Supprimer des utilisateurs et groupes d'une mappe d'utilisateurs SELinux" - -msgid "Server Roles" -msgstr "Rôles serveur" - -msgid "Server Role" -msgstr "Rôle serveur" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -msgid "Delete Server" -msgstr "Supprimer le serveur" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -#, fuzzy -msgid "Add service" -msgstr "Service HBAC" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -msgid "Service Certificate" -msgstr "Certificat de service" - -msgid "Service Settings" -msgstr "Paramètres de service" - -msgid "Provisioning" -msgstr "Mise en place des permissions" - -#, fuzzy -msgid "Remove services" -msgstr "Services membres" - -#, fuzzy, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "Supprimer des privilèges d'un rôle." - -#, fuzzy, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "Supprimer des hôtes pouvant administrer ce service." - -msgid "Are you sure you want to unprovision this service?" -msgstr "Êtes-vous sûr de vouloir supprimer les permissions ce service ?" - -#, fuzzy -msgid "Unprovisioning service" -msgstr "Suppression des permissions" - -msgid "Service unprovisioned" -msgstr "Permissions du service supprimées" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "Clé Kerberos présente, permissions du service activées" - -msgid "SSH public keys" -msgstr "Clés publiques SSH" - -msgid "SSH public key:" -msgstr "Clé publique SSH :" - -msgid "Set SSH key" -msgstr "Définir la clé SSH" - -msgid "Are you sure you want to activate selected users?" -msgstr "Êtes-vous sûr de vouloir désactiver l'utilisateur sélectionné ?" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "Êtes-vous sûr(e) de vouloir activer ${object} ?" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "${count} utilisateur(s) activé(s)" - -#, fuzzy -msgid "Add stage user" -msgstr "utilis" - -msgid "Stage users" -msgstr "Utilisateurs en attente" - -msgid "Preserved users" -msgstr "Utilisateurs préservés" - -#, fuzzy -msgid "Remove preserved users" -msgstr "Utilisateurs préservés" - -#, fuzzy -msgid "Remove stage users" -msgstr "utilisateurs en attente" - -msgid "Are you sure you want to stage selected users?" -msgstr "" -"Êtes-vous sûrs de vouloir mettre en attente les utilisateurs sélectionnés ?" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "${count} utilisateur(s) mis en attente" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "Êtes-vous sûr de vouloir mettre en attente l'objet ${object} ?" - -msgid "Are you sure you want to restore selected users?" -msgstr "Êtes-vous sûr de vouloir restaurer les utilisateurs sélectionnés ?" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "Êtes-vous sûr de vouloir supprimer l'objet ${object} ?" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "${count} utilisateur(s) restauré(s)" - -msgid "User categories" -msgstr "Catégories d'utilisateurs" - -#, fuzzy -msgid "Add subid" -msgstr "règle sudo" - -#, fuzzy -msgid "Assigned subids" -msgstr "Vue d'identifiants attribuée" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -#, fuzzy -msgid "Add sudo command" -msgstr "commande sudo" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -#, fuzzy -msgid "Remove sudo commands" -msgstr "commande membre de règle sudo" - -#, fuzzy, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "Supprimer des membres d'un groupe de commandes sudo." - -#, fuzzy -msgid "Add sudo command group" -msgstr "groupe de commandes sudo" - -#, fuzzy, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" -"Ajouter des commandes et groupes de commandes sudo affectés par la règle " -"sudo." - -#, fuzzy -msgid "Remove sudo command groups" -msgstr "groupes de commandes sudo" - -#, fuzzy, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" -"Retirer des commandes et groupes de commandes sudo affectés par la règle " -"sudo." - -#, fuzzy -msgid "Add sudo rule" -msgstr "règle sudo" - -#, fuzzy -msgid "Add sudo option" -msgstr "Option sudo" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" -"Ajouter des commandes et groupes de commandes sudo affectés par la règle " -"sudo." - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "Autoriser" - -msgid "Any Command" -msgstr "Toute commande" - -msgid "Any Group" -msgstr "Tout groupe" - -msgid "Run Commands" -msgstr "Exécute les commandes" - -msgid "Deny" -msgstr "Interdire" - -msgid "Access this host" -msgstr "A accès à cet hôte" - -msgid "Option added" -msgstr "Option ajoutée" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "${count} option(s) supprimée(s)" - -#, fuzzy -msgid "Remove sudo rules" -msgstr "règles sudo" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" -"Retirer des commandes et groupes de commandes sudo affectés par la règle " -"sudo." - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" -"Retirer des commandes et groupes de commandes sudo affectés par la règle " -"sudo." - -#, fuzzy, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "Comme qui" - -msgid "Specified Commands and Groups" -msgstr "Commandes et groupes définis" - -msgid "Specified Groups" -msgstr "Groupes définis" - -#, fuzzy -msgid "Remove sudo options" -msgstr "Supprimer une permission" - -msgid "Autogenerated" -msgstr "Autogénéré" - -msgid "Segment details" -msgstr "Information sur le segment" - -msgid "Replication configuration" -msgstr "Configuration de la réplication" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" -"La gestion de la topologie nécessite le niveau de domaine minimal " -"${domainlevel}" - -#, fuzzy -msgid "Add IPA location" -msgstr "Ajouter un nouvel emplacement IPA." - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove IPA locations" -msgstr "" -"\n" -"Emplacements IPA\n" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add topology segment" -msgstr "Segment de topologie" - -#, fuzzy -msgid "Remove topology segments" -msgstr "Rechercher des segments de topologie." - -msgid "Account" -msgstr "Compte" - -#, fuzzy -msgid "Add trust" -msgstr "Relation d'approbation IPA" - -msgid "Administrative account" -msgstr "Compte administrateur" - -#, fuzzy -msgid "SID blocklists" -msgstr "Entrant dans liste noire de SID" - -msgid "Trust Settings" -msgstr "Configuration de la confiance" - -msgid "Establish using" -msgstr "Établir en utilisant" - -msgid "Fetch domains" -msgstr "Récupérer les domaines" - -msgid "Pre-shared password" -msgstr "Mot de passe pré-partagé" - -#, fuzzy -msgid "Remove trusts" -msgstr "Supprimer une permission" - -#, fuzzy -msgid "Remove domains" -msgstr "Domaines du royaume" - -msgid "Alternative UPN suffixes" -msgstr "Suffixes UPN alternatifs" - -#, fuzzy -msgid "User attributes for SMB services" -msgstr "Rechercher des services HBAC." - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -#, fuzzy -msgid "Drive to mount a home directory" -msgstr "Emplacement par défaut des répertoires utilisateur" - -msgid "Account Settings" -msgstr "Paramètres de compte" - -msgid "Account Status" -msgstr "État du compte" - -msgid "Active users" -msgstr "Utilisateurs actifs" - -#, fuzzy -msgid "Add user" -msgstr "Ajouter un nouvel utilisateur." - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "Ajouter des services à une règle HBAC." - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "Surcharges de ${primary_key} :" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -msgid "Auto assign subordinate ids" -msgstr "" - -#, fuzzy, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "Êtes-sous sûr de vouloir déverrouiller l'utilisateur ${object} ?" - -msgid "Contact Settings" -msgstr "Paramètres de contact" - -msgid "Delete mode" -msgstr "Mode suppression" - -msgid "Employee Information" -msgstr "Informations employé" - -msgid "Error changing account status" -msgstr "Erreur lors du changement d'état du compte" - -msgid "Password expiration" -msgstr "Expiration de mot de passe" - -msgid "Mailing Address" -msgstr "Adresse postale" - -msgid "Misc. Information" -msgstr "Informations diverses" - -msgid "delete" -msgstr "supprimer" - -msgid "preserve" -msgstr "préserver" - -msgid "No private group" -msgstr "Pas de groupe privé" - -#, fuzzy -msgid "Remove users" -msgstr "Utilisateurs membres" - -#, fuzzy, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "Supprimer des membres d'un groupe." - -#, fuzzy, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "Supprimer des membres d'un groupe réseau." - -#, fuzzy, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "Supprimer des privilèges d'un rôle." - -#, fuzzy, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." - -#, fuzzy, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "Retirer une option d'une règle sudo." - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" -"Êtes-vous sûr de vouloir ${action} l'utilisateur ?
Le changement prendra " -"effet immédiatement." - -#, python-brace-format -msgid "Click to ${action}" -msgstr "Cliquer pour ${action}." - -msgid "Unlock" -msgstr "Déverrouiller" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "Êtes-sous sûr de vouloir déverrouiller l'utilisateur ${object} ?" - -#, fuzzy -msgid "Add vault" -msgstr "coffre-fort" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -#, fuzzy -msgid "Vaults Config" -msgstr "Conteneur de coffres-forts" - -#, fuzzy -msgid "Members" -msgstr "Hôte membre" - -#, fuzzy -msgid "My User Vaults" -msgstr "Coffres-forts" - -#, fuzzy -msgid "Owners" -msgstr "Propriétaire" - -#, fuzzy -msgid "Remove vaults" -msgstr "Supprimer le blocage" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Service Vaults" -msgstr "Services" - -#, fuzzy -msgid "Shared" -msgstr "Coffre-fort partagé" - -#, fuzzy -msgid "Shared Vaults" -msgstr "Coffre-fort partagé" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -#, fuzzy -msgid "Vault Type" -msgstr "Type de coffre-fort" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -#, fuzzy -msgid "User Vaults" -msgstr "Coffres-forts" - -msgid "Current password is required" -msgstr "Le mot de passe actuel est requis" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "Votre mot de passe expire dans ${days} jours." - -msgid "First OTP" -msgstr "Premier OTP" - -msgid "New password is required" -msgstr "Un nouveau mot de passe est requis" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "Échec de synchronisation du jeton" - -msgid "The username, password or token codes are not correct" -msgstr "" -"Le nom d'utilisateur, mot de passe ou code du jeton ne sont pas corrects" - -msgid "Token was synchronized" -msgstr "Jeton synchronisé" - -msgid "Password change complete" -msgstr "Modification du mot de passe terminée" - -#, fuzzy -msgid "Your password has expired. Please enter a new password." -msgstr "Votre mot de passe expire dans ${days} jours." - -msgid "Passwords must match" -msgstr "Les mots de passe doivent correspondre" - -msgid "Password reset was not successful." -msgstr "La réinitialisation du mot de passe a échoué." - -msgid "Reset your password." -msgstr "Réinitialiser votre mot de passe." - -msgid "Second OTP" -msgstr "Deuxième OTP" - -msgid "Verify Password" -msgstr "Vérifier le mot de passe" - -msgid "Are you sure you want to delete selected entries?" -msgstr "Êtes-vous sûr de vouloir supprimer les entrées sélectionnées ?" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "${count} élément(s) supprimé(s)" - -msgid "Are you sure you want to disable selected entries?" -msgstr "Êtes-vous sûr de vouloir désactiver les entrées sélectionnées ?" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "${count} élément(s) désactivé(s)" - -msgid "Are you sure you want to enable selected entries?" -msgstr "Êtes-vous sûr de vouloir activer les entrées sélectionnées ?" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "${count} élément(s) activé(s)" - -msgid "Some entries were not deleted" -msgstr "Certaines entrées n'ont pas été supprimées" - -msgid "Quick Links" -msgstr "Liens rapides" - -msgid "Select All" -msgstr "Tout sélectionner" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" -"La recherche a renvoyé plus de résultats que le nombre limite configuré. " -"Affichage des ${counter} premiers résultats." - -msgid "Unselect All" -msgstr "Tout désélectionner" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "Travail en cours" - -msgid "Audit" -msgstr "Audit" - -msgid "Authentication" -msgstr "Authentification" - -msgid "Automount" -msgstr "Montage automatique" - -msgid "DNS" -msgstr "DNS" - -#, fuzzy -msgid "Host-Based Access Control" -msgstr "Commandes de contrôle d'accès basé sur l'hôte" - -msgid "Identity" -msgstr "Identité" - -msgid "Network Services" -msgstr "Services réseau" - -msgid "Policy" -msgstr "Politique" - -#, fuzzy -msgid "Role-Based Access Control" -msgstr "Commandes de contrôle d'accès basé sur l'hôte" - -msgid "Subordinate IDs" -msgstr "" - -msgid "Sudo" -msgstr "Sudo" - -msgid "Topology" -msgstr "Topologie" - -msgid "True" -msgstr "Vrai" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "Navigateur de l'API" - -msgid "First" -msgstr "Premier" - -msgid "Last" -msgstr "Dernier" - -msgid "Next" -msgstr "Suivant(e)" - -msgid "Page" -msgstr "Page" - -msgid "Prev" -msgstr "Précédent(e)" - -msgid "Undo" -msgstr "Annuler" - -msgid "Undo this change." -msgstr "Annuler cette modification." - -msgid "Undo All" -msgstr "Tout annuler" - -msgid "Undo all changes in this field." -msgstr "Annuler toutes les modifications dans ce champ." - -msgid "Text does not match field pattern" -msgstr "Le texte ne correspond pas au motif du champ" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "Doit être une valeur d'horodatage UTC (ex. : « 2014-01-20 17:58:01Z »)" - -msgid "Must be a decimal number" -msgstr "Doit être un nombre décimal" - -msgid "Format error" -msgstr "Erreur de format" - -msgid "Must be an integer" -msgstr "Doit être un entier" - -msgid "Not a valid IP address" -msgstr "Adresse IP invalide" - -msgid "Not a valid IPv4 address" -msgstr "Adresse IPv4 invalide" - -msgid "Not a valid IPv6 address" -msgstr "Adresse IPv6 invalide" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "La valeur maximale est ${value}" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "La valeur minimale est ${value}" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "Adresse réseau invalide (exemples : 2001:db8::/64, 192.0.2.0/24)" - -msgid "Parse error" -msgstr "Erreur d'analyse" - -#, fuzzy -msgid "Must be a positive number" -msgstr "Doit être un nombre décimal" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "« ${port} » n'est pas un port valide" - -msgid "Required field" -msgstr "Champ requis" - -msgid "Unsupported value" -msgstr "Valeur non prise en charge" - -msgid "kerberos ticket policy settings" -msgstr "réglages de la politique de tickets Kerberos" - -#, fuzzy -msgid "OTP max life" -msgstr "Vie max." - -#, fuzzy -msgid "OTP token maximum ticket life (seconds)" -msgstr "Durée de vie maximale (secondes)" - -#, fuzzy -msgid "OTP max renew" -msgstr "Renouvellement max." - -#, fuzzy -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "Durée maximale de la période de renouvellement (secondes)" - -#, fuzzy -msgid "RADIUS max life" -msgstr "Vie max." - -#, fuzzy -msgid "RADIUS maximum ticket life (seconds)" -msgstr "Durée de vie maximale (secondes)" - -#, fuzzy -msgid "RADIUS max renew" -msgstr "Nom du serveur mandataire RADIUS" - -#, fuzzy -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "Durée maximale de la période de renouvellement (secondes)" - -#, fuzzy -msgid "PKINIT max life" -msgstr "Vie max." - -#, fuzzy -msgid "PKINIT maximum ticket life (seconds)" -msgstr "Durée de vie maximale (secondes)" - -#, fuzzy -msgid "PKINIT max renew" -msgstr "Renouvellement max." - -#, fuzzy -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "Durée maximale de la période de renouvellement (secondes)" - -msgid "Hardened max life" -msgstr "" - -#, fuzzy -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "Durée de vie maximale (secondes)" - -msgid "Hardened max renew" -msgstr "" - -#, fuzzy -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "Durée maximale de la période de renouvellement (secondes)" - -#, fuzzy -msgid "IdP max life" -msgstr "Vie max." - -#, fuzzy -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "Durée de vie maximale (secondes)" - -#, fuzzy -msgid "IdP max renew" -msgstr "Renouvellement max." - -#, fuzzy -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "Durée maximale de la période de renouvellement (secondes)" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "La politique de ticket pour %s ne peut pas être lue" - -msgid "Default ticket policy could not be read" -msgstr "La politique de ticket par défaut ne peut pas être lue" - msgid "" "\n" "Migration to IPA\n" @@ -27976,121 +4238,176 @@ msgstr "" "alors une entrée est inscrite pour chaque utilisateur ajouté, plus un\n" "résumé quand le groupe utilisateur par défaut est mis à jour.\n" -#, python-format msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +"\n" +"Misc plug-ins\n" msgstr "" -"Le principal Kerberos %s existe déjà. Utiliser la commande « ipa user-mod » " -"pour le définir manuellement." - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" -"Impossible de savoir si le principal Kerberos %s existe déjà. Utiliser la " -"commande 'ipa user-mod' pour le définir manuellement." +"\n" +"Greffons divers\n" msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" msgstr "" -"Échec à l'ajout de l'utilisateur dans le groupe par défaut. Utiliser la " -"commande « ipa group-add-member » pour l'ajouter manuellement." - -msgid "Migration of LDAP search reference is not supported." -msgstr "" -"La migration des références des recherches LDAP n'est pas prise en charge." - -msgid "Malformed DN" -msgstr "DN mal formé" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "%(user)s n'est pas un utilisateur POSIX" +"\n" +"Groupes réseau\n" +"\n" +"Un groupe réseau est un groupe utilisé pour la vérification des droits.\n" +"Il peut contenir à la fois des valeurs utilisateur et hôte.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouveau groupe réseau :\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Ajouter des membres au groupe réseau :\n" +" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" +"\n" +" Retirer un membre du groupe réseau :\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Afficher les informations sur un groupe réseau :\n" +" ipa netgroup-show admins\n" +"\n" +" Supprimer un groupe réseau :\n" +" ipa netgroup-del admins\n" msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" msgstr "" -". Vérifier le GID du groupe existant. Utiliser l'option « --group-overwrite-" -"gid » pour surcharger le GID" - -msgid "Invalid LDAP URI." -msgstr "URI LDAP invalide." - -#, python-format -msgid "%s to exclude from migration" -msgstr "%s à exclure de la migration" +"\n" +"Notez la distinction entre attributs et entrées. Les permissions sont\n" +"indépendantes, donc la possibilité d'ajouter un utilisateur ne signifie\n" +"pas qu'il est possible de les modifier.\n" msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" +"\n" +"OTP Tokens\n" msgstr "" -"les résultats des recherches sur les objets\n" -"à migrer ont été tronquées par le serveur ;\n" -"le processus de migration peut être incomplet\n" +"\n" +"Jetons OTP\n" -#, python-format msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " +"Hat\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" msgstr "" -"La recherche LDAP %(container)s ne renvoie aucun résultat (base de " -"recherche : %(search_base)s, classe d'objet : %(objectclass)s)" +"\n" +"Jetons OTP\n" +"\n" +"Configuration des jetons OTP.\n" +"\n" +"IPA prend en charge l'utilisation de jetons OTP pour une authentification\n" +"à facteurs multiples. Ce code active la gestion des jetons OTP.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouveau jeton :\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examiner un jeton :\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Modifier le fournisseur :\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " +"Hat\"\n" +"\n" +" Supprimer un jeton :\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgid "Default group for new users not found" -msgstr "Groupe par défaut pour les nouveaux utilisateurs introuvable" +msgid "" +"\n" +"OTP configuration\n" +"\n" +"Manage the default values that IPA uses for OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic OTP configuration:\n" +" ipa otpconfig-show\n" +"\n" +" Show all OTP configuration options:\n" +" ipa otpconfig-show --all\n" +"\n" +" Change maximum TOTP authentication window to 10 minutes:\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Change maximum TOTP synchronization window to 12 hours:\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Change maximum HOTP authentication window to 5:\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Change maximum HOTP synchronization window to 50:\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" +msgstr "" +"\n" +"Configuration OTP\n" +"\n" +"Gestion des valeurs par défaut utilisées par IPA pour les jetons OTP.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Afficher la configuration de base OTP :\n" +" ipa otpconfig-show\n" +"\n" +" Afficher toutes les options de configuration OTP :\n" +" ipa otpconfig-show --all\n" +"\n" +" Modifier la fenêtre maximale d'authentification TOTP à 10 minutes :\n" +" ipa otpconfig-mod --totp-auth-window=600\n" +"\n" +" Modifier la fenêtre maximale d'authentification TOTP à 12 heures :\n" +" ipa otpconfig-mod --totp-sync-window=43200\n" +"\n" +" Modifier la fenêtre maximale d'authentification HOTP à 5 :\n" +" ipa hotpconfig-mod --hotp-auth-window=5\n" +"\n" +" Modifier la fenêtre maximale d'authentification HOTP à 50 :\n" +" ipa hotpconfig-mod --hotp-sync-window=50\n" -#, fuzzy -#| msgid "" -#| "\n" -#| "Password policy\n" -#| "\n" -#| "A password policy sets limitations on IPA passwords, including maximum\n" -#| "lifetime, minimum lifetime, the number of passwords to save in\n" -#| "history, the number of character classes required (for stronger " -#| "passwords)\n" -#| "and the minimum password length.\n" -#| "\n" -#| "By default there is a single, global policy for all users. You can also\n" -#| "create a password policy to apply to a group. Each user is only subject\n" -#| "to one password policy, either the group policy or the global policy. A\n" -#| "group policy stands alone; it is not a super-set of the global policy " -#| "plus\n" -#| "custom settings.\n" -#| "\n" -#| "Each group password policy requires a unique priority setting. If a user\n" -#| "is in multiple groups that have password policies, this priority " -#| "determines\n" -#| "which password policy is applied. A lower value indicates a higher " -#| "priority\n" -#| "policy.\n" -#| "\n" -#| "Group password policies are automatically removed when the groups they\n" -#| "are associated with are removed.\n" -#| "\n" -#| "EXAMPLES:\n" -#| "\n" -#| " Modify the global policy:\n" -#| " ipa pwpolicy-mod --minlength=10\n" -#| "\n" -#| " Add a new group password policy:\n" -#| " ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 " -#| "--minlength=8 --priority=10 localadmins\n" -#| "\n" -#| " Display the global password policy:\n" -#| " ipa pwpolicy-show\n" -#| "\n" -#| " Display a group password policy:\n" -#| " ipa pwpolicy-show localadmins\n" -#| "\n" -#| " Display the policy that would be applied to a given user:\n" -#| " ipa pwpolicy-show --user=tuser1\n" -#| "\n" -#| " Modify a group password policy:\n" -#| " ipa pwpolicy-mod --minclasses=2 localadmins\n" msgid "" "\n" "Password policy\n" @@ -28114,10 +4431,6 @@ msgid "" "Group password policies are automatically removed when the groups they\n" "are associated with are removed.\n" "\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" "EXAMPLES:\n" "\n" " Modify the global policy:\n" @@ -28186,160 +4499,800 @@ msgstr "" " Modifier une politique de mots de passe de groupe :\n" " ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" -"la priorité doit être une valeur unique (%(prio)d est déjà utilisé par " -"%(gname)s)" - -msgid "Add Class of Service entry" -msgstr "" - -#, fuzzy -msgid "Delete Class of Service entry" -msgstr "Supprimer un service IPA." - -#, fuzzy -msgid "Modify Class of Service entry" -msgstr "Supprimer un groupe de services HBAC." - -msgid "Display Class of Service entry" -msgstr "" - -#, fuzzy -msgid "Search for Class of Service entry" -msgstr "Rechercher des groupes de services HBAC." - -msgid "password policy" -msgstr "politique de mots de passe" - -msgid "password policies" -msgstr "politiques de mot de passe" - -msgid "Password Policies" -msgstr "Politiques de mot de passe" - -#, fuzzy -msgid "Max repeat" -msgstr "Renouvellement max." - -#, fuzzy -msgid "Maximum number of same consecutive characters" -msgstr "Nombre maximal d'entrées renvoyées" - -#, fuzzy -msgid "Max sequence" -msgstr "Renouvellement max." - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -msgid "User check" -msgstr "Nom d'utilisateur" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "Grace login limit" -msgstr "" - -msgid "Number of LDAP authentications allowed after expiration" +msgid "" +"\n" +"Permissions\n" msgstr "" +"\n" +"Permissions\n" msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" msgstr "" +"\n" +"Les permissions venant par défaut avec IPA sont dites « administrées ».\n" +"Un jeu d'attributs par défaut leur a été appliqué, mais l'administrateur\n" +"peut ajouter/supprimer des attributs individualisés à cet ensemble.\n" -#, fuzzy -msgid "Maximum password life must be equal to or greater than the minimum." +msgid "" +"\n" +"Ping the remote IPA server to ensure it is running.\n" +"\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" msgstr "" -"La durée de vie maximale du mot de passe doit être supérieure au minimum." +"\n" +"« Ping » sur un serveur IPA distant pour s'assurer de son fonctionnement.\n" +"\n" +"La commande « ping » envoie une requête « echo « au serveur IPA. Le serveur\n" +"renvoie ses informations de version. Ce mécanisme est utilisé par le client\n" +"IPA pour confirmer que le serveur est disponible et est en mesure " +"d'accepter\n" +"les requêtes.\n" +"\n" +"Le serveur indiqué par « xmlrpc_uri » dans « /etc/ipa/default.conf » est\n" +"contacté en premier. S'il ne répond pas alors le client contactera " +"n'importe\n" +"quel autre serveur défini dans les enregistrements SRV du DNS.\n" +"\n" +"EXEMPLES :\n" +"\n" +" « Ping » d'un serveur IPA :\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" +"\n" +" « Ping » verbeux d'un serveur IPA :\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" -msgid "cannot delete global password policy" -msgstr "impossible de supprimer une politique de mot de passe globale" - -msgid "priority cannot be set on global policy" -msgstr "la priorité ne peut être définie sur la politique globale" - -msgid "HBAC rule and local members cannot both be set" +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" msgstr "" -"Des membres locaux et des membres d'une règle HBAC ne peuvent pas être " -"définis simultanément" +"\n" +"Greffons non accessibles depuis la ligne de commande, commandes utilisées en " +"interne\n" -msgid "Invalid SELinux user name, must match {}" +msgid "" +"\n" +"Privileges\n" +"\n" +"A privilege combines permissions into a logical task. A permission provides\n" +"the rights to do a single task. There are some IPA operations that require\n" +"multiple permissions to succeed. A privilege is where permissions are\n" +"combined in order to perform a specific task.\n" +"\n" +"For example, adding a user requires the following permissions:\n" +" * Creating a new user entry\n" +" * Resetting a user password\n" +" * Adding the new user to the default IPA users group\n" +"\n" +"Combining these three low-level tasks into a higher level task in the\n" +"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" +"\n" +"A privilege may not contain other privileges.\n" +"\n" +"See role and permission for additional information.\n" msgstr "" +"\n" +"Privilèges\n" +"\n" +"Un privilège combine les permissions en tâches logiques. Une permission\n" +"fournit les droits de réaliser une tâche unique. Certaines opérations IPA\n" +"requièrent une combinaison de plusieurs permissions. Un privilège est la\n" +"combinaison de ces permissions pour réaliser une tâche.\n" +"\n" +"Par exemple, la création d'utilisateurs requiert les permissions " +"suivantes :\n" +" * création d'une nouvelle entrée\n" +" * réinitialisation du mot de passe\n" +" * ajout du nouvel utilisateur au groupe d'utilisateurs par défaut de IPA\n" +"\n" +"La combinaison de ces trois tâches de bas niveau en privilège nommé\n" +"« Add User » facilite la gestion des rôles.\n" +"\n" +"Un privilège ne peut contenir d'autres privilèges.\n" +"\n" +"Reportez-vous la gestion des rôles et des permissions pour plus " +"d'informations.\n" -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgid "" +"\n" +"Provides API introspection capabilities.\n" msgstr "" +"\n" +"Fournit des capacités d'introspection de l'API.\n" -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgid "" +"\n" +"RADIUS Proxy Servers\n" msgstr "" +"\n" +"Serveurs mandataires RADIUS\n" -msgid "SELinux user map list not found in configuration" +msgid "" +"\n" +"RADIUS Proxy Servers\n" +"\n" +"Manage RADIUS Proxy Servers.\n" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" msgstr "" -"Liste de correspondance d'utilisateurs SELinux introuvable dans cette " -"configuration" +"\n" +"RADIUS Proxy Servers\n" +"\n" +"Gestion des serveurs mandataires RADIUS.\n" +"\n" +"IPA prend en charge l'utilisation d'un serveur mandataire externe RADIUS\n" +"pour des authentifications OTP « krb5 ». Cela procure une grande souplesse\n" +"pour l'intégration des services d'authentification tierce partie.\n" +"\n" +"\n" +"EXEMPLES:\n" +"\n" +" Ajouter un nouveau serveur :\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +"\n" +" Rechercher tous les serveurs dont les entrées incluent la chaîne « example." +"com » :\n" +" ipa radiusproxy-find example.com\n" +"\n" +" Afficher la configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +"\n" +" Modifier le secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +"\n" +" Supprimer la configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" + +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" +"\n" +"RÉINSCRIPTION :\n" +"\n" +"Un hôte déjà inscrit à un certain endroit ayant perdu sa configuration\n" +"(ex.: parce que sa VM a été supprimée), peut être réinscrit.\n" +"\n" +"Pour plus d'informations, consulter les pages « man » de ipa-client-" +"install.\n" +"\n" +"Un hôte peut facultativement stocker des informations complémentaires\n" +"comme sa localisation, le système d'exploitation qu'il exécute, etc.\n" + +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" +"\n" +"Relever le niveau du domaine IPA.\n" + +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" +"\n" +"Domaines du royaume\n" +"\n" +"Gérer la liste des domaines associés au royaume IPA.\n" +"\n" +"EXEMPLES:\n" +"\n" +" Afficher la liste actuelle des domaines du royaume :\n" +" ipa realmdomains-show\n" +"\n" +" Remplacer la liste des domaines du royaume :\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Ajouter un domaine à la liste des domaines du royaume :\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Supprimer un domaine de la liste des domaines du royaume :\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" #, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" msgstr "" -"Utilisateur SELinux %(user)s introuvable dans la liste ordonnée (dans la " -"configuration)" - -msgid "SELinux User Map rule" -msgstr "Règle de mappe utilisateurs SELinux" - -msgid "SELinux User Map rules" -msgstr "Règles de mappes utilisateurs SELinux" - -msgid "SELinux User Maps" -msgstr "Mappes d'utilisateurs SELinux" - -msgid "SELinux User Map" -msgstr "Mappe d'utilisateurs SELinux" +"\n" +"La suppression de « %(hostname)s » engendre une déconnexion de la topologie " +"de réplication pour le suffixe « %(suffix)s » :\n" +"%(errors)s" #, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "Règle HBAC %(rule)s introuvable" +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" +"\n" +"La topologie de réplication dans le suffixe « %(suffix)s » est " +"déconnectée :\n" +"%(errors)s" -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "Mappe d'utilisateurs SELinux « %(value)s » ajoutée" +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" +"\n" +"Les droits définissent les opérations permises ; ce sont un ou plusieurs\n" +"des éléments suivants :\n" +"1. write - écrire un ou plusieurs attributs\n" +"2. read - lire un ou plusieurs attributs\n" +"3. search - rechercher un ou plusieurs attributs\n" +"4. compare - comparer un ou plusieurs attributs\n" +"5. add - ajouter une nouvelle entrée dans l'arbre\n" +"6. delete - supprimer une entrée existante\n" +"7. all - toutes les permissions sont garanties\n" -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "Mappe d'utilisateurs SELinux « %(value)s » supprimée." +msgid "" +"\n" +"Roles\n" +"\n" +"A role is used for fine-grained delegation. A permission grants the ability\n" +"to perform given low-level tasks (add a user, modify a group, etc.). A\n" +"privilege combines one or more permissions into a higher-level abstraction\n" +"such as useradmin. A useradmin would be able to add, delete and modify " +"users.\n" +"\n" +"Privileges are assigned to Roles.\n" +"\n" +"Users, groups, hosts and hostgroups may be members of a Role.\n" +"\n" +"Roles can not contain other roles.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new role:\n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +"\n" +" Add some privileges to this role:\n" +" ipa role-add-privilege --privileges=addusers junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege --privileges=add_user_to_default_group " +"junioradmin\n" +"\n" +" Add a group of users to this role:\n" +" ipa group-add --desc=\"User admins\" useradmins\n" +" ipa role-add-member --groups=useradmins junioradmin\n" +"\n" +" Display information about a role:\n" +" ipa role-show junioradmin\n" +"\n" +" The result of this is that any users in the group 'junioradmin' can\n" +" add users, reset passwords or add a user to the default IPA user group.\n" +msgstr "" +"\n" +"Rôles\n" +"\n" +"Les rôles sont utilisés pour affiner les délégations. Une permission " +"accorde\n" +"la capacité d'effectuer une tâche de bas niveau (ajouter un utilisateur,\n" +"modifier un groupe, etc.). Un privilège combine une ou plusieurs\n" +"permissions en une abstraction de plus haut niveau comme « useradmin ». Un\n" +"administrateur d'utilisateur (useradmin) sera capable d'ajouter, modifier\n" +"et supprimer des utilisateurs.\n" +"\n" +"Les privilèges sont assignés aux rôles.\n" +"\n" +"Peuvent être membres d'un rôle des utilisateurs, des groupes, des systèmes\n" +"et des groupes de systèmes.\n" +"\n" +"Les rôles ne peuvent contenir d'autres rôles.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouveau rôle :\n" +" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" +"\n" +" Ajouter des privilèges à ce rôle :\n" +" ipa role-add-privilege --privileges=addusers junioradmin\n" +" ipa role-add-privilege --privileges=change_password junioradmin\n" +" ipa role-add-privilege --privileges=add_user_to_default_group " +"junioradmin\n" +"\n" +" Ajouter un groupe d'utilisateurs à ce rôle :\n" +" ipa group-add --desc=\"User admins\" useradmins\n" +" ipa role-add-member --groups=useradmins junioradmin\n" +"\n" +" Afficher les informations sur un rôle :\n" +" ipa role-show junioradmin\n" +"\n" +" Le résultat des commandes ci-dessus fait que le groupe « junioradmin »\n" +" peut ajouter des utilisateurs, réinitialiser des mots de passe, ou ajouter\n" +" un utilisateur au groupe d'utilisateur par défaut de IPA.\n" -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "Mappe d'utilisateurs SELinux « %(value)s » modifiée" +msgid "" +"\n" +"SELinux User Mapping\n" +"\n" +"Map IPA users to SELinux users by host.\n" +"\n" +"Hosts, hostgroups, users and groups can be either defined within\n" +"the rule or it may point to an existing HBAC rule. When using\n" +"--hbacrule option to selinuxusermap-find an exact match is made on the\n" +"HBAC rule name, so only one or zero entries will be returned.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " +"\"server\":\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " +"existing HBAC rule for users and hosts:\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test2\n" +"\n" +" Display the properties of a rule:\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Create a rule for a specific user. This sets the SELinux context for\n" +" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Disable a rule:\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Enable a rule:\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Find a rule referencing a specific HBAC rule:\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Remove a rule:\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"SEEALSO:\n" +"\n" +" The list controlling the order in which the SELinux user map is applied\n" +" and the default SELinux user are available in the config-show command.\n" +msgstr "" +"\n" +"Mappage d'utilisateur SELinux\n" +"\n" +"Fait correspondre des utilisateurs IPA aux utilisateurs SELinux par hôte.\n" +"\n" +"Hôtes, groupes d'hôtes, utilisateurs et groupes peuvent être définis par\n" +"rapport, soit à la règle, soit en pointant vers une règle HBAC existante.\n" +"En utilisant l'option « --hbacrule » de « selinuxusermap-find », une\n" +"recherche de correspondance exacte est faite sur le nom de la règle HBAC,\n" +"de sorte qu'une seule entrée sera renvoyée ou bien aucune.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Créer une règle « test1 » qui attribue à tous les utilisateurs le contexte\n" +"« xguest_u:s0 » sur l'hôte « server » :\n" +" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" +" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" +"\n" +" Créer une règle « test2 » qui attribue à tous les utilisateurs le contexte\n" +"« guest_u:s0 » et utilise une règle HBAC existante pour utilisateurs et " +"hôtes :\n" +" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" +"selinuxuser=guest_u:s0 test1\n" +"\n" +" Afficher les propriétés d'une règle :\n" +" ipa selinuxusermap-show test2\n" +"\n" +" Créer une règle pour un utilisateur donné. Elle fixe le contexte\n" +" SELinux de l'utilisateur « john » à « unconfined_u:s0-s0:c0.c1023 »\n" +" sur toute machine :\n" +" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." +"c1023 john_unconfined\n" +" ipa selinuxusermap-add-user --users=john john_unconfined\n" +"\n" +" Désactiver une règle :\n" +" ipa selinuxusermap-disable test1\n" +"\n" +" Activer une règle :\n" +" ipa selinuxusermap-enable test1\n" +"\n" +" Trouver une règle référençant une règle HBAC donnée :\n" +" ipa selinuxusermap-find --hbacrule=allow_some\n" +"\n" +" Supprimer une règle :\n" +" ipa selinuxusermap-del john_unconfined\n" +"\n" +"VOIR AUSSI :\n" +"\n" +" La liste contrôlant l'ordre dans lequel la mappe d'utilisateurs SELinux\n" +" est appliquée, ainsi que l'utilisateur SELinux par défaut, sont " +"disponibles\n" +" avec la commande « config-show ».\n" -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "%(count)d mappe d'utilisateurs SELinux correspondant" -msgstr[1] "%(count)d mappe d'utilisateurs SELinux correspondant" +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" +msgstr "" +"\n" +"TYPES DE ZONE PRIS EN CHARGE\n" +"\n" +" * Zone maître (dnszone-*), contient les données faisant autorité.\n" +" * Zone redirigée (dnsforwardzone-*), qui transfère les requêtes aux " +"redirecteurs\n" +" configurés (un ensemble de serveurs DNS).\n" -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "Mappe d'utilisateurs SELinux « %(value)s » activée" +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" +"\n" +"Permissions de libre service\n" +"\n" +"Une permission permet d'affiner une délégation de permissions. Les règles " +"ou\n" +"instructions de contrôle d'accès (ACI) accordent la permission de donner " +"les\n" +"permissions d'effectuer des tâches données comme ajouter un utilisateur,\n" +"modifier un groupe, etc.\n" +"\n" +"Une permission de libre service définit ce qu'un objet peut modifier dans " +"sa\n" +"propre entrée.\n" +"\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter une règle de libre service permettant aux utilisateurs de gérer\n" +"leurs adresses (avec les extensions entre accolades de Bash) :\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" En gérant les listes d'attributs, vous devez incorporer tous les attributs\n" +"dans la liste, y compris les existants.\n" +" Ajouter « telephoneNumber » à la liste (avec extension entre accolades " +"Bash) :\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Afficher la règle modifiée :\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Supprimer une règle :\n" +" ipa selfservice-del \"Users manage their own address\"\n" -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "Mappe d'utilisateurs SELinux « %(value)s » désactivée" +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" +"\n" +"Configuration du serveur\n" +"\n" +"Gérer les valeurs par défaut utilisées par IPA ainsi que certains de ses\n" +"paramètres d'ajustement.\n" +"\n" +"NOTES :\n" +"\n" +"La valeur de notification du mot de passe (--pwdexpnotify) est stockée ici\n" +"en vue de sa réplication. Elle n'est pas actuellement utilisée pour " +"notifier\n" +"par avance aux utilisateurs l'expiration de leur mot de passe.\n" +"\n" +"Certains attributs sont en lecture seule, fournis à titre d'information ;\n" +"ils comprennent :\n" +"\n" +"* la base sujet de certificat : la base de sujet de certificat configuré,\n" +" ex. O=EXAMPLE.COM, configurable uniquement à l'installation.\n" +"* les fonctions du greffon mots de passe : définit les hachages " +"additionnels\n" +" qu'un mot de passe va générer (d'autres conditions peuvent s'appliquer).\n" +"\n" +"En fixant la liste ordonnée pour le mappage des utilisateurs SELinux, vous\n" +"devez mettre entre guillemets les valeurs pour éviter leur interprétation.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Afficher la configuration de base du serveur :\n" +" ipa config-show\n" +"\n" +" Afficher toutes les options de configuration :\n" +" ipa config-show --all\n" +"\n" +" Modifier la longueur maximale d'un nom d'utilisateur à 99 caractères :\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Augmenter délais et limites de taille des recherches sur le serveur IPA :\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Définir le domaine pour les courriels de l'utilisateur par défaut :\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Activer le mode migration pour que « ipa migrate-ds » soit opérationelle :\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Définir l'ordre de la mappe des utilisateurs SELinux :\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" +"\n" +"Délégation contrainte de services\n" +"\n" +"Gérez les règles permettant la délégation contrainte d'informations\n" +"d'authentification de façon à ce qu'un service puisse se faire passer\n" +"pour un utilisateur lors de la communication avec un service sans\n" +"que cela ne nécessite de la part de l'utilisateur de transmettre son TGT.\n" +"Cela constitue une méthode bien meilleure de délégation d'identification\n" +"car elle évite l'exposition du secret court terme de l'utilisateur.\n" +"\n" +"La convention de nommage est d'ajouter le mot « target » ou « targets »\n" +"au nom de la règle de correspondance. Ce poitn n'est pas obligatoire mais\n" +"aide à visualiser l'association entre règles et cibles.\n" +"\n" +"Une règle est constituée de deux choses :\n" +" - une liste de cibles auxquelles la règle s'applique,\n" +" - une liste de memberPrincipals qui sont autorisés à leur déléguer\n" +" leurs droits.\n" +"\n" +"Une cible consiste en une liste de principaux qui peuvent être délégués.\n" +"\n" +"En anglais, une règle que ce principal peut déléguer comme cette liste\n" +"de principaux, tels que définis par ces cibles.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter une nouvelle règle de délégation contrainte :\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Ajouter une nouvelle cible de délégation contrainte :\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Ajouter un principal à la règle :\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Ajouter notre cible à la règle :\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add un principal à la cible :\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Afficher les informations au sujet d'une règle de délégation et sa cible :\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Supprimer une délégation contrainte :\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"Dans cet exemple, le service ftp peut obtenir un TGT pour le service ldap\n" +"au nom de l'utilisateur associé.\n" +"\n" +"Il est fortement découragé de modifier les délégations livrées avec IPA,\n" +"ipa-http-delegation et ses cibles ipa-cifs-delegation-targets et\n" +"ipa-ldap-delegation-targets. Des modifications erronées peuvent obérer\n" +"la capacité de délégation, en provoquant l'arrêt de fonctionnement du\n" +"moteur.\n" msgid "" "\n" @@ -28459,136 +5412,434 @@ msgstr "" msgid "" "\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"Set a user's password\n" +"\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"EXAMPLES:\n" +"\n" +" To reset your own password:\n" +" ipa passwd\n" +"\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" msgstr "" "\n" -" Autoriser un utilisateur à créer un tableau de clé :\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +"Définir le mot de passe d'un utilisateur\n" +"\n" +"Si une personne autre que l'utilisateur change le mot de passe de cet\n" +"utilisateur (par exemple en cas de réinitialisation par les services\n" +"d'assistance technique), le mot de passe devra être modifié la première\n" +"fois qu'il sera utilisé, afin que l'utilisateur soit le seul à connaître\n" +"son mot de passe.\n" +"\n" +"La politique de mot de passe de IPA contrôle la fréquence de changement\n" +"des mots de passe, les prérequis de leur résistance, et la taille\n" +"de l'historique des mots de passe.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Réinitialiser son propre mot de passe :\n" +" ipa passwd\n" +"\n" +" Modifier le mot de passe d'un utilisateur :\n" +" ipa passwd tuser1\n" msgid "" "\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" +"Simulate use of Host-based access controls\n" "\n" +"HBAC rules control who can access what services on what hosts.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" +"\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" +"\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" "\n" -" Générer et récupérer un tableau de clés d'un service IPA :\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" +"Simuler l'utilisation des contrôles d'accès fondés sur l'hôte\n" "\n" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, fuzzy, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "Indicateurs d'authentification" - -msgid "Malformed principal" -msgstr "Principal malformé" - -msgid "{} is required by the IPA master" -msgstr "" - -msgid "service" -msgstr "service" - -msgid "services" -msgstr "services" - -msgid "Service principal alias" -msgstr "Alias de principal de service" - -msgid "Base-64 encoded service certificate" -msgstr "Certificat du service encodé en Base-64" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "La valeur NONE ne peut être combinée avec d'autres types de PAC" - -msgid "Add a new IPA service." -msgstr "Ajouter un nouveau service IPA." - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "Service « %(value)s » ajouté" - -#, fuzzy -msgid "force principal name even if host not in DNS" -msgstr "forcer le nom du principal même si absent du DNS" - -#, fuzzy -msgid "Skip host check" -msgstr "Passer la vérification DNS" - -#, fuzzy -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "Forcer la suppression du serveur même s'il n'existe pas" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "L'hôte « %s » auquel ajouter un service n'existe pas." - -#, fuzzy -msgid "Add a new SMB service." -msgstr "Ajouter un nouveau service HBAC." - -#, fuzzy -msgid "SMB service NetBIOS name" -msgstr "Nom NetBIOS" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "Service « %(value)s » supprimé" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "Service « %(value)s » modifié" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "%(count)d service correspondant" -msgstr[1] "%(count)d services correspondant" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "Service « %(value)s » désactivé" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "Certificats ajoutés au principal de service « %(value)s »" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "Supprimer les certificats du principal de service « %(value)s »" - -msgid "Add new principal alias to a service" -msgstr "Ajouter un nouvel alias de principal à un service" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "Alias ajoutés au principal de service « %(value)s »" - -msgid "Remove principal alias from a service" -msgstr "Supprimer un alias de principal d'un service" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "Alias supprimés du principal de service « %(value)s »" +"Les règles HBAC contrôlent qui peut accéder à quel service sur quels hôtes.\n" +"Vous pouvez utiliser HBAC pour contrôler quels utilisateurs ou quels " +"groupes\n" +"ont accés à un service ou à un groupe de services, sur un hôte cible.\n" +"\n" +"L'application de règles HBAC présuppose un environnement de production ;\n" +"ce greffon a pour objet de fournir une simulation de l'évaluation des " +"règles\n" +"HBAC sans nécessiter d'accès à cet environnement.\n" +"\n" +" Tester l'arrivée d'un utilisateur dans un service sur un hôte donné\n" +" vis à vis des règles actives existantes.\n" +"\n" +"ipa hbactest --user= --host= --service=\\\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\\\n" +" [--sizelimit= ]\n" +"\n" +"--user, --host et --service sont obligatoires, les autres sont " +"optionnelles.\n" +"\n" +" Si --rules est défini, simule l'activation des règles « rules-list » et\n" +" teste la connexion de l'utilisateur uniquement sur ces règles.\n" +"\n" +" Si --enabled est défini, toutes les règles HBAC activées sont ajoutées à\n" +" la simulation\n" +"\n" +" Si --disabled est défini, toutes les règles HBAC désactivées sont ajoutées\n" +" à la simulation\n" +"\n" +" Si --nodetail est défini, il n'est pas renvoyé d'information sur les " +"règles satisfaites ou non satisfaites.\n" +"\n" +" Si --rules et --enabled sont définis tous deux, la simulation est " +"appliquée\n" +" à --rules _et_ à tous les règles IPA activées.\n" +"\n" +" Si --rules n'est pas défini, la simulation est lancée vis à sis de toutes\n" +" les règles IPA activées.\n" +" Par défaut, il y a une limite globale IPA pour le nombre d'entrées\n" +" renvoyées, vous pouvez la modifier avec l'option « --sizelimit ».\n" +"\n" +"EXEMPLES :\n" +"\n" +" 1. Utiliser toutes les règles HBAC activées dans la base de données IPA\n" +" pour la simulation :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 2. Désactiver le résumé détaillé sur l'application des règles :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +"\n" +" 3. Tester explicitement les règles HBAC indiquées :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" +"--rules=my-second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" +"\n" +" 4. Utiliser toutes les règles HBAC activées de la base de données IPA\n" +" plus les règles explicitement définies :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" +"--rules=my-second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" +"\n" +" 5. Tester toutes les règles HBAC désactivées de la base de données " +"IPA :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Tester toutes les règles HBAC désactivées de la base de données IPA\n" +" plus les règles explicitement définies :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \n" +"--rules=my-second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Tester toutes les règles HBAC (activées et désactivées) de la base\n" +" de données IPA :\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" +"\n" +"\n" +"TEST HBAC ET domaines approuvés\n" +"\n" +"Si un domaine approuvé externe est configuré dans IPA, les règles HBAC\n" +"sont aussi appliquées aux utilisateurs accédant aux ressources IPA à partir\n" +"du domaine approuvé. Les utilisateurs des domaines approuvés et les\n" +"groupes (et leur SID) peuvent être assignés à des groupes externes pouvant\n" +"être membres de groupes POSIX d'IPA éligibles aux règles HBAC, ce qui\n" +"autorise un accès aux ressources protégées par le système HBAC.\n" +"\n" +"Le greffon « hbactest » peut tester des accès, à la fois d'utilisateurs\n" +"IPA locaux et d'utilisateurs de domaines approuvés à partir, soit du\n" +"nom d'utilisateur pleinement qualifié, soit du SID utilisateur. De tels " +"noms\n" +"d'utilisateur doivent avoir un domaine approuvé précisé comme nom court\n" +"(DOMAINE\\Administrateur) ou avec un nom de principal d'utilisateur (UPN),\n" +"Administrator@ad.test.\n" +"\n" +"Veuillez noter que « hbactest » exécuté avec un utilisateur de domaine de\n" +"confiance en tant que paramètre --user ne peut être lancé que par des\n" +"membres du groupe des « administrateurs de confiance ».\n" +"\n" +"EXEMPLES :\n" +"\n" +" 1. Tester si un utilisateur d'un domaine approuvé défini par son\n" +" nom court satisfait à toute règle :\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Tester si un utilisateur d'un domaine approuvé défini par son\n" +" nom de domaine satisfait à toute règle :\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Tester si un utilisateur d'un domaine approuvé défini par son\n" +" SID satisfait à toute règle :\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Tester si un autre utilisateur d'un domaine approuvé défini\n" +" par son SID satisfait à toute règle :\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Tester si un autre utilisateur d'un domaine approuvé défini par\n" +" son nom court satisfait à toute règle :\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgid "" "\n" @@ -28693,940 +5944,16 @@ msgstr "" "supprimés :\n" " ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgid "Stage Users" -msgstr "Mettre en attente les utilisateurs" - -msgid "Stage User" -msgstr "Mettre en attente l'utilisateur" - -msgid "stage user" -msgstr "utilis" - -msgid "stage users" -msgstr "utilisateurs en attente" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "Utilisateur en attente « %(value)s » ajouté" - -msgid "givenname is required" -msgstr "givenname est requis" - -msgid "sn is required" -msgstr "sn est requis" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Utilisateur en attente « %(value)s » supprimé" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "Utilisateur en attente « %(value)s » modifié" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d utilisateur correspondant" -msgstr[1] "%(count)d utilisateurs correspondant" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "Activer un utilisateur en attente « %(value)s »" - -msgid "Entry RDN is not 'uid'" -msgstr "Le RDN de l'entrée n'est pas l'attribut « uid »" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "L'entrée ne possède aucun attribut « %(attribute)s »" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "L'utilisateur actif nommé « %(user)s » existe déjà" - -#, python-format -msgid "Stage user %s activated" -msgstr "Utilisateur en attente %s activé" - -#, fuzzy -msgid "Add one or more certificates to the stageuser entry" -msgstr "Ajouter un ou plusieurs certificats à l'entrée utilisateur" - -#, fuzzy, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "Certificats ajoutés à l'utilisateur « %(value)s »" - -#, fuzzy -msgid "Remove one or more certificates to the stageuser entry" -msgstr "Supprimer les certificats de l'entrée de l'utilisateur" - -#, fuzzy, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "Certificats supprimés de l'utilisateur « %(value)s »" - -#, fuzzy -msgid "Add new principal alias to the stageuser entry" -msgstr "Ajouter un nouvel alias de principal à l'entrée de l'hôte" - -#, fuzzy, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "Alias ajoutés à l'hôte « %(value)s »" - -#, fuzzy -msgid "Remove principal alias from the stageuser entry" -msgstr "Supprimer un alias de principal de l'entrée d'un hôte" - -#, fuzzy, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "Alias supprimés pour l'hôte « %(value)s »" - -#, fuzzy -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "Ajouter un ou plusieurs certificats à l'entrée utilisateur" - -#, fuzzy -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "Supprimer les certificats de l'entrée de l'utilisateur" - -msgid "ID View" -msgstr "Vue d'identifiants" - -msgid "system ID View" -msgstr "Vue d'identifiants du système" - -msgid "ID Views" -msgstr "Vues d'identifiants" - -msgid "User object overrides" -msgstr "Surcharges des objets utilisateurs" - -msgid "Group object overrides" -msgstr "Surcharges des objets groupes" - -msgid "Hosts the view applies to" -msgstr "Hôtes auxquels la vue s'applique" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "Vue d'identifiants « %(value)s » ajoutée" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "Vue d'identifiants « %(value)s » supprimée" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "Vue d'identifiant « %(value)s » modifiée" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "%(count)d vue d'identifiants correspondante" -msgstr[1] "%(count)d vues d'identifiants correspondantes" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" -"La vue de la relation d'approbation par défaut ne peut être appliquée sur un " -"hôte" - -msgid "not found" -msgstr "introuvable" - -#, fuzzy -msgid "ID View cannot be applied to IPA master" -msgstr "" -"La vue de la relation d'approbation par défaut ne peut être appliquée sur un " -"hôte" - -msgid "ID View already applied" -msgstr "Vue d'identifiants déjà appliquée" - -msgid "value" -msgstr "valeur" - -#, python-format -msgid "ID View applied to %i host." -msgstr "Vue d'identifiants appliquée à %i hôte." - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "Vue d'identifiants appliquée à %i hôtes." - -#, python-format -msgid "ID View cleared from %i host." -msgstr "Vue d'identifiants retirée de %i hôte." - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "Vue d'identifiants retirée de %i hôtes." - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" -"Vous essayez de référencer un groupe privé magique qui ne peut être " -"surchargé. Essayez plutôt de surcharger l'attribut GID de l'utilisateur." - -msgid "IPA object" -msgstr "objet IPA" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "La balise « %(anchor)s » ne peut être résolue." - -msgid "Default Trust View cannot contain IPA users" -msgstr "" -"La vue de la relation d'approbation par défaut ne peut contenir des " -"utilisateurs IPA" - -msgid "Add a new ID override." -msgstr "Ajouter une nouvelle surcharge d'identifiant." - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants « %(value)s » ajoutée" - -msgid "Delete an ID override." -msgstr "Supprimer une surcharge d'identifiants." - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants « %(value)s » supprimée" - -msgid "Modify an ID override." -msgstr "Modifier une surcharge d'identifiants." - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants « %(value)s » modifiée" - -msgid "ID override" -msgstr "Surcharge d'identifiants" - -msgid "ID overrides cannot be renamed" -msgstr "Les surchages d'identifiants ne peuvent être renommées" - -msgid "Search for an ID override." -msgstr "Rechercher une surcharge d'identifiants." - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d surcharge d'identifiants correspondante" -msgstr[1] "%(count)d surcharges d'identifiants correspondantes" - -msgid "Display information about an ID override." -msgstr "Afficher les informations d'une surcharge d'identifiants." - -msgid "User ID override" -msgstr "Surcharge d'identifiant utilisateur" - -msgid "User ID overrides" -msgstr "Surcharges d'identifiants utilisateurs" - -msgid "Group ID override" -msgstr "Surcharge d'identifiant de groupe" - -msgid "Group ID overrides" -msgstr "Surcharges d'identifiants de groupes" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" -"Ajouter un ou plusieurs certificats à l'entrée de l'utilisateur surchargé " -"(idoverrideuser)" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "Certificats ajoutés à l'utilisateur surchargé « %(value)s »" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "Supprimer les certificats de l'entrée de l'utilisateur surchargé" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "Certificats supprimés de l'utilisateur surchargé « %(value)s »" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants utilisateurs « %(value)s » ajoutée" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants utilisateurs « %(value)s » supprimée" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants utilisateurs « %(value)s » modifiée" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "%(count)d surcharge d'identifiants utilisateurs correspondante" -msgstr[1] "%(count)d surcharges d'identifiants utilisateurs correspondantes" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants de groupes « %(value)s » ajoutée" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants de groupes « %(value)s » supprimée" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "Surcharge d'identifiants de groupes « %(value)s » modifiée" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "%(count)d surcharge d'identifiants de groupes correspondante" -msgstr[1] "%(count)d surcharges d'identifiants de groupes correspondantes" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" -"Impossible de lire « originfilter » de « UPG Definition ». Vérifiez vos " -"permissions." - -#, fuzzy msgid "" "\n" -"Manage Certificate Authorities\n" -msgstr "Autorités de certification" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -msgid "Certificate Authority" -msgstr "Autorité de certification" - -msgid "Certificate Authorities" -msgstr "Autorités de certification" - -msgid "Name for referencing the CA" -msgstr "Nom de référencement de l'AC" - -msgid "Description of the purpose of the CA" -msgstr "Description de l'objet de l'AC" - -msgid "Authority ID" -msgstr "ID de l'autorité" - -msgid "Dogtag Authority ID" -msgstr "ID de l'autorité Dogtag" - -msgid "Subject DN" -msgstr "DN de l'objet" - -msgid "Subject Distinguished Name" -msgstr "Nom distinctif de l'objet" - -msgid "Issuer DN" -msgstr "DN de l'émetteur" - -msgid "Issuer Distinguished Name" -msgstr "Nom distinctif de l'émetteur" - -#, fuzzy -msgid "Base-64 encoded certificate." -msgstr "Certificat de l'hôte encodé en Base-64" - -#, fuzzy -msgid "Certificate chain" -msgstr "Certificat" - -#, fuzzy -msgid "X.509 certificate chain" -msgstr "Certificat d'AC" - -#, fuzzy -#| msgid "Version" -msgid "RSN Version" -msgstr "Version" - -#, fuzzy -#| msgid "Serial Number (hex)" -msgid "Random Serial Number Version" -msgstr "Numéro de série (hex)" - -msgid "Search for CAs." -msgstr "Rechercher des AC." - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "%(count)d AC correspondante" -msgstr[1] "%(count)d AC correspondantes" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "Display the properties of a CA." -msgstr "Afficher les propriétés d'une AC." - -msgid "Create a CA." -msgstr "Créer une AC." - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "AC « %(value)s » créée" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "Privilège « add » insuffisant pour l'entrée « %s »." - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "AC « %(value)s » supprimée" - -#, fuzzy -msgid "Insufficient privilege to delete a CA." -msgstr "Privilège « add » insuffisant pour l'entrée « %s »." - -msgid "IPA CA cannot be deleted" -msgstr "L'AC de IPA ne peut être supprimée" - -#, fuzzy -msgid "Must be disabled first" -msgstr "Doit être un nombre décimal" - -msgid "Modify CA configuration." -msgstr "Modifier la configuration de l'AC" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "AC « %(value)s » modifiée" - -#, fuzzy -msgid "Insufficient privilege to modify a CA." -msgstr "Privilège « add » insuffisant pour l'entrée « %s »." - -#, fuzzy -msgid "Disable a CA." -msgstr "Désactiver une LCA d'AC." - -#, fuzzy, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "LCA d'AC « %(value)s » désactivée" - -#, fuzzy -msgid "IPA CA cannot be disabled" -msgstr "L'AC de IPA ne peut être supprimée" - -#, fuzzy -msgid "Enable a CA." -msgstr "Activer une LCA d'AC." - -#, fuzzy, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "LCA d'AC « %(value)s » activée" - -#, fuzzy -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "Autorités de certification" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "Récupérer un certificat existant." - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "Vérifier l'état d'une demande de signature de certificat." - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" -"Raison de la révocation du certificat (1-10). Utilisez « ipa help cert » " -"pour plus d'informations sur les raisons de révocation." - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -#, fuzzy -msgid " * 0 - unspecified\n" -msgstr "Non-spécifié" - -#, fuzzy -msgid " * 1 - keyCompromise\n" -msgstr "Clé compromise" - -#, fuzzy -msgid " * 2 - cACompromise\n" -msgstr "AA compromis" - -#, fuzzy -msgid " * 3 - affiliationChanged\n" -msgstr "Affiliation modifiée" - -msgid " * 4 - superseded\n" -msgstr "" - -#, fuzzy -msgid " * 5 - cessationOfOperation\n" -msgstr "Cessation d'activité" - -#, fuzzy -msgid " * 6 - certificateHold\n" -msgstr "Certificat bloqué" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -#, fuzzy -msgid " * 9 - privilegeWithdrawn\n" -msgstr "Privilège retiré" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" -"Le principal '%(principal)s' n'est pas autorisé à utiliser l'AC '%(ca)s' " -"avec le profil '%(profile_id)s' pour l'émission de certificat." - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, fuzzy, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "Hôte « %(host)s » introuvable" - -msgid "Issuing CA" -msgstr "AC émettrice" - -msgid "Name of issuing CA" -msgstr "Nom de l'AC émettrice" - -#, fuzzy -msgid "Subject email address" -msgstr "Adresse courriel" - -#, fuzzy -msgid "Subject DNS name" -msgstr "DN de l'objet" - -#, fuzzy -msgid "Subject X.400 address" -msgstr "Adresse" - -#, fuzzy -msgid "Subject directory name" -msgstr "Base du répertoire utilisateur" - -msgid "Subject EDI Party name" -msgstr "" - -#, fuzzy -msgid "Subject URI" -msgstr "Sujet" - -#, fuzzy -msgid "Subject IP Address" -msgstr "A Adresse IP" - -#, fuzzy -msgid "Subject OID" -msgstr "DN de l'objet" - -#, fuzzy -msgid "Subject UPN" -msgstr "DN de l'objet" - -#, fuzzy -msgid "Subject Kerberos principal name" -msgstr "Principal Kerberos" - -#, fuzzy -msgid "Subject Other Name" -msgstr "Nom distinctif de l'objet" - -msgid "Serial number (hex)" -msgstr "Numéro de série (hex)" - -msgid "Request status" -msgstr "État de la demande" - -#, fuzzy -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "ajoute automatiquement le principal s'il n'existe pas" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "Aucun « Common Name » n'a été trouvé dans le sujet de cette demande." - -#, fuzzy, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" -"Le nom d'hôte indiqué dans le sujet de la demande « %(cn)s » ne correspond " -"pas au nom d'hôte du principal « %(hostname)s »" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" -"Le nom d'hôte indiqué dans le sujet de la demande « %(cn)s » ne correspond " -"pas au nom d'hôte du principal « %(hostname)s »" - -msgid "DN commonName does not match user's login" -msgstr "" -"Le « commonName » du DN ne correspond pas à l'identifiant de connexion de " -"l'utilisateur" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" -"L'adresse email du DN ne correspond à aucune des adresses email de " -"l'utilisateur" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" -"Privilège « write » insuffisant sur l'attribut « userCertificate » de " -"l'entrée « %s »." - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" -"Il est interdit d'utiliser un « subject alt name » (nom alternatif) de type " -"%s pour les principaux d'utilisateurs." - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" -"Le principal du service pour le nom %s alternatif du sujet dans la demande " -"de certificat n'existe pas" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" -"Privilège insuffisant pour créer un certificat avec le nom de sujet « %s » " -"alternatif." - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" -"Le principal « %s » du nom alternatif ne correspond pas au principal demandé" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" -"L'attribut RFC822Name ne correspond à aucune des adresses email de " -"l'utilisateur" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" -"Il est interdit d'utiliser un « subject alt name » (nom alternatif) de type " -"%s pour les principaux autres qu'utilisateurs." - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "Le type %s de nom alternatif de sujet est interdit" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "L'autorité de certification « %s » est désactivée" - -#, fuzzy -msgid "'add' option" -msgstr "Option sudo" - -msgid "The principal for this request doesn't exist." -msgstr "Le principal pour cette demande n'existe pas." - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "Révoqué" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" -"Raison de la révocation du certificat (1-10). Utilisez « ipa help cert » " -"pour plus d'informations sur les raisons de révocation." - -#, python-format -msgid "Owner %s" -msgstr "%s propriétaire" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" -"Certificat de l'AC « %(ca)s » avec le numéro de série %(serial)s introuvable" - -msgid "7 is not a valid revocation reason" -msgstr "7 n'est pas une raison de révocation valide" - -#, fuzzy -msgid "Status of the certificate" -msgstr "Fichier dans lequel stocker le certificat." - -#, fuzzy -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" -"Les résultats doivent uniquement contenir un attribut de clé principale " -"(« name »)" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "%(count)d certificat correspondant" -msgstr[1] "%(count)d certificats correspondants" - -#, fuzzy, python-format -msgid "Search for certificates with these owner %s." -msgstr "Rechercher des groupes réseaux dont les membres sont ces hôtes." - -#, fuzzy, python-format -msgid "Search for certificates without these owner %s." -msgstr "Rechercher des groupes réseaux dont les membres ne sont pas ces hôtes." - -msgid "" -"\n" -"Sudo Rules\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" msgstr "" "\n" -"Règles sudo\n" +"Le coffre-fort standard utilise un mécanisme sécurisé pour le\n" +"transport et le stockage du secret. Le secret ne peut être récupéré\n" +"que par les utilisateurs ayant accès au coffre.\n" msgid "" "\n" @@ -29644,59 +5971,129 @@ msgstr "" msgid "" "\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" msgstr "" "\n" -"IPA offre les moyens de configurer les divers aspects de sudo :\n" -" Users : utilisateur/groupe autorisés à invoquer sudo.\n" -" Hosts : hôte/groupe d'hôte dont l'utilisateur peut invoquer sudo.\n" -" Allow Command : commande donnée pouvant être exécutée via sudo.\n" -" Deny Command : commande donnée interdite d'exécution avec sudo.\n" -" RunAsUser : utilisateur ou groupe dont les droits sudo pourront être " -"invoqués.\n" -" RunAsGroup : groupe dont les droits sudo associés au GID pourront être " -"invoqués.\n" -" Options : les diverses options de sudoers pouvant modifier le " -"comportement de sudo.\n" +"Commandes sudo\n" +"\n" +"Commandes utilisées en tant que briques de base pour sudo\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter une nouvelle commande\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Supprimer une commande\n" +" ipa sudocmd-del /usr/bin/less\n" msgid "" "\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" msgstr "" +"\n" +"Commandes sudo\n" +"\n" +"Commandes utilisées en tant que briques de base pour sudo\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter une nouvelle commande\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Supprimer une commande\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" msgid "" "\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" +"Sudo Rules\n" msgstr "" "\n" -"Il est possible d'ajouter aux règles sudo l'indication de l'ordre dans\n" -"lequel elles doivent être examinées (si le client le prend en charge).\n" -"Cet ordre est défini par un entier, qui doit être unique.\n" +"Règles sudo\n" msgid "" "\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" msgstr "" "\n" -"IPA permet la désignation d'un « binddn » à utiliser avec sudo situé à :\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"Le coffre-fort symétrique est similaire au coffre standard, mais il \n" +"pré-chiffre le secret à l'aide d'un mot de passe avant son transport.\n" +"Le secret ne peut être récupéré qu'à l'aide du même mot de passe.\n" +"\n" + +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" +"\n" +"« automember-rebuild » s'utilise pour appliquer rétroactivement les règles\n" +"d'adhésion automatique aux entrées présentes, et ainsi revoir leur " +"adhésion.\n" + +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" +"\n" +"Il y a un certain nombre de cibles autorisées :\n" +"1. sous-arbre : un DN ; la permission s'applique au sous-arbre sous ce DN\n" +"2. filtre de cibles : un filtre LDAP\n" +"3. cible : un DN avec possiblement des jokers, indique les entrées\n" +"auxquelles la permission s'applique\n" + +msgid "" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +msgstr "" +"\n" +"Dans beaucoup de types RR de DNS, les données DNS mises dans un serveur " +"LDAP\n" +"ne sont pas qu'un scalaire, ex. adresse IP ou nom de domaine, mais une\n" +"structure de données parfois complexe. Un bon exemple est l'enregistrement\n" +"LOC [RFC1876] constitué de nombre de parties obligatoires ou optionnelles\n" +"(degrés-minutes-secondes de latitude et longitude, altitude ou précision).\n" + +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" +"\n" +"Ce code est une extension du greffon « otptoken » ; il fournit la prise en\n" +"charge pour lire/écrire des jetons YubiKey directement.\n" msgid "" "\n" @@ -29713,108 +6110,701 @@ msgstr "" msgid "" "\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" msgstr "" "\n" -" Création d'une nouvelle règle :\n" -" ipa sudorule-add readfiles\n" +"Afin de vérifier qu'aucun serveur n'est déconnecté dans la topologie d'un\n" +"suffixe donné, utiliser :\n" +" ipa topologysuffix-verify $suffix\n" msgid "" "\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" msgstr "" "\n" -" Ajout d'un objet de commande sudo et ajout en tant que commande autorisée " -"dans la règle :\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"Topologie\n" +"\n" +"Gestion de la topologie de réplication.\n" msgid "" "\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" msgstr "" "\n" -" Ajout d'un hôte à la règle :\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"Topologie\n" +"\n" +"Gestion de la topologie de réplication.\n" +"\n" +"Nécessite a minima le niveau 1 de domaine.\n" msgid "" "\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" msgstr "" "\n" -" Ajout d'un utilisateur à la règle :\n" -" ipa sudorule-add-user readfiles --users jsmith\n" +"UTILISATION d'OPTIONS STRUCTURÉES PAR TYPE\n" msgid "" "\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" msgstr "" "\n" -" Ajout d'une règle sudo spéciale pour la configuration du serveur sudo par " -"défaut :\n" -" ipa sudorule-add defaults\n" +"Les coffres-forts utilisateurs sont des coffres appartenant à un " +"utilisateur\n" +"en particulier. Les coffres privés appartiennent à l'utilisateur courant. " +"Les\n" +"coffres de services appartiennent à un service. Les coffres partagés \n" +"appartiennent à l'administrateur, mais peuvent être utilisés par d'autres\n" +"utilisateurs ou services.\n" msgid "" "\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" msgstr "" "\n" -" Définition d'une option par défaut pour sudo :\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" - -#, fuzzy -msgid "" +"Utilisateurs\n" "\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" +"Gestion des utilisateurs. Tous les utilisateurs sont de type POSIX.\n" +"\n" +"IPA prend en charge un grand nombre de formats de noms d'utilisateurs.\n" +"Certaines restrictions peuvent cependant s'appliquer dans un environnement\n" +"particulier. Par exemple, les noms d'utilisateurs commençant par un chiffre\n" +"ou ceux dépassant une certaine longueur peuvent poser problème à certains\n" +"systèmes UNIX.\n" +"Utiliser la commande « ipa config-mod » afin de modifier le format de nom\n" +"d'utilisateur autorisé par les outils IPA.\n" +"\n" +"La désactivation d'un compte utilisateur lui interdit d'obtenir de\n" +"nouveaux justificatifs d'identité Kerberos. Elle n'invalide pas les\n" +"justificatifs déjà obtenus.\n" +"\n" +"L'administration des mots de passe ne fait pas partie de ce module. Pour\n" +"plus d'informations sur ce sujet, cf. : « ipa help passwd »\n" +"\n" +"Le verrouillage de compte en cas d'échec de mot de passe est déclenché par\n" +"le maître IPA de l'utilisateur. La commande « user-status » permet de\n" +"l'identifier. C'est sur ​​ce maître que l'administrateur doit déverrouiller\n" +"l'utilisateur.\n" +"\n" +"EXEMPLES :\n" +"\n" +" Ajouter un nouvel utilisateur :\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Trouver tous les utilisateurs dont l'entrée contient la chaîne « Tim » :\n" +" ipa user-find Tim\n" +"\n" +" Trouver tous les utilisateurs ayant « Tim » comme prénom :\n" +" ipa user-find --first=Tim\n" +"\n" +" Désactiver un compte utilisateur :\n" +" ipa user-disable tuser1\n" +"\n" +" Activer un compte utilisateur :\n" +" ipa user-enable tuser1\n" +"\n" +" Supprimer un utilisateur :\n" +" ipa user-del tuser1\n" "\n" -" Définition d'une option par défaut pour sudo :\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" msgid "" "\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +"Vaults\n" msgstr "" +"\n" +"Coffres-forts (vaults)\n" -msgid "this option has been deprecated." -msgstr "cette option a été abandonnée." +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" +"\n" +"Vérifier la topologie de réplication pour le suffixe.\n" +"\n" +"Vérifications effectuées :\n" +" 1. vérfier si la topologie n'est pas déconnectée. En d'autres mots, si des " +"chemins\n" +" de réplication existent bien entre tous les serveurs.\n" +" 2. vérifier si tous les serveurs n'ont pas un nombre supérieur à celui " +"recommandé\n" +" d'agrément de réplication.\n" -msgid "sudo rules" -msgstr "règles sudo" +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" +"\n" +"À l'ajout d'un enregistrement, on peut utiliser des options RR spécifiques\n" +"ou standard pour une valeur brute, mais elles ne doivent pas être combinées\n" +"dans une même opération. En modifiant une entrée existante, des options RR\n" +"spécifiques peuvent s'utiliser pour modifier une partie d'un enregistrement\n" +"DNS où l'option standard est utilisée pour indiquer la valeur modifiée.\n" +"Cet exemple démontre une modification de préférence d'enregistrement MX de\n" +"0 à 1 dans un enregistrement sans modifier l'échangeur :\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgid "Sudo Rules" -msgstr "Règles sudo" +msgid "" +"\n" +"YubiKey Tokens\n" +msgstr "" +"\n" +"Jetons YubiKey\n" -msgid "Sudo Rule" -msgstr "Règle sudo" +msgid " ipa --help" +msgstr " ipa --help" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr " -8 '${cn}'" #, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" msgstr "" -"le rang doit être une valeur unique (%(order)d déjà utilisée par %(rule)s)" +" De manière alternative, les serveurs suivants sont capables d'exécuter " +"cette commande : %(masters)s" #, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "Règle sudo « %(value)s » ajoutée" +msgid "\"%s\" is not a valid permission type" +msgstr "« %s » n'est pas un type de permission autorisé" #, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Règle sudo « %(value)s » supprimée" +msgid "\"%s\" is not an object type" +msgstr "« %s » n'est pas un type d'objet" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "${count} certificate(s) présent(s)" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "${count} élément(s) ajouté(s)" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "${count} élément(s) supprimé(s)" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "${count} élément(s) désactivé(s)" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "${count} élément(s) activé(s)" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "${count} élément(s) supprimé(s)" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "${count} option(s) supprimée(s)" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "${count} utilisateur(s) activé(s)" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "${count} utilisateur(s) restauré(s)" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "${count} utilisateur(s) mis en attente" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "Réglages de ${primary_key} de ${entity}" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "${primary_key} de ${entity} modifié" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "${entity} ajoutée avec succès" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "${primary_key} s'applique à :" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "${primary_key} est membre de :" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "${primary_key} est géré par :" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "membres de ${primary_key} :" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "Surcharges de ${primary_key} :" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "${product}, version : ${version}" #, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "Règle sudo « %(value)s » modifiée" +msgid "%(attr)s does not contain '%(value)s'" +msgstr "%(attr)s ne contient pas '%(value)s'" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "%(attr)s : syntaxe invalide." + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "%(attr)s : une seule valeur autorisée." + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" +"La recherche LDAP %(container)s ne renvoie aucun résultat (base de " +"recherche : %(search_base)s, classe d'objet : %(objectclass)s)" + +#, python-format +msgid "" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +"%(count)d enregistrement %(type)s sauté. Une seule valeur modifiable par " +"enregistrement DNS." +msgstr[1] "" +"%(count)d enregistrements %(type)s sautés. Une seule valeur modifiable par " +"enregistrement DNS." + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d ACI correspondant" +msgstr[1] "%(count)d ACI correspondant" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "%(count)d LCA d'AC correspondante" +msgstr[1] "%(count)d LCA d'AC correspondantes" + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "%(count)d AC correspondante" +msgstr[1] "%(count)d AC correspondantes" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "%(count)d serveur DNS correspondant" +msgstr[1] "%(count)d serveurs DNS correspondants" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "%(count)d surcharge d'identifiants de groupes correspondante" +msgstr[1] "%(count)d surcharges d'identifiants de groupes correspondantes" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "%(count)d règle HBAC correspondante" +msgstr[1] "%(count)d règles HBAC correspondantes" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "%(count)d groupe de services HBAC correspondant" +msgstr[1] "%(count)d groupes de services HBAC correspondant" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "%(count)d service HBAC correspondant" +msgstr[1] "%(count)d services HBAC correspondant" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "%(count)d vue d'identifiants correspondante" +msgstr[1] "%(count)d vues d'identifiants correspondantes" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "%(count)d surcharge d'identifiants correspondante" +msgstr[1] "%(count)d surcharges d'identifiants correspondantes" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "%(count)d emplacement IPA correspondant" +msgstr[1] "%(count)d emplacements IPA correspondants" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "%(count)d serveur IPA correspondant" +msgstr[1] "%(count)d serveurs IPA correspondants" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "%(count)d jeton OTP correspond" +msgstr[1] "%(count)d jetons OTP correspondant" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "%(count)d serveur mandataire RADIUS correspondant" +msgstr[1] "%(count)d serveurs mandataires RADIUS correspondant" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "%(count)d mappe d'utilisateurs SELinux correspondant" +msgstr[1] "%(count)d mappe d'utilisateurs SELinux correspondant" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "%(count)d groupe de commandes Sudo correspondant" +msgstr[1] "%(count)d groupes de commandes Sudo correspondant" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "%(count)d commande sudo correspondant" +msgstr[1] "%(count)d commandes sudo correspondant" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "%(count)d règle sudo correspondant" +msgstr[1] "%(count)d règles sudo correspondant" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "%(count)d surcharge d'identifiants utilisateurs correspondante" +msgstr[1] "%(count)d surcharges d'identifiants utilisateurs correspondantes" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "%(count)d clé « automount » correspondante" +msgstr[1] "%(count)d clés « automount » correspondantes" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "%(count)d emplacement « automount » correspondant" +msgstr[1] "%(count)d emplacements « automount » correspondants" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "%(count)d carte « automount » correspondante" +msgstr[1] "%(count)d cartes « automount » correspondantes" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "%(count)d certificat correspondant" +msgstr[1] "%(count)d certificats correspondants" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "%(count)d délégation correspondante" +msgstr[1] "%(count)d délégations correspondantes" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d groupe correspondant" +msgstr[1] "%(count)d groupes correspondants" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "%(count)d hôte correspondant" +msgstr[1] "%(count)d hôtes correspondant" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "%(count)d groupe d'hôtes correspondant" +msgstr[1] "%(count)d groupes d'hôtes correspondant" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "%(count)d groupe réseau correspondant" +msgstr[1] "%(count)d groupes réseau correspondant" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "%(count)d permission correspondant" +msgstr[1] "%(count)d permissions correspondant" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "%(count)d greffon chargé" +msgstr[1] "%(count)d greffons chargés" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "%(count)d privilège correspondant" +msgstr[1] "%(count)d privilèges correspondant" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "%(count)d profil correspondant" +msgstr[1] "%(count)d profils correspondants" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "%(count)d plage correspondant" +msgstr[1] "%(count)d plages correspondant" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "%(count)d rôle correspondant" +msgstr[1] "%(count)d rôles correspondant" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "%(count)d règle correspondante" +msgstr[1] "%(count)d règles correspondantes" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "%(count)d segment correspondant" +msgstr[1] "%(count)d segment correspondants" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "%(count)d permission de libre service correspondant" +msgstr[1] "%(count)d permissions de libre service correspondant" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "%(count)d règle de délégation de service correspondante" +msgstr[1] "%(count)d règles de délégation de service correspondantes" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "%(count)d cible de délégation de service correspondante" +msgstr[1] "%(count)d cibles de délégation de service correspondantes" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "%(count)d service correspondant" +msgstr[1] "%(count)d services correspondant" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "%(count)d suffixe de topologie correspondant" +msgstr[1] "%(count)d suffixes de topologie correspondants" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "%(count)d confiance correspondante" +msgstr[1] "%(count)d confiances correspondantes" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d utilisateur correspondant" +msgstr[1] "%(count)d utilisateurs correspondant" + +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d variables" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "%(count)d coffre-fort correspondant" +msgstr[1] "%(count)d coffre-forts correspondants" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "%(count)s rôle serveur correspondant" +msgstr[1] "%(count)s rôles serveur correspondants" + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "Client %(cver)s incompatible avec le serveur %(sver)s à « %(server)s »" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "%(desc)s : %(info)s" + +#, python-format +msgid "%(exception)s" +msgstr "%(exception)s" + +#, python-format +msgid "%(host)s failed" +msgstr "%(host)s en échec" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "%(host)s en échec : %(error)s" + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" +"%(key)s ne peut pas être supprimé car %(label)s %(dependent)s le requiert" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" +"%(key)s ne peut être supprimé ou désactivé étant le dernier membre de " +"%(container)s %(label)s" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "%(label)s %(key)s ne peut être supprimé ou modifié : %(reason)s" + +#, python-format +msgid "%(line)s" +msgstr "%(line)s" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "le certificat %(name)s est invalide" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "L'attribut par défaut %(attr)s de %(obj)s n'est pas autorisé !" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "L'objet %(oname)s avec le nom « %(pkey)s » existe déjà" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "« %(oname)s » de « %(otype)s » introuvable" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s : %(oname)s introuvable" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s : %(oname)s introuvable" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "%(port)s n'est pas un port valide" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" +"Délai échu pour la tâche LDAP %(task)s, DN de la tâche : « %(task_dn)s »" #, python-format msgid "" @@ -29823,314 +6813,378 @@ msgstr "" "la catégorie %(type)s ne peut pas être définie à « all » tant que sont " "alloués %(objects)s" -msgid "users" -msgstr "utilisateurs" - -msgid "command" -msgstr "commande" - -msgid "commands" -msgstr "commandes" - -msgid "runAs user" -msgstr "utilisateur runAs" - -msgid "runAs users" -msgstr "utilisateurs runAs" - -msgid "group runAs" -msgstr "groupe runAs" - -msgid "runAs groups" -msgstr "groupes runAs" +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "%(user)s n'est pas un utilisateur POSIX" #, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "%(count)d règle sudo correspondant" -msgstr[1] "%(count)d règles sudo correspondant" - -msgid "commands cannot be added when command category='all'" -msgstr "" -"des commandes ne peuvent pas être ajoutées quand la catégorie de commande " -"est « all »" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" -"des utilisateurs ne peuvent pas être ajoutés quand la catégorie « RunAs " -"User » ou « RunAs Group » est « all »" +msgid "%(value)s" +msgstr "%(value)s" #, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "« RunAsUser » n'accepte pas « %(name)s » comme nom d'utilisateur" +msgid "%i CA added." +msgstr "%i AC ajoutée." #, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "« RunAsUser » n'accepte pas « %(name)s » comme nom de groupe" +msgid "%i CA removed." +msgstr "%i AC supprimée." #, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "« RunAsGroup » n'accepte pas « %(name)s » comme nom de groupe" +msgid "%i CAs added." +msgstr "%i AC ajoutées." #, python-format -msgid "Added user \"%(value)s\"" -msgstr "Utilisateur « %(value)s » ajouté" - -msgid "Default group for new users is not POSIX" -msgstr "Le groupe par défaut des nouveaux utilisateurs n'est pas POSIX" +msgid "%i CAs removed." +msgstr "%i AC supprimées." #, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Utilisateur « %(value)s » supprimé" +msgid "%i host or hostgroup added." +msgstr "%i hôte ou groupe d'hôtes ajouté." -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Preserved user \"%(value)s\"" -msgstr "Utilisateur « %(value)s » supprimé" +#, python-format +msgid "%i host or hostgroup removed." +msgstr "%i hôte ou groupe d'hôtes supprimé." + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "%i hôtes ou groupes d'hôtes ajoutés." + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "%i hôtes ou groupes d'hôtes supprimés." + +#, python-format +msgid "%i profile added." +msgstr "%i profil ajouté." + +#, python-format +msgid "%i profile removed." +msgstr "%i profil supprimé." + +#, python-format +msgid "%i profiles added." +msgstr "%i profils ajoutés." + +#, python-format +msgid "%i profiles removed." +msgstr "%i profils supprimés." + +#, python-format +msgid "%i service added." +msgstr "%i service ajouté." + +#, python-format +msgid "%i service removed." +msgstr "%i service supprimé." + +#, python-format +msgid "%i services added." +msgstr "%i services ajoutés." + +#, python-format +msgid "%i services removed." +msgstr "%i services supprimés." + +#, python-format +msgid "%i user or group added." +msgstr "%i utilisateur ou groupe ajouté." + +#, python-format +msgid "%i user or group removed." +msgstr "%i utilisateur ou groupe supprimé." + +#, python-format +msgid "%i users or groups added." +msgstr "%i utilisateurs ou groupes ajoutés." + +#, python-format +msgid "%i users or groups removed." +msgstr "%i utilisateurs ou groupes supprimés." + +#, python-format +msgid "%s" +msgstr "%s" + +#, python-format +msgid "%s Record" +msgstr "Enregistrement %s" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "%s n'est pas un attribut valide." + +#, python-format +msgid "%s record" +msgstr "enregistrement %s" + +#, python-format +msgid "%s to add" +msgstr "%s à ajouter" + +#, python-format +msgid "%s to exclude from migration" +msgstr "%s à exclure de la migration" + +#, python-format +msgid "%s to remove" +msgstr "%s à supprimer" + +#, python-format +msgid "%s: group not found" +msgstr "%s : groupe introuvable" #, python-format msgid "%s: user is already preserved" msgstr "%s : l'utilisateur est déjà préservé" -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Utilisateur « %(value)s » modifié" +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "« ${port} » n'est pas un port valide" #, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "Compte utilisateur « %(value)s » restauré" +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "La commande « %(command)s » est obsolète. %(additional_info)s" #, python-format -msgid "user \"%s\" is already active" -msgstr "l'utilisateur « %s » est déjà actif" +msgid "'%(entry)s' doesn't have a certificate." +msgstr "'%(entry)s' ne possède pas de certificat." #, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "Compte utilisateur en attente « %(value)s »" +msgid "'%(name)s' is required" +msgstr "« %(name)s » est requis" #, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "Compte utilisateur « %(value)s » désactivé" +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "L'option « %(option)s » est obsolète. %(additional_info)s" #, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "Compte utilisateur « %(value)s » activé" +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "'%(required)s' ne doit pas être vide lorsque '%(name)s' est défini" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "'%s' est une partie requise d'un enregistrement DNS" + +msgid "(deprecated)" +msgstr "(obsolète)" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "(cf. RFC %s pour plus de détails)" msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" msgstr "" -"\n" -" Déverrouiller un compte utilisateur\n" -"\n" -" Un compte utilisateur peut se verrouiller si le mot de passe n'est pas\n" -" saisi correctement plusieurs fois de suite dans un laps de temps donné\n" -" défini par la politique du mot de passe. Le verrouillage d'un compte " -"est\n" -" un état temporaire ; il peut être déverrouillé par un administrateur." +". Vérifier le GID du groupe existant. Utiliser l'option « --group-overwrite-" +"gid » pour surcharger le GID" -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "Compte utilisateur « %(value)s » déverrouillé" +msgid "7 is not a valid revocation reason" +msgstr "7 n'est pas une raison de révocation valide" -msgid "Failed logins" -msgstr "Connexions ayant échoué" - -msgid "Last successful authentication" -msgstr "Dernière authentification réussie" - -msgid "Last failed authentication" -msgstr "Dernière authentification ayant échoué" - -msgid "Time now" -msgstr "Heure actuelle" - -#, fuzzy -#| msgid "Password change complete" -msgid "Password grace count" -msgstr "Modification du mot de passe terminée" +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" +"
  1. Créer une base de données de certificats ou utiliser une base " +"existante. Pour créer une nouvelle base :
    # certutil -N -d <" +"database path>
  2. Créer un CSR avec le sujet CN=<" +"${cn_name}>,O=<realm>, par exemple :
    # certutil -R -" +"d <database path> -a -g <key size> -s 'CN=${cn},O=${realm}'${san}" +"
  3. Copier/coller le CSR (depuis -----BEGIN NEW " +"CERTIFICATE REQUEST----- jusque -----END NEW CERTIFICATE " +"REQUEST-----) dans la zone de texte ci-dessous :
" msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" msgstr "" -"\n" -" État verrouillé d'un compte utilisateur\n" -"\n" -" Un compte peut être verrouillé si un mot de passe incorrect est entre à\n" -" plusieurs reprises dans un laps de temps donnée selon la politique de\n" -" contrôle des mots de passe. Le verrouillage du compte est un état\n" -" temporaire ; le compte peut être déverrouillé par un administrateur.\n" -"\n" -" Ce dernier se connecte sur l'IPA maître et affiche l'état du\n" -" verrouillage de chacun.\n" -"\n" -" Pour savoir si un compte est verrouillé sur un serveur donné, vous " -"devez\n" -" comparer le nombre d'échecs de connexion et l'heure du dernier échec.\n" -" Pour qu'un compte soit verrouillé, le nombre d'échecs doit dépasser le\n" -" maximum autorisé dans l'intervalle de temps donné tel que défini dans " -"la\n" -" politique de mot de passe propre à l'utilisateur.\n" -"\n" -" Le compteur d'échecs de connexion n'est incrémenté que lorsqu'un\n" -" utilisateur tente une connexion, il est donc possible qu'un compte\n" -" paraisse bloqué mais que la dernière tentative de connexion soit\n" -" antérieure à la durée de verrouillage de la règle. Cela\n" -" signifie que l'utilisateur peut tenter de se connecter à nouveau." +"

La méthode implicite (mot de passe) est celle utilisée si aucune méthode " +"n'est choisie.

Mot de passe + double facteur : LDAP " +"et Kerberos permettent l'authentification avec l'un ou l'autre des type " +"d'authentification, mais Kerberos utilise une méthode de pré-" +"authentification qui nécessite d'utiliser un ccache blindé.

RADIUS avec un autre type : Kerberos utilise toujours " +"RADIUS, mais pas LDAP. LDAP ne reconnait que le mot de passe et une des " +"options d'authentification à double facteur.

" -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "%(host)s en échec : %(error)s" +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" +"

Paramètrage spécifique à l'utilisateur, surcharge la configuration " +"globale si l'une des options est cochée.

Mot de passe + double " +"facteur : LDAP est Kerberos permettent l'authentification avec l'un " +"ou l'autre des types d'authentification, mais Kerberos utilise une méthode " +"de pré-authentification qui nécessite d'utiliser un ccache blindé.

RADIUS avec un autre type : Kerberos utilise toujours " +"RADIUS, mais pas LDAP. LDAP ne reconnait que le mot de passe et une des " +"options d'authentification à double facteur.

" -#, python-format -msgid "%(host)s failed" -msgstr "%(host)s en échec" +msgid "A Create reverse" +msgstr "A Créer un enregistrement inverse" -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "Compte désactivé : %(disabled)s" +msgid "A IP Address" +msgstr "A Adresse IP" -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "Certificats ajoutés à l'utilisateur « %(value)s »" +msgid "A SYSTEM permission may not be modified or removed" +msgstr "Une permission SYSTEM ne peut ni être modifiée, ni supprimée" -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "Certificats supprimés de l'utilisateur « %(value)s »" +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" +"Une liste séparée par des virgules des champs à explorer pour une recherche " +"de groupes" -#, fuzzy -msgid "Add new principal alias to the user entry" -msgstr "Ajouter un nouvel alias de principal à l'entrée de l'hôte" +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" +"Une liste, séparée avec des virgules, des champs à explorer pour une " +"recherche d'utilisateurs" -#, fuzzy, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "Alias ajoutés à l'hôte « %(value)s »" +msgid "A description of this RADIUS proxy server" +msgstr "Description de ce serveur mandataire RADIUS" -#, fuzzy -msgid "Remove principal alias from the user entry" -msgstr "Supprimer un alias de principal de l'entrée d'un hôte" +msgid "A description of this auto member rule" +msgstr "Une description de cette règle d'auto-adhésion" -#, fuzzy, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "Alias supprimés pour l'hôte « %(value)s »" +msgid "A description of this command" +msgstr "Description de la commande" -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "tous les maîtres doivent avoir le rôle %(role)s activé" +msgid "A description of this host" +msgstr "Une description de cet hôte" -#, python-format -msgid "must have %(role)s role enabled" -msgstr "doit avoir le rôle %(role)s activé" +msgid "A description of this host-group" +msgstr "Description de ce groupe d'hôtes" -#, fuzzy -msgid "must be enabled only on a single master" -msgstr "doit être mis entre parenthèses" +msgid "A description of this role-group" +msgstr "Description de ce groupe de rôles" -msgid "Request must be a dict" -msgstr "La requête doit être un dictionnaire" +msgid "A dictionary representing an LDAP entry" +msgstr "Un annuaire représentant une entrée LDAP" -msgid "Request is missing \"method\"" -msgstr "Il manque le paramètre « method » à la requête" +msgid "A group may not be a member of itself" +msgstr "Un groupe ne peut être membre de lui-même" -msgid "Request is missing \"params\"" -msgstr "Il manque le paramètre « params » à la requête" +msgid "A group may not be added as a member of itself" +msgstr "Un groupe ne peut être ajouté comme membre de lui-même" -msgid "params must be a list" -msgstr "« params » doit être une liste" +msgid "A host willing to act as a key exchanger" +msgstr "Un hôte prêt à jouer le rôle de changeur de clé" -msgid "params must contain [args, options]" -msgstr "« params » doit contenir [args, options]" +msgid "A host willing to act as a mail exchanger" +msgstr "Un hôte pouvant agir comme changeur de messagerie" -msgid "params[0] (aka args) must be a list" -msgstr "« params[0] » (alias « args ») doit être une liste" +msgid "A hostname which this alias hostname points to" +msgstr "Un nom d'hôte vers lequel cet alias pointe" -msgid "params[1] (aka options) must be a dict" -msgstr "« params[1] » (alias « options ») doit être un dictionnaire " +msgid "A list of ACI values" +msgstr "Une liste de valeurs d'ACI" + +msgid "A list of LDAP entries" +msgstr "Une liste d'entrées LDAP" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "Est attendue une liste des utilisateurs SELinux, délimités par des $" + +msgid "A managed group cannot have a password policy." +msgstr "Un groupe géré ne peut pas avoir de politique de mot de passe." #, python-format msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" msgstr "" -"\n" -"La topologie de réplication dans le suffixe « %(suffix)s » est " -"déconnectée :\n" -"%(errors)s" +"Un problème est survenu en vérifiant que tous les membres étaient %(verb)s : " +"%(exc)s" -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" -"\n" -"La suppression de « %(hostname)s » engendre une déconnexion de la topologie " -"de réplication pour le suffixe « %(suffix)s » :\n" -"%(errors)s" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" -"La topologie ne permet pas au serveur %(server)s de se répliquer avec les " -"serveurs :" +msgid "A record" +msgstr "Enregistrement A" msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" +"A space separated list of attributes which are removed from replication " +"updates." msgstr "" -"\n" -"Classes pour gérer des jonctions de confiance avec des appels DCE-RPC\n" -"\n" -"Le code de ce module s'appuie pour l'essentiel sur le paquet\n" -"« samba4-python » et les liaisons python de Samba4.\n" +"Une liste séparée par des espaces d'attributs qui seront supprimés lors des " +"mises à jour de la réplication." -msgid "CIFS server denied your credentials" -msgstr "Le serveur CIFS a refusé vos justificatifs d'identité" +msgid "A string searched in all relevant object attributes" +msgstr "" +"Une chaîne de caractères recherchée dans tous les attributs d'objets " +"pertinents" -msgid "communication with CIFS server was unsuccessful" -msgstr "la communication avec le serveur CIFS a échoué" +msgid "A6 Record data" +msgstr "Données d'enregistrement A6" + +msgid "A6 record" +msgstr "Enregistrement A6" + +msgid "AA Compromise" +msgstr "AA compromis" + +msgid "AAAA Create reverse" +msgstr "AAAA Créer un enregistrement inverse" + +msgid "AAAA IP Address" +msgstr "AAAA Adresse IP" + +msgid "AAAA record" +msgstr "Enregistrement AAAA" + +msgid "ACI" +msgstr "ACI" + +msgid "ACI name" +msgstr "Nom d'ACI" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "ACI de la permission %s introuvable" + +msgid "ACI prefix" +msgstr "Préfixe d'ACI" + +msgid "ACI prefix is required" +msgstr "Un préfixe ACI est requis" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "ACI de nom « %s » introuvable" + +msgid "ACIs" +msgstr "ACI" + +msgid "ACL name" +msgstr "Nom de la LCA" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "" +"Le contrôleur de domaine AD n'a pas été en mesure aucun des contrôleurs de " +"domaine IPA. Cela est probablement dû à un problème DNS ou de pare-feu." + +msgid "AD Trust setup" +msgstr "Configuration de la confiance AD" msgid "AD domain controller" msgstr "Contrôleur de domaine AD" -msgid "unsupported functional level" -msgstr "niveau de fonctionnalité non pris en charge" - msgid "" "AD domain controller complains about communication sequence. It may mean " "unsynchronized time on both sides, for example" @@ -30139,82 +7193,1217 @@ msgstr "" "communication. Cela peut signifier qu'il y a de mauvaises synchronisations " "de l'un ou l'autre côté, par exemple." -msgid "Cannot find specified domain or server name" -msgstr "Impossible de trouver le domaine ou le serveur indiqué" +msgid "AFSDB Hostname" +msgstr "Nom d'hôte AFSDB" -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" -"Le contrôleur de domaine AD n'a pas été en mesure aucun des contrôleurs de " -"domaine IPA. Cela est probablement dû à un problème DNS ou de pare-feu." +msgid "AFSDB Subtype" +msgstr "Sous-type AFSDB" -msgid "At least the domain or IP address should be specified" -msgstr "Au moins un nom de domaine ou une adresse IP doit être indiqué" +msgid "AFSDB record" +msgstr "Enregistrement AFSDB" + +msgid "API Browser" +msgstr "Navigateur de l'API" #, python-format msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" msgstr "" +"Le numéro de version de l'API n'a pas été envoyé, la compatibilité " +"ascendante n'est pas garantie. La version de l'API du serveur est supposée " +"être %(server_version)s" -msgid "no trusted domain is configured" -msgstr "pas de relation de confiance configurée" +msgid "APL record" +msgstr "Enregistrement APL" -msgid "domain is not configured" -msgstr "le domaine n'est pas configuré" +msgid "About" +msgstr "À propos de" -msgid "SID is not valid" -msgstr "Le SID n'est pas valide" +msgid "Access Denied" +msgstr "Accès interdit" -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "Le SID ne correspond exactement à aucun SID du domaine approuvé" +msgid "Access Granted" +msgstr "Accès autorisé" -msgid "SID does not match any trusted domain" -msgstr "Le SID ne correspond à aucun domaine approuvé" +#, python-format +msgid "Access granted: %s" +msgstr "Accès autorisé : %s" -msgid "Trust setup" -msgstr "Configuration des relations d'approbation" +msgid "Access this host" +msgstr "A accès à cet hôte" -msgid "Our domain is not configured" -msgstr "Notre domaine n'est pas configuré" +msgid "Access time" +msgstr "Horaire d'accès" -msgid "No trusted domain is not configured" -msgstr "Aucun domaine approuvé n'est pas configuré" +msgid "Accessing" +msgstr "Accédant à" -msgid "trusted domain object" -msgstr "objet domaine approuvé" +msgid "Account" +msgstr "Compte" -msgid "domain is not trusted" -msgstr "le domaine n'est pas de confiance" +msgid "Account Settings" +msgstr "Paramètres de compte" -msgid "no trusted domain matched the specified flat name" -msgstr "aucun domaine approuvé ne correspond au nom simple indiqué" +msgid "Account Status" +msgstr "État du compte" -msgid "trusted domain object not found" -msgstr "objet relation de confiance introuvable" +msgid "Account disabled" +msgstr "Compte désactivé" -#, fuzzy -msgid "Object does not belong to a trusted domain" -msgstr "Le SID ne correspond à aucun domaine approuvé" +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "Compte désactivé : %(disabled)s" -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "SSSD n'a pu résoudre l'objet en un SID valide" +msgid "Actions" +msgstr "Actions" + +msgid "Activate" +msgstr "Activer" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "Activer un utilisateur en attente « %(value)s »" + +msgid "Activate a stage user." +msgstr "Activer un utilisateur en attente." + +msgid "Active Directory domain" +msgstr "Domaine Active Directory" + +msgid "Active Directory domain administrator" +msgstr "Administrateur du domaine Active Directory" + +msgid "Active Directory domain administrator's password" +msgstr "Mot de passe de l'administrateur de domaine Active Directory" + +msgid "Active Directory domain range" +msgstr "Plage pour les domaines Active Directory" + +msgid "Active Directory domain with POSIX attributes" +msgstr "Domaine Active Directory avec attributs POSIX" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "" +"Plage pour les relations d'approbation Active Directory avec attributs POSIX" + +msgid "Active Directory winsync" +msgstr "Active Directory winsync" + +msgid "Active directory domain administrator's password" +msgstr "Mot de passe de l'administrateur du domaine Active Directory" + +msgid "Active users" +msgstr "Utilisateurs actifs" + +msgid "Active zone" +msgstr "Zone active" + +msgid "Add" +msgstr "Ajouter" + +msgid "Add CAs to a CA ACL." +msgstr "Ajouter des AC à une LCA d'AC" + +msgid "Add Custom Attribute" +msgstr "Ajouter un attribut personnalisé" + +msgid "Add Custom Authentication Indicator" +msgstr "Ajouter un indicateur d'authentification personnalisé" + +msgid "Add Kerberos Principal Alias" +msgstr "Ajouter un nouvel alias de principal Kerberos" + +msgid "Add Many" +msgstr "Ajouter plusieurs" + +msgid "Add a manager to the stage user entry" +msgstr "Ajouter un responsable à l'entrée d'utilisateur en attente" + +msgid "Add a manager to the user entry" +msgstr "Ajouter un responsable à l'entrée de l'utilisateur" + +msgid "Add a new DNS server." +msgstr "Ajouter un nouveau serveur DNS." + +msgid "Add a new Group ID override." +msgstr "Ajouter une nouvelle surcharge d'identifiants de groupes." + +msgid "Add a new HBAC service group." +msgstr "Ajouter un nouveau groupe de services HBAC." + +msgid "Add a new HBAC service." +msgstr "Ajouter un nouveau service HBAC." + +msgid "Add a new ID View." +msgstr "Ajouter une nouvelle vue d'identifiants" + +msgid "Add a new ID override." +msgstr "Ajouter une nouvelle surcharge d'identifiant." + +msgid "Add a new IPA location." +msgstr "Ajouter un nouvel emplacement IPA." + +msgid "Add a new IPA new service." +msgstr "Ajouter un nouveau service IPA." + +msgid "Add a new IPA service." +msgstr "Ajouter un nouveau service IPA." + +msgid "Add a new OTP token." +msgstr "Ajouter un nouveau jeton OTP" + +msgid "Add a new RADIUS proxy server." +msgstr "Ajouter un nouveau serveur mandataire RADIUS." + +msgid "Add a new User ID override." +msgstr "Ajouter une nouvelle surcharge d'identifiants utilisateurs." + +msgid "Add a new YubiKey OTP token." +msgstr "Ajouter un nouveau jeton OTP YubiKey." + +msgid "Add a new delegation." +msgstr "Ajouter une nouvelle délégation." + +msgid "Add a new group password policy." +msgstr "Ajouter une nouvelle politique de mot de passe." + +msgid "Add a new host." +msgstr "Ajouter un nouvel hôte." + +msgid "Add a new hostgroup." +msgstr "Ajouter un nouveau groupe d'hôtes." + +msgid "Add a new netgroup." +msgstr "Ajouter un nouveau groupe réseau." + +msgid "Add a new permission." +msgstr "Ajouter une nouvelle permission." + +msgid "Add a new privilege." +msgstr "Ajouter un nouveau privilège." + +msgid "Add a new role." +msgstr "Ajouter un nouveau rôle." + +msgid "Add a new segment." +msgstr "Ajouter un noveau segment." + +msgid "Add a new self-service permission." +msgstr "Ajouter une nouvelle permission de libre service." + +msgid "Add a new stage user." +msgstr "Ajouter un nouvel utilisateur en attente." + +msgid "Add a new topology suffix to be managed." +msgstr "Ajouter un nouveau suffixe de topologie à gérer." + +msgid "Add a new user." +msgstr "Ajouter un nouvel utilisateur." + +msgid "Add a permission for per-forward zone access delegation." +msgstr "" +"Ajouter une permission pour une délégation d'accès de zone de redirection." + +msgid "Add a permission for per-zone access delegation." +msgstr "Ajouter une permission pour une délégation d'accès par zone." + +msgid "Add a system permission without an ACI (internal command)" +msgstr "Ajout d'une permission système sans ACI (commande interne)" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" +"Ajouter une paire attribut/valeur. Format : attribut=valeur. Les\n" +"attributs doivent faire partie du schéma." + +msgid "Add an automember rule." +msgstr "Ajouter une règle d'auto-adhésion." + +msgid "Add an option to the Sudo Rule." +msgstr "Ajouter une option à la règle sudo." + +msgid "Add and Add Another" +msgstr "Ajouter, puis ajouter un autre" + +msgid "Add and Close" +msgstr "Ajouter et fermer" + +msgid "Add and Edit" +msgstr "Ajouter et modifier" + +msgid "Add certificates to host entry" +msgstr "Ajouter les certificats à l'entrée de l'hôte" + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "" +"Ajouter des commandes et groupes de commandes sudo affectés par la règle " +"sudo." + +msgid "Add conditions to an automember rule." +msgstr "Ajouter une condition à une règle d'auto-adhésion." + +msgid "Add custom value" +msgstr "Ajouter une valeur personnalisée" + +msgid "Add domain" +msgstr "Ajouter un domaine" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" +"Ajouter un enregistrement direct pour les serveurs de noms situés dans la " +"zone créée" + +msgid "Add group for Sudo to execute as." +msgstr "Ajouter un groupe dans sudo pour exécution comme." + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "Ajouter des hôtes et groupes d'hôtes affectés par la règle sudo." + +msgid "Add hosts that can manage this host." +msgstr "Ajouter les hôtes qui peuvent gérer cet hôte." + +msgid "Add hosts that can manage this service." +msgstr "Ajouter des hôtes pouvant administrer ce service." + +msgid "Add member to a named service delegation rule." +msgstr "Ajouter un membre à une règle nommée de délégation de service." + +msgid "Add member to a named service delegation target." +msgstr "Ajouter un membre à une cible de délégation de service." + +msgid "Add members to Sudo Command Group." +msgstr "Ajouter des membres à un groupe de commandes sudo." + +msgid "Add members to a group." +msgstr "Ajouter des membres à un groupe." + +msgid "Add members to a hostgroup." +msgstr "Ajouter des membres à un groupe d'hôtes." + +msgid "Add members to a netgroup." +msgstr "Ajouter des membres à un groupe réseau." + +msgid "Add members to a privilege." +msgstr "Ajouter des membres à un privilège." + +msgid "Add members to a role." +msgstr "Ajouter des membres à un rôle." + +msgid "Add members to a vault." +msgstr "Ajouter des membres à un coffre-fort." + +msgid "Add members to an HBAC service group." +msgstr "Ajouter des membres à un groupe de services HBAC." + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" +"Ajouter les utilisateurs migrés n'ayant pas de groupe à un groupe par défaut " +"(par défaut : vrai)" + +msgid "Add new DNS resource record." +msgstr "Ajouter un nouvel enregistrement de ressources DNS." + +msgid "Add new certificates to a service" +msgstr "Ajouter un nouveau certificat à un service" + +msgid "Add new principal alias to a service" +msgstr "Ajouter un nouvel alias de principal à un service" + +msgid "Add new principal alias to host entry" +msgstr "Ajouter un nouvel alias de principal à l'entrée de l'hôte" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "" +"Ajouter un ou plusieurs certificats à l'entrée de l'utilisateur surchargé " +"(idoverrideuser)" + +msgid "Add one or more certificates to the user entry" +msgstr "Ajouter un ou plusieurs certificats à l'entrée utilisateur" + +msgid "Add owners to a vault container." +msgstr "Ajouter des propriétaires à un conteneur de coffre-fort." + +msgid "Add owners to a vault." +msgstr "Ajouter des propriétaires à un coffre-fort." + +msgid "Add permissions to a privilege." +msgstr "Ajouter des permissions à un privilège." + +msgid "Add principal" +msgstr "Ajouter un principal" + +msgid "Add privileges to a role." +msgstr "Ajouter des privilèges à un rôle." + +msgid "Add profiles to a CA ACL." +msgstr "Ajouter des profils à une LCA d'AC." + +msgid "Add services to a CA ACL." +msgstr "Ajouter des services à une LCA d'AC." + +msgid "Add services to an HBAC rule." +msgstr "Ajouter des services à une règle HBAC." + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "Ajouter des hôtes cibles et groupes d'hôtes à une LCA d'AC." + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "Ajouter des hôtes et des groupes d'hôtes cibles à une règle HBAC." + +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "" +"Ajouter des hôtes et groupes d'hôtes cibles à une mappe d'utilisateurs " +"SELinux" + +msgid "Add target to a named service delegation rule." +msgstr "Ajouter une cible à une règle nommée de délégation de service." + +msgid "Add target to a named service delegation." +msgstr "Ajouter des cibles à une délégation de service nommé" + +msgid "Add the host to DNS with this IP address" +msgstr "Ajouter l'hôte aux DNS avec cette adresse IP" + +msgid "Add to default group" +msgstr "Ajouter au groupe par défaut" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "Ajouter des utilisateurs et groupes affectés par la règle sudo." + +msgid "Add users and groups for Sudo to execute as." +msgstr "Ajouter des utilisateurs et groupes dans sudo pour exécution comme." + +msgid "Add users and groups to a CA ACL." +msgstr "Ajouter des utilisateurs et groupes à une LCA d'AC." + +msgid "Add users and groups to an HBAC rule." +msgstr "Ajouter des utilisateurs et groupes à une règle HBAC." + +msgid "Add users and groups to an SELinux User Map rule." +msgstr "Ajouter des utilisateurs et groupes à une mappe d'utilisateurs SELinux" + +msgid "Add users that can manage this token." +msgstr "Ajouter des utilisateurs pouvant gérer ce jeton." + +#, python-format +msgid "Added %(map)s" +msgstr " %(map)s ajoutée" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "Ajout de %(src)s à %(dst)s" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "Confiance Active Directory ajoutée pour le royaume « %(value)s »" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "LCA d'AC « %(value)s » créée" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants de groupes « %(value)s » ajoutée" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "Règle HBAC « %(value)s » ajoutée" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "Service HBAC « %(value)s » ajouté" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "Groupe de services HBAC « %(value)s » ajouté" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "Vue d'identifiants « %(value)s » ajoutée" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants « %(value)s » ajoutée" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "Plage d'ID « %(value)s » ajoutée" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "Emplacement IPA « %(value)s » ajouté" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "Jeton OTP « %(value)s » ajouté" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "Serveur mandataire RADIUS « %(value)s » ajouté" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "Mappe d'utilisateurs SELinux « %(value)s » ajoutée" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Commande sudo « %(value)s » ajoutée" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Groupe de commandes sudo « %(value)s » ajouté" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Règle sudo « %(value)s » ajoutée" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants utilisateurs « %(value)s » ajoutée" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "Règle d'auto-adhésion « %(value)s » ajoutée" + +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "Carte « automount » indirect « %(value)s » créée" + +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "Clé « automount » « %(value)s » créée" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "Emplacement « automount » « %(value)s » ajouté" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "Carte « automount » « %(value)s » ajoutée" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "Certificats ajoutés à l'hôte « %(value)s »" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "Certificats ajoutés à l'utilisateur surchargé « %(value)s »" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "Certificats ajoutés au principal de service « %(value)s »" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "Certificats ajoutés à l'utilisateur « %(value)s »" + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "Condition(s) ajoutées à « %(value)s »" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "Délégation « %(value)s » ajoutée" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Groupe « %(value)s » créé" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "Hôte « %(value)s » ajouté" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Groupe d'hôtes « %(value)s » ajouté" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "Groupe réseau « %(value)s » ajouté" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "Nouveau serveur DNS « %(value)s » ajouté" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Alias ajoutés à l'hôte « %(value)s »" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "Alias ajoutés au principal de service « %(value)s »" + +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "Option « %(option)s » ajoutée à la règle sudo « %(rule)s »" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "Permission « %(value)s » ajoutée" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "Privilège « %(value)s » ajouté" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "Rôle « %(value)s » ajouté" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "Segment « %(value)s » ajouté" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "Permission de libre service « %(value)s » ajoutée" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "Service « %(value)s » ajouté" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "Règle de délégation de service « %(value)s » ajoutée" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "Cible de délégation de service « %(value)s » ajoutée" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "Utilisateur en attente « %(value)s » ajouté" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "Permission système « %(value)s » ajoutée" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "Suffixe de topologie « %(value)s » ajouté" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "Utilisateur « %(value)s » ajouté" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "Ajout de « %(value)s » au coffre" + +msgid "Additional instructions:" +msgstr "Instructions complémentaires :" + +msgid "Address not valid, can't redirect" +msgstr "Adresse invalide, impossible de rediriger" + +msgid "Administrative account" +msgstr "Compte administrateur" + +msgid "Administrator e-mail address" +msgstr "Adresse courriel de l'administrateur" + +msgid "Advertised by servers" +msgstr "Publié par les serveurs" + +msgid "Affiliation Changed" +msgstr "Affiliation modifiée" + +msgid "Agreements deleted" +msgstr "Agréments supprimés" + +msgid "Algorithm" +msgstr "Algorithme" + +msgid "All" +msgstr "Tou(te)s" + +msgid "All attributes to which the permission applies" +msgstr "Tous les attributs auxquels la permission s'applique" + +msgid "All commands should at least have a result" +msgstr "Toutes les commandes doivent avoir au moins un résultat" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" +"Tous les filtres cible, y compris ceux définis avec « type » et « memberof »" + +msgid "Allow" +msgstr "Autoriser" + +msgid "Allow PTR sync" +msgstr "Autoriser la synchronisation PTR" + +msgid "Allow access from the trusted domain" +msgstr "Autoriser l'accès depuis le domaine approuvé" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "" +"Autoriser l'ajout de membres externes non-IPA depuis des domaines approuvés" + +msgid "Allow dynamic updates." +msgstr "Autoriser les mises à jour dynamiques." + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" +"Autorise l'utilisation en repli de l'annuaire LDAP du contrôleur de domaine " +"AD. Pour les relations d'approbation bidirectionnelles uniquement." + +msgid "Allow in-line DNSSEC signing" +msgstr "Autoriser la signature DNSSEC en ligne" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "" +"Autoriser la signature DNSSEC en ligne des enregistrements dans la zone" + +msgid "Allow query" +msgstr "Autoriser requête" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "" +"Autoriser la synchronisation des enregistrements directs (A, AAAA) et " +"inverses (PTR)" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" +"Autoriser la synchronisation des enregistrements directs (A, AAAA) et " +"inverses (PTR) dans la zone" + +msgid "Allow transfer" +msgstr "Autoriser le transfert" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "Autoriser l'utilisation des ressources IPA par le domaine approuvé" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" +"Autoriser des utilisateurs, hôtes ou groupes d'hôtes à créer un tableau de " +"clés de cet hôte." + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" +"Autoriser utilisateurs, hôtes ou groupes d'hôtes à créer un tableau de clés " +"de ce service." + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" +"Autoriser des utilisateurs, hôtes ou groupes d'hôtes à récupérer un tableau " +"de clés de cet hôte." + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" +"Autoriser les utilisateurs, groupes, hôtes ou groupes d'hôtes à récupérer un " +"tableau de clés pour ce service." + +msgid "Allowed Target" +msgstr "Cibles autorisées" + +msgid "Allowed to Impersonate" +msgstr "Autorisé à prendre l'identité" + +msgid "Allowed to create keytab" +msgstr "Autorisé à créer un tableau de clés" + +msgid "Allowed to retrieve keytab" +msgstr "Autorisé à récupérer un tableau de clés" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "Autoriser la migration malgré l'utilisation du greffon « compat »" + +msgid "Already registered" +msgstr "Déjà enregistré" + +msgid "Alternative UPN suffixes" +msgstr "Suffixes UPN alternatifs" + +msgid "Altitude" +msgstr "Altitude" + +msgid "Always ask" +msgstr "Toujours demander" msgid "Ambiguous search, user domain was not specified" msgstr "Recherche ambiguë, le domaine utilisateur n'a pas été indiqué" -msgid "Trusted domain did not return a unique object" -msgstr "Le domaine approuvé n'a pas renvoyé un objet unique" +msgid "An IPA master host cannot be deleted or disabled" +msgstr "Un serveur maître IPA ne peut ni être supprimé ni désactivé" -msgid "Trusted domain did not return a valid SID for the object" -msgstr "Le domaine approuvé n'a pas renvoyé un SID valide pour l'objet" +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "Une erreur est survenue (${error})" -msgid "trusted domain user not found" -msgstr "utilisateur de domaine approuvé introuvable" +msgid "An error occurred while fetching dns zones." +msgstr "Une erreur est survenue lors de la récupération des zones DNS." -msgid "Cannot retrieve trusted domain GC list" -msgstr "Impossible de récupérer la liste GC du domaine approuvé" +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" +"Une plage d'identifiants existe déjà pour cette relation de confiance. Vous " +"devez soit supprimer l'ancienne plage, soit exclure les options « --base-" +"id » ou « --range-size » de la commande." + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "" +"Délai entre deux interrogations du serveur de noms pour la recherche de " +"nouvelles zones" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "La balise « %(anchor)s » ne peut être résolue." + +msgid "Anchor to override" +msgstr "Balise à surcharger" + +msgid "Any CA" +msgstr "Toute AC" + +msgid "Any Command" +msgstr "Toute commande" + +msgid "Any Group" +msgstr "Tout groupe" + +msgid "Any Host" +msgstr "N'importe quel hôte" + +msgid "Any Profile" +msgstr "Tout profil" + +msgid "Any Service" +msgstr "N'importe quel service" + +msgid "Anyone" +msgstr "N'importe qui" + +msgid "Applied to hosts" +msgstr "Appliquée aux hôtes" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" +"Applique une vue d'identifiants aux hôtes ou aux membres des groupes d'hôtes " +"indiqués. Si une autre vue d'identifiants était appliquée à l'hôte, elle est " +"remplacée." + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" +"Applique une vue d'identifiants aux hôtes ou aux membres des groupes d'hôtes " +"indiqués. Si une autre vue d'identifiants était appliquée à l'hôte, elle est " +"remplacée." + +msgid "Apply" +msgstr "Appliquer" + +msgid "Apply ACI to your own entry (self)" +msgstr "Appliquer l'ACI à votre propre entrée (« self »)" + +msgid "Apply to host groups" +msgstr "Appliquée aux groupes d'hôtes" + +msgid "Apply to hosts" +msgstr "Appliquer aux hôtes" + +msgid "Arbitrary string identifying the segment" +msgstr "Chaîne arbitraire identifiant le segment" + +msgid "Archive data into a vault." +msgstr "Archiver des données dans un coffre-fort." + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "Données archivées dans le coffre-fort « %(value)s »" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" +"Êtes-vous sûr de vouloir ${action} l'utilisateur ?
Le changement prendra " +"effet immédiatement." + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "Êtes-vous sûr(e) de vouloir activer ${object} ?" + +msgid "Are you sure you want to activate selected users?" +msgstr "Êtes-vous sûr de vouloir désactiver l'utilisateur sélectionné ?" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "" +"Êtes-vous sûr de vouloir ajouter une permission pour la zone DNS ${object} ?" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "Êtes-vous sûr de vouloir supprimer ${object} ?" + +msgid "Are you sure you want to delete selected entries?" +msgstr "Êtes-vous sûr de vouloir supprimer les entrées sélectionnées ?" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "Êtes-vous sûr de vouloir désactiver ${object} ?" + +msgid "Are you sure you want to disable selected entries?" +msgstr "Êtes-vous sûr de vouloir désactiver les entrées sélectionnées ?" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "Êtes-vous sûr de vouloir activer ${object} ?" + +msgid "Are you sure you want to enable selected entries?" +msgstr "Êtes-vous sûr de vouloir activer les entrées sélectionnées ?" + +msgid "Are you sure you want to proceed with the action?" +msgstr "Êtes-vous sûr de vouloir engager cette action ?" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "Êtes-vous sûr de vouloir reconstruire l'adhésion automatique ?" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" +"Êtes-vous sûr de vouloir supprimer la permission pour la zone DNS ${object} ?" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "Êtes-vous sûr de vouloir supprimer l'objet ${object} ?" + +msgid "Are you sure you want to restore selected users?" +msgstr "Êtes-vous sûr de vouloir restaurer les utilisateurs sélectionnés ?" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "Êtes-vous sûr de vouloir mettre en attente l'objet ${object} ?" + +msgid "Are you sure you want to stage selected users?" +msgstr "" +"Êtes-vous sûrs de vouloir mettre en attente les utilisateurs sélectionnés ?" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" +"Êtes-vous sûr(e) de retirer l'application de la vue d'identifiants des " +"entrées sélectionnées ?" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "Êtes-sous sûr de vouloir déverrouiller l'utilisateur ${object} ?" + +msgid "Are you sure you want to unprovision this host?" +msgstr "Êtes-vous sûr de vouloir supprimer les permissions à cet hôte ?" + +msgid "Are you sure you want to unprovision this service?" +msgstr "Êtes-vous sûr de vouloir supprimer les permissions ce service ?" + +msgid "As Whom" +msgstr "Comme qui" + +msgid "Asks for a non-random password to use for the principal" +msgstr "Demande un mot de passe non aléatoire à utiliser pour le principal" + +msgid "Assigned ID View" +msgstr "Vue d'identifiants attribuée" + +msgid "Assigned manager of the token (default: self)" +msgstr "Administrateur assigné au jeton (par défaut : soi-même)" + +msgid "Assigned user of the token (default: self)" +msgstr "Utilisateur assigné au jeton (par défaut : soi-même)" + +msgid "At least the domain or IP address should be specified" +msgstr "Au moins un nom de domaine ou une adresse IP doit être indiqué" + +msgid "Attribute" +msgstr "Attribut" + +msgid "Attribute Key" +msgstr "Clé d'attribut" + +msgid "Attribute breakdown" +msgstr "Répartition des attributs" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" +"Attribut à filtrer via « regex ». Ex. FQDN pour un hôte, ou « manager » pour " +"un utilisateur" + +msgid "Attributes" +msgstr "Attributs" + +msgid "Attributes for total update" +msgstr "Attributs pour une mise à jour complète" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" +"Attributs qui ne seront pas répliqués vers un serveur consommateur lors " +"d'une réplication partielle. Par exemple, `(objectclass=*) $ EXCLUDE " +"accountlockout memberof" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" +"Les attributs qui ne sont pas répliqués vers un serveur consommateur pendant " +"une mise à jour complète. Par exemple : (objectclass=*) $ EXCLUDE " +"accountlockout" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "Attributs à ignorer dans les entrées groupe dans DS" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "Attributs à ignorer dans des entrées utilisateur dans DS" + +msgid "Attributes to strip" +msgstr "Attributs à supprimer" + +msgid "Attributes to which the delegation applies" +msgstr "Attributs auxquels la délégation s'applique" + +msgid "Attributes to which the permission applies" +msgstr "Attributs auxquels les permissions s'appliquent" + +msgid "Attributes to which the permission applies by default" +msgstr "Attributs auxquels la permission s'applique par défaut" + +msgid "Attributes to which the permission applies." +msgstr "Attributs auxquels les permissions s'appliquent." + +msgid "Audit" +msgstr "Audit" + +msgid "Authentication" +msgstr "Authentification" + +msgid "Authentication Indicators" +msgstr "Indicateurs d'authentification" + +msgid "Authentication indicator" +msgstr "Indicateur d'authentification" + +msgid "Authentication indicators" +msgstr "Indicateurs d'authentification" + +msgid "Authoritative nameserver" +msgstr "Serveur de nom faisant autorité" + +msgid "Authoritative nameserver change" +msgstr "Changement de serveur de nom faisant autorité" + +msgid "Authoritative nameserver domain name" +msgstr "Nom de domaine du serveur de nom faisant autorité" + +msgid "Authority ID" +msgstr "ID de l'autorité" + +msgid "Auto Membership Rule" +msgstr "Règle d'appartenance automatique" + +msgid "Auto Membership is not configured" +msgstr "L'auto-adhésion n'est pas configurée" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "Règle d'auto-adhésion : %s introuvable !" + +msgid "Autogenerated" +msgstr "Autogénéré" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" +"Échec de la mise à jour automatique des enregistrements DNS du système. " +"Merci de relancer la mise à jour des enregistrements du système manuellement " +"pour obtenir la liste des enregistrements manquants." + +msgid "Automember" +msgstr "Auto-adhésion" + +msgid "Automember Rule" +msgstr "Règle d'auto-adhésion" + +msgid "Automember rebuild membership task completed" +msgstr "La tâche de reconstruction des appartenances automatiques est terminée" + +msgid "Automember rebuild membership task started" +msgstr "" +"Tâche de reconstruction de l'appartenance avec adhésion automatique démarrée" + +msgid "Automount" +msgstr "Montage automatique" + +msgid "Automount Key" +msgstr "Clé « automount »" + +msgid "Automount Keys" +msgstr "Clés « automount »" + +msgid "Automount Location" +msgstr "Emplacement de montage automatique" + +msgid "Automount Location Settings" +msgstr "Détail d'un emplacement « automount »" + +msgid "Automount Locations" +msgstr "Emplacements de montage automatique" + +msgid "Automount Map" +msgstr "Carte « automount »" + +msgid "Automount Maps" +msgstr "Cartes « automount »" + +msgid "Automount key name." +msgstr "Nom de clé « automount »." + +msgid "Automount key object." +msgstr "Objet clé « automount »." + +msgid "Automount location name." +msgstr "Nom d'emplacement ." + +msgid "Automount map name." +msgstr "Nom de carte « automount »." + +msgid "Automount master file." +msgstr "Fichier maître « automount »" + +msgid "Available" +msgstr "Disponible" + +msgid "BIND update policy" +msgstr "Politique de mise à jour de BIND" + +msgid "Back" +msgstr "Retour" + +msgid "Back to Top" +msgstr "Retour en haut de page" + +msgid "Bad format in credentials cache" +msgstr "Mauvais format de cache des justificatifs d'identité" + +msgid "Bad or unsupported salt type.\n" +msgstr "Type « salt » non-conforme ou non pris en compte.\n" + +msgid "Bad search filter" +msgstr "Mauvais filtre de recherche" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "Filtre de recherche invalide %(info)s" + +msgid "Base DN" +msgstr "DN de base" + +msgid "Base DN on remote LDAP server" +msgstr "DN de base sur le serveur LDAP distant" + +msgid "Base ID" +msgstr "ID de base" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "Base pour les sujets de certificat (OU=Test,O=Example)" + +msgid "Base-64 encoded host certificate" +msgstr "Certificat de l'hôte encodé en Base-64" + +msgid "Base-64 encoded server certificate" +msgstr "Certificat du serveur codé en Base-64" + +msgid "Base-64 encoded service certificate" +msgstr "Certificat du service encodé en Base-64" + +msgid "Base-64 encoded user certificate" +msgstr "Certificat de l'utilisateur encodé en Base-64" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Échec du décodage « base64 » : %(reason)s" + +msgid "Binary data to archive" +msgstr "Fichier binaire à archiver" + +msgid "Bind DN" +msgstr "DN de connexion" + +msgid "Bind rule type" +msgstr "Type de règle liée" + +msgid "Brief description of this profile" +msgstr "Brève description de ce profil" + +msgid "CA" +msgstr "AC" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "L'autorité de certification « %s » est désactivée" + +msgid "CA ACL" +msgstr "LCA de l'AC" + +msgid "CA ACLs" +msgstr "LCA de l'AC" + +msgid "CA Compromise" +msgstr "AC compromis" + +msgid "CA category" +msgstr "Catégorie d'AC" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" +"une catégorie d'AC ne peut pas être définie à « all » tant qu'il reste des " +"AC autorisées" + +msgid "CA category the ACL applies to" +msgstr "Catégorie d'AC à laquelle l'ACL s'applique" + +msgid "CA certificate" +msgstr "Certificat d'AC" + +msgid "CA is not configured" +msgstr "L'AC n'est pas configurée" + +msgid "CAs" +msgstr "AC" + +msgid "CAs cannot be added when CA category='all'" +msgstr "" +"des AC ne peuvent pas être ajoutées quand la catégorie de l'AC est « all »" + +msgid "CERT Algorithm" +msgstr "Algorithme CERT" + +msgid "CERT Certificate Type" +msgstr "Type de certificat CERT" + +msgid "CERT Certificate/CRL" +msgstr "Certificat/CRL CERT" + +msgid "CERT Key Tag" +msgstr "Étiquette de clé CERT" + +msgid "CERT record" +msgstr "Enregistrement CERT" msgid "CIFS credentials object" msgstr "Objet justificatif d'identité de CIFS" @@ -30223,24 +8412,2961 @@ msgstr "Objet justificatif d'identité de CIFS" msgid "CIFS server %(host)s denied your credentials" msgstr "Le serveur CIFS %(host)s a refusé vos justificatifs d'identité" +msgid "CIFS server denied your credentials" +msgstr "Le serveur CIFS a refusé vos justificatifs d'identité" + +msgid "CLI metavar" +msgstr "Metavariable CLI" + +msgid "CLI name" +msgstr "Nom CLI" + +msgid "CNAME Hostname" +msgstr "Nom d'hôte CNAME" + +msgid "CNAME record" +msgstr "Enregistrement CNAME" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" +"Un enregistrement CNAME ne peut coexister avec aucun autre enregistrement " +"(RFC 1034, section 3.6.2)" + +msgid "CSR" +msgstr "CSR" + +msgid "Cancel" +msgstr "Annuler" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "" +"Impossible de créer l'enregistrement inverse pour « %(value)s » : %(exc)s" + +#, python-format +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "Impossible de décoder le fichier « %(filename)s » : %(exc)s" + #, python-format msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" msgstr "" "Impossible d'établir la connexion LSA vers %(host)s. Le serveur CIFS est-il " "en cours d'exécution ?" -#, python-format msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." msgstr "" -"le serveur IPA et le domaine distant ne peuvent partager le même nom " -"NetBIOS : %s" +"Impossible d'établir une relation d'approbation vers un AD déployé dans le " +"même domaine que IPA. Une telle configuration ne peut être prise en charge." + +msgid "Cannot find specified domain or server name" +msgstr "Impossible de trouver le domaine ou le serveur indiqué" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"Impossible de réaliser la validation du SID sans installer la prise en " +"charge de Samba 4. Assurez-vous d'avoir installé le sous-paquet d'IPA " +"« server-trust-ad » sur le serveur" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"Impossible de réaliser la validation de membre externe sans installer " +"Samba 4. Assurez-vous d'avoir installé le sous-paquet « IPAserver-trust-ad » " +"sur le serveur" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" +"Impossible de rejoindre un domaine sans avoir au préalable configuré son " +"propre domaine. Assurez-vous d'avoir lancé « ipa-adtrust-install » au " +"préalable sur le serveur" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" +"Impossible d'effectuer la commande sélectionnée sans configuration de Samba " +"4. Assurez-vous de bien avoir configuré ce serveur avec la commande « ipa-" +"adtrust-install »." + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" +"Impossible d'effectuer la commande sélectionnée sans installation de " +"Samba 4. Assurez-vous de bien avoir installé sur le serveur le paquet IPA " +"« server-trust-ad »." + +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "Impossible de lire le fichier « %(filename)s » : %(exc)s" + +msgid "Cannot resolve KDC for requested realm" +msgstr "Impossible de résoudre le KDC pour le domaine demandé" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "Impossible de récupérer la liste GC du domaine approuvé" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" +"Impossible d'effectuer une recherche sur les domaines approuvés sans avoir " +"au préalable configuré son propre domaine. Assurez-vous d'avoir au préalable " +"lancé « ipa-adtrust-install » sur le serveur" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "Impossible d'enregistrer les ACI de permissions dans %s" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "Impossible d'utiliser %(old_name)s avec %(new_name)s" + +msgid "Car License" +msgstr "Permis de conduire/carte d'identité" + +msgid "Certificate" +msgstr "Certificat" + +msgid "Certificate Association Data" +msgstr "Donnée associée au certificat" + +msgid "Certificate Authorities" +msgstr "Autorités de certification" + +msgid "Certificate Authority" +msgstr "Autorité de certification" + +msgid "Certificate Hold" +msgstr "Certificat bloqué" + +msgid "Certificate Hold Removed" +msgstr "Blocage de certificat supprimé" + +msgid "Certificate Profile" +msgstr "Profil de certificat" + +msgid "Certificate Profile to use" +msgstr "Profil de certificat à utiliser" + +msgid "Certificate Profiles" +msgstr "Profils de certificats" + +msgid "Certificate Revoked" +msgstr "Certificat révoqué" + +msgid "Certificate Subject base" +msgstr "Base de sujet de certificat" + +msgid "Certificate Type" +msgstr "Type de certificat" + +msgid "Certificate Usage" +msgstr "Utilisation du certificat" #, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "Certificat pour ${primary_key} de ${entity}" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "Erreur de format de certificat : %(error)s" + +msgid "Certificate in base64 or PEM format" +msgstr "Certificat au format Base64 ou PEM" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "L'opération de certification ne peut être effectuée : %(error)s" + +msgid "Certificate profiles cannot be renamed" +msgstr "Les profils de certificats ne peuvent être renommés" + +msgid "Certificate requested" +msgstr "Certificat demandé" + +#, python-format msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" msgstr "" +"Certificat de l'AC « %(ca)s » avec le numéro de série %(serial)s introuvable" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "Certificat(s) enregistré(s) dans le fichier '%(file)s'" + +msgid "Certificate/CRL" +msgstr "Certificat/CRL" + +msgid "Certificates" +msgstr "Certificats" + +msgid "Cessation of Operation" +msgstr "Cessation d'activité" + +msgid "Change current Domain Level." +msgstr "Modifier le niveau actuel du domaine." + +msgid "Change password" +msgstr "Modifier le mot de passe" + +msgid "Change to POSIX group" +msgstr "Transformer en groupe POSIX" + +msgid "Change to external group" +msgstr "Transformer en groupe externe" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Mot de passe modifié pour « %(value)s »" + +msgid "Character classes" +msgstr "Classes de caractères" + +msgid "Check DNS" +msgstr "Vérification DNS" + +msgid "Check connection to remote IPA server." +msgstr "Vérifier la connexion au serveur IPA distant." + +msgid "Check the status of a certificate signing request." +msgstr "Vérifier l'état d'une demande de signature de certificat." + +msgid "Checking if record exists." +msgstr "Vérification de l'existence de l'enregistrement." + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "" +"Vérifier si l'un des serveurs a activé le service autorité de certification." + +msgid "City" +msgstr "Ville" + +msgid "Class" +msgstr "Classe" + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" +"Retire l'application de la vue d'identifiants des hôtes ou membres des " +"groupes d'hôtes indiqués." + +#, python-brace-format +msgid "Click to ${action}" +msgstr "Cliquer pour ${action}." + +msgid "Client credentials may be delegated to the service" +msgstr "" +"Les informations d'identification du client peuvent être déléguées au service" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "Le client n'est pas configuré. Lancer « ipa-client-install »." + +msgid "Client version. Used to determine if server will accept request." +msgstr "" +"Version client. Utilisée pour déterminer si le serveur accepte la requête." + +msgid "Clock interval" +msgstr "Intervalle d'horloge" + +msgid "Clock offset" +msgstr "Décalage d'horloge" + +msgid "Close" +msgstr "Fermer" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "La fermeture du tableau des clés a échoué\n" + +msgid "Collapse All" +msgstr "Tout replier" + +msgid "Comma separated encryption types list" +msgstr "Liste, séparée par des virgules, des types de chiffrement" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "La commande « %(name)s » a été abandonnée." + +msgid "Command category" +msgstr "Catégorie de commande" + +msgid "Command category the rule applies to" +msgstr "Catégorie de commande à laquelle la règle s'applique" + +msgid "Command name" +msgstr "Nom de commande" + +msgid "Command not implemented" +msgstr "Commande non implémentée" + +msgid "Commands" +msgstr "Commandes" + +msgid "Common Name" +msgstr "Nom usuel" + +msgid "Conditions that could not be added" +msgstr "Conditions n'ayant pu être ajoutées" + +msgid "Conditions that could not be removed" +msgstr "Conditions n'ayant pu être supprimées" + +msgid "Configuration" +msgstr "Configuration" + +msgid "Configure your token" +msgstr "Configurer votre jeton" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" +"Configurez le code QR en reconnaissant le code QR ci-dessous. Cliquez sur le " +"code QR si vous voyez ceci sur le périphérique que vous souhaitez configurer." + +msgid "Configured administrative server limit exceeded" +msgstr "Limite configurée côté serveur dépassée" + +msgid "Configured size limit exceeded" +msgstr "Limite configurée de taille dépassée" + +msgid "Configured time limit exceeded" +msgstr "Limite configurée de durée dépassée" + +msgid "Confirm (password)" +msgstr "Confirmer le mot de passe" + +msgid "Confirmation" +msgstr "Confirmation" + +msgid "Connectivity" +msgstr "Connectivité" + +msgid "Consecutive failures before lockout" +msgstr "Échecs consécutifs avant verrouillage" + +msgid "Contact Settings" +msgstr "Paramètres de contact" + +msgid "Contact this specific KDC Server" +msgstr "Contacter ce serveur KDC particulier" + +msgid "Continue" +msgstr "Continuer" + +msgid "Continuous mode: Don't stop on errors." +msgstr "Mode continu : pas d'arrêt sur erreurs." + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" +"Mode continu. Les erreurs sont rapportées mais le processus se poursuit" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "" +"Mode opératoire continu. Les erreurs sont notées, mais le processus continue." + +msgid "Convert on server" +msgstr "Convertir sur le serveur" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "Impossible d'obtenir %(name)s de façon interactive" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" +"Impossible de lire « originfilter » de « UPG Definition ». Vérifiez vos " +"permissions." + +msgid "Counter" +msgstr "Compteur" + +msgid "Counter-based (HOTP)" +msgstr "Basé sur un compteur (HOTP)" + +msgid "Create Stage user in from a delete user" +msgstr "Créer un utilisateur en attente depuis un utilisateur supprimé" + +msgid "Create a CA." +msgstr "Créer une AC." + +msgid "Create a new CA ACL." +msgstr "Créer une nouvelle LCA d'AC." + +msgid "Create a new HBAC rule." +msgstr "Créer une nouvelle règle HBAC." + +msgid "Create a new SELinux User Map." +msgstr "Créer une nouvelle mappe d'utilisateurs SELinux" + +msgid "Create a new automount key." +msgstr "Créer une nouvelle clé « automount »." + +msgid "Create a new automount location." +msgstr "Créer un nouvel emplacement " + +msgid "Create a new automount map." +msgstr "Créer une nouvelle carte « automount »." + +msgid "Create a new group." +msgstr "Créer un nouveau groupe." + +msgid "Create a new indirect mount point." +msgstr "Créer un nouveau point de montage indirect." + +msgid "Create a new service delegation rule." +msgstr "Créer une nouvelle règle de délégation de service" + +msgid "Create a new service delegation target." +msgstr "Créer une nouvelle cible de délégation de service" + +msgid "Create a new vault." +msgstr "Créer un nouveau coffre-fort." + +msgid "Create as a non-POSIX group" +msgstr "Créer en tant que groupe non-POSIX" + +msgid "Create dns record" +msgstr "Créer un enregistrement DNS" + +msgid "Create new ACI." +msgstr "Créer une nouvelle ICA." + +msgid "Create new DNS forward zone." +msgstr "Créer une nouvelle zone de redirection DNS" + +msgid "Create new DNS zone (SOA record)." +msgstr "Créer une nouvelle zone DNS (enregistrement SOA)." + +msgid "Create new Sudo Command Group." +msgstr "Créer un nouveau groupe de commandes sudo." + +msgid "Create new Sudo Command." +msgstr "Créer une nouvelle commande sudo." + +msgid "Create new Sudo Rule." +msgstr "Créer une nouvelle règle sudo." + +msgid "Create reverse" +msgstr "Créer un enregistrement inverse" + +msgid "Create reverse record for this IP Address" +msgstr "Créer l'enregistrement inverse pour cette adresse IP" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "ACI « %(value)s » créée" + +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "AC « %(value)s » créée" + +msgid "Creating record." +msgstr "Création de l'enregistrement." + +msgid "Credentials cache permissions incorrect" +msgstr "Droits d'accès incorrects au cache des justificatifs d'identité" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" +"Les confiances croisées entre domaines n'ont pas été configurées. Assurez-" +"vous d'avoir préalablement exécuté « ipa-adtrust-install » sur le serveur" + +msgid "Current DNS record contents:\n" +msgstr "Contenu actuel de l'enregistrement DNS :\n" + +msgid "Current Password" +msgstr "Mot de passe actuel" + +msgid "Current domain level:" +msgstr "Niveau actuel du domaine :" + +msgid "Current password is required" +msgstr "Le mot de passe actuel est requis" + +msgid "Custom value" +msgstr "Valeur personnalisée" + +msgid "DHCID record" +msgstr "Enregistrement DHCID" + +msgid "DLV Algorithm" +msgstr "Algorithme DLV" + +msgid "DLV Digest" +msgstr "Condensé DLV" + +msgid "DLV Digest Type" +msgstr "Type de condensé DLV" + +msgid "DLV Key Tag" +msgstr "Étiquette de clé DLV" + +msgid "DLV record" +msgstr "Enregistrement DLV" + +msgid "DN commonName does not match user's login" +msgstr "" +"Le « commonName » du DN ne correspond pas à l'identifiant de connexion de " +"l'utilisateur" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" +"L'adresse email du DN ne correspond à aucune des adresses email de " +"l'utilisateur" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "DN du conteneur pour des groupes dans le DS relatif au DN de base" + +msgid "DN of container for users in DS relative to base DN" +msgstr "DN du conteneur pour les utilisateurs dans le DS relatif au DN de base" + +msgid "DN of the started task" +msgstr "DN de la tâche lancée" + +msgid "DN to bind as if not using kerberos" +msgstr "DN à utiliser pour la connexion en cas de non-utilisation de Kerberos" + +msgid "DNAME Target" +msgstr "Cible DNAME" + +msgid "DNAME record" +msgstr "Enregistrement DNAME" + +msgid "DNS" +msgstr "DNS" + +msgid "DNS Forward Zone" +msgstr "Zone de redirection DNS" + +msgid "DNS Forward Zones" +msgstr "Zones de redirection DNS" + +msgid "DNS Global Configuration" +msgstr "Configuration DNS globale" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" +"Le type DNS RR « %s » n'est pas pris en charge par le greffon bind-dyndb-ldap" + +msgid "DNS Resource Record" +msgstr "Enregistrement de ressources DNS" + +msgid "DNS Resource Records" +msgstr "Enregistrements de ressources DNS" + +msgid "DNS Server" +msgstr "Serveur DNS" + +msgid "DNS Server name" +msgstr "Nom du serveur DNS" + +msgid "DNS Servers" +msgstr "Serveurs DNS" + +msgid "DNS Zone" +msgstr "Zone DNS" + +msgid "DNS Zone Settings" +msgstr "Paramètres de zone DNS" + +msgid "DNS Zones" +msgstr "Zones DNS" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" +"Échec de vérification du DNS : {%(expected)s} attendu, {%(got)s} obtenu" + +msgid "DNS class" +msgstr "Classe de DNS" + +msgid "DNS configuration options" +msgstr "Options de configuration DNS" + +msgid "DNS forward zone" +msgstr "Zone de redirection DNS" + +msgid "DNS forward zones" +msgstr "Zones de redirection DNS" + +msgid "DNS forwarder" +msgstr "Transmetteur DNS" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" +"La sémantique de redirection DNS a été modifié depuis IPA 4.0.\n" +"Utilisez à la place les redirections de zones (dnsforwardzone-*).\n" +"Pour plus de détails, lisez la documentation." + +msgid "DNS is not configured" +msgstr "Le DNS n'est pas configuré" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "un libellé de DNS ne peut pas dépasser 63 caractères" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "un libellé DNS ne peut pas dépasser 63 caractères" + +msgid "DNS record was deleted because it contained no data." +msgstr "L'enregistrement DNS a été supprimé car vide" + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "" +"Le ou les enregistrements DNS de l'hôte %(host)s n'ont pu être supprimés. " +"(%(reason)s)" + +msgid "DNS records can be only updated one at a time" +msgstr "" +"Les enregistrements DNS ne peuvent être mis à jour qu'un seul à la fois" + +msgid "DNS resource record" +msgstr "Enregistrement de ressource DNS" + +msgid "DNS resource record type" +msgstr "Type d'enregistrement de ressource DNS" + +msgid "DNS resource records" +msgstr "Enregistrements de ressources DNS" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" +"La zone DNS inverse %(revzone)s pour l'adresse IP %(addr)s n'est pas gérée " +"par ce serveur." + +msgid "DNS server" +msgstr "Serveur DNS" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"Le serveur DNS %(server)s ne prend pas en charge : %(error)s.\n" +"Si la validation DNSSEC est activée sur le ou les serveurs IPA, merci de la " +"désactiver." + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"Le serveur DNS %(server)s ne prend pas en charge EDNS0 (RFC 6891) : " +"%(error)s.\n" +"Si la validation DNSSEC est activée sur le ou les serveurs, merci de la " +"désactiver." + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "Serveur DNS %(server)s : %(error)s." + +msgid "DNS servers" +msgstr "Serveurs DNS" + +msgid "DNS zone" +msgstr "Zone DNS" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "Zone DNS %(zone)s introuvable" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" +"La zone DNS de chaque domaine Kerberos doit contenir des enregistrements SOA " +"et NS. Aucun enregistrement trouvé pour : %s" + +msgid "DNS zone root record cannot be renamed" +msgstr "L'enregistrement racine de la zone DNS ne peut être renommé" + +msgid "DNS zones" +msgstr "Zones DNS" + +msgid "DNSKEY record" +msgstr "Enregistrement DNSKEY" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" +"La prise en charge de DNSSEC est expérimentale.\n" +"%(additional_info)s" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" +"Échec de la validation DNSSEC : %(error)s.\n" +"Merci de vérifier votre configuration DNSSEC ou de désactiver la validation " +"DNSSEC sur tous les serveurs IPA." + +msgid "DS Algorithm" +msgstr "Algorithme DS" + +msgid "DS Digest" +msgstr "Condensé DS" + +msgid "DS Digest Type" +msgstr "Type de condensé DS" + +msgid "DS Key Tag" +msgstr "Étiquette de clé DS" + +msgid "DS record" +msgstr "Enregistrement DS" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "" +"L'enregistrement DS ne doit pas être dans la zone sommet (RFC 4035 section " +"2.4)" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" +"l'enregistrement DS doit coexister avec un enregistrement NS (RFC 4592 " +"section 4.6, RFC 4035 section 2.4)" + +msgid "Data" +msgstr "Données" + +msgid "Debugging output" +msgstr "Sortie de débogage" + +msgid "Default" +msgstr "Par défaut" + +msgid "Default (fallback) Group" +msgstr "Groupe par défaut (repli)" + +msgid "Default (fallback) group for entries to land" +msgstr "Groupe par défaut (repli) pour ranger des entrées" + +msgid "Default PAC types" +msgstr "Types de PAC par défaut" + +msgid "Default SELinux user" +msgstr "Utilisateur SELinux par défaut" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" +"Utilisateur SELinux par défaut quand il n'y a aucune correspondance dans la " +"règle de mappe SELinux" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" +"La vue de la relation d'approbation par défaut ne peut être appliquée sur un " +"hôte" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" +"La vue de la relation d'approbation par défaut ne peut contenir des " +"utilisateurs IPA" + +msgid "Default attributes" +msgstr "Attributs par défaut" + +msgid "Default e-mail domain" +msgstr "Domaine par défaut pour les courriels" + +msgid "Default from" +msgstr "Valeur par défaut depuis" + +msgid "Default group for entries to land" +msgstr "Groupe par défaut pour les nouvelles entrées" + +msgid "Default group for new users" +msgstr "Groupe utilisateur par défaut pour les nouveaux utilisateurs" + +msgid "Default group for new users is not POSIX" +msgstr "Le groupe par défaut des nouveaux utilisateurs n'est pas POSIX" + +msgid "Default group for new users not found" +msgstr "Groupe par défaut pour les nouveaux utilisateurs introuvable" + +msgid "Default group objectclasses" +msgstr "Classes d'objets de groupe par défaut" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "Classes d'objets de groupe par défaut (liste séparée par des virgules)" + +msgid "Default host group" +msgstr "Groupe d'hôte par défaut" + +msgid "Default location of home directories" +msgstr "Emplacement par défaut des répertoires utilisateur" + +msgid "Default shell" +msgstr "Interpréteur de commande par défaut" + +msgid "Default shell for new users" +msgstr "Interpréteur de commande par défaut pour les nouveaux utilisateurs" + +msgid "Default ticket policy could not be read" +msgstr "La politique de ticket par défaut ne peut pas être lue" + +msgid "Default types of PAC supported for services" +msgstr "Types de PAC par défaut pris en charge pour des services" + +msgid "Default types of supported user authentication" +msgstr "Types d'authentification utilisateur pris en charge par défaut" + +msgid "Default user authentication types" +msgstr "Types d'authentification utilisateur par défaut" + +msgid "Default user group" +msgstr "Groupe d'utilisateur par défaut" + +msgid "Default user objectclasses" +msgstr "Classes d'objets utilisateur par défaut" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "" +"Classes d'objets utilisateurs par défaut (liste séparée par des virgules)" + +msgid "Default users group" +msgstr "Groupe utilisateur par défaut" + +msgid "Degrees Latitude" +msgstr "Degrés de latitude" + +msgid "Degrees Longitude" +msgstr "Degrés de longitude" + +msgid "Delegation" +msgstr "Délégation" + +msgid "Delegation name" +msgstr "Nom de délégation" + +msgid "Delegations" +msgstr "Délégations" + +msgid "Delete" +msgstr "Supprimer" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "Supprimer '%(value)s' pour %(name)s ?" + +msgid "Delete ACI." +msgstr "Supprimer une ICA." + +msgid "Delete DNS forward zone." +msgstr "Supprimer une zone de redirection DNS." + +msgid "Delete DNS resource record." +msgstr "Supprimer un enregistrement de ressources DNS." + +msgid "Delete DNS zone (SOA record)." +msgstr "Supprimer la zone DNS (enregistrement SOA)." + +msgid "Delete IPA server." +msgstr "Supprimer un serveur IPA." + +msgid "Delete Key, Unprovision" +msgstr "Supprimer une clé, ôter les permissions" + +msgid "Delete Server" +msgstr "Supprimer le serveur" + +msgid "Delete Sudo Command Group." +msgstr "Supprimer un groupe de commandes sudo." + +msgid "Delete Sudo Command." +msgstr "Supprimer une commande sudo." + +msgid "Delete Sudo Rule." +msgstr "Règle sudo supprimée." + +msgid "Delete a CA ACL." +msgstr "Supprimer une LCA d'AC." + +msgid "Delete a Certificate Profile." +msgstr "Supprimer un profil de certificat." + +msgid "Delete a DNS server" +msgstr "Supprimer un serveur DNS" + +msgid "Delete a RADIUS proxy server." +msgstr "Supprimer un serveur mandataire RADIUS." + +msgid "Delete a SELinux User Map." +msgstr "Supprimer une mappe d'utilisateurs SELinux" + +msgid "Delete a delegation." +msgstr "Supprimer une délégation." + +msgid "Delete a group password policy." +msgstr "Supprimer une politique de mot de passe." + +msgid "Delete a host." +msgstr "Supprimer un hôte." + +msgid "Delete a hostgroup." +msgstr "Supprimer un groupe d'hôtes." + +msgid "Delete a netgroup." +msgstr "Supprimer un groupe réseau." + +msgid "Delete a permission." +msgstr "Supprimer une permission." + +msgid "Delete a privilege." +msgstr "Supprimer un privilège" + +msgid "Delete a role." +msgstr "Supprimer un rôle" + +msgid "Delete a segment." +msgstr "Supprimer un segment." + +msgid "Delete a self-service permission." +msgstr "Supprimer une permission de libre service." + +msgid "Delete a stage user." +msgstr "Supprimer un utilisateur en attente." + +msgid "Delete a topology suffix." +msgstr "Supprimer un suffixe de topologie." + +msgid "Delete a trust." +msgstr "Supprimer la confiance." + +msgid "Delete a user" +msgstr "Supprimer un utilisateur" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" +"Supprimer un utilisateur en préservant l'entrée correspondantes pour un " +"usage futur" + +msgid "Delete a user." +msgstr "Supprimer un utilisateur." + +msgid "Delete a vault container." +msgstr "Supprimer un conteneur de coffre-fort." + +msgid "Delete a vault." +msgstr "Supprimer un coffre-fort." + +msgid "Delete all associated records" +msgstr "Supprimer les enregistrements associés" + +msgid "Delete all?" +msgstr "Tout supprimer ?" + +msgid "Delete an Group ID override." +msgstr "Supprimer une surcharge d'identifiants de groupes." + +msgid "Delete an HBAC rule." +msgstr "Supprimer une règle HBAC." + +msgid "Delete an HBAC service group." +msgstr "Supprimer un groupe de services HBAC." + +msgid "Delete an ID View." +msgstr "Supprimer une vue d'identifiants." + +msgid "Delete an ID override." +msgstr "Supprimer une surcharge d'identifiants." + +msgid "Delete an ID range." +msgstr "Supprimer une plage d'ID.." + +msgid "Delete an IPA location." +msgstr "Supprimer un emplacement IPA." + +msgid "Delete an IPA service." +msgstr "Supprimer un service IPA." + +msgid "Delete an OTP token." +msgstr "Supprimer un jeton OTP" + +msgid "Delete an User ID override." +msgstr "Supprimer une surcharge d'identifiants utilisateurs." + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" +"Supprimer une paire attribut/valeur. L'option sera évaluée\n" +"en dernier, après toutes les modifications et ajouts." + +msgid "Delete an automember rule." +msgstr "Supprimer une règle d'auto-adhésion." + +msgid "Delete an automount key." +msgstr "Supprimer une clé « automount »." + +msgid "Delete an automount location." +msgstr "Supprimer un emplacement « automount »." + +msgid "Delete an automount map." +msgstr "Supprimer une carte « automount »." + +msgid "Delete an existing HBAC service." +msgstr "Supprimer un service HBAC existant." + +msgid "Delete domain" +msgstr "Supprimer un domaine" + +msgid "Delete group." +msgstr "Supprimer un groupe." + +msgid "Delete mode" +msgstr "Mode suppression" + +msgid "Delete service delegation target." +msgstr "Supprimer une cible de délégation de service." + +msgid "Delete service delegation." +msgstr "Supprimer une règle de délégation de service." + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "ACI « %(value)s » supprimée" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "AC « %(value)s » supprimée" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "LCA d'AC « %(value)s » supprimée" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "Zone de redirection DNS « %(value)s » supprimée" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "Serveur DNS « %(value)s » supprimé" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "Zone DNS « %(value)s » supprimée" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants de groupes « %(value)s » supprimée" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "Règle HBAC « %(value)s » supprimée" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "Service HBAC « %(value)s » supprimé" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "Groupe de services HBAC « %(value)s » supprimé" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "Vue d'identifiants « %(value)s » supprimée" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants « %(value)s » supprimée" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "Plage d'ID « %(value)s » supprimée" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Emplacement IPA « %(value)s » supprimé" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "Serveur IPA « %(value)s » supprimé" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Jeton OTP « %(value)s » supprimé" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "Serveur mandataire RADIUS « %(value)s » supprimé" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "Mappe d'utilisateurs SELinux « %(value)s » supprimée." + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "Commande sudo « %(value)s » supprimée" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Groupe de commandes sudo « %(value)s » supprimé" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Règle sudo « %(value)s » supprimée" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants utilisateurs « %(value)s » supprimée" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "Règle d'auto-adhésion « %(value)s » supprimée" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "Clé « automount » « %(value)s » supprimée" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "Emplacement « automount » « %(value)s » supprimé" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "Carte « automount » « %(value)s » supprimée" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "Délégation « %(value)s » supprimée" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Groupe « %(value)s » supprimé" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "Hôte « %(value)s » supprimé" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Groupe d'hôtes « %(value)s » supprimé" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Groupe réseau « %(value)s » supprimé" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "Permission « %(value)s » supprimée" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "Privilège « %(value)s » supprimé" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "Profil « %(value)s » supprimé" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "Enregistrement « %(value)s » supprimé" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "Rôle « %(value)s » supprimé" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "Segment « %(value)s » supprimé" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "Permission de libre service « %(value)s » supprimée" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "Service « %(value)s » supprimé" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "Règle de délégation de service « %(value)s » supprimée" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "Cible de délégation de service « %(value)s » supprimée" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "Utilisateur en attente « %(value)s » supprimé" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Suffixe de topologie « %(value)s » supprimé" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "Confiance « %(value)s » supprimée" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Utilisateur « %(value)s » supprimé" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "Valeur « %(value)s » supprimée du coffre" + +msgid "Deleted vault container" +msgstr "Conteneur de coffre-fort supprimé" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" +"La suppression d'un groupe géré est interdite. Il doit d'abord être détaché." + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" +"La suppression de ce serveur n'est pas autorisée, elle laisserait votre " +"installation sans AC." + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "La suppression de ce serveur laissera votre installation sans DNS." + +msgid "Deny" +msgstr "Interdire" + +msgid "Department Number" +msgstr "Numéro du service" + +msgid "Deprecated options" +msgstr "Options obsolètes" + +#, python-format +msgid "Deprecated; use %s" +msgstr "Abandonné ; utiliser %s" + +msgid "Description" +msgstr "Description" + +msgid "Description of the purpose of the CA" +msgstr "Description de l'objet de l'AC" + +msgid "Detach a managed group from a user." +msgstr "Détacher un groupe administré d'un utilisateur." + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Groupe « %(value)s » détaché de l'utilisateur « %(value)s »" + +msgid "Detect" +msgstr "Détection" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" +"Déterminer si le greffon de compatibilité de schéma est configuré pour " +"servir les utilisateurs et groupes du domaine" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "" +"Déterminer si la commande « ipa-adtrust-install » a été exécutée sur ce " +"système" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "" +"Déterminer si la commande « ipa-adtrust-install » a été exécutée avec la " +"tâche « sidgen »" + +msgid "Dict of I18N messages" +msgstr "Dictionnaire de messages I18N" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "Dictionnaire de commande IPA codées JSON" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "Dictionnaire de méthode IPA codées JSON" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "Dictionnaire d'objets IPA codés JSON" + +msgid "Dictionary mapping variable name to value" +msgstr "Annuaire associant un nom de variable à une valeur" + +msgid "Digest" +msgstr "Condensé" + +msgid "Digest Type" +msgstr "Type de condensé" + +msgid "Digits" +msgstr "Chiffres" + +msgid "Direct" +msgstr "Direct" + +msgid "Direct Membership" +msgstr "Adhésion directe" + +msgid "Direction Latitude" +msgstr "Direction de latitude" + +msgid "Direction Longitude" +msgstr "Direction de longitude" + +msgid "Direction of replication between left and right replication node" +msgstr "" +"Direction de la réplication entre les nœuds gauche et droit de réplication" + +msgid "Disable" +msgstr "Désactiver" + +msgid "Disable DNS Forward Zone." +msgstr "Désactiver une zone de redirection DNS." + +msgid "Disable DNS Zone." +msgstr "Désactiver la zone DNS." + +msgid "Disable a CA ACL." +msgstr "Désactiver une LCA d'AC." + +msgid "Disable a Sudo Rule." +msgstr "Désactiver une règle sudo." + +msgid "Disable a user account." +msgstr "Désactiver un compte utilisateur." + +msgid "Disable an HBAC rule." +msgstr "Désactiver une règle HBAC." + +msgid "Disable an SELinux User Map rule." +msgstr "Désactiver une mappe d'utilisateurs SELinux" + +msgid "Disable per-user override" +msgstr "Désactiver la surcharge par utilisateur" + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "Désactiver la clé Kerberos et le certificat SSL d'un service." + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "" +"Désactiver la clé Kerberos, les certificats SSL et tous les services d'un " +"hôte." + +msgid "Disable token" +msgstr "Désactiver un jeton" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "Interdire l'utilisation de ressources IPA par le domaine approuvé" + +msgid "Disabled" +msgstr "Désactivé" + +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "LCA d'AC « %(value)s » désactivée" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "Zone de redirection DNS « %(value)s » désactivée" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "Zone DNS « %(value)s » désactivée" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "Règle HBAC « %(value)s » désactivée" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "Mappe d'utilisateurs SELinux « %(value)s » désactivée" + +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "Règle sudo « %s » désactivée" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "Hôte « %(value)s » désactivé" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "Service « %(value)s » désactivé" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "domaine approuvé « %(value)s » désactivé" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "Compte utilisateur « %(value)s » désactivé" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" +"Interdire aux utilisateurs, hôtes ou groupes d'hôtes de créer un tableau de " +"clés de cet hôte." + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" +"Interdire aux utilisateurs, hôtes ou groupes d'hôtes de créer un tableau de " +"clés de ce service." + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" +"Interdire aux utilisateurs, hôtes ou groupes d'hôtes à récupérer un tableau " +"de clés de cet hôte." + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" +"Interdire aux utilisateurs, hôtes ou groupes d'hôtes de récupérer un tableau " +"de clés de ce service." + +msgid "Display DNS resource." +msgstr "Afficher un enregistrement de ressources DNS." + +msgid "Display Sudo Command Group." +msgstr "Afficher un groupe de commandes sudo." + +msgid "Display Sudo Command." +msgstr "Afficher une commande sudo." + +msgid "Display Sudo Rule." +msgstr "Afficher une règle sudo." + +msgid "Display a segment." +msgstr "Afficher un segment." + +msgid "Display a single ACI given an ACI name." +msgstr "Afficher une ICA d'après son nom." + +msgid "Display an automount key." +msgstr "Afficher une clé « automount »." + +msgid "Display an automount location." +msgstr "Afficher un emplacement « automount »" + +msgid "Display an automount map." +msgstr "Afficher une carte « automount »." + +msgid "Display configuration of a DNS server." +msgstr "Afficher la configuration d'un nouveau serveur DNS." + +msgid "Display effective policy for a specific user" +msgstr "Afficher la politique effective d'un utilisateur donné" + +msgid "Display information about a DNS forward zone." +msgstr "Afficher des informations à propos des zones de redirection DNS." + +msgid "Display information about a DNS zone (SOA record)." +msgstr "" +"Afficher les informations au sujet d'une zone DNS (enregistrement SOA)." + +msgid "Display information about a RADIUS proxy server." +msgstr "Afficher les informations sur un serveur mandataire RADIUS." + +msgid "Display information about a command output." +msgstr "Afficher les informations sur une sortie de commande." + +msgid "Display information about a command parameter." +msgstr "Afficher des informations sur un paramètre de commande." + +msgid "Display information about a command." +msgstr "Afficher des informations sur une commande." + +msgid "Display information about a delegation." +msgstr "Afficher les informations sur une délégation." + +msgid "Display information about a help topic." +msgstr "Afficher les informations sur un sujet de l'aide." + +msgid "Display information about a host." +msgstr "Afficher les informations sur un hôte." + +msgid "Display information about a hostgroup." +msgstr "Afficher des informations sur un groupe d'hôtes." + +msgid "Display information about a named group." +msgstr "Afficher les informations d'un groupe nommé." + +msgid "Display information about a named service delegation rule." +msgstr "" +"Afficher les informations au sujet d'une règle de délégation de service." + +msgid "Display information about a named service delegation target." +msgstr "Afficher les informations sur une cible de délégation de service." + +msgid "Display information about a netgroup." +msgstr "Afficher l'information sur un groupe réseau." + +msgid "Display information about a permission." +msgstr "Afficher les informations sur une permission." + +msgid "Display information about a privilege." +msgstr "Afficher les informations sur un privilège." + +msgid "Display information about a range." +msgstr "Afficher les informations sur une plage." + +msgid "Display information about a role." +msgstr "Afficher les informations sur un rôle." + +msgid "Display information about a self-service permission." +msgstr "Afficher les informations sur une permission de libre service." + +msgid "Display information about a stage user." +msgstr "Afficher les informations sur un utilisateur en attente." + +msgid "Display information about a trust." +msgstr "Afficher des informations sur une relation de confiance." + +msgid "Display information about a user." +msgstr "Afficher l'information sur un utilisateur." + +msgid "Display information about a vault container." +msgstr "Afficher les informations sur un conteneur de coffre-fort." + +msgid "Display information about a vault." +msgstr "Afficher des informations sur un coffre-fort." + +msgid "Display information about an Group ID override." +msgstr "Afficher les informations d'une surcharge d'identifiants de groupes." + +msgid "Display information about an HBAC service group." +msgstr "Afficher les informations sur un groupe de services HBAC." + +msgid "Display information about an HBAC service." +msgstr "Afficher des informations sur un service HBAC." + +msgid "Display information about an ID View." +msgstr "Afficher les informations d'une vue d'identifiants." + +msgid "Display information about an ID override." +msgstr "Afficher les informations d'une surcharge d'identifiants." + +msgid "Display information about an IPA location." +msgstr "Afficher les informations d'un emplacement IPA." + +msgid "Display information about an IPA service." +msgstr "Afficher les informations sur un service IPA." + +msgid "Display information about an OTP token." +msgstr "Afficher des informations au sujet du jeton OTP" + +msgid "Display information about an User ID override." +msgstr "Afficher les informations d'une surcharge d'identifiants utilisateurs." + +msgid "Display information about an automember rule." +msgstr "Afficher des informations au sujet d'une règle d'auto-adhésion. " + +msgid "Display information about password policy." +msgstr "Afficher les informations sur une politique de mot de passe." + +msgid "Display information about the default (fallback) automember groups." +msgstr "" +"Afficher des informations pour les groupes d'auto-adhésion par défaut " +"(repli).\n" +" " + +msgid "Display name" +msgstr "Nom affiché" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" +"Affiche les droits d'accès sur cette entrée (requiert --all). Cf. la page de " +"manuel de « ipa » pour plus d'informations." + +msgid "Display the current Kerberos ticket policy." +msgstr "Afficher la politique de tickets Kerberos." + +msgid "Display the list of realm domains." +msgstr "Afficher la liste des domaines du royaume." + +msgid "Display the properties of a CA ACL." +msgstr "Afficher les propriétés d'une LCA d'AC." + +msgid "Display the properties of a CA." +msgstr "Afficher les propriétés d'une AC." + +msgid "Display the properties of a Certificate Profile." +msgstr "Afficher les propriétés d'un profil de certificat." + +msgid "Display the properties of a SELinux User Map rule." +msgstr "Afficher les propriétés d'une mappe d'utilisateurs SELinux" + +msgid "Display the properties of an HBAC rule." +msgstr "Afficher les propriétés d'une règle HBAC." + +msgid "Display user record for current Kerberos principal" +msgstr "" +"Afficher l'enregistrement utilisateur pour le principal Kerberos en cours" + +msgid "Do not display QR code" +msgstr "Ne pas afficher le code QR" + +msgid "Do you also want to perform DNS check?" +msgstr "Voulez-vous aussi faire une vérification DNS ?" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" +"Voulez-vous vérifier si l'adresse du nouveau serveur faisant autorité est " +"dans le DNS" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "Voulez-vous supprimer l'alias kerberos ${alias} ?" + +msgid "Do you want to remove the certificate hold?" +msgstr "Voulez-vous supprimer le blocage du certificat ?" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" +"Voulez-vous révoquer ce certificat ? Sélectionnez une raison depuis la liste " +"déroulante." + +msgid "Do you want to update system DNS records?" +msgstr "Voulez-vous mettre à jour les enregistrements DNS du système ?" + +msgid "Documentation" +msgstr "Documentation" + +msgid "Dogtag Authority ID" +msgstr "ID de l'autorité Dogtag" + +msgid "Domain" +msgstr "Domaine" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" +"Le domaine « %(domain)s » n'est pas un domaine racine pour la forêt " +"« %(forest)s »" + +msgid "Domain GUID" +msgstr "GUID du domaine" + +msgid "Domain Level" +msgstr "Niveau du domaine" + +msgid "Domain Level cannot be lowered." +msgstr "Le niveau du domaine ne peut être redescendu." + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" +"Le niveau actuel du domaine ne peut être relevé à {0}, le serveur {1} ne le " +"prend pas en charge." + +msgid "Domain NetBIOS name" +msgstr "Nom de domaine NetBIOS" + +msgid "Domain SID" +msgstr "SID du domaine" + +msgid "Domain SID of the trusted domain" +msgstr "SID du domaine approuvé" + +msgid "Domain Security Identifier" +msgstr "Identifiant de sécurité du domaine" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "Contrôleur de domaine pour le domaine Active Directory (optionnel)" + +msgid "Domain enabled" +msgstr "Domaine activé" + +msgid "Domain name" +msgstr "Nom de domaine" + +msgid "Don't create user private group" +msgstr "Ne pas créer de groupe privé" + +msgid "Don't wait for rebuilding membership" +msgstr "Ne pas attendre pour reconstruire l'appartenance" + +msgid "Download" +msgstr "Téléchargement" + +msgid "Download certificate as PEM formatted file." +msgstr "Télécharger le certificat dans un fichier au format PEM." + +msgid "Dry run" +msgstr "Essai à blanc" + +msgid "Duplicate keys skipped:" +msgstr "Clés dupliquées ignorées :" + +msgid "Duplicate maps skipped:" +msgstr "Cartes dupliquées ignorées :" + +msgid "Dynamic update" +msgstr "Mise à jour dynamique" + +msgid "Edit" +msgstr "Modifier" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "Modifier ${entity}" + +msgid "Effective attributes" +msgstr "Attributs impactés" + +msgid "Email address" +msgstr "Adresse courriel" + +msgid "Employee Information" +msgstr "Informations employé" + +msgid "Employee Number" +msgstr "Matricule" + +msgid "Employee Type" +msgstr "Type d'employé" + +msgid "Enable" +msgstr "Activer" + +msgid "Enable DNS Forward Zone." +msgstr "Activer une zone de redirection DNS." + +msgid "Enable DNS Zone." +msgstr "Activer la zone DNS." + +msgid "Enable a CA ACL." +msgstr "Activer une LCA d'AC." + +msgid "Enable a Sudo Rule." +msgstr "Activer une règle sudo." + +msgid "Enable a user account." +msgstr "Activer un compte utilisateur." + +msgid "Enable an HBAC rule." +msgstr "Activer une règle HBAC." + +msgid "Enable an SELinux User Map rule." +msgstr "Activer une mappe d'utilisateurs SELinux" + +msgid "Enable migration mode" +msgstr "Activer le mode migration" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "Active ou désactive un PKINIT anonyme" + +msgid "Enable token" +msgstr "Activer un jeton" + +msgid "Enabled" +msgstr "Activé(e)" + +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "LCA d'AC « %(value)s » activée" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "Zone de redirection DNS « %(value)s » activée" + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "Zone DNS « %(value)s » activée" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "Règle HBAC « %(value)s » activée" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "Mappe d'utilisateurs SELinux « %(value)s » activée" + +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "Règle sudo « %s » activée" + +msgid "Enabled server roles" +msgstr "Rôles serveur activés" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "Activation du domaine approuvé « %(value)s »" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "Compte utilisateur « %(value)s » activé" + +msgid "Encryption types to request" +msgstr "Type de chiffrement à demander" + +msgid "Enctype comparison failed!\n" +msgstr "Échec de comparaison du « enctype » !\n" + +msgid "Enrolled" +msgstr "Enregistré" + +msgid "Enrollment" +msgstr "Inscription" + +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "Échec de l'enregistrement. %s\n" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "Entrer à nouveau %(label)s pour validation :" + +msgid "Enter trusted group name." +msgstr "Saisir le nom du groupe approuvé." + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" +"Saisir le nom du groupe approuvé ou du groupe IPA. N.B. : la recherche " +"n'indique pas les groupes des domaines approuvés." + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" +"Saisir le nom de l'utilisateur approuvé ou de l'utilisateur IPA. N.B. : la " +"recherche n'indique pas les utilisateurs des domaines approuvés." + +msgid "Enter trusted user login." +msgstr "Saisir le nom de l'utilisateur approuvé." + +msgid "Entry" +msgstr "Entrée" + +#, python-format +msgid "Entry %s does not exist" +msgstr "L'entrée %s n'existe pas" + +#, python-format +msgid "Entry %s not found" +msgstr "Entrée %s introuvable" + +msgid "Entry RDN is not 'uid'" +msgstr "Le RDN de l'entrée n'est pas l'attribut « uid »" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "L'entrée ne possède aucun attribut « %(attribute)s »" + +msgid "Enumerate all the hosts the view applies to." +msgstr "Énumérer tous les hôtes auxquels la vue s'applique." + +msgid "Error" +msgstr "Erreur" + +msgid "Error changing account status" +msgstr "Erreur lors du changement d'état du compte" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "Erreur à l'obtention du royaume Kerberos par défaut : %s.\n" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "Impossible d'obtenir les justificatifs d'identité initiaux : %s.\n" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "Erreur à l'analyse de « %1$s » : %2$s.\n" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "Erreur à la résolution du tableau de clés : %s.\n" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "" +"Erreur lors du stockage des justificatifs d'identité dans le cache : %s.\n" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" +"Établir une relation d'approbation bidirectionnelle. Par défaut, la relation " +"est unilatérale entrante uniquement." + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" +"Établit une relation d'approbation externe vers un domaine dans une autre " +"forêt. La relation n'est pas transitive au delà du domaine." + +msgid "Establish using" +msgstr "Établir en utilisant" + +msgid "Established and verified" +msgstr "Établie et vérifiée" + +msgid "Exchanger" +msgstr "Changeur" + +msgid "Exclude from" +msgstr "Exclure de" + +msgid "Excluded attributes" +msgstr "Attributs exclus" + +msgid "Exclusive" +msgstr "Exclusion" + +msgid "Exclusive Regex" +msgstr "« Regex » d'exclusion" + +msgid "Expand All" +msgstr "Tout déplier" + +msgid "Expires On" +msgstr "Expire le" + +msgid "Export plugin meta-data for the webUI." +msgstr "Exporter les meta-données du greffons pour l'interface Web" + +msgid "Expression" +msgstr "Expression" + +msgid "External" +msgstr "Externe" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" +"Groupe externe en tant que tel les commandes sont lancées (« sudorule-find » " +"uniquement)" + +msgid "External Groups of RunAs Users" +msgstr "Groupes externes de « RunAs Users »" + +msgid "External Groups of users that the command can run as" +msgstr "" +"Groupes externes d'utilisateurs comme tel la commande peut être exécutée" + +msgid "External User" +msgstr "Utilisateur externe" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" +"Utilisateur externe comme tel les commandes peuvent être lancées (« sudorule-" +"find » uniquement)" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" +"Utilisateur externe auquel la règle s'applique (« sudorule-find » uniquement)" + +msgid "External host" +msgstr "Système externe" + +msgid "External member" +msgstr "Membre externe" + +msgid "External trust" +msgstr "Relation d'approbation externe" + +msgid "Extra hashes to generate in password plug-in" +msgstr "Hachages additionnels à générer dans le greffon mots de passe" + +msgid "Extra target filter" +msgstr "Filtre cible supplémentaire" + +msgid "Failed CAs" +msgstr "AC en échec" + +msgid "Failed RunAs" +msgstr "Échec de « RunAs »" + +msgid "Failed RunAsGroup" +msgstr "Échec de « RunAsGroup »" + +msgid "Failed allowed to create keytab" +msgstr "Échec de l'autorisation de création de tableaux de clés" + +msgid "Failed allowed to retrieve keytab" +msgstr "Échec de l'autorisation de récupération des tableaux de clés" + +msgid "Failed hosts/hostgroups" +msgstr "Hôtes/groupes d'hôtes en échec" + +msgid "Failed logins" +msgstr "Connexions ayant échoué" + +msgid "Failed managedby" +msgstr "Échec de « managedby »" + +msgid "Failed members" +msgstr "Membres en échec" + +msgid "Failed owners" +msgstr "Propriétaires en échec" + +msgid "Failed profiles" +msgstr "Profils en échec" + +msgid "Failed service/service groups" +msgstr "Services/groupes de service en échec" + +msgid "Failed source hosts/hostgroups" +msgstr "Hôtes/groupes d'hôtes source en échec" + +msgid "Failed targets" +msgstr "Échec de la cible" + +msgid "Failed to add" +msgstr "Échec lors de l'ajout" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "Échec lors de l'ajout de la clé au tableau\n" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" +"Échec à l'ajout de l'utilisateur dans le groupe par défaut. Utiliser la " +"commande « ipa group-add-member » pour l'ajouter manuellement." + +msgid "Failed to authenticate to CA REST API" +msgstr "Échec de l'authentification auprès de l'API REST de l'AC" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "La liaison au serveur a échoué !\n" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" +"Échec du nettoyage du memberPrincipal %(principal)s dans l'entrée s4u2proxy " +"%(dn)s : %(err)s" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "" +"Échec du nettoyage des entrées du nom d'hôte DNA pour %(master)s : %(err)s" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "Échec du nettoyage des entrées DNS de %(hostname)s : %(err)s" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "Échec du nettoyage du principal ou des clés du serveur : %(err)s" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "Échec à la fermeture du tableau de clés\n" + +#, c-format +msgid "Failed to create control!\n" +msgstr "Échec à la création du contrôle !\n" + +#, c-format +msgid "Failed to create key material\n" +msgstr "Échec de création du contenu de la clé\n" + +msgid "Failed to create key!\n" +msgstr "Échec de création de la clé !\n" + +msgid "Failed to create random key!\n" +msgstr "Échec de création d'une clé aléatoire !\n" + +msgid "Failed to decode control reply!\n" +msgstr "Impossible de décoder la réponse de contrôle !\n" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "Échec à l'obtention du tableau de clés\n" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "Échec d'obtention du tableau de clés !\n" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "Impossible d'obtenir le résultat : %s\n" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "Échec à l'ouverture du tableau de clés\n" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "impossible d'ouvrir le fichier de configuration %s\n" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "Impossible d'ouvrir le tableau de clés\n" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "Échec de l'ouverture du tableau de clés « %1$s » : %2$s\n" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "Impossible d'analyser le fichier de configuration %s\n" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "Impossible d'analyser le résultat étendu : %s\n" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "Impossible d'analyser le résultat : %s\n" + +msgid "Failed to remove" +msgstr "Échec à la suppression" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" +"Échec de la suppression du serveur %(master)s de la liste de serveurs : " +"%(err)s" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "Échec lors de la récupération de toute clé" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "Échec lors de la récupération du type de chiffrement %1$s (#%2$d)\n" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "Échec lors de la récupération du type de chiffrement #%d\n" + +msgid "Failed users/groups" +msgstr "Utilisateurs/groupes en échec" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "Échec dans le décodage du « Certificate Signing Request » : %s" + +msgid "Failure reset interval" +msgstr "Délai de réinitialisation après échec" + +msgid "Fallback primary group" +msgstr "Groupe principal de repli" + +msgid "Fallback to AD DC LDAP" +msgstr "Repli sur l'annuaire LDAP du contrôleur de domaine AD" + +msgid "False" +msgstr "Faux" + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" +"False si la migration échoue parce que le greffon « compat » est activé." + +msgid "False if migration mode was disabled." +msgstr "Faux si le mode de migration a été désactivé." + +msgid "Fax Number" +msgstr "Numéro de fax" + +msgid "Fetch domains" +msgstr "Récupérer les domaines" + +msgid "Fetching DNS zones." +msgstr "Récupération des zones DNS." + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" +"Échec de la récupération des domaines depuis la forêt approuvée. Voir les " +"informations détaillées dans le journal d'erreur." + +#, python-format +msgid "File %(file)s not found" +msgstr "Fichier %(file)s introuvable" + +msgid "File containing data to archive" +msgstr "Fichier contenant les données à archiver" + +msgid "File containing profile configuration" +msgstr "Fichier contenant la configuration du profil" + +msgid "File containing the new vault password" +msgstr "Fichier contenant le nouveau mot de passe du coffre-fort" + +msgid "File containing the new vault public key" +msgstr "Fichier contenant la nouvelle clé publique du coffre-fort" + +msgid "File containing the old vault password" +msgstr "Fichier contenant l'ancien mot de passe du coffre-fort" + +msgid "File containing the old vault private key" +msgstr "Fichier contenant l'ancienne clé privée du coffre-fort" + +msgid "File containing the vault password" +msgstr "Fichier contenant le mot de passe du coffre-fort" + +msgid "File containing the vault private key" +msgstr "Fichier contenant la clé privée du coffre-fort" + +msgid "File containing the vault public key" +msgstr "Fichier contenant la clé publique du coffre-fort" + +msgid "File to load the certificate from." +msgstr "Fichier depuis lequel charger le certificat." + +msgid "File to store retrieved data" +msgstr "Fichier duquel récupérer les données" + +msgid "File to store the certificate in." +msgstr "Fichier dans lequel stocker le certificat." + +msgid "Filename is empty" +msgstr "Le nom de fichier est vide" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "Nom de fichier du profil brut. Le format XML n'est pas pris en charge." + +msgid "Filter" +msgstr "Filtre" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "Filtre disponible ${other_entity}" + +msgid "Find" +msgstr "Rechercher" + +msgid "Find a server role on a server(s)" +msgstr "Trouver les rôles serveur de serveurs" + +msgid "Fingerprint" +msgstr "Empreinte" + +msgid "Fingerprint (SHA1)" +msgstr "Empreinte (SHA1)" + +msgid "Fingerprint Type" +msgstr "Type d'empreinte" + +msgid "Fingerprints" +msgstr "Empreintes" + +msgid "First" +msgstr "Premier" + +msgid "First Code" +msgstr "Premier code" + +msgid "First OTP" +msgstr "Premier OTP" + +msgid "First Posix ID of the range" +msgstr "Premier ID POSIX de la plage" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "Premier ID POSIX de la plage réservée au domaine approuvé" + +msgid "First RID of the corresponding RID range" +msgstr "Premier RID dans la plage de RID correspondante" + +msgid "First RID of the secondary RID range" +msgstr "Premier RID dans la plage de RID secondaire" + +msgid "First date/time the token can be used" +msgstr "Date et heure à partir desquels le jeton peut être utilisé" + +msgid "First name" +msgstr "Prénom" + +msgid "Flags" +msgstr "Marqueurs" + +msgid "Following segments were not deleted:" +msgstr "Les segments suivants n'ont pas été supprimés :" + +msgid "Force" +msgstr "Forcer" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" +"Forcer la création de la zone DNS même si elle recouvre une zone existante." + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" +"Forcer la création de la zone DNS même si le serveur de nom n'est pas " +"résoluble." + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" +"Forcer la création de la zone DNS même si le serveur de nom n'est pas " +"résoluble. (Obsolète)" + +msgid "Force Update" +msgstr "Forcer la mise à jour" + +msgid "Force adding domain even if not in DNS" +msgstr "Forcer l'ajout d'un domaine même si absent des DNS" + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "" +"Forcer un changement de serveur de nom même si le serveur de nom n'est pas " +"dans le DNS" + +msgid "Force server removal" +msgstr "Forcer la suppression du serveur" + +msgid "Force server removal even if it does not exist" +msgstr "Forcer la suppression du serveur même s'il n'existe pas" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "" +"Forcer l'hôte à rejoindre le domaine. Rejoindre à nouveau même s'il a déjà " +"rejoint le domaine." + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "On force la suppression de %(hostname)s" + +msgid "Format error" +msgstr "Erreur de format" + +msgid "Forward first" +msgstr "Redirection prioritaire" + +msgid "Forward only" +msgstr "Redirection uniquement" + +msgid "Forward policy" +msgstr "Politique de redirection" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" +"La politique de redirection est définie pour lui dans le DNS d'IPA, peut-" +"être le redirecteur pointe-t'il vers un hôte incorrect ?" + +msgid "Forward to server instead of running locally" +msgstr "Rediriger vers le serveur au lieu d'exécuter localement" + +msgid "Forward zones only" +msgstr "Zones redirigées uniquement" + +msgid "Forwarders" +msgstr "Redirecteurs de zone" + +msgid "Forwarding disabled" +msgstr "Redirection désactivée" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" +"La politique de transfert entre en conflit avec certaines zones automatiques " +"vides. Les requêtes pour les zones spécifiées dans la RFC 6303 ignoreront le " +"transfert et la récursion et résulteront toujours en des réponses NXDOMAIN. " +"Pour surcharger ce comportement, utiliser la politique de transfert « only »." + +#, python-format +msgid "Found '%(value)s'" +msgstr "'%(value)s' trouvé." + +msgid "Full name" +msgstr "Nom complet" + +msgid "Fully Qualified Host Name" +msgstr "Nom d'hôte pleinement qualifié" + +msgid "GECOS" +msgstr "GECOS" + +msgid "GID" +msgstr "GID" + +msgid "GID (use this option to set it manually)" +msgstr "GID (utiliser cette option pour le définir manuellement)" + +msgid "General" +msgstr "Général" + +msgid "Generate OTP" +msgstr "Créer un OTP" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "Créer un mot de passe aléatoire utilisé pour l'inscription en masse" + +msgid "Generate a random user password" +msgstr "Créer un mot de passe aléatoire" + +msgid "Generate automount files for a specific location." +msgstr "Créer les fichiers « automount » pour un emplacement donné." + +msgid "Generated OTP" +msgstr "OTP créé" + +msgid "Get" +msgstr "Obtenir" + +msgid "Get Certificate" +msgstr "Obtenir le certificat" + +msgid "Global DNS configuration is empty" +msgstr "La configuration globale DNS est vide" + +msgid "Global Trust Configuration" +msgstr "Configuration globale des relations d'approbation" + +msgid "Global forwarders" +msgstr "Redirecteurs globaux" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Redirecteurs globaux. Un port personnalisé peut être indiqué pour chaque " +"redirecteur en utilisant le format standard « adresse_IP port PORT »" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" +"Politique globale de redirection. Mettre à « none » pour désactiver tout " +"redirecteur global configuré." + +msgid "Granted rights" +msgstr "Droits accordés" + +msgid "Granting privilege to roles" +msgstr "Privilèges accordés aux rôles" + +msgid "Group" +msgstr "Groupe" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "Le groupe « %s » n'existe pas" + +msgid "Group ID Number" +msgstr "Numéro d'identifiant de groupe" + +msgid "Group ID override" +msgstr "Surcharge d'identifiant de groupe" + +msgid "Group ID overrides" +msgstr "Surcharges d'identifiants de groupes" + +msgid "Group Options" +msgstr "Options de groupe" + +msgid "Group Settings" +msgstr "Paramètres de groupe" + +msgid "Group Type" +msgstr "Type de groupe" + +msgid "Group container" +msgstr "Conteneur de groupes" + +msgid "Group description" +msgstr "Description du groupe" + +msgid "Group name" +msgstr "Nom du groupe" + +msgid "Group object class" +msgstr "Classe d'objets groupe" + +msgid "Group object overrides" +msgstr "Surcharges des objets groupes" + +msgid "Group search fields" +msgstr "Champs de recherche de groupe" + +msgid "Group to apply ACI to" +msgstr "Groupe auquel appliquer l'ACI" + +msgid "Group to override" +msgstr "Groupes à surcharger" + +msgid "Grouping Type" +msgstr "Type de groupe" + +msgid "Grouping to which the rule applies" +msgstr "Type de groupe auquel la règle s'applique" + +msgid "Groups" +msgstr "Groupes" + +msgid "Groups allowed to create keytab" +msgstr "Groupes autorisés à créer un tableau de clés" + +msgid "Groups allowed to retrieve keytab" +msgstr "Groupes autorisés à récupérer un tableau de clés" + +msgid "Groups of RunAs Users" +msgstr "Groupe de « RunAs Users »" + +msgid "HBAC Rule" +msgstr "Règle HBAC" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "" +"Règle HBAC délimitant les utilisateurs, les groupes et les groupes d'hôtes" + +msgid "HBAC Rules" +msgstr "Règles HBAC" + +msgid "HBAC Service" +msgstr "Service HBAC" + +msgid "HBAC Service Group" +msgstr "Groupe de services HBAC" + +msgid "HBAC Service Groups" +msgstr "Groupes de services HBAC" + +msgid "HBAC Services" +msgstr "Services HBAC" + +msgid "HBAC Test" +msgstr "Test HBAC" + +msgid "HBAC rule" +msgstr "Règle HBAC" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "Règle HBAC %(rule)s introuvable" + +msgid "HBAC rule and local members cannot both be set" +msgstr "" +"Des membres locaux et des membres d'une règle HBAC ne peuvent pas être " +"définis simultanément" + +msgid "HBAC rules" +msgstr "Règles HBAC" + +msgid "HBAC service" +msgstr "Service HBAC" + +msgid "HBAC service description" +msgstr "Description de service HBAC" + +msgid "HBAC service group" +msgstr "Groupe de services HBAC" + +msgid "HBAC service group description" +msgstr "Description de groupe de services HBAC" + +msgid "HBAC service groups" +msgstr "Groupes de services HBAC" + +msgid "HBAC service groups to add" +msgstr "Groupes de services HBAC à ajouter" + +msgid "HBAC service groups to remove" +msgstr "Groupes de services HBAC à supprimer" + +msgid "HBAC services" +msgstr "Services HBAC" + +msgid "HBAC services to add" +msgstr "Services HBAC à ajouter" + +msgid "HBAC services to remove" +msgstr "Services HBAC à supprimer" + +msgid "HIP record" +msgstr "Enregistrement HIP" + +msgid "HOTP Authentication Window" +msgstr "Fenêtre d'authentification HOTP" + +msgid "HOTP Synchronization Window" +msgstr "Fenêtre de synchronisation HOTP" + +msgid "HOTP authentication skip-ahead" +msgstr "passage d'occurrence d'authentification HOTP" + +msgid "HOTP synchronization skip-ahead" +msgstr "passage d'occurrence de synchronisation HOTP" + +msgid "HTTP Error" +msgstr "Erreur HTTP" + +msgid "Hardware MAC address(es) on this host" +msgstr "Adresse(s) MAC du matériel sur cet hôte" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "Plate-forme matérielle de l'hôte (par ex. Lenovo T61)" + +msgid "Help topic" +msgstr "Sujet de l'aide" + +msgid "Hide" +msgstr "Masquer" + +msgid "Hide details" +msgstr "Cacher les détails" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "Masquer les détails des règles satisfaites ou pas, ou invalides" + +msgid "History size" +msgstr "Taille de l'historique" + +msgid "Home directory" +msgstr "Répertoire personnel" + +msgid "Home directory base" +msgstr "Base du répertoire utilisateur" + +msgid "Horizontal Precision" +msgstr "Précision horizontale" + +msgid "Host" +msgstr "Hôte" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "Hôte « %(host)s » introuvable" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "" +"L'hôte « %(hostname)s » n'a pas d'enregistrement DNS de type A/" +"AAAA correspondant" + +msgid "Host Certificate" +msgstr "Certificat de l'hôte" + +msgid "Host Group" +msgstr "Groupe d'hôtes" + +msgid "Host Group Settings" +msgstr "Paramètres des groupe d'hôtes" + +msgid "Host Groups" +msgstr "Groupes d'hôtes" + +msgid "Host Groups allowed to create keytab" +msgstr "Groupes d'hôtes autorisés à créer un tableau de clés" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "Groupes d'hôtes autorisés à récupérer un tableau de clés" + +msgid "Host Masks" +msgstr "Masques d'hôtes" + +msgid "Host Name" +msgstr "Nom d'hôte" + +msgid "Host Settings" +msgstr "Paramètres d'hôte" + +msgid "Host category" +msgstr "Catégorie de systèmes" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" +"Catégorie d'hôte (les sémantiques associées à cet attribut vous sont propres)" + +msgid "Host category the ACL applies to" +msgstr "Catégorie d'hôte à laquelle la LCA s'applique" + +msgid "Host category the rule applies to" +msgstr "Catégorie d'hôtes à laquelle la règle s'applique" + +msgid "Host group rule" +msgstr "Règle de groupes d'hôtes" + +msgid "Host group rules" +msgstr "Règles de groupes d'hôtes" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "Plate-forme matérielle de l'hôte (par ex. « Lenovo T61 »)" + +#, c-format +msgid "Host is already joined.\n" +msgstr "Hôte déjà joint.\n" + +msgid "Host is not supported" +msgstr "L'hôte n'est pas pris en charge" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "Localité de l'hôte (par ex. « Paris, IDF »)" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "Emplacement de l'hôte (par ex. \"Lab 2\")" + +msgid "Host name" +msgstr "Nom d'hôte" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "Système d'exploitation et version (par ex. « Fedora 9 »)" + +msgid "Host unprovisioned" +msgstr "Permissions de l'hôte supprimées" + +msgid "Host-based access control commands" +msgstr "Commandes de contrôle d'accès basé sur l'hôte" + +msgid "Host-group" +msgstr "Groupe d'hôtes" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" +"Groupes d'hôtes auxquels s'applique la vue d'identifiants. Veuillez noter " +"que cette vue ne s'applique pas automatiquement aux hôtes ajoutés au groupe " +"après l'exécution de la commande idview-apply." + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" +"Groupes d'hôtes dont les hôtes doivent se voir la vue d'identifiants " +"retirée. Veuillez noter que la vue n'est pas automatiquement retirée de tout " +"hôte ajouté au groupe d'hôte après l'exécution de la commande idview-unapply." + +msgid "Hostname" +msgstr "Nom d'hôte" + +msgid "Hostname (FQDN)" +msgstr "Nom d'hôte (FQDN)" + +msgid "Hostname of this server" +msgstr "Nom d'hôte de ce serveur" + +msgid "Hosts" +msgstr "Hôtes" + +msgid "Hosts allowed to create keytab" +msgstr "Hôtes autorisés à créer un tableau de clés" + +msgid "Hosts allowed to retrieve keytab" +msgstr "Hôtes autorisés à récupérer un tableau de clés" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" +"Hôtes ou groupes d'hôtes dont la vue d'identifiants n'a pu être retirée." + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" +"Hôtes ou groupes d'hôtes auxquels cette vue d'identifiants ne pourra pas " +"être appliquée." + +msgid "Hosts that ID View was cleared from." +msgstr "Hôtes dont la vue d'identifiants a été retirée." + +msgid "Hosts that this ID View was applied to." +msgstr "Hôtes auxquels s'applique cette vue d'identifiants." + +msgid "Hosts the view applies to" +msgstr "Hôtes auxquels la vue s'applique" + +msgid "Hosts to apply the ID View to" +msgstr "Hôtes auxquels appliquer la vue" + +msgid "Hosts to clear (any) ID View from." +msgstr "Hôtes dont on va retirer toute vue d'identifiants." + +msgid "How long should negative responses be cached" +msgstr "Durée de maintien en cache des réponses négatives" + +msgid "ID Range" +msgstr "Plage d'ID" + +msgid "ID Ranges" +msgstr "Plages d'ID" + +msgid "ID View" +msgstr "Vue d'identifiants" + +msgid "ID View Name" +msgstr "Nom de la vue d'identifiants" + +msgid "ID View already applied" +msgstr "Vue d'identifiants déjà appliquée" + +#, python-format +msgid "ID View applied to %i host." +msgstr "Vue d'identifiants appliquée à %i hôte." + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "Vue d'identifiants appliquée à %i hôtes." + +#, python-format +msgid "ID View cleared from %i host." +msgstr "Vue d'identifiants retirée de %i hôte." + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "Vue d'identifiants retirée de %i hôtes." + +msgid "ID Views" +msgstr "Vues d'identifiants" + +msgid "ID override" +msgstr "Surcharge d'identifiants" + +msgid "ID overrides cannot be renamed" +msgstr "Les surchages d'identifiants ne peuvent être renommées" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" +"La plage ID existe déjà pour ce domaine approuvé, mais est d'un type " +"différent. Vous devez soit supprimer l'ancienne plage manuellement, soit ne " +"pas forcer le type via l'option « --range-type »." + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" +"Type de plage d'identifiants, doit être ipa-ad-trust-posix, ipa-ad-trust ou " +"ipa-local" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" +"Une plage d'ID avec le même nom, mais pour un SID de domaine différent " +"existe déjà. La plage d'ID pour le nouveau domaine approuvé doit être créée " +"manuellement." + +msgid "IP Address" +msgstr "Adresse IP" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "L'adresse IP %(ip)s est déjà assignée au domaine %(domain)s." + +msgid "IP network to create reverse zone name from" +msgstr "Réseau IP pour lequel créer un nom de zone inverse" + +msgid "IPA AD trust agents" +msgstr "Agents IPA de relation d'approbation AD" + +msgid "IPA AD trust controllers" +msgstr "Contrôleurs IPA de relation d'approbation AD" + +msgid "IPA CA cannot be deleted" +msgstr "L'AC de IPA ne peut être supprimée" + +msgid "IPA CA renewal master" +msgstr "Maître de renouvellement d'AC IPA" + +msgid "IPA CA servers" +msgstr "Serveurs d'AC IPA" + +msgid "IPA DNS records" +msgstr "Enregistrements DNS IPA" + +msgid "IPA DNS servers" +msgstr "Serveurs DNS IPA" + +msgid "IPA DNS version" +msgstr "Version du DNS de IPA." + +msgid "IPA DNSSec key master" +msgstr "Maître des clés DNSSec IPA" + +msgid "IPA Error" +msgstr "Erreur IPA" + +msgid "IPA KRA servers" +msgstr "Serveurs KRA IPA" + +msgid "IPA Location" +msgstr "Emplacement IPA" + +msgid "IPA Location description" +msgstr "Description de l'emplacement IPA" + +msgid "IPA Locations" +msgstr "Emplacements IPA" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" +"Le type de plage IPA doit être « ipa-ad-trust » ou « ipa-ad-trust-posix » " +"lorsque le SID du domaine approuvé est indiqué." + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" +"Le type de plage IPA ne doit être ni « ipa-ad-trust », ni « ipa-ad-trust-" +"posix » lorsque le SID du domaine approuvé n'est pas indiqué." + +msgid "IPA Server" +msgstr "Serveur IPA" + +msgid "IPA Server Role" +msgstr "Rôle serveur IPA" + +msgid "IPA Server Roles" +msgstr "Rôles serveur IPA" + +msgid "IPA Server to use" +msgstr "Serveur IPA à utiliser" + +msgid "IPA Servers" +msgstr "Serveurs IPA" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" +"IPA ne gère pas la zone %(zone)s, merci de modifier vos serveurs " +"DNS manuellement" + +msgid "IPA location name" +msgstr "Nom de l'emplacement IPA" + +msgid "IPA location records" +msgstr "Enregistrements du ou des emplacements IPA" #, python-format msgid "" @@ -30256,99 +11382,6672 @@ msgstr "" "vérifiez que le DNS AD est capable de résoudre les enregistrements SRV " "%(records)s vers le serveur IPA adéquat." -#, fuzzy -msgid "Credentials" +msgid "IPA masters" +msgstr "Maîtres IPA" + +#, c-format +msgid "IPA namingContext not found\n" +msgstr "« namingContext » d'IPA introuvable\n" + +msgid "IPA object" +msgstr "objet IPA" + +msgid "IPA role name" +msgstr "Nom du rôle IPA" + +msgid "IPA server configured as DNSSec key master" +msgstr "Serveur IPA configuré comme maître des clés DNSSec" + +msgid "IPA server domain cannot be deleted" +msgstr "Le domaine du serveur IPA ne peut être supprimé" + +msgid "IPA server domain cannot be omitted" +msgstr "Le domaine du serveur IPA ne peut être omis" + +msgid "IPA server hostname" +msgstr "Nom d'hôte du serveur IPA" + +msgid "IPA server role name" +msgstr "Nom du rôle serveur IPA" + +msgid "IPA servers configured as AD trust agents" +msgstr "Serveurs IPA configurés comme agents de relation d'approbation AD" + +msgid "IPA servers configured as AD trust controllers" +msgstr "Serveurs IPA configurés comme contrôleurs de relation d'approbation AD" + +msgid "IPA servers configured as certificate authority" +msgstr "Serveurs IPA configurés comme autorité de certification" + +msgid "IPA servers configured as key recovery agents" +msgstr "Serveurs IPA configurés comme agents de recouvrement de clés" + +msgid "IPA trust" +msgstr "Relation d'approbation IPA" + +msgid "IPA unique ID" +msgstr "ID unique IPA" + +msgid "IPSECKEY record" +msgstr "Enregistrement IPSECKEY" + +msgid "Identity" +msgstr "Identité" + +msgid "Identity Settings" +msgstr "Paramètres d'identité" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "" +"Si aucune AC n'est indiquée, les requêtes à l'autorité de certification par " +"défaut sont autorisées." + +msgid "If the problem persists please contact the system administrator." +msgstr "" +"Si le problème persiste, veuillez contacter l'administrateur du système." + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "Ignorer la vérification de dernier serveur d'AC ou DNS" + +msgid "Ignore compat plugin" +msgstr "Ignorer le greffon « compat »" + +msgid "Ignore group attribute" +msgstr "Attribut groupe à ignorer" + +msgid "Ignore group object class" +msgstr "Classe d'objets groupe à ignorer" + +msgid "Ignore topology connectivity problems after removal" +msgstr "" +"Ignorer les problèmes de connectivité dans la topologie après suppression" + +msgid "Ignore topology errors" +msgstr "Ignorer les erreurs de topologie" + +msgid "Ignore user attribute" +msgstr "Attribut utilisateur à ignorer" + +msgid "Ignore user object class" +msgstr "Classe d'objets utilisateur à ignorer" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "%(src)s ignoré pour %(dst)s" + +msgid "Ignored keys:" +msgstr "Clés ignorées :" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "On ignore ces avertissements et lancement de la suppression" + +msgid "Ignoring topology connectivity errors." +msgstr "On ignore les erreurs de connectivité de la topologie." + +msgid "Import a Certificate Profile." +msgstr "Importer un profil de certificat." + +msgid "Import automount files for a specific location." +msgstr "Importer des fichiers « automount » pour un emplacement donné." + +msgid "Imported keys:" +msgstr "Clés importées :" + +msgid "Imported maps:" +msgstr "Cartes importées :" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "Profil « %(value)s » importé" + +msgid "Include Disabled" +msgstr "Inclusion désactivée" + +msgid "Include Enabled" +msgstr "Inclusion activée" + +msgid "Include all disabled IPA rules into test" +msgstr "Inclure toutes les règles IPA inactives dans le test" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "Inclure toutes les règles IPA actives dans le test [par défaut]" + +msgid "Include in" +msgstr "Inclure dans" + +msgid "Included attributes" +msgstr "Attributs inclus" + +msgid "Inclusive" +msgstr "Inclusion" + +msgid "Inclusive Regex" +msgstr "« Regex » d'inclusion" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "Options incompatibles indiquées (-r et -P)\n" + +msgid "Indirect" +msgstr "Indirect" + +msgid "Indirect Member HBAC service" +msgstr "Service HBAC de membre indirect" + +msgid "Indirect Member HBAC service group" +msgstr "Groupe de services de membre indirect" + +msgid "Indirect Member groups" +msgstr "Groupes membres indirects" + +msgid "Indirect Member host-groups" +msgstr "Groupes d'hôtes membres indirects" + +msgid "Indirect Member hosts" +msgstr "Hôtes membres indirects" + +msgid "Indirect Member netgroups" +msgstr "Groupes réseau de membres indirects" + +msgid "Indirect Member of host-group" +msgstr "Membre indirect des groupes d'hôtes" + +msgid "Indirect Member of roles" +msgstr "Membres indirect des rôles" + +msgid "Indirect Member permissions" +msgstr "Droits d'accès de membre indirect" + +msgid "Indirect Member users" +msgstr "Utilisateurs membres indirects" + +msgid "Indirect Membership" +msgstr "Adhésion indirecte" + +msgid "Inherited from server configuration" +msgstr "Hérité de la configuration du serveur" + +msgid "Initialize left node" +msgstr "Initialiser le nœud de gauche" + +msgid "Initialize right node" +msgstr "Initialiser le nœud de droite" + +msgid "Initials" +msgstr "Initiales" + +msgid "Input data specified multiple times" +msgstr "Les données en entrée ont été indiquées plusieurs fois" + +msgid "Input filename" +msgstr "Nom du fichier en entrée" + +msgid "Input form contains invalid or missing values." +msgstr "" +"Le formulaire de saisie comporte des valeurs non-valides ou manquantes." + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "Privilège « add » insuffisant pour l'entrée « %s »." + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" +"Privilège « write » insuffisant pour l'attribut « krbLastPwdChange » de " +"l'entrée « %s »." + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" +"Privilège « write » insuffisant sur l'attribut « userCertificate » de " +"l'entrée « %s »." + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Accès insuffisant : %(info)s" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" +"Privilège insuffisant pour créer un certificat avec le nom de sujet « %s » " +"alternatif." + +msgid "Internal Error" +msgstr "Erreur interne" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Requête JSON-RPC invalide : %(error)s" + +msgid "Invalid LDAP URI." +msgstr "URI LDAP invalide." + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "Nom de principal de service invalide\n" + +msgid "Invalid credentials" msgstr "Données d'authentification invalides" -msgid "Missing credentials for cross-forest communication" +msgid "Invalid format. Should be name=value" +msgstr "Format invalide. Doit être nom=valeur" + +msgid "Invalid number of parts!" +msgstr "Nombre de parties invalide !" + +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "Type invalide ou non pris en compte. Les valeurs autorisées sont : %s" + +#, python-format +msgid "Invalid or unsupported vault public key: %s" +msgstr "Clé publique invalide ou non prise en charge : %s" + +msgid "Invalid vault type" +msgstr "Type de coffre-fort invalide" + +msgid "Is zone active?" +msgstr "La zone est-elle active ?" + +msgid "Issue" +msgstr "Émettre" + +msgid "Issued By" +msgstr "Émis par" + +msgid "Issued On" +msgstr "Émis le" + +msgid "Issued To" +msgstr "Émis pour" + +msgid "Issued on from" +msgstr "Émis à partir du" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "Émis à partir de cette date (AAAA-mm-jj)" + +msgid "Issued on to" +msgstr "Émis jusqu'au" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "Émis à cette date (AAAA-mm-jj)" + +msgid "Issuer" +msgstr "Émetteur" + +msgid "Issuer DN" +msgstr "DN de l'émetteur" + +msgid "Issuer Distinguished Name" +msgstr "Nom distinctif de l'émetteur" + +msgid "Issuing CA" +msgstr "AC émettrice" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "Ceci est uniquement utilisée pour définir l'attribut SOA MNAME." + +msgid "Job Title" +msgstr "Titre de poste" + +msgid "Join an IPA domain" +msgstr "Rejoindre un domaine IPA" + +msgid "KEY record" +msgstr "Enregistrement KEY" + +msgid "KRA service is not enabled" +msgstr "Le service KRA est désactivé" + +msgid "KX Exchanger" +msgstr "Échangeur KX" + +msgid "KX Preference" +msgstr "Préférence KX" + +msgid "KX record" +msgstr "Enregistrement KX" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" msgstr "" +"Cache des justificatifs d'identité Kerberos introuvable. Possédez-vous un " +"ticket Kerberos ?\n" + +msgid "Kerberos Key" +msgstr "Clé Kerberos" + +msgid "Kerberos Key Not Present" +msgstr "Clé Kerberos absente" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "Clé Kerberos présente, hôte muni de permissions" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "Clé Kerberos présente, permissions du service activées" + +msgid "Kerberos Service Principal Name" +msgstr "Nom de principal de service Kerberos" + +msgid "Kerberos Ticket Policy" +msgstr "Politique de tickets Kerberos" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" +"Principal d'utilisateur Kerberos introuvable. Avez-vous un cache de " +"justificatifs d'identité Kerberos ?\n" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "Échec de l'initialisation du contexte Kerberos\n" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "Échec de l'initialisation du contexte Kerberos : %1$s (%2$d)\n" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Erreur Kerberos : %(major)s/%(minor)s" + +msgid "Kerberos keys available" +msgstr "Clés Kerberos disponibles" + +msgid "Kerberos principal" +msgstr "Principal Kerberos" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" +"Le principal Kerberos %s existe déjà. Utiliser la commande « ipa user-mod » " +"pour le définir manuellement." + +msgid "Kerberos principal expiration" +msgstr "Expiration du principal Kerberos" + +msgid "Kerberos principal name for this host" +msgstr "Nom du principal Kerberos pour cet hôte" + +msgid "Key" +msgstr "Clé" + +msgid "Key Compromise" +msgstr "Clé compromise" + +msgid "Key Tag" +msgstr "Étiquette de clé" + +msgid "Keytab" +msgstr "Tableau de clés" + +msgid "Keytab File Name" +msgstr "Nom de fichier du tableau de clés" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "Récupération du tableau de clés et stockage avec succès dans : %s\n" + +msgid "LDAP DN" +msgstr "DN LDAP" + +msgid "LDAP URI" +msgstr "URI LDAP" + +msgid "LDAP URI of DS server to migrate from" +msgstr "URI LDAP du serveur DS depuis lequel effectuer la migration" + +msgid "LDAP basedn" +msgstr "« basedn » de LDAP" + +msgid "LDAP password" +msgstr "Mot de passe LDAP" + +msgid "LDAP password (if not using Kerberos)" +msgstr "Mot de passe LDAP (hors utilisation de Kerberos)" + +msgid "LDAP schema" +msgstr "Schéma LDAP" msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" msgstr "" +"Portée de recherche LDAP pour les utilisateurs et les groupes : base, " +"onelevel, ou subtree. Valeur par défaut : onelevel" -#, fuzzy, python-format -msgid "must equal %r" -msgstr "doit être « %s »" +msgid "LDAP suffix to be managed" +msgstr "Suffixe LDAP qui sera géré" -msgid "Hello world" +msgid "LDAP timeout" +msgstr "Délai d'expiration LDAP" + +msgid "LOC Altitude" +msgstr "Altitude LOC" + +msgid "LOC Degrees Latitude" +msgstr "Degrés de latitude LOC" + +msgid "LOC Degrees Longitude" +msgstr "Degrés de longitude LOC" + +msgid "LOC Direction Latitude" +msgstr "Direction de latitude LOC" + +msgid "LOC Direction Longitude" +msgstr "Direction de longitude LOC" + +msgid "LOC Horizontal Precision" +msgstr "Précision horizontale LOC" + +msgid "LOC Minutes Latitude" +msgstr "Minutes de latitude LOC" + +msgid "LOC Minutes Longitude" +msgstr "Minutes de longitude LOC" + +msgid "LOC Seconds Latitude" +msgstr "Secondes de latitude LOC" + +msgid "LOC Seconds Longitude" +msgstr "Secondes de longitude LOC" + +msgid "LOC Size" +msgstr "Taille LOC" + +msgid "LOC Vertical Precision" +msgstr "Précision verticale LOC" + +msgid "LOC record" +msgstr "Enregistrement LOC" + +msgid "Label" +msgstr "Étiquette" + +msgid "Last" +msgstr "Dernier" + +msgid "Last date/time the token can be used" +msgstr "Date et heure au delà desquels le jeton ne peut plus être utilisé" + +msgid "Last failed authentication" +msgstr "Dernière authentification ayant échoué" + +msgid "Last name" +msgstr "Nom" + +msgid "Last successful authentication" +msgstr "Dernière authentification réussie" + +msgid "Leading and trailing spaces are not allowed" +msgstr "Les espaces de début et de fin ne sont pas autorisées" + +msgid "Left node" +msgstr "Nœud de gauche" + +msgid "Left replication node - an IPA server" +msgstr "Nœud de réplication à gauche - un serveur IPA" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "Filtre LDAP valide (i.e. ou=Engineering)" + +msgid "Length of TOTP token code validity" +msgstr "Durée de validité du code du jeton TOTP" + +msgid "Level" +msgstr "Niveau" + +msgid "List all service vaults" +msgstr "Énumérer tous les coffres-forts de services" + +msgid "List all user vaults" +msgstr "Énumérer tous les coffres-forts d'utilisateurs" + +msgid "List of IPA masters configured as DNS servers" +msgstr "Liste des maîtres IPA configurés comme serveurs DNS" + +msgid "List of all IPA masters" +msgstr "Liste des maîtres IPA" + +msgid "List of deletions that failed" +msgstr "Liste des suppressions ayant échoué" + +msgid "List of enabled roles" +msgstr "Liste des rôles activés" + +msgid "List of servers which advertise the given location" +msgstr "Liste des serveurs qui publient un emplacement donné" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." msgstr "" +"Liste des domaines approuvés rafraîchie avec succès. Utiliser la commande " +"« trustdomain-find » pour les énumérer." -#, fuzzy, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "Nom du serveur mandataire RADIUS" +msgid "Lists of objects migrated; categorized by type." +msgstr "Liste des objets migrés, catégorisés par type." -#, fuzzy, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "L'utilisateur actif nommé « %(user)s » existe déjà" +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "Liste des objets n'ayant pu être migrés, catégorisés par type." -#, fuzzy -msgid "must be at least 1" -msgstr "doit être supérieur ou égal à %(minvalue)d" +msgid "Load CA certificate of LDAP server from FILE" +msgstr "Charger le certificat de l'AC du serveur LDAP depuis FILE" + +msgid "Local domain" +msgstr "Domaine local :" + +msgid "Locality" +msgstr "Localité" + +msgid "Location" +msgstr "Emplacement" + +msgid "Location name" +msgstr "Nom de l'emplacement" + +msgid "Location of the ACI" +msgstr "Emplacement de l'ACI" + +msgid "Lockout duration" +msgstr "Durée du verrouillage" + +msgid "Logged In As" +msgstr "Connecté en tant que" + +msgid "Login shell" +msgstr "Interpréteur de commande" + +msgid "MAC address" +msgstr "Adresse MAC" + +msgid "MS-PAC" +msgstr "MS-PAC" + +msgid "MX Exchanger" +msgstr "Échangeur MX" + +msgid "MX Preference" +msgstr "Préférence MX" + +msgid "MX record" +msgstr "Enregistrement MX" + +msgid "Mailing Address" +msgstr "Adresse postale" + +msgid "Malformed DN" +msgstr "DN mal formé" + +msgid "Malformed principal" +msgstr "Principal malformé" + +msgid "Manage password policy for specific group" +msgstr "Gérer la politique de mots de passe d'un groupe spécifique" + +msgid "Manage ticket policy for specific user" +msgstr "Administrer la politique de ticket pour un utilisateur donné" + +msgid "Managed LDAP suffix DN" +msgstr "DN du suffixe LDAP administré" + +msgid "Managed by" +msgstr "Géré par" + +msgid "Managed suffix" +msgstr "Suffixe administré" + +msgid "Managed suffixes" +msgstr "Suffixes administrés" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" +"La gestion de la topologie nécessite le niveau de domaine minimal " +"${domainlevel}" + +msgid "Managedby permission" +msgstr "Permission « managedby »" + +msgid "Manager" +msgstr "Gestionnaire" + +msgid "Managing" +msgstr "Gérant" + +msgid "Map" +msgstr "Carte" + +msgid "Map Type" +msgstr "Type de mappe" + +msgid "Mark the token as disabled (default: false)" +msgstr "Marquer le jeton comme désactivé (par défaut : faux, false)" + +msgid "Master file" +msgstr "Fichier maître" + +msgid "Matched" +msgstr "Correspondance" + +msgid "Matched rules" +msgstr "Règles satisfaites" + +msgid "Matching Type" +msgstr "Type correspondant" + +msgid "Max domain level" +msgstr "Niveau de domaine maxi" + +msgid "Max failures" +msgstr "Nombre maximal d'échecs" + +msgid "Max life" +msgstr "Vie max." + +msgid "Max lifetime (days)" +msgstr "Durée de vie maximale (jours)" + +msgid "Max renew" +msgstr "Renouvellement max." + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "Durée maximale (secondes) pour une recherche (0 ou -1 pour illimitée)" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "Durée maximale (secondes) pour une recherche (> 0, -1 pour illimitée)" + +msgid "Maximum domain level" +msgstr "Niveau de domaine maximal" + +msgid "Maximum number of agreements per replica" +msgstr "Le nombre maximal d'agréments par réplique" + +msgid "Maximum number of certs returned" +msgstr "Nombre maximum de certificats renvoyés" + +msgid "Maximum number of entries returned" +msgstr "Nombre maximal d'entrées renvoyées" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "Nombre maximal d'entrées renvoyées (0 pour illimité)" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "Nombre maximum d'entrées à rechercher (-1 pour illimité)" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "Nombre maximum d'entrées à rechercher (-1 ou 0 pour illimité)" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "Nombre maximal de règles à traiter quand « --rules » n'est défini" + +msgid "Maximum password lifetime (in days)" +msgstr "Durée de vie maximale d'un mot de passe (en jours)" + +msgid "Maximum renewable age (seconds)" +msgstr "Durée maximale de la période de renouvellement (secondes)" + +msgid "Maximum serial number" +msgstr "Numéro de série maximum" + +msgid "Maximum ticket life (seconds)" +msgstr "Durée de vie maximale (secondes)" + +msgid "Maximum username length" +msgstr "Longueur maximale du nom d'utilisateur" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "La valeur maximale est ${value}" + +msgid "May not be empty" +msgstr "Ne peut pas être vide" + +msgid "Member Group" +msgstr "Groupe membre" + +msgid "Member HBAC service" +msgstr "Services HBAC membres" + +msgid "Member HBAC service groups" +msgstr "Groupes de services HBAC membres" + +msgid "Member Host" +msgstr "Hôte membre" + +msgid "Member Hostgroup" +msgstr "Groupe d'hôtes membre" + +msgid "Member Sudo commands" +msgstr "Membres de commandes sudo" + +msgid "Member User" +msgstr "Utilisateur membre" + +msgid "Member groups" +msgstr "Groupes de membres" + +msgid "Member host-groups" +msgstr "Groupes d'hôtes membres" + +msgid "Member hosts" +msgstr "Hôtes membres" + +msgid "Member netgroups" +msgstr "Groupes réseau membre" + +msgid "Member of" +msgstr "Membre de" + +msgid "Member of HBAC rule" +msgstr "Membre de règle HBAC" + +msgid "Member of Sudo rule" +msgstr "Membre de règle Sudo" + +msgid "Member of a group" +msgstr "Membre d'un groupe" + +msgid "Member of group" +msgstr "Membre du groupe" + +msgid "Member of groups" +msgstr "Membre des groupes" + +msgid "Member of host-groups" +msgstr "Membre du groupe d'hôtes" + +msgid "Member of netgroups" +msgstr "Membre des groupes réseau" + +msgid "Member principals" +msgstr "Principaux membres de" + +msgid "Member service groups" +msgstr "Groupes de services membres" + +msgid "Member services" +msgstr "Services membres" + +msgid "Member user group" +msgstr "Groupe d'utilisateurs membre" + +msgid "Member users" +msgstr "Utilisateurs membres" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "Membres d'un domaine approuvé sous la forme DOM\\nom ou nom@domaine" + +msgid "Members that could not be added" +msgstr "Membres n'ayant pu être ajoutés" + +msgid "Members that could not be removed" +msgstr "Membres n'ayant pas pu être supprimés" + +msgid "Migrate users and groups from DS to IPA." +msgstr "Migrer les utilisateurs et groupes de DS vers IPA." + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" +"Mode migration désactivé.\n" +"Utiliser la commande « ipa config-mod --enable-migration=TRUE » pour " +"l'activer." + +msgid "Migration of LDAP search reference is not supported." +msgstr "" +"La migration des références des recherches LDAP n'est pas prise en charge." + +msgid "Min domain level" +msgstr "Niveau de domaine mini" + +msgid "Min length" +msgstr "Longueur minimale" + +msgid "Min lifetime (hours)" +msgstr "Durée de vie minimale (jours)" + +msgid "Minimum domain level" +msgstr "Niveau de domaine minimal" + +msgid "Minimum length of password" +msgstr "Taille minimale d'un mot de passe" + +msgid "Minimum number of character classes" +msgstr "Nombre minimal de classes de caractères" + +msgid "Minimum password lifetime (in hours)" +msgstr "Durée de vie maximale d'un mot de passe (en jours)" + +msgid "Minimum serial number" +msgstr "Numéro de série minimum" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "La valeur minimale est ${value}" + +msgid "Minutes Latitude" +msgstr "Minutes de latitude" + +msgid "Minutes Longitude" +msgstr "Minutes de longitude" + +msgid "Misc. Information" +msgstr "Informations diverses" + +msgid "Missing new vault public key" +msgstr "Nouvelle clé publique du coffre-fort manquante" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "Référence HTTP manquante ou invalide, %(referer)s" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "Absence de liste de contrôle des réponses !\n" + +#, c-format +msgid "Missing reply control!\n" +msgstr "Absence de contrôle de réponse !\n" + +msgid "Missing values: " +msgstr "Valeurs manquantes :" + +msgid "Missing vault private key" +msgstr "Clé privée du coffre-fort manquante" + +msgid "Missing vault public key" +msgstr "Clé publique du coffre-fort manquante" + +msgid "Mobile Telephone Number" +msgstr "Numéro de téléphone mobile" + +msgid "Model" +msgstr "Modèle" + +msgid "Modified" +msgstr "Modifié" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "Configuration de la relation de confiance « %(value)s » modifiée." + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "ACI « %(value)s » modifiée" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "AC « %(value)s » modifiée" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "LCA d'AC « %(value)s » modifiée" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Profil de certificat « %(value)s » modifié" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "Serveur DNS « %(value)s » modifié" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "Règle HBAC « %(value)s » modifiée" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "Service HBAC « %(value)s » modifié" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "Groupe de services HBAC « %(value)s » modifié" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "Plage d'ID « %(value)s » modifiée" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "Emplacement IPA « %(value)s » modifié" + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "Serveur IPA \"%(value)s\" modifié" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "Jeton OTP « %(value)s » modifié" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "Serveur mandataire RADIUS « %(value)s » modifié" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "Mappe d'utilisateurs SELinux « %(value)s » modifiée" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "Commande sudo « %(value)s » modifiée" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Groupe de commandes sudo « %(value)s » modifié." + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Règle sudo « %(value)s » modifiée" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants de groupes « %(value)s » modifiée" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "Vue d'identifiant « %(value)s » modifiée" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants « %(value)s » modifiée" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "Surcharge d'identifiants utilisateurs « %(value)s » modifiée" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "Règle d'auto-adhésion « %(value)s » modifiée" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "Clé « automount » « %(value)s » modifiée" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "Carte « automount » « %(value)s » modifiée" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "Délégation « %(value)s » modifiée" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Groupe « %(value)s » modifié" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "Hôte « %(value)s » modifié" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Groupe d'hôtes « %(value)s » modifié" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "Groupe réseau « %(value)s » supprimé" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "Permission « %(value)s » modifiée" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "Privilège « %(value)s » supprimé" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "Rôle « %(value)s » modifié" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "Segment « %(value)s » modifié" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "Permission de libre service « %(value)s » modifiée" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "Service « %(value)s » modifié" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "Utilisateur en attente « %(value)s » modifié" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "Suffixe de topologie « %(value)s » modifié" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" +"Relation de confiance « %(value)s » modifiée (la modification sera effective " +"dans 60 secondes)" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Utilisateur « %(value)s » modifié" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "Coffre-fort « %(value)s » modifié" + +msgid "Modified: key not set" +msgstr "Modifié : clé non définie" + +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "Modifier '%(value)s' pour %(name)s ?" + +msgid "Modify ACI." +msgstr "Modifier une ICA." + +msgid "Modify CA configuration." +msgstr "Modifier la configuration de l'AC" + +msgid "Modify Certificate Profile configuration." +msgstr "Modifier la configuration d'un profil de certificat." + +msgid "Modify DNS forward zone." +msgstr "Modifier une zone de redirection DNS." + +msgid "Modify DNS server configuration" +msgstr "Modifier la configuration du serveur DNS" + +msgid "Modify DNS zone (SOA record)." +msgstr "Modifier la zone DNS (enregistrement SOA)." + +msgid "Modify ID range." +msgstr "Modifier une plage." + +msgid "Modify Kerberos ticket policy." +msgstr "Modifier la politique de tickets Kerberos." + +msgid "Modify OTP configuration options." +msgstr "Modifier les options de configuration OTP." + +msgid "Modify Sudo Command Group." +msgstr "Modifier un groupe de commandes sudo." + +msgid "Modify Sudo Command." +msgstr "Modifier une commande sudo." + +msgid "Modify Sudo Rule." +msgstr "Modifier une règle sudo." + +msgid "Modify a CA ACL." +msgstr "Modifier une LCA d'AC." + +msgid "Modify a DNS resource record." +msgstr "Modifier un enregistrement de ressources DNS." + +msgid "Modify a OTP token." +msgstr "Modifier un jeton OTP" + +msgid "Modify a RADIUS proxy server." +msgstr "Modifier un serveur mandataire RADIUS" + +msgid "Modify a SELinux User Map." +msgstr "Modifier une mappe d'utilisateurs SELinux" + +msgid "Modify a delegation." +msgstr "Modifier une délégation." + +msgid "Modify a group password policy." +msgstr "Modifier une politique de mot de passe de groupe." + +msgid "Modify a group." +msgstr "Modifier un groupe." + +msgid "Modify a hostgroup." +msgstr "Modifier un groupe d'hôtes." + +msgid "Modify a netgroup." +msgstr "Modifier un groupe réseau." + +msgid "Modify a permission." +msgstr "Modifier une permission." + +msgid "Modify a privilege." +msgstr "Modifier un privilège." + +msgid "Modify a role." +msgstr "Modifier un rôle." + +msgid "Modify a segment." +msgstr "Modifier un segment." + +msgid "Modify a self-service permission." +msgstr "Modifier une permission de libre service." + +msgid "Modify a stage user." +msgstr "Modifier un utilisateur en attente." + +msgid "Modify a topology suffix." +msgstr "Modifier un suffixe de topologie." + +msgid "Modify a user." +msgstr "Modifier un utilisateur." + +msgid "Modify a vault." +msgstr "Modifier un coffre-fort." + +msgid "Modify an Group ID override." +msgstr "Modifier une surcharge d'identifiants de groupes." + +msgid "Modify an HBAC rule." +msgstr "Modifier une règle HBAC." + +msgid "Modify an HBAC service group." +msgstr "Supprimer un groupe de services HBAC." + +msgid "Modify an HBAC service." +msgstr "Modifier un service HBAC." + +msgid "Modify an ID View." +msgstr "Modifier une vue d'identifiants." + +msgid "Modify an ID override." +msgstr "Modifier une surcharge d'identifiants." + +msgid "Modify an User ID override." +msgstr "Modifier une surcharge d'identifiants utilisateurs." + +msgid "Modify an automember rule." +msgstr "" +"Modifier une règle d'auto-adhésion.\n" +" " + +msgid "Modify an automount key." +msgstr "Modifier une clé « automount »." + +msgid "Modify an automount map." +msgstr "Modifier une carte « automount »." + +msgid "Modify an existing IPA service." +msgstr "Modifier un service IPA." + +msgid "Modify configuration options." +msgstr "Modifier les options de configuration." + +msgid "Modify global DNS configuration." +msgstr "Modifier la configuration DNS globale." + +msgid "Modify global trust configuration." +msgstr "Modifier la configuration globale des relations d'approbation." + +msgid "Modify information about a host." +msgstr "Modifier les informations d'un hôte." + +msgid "Modify information about an IPA location." +msgstr "Modifier les informations d'un emplacement IPA." + +msgid "Modify information about an IPA server." +msgstr "Modifier les informations d'un serveur IPA." + +msgid "Modify realm domains." +msgstr "Modifier les domaines du royaume." + +msgid "Modify trustdomain of the trust" +msgstr "Modifier le domaine approuvé de la confiance" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" +"Plus d'une entrée avec la clé %(key)s trouvée, utilisez --info pour " +"sélectionner l'entrée donnée." + +msgid "Mount information" +msgstr "Information de montage" + +msgid "Mount point" +msgstr "Point de montage" + +msgid "Move deleted user into staged area" +msgstr "Déplacer l'utilisateur supprimé dans l'espace en attente" + +msgid "Multi-value" +msgstr "Multi-valué" + +msgid "Must be a decimal number" +msgstr "Doit être un nombre décimal" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "Doit être une valeur d'horodatage UTC (ex. : « 2014-01-20 17:58:01Z »)" + +msgid "Must be an integer" +msgstr "Doit être un entier" + +msgid "NAPTR Flags" +msgstr "Drapeaux NAPTR" + +msgid "NAPTR Order" +msgstr "Ordre NAPTR" + +msgid "NAPTR Preference" +msgstr "Préférence NAPTR" + +msgid "NAPTR Regular Expression" +msgstr "Expression rationnelle NAPTR" + +msgid "NAPTR Replacement" +msgstr "Remplacement NAPTR" + +msgid "NAPTR Service" +msgstr "Service NAPTR" + +msgid "NAPTR record" +msgstr "Enregistrement NAPTR" + +msgid "NIS domain name" +msgstr "Nom de domaine NIS" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "La valeur NONE ne peut être combinée avec d'autres types de PAC" + +msgid "NS Hostname" +msgstr "Nom d'hôte NS" + +msgid "NS record" +msgstr "Enregistrement NS" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" +"l'enregistrement NS n'est pas autorisé à coexister avec un enregistrement " +"%(type)s sauf quand ils sont situés dans enregistrement de zone racine (RFC " +"2181, section 6.1)" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "" +"Les enregistrements NS peuvent être modifiés dans la somme sommet - '@'. " + +msgid "NSEC record" +msgstr "Enregistrement NSEC" + +msgid "NSEC3 record" +msgstr "Enregistrement NSEC3" + +msgid "NSEC3PARAM record" +msgstr "Enregistrement NSEC3PARAM" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" +"Enregistrement NSEC3PARAM pour une zone au format : algorithme_hachage " +"marqueurs itérations salt." + +msgid "Name" +msgstr "Nom" + +msgid "Name for referencing the CA" +msgstr "Nom de référencement de l'AC" + +msgid "Name of command to export" +msgstr "Nom de la commande à exporter" + +msgid "Name of host-group" +msgstr "Nom du groupe d'hôtes" + +msgid "Name of issuing CA" +msgstr "Nom de l'AC émettrice" + +msgid "Name of method to export" +msgstr "Nom de la méthode à exporter" + +msgid "Name of object to export" +msgstr "Nom de l'objet à exporter" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "Nom de la carte parente (par défaut : auto.master)." + +msgid "Name of the trusted domain" +msgstr "Nom du domaine approuvé" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "" +"Le serveur de noms '%(host)s' n'a pas d'enregistrement A/AAAA correspondant" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "Le serveur de nom pour la zone inverse ne peut être un nom DNS relatif" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" +"Ni « --del-all », ni aucune option de suppression d'enregistrement donné n'a " +"été indiqué.\n" +"Consulter l'aide pour connaître tous les types d'enregistrements pris en " +"charge." + +msgid "Nested Methods to execute" +msgstr "Commandes imbriquées à exécuter" + +msgid "NetBIOS name" +msgstr "Nom NetBIOS" + +msgid "Netgroup" +msgstr "Groupe réseau" + +msgid "Netgroup Settings" +msgstr "Paramètres du groupe réseau" + +msgid "Netgroup description" +msgstr "Description de groupe réseau" + +msgid "Netgroup name" +msgstr "Nom de groupe réseau" + +msgid "Netgroups" +msgstr "Groupes réseau" + +msgid "Network Services" +msgstr "Services réseau" + +msgid "New ACI name" +msgstr "Nouveau nom de l'ACI" + +msgid "New Certificate" +msgstr "Nouveau certificat" + +msgid "New Password" +msgstr "Nouveau mot de passe" + +msgid "New Principal Password" +msgstr "Nouveau mot de passe du principal" + +msgid "New Test" +msgstr "Nouveau test" + +msgid "New kerberos principal alias" +msgstr "Nouvel alias de principal Kerberos" + +msgid "New mount information" +msgstr "Nouvelle information de montage" + +msgid "New password is required" +msgstr "Un nouveau mot de passe est requis" + +msgid "New public key specified multiple times" +msgstr "Nouvelle clé publique indiquée plusieurs fois" + +msgid "New vault password" +msgstr "Nouveau mot de passe du coffre-fort" + +msgid "New: key not set" +msgstr "Ajout : clé non définie" + +msgid "New: key set" +msgstr "Ajout : clé définie" + +msgid "Next" +msgstr "Suivant(e)" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "Aucun enregistrement A, AAAA, SSHFP ou PTR trouvé." + +msgid "No Common Name was found in subject of request." +msgstr "Aucun « Common Name » n'a été trouvé dans le sujet de cette demande." + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" +"Aucun serveur DNS dans l'emplacement IPA %(location)s. Sans serveur DNS, " +"l'emplacement ne fonctionnera pas comme attendu." + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" +"Aucune clé maîtresse DNSSEC n'est installée. La signature de zone DNSSEC ne " +"pourra pas fonctionner tant qu'une clé maîtresse n'est installée." + +msgid "No Valid Certificate" +msgstr "Pas de certificat valide" + +msgid "No archived data." +msgstr "Aucune donnée archivée." + +msgid "No credentials cache found" +msgstr "Cache des justificatifs d'identité introuvable" + +msgid "No default (fallback) group set" +msgstr "Pas de groupe par défaut (repli) défini" + +msgid "No entries." +msgstr "Pas d'entrées." + +msgid "No file to read" +msgstr "Pas de fichier à lire" + +msgid "No free YubiKey slot!" +msgstr "Aucun connecteur YubiKey libre !" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "Aucune clé acceptée par le KDC\n" + +msgid "No matching entries found" +msgstr "Aucune entrée correspondante trouvée" + +msgid "No option to delete specific record provided." +msgstr "Pas d'option fournie pour supprimer un enregistrement donné." + +msgid "No option to modify specific record provided." +msgstr "Aucune option fournie pour modifier un enregistrement donné." + +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "Pas d'autorisation pour joindre cet hôte dans le domaine IPA.\n" + +msgid "No private group" +msgstr "Pas de groupe privé" + +msgid "No response" +msgstr "Pas de réponse" + +msgid "No such attribute on this entry" +msgstr "Pas d'attribut de ce type sur cette entrée" + +msgid "No such virtual command" +msgstr "Commande virtuelle inconnue" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "Aucune préférence de type de chiffrement sur le système ?!\n" + +msgid "No trusted domain is not configured" +msgstr "Aucun domaine approuvé n'est pas configuré" + +#, c-format +msgid "No values for %s" +msgstr "Aucune valeur pour %s" + +msgid "No wait" +msgstr "Pas d'attente" + +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "" +"Pas de permission en écriture sur le fichier « %s » du tableau de clés\n" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" +"Réponse non 2xx reçue de l'API REST de l'AC : %(status)d. %(explanation)s" + +msgid "Non-Active Directory domain" +msgstr "Domaine autre que Active Directory" + +msgid "Non-existent or invalid rules" +msgstr "Règles inexistantes ou invalides" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" +"Relation d'approbation externe non transitive vers un domaine dans une autre " +"forêt Active Directory" + +msgid "Nonce" +msgstr "Usage unique" + +msgid "Not After" +msgstr "Pas après" + +msgid "Not Before" +msgstr "Pas avant" + +msgid "Not a managed group" +msgstr "Pas un groupe administré" + +msgid "Not a valid IP address" +msgstr "Adresse IP invalide" + +msgid "Not a valid IPv4 address" +msgstr "Adresse IPv4 invalide" + +msgid "Not a valid IPv6 address" +msgstr "Adresse IPv6 invalide" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "Adresse réseau invalide (exemples : 2001:db8::/64, 192.0.2.0/24)" + +msgid "Not allowed on non-leaf entry" +msgstr "Interdit sur une entrée qui n'est pas une feuille" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "Arguments insuffisants pour établir la relation de confiance" + +msgid "Not matched rules" +msgstr "Règles non satisfaites" + +msgid "Not registered yet" +msgstr "Pas encore enregistré" + +msgid "Note" +msgstr "Note" + +msgid "Number of IDs in the range" +msgstr "Nombre d'IDs dans la plage" + +msgid "Number of conditions added" +msgstr "Nombre de conditions ajoutées" + +msgid "Number of conditions removed" +msgstr "Nombre de conditions supprimées" + +msgid "Number of days's notice of impending password expiration" +msgstr "Nombre de jours de préavis d'expiration de mot de passe" + +msgid "Number of digits each token code will have" +msgstr "Nombre de chiffres des codes du jeton" + +msgid "Number of entries returned" +msgstr "Nombre d'entrées renvoyées" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "Nombre d'hôtes dont une vue d'identifiants a été retirée :" + +msgid "Number of hosts the ID View was applied to:" +msgstr "Nombre d'hôtes auxquels la vue d'identifiants a été appliquée :" + +msgid "Number of members added" +msgstr "Nombre de membres ajoutés" + +msgid "Number of members removed" +msgstr "Nombre de membres supprimés" + +msgid "Number of owners added" +msgstr "Nombre de propriétaires ajoutés" + +msgid "Number of owners removed" +msgstr "Nombre de propriétaires supprimés" + +msgid "Number of permissions added" +msgstr "Nombre de permissions ajoutées" + +msgid "Number of permissions removed" +msgstr "Nombre de permissions supprimées" + +msgid "Number of plugins loaded" +msgstr "Nombre de greffons chargés" + +msgid "Number of privileges added" +msgstr "Nombre de privilèges ajoutés" + +msgid "Number of privileges removed" +msgstr "Nombre de privilèges retirés" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" +"Durée en secondes à attendre le bon achèvement des requêtes LDAP sortantes " +"de la part d'un replica distant avant mise en échec" + +msgid "Number of variables returned (<= total)" +msgstr "Nombre de variables renvoyées (<= total)" + +msgid "OK" +msgstr "OK" + +msgid "OTP" +msgstr "OTP" + +msgid "OTP Configuration" +msgstr "Configuration pour les mots de passe à usage unique" + +msgid "OTP Token" +msgstr "Jeton OTP" + +msgid "OTP Token Settings" +msgstr "Paramètres de jetons OTP" + +msgid "OTP Tokens" +msgstr "Jetons OTP" + +msgid "OTP configuration options" +msgstr "Options de configuration pour les mots de passe à usage unique" + +msgid "OTP set" +msgstr "OTP configuré" + +msgid "OTP token" +msgstr "jeton OTP" + +msgid "OTP tokens" +msgstr "jetons OTP" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "Classes d'objets à ignorer pour les entrées groupe dans DS" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "Classes d'objets à ignorer pour des entrées utilisateur dans DS" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "Classes d'objets à utiliser pour la recherche d'entrées groupe dans DS" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "" +"Classes d'objets à utiliser pour la recherche d'entrées utilisateurs dans DS" + +msgid "Old vault password" +msgstr "Ancien mot de passe du coffre-fort" + +msgid "Old vault private key" +msgstr "Ancienne clé privée du coffre-fort" + +msgid "One Time Password" +msgstr "Mots de passe à usage unique" + +msgid "One of group, permission or self is required" +msgstr "Un parmi « group », « permission » ou « self » est requis" + +msgid "One time password commands" +msgstr "Commandes mots de passe à usage unique (OTP)" + +msgid "Only one value is allowed" +msgstr "Une seule valeur est autorisée" + +msgid "Only one zone type is allowed per zone name" +msgstr "Un seul type de zone autorisé par nom de zone" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" +"Seules les valeurs « ipa-ad-trust » et « ipa-ad-trust-posix » sont " +"autorisées pour « --range-type » lors de l'ajout d'une relation de confiance " +"AD." + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "Système d'exploitation et version de l'hôte (par ex. Fedora 9)" + +msgid "Operating system" +msgstr "Système d'exploitation" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "Opération échouée : %s\n" + +msgid "Operations Error" +msgstr "Erreur sur les opérations" + +msgid "Option added" +msgstr "Option ajoutée" + +msgid "Option group" +msgstr "Groupe d'options" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" +"L'option rid-base ne doit pas être utilisée lorsque le type de plage IPA est " +"ipa-ad-trust-posix" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" +"Sous-arbre optionnel de DN dans lequel une entrée peut être déplacée (doit " +"être dans le sous-arbre, mais peut ne pas encore exister)" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" +"Sous-arbre optionnel de DN dans lequel une entrée peut être déplacée (doit " +"être dans le sous-arbre, mais peut ne pas encore exister)" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" +"DN optionnel auquel appliquer les permissions (doit être dans le sous-arbre, " +"mais peut ne pas encore exister)" + +msgid "Options" +msgstr "Options" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "" +"Les options dom-sid et dom-name ne peuvent pas être utilisées simultanément" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "" +"Les options « dom-sid » et « rid-base » doivent être utilisées simultanément" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" +"Les options « dom-sid » et « secondary-rid-base » ne peuvent pas être " +"utilisées simultanément" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" +"Les options « dom-sid/dom-name » et « rid-base » doivent être utilisées " +"simultanément" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" +"Les options « dom-sid/dom-name » et « secondary-rid-base » ne peuvent pas " +"être utilisées simultanément" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" +"Les options « secondary-rid-base » et « rid-base » doivent être utilisées " +"simultanément" + +msgid "Order" +msgstr "Ordre" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" +"Ordre des utilisateurs SELinux par priorité croissante, délimités par $" + +msgid "Org. Unit" +msgstr "Unité organisationnelle" + +msgid "Organization" +msgstr "Organisation" + +msgid "Organizational Unit" +msgstr "Unité organisationnelle" + +msgid "Origin DN subtree" +msgstr "Sous-arbre des DN origines" + +msgid "Other Record Types" +msgstr "Autres types d'enregistrements" + +msgid "Our domain is not configured" +msgstr "Notre domaine n'est pas configuré" + +#, c-format +msgid "Out of Memory!\n" +msgstr "Mémoire saturée !\n" msgid "Out of memory\n" msgstr "Mémoire saturée\n" -msgid "Warning unrecognized encryption type.\n" -msgstr "Avertissement, type de chiffrement inconnu.\n" +#, c-format +msgid "Out of memory \n" +msgstr "Mémoire saturée\n" -msgid "Warning unrecognized salt type.\n" -msgstr "Avertissement, type « salt » inconnu.\n" +#, c-format +msgid "Out of memory!" +msgstr "Mémoire saturée !" + +#, c-format +msgid "Out of memory!\n" +msgstr "Mémoire saturée !\n" msgid "Out of memory!?\n" msgstr "Mémoire saturée !?\n" -msgid "Enctype comparison failed!\n" -msgstr "Échec de comparaison du « enctype » !\n" +msgid "Output file to store the transport certificate" +msgstr "Fichier où stocker le certificat de transport" -#, fuzzy -msgid "Password is too long!\n" +msgid "Output filename" +msgstr "Nom de fichier de sortie" + +msgid "Output only on errors" +msgstr "N'afficher que les erreurs" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" +"Surcharger la liste par défaut des types PAC pris en charge. Utiliser « NONE " +"» pour désactiver la prise en charge PAC pour ce service, ce qui peut être " +"nécessaire pour les services NFS par exemple." + +msgid "Override existing password" +msgstr "Réécrire le mot de passe existant" + +msgid "Override inherited settings" +msgstr "Surcharger la configuration héritée" + +msgid "Overwrite GID" +msgstr "Surcharger le GID" + +msgid "Owner" +msgstr "Propriétaire" + +#, python-format +msgid "Owner %s" +msgstr "%s propriétaire" + +msgid "Owner groups" +msgstr "Groupes propriétaires" + +msgid "Owner services" +msgstr "Services propriétaires" + +msgid "Owner users" +msgstr "Utilisateurs propriétaires" + +msgid "Owners that could not be added" +msgstr "Propriétaires n'ayant pu être ajoutés" + +msgid "Owners that could not be removed" +msgstr "Propriétaires n'ayant pu être supprimés" + +msgid "PAC type" +msgstr "type de PAC" + +msgid "PAD" +msgstr "PAD" + +msgid "PKINIT" +msgstr "PKINIT" + +msgid "POSIX" +msgstr "POSIX" + +msgid "PTR Hostname" +msgstr "Nom d'hôte PTR" + +msgid "PTR record" +msgstr "Enregistrement PTR" + +msgid "Page" +msgstr "Page" + +msgid "Pager Number" +msgstr "Numéro de téléavertisseur" + +msgid "Parameters" +msgstr "Paramètres" + +msgid "Parent map" +msgstr "Carte parente" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" +"Analyser tous les enregistrements DNS et les renvoyer sous forme structurée" + +msgid "Parse error" +msgstr "Erreur d'analyse" + +msgid "Password" +msgstr "Mot de passe" + +msgid "Password Expiration Notification (days)" +msgstr "Notification d'expiration de mot de passe (jours)" + +msgid "Password Policies" +msgstr "Politiques de mot de passe" + +msgid "Password Policy" +msgstr "Politique de gestion des mots de passe" + +msgid "Password can be specified only for symmetric vault" +msgstr "" +"Un mot de passe ne peut être indiqué que pour un coffre-fort symétrique" + +msgid "Password cannot be set on enrolled host." +msgstr "Le mot de passe ne peut être défini pour l'hôte enregistré." + +msgid "Password change complete" +msgstr "Modification du mot de passe terminée" + +msgid "Password expiration" +msgstr "Expiration de mot de passe" + +msgid "Password history size" msgstr "Taille de l'historique des mots de passe" -msgid "Failed to create random key!\n" -msgstr "Échec de création d'une clé aléatoire !\n" +msgid "Password plugin features" +msgstr "Fonctionnalités du greffon mots de passe" -msgid "Failed to create key!\n" -msgstr "Échec de création de la clé !\n" +msgid "Password reset was not successful." +msgstr "La réinitialisation du mot de passe a échoué." -msgid "Bad or unsupported salt type.\n" -msgstr "Type « salt » non-conforme ou non pris en compte.\n" +msgid "Password specified multiple times" +msgstr "Mot de passe indiqué plusieurs fois" -#, fuzzy, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgid "Password used in bulk enrollment" +msgstr "Mot de passe utilisé pour les inscriptions en masse" + +msgid "Passwords do not match" +msgstr "Les mots de passe ne correspondent pas" + +msgid "Passwords do not match!" +msgstr "Les mots de passe ne correspondent pas !" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" +"Les mots de passe ont été migrés dans un format chiffré.\n" +"IPA est incapable de créer des clés Kerberos sauf à\n" +"utiliser les mots de passe en clair. Tous les utilisateurs\n" +"migrés devront se connecter à https://your.domain/ipa/migration/\n" +"avant de pouvoir utiliser leur compte Kerberos." + +msgid "Passwords must match" +msgstr "Les mots de passe doivent correspondre" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" +"Politique de redirection conditionnelle par serveur. Mettre à « none » pour " +"désactiver la redirection vers un redireteur global pour cette zone. Dans ce " +"cas, les redirecteurs de zone conditionnels sont ignorés." + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Redirecteurs par serveur. Un port personnalisé peut être indiqué pour chaque " +"redirecteur avec le format standard « adresse_IP port PORT »" + +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" +"Politique de redirection conditionnelle par zone. Mettre à « none » pour " +"désactiver la redirection vers un redireteur global pour cette zone. Dans ce " +"cas, les redirecteurs de zone conditionnels sont ignorés." + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Redirecteurs par zone. Un port personnalisé peut être indiqué pour chaque " +"redirecteur avec le format standard « adresse_IP port PORT »" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "Temps après lequel le compteur d'échecs sera réinitialisé (secondes)" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "Durée pendant laquelle le verrouillage est actif (secondes)" + +msgid "Permission" +msgstr "Permission" + +msgid "Permission ACI grants access to" +msgstr "L'ACI « permission » permet un accès à" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "Autorisation refusée : %(file)s" + +msgid "Permission flags" +msgstr "Marqueurs de permission" + +msgid "Permission name" +msgstr "Nom de permission" + +msgid "Permission settings" +msgstr "Réglages des permissions" + +msgid "Permission value" +msgstr "Valeur de permission" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "" +"Une permission avec un marqueur inconnu %s ne peut pas être modifiée ou " +"supprimée" + +msgid "Permissions" +msgstr "Permissions" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "Permissions à accorder (« read », « write »). Par défaut : « write »." + +msgid "Permissions to grant(read, write, add, delete, all)" +msgstr "" +"Permissions à accorder (« read », « write », « add », « delete », « all »)" + +msgid "Permitted Encryption Types" +msgstr "Type de chiffrements autorisés" + +msgid "Permitted to have certificates issued" +msgstr "Autorisés à se voir émettre des certificats" + +msgid "Ping a remote server." +msgstr "« Ping » sur un serveur distant." + +msgid "Platform" +msgstr "Plate-forme" + +msgid "Please choose a type of DNS resource record to be added" +msgstr "Veuillez choisir un type d'enregistrement de ressource DNS à ajouter" + +msgid "Please specify forwarders." +msgstr "Veuillez indiquer les redirecteurs." + +msgid "Please try the following options:" +msgstr "Veuillez essayer les options suivantes :" + +msgid "Policy" +msgstr "Politique" + +msgid "Port" +msgstr "Port" + +msgid "Positional arguments" +msgstr "Arguments positionnels" + +msgid "Pre-authentication is required for the service" +msgstr "Une authentification préalable est requise pour le service" + +msgid "Pre-shared password" +msgstr "Mot de passe pré-partagé" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "Le profil prédéfini « %(profile_id)s » ne peut être supprimé" + +msgid "Preference" +msgstr "Préférence" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" +"Préférence donnée à cet échangeur. Les plus petites valeurs sont les " +"premières choisies" + +msgid "Preferred Language" +msgstr "Langue préférée" + +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "" +"Préfixe utilisé pour distinguer les types d'ACI (« permission », " +"« delegation », « selfservice », « none »)" + +msgid "Preserved user" +msgstr "Utilisateurs préservés" + +msgid "Preserved users" +msgstr "Utilisateurs préservés" + +msgid "Prev" +msgstr "Précédent(e)" + +msgid "Primary RID base" +msgstr "Base de RID principale" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "Les plages de RID principales et secondaires ne peuvent se recouvrir" + +msgid "Primary key only" +msgstr "Clé principale uniquement" + +msgid "Principal" +msgstr "Principal" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "Le principal %(principal)s n'a pas pu être authentifié : %(message)s" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" +"Le principal '%(principal)s' n'est pas autorisé à utiliser l'AC '%(ca)s' " +"avec le profil '%(profile_id)s' pour l'émission de certificat." + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" +"Le principal « %s » du nom alternatif ne correspond pas au principal demandé" + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "Principal de ce certificate (par exemple : HTTP/test.example.com)" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "Le principal n'est pas de la forme user@REALM : « %(principal)s »" + +msgid "Principal name" +msgstr "Nom principal" + +msgid "Print as little as possible" +msgstr "Afficher aussi peu que possible" + +msgid "Print debugging information" +msgstr "Affiche les informations de débogage" + +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" +"Afficher les entrées telles qu'enregistrées sur le serveur. Affecte " +"uniquement le format de sortie." + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "Affiche la sortie XML-RPC brute en mode GSSAPI" + +msgid "Priority" +msgstr "Priorité" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "Priorité de la politique (une valeur élevé indique une priorité basse)" + +msgid "Private key specified multiple times" +msgstr "Clé privée indiquée plusieurs fois" + +msgid "Privilege" +msgstr "Privilège" + +msgid "Privilege Settings" +msgstr "Paramètres du privilège" + +msgid "Privilege Withdrawn" +msgstr "Privilège retiré" + +msgid "Privilege description" +msgstr "Description du privilège" + +msgid "Privilege name" +msgstr "Nom du privilège" + +msgid "Privileges" +msgstr "Privilèges" + +msgid "Profile ID" +msgstr "ID de profil" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" +"L'identifiant de profil « %(cli_value)s » ne correspond pas aux données du " +"profil « %(file_value)s »" + +msgid "Profile ID for referring to this profile" +msgstr "Identifiant de profil" + +msgid "Profile category" +msgstr "Catégorie de profil" + +msgid "Profile category the ACL applies to" +msgstr "Catégorie de profil à laquelle la LCA s'applique" + +msgid "Profile configuration" +msgstr "Configuration de profil" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "Profil de configuration enregistré dans le fichier « %(file)s »" + +msgid "Profile description" +msgstr "Description de profil" + +msgid "Profiles" +msgstr "Profils" + +msgid "Prompt to set the user password" +msgstr "Invite de définition du mot de passe utilisateur" + +msgid "Prospective" +msgstr "Possibilité future" + +msgid "Provisioning" +msgstr "Mise en place des permissions" + +msgid "Public key" +msgstr "Clé publique" + +msgid "Public key can be specified only for asymmetric vault" +msgstr "" +"Une clé publique ne peut être indiquée que pour un coffre-fort asymétrique" + +msgid "Public key specified multiple times" +msgstr "Clé publique indiquée plusieurs fois" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" +"La largeur du code QR est supérieure à celle du terminal. Merci d'agrandir " +"votre fenêtre de terminal." + +msgid "Query current Domain Level." +msgstr "Interroger le niveau actuel du domaine." + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" +"La recherche a renvoyé plus de résultats que le nombre limite configuré. " +"Affichage des ${counter} premiers résultats." + +msgid "Quick Links" +msgstr "Liens rapides" + +msgid "Quiet mode. Only errors are displayed." +msgstr "Mode discret. Seules les erreurs sont affichées." + +msgid "RADIUS" +msgstr "RADIUS" + +msgid "RADIUS Proxy Server Settings" +msgstr "Réglages du serveur mandataire RADIUS" + +msgid "RADIUS Server" +msgstr "Serveur RADIUS" + +msgid "RADIUS Servers" +msgstr "Serveurs RADIUS" + +msgid "RADIUS proxy configuration" +msgstr "Configuration du serveur mandataire RADIUS" + +msgid "RADIUS proxy server" +msgstr "Serveur mandataire RADIUS" + +msgid "RADIUS proxy server name" +msgstr "Nom du serveur mandataire RADIUS" + +msgid "RADIUS proxy servers" +msgstr "Serveurs mandataires RADIUS" + +msgid "RADIUS proxy username" +msgstr "Nom d'utilisateur sur serveur mandataire RADIUS" + +msgid "REST API is not logged in." +msgstr "L'API REST n'est pas connectée." + +msgid "REVOKED" +msgstr "RÉVOQUÉ" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "Domaine Kerberos conforme à la RFC4120" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" +"L'attribut RFC822Name ne correspond à aucune des adresses email de " +"l'utilisateur" + +msgid "RP record" +msgstr "Enregistrement RP" + +msgid "RRSIG record" +msgstr "Enregistrement RRSIG" + +msgid "Random password" +msgstr "Mot de passe aléatoire" + +msgid "Range Settings" +msgstr "Configuration des plages" + +msgid "Range name" +msgstr "Nom de la plage" + +msgid "Range size" +msgstr "Taille de la plage" + +msgid "Range type" +msgstr "Type de plage" + +#, python-format +msgid "Raw %s records" +msgstr "Enregistrements %s bruts" + +msgid "Raw A records" +msgstr "Enregistrements A bruts" + +msgid "Raw A6 records" +msgstr "Enregistrements A6 bruts" + +msgid "Raw AAAA records" +msgstr "Enregistrements AAAA bruts" + +msgid "Raw AFSDB records" +msgstr "Enregistrements AFSDB bruts" + +msgid "Raw APL records" +msgstr "Enregistrements APL bruts" + +msgid "Raw CERT records" +msgstr "Enregistrements CERT bruts" + +msgid "Raw CNAME records" +msgstr "Enregistrements CNAME bruts" + +msgid "Raw DHCID records" +msgstr "Enregistrements DHCID bruts" + +msgid "Raw DLV records" +msgstr "Enregistrements DLV bruts" + +msgid "Raw DNAME records" +msgstr "Enregistrements DNAME bruts" + +msgid "Raw DNSKEY records" +msgstr "Enregistrements DNSKEY bruts" + +msgid "Raw DS records" +msgstr "Enregistrements DS bruts" + +msgid "Raw HIP records" +msgstr "Enregistrements HIP bruts" + +msgid "Raw IPSECKEY records" +msgstr "Enregistrements IPSECKEY bruts" + +msgid "Raw KEY records" +msgstr "Enregistrements KEY bruts" + +msgid "Raw KX records" +msgstr "Enregistrements KX bruts" + +msgid "Raw LOC records" +msgstr "Enregistrements LOC bruts" + +msgid "Raw MX records" +msgstr "Enregistrements MX bruts" + +msgid "Raw NAPTR records" +msgstr "Enregistrements NAPTR bruts" + +msgid "Raw NS records" +msgstr "Enregistrements NS bruts" + +msgid "Raw NSEC records" +msgstr "Enregistrements NSEC bruts" + +msgid "Raw NSEC3 records" +msgstr "Enregistrements NSEC3 bruts" + +msgid "Raw PTR records" +msgstr "Enregistrements PTR bruts" + +msgid "Raw RP records" +msgstr "Enregistrements RP bruts" + +msgid "Raw RRSIG records" +msgstr "Enregistrements RRSIG bruts" + +msgid "Raw SIG records" +msgstr "Enregistrements SIG bruts" + +msgid "Raw SPF records" +msgstr "Enregistrements SPF bruts" + +msgid "Raw SRV records" +msgstr "Enregistrements SRV bruts" + +msgid "Raw SSHFP records" +msgstr "Enregistrements SSHFP bruts" + +msgid "Raw TA records" +msgstr "Enregistrements TA bruts" + +msgid "Raw TKEY records" +msgstr "Enregistrements TKEY bruts" + +msgid "Raw TLSA records" +msgstr "Enregistrements TLSA bruts" + +msgid "Raw TSIG records" +msgstr "Enregistrements TSIG bruts" + +msgid "Raw target filter" +msgstr "Filtre cible brut" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" +"La valeur brute d'un enregistrement DNS a déjà été configurée avec l'option " +"« %(name)s »" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Rétablissement de la confiance pour le domaine « %(value)s »" + +msgid "Realm Domains" +msgstr "Domaines pour le royaume" + +msgid "Realm administrator password should be specified" +msgstr "Le mot de passe de l'administrateur du domaine doit être indiqué" + +msgid "Realm domains" +msgstr "Domaines du royaume" + +msgid "Realm name" +msgstr "Nom du royaume" + +msgid "Realm-domain mismatch" +msgstr "Incohérence domaine-royaume" + +msgid "Reason" +msgstr "Raison" + +msgid "Reason for Revocation" +msgstr "Raison de la révocation" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "Raison de révocation du certificat (0-10)" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" +"Raison de la révocation du certificat (1-10). Utilisez « ipa help cert » " +"pour plus d'informations sur les raisons de révocation." + +msgid "Rebuild auto membership" +msgstr "Reconstruction des adhésions automatiques" + +msgid "Rebuild auto membership." +msgstr "Reconstruire les appartenances automatiques." + +msgid "Rebuild membership for all members of a grouping" +msgstr "Reconstruire l'appartenance pour tous les membres d'un groupe" + +msgid "Rebuild membership for specified hosts" +msgstr "Reconstruire l'appartenance pour les hôtes indiqués" + +msgid "Rebuild membership for specified users" +msgstr "Reconstruire l'appartenance pour les utilisateurs indiqués " + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "Le nombre maximal d'agréments de réplication est dépassé" + +msgid "Record Type" +msgstr "Type d'enregistrement" + +msgid "Record creation failed." +msgstr "La création de l'enregistrement a échoué." + +msgid "Record data" +msgstr "Données d'enregistrement" + +msgid "Record name" +msgstr "Nom d'enregistrement" + +msgid "Record not found." +msgstr "Enregistrement non trouvé." + +msgid "Record type" +msgstr "Type d'enregistrement" + +msgid "Records" +msgstr "Enregistrements" + +msgid "Records for DNS Zone" +msgstr "Enregistrements pour la zone DNS" + +msgid "Redirection" +msgstr "Redirection" + +msgid "Redirection to PTR record" +msgstr "Redirection vers l'enregistrement PTR" + +msgid "Refresh" +msgstr "Rafraîchir" + +msgid "Refresh list of the domains associated with the trust" +msgstr "Rafraîchir la liste des domaines associés à la relation de confiance" + +msgid "Refresh the page." +msgstr "Rafraîchir la page." + +msgid "Regular Expression" +msgstr "Expression rationnelle" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" +"Le nom d'enregistrement relatif « %(record)s » contient le nom de la zone " +"« %(zone)s » comme suffixe, ce qui aboutit au FQDN « %(fqdn)s ». Cela " +"constitue généralement une erreur du fait du point final manquant à la fin " +"du nom indiqué." + +msgid "Relative weight for server services (counts per location)" +msgstr "Poids relatifs des services des serveurs (compte par emplacement)" + +msgid "Reload current settings from the server." +msgstr "Recharger la configuration actuelle depuis le serveur." + +msgid "Reload the browser." +msgstr "Recharger le navigateur." + +msgid "Remote IPA server hostname" +msgstr "Nom d'hôte du serveur IPA distant" + +msgid "Remote server name" +msgstr "Nom du serveur distant" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" +"Supprimer les enregistrements A, AAAA, SSHFP et PTR de l'hôte géré par le " +"DNS de IPA." + +msgid "Remove CAs from a CA ACL." +msgstr "Supprimer des AC d'une LCA d'AC" + +msgid "Remove Kerberos Alias" +msgstr "Supprimer un alias Kerberos" + +msgid "Remove Permission" +msgstr "Supprimer une permission" + +msgid "Remove a manager to the stage user entry" +msgstr "Supprimer un responsable de l'entrée de l'utilisateur en attente." + +msgid "Remove a manager to the user entry" +msgstr "Supprimer un responsable de l'entrée de l'utilisateur" + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "" +"Supprimer la permission pour une délégation d'accès de zone de redirection." + +msgid "Remove a permission for per-zone access delegation." +msgstr "Supprimer une permission pour une délégation d'accès par zone." + +msgid "Remove all principals in this realm" +msgstr "Supprimer tous les principaux de ce royaume" + +msgid "Remove an option from Sudo Rule." +msgstr "Retirer une option d'une règle sudo." + +msgid "Remove certificates from a service" +msgstr "Supprimer les certificats d'un service" + +msgid "Remove certificates from host entry" +msgstr "Supprimer les certificats de l'entrée de l'hôte" + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "" +"Retirer des commandes et groupes de commandes sudo affectés par la règle " +"sudo." + +msgid "Remove conditions from an automember rule." +msgstr "Supprimer des conditions d'une règle d'auto-adhésion. " + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" +"Supprimer le groupe par défaut (repli) pour toute entrée sans correspondance." + +msgid "Remove entries from DNS" +msgstr "Supprimer les entrées du DNS" + +msgid "Remove from CRL" +msgstr "Retrait de la LRC" + +msgid "Remove group for Sudo to execute as." +msgstr "Retirer un groupe de sudo pour exécution comme." + +msgid "Remove hold" +msgstr "Supprimer le blocage" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "Retirer des hôtes et groupes d'hôtes affectés par la règle sudo." + +msgid "Remove hosts that can manage this host." +msgstr "Supprimer les hôtes qui peuvent gérer cet hôte." + +msgid "Remove hosts that can manage this service." +msgstr "Supprimer des hôtes pouvant administrer ce service." + +msgid "Remove member from a named service delegation rule." +msgstr "Supprimer un membre d'une règle nommée de délégation de service." + +msgid "Remove member from a named service delegation target." +msgstr "Supprimer un membre d'une cible de délégation de service." + +msgid "Remove member from a named service delegation." +msgstr "Retirer des membres d'une délégation de service nommé" + +msgid "Remove members from Sudo Command Group." +msgstr "Supprimer des membres d'un groupe de commandes sudo." + +msgid "Remove members from a group." +msgstr "Supprimer des membres d'un groupe." + +msgid "Remove members from a hostgroup." +msgstr "Supprimer des membres d'un groupe d'hôtes." + +msgid "Remove members from a netgroup." +msgstr "Supprimer des membres d'un groupe réseau." + +msgid "Remove members from a privilege" +msgstr "Supprimer les membres d'un privilège" + +msgid "Remove members from a role." +msgstr "Supprimer des membres d'un rôle." + +msgid "Remove members from a vault." +msgstr "Supprimer les membres d'un coffre-fort." + +msgid "Remove members from an HBAC service group." +msgstr "Supprimer des membres d'un groupe de services HBAC." + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "Supprimer les certificats de l'entrée de l'utilisateur surchargé" + +msgid "Remove one or more certificates to the user entry" +msgstr "Supprimer les certificats de l'entrée de l'utilisateur" + +msgid "Remove owners from a vault container." +msgstr "Supprimer des propriétaires d'un conteneur de coffre-fort." + +msgid "Remove owners from a vault." +msgstr "Supprimer les propriétaires d'un coffre-fort." + +msgid "Remove permissions from a privilege." +msgstr "Supprimer des permissions d'un privilège." + +msgid "Remove principal alias from a host entry" +msgstr "Supprimer un alias de principal de l'entrée d'un hôte" + +msgid "Remove principal alias from a service" +msgstr "Supprimer un alias de principal d'un service" + +msgid "Remove privileges from a role." +msgstr "Supprimer des privilèges d'un rôle." + +msgid "Remove profiles from a CA ACL." +msgstr "Retirer des profils d'une LCA d'AC." + +msgid "Remove service and service groups from an HBAC rule." +msgstr "Ajouter des services et des groupes de services d'une règle HBAC." + +msgid "Remove services from a CA ACL." +msgstr "Retirer des services d'une LCA d'AC." + +msgid "Remove target from a named service delegation rule." +msgstr "Supprimer une cible d'une règle nommée de délégation de service." + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "Retirer des utilisateurs et groupes d'une LCA d'AC." + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "Retirer des hôtes et des groupes d'hôtes cibles d'une règle HBAC." + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "" +"Supprimer des hôtes et groupes d'hôtes cibles d'une mappe d'utilisateurs " +"SELinux" + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "Retirer des utilisateurs et groupes affectés par la règle sudo." + +msgid "Remove users and groups for Sudo to execute as." +msgstr "Retirer des utilisateurs et groupes dans sudo pour exécution comme." + +msgid "Remove users and groups from a CA ACL." +msgstr "Retirer des utilisateurs et groupes d'une LCA d'AC." + +msgid "Remove users and groups from an HBAC rule." +msgstr "Retirer des utilisateurs et des groupes d'une règle HBAC." + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "" +"Supprimer des utilisateurs et groupes d'une mappe d'utilisateurs SELinux" + +msgid "Remove users that can manage this token." +msgstr "Supprimer des utilisateurs pouvant gérer ce jeton." + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "Alias supprimés pour l'hôte « %(value)s »" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "Alias supprimés du principal de service « %(value)s »" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "Certificats supprimés pour l'hôte « %(value)s »" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "Certificats supprimés de l'utilisateur surchargé « %(value)s »" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "Supprimer les certificats du principal de service « %(value)s »" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "Certificats supprimés de l'utilisateur « %(value)s »" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "Conditions supprimées de « %(value)s »" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "Groupe « %(value)s » par défaut (repli) supprimé pour l'auto-adhésion" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "Informations sur le domaine approuvé « %(value)s » supprimées" + +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "Option « %(option)s » supprimée de la règle sudo « %(rule)s »" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "Permission système « %(value)s » supprimée" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" +"Suppression de %(servers)s de la topologie de réplication, merci de " +"patienter..." + +#, c-format +msgid "Removing principal %s\n" +msgstr "Suppression du principal %s\n" + +msgid "Rename" +msgstr "Renommer" + +msgid "Rename an ACI." +msgstr "Renommer une ICA." + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "Renomme l'objet %(ldap_obj_name)s" + +msgid "Rename the Group ID override object" +msgstr "Renommer l'objet surcharge d'identifiant de groupe" + +msgid "Rename the ID View object" +msgstr "Renommer l'objet surcharge de vue d'identifiants" + +msgid "Rename the OTP token object" +msgstr "Renommer l'objet jeton OTP" + +msgid "Rename the User ID override object" +msgstr "Renommer l'objet surcharge d'identifiant d'utilisateur" + +msgid "Rename the automount key object" +msgstr "Renommer l'objet clé d'automontage" + +msgid "Rename the group object" +msgstr "Renommer l'objet groupe" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "ACI renommée en « %(value)s »" + +msgid "Renewal master for IPA certificate authority" +msgstr "Maître en charge du renouvellement de l'autorité de certification" + +msgid "Replacement" +msgstr "Remplacement" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" +"La réplique est un serveur de clés DNSSEC actif. Le désinstaller pourrait " +"casser votre système DNS. Merci de d'abord désactiver ou de remplacer votre " +"serveur de clés DNSSEC." + +msgid "Replication agreement enabled" +msgstr "Agrément de réplication activé" + +msgid "Replication configuration" +msgstr "Configuration de la réplication" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" +"Raffraichissement demandé pour la réplication via le segment « %(pkey)s »." + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "" +"La topologie de réplication du suffixe « %(suffix)s » contient des erreurs." + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "La topologie de réplication du suffixe « %(suffix)s » est en ordre." + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" +"Demander une réinitialisation complète du nœud en récupérant les données " +"d'un autre nœud." + +msgid "Request id" +msgstr "Identifiant de la demande" + +msgid "Request is missing \"method\"" +msgstr "Il manque le paramètre « method » à la requête" + +msgid "Request is missing \"params\"" +msgstr "Il manque le paramètre « params » à la requête" + +msgid "Request must be a dict" +msgstr "La requête doit être un dictionnaire" + +msgid "Request status" +msgstr "État de la demande" + +msgid "Required" +msgstr "Requis" + +msgid "Required field" +msgstr "Champ requis" + +msgid "Requires pre-authentication" +msgstr "Nécessite une authentification préalable" + +msgid "Reset" +msgstr "Réinitialiser" + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "Réinitialiser la politique de tickets Kerberos." + +msgid "Reset OTP" +msgstr "Remise à zéro OTP" + +msgid "Reset Password" +msgstr "Réinitialiser le mot de passe" + +msgid "Reset your password." +msgstr "Réinitialiser votre mot de passe." + +msgid "Resolve a host name in DNS." +msgstr "Résoudre un nom de système DNS." + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "Résoudre un nom de système DNS. (Obsolète)" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" +"Résoudre les identifiants de sécurité des groupes et utilisateurs dans des " +"domaines approuvés" + +msgid "Response from CA was not valid JSON" +msgstr "La réponse de l'AC n'est pas dans un format JSON valide" + +msgid "Restore" +msgstr "Restaurer" + +msgid "Result" +msgstr "Résultat" + +msgid "Result of simulation" +msgstr "Résultat de la simulation" + +msgid "Result of the command" +msgstr "Résultat de la commande" + +msgid "Results are truncated, try a more specific search" +msgstr "Résultats tronqués, essayer un recherche plus précise" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« %s »)" + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« anchor »)" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« cn »)" + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« command »)" + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale (« " +"group »)" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« group-name »)" + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« hostname »)" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« id »)" + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« location »)" + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« map »)" + +msgid "Results should contain primary key attribute only (\"name\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« name »)" + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" +"Les résultats doivent uniquement contenir un attribut de clé principale " +"(« sudocmdgroup-name »)" + +msgid "Retries" +msgstr "Tentatives" + +msgid "Retrieve a data from a vault." +msgstr "Récupérer une donnée depuis un coffre-fort" + +msgid "Retrieve an existing certificate." +msgstr "Récupérer un certificat existant." + +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "" +"Récupérer et afficher tous les attributs à partir du serveur. Affecte la " +"sortie de la commande." + +msgid "Retrieve current keys without changing them" +msgstr "Retrouver les clés courantes sans les modifier" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Donnée récupérée depuis le coffre-fort « %(value)s »" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "Échec de la récupération de la chaîne de certificat de l'AC : %s" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "Échec de la récupération de l'état de l'AC avec l'état %d" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "Échec de la récupération de l'état de l'AC : %s" + +msgid "Retry" +msgstr "Réessayer" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "Nouvelle tentative de récupération avec la méthode pre-4.0...\n" + +msgid "Return to the main page and retry the operation" +msgstr "Retourner à la page principale et tenter à nouveau l'opération" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" +"L'enregistrement inverse pour l'adresse IP %(ip)s existe déjà dans la zone " +"inverse %(zone)s." + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" +"La zone inverse %(name)s requiert exactement %(count)d composants d'adresses " +"IP, %(user_count)d donnés" + +msgid "Reverse zone IP network" +msgstr "Réseau IP de zone inverse" + +msgid "Revert" +msgstr "Rétablir" + +msgid "Revocation reason" +msgstr "Raison de la révocation" + +msgid "Revoke" +msgstr "Révoquer" + +msgid "Revoke a certificate." +msgstr "Révoquer un certificat." + +msgid "Revoked" +msgstr "Révoqué" + +msgid "Revoked on from" +msgstr "Révoqué à partir du" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "Révoqué à partir de cette date (AAAA-mm-jj)" + +msgid "Revoked on to" +msgstr "Révoqué jusqu'au" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "Révoqué à cette date (AAAA-mm-jj)" + +msgid "Right node" +msgstr "Nœud de droite" + +msgid "Right replication node - an IPA server" +msgstr "Nœud de réplication à droite - un serveur IPA" + +msgid "Rights" +msgstr "Droits" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "Droits à accorder (read, search, compare, write, add, delete, all)" + +msgid "Role" +msgstr "Rôle" + +msgid "Role Settings" +msgstr "Paramètres du rôle" + +msgid "Role name" +msgstr "Nom du rôle" + +msgid "Role status" +msgstr "État du rôle" + +msgid "Roles" +msgstr "Rôles" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" +"Le domaine racine de la relation de confiance est toujours activé pour la " +"confiance existante" + +msgid "Rule name" +msgstr "Nom de règle" + +msgid "Rule status" +msgstr "État de la règle" + +msgid "Rule type" +msgstr "Type de règle" + +msgid "Rule type (allow)" +msgstr "Type de règle (allow)" + +msgid "Rules" +msgstr "Règles" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "Règles à tester. Si non précisé, --enabled est implicite" + +msgid "Run Commands" +msgstr "Exécute les commandes" + +msgid "Run Test" +msgstr "Lancer test" + +msgid "Run as a user" +msgstr "Lancer en tant qu'un utilisateur donné" + +msgid "Run as any user within a specified group" +msgstr "Lancer en tant que n'importe quel utilisateur du groupe indiqué" + +msgid "Run with the gid of a specified POSIX group" +msgstr "Lancer avec le GID d'un groupe POSIX donné" + +msgid "RunAs External Group" +msgstr "Groupe « RunAs External »" + +msgid "RunAs External User" +msgstr "Utilisateur « RunAs External »" + +msgid "RunAs Group category" +msgstr "Catégorie « RunAs Group »" + +msgid "RunAs Group category the rule applies to" +msgstr "Catégorie « RunAs Group » à laquelle la règle s'applique" + +msgid "RunAs Groups" +msgstr "« RunAs Groups»" + +msgid "RunAs User category" +msgstr "Catégorie « RunAs User »" + +msgid "RunAs User category the rule applies to" +msgstr "Catégorie « RunAs User » à laquelle la règle s'applique" + +msgid "RunAs Users" +msgstr "« RunAs Users »" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "« RunAsGroup » n'accepte pas « %(name)s » comme nom de groupe" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "« RunAsUser » n'accepte pas « %(name)s » comme nom de groupe" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "« RunAsUser » n'accepte pas « %(name)s » comme nom d'utilisateur" + +msgid "SELinux Options" +msgstr "Options SELinux" + +msgid "SELinux User" +msgstr "Utilisateur SELinux" + +msgid "SELinux User Map" +msgstr "Mappe d'utilisateurs SELinux" + +msgid "SELinux User Map rule" +msgstr "Règle de mappe utilisateurs SELinux" + +msgid "SELinux User Map rules" +msgstr "Règles de mappes utilisateurs SELinux" + +msgid "SELinux User Maps" +msgstr "Mappes d'utilisateurs SELinux" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" +"Utilisateur SELinux %(user)s introuvable dans la liste ordonnée (dans la " +"configuration)" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "L'utilisateur SELinux « %(user)s » n'est pas valide : %(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "" +"L'utilisateur par défaut de la mappe utilisateur SELinux n'est pas dans la " +"liste d'ordre" + +msgid "SELinux user map list not found in configuration" +msgstr "" +"Liste de correspondance d'utilisateurs SELinux introuvable dans cette " +"configuration" + +msgid "SELinux user map order" +msgstr "Ordre de la mappe des utilisateurs SELinux" + +msgid "SHA1 Fingerprint" +msgstr "Empreinte SHA1" + +msgid "SHA256 Fingerprint" +msgstr "Empreinte SHA256" + +msgid "SID" +msgstr "SID" + +msgid "SID blacklist incoming" +msgstr "Entrant dans liste noire de SID" + +msgid "SID blacklist outgoing" +msgstr "Sortant de liste noire de SID" + +msgid "SID does not match any trusted domain" +msgstr "Le SID ne correspond à aucun domaine approuvé" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "Le SID ne correspond exactement à aucun SID du domaine approuvé" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" +"Impossible de trouver le SID du domaine approuvé désigné. Veuillez indiquer " +"directement le SID avec l'option « dom-sid »." + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" +"Le SID n'est pas reconnu en tant que SID valide pour un domaine approuvé" + +msgid "SID is not valid" +msgstr "Le SID n'est pas valide" + +msgid "SIG record" +msgstr "Enregistrement SIG" + +msgid "SOA class" +msgstr "Classe SOA" + +msgid "SOA expire" +msgstr "Expiration SOA" + +msgid "SOA minimum" +msgstr "Minimum SOA" + +msgid "SOA record class" +msgstr "Classe d'enregistrement SOA " + +msgid "SOA record expire time" +msgstr "Heure d'expiration de l'enregistrement SOA" + +msgid "SOA record refresh time" +msgstr "Durée d'actualisation de l'enregistrement SOA" + +msgid "SOA record retry time" +msgstr "Durée avant nouvel essai d'enregistrement SOA" + +msgid "SOA record serial number" +msgstr "Numéro de série de l'enregistrement SOA" + +msgid "SOA refresh" +msgstr "Actualisation SOA" + +msgid "SOA retry" +msgstr "Nouvel essai SOA" + +msgid "SOA serial" +msgstr "Numéro de série SOA" + +msgid "SPF record" +msgstr "Enregistrement SPF" + +msgid "SRV Port" +msgstr "Port SRV" + +msgid "SRV Priority" +msgstr "Priorité SRV" + +msgid "SRV Target" +msgstr "Cible SRV" + +msgid "SRV Weight" +msgstr "Poids SRV" + +msgid "SRV record" +msgstr "Enregistrement SRV" + +msgid "SSH public key" +msgstr "Clé publique SSH" + +msgid "SSH public key fingerprint" +msgstr "Empreinte de clé publique SSH" + +msgid "SSH public key:" +msgstr "Clé publique SSH :" + +msgid "SSH public keys" +msgstr "Clés publiques SSH" + +msgid "SSHFP Algorithm" +msgstr "Algorithme SSHFP" + +msgid "SSHFP Fingerprint" +msgstr "Empreinte SSHFP" + +msgid "SSHFP Fingerprint Type" +msgstr "Type d'empreinte SSHFP" + +msgid "SSHFP record" +msgstr "Enregistrement SSHFP" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "SSSD n'a pu résoudre l'objet en un SID valide" + +msgid "Salt" +msgstr "Sel" + +#, python-format +msgid "Same as --%s" +msgstr "Identique à --%s" + +msgid "Save" +msgstr "Enregistrer" + +msgid "Search" +msgstr "Rechercher" + +msgid "Search Options" +msgstr "Options de recherche" + +msgid "Search command parameters." +msgstr "Rechercher des paramètres de commandes." + +msgid "Search domains of the trust" +msgstr "Recherches dans les domaines approuvés" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "" +"Recherche des %(searched_object)s avec ceux de %(ldap_object)s de " +"%(relationship)s." + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "" +"Recherche des %(searched_object)s sans ceux de %(ldap_object)s de " +"%(relationship)s." + +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "La recherche de %1$s sur « rootdse » a échoué avec l'erreur %2$d\n" + +msgid "Search for CA ACLs." +msgstr "Rechercher des LCA d'AC." + +msgid "Search for CAs." +msgstr "Rechercher des AC." + +msgid "Search for Certificate Profiles." +msgstr "Rechercher des profils de certificats." + +msgid "Search for DNS forward zones." +msgstr "Rechercher des zones de redirection DNS." + +msgid "Search for DNS resources." +msgstr "Rechercher des enregistrements de ressources DNS." + +msgid "Search for DNS servers." +msgstr "Rechercher des serveurs DNS." + +msgid "Search for DNS zones (SOA records)." +msgstr "Rechercher des zones DNS (enregistrements SOA)." + +msgid "Search for HBAC rules." +msgstr "Rechercher des règles HBAC." + +msgid "Search for HBAC services." +msgstr "Rechercher des services HBAC." + +msgid "Search for IPA locations." +msgstr "Rechercher des emplacements IPA." + +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "La recherche du « namingContext » d'IPA a échoué avec l'erreur %d\n" + +msgid "Search for IPA servers." +msgstr "Rechercher des serveurs IPA." + +msgid "Search for IPA services." +msgstr "Rechercher des services IPA." + +msgid "Search for OTP token." +msgstr "Rechercher un jeton OTP" + +msgid "Search for RADIUS proxy servers." +msgstr "Rechercher des serveurs mandataires RADIUS." + +msgid "Search for SELinux User Maps." +msgstr "Rechercher des mappes d'utilisateurs SELinux" + +msgid "Search for Sudo Command Groups." +msgstr "Rechercher des groupes de commandes sudo." + +msgid "Search for Sudo Commands." +msgstr "Rechercher des commandes sudo." + +msgid "Search for Sudo Rule." +msgstr "Rechercher une règle sudo." + +msgid "Search for a netgroup." +msgstr "Rechercher un groupe réseau." + +msgid "Search for a self-service permission." +msgstr "Rechercher des permissions de libre service." + +msgid "Search for an Group ID override." +msgstr "Rechercher une surcharge d'identifiants de groupes" + +msgid "Search for an HBAC service group." +msgstr "Rechercher des groupes de services HBAC." + +msgid "Search for an ID View." +msgstr "Rechercher une vue d'identifiants." + +msgid "Search for an ID override." +msgstr "Rechercher une surcharge d'identifiants." + +msgid "Search for an User ID override." +msgstr "Rechercher une surcharge d'identifiants utilisateurs" + +msgid "Search for an automount key." +msgstr "Rechercher une clé « automount »." + +msgid "Search for an automount location." +msgstr "Rechercher un emplacement « automount »." + +msgid "Search for an automount map." +msgstr "Rechercher une carte « automount »." + +msgid "Search for automember rules." +msgstr "Rechercher des règles d'auto-adhésion." + +msgid "Search for command outputs." +msgstr "Rechercher des sorties de commande." + +msgid "Search for commands." +msgstr "Rechercher des commandes." + +msgid "Search for delegations." +msgstr "Rechercher des délégations." + +msgid "Search for existing certificates." +msgstr "Recherche de certificats existants." + +msgid "Search for forward zones only" +msgstr "Rechercher des zones redirigées uniquement" + +msgid "Search for group password policies." +msgstr "Rechercher des politiques de mot de passe de groupe." + +msgid "Search for groups." +msgstr "Rechercher des groupes." + +msgid "Search for help topics." +msgstr "Rechercher des sujets de l'aide." + +msgid "Search for hostgroups." +msgstr "Rechercher un groupe d'hôtes." + +msgid "Search for hosts with these member of HBAC rules." +msgstr "Rechercher des hôtes avec ces membres de règles HBAC." + +msgid "Search for hosts with these member of host groups." +msgstr "Rechercher des hôtes avec ces membres de groupes d'hôtes." + +msgid "Search for hosts without these member of host groups." +msgstr "Rechercher des hôtes sans ces membres de groupes d'hôtes." + +msgid "Search for hosts without these member of roles." +msgstr "Rechercher des hôtes sans ces membres de rôles." + +msgid "Search for hosts without these member of sudo rules." +msgstr "Rechercher des systèmes sans ces membres de règles sudo." + +msgid "Search for hosts." +msgstr "Rechercher des hôtes." + +msgid "Search for netgroups with these member groups." +msgstr "Rechercher des groupes réseaux dont les membres sont ces groupes." + +msgid "Search for netgroups with these member host groups." +msgstr "" +"Rechercher des groupes réseaux dont les membres sont ces groupes d'hôtes." + +msgid "Search for netgroups with these member hosts." +msgstr "Rechercher des groupes réseaux dont les membres sont ces hôtes." + +msgid "Search for netgroups with these member netgroups." +msgstr "" +"Rechercher des groupes réseaux dont les membres sont ces groupes réseau." + +msgid "Search for netgroups with these member of netgroups." +msgstr "Rechercher des groupes réseaux avec ces membres de groupes réseau." + +msgid "Search for netgroups with these member users." +msgstr "Rechercher des groupes réseaux dont les membres sont ces utilisateurs." + +msgid "Search for netgroups without these member groups." +msgstr "" +"Rechercher des groupes réseaux dont les membres ne sont pas ces groupes." + +msgid "Search for netgroups without these member host groups." +msgstr "" +"Rechercher des groupes réseaux dont les membres ne sont pas ces groupes " +"d'hôtes." + +msgid "Search for netgroups without these member hosts." +msgstr "Rechercher des groupes réseaux dont les membres ne sont pas ces hôtes." + +msgid "Search for netgroups without these member netgroups." +msgstr "" +"Rechercher des groupes réseaux dont les membres ne sont pas ces groupes " +"réseau." + +msgid "Search for netgroups without these member of netgroups." +msgstr "Rechercher des groupes réseaux sans ces membres de groupes réseau." + +msgid "Search for netgroups without these member users." +msgstr "" +"Rechercher des groupes réseaux dont les membres ne sont pas ces utilisateurs." + +msgid "Search for permissions." +msgstr "Recherche des permissions." + +msgid "Search for privileges." +msgstr "Rechercher des privilèges." + +msgid "Search for ranges." +msgstr "Rechercher des plages." + +msgid "Search for roles." +msgstr "Rechercher des rôles." + +msgid "Search for service delegation target." +msgstr "Rechercher des cibles de délégation de service" + +msgid "Search for service delegations rule." +msgstr "Rechercher des règle de délégation de service." + +msgid "Search for stage users." +msgstr "Rechercher des utilisateurs en attente." + +msgid "Search for topology segments." +msgstr "Rechercher des segments de topologie." + +msgid "Search for topology suffices." +msgstr "Rechercher des suffixes de topologie." + +msgid "Search for topology suffixes." +msgstr "Rechercher des suffixes de topologie." + +msgid "Search for trusts." +msgstr "Rechercher des confiances." + +msgid "Search for users." +msgstr "Rechercher des utilisateurs." + +msgid "Search for vaults." +msgstr "Rechercher des coffres-forts" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "Les résultats de la recherche ont été tronqués : %(reason)s" + +msgid "Search scope" +msgstr "Étendue de la recherche" + +msgid "Search size limit" +msgstr "Limite de taille d'une recherche" + +msgid "Search time limit" +msgstr "Limite de temps d'une recherche" + +msgid "Second Code" +msgstr "Second code" + +msgid "Second OTP" +msgstr "Deuxième OTP" + +msgid "Secondary RID base" +msgstr "Base de RID secondaire" + +msgid "Seconds Latitude" +msgstr "Secondes de latitude" + +msgid "Seconds Longitude" +msgstr "Secondes de longitude" + +msgid "Secret" +msgstr "Secret" + +msgid "Security Identifier" +msgstr "Identifiant de sécurité" + +msgid "Security Identifiers (SIDs)" +msgstr "Identifiants de sécurité (SID)" + +msgid "Segment details" +msgstr "Information sur le segment" + +msgid "Segment name" +msgstr "Nom de segment" + +msgid "Select All" +msgstr "Tout sélectionner" + +msgid "Select entries to be removed." +msgstr "Sélectionner les entrées à supprimer." + +msgid "Selector" +msgstr "Sélecteur" + +msgid "Self" +msgstr "Moi-même" + +msgid "Self Service Permission" +msgstr "Permission de libre service" + +msgid "Self Service Permissions" +msgstr "Permissions de libre service" + +msgid "Self-service name" +msgstr "Nom de la permission de libre service" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" +"La sémantique de %(label)s a changé. %(current_behavior)s\n" +"%(hint)s" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" +"Liste séparée par des points-virgules d'adresses IP ou de réseaux autorisés " +"à émettre des requêtes" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" +"Liste séparée par des points-virgules d'adresses IP ou de réseaux autorisés " +"à effectuer des transferts" + +msgid "Sensitive" +msgstr "Sensible" + +msgid "Serial" +msgstr "Numéro de série" + +msgid "Serial Number" +msgstr "Numéro de série" + +msgid "Serial Number (hex)" +msgstr "Numéro de série (hex)" + +msgid "Serial number" +msgstr "Numéro de série" + +msgid "Serial number (hex)" +msgstr "Numéro de série (hex)" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "Numéro de série en décimal (ou en hexadécimal avec le préfixe 0x)" + +msgid "Server" +msgstr "Serveur" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "Le serveur « %(srv)s » possède %(n)d agréments avec les serveurs :" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "Le serveur %(srv)s ne peut contacter les serveurs : %(replicas)s" + +msgid "Server Name" +msgstr "Nom du serveur" + +msgid "Server Role" +msgstr "Rôle serveur" + +msgid "Server Roles" +msgstr "Rôles serveur" + +msgid "Server has already been deleted" +msgstr "Le serveur a déjà été supprimé" + +msgid "Server location" +msgstr "Emplacement de serveur" + +msgid "Server name" +msgstr "Nom du serveur" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "Nom de serveur non fourni et indisponible\n" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "Arrêt brutal de la suppression du serveur : %(reason)s." + +msgid "Server will check DNS forwarder(s)." +msgstr "Le serveur vérifiera le ou les serveurs de redirection DNS." + +msgid "Servers" +msgstr "Serveurs" + +msgid "Servers details:" +msgstr "Informations sur les serveurs :" + +msgid "Servers in location" +msgstr "Serveurs situés à l'emplacement" + +msgid "Servers that belongs to the IPA location" +msgstr "Serveurs appartenants à l'emplacement IPA" + +msgid "Service" +msgstr "Service" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" +"Le service %(service)s doit être redémarré sur le serveur IPA %(server)s " +"pour permettre la prise en compte de la nouvelle configuration." + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "Service « %(service)s » introuvable dans la base de données Kerberos" + +msgid "Service Certificate" +msgstr "Certificat de service" + +msgid "Service Groups" +msgstr "Groupes de services" + +msgid "Service Options" +msgstr "Options du service" + +msgid "Service Settings" +msgstr "Paramètres de service" + +msgid "Service category" +msgstr "Catégorie de service" + +msgid "Service category the ACL applies to" +msgstr "Catégorie de service à laquelle la LCA s'applique" + +msgid "Service category the rule applies to" +msgstr "Catégorie de services à laquelle la règle s'applique" + +msgid "Service delegation rule" +msgstr "Règle de délégation de service" + +msgid "Service delegation rules" +msgstr "Règles de délégation de service" + +msgid "Service delegation target" +msgstr "Cible de délégation de service" + +msgid "Service delegation targets" +msgstr "Cibles de délégation de service" + +msgid "Service group name" +msgstr "Nom de groupe de services HBAC" + +msgid "Service name" +msgstr "Nom de service" + +msgid "Service name of the service vault" +msgstr "Nom de service du service coffre" + +msgid "Service principal" +msgstr "Principal du service" + +msgid "Service principal alias" +msgstr "Alias de principal de service" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" +"Principal de service pour ce certificat (par ex.: HTTP/test.example.com)" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" +"Le principal de service n'est pas de la forme : service/fully-qualified host " +"name: %(reason)s" + +msgid "Service relative weight" +msgstr "Poids relatif du service" + +msgid "Service unprovisioned" +msgstr "Permissions du service supprimées" + +msgid "Service weight" +msgstr "Poids du service" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" +"Les options de service(s), d'utilisateur(s) ou de coffres-forts partagé(s) " +"ne peuvent être utilisées simultanément" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" +"Les options de service, d'utilisateur ou de coffre-fort partagé ne peuvent " +"être utilisées simultanément" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" +"Les options de service, de partage et d'utilisateur ne peuvent être " +"utilisées simultanément." + +msgid "Services" +msgstr "Services" + +msgid "Session error" +msgstr "Erreur de session" + +msgid "Session key wrapped with transport certificate" +msgstr "Clé de session emballée avec le certificat de transport" + +msgid "Session timeout" +msgstr "Délai d'expiration de la session" + +msgid "Set" +msgstr "Définir" + +msgid "Set Domain Level" +msgstr "Définir le niveau du domaine" + +msgid "Set OTP" +msgstr "Paramétrer le mot de passe à usage unique" + +msgid "Set SSH key" +msgstr "Définir la clé SSH" + +msgid "Set a user's password." +msgstr "Définir le mot de passe d'un utilisateur." + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" +"Modifie un attribut d'une paire nom/valeur. Le format est attribut=valeur.\n" +"Pour des attributs à valeurs multiples, la commande remplace les valeurs " +"déjà présentes." + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" +"Définir un groupe par défaut (repli) pour toutes les entrées sans " +"correspondance." + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" +"Définir le groupe « %(value)s » par défaut (repli) pour l'auto-adhésion" + +msgid "Settings" +msgstr "Paramètres" + +msgid "Shared secret for the trust" +msgstr "Secret partagé pour la confiance" + +msgid "Shared vault" +msgstr "Coffre-fort partagé" + +msgid "Show" +msgstr "Afficher" + +msgid "Show IPA server." +msgstr "Afficher les informations sur le serveur IPA." + +msgid "Show QR code" +msgstr "Montrer le code QR" + +msgid "Show Results" +msgstr "Afficher les résultats" + +msgid "Show all loaded plugins." +msgstr "Afficher tous les greffons chargés." + +msgid "Show configuration uri" +msgstr "Afficher l'uri de configuration" + +msgid "Show details" +msgstr "Afficher les détails" + +msgid "Show environment variables." +msgstr "Afficher les variables d'environnement." + +msgid "Show global trust configuration." +msgstr "Afficher la configuration globale des relations d'approbation." + +msgid "Show managed suffix." +msgstr "Afficher le suffixe géré." + +msgid "Show role status on a server" +msgstr "Afficher l'état du rôle sur un serveur" + +msgid "Show the current OTP configuration." +msgstr "Afficher la configuration OTP actuelle." + +msgid "Show the current configuration." +msgstr "Afficher la configuration actuelle." + +msgid "Show the current global DNS configuration." +msgstr "Afficher la configuration DNS globale." + +msgid "Show the list of permitted encryption types and exit" +msgstr "Affiche la liste des types de chiffrement autorisés, et sort." + +msgid "Show vault configuration." +msgstr "Afficher la configuration du coffre-fort." + +msgid "Show/Set key" +msgstr "Afficher/définir la clé" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "Affichage des entrées ${start} à ${end} sur ${total}." + +msgid "Simple bind failed\n" +msgstr "Échec de la connexion simple\n" + +msgid "Simulate use of Host-based access controls" +msgstr "Simulation de l'utilisation des contrôles d'accès basées sur les hôtes" + +msgid "Size" +msgstr "Taille" + +msgid "Size Limit" +msgstr "Limitation de taille" + +#, python-format +msgid "" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +msgstr "" +"La taille des données excède la limite actuelle fixée à %(limit)d octets." + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "Taille de la plage d'ID réservée au domaine approuvé" + +msgid "Skip DNS check" +msgstr "Passer la vérification DNS" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" +"Passer la vérification lorsque le dernier serveur DNS ou AC maître est " +"supprimé" + +msgid "Skip overlap check" +msgstr "Passer la vérification de recouvrement" + +#, python-format +msgid "Skipped %(key)s" +msgstr "%(key)s ignoré" + +#, python-format +msgid "Skipped %(map)s" +msgstr "%(map)s ignoré" + +msgid "Some entries were not deleted" +msgstr "Certaines entrées n'ont pas été supprimées" + +msgid "Some operations failed." +msgstr "Certaines opérations ont échoué." + +msgid "Source Host Groups" +msgstr "Groupes d'hôtes sources" + +msgid "Source Hosts" +msgstr "Hôtes sources" + +msgid "Source host" +msgstr "Hôte source" + +msgid "Source host category" +msgstr "Catégorie d'hôtes sources" + +msgid "Source host category the rule applies to" +msgstr "Catégorie d'hôtes sources à laquelle la règle s'applique" + +msgid "Specified CAs" +msgstr "AC indiquées" + +msgid "Specified Commands and Groups" +msgstr "Commandes et groupes définis" + +msgid "Specified Groups" +msgstr "Groupes définis" + +msgid "Specified Hosts and Groups" +msgstr "Hôtes et groupes indiqués" + +msgid "Specified Profiles" +msgstr "Prodils indiqués" + +msgid "Specified Services and Groups" +msgstr "Services et groupes indiqués" + +msgid "Specified Users and Groups" +msgstr "Utilisateurs et groupes indiqués" + +msgid "Specifies where to store keytab information." +msgstr "Indique où stocker l'information du tableau de clés." + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "Définir un ${entity} externe" + +msgid "Stage" +msgstr "Mette en attente" + +msgid "Stage User" +msgstr "Mettre en attente l'utilisateur" + +msgid "Stage Users" +msgstr "Mettre en attente les utilisateurs" + +#, python-format +msgid "Stage user %s activated" +msgstr "Utilisateur en attente %s activé" + +msgid "Stage users" +msgstr "Utilisateurs en attente" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "Compte utilisateur en attente « %(value)s »" + +msgid "Standard Record Types" +msgstr "Types d'enregistrement standard" + +msgid "State/Province" +msgstr "État/Province" + +msgid "Status" +msgstr "État" + +msgid "Status of the role" +msgstr "État du rôle" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "Arrêter un rafraichissement en cours du ou des nœuds choisis." + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "" +"Arrêt du raffraichissement demandé pour la réplication via le segment « " +"%(pkey)s »." + +msgid "Store issued certificates" +msgstr "Stocker les certificats émis" + +msgid "Street address" +msgstr "Adresse" + +msgid "Structured" +msgstr "Structuré" + +msgid "Subject" +msgstr "Sujet" + +msgid "Subject DN" +msgstr "DN de l'objet" + +msgid "Subject Distinguished Name" +msgstr "Nom distinctif de l'objet" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "Le type %s de nom alternatif de sujet est interdit" + +msgid "Submit a certificate signing request." +msgstr "Soumettre une demande de signature de certificat." + +msgid "Subtree" +msgstr "Sous-arbre" + +msgid "Subtree to apply ACI to" +msgstr "Sous-arbre auquel appliquer l'ACI" + +msgid "Subtree to apply permissions to" +msgstr "Branche à laquelle appliquer les permissions" + +msgid "Subtype" +msgstr "Sous-type" + +msgid "Success" +msgstr "Succès" + +msgid "Sudo" +msgstr "Sudo" + +msgid "Sudo Allow Command Groups" +msgstr "Groupes de commandes « sudo allow »" + +msgid "Sudo Allow Commands" +msgstr "Commandes « sudo allow »" + +msgid "Sudo Command" +msgstr "Commande sudo" + +msgid "Sudo Command Group" +msgstr "Groupe de commandes sudo" + +msgid "Sudo Command Groups" +msgstr "Groupes de commandes sudo" + +msgid "Sudo Commands" +msgstr "Commandes sudo" + +msgid "Sudo Deny Command Groups" +msgstr "Groupes de commandes « sudo deny »" + +msgid "Sudo Deny Commands" +msgstr "Commande « sudo deny »" + +msgid "Sudo Option" +msgstr "Option sudo" + +msgid "Sudo Rule" +msgstr "Règle sudo" + +msgid "Sudo Rules" +msgstr "Règles sudo" + +msgid "Sudo order" +msgstr "Ordre sudo" + +msgid "Suffix name" +msgstr "Nom du suffixe" + +msgid "Superseded" +msgstr "Remplacé" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "Type de chiffrements pris en charge :\n" + +msgid "Suppress processing of membership attributes." +msgstr "Suppression du traitement des attributs d'adhésion." + +msgid "Sync OTP Token" +msgstr "Synchroniser le jeton OTP" + +msgid "Synchronize an OTP token." +msgstr "Synchroniser un jeton OTP." + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Erreur de syntaxe : %(error)s" + +msgid "System DNS records updated" +msgstr "Enregistrements DNS du système mis à jour" + +msgid "TA record" +msgstr "Enregistrement TA" + +msgid "TKEY record" +msgstr "Enregistrement TKEY" + +msgid "TLSA Certificate Association Data" +msgstr "Donnée d'association du certificat TLSA" + +msgid "TLSA Certificate Usage" +msgstr "Utilisation du certificat TLSA" + +msgid "TLSA Matching Type" +msgstr "Type de correspondance TLSA" + +msgid "TLSA Selector" +msgstr "Sélecteur TLSA" + +msgid "TLSA record" +msgstr "Enregistrement TLSA" + +msgid "TOTP Synchronization Window" +msgstr "Fenêtre de synchronisation TOTP" + +msgid "TOTP authentication Window" +msgstr "Fenêtre d'authentification TOTP" + +msgid "TOTP authentication time variance (seconds)" +msgstr "Durée de la fenêtre d'authentification TOTP (secondes)" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "Variance temporelle de synchronisation TOTP (secondes)" + +msgid "TOTP token / IPA server time difference" +msgstr "Différence entre le jeton TOTP et le serveur IPA" + +msgid "TSIG record" +msgstr "Enregistrement TSIG" + +msgid "Take a revoked certificate off hold." +msgstr "Ôter un certificat révoqué en attente." + +msgid "Target" +msgstr "Cible" + +msgid "Target DN" +msgstr "DN cible" + +msgid "Target DN subtree" +msgstr "Sous-arbre des DN cibles" + +msgid "Target group" +msgstr "Groupe cible" + +msgid "Target host" +msgstr "Hôte cible" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "Membres cibles d'un groupe (définit « memberof » du filtre cible)" + +msgid "Target reverse zone not found." +msgstr "Zone inverse cible non trouvée." + +msgid "Target your own entry (self)" +msgstr "Cibler votre propre entrée (« self »)" + +msgid "Task DN" +msgstr "DN de la tâche" + +#, python-format +msgid "Task DN = '%s'" +msgstr "DN de la tâche = « %s »" + +msgid "Telephone Number" +msgstr "Numéro de téléphone" + +msgid "Test the ACI syntax but don't write anything" +msgstr "Tester la syntaxe de l'ACI, sans rien écrire" + +msgid "Text Data" +msgstr "Donnée texte" + +msgid "Text does not match field pattern" +msgstr "Le texte ne correspond pas au motif du champ" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" +"L'option « --domain » ne peut être utilisée conjointement avec les options " +"« --add-domain » or « --del-domain ». Utilisez « --domain » pour indiquer " +"explicitement la liste complète des domaines du royaume, utilisez « --add-" +"domain » et « --del-domain » pour ajouter et supprimer les domaines de " +"manière individuelle." + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "L'ACI de la permission %(name)s n'a pas été trouvée dans %(dn)s " + +msgid "The IPA realm" +msgstr "Le domaine IPA" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" +"L'enregistrement TXT _kerberos du domaine %(domain)s ne peut être créé " +"(%(error)s).\n" +"Cela peut arriver si la zone n'est pas gérée par IPA. Merci de créer " +"manuellement l'enregistrement, qui doit contenir la valeur suivante : " +"« %(realm)s »" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" +"L'enregistrement TXT _kerberos du domaine %(domain)s ne peut être supprimé " +"(%(error)s).\n" +"Cela peut arriver si la zone n'est pas gérée par IPA. Merci de le supprimer " +"manuellement." + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "La clé « automount » %(key)s avec l'info %(info)s n'existe pas" + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "Le caractère « %(char)r » n'est pas autorisé." + +msgid "The default users group cannot be removed" +msgstr "Le groupe par défaut ne peut être supprimé" + +msgid "The deny type has been deprecated." +msgstr "Le type « deny » est obsolète." + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" +"Le nom de domaine de l'hôte cible ou '.' si le service n'est vraiment pas " +"disponible dans ce domaine" + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "" +"Les domaines suivants n'appartiennent pas à ce domaine Kerberos : %(domains)s" + +msgid "The group doesn't exist" +msgstr "Le groupe n'existe pas" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "L'hôte « %s » auquel ajouter un service n'existe pas." + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "Le nom d'hôte doit être pleinement qualifié : %s\n" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "Le nom d'hôte ne doit pas être : %s\n" + +msgid "The hostname or IP (with or without port)" +msgstr "Nom d'hôte ou adresse IP (avec ou sans port)" + +msgid "The hostname this reverse record points to" +msgstr "Le nom d'hôte vers lequel cet enregistrement inverse pointe" + +msgid "The hostname to register as" +msgstr "Le nom d'hôte sous lequel enregistrer" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" +"La paire « key/info » doit être unique. Une clé nommée %(key)s avec " +"l'info%(info)s existe déjà." + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" +"Le fichier tableau de clés duquel il faut retirer le principal ou les " +"principaux." + +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "Les types les plus courants pour ce type de zone sont : %s\n" + +msgid "The number of times to retry authentication" +msgstr "Le nombre de fois autorisées pour tenter une authentification" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" +msgstr "" +"La valeur de la clé principale de l'entrée, par ex. « jdoe » pour un " +"utilisateur" + +msgid "The principal for this request doesn't exist." +msgstr "Le principal pour cette demande n'existe pas." + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" +"Le principal pour lequel obtenir un tableau de clés (par ex: ftp/ftp.example." +"com@EXAMPLE.COM)" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" +"Le principal à supprimer d'un tableau de clés (par ex. : ftp/ftp.example." +"com@EXAMPLE.COM)" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "Le domaine du principal ne correspond pas au domaine de ce serveur IPA" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" +"Le domaine Kerberos des domaines suivants ne peuvent être détectés : " +"%(domains)s. S'il existe des domaines appartenant à ce royaume, merci de " +"créer un enregistrement TXT kerberos contenant « %(realm)s » dans chacun " +"d'entre eux." + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" +"Le schéma utilisé sur le serveur LDAP. Les valeurs prises en charge sont " +"RFC2307 et RFC2307bis. La valeur par défaut est RFC2307bis" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" +"Le critère de recherche n'est pas suffisamment précis. Une valeur attendue, " +"mais %(found)d trouvées." + +msgid "The secret used to encrypt data" +msgstr "Secret utilisé pour chiffrer les données" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" +"Le principal du service pour le nom %s alternatif du sujet dans la demande " +"de certificat n'existe pas" + +msgid "The topic or command name." +msgstr "Le nom du thème ou de la commande." + +msgid "The total timeout across all retries (in seconds)" +msgstr "Délai d'expiration total pour toutes les tentatives (en secondes)" + +msgid "The username attribute on the user object" +msgstr "L'attribut de nom d'utilisateur de l'objet utilisateur" + +msgid "The username, password or token codes are not correct" +msgstr "" +"Le nom d'utilisateur, mot de passe ou code du jeton ne sont pas corrects" + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" +"Cette commande ne peut être utilisée que pour modifier l'allocation d'ID " +"pour le domaine local. Utilisez « ipa help idrange » pour plus " +"d'informations." + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" +"Cette commande s'appuie sur l'existence du groupe « editors », mais ce " +"groupe n'a pas été trouvé." + +msgid "This command requires root access" +msgstr "Cette commande requiert un accès administrateur" + +msgid "This entry already exists" +msgstr "Cette entrée existe déjà" + +msgid "This entry cannot be enabled or disabled" +msgstr "Cette entrée ne peut être activée ou désactivée" + +msgid "This entry is already a member" +msgstr "Cette entrée est déjà membre" + +msgid "This entry is already disabled" +msgstr "Cette entrée est déjà désactivée" + +msgid "This entry is already enabled" +msgstr "Cette entrée est déjà activée" + +msgid "This entry is not a member" +msgstr "Cette entrée n'est pas un membre" + +msgid "This group already allows external members" +msgstr "Ce groupe autorise déjà des membres externes" + +msgid "This group cannot be posix because it is external" +msgstr "Ce groupe ne peut être de type POSIX car il est externe" + +msgid "This is already a posix group" +msgstr "Ce groupe est déjà de type POSIX" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" +"Ce groupe est déjà de type POSIX et ne peut être converti en groupe externe" + +msgid "This may take some time, please wait ..." +msgstr "Cela peut prendre un peu de temps, veuillez patienter..." + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" +"Cette page comporte des modifications non-sauvegardées. Veuillez les " +"enregistrer ou les annuler." + +msgid "Ticket expired" +msgstr "Ticket périmé" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "La politique de ticket pour %s ne peut pas être lue" + +msgid "Time Limit" +msgstr "Limitation de durée" + +msgid "Time limit of search in seconds" +msgstr "Limite de la durée de la recherche en secondes" + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "Limite de la durée de la recherche en secondes (0 pour illimité)" + +msgid "Time now" +msgstr "Heure actuelle" + +msgid "Time to live" +msgstr "Durée de vie" + +msgid "Time to live for records at zone apex" +msgstr "Durée de vie des enregistrements en sommet de zone" + +msgid "Time-based (TOTP)" +msgstr "Jetons temporels (TOTP)" + +msgid "Timeout" +msgstr "Délai d'expiration" + +#, c-format +msgid "Timeout exceeded." +msgstr "Délai d'attente dépassé." + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" +"Pour établir la confiance avec Active Directory, le nom de domaine et le nom " +"de royaume du serveur IPA doivent correspondre" + +msgid "To get command help, use:" +msgstr "Pour obtenir de l'aide, utiliser :" + +msgid "Token ID" +msgstr "ID du jeton" + +msgid "Token description (informational only)" +msgstr "Description du jeton (à titre d'information)" + +msgid "Token hash algorithm" +msgstr "Algorithme de hachage du jeton" + +msgid "Token model (informational only)" +msgstr "Modèle du jeton (à titre d'information)" + +msgid "Token secret (Base32; default: random)" +msgstr "Secret du jeton (Base32 ; par défaut : aléatoire)" + +msgid "Token serial (informational only)" +msgstr "Numéro de série du jeton (à titre d'information)" + +msgid "Token synchronization failed" +msgstr "Échec de synchronisation du jeton" + +msgid "Token vendor name (informational only)" +msgstr "Nom du fabricant du jeton (à titre d'information)" + +msgid "Token was synchronized" +msgstr "Jeton synchronisé" + +msgid "Topic commands:" +msgstr "Commandes du thème :" + +msgid "Topic or Command" +msgstr "Thème ou commande" + +msgid "Topology" +msgstr "Topologie" + +msgid "Topology Segment" +msgstr "Segment de topologie" + +msgid "Topology Segments" +msgstr "Segments de topologie" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" +"La topologie ne permet pas au serveur %(server)s de se répliquer avec les " +"serveurs :" + +msgid "Topology is disconnected" +msgstr "La topologie est déconnectée" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "La gestion de la topologie nécessite le niveau de domaine minimal {0}" + +msgid "Topology suffix" +msgstr "Suffixe de topologie" + +msgid "Topology suffixes" +msgstr "Suffixes de topologie" + +msgid "Total number of variables env (>= count)" +msgstr "Nombre total de variables d'environnement (>= count)" + +msgid "Transport Certificate" +msgstr "Certificat de transport" + +msgid "True" +msgstr "Vrai" + +msgid "True if not all results were returned" +msgstr "Vrai si tous les résultats n'ont pas été renvoyés" + +msgid "True means the operation was successful" +msgstr "Vrai signifie que l'opération a réussi" + +msgid "Trust" +msgstr "Confiance" + +msgid "Trust Settings" +msgstr "Configuration de la confiance" + +msgid "Trust direction" +msgstr "Sens de la confiance" + +msgid "Trust setup" +msgstr "Configuration des relations d'approbation" + +msgid "Trust status" +msgstr "État de la confiance" + +msgid "Trust type" +msgstr "Type de confiance" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "Type de confiance (par défaut, ad pour Active Directory)" + +msgid "Trusted domain" +msgstr "domaine approuvé" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" +"Le domaine approuvé %(domain)s est inclus parmi les royaumes de domaines " +"IPA. Il doit être retiré de manière préalable à l'établissement de la " +"relation d'approbation. Cf. la commande « ipa realmdomains-mod --del-" +"domain »." + +msgid "Trusted domain and administrator account use different realms" +msgstr "" +"Le domaine approuvé et le compte administrateur utilisent des domaines " +"différents" + +msgid "Trusted domain did not return a unique object" +msgstr "Le domaine approuvé n'a pas renvoyé un objet unique" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "Le domaine approuvé n'a pas renvoyé un SID valide pour l'objet" + +msgid "Trusted domain partner" +msgstr "Partenaire de domaine approuvé" + +msgid "Trusted domains" +msgstr "domaines approuvés" + +msgid "Trusted for delegation" +msgstr "Approuvé pour délégation." + +msgid "Trusted forest" +msgstr "Forêt de confiance" + +msgid "Trusting forest" +msgstr "Forêt en cours de mise en confiance" + +msgid "Trusts" +msgstr "Confiances" + +msgid "Two factor authentication (password + OTP)" +msgstr "Authentification à deux-facteurs" + +msgid "Two-way trust" +msgstr "Confiance réciproque" + +msgid "Type" +msgstr "Type" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "" +"Type d'objets IPA (définit le sous-arbre et le filtre cible de la classe " +"d'objets)" + +msgid "Type of the token" +msgstr "Type du jeton" + +msgid "Types of supported user authentication" +msgstr "Types d'authentification utilisateur pris en charge" + +msgid "UID" +msgstr "UID" + +msgid "UPN suffixes" +msgstr "Suffixes UPN" + +msgid "URI" +msgstr "URI" + +msgid "URL" +msgstr "URL" + +msgid "Un-apply" +msgstr "Ne plus appliquer" + +msgid "Un-apply ID Views from hosts" +msgstr "Retirer l'application de la vue d'identifiants d'hôtes" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" +"Retire l'application de la vue d'identifiants des hôtes de groupes d'hôtes" + +msgid "Un-apply from host groups" +msgstr "Ne plus appliquer aux groupes d'hôtes" + +msgid "Un-apply from hosts" +msgstr "Ne plus appliquer aux hôtes " + +msgid "Unable to communicate with CMS" +msgstr "Impossible de communiquer avec le CMS" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "Impossible de communiquer avec le CMS (état %d)" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "" +"Impossible de créer un groupe privé. Un groupe '%(group)s' existe déjà." + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "Impossible de déterminer le serveur IPA depuis %s\n" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" +"Impossible de savoir si le principal Kerberos %s existe déjà. Utiliser la " +"commande 'ipa user-mod' pour le définir manuellement." + +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "Impossible de déterminer le DN racine de %s\n" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" +"Impossible d'afficher le code QR avec l'encodage configuré sur la sortie. " +"Merci d'utiliser l'URI du jeton pour configurer votre jeton OTP" + +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "Impossible d'activer SSL dans LDAP\n" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "Impossible de créer le cache des justificatifs d'identité Kerberos\n" + +#, c-format +msgid "Unable to initialize ldap library!\n" msgstr "Impossible d'initialiser la bibliothèque LDAP !\n" +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" +"Impossible de joindre l'hôte : cache des justificatifs d'identité Kerberos " +"introuvable\n" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" +"Impossible de joindre l'hôte : principal d'utilisateur Kerberos introuvable " +"et mot de passe non fourni.\n" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" +"Impossible de joindre l'hôte : l'initialisation du contexte Kerberos a " +"échoué\n" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "Impossible d'analyser le principal\n" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "Impossible d'analyser le nom du principal\n" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "Impossible d'analyser le principal : %1$s (%2$d)\n" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "Impossible de supprimer l'entrée\n" + msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" msgstr "Impossible de définir LDAP_OPT_PROTOCOL_VERSION\n" msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" msgstr "Impossible de définir LDAP_OPT_X_SASL_NOCANON\n" -#, fuzzy -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "Impossible de définir LDAP_OPT_X_SASL_NOCANON\n" +msgid "Unable to verify write permissions to the AD" +msgstr "Impossible de vérifier les permissions en écriture vers AD" -#, fuzzy -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "Impossible de définir LDAP_OPT_X_SASL_NOCANON\n" +msgid "Undelete a delete user account." +msgstr "Restaurer un compte utilisateur supprimé." -#, fuzzy -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "Impossible de définir LDAP_OPT_PROTOCOL_VERSION\n" +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "Compte utilisateur « %(value)s » restauré" + +msgid "Undo" +msgstr "Annuler" + +msgid "Undo All" +msgstr "Tout annuler" + +msgid "Undo all changes in this field." +msgstr "Annuler toutes les modifications dans ce champ." + +msgid "Undo this change." +msgstr "Annuler cette modification." + +msgid "Unenroll this host from IPA server" +msgstr "Désinscrire cet hôte du serveur IPA" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "Échec de la désinscription.\n" + +#, c-format +msgid "Unenrollment successful.\n" +msgstr "Désinscription réussie.\n" + +msgid "Unique ID" +msgstr "ID unique" + +msgid "Unknown" +msgstr "Inconnu" + +msgid "Unknown Error" +msgstr "Erreur inconnue" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "Option inconnue : %(option)s" + +msgid "Unlock" +msgstr "Déverrouiller" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "Compte utilisateur « %(value)s » déverrouillé" + +msgid "Unmatched" +msgstr "Pas de correspondance" + +msgid "Unprovision" +msgstr "Suppression des permissions" + +msgid "Unresolved rules in --rules" +msgstr "Règles non résolues dans « --rules »" + +msgid "Unrevoked" +msgstr "Réintégré" + +msgid "Unsaved Changes" +msgstr "Modifications non sauvegardées" + +msgid "Unselect All" +msgstr "Tout désélectionner" + +msgid "Unspecified" +msgstr "Non-spécifié" + +msgid "Unsupported value" +msgstr "Valeur non prise en charge" + +msgid "Update" +msgstr "Modifier" + +msgid "Update DNS entries" +msgstr "Mettre à jour les entrées DNS" + +msgid "Update System DNS Records" +msgstr "Mettre à jour les enregistrements DNS du serveur" + +msgid "Update location and IPA server DNS records" +msgstr "Mettre à jour les enregistrements DNS des emplacements et serveurs IPA" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" +"Échec de la à jour de l'enregistrement du système « %(record)s », erreur : " +"%(error)s" + +msgid "User" +msgstr "Utilisateur" + +msgid "User Group" +msgstr "Groupe d'Utilisateurs" + +msgid "User Groups" +msgstr "Groupes d'utilisateurs" + +msgid "User ID" +msgstr "Identifiant utilisateur" + +msgid "User ID Number" +msgstr "Numéro d'identifiant utilisateur" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" +"Numéro identifiant d'utilisateur (le système en assigne un si non défini)" + +msgid "User ID override" +msgstr "Surcharge d'identifiant utilisateur" + +msgid "User ID overrides" +msgstr "Surcharges d'identifiants utilisateurs" + +msgid "User Options" +msgstr "Options utilisateurs" + +msgid "User attribute" +msgstr "Attribut utilisateur" + +msgid "User authentication types" +msgstr "Types d'authentification utilisateur" + +msgid "User categories" +msgstr "Catégories d'utilisateurs" + +msgid "User category" +msgstr "Catégorie d'utilisateur" msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" +"User category (semantics placed on this attribute are for local " +"interpretation)" msgstr "" +"Catégorie d'utilisateurs (la sémantique associée à cet attribut est " +"interprétée localement)" -#, fuzzy -msgid "Unable to initialize STARTTLS session\n" -msgstr "Impossible d'initialiser la bibliothèque LDAP !\n" +msgid "User category the ACL applies to" +msgstr "Catégorie d'utilisateur à laquelle la LCA s'applique" -#~ msgid "Maximum password life must be greater than minimum." -#~ msgstr "" -#~ "La durée de vie maximale du mot de passe doit être supérieure au minimum." +msgid "User category the rule applies to" +msgstr "Catégorie d'utilisateurs à laquelle la règle s'applique" + +msgid "User container" +msgstr "Conteneur d'utilisateur" + +msgid "User group" +msgstr "Groupe d'utilisateurs" + +msgid "User group ACI grants access to" +msgstr "L'ACI d'un groupe utilisateur permet un accès à" + +msgid "User group rule" +msgstr "Règle de groupe utilisateur" + +msgid "User group rules" +msgstr "Règles de groupes d'utilisateurs" + +msgid "User group to apply delegation to" +msgstr "Groupe d'utilisateur auquel s'applique la délégation" + +msgid "User group to apply permissions to (sets target)" +msgstr "" +"Groupe d'utilisateurs auquel appliquer les permissions (définit « target »)" + +msgid "User login" +msgstr "Identifiant de connexion" + +msgid "User name" +msgstr "Nom d'utilisateur" + +msgid "User object class" +msgstr "Classe d'objets utilisateur" + +msgid "User object overrides" +msgstr "Surcharges des objets utilisateurs" + +msgid "User password" +msgstr "Mot de passe utilisateur" + +msgid "User search fields" +msgstr "Champs de recherche utilisateur" + +msgid "User to override" +msgstr "Utilisateurs à surcharger" + +msgid "User-friendly description of action performed" +msgstr "Description intelligible de l'action effectuée" + +msgid "User-specified attributes to which the permission applies" +msgstr "Attributs propres à un utilisateur auxquels la permission s'applique" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" +"Attributs propres à un utilisateur auxquels la permission ne s'applique " +"explicitement pas" + +msgid "Username" +msgstr "Nom d'utilisateur" + +msgid "Username of the user vault" +msgstr "Nom d'utilisateur du coffre-fort personnel" + +msgid "Users" +msgstr "Utilisateurs" + +msgid "Users allowed to create keytab" +msgstr "Utilisateurs autorisés à créer un tableau de clés" + +msgid "Users allowed to retrieve keytab" +msgstr "Utilisateurs autorisés à récupérer un tableau de clés" + +msgid "Valid Certificate Present" +msgstr "Certificat valide présent" + +msgid "Valid from" +msgstr "Valide à partir du" + +msgid "Valid not after from" +msgstr "Invalide après à partir du" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "Valide à partir de cette date (AAAA-mm-jj)" + +msgid "Valid not after to" +msgstr "Invalide après jusqu'au" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "Valide jusqu'à cette date (AAAA-mm-jj)" + +msgid "Valid not before from" +msgstr "Invalide avant à partir du" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "Valide à partir de cette date (AAAA-mm-jj), non valide avant" + +msgid "Valid not before to" +msgstr "Invalide avant jusqu'au" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "Valide à cette date (AAAA-mm-jj), non valide avant" + +msgid "Valid to" +msgstr "Valide jusqu'au" + +msgid "Validation error" +msgstr "Erreur de validation" + +msgid "Validity" +msgstr "Validité" + +msgid "Validity end" +msgstr "Fin de validation" + +msgid "Validity start" +msgstr "Départ de validation" + +msgid "Vault" +msgstr "Coffre-fort" + +msgid "Vault Container" +msgstr "Conteneur de coffres-forts" + +msgid "Vault Containers" +msgstr "Conteneurs de coffres-forts" + +msgid "Vault configuration" +msgstr "Configuration du coffre-fort" + +msgid "Vault data encrypted with session key" +msgstr "Les données du coffre-fort sont chiffrées avec la clé de session" + +msgid "Vault description" +msgstr "Description du coffre-fort" + +msgid "Vault name" +msgstr "Nom du coffre-fort" + +msgid "Vault password" +msgstr "Mot de passe du coffre-fort" + +msgid "Vault private key" +msgstr "Clé privée du coffre-fort" + +msgid "Vault public key" +msgstr "Clé publique du coffre-fort" + +msgid "Vault salt" +msgstr "Sel du coffre-fort" + +msgid "Vault service" +msgstr "Service du coffre-fort" + +msgid "Vault type" +msgstr "Type de coffre-fort" + +msgid "Vault user" +msgstr "Utilisateur du coffre-fort" + +msgid "Vaults" +msgstr "Coffres-forts" + +msgid "Vendor" +msgstr "Fournisseur" + +msgid "Verify Password" +msgstr "Vérifier le mot de passe" + +msgid "Verify Principal Password" +msgstr "Vérifier le mot de passe du principal" + +msgid "Version" +msgstr "Version" + +msgid "Vertical Precision" +msgstr "Précision verticale" + +msgid "Via Service" +msgstr "Via le service" + +msgid "View" +msgstr "Afficher" + +msgid "View Certificate" +msgstr "Afficher le certificat" + +msgid "Waiting for confirmation by remote side" +msgstr "En attente de confirmation par la partie distante" + +msgid "Warning" +msgstr "Attention" + +msgid "Warning unrecognized encryption type.\n" +msgstr "Avertissement, type de chiffrement inconnu.\n" + +msgid "Warning unrecognized salt type.\n" +msgstr "Avertissement, type « salt » inconnu.\n" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "Avertissement : échec de conversion de type (#%d)\n" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" +"Avertissement : les types « salt » ne sont pas traités avec des mots de " +"passe aléatoires (cf. option -P)\n" + +msgid "Weight" +msgstr "Poids" + +msgid "Weight for server services" +msgstr "Poids des services des serveurs" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" +"Lors de la migration d'un groupe existant déjà dans le domaine IPA, " +"surcharger le GID du groupe et renvoyer un succès" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" +"Activation ou non d'un agrément de réplication, signifiant que la " +"réplication fonctionne par le biais de cet agrément" + +msgid "Whether to store certs issued using this profile" +msgstr "Stocker ou non les certificats émis à partir de ce profil" + +msgid "Who" +msgstr "Qui" + +msgid "Working" +msgstr "Travail en cours" + +msgid "Write profile configuration to file" +msgstr "Écrire le profil de configuration dans un fichier" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" +"Vous essayez de référencer un groupe privé magique qui ne peut être " +"surchargé. Essayez plutôt de surcharger l'attribut GID de l'utilisateur." + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" +"Vous pouvez utiliser FreeOTP comme " +"application de jeton logiciel OTP." + +msgid "You may need to manually remove them from the tree" +msgstr "Vous pouvez avoir besoin de les supprimer manuellement de l'arbre" + +msgid "You must enroll a host in order to create a host service" +msgstr "Vous devez enregistrer un hôte afin de créer un service" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" +"Vous devez préciser les deux options « rid-base » et « secondary-rid-base », " +"car « ipa-adtrust-install » a déjà été exécuté." + +msgid "You will be redirected to DNS Zone." +msgstr "Vous allez être redirigé vers la zone DNS." + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "Votre mot de passe expire dans ${days} jours." + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" +"Votre relation d'approbation avec %(domain)s est cassée. Merci de la recréer " +"à l'aide de « ipa trust-add »." + +msgid "YubiKey slot" +msgstr "Connecteur YubiKey" + +msgid "ZIP" +msgstr "Code postal" + +msgid "Zone forwarders" +msgstr "Redirection de zone" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "Zone trouvée : ${zone}" + +msgid "Zone name" +msgstr "Nom de zone" + +msgid "Zone name (FQDN)" +msgstr "Nom de zone (FQDN)" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "L'enregistrement '%s' de zone ne peut être supprimé" + +msgid "Zone refresh interval" +msgstr "Intervalle de rafraîchissement de zone" + +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "Échec de « access() » sur %1$s : erreur n°= %2$d\n" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "L'utilisateur actif nommé « %(user)s » existe déjà" + +msgid "algorithm value: allowed interval 0-255" +msgstr "valeur de l'algorithme : intervalle autorisé 0-255" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "tous les maîtres doivent avoir le rôle %(role)s activé" + +msgid "an internal error has occurred" +msgstr "une erreur interne est survenue" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "une erreur interne est survenue sur le serveur à « %(server)s »" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" +"la réponse à la requête « %(owner)s %(rtype)s » ne comporte pas de " +"signatures DNSSEC (pas de données RRSIG)" + +msgid "any of the configured servers" +msgstr "n'importe quel serveur configuré" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "l'API n'a pas un tel espace de noms : « %(name)s »" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "" +"au moins une des options « type », « users » ou « hosts » doit être indiquée" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" +"au moins un parmi « type », « filter », « subtree », « targetgroup », " +"« attrs » ou « memberof » est requis" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "l'attribut « %(attribute)s » n'est pas autorisé" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "attribut « %s » interdit" + +msgid "attribute is not configurable" +msgstr "l'attribut n'est pas configurable" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "« attrs » et attributs inclus s'excluent mutuellement" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "« attrs » et attributs inclus/exclus s'excluent mutuellement" + +msgid "automatically add the principal if it doesn't exist" +msgstr "ajoute automatiquement le principal s'il n'existe pas" + +msgid "automount key" +msgstr "clé « automount »" + +msgid "automount keys" +msgstr "clés « automount »" + +msgid "automount location" +msgstr "emplacement de montage automatique" + +msgid "automount locations" +msgstr "emplacements de montage automatique" + +msgid "automount map" +msgstr "carte « automount »" + +msgid "automount maps" +msgstr "cartes « automount »" + +msgid "basedn" +msgstr "« basedn »" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "Échec de « ber_init() », contrôle invalide ?!\n" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "échec de « ber_scanf() », « kvno » introuvable ?!\n" + +msgid "bind password" +msgstr "mot de passe de connexion" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "doit contenir au plus %(len)d caractères" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "peut être d'au plus %(maxlength)d octets" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "peut être d'au plus %(maxlength)d caractères" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "doit être inférieur ou égal à %(maxvalue)d" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "doit valoir au plus %(maxvalue)s" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" +"impossible d'ajouter la permission « %(perm)s » avec le type de liaison " +"« %(bindtype)s » à un privilège" + +msgid "cannot be empty" +msgstr "ne peut pas être vide" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "impossible de se connecter à « %(uri)s » : %(error)s" + +msgid "cannot delete global password policy" +msgstr "impossible de supprimer une politique de mot de passe globale" + +msgid "cannot delete managed permissions" +msgstr "impossible de supprimer des permissions administrées" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" +"impossible de supprimer le domaine racine de la relation de confiance, " +"utiliser la commande « trust-del » pour supprimer la relation de confiance" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" +"impossible de désactiver le domaine racine de la relation de confiance, " +"utiliser la commande « trust-del » pour supprimer la relation de confiance " +"elle-même" + +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "impossible d'ouvrir le fichier de configuration %s\n" + +msgid "cannot rename managed permissions" +msgstr "impossible de renommer les permissions administrées" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" +"impossible de définir le type de liaison d'une permission assignée à un " +"privilège" + +msgid "cannot specify both raw certificate and file" +msgstr "impossible d'indiquer à la fois certificat brut et un nom de fichier" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" +"impossible de définir simultanément un filtre de cible totale et un filtre " +"de cible complémentaire" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "impossible d'utiliser « stat() » sur le fichier de configuration %s\n" + +msgid "change collided with another change" +msgstr "la modification s'est heurtée à une autre" + +msgid "change to a POSIX group" +msgstr "Transformer en groupe POSIX" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" +"modifier afin de permettre une prise en charge des membres externes non-IPA " +"depuis des domaines approuvés" + +#, c-format +msgid "child exited with %d\n" +msgstr "processus fils terminé avec %d\n" + +msgid "cn is immutable" +msgstr "cn est immuable" + +msgid "command" +msgstr "commande" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "la commande « %(name)s » prend au plus %(count)d argument" +msgstr[1] "la commande « %(name)s » prend au plus %(count)d arguments" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "la commande « %(name)s » ne prend pas d'argument" + +msgid "commands" +msgstr "commandes" + +msgid "commands cannot be added when command category='all'" +msgstr "" +"des commandes ne peuvent pas être ajoutées quand la catégorie de commande " +"est « all »" + +msgid "commands for controlling sudo configuration" +msgstr "commandes pour contrôler la configuration sudo" + +msgid "communication with CIFS server was unsuccessful" +msgstr "la communication avec le serveur CIFS a échoué" + +msgid "configuration options" +msgstr "options de configuration" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "entrée conteneur (%(container)s) introuvable" + +msgid "default CA ACL can be only disabled" +msgstr "La LCA d'AC par défaut ne peut qu'être désactivée" + +msgid "delegation" +msgstr "délégation" + +msgid "delegations" +msgstr "délégations" + +msgid "delete" +msgstr "supprimer" + +msgid "description" +msgstr "description" + +msgid "did not receive Kerberos credentials" +msgstr "Justificatifs Kerberos non reçus" + +msgid "does not match any of accepted formats: " +msgstr "ne correspond à aucun des formats acceptés :" + +msgid "domain" +msgstr "domaine" + +msgid "domain is not configured" +msgstr "le domaine n'est pas configuré" + +msgid "domain is not trusted" +msgstr "le domaine n'est pas de confiance" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "" +"le nom de domaine « %(domain)s » doit être normalisé à : %(normalized)s" + +msgid "domain name cannot be longer than 255 characters" +msgstr "le nom de domaine ne peut pas dépasser 255 caractères" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "chaque élément de LCA doit se terminer par un point-virgule" + +msgid "empty DNS label" +msgstr "libellé DNS vide" + +msgid "empty filter" +msgstr "filtre vide" + +msgid "entries" +msgstr "entrées" + +msgid "entry" +msgstr "entrée" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "erreur de conversion des données lors du transport XML-RPC : %(error)s" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "erreur sur le serveur « %(server)s » : %(error)s" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "échec de l'exécution de « ipa-getkeytab », erreur n° %d\n" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" +"format attendu : <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen (nombre impair de chiffres hexadécimaux " +"ou tiret)" + +msgid "file to store certificate in" +msgstr "fichier où stocker le certificat" + +msgid "filename" +msgstr "nom de fichier" + +msgid "filter and memberof are mutually exclusive" +msgstr "« filter » et « memberof » s'excluent mutuellement" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" +"les marqueurs doivent être une valeur parmi « S », « A », « U », ou « P »" + +msgid "flags value: allowed interval 0-255" +msgstr "valeur des marqueurs : intervalle autorisé 0-255" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "" +"forcer la création d'un enregistrement NS même si le nom du système n'est " +"pas dans le DNS" + +msgid "force delete of SYSTEM permissions" +msgstr "forcer la suppression des permissions SYSTEM" + +msgid "force host name even if not in DNS" +msgstr "forcer le nom même si absent des DNS" + +msgid "force principal name even if not in DNS" +msgstr "forcer le nom du principal même si absent du DNS" + +#, c-format +msgid "fork() failed\n" +msgstr "echec de « fork() »\n" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" +"le format doit être définit sous la forme\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" où :\n" +" d1: [0 .. 90] (degrés de latitude)\n" +" d2: [0 .. 180] (degrés de longitude)\n" +" m1, m2: [0 .. 59] (minutes de latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (secondes de latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] PAR .01 (altitude en mètres)\n" +" siz, hp, vp: [0 .. 90000000.00] (taille/précision en mètres)\n" +" Cf. RFC 1876 plus de détails" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "le format doit être spécifié comme « %(format)s » %(rfcs)s" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" +"La zone redirigiée « %(fwzone)s » n'est pas en fonction car il lui manque " +"une délégation NS correcte dans la zone faisant autorité « %(authzone)s ». " +"Merci d'ajouter les enregistrement NS « %(ns_rec)s » à la zone " +"« %(authzone)s »." + +msgid "gid cannot be set for external group" +msgstr "l'identifiant de groupe ne peut être défini pour un groupe externe" + +msgid "givenname is required" +msgstr "givenname est requis" + +msgid "group" +msgstr "groupe" + +msgid "group runAs" +msgstr "groupe runAs" + +msgid "group, permission and self are mutually exclusive" +msgstr "« group », « permission » et « self » s'excluent mutuellement" + +msgid "groups" +msgstr "groupes" + +msgid "groups to add" +msgstr "groupes à ajouter" + +msgid "groups to exclude from migration" +msgstr "groupes à exclure de la migration" + +msgid "groups to remove" +msgstr "groupes à supprimer" + +msgid "host" +msgstr "hôte" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" +"une catégorie d'hôtes ne peut pas être définie à « all » tant qu'il reste " +"des hôtes autorisés" + +msgid "host group" +msgstr "groupe d'hôtes" + +msgid "host groups" +msgstr "groupes d'hôtes" + +msgid "host groups to add" +msgstr "groupes d'hôtes à ajouter" + +msgid "host groups to remove" +msgstr "groupes d'hôtes à supprimer" + +msgid "host masks of allowed hosts" +msgstr "masques d'hôtes des hôtes autorisés" + +msgid "hostgroup" +msgstr "groupe d'hôtes" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"Un groupe d'hôtes nommé « %s » existe déjà. Les groupes d'hôtes et les " +"groupes réseau partagent le même espace de nommage" + +msgid "hostgroups" +msgstr "groupe d'hôtes" + +msgid "hostname" +msgstr "nom d'hôte" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "le nom d'hôte contient un libellé vide (plusieurs points consécutifs)" + +#, python-format +msgid "" +"hostname in subject of request '%(cn)s' does not match principal hostname " +"'%(hostname)s'" +msgstr "" +"Le nom d'hôte indiqué dans le sujet de la demande « %(cn)s » ne correspond " +"pas au nom d'hôte du principal « %(hostname)s »" + +msgid "hosts" +msgstr "hôtes" + +msgid "hosts cannot be added when host category='all'" +msgstr "" +"des hôtes ne peuvent pas être ajoutés quand la catégorie de l'hôte est " +"« all »" + +msgid "hosts cannot be set when type is 'group'" +msgstr "des hôtes ne peuvent pas être définis quand le type est « group »" + +msgid "hosts to add" +msgstr "hôtes à ajouter" + +msgid "hosts to remove" +msgstr "hôtes à supprimer" + +msgid "id range" +msgstr "plage id" + +msgid "id range type" +msgstr "type de plage d'id" + +msgid "incomplete time value" +msgstr "valeur de temps incomplète" + +msgid "incorrect type" +msgstr "type incorrect" + +msgid "integer to order the Sudo rules" +msgstr "entier pour ordonner les règles sudo" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "« %(name)s » invalide : %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "DN invalide (%s)" + +msgid "invalid IP address format" +msgstr "format d'adresse IP invalide" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "" +"version d'adresse IP invalide (est %(value)d, doit être %(required_value)d) !" + +msgid "invalid IP network format" +msgstr "format de réseau IP invalide" + +msgid "invalid Profile ID" +msgstr "Identifiant de profil invalide" + +msgid "invalid SSH public key" +msgstr "clé publique SSH invalide" + +msgid "invalid address format" +msgstr "format d'adresse invalide" + +msgid "invalid attribute name" +msgstr "nom d'attribut invalide" + +msgid "invalid domain name" +msgstr "nom de domaine invalide" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "nom de domaine invalide : %s" + +msgid "invalid domain-name: not fully qualified" +msgstr "nom de domaine invalide : doit être pleinement qualifié" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "format d'e-mail invalide : %(email)s" + +msgid "invalid escape code in domain name" +msgstr "code d'échappement invalide dans le nom du domaine" + +msgid "invalid hostmask" +msgstr "masque d'hôte invalide" + +msgid "invalid port number" +msgstr "numéro de port invalide" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "« ipa-getkeytab » a des permissions incorrectes ?\n" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "« ipa-getkeytab » introuvable\n" + +msgid "is required" +msgstr "est requis" + +msgid "iterations value: allowed interval 0-65535" +msgstr "valeur des itérations : intervalle autorisé 0-65535" + +msgid "kerberos ticket policy settings" +msgstr "réglages de la politique de tickets Kerberos" + +#, python-format +msgid "key %(key)s already exists" +msgstr "La clé %(key)s existe déjà" + +#, python-format +msgid "key named %(key)s already exists" +msgstr "la clé nommée %(key)s existe déjà" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "« krb5_kt_close » %1$d : %2$s\n" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "« krb5_kt_get_entry » %1$d : %2$s\n" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "« krb5_kt_remove_entry » %1$d : %2$s\n" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "« krb5_parse_name » %1$d : %2$s\n" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "« krb5_unparse_name » %1$d : %2$s\n" + +#, c-format +msgid "kvno %d\n" +msgstr "« kvno » %d\n" + +msgid "left node and right node must not be the same" +msgstr "les nœuds de gauche et de droite ne peuvent être identiques" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "le nœud de gauche n'est pas un nœud de la topologie : %(leftnode)s" + +msgid "left or right node has to be specified" +msgstr "le nœud de gauche ou de droite doit être indiqué" + +msgid "limits exceeded for this query" +msgstr "limites dépassées pour cette requête" + +msgid "local domain range" +msgstr "Plage pour domaine local" + +msgid "location" +msgstr "emplacement" + +msgid "locations" +msgstr "emplacements" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "responsable %(manager)s introuvable" + +#, python-format +msgid "map %(map)s already exists" +msgstr "La carte %(map)s existe déjà" + +msgid "maps not connected to /etc/auto.master:" +msgstr "cartes non connectées à « /etc/auto.master » :" + +msgid "match the common name exactly" +msgstr "correspond exactement au nom commun" + +msgid "maximum serial number" +msgstr "numéro de série plafond" + +#, python-format +msgid "member %s" +msgstr "%s membre" + +msgid "member HBAC service" +msgstr "Service HBAC membre" + +msgid "member HBAC service group" +msgstr "Groupe de services HBAC membre" + +msgid "member group" +msgstr "groupe membre" + +msgid "member host" +msgstr "hôte membre" + +msgid "member host group" +msgstr "groupe d'hôte membre" + +msgid "member netgroup" +msgstr "Groupe réseau membre" + +msgid "member sudo command" +msgstr "commande membre de règle sudo" + +msgid "minimum serial number" +msgstr "numéro de série plancher" + +msgid "missing base_id" +msgstr "« base_id » manquant" + +msgid "modifying primary key is not allowed" +msgstr "la modification de clé principale n'est pas autorisée" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" +"point de montage relatif à la carte parente, ne peut pas commencer par /" + +#, python-format +msgid "must be \"%s\"" +msgstr "doit être « %s »" + +#, python-format +msgid "must be '%(value)s'" +msgstr "doit être « %(value)s »" + +msgid "must be DNS name" +msgstr "doit être un nom de DNS" + +msgid "must be TRUE or FALSE" +msgstr "doit être « TRUE » ou « FALSE »" + +msgid "must be True or False" +msgstr "doit être « True » ou « False »" + +msgid "must be Unicode text" +msgstr "doit être un texte Unicode" + +msgid "must be a decimal number" +msgstr "doit être un nombre décimal" + +msgid "must be absolute" +msgstr "doit être absolu" + +msgid "must be an integer" +msgstr "doit être un nombre entier" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "doit être d'au moins %(minlength)d octets" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "doit être d'au moins %(minlength)d caractères" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "doit être supérieur ou égal à %(minvalue)d" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "doit valoir a minima %(minvalue)s" + +msgid "must be binary data" +msgstr "doivent être des données binaires" + +msgid "must be datetime value" +msgstr "doit être une valeur date/heure" + +msgid "must be dictionary" +msgstr "doit être un dictionnaire" + +msgid "must be enclosed in parentheses" +msgstr "doit être mis entre parenthèses" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "doit être d'exactement %(length)d octets" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "doit être d'exactement %(length)d caractères" + +#, python-format +msgid "must be one of %(values)s" +msgstr "doit être une valeur parmi %(values)s" + +msgid "must be relative" +msgstr "doit être relatif" + +msgid "must contain a tuple (list, dict)" +msgstr "doit contenir un tuple (liste, dict)" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "doit avoir le rôle %(role)s activé" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "doit correspondre au motif « %(pattern)s »" + +msgid "netgroup" +msgstr "groupe réseau" + +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"Un groupe réseau nommé « %s » existe déjà. Les groupes d'hôtes et les " +"groupes réseau partagent un même espace de noms." + +msgid "netgroups" +msgstr "groupes réseau" + +msgid "netgroups to add" +msgstr "Groupes réseau à ajouter" + +msgid "netgroups to remove" +msgstr "Groupes réseau à supprimer" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "pas de commande ou de sujet d'aide pour « %(topic)s »" + +msgid "no modifications to be performed" +msgstr "pas de modification à effectuer" + +msgid "no trusted domain is configured" +msgstr "pas de relation de confiance configurée" + +msgid "no trusted domain matched the specified flat name" +msgstr "aucun domaine approuvé ne correspond au nom simple indiqué" + +msgid "not allowed to modify group entries" +msgstr "modification des entrées de groupe interdite" + +msgid "not allowed to modify user entries" +msgstr "modification des entrées d'un utilisateur interdite" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "non autorisé à effectuer l'opération : %s" + +msgid "not allowed to perform server connection check" +msgstr "impossible d'effectuer la vérification de la connexion au serveur" + +msgid "not found" +msgstr "introuvable" + +msgid "not fully qualified" +msgstr "pas pleinement qualifié" + +msgid "not modifiable on managed permissions" +msgstr "non modifiable sur les permissions administrées" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "" +"La classe de nombres « %(cls)s » n'est pas dans la liste des classes de " +"nombres autorisées : %(allowed)s" + +msgid "number of passwords" +msgstr "nombre de mots de passe" + +#, python-format +msgid "objectclass %s not found" +msgstr "classe d'objet %s introuvable" + +msgid "one or more values to remove" +msgstr "une ou plusieurs valeurs à supprimer" + +msgid "only \"ad\" is supported" +msgstr "seul « ad » est pris en charge" + +msgid "only available on managed permissions" +msgstr "uniquement disponible sur les permissions administrées" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" +"uniquement lettres, nombres, %(chars)s sont autorisés. Les noms DNS ne " +"peuvent commencer ou se terminer par %(chars2)s" + +msgid "only master zones can contain records" +msgstr "seules les zones maître peuvent contenir des enregistrements" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" +"seul un unique enregistrement CNAME est autorisé par nom (RFC 2136, section " +"1.1.5)" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" +"un seul enregistrement DNAME est autorisé par nom (RFC 6672, section 2.4)" + +msgid "only one node can be specified" +msgstr "seul un nœud peut être indiqué" + +msgid "operation not defined" +msgstr "opération non définie" + +#, python-format +msgid "option was renamed; use %s" +msgstr "option renommée ; utiliser %s" + +msgid "options are not allowed" +msgstr "les options ne sont pas autorisées" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "" +"le rang doit être une valeur unique (%(order)d déjà utilisée par %(rule)s)" + +#, c-format +msgid "out of memory\n" +msgstr "mémoire saturée\n" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" +"donnée hors zone : le nom de l'enregistrement doit être un sous-domaine de " +"la zone ou un nom relatif" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "les arguments et options se chevauchent : %(names)s" + +#, python-format +msgid "owner %s" +msgstr "propriétaire %s" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "" +"le propriétaire des enregistrements %(types)s ne doit pas être un nom de " +"domaine comportant des jokers (RFC 4592 section 4)" + +msgid "params must be a list" +msgstr "« params » doit être une liste" + +msgid "params must contain [args, options]" +msgstr "« params » doit contenir [args, options]" + +msgid "params[0] (aka args) must be a list" +msgstr "« params[0] » (alias « args ») doit être une liste" + +msgid "params[1] (aka options) must be a dict" +msgstr "« params[1] » (alias « options ») doit être un dictionnaire " + +msgid "password" +msgstr "mot de passe" + +msgid "password policies" +msgstr "politiques de mot de passe" + +msgid "password policy" +msgstr "politique de mots de passe" + +msgid "password to use if not using kerberos" +msgstr "" +"mot de passe à utiliser pour la connexion en cas de non-utilisation de " +"Kerberos" + +msgid "permission" +msgstr "permission" + +#, python-format +msgid "permission \"%(value)s\" already exists" +msgstr "la permisison « %(value)s » existe déjà" + +msgid "permissions" +msgstr "permissions" + +msgid "pkinit" +msgstr "« pkinit »" + +msgid "preserve" +msgstr "préserver" + +msgid "preserve and no-preserve cannot be both set" +msgstr "preserve et no-preserve ne peuvent être indiqués simultanément" + +#, c-format +msgid "principal not found\n" +msgstr "principal introuvable\n" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "principal introuvable dans la réponse XML-RPC\n" + +msgid "priority cannot be set on global policy" +msgstr "la priorité ne peut être définie sur la politique globale" + +#, python-format +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "" +"la priorité doit être une valeur unique (%(prio)d est déjà utilisé par " +"%(gname)s)" + +msgid "privilege" +msgstr "privilège" + +msgid "privileged group" +msgstr "groupe avec privilèges" + +msgid "privileged hostgroup" +msgstr "groupe d'hôtes privilégiés" + +msgid "privileged service delegation rule" +msgstr "règle de délégation de service privilégié" + +msgid "privileged service delegation target" +msgstr "cible de délégation de service privilégiée" + +msgid "privileges" +msgstr "privilèges" + +msgid "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "" +"la catégorie de profil ne peut être positionnée à 'all' tant qu'il existe " +"des profils autorisés" + +msgid "profiles cannot be added when profile category='all'" +msgstr "" +"des profils ne peuvent pas être ajoutés quand la catégorie de profil est " +"« all »" + +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "" +"« pysss_murmur » non disponible sur le serveur et aucun « base-id » fourni." + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "requête « %(owner)s %(rtype)s » avec EDNS0: %(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "requête « %(owner)s %(rtype)s » : %(error)s" + +msgid "range exists" +msgstr "la plage existe" + +msgid "" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "" +"une modification de plage laissant des objets avec un ID en dehors de la " +"plage définie n'est pas autorisée" + +msgid "range type change" +msgstr "modifier le type de plage" + +#, c-format +msgid "read error\n" +msgstr "erreur en lecture\n" + +#, c-format +msgid "realm not found\n" +msgstr "domaine introuvable\n" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" +"la validation DNSSEC de l'enregistrement « %(owner)s %(rtype)s » a échoué " +"sur le serveur %(ip)s" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "échec de la requête avec le code état HTTP %d" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "résultat de la réponse XML-RPC introuvable\n" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "" +"récupère et affiche tous les attributs du serveur. Modifie la sortie de la " +"commande." + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "le nœud de droite n'est pas un nœud de la topologie : %(rightnode)s" + +msgid "role" +msgstr "rôle" + +msgid "roles" +msgstr "rôles" + +msgid "roles to remove" +msgstr "rôles à supprimer" + +msgid "runAs groups" +msgstr "groupes runAs" + +msgid "runAs user" +msgstr "utilisateur runAs" + +msgid "runAs users" +msgstr "utilisateurs runAs" + +#, python-format +msgid "salt value: %(err)s" +msgstr "valeur « salt » : %(err)s" + +msgid "search for POSIX groups" +msgstr "rechercher des groupes POSIX" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" +"rechercher des groupes autorisant la prise en charge des membres externes " +"non-IPA depuis les domaines approuvés" + +msgid "search for managed groups" +msgstr "rechercher les groupes administrés" + +msgid "search for non-POSIX groups" +msgstr "rechercher des groupes non-POSIX" + +msgid "search for private groups" +msgstr "rechercher des groupes privés" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" +"les résultats des recherches sur les objets\n" +"à migrer ont été tronquées par le serveur ;\n" +"le processus de migration peut être incomplet\n" + +msgid "seconds" +msgstr "secondes" + +msgid "segment" +msgstr "segment" + +msgid "segments" +msgstr "segments" + +msgid "self service permission" +msgstr "permission de libre service" + +msgid "self service permissions" +msgstr "permissions de libre service" + +msgid "server" +msgstr "serveur" + +msgid "server role" +msgstr "rôle serveur" + +msgid "server roles" +msgstr "rôles serveur" + +msgid "servers" +msgstr "serveurs" + +msgid "service" +msgstr "service" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" +"une catégorie de services ne peut pas être définie à « all » tant qu'il " +"reste des services autorisés" + +msgid "service delegation rule" +msgstr "règle de délégation de service" + +msgid "service delegation rules" +msgstr "règles de délégation de service" + +msgid "service delegation target" +msgstr "cible de délégation de service" + +msgid "service delegation targets" +msgstr "cibles de délégation de service" + +msgid "services" +msgstr "services" + +msgid "services cannot be added when service category='all'" +msgstr "" +"aucun service ne peut être ajouté quand la catégorie de services est « all »" + +msgid "setting Authoritative nameserver" +msgstr "configuration du serveur de nom ayant autorité" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "ne doit pas être un nom de domaine avec joker (RFC 4592 section 4)" + +msgid "sidgen_was_run" +msgstr "« sidgen_was_run »" + +msgid "skip reverse DNS detection" +msgstr "sauter la détection du DNS inverse" + +msgid "sn is required" +msgstr "sn est requis" + +msgid "stage user" +msgstr "utilis" + +msgid "stage users" +msgstr "utilisateurs en attente" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" +"Il est interdit d'utiliser un « subject alt name » (nom alternatif) de type " +"%s pour les principaux autres qu'utilisateurs." + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" +"Il est interdit d'utiliser un « subject alt name » (nom alternatif) de type " +"%s pour les principaux d'utilisateurs." + +msgid "subtree and type are mutually exclusive" +msgstr "« subtree » et « type » s'excluent mutuellement" + +msgid "sudo command" +msgstr "commande sudo" + +msgid "sudo command group" +msgstr "groupe de commandes sudo" + +msgid "sudo command groups" +msgstr "groupes de commandes sudo" + +msgid "sudo commands" +msgstr "commandes sudo" + +msgid "sudo commands to add" +msgstr "commandes sudo à ajouter" + +msgid "sudo commands to remove" +msgstr "commandes sudo à supprimer" + +msgid "sudo rule" +msgstr "règle sudo" + +msgid "sudo rules" +msgstr "règles sudo" + +msgid "suffix" +msgstr "suffixe" + +msgid "suffixes" +msgstr "suffixes" + +msgid "system ID View" +msgstr "Vue d'identifiants du système" + +msgid "target and targetgroup are mutually exclusive" +msgstr "« target » et « targetgroup » s'excluent mutuellement" + +#, python-format +msgid "" +"the IPA server and the remote domain cannot share the same NetBIOS name: %s" +msgstr "" +"le serveur IPA et le domaine distant ne peuvent partager le même nom " +"NetBIOS : %s" + +msgid "the certificate with serial number " +msgstr "le certificat ayant le numéro de série " + +msgid "the entry was deleted while being modified" +msgstr "cette entrée a été supprimée pendant sa modification" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "la valeur ne suit pas le format d'horodatage « YYYYMMDDHHMMSS »" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" +"il doit y avoir au moins une définition d'entrée cible (ex. « target », " +"« targetfilter », « attrs »)" + +msgid "this option has been deprecated." +msgstr "cette option a été abandonnée." + +msgid "this option is deprecated" +msgstr "cette option est obsolète" + +msgid "too many '@' characters" +msgstr "trop de caractères « @ »" + +msgid "trust" +msgstr "confiance" + +msgid "trust configuration" +msgstr "configuration des relations d'approbation" + +msgid "trust domain" +msgstr "domaine approuvé" + +msgid "trust domains" +msgstr "domaines approuvés" + +msgid "trust type" +msgstr "type de confiance" + +msgid "trusted domain object" +msgstr "objet domaine approuvé" + +msgid "trusted domain object not found" +msgstr "objet relation de confiance introuvable" + +msgid "trusted domain user not found" +msgstr "utilisateur de domaine approuvé introuvable" + +msgid "trusts" +msgstr "confiances" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "" +"type d'objet IPA (« user », « group », « host », « hostgroup », « service », " +"« netgroup »)" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "" +"« type », « filter », « subtree » et « targetgroup » s'excluent mutuellement" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "commande « %(name)s » inconnue" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "Erreur %(code)d inconnue renvoyée par %(server)s : %(error)s" + +msgid "unsupported functional level" +msgstr "niveau de fonctionnalité non pris en charge" + +msgid "unsupported trust type" +msgstr "type de relation de confiance non pris en charge" + +msgid "user" +msgstr "utilisateur" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "l'utilisateur « %s » est déjà actif" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" +"une catégorie d'utilisateurs ne peut pas être définie à « all » tant qu'il " +"reste des utilisateurs autorisés" + +msgid "users" +msgstr "utilisateurs" + +msgid "users and hosts cannot both be set" +msgstr "impossible de définir à la fois des utilisateurs et des hôtes" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" +"des utilisateurs ne peuvent pas être ajoutés quand la catégorie « RunAs " +"User » ou « RunAs Group » est « all »" + +msgid "users cannot be added when user category='all'" +msgstr "" +"des utilisateurs ne peuvent pas être ajoutés quand la catégorie de " +"l'utilisateur est « all »" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "impossible de définir des utilisateurs quand le type est « hostgroup »" + +msgid "users to exclude from migration" +msgstr "utilisateurs à exclure de la migration" + +msgid "users to remove" +msgstr "utilisateurs à supprimer" + +msgid "value" +msgstr "valeur" + +msgid "vault" +msgstr "coffre-fort" + +msgid "vaultcontainer" +msgstr "vaultcontainer" + +msgid "vaultcontainers" +msgstr "vaultcontainers" + +msgid "vaults" +msgstr "coffres-forts" + +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "{attr} : attribut introuvable" + +#, python-brace-format +msgid "{role}: role not found" +msgstr "{role} : rôle introuvable" #~ msgid "" #~ "\n" @@ -30367,6 +18066,10 @@ msgstr "Impossible d'initialiser la bibliothèque LDAP !\n" #~ msgid "Delete a CA." #~ msgstr "Supprimer une AC." +#~ msgid "Maximum password life must be greater than minimum." +#~ msgstr "" +#~ "La durée de vie maximale du mot de passe doit être supérieure au minimum." + #~ msgid "" #~ "Reverse zone for PTR record should be a sub-zone of one the following " #~ "fully qualified domains: %s" diff --git a/po/hi.po b/po/hi.po index f25be2f58..21f3eac63 100644 --- a/po/hi.po +++ b/po/hi.po @@ -18,23886 +18,61 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, c-format -msgid "out of memory\n" -msgstr "" - -#, c-format -msgid "read error\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, c-format -msgid "Out of memory \n" -msgstr "" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -msgid "SASL Bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Out of Memory!\n" -msgstr "" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "पासवर्ड मेल नहीं खाते" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Output debug info" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -msgid "Server Name" -msgstr "" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -msgid "LDAP password" -msgstr "" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -msgid "Path to the IPA CA certificate" -msgstr "" - -msgid "IPA CA certificate" -msgstr "" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -msgid "Enter LDAP password" -msgstr "" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" - -#, c-format -msgid "Discovered server %s\n" -msgstr "" - -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Using provided server %s\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -msgid "New Principal Password" -msgstr "" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Out of memory!\n" -msgstr "" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "" - -#, c-format -msgid "Out of memory!" -msgstr "" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "" - -#, c-format -msgid "No values for %s" -msgstr "" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Host is already joined.\n" -msgstr "" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" - -#, c-format -msgid "json_dumps() failed\n" -msgstr "" - -#, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "" - -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" - -#, c-format -msgid "fork() failed\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "" - -#, c-format -msgid "child exited with %d\n" -msgstr "" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "" - -#, fuzzy, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "कर्बेरॉस क्रेडेंशियल्स प्राप्त नहीं हुआ" - -#, fuzzy, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "क्रेडेंशियल्स कैश में बुरा प्रारूप" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "" - -msgid "Quiet mode. Only errors are displayed." -msgstr "" - -msgid "Unenroll this host from IPA server" -msgstr "" - -msgid "Hostname of this server" -msgstr "" - -msgid "hostname" -msgstr "" - -msgid "IPA Server to use" -msgstr "" - -msgid "Specifies where to store keytab information." -msgstr "" - -msgid "filename" -msgstr "" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" - -msgid "LDAP password (if not using Kerberos)" -msgstr "" - -msgid "password" -msgstr "" - -msgid "LDAP basedn" -msgstr "" - -msgid "basedn" -msgstr "" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "" - -msgid "Failed to add" -msgstr "" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" - -msgid "Unrevoked" -msgstr "" - -msgid "Error" -msgstr "" - -msgid "Input filename" -msgstr "" - -msgid "File to load the certificate from." -msgstr "" - -msgid "cannot specify both raw certificate and file" -msgstr "" - -msgid "Input file" -msgstr "" - -msgid "File to load the certificate from" -msgstr "" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "" - -msgid "Split DNS record to parts" -msgstr "" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" - -msgid "DNS resource record type" -msgstr "" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" - -msgid "No option to modify specific record provided." -msgstr "" - -msgid "Current DNS record contents:\n" -msgstr "" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -msgid "No option to delete specific record provided." -msgstr "" - -msgid "Delete all?" -msgstr "" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "" - -msgid "Server will check DNS forwarder(s)." -msgstr "" - -msgid "This may take some time, please wait ..." -msgstr "" - -msgid "DNS forwarder" -msgstr "" - -msgid "file to store DNS records in nsupdate format" -msgstr "" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -msgid "Delete a user" -msgstr "" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - -msgid "maps not connected to /etc/auto.master:" -msgstr "" - -msgid "Import automount files for a specific location." -msgstr "" - -msgid "Master file" -msgstr "" - -msgid "Automount master file." -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" - -#, python-format -msgid "File %(file)s not found" -msgstr "" - -#, python-format -msgid "key %(key)s already exists" -msgstr "" - -#, python-format -msgid "map %(map)s already exists" -msgstr "" - -msgid "Imported maps:" -msgstr "" - -#, python-format -msgid "Added %(map)s" -msgstr "" - -msgid "Imported keys:" -msgstr "" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "" - -msgid "Ignored keys:" -msgstr "" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "" - -msgid "Duplicate maps skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(map)s" -msgstr "" - -msgid "Duplicate keys skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(key)s" -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -msgid "User ID" -msgstr "" - -msgid "Password" -msgstr "" - -msgid "First Code" -msgstr "" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "" - -msgid "Invalid credentials" -msgstr "" - -msgid "Create a new vault." -msgstr "" - -msgid "Vault password" -msgstr "" - -msgid "File containing the vault password" -msgstr "" - -msgid "File containing the vault public key" -msgstr "" - -msgid "Password can be specified only for symmetric vault" -msgstr "" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "" - -msgid "Password specified multiple times" -msgstr "" - -msgid "Public key specified multiple times" -msgstr "" - -msgid "Missing vault public key" -msgstr "" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "" - -msgid "Modify a vault." -msgstr "" - -msgid "Change password" -msgstr "" - -msgid "Old vault password" -msgstr "" - -msgid "File containing the old vault password" -msgstr "" - -msgid "New vault password" -msgstr "" - -msgid "File containing the new vault password" -msgstr "" - -msgid "Old vault private key" -msgstr "" - -msgid "File containing the old vault private key" -msgstr "" - -msgid "File containing the new vault public key" -msgstr "" - -msgid "New public key specified multiple times" -msgstr "" - -msgid "Missing new vault public key" -msgstr "" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "" - -msgid "Binary data to archive" -msgstr "" - -msgid "File containing data to archive" -msgstr "" - -msgid "Override existing password" -msgstr "" - -msgid "Input data specified multiple times" -msgstr "" - -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" - -msgid "Invalid vault type" -msgstr "" - -msgid "Retrieve a data from a vault." -msgstr "" - -msgid "File to store retrieved data" -msgstr "" - -msgid "Vault private key" -msgstr "" - -msgid "File containing the vault private key" -msgstr "" - -msgid "Data" -msgstr "" - -msgid "Private key specified multiple times" -msgstr "" - -msgid "Missing vault private key" -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "ACI name" -msgstr "" - -msgid "Permission" -msgstr "" - -msgid "Permission ACI grants access to" -msgstr "" - -msgid "User group" -msgstr "" - -msgid "User group ACI grants access to" -msgstr "" - -msgid "Permissions" -msgstr "" - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Attributes to which the permission applies" -msgstr "" - -msgid "Attributes" -msgstr "" - -msgid "Type" -msgstr "" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" - -msgid "Member of" -msgstr "" - -msgid "Member of a group" -msgstr "" - -msgid "Filter" -msgstr "" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "" - -msgid "Subtree" -msgstr "" - -msgid "Subtree to apply ACI to" -msgstr "" - -msgid "Target group" -msgstr "" - -msgid "Group to apply ACI to" -msgstr "" - -msgid "Target your own entry (self)" -msgstr "" - -msgid "Apply ACI to your own entry (self)" -msgstr "" - -msgid "Create new ACI." -msgstr "" - -msgid "ACI prefix" -msgstr "" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" - -msgid "Test the ACI syntax but don't write anything" -msgstr "" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" - -msgid "User-friendly description of action performed" -msgstr "" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" - -msgid "Delete ACI." -msgstr "" - -msgid "True means the operation was successful" -msgstr "" - -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" - -msgid "A string searched in all relevant object attributes" -msgstr "" - -msgid "Primary key only" -msgstr "" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" - -msgid "Number of entries returned" -msgstr "" - -msgid "True if not all results were returned" -msgstr "" - -msgid "Modify ACI." -msgstr "" - -msgid "Rename an ACI." -msgstr "" - -msgid "New ACI name" -msgstr "" - -msgid "Display a single ACI given an ACI name." -msgstr "" - -msgid "Location of the ACI" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Description" -msgstr "" - -msgid "A description of this auto member rule" -msgstr "" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "List of deletions that failed" -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Users" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Hosts" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" - -msgid "Key" -msgstr "" - -msgid "Automount key name." -msgstr "" - -msgid "Mount information" -msgstr "" - -msgid "description" -msgstr "" - -msgid "Location" -msgstr "" - -msgid "Automount location name." -msgstr "" - -msgid "Map" -msgstr "" - -msgid "Automount map name." -msgstr "" - -msgid "Create a new automount key." -msgstr "" - -msgid "Delete an automount key." -msgstr "" - -msgid "Continuous mode: Don't stop on errors." -msgstr "" - -msgid "Search for an automount key." -msgstr "" - -msgid "Time Limit" -msgstr "" - -msgid "Time limit of search in seconds" -msgstr "" - -msgid "Size Limit" -msgstr "" - -msgid "Maximum number of entries returned" -msgstr "" - -msgid "Modify an automount key." -msgstr "" - -msgid "New mount information" -msgstr "" - -msgid "Rename" -msgstr "" - -msgid "Rename the automount key object" -msgstr "" - -msgid "Display an automount key." -msgstr "" - -msgid "Create a new automount location." -msgstr "" - -msgid "Delete an automount location." -msgstr "" - -msgid "Search for an automount location." -msgstr "" - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" - -msgid "Display an automount location." -msgstr "" - -msgid "Generate automount files for a specific location." -msgstr "" - -msgid "Create a new automount map." -msgstr "" - -msgid "Create a new indirect mount point." -msgstr "" - -msgid "Mount point" -msgstr "" - -msgid "Parent map" -msgstr "" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" - -msgid "Delete an automount map." -msgstr "" - -msgid "Search for an automount map." -msgstr "" - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" - -msgid "Modify an automount map." -msgstr "" - -msgid "Display an automount map." -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" - -msgid "Nested Methods to execute" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason" -msgstr "" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -msgid "minimum serial number" -msgstr "" - -msgid "maximum serial number" -msgstr "" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Principal" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Dictionary mapping variable name to value" -msgstr "" - -msgid "Revoke a certificate." -msgstr "" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "Maximum username length" -msgstr "" - -msgid "Home directory base" -msgstr "" - -msgid "Default location of home directories" -msgstr "" - -msgid "Default shell" -msgstr "" - -msgid "Default shell for new users" -msgstr "" - -msgid "Default users group" -msgstr "" - -msgid "Default group for new users" -msgstr "" - -msgid "Default e-mail domain" -msgstr "" - -msgid "Search time limit" -msgstr "" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" - -msgid "Search size limit" -msgstr "" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "" - -msgid "User search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" - -msgid "Group search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" - -msgid "Enable migration mode" -msgstr "" - -msgid "Certificate Subject base" -msgstr "" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "" - -msgid "Default group objectclasses" -msgstr "" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "" - -msgid "Default user objectclasses" -msgstr "" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" - -msgid "Password Expiration Notification (days)" -msgstr "" - -msgid "Number of days's notice of impending password expiration" -msgstr "" - -msgid "Password plugin features" -msgstr "" - -msgid "Extra hashes to generate in password plug-in" -msgstr "" - -msgid "SELinux user map order" -msgstr "" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" - -msgid "Default SELinux user" -msgstr "" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" - -msgid "Default PAC types" -msgstr "" - -msgid "Default types of PAC supported for services" -msgstr "" - -msgid "Default user authentication types" -msgstr "" - -msgid "Default types of supported user authentication" -msgstr "" - -msgid "Modify configuration options." -msgstr "" - -msgid "Show the current configuration." -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "Delegation name" -msgstr "" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "" - -msgid "Attributes to which the delegation applies" -msgstr "" - -msgid "Member user group" -msgstr "" - -msgid "User group to apply delegation to" -msgstr "" - -msgid "Add a new delegation." -msgstr "" - -msgid "Delete a delegation." -msgstr "" - -msgid "Search for delegations." -msgstr "" - -msgid "Modify a delegation." -msgstr "" - -msgid "Display information about a delegation." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "Global forwarders" -msgstr "" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Forward policy" -msgstr "" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" - -msgid "Allow PTR sync" -msgstr "" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" - -msgid "Zone refresh interval" -msgstr "" - -msgid "Zone name" -msgstr "" - -msgid "Zone name (FQDN)" -msgstr "" - -msgid "Reverse zone IP network" -msgstr "" - -msgid "IP network to create reverse zone name from" -msgstr "" - -msgid "Active zone" -msgstr "" - -msgid "Is zone active?" -msgstr "" - -msgid "Zone forwarders" -msgstr "" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "Record name" -msgstr "" - -msgid "Time to live" -msgstr "" - -msgid "Records" -msgstr "" - -#, fuzzy -msgid "Record type" -msgstr "गलत प्रकार" - -msgid "Record data" -msgstr "" - -msgid "A record" -msgstr "" - -msgid "Raw A records" -msgstr "" - -msgid "A IP Address" -msgstr "" - -msgid "IP Address" -msgstr "" - -msgid "A Create reverse" -msgstr "" - -msgid "Create reverse record for this IP Address" -msgstr "" - -msgid "AAAA record" -msgstr "" - -msgid "Raw AAAA records" -msgstr "" - -msgid "AAAA IP Address" -msgstr "" - -msgid "AAAA Create reverse" -msgstr "" - -msgid "A6 record" -msgstr "" - -msgid "Raw A6 records" -msgstr "" - -msgid "A6 Record data" -msgstr "" - -msgid "AFSDB record" -msgstr "" - -msgid "Raw AFSDB records" -msgstr "" - -msgid "AFSDB Subtype" -msgstr "" - -msgid "Subtype" -msgstr "" - -msgid "AFSDB Hostname" -msgstr "" - -msgid "Hostname" -msgstr "" - -msgid "APL record" -msgstr "" - -msgid "Raw APL records" -msgstr "" - -msgid "CERT record" -msgstr "" - -msgid "Raw CERT records" -msgstr "" - -msgid "CERT Certificate Type" -msgstr "" - -msgid "Certificate Type" -msgstr "" - -msgid "CERT Key Tag" -msgstr "" - -msgid "Key Tag" -msgstr "" - -msgid "CERT Algorithm" -msgstr "" - -msgid "Algorithm" -msgstr "" - -msgid "CERT Certificate/CRL" -msgstr "" - -msgid "Certificate/CRL" -msgstr "" - -msgid "CNAME record" -msgstr "" - -msgid "Raw CNAME records" -msgstr "" - -msgid "CNAME Hostname" -msgstr "" - -msgid "A hostname which this alias hostname points to" -msgstr "" - -msgid "DHCID record" -msgstr "" - -msgid "Raw DHCID records" -msgstr "" - -msgid "DLV record" -msgstr "" - -msgid "Raw DLV records" -msgstr "" - -msgid "DLV Key Tag" -msgstr "" - -msgid "DLV Algorithm" -msgstr "" - -msgid "DLV Digest Type" -msgstr "" - -msgid "Digest Type" -msgstr "" - -msgid "DLV Digest" -msgstr "" - -msgid "Digest" -msgstr "" - -msgid "DNAME record" -msgstr "" - -msgid "Raw DNAME records" -msgstr "" - -msgid "DNAME Target" -msgstr "" - -msgid "Target" -msgstr "" - -msgid "DNSKEY record" -msgstr "" - -msgid "Raw DNSKEY records" -msgstr "" - -msgid "DS record" -msgstr "" - -msgid "Raw DS records" -msgstr "" - -msgid "DS Key Tag" -msgstr "" - -msgid "DS Algorithm" -msgstr "" - -msgid "DS Digest Type" -msgstr "" - -msgid "DS Digest" -msgstr "" - -msgid "HIP record" -msgstr "" - -msgid "Raw HIP records" -msgstr "" - -msgid "IPSECKEY record" -msgstr "" - -msgid "Raw IPSECKEY records" -msgstr "" - -msgid "KEY record" -msgstr "" - -msgid "Raw KEY records" -msgstr "" - -msgid "KX record" -msgstr "" - -msgid "Raw KX records" -msgstr "" - -msgid "KX Preference" -msgstr "" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" - -msgid "KX Exchanger" -msgstr "" - -msgid "A host willing to act as a key exchanger" -msgstr "" - -msgid "LOC record" -msgstr "" - -msgid "Raw LOC records" -msgstr "" - -msgid "LOC Degrees Latitude" -msgstr "" - -msgid "Degrees Latitude" -msgstr "" - -msgid "LOC Minutes Latitude" -msgstr "" - -msgid "Minutes Latitude" -msgstr "" - -msgid "LOC Seconds Latitude" -msgstr "" - -msgid "Seconds Latitude" -msgstr "" - -msgid "LOC Direction Latitude" -msgstr "" - -msgid "Direction Latitude" -msgstr "" - -msgid "LOC Degrees Longitude" -msgstr "" - -msgid "Degrees Longitude" -msgstr "" - -msgid "LOC Minutes Longitude" -msgstr "" - -msgid "Minutes Longitude" -msgstr "" - -msgid "LOC Seconds Longitude" -msgstr "" - -msgid "Seconds Longitude" -msgstr "" - -msgid "LOC Direction Longitude" -msgstr "" - -msgid "Direction Longitude" -msgstr "" - -msgid "LOC Altitude" -msgstr "" - -msgid "Altitude" -msgstr "" - -msgid "LOC Size" -msgstr "" - -msgid "Size" -msgstr "" - -msgid "LOC Horizontal Precision" -msgstr "" - -msgid "Horizontal Precision" -msgstr "" - -msgid "LOC Vertical Precision" -msgstr "" - -msgid "Vertical Precision" -msgstr "" - -msgid "MX record" -msgstr "" - -msgid "Raw MX records" -msgstr "" - -msgid "MX Preference" -msgstr "" - -msgid "MX Exchanger" -msgstr "" - -msgid "A host willing to act as a mail exchanger" -msgstr "" - -msgid "NAPTR record" -msgstr "" - -msgid "Raw NAPTR records" -msgstr "" - -msgid "NAPTR Order" -msgstr "" - -msgid "Order" -msgstr "" - -msgid "NAPTR Preference" -msgstr "" - -msgid "Preference" -msgstr "" - -msgid "NAPTR Flags" -msgstr "" - -msgid "Flags" -msgstr "" - -msgid "NAPTR Service" -msgstr "" - -msgid "Service" -msgstr "" - -msgid "NAPTR Regular Expression" -msgstr "" - -msgid "Regular Expression" -msgstr "" - -msgid "NAPTR Replacement" -msgstr "" - -msgid "Replacement" -msgstr "" - -msgid "NS record" -msgstr "" - -msgid "Raw NS records" -msgstr "" - -msgid "NS Hostname" -msgstr "" - -msgid "NSEC record" -msgstr "" - -msgid "Raw NSEC records" -msgstr "" - -msgid "NSEC3 record" -msgstr "" - -msgid "Raw NSEC3 records" -msgstr "" - -msgid "PTR record" -msgstr "" - -msgid "Raw PTR records" -msgstr "" - -msgid "PTR Hostname" -msgstr "" - -msgid "The hostname this reverse record points to" -msgstr "" - -msgid "RRSIG record" -msgstr "" - -msgid "Raw RRSIG records" -msgstr "" - -msgid "RP record" -msgstr "" - -msgid "Raw RP records" -msgstr "" - -msgid "SIG record" -msgstr "" - -msgid "Raw SIG records" -msgstr "" - -msgid "SPF record" -msgstr "" - -msgid "Raw SPF records" -msgstr "" - -msgid "SRV record" -msgstr "" - -msgid "Raw SRV records" -msgstr "" - -msgid "SRV Priority" -msgstr "" - -msgid "Priority" -msgstr "" - -msgid "SRV Weight" -msgstr "" - -msgid "Weight" -msgstr "" - -msgid "SRV Port" -msgstr "" - -msgid "Port" -msgstr "" - -msgid "SRV Target" -msgstr "" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" - -msgid "SSHFP record" -msgstr "" - -msgid "Raw SSHFP records" -msgstr "" - -msgid "SSHFP Algorithm" -msgstr "" - -msgid "SSHFP Fingerprint Type" -msgstr "" - -msgid "Fingerprint Type" -msgstr "" - -msgid "SSHFP Fingerprint" -msgstr "" - -msgid "Fingerprint" -msgstr "" - -msgid "TA record" -msgstr "" - -msgid "Raw TA records" -msgstr "" - -msgid "TLSA record" -msgstr "" - -msgid "Raw TLSA records" -msgstr "" - -msgid "TLSA Certificate Usage" -msgstr "" - -msgid "Certificate Usage" -msgstr "" - -msgid "TLSA Selector" -msgstr "" - -msgid "Selector" -msgstr "" - -msgid "TLSA Matching Type" -msgstr "" - -msgid "Matching Type" -msgstr "" - -msgid "TLSA Certificate Association Data" -msgstr "" - -msgid "Certificate Association Data" -msgstr "" - -msgid "TKEY record" -msgstr "" - -msgid "Raw TKEY records" -msgstr "" - -msgid "TSIG record" -msgstr "" - -msgid "Raw TSIG records" -msgstr "" - -msgid "TXT record" -msgstr "" - -msgid "Raw TXT records" -msgstr "" - -msgid "TXT Text Data" -msgstr "" - -msgid "Text Data" -msgstr "" - -msgid "Authoritative nameserver" -msgstr "" - -msgid "Authoritative nameserver domain name" -msgstr "" - -msgid "Administrator e-mail address" -msgstr "" - -msgid "SOA serial" -msgstr "" - -msgid "SOA record serial number" -msgstr "" - -msgid "SOA refresh" -msgstr "" - -msgid "SOA record refresh time" -msgstr "" - -msgid "SOA retry" -msgstr "" - -msgid "SOA record retry time" -msgstr "" - -msgid "SOA expire" -msgstr "" - -msgid "SOA record expire time" -msgstr "" - -msgid "SOA minimum" -msgstr "" - -msgid "How long should negative responses be cached" -msgstr "" - -msgid "Time to live for records at zone apex" -msgstr "" - -msgid "BIND update policy" -msgstr "" - -msgid "Dynamic update" -msgstr "" - -msgid "Allow dynamic updates." -msgstr "" - -msgid "Allow query" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" - -msgid "Allow transfer" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" - -msgid "Allow in-line DNSSEC signing" -msgstr "" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "" - -msgid "NSEC3PARAM record" -msgstr "" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" - -msgid "Resolve a host name in DNS." -msgstr "" - -msgid "Modify global DNS configuration." -msgstr "" - -msgid "Show the current global DNS configuration." -msgstr "" - -msgid "Create new DNS forward zone." -msgstr "" - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" - -msgid "Permission value" -msgstr "" - -msgid "Delete DNS forward zone." -msgstr "" - -msgid "Disable DNS Forward Zone." -msgstr "" - -msgid "Enable DNS Forward Zone." -msgstr "" - -msgid "Search for DNS forward zones." -msgstr "" - -msgid "Modify DNS forward zone." -msgstr "" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" - -msgid "Display information about a DNS forward zone." -msgstr "" - -msgid "Add new DNS resource record." -msgstr "" - -msgid "Force" -msgstr "" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "" - -msgid "Structured" -msgstr "" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" - -msgid "Delete DNS resource record." -msgstr "" - -msgid "Delete all associated records" -msgstr "" - -msgid "Delete DNS record entry." -msgstr "" - -msgid "Search for DNS resources." -msgstr "" - -msgid "Modify a DNS resource record." -msgstr "" - -msgid "Rename the DNS resource record object" -msgstr "" - -msgid "Display DNS resource." -msgstr "" - -msgid "Create new DNS zone (SOA record)." -msgstr "" - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" - -msgid "Add a permission for per-zone access delegation." -msgstr "" - -msgid "Delete DNS zone (SOA record)." -msgstr "" - -msgid "Disable DNS Zone." -msgstr "" - -msgid "Enable DNS Zone." -msgstr "" - -msgid "Search for DNS zones (SOA records)." -msgstr "" - -msgid "Forward zones only" -msgstr "" - -msgid "Search for forward zones only" -msgstr "" - -msgid "Modify DNS zone (SOA record)." -msgstr "" - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" - -msgid "Remove a permission for per-zone access delegation." -msgstr "" - -msgid "Display information about a DNS zone (SOA record)." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "Group name" -msgstr "" - -msgid "Group description" -msgstr "" - -msgid "GID" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Member users" -msgstr "" - -msgid "Member groups" -msgstr "" - -msgid "Member of groups" -msgstr "" - -msgid "Roles" -msgstr "" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Suppress processing of membership attributes." -msgstr "" - -msgid "Add members to a group." -msgstr "" - -msgid "External member" -msgstr "" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -msgid "member group" -msgstr "" - -msgid "groups to add" -msgstr "" - -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - -msgid "Delete group." -msgstr "" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "user" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "group" -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "netgroup" -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "role" -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "HBAC rule" -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "sudo rule" -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Rule name" -msgstr "" - -msgid "Rule type" -msgstr "" - -msgid "Rule type (allow)" -msgstr "" - -msgid "User category" -msgstr "" - -msgid "User category the rule applies to" -msgstr "" - -msgid "Host category" -msgstr "" - -msgid "Host category the rule applies to" -msgstr "" - -msgid "Service category" -msgstr "" - -msgid "Service category the rule applies to" -msgstr "" - -msgid "Enabled" -msgstr "" - -msgid "User Groups" -msgstr "" - -msgid "Host Groups" -msgstr "" - -msgid "Services" -msgstr "" - -msgid "Service Groups" -msgstr "" - -msgid "External host" -msgstr "" - -msgid "Create a new HBAC rule." -msgstr "" - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "member host" -msgstr "" - -msgid "hosts to add" -msgstr "" - -msgid "member host group" -msgstr "" - -msgid "host groups to add" -msgstr "" - -msgid "Add services to an HBAC rule." -msgstr "" - -msgid "member HBAC service" -msgstr "" - -msgid "HBAC services to add" -msgstr "" - -msgid "member HBAC service group" -msgstr "" - -msgid "HBAC service groups to add" -msgstr "" - -msgid "Add users and groups to an HBAC rule." -msgstr "" - -msgid "Delete an HBAC rule." -msgstr "" - -msgid "Disable an HBAC rule." -msgstr "" - -msgid "Enable an HBAC rule." -msgstr "" - -msgid "Search for HBAC rules." -msgstr "" - -msgid "Modify an HBAC rule." -msgstr "" - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "hosts to remove" -msgstr "" - -msgid "host groups to remove" -msgstr "" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "" - -msgid "HBAC services to remove" -msgstr "" - -msgid "HBAC service groups to remove" -msgstr "" - -msgid "Remove users and groups from an HBAC rule." -msgstr "" - -msgid "Display the properties of an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" - -msgid "Service name" -msgstr "" - -msgid "HBAC service" -msgstr "" - -msgid "HBAC service description" -msgstr "" - -msgid "Member of HBAC service groups" -msgstr "" - -msgid "Add a new HBAC service." -msgstr "" - -msgid "Delete an existing HBAC service." -msgstr "" - -msgid "Search for HBAC services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" - -msgid "Modify an HBAC service." -msgstr "" - -msgid "Display information about an HBAC service." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "Service group name" -msgstr "" - -msgid "HBAC service group description" -msgstr "" - -msgid "Member HBAC service" -msgstr "" - -msgid "Add a new HBAC service group." -msgstr "" - -msgid "Add members to an HBAC service group." -msgstr "" - -msgid "Delete an HBAC service group." -msgstr "" - -msgid "Search for an HBAC service group." -msgstr "" - -msgid "Modify an HBAC service group." -msgstr "" - -msgid "Remove members from an HBAC service group." -msgstr "" - -msgid "Display information about an HBAC service group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -msgid "User name" -msgstr "" - -msgid "Target host" -msgstr "" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host name" -msgstr "" - -msgid "A description of this host" -msgstr "" - -msgid "Locality" -msgstr "" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "" - -msgid "Platform" -msgstr "" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "" - -msgid "Operating system" -msgstr "" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "" - -msgid "User password" -msgstr "" - -msgid "Password used in bulk enrollment" -msgstr "" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "" - -msgid "Random password" -msgstr "" - -msgid "Certificate" -msgstr "" - -msgid "Base-64 encoded server certificate" -msgstr "" - -msgid "Principal name" -msgstr "" - -msgid "MAC address" -msgstr "" - -msgid "Hardware MAC address(es) on this host" -msgstr "" - -msgid "SSH public key" -msgstr "" - -msgid "Class" -msgstr "" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "Assigned ID View" -msgstr "" - -msgid "Requires pre-authentication" -msgstr "" - -msgid "Pre-authentication is required for the service" -msgstr "" - -msgid "Trusted for delegation" -msgstr "" - -msgid "Client credentials may be delegated to the service" -msgstr "" - -msgid "Member of host-groups" -msgstr "" - -msgid "Indirect Member of host-group" -msgstr "" - -msgid "Keytab" -msgstr "" - -msgid "Managed by" -msgstr "" - -msgid "Managing" -msgstr "" - -msgid "Users allowed to retrieve keytab" -msgstr "" - -msgid "Groups allowed to retrieve keytab" -msgstr "" - -msgid "Hosts allowed to retrieve keytab" -msgstr "" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "" - -msgid "Users allowed to create keytab" -msgstr "" - -msgid "Groups allowed to create keytab" -msgstr "" - -msgid "Hosts allowed to create keytab" -msgstr "" - -msgid "Host Groups allowed to create keytab" -msgstr "" - -msgid "Add a new host." -msgstr "" - -msgid "force host name even if not in DNS" -msgstr "" - -msgid "skip reverse DNS detection" -msgstr "" - -msgid "Add the host to DNS with this IP address" -msgstr "" - -msgid "Add hosts that can manage this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" - -msgid "Delete a host." -msgstr "" - -msgid "Remove entries from DNS" -msgstr "" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" - -msgid "Search for hosts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" - -msgid "host group" -msgstr "" - -msgid "Search for hosts with these member of host groups." -msgstr "" - -msgid "Search for hosts without these member of host groups." -msgstr "" - -msgid "Search for hosts with these member of netgroups." -msgstr "" - -msgid "Search for hosts without these member of netgroups." -msgstr "" - -msgid "Search for hosts with these member of roles." -msgstr "" - -msgid "Search for hosts without these member of roles." -msgstr "" - -msgid "Search for hosts with these member of HBAC rules." -msgstr "" - -msgid "Search for hosts without these member of HBAC rules." -msgstr "" - -msgid "Search for hosts with these member of sudo rules." -msgstr "" - -msgid "Search for hosts without these member of sudo rules." -msgstr "" - -msgid "Search for hosts with these enrolled by users." -msgstr "" - -msgid "Search for hosts without these enrolled by users." -msgstr "" - -msgid "host" -msgstr "" - -msgid "Search for hosts with these managed by hosts." -msgstr "" - -msgid "Search for hosts without these managed by hosts." -msgstr "" - -msgid "Search for hosts with these managing hosts." -msgstr "" - -msgid "Search for hosts without these managing hosts." -msgstr "" - -msgid "Modify information about a host." -msgstr "" - -msgid "Kerberos principal name for this host" -msgstr "" - -msgid "Update DNS entries" -msgstr "" - -msgid "Remove hosts that can manage this host." -msgstr "" - -msgid "Display information about a host." -msgstr "" - -msgid "file to store certificate in" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "Host-group" -msgstr "" - -msgid "Name of host-group" -msgstr "" - -msgid "A description of this host-group" -msgstr "" - -msgid "Member hosts" -msgstr "" - -msgid "Member host-groups" -msgstr "" - -msgid "Indirect Member hosts" -msgstr "" - -msgid "Indirect Member host-groups" -msgstr "" - -msgid "Add a new hostgroup." -msgstr "" - -msgid "Add members to a hostgroup." -msgstr "" - -msgid "Delete a hostgroup." -msgstr "" - -msgid "Search for hostgroups." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" - -msgid "Search for host groups with these member hosts." -msgstr "" - -msgid "Search for host groups without these member hosts." -msgstr "" - -msgid "Search for host groups with these member host groups." -msgstr "" - -msgid "Search for host groups without these member host groups." -msgstr "" - -msgid "Search for host groups with these member of host groups." -msgstr "" - -msgid "Search for host groups without these member of host groups." -msgstr "" - -msgid "Search for host groups with these member of netgroups." -msgstr "" - -msgid "Search for host groups without these member of netgroups." -msgstr "" - -msgid "Search for host groups with these member of HBAC rules." -msgstr "" - -msgid "Search for host groups without these member of HBAC rules." -msgstr "" - -msgid "Search for host groups with these member of sudo rules." -msgstr "" - -msgid "Search for host groups without these member of sudo rules." -msgstr "" - -msgid "Modify a hostgroup." -msgstr "" - -msgid "Remove members from a hostgroup." -msgstr "" - -msgid "Display information about a hostgroup." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "Range name" -msgstr "" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -msgid "Anchor to override" -msgstr "" - -msgid "Group ID Number" -msgstr "" - -msgid "User login" -msgstr "" - -msgid "UID" -msgstr "" - -msgid "User ID Number" -msgstr "" - -msgid "GECOS" -msgstr "" - -msgid "Home directory" -msgstr "" - -msgid "Login shell" -msgstr "" - -msgid "ID View Name" -msgstr "" - -msgid "Add a new Group ID override." -msgstr "" - -msgid "Delete an Group ID override." -msgstr "" - -msgid "Search for an Group ID override." -msgstr "" - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" - -msgid "Modify an Group ID override." -msgstr "" - -msgid "Rename the Group ID override object" -msgstr "" - -msgid "Display information about an Group ID override." -msgstr "" - -msgid "Add a new User ID override." -msgstr "" - -msgid "Delete an User ID override." -msgstr "" - -msgid "Search for an User ID override." -msgstr "" - -msgid "Modify an User ID override." -msgstr "" - -msgid "Rename the User ID override object" -msgstr "" - -msgid "Display information about an User ID override." -msgstr "" - -msgid "Add a new ID View." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" - -msgid "hosts" -msgstr "" - -msgid "Hosts to apply the ID View to" -msgstr "" - -msgid "hostgroups" -msgstr "" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" - -msgid "Hosts that this ID View was applied to." -msgstr "" - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" - -msgid "Number of hosts the ID View was applied to:" -msgstr "" - -msgid "Delete an ID View." -msgstr "" - -msgid "Search for an ID View." -msgstr "" - -msgid "Modify an ID View." -msgstr "" - -msgid "Rename the ID View object" -msgstr "" - -msgid "Display information about an ID View." -msgstr "" - -msgid "Enumerate all the hosts the view applies to." -msgstr "" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" - -msgid "Hosts to clear (any) ID View from." -msgstr "" - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" - -msgid "Hosts that ID View was cleared from." -msgstr "" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" - -msgid "Dict of I18N messages" -msgstr "" - -msgid "Export plugin meta-data for the webUI." -msgstr "" - -msgid "Name of object to export" -msgstr "" - -msgid "Name of method to export" -msgstr "" - -msgid "Name of command to export" -msgstr "" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" - -msgid "Join an IPA domain" -msgstr "" - -msgid "The hostname to register as" -msgstr "" - -msgid "The IPA realm" -msgstr "" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "" - -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" - -msgid "Manage ticket policy for specific user" -msgstr "" - -msgid "Max life" -msgstr "" - -msgid "Maximum ticket life (seconds)" -msgstr "" - -msgid "Max renew" -msgstr "" - -msgid "Maximum renewable age (seconds)" -msgstr "" - -msgid "Modify Kerberos ticket policy." -msgstr "" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "" - -msgid "Display the current Kerberos ticket policy." -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," -"cn=accounts' --group-container='cn=groups,cn=accounts' " -"ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' --user-ignore-" -"objectclass=radiusprofile --user-ignore-" -"attribute=radiusgroupname ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -msgid "Migrate users and groups from DS to IPA." -msgstr "" - -msgid "LDAP URI" -msgstr "" - -msgid "LDAP URI of DS server to migrate from" -msgstr "" - -msgid "bind password" -msgstr "" - -msgid "Bind DN" -msgstr "" - -msgid "User container" -msgstr "" - -msgid "DN of container for users in DS relative to base DN" -msgstr "" - -msgid "Group container" -msgstr "" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "" - -msgid "User object class" -msgstr "" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "" - -msgid "Group object class" -msgstr "" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "" - -msgid "Ignore user object class" -msgstr "" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore user attribute" -msgstr "" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore group object class" -msgstr "" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "Ignore group attribute" -msgstr "" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "" - -msgid "Overwrite GID" -msgstr "" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" - -msgid "LDAP schema" -msgstr "" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" - -msgid "Continue" -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" - -msgid "Base DN" -msgstr "" - -msgid "Base DN on remote LDAP server" -msgstr "" - -msgid "Ignore compat plugin" -msgstr "" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" - -msgid "CA certificate" -msgstr "" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "" - -msgid "groups to exclude from migration" -msgstr "" - -msgid "users to exclude from migration" -msgstr "" - -msgid "Lists of objects migrated; categorized by type." -msgstr "" - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" - -msgid "False if migration mode was disabled." -msgstr "" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" - -msgid "Show environment variables." -msgstr "" - -msgid "Forward to server instead of running locally" -msgstr "" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Total number of variables env (>= count)" -msgstr "" - -msgid "Number of variables returned (<= total)" -msgstr "" - -msgid "Show all loaded plugins." -msgstr "" - -msgid "Dictionary mapping plugin names to bases" -msgstr "" - -msgid "Number of plugins loaded" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "Netgroup name" -msgstr "" - -msgid "Netgroup description" -msgstr "" - -msgid "NIS domain name" -msgstr "" - -msgid "IPA unique ID" -msgstr "" - -msgid "Member netgroups" -msgstr "" - -msgid "Indirect Member netgroups" -msgstr "" - -msgid "Member User" -msgstr "" - -msgid "Member Group" -msgstr "" - -msgid "Member Host" -msgstr "" - -msgid "Member Hostgroup" -msgstr "" - -msgid "Add a new netgroup." -msgstr "" - -msgid "Add members to a netgroup." -msgstr "" - -msgid "member netgroup" -msgstr "" - -msgid "netgroups to add" -msgstr "" - -msgid "Delete a netgroup." -msgstr "" - -msgid "Search for a netgroup." -msgstr "" - -msgid "search for managed groups" -msgstr "" - -msgid "Search for netgroups with these member netgroups." -msgstr "" - -msgid "Search for netgroups without these member netgroups." -msgstr "" - -msgid "Search for netgroups with these member users." -msgstr "" - -msgid "Search for netgroups without these member users." -msgstr "" - -msgid "Search for netgroups with these member groups." -msgstr "" - -msgid "Search for netgroups without these member groups." -msgstr "" - -msgid "Search for netgroups with these member hosts." -msgstr "" - -msgid "Search for netgroups without these member hosts." -msgstr "" - -msgid "Search for netgroups with these member host groups." -msgstr "" - -msgid "Search for netgroups without these member host groups." -msgstr "" - -msgid "Search for netgroups with these member of netgroups." -msgstr "" - -msgid "Search for netgroups without these member of netgroups." -msgstr "" - -msgid "Modify a netgroup." -msgstr "" - -msgid "Remove members from a netgroup." -msgstr "" - -msgid "netgroups to remove" -msgstr "" - -msgid "Display information about a netgroup." -msgstr "" - -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" - -msgid "TOTP authentication Window" -msgstr "" - -msgid "TOTP authentication time variance (seconds)" -msgstr "" - -msgid "TOTP Synchronization Window" -msgstr "" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "" - -msgid "HOTP Authentication Window" -msgstr "" - -msgid "HOTP authentication skip-ahead" -msgstr "" - -msgid "HOTP Synchronization Window" -msgstr "" - -msgid "HOTP synchronization skip-ahead" -msgstr "" - -msgid "Modify OTP configuration options." -msgstr "" - -msgid "Show the current OTP configuration." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -msgid "Serial" -msgstr "" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "Set a user's password." -msgstr "" - -msgid "New Password" -msgstr "" - -msgid "Current Password" -msgstr "" - -msgid "OTP" -msgstr "" - -msgid "One Time Password" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -"\n" -"Managed permissions\n" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "Permission name" -msgstr "" - -msgid "Granted rights" -msgstr "" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" - -msgid "Effective attributes" -msgstr "" - -msgid "All attributes to which the permission applies" -msgstr "" - -msgid "Included attributes" -msgstr "" - -msgid "User-specified attributes to which the permission applies" -msgstr "" - -msgid "Excluded attributes" -msgstr "" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" - -msgid "Default attributes" -msgstr "" - -msgid "Attributes to which the permission applies by default" -msgstr "" - -#, fuzzy -msgid "Bind rule type" -msgstr "गलत प्रकार" - -msgid "Subtree to apply permissions to" -msgstr "" - -msgid "Extra target filter" -msgstr "" - -msgid "Raw target filter" -msgstr "" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" - -msgid "Target DN" -msgstr "" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" - -msgid "Member of group" -msgstr "" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "" - -msgid "User group to apply permissions to (sets target)" -msgstr "" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "" - -msgid "Deprecated; use extratargetfilter" -msgstr "" - -msgid "Deprecated; use ipapermlocation" -msgstr "" - -msgid "Deprecated; use ipapermright" -msgstr "" - -msgid "Granted to Privilege" -msgstr "" - -msgid "Indirect Member of roles" -msgstr "" - -msgid "Add a new permission." -msgstr "" - -msgid "Add members to a permission." -msgstr "" - -msgid "member privilege" -msgstr "" - -msgid "privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "" - -msgid "Permission flags" -msgstr "" - -msgid "Delete a permission." -msgstr "" - -msgid "force delete of SYSTEM permissions" -msgstr "" - -msgid "Search for permissions." -msgstr "" - -msgid "Modify a permission." -msgstr "" - -#, fuzzy -msgid "Rename the permission object" -msgstr "क्रेडेंशियल्स कैश अनुमतियाँ गलत" - -msgid "Remove members from a permission." -msgstr "" - -msgid "privileges to remove" -msgstr "" - -msgid "Display information about a permission." -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "Ping a remote server." -msgstr "" - -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "" - -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" - -msgid "Privilege name" -msgstr "" - -msgid "Privilege description" -msgstr "" - -msgid "Granting privilege to roles" -msgstr "" - -msgid "Add a new privilege." -msgstr "" - -msgid "Add members to a privilege." -msgstr "" - -msgid "member role" -msgstr "" - -msgid "roles to add" -msgstr "" - -msgid "Add permissions to a privilege." -msgstr "" - -msgid "permission" -msgstr "" - -msgid "permissions" -msgstr "" - -msgid "Number of permissions added" -msgstr "" - -msgid "Delete a privilege." -msgstr "" - -msgid "Search for privileges." -msgstr "" - -msgid "Modify a privilege." -msgstr "" - -msgid "Rename the privilege object" -msgstr "" - -msgid "Remove members from a privilege" -msgstr "" - -msgid "roles to remove" -msgstr "" - -msgid "Remove permissions from a privilege." -msgstr "" - -msgid "Number of permissions removed" -msgstr "" - -msgid "Display information about a privilege." -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Group" -msgstr "" - -msgid "Manage password policy for specific group" -msgstr "" - -msgid "Max lifetime (days)" -msgstr "" - -msgid "Maximum password lifetime (in days)" -msgstr "" - -msgid "Min lifetime (hours)" -msgstr "" - -msgid "Minimum password lifetime (in hours)" -msgstr "" - -msgid "History size" -msgstr "" - -msgid "Password history size" -msgstr "" - -msgid "Character classes" -msgstr "" - -msgid "Minimum number of character classes" -msgstr "" - -msgid "Min length" -msgstr "" - -msgid "Minimum length of password" -msgstr "" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "" - -msgid "Max failures" -msgstr "" - -msgid "Consecutive failures before lockout" -msgstr "" - -msgid "Failure reset interval" -msgstr "" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "" - -msgid "Lockout duration" -msgstr "" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" - -msgid "Add a new group password policy." -msgstr "" - -msgid "Delete a group password policy." -msgstr "" - -msgid "Search for group password policies." -msgstr "" - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" - -msgid "Modify a group password policy." -msgstr "" - -msgid "Display information about password policy." -msgstr "" - -msgid "User" -msgstr "" - -msgid "Display effective policy for a specific user" -msgstr "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "RADIUS proxy server name" -msgstr "" - -msgid "A description of this RADIUS proxy server" -msgstr "" - -msgid "Server" -msgstr "" - -msgid "The hostname or IP (with or without port)" -msgstr "" - -msgid "Secret" -msgstr "" - -msgid "The secret used to encrypt data" -msgstr "" - -msgid "Timeout" -msgstr "" - -msgid "The total timeout across all retries (in seconds)" -msgstr "" - -msgid "Retries" -msgstr "" - -msgid "The number of times to retry authentication" -msgstr "" - -msgid "User attribute" -msgstr "" - -msgid "The username attribute on the user object" -msgstr "" - -msgid "Add a new RADIUS proxy server." -msgstr "" - -msgid "Delete a RADIUS proxy server." -msgstr "" - -msgid "Search for RADIUS proxy servers." -msgstr "" - -msgid "Modify a RADIUS proxy server." -msgstr "" - -msgid "Rename the RADIUS proxy server object" -msgstr "" - -msgid "Display information about a RADIUS proxy server." -msgstr "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Domain" -msgstr "" - -msgid "Add domain" -msgstr "" - -msgid "Delete domain" -msgstr "" - -msgid "Modify realm domains." -msgstr "" - -msgid "Force adding domain even if not in DNS" -msgstr "" - -msgid "Display the list of realm domains." -msgstr "" - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" - -msgid "Role name" -msgstr "" - -msgid "A description of this role-group" -msgstr "" - -msgid "Privileges" -msgstr "" - -msgid "Member services" -msgstr "" - -msgid "Add a new role." -msgstr "" - -msgid "Add members to a role." -msgstr "" - -msgid "member service" -msgstr "" - -msgid "services to add" -msgstr "" - -msgid "Add privileges to a role." -msgstr "" - -msgid "privilege" -msgstr "" - -msgid "privileges" -msgstr "" - -msgid "Number of privileges added" -msgstr "" - -msgid "Delete a role." -msgstr "" - -msgid "Search for roles." -msgstr "" - -msgid "Modify a role." -msgstr "" - -msgid "Rename the role object" -msgstr "" - -msgid "Remove members from a role." -msgstr "" - -msgid "services to remove" -msgstr "" - -msgid "Remove privileges from a role." -msgstr "" - -msgid "Number of privileges removed" -msgstr "" - -msgid "Display information about a role." -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "Self-service name" -msgstr "" - -msgid "Attributes to which the permission applies." -msgstr "" - -msgid "Add a new self-service permission." -msgstr "" - -msgid "Delete a self-service permission." -msgstr "" - -msgid "Search for a self-service permission." -msgstr "" - -msgid "Modify a self-service permission." -msgstr "" - -msgid "Display information about a self-service permission." -msgstr "" - -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" - -msgid "SELinux User" -msgstr "" - -msgid "HBAC Rule" -msgstr "" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "" - -msgid "Create a new SELinux User Map." -msgstr "" - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "" - -msgid "Delete a SELinux User Map." -msgstr "" - -msgid "Disable an SELinux User Map rule." -msgstr "" - -msgid "Enable an SELinux User Map rule." -msgstr "" - -msgid "Search for SELinux User Maps." -msgstr "" - -msgid "Modify a SELinux User Map." -msgstr "" - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "" - -msgid "Display the properties of a SELinux User Map rule." -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "Service principal" -msgstr "" - -msgid "PAC type" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" - -msgid "Add a new IPA new service." -msgstr "" - -msgid "force principal name even if not in DNS" -msgstr "" - -msgid "Add hosts that can manage this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Delete an IPA service." -msgstr "" - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Search for IPA services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" - -msgid "Search for services with these managed by hosts." -msgstr "" - -msgid "Search for services without these managed by hosts." -msgstr "" - -msgid "Modify an existing IPA service." -msgstr "" - -msgid "Remove hosts that can manage this service." -msgstr "" - -msgid "Display information about an IPA service." -msgstr "" - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" - -msgid "Sudo Command" -msgstr "" - -msgid "A description of this command" -msgstr "" - -msgid "Sudo Command Groups" -msgstr "" - -msgid "Create new Sudo Command." -msgstr "" - -msgid "Delete Sudo Command." -msgstr "" - -msgid "Search for Sudo Commands." -msgstr "" - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" - -msgid "Modify Sudo Command." -msgstr "" - -msgid "Display Sudo Command." -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "Sudo Command Group" -msgstr "" - -msgid "Commands" -msgstr "" - -msgid "Member Sudo commands" -msgstr "" - -msgid "Create new Sudo Command Group." -msgstr "" - -msgid "Add members to Sudo Command Group." -msgstr "" - -msgid "member sudo command" -msgstr "" - -msgid "sudo commands to add" -msgstr "" - -msgid "Delete Sudo Command Group." -msgstr "" - -msgid "Search for Sudo Command Groups." -msgstr "" - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" - -msgid "Modify Sudo Command Group." -msgstr "" - -msgid "Remove members from Sudo Command Group." -msgstr "" - -msgid "sudo commands to remove" -msgstr "" - -msgid "Display Sudo Command Group." -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -msgid "Domain name" -msgstr "" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "" - -msgid "Last name" -msgstr "" - -msgid "Full name" -msgstr "" - -msgid "Display name" -msgstr "" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Email address" -msgstr "" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -msgid "Pager Number" -msgstr "" - -msgid "Fax Number" -msgstr "" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Car License" -msgstr "" - -msgid "Account disabled" -msgstr "" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "" - -msgid "RADIUS proxy username" -msgstr "" - -msgid "Department Number" -msgstr "" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -msgid "Delete a user." -msgstr "" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "Command category" -msgstr "" - -msgid "Command category the rule applies to" -msgstr "" - -msgid "RunAs User category" -msgstr "" - -msgid "RunAs User category the rule applies to" -msgstr "" - -msgid "RunAs Group category" -msgstr "" - -msgid "RunAs Group category the rule applies to" -msgstr "" - -msgid "Sudo order" -msgstr "" - -msgid "integer to order the Sudo rules" -msgstr "" - -msgid "External User" -msgstr "" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -msgid "Host Masks" -msgstr "" - -msgid "Sudo Allow Commands" -msgstr "" - -msgid "Sudo Deny Commands" -msgstr "" - -msgid "Sudo Allow Command Groups" -msgstr "" - -msgid "Sudo Deny Command Groups" -msgstr "" - -msgid "RunAs Users" -msgstr "" - -msgid "Run as a user" -msgstr "" - -msgid "Groups of RunAs Users" -msgstr "" - -msgid "Run as any user within a specified group" -msgstr "" - -msgid "RunAs External User" -msgstr "" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -msgid "External Groups of RunAs Users" -msgstr "" - -msgid "External Groups of users that the command can run as" -msgstr "" - -msgid "RunAs Groups" -msgstr "" - -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -msgid "RunAs External Group" -msgstr "" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -msgid "Sudo Option" -msgstr "" - -msgid "Create new Sudo Rule." -msgstr "" - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "member sudo command group" -msgstr "" - -msgid "sudo command groups to add" -msgstr "" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "" - -msgid "Add group for Sudo to execute as." -msgstr "" - -msgid "Add users and groups for Sudo to execute as." -msgstr "" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "" - -msgid "Delete Sudo Rule." -msgstr "" - -msgid "Disable a Sudo Rule." -msgstr "" - -msgid "Enable a Sudo Rule." -msgstr "" - -msgid "Search for Sudo Rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -msgid "Modify Sudo Rule." -msgstr "" - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "sudo command groups to remove" -msgstr "" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "Remove an option from Sudo Rule." -msgstr "" - -msgid "Remove group for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "" - -msgid "Display Sudo Rule." -msgstr "" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "ACL name" -msgstr "" - -msgid "Profile category" -msgstr "" - -msgid "Profile category the ACL applies to" -msgstr "" - -msgid "User category the ACL applies to" -msgstr "" - -msgid "Host category the ACL applies to" -msgstr "" - -msgid "Service category the ACL applies to" -msgstr "" - -msgid "Profiles" -msgstr "" - -msgid "Create a new CA ACL." -msgstr "" - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "" - -msgid "Add profiles to a CA ACL." -msgstr "" - -msgid "member Certificate Profile" -msgstr "" - -msgid "Certificate Profiles to add" -msgstr "" - -msgid "Add services to a CA ACL." -msgstr "" - -msgid "Add users and groups to a CA ACL." -msgstr "" - -msgid "Delete a CA ACL." -msgstr "" - -msgid "Disable a CA ACL." -msgstr "" - -msgid "Enable a CA ACL." -msgstr "" - -msgid "Search for CA ACLs." -msgstr "" - -msgid "Modify a CA ACL." -msgstr "" - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "" - -msgid "Remove profiles from a CA ACL." -msgstr "" - -msgid "Certificate Profiles to remove" -msgstr "" - -msgid "Remove services from a CA ACL." -msgstr "" - -msgid "Remove users and groups from a CA ACL." -msgstr "" - -msgid "Display the properties of a CA ACL." -msgstr "" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" - -msgid "Query current Domain Level." -msgstr "" - -msgid "Current domain level:" -msgstr "" - -msgid "Change current Domain Level." -msgstr "" - -msgid "Domain Level" -msgstr "" - -msgid "Add certificates to host entry" -msgstr "" - -msgid "Remove certificates from host entry" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "Fallback to AD DC LDAP" -msgstr "" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" - -msgid "Add to default group" -msgstr "" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" - -msgid "Search scope" -msgstr "" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Target DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" - -msgid "Origin DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "Server name" -msgstr "" - -msgid "IPA server hostname" -msgstr "" - -msgid "Managed suffix" -msgstr "" - -msgid "Min domain level" -msgstr "" - -msgid "Minimum domain level" -msgstr "" - -msgid "Max domain level" -msgstr "" - -msgid "Maximum domain level" -msgstr "" - -msgid "Delete IPA server." -msgstr "" - -msgid "Search for IPA servers." -msgstr "" - -msgid "Show IPA server." -msgstr "" - -msgid "Add new certificates to a service" -msgstr "" - -msgid "Remove certificates from a service" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed Target" -msgstr "" - -msgid "Create a new service delegation rule." -msgstr "" - -msgid "Add member to a named service delegation rule." -msgstr "" - -msgid "member principal" -msgstr "" - -msgid "principal to add" -msgstr "" - -msgid "Add target to a named service delegation rule." -msgstr "" - -msgid "member service delegation target" -msgstr "" - -msgid "service delegation targets to add" -msgstr "" - -msgid "Delete service delegation." -msgstr "" - -msgid "Search for service delegations rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" - -msgid "Remove member from a named service delegation rule." -msgstr "" - -msgid "principal to remove" -msgstr "" - -msgid "Remove target from a named service delegation rule." -msgstr "" - -msgid "service delegation targets to remove" -msgstr "" - -msgid "Display information about a named service delegation rule." -msgstr "" - -msgid "Create a new service delegation target." -msgstr "" - -msgid "Add member to a named service delegation target." -msgstr "" - -msgid "Delete service delegation target." -msgstr "" - -msgid "Search for service delegation target." -msgstr "" - -msgid "Remove member from a named service delegation target." -msgstr "" - -msgid "Display information about a named service delegation target." -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" - -msgid "Activate a stage user." -msgstr "" - -msgid "Add a new stage user." -msgstr "" - -msgid "Create Stage user in from a delete user" -msgstr "" - -msgid "Delete a stage user." -msgstr "" - -msgid "Search for stage users." -msgstr "" - -msgid "Search for stage users with these member of groups." -msgstr "" - -msgid "Search for stage users without these member of groups." -msgstr "" - -msgid "Search for stage users with these member of netgroups." -msgstr "" - -msgid "Search for stage users without these member of netgroups." -msgstr "" - -msgid "Search for stage users with these member of roles." -msgstr "" - -msgid "Search for stage users without these member of roles." -msgstr "" - -msgid "Search for stage users with these member of HBAC rules." -msgstr "" - -msgid "Search for stage users without these member of HBAC rules." -msgstr "" - -msgid "Search for stage users with these member of sudo rules." -msgstr "" - -msgid "Search for stage users without these member of sudo rules." -msgstr "" - -msgid "Modify a stage user." -msgstr "" - -msgid "Rename the stage user object" -msgstr "" - -msgid "Display information about a stage user." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" - -msgid "Segment name" -msgstr "" - -msgid "Arbitrary string identifying the segment" -msgstr "" - -msgid "Left node" -msgstr "" - -msgid "Left replication node - an IPA server" -msgstr "" - -msgid "Right node" -msgstr "" - -msgid "Right replication node - an IPA server" -msgstr "" - -msgid "Connectivity" -msgstr "" - -msgid "Direction of replication between left and right replication node" -msgstr "" - -msgid "Attributes to strip" -msgstr "" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" - -msgid "Attributes to replicate" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" - -msgid "Attributes for total update" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" - -msgid "Session timeout" -msgstr "" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" - -msgid "Replication agreement enabled" -msgstr "" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" - -msgid "Suffix name" -msgstr "" - -msgid "LDAP suffix to be managed" -msgstr "" - -msgid "Add a new segment." -msgstr "" - -msgid "Delete a segment." -msgstr "" - -msgid "Search for topology segments." -msgstr "" - -msgid "Modify a segment." -msgstr "" - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" - -msgid "Initialize left node" -msgstr "" - -msgid "Initialize right node" -msgstr "" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "" - -msgid "Display a segment." -msgstr "" - -msgid "Add a new topology suffix to be managed." -msgstr "" - -msgid "Delete a topology suffix." -msgstr "" - -msgid "Search for topology suffices." -msgstr "" - -msgid "Modify a topology suffix." -msgstr "" - -msgid "Show managed suffix." -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "Preserved user" -msgstr "" - -msgid "Add one or more certificates to the user entry" -msgstr "" - -msgid "Remove one or more certificates to the user entry" -msgstr "" - -msgid "Move deleted user into staged area" -msgstr "" - -msgid "Undelete a delete user account." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "Vault name" -msgstr "" - -msgid "Vault description" -msgstr "" - -msgid "Vault type" -msgstr "" - -msgid "Salt" -msgstr "" - -msgid "Vault salt" -msgstr "" - -msgid "Public key" -msgstr "" - -msgid "Vault public key" -msgstr "" - -msgid "Owner users" -msgstr "" - -msgid "Owner groups" -msgstr "" - -msgid "Owner services" -msgstr "" - -msgid "Failed owners" -msgstr "" - -msgid "Vault service" -msgstr "" - -msgid "Shared vault" -msgstr "" - -msgid "Vault user" -msgstr "" - -msgid "Transport Certificate" -msgstr "" - -msgid "Service name of the service vault" -msgstr "" - -msgid "Username of the user vault" -msgstr "" - -msgid "Add members to a vault." -msgstr "" - -msgid "Add owners to a vault." -msgstr "" - -msgid "owner user" -msgstr "" - -msgid "owner group" -msgstr "" - -msgid "owner service" -msgstr "" - -msgid "Owners that could not be added" -msgstr "" - -msgid "Number of owners added" -msgstr "" - -msgid "Session key wrapped with transport certificate" -msgstr "" - -msgid "Vault data encrypted with session key" -msgstr "" - -msgid "Nonce" -msgstr "" - -msgid "Delete a vault." -msgstr "" - -msgid "Search for vaults." -msgstr "" - -msgid "List all service vaults" -msgstr "" - -msgid "List all user vaults" -msgstr "" - -msgid "Remove members from a vault." -msgstr "" - -msgid "Remove owners from a vault." -msgstr "" - -msgid "Owners that could not be removed" -msgstr "" - -msgid "Number of owners removed" -msgstr "" - -msgid "Display information about a vault." -msgstr "" - -msgid "Show vault configuration." -msgstr "" - -msgid "Output file to store the transport certificate" -msgstr "" - -msgid "Add owners to a vault container." -msgstr "" - -msgid "Delete a vault container." -msgstr "" - -msgid "Remove owners from a vault container." -msgstr "" - -msgid "Display information about a vault container." -msgstr "" - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "" - -msgid "Hostname (FQDN)" -msgstr "" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Managed suffixes" -msgstr "" - -msgid "Check connection to remote IPA server." -msgstr "" - -msgid "Remote server name" -msgstr "" - -msgid "Remote IPA server hostname" -msgstr "" - -msgid "suffix" -msgstr "" - -msgid "Search for servers with these managed suffixes." -msgstr "" - -msgid "Search for servers without these managed suffixes." -msgstr "" - -msgid "Add a manager to the stage user entry" -msgstr "" - -msgid "Remove a manager to the stage user entry" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -msgid "Managed LDAP suffix DN" -msgstr "" - -msgid "Search for topology suffixes." -msgstr "" - -msgid "Add a manager to the user entry" -msgstr "" - -msgid "Remove a manager to the user entry" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Comma-separated list of attributes" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" - -msgid "DNS class" -msgstr "" - -msgid "Comma-separated list of raw A records" -msgstr "" - -msgid "Comma-separated list of raw AAAA records" -msgstr "" - -msgid "Comma-separated list of raw A6 records" -msgstr "" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "" - -msgid "Comma-separated list of raw APL records" -msgstr "" - -msgid "Comma-separated list of raw CERT records" -msgstr "" - -msgid "Comma-separated list of raw CNAME records" -msgstr "" - -msgid "Comma-separated list of raw DHCID records" -msgstr "" - -msgid "Comma-separated list of raw DLV records" -msgstr "" - -msgid "Comma-separated list of raw DNAME records" -msgstr "" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "" - -msgid "Comma-separated list of raw DS records" -msgstr "" - -msgid "Comma-separated list of raw HIP records" -msgstr "" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "" - -msgid "Comma-separated list of raw KEY records" -msgstr "" - -msgid "KEY Flags" -msgstr "" - -msgid "KEY Protocol" -msgstr "" - -msgid "Protocol" -msgstr "" - -msgid "KEY Algorithm" -msgstr "" - -msgid "KEY Public Key" -msgstr "" - -msgid "Public Key" -msgstr "" - -msgid "Comma-separated list of raw KX records" -msgstr "" - -msgid "Comma-separated list of raw LOC records" -msgstr "" - -msgid "Comma-separated list of raw MX records" -msgstr "" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "" - -msgid "Comma-separated list of raw NS records" -msgstr "" - -msgid "Comma-separated list of raw NSEC records" -msgstr "" - -msgid "NSEC Next Domain Name" -msgstr "" - -msgid "Next Domain Name" -msgstr "" - -msgid "NSEC Type Map" -msgstr "" - -msgid "Type Map" -msgstr "" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "" - -msgid "Comma-separated list of raw PTR records" -msgstr "" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "" - -msgid "RRSIG Type Covered" -msgstr "" - -msgid "Type Covered" -msgstr "" - -msgid "RRSIG Algorithm" -msgstr "" - -msgid "RRSIG Labels" -msgstr "" - -msgid "Labels" -msgstr "" - -msgid "RRSIG Original TTL" -msgstr "" - -msgid "Original TTL" -msgstr "" - -msgid "RRSIG Signature Expiration" -msgstr "" - -msgid "Signature Expiration" -msgstr "" - -msgid "RRSIG Signature Inception" -msgstr "" - -msgid "Signature Inception" -msgstr "" - -msgid "RRSIG Key Tag" -msgstr "" - -msgid "RRSIG Signer's Name" -msgstr "" - -msgid "Signer's Name" -msgstr "" - -msgid "RRSIG Signature" -msgstr "" - -msgid "Signature" -msgstr "" - -msgid "Comma-separated list of raw RP records" -msgstr "" - -msgid "Comma-separated list of raw SIG records" -msgstr "" - -msgid "SIG Type Covered" -msgstr "" - -msgid "SIG Algorithm" -msgstr "" - -msgid "SIG Labels" -msgstr "" - -msgid "SIG Original TTL" -msgstr "" - -msgid "SIG Signature Expiration" -msgstr "" - -msgid "SIG Signature Inception" -msgstr "" - -msgid "SIG Key Tag" -msgstr "" - -msgid "SIG Signer's Name" -msgstr "" - -msgid "SIG Signature" -msgstr "" - -msgid "Comma-separated list of raw SPF records" -msgstr "" - -msgid "Comma-separated list of raw SRV records" -msgstr "" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "" - -msgid "Comma-separated list of raw TA records" -msgstr "" - -msgid "Comma-separated list of raw TKEY records" -msgstr "" - -msgid "Comma-separated list of raw TSIG records" -msgstr "" - -msgid "Comma-separated list of raw TXT records" -msgstr "" - -msgid "SOA time to live" -msgstr "" - -msgid "SOA record time to live" -msgstr "" - -msgid "SOA class" -msgstr "" - -msgid "SOA record class" -msgstr "" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" - -msgid "Consume an entitlement." -msgstr "" - -msgid "Quantity" -msgstr "" - -msgid "Search for entitlement accounts." -msgstr "" - -msgid "Retrieve the entitlement certs." -msgstr "" - -msgid "Import an entitlement certificate." -msgstr "" - -msgid "UUID" -msgstr "" - -msgid "Enrollment UUID" -msgstr "" - -msgid "Register to the entitlement system." -msgstr "" - -msgid "Username" -msgstr "" - -msgid "Enrollment UUID (not implemented)" -msgstr "" - -msgid "Registration password" -msgstr "" - -msgid "Display current entitlements." -msgstr "" - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" - -msgid "comma-separated list of users to add" -msgstr "" - -msgid "comma-separated list of groups to add" -msgstr "" - -msgid "comma-separated list of users to remove" -msgstr "" - -msgid "comma-separated list of groups to remove" -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Source host category" -msgstr "" - -msgid "Source host category the rule applies to" -msgstr "" - -msgid "Source Hosts" -msgstr "" - -msgid "Source Host Groups" -msgstr "" - -msgid "comma-separated list of hosts to add" -msgstr "" - -msgid "comma-separated list of host groups to add" -msgstr "" - -msgid "comma-separated list of HBAC services to add" -msgstr "" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "" - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "" - -msgid "comma-separated list of hosts to remove" -msgstr "" - -msgid "comma-separated list of host groups to remove" -msgstr "" - -msgid "comma-separated list of HBAC services to remove" -msgstr "" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" - -msgid "Source host" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "comma-separated list of netgroups to add" -msgstr "" - -msgid "comma-separated list of netgroups to remove" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" - -msgid "Target members of a group" -msgstr "" - -msgid "User group to apply permissions to" -msgstr "" - -msgid "comma-separated list of privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI" -msgstr "" - -msgid "Permission type" -msgstr "" - -msgid "comma-separated list of privileges to remove" -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "comma-separated list of roles to add" -msgstr "" - -msgid "comma-separated list of permissions" -msgstr "" - -msgid "comma-separated list of roles to remove" -msgstr "" - -msgid "comma-separated list of privileges" -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "comma-separated list of sudo commands to add" -msgstr "" - -msgid "comma-separated list of sudo commands to remove" -msgstr "" - -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" - -msgid "comma-separated list of sudo command groups to add" -msgstr "" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "" - -msgid "Failed members" -msgstr "" - -msgid "Failed source hosts/hostgroups" -msgstr "" - -msgid "Failed hosts/hostgroups" -msgstr "" - -msgid "Failed users/groups" -msgstr "" - -msgid "Failed service/service groups" -msgstr "" - -msgid "Failed to remove" -msgstr "" - -msgid "Failed RunAs" -msgstr "" - -msgid "Failed RunAsGroup" -msgstr "" - -msgid "Failed profiles" -msgstr "" - -msgid "Failed CAs" -msgstr "" - -msgid "Failed member manager" -msgstr "" - -msgid "Failed managedby" -msgstr "" - -msgid "Failed allowed to retrieve keytab" -msgstr "" - -msgid "Failed allowed to create keytab" -msgstr "" - -msgid "Failed targets" -msgstr "" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "" - -msgid "an internal error has occurred" -msgstr "एक आंतरिक त्रुटि हुई है" - -#, fuzzy, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "एक आंतरिक त्रुटि हुई है" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "" - -msgid "did not receive Kerberos credentials" -msgstr "कर्बेरॉस क्रेडेंशियल्स प्राप्त नहीं हुआ" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -msgid "No credentials cache found" -msgstr "कैश क्रेडेंशियल्स नहीं मिली" - -msgid "Ticket expired" -msgstr "टिकट समाप्त" - -msgid "Credentials cache permissions incorrect" -msgstr "क्रेडेंशियल्स कैश अनुमतियाँ गलत" - -msgid "Bad format in credentials cache" -msgstr "क्रेडेंशियल्स कैश में बुरा प्रारूप" - -msgid "Cannot resolve KDC for requested realm" -msgstr "अनुरोधित दायरे के लिए KDC हल नहीं कर सकता" - -msgid "Session error" -msgstr "" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#, python-format -msgid "'%(name)s' is required" -msgstr "" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - -msgid "Passwords do not match" -msgstr "पासवर्ड मेल नहीं खाते" - -msgid "Command not implemented" -msgstr "" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -#, python-format -msgid "%(reason)s" -msgstr "" - -msgid "This entry already exists" -msgstr "" - -msgid "You must enroll a host in order to create a host service" -msgstr "" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" - -msgid "This command requires root access" -msgstr "इस आदेश को रूट मूल अभिगम की आवश्यकता है" - -msgid "This is already a posix group" -msgstr "यह पहले से ही एक पोसिक्स समूह है" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -msgid "This entry is already enabled" -msgstr "" - -msgid "This entry is already disabled" -msgstr "" - -msgid "This entry cannot be enabled or disabled" -msgstr "" - -msgid "This entry is not a member" -msgstr "" - msgid "A group may not be a member of itself" msgstr "एक समूह खुद के ही सदस्य नहीं हो सकता" -#, fuzzy -msgid "This entry is already a member" -msgstr "यह पहले से ही एक पोसिक्स समूह है" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "बेस६४ डिकोडिंग विफल: %(reason)s" - -#, fuzzy -msgid "A group may not be added as a member of itself" -msgstr "एक समूह खुद के ही सदस्य नहीं हो सकता" - -msgid "The default users group cannot be removed" -msgstr "" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -msgid "This group already allows external members" -msgstr "" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "change collided with another change" -msgstr "" - -msgid "no modifications to be performed" -msgstr "" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "" - -msgid "limits exceeded for this query" -msgstr "" - -#, python-format -msgid "%(info)s" -msgstr "" - -msgid "modifying primary key is not allowed" -msgstr "" - -#, fuzzy, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "केवल एक मान की अनुमति है" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "" - -msgid "Already registered" -msgstr "" - -msgid "Not registered yet" -msgstr "" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, python-format -msgid "%(exception)s" -msgstr "" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -#, python-format -msgid "%(count)d variables" -msgstr "" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" -msgstr[1] "" - -msgid "A dictionary representing an LDAP entry" -msgstr "" - msgid "A list of LDAP entries" msgstr "LDAP प्रविष्टियों की सूची" msgid "All commands should at least have a result" msgstr "सभी आदेशों का कम से कम परिणाम होना चाहिए" +msgid "Bad format in credentials cache" +msgstr "क्रेडेंशियल्स कैश में बुरा प्रारूप" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "बेस६४ डिकोडिंग विफल: %(reason)s" + +msgid "Cannot resolve KDC for requested realm" +msgstr "अनुरोधित दायरे के लिए KDC हल नहीं कर सकता" + +msgid "Credentials cache permissions incorrect" +msgstr "क्रेडेंशियल्स कैश अनुमतियाँ गलत" + #, python-format msgid "Enter %(label)s again to verify: " msgstr "सत्यापित करने के लिए फिर से %(label)s दर्ज करें:" -msgid "Passwords do not match!" -msgstr "पासवर्ड मेल नहीं खाते" - -msgid "No matching entries found" -msgstr "" - -msgid "Topic or Command" -msgstr "" - -msgid "The topic or command name." -msgstr "" - -msgid "Topic commands:" -msgstr "" - -msgid "To get command help, use:" -msgstr "" - -msgid " ipa --help" -msgstr "" - -msgid "Command name" -msgstr "" - -msgid "Positional arguments" -msgstr "" - -#, python-format -msgid "Same as --%s" -msgstr "" - -msgid "Deprecated options" -msgstr "" - -msgid "No file to read" -msgstr "" - -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - -#, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - -msgid "Filename is empty" -msgstr "" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -msgid "invalid domain name" -msgstr "" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "incorrect type" -msgstr "गलत प्रकार" +msgid "No credentials cache found" +msgstr "कैश क्रेडेंशियल्स नहीं मिली" msgid "Only one value is allowed" msgstr "केवल एक मान की अनुमति है" -msgid "this option is deprecated" -msgstr "" +msgid "Passwords do not match" +msgstr "पासवर्ड मेल नहीं खाते" + +msgid "Passwords do not match!" +msgstr "पासवर्ड मेल नहीं खाते" + +msgid "This command requires root access" +msgstr "इस आदेश को रूट मूल अभिगम की आवश्यकता है" + +msgid "This is already a posix group" +msgstr "यह पहले से ही एक पोसिक्स समूह है" + +msgid "Ticket expired" +msgstr "टिकट समाप्त" + +msgid "an internal error has occurred" +msgstr "एक आंतरिक त्रुटि हुई है" + +msgid "did not receive Kerberos credentials" +msgstr "कर्बेरॉस क्रेडेंशियल्स प्राप्त नहीं हुआ" + +msgid "incorrect type" +msgstr "गलत प्रकार" msgid "must be True or False" msgstr "सही या गलत होना चाहिए" - -msgid "must be an integer" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -msgid "must be a decimal number" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -msgid "must be binary data" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -msgid "must be a certificate" -msgstr "" - -msgid "must be a certificate signing request" -msgstr "" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "" - -msgid "Leading and trailing spaces are not allowed" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "" - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "" - -#, python-format -msgid "must be '%(value)s'" -msgstr "" - -#, fuzzy, python-format -msgid "must be one of %(values)s" -msgstr "सही या गलत होना चाहिए" - -#, fuzzy -msgid "must be datetime value" -msgstr "सही या गलत होना चाहिए" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -msgid "must be DNS name" -msgstr "" - -msgid "must be absolute" -msgstr "" - -#, fuzzy -msgid "must be relative" -msgstr "सही या गलत होना चाहिए" - -msgid "must be dictionary" -msgstr "" - -msgid "must be Kerberos principal" -msgstr "" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -msgid "Service principal is required" -msgstr "" - -#, fuzzy -msgid "must be at least 0" -msgstr "सही या गलत होना चाहिए" - -msgid "invalid valid hex" -msgstr "" - -msgid "invalid serial number 0" -msgstr "" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "" - -#, python-format -msgid "objectclass %s not found" -msgstr "" - -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "Failed to authenticate to CA REST API" -msgstr "" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "" - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -msgid "Automount Location" -msgstr "" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "" - -msgid "User Group" -msgstr "" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "host groups" -msgstr "" - -msgid "Host Group" -msgstr "" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" - -msgid "hostgroup" -msgstr "" - -msgid "privileged hostgroup" -msgstr "" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "Auto private groups" -msgstr "" - -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "" - -msgid "locations" -msgstr "" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -msgid "Location name" -msgstr "" - -msgid "IPA location name" -msgstr "" - -msgid "IPA Location description" -msgstr "" - -msgid "Servers" -msgstr "" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -msgid "Delete an IPA location." -msgstr "" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -msgid "IPA Server" -msgstr "" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -msgid "netgroups" -msgstr "" - -msgid "Netgroups" -msgstr "" - -msgid "Netgroup" -msgstr "" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" -msgstr "" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" -msgstr "" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "Role" -msgstr "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -msgid "Self Service Permissions" -msgstr "" - -msgid "Self Service Permission" -msgstr "" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "IPA role name" -msgstr "" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -msgid "Subordinate id description" -msgstr "" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -msgid "SubUID range size" -msgstr "" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -msgid "SubGID range size" -msgstr "" - -msgid "Subordinate group ID count" -msgstr "" - -#, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "" - -#, python-format -msgid "'%(dn)s is not a valid user" -msgstr "" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -msgid "Add a new subordinate id." -msgstr "" - -#, python-format -msgid "Added subordinate id \"%(value)s\"" -msgstr "" - -msgid "Delete a subordinate id." -msgstr "" - -#, python-format -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "" - -msgid "Modify a subordinate id." -msgstr "" - -#, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "" - -msgid "Search for subordinate id." -msgstr "" - -#, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a subordinate id." -msgstr "" - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -msgid "sudo command" -msgstr "" - -msgid "sudo commands" -msgstr "" - -msgid "Sudo Commands" -msgstr "" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -msgid "servers" -msgstr "" - -msgid "IPA Servers" -msgstr "" - -msgid "Server location" -msgstr "" - -msgid "Service weight" -msgstr "" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -msgid "Server state" -msgstr "" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -#, fuzzy -msgid "A list of ACI values" -msgstr "LDAP प्रविष्टियों की सूची" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -msgstr "" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -msgid "" -"\n" -"Managed permissions\n" -msgstr "" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "must be enclosed in parentheses" -msgstr "" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, python-format -msgid "Deprecated; use %s" -msgstr "" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, python-format -msgid "Entry %s not found" -msgstr "" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, python-format -msgid "Entry %s does not exist" -msgstr "" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -msgid "Help topic" -msgstr "" - -msgid "Version" -msgstr "" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -msgid "Method name" -msgstr "" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -#, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -msgid "CLI name" -msgstr "" - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "Trust direction" -msgstr "" - -msgid "Trust type" -msgstr "" - -msgid "Trust status" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" - -msgid "trust configuration" -msgstr "" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -msgid "Vault configuration" -msgstr "" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -msgid "Key wrapping algorithm" -msgstr "" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." -msgstr "" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -#, fuzzy -msgid "must be TRUE or FALSE" -msgstr "सही या गलत होना चाहिए" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "Principal alias" -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -msgid "External IdP configuration" -msgstr "" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "Certificate mapping data" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -msgid "Issuer" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -msgid "users cannot be added when user category='all'" -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "" - -#, python-format -msgid "%i services added." -msgstr "" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -msgid "User logins" -msgstr "" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "must be at least 10" -msgstr "" - -msgid "configuration options" -msgstr "" - -msgid "Configuration" -msgstr "" - -msgid "Maximum hostname length" -msgstr "" - -msgid "Enable adding subids to new users" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -msgid "IPA DNS servers" -msgstr "" - -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Setup SID configuration" -msgstr "" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -msgid "Add SIDs" -msgstr "" - -msgid "Add SIDs for existing users and groups" -msgstr "" - -msgid "NetBIOS name of the IPA domain" -msgstr "" - -msgid "Empty domain is not allowed" -msgstr "" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "not allowed to enable SID generation" -msgstr "" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -msgid "Failed to call DBus" -msgstr "" - -msgid "Configuration of SID failed. See details in the error log" -msgstr "" - -msgid "The group doesn't exist" -msgstr "" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, python-format -msgid "%s Record" -msgstr "" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -msgid "Priority (order)" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -#, fuzzy -msgid "Only one zone type is allowed per zone name" -msgstr "केवल एक मान की अनुमति है" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -msgid "Default time to live" -msgstr "" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "" - -msgid "is required" -msgstr "" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -msgid "DNS configuration options" -msgstr "" - -msgid "DNS Global Configuration" -msgstr "" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -msgid "Result of the command" -msgstr "" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "Serial Number" -msgstr "" - -msgid "Serial Number (hex)" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" - -msgid "Invalid URI: not an https scheme" -msgstr "" - -msgid "Invalid URI: missing netloc" -msgstr "" - -msgid "Identity Provider server" -msgstr "" - -msgid "Identity Provider servers" -msgstr "" - -msgid "Identity Provider server name" -msgstr "" - -msgid "Authorization URI" -msgstr "" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -msgid "Token URI" -msgstr "" - -msgid "Token endpoint" -msgstr "" - -msgid "User info URI" -msgstr "" - -msgid "User information endpoint" -msgstr "" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -msgid "Client identifier" -msgstr "" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -msgid "Add a new Identity Provider server." -msgstr "" - -#, python-format -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -msgid "Base URL" -msgstr "" - -msgid "Base URL for IdP provider templates" -msgstr "" - -msgid "unknown provider" -msgstr "" - -msgid "value is missing" -msgstr "" - -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "" - -msgid "Delete an Identity Provider server." -msgstr "" - -#, python-format -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "Modify an Identity Provider server." -msgstr "" - -#, python-format -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "Search for Identity Provider servers." -msgstr "" - -#, python-format -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an Identity Provider server." -msgstr "" - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Apply" -msgstr "" - -msgid "Rebuild auto membership" -msgstr "" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -msgid "Actions" -msgstr "" - -msgid "Add" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -msgid "Direct Membership" -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -msgid "No entries." -msgstr "" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -msgid "Remove" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -msgid "Show Results" -msgstr "" - -msgid "Authentication indicators" -msgstr "" - -msgid "Authentication indicator" -msgstr "" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -msgid "RADIUS" -msgstr "" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "External Identity Provider" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "" - -msgid "Activate" -msgstr "" - -msgid "Add and Add Another" -msgstr "" - -msgid "Add and Close" -msgstr "" - -msgid "Add and Edit" -msgstr "" - -msgid "Add Many" -msgstr "" - -msgid "Back" -msgstr "" - -msgid "Cancel" -msgstr "" - -msgid "Clear" -msgstr "" - -msgid "Clear all fields on the page." -msgstr "" - -msgid "Close" -msgstr "" - -msgid "Disable" -msgstr "" - -msgid "Download" -msgstr "" - -msgid "Download certificate as PEM formatted file." -msgstr "" - -msgid "Edit" -msgstr "" - -msgid "Enable" -msgstr "" - -msgid "Find" -msgstr "" - -msgid "Get" -msgstr "" - -msgid "Hide" -msgstr "" - -msgid "Issue" -msgstr "" - -msgid "Match" -msgstr "" - -msgid "Match users according to certificate." -msgstr "" - -msgid "Migrate" -msgstr "" - -msgid "OK" -msgstr "" - -msgid "Refresh" -msgstr "" - -msgid "Reload current settings from the server." -msgstr "" - -msgid "Delete" -msgstr "" - -msgid "Remove hold" -msgstr "" - -msgid "Reset" -msgstr "" - -msgid "Reset Password" -msgstr "" - -msgid "Reset Password and Log in" -msgstr "" - -msgid "Restore" -msgstr "" - -msgid "Retry" -msgstr "" - -msgid "Revert" -msgstr "" - -msgid "Revoke" -msgstr "" - -msgid "Save" -msgstr "" - -msgid "Set" -msgstr "" - -msgid "Show" -msgstr "" - -msgid "Stage" -msgstr "" - -msgid "Update" -msgstr "" - -msgid "View" -msgstr "" - -msgid "Customization" -msgstr "" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "" - -msgid "Expand All" -msgstr "" - -msgid "General" -msgstr "" - -msgid "Identity Settings" -msgstr "" - -msgid "Record Settings" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -msgid "Back to Top" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -msgid "Add custom value" -msgstr "" - -msgid "Available" -msgstr "" - -msgid "Some operations failed." -msgstr "" - -msgid "Operations Error" -msgstr "" - -msgid "Confirmation" -msgstr "" - -msgid "Custom value" -msgstr "" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -msgid "Unsaved Changes" -msgstr "" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "" - -msgid "Hide details" -msgstr "" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -msgid "Redirection" -msgstr "" - -msgid "Select entries to be removed." -msgstr "" - -msgid "Result" -msgstr "" - -msgid "Show details" -msgstr "" - -msgid "Success" -msgstr "" - -msgid "Validation error" -msgstr "" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, fuzzy, python-brace-format -msgid "An error has occurred (${error})" -msgstr "एक आंतरिक त्रुटि हुई है" - -msgid "HTTP Error" -msgstr "" - -msgid "Internal Error" -msgstr "" - -msgid "IPA Error" -msgstr "" - -msgid "No response" -msgstr "" - -msgid "Unknown Error" -msgstr "" - -msgid "URL" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -msgid "Settings" -msgstr "" - -msgid "Search" -msgstr "" - -msgid "False" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Allowed to create keytab" -msgstr "" - -msgid "Allowed to retrieve keytab" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Add Kerberos Principal Alias" -msgstr "" - -msgid "New kerberos principal alias" -msgstr "" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "" - -msgid "Authenticating" -msgstr "" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -msgid "Kerberos Principal you entered is expired" -msgstr "" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -msgid "Log In Using Certificate" -msgstr "" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "" - -msgid "Synchronizing" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -msgid "number of passwords" -msgstr "" - -msgid "seconds" -msgstr "" - -msgid "Migrating" -msgstr "" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -msgid "Password migration was not successful" -msgstr "" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -msgid "Password migration was successful" -msgstr "" - -msgid "Attribute" -msgstr "" - -msgid "Add delegation" -msgstr "" - -msgid "Remove delegations" -msgstr "" - -msgid "Add permission" -msgstr "" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -msgid "Remove permissions" -msgstr "" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -msgid "Remove privileges" -msgstr "" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -msgid "Role Settings" -msgstr "" - -msgid "Add role" -msgstr "" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -msgid "Remove roles" -msgstr "" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -msgid "Add self service permission" -msgstr "" - -msgid "Remove self service permissions" -msgstr "" - -msgid "Add rule" -msgstr "" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to change default group?" -msgstr "" - -msgid "Default host group" -msgstr "" - -msgid "Default user group" -msgstr "" - -msgid "Exclusive" -msgstr "" - -msgid "Expression" -msgstr "" - -msgid "Host group rule" -msgstr "" - -msgid "Host group rules" -msgstr "" - -msgid "Inclusive" -msgstr "" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -msgid "User group rule" -msgstr "" - -msgid "User group rules" -msgstr "" - -msgid "Add automount key" -msgstr "" - -msgid "Remove automount keys" -msgstr "" - -msgid "Add automount location" -msgstr "" - -msgid "Automount Location Settings" -msgstr "" - -msgid "Remove automount locations" -msgstr "" - -msgid "Add automount map" -msgstr "" - -msgid "Map Type" -msgstr "" - -msgid "Direct" -msgstr "" - -msgid "Indirect" -msgstr "" - -msgid "Remove automount maps" -msgstr "" - -msgid "Add certificate authority" -msgstr "" - -msgid "Remove certificate authorities" -msgstr "" - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -msgid "All" -msgstr "" - -msgid "Any CA" -msgstr "" - -msgid "Any Host" -msgstr "" - -msgid "Any Service" -msgstr "" - -msgid "Any Profile" -msgstr "" - -msgid "Anyone" -msgstr "" - -msgid "Rule status" -msgstr "" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -msgid "Remove CA ACLs" -msgstr "" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -msgid "Specified CAs" -msgstr "" - -msgid "Specified Hosts and Groups" -msgstr "" - -msgid "Specified Profiles" -msgstr "" - -msgid "Specified Services and Groups" -msgstr "" - -msgid "Specified Users and Groups" -msgstr "" - -msgid "Permitted to have certificates issued" -msgstr "" - -msgid "Remove certificate profiles" -msgstr "" - -msgid "AA Compromise" -msgstr "" - -msgid "Add principal" -msgstr "" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" - -msgid "Certificates" -msgstr "" - -msgid "Certificate Hold" -msgstr "" - -msgid "Cessation of Operation" -msgstr "" - -msgid "Common Name" -msgstr "" - -msgid "the certificate with serial number " -msgstr "" - -msgid "Expires On" -msgstr "" - -msgid "Issued on from" -msgstr "" - -msgid "Issued on to" -msgstr "" - -msgid "Maximum serial number" -msgstr "" - -msgid "Minimum serial number" -msgstr "" - -msgid "Revoked on from" -msgstr "" - -msgid "Revoked on to" -msgstr "" - -msgid "Valid not after from" -msgstr "" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -msgid "Fingerprints" -msgstr "" - -msgid "Get Certificate" -msgstr "" - -msgid "Certificate Hold Removed" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -msgid "Issue new certificate" -msgstr "" - -msgid "Issued By" -msgstr "" - -msgid "Issued On" -msgstr "" - -msgid "Issued To" -msgstr "" - -msgid "Key Compromise" -msgstr "" - -msgid "No Valid Certificate" -msgstr "" - -msgid "New Certificate" -msgstr "" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -msgid "Note" -msgstr "" - -msgid "Organizational Unit" -msgstr "" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -msgid "Privilege Withdrawn" -msgstr "" - -msgid "Reason for Revocation" -msgstr "" - -msgid "Remove certificate hold" -msgstr "" - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -msgid "Certificate requested" -msgstr "" - -msgid "Revoke certificate" -msgstr "" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -msgid "Certificate Revoked" -msgstr "" - -msgid "REVOKED" -msgstr "" - -msgid "SHA1 Fingerprint" -msgstr "" - -msgid "SHA256 Fingerprint" -msgstr "" - -msgid "Status" -msgstr "" - -msgid "Superseded" -msgstr "" - -msgid "Unspecified" -msgstr "" - -msgid "Valid Certificate Present" -msgstr "" - -msgid "Valid from" -msgstr "" - -msgid "Valid to" -msgstr "" - -msgid "Validity" -msgstr "" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -msgid "View Certificate" -msgstr "" - -msgid "Certificate Data" -msgstr "" - -msgid "Certificate For Match" -msgstr "" - -msgid "Certificate Mapping Match" -msgstr "" - -msgid "Matched Users" -msgstr "" - -msgid "User Login" -msgstr "" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -msgid "Configuration string" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -msgid "Remove certificate mapping data" -msgstr "" - -msgid "Issuer and subject" -msgstr "" - -msgid "Remove certificate identity mapping rules" -msgstr "" - -msgid "Group Options" -msgstr "" - -msgid "Search Options" -msgstr "" - -msgid "SELinux Options" -msgstr "" - -msgid "Server Options" -msgstr "" - -msgid "Service Options" -msgstr "" - -msgid "User Options" -msgstr "" - -msgid "Forward first" -msgstr "" - -msgid "Forwarding disabled" -msgstr "" - -msgid "Forward only" -msgstr "" - -msgid "Options" -msgstr "" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -msgid "Other Record Types" -msgstr "" - -msgid "Address not valid, can't redirect" -msgstr "" - -msgid "Create dns record" -msgstr "" - -msgid "Creating record." -msgstr "" - -msgid "Record creation failed." -msgstr "" - -msgid "Checking if record exists." -msgstr "" - -msgid "Record not found." -msgstr "" - -msgid "Redirection to PTR record" -msgstr "" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -msgid "Target reverse zone not found." -msgstr "" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -msgid "Standard Record Types" -msgstr "" - -msgid "Records for DNS Zone" -msgstr "" - -msgid "Record Type" -msgstr "" - -msgid "Add DNS zone" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -msgid "DNS Zone Settings" -msgstr "" - -msgid "Remove DNS zones" -msgstr "" - -msgid "Remove Permission" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Level" -msgstr "" - -msgid "Set Domain Level" -msgstr "" - -msgid "Add user group" -msgstr "" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -msgid "Group Settings" -msgstr "" - -msgid "External" -msgstr "" - -msgid "Groups" -msgstr "" - -msgid "Group categories" -msgstr "" - -msgid "Change to external group" -msgstr "" - -msgid "Change to POSIX group" -msgstr "" - -msgid "Non-POSIX" -msgstr "" - -msgid "POSIX" -msgstr "" - -msgid "Remove user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -msgid "Group Type" -msgstr "" - -msgid "Add HBAC rule" -msgstr "" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -msgid "Accessing" -msgstr "" - -msgid "Remove HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -msgid "Via Service" -msgstr "" - -msgid "Who" -msgstr "" - -msgid "Add HBAC service" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -msgid "Remove HBAC services" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -msgid "Add HBAC service group" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -msgid "Remove HBAC service groups" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -msgid "Access Denied" -msgstr "" - -msgid "Access Granted" -msgstr "" - -msgid "Include Disabled" -msgstr "" - -msgid "Include Enabled" -msgstr "" - -msgid "HBAC Test" -msgstr "" - -msgid "Matched" -msgstr "" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" - -msgid "Rules" -msgstr "" - -msgid "Run Test" -msgstr "" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -msgid "Unmatched" -msgstr "" - -msgid "Add host" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -msgid "Host Certificate" -msgstr "" - -msgid "Host Name" -msgstr "" - -msgid "Delete Key, Unprovision" -msgstr "" - -msgid "Host Settings" -msgstr "" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -msgid "Generate OTP" -msgstr "" - -msgid "Generated OTP" -msgstr "" - -msgid "Kerberos Key" -msgstr "" - -msgid "Kerberos Key Not Present" -msgstr "" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -msgid "One-Time Password" -msgstr "" - -msgid "One-Time Password Not Present" -msgstr "" - -msgid "One-Time Password Present" -msgstr "" - -msgid "Reset OTP" -msgstr "" - -msgid "Reset One-Time Password" -msgstr "" - -msgid "Set OTP" -msgstr "" - -msgid "OTP set" -msgstr "" - -msgid "Set One-Time Password" -msgstr "" - -msgid "Remove hosts" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -msgid "Unprovision" -msgstr "" - -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -msgid "Add host group" -msgstr "" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -msgid "Host Group Settings" -msgstr "" - -msgid "Remove host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -msgid "Identity provider details" -msgstr "" - -msgid "Verify secret" -msgstr "" - -msgid "User to override" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -msgid "Profile" -msgstr "" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -msgid "Enter trusted group name." -msgstr "" - -msgid "Add ID view" -msgstr "" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -msgid "Apply to host groups" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -msgid "Remove ID views" -msgstr "" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -msgid "Un-apply from host groups" -msgstr "" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -msgid "Un-apply" -msgstr "" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "Add netgroup" -msgstr "" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -msgid "Netgroup Settings" -msgstr "" - -msgid "Remove netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -msgid "Add OTP token" -msgstr "" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -msgid "Configure your token" -msgstr "" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -msgid "OTP Token Settings" -msgstr "" - -msgid "Disable token" -msgstr "" - -msgid "Enable token" -msgstr "" - -msgid "Remove OTP tokens" -msgstr "" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "" - -msgid "Show configuration uri" -msgstr "" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -msgid "Add Custom Attribute" -msgstr "" - -msgid "Permission settings" -msgstr "" - -msgid "Attribute breakdown" -msgstr "" - -msgid "Privilege Settings" -msgstr "" - -msgid "Public key:" -msgstr "" - -msgid "Set public key" -msgstr "" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -msgid "Add password policy" -msgstr "" - -msgid "Password Policy" -msgstr "" - -msgid "Remove password policies" -msgstr "" - -msgid "Add ID range" -msgstr "" - -msgid "Range Settings" -msgstr "" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -msgid "Domain SID" -msgstr "" - -msgid "Secondary RID base" -msgstr "" - -msgid "Remove ID ranges" -msgstr "" - -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -msgid "Detect" -msgstr "" - -msgid "Local domain" -msgstr "" - -msgid "IPA trust" -msgstr "" - -msgid "Active Directory winsync" -msgstr "" - -msgid "Add RADIUS server" -msgstr "" - -msgid "RADIUS Proxy Server Settings" -msgstr "" - -msgid "Remove RADIUS servers" -msgstr "" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -msgid "Force Update" -msgstr "" - -msgid "Add SELinux user map" -msgstr "" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -msgid "Server Roles" -msgstr "" - -msgid "Server Role" -msgstr "" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -msgid "Delete Server" -msgstr "" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -msgid "Add service" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -msgid "Service Certificate" -msgstr "" - -msgid "Service Settings" -msgstr "" - -msgid "Provisioning" -msgstr "" - -msgid "Remove services" -msgstr "" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -msgid "Unprovisioning service" -msgstr "" - -msgid "Service unprovisioned" -msgstr "" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "" - -msgid "SSH public keys" -msgstr "" - -msgid "SSH public key:" -msgstr "" - -msgid "Set SSH key" -msgstr "" - -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" - -msgid "Add stage user" -msgstr "" - -msgid "Stage users" -msgstr "" - -msgid "Preserved users" -msgstr "" - -msgid "Remove preserved users" -msgstr "" - -msgid "Remove stage users" -msgstr "" - -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -msgid "User categories" -msgstr "" - -msgid "Add subid" -msgstr "" - -msgid "Assigned subids" -msgstr "" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -msgid "Add sudo command" -msgstr "" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -msgid "Remove sudo commands" -msgstr "" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -msgid "Add sudo command group" -msgstr "" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -msgid "Remove sudo command groups" -msgstr "" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -msgid "Add sudo rule" -msgstr "" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "" - -msgid "Any Command" -msgstr "" - -msgid "Any Group" -msgstr "" - -msgid "Run Commands" -msgstr "" - -msgid "Deny" -msgstr "" - -msgid "Access this host" -msgstr "" - -msgid "Option added" -msgstr "" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -msgid "Remove sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -msgid "Specified Commands and Groups" -msgstr "" - -msgid "Specified Groups" -msgstr "" - -msgid "Remove sudo options" -msgstr "" - -msgid "Autogenerated" -msgstr "" - -msgid "Segment details" -msgstr "" - -msgid "Replication configuration" -msgstr "" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -msgid "Account" -msgstr "" - -msgid "Add trust" -msgstr "" - -msgid "Administrative account" -msgstr "" - -msgid "SID blocklists" -msgstr "" - -msgid "Trust Settings" -msgstr "" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -msgid "Pre-shared password" -msgstr "" - -msgid "Remove trusts" -msgstr "" - -msgid "Remove domains" -msgstr "" - -msgid "Alternative UPN suffixes" -msgstr "" - -msgid "User attributes for SMB services" -msgstr "" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - -msgid "Account Settings" -msgstr "" - -msgid "Account Status" -msgstr "" - -msgid "Active users" -msgstr "" - -msgid "Add user" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -msgid "Auto assign subordinate ids" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "" - -msgid "Contact Settings" -msgstr "" - -msgid "Delete mode" -msgstr "" - -msgid "Employee Information" -msgstr "" - -msgid "Error changing account status" -msgstr "" - -msgid "Password expiration" -msgstr "" - -msgid "Mailing Address" -msgstr "" - -msgid "Misc. Information" -msgstr "" - -msgid "delete" -msgstr "" - -msgid "preserve" -msgstr "" - -msgid "No private group" -msgstr "" - -msgid "Remove users" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Unlock" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -msgid "Members" -msgstr "" - -msgid "My User Vaults" -msgstr "" - -msgid "Owners" -msgstr "" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -msgid "Service Vaults" -msgstr "" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -msgid "Vault Type" -msgstr "" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -msgid "User Vaults" -msgstr "" - -msgid "Current password is required" -msgstr "" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -msgid "First OTP" -msgstr "" - -msgid "New password is required" -msgstr "" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Password change complete" -msgstr "" - -msgid "Your password has expired. Please enter a new password." -msgstr "" - -#, fuzzy -msgid "Passwords must match" -msgstr "पासवर्ड मेल नहीं खाते" - -msgid "Password reset was not successful." -msgstr "" - -msgid "Reset your password." -msgstr "" - -msgid "Second OTP" -msgstr "" - -msgid "Verify Password" -msgstr "" - -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -msgid "Some entries were not deleted" -msgstr "" - -msgid "Quick Links" -msgstr "" - -msgid "Select All" -msgstr "" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -msgid "Unselect All" -msgstr "" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "" - -msgid "Audit" -msgstr "" - -msgid "Authentication" -msgstr "" - -msgid "Automount" -msgstr "" - -msgid "DNS" -msgstr "" - -msgid "Host-Based Access Control" -msgstr "" - -msgid "Identity" -msgstr "" - -msgid "Network Services" -msgstr "" - -msgid "Policy" -msgstr "" - -msgid "Role-Based Access Control" -msgstr "" - -msgid "Subordinate IDs" -msgstr "" - -msgid "Sudo" -msgstr "" - -msgid "Topology" -msgstr "" - -msgid "True" -msgstr "" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -msgid "First" -msgstr "" - -msgid "Last" -msgstr "" - -msgid "Next" -msgstr "" - -msgid "Page" -msgstr "" - -msgid "Prev" -msgstr "" - -msgid "Undo" -msgstr "" - -msgid "Undo this change." -msgstr "" - -msgid "Undo All" -msgstr "" - -msgid "Undo all changes in this field." -msgstr "" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -msgid "Must be a decimal number" -msgstr "" - -msgid "Format error" -msgstr "" - -msgid "Must be an integer" -msgstr "" - -msgid "Not a valid IP address" -msgstr "" - -msgid "Not a valid IPv4 address" -msgstr "" - -msgid "Not a valid IPv6 address" -msgstr "" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -msgid "Parse error" -msgstr "" - -msgid "Must be a positive number" -msgstr "" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -msgid "Required field" -msgstr "" - -msgid "Unsupported value" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -msgid "IdP max life" -msgstr "" - -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "" - -msgid "IdP max renew" -msgstr "" - -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -msgid "password policy" -msgstr "" - -msgid "password policies" -msgstr "" - -msgid "Password Policies" -msgstr "" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "Grace login limit" -msgstr "" - -msgid "Number of LDAP authentications allowed after expiration" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -msgid "service" -msgstr "" - -msgid "services" -msgstr "" - -msgid "Service principal alias" -msgstr "" - -msgid "Base-64 encoded service certificate" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." -msgstr "" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -msgid "Add a new SMB service." -msgstr "" - -msgid "SMB service NetBIOS name" -msgstr "" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a service" -msgstr "" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -msgid "Certificate Authority" -msgstr "" - -msgid "Certificate Authorities" -msgstr "" - -msgid "Name for referencing the CA" -msgstr "" - -msgid "Description of the purpose of the CA" -msgstr "" - -msgid "Authority ID" -msgstr "" - -msgid "Dogtag Authority ID" -msgstr "" - -msgid "Subject DN" -msgstr "" - -msgid "Subject Distinguished Name" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Issuer Distinguished Name" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "RSN Version" -msgstr "" - -msgid "Random Serial Number Version" -msgstr "" - -msgid "Search for CAs." -msgstr "" - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "Display the properties of a CA." -msgstr "" - -msgid "Create a CA." -msgstr "" - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -msgid "Modify CA configuration." -msgstr "" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "" - -msgid "IPA CA cannot be disabled" -msgstr "" - -msgid "Enable a CA." -msgstr "" - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Subject email address" -msgstr "" - -msgid "Subject DNS name" -msgstr "" - -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -msgid "Subject URI" -msgstr "" - -msgid "Subject IP Address" -msgstr "" - -msgid "Subject OID" -msgstr "" - -msgid "Subject UPN" -msgstr "" - -msgid "Subject Kerberos principal name" -msgstr "" - -msgid "Subject Other Name" -msgstr "" - -msgid "Serial number (hex)" -msgstr "" - -msgid "Request status" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Status of the certificate" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -msgid "command" -msgstr "" - -msgid "commands" -msgstr "" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -msgid "runAs groups" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Preserved user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -msgid "Password grace count" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" -msgstr "" - -msgid "Request must be a dict" -msgstr "" - -msgid "Request is missing \"method\"" -msgstr "" - -msgid "Request is missing \"params\"" -msgstr "" - -msgid "params must be a list" -msgstr "" - -msgid "params must contain [args, options]" -msgstr "" - -msgid "params[0] (aka args) must be a list" -msgstr "" - -msgid "params[1] (aka options) must be a dict" -msgstr "" - -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" - -msgid "CIFS server denied your credentials" -msgstr "" - -msgid "communication with CIFS server was unsuccessful" -msgstr "" - -msgid "AD domain controller" -msgstr "" - -msgid "unsupported functional level" -msgstr "" - -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" - -msgid "Cannot find specified domain or server name" -msgstr "" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" - -msgid "At least the domain or IP address should be specified" -msgstr "" - -#, python-format -msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" -msgstr "" - -msgid "no trusted domain is configured" -msgstr "" - -msgid "domain is not configured" -msgstr "" - -msgid "SID is not valid" -msgstr "" - -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "" - -msgid "SID does not match any trusted domain" -msgstr "" - -msgid "Trust setup" -msgstr "" - -msgid "Our domain is not configured" -msgstr "" - -msgid "No trusted domain is not configured" -msgstr "" - -msgid "trusted domain object" -msgstr "" - -msgid "domain is not trusted" -msgstr "" - -msgid "no trusted domain matched the specified flat name" -msgstr "" - -msgid "trusted domain object not found" -msgstr "" - -msgid "Object does not belong to a trusted domain" -msgstr "" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "" - -msgid "Ambiguous search, user domain was not specified" -msgstr "" - -msgid "Trusted domain did not return a unique object" -msgstr "" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "" - -msgid "trusted domain user not found" -msgstr "" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "" - -msgid "CIFS credentials object" -msgstr "" - -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "" - -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" - -#, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" - -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" - -msgid "Credentials" -msgstr "" - -msgid "Missing credentials for cross-forest communication" -msgstr "" - -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" - -#, python-format -msgid "must equal %r" -msgstr "" - -msgid "Hello world" -msgstr "" - -#, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "" - -msgid "must be at least 1" -msgstr "" - -msgid "Out of memory\n" -msgstr "" - -msgid "Warning unrecognized encryption type.\n" -msgstr "" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -msgid "Out of memory!?\n" -msgstr "" - -msgid "Enctype comparison failed!\n" -msgstr "" - -#, fuzzy -msgid "Password is too long!\n" -msgstr "पासवर्ड मेल नहीं खाते" - -msgid "Failed to create random key!\n" -msgstr "" - -msgid "Failed to create key!\n" -msgstr "" - -msgid "Bad or unsupported salt type.\n" -msgstr "" - -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" diff --git a/po/hu.po b/po/hu.po index c991b1489..8b99d4626 100644 --- a/po/hu.po +++ b/po/hu.po @@ -18,6095 +18,65 @@ msgstr "" "Plural-Forms: nplurals=2; plural=n != 1;\n" "X-Generator: Weblate 4.4\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" +msgid "A group may not be a member of itself" +msgstr "Egy csoport nem lehet tagja önmagának" -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" +msgid "A list of LDAP entries" +msgstr "LDAP-bejegyzések listája" -#, c-format -msgid "out of memory\n" -msgstr "" +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "A %(value)s szolgáltatás hozzáadva" -#, c-format -msgid "read error\n" -msgstr "" +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Base64 kicsomagolás sikertelen: %(reason)s" -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -#, fuzzy -msgid "Realm name" -msgstr "Szabály neve" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, c-format -msgid "Out of memory \n" -msgstr "" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -msgid "SASL Bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Out of Memory!\n" -msgstr "" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, c-format -msgid "Passwords do not match!\n" -msgstr "A jelszavak nem egyeznek!\n" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Output debug info" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -#, fuzzy -msgid "Server Name" -msgstr "Szolgáltatás neve" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -#, fuzzy -msgid "LDAP DN" -msgstr "LDAP URI" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -msgid "LDAP password" -msgstr "" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -msgid "Path to the IPA CA certificate" -msgstr "" - -#, fuzzy -msgid "IPA CA certificate" +msgid "Certificate" msgstr "Tanúsítvány" -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -msgid "Enter LDAP password" -msgstr "" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" - -#, c-format -msgid "Discovered server %s\n" -msgstr "" - -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Using provided server %s\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -msgid "New Principal Password" -msgstr "" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Out of memory!\n" -msgstr "" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "" - -#, c-format -msgid "Out of memory!" -msgstr "" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "" - -#, c-format -msgid "No values for %s" -msgstr "" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Host is already joined.\n" -msgstr "" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" - -#, c-format -msgid "json_dumps() failed\n" -msgstr "" - -#, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "" - -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" - -#, c-format -msgid "fork() failed\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "" - -#, c-format -msgid "child exited with %d\n" -msgstr "" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "" - -msgid "Quiet mode. Only errors are displayed." -msgstr "" - -msgid "Unenroll this host from IPA server" -msgstr "" - -msgid "Hostname of this server" -msgstr "" - -msgid "hostname" -msgstr "" - -msgid "IPA Server to use" -msgstr "" - -msgid "Specifies where to store keytab information." -msgstr "" - -#, fuzzy -msgid "filename" -msgstr "Szabály neve" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" - -msgid "LDAP password (if not using Kerberos)" -msgstr "" - -msgid "password" -msgstr "" - -msgid "LDAP basedn" -msgstr "" - -msgid "basedn" -msgstr "" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "" - -msgid "Failed to add" -msgstr "" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" - -#, fuzzy -msgid "Unrevoked" -msgstr "Visszavont" - -msgid "Error" -msgstr "" - -#, fuzzy -msgid "Input filename" -msgstr "Szabály neve" - -msgid "File to load the certificate from." -msgstr "" - -msgid "cannot specify both raw certificate and file" -msgstr "" - -msgid "Input file" -msgstr "" - -msgid "File to load the certificate from" -msgstr "" - #, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "" +msgid "Certificate format error: %(error)s" +msgstr "Tanúsítványhiba: %(error)s" -msgid "Split DNS record to parts" -msgstr "" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" - -msgid "DNS resource record type" -msgstr "" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" - -msgid "No option to modify specific record provided." -msgstr "" - -msgid "Current DNS record contents:\n" -msgstr "" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -msgid "No option to delete specific record provided." -msgstr "" - -msgid "Delete all?" -msgstr "" - -#, fuzzy, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Server will check DNS forwarder(s)." -msgstr "" - -msgid "This may take some time, please wait ..." -msgstr "" - -msgid "DNS forwarder" -msgstr "" - -msgid "file to store DNS records in nsupdate format" -msgstr "" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -msgid "Delete a user" -msgstr "" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - -msgid "maps not connected to /etc/auto.master:" -msgstr "" - -msgid "Import automount files for a specific location." -msgstr "" - -msgid "Master file" -msgstr "" - -msgid "Automount master file." -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" - -#, python-format -msgid "File %(file)s not found" -msgstr "" - -#, python-format -msgid "key %(key)s already exists" -msgstr "" - -#, python-format -msgid "map %(map)s already exists" -msgstr "" - -msgid "Imported maps:" -msgstr "" - -#, python-format -msgid "Added %(map)s" -msgstr "" - -msgid "Imported keys:" -msgstr "" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "" - -msgid "Ignored keys:" -msgstr "" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "" - -msgid "Duplicate maps skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(map)s" -msgstr "" - -msgid "Duplicate keys skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(key)s" -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -msgid "User ID" -msgstr "" - -msgid "Password" -msgstr "" - -msgid "First Code" -msgstr "" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "" - -msgid "Invalid credentials" -msgstr "" - -msgid "Create a new vault." -msgstr "" - -msgid "Vault password" -msgstr "" - -msgid "File containing the vault password" -msgstr "" - -msgid "File containing the vault public key" -msgstr "" - -msgid "Password can be specified only for symmetric vault" -msgstr "" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "" - -msgid "Password specified multiple times" -msgstr "" - -msgid "Public key specified multiple times" -msgstr "" - -msgid "Missing vault public key" -msgstr "" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "" - -msgid "Modify a vault." -msgstr "" - -msgid "Change password" -msgstr "" - -msgid "Old vault password" -msgstr "" - -msgid "File containing the old vault password" -msgstr "" - -msgid "New vault password" -msgstr "" - -msgid "File containing the new vault password" -msgstr "" - -msgid "Old vault private key" -msgstr "" - -msgid "File containing the old vault private key" -msgstr "" - -msgid "File containing the new vault public key" -msgstr "" - -msgid "New public key specified multiple times" -msgstr "" - -msgid "Missing new vault public key" -msgstr "" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "" - -msgid "Binary data to archive" -msgstr "" - -msgid "File containing data to archive" -msgstr "" - -msgid "Override existing password" -msgstr "" - -msgid "Input data specified multiple times" -msgstr "" - -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" - -msgid "Invalid vault type" -msgstr "" - -msgid "Retrieve a data from a vault." -msgstr "" - -msgid "File to store retrieved data" -msgstr "" - -msgid "Vault private key" -msgstr "" - -msgid "File containing the vault private key" -msgstr "" - -msgid "Data" -msgstr "" - -msgid "Private key specified multiple times" -msgstr "" - -msgid "Missing vault private key" -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "ACI name" -msgstr "" - -#, fuzzy -msgid "Permission" -msgstr "Jogosultságok" - -msgid "Permission ACI grants access to" -msgstr "" - -msgid "User group" -msgstr "Felhasználói csport" - -msgid "User group ACI grants access to" -msgstr "" - -msgid "Permissions" -msgstr "Jogosultságok" - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Attributes to which the permission applies" -msgstr "" - -msgid "Attributes" -msgstr "" - -msgid "Type" -msgstr "" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" - -msgid "Member of" -msgstr "" - -msgid "Member of a group" -msgstr "" - -msgid "Filter" -msgstr "" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "" - -msgid "Subtree" -msgstr "" - -msgid "Subtree to apply ACI to" -msgstr "" - -msgid "Target group" -msgstr "Célcsoport" - -msgid "Group to apply ACI to" -msgstr "" - -msgid "Target your own entry (self)" -msgstr "" - -msgid "Apply ACI to your own entry (self)" -msgstr "" - -msgid "Create new ACI." -msgstr "" - -msgid "ACI prefix" -msgstr "" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" - -msgid "Test the ACI syntax but don't write anything" -msgstr "" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" - -msgid "User-friendly description of action performed" -msgstr "" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" - -msgid "Delete ACI." -msgstr "" - -msgid "True means the operation was successful" -msgstr "" - -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" - -msgid "A string searched in all relevant object attributes" -msgstr "" - -msgid "Primary key only" -msgstr "" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" - -msgid "Number of entries returned" -msgstr "" - -msgid "True if not all results were returned" -msgstr "" - -msgid "Modify ACI." -msgstr "" - -msgid "Rename an ACI." -msgstr "" - -msgid "New ACI name" -msgstr "" - -msgid "Display a single ACI given an ACI name." -msgstr "" - -msgid "Location of the ACI" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Description" -msgstr "Leírás" - -msgid "A description of this auto member rule" -msgstr "" - -#, fuzzy -msgid "Default (fallback) Group" -msgstr "Alapértelmezett csoport" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "List of deletions that failed" -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Users" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Hosts" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" - -msgid "Key" -msgstr "" - -msgid "Automount key name." -msgstr "" - -msgid "Mount information" -msgstr "" - -#, fuzzy -msgid "description" -msgstr "Leírás" - -msgid "Location" -msgstr "" - -msgid "Automount location name." -msgstr "" - -msgid "Map" -msgstr "" - -msgid "Automount map name." -msgstr "" - -msgid "Create a new automount key." -msgstr "" - -msgid "Delete an automount key." -msgstr "" - -msgid "Continuous mode: Don't stop on errors." -msgstr "" - -msgid "Search for an automount key." -msgstr "" - -msgid "Time Limit" -msgstr "" - -msgid "Time limit of search in seconds" -msgstr "" - -msgid "Size Limit" -msgstr "" - -msgid "Maximum number of entries returned" -msgstr "" - -msgid "Modify an automount key." -msgstr "" - -msgid "New mount information" -msgstr "" - -#, fuzzy -msgid "Rename" -msgstr "Szabály neve" - -msgid "Rename the automount key object" -msgstr "" - -msgid "Display an automount key." -msgstr "" - -msgid "Create a new automount location." -msgstr "" - -msgid "Delete an automount location." -msgstr "" - -msgid "Search for an automount location." -msgstr "" - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" - -msgid "Display an automount location." -msgstr "" - -msgid "Generate automount files for a specific location." -msgstr "" - -msgid "Create a new automount map." -msgstr "" - -msgid "Create a new indirect mount point." -msgstr "" - -msgid "Mount point" -msgstr "" - -msgid "Parent map" -msgstr "" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" - -msgid "Delete an automount map." -msgstr "" - -msgid "Search for an automount map." -msgstr "" - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" - -msgid "Modify an automount map." -msgstr "" - -msgid "Display an automount map." -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" - -msgid "Nested Methods to execute" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason" -msgstr "Ok" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -#, fuzzy -msgid "minimum serial number" -msgstr "Sorozatszám" - -#, fuzzy -msgid "maximum serial number" -msgstr "Sorozatszám" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "Sorozatszám" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Principal" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Dictionary mapping variable name to value" -msgstr "" - -#, fuzzy -msgid "Revoke a certificate." -msgstr "Tanúsítvány" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "Igénylés azonosítója" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "Maximum username length" -msgstr "" - -msgid "Home directory base" -msgstr "" - -msgid "Default location of home directories" -msgstr "" +msgid "Character classes" +msgstr "Karakterosztályok" msgid "Default shell" msgstr "Alapértelmezett shell" -#, fuzzy -msgid "Default shell for new users" -msgstr "Alapértelmezett shell" - msgid "Default users group" msgstr "Alapértelmezett csoport" -msgid "Default group for new users" -msgstr "" +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "A %(value)s szolgáltatás eltávolítva" -msgid "Default e-mail domain" -msgstr "" - -msgid "Search time limit" -msgstr "" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" - -msgid "Search size limit" -msgstr "" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "" - -msgid "User search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" - -msgid "Group search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" - -msgid "Enable migration mode" -msgstr "" - -#, fuzzy -msgid "Certificate Subject base" -msgstr "Tanúsítvány" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "" - -msgid "Default group objectclasses" -msgstr "" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "" - -#, fuzzy -msgid "Default user objectclasses" -msgstr "Alapértelmezett csoport" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" - -msgid "Password Expiration Notification (days)" -msgstr "" - -msgid "Number of days's notice of impending password expiration" -msgstr "" - -msgid "Password plugin features" -msgstr "" - -msgid "Extra hashes to generate in password plug-in" -msgstr "" - -msgid "SELinux user map order" -msgstr "" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" - -#, fuzzy -msgid "Default SELinux user" -msgstr "Alapértelmezett csoport" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" - -#, fuzzy -msgid "Default PAC types" -msgstr "Alapértelmezett shell" - -msgid "Default types of PAC supported for services" -msgstr "" - -msgid "Default user authentication types" -msgstr "" - -msgid "Default types of supported user authentication" -msgstr "" - -msgid "Modify configuration options." -msgstr "" - -msgid "Show the current configuration." -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "Delegation name" -msgstr "" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "" - -msgid "Attributes to which the delegation applies" -msgstr "" - -#, fuzzy -msgid "Member user group" -msgstr "Felhasználói csport" - -msgid "User group to apply delegation to" -msgstr "" - -msgid "Add a new delegation." -msgstr "" - -msgid "Delete a delegation." -msgstr "" - -msgid "Search for delegations." -msgstr "" - -msgid "Modify a delegation." -msgstr "" - -msgid "Display information about a delegation." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "Global forwarders" -msgstr "" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Forward policy" -msgstr "" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" - -msgid "Allow PTR sync" -msgstr "" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" - -msgid "Zone refresh interval" -msgstr "" - -#, fuzzy -msgid "Zone name" -msgstr "Zóna neve (FQDN)" - -msgid "Zone name (FQDN)" -msgstr "Zóna neve (FQDN)" - -msgid "Reverse zone IP network" -msgstr "" - -msgid "IP network to create reverse zone name from" -msgstr "" - -msgid "Active zone" -msgstr "" - -msgid "Is zone active?" -msgstr "" - -msgid "Zone forwarders" -msgstr "" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -#, fuzzy -msgid "Record name" -msgstr "Szabály neve" - -msgid "Time to live" -msgstr "" - -msgid "Records" -msgstr "" - -msgid "Record type" -msgstr "" - -msgid "Record data" -msgstr "" - -msgid "A record" -msgstr "" - -msgid "Raw A records" -msgstr "" - -msgid "A IP Address" -msgstr "" - -msgid "IP Address" -msgstr "" - -msgid "A Create reverse" -msgstr "" - -msgid "Create reverse record for this IP Address" -msgstr "" - -msgid "AAAA record" -msgstr "" - -msgid "Raw AAAA records" -msgstr "" - -msgid "AAAA IP Address" -msgstr "" - -msgid "AAAA Create reverse" -msgstr "" - -msgid "A6 record" -msgstr "" - -msgid "Raw A6 records" -msgstr "" - -msgid "A6 Record data" -msgstr "" - -msgid "AFSDB record" -msgstr "" - -msgid "Raw AFSDB records" -msgstr "" - -msgid "AFSDB Subtype" -msgstr "" - -msgid "Subtype" -msgstr "" - -msgid "AFSDB Hostname" -msgstr "" - -msgid "Hostname" -msgstr "" - -msgid "APL record" -msgstr "" - -msgid "Raw APL records" -msgstr "" - -msgid "CERT record" -msgstr "" - -msgid "Raw CERT records" -msgstr "" - -#, fuzzy -msgid "CERT Certificate Type" -msgstr "Tanúsítvány" - -#, fuzzy -msgid "Certificate Type" -msgstr "Tanúsítvány" - -msgid "CERT Key Tag" -msgstr "" - -msgid "Key Tag" -msgstr "" - -msgid "CERT Algorithm" -msgstr "" - -msgid "Algorithm" -msgstr "" - -#, fuzzy -msgid "CERT Certificate/CRL" -msgstr "Tanúsítvány" - -#, fuzzy -msgid "Certificate/CRL" -msgstr "Tanúsítvány" - -msgid "CNAME record" -msgstr "" - -msgid "Raw CNAME records" -msgstr "" - -msgid "CNAME Hostname" -msgstr "" - -msgid "A hostname which this alias hostname points to" -msgstr "" - -msgid "DHCID record" -msgstr "" - -msgid "Raw DHCID records" -msgstr "" - -msgid "DLV record" -msgstr "" - -msgid "Raw DLV records" -msgstr "" - -msgid "DLV Key Tag" -msgstr "" - -msgid "DLV Algorithm" -msgstr "" - -msgid "DLV Digest Type" -msgstr "" - -msgid "Digest Type" -msgstr "" - -msgid "DLV Digest" -msgstr "" - -msgid "Digest" -msgstr "" - -msgid "DNAME record" -msgstr "" - -msgid "Raw DNAME records" -msgstr "" - -msgid "DNAME Target" -msgstr "" - -#, fuzzy -msgid "Target" -msgstr "Célcsoport" - -msgid "DNSKEY record" -msgstr "" - -msgid "Raw DNSKEY records" -msgstr "" - -msgid "DS record" -msgstr "" - -msgid "Raw DS records" -msgstr "" - -msgid "DS Key Tag" -msgstr "" - -msgid "DS Algorithm" -msgstr "" - -msgid "DS Digest Type" -msgstr "" - -msgid "DS Digest" -msgstr "" - -msgid "HIP record" -msgstr "" - -msgid "Raw HIP records" -msgstr "" - -msgid "IPSECKEY record" -msgstr "" - -msgid "Raw IPSECKEY records" -msgstr "" - -msgid "KEY record" -msgstr "" - -msgid "Raw KEY records" -msgstr "" - -msgid "KX record" -msgstr "" - -msgid "Raw KX records" -msgstr "" - -msgid "KX Preference" -msgstr "" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" - -msgid "KX Exchanger" -msgstr "" - -msgid "A host willing to act as a key exchanger" -msgstr "" - -msgid "LOC record" -msgstr "" - -msgid "Raw LOC records" -msgstr "" - -msgid "LOC Degrees Latitude" -msgstr "" - -msgid "Degrees Latitude" -msgstr "" - -msgid "LOC Minutes Latitude" -msgstr "" - -msgid "Minutes Latitude" -msgstr "" - -msgid "LOC Seconds Latitude" -msgstr "" - -msgid "Seconds Latitude" -msgstr "" - -msgid "LOC Direction Latitude" -msgstr "" - -msgid "Direction Latitude" -msgstr "" - -msgid "LOC Degrees Longitude" -msgstr "" - -msgid "Degrees Longitude" -msgstr "" - -msgid "LOC Minutes Longitude" -msgstr "" - -msgid "Minutes Longitude" -msgstr "" - -msgid "LOC Seconds Longitude" -msgstr "" - -msgid "Seconds Longitude" -msgstr "" - -msgid "LOC Direction Longitude" -msgstr "" - -msgid "Direction Longitude" -msgstr "" - -msgid "LOC Altitude" -msgstr "" - -msgid "Altitude" -msgstr "" - -msgid "LOC Size" -msgstr "" - -msgid "Size" -msgstr "" - -msgid "LOC Horizontal Precision" -msgstr "" - -msgid "Horizontal Precision" -msgstr "" - -msgid "LOC Vertical Precision" -msgstr "" - -msgid "Vertical Precision" -msgstr "" - -msgid "MX record" -msgstr "" - -msgid "Raw MX records" -msgstr "" - -msgid "MX Preference" -msgstr "" - -msgid "MX Exchanger" -msgstr "" - -msgid "A host willing to act as a mail exchanger" -msgstr "" - -msgid "NAPTR record" -msgstr "" - -msgid "Raw NAPTR records" -msgstr "" - -msgid "NAPTR Order" -msgstr "" - -msgid "Order" -msgstr "" - -msgid "NAPTR Preference" -msgstr "" - -msgid "Preference" -msgstr "" - -msgid "NAPTR Flags" -msgstr "" - -msgid "Flags" -msgstr "" - -#, fuzzy -msgid "NAPTR Service" -msgstr "Szolgáltatások" - -#, fuzzy -msgid "Service" -msgstr "Szolgáltatások" - -msgid "NAPTR Regular Expression" -msgstr "" - -msgid "Regular Expression" -msgstr "" - -msgid "NAPTR Replacement" -msgstr "" - -msgid "Replacement" -msgstr "" - -msgid "NS record" -msgstr "" - -msgid "Raw NS records" -msgstr "" - -msgid "NS Hostname" -msgstr "" - -msgid "NSEC record" -msgstr "" - -msgid "Raw NSEC records" -msgstr "" - -msgid "NSEC3 record" -msgstr "" - -msgid "Raw NSEC3 records" -msgstr "" - -msgid "PTR record" -msgstr "" - -msgid "Raw PTR records" -msgstr "" - -msgid "PTR Hostname" -msgstr "" - -msgid "The hostname this reverse record points to" -msgstr "" - -msgid "RRSIG record" -msgstr "" - -msgid "Raw RRSIG records" -msgstr "" - -msgid "RP record" -msgstr "" - -msgid "Raw RP records" -msgstr "" - -msgid "SIG record" -msgstr "" - -msgid "Raw SIG records" -msgstr "" - -msgid "SPF record" -msgstr "" - -msgid "Raw SPF records" -msgstr "" - -msgid "SRV record" -msgstr "" - -msgid "Raw SRV records" -msgstr "" - -msgid "SRV Priority" -msgstr "" - -msgid "Priority" -msgstr "" - -msgid "SRV Weight" -msgstr "" - -msgid "Weight" -msgstr "" - -msgid "SRV Port" -msgstr "" - -msgid "Port" -msgstr "" - -msgid "SRV Target" -msgstr "" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" - -msgid "SSHFP record" -msgstr "" - -msgid "Raw SSHFP records" -msgstr "" - -msgid "SSHFP Algorithm" -msgstr "" - -#, fuzzy -msgid "SSHFP Fingerprint Type" -msgstr "Ujjlenyomat (SHA1)" - -#, fuzzy -msgid "Fingerprint Type" -msgstr "Ujjlenyomat (SHA1)" - -#, fuzzy -msgid "SSHFP Fingerprint" -msgstr "Ujjlenyomat (SHA1)" - -#, fuzzy -msgid "Fingerprint" -msgstr "Ujjlenyomat (SHA1)" - -msgid "TA record" -msgstr "" - -msgid "Raw TA records" -msgstr "" - -msgid "TLSA record" -msgstr "" - -msgid "Raw TLSA records" -msgstr "" - -#, fuzzy -msgid "TLSA Certificate Usage" -msgstr "Tanúsítvány" - -#, fuzzy -msgid "Certificate Usage" -msgstr "Tanúsítvány" - -msgid "TLSA Selector" -msgstr "" - -msgid "Selector" -msgstr "" - -msgid "TLSA Matching Type" -msgstr "" - -msgid "Matching Type" -msgstr "" - -msgid "TLSA Certificate Association Data" -msgstr "" - -msgid "Certificate Association Data" -msgstr "" - -msgid "TKEY record" -msgstr "" - -msgid "Raw TKEY records" -msgstr "" - -msgid "TSIG record" -msgstr "" - -msgid "Raw TSIG records" -msgstr "" - -msgid "TXT record" -msgstr "" - -msgid "Raw TXT records" -msgstr "" - -msgid "TXT Text Data" -msgstr "" - -msgid "Text Data" -msgstr "" - -msgid "Authoritative nameserver" -msgstr "" - -msgid "Authoritative nameserver domain name" -msgstr "" - -msgid "Administrator e-mail address" -msgstr "" - -msgid "SOA serial" -msgstr "SOA sorozatszám" - -#, fuzzy -msgid "SOA record serial number" -msgstr "Sorozatszám" - -msgid "SOA refresh" -msgstr "" - -msgid "SOA record refresh time" -msgstr "" - -#, fuzzy -msgid "SOA retry" -msgstr "SOA sorozatszám" - -msgid "SOA record retry time" -msgstr "" - -#, fuzzy -msgid "SOA expire" -msgstr "SOA sorozatszám" - -msgid "SOA record expire time" -msgstr "" - -msgid "SOA minimum" -msgstr "" - -msgid "How long should negative responses be cached" -msgstr "" - -msgid "Time to live for records at zone apex" -msgstr "" - -msgid "BIND update policy" -msgstr "" - -msgid "Dynamic update" -msgstr "" - -msgid "Allow dynamic updates." -msgstr "" - -msgid "Allow query" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" - -msgid "Allow transfer" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" - -msgid "Allow in-line DNSSEC signing" -msgstr "" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "" - -msgid "NSEC3PARAM record" -msgstr "" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" - -msgid "Resolve a host name in DNS." -msgstr "" - -msgid "Modify global DNS configuration." -msgstr "" - -msgid "Show the current global DNS configuration." -msgstr "" - -msgid "Create new DNS forward zone." -msgstr "" - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" - -#, fuzzy -msgid "Permission value" -msgstr "Jogosultságok" - -msgid "Delete DNS forward zone." -msgstr "" - -msgid "Disable DNS Forward Zone." -msgstr "" - -msgid "Enable DNS Forward Zone." -msgstr "" - -msgid "Search for DNS forward zones." -msgstr "" - -msgid "Modify DNS forward zone." -msgstr "" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" - -msgid "Display information about a DNS forward zone." -msgstr "" - -msgid "Add new DNS resource record." -msgstr "" - -msgid "Force" -msgstr "" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "" - -msgid "Structured" -msgstr "" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" - -msgid "Delete DNS resource record." -msgstr "" - -msgid "Delete all associated records" -msgstr "" - -msgid "Delete DNS record entry." -msgstr "" - -msgid "Search for DNS resources." -msgstr "" - -msgid "Modify a DNS resource record." -msgstr "" - -msgid "Rename the DNS resource record object" -msgstr "" - -msgid "Display DNS resource." -msgstr "" - -msgid "Create new DNS zone (SOA record)." -msgstr "" - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" - -msgid "Add a permission for per-zone access delegation." -msgstr "" - -msgid "Delete DNS zone (SOA record)." -msgstr "" - -msgid "Disable DNS Zone." -msgstr "" - -msgid "Enable DNS Zone." -msgstr "" - -msgid "Search for DNS zones (SOA records)." -msgstr "" - -msgid "Forward zones only" -msgstr "" - -msgid "Search for forward zones only" -msgstr "" - -msgid "Modify DNS zone (SOA record)." -msgstr "" - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" - -msgid "Remove a permission for per-zone access delegation." -msgstr "" - -msgid "Display information about a DNS zone (SOA record)." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -msgid "Group name" -msgstr "Szolgáltatás-csoport neve" - -#, fuzzy -msgid "Group description" +msgid "Description" msgstr "Leírás" +msgid "Fingerprint (SHA1)" +msgstr "Ujjlenyomat (SHA1)" + msgid "GID" msgstr "GID" msgid "GID (use this option to set it manually)" msgstr "GID (kézzel történő beállításhoz)" -msgid "Member users" -msgstr "" - -#, fuzzy -msgid "Member groups" -msgstr "Felhasználói csport" - -#, fuzzy -msgid "Member of groups" -msgstr "Felhasználói csport" - -msgid "Roles" -msgstr "" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - -msgid "Create a new group." -msgstr "" - -#, fuzzy -msgid "Create as a non-POSIX group" -msgstr "POSIX-csoportra módosít" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Suppress processing of membership attributes." -msgstr "" - -msgid "Add members to a group." -msgstr "" - -#, fuzzy -msgid "External member" -msgstr "Sorozatszám" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -#, fuzzy -msgid "member group" -msgstr "Felhasználói csport" - -msgid "groups to add" -msgstr "" - -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - -#, fuzzy -msgid "Delete group." -msgstr "Alapértelmezett csoport" - -msgid "Detach a managed group from a user." -msgstr "" - -#, fuzzy -msgid "Search for groups." -msgstr "Szolgáltatás-csoportok" - -msgid "search for private groups" -msgstr "" - -#, fuzzy -msgid "search for POSIX groups" -msgstr "POSIX-csoportra módosít" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -#, fuzzy -msgid "search for non-POSIX groups" -msgstr "POSIX-csoportra módosít" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "user" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -#, fuzzy -msgid "group" -msgstr "Felhasználói csport" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -#, fuzzy -msgid "netgroup" -msgstr "Célcsoport" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "role" -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "HBAC rule" -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "sudo rule" -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "POSIX-csoportra módosít" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Rule name" -msgstr "Szabály neve" - -#, fuzzy -msgid "Rule type" -msgstr "Szabály neve" - -msgid "Rule type (allow)" -msgstr "" - -#, fuzzy -msgid "User category" -msgstr "Felhasználói csport" - -msgid "User category the rule applies to" -msgstr "" - -msgid "Host category" -msgstr "" - -msgid "Host category the rule applies to" -msgstr "" - -#, fuzzy -msgid "Service category" -msgstr "Szolgáltatás neve" - -msgid "Service category the rule applies to" -msgstr "" - -msgid "Enabled" -msgstr "" - -#, fuzzy -msgid "User Groups" -msgstr "Felhasználói csport" - -msgid "Host Groups" -msgstr "" - -msgid "Services" -msgstr "Szolgáltatások" - -msgid "Service Groups" -msgstr "Szolgáltatás-csoportok" - -msgid "External host" -msgstr "" - -msgid "Create a new HBAC rule." -msgstr "" - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "member host" -msgstr "" - -msgid "hosts to add" -msgstr "" - -msgid "member host group" -msgstr "" - -msgid "host groups to add" -msgstr "" - -msgid "Add services to an HBAC rule." -msgstr "" - -msgid "member HBAC service" -msgstr "" - -#, fuzzy -msgid "HBAC services to add" -msgstr "HBAC szolgáltatás-csoport leírása" - -#, fuzzy -msgid "member HBAC service group" -msgstr "HBAC szolgáltatás-csoport leírása" - -#, fuzzy -msgid "HBAC service groups to add" -msgstr "HBAC szolgáltatás-csoport leírása" - -msgid "Add users and groups to an HBAC rule." -msgstr "" - -msgid "Delete an HBAC rule." -msgstr "" - -msgid "Disable an HBAC rule." -msgstr "" - -msgid "Enable an HBAC rule." -msgstr "" - -msgid "Search for HBAC rules." -msgstr "" - -msgid "Modify an HBAC rule." -msgstr "" - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "hosts to remove" -msgstr "" - -msgid "host groups to remove" -msgstr "" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "" - -#, fuzzy -msgid "HBAC services to remove" -msgstr "HBAC szolgáltatás-csoport leírása" - -#, fuzzy -msgid "HBAC service groups to remove" -msgstr "HBAC szolgáltatás-csoport leírása" - -msgid "Remove users and groups from an HBAC rule." -msgstr "" - -msgid "Display the properties of an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" - -msgid "Service name" -msgstr "Szolgáltatás neve" - -#, fuzzy -msgid "HBAC service" -msgstr "Szolgáltatások" - -#, fuzzy -msgid "HBAC service description" -msgstr "HBAC szolgáltatás-csoport leírása" - -#, fuzzy -msgid "Member of HBAC service groups" -msgstr "HBAC szolgáltatás-csoport leírása" - -msgid "Add a new HBAC service." -msgstr "" - -msgid "Delete an existing HBAC service." -msgstr "" - -msgid "Search for HBAC services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" - -msgid "Modify an HBAC service." -msgstr "" - -msgid "Display information about an HBAC service." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "Service group name" -msgstr "Szolgáltatás-csoport neve" +#, python-format +msgid "Group '%s' does not exist" +msgstr "A '%s' csoport nem létezik" msgid "HBAC service group description" msgstr "HBAC szolgáltatás-csoport leírása" -msgid "Member HBAC service" -msgstr "" - -#, fuzzy -msgid "Add a new HBAC service group." -msgstr "HBAC szolgáltatás-csoport leírása" - -msgid "Add members to an HBAC service group." -msgstr "" - -#, fuzzy -msgid "Delete an HBAC service group." -msgstr "HBAC szolgáltatás-csoport leírása" - -msgid "Search for an HBAC service group." -msgstr "" - -#, fuzzy -msgid "Modify an HBAC service group." -msgstr "HBAC szolgáltatás-csoport leírása" - -msgid "Remove members from an HBAC service group." -msgstr "" - -msgid "Display information about an HBAC service group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -#, fuzzy -msgid "User name" -msgstr "Szabály neve" - -#, fuzzy -msgid "Target host" -msgstr "Célcsoport" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host name" -msgstr "" - -msgid "A description of this host" -msgstr "" - -msgid "Locality" -msgstr "" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "" - -msgid "Platform" -msgstr "" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "" - -msgid "Operating system" -msgstr "" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "" - -msgid "User password" -msgstr "" - -msgid "Password used in bulk enrollment" -msgstr "" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "" - -msgid "Random password" -msgstr "" - -msgid "Certificate" -msgstr "Tanúsítvány" - -msgid "Base-64 encoded server certificate" -msgstr "" - -#, fuzzy -msgid "Principal name" -msgstr "Szolgáltatás neve" - -msgid "MAC address" -msgstr "" - -msgid "Hardware MAC address(es) on this host" -msgstr "" - -msgid "SSH public key" -msgstr "" - -msgid "Class" -msgstr "" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "Assigned ID View" -msgstr "" - -msgid "Requires pre-authentication" -msgstr "" - -msgid "Pre-authentication is required for the service" -msgstr "" - -msgid "Trusted for delegation" -msgstr "" - -msgid "Client credentials may be delegated to the service" -msgstr "" - -msgid "Member of host-groups" -msgstr "" - -msgid "Indirect Member of host-group" -msgstr "" - -msgid "Keytab" -msgstr "" - -msgid "Managed by" -msgstr "" - -msgid "Managing" -msgstr "" - -msgid "Users allowed to retrieve keytab" -msgstr "" - -msgid "Groups allowed to retrieve keytab" -msgstr "" - -msgid "Hosts allowed to retrieve keytab" -msgstr "" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "" - -msgid "Users allowed to create keytab" -msgstr "" - -msgid "Groups allowed to create keytab" -msgstr "" - -msgid "Hosts allowed to create keytab" -msgstr "" - -msgid "Host Groups allowed to create keytab" -msgstr "" - -msgid "Add a new host." -msgstr "" - -msgid "force host name even if not in DNS" -msgstr "" - -msgid "skip reverse DNS detection" -msgstr "" - -msgid "Add the host to DNS with this IP address" -msgstr "" - -msgid "Add hosts that can manage this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" - -msgid "Delete a host." -msgstr "" - -msgid "Remove entries from DNS" -msgstr "" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" - -msgid "Search for hosts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" - -#, fuzzy -msgid "host group" -msgstr "Felhasználói csport" - -msgid "Search for hosts with these member of host groups." -msgstr "" - -msgid "Search for hosts without these member of host groups." -msgstr "" - -msgid "Search for hosts with these member of netgroups." -msgstr "" - -msgid "Search for hosts without these member of netgroups." -msgstr "" - -msgid "Search for hosts with these member of roles." -msgstr "" - -msgid "Search for hosts without these member of roles." -msgstr "" - -msgid "Search for hosts with these member of HBAC rules." -msgstr "" - -msgid "Search for hosts without these member of HBAC rules." -msgstr "" - -msgid "Search for hosts with these member of sudo rules." -msgstr "" - -msgid "Search for hosts without these member of sudo rules." -msgstr "" - -msgid "Search for hosts with these enrolled by users." -msgstr "" - -msgid "Search for hosts without these enrolled by users." -msgstr "" - -msgid "host" -msgstr "" - -msgid "Search for hosts with these managed by hosts." -msgstr "" - -msgid "Search for hosts without these managed by hosts." -msgstr "" - -msgid "Search for hosts with these managing hosts." -msgstr "" - -msgid "Search for hosts without these managing hosts." -msgstr "" - -msgid "Modify information about a host." -msgstr "" - -msgid "Kerberos principal name for this host" -msgstr "" - -msgid "Update DNS entries" -msgstr "" - -msgid "Remove hosts that can manage this host." -msgstr "" - -msgid "Display information about a host." -msgstr "" - -msgid "file to store certificate in" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -msgid "Host-group" -msgstr "Felhasználói csport" - -msgid "Name of host-group" -msgstr "" - -msgid "A description of this host-group" -msgstr "" - -msgid "Member hosts" -msgstr "" - -msgid "Member host-groups" -msgstr "" - -msgid "Indirect Member hosts" -msgstr "" - -msgid "Indirect Member host-groups" -msgstr "" - -msgid "Add a new hostgroup." -msgstr "" - -msgid "Add members to a hostgroup." -msgstr "" - -msgid "Delete a hostgroup." -msgstr "" - -msgid "Search for hostgroups." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" - -msgid "Search for host groups with these member hosts." -msgstr "" - -msgid "Search for host groups without these member hosts." -msgstr "" - -msgid "Search for host groups with these member host groups." -msgstr "" - -msgid "Search for host groups without these member host groups." -msgstr "" - -msgid "Search for host groups with these member of host groups." -msgstr "" - -msgid "Search for host groups without these member of host groups." -msgstr "" - -msgid "Search for host groups with these member of netgroups." -msgstr "" - -msgid "Search for host groups without these member of netgroups." -msgstr "" - -msgid "Search for host groups with these member of HBAC rules." -msgstr "" - -msgid "Search for host groups without these member of HBAC rules." -msgstr "" - -msgid "Search for host groups with these member of sudo rules." -msgstr "" - -msgid "Search for host groups without these member of sudo rules." -msgstr "" - -msgid "Modify a hostgroup." -msgstr "" - -msgid "Remove members from a hostgroup." -msgstr "" - -msgid "Display information about a hostgroup." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "Szabály neve" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -msgid "Anchor to override" -msgstr "" - -msgid "Group ID Number" -msgstr "" - -#, fuzzy -msgid "User login" -msgstr "Felhasználói csport" - -#, fuzzy -msgid "UID" -msgstr "GID" - -msgid "User ID Number" -msgstr "" - -msgid "GECOS" -msgstr "" - -msgid "Home directory" -msgstr "" - -msgid "Login shell" -msgstr "" - -msgid "ID View Name" -msgstr "" - -msgid "Add a new Group ID override." -msgstr "" - -msgid "Delete an Group ID override." -msgstr "" - -msgid "Search for an Group ID override." -msgstr "" - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" - -msgid "Modify an Group ID override." -msgstr "" - -msgid "Rename the Group ID override object" -msgstr "" - -msgid "Display information about an Group ID override." -msgstr "" - -msgid "Add a new User ID override." -msgstr "" - -msgid "Delete an User ID override." -msgstr "" - -msgid "Search for an User ID override." -msgstr "" - -msgid "Modify an User ID override." -msgstr "" - -msgid "Rename the User ID override object" -msgstr "" - -msgid "Display information about an User ID override." -msgstr "" - -msgid "Add a new ID View." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" - -msgid "hosts" -msgstr "" - -msgid "Hosts to apply the ID View to" -msgstr "" - -#, fuzzy -msgid "hostgroups" -msgstr "Felhasználói csport" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" - -msgid "Hosts that this ID View was applied to." -msgstr "" - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" - -msgid "Number of hosts the ID View was applied to:" -msgstr "" - -msgid "Delete an ID View." -msgstr "" - -msgid "Search for an ID View." -msgstr "" - -msgid "Modify an ID View." -msgstr "" - -msgid "Rename the ID View object" -msgstr "" - -msgid "Display information about an ID View." -msgstr "" - -msgid "Enumerate all the hosts the view applies to." -msgstr "" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" - -msgid "Hosts to clear (any) ID View from." -msgstr "" - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" - -msgid "Hosts that ID View was cleared from." -msgstr "" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" - -msgid "Dict of I18N messages" -msgstr "" - -msgid "Export plugin meta-data for the webUI." -msgstr "" - -msgid "Name of object to export" -msgstr "" - -msgid "Name of method to export" -msgstr "" - -msgid "Name of command to export" -msgstr "" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" - -msgid "Join an IPA domain" -msgstr "" - -msgid "The hostname to register as" -msgstr "" - -msgid "The IPA realm" -msgstr "" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "" - -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" - -msgid "Manage ticket policy for specific user" -msgstr "" - -msgid "Max life" -msgstr "" - -msgid "Maximum ticket life (seconds)" -msgstr "" - -msgid "Max renew" -msgstr "" - -msgid "Maximum renewable age (seconds)" -msgstr "" - -msgid "Modify Kerberos ticket policy." -msgstr "" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "" - -msgid "Display the current Kerberos ticket policy." -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," -"cn=accounts' --group-container='cn=groups,cn=accounts' " -"ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' --user-ignore-" -"objectclass=radiusprofile --user-ignore-" -"attribute=radiusgroupname ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -msgid "Migrate users and groups from DS to IPA." -msgstr "" +msgid "Issuer" +msgstr "Kibocsátó" msgid "LDAP URI" msgstr "LDAP URI" -msgid "LDAP URI of DS server to migrate from" -msgstr "" - -msgid "bind password" -msgstr "" - -msgid "Bind DN" -msgstr "" - -msgid "User container" -msgstr "" - -msgid "DN of container for users in DS relative to base DN" -msgstr "" - -msgid "Group container" -msgstr "" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "" - -msgid "User object class" -msgstr "" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "" - -msgid "Group object class" -msgstr "" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "" - -msgid "Ignore user object class" -msgstr "" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore user attribute" -msgstr "" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore group object class" -msgstr "" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "Ignore group attribute" -msgstr "" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "" - -msgid "Overwrite GID" -msgstr "" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" - -msgid "LDAP schema" -msgstr "" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" - -msgid "Continue" -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" - -msgid "Base DN" -msgstr "" - -msgid "Base DN on remote LDAP server" -msgstr "" - -msgid "Ignore compat plugin" -msgstr "" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" - -#, fuzzy -msgid "CA certificate" -msgstr "Tanúsítvány" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "" - -msgid "groups to exclude from migration" -msgstr "" - -msgid "users to exclude from migration" -msgstr "" - -msgid "Lists of objects migrated; categorized by type." -msgstr "" - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" - -msgid "False if migration mode was disabled." -msgstr "" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" - -msgid "Show environment variables." -msgstr "" - -msgid "Forward to server instead of running locally" -msgstr "" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Total number of variables env (>= count)" -msgstr "" - -msgid "Number of variables returned (<= total)" -msgstr "" - -msgid "Show all loaded plugins." -msgstr "" - -msgid "Dictionary mapping plugin names to bases" -msgstr "" - -msgid "Number of plugins loaded" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -#, fuzzy -msgid "Netgroup name" -msgstr "Szolgáltatás-csoport neve" - -#, fuzzy -msgid "Netgroup description" -msgstr "HBAC szolgáltatás-csoport leírása" - -msgid "NIS domain name" -msgstr "" - -msgid "IPA unique ID" -msgstr "" - -#, fuzzy -msgid "Member netgroups" -msgstr "Felhasználói csport" - -msgid "Indirect Member netgroups" -msgstr "" - -msgid "Member User" -msgstr "" - -#, fuzzy -msgid "Member Group" -msgstr "Felhasználói csport" - -msgid "Member Host" -msgstr "" - -#, fuzzy -msgid "Member Hostgroup" -msgstr "Felhasználói csport" - -msgid "Add a new netgroup." -msgstr "" - -msgid "Add members to a netgroup." -msgstr "" - -#, fuzzy -msgid "member netgroup" -msgstr "Felhasználói csport" - -msgid "netgroups to add" -msgstr "" - -msgid "Delete a netgroup." -msgstr "" - -msgid "Search for a netgroup." -msgstr "" - -msgid "search for managed groups" -msgstr "" - -msgid "Search for netgroups with these member netgroups." -msgstr "" - -msgid "Search for netgroups without these member netgroups." -msgstr "" - -msgid "Search for netgroups with these member users." -msgstr "" - -msgid "Search for netgroups without these member users." -msgstr "" - -msgid "Search for netgroups with these member groups." -msgstr "" - -msgid "Search for netgroups without these member groups." -msgstr "" - -msgid "Search for netgroups with these member hosts." -msgstr "" - -msgid "Search for netgroups without these member hosts." -msgstr "" - -msgid "Search for netgroups with these member host groups." -msgstr "" - -msgid "Search for netgroups without these member host groups." -msgstr "" - -msgid "Search for netgroups with these member of netgroups." -msgstr "" - -msgid "Search for netgroups without these member of netgroups." -msgstr "" - -msgid "Modify a netgroup." -msgstr "" - -msgid "Remove members from a netgroup." -msgstr "" - -msgid "netgroups to remove" -msgstr "" - -msgid "Display information about a netgroup." -msgstr "" - -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" - -msgid "TOTP authentication Window" -msgstr "" - -msgid "TOTP authentication time variance (seconds)" -msgstr "" - -msgid "TOTP Synchronization Window" -msgstr "" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "" - -msgid "HOTP Authentication Window" -msgstr "" - -msgid "HOTP authentication skip-ahead" -msgstr "" - -msgid "HOTP Synchronization Window" -msgstr "" - -msgid "HOTP synchronization skip-ahead" -msgstr "" - -msgid "Modify OTP configuration options." -msgstr "" - -msgid "Show the current OTP configuration." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -#, fuzzy -msgid "Serial" -msgstr "SOA sorozatszám" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "Set a user's password." -msgstr "" - -msgid "New Password" -msgstr "" - -msgid "Current Password" -msgstr "" - -msgid "OTP" -msgstr "" - -msgid "One Time Password" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -"\n" -"Managed permissions\n" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -#, fuzzy -msgid "Permission name" -msgstr "Jogosultságok" - -msgid "Granted rights" -msgstr "" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" - -msgid "Effective attributes" -msgstr "" - -msgid "All attributes to which the permission applies" -msgstr "" - -msgid "Included attributes" -msgstr "" - -msgid "User-specified attributes to which the permission applies" -msgstr "" - -msgid "Excluded attributes" -msgstr "" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" - -msgid "Default attributes" -msgstr "" - -msgid "Attributes to which the permission applies by default" -msgstr "" - -msgid "Bind rule type" -msgstr "" - -msgid "Subtree to apply permissions to" -msgstr "" - -msgid "Extra target filter" -msgstr "" - -msgid "Raw target filter" -msgstr "" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" - -#, fuzzy -msgid "Target DN" -msgstr "Célcsoport" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" - -#, fuzzy -msgid "Member of group" -msgstr "Felhasználói csport" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "" - -msgid "User group to apply permissions to (sets target)" -msgstr "" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "" - -msgid "Deprecated; use extratargetfilter" -msgstr "" - -msgid "Deprecated; use ipapermlocation" -msgstr "" - -msgid "Deprecated; use ipapermright" -msgstr "" - -msgid "Granted to Privilege" -msgstr "" - -msgid "Indirect Member of roles" -msgstr "" - -msgid "Add a new permission." -msgstr "" - -msgid "Add members to a permission." -msgstr "" - -msgid "member privilege" -msgstr "" - -msgid "privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "" - -#, fuzzy -msgid "Permission flags" -msgstr "Jogosultságok" - -msgid "Delete a permission." -msgstr "" - -msgid "force delete of SYSTEM permissions" -msgstr "" - -msgid "Search for permissions." -msgstr "" - -msgid "Modify a permission." -msgstr "" - -msgid "Rename the permission object" -msgstr "" - -msgid "Remove members from a permission." -msgstr "" - -msgid "privileges to remove" -msgstr "" - -msgid "Display information about a permission." -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "Ping a remote server." -msgstr "" - -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "" - -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" - -#, fuzzy -msgid "Privilege name" -msgstr "Szolgáltatás neve" - -#, fuzzy -msgid "Privilege description" -msgstr "HBAC szolgáltatás-csoport leírása" - -msgid "Granting privilege to roles" -msgstr "" - -msgid "Add a new privilege." -msgstr "" - -msgid "Add members to a privilege." -msgstr "" - -msgid "member role" -msgstr "" - -msgid "roles to add" -msgstr "" - -msgid "Add permissions to a privilege." -msgstr "" - -#, fuzzy -msgid "permission" -msgstr "Jogosultságok" - -#, fuzzy -msgid "permissions" -msgstr "Jogosultságok" - -msgid "Number of permissions added" -msgstr "" - -msgid "Delete a privilege." -msgstr "" - -msgid "Search for privileges." -msgstr "" - -msgid "Modify a privilege." -msgstr "" - -msgid "Rename the privilege object" -msgstr "" - -msgid "Remove members from a privilege" -msgstr "" - -msgid "roles to remove" -msgstr "" - -msgid "Remove permissions from a privilege." -msgstr "" - -msgid "Number of permissions removed" -msgstr "" - -msgid "Display information about a privilege." -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Group" -msgstr "" - -msgid "Manage password policy for specific group" -msgstr "" - msgid "Max lifetime (days)" msgstr "Élettartam legfeljebb (nap)" @@ -6119,5646 +89,69 @@ msgstr "Minimális élettartam (óra)" msgid "Minimum password lifetime (in hours)" msgstr "Jelszó minimális élettartama (óra)" -#, fuzzy -msgid "History size" -msgstr "Megőrzött jelszavak (darab)" +msgid "Not After" +msgstr "Érvényesség vége" + +msgid "Not Before" +msgstr "Érvényesség kezdete" msgid "Password history size" msgstr "Megőrzött jelszavak (darab)" -msgid "Character classes" -msgstr "Karakterosztályok" - -#, fuzzy -msgid "Minimum number of character classes" -msgstr "Karakterosztályok" - -msgid "Min length" -msgstr "" - -msgid "Minimum length of password" -msgstr "" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "" - -msgid "Max failures" -msgstr "" - -msgid "Consecutive failures before lockout" -msgstr "" - -msgid "Failure reset interval" -msgstr "" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "" - -msgid "Lockout duration" -msgstr "" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" - -msgid "Add a new group password policy." -msgstr "" - -msgid "Delete a group password policy." -msgstr "" - -msgid "Search for group password policies." -msgstr "" - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" - -msgid "Modify a group password policy." -msgstr "" - -msgid "Display information about password policy." -msgstr "" - -msgid "User" -msgstr "" - -msgid "Display effective policy for a specific user" -msgstr "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "RADIUS proxy server name" -msgstr "" - -msgid "A description of this RADIUS proxy server" -msgstr "" - -#, fuzzy -msgid "Server" -msgstr "Szolgáltatások" - -msgid "The hostname or IP (with or without port)" -msgstr "" - -msgid "Secret" -msgstr "" - -msgid "The secret used to encrypt data" -msgstr "" - -msgid "Timeout" -msgstr "" - -msgid "The total timeout across all retries (in seconds)" -msgstr "" - -msgid "Retries" -msgstr "" - -msgid "The number of times to retry authentication" -msgstr "" - -msgid "User attribute" -msgstr "" - -msgid "The username attribute on the user object" -msgstr "" - -msgid "Add a new RADIUS proxy server." -msgstr "" - -msgid "Delete a RADIUS proxy server." -msgstr "" - -msgid "Search for RADIUS proxy servers." -msgstr "" - -msgid "Modify a RADIUS proxy server." -msgstr "" - -msgid "Rename the RADIUS proxy server object" -msgstr "" - -msgid "Display information about a RADIUS proxy server." -msgstr "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Domain" -msgstr "" - -msgid "Add domain" -msgstr "" - -msgid "Delete domain" -msgstr "" - -msgid "Modify realm domains." -msgstr "" - -msgid "Force adding domain even if not in DNS" -msgstr "" - -msgid "Display the list of realm domains." -msgstr "" - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" - -#, fuzzy -msgid "Role name" -msgstr "Szabály neve" - -msgid "A description of this role-group" -msgstr "" - -msgid "Privileges" -msgstr "" - -#, fuzzy -msgid "Member services" -msgstr "Szolgáltatások" - -msgid "Add a new role." -msgstr "" - -msgid "Add members to a role." -msgstr "" - -msgid "member service" -msgstr "" - -#, fuzzy -msgid "services to add" -msgstr "Szolgáltatások" - -msgid "Add privileges to a role." -msgstr "" - -msgid "privilege" -msgstr "" - -msgid "privileges" -msgstr "" - -msgid "Number of privileges added" -msgstr "" - -msgid "Delete a role." -msgstr "" - -msgid "Search for roles." -msgstr "" - -msgid "Modify a role." -msgstr "" - -msgid "Rename the role object" -msgstr "" - -msgid "Remove members from a role." -msgstr "" - -#, fuzzy -msgid "services to remove" -msgstr "Szolgáltatás-csoport neve" - -msgid "Remove privileges from a role." -msgstr "" - -msgid "Number of privileges removed" -msgstr "" - -msgid "Display information about a role." -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -#, fuzzy -msgid "Self-service name" -msgstr "Szolgáltatás neve" - -msgid "Attributes to which the permission applies." -msgstr "" - -msgid "Add a new self-service permission." -msgstr "" - -msgid "Delete a self-service permission." -msgstr "" - -msgid "Search for a self-service permission." -msgstr "" - -msgid "Modify a self-service permission." -msgstr "" - -msgid "Display information about a self-service permission." -msgstr "" - -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" - -msgid "SELinux User" -msgstr "" - -msgid "HBAC Rule" -msgstr "" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "" - -msgid "Create a new SELinux User Map." -msgstr "" - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "" - -msgid "Delete a SELinux User Map." -msgstr "" - -msgid "Disable an SELinux User Map rule." -msgstr "" - -msgid "Enable an SELinux User Map rule." -msgstr "" - -msgid "Search for SELinux User Maps." -msgstr "" - -msgid "Modify a SELinux User Map." -msgstr "" - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "" - -msgid "Display the properties of a SELinux User Map rule." -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -#, fuzzy -msgid "Service principal" -msgstr "Szolgáltatás neve" - -msgid "PAC type" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" - -msgid "Add a new IPA new service." -msgstr "" - -msgid "force principal name even if not in DNS" -msgstr "" - -msgid "Add hosts that can manage this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Delete an IPA service." -msgstr "" - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Search for IPA services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" - -msgid "Search for services with these managed by hosts." -msgstr "" - -msgid "Search for services without these managed by hosts." -msgstr "" - -msgid "Modify an existing IPA service." -msgstr "" - -msgid "Remove hosts that can manage this service." -msgstr "" - -msgid "Display information about an IPA service." -msgstr "" - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" - -msgid "Sudo Command" -msgstr "" - -msgid "A description of this command" -msgstr "" - -msgid "Sudo Command Groups" -msgstr "" - -msgid "Create new Sudo Command." -msgstr "" - -msgid "Delete Sudo Command." -msgstr "" - -msgid "Search for Sudo Commands." -msgstr "" - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" - -msgid "Modify Sudo Command." -msgstr "" - -msgid "Display Sudo Command." -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "Sudo Command Group" -msgstr "" - -msgid "Commands" -msgstr "" - -msgid "Member Sudo commands" -msgstr "" - -msgid "Create new Sudo Command Group." -msgstr "" - -msgid "Add members to Sudo Command Group." -msgstr "" - -msgid "member sudo command" -msgstr "" - -msgid "sudo commands to add" -msgstr "" - -msgid "Delete Sudo Command Group." -msgstr "" - -msgid "Search for Sudo Command Groups." -msgstr "" - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" - -msgid "Modify Sudo Command Group." -msgstr "" - -msgid "Remove members from Sudo Command Group." -msgstr "" - -msgid "sudo commands to remove" -msgstr "" - -msgid "Display Sudo Command Group." -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -msgid "Domain name" -msgstr "" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "" - -msgid "Last name" -msgstr "" - -#, fuzzy -msgid "Full name" -msgstr "Szabály neve" - -msgid "Display name" -msgstr "" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Email address" -msgstr "" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -#, fuzzy -msgid "Pager Number" -msgstr "Sorozatszám" - -#, fuzzy -msgid "Fax Number" -msgstr "Sorozatszám" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Car License" -msgstr "" - -msgid "Account disabled" -msgstr "" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "" - -msgid "RADIUS proxy username" -msgstr "" - -msgid "Department Number" -msgstr "" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -#, fuzzy -msgid "Don't create user private group" -msgstr "Alapértelmezett csoport" - -msgid "Delete a user." -msgstr "" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "Command category" -msgstr "" - -msgid "Command category the rule applies to" -msgstr "" - -msgid "RunAs User category" -msgstr "" - -msgid "RunAs User category the rule applies to" -msgstr "" - -msgid "RunAs Group category" -msgstr "" - -msgid "RunAs Group category the rule applies to" -msgstr "" - -msgid "Sudo order" -msgstr "" - -msgid "integer to order the Sudo rules" -msgstr "" - -msgid "External User" -msgstr "" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -msgid "Host Masks" -msgstr "" - -msgid "Sudo Allow Commands" -msgstr "" - -msgid "Sudo Deny Commands" -msgstr "" - -msgid "Sudo Allow Command Groups" -msgstr "" - -msgid "Sudo Deny Command Groups" -msgstr "" - -msgid "RunAs Users" -msgstr "" - -msgid "Run as a user" -msgstr "" - -msgid "Groups of RunAs Users" -msgstr "" - -msgid "Run as any user within a specified group" -msgstr "" - -msgid "RunAs External User" -msgstr "" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -msgid "External Groups of RunAs Users" -msgstr "" - -msgid "External Groups of users that the command can run as" -msgstr "" - -msgid "RunAs Groups" -msgstr "" - -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -msgid "RunAs External Group" -msgstr "" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -msgid "Sudo Option" -msgstr "" - -msgid "Create new Sudo Rule." -msgstr "" - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "member sudo command group" -msgstr "" - -msgid "sudo command groups to add" -msgstr "" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "" - -msgid "Add group for Sudo to execute as." -msgstr "" - -msgid "Add users and groups for Sudo to execute as." -msgstr "" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "" - -msgid "Delete Sudo Rule." -msgstr "" - -msgid "Disable a Sudo Rule." -msgstr "" - -msgid "Enable a Sudo Rule." -msgstr "" - -msgid "Search for Sudo Rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -msgid "Modify Sudo Rule." -msgstr "" - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "sudo command groups to remove" -msgstr "" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "Remove an option from Sudo Rule." -msgstr "" - -msgid "Remove group for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "" - -msgid "Display Sudo Rule." -msgstr "" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "ACL name" -msgstr "" - -msgid "Profile category" -msgstr "" - -msgid "Profile category the ACL applies to" -msgstr "" - -msgid "User category the ACL applies to" -msgstr "" - -msgid "Host category the ACL applies to" -msgstr "" - -msgid "Service category the ACL applies to" -msgstr "" - -msgid "Profiles" -msgstr "" - -msgid "Create a new CA ACL." -msgstr "" - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "" - -msgid "Add profiles to a CA ACL." -msgstr "" - -msgid "member Certificate Profile" -msgstr "" - -msgid "Certificate Profiles to add" -msgstr "" - -msgid "Add services to a CA ACL." -msgstr "" - -msgid "Add users and groups to a CA ACL." -msgstr "" - -msgid "Delete a CA ACL." -msgstr "" - -msgid "Disable a CA ACL." -msgstr "" - -msgid "Enable a CA ACL." -msgstr "" - -msgid "Search for CA ACLs." -msgstr "" - -msgid "Modify a CA ACL." -msgstr "" - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "" - -msgid "Remove profiles from a CA ACL." -msgstr "" - -msgid "Certificate Profiles to remove" -msgstr "" - -msgid "Remove services from a CA ACL." -msgstr "" - -msgid "Remove users and groups from a CA ACL." -msgstr "" - -msgid "Display the properties of a CA ACL." -msgstr "" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -#, fuzzy -msgid "Profile description" -msgstr "Leírás" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" - -msgid "Query current Domain Level." -msgstr "" - -msgid "Current domain level:" -msgstr "" - -msgid "Change current Domain Level." -msgstr "" - -msgid "Domain Level" -msgstr "" - -msgid "Add certificates to host entry" -msgstr "" - -msgid "Remove certificates from host entry" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "Fallback to AD DC LDAP" -msgstr "" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" - -#, fuzzy -msgid "Add to default group" -msgstr "Alapértelmezett csoport" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" - -msgid "Search scope" -msgstr "" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Target DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" - -msgid "Origin DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -#, fuzzy -msgid "Server name" -msgstr "Szolgáltatás neve" - -msgid "IPA server hostname" -msgstr "" - -msgid "Managed suffix" -msgstr "" - -msgid "Min domain level" -msgstr "" - -msgid "Minimum domain level" -msgstr "" - -msgid "Max domain level" -msgstr "" - -msgid "Maximum domain level" -msgstr "" - -msgid "Delete IPA server." -msgstr "" - -msgid "Search for IPA servers." -msgstr "" - -msgid "Show IPA server." -msgstr "" - -msgid "Add new certificates to a service" -msgstr "" - -msgid "Remove certificates from a service" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed Target" -msgstr "" - -msgid "Create a new service delegation rule." -msgstr "" - -msgid "Add member to a named service delegation rule." -msgstr "" - -msgid "member principal" -msgstr "" - -msgid "principal to add" -msgstr "" - -msgid "Add target to a named service delegation rule." -msgstr "" - -msgid "member service delegation target" -msgstr "" - -msgid "service delegation targets to add" -msgstr "" - -#, fuzzy -msgid "Delete service delegation." -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Search for service delegations rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" - -msgid "Remove member from a named service delegation rule." -msgstr "" - -msgid "principal to remove" -msgstr "" - -msgid "Remove target from a named service delegation rule." -msgstr "" - -msgid "service delegation targets to remove" -msgstr "" - -msgid "Display information about a named service delegation rule." -msgstr "" - -msgid "Create a new service delegation target." -msgstr "" - -msgid "Add member to a named service delegation target." -msgstr "" - -msgid "Delete service delegation target." -msgstr "" - -msgid "Search for service delegation target." -msgstr "" - -msgid "Remove member from a named service delegation target." -msgstr "" - -msgid "Display information about a named service delegation target." -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" - -msgid "Activate a stage user." -msgstr "" - -msgid "Add a new stage user." -msgstr "" - -msgid "Create Stage user in from a delete user" -msgstr "" - -msgid "Delete a stage user." -msgstr "" - -msgid "Search for stage users." -msgstr "" - -msgid "Search for stage users with these member of groups." -msgstr "" - -msgid "Search for stage users without these member of groups." -msgstr "" - -msgid "Search for stage users with these member of netgroups." -msgstr "" - -msgid "Search for stage users without these member of netgroups." -msgstr "" - -msgid "Search for stage users with these member of roles." -msgstr "" - -msgid "Search for stage users without these member of roles." -msgstr "" - -msgid "Search for stage users with these member of HBAC rules." -msgstr "" - -msgid "Search for stage users without these member of HBAC rules." -msgstr "" - -msgid "Search for stage users with these member of sudo rules." -msgstr "" - -msgid "Search for stage users without these member of sudo rules." -msgstr "" - -msgid "Modify a stage user." -msgstr "" - -msgid "Rename the stage user object" -msgstr "" - -msgid "Display information about a stage user." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" - -#, fuzzy -msgid "Segment name" -msgstr "Szolgáltatás neve" - -msgid "Arbitrary string identifying the segment" -msgstr "" - -msgid "Left node" -msgstr "" - -msgid "Left replication node - an IPA server" -msgstr "" - -msgid "Right node" -msgstr "" - -msgid "Right replication node - an IPA server" -msgstr "" - -msgid "Connectivity" -msgstr "" - -msgid "Direction of replication between left and right replication node" -msgstr "" - -msgid "Attributes to strip" -msgstr "" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" - -msgid "Attributes to replicate" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" - -msgid "Attributes for total update" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" - -msgid "Session timeout" -msgstr "" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" - -msgid "Replication agreement enabled" -msgstr "" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" - -#, fuzzy -msgid "Suffix name" -msgstr "Szolgáltatás neve" - -msgid "LDAP suffix to be managed" -msgstr "" - -msgid "Add a new segment." -msgstr "" - -msgid "Delete a segment." -msgstr "" - -msgid "Search for topology segments." -msgstr "" - -msgid "Modify a segment." -msgstr "" - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" - -msgid "Initialize left node" -msgstr "" - -msgid "Initialize right node" -msgstr "" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "" - -msgid "Display a segment." -msgstr "" - -msgid "Add a new topology suffix to be managed." -msgstr "" - -msgid "Delete a topology suffix." -msgstr "" - -msgid "Search for topology suffices." -msgstr "" - -msgid "Modify a topology suffix." -msgstr "" - -msgid "Show managed suffix." -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "Preserved user" -msgstr "" - -msgid "Add one or more certificates to the user entry" -msgstr "" - -msgid "Remove one or more certificates to the user entry" -msgstr "" - -msgid "Move deleted user into staged area" -msgstr "" - -msgid "Undelete a delete user account." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -#, fuzzy -msgid "Vault name" -msgstr "Szabály neve" - -#, fuzzy -msgid "Vault description" -msgstr "Leírás" - -msgid "Vault type" -msgstr "" - -msgid "Salt" -msgstr "" - -#, fuzzy -msgid "Vault salt" -msgstr "Alapértelmezett shell" - -msgid "Public key" -msgstr "" - -msgid "Vault public key" -msgstr "" - -msgid "Owner users" -msgstr "" - -#, fuzzy -msgid "Owner groups" -msgstr "Felhasználói csport" - -#, fuzzy -msgid "Owner services" -msgstr "Szolgáltatások" - -msgid "Failed owners" -msgstr "" - -msgid "Vault service" -msgstr "" - -msgid "Shared vault" -msgstr "" - -#, fuzzy -msgid "Vault user" -msgstr "Alapértelmezett csoport" - -#, fuzzy -msgid "Transport Certificate" -msgstr "Tanúsítvány" - -msgid "Service name of the service vault" -msgstr "" - -msgid "Username of the user vault" -msgstr "" - -msgid "Add members to a vault." -msgstr "" - -msgid "Add owners to a vault." -msgstr "" - -msgid "owner user" -msgstr "" - -#, fuzzy -msgid "owner group" -msgstr "Felhasználói csport" - -msgid "owner service" -msgstr "" - -msgid "Owners that could not be added" -msgstr "" - -msgid "Number of owners added" -msgstr "" - -msgid "Session key wrapped with transport certificate" -msgstr "" - -msgid "Vault data encrypted with session key" -msgstr "" - -msgid "Nonce" -msgstr "" - -msgid "Delete a vault." -msgstr "" - -msgid "Search for vaults." -msgstr "" - -msgid "List all service vaults" -msgstr "" - -msgid "List all user vaults" -msgstr "" - -msgid "Remove members from a vault." -msgstr "" - -msgid "Remove owners from a vault." -msgstr "" - -#, fuzzy -msgid "Owners that could not be removed" -msgstr "Az alapértelmezett csoport nem távolítható el" - -msgid "Number of owners removed" -msgstr "" - -msgid "Display information about a vault." -msgstr "" - -msgid "Show vault configuration." -msgstr "" - -msgid "Output file to store the transport certificate" -msgstr "" - -msgid "Add owners to a vault container." -msgstr "" - -msgid "Delete a vault container." -msgstr "" - -msgid "Remove owners from a vault container." -msgstr "" - -msgid "Display information about a vault container." -msgstr "" - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "" - -#, fuzzy -msgid "Hostname (FQDN)" -msgstr "Zóna neve (FQDN)" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Managed suffixes" -msgstr "" - -msgid "Check connection to remote IPA server." -msgstr "" - -#, fuzzy -msgid "Remote server name" -msgstr "Szolgáltatás neve" - -msgid "Remote IPA server hostname" -msgstr "" - -msgid "suffix" -msgstr "" - -msgid "Search for servers with these managed suffixes." -msgstr "" - -msgid "Search for servers without these managed suffixes." -msgstr "" - -msgid "Add a manager to the stage user entry" -msgstr "" - -msgid "Remove a manager to the stage user entry" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -msgid "Managed LDAP suffix DN" -msgstr "" - -msgid "Search for topology suffixes." -msgstr "" - -msgid "Add a manager to the user entry" -msgstr "" - -msgid "Remove a manager to the user entry" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Comma-separated list of attributes" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" - -msgid "DNS class" -msgstr "" - -msgid "Comma-separated list of raw A records" -msgstr "" - -msgid "Comma-separated list of raw AAAA records" -msgstr "" - -msgid "Comma-separated list of raw A6 records" -msgstr "" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "" - -msgid "Comma-separated list of raw APL records" -msgstr "" - -msgid "Comma-separated list of raw CERT records" -msgstr "" - -msgid "Comma-separated list of raw CNAME records" -msgstr "" - -msgid "Comma-separated list of raw DHCID records" -msgstr "" - -msgid "Comma-separated list of raw DLV records" -msgstr "" - -msgid "Comma-separated list of raw DNAME records" -msgstr "" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "" - -msgid "Comma-separated list of raw DS records" -msgstr "" - -msgid "Comma-separated list of raw HIP records" -msgstr "" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "" - -msgid "Comma-separated list of raw KEY records" -msgstr "" - -msgid "KEY Flags" -msgstr "" - -msgid "KEY Protocol" -msgstr "" - -msgid "Protocol" -msgstr "" - -msgid "KEY Algorithm" -msgstr "" - -msgid "KEY Public Key" -msgstr "" - -msgid "Public Key" -msgstr "" - -msgid "Comma-separated list of raw KX records" -msgstr "" - -msgid "Comma-separated list of raw LOC records" -msgstr "" - -msgid "Comma-separated list of raw MX records" -msgstr "" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "" - -msgid "Comma-separated list of raw NS records" -msgstr "" - -msgid "Comma-separated list of raw NSEC records" -msgstr "" - -msgid "NSEC Next Domain Name" -msgstr "" - -msgid "Next Domain Name" -msgstr "" - -msgid "NSEC Type Map" -msgstr "" - -msgid "Type Map" -msgstr "" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "" - -msgid "Comma-separated list of raw PTR records" -msgstr "" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "" - -msgid "RRSIG Type Covered" -msgstr "" - -msgid "Type Covered" -msgstr "" - -msgid "RRSIG Algorithm" -msgstr "" - -msgid "RRSIG Labels" -msgstr "" - -msgid "Labels" -msgstr "" - -msgid "RRSIG Original TTL" -msgstr "" - -msgid "Original TTL" -msgstr "" - -msgid "RRSIG Signature Expiration" -msgstr "" - -msgid "Signature Expiration" -msgstr "" - -msgid "RRSIG Signature Inception" -msgstr "" - -msgid "Signature Inception" -msgstr "" - -msgid "RRSIG Key Tag" -msgstr "" - -msgid "RRSIG Signer's Name" -msgstr "" - -msgid "Signer's Name" -msgstr "" - -msgid "RRSIG Signature" -msgstr "" - -msgid "Signature" -msgstr "" - -msgid "Comma-separated list of raw RP records" -msgstr "" - -msgid "Comma-separated list of raw SIG records" -msgstr "" - -msgid "SIG Type Covered" -msgstr "" - -msgid "SIG Algorithm" -msgstr "" - -msgid "SIG Labels" -msgstr "" - -msgid "SIG Original TTL" -msgstr "" - -msgid "SIG Signature Expiration" -msgstr "" - -msgid "SIG Signature Inception" -msgstr "" - -msgid "SIG Key Tag" -msgstr "" - -msgid "SIG Signer's Name" -msgstr "" - -msgid "SIG Signature" -msgstr "" - -msgid "Comma-separated list of raw SPF records" -msgstr "" - -msgid "Comma-separated list of raw SRV records" -msgstr "" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "" - -msgid "Comma-separated list of raw TA records" -msgstr "" - -msgid "Comma-separated list of raw TKEY records" -msgstr "" - -msgid "Comma-separated list of raw TSIG records" -msgstr "" - -msgid "Comma-separated list of raw TXT records" -msgstr "" - -msgid "SOA time to live" -msgstr "" - -msgid "SOA record time to live" -msgstr "" - -msgid "SOA class" -msgstr "" - -msgid "SOA record class" -msgstr "" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" - -msgid "Consume an entitlement." -msgstr "" - -msgid "Quantity" -msgstr "" - -msgid "Search for entitlement accounts." -msgstr "" - -msgid "Retrieve the entitlement certs." -msgstr "" - -msgid "Import an entitlement certificate." -msgstr "" - -msgid "UUID" -msgstr "" - -msgid "Enrollment UUID" -msgstr "" - -msgid "Register to the entitlement system." -msgstr "" - -#, fuzzy -msgid "Username" -msgstr "Szolgáltatás neve" - -msgid "Enrollment UUID (not implemented)" -msgstr "" - -msgid "Registration password" -msgstr "" - -msgid "Display current entitlements." -msgstr "" - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" - -msgid "comma-separated list of users to add" -msgstr "" - -msgid "comma-separated list of groups to add" -msgstr "" - -msgid "comma-separated list of users to remove" -msgstr "" - -msgid "comma-separated list of groups to remove" -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Source host category" -msgstr "" - -msgid "Source host category the rule applies to" -msgstr "" - -msgid "Source Hosts" -msgstr "" - -#, fuzzy -msgid "Source Host Groups" -msgstr "Szolgáltatás-csoportok" - -msgid "comma-separated list of hosts to add" -msgstr "" - -msgid "comma-separated list of host groups to add" -msgstr "" - -msgid "comma-separated list of HBAC services to add" -msgstr "" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "" - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "" - -msgid "comma-separated list of hosts to remove" -msgstr "" - -msgid "comma-separated list of host groups to remove" -msgstr "" - -msgid "comma-separated list of HBAC services to remove" -msgstr "" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" - -msgid "Source host" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "comma-separated list of netgroups to add" -msgstr "" - -msgid "comma-separated list of netgroups to remove" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" - -#, fuzzy -msgid "Target members of a group" -msgstr "Célcsoport" - -msgid "User group to apply permissions to" -msgstr "" - -msgid "comma-separated list of privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI" -msgstr "" - -#, fuzzy -msgid "Permission type" -msgstr "Jogosultságok" - -msgid "comma-separated list of privileges to remove" -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "comma-separated list of roles to add" -msgstr "" - -msgid "comma-separated list of permissions" -msgstr "" - -msgid "comma-separated list of roles to remove" -msgstr "" - -msgid "comma-separated list of privileges" -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "comma-separated list of sudo commands to add" -msgstr "" - -msgid "comma-separated list of sudo commands to remove" -msgstr "" - -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" - -msgid "comma-separated list of sudo command groups to add" -msgstr "" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "" - -msgid "Failed members" -msgstr "" - -msgid "Failed source hosts/hostgroups" -msgstr "" - -msgid "Failed hosts/hostgroups" -msgstr "" - -#, fuzzy -msgid "Failed users/groups" -msgstr "Alapértelmezett csoport" - -msgid "Failed service/service groups" -msgstr "" - -msgid "Failed to remove" -msgstr "" - -msgid "Failed RunAs" -msgstr "" - -msgid "Failed RunAsGroup" -msgstr "" - -msgid "Failed profiles" -msgstr "" - -msgid "Failed CAs" -msgstr "" - -msgid "Failed member manager" -msgstr "" - -msgid "Failed managedby" -msgstr "" - -msgid "Failed allowed to retrieve keytab" -msgstr "" - -msgid "Failed allowed to create keytab" -msgstr "" - -msgid "Failed targets" -msgstr "" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "" - -msgid "an internal error has occurred" -msgstr "" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "" - -msgid "did not receive Kerberos credentials" -msgstr "" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -msgid "No credentials cache found" -msgstr "" - -msgid "Ticket expired" -msgstr "" - -msgid "Credentials cache permissions incorrect" -msgstr "" - -msgid "Bad format in credentials cache" -msgstr "" - -msgid "Cannot resolve KDC for requested realm" -msgstr "" - -msgid "Session error" -msgstr "" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#, python-format -msgid "'%(name)s' is required" -msgstr "" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - msgid "Passwords do not match" msgstr "A jelszavak nem egyeznek meg" -msgid "Command not implemented" -msgstr "" +#, c-format +msgid "Passwords do not match!\n" +msgstr "A jelszavak nem egyeznek!\n" -msgid "Client is not configured. Run ipa-client-install." -msgstr "" +msgid "Permissions" +msgstr "Jogosultságok" -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -#, fuzzy, python-format -msgid "%(reason)s" +msgid "Reason" msgstr "Ok" -msgid "This entry already exists" -msgstr "" +msgid "Request id" +msgstr "Igénylés azonosítója" -msgid "You must enroll a host in order to create a host service" -msgstr "" +msgid "Request status" +msgstr "Igénylés állapota" -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" +msgid "Revocation reason" +msgstr "Visszavonás oka" -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" +msgid "Revoked" +msgstr "Visszavont" + +msgid "Rule name" +msgstr "Szabály neve" + +msgid "SOA serial" +msgstr "SOA sorozatszám" + +msgid "Serial number" +msgstr "Sorozatszám" + +msgid "Service Groups" +msgstr "Szolgáltatás-csoportok" + +msgid "Service group name" +msgstr "Szolgáltatás-csoport neve" + +msgid "Service name" +msgstr "Szolgáltatás neve" + +msgid "Services" +msgstr "Szolgáltatások" + +msgid "Subject" +msgstr "Tárgy" + +msgid "Target group" +msgstr "Célcsoport" + +msgid "The default users group cannot be removed" +msgstr "Az alapértelmezett csoport nem távolítható el" msgid "This command requires root access" msgstr "Ez a parancs rendszergazdai jogosultságot igényel" @@ -11766,12416 +159,11 @@ msgstr "Ez a parancs rendszergazdai jogosultságot igényel" msgid "This is already a posix group" msgstr "Ez egy létező POSIX csoport" -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -msgid "This entry is already enabled" -msgstr "" - -msgid "This entry is already disabled" -msgstr "" - -msgid "This entry cannot be enabled or disabled" -msgstr "" - -msgid "This entry is not a member" -msgstr "" - -msgid "A group may not be a member of itself" -msgstr "Egy csoport nem lehet tagja önmagának" - -#, fuzzy -msgid "This entry is already a member" -msgstr "Ez egy létező POSIX csoport" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Base64 kicsomagolás sikertelen: %(reason)s" - -#, fuzzy -msgid "A group may not be added as a member of itself" -msgstr "Egy csoport nem lehet tagja önmagának" - -msgid "The default users group cannot be removed" -msgstr "Az alapértelmezett csoport nem távolítható el" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -msgid "This group already allows external members" -msgstr "" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "change collided with another change" -msgstr "" - -msgid "no modifications to be performed" -msgstr "" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "" - -msgid "limits exceeded for this query" -msgstr "" - -#, python-format -msgid "%(info)s" -msgstr "" - -msgid "modifying primary key is not allowed" -msgstr "" - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, fuzzy, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "Tanúsítványhiba: %(error)s" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "Tanúsítványhiba: %(error)s" - -msgid "Already registered" -msgstr "" - -msgid "Not registered yet" -msgstr "" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, python-format -msgid "%(exception)s" -msgstr "" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -#, python-format -msgid "%(count)d variables" -msgstr "" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" -msgstr[1] "" - -msgid "A dictionary representing an LDAP entry" -msgstr "" - -msgid "A list of LDAP entries" -msgstr "LDAP-bejegyzések listája" - -msgid "All commands should at least have a result" -msgstr "" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "" - -#, fuzzy -msgid "Passwords do not match!" -msgstr "A jelszavak nem egyeznek!\n" - -msgid "No matching entries found" -msgstr "" - -msgid "Topic or Command" -msgstr "" - -msgid "The topic or command name." -msgstr "" - -msgid "Topic commands:" -msgstr "" - -msgid "To get command help, use:" -msgstr "" - -msgid " ipa --help" -msgstr "" - -msgid "Command name" -msgstr "" - -msgid "Positional arguments" -msgstr "" - -#, python-format -msgid "Same as --%s" -msgstr "" - -msgid "Deprecated options" -msgstr "" - -msgid "No file to read" -msgstr "" - -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - -#, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - -msgid "Filename is empty" -msgstr "" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -msgid "invalid domain name" -msgstr "" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "incorrect type" -msgstr "" - -msgid "Only one value is allowed" -msgstr "" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "" - -msgid "must be an integer" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -msgid "must be a decimal number" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -msgid "must be binary data" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -#, fuzzy -msgid "must be a certificate" -msgstr "Tanúsítvány" - -msgid "must be a certificate signing request" -msgstr "" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "" - -msgid "Leading and trailing spaces are not allowed" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "" - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "" - -#, python-format -msgid "must be '%(value)s'" -msgstr "" - -#, python-format -msgid "must be one of %(values)s" -msgstr "" - -msgid "must be datetime value" -msgstr "" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -msgid "must be DNS name" -msgstr "" - -msgid "must be absolute" -msgstr "" - -msgid "must be relative" -msgstr "" - -msgid "must be dictionary" -msgstr "" - -msgid "must be Kerberos principal" -msgstr "" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -msgid "Service principal is required" -msgstr "" - -#, fuzzy -msgid "must be at least 0" -msgstr "Tanúsítvány" - -msgid "invalid valid hex" -msgstr "" - -#, fuzzy -msgid "invalid serial number 0" -msgstr "Sorozatszám" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "" - -#, python-format -msgid "objectclass %s not found" -msgstr "" - -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "Failed to authenticate to CA REST API" -msgstr "" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "" - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -msgid "Automount Location" -msgstr "" - -#, fuzzy, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, fuzzy, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, fuzzy, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -#, fuzzy -msgid "Certificate Profile" -msgstr "Tanúsítvány" - -#, fuzzy -msgid "Certificate Profiles" -msgstr "Tanúsítvány" - -msgid "Profile configuration" -msgstr "" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, fuzzy, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy -msgid "Certificate profiles cannot be renamed" -msgstr "Az alapértelmezett csoport nem távolítható el" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -msgid "ACI" -msgstr "" - -#, fuzzy, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -#, fuzzy -msgid "DNS Servers" -msgstr "Szolgáltatások" - -msgid "DNS Server" -msgstr "" - -#, fuzzy -msgid "DNS Server name" -msgstr "Szolgáltatás neve" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, fuzzy, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, fuzzy, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Delete a DNS server" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -msgid "groups" +msgid "User group" msgstr "Felhasználói csport" -#, fuzzy -msgid "User Group" -msgstr "Felhasználói csport" +msgid "Zone name (FQDN)" +msgstr "Zóna neve (FQDN)" -#, fuzzy, python-format -msgid "Added group \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy -msgid "privileged group" -msgstr "Célcsoport" - -#, fuzzy, python-format -msgid "Modified group \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -#, fuzzy -msgid "HBAC services" -msgstr "Szolgáltatások" - -#, fuzzy -msgid "HBAC Services" -msgstr "Szolgáltatások" - -#, fuzzy -msgid "HBAC Service" -msgstr "Szolgáltatások" - -#, fuzzy, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "HBAC service group" -msgstr "HBAC szolgáltatás-csoport leírása" - -#, fuzzy -msgid "HBAC service groups" -msgstr "HBAC szolgáltatás-csoport leírása" - -#, fuzzy -msgid "HBAC Service Groups" -msgstr "Szolgáltatás-csoportok" - -#, fuzzy -msgid "HBAC Service Group" -msgstr "Szolgáltatás-csoportok" - -#, fuzzy, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "HBAC szolgáltatás-csoport leírása" -msgstr[1] "HBAC szolgáltatás-csoport leírása" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -msgid "host groups" -msgstr "Felhasználói csport" - -#, fuzzy -msgid "Host Group" -msgstr "Felhasználói csport" - -#, fuzzy, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy -msgid "hostgroup" -msgstr "Felhasználói csport" - -msgid "privileged hostgroup" -msgstr "" - -#, fuzzy, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -#, fuzzy -msgid "Auto private groups" -msgstr "HBAC szolgáltatás-csoport leírása" - -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "" - -#, fuzzy -msgid "locations" -msgstr "Visszavonás oka" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -#, fuzzy -msgid "Location name" -msgstr "Visszavonás oka" - -msgid "IPA location name" -msgstr "" - -msgid "IPA Location description" -msgstr "" - -#, fuzzy -msgid "Servers" -msgstr "Szolgáltatások" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, fuzzy, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Delete an IPA location." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "IPA Server" -msgstr "" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -#, fuzzy -msgid "netgroups" -msgstr "Célcsoport" - -#, fuzzy -msgid "Netgroups" -msgstr "Célcsoport" - -#, fuzzy -msgid "Netgroup" -msgstr "Célcsoport" - -#, fuzzy, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" -msgstr "" - -#, fuzzy, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "cannot be empty" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -#, fuzzy -msgid "invalid port number" -msgstr "Sorozatszám" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, fuzzy, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "Role" -msgstr "" - -#, fuzzy, python-format -msgid "Added role \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified role \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "self service permission" -msgstr "HBAC szolgáltatás-csoport leírása" - -msgid "self service permissions" -msgstr "" - -#, fuzzy -msgid "Self Service Permissions" -msgstr "Jogosultságok" - -msgid "Self Service Permission" -msgstr "" - -#, fuzzy, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -#, fuzzy -msgid "IPA server role name" -msgstr "Szolgáltatás-csoport neve" - -#, fuzzy -msgid "Role status" -msgstr "Igénylés állapota" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -#, fuzzy -msgid "IPA role name" -msgstr "Szabály neve" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, fuzzy, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -#, fuzzy -msgid "Service delegation target" -msgstr "Szolgáltatás-csoport neve" - -#, fuzzy, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -#, fuzzy -msgid "Subordinate id description" -msgstr "Leírás" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -msgid "SubUID range size" -msgstr "" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -msgid "SubGID range size" -msgstr "" - -msgid "Subordinate group ID count" -msgstr "" - -#, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "" - -#, python-format -msgid "'%(dn)s is not a valid user" -msgstr "" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -msgid "Add a new subordinate id." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added subordinate id \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Delete a subordinate id." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Modify a subordinate id." -msgstr "" - -#, fuzzy, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy -msgid "Search for subordinate id." -msgstr "Karakterosztályok" - -#, fuzzy, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "HBAC szolgáltatás-csoport leírása" -msgstr[1] "HBAC szolgáltatás-csoport leírása" - -msgid "Display information about a subordinate id." -msgstr "" - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -msgid "sudo command" -msgstr "" - -msgid "sudo commands" -msgstr "" - -msgid "Sudo Commands" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Added segment \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -msgid "servers" -msgstr "" - -#, fuzzy -msgid "IPA Servers" -msgstr "Szolgáltatások" - -msgid "Server location" -msgstr "" - -#, fuzzy -msgid "Service weight" -msgstr "Szolgáltatás neve" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, fuzzy, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -#, fuzzy -msgid "Server state" -msgstr "Szolgáltatás neve" - -#, fuzzy, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -#, fuzzy -msgid "A list of ACI values" -msgstr "LDAP-bejegyzések listája" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "A '%s' csoport nem létezik" - -msgid "empty filter" -msgstr "" - -#, fuzzy, python-format -msgid "Syntax Error: %(error)s" -msgstr "Tanúsítványhiba: %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -#, fuzzy, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -#, fuzzy -msgid "Member service groups" -msgstr "Szolgáltatás-csoportok" - -#, fuzzy -msgid "Member HBAC service groups" -msgstr "HBAC szolgáltatás-csoport leírása" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Permissions\n" -msgstr "Jogosultságok" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Managed permissions\n" -msgstr "Jogosultságok" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "must be enclosed in parentheses" -msgstr "" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, python-format -msgid "Deprecated; use %s" -msgstr "" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, python-format -msgid "Entry %s not found" -msgstr "" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, fuzzy, python-format -msgid "Entry %s does not exist" -msgstr "A '%s' csoport nem létezik" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, fuzzy, python-format -msgid "Added permission \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, fuzzy, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, fuzzy, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -msgid "Help topic" -msgstr "" - -#, fuzzy -msgid "Version" -msgstr "Jogosultságok" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "Szabály neve" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -#, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -#, fuzzy -msgid "Search for classes." -msgstr "Karakterosztályok" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -#, fuzzy -msgid "Required" -msgstr "Igénylés azonosítója" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -msgid "CLI name" -msgstr "" - -msgid "Confirm (password)" -msgstr "" - -#, fuzzy -msgid "Default" -msgstr "Alapértelmezett shell" - -#, fuzzy -msgid "Default from" -msgstr "Alapértelmezett csoport" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "Trust direction" -msgstr "" - -msgid "Trust type" -msgstr "" - -#, fuzzy -msgid "Trust status" -msgstr "Igénylés állapota" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" - -msgid "trust configuration" -msgstr "" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -#, fuzzy -msgid "SID" -msgstr "GID" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, fuzzy, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, fuzzy, python-format -msgid "Added vault \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, fuzzy, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Vault configuration" -msgstr "" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -msgid "Key wrapping algorithm" -msgstr "" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." -msgstr "" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "Principal alias" -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -#, fuzzy -msgid "External IdP configuration" -msgstr "Visszavonás oka" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -#, fuzzy -msgid "Certificate mapping data" -msgstr "Tanúsítvány" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -msgid "Issuer" -msgstr "Kibocsátó" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject" -msgstr "Tárgy" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, fuzzy, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, fuzzy, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, fuzzy, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -msgid "users cannot be added when user category='all'" -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, fuzzy, python-format -msgid "%i service added." -msgstr "Szolgáltatás neve" - -#, fuzzy, python-format -msgid "%i services added." -msgstr "Szolgáltatás neve" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -msgid "User logins" -msgstr "" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "must be at least 10" -msgstr "" - -msgid "configuration options" -msgstr "" - -msgid "Configuration" -msgstr "" - -msgid "Maximum hostname length" -msgstr "" - -msgid "Enable adding subids to new users" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -msgid "IPA DNS servers" -msgstr "" - -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -#, fuzzy -msgid "Setup SID configuration" -msgstr "Visszavonás oka" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -msgid "Add SIDs" -msgstr "" - -msgid "Add SIDs for existing users and groups" -msgstr "" - -msgid "NetBIOS name of the IPA domain" -msgstr "" - -msgid "Empty domain is not allowed" -msgstr "" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "not allowed to enable SID generation" -msgstr "" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -msgid "Failed to call DBus" -msgstr "" - -msgid "Configuration of SID failed. See details in the error log" -msgstr "" - -#, fuzzy -msgid "The group doesn't exist" -msgstr "A '%s' csoport nem létezik" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, python-format -msgid "%s Record" -msgstr "" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -msgid "Priority (order)" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -msgid "Only one zone type is allowed per zone name" -msgstr "" - -#, fuzzy, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "" - -#, fuzzy, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -#, fuzzy -msgid "Default time to live" -msgstr "Alapértelmezett shell" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "is required" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -msgid "DNS configuration options" -msgstr "" - -msgid "DNS Global Configuration" -msgstr "" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -msgid "Result of the command" -msgstr "" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, fuzzy, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -#, fuzzy -msgid "Serial Number" -msgstr "Sorozatszám" - -#, fuzzy -msgid "Serial Number (hex)" -msgstr "Sorozatszám" - -msgid "Not Before" -msgstr "Érvényesség kezdete" - -msgid "Not After" -msgstr "Érvényesség vége" - -msgid "Fingerprint (SHA1)" -msgstr "Ujjlenyomat (SHA1)" - -#, fuzzy -msgid "Fingerprint (SHA256)" -msgstr "Ujjlenyomat (SHA1)" - -msgid "Revocation reason" -msgstr "Visszavonás oka" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, fuzzy, python-format -msgid "Added host \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, fuzzy, python-format -msgid "Modified host \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" - -msgid "Invalid URI: not an https scheme" -msgstr "" - -msgid "Invalid URI: missing netloc" -msgstr "" - -msgid "Identity Provider server" -msgstr "" - -msgid "Identity Provider servers" -msgstr "" - -#, fuzzy -msgid "Identity Provider server name" -msgstr "Szolgáltatás neve" - -msgid "Authorization URI" -msgstr "" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -msgid "Token URI" -msgstr "" - -msgid "Token endpoint" -msgstr "" - -#, fuzzy -msgid "User info URI" -msgstr "Felhasználói csport" - -msgid "User information endpoint" -msgstr "" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -msgid "Client identifier" -msgstr "" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -msgid "Add a new Identity Provider server." -msgstr "" - -#, fuzzy, python-format -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -msgid "Base URL" -msgstr "" - -msgid "Base URL for IdP provider templates" -msgstr "" - -msgid "unknown provider" -msgstr "" - -msgid "value is missing" -msgstr "" - -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "" - -msgid "Delete an Identity Provider server." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Modify an Identity Provider server." -msgstr "" - -#, fuzzy, python-format -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Search for Identity Provider servers." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "HBAC szolgáltatás-csoport leírása" -msgstr[1] "HBAC szolgáltatás-csoport leírása" - -msgid "Display information about an Identity Provider server." -msgstr "" - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Apply" -msgstr "" - -msgid "Rebuild auto membership" -msgstr "" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -msgid "Actions" -msgstr "" - -msgid "Add" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -msgid "Direct Membership" -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -msgid "No entries." -msgstr "" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -msgid "Remove" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -msgid "Show Results" -msgstr "" - -msgid "Authentication indicators" -msgstr "" - -msgid "Authentication indicator" -msgstr "" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -msgid "RADIUS" -msgstr "" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "External Identity Provider" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "" - -msgid "Activate" -msgstr "" - -msgid "Add and Add Another" -msgstr "" - -msgid "Add and Close" -msgstr "" - -msgid "Add and Edit" -msgstr "" - -msgid "Add Many" -msgstr "" - -msgid "Back" -msgstr "" - -msgid "Cancel" -msgstr "" - -msgid "Clear" -msgstr "" - -msgid "Clear all fields on the page." -msgstr "" - -msgid "Close" -msgstr "" - -msgid "Disable" -msgstr "" - -msgid "Download" -msgstr "" - -msgid "Download certificate as PEM formatted file." -msgstr "" - -msgid "Edit" -msgstr "" - -msgid "Enable" -msgstr "" - -msgid "Find" -msgstr "" - -msgid "Get" -msgstr "" - -msgid "Hide" -msgstr "" - -#, fuzzy -msgid "Issue" -msgstr "Kibocsátó" - -msgid "Match" -msgstr "" - -msgid "Match users according to certificate." -msgstr "" - -msgid "Migrate" -msgstr "" - -msgid "OK" -msgstr "" - -msgid "Refresh" -msgstr "" - -msgid "Reload current settings from the server." -msgstr "" - -msgid "Delete" -msgstr "" - -msgid "Remove hold" -msgstr "" - -msgid "Reset" -msgstr "" - -msgid "Reset Password" -msgstr "" - -msgid "Reset Password and Log in" -msgstr "" - -msgid "Restore" -msgstr "" - -msgid "Retry" -msgstr "" - -msgid "Revert" -msgstr "" - -#, fuzzy -msgid "Revoke" -msgstr "Visszavont" - -msgid "Save" -msgstr "" - -#, fuzzy -msgid "Set" -msgstr "Tárgy" - -msgid "Show" -msgstr "" - -msgid "Stage" -msgstr "" - -msgid "Update" -msgstr "" - -msgid "View" -msgstr "" - -msgid "Customization" -msgstr "" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "" - -msgid "Expand All" -msgstr "" - -msgid "General" -msgstr "" - -msgid "Identity Settings" -msgstr "" - -msgid "Record Settings" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -msgid "Back to Top" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -msgid "Add custom value" -msgstr "" - -msgid "Available" -msgstr "" - -msgid "Some operations failed." -msgstr "" - -msgid "Operations Error" -msgstr "" - -msgid "Confirmation" -msgstr "" - -msgid "Custom value" -msgstr "" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -msgid "Unsaved Changes" -msgstr "" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "" - -msgid "Hide details" -msgstr "" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -msgid "Redirection" -msgstr "" - -msgid "Select entries to be removed." -msgstr "" - -msgid "Result" -msgstr "" - -msgid "Show details" -msgstr "" - -msgid "Success" -msgstr "" - -msgid "Validation error" -msgstr "" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "" - -msgid "HTTP Error" -msgstr "" - -msgid "Internal Error" -msgstr "" - -msgid "IPA Error" -msgstr "" - -msgid "No response" -msgstr "" - -msgid "Unknown Error" -msgstr "" - -msgid "URL" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -msgid "Settings" -msgstr "" - -msgid "Search" -msgstr "" - -msgid "False" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Allowed to create keytab" -msgstr "" - -msgid "Allowed to retrieve keytab" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Add Kerberos Principal Alias" -msgstr "" - -msgid "New kerberos principal alias" -msgstr "" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "" - -msgid "Authenticating" -msgstr "" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -msgid "Kerberos Principal you entered is expired" -msgstr "" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -#, fuzzy -msgid "Log In Using Certificate" -msgstr "Tanúsítvány" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "" - -msgid "Synchronizing" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -msgid "number of passwords" -msgstr "" - -msgid "seconds" -msgstr "" - -msgid "Migrating" -msgstr "" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -msgid "Password migration was not successful" -msgstr "" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -msgid "Password migration was successful" -msgstr "" - -msgid "Attribute" -msgstr "" - -msgid "Add delegation" -msgstr "" - -msgid "Remove delegations" -msgstr "" - -#, fuzzy -msgid "Add permission" -msgstr "Jogosultságok" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove permissions" -msgstr "Jogosultságok" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -msgid "Remove privileges" -msgstr "" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -msgid "Role Settings" -msgstr "" - -msgid "Add role" -msgstr "" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -msgid "Remove roles" -msgstr "" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -msgid "Add self service permission" -msgstr "" - -msgid "Remove self service permissions" -msgstr "" - -msgid "Add rule" -msgstr "" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to change default group?" -msgstr "" - -#, fuzzy -msgid "Default host group" -msgstr "Alapértelmezett csoport" - -#, fuzzy -msgid "Default user group" -msgstr "Alapértelmezett csoport" - -msgid "Exclusive" -msgstr "" - -msgid "Expression" -msgstr "" - -msgid "Host group rule" -msgstr "" - -msgid "Host group rules" -msgstr "" - -msgid "Inclusive" -msgstr "" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "User group rule" -msgstr "Felhasználói csport" - -#, fuzzy -msgid "User group rules" -msgstr "Felhasználói csport" - -msgid "Add automount key" -msgstr "" - -msgid "Remove automount keys" -msgstr "" - -msgid "Add automount location" -msgstr "" - -msgid "Automount Location Settings" -msgstr "" - -msgid "Remove automount locations" -msgstr "" - -msgid "Add automount map" -msgstr "" - -msgid "Map Type" -msgstr "" - -msgid "Direct" -msgstr "" - -msgid "Indirect" -msgstr "" - -msgid "Remove automount maps" -msgstr "" - -msgid "Add certificate authority" -msgstr "" - -msgid "Remove certificate authorities" -msgstr "" - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -msgid "All" -msgstr "" - -msgid "Any CA" -msgstr "" - -msgid "Any Host" -msgstr "" - -#, fuzzy -msgid "Any Service" -msgstr "Szolgáltatások" - -msgid "Any Profile" -msgstr "" - -msgid "Anyone" -msgstr "" - -#, fuzzy -msgid "Rule status" -msgstr "Igénylés állapota" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -msgid "Remove CA ACLs" -msgstr "" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -msgid "Specified CAs" -msgstr "" - -msgid "Specified Hosts and Groups" -msgstr "" - -msgid "Specified Profiles" -msgstr "" - -#, fuzzy -msgid "Specified Services and Groups" -msgstr "Szolgáltatás-csoportok" - -msgid "Specified Users and Groups" -msgstr "" - -msgid "Permitted to have certificates issued" -msgstr "" - -msgid "Remove certificate profiles" -msgstr "" - -msgid "AA Compromise" -msgstr "" - -msgid "Add principal" -msgstr "" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" - -#, fuzzy -msgid "Certificates" -msgstr "Tanúsítvány" - -#, fuzzy -msgid "Certificate Hold" -msgstr "Tanúsítvány" - -msgid "Cessation of Operation" -msgstr "" - -msgid "Common Name" -msgstr "" - -msgid "the certificate with serial number " -msgstr "" - -msgid "Expires On" -msgstr "" - -#, fuzzy -msgid "Issued on from" -msgstr "Kibocsátó" - -msgid "Issued on to" -msgstr "" - -#, fuzzy -msgid "Maximum serial number" -msgstr "Sorozatszám" - -#, fuzzy -msgid "Minimum serial number" -msgstr "Sorozatszám" - -#, fuzzy -msgid "Revoked on from" -msgstr "Visszavont" - -#, fuzzy -msgid "Revoked on to" -msgstr "Visszavont" - -msgid "Valid not after from" -msgstr "" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -#, fuzzy -msgid "Fingerprints" -msgstr "Ujjlenyomat (SHA1)" - -#, fuzzy -msgid "Get Certificate" -msgstr "Tanúsítvány" - -#, fuzzy -msgid "Certificate Hold Removed" -msgstr "Tanúsítvány" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Issue new certificate" -msgstr "Tanúsítvány" - -#, fuzzy -msgid "Issued By" -msgstr "Kibocsátó" - -#, fuzzy -msgid "Issued On" -msgstr "Kibocsátó" - -#, fuzzy -msgid "Issued To" -msgstr "Kibocsátó" - -msgid "Key Compromise" -msgstr "" - -#, fuzzy -msgid "No Valid Certificate" -msgstr "Tanúsítvány" - -#, fuzzy -msgid "New Certificate" -msgstr "Tanúsítvány" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -msgid "Note" -msgstr "" - -msgid "Organizational Unit" -msgstr "" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -msgid "Privilege Withdrawn" -msgstr "" - -msgid "Reason for Revocation" -msgstr "" - -msgid "Remove certificate hold" -msgstr "" - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -#, fuzzy -msgid "Certificate requested" -msgstr "Tanúsítvány" - -#, fuzzy -msgid "Revoke certificate" -msgstr "Tanúsítvány" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -#, fuzzy -msgid "Certificate Revoked" -msgstr "Tanúsítvány" - -msgid "REVOKED" -msgstr "" - -#, fuzzy -msgid "SHA1 Fingerprint" -msgstr "Ujjlenyomat (SHA1)" - -#, fuzzy -msgid "SHA256 Fingerprint" -msgstr "Ujjlenyomat (SHA1)" - -msgid "Status" -msgstr "" - -msgid "Superseded" -msgstr "" - -msgid "Unspecified" -msgstr "" - -#, fuzzy -msgid "Valid Certificate Present" -msgstr "Tanúsítvány" - -msgid "Valid from" -msgstr "" - -msgid "Valid to" -msgstr "" - -msgid "Validity" -msgstr "" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -#, fuzzy -msgid "View Certificate" -msgstr "Tanúsítvány" - -#, fuzzy -msgid "Certificate Data" -msgstr "Tanúsítvány" - -#, fuzzy -msgid "Certificate For Match" -msgstr "Tanúsítvány" - -#, fuzzy -msgid "Certificate Mapping Match" -msgstr "Tanúsítvány" - -msgid "Matched Users" -msgstr "" - -#, fuzzy -msgid "User Login" -msgstr "Felhasználói csport" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -msgid "Configuration string" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -msgid "Remove certificate mapping data" -msgstr "" - -msgid "Issuer and subject" -msgstr "" - -msgid "Remove certificate identity mapping rules" -msgstr "" - -msgid "Group Options" -msgstr "" - -msgid "Search Options" -msgstr "" - -msgid "SELinux Options" -msgstr "" - -msgid "Server Options" -msgstr "" - -#, fuzzy -msgid "Service Options" -msgstr "Szolgáltatások" - -#, fuzzy -msgid "User Options" -msgstr "Leírás" - -msgid "Forward first" -msgstr "" - -msgid "Forwarding disabled" -msgstr "" - -msgid "Forward only" -msgstr "" - -msgid "Options" -msgstr "" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -msgid "Other Record Types" -msgstr "" - -msgid "Address not valid, can't redirect" -msgstr "" - -msgid "Create dns record" -msgstr "" - -msgid "Creating record." -msgstr "" - -msgid "Record creation failed." -msgstr "" - -msgid "Checking if record exists." -msgstr "" - -msgid "Record not found." -msgstr "" - -msgid "Redirection to PTR record" -msgstr "" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -msgid "Target reverse zone not found." -msgstr "" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -msgid "Standard Record Types" -msgstr "" - -msgid "Records for DNS Zone" -msgstr "" - -msgid "Record Type" -msgstr "" - -msgid "Add DNS zone" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -msgid "DNS Zone Settings" -msgstr "" - -msgid "Remove DNS zones" -msgstr "" - -#, fuzzy -msgid "Remove Permission" -msgstr "Jogosultságok" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Level" -msgstr "" - -msgid "Set Domain Level" -msgstr "" - -#, fuzzy -msgid "Add user group" -msgstr "Felhasználói csport" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -msgid "Group Settings" -msgstr "" - -msgid "External" -msgstr "" - -#, fuzzy -msgid "Groups" -msgstr "Szolgáltatás-csoportok" - -msgid "Group categories" -msgstr "" - -#, fuzzy -msgid "Change to external group" +msgid "change to a POSIX group" msgstr "POSIX-csoportra módosít" - -#, fuzzy -msgid "Change to POSIX group" -msgstr "POSIX-csoportra módosít" - -msgid "Non-POSIX" -msgstr "" - -msgid "POSIX" -msgstr "" - -#, fuzzy -msgid "Remove user groups" -msgstr "Alapértelmezett csoport" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -msgid "Group Type" -msgstr "" - -msgid "Add HBAC rule" -msgstr "" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -msgid "Accessing" -msgstr "" - -msgid "Remove HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Via Service" -msgstr "Szolgáltatások" - -msgid "Who" -msgstr "" - -msgid "Add HBAC service" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -msgid "Remove HBAC services" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -#, fuzzy -msgid "Add HBAC service group" -msgstr "HBAC szolgáltatás-csoport leírása" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove HBAC service groups" -msgstr "HBAC szolgáltatás-csoport leírása" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -msgid "Access Denied" -msgstr "" - -msgid "Access Granted" -msgstr "" - -msgid "Include Disabled" -msgstr "" - -msgid "Include Enabled" -msgstr "" - -msgid "HBAC Test" -msgstr "" - -msgid "Matched" -msgstr "" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" - -msgid "Rules" -msgstr "" - -msgid "Run Test" -msgstr "" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -msgid "Unmatched" -msgstr "" - -msgid "Add host" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -#, fuzzy -msgid "Host Certificate" -msgstr "Tanúsítvány" - -msgid "Host Name" -msgstr "" - -msgid "Delete Key, Unprovision" -msgstr "" - -msgid "Host Settings" -msgstr "" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -msgid "Generate OTP" -msgstr "" - -msgid "Generated OTP" -msgstr "" - -msgid "Kerberos Key" -msgstr "" - -msgid "Kerberos Key Not Present" -msgstr "" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -msgid "One-Time Password" -msgstr "" - -msgid "One-Time Password Not Present" -msgstr "" - -msgid "One-Time Password Present" -msgstr "" - -msgid "Reset OTP" -msgstr "" - -msgid "Reset One-Time Password" -msgstr "" - -msgid "Set OTP" -msgstr "" - -msgid "OTP set" -msgstr "" - -msgid "Set One-Time Password" -msgstr "" - -msgid "Remove hosts" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -msgid "Unprovision" -msgstr "" - -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -msgid "Add host group" -msgstr "" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -msgid "Host Group Settings" -msgstr "" - -msgid "Remove host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -msgid "Identity provider details" -msgstr "" - -msgid "Verify secret" -msgstr "" - -msgid "User to override" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -msgid "Profile" -msgstr "" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -#, fuzzy -msgid "Enter trusted group name." -msgstr "Szolgáltatás-csoport neve" - -msgid "Add ID view" -msgstr "" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -msgid "Apply to host groups" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -msgid "Remove ID views" -msgstr "" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -msgid "Un-apply from host groups" -msgstr "" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -msgid "Un-apply" -msgstr "" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "Add netgroup" -msgstr "" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -msgid "Netgroup Settings" -msgstr "" - -#, fuzzy -msgid "Remove netgroups" -msgstr "Szolgáltatás-csoportok" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -msgid "Add OTP token" -msgstr "" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -msgid "Configure your token" -msgstr "" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -msgid "OTP Token Settings" -msgstr "" - -msgid "Disable token" -msgstr "" - -msgid "Enable token" -msgstr "" - -msgid "Remove OTP tokens" -msgstr "" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "" - -msgid "Show configuration uri" -msgstr "" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -msgid "Add Custom Attribute" -msgstr "" - -#, fuzzy -msgid "Permission settings" -msgstr "Jogosultságok" - -msgid "Attribute breakdown" -msgstr "" - -msgid "Privilege Settings" -msgstr "" - -msgid "Public key:" -msgstr "" - -msgid "Set public key" -msgstr "" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -msgid "Add password policy" -msgstr "" - -#, fuzzy -msgid "Password Policy" -msgstr "Megőrzött jelszavak (darab)" - -msgid "Remove password policies" -msgstr "" - -msgid "Add ID range" -msgstr "" - -msgid "Range Settings" -msgstr "" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -msgid "Domain SID" -msgstr "" - -msgid "Secondary RID base" -msgstr "" - -msgid "Remove ID ranges" -msgstr "" - -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -msgid "Detect" -msgstr "" - -msgid "Local domain" -msgstr "" - -msgid "IPA trust" -msgstr "" - -msgid "Active Directory winsync" -msgstr "" - -msgid "Add RADIUS server" -msgstr "" - -msgid "RADIUS Proxy Server Settings" -msgstr "" - -msgid "Remove RADIUS servers" -msgstr "" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -msgid "Force Update" -msgstr "" - -msgid "Add SELinux user map" -msgstr "" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Server Roles" -msgstr "Szolgáltatás-csoportok" - -#, fuzzy -msgid "Server Role" -msgstr "Szolgáltatás neve" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -msgid "Delete Server" -msgstr "" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -#, fuzzy -msgid "Add service" -msgstr "Szolgáltatások" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -#, fuzzy -msgid "Service Certificate" -msgstr "Tanúsítvány" - -#, fuzzy -msgid "Service Settings" -msgstr "Szolgáltatások" - -#, fuzzy -msgid "Provisioning" -msgstr "Jogosultságok" - -#, fuzzy -msgid "Remove services" -msgstr "Szolgáltatások" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -msgid "Unprovisioning service" -msgstr "" - -#, fuzzy -msgid "Service unprovisioned" -msgstr "Szolgáltatás-csoportok" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "" - -msgid "SSH public keys" -msgstr "" - -msgid "SSH public key:" -msgstr "" - -msgid "Set SSH key" -msgstr "" - -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" - -msgid "Add stage user" -msgstr "" - -msgid "Stage users" -msgstr "" - -msgid "Preserved users" -msgstr "" - -msgid "Remove preserved users" -msgstr "" - -msgid "Remove stage users" -msgstr "" - -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -msgid "User categories" -msgstr "" - -#, fuzzy -msgid "Add subid" -msgstr "Szolgáltatások" - -msgid "Assigned subids" -msgstr "" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -msgid "Add sudo command" -msgstr "" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -msgid "Remove sudo commands" -msgstr "" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -msgid "Add sudo command group" -msgstr "" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -msgid "Remove sudo command groups" -msgstr "" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -msgid "Add sudo rule" -msgstr "" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "" - -msgid "Any Command" -msgstr "" - -msgid "Any Group" -msgstr "" - -msgid "Run Commands" -msgstr "" - -msgid "Deny" -msgstr "" - -msgid "Access this host" -msgstr "" - -msgid "Option added" -msgstr "" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -msgid "Remove sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -msgid "Specified Commands and Groups" -msgstr "" - -#, fuzzy -msgid "Specified Groups" -msgstr "Szolgáltatás-csoportok" - -msgid "Remove sudo options" -msgstr "" - -msgid "Autogenerated" -msgstr "" - -msgid "Segment details" -msgstr "" - -#, fuzzy -msgid "Replication configuration" -msgstr "Visszavonás oka" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -msgid "Account" -msgstr "" - -msgid "Add trust" -msgstr "" - -msgid "Administrative account" -msgstr "" - -msgid "SID blocklists" -msgstr "" - -msgid "Trust Settings" -msgstr "" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -msgid "Pre-shared password" -msgstr "" - -msgid "Remove trusts" -msgstr "" - -msgid "Remove domains" -msgstr "" - -msgid "Alternative UPN suffixes" -msgstr "" - -msgid "User attributes for SMB services" -msgstr "" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - -msgid "Account Settings" -msgstr "" - -msgid "Account Status" -msgstr "" - -msgid "Active users" -msgstr "" - -msgid "Add user" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -msgid "Auto assign subordinate ids" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "" - -msgid "Contact Settings" -msgstr "" - -msgid "Delete mode" -msgstr "" - -msgid "Employee Information" -msgstr "" - -msgid "Error changing account status" -msgstr "" - -#, fuzzy -msgid "Password expiration" -msgstr "Megőrzött jelszavak (darab)" - -msgid "Mailing Address" -msgstr "" - -msgid "Misc. Information" -msgstr "" - -msgid "delete" -msgstr "" - -msgid "preserve" -msgstr "" - -msgid "No private group" -msgstr "" - -msgid "Remove users" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Unlock" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -msgid "Members" -msgstr "" - -msgid "My User Vaults" -msgstr "" - -msgid "Owners" -msgstr "" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Service Vaults" -msgstr "Szolgáltatások" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -msgid "Vault Type" -msgstr "" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -msgid "User Vaults" -msgstr "" - -msgid "Current password is required" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "Jelszó maximális élettartama (nap)" - -msgid "First OTP" -msgstr "" - -msgid "New password is required" -msgstr "" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Password change complete" -msgstr "" - -msgid "Your password has expired. Please enter a new password." -msgstr "" - -#, fuzzy -msgid "Passwords must match" -msgstr "A jelszavak nem egyeznek meg" - -msgid "Password reset was not successful." -msgstr "" - -msgid "Reset your password." -msgstr "" - -msgid "Second OTP" -msgstr "" - -msgid "Verify Password" -msgstr "" - -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -msgid "Some entries were not deleted" -msgstr "" - -msgid "Quick Links" -msgstr "" - -msgid "Select All" -msgstr "" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -msgid "Unselect All" -msgstr "" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "" - -msgid "Audit" -msgstr "" - -msgid "Authentication" -msgstr "" - -msgid "Automount" -msgstr "" - -msgid "DNS" -msgstr "" - -msgid "Host-Based Access Control" -msgstr "" - -msgid "Identity" -msgstr "" - -#, fuzzy -msgid "Network Services" -msgstr "Szolgáltatások" - -msgid "Policy" -msgstr "" - -msgid "Role-Based Access Control" -msgstr "" - -msgid "Subordinate IDs" -msgstr "" - -msgid "Sudo" -msgstr "" - -msgid "Topology" -msgstr "" - -msgid "True" -msgstr "" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -msgid "First" -msgstr "" - -msgid "Last" -msgstr "" - -msgid "Next" -msgstr "" - -msgid "Page" -msgstr "" - -msgid "Prev" -msgstr "" - -msgid "Undo" -msgstr "" - -msgid "Undo this change." -msgstr "" - -msgid "Undo All" -msgstr "" - -msgid "Undo all changes in this field." -msgstr "" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -msgid "Must be a decimal number" -msgstr "" - -msgid "Format error" -msgstr "" - -msgid "Must be an integer" -msgstr "" - -msgid "Not a valid IP address" -msgstr "" - -msgid "Not a valid IPv4 address" -msgstr "" - -msgid "Not a valid IPv6 address" -msgstr "" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -msgid "Parse error" -msgstr "" - -msgid "Must be a positive number" -msgstr "" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -#, fuzzy -msgid "Required field" -msgstr "Igénylés azonosítója" - -msgid "Unsupported value" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -msgid "IdP max life" -msgstr "" - -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "" - -msgid "IdP max renew" -msgstr "" - -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -#, fuzzy -msgid "Invalid LDAP URI." -msgstr "LDAP URI" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -msgid "password policy" -msgstr "" - -msgid "password policies" -msgstr "" - -#, fuzzy -msgid "Password Policies" -msgstr "Megőrzött jelszavak (darab)" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "Grace login limit" -msgstr "" - -msgid "Number of LDAP authentications allowed after expiration" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -#, fuzzy -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "Jelszó maximális élettartama (nap)" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#, fuzzy, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -#, fuzzy -msgid "service" -msgstr "Szolgáltatások" - -#, fuzzy -msgid "services" -msgstr "Szolgáltatások" - -msgid "Service principal alias" -msgstr "" - -msgid "Base-64 encoded service certificate" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." -msgstr "" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -msgid "Add a new SMB service." -msgstr "" - -#, fuzzy -msgid "SMB service NetBIOS name" -msgstr "Szolgáltatás neve" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified service \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Remove principal alias from a service" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, fuzzy, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Delete an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Modify an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -#, fuzzy -msgid "Certificate Authority" -msgstr "Tanúsítvány" - -#, fuzzy -msgid "Certificate Authorities" -msgstr "Tanúsítvány" - -msgid "Name for referencing the CA" -msgstr "" - -msgid "Description of the purpose of the CA" -msgstr "" - -msgid "Authority ID" -msgstr "" - -msgid "Dogtag Authority ID" -msgstr "" - -#, fuzzy -msgid "Subject DN" -msgstr "Tárgy" - -msgid "Subject Distinguished Name" -msgstr "" - -#, fuzzy -msgid "Issuer DN" -msgstr "Kibocsátó" - -msgid "Issuer Distinguished Name" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -#, fuzzy -msgid "Certificate chain" -msgstr "Tanúsítvány" - -msgid "X.509 certificate chain" -msgstr "" - -#, fuzzy -msgid "RSN Version" -msgstr "Jogosultságok" - -#, fuzzy -msgid "Random Serial Number Version" -msgstr "Sorozatszám" - -msgid "Search for CAs." -msgstr "" - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "Display the properties of a CA." -msgstr "" - -msgid "Create a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Created CA \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -msgid "Modify CA configuration." -msgstr "" - -#, fuzzy, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "IPA CA cannot be disabled" -msgstr "" - -msgid "Enable a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Subject email address" -msgstr "" - -#, fuzzy -msgid "Subject DNS name" -msgstr "Tárgy" - -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -#, fuzzy -msgid "Subject URI" -msgstr "Tárgy" - -msgid "Subject IP Address" -msgstr "" - -#, fuzzy -msgid "Subject OID" -msgstr "Tárgy" - -#, fuzzy -msgid "Subject UPN" -msgstr "Tárgy" - -msgid "Subject Kerberos principal name" -msgstr "" - -msgid "Subject Other Name" -msgstr "" - -#, fuzzy -msgid "Serial number (hex)" -msgstr "Sorozatszám" - -msgid "Request status" -msgstr "Igénylés állapota" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "Visszavont" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -#, fuzzy -msgid "7 is not a valid revocation reason" -msgstr "Visszavonás oka" - -#, fuzzy -msgid "Status of the certificate" -msgstr "Tanúsítvány" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -msgid "command" -msgstr "" - -msgid "commands" -msgstr "" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -#, fuzzy -msgid "runAs groups" -msgstr "Felhasználói csport" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -#, fuzzy, python-format -msgid "Added user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Preserved user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, fuzzy, python-format -msgid "Modified user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, fuzzy, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, fuzzy, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, fuzzy, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -#, fuzzy -msgid "Password grace count" -msgstr "Megőrzött jelszavak (darab)" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -#, fuzzy, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás hozzáadva" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "A %(value)s szolgáltatás eltávolítva" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" -msgstr "" - -#, fuzzy -msgid "Request must be a dict" -msgstr "Igénylés állapota" - -msgid "Request is missing \"method\"" -msgstr "" - -msgid "Request is missing \"params\"" -msgstr "" - -msgid "params must be a list" -msgstr "" - -msgid "params must contain [args, options]" -msgstr "" - -msgid "params[0] (aka args) must be a list" -msgstr "" - -msgid "params[1] (aka options) must be a dict" -msgstr "" - -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" - -msgid "CIFS server denied your credentials" -msgstr "" - -msgid "communication with CIFS server was unsuccessful" -msgstr "" - -msgid "AD domain controller" -msgstr "" - -msgid "unsupported functional level" -msgstr "" - -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" - -msgid "Cannot find specified domain or server name" -msgstr "" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" - -msgid "At least the domain or IP address should be specified" -msgstr "" - -#, python-format -msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" -msgstr "" - -msgid "no trusted domain is configured" -msgstr "" - -msgid "domain is not configured" -msgstr "" - -msgid "SID is not valid" -msgstr "" - -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "" - -msgid "SID does not match any trusted domain" -msgstr "" - -msgid "Trust setup" -msgstr "" - -msgid "Our domain is not configured" -msgstr "" - -msgid "No trusted domain is not configured" -msgstr "" - -msgid "trusted domain object" -msgstr "" - -msgid "domain is not trusted" -msgstr "" - -msgid "no trusted domain matched the specified flat name" -msgstr "" - -msgid "trusted domain object not found" -msgstr "" - -msgid "Object does not belong to a trusted domain" -msgstr "" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "" - -msgid "Ambiguous search, user domain was not specified" -msgstr "" - -msgid "Trusted domain did not return a unique object" -msgstr "" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "" - -msgid "trusted domain user not found" -msgstr "" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "" - -msgid "CIFS credentials object" -msgstr "" - -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "" - -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" - -#, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" - -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" - -msgid "Credentials" -msgstr "" - -msgid "Missing credentials for cross-forest communication" -msgstr "" - -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" - -#, python-format -msgid "must equal %r" -msgstr "" - -msgid "Hello world" -msgstr "" - -#, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "" - -msgid "must be at least 1" -msgstr "" - -msgid "Out of memory\n" -msgstr "" - -msgid "Warning unrecognized encryption type.\n" -msgstr "" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -msgid "Out of memory!?\n" -msgstr "" - -msgid "Enctype comparison failed!\n" -msgstr "" - -#, fuzzy -msgid "Password is too long!\n" -msgstr "A jelszavak nem egyeznek!\n" - -msgid "Failed to create random key!\n" -msgstr "" - -msgid "Failed to create key!\n" -msgstr "" - -msgid "Bad or unsupported salt type.\n" -msgstr "" - -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" diff --git a/po/id.po b/po/id.po index a6a921eb6..7ecc3acae 100644 --- a/po/id.po +++ b/po/id.po @@ -18,154 +18,429 @@ msgstr "" "Plural-Forms: nplurals=1; plural=0;\n" "X-Generator: Weblate 4.11\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "tidak dapat membuka berkas konfigurasi %s\n" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "tidak dapat melakukan stat() berkas konfigurasi %s\n" - -#, c-format -msgid "out of memory\n" -msgstr "kehabisan memori!\n" - -#, c-format -msgid "read error\n" -msgstr "galat baca\n" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "Tidak dapat mengurai nama prinsipal\n" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "krb5_parse_name %1$d: %2$s\n" - -#, c-format -msgid "Removing principal %s\n" -msgstr "Menghapus prinsipal %s\n" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "Gagal membuka keytab\n" - -#, c-format -msgid "principal not found\n" -msgstr "prinsipal tidak ditemukan\n" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "krb5_kt_get_entry %1$d: %2$s\n" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "Tak bisa menghapus entri\n" - -#, c-format -msgid "kvno %d\n" -msgstr "kvno %d\n" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "krb5_kt_remove_entry %1$d: %2$s\n" - -#, fuzzy, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "Gagal mendapatkan hasil: %s\n" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "Tidak dapat mengurai prinsipal\n" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "krb5_unparse_name %1$d: %2$s\n" - -#, c-format -msgid "realm not found\n" -msgstr "realm tidak ditemukan\n" - -msgid "Print debugging information" -msgstr "Cetak informasi awakutu" - -msgid "Debugging output" -msgstr "Keluaran awakutu" - msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" msgstr "" -"Prinsipal yang akan dihapus dari keytab (misalnya: ftp/ftp.example." -"com@EXAMPLE.COM)" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" -msgid "Kerberos Service Principal Name" -msgstr "Nama Prisipal Layanan Kerberos" +msgid " * 1 - keyCompromise\n" +msgstr " * 1 - keyCompromise\n" -msgid "The keytab file to remove the principcal(s) from" -msgstr "Berkas keytab yang akan dihapus prinsipalnya" +msgid " * 10 - aACompromise\n" +msgstr " * 10 - aACompromise\n" -msgid "Keytab File Name" -msgstr "Nama Berkas Keytab" +msgid " * 2 - cACompromise\n" +msgstr " * 2 - cACompromise\n" -msgid "Remove all principals in this realm" -msgstr "Hapus semua prinsipal di realm ini" +msgid " * 6 - certificateHold\n" +msgstr " * 6 - certificateHold\n" -msgid "Realm name" -msgstr "Nama realm" +msgid " * 9 - privilegeWithdrawn\n" +msgstr " * 9 - privilegeWithdrawn\n" -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "Inisialisasi konteks Kerberos gagal\n" +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "${count} pengguna diaktifkan" -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "Gagal membuka keytab '%1$s': %2$s\n" +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "${count} pengguna digelar" + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "%(attr)s: Hanya satu nilai yang diperbolehkan." + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d ACI cocok" + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "%(count)d CA cocok" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "%(count)d token OTP cocok" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "%(count)d grup cocok" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "%(count)d host sesuai" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "%(count)d hostgroup cocok" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "%(count)d pengaya telah dimuat" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "%(count)d pengguna cocok" + +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d variabel" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)s server cocok" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "%(count)s peran server cocok" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "%(count)s pengguna cocok" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "%(desc)s: %(info)s" + +#, python-format +msgid "%(exception)s" +msgstr "%(exception)s" + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "%i host atau hostgroup ditambahkan." + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "%i host atau hostgroup dibuang." + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "%i hosts atau hostgroups ditambahkan." + +msgid "A description of this command" +msgstr "Suatu penjelasan atas perintah ini" + +msgid "A group may not be a member of itself" +msgstr "Sebuah grup tidak mungkin menjadi anggota grup itu sendiri" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "ACI dengan nama \"%s\" tidak ditemukan" + +msgid "Account disabled" +msgstr "Akun dinonaktifkan" + +msgid "Active Directory domain" +msgstr "Domain Active Directory" + +msgid "Add host group" +msgstr "Tambah grup host" + +#, python-format +msgid "Added %(map)s" +msgstr "Ditambahkan %(map)s" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "Menambah token OTP \"%(value)s\"" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Grup \"%(value)s\" ditambahkan" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "Host \"%(value)s\" ditambahkan" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Hostgroup \"%(value)s\" ditambahkan" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "Segmen \"%(value)s\" ditambahkan" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" ditambahkan" + +msgid "Allow query" +msgstr "Izinkan kuiri" + +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "Terjadi kesalahan internal (${error})" + +msgid "Asks for a non-random password to use for the principal" +msgstr "Meminta kata sandi non-acak untuk digunakan bagi prinsipal" + +msgid "Audit" +msgstr "Audit" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "Aturan anggota otomatis: %s tidak ditemukan!" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Penguraian Base64 gagal: %(reason)s" + +msgid "Bind rule type" +msgstr "Tipe aturan bind" + +msgid "CSR" +msgstr "CSR" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "Operasi sertifikat tidak dapat diselesaikan: %(error)s" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "Mengubah keadaan server \"%(value)s\"." + +#, python-brace-format +msgid "Click to ${action}" +msgstr "Klik untuk ${action}" #, c-format msgid "Closing keytab failed\n" msgstr "Menutup keytab gagal\n" -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "krb5_kt_close %1$d: %2$s\n" +msgid "Comma separated encryption types list" +msgstr "Daftar tipe enkripsi yang dipisahkan koma" + +msgid "Command name" +msgstr "Nama perintah" + +msgid "Command not implemented" +msgstr "Perintah tidak diimplementasikan" + +msgid "Confirm (password)" +msgstr "Konfirmasi (kata sandi)" + +msgid "Consume an entitlement." +msgstr "Mengkonsumsi suatu hak." + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dibuat" + +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "CA \"%(value)s\" dibuat" + +msgid "DLV Digest" +msgstr "Digest DLV" + +msgid "DNAME Target" +msgstr "Target DNAME" + +msgid "DNS Server name" +msgstr "Nama Server DNS" + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "Server DNS %(server)s: %(error)s." + +msgid "DS Digest" +msgstr "Digest DS" + +msgid "Debugging output" +msgstr "Keluaran awakutu" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "Hapus '%(value)s' %(name)s?" + +msgid "Delete a hostgroup." +msgstr "Menghapus suatu hostgroup." + +msgid "Delete all?" +msgstr "Hapus semua?" + +msgid "Delete group." +msgstr "Menghapus grup." + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dihapus" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "CA \"%(value)s\" dihapus" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Menghapus token OTP \"%(value)s\"" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Grup \"%(value)s\" dihapus" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "Host \"%(value)s\" dihapus" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Hostgroup \"%(value)s\" dihapus" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dihapus" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dihapus" + +#, python-format +msgid "Deprecated; use %s" +msgstr "Usang; gunakan %s" + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "CA \"%(value)s\" dinonaktifkan" + +msgid "Domain" +msgstr "Domain" + +msgid "Domain GUID" +msgstr "GUID Domain" + +msgid "Domain SID" +msgstr "SID Domain" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "Sunting ${entity}" + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "CA \"%(value)s\" difungsikan" + +msgid "Encryption types to request" +msgstr "Tipe enkripsi yang akan diminta" + +msgid "Enrollment UUID (not implemented)" +msgstr "UUID pendaftaran (tidak diimplementasikan)" #, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "Inisialisasi konteks Kerberos gagal: %1$s (%2$d)\n" +msgid "Enrollment failed. %s\n" +msgstr "Pendaftaran gagal. %s\n" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "Masukkan %(label)s lagi untuk verifikasi: " + +#, python-format +msgid "Entry %s does not exist" +msgstr "Entri %s tidak ada" + +#, python-format +msgid "Entry %s not found" +msgstr "Entri %s tidak ditemukan" #, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "Tidak dapat mengurai prinsipal: %1$s (%2$d)\n" +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "Galat saat mendapatkan ranah Kerberos default: %s.\n" #, c-format -msgid "No keys accepted by KDC\n" -msgstr "Tidak ada kunci yang diterima oleh KDC\n" +msgid "Error obtaining initial credentials: %s.\n" +msgstr "Galat saat memperoleh kredensial awal: %s.\n" #, c-format -msgid "Out of memory \n" -msgstr "Kehabisan memori \n" +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "Galat saat mengurai \"%1$s\": %2$s.\n" #, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "Tak bisa menginisialisasi pustaka ldap!\n" - -msgid "Simple bind failed\n" -msgstr "Bind sederhana gagal\n" - -msgid "SASL Bind failed\n" -msgstr "Bind SASL gagal\n" +msgid "Error resolving keytab: %s.\n" +msgstr "Galat saat me-resolve keytab: %s.\n" #, c-format -msgid "Operation failed: %s\n" -msgstr "Operasi gagal: %s\n" +msgid "Error storing creds in credential cache: %s.\n" +msgstr "Galat saat menyimpan kredensial dalam singgahan kredensial: %s.\n" + +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "Memperluas penyangga dalam jsonrpc_handle_response gagal" + +msgid "Expires On" +msgstr "Kedaluwarsa Pada" + +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "Gagal mengekstrak data dari respons JSON-RPC: %s\n" + +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "Gagal mengekstrak kesalahan dari respons JSON-RPC: %s\n" + +msgid "Failed service/service groups" +msgstr "Grup layanan/layanan gagal" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "Gagal mengikat ke server!\n" + +#, c-format +msgid "Failed to create control!\n" +msgstr "Gagal membuat kontrol!\n" + +msgid "Failed to decode control reply!\n" +msgstr "Gagal mendekode balasan kontrol!\n" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "Gagal memperoleh keytab\n" #, c-format msgid "Failed to get result: %s\n" msgstr "Gagal mendapatkan hasil: %s\n" #, c-format -msgid "Timeout exceeded." -msgstr "Tenggat waktu terlampaui." +msgid "Failed to open config file %s\n" +msgstr "Gagal membuka berkas konfigurasi %s\n" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "Gagal membuka keytab\n" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "Gagal membuka keytab '%1$s': %2$s\n" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "Gagal mengurai berkas konfig %s\n" #, c-format msgid "Failed to parse extended result: %s\n" @@ -175,359 +450,64 @@ msgstr "Gagal mengurai hasil yang diperluas: %s\n" msgid "Failed to parse result: %s\n" msgstr "Gagal mengurai hasil: %s\n" -#, c-format -msgid "Missing reply control list!\n" -msgstr "Kurang daftar kontrol balasan!\n" +msgid "Failed to resolve symlink to keytab.\n" +msgstr "Gagal mengurai symlink ke keytab\n" #, c-format -msgid "Missing reply control!\n" -msgstr "Kehilangan kontrol balasan!\n" - -#, c-format -msgid "Out of Memory!\n" -msgstr "Kehabisan Memori!\n" - -#, c-format -msgid "Failed to create control!\n" -msgstr "Gagal membuat kontrol!\n" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "Gagal mengikat ke server!\n" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "Gagal memperoleh keytab\n" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "ber_init() gagal, Kontrol tidak valid ?!\n" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "ber_scanf() gagal, tidak dapat menemukan kvno ?!\n" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "Gagal mengambil tipe enkripsi #%d\n" +msgid "Failed to retrieve any keys" +msgstr "Gagal mengambil kunci apapun" #, c-format msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" msgstr "Gagal mengambil tipe enkripsi %1$s (#%2$d)\n" #, c-format -msgid "Failed to retrieve any keys" -msgstr "Gagal mengambil kunci apapun" +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "Gagal mengambil tipe enkripsi #%d\n" -msgid "Failed to decode control reply!\n" -msgstr "Gagal mendekode balasan kontrol!\n" +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "Gagal mengurai Permintaan Penandatanganan Sertifikat: %s" -#, c-format -msgid "Passwords do not match!\n" -msgstr "Kata sandi tidak cocok!\n" +msgid "Force the host join. Rejoin even if already joined." +msgstr "Paksa host bergabung. Bergabung kembali bahkan jika sudah bergabung." -#, c-format -msgid "Failed to open config file %s\n" -msgstr "Gagal membuka berkas konfigurasi %s\n" +msgid "Forwarders" +msgstr "Forwarder" -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "Gagal mengurai berkas konfig %s\n" +#, python-format +msgid "Group '%s' does not exist" +msgstr "Grup '%s' tidak ada" -msgid "Failed to resolve symlink to keytab.\n" -msgstr "Gagal mengurai symlink ke keytab\n" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "Mencetak sesedikat mungkin" - -msgid "Output only on errors" -msgstr "Keluaran hanya pada kesalahan" - -msgid "Output debug info" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -msgid "Server Name" -msgstr "Nama Peladen" - -#, fuzzy -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"Prinsipal yang akan dihapus dari keytab (misalnya: ftp/ftp.example." -"com@EXAMPLE.COM)" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Encryption types to request" -msgstr "Tipe enkripsi yang akan diminta" - -msgid "Comma separated encryption types list" -msgstr "Daftar tipe enkripsi yang dipisahkan koma" - -msgid "Show the list of permitted encryption types and exit" -msgstr "Tampilkan daftar tipe enkripsi yang diizinkan dan keluar" - -msgid "Permitted Encryption Types" -msgstr "Tipe Enkripsi yang Diizinkan" - -msgid "Asks for a non-random password to use for the principal" -msgstr "Meminta kata sandi non-acak untuk digunakan bagi prinsipal" - -msgid "LDAP DN" -msgstr "DN LDAP" - -#, fuzzy -msgid "DN to bind as if not using kerberos" -msgstr "Kata sandi LDAP (jika tidak menggunakan Kerberos)" - -#, fuzzy -msgid "LDAP password" -msgstr "kata sandi" - -#, fuzzy -msgid "password to use if not using kerberos" -msgstr "Kata sandi LDAP (jika tidak menggunakan Kerberos)" - -msgid "Prompt for LDAP password" -msgstr "" - -#, fuzzy -msgid "Path to the IPA CA certificate" -msgstr "harus merupakan sebuah sertifikat" - -#, fuzzy -msgid "IPA CA certificate" -msgstr "harus merupakan sebuah sertifikat" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Supported encryption types:\n" -msgstr "Tipe Enkripsi yang Diizinkan" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -msgid "Enter LDAP password" -msgstr "" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" - -#, c-format -msgid "Discovered server %s\n" -msgstr "" - -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Using provided server %s\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -msgid "New Principal Password" -msgstr "" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, fuzzy, c-format -msgid "Invalid Service Principal Name\n" -msgstr "Nama Prisipal Layanan Kerberos" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to open Keytab\n" -msgstr "Gagal membuka keytab\n" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to create key material\n" -msgstr "Gagal membuat kontrol!\n" - -#, fuzzy, c-format -msgid "Failed to get keytab\n" -msgstr "Gagal membuka keytab\n" - -#, fuzzy, c-format -msgid "Failed to add key to the keytab\n" -msgstr "Gagal membuka keytab\n" - -#, fuzzy, c-format -msgid "Failed to close the keytab\n" -msgstr "Gagal membuka keytab\n" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Out of memory!\n" -msgstr "Kehabisan memori!\n" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "Tidak ada izin bagi bergabungnya host ini ke domain IPA.\n" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "Tidak ada izin tulis pada berkas keytab '%s'\n" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "access() pada %1$s gagal: errno = %2$d\n" - -#, c-format -msgid "Out of memory!" -msgstr "Kehabisan memori!" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "Tidak bisa memfungsikan SSL dalam LDAP\n" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "Mencari %1$s pada rootdse gagal dengan galat %2$d\n" - -#, c-format -msgid "No values for %s" -msgstr "Tidak ada nilai bagi %s" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "Mencari namingContext IPA gagal dengan galat %d\n" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "IPA namingContext tidak ditemukan\n" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "Tak bisa menentukan root DN dari %s\n" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "Pendaftaran gagal. %s\n" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "prinsipal tidak ditemukan dalam respons XML-RPC\n" +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "Aturan HBAC %(rule)s tidak ditemukan" #, c-format msgid "Host is already joined.\n" msgstr "Host sudah bergabung.\n" -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "curl_slist_append() gagal untuk nilai: '%s'\n" +msgid "Hostname of this server" +msgstr "Nama host peladen ini" + +msgid "IPA Server to use" +msgstr "Server IPA yang akan digunakan" #, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "curl_easy_setopt() gagal\n" +msgid "IPA namingContext not found\n" +msgstr "IPA namingContext tidak ditemukan\n" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Hak akses tidak mencukupi: %(info)s" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Permintaan JSON-RPC tidak valid: %(error)s" #, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "Memperluas penyangga dalam jsonrpc_handle_response gagal" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "curl_global_init() gagal\n" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "curl_easy_init() gagal\n" - -#, c-format -msgid "json_dumps() failed\n" -msgstr "json_dumps() gagal\n" - -#, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "" -"Permintaan JSON-RPC:\n" -"%s\n" +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "Panggilan JSON-RPC gagal dengan kode status: %li\n" #, c-format msgid "JSON-RPC call failed: %s\n" @@ -538,8 +518,12 @@ msgid "JSON-RPC call was unauthorized. Check your credentials.\n" msgstr "Panggilan JSON-RPC tanpa otorisasi. Periksa kredensial Anda.\n" #, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "Panggilan JSON-RPC gagal dengan kode status: %li\n" +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "" +"Permintaan JSON-RPC:\n" +"%s\n" #, c-format msgid "" @@ -549,9 +533,160 @@ msgstr "" "Respon JSON-RPC:\n" "%s\n" +msgid "Kerberos Service Principal Name" +msgstr "Nama Prisipal Layanan Kerberos" + #, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "Gagal mengekstrak kesalahan dari respons JSON-RPC: %s\n" +msgid "Kerberos context initialization failed\n" +msgstr "Inisialisasi konteks Kerberos gagal\n" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "Inisialisasi konteks Kerberos gagal: %1$s (%2$d)\n" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Kesalahan kerberos: %(major)s/%(minor)s" + +msgid "Keytab File Name" +msgstr "Nama Berkas Keytab" + +msgid "LDAP DN" +msgstr "DN LDAP" + +msgid "LDAP URI" +msgstr "URI LDAP" + +msgid "LDAP basedn" +msgstr "basedn LDAP" + +msgid "LDAP password (if not using Kerberos)" +msgstr "Kata sandi LDAP (jika tidak menggunakan Kerberos)" + +msgid "Mailing Address" +msgstr "Alamat Surat" + +msgid "Master file" +msgstr "Berkas induk" + +msgid "Maximum serial number" +msgstr "Nomor seri maksimum" + +msgid "Minimum serial number" +msgstr "Nomor seri minimum" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "Kurang daftar kontrol balasan!\n" + +#, c-format +msgid "Missing reply control!\n" +msgstr "Kehilangan kontrol balasan!\n" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "ACI \"%(value)s\" telah dimodifikasi" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "CA \"%(value)s\" diubah" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "Mengubah token OTP \"%(value)s\"" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Grup \"%(value)s\" dimodifikasi" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "Host \"%(value)s\" dimodifikasi" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Hostgroup \"%(value)s\" dimodifikasi" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "Segmen \"%(value)s\" dimodifikasi" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Pengguna \"%(value)s\" dimodifikasi" + +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "Ubah '%(value)s' %(name)s?" + +msgid "Modify a hostgroup." +msgstr "Memodifikasi suatu hostgroup." + +msgid "Must be a decimal number" +msgstr "Harus angka desimal" + +msgid "Must be a positive number" +msgstr "Harus angka positif" + +msgid "Must be an integer" +msgstr "Harus bilangan bulat" + +msgid "Must be disabled first" +msgstr "Harus dinon-fungsikan terlebih dahulu" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "Tidak ada kunci yang diterima oleh KDC\n" + +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "Tidak ada izin bagi bergabungnya host ini ke domain IPA.\n" + +#, c-format +msgid "No values for %s" +msgstr "Tidak ada nilai bagi %s" + +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "Tidak ada izin tulis pada berkas keytab '%s'\n" + +msgid "Non-POSIX" +msgstr "Non-POSIX" + +msgid "Nonce" +msgstr "Nonce" + +msgid "Number of plugins loaded" +msgstr "Cacah pengaya yang dimuat" + +msgid "OTP Token" +msgstr "Token OTP" + +msgid "Only one value is allowed" +msgstr "Hanya satu nilai yang diperbolehkan" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "Operasi gagal: %s\n" + +#, c-format +msgid "Out of Memory!\n" +msgstr "Kehabisan Memori!\n" + +#, c-format +msgid "Out of memory \n" +msgstr "Kehabisan memori \n" + +#, c-format +msgid "Out of memory!" +msgstr "Kehabisan memori!" + +#, c-format +msgid "Out of memory!\n" +msgstr "Kehabisan memori!\n" + +msgid "Output only on errors" +msgstr "Keluaran hanya pada kesalahan" #, c-format msgid "Parsing JSON-RPC response failed: %s\n" @@ -562,34 +697,167 @@ msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" msgstr "" "Penguraian respons JSON-RPC gagal: tidak ada nilai 'hasil' yang ditemukan.\n" -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "Gagal mengekstrak data dari respons JSON-RPC: %s\n" +msgid "Password cannot be set on enrolled host." +msgstr "Kata sandi tidak dapat ditata pada host yang didaftarkan." + +msgid "Password is too long!\n" +msgstr "Kata sandi terlalu panjang!\n" + +msgid "Passwords do not match" +msgstr "Kata sandi tidak cocok" + +msgid "Passwords do not match!" +msgstr "Kata sandi tidak cocok!" #, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "json_pack_ex() gagal: %s\n" +msgid "Passwords do not match!\n" +msgstr "Kata sandi tidak cocok!\n" + +msgid "Passwords must match" +msgstr "Kata sandi harus cocok" + +msgid "Permitted Encryption Types" +msgstr "Tipe Enkripsi yang Diizinkan" + +msgid "Print as little as possible" +msgstr "Mencetak sesedikat mungkin" + +msgid "Print debugging information" +msgstr "Cetak informasi awakutu" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "Mencetak keluaran XML-RPC mentah dalam mode GSSAPI" + +msgid "Public key:" +msgstr "Kunci publik:" + +msgid "Quiet mode. Only errors are displayed." +msgstr "Mode senyap. Hanya galat yang ditampilkan." + +msgid "Realm name" +msgstr "Nama realm" + +msgid "Reason" +msgstr "Alasan" + +msgid "Record type" +msgstr "Tipe record" + +msgid "Remove all principals in this realm" +msgstr "Hapus semua prinsipal di realm ini" #, c-format -msgid "Unenrollment successful.\n" +msgid "Removing principal %s\n" +msgstr "Menghapus prinsipal %s\n" + +msgid "Reset OTP" +msgstr "OTP Reset" + +msgid "Results are truncated, try a more specific search" +msgstr "Hasil yang terpotong, coba cari dengan lebih spesifik" + +msgid "SASL Bind failed\n" +msgstr "Bind SASL gagal\n" + +msgid "SRV Target" +msgstr "Target SRV" + +msgid "SSH public key:" +msgstr "Kunci publik SSH:" + +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "Mencari %1$s pada rootdse gagal dengan galat %2$d\n" + +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "Mencari namingContext IPA gagal dengan galat %d\n" + +msgid "Serial" +msgstr "Serial" + +msgid "Server Name" +msgstr "Nama Peladen" + +msgid "Service Options" +msgstr "Opsi Layanan" + +msgid "Show the list of permitted encryption types and exit" +msgstr "Tampilkan daftar tipe enkripsi yang diizinkan dan keluar" + +msgid "Simple bind failed\n" +msgstr "Bind sederhana gagal\n" + +msgid "Specifies where to store keytab information." +msgstr "Menentukan tempat menyimpan informasi keytab." + +msgid "Subject Distinguished Name" +msgstr "Distinguished Name Subjek" + +msgid "Submit a certificate signing request." +msgstr "Mengirim sebuah permintan penandatanganan sertifikat." + +msgid "Sudo" +msgstr "Sudo" + +msgid "Target" +msgstr "Target" + +msgid "Target DN" +msgstr "DN Target" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "Nama host harus fully-qualified: %s\n" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "Nama host tidak boleh: %s\n" + +msgid "The keytab file to remove the principcal(s) from" +msgstr "Berkas keytab yang akan dihapus prinsipalnya" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" msgstr "" +"Prinsipal yang akan dihapus dari keytab (misalnya: ftp/ftp.example." +"com@EXAMPLE.COM)" -#, fuzzy, c-format -msgid "Unenrollment failed.\n" -msgstr "Pendaftaran gagal. %s\n" +msgid "This command requires root access" +msgstr "Perintah ini memerlukan akses root" + +msgid "This entry already exists" +msgstr "Entri ini sudah ada" + +msgid "This is already a posix group" +msgstr "Ini sudah merupakan grup posix" + +msgid "Ticket expired" +msgstr "Tiket kedaluwarsa" #, c-format -msgid "result not found in XML-RPC response\n" -msgstr "hasil tidak ditemukan dalam respons XML-RPC\n" +msgid "Timeout exceeded." +msgstr "Tenggat waktu terlampaui." #, c-format msgid "Unable to determine IPA server from %s\n" msgstr "Tak bisa menentukan peladen IPA dari %s\n" #, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" -"Tidak dapat bergabung dengan host: Inisialisasi konteks Kerberos gagal\n" +msgid "Unable to determine root DN of %s\n" +msgstr "Tak bisa menentukan root DN dari %s\n" + +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "Tidak bisa memfungsikan SSL dalam LDAP\n" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "Tidak dapat menghasilkan Kerberos Credential Cache\n" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "Tak bisa menginisialisasi pustaka ldap!\n" #, c-format msgid "Unable to join host: Kerberos Credential Cache not found\n" @@ -606,11162 +874,35 @@ msgstr "" "dan kata sandi host tidak disediakan.\n" #, c-format -msgid "fork() failed\n" -msgstr "fork() gagal\n" +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" +"Tidak dapat bergabung dengan host: Inisialisasi konteks Kerberos gagal\n" #, c-format -msgid "ipa-getkeytab not found\n" -msgstr "ipa-getkeytab tidak ditemukan\n" +msgid "Unable to parse principal\n" +msgstr "Tidak dapat mengurai prinsipal\n" #, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "ipa-getkeytab memiliki izin yang buruk?\n" +msgid "Unable to parse principal name\n" +msgstr "Tidak dapat mengurai nama prinsipal\n" #, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "mengeksekusi ipa-getkeytab gagal, errno %d\n" +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "Tidak dapat mengurai prinsipal: %1$s (%2$d)\n" #, c-format -msgid "child exited with %d\n" -msgstr "anak keluar dengan %d\n" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "Galat saat me-resolve keytab: %s.\n" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "Galat saat mendapatkan ranah Kerberos default: %s.\n" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "Galat saat mengurai \"%1$s\": %2$s.\n" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "Galat saat memperoleh kredensial awal: %s.\n" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "Tidak dapat menghasilkan Kerberos Credential Cache\n" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "Galat saat menyimpan kredensial dalam singgahan kredensial: %s.\n" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "Mencetak keluaran XML-RPC mentah dalam mode GSSAPI" - -msgid "Quiet mode. Only errors are displayed." -msgstr "Mode senyap. Hanya galat yang ditampilkan." - -msgid "Unenroll this host from IPA server" -msgstr "" - -msgid "Hostname of this server" -msgstr "Nama host peladen ini" - -msgid "hostname" -msgstr "namahost" - -msgid "IPA Server to use" -msgstr "Server IPA yang akan digunakan" - -msgid "Specifies where to store keytab information." -msgstr "Menentukan tempat menyimpan informasi keytab." - -msgid "filename" -msgstr "namaberkas" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "Paksa host bergabung. Bergabung kembali bahkan jika sudah bergabung." - -msgid "LDAP password (if not using Kerberos)" -msgstr "Kata sandi LDAP (jika tidak menggunakan Kerberos)" - -msgid "password" -msgstr "kata sandi" - -msgid "LDAP basedn" -msgstr "basedn LDAP" - -msgid "basedn" -msgstr "basedn" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "Nama host harus fully-qualified: %s\n" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "Nama host tidak boleh: %s\n" - -#, fuzzy -msgid "Failed to add" -msgstr "Gagal membuka keytab\n" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" - -msgid "Unrevoked" -msgstr "" - -msgid "Error" -msgstr "" - -#, fuzzy -msgid "Input filename" -msgstr "namaberkas" - -msgid "File to load the certificate from." -msgstr "" - -msgid "cannot specify both raw certificate and file" -msgstr "" - -msgid "Input file" -msgstr "" - -msgid "File to load the certificate from" -msgstr "" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "" - -msgid "Split DNS record to parts" -msgstr "" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" - -msgid "DNS resource record type" -msgstr "" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" - -msgid "No option to modify specific record provided." -msgstr "" - -msgid "Current DNS record contents:\n" -msgstr "" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "Ubah '%(value)s' %(name)s?" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -msgid "No option to delete specific record provided." -msgstr "" - -msgid "Delete all?" -msgstr "Hapus semua?" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "Hapus '%(value)s' %(name)s?" - -msgid "Server will check DNS forwarder(s)." -msgstr "" - -msgid "This may take some time, please wait ..." -msgstr "" - -#, fuzzy -msgid "DNS forwarder" -msgstr "Forwarder" - -msgid "file to store DNS records in nsupdate format" -msgstr "" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -#, fuzzy -msgid "Delete a user" -msgstr "Menghapus suatu hostgroup." - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - -msgid "maps not connected to /etc/auto.master:" -msgstr "" - -msgid "Import automount files for a specific location." -msgstr "" - -msgid "Master file" -msgstr "Berkas induk" - -#, fuzzy -msgid "Automount master file." -msgstr "Berkas induk" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" - -#, fuzzy, python-format -msgid "File %(file)s not found" -msgstr "Aturan HBAC %(rule)s tidak ditemukan" - -#, python-format -msgid "key %(key)s already exists" -msgstr "kunci %(key)s sudah ada" - -#, python-format -msgid "map %(map)s already exists" -msgstr "peta %(map)s sudah ada" - -msgid "Imported maps:" -msgstr "" - -#, python-format -msgid "Added %(map)s" -msgstr "Ditambahkan %(map)s" - -msgid "Imported keys:" -msgstr "" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "" - -msgid "Ignored keys:" -msgstr "" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "" - -msgid "Duplicate maps skipped:" -msgstr "" - -#, fuzzy, python-format -msgid "Skipped %(map)s" -msgstr "Ditambahkan %(map)s" - -msgid "Duplicate keys skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(key)s" -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -msgid "User ID" -msgstr "" - -#, fuzzy -msgid "Password" -msgstr "kata sandi" - -msgid "First Code" -msgstr "" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, fuzzy, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "'%(name)s' tidak valid: %(error)s" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "" - -msgid "Invalid credentials" -msgstr "" - -msgid "Create a new vault." -msgstr "" - -#, fuzzy -msgid "Vault password" -msgstr "kata sandi" - -msgid "File containing the vault password" -msgstr "" - -msgid "File containing the vault public key" -msgstr "" - -msgid "Password can be specified only for symmetric vault" -msgstr "" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "" - -msgid "Password specified multiple times" -msgstr "" - -msgid "Public key specified multiple times" -msgstr "" - -msgid "Missing vault public key" -msgstr "" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "" - -#, fuzzy -msgid "Modify a vault." -msgstr "Memodifikasi suatu hostgroup." - -#, fuzzy -msgid "Change password" -msgstr "kata sandi" - -#, fuzzy -msgid "Old vault password" -msgstr "kata sandi" - -msgid "File containing the old vault password" -msgstr "" - -#, fuzzy -msgid "New vault password" -msgstr "kata sandi" - -msgid "File containing the new vault password" -msgstr "" - -msgid "Old vault private key" -msgstr "" - -msgid "File containing the old vault private key" -msgstr "" - -msgid "File containing the new vault public key" -msgstr "" - -msgid "New public key specified multiple times" -msgstr "" - -msgid "Missing new vault public key" -msgstr "" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "" - -msgid "Binary data to archive" -msgstr "" - -msgid "File containing data to archive" -msgstr "" - -msgid "Override existing password" -msgstr "" - -msgid "Input data specified multiple times" -msgstr "" - -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" - -#, fuzzy -msgid "Invalid vault type" -msgstr "Tipe aturan bind" - -msgid "Retrieve a data from a vault." -msgstr "" - -#, fuzzy -msgid "File to store retrieved data" -msgstr "Gagal mengambil kunci apapun" - -msgid "Vault private key" -msgstr "" - -msgid "File containing the vault private key" -msgstr "" - -msgid "Data" -msgstr "" - -msgid "Private key specified multiple times" -msgstr "" - -msgid "Missing vault private key" -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "CA \"%(value)s\" dinonaktifkan" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -#, fuzzy -msgid "ACI name" -msgstr "Nama perintah" - -msgid "Permission" -msgstr "" - -msgid "Permission ACI grants access to" -msgstr "" - -#, fuzzy -msgid "User group" -msgstr "Menghapus grup." - -msgid "User group ACI grants access to" -msgstr "" - -msgid "Permissions" -msgstr "" - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Attributes to which the permission applies" -msgstr "" - -msgid "Attributes" -msgstr "" - -msgid "Type" -msgstr "" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" - -msgid "Member of" -msgstr "" - -#, fuzzy -msgid "Member of a group" -msgstr "Memodifikasi suatu hostgroup." - -msgid "Filter" -msgstr "" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "" - -msgid "Subtree" -msgstr "" - -msgid "Subtree to apply ACI to" -msgstr "" - -#, fuzzy -msgid "Target group" -msgstr "DN Target" - -msgid "Group to apply ACI to" -msgstr "" - -msgid "Target your own entry (self)" -msgstr "" - -msgid "Apply ACI to your own entry (self)" -msgstr "" - -msgid "Create new ACI." -msgstr "" - -msgid "ACI prefix" -msgstr "" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" - -msgid "Test the ACI syntax but don't write anything" -msgstr "" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" - -msgid "User-friendly description of action performed" -msgstr "" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" - -#, fuzzy -msgid "Delete ACI." -msgstr "Menghapus grup." - -msgid "True means the operation was successful" -msgstr "" - -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" - -msgid "A string searched in all relevant object attributes" -msgstr "" - -msgid "Primary key only" -msgstr "" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" - -#, fuzzy -msgid "Number of entries returned" -msgstr "Cacah pengaya yang dimuat" - -msgid "True if not all results were returned" -msgstr "" - -msgid "Modify ACI." -msgstr "" - -msgid "Rename an ACI." -msgstr "" - -msgid "New ACI name" -msgstr "" - -msgid "Display a single ACI given an ACI name." -msgstr "" - -msgid "Location of the ACI" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -#, fuzzy -msgid "Description" -msgstr "Opsi Layanan" - -#, fuzzy -msgid "A description of this auto member rule" -msgstr "Suatu penjelasan atas perintah ini" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -#, fuzzy -msgid "Automember Rule" -msgstr "Aturan anggota otomatis: %s tidak ditemukan!" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -#, fuzzy -msgid "Number of conditions added" -msgstr "Cacah pengaya yang dimuat" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "List of deletions that failed" -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -#, fuzzy -msgid "Users" -msgstr "pengguna" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Hosts" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -#, fuzzy -msgid "Number of conditions removed" -msgstr "Cacah pengaya yang dimuat" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" - -msgid "Key" -msgstr "" - -msgid "Automount key name." -msgstr "" - -#, fuzzy -msgid "Mount information" -msgstr "Cetak informasi awakutu" - -#, fuzzy -msgid "description" -msgstr "Opsi Layanan" - -msgid "Location" -msgstr "" - -msgid "Automount location name." -msgstr "" - -msgid "Map" -msgstr "" - -msgid "Automount map name." -msgstr "" - -msgid "Create a new automount key." -msgstr "" - -#, fuzzy -msgid "Delete an automount key." -msgstr "Menghapus suatu hostgroup." - -msgid "Continuous mode: Don't stop on errors." -msgstr "" - -msgid "Search for an automount key." -msgstr "" - -msgid "Time Limit" -msgstr "" - -msgid "Time limit of search in seconds" -msgstr "" - -msgid "Size Limit" -msgstr "" - -msgid "Maximum number of entries returned" -msgstr "" - -#, fuzzy -msgid "Modify an automount key." -msgstr "Memodifikasi suatu hostgroup." - -#, fuzzy -msgid "New mount information" -msgstr "Cetak informasi awakutu" - -#, fuzzy -msgid "Rename" -msgstr "Nama realm" - -msgid "Rename the automount key object" -msgstr "" - -msgid "Display an automount key." -msgstr "" - -msgid "Create a new automount location." -msgstr "" - -msgid "Delete an automount location." -msgstr "" - -msgid "Search for an automount location." -msgstr "" - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" - -msgid "Display an automount location." -msgstr "" - -msgid "Generate automount files for a specific location." -msgstr "" - -msgid "Create a new automount map." -msgstr "" - -msgid "Create a new indirect mount point." -msgstr "" - -msgid "Mount point" -msgstr "" - -msgid "Parent map" -msgstr "" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" - -#, fuzzy -msgid "Delete an automount map." -msgstr "Menghapus suatu hostgroup." - -msgid "Search for an automount map." -msgstr "" - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" - -#, fuzzy -msgid "Modify an automount map." -msgstr "Memodifikasi suatu hostgroup." - -msgid "Display an automount map." -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" - -msgid "Nested Methods to execute" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason" -msgstr "Alasan" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -msgid "minimum serial number" -msgstr "nomor seri minimum" - -msgid "maximum serial number" -msgstr "nomor seri maksimum" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -#, fuzzy -msgid "Serial number" -msgstr "Nomor seri maksimum" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "Mengirim sebuah permintan penandatanganan sertifikat." - -msgid "CSR" -msgstr "CSR" - -msgid "Principal" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Dictionary mapping variable name to value" -msgstr "" - -#, fuzzy -msgid "Revoke a certificate." -msgstr "harus merupakan sebuah sertifikat" - -msgid "Retrieve an existing certificate." -msgstr "" - -#, fuzzy -msgid "Output filename" -msgstr "namaberkas" - -msgid "File to store the certificate in." -msgstr "" - -#, fuzzy -msgid "Check the status of a certificate signing request." -msgstr "harus berupa sebuah permintaan penandatanganan sertifikat" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -#, fuzzy -msgid "Maximum username length" -msgstr "Nomor seri maksimum" - -msgid "Home directory base" -msgstr "" - -msgid "Default location of home directories" -msgstr "" - -msgid "Default shell" -msgstr "" - -msgid "Default shell for new users" -msgstr "" - -#, fuzzy -msgid "Default users group" -msgstr "Menghapus grup." - -msgid "Default group for new users" -msgstr "" - -msgid "Default e-mail domain" -msgstr "" - -msgid "Search time limit" -msgstr "" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" - -msgid "Search size limit" -msgstr "" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "" - -msgid "User search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" - -msgid "Group search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" - -msgid "Enable migration mode" -msgstr "" - -msgid "Certificate Subject base" -msgstr "" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "" - -msgid "Default group objectclasses" -msgstr "" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "" - -msgid "Default user objectclasses" -msgstr "" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" - -msgid "Password Expiration Notification (days)" -msgstr "" - -msgid "Number of days's notice of impending password expiration" -msgstr "" - -msgid "Password plugin features" -msgstr "" - -msgid "Extra hashes to generate in password plug-in" -msgstr "" - -msgid "SELinux user map order" -msgstr "" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" - -msgid "Default SELinux user" -msgstr "" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" - -msgid "Default PAC types" -msgstr "" - -msgid "Default types of PAC supported for services" -msgstr "" - -msgid "Default user authentication types" -msgstr "" - -msgid "Default types of supported user authentication" -msgstr "" - -msgid "Modify configuration options." -msgstr "" - -msgid "Show the current configuration." -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "Delegation name" -msgstr "" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "" - -msgid "Attributes to which the delegation applies" -msgstr "" - -#, fuzzy -msgid "Member user group" -msgstr "Menghapus grup." - -msgid "User group to apply delegation to" -msgstr "" - -msgid "Add a new delegation." -msgstr "" - -#, fuzzy -msgid "Delete a delegation." -msgstr "Menghapus suatu hostgroup." - -msgid "Search for delegations." -msgstr "" - -#, fuzzy -msgid "Modify a delegation." -msgstr "Memodifikasi suatu hostgroup." - -msgid "Display information about a delegation." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -#, fuzzy -msgid "Global forwarders" -msgstr "Forwarder" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Forward policy" -msgstr "" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" - -msgid "Allow PTR sync" -msgstr "" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" - -msgid "Zone refresh interval" -msgstr "" - -#, fuzzy -msgid "Zone name" -msgstr "Nama perintah" - -msgid "Zone name (FQDN)" -msgstr "" - -msgid "Reverse zone IP network" -msgstr "" - -msgid "IP network to create reverse zone name from" -msgstr "" - -msgid "Active zone" -msgstr "" - -msgid "Is zone active?" -msgstr "" - -#, fuzzy -msgid "Zone forwarders" -msgstr "Forwarder" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -#, fuzzy -msgid "Record name" -msgstr "Tipe record" - -msgid "Time to live" -msgstr "" - -#, fuzzy -msgid "Records" -msgstr "Tipe record" - -msgid "Record type" -msgstr "Tipe record" - -#, fuzzy -msgid "Record data" -msgstr "Tipe record" - -msgid "A record" -msgstr "" - -msgid "Raw A records" -msgstr "" - -msgid "A IP Address" -msgstr "" - -#, fuzzy -msgid "IP Address" -msgstr "Alamat Surat" - -msgid "A Create reverse" -msgstr "" - -msgid "Create reverse record for this IP Address" -msgstr "" - -msgid "AAAA record" -msgstr "" - -msgid "Raw AAAA records" -msgstr "" - -msgid "AAAA IP Address" -msgstr "" - -msgid "AAAA Create reverse" -msgstr "" - -msgid "A6 record" -msgstr "" - -msgid "Raw A6 records" -msgstr "" - -#, fuzzy -msgid "A6 Record data" -msgstr "Tipe record" - -msgid "AFSDB record" -msgstr "" - -msgid "Raw AFSDB records" -msgstr "" - -msgid "AFSDB Subtype" -msgstr "" - -msgid "Subtype" -msgstr "" - -#, fuzzy -msgid "AFSDB Hostname" -msgstr "namahost" - -#, fuzzy -msgid "Hostname" -msgstr "namahost" - -msgid "APL record" -msgstr "" - -msgid "Raw APL records" -msgstr "" - -msgid "CERT record" -msgstr "" - -msgid "Raw CERT records" -msgstr "" - -msgid "CERT Certificate Type" -msgstr "" - -msgid "Certificate Type" -msgstr "" - -msgid "CERT Key Tag" -msgstr "" - -msgid "Key Tag" -msgstr "" - -msgid "CERT Algorithm" -msgstr "" - -msgid "Algorithm" -msgstr "" - -msgid "CERT Certificate/CRL" -msgstr "" - -msgid "Certificate/CRL" -msgstr "" - -msgid "CNAME record" -msgstr "" - -msgid "Raw CNAME records" -msgstr "" - -#, fuzzy -msgid "CNAME Hostname" -msgstr "namahost" - -msgid "A hostname which this alias hostname points to" -msgstr "" - -msgid "DHCID record" -msgstr "" - -msgid "Raw DHCID records" -msgstr "" - -msgid "DLV record" -msgstr "" - -msgid "Raw DLV records" -msgstr "" - -msgid "DLV Key Tag" -msgstr "" - -msgid "DLV Algorithm" -msgstr "" - -#, fuzzy -msgid "DLV Digest Type" -msgstr "Digest DLV" - -#, fuzzy -msgid "Digest Type" -msgstr "Digest DS" - -msgid "DLV Digest" -msgstr "Digest DLV" - -#, fuzzy -msgid "Digest" -msgstr "Digest DS" - -#, fuzzy -msgid "DNAME record" -msgstr "Target DNAME" - -msgid "Raw DNAME records" -msgstr "" - -msgid "DNAME Target" -msgstr "Target DNAME" - -msgid "Target" -msgstr "Target" - -msgid "DNSKEY record" -msgstr "" - -msgid "Raw DNSKEY records" -msgstr "" - -msgid "DS record" -msgstr "" - -msgid "Raw DS records" -msgstr "" - -msgid "DS Key Tag" -msgstr "" - -msgid "DS Algorithm" -msgstr "" - -#, fuzzy -msgid "DS Digest Type" -msgstr "Digest DS" - -msgid "DS Digest" -msgstr "Digest DS" - -msgid "HIP record" -msgstr "" - -msgid "Raw HIP records" -msgstr "" - -msgid "IPSECKEY record" -msgstr "" - -msgid "Raw IPSECKEY records" -msgstr "" - -msgid "KEY record" -msgstr "" - -msgid "Raw KEY records" -msgstr "" - -msgid "KX record" -msgstr "" - -msgid "Raw KX records" -msgstr "" - -msgid "KX Preference" -msgstr "" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" - -msgid "KX Exchanger" -msgstr "" - -msgid "A host willing to act as a key exchanger" -msgstr "" - -msgid "LOC record" -msgstr "" - -msgid "Raw LOC records" -msgstr "" - -msgid "LOC Degrees Latitude" -msgstr "" - -msgid "Degrees Latitude" -msgstr "" - -msgid "LOC Minutes Latitude" -msgstr "" - -msgid "Minutes Latitude" -msgstr "" - -msgid "LOC Seconds Latitude" -msgstr "" - -msgid "Seconds Latitude" -msgstr "" - -msgid "LOC Direction Latitude" -msgstr "" - -msgid "Direction Latitude" -msgstr "" - -msgid "LOC Degrees Longitude" -msgstr "" - -msgid "Degrees Longitude" -msgstr "" - -msgid "LOC Minutes Longitude" -msgstr "" - -msgid "Minutes Longitude" -msgstr "" - -msgid "LOC Seconds Longitude" -msgstr "" - -msgid "Seconds Longitude" -msgstr "" - -msgid "LOC Direction Longitude" -msgstr "" - -msgid "Direction Longitude" -msgstr "" - -msgid "LOC Altitude" -msgstr "" - -msgid "Altitude" -msgstr "" - -msgid "LOC Size" -msgstr "" - -msgid "Size" -msgstr "" - -msgid "LOC Horizontal Precision" -msgstr "" - -msgid "Horizontal Precision" -msgstr "" - -msgid "LOC Vertical Precision" -msgstr "" - -msgid "Vertical Precision" -msgstr "" - -msgid "MX record" -msgstr "" - -msgid "Raw MX records" -msgstr "" - -msgid "MX Preference" -msgstr "" - -msgid "MX Exchanger" -msgstr "" - -msgid "A host willing to act as a mail exchanger" -msgstr "" - -msgid "NAPTR record" -msgstr "" - -msgid "Raw NAPTR records" -msgstr "" - -msgid "NAPTR Order" -msgstr "" - -msgid "Order" -msgstr "" - -msgid "NAPTR Preference" -msgstr "" - -msgid "Preference" -msgstr "" - -msgid "NAPTR Flags" -msgstr "" - -msgid "Flags" -msgstr "" - -msgid "NAPTR Service" -msgstr "" - -#, fuzzy -msgid "Service" -msgstr "Opsi Layanan" - -msgid "NAPTR Regular Expression" -msgstr "" - -msgid "Regular Expression" -msgstr "" - -msgid "NAPTR Replacement" -msgstr "" - -msgid "Replacement" -msgstr "" - -msgid "NS record" -msgstr "" - -msgid "Raw NS records" -msgstr "" - -#, fuzzy -msgid "NS Hostname" -msgstr "namahost" - -msgid "NSEC record" -msgstr "" - -msgid "Raw NSEC records" -msgstr "" - -msgid "NSEC3 record" -msgstr "" - -msgid "Raw NSEC3 records" -msgstr "" - -msgid "PTR record" -msgstr "" - -msgid "Raw PTR records" -msgstr "" - -#, fuzzy -msgid "PTR Hostname" -msgstr "namahost" - -msgid "The hostname this reverse record points to" -msgstr "" - -msgid "RRSIG record" -msgstr "" - -msgid "Raw RRSIG records" -msgstr "" - -#, fuzzy -msgid "RP record" -msgstr "Tipe record" - -msgid "Raw RP records" -msgstr "" - -msgid "SIG record" -msgstr "" - -msgid "Raw SIG records" -msgstr "" - -msgid "SPF record" -msgstr "" - -msgid "Raw SPF records" -msgstr "" - -#, fuzzy -msgid "SRV record" -msgstr "Target SRV" - -msgid "Raw SRV records" -msgstr "" - -msgid "SRV Priority" -msgstr "" - -msgid "Priority" -msgstr "" - -#, fuzzy -msgid "SRV Weight" -msgstr "Target SRV" - -msgid "Weight" -msgstr "" - -#, fuzzy -msgid "SRV Port" -msgstr "Target SRV" - -msgid "Port" -msgstr "" - -msgid "SRV Target" -msgstr "Target SRV" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" - -msgid "SSHFP record" -msgstr "" - -msgid "Raw SSHFP records" -msgstr "" - -msgid "SSHFP Algorithm" -msgstr "" - -msgid "SSHFP Fingerprint Type" -msgstr "" - -msgid "Fingerprint Type" -msgstr "" - -msgid "SSHFP Fingerprint" -msgstr "" - -msgid "Fingerprint" -msgstr "" - -msgid "TA record" -msgstr "" - -msgid "Raw TA records" -msgstr "" - -msgid "TLSA record" -msgstr "" - -msgid "Raw TLSA records" -msgstr "" - -msgid "TLSA Certificate Usage" -msgstr "" - -msgid "Certificate Usage" -msgstr "" - -msgid "TLSA Selector" -msgstr "" - -msgid "Selector" -msgstr "" - -msgid "TLSA Matching Type" -msgstr "" - -msgid "Matching Type" -msgstr "" - -msgid "TLSA Certificate Association Data" -msgstr "" - -msgid "Certificate Association Data" -msgstr "" - -msgid "TKEY record" -msgstr "" - -msgid "Raw TKEY records" -msgstr "" - -msgid "TSIG record" -msgstr "" - -msgid "Raw TSIG records" -msgstr "" - -msgid "TXT record" -msgstr "" - -msgid "Raw TXT records" -msgstr "" - -msgid "TXT Text Data" -msgstr "" - -msgid "Text Data" -msgstr "" - -msgid "Authoritative nameserver" -msgstr "" - -msgid "Authoritative nameserver domain name" -msgstr "" - -msgid "Administrator e-mail address" -msgstr "" - -#, fuzzy -msgid "SOA serial" -msgstr "Serial" - -#, fuzzy -msgid "SOA record serial number" -msgstr "Nomor seri maksimum" - -msgid "SOA refresh" -msgstr "" - -msgid "SOA record refresh time" -msgstr "" - -msgid "SOA retry" -msgstr "" - -msgid "SOA record retry time" -msgstr "" - -msgid "SOA expire" -msgstr "" - -msgid "SOA record expire time" -msgstr "" - -msgid "SOA minimum" -msgstr "" - -msgid "How long should negative responses be cached" -msgstr "" - -msgid "Time to live for records at zone apex" -msgstr "" - -msgid "BIND update policy" -msgstr "" - -msgid "Dynamic update" -msgstr "" - -msgid "Allow dynamic updates." -msgstr "" - -msgid "Allow query" -msgstr "Izinkan kuiri" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" - -#, fuzzy -msgid "Allow transfer" -msgstr "Izinkan kuiri" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" - -msgid "Allow in-line DNSSEC signing" -msgstr "" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "" - -msgid "NSEC3PARAM record" -msgstr "" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" - -msgid "Resolve a host name in DNS." -msgstr "" - -msgid "Modify global DNS configuration." -msgstr "" - -msgid "Show the current global DNS configuration." -msgstr "" - -msgid "Create new DNS forward zone." -msgstr "" - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" - -msgid "Permission value" -msgstr "" - -msgid "Delete DNS forward zone." -msgstr "" - -msgid "Disable DNS Forward Zone." -msgstr "" - -msgid "Enable DNS Forward Zone." -msgstr "" - -msgid "Search for DNS forward zones." -msgstr "" - -msgid "Modify DNS forward zone." -msgstr "" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" - -msgid "Display information about a DNS forward zone." -msgstr "" - -msgid "Add new DNS resource record." -msgstr "" - -msgid "Force" -msgstr "" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "" - -msgid "Structured" -msgstr "" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" - -msgid "Delete DNS resource record." -msgstr "" - -msgid "Delete all associated records" -msgstr "" - -msgid "Delete DNS record entry." -msgstr "" - -msgid "Search for DNS resources." -msgstr "" - -msgid "Modify a DNS resource record." -msgstr "" - -msgid "Rename the DNS resource record object" -msgstr "" - -msgid "Display DNS resource." -msgstr "" - -msgid "Create new DNS zone (SOA record)." -msgstr "" - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" - -msgid "Add a permission for per-zone access delegation." -msgstr "" - -msgid "Delete DNS zone (SOA record)." -msgstr "" - -#, fuzzy -msgid "Disable DNS Zone." -msgstr "harus berupa nama DNS" - -msgid "Enable DNS Zone." -msgstr "" - -msgid "Search for DNS zones (SOA records)." -msgstr "" - -#, fuzzy -msgid "Forward zones only" -msgstr "Forwarder" - -msgid "Search for forward zones only" -msgstr "" - -msgid "Modify DNS zone (SOA record)." -msgstr "" - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" - -msgid "Remove a permission for per-zone access delegation." -msgstr "" - -msgid "Display information about a DNS zone (SOA record)." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "Group name" -msgstr "" - -msgid "Group description" -msgstr "" - -msgid "GID" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Member users" -msgstr "" - -#, fuzzy -msgid "Member groups" -msgstr "Menghapus grup." - -msgid "Member of groups" -msgstr "" - -msgid "Roles" -msgstr "" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - -#, fuzzy -msgid "Create a new group." -msgstr "Menghapus suatu hostgroup." - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Suppress processing of membership attributes." -msgstr "" - -#, fuzzy -msgid "Add members to a group." -msgstr "Tambah grup host" - -msgid "External member" -msgstr "" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -#, fuzzy -msgid "member group" -msgstr "Menghapus grup." - -msgid "groups to add" -msgstr "" - -msgid "Members that could not be added" -msgstr "" - -#, fuzzy -msgid "Number of members added" -msgstr "Cacah pengaya yang dimuat" - -msgid "Delete group." -msgstr "Menghapus grup." - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -#, fuzzy -msgid "user" -msgstr "pengguna" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "group" -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -#, fuzzy -msgid "netgroup" -msgstr "Menghapus grup." - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "role" -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "HBAC rule" -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "sudo rule" -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a group." -msgstr "Memodifikasi suatu hostgroup." - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - -msgid "Members that could not be removed" -msgstr "" - -#, fuzzy -msgid "Number of members removed" -msgstr "Cacah pengaya yang dimuat" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -#, fuzzy -msgid "Rule name" -msgstr "Nama realm" - -#, fuzzy -msgid "Rule type" -msgstr "Tipe record" - -msgid "Rule type (allow)" -msgstr "" - -msgid "User category" -msgstr "" - -msgid "User category the rule applies to" -msgstr "" - -msgid "Host category" -msgstr "" - -msgid "Host category the rule applies to" -msgstr "" - -#, fuzzy -msgid "Service category" -msgstr "Opsi Layanan" - -msgid "Service category the rule applies to" -msgstr "" - -msgid "Enabled" -msgstr "" - -msgid "User Groups" -msgstr "" - -#, fuzzy -msgid "Host Groups" -msgstr "Tambah grup host" - -#, fuzzy -msgid "Services" -msgstr "Opsi Layanan" - -#, fuzzy -msgid "Service Groups" -msgstr "Opsi Layanan" - -msgid "External host" -msgstr "" - -msgid "Create a new HBAC rule." -msgstr "" - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "member host" -msgstr "" - -msgid "hosts to add" -msgstr "" - -#, fuzzy -msgid "member host group" -msgstr "Tambah grup host" - -#, fuzzy -msgid "host groups to add" -msgstr "%i hosts atau hostgroups ditambahkan." - -msgid "Add services to an HBAC rule." -msgstr "" - -msgid "member HBAC service" -msgstr "" - -msgid "HBAC services to add" -msgstr "" - -msgid "member HBAC service group" -msgstr "" - -msgid "HBAC service groups to add" -msgstr "" - -msgid "Add users and groups to an HBAC rule." -msgstr "" - -#, fuzzy -msgid "Delete an HBAC rule." -msgstr "Menghapus suatu hostgroup." - -msgid "Disable an HBAC rule." -msgstr "" - -msgid "Enable an HBAC rule." -msgstr "" - -msgid "Search for HBAC rules." -msgstr "" - -#, fuzzy -msgid "Modify an HBAC rule." -msgstr "Memodifikasi suatu hostgroup." - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "" - -#, fuzzy -msgid "hosts to remove" -msgstr "%i host atau hostgroup dibuang." - -#, fuzzy -msgid "host groups to remove" -msgstr "%i host atau hostgroup dibuang." - -msgid "Remove service and service groups from an HBAC rule." -msgstr "" - -msgid "HBAC services to remove" -msgstr "" - -msgid "HBAC service groups to remove" -msgstr "" - -msgid "Remove users and groups from an HBAC rule." -msgstr "" - -msgid "Display the properties of an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" - -#, fuzzy -msgid "Service name" -msgstr "Nama Peladen" - -msgid "HBAC service" -msgstr "" - -#, fuzzy -msgid "HBAC service description" -msgstr "Opsi Layanan" - -msgid "Member of HBAC service groups" -msgstr "" - -msgid "Add a new HBAC service." -msgstr "" - -msgid "Delete an existing HBAC service." -msgstr "" - -msgid "Search for HBAC services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" - -msgid "Modify an HBAC service." -msgstr "" - -msgid "Display information about an HBAC service." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -#, fuzzy -msgid "Service group name" -msgstr "Nama Peladen" - -msgid "HBAC service group description" -msgstr "" - -msgid "Member HBAC service" -msgstr "" - -msgid "Add a new HBAC service group." -msgstr "" - -msgid "Add members to an HBAC service group." -msgstr "" - -#, fuzzy -msgid "Delete an HBAC service group." -msgstr "Menghapus suatu hostgroup." - -msgid "Search for an HBAC service group." -msgstr "" - -#, fuzzy -msgid "Modify an HBAC service group." -msgstr "Memodifikasi suatu hostgroup." - -msgid "Remove members from an HBAC service group." -msgstr "" - -msgid "Display information about an HBAC service group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -#, fuzzy -msgid "User name" -msgstr "Nama realm" - -#, fuzzy -msgid "Target host" -msgstr "Target" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#, fuzzy -msgid "Host name" -msgstr "namahost" - -#, fuzzy -msgid "A description of this host" -msgstr "Suatu penjelasan atas perintah ini" - -msgid "Locality" -msgstr "" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "" - -msgid "Platform" -msgstr "" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "" - -msgid "Operating system" -msgstr "" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "" - -#, fuzzy -msgid "User password" -msgstr "kata sandi" - -#, fuzzy -msgid "Password used in bulk enrollment" -msgstr "Kata sandi tidak dapat ditata pada host yang didaftarkan." - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "" - -#, fuzzy -msgid "Random password" -msgstr "kata sandi" - -#, fuzzy -msgid "Certificate" -msgstr "harus merupakan sebuah sertifikat" - -msgid "Base-64 encoded server certificate" -msgstr "" - -msgid "Principal name" -msgstr "" - -#, fuzzy -msgid "MAC address" -msgstr "Alamat Surat" - -msgid "Hardware MAC address(es) on this host" -msgstr "" - -#, fuzzy -msgid "SSH public key" -msgstr "Kunci publik SSH:" - -msgid "Class" -msgstr "" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "Assigned ID View" -msgstr "" - -msgid "Requires pre-authentication" -msgstr "" - -msgid "Pre-authentication is required for the service" -msgstr "" - -msgid "Trusted for delegation" -msgstr "" - -msgid "Client credentials may be delegated to the service" -msgstr "" - -#, fuzzy -msgid "Member of host-groups" -msgstr "Menghapus suatu hostgroup." - -msgid "Indirect Member of host-group" -msgstr "" - -msgid "Keytab" -msgstr "" - -msgid "Managed by" -msgstr "" - -msgid "Managing" -msgstr "" - -#, fuzzy -msgid "Users allowed to retrieve keytab" -msgstr "Gagal mengambil kunci apapun" - -#, fuzzy -msgid "Groups allowed to retrieve keytab" -msgstr "Gagal mengambil kunci apapun" - -#, fuzzy -msgid "Hosts allowed to retrieve keytab" -msgstr "Gagal mengambil kunci apapun" - -#, fuzzy -msgid "Host Groups allowed to retrieve keytab" -msgstr "Gagal mengambil kunci apapun" - -#, fuzzy -msgid "Users allowed to create keytab" -msgstr "Gagal membuka keytab\n" - -#, fuzzy -msgid "Groups allowed to create keytab" -msgstr "Gagal membuka keytab\n" - -#, fuzzy -msgid "Hosts allowed to create keytab" -msgstr "Gagal membuka keytab\n" - -msgid "Host Groups allowed to create keytab" -msgstr "" - -msgid "Add a new host." -msgstr "" - -msgid "force host name even if not in DNS" -msgstr "" - -msgid "skip reverse DNS detection" -msgstr "" - -msgid "Add the host to DNS with this IP address" -msgstr "" - -msgid "Add hosts that can manage this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" - -#, fuzzy -msgid "Delete a host." -msgstr "Menghapus suatu hostgroup." - -msgid "Remove entries from DNS" -msgstr "" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" - -msgid "Search for hosts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" - -#, fuzzy -msgid "host group" -msgstr "Tambah grup host" - -msgid "Search for hosts with these member of host groups." -msgstr "" - -msgid "Search for hosts without these member of host groups." -msgstr "" - -msgid "Search for hosts with these member of netgroups." -msgstr "" - -msgid "Search for hosts without these member of netgroups." -msgstr "" - -msgid "Search for hosts with these member of roles." -msgstr "" - -msgid "Search for hosts without these member of roles." -msgstr "" - -msgid "Search for hosts with these member of HBAC rules." -msgstr "" - -msgid "Search for hosts without these member of HBAC rules." -msgstr "" - -msgid "Search for hosts with these member of sudo rules." -msgstr "" - -msgid "Search for hosts without these member of sudo rules." -msgstr "" - -msgid "Search for hosts with these enrolled by users." -msgstr "" - -msgid "Search for hosts without these enrolled by users." -msgstr "" - -#, fuzzy -msgid "host" -msgstr "namahost" - -msgid "Search for hosts with these managed by hosts." -msgstr "" - -msgid "Search for hosts without these managed by hosts." -msgstr "" - -msgid "Search for hosts with these managing hosts." -msgstr "" - -msgid "Search for hosts without these managing hosts." -msgstr "" - -msgid "Modify information about a host." -msgstr "" - -#, fuzzy -msgid "Kerberos principal name for this host" -msgstr "Nama Prisipal Layanan Kerberos" - -msgid "Update DNS entries" -msgstr "" - -msgid "Remove hosts that can manage this host." -msgstr "" - -msgid "Display information about a host." -msgstr "" - -#, fuzzy -msgid "file to store certificate in" -msgstr "harus merupakan sebuah sertifikat" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -msgid "Host-group" -msgstr "Tambah grup host" - -#, fuzzy -msgid "Name of host-group" -msgstr "Menghapus suatu hostgroup." - -#, fuzzy -msgid "A description of this host-group" -msgstr "Suatu penjelasan atas perintah ini" - -msgid "Member hosts" -msgstr "" - -#, fuzzy -msgid "Member host-groups" -msgstr "Menghapus suatu hostgroup." - -msgid "Indirect Member hosts" -msgstr "" - -msgid "Indirect Member host-groups" -msgstr "" - -#, fuzzy -msgid "Add a new hostgroup." -msgstr "Tambah grup host" - -#, fuzzy -msgid "Add members to a hostgroup." -msgstr "Menghapus suatu hostgroup." - -msgid "Delete a hostgroup." -msgstr "Menghapus suatu hostgroup." - -#, fuzzy -msgid "Search for hostgroups." -msgstr "Menghapus suatu hostgroup." - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" - -msgid "Search for host groups with these member hosts." -msgstr "" - -msgid "Search for host groups without these member hosts." -msgstr "" - -msgid "Search for host groups with these member host groups." -msgstr "" - -msgid "Search for host groups without these member host groups." -msgstr "" - -msgid "Search for host groups with these member of host groups." -msgstr "" - -msgid "Search for host groups without these member of host groups." -msgstr "" - -msgid "Search for host groups with these member of netgroups." -msgstr "" - -msgid "Search for host groups without these member of netgroups." -msgstr "" - -msgid "Search for host groups with these member of HBAC rules." -msgstr "" - -msgid "Search for host groups without these member of HBAC rules." -msgstr "" - -msgid "Search for host groups with these member of sudo rules." -msgstr "" - -msgid "Search for host groups without these member of sudo rules." -msgstr "" - -msgid "Modify a hostgroup." -msgstr "Memodifikasi suatu hostgroup." - -#, fuzzy -msgid "Remove members from a hostgroup." -msgstr "Menghapus suatu hostgroup." - -msgid "Display information about a hostgroup." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "Nama realm" - -msgid "First Posix ID of the range" -msgstr "" - -#, fuzzy -msgid "Number of IDs in the range" -msgstr "Cacah pengaya yang dimuat" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -#, fuzzy -msgid "Range type" -msgstr "Tipe record" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -msgid "Anchor to override" -msgstr "" - -msgid "Group ID Number" -msgstr "" - -msgid "User login" -msgstr "" - -msgid "UID" -msgstr "" - -msgid "User ID Number" -msgstr "" - -msgid "GECOS" -msgstr "" - -#, fuzzy -msgid "Home directory" -msgstr "harus berupa kamus" - -msgid "Login shell" -msgstr "" - -msgid "ID View Name" -msgstr "" - -msgid "Add a new Group ID override." -msgstr "" - -msgid "Delete an Group ID override." -msgstr "" - -msgid "Search for an Group ID override." -msgstr "" - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" - -msgid "Modify an Group ID override." -msgstr "" - -msgid "Rename the Group ID override object" -msgstr "" - -msgid "Display information about an Group ID override." -msgstr "" - -msgid "Add a new User ID override." -msgstr "" - -msgid "Delete an User ID override." -msgstr "" - -msgid "Search for an User ID override." -msgstr "" - -msgid "Modify an User ID override." -msgstr "" - -msgid "Rename the User ID override object" -msgstr "" - -msgid "Display information about an User ID override." -msgstr "" - -msgid "Add a new ID View." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" - -#, fuzzy -msgid "hosts" -msgstr "namahost" - -msgid "Hosts to apply the ID View to" -msgstr "" - -#, fuzzy -msgid "hostgroups" -msgstr "Tambah grup host" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" - -msgid "Hosts that this ID View was applied to." -msgstr "" - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" - -msgid "Number of hosts the ID View was applied to:" -msgstr "" - -msgid "Delete an ID View." -msgstr "" - -msgid "Search for an ID View." -msgstr "" - -msgid "Modify an ID View." -msgstr "" - -msgid "Rename the ID View object" -msgstr "" - -msgid "Display information about an ID View." -msgstr "" - -msgid "Enumerate all the hosts the view applies to." -msgstr "" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" - -msgid "Hosts to clear (any) ID View from." -msgstr "" - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" - -msgid "Hosts that ID View was cleared from." -msgstr "" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" - -msgid "Dict of I18N messages" -msgstr "" - -msgid "Export plugin meta-data for the webUI." -msgstr "" - -msgid "Name of object to export" -msgstr "" - -msgid "Name of method to export" -msgstr "" - -msgid "Name of command to export" -msgstr "" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" - -msgid "Join an IPA domain" -msgstr "" - -#, fuzzy -msgid "The hostname to register as" -msgstr "Nama host tidak boleh: %s\n" - -msgid "The IPA realm" -msgstr "" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "" - -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" - -msgid "Manage ticket policy for specific user" -msgstr "" - -msgid "Max life" -msgstr "" - -msgid "Maximum ticket life (seconds)" -msgstr "" - -msgid "Max renew" -msgstr "" - -msgid "Maximum renewable age (seconds)" -msgstr "" - -msgid "Modify Kerberos ticket policy." -msgstr "" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "" - -msgid "Display the current Kerberos ticket policy." -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," -"cn=accounts' --group-container='cn=groups,cn=accounts' " -"ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' --user-ignore-" -"objectclass=radiusprofile --user-ignore-" -"attribute=radiusgroupname ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -msgid "Migrate users and groups from DS to IPA." -msgstr "" - -msgid "LDAP URI" -msgstr "URI LDAP" - -msgid "LDAP URI of DS server to migrate from" -msgstr "" - -#, fuzzy -msgid "bind password" -msgstr "kata sandi" - -msgid "Bind DN" -msgstr "" - -#, fuzzy -msgid "User container" -msgstr "vaultcontainer" - -msgid "DN of container for users in DS relative to base DN" -msgstr "" - -#, fuzzy -msgid "Group container" -msgstr "vaultcontainer" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "" - -msgid "User object class" -msgstr "" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "" - -msgid "Group object class" -msgstr "" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "" - -msgid "Ignore user object class" -msgstr "" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "" - -#, fuzzy -msgid "Ignore user attribute" -msgstr "{attr}: tidak ada atribut seperti itu" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore group object class" -msgstr "" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "Ignore group attribute" -msgstr "" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "" - -msgid "Overwrite GID" -msgstr "" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" - -#, fuzzy -msgid "LDAP schema" -msgstr "basedn LDAP" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" - -msgid "Continue" -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" - -msgid "Base DN" -msgstr "" - -msgid "Base DN on remote LDAP server" -msgstr "" - -msgid "Ignore compat plugin" -msgstr "" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" - -#, fuzzy -msgid "CA certificate" -msgstr "harus merupakan sebuah sertifikat" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "" - -msgid "groups to exclude from migration" -msgstr "" - -msgid "users to exclude from migration" -msgstr "" - -msgid "Lists of objects migrated; categorized by type." -msgstr "" - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" - -msgid "False if migration mode was disabled." -msgstr "" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" - -msgid "Show environment variables." -msgstr "" - -msgid "Forward to server instead of running locally" -msgstr "" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Total number of variables env (>= count)" -msgstr "" - -msgid "Number of variables returned (<= total)" -msgstr "" - -msgid "Show all loaded plugins." -msgstr "" - -msgid "Dictionary mapping plugin names to bases" -msgstr "" - -msgid "Number of plugins loaded" -msgstr "Cacah pengaya yang dimuat" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "Netgroup name" -msgstr "" - -msgid "Netgroup description" -msgstr "" - -#, fuzzy -msgid "NIS domain name" -msgstr "Nama perintah" - -msgid "IPA unique ID" -msgstr "" - -msgid "Member netgroups" -msgstr "" - -msgid "Indirect Member netgroups" -msgstr "" - -msgid "Member User" -msgstr "" - -msgid "Member Group" -msgstr "" - -msgid "Member Host" -msgstr "" - -#, fuzzy -msgid "Member Hostgroup" -msgstr "Menghapus suatu hostgroup." - -#, fuzzy -msgid "Add a new netgroup." -msgstr "Tambah grup host" - -#, fuzzy -msgid "Add members to a netgroup." -msgstr "Tambah grup host" - -msgid "member netgroup" -msgstr "" - -msgid "netgroups to add" -msgstr "" - -#, fuzzy -msgid "Delete a netgroup." -msgstr "Menghapus suatu hostgroup." - -msgid "Search for a netgroup." -msgstr "" - -msgid "search for managed groups" -msgstr "" - -msgid "Search for netgroups with these member netgroups." -msgstr "" - -msgid "Search for netgroups without these member netgroups." -msgstr "" - -msgid "Search for netgroups with these member users." -msgstr "" - -msgid "Search for netgroups without these member users." -msgstr "" - -msgid "Search for netgroups with these member groups." -msgstr "" - -msgid "Search for netgroups without these member groups." -msgstr "" - -msgid "Search for netgroups with these member hosts." -msgstr "" - -msgid "Search for netgroups without these member hosts." -msgstr "" - -msgid "Search for netgroups with these member host groups." -msgstr "" - -msgid "Search for netgroups without these member host groups." -msgstr "" - -msgid "Search for netgroups with these member of netgroups." -msgstr "" - -msgid "Search for netgroups without these member of netgroups." -msgstr "" - -#, fuzzy -msgid "Modify a netgroup." -msgstr "Memodifikasi suatu hostgroup." - -msgid "Remove members from a netgroup." -msgstr "" - -msgid "netgroups to remove" -msgstr "" - -msgid "Display information about a netgroup." -msgstr "" - -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" - -msgid "TOTP authentication Window" -msgstr "" - -msgid "TOTP authentication time variance (seconds)" -msgstr "" - -msgid "TOTP Synchronization Window" -msgstr "" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "" - -msgid "HOTP Authentication Window" -msgstr "" - -msgid "HOTP authentication skip-ahead" -msgstr "" - -msgid "HOTP Synchronization Window" -msgstr "" - -msgid "HOTP synchronization skip-ahead" -msgstr "" - -msgid "Modify OTP configuration options." -msgstr "" - -msgid "Show the current OTP configuration." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -msgid "Serial" -msgstr "Serial" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -#, fuzzy -msgid "(deprecated)" -msgstr "Usang; gunakan %s" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -#, fuzzy -msgid "Delete an OTP token." -msgstr "Menghapus token OTP \"%(value)s\"" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -#, fuzzy -msgid "Modify a OTP token." -msgstr "Memodifikasi suatu hostgroup." - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "Set a user's password." -msgstr "" - -#, fuzzy -msgid "New Password" -msgstr "kata sandi" - -msgid "Current Password" -msgstr "" - -msgid "OTP" -msgstr "" - -#, fuzzy -msgid "One Time Password" -msgstr "Konfirmasi (kata sandi)" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -"\n" -"Managed permissions\n" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "Permission name" -msgstr "" - -msgid "Granted rights" -msgstr "" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" - -msgid "Effective attributes" -msgstr "" - -msgid "All attributes to which the permission applies" -msgstr "" - -msgid "Included attributes" -msgstr "" - -msgid "User-specified attributes to which the permission applies" -msgstr "" - -msgid "Excluded attributes" -msgstr "" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" - -msgid "Default attributes" -msgstr "" - -msgid "Attributes to which the permission applies by default" -msgstr "" - -msgid "Bind rule type" -msgstr "Tipe aturan bind" - -msgid "Subtree to apply permissions to" -msgstr "" - -msgid "Extra target filter" -msgstr "" - -msgid "Raw target filter" -msgstr "" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" - -msgid "Target DN" -msgstr "DN Target" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" - -msgid "Member of group" -msgstr "" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "" - -msgid "User group to apply permissions to (sets target)" -msgstr "" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "" - -#, fuzzy -msgid "Deprecated; use extratargetfilter" -msgstr "Usang; gunakan %s" - -#, fuzzy -msgid "Deprecated; use ipapermlocation" -msgstr "Usang; gunakan %s" - -#, fuzzy -msgid "Deprecated; use ipapermright" -msgstr "Usang; gunakan %s" - -msgid "Granted to Privilege" -msgstr "" - -msgid "Indirect Member of roles" -msgstr "" - -msgid "Add a new permission." -msgstr "" - -msgid "Add members to a permission." -msgstr "" - -msgid "member privilege" -msgstr "" - -msgid "privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "" - -msgid "Permission flags" -msgstr "" - -#, fuzzy -msgid "Delete a permission." -msgstr "Menghapus suatu hostgroup." - -msgid "force delete of SYSTEM permissions" -msgstr "" - -msgid "Search for permissions." -msgstr "" - -#, fuzzy -msgid "Modify a permission." -msgstr "Memodifikasi suatu hostgroup." - -msgid "Rename the permission object" -msgstr "" - -msgid "Remove members from a permission." -msgstr "" - -msgid "privileges to remove" -msgstr "" - -msgid "Display information about a permission." -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "Ping a remote server." -msgstr "" - -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "" - -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" - -#, fuzzy -msgid "Privilege name" -msgstr "namaberkas" - -msgid "Privilege description" -msgstr "" - -msgid "Granting privilege to roles" -msgstr "" - -msgid "Add a new privilege." -msgstr "" - -msgid "Add members to a privilege." -msgstr "" - -msgid "member role" -msgstr "" - -msgid "roles to add" -msgstr "" - -msgid "Add permissions to a privilege." -msgstr "" - -msgid "permission" -msgstr "" - -msgid "permissions" -msgstr "" - -#, fuzzy -msgid "Number of permissions added" -msgstr "Cacah pengaya yang dimuat" - -#, fuzzy -msgid "Delete a privilege." -msgstr "Hapus semua?" - -msgid "Search for privileges." -msgstr "" - -msgid "Modify a privilege." -msgstr "" - -msgid "Rename the privilege object" -msgstr "" - -msgid "Remove members from a privilege" -msgstr "" - -#, fuzzy -msgid "roles to remove" +msgid "Unable to remove entry\n" msgstr "Tak bisa menghapus entri\n" -msgid "Remove permissions from a privilege." -msgstr "" +msgid "Undo" +msgstr "Tak Jadi" -#, fuzzy -msgid "Number of permissions removed" -msgstr "Cacah pengaya yang dimuat" +msgid "You must enroll a host in order to create a host service" +msgstr "Anda harus mendaftarkan sebuah host untuk membuat layanan host" -msgid "Display information about a privilege." -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Group" -msgstr "" - -msgid "Manage password policy for specific group" -msgstr "" - -msgid "Max lifetime (days)" -msgstr "" - -msgid "Maximum password lifetime (in days)" -msgstr "" - -msgid "Min lifetime (hours)" -msgstr "" - -msgid "Minimum password lifetime (in hours)" -msgstr "" - -msgid "History size" -msgstr "" - -#, fuzzy -msgid "Password history size" -msgstr "Kata sandi terlalu panjang!\n" - -msgid "Character classes" -msgstr "" - -msgid "Minimum number of character classes" -msgstr "" - -msgid "Min length" -msgstr "" - -msgid "Minimum length of password" -msgstr "" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "" - -msgid "Max failures" -msgstr "" - -msgid "Consecutive failures before lockout" -msgstr "" - -msgid "Failure reset interval" -msgstr "" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "" - -msgid "Lockout duration" -msgstr "" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" - -msgid "Add a new group password policy." -msgstr "" - -#, fuzzy -msgid "Delete a group password policy." -msgstr "Menghapus suatu hostgroup." - -msgid "Search for group password policies." -msgstr "" - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" - -#, fuzzy -msgid "Modify a group password policy." -msgstr "Memodifikasi suatu hostgroup." - -msgid "Display information about password policy." -msgstr "" - -msgid "User" -msgstr "" - -msgid "Display effective policy for a specific user" -msgstr "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -#, fuzzy -msgid "RADIUS proxy server name" -msgstr "Nama Server DNS" - -#, fuzzy -msgid "A description of this RADIUS proxy server" -msgstr "Suatu penjelasan atas perintah ini" - -#, fuzzy -msgid "Server" -msgstr "Nama Peladen" - -msgid "The hostname or IP (with or without port)" -msgstr "" - -msgid "Secret" -msgstr "" - -msgid "The secret used to encrypt data" -msgstr "" - -msgid "Timeout" -msgstr "" - -msgid "The total timeout across all retries (in seconds)" -msgstr "" - -msgid "Retries" -msgstr "" - -msgid "The number of times to retry authentication" -msgstr "" - -msgid "User attribute" -msgstr "" - -msgid "The username attribute on the user object" -msgstr "" - -msgid "Add a new RADIUS proxy server." -msgstr "" - -msgid "Delete a RADIUS proxy server." -msgstr "" - -msgid "Search for RADIUS proxy servers." -msgstr "" - -msgid "Modify a RADIUS proxy server." -msgstr "" - -msgid "Rename the RADIUS proxy server object" -msgstr "" - -msgid "Display information about a RADIUS proxy server." -msgstr "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Domain" -msgstr "Domain" - -#, fuzzy -msgid "Add domain" -msgstr "Domain" - -#, fuzzy -msgid "Delete domain" -msgstr "Hapus semua?" - -#, fuzzy -msgid "Modify realm domains." -msgstr "Memodifikasi suatu hostgroup." - -msgid "Force adding domain even if not in DNS" -msgstr "" - -msgid "Display the list of realm domains." -msgstr "" - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" - -#, fuzzy -msgid "Role name" -msgstr "Nama realm" - -#, fuzzy -msgid "A description of this role-group" -msgstr "Suatu penjelasan atas perintah ini" - -msgid "Privileges" -msgstr "" - -msgid "Member services" -msgstr "" - -msgid "Add a new role." -msgstr "" - -msgid "Add members to a role." -msgstr "" - -msgid "member service" -msgstr "" - -#, fuzzy -msgid "services to add" -msgstr "Opsi Layanan" - -msgid "Add privileges to a role." -msgstr "" - -msgid "privilege" -msgstr "" - -msgid "privileges" -msgstr "" - -#, fuzzy -msgid "Number of privileges added" -msgstr "Cacah pengaya yang dimuat" - -#, fuzzy -msgid "Delete a role." -msgstr "Menghapus grup." - -msgid "Search for roles." -msgstr "" - -#, fuzzy -msgid "Modify a role." -msgstr "Memodifikasi suatu hostgroup." - -msgid "Rename the role object" -msgstr "" - -msgid "Remove members from a role." -msgstr "" - -msgid "services to remove" -msgstr "" - -msgid "Remove privileges from a role." -msgstr "" - -#, fuzzy -msgid "Number of privileges removed" -msgstr "Cacah pengaya yang dimuat" - -msgid "Display information about a role." -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -#, fuzzy -msgid "Self-service name" -msgstr "Nama Server DNS" - -msgid "Attributes to which the permission applies." -msgstr "" - -msgid "Add a new self-service permission." -msgstr "" - -msgid "Delete a self-service permission." -msgstr "" - -msgid "Search for a self-service permission." -msgstr "" - -msgid "Modify a self-service permission." -msgstr "" - -msgid "Display information about a self-service permission." -msgstr "" - -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" - -msgid "SELinux User" -msgstr "" - -msgid "HBAC Rule" -msgstr "" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "" - -msgid "Create a new SELinux User Map." -msgstr "" - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "" - -msgid "Delete a SELinux User Map." -msgstr "" - -msgid "Disable an SELinux User Map rule." -msgstr "" - -msgid "Enable an SELinux User Map rule." -msgstr "" - -msgid "Search for SELinux User Maps." -msgstr "" - -msgid "Modify a SELinux User Map." -msgstr "" - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "" - -msgid "Display the properties of a SELinux User Map rule." -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -#, fuzzy -msgid "Service principal" -msgstr "Opsi Layanan" - -msgid "PAC type" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" - -msgid "Add a new IPA new service." -msgstr "" - -msgid "force principal name even if not in DNS" -msgstr "" - -msgid "Add hosts that can manage this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Delete an IPA service." -msgstr "" - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Search for IPA services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" - -msgid "Search for services with these managed by hosts." -msgstr "" - -msgid "Search for services without these managed by hosts." -msgstr "" - -msgid "Modify an existing IPA service." -msgstr "" - -msgid "Remove hosts that can manage this service." -msgstr "" - -msgid "Display information about an IPA service." -msgstr "" - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" - -msgid "Sudo Command" -msgstr "" - -msgid "A description of this command" -msgstr "Suatu penjelasan atas perintah ini" - -msgid "Sudo Command Groups" -msgstr "" - -msgid "Create new Sudo Command." -msgstr "" - -msgid "Delete Sudo Command." -msgstr "" - -msgid "Search for Sudo Commands." -msgstr "" - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" - -msgid "Modify Sudo Command." -msgstr "" - -msgid "Display Sudo Command." -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "Sudo Command Group" -msgstr "" - -#, fuzzy -msgid "Commands" -msgstr "Nama perintah" - -msgid "Member Sudo commands" -msgstr "" - -msgid "Create new Sudo Command Group." -msgstr "" - -msgid "Add members to Sudo Command Group." -msgstr "" - -msgid "member sudo command" -msgstr "" - -msgid "sudo commands to add" -msgstr "" - -#, fuzzy -msgid "Delete Sudo Command Group." -msgstr "Menghapus suatu hostgroup." - -msgid "Search for Sudo Command Groups." -msgstr "" - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" - -#, fuzzy -msgid "Modify Sudo Command Group." -msgstr "Memodifikasi suatu hostgroup." - -msgid "Remove members from Sudo Command Group." -msgstr "" - -msgid "sudo commands to remove" -msgstr "" - -msgid "Display Sudo Command Group." -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -msgid "Domain GUID" -msgstr "GUID Domain" - -msgid "Fallback primary group" -msgstr "" - -#, fuzzy -msgid "Domain name" -msgstr "Nama perintah" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -#, fuzzy -msgid "Active Directory domain administrator" -msgstr "Domain Active Directory" - -#, fuzzy -msgid "Active Directory domain administrator's password" -msgstr "Domain Active Directory" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -#, fuzzy -msgid "Delete a trust." -msgstr "Menghapus suatu hostgroup." - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -#, fuzzy -msgid "First name" -msgstr "namahost" - -#, fuzzy -msgid "Last name" -msgstr "namahost" - -#, fuzzy -msgid "Full name" -msgstr "Nama realm" - -#, fuzzy -msgid "Display name" -msgstr "namaberkas" - -msgid "Initials" -msgstr "" - -#, fuzzy -msgid "Kerberos principal" -msgstr "Nama Prisipal Layanan Kerberos" - -#, fuzzy -msgid "Kerberos principal expiration" -msgstr "Nama Prisipal Layanan Kerberos" - -#, fuzzy -msgid "Email address" -msgstr "Alamat Surat" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -msgid "Pager Number" -msgstr "" - -msgid "Fax Number" -msgstr "" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Car License" -msgstr "" - -msgid "Account disabled" -msgstr "Akun dinonaktifkan" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "" - -msgid "RADIUS proxy username" -msgstr "" - -msgid "Department Number" -msgstr "" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -#, fuzzy -msgid "Delete a user." -msgstr "Menghapus suatu hostgroup." - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a user." -msgstr "Memodifikasi suatu hostgroup." - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -#, fuzzy -msgid "Command category" -msgstr "Nama perintah" - -msgid "Command category the rule applies to" -msgstr "" - -msgid "RunAs User category" -msgstr "" - -msgid "RunAs User category the rule applies to" -msgstr "" - -msgid "RunAs Group category" -msgstr "" - -msgid "RunAs Group category the rule applies to" -msgstr "" - -msgid "Sudo order" -msgstr "" - -msgid "integer to order the Sudo rules" -msgstr "" - -msgid "External User" -msgstr "" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -msgid "Host Masks" -msgstr "" - -msgid "Sudo Allow Commands" -msgstr "" - -msgid "Sudo Deny Commands" -msgstr "" - -msgid "Sudo Allow Command Groups" -msgstr "" - -msgid "Sudo Deny Command Groups" -msgstr "" - -#, fuzzy -msgid "RunAs Users" -msgstr "pengguna" - -msgid "Run as a user" -msgstr "" - -msgid "Groups of RunAs Users" -msgstr "" - -msgid "Run as any user within a specified group" -msgstr "" - -msgid "RunAs External User" -msgstr "" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -msgid "External Groups of RunAs Users" -msgstr "" - -msgid "External Groups of users that the command can run as" -msgstr "" - -msgid "RunAs Groups" -msgstr "" - -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -msgid "RunAs External Group" -msgstr "" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -#, fuzzy -msgid "Sudo Option" -msgstr "Opsi Layanan" - -msgid "Create new Sudo Rule." -msgstr "" - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "member sudo command group" -msgstr "" - -msgid "sudo command groups to add" -msgstr "" - -#, fuzzy -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "%i hosts atau hostgroups ditambahkan." - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "" - -msgid "Add group for Sudo to execute as." -msgstr "" - -msgid "Add users and groups for Sudo to execute as." -msgstr "" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "Delete Sudo Rule." -msgstr "Menghapus grup." - -msgid "Disable a Sudo Rule." -msgstr "" - -msgid "Enable a Sudo Rule." -msgstr "" - -msgid "Search for Sudo Rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -msgid "Modify Sudo Rule." -msgstr "" - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "sudo command groups to remove" -msgstr "" - -#, fuzzy -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "%i hosts atau hostgroups ditambahkan." - -msgid "Remove an option from Sudo Rule." -msgstr "" - -msgid "Remove group for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "" - -msgid "Display Sudo Rule." -msgstr "" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -#, fuzzy -msgid "ACL name" -msgstr "Nama perintah" - -msgid "Profile category" -msgstr "" - -msgid "Profile category the ACL applies to" -msgstr "" - -msgid "User category the ACL applies to" -msgstr "" - -msgid "Host category the ACL applies to" -msgstr "" - -msgid "Service category the ACL applies to" -msgstr "" - -msgid "Profiles" -msgstr "" - -msgid "Create a new CA ACL." -msgstr "" - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "" - -msgid "Add profiles to a CA ACL." -msgstr "" - -msgid "member Certificate Profile" -msgstr "" - -msgid "Certificate Profiles to add" -msgstr "" - -msgid "Add services to a CA ACL." -msgstr "" - -msgid "Add users and groups to a CA ACL." -msgstr "" - -msgid "Delete a CA ACL." -msgstr "" - -msgid "Disable a CA ACL." -msgstr "" - -msgid "Enable a CA ACL." -msgstr "" - -msgid "Search for CA ACLs." -msgstr "" - -msgid "Modify a CA ACL." -msgstr "" - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "" - -msgid "Remove profiles from a CA ACL." -msgstr "" - -msgid "Certificate Profiles to remove" -msgstr "" - -msgid "Remove services from a CA ACL." -msgstr "" - -msgid "Remove users and groups from a CA ACL." -msgstr "" - -msgid "Display the properties of a CA ACL." -msgstr "" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -#, fuzzy -msgid "Brief description of this profile" -msgstr "Suatu penjelasan atas perintah ini" - -#, fuzzy -msgid "Store issued certificates" -msgstr "harus merupakan sebuah sertifikat" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -#, fuzzy -msgid "Delete a Certificate Profile." -msgstr "harus merupakan sebuah sertifikat" - -msgid "Search for Certificate Profiles." -msgstr "" - -#, fuzzy -msgid "Import a Certificate Profile." -msgstr "harus merupakan sebuah sertifikat" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -#, fuzzy -msgid "Write profile configuration to file" -msgstr "tidak dapat membuka berkas konfigurasi %s\n" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" - -msgid "Query current Domain Level." -msgstr "" - -msgid "Current domain level:" -msgstr "" - -msgid "Change current Domain Level." -msgstr "" - -#, fuzzy -msgid "Domain Level" -msgstr "Domain" - -msgid "Add certificates to host entry" -msgstr "" - -msgid "Remove certificates from host entry" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "Fallback to AD DC LDAP" -msgstr "" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" - -#, fuzzy -msgid "Add to default group" -msgstr "Tambah grup host" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" - -msgid "Search scope" -msgstr "" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -#, fuzzy -msgid "Target DN subtree" -msgstr "DN Target" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" - -msgid "Origin DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -#, fuzzy -msgid "Server name" -msgstr "Nama Peladen" - -#, fuzzy -msgid "IPA server hostname" -msgstr "Server IPA yang akan digunakan" - -msgid "Managed suffix" -msgstr "" - -msgid "Min domain level" -msgstr "" - -msgid "Minimum domain level" -msgstr "" - -msgid "Max domain level" -msgstr "" - -msgid "Maximum domain level" -msgstr "" - -msgid "Delete IPA server." -msgstr "" - -msgid "Search for IPA servers." -msgstr "" - -msgid "Show IPA server." -msgstr "" - -msgid "Add new certificates to a service" -msgstr "" - -msgid "Remove certificates from a service" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -#, fuzzy -msgid "Allowed Target" -msgstr "Target DNAME" - -msgid "Create a new service delegation rule." -msgstr "" - -msgid "Add member to a named service delegation rule." -msgstr "" - -#, fuzzy -msgid "member principal" -msgstr "Menghapus prinsipal %s\n" - -#, fuzzy -msgid "principal to add" -msgstr "prinsipal tidak ditemukan\n" - -msgid "Add target to a named service delegation rule." -msgstr "" - -msgid "member service delegation target" -msgstr "" - -msgid "service delegation targets to add" -msgstr "" - -msgid "Delete service delegation." -msgstr "" - -msgid "Search for service delegations rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" - -msgid "Remove member from a named service delegation rule." -msgstr "" - -#, fuzzy -msgid "principal to remove" -msgstr "prinsipal tidak ditemukan\n" - -msgid "Remove target from a named service delegation rule." -msgstr "" - -msgid "service delegation targets to remove" -msgstr "" - -msgid "Display information about a named service delegation rule." -msgstr "" - -msgid "Create a new service delegation target." -msgstr "" - -msgid "Add member to a named service delegation target." -msgstr "" - -msgid "Delete service delegation target." -msgstr "" - -msgid "Search for service delegation target." -msgstr "" - -msgid "Remove member from a named service delegation target." -msgstr "" - -msgid "Display information about a named service delegation target." -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" - -msgid "Activate a stage user." -msgstr "" - -msgid "Add a new stage user." -msgstr "" - -msgid "Create Stage user in from a delete user" -msgstr "" - -#, fuzzy -msgid "Delete a stage user." -msgstr "Menghapus suatu hostgroup." - -msgid "Search for stage users." -msgstr "" - -msgid "Search for stage users with these member of groups." -msgstr "" - -msgid "Search for stage users without these member of groups." -msgstr "" - -msgid "Search for stage users with these member of netgroups." -msgstr "" - -msgid "Search for stage users without these member of netgroups." -msgstr "" - -msgid "Search for stage users with these member of roles." -msgstr "" - -msgid "Search for stage users without these member of roles." -msgstr "" - -msgid "Search for stage users with these member of HBAC rules." -msgstr "" - -msgid "Search for stage users without these member of HBAC rules." -msgstr "" - -msgid "Search for stage users with these member of sudo rules." -msgstr "" - -msgid "Search for stage users without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a stage user." -msgstr "Memodifikasi suatu hostgroup." - -msgid "Rename the stage user object" -msgstr "" - -msgid "Display information about a stage user." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" - -#, fuzzy -msgid "Segment name" -msgstr "Nama realm" - -msgid "Arbitrary string identifying the segment" -msgstr "" - -msgid "Left node" -msgstr "" - -msgid "Left replication node - an IPA server" -msgstr "" - -msgid "Right node" -msgstr "" - -msgid "Right replication node - an IPA server" -msgstr "" - -msgid "Connectivity" -msgstr "" - -msgid "Direction of replication between left and right replication node" -msgstr "" - -msgid "Attributes to strip" -msgstr "" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" - -msgid "Attributes to replicate" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" - -msgid "Attributes for total update" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" - -msgid "Session timeout" -msgstr "" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" - -msgid "Replication agreement enabled" -msgstr "" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" - -#, fuzzy -msgid "Suffix name" -msgstr "namaberkas" - -msgid "LDAP suffix to be managed" -msgstr "" - -msgid "Add a new segment." -msgstr "" - -#, fuzzy -msgid "Delete a segment." -msgstr "Menghapus suatu hostgroup." - -msgid "Search for topology segments." -msgstr "" - -#, fuzzy -msgid "Modify a segment." -msgstr "Memodifikasi suatu hostgroup." - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" - -msgid "Initialize left node" -msgstr "" - -msgid "Initialize right node" -msgstr "" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "" - -msgid "Display a segment." -msgstr "" - -msgid "Add a new topology suffix to be managed." -msgstr "" - -msgid "Delete a topology suffix." -msgstr "" - -msgid "Search for topology suffices." -msgstr "" - -msgid "Modify a topology suffix." -msgstr "" - -msgid "Show managed suffix." -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "Preserved user" -msgstr "" - -msgid "Add one or more certificates to the user entry" -msgstr "" - -msgid "Remove one or more certificates to the user entry" -msgstr "" - -msgid "Move deleted user into staged area" -msgstr "" - -msgid "Undelete a delete user account." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -#, fuzzy -msgid "Vault name" -msgstr "Nama realm" - -msgid "Vault description" -msgstr "" - -msgid "Vault type" -msgstr "" - -msgid "Salt" -msgstr "" - -msgid "Vault salt" -msgstr "" - -#, fuzzy -msgid "Public key" -msgstr "Kunci publik:" - -#, fuzzy -msgid "Vault public key" -msgstr "Kunci publik SSH:" - -#, fuzzy -msgid "Owner users" -msgstr "pengguna" - -msgid "Owner groups" -msgstr "" - -msgid "Owner services" -msgstr "" - -msgid "Failed owners" -msgstr "" - -msgid "Vault service" -msgstr "" - -msgid "Shared vault" -msgstr "" - -msgid "Vault user" -msgstr "" - -#, fuzzy -msgid "Transport Certificate" -msgstr "harus merupakan sebuah sertifikat" - -msgid "Service name of the service vault" -msgstr "" - -#, fuzzy -msgid "Username of the user vault" -msgstr "Nama host peladen ini" - -msgid "Add members to a vault." -msgstr "" - -msgid "Add owners to a vault." -msgstr "" - -msgid "owner user" -msgstr "" - -msgid "owner group" -msgstr "" - -msgid "owner service" -msgstr "" - -msgid "Owners that could not be added" -msgstr "" - -#, fuzzy -msgid "Number of owners added" -msgstr "Cacah pengaya yang dimuat" - -msgid "Session key wrapped with transport certificate" -msgstr "" - -msgid "Vault data encrypted with session key" -msgstr "" - -msgid "Nonce" -msgstr "Nonce" - -#, fuzzy -msgid "Delete a vault." -msgstr "Hapus semua?" - -msgid "Search for vaults." -msgstr "" - -msgid "List all service vaults" -msgstr "" - -msgid "List all user vaults" -msgstr "" - -msgid "Remove members from a vault." -msgstr "" - -msgid "Remove owners from a vault." -msgstr "" - -msgid "Owners that could not be removed" -msgstr "" - -#, fuzzy -msgid "Number of owners removed" -msgstr "Cacah pengaya yang dimuat" - -msgid "Display information about a vault." -msgstr "" - -msgid "Show vault configuration." -msgstr "" - -msgid "Output file to store the transport certificate" -msgstr "" - -#, fuzzy -msgid "Add owners to a vault container." -msgstr "vaultcontainer" - -#, fuzzy -msgid "Delete a vault container." -msgstr "vaultcontainer" - -msgid "Remove owners from a vault container." -msgstr "" - -msgid "Display information about a vault container." -msgstr "" - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "" - -#, fuzzy -msgid "Hostname (FQDN)" -msgstr "namahost" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Managed suffixes" -msgstr "" - -msgid "Check connection to remote IPA server." -msgstr "" - -#, fuzzy -msgid "Remote server name" -msgstr "Nama Server DNS" - -#, fuzzy -msgid "Remote IPA server hostname" -msgstr "Server IPA yang akan digunakan" - -msgid "suffix" -msgstr "" - -msgid "Search for servers with these managed suffixes." -msgstr "" - -msgid "Search for servers without these managed suffixes." -msgstr "" - -msgid "Add a manager to the stage user entry" -msgstr "" - -msgid "Remove a manager to the stage user entry" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -msgid "Managed LDAP suffix DN" -msgstr "" - -msgid "Search for topology suffixes." -msgstr "" - -msgid "Add a manager to the user entry" -msgstr "" - -msgid "Remove a manager to the user entry" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Comma-separated list of attributes" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" - -msgid "DNS class" -msgstr "" - -msgid "Comma-separated list of raw A records" -msgstr "" - -msgid "Comma-separated list of raw AAAA records" -msgstr "" - -msgid "Comma-separated list of raw A6 records" -msgstr "" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "" - -msgid "Comma-separated list of raw APL records" -msgstr "" - -msgid "Comma-separated list of raw CERT records" -msgstr "" - -msgid "Comma-separated list of raw CNAME records" -msgstr "" - -msgid "Comma-separated list of raw DHCID records" -msgstr "" - -msgid "Comma-separated list of raw DLV records" -msgstr "" - -msgid "Comma-separated list of raw DNAME records" -msgstr "" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "" - -msgid "Comma-separated list of raw DS records" -msgstr "" - -msgid "Comma-separated list of raw HIP records" -msgstr "" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "" - -msgid "Comma-separated list of raw KEY records" -msgstr "" - -msgid "KEY Flags" -msgstr "" - -msgid "KEY Protocol" -msgstr "" - -msgid "Protocol" -msgstr "" - -msgid "KEY Algorithm" -msgstr "" - -#, fuzzy -msgid "KEY Public Key" -msgstr "Kunci publik:" - -#, fuzzy -msgid "Public Key" -msgstr "Kunci publik:" - -msgid "Comma-separated list of raw KX records" -msgstr "" - -msgid "Comma-separated list of raw LOC records" -msgstr "" - -msgid "Comma-separated list of raw MX records" -msgstr "" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "" - -msgid "Comma-separated list of raw NS records" -msgstr "" - -msgid "Comma-separated list of raw NSEC records" -msgstr "" - -msgid "NSEC Next Domain Name" -msgstr "" - -msgid "Next Domain Name" -msgstr "" - -msgid "NSEC Type Map" -msgstr "" - -msgid "Type Map" -msgstr "" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "" - -msgid "Comma-separated list of raw PTR records" -msgstr "" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "" - -msgid "RRSIG Type Covered" -msgstr "" - -msgid "Type Covered" -msgstr "" - -msgid "RRSIG Algorithm" -msgstr "" - -msgid "RRSIG Labels" -msgstr "" - -msgid "Labels" -msgstr "" - -msgid "RRSIG Original TTL" -msgstr "" - -msgid "Original TTL" -msgstr "" - -msgid "RRSIG Signature Expiration" -msgstr "" - -msgid "Signature Expiration" -msgstr "" - -msgid "RRSIG Signature Inception" -msgstr "" - -msgid "Signature Inception" -msgstr "" - -msgid "RRSIG Key Tag" -msgstr "" - -msgid "RRSIG Signer's Name" -msgstr "" - -#, fuzzy -msgid "Signer's Name" -msgstr "Nama Peladen" - -msgid "RRSIG Signature" -msgstr "" - -msgid "Signature" -msgstr "" - -msgid "Comma-separated list of raw RP records" -msgstr "" - -msgid "Comma-separated list of raw SIG records" -msgstr "" - -msgid "SIG Type Covered" -msgstr "" - -msgid "SIG Algorithm" -msgstr "" - -msgid "SIG Labels" -msgstr "" - -msgid "SIG Original TTL" -msgstr "" - -msgid "SIG Signature Expiration" -msgstr "" - -msgid "SIG Signature Inception" -msgstr "" - -msgid "SIG Key Tag" -msgstr "" - -msgid "SIG Signer's Name" -msgstr "" - -msgid "SIG Signature" -msgstr "" - -msgid "Comma-separated list of raw SPF records" -msgstr "" - -msgid "Comma-separated list of raw SRV records" -msgstr "" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "" - -msgid "Comma-separated list of raw TA records" -msgstr "" - -msgid "Comma-separated list of raw TKEY records" -msgstr "" - -msgid "Comma-separated list of raw TSIG records" -msgstr "" - -msgid "Comma-separated list of raw TXT records" -msgstr "" - -msgid "SOA time to live" -msgstr "" - -msgid "SOA record time to live" -msgstr "" - -msgid "SOA class" -msgstr "" - -msgid "SOA record class" -msgstr "" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" - -msgid "Consume an entitlement." -msgstr "Mengkonsumsi suatu hak." - -msgid "Quantity" -msgstr "" - -msgid "Search for entitlement accounts." -msgstr "" - -msgid "Retrieve the entitlement certs." -msgstr "" - -msgid "Import an entitlement certificate." -msgstr "" - -msgid "UUID" -msgstr "" - -#, fuzzy -msgid "Enrollment UUID" -msgstr "UUID pendaftaran (tidak diimplementasikan)" - -msgid "Register to the entitlement system." -msgstr "" - -#, fuzzy -msgid "Username" -msgstr "namaberkas" - -msgid "Enrollment UUID (not implemented)" -msgstr "UUID pendaftaran (tidak diimplementasikan)" - -msgid "Registration password" -msgstr "" - -#, fuzzy -msgid "Display current entitlements." -msgstr "Mengkonsumsi suatu hak." - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" - -msgid "comma-separated list of users to add" -msgstr "" - -msgid "comma-separated list of groups to add" -msgstr "" - -msgid "comma-separated list of users to remove" -msgstr "" - -msgid "comma-separated list of groups to remove" -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Source host category" -msgstr "" - -msgid "Source host category the rule applies to" -msgstr "" - -msgid "Source Hosts" -msgstr "" - -msgid "Source Host Groups" -msgstr "" - -msgid "comma-separated list of hosts to add" -msgstr "" - -msgid "comma-separated list of host groups to add" -msgstr "" - -msgid "comma-separated list of HBAC services to add" -msgstr "" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "" - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "" - -msgid "comma-separated list of hosts to remove" -msgstr "" - -msgid "comma-separated list of host groups to remove" -msgstr "" - -msgid "comma-separated list of HBAC services to remove" -msgstr "" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" - -msgid "Source host" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "comma-separated list of netgroups to add" -msgstr "" - -msgid "comma-separated list of netgroups to remove" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" - -msgid "Target members of a group" -msgstr "" - -msgid "User group to apply permissions to" -msgstr "" - -msgid "comma-separated list of privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI" -msgstr "" - -msgid "Permission type" -msgstr "" - -msgid "comma-separated list of privileges to remove" -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "comma-separated list of roles to add" -msgstr "" - -#, fuzzy -msgid "comma-separated list of permissions" -msgstr "Daftar tipe enkripsi yang dipisahkan koma" - -msgid "comma-separated list of roles to remove" -msgstr "" - -msgid "comma-separated list of privileges" -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "comma-separated list of sudo commands to add" -msgstr "" - -msgid "comma-separated list of sudo commands to remove" -msgstr "" - -#, fuzzy -msgid "Active directory domain administrator's password" -msgstr "Domain Active Directory" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" - -msgid "comma-separated list of sudo command groups to add" -msgstr "" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "" - -msgid "Failed members" -msgstr "" - -#, fuzzy -msgid "Failed source hosts/hostgroups" -msgstr "Grup layanan/layanan gagal" - -#, fuzzy -msgid "Failed hosts/hostgroups" -msgstr "%i hosts atau hostgroups ditambahkan." - -#, fuzzy -msgid "Failed users/groups" -msgstr "Grup layanan/layanan gagal" - -msgid "Failed service/service groups" -msgstr "Grup layanan/layanan gagal" - -#, fuzzy -msgid "Failed to remove" -msgstr "Tak bisa menghapus entri\n" - -msgid "Failed RunAs" -msgstr "" - -msgid "Failed RunAsGroup" -msgstr "" - -#, fuzzy -msgid "Failed profiles" -msgstr "Gagal mengurai berkas konfig %s\n" - -msgid "Failed CAs" -msgstr "" - -msgid "Failed member manager" -msgstr "" - -msgid "Failed managedby" -msgstr "" - -#, fuzzy -msgid "Failed allowed to retrieve keytab" -msgstr "Gagal mengambil kunci apapun" - -#, fuzzy -msgid "Failed allowed to create keytab" -msgstr "Gagal membuka keytab\n" - -#, fuzzy -msgid "Failed targets" -msgstr "Gagal mengurai hasil: %s\n" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "kesalahan %(code)d tidak dikenal dari %(server)s: %(error)s" +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "access() pada %1$s gagal: errno = %2$d\n" msgid "an internal error has occurred" msgstr "terjadi kesalahan internal" @@ -11770,3443 +911,6 @@ msgstr "terjadi kesalahan internal" msgid "an internal error has occurred on server at '%(server)s'" msgstr "terjadi kesalahan internal pada server di '%(server)s'" -#, python-format -msgid "unknown command '%(name)s'" -msgstr "" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "galat pada server '%(server)s': %(error)s" - -#, fuzzy, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "galat pada server '%(server)s': %(error)s" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Permintaan JSON-RPC tidak valid: %(error)s" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Kesalahan kerberos: %(major)s/%(minor)s" - -#, fuzzy -msgid "did not receive Kerberos credentials" -msgstr "Tidak dapat menghasilkan Kerberos Credential Cache\n" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -msgid "No credentials cache found" -msgstr "" - -msgid "Ticket expired" -msgstr "Tiket kedaluwarsa" - -msgid "Credentials cache permissions incorrect" -msgstr "" - -#, fuzzy -msgid "Bad format in credentials cache" -msgstr "Galat saat menyimpan kredensial dalam singgahan kredensial: %s.\n" - -msgid "Cannot resolve KDC for requested realm" -msgstr "" - -msgid "Session error" -msgstr "" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Hak akses tidak mencukupi: %(info)s" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#, python-format -msgid "'%(name)s' is required" -msgstr "" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "'%(name)s' tidak valid: %(error)s" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - -msgid "Passwords do not match" -msgstr "Kata sandi tidak cocok" - -msgid "Command not implemented" -msgstr "Perintah tidak diimplementasikan" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -msgid "This entry already exists" -msgstr "Entri ini sudah ada" - -msgid "You must enroll a host in order to create a host service" -msgstr "Anda harus mendaftarkan sebuah host untuk membuat layanan host" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" - -msgid "This command requires root access" -msgstr "Perintah ini memerlukan akses root" - -msgid "This is already a posix group" -msgstr "Ini sudah merupakan grup posix" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -#, fuzzy -msgid "This entry is already enabled" -msgstr "Entri ini sudah ada" - -#, fuzzy -msgid "This entry is already disabled" -msgstr "Entri ini sudah ada" - -msgid "This entry cannot be enabled or disabled" -msgstr "" - -msgid "This entry is not a member" -msgstr "" - -msgid "A group may not be a member of itself" -msgstr "Sebuah grup tidak mungkin menjadi anggota grup itu sendiri" - -#, fuzzy -msgid "This entry is already a member" -msgstr "Entri ini sudah ada" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Penguraian Base64 gagal: %(reason)s" - -#, fuzzy -msgid "A group may not be added as a member of itself" -msgstr "Sebuah grup tidak mungkin menjadi anggota grup itu sendiri" - -msgid "The default users group cannot be removed" -msgstr "" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, fuzzy, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "harus merupakan sebuah sertifikat" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -msgid "This group already allows external members" -msgstr "" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "change collided with another change" -msgstr "perubahan bertabrakan dengan perubahan lain" - -msgid "no modifications to be performed" -msgstr "tidak ada modifikasi yang harus dilakukan" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(desc)s: %(info)s" - -msgid "limits exceeded for this query" -msgstr "query ini telah melampaui batas" - -#, python-format -msgid "%(info)s" -msgstr "%(info)s" - -msgid "modifying primary key is not allowed" -msgstr "" - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "%(attr)s: Hanya satu nilai yang diperbolehkan." - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "Operasi sertifikat tidak dapat diselesaikan: %(error)s" - -#, fuzzy, python-format -msgid "Certificate format error: %(error)s" -msgstr "Operasi sertifikat tidak dapat diselesaikan: %(error)s" - -msgid "Already registered" -msgstr "" - -msgid "Not registered yet" -msgstr "" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, python-format -msgid "%(exception)s" -msgstr "%(exception)s" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "Server DNS %(server)s: %(error)s." - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d variabel" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "%(count)d pengaya telah dimuat" - -msgid "A dictionary representing an LDAP entry" -msgstr "" - -msgid "A list of LDAP entries" -msgstr "" - -msgid "All commands should at least have a result" -msgstr "" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "Masukkan %(label)s lagi untuk verifikasi: " - -msgid "Passwords do not match!" -msgstr "Kata sandi tidak cocok!" - -msgid "No matching entries found" -msgstr "" - -msgid "Topic or Command" -msgstr "" - -msgid "The topic or command name." -msgstr "" - -msgid "Topic commands:" -msgstr "" - -msgid "To get command help, use:" -msgstr "" - -msgid " ipa --help" -msgstr "" - -msgid "Command name" -msgstr "Nama perintah" - -msgid "Positional arguments" -msgstr "" - -#, python-format -msgid "Same as --%s" -msgstr "" - -#, fuzzy -msgid "Deprecated options" -msgstr "Usang; gunakan %s" - -msgid "No file to read" -msgstr "" - -msgid "Results are truncated, try a more specific search" -msgstr "Hasil yang terpotong, coba cari dengan lebih spesifik" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - -#, fuzzy, python-format -msgid "%(filename)s: file not found" -msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" - -#, fuzzy, python-brace-format -msgid "Unable to parse option {item}" -msgstr "Tidak dapat mengurai prinsipal\n" - -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - -msgid "Filename is empty" -msgstr "" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -#, fuzzy -msgid "cannot be longer that {} characters" -msgstr "panjang maksimum yang diperbolehkan %(maxlength)d karakter" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -#, fuzzy -msgid "invalid SSH public key" -msgstr "Kunci publik SSH:" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "kuiri '%(owner)s %(rtype)s': %(error)s" - -#, fuzzy, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "kuiri '%(owner)s %(rtype)s': %(error)s" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -msgid "invalid domain name" -msgstr "" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, fuzzy, python-format -msgid "invalid domain-name: %s" -msgstr "'%(name)s' tidak valid: %(error)s" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "incorrect type" -msgstr "tipe salah" - -msgid "Only one value is allowed" -msgstr "Hanya satu nilai yang diperbolehkan" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "harus True atau False" - -msgid "must be an integer" -msgstr "harus merupakan bilangan bulat" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "setidaknya harus %(minvalue)d" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "nilai maksimum yang diperbolehkan %(maxvalue)d" - -msgid "must be a decimal number" -msgstr "harus merupakan angka desimal" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "setidaknya harus %(minvalue)s" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "boleh maksimum %(maxvalue)s" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "harus cocok dengan pola \"%(pattern)s\"" - -msgid "must be binary data" -msgstr "harus merupakan data biner" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "panjang minimum yang diperbolehkan %(minlength)d byte" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "panjang maksimum yang diperbolehkan %(maxlength)d byte" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "harus tepat %(length)d byte" - -msgid "must be a certificate" -msgstr "harus merupakan sebuah sertifikat" - -msgid "must be a certificate signing request" -msgstr "harus berupa sebuah permintaan penandatanganan sertifikat" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "Gagal mengurai Permintaan Penandatanganan Sertifikat: %s" - -msgid "must be Unicode text" -msgstr "harus teks Unicode" - -msgid "Leading and trailing spaces are not allowed" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "setidaknya minimum harus %(minlength)d karakter" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "panjang maksimum yang diperbolehkan %(maxlength)d karakter" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "harus tepat %(length)d karakter" - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "" - -#, python-format -msgid "must be '%(value)s'" -msgstr "harus '%(value)s'" - -#, python-format -msgid "must be one of %(values)s" -msgstr "harus satu dari %(values)s" - -msgid "must be datetime value" -msgstr "harus berupa nilai datetime" - -msgid "does not match any of accepted formats: " -msgstr "" - -#, fuzzy -msgid "incomplete time value" -msgstr "harus berupa nilai datetime" - -msgid "must be DNS name" -msgstr "harus berupa nama DNS" - -msgid "must be absolute" -msgstr "harus absolut" - -msgid "must be relative" -msgstr "harus relatif" - -msgid "must be dictionary" -msgstr "harus berupa kamus" - -msgid "must be Kerberos principal" -msgstr "" - -#, fuzzy, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "Ubah '%(value)s' %(name)s?" - -#, fuzzy -msgid "Service principal is required" -msgstr "Nama Prisipal Layanan Kerberos" - -#, fuzzy -msgid "must be at least 0" -msgstr "setidaknya harus 1" - -#, fuzzy -msgid "invalid valid hex" -msgstr "Tipe aturan bind" - -#, fuzzy -#| msgid "minimum serial number" -msgid "invalid serial number 0" -msgstr "nomor seri minimum" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "" - -#, fuzzy, python-format -msgid "objectclass %s not found" -msgstr "Entri %s tidak ditemukan" - -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -#, fuzzy -msgid "Non-Active Directory domain" -msgstr "Domain Active Directory" - -msgid "Active Directory domain" -msgstr "Domain Active Directory" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "Failed to authenticate to CA REST API" -msgstr "" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "" - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -msgid "Automount Location" -msgstr "" - -#, fuzzy, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "Menambah token OTP \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "Menghapus token OTP \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "%(count)d token OTP cocok" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, fuzzy, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "Grup \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "Grup \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "%(count)d grup cocok" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "kunci bernama %(key)s sudah ada" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, fuzzy, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "Menambah token OTP \"%(value)s\"" - -#, fuzzy, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "Grup \"%(value)s\" ditambahkan" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "Menghapus token OTP \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "Mengubah token OTP \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "%(count)d token OTP cocok" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "%(count)d grup cocok" - -#, fuzzy, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "CA \"%(value)s\" dibuat" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, fuzzy, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, fuzzy -msgid "Certificate profiles cannot be renamed" -msgstr "Operasi sertifikat tidak dapat diselesaikan: %(error)s" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -msgid "ACI" -msgstr "" - -#, fuzzy, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "Segmen \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "%(count)d grup cocok" - -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -#, fuzzy -msgid "DNS server" -msgstr "Nama Server DNS" - -#, fuzzy -msgid "DNS servers" -msgstr "Nama Server DNS" - -#, fuzzy -msgid "DNS Servers" -msgstr "Nama Server DNS" - -#, fuzzy -msgid "DNS Server" -msgstr "Nama Server DNS" - -msgid "DNS Server name" -msgstr "Nama Server DNS" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "Forwarder" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, fuzzy, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -msgid "Search for DNS servers." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "%(count)s server cocok" - -#, fuzzy -msgid "IPA DNS Server is not installed" -msgstr "Server IPA yang akan digunakan" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, fuzzy, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "Delete a DNS server" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "" - -msgid "User Group" -msgstr "" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "Grup \"%(value)s\" ditambahkan" - -#, fuzzy -msgid "gid cannot be set for external group" -msgstr "Kata sandi tidak dapat ditata pada host yang didaftarkan." - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -#, fuzzy -msgid "privileged group" -msgstr "Menghapus grup." - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Grup \"%(value)s\" dimodifikasi" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "%(count)d grup cocok" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, fuzzy, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, fuzzy, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "%(count)s server cocok" - -msgid "HBAC service group" -msgstr "" - -#, fuzzy -msgid "HBAC service groups" -msgstr "Grup layanan/layanan gagal" - -#, fuzzy -msgid "HBAC Service Groups" -msgstr "Server IPA yang akan digunakan" - -msgid "HBAC Service Group" -msgstr "" - -#, fuzzy, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "Grup \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "Grup \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "%(count)d grup cocok" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -msgid "host groups" -msgstr "Tambah grup host" - -#, fuzzy -msgid "Host Group" -msgstr "Tambah grup host" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Hostgroup \"%(value)s\" ditambahkan" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Hostgroup \"%(value)s\" dihapus" - -#, fuzzy -msgid "hostgroup" -msgstr "Tambah grup host" - -#, fuzzy -msgid "privileged hostgroup" -msgstr "Menghapus suatu hostgroup." - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Hostgroup \"%(value)s\" dimodifikasi" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "%(count)d hostgroup cocok" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -#, fuzzy -msgid "Active Directory domain range" -msgstr "Domain Active Directory" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -#, fuzzy -msgid "Auto private groups" -msgstr "Grup layanan/layanan gagal" - -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dihapus" - -#, fuzzy, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d pengguna cocok" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dimodifikasi" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "" - -msgid "locations" -msgstr "" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -#, fuzzy -msgid "Location name" -msgstr "Nama perintah" - -msgid "IPA location name" -msgstr "" - -msgid "IPA Location description" -msgstr "" - -#, fuzzy -msgid "Servers" -msgstr "Nama Peladen" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, fuzzy, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "Menambah token OTP \"%(value)s\"" - -#, fuzzy -msgid "Delete an IPA location." -msgstr "Menghapus suatu hostgroup." - -#, fuzzy, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Menghapus token OTP \"%(value)s\"" - -#, fuzzy -msgid "IPA Server" -msgstr "Server IPA yang akan digunakan" - -msgid "Modify information about an IPA location." -msgstr "" - -#, fuzzy, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "Mengubah token OTP \"%(value)s\"" - -msgid "Search for IPA locations." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "%(count)d token OTP cocok" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -#, fuzzy -msgid "netgroups" -msgstr "Menghapus grup." - -#, fuzzy -msgid "Netgroups" -msgstr "Menghapus grup." - -#, fuzzy -msgid "Netgroup" -msgstr "Menghapus grup." - -#, fuzzy, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "Grup \"%(value)s\" ditambahkan" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "Grup \"%(value)s\" dimodifikasi" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "%(count)d grup cocok" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"OTP Tokens\n" -msgstr "Token OTP" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -#, fuzzy -msgid "OTP token" -msgstr "Token OTP" - -#, fuzzy -msgid "OTP tokens" -msgstr "Token OTP" - -#, fuzzy -msgid "OTP Tokens" -msgstr "Token OTP" - -msgid "OTP Token" -msgstr "Token OTP" - -msgid "URI" -msgstr "" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "Menambah token OTP \"%(value)s\"" - -msgid "cannot be empty" -msgstr "" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Menghapus token OTP \"%(value)s\"" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "Mengubah token OTP \"%(value)s\"" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "%(count)d token OTP cocok" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, fuzzy, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Mengubah keadaan server \"%(value)s\"." - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "pkinit" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)s server cocok" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -#, fuzzy -msgid "invalid port number" -msgstr "Nomor seri minimum" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -#, fuzzy -msgid "RADIUS Servers" -msgstr "Nama Server DNS" - -#, fuzzy -msgid "RADIUS Server" -msgstr "Nama Server DNS" - -#, fuzzy, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "%(count)s server cocok" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -#, fuzzy -msgid "Realm domains" -msgstr "Nama realm" - -#, fuzzy -msgid "Realm Domains" -msgstr "Domain" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "Role" -msgstr "" - -#, fuzzy, python-format -msgid "Added role \"%(value)s\"" -msgstr "Grup \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified role \"%(value)s\"" -msgstr "Grup \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d grup cocok" - -msgid "self service permission" -msgstr "" - -#, fuzzy -msgid "self service permissions" -msgstr "Opsi Layanan" - -#, fuzzy -msgid "Self Service Permissions" -msgstr "Opsi Layanan" - -msgid "Self Service Permission" -msgstr "" - -#, fuzzy, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "%(count)s server cocok" - -#, fuzzy -msgid "" -"\n" -"IPA server roles\n" -msgstr "Server IPA yang akan digunakan" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -#, fuzzy -msgid "server role" -msgstr "Nama Peladen" - -#, fuzzy -msgid "server roles" -msgstr "Nama Peladen" - -#, fuzzy -msgid "IPA Server Roles" -msgstr "Server IPA yang akan digunakan" - -#, fuzzy -msgid "IPA Server Role" -msgstr "Server IPA yang akan digunakan" - -#, fuzzy -msgid "IPA server role name" -msgstr "Server IPA yang akan digunakan" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "%(count)s peran server cocok" - -msgid "Include IPA master entries" -msgstr "" - -msgid "IPA role name" -msgstr "" - -#, fuzzy, python-brace-format -msgid "{role}: role not found" -msgstr "realm tidak ditemukan\n" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "{attr}: tidak ada atribut seperti itu" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -#, fuzzy -msgid "Member principals" -msgstr "Menghapus prinsipal %s\n" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -#, fuzzy -msgid "service delegation rules" -msgstr "Opsi Layanan" - -#, fuzzy -msgid "Service delegation rules" -msgstr "Opsi Layanan" - -#, fuzzy -msgid "Service delegation rule" -msgstr "Opsi Layanan" - -#, fuzzy, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "Segmen \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -msgid "privileged service delegation rule" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "%(count)s peran server cocok" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -#, fuzzy -msgid "Service delegation targets" -msgstr "Opsi Layanan" - -#, fuzzy -msgid "Service delegation target" -msgstr "Opsi Layanan" - -#, fuzzy, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "Segmen \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dihapus" - -msgid "privileged service delegation target" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "%(count)s peran server cocok" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -#, fuzzy -msgid "Subordinate id description" -msgstr "Opsi Layanan" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -msgid "SubUID range size" -msgstr "" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -msgid "SubGID range size" -msgstr "" - -msgid "Subordinate group ID count" -msgstr "" - -#, fuzzy, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "kunci bernama %(key)s sudah ada" - -#, python-format -msgid "'%(dn)s is not a valid user" -msgstr "" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -msgid "Add a new subordinate id." -msgstr "" - -#, fuzzy, python-format -msgid "Added subordinate id \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -#, fuzzy -msgid "Delete a subordinate id." -msgstr "harus merupakan sebuah sertifikat" - -#, fuzzy, python-format -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, fuzzy -msgid "Modify a subordinate id." -msgstr "Memodifikasi suatu hostgroup." - -#, fuzzy, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -msgid "Search for subordinate id." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "%(count)s server cocok" - -msgid "Display information about a subordinate id." -msgstr "" - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -msgid "sudo command" -msgstr "" - -msgid "sudo commands" -msgstr "" - -msgid "Sudo Commands" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "Menambah token OTP \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "CA \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "CA \"%(value)s\" diubah" - -#, fuzzy, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "%(count)d CA cocok" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Grup \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Grup \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "%(count)d grup cocok" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "segmen" - -#, fuzzy -msgid "segments" -msgstr "segmen" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "%(count)d host sesuai" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "Segmen \"%(value)s\" ditambahkan" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dihapus" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(value)s" -msgstr "harus '%(value)s'" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "%(count)d host sesuai" - -#, fuzzy, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Host \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "Host \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "Host \"%(value)s\" dimodifikasi" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -#, fuzzy -msgid "operation not defined" -msgstr "Operasi gagal: %s\n" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"IPA servers\n" -msgstr "Server IPA yang akan digunakan" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -msgid "servers" -msgstr "" - -#, fuzzy -msgid "IPA Servers" -msgstr "Server IPA yang akan digunakan" - -#, fuzzy -msgid "Server location" -msgstr "Opsi Layanan" - -#, fuzzy -msgid "Service weight" -msgstr "Opsi Layanan" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -#, fuzzy -msgid "Enabled server roles" -msgstr "Grup layanan/layanan gagal" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, fuzzy, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "%(count)s server cocok" - -#, fuzzy, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, fuzzy, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "galat pada server '%(server)s': %(error)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, fuzzy, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "galat pada server '%(server)s': %(error)s" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, fuzzy, python-format -msgid "must be \"%s\"" -msgstr "harus '%(value)s'" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -#, fuzzy -msgid "Server state" -msgstr "Nama Peladen" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "Mengubah keadaan server \"%(value)s\"." - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -#, fuzzy -msgid "A list of ACI values" -msgstr "ACI \"%(value)s\" telah dihapus" - -#, fuzzy -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" -"setidaknya diperlukan salah satu dari: type, filter, subtree, targetgroup, " -"attrs atau memberof" - -msgid "ACI prefix is required" -msgstr "" - msgid "" "at least one of: type, filter, subtree, targetgroup, attrs or memberof are " "required" @@ -15214,1841 +918,291 @@ msgstr "" "setidaknya diperlukan salah satu dari: type, filter, subtree, targetgroup, " "attrs atau memberof" -msgid "filter and memberof are mutually exclusive" -msgstr "" +msgid "basedn" +msgstr "basedn" -msgid "group, permission and self are mutually exclusive" -msgstr "" +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "ber_init() gagal, Kontrol tidak valid ?!\n" -msgid "One of group, permission or self is required" -msgstr "" +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "ber_scanf() gagal, tidak dapat menemukan kvno ?!\n" #, python-format -msgid "Group '%s' does not exist" -msgstr "Grup '%s' tidak ada" - -msgid "empty filter" -msgstr "" +msgid "can be at most %(len)d characters" +msgstr "boleh maksimum %(len)d karakter" #, python-format -msgid "Syntax Error: %(error)s" -msgstr "" +msgid "can be at most %(maxlength)d bytes" +msgstr "panjang maksimum yang diperbolehkan %(maxlength)d byte" #, python-format -msgid "invalid DN (%s)" -msgstr "" +msgid "can be at most %(maxlength)d characters" +msgstr "panjang maksimum yang diperbolehkan %(maxlength)d karakter" #, python-format -msgid "ACI with name \"%s\" not found" -msgstr "ACI dengan nama \"%s\" tidak ditemukan" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" +msgid "can be at most %(maxvalue)d" +msgstr "nilai maksimum yang diperbolehkan %(maxvalue)d" #, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dibuat" +msgid "can be at most %(maxvalue)s" +msgstr "boleh maksimum %(maxvalue)s" + +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "tidak dapat membuka berkas konfigurasi %s\n" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "tidak dapat melakukan stat() berkas konfigurasi %s\n" + +msgid "change collided with another change" +msgstr "perubahan bertabrakan dengan perubahan lain" + +#, c-format +msgid "child exited with %d\n" +msgstr "anak keluar dengan %d\n" + +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "curl_easy_init() gagal\n" + +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "curl_easy_setopt() gagal\n" + +#, c-format +msgid "curl_global_init() failed\n" +msgstr "curl_global_init() gagal\n" + +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "curl_slist_append() gagal untuk nilai: '%s'\n" #, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dihapus" +msgid "error on server '%(server)s': %(error)s" +msgstr "galat pada server '%(server)s': %(error)s" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "mengeksekusi ipa-getkeytab gagal, errno %d\n" + +msgid "filename" +msgstr "namaberkas" + +#, c-format +msgid "fork() failed\n" +msgstr "fork() gagal\n" + +msgid "hostname" +msgstr "namahost" + +msgid "incorrect type" +msgstr "tipe salah" #, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dimodifikasi" +msgid "invalid '%(name)s': %(error)s" +msgstr "'%(name)s' tidak valid: %(error)s" -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d ACI cocok" - -#, fuzzy, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dibuat" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -#, fuzzy -msgid "Auto Membership is not configured" -msgstr "Aturan anggota otomatis: %s tidak ditemukan!" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Host \"%(value)s\" ditambahkan" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "Aturan anggota otomatis: %s tidak ditemukan!" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Hostgroup \"%(value)s\" dihapus" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d pengguna cocok" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -#, fuzzy -msgid "Member service groups" -msgstr "Grup layanan/layanan gagal" - -#, fuzzy -msgid "Member HBAC service groups" -msgstr "Grup layanan/layanan gagal" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, fuzzy, python-format -msgid "container entry (%(container)s) not found" -msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" - -#, fuzzy, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" - -#, fuzzy, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" - -#, fuzzy, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "kunci bernama %(key)s sudah ada" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -msgstr "" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Managed permissions\n" +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" msgstr "ipa-getkeytab memiliki izin yang buruk?\n" -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "ipa-getkeytab tidak ditemukan\n" -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" +#, c-format +msgid "json_dumps() failed\n" +msgstr "json_dumps() gagal\n" -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" +#, c-format +msgid "json_pack_ex() failed: %s\n" +msgstr "json_pack_ex() gagal: %s\n" -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" +#, python-format +msgid "key %(key)s already exists" +msgstr "kunci %(key)s sudah ada" + +#, python-format +msgid "key named %(key)s already exists" +msgstr "kunci bernama %(key)s sudah ada" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "krb5_kt_close %1$d: %2$s\n" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "krb5_kt_get_entry %1$d: %2$s\n" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "krb5_kt_remove_entry %1$d: %2$s\n" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "krb5_parse_name %1$d: %2$s\n" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "krb5_unparse_name %1$d: %2$s\n" + +#, c-format +msgid "kvno %d\n" +msgstr "kvno %d\n" + +msgid "limits exceeded for this query" +msgstr "query ini telah melampaui batas" + +#, python-format +msgid "map %(map)s already exists" +msgstr "peta %(map)s sudah ada" + +msgid "maximum serial number" +msgstr "nomor seri maksimum" + +msgid "minimum serial number" +msgstr "nomor seri minimum" + +#, python-format +msgid "must be '%(value)s'" +msgstr "harus '%(value)s'" + +msgid "must be DNS name" +msgstr "harus berupa nama DNS" + +msgid "must be TRUE or FALSE" +msgstr "harus TRUE atau FALSE" + +msgid "must be True or False" +msgstr "harus True atau False" + +msgid "must be Unicode text" +msgstr "harus teks Unicode" + +msgid "must be a certificate" +msgstr "harus merupakan sebuah sertifikat" + +msgid "must be a certificate signing request" +msgstr "harus berupa sebuah permintaan penandatanganan sertifikat" + +msgid "must be a decimal number" +msgstr "harus merupakan angka desimal" + +msgid "must be absolute" +msgstr "harus absolut" + +msgid "must be an integer" +msgstr "harus merupakan bilangan bulat" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "panjang minimum yang diperbolehkan %(minlength)d byte" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "setidaknya minimum harus %(minlength)d karakter" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "setidaknya harus %(minvalue)d" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "setidaknya harus %(minvalue)s" + +msgid "must be at least 1" +msgstr "setidaknya harus 1" + +msgid "must be binary data" +msgstr "harus merupakan data biner" + +msgid "must be datetime value" +msgstr "harus berupa nilai datetime" + +msgid "must be dictionary" +msgstr "harus berupa kamus" msgid "must be enclosed in parentheses" msgstr "mesti diapit kurung" #, python-format -msgid "\"%s\" is not an object type" -msgstr "" +msgid "must be exactly %(length)d bytes" +msgstr "harus tepat %(length)d byte" #, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" +msgid "must be exactly %(length)d characters" +msgstr "harus tepat %(length)d karakter" #, python-format -msgid "Deprecated; use %s" -msgstr "Usang; gunakan %s" +msgid "must be one of %(values)s" +msgstr "harus satu dari %(values)s" + +msgid "must be relative" +msgstr "harus relatif" #, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" +msgid "must match pattern \"%(pattern)s\"" +msgstr "harus cocok dengan pola \"%(pattern)s\"" -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" +msgid "no modifications to be performed" +msgstr "tidak ada modifikasi yang harus dilakukan" + +#, c-format +msgid "out of memory\n" +msgstr "kehabisan memori!\n" + +msgid "password" +msgstr "kata sandi" #, python-format -msgid "Entry %s not found" -msgstr "Entri %s tidak ditemukan" +msgid "permission \"%(value)s\" already exists" +msgstr "izin \"%(value)s\" sudah ada" + +msgid "pkinit" +msgstr "pkinit" + +#, c-format +msgid "principal not found\n" +msgstr "prinsipal tidak ditemukan\n" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "prinsipal tidak ditemukan dalam respons XML-RPC\n" + +msgid "priority cannot be set on global policy" +msgstr "prioritas tidak dapat ditetapkan pada kebijakan global" #, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "kuiri '%(owner)s %(rtype)s': %(error)s" -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" +#, c-format +msgid "read error\n" +msgstr "galat baca\n" -#, fuzzy, python-format -msgid "option was renamed; use %s" -msgstr "Usang; gunakan %s" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, fuzzy, python-format -msgid "%s: group not found" -msgstr "Entri %s tidak ditemukan" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -#, fuzzy -msgid "Bad search filter" -msgstr "Berkas induk" - -#, python-format -msgid "Entry %s does not exist" -msgstr "Entri %s tidak ada" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, fuzzy, python-format -msgid "Added permission \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -msgid "cannot delete managed permissions" -msgstr "" - -#, fuzzy, python-format -msgid "ACI of permission %s was not found" -msgstr "ACI dengan nama \"%s\" tidak ditemukan" - -#, fuzzy, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "%(count)d pengguna cocok" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, fuzzy, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "Segmen \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)s server cocok" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -msgid "Help topic" -msgstr "" - -msgid "Version" -msgstr "" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "namahost" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -#, fuzzy, python-brace-format -msgid "{oname}: {command_name} not found" +#, c-format +msgid "realm not found\n" msgstr "realm tidak ditemukan\n" -msgid "Display information about a class." -msgstr "" +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "hasil tidak ditemukan dalam respons XML-RPC\n" -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "Nama perintah" - -msgid "Confirm (password)" -msgstr "Konfirmasi (kata sandi)" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -#, fuzzy -msgid "Convert on server" -msgstr "Nama host peladen ini" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, fuzzy, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, fuzzy, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -#, fuzzy -msgid "Trust direction" -msgstr "harus berupa kamus" - -msgid "Trust type" -msgstr "" - -msgid "Trust status" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Menghapus token OTP \"%(value)s\"" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -#, fuzzy -msgid "domain" -msgstr "Domain" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -#, fuzzy -msgid "id range type" -msgstr "Tipe aturan bind" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "Host \"%(value)s\" dihapus" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "%(count)d host sesuai" - -#, fuzzy -msgid "trust configuration" -msgstr "tidak dapat melakukan stat() berkas konfigurasi %s\n" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, fuzzy, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "CA \"%(value)s\" diubah" - -msgid "SID" -msgstr "" +msgid "segment" +msgstr "segmen" msgid "sidgen_was_run" msgstr "sidgen_was_run" -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -#, fuzzy -msgid "Domain enabled" -msgstr "Domain" - #, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "kesalahan %(code)d tidak dikenal dari %(server)s: %(error)s" -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, fuzzy -msgid "not allowed to remotely add agent" -msgstr "Tak bisa menghapus entri\n" - -#, fuzzy, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "CA \"%(value)s\" difungsikan" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "CA \"%(value)s\" dinonaktifkan" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" +msgid "users" +msgstr "pengguna" msgid "vaultcontainer" msgstr "vaultcontainer" @@ -17056,7329 +1210,6 @@ msgstr "vaultcontainer" msgid "vaultcontainers" msgstr "vaultcontainers" -#, fuzzy -msgid "Vault Containers" -msgstr "vaultcontainers" - -#, fuzzy -msgid "Vault Container" -msgstr "vaultcontainer" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -#, fuzzy -msgid "Deleted vault container" -msgstr "vaultcontainer" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, fuzzy, python-format -msgid "Added vault \"%(value)s\"" -msgstr "Host \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "Host \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "%(count)d host sesuai" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, fuzzy, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "Host \"%(value)s\" dimodifikasi" - -#, fuzzy -msgid "Vault configuration" -msgstr "vaultcontainer" - -#, fuzzy -msgid "IPA KRA servers" -msgstr "Server IPA yang akan digunakan" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -msgid "Key wrapping algorithm" -msgstr "" - -#, fuzzy, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "Host \"%(value)s\" ditambahkan" - -msgid "Retrieve data from a vault." -msgstr "" - -#, fuzzy, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "harus TRUE atau FALSE" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "Principal alias" -msgstr "" - -msgid "User password expiration" -msgstr "" - -#, fuzzy -msgid "SSH public key fingerprint" -msgstr "Kunci publik SSH:" - -#, fuzzy -msgid "External IdP configuration" -msgstr "tidak dapat melakukan stat() berkas konfigurasi %s\n" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -#, fuzzy -msgid "Base-64 encoded user certificate" -msgstr "harus merupakan sebuah sertifikat" - -msgid "Certificate mapping data" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, fuzzy, python-format -msgid "manager %(manager)s not found" -msgstr "Entri %s tidak ditemukan" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "boleh maksimum %(len)d karakter" - -msgid "Issuer" -msgstr "" - -#, fuzzy -msgid "Issuer of the certificate" -msgstr "harus merupakan sebuah sertifikat" - -msgid "Subject" -msgstr "" - -#, fuzzy -msgid "Subject of the certificate" -msgstr "harus merupakan sebuah sertifikat" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, fuzzy, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, fuzzy, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, fuzzy, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "Host \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "CA \"%(value)s\" dihapus" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, fuzzy, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "CA \"%(value)s\" diubah" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "%(count)d CA cocok" - -#, fuzzy, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "CA \"%(value)s\" difungsikan" - -#, fuzzy, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "CA \"%(value)s\" dinonaktifkan" - -#, fuzzy, python-format -msgid "%i user or group added." -msgstr "%i host atau hostgroup ditambahkan." - -#, fuzzy, python-format -msgid "%i users or groups added." -msgstr "%i hosts atau hostgroups ditambahkan." - -msgid "users cannot be added when user category='all'" -msgstr "" - -#, fuzzy, python-format -msgid "%i user or group removed." -msgstr "%i host atau hostgroup dibuang." - -#, fuzzy, python-format -msgid "%i users or groups removed." -msgstr "%i host atau hostgroup dibuang." - -#, python-format -msgid "%i host or hostgroup added." -msgstr "%i host atau hostgroup ditambahkan." - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "%i hosts atau hostgroups ditambahkan." - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "%i host atau hostgroup dibuang." - -#, fuzzy, python-format -msgid "%i hosts or hostgroups removed." -msgstr "%i host atau hostgroup dibuang." - -#, python-format -msgid "%i service added." -msgstr "" - -#, python-format -msgid "%i services added." -msgstr "" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, fuzzy, python-format -msgid "%i services removed." -msgstr "%i host atau hostgroup dibuang." - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, fuzzy, python-format -msgid "%i profiles removed." -msgstr "%i host atau hostgroup dibuang." - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dimodifikasi" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dihapus" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -msgid "User logins" -msgstr "" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "%(count)s pengguna cocok" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -#, fuzzy -msgid "must be at least 10" -msgstr "setidaknya harus 1" - -msgid "configuration options" -msgstr "" - -msgid "Configuration" -msgstr "" - -msgid "Maximum hostname length" -msgstr "" - -msgid "Enable adding subids to new users" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -#, fuzzy -msgid "IPA CA servers" -msgstr "Server IPA yang akan digunakan" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -#, fuzzy -msgid "IPA DNS servers" -msgstr "Server IPA yang akan digunakan" - -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -#, fuzzy -msgid "Setup SID configuration" -msgstr "tidak dapat melakukan stat() berkas konfigurasi %s\n" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -#, fuzzy -msgid "Add SIDs" -msgstr "Tambah grup host" - -msgid "Add SIDs for existing users and groups" -msgstr "" - -msgid "NetBIOS name of the IPA domain" -msgstr "" - -msgid "Empty domain is not allowed" -msgstr "" - -#, fuzzy, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "'%(name)s' tidak valid: %(error)s" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -#, fuzzy -msgid "not allowed to enable SID generation" -msgstr "Tak bisa menghapus entri\n" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -#, fuzzy -msgid "Failed to call DBus" -msgstr "Gagal membuka keytab\n" - -msgid "Configuration of SID failed. See details in the error log" -msgstr "" - -#, fuzzy -msgid "The group doesn't exist" -msgstr "Grup '%s' tidak ada" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, fuzzy, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "galat pada server '%(server)s': %(error)s" - -msgid "SELinux user map default user not in order list" -msgstr "" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, fuzzy, python-format -msgid "DNS zone %(zone)s not found" -msgstr "%(otype)s \"%(oname)s\" tidak ditemukan" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, fuzzy, python-format -msgid "%s Record" -msgstr "Tipe record" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -msgid "Priority (order)" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -#, fuzzy -msgid "Only one zone type is allowed per zone name" -msgstr "Hanya satu nilai yang diperbolehkan" - -#, fuzzy, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "Segmen \"%(value)s\" ditambahkan" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "izin \"%(value)s\" sudah ada" - -#, fuzzy, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "Segmen \"%(value)s\" dihapus" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -msgid "Default time to live" -msgstr "" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "Host \"%(value)s\" dihapus" - -msgid "is required" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "CA \"%(value)s\" dinonaktifkan" - -#, fuzzy, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "CA \"%(value)s\" difungsikan" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, fuzzy, python-format -msgid "Found '%(value)s'" -msgstr "harus '%(value)s'" - -#, fuzzy, python-format -msgid "Host '%(host)s' not found" -msgstr "Entri %s tidak ditemukan" - -msgid "DNS configuration options" -msgstr "" - -msgid "DNS Global Configuration" -msgstr "" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -#, fuzzy -msgid "DNS Forward Zones" -msgstr "Forwarder" - -#, fuzzy -msgid "DNS Forward Zone" -msgstr "Forwarder" - -msgid "Please specify forwarders." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "CA \"%(value)s\" dinonaktifkan" - -#, fuzzy, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "CA \"%(value)s\" difungsikan" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -#, fuzzy -msgid "Result of the command" -msgstr "Suatu penjelasan atas perintah ini" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, fuzzy, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dihapus" - -#, fuzzy, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "%(count)d ACI cocok" - -#, fuzzy, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "CA \"%(value)s\" difungsikan" - -#, fuzzy, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "CA \"%(value)s\" dinonaktifkan" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host" -msgstr "" - -#, fuzzy -msgid "Base-64 encoded host certificate" -msgstr "harus merupakan sebuah sertifikat" - -#, fuzzy -msgid "Serial Number" -msgstr "Nomor seri maksimum" - -msgid "Serial Number (hex)" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "Host \"%(value)s\" ditambahkan" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Host \"%(value)s\" dihapus" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Host \"%(value)s\" dimodifikasi" - -msgid "Password cannot be set on enrolled host." -msgstr "Kata sandi tidak dapat ditata pada host yang didaftarkan." - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "%(count)d host sesuai" - -#, fuzzy, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "CA \"%(value)s\" dinonaktifkan" - -#, fuzzy, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "Host \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "Host \"%(value)s\" dimodifikasi" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Host \"%(value)s\" ditambahkan" - -#, fuzzy -msgid "Remove principal alias from a host entry" -msgstr "Hapus semua prinsipal di realm ini" - -#, fuzzy, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "Host \"%(value)s\" dimodifikasi" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" - -msgid "Invalid URI: not an https scheme" -msgstr "" - -msgid "Invalid URI: missing netloc" -msgstr "" - -msgid "Identity Provider server" -msgstr "" - -msgid "Identity Provider servers" -msgstr "" - -#, fuzzy -msgid "Identity Provider server name" -msgstr "Nama Server DNS" - -msgid "Authorization URI" -msgstr "" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -msgid "Token URI" -msgstr "" - -msgid "Token endpoint" -msgstr "" - -msgid "User info URI" -msgstr "" - -msgid "User information endpoint" -msgstr "" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -msgid "Client identifier" -msgstr "" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -msgid "Add a new Identity Provider server." -msgstr "" - -#, fuzzy, python-format -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -msgid "Base URL" -msgstr "" - -msgid "Base URL for IdP provider templates" -msgstr "" - -msgid "unknown provider" -msgstr "" - -msgid "value is missing" -msgstr "" - -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "" - -#, fuzzy -msgid "Delete an Identity Provider server." -msgstr "harus merupakan sebuah sertifikat" - -#, fuzzy, python-format -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -msgid "Modify an Identity Provider server." -msgstr "" - -#, fuzzy, python-format -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -msgid "Search for Identity Provider servers." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "%(count)s server cocok" - -msgid "Display information about an Identity Provider server." -msgstr "" - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Apply" -msgstr "" - -msgid "Rebuild auto membership" -msgstr "" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -msgid "Are you sure you want to proceed with the action?" -msgstr "" - #, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -#, fuzzy -msgid "Actions" -msgstr "%(exception)s" - -msgid "Add" -msgstr "" - -#, fuzzy, python-brace-format -msgid "${count} item(s) added" -msgstr "${count} pengguna digelar" - -msgid "Direct Membership" -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -msgid "No entries." -msgstr "" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -msgid "Remove" -msgstr "" - -#, fuzzy, python-brace-format -msgid "${count} item(s) removed" -msgstr "${count} pengguna diaktifkan" - -msgid "Show Results" -msgstr "" - -msgid "Authentication indicators" -msgstr "" - -msgid "Authentication indicator" -msgstr "" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -msgid "RADIUS" -msgstr "" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "External Identity Provider" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "" - -msgid "Activate" -msgstr "" - -msgid "Add and Add Another" -msgstr "" - -msgid "Add and Close" -msgstr "" - -msgid "Add and Edit" -msgstr "" - -msgid "Add Many" -msgstr "" - -msgid "Back" -msgstr "" - -msgid "Cancel" -msgstr "" - -msgid "Clear" -msgstr "" - -msgid "Clear all fields on the page." -msgstr "" - -msgid "Close" -msgstr "" - -msgid "Disable" -msgstr "" - -msgid "Download" -msgstr "" - -msgid "Download certificate as PEM formatted file." -msgstr "" - -msgid "Edit" -msgstr "" - -msgid "Enable" -msgstr "" - -msgid "Find" -msgstr "" - -msgid "Get" -msgstr "" - -msgid "Hide" -msgstr "" - -msgid "Issue" -msgstr "" - -msgid "Match" -msgstr "" - -msgid "Match users according to certificate." -msgstr "" - -msgid "Migrate" -msgstr "" - -msgid "OK" -msgstr "" - -msgid "Refresh" -msgstr "" - -msgid "Reload current settings from the server." -msgstr "" - -#, fuzzy -msgid "Delete" -msgstr "Hapus semua?" - -msgid "Remove hold" -msgstr "" - -#, fuzzy -msgid "Reset" -msgstr "OTP Reset" - -#, fuzzy -msgid "Reset Password" -msgstr "kata sandi" - -msgid "Reset Password and Log in" -msgstr "" - -msgid "Restore" -msgstr "" - -msgid "Retry" -msgstr "" - -msgid "Revert" -msgstr "" - -msgid "Revoke" -msgstr "" - -msgid "Save" -msgstr "" - -msgid "Set" -msgstr "" - -msgid "Show" -msgstr "" - -msgid "Stage" -msgstr "" - -msgid "Update" -msgstr "" - -msgid "View" -msgstr "" - -msgid "Customization" -msgstr "" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "" - -msgid "Expand All" -msgstr "" - -msgid "General" -msgstr "" - -msgid "Identity Settings" -msgstr "" - -#, fuzzy -msgid "Record Settings" -msgstr "Tipe record" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -msgid "Back to Top" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -#, fuzzy -msgid "Add custom value" -msgstr "Host \"%(value)s\" ditambahkan" - -msgid "Available" -msgstr "" - -#, fuzzy -msgid "Some operations failed." -msgstr "Operasi gagal: %s\n" - -msgid "Operations Error" -msgstr "" - -#, fuzzy -msgid "Confirmation" -msgstr "Konfirmasi (kata sandi)" - -msgid "Custom value" -msgstr "" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -msgid "Unsaved Changes" -msgstr "" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "Sunting ${entity}" - -msgid "Hide details" -msgstr "" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -msgid "Redirection" -msgstr "" - -msgid "Select entries to be removed." -msgstr "" - -msgid "Result" -msgstr "" - -msgid "Show details" -msgstr "" - -msgid "Success" -msgstr "" - -msgid "Validation error" -msgstr "" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "Terjadi kesalahan internal (${error})" - -msgid "HTTP Error" -msgstr "" - -msgid "Internal Error" -msgstr "" - -msgid "IPA Error" -msgstr "" - -#, fuzzy -msgid "No response" -msgstr "" -"Respon JSON-RPC:\n" -"%s\n" - -msgid "Unknown Error" -msgstr "" - -msgid "URL" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -msgid "Settings" -msgstr "" - -msgid "Search" -msgstr "" - -msgid "False" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Allowed to create keytab" -msgstr "Gagal membuka keytab\n" - -#, fuzzy -msgid "Allowed to retrieve keytab" -msgstr "Gagal mengambil kunci apapun" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add Kerberos Principal Alias" -msgstr "Nama Prisipal Layanan Kerberos" - -#, fuzzy -msgid "New kerberos principal alias" -msgstr "Nama Prisipal Layanan Kerberos" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "" - -msgid "Authenticating" -msgstr "" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -msgid "Kerberos Principal you entered is expired" -msgstr "" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -msgid "Log In Using Certificate" -msgstr "" - -#, fuzzy -msgid "Log in using personal certificate" -msgstr "harus merupakan sebuah sertifikat" - -msgid "Log out" -msgstr "" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -#, fuzzy -msgid "Sync OTP Token" -msgstr "Token OTP" - -msgid "Synchronizing" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -#, fuzzy -msgid "number of passwords" -msgstr "Cacah pengaya yang dimuat" - -msgid "seconds" -msgstr "" - -msgid "Migrating" -msgstr "" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -msgid "Password migration was not successful" -msgstr "" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -msgid "Password migration was successful" -msgstr "" - -msgid "Attribute" -msgstr "" - -msgid "Add delegation" -msgstr "" - -msgid "Remove delegations" -msgstr "" - -msgid "Add permission" -msgstr "" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -msgid "Remove permissions" -msgstr "" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove privileges" -msgstr "Menghapus prinsipal %s\n" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -msgid "Role Settings" -msgstr "" - -msgid "Add role" -msgstr "" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -msgid "Remove roles" -msgstr "" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -msgid "Add self service permission" -msgstr "" - -msgid "Remove self service permissions" -msgstr "" - -msgid "Add rule" -msgstr "" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to change default group?" -msgstr "" - -#, fuzzy -msgid "Default host group" -msgstr "Menghapus suatu hostgroup." - -#, fuzzy -msgid "Default user group" -msgstr "Menghapus grup." - -msgid "Exclusive" -msgstr "" - -msgid "Expression" -msgstr "" - -#, fuzzy -msgid "Host group rule" -msgstr "Tambah grup host" - -#, fuzzy -msgid "Host group rules" -msgstr "Tambah grup host" - -msgid "Inclusive" -msgstr "" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -msgid "User group rule" -msgstr "" - -msgid "User group rules" -msgstr "" - -msgid "Add automount key" -msgstr "" - -msgid "Remove automount keys" -msgstr "" - -msgid "Add automount location" -msgstr "" - -msgid "Automount Location Settings" -msgstr "" - -msgid "Remove automount locations" -msgstr "" - -msgid "Add automount map" -msgstr "" - -msgid "Map Type" -msgstr "" - -msgid "Direct" -msgstr "" - -msgid "Indirect" -msgstr "" - -msgid "Remove automount maps" -msgstr "" - -msgid "Add certificate authority" -msgstr "" - -msgid "Remove certificate authorities" -msgstr "" - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -msgid "All" -msgstr "" - -msgid "Any CA" -msgstr "" - -msgid "Any Host" -msgstr "" - -msgid "Any Service" -msgstr "" - -msgid "Any Profile" -msgstr "" - -msgid "Anyone" -msgstr "" - -msgid "Rule status" -msgstr "" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -msgid "Remove CA ACLs" -msgstr "" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -msgid "Specified CAs" -msgstr "" - -msgid "Specified Hosts and Groups" -msgstr "" - -msgid "Specified Profiles" -msgstr "" - -msgid "Specified Services and Groups" -msgstr "" - -msgid "Specified Users and Groups" -msgstr "" - -msgid "Permitted to have certificates issued" -msgstr "" - -msgid "Remove certificate profiles" -msgstr "" - -#, fuzzy -msgid "AA Compromise" -msgstr " * 2 - cACompromise\n" - -msgid "Add principal" -msgstr "" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -#, fuzzy -msgid "CA Compromise" -msgstr " * 2 - cACompromise\n" - -#, fuzzy -msgid "Certificates" -msgstr "harus merupakan sebuah sertifikat" - -#, fuzzy -msgid "Certificate Hold" -msgstr " * 6 - certificateHold\n" - -msgid "Cessation of Operation" -msgstr "" - -#, fuzzy -msgid "Common Name" -msgstr "Nama perintah" - -msgid "the certificate with serial number " -msgstr "" - -msgid "Expires On" -msgstr "Kedaluwarsa Pada" - -msgid "Issued on from" -msgstr "" - -msgid "Issued on to" -msgstr "" - -msgid "Maximum serial number" -msgstr "Nomor seri maksimum" - -msgid "Minimum serial number" -msgstr "Nomor seri minimum" - -msgid "Revoked on from" -msgstr "" - -msgid "Revoked on to" -msgstr "" - -msgid "Valid not after from" -msgstr "" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -msgid "Fingerprints" -msgstr "" - -#, fuzzy -msgid "Get Certificate" -msgstr "harus merupakan sebuah sertifikat" - -msgid "Certificate Hold Removed" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Issue new certificate" -msgstr "harus merupakan sebuah sertifikat" - -msgid "Issued By" -msgstr "" - -msgid "Issued On" -msgstr "" - -msgid "Issued To" -msgstr "" - -#, fuzzy -msgid "Key Compromise" -msgstr " * 1 - keyCompromise\n" - -#, fuzzy -msgid "No Valid Certificate" -msgstr "harus merupakan sebuah sertifikat" - -#, fuzzy -msgid "New Certificate" -msgstr "harus merupakan sebuah sertifikat" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -msgid "Note" -msgstr "" - -msgid "Organizational Unit" -msgstr "" - -#, fuzzy, python-brace-format -msgid "${count} certificate(s) present" -msgstr "${count} pengguna digelar" - -#, fuzzy -msgid "Privilege Withdrawn" -msgstr " * 9 - privilegeWithdrawn\n" - -msgid "Reason for Revocation" -msgstr "" - -#, fuzzy -msgid "Remove certificate hold" -msgstr "harus merupakan sebuah sertifikat" - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -#, fuzzy -msgid "Certificate requested" -msgstr "Mengirim sebuah permintan penandatanganan sertifikat." - -#, fuzzy -msgid "Revoke certificate" -msgstr "harus merupakan sebuah sertifikat" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -msgid "Certificate Revoked" -msgstr "" - -msgid "REVOKED" -msgstr "" - -msgid "SHA1 Fingerprint" -msgstr "" - -msgid "SHA256 Fingerprint" -msgstr "" - -msgid "Status" -msgstr "" - -msgid "Superseded" -msgstr "" - -msgid "Unspecified" -msgstr "" - -msgid "Valid Certificate Present" -msgstr "" - -msgid "Valid from" -msgstr "" - -msgid "Valid to" -msgstr "" - -msgid "Validity" -msgstr "" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -#, fuzzy -msgid "View Certificate" -msgstr "harus merupakan sebuah sertifikat" - -msgid "Certificate Data" -msgstr "" - -msgid "Certificate For Match" -msgstr "" - -msgid "Certificate Mapping Match" -msgstr "" - -msgid "Matched Users" -msgstr "" - -msgid "User Login" -msgstr "" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -msgid "Configuration string" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -msgid "Remove certificate mapping data" -msgstr "" - -msgid "Issuer and subject" -msgstr "" - -#, fuzzy -msgid "Remove certificate identity mapping rules" -msgstr "harus berupa sebuah permintaan penandatanganan sertifikat" - -#, fuzzy -msgid "Group Options" -msgstr "Opsi Layanan" - -#, fuzzy -msgid "Search Options" -msgstr "Opsi Layanan" - -#, fuzzy -msgid "SELinux Options" -msgstr "Opsi Layanan" - -#, fuzzy -msgid "Server Options" -msgstr "Opsi Layanan" - -msgid "Service Options" -msgstr "Opsi Layanan" - -#, fuzzy -msgid "User Options" -msgstr "Opsi Layanan" - -#, fuzzy -msgid "Forward first" -msgstr "Forwarder" - -#, fuzzy -msgid "Forwarding disabled" -msgstr "Akun dinonaktifkan" - -#, fuzzy -msgid "Forward only" -msgstr "Forwarder" - -#, fuzzy -msgid "Options" -msgstr "Opsi Layanan" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -#, fuzzy -msgid "Other Record Types" -msgstr "Tipe record" - -msgid "Address not valid, can't redirect" -msgstr "" - -msgid "Create dns record" -msgstr "" - -msgid "Creating record." -msgstr "" - -#, fuzzy -msgid "Record creation failed." -msgstr "Operasi gagal: %s\n" - -msgid "Checking if record exists." -msgstr "" - -#, fuzzy -msgid "Record not found." -msgstr "realm tidak ditemukan\n" - -msgid "Redirection to PTR record" -msgstr "" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -msgid "Target reverse zone not found." -msgstr "" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -#, fuzzy -msgid "Standard Record Types" -msgstr "Tipe record" - -msgid "Records for DNS Zone" -msgstr "" - -#, fuzzy -msgid "Record Type" -msgstr "Tipe record" - -msgid "Add DNS zone" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -msgid "DNS Zone Settings" -msgstr "" - -msgid "Remove DNS zones" -msgstr "" - -msgid "Remove Permission" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Level" -msgstr "" - -msgid "Set Domain Level" -msgstr "" - -#, fuzzy -msgid "Add user group" -msgstr "Tambah grup host" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -msgid "Group Settings" -msgstr "" - -msgid "External" -msgstr "" - -msgid "Groups" -msgstr "" - -msgid "Group categories" -msgstr "" - -msgid "Change to external group" -msgstr "" - -msgid "Change to POSIX group" -msgstr "" - -msgid "Non-POSIX" -msgstr "Non-POSIX" - -#, fuzzy -msgid "POSIX" -msgstr "Non-POSIX" - -msgid "Remove user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -msgid "Group Type" -msgstr "" - -msgid "Add HBAC rule" -msgstr "" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -msgid "Accessing" -msgstr "" - -msgid "Remove HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -msgid "Via Service" -msgstr "" - -msgid "Who" -msgstr "" - -msgid "Add HBAC service" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -msgid "Remove HBAC services" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -#, fuzzy -msgid "Add HBAC service group" -msgstr "Tambah grup host" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove HBAC service groups" -msgstr "Grup layanan/layanan gagal" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -msgid "Access Denied" -msgstr "" - -msgid "Access Granted" -msgstr "" - -#, fuzzy -msgid "Include Disabled" -msgstr "Akun dinonaktifkan" - -msgid "Include Enabled" -msgstr "" - -msgid "HBAC Test" -msgstr "" - -msgid "Matched" -msgstr "" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" - -msgid "Rules" -msgstr "" - -msgid "Run Test" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Specify external ${entity}" -msgstr "Sunting ${entity}" - -msgid "Unmatched" -msgstr "" - -#, fuzzy -msgid "Add host" -msgstr "Tambah grup host" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -#, fuzzy -msgid "Host Certificate" -msgstr "harus merupakan sebuah sertifikat" - -msgid "Host Name" -msgstr "" - -msgid "Delete Key, Unprovision" -msgstr "" - -msgid "Host Settings" -msgstr "" - -msgid "Enrolled" -msgstr "" - -#, fuzzy -msgid "Enrollment" -msgstr "Pendaftaran gagal. %s\n" - -msgid "Fully Qualified Host Name" -msgstr "" - -#, fuzzy -msgid "Generate OTP" -msgstr "OTP Reset" - -#, fuzzy -msgid "Generated OTP" -msgstr "OTP Reset" - -msgid "Kerberos Key" -msgstr "" - -msgid "Kerberos Key Not Present" -msgstr "" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -#, fuzzy -msgid "One-Time Password" -msgstr "Konfirmasi (kata sandi)" - -msgid "One-Time Password Not Present" -msgstr "" - -msgid "One-Time Password Present" -msgstr "" - -msgid "Reset OTP" -msgstr "OTP Reset" - -msgid "Reset One-Time Password" -msgstr "" - -#, fuzzy -msgid "Set OTP" -msgstr "OTP Reset" - -#, fuzzy -msgid "OTP set" -msgstr "Token OTP" - -msgid "Set One-Time Password" -msgstr "" - -msgid "Remove hosts" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -msgid "Unprovision" -msgstr "" - -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -msgid "Add host group" -msgstr "Tambah grup host" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -msgid "Host Group Settings" -msgstr "" - -#, fuzzy -msgid "Remove host groups" -msgstr "Tambah grup host" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -msgid "Identity provider details" -msgstr "" - -#, fuzzy -msgid "Verify secret" -msgstr "kata sandi" - -msgid "User to override" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -msgid "Profile" -msgstr "" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -msgid "Enter trusted group name." -msgstr "" - -msgid "Add ID view" -msgstr "" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -#, fuzzy -msgid "Apply to host groups" -msgstr "Tambah grup host" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -msgid "Remove ID views" -msgstr "" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -msgid "Un-apply from host groups" -msgstr "" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -msgid "Un-apply" -msgstr "" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -#, fuzzy -msgid "Kerberos Ticket Policy" -msgstr "Nama Prisipal Layanan Kerberos" - -#, fuzzy -msgid "Add netgroup" -msgstr "Tambah grup host" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -msgid "Netgroup Settings" -msgstr "" - -msgid "Remove netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add OTP token" -msgstr "Token OTP" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -msgid "Configure your token" -msgstr "" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -#, fuzzy -msgid "OTP Token Settings" -msgstr "Token OTP" - -msgid "Disable token" -msgstr "" - -msgid "Enable token" -msgstr "" - -#, fuzzy -msgid "Remove OTP tokens" -msgstr "Token OTP" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "" - -#, fuzzy -msgid "Show configuration uri" -msgstr "tidak dapat membuka berkas konfigurasi %s\n" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -msgid "Add Custom Attribute" -msgstr "" - -msgid "Permission settings" -msgstr "" - -msgid "Attribute breakdown" -msgstr "" - -msgid "Privilege Settings" -msgstr "" - -msgid "Public key:" -msgstr "Kunci publik:" - -#, fuzzy -msgid "Set public key" -msgstr "Kunci publik SSH:" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -msgid "Add password policy" -msgstr "" - -#, fuzzy -msgid "Password Policy" -msgstr "kata sandi" - -msgid "Remove password policies" -msgstr "" - -msgid "Add ID range" -msgstr "" - -msgid "Range Settings" -msgstr "" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -msgid "Domain SID" -msgstr "SID Domain" - -msgid "Secondary RID base" -msgstr "" - -msgid "Remove ID ranges" -msgstr "" - -#, fuzzy -msgid "Active Directory domain with POSIX attributes" -msgstr "Domain Active Directory" - -msgid "Detect" -msgstr "" - -msgid "Local domain" -msgstr "" - -msgid "IPA trust" -msgstr "" - -#, fuzzy -msgid "Active Directory winsync" -msgstr "Domain Active Directory" - -msgid "Add RADIUS server" -msgstr "" - -msgid "RADIUS Proxy Server Settings" -msgstr "" - -msgid "Remove RADIUS servers" -msgstr "" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -msgid "Force Update" -msgstr "" - -msgid "Add SELinux user map" -msgstr "" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Server Roles" -msgstr "Nama Peladen" - -#, fuzzy -msgid "Server Role" -msgstr "Nama Peladen" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -#, fuzzy -msgid "Delete Server" -msgstr "Menghapus grup." - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -msgid "Add service" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -#, fuzzy -msgid "Service Certificate" -msgstr "harus merupakan sebuah sertifikat" - -#, fuzzy -msgid "Service Settings" -msgstr "Opsi Layanan" - -msgid "Provisioning" -msgstr "" - -msgid "Remove services" -msgstr "" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -msgid "Unprovisioning service" -msgstr "" - -#, fuzzy -msgid "Service unprovisioned" -msgstr "Opsi Layanan" - -#, fuzzy -msgid "Kerberos Key Present, Service Provisioned" -msgstr "Nama Prisipal Layanan Kerberos" - -#, fuzzy -msgid "SSH public keys" -msgstr "Kunci publik SSH:" - -msgid "SSH public key:" -msgstr "Kunci publik SSH:" - -msgid "Set SSH key" -msgstr "" - -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "${count} pengguna diaktifkan" - -msgid "Add stage user" -msgstr "" - -#, fuzzy -msgid "Stage users" -msgstr "pengguna" - -msgid "Preserved users" -msgstr "" - -msgid "Remove preserved users" -msgstr "" - -msgid "Remove stage users" -msgstr "" - -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "${count} pengguna digelar" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#, fuzzy, python-brace-format -msgid "${count} user(s) restored" -msgstr "${count} pengguna digelar" - -msgid "User categories" -msgstr "" - -msgid "Add subid" -msgstr "" - -msgid "Assigned subids" -msgstr "" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -msgid "Add sudo command" -msgstr "" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -msgid "Remove sudo commands" -msgstr "" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -#, fuzzy -msgid "Add sudo command group" -msgstr "Tambah grup host" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -msgid "Remove sudo command groups" -msgstr "" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -msgid "Add sudo rule" -msgstr "" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Allow" -msgstr "Izinkan kuiri" - -#, fuzzy -msgid "Any Command" -msgstr "Nama perintah" - -msgid "Any Group" -msgstr "" - -msgid "Run Commands" -msgstr "" - -msgid "Deny" -msgstr "" - -msgid "Access this host" -msgstr "" - -#, fuzzy -msgid "Option added" -msgstr "Operasi gagal: %s\n" - -#, fuzzy, python-brace-format -msgid "${count} option(s) removed" -msgstr "${count} pengguna diaktifkan" - -msgid "Remove sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -msgid "Specified Commands and Groups" -msgstr "" - -msgid "Specified Groups" -msgstr "" - -msgid "Remove sudo options" -msgstr "" - -msgid "Autogenerated" -msgstr "" - -msgid "Segment details" -msgstr "" - -#, fuzzy -msgid "Replication configuration" -msgstr "tidak dapat membuka berkas konfigurasi %s\n" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -#, fuzzy -msgid "Account" -msgstr "Akun dinonaktifkan" - -#, fuzzy -msgid "Add trust" -msgstr "Tambah grup host" - -msgid "Administrative account" -msgstr "" - -msgid "SID blocklists" -msgstr "" - -msgid "Trust Settings" -msgstr "" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -msgid "Pre-shared password" -msgstr "" - -msgid "Remove trusts" -msgstr "" - -msgid "Remove domains" -msgstr "" - -msgid "Alternative UPN suffixes" -msgstr "" - -msgid "User attributes for SMB services" -msgstr "" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - -#, fuzzy -msgid "Account Settings" -msgstr "Akun dinonaktifkan" - -#, fuzzy -msgid "Account Status" -msgstr "Akun dinonaktifkan" - -msgid "Active users" -msgstr "" - -#, fuzzy -msgid "Add user" -msgstr "pengguna" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -msgid "Auto assign subordinate ids" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "" - -msgid "Contact Settings" -msgstr "" - -#, fuzzy -msgid "Delete mode" -msgstr "Menghapus grup." - -msgid "Employee Information" -msgstr "" - -msgid "Error changing account status" -msgstr "" - -#, fuzzy -msgid "Password expiration" -msgstr "Kata sandi terlalu panjang!\n" - -msgid "Mailing Address" -msgstr "Alamat Surat" - -msgid "Misc. Information" -msgstr "" - -msgid "delete" -msgstr "" - -msgid "preserve" -msgstr "" - -msgid "No private group" -msgstr "" - -msgid "Remove users" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "Klik untuk ${action}" - -msgid "Unlock" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -msgid "Members" -msgstr "" - -msgid "My User Vaults" -msgstr "" - -msgid "Owners" -msgstr "" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Service Vaults" -msgstr "Opsi Layanan" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -msgid "Vault Type" -msgstr "" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -msgid "User Vaults" -msgstr "" - -msgid "Current password is required" -msgstr "" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -#, fuzzy -msgid "First OTP" -msgstr "OTP Reset" - -msgid "New password is required" -msgstr "" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Password change complete" -msgstr "" - -msgid "Your password has expired. Please enter a new password." -msgstr "" - -msgid "Passwords must match" -msgstr "Kata sandi harus cocok" - -msgid "Password reset was not successful." -msgstr "" - -msgid "Reset your password." -msgstr "" - -msgid "Second OTP" -msgstr "" - -#, fuzzy -msgid "Verify Password" -msgstr "kata sandi" - -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#, fuzzy, python-brace-format -msgid "${count} item(s) deleted" -msgstr "${count} pengguna digelar" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#, fuzzy, python-brace-format -msgid "${count} item(s) disabled" -msgstr "${count} pengguna digelar" - -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#, fuzzy, python-brace-format -msgid "${count} item(s) enabled" -msgstr "${count} pengguna digelar" - -msgid "Some entries were not deleted" -msgstr "" - -msgid "Quick Links" -msgstr "" - -msgid "Select All" -msgstr "" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -msgid "Unselect All" -msgstr "" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "" - -msgid "Audit" -msgstr "Audit" - -msgid "Authentication" -msgstr "" - -msgid "Automount" -msgstr "" - -msgid "DNS" -msgstr "" - -msgid "Host-Based Access Control" -msgstr "" - -#, fuzzy -msgid "Identity" -msgstr "Sunting ${entity}" - -msgid "Network Services" -msgstr "" - -msgid "Policy" -msgstr "" - -msgid "Role-Based Access Control" -msgstr "" - -msgid "Subordinate IDs" -msgstr "" - -msgid "Sudo" -msgstr "Sudo" - -msgid "Topology" -msgstr "" - -msgid "True" -msgstr "" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -msgid "First" -msgstr "" - -msgid "Last" -msgstr "" - -msgid "Next" -msgstr "" - -msgid "Page" -msgstr "" - -msgid "Prev" -msgstr "" - -msgid "Undo" -msgstr "Tak Jadi" - -msgid "Undo this change." -msgstr "" - -#, fuzzy -msgid "Undo All" -msgstr "Tak Jadi" - -#, fuzzy -msgid "Undo all changes in this field." -msgstr "Hapus semua prinsipal di realm ini" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -msgid "Must be a decimal number" -msgstr "Harus angka desimal" - -#, fuzzy -msgid "Format error" -msgstr "galat baca\n" - -msgid "Must be an integer" -msgstr "Harus bilangan bulat" - -msgid "Not a valid IP address" -msgstr "" - -msgid "Not a valid IPv4 address" -msgstr "" - -msgid "Not a valid IPv6 address" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Maximum value is ${value}" -msgstr "Nomor seri maksimum" - -#, fuzzy, python-brace-format -msgid "Minimum value is ${value}" -msgstr "Nomor seri minimum" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -#, fuzzy -msgid "Parse error" -msgstr "galat baca\n" - -msgid "Must be a positive number" -msgstr "Harus angka positif" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -msgid "Required field" -msgstr "" - -msgid "Unsupported value" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -msgid "IdP max life" -msgstr "" - -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "" - -msgid "IdP max renew" -msgstr "" - -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -#, fuzzy -msgid "Invalid LDAP URI." -msgstr "URI LDAP" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -#, fuzzy -msgid "password policy" -msgstr "kata sandi" - -#, fuzzy -msgid "password policies" -msgstr "kata sandi" - -msgid "Password Policies" -msgstr "" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "Grace login limit" -msgstr "" - -msgid "Number of LDAP authentications allowed after expiration" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "" - -#, fuzzy -msgid "cannot delete global password policy" -msgstr "prioritas tidak dapat ditetapkan pada kebijakan global" - -msgid "priority cannot be set on global policy" -msgstr "prioritas tidak dapat ditetapkan pada kebijakan global" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "Aturan HBAC %(rule)s tidak ditemukan" - -#, fuzzy, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "%(count)d pengguna cocok" - -#, fuzzy, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "CA \"%(value)s\" difungsikan" - -#, fuzzy, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "CA \"%(value)s\" dinonaktifkan" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "" - -#, fuzzy -msgid "Malformed principal" -msgstr "Tidak dapat mengurai prinsipal\n" - -msgid "{} is required by the IPA master" -msgstr "" - -msgid "service" -msgstr "" - -#, fuzzy -msgid "services" -msgstr "Opsi Layanan" - -#, fuzzy -msgid "Service principal alias" -msgstr "Nama Prisipal Layanan Kerberos" - -msgid "Base-64 encoded service certificate" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." -msgstr "" - -#, fuzzy, python-format -msgid "Added service \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -msgid "Add a new SMB service." -msgstr "" - -msgid "SMB service NetBIOS name" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified service \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "%(count)s server cocok" - -#, fuzzy, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "CA \"%(value)s\" dinonaktifkan" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Remove principal alias from a service" -msgstr "Hapus semua prinsipal di realm ini" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -#, fuzzy -msgid "stage users" -msgstr "pengguna" - -#, fuzzy, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d pengguna cocok" - -#, fuzzy, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, fuzzy -msgid "Entry RDN is not 'uid'" -msgstr "Entri %s tidak ditemukan" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, fuzzy, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "kunci bernama %(key)s sudah ada" - -#, fuzzy, python-format -msgid "Stage user %s activated" -msgstr "${count} pengguna diaktifkan" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dihapus" - -#, fuzzy, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "ACI \"%(value)s\" telah dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "%(count)d ACI cocok" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -#, fuzzy -msgid "not found" -msgstr "realm tidak ditemukan\n" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "Delete an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -msgid "Modify an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d pengguna cocok" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "%(count)s peran server cocok" - -#, fuzzy, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "Grup \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Grup \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "Grup \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "%(count)d grup cocok" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -msgid "Certificate Authority" -msgstr "" - -msgid "Certificate Authorities" -msgstr "" - -msgid "Name for referencing the CA" -msgstr "" - -msgid "Description of the purpose of the CA" -msgstr "" - -msgid "Authority ID" -msgstr "" - -msgid "Dogtag Authority ID" -msgstr "" - -msgid "Subject DN" -msgstr "" - -msgid "Subject Distinguished Name" -msgstr "Distinguished Name Subjek" - -msgid "Issuer DN" -msgstr "" - -#, fuzzy -msgid "Issuer Distinguished Name" -msgstr "Distinguished Name Subjek" - -#, fuzzy -msgid "Base-64 encoded certificate." -msgstr "harus merupakan sebuah sertifikat" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "RSN Version" -msgstr "" - -#, fuzzy -msgid "Random Serial Number Version" -msgstr "Nomor seri maksimum" - -msgid "Search for CAs." -msgstr "" - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "%(count)d CA cocok" - -#, fuzzy -msgid "Include certificate chain in output" -msgstr "harus berupa sebuah permintaan penandatanganan sertifikat" - -msgid "Display the properties of a CA." -msgstr "" - -msgid "Create a CA." -msgstr "" - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "CA \"%(value)s\" dibuat" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -#, fuzzy -msgid "Delete a CA (must be disabled first)." -msgstr "Harus dinon-fungsikan terlebih dahulu" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "CA \"%(value)s\" dihapus" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "Harus dinon-fungsikan terlebih dahulu" - -#, fuzzy -msgid "Modify CA configuration." -msgstr "Memodifikasi suatu hostgroup." - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "CA \"%(value)s\" diubah" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "CA \"%(value)s\" dinonaktifkan" - -#, fuzzy -msgid "IPA CA cannot be disabled" -msgstr "Akun dinonaktifkan" - -msgid "Enable a CA." -msgstr "" - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "CA \"%(value)s\" difungsikan" - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -#, fuzzy -msgid " * 0 - unspecified\n" -msgstr " * 6 - certificateHold\n" - -msgid " * 1 - keyCompromise\n" -msgstr " * 1 - keyCompromise\n" - -msgid " * 2 - cACompromise\n" -msgstr " * 2 - cACompromise\n" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -#, fuzzy -msgid " * 4 - superseded\n" -msgstr " * 2 - cACompromise\n" - -#, fuzzy -msgid " * 5 - cessationOfOperation\n" -msgstr " * 6 - certificateHold\n" - -msgid " * 6 - certificateHold\n" -msgstr " * 6 - certificateHold\n" - -#, fuzzy -msgid " * 8 - removeFromCRL\n" -msgstr " * 1 - keyCompromise\n" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr " * 9 - privilegeWithdrawn\n" - -msgid " * 10 - aACompromise\n" -msgstr " * 10 - aACompromise\n" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Subject email address" -msgstr "" - -#, fuzzy -msgid "Subject DNS name" -msgstr "harus berupa nama DNS" - -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -msgid "Subject URI" -msgstr "" - -msgid "Subject IP Address" -msgstr "" - -msgid "Subject OID" -msgstr "" - -msgid "Subject UPN" -msgstr "" - -#, fuzzy -msgid "Subject Kerberos principal name" -msgstr "Nama Prisipal Layanan Kerberos" - -#, fuzzy -msgid "Subject Other Name" -msgstr "Distinguished Name Subjek" - -#, fuzzy -msgid "Serial number (hex)" -msgstr "Nomor seri maksimum" - -msgid "Request status" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -#, fuzzy -msgid "Status of the certificate" -msgstr "harus merupakan sebuah sertifikat" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "%(count)d pengguna cocok" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -#, fuzzy -msgid "Sudo Rule" -msgstr "Sudo" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "pengguna" - -#, fuzzy -msgid "command" -msgstr "Nama perintah" - -#, fuzzy -msgid "commands" -msgstr "Nama perintah" - -msgid "runAs user" -msgstr "" - -#, fuzzy -msgid "runAs users" -msgstr "pengguna" - -msgid "group runAs" -msgstr "" - -#, fuzzy -msgid "runAs groups" -msgstr "Tambah grup host" - -#, fuzzy, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "%(count)d pengguna cocok" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Preserved user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, fuzzy, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, fuzzy, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dihapus" - -#, fuzzy, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "CA \"%(value)s\" dinonaktifkan" - -#, fuzzy, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "CA \"%(value)s\" difungsikan" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, fuzzy, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "Host \"%(value)s\" dihapus" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -#, fuzzy -msgid "Password grace count" -msgstr "Kata sandi terlalu panjang!\n" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, fuzzy, python-format -msgid "%(host)s failed" -msgstr "fork() gagal\n" - -#, fuzzy, python-format -msgid "Account disabled: %(disabled)s" -msgstr "Akun dinonaktifkan" - -#, fuzzy, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -#, fuzzy, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" ditambahkan" - -#, fuzzy -msgid "Remove principal alias from the user entry" -msgstr "Hapus semua prinsipal di realm ini" - -#, fuzzy, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "Pengguna \"%(value)s\" dimodifikasi" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -#, fuzzy -msgid "must be enabled only on a single master" -msgstr "mesti diapit kurung" - -#, fuzzy -msgid "Request must be a dict" -msgstr "harus merupakan sebuah sertifikat" - -msgid "Request is missing \"method\"" -msgstr "" - -msgid "Request is missing \"params\"" -msgstr "" - -#, fuzzy -msgid "params must be a list" -msgstr "setidaknya harus 1" - -msgid "params must contain [args, options]" -msgstr "" - -msgid "params[0] (aka args) must be a list" -msgstr "" - -msgid "params[1] (aka options) must be a dict" -msgstr "" - -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" - -msgid "CIFS server denied your credentials" -msgstr "" - -msgid "communication with CIFS server was unsuccessful" -msgstr "" - -msgid "AD domain controller" -msgstr "" - -msgid "unsupported functional level" -msgstr "" - -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" - -msgid "Cannot find specified domain or server name" -msgstr "" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" - -msgid "At least the domain or IP address should be specified" -msgstr "" - -#, python-format -msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" -msgstr "" - -msgid "no trusted domain is configured" -msgstr "" - -msgid "domain is not configured" -msgstr "" - -msgid "SID is not valid" -msgstr "" - -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "" - -msgid "SID does not match any trusted domain" -msgstr "" - -msgid "Trust setup" -msgstr "" - -msgid "Our domain is not configured" -msgstr "" - -msgid "No trusted domain is not configured" -msgstr "" - -msgid "trusted domain object" -msgstr "" - -msgid "domain is not trusted" -msgstr "" - -msgid "no trusted domain matched the specified flat name" -msgstr "" - -msgid "trusted domain object not found" -msgstr "" - -msgid "Object does not belong to a trusted domain" -msgstr "" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "" - -msgid "Ambiguous search, user domain was not specified" -msgstr "" - -msgid "Trusted domain did not return a unique object" -msgstr "" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "" - -msgid "trusted domain user not found" -msgstr "" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "" - -msgid "CIFS credentials object" -msgstr "" - -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "" - -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" - -#, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" - -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" - -msgid "Credentials" -msgstr "" - -msgid "Missing credentials for cross-forest communication" -msgstr "" - -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" - -#, python-format -msgid "must equal %r" -msgstr "" - -msgid "Hello world" -msgstr "" - -#, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "" - -msgid "must be at least 1" -msgstr "setidaknya harus 1" - -#, fuzzy -msgid "Out of memory\n" -msgstr "Kehabisan memori \n" - -msgid "Warning unrecognized encryption type.\n" -msgstr "" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -#, fuzzy -msgid "Out of memory!?\n" -msgstr "Kehabisan memori!\n" - -msgid "Enctype comparison failed!\n" -msgstr "" - -msgid "Password is too long!\n" -msgstr "Kata sandi terlalu panjang!\n" - -#, fuzzy -msgid "Failed to create random key!\n" -msgstr "Gagal membuat kontrol!\n" - -#, fuzzy -msgid "Failed to create key!\n" -msgstr "Gagal membuat kontrol!\n" - -msgid "Bad or unsupported salt type.\n" -msgstr "" - -#, fuzzy, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "Tak bisa menginisialisasi pustaka ldap!\n" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -#, fuzzy -msgid "Unable to initialize STARTTLS session\n" -msgstr "Tak bisa menginisialisasi pustaka ldap!\n" +msgid "{attr}: no such attribute" +msgstr "{attr}: tidak ada atribut seperti itu" diff --git a/po/ja.po b/po/ja.po index cb25d6914..49a5ddfff 100644 --- a/po/ja.po +++ b/po/ja.po @@ -18,13412 +18,162 @@ msgstr "" "Plural-Forms: nplurals=1; plural=0\n" "X-Generator: Zanata 4.6.2\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "out of memory\n" -msgstr "メモリー不足\n" - -#, c-format -msgid "read error\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, fuzzy, c-format -msgid "Out of memory \n" -msgstr "メモリー不足\n" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -msgid "SASL Bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Out of Memory!\n" -msgstr "メモリー不足!?\n" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "パスワードが違います。" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Output debug info" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -msgid "Server Name" -msgstr "" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -msgid "LDAP password" -msgstr "" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -msgid "Path to the IPA CA certificate" -msgstr "" - -#, fuzzy -msgid "IPA CA certificate" -msgstr "証明書" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -msgid "Enter LDAP password" -msgstr "" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" - -#, c-format -msgid "Discovered server %s\n" -msgstr "" - -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Using provided server %s\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -msgid "New Principal Password" -msgstr "" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Out of memory!\n" -msgstr "メモリー不足!?\n" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "" - -#, fuzzy, c-format -msgid "Out of memory!" -msgstr "メモリー不足!?\n" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "" - -#, c-format -msgid "No values for %s" -msgstr "" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Host is already joined.\n" -msgstr "" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" - -#, c-format -msgid "json_dumps() failed\n" -msgstr "" - -#, fuzzy, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "無効な JSON-RPC リクエスト: %(error)s" - -#, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "" - -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" - -#, c-format -msgid "fork() failed\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "" - -#, c-format -msgid "child exited with %d\n" -msgstr "" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "" - -msgid "Quiet mode. Only errors are displayed." -msgstr "" - -msgid "Unenroll this host from IPA server" -msgstr "" - -msgid "Hostname of this server" -msgstr "" - -#, fuzzy -msgid "hostname" -msgstr "ホスト" - -#, fuzzy -msgid "IPA Server to use" -msgstr "HBAC サービスグループ" - -msgid "Specifies where to store keytab information." -msgstr "" - -msgid "filename" -msgstr "" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" - -msgid "LDAP password (if not using Kerberos)" -msgstr "" - -#, fuzzy -msgid "password" -msgstr "パスワードポリシー" - -msgid "LDAP basedn" -msgstr "" - -msgid "basedn" -msgstr "" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "" - -msgid "Failed to add" -msgstr "" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" - -msgid "Unrevoked" -msgstr "" - -#, fuzzy -msgid "Error" -msgstr "IPA エラー" - -msgid "Input filename" -msgstr "" - -msgid "File to load the certificate from." -msgstr "" - -msgid "cannot specify both raw certificate and file" -msgstr "" - -msgid "Input file" -msgstr "" - -msgid "File to load the certificate from" -msgstr "" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "" - -msgid "Split DNS record to parts" -msgstr "" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" - -msgid "DNS resource record type" -msgstr "" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" - -msgid "No option to modify specific record provided." -msgstr "" - -msgid "Current DNS record contents:\n" -msgstr "" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -msgid "No option to delete specific record provided." -msgstr "" - -#, fuzzy -msgid "Delete all?" -msgstr "役割を削除します。" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "" - -msgid "Server will check DNS forwarder(s)." -msgstr "" - -msgid "This may take some time, please wait ..." -msgstr "" - -msgid "DNS forwarder" -msgstr "" - -msgid "file to store DNS records in nsupdate format" -msgstr "" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -#, fuzzy -msgid "Delete a user" -msgstr "ユーザーを削除します。" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - -msgid "maps not connected to /etc/auto.master:" -msgstr "" - -msgid "Import automount files for a specific location." -msgstr "" - -msgid "Master file" -msgstr "" - -msgid "Automount master file." -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" - -#, python-format -msgid "File %(file)s not found" -msgstr "" - -#, fuzzy, python-format -msgid "key %(key)s already exists" -msgstr "このエントリーはすでに存在します" - -#, fuzzy, python-format -msgid "map %(map)s already exists" -msgstr "このエントリーはすでに存在します" - -msgid "Imported maps:" -msgstr "" - -#, python-format -msgid "Added %(map)s" -msgstr "" - -msgid "Imported keys:" -msgstr "" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "" - -msgid "Ignored keys:" -msgstr "" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "" - -msgid "Duplicate maps skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(map)s" -msgstr "" - -msgid "Duplicate keys skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(key)s" -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -msgid "User ID" -msgstr "" - -#, fuzzy -msgid "Password" -msgstr "パスワードポリシー" - -msgid "First Code" -msgstr "" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -#, fuzzy -msgid "Add a new YubiKey OTP token." -msgstr "新しい役割を追加します。" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "" - -msgid "Invalid credentials" -msgstr "" - -#, fuzzy -msgid "Create a new vault." -msgstr "新しいグループを作成します。" - -msgid "Vault password" -msgstr "" - -msgid "File containing the vault password" -msgstr "" - -msgid "File containing the vault public key" -msgstr "" - -msgid "Password can be specified only for symmetric vault" -msgstr "" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "" - -msgid "Password specified multiple times" -msgstr "" - -msgid "Public key specified multiple times" -msgstr "" - -#, fuzzy -msgid "Missing vault public key" -msgstr "無効な SSH 公開鍵" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "" - -#, fuzzy -msgid "Modify a vault." -msgstr "役割を変更します。" - -msgid "Change password" -msgstr "" - -msgid "Old vault password" -msgstr "" - -msgid "File containing the old vault password" -msgstr "" - -msgid "New vault password" -msgstr "" - -msgid "File containing the new vault password" -msgstr "" - -msgid "Old vault private key" -msgstr "" - -msgid "File containing the old vault private key" -msgstr "" - -msgid "File containing the new vault public key" -msgstr "" - -msgid "New public key specified multiple times" -msgstr "" - -#, fuzzy -msgid "Missing new vault public key" -msgstr "無効な SSH 公開鍵" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "" - -msgid "Binary data to archive" -msgstr "" - -msgid "File containing data to archive" -msgstr "" - -msgid "Override existing password" -msgstr "" - -msgid "Input data specified multiple times" -msgstr "" - -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" - -msgid "Invalid vault type" -msgstr "" - -msgid "Retrieve a data from a vault." -msgstr "" - -msgid "File to store retrieved data" -msgstr "" - -msgid "Vault private key" -msgstr "" - -msgid "File containing the vault private key" -msgstr "" - -#, fuzzy -msgid "Data" -msgstr "テキストデータ" - -msgid "Private key specified multiple times" -msgstr "" - -msgid "Missing vault private key" -msgstr "" - -#, fuzzy, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "sudo ルール" - -#, fuzzy, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "sudo ルール" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "ACI name" -msgstr "ACI 名" - -#, fuzzy -msgid "Permission" -msgstr "権限" - -msgid "Permission ACI grants access to" -msgstr "" - -msgid "User group" -msgstr "ユーザーグループ" - -msgid "User group ACI grants access to" -msgstr "" - -msgid "Permissions" -msgstr "権限" - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Attributes to which the permission applies" -msgstr "" - -msgid "Attributes" -msgstr "" - -msgid "Type" -msgstr "" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" - -#, fuzzy -msgid "Member of" -msgstr "グループのメンバー" - -msgid "Member of a group" -msgstr "グループのメンバー" - -msgid "Filter" -msgstr "フィルター" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "" - -msgid "Subtree" -msgstr "" - -msgid "Subtree to apply ACI to" -msgstr "" - -#, fuzzy -msgid "Target group" -msgstr "グループを削除します。" - -msgid "Group to apply ACI to" -msgstr "" - -msgid "Target your own entry (self)" -msgstr "" - -msgid "Apply ACI to your own entry (self)" -msgstr "" - -#, fuzzy -msgid "Create new ACI." -msgstr "新しい HBAC ルールを作成します。" - -msgid "ACI prefix" -msgstr "" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" - -msgid "Test the ACI syntax but don't write anything" -msgstr "" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" - -msgid "User-friendly description of action performed" -msgstr "" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" - -#, fuzzy -msgid "Delete ACI." -msgstr "グループを削除します。" - -msgid "True means the operation was successful" -msgstr "" - -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" - -msgid "A string searched in all relevant object attributes" -msgstr "" - -msgid "Primary key only" -msgstr "" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" - -msgid "Number of entries returned" -msgstr "" - -msgid "True if not all results were returned" -msgstr "" - -#, fuzzy -msgid "Modify ACI." -msgstr "HBAC ルールを変更します。" - -msgid "Rename an ACI." -msgstr "" - -#, fuzzy -msgid "New ACI name" -msgstr "ACI 名" - -msgid "Display a single ACI given an ACI name." -msgstr "" - -msgid "Location of the ACI" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -#, fuzzy -msgid "Description" -msgstr "ユーザーオプション" - -msgid "A description of this auto member rule" -msgstr "" - -#, fuzzy -msgid "Default (fallback) Group" -msgstr "標準のホストグループ" - -msgid "Default group for entries to land" -msgstr "" - -#, fuzzy -msgid "Add an automember rule." -msgstr "新しい役割を追加します。" - -msgid "Automember Rule" -msgstr "" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -#, fuzzy -msgid "Display information about the default (fallback) automember groups." -msgstr "HBAC サービスグループに関する情報を表示します。" - -#, fuzzy -msgid "Delete an automember rule." -msgstr "HBAC ルールを削除します。" - -msgid "List of deletions that failed" -msgstr "" - -#, fuzzy -msgid "Search for automember rules." -msgstr "HBAC ルールを検索します。" - -#, fuzzy -msgid "Modify an automember rule." -msgstr "HBAC ルールを変更します。" - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -#, fuzzy -msgid "Users" -msgstr "ユーザー" - -msgid "Rebuild membership for specified users" -msgstr "" - -#, fuzzy -msgid "Hosts" -msgstr "ホスト" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -#, fuzzy -msgid "Display information about an automember rule." -msgstr "役割に関する情報を表示します。" - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" - -msgid "Key" -msgstr "" - -msgid "Automount key name." -msgstr "" - -msgid "Mount information" -msgstr "" - -#, fuzzy -msgid "description" -msgstr "ユーザーオプション" - -msgid "Location" -msgstr "" - -msgid "Automount location name." -msgstr "" - -msgid "Map" -msgstr "" - -msgid "Automount map name." -msgstr "" - -#, fuzzy -msgid "Create a new automount key." -msgstr "新しいグループを作成します。" - -#, fuzzy -msgid "Delete an automount key." -msgstr "ホストを削除します。" - -msgid "Continuous mode: Don't stop on errors." -msgstr "" - -#, fuzzy -msgid "Search for an automount key." -msgstr "ホストを検索します。" - -msgid "Time Limit" -msgstr "" - -msgid "Time limit of search in seconds" -msgstr "" - -msgid "Size Limit" -msgstr "" - -msgid "Maximum number of entries returned" -msgstr "" - -#, fuzzy -msgid "Modify an automount key." -msgstr "役割を変更します。" - -msgid "New mount information" -msgstr "" - -msgid "Rename" -msgstr "" - -msgid "Rename the automount key object" -msgstr "" - -#, fuzzy -msgid "Display an automount key." -msgstr "役割に関する情報を表示します。" - -#, fuzzy -msgid "Create a new automount location." -msgstr "新しいグループを作成します。" - -msgid "Delete an automount location." -msgstr "" - -msgid "Search for an automount location." -msgstr "" - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" - -#, fuzzy -msgid "Display an automount location." -msgstr "役割に関する情報を表示します。" - -msgid "Generate automount files for a specific location." -msgstr "" - -#, fuzzy -msgid "Create a new automount map." -msgstr "新しいグループを作成します。" - -#, fuzzy -msgid "Create a new indirect mount point." -msgstr "新しいグループを作成します。" - -msgid "Mount point" -msgstr "" - -msgid "Parent map" -msgstr "" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" - -#, fuzzy -msgid "Delete an automount map." -msgstr "ホストを削除します。" - -#, fuzzy -msgid "Search for an automount map." -msgstr "グループを検索します。" - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" - -#, fuzzy -msgid "Modify an automount map." -msgstr "グループを変更します。" - -#, fuzzy -msgid "Display an automount map." -msgstr "役割に関する情報を表示します。" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" - -msgid "Nested Methods to execute" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -#, fuzzy -msgid "Search for existing certificates." -msgstr "HBAC サービスを検索します。" - -msgid "Match cn attribute in subject" -msgstr "" - -#, fuzzy -msgid "Reason" -msgstr "%(reason)s" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -msgid "minimum serial number" -msgstr "" - -msgid "maximum serial number" -msgstr "" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Principal" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Dictionary mapping variable name to value" -msgstr "" - -#, fuzzy -msgid "Revoke a certificate." -msgstr "証明書" - -#, fuzzy -msgid "Retrieve an existing certificate." -msgstr "既存の HBAC サービスを削除します。" - -msgid "Output filename" -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "Maximum username length" -msgstr "" - -msgid "Home directory base" -msgstr "" - -msgid "Default location of home directories" -msgstr "" - -#, fuzzy -msgid "Default shell" -msgstr "標準のユーザーグループ" - -msgid "Default shell for new users" -msgstr "" - -#, fuzzy -msgid "Default users group" -msgstr "標準のユーザーグループ" - -msgid "Default group for new users" -msgstr "" - -msgid "Default e-mail domain" -msgstr "" - -msgid "Search time limit" -msgstr "" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" - -msgid "Search size limit" -msgstr "" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "" - -msgid "User search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" - -msgid "Group search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" - -msgid "Enable migration mode" -msgstr "" - -#, fuzzy -msgid "Certificate Subject base" -msgstr "証明書" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "" - -msgid "Default group objectclasses" -msgstr "" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "" - -#, fuzzy -msgid "Default user objectclasses" -msgstr "標準のユーザーグループ" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" - -msgid "Password Expiration Notification (days)" -msgstr "" - -msgid "Number of days's notice of impending password expiration" -msgstr "" - -#, fuzzy -msgid "Password plugin features" -msgstr "パスワードポリシー" - -msgid "Extra hashes to generate in password plug-in" -msgstr "" - -msgid "SELinux user map order" -msgstr "" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" - -#, fuzzy -msgid "Default SELinux user" -msgstr "標準のユーザーグループ" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" - -msgid "Default PAC types" -msgstr "" - -msgid "Default types of PAC supported for services" -msgstr "" - -msgid "Default user authentication types" -msgstr "" - -msgid "Default types of supported user authentication" -msgstr "" - -msgid "Modify configuration options." -msgstr "" - -msgid "Show the current configuration." -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "Delegation name" -msgstr "" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "" - -msgid "Attributes to which the delegation applies" -msgstr "" - -#, fuzzy -msgid "Member user group" -msgstr "グループのメンバー" - -msgid "User group to apply delegation to" -msgstr "" - -#, fuzzy -msgid "Add a new delegation." -msgstr "新しい役割を追加します。" - -#, fuzzy -msgid "Delete a delegation." -msgstr "役割を削除します。" - -#, fuzzy -msgid "Search for delegations." -msgstr "役割を検索します。" - -#, fuzzy -msgid "Modify a delegation." -msgstr "役割を変更します。" - -#, fuzzy -msgid "Display information about a delegation." -msgstr "役割に関する情報を表示します。" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "Global forwarders" -msgstr "" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -#, fuzzy -msgid "Forward policy" -msgstr "パスワードポリシー" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" - -msgid "Allow PTR sync" -msgstr "" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" - -msgid "Zone refresh interval" -msgstr "" - -msgid "Zone name" -msgstr "" - -msgid "Zone name (FQDN)" -msgstr "" - -msgid "Reverse zone IP network" -msgstr "" - -msgid "IP network to create reverse zone name from" -msgstr "" - -msgid "Active zone" -msgstr "" - -msgid "Is zone active?" -msgstr "" - -msgid "Zone forwarders" -msgstr "" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -#, fuzzy -msgid "Record name" -msgstr "%s レコード" - -msgid "Time to live" -msgstr "" - -#, fuzzy -msgid "Records" -msgstr "%s レコード" - -#, fuzzy -msgid "Record type" -msgstr "%s レコード" - -#, fuzzy -msgid "Record data" -msgstr "%s レコード" - -#, fuzzy -msgid "A record" -msgstr "%s レコード" - -#, fuzzy -msgid "Raw A records" -msgstr "%s レコード" - -#, fuzzy -msgid "A IP Address" -msgstr "IP アドレス" - -msgid "IP Address" -msgstr "IP アドレス" - -msgid "A Create reverse" -msgstr "" - -msgid "Create reverse record for this IP Address" -msgstr "" - -#, fuzzy -msgid "AAAA record" -msgstr "%s レコード" - -msgid "Raw AAAA records" -msgstr "" - -#, fuzzy -msgid "AAAA IP Address" -msgstr "IP アドレス" - -msgid "AAAA Create reverse" -msgstr "" - -#, fuzzy -msgid "A6 record" -msgstr "%s レコード" - -#, fuzzy -msgid "Raw A6 records" -msgstr "%s レコード" - -#, fuzzy -msgid "A6 Record data" -msgstr "%s レコード" - -#, fuzzy -msgid "AFSDB record" -msgstr "%s レコード" - -msgid "Raw AFSDB records" -msgstr "" - -msgid "AFSDB Subtype" -msgstr "" - -msgid "Subtype" -msgstr "" - -msgid "AFSDB Hostname" -msgstr "" - -#, fuzzy -msgid "Hostname" -msgstr "ホスト" - -#, fuzzy -msgid "APL record" -msgstr "%s レコード" - -msgid "Raw APL records" -msgstr "" - -#, fuzzy -msgid "CERT record" -msgstr "%s レコード" - -msgid "Raw CERT records" -msgstr "" - -#, fuzzy -msgid "CERT Certificate Type" -msgstr "証明書" - -#, fuzzy -msgid "Certificate Type" -msgstr "証明書" - -msgid "CERT Key Tag" -msgstr "" - -msgid "Key Tag" -msgstr "" - -msgid "CERT Algorithm" -msgstr "" - -msgid "Algorithm" -msgstr "" - -#, fuzzy -msgid "CERT Certificate/CRL" -msgstr "証明書" - -#, fuzzy -msgid "Certificate/CRL" -msgstr "証明書" - -#, fuzzy -msgid "CNAME record" -msgstr "%s レコード" - -msgid "Raw CNAME records" -msgstr "" - -msgid "CNAME Hostname" -msgstr "" - -msgid "A hostname which this alias hostname points to" -msgstr "" - -#, fuzzy -msgid "DHCID record" -msgstr "%s レコード" - -msgid "Raw DHCID records" -msgstr "" - -#, fuzzy -msgid "DLV record" -msgstr "%s レコード" - -msgid "Raw DLV records" -msgstr "" - -msgid "DLV Key Tag" -msgstr "" - -msgid "DLV Algorithm" -msgstr "" - -msgid "DLV Digest Type" -msgstr "" - -msgid "Digest Type" -msgstr "" - -msgid "DLV Digest" -msgstr "" - -msgid "Digest" -msgstr "" - -#, fuzzy -msgid "DNAME record" -msgstr "%s レコード" - -msgid "Raw DNAME records" -msgstr "" - -msgid "DNAME Target" -msgstr "" - -msgid "Target" -msgstr "" - -#, fuzzy -msgid "DNSKEY record" -msgstr "%s レコード" - -msgid "Raw DNSKEY records" -msgstr "" - -#, fuzzy -msgid "DS record" -msgstr "%s レコード" - -#, fuzzy -msgid "Raw DS records" -msgstr "%s レコード" - -msgid "DS Key Tag" -msgstr "" - -msgid "DS Algorithm" -msgstr "" - -msgid "DS Digest Type" -msgstr "" - -msgid "DS Digest" -msgstr "" - -#, fuzzy -msgid "HIP record" -msgstr "%s レコード" - -msgid "Raw HIP records" -msgstr "" - -msgid "IPSECKEY record" -msgstr "" - -msgid "Raw IPSECKEY records" -msgstr "" - -#, fuzzy -msgid "KEY record" -msgstr "%s レコード" - -msgid "Raw KEY records" -msgstr "" - -#, fuzzy -msgid "KX record" -msgstr "%s レコード" - -#, fuzzy -msgid "Raw KX records" -msgstr "%s レコード" - -msgid "KX Preference" -msgstr "" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" - -msgid "KX Exchanger" -msgstr "" - -msgid "A host willing to act as a key exchanger" -msgstr "" - -#, fuzzy -msgid "LOC record" -msgstr "%s レコード" - -msgid "Raw LOC records" -msgstr "" - -msgid "LOC Degrees Latitude" -msgstr "" - -msgid "Degrees Latitude" -msgstr "" - -msgid "LOC Minutes Latitude" -msgstr "" - -msgid "Minutes Latitude" -msgstr "" - -msgid "LOC Seconds Latitude" -msgstr "" - -msgid "Seconds Latitude" -msgstr "" - -msgid "LOC Direction Latitude" -msgstr "" - -msgid "Direction Latitude" -msgstr "" - -msgid "LOC Degrees Longitude" -msgstr "" - -msgid "Degrees Longitude" -msgstr "" - -msgid "LOC Minutes Longitude" -msgstr "" - -msgid "Minutes Longitude" -msgstr "" - -msgid "LOC Seconds Longitude" -msgstr "" - -msgid "Seconds Longitude" -msgstr "" - -msgid "LOC Direction Longitude" -msgstr "" - -msgid "Direction Longitude" -msgstr "" - -msgid "LOC Altitude" -msgstr "" - -msgid "Altitude" -msgstr "" - -msgid "LOC Size" -msgstr "" - -msgid "Size" -msgstr "" - -msgid "LOC Horizontal Precision" -msgstr "" - -msgid "Horizontal Precision" -msgstr "" - -msgid "LOC Vertical Precision" -msgstr "" - -msgid "Vertical Precision" -msgstr "" - -#, fuzzy -msgid "MX record" -msgstr "%s レコード" - -#, fuzzy -msgid "Raw MX records" -msgstr "%s レコード" - -msgid "MX Preference" -msgstr "" - -msgid "MX Exchanger" -msgstr "" - -msgid "A host willing to act as a mail exchanger" -msgstr "" - -#, fuzzy -msgid "NAPTR record" -msgstr "%s レコード" - -msgid "Raw NAPTR records" -msgstr "" - -msgid "NAPTR Order" -msgstr "" - -msgid "Order" -msgstr "" - -msgid "NAPTR Preference" -msgstr "" - -msgid "Preference" -msgstr "" - -msgid "NAPTR Flags" -msgstr "" - -msgid "Flags" -msgstr "" - -#, fuzzy -msgid "NAPTR Service" -msgstr "HBAC サービス" - -#, fuzzy -msgid "Service" -msgstr "HBAC サービス" - -msgid "NAPTR Regular Expression" -msgstr "" - -msgid "Regular Expression" -msgstr "" - -msgid "NAPTR Replacement" -msgstr "" - -msgid "Replacement" -msgstr "" - -#, fuzzy -msgid "NS record" -msgstr "%s レコード" - -#, fuzzy -msgid "Raw NS records" -msgstr "%s レコード" - -msgid "NS Hostname" -msgstr "" - -#, fuzzy -msgid "NSEC record" -msgstr "%s レコード" - -msgid "Raw NSEC records" -msgstr "" - -#, fuzzy -msgid "NSEC3 record" -msgstr "%s レコード" - -msgid "Raw NSEC3 records" -msgstr "" - -#, fuzzy -msgid "PTR record" -msgstr "%s レコード" - -msgid "Raw PTR records" -msgstr "" - -msgid "PTR Hostname" -msgstr "" - -msgid "The hostname this reverse record points to" -msgstr "" - -#, fuzzy -msgid "RRSIG record" -msgstr "%s レコード" - -msgid "Raw RRSIG records" -msgstr "" - -#, fuzzy -msgid "RP record" -msgstr "%s レコード" - -#, fuzzy -msgid "Raw RP records" -msgstr "%s レコード" - -#, fuzzy -msgid "SIG record" -msgstr "%s レコード" - -msgid "Raw SIG records" -msgstr "" - -#, fuzzy -msgid "SPF record" -msgstr "%s レコード" - -msgid "Raw SPF records" -msgstr "" - -#, fuzzy -msgid "SRV record" -msgstr "%s レコード" - -msgid "Raw SRV records" -msgstr "" - -msgid "SRV Priority" -msgstr "" - -msgid "Priority" -msgstr "" - -msgid "SRV Weight" -msgstr "" - -msgid "Weight" -msgstr "" - -#, fuzzy -msgid "SRV Port" -msgstr "ポート" - -msgid "Port" -msgstr "ポート" - -msgid "SRV Target" -msgstr "" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" - -#, fuzzy -msgid "SSHFP record" -msgstr "%s レコード" - -msgid "Raw SSHFP records" -msgstr "" - -msgid "SSHFP Algorithm" -msgstr "" - -#, fuzzy -msgid "SSHFP Fingerprint Type" -msgstr "フィンガープリント" - -#, fuzzy -msgid "Fingerprint Type" -msgstr "フィンガープリント" - -#, fuzzy -msgid "SSHFP Fingerprint" -msgstr "フィンガープリント" - -msgid "Fingerprint" -msgstr "フィンガープリント" - -#, fuzzy -msgid "TA record" -msgstr "%s レコード" - -#, fuzzy -msgid "Raw TA records" -msgstr "%s レコード" - -#, fuzzy -msgid "TLSA record" -msgstr "%s レコード" - -msgid "Raw TLSA records" -msgstr "" - -#, fuzzy -msgid "TLSA Certificate Usage" -msgstr "証明書" - -#, fuzzy -msgid "Certificate Usage" -msgstr "証明書" - -msgid "TLSA Selector" -msgstr "" - -msgid "Selector" -msgstr "" - -msgid "TLSA Matching Type" -msgstr "" - -msgid "Matching Type" -msgstr "" - -msgid "TLSA Certificate Association Data" -msgstr "" - -#, fuzzy -msgid "Certificate Association Data" -msgstr "証明書" - -#, fuzzy -msgid "TKEY record" -msgstr "%s レコード" - -msgid "Raw TKEY records" -msgstr "" - -#, fuzzy -msgid "TSIG record" -msgstr "%s レコード" - -msgid "Raw TSIG records" -msgstr "" - -#, fuzzy -msgid "TXT record" -msgstr "%s レコード" - -msgid "Raw TXT records" -msgstr "" - -#, fuzzy -msgid "TXT Text Data" -msgstr "テキストデータ" - -msgid "Text Data" -msgstr "テキストデータ" - -msgid "Authoritative nameserver" -msgstr "" - -msgid "Authoritative nameserver domain name" -msgstr "" - -msgid "Administrator e-mail address" -msgstr "" - -msgid "SOA serial" -msgstr "" - -msgid "SOA record serial number" -msgstr "" - -#, fuzzy -msgid "SOA refresh" -msgstr "更新" - -msgid "SOA record refresh time" -msgstr "" - -msgid "SOA retry" -msgstr "" - -msgid "SOA record retry time" -msgstr "" - -msgid "SOA expire" -msgstr "" - -msgid "SOA record expire time" -msgstr "" - -msgid "SOA minimum" -msgstr "" - -msgid "How long should negative responses be cached" -msgstr "" - -msgid "Time to live for records at zone apex" -msgstr "" - -msgid "BIND update policy" -msgstr "" - -msgid "Dynamic update" -msgstr "" - -msgid "Allow dynamic updates." -msgstr "" - -msgid "Allow query" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" - -msgid "Allow transfer" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" - -msgid "Allow in-line DNSSEC signing" -msgstr "" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "" - -msgid "NSEC3PARAM record" -msgstr "" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" - -msgid "Resolve a host name in DNS." -msgstr "" - -msgid "Modify global DNS configuration." -msgstr "" - -msgid "Show the current global DNS configuration." -msgstr "" - -msgid "Create new DNS forward zone." -msgstr "" - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" - -#, fuzzy -msgid "Permission value" -msgstr "権限" - -#, fuzzy -msgid "Delete DNS forward zone." -msgstr "役割を削除します。" - -msgid "Disable DNS Forward Zone." -msgstr "" - -msgid "Enable DNS Forward Zone." -msgstr "" - -#, fuzzy -msgid "Search for DNS forward zones." -msgstr "役割を検索します。" - -#, fuzzy -msgid "Modify DNS forward zone." -msgstr "役割を変更します。" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" - -#, fuzzy -msgid "Display information about a DNS forward zone." -msgstr "役割に関する情報を表示します。" - -msgid "Add new DNS resource record." -msgstr "" - -msgid "Force" -msgstr "" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "" - -msgid "Structured" -msgstr "" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" - -msgid "Delete DNS resource record." -msgstr "" - -msgid "Delete all associated records" -msgstr "" - -#, fuzzy -msgid "Delete DNS record entry." -msgstr "役割を削除します。" - -#, fuzzy -msgid "Search for DNS resources." -msgstr "役割を検索します。" - -#, fuzzy -msgid "Modify a DNS resource record." -msgstr "HBAC サービスグループを変更します。" - -msgid "Rename the DNS resource record object" -msgstr "" - -msgid "Display DNS resource." -msgstr "" - -msgid "Create new DNS zone (SOA record)." -msgstr "" - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" - -msgid "Add a permission for per-zone access delegation." -msgstr "" - -msgid "Delete DNS zone (SOA record)." -msgstr "" - -#, fuzzy -msgid "Disable DNS Zone." -msgstr "ユーザーアカウントを無効化します。" - -msgid "Enable DNS Zone." -msgstr "" - -msgid "Search for DNS zones (SOA records)." -msgstr "" - -msgid "Forward zones only" -msgstr "" - -#, fuzzy -msgid "Search for forward zones only" -msgstr "役割を検索します。" - -msgid "Modify DNS zone (SOA record)." -msgstr "" - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" - -msgid "Remove a permission for per-zone access delegation." -msgstr "" - -#, fuzzy -msgid "Display information about a DNS zone (SOA record)." -msgstr "役割に関する情報を表示します。" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -msgid "Group name" -msgstr "グループオプション" - -#, fuzzy -msgid "Group description" -msgstr "グループオプション" - -msgid "GID" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Member users" -msgstr "" - -#, fuzzy -msgid "Member groups" -msgstr "グループのメンバー" - -#, fuzzy -msgid "Member of groups" -msgstr "グループのメンバー" - -#, fuzzy -msgid "Roles" -msgstr "役割" - -#, fuzzy -msgid "Member of netgroups" -msgstr "グループのメンバー" - -#, fuzzy -msgid "Member of Sudo rule" -msgstr "グループのメンバー" - -#, fuzzy -msgid "Member of HBAC rule" -msgstr "グループのメンバー" - -msgid "Indirect Member users" -msgstr "" - -#, fuzzy -msgid "Indirect Member groups" -msgstr "グループのメンバー" - -#, fuzzy -msgid "Indirect Member of group" -msgstr "グループのメンバー" - -#, fuzzy -msgid "Indirect Member of netgroup" -msgstr "グループのメンバー" - -#, fuzzy -msgid "Indirect Member of role" -msgstr "グループのメンバー" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - -msgid "Create a new group." -msgstr "新しいグループを作成します。" - -#, fuzzy -msgid "Create as a non-POSIX group" -msgstr "新しいグループを作成します。" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Suppress processing of membership attributes." -msgstr "" - -#, fuzzy -msgid "Add members to a group." -msgstr "HBAC サービスグループにメンバーを追加します。" - -msgid "External member" -msgstr "" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -#, fuzzy -msgid "member group" -msgstr "グループのメンバー" - -#, fuzzy -msgid "groups to add" -msgstr "グループ" - -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - -msgid "Delete group." -msgstr "グループを削除します。" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "グループを検索します。" - -#, fuzzy -msgid "search for private groups" -msgstr "グループを検索します。" - -#, fuzzy -msgid "search for POSIX groups" -msgstr "グループを検索します。" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -#, fuzzy -msgid "search for non-POSIX groups" -msgstr "グループを検索します。" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "user" -msgstr "ユーザー" - -#, fuzzy -msgid "Search for groups with these member users." -msgstr "グループを検索します。" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "group" -msgstr "グループ" - -#, fuzzy -msgid "Search for groups with these member groups." -msgstr "HBAC サービスグループを検索します。" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -#, fuzzy -msgid "netgroup" -msgstr "グループ" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "role" -msgstr "役割" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -#, fuzzy -msgid "HBAC rule" -msgstr "HBAC サービス" - -#, fuzzy -msgid "Search for groups with these member of HBAC rules." -msgstr "HBAC ルールを検索します。" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "sudo rule" -msgstr "sudo ルール" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "グループを変更します。" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -#, fuzzy -msgid "Remove members from a group." -msgstr "HBAC サービスグループからメンバーを削除します。" - -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - -#, fuzzy -msgid "Display information about a named group." -msgstr "役割に関する情報を表示します。" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Rule name" -msgstr "" - -msgid "Rule type" -msgstr "" - -msgid "Rule type (allow)" -msgstr "" - -#, fuzzy -msgid "User category" -msgstr "ユーザーグループ" - -msgid "User category the rule applies to" -msgstr "" - -msgid "Host category" -msgstr "" - -msgid "Host category the rule applies to" -msgstr "" - -msgid "Service category" -msgstr "" - -msgid "Service category the rule applies to" -msgstr "" - -msgid "Enabled" -msgstr "" - -#, fuzzy -msgid "User Groups" -msgstr "ユーザーグループ" - -#, fuzzy -msgid "Host Groups" -msgstr "ホストグループ" - -#, fuzzy -msgid "Services" -msgstr "HBAC サービス" - -#, fuzzy -msgid "Service Groups" -msgstr "HBAC サービスグループ" - -msgid "External host" -msgstr "" - -msgid "Create a new HBAC rule." -msgstr "新しい HBAC ルールを作成します。" - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "member host" -msgstr "" - -msgid "hosts to add" -msgstr "" - -#, fuzzy -msgid "member host group" -msgstr "グループのメンバー" - -#, fuzzy -msgid "host groups to add" -msgstr "ホストグループ" - -#, fuzzy -msgid "Add services to an HBAC rule." -msgstr "HBAC ルールを削除します。" - -#, fuzzy -msgid "member HBAC service" -msgstr "HBAC サービス" - -#, fuzzy -msgid "HBAC services to add" -msgstr "HBAC サービス" - -#, fuzzy -msgid "member HBAC service group" -msgstr "HBAC サービスグループ" - -#, fuzzy -msgid "HBAC service groups to add" -msgstr "HBAC サービスグループ" - -#, fuzzy -msgid "Add users and groups to an HBAC rule." -msgstr "HBAC ルールのプロパティーを表示します。" - -msgid "Delete an HBAC rule." -msgstr "HBAC ルールを削除します。" - -msgid "Disable an HBAC rule." -msgstr "HBAC ルールを無効化します。" - -msgid "Enable an HBAC rule." -msgstr "HBAC ルールを有効化します。" - -msgid "Search for HBAC rules." -msgstr "HBAC ルールを検索します。" - -msgid "Modify an HBAC rule." -msgstr "HBAC ルールを変更します。" - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "hosts to remove" -msgstr "" - -#, fuzzy -msgid "host groups to remove" -msgstr "ホストグループ" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "" - -#, fuzzy -msgid "HBAC services to remove" -msgstr "HBAC サービスグループ" - -#, fuzzy -msgid "HBAC service groups to remove" -msgstr "HBAC サービスグループ" - -#, fuzzy -msgid "Remove users and groups from an HBAC rule." -msgstr "HBAC サービスグループからメンバーを削除します。" - -msgid "Display the properties of an HBAC rule." -msgstr "HBAC ルールのプロパティーを表示します。" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" - -msgid "Service name" -msgstr "" - -#, fuzzy -msgid "HBAC service" -msgstr "HBAC サービス" - -#, fuzzy -msgid "HBAC service description" -msgstr "HBAC サービスグループ" - -#, fuzzy -msgid "Member of HBAC service groups" -msgstr "HBAC サービスグループ" - -msgid "Add a new HBAC service." -msgstr "新しい HBAC サービスを追加します。" - -msgid "Delete an existing HBAC service." -msgstr "既存の HBAC サービスを削除します。" - -msgid "Search for HBAC services." -msgstr "HBAC サービスを検索します。" - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" - -msgid "Modify an HBAC service." -msgstr "HBAC サービスを変更します。" - -msgid "Display information about an HBAC service." -msgstr "HBAC サービスに関する情報を表示します。" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -#, fuzzy -msgid "Service group name" -msgstr "HBAC サービスグループ" - -#, fuzzy -msgid "HBAC service group description" -msgstr "HBAC サービスグループ" - -#, fuzzy -msgid "Member HBAC service" -msgstr "HBAC サービス" - -msgid "Add a new HBAC service group." -msgstr "新しい HBAC サービスグループを追加します。" - -msgid "Add members to an HBAC service group." -msgstr "HBAC サービスグループにメンバーを追加します。" - -msgid "Delete an HBAC service group." -msgstr "HBAC サービスグループを削除します。" - -msgid "Search for an HBAC service group." -msgstr "HBAC サービスグループを検索します。" - -msgid "Modify an HBAC service group." -msgstr "HBAC サービスグループを変更します。" - -msgid "Remove members from an HBAC service group." -msgstr "HBAC サービスグループからメンバーを削除します。" - -msgid "Display information about an HBAC service group." -msgstr "HBAC サービスグループに関する情報を表示します。" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -msgid "User name" -msgstr "" - -msgid "Target host" -msgstr "" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -#, fuzzy -msgid "Matched rules" -msgstr "sudo ルール" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#, fuzzy -msgid "Host name" -msgstr "ホスト" - -msgid "A description of this host" -msgstr "" - -msgid "Locality" -msgstr "" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "" - -msgid "Platform" -msgstr "" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "" - -msgid "Operating system" -msgstr "" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "" - -msgid "User password" -msgstr "" - -msgid "Password used in bulk enrollment" -msgstr "" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "" - -msgid "Random password" -msgstr "" - -#, fuzzy -msgid "Certificate" -msgstr "証明書" - -msgid "Base-64 encoded server certificate" -msgstr "" - -msgid "Principal name" -msgstr "" - -#, fuzzy -msgid "MAC address" -msgstr "IP アドレス" - -msgid "Hardware MAC address(es) on this host" -msgstr "" - -#, fuzzy -msgid "SSH public key" -msgstr "無効な SSH 公開鍵" - -msgid "Class" -msgstr "" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "Assigned ID View" -msgstr "" - -msgid "Requires pre-authentication" -msgstr "" - -msgid "Pre-authentication is required for the service" -msgstr "" - -msgid "Trusted for delegation" -msgstr "" - -msgid "Client credentials may be delegated to the service" -msgstr "" - -#, fuzzy -msgid "Member of host-groups" -msgstr "グループのメンバー" - -#, fuzzy -msgid "Indirect Member of host-group" -msgstr "グループのメンバー" - -msgid "Keytab" -msgstr "" - -msgid "Managed by" -msgstr "" - -msgid "Managing" -msgstr "" - -msgid "Users allowed to retrieve keytab" -msgstr "" - -msgid "Groups allowed to retrieve keytab" -msgstr "" - -msgid "Hosts allowed to retrieve keytab" -msgstr "" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "" - -msgid "Users allowed to create keytab" -msgstr "" - -msgid "Groups allowed to create keytab" -msgstr "" - -msgid "Hosts allowed to create keytab" -msgstr "" - -msgid "Host Groups allowed to create keytab" -msgstr "" - -msgid "Add a new host." -msgstr "新しいホストを追加します。" - -msgid "force host name even if not in DNS" -msgstr "" - -msgid "skip reverse DNS detection" -msgstr "" - -msgid "Add the host to DNS with this IP address" -msgstr "" - -msgid "Add hosts that can manage this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" - -msgid "Delete a host." -msgstr "ホストを削除します。" - -msgid "Remove entries from DNS" -msgstr "" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" - -msgid "Search for hosts." -msgstr "ホストを検索します。" - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" - -msgid "host group" -msgstr "ホストグループ" - -msgid "Search for hosts with these member of host groups." -msgstr "" - -msgid "Search for hosts without these member of host groups." -msgstr "" - -msgid "Search for hosts with these member of netgroups." -msgstr "" - -msgid "Search for hosts without these member of netgroups." -msgstr "" - -msgid "Search for hosts with these member of roles." -msgstr "" - -msgid "Search for hosts without these member of roles." -msgstr "" - -#, fuzzy -msgid "Search for hosts with these member of HBAC rules." -msgstr "HBAC ルールを検索します。" - -msgid "Search for hosts without these member of HBAC rules." -msgstr "" - -msgid "Search for hosts with these member of sudo rules." -msgstr "" - -msgid "Search for hosts without these member of sudo rules." -msgstr "" - -msgid "Search for hosts with these enrolled by users." -msgstr "" - -msgid "Search for hosts without these enrolled by users." -msgstr "" - -msgid "host" -msgstr "ホスト" - -msgid "Search for hosts with these managed by hosts." -msgstr "" - -msgid "Search for hosts without these managed by hosts." -msgstr "" - -msgid "Search for hosts with these managing hosts." -msgstr "" - -msgid "Search for hosts without these managing hosts." -msgstr "" - -#, fuzzy -msgid "Modify information about a host." -msgstr "役割に関する情報を表示します。" - -msgid "Kerberos principal name for this host" -msgstr "" - -msgid "Update DNS entries" -msgstr "" - -msgid "Remove hosts that can manage this host." -msgstr "" - -#, fuzzy -msgid "Display information about a host." -msgstr "役割に関する情報を表示します。" - -msgid "file to store certificate in" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -msgid "Host-group" -msgstr "ホストグループ" - -#, fuzzy -msgid "Name of host-group" -msgstr "標準のホストグループ" - -msgid "A description of this host-group" -msgstr "" - -msgid "Member hosts" -msgstr "" - -#, fuzzy -msgid "Member host-groups" -msgstr "グループのメンバー" - -msgid "Indirect Member hosts" -msgstr "" - -msgid "Indirect Member host-groups" -msgstr "" - -#, fuzzy -msgid "Add a new hostgroup." -msgstr "新しいホストを追加します。" - -#, fuzzy -msgid "Add members to a hostgroup." -msgstr "HBAC サービスグループにメンバーを追加します。" - -#, fuzzy -msgid "Delete a hostgroup." -msgstr "ホストを削除します。" - -#, fuzzy -msgid "Search for hostgroups." -msgstr "グループを検索します。" - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" - -msgid "Search for host groups with these member hosts." -msgstr "" - -msgid "Search for host groups without these member hosts." -msgstr "" - -msgid "Search for host groups with these member host groups." -msgstr "" - -msgid "Search for host groups without these member host groups." -msgstr "" - -msgid "Search for host groups with these member of host groups." -msgstr "" - -msgid "Search for host groups without these member of host groups." -msgstr "" - -msgid "Search for host groups with these member of netgroups." -msgstr "" - -msgid "Search for host groups without these member of netgroups." -msgstr "" - -msgid "Search for host groups with these member of HBAC rules." -msgstr "" - -msgid "Search for host groups without these member of HBAC rules." -msgstr "" - -msgid "Search for host groups with these member of sudo rules." -msgstr "" - -msgid "Search for host groups without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a hostgroup." -msgstr "グループを変更します。" - -#, fuzzy -msgid "Remove members from a hostgroup." -msgstr "HBAC サービスグループからメンバーを削除します。" - -#, fuzzy -msgid "Display information about a hostgroup." -msgstr "役割に関する情報を表示します。" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "Range name" -msgstr "" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -#, fuzzy -msgid "Delete an ID range." -msgstr "役割を削除します。" - -#, fuzzy -msgid "Search for ranges." -msgstr "役割を検索します。" - -#, fuzzy -msgid "Modify ID range." -msgstr "役割を変更します。" - -#, fuzzy -msgid "Display information about a range." -msgstr "役割に関する情報を表示します。" - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -msgid "Anchor to override" -msgstr "" - -msgid "Group ID Number" -msgstr "" - -#, fuzzy -msgid "User login" -msgstr "ユーザーオプション" - -msgid "UID" -msgstr "" - -msgid "User ID Number" -msgstr "" - -msgid "GECOS" -msgstr "" - -msgid "Home directory" -msgstr "" - -msgid "Login shell" -msgstr "" - -msgid "ID View Name" -msgstr "" - -#, fuzzy -msgid "Add a new Group ID override." -msgstr "新しい役割を追加します。" - -#, fuzzy -msgid "Delete an Group ID override." -msgstr "役割を削除します。" - -#, fuzzy -msgid "Search for an Group ID override." -msgstr "グループを検索します。" - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" - -#, fuzzy -msgid "Modify an Group ID override." -msgstr "グループを変更します。" - -msgid "Rename the Group ID override object" -msgstr "" - -#, fuzzy -msgid "Display information about an Group ID override." -msgstr "役割に関する情報を表示します。" - -#, fuzzy -msgid "Add a new User ID override." -msgstr "新しい HBAC サービスを追加します。" - -#, fuzzy -msgid "Delete an User ID override." -msgstr "役割を削除します。" - -#, fuzzy -msgid "Search for an User ID override." -msgstr "HBAC サービスを検索します。" - -#, fuzzy -msgid "Modify an User ID override." -msgstr "HBAC サービスを変更します。" - -msgid "Rename the User ID override object" -msgstr "" - -#, fuzzy -msgid "Display information about an User ID override." -msgstr "HBAC サービスに関する情報を表示します。" - -#, fuzzy -msgid "Add a new ID View." -msgstr "新しい役割を追加します。" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" - -msgid "hosts" -msgstr "ホスト" - -msgid "Hosts to apply the ID View to" -msgstr "" - -#, fuzzy -msgid "hostgroups" -msgstr "ホストグループ" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" - -msgid "Hosts that this ID View was applied to." -msgstr "" - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" - -msgid "Number of hosts the ID View was applied to:" -msgstr "" - -#, fuzzy -msgid "Delete an ID View." -msgstr "役割を削除します。" - -#, fuzzy -msgid "Search for an ID View." -msgstr "役割を検索します。" - -#, fuzzy -msgid "Modify an ID View." -msgstr "役割を変更します。" - -msgid "Rename the ID View object" -msgstr "" - -#, fuzzy -msgid "Display information about an ID View." -msgstr "役割に関する情報を表示します。" - -msgid "Enumerate all the hosts the view applies to." -msgstr "" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" - -msgid "Hosts to clear (any) ID View from." -msgstr "" - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" - -msgid "Hosts that ID View was cleared from." -msgstr "" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" - -msgid "Dict of I18N messages" -msgstr "" - -msgid "Export plugin meta-data for the webUI." -msgstr "" - -msgid "Name of object to export" -msgstr "" - -msgid "Name of method to export" -msgstr "" - -msgid "Name of command to export" -msgstr "" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" - -msgid "Join an IPA domain" -msgstr "" - -msgid "The hostname to register as" -msgstr "" - -msgid "The IPA realm" -msgstr "" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "" - -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" - -msgid "Manage ticket policy for specific user" -msgstr "" - -msgid "Max life" -msgstr "" - -msgid "Maximum ticket life (seconds)" -msgstr "" - -msgid "Max renew" -msgstr "" - -msgid "Maximum renewable age (seconds)" -msgstr "" - -msgid "Modify Kerberos ticket policy." -msgstr "" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "" - -msgid "Display the current Kerberos ticket policy." -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," -"cn=accounts' --group-container='cn=groups,cn=accounts' " -"ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' --user-ignore-" -"objectclass=radiusprofile --user-ignore-" -"attribute=radiusgroupname ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -msgid "Migrate users and groups from DS to IPA." -msgstr "" - -msgid "LDAP URI" -msgstr "" - -msgid "LDAP URI of DS server to migrate from" -msgstr "" - -msgid "bind password" -msgstr "" - -msgid "Bind DN" -msgstr "" - -#, fuzzy -msgid "User container" -msgstr "ユーザーオプション" - -msgid "DN of container for users in DS relative to base DN" -msgstr "" - -#, fuzzy -msgid "Group container" -msgstr "グループオプション" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "" - -msgid "User object class" -msgstr "" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "" - -msgid "Group object class" -msgstr "" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "" - -msgid "Ignore user object class" -msgstr "" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore user attribute" -msgstr "" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore group object class" -msgstr "" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "Ignore group attribute" -msgstr "" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "" - -msgid "Overwrite GID" -msgstr "" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" - -msgid "LDAP schema" -msgstr "" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" - -msgid "Continue" -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" - -msgid "Base DN" -msgstr "" - -msgid "Base DN on remote LDAP server" -msgstr "" - -msgid "Ignore compat plugin" -msgstr "" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" - -#, fuzzy -msgid "CA certificate" -msgstr "証明書" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "" - -msgid "groups to exclude from migration" -msgstr "" - -msgid "users to exclude from migration" -msgstr "" - -msgid "Lists of objects migrated; categorized by type." -msgstr "" - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" - -msgid "False if migration mode was disabled." -msgstr "" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" - -msgid "Show environment variables." -msgstr "" - -msgid "Forward to server instead of running locally" -msgstr "" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Total number of variables env (>= count)" -msgstr "" - -msgid "Number of variables returned (<= total)" -msgstr "" - -msgid "Show all loaded plugins." -msgstr "" - -msgid "Dictionary mapping plugin names to bases" -msgstr "" - -msgid "Number of plugins loaded" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "Netgroup name" -msgstr "" - -#, fuzzy -msgid "Netgroup description" -msgstr "グループオプション" - -msgid "NIS domain name" -msgstr "" - -msgid "IPA unique ID" -msgstr "" - -#, fuzzy -msgid "Member netgroups" -msgstr "グループのメンバー" - -msgid "Indirect Member netgroups" -msgstr "" - -msgid "Member User" -msgstr "" - -#, fuzzy -msgid "Member Group" -msgstr "グループのメンバー" - -msgid "Member Host" -msgstr "" - -#, fuzzy -msgid "Member Hostgroup" -msgstr "グループのメンバー" - -#, fuzzy -msgid "Add a new netgroup." -msgstr "新しい役割を追加します。" - -#, fuzzy -msgid "Add members to a netgroup." -msgstr "HBAC サービスグループにメンバーを追加します。" - -#, fuzzy -msgid "member netgroup" -msgstr "グループのメンバー" - -msgid "netgroups to add" -msgstr "" - -#, fuzzy -msgid "Delete a netgroup." -msgstr "グループを削除します。" - -#, fuzzy -msgid "Search for a netgroup." -msgstr "グループを検索します。" - -#, fuzzy -msgid "search for managed groups" -msgstr "グループを検索します。" - -msgid "Search for netgroups with these member netgroups." -msgstr "" - -msgid "Search for netgroups without these member netgroups." -msgstr "" - -msgid "Search for netgroups with these member users." -msgstr "" - -msgid "Search for netgroups without these member users." -msgstr "" - -#, fuzzy -msgid "Search for netgroups with these member groups." -msgstr "HBAC サービスグループを検索します。" - -msgid "Search for netgroups without these member groups." -msgstr "" - -msgid "Search for netgroups with these member hosts." -msgstr "" - -msgid "Search for netgroups without these member hosts." -msgstr "" - -msgid "Search for netgroups with these member host groups." -msgstr "" - -msgid "Search for netgroups without these member host groups." -msgstr "" - -msgid "Search for netgroups with these member of netgroups." -msgstr "" - -msgid "Search for netgroups without these member of netgroups." -msgstr "" - -#, fuzzy -msgid "Modify a netgroup." -msgstr "グループを変更します。" - -#, fuzzy -msgid "Remove members from a netgroup." -msgstr "HBAC サービスグループからメンバーを削除します。" - -msgid "netgroups to remove" -msgstr "" - -#, fuzzy -msgid "Display information about a netgroup." -msgstr "役割に関する情報を表示します。" - -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" - -msgid "TOTP authentication Window" -msgstr "" - -msgid "TOTP authentication time variance (seconds)" -msgstr "" - -msgid "TOTP Synchronization Window" -msgstr "" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "" - -msgid "HOTP Authentication Window" -msgstr "" - -msgid "HOTP authentication skip-ahead" -msgstr "" - -msgid "HOTP Synchronization Window" -msgstr "" - -msgid "HOTP synchronization skip-ahead" -msgstr "" - -msgid "Modify OTP configuration options." -msgstr "" - -msgid "Show the current OTP configuration." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -msgid "Serial" -msgstr "" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -#, fuzzy -msgid "Add a new OTP token." -msgstr "新しい役割を追加します。" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -#, fuzzy -msgid "Delete an OTP token." -msgstr "役割を削除します。" - -#, fuzzy -msgid "Search for OTP token." -msgstr "役割を検索します。" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -#, fuzzy -msgid "Modify a OTP token." -msgstr "役割を変更します。" - -msgid "Rename the OTP token object" -msgstr "" - -#, fuzzy -msgid "Display information about an OTP token." -msgstr "役割に関する情報を表示します。" - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "Set a user's password." -msgstr "" - -msgid "New Password" -msgstr "" - -msgid "Current Password" -msgstr "" - -msgid "OTP" -msgstr "" - -msgid "One Time Password" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -"\n" -"Managed permissions\n" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -#, fuzzy -msgid "Permission name" -msgstr "権限" - -msgid "Granted rights" -msgstr "" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" - -msgid "Effective attributes" -msgstr "" - -msgid "All attributes to which the permission applies" -msgstr "" - -msgid "Included attributes" -msgstr "" - -msgid "User-specified attributes to which the permission applies" -msgstr "" - -msgid "Excluded attributes" -msgstr "" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" - -#, fuzzy -msgid "Default attributes" -msgstr "標準のホストグループ" - -msgid "Attributes to which the permission applies by default" -msgstr "" - -msgid "Bind rule type" -msgstr "" - -msgid "Subtree to apply permissions to" -msgstr "" - -msgid "Extra target filter" -msgstr "" - -msgid "Raw target filter" -msgstr "" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" - -msgid "Target DN" -msgstr "" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" - -#, fuzzy -msgid "Member of group" -msgstr "グループのメンバー" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "" - -msgid "User group to apply permissions to (sets target)" -msgstr "" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "" - -msgid "Deprecated; use extratargetfilter" -msgstr "" - -msgid "Deprecated; use ipapermlocation" -msgstr "" - -msgid "Deprecated; use ipapermright" -msgstr "" - -msgid "Granted to Privilege" -msgstr "" - -msgid "Indirect Member of roles" -msgstr "" - -#, fuzzy -msgid "Add a new permission." -msgstr "新しい役割を追加します。" - -#, fuzzy -msgid "Add members to a permission." -msgstr "HBAC サービスグループにメンバーを追加します。" - -msgid "member privilege" -msgstr "" - -msgid "privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "" - -#, fuzzy -msgid "Permission flags" -msgstr "権限" - -#, fuzzy -msgid "Delete a permission." -msgstr "役割を削除します。" - -msgid "force delete of SYSTEM permissions" -msgstr "" - -#, fuzzy -msgid "Search for permissions." -msgstr "役割を検索します。" - -#, fuzzy -msgid "Modify a permission." -msgstr "役割を変更します。" - -msgid "Rename the permission object" -msgstr "" - -#, fuzzy -msgid "Remove members from a permission." -msgstr "HBAC サービスグループからメンバーを削除します。" - -msgid "privileges to remove" -msgstr "" - -#, fuzzy -msgid "Display information about a permission." -msgstr "役割に関する情報を表示します。" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "Ping a remote server." -msgstr "" - -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "" - -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" - -msgid "Privilege name" -msgstr "" - -msgid "Privilege description" -msgstr "" - -msgid "Granting privilege to roles" -msgstr "" - -#, fuzzy -msgid "Add a new privilege." -msgstr "新しい役割を追加します。" - -#, fuzzy -msgid "Add members to a privilege." -msgstr "HBAC サービスグループにメンバーを追加します。" - -msgid "member role" -msgstr "" - -msgid "roles to add" -msgstr "" - -msgid "Add permissions to a privilege." -msgstr "" - -#, fuzzy -msgid "permission" -msgstr "権限" - -#, fuzzy -msgid "permissions" -msgstr "権限" - -msgid "Number of permissions added" -msgstr "" - -#, fuzzy -msgid "Delete a privilege." -msgstr "役割を削除します。" - -#, fuzzy -msgid "Search for privileges." -msgstr "役割を検索します。" - -#, fuzzy -msgid "Modify a privilege." -msgstr "役割を変更します。" - -msgid "Rename the privilege object" -msgstr "" - -#, fuzzy -msgid "Remove members from a privilege" -msgstr "HBAC サービスグループからメンバーを削除します。" - -msgid "roles to remove" -msgstr "" - -#, fuzzy -msgid "Remove permissions from a privilege." -msgstr "HBAC サービスグループからメンバーを削除します。" - -msgid "Number of permissions removed" -msgstr "" - -#, fuzzy -msgid "Display information about a privilege." -msgstr "役割に関する情報を表示します。" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -#, fuzzy -msgid "Group" -msgstr "グループ" - -msgid "Manage password policy for specific group" -msgstr "" - -msgid "Max lifetime (days)" -msgstr "" - -msgid "Maximum password lifetime (in days)" -msgstr "" - -msgid "Min lifetime (hours)" -msgstr "" - -msgid "Minimum password lifetime (in hours)" -msgstr "" - -msgid "History size" -msgstr "" - -#, fuzzy -msgid "Password history size" -msgstr "パスワードポリシー" - -msgid "Character classes" -msgstr "" - -msgid "Minimum number of character classes" -msgstr "" - -msgid "Min length" -msgstr "" - -msgid "Minimum length of password" -msgstr "" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "" - -msgid "Max failures" -msgstr "" - -msgid "Consecutive failures before lockout" -msgstr "" - -msgid "Failure reset interval" -msgstr "" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "" - -msgid "Lockout duration" -msgstr "" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" - -#, fuzzy -msgid "Add a new group password policy." -msgstr "パスワードポリシー" - -#, fuzzy -msgid "Delete a group password policy." -msgstr "パスワードポリシー" - -#, fuzzy -msgid "Search for group password policies." -msgstr "グループを検索します。" - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" - -#, fuzzy -msgid "Modify a group password policy." -msgstr "パスワードポリシー" - -#, fuzzy -msgid "Display information about password policy." -msgstr "役割に関する情報を表示します。" - -msgid "User" -msgstr "" - -msgid "Display effective policy for a specific user" -msgstr "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "RADIUS proxy server name" -msgstr "" - -msgid "A description of this RADIUS proxy server" -msgstr "" - -msgid "Server" -msgstr "" - -msgid "The hostname or IP (with or without port)" -msgstr "" - -msgid "Secret" -msgstr "" - -msgid "The secret used to encrypt data" -msgstr "" - -msgid "Timeout" -msgstr "" - -msgid "The total timeout across all retries (in seconds)" -msgstr "" - -msgid "Retries" -msgstr "" - -msgid "The number of times to retry authentication" -msgstr "" - -msgid "User attribute" -msgstr "" - -msgid "The username attribute on the user object" -msgstr "" - -#, fuzzy -msgid "Add a new RADIUS proxy server." -msgstr "新しい HBAC サービスを追加します。" - -#, fuzzy -msgid "Delete a RADIUS proxy server." -msgstr "HBAC サービスグループを削除します。" - -#, fuzzy -msgid "Search for RADIUS proxy servers." -msgstr "HBAC サービスを検索します。" - -#, fuzzy -msgid "Modify a RADIUS proxy server." -msgstr "HBAC サービスを変更します。" - -msgid "Rename the RADIUS proxy server object" -msgstr "" - -#, fuzzy -msgid "Display information about a RADIUS proxy server." -msgstr "HBAC サービスに関する情報を表示します。" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Domain" -msgstr "" - -msgid "Add domain" -msgstr "" - -#, fuzzy -msgid "Delete domain" -msgstr "グループを削除します。" - -#, fuzzy -msgid "Modify realm domains." -msgstr "役割を変更します。" - -msgid "Force adding domain even if not in DNS" -msgstr "" - -msgid "Display the list of realm domains." -msgstr "" - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" - -msgid "Role name" -msgstr "" - -msgid "A description of this role-group" -msgstr "" - -msgid "Privileges" -msgstr "" - -#, fuzzy -msgid "Member services" -msgstr "HBAC サービス" - -msgid "Add a new role." -msgstr "新しい役割を追加します。" - -#, fuzzy -msgid "Add members to a role." -msgstr "HBAC サービスグループにメンバーを追加します。" - -msgid "member service" -msgstr "" - -msgid "services to add" -msgstr "" - -msgid "Add privileges to a role." -msgstr "" - -msgid "privilege" -msgstr "" - -msgid "privileges" -msgstr "" - -msgid "Number of privileges added" -msgstr "" - -msgid "Delete a role." -msgstr "役割を削除します。" - -msgid "Search for roles." -msgstr "役割を検索します。" - -msgid "Modify a role." -msgstr "役割を変更します。" - -msgid "Rename the role object" -msgstr "" - -#, fuzzy -msgid "Remove members from a role." -msgstr "HBAC サービスグループからメンバーを削除します。" - -msgid "services to remove" -msgstr "" - -msgid "Remove privileges from a role." -msgstr "" - -msgid "Number of privileges removed" -msgstr "" - -msgid "Display information about a role." -msgstr "役割に関する情報を表示します。" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "Self-service name" -msgstr "" - -msgid "Attributes to which the permission applies." -msgstr "" - -#, fuzzy -msgid "Add a new self-service permission." -msgstr "新しい HBAC サービスグループを追加します。" - -#, fuzzy -msgid "Delete a self-service permission." -msgstr "HBAC サービスグループを削除します。" - -#, fuzzy -msgid "Search for a self-service permission." -msgstr "HBAC サービスグループを検索します。" - -#, fuzzy -msgid "Modify a self-service permission." -msgstr "HBAC サービスグループを変更します。" - -#, fuzzy -msgid "Display information about a self-service permission." -msgstr "HBAC サービスグループに関する情報を表示します。" - -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" - -msgid "SELinux User" -msgstr "" - -msgid "HBAC Rule" -msgstr "" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "" - -#, fuzzy -msgid "Create a new SELinux User Map." -msgstr "新しいグループを作成します。" - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "" - -#, fuzzy -msgid "Delete a SELinux User Map." -msgstr "ユーザーを削除します。" - -#, fuzzy -msgid "Disable an SELinux User Map rule." -msgstr "ユーザーアカウントを無効化します。" - -#, fuzzy -msgid "Enable an SELinux User Map rule." -msgstr "ユーザーアカウントを有効化します。" - -#, fuzzy -msgid "Search for SELinux User Maps." -msgstr "グループを検索します。" - -#, fuzzy -msgid "Modify a SELinux User Map." -msgstr "ユーザーを変更します。" - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "" - -#, fuzzy -msgid "Display the properties of a SELinux User Map rule." -msgstr "HBAC ルールのプロパティーを表示します。" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "Service principal" -msgstr "" - -msgid "PAC type" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" - -#, fuzzy -msgid "Add a new IPA new service." -msgstr "新しい HBAC サービスを追加します。" - -msgid "force principal name even if not in DNS" -msgstr "" - -msgid "Add hosts that can manage this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -#, fuzzy -msgid "Delete an IPA service." -msgstr "HBAC サービスグループを削除します。" - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -#, fuzzy -msgid "Search for IPA services." -msgstr "HBAC サービスを検索します。" - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" - -msgid "Search for services with these managed by hosts." -msgstr "" - -msgid "Search for services without these managed by hosts." -msgstr "" - -#, fuzzy -msgid "Modify an existing IPA service." -msgstr "HBAC サービスを変更します。" - -msgid "Remove hosts that can manage this service." -msgstr "" - -#, fuzzy -msgid "Display information about an IPA service." -msgstr "HBAC サービスに関する情報を表示します。" - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" - -msgid "Sudo Command" -msgstr "sudo コマンド" - -msgid "A description of this command" -msgstr "" - -#, fuzzy -msgid "Sudo Command Groups" -msgstr "sudo コマンド" - -#, fuzzy -msgid "Create new Sudo Command." -msgstr "sudo コマンド" - -#, fuzzy -msgid "Delete Sudo Command." -msgstr "sudo コマンド" - -#, fuzzy -msgid "Search for Sudo Commands." -msgstr "sudo コマンド" - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" - -#, fuzzy -msgid "Modify Sudo Command." -msgstr "sudo コマンド" - -#, fuzzy -msgid "Display Sudo Command." -msgstr "sudo コマンド" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -#, fuzzy -msgid "Sudo Command Group" -msgstr "sudo コマンド" - -#, fuzzy -msgid "Commands" -msgstr "sudo コマンド" - -#, fuzzy -msgid "Member Sudo commands" -msgstr "sudo コマンド" - -#, fuzzy -msgid "Create new Sudo Command Group." -msgstr "新しいグループを作成します。" - -#, fuzzy -msgid "Add members to Sudo Command Group." -msgstr "HBAC サービスグループにメンバーを追加します。" - -#, fuzzy -msgid "member sudo command" -msgstr "sudo コマンド" - -#, fuzzy -msgid "sudo commands to add" -msgstr "sudo コマンド" - -#, fuzzy -msgid "Delete Sudo Command Group." -msgstr "sudo コマンド" - -#, fuzzy -msgid "Search for Sudo Command Groups." -msgstr "グループを検索します。" - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" - -#, fuzzy -msgid "Modify Sudo Command Group." -msgstr "グループを変更します。" - -#, fuzzy -msgid "Remove members from Sudo Command Group." -msgstr "HBAC サービスグループからメンバーを削除します。" - -#, fuzzy -msgid "sudo commands to remove" -msgstr "sudo コマンド" - -#, fuzzy -msgid "Display Sudo Command Group." -msgstr "sudo コマンド" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -#, fuzzy -msgid "NetBIOS name" -msgstr "ACI 名" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -msgid "Domain name" -msgstr "" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -#, fuzzy -msgid "Delete a trust." -msgstr "ホストを削除します。" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -#, fuzzy -msgid "Search for trusts." -msgstr "ホストを検索します。" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -#, fuzzy -msgid "Display information about a trust." -msgstr "役割に関する情報を表示します。" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "" - -msgid "Last name" -msgstr "" - -msgid "Full name" -msgstr "" - -msgid "Display name" -msgstr "" - -msgid "Initials" -msgstr "" - -#, fuzzy -msgid "Kerberos principal" -msgstr "Kerberos キー" - -msgid "Kerberos principal expiration" -msgstr "" - -#, fuzzy -msgid "Email address" -msgstr "IP アドレス" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -msgid "Pager Number" -msgstr "" - -msgid "Fax Number" -msgstr "" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Car License" -msgstr "" - -#, fuzzy -msgid "Account disabled" -msgstr "アカウント" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "" - -msgid "RADIUS proxy username" -msgstr "" - -msgid "Department Number" -msgstr "" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -#, fuzzy -msgid "Kerberos keys available" -msgstr "Kerberos キー" - -msgid "Add a new user." -msgstr "新しいユーザーを追加します。" - -#, fuzzy -msgid "Don't create user private group" -msgstr "標準のユーザーグループ" - -msgid "Delete a user." -msgstr "ユーザーを削除します。" - -msgid "Disable a user account." -msgstr "ユーザーアカウントを無効化します。" - -msgid "Enable a user account." -msgstr "ユーザーアカウントを有効化します。" - -#, fuzzy -msgid "Search for users." -msgstr "ホストを検索します。" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -#, fuzzy -msgid "Search for users with these member of HBAC rules." -msgstr "HBAC ルールを検索します。" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "ユーザーを変更します。" - -msgid "Rename the user object" -msgstr "" - -#, fuzzy -msgid "Display information about a user." -msgstr "役割に関する情報を表示します。" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "Command category" -msgstr "" - -msgid "Command category the rule applies to" -msgstr "" - -msgid "RunAs User category" -msgstr "" - -msgid "RunAs User category the rule applies to" -msgstr "" - -msgid "RunAs Group category" -msgstr "" - -msgid "RunAs Group category the rule applies to" -msgstr "" - -#, fuzzy -msgid "Sudo order" -msgstr "sudo コマンド" - -msgid "integer to order the Sudo rules" -msgstr "" - -msgid "External User" -msgstr "" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -msgid "Host Masks" -msgstr "" - -#, fuzzy -msgid "Sudo Allow Commands" -msgstr "sudo コマンド" - -#, fuzzy -msgid "Sudo Deny Commands" -msgstr "sudo コマンド" - -#, fuzzy -msgid "Sudo Allow Command Groups" -msgstr "sudo コマンド" - -#, fuzzy -msgid "Sudo Deny Command Groups" -msgstr "sudo コマンド" - -#, fuzzy -msgid "RunAs Users" -msgstr "ユーザー" - -msgid "Run as a user" -msgstr "" - -msgid "Groups of RunAs Users" -msgstr "" - -msgid "Run as any user within a specified group" -msgstr "" - -msgid "RunAs External User" -msgstr "" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -msgid "External Groups of RunAs Users" -msgstr "" - -msgid "External Groups of users that the command can run as" -msgstr "" - -#, fuzzy -msgid "RunAs Groups" -msgstr "ホストグループ" - -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -#, fuzzy -msgid "RunAs External Group" -msgstr "ユーザーグループ" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -#, fuzzy -msgid "Sudo Option" -msgstr "グループオプション" - -#, fuzzy -msgid "Create new Sudo Rule." -msgstr "新しい HBAC ルールを作成します。" - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "member sudo command group" -msgstr "グループのメンバー" - -#, fuzzy -msgid "sudo command groups to add" -msgstr "sudo コマンド" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "" - -msgid "Add group for Sudo to execute as." -msgstr "" - -msgid "Add users and groups for Sudo to execute as." -msgstr "" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "Delete Sudo Rule." -msgstr "役割を削除します。" - -#, fuzzy -msgid "Disable a Sudo Rule." -msgstr "HBAC ルールを無効化します。" - -#, fuzzy -msgid "Enable a Sudo Rule." -msgstr "HBAC ルールを有効化します。" - -#, fuzzy -msgid "Search for Sudo Rule." -msgstr "役割を検索します。" - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -#, fuzzy -msgid "Modify Sudo Rule." -msgstr "役割を変更します。" - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "sudo command groups to remove" -msgstr "sudo コマンド" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "Remove an option from Sudo Rule." -msgstr "" - -msgid "Remove group for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "Display Sudo Rule." -msgstr "sudo ルール" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -#, fuzzy -msgid "ACL name" -msgstr "ACI 名" - -msgid "Profile category" -msgstr "" - -msgid "Profile category the ACL applies to" -msgstr "" - -msgid "User category the ACL applies to" -msgstr "" - -msgid "Host category the ACL applies to" -msgstr "" - -msgid "Service category the ACL applies to" -msgstr "" - -msgid "Profiles" -msgstr "" - -#, fuzzy -msgid "Create a new CA ACL." -msgstr "新しい HBAC ルールを作成します。" - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "" - -msgid "Add profiles to a CA ACL." -msgstr "" - -msgid "member Certificate Profile" -msgstr "" - -#, fuzzy -msgid "Certificate Profiles to add" -msgstr "証明書" - -msgid "Add services to a CA ACL." -msgstr "" - -msgid "Add users and groups to a CA ACL." -msgstr "" - -#, fuzzy -msgid "Delete a CA ACL." -msgstr "ホストを削除します。" - -#, fuzzy -msgid "Disable a CA ACL." -msgstr "HBAC ルールを無効化します。" - -#, fuzzy -msgid "Enable a CA ACL." -msgstr "HBAC ルールを有効化します。" - -#, fuzzy -msgid "Search for CA ACLs." -msgstr "HBAC ルールを検索します。" - -#, fuzzy -msgid "Modify a CA ACL." -msgstr "役割を変更します。" - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "" - -msgid "Remove profiles from a CA ACL." -msgstr "" - -msgid "Certificate Profiles to remove" -msgstr "" - -msgid "Remove services from a CA ACL." -msgstr "" - -msgid "Remove users and groups from a CA ACL." -msgstr "" - -#, fuzzy -msgid "Display the properties of a CA ACL." -msgstr "HBAC ルールのプロパティーを表示します。" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -#, fuzzy -msgid "Certificate Profile to use" -msgstr "証明書" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -#, fuzzy -msgid "Delete a Certificate Profile." -msgstr "HBAC サービスグループを削除します。" - -#, fuzzy -msgid "Search for Certificate Profiles." -msgstr "役割を検索します。" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -#, fuzzy -msgid "Display the properties of a Certificate Profile." -msgstr "HBAC ルールのプロパティーを表示します。" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" - -msgid "Query current Domain Level." -msgstr "" - -msgid "Current domain level:" -msgstr "" - -msgid "Change current Domain Level." -msgstr "" - -msgid "Domain Level" -msgstr "" - -msgid "Add certificates to host entry" -msgstr "" - -msgid "Remove certificates from host entry" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "Fallback to AD DC LDAP" -msgstr "" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" - -#, fuzzy -msgid "Add to default group" -msgstr "標準のホストグループ" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" - -#, fuzzy -msgid "Search scope" -msgstr "役割を検索します。" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Target DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" - -msgid "Origin DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "Server name" -msgstr "" - -msgid "IPA server hostname" -msgstr "" - -msgid "Managed suffix" -msgstr "" - -msgid "Min domain level" -msgstr "" - -msgid "Minimum domain level" -msgstr "" - -msgid "Max domain level" -msgstr "" - -msgid "Maximum domain level" -msgstr "" - -#, fuzzy -msgid "Delete IPA server." -msgstr "ユーザーを削除します。" - -#, fuzzy -msgid "Search for IPA servers." -msgstr "HBAC サービスを検索します。" - -msgid "Show IPA server." -msgstr "" - -#, fuzzy -msgid "Add new certificates to a service" -msgstr "HBAC サービスグループにメンバーを追加します。" - -#, fuzzy -msgid "Remove certificates from a service" -msgstr "HBAC サービスグループからメンバーを削除します。" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed Target" -msgstr "" - -#, fuzzy -msgid "Create a new service delegation rule." -msgstr "新しい HBAC ルールを作成します。" - -#, fuzzy -msgid "Add member to a named service delegation rule." -msgstr "HBAC サービスグループにメンバーを追加します。" - -msgid "member principal" -msgstr "" - -msgid "principal to add" -msgstr "" - -msgid "Add target to a named service delegation rule." -msgstr "" - -msgid "member service delegation target" -msgstr "" - -msgid "service delegation targets to add" -msgstr "" - -#, fuzzy -msgid "Delete service delegation." -msgstr "HBAC サービスグループを削除します。" - -#, fuzzy -msgid "Search for service delegations rule." -msgstr "HBAC サービスグループを検索します。" - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" - -#, fuzzy -msgid "Remove member from a named service delegation rule." -msgstr "HBAC サービスグループからメンバーを削除します。" - -msgid "principal to remove" -msgstr "" - -#, fuzzy -msgid "Remove target from a named service delegation rule." -msgstr "HBAC サービスグループからメンバーを削除します。" - -msgid "service delegation targets to remove" -msgstr "" - -#, fuzzy -msgid "Display information about a named service delegation rule." -msgstr "HBAC サービスグループに関する情報を表示します。" - -msgid "Create a new service delegation target." -msgstr "" - -#, fuzzy -msgid "Add member to a named service delegation target." -msgstr "HBAC サービスグループにメンバーを追加します。" - -msgid "Delete service delegation target." -msgstr "" - -#, fuzzy -msgid "Search for service delegation target." -msgstr "HBAC サービスグループを検索します。" - -#, fuzzy -msgid "Remove member from a named service delegation target." -msgstr "HBAC サービスグループからメンバーを削除します。" - -#, fuzzy -msgid "Display information about a named service delegation target." -msgstr "HBAC サービスグループに関する情報を表示します。" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" - -msgid "Activate a stage user." -msgstr "" - -#, fuzzy -msgid "Add a new stage user." -msgstr "新しいユーザーを追加します。" - -msgid "Create Stage user in from a delete user" -msgstr "" - -#, fuzzy -msgid "Delete a stage user." -msgstr "ユーザーを削除します。" - -#, fuzzy -msgid "Search for stage users." -msgstr "ホストを検索します。" - -msgid "Search for stage users with these member of groups." -msgstr "" - -msgid "Search for stage users without these member of groups." -msgstr "" - -msgid "Search for stage users with these member of netgroups." -msgstr "" - -msgid "Search for stage users without these member of netgroups." -msgstr "" - -msgid "Search for stage users with these member of roles." -msgstr "" - -msgid "Search for stage users without these member of roles." -msgstr "" - -msgid "Search for stage users with these member of HBAC rules." -msgstr "" - -msgid "Search for stage users without these member of HBAC rules." -msgstr "" - -msgid "Search for stage users with these member of sudo rules." -msgstr "" - -msgid "Search for stage users without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a stage user." -msgstr "ユーザーを変更します。" - -msgid "Rename the stage user object" -msgstr "" - -#, fuzzy -msgid "Display information about a stage user." -msgstr "役割に関する情報を表示します。" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" - -msgid "Segment name" -msgstr "" - -msgid "Arbitrary string identifying the segment" -msgstr "" - -msgid "Left node" -msgstr "" - -msgid "Left replication node - an IPA server" -msgstr "" - -msgid "Right node" -msgstr "" - -msgid "Right replication node - an IPA server" -msgstr "" - -msgid "Connectivity" -msgstr "" - -msgid "Direction of replication between left and right replication node" -msgstr "" - -msgid "Attributes to strip" -msgstr "" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" - -msgid "Attributes to replicate" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" - -msgid "Attributes for total update" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" - -msgid "Session timeout" -msgstr "" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" - -msgid "Replication agreement enabled" -msgstr "" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" - -msgid "Suffix name" -msgstr "" - -msgid "LDAP suffix to be managed" -msgstr "" - -#, fuzzy -msgid "Add a new segment." -msgstr "新しいホストを追加します。" - -#, fuzzy -msgid "Delete a segment." -msgstr "ホストを削除します。" - -#, fuzzy -msgid "Search for topology segments." -msgstr "ホストを検索します。" - -#, fuzzy -msgid "Modify a segment." -msgstr "ユーザーを変更します。" - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" - -msgid "Initialize left node" -msgstr "" - -msgid "Initialize right node" -msgstr "" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "" - -msgid "Display a segment." -msgstr "" - -msgid "Add a new topology suffix to be managed." -msgstr "" - -#, fuzzy -msgid "Delete a topology suffix." -msgstr "ホストを削除します。" - -#, fuzzy -msgid "Search for topology suffices." -msgstr "役割を検索します。" - -#, fuzzy -msgid "Modify a topology suffix." -msgstr "役割を変更します。" - -msgid "Show managed suffix." -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "Preserved user" -msgstr "" - -msgid "Add one or more certificates to the user entry" -msgstr "" - -msgid "Remove one or more certificates to the user entry" -msgstr "" - -msgid "Move deleted user into staged area" -msgstr "" - -#, fuzzy -msgid "Undelete a delete user account." -msgstr "ユーザーアカウントを有効化します。" - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "Vault name" -msgstr "" - -msgid "Vault description" -msgstr "" - -msgid "Vault type" -msgstr "" - -msgid "Salt" -msgstr "" - -msgid "Vault salt" -msgstr "" - -msgid "Public key" -msgstr "" - -#, fuzzy -msgid "Vault public key" -msgstr "無効な SSH 公開鍵" - -#, fuzzy -msgid "Owner users" -msgstr "ユーザー" - -#, fuzzy -msgid "Owner groups" -msgstr "ユーザーグループ" - -#, fuzzy -msgid "Owner services" -msgstr "HBAC サービス" - -msgid "Failed owners" -msgstr "" - -#, fuzzy -msgid "Vault service" -msgstr "HBAC サービス" - -msgid "Shared vault" -msgstr "" - -#, fuzzy -msgid "Vault user" -msgstr "標準のユーザーグループ" - -#, fuzzy -msgid "Transport Certificate" -msgstr "証明書" - -msgid "Service name of the service vault" -msgstr "" - -msgid "Username of the user vault" -msgstr "" - -#, fuzzy -msgid "Add members to a vault." -msgstr "HBAC サービスグループにメンバーを追加します。" - -msgid "Add owners to a vault." -msgstr "" - -msgid "owner user" -msgstr "" - -#, fuzzy -msgid "owner group" -msgstr "ユーザーグループ" - -#, fuzzy -msgid "owner service" -msgstr "HBAC サービス" - -msgid "Owners that could not be added" -msgstr "" - -msgid "Number of owners added" -msgstr "" - -msgid "Session key wrapped with transport certificate" -msgstr "" - -msgid "Vault data encrypted with session key" -msgstr "" - -msgid "Nonce" -msgstr "" - -#, fuzzy -msgid "Delete a vault." -msgstr "ホストを削除します。" - -#, fuzzy -msgid "Search for vaults." -msgstr "ホストを検索します。" - -msgid "List all service vaults" -msgstr "" - -#, fuzzy -msgid "List all user vaults" -msgstr "ユーザーアカウントを無効化します。" - -#, fuzzy -msgid "Remove members from a vault." -msgstr "HBAC サービスグループからメンバーを削除します。" - -#, fuzzy -msgid "Remove owners from a vault." -msgstr "HBAC サービスグループからメンバーを削除します。" - -msgid "Owners that could not be removed" -msgstr "" - -msgid "Number of owners removed" -msgstr "" - -#, fuzzy -msgid "Display information about a vault." -msgstr "役割に関する情報を表示します。" - -msgid "Show vault configuration." -msgstr "" - -msgid "Output file to store the transport certificate" -msgstr "" - -msgid "Add owners to a vault container." -msgstr "" - -#, fuzzy -msgid "Delete a vault container." -msgstr "ユーザーを削除します。" - -msgid "Remove owners from a vault container." -msgstr "" - -#, fuzzy -msgid "Display information about a vault container." -msgstr "役割に関する情報を表示します。" - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "" - -msgid "Hostname (FQDN)" -msgstr "" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Managed suffixes" -msgstr "" - -msgid "Check connection to remote IPA server." -msgstr "" - -msgid "Remote server name" -msgstr "" - -msgid "Remote IPA server hostname" -msgstr "" - -msgid "suffix" -msgstr "" - -msgid "Search for servers with these managed suffixes." -msgstr "" - -msgid "Search for servers without these managed suffixes." -msgstr "" - -msgid "Add a manager to the stage user entry" -msgstr "" - -msgid "Remove a manager to the stage user entry" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -msgid "Managed LDAP suffix DN" -msgstr "" - -#, fuzzy -msgid "Search for topology suffixes." -msgstr "役割を検索します。" - -msgid "Add a manager to the user entry" -msgstr "" - -msgid "Remove a manager to the user entry" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Comma-separated list of attributes" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" - -msgid "DNS class" -msgstr "" - -msgid "Comma-separated list of raw A records" -msgstr "" - -msgid "Comma-separated list of raw AAAA records" -msgstr "" - -msgid "Comma-separated list of raw A6 records" -msgstr "" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "" - -msgid "Comma-separated list of raw APL records" -msgstr "" - -msgid "Comma-separated list of raw CERT records" -msgstr "" - -msgid "Comma-separated list of raw CNAME records" -msgstr "" - -msgid "Comma-separated list of raw DHCID records" -msgstr "" - -msgid "Comma-separated list of raw DLV records" -msgstr "" - -msgid "Comma-separated list of raw DNAME records" -msgstr "" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "" - -msgid "Comma-separated list of raw DS records" -msgstr "" - -msgid "Comma-separated list of raw HIP records" -msgstr "" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "" - -msgid "Comma-separated list of raw KEY records" -msgstr "" - -msgid "KEY Flags" -msgstr "" - -msgid "KEY Protocol" -msgstr "" - -msgid "Protocol" -msgstr "" - -msgid "KEY Algorithm" -msgstr "" - -msgid "KEY Public Key" -msgstr "" - -msgid "Public Key" -msgstr "" - -msgid "Comma-separated list of raw KX records" -msgstr "" - -msgid "Comma-separated list of raw LOC records" -msgstr "" - -msgid "Comma-separated list of raw MX records" -msgstr "" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "" - -msgid "Comma-separated list of raw NS records" -msgstr "" - -msgid "Comma-separated list of raw NSEC records" -msgstr "" - -msgid "NSEC Next Domain Name" -msgstr "" - -msgid "Next Domain Name" -msgstr "" - -msgid "NSEC Type Map" -msgstr "" - -msgid "Type Map" -msgstr "" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "" - -msgid "Comma-separated list of raw PTR records" -msgstr "" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "" - -msgid "RRSIG Type Covered" -msgstr "" - -msgid "Type Covered" -msgstr "" - -msgid "RRSIG Algorithm" -msgstr "" - -msgid "RRSIG Labels" -msgstr "" - -msgid "Labels" -msgstr "" - -msgid "RRSIG Original TTL" -msgstr "" - -msgid "Original TTL" -msgstr "" - -msgid "RRSIG Signature Expiration" -msgstr "" - -msgid "Signature Expiration" -msgstr "" - -msgid "RRSIG Signature Inception" -msgstr "" - -msgid "Signature Inception" -msgstr "" - -msgid "RRSIG Key Tag" -msgstr "" - -msgid "RRSIG Signer's Name" -msgstr "" - -msgid "Signer's Name" -msgstr "" - -msgid "RRSIG Signature" -msgstr "" - -msgid "Signature" -msgstr "" - -msgid "Comma-separated list of raw RP records" -msgstr "" - -msgid "Comma-separated list of raw SIG records" -msgstr "" - -msgid "SIG Type Covered" -msgstr "" - -msgid "SIG Algorithm" -msgstr "" - -msgid "SIG Labels" -msgstr "" - -msgid "SIG Original TTL" -msgstr "" - -msgid "SIG Signature Expiration" -msgstr "" - -msgid "SIG Signature Inception" -msgstr "" - -msgid "SIG Key Tag" -msgstr "" - -msgid "SIG Signer's Name" -msgstr "" - -msgid "SIG Signature" -msgstr "" - -msgid "Comma-separated list of raw SPF records" -msgstr "" - -msgid "Comma-separated list of raw SRV records" -msgstr "" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "" - -msgid "Comma-separated list of raw TA records" -msgstr "" - -msgid "Comma-separated list of raw TKEY records" -msgstr "" - -msgid "Comma-separated list of raw TSIG records" -msgstr "" - -msgid "Comma-separated list of raw TXT records" -msgstr "" - -msgid "SOA time to live" -msgstr "" - -msgid "SOA record time to live" -msgstr "" - -msgid "SOA class" -msgstr "" - -msgid "SOA record class" -msgstr "" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" - -#, fuzzy -msgid "Consume an entitlement." -msgstr "コマンドが実装されていません" - -msgid "Quantity" -msgstr "" - -#, fuzzy -msgid "Search for entitlement accounts." -msgstr "ホストを検索します。" - -msgid "Retrieve the entitlement certs." -msgstr "" - -msgid "Import an entitlement certificate." -msgstr "" - -msgid "UUID" -msgstr "" - -msgid "Enrollment UUID" -msgstr "" - -msgid "Register to the entitlement system." -msgstr "" - -msgid "Username" -msgstr "" - -#, fuzzy -msgid "Enrollment UUID (not implemented)" -msgstr "コマンドが実装されていません" - -msgid "Registration password" -msgstr "" - -msgid "Display current entitlements." -msgstr "" - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" - -msgid "comma-separated list of users to add" -msgstr "" - -msgid "comma-separated list of groups to add" -msgstr "" - -msgid "comma-separated list of users to remove" -msgstr "" - -msgid "comma-separated list of groups to remove" -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Source host category" -msgstr "" - -msgid "Source host category the rule applies to" -msgstr "" - -msgid "Source Hosts" -msgstr "" - -#, fuzzy -msgid "Source Host Groups" -msgstr "ホストグループ" - -msgid "comma-separated list of hosts to add" -msgstr "" - -msgid "comma-separated list of host groups to add" -msgstr "" - -msgid "comma-separated list of HBAC services to add" -msgstr "" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "" - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "" - -msgid "comma-separated list of hosts to remove" -msgstr "" - -msgid "comma-separated list of host groups to remove" -msgstr "" - -msgid "comma-separated list of HBAC services to remove" -msgstr "" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" - -msgid "Source host" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "comma-separated list of netgroups to add" -msgstr "" - -msgid "comma-separated list of netgroups to remove" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" - -#, fuzzy -msgid "Target members of a group" -msgstr "グループのメンバー" - -msgid "User group to apply permissions to" -msgstr "" - -msgid "comma-separated list of privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI" -msgstr "" - -#, fuzzy -msgid "Permission type" -msgstr "権限" - -msgid "comma-separated list of privileges to remove" -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "comma-separated list of roles to add" -msgstr "" - -msgid "comma-separated list of permissions" -msgstr "" - -msgid "comma-separated list of roles to remove" -msgstr "" - -msgid "comma-separated list of privileges" -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "comma-separated list of sudo commands to add" -msgstr "" - -msgid "comma-separated list of sudo commands to remove" -msgstr "" - -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" - -msgid "comma-separated list of sudo command groups to add" -msgstr "" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "" - -msgid "Failed members" -msgstr "" - -msgid "Failed source hosts/hostgroups" -msgstr "" - -msgid "Failed hosts/hostgroups" -msgstr "" - -#, fuzzy -msgid "Failed users/groups" -msgstr "標準のユーザーグループ" - -#, fuzzy -msgid "Failed service/service groups" -msgstr "HBAC サービスグループ" - -msgid "Failed to remove" -msgstr "" - -msgid "Failed RunAs" -msgstr "" - -msgid "Failed RunAsGroup" -msgstr "" - -msgid "Failed profiles" -msgstr "" - -msgid "Failed CAs" -msgstr "" - -msgid "Failed member manager" -msgstr "" - -msgid "Failed managedby" -msgstr "" - -msgid "Failed allowed to retrieve keytab" -msgstr "" - -msgid "Failed allowed to create keytab" -msgstr "" - -msgid "Failed targets" -msgstr "" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "%(server)s から未知のエラー %(code)d: %(error)s" - -msgid "an internal error has occurred" -msgstr "内部エラーが発生しました" - -#, fuzzy, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "内部エラーが発生しました" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "" - -#, fuzzy, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "%(server)s から未知のエラー %(code)d: %(error)s" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "無効な JSON-RPC リクエスト: %(error)s" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Kerberos エラー: %(major)s/%(minor)s" - -msgid "did not receive Kerberos credentials" -msgstr "" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -msgid "No credentials cache found" -msgstr "" - -msgid "Ticket expired" -msgstr "" - -msgid "Credentials cache permissions incorrect" -msgstr "" - -msgid "Bad format in credentials cache" -msgstr "" - -msgid "Cannot resolve KDC for requested realm" -msgstr "" - -#, fuzzy -msgid "Session error" -msgstr "検証エラー" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#, python-format -msgid "'%(name)s' is required" -msgstr "" - -#, fuzzy, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "無効な JSON-RPC リクエスト: %(error)s" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - -msgid "Passwords do not match" -msgstr "パスワードが違います" - -msgid "Command not implemented" -msgstr "コマンドが実装されていません" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -msgid "This entry already exists" -msgstr "このエントリーはすでに存在します" - -msgid "You must enroll a host in order to create a host service" -msgstr "" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" - -msgid "This command requires root access" -msgstr "" - -msgid "This is already a posix group" -msgstr "" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -#, fuzzy -msgid "This entry is already enabled" -msgstr "このエントリーはすでに存在します" - -#, fuzzy -msgid "This entry is already disabled" -msgstr "このエントリーはすでに存在します" - -msgid "This entry cannot be enabled or disabled" -msgstr "" - -msgid "This entry is not a member" -msgstr "" - -msgid "A group may not be a member of itself" -msgstr "" - -#, fuzzy -msgid "This entry is already a member" -msgstr "このエントリーはすでに存在します" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Base64 形式のデコードに失敗: %(reason)s" - -msgid "A group may not be added as a member of itself" -msgstr "" - -msgid "The default users group cannot be removed" -msgstr "" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -msgid "This group already allows external members" -msgstr "" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "change collided with another change" -msgstr "" - -msgid "no modifications to be performed" -msgstr "" - #, python-format msgid "%(desc)s: %(info)s" msgstr "%(desc)s: %(info)s" -msgid "limits exceeded for this query" -msgstr "" - #, python-format msgid "%(info)s" msgstr "%(info)s" -msgid "modifying primary key is not allowed" -msgstr "" - #, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "" - -msgid "Already registered" -msgstr "" - -msgid "Not registered yet" -msgstr "" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, fuzzy, python-format -msgid "%(exception)s" +msgid "%(reason)s" msgstr "%(reason)s" #, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - -msgid "Additional instructions:" -msgstr "" +msgid "%s Record" +msgstr "%s レコード" #, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" +msgid "%s record" +msgstr "%s レコード" -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, fuzzy, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "%(server)s から未知のエラー %(code)d: %(error)s" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -#, python-format -msgid "%(count)d variables" -msgstr "" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" - -msgid "A dictionary representing an LDAP entry" -msgstr "" - -#, fuzzy -msgid "A list of LDAP entries" +msgid "A list of ACI values" msgstr "ACI 値の一覧" -msgid "All commands should at least have a result" -msgstr "" +msgid "ACI name" +msgstr "ACI 名" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "名前 \"%s\" の ACI が見つかりませんでした" + +msgid "ACIs" +msgstr "ACI" + +msgid "Account" +msgstr "アカウント" + +msgid "Account Status" +msgstr "アカウント状態" + +msgid "Add a new HBAC service group." +msgstr "新しい HBAC サービスグループを追加します。" + +msgid "Add a new HBAC service." +msgstr "新しい HBAC サービスを追加します。" + +msgid "Add a new host." +msgstr "新しいホストを追加します。" + +msgid "Add a new role." +msgstr "新しい役割を追加します。" + +msgid "Add a new user." +msgstr "新しいユーザーを追加します。" + +msgid "Add members to an HBAC service group." +msgstr "HBAC サービスグループにメンバーを追加します。" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Base64 形式のデコードに失敗: %(reason)s" + +msgid "Certificates" +msgstr "証明書" + +msgid "Command not implemented" +msgstr "コマンドが実装されていません" + +msgid "Create a new HBAC rule." +msgstr "新しい HBAC ルールを作成します。" + +msgid "Create a new group." +msgstr "新しいグループを作成します。" + +msgid "Default host group" +msgstr "標準のホストグループ" + +msgid "Default user group" +msgstr "標準のユーザーグループ" + +msgid "Delete a host." +msgstr "ホストを削除します。" + +msgid "Delete a role." +msgstr "役割を削除します。" + +msgid "Delete a user." +msgstr "ユーザーを削除します。" + +msgid "Delete an HBAC rule." +msgstr "HBAC ルールを削除します。" + +msgid "Delete an HBAC service group." +msgstr "HBAC サービスグループを削除します。" + +msgid "Delete an existing HBAC service." +msgstr "既存の HBAC サービスを削除します。" + +msgid "Delete group." +msgstr "グループを削除します。" + +msgid "Disable a user account." +msgstr "ユーザーアカウントを無効化します。" + +msgid "Disable an HBAC rule." +msgstr "HBAC ルールを無効化します。" + +msgid "Display information about a role." +msgstr "役割に関する情報を表示します。" + +msgid "Display information about an HBAC service group." +msgstr "HBAC サービスグループに関する情報を表示します。" + +msgid "Display information about an HBAC service." +msgstr "HBAC サービスに関する情報を表示します。" + +msgid "Display the properties of an HBAC rule." +msgstr "HBAC ルールのプロパティーを表示します。" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "${entity} の編集" + +msgid "Enable a user account." +msgstr "ユーザーアカウントを有効化します。" + +msgid "Enable an HBAC rule." +msgstr "HBAC ルールを有効化します。" #, python-format msgid "Enter %(label)s again to verify: " msgstr "確認のため再び %(label)s を入力してください: " -msgid "Passwords do not match!" -msgstr "パスワードが違います。" +msgid "Filter" +msgstr "フィルター" -msgid "No matching entries found" -msgstr "" +msgid "Fingerprint" +msgstr "フィンガープリント" -#, fuzzy -msgid "Topic or Command" -msgstr "sudo コマンド" - -msgid "The topic or command name." -msgstr "" - -#, fuzzy -msgid "Topic commands:" -msgstr "sudo コマンド" - -msgid "To get command help, use:" -msgstr "" - -msgid " ipa --help" -msgstr "" - -#, fuzzy -msgid "Command name" -msgstr "コマンドが実装されていません" - -msgid "Positional arguments" -msgstr "" +msgid "Fingerprint (SHA1)" +msgstr "フィンガープリント (SHA1)" #, python-format -msgid "Same as --%s" -msgstr "" +msgid "Group '%s' does not exist" +msgstr "グループ '%s' が存在しません" -#, fuzzy -msgid "Deprecated options" -msgstr "検索オプション" - -msgid "No file to read" -msgstr "" - -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - -#, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - -msgid "Filename is empty" -msgstr "" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "無効な SSH 公開鍵" - -msgid "options are not allowed" -msgstr "" - -#, fuzzy -msgid "invalid hostmask" -msgstr "無効なドメイン名: %s" - -#, fuzzy, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "%(server)s から未知のエラー %(code)d: %(error)s" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -#, fuzzy -msgid "invalid escape code in domain name" -msgstr "無効なドメイン名: %s" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -#, fuzzy -msgid "invalid domain name" -msgstr "無効なドメイン名: %s" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "無効なドメイン名: %s" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "incorrect type" -msgstr "" - -msgid "Only one value is allowed" -msgstr "" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "" - -msgid "must be an integer" -msgstr "整数である必要があります" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "少なくとも %(minvalue)d である必要があります" - -#, fuzzy, python-format -msgid "can be at most %(maxvalue)d" -msgstr "大きくても %(maxlength)d バイトである必要があります" - -#, fuzzy -msgid "must be a decimal number" -msgstr "整数である必要があります" - -#, fuzzy, python-format -msgid "must be at least %(minvalue)s" -msgstr "少なくとも %(minvalue)d である必要があります" - -#, fuzzy, python-format -msgid "can be at most %(maxvalue)s" -msgstr "大きくても %(maxlength)d バイトである必要があります" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "パターン \"%(pattern)s\" が一致する必要があります" - -msgid "must be binary data" -msgstr "バイナリーデータである必要があります" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "少なくとも %(minlength)d バイトである必要があります" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "大きくても %(maxlength)d バイトである必要があります" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "ちょうど %(length)d バイトである必要があります" - -#, fuzzy -msgid "must be a certificate" -msgstr "整数である必要があります" - -msgid "must be a certificate signing request" -msgstr "" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "Unicode テキストである必要があります" - -msgid "Leading and trailing spaces are not allowed" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "少なくとも %(minlength)d 文字である必要があります" - -#, fuzzy, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "大きくても %(maxlength)d バイトである必要があります" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "ちょうど %(length)d 文字である必要があります" - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "" - -#, fuzzy, python-format -msgid "must be '%(value)s'" -msgstr "少なくとも %(minvalue)d である必要があります" - -#, fuzzy, python-format -msgid "must be one of %(values)s" -msgstr "少なくとも %(minvalue)d である必要があります" - -#, fuzzy -msgid "must be datetime value" -msgstr "少なくとも %(minvalue)d である必要があります" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -#, fuzzy -msgid "must be DNS name" -msgstr "整数である必要があります" - -#, fuzzy -msgid "must be absolute" -msgstr "整数である必要があります" - -#, fuzzy -msgid "must be relative" -msgstr "整数である必要があります" - -#, fuzzy -msgid "must be dictionary" -msgstr "バイナリーデータである必要があります" - -msgid "must be Kerberos principal" -msgstr "" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -msgid "Service principal is required" -msgstr "" - -#, fuzzy -msgid "must be at least 0" -msgstr "少なくとも %(minvalue)d である必要があります" - -#, fuzzy -msgid "invalid valid hex" -msgstr "無効なドメイン名: %s" - -#, fuzzy -msgid "invalid serial number 0" -msgstr "無効なドメイン名: %s" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "" - -#, python-format -msgid "objectclass %s not found" -msgstr "" - -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -#, fuzzy -msgid "Unknown" -msgstr "未知のエラー" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "Failed to authenticate to CA REST API" -msgstr "" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "" - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -msgid "Automount Location" -msgstr "" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, fuzzy, python-format -msgid "key named %(key)s already exists" -msgstr "このエントリーはすでに存在します" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -#, fuzzy -msgid "Certificate Profile" -msgstr "証明書" - -#, fuzzy -msgid "Certificate Profiles" -msgstr "証明書" - -msgid "Profile configuration" -msgstr "" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -#, fuzzy -msgid "ACI" -msgstr "ACI" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" - -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Search for DNS servers." -msgstr "HBAC サービスを検索します。" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -#, fuzzy -msgid "Display configuration of a DNS server." -msgstr "HBAC サービスに関する情報を表示します。" - -#, fuzzy -msgid "Add a new DNS server." -msgstr "新しいユーザーを追加します。" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Delete a DNS server" -msgstr "ユーザーを削除します。" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "グループ" - -msgid "User Group" -msgstr "ユーザーグループ" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "グループを削除します。" - -#, fuzzy -msgid "privileged group" -msgstr "グループを削除します。" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -#, fuzzy -msgid "Not a managed group" -msgstr "新しいグループを作成します。" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "HBAC サービス" - -#, fuzzy -msgid "HBAC Services" -msgstr "HBAC サービス" +msgid "Group Options" +msgstr "グループオプション" msgid "HBAC Service" msgstr "HBAC サービス" -#, fuzzy, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "新しい HBAC サービスグループを追加します。" +msgid "HBAC Service Group" +msgstr "HBAC サービスグループ" -#, fuzzy, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "HBAC サービスグループを削除します。" - -#, fuzzy, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "HBAC サービスグループを変更します。" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" +msgid "HBAC Service Groups" +msgstr "HBAC サービスグループ" msgid "HBAC service group" msgstr "HBAC サービスグループ" @@ -13431,1925 +181,157 @@ msgstr "HBAC サービスグループ" msgid "HBAC service groups" msgstr "HBAC サービスグループ" -msgid "HBAC Service Groups" -msgstr "HBAC サービスグループ" +msgid "HBAC services" +msgstr "HBAC サービス" -msgid "HBAC Service Group" -msgstr "HBAC サービスグループ" +msgid "HTTP Error" +msgstr "HTTP エラー" -#, fuzzy, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "新しい HBAC サービスグループを追加します。" - -#, fuzzy, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "HBAC サービスグループを削除します。" - -#, fuzzy, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "HBAC サービスグループを変更します。" - -#, fuzzy, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "HBAC サービスグループ" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "host groups" -msgstr "ホストグループ" +msgid "Host" +msgstr "ホスト" msgid "Host Group" msgstr "ホストグループ" -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "" +msgid "IP Address" +msgstr "IP アドレス" + +msgid "IPA Error" +msgstr "IPA エラー" + +msgid "Internal Error" +msgstr "内部エラー" #, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "無効な JSON-RPC リクエスト: %(error)s" + +msgid "Kerberos Key" +msgstr "Kerberos キー" #, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Kerberos エラー: %(major)s/%(minor)s" -#, fuzzy -msgid "hostgroup" -msgstr "ホストグループ" +msgid "Member of a group" +msgstr "グループのメンバー" -#, fuzzy -msgid "privileged hostgroup" -msgstr "ホストグループ" +msgid "Modify a group." +msgstr "グループを変更します。" -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -#, fuzzy -msgid "Auto private groups" -msgstr "ホストグループ" - -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" - -#, fuzzy -msgid "" -"Modify ID range.\n" -"\n" +msgid "Modify a role." msgstr "役割を変更します。" -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "" - -#, fuzzy -msgid "locations" -msgstr "オプション" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -msgid "Location name" -msgstr "" - -msgid "IPA location name" -msgstr "" - -msgid "IPA Location description" -msgstr "" - -msgid "Servers" -msgstr "" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -#, fuzzy -msgid "Add a new IPA location." -msgstr "新しいホストを追加します。" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Delete an IPA location." -msgstr "HBAC ルールを削除します。" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "IPA Server" -msgstr "HBAC サービス" - -#, fuzzy -msgid "Modify information about an IPA location." -msgstr "役割に関する情報を表示します。" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Search for IPA locations." -msgstr "ホストを検索します。" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" - -#, fuzzy -msgid "Display information about an IPA location." -msgstr "役割に関する情報を表示します。" - -msgid "Servers in location" -msgstr "" - -#, fuzzy -msgid "netgroups" -msgstr "グループ" - -#, fuzzy -msgid "Netgroups" -msgstr "グループ" - -#, fuzzy -msgid "Netgroup" -msgstr "グループ" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -#, fuzzy -msgid "URI" -msgstr "URL" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" -msgstr "" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -#, fuzzy -msgid "invalid attribute name" -msgstr "無効なドメイン名: %s" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "roles" -msgstr "役割" - -msgid "Role" -msgstr "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -#, fuzzy -msgid "Self Service Permissions" -msgstr "権限" - -msgid "Self Service Permission" -msgstr "" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -#, fuzzy -msgid "server roles" -msgstr "役割を検索します。" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "IPA role name" -msgstr "" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -#, fuzzy -msgid "Remove member from a named service delegation." -msgstr "HBAC サービスグループからメンバーを削除します。" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -#, fuzzy -msgid "Subordinate id description" -msgstr "グループオプション" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -msgid "SubUID range size" -msgstr "" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -msgid "SubGID range size" -msgstr "" - -msgid "Subordinate group ID count" -msgstr "" - -#, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "" - -#, python-format -msgid "'%(dn)s is not a valid user" -msgstr "" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -#, fuzzy -msgid "Add a new subordinate id." -msgstr "新しいユーザーを追加します。" - -#, fuzzy, python-format -msgid "Added subordinate id \"%(value)s\"" -msgstr "sudo コマンド" - -#, fuzzy -msgid "Delete a subordinate id." -msgstr "HBAC サービスグループを削除します。" - -#, fuzzy, python-format -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "HBAC サービスグループを削除します。" - -#, fuzzy -msgid "Modify a subordinate id." +msgid "Modify a user." msgstr "ユーザーを変更します。" -#, fuzzy, python-format -msgid "Modified subordinate id \"%(value)s\"" +msgid "Modify an HBAC rule." +msgstr "HBAC ルールを変更します。" + +msgid "Modify an HBAC service group." msgstr "HBAC サービスグループを変更します。" -#, fuzzy -msgid "Search for subordinate id." +msgid "Modify an HBAC service." +msgstr "HBAC サービスを変更します。" + +msgid "Options" +msgstr "オプション" + +msgid "Out of memory\n" +msgstr "メモリー不足\n" + +msgid "Out of memory!?\n" +msgstr "メモリー不足!?\n" + +msgid "Password Policies" +msgstr "パスワードポリシー" + +msgid "Passwords do not match" +msgstr "パスワードが違います" + +msgid "Passwords do not match!" +msgstr "パスワードが違います。" + +msgid "Permissions" +msgstr "権限" + +msgid "Port" +msgstr "ポート" + +msgid "Refresh" +msgstr "更新" + +msgid "Remove members from an HBAC service group." +msgstr "HBAC サービスグループからメンバーを削除します。" + +msgid "Reset OTP" +msgstr "OTP のリセット" + +msgid "Rules" +msgstr "ルール" + +msgid "Search Options" +msgstr "検索オプション" + +msgid "Search for HBAC rules." +msgstr "HBAC ルールを検索します。" + +msgid "Search for HBAC services." +msgstr "HBAC サービスを検索します。" + +msgid "Search for an HBAC service group." +msgstr "HBAC サービスグループを検索します。" + +msgid "Search for groups." +msgstr "グループを検索します。" + +msgid "Search for hosts." +msgstr "ホストを検索します。" + +msgid "Search for roles." msgstr "役割を検索します。" -#, fuzzy, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "HBAC サービスグループ" +msgid "Set" +msgstr "設定" -#, fuzzy -msgid "Display information about a subordinate id." -msgstr "役割に関する情報を表示します。" - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -msgid "sudo command" -msgstr "sudo コマンド" - -msgid "sudo commands" +msgid "Sudo Command" msgstr "sudo コマンド" msgid "Sudo Commands" msgstr "sudo コマンド" -#, fuzzy, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "sudo コマンド" +msgid "Sudo Rule" +msgstr "sudo ルール" -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" +msgid "Sudo Rules" +msgstr "sudo ルール" -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" +msgid "Text Data" +msgstr "テキストデータ" -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" +msgid "This entry already exists" +msgstr "このエントリーはすでに存在します" -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" +msgid "URL" +msgstr "URL" -#, fuzzy -msgid "sudo command group" -msgstr "sudo コマンド" +msgid "Unknown Error" +msgstr "未知のエラー" -#, fuzzy -msgid "sudo command groups" -msgstr "sudo コマンド" +msgid "User Group" +msgstr "ユーザーグループ" -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" +msgid "User Options" +msgstr "ユーザーオプション" -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" +msgid "User group" +msgstr "ユーザーグループ" -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" +msgid "Validation error" +msgstr "検証エラー" -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"IPA servers\n" -msgstr "HBAC サービス" - -#, fuzzy -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "HBAC サービスに関する情報を表示します。" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -#, fuzzy -msgid "servers" -msgstr "HBAC サービス" - -#, fuzzy -msgid "IPA Servers" -msgstr "HBAC サービス" - -msgid "Server location" -msgstr "" - -msgid "Service weight" -msgstr "" - -#, fuzzy -msgid "Weight for server services" -msgstr "HBAC サービスを検索します。" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -#, fuzzy -msgid "Modify information about an IPA server." -msgstr "HBAC サービスに関する情報を表示します。" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -msgid "Server state" -msgstr "" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "A list of ACI values" -msgstr "ACI 値の一覧" - -#, fuzzy -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" -"少なくとも type, filter, subtree, targetgroup, attrs または memberof のどれか" -"が必要です" - -msgid "ACI prefix is required" -msgstr "" +msgid "an internal error has occurred" +msgstr "内部エラーが発生しました" msgid "" "at least one of: type, filter, subtree, targetgroup, attrs or memberof are " @@ -15358,9182 +340,98 @@ msgstr "" "少なくとも type, filter, subtree, targetgroup, attrs または memberof のどれか" "が必要です" -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - #, python-format -msgid "Group '%s' does not exist" -msgstr "グループ '%s' が存在しません" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "名前 \"%s\" の ACI が見つかりませんでした" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "ACI" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "ACI 値の一覧" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, fuzzy, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "名前 \"%s\" の ACI が見つかりませんでした" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Auto member rule: %s not found!" -msgstr "名前 \"%s\" の ACI が見つかりませんでした" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "HBAC ルールを検索します。" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" - -#, fuzzy -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "役割に関する情報を表示します。" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "HBAC サービスグループに関する情報を表示します。" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -#, fuzzy -msgid "Member service groups" -msgstr "HBAC サービスグループ" - -#, fuzzy -msgid "Member HBAC service groups" -msgstr "HBAC サービスグループ" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -#, fuzzy -msgid "Indirect Member HBAC service" -msgstr "HBAC サービスを検索します。" - -#, fuzzy -msgid "Indirect Member HBAC service group" -msgstr "HBAC サービスグループにメンバーを追加します。" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Permissions\n" -msgstr "権限" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Managed permissions\n" -msgstr "権限" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -#, fuzzy -msgid "must be enclosed in parentheses" -msgstr "整数である必要があります" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, python-format -msgid "Deprecated; use %s" -msgstr "" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, fuzzy, python-format -msgid "Entry %s not found" -msgstr "名前 \"%s\" の ACI が見つかりませんでした" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, fuzzy, python-format -msgid "Entry %s does not exist" -msgstr "グループ '%s' が存在しません" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "" - -msgid "cannot delete managed permissions" -msgstr "" - -#, fuzzy, python-format -msgid "ACI of permission %s was not found" -msgstr "名前 \"%s\" の ACI が見つかりませんでした" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -msgid "Help topic" -msgstr "" - -#, fuzzy -msgid "Version" -msgstr "権限" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -msgid "Method name" -msgstr "" - -#, fuzzy -msgid "Display information about a command." -msgstr "役割に関する情報を表示します。" - -#, fuzzy -msgid "Search for commands." -msgstr "ホストを検索します。" - -msgid "Return command defaults" -msgstr "" - -#, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "" - -#, fuzzy -msgid "Display information about a class." -msgstr "役割に関する情報を表示します。" - -#, fuzzy -msgid "Search for classes." -msgstr "役割を検索します。" - -#, fuzzy -msgid "Display information about a help topic." -msgstr "役割に関する情報を表示します。" - -#, fuzzy -msgid "Search for help topics." -msgstr "ホストを検索します。" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "ACI 名" - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -#, fuzzy -msgid "Default from" -msgstr "標準のホストグループ" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -#, fuzzy -msgid "Option group" -msgstr "ホストグループ" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -#, fuzzy -msgid "Display information about a command parameter." -msgstr "役割に関する情報を表示します。" - -#, fuzzy -msgid "Search command parameters." -msgstr "役割を検索します。" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -#, fuzzy -msgid "Display information about a command output." -msgstr "役割に関する情報を表示します。" - -#, fuzzy -msgid "Search for command outputs." -msgstr "グループを検索します。" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "Trust direction" -msgstr "" - -msgid "Trust type" -msgstr "" - -#, fuzzy -msgid "Trust status" -msgstr "アカウント状態" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" - -msgid "trust configuration" -msgstr "" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -msgid "Vault configuration" -msgstr "" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -msgid "Key wrapping algorithm" -msgstr "" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." -msgstr "" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "Principal alias" -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -#, fuzzy -msgid "External IdP configuration" -msgstr "グループを変更します。" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -#, fuzzy -msgid "Certificate mapping data" -msgstr "証明書" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -#, fuzzy, python-format -msgid "can be at most %(len)d characters" +msgid "can be at most %(maxlength)d bytes" msgstr "大きくても %(maxlength)d バイトである必要があります" -msgid "Issuer" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, fuzzy, python-format -msgid "%i users or groups added." -msgstr "グループを検索します。" - -msgid "users cannot be added when user category='all'" -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "" - -#, python-format -msgid "%i services added." -msgstr "" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" - -#, fuzzy -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "HBAC サービスグループに関する情報を表示します。" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -#, fuzzy -msgid "User logins" -msgstr "ユーザーオプション" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -#, fuzzy -msgid "must be at least 10" -msgstr "少なくとも %(minvalue)d である必要があります" - -msgid "configuration options" -msgstr "" - -msgid "Configuration" -msgstr "" - -msgid "Maximum hostname length" -msgstr "" - -msgid "Enable adding subids to new users" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -#, fuzzy -msgid "IPA CA servers" -msgstr "HBAC サービス" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -msgid "IPA DNS servers" -msgstr "" - -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -#, fuzzy -msgid "Setup SID configuration" -msgstr "グループを変更します。" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -#, fuzzy -msgid "Add SIDs" -msgstr "新しいホストを追加します。" - -msgid "Add SIDs for existing users and groups" -msgstr "" - -msgid "NetBIOS name of the IPA domain" -msgstr "" - -msgid "Empty domain is not allowed" -msgstr "" - -#, fuzzy, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "無効なドメイン名: %s" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "not allowed to enable SID generation" -msgstr "" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -msgid "Failed to call DBus" -msgstr "" - -msgid "Configuration of SID failed. See details in the error log" -msgstr "" - -#, fuzzy -msgid "The group doesn't exist" -msgstr "グループ '%s' が存在しません" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -#, fuzzy -msgid "invalid domain-name: not fully qualified" -msgstr "無効なドメイン名: %s" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "%s レコード" - -#, fuzzy, python-format -msgid "Raw %s records" -msgstr "%s レコード" - -#, python-format -msgid "%s Record" -msgstr "%s レコード" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -msgid "Priority (order)" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -msgid "Only one zone type is allowed per zone name" -msgstr "" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "このエントリーはすでに存在します" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -msgid "Default time to live" -msgstr "" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "is required" -msgstr "%s レコード" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -msgid "DNS configuration options" -msgstr "" - -msgid "DNS Global Configuration" -msgstr "" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -#, fuzzy -msgid "Result of the command" -msgstr "sudo コマンド" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -#, fuzzy -msgid "HBAC rules" -msgstr "HBAC サービス" - -#, fuzzy -msgid "HBAC Rules" -msgstr "ルール" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "HBAC ルールを削除します。" - -#, fuzzy, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "HBAC ルールを変更します。" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" - -#, fuzzy, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "HBAC ルールを有効化します。" - -#, fuzzy, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "HBAC ルールを無効化します。" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host" -msgstr "ホスト" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "Serial Number" -msgstr "" - -msgid "Serial Number (hex)" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "フィンガープリント (SHA1)" - -#, fuzzy -msgid "Fingerprint (SHA256)" -msgstr "フィンガープリント (SHA1)" - -msgid "Revocation reason" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" - -msgid "Invalid URI: not an https scheme" -msgstr "" - -msgid "Invalid URI: missing netloc" -msgstr "" - -msgid "Identity Provider server" -msgstr "" - -msgid "Identity Provider servers" -msgstr "" - -msgid "Identity Provider server name" -msgstr "" - -msgid "Authorization URI" -msgstr "" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -msgid "Token URI" -msgstr "" - -msgid "Token endpoint" -msgstr "" - -#, fuzzy -msgid "User info URI" -msgstr "ユーザーオプション" - -msgid "User information endpoint" -msgstr "" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -msgid "Client identifier" -msgstr "" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -#, fuzzy -msgid "Add a new Identity Provider server." -msgstr "新しい HBAC サービスを追加します。" - -#, fuzzy, python-format -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "新しい HBAC サービスグループを追加します。" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -msgid "Base URL" -msgstr "" - -msgid "Base URL for IdP provider templates" -msgstr "" - -#, fuzzy -#| msgid "Unknown Error" -msgid "unknown provider" -msgstr "未知のエラー" - -msgid "value is missing" -msgstr "" - -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "" - -#, fuzzy -msgid "Delete an Identity Provider server." -msgstr "HBAC サービスグループを削除します。" - -#, fuzzy, python-format -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "HBAC サービスグループを削除します。" - -#, fuzzy -msgid "Modify an Identity Provider server." -msgstr "HBAC サービスを変更します。" - -#, fuzzy, python-format -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "HBAC サービスグループを変更します。" - -#, fuzzy -msgid "Search for Identity Provider servers." -msgstr "HBAC サービスを検索します。" - -#, fuzzy, python-format -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "HBAC サービスグループ" - -#, fuzzy -msgid "Display information about an Identity Provider server." -msgstr "HBAC サービスに関する情報を表示します。" - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Apply" -msgstr "" - -msgid "Rebuild auto membership" -msgstr "" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -#, fuzzy -msgid "Actions" -msgstr "オプション" - -msgid "Add" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -msgid "Direct Membership" -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -msgid "No entries." -msgstr "" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -msgid "Remove" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -msgid "Show Results" -msgstr "" - -msgid "Authentication indicators" -msgstr "" - -msgid "Authentication indicator" -msgstr "" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -msgid "RADIUS" -msgstr "" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "External Identity Provider" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "" - -msgid "Activate" -msgstr "" - -msgid "Add and Add Another" -msgstr "" - -#, fuzzy -msgid "Add and Close" -msgstr "新しいホストを追加します。" - -msgid "Add and Edit" -msgstr "" - -msgid "Add Many" -msgstr "" - -msgid "Back" -msgstr "" - -msgid "Cancel" -msgstr "" - -msgid "Clear" -msgstr "" - -msgid "Clear all fields on the page." -msgstr "" - -msgid "Close" -msgstr "" - -msgid "Disable" -msgstr "" - -msgid "Download" -msgstr "" - -msgid "Download certificate as PEM formatted file." -msgstr "" - -msgid "Edit" -msgstr "" - -msgid "Enable" -msgstr "" - -msgid "Find" -msgstr "" - -#, fuzzy -msgid "Get" -msgstr "設定" - -msgid "Hide" -msgstr "" - -msgid "Issue" -msgstr "" - -msgid "Match" -msgstr "" - -msgid "Match users according to certificate." -msgstr "" - -msgid "Migrate" -msgstr "" - -msgid "OK" -msgstr "" - -msgid "Refresh" -msgstr "更新" - -msgid "Reload current settings from the server." -msgstr "" - -#, fuzzy -msgid "Delete" -msgstr "グループを削除します。" - -msgid "Remove hold" -msgstr "" - -#, fuzzy -msgid "Reset" -msgstr "OTP のリセット" - -#, fuzzy -msgid "Reset Password" -msgstr "OTP のリセット" - -msgid "Reset Password and Log in" -msgstr "" - -msgid "Restore" -msgstr "" - -msgid "Retry" -msgstr "" - -msgid "Revert" -msgstr "" - -msgid "Revoke" -msgstr "" - -msgid "Save" -msgstr "" - -msgid "Set" -msgstr "設定" - -msgid "Show" -msgstr "" - -msgid "Stage" -msgstr "" - -msgid "Update" -msgstr "" - -msgid "View" -msgstr "" - -msgid "Customization" -msgstr "" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "" - -msgid "Expand All" -msgstr "" - -msgid "General" -msgstr "" - -msgid "Identity Settings" -msgstr "" - -msgid "Record Settings" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -msgid "Back to Top" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -#, fuzzy -msgid "Add custom value" -msgstr "ACI 値の一覧" - -msgid "Available" -msgstr "" - -msgid "Some operations failed." -msgstr "" - -#, fuzzy -msgid "Operations Error" -msgstr "検証エラー" - -msgid "Confirmation" -msgstr "" - -msgid "Custom value" -msgstr "" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -msgid "Unsaved Changes" -msgstr "" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "${entity} の編集" - -msgid "Hide details" -msgstr "" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -msgid "Redirection" -msgstr "" - -msgid "Select entries to be removed." -msgstr "" - -msgid "Result" -msgstr "" - -msgid "Show details" -msgstr "" - -msgid "Success" -msgstr "" - -msgid "Validation error" -msgstr "検証エラー" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, fuzzy, python-brace-format -msgid "An error has occurred (${error})" -msgstr "内部エラーが発生しました" - -msgid "HTTP Error" -msgstr "HTTP エラー" - -msgid "Internal Error" -msgstr "内部エラー" - -msgid "IPA Error" -msgstr "IPA エラー" - -msgid "No response" -msgstr "" - -msgid "Unknown Error" -msgstr "未知のエラー" - -msgid "URL" -msgstr "URL" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -msgid "Settings" -msgstr "" - -#, fuzzy -msgid "Search" -msgstr "検索オプション" - -msgid "False" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Allowed to create keytab" -msgstr "" - -msgid "Allowed to retrieve keytab" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Add Kerberos Principal Alias" -msgstr "" - -msgid "New kerberos principal alias" -msgstr "" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "" - -msgid "Authenticating" -msgstr "" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -msgid "Kerberos Principal you entered is expired" -msgstr "" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -#, fuzzy -msgid "Log In Using Certificate" -msgstr "証明書" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "" - -msgid "Synchronizing" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -msgid "number of passwords" -msgstr "" - -msgid "seconds" -msgstr "" - -msgid "Migrating" -msgstr "" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -msgid "Password migration was not successful" -msgstr "" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -msgid "Password migration was successful" -msgstr "" - -msgid "Attribute" -msgstr "" - -msgid "Add delegation" -msgstr "" - -msgid "Remove delegations" -msgstr "" - -#, fuzzy -msgid "Add permission" -msgstr "権限" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove permissions" -msgstr "権限" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -msgid "Remove privileges" -msgstr "" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -msgid "Role Settings" -msgstr "" - -#, fuzzy -msgid "Add role" -msgstr "新しい役割を追加します。" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -msgid "Remove roles" -msgstr "" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -msgid "Add self service permission" -msgstr "" - -msgid "Remove self service permissions" -msgstr "" - -#, fuzzy -msgid "Add rule" -msgstr "sudo ルール" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to change default group?" -msgstr "" - -msgid "Default host group" -msgstr "標準のホストグループ" - -msgid "Default user group" -msgstr "標準のユーザーグループ" - -msgid "Exclusive" -msgstr "" - -msgid "Expression" -msgstr "" - -#, fuzzy -msgid "Host group rule" -msgstr "ホストグループ" - -#, fuzzy -msgid "Host group rules" -msgstr "ホストグループ" - -msgid "Inclusive" -msgstr "" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "User group rule" -msgstr "ユーザーグループ" - -#, fuzzy -msgid "User group rules" -msgstr "ユーザーグループ" - -msgid "Add automount key" -msgstr "" - -msgid "Remove automount keys" -msgstr "" - -msgid "Add automount location" -msgstr "" - -msgid "Automount Location Settings" -msgstr "" - -msgid "Remove automount locations" -msgstr "" - -msgid "Add automount map" -msgstr "" - -msgid "Map Type" -msgstr "" - -msgid "Direct" -msgstr "" - -msgid "Indirect" -msgstr "" - -msgid "Remove automount maps" -msgstr "" - -msgid "Add certificate authority" -msgstr "" - -msgid "Remove certificate authorities" -msgstr "" - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -msgid "All" -msgstr "" - -msgid "Any CA" -msgstr "" - -#, fuzzy -msgid "Any Host" -msgstr "ホスト" - -#, fuzzy -msgid "Any Service" -msgstr "HBAC サービス" - -msgid "Any Profile" -msgstr "" - -msgid "Anyone" -msgstr "" - -#, fuzzy -msgid "Rule status" -msgstr "ルール" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -msgid "Remove CA ACLs" -msgstr "" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -msgid "Specified CAs" -msgstr "" - -msgid "Specified Hosts and Groups" -msgstr "" - -msgid "Specified Profiles" -msgstr "" - -#, fuzzy -msgid "Specified Services and Groups" -msgstr "HBAC サービスグループ" - -msgid "Specified Users and Groups" -msgstr "" - -msgid "Permitted to have certificates issued" -msgstr "" - -msgid "Remove certificate profiles" -msgstr "" - -msgid "AA Compromise" -msgstr "" - -msgid "Add principal" -msgstr "" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" - -msgid "Certificates" -msgstr "証明書" - -#, fuzzy -msgid "Certificate Hold" -msgstr "証明書" - -msgid "Cessation of Operation" -msgstr "" - -msgid "Common Name" -msgstr "" - -msgid "the certificate with serial number " -msgstr "" - -msgid "Expires On" -msgstr "" - -msgid "Issued on from" -msgstr "" - -msgid "Issued on to" -msgstr "" - -msgid "Maximum serial number" -msgstr "" - -msgid "Minimum serial number" -msgstr "" - -msgid "Revoked on from" -msgstr "" - -msgid "Revoked on to" -msgstr "" - -#, fuzzy -msgid "Valid not after from" -msgstr "検証エラー" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -#, fuzzy -msgid "Fingerprints" -msgstr "フィンガープリント" - -#, fuzzy -msgid "Get Certificate" -msgstr "証明書" - -#, fuzzy -msgid "Certificate Hold Removed" -msgstr "証明書" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Issue new certificate" -msgstr "証明書" - -msgid "Issued By" -msgstr "" - -msgid "Issued On" -msgstr "" - -msgid "Issued To" -msgstr "" - -msgid "Key Compromise" -msgstr "" - -#, fuzzy -msgid "No Valid Certificate" -msgstr "証明書" - -#, fuzzy -msgid "New Certificate" -msgstr "証明書" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -msgid "Note" -msgstr "" - -msgid "Organizational Unit" -msgstr "" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -msgid "Privilege Withdrawn" -msgstr "" - -msgid "Reason for Revocation" -msgstr "" - -msgid "Remove certificate hold" -msgstr "" - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -#, fuzzy -msgid "Certificate requested" -msgstr "証明書" - -#, fuzzy -msgid "Revoke certificate" -msgstr "証明書" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -#, fuzzy -msgid "Certificate Revoked" -msgstr "証明書" - -msgid "REVOKED" -msgstr "" - -#, fuzzy -msgid "SHA1 Fingerprint" -msgstr "フィンガープリント" - -#, fuzzy -msgid "SHA256 Fingerprint" -msgstr "フィンガープリント" - -#, fuzzy -msgid "Status" -msgstr "アカウント状態" - -msgid "Superseded" -msgstr "" - -msgid "Unspecified" -msgstr "" - -#, fuzzy -msgid "Valid Certificate Present" -msgstr "証明書" - -#, fuzzy -msgid "Valid from" -msgstr "検証エラー" - -msgid "Valid to" -msgstr "" - -msgid "Validity" -msgstr "" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -#, fuzzy -msgid "View Certificate" -msgstr "証明書" - -#, fuzzy -msgid "Certificate Data" -msgstr "証明書" - -#, fuzzy -msgid "Certificate For Match" -msgstr "証明書" - -msgid "Certificate Mapping Match" -msgstr "" - -msgid "Matched Users" -msgstr "" - -#, fuzzy -msgid "User Login" -msgstr "ユーザーオプション" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -msgid "Configuration string" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -msgid "Remove certificate mapping data" -msgstr "" - -msgid "Issuer and subject" -msgstr "" - -msgid "Remove certificate identity mapping rules" -msgstr "" - -msgid "Group Options" -msgstr "グループオプション" - -msgid "Search Options" -msgstr "検索オプション" - -#, fuzzy -msgid "SELinux Options" -msgstr "グループオプション" - -#, fuzzy -msgid "Server Options" -msgstr "検索オプション" - -#, fuzzy -msgid "Service Options" -msgstr "検索オプション" - -msgid "User Options" -msgstr "ユーザーオプション" - -msgid "Forward first" -msgstr "" - -msgid "Forwarding disabled" -msgstr "" - -msgid "Forward only" -msgstr "" - -msgid "Options" -msgstr "オプション" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -msgid "Other Record Types" -msgstr "" - -msgid "Address not valid, can't redirect" -msgstr "" - -#, fuzzy -msgid "Create dns record" -msgstr "%s レコード" - -msgid "Creating record." -msgstr "" - -msgid "Record creation failed." -msgstr "" - -msgid "Checking if record exists." -msgstr "" - -msgid "Record not found." -msgstr "" - -msgid "Redirection to PTR record" -msgstr "" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -msgid "Target reverse zone not found." -msgstr "" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -msgid "Standard Record Types" -msgstr "" - -msgid "Records for DNS Zone" -msgstr "" - -#, fuzzy -msgid "Record Type" -msgstr "%s レコード" - -msgid "Add DNS zone" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -msgid "DNS Zone Settings" -msgstr "" - -msgid "Remove DNS zones" -msgstr "" - -#, fuzzy -msgid "Remove Permission" -msgstr "権限" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Level" -msgstr "" - -msgid "Set Domain Level" -msgstr "" - -#, fuzzy -msgid "Add user group" -msgstr "ユーザーグループ" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Group Settings" -msgstr "グループオプション" - -msgid "External" -msgstr "" - -#, fuzzy -msgid "Groups" +msgid "group" msgstr "グループ" -#, fuzzy -msgid "Group categories" -msgstr "グループオプション" +msgid "groups" +msgstr "グループ" -msgid "Change to external group" -msgstr "" - -msgid "Change to POSIX group" -msgstr "" - -msgid "Non-POSIX" -msgstr "" - -msgid "POSIX" -msgstr "" - -#, fuzzy -msgid "Remove user groups" -msgstr "標準のユーザーグループ" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Group Type" -msgstr "グループオプション" - -#, fuzzy -msgid "Add HBAC rule" -msgstr "HBAC ルールを変更します。" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -msgid "Accessing" -msgstr "" - -#, fuzzy -msgid "Remove HBAC rules" -msgstr "HBAC ルールを検索します。" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Via Service" -msgstr "HBAC サービス" - -msgid "Who" -msgstr "" - -#, fuzzy -msgid "Add HBAC service" -msgstr "HBAC サービス" - -#, fuzzy, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "HBAC サービスグループにメンバーを追加します。" - -#, fuzzy -msgid "Remove HBAC services" -msgstr "HBAC サービス" - -#, fuzzy, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "HBAC サービスグループからメンバーを削除します。" - -#, fuzzy -msgid "Add HBAC service group" -msgstr "HBAC サービスグループ" - -#, fuzzy, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "HBAC サービスグループにメンバーを追加します。" - -#, fuzzy -msgid "Remove HBAC service groups" -msgstr "HBAC サービスグループ" - -#, fuzzy, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "HBAC サービスグループからメンバーを削除します。" - -msgid "Access Denied" -msgstr "" - -msgid "Access Granted" -msgstr "" - -msgid "Include Disabled" -msgstr "" - -msgid "Include Enabled" -msgstr "" - -#, fuzzy -msgid "HBAC Test" -msgstr "HBAC サービス" - -msgid "Matched" -msgstr "" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" - -msgid "Rules" -msgstr "ルール" - -msgid "Run Test" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Specify external ${entity}" -msgstr "${entity} の編集" - -msgid "Unmatched" -msgstr "" - -#, fuzzy -msgid "Add host" -msgstr "新しいホストを追加します。" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -#, fuzzy -msgid "Host Certificate" -msgstr "証明書" - -#, fuzzy -msgid "Host Name" +msgid "host" msgstr "ホスト" -msgid "Delete Key, Unprovision" -msgstr "" - -msgid "Host Settings" -msgstr "" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -#, fuzzy -msgid "Generate OTP" -msgstr "OTP のリセット" - -#, fuzzy -msgid "Generated OTP" -msgstr "OTP のリセット" - -msgid "Kerberos Key" -msgstr "Kerberos キー" - -#, fuzzy -msgid "Kerberos Key Not Present" -msgstr "Kerberos キー" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -msgid "One-Time Password" -msgstr "" - -msgid "One-Time Password Not Present" -msgstr "" - -msgid "One-Time Password Present" -msgstr "" - -msgid "Reset OTP" -msgstr "OTP のリセット" - -msgid "Reset One-Time Password" -msgstr "" - -#, fuzzy -msgid "Set OTP" -msgstr "OTP のリセット" - -msgid "OTP set" -msgstr "" - -msgid "Set One-Time Password" -msgstr "" - -msgid "Remove hosts" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -msgid "Unprovision" -msgstr "" - -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -#, fuzzy -msgid "Add host group" +msgid "host group" msgstr "ホストグループ" -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Host Group Settings" +msgid "host groups" msgstr "ホストグループ" -#, fuzzy -msgid "Remove host groups" -msgstr "ホストグループ" +msgid "hosts" +msgstr "ホスト" -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -msgid "Identity provider details" -msgstr "" - -msgid "Verify secret" -msgstr "" - -msgid "User to override" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -msgid "Profile" -msgstr "" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -msgid "Enter trusted group name." -msgstr "" - -msgid "Add ID view" -msgstr "" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -#, fuzzy -msgid "Apply to host groups" -msgstr "ホストグループ" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -msgid "Remove ID views" -msgstr "" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -#, fuzzy -msgid "Un-apply from host groups" -msgstr "ホストグループ" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -msgid "Un-apply" -msgstr "" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -#, fuzzy -msgid "Kerberos Ticket Policy" -msgstr "Kerberos キー" - -msgid "Add netgroup" -msgstr "" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Netgroup Settings" -msgstr "グループオプション" - -msgid "Remove netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -msgid "Add OTP token" -msgstr "" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -msgid "Configure your token" -msgstr "" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -msgid "OTP Token Settings" -msgstr "" - -msgid "Disable token" -msgstr "" - -msgid "Enable token" -msgstr "" - -msgid "Remove OTP tokens" -msgstr "" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "" - -msgid "Show configuration uri" -msgstr "" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -msgid "Add Custom Attribute" -msgstr "" - -#, fuzzy -msgid "Permission settings" -msgstr "権限" - -msgid "Attribute breakdown" -msgstr "" - -msgid "Privilege Settings" -msgstr "" - -msgid "Public key:" -msgstr "" - -#, fuzzy -msgid "Set public key" +msgid "invalid SSH public key" msgstr "無効な SSH 公開鍵" -msgid "Show/Set key" -msgstr "" +#, python-format +msgid "invalid domain-name: %s" +msgstr "無効なドメイン名: %s" -msgid "Modified: key not set" -msgstr "" +msgid "must be Unicode text" +msgstr "Unicode テキストである必要があります" -msgid "Modified" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -#, fuzzy -msgid "Add password policy" -msgstr "パスワードポリシー" - -#, fuzzy -msgid "Password Policy" -msgstr "パスワードポリシー" - -#, fuzzy -msgid "Remove password policies" -msgstr "パスワードポリシー" - -msgid "Add ID range" -msgstr "" - -msgid "Range Settings" -msgstr "" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -msgid "Domain SID" -msgstr "" - -msgid "Secondary RID base" -msgstr "" - -msgid "Remove ID ranges" -msgstr "" - -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -msgid "Detect" -msgstr "" - -msgid "Local domain" -msgstr "" - -msgid "IPA trust" -msgstr "" - -msgid "Active Directory winsync" -msgstr "" - -msgid "Add RADIUS server" -msgstr "" - -msgid "RADIUS Proxy Server Settings" -msgstr "" - -msgid "Remove RADIUS servers" -msgstr "" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -msgid "Force Update" -msgstr "" - -msgid "Add SELinux user map" -msgstr "" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Server Roles" -msgstr "役割を検索します。" - -msgid "Server Role" -msgstr "" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -#, fuzzy -msgid "Delete Server" -msgstr "役割を削除します。" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -#, fuzzy -msgid "Add service" -msgstr "HBAC サービス" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -#, fuzzy -msgid "Service Certificate" -msgstr "証明書" - -msgid "Service Settings" -msgstr "" - -#, fuzzy -msgid "Provisioning" -msgstr "権限" - -#, fuzzy -msgid "Remove services" -msgstr "HBAC サービス" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -msgid "Unprovisioning service" -msgstr "" - -msgid "Service unprovisioned" -msgstr "" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "" - -#, fuzzy -msgid "SSH public keys" -msgstr "無効な SSH 公開鍵" - -#, fuzzy -msgid "SSH public key:" -msgstr "無効な SSH 公開鍵" - -msgid "Set SSH key" -msgstr "" - -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" - -#, fuzzy -msgid "Add stage user" -msgstr "新しいユーザーを追加します。" - -#, fuzzy -msgid "Stage users" -msgstr "ユーザー" - -msgid "Preserved users" -msgstr "" - -msgid "Remove preserved users" -msgstr "" - -msgid "Remove stage users" -msgstr "" - -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -msgid "User categories" -msgstr "" - -#, fuzzy -msgid "Add subid" -msgstr "sudo ルール" - -msgid "Assigned subids" -msgstr "" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -#, fuzzy -msgid "Add sudo command" -msgstr "sudo コマンド" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -#, fuzzy -msgid "Remove sudo commands" -msgstr "sudo コマンド" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -#, fuzzy -msgid "Add sudo command group" -msgstr "sudo コマンド" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove sudo command groups" -msgstr "sudo コマンド" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add sudo rule" -msgstr "sudo ルール" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "" - -#, fuzzy -msgid "Any Command" -msgstr "sudo コマンド" - -#, fuzzy -msgid "Any Group" -msgstr "ホストグループ" - -#, fuzzy -msgid "Run Commands" -msgstr "sudo コマンド" - -msgid "Deny" -msgstr "" - -msgid "Access this host" -msgstr "" - -#, fuzzy -msgid "Option added" -msgstr "オプション" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -#, fuzzy -msgid "Remove sudo rules" -msgstr "sudo ルール" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -msgid "Specified Commands and Groups" -msgstr "" - -#, fuzzy -msgid "Specified Groups" -msgstr "HBAC サービスグループ" - -msgid "Remove sudo options" -msgstr "" - -msgid "Autogenerated" -msgstr "" - -msgid "Segment details" -msgstr "" - -msgid "Replication configuration" -msgstr "" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -msgid "Account" -msgstr "アカウント" - -msgid "Add trust" -msgstr "" - -msgid "Administrative account" -msgstr "" - -msgid "SID blocklists" -msgstr "" - -msgid "Trust Settings" -msgstr "" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -msgid "Pre-shared password" -msgstr "" - -msgid "Remove trusts" -msgstr "" - -msgid "Remove domains" -msgstr "" - -msgid "Alternative UPN suffixes" -msgstr "" - -#, fuzzy -msgid "User attributes for SMB services" -msgstr "HBAC サービスを検索します。" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - -#, fuzzy -msgid "Account Settings" -msgstr "アカウント状態" - -msgid "Account Status" -msgstr "アカウント状態" - -msgid "Active users" -msgstr "" - -#, fuzzy -msgid "Add user" -msgstr "新しいユーザーを追加します。" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -msgid "Auto assign subordinate ids" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "" - -msgid "Contact Settings" -msgstr "" - -#, fuzzy -msgid "Delete mode" -msgstr "役割を削除します。" - -msgid "Employee Information" -msgstr "" - -msgid "Error changing account status" -msgstr "" - -#, fuzzy -msgid "Password expiration" -msgstr "パスワードポリシー" - -#, fuzzy -msgid "Mailing Address" -msgstr "IP アドレス" - -msgid "Misc. Information" -msgstr "" - -msgid "delete" -msgstr "" - -msgid "preserve" -msgstr "" - -#, fuzzy -msgid "No private group" -msgstr "ホストグループ" - -msgid "Remove users" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Unlock" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -msgid "Members" -msgstr "" - -msgid "My User Vaults" -msgstr "" - -msgid "Owners" -msgstr "" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Service Vaults" -msgstr "HBAC サービスグループ" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -msgid "Vault Type" -msgstr "" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -#, fuzzy -msgid "User Vaults" -msgstr "ユーザーオプション" - -msgid "Current password is required" -msgstr "" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -#, fuzzy -msgid "First OTP" -msgstr "OTP のリセット" - -msgid "New password is required" -msgstr "" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Password change complete" -msgstr "" - -msgid "Your password has expired. Please enter a new password." -msgstr "" - -#, fuzzy -msgid "Passwords must match" -msgstr "パスワードが違います" - -msgid "Password reset was not successful." -msgstr "" - -msgid "Reset your password." -msgstr "" - -msgid "Second OTP" -msgstr "" - -msgid "Verify Password" -msgstr "" - -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -msgid "Some entries were not deleted" -msgstr "" - -msgid "Quick Links" -msgstr "" - -msgid "Select All" -msgstr "" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -msgid "Unselect All" -msgstr "" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "" - -msgid "Audit" -msgstr "" - -msgid "Authentication" -msgstr "" - -#, fuzzy -msgid "Automount" -msgstr "アカウント" - -msgid "DNS" -msgstr "" - -msgid "Host-Based Access Control" -msgstr "" - -#, fuzzy -msgid "Identity" -msgstr "${entity} の編集" - -msgid "Network Services" -msgstr "" - -msgid "Policy" -msgstr "" - -msgid "Role-Based Access Control" -msgstr "" - -msgid "Subordinate IDs" -msgstr "" - -#, fuzzy -msgid "Sudo" -msgstr "sudo ルール" - -msgid "Topology" -msgstr "" - -msgid "True" -msgstr "" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -msgid "First" -msgstr "" - -msgid "Last" -msgstr "" - -msgid "Next" -msgstr "" - -msgid "Page" -msgstr "" - -msgid "Prev" -msgstr "" - -msgid "Undo" -msgstr "" - -msgid "Undo this change." -msgstr "" - -msgid "Undo All" -msgstr "" - -msgid "Undo all changes in this field." -msgstr "" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -#, fuzzy -msgid "Must be a decimal number" +msgid "must be an integer" msgstr "整数である必要があります" -msgid "Format error" -msgstr "" - -#, fuzzy -msgid "Must be an integer" -msgstr "整数である必要があります" - -msgid "Not a valid IP address" -msgstr "" - -msgid "Not a valid IPv4 address" -msgstr "" - -msgid "Not a valid IPv6 address" -msgstr "" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -#, fuzzy -msgid "Parse error" -msgstr "IPA エラー" - -#, fuzzy -msgid "Must be a positive number" -msgstr "整数である必要があります" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -msgid "Required field" -msgstr "" - -msgid "Unsupported value" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -msgid "IdP max life" -msgstr "" - -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "" - -msgid "IdP max renew" -msgstr "" - -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "" +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "少なくとも %(minlength)d バイトである必要があります" #, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" +msgid "must be at least %(minlength)d characters" +msgstr "少なくとも %(minlength)d 文字である必要があります" #, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" +msgid "must be at least %(minvalue)d" +msgstr "少なくとも %(minvalue)d である必要があります" + +msgid "must be binary data" +msgstr "バイナリーデータである必要があります" #, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" +msgid "must be exactly %(length)d bytes" +msgstr "ちょうど %(length)d バイトである必要があります" #, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" +msgid "must be exactly %(length)d characters" +msgstr "ちょうど %(length)d 文字である必要があります" #, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -#, fuzzy -msgid "Delete Class of Service entry" -msgstr "HBAC サービスグループを削除します。" - -#, fuzzy -msgid "Modify Class of Service entry" -msgstr "HBAC サービスグループを変更します。" - -msgid "Display Class of Service entry" -msgstr "" - -#, fuzzy -msgid "Search for Class of Service entry" -msgstr "HBAC サービスグループを検索します。" - -msgid "password policy" -msgstr "パスワードポリシー" +msgid "must match pattern \"%(pattern)s\"" +msgstr "パターン \"%(pattern)s\" が一致する必要があります" msgid "password policies" msgstr "パスワードポリシー" -msgid "Password Policies" +msgid "password policy" msgstr "パスワードポリシー" -msgid "Max repeat" -msgstr "" +msgid "role" +msgstr "役割" -msgid "Maximum number of same consecutive characters" -msgstr "" +msgid "roles" +msgstr "役割" -msgid "Max sequence" -msgstr "" +msgid "sudo command" +msgstr "sudo コマンド" -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" +msgid "sudo commands" +msgstr "sudo コマンド" -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "Grace login limit" -msgstr "" - -msgid "Number of LDAP authentications allowed after expiration" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, fuzzy, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "名前 \"%s\" の ACI が見つかりませんでした" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -#, fuzzy -msgid "service" -msgstr "HBAC サービス" - -#, fuzzy -msgid "services" -msgstr "HBAC サービス" - -msgid "Service principal alias" -msgstr "" - -msgid "Base-64 encoded service certificate" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -#, fuzzy -msgid "Add a new IPA service." -msgstr "新しい HBAC サービスを追加します。" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -#, fuzzy -msgid "Add a new SMB service." -msgstr "新しい HBAC サービスを追加します。" - -msgid "SMB service NetBIOS name" -msgstr "" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Remove principal alias from a service" -msgstr "HBAC サービスグループからメンバーを削除します。" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -#, fuzzy -msgid "stage users" -msgstr "ユーザー" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -#, fuzzy -msgid "Add a new ID override." -msgstr "新しい HBAC サービスを追加します。" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Delete an ID override." -msgstr "HBAC ルールを削除します。" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Modify an ID override." -msgstr "HBAC サービスを変更します。" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -#, fuzzy -msgid "Search for an ID override." -msgstr "HBAC サービスグループを検索します。" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" - -#, fuzzy -msgid "Display information about an ID override." -msgstr "HBAC サービスに関する情報を表示します。" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -#, fuzzy -msgid "Certificate Authority" -msgstr "証明書" - -#, fuzzy -msgid "Certificate Authorities" -msgstr "証明書" - -msgid "Name for referencing the CA" -msgstr "" - -msgid "Description of the purpose of the CA" -msgstr "" - -msgid "Authority ID" -msgstr "" - -msgid "Dogtag Authority ID" -msgstr "" - -msgid "Subject DN" -msgstr "" - -msgid "Subject Distinguished Name" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Issuer Distinguished Name" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -#, fuzzy -msgid "Certificate chain" -msgstr "証明書" - -msgid "X.509 certificate chain" -msgstr "" - -#, fuzzy -msgid "RSN Version" -msgstr "権限" - -msgid "Random Serial Number Version" -msgstr "" - -#, fuzzy -msgid "Search for CAs." -msgstr "ホストを検索します。" - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "" - -msgid "Include certificate chain in output" -msgstr "" - -#, fuzzy -msgid "Display the properties of a CA." -msgstr "HBAC ルールのプロパティーを表示します。" - -#, fuzzy -msgid "Create a CA." -msgstr "新しいグループを作成します。" - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -#, fuzzy -msgid "Modify CA configuration." -msgstr "グループを変更します。" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -#, fuzzy -msgid "Disable a CA." -msgstr "HBAC ルールを無効化します。" - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "" - -msgid "IPA CA cannot be disabled" -msgstr "" - -#, fuzzy -msgid "Enable a CA." -msgstr "HBAC ルールを有効化します。" - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Subject email address" -msgstr "" - -msgid "Subject DNS name" -msgstr "" - -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -msgid "Subject URI" -msgstr "" - -#, fuzzy -msgid "Subject IP Address" -msgstr "IP アドレス" - -msgid "Subject OID" -msgstr "" - -msgid "Subject UPN" -msgstr "" - -msgid "Subject Kerberos principal name" -msgstr "" - -msgid "Subject Other Name" -msgstr "" - -msgid "Serial number (hex)" -msgstr "" - -msgid "Request status" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -#, fuzzy -msgid "Status of the certificate" -msgstr "整数である必要があります" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Sudo Rules\n" +msgid "sudo rule" msgstr "sudo ルール" -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - msgid "sudo rules" msgstr "sudo ルール" -msgid "Sudo Rules" -msgstr "sudo ルール" - -msgid "Sudo Rule" -msgstr "sudo ルール" - #, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "%(server)s から未知のエラー %(code)d: %(error)s" -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" +msgid "user" +msgstr "ユーザー" msgid "users" msgstr "ユーザー" - -#, fuzzy -msgid "command" -msgstr "sudo コマンド" - -#, fuzzy -msgid "commands" -msgstr "sudo コマンド" - -msgid "runAs user" -msgstr "" - -#, fuzzy -msgid "runAs users" -msgstr "ユーザー" - -#, fuzzy -msgid "group runAs" -msgstr "グループ" - -#, fuzzy -msgid "runAs groups" -msgstr "ホストグループ" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Preserved user \"%(value)s\"" -msgstr "グループを削除します。" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "ユーザーアカウントを無効化します。" - -#, fuzzy, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "ユーザーアカウントを有効化します。" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -#, fuzzy -msgid "Password grace count" -msgstr "パスワードポリシー" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" -msgstr "" - -#, fuzzy -msgid "Request must be a dict" -msgstr "整数である必要があります" - -msgid "Request is missing \"method\"" -msgstr "" - -msgid "Request is missing \"params\"" -msgstr "" - -#, fuzzy -msgid "params must be a list" -msgstr "整数である必要があります" - -msgid "params must contain [args, options]" -msgstr "" - -msgid "params[0] (aka args) must be a list" -msgstr "" - -msgid "params[1] (aka options) must be a dict" -msgstr "" - -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" - -msgid "CIFS server denied your credentials" -msgstr "" - -msgid "communication with CIFS server was unsuccessful" -msgstr "" - -msgid "AD domain controller" -msgstr "" - -msgid "unsupported functional level" -msgstr "" - -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" - -msgid "Cannot find specified domain or server name" -msgstr "" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" - -msgid "At least the domain or IP address should be specified" -msgstr "" - -#, python-format -msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" -msgstr "" - -msgid "no trusted domain is configured" -msgstr "" - -msgid "domain is not configured" -msgstr "" - -msgid "SID is not valid" -msgstr "" - -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "" - -msgid "SID does not match any trusted domain" -msgstr "" - -msgid "Trust setup" -msgstr "" - -msgid "Our domain is not configured" -msgstr "" - -msgid "No trusted domain is not configured" -msgstr "" - -msgid "trusted domain object" -msgstr "" - -msgid "domain is not trusted" -msgstr "" - -msgid "no trusted domain matched the specified flat name" -msgstr "" - -msgid "trusted domain object not found" -msgstr "" - -msgid "Object does not belong to a trusted domain" -msgstr "" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "" - -msgid "Ambiguous search, user domain was not specified" -msgstr "" - -msgid "Trusted domain did not return a unique object" -msgstr "" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "" - -msgid "trusted domain user not found" -msgstr "" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "" - -msgid "CIFS credentials object" -msgstr "" - -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "" - -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" - -#, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" - -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" - -msgid "Credentials" -msgstr "" - -msgid "Missing credentials for cross-forest communication" -msgstr "" - -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" - -#, python-format -msgid "must equal %r" -msgstr "" - -msgid "Hello world" -msgstr "" - -#, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "" - -#, fuzzy -msgid "must be at least 1" -msgstr "少なくとも %(minvalue)d である必要があります" - -msgid "Out of memory\n" -msgstr "メモリー不足\n" - -msgid "Warning unrecognized encryption type.\n" -msgstr "" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -msgid "Out of memory!?\n" -msgstr "メモリー不足!?\n" - -msgid "Enctype comparison failed!\n" -msgstr "" - -#, fuzzy -msgid "Password is too long!\n" -msgstr "パスワードが違います。" - -msgid "Failed to create random key!\n" -msgstr "" - -msgid "Failed to create key!\n" -msgstr "" - -msgid "Bad or unsupported salt type.\n" -msgstr "" - -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" diff --git a/po/ka.po b/po/ka.po index e8b1cdf30..ff9f64bdb 100644 --- a/po/ka.po +++ b/po/ka.po @@ -18,15666 +18,6 @@ msgstr "" "Plural-Forms: nplurals=2; plural=n != 1;\n" "X-Generator: Weblate 4.13\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, c-format -msgid "out of memory\n" -msgstr "არასაკმარისი მეხსიერება\n" - -#, c-format -msgid "read error\n" -msgstr "კითხვის შეცდომა\n" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "krb5_parse_name %1$d: %2$s\n" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "krb5_kt_get_entry %1$d: %2$s\n" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "kvno %d\n" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "krb5_kt_remove_entry %1$d: %2$s\n" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "krb5_unparse_name %1$d: %2$s\n" - -#, c-format -msgid "realm not found\n" -msgstr "რეალმი არ არსებობს\n" - -msgid "Print debugging information" -msgstr "პროგრამის გასამართი ინფორმაციის გამოტანა" - -msgid "Debugging output" -msgstr "დამატებითი ინფორმაციის გამოტანა" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "krb5_kt_close %1$d: %2$s\n" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, c-format -msgid "Out of memory \n" -msgstr "არასაკმარისი მეხსიერება! \n" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -msgid "SASL Bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Out of Memory!\n" -msgstr "არასაკმარისი მეხსიერება!\n" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, c-format -msgid "Passwords do not match!\n" -msgstr "პაროლები არ ემთხვევა!\n" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Output debug info" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -msgid "Server Name" -msgstr "სერვერის სახელი" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "LDAP DN" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -msgid "LDAP password" -msgstr "LDAP პაროლი" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -msgid "Path to the IPA CA certificate" -msgstr "" - -msgid "IPA CA certificate" -msgstr "IPA CA სერტიფიკატი" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "url" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "GSSAPI|EXTERNAL" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -msgid "Enter LDAP password" -msgstr "" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" - -#, c-format -msgid "Discovered server %s\n" -msgstr "" - -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Using provided server %s\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -msgid "New Principal Password" -msgstr "" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Out of memory!\n" -msgstr "არასაკმარისი მეხსიერება!\n" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "" - -#, c-format -msgid "Out of memory!" -msgstr "არასაკმარისი მეხსიერება!" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "" - -#, c-format -msgid "No values for %s" -msgstr "" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Host is already joined.\n" -msgstr "" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" - -#, c-format -msgid "json_dumps() failed\n" -msgstr "" - -#, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "" - -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" - -#, c-format -msgid "fork() failed\n" -msgstr "fork() -ის შეცდომა\n" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "" - -#, c-format -msgid "child exited with %d\n" -msgstr "" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "" - -msgid "Quiet mode. Only errors are displayed." -msgstr "" - -msgid "Unenroll this host from IPA server" -msgstr "" - -msgid "Hostname of this server" -msgstr "" - -msgid "hostname" -msgstr "ჰოსტის სახელი" - -msgid "IPA Server to use" -msgstr "" - -msgid "Specifies where to store keytab information." -msgstr "" - -msgid "filename" -msgstr "ფაილის სახელი" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" - -msgid "LDAP password (if not using Kerberos)" -msgstr "" - -msgid "password" -msgstr "პაროლი" - -msgid "LDAP basedn" -msgstr "LDAP basedn" - -msgid "basedn" -msgstr "basedn" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "" - -msgid "Failed to add" -msgstr "დამატების შეცდომა" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" - -msgid "Unrevoked" -msgstr "" - -msgid "Error" -msgstr "შეცდომა" - -msgid "Input filename" -msgstr "შეიყვანეთ ფაილის სახელი" - -msgid "File to load the certificate from." -msgstr "" - -msgid "cannot specify both raw certificate and file" -msgstr "" - -msgid "Input file" -msgstr "შეყვანის ფაილი" - -msgid "File to load the certificate from" -msgstr "" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "" - -msgid "Split DNS record to parts" -msgstr "" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" - -msgid "DNS resource record type" -msgstr "" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" - -msgid "No option to modify specific record provided." -msgstr "" - -msgid "Current DNS record contents:\n" -msgstr "" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -msgid "No option to delete specific record provided." -msgstr "" - -msgid "Delete all?" -msgstr "წავშალო ყველა?" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "" - -msgid "Server will check DNS forwarder(s)." -msgstr "" - -msgid "This may take some time, please wait ..." -msgstr "" - -msgid "DNS forwarder" -msgstr "" - -msgid "file to store DNS records in nsupdate format" -msgstr "" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -msgid "Delete a user" -msgstr "მომხმარებლის წაშლა" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - -msgid "maps not connected to /etc/auto.master:" -msgstr "" - -msgid "Import automount files for a specific location." -msgstr "" - -msgid "Master file" -msgstr "" - -msgid "Automount master file." -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" - -#, python-format -msgid "File %(file)s not found" -msgstr "" - -#, python-format -msgid "key %(key)s already exists" -msgstr "" - -#, python-format -msgid "map %(map)s already exists" -msgstr "" - -msgid "Imported maps:" -msgstr "" - -#, python-format -msgid "Added %(map)s" -msgstr "" - -msgid "Imported keys:" -msgstr "" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "" - -msgid "Ignored keys:" -msgstr "" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "" - -msgid "Duplicate maps skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(map)s" -msgstr "" - -msgid "Duplicate keys skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(key)s" -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -msgid "User ID" -msgstr "მომხმარებლის ID" - -msgid "Password" -msgstr "პაროლი" - -msgid "First Code" -msgstr "" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "" - -msgid "Invalid credentials" -msgstr "" - -msgid "Create a new vault." -msgstr "" - -msgid "Vault password" -msgstr "" - -msgid "File containing the vault password" -msgstr "" - -msgid "File containing the vault public key" -msgstr "" - -msgid "Password can be specified only for symmetric vault" -msgstr "" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "" - -msgid "Password specified multiple times" -msgstr "" - -msgid "Public key specified multiple times" -msgstr "" - -msgid "Missing vault public key" -msgstr "" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "" - -msgid "Modify a vault." -msgstr "" - -msgid "Change password" -msgstr "პაროლის შეცვლა" - -msgid "Old vault password" -msgstr "" - -msgid "File containing the old vault password" -msgstr "" - -msgid "New vault password" -msgstr "" - -msgid "File containing the new vault password" -msgstr "" - -msgid "Old vault private key" -msgstr "" - -msgid "File containing the old vault private key" -msgstr "" - -msgid "File containing the new vault public key" -msgstr "" - -msgid "New public key specified multiple times" -msgstr "" - -msgid "Missing new vault public key" -msgstr "" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "" - -msgid "Binary data to archive" -msgstr "" - -msgid "File containing data to archive" -msgstr "" - -msgid "Override existing password" -msgstr "" - -msgid "Input data specified multiple times" -msgstr "" - -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" - -msgid "Invalid vault type" -msgstr "" - -msgid "Retrieve a data from a vault." -msgstr "" - -msgid "File to store retrieved data" -msgstr "" - -msgid "Vault private key" -msgstr "" - -msgid "File containing the vault private key" -msgstr "" - -msgid "Data" -msgstr "მონაცემები" - -msgid "Private key specified multiple times" -msgstr "" - -msgid "Missing vault private key" -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "ACI name" -msgstr "" - -msgid "Permission" -msgstr "წვდომა" - -msgid "Permission ACI grants access to" -msgstr "" - -msgid "User group" -msgstr "მომხმარებლების ჯგუფი" - -msgid "User group ACI grants access to" -msgstr "" - -msgid "Permissions" -msgstr "წვდომები" - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Attributes to which the permission applies" -msgstr "" - -msgid "Attributes" -msgstr "ატრიბუტები" - -msgid "Type" -msgstr "ტიპი" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" - -msgid "Member of" -msgstr "წარმოადგენს წევრს" - -msgid "Member of a group" -msgstr "" - -msgid "Filter" -msgstr "ფილტრი" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "" - -msgid "Subtree" -msgstr "" - -msgid "Subtree to apply ACI to" -msgstr "" - -msgid "Target group" -msgstr "" - -msgid "Group to apply ACI to" -msgstr "" - -msgid "Target your own entry (self)" -msgstr "" - -msgid "Apply ACI to your own entry (self)" -msgstr "" - -msgid "Create new ACI." -msgstr "" - -msgid "ACI prefix" -msgstr "" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" - -msgid "Test the ACI syntax but don't write anything" -msgstr "" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" - -msgid "User-friendly description of action performed" -msgstr "" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" - -msgid "Delete ACI." -msgstr "" - -msgid "True means the operation was successful" -msgstr "" - -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" - -msgid "A string searched in all relevant object attributes" -msgstr "" - -msgid "Primary key only" -msgstr "" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" - -msgid "Number of entries returned" -msgstr "" - -msgid "True if not all results were returned" -msgstr "" - -msgid "Modify ACI." -msgstr "" - -msgid "Rename an ACI." -msgstr "" - -msgid "New ACI name" -msgstr "" - -msgid "Display a single ACI given an ACI name." -msgstr "" - -msgid "Location of the ACI" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Description" -msgstr "აღწერა" - -msgid "A description of this auto member rule" -msgstr "" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "List of deletions that failed" -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "უფლებები" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Users" -msgstr "მომხმარებლები" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Hosts" -msgstr "ჰოსტები" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" - -msgid "Key" -msgstr "გასაღები" - -msgid "Automount key name." -msgstr "" - -msgid "Mount information" -msgstr "" - -msgid "description" -msgstr "აღწერა" - -msgid "Location" -msgstr "მდებარეობა" - -msgid "Automount location name." -msgstr "" - -msgid "Map" -msgstr "რუკა" - -msgid "Automount map name." -msgstr "" - -msgid "Create a new automount key." -msgstr "" - -msgid "Delete an automount key." -msgstr "" - -msgid "Continuous mode: Don't stop on errors." -msgstr "" - -msgid "Search for an automount key." -msgstr "" - -msgid "Time Limit" -msgstr "" - -msgid "Time limit of search in seconds" -msgstr "" - -msgid "Size Limit" -msgstr "" - -msgid "Maximum number of entries returned" -msgstr "" - -msgid "Modify an automount key." -msgstr "" - -msgid "New mount information" -msgstr "" - -msgid "Rename" -msgstr "გადარქმევა" - -msgid "Rename the automount key object" -msgstr "" - -msgid "Display an automount key." -msgstr "" - -msgid "Create a new automount location." -msgstr "" - -msgid "Delete an automount location." -msgstr "" - -msgid "Search for an automount location." -msgstr "" - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" - -msgid "Display an automount location." -msgstr "" - -msgid "Generate automount files for a specific location." -msgstr "" - -msgid "Create a new automount map." -msgstr "" - -msgid "Create a new indirect mount point." -msgstr "" - -msgid "Mount point" -msgstr "მიმაგრების წერტილი" - -msgid "Parent map" -msgstr "" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" - -msgid "Delete an automount map." -msgstr "" - -msgid "Search for an automount map." -msgstr "" - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" - -msgid "Modify an automount map." -msgstr "" - -msgid "Display an automount map." -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" - -msgid "Nested Methods to execute" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason" -msgstr "მიზეზი" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -msgid "minimum serial number" -msgstr "" - -msgid "maximum serial number" -msgstr "" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "სერიული ნომერი" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Principal" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Dictionary mapping variable name to value" -msgstr "" - -msgid "Revoke a certificate." -msgstr "" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "გამოტანის ფაილის სახელი" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "Maximum username length" -msgstr "" - -msgid "Home directory base" -msgstr "" - -msgid "Default location of home directories" -msgstr "" - -msgid "Default shell" -msgstr "" - -msgid "Default shell for new users" -msgstr "" - -msgid "Default users group" -msgstr "" - -msgid "Default group for new users" -msgstr "" - -msgid "Default e-mail domain" -msgstr "" - -msgid "Search time limit" -msgstr "" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" - -msgid "Search size limit" -msgstr "" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "" - -msgid "User search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" - -msgid "Group search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" - -msgid "Enable migration mode" -msgstr "" - -msgid "Certificate Subject base" -msgstr "" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "" - -msgid "Default group objectclasses" -msgstr "" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "" - -msgid "Default user objectclasses" -msgstr "" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" - -msgid "Password Expiration Notification (days)" -msgstr "" - -msgid "Number of days's notice of impending password expiration" -msgstr "" - -msgid "Password plugin features" -msgstr "" - -msgid "Extra hashes to generate in password plug-in" -msgstr "" - -msgid "SELinux user map order" -msgstr "" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" - -msgid "Default SELinux user" -msgstr "" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" - -msgid "Default PAC types" -msgstr "" - -msgid "Default types of PAC supported for services" -msgstr "" - -msgid "Default user authentication types" -msgstr "" - -msgid "Default types of supported user authentication" -msgstr "" - -msgid "Modify configuration options." -msgstr "" - -msgid "Show the current configuration." -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "Delegation name" -msgstr "" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "" - -msgid "Attributes to which the delegation applies" -msgstr "" - -msgid "Member user group" -msgstr "" - -msgid "User group to apply delegation to" -msgstr "" - -msgid "Add a new delegation." -msgstr "" - -msgid "Delete a delegation." -msgstr "" - -msgid "Search for delegations." -msgstr "" - -msgid "Modify a delegation." -msgstr "" - -msgid "Display information about a delegation." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "Global forwarders" -msgstr "" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Forward policy" -msgstr "" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" - -msgid "Allow PTR sync" -msgstr "" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" - -msgid "Zone refresh interval" -msgstr "" - -msgid "Zone name" -msgstr "" - -msgid "Zone name (FQDN)" -msgstr "" - -msgid "Reverse zone IP network" -msgstr "" - -msgid "IP network to create reverse zone name from" -msgstr "" - -msgid "Active zone" -msgstr "" - -msgid "Is zone active?" -msgstr "" - -msgid "Zone forwarders" -msgstr "" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "Record name" -msgstr "" - -msgid "Time to live" -msgstr "" - -msgid "Records" -msgstr "" - -msgid "Record type" -msgstr "ჩანაწერის ტიპი" - -msgid "Record data" -msgstr "" - -msgid "A record" -msgstr "" - -msgid "Raw A records" -msgstr "" - -msgid "A IP Address" -msgstr "IP მისამართი" - -msgid "IP Address" -msgstr "IP მისამართი" - -msgid "A Create reverse" -msgstr "" - -msgid "Create reverse record for this IP Address" -msgstr "" - -msgid "AAAA record" -msgstr "" - -msgid "Raw AAAA records" -msgstr "" - -msgid "AAAA IP Address" -msgstr "" - -msgid "AAAA Create reverse" -msgstr "" - -msgid "A6 record" -msgstr "" - -msgid "Raw A6 records" -msgstr "" - -msgid "A6 Record data" -msgstr "" - -msgid "AFSDB record" -msgstr "" - -msgid "Raw AFSDB records" -msgstr "" - -msgid "AFSDB Subtype" -msgstr "" - -msgid "Subtype" -msgstr "ქვეტიპი" - -msgid "AFSDB Hostname" -msgstr "" - -msgid "Hostname" -msgstr "ჰოსტის სახელი" - -msgid "APL record" -msgstr "" - -msgid "Raw APL records" -msgstr "" - -msgid "CERT record" -msgstr "" - -msgid "Raw CERT records" -msgstr "" - -msgid "CERT Certificate Type" -msgstr "" - -msgid "Certificate Type" -msgstr "სერტიფიკატის ტიპი" - -msgid "CERT Key Tag" -msgstr "" - -msgid "Key Tag" -msgstr "" - -msgid "CERT Algorithm" -msgstr "" - -msgid "Algorithm" -msgstr "ალგორითმი" - -msgid "CERT Certificate/CRL" -msgstr "" - -msgid "Certificate/CRL" -msgstr "" - -msgid "CNAME record" -msgstr "" - -msgid "Raw CNAME records" -msgstr "" - -msgid "CNAME Hostname" -msgstr "" - -msgid "A hostname which this alias hostname points to" -msgstr "" - -msgid "DHCID record" -msgstr "" - -msgid "Raw DHCID records" -msgstr "" - -msgid "DLV record" -msgstr "" - -msgid "Raw DLV records" -msgstr "" - -msgid "DLV Key Tag" -msgstr "" - -msgid "DLV Algorithm" -msgstr "" - -msgid "DLV Digest Type" -msgstr "" - -msgid "Digest Type" -msgstr "" - -msgid "DLV Digest" -msgstr "" - -msgid "Digest" -msgstr "დაიჯესტი" - -msgid "DNAME record" -msgstr "" - -msgid "Raw DNAME records" -msgstr "" - -msgid "DNAME Target" -msgstr "" - -msgid "Target" -msgstr "სამიზნე" - -msgid "DNSKEY record" -msgstr "" - -msgid "Raw DNSKEY records" -msgstr "" - -msgid "DS record" -msgstr "" - -msgid "Raw DS records" -msgstr "" - -msgid "DS Key Tag" -msgstr "" - -msgid "DS Algorithm" -msgstr "" - -msgid "DS Digest Type" -msgstr "" - -msgid "DS Digest" -msgstr "" - -msgid "HIP record" -msgstr "" - -msgid "Raw HIP records" -msgstr "" - -msgid "IPSECKEY record" -msgstr "" - -msgid "Raw IPSECKEY records" -msgstr "" - -msgid "KEY record" -msgstr "" - -msgid "Raw KEY records" -msgstr "" - -msgid "KX record" -msgstr "" - -msgid "Raw KX records" -msgstr "" - -msgid "KX Preference" -msgstr "" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" - -msgid "KX Exchanger" -msgstr "" - -msgid "A host willing to act as a key exchanger" -msgstr "" - -msgid "LOC record" -msgstr "" - -msgid "Raw LOC records" -msgstr "" - -msgid "LOC Degrees Latitude" -msgstr "" - -msgid "Degrees Latitude" -msgstr "" - -msgid "LOC Minutes Latitude" -msgstr "" - -msgid "Minutes Latitude" -msgstr "" - -msgid "LOC Seconds Latitude" -msgstr "" - -msgid "Seconds Latitude" -msgstr "" - -msgid "LOC Direction Latitude" -msgstr "" - -msgid "Direction Latitude" -msgstr "" - -msgid "LOC Degrees Longitude" -msgstr "" - -msgid "Degrees Longitude" -msgstr "" - -msgid "LOC Minutes Longitude" -msgstr "" - -msgid "Minutes Longitude" -msgstr "" - -msgid "LOC Seconds Longitude" -msgstr "" - -msgid "Seconds Longitude" -msgstr "" - -msgid "LOC Direction Longitude" -msgstr "" - -msgid "Direction Longitude" -msgstr "" - -msgid "LOC Altitude" -msgstr "" - -msgid "Altitude" -msgstr "სიმაღლე" - -msgid "LOC Size" -msgstr "" - -msgid "Size" -msgstr "ზომა" - -msgid "LOC Horizontal Precision" -msgstr "" - -msgid "Horizontal Precision" -msgstr "" - -msgid "LOC Vertical Precision" -msgstr "" - -msgid "Vertical Precision" -msgstr "" - -msgid "MX record" -msgstr "" - -msgid "Raw MX records" -msgstr "" - -msgid "MX Preference" -msgstr "" - -msgid "MX Exchanger" -msgstr "" - -msgid "A host willing to act as a mail exchanger" -msgstr "" - -msgid "NAPTR record" -msgstr "" - -msgid "Raw NAPTR records" -msgstr "" - -msgid "NAPTR Order" -msgstr "" - -msgid "Order" -msgstr "დალაგება" - -msgid "NAPTR Preference" -msgstr "" - -msgid "Preference" -msgstr "მორგება" - -msgid "NAPTR Flags" -msgstr "" - -msgid "Flags" -msgstr "ალმები" - -msgid "NAPTR Service" -msgstr "" - -msgid "Service" -msgstr "სერვისი" - -msgid "NAPTR Regular Expression" -msgstr "" - -msgid "Regular Expression" -msgstr "რეგულარული ექსპრესია" - -msgid "NAPTR Replacement" -msgstr "" - -msgid "Replacement" -msgstr "შემცვლელი" - -msgid "NS record" -msgstr "" - -msgid "Raw NS records" -msgstr "" - -msgid "NS Hostname" -msgstr "" - -msgid "NSEC record" -msgstr "" - -msgid "Raw NSEC records" -msgstr "" - -msgid "NSEC3 record" -msgstr "" - -msgid "Raw NSEC3 records" -msgstr "" - -msgid "PTR record" -msgstr "" - -msgid "Raw PTR records" -msgstr "" - -msgid "PTR Hostname" -msgstr "" - -msgid "The hostname this reverse record points to" -msgstr "" - -msgid "RRSIG record" -msgstr "" - -msgid "Raw RRSIG records" -msgstr "" - -msgid "RP record" -msgstr "" - -msgid "Raw RP records" -msgstr "" - -msgid "SIG record" -msgstr "" - -msgid "Raw SIG records" -msgstr "" - -msgid "SPF record" -msgstr "" - -msgid "Raw SPF records" -msgstr "" - -msgid "SRV record" -msgstr "" - -msgid "Raw SRV records" -msgstr "" - -msgid "SRV Priority" -msgstr "" - -msgid "Priority" -msgstr "პრიორიტეტი" - -msgid "SRV Weight" -msgstr "" - -msgid "Weight" -msgstr "სიმძიმე" - -msgid "SRV Port" -msgstr "" - -msgid "Port" -msgstr "პორტი" - -msgid "SRV Target" -msgstr "" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" - -msgid "SSHFP record" -msgstr "" - -msgid "Raw SSHFP records" -msgstr "" - -msgid "SSHFP Algorithm" -msgstr "" - -msgid "SSHFP Fingerprint Type" -msgstr "" - -msgid "Fingerprint Type" -msgstr "" - -msgid "SSHFP Fingerprint" -msgstr "" - -msgid "Fingerprint" -msgstr "ანაბეჭდი" - -msgid "TA record" -msgstr "" - -msgid "Raw TA records" -msgstr "" - -msgid "TLSA record" -msgstr "" - -msgid "Raw TLSA records" -msgstr "" - -msgid "TLSA Certificate Usage" -msgstr "" - -msgid "Certificate Usage" -msgstr "" - -msgid "TLSA Selector" -msgstr "" - -msgid "Selector" -msgstr "" - -msgid "TLSA Matching Type" -msgstr "" - -msgid "Matching Type" -msgstr "" - -msgid "TLSA Certificate Association Data" -msgstr "" - -msgid "Certificate Association Data" -msgstr "" - -msgid "TKEY record" -msgstr "" - -msgid "Raw TKEY records" -msgstr "" - -msgid "TSIG record" -msgstr "" - -msgid "Raw TSIG records" -msgstr "" - -msgid "TXT record" -msgstr "" - -msgid "Raw TXT records" -msgstr "" - -msgid "TXT Text Data" -msgstr "" - -msgid "Text Data" -msgstr "" - -msgid "Authoritative nameserver" -msgstr "" - -msgid "Authoritative nameserver domain name" -msgstr "" - -msgid "Administrator e-mail address" -msgstr "" - -msgid "SOA serial" -msgstr "" - -msgid "SOA record serial number" -msgstr "" - -msgid "SOA refresh" -msgstr "" - -msgid "SOA record refresh time" -msgstr "" - -msgid "SOA retry" -msgstr "" - -msgid "SOA record retry time" -msgstr "" - -msgid "SOA expire" -msgstr "" - -msgid "SOA record expire time" -msgstr "" - -msgid "SOA minimum" -msgstr "" - -msgid "How long should negative responses be cached" -msgstr "" - -msgid "Time to live for records at zone apex" -msgstr "" - -msgid "BIND update policy" -msgstr "" - -msgid "Dynamic update" -msgstr "" - -msgid "Allow dynamic updates." -msgstr "" - -msgid "Allow query" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" - -msgid "Allow transfer" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" - -msgid "Allow in-line DNSSEC signing" -msgstr "" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "" - -msgid "NSEC3PARAM record" -msgstr "" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" - -msgid "Resolve a host name in DNS." -msgstr "" - -msgid "Modify global DNS configuration." -msgstr "" - -msgid "Show the current global DNS configuration." -msgstr "" - -msgid "Create new DNS forward zone." -msgstr "" - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" - -msgid "Permission value" -msgstr "" - -msgid "Delete DNS forward zone." -msgstr "" - -msgid "Disable DNS Forward Zone." -msgstr "" - -msgid "Enable DNS Forward Zone." -msgstr "" - -msgid "Search for DNS forward zones." -msgstr "" - -msgid "Modify DNS forward zone." -msgstr "" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" - -msgid "Display information about a DNS forward zone." -msgstr "" - -msgid "Add new DNS resource record." -msgstr "" - -msgid "Force" -msgstr "ძალა" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "" - -msgid "Structured" -msgstr "" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" - -msgid "Delete DNS resource record." -msgstr "" - -msgid "Delete all associated records" -msgstr "" - -msgid "Delete DNS record entry." -msgstr "" - -msgid "Search for DNS resources." -msgstr "" - -msgid "Modify a DNS resource record." -msgstr "" - -msgid "Rename the DNS resource record object" -msgstr "" - -msgid "Display DNS resource." -msgstr "" - -msgid "Create new DNS zone (SOA record)." -msgstr "" - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" - -msgid "Add a permission for per-zone access delegation." -msgstr "" - -msgid "Delete DNS zone (SOA record)." -msgstr "" - -msgid "Disable DNS Zone." -msgstr "" - -msgid "Enable DNS Zone." -msgstr "" - -msgid "Search for DNS zones (SOA records)." -msgstr "" - -msgid "Forward zones only" -msgstr "" - -msgid "Search for forward zones only" -msgstr "" - -msgid "Modify DNS zone (SOA record)." -msgstr "" - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" - -msgid "Remove a permission for per-zone access delegation." -msgstr "" - -msgid "Display information about a DNS zone (SOA record)." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "Group name" -msgstr "ჯგუფის სახელი" - -msgid "Group description" -msgstr "" - -msgid "GID" -msgstr "GID" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Member users" -msgstr "" - -msgid "Member groups" -msgstr "" - -msgid "Member of groups" -msgstr "" - -msgid "Roles" -msgstr "როლები" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Suppress processing of membership attributes." -msgstr "" - -msgid "Add members to a group." -msgstr "" - -msgid "External member" -msgstr "" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -msgid "member group" -msgstr "" - -msgid "groups to add" -msgstr "" - -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - -msgid "Delete group." -msgstr "" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "user" -msgstr "მომხმარებელი" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "group" -msgstr "ჯგუფი" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "netgroup" -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "role" -msgstr "როლები" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "HBAC rule" -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "sudo rule" -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Rule name" -msgstr "" - -msgid "Rule type" -msgstr "" - -msgid "Rule type (allow)" -msgstr "" - -msgid "User category" -msgstr "" - -msgid "User category the rule applies to" -msgstr "" - -msgid "Host category" -msgstr "" - -msgid "Host category the rule applies to" -msgstr "" - -msgid "Service category" -msgstr "" - -msgid "Service category the rule applies to" -msgstr "" - -msgid "Enabled" -msgstr "ჩართულია" - -msgid "User Groups" -msgstr "მომხმარებლის ჯგუფები" - -msgid "Host Groups" -msgstr "ჰოსტის ჯგუფები" - -msgid "Services" -msgstr "სერვისები" - -msgid "Service Groups" -msgstr "" - -msgid "External host" -msgstr "" - -msgid "Create a new HBAC rule." -msgstr "" - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "member host" -msgstr "" - -msgid "hosts to add" -msgstr "" - -msgid "member host group" -msgstr "" - -msgid "host groups to add" -msgstr "" - -msgid "Add services to an HBAC rule." -msgstr "" - -msgid "member HBAC service" -msgstr "" - -msgid "HBAC services to add" -msgstr "" - -msgid "member HBAC service group" -msgstr "" - -msgid "HBAC service groups to add" -msgstr "" - -msgid "Add users and groups to an HBAC rule." -msgstr "" - -msgid "Delete an HBAC rule." -msgstr "" - -msgid "Disable an HBAC rule." -msgstr "" - -msgid "Enable an HBAC rule." -msgstr "" - -msgid "Search for HBAC rules." -msgstr "" - -msgid "Modify an HBAC rule." -msgstr "" - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "hosts to remove" -msgstr "" - -msgid "host groups to remove" -msgstr "" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "" - -msgid "HBAC services to remove" -msgstr "" - -msgid "HBAC service groups to remove" -msgstr "" - -msgid "Remove users and groups from an HBAC rule." -msgstr "" - -msgid "Display the properties of an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" - -msgid "Service name" -msgstr "" - -msgid "HBAC service" -msgstr "" - -msgid "HBAC service description" -msgstr "" - -msgid "Member of HBAC service groups" -msgstr "" - -msgid "Add a new HBAC service." -msgstr "" - -msgid "Delete an existing HBAC service." -msgstr "" - -msgid "Search for HBAC services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" - -msgid "Modify an HBAC service." -msgstr "" - -msgid "Display information about an HBAC service." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "Service group name" -msgstr "" - -msgid "HBAC service group description" -msgstr "" - -msgid "Member HBAC service" -msgstr "" - -msgid "Add a new HBAC service group." -msgstr "" - -msgid "Add members to an HBAC service group." -msgstr "" - -msgid "Delete an HBAC service group." -msgstr "" - -msgid "Search for an HBAC service group." -msgstr "" - -msgid "Modify an HBAC service group." -msgstr "" - -msgid "Remove members from an HBAC service group." -msgstr "" - -msgid "Display information about an HBAC service group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -msgid "User name" -msgstr "მომხმარებლის სახელი" - -msgid "Target host" -msgstr "" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "ყურადღება" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host name" -msgstr "ჰოსტი" - -msgid "A description of this host" -msgstr "" - -msgid "Locality" -msgstr "რაიონი" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "" - -msgid "Platform" -msgstr "პლატფორმა" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "" - -msgid "Operating system" -msgstr "ოპერაციული სისტემა" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "" - -msgid "User password" -msgstr "" - -msgid "Password used in bulk enrollment" -msgstr "" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "" - -msgid "Random password" -msgstr "" - -msgid "Certificate" -msgstr "სერტიფიკატი" - -msgid "Base-64 encoded server certificate" -msgstr "" - -msgid "Principal name" -msgstr "" - -msgid "MAC address" -msgstr "MAC მისამართი" - -msgid "Hardware MAC address(es) on this host" -msgstr "" - -msgid "SSH public key" -msgstr "SSH საჯარო გასაღები" - -msgid "Class" -msgstr "კლასი" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "Assigned ID View" -msgstr "" - -msgid "Requires pre-authentication" -msgstr "" - -msgid "Pre-authentication is required for the service" -msgstr "" - -msgid "Trusted for delegation" -msgstr "" - -msgid "Client credentials may be delegated to the service" -msgstr "" - -msgid "Member of host-groups" -msgstr "" - -msgid "Indirect Member of host-group" -msgstr "" - -msgid "Keytab" -msgstr "" - -msgid "Managed by" -msgstr "" - -msgid "Managing" -msgstr "" - -msgid "Users allowed to retrieve keytab" -msgstr "" - -msgid "Groups allowed to retrieve keytab" -msgstr "" - -msgid "Hosts allowed to retrieve keytab" -msgstr "" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "" - -msgid "Users allowed to create keytab" -msgstr "" - -msgid "Groups allowed to create keytab" -msgstr "" - -msgid "Hosts allowed to create keytab" -msgstr "" - -msgid "Host Groups allowed to create keytab" -msgstr "" - -msgid "Add a new host." -msgstr "ახალი ჰოსტის დამატება." - -msgid "force host name even if not in DNS" -msgstr "" - -msgid "skip reverse DNS detection" -msgstr "" - -msgid "Add the host to DNS with this IP address" -msgstr "" - -msgid "Add hosts that can manage this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" - -msgid "Delete a host." -msgstr "" - -msgid "Remove entries from DNS" -msgstr "" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" - -msgid "Search for hosts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" - -msgid "host group" -msgstr "ჰოსტების ჯგუფი" - -msgid "Search for hosts with these member of host groups." -msgstr "" - -msgid "Search for hosts without these member of host groups." -msgstr "" - -msgid "Search for hosts with these member of netgroups." -msgstr "" - -msgid "Search for hosts without these member of netgroups." -msgstr "" - -msgid "Search for hosts with these member of roles." -msgstr "" - -msgid "Search for hosts without these member of roles." -msgstr "" - -msgid "Search for hosts with these member of HBAC rules." -msgstr "" - -msgid "Search for hosts without these member of HBAC rules." -msgstr "" - -msgid "Search for hosts with these member of sudo rules." -msgstr "" - -msgid "Search for hosts without these member of sudo rules." -msgstr "" - -msgid "Search for hosts with these enrolled by users." -msgstr "" - -msgid "Search for hosts without these enrolled by users." -msgstr "" - -msgid "host" -msgstr "ჰოსტი" - -msgid "Search for hosts with these managed by hosts." -msgstr "" - -msgid "Search for hosts without these managed by hosts." -msgstr "" - -msgid "Search for hosts with these managing hosts." -msgstr "" - -msgid "Search for hosts without these managing hosts." -msgstr "" - -msgid "Modify information about a host." -msgstr "" - -msgid "Kerberos principal name for this host" -msgstr "" - -msgid "Update DNS entries" -msgstr "" - -msgid "Remove hosts that can manage this host." -msgstr "" - -msgid "Display information about a host." -msgstr "" - -msgid "file to store certificate in" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "Host-group" -msgstr "ჰოსტების ჯგუფი" - -msgid "Name of host-group" -msgstr "" - -msgid "A description of this host-group" -msgstr "" - -msgid "Member hosts" -msgstr "" - -msgid "Member host-groups" -msgstr "" - -msgid "Indirect Member hosts" -msgstr "" - -msgid "Indirect Member host-groups" -msgstr "" - -msgid "Add a new hostgroup." -msgstr "" - -msgid "Add members to a hostgroup." -msgstr "" - -msgid "Delete a hostgroup." -msgstr "" - -msgid "Search for hostgroups." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" - -msgid "Search for host groups with these member hosts." -msgstr "" - -msgid "Search for host groups without these member hosts." -msgstr "" - -msgid "Search for host groups with these member host groups." -msgstr "" - -msgid "Search for host groups without these member host groups." -msgstr "" - -msgid "Search for host groups with these member of host groups." -msgstr "" - -msgid "Search for host groups without these member of host groups." -msgstr "" - -msgid "Search for host groups with these member of netgroups." -msgstr "" - -msgid "Search for host groups without these member of netgroups." -msgstr "" - -msgid "Search for host groups with these member of HBAC rules." -msgstr "" - -msgid "Search for host groups without these member of HBAC rules." -msgstr "" - -msgid "Search for host groups with these member of sudo rules." -msgstr "" - -msgid "Search for host groups without these member of sudo rules." -msgstr "" - -msgid "Modify a hostgroup." -msgstr "" - -msgid "Remove members from a hostgroup." -msgstr "" - -msgid "Display information about a hostgroup." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "Range name" -msgstr "" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -msgid "Anchor to override" -msgstr "" - -msgid "Group ID Number" -msgstr "" - -msgid "User login" -msgstr "მომხმარებლის შესვლა" - -msgid "UID" -msgstr "UID" - -msgid "User ID Number" -msgstr "" - -msgid "GECOS" -msgstr "" - -msgid "Home directory" -msgstr "საწყისი საქაღალდე" - -msgid "Login shell" -msgstr "" - -msgid "ID View Name" -msgstr "" - -msgid "Add a new Group ID override." -msgstr "" - -msgid "Delete an Group ID override." -msgstr "" - -msgid "Search for an Group ID override." -msgstr "" - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" - -msgid "Modify an Group ID override." -msgstr "" - -msgid "Rename the Group ID override object" -msgstr "" - -msgid "Display information about an Group ID override." -msgstr "" - -msgid "Add a new User ID override." -msgstr "" - -msgid "Delete an User ID override." -msgstr "" - -msgid "Search for an User ID override." -msgstr "" - -msgid "Modify an User ID override." -msgstr "" - -msgid "Rename the User ID override object" -msgstr "" - -msgid "Display information about an User ID override." -msgstr "" - -msgid "Add a new ID View." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" - -msgid "hosts" -msgstr "ჰოსტი" - -msgid "Hosts to apply the ID View to" -msgstr "" - -msgid "hostgroups" -msgstr "ჰოსტის ჯგუფები" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" - -msgid "Hosts that this ID View was applied to." -msgstr "" - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" - -msgid "Number of hosts the ID View was applied to:" -msgstr "" - -msgid "Delete an ID View." -msgstr "" - -msgid "Search for an ID View." -msgstr "" - -msgid "Modify an ID View." -msgstr "" - -msgid "Rename the ID View object" -msgstr "" - -msgid "Display information about an ID View." -msgstr "" - -msgid "Enumerate all the hosts the view applies to." -msgstr "" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" - -msgid "Hosts to clear (any) ID View from." -msgstr "" - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" - -msgid "Hosts that ID View was cleared from." -msgstr "" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" - -msgid "Dict of I18N messages" -msgstr "" - -msgid "Export plugin meta-data for the webUI." -msgstr "" - -msgid "Name of object to export" -msgstr "" - -msgid "Name of method to export" -msgstr "" - -msgid "Name of command to export" -msgstr "" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" - -msgid "Join an IPA domain" -msgstr "" - -msgid "The hostname to register as" -msgstr "" - -msgid "The IPA realm" -msgstr "" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "" - -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" - -msgid "Manage ticket policy for specific user" -msgstr "" - -msgid "Max life" -msgstr "" - -msgid "Maximum ticket life (seconds)" -msgstr "" - -msgid "Max renew" -msgstr "" - -msgid "Maximum renewable age (seconds)" -msgstr "" - -msgid "Modify Kerberos ticket policy." -msgstr "" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "" - -msgid "Display the current Kerberos ticket policy." -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," -"cn=accounts' --group-container='cn=groups,cn=accounts' " -"ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' --user-ignore-" -"objectclass=radiusprofile --user-ignore-" -"attribute=radiusgroupname ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -msgid "Migrate users and groups from DS to IPA." -msgstr "" - -msgid "LDAP URI" -msgstr "" - -msgid "LDAP URI of DS server to migrate from" -msgstr "" - -msgid "bind password" -msgstr "" - -msgid "Bind DN" -msgstr "" - -msgid "User container" -msgstr "" - -msgid "DN of container for users in DS relative to base DN" -msgstr "" - -msgid "Group container" -msgstr "" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "" - -msgid "User object class" -msgstr "" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "" - -msgid "Group object class" -msgstr "" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "" - -msgid "Ignore user object class" -msgstr "" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore user attribute" -msgstr "" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore group object class" -msgstr "" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "Ignore group attribute" -msgstr "" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "" - -msgid "Overwrite GID" -msgstr "" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" - -msgid "LDAP schema" -msgstr "" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" - -msgid "Continue" -msgstr "გაგრძელება" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" - -msgid "Base DN" -msgstr "საბაზისო DN" - -msgid "Base DN on remote LDAP server" -msgstr "" - -msgid "Ignore compat plugin" -msgstr "" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" - -msgid "CA certificate" -msgstr "CA სერტიფიკატი" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "" - -msgid "groups to exclude from migration" -msgstr "" - -msgid "users to exclude from migration" -msgstr "" - -msgid "Lists of objects migrated; categorized by type." -msgstr "" - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" - -msgid "False if migration mode was disabled." -msgstr "" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" - -msgid "Show environment variables." -msgstr "" - -msgid "Forward to server instead of running locally" -msgstr "" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Total number of variables env (>= count)" -msgstr "" - -msgid "Number of variables returned (<= total)" -msgstr "" - -msgid "Show all loaded plugins." -msgstr "" - -msgid "Dictionary mapping plugin names to bases" -msgstr "" - -msgid "Number of plugins loaded" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "Netgroup name" -msgstr "" - -msgid "Netgroup description" -msgstr "" - -msgid "NIS domain name" -msgstr "" - -msgid "IPA unique ID" -msgstr "" - -msgid "Member netgroups" -msgstr "" - -msgid "Indirect Member netgroups" -msgstr "" - -msgid "Member User" -msgstr "" - -msgid "Member Group" -msgstr "" - -msgid "Member Host" -msgstr "" - -msgid "Member Hostgroup" -msgstr "" - -msgid "Add a new netgroup." -msgstr "" - -msgid "Add members to a netgroup." -msgstr "" - -msgid "member netgroup" -msgstr "" - -msgid "netgroups to add" -msgstr "" - -msgid "Delete a netgroup." -msgstr "" - -msgid "Search for a netgroup." -msgstr "" - -msgid "search for managed groups" -msgstr "" - -msgid "Search for netgroups with these member netgroups." -msgstr "" - -msgid "Search for netgroups without these member netgroups." -msgstr "" - -msgid "Search for netgroups with these member users." -msgstr "" - -msgid "Search for netgroups without these member users." -msgstr "" - -msgid "Search for netgroups with these member groups." -msgstr "" - -msgid "Search for netgroups without these member groups." -msgstr "" - -msgid "Search for netgroups with these member hosts." -msgstr "" - -msgid "Search for netgroups without these member hosts." -msgstr "" - -msgid "Search for netgroups with these member host groups." -msgstr "" - -msgid "Search for netgroups without these member host groups." -msgstr "" - -msgid "Search for netgroups with these member of netgroups." -msgstr "" - -msgid "Search for netgroups without these member of netgroups." -msgstr "" - -msgid "Modify a netgroup." -msgstr "" - -msgid "Remove members from a netgroup." -msgstr "" - -msgid "netgroups to remove" -msgstr "" - -msgid "Display information about a netgroup." -msgstr "" - -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" - -msgid "TOTP authentication Window" -msgstr "" - -msgid "TOTP authentication time variance (seconds)" -msgstr "" - -msgid "TOTP Synchronization Window" -msgstr "" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "" - -msgid "HOTP Authentication Window" -msgstr "" - -msgid "HOTP authentication skip-ahead" -msgstr "" - -msgid "HOTP Synchronization Window" -msgstr "" - -msgid "HOTP synchronization skip-ahead" -msgstr "" - -msgid "Modify OTP configuration options." -msgstr "" - -msgid "Show the current OTP configuration." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "მფლობელი" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Manager" -msgstr "მმართველი" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "გამორთულია" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "მომწოდებელი" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "მოდელი" - -msgid "Token model (informational only)" -msgstr "" - -msgid "Serial" -msgstr "სერიული" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "Set a user's password." -msgstr "" - -msgid "New Password" -msgstr "ახალი პაროლი" - -msgid "Current Password" -msgstr "მიმდინარე პაროლი" - -msgid "OTP" -msgstr "" - -msgid "One Time Password" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -"\n" -"Managed permissions\n" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "Permission name" -msgstr "" - -msgid "Granted rights" -msgstr "" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" - -msgid "Effective attributes" -msgstr "" - -msgid "All attributes to which the permission applies" -msgstr "" - -msgid "Included attributes" -msgstr "ჩასმული ატრიბუტები" - -msgid "User-specified attributes to which the permission applies" -msgstr "" - -msgid "Excluded attributes" -msgstr "გაფართოებული ატრიბუტები" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" - -msgid "Default attributes" -msgstr "" - -msgid "Attributes to which the permission applies by default" -msgstr "" - -msgid "Bind rule type" -msgstr "" - -msgid "Subtree to apply permissions to" -msgstr "" - -msgid "Extra target filter" -msgstr "" - -msgid "Raw target filter" -msgstr "" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" - -msgid "Target DN" -msgstr "" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" - -msgid "Member of group" -msgstr "" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "" - -msgid "User group to apply permissions to (sets target)" -msgstr "" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "" - -msgid "Deprecated; use extratargetfilter" -msgstr "" - -msgid "Deprecated; use ipapermlocation" -msgstr "" - -msgid "Deprecated; use ipapermright" -msgstr "" - -msgid "Granted to Privilege" -msgstr "" - -msgid "Indirect Member of roles" -msgstr "" - -msgid "Add a new permission." -msgstr "" - -msgid "Add members to a permission." -msgstr "" - -msgid "member privilege" -msgstr "" - -msgid "privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "" - -msgid "Permission flags" -msgstr "" - -msgid "Delete a permission." -msgstr "" - -msgid "force delete of SYSTEM permissions" -msgstr "" - -msgid "Search for permissions." -msgstr "" - -msgid "Modify a permission." -msgstr "" - -msgid "Rename the permission object" -msgstr "" - -msgid "Remove members from a permission." -msgstr "" - -msgid "privileges to remove" -msgstr "" - -msgid "Display information about a permission." -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "Ping a remote server." -msgstr "" - -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "" - -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" - -msgid "Privilege name" -msgstr "" - -msgid "Privilege description" -msgstr "პრივილეგიის აღწერა" - -msgid "Granting privilege to roles" -msgstr "" - -msgid "Add a new privilege." -msgstr "" - -msgid "Add members to a privilege." -msgstr "" - -msgid "member role" -msgstr "" - -msgid "roles to add" -msgstr "" - -msgid "Add permissions to a privilege." -msgstr "" - -msgid "permission" -msgstr "წვდომა" - -msgid "permissions" -msgstr "წვდომები" - -msgid "Number of permissions added" -msgstr "" - -msgid "Delete a privilege." -msgstr "" - -msgid "Search for privileges." -msgstr "" - -msgid "Modify a privilege." -msgstr "" - -msgid "Rename the privilege object" -msgstr "" - -msgid "Remove members from a privilege" -msgstr "" - -msgid "roles to remove" -msgstr "" - -msgid "Remove permissions from a privilege." -msgstr "" - -msgid "Number of permissions removed" -msgstr "" - -msgid "Display information about a privilege." -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Group" -msgstr "ჯგუფი" - -msgid "Manage password policy for specific group" -msgstr "" - -msgid "Max lifetime (days)" -msgstr "" - -msgid "Maximum password lifetime (in days)" -msgstr "" - -msgid "Min lifetime (hours)" -msgstr "" - -msgid "Minimum password lifetime (in hours)" -msgstr "" - -msgid "History size" -msgstr "" - -msgid "Password history size" -msgstr "" - -msgid "Character classes" -msgstr "" - -msgid "Minimum number of character classes" -msgstr "" - -msgid "Min length" -msgstr "" - -msgid "Minimum length of password" -msgstr "პაროლის მინიმალური სიგრძე" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "" - -msgid "Max failures" -msgstr "" - -msgid "Consecutive failures before lockout" -msgstr "" - -msgid "Failure reset interval" -msgstr "" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "" - -msgid "Lockout duration" -msgstr "" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" - -msgid "Add a new group password policy." -msgstr "" - -msgid "Delete a group password policy." -msgstr "" - -msgid "Search for group password policies." -msgstr "" - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" - -msgid "Modify a group password policy." -msgstr "" - -msgid "Display information about password policy." -msgstr "" - -msgid "User" -msgstr "მომხმარებელი" - -msgid "Display effective policy for a specific user" -msgstr "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "RADIUS proxy server name" -msgstr "" - -msgid "A description of this RADIUS proxy server" -msgstr "" - -msgid "Server" -msgstr "სერვერი" - -msgid "The hostname or IP (with or without port)" -msgstr "" - -msgid "Secret" -msgstr "საიდუმლო" - -msgid "The secret used to encrypt data" -msgstr "" - -msgid "Timeout" -msgstr "დროის ამოწურვა" - -msgid "The total timeout across all retries (in seconds)" -msgstr "" - -msgid "Retries" -msgstr "თავიდან ცდები" - -msgid "The number of times to retry authentication" -msgstr "" - -msgid "User attribute" -msgstr "" - -msgid "The username attribute on the user object" -msgstr "" - -msgid "Add a new RADIUS proxy server." -msgstr "" - -msgid "Delete a RADIUS proxy server." -msgstr "" - -msgid "Search for RADIUS proxy servers." -msgstr "" - -msgid "Modify a RADIUS proxy server." -msgstr "" - -msgid "Rename the RADIUS proxy server object" -msgstr "" - -msgid "Display information about a RADIUS proxy server." -msgstr "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Domain" -msgstr "დომენი" - -msgid "Add domain" -msgstr "" - -msgid "Delete domain" -msgstr "" - -msgid "Modify realm domains." -msgstr "" - -msgid "Force adding domain even if not in DNS" -msgstr "" - -msgid "Display the list of realm domains." -msgstr "" - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" - -msgid "Role name" -msgstr "როლის სახელი" - -msgid "A description of this role-group" -msgstr "" - -msgid "Privileges" -msgstr "პრივილეგიები" - -msgid "Member services" -msgstr "" - -msgid "Add a new role." -msgstr "" - -msgid "Add members to a role." -msgstr "" - -msgid "member service" -msgstr "" - -msgid "services to add" -msgstr "" - -msgid "Add privileges to a role." -msgstr "" - -msgid "privilege" -msgstr "პრივილეგიები" - -msgid "privileges" -msgstr "პრივილეგიები" - -msgid "Number of privileges added" -msgstr "" - -msgid "Delete a role." -msgstr "" - -msgid "Search for roles." -msgstr "" - -msgid "Modify a role." -msgstr "" - -msgid "Rename the role object" -msgstr "" - -msgid "Remove members from a role." -msgstr "" - -msgid "services to remove" -msgstr "" - -msgid "Remove privileges from a role." -msgstr "" - -msgid "Number of privileges removed" -msgstr "" - -msgid "Display information about a role." -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "Self-service name" -msgstr "" - -msgid "Attributes to which the permission applies." -msgstr "" - -msgid "Add a new self-service permission." -msgstr "" - -msgid "Delete a self-service permission." -msgstr "" - -msgid "Search for a self-service permission." -msgstr "" - -msgid "Modify a self-service permission." -msgstr "" - -msgid "Display information about a self-service permission." -msgstr "" - -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" - -msgid "SELinux User" -msgstr "SELinux-ის მომხმარებელი" - -msgid "HBAC Rule" -msgstr "" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "" - -msgid "Create a new SELinux User Map." -msgstr "" - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "" - -msgid "Delete a SELinux User Map." -msgstr "" - -msgid "Disable an SELinux User Map rule." -msgstr "" - -msgid "Enable an SELinux User Map rule." -msgstr "" - -msgid "Search for SELinux User Maps." -msgstr "" - -msgid "Modify a SELinux User Map." -msgstr "" - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "" - -msgid "Display the properties of a SELinux User Map rule." -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "Service principal" -msgstr "" - -msgid "PAC type" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" - -msgid "Add a new IPA new service." -msgstr "" - -msgid "force principal name even if not in DNS" -msgstr "" - -msgid "Add hosts that can manage this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Delete an IPA service." -msgstr "" - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Search for IPA services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" - -msgid "Search for services with these managed by hosts." -msgstr "" - -msgid "Search for services without these managed by hosts." -msgstr "" - -msgid "Modify an existing IPA service." -msgstr "" - -msgid "Remove hosts that can manage this service." -msgstr "" - -msgid "Display information about an IPA service." -msgstr "" - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" - -msgid "Sudo Command" -msgstr "" - -msgid "A description of this command" -msgstr "" - -msgid "Sudo Command Groups" -msgstr "" - -msgid "Create new Sudo Command." -msgstr "" - -msgid "Delete Sudo Command." -msgstr "" - -msgid "Search for Sudo Commands." -msgstr "" - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" - -msgid "Modify Sudo Command." -msgstr "" - -msgid "Display Sudo Command." -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "Sudo Command Group" -msgstr "" - -msgid "Commands" -msgstr "ბრძანებები" - -msgid "Member Sudo commands" -msgstr "" - -msgid "Create new Sudo Command Group." -msgstr "" - -msgid "Add members to Sudo Command Group." -msgstr "" - -msgid "member sudo command" -msgstr "" - -msgid "sudo commands to add" -msgstr "" - -msgid "Delete Sudo Command Group." -msgstr "" - -msgid "Search for Sudo Command Groups." -msgstr "" - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" - -msgid "Modify Sudo Command Group." -msgstr "" - -msgid "Remove members from Sudo Command Group." -msgstr "" - -msgid "sudo commands to remove" -msgstr "" - -msgid "Display Sudo Command Group." -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -msgid "Domain GUID" -msgstr "დომენის GUID" - -msgid "Fallback primary group" -msgstr "" - -msgid "Domain name" -msgstr "დომენის სახელი" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "სახელი" - -msgid "Last name" -msgstr "გვარი" - -msgid "Full name" -msgstr "სრული სახელი" - -msgid "Display name" -msgstr "ნაჩვენები სახელი" - -msgid "Initials" -msgstr "ინიციალები" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Email address" -msgstr "ელფოსტის მისამართი" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "ქუჩის მისამართი" - -msgid "City" -msgstr "ქალაქი" - -msgid "State/Province" -msgstr "რეგიონი/მხარე" - -msgid "ZIP" -msgstr "ZIP" - -msgid "Telephone Number" -msgstr "ტელეფონის ნომერი" - -msgid "Mobile Telephone Number" -msgstr "" - -msgid "Pager Number" -msgstr "" - -msgid "Fax Number" -msgstr "" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "პროფესია" - -msgid "Car License" -msgstr "" - -msgid "Account disabled" -msgstr "" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "" - -msgid "RADIUS proxy username" -msgstr "" - -msgid "Department Number" -msgstr "" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -msgid "Delete a user." -msgstr "მომხმარებლის წაშლა." - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "Self" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "Command category" -msgstr "" - -msgid "Command category the rule applies to" -msgstr "" - -msgid "RunAs User category" -msgstr "" - -msgid "RunAs User category the rule applies to" -msgstr "" - -msgid "RunAs Group category" -msgstr "" - -msgid "RunAs Group category the rule applies to" -msgstr "" - -msgid "Sudo order" -msgstr "" - -msgid "integer to order the Sudo rules" -msgstr "" - -msgid "External User" -msgstr "" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -msgid "Host Masks" -msgstr "" - -msgid "Sudo Allow Commands" -msgstr "" - -msgid "Sudo Deny Commands" -msgstr "" - -msgid "Sudo Allow Command Groups" -msgstr "" - -msgid "Sudo Deny Command Groups" -msgstr "" - -msgid "RunAs Users" -msgstr "" - -msgid "Run as a user" -msgstr "" - -msgid "Groups of RunAs Users" -msgstr "" - -msgid "Run as any user within a specified group" -msgstr "" - -msgid "RunAs External User" -msgstr "" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -msgid "External Groups of RunAs Users" -msgstr "" - -msgid "External Groups of users that the command can run as" -msgstr "" - -msgid "RunAs Groups" -msgstr "" - -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -msgid "RunAs External Group" -msgstr "" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -msgid "Sudo Option" -msgstr "" - -msgid "Create new Sudo Rule." -msgstr "" - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "member sudo command group" -msgstr "" - -msgid "sudo command groups to add" -msgstr "" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "" - -msgid "Add group for Sudo to execute as." -msgstr "" - -msgid "Add users and groups for Sudo to execute as." -msgstr "" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "" - -msgid "Delete Sudo Rule." -msgstr "" - -msgid "Disable a Sudo Rule." -msgstr "" - -msgid "Enable a Sudo Rule." -msgstr "" - -msgid "Search for Sudo Rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -msgid "Modify Sudo Rule." -msgstr "" - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "sudo command groups to remove" -msgstr "" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "Remove an option from Sudo Rule." -msgstr "" - -msgid "Remove group for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "" - -msgid "Display Sudo Rule." -msgstr "" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "ACL name" -msgstr "" - -msgid "Profile category" -msgstr "" - -msgid "Profile category the ACL applies to" -msgstr "" - -msgid "User category the ACL applies to" -msgstr "" - -msgid "Host category the ACL applies to" -msgstr "" - -msgid "Service category the ACL applies to" -msgstr "" - -msgid "Profiles" -msgstr "პროფილები" - -msgid "Create a new CA ACL." -msgstr "" - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "" - -msgid "Add profiles to a CA ACL." -msgstr "" - -msgid "member Certificate Profile" -msgstr "" - -msgid "Certificate Profiles to add" -msgstr "" - -msgid "Add services to a CA ACL." -msgstr "" - -msgid "Add users and groups to a CA ACL." -msgstr "" - -msgid "Delete a CA ACL." -msgstr "" - -msgid "Disable a CA ACL." -msgstr "" - -msgid "Enable a CA ACL." -msgstr "" - -msgid "Search for CA ACLs." -msgstr "" - -msgid "Modify a CA ACL." -msgstr "" - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "" - -msgid "Remove profiles from a CA ACL." -msgstr "" - -msgid "Certificate Profiles to remove" -msgstr "" - -msgid "Remove services from a CA ACL." -msgstr "" - -msgid "Remove users and groups from a CA ACL." -msgstr "" - -msgid "Display the properties of a CA ACL." -msgstr "" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "პროფილის ID" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "პროფილის აღწერა" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" - -msgid "Query current Domain Level." -msgstr "" - -msgid "Current domain level:" -msgstr "" - -msgid "Change current Domain Level." -msgstr "" - -msgid "Domain Level" -msgstr "" - -msgid "Add certificates to host entry" -msgstr "" - -msgid "Remove certificates from host entry" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "Fallback to AD DC LDAP" -msgstr "" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" - -msgid "Add to default group" -msgstr "" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" - -msgid "Search scope" -msgstr "" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Target DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" - -msgid "Origin DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "Server name" -msgstr "სერვერი სახელი" - -msgid "IPA server hostname" -msgstr "" - -msgid "Managed suffix" -msgstr "" - -msgid "Min domain level" -msgstr "" - -msgid "Minimum domain level" -msgstr "" - -msgid "Max domain level" -msgstr "" - -msgid "Maximum domain level" -msgstr "" - -msgid "Delete IPA server." -msgstr "" - -msgid "Search for IPA servers." -msgstr "" - -msgid "Show IPA server." -msgstr "" - -msgid "Add new certificates to a service" -msgstr "" - -msgid "Remove certificates from a service" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed Target" -msgstr "" - -msgid "Create a new service delegation rule." -msgstr "" - -msgid "Add member to a named service delegation rule." -msgstr "" - -msgid "member principal" -msgstr "" - -msgid "principal to add" -msgstr "" - -msgid "Add target to a named service delegation rule." -msgstr "" - -msgid "member service delegation target" -msgstr "" - -msgid "service delegation targets to add" -msgstr "" - -msgid "Delete service delegation." -msgstr "" - -msgid "Search for service delegations rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" - -msgid "Remove member from a named service delegation rule." -msgstr "" - -msgid "principal to remove" -msgstr "" - -msgid "Remove target from a named service delegation rule." -msgstr "" - -msgid "service delegation targets to remove" -msgstr "" - -msgid "Display information about a named service delegation rule." -msgstr "" - -msgid "Create a new service delegation target." -msgstr "" - -msgid "Add member to a named service delegation target." -msgstr "" - -msgid "Delete service delegation target." -msgstr "" - -msgid "Search for service delegation target." -msgstr "" - -msgid "Remove member from a named service delegation target." -msgstr "" - -msgid "Display information about a named service delegation target." -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" - -msgid "Activate a stage user." -msgstr "" - -msgid "Add a new stage user." -msgstr "" - -msgid "Create Stage user in from a delete user" -msgstr "" - -msgid "Delete a stage user." -msgstr "" - -msgid "Search for stage users." -msgstr "" - -msgid "Search for stage users with these member of groups." -msgstr "" - -msgid "Search for stage users without these member of groups." -msgstr "" - -msgid "Search for stage users with these member of netgroups." -msgstr "" - -msgid "Search for stage users without these member of netgroups." -msgstr "" - -msgid "Search for stage users with these member of roles." -msgstr "" - -msgid "Search for stage users without these member of roles." -msgstr "" - -msgid "Search for stage users with these member of HBAC rules." -msgstr "" - -msgid "Search for stage users without these member of HBAC rules." -msgstr "" - -msgid "Search for stage users with these member of sudo rules." -msgstr "" - -msgid "Search for stage users without these member of sudo rules." -msgstr "" - -msgid "Modify a stage user." -msgstr "" - -msgid "Rename the stage user object" -msgstr "" - -msgid "Display information about a stage user." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" - -msgid "Segment name" -msgstr "" - -msgid "Arbitrary string identifying the segment" -msgstr "" - -msgid "Left node" -msgstr "" - -msgid "Left replication node - an IPA server" -msgstr "" - -msgid "Right node" -msgstr "" - -msgid "Right replication node - an IPA server" -msgstr "" - -msgid "Connectivity" -msgstr "დაკავშირება" - -msgid "Direction of replication between left and right replication node" -msgstr "" - -msgid "Attributes to strip" -msgstr "" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" - -msgid "Attributes to replicate" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" - -msgid "Attributes for total update" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" - -msgid "Session timeout" -msgstr "" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" - -msgid "Replication agreement enabled" -msgstr "" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" - -msgid "Suffix name" -msgstr "" - -msgid "LDAP suffix to be managed" -msgstr "" - -msgid "Add a new segment." -msgstr "" - -msgid "Delete a segment." -msgstr "" - -msgid "Search for topology segments." -msgstr "" - -msgid "Modify a segment." -msgstr "" - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" - -msgid "Initialize left node" -msgstr "" - -msgid "Initialize right node" -msgstr "" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "" - -msgid "Display a segment." -msgstr "" - -msgid "Add a new topology suffix to be managed." -msgstr "" - -msgid "Delete a topology suffix." -msgstr "" - -msgid "Search for topology suffices." -msgstr "" - -msgid "Modify a topology suffix." -msgstr "" - -msgid "Show managed suffix." -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "Preserved user" -msgstr "" - -msgid "Add one or more certificates to the user entry" -msgstr "" - -msgid "Remove one or more certificates to the user entry" -msgstr "" - -msgid "Move deleted user into staged area" -msgstr "" - -msgid "Undelete a delete user account." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "Vault name" -msgstr "" - -msgid "Vault description" -msgstr "" - -msgid "Vault type" -msgstr "" - -msgid "Salt" -msgstr "" - -msgid "Vault salt" -msgstr "" - -msgid "Public key" -msgstr "საჯარო გასაღები" - -msgid "Vault public key" -msgstr "" - -msgid "Owner users" -msgstr "" - -msgid "Owner groups" -msgstr "" - -msgid "Owner services" -msgstr "" - -msgid "Failed owners" -msgstr "" - -msgid "Vault service" -msgstr "" - -msgid "Shared vault" -msgstr "" - -msgid "Vault user" -msgstr "" - -msgid "Transport Certificate" -msgstr "" - -msgid "Service name of the service vault" -msgstr "" - -msgid "Username of the user vault" -msgstr "" - -msgid "Add members to a vault." -msgstr "" - -msgid "Add owners to a vault." -msgstr "" - -msgid "owner user" -msgstr "" - -msgid "owner group" -msgstr "" - -msgid "owner service" -msgstr "" - -msgid "Owners that could not be added" -msgstr "" - -msgid "Number of owners added" -msgstr "" - -msgid "Session key wrapped with transport certificate" -msgstr "" - -msgid "Vault data encrypted with session key" -msgstr "" - -msgid "Nonce" -msgstr "" - -msgid "Delete a vault." -msgstr "" - -msgid "Search for vaults." -msgstr "" - -msgid "List all service vaults" -msgstr "" - -msgid "List all user vaults" -msgstr "" - -msgid "Remove members from a vault." -msgstr "" - -msgid "Remove owners from a vault." -msgstr "" - -msgid "Owners that could not be removed" -msgstr "" - -msgid "Number of owners removed" -msgstr "" - -msgid "Display information about a vault." -msgstr "" - -msgid "Show vault configuration." -msgstr "" - -msgid "Output file to store the transport certificate" -msgstr "" - -msgid "Add owners to a vault container." -msgstr "" - -msgid "Delete a vault container." -msgstr "" - -msgid "Remove owners from a vault container." -msgstr "" - -msgid "Display information about a vault container." -msgstr "" - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "" - -msgid "Hostname (FQDN)" -msgstr "" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Managed suffixes" -msgstr "" - -msgid "Check connection to remote IPA server." -msgstr "" - -msgid "Remote server name" -msgstr "" - -msgid "Remote IPA server hostname" -msgstr "" - -msgid "suffix" -msgstr "" - -msgid "Search for servers with these managed suffixes." -msgstr "" - -msgid "Search for servers without these managed suffixes." -msgstr "" - -msgid "Add a manager to the stage user entry" -msgstr "" - -msgid "Remove a manager to the stage user entry" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -msgid "Managed LDAP suffix DN" -msgstr "" - -msgid "Search for topology suffixes." -msgstr "" - -msgid "Add a manager to the user entry" -msgstr "" - -msgid "Remove a manager to the user entry" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Comma-separated list of attributes" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" - -msgid "DNS class" -msgstr "" - -msgid "Comma-separated list of raw A records" -msgstr "" - -msgid "Comma-separated list of raw AAAA records" -msgstr "" - -msgid "Comma-separated list of raw A6 records" -msgstr "" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "" - -msgid "Comma-separated list of raw APL records" -msgstr "" - -msgid "Comma-separated list of raw CERT records" -msgstr "" - -msgid "Comma-separated list of raw CNAME records" -msgstr "" - -msgid "Comma-separated list of raw DHCID records" -msgstr "" - -msgid "Comma-separated list of raw DLV records" -msgstr "" - -msgid "Comma-separated list of raw DNAME records" -msgstr "" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "" - -msgid "Comma-separated list of raw DS records" -msgstr "" - -msgid "Comma-separated list of raw HIP records" -msgstr "" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "" - -msgid "Comma-separated list of raw KEY records" -msgstr "" - -msgid "KEY Flags" -msgstr "" - -msgid "KEY Protocol" -msgstr "" - -msgid "Protocol" -msgstr "პროტოკოლი" - -msgid "KEY Algorithm" -msgstr "" - -msgid "KEY Public Key" -msgstr "" - -msgid "Public Key" -msgstr "საჯარო გასაღები" - -msgid "Comma-separated list of raw KX records" -msgstr "" - -msgid "Comma-separated list of raw LOC records" -msgstr "" - -msgid "Comma-separated list of raw MX records" -msgstr "" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "" - -msgid "Comma-separated list of raw NS records" -msgstr "" - -msgid "Comma-separated list of raw NSEC records" -msgstr "" - -msgid "NSEC Next Domain Name" -msgstr "" - -msgid "Next Domain Name" -msgstr "" - -msgid "NSEC Type Map" -msgstr "" - -msgid "Type Map" -msgstr "" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "" - -msgid "Comma-separated list of raw PTR records" -msgstr "" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "" - -msgid "RRSIG Type Covered" -msgstr "" - -msgid "Type Covered" -msgstr "" - -msgid "RRSIG Algorithm" -msgstr "" - -msgid "RRSIG Labels" -msgstr "" - -msgid "Labels" -msgstr "ჭდეები" - -msgid "RRSIG Original TTL" -msgstr "" - -msgid "Original TTL" -msgstr "" - -msgid "RRSIG Signature Expiration" -msgstr "" - -msgid "Signature Expiration" -msgstr "" - -msgid "RRSIG Signature Inception" -msgstr "" - -msgid "Signature Inception" -msgstr "" - -msgid "RRSIG Key Tag" -msgstr "" - -msgid "RRSIG Signer's Name" -msgstr "" - -msgid "Signer's Name" -msgstr "" - -msgid "RRSIG Signature" -msgstr "" - -msgid "Signature" -msgstr "ხელმოწერა" - -msgid "Comma-separated list of raw RP records" -msgstr "" - -msgid "Comma-separated list of raw SIG records" -msgstr "" - -msgid "SIG Type Covered" -msgstr "" - -msgid "SIG Algorithm" -msgstr "" - -msgid "SIG Labels" -msgstr "" - -msgid "SIG Original TTL" -msgstr "" - -msgid "SIG Signature Expiration" -msgstr "" - -msgid "SIG Signature Inception" -msgstr "" - -msgid "SIG Key Tag" -msgstr "" - -msgid "SIG Signer's Name" -msgstr "" - -msgid "SIG Signature" -msgstr "" - -msgid "Comma-separated list of raw SPF records" -msgstr "" - -msgid "Comma-separated list of raw SRV records" -msgstr "" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "" - -msgid "Comma-separated list of raw TA records" -msgstr "" - -msgid "Comma-separated list of raw TKEY records" -msgstr "" - -msgid "Comma-separated list of raw TSIG records" -msgstr "" - -msgid "Comma-separated list of raw TXT records" -msgstr "" - -msgid "SOA time to live" -msgstr "" - -msgid "SOA record time to live" -msgstr "" - -msgid "SOA class" -msgstr "" - -msgid "SOA record class" -msgstr "" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" - -msgid "Consume an entitlement." -msgstr "" - -msgid "Quantity" -msgstr "რაოდენობა" - -msgid "Search for entitlement accounts." -msgstr "" - -msgid "Retrieve the entitlement certs." -msgstr "" - -msgid "Import an entitlement certificate." -msgstr "" - -msgid "UUID" -msgstr "UUID" - -msgid "Enrollment UUID" -msgstr "" - -msgid "Register to the entitlement system." -msgstr "" - -msgid "Username" -msgstr "მომხმარებელი" - -msgid "Enrollment UUID (not implemented)" -msgstr "" - -msgid "Registration password" -msgstr "" - -msgid "Display current entitlements." -msgstr "" - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" - -msgid "comma-separated list of users to add" -msgstr "" - -msgid "comma-separated list of groups to add" -msgstr "" - -msgid "comma-separated list of users to remove" -msgstr "" - -msgid "comma-separated list of groups to remove" -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Source host category" -msgstr "" - -msgid "Source host category the rule applies to" -msgstr "" - -msgid "Source Hosts" -msgstr "საწყისი ჰოსტები" - -msgid "Source Host Groups" -msgstr "" - -msgid "comma-separated list of hosts to add" -msgstr "" - -msgid "comma-separated list of host groups to add" -msgstr "" - -msgid "comma-separated list of HBAC services to add" -msgstr "" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "" - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "" - -msgid "comma-separated list of hosts to remove" -msgstr "" - -msgid "comma-separated list of host groups to remove" -msgstr "" - -msgid "comma-separated list of HBAC services to remove" -msgstr "" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" - -msgid "Source host" -msgstr "საწყისი ჰოსტი" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "comma-separated list of netgroups to add" -msgstr "" - -msgid "comma-separated list of netgroups to remove" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" - -msgid "Target members of a group" -msgstr "" - -msgid "User group to apply permissions to" -msgstr "" - -msgid "comma-separated list of privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI" -msgstr "" - -msgid "Permission type" -msgstr "" - -msgid "comma-separated list of privileges to remove" -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "comma-separated list of roles to add" -msgstr "" - -msgid "comma-separated list of permissions" -msgstr "" - -msgid "comma-separated list of roles to remove" -msgstr "" - -msgid "comma-separated list of privileges" -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "comma-separated list of sudo commands to add" -msgstr "" - -msgid "comma-separated list of sudo commands to remove" -msgstr "" - -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" - -msgid "comma-separated list of sudo command groups to add" -msgstr "" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "" - -msgid "Failed members" -msgstr "" - -msgid "Failed source hosts/hostgroups" -msgstr "" - -msgid "Failed hosts/hostgroups" -msgstr "" - -msgid "Failed users/groups" -msgstr "" - -msgid "Failed service/service groups" -msgstr "" - -msgid "Failed to remove" -msgstr "" - -msgid "Failed RunAs" -msgstr "" - -msgid "Failed RunAsGroup" -msgstr "" - -msgid "Failed profiles" -msgstr "" - -msgid "Failed CAs" -msgstr "" - -msgid "Failed member manager" -msgstr "" - -msgid "Failed managedby" -msgstr "" - -msgid "Failed allowed to retrieve keytab" -msgstr "" - -msgid "Failed allowed to create keytab" -msgstr "" - -msgid "Failed targets" -msgstr "" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "" - -msgid "an internal error has occurred" -msgstr "" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "" - -msgid "did not receive Kerberos credentials" -msgstr "" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -msgid "No credentials cache found" -msgstr "" - -msgid "Ticket expired" -msgstr "" - -msgid "Credentials cache permissions incorrect" -msgstr "" - -msgid "Bad format in credentials cache" -msgstr "" - -msgid "Cannot resolve KDC for requested realm" -msgstr "" - -msgid "Session error" -msgstr "" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#, python-format -msgid "'%(name)s' is required" -msgstr "" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - -msgid "Passwords do not match" -msgstr "პაროლები არ ემთხვევა" - -msgid "Command not implemented" -msgstr "" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -#, python-format -msgid "%(reason)s" -msgstr "" - -msgid "This entry already exists" -msgstr "" - -msgid "You must enroll a host in order to create a host service" -msgstr "" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" - -msgid "This command requires root access" -msgstr "" - -msgid "This is already a posix group" -msgstr "" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -msgid "This entry is already enabled" -msgstr "" - -msgid "This entry is already disabled" -msgstr "" - -msgid "This entry cannot be enabled or disabled" -msgstr "" - -msgid "This entry is not a member" -msgstr "" - -msgid "A group may not be a member of itself" -msgstr "" - -msgid "This entry is already a member" -msgstr "" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "" - -msgid "A group may not be added as a member of itself" -msgstr "" - -msgid "The default users group cannot be removed" -msgstr "" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -msgid "This group already allows external members" -msgstr "" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "change collided with another change" -msgstr "" - -msgid "no modifications to be performed" -msgstr "" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "" - -msgid "limits exceeded for this query" -msgstr "" - -#, python-format -msgid "%(info)s" -msgstr "" - -msgid "modifying primary key is not allowed" -msgstr "" - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "" - -msgid "Already registered" -msgstr "" - -msgid "Not registered yet" -msgstr "" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, python-format -msgid "%(exception)s" -msgstr "" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -#, python-format -msgid "%(count)d variables" -msgstr "" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" -msgstr[1] "" - -msgid "A dictionary representing an LDAP entry" -msgstr "" - -msgid "A list of LDAP entries" -msgstr "" - -msgid "All commands should at least have a result" -msgstr "" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "" - -msgid "Passwords do not match!" -msgstr "პაროლები არ ემთხვევა!" - -msgid "No matching entries found" -msgstr "" - -msgid "Topic or Command" -msgstr "" - -msgid "The topic or command name." -msgstr "" - -msgid "Topic commands:" -msgstr "" - -msgid "To get command help, use:" -msgstr "" - -msgid " ipa --help" -msgstr "" - -msgid "Command name" -msgstr "" - -msgid "Positional arguments" -msgstr "პოზიციური არგუმენტები" - -#, python-format -msgid "Same as --%s" -msgstr "" - -msgid "Deprecated options" -msgstr "" - -msgid "No file to read" -msgstr "" - -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - -#, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - -msgid "Filename is empty" -msgstr "" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "DNS-ის ჭდე არ შეიძლება 63 სიმბოლოზე გრძელი იყოს" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "არ შეიძლება {} სიმბოლოზე გრძელი იყოს" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "DNS-ის ჭდე 64 სიმბოლოზე გრძელი არ შეიძლება იყოს" - -msgid "invalid domain name" -msgstr "" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "incorrect type" -msgstr "" - -msgid "Only one value is allowed" -msgstr "" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "" - -msgid "must be an integer" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -msgid "must be a decimal number" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -msgid "must be binary data" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -msgid "must be a certificate" -msgstr "" - -msgid "must be a certificate signing request" -msgstr "" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "" - -msgid "Leading and trailing spaces are not allowed" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "" - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "" - -#, python-format -msgid "must be '%(value)s'" -msgstr "" - -#, python-format -msgid "must be one of %(values)s" -msgstr "" - -msgid "must be datetime value" -msgstr "" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -msgid "must be DNS name" -msgstr "" - -msgid "must be absolute" -msgstr "" - -msgid "must be relative" -msgstr "" - -msgid "must be dictionary" -msgstr "" - -msgid "must be Kerberos principal" -msgstr "" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -msgid "Service principal is required" -msgstr "" - -msgid "must be at least 0" -msgstr "" - -msgid "invalid valid hex" -msgstr "" - -msgid "invalid serial number 0" -msgstr "" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "" - -#, python-format -msgid "objectclass %s not found" -msgstr "" - -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "უცნობი" - -msgid "Non-Active Directory domain" -msgstr "არა-Active Directory-ის დომენი" - -msgid "Active Directory domain" -msgstr "Active Directory-ის დომენი" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "Failed to authenticate to CA REST API" -msgstr "" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "" - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -msgid "Automount Location" -msgstr "" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "DNS სერვერი" - -msgid "DNS servers" -msgstr "DNS სერვერები" - -msgid "DNS Servers" -msgstr "DNS სერვერები" - -msgid "DNS Server" -msgstr "DNS სერვერი" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "ჯგუფები" - -msgid "User Group" -msgstr "მომხმარებლების ჯგუფი" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "host groups" -msgstr "ჰოსტის ჯგუფები" - -msgid "Host Group" -msgstr "ჰოსტების ჯგუფი" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" - -msgid "hostgroup" -msgstr "ჰოსტების ჯგუფი" - -msgid "privileged hostgroup" -msgstr "" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "Auto private groups" -msgstr "" - -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "მდებარეობა" - -msgid "locations" -msgstr "მდებარეობები" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -msgid "Location name" -msgstr "" - -msgid "IPA location name" -msgstr "" - -msgid "IPA Location description" -msgstr "" - -msgid "Servers" -msgstr "სერვერები" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -msgid "Delete an IPA location." -msgstr "" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -msgid "IPA Server" -msgstr "" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -msgid "netgroups" -msgstr "" - -msgid "Netgroups" -msgstr "" - -msgid "Netgroup" -msgstr "" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "OTP-ის მორგება" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" -msgstr "URI" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" -msgstr "" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -msgid "invalid port number" -msgstr "პორტის არასწორი ნომერი" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "roles" -msgstr "როლები" - -msgid "Role" -msgstr "როლი" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -msgid "Self Service Permissions" -msgstr "" - -msgid "Self Service Permission" -msgstr "" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "IPA role name" -msgstr "" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -msgid "Subordinate id description" -msgstr "" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -msgid "SubUID range size" -msgstr "" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -msgid "SubGID range size" -msgstr "" - -msgid "Subordinate group ID count" -msgstr "" - -#, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "" - -#, python-format -msgid "'%(dn)s is not a valid user" -msgstr "" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -msgid "Add a new subordinate id." -msgstr "" - -#, python-format -msgid "Added subordinate id \"%(value)s\"" -msgstr "" - -msgid "Delete a subordinate id." -msgstr "" - -#, python-format -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "" - -msgid "Modify a subordinate id." -msgstr "" - -#, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "" - -msgid "Search for subordinate id." -msgstr "" - -#, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a subordinate id." -msgstr "" - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -msgid "sudo command" -msgstr "" - -msgid "sudo commands" -msgstr "" - -msgid "Sudo Commands" -msgstr "" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "სერვერი" - -msgid "servers" -msgstr "სერვერები" - -msgid "IPA Servers" -msgstr "" - -msgid "Server location" -msgstr "" - -msgid "Service weight" -msgstr "" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "მდგომარეობა" - -msgid "Server state" -msgstr "" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "A list of ACI values" -msgstr "" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "ჩანაწერი" - -msgid "entries" -msgstr "ჩანაწერები" - -msgid "Entry" -msgstr "ჩანაწერი" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "%s" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "CMS-თან დაკავშირება შეუძლებელია" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - msgid "" "\n" "Permissions\n" @@ -15685,3272 +25,747 @@ msgstr "" "\n" "წვდომები\n" -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -msgid "" -"\n" -"Managed permissions\n" -msgstr "" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "must be enclosed in parentheses" -msgstr "" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, python-format -msgid "Deprecated; use %s" -msgstr "" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, python-format -msgid "Entry %s not found" -msgstr "" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, python-format -msgid "Entry %s does not exist" -msgstr "" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "პრივილეგიები" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "სახელი" - -msgid "Documentation" -msgstr "დოკუმენტაცია" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -msgid "Help topic" -msgstr "" - -msgid "Version" -msgstr "ვერსია" - -msgid "Parameters" -msgstr "პარამეტრები" - -msgid "Method of" -msgstr "" - -msgid "Method name" -msgstr "" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -#, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "საჭიროა" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "ყოველთვის კითხვა" - -msgid "CLI metavar" -msgstr "" - -msgid "CLI name" -msgstr "" - -msgid "Confirm (password)" -msgstr "დადასტურება (პაროლი)" - -msgid "Default" -msgstr "ნაგულისხმები" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "ჭდე" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "პოზიციური არგუმენტები" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "ნდობა" - -msgid "trusts" -msgstr "" - -msgid "Trusts" -msgstr "ნდობები" - -msgid "Trust" -msgstr "ნდობა" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "Trust direction" -msgstr "" - -msgid "Trust type" -msgstr "" - -msgid "Trust status" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "დომენი" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" - -msgid "trust configuration" -msgstr "ნდობის მორგება" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "SID" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -msgid "Vault configuration" -msgstr "საცავის მორგება" - -msgid "IPA KRA servers" -msgstr "IPA KRA სერვერები" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -msgid "Key wrapping algorithm" -msgstr "" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." -msgstr "" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "Principal alias" -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -msgid "External IdP configuration" -msgstr "" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "Certificate mapping data" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -msgid "Issuer" -msgstr "გამომცემელი" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject" -msgstr "თემა" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -msgid "users cannot be added when user category='all'" -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "" - -#, python-format -msgid "%i services added." -msgstr "" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -msgid "User logins" -msgstr "მომხმარებლის სახელები" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "must be at least 10" -msgstr "" - -msgid "configuration options" -msgstr "" - -msgid "Configuration" -msgstr "მორგება" - -msgid "Maximum hostname length" -msgstr "" - -msgid "Enable adding subids to new users" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "IPCA CA სერვერები" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -msgid "IPA DNS servers" -msgstr "IPA DNS სერვერები" - -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Setup SID configuration" -msgstr "" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -msgid "Add SIDs" -msgstr "" - -msgid "Add SIDs for existing users and groups" -msgstr "" - -msgid "NetBIOS name of the IPA domain" -msgstr "" - -msgid "Empty domain is not allowed" -msgstr "" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "not allowed to enable SID generation" -msgstr "" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -msgid "Failed to call DBus" -msgstr "" - -msgid "Configuration of SID failed. See details in the error log" -msgstr "" - -msgid "The group doesn't exist" -msgstr "" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, python-format -msgid "%s Record" -msgstr "" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "ნაწილების რაოდენობა არასწორია!" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -msgid "Priority (order)" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -msgid "Only one zone type is allowed per zone name" -msgstr "" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -msgid "Default time to live" -msgstr "" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "" - -msgid "is required" -msgstr "აუცილებელია" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -msgid "DNS configuration options" -msgstr "" - -msgid "DNS Global Configuration" -msgstr "" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -msgid "Result of the command" -msgstr "" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host" -msgstr "ჰოსტი" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "Serial Number" -msgstr "სერიული ნომერი" - -msgid "Serial Number (hex)" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" - -msgid "Invalid URI: not an https scheme" -msgstr "" - -msgid "Invalid URI: missing netloc" -msgstr "" - -msgid "Identity Provider server" -msgstr "" - -msgid "Identity Provider servers" -msgstr "" - -msgid "Identity Provider server name" -msgstr "" - -msgid "Authorization URI" -msgstr "" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -msgid "Token URI" -msgstr "" - -msgid "Token endpoint" -msgstr "" - -msgid "User info URI" -msgstr "" - -msgid "User information endpoint" -msgstr "" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -msgid "Client identifier" -msgstr "" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "ფარგლები" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -msgid "Add a new Identity Provider server." -msgstr "" - -#, python-format -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "ორგანიზაცია" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -msgid "Base URL" -msgstr "ძირითადი URL" - -msgid "Base URL for IdP provider templates" -msgstr "" - -msgid "unknown provider" -msgstr "უცნობი მომწოდებელი" - -msgid "value is missing" -msgstr "აკლია მნიშვნელობა" - -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "" - -msgid "Delete an Identity Provider server." -msgstr "" - -#, python-format -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "Modify an Identity Provider server." -msgstr "" - -#, python-format -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "Search for Identity Provider servers." -msgstr "" - #, python-format -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an Identity Provider server." -msgstr "" - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "სესიის ვადა გასულია. თავიდან შედით." - -msgid "Apply" -msgstr "გამოყენება" - -msgid "Rebuild auto membership" -msgstr "" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -msgid "Actions" -msgstr "ქმედებები" - -msgid "Add" -msgstr "დამატება" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -msgid "Direct Membership" -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -msgid "No entries." -msgstr "" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -msgid "Remove" -msgstr "წაშლა" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -msgid "Show Results" -msgstr "" - -msgid "Authentication indicators" -msgstr "" - -msgid "Authentication indicator" -msgstr "" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -msgid "RADIUS" -msgstr "" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "External Identity Provider" -msgstr "" - -msgid "Disable per-user override" -msgstr "" +msgid "%s" +msgstr "%s" -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" +msgid "A IP Address" +msgstr "IP მისამართი" msgid "About" msgstr "შესახებ" +msgid "Access Denied" +msgstr "წვდომა აკრძალულია" + +msgid "Account" +msgstr "ანგარიში" + +msgid "Account Settings" +msgstr "ანგარიშის მორგება" + +msgid "Actions" +msgstr "ქმედებები" + msgid "Activate" msgstr "აქტივაცია" -msgid "Add and Add Another" -msgstr "" +msgid "Active Directory domain" +msgstr "Active Directory-ის დომენი" -msgid "Add and Close" -msgstr "" +msgid "Add" +msgstr "დამატება" -msgid "Add and Edit" -msgstr "" +msgid "Add a new host." +msgstr "ახალი ჰოსტის დამატება." -msgid "Add Many" -msgstr "" +msgid "Add role" +msgstr "როლის დამატება" + +msgid "Add rule" +msgstr "წესის დამატება" + +msgid "Add service" +msgstr "სერვისის დამატება" + +msgid "Add user" +msgstr "მომხმარებლის დამატება" + +msgid "Administrative account" +msgstr "ადმინისტრატიული წვდომა" + +msgid "Algorithm" +msgstr "ალგორითმი" + +msgid "All" +msgstr "ყველა" + +msgid "Allow" +msgstr "დაშვება" + +msgid "Altitude" +msgstr "სიმაღლე" + +msgid "Always ask" +msgstr "ყოველთვის კითხვა" + +msgid "Any Service" +msgstr "ნებისმიერი სერვისი" + +msgid "Apply" +msgstr "გამოყენება" + +msgid "Attribute" +msgstr "ატრიბუტი" + +msgid "Attributes" +msgstr "ატრიბუტები" + +msgid "Audit" +msgstr "აუდიტი" + +msgid "Authenticating" +msgstr "ავთენტიკაცია" + +msgid "Authentication" +msgstr "ავთენტიკაცია" + +msgid "Available" +msgstr "ხელმისაწვდომია" msgid "Back" msgstr "უკან" +msgid "Base DN" +msgstr "საბაზისო DN" + +msgid "Base URL" +msgstr "ძირითადი URL" + +msgid "CA" +msgstr "CA" + +msgid "CA certificate" +msgstr "CA სერტიფიკატი" + msgid "Cancel" msgstr "გაუქმება" +msgid "Certificate" +msgstr "სერტიფიკატი" + +msgid "Certificate Authorities" +msgstr "სერტიფიკატების გამომცემელი" + +msgid "Certificate Authority" +msgstr "სერტიფიკატების გამომცემელი" + +msgid "Certificate Hold" +msgstr "სერტიფიკატის შეჩერება" + +msgid "Certificate Type" +msgstr "სერტიფიკატის ტიპი" + +msgid "Certificates" +msgstr "სერტიფიკატები" + +msgid "Change password" +msgstr "პაროლის შეცვლა" + +msgid "City" +msgstr "ქალაქი" + +msgid "Class" +msgstr "კლასი" + msgid "Clear" msgstr "გაწმენდა" -msgid "Clear all fields on the page." -msgstr "" - msgid "Close" msgstr "დახურვა" +msgid "Collapse All" +msgstr "ყველას ჩაკეცვა" + +msgid "Commands" +msgstr "ბრძანებები" + +msgid "Common Name" +msgstr "სახელი" + +msgid "Configuration" +msgstr "მორგება" + +msgid "Confirm (password)" +msgstr "დადასტურება (პაროლი)" + +msgid "Confirmation" +msgstr "დასტური" + +msgid "Connectivity" +msgstr "დაკავშირება" + +msgid "Continue" +msgstr "გაგრძელება" + +msgid "Credentials" +msgstr "მომხმ/პაროლი" + +msgid "Current Password" +msgstr "მიმდინარე პაროლი" + +msgid "Custom value" +msgstr "მითითებული მნიშვნელობა" + +msgid "Customization" +msgstr "ხელით შეტანილი ცვლილებები" + +msgid "DNS" +msgstr "DNS" + +msgid "DNS Server" +msgstr "DNS სერვერი" + +msgid "DNS Servers" +msgstr "DNS სერვერები" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "DNS-ის ჭდე 64 სიმბოლოზე გრძელი არ შეიძლება იყოს" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "DNS-ის ჭდე არ შეიძლება 63 სიმბოლოზე გრძელი იყოს" + +msgid "DNS server" +msgstr "DNS სერვერი" + +msgid "DNS servers" +msgstr "DNS სერვერები" + +msgid "Data" +msgstr "მონაცემები" + +msgid "Debugging output" +msgstr "დამატებითი ინფორმაციის გამოტანა" + +msgid "Default" +msgstr "ნაგულისხმები" + +msgid "Delete" +msgstr "წაშლა" + +msgid "Delete a user" +msgstr "მომხმარებლის წაშლა" + +msgid "Delete a user." +msgstr "მომხმარებლის წაშლა." + +msgid "Delete all?" +msgstr "წავშალო ყველა?" + +msgid "Deny" +msgstr "უარყოფა" + +msgid "Description" +msgstr "აღწერა" + +msgid "Detect" +msgstr "დადგენა" + +msgid "Digest" +msgstr "დაიჯესტი" + +msgid "Direct" +msgstr "პირდაპირი" + msgid "Disable" msgstr "გამორთვა" +msgid "Disabled" +msgstr "გამორთულია" + +msgid "Display name" +msgstr "ნაჩვენები სახელი" + +msgid "Documentation" +msgstr "დოკუმენტაცია" + +msgid "Domain" +msgstr "დომენი" + +msgid "Domain GUID" +msgstr "დომენის GUID" + +msgid "Domain SID" +msgstr "დომენის SID" + +msgid "Domain name" +msgstr "დომენის სახელი" + msgid "Download" msgstr "გადმოწერა" -msgid "Download certificate as PEM formatted file." -msgstr "" - msgid "Edit" msgstr "ჩასწორება" +msgid "Email address" +msgstr "ელფოსტის მისამართი" + msgid "Enable" msgstr "ჩართვა" +msgid "Enabled" +msgstr "ჩართულია" + +msgid "Entry" +msgstr "ჩანაწერი" + +msgid "Error" +msgstr "შეცდომა" + +msgid "Excluded attributes" +msgstr "გაფართოებული ატრიბუტები" + +msgid "Exclusive" +msgstr "ექსკლუზიური" + +msgid "Expand All" +msgstr "ყველას ამოკეცვა" + +msgid "Expression" +msgstr "გამოსახულება" + +msgid "External" +msgstr "გარე" + +msgid "Failed to add" +msgstr "დამატების შეცდომა" + +msgid "False" +msgstr "მცდარი" + +msgid "Filter" +msgstr "ფილტრი" + msgid "Find" msgstr "მოძებნა" +msgid "Fingerprint" +msgstr "ანაბეჭდი" + +msgid "Fingerprints" +msgstr "თითის ანაბეჭდები" + +msgid "First" +msgstr "პირველი" + +msgid "First name" +msgstr "სახელი" + +msgid "Flags" +msgstr "ალმები" + +msgid "Force" +msgstr "ძალა" + +msgid "Full name" +msgstr "სრული სახელი" + +msgid "GID" +msgstr "GID" + +msgid "GSSAPI|EXTERNAL" +msgstr "GSSAPI|EXTERNAL" + +msgid "General" +msgstr "ზოგადი" + msgid "Get" msgstr "მიღება" +msgid "Google" +msgstr "Google" + +msgid "Group" +msgstr "ჯგუფი" + +msgid "Group name" +msgstr "ჯგუფის სახელი" + +msgid "Groups" +msgstr "ჯგუფები" + msgid "Hide" msgstr "დამალვა" +msgid "Hide details" +msgstr "დეტალების დამალვა" + +msgid "Home directory" +msgstr "საწყისი საქაღალდე" + +msgid "Host" +msgstr "ჰოსტი" + +msgid "Host Group" +msgstr "ჰოსტების ჯგუფი" + +msgid "Host Groups" +msgstr "ჰოსტის ჯგუფები" + +msgid "Host Name" +msgstr "ჰოსტი" + +msgid "Host name" +msgstr "ჰოსტი" + +msgid "Host-group" +msgstr "ჰოსტების ჯგუფი" + +msgid "Hostname" +msgstr "ჰოსტის სახელი" + +msgid "Hosts" +msgstr "ჰოსტები" + +msgid "IP Address" +msgstr "IP მისამართი" + +msgid "IPA CA certificate" +msgstr "IPA CA სერტიფიკატი" + +msgid "IPA CA servers" +msgstr "IPCA CA სერვერები" + +msgid "IPA DNS servers" +msgstr "IPA DNS სერვერები" + +msgid "IPA KRA servers" +msgstr "IPA KRA სერვერები" + +msgid "Identity" +msgstr "იდენტიფიკაცია" + +msgid "Included attributes" +msgstr "ჩასმული ატრიბუტები" + +msgid "Indirect" +msgstr "არაპირდაპირი" + +msgid "Initials" +msgstr "ინიციალები" + +msgid "Input file" +msgstr "შეყვანის ფაილი" + +msgid "Input filename" +msgstr "შეიყვანეთ ფაილის სახელი" + +msgid "Internal Error" +msgstr "შიდა შეცდომა" + +msgid "Invalid number of parts!" +msgstr "ნაწილების რაოდენობა არასწორია!" + msgid "Issue" msgstr "Პრობლემა" +msgid "Issued On" +msgstr "გამოცემის თარიღი" + +msgid "Issuer" +msgstr "გამომცემელი" + +msgid "Job Title" +msgstr "პროფესია" + +msgid "Key" +msgstr "გასაღები" + +msgid "LDAP DN" +msgstr "LDAP DN" + +msgid "LDAP basedn" +msgstr "LDAP basedn" + +msgid "LDAP password" +msgstr "LDAP პაროლი" + +msgid "Label" +msgstr "ჭდე" + +msgid "Labels" +msgstr "ჭდეები" + +msgid "Last" +msgstr "ბოლო" + +msgid "Last name" +msgstr "გვარი" + +msgid "Level" +msgstr "დონე" + +msgid "Loading" +msgstr "ჩატვირთვა" + +msgid "Locality" +msgstr "რაიონი" + +msgid "Location" +msgstr "მდებარეობა" + +msgid "Log in" +msgstr "შესვლა" + +msgid "Log out" +msgstr "გასვლა" + +msgid "MAC address" +msgstr "MAC მისამართი" + +msgid "Manager" +msgstr "მმართველი" + +msgid "Map" +msgstr "რუკა" + msgid "Match" msgstr "დამთხვევა" -msgid "Match users according to certificate." -msgstr "" +msgid "Matched" +msgstr "ემთხვევა" + +msgid "Member of" +msgstr "წარმოადგენს წევრს" + +msgid "Members" +msgstr "წევრები" msgid "Migrate" msgstr "მიგრაცია" +msgid "Migrating" +msgstr "მიგრირება" + +msgid "Minimum length of password" +msgstr "პაროლის მინიმალური სიგრძე" + +msgid "Model" +msgstr "მოდელი" + +msgid "Modified" +msgstr "შეცვლილია" + +msgid "Mount point" +msgstr "მიმაგრების წერტილი" + +msgid "Must be a positive number" +msgstr "უნდა წარმოადგენდეს დადებით რიცხვს" + +msgid "Name" +msgstr "სახელი" + +msgid "Network Services" +msgstr "ქსელური სერვისები" + +msgid "New Password" +msgstr "ახალი პაროლი" + +msgid "Next" +msgstr "შემდეგი" + +msgid "Non-Active Directory domain" +msgstr "არა-Active Directory-ის დომენი" + +msgid "Note" +msgstr "შენიშვნა" + msgid "OK" msgstr "დიახ" +msgid "OTP Configuration" +msgstr "OTP-ის მორგება" + +msgid "One-Time Password" +msgstr "ერთჯერადი პაროლი" + +msgid "Operating system" +msgstr "ოპერაციული სისტემა" + +msgid "Options" +msgstr "მორგება" + +msgid "Order" +msgstr "დალაგება" + +msgid "Organization" +msgstr "ორგანიზაცია" + +msgid "Organizational Unit" +msgstr "ორგანიზაციული ერთეული" + +#, c-format +msgid "Out of Memory!\n" +msgstr "არასაკმარისი მეხსიერება!\n" + +msgid "Out of memory\n" +msgstr "არასაკმარისი მეხსიერება!\n" + +#, c-format +msgid "Out of memory \n" +msgstr "არასაკმარისი მეხსიერება! \n" + +#, c-format +msgid "Out of memory!" +msgstr "არასაკმარისი მეხსიერება!" + +#, c-format +msgid "Out of memory!\n" +msgstr "არასაკმარისი მეხსიერება!\n" + +msgid "Out of memory!?\n" +msgstr "არასაკმარისი მეხსიერება!\n" + +msgid "Output filename" +msgstr "გამოტანის ფაილის სახელი" + +msgid "Owner" +msgstr "მფლობელი" + +msgid "Owners" +msgstr "მფლობელები" + +msgid "PAD" +msgstr "PAD" + +msgid "Page" +msgstr "გვერდი" + +msgid "Parameters" +msgstr "პარამეტრები" + +msgid "Parse error" +msgstr "დამუშავების შეცდომა" + +msgid "Password" +msgstr "პაროლი" + +msgid "Password expiration" +msgstr "პაროლის ვადა" + +msgid "Passwords do not match" +msgstr "პაროლები არ ემთხვევა" + +msgid "Passwords do not match!" +msgstr "პაროლები არ ემთხვევა!" + +#, c-format +msgid "Passwords do not match!\n" +msgstr "პაროლები არ ემთხვევა!\n" + +msgid "Passwords must match" +msgstr "პაროლები არ ემთხვევა" + +msgid "Permission" +msgstr "წვდომა" + +msgid "Permissions" +msgstr "წვდომები" + +msgid "Platform" +msgstr "პლატფორმა" + +msgid "Policy" +msgstr "წესები" + +msgid "Port" +msgstr "პორტი" + +msgid "Positional argument" +msgstr "პოზიციური არგუმენტები" + +msgid "Positional arguments" +msgstr "პოზიციური არგუმენტები" + +msgid "Preference" +msgstr "მორგება" + +msgid "Prev" +msgstr "წინა" + +msgid "Print debugging information" +msgstr "პროგრამის გასამართი ინფორმაციის გამოტანა" + +msgid "Priority" +msgstr "პრიორიტეტი" + +msgid "Privilege" +msgstr "პრივილეგიები" + +msgid "Privilege description" +msgstr "პრივილეგიის აღწერა" + +msgid "Privileges" +msgstr "პრივილეგიები" + +msgid "Profile" +msgstr "პროფილი" + +msgid "Profile ID" +msgstr "პროფილის ID" + +msgid "Profile description" +msgstr "პროფილის აღწერა" + +msgid "Profiles" +msgstr "პროფილები" + +msgid "Protocol" +msgstr "პროტოკოლი" + +msgid "Provisioning" +msgstr "მუშაობისთვის მომზადება" + +msgid "Public Key" +msgstr "საჯარო გასაღები" + +msgid "Public key" +msgstr "საჯარო გასაღები" + +msgid "Public key:" +msgstr "საჯარო გასაღები:" + +msgid "Quantity" +msgstr "რაოდენობა" + +msgid "Reason" +msgstr "მიზეზი" + +msgid "Record Type" +msgstr "ჩანაწერის ტიპი" + +msgid "Record type" +msgstr "ჩანაწერის ტიპი" + msgid "Refresh" msgstr "განახლება" -msgid "Reload current settings from the server." -msgstr "" +msgid "Regular Expression" +msgstr "რეგულარული ექსპრესია" -msgid "Delete" +msgid "Remove" msgstr "წაშლა" msgid "Remove hold" msgstr "ქმედების შეჩერების გაუქმება" +msgid "Remove hosts" +msgstr "ჰოსტის წაშლა" + +msgid "Remove services" +msgstr "სერვისების წაშლა" + +msgid "Rename" +msgstr "გადარქმევა" + +msgid "Replacement" +msgstr "შემცვლელი" + +msgid "Required" +msgstr "საჭიროა" + msgid "Reset" msgstr "საწყის მნიშვნელობებზე დაბრუნება" -msgid "Reset Password" -msgstr "" - -msgid "Reset Password and Log in" -msgstr "" - msgid "Restore" msgstr "აღდგენა" +msgid "Result" +msgstr "შედეგი" + +msgid "Retries" +msgstr "თავიდან ცდები" + msgid "Retry" msgstr "თავიდან ცდა" @@ -18960,2773 +775,170 @@ msgstr "დაბრუნება" msgid "Revoke" msgstr "გაუქმება" -msgid "Save" -msgstr "შენახვა" +msgid "Revoked" +msgstr "ამოღებული" -msgid "Set" -msgstr "დაყენება" +msgid "Rights" +msgstr "უფლებები" -msgid "Show" -msgstr "ჩვენება" +msgid "Role" +msgstr "როლი" -msgid "Stage" -msgstr "ნაბიჯი" +msgid "Role name" +msgstr "როლის სახელი" -msgid "Update" -msgstr "განახლება" - -msgid "View" -msgstr "ხედი" - -msgid "Customization" -msgstr "ხელით შეტანილი ცვლილებები" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "ყველას ჩაკეცვა" - -msgid "Expand All" -msgstr "ყველას ამოკეცვა" - -msgid "General" -msgstr "ზოგადი" - -msgid "Identity Settings" -msgstr "" - -msgid "Record Settings" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -msgid "Back to Top" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -msgid "Add custom value" -msgstr "" - -msgid "Available" -msgstr "ხელმისაწვდომია" - -msgid "Some operations failed." -msgstr "" - -msgid "Operations Error" -msgstr "" - -msgid "Confirmation" -msgstr "დასტური" - -msgid "Custom value" -msgstr "მითითებული მნიშვნელობა" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -msgid "Unsaved Changes" -msgstr "შეუნახავი ცვლილებები" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "" - -msgid "Hide details" -msgstr "დეტალების დამალვა" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -msgid "Redirection" -msgstr "" - -msgid "Select entries to be removed." -msgstr "" - -msgid "Result" -msgstr "შედეგი" - -msgid "Show details" -msgstr "დეტალების ჩვენება" - -msgid "Success" -msgstr "წარმატება" - -msgid "Validation error" -msgstr "შემოწმების შეცდომა" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "" - -msgid "HTTP Error" -msgstr "" - -msgid "Internal Error" -msgstr "შიდა შეცდომა" - -msgid "IPA Error" -msgstr "" - -msgid "No response" -msgstr "" - -msgid "Unknown Error" -msgstr "უცნობი შეცდომა" - -msgid "URL" -msgstr "URL" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -msgid "Settings" -msgstr "მორგება" - -msgid "Search" -msgstr "ძებნა" - -msgid "False" -msgstr "მცდარი" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Allowed to create keytab" -msgstr "" - -msgid "Allowed to retrieve keytab" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Add Kerberos Principal Alias" -msgstr "" - -msgid "New kerberos principal alias" -msgstr "" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "PAD" - -msgid "Authenticating" -msgstr "ავთენტიკაცია" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "ჩატვირთვა" - -msgid "Kerberos Principal you entered is expired" -msgstr "" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "შესვლა" - -msgid "Log In Using Certificate" -msgstr "" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "გასვლა" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "" - -msgid "Synchronizing" -msgstr "სინქრონიზაცია" - -msgid "The user account you entered is locked" -msgstr "" - -msgid "number of passwords" -msgstr "" - -msgid "seconds" -msgstr "წამი" - -msgid "Migrating" -msgstr "მიგრირება" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -msgid "Password migration was not successful" -msgstr "" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -msgid "Password migration was successful" -msgstr "" - -msgid "Attribute" -msgstr "ატრიბუტი" - -msgid "Add delegation" -msgstr "" - -msgid "Remove delegations" -msgstr "" - -msgid "Add permission" -msgstr "" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -msgid "Remove permissions" -msgstr "" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -msgid "Remove privileges" -msgstr "" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -msgid "Role Settings" -msgstr "" - -msgid "Add role" -msgstr "როლის დამატება" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -msgid "Remove roles" -msgstr "" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -msgid "Add self service permission" -msgstr "" - -msgid "Remove self service permissions" -msgstr "" - -msgid "Add rule" -msgstr "წესის დამატება" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to change default group?" -msgstr "" - -msgid "Default host group" -msgstr "" - -msgid "Default user group" -msgstr "" - -msgid "Exclusive" -msgstr "ექსკლუზიური" - -msgid "Expression" -msgstr "გამოსახულება" - -msgid "Host group rule" -msgstr "" - -msgid "Host group rules" -msgstr "" - -msgid "Inclusive" -msgstr "" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -msgid "User group rule" -msgstr "" - -msgid "User group rules" -msgstr "" - -msgid "Add automount key" -msgstr "" - -msgid "Remove automount keys" -msgstr "" - -msgid "Add automount location" -msgstr "" - -msgid "Automount Location Settings" -msgstr "" - -msgid "Remove automount locations" -msgstr "" - -msgid "Add automount map" -msgstr "" - -msgid "Map Type" -msgstr "" - -msgid "Direct" -msgstr "პირდაპირი" - -msgid "Indirect" -msgstr "არაპირდაპირი" - -msgid "Remove automount maps" -msgstr "" - -msgid "Add certificate authority" -msgstr "" - -msgid "Remove certificate authorities" -msgstr "" - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -msgid "All" -msgstr "ყველა" - -msgid "Any CA" -msgstr "" - -msgid "Any Host" -msgstr "" - -msgid "Any Service" -msgstr "ნებისმიერი სერვისი" - -msgid "Any Profile" -msgstr "" - -msgid "Anyone" -msgstr "" - -msgid "Rule status" -msgstr "" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -msgid "Remove CA ACLs" -msgstr "" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -msgid "Specified CAs" -msgstr "" - -msgid "Specified Hosts and Groups" -msgstr "" - -msgid "Specified Profiles" -msgstr "" - -msgid "Specified Services and Groups" -msgstr "" - -msgid "Specified Users and Groups" -msgstr "" - -msgid "Permitted to have certificates issued" -msgstr "" - -msgid "Remove certificate profiles" -msgstr "" - -msgid "AA Compromise" -msgstr "" - -msgid "Add principal" -msgstr "" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "CA" - -msgid "CA Compromise" -msgstr "" - -msgid "Certificates" -msgstr "სერტიფიკატები" - -msgid "Certificate Hold" -msgstr "სერტიფიკატის შეჩერება" - -msgid "Cessation of Operation" -msgstr "" - -msgid "Common Name" -msgstr "სახელი" - -msgid "the certificate with serial number " -msgstr "" - -msgid "Expires On" -msgstr "" - -msgid "Issued on from" -msgstr "" - -msgid "Issued on to" -msgstr "" - -msgid "Maximum serial number" -msgstr "" - -msgid "Minimum serial number" -msgstr "" - -msgid "Revoked on from" -msgstr "" - -msgid "Revoked on to" -msgstr "" - -msgid "Valid not after from" -msgstr "" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -msgid "Fingerprints" -msgstr "თითის ანაბეჭდები" - -msgid "Get Certificate" -msgstr "" - -msgid "Certificate Hold Removed" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -msgid "Issue new certificate" -msgstr "" - -msgid "Issued By" -msgstr "" - -msgid "Issued On" -msgstr "გამოცემის თარიღი" - -msgid "Issued To" -msgstr "" - -msgid "Key Compromise" -msgstr "" - -msgid "No Valid Certificate" -msgstr "" - -msgid "New Certificate" -msgstr "" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -msgid "Note" -msgstr "შენიშვნა" - -msgid "Organizational Unit" -msgstr "ორგანიზაციული ერთეული" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -msgid "Privilege Withdrawn" -msgstr "" - -msgid "Reason for Revocation" -msgstr "" - -msgid "Remove certificate hold" -msgstr "" - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -msgid "Certificate requested" -msgstr "" - -msgid "Revoke certificate" -msgstr "" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -msgid "Certificate Revoked" -msgstr "" - -msgid "REVOKED" -msgstr "" - -msgid "SHA1 Fingerprint" -msgstr "" - -msgid "SHA256 Fingerprint" -msgstr "" - -msgid "Status" -msgstr "სტატუსი" - -msgid "Superseded" -msgstr "" - -msgid "Unspecified" -msgstr "მიუთითებელი" - -msgid "Valid Certificate Present" -msgstr "" - -msgid "Valid from" -msgstr "Ძალაშია" - -msgid "Valid to" -msgstr "" - -msgid "Validity" -msgstr "სისწორე" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -msgid "View Certificate" -msgstr "" - -msgid "Certificate Data" -msgstr "" - -msgid "Certificate For Match" -msgstr "" - -msgid "Certificate Mapping Match" -msgstr "" - -msgid "Matched Users" -msgstr "" - -msgid "User Login" -msgstr "მომხმარებლის შესვლა" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -msgid "Configuration string" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -msgid "Remove certificate mapping data" -msgstr "" - -msgid "Issuer and subject" -msgstr "" - -msgid "Remove certificate identity mapping rules" -msgstr "" - -msgid "Group Options" -msgstr "" - -msgid "Search Options" -msgstr "" - -msgid "SELinux Options" -msgstr "" - -msgid "Server Options" -msgstr "სერვერის პარამეტრები" - -msgid "Service Options" -msgstr "სერვისის მორგება" - -msgid "User Options" -msgstr "მომხმარებლის პარამეტრები" - -msgid "Forward first" -msgstr "" - -msgid "Forwarding disabled" -msgstr "" - -msgid "Forward only" -msgstr "" - -msgid "Options" -msgstr "მორგება" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -msgid "Other Record Types" -msgstr "" - -msgid "Address not valid, can't redirect" -msgstr "" - -msgid "Create dns record" -msgstr "" - -msgid "Creating record." -msgstr "" - -msgid "Record creation failed." -msgstr "" - -msgid "Checking if record exists." -msgstr "" - -msgid "Record not found." -msgstr "" - -msgid "Redirection to PTR record" -msgstr "" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -msgid "Target reverse zone not found." -msgstr "" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -msgid "Standard Record Types" -msgstr "" - -msgid "Records for DNS Zone" -msgstr "" - -msgid "Record Type" -msgstr "ჩანაწერის ტიპი" - -msgid "Add DNS zone" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -msgid "DNS Zone Settings" -msgstr "" - -msgid "Remove DNS zones" -msgstr "" - -msgid "Remove Permission" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Level" -msgstr "დონე" - -msgid "Set Domain Level" -msgstr "" - -msgid "Add user group" -msgstr "" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -msgid "Group Settings" -msgstr "" - -msgid "External" -msgstr "გარე" - -msgid "Groups" -msgstr "ჯგუფები" - -msgid "Group categories" -msgstr "" - -msgid "Change to external group" -msgstr "" - -msgid "Change to POSIX group" -msgstr "" - -msgid "Non-POSIX" -msgstr "" - -msgid "POSIX" -msgstr "" - -msgid "Remove user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -msgid "Group Type" -msgstr "" - -msgid "Add HBAC rule" -msgstr "" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -msgid "Accessing" -msgstr "" - -msgid "Remove HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -msgid "Via Service" -msgstr "" - -msgid "Who" -msgstr "" - -msgid "Add HBAC service" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -msgid "Remove HBAC services" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -msgid "Add HBAC service group" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -msgid "Remove HBAC service groups" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -msgid "Access Denied" -msgstr "წვდომა აკრძალულია" - -msgid "Access Granted" -msgstr "" - -msgid "Include Disabled" -msgstr "" - -msgid "Include Enabled" -msgstr "" - -msgid "HBAC Test" -msgstr "" - -msgid "Matched" -msgstr "ემთხვევა" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" +msgid "Roles" +msgstr "როლები" msgid "Rules" msgstr "წესები" -msgid "Run Test" -msgstr "" +msgid "Run Commands" +msgstr "ბრძანებების გაშვება" -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" +msgid "SELinux User" +msgstr "SELinux-ის მომხმარებელი" -msgid "Unmatched" -msgstr "" +msgid "SID" +msgstr "SID" -msgid "Add host" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -msgid "Host Certificate" -msgstr "" - -msgid "Host Name" -msgstr "ჰოსტი" - -msgid "Delete Key, Unprovision" -msgstr "" - -msgid "Host Settings" -msgstr "" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -msgid "Generate OTP" -msgstr "" - -msgid "Generated OTP" -msgstr "" - -msgid "Kerberos Key" -msgstr "" - -msgid "Kerberos Key Not Present" -msgstr "" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -msgid "One-Time Password" -msgstr "ერთჯერადი პაროლი" - -msgid "One-Time Password Not Present" -msgstr "" - -msgid "One-Time Password Present" -msgstr "" - -msgid "Reset OTP" -msgstr "" - -msgid "Reset One-Time Password" -msgstr "" - -msgid "Set OTP" -msgstr "" - -msgid "OTP set" -msgstr "" - -msgid "Set One-Time Password" -msgstr "ერთჯერადი პაროლის დაყენება" - -msgid "Remove hosts" -msgstr "ჰოსტის წაშლა" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -msgid "Unprovision" -msgstr "" - -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -msgid "Add host group" -msgstr "" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -msgid "Host Group Settings" -msgstr "" - -msgid "Remove host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "Google" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -msgid "Identity provider details" -msgstr "" - -msgid "Verify secret" -msgstr "" - -msgid "User to override" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -msgid "Profile" -msgstr "პროფილი" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -msgid "Enter trusted group name." -msgstr "" - -msgid "Add ID view" -msgstr "" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -msgid "Apply to host groups" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -msgid "Remove ID views" -msgstr "" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -msgid "Un-apply from host groups" -msgstr "" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -msgid "Un-apply" -msgstr "" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "Add netgroup" -msgstr "" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -msgid "Netgroup Settings" -msgstr "" - -msgid "Remove netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -msgid "Add OTP token" -msgstr "" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -msgid "Configure your token" -msgstr "" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -msgid "OTP Token Settings" -msgstr "" - -msgid "Disable token" -msgstr "" - -msgid "Enable token" -msgstr "" - -msgid "Remove OTP tokens" -msgstr "" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "QR კოდის ჩვენება" - -msgid "Show configuration uri" -msgstr "" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -msgid "Add Custom Attribute" -msgstr "" - -msgid "Permission settings" -msgstr "" - -msgid "Attribute breakdown" -msgstr "" - -msgid "Privilege Settings" -msgstr "" - -msgid "Public key:" -msgstr "საჯარო გასაღები:" - -msgid "Set public key" -msgstr "საჯარო გასაღების დაყენება" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "შეცვლილია" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -msgid "Add password policy" -msgstr "" - -msgid "Password Policy" -msgstr "" - -msgid "Remove password policies" -msgstr "" - -msgid "Add ID range" -msgstr "" - -msgid "Range Settings" -msgstr "" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -msgid "Domain SID" -msgstr "დომენის SID" - -msgid "Secondary RID base" -msgstr "" - -msgid "Remove ID ranges" -msgstr "" - -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -msgid "Detect" -msgstr "დადგენა" - -msgid "Local domain" -msgstr "" - -msgid "IPA trust" -msgstr "" - -msgid "Active Directory winsync" -msgstr "" - -msgid "Add RADIUS server" -msgstr "" - -msgid "RADIUS Proxy Server Settings" -msgstr "" - -msgid "Remove RADIUS servers" -msgstr "" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -msgid "Force Update" -msgstr "" - -msgid "Add SELinux user map" -msgstr "" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -msgid "Server Roles" -msgstr "" - -msgid "Server Role" -msgstr "" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -msgid "Delete Server" -msgstr "" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -msgid "Add service" -msgstr "სერვისის დამატება" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -msgid "Service Certificate" -msgstr "" - -msgid "Service Settings" -msgstr "სერვერის მორგება" - -msgid "Provisioning" -msgstr "მუშაობისთვის მომზადება" - -msgid "Remove services" -msgstr "სერვისების წაშლა" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -msgid "Unprovisioning service" -msgstr "" - -msgid "Service unprovisioned" -msgstr "" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "" - -msgid "SSH public keys" +msgid "SSH public key" msgstr "SSH საჯარო გასაღები" msgid "SSH public key:" msgstr "SSH საჯარო გასაღები:" -msgid "Set SSH key" -msgstr "" +msgid "SSH public keys" +msgstr "SSH საჯარო გასაღები" -msgid "Are you sure you want to activate selected users?" -msgstr "" +msgid "Save" +msgstr "შენახვა" -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" +msgid "Scope" +msgstr "ფარგლები" -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" +msgid "Search" +msgstr "ძებნა" -msgid "Add stage user" -msgstr "" - -msgid "Stage users" -msgstr "" - -msgid "Preserved users" -msgstr "" - -msgid "Remove preserved users" -msgstr "" - -msgid "Remove stage users" -msgstr "" - -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -msgid "User categories" -msgstr "" - -msgid "Add subid" -msgstr "" - -msgid "Assigned subids" -msgstr "" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -msgid "Add sudo command" -msgstr "" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -msgid "Remove sudo commands" -msgstr "" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -msgid "Add sudo command group" -msgstr "" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -msgid "Remove sudo command groups" -msgstr "" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -msgid "Add sudo rule" -msgstr "" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "დაშვება" - -msgid "Any Command" -msgstr "" - -msgid "Any Group" -msgstr "" - -msgid "Run Commands" -msgstr "ბრძანებების გაშვება" - -msgid "Deny" -msgstr "უარყოფა" - -msgid "Access this host" -msgstr "" - -msgid "Option added" -msgstr "" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -msgid "Remove sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -msgid "Specified Commands and Groups" -msgstr "" - -msgid "Specified Groups" -msgstr "" - -msgid "Remove sudo options" -msgstr "" - -msgid "Autogenerated" -msgstr "" - -msgid "Segment details" -msgstr "" - -msgid "Replication configuration" -msgstr "" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -msgid "Account" -msgstr "ანგარიში" - -msgid "Add trust" -msgstr "" - -msgid "Administrative account" -msgstr "ადმინისტრატიული წვდომა" - -msgid "SID blocklists" -msgstr "" - -msgid "Trust Settings" -msgstr "" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -msgid "Pre-shared password" -msgstr "" - -msgid "Remove trusts" -msgstr "" - -msgid "Remove domains" -msgstr "" - -msgid "Alternative UPN suffixes" -msgstr "" - -msgid "User attributes for SMB services" -msgstr "" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - -msgid "Account Settings" -msgstr "ანგარიშის მორგება" - -msgid "Account Status" -msgstr "" - -msgid "Active users" -msgstr "" - -msgid "Add user" -msgstr "მომხმარებლის დამატება" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -msgid "Auto assign subordinate ids" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "" - -msgid "Contact Settings" -msgstr "" - -msgid "Delete mode" -msgstr "" - -msgid "Employee Information" -msgstr "" - -msgid "Error changing account status" -msgstr "" - -msgid "Password expiration" -msgstr "პაროლის ვადა" - -msgid "Mailing Address" -msgstr "" - -msgid "Misc. Information" -msgstr "" - -msgid "delete" -msgstr "წაშლა" - -msgid "preserve" -msgstr "შენარჩუნება" - -msgid "No private group" -msgstr "" - -msgid "Remove users" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Unlock" -msgstr "განბლოკვა" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -msgid "Members" -msgstr "წევრები" - -msgid "My User Vaults" -msgstr "" - -msgid "Owners" -msgstr "მფლობელები" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -msgid "Service Vaults" -msgstr "" - -msgid "Shared" -msgstr "გაზიარებული" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "სტანდარტული" - -msgid "Symmetric" -msgstr "" - -msgid "Vault Type" -msgstr "" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -msgid "User Vaults" -msgstr "" - -msgid "Current password is required" -msgstr "" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -msgid "First OTP" -msgstr "" - -msgid "New password is required" -msgstr "" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Password change complete" -msgstr "" - -msgid "Your password has expired. Please enter a new password." -msgstr "" - -msgid "Passwords must match" -msgstr "პაროლები არ ემთხვევა" - -msgid "Password reset was not successful." -msgstr "" - -msgid "Reset your password." -msgstr "" - -msgid "Second OTP" -msgstr "" - -msgid "Verify Password" -msgstr "" - -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -msgid "Some entries were not deleted" -msgstr "" - -msgid "Quick Links" -msgstr "" +msgid "Secret" +msgstr "საიდუმლო" msgid "Select All" msgstr "ყველას მონიშვნა" -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" +msgid "Self" +msgstr "Self" -msgid "Unselect All" -msgstr "" +msgid "Serial" +msgstr "სერიული" -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" +msgid "Serial Number" +msgstr "სერიული ნომერი" -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" +msgid "Serial number" +msgstr "სერიული ნომერი" -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" +msgid "Server" +msgstr "სერვერი" -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" +msgid "Server Name" +msgstr "სერვერის სახელი" -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" +msgid "Server Options" +msgstr "სერვერის პარამეტრები" -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" +msgid "Server name" +msgstr "სერვერი სახელი" -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" +msgid "Servers" +msgstr "სერვერები" -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" +msgid "Service" +msgstr "სერვისი" -msgid "Working" -msgstr "მუშაობს" +msgid "Service Options" +msgstr "სერვისის მორგება" -msgid "Audit" -msgstr "აუდიტი" +msgid "Service Settings" +msgstr "სერვერის მორგება" -msgid "Authentication" -msgstr "ავთენტიკაცია" +msgid "Services" +msgstr "სერვისები" -msgid "Automount" -msgstr "" +msgid "Set" +msgstr "დაყენება" -msgid "DNS" -msgstr "DNS" +msgid "Set One-Time Password" +msgstr "ერთჯერადი პაროლის დაყენება" -msgid "Host-Based Access Control" -msgstr "" +msgid "Set public key" +msgstr "საჯარო გასაღების დაყენება" -msgid "Identity" -msgstr "იდენტიფიკაცია" +msgid "Settings" +msgstr "მორგება" -msgid "Network Services" -msgstr "ქსელური სერვისები" +msgid "Shared" +msgstr "გაზიარებული" -msgid "Policy" -msgstr "წესები" +msgid "Show" +msgstr "ჩვენება" -msgid "Role-Based Access Control" -msgstr "" +msgid "Show QR code" +msgstr "QR კოდის ჩვენება" -msgid "Subordinate IDs" -msgstr "" +msgid "Show details" +msgstr "დეტალების ჩვენება" -msgid "Sudo" -msgstr "" +msgid "Signature" +msgstr "ხელმოწერა" + +msgid "Size" +msgstr "ზომა" + +msgid "Source Hosts" +msgstr "საწყისი ჰოსტები" + +msgid "Source host" +msgstr "საწყისი ჰოსტი" + +msgid "Stage" +msgstr "ნაბიჯი" + +msgid "Standard" +msgstr "სტანდარტული" + +msgid "State" +msgstr "მდგომარეობა" + +msgid "State/Province" +msgstr "რეგიონი/მხარე" + +msgid "Status" +msgstr "სტატუსი" + +msgid "Street address" +msgstr "ქუჩის მისამართი" + +msgid "Subject" +msgstr "თემა" + +msgid "Subtype" +msgstr "ქვეტიპი" + +msgid "Success" +msgstr "წარმატება" + +msgid "Synchronizing" +msgstr "სინქრონიზაცია" + +msgid "Target" +msgstr "სამიზნე" + +msgid "Telephone Number" +msgstr "ტელეფონის ნომერი" + +msgid "Timeout" +msgstr "დროის ამოწურვა" msgid "Topology" msgstr "ტოპოლოგია" @@ -21734,2159 +946,297 @@ msgstr "ტოპოლოგია" msgid "True" msgstr "ჭეშმარიტი" -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" +msgid "Trust" +msgstr "ნდობა" -msgid "API Browser" -msgstr "" +msgid "Trusts" +msgstr "ნდობები" -msgid "First" -msgstr "პირველი" +msgid "Type" +msgstr "ტიპი" -msgid "Last" -msgstr "ბოლო" +msgid "UID" +msgstr "UID" -msgid "Next" -msgstr "შემდეგი" +msgid "URI" +msgstr "URI" -msgid "Page" -msgstr "გვერდი" +msgid "URL" +msgstr "URL" -msgid "Prev" -msgstr "წინა" +msgid "UUID" +msgstr "UUID" + +msgid "Unable to communicate with CMS" +msgstr "CMS-თან დაკავშირება შეუძლებელია" msgid "Undo" msgstr "დაბრუნება" -msgid "Undo this change." -msgstr "" +msgid "Unknown" +msgstr "უცნობი" -msgid "Undo All" -msgstr "" +msgid "Unknown Error" +msgstr "უცნობი შეცდომა" -msgid "Undo all changes in this field." -msgstr "" +msgid "Unlock" +msgstr "განბლოკვა" -msgid "Text does not match field pattern" -msgstr "" +msgid "Unsaved Changes" +msgstr "შეუნახავი ცვლილებები" -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -msgid "Must be a decimal number" -msgstr "" - -msgid "Format error" -msgstr "" - -msgid "Must be an integer" -msgstr "" - -msgid "Not a valid IP address" -msgstr "" - -msgid "Not a valid IPv4 address" -msgstr "" - -msgid "Not a valid IPv6 address" -msgstr "" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -msgid "Parse error" -msgstr "დამუშავების შეცდომა" - -msgid "Must be a positive number" -msgstr "უნდა წარმოადგენდეს დადებით რიცხვს" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -msgid "Required field" -msgstr "" +msgid "Unspecified" +msgstr "მიუთითებელი" msgid "Unsupported value" msgstr "მხარდაუჭერელი მნიშვნელობა" -msgid "kerberos ticket policy settings" -msgstr "" +msgid "Update" +msgstr "განახლება" -msgid "OTP max life" -msgstr "" +msgid "User" +msgstr "მომხმარებელი" -msgid "OTP token maximum ticket life (seconds)" -msgstr "" +msgid "User Group" +msgstr "მომხმარებლების ჯგუფი" -msgid "OTP max renew" -msgstr "" +msgid "User Groups" +msgstr "მომხმარებლის ჯგუფები" -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" +msgid "User ID" +msgstr "მომხმარებლის ID" -msgid "RADIUS max life" -msgstr "" +msgid "User Login" +msgstr "მომხმარებლის შესვლა" -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" +msgid "User Options" +msgstr "მომხმარებლის პარამეტრები" -msgid "RADIUS max renew" -msgstr "" +msgid "User group" +msgstr "მომხმარებლების ჯგუფი" -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" +msgid "User login" +msgstr "მომხმარებლის შესვლა" -msgid "PKINIT max life" -msgstr "" +msgid "User logins" +msgstr "მომხმარებლის სახელები" -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" +msgid "User name" +msgstr "მომხმარებლის სახელი" -msgid "PKINIT max renew" -msgstr "" +msgid "Username" +msgstr "მომხმარებელი" -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -msgid "IdP max life" -msgstr "" - -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "" - -msgid "IdP max renew" -msgstr "" - -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -msgid "password policy" -msgstr "" - -msgid "password policies" -msgstr "" - -msgid "Password Policies" -msgstr "" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "Grace login limit" -msgstr "" - -msgid "Number of LDAP authentications allowed after expiration" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -msgid "service" -msgstr "სერვისი" - -msgid "services" -msgstr "სერვისები" - -msgid "Service principal alias" -msgstr "" - -msgid "Base-64 encoded service certificate" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." -msgstr "" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -msgid "Add a new SMB service." -msgstr "" - -msgid "SMB service NetBIOS name" -msgstr "" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a service" -msgstr "" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "ვერ მოიძებნა" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "მნიშვნელობა" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -msgid "Certificate Authority" -msgstr "სერტიფიკატების გამომცემელი" - -msgid "Certificate Authorities" -msgstr "სერტიფიკატების გამომცემელი" - -msgid "Name for referencing the CA" -msgstr "" - -msgid "Description of the purpose of the CA" -msgstr "" - -msgid "Authority ID" -msgstr "" - -msgid "Dogtag Authority ID" -msgstr "" - -msgid "Subject DN" -msgstr "" - -msgid "Subject Distinguished Name" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Issuer Distinguished Name" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "RSN Version" -msgstr "" - -msgid "Random Serial Number Version" -msgstr "" - -msgid "Search for CAs." -msgstr "" - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "Display the properties of a CA." -msgstr "" - -msgid "Create a CA." -msgstr "" - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -msgid "Modify CA configuration." -msgstr "" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "" - -msgid "IPA CA cannot be disabled" -msgstr "" - -msgid "Enable a CA." -msgstr "" - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Subject email address" -msgstr "" - -msgid "Subject DNS name" -msgstr "" - -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -msgid "Subject URI" -msgstr "" - -msgid "Subject IP Address" -msgstr "" - -msgid "Subject OID" -msgstr "" - -msgid "Subject UPN" -msgstr "" - -msgid "Subject Kerberos principal name" -msgstr "" - -msgid "Subject Other Name" -msgstr "" - -msgid "Serial number (hex)" -msgstr "" - -msgid "Request status" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "ამოღებული" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Status of the certificate" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" +msgid "Users" msgstr "მომხმარებლები" +msgid "Valid from" +msgstr "Ძალაშია" + +msgid "Validation error" +msgstr "შემოწმების შეცდომა" + +msgid "Validity" +msgstr "სისწორე" + +msgid "Vault configuration" +msgstr "საცავის მორგება" + +msgid "Vendor" +msgstr "მომწოდებელი" + +msgid "Version" +msgstr "ვერსია" + +msgid "View" +msgstr "ხედი" + +msgid "Warning" +msgstr "ყურადღება" + +msgid "Weight" +msgstr "სიმძიმე" + +msgid "Working" +msgstr "მუშაობს" + +msgid "Your session has expired. Please log in again." +msgstr "სესიის ვადა გასულია. თავიდან შედით." + +msgid "ZIP" +msgstr "ZIP" + +msgid "basedn" +msgstr "basedn" + +msgid "cannot be longer that {} characters" +msgstr "არ შეიძლება {} სიმბოლოზე გრძელი იყოს" + msgid "command" msgstr "ბრძანება" msgid "commands" msgstr "ბრძანებები" -msgid "runAs user" -msgstr "" +msgid "delete" +msgstr "წაშლა" -msgid "runAs users" -msgstr "" +msgid "description" +msgstr "აღწერა" -msgid "group runAs" -msgstr "" +msgid "domain" +msgstr "დომენი" -msgid "runAs groups" -msgstr "" +msgid "entries" +msgstr "ჩანაწერები" -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" +msgid "entry" +msgstr "ჩანაწერი" -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Preserved user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -msgid "Password grace count" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" -msgstr "" - -msgid "Request must be a dict" -msgstr "" - -msgid "Request is missing \"method\"" -msgstr "" - -msgid "Request is missing \"params\"" -msgstr "" - -msgid "params must be a list" -msgstr "" - -msgid "params must contain [args, options]" -msgstr "" - -msgid "params[0] (aka args) must be a list" -msgstr "" - -msgid "params[1] (aka options) must be a dict" -msgstr "" - -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" - -msgid "CIFS server denied your credentials" -msgstr "" - -msgid "communication with CIFS server was unsuccessful" -msgstr "" - -msgid "AD domain controller" -msgstr "" - -msgid "unsupported functional level" -msgstr "" - -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" - -msgid "Cannot find specified domain or server name" -msgstr "" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" - -msgid "At least the domain or IP address should be specified" -msgstr "" - -#, python-format -msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" -msgstr "" - -msgid "no trusted domain is configured" -msgstr "" - -msgid "domain is not configured" -msgstr "" - -msgid "SID is not valid" -msgstr "" - -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "" - -msgid "SID does not match any trusted domain" -msgstr "" - -msgid "Trust setup" -msgstr "" - -msgid "Our domain is not configured" -msgstr "" - -msgid "No trusted domain is not configured" -msgstr "" - -msgid "trusted domain object" -msgstr "" - -msgid "domain is not trusted" -msgstr "" - -msgid "no trusted domain matched the specified flat name" -msgstr "" - -msgid "trusted domain object not found" -msgstr "" - -msgid "Object does not belong to a trusted domain" -msgstr "" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "" - -msgid "Ambiguous search, user domain was not specified" -msgstr "" - -msgid "Trusted domain did not return a unique object" -msgstr "" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "" - -msgid "trusted domain user not found" -msgstr "" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "" - -msgid "CIFS credentials object" -msgstr "" - -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "" - -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" - -#, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" - -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" - -msgid "Credentials" -msgstr "მომხმ/პაროლი" - -msgid "Missing credentials for cross-forest communication" -msgstr "" - -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" - -#, python-format -msgid "must equal %r" -msgstr "" - -msgid "Hello world" -msgstr "" - -#, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "" - -msgid "must be at least 1" -msgstr "" - -msgid "Out of memory\n" -msgstr "არასაკმარისი მეხსიერება!\n" - -msgid "Warning unrecognized encryption type.\n" -msgstr "" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -msgid "Out of memory!?\n" -msgstr "არასაკმარისი მეხსიერება!\n" - -msgid "Enctype comparison failed!\n" -msgstr "" - -msgid "Password is too long!\n" -msgstr "" - -msgid "Failed to create random key!\n" -msgstr "" - -msgid "Failed to create key!\n" -msgstr "" - -msgid "Bad or unsupported salt type.\n" -msgstr "" +msgid "filename" +msgstr "ფაილის სახელი" #, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" +msgid "fork() failed\n" +msgstr "fork() -ის შეცდომა\n" -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" +msgid "group" +msgstr "ჯგუფი" -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" +msgid "groups" +msgstr "ჯგუფები" -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" +msgid "host" +msgstr "ჰოსტი" -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" +msgid "host group" +msgstr "ჰოსტების ჯგუფი" -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" +msgid "host groups" +msgstr "ჰოსტის ჯგუფები" -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" +msgid "hostgroup" +msgstr "ჰოსტების ჯგუფი" -msgid "Unable to initialize STARTTLS session\n" -msgstr "" +msgid "hostgroups" +msgstr "ჰოსტის ჯგუფები" + +msgid "hostname" +msgstr "ჰოსტის სახელი" + +msgid "hosts" +msgstr "ჰოსტი" + +msgid "invalid port number" +msgstr "პორტის არასწორი ნომერი" + +msgid "is required" +msgstr "აუცილებელია" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "krb5_kt_close %1$d: %2$s\n" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "krb5_kt_get_entry %1$d: %2$s\n" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "krb5_kt_remove_entry %1$d: %2$s\n" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "krb5_parse_name %1$d: %2$s\n" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "krb5_unparse_name %1$d: %2$s\n" + +#, c-format +msgid "kvno %d\n" +msgstr "kvno %d\n" + +msgid "location" +msgstr "მდებარეობა" + +msgid "locations" +msgstr "მდებარეობები" + +msgid "not found" +msgstr "ვერ მოიძებნა" + +#, c-format +msgid "out of memory\n" +msgstr "არასაკმარისი მეხსიერება\n" + +msgid "password" +msgstr "პაროლი" + +msgid "permission" +msgstr "წვდომა" + +msgid "permissions" +msgstr "წვდომები" + +msgid "preserve" +msgstr "შენარჩუნება" + +msgid "privilege" +msgstr "პრივილეგიები" + +msgid "privileges" +msgstr "პრივილეგიები" + +#, c-format +msgid "read error\n" +msgstr "კითხვის შეცდომა\n" + +#, c-format +msgid "realm not found\n" +msgstr "რეალმი არ არსებობს\n" + +msgid "role" +msgstr "როლები" + +msgid "roles" +msgstr "როლები" + +msgid "seconds" +msgstr "წამი" + +msgid "server" +msgstr "სერვერი" + +msgid "servers" +msgstr "სერვერები" + +msgid "service" +msgstr "სერვისი" + +msgid "services" +msgstr "სერვისები" + +msgid "trust" +msgstr "ნდობა" + +msgid "trust configuration" +msgstr "ნდობის მორგება" + +msgid "unknown provider" +msgstr "უცნობი მომწოდებელი" + +msgid "url" +msgstr "url" + +msgid "user" +msgstr "მომხმარებელი" + +msgid "users" +msgstr "მომხმარებლები" + +msgid "value" +msgstr "მნიშვნელობა" + +msgid "value is missing" +msgstr "აკლია მნიშვნელობა" diff --git a/po/kn.po b/po/kn.po index dad70f660..dea1a89ec 100644 --- a/po/kn.po +++ b/po/kn.po @@ -18,1265 +18,317 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n!=1)\n" "X-Generator: Zanata 4.6.2\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, c-format -msgid "out of memory\n" -msgstr "" - -#, c-format -msgid "read error\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Removing principal %s\n" -msgstr "Service principal" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, fuzzy, c-format -msgid "Unable to parse principal\n" -msgstr "Kerberos principal" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -#, fuzzy -msgid "Print debugging information" -msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -#, fuzzy -msgid "Kerberos Service Principal Name" -msgstr "Kerberos principal" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -#, fuzzy -msgid "Realm name" -msgstr "ನಿಯಮದ ಹೆಸರು" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, c-format -msgid "Out of memory \n" -msgstr "" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -msgid "SASL Bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Out of Memory!\n" -msgstr "" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "ಗುಪ್ತಪದಗಳು ಹೊಂದಾಣಿಕೆಯಾಗುತ್ತಿಲ್ಲ!" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Output debug info" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -#, fuzzy -msgid "Server Name" -msgstr "ಸೇವೆಯ ಹೆಸರು" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -#, fuzzy -msgid "LDAP DN" -msgstr "LDAP URI" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -#, fuzzy -msgid "LDAP password" -msgstr "ಗುಪ್ತಪದ" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -msgid "Path to the IPA CA certificate" -msgstr "" - -#, fuzzy -msgid "IPA CA certificate" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -#, fuzzy -msgid "Enter LDAP password" -msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" - -#, c-format -msgid "Discovered server %s\n" -msgstr "" - -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Using provided server %s\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -#, fuzzy -msgid "New Principal Password" -msgstr "Principal ಹೆಸರು" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, fuzzy, c-format -msgid "Invalid Service Principal Name\n" -msgstr "Service principal" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Out of memory!\n" -msgstr "" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "" - -#, c-format -msgid "Out of memory!" -msgstr "" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "" - -#, c-format -msgid "No values for %s" -msgstr "" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Host is already joined.\n" -msgstr "" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" - -#, c-format -msgid "json_dumps() failed\n" -msgstr "" - -#, fuzzy, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "ಅಸಿಂಧುವಾದ JSON-RPC ಬೇಡಿಕೆ: %(error)s" - -#, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "" - -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" - -#, c-format -msgid "fork() failed\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "" - -#, c-format -msgid "child exited with %d\n" -msgstr "" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "" - -#, fuzzy, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "Kerberos ಯೋಗ್ಯತಾಪತ್ರಗಳನ್ನು ಪಡೆದಿಲ್ಲ" - -#, fuzzy, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "ಯೋಗ್ಯತಾಪತ್ರಗಳ ಕ್ಯಾಶ್‌ನಲ್ಲಿ ಜೋಡಣೆ ಸರಿಯಿಲ್ಲ" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "" - -msgid "Quiet mode. Only errors are displayed." -msgstr "" - -msgid "Unenroll this host from IPA server" -msgstr "" - -msgid "Hostname of this server" -msgstr "" - -#, fuzzy -msgid "hostname" -msgstr "ಹೋಸ್ಟ್ ಹೆಸರು" - -msgid "IPA Server to use" -msgstr "" - -msgid "Specifies where to store keytab information." -msgstr "" - -#, fuzzy -msgid "filename" -msgstr "ನಿಯಮದ ಹೆಸರು" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" - -msgid "LDAP password (if not using Kerberos)" -msgstr "" - -#, fuzzy -msgid "password" -msgstr "ಗುಪ್ತಪದ" - -msgid "LDAP basedn" -msgstr "" - -msgid "basedn" -msgstr "" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "" - -msgid "Failed to add" -msgstr "" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" - -msgid "Unrevoked" -msgstr "ರದ್ದು ಮಾಡಲಾಗಿಲ್ಲ" - -msgid "Error" -msgstr "ದೋಷ" - -#, fuzzy -msgid "Input filename" -msgstr "ನಿಯಮದ ಹೆಸರು" - -msgid "File to load the certificate from." -msgstr "" - -msgid "cannot specify both raw certificate and file" -msgstr "" - -msgid "Input file" -msgstr "" - -msgid "File to load the certificate from" -msgstr "" +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" #, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "" - -msgid "Split DNS record to parts" -msgstr "" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "" +msgid "%(info)s" +msgstr "%(info)s" #, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" +msgid "%(reason)s" +msgstr "%(reason)s" -msgid "DNS resource record type" -msgstr "" +msgid "A description of this host" +msgstr "ಈ ಹೋಸ್ಟ್‌ನ ವಿವರಣೆ" -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" +msgid "A description of this host-group" +msgstr "ಈ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ನ ವಿವರಣೆ" -msgid "No option to modify specific record provided." -msgstr "" +msgid "A description of this role-group" +msgstr "ಈ ರೋಲ್-ಗ್ರೂಪ್‌ನ ವಿವರಣೆ" -msgid "Current DNS record contents:\n" -msgstr "" +msgid "A group may not be a member of itself" +msgstr "ಒಂದು ಗುಂಪು ಅದರ ಒಂದು ಸದಸ್ಯ ಆಗದಿರಬಹುದು" -#, fuzzy, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -msgid "No option to delete specific record provided." -msgstr "" - -msgid "Delete all?" -msgstr "" - -#, fuzzy, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "Server will check DNS forwarder(s)." -msgstr "" - -msgid "This may take some time, please wait ..." -msgstr "" - -msgid "DNS forwarder" -msgstr "" - -msgid "file to store DNS records in nsupdate format" -msgstr "" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -#, fuzzy -msgid "Maximum number of agreements per replica" -msgstr "ಕನಿಷ್ಟ ಸಂಖ್ಯೆಯ ಕ್ಯಾರಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -msgid "Delete a user" -msgstr "" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - -msgid "maps not connected to /etc/auto.master:" -msgstr "" - -msgid "Import automount files for a specific location." -msgstr "" - -msgid "Master file" -msgstr "" - -#, fuzzy -msgid "Automount master file." -msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" - -#, python-format -msgid "File %(file)s not found" -msgstr "" - -#, fuzzy, python-format -msgid "key %(key)s already exists" -msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" - -#, fuzzy, python-format -msgid "map %(map)s already exists" -msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" - -msgid "Imported maps:" -msgstr "" - -#, fuzzy, python-format -msgid "Added %(map)s" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Imported keys:" -msgstr "" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "" - -msgid "Ignored keys:" -msgstr "" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "" - -msgid "Duplicate maps skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(map)s" -msgstr "" - -msgid "Duplicate keys skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(key)s" -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -#, fuzzy -msgid "User ID" -msgstr "ಬಳಕೆದಾರ" - -msgid "Password" -msgstr "ಗುಪ್ತಪದ" - -#, fuzzy -msgid "First Code" -msgstr "ಮೊದಲ ಹೆಸರು" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "" - -msgid "Invalid credentials" -msgstr "" - -msgid "Create a new vault." -msgstr "" - -#, fuzzy -msgid "Vault password" -msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" - -msgid "File containing the vault password" -msgstr "" - -msgid "File containing the vault public key" -msgstr "" - -msgid "Password can be specified only for symmetric vault" -msgstr "" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "" - -msgid "Password specified multiple times" -msgstr "" - -msgid "Public key specified multiple times" -msgstr "" - -msgid "Missing vault public key" -msgstr "" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "" - -msgid "Modify a vault." -msgstr "" - -#, fuzzy -msgid "Change password" -msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" - -msgid "Old vault password" -msgstr "" - -msgid "File containing the old vault password" -msgstr "" - -#, fuzzy -msgid "New vault password" -msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" - -msgid "File containing the new vault password" -msgstr "" - -msgid "Old vault private key" -msgstr "" - -msgid "File containing the old vault private key" -msgstr "" - -msgid "File containing the new vault public key" -msgstr "" - -msgid "New public key specified multiple times" -msgstr "" - -msgid "Missing new vault public key" -msgstr "" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "" - -msgid "Binary data to archive" -msgstr "" - -msgid "File containing data to archive" -msgstr "" - -msgid "Override existing password" -msgstr "" - -msgid "Input data specified multiple times" -msgstr "" - -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" - -msgid "Invalid vault type" -msgstr "" - -msgid "Retrieve a data from a vault." -msgstr "" - -msgid "File to store retrieved data" -msgstr "" - -msgid "Vault private key" -msgstr "" - -msgid "File containing the vault private key" -msgstr "" - -msgid "Data" -msgstr "ದತ್ತಾಂಶ" - -msgid "Private key specified multiple times" -msgstr "" - -msgid "Missing vault private key" -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" +msgid "A group may not be added as a member of itself" +msgstr "ಒಂದು ಗುಂಪು ಅದರ ಒಂದು ಸದಸ್ಯನಂತೆ ಸೇರಿಸಲು ಆಗದಿರಬಹುದು" msgid "ACI name" msgstr "ACI ಹೆಸರು" -#, fuzzy -msgid "Permission" -msgstr "ಅನುಮತಿಗಳು" +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" -#, fuzzy -msgid "Permission ACI grants access to" -msgstr "User group ACI grants access to" +msgid "ACIs" +msgstr "ACIs" -msgid "User group" -msgstr "ಬಳಕೆದಾರ ಗುಂಪು" +msgid "Access time" +msgstr "ಪ್ರವೇಶದ ಸಮಯ" -msgid "User group ACI grants access to" -msgstr "User group ACI grants access to" +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" -msgid "Permissions" -msgstr "ಅನುಮತಿಗಳು" +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "" +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" -msgid "Attributes to which the permission applies" -msgstr "" +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" msgid "Attributes" msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" -msgid "Type" -msgstr "ಬಗೆ" +msgid "Automount Keys" +msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" +msgid "Automount Maps" +msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" + +msgid "BIND update policy" +msgstr "BIND update policy" + +msgid "Bad format in credentials cache" +msgstr "ಯೋಗ್ಯತಾಪತ್ರಗಳ ಕ್ಯಾಶ್‌ನಲ್ಲಿ ಜೋಡಣೆ ಸರಿಯಿಲ್ಲ" + +msgid "Base-64 encoded server certificate" +msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Base64 ಡೆಕೋಡಿಂಗ್ ವಿಫಲಗೊಂಡಿದೆ: %(reason)s" + +msgid "Bind DN" +msgstr "ಬೈಂಡ್ DN" + +msgid "Cannot resolve KDC for requested realm" +msgstr "ಕೋರಿದ ಕ್ಷೇತ್ರ(ರೆಲ್ಮ್)ಕ್ಕಾಗಿ KDC ಯನ್ನು ಬಗೆಹರಿಸಲು ಆಗುತ್ತಿಲ್ಲ" + +msgid "Certificate" +msgstr "ಪ್ರಮಾಣಪತ್ರ" + +msgid "Certificate Subject base" +msgstr "ಪ್ರಮಾಣಪತ್ರದ ವಿಷಯ ಮೂಲ" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "ಪ್ರಮಾಣಪತ್ರದ ಕಾರ್ಯಾಚರಣೆಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲು ಆಗುತ್ತಿಲ್ಲ: %(error)s" + +msgid "Character classes" +msgstr "ಕ್ಯಾರೆಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" + +msgid "Class" +msgstr "ವರ್ಗ" + +msgid "Command not implemented" +msgstr "ಆಜ್ಞೆ(ಕಮ್ಯಾಂಡ್)ಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲಾಗಿಲ್ಲ" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" + +msgid "Credentials cache permissions incorrect" +msgstr "ಯೋಗ್ಯತಾಪತ್ರಗಳ ಕ್ಯಾಶ್‌ನ ಅನುಮತಿಗಳು ಸರಿಯಿಲ್ಲ" + +msgid "DNS" +msgstr "DNS" + +msgid "Data" +msgstr "ದತ್ತಾಂಶ" + +msgid "Default shell" +msgstr "ಡೀಫಾಲ್ಟ್ ಶೆಲ್" + +msgid "Default users group" +msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" + +msgid "Description" +msgstr "ವಿವರಣೆ" + +msgid "Email address" +msgstr "ಇಮೇಲ್ ವಿಳಾಸ" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "ಮತ್ತೊಮ್ಮೆ ಪರಿಶೀಲಿಸಲು %(label)s ಎಂಟರ್ ಮಾಡಿ:" + +msgid "Error" +msgstr "ದೋಷ" + +msgid "External host" +msgstr "ಹೊರಗಿನ ಹೋಸ್ಟ್" + +msgid "Failed members" +msgstr "ವಿಫಲಗೊಂಡ ಸದಸ್ಯರು" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "ಪ್ರಮಾಣಪತ್ರದ ಸಹಿಯ ಕೋರಿಕೆಯ ಡಿಕೋಡಿಂಗ್‌ನ ವಿಫಲತೆ: %s" + +msgid "Filter" +msgstr "ಶೋಧಕ (ಫಿಲ್ಟರ್)" + +msgid "First name" +msgstr "ಮೊದಲ ಹೆಸರು" + +msgid "GID" +msgstr "GID" + +msgid "GID (use this option to set it manually)" +msgstr "GID (ಇದನ್ನು ಮ್ಯಾನ್ಯೂವಲ್ ಆಗಿ ಸೆಟ್ ಮಾಡಲು ಈ ಆಯ್ಕೆಯನ್ನು ಬಳಸಿ)" + +msgid "Group" +msgstr "ಗುಂಪು" + +#, python-format +msgid "Group '%s' does not exist" +msgstr " '%s' ಗುಂಪು ಅಸ್ತಿತ್ವದಲ್ಲಿಲ್ಲ" + +msgid "Group container" +msgstr "ಗುಂಪಿನ ಕಂಟೇನರ್" + +msgid "Group description" +msgstr "ಗುಂಪಿನ ವಿವರಣೆ" + +msgid "Group name" +msgstr "ಗುಂಪಿನ ಹೆಸರು" + +msgid "Group to apply ACI to" +msgstr "Group to apply ACI to" + +msgid "Groups" +msgstr "ಗುಂಪುಗಳು" + +msgid "History size" +msgstr "ಇತಿಹಾಸದ ಗಾತ್ರ" + +msgid "Home directory base" +msgstr "ಹೋಮ್ ಡೈರೆಕ್ಟರೀ ಮೂಲ" + +msgid "Host Groups" +msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" + +msgid "Host category" +msgstr "ಹೋಸ್ಟ್ ವರ್ಗ" + +msgid "Host category the rule applies to" +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "ಹೋಸ್ಟ್ ಹಾರ್ಡ್‌ವೇರ್ ಪ್ಲ್ಯಾಟ್‌ಫಾರ್ಮ್ (e.g. \"Lenovo T61\")" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "ಹೋಸ್ಟ್ ತಾಣ (e.g. \"Baltimore, MD\")" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "ಹೋಸ್ಟ್ ತಾಣ (e.g. \"Lab 2\")" + +msgid "Host name" +msgstr "ಹೋಸ್ಟ್ ಹೆಸರು" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "ಹೋಸ್ಟ್ ಕಾರ್ಯಕಾರಿ ವ್ಯವಸ್ಥೆ ಮತ್ತು ಆವೃತ್ತಿ (e.g. \"Fedora 9\")" + +msgid "Host-group" +msgstr "ಹೋಸ್ಟ್-ಗುಂಪು" + +msgid "Hosts" +msgstr "ಹೋಸ್ಟ್‌ಗಳು" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "ನಿಲುಕಣೆ(ಆಕ್ಸೆಸ್) ಸಾಲದಾಗಿದೆ: %(info)s" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "ಅಸಿಂಧುವಾದ JSON-RPC ಬೇಡಿಕೆ: %(error)s" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Kerberos ದೋಷ: %(major)s/%(minor)s" + +msgid "Kerberos principal" +msgstr "Kerberos principal" + +msgid "Kerberos principal name for this host" +msgstr "ಈ ಹೋಸ್ಟ್‌ಗೆ Kerberos principalನ ಹೆಸರು" + +msgid "Key" +msgstr "ಕೀ" + +msgid "LDAP URI" +msgstr "LDAP URI" + +msgid "LDAP URI of DS server to migrate from" +msgstr "LDAP URI of DS server to migrate from" + +msgid "Last name" +msgstr "ಕೊನೆಯ ಹೆಸರು" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "Legal LDAP filter (e.g. ou=Engineering)" + +msgid "Locality" +msgstr "ಪ್ರದೇಶ" + +msgid "Location" +msgstr "ಸ್ಥಳ" + +msgid "Login shell" +msgstr "ಪ್ರವೇಶ ಶೆಲ್" + +msgid "Manage ticket policy for specific user" +msgstr "ನಿಗದಿತ ಬಳಕೆದಾರನಿಗೆ ಟಿಕೆಟ್ ಪಾಲಿಸಿಯನ್ನು ನಿರ್ವಹಿಸು" + +msgid "Map" +msgstr "ನಕ್ಷೆ" + +msgid "Max life" +msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ" + +msgid "Max lifetime (days)" +msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ (ದಿನಗಳು)" + +msgid "Max renew" +msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" + +msgid "Maximum password lifetime (in days)" +msgstr "ಗುಪ್ತಪದದ ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ (ದಿನಗಳಲ್ಲಿ)" + +msgid "Member groups" +msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" + +msgid "Member host-groups" +msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ಗಳು" + +msgid "Member hosts" +msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್‌ಗಳು" msgid "Member of" msgstr "ಸದಸ್ಯ" @@ -1284,11 +336,189 @@ msgstr "ಸದಸ್ಯ" msgid "Member of a group" msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" -msgid "Filter" -msgstr "ಶೋಧಕ (ಫಿಲ್ಟರ್)" +msgid "Member of host-groups" +msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಸದಸ್ಯ" -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "Legal LDAP filter (e.g. ou=Engineering)" +msgid "Member users" +msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" + +msgid "Min length" +msgstr "ಕನಿಷ್ಟ ಉದ್ದ" + +msgid "Min lifetime (hours)" +msgstr "ಕನಿಷ್ಟ ಜೀವಿತಾವಧಿ (ಘಂಟೆಗಳು)" + +msgid "Minimum length of password" +msgstr "ಗುಪ್ತಪದದ ಕನಿಷ್ಟ ಉದ್ದ" + +msgid "Minimum number of character classes" +msgstr "ಕನಿಷ್ಟ ಸಂಖ್ಯೆಯ ಕ್ಯಾರಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" + +msgid "Minimum password lifetime (in hours)" +msgstr "ಗುಪ್ತಪದದ ಕನಿಷ್ಟ ಜೀವಿತಾವಧಿ (ಘಂಟೆಗಳಲ್ಲಿ)" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" + +msgid "Mount information" +msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" + +msgid "Mount point" +msgstr "ಮೌಂಟ್ ಪಾಯಂಟ್" + +msgid "NIS domain name" +msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" + +msgid "Name of host-group" +msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಹೆಸರು" + +msgid "Netgroup description" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ವಿವರಣೆ" + +msgid "Netgroup name" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ಹೆಸರು" + +msgid "Netgroups" +msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" + +msgid "No credentials cache found" +msgstr "ಕ್ಯಾಶ್‌ನಲ್ಲಿ ಯೋಗ್ಯತಾಪತ್ರಗಳು ಸಿಗುತ್ತಿಲ್ಲ" + +msgid "Only one value is allowed" +msgstr "ಕೇವಲ ಒಂದು ಬೆಲೆ ಮಾತ್ರ ಅನುಮೋದಿಸಲಾಗಿದೆ" + +msgid "Operating system" +msgstr "ಕಾರ್ಯಕಾರಿ ವ್ಯವಸ್ಥೆ" + +msgid "Parent map" +msgstr "Parent map" + +msgid "Password" +msgstr "ಗುಪ್ತಪದ" + +msgid "Password history size" +msgstr "ಗುಪ್ತಪದ ಇತಿಹಾಸದ ಗಾತ್ರ" + +msgid "Password used in bulk enrollment" +msgstr "ದೊಡ್ಡ ಪ್ರಮಾಣದ ದಾಖಲಾತಿಯಲ್ಲಿ ಬಳಸಲಾದ ಗುಪ್ತಪದ" + +msgid "Passwords do not match" +msgstr "ಗುಪ್ತಪದಗಳು ಹೊಂದಾಣಿಕೆಯಾಗುತ್ತಿಲ್ಲ" + +msgid "Passwords do not match!" +msgstr "ಗುಪ್ತಪದಗಳು ಹೊಂದಾಣಿಕೆಯಾಗುತ್ತಿಲ್ಲ!" + +msgid "Permissions" +msgstr "ಅನುಮತಿಗಳು" + +msgid "Platform" +msgstr "ಪ್ಲಾಟ್‌ಫಾರ್ಮ್" + +msgid "Principal" +msgstr "Principal" + +msgid "Principal name" +msgstr "Principal ಹೆಸರು" + +msgid "Priority" +msgstr "ಆದ್ಯತೆ" + +msgid "Reason" +msgstr "ಕಾರಣ" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "ಪ್ರಮಾಣಪತ್ರವನ್ನು (0-10) ರದ್ದು ಮಾಡಲು ಕಾರಣ" + +msgid "Request id" +msgstr "ಬೇಡಿಕೆ ID" + +msgid "Request status" +msgstr "ಬೇಡಿಕೆ ಸ್ಥಿತಿ" + +msgid "Results are truncated, try a more specific search" +msgstr "ಫಲಿತಾಂಶಗಳು ಕತ್ತರಿಸಲ್ಪಟ್ಟಿವೆ, ಹೆಚ್ಚ್ಹು ನಿರ್ದಿಷ್ಟವಾದ ಶೋಧನೆ ಪ್ರಯತ್ನಿಸಿ" + +msgid "Revocation reason" +msgstr "ರದ್ದು ಮಾಡುವುದಕ್ಕೆ ಕಾರಣ" + +msgid "Revoked" +msgstr "ರದ್ದು ಮಾಡಲಾಗಿದೆ" + +msgid "Rule name" +msgstr "ನಿಯಮದ ಹೆಸರು" + +msgid "SOA class" +msgstr "SOA class" + +msgid "SOA expire" +msgstr "SOA expire" + +msgid "SOA minimum" +msgstr "SOA minimum" + +msgid "SOA refresh" +msgstr "SOA refresh" + +msgid "SOA retry" +msgstr "SOA retry" + +msgid "SOA serial" +msgstr "SOA serial" + +msgid "Search size limit" +msgstr "ಹುಡುಕು ಗಾತ್ರ ಮಿತಿ" + +msgid "Search time limit" +msgstr "ಹುಡುಕು ಸಮಯ ಮಿತಿ" + +msgid "Serial number" +msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "ಕ್ರಮ ಸಂಖ್ಯೆ ಡೆಸಿಮಲ್‌ನಲ್ಲಿ ಅಥವಾ 0x ಮೊದಲು ಸೇರಿಸಿದ್ದಲ್ಲಿ ಹೆಕ್ಸಾಡೆಸಿಮಲ್‌ನಲ್ಲಿ" + +msgid "Service name" +msgstr "ಸೇವೆಯ ಹೆಸರು" + +msgid "Service principal" +msgstr "Service principal" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "ಈ ಪ್ರಮಾಣಪತ್ರಕ್ಕಾಗಿ Service principal (e.g. HTTP/test.example.com)" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" +"Service principalನ ಸ್ವರೂಪ ಹೀಗಿಲ್ಲ: service/fully-qualified host name: " +"%(reason)s" + +msgid "Services" +msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" + +msgid "Street address" +msgstr "ಕೇರಿ ವಿಳಾಸ" + +msgid "Subject" +msgstr "ವಿಷಯ" msgid "Subtree" msgstr "ಉಪವೃಕ್ಷ" @@ -1299,10612 +529,9 @@ msgstr "Subtree to apply ACI to" msgid "Target group" msgstr "Target ಗುಂಪು" -msgid "Group to apply ACI to" -msgstr "Group to apply ACI to" - -msgid "Target your own entry (self)" -msgstr "" - -msgid "Apply ACI to your own entry (self)" -msgstr "" - -msgid "Create new ACI." -msgstr "" - -msgid "ACI prefix" -msgstr "" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" - -msgid "Test the ACI syntax but don't write anything" -msgstr "" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" - -msgid "User-friendly description of action performed" -msgstr "" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" - -msgid "Delete ACI." -msgstr "" - -msgid "True means the operation was successful" -msgstr "" - -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" - -msgid "A string searched in all relevant object attributes" -msgstr "" - -msgid "Primary key only" -msgstr "" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" - -msgid "Number of entries returned" -msgstr "" - -msgid "True if not all results were returned" -msgstr "" - -msgid "Modify ACI." -msgstr "" - -msgid "Rename an ACI." -msgstr "" - -#, fuzzy -msgid "New ACI name" -msgstr "ACI ಹೆಸರು" - -msgid "Display a single ACI given an ACI name." -msgstr "" - -msgid "Location of the ACI" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Description" -msgstr "ವಿವರಣೆ" - -#, fuzzy -msgid "A description of this auto member rule" -msgstr "ಈ ರೋಲ್-ಗ್ರೂಪ್‌ನ ವಿವರಣೆ" - -#, fuzzy -msgid "Default (fallback) Group" -msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - -#, fuzzy -msgid "Grouping Type" -msgstr "ಗುಂಪಿನ ಹೆಸರು" - -#, fuzzy -msgid "Grouping to which the rule applies" -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -#, fuzzy -msgid "Attribute Key" -msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "List of deletions that failed" -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Users" -msgstr "ಬಳಕೆದಾರರು" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Hosts" -msgstr "ಹೋಸ್ಟ್‌ಗಳು" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" - -msgid "Key" -msgstr "ಕೀ" - -#, fuzzy -msgid "Automount key name." -msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" - -msgid "Mount information" -msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" - -msgid "description" -msgstr "ವಿವರಣೆ" - -msgid "Location" -msgstr "ಸ್ಥಳ" - -msgid "Automount location name." -msgstr "" - -msgid "Map" -msgstr "ನಕ್ಷೆ" - -#, fuzzy -msgid "Automount map name." -msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" - -msgid "Create a new automount key." -msgstr "" - -msgid "Delete an automount key." -msgstr "" - -msgid "Continuous mode: Don't stop on errors." -msgstr "" - -msgid "Search for an automount key." -msgstr "" - -msgid "Time Limit" -msgstr "" - -msgid "Time limit of search in seconds" -msgstr "" - -#, fuzzy -msgid "Size Limit" -msgstr "ಹುಡುಕು ಗಾತ್ರ ಮಿತಿ" - -msgid "Maximum number of entries returned" -msgstr "" - -msgid "Modify an automount key." -msgstr "" - -#, fuzzy -msgid "New mount information" -msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" - -#, fuzzy -msgid "Rename" -msgstr "ನಿಯಮದ ಹೆಸರು" - -msgid "Rename the automount key object" -msgstr "" - -msgid "Display an automount key." -msgstr "" - -msgid "Create a new automount location." -msgstr "" - -msgid "Delete an automount location." -msgstr "" - -msgid "Search for an automount location." -msgstr "" - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" - -msgid "Display an automount location." -msgstr "" - -msgid "Generate automount files for a specific location." -msgstr "" - -msgid "Create a new automount map." -msgstr "" - -msgid "Create a new indirect mount point." -msgstr "" - -msgid "Mount point" -msgstr "ಮೌಂಟ್ ಪಾಯಂಟ್" - -msgid "Parent map" -msgstr "Parent map" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" - -msgid "Delete an automount map." -msgstr "" - -msgid "Search for an automount map." -msgstr "" - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" - -msgid "Modify an automount map." -msgstr "" - -msgid "Display an automount map." -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" - -msgid "Nested Methods to execute" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -#, fuzzy -msgid "Search for existing certificates." -msgstr "ಪ್ರಮಾಣಪತ್ರವನ್ನು (0-10) ರದ್ದು ಮಾಡಲು ಕಾರಣ" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason" -msgstr "ಕಾರಣ" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "ಪ್ರಮಾಣಪತ್ರವನ್ನು (0-10) ರದ್ದು ಮಾಡಲು ಕಾರಣ" - -#, fuzzy -msgid "minimum serial number" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" - -#, fuzzy -msgid "maximum serial number" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -#, fuzzy -msgid "Maximum number of certs returned" -msgstr "ಕನಿಷ್ಟ ಸಂಖ್ಯೆಯ ಕ್ಯಾರಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "ಕ್ರಮ ಸಂಖ್ಯೆ ಡೆಸಿಮಲ್‌ನಲ್ಲಿ ಅಥವಾ 0x ಮೊದಲು ಸೇರಿಸಿದ್ದಲ್ಲಿ ಹೆಕ್ಸಾಡೆಸಿಮಲ್‌ನಲ್ಲಿ" - -#, fuzzy -msgid "Submit a certificate signing request." -msgstr "ಪ್ರಮಾಣಪತ್ರದ ಸಹಿಯ ಕೋರಿಕೆಯ ಡಿಕೋಡಿಂಗ್‌ನ ವಿಫಲತೆ: %s" - -msgid "CSR" -msgstr "" - -msgid "Principal" -msgstr "Principal" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "ಈ ಪ್ರಮಾಣಪತ್ರಕ್ಕಾಗಿ Service principal (e.g. HTTP/test.example.com)" - -msgid "automatically add the principal if it doesn't exist" -msgstr "ಸ್ವಯಂಚಾಲಿತವಾಗಿ principal ಸೇರಿಸಿ ಅದು ಅಸ್ತಿತ್ವದಲ್ಲಿ ಇಲ್ಲದಿದ್ದಲ್ಲಿ" - -msgid "Dictionary mapping variable name to value" -msgstr "" - -#, fuzzy -msgid "Revoke a certificate." -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "" - -#, fuzzy -msgid "File to store the certificate in." -msgstr "ಪ್ರಮಾಣಪತ್ರವನ್ನು (0-10) ರದ್ದು ಮಾಡಲು ಕಾರಣ" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "ಬೇಡಿಕೆ ID" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -#, fuzzy -msgid "Maximum username length" -msgstr "ಕನಿಷ್ಟ ಉದ್ದ" - -msgid "Home directory base" -msgstr "ಹೋಮ್ ಡೈರೆಕ್ಟರೀ ಮೂಲ" - -msgid "Default location of home directories" -msgstr "" - -msgid "Default shell" -msgstr "ಡೀಫಾಲ್ಟ್ ಶೆಲ್" - -#, fuzzy -msgid "Default shell for new users" -msgstr "ಡೀಫಾಲ್ಟ್ ಶೆಲ್" - -msgid "Default users group" -msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" - -msgid "Default group for new users" -msgstr "" - -msgid "Default e-mail domain" -msgstr "" - -msgid "Search time limit" -msgstr "ಹುಡುಕು ಸಮಯ ಮಿತಿ" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" - -msgid "Search size limit" -msgstr "ಹುಡುಕು ಗಾತ್ರ ಮಿತಿ" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "" - -msgid "User search fields" -msgstr "ಬಳಕೆದಾರನ ಶೋಧ ಫೀಲ್ಡ್‌ಗಳು" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" - -#, fuzzy -msgid "Group search fields" -msgstr "ಬಳಕೆದಾರನ ಶೋಧ ಫೀಲ್ಡ್‌ಗಳು" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" - -msgid "Enable migration mode" -msgstr "" - -msgid "Certificate Subject base" -msgstr "ಪ್ರಮಾಣಪತ್ರದ ವಿಷಯ ಮೂಲ" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "" - -msgid "Default group objectclasses" -msgstr "" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "" - -#, fuzzy -msgid "Default user objectclasses" -msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" - -msgid "Password Expiration Notification (days)" -msgstr "" - -msgid "Number of days's notice of impending password expiration" -msgstr "" - -msgid "Password plugin features" -msgstr "" - -msgid "Extra hashes to generate in password plug-in" -msgstr "" - -msgid "SELinux user map order" -msgstr "" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" - -#, fuzzy -msgid "Default SELinux user" -msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" - -#, fuzzy -msgid "Default PAC types" -msgstr "ಡೀಫಾಲ್ಟ್ ಶೆಲ್" - -msgid "Default types of PAC supported for services" -msgstr "" - -msgid "Default user authentication types" -msgstr "" - -msgid "Default types of supported user authentication" -msgstr "" - -msgid "Modify configuration options." -msgstr "" - -msgid "Show the current configuration." -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "Delegation name" -msgstr "" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "" - -msgid "Attributes to which the delegation applies" -msgstr "" - -#, fuzzy -msgid "Member user group" -msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" - -#, fuzzy -msgid "User group to apply delegation to" -msgstr "Group to apply ACI to" - -msgid "Add a new delegation." -msgstr "" - -msgid "Delete a delegation." -msgstr "" - -msgid "Search for delegations." -msgstr "" - -msgid "Modify a delegation." -msgstr "" - -msgid "Display information about a delegation." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "Global forwarders" -msgstr "" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Forward policy" -msgstr "" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" - -msgid "Allow PTR sync" -msgstr "" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" - -msgid "Zone refresh interval" -msgstr "" - -msgid "Zone name" -msgstr "ವಲಯದ ಹೆಸರು" - -msgid "Zone name (FQDN)" -msgstr "ವಲಯದ ಹೆಸರು (FQDN)" - -msgid "Reverse zone IP network" -msgstr "" - -msgid "IP network to create reverse zone name from" -msgstr "" - -msgid "Active zone" -msgstr "" - -msgid "Is zone active?" -msgstr "" - -msgid "Zone forwarders" -msgstr "" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -#, fuzzy -msgid "Record name" -msgstr "ನಿಯಮದ ಹೆಸರು" - -msgid "Time to live" -msgstr "ಉಳಿದಿರಬೇಕಾದ ಸಮಯ" - -msgid "Records" -msgstr "" - -#, fuzzy -msgid "Record type" -msgstr "ಸರಿಯಲ್ಲದ ಬಗೆ" - -msgid "Record data" -msgstr "" - -msgid "A record" -msgstr "" - -msgid "Raw A records" -msgstr "" - -msgid "A IP Address" -msgstr "" - -#, fuzzy -msgid "IP Address" -msgstr "ಇಮೇಲ್ ವಿಳಾಸ" - -msgid "A Create reverse" -msgstr "" - -msgid "Create reverse record for this IP Address" -msgstr "" - -msgid "AAAA record" -msgstr "" - -msgid "Raw AAAA records" -msgstr "" - -msgid "AAAA IP Address" -msgstr "" - -msgid "AAAA Create reverse" -msgstr "" - -msgid "A6 record" -msgstr "" - -msgid "Raw A6 records" -msgstr "" - -msgid "A6 Record data" -msgstr "" - -msgid "AFSDB record" -msgstr "" - -msgid "Raw AFSDB records" -msgstr "" - -msgid "AFSDB Subtype" -msgstr "" - -#, fuzzy -msgid "Subtype" -msgstr "ಉಪವೃಕ್ಷ" - -#, fuzzy -msgid "AFSDB Hostname" -msgstr "ಹೋಸ್ಟ್ ಹೆಸರು" - -#, fuzzy -msgid "Hostname" -msgstr "ಹೋಸ್ಟ್ ಹೆಸರು" - -msgid "APL record" -msgstr "" - -msgid "Raw APL records" -msgstr "" - -msgid "CERT record" -msgstr "" - -msgid "Raw CERT records" -msgstr "" - -#, fuzzy -msgid "CERT Certificate Type" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -#, fuzzy -msgid "Certificate Type" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "CERT Key Tag" -msgstr "" - -msgid "Key Tag" -msgstr "" - -msgid "CERT Algorithm" -msgstr "" - -msgid "Algorithm" -msgstr "" - -#, fuzzy -msgid "CERT Certificate/CRL" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -#, fuzzy -msgid "Certificate/CRL" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "CNAME record" -msgstr "" - -msgid "Raw CNAME records" -msgstr "" - -#, fuzzy -msgid "CNAME Hostname" -msgstr "ಹೋಸ್ಟ್ ಹೆಸರು" - -msgid "A hostname which this alias hostname points to" -msgstr "" - -msgid "DHCID record" -msgstr "" - -msgid "Raw DHCID records" -msgstr "" - -msgid "DLV record" -msgstr "" - -msgid "Raw DLV records" -msgstr "" - -msgid "DLV Key Tag" -msgstr "" - -msgid "DLV Algorithm" -msgstr "" - -msgid "DLV Digest Type" -msgstr "" - -msgid "Digest Type" -msgstr "" - -msgid "DLV Digest" -msgstr "" - -msgid "Digest" -msgstr "" - -msgid "DNAME record" -msgstr "" - -msgid "Raw DNAME records" -msgstr "" - -msgid "DNAME Target" -msgstr "" - -#, fuzzy -msgid "Target" -msgstr "Target ಗುಂಪು" - -msgid "DNSKEY record" -msgstr "" - -msgid "Raw DNSKEY records" -msgstr "" - -msgid "DS record" -msgstr "" - -msgid "Raw DS records" -msgstr "" - -msgid "DS Key Tag" -msgstr "" - -msgid "DS Algorithm" -msgstr "" - -msgid "DS Digest Type" -msgstr "" - -msgid "DS Digest" -msgstr "" - -msgid "HIP record" -msgstr "" - -msgid "Raw HIP records" -msgstr "" - -msgid "IPSECKEY record" -msgstr "" - -msgid "Raw IPSECKEY records" -msgstr "" - -msgid "KEY record" -msgstr "" - -msgid "Raw KEY records" -msgstr "" - -msgid "KX record" -msgstr "" - -msgid "Raw KX records" -msgstr "" - -msgid "KX Preference" -msgstr "" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" - -msgid "KX Exchanger" -msgstr "" - -msgid "A host willing to act as a key exchanger" -msgstr "" - -msgid "LOC record" -msgstr "" - -msgid "Raw LOC records" -msgstr "" - -msgid "LOC Degrees Latitude" -msgstr "" - -msgid "Degrees Latitude" -msgstr "" - -msgid "LOC Minutes Latitude" -msgstr "" - -msgid "Minutes Latitude" -msgstr "" - -msgid "LOC Seconds Latitude" -msgstr "" - -msgid "Seconds Latitude" -msgstr "" - -msgid "LOC Direction Latitude" -msgstr "" - -msgid "Direction Latitude" -msgstr "" - -msgid "LOC Degrees Longitude" -msgstr "" - -msgid "Degrees Longitude" -msgstr "" - -msgid "LOC Minutes Longitude" -msgstr "" - -msgid "Minutes Longitude" -msgstr "" - -msgid "LOC Seconds Longitude" -msgstr "" - -msgid "Seconds Longitude" -msgstr "" - -msgid "LOC Direction Longitude" -msgstr "" - -msgid "Direction Longitude" -msgstr "" - -msgid "LOC Altitude" -msgstr "" - -msgid "Altitude" -msgstr "" - -msgid "LOC Size" -msgstr "" - -msgid "Size" -msgstr "" - -msgid "LOC Horizontal Precision" -msgstr "" - -msgid "Horizontal Precision" -msgstr "" - -msgid "LOC Vertical Precision" -msgstr "" - -msgid "Vertical Precision" -msgstr "" - -msgid "MX record" -msgstr "" - -msgid "Raw MX records" -msgstr "" - -msgid "MX Preference" -msgstr "" - -msgid "MX Exchanger" -msgstr "" - -msgid "A host willing to act as a mail exchanger" -msgstr "" - -msgid "NAPTR record" -msgstr "" - -msgid "Raw NAPTR records" -msgstr "" - -msgid "NAPTR Order" -msgstr "" - -msgid "Order" -msgstr "" - -msgid "NAPTR Preference" -msgstr "" - -msgid "Preference" -msgstr "" - -msgid "NAPTR Flags" -msgstr "" - -msgid "Flags" -msgstr "" - -#, fuzzy -msgid "NAPTR Service" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -#, fuzzy -msgid "Service" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -msgid "NAPTR Regular Expression" -msgstr "" - -msgid "Regular Expression" -msgstr "" - -msgid "NAPTR Replacement" -msgstr "" - -msgid "Replacement" -msgstr "" - -msgid "NS record" -msgstr "" - -msgid "Raw NS records" -msgstr "" - -#, fuzzy -msgid "NS Hostname" -msgstr "ಹೋಸ್ಟ್ ಹೆಸರು" - -msgid "NSEC record" -msgstr "" - -msgid "Raw NSEC records" -msgstr "" - -msgid "NSEC3 record" -msgstr "" - -msgid "Raw NSEC3 records" -msgstr "" - -msgid "PTR record" -msgstr "" - -msgid "Raw PTR records" -msgstr "" - -#, fuzzy -msgid "PTR Hostname" -msgstr "ಹೋಸ್ಟ್ ಹೆಸರು" - -msgid "The hostname this reverse record points to" -msgstr "" - -msgid "RRSIG record" -msgstr "" - -msgid "Raw RRSIG records" -msgstr "" - -msgid "RP record" -msgstr "" - -msgid "Raw RP records" -msgstr "" - -msgid "SIG record" -msgstr "" - -msgid "Raw SIG records" -msgstr "" - -msgid "SPF record" -msgstr "" - -msgid "Raw SPF records" -msgstr "" - -msgid "SRV record" -msgstr "" - -msgid "Raw SRV records" -msgstr "" - -#, fuzzy -msgid "SRV Priority" -msgstr "ಆದ್ಯತೆ" - -msgid "Priority" -msgstr "ಆದ್ಯತೆ" - -msgid "SRV Weight" -msgstr "" - -msgid "Weight" -msgstr "" - -msgid "SRV Port" -msgstr "" - -msgid "Port" -msgstr "" - -msgid "SRV Target" -msgstr "" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" - -msgid "SSHFP record" -msgstr "" - -msgid "Raw SSHFP records" -msgstr "" - -msgid "SSHFP Algorithm" -msgstr "" - -msgid "SSHFP Fingerprint Type" -msgstr "" - -msgid "Fingerprint Type" -msgstr "" - -msgid "SSHFP Fingerprint" -msgstr "" - -msgid "Fingerprint" -msgstr "" - -msgid "TA record" -msgstr "" - -msgid "Raw TA records" -msgstr "" - -#, fuzzy -msgid "TLSA record" -msgstr "SOA retry" - -msgid "Raw TLSA records" -msgstr "" - -#, fuzzy -msgid "TLSA Certificate Usage" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -#, fuzzy -msgid "Certificate Usage" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "TLSA Selector" -msgstr "" - -msgid "Selector" -msgstr "" - -msgid "TLSA Matching Type" -msgstr "" - -msgid "Matching Type" -msgstr "" - -msgid "TLSA Certificate Association Data" -msgstr "" - -#, fuzzy -msgid "Certificate Association Data" -msgstr "ಪ್ರಮಾಣಪತ್ರದ ವಿಷಯ ಮೂಲ" - -msgid "TKEY record" -msgstr "" - -msgid "Raw TKEY records" -msgstr "" - -msgid "TSIG record" -msgstr "" - -msgid "Raw TSIG records" -msgstr "" - -msgid "TXT record" -msgstr "" - -msgid "Raw TXT records" -msgstr "" - -msgid "TXT Text Data" -msgstr "" - -#, fuzzy -msgid "Text Data" -msgstr "ದತ್ತಾಂಶ" - -msgid "Authoritative nameserver" -msgstr "" - -msgid "Authoritative nameserver domain name" -msgstr "" - -msgid "Administrator e-mail address" -msgstr "" - -msgid "SOA serial" -msgstr "SOA serial" - -#, fuzzy -msgid "SOA record serial number" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" - -msgid "SOA refresh" -msgstr "SOA refresh" - -#, fuzzy -msgid "SOA record refresh time" -msgstr "SOA refresh" - -msgid "SOA retry" -msgstr "SOA retry" - -#, fuzzy -msgid "SOA record retry time" -msgstr "SOA retry" - -msgid "SOA expire" -msgstr "SOA expire" - -#, fuzzy -msgid "SOA record expire time" -msgstr "SOA expire" - -msgid "SOA minimum" -msgstr "SOA minimum" - -msgid "How long should negative responses be cached" -msgstr "" - -msgid "Time to live for records at zone apex" -msgstr "" - -msgid "BIND update policy" -msgstr "BIND update policy" - -msgid "Dynamic update" -msgstr "" - -msgid "Allow dynamic updates." -msgstr "" - -msgid "Allow query" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" - -msgid "Allow transfer" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" - -msgid "Allow in-line DNSSEC signing" -msgstr "" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "" - -msgid "NSEC3PARAM record" -msgstr "" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" - -msgid "Resolve a host name in DNS." -msgstr "" - -msgid "Modify global DNS configuration." -msgstr "" - -msgid "Show the current global DNS configuration." -msgstr "" - -msgid "Create new DNS forward zone." -msgstr "" - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" - -#, fuzzy -msgid "Permission value" -msgstr "ಅನುಮತಿಗಳು" - -msgid "Delete DNS forward zone." -msgstr "" - -msgid "Disable DNS Forward Zone." -msgstr "" - -msgid "Enable DNS Forward Zone." -msgstr "" - -msgid "Search for DNS forward zones." -msgstr "" - -msgid "Modify DNS forward zone." -msgstr "" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" - -msgid "Display information about a DNS forward zone." -msgstr "" - -msgid "Add new DNS resource record." -msgstr "" - -msgid "Force" -msgstr "" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "" - -msgid "Structured" -msgstr "" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" - -msgid "Delete DNS resource record." -msgstr "" - -msgid "Delete all associated records" -msgstr "" - -msgid "Delete DNS record entry." -msgstr "" - -msgid "Search for DNS resources." -msgstr "" - -msgid "Modify a DNS resource record." -msgstr "" - -msgid "Rename the DNS resource record object" -msgstr "" - -msgid "Display DNS resource." -msgstr "" - -msgid "Create new DNS zone (SOA record)." -msgstr "" - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" - -msgid "Add a permission for per-zone access delegation." -msgstr "" - -msgid "Delete DNS zone (SOA record)." -msgstr "" - -msgid "Disable DNS Zone." -msgstr "" - -msgid "Enable DNS Zone." -msgstr "" - -msgid "Search for DNS zones (SOA records)." -msgstr "" - -msgid "Forward zones only" -msgstr "" - -msgid "Search for forward zones only" -msgstr "" - -msgid "Modify DNS zone (SOA record)." -msgstr "" - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" - -msgid "Remove a permission for per-zone access delegation." -msgstr "" - -msgid "Display information about a DNS zone (SOA record)." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "Group name" -msgstr "ಗುಂಪಿನ ಹೆಸರು" - -msgid "Group description" -msgstr "ಗುಂಪಿನ ವಿವರಣೆ" - -msgid "GID" -msgstr "GID" - -msgid "GID (use this option to set it manually)" -msgstr "GID (ಇದನ್ನು ಮ್ಯಾನ್ಯೂವಲ್ ಆಗಿ ಸೆಟ್ ಮಾಡಲು ಈ ಆಯ್ಕೆಯನ್ನು ಬಳಸಿ)" - -msgid "Member users" -msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" - -msgid "Member groups" -msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" - -#, fuzzy -msgid "Member of groups" -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -msgid "Roles" -msgstr "" - -#, fuzzy -msgid "Member of netgroups" -msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಸದಸ್ಯ" - -#, fuzzy -msgid "Member of Sudo rule" -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -#, fuzzy -msgid "Member of HBAC rule" -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -#, fuzzy -msgid "Indirect Member users" -msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" - -#, fuzzy -msgid "Indirect Member groups" -msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" - -#, fuzzy -msgid "Indirect Member of group" -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -#, fuzzy -msgid "Indirect Member of netgroup" -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -#, fuzzy -msgid "Indirect Member of role" -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Suppress processing of membership attributes." -msgstr "" - -#, fuzzy -msgid "Add members to a group." -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -#, fuzzy -msgid "External member" -msgstr "ಹೊರಗಿನ ಹೋಸ್ಟ್" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -#, fuzzy -msgid "member user" -msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" - -msgid "users to add" -msgstr "" - -#, fuzzy -msgid "member group" -msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" - -msgid "groups to add" -msgstr "" - -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - -#, fuzzy -msgid "Delete group." -msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "user" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -#, fuzzy -msgid "group" -msgstr "ಗುಂಪು" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -#, fuzzy -msgid "netgroup" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "role" -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "HBAC rule" -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "sudo rule" -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a group." -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -#, fuzzy -msgid "Remove members from a group." -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Rule name" -msgstr "ನಿಯಮದ ಹೆಸರು" - -#, fuzzy -msgid "Rule type" -msgstr "ನಿಯಮದ ಹೆಸರು" - -msgid "Rule type (allow)" -msgstr "" - -msgid "User category" -msgstr "ಬಳಕೆದಾರನ ವರ್ಗ" - -msgid "User category the rule applies to" -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಬಳಕೆದಾರನ ವರ್ಗ" - -msgid "Host category" -msgstr "ಹೋಸ್ಟ್ ವರ್ಗ" - -msgid "Host category the rule applies to" -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" - -#, fuzzy -msgid "Service category" -msgstr "ಬಳಕೆದಾರನ ವರ್ಗ" - -#, fuzzy -msgid "Service category the rule applies to" -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಬಳಕೆದಾರನ ವರ್ಗ" - -msgid "Enabled" -msgstr "" - -msgid "User Groups" -msgstr "ಬಳಕೆದಾರರ ಗುಂಪುಗಳು" - -msgid "Host Groups" -msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" - -msgid "Services" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -#, fuzzy -msgid "Service Groups" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -msgid "External host" -msgstr "ಹೊರಗಿನ ಹೋಸ್ಟ್" - -msgid "Create a new HBAC rule." -msgstr "" - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "" - -#, fuzzy -msgid "member host" -msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್‌ಗಳು" - -msgid "hosts to add" -msgstr "" - -#, fuzzy -msgid "member host group" -msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ಗಳು" - -#, fuzzy -msgid "host groups to add" -msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" - -msgid "Add services to an HBAC rule." -msgstr "" - -msgid "member HBAC service" -msgstr "" - -msgid "HBAC services to add" -msgstr "" - -#, fuzzy -msgid "member HBAC service group" -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -msgid "HBAC service groups to add" -msgstr "" - -msgid "Add users and groups to an HBAC rule." -msgstr "" - -msgid "Delete an HBAC rule." -msgstr "" - -msgid "Disable an HBAC rule." -msgstr "" - -msgid "Enable an HBAC rule." -msgstr "" - -msgid "Search for HBAC rules." -msgstr "" - -msgid "Modify an HBAC rule." -msgstr "" - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "hosts to remove" -msgstr "" - -msgid "host groups to remove" -msgstr "" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "" - -msgid "HBAC services to remove" -msgstr "" - -msgid "HBAC service groups to remove" -msgstr "" - -msgid "Remove users and groups from an HBAC rule." -msgstr "" - -msgid "Display the properties of an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" - -msgid "Service name" -msgstr "ಸೇವೆಯ ಹೆಸರು" - -#, fuzzy -msgid "HBAC service" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -#, fuzzy -msgid "HBAC service description" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ವಿವರಣೆ" - -#, fuzzy -msgid "Member of HBAC service groups" -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -msgid "Add a new HBAC service." -msgstr "" - -msgid "Delete an existing HBAC service." -msgstr "" - -msgid "Search for HBAC services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" - -msgid "Modify an HBAC service." -msgstr "" - -msgid "Display information about an HBAC service." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -#, fuzzy -msgid "Service group name" -msgstr "ಸೇವೆಯ ಹೆಸರು" - -#, fuzzy -msgid "HBAC service group description" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ವಿವರಣೆ" - -#, fuzzy -msgid "Member HBAC service" -msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" - -msgid "Add a new HBAC service group." -msgstr "" - -msgid "Add members to an HBAC service group." -msgstr "" - -msgid "Delete an HBAC service group." -msgstr "" - -msgid "Search for an HBAC service group." -msgstr "" - -msgid "Modify an HBAC service group." -msgstr "" - -msgid "Remove members from an HBAC service group." -msgstr "" - -msgid "Display information about an HBAC service group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -msgid "User name" -msgstr "ಬಳಕೆದಾರನ ಹೆಸರು" - -#, fuzzy -msgid "Target host" -msgstr "Target ಗುಂಪು" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host name" -msgstr "ಹೋಸ್ಟ್ ಹೆಸರು" - -msgid "A description of this host" -msgstr "ಈ ಹೋಸ್ಟ್‌ನ ವಿವರಣೆ" - -msgid "Locality" -msgstr "ಪ್ರದೇಶ" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "ಹೋಸ್ಟ್ ತಾಣ (e.g. \"Baltimore, MD\")" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "ಹೋಸ್ಟ್ ತಾಣ (e.g. \"Lab 2\")" - -msgid "Platform" -msgstr "ಪ್ಲಾಟ್‌ಫಾರ್ಮ್" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "ಹೋಸ್ಟ್ ಹಾರ್ಡ್‌ವೇರ್ ಪ್ಲ್ಯಾಟ್‌ಫಾರ್ಮ್ (e.g. \"Lenovo T61\")" - -msgid "Operating system" -msgstr "ಕಾರ್ಯಕಾರಿ ವ್ಯವಸ್ಥೆ" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "ಹೋಸ್ಟ್ ಕಾರ್ಯಕಾರಿ ವ್ಯವಸ್ಥೆ ಮತ್ತು ಆವೃತ್ತಿ (e.g. \"Fedora 9\")" - -msgid "User password" -msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" - -msgid "Password used in bulk enrollment" -msgstr "ದೊಡ್ಡ ಪ್ರಮಾಣದ ದಾಖಲಾತಿಯಲ್ಲಿ ಬಳಸಲಾದ ಗುಪ್ತಪದ" - -#, fuzzy -msgid "Generate a random password to be used in bulk enrollment" -msgstr "ದೊಡ್ಡ ಪ್ರಮಾಣದ ದಾಖಲಾತಿಯಲ್ಲಿ ಬಳಸಲಾದ ಗುಪ್ತಪದ" - -#, fuzzy -msgid "Random password" -msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" - -msgid "Certificate" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "Base-64 encoded server certificate" -msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" - -msgid "Principal name" -msgstr "Principal ಹೆಸರು" - -#, fuzzy -msgid "MAC address" -msgstr "ಇಮೇಲ್ ವಿಳಾಸ" - -msgid "Hardware MAC address(es) on this host" -msgstr "" - -msgid "SSH public key" -msgstr "" - -msgid "Class" -msgstr "ವರ್ಗ" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "Assigned ID View" -msgstr "" - -msgid "Requires pre-authentication" -msgstr "" - -msgid "Pre-authentication is required for the service" -msgstr "" - -msgid "Trusted for delegation" -msgstr "" - -msgid "Client credentials may be delegated to the service" -msgstr "" - -msgid "Member of host-groups" -msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಸದಸ್ಯ" - -#, fuzzy -msgid "Indirect Member of host-group" -msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಸದಸ್ಯ" - -msgid "Keytab" -msgstr "" - -msgid "Managed by" -msgstr "" - -msgid "Managing" -msgstr "" - -msgid "Users allowed to retrieve keytab" -msgstr "" - -msgid "Groups allowed to retrieve keytab" -msgstr "" - -msgid "Hosts allowed to retrieve keytab" -msgstr "" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "" - -msgid "Users allowed to create keytab" -msgstr "" - -msgid "Groups allowed to create keytab" -msgstr "" - -msgid "Hosts allowed to create keytab" -msgstr "" - -msgid "Host Groups allowed to create keytab" -msgstr "" - -msgid "Add a new host." -msgstr "" - -msgid "force host name even if not in DNS" -msgstr "" - -msgid "skip reverse DNS detection" -msgstr "" - -msgid "Add the host to DNS with this IP address" -msgstr "" - -msgid "Add hosts that can manage this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" - -msgid "Delete a host." -msgstr "" - -msgid "Remove entries from DNS" -msgstr "" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" - -msgid "Search for hosts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" - -#, fuzzy -msgid "host group" -msgstr "ಹೋಸ್ಟ್-ಗುಂಪು" - -msgid "Search for hosts with these member of host groups." -msgstr "" - -msgid "Search for hosts without these member of host groups." -msgstr "" - -msgid "Search for hosts with these member of netgroups." -msgstr "" - -msgid "Search for hosts without these member of netgroups." -msgstr "" - -msgid "Search for hosts with these member of roles." -msgstr "" - -msgid "Search for hosts without these member of roles." -msgstr "" - -msgid "Search for hosts with these member of HBAC rules." -msgstr "" - -msgid "Search for hosts without these member of HBAC rules." -msgstr "" - -msgid "Search for hosts with these member of sudo rules." -msgstr "" - -msgid "Search for hosts without these member of sudo rules." -msgstr "" - -msgid "Search for hosts with these enrolled by users." -msgstr "" - -msgid "Search for hosts without these enrolled by users." -msgstr "" - -msgid "host" -msgstr "" - -msgid "Search for hosts with these managed by hosts." -msgstr "" - -msgid "Search for hosts without these managed by hosts." -msgstr "" - -msgid "Search for hosts with these managing hosts." -msgstr "" - -msgid "Search for hosts without these managing hosts." -msgstr "" - -msgid "Modify information about a host." -msgstr "" - -msgid "Kerberos principal name for this host" -msgstr "ಈ ಹೋಸ್ಟ್‌ಗೆ Kerberos principalನ ಹೆಸರು" - -msgid "Update DNS entries" -msgstr "" - -msgid "Remove hosts that can manage this host." -msgstr "" - -msgid "Display information about a host." -msgstr "" - -#, fuzzy -msgid "file to store certificate in" -msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "Host-group" -msgstr "ಹೋಸ್ಟ್-ಗುಂಪು" - -msgid "Name of host-group" -msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಹೆಸರು" - -msgid "A description of this host-group" -msgstr "ಈ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ನ ವಿವರಣೆ" - -msgid "Member hosts" -msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್‌ಗಳು" - -msgid "Member host-groups" -msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ಗಳು" - -#, fuzzy -msgid "Indirect Member hosts" -msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್‌ಗಳು" - -#, fuzzy -msgid "Indirect Member host-groups" -msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ಗಳು" - -#, fuzzy -msgid "Add a new hostgroup." -msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಹೆಸರು" - -#, fuzzy -msgid "Add members to a hostgroup." -msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಸದಸ್ಯ" - -#, fuzzy -msgid "Delete a hostgroup." -msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy -msgid "Search for hostgroups." -msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಸದಸ್ಯ" - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" - -msgid "Search for host groups with these member hosts." -msgstr "" - -msgid "Search for host groups without these member hosts." -msgstr "" - -msgid "Search for host groups with these member host groups." -msgstr "" - -msgid "Search for host groups without these member host groups." -msgstr "" - -msgid "Search for host groups with these member of host groups." -msgstr "" - -msgid "Search for host groups without these member of host groups." -msgstr "" - -msgid "Search for host groups with these member of netgroups." -msgstr "" - -msgid "Search for host groups without these member of netgroups." -msgstr "" - -msgid "Search for host groups with these member of HBAC rules." -msgstr "" - -msgid "Search for host groups without these member of HBAC rules." -msgstr "" - -msgid "Search for host groups with these member of sudo rules." -msgstr "" - -msgid "Search for host groups without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a hostgroup." -msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಸದಸ್ಯ" - -#, fuzzy -msgid "Remove members from a hostgroup." -msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಸದಸ್ಯ" - -msgid "Display information about a hostgroup." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "ನಿಯಮದ ಹೆಸರು" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -msgid "Anchor to override" -msgstr "" - -#, fuzzy -msgid "Group ID Number" -msgstr "ಗುಂಪಿನ ಹೆಸರು" - -msgid "User login" -msgstr "ಬಳಕೆದಾರನ ಪ್ರವೇಶ" - -msgid "UID" -msgstr "UID" - -#, fuzzy -msgid "User ID Number" -msgstr "ಬಳಕೆದಾರನ ಹೆಸರು" - -msgid "GECOS" -msgstr "" - -#, fuzzy -msgid "Home directory" -msgstr "ಹೋಮ್ ಡೈರೆಕ್ಟರೀ ಮೂಲ" - -msgid "Login shell" -msgstr "ಪ್ರವೇಶ ಶೆಲ್" - -msgid "ID View Name" -msgstr "" - -msgid "Add a new Group ID override." -msgstr "" - -msgid "Delete an Group ID override." -msgstr "" - -msgid "Search for an Group ID override." -msgstr "" - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" - -msgid "Modify an Group ID override." -msgstr "" - -msgid "Rename the Group ID override object" -msgstr "" - -msgid "Display information about an Group ID override." -msgstr "" - -msgid "Add a new User ID override." -msgstr "" - -msgid "Delete an User ID override." -msgstr "" - -msgid "Search for an User ID override." -msgstr "" - -msgid "Modify an User ID override." -msgstr "" - -msgid "Rename the User ID override object" -msgstr "" - -msgid "Display information about an User ID override." -msgstr "" - -msgid "Add a new ID View." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" - -#, fuzzy -msgid "hosts" -msgstr "ಹೋಸ್ಟ್‌ಗಳು" - -#, fuzzy -msgid "Hosts to apply the ID View to" -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" - -#, fuzzy -msgid "hostgroups" -msgstr "ಹೋಸ್ಟ್-ಗುಂಪು" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" - -#, fuzzy -msgid "Hosts that this ID View was applied to." -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" - -msgid "Number of hosts the ID View was applied to:" -msgstr "" - -msgid "Delete an ID View." -msgstr "" - -msgid "Search for an ID View." -msgstr "" - -msgid "Modify an ID View." -msgstr "" - -msgid "Rename the ID View object" -msgstr "" - -msgid "Display information about an ID View." -msgstr "" - -#, fuzzy -msgid "Enumerate all the hosts the view applies to." -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಬಳಕೆದಾರನ ವರ್ಗ" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" - -msgid "Hosts to clear (any) ID View from." -msgstr "" - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" - -msgid "Hosts that ID View was cleared from." -msgstr "" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" - -msgid "Dict of I18N messages" -msgstr "" - -msgid "Export plugin meta-data for the webUI." -msgstr "" - -msgid "Name of object to export" -msgstr "" - -#, fuzzy -msgid "Name of method to export" -msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಹೆಸರು" - -msgid "Name of command to export" -msgstr "" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" - -msgid "Join an IPA domain" -msgstr "" - -msgid "The hostname to register as" -msgstr "" - -msgid "The IPA realm" -msgstr "" - -#, fuzzy -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "ಹೋಸ್ಟ್ ಹಾರ್ಡ್‌ವೇರ್ ಪ್ಲ್ಯಾಟ್‌ಫಾರ್ಮ್ (e.g. \"Lenovo T61\")" - -#, fuzzy -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "ಹೋಸ್ಟ್ ಕಾರ್ಯಕಾರಿ ವ್ಯವಸ್ಥೆ ಮತ್ತು ಆವೃತ್ತಿ (e.g. \"Fedora 9\")" - -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" - -msgid "Manage ticket policy for specific user" -msgstr "ನಿಗದಿತ ಬಳಕೆದಾರನಿಗೆ ಟಿಕೆಟ್ ಪಾಲಿಸಿಯನ್ನು ನಿರ್ವಹಿಸು" - -msgid "Max life" -msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ" - -msgid "Maximum ticket life (seconds)" -msgstr "" - -msgid "Max renew" -msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" - -msgid "Maximum renewable age (seconds)" -msgstr "" - -msgid "Modify Kerberos ticket policy." -msgstr "" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "" - -msgid "Display the current Kerberos ticket policy." -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," -"cn=accounts' --group-container='cn=groups,cn=accounts' " -"ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' --user-ignore-" -"objectclass=radiusprofile --user-ignore-" -"attribute=radiusgroupname ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -msgid "Migrate users and groups from DS to IPA." -msgstr "" - -msgid "LDAP URI" -msgstr "LDAP URI" - -msgid "LDAP URI of DS server to migrate from" -msgstr "LDAP URI of DS server to migrate from" - -#, fuzzy -msgid "bind password" -msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" - -msgid "Bind DN" -msgstr "ಬೈಂಡ್ DN" - -msgid "User container" -msgstr "ಬಳಕೆದಾರನ ಕಂಟೇನರ್" - -msgid "DN of container for users in DS relative to base DN" -msgstr "" - -msgid "Group container" -msgstr "ಗುಂಪಿನ ಕಂಟೇನರ್" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "" - -msgid "User object class" -msgstr "" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "" - -msgid "Group object class" -msgstr "" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "" - -msgid "Ignore user object class" -msgstr "" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore user attribute" -msgstr "" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore group object class" -msgstr "" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "Ignore group attribute" -msgstr "" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "" - -msgid "Overwrite GID" -msgstr "" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" - -msgid "LDAP schema" -msgstr "" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" - -msgid "Continue" -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" - -msgid "Base DN" -msgstr "" - -msgid "Base DN on remote LDAP server" -msgstr "" - -msgid "Ignore compat plugin" -msgstr "" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" - -#, fuzzy -msgid "CA certificate" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "" - -msgid "groups to exclude from migration" -msgstr "" - -msgid "users to exclude from migration" -msgstr "" - -msgid "Lists of objects migrated; categorized by type." -msgstr "" - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" - -msgid "False if migration mode was disabled." -msgstr "" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" - -msgid "Show environment variables." -msgstr "" - -msgid "Forward to server instead of running locally" -msgstr "" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Total number of variables env (>= count)" -msgstr "" - -msgid "Number of variables returned (<= total)" -msgstr "" - -msgid "Show all loaded plugins." -msgstr "" - -msgid "Dictionary mapping plugin names to bases" -msgstr "" - -msgid "Number of plugins loaded" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "Netgroup name" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ಹೆಸರು" - -msgid "Netgroup description" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ವಿವರಣೆ" - -msgid "NIS domain name" -msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" - -msgid "IPA unique ID" -msgstr "" - -#, fuzzy -msgid "Member netgroups" -msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" - -#, fuzzy -msgid "Indirect Member netgroups" -msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" - -#, fuzzy -msgid "Member User" -msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" - -#, fuzzy -msgid "Member Group" -msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" - -#, fuzzy -msgid "Member Host" -msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್‌ಗಳು" - -#, fuzzy -msgid "Member Hostgroup" -msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ಗಳು" - -msgid "Add a new netgroup." -msgstr "" - -#, fuzzy -msgid "Add members to a netgroup." -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -#, fuzzy -msgid "member netgroup" -msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" - -#, fuzzy -msgid "netgroups to add" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" - -msgid "Delete a netgroup." -msgstr "" - -#, fuzzy -msgid "Search for a netgroup." -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -msgid "search for managed groups" -msgstr "" - -msgid "Search for netgroups with these member netgroups." -msgstr "" - -msgid "Search for netgroups without these member netgroups." -msgstr "" - -msgid "Search for netgroups with these member users." -msgstr "" - -msgid "Search for netgroups without these member users." -msgstr "" - -msgid "Search for netgroups with these member groups." -msgstr "" - -msgid "Search for netgroups without these member groups." -msgstr "" - -msgid "Search for netgroups with these member hosts." -msgstr "" - -msgid "Search for netgroups without these member hosts." -msgstr "" - -msgid "Search for netgroups with these member host groups." -msgstr "" - -msgid "Search for netgroups without these member host groups." -msgstr "" - -msgid "Search for netgroups with these member of netgroups." -msgstr "" - -msgid "Search for netgroups without these member of netgroups." -msgstr "" - -#, fuzzy -msgid "Modify a netgroup." -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -#, fuzzy -msgid "Remove members from a netgroup." -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -#, fuzzy -msgid "netgroups to remove" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ಹೆಸರು" - -msgid "Display information about a netgroup." -msgstr "" - -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" - -msgid "TOTP authentication Window" -msgstr "" - -msgid "TOTP authentication time variance (seconds)" -msgstr "" - -msgid "TOTP Synchronization Window" -msgstr "" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "" - -msgid "HOTP Authentication Window" -msgstr "" - -msgid "HOTP authentication skip-ahead" -msgstr "" - -msgid "HOTP Synchronization Window" -msgstr "" - -msgid "HOTP synchronization skip-ahead" -msgstr "" - -msgid "Modify OTP configuration options." -msgstr "" - -msgid "Show the current OTP configuration." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -#, fuzzy -msgid "Serial" -msgstr "SOA serial" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -#, fuzzy -msgid "Set a user's password." -msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" - -#, fuzzy -msgid "New Password" -msgstr "ಗುಪ್ತಪದ" - -#, fuzzy -msgid "Current Password" -msgstr "ಗುಪ್ತಪದ" - -msgid "OTP" -msgstr "" - -#, fuzzy -msgid "One Time Password" -msgstr "ಗುಪ್ತಪದ" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -"\n" -"Managed permissions\n" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -#, fuzzy -msgid "Permission name" -msgstr "ಅನುಮತಿಗಳು" - -msgid "Granted rights" -msgstr "" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" - -#, fuzzy -msgid "Effective attributes" -msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" - -msgid "All attributes to which the permission applies" -msgstr "" - -#, fuzzy -msgid "Included attributes" -msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" - -msgid "User-specified attributes to which the permission applies" -msgstr "" - -#, fuzzy -msgid "Excluded attributes" -msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" - -#, fuzzy -msgid "Default attributes" -msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" - -msgid "Attributes to which the permission applies by default" -msgstr "" - -#, fuzzy -msgid "Bind rule type" -msgstr "ಸರಿಯಲ್ಲದ ಬಗೆ" - -#, fuzzy -msgid "Subtree to apply permissions to" -msgstr "Subtree to apply ACI to" - -msgid "Extra target filter" -msgstr "" - -msgid "Raw target filter" -msgstr "" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" - -#, fuzzy -msgid "Target DN" -msgstr "Target ಗುಂಪು" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" - -#, fuzzy -msgid "Member of group" -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "" - -msgid "User group to apply permissions to (sets target)" -msgstr "" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "" - -msgid "Deprecated; use extratargetfilter" -msgstr "" - -msgid "Deprecated; use ipapermlocation" -msgstr "" - -msgid "Deprecated; use ipapermright" -msgstr "" - -msgid "Granted to Privilege" -msgstr "" - -msgid "Indirect Member of roles" -msgstr "" - -msgid "Add a new permission." -msgstr "" - -msgid "Add members to a permission." -msgstr "" - -msgid "member privilege" -msgstr "" - -msgid "privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "" - -#, fuzzy -msgid "Permission flags" -msgstr "ಅನುಮತಿಗಳು" - -msgid "Delete a permission." -msgstr "" - -msgid "force delete of SYSTEM permissions" -msgstr "" - -msgid "Search for permissions." -msgstr "" - -msgid "Modify a permission." -msgstr "" - -#, fuzzy -msgid "Rename the permission object" -msgstr "ಯೋಗ್ಯತಾಪತ್ರಗಳ ಕ್ಯಾಶ್‌ನ ಅನುಮತಿಗಳು ಸರಿಯಿಲ್ಲ" - -msgid "Remove members from a permission." -msgstr "" - -msgid "privileges to remove" -msgstr "" - -msgid "Display information about a permission." -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "Ping a remote server." -msgstr "" - -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "" - -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" - -#, fuzzy -msgid "Privilege name" -msgstr "Principal ಹೆಸರು" - -#, fuzzy -msgid "Privilege description" -msgstr "ವಿವರಣೆ" - -msgid "Granting privilege to roles" -msgstr "" - -msgid "Add a new privilege." -msgstr "" - -msgid "Add members to a privilege." -msgstr "" - -#, fuzzy -msgid "member role" -msgstr "ಸದಸ್ಯ" - -msgid "roles to add" -msgstr "" - -msgid "Add permissions to a privilege." -msgstr "" - -#, fuzzy -msgid "permission" -msgstr "ಅನುಮತಿಗಳು" - -#, fuzzy -msgid "permissions" -msgstr "ಅನುಮತಿಗಳು" - -msgid "Number of permissions added" -msgstr "" - -msgid "Delete a privilege." -msgstr "" - -msgid "Search for privileges." -msgstr "" - -msgid "Modify a privilege." -msgstr "" - -msgid "Rename the privilege object" -msgstr "" - -msgid "Remove members from a privilege" -msgstr "" - -msgid "roles to remove" -msgstr "" - -msgid "Remove permissions from a privilege." -msgstr "" - -msgid "Number of permissions removed" -msgstr "" - -msgid "Display information about a privilege." -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Group" -msgstr "ಗುಂಪು" - -#, fuzzy -msgid "Manage password policy for specific group" -msgstr "ನಿಗದಿತ ಬಳಕೆದಾರನಿಗೆ ಟಿಕೆಟ್ ಪಾಲಿಸಿಯನ್ನು ನಿರ್ವಹಿಸು" - -msgid "Max lifetime (days)" -msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ (ದಿನಗಳು)" - -msgid "Maximum password lifetime (in days)" -msgstr "ಗುಪ್ತಪದದ ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ (ದಿನಗಳಲ್ಲಿ)" - -msgid "Min lifetime (hours)" -msgstr "ಕನಿಷ್ಟ ಜೀವಿತಾವಧಿ (ಘಂಟೆಗಳು)" - -msgid "Minimum password lifetime (in hours)" -msgstr "ಗುಪ್ತಪದದ ಕನಿಷ್ಟ ಜೀವಿತಾವಧಿ (ಘಂಟೆಗಳಲ್ಲಿ)" - -msgid "History size" -msgstr "ಇತಿಹಾಸದ ಗಾತ್ರ" - -msgid "Password history size" -msgstr "ಗುಪ್ತಪದ ಇತಿಹಾಸದ ಗಾತ್ರ" - -msgid "Character classes" -msgstr "ಕ್ಯಾರೆಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" - -msgid "Minimum number of character classes" -msgstr "ಕನಿಷ್ಟ ಸಂಖ್ಯೆಯ ಕ್ಯಾರಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" - -msgid "Min length" -msgstr "ಕನಿಷ್ಟ ಉದ್ದ" - -msgid "Minimum length of password" -msgstr "ಗುಪ್ತಪದದ ಕನಿಷ್ಟ ಉದ್ದ" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "" - -#, fuzzy -msgid "Max failures" -msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ" - -msgid "Consecutive failures before lockout" -msgstr "" - -msgid "Failure reset interval" -msgstr "" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "" - -#, fuzzy -msgid "Lockout duration" -msgstr "ಸ್ಥಳ" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" - -msgid "Add a new group password policy." -msgstr "" - -msgid "Delete a group password policy." -msgstr "" - -msgid "Search for group password policies." -msgstr "" - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" - -msgid "Modify a group password policy." -msgstr "" - -msgid "Display information about password policy." -msgstr "" - -msgid "User" -msgstr "ಬಳಕೆದಾರ" - -#, fuzzy -msgid "Display effective policy for a specific user" -msgstr "ನಿಗದಿತ ಬಳಕೆದಾರನಿಗೆ ಟಿಕೆಟ್ ಪಾಲಿಸಿಯನ್ನು ನಿರ್ವಹಿಸು" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "RADIUS proxy server name" -msgstr "" - -#, fuzzy -msgid "A description of this RADIUS proxy server" -msgstr "ಈ ಹೋಸ್ಟ್‌ನ ವಿವರಣೆ" - -#, fuzzy -msgid "Server" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -msgid "The hostname or IP (with or without port)" -msgstr "" - -msgid "Secret" -msgstr "" - -msgid "The secret used to encrypt data" -msgstr "" - -msgid "Timeout" -msgstr "" - -msgid "The total timeout across all retries (in seconds)" -msgstr "" - -msgid "Retries" -msgstr "" - -msgid "The number of times to retry authentication" -msgstr "" - -#, fuzzy -msgid "User attribute" -msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" - -msgid "The username attribute on the user object" -msgstr "" - -msgid "Add a new RADIUS proxy server." -msgstr "" - -msgid "Delete a RADIUS proxy server." -msgstr "" - -msgid "Search for RADIUS proxy servers." -msgstr "" - -msgid "Modify a RADIUS proxy server." -msgstr "" - -msgid "Rename the RADIUS proxy server object" -msgstr "" - -msgid "Display information about a RADIUS proxy server." -msgstr "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Domain" -msgstr "" - -msgid "Add domain" -msgstr "" - -msgid "Delete domain" -msgstr "" - -msgid "Modify realm domains." -msgstr "" - -msgid "Force adding domain even if not in DNS" -msgstr "" - -msgid "Display the list of realm domains." -msgstr "" - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" - -#, fuzzy -msgid "Role name" -msgstr "ನಿಯಮದ ಹೆಸರು" - -msgid "A description of this role-group" -msgstr "ಈ ರೋಲ್-ಗ್ರೂಪ್‌ನ ವಿವರಣೆ" - -msgid "Privileges" -msgstr "" - -#, fuzzy -msgid "Member services" -msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" - -msgid "Add a new role." -msgstr "" - -#, fuzzy -msgid "Add members to a role." -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -#, fuzzy -msgid "member service" -msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" - -#, fuzzy -msgid "services to add" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -msgid "Add privileges to a role." -msgstr "" - -msgid "privilege" -msgstr "" - -msgid "privileges" -msgstr "" - -msgid "Number of privileges added" -msgstr "" - -msgid "Delete a role." -msgstr "" - -msgid "Search for roles." -msgstr "" - -msgid "Modify a role." -msgstr "" - -msgid "Rename the role object" -msgstr "" - -msgid "Remove members from a role." -msgstr "" - -#, fuzzy -msgid "services to remove" -msgstr "ಸೇವೆಯ ಹೆಸರು" - -msgid "Remove privileges from a role." -msgstr "" - -msgid "Number of privileges removed" -msgstr "" - -msgid "Display information about a role." -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -#, fuzzy -msgid "Self-service name" -msgstr "ಸೇವೆಯ ಹೆಸರು" - -msgid "Attributes to which the permission applies." -msgstr "" - -msgid "Add a new self-service permission." -msgstr "" - -msgid "Delete a self-service permission." -msgstr "" - -msgid "Search for a self-service permission." -msgstr "" - -msgid "Modify a self-service permission." -msgstr "" - -msgid "Display information about a self-service permission." -msgstr "" - -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" - -msgid "SELinux User" -msgstr "" - -msgid "HBAC Rule" -msgstr "" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "" - -msgid "Create a new SELinux User Map." -msgstr "" - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "" - -msgid "Delete a SELinux User Map." -msgstr "" - -msgid "Disable an SELinux User Map rule." -msgstr "" - -msgid "Enable an SELinux User Map rule." -msgstr "" - -msgid "Search for SELinux User Maps." -msgstr "" - -msgid "Modify a SELinux User Map." -msgstr "" - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "" - -msgid "Display the properties of a SELinux User Map rule." -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "Service principal" -msgstr "Service principal" - -msgid "PAC type" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" - -msgid "Add a new IPA new service." -msgstr "" - -#, fuzzy -msgid "force principal name even if not in DNS" -msgstr "ಈ ಹೋಸ್ಟ್‌ಗೆ Kerberos principalನ ಹೆಸರು" - -msgid "Add hosts that can manage this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Delete an IPA service." -msgstr "" - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Search for IPA services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" - -msgid "Search for services with these managed by hosts." -msgstr "" - -msgid "Search for services without these managed by hosts." -msgstr "" - -msgid "Modify an existing IPA service." -msgstr "" - -msgid "Remove hosts that can manage this service." -msgstr "" - -msgid "Display information about an IPA service." -msgstr "" - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" - -msgid "Sudo Command" -msgstr "" - -#, fuzzy -msgid "A description of this command" -msgstr "ಈ ಹೋಸ್ಟ್‌ನ ವಿವರಣೆ" - -msgid "Sudo Command Groups" -msgstr "" - -msgid "Create new Sudo Command." -msgstr "" - -msgid "Delete Sudo Command." -msgstr "" - -msgid "Search for Sudo Commands." -msgstr "" - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" - -msgid "Modify Sudo Command." -msgstr "" - -msgid "Display Sudo Command." -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "Sudo Command Group" -msgstr "" - -msgid "Commands" -msgstr "" - -msgid "Member Sudo commands" -msgstr "" - -msgid "Create new Sudo Command Group." -msgstr "" - -msgid "Add members to Sudo Command Group." -msgstr "" - -msgid "member sudo command" -msgstr "" - -msgid "sudo commands to add" -msgstr "" - -msgid "Delete Sudo Command Group." -msgstr "" - -msgid "Search for Sudo Command Groups." -msgstr "" - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" - -msgid "Modify Sudo Command Group." -msgstr "" - -msgid "Remove members from Sudo Command Group." -msgstr "" - -msgid "sudo commands to remove" -msgstr "" - -msgid "Display Sudo Command Group." -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -#, fuzzy -msgid "NetBIOS name" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ಹೆಸರು" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -#, fuzzy -msgid "Domain name" -msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "ಮೊದಲ ಹೆಸರು" - -msgid "Last name" -msgstr "ಕೊನೆಯ ಹೆಸರು" - -#, fuzzy -msgid "Full name" -msgstr "ನಿಯಮದ ಹೆಸರು" - -#, fuzzy -msgid "Display name" -msgstr "ಮೊದಲ ಹೆಸರು" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "Kerberos principal" - -#, fuzzy -msgid "Kerberos principal expiration" -msgstr "Kerberos principal" - -msgid "Email address" -msgstr "ಇಮೇಲ್ ವಿಳಾಸ" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "ಕೇರಿ ವಿಳಾಸ" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -#, fuzzy -msgid "Pager Number" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" - -#, fuzzy -msgid "Fax Number" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Car License" -msgstr "" - -#, fuzzy -msgid "Account disabled" -msgstr "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "" - -msgid "RADIUS proxy username" -msgstr "" - -msgid "Department Number" -msgstr "" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -#, fuzzy -msgid "Don't create user private group" -msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" - -msgid "Delete a user." -msgstr "" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -#, fuzzy -msgid "Command category" -msgstr "ಹೋಸ್ಟ್ ವರ್ಗ" - -#, fuzzy -msgid "Command category the rule applies to" -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" - -#, fuzzy -msgid "RunAs User category" -msgstr "ಬಳಕೆದಾರನ ವರ್ಗ" - -#, fuzzy -msgid "RunAs User category the rule applies to" -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಬಳಕೆದಾರನ ವರ್ಗ" - -#, fuzzy -msgid "RunAs Group category" -msgstr "ಬಳಕೆದಾರನ ವರ್ಗ" - -#, fuzzy -msgid "RunAs Group category the rule applies to" -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಬಳಕೆದಾರನ ವರ್ಗ" - -msgid "Sudo order" -msgstr "" - -msgid "integer to order the Sudo rules" -msgstr "" - -#, fuzzy -msgid "External User" -msgstr "ಹೊರಗಿನ ಹೋಸ್ಟ್" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -#, fuzzy -msgid "Host Masks" -msgstr "ಹೋಸ್ಟ್‌ಗಳು" - -msgid "Sudo Allow Commands" -msgstr "" - -msgid "Sudo Deny Commands" -msgstr "" - -msgid "Sudo Allow Command Groups" -msgstr "" - -msgid "Sudo Deny Command Groups" -msgstr "" - -#, fuzzy -msgid "RunAs Users" -msgstr "ಬಳಕೆದಾರರು" - -msgid "Run as a user" -msgstr "" - -msgid "Groups of RunAs Users" -msgstr "" - -msgid "Run as any user within a specified group" -msgstr "" - -#, fuzzy -msgid "RunAs External User" -msgstr "ಹೊರಗಿನ ಹೋಸ್ಟ್" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -msgid "External Groups of RunAs Users" -msgstr "" - -msgid "External Groups of users that the command can run as" -msgstr "" - -#, fuzzy -msgid "RunAs Groups" -msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" - -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -#, fuzzy -msgid "RunAs External Group" -msgstr "ಹೊರಗಿನ ಹೋಸ್ಟ್" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -msgid "Sudo Option" -msgstr "" - -msgid "Create new Sudo Rule." -msgstr "" - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "member sudo command group" -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -msgid "sudo command groups to add" -msgstr "" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "" - -msgid "Add group for Sudo to execute as." -msgstr "" - -msgid "Add users and groups for Sudo to execute as." -msgstr "" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "" - -msgid "Delete Sudo Rule." -msgstr "" - -msgid "Disable a Sudo Rule." -msgstr "" - -msgid "Enable a Sudo Rule." -msgstr "" - -msgid "Search for Sudo Rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -msgid "Modify Sudo Rule." -msgstr "" - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "sudo command groups to remove" -msgstr "" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "Remove an option from Sudo Rule." -msgstr "" - -msgid "Remove group for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "" - -msgid "Display Sudo Rule." -msgstr "" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -#, fuzzy -msgid "ACL name" -msgstr "ACI ಹೆಸರು" - -#, fuzzy -msgid "Profile category" -msgstr "ಹೋಸ್ಟ್ ವರ್ಗ" - -#, fuzzy -msgid "Profile category the ACL applies to" -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" - -#, fuzzy -msgid "User category the ACL applies to" -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಬಳಕೆದಾರನ ವರ್ಗ" - -#, fuzzy -msgid "Host category the ACL applies to" -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" - -#, fuzzy -msgid "Service category the ACL applies to" -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಬಳಕೆದಾರನ ವರ್ಗ" - -msgid "Profiles" -msgstr "" - -msgid "Create a new CA ACL." -msgstr "" - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "" - -msgid "Add profiles to a CA ACL." -msgstr "" - -msgid "member Certificate Profile" -msgstr "" - -#, fuzzy -msgid "Certificate Profiles to add" -msgstr "ಪ್ರಮಾಣಪತ್ರದ ವಿಷಯ ಮೂಲ" - -msgid "Add services to a CA ACL." -msgstr "" - -msgid "Add users and groups to a CA ACL." -msgstr "" - -msgid "Delete a CA ACL." -msgstr "" - -msgid "Disable a CA ACL." -msgstr "" - -msgid "Enable a CA ACL." -msgstr "" - -msgid "Search for CA ACLs." -msgstr "" - -msgid "Modify a CA ACL." -msgstr "" - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "" - -msgid "Remove profiles from a CA ACL." -msgstr "" - -msgid "Certificate Profiles to remove" -msgstr "" - -msgid "Remove services from a CA ACL." -msgstr "" - -msgid "Remove users and groups from a CA ACL." -msgstr "" - -msgid "Display the properties of a CA ACL." -msgstr "" - -#, fuzzy -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "ಈ ಪ್ರಮಾಣಪತ್ರಕ್ಕಾಗಿ Service principal (e.g. HTTP/test.example.com)" - -msgid "Profile ID" -msgstr "" - -#, fuzzy -msgid "Certificate Profile to use" -msgstr "ಪ್ರಮಾಣಪತ್ರದ ವಿಷಯ ಮೂಲ" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -#, fuzzy -msgid "Profile description" -msgstr "ಗುಂಪಿನ ವಿವರಣೆ" - -#, fuzzy -msgid "Brief description of this profile" -msgstr "ಈ ರೋಲ್-ಗ್ರೂಪ್‌ನ ವಿವರಣೆ" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" - -msgid "Query current Domain Level." -msgstr "" - -msgid "Current domain level:" -msgstr "" - -msgid "Change current Domain Level." -msgstr "" - -msgid "Domain Level" -msgstr "" - -msgid "Add certificates to host entry" -msgstr "" - -msgid "Remove certificates from host entry" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "Fallback to AD DC LDAP" -msgstr "" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" - -#, fuzzy -msgid "Add to default group" -msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" - -#, fuzzy -msgid "Search scope" -msgstr "ಹುಡುಕು ಗಾತ್ರ ಮಿತಿ" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Target DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" - -msgid "Origin DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -#, fuzzy -msgid "Server name" -msgstr "ಸೇವೆಯ ಹೆಸರು" - -msgid "IPA server hostname" -msgstr "" - -msgid "Managed suffix" -msgstr "" - -msgid "Min domain level" -msgstr "" - -msgid "Minimum domain level" -msgstr "" - -msgid "Max domain level" -msgstr "" - -msgid "Maximum domain level" -msgstr "" - -msgid "Delete IPA server." -msgstr "" - -msgid "Search for IPA servers." -msgstr "" - -msgid "Show IPA server." -msgstr "" - -msgid "Add new certificates to a service" -msgstr "" - -msgid "Remove certificates from a service" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed Target" -msgstr "" - -msgid "Create a new service delegation rule." -msgstr "" - -msgid "Add member to a named service delegation rule." -msgstr "" - -#, fuzzy -msgid "member principal" -msgstr "Kerberos principal" - -#, fuzzy -msgid "principal to add" -msgstr "Principal ಹೆಸರು" - -msgid "Add target to a named service delegation rule." -msgstr "" - -msgid "member service delegation target" -msgstr "" - -msgid "service delegation targets to add" -msgstr "" - -#, fuzzy -msgid "Delete service delegation." -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "Search for service delegations rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" - -msgid "Remove member from a named service delegation rule." -msgstr "" - -#, fuzzy -msgid "principal to remove" -msgstr "Principal ಹೆಸರು" - -msgid "Remove target from a named service delegation rule." -msgstr "" - -msgid "service delegation targets to remove" -msgstr "" - -msgid "Display information about a named service delegation rule." -msgstr "" - -msgid "Create a new service delegation target." -msgstr "" - -msgid "Add member to a named service delegation target." -msgstr "" - -msgid "Delete service delegation target." -msgstr "" - -msgid "Search for service delegation target." -msgstr "" - -msgid "Remove member from a named service delegation target." -msgstr "" - -msgid "Display information about a named service delegation target." -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" - -msgid "Activate a stage user." -msgstr "" - -msgid "Add a new stage user." -msgstr "" - -msgid "Create Stage user in from a delete user" -msgstr "" - -msgid "Delete a stage user." -msgstr "" - -msgid "Search for stage users." -msgstr "" - -msgid "Search for stage users with these member of groups." -msgstr "" - -msgid "Search for stage users without these member of groups." -msgstr "" - -msgid "Search for stage users with these member of netgroups." -msgstr "" - -msgid "Search for stage users without these member of netgroups." -msgstr "" - -msgid "Search for stage users with these member of roles." -msgstr "" - -msgid "Search for stage users without these member of roles." -msgstr "" - -msgid "Search for stage users with these member of HBAC rules." -msgstr "" - -msgid "Search for stage users without these member of HBAC rules." -msgstr "" - -msgid "Search for stage users with these member of sudo rules." -msgstr "" - -msgid "Search for stage users without these member of sudo rules." -msgstr "" - -msgid "Modify a stage user." -msgstr "" - -msgid "Rename the stage user object" -msgstr "" - -msgid "Display information about a stage user." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" - -#, fuzzy -msgid "Segment name" -msgstr "ಸೇವೆಯ ಹೆಸರು" - -msgid "Arbitrary string identifying the segment" -msgstr "" - -msgid "Left node" -msgstr "" - -msgid "Left replication node - an IPA server" -msgstr "" - -msgid "Right node" -msgstr "" - -msgid "Right replication node - an IPA server" -msgstr "" - -msgid "Connectivity" -msgstr "" - -msgid "Direction of replication between left and right replication node" -msgstr "" - -#, fuzzy -msgid "Attributes to strip" -msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" - -#, fuzzy -msgid "Attributes to replicate" -msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" - -msgid "Attributes for total update" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" - -#, fuzzy -msgid "Session timeout" -msgstr "ಪ್ರವೇಶದ ಸಮಯ" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" - -msgid "Replication agreement enabled" -msgstr "" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" - -#, fuzzy -msgid "Suffix name" -msgstr "ಸೇವೆಯ ಹೆಸರು" - -msgid "LDAP suffix to be managed" -msgstr "" - -msgid "Add a new segment." -msgstr "" - -msgid "Delete a segment." -msgstr "" - -msgid "Search for topology segments." -msgstr "" - -msgid "Modify a segment." -msgstr "" - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" - -msgid "Initialize left node" -msgstr "" - -msgid "Initialize right node" -msgstr "" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "" - -msgid "Display a segment." -msgstr "" - -msgid "Add a new topology suffix to be managed." -msgstr "" - -msgid "Delete a topology suffix." -msgstr "" - -msgid "Search for topology suffices." -msgstr "" - -msgid "Modify a topology suffix." -msgstr "" - -msgid "Show managed suffix." -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -#, fuzzy -msgid "Preserved user" -msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" - -msgid "Add one or more certificates to the user entry" -msgstr "" - -msgid "Remove one or more certificates to the user entry" -msgstr "" - -msgid "Move deleted user into staged area" -msgstr "" - -msgid "Undelete a delete user account." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -#, fuzzy -msgid "Vault name" -msgstr "ಕೊನೆಯ ಹೆಸರು" - -#, fuzzy -msgid "Vault description" -msgstr "ವಿವರಣೆ" - -msgid "Vault type" -msgstr "" - -msgid "Salt" -msgstr "" - -#, fuzzy -msgid "Vault salt" -msgstr "ಡೀಫಾಲ್ಟ್ ಶೆಲ್" - -msgid "Public key" -msgstr "" - -msgid "Vault public key" -msgstr "" - -#, fuzzy -msgid "Owner users" -msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" - -#, fuzzy -msgid "Owner groups" -msgstr "ಬಳಕೆದಾರ ಗುಂಪು" - -#, fuzzy -msgid "Owner services" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -#, fuzzy -msgid "Failed owners" -msgstr "ವಿಫಲಗೊಂಡ ಸದಸ್ಯರು" - -msgid "Vault service" -msgstr "" - -msgid "Shared vault" -msgstr "" - -#, fuzzy -msgid "Vault user" -msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" - -#, fuzzy -msgid "Transport Certificate" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "Service name of the service vault" -msgstr "" - -#, fuzzy -msgid "Username of the user vault" -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಬಳಕೆದಾರನ ವರ್ಗ" - -msgid "Add members to a vault." -msgstr "" - -msgid "Add owners to a vault." -msgstr "" - -#, fuzzy -msgid "owner user" -msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" - -#, fuzzy -msgid "owner group" -msgstr "ಬಳಕೆದಾರ ಗುಂಪು" - -msgid "owner service" -msgstr "" - -msgid "Owners that could not be added" -msgstr "" - -msgid "Number of owners added" -msgstr "" - -msgid "Session key wrapped with transport certificate" -msgstr "" - -msgid "Vault data encrypted with session key" -msgstr "" - -msgid "Nonce" -msgstr "" - -msgid "Delete a vault." -msgstr "" - -msgid "Search for vaults." -msgstr "" - -msgid "List all service vaults" -msgstr "" - -msgid "List all user vaults" -msgstr "" - -msgid "Remove members from a vault." -msgstr "" - -msgid "Remove owners from a vault." -msgstr "" - -#, fuzzy -msgid "Owners that could not be removed" +msgid "The default users group cannot be removed" msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪನ್ನು ತೆಗೆದುಹಾಕಲು ಆಗುವುದಿಲ್ಲ" -msgid "Number of owners removed" -msgstr "" - -msgid "Display information about a vault." -msgstr "" - -msgid "Show vault configuration." -msgstr "" - -msgid "Output file to store the transport certificate" -msgstr "" - -msgid "Add owners to a vault container." -msgstr "" - -msgid "Delete a vault container." -msgstr "" - -msgid "Remove owners from a vault container." -msgstr "" - -msgid "Display information about a vault container." -msgstr "" - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "" - -#, fuzzy -msgid "Hostname (FQDN)" -msgstr "ವಲಯದ ಹೆಸರು (FQDN)" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Managed suffixes" -msgstr "" - -msgid "Check connection to remote IPA server." -msgstr "" - -#, fuzzy -msgid "Remote server name" -msgstr "ಸೇವೆಯ ಹೆಸರು" - -msgid "Remote IPA server hostname" -msgstr "" - -msgid "suffix" -msgstr "" - -msgid "Search for servers with these managed suffixes." -msgstr "" - -msgid "Search for servers without these managed suffixes." -msgstr "" - -msgid "Add a manager to the stage user entry" -msgstr "" - -msgid "Remove a manager to the stage user entry" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -msgid "Managed LDAP suffix DN" -msgstr "" - -msgid "Search for topology suffixes." -msgstr "" - -msgid "Add a manager to the user entry" -msgstr "" - -msgid "Remove a manager to the user entry" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Comma-separated list of attributes" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" - -#, fuzzy -msgid "DNS class" -msgstr "SOA class" - -msgid "Comma-separated list of raw A records" -msgstr "" - -msgid "Comma-separated list of raw AAAA records" -msgstr "" - -msgid "Comma-separated list of raw A6 records" -msgstr "" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "" - -msgid "Comma-separated list of raw APL records" -msgstr "" - -msgid "Comma-separated list of raw CERT records" -msgstr "" - -msgid "Comma-separated list of raw CNAME records" -msgstr "" - -msgid "Comma-separated list of raw DHCID records" -msgstr "" - -msgid "Comma-separated list of raw DLV records" -msgstr "" - -msgid "Comma-separated list of raw DNAME records" -msgstr "" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "" - -msgid "Comma-separated list of raw DS records" -msgstr "" - -msgid "Comma-separated list of raw HIP records" -msgstr "" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "" - -msgid "Comma-separated list of raw KEY records" -msgstr "" - -msgid "KEY Flags" -msgstr "" - -msgid "KEY Protocol" -msgstr "" - -msgid "Protocol" -msgstr "" - -msgid "KEY Algorithm" -msgstr "" - -msgid "KEY Public Key" -msgstr "" - -msgid "Public Key" -msgstr "" - -msgid "Comma-separated list of raw KX records" -msgstr "" - -msgid "Comma-separated list of raw LOC records" -msgstr "" - -msgid "Comma-separated list of raw MX records" -msgstr "" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "" - -msgid "Comma-separated list of raw NS records" -msgstr "" - -msgid "Comma-separated list of raw NSEC records" -msgstr "" - -#, fuzzy -msgid "NSEC Next Domain Name" -msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" - -#, fuzzy -msgid "Next Domain Name" -msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" - -msgid "NSEC Type Map" -msgstr "" - -#, fuzzy -msgid "Type Map" -msgstr "ಬಗೆ" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "" - -msgid "Comma-separated list of raw PTR records" -msgstr "" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "" - -msgid "RRSIG Type Covered" -msgstr "" - -msgid "Type Covered" -msgstr "" - -msgid "RRSIG Algorithm" -msgstr "" - -msgid "RRSIG Labels" -msgstr "" - -msgid "Labels" -msgstr "" - -msgid "RRSIG Original TTL" -msgstr "" - -msgid "Original TTL" -msgstr "" - -msgid "RRSIG Signature Expiration" -msgstr "" - -msgid "Signature Expiration" -msgstr "" - -msgid "RRSIG Signature Inception" -msgstr "" - -msgid "Signature Inception" -msgstr "" - -msgid "RRSIG Key Tag" -msgstr "" - -msgid "RRSIG Signer's Name" -msgstr "" - -msgid "Signer's Name" -msgstr "" - -msgid "RRSIG Signature" -msgstr "" - -msgid "Signature" -msgstr "" - -msgid "Comma-separated list of raw RP records" -msgstr "" - -msgid "Comma-separated list of raw SIG records" -msgstr "" - -msgid "SIG Type Covered" -msgstr "" - -msgid "SIG Algorithm" -msgstr "" - -msgid "SIG Labels" -msgstr "" - -msgid "SIG Original TTL" -msgstr "" - -msgid "SIG Signature Expiration" -msgstr "" - -msgid "SIG Signature Inception" -msgstr "" - -msgid "SIG Key Tag" -msgstr "" - -msgid "SIG Signer's Name" -msgstr "" - -msgid "SIG Signature" -msgstr "" - -msgid "Comma-separated list of raw SPF records" -msgstr "" - -msgid "Comma-separated list of raw SRV records" -msgstr "" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "" - -msgid "Comma-separated list of raw TA records" -msgstr "" - -msgid "Comma-separated list of raw TKEY records" -msgstr "" - -msgid "Comma-separated list of raw TSIG records" -msgstr "" - -msgid "Comma-separated list of raw TXT records" -msgstr "" - -#, fuzzy -msgid "SOA time to live" -msgstr "ಉಳಿದಿರಬೇಕಾದ ಸಮಯ" - -#, fuzzy -msgid "SOA record time to live" -msgstr "ಉಳಿದಿರಬೇಕಾದ ಸಮಯ" - -msgid "SOA class" -msgstr "SOA class" - -#, fuzzy -msgid "SOA record class" -msgstr "SOA class" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" - -#, fuzzy -msgid "Consume an entitlement." -msgstr "ಆಜ್ಞೆ(ಕಮ್ಯಾಂಡ್)ಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲಾಗಿಲ್ಲ" - -msgid "Quantity" -msgstr "" - -msgid "Search for entitlement accounts." -msgstr "" - -msgid "Retrieve the entitlement certs." -msgstr "" - -msgid "Import an entitlement certificate." -msgstr "" - -msgid "UUID" -msgstr "" - -msgid "Enrollment UUID" -msgstr "" - -msgid "Register to the entitlement system." -msgstr "" - -#, fuzzy -msgid "Username" -msgstr "ಬಳಕೆದಾರನ ಹೆಸರು" - -#, fuzzy -msgid "Enrollment UUID (not implemented)" -msgstr "ಆಜ್ಞೆ(ಕಮ್ಯಾಂಡ್)ಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲಾಗಿಲ್ಲ" - -#, fuzzy -msgid "Registration password" -msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" - -msgid "Display current entitlements." -msgstr "" - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" - -msgid "comma-separated list of users to add" -msgstr "" - -msgid "comma-separated list of groups to add" -msgstr "" - -msgid "comma-separated list of users to remove" -msgstr "" - -msgid "comma-separated list of groups to remove" -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -#, fuzzy -msgid "Source host category" -msgstr "ಹೋಸ್ಟ್ ವರ್ಗ" - -#, fuzzy -msgid "Source host category the rule applies to" -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" - -msgid "Source Hosts" -msgstr "" - -#, fuzzy -msgid "Source Host Groups" -msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" - -msgid "comma-separated list of hosts to add" -msgstr "" - -msgid "comma-separated list of host groups to add" -msgstr "" - -msgid "comma-separated list of HBAC services to add" -msgstr "" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "" - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "" - -msgid "comma-separated list of hosts to remove" -msgstr "" - -msgid "comma-separated list of host groups to remove" -msgstr "" - -msgid "comma-separated list of HBAC services to remove" -msgstr "" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" - -msgid "Source host" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "comma-separated list of netgroups to add" -msgstr "" - -msgid "comma-separated list of netgroups to remove" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" - -#, fuzzy -msgid "Target members of a group" -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -#, fuzzy -msgid "User group to apply permissions to" -msgstr "Group to apply ACI to" - -msgid "comma-separated list of privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI" -msgstr "" - -#, fuzzy -msgid "Permission type" -msgstr "ಅನುಮತಿಗಳು" - -msgid "comma-separated list of privileges to remove" -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "comma-separated list of roles to add" -msgstr "" - -msgid "comma-separated list of permissions" -msgstr "" - -msgid "comma-separated list of roles to remove" -msgstr "" - -msgid "comma-separated list of privileges" -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "comma-separated list of sudo commands to add" -msgstr "" - -msgid "comma-separated list of sudo commands to remove" -msgstr "" - -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" - -msgid "comma-separated list of sudo command groups to add" -msgstr "" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "" - -msgid "Failed members" -msgstr "ವಿಫಲಗೊಂಡ ಸದಸ್ಯರು" - -msgid "Failed source hosts/hostgroups" -msgstr "" - -#, fuzzy -msgid "Failed hosts/hostgroups" -msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಹೆಸರು" - -#, fuzzy -msgid "Failed users/groups" -msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" - -msgid "Failed service/service groups" -msgstr "" - -#, fuzzy -msgid "Failed to remove" -msgstr "ವಿಫಲಗೊಂಡ ಸದಸ್ಯರು" - -#, fuzzy -msgid "Failed RunAs" -msgstr "ವಿಫಲಗೊಂಡ ಸದಸ್ಯರು" - -msgid "Failed RunAsGroup" -msgstr "" - -#, fuzzy -msgid "Failed profiles" -msgstr "ವಿಫಲಗೊಂಡ ಸದಸ್ಯರು" - -#, fuzzy -msgid "Failed CAs" -msgstr "ವಿಫಲಗೊಂಡ ಸದಸ್ಯರು" - -#, fuzzy -msgid "Failed member manager" -msgstr "ವಿಫಲಗೊಂಡ ಸದಸ್ಯರು" - -#, fuzzy -msgid "Failed managedby" -msgstr "ವಿಫಲಗೊಂಡ ಸದಸ್ಯರು" - -msgid "Failed allowed to retrieve keytab" -msgstr "" - -msgid "Failed allowed to create keytab" -msgstr "" - -#, fuzzy -msgid "Failed targets" -msgstr "ವಿಫಲಗೊಂಡ ಸದಸ್ಯರು" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "%(server)s ಸರ್ವರ್‌ನಿಂದ ಅಜ್ಞಾತ ದೋಷ %(code)d: %(error)s" - -msgid "an internal error has occurred" -msgstr "ಆಂತರಿಕ ದೋಷ ಉಂಟಾಗಿದೆ" - -#, fuzzy, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "ಆಂತರಿಕ ದೋಷ ಉಂಟಾಗಿದೆ" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "" - -#, fuzzy, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "%(server)s ಸರ್ವರ್‌ನಿಂದ ಅಜ್ಞಾತ ದೋಷ %(code)d: %(error)s" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "ಅಸಿಂಧುವಾದ JSON-RPC ಬೇಡಿಕೆ: %(error)s" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Kerberos ದೋಷ: %(major)s/%(minor)s" - -msgid "did not receive Kerberos credentials" -msgstr "Kerberos ಯೋಗ್ಯತಾಪತ್ರಗಳನ್ನು ಪಡೆದಿಲ್ಲ" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -msgid "No credentials cache found" -msgstr "ಕ್ಯಾಶ್‌ನಲ್ಲಿ ಯೋಗ್ಯತಾಪತ್ರಗಳು ಸಿಗುತ್ತಿಲ್ಲ" - -msgid "Ticket expired" -msgstr "ಟಿಕೆಟ್‌ನ ಅವಧಿ ಮುಗಿದಿದೆ" - -msgid "Credentials cache permissions incorrect" -msgstr "ಯೋಗ್ಯತಾಪತ್ರಗಳ ಕ್ಯಾಶ್‌ನ ಅನುಮತಿಗಳು ಸರಿಯಿಲ್ಲ" - -msgid "Bad format in credentials cache" -msgstr "ಯೋಗ್ಯತಾಪತ್ರಗಳ ಕ್ಯಾಶ್‌ನಲ್ಲಿ ಜೋಡಣೆ ಸರಿಯಿಲ್ಲ" - -msgid "Cannot resolve KDC for requested realm" -msgstr "ಕೋರಿದ ಕ್ಷೇತ್ರ(ರೆಲ್ಮ್)ಕ್ಕಾಗಿ KDC ಯನ್ನು ಬಗೆಹರಿಸಲು ಆಗುತ್ತಿಲ್ಲ" - -msgid "Session error" -msgstr "" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "ನಿಲುಕಣೆ(ಆಕ್ಸೆಸ್) ಸಾಲದಾಗಿದೆ: %(info)s" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#, python-format -msgid "'%(name)s' is required" -msgstr "" - -#, fuzzy, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "ಅಸಿಂಧುವಾದ JSON-RPC ಬೇಡಿಕೆ: %(error)s" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - -msgid "Passwords do not match" -msgstr "ಗುಪ್ತಪದಗಳು ಹೊಂದಾಣಿಕೆಯಾಗುತ್ತಿಲ್ಲ" - -msgid "Command not implemented" -msgstr "ಆಜ್ಞೆ(ಕಮ್ಯಾಂಡ್)ಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲಾಗಿಲ್ಲ" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -msgid "This entry already exists" -msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" - -msgid "You must enroll a host in order to create a host service" -msgstr "" -"ಒಂದು ಹೋಸ್ಟ್ ಸೇವೆ(ಸರ್ವಿಸ್)ಯನ್ನು ರಚಿಸುವ ಸಲುವಾಗಿ ನೀವು ಒಂದು ಹೋಸ್ಟ್ ಅನ್ನು ಸೇರಿಸಲೇಬೇಕಾಗಿದೆ" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" -"Service principalನ ಸ್ವರೂಪ ಹೀಗಿಲ್ಲ: service/fully-qualified host name: " -"%(reason)s" - msgid "" "The realm for the principal does not match the realm for this IPA server" msgstr "principalನ ಕ್ಷೇತ್ರ(ರೆಲ್ಮ್)ವು ಈ IPA ಸರ್ವರ್‌ನ ಕ್ಷೇತ್ರ(ರೆಲ್ಮ್)ಕ್ಕೆ ತಾಳೆಯಾಗುತ್ತಿಲ್ಲ" @@ -11912,3333 +539,75 @@ msgstr "principalನ ಕ್ಷೇತ್ರ(ರೆಲ್ಮ್)ವು ಈ IPA ಸ msgid "This command requires root access" msgstr "ಈ ಆಜ್ಞೆ(ಕಮ್ಯಾಂಡ್) ರೂಟ್(root) ನಿಲುಕಣೆ(ಆಕ್ಸೆಸ್) ಕೋರುತ್ತದೆ" +msgid "This entry already exists" +msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" + msgid "This is already a posix group" msgstr "ಇದು ಈಗಾಗಲೇ posix ಗುಂಪು" -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" +msgid "Ticket expired" +msgstr "ಟಿಕೆಟ್‌ನ ಅವಧಿ ಮುಗಿದಿದೆ" -#, fuzzy -msgid "This entry is already enabled" -msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" +msgid "Time to live" +msgstr "ಉಳಿದಿರಬೇಕಾದ ಸಮಯ" -#, fuzzy -msgid "This entry is already disabled" -msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" +msgid "Type" +msgstr "ಬಗೆ" -msgid "This entry cannot be enabled or disabled" -msgstr "" - -msgid "This entry is not a member" -msgstr "" - -msgid "A group may not be a member of itself" -msgstr "ಒಂದು ಗುಂಪು ಅದರ ಒಂದು ಸದಸ್ಯ ಆಗದಿರಬಹುದು" - -#, fuzzy -msgid "This entry is already a member" -msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Base64 ಡೆಕೋಡಿಂಗ್ ವಿಫಲಗೊಂಡಿದೆ: %(reason)s" - -msgid "A group may not be added as a member of itself" -msgstr "ಒಂದು ಗುಂಪು ಅದರ ಒಂದು ಸದಸ್ಯನಂತೆ ಸೇರಿಸಲು ಆಗದಿರಬಹುದು" - -msgid "The default users group cannot be removed" -msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪನ್ನು ತೆಗೆದುಹಾಕಲು ಆಗುವುದಿಲ್ಲ" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -msgid "This group already allows external members" -msgstr "" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "change collided with another change" -msgstr "ಬದಲಾವಣೆ ಮತ್ತೊಂದು ಬದಲಾವಣೆಯೊಂದಿಗೆ ಡಿಕ್ಕಿಹೊಡೆದಿದೆ" - -msgid "no modifications to be performed" -msgstr "ಯಾವುದೇ ಬದಲಾವಣೆಗಳು ನಡೆಯಬಾರದು" - -#, fuzzy, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(info)s" - -msgid "limits exceeded for this query" -msgstr "ಈ ಕ್ವೇರಿಗೆ ಮಿತಿಗಳು ಮೀರಿವೆ" - -#, python-format -msgid "%(info)s" -msgstr "%(info)s" - -msgid "modifying primary key is not allowed" -msgstr "" - -#, fuzzy, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "ಕೇವಲ ಒಂದು ಬೆಲೆ ಮಾತ್ರ ಅನುಮೋದಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "ಪ್ರಮಾಣಪತ್ರದ ಕಾರ್ಯಾಚರಣೆಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲು ಆಗುತ್ತಿಲ್ಲ: %(error)s" - -#, fuzzy, python-format -msgid "Certificate format error: %(error)s" -msgstr "ಪ್ರಮಾಣಪತ್ರದ ಕಾರ್ಯಾಚರಣೆಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲು ಆಗುತ್ತಿಲ್ಲ: %(error)s" - -msgid "Already registered" -msgstr "" - -msgid "Not registered yet" -msgstr "" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, fuzzy, python-format -msgid "%(exception)s" -msgstr "%(reason)s" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, fuzzy, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "%(server)s ಸರ್ವರ್‌ನಿಂದ ಅಜ್ಞಾತ ದೋಷ %(code)d: %(error)s" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -#, fuzzy, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "A dictionary representing an LDAP entry" -msgstr "" - -msgid "A list of LDAP entries" -msgstr "" - -msgid "All commands should at least have a result" -msgstr "" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "ಮತ್ತೊಮ್ಮೆ ಪರಿಶೀಲಿಸಲು %(label)s ಎಂಟರ್ ಮಾಡಿ:" - -msgid "Passwords do not match!" -msgstr "ಗುಪ್ತಪದಗಳು ಹೊಂದಾಣಿಕೆಯಾಗುತ್ತಿಲ್ಲ!" - -msgid "No matching entries found" -msgstr "" - -msgid "Topic or Command" -msgstr "" - -msgid "The topic or command name." -msgstr "" - -msgid "Topic commands:" -msgstr "" - -msgid "To get command help, use:" -msgstr "" - -msgid " ipa --help" -msgstr "" - -#, fuzzy -msgid "Command name" -msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" - -msgid "Positional arguments" -msgstr "" - -#, python-format -msgid "Same as --%s" -msgstr "" - -msgid "Deprecated options" -msgstr "" - -msgid "No file to read" -msgstr "" - -msgid "Results are truncated, try a more specific search" -msgstr "ಫಲಿತಾಂಶಗಳು ಕತ್ತರಿಸಲ್ಪಟ್ಟಿವೆ, ಹೆಚ್ಚ್ಹು ನಿರ್ದಿಷ್ಟವಾದ ಶೋಧನೆ ಪ್ರಯತ್ನಿಸಿ" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - -#, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - -msgid "Filename is empty" -msgstr "" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -#, fuzzy -msgid "cannot be longer that {} characters" -msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxlength)d ಅಕ್ಷರಗಳು ಇರಬಹುದು" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" -msgstr "" - -#, fuzzy, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "%(server)s ಸರ್ವರ್‌ನಿಂದ ಅಜ್ಞಾತ ದೋಷ %(code)d: %(error)s" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -#, fuzzy -msgid "invalid domain name" -msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "incorrect type" -msgstr "ಸರಿಯಲ್ಲದ ಬಗೆ" - -msgid "Only one value is allowed" -msgstr "ಕೇವಲ ಒಂದು ಬೆಲೆ ಮಾತ್ರ ಅನುಮೋದಿಸಲಾಗಿದೆ" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "ನಿಜ (True) ಅಥವಾ ಸುಳ್ಳು (False) ಆಗಿರಲೇಬೇಕು" - -msgid "must be an integer" -msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxvalue)d ಆಗಿರಬಹುದು" - -msgid "must be a decimal number" -msgstr "ದಶಾಂಶ ಸಂಖ್ಯೆ ಆಗಿರಲೇಬೇಕು" - -#, fuzzy, python-format -msgid "must be at least %(minvalue)s" -msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" - -#, fuzzy, python-format -msgid "can be at most %(maxvalue)s" -msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxvalue)d ಆಗಿರಬಹುದು" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "ನಮೂನೆ \"%(pattern)s\" ಹೊಂದಾಣಿಕೆಯಾಗಲೇಬೇಕು" - -msgid "must be binary data" -msgstr "ಬೈನರಿ ಡಾಟಾ ಆಗಿರಲೇಬೇಕು" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "ಕನಿಷ್ಠವಾಗಿ %(minlength)d ಬೈಟ್ಸ್ ಆಗಿರಲೇಬೇಕು" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxlength)d ಬೈಟ್ಸ್ ಆಗಿರಬಹುದು" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "ನಿಖರವಾಗಿ %(length)d ಬೈಟ್ಸ್ ಆಗಿರಲೇಬೇಕು" - -#, fuzzy -msgid "must be a certificate" -msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" - -#, fuzzy -msgid "must be a certificate signing request" -msgstr "ಪ್ರಮಾಣಪತ್ರದ ಸಹಿಯ ಕೋರಿಕೆಯ ಡಿಕೋಡಿಂಗ್‌ನ ವಿಫಲತೆ: %s" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "ಪ್ರಮಾಣಪತ್ರದ ಸಹಿಯ ಕೋರಿಕೆಯ ಡಿಕೋಡಿಂಗ್‌ನ ವಿಫಲತೆ: %s" - -msgid "must be Unicode text" -msgstr "ಯುನಿಕೋಡ್ ಪಠ್ಯ ಆಗಿರಲೇಬೇಕು" - -msgid "Leading and trailing spaces are not allowed" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "ಕನಿಷ್ಠವಾಗಿ %(minlength)d ಅಕ್ಷರಗಳು ಇರಲೇಬೇಕು" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxlength)d ಅಕ್ಷರಗಳು ಇರಬಹುದು" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "ನಿಖರವಾಗಿ %(length)d ಅಕ್ಷರಗಳು ಇರಲೇಬೇಕು" - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "" - -#, fuzzy, python-format -msgid "must be '%(value)s'" -msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" - -#, fuzzy, python-format -msgid "must be one of %(values)s" -msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" - -#, fuzzy -msgid "must be datetime value" -msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -#, fuzzy -msgid "must be DNS name" -msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" - -#, fuzzy -msgid "must be absolute" -msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" - -#, fuzzy -msgid "must be relative" -msgstr "ನಿಜ (True) ಅಥವಾ ಸುಳ್ಳು (False) ಆಗಿರಲೇಬೇಕು" - -#, fuzzy -msgid "must be dictionary" -msgstr "ಬೈನರಿ ಡಾಟಾ ಆಗಿರಲೇಬೇಕು" - -#, fuzzy -msgid "must be Kerberos principal" -msgstr "Kerberos principal" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -#, fuzzy -msgid "Service principal is required" -msgstr "Service principal" - -#, fuzzy -msgid "must be at least 0" -msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" - -#, fuzzy -msgid "invalid valid hex" -msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" - -#, fuzzy -msgid "invalid serial number 0" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "" - -#, python-format -msgid "objectclass %s not found" -msgstr "" - -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "Failed to authenticate to CA REST API" -msgstr "" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "" - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "" - -#, fuzzy -msgid "automount location" -msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" - -#, fuzzy -msgid "automount locations" -msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" - -#, fuzzy -msgid "Automount Locations" -msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" - -#, fuzzy -msgid "Automount Location" -msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" - -#, fuzzy, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "automount map" -msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" - -#, fuzzy -msgid "automount maps" -msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" - -msgid "Automount Maps" -msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" - -#, fuzzy -msgid "Automount Map" -msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" - -#, fuzzy, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "Automount key object." -msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" - -#, fuzzy -msgid "automount key" -msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" - -#, fuzzy -msgid "automount keys" -msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" - -msgid "Automount Keys" -msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" - -#, fuzzy -msgid "Automount Key" -msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, fuzzy, python-format -msgid "key named %(key)s already exists" -msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, fuzzy, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -#, fuzzy -msgid "Certificate Profile" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -#, fuzzy -msgid "Certificate Profiles" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "Profile configuration" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -#, fuzzy, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, fuzzy, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, fuzzy -msgid "Certificate profiles cannot be renamed" -msgstr "ಪ್ರಮಾಣಪತ್ರದ ಕಾರ್ಯಾಚರಣೆಯನ್ನು ಪೂರ್ಣಗೊಳಿಸಲು ಆಗುತ್ತಿಲ್ಲ: %(error)s" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -#, fuzzy -msgid "ACI" -msgstr "ACIs" - -#, fuzzy, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -#, fuzzy -msgid "DNS Servers" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -msgid "DNS Server" -msgstr "" - -#, fuzzy -msgid "DNS Server name" -msgstr "ಸೇವೆಯ ಹೆಸರು" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, fuzzy, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, fuzzy, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Delete a DNS server" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -msgid "groups" -msgstr "ಗುಂಪುಗಳು" - -#, fuzzy -msgid "User Group" -msgstr "ಬಳಕೆದಾರರ ಗುಂಪುಗಳು" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy -msgid "privileged group" -msgstr "Target ಗುಂಪು" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, fuzzy, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -#, fuzzy -msgid "HBAC services" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -#, fuzzy -msgid "HBAC Services" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -#, fuzzy -msgid "HBAC Service" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -#, fuzzy, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "HBAC service group" -msgstr "ಬಳಕೆದಾರ ಗುಂಪು" - -#, fuzzy -msgid "HBAC service groups" -msgstr "ಬಳಕೆದಾರ ಗುಂಪು" - -#, fuzzy -msgid "HBAC Service Groups" -msgstr "ಬಳಕೆದಾರರ ಗುಂಪುಗಳು" - -msgid "HBAC Service Group" -msgstr "" - -#, fuzzy, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -msgid "host groups" -msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" - -#, fuzzy -msgid "Host Group" -msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy -msgid "hostgroup" -msgstr "ಹೋಸ್ಟ್-ಗುಂಪು" - -#, fuzzy -msgid "privileged hostgroup" -msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ಗಳು" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -#, fuzzy -msgid "local domain range" -msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -#, fuzzy -msgid "Auto private groups" -msgstr "ಬಳಕೆದಾರ ಗುಂಪು" - -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -#, fuzzy -msgid "" -"\n" -"IPA locations\n" -msgstr "ಸ್ಥಳ" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -#, fuzzy -msgid "location" -msgstr "ಸ್ಥಳ" - -#, fuzzy -msgid "locations" -msgstr "ಸ್ಥಳ" - -#, fuzzy -msgid "IPA Locations" -msgstr "ಸ್ಥಳ" - -#, fuzzy -msgid "IPA Location" -msgstr "ಸ್ಥಳ" - -#, fuzzy -msgid "Location name" -msgstr "ಸ್ಥಳ" - -#, fuzzy -msgid "IPA location name" -msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" - -#, fuzzy -msgid "IPA Location description" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ವಿವರಣೆ" - -#, fuzzy -msgid "Servers" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, fuzzy, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Delete an IPA location." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "IPA Server" -msgstr "" - -msgid "Modify information about an IPA location." -msgstr "" - -#, fuzzy, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -#, fuzzy -msgid "netgroups" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" - -msgid "Netgroups" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" - -#, fuzzy -msgid "Netgroup" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" - -#, fuzzy, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -#, fuzzy -msgid "URI" +msgid "UID" msgstr "UID" -#, fuzzy, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" +msgid "Unrevoked" +msgstr "ರದ್ದು ಮಾಡಲಾಗಿಲ್ಲ" -msgid "cannot be empty" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, fuzzy, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -#, fuzzy -msgid "invalid port number" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, fuzzy, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "Role" -msgstr "" - -#, fuzzy, python-format -msgid "Added role \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified role \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" +msgid "User" +msgstr "ಬಳಕೆದಾರ" -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" +msgid "User Groups" +msgstr "ಬಳಕೆದಾರರ ಗುಂಪುಗಳು" -#, fuzzy -msgid "Self Service Permissions" -msgstr "ಅನುಮತಿಗಳು" +msgid "User category" +msgstr "ಬಳಕೆದಾರನ ವರ್ಗ" -msgid "Self Service Permission" -msgstr "" +msgid "User category the rule applies to" +msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಬಳಕೆದಾರನ ವರ್ಗ" -#, fuzzy, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" +msgid "User container" +msgstr "ಬಳಕೆದಾರನ ಕಂಟೇನರ್" -#, fuzzy, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" +msgid "User group" +msgstr "ಬಳಕೆದಾರ ಗುಂಪು" -#, fuzzy, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" +msgid "User group ACI grants access to" +msgstr "User group ACI grants access to" -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" +msgid "User login" +msgstr "ಬಳಕೆದಾರನ ಪ್ರವೇಶ" -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" +msgid "User name" +msgstr "ಬಳಕೆದಾರನ ಹೆಸರು" -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" +msgid "User password" +msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" +msgid "User search fields" +msgstr "ಬಳಕೆದಾರನ ಶೋಧ ಫೀಲ್ಡ್‌ಗಳು" -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" +msgid "Users" +msgstr "ಬಳಕೆದಾರರು" -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" +msgid "You must enroll a host in order to create a host service" msgstr "" +"ಒಂದು ಹೋಸ್ಟ್ ಸೇವೆ(ಸರ್ವಿಸ್)ಯನ್ನು ರಚಿಸುವ ಸಲುವಾಗಿ ನೀವು ಒಂದು ಹೋಸ್ಟ್ ಅನ್ನು ಸೇರಿಸಲೇಬೇಕಾಗಿದೆ" -msgid "server role" -msgstr "" +msgid "Zone name" +msgstr "ವಲಯದ ಹೆಸರು" -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -#, fuzzy -msgid "Role status" -msgstr "ಬೇಡಿಕೆ ಸ್ಥಿತಿ" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" +msgid "Zone name (FQDN)" +msgstr "ವಲಯದ ಹೆಸರು (FQDN)" -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -#, fuzzy -msgid "IPA role name" -msgstr "ನಿಯಮದ ಹೆಸರು" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -#, fuzzy -msgid "Member principals" -msgstr "Kerberos principal" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, fuzzy, python-format -msgid "member %s" -msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್‌ಗಳು" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, fuzzy, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, fuzzy, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -#, fuzzy -msgid "Subordinate id description" -msgstr "ಗುಂಪಿನ ವಿವರಣೆ" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -msgid "SubUID range size" -msgstr "" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -msgid "SubGID range size" -msgstr "" - -msgid "Subordinate group ID count" -msgstr "" - -#, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "" - -#, python-format -msgid "'%(dn)s is not a valid user" -msgstr "" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -msgid "Add a new subordinate id." -msgstr "" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added subordinate id \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Delete a subordinate id." -msgstr "" - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "Modify a subordinate id." -msgstr "" - -#, fuzzy, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, fuzzy -msgid "Search for subordinate id." -msgstr "ಕ್ಯಾರೆಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" - -#, fuzzy, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "Display information about a subordinate id." -msgstr "" - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -msgid "sudo command" -msgstr "" - -msgid "sudo commands" -msgstr "" - -msgid "Sudo Commands" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Added segment \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -msgid "servers" -msgstr "" - -#, fuzzy -msgid "IPA Servers" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -#, fuzzy -msgid "Server location" -msgstr "ಸ್ಥಳ" - -#, fuzzy -msgid "Service weight" -msgstr "ಸೇವೆಯ ಹೆಸರು" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, fuzzy, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -#, fuzzy -msgid "Server state" -msgstr "ಸೇವೆಯ ಹೆಸರು" - -#, fuzzy, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -#, fuzzy -msgid "A list of ACI values" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" - -msgid "ACI prefix is required" -msgstr "" +msgid "an internal error has occurred" +msgstr "ಆಂತರಿಕ ದೋಷ ಉಂಟಾಗಿದೆ" msgid "" "at least one of: type, filter, subtree, targetgroup, attrs or memberof are " @@ -15246,9254 +615,84 @@ msgid "" msgstr "" "ಕನಿಷ್ಟ ಒಂದು : ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ, ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್, attrs ಅಥವಾ memberof ಗಳ ಅಗತ್ಯವಿದೆ" -#, fuzzy -msgid "filter and memberof are mutually exclusive" -msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" - -#, fuzzy -msgid "group, permission and self are mutually exclusive" -msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" - -msgid "One of group, permission or self is required" -msgstr "" +msgid "automatically add the principal if it doesn't exist" +msgstr "ಸ್ವಯಂಚಾಲಿತವಾಗಿ principal ಸೇರಿಸಿ ಅದು ಅಸ್ತಿತ್ವದಲ್ಲಿ ಇಲ್ಲದಿದ್ದಲ್ಲಿ" #, python-format -msgid "Group '%s' does not exist" -msgstr " '%s' ಗುಂಪು ಅಸ್ತಿತ್ವದಲ್ಲಿಲ್ಲ" - -msgid "empty filter" -msgstr "" +msgid "can be at most %(maxlength)d bytes" +msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxlength)d ಬೈಟ್ಸ್ ಆಗಿರಬಹುದು" #, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "ACIs" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -#, fuzzy, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, fuzzy, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Auto member rule: %s not found!" -msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟ್‌ಗ್ರೂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -#, fuzzy -msgid "Member service groups" -msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" - -#, fuzzy -msgid "Member HBAC service groups" -msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" - -#, fuzzy -msgid "Member ID user overrides" -msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, fuzzy, python-format -msgid "Access granted: %s" -msgstr "ಪ್ರವೇಶದ ಸಮಯ" - -#, fuzzy -msgid "" -"\n" -"Permissions\n" -msgstr "ಅನುಮತಿಗಳು" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Managed permissions\n" -msgstr "ಅನುಮತಿಗಳು" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -#, fuzzy -msgid "must be enclosed in parentheses" -msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, fuzzy, python-format -msgid "Deprecated; use %s" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, fuzzy, python-format -msgid "Entry %s not found" -msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -#, fuzzy -msgid "target and targetgroup are mutually exclusive" -msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" - -#, fuzzy -msgid "subtree and type are mutually exclusive" -msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" - -#, fuzzy -msgid "Bad search filter" -msgstr "ಬಳಕೆದಾರನ ಶೋಧ ಫೀಲ್ಡ್‌ಗಳು" - -#, fuzzy, python-format -msgid "Entry %s does not exist" -msgstr " '%s' ಗುಂಪು ಅಸ್ತಿತ್ವದಲ್ಲಿಲ್ಲ" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, fuzzy, python-format -msgid "Added permission \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy -msgid "attrs and included attributes are mutually exclusive" -msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "cannot delete managed permissions" -msgstr "" - -#, fuzzy, python-format -msgid "ACI of permission %s was not found" -msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" - -#, fuzzy, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, fuzzy, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -#, fuzzy -msgid "Documentation" -msgstr "ಸ್ಥಳ" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -msgid "Help topic" -msgstr "" - -#, fuzzy -msgid "Version" -msgstr "ಅನುಮತಿಗಳು" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ಹೆಸರು" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -#, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -#, fuzzy -msgid "Search for classes." -msgstr "ಕ್ಯಾರೆಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -#, fuzzy -msgid "Required" -msgstr "ಬೇಡಿಕೆ ID" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "ACI ಹೆಸರು" - -#, fuzzy -msgid "Confirm (password)" -msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" - -#, fuzzy -msgid "Default" -msgstr "ಡೀಫಾಲ್ಟ್ ಶೆಲ್" - -#, fuzzy -msgid "Default from" -msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -#, fuzzy -msgid "Trust direction" -msgstr "ಗುಂಪಿನ ವಿವರಣೆ" - -msgid "Trust type" -msgstr "" - -#, fuzzy -msgid "Trust status" -msgstr "ಬೇಡಿಕೆ ಸ್ಥಿತಿ" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -#, fuzzy -msgid "External trust" -msgstr "ಹೊರಗಿನ ಹೋಸ್ಟ್" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -#, fuzzy -msgid "trust configuration" -msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, fuzzy, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, fuzzy -msgid "SID" -msgstr "GID" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -#, fuzzy -msgid "Domain enabled" -msgstr "NIS ಡೊಮೇನ್ ಹೆಸರು" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, fuzzy, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -#, fuzzy -msgid "vaultcontainer" -msgstr "ಗುಂಪಿನ ಕಂಟೇನರ್" - -#, fuzzy -msgid "vaultcontainers" -msgstr "ಗುಂಪಿನ ಕಂಟೇನರ್" - -#, fuzzy -msgid "Vault Containers" -msgstr "ಗುಂಪಿನ ಕಂಟೇನರ್" - -#, fuzzy -msgid "Vault Container" -msgstr "ಗುಂಪಿನ ಕಂಟೇನರ್" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, fuzzy, python-format -msgid "Added vault \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, fuzzy, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, fuzzy -msgid "Vault configuration" -msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -msgid "Key wrapping algorithm" -msgstr "" - -#, fuzzy, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Retrieve data from a vault." -msgstr "" - -#, fuzzy, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -#, fuzzy -msgid "must be TRUE or FALSE" -msgstr "ನಿಜ (True) ಅಥವಾ ಸುಳ್ಳು (False) ಆಗಿರಲೇಬೇಕು" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -#, fuzzy -msgid "Principal alias" -msgstr "Principal ಹೆಸರು" - -#, fuzzy -msgid "User password expiration" -msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" - -msgid "SSH public key fingerprint" -msgstr "" - -#, fuzzy -msgid "External IdP configuration" -msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -#, fuzzy -msgid "Base-64 encoded user certificate" -msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" - -#, fuzzy -msgid "Certificate mapping data" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -#, fuzzy -msgid "SMB Home Directory" -msgstr "ಹೋಮ್ ಡೈರೆಕ್ಟರೀ ಮೂಲ" - -#, fuzzy -msgid "SMB Home Directory Drive" -msgstr "ಹೋಮ್ ಡೈರೆಕ್ಟರೀ ಮೂಲ" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -#, fuzzy, python-format -msgid "can be at most %(len)d characters" +msgid "can be at most %(maxlength)d characters" msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxlength)d ಅಕ್ಷರಗಳು ಇರಬಹುದು" -msgid "Issuer" -msgstr "" - -#, fuzzy -msgid "Issuer of the certificate" -msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" - -msgid "Subject" -msgstr "ವಿಷಯ" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, fuzzy, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, fuzzy, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -#, fuzzy -msgid "CA category" -msgstr "ಹೋಸ್ಟ್ ವರ್ಗ" - -#, fuzzy -msgid "CA category the ACL applies to" -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" - -msgid "CAs" -msgstr "" - -#, fuzzy, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, fuzzy, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - #, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" +msgid "can be at most %(maxvalue)d" +msgstr "ಗರಿಷ್ಠವಾಗಿ %(maxvalue)d ಆಗಿರಬಹುದು" -#, fuzzy, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" +msgid "change collided with another change" +msgstr "ಬದಲಾವಣೆ ಮತ್ತೊಂದು ಬದಲಾವಣೆಯೊಂದಿಗೆ ಡಿಕ್ಕಿಹೊಡೆದಿದೆ" -#, fuzzy, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -msgid "users cannot be added when user category='all'" -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, fuzzy, python-format -msgid "%i service added." -msgstr "ಸೇವೆಯ ಹೆಸರು" - -#, fuzzy, python-format -msgid "%i services added." -msgstr "ಸೇವೆಯ ಹೆಸರು" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -#, fuzzy -msgid "User logins" -msgstr "ಬಳಕೆದಾರನ ಪ್ರವೇಶ" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -#, fuzzy -msgid "must be at least 10" -msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" - -msgid "configuration options" -msgstr "" - -#, fuzzy -msgid "Configuration" -msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" - -#, fuzzy -msgid "Maximum hostname length" -msgstr "ಕನಿಷ್ಟ ಉದ್ದ" - -msgid "Enable adding subids to new users" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -msgid "IPA DNS servers" -msgstr "" - -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -#, fuzzy -msgid "Setup SID configuration" -msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -msgid "Add SIDs" -msgstr "" - -msgid "Add SIDs for existing users and groups" -msgstr "" - -msgid "NetBIOS name of the IPA domain" -msgstr "" - -msgid "Empty domain is not allowed" -msgstr "" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "not allowed to enable SID generation" -msgstr "" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -#, fuzzy -msgid "Failed to call DBus" -msgstr "ವಿಫಲಗೊಂಡ ಸದಸ್ಯರು" - -msgid "Configuration of SID failed. See details in the error log" -msgstr "" - -#, fuzzy -msgid "The group doesn't exist" -msgstr " '%s' ಗುಂಪು ಅಸ್ತಿತ್ವದಲ್ಲಿಲ್ಲ" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, python-format -msgid "%s Record" -msgstr "" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -#, fuzzy -msgid "Priority (order)" -msgstr "ಆದ್ಯತೆ" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -#, fuzzy -msgid "Only one zone type is allowed per zone name" -msgstr "ಕೇವಲ ಒಂದು ಬೆಲೆ ಮಾತ್ರ ಅನುಮೋದಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "ಈ ನಮೂದು ಈಗಾಗಲೇ ಅಸ್ತಿತ್ವದಲ್ಲಿದೆ" - -#, fuzzy, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -#, fuzzy -msgid "Default time to live" -msgstr "ಉಳಿದಿರಬೇಕಾದ ಸಮಯ" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "is required" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, fuzzy, python-format -msgid "Found '%(value)s'" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -msgid "DNS configuration options" -msgstr "" - -msgid "DNS Global Configuration" -msgstr "" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -msgid "Result of the command" -msgstr "" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, fuzzy, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "Access time" -msgstr "ಪ್ರವೇಶದ ಸಮಯ" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#, fuzzy -msgid "Host" -msgstr "ಹೋಸ್ಟ್‌ಗಳು" - -#, fuzzy -msgid "Base-64 encoded host certificate" -msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" - -#, fuzzy -msgid "Serial Number" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" - -#, fuzzy -msgid "Serial Number (hex)" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Revocation reason" -msgstr "ರದ್ದು ಮಾಡುವುದಕ್ಕೆ ಕಾರಣ" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, fuzzy -msgid "Password cannot be set on enrolled host." -msgstr "ದೊಡ್ಡ ಪ್ರಮಾಣದ ದಾಖಲಾತಿಯಲ್ಲಿ ಬಳಸಲಾದ ಗುಪ್ತಪದ" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" - -msgid "Invalid URI: not an https scheme" -msgstr "" - -msgid "Invalid URI: missing netloc" -msgstr "" - -msgid "Identity Provider server" -msgstr "" - -msgid "Identity Provider servers" -msgstr "" - -#, fuzzy -msgid "Identity Provider server name" -msgstr "ಸೇವೆಯ ಹೆಸರು" - -#, fuzzy -msgid "Authorization URI" -msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -msgid "Token URI" -msgstr "" - -#, fuzzy -#| msgid "Mount point" -msgid "Token endpoint" -msgstr "ಮೌಂಟ್ ಪಾಯಂಟ್" - -#, fuzzy -#| msgid "User login" -msgid "User info URI" -msgstr "ಬಳಕೆದಾರನ ಪ್ರವೇಶ" - -msgid "User information endpoint" -msgstr "" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -msgid "Client identifier" -msgstr "" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -msgid "Add a new Identity Provider server." -msgstr "" - -#, fuzzy, python-format -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -msgid "Base URL" -msgstr "" - -msgid "Base URL for IdP provider templates" -msgstr "" - -msgid "unknown provider" -msgstr "" - -msgid "value is missing" -msgstr "" - -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "" - -msgid "Delete an Identity Provider server." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "Modify an Identity Provider server." -msgstr "" - -#, fuzzy, python-format -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, fuzzy -msgid "Search for Identity Provider servers." -msgstr "ಪ್ರಮಾಣಪತ್ರವನ್ನು (0-10) ರದ್ದು ಮಾಡಲು ಕಾರಣ" - -#, fuzzy, python-format -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "Display information about an Identity Provider server." -msgstr "" - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Apply" -msgstr "" - -msgid "Rebuild auto membership" -msgstr "" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -#, fuzzy -msgid "Actions" -msgstr "ಸ್ಥಳ" - -msgid "Add" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -msgid "Direct Membership" -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -msgid "No entries." -msgstr "" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -msgid "Remove" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -msgid "Show Results" -msgstr "" - -msgid "Authentication indicators" -msgstr "" - -msgid "Authentication indicator" -msgstr "" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -msgid "RADIUS" -msgstr "" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "External Identity Provider" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "" - -msgid "Activate" -msgstr "" - -msgid "Add and Add Another" -msgstr "" - -msgid "Add and Close" -msgstr "" - -msgid "Add and Edit" -msgstr "" - -msgid "Add Many" -msgstr "" - -msgid "Back" -msgstr "" - -msgid "Cancel" -msgstr "" - -msgid "Clear" -msgstr "" - -msgid "Clear all fields on the page." -msgstr "" - -msgid "Close" -msgstr "" - -msgid "Disable" -msgstr "" - -msgid "Download" -msgstr "" - -msgid "Download certificate as PEM formatted file." -msgstr "" - -msgid "Edit" -msgstr "" - -msgid "Enable" -msgstr "" - -msgid "Find" -msgstr "" - -msgid "Get" -msgstr "" - -msgid "Hide" -msgstr "" - -msgid "Issue" -msgstr "" - -msgid "Match" -msgstr "" - -msgid "Match users according to certificate." -msgstr "" - -msgid "Migrate" -msgstr "" - -msgid "OK" -msgstr "" - -#, fuzzy -msgid "Refresh" -msgstr "SOA refresh" - -msgid "Reload current settings from the server." -msgstr "" - -msgid "Delete" -msgstr "" - -msgid "Remove hold" -msgstr "" - -msgid "Reset" -msgstr "" - -#, fuzzy -msgid "Reset Password" -msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" - -msgid "Reset Password and Log in" -msgstr "" - -msgid "Restore" -msgstr "" - -msgid "Retry" -msgstr "" - -msgid "Revert" -msgstr "" - -#, fuzzy -msgid "Revoke" -msgstr "ರದ್ದು ಮಾಡಲಾಗಿದೆ" - -msgid "Save" -msgstr "" - -#, fuzzy -msgid "Set" -msgstr "ವಿಷಯ" - -msgid "Show" -msgstr "" - -msgid "Stage" -msgstr "" - -msgid "Update" -msgstr "" - -msgid "View" -msgstr "" - -#, fuzzy -msgid "Customization" -msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "" - -msgid "Expand All" -msgstr "" - -msgid "General" -msgstr "" - -msgid "Identity Settings" -msgstr "" - -msgid "Record Settings" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -msgid "Back to Top" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -#, fuzzy -msgid "Add custom value" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Available" -msgstr "" - -msgid "Some operations failed." -msgstr "" - -msgid "Operations Error" -msgstr "" - -#, fuzzy -msgid "Confirmation" -msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" - -msgid "Custom value" -msgstr "" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -msgid "Unsaved Changes" -msgstr "" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "" - -msgid "Hide details" -msgstr "" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -#, fuzzy -msgid "Redirection" +msgid "description" msgstr "ವಿವರಣೆ" -msgid "Select entries to be removed." -msgstr "" +msgid "did not receive Kerberos credentials" +msgstr "Kerberos ಯೋಗ್ಯತಾಪತ್ರಗಳನ್ನು ಪಡೆದಿಲ್ಲ" -msgid "Result" -msgstr "" +msgid "incorrect type" +msgstr "ಸರಿಯಲ್ಲದ ಬಗೆ" -msgid "Show details" -msgstr "" +msgid "limits exceeded for this query" +msgstr "ಈ ಕ್ವೇರಿಗೆ ಮಿತಿಗಳು ಮೀರಿವೆ" -msgid "Success" -msgstr "" +msgid "must be True or False" +msgstr "ನಿಜ (True) ಅಥವಾ ಸುಳ್ಳು (False) ಆಗಿರಲೇಬೇಕು" -msgid "Validation error" -msgstr "" +msgid "must be Unicode text" +msgstr "ಯುನಿಕೋಡ್ ಪಠ್ಯ ಆಗಿರಲೇಬೇಕು" -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, fuzzy, python-brace-format -msgid "An error has occurred (${error})" -msgstr "ಆಂತರಿಕ ದೋಷ ಉಂಟಾಗಿದೆ" - -#, fuzzy -msgid "HTTP Error" -msgstr "ದೋಷ" - -msgid "Internal Error" -msgstr "" - -#, fuzzy -msgid "IPA Error" -msgstr "ದೋಷ" - -msgid "No response" -msgstr "" - -msgid "Unknown Error" -msgstr "" - -msgid "URL" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -msgid "Settings" -msgstr "" - -msgid "Search" -msgstr "" - -msgid "False" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Allowed to create keytab" -msgstr "" - -msgid "Allowed to retrieve keytab" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add Kerberos Principal Alias" -msgstr "Kerberos principal" - -#, fuzzy -msgid "New kerberos principal alias" -msgstr "Kerberos principal" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "" - -msgid "Authenticating" -msgstr "" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -#, fuzzy -msgid "Kerberos Principal you entered is expired" -msgstr "ಈ ಹೋಸ್ಟ್‌ಗೆ Kerberos principalನ ಹೆಸರು" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -#, fuzzy -msgid "Log In Using Certificate" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "" - -msgid "Synchronizing" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -#, fuzzy -msgid "number of passwords" -msgstr "ಗುಪ್ತಪದದ ಕನಿಷ್ಟ ಉದ್ದ" - -msgid "seconds" -msgstr "" - -msgid "Migrating" -msgstr "" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -msgid "Password migration was not successful" -msgstr "" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -msgid "Password migration was successful" -msgstr "" - -#, fuzzy -msgid "Attribute" -msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" - -msgid "Add delegation" -msgstr "" - -msgid "Remove delegations" -msgstr "" - -#, fuzzy -msgid "Add permission" -msgstr "ಅನುಮತಿಗಳು" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove permissions" -msgstr "ಅನುಮತಿಗಳು" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -msgid "Remove privileges" -msgstr "" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -msgid "Role Settings" -msgstr "" - -msgid "Add role" -msgstr "" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -msgid "Remove roles" -msgstr "" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -msgid "Add self service permission" -msgstr "" - -msgid "Remove self service permissions" -msgstr "" - -msgid "Add rule" -msgstr "" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to change default group?" -msgstr "" - -#, fuzzy -msgid "Default host group" -msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" - -#, fuzzy -msgid "Default user group" -msgstr "ಡಿಫಾಲ್ಟ್ ಬಳಕೆದಾರರ ಗುಂಪು" - -msgid "Exclusive" -msgstr "" - -msgid "Expression" -msgstr "" - -#, fuzzy -msgid "Host group rule" -msgstr "ಹೋಸ್ಟ್-ಗುಂಪು" - -#, fuzzy -msgid "Host group rules" -msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" - -msgid "Inclusive" -msgstr "" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "User group rule" -msgstr "ಬಳಕೆದಾರ ಗುಂಪು" - -#, fuzzy -msgid "User group rules" -msgstr "ಬಳಕೆದಾರ ಗುಂಪು" - -#, fuzzy -msgid "Add automount key" -msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" - -#, fuzzy -msgid "Remove automount keys" -msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" - -#, fuzzy -msgid "Add automount location" -msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" - -msgid "Automount Location Settings" -msgstr "" - -msgid "Remove automount locations" -msgstr "" - -#, fuzzy -msgid "Add automount map" -msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" - -#, fuzzy -msgid "Map Type" -msgstr "ಬಗೆ" - -msgid "Direct" -msgstr "" - -msgid "Indirect" -msgstr "" - -#, fuzzy -msgid "Remove automount maps" -msgstr "ಮ್ಯಾಪ್‌ಗಳ ಆಟೋಮೌಂಟ್" - -msgid "Add certificate authority" -msgstr "" - -msgid "Remove certificate authorities" -msgstr "" - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -msgid "All" -msgstr "" - -msgid "Any CA" -msgstr "" - -#, fuzzy -msgid "Any Host" -msgstr "ಹೋಸ್ಟ್‌ಗಳು" - -#, fuzzy -msgid "Any Service" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -msgid "Any Profile" -msgstr "" - -msgid "Anyone" -msgstr "" - -#, fuzzy -msgid "Rule status" -msgstr "ಬೇಡಿಕೆ ಸ್ಥಿತಿ" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -msgid "Remove CA ACLs" -msgstr "" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -msgid "Specified CAs" -msgstr "" - -msgid "Specified Hosts and Groups" -msgstr "" - -msgid "Specified Profiles" -msgstr "" - -msgid "Specified Services and Groups" -msgstr "" - -msgid "Specified Users and Groups" -msgstr "" - -msgid "Permitted to have certificates issued" -msgstr "" - -msgid "Remove certificate profiles" -msgstr "" - -msgid "AA Compromise" -msgstr "" - -#, fuzzy -msgid "Add principal" -msgstr "Principal" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" - -#, fuzzy -msgid "Certificates" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -#, fuzzy -msgid "Certificate Hold" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "Cessation of Operation" -msgstr "" - -msgid "Common Name" -msgstr "" - -msgid "the certificate with serial number " -msgstr "" - -msgid "Expires On" -msgstr "" - -msgid "Issued on from" -msgstr "" - -msgid "Issued on to" -msgstr "" - -#, fuzzy -msgid "Maximum serial number" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" - -#, fuzzy -msgid "Minimum serial number" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" - -#, fuzzy -msgid "Revoked on from" -msgstr "ರದ್ದು ಮಾಡಲಾಗಿದೆ" - -#, fuzzy -msgid "Revoked on to" -msgstr "ರದ್ದು ಮಾಡಲಾಗಿದೆ" - -msgid "Valid not after from" -msgstr "" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -msgid "Fingerprints" -msgstr "" - -#, fuzzy -msgid "Get Certificate" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -#, fuzzy -msgid "Certificate Hold Removed" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Issue new certificate" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "Issued By" -msgstr "" - -msgid "Issued On" -msgstr "" - -msgid "Issued To" -msgstr "" - -msgid "Key Compromise" -msgstr "" - -#, fuzzy -msgid "No Valid Certificate" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -#, fuzzy -msgid "New Certificate" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -msgid "Note" -msgstr "" - -msgid "Organizational Unit" -msgstr "" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -msgid "Privilege Withdrawn" -msgstr "" - -msgid "Reason for Revocation" -msgstr "" - -msgid "Remove certificate hold" -msgstr "" - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -#, fuzzy -msgid "Certificate requested" -msgstr "ಪ್ರಮಾಣಪತ್ರದ ವಿಷಯ ಮೂಲ" - -#, fuzzy -msgid "Revoke certificate" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -#, fuzzy -msgid "Certificate Revoked" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "REVOKED" -msgstr "" - -msgid "SHA1 Fingerprint" -msgstr "" - -msgid "SHA256 Fingerprint" -msgstr "" - -msgid "Status" -msgstr "" - -msgid "Superseded" -msgstr "" - -msgid "Unspecified" -msgstr "" - -#, fuzzy -msgid "Valid Certificate Present" -msgstr "ಪ್ರಮಾಣಪತ್ರದ ವಿಷಯ ಮೂಲ" - -msgid "Valid from" -msgstr "" - -msgid "Valid to" -msgstr "" - -msgid "Validity" -msgstr "" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -#, fuzzy -msgid "View Certificate" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -#, fuzzy -msgid "Certificate Data" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -#, fuzzy -msgid "Certificate For Match" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -#, fuzzy -msgid "Certificate Mapping Match" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "Matched Users" -msgstr "" - -#, fuzzy -msgid "User Login" -msgstr "ಬಳಕೆದಾರನ ಪ್ರವೇಶ" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -msgid "Configuration string" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -msgid "Remove certificate mapping data" -msgstr "" - -msgid "Issuer and subject" -msgstr "" - -msgid "Remove certificate identity mapping rules" -msgstr "" - -#, fuzzy -msgid "Group Options" -msgstr "ಗುಂಪಿನ ವಿವರಣೆ" - -msgid "Search Options" -msgstr "" - -msgid "SELinux Options" -msgstr "" - -msgid "Server Options" -msgstr "" - -#, fuzzy -msgid "Service Options" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -#, fuzzy -msgid "User Options" -msgstr "ಬಳಕೆದಾರನ ಪ್ರವೇಶ" - -msgid "Forward first" -msgstr "" - -msgid "Forwarding disabled" -msgstr "" - -msgid "Forward only" -msgstr "" - -msgid "Options" -msgstr "" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -msgid "Other Record Types" -msgstr "" - -msgid "Address not valid, can't redirect" -msgstr "" - -msgid "Create dns record" -msgstr "" - -msgid "Creating record." -msgstr "" - -msgid "Record creation failed." -msgstr "" - -msgid "Checking if record exists." -msgstr "" - -msgid "Record not found." -msgstr "" - -msgid "Redirection to PTR record" -msgstr "" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -msgid "Target reverse zone not found." -msgstr "" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -msgid "Standard Record Types" -msgstr "" - -msgid "Records for DNS Zone" -msgstr "" - -msgid "Record Type" -msgstr "" - -msgid "Add DNS zone" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -msgid "DNS Zone Settings" -msgstr "" - -msgid "Remove DNS zones" -msgstr "" - -#, fuzzy -msgid "Remove Permission" -msgstr "ಅನುಮತಿಗಳು" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Level" -msgstr "" - -msgid "Set Domain Level" -msgstr "" - -#, fuzzy -msgid "Add user group" -msgstr "ಬಳಕೆದಾರ ಗುಂಪು" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Group Settings" -msgstr "ಗುಂಪಿನ ವಿವರಣೆ" - -#, fuzzy -msgid "External" -msgstr "ಹೊರಗಿನ ಹೋಸ್ಟ್" - -msgid "Groups" -msgstr "ಗುಂಪುಗಳು" - -#, fuzzy -msgid "Group categories" -msgstr "ಗುಂಪಿನ ಕಂಟೇನರ್" - -msgid "Change to external group" -msgstr "" - -#, fuzzy -msgid "Change to POSIX group" -msgstr "Target ಗುಂಪು" - -msgid "Non-POSIX" -msgstr "" - -msgid "POSIX" -msgstr "" - -#, fuzzy -msgid "Remove user groups" -msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Group Type" -msgstr "ಗುಂಪಿನ ಹೆಸರು" - -msgid "Add HBAC rule" -msgstr "" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Accessing" -msgstr "ಪ್ರವೇಶದ ಸಮಯ" - -msgid "Remove HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Via Service" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -msgid "Who" -msgstr "" - -msgid "Add HBAC service" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -msgid "Remove HBAC services" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -msgid "Add HBAC service group" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -msgid "Remove HBAC service groups" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Access Denied" -msgstr "ಪ್ರವೇಶದ ಸಮಯ" - -#, fuzzy -msgid "Access Granted" -msgstr "ಪ್ರವೇಶದ ಸಮಯ" - -msgid "Include Disabled" -msgstr "" - -msgid "Include Enabled" -msgstr "" - -msgid "HBAC Test" -msgstr "" - -msgid "Matched" -msgstr "" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" - -msgid "Rules" -msgstr "" - -msgid "Run Test" -msgstr "" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -msgid "Unmatched" -msgstr "" - -msgid "Add host" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -#, fuzzy -msgid "Host Certificate" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -#, fuzzy -msgid "Host Name" -msgstr "ಹೋಸ್ಟ್ ಹೆಸರು" - -msgid "Delete Key, Unprovision" -msgstr "" - -msgid "Host Settings" -msgstr "" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -msgid "Generate OTP" -msgstr "" - -msgid "Generated OTP" -msgstr "" - -#, fuzzy -msgid "Kerberos Key" -msgstr "Kerberos principal" - -msgid "Kerberos Key Not Present" -msgstr "" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -#, fuzzy -msgid "One-Time Password" -msgstr "ಗುಪ್ತಪದ" - -msgid "One-Time Password Not Present" -msgstr "" - -msgid "One-Time Password Present" -msgstr "" - -msgid "Reset OTP" -msgstr "" - -msgid "Reset One-Time Password" -msgstr "" - -msgid "Set OTP" -msgstr "" - -msgid "OTP set" -msgstr "" - -msgid "Set One-Time Password" -msgstr "" - -#, fuzzy -msgid "Remove hosts" -msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್‌ಗಳು" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -msgid "Unprovision" -msgstr "" - -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -#, fuzzy -msgid "Add host group" -msgstr "ಹೋಸ್ಟ್-ಗುಂಪು" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Host Group Settings" -msgstr "ಹೋಸ್ಟ್ ಗುಂಪುಗಳು" - -#, fuzzy -msgid "Remove host groups" -msgstr "ಸದಸ್ಯ ಹೋಸ್ಟ್-ಗ್ರೂಪ್‌ಗಳು" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -msgid "Identity provider details" -msgstr "" - -#, fuzzy -msgid "Verify secret" -msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" - -msgid "User to override" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -msgid "Profile" -msgstr "" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -#, fuzzy -msgid "Enter trusted group name." -msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ಹೆಸರು" - -msgid "Add ID view" -msgstr "" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -#, fuzzy -msgid "Apply to host groups" -msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಸದಸ್ಯ" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -msgid "Remove ID views" -msgstr "" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -#, fuzzy -msgid "Un-apply from host groups" -msgstr "ಹೋಸ್ಟ್-ಗುಂಪಿನ ಹೆಸರು" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -msgid "Un-apply" -msgstr "" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -#, fuzzy -msgid "Kerberos Ticket Policy" -msgstr "Kerberos principal" - -#, fuzzy -msgid "Add netgroup" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Netgroup Settings" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್ ವಿವರಣೆ" - -#, fuzzy -msgid "Remove netgroups" -msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -msgid "Add OTP token" -msgstr "" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -msgid "Configure your token" -msgstr "" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -msgid "OTP Token Settings" -msgstr "" - -msgid "Disable token" -msgstr "" - -msgid "Enable token" -msgstr "" - -msgid "Remove OTP tokens" -msgstr "" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "" - -msgid "Show configuration uri" -msgstr "" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -#, fuzzy -msgid "Add Custom Attribute" -msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" - -#, fuzzy -msgid "Permission settings" -msgstr "ಅನುಮತಿಗಳು" - -#, fuzzy -msgid "Attribute breakdown" -msgstr "ವೈಶಿಷ್ಟ್ಯಗಳು" - -msgid "Privilege Settings" -msgstr "" - -msgid "Public key:" -msgstr "" - -msgid "Set public key" -msgstr "" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -msgid "Add password policy" -msgstr "" - -#, fuzzy -msgid "Password Policy" -msgstr "ಗುಪ್ತಪದ" - -msgid "Remove password policies" -msgstr "" - -msgid "Add ID range" -msgstr "" - -msgid "Range Settings" -msgstr "" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -msgid "Domain SID" -msgstr "" - -msgid "Secondary RID base" -msgstr "" - -msgid "Remove ID ranges" -msgstr "" - -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -msgid "Detect" -msgstr "" - -#, fuzzy -msgid "Local domain" -msgstr "ಪ್ರದೇಶ" - -msgid "IPA trust" -msgstr "" - -msgid "Active Directory winsync" -msgstr "" - -msgid "Add RADIUS server" -msgstr "" - -msgid "RADIUS Proxy Server Settings" -msgstr "" - -msgid "Remove RADIUS servers" -msgstr "" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -msgid "Force Update" -msgstr "" - -msgid "Add SELinux user map" -msgstr "" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Server Roles" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -#, fuzzy -msgid "Server Role" -msgstr "ಸೇವೆಯ ಹೆಸರು" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -msgid "Delete Server" -msgstr "" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -#, fuzzy -msgid "Add service" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -#, fuzzy -msgid "Service Certificate" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -#, fuzzy -msgid "Service Settings" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -#, fuzzy -msgid "Provisioning" -msgstr "ಅನುಮತಿಗಳು" - -#, fuzzy -msgid "Remove services" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -msgid "Unprovisioning service" -msgstr "" - -#, fuzzy -msgid "Service unprovisioned" -msgstr "Service principal" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "" - -msgid "SSH public keys" -msgstr "" - -msgid "SSH public key:" -msgstr "" - -msgid "Set SSH key" -msgstr "" - -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" - -msgid "Add stage user" -msgstr "" - -#, fuzzy -msgid "Stage users" -msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" - -#, fuzzy -msgid "Preserved users" -msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" - -msgid "Remove preserved users" -msgstr "" - -#, fuzzy -msgid "Remove stage users" -msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" - -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -#, fuzzy -msgid "User categories" -msgstr "ಬಳಕೆದಾರನ ವರ್ಗ" - -#, fuzzy -msgid "Add subid" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -msgid "Assigned subids" -msgstr "" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -msgid "Add sudo command" -msgstr "" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -msgid "Remove sudo commands" -msgstr "" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -msgid "Add sudo command group" -msgstr "" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove sudo command groups" -msgstr "ಒಂದು ಗುಂಪಿನ ಸದಸ್ಯ" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -msgid "Add sudo rule" -msgstr "" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "" - -msgid "Any Command" -msgstr "" - -#, fuzzy -msgid "Any Group" -msgstr "ಗುಂಪು" - -msgid "Run Commands" -msgstr "" - -msgid "Deny" -msgstr "" - -#, fuzzy -msgid "Access this host" -msgstr "ಪ್ರವೇಶದ ಸಮಯ" - -msgid "Option added" -msgstr "" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -msgid "Remove sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -msgid "Specified Commands and Groups" -msgstr "" - -msgid "Specified Groups" -msgstr "" - -msgid "Remove sudo options" -msgstr "" - -msgid "Autogenerated" -msgstr "" - -msgid "Segment details" -msgstr "" - -#, fuzzy -msgid "Replication configuration" -msgstr "ರದ್ದು ಮಾಡುವುದಕ್ಕೆ ಕಾರಣ" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -msgid "Account" -msgstr "" - -msgid "Add trust" -msgstr "" - -msgid "Administrative account" -msgstr "" - -msgid "SID blocklists" -msgstr "" - -msgid "Trust Settings" -msgstr "" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -#, fuzzy -msgid "Pre-shared password" -msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" - -msgid "Remove trusts" -msgstr "" - -msgid "Remove domains" -msgstr "" - -msgid "Alternative UPN suffixes" -msgstr "" - -msgid "User attributes for SMB services" -msgstr "" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - -msgid "Account Settings" -msgstr "" - -msgid "Account Status" -msgstr "" - -msgid "Active users" -msgstr "" - -msgid "Add user" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -msgid "Auto assign subordinate ids" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "" - -msgid "Contact Settings" -msgstr "" - -msgid "Delete mode" -msgstr "" - -#, fuzzy -msgid "Employee Information" -msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" - -msgid "Error changing account status" -msgstr "" - -#, fuzzy -msgid "Password expiration" -msgstr "ಗುಪ್ತಪದ ಇತಿಹಾಸದ ಗಾತ್ರ" - -#, fuzzy -msgid "Mailing Address" -msgstr "ಇಮೇಲ್ ವಿಳಾಸ" - -#, fuzzy -msgid "Misc. Information" -msgstr "ಮೌಂಟ್ ಮಾಹಿತಿ" - -msgid "delete" -msgstr "" - -msgid "preserve" -msgstr "" - -msgid "No private group" -msgstr "" - -#, fuzzy -msgid "Remove users" -msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Unlock" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -#, fuzzy -msgid "Members" -msgstr "ಸದಸ್ಯ" - -msgid "My User Vaults" -msgstr "" - -msgid "Owners" -msgstr "" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Service Vaults" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -msgid "Vault Type" -msgstr "" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -#, fuzzy -msgid "User Vaults" -msgstr "ಬಳಕೆದಾರರ ಗುಂಪುಗಳು" - -msgid "Current password is required" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "ಗುಪ್ತಪದದ ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ (ದಿನಗಳಲ್ಲಿ)" - -#, fuzzy -msgid "First OTP" -msgstr "ಮೊದಲ ಹೆಸರು" - -msgid "New password is required" -msgstr "" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Password change complete" -msgstr "" - -msgid "Your password has expired. Please enter a new password." -msgstr "" - -#, fuzzy -msgid "Passwords must match" -msgstr "ಗುಪ್ತಪದಗಳು ಹೊಂದಾಣಿಕೆಯಾಗುತ್ತಿಲ್ಲ" - -msgid "Password reset was not successful." -msgstr "" - -#, fuzzy -msgid "Reset your password." -msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" - -msgid "Second OTP" -msgstr "" - -#, fuzzy -msgid "Verify Password" -msgstr "ಬಳಕೆದಾರನ ಗುಪ್ತಪದ" - -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -msgid "Some entries were not deleted" -msgstr "" - -msgid "Quick Links" -msgstr "" - -msgid "Select All" -msgstr "" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -msgid "Unselect All" -msgstr "" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "" - -msgid "Audit" -msgstr "" - -msgid "Authentication" -msgstr "" - -#, fuzzy -msgid "Automount" -msgstr "ಕೀಗಳ ಆಟೋಮೌಂಟ್" - -msgid "DNS" -msgstr "DNS" - -msgid "Host-Based Access Control" -msgstr "" - -msgid "Identity" -msgstr "" - -#, fuzzy -msgid "Network Services" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -msgid "Policy" -msgstr "" - -msgid "Role-Based Access Control" -msgstr "" - -msgid "Subordinate IDs" -msgstr "" - -msgid "Sudo" -msgstr "" - -msgid "Topology" -msgstr "" - -msgid "True" -msgstr "" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -#, fuzzy -msgid "First" -msgstr "ಮೊದಲ ಹೆಸರು" - -#, fuzzy -msgid "Last" -msgstr "ಕೊನೆಯ ಹೆಸರು" - -msgid "Next" -msgstr "" - -msgid "Page" -msgstr "" - -msgid "Prev" -msgstr "" - -msgid "Undo" -msgstr "" - -msgid "Undo this change." -msgstr "" - -msgid "Undo All" -msgstr "" - -msgid "Undo all changes in this field." -msgstr "" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -#, fuzzy -msgid "Must be a decimal number" +msgid "must be a decimal number" msgstr "ದಶಾಂಶ ಸಂಖ್ಯೆ ಆಗಿರಲೇಬೇಕು" -msgid "Format error" -msgstr "" - -#, fuzzy -msgid "Must be an integer" +msgid "must be an integer" msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" -msgid "Not a valid IP address" -msgstr "" - -msgid "Not a valid IPv4 address" -msgstr "" - -msgid "Not a valid IPv6 address" -msgstr "" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -msgid "Parse error" -msgstr "" - -#, fuzzy -msgid "Must be a positive number" -msgstr "ದಶಾಂಶ ಸಂಖ್ಯೆ ಆಗಿರಲೇಬೇಕು" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -#, fuzzy -msgid "Required field" -msgstr "ಬೇಡಿಕೆ ID" - -msgid "Unsupported value" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -#, fuzzy -msgid "OTP max life" -msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -#, fuzzy -msgid "OTP max renew" -msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -#, fuzzy -msgid "RADIUS max life" -msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -#, fuzzy -msgid "RADIUS max renew" -msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -#, fuzzy -msgid "PKINIT max life" -msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -#, fuzzy -msgid "PKINIT max renew" -msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, fuzzy -msgid "IdP max life" -msgstr "ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ" - -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "" - -#, fuzzy -msgid "IdP max renew" -msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" - -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "" +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "ಕನಿಷ್ಠವಾಗಿ %(minlength)d ಬೈಟ್ಸ್ ಆಗಿರಲೇಬೇಕು" #, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" +msgid "must be at least %(minlength)d characters" +msgstr "ಕನಿಷ್ಠವಾಗಿ %(minlength)d ಅಕ್ಷರಗಳು ಇರಲೇಬೇಕು" #, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" +msgid "must be at least %(minvalue)d" +msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" + +msgid "must be binary data" +msgstr "ಬೈನರಿ ಡಾಟಾ ಆಗಿರಲೇಬೇಕು" #, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" +msgid "must be exactly %(length)d bytes" +msgstr "ನಿಖರವಾಗಿ %(length)d ಬೈಟ್ಸ್ ಆಗಿರಲೇಬೇಕು" #, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -#, fuzzy -msgid "Invalid LDAP URI." -msgstr "LDAP URI" +msgid "must be exactly %(length)d characters" +msgstr "ನಿಖರವಾಗಿ %(length)d ಅಕ್ಷರಗಳು ಇರಲೇಬೇಕು" #, python-format -msgid "%s to exclude from migration" -msgstr "" +msgid "must match pattern \"%(pattern)s\"" +msgstr "ನಮೂನೆ \"%(pattern)s\" ಹೊಂದಾಣಿಕೆಯಾಗಲೇಬೇಕು" -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -#, fuzzy -msgid "password policy" -msgstr "ಗುಪ್ತಪದ" - -msgid "password policies" -msgstr "" - -#, fuzzy -msgid "Password Policies" -msgstr "ಗುಪ್ತಪದ" - -#, fuzzy -msgid "Max repeat" -msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" - -#, fuzzy -msgid "Maximum number of same consecutive characters" -msgstr "ಕನಿಷ್ಟ ಸಂಖ್ಯೆಯ ಕ್ಯಾರಕ್ಟರ್ ಕ್ಲಾಸ್‌ಗಳು" - -#, fuzzy -msgid "Max sequence" -msgstr "ಗರಿಷ್ಟ ನವೀಕರಣ" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -msgid "User check" -msgstr "ಬಳಕೆದಾರನ ಹೆಸರು" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "Grace login limit" -msgstr "" - -msgid "Number of LDAP authentications allowed after expiration" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -#, fuzzy -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "ಗುಪ್ತಪದದ ಗರಿಷ್ಟ ಜೀವಿತಾವಧಿ (ದಿನಗಳಲ್ಲಿ)" - -#, fuzzy -msgid "cannot delete global password policy" -msgstr "ಗ್ಲೋಬಲ್ ಪಾಲಿಸಿಯಲ್ಲಿ ಆದ್ಯತೆಯನ್ನು ಸೆಟ್ ಮಾಡಲಾಗುವುದಿಲ್ಲ" +msgid "no modifications to be performed" +msgstr "ಯಾವುದೇ ಬದಲಾವಣೆಗಳು ನಡೆಯಬಾರದು" msgid "priority cannot be set on global policy" msgstr "ಗ್ಲೋಬಲ್ ಪಾಲಿಸಿಯಲ್ಲಿ ಆದ್ಯತೆಯನ್ನು ಸೆಟ್ ಮಾಡಲಾಗುವುದಿಲ್ಲ" -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, fuzzy, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "\"%s\" ಹೆಸರು ಹೊಂದಿರುವ ACI ಪತ್ತೆಯಾಗಿಲ್ಲ" - -#, fuzzy, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "" - -#, fuzzy -msgid "Malformed principal" -msgstr "Service principal" - -msgid "{} is required by the IPA master" -msgstr "" - -#, fuzzy -msgid "service" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -#, fuzzy -msgid "services" -msgstr "ಸೇವೆಗಳು(ಸರ್ವೀಸಸ್)" - -#, fuzzy -msgid "Service principal alias" -msgstr "Service principal" - -#, fuzzy -msgid "Base-64 encoded service certificate" -msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." -msgstr "" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy -msgid "force principal name even if host not in DNS" -msgstr "ಈ ಹೋಸ್ಟ್‌ಗೆ Kerberos principalನ ಹೆಸರು" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -msgid "Add a new SMB service." -msgstr "" - -#, fuzzy -msgid "SMB service NetBIOS name" -msgstr "ಸೇವೆಯ ಹೆಸರು" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified service \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -#, fuzzy, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Remove principal alias from a service" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -#, fuzzy -msgid "Stage Users" -msgstr "ಬಳಕೆದಾರರು" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -#, fuzzy -msgid "stage users" -msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" - -#, fuzzy, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -#, fuzzy, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -#, fuzzy -msgid "Hosts the view applies to" -msgstr "ನಿಯಮ ಅನ್ವಯಿಸುವಂತಹ ಹೋಸ್ಟ್ ವರ್ಗ" - -#, fuzzy, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Delete an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "Modify an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಸೇವೆ(ಸರ್ವೀಸ್)ಯನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "\"%(value)s\" ಗುಂಪನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -#, fuzzy -msgid "Certificate Authority" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -#, fuzzy -msgid "Certificate Authorities" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "Name for referencing the CA" -msgstr "" - -#, fuzzy -msgid "Description of the purpose of the CA" -msgstr "ಈ ಹೋಸ್ಟ್‌ನ ವಿವರಣೆ" - -msgid "Authority ID" -msgstr "" - -msgid "Dogtag Authority ID" -msgstr "" - -#, fuzzy -msgid "Subject DN" -msgstr "ವಿಷಯ" - -msgid "Subject Distinguished Name" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Issuer Distinguished Name" -msgstr "" - -#, fuzzy -msgid "Base-64 encoded certificate." -msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" - -#, fuzzy -msgid "Certificate chain" -msgstr "ಪ್ರಮಾಣಪತ್ರ" - -msgid "X.509 certificate chain" -msgstr "" - -#, fuzzy -msgid "RSN Version" -msgstr "ಅನುಮತಿಗಳು" - -#, fuzzy -msgid "Random Serial Number Version" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" - -msgid "Search for CAs." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" -msgstr[1] "%(count)d ವೇರಿಯೇಬಲ್‌ಗಳು" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "Display the properties of a CA." -msgstr "" - -msgid "Create a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Created CA \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -msgid "Modify CA configuration." -msgstr "" - -#, fuzzy, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "IPA CA cannot be disabled" -msgstr "" - -msgid "Enable a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "\"%(value)s\" ACIವನ್ನು ರಚಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -#, fuzzy -msgid "Subject email address" -msgstr "ಇಮೇಲ್ ವಿಳಾಸ" - -#, fuzzy -msgid "Subject DNS name" -msgstr "ವಿಷಯ" - -#, fuzzy -msgid "Subject X.400 address" -msgstr "ಕೇರಿ ವಿಳಾಸ" - -#, fuzzy -msgid "Subject directory name" -msgstr "ಹೋಮ್ ಡೈರೆಕ್ಟರೀ ಮೂಲ" - -msgid "Subject EDI Party name" -msgstr "" - -#, fuzzy -msgid "Subject URI" -msgstr "ವಿಷಯ" - -#, fuzzy -msgid "Subject IP Address" -msgstr "ಕೇರಿ ವಿಳಾಸ" - -#, fuzzy -msgid "Subject OID" -msgstr "ವಿಷಯ" - -#, fuzzy -msgid "Subject UPN" -msgstr "ವಿಷಯ" - -#, fuzzy -msgid "Subject Kerberos principal name" -msgstr "Kerberos principal" - -msgid "Subject Other Name" -msgstr "" - -#, fuzzy -msgid "Serial number (hex)" -msgstr "ಅನುಕ್ರಮ ಸಂಖ್ಯೆ" - -msgid "Request status" -msgstr "ಬೇಡಿಕೆ ಸ್ಥಿತಿ" - -#, fuzzy -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "ಸ್ವಯಂಚಾಲಿತವಾಗಿ principal ಸೇರಿಸಿ ಅದು ಅಸ್ತಿತ್ವದಲ್ಲಿ ಇಲ್ಲದಿದ್ದಲ್ಲಿ" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -#, fuzzy -msgid "The principal for this request doesn't exist." -msgstr "ಸ್ವಯಂಚಾಲಿತವಾಗಿ principal ಸೇರಿಸಿ ಅದು ಅಸ್ತಿತ್ವದಲ್ಲಿ ಇಲ್ಲದಿದ್ದಲ್ಲಿ" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "ರದ್ದು ಮಾಡಲಾಗಿದೆ" - -#, fuzzy -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "ಪ್ರಮಾಣಪತ್ರವನ್ನು (0-10) ರದ್ದು ಮಾಡಲು ಕಾರಣ" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -#, fuzzy -msgid "7 is not a valid revocation reason" -msgstr "ರದ್ದು ಮಾಡುವುದಕ್ಕೆ ಕಾರಣ" - -#, fuzzy -msgid "Status of the certificate" -msgstr "Base-64 ಎನ್‌ಕೋಡೆಡ್ ಸರ್ವರ್ ಪ್ರಮಾಣಪತ್ರ" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -#, fuzzy -msgid "users" -msgstr "ಬಳಕೆದಾರರು" - -msgid "command" -msgstr "" - -msgid "commands" -msgstr "" - -msgid "runAs user" -msgstr "" - -#, fuzzy -msgid "runAs users" -msgstr "ಸದಸ್ಯ ಬಳಕೆದಾರರು" - -#, fuzzy -msgid "group runAs" -msgstr "ನೆಟ್‌ಗ್ರೂಪ್‌ಗಳು" - -#, fuzzy -msgid "runAs groups" -msgstr "ಸದಸ್ಯ ಗುಂಪುಗಳು" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Preserved user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, fuzzy, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, fuzzy, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "\"%(value)s\" ಹೋಸ್ಟನ್ನು ಅಳಿಸಲಾಗಿದೆ" - -#, fuzzy -msgid "Failed logins" -msgstr "ಬಳಕೆದಾರನ ಪ್ರವೇಶ" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -#, fuzzy -msgid "Time now" -msgstr "ಉಳಿದಿರಬೇಕಾದ ಸಮಯ" - -#, fuzzy -msgid "Password grace count" -msgstr "ಗುಪ್ತಪದ ಇತಿಹಾಸದ ಗಾತ್ರ" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -#, fuzzy, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಸೇರಿಸಲಾಗಿದೆ" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "\"%(value)s\" ಬಳಕೆದಾರನನ್ನು ಬದಲಾಯಿಸಲಾಗಿದೆ" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" -msgstr "" - -#, fuzzy -msgid "Request must be a dict" -msgstr "ಬೇಡಿಕೆ ಸ್ಥಿತಿ" - -msgid "Request is missing \"method\"" -msgstr "" - -msgid "Request is missing \"params\"" -msgstr "" - -#, fuzzy -msgid "params must be a list" -msgstr "ಇನ್ಟೀಜರ್ ಆಗಿರಲೇಬೇಕು" - -msgid "params must contain [args, options]" -msgstr "" - -msgid "params[0] (aka args) must be a list" -msgstr "" - -msgid "params[1] (aka options) must be a dict" -msgstr "" - -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" - -msgid "CIFS server denied your credentials" -msgstr "" - -msgid "communication with CIFS server was unsuccessful" -msgstr "" - -msgid "AD domain controller" -msgstr "" - -msgid "unsupported functional level" -msgstr "" - -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" - -msgid "Cannot find specified domain or server name" -msgstr "" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" - -msgid "At least the domain or IP address should be specified" -msgstr "" - -#, python-format -msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" -msgstr "" - -msgid "no trusted domain is configured" -msgstr "" - -msgid "domain is not configured" -msgstr "" - -msgid "SID is not valid" -msgstr "" - -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "" - -msgid "SID does not match any trusted domain" -msgstr "" - -msgid "Trust setup" -msgstr "" - -msgid "Our domain is not configured" -msgstr "" - -msgid "No trusted domain is not configured" -msgstr "" - -msgid "trusted domain object" -msgstr "" - -msgid "domain is not trusted" -msgstr "" - -msgid "no trusted domain matched the specified flat name" -msgstr "" - -msgid "trusted domain object not found" -msgstr "" - -msgid "Object does not belong to a trusted domain" -msgstr "" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "" - -msgid "Ambiguous search, user domain was not specified" -msgstr "" - -msgid "Trusted domain did not return a unique object" -msgstr "" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "" - -msgid "trusted domain user not found" -msgstr "" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "" - -msgid "CIFS credentials object" -msgstr "" - -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "" - -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" - -#, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" - -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" - -msgid "Credentials" -msgstr "" - -msgid "Missing credentials for cross-forest communication" -msgstr "" - -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr " ಬಗೆ, ಫಿಲ್ಟರ್, ಸಬ್‌ಟ್ರೀ ಮತ್ತು ಟಾರ್ಗೆಟ್‌ಗ್ರೂಪ್ ಗಳು ಪರಸ್ಪರ ಪ್ರತ್ಯೇಕ" #, python-format -msgid "must equal %r" -msgstr "" - -msgid "Hello world" -msgstr "" - -#, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "" - -#, fuzzy -msgid "must be at least 1" -msgstr "ಕನಿಷ್ಠವಾಗಿ %(minvalue)d ಆಗಿರಲೇಬೇಕು" - -msgid "Out of memory\n" -msgstr "" - -msgid "Warning unrecognized encryption type.\n" -msgstr "" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -msgid "Out of memory!?\n" -msgstr "" - -msgid "Enctype comparison failed!\n" -msgstr "" - -#, fuzzy -msgid "Password is too long!\n" -msgstr "ಗುಪ್ತಪದ ಇತಿಹಾಸದ ಗಾತ್ರ" - -msgid "Failed to create random key!\n" -msgstr "" - -msgid "Failed to create key!\n" -msgstr "" - -msgid "Bad or unsupported salt type.\n" -msgstr "" - -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "%(server)s ಸರ್ವರ್‌ನಿಂದ ಅಜ್ಞಾತ ದೋಷ %(code)d: %(error)s" diff --git a/po/ko.po b/po/ko.po index 35b305af4..6a6a45a9b 100644 --- a/po/ko.po +++ b/po/ko.po @@ -18,27888 +18,475 @@ msgstr "" "Plural-Forms: nplurals=1; plural=0;\n" "X-Generator: Weblate 4.14.1\n" -#: client/config.c:56 -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "구성 파일 %s를 열 수 없습니다\n" - -#: client/config.c:63 -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "구성 파일 %s을 stat() 할 수 없습니다\n" - -#: client/config.c:69 -#, c-format -msgid "out of memory\n" -msgstr "메모리 부족\n" - -#: client/config.c:80 -#, c-format -msgid "read error\n" -msgstr "읽기 오류\n" - -#: client/ipa-rmkeytab.c:51 -#, c-format -msgid "Unable to parse principal name\n" -msgstr "주요 이름을 구문 분석 할 수 없습니다\n" - -#: client/ipa-rmkeytab.c:53 -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "krb5_parse_name %1$d: %2$s\n" - -#: client/ipa-rmkeytab.c:63 -#, c-format -msgid "Removing principal %s\n" -msgstr "주체 %s를 제거하기\n" - -#: client/ipa-rmkeytab.c:76 -#, c-format -msgid "Failed to open keytab\n" -msgstr "키탭을 가져오는데 실패함\n" - -#: client/ipa-rmkeytab.c:80 -#, c-format -msgid "principal not found\n" -msgstr "주체를 찾을 수 없음\n" - -#: client/ipa-rmkeytab.c:82 -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "krb5_kt_get_entry %1$d: %2$s\n" - -#: client/ipa-rmkeytab.c:90 -#, c-format -msgid "Unable to remove entry\n" -msgstr "항목을 제거 할 수 없음\n" - -#: client/ipa-rmkeytab.c:92 -#, c-format -msgid "kvno %d\n" -msgstr "kvno %d\n" - -#: client/ipa-rmkeytab.c:93 -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "krb5_kt_remove_entry %1$d: %2$s\n" - -#: client/ipa-rmkeytab.c:124 client/ipa-rmkeytab.c:146 -#: client/ipa-rmkeytab.c:160 client/ipa-rmkeytab.c:263 -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "커서 '%1$s' 설정에 실패함\n" - -#: client/ipa-rmkeytab.c:133 -#, c-format -msgid "Unable to parse principal\n" -msgstr "주체를 구문 분석 할 수 없습니다\n" - -#: client/ipa-rmkeytab.c:135 -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "krb5_unparse_name %1$d: %2$s\n" - -#: client/ipa-rmkeytab.c:169 -#, c-format -msgid "realm not found\n" -msgstr "realm을 찾을 수 없음\n" - -#: client/ipa-rmkeytab.c:195 client/ipa-getkeytab.c:942 -msgid "Print debugging information" -msgstr "디버깅 정보 인쇄" - -#: client/ipa-rmkeytab.c:195 -msgid "Debugging output" -msgstr "디버깅 출력" - -#: client/ipa-rmkeytab.c:197 -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "keytab에서 제거 할 주체 (예제: ftp/ftp.example.com@EXAMPLE.COM)" - -#: client/ipa-rmkeytab.c:198 client/ipa-getkeytab.c:948 -msgid "Kerberos Service Principal Name" -msgstr "커버러스 서비스 주체 이름" - -#: client/ipa-rmkeytab.c:200 -msgid "The keytab file to remove the principcal(s) from" -msgstr "주체를 제거하는 키탭 파일" - -#: client/ipa-rmkeytab.c:200 client/ipa-getkeytab.c:952 -msgid "Keytab File Name" -msgstr "키탭 파일 이름" - -#: client/ipa-rmkeytab.c:202 -msgid "Remove all principals in this realm" -msgstr "이와 같은 영역에서 모든 주체를 제거합니다" - -#: client/ipa-rmkeytab.c:202 ipaclient/remote_plugins/2_114/trust.py:111 -msgid "Realm name" -msgstr "영역 이름" - -#: client/ipa-rmkeytab.c:216 client/ipa-getkeytab.c:1001 -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "커버러스 문맥 초기화에 실패함\n" - -#: client/ipa-rmkeytab.c:256 -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "키탭을 여는데 실패함 '%1$s': %2$s\n" - -#: client/ipa-rmkeytab.c:279 -#, c-format -msgid "Closing keytab failed\n" -msgstr "키탭을 닫는데 실패함\n" - -#: client/ipa-rmkeytab.c:281 -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "krb5_kt_close %1$d: %2$s\n" - -#: client/ipa-getkeytab.c:254 -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "커버러스 문맥을 초기화 하는데 실패함: %1$s (%2$d)\n" - -#: client/ipa-getkeytab.c:265 -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "주체를 구문 분석 할 수 없음: %1$s (%2$d)\n" - -#: client/ipa-getkeytab.c:320 -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "KDC에 의해 허용하는 키가 없습니다\n" - -#: client/ipa-getkeytab.c:338 -#, c-format -msgid "Out of memory \n" -msgstr "메모리 부족 \n" - -#: client/ipa-getkeytab.c:361 -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "ldap 라이브러리를 초기화 할 수 없습니다\n" - -#: client/ipa-getkeytab.c:377 -msgid "Simple bind failed\n" -msgstr "단순 바인드에 실패함\n" - -#: client/ipa-getkeytab.c:391 client/ipa-join.c:260 -msgid "SASL Bind failed\n" -msgstr "SASL 바인드가 실패했습니다\n" - -#: client/ipa-getkeytab.c:422 -#, c-format -msgid "Operation failed: %s\n" -msgstr "작업 실패: %s\n" - -#: client/ipa-getkeytab.c:431 -#, c-format -msgid "Failed to get result: %s\n" -msgstr "결과를 가져오는데 실패함: %s\n" - -#: client/ipa-getkeytab.c:435 -#, c-format -msgid "Timeout exceeded." -msgstr "제한시간이 초과 되었습니다." - -#: client/ipa-getkeytab.c:441 -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "확장된 결과를 구문 분석하는데 실패함: %s\n" - -#: client/ipa-getkeytab.c:448 -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "결과를 구문 분석하는데 실패함: %s\n" - -#: client/ipa-getkeytab.c:467 -#, c-format -msgid "Missing reply control list!\n" -msgstr "응답 제어 목록이 누락됨!\n" - -#: client/ipa-getkeytab.c:477 -#, c-format -msgid "Missing reply control!\n" -msgstr "응답 제어 누락!\n" - -#: client/ipa-getkeytab.c:519 -#, c-format -msgid "Out of Memory!\n" -msgstr "메모리 부족!\n" - -#: client/ipa-getkeytab.c:526 client/ipa-getkeytab.c:688 -#, c-format -msgid "Failed to create control!\n" -msgstr "제어를 생성하는데 실패함!\n" - -#: client/ipa-getkeytab.c:532 client/ipa-getkeytab.c:696 -#, c-format -msgid "Failed to bind to server!\n" -msgstr "서버로 바인드 하는데 실패함!\n" - -#: client/ipa-getkeytab.c:539 -#, c-format -msgid "Failed to get keytab!\n" -msgstr "키탭을 가져오는데 실패함!\n" - -#: client/ipa-getkeytab.c:548 -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "ber_init() 실패하고, 잘못된 제어 ?!\n" - -#: client/ipa-getkeytab.c:567 -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "ber_scanf() 실패하고, kvno 찾을 수 없음 ?!\n" - -#: client/ipa-getkeytab.c:579 -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "암호화 형태 유형 #%d를 검색하는데 실패함\n" - -#: client/ipa-getkeytab.c:583 -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "암호화 유형 %1$s (#%2$d)를 검색하는데 실패함\n" - -#: client/ipa-getkeytab.c:593 -#, c-format -msgid "Failed to retrieve any keys" -msgstr "키를 검색하는데 실패함" - -#: client/ipa-getkeytab.c:711 -msgid "Failed to decode control reply!\n" -msgstr "제어 응답을 디코드 하는데 실패함\n" - -#: client/ipa-getkeytab.c:773 -#, c-format -msgid "Passwords do not match!\n" -msgstr "비밀번호가 일치하지 않습니다!\n" - -#: client/ipa-getkeytab.c:803 -#, c-format -msgid "Failed to open config file %s\n" -msgstr "구성 파일 %s를 여는데 실패함\n" - -#: client/ipa-getkeytab.c:813 -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "구성 파일 %s를 구문 분석하는데 실패함\n" - -#: client/ipa-getkeytab.c:896 -msgid "Failed to resolve symlink to keytab.\n" -msgstr "심볼릭링크를 키탭으로 결정 하는데 실패함\n" - -#: client/ipa-getkeytab.c:907 -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "키탭은 매달린 심볼릭 링크와 다른 사용자에 의해 소유됩니다\n" - -#: client/ipa-getkeytab.c:940 -msgid "Print as little as possible" -msgstr "가능한 작게 출력합니다" - -#: client/ipa-getkeytab.c:940 -msgid "Output only on errors" -msgstr "오류에서만 출력" - -#: client/ipa-getkeytab.c:942 -msgid "Output debug info" -msgstr "" - -#: client/ipa-getkeytab.c:944 -msgid "Contact this specific KDC Server" -msgstr "이와 같은 지정된 KDC 서버와 연락합니다" - -#: client/ipa-getkeytab.c:945 -msgid "Server Name" -msgstr "서버 이름" - -#: client/ipa-getkeytab.c:947 -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "(예제: ftp/ftp.example.com@EXAMPLE.COM)를 위해 키탭에서 가져올 주체" - -#: client/ipa-getkeytab.c:950 -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "신규 키를 (만약 존재 한다면 생성 될 것임)로 확장하는 키탭 파일." - -#: client/ipa-getkeytab.c:954 -msgid "Encryption types to request" -msgstr "요청하는 암호화 유형" - -#: client/ipa-getkeytab.c:955 -msgid "Comma separated encryption types list" -msgstr "쉼표로 구분된 암호화 유형 목록" - -#: client/ipa-getkeytab.c:957 -msgid "Show the list of permitted encryption types and exit" -msgstr "허용된 암호화 유형의 목록을 표시하고 종료" - -#: client/ipa-getkeytab.c:958 -msgid "Permitted Encryption Types" -msgstr "허용되는 암호화 유형" - -#: client/ipa-getkeytab.c:960 -msgid "Asks for a non-random password to use for the principal" -msgstr "보안 주체에 사용 할 임의적이지 않은 비밀번호를 요청합니다" - -#: client/ipa-getkeytab.c:962 -msgid "LDAP DN" -msgstr "LDAP DN" - -#: client/ipa-getkeytab.c:962 -msgid "DN to bind as if not using kerberos" -msgstr "만약 커버러스를 사용하지 않는 것같이 바인드하는 DN" - -#: client/ipa-getkeytab.c:964 -msgid "LDAP password" -msgstr "" - -#: client/ipa-getkeytab.c:964 -msgid "password to use if not using kerberos" -msgstr "만약 커버러스를 사용하지 않는 것을 사용하려는 비밀번호" - -#: client/ipa-getkeytab.c:966 -msgid "Prompt for LDAP password" -msgstr "LDAP 비밀번호를 위한 프롬프트" - -#: client/ipa-getkeytab.c:968 -msgid "Path to the IPA CA certificate" -msgstr "IPA CA 인증서 경로" - -#: client/ipa-getkeytab.c:968 -msgid "IPA CA certificate" -msgstr "IPA CA 인증서" - -#: client/ipa-getkeytab.c:970 -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "연결 할 LDAP URI입니다. --server와 상호 배타적" - -#: client/ipa-getkeytab.c:971 -msgid "url" -msgstr "url" - -#: client/ipa-getkeytab.c:973 -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "만약 bindd/bindpw가 없는 경우 LDAP SASL 바인드 동작원리" - -#: client/ipa-getkeytab.c:974 -msgid "GSSAPI|EXTERNAL" -msgstr "" - -#: client/ipa-getkeytab.c:976 -msgid "Retrieve current keys without changing them" -msgstr "" - -#: client/ipa-getkeytab.c:1014 util/ipa_krb5.c:892 -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#: client/ipa-getkeytab.c:1017 -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#: client/ipa-getkeytab.c:1021 -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#: client/ipa-getkeytab.c:1039 -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -#: client/ipa-getkeytab.c:1047 -msgid "Enter LDAP password" -msgstr "" - -#: client/ipa-getkeytab.c:1055 -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#: client/ipa-getkeytab.c:1062 -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#: client/ipa-getkeytab.c:1070 -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#: client/ipa-getkeytab.c:1081 -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#: client/ipa-getkeytab.c:1094 -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" - -#: client/ipa-getkeytab.c:1099 -#, c-format -msgid "Discovered server %s\n" -msgstr "" - -#: client/ipa-getkeytab.c:1105 -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#: client/ipa-getkeytab.c:1114 -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#: client/ipa-getkeytab.c:1133 -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#: client/ipa-getkeytab.c:1136 -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#: client/ipa-getkeytab.c:1141 -#, c-format -msgid "Using provided server %s\n" -msgstr "" - -#: client/ipa-getkeytab.c:1156 -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -#: client/ipa-getkeytab.c:1161 -msgid "New Principal Password" -msgstr "" - -#: client/ipa-getkeytab.c:1162 -msgid "Verify Principal Password" -msgstr "" - -#: client/ipa-getkeytab.c:1168 -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#: client/ipa-getkeytab.c:1175 -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#: client/ipa-getkeytab.c:1183 -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#: client/ipa-getkeytab.c:1191 -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#: client/ipa-getkeytab.c:1205 -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#: client/ipa-getkeytab.c:1223 -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#: client/ipa-getkeytab.c:1233 -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#: client/ipa-getkeytab.c:1243 -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#: client/ipa-getkeytab.c:1257 -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#: client/ipa-getkeytab.c:1266 -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#: client/ipa-getkeytab.c:1272 -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#: client/ipa-join.c:65 client/ipa-join.c:420 client/ipa-join.c:440 -#: client/ipa-join.c:538 client/ipa-join.c:1065 util/ipa_krb5.c:1024 -#: util/ipa_krb5.c:1058 -#, c-format -msgid "Out of memory!\n" -msgstr "메모리 부족!\n" - -#: client/ipa-join.c:80 client/ipa-join.c:812 -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "이 호스트를 IPA 도메인으로 가입 할 수 있는 권한이 없습니다.\n" - -#: client/ipa-join.c:110 client/ipa-join.c:122 -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "" - -#: client/ipa-join.c:127 -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "" - -#: client/ipa-join.c:151 client/ipa-join.c:180 client/ipa-join.c:231 -#, c-format -msgid "Out of memory!" -msgstr "" - -#: client/ipa-join.c:242 -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "" - -#: client/ipa-join.c:334 -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "" - -#: client/ipa-join.c:354 -#, c-format -msgid "No values for %s" -msgstr "" - -#: client/ipa-join.c:364 -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "" - -#: client/ipa-join.c:370 -#, c-format -msgid "IPA namingContext not found\n" -msgstr "" - -#: client/ipa-join.c:426 -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "" - -#: client/ipa-join.c:474 -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "" - -#: client/ipa-join.c:592 -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "" - -#: client/ipa-join.c:606 client/ipa-join.c:945 -#, c-format -msgid "Host is already joined.\n" -msgstr "" - -#: client/ipa-join.c:632 -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" - -#: client/ipa-join.c:640 -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" - -#: client/ipa-join.c:652 -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" - -#: client/ipa-join.c:680 -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" - -#: client/ipa-join.c:687 -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" - -#: client/ipa-join.c:736 -#, c-format -msgid "json_dumps() failed\n" -msgstr "" - -#: client/ipa-join.c:743 -#, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "" - -#: client/ipa-join.c:749 -#, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "" - -#: client/ipa-join.c:760 -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#: client/ipa-join.c:762 -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#: client/ipa-join.c:769 -#, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "" - -#: client/ipa-join.c:804 -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#: client/ipa-join.c:837 -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#: client/ipa-join.c:852 -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#: client/ipa-join.c:884 client/ipa-join.c:973 -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#: client/ipa-join.c:927 client/ipa-join.c:1003 -#, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "" - -#: client/ipa-join.c:1019 client/ipa-join.c:1096 -#, c-format -msgid "Unenrollment successful.\n" -msgstr "등록 취소 성공.\n" - -#: client/ipa-join.c:1021 client/ipa-join.c:1098 -#, c-format -msgid "Unenrollment failed.\n" -msgstr "" - -#: client/ipa-join.c:1103 -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "" - -#: client/ipa-join.c:1145 client/ipa-join.c:1287 -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "" - -#: client/ipa-join.c:1157 client/ipa-join.c:1296 -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" - -#: client/ipa-join.c:1164 -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" - -#: client/ipa-join.c:1172 -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" - -#: client/ipa-join.c:1191 -#, c-format -msgid "fork() failed\n" -msgstr "" - -#: client/ipa-join.c:1223 -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "" - -#: client/ipa-join.c:1226 -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "" - -#: client/ipa-join.c:1229 -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "" - -#: client/ipa-join.c:1241 -#, c-format -msgid "child exited with %d\n" -msgstr "" - -#: client/ipa-join.c:1304 -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "" - -#: client/ipa-join.c:1312 -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "" - -#: client/ipa-join.c:1322 -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "" - -#: client/ipa-join.c:1340 -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "" - -#: client/ipa-join.c:1351 client/ipa-join.c:1358 -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "" - -#: client/ipa-join.c:1366 -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" - -#: client/ipa-join.c:1422 -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "" - -#: client/ipa-join.c:1424 -msgid "Quiet mode. Only errors are displayed." -msgstr "" - -#: client/ipa-join.c:1426 -msgid "Unenroll this host from IPA server" -msgstr "" - -#: client/ipa-join.c:1428 -msgid "Hostname of this server" -msgstr "" - -#: client/ipa-join.c:1428 client/ipa-join.c:1430 -msgid "hostname" -msgstr "" - -#: client/ipa-join.c:1430 -msgid "IPA Server to use" -msgstr "" - -#: client/ipa-join.c:1432 -msgid "Specifies where to store keytab information." -msgstr "" - -#: client/ipa-join.c:1432 -msgid "filename" -msgstr "" - -#: client/ipa-join.c:1434 -msgid "Force the host join. Rejoin even if already joined." -msgstr "" - -#: client/ipa-join.c:1436 -msgid "LDAP password (if not using Kerberos)" -msgstr "" - -#: client/ipa-join.c:1436 -msgid "password" -msgstr "" - -#: client/ipa-join.c:1438 -msgid "LDAP basedn" -msgstr "" - -#: client/ipa-join.c:1438 -msgid "basedn" -msgstr "" - -#: client/ipa-join.c:1471 -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#: client/ipa-join.c:1476 -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "" - -#: client/ipa-join.c:1480 -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "" - -#: ipaclient/plugins/automember.py:33 ipaserver/plugins/automember.py:342 -msgid "Failed to add" -msgstr "" - -#: ipaclient/plugins/ca.py:19 ipaclient/plugins/cert.py:39 -msgid "Write certificate (chain if --chain used) to file" -msgstr "" - -#: ipaclient/plugins/cert.py:107 -msgid "Unrevoked" -msgstr "" - -#: ipaclient/plugins/cert.py:110 ipaserver/plugins/internal.py:294 -msgid "Error" -msgstr "" - -#: ipaclient/plugins/cert.py:120 -msgid "Input filename" -msgstr "" - -#: ipaclient/plugins/cert.py:121 -msgid "File to load the certificate from." -msgstr "" - -#: ipaclient/plugins/cert.py:130 ipaclient/plugins/certmap.py:41 -msgid "cannot specify both raw certificate and file" -msgstr "" - -#: ipaclient/plugins/certmap.py:19 -msgid "Input file" -msgstr "" - -#: ipaclient/plugins/certmap.py:20 -msgid "File to load the certificate from" -msgstr "" - -#: ipaclient/plugins/certprofile.py:25 -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "" - -#: ipaclient/plugins/dns.py:137 ipaserver/plugins/dns.py:3576 -msgid "Split DNS record to parts" -msgstr "DNS 레코드를 부분으로 분할" - -#: ipaclient/plugins/dns.py:237 -msgid "Please choose a type of DNS resource record to be added" -msgstr "" - -#: ipaclient/plugins/dns.py:238 -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" - -#: ipaclient/plugins/dns.py:243 -msgid "DNS resource record type" -msgstr "" - -#: ipaclient/plugins/dns.py:261 -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" - -#: ipaclient/plugins/dns.py:286 -msgid "No option to modify specific record provided." -msgstr "" - -#: ipaclient/plugins/dns.py:289 ipaclient/plugins/dns.py:355 -msgid "Current DNS record contents:\n" -msgstr "" - -#: ipaclient/plugins/dns.py:312 -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "" - -#: ipaclient/plugins/dns.py:321 -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -msgstr[1] "" - -#: ipaclient/plugins/dns.py:329 ipaserver/plugins/dns.py:3876 -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -#: ipaclient/plugins/dns.py:347 -msgid "No option to delete specific record provided." -msgstr "" - -#: ipaclient/plugins/dns.py:348 -msgid "Delete all?" -msgstr "" - -#: ipaclient/plugins/dns.py:376 -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "" - -#: ipaclient/plugins/dns.py:392 ipaclient/plugins/dns.py:409 -#: ipaclient/plugins/dns.py:421 -msgid "Server will check DNS forwarder(s)." -msgstr "" - -#: ipaclient/plugins/dns.py:394 ipaclient/plugins/dns.py:411 -#: ipaclient/plugins/dns.py:423 -msgid "This may take some time, please wait ..." -msgstr "" - -#: ipaclient/plugins/dns.py:403 -msgid "DNS forwarder" -msgstr "" - -#: ipaclient/plugins/dns.py:434 -msgid "file to store DNS records in nsupdate format" -msgstr "" - -#: ipaclient/plugins/host.py:41 ipaclient/plugins/service.py:43 -#: ipaclient/plugins/user.py:74 -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -#: ipaclient/plugins/location.py:23 -msgid "Servers details:" -msgstr "" - -#: ipaclient/plugins/migration.py:37 -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -#: ipaclient/plugins/migration.py:41 -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -#: ipaclient/plugins/server.py:20 -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#: ipaclient/plugins/topology.py:25 -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#: ipaclient/plugins/topology.py:30 -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -#: ipaclient/plugins/topology.py:33 -msgid "Topology is disconnected" -msgstr "" - -#: ipaclient/plugins/topology.py:35 -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -#: ipaclient/plugins/topology.py:40 -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -#: ipaclient/plugins/topology.py:43 -msgid "Maximum number of agreements per replica" -msgstr "" - -#: ipaclient/plugins/topology.py:47 -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -#: ipaclient/plugins/user.py:40 -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -#: ipaclient/plugins/user.py:45 -msgid "Delete a user" -msgstr "" - -#: ipaclient/plugins/user.py:54 -msgid "preserve and no-preserve cannot be both set" -msgstr "" - -#: ipaclient/plugins/automount.py:101 -msgid "maps not connected to /etc/auto.master:" -msgstr "" - -#: ipaclient/plugins/automount.py:120 -msgid "Import automount files for a specific location." -msgstr "" - -#: ipaclient/plugins/automount.py:124 -msgid "Master file" -msgstr "" - -#: ipaclient/plugins/automount.py:125 -msgid "Automount master file." -msgstr "" - -#: ipaclient/plugins/automount.py:132 -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" - -#: ipaclient/plugins/automount.py:150 -#, python-format -msgid "File %(file)s not found" -msgstr "" - -#: ipaclient/plugins/automount.py:200 -#, python-format -msgid "key %(key)s already exists" -msgstr "" - -#: ipaclient/plugins/automount.py:215 -#, python-format -msgid "map %(map)s already exists" -msgstr "" - -#: ipaclient/plugins/automount.py:264 -msgid "Imported maps:" -msgstr "" - -#: ipaclient/plugins/automount.py:267 -#, python-format -msgid "Added %(map)s" -msgstr "" - -#: ipaclient/plugins/automount.py:271 -msgid "Imported keys:" -msgstr "" - -#: ipaclient/plugins/automount.py:274 -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "" - -#: ipaclient/plugins/automount.py:281 -msgid "Ignored keys:" -msgstr "" - -#: ipaclient/plugins/automount.py:284 -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "" - -#: ipaclient/plugins/automount.py:292 -msgid "Duplicate maps skipped:" -msgstr "" - -#: ipaclient/plugins/automount.py:295 -#, python-format -msgid "Skipped %(map)s" -msgstr "" - -#: ipaclient/plugins/automount.py:301 -msgid "Duplicate keys skipped:" -msgstr "" - -#: ipaclient/plugins/automount.py:304 -#, python-format -msgid "Skipped %(key)s" -msgstr "" - -#: ipaclient/plugins/otptoken.py:66 -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -#: ipaclient/plugins/otptoken.py:82 -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -#: ipaclient/plugins/otptoken.py:136 -msgid "Synchronize an OTP token." -msgstr "" - -#: ipaclient/plugins/otptoken.py:141 -msgid "User ID" -msgstr "" - -#: ipaclient/plugins/otptoken.py:142 ipaclient/remote_plugins/2_114/host.py:187 -#: ipaserver/plugins/baseuser.py:289 ipaserver/plugins/internal.py:190 -#: ipaserver/plugins/internal.py:409 ipaserver/plugins/internal.py:1725 -#: ipaserver/plugins/migration.py:534 -msgid "Password" -msgstr "" - -#: ipaclient/plugins/otptoken.py:143 -msgid "First Code" -msgstr "" - -#: ipaclient/plugins/otptoken.py:144 -msgid "Second Code" -msgstr "" - -#: ipaclient/plugins/otptoken.py:148 ipaserver/plugins/internal.py:1735 -msgid "Token ID" -msgstr "" - -#: ipaclient/plugins/otptoken_yubikey.py:35 -msgid "python-yubico is not installed." -msgstr "" - -#: ipaclient/plugins/otptoken_yubikey.py:40 -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -#: ipaclient/plugins/otptoken_yubikey.py:42 -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -#: ipaclient/plugins/otptoken_yubikey.py:44 -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -#: ipaclient/plugins/otptoken_yubikey.py:47 ipaserver/plugins/dnsserver.py:39 -#: ipaserver/plugins/location.py:37 ipaserver/plugins/otptoken.py:49 -#: ipaserver/plugins/radiusproxy.py:43 ipaserver/plugins/serverrole.py:19 -#: ipaserver/plugins/server.py:40 ipaserver/plugins/automember.py:63 -#: ipaserver/plugins/permission.py:97 ipaserver/plugins/schema.py:28 -#: ipaserver/plugins/vault.py:88 ipaserver/plugins/certmap.py:60 -#: ipaserver/plugins/host.py:104 ipaserver/plugins/idp.py:31 -#: ipaserver/plugins/ca.py:36 ipaserver/plugins/cert.py:99 -#: ipaserver/plugins/sudorule.py:76 -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -#: ipaclient/plugins/otptoken_yubikey.py:49 -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -#: ipaclient/plugins/otptoken_yubikey.py:72 msgid "Add a new YubiKey OTP token." msgstr "신규 Yubikey OTP 토큰 추가." -#: ipaclient/plugins/otptoken_yubikey.py:77 -msgid "YubiKey slot" -msgstr "" +msgid "Add a new self-service permission." +msgstr "신규 셀프-서비스 권한을 추가합니다." -#: ipaclient/plugins/otptoken_yubikey.py:146 -msgid "No free YubiKey slot!" -msgstr "" +msgid "Add members to a hostgroup." +msgstr "구성원을 호스트그룹에 추가." -#: ipaclient/plugins/vault.py:68 ipaclient/plugins/vault.py:874 #, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "" +msgid "Added automount location \"%(value)s\"" +msgstr "추가된 자동적재 위치 \"%(value)s\"" -#: ipaclient/plugins/vault.py:75 -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "" - -#: ipaclient/plugins/vault.py:145 ipaclient/plugins/vault.py:164 -#: ipaserver/plugins/passwd.py:149 -msgid "Invalid credentials" -msgstr "" - -#: ipaclient/plugins/vault.py:182 -msgid "Create a new vault." -msgstr "" - -#: ipaclient/plugins/vault.py:188 ipaclient/plugins/vault.py:769 -#: ipaclient/plugins/vault.py:1011 -msgid "Vault password" -msgstr "" - -#: ipaclient/plugins/vault.py:193 ipaclient/plugins/vault.py:774 -#: ipaclient/plugins/vault.py:1016 -msgid "File containing the vault password" -msgstr "" - -#: ipaclient/plugins/vault.py:198 -msgid "File containing the vault public key" -msgstr "" - -#: ipaclient/plugins/vault.py:258 -msgid "Password can be specified only for symmetric vault" -msgstr "" - -#: ipaclient/plugins/vault.py:264 -msgid "Public key can be specified only for asymmetric vault" -msgstr "" - -#: ipaclient/plugins/vault.py:284 ipaclient/plugins/vault.py:907 -#: ipaclient/plugins/vault.py:1153 -msgid "Password specified multiple times" -msgstr "" - -#: ipaclient/plugins/vault.py:307 -msgid "Public key specified multiple times" -msgstr "" - -#: ipaclient/plugins/vault.py:323 -msgid "Missing vault public key" -msgstr "" - -#: ipaclient/plugins/vault.py:335 -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "" - -#: ipaclient/plugins/vault.py:369 ipaserver/plugins/vault.py:933 -msgid "Modify a vault." -msgstr "" - -#: ipaclient/plugins/vault.py:374 ipaserver/plugins/internal.py:1742 -msgid "Change password" -msgstr "" - -#: ipaclient/plugins/vault.py:379 -msgid "Old vault password" -msgstr "" - -#: ipaclient/plugins/vault.py:384 -msgid "File containing the old vault password" -msgstr "" - -#: ipaclient/plugins/vault.py:389 -msgid "New vault password" -msgstr "신규 저장소 비밀번호" - -#: ipaclient/plugins/vault.py:394 -msgid "File containing the new vault password" -msgstr "" - -#: ipaclient/plugins/vault.py:399 -msgid "Old vault private key" -msgstr "" - -#: ipaclient/plugins/vault.py:404 -msgid "File containing the old vault private key" -msgstr "" - -#: ipaclient/plugins/vault.py:409 -msgid "File containing the new vault public key" -msgstr "" - -#: ipaclient/plugins/vault.py:515 -msgid "New public key specified multiple times" -msgstr "" - -#: ipaclient/plugins/vault.py:528 -msgid "Missing new vault public key" -msgstr "" - -#: ipaclient/plugins/vault.py:660 ipaserver/plugins/vault.py:659 -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -#: ipaclient/plugins/vault.py:755 ipaserver/plugins/vault.py:1033 -msgid "Archive data into a vault." -msgstr "" - -#: ipaclient/plugins/vault.py:760 -msgid "Binary data to archive" -msgstr "" - -#: ipaclient/plugins/vault.py:764 -msgid "File containing data to archive" -msgstr "" - -#: ipaclient/plugins/vault.py:778 -msgid "Override existing password" -msgstr "" - -#: ipaclient/plugins/vault.py:860 -msgid "Input data specified multiple times" -msgstr "" - -#: ipaclient/plugins/vault.py:865 ipaclient/plugins/vault.py:878 -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" - -#: ipaclient/plugins/vault.py:961 ipaclient/plugins/vault.py:1203 -msgid "Invalid vault type" -msgstr "" - -#: ipaclient/plugins/vault.py:1001 -msgid "Retrieve a data from a vault." -msgstr "" - -#: ipaclient/plugins/vault.py:1006 -msgid "File to store retrieved data" -msgstr "" - -#: ipaclient/plugins/vault.py:1021 -msgid "Vault private key" -msgstr "" - -#: ipaclient/plugins/vault.py:1026 -msgid "File containing the vault private key" -msgstr "" - -#: ipaclient/plugins/vault.py:1033 ipaserver/plugins/internal.py:758 -msgid "Data" -msgstr "자료" - -#: ipaclient/plugins/vault.py:1179 -msgid "Private key specified multiple times" -msgstr "" - -#: ipaclient/plugins/vault.py:1192 -msgid "Missing vault private key" -msgstr "" - -#: ipaclient/plugins/sudorule.py:30 -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#: ipaclient/plugins/sudorule.py:36 -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#: ipaclient/plugins/sudorule.py:44 -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#: ipaclient/plugins/sudorule.py:57 -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "ACI name" -msgstr "" - -#: ipaserver/plugins/permission.py:231 -msgid "Permission" -msgstr "" - -msgid "Permission ACI grants access to" -msgstr "" - -#: ipaserver/plugins/delegation.py:97 ipaserver/plugins/aci.py:457 -msgid "User group" -msgstr "" - -#: ipaserver/plugins/delegation.py:98 ipaserver/plugins/aci.py:458 -msgid "User group ACI grants access to" -msgstr "" - -#: ipaserver/plugins/delegation.py:81 ipaserver/plugins/selfservice.py:84 -#: ipaserver/plugins/aci.py:463 ipaserver/plugins/baseldap.py:74 -#: ipaserver/plugins/permission.py:230 -msgid "Permissions" -msgstr "" - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Attributes to which the permission applies" -msgstr "" - -#: ipaserver/plugins/delegation.py:86 ipaserver/plugins/selfservice.py:89 -#: ipaserver/plugins/aci.py:472 -msgid "Attributes" -msgstr "" - -#: ipaserver/plugins/otptoken.py:165 ipaserver/plugins/aci.py:477 -#: ipaserver/plugins/permission.py:346 ipaserver/plugins/schema.py:448 -#: ipaserver/plugins/vault.py:598 -msgid "Type" -msgstr "" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" - -msgid "Member of" -msgstr "" - -msgid "Member of a group" -msgstr "" - -#: ipaserver/plugins/internal.py:217 ipaserver/plugins/internal.py:1225 -#: ipaserver/plugins/internal.py:1754 -msgid "Filter" -msgstr "" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "" - -#: ipaserver/plugins/permission.py:289 -msgid "Subtree" -msgstr "" - -msgid "Subtree to apply ACI to" -msgstr "" - -#: ipaserver/plugins/permission.py:340 -msgid "Target group" -msgstr "" - -msgid "Group to apply ACI to" -msgstr "" - -msgid "Target your own entry (self)" -msgstr "" - -msgid "Apply ACI to your own entry (self)" -msgstr "" - -msgid "Create new ACI." -msgstr "" - -msgid "ACI prefix" -msgstr "" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" - -msgid "Test the ACI syntax but don't write anything" -msgstr "" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" - -msgid "User-friendly description of action performed" -msgstr "수행된 동작에 대한 사용자 친화적인 설명" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" - -msgid "Delete ACI." -msgstr "" - -#: ipalib/output.py:218 ipaserver/plugins/dns.py:354 -msgid "True means the operation was successful" -msgstr "" - -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" - -msgid "A string searched in all relevant object attributes" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1960 ipaserver/plugins/schema.py:121 -#: ipaserver/plugins/cert.py:1564 -msgid "Primary key only" -msgstr "" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" - -msgid "Number of entries returned" -msgstr "" - -msgid "True if not all results were returned" -msgstr "" - -msgid "Modify ACI." -msgstr "" - -msgid "Rename an ACI." -msgstr "" - -msgid "New ACI name" -msgstr "" - -msgid "Display a single ACI given an ACI name." -msgstr "" - -msgid "Location of the ACI" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -#: ipaserver/plugins/automount.py:364 ipaserver/plugins/group.py:342 -#: ipaserver/plugins/hbacsvc.py:108 ipaserver/plugins/hbacsvcgroup.py:120 -#: ipaserver/plugins/hostgroup.py:193 ipaserver/plugins/location.py:111 -#: ipaserver/plugins/netgroup.py:210 ipaserver/plugins/otptoken.py:174 -#: ipaserver/plugins/radiusproxy.py:117 ipaserver/plugins/role.py:153 -#: ipaserver/plugins/subid.py:143 ipaserver/plugins/sudocmd.py:128 -#: ipaserver/plugins/sudocmdgroup.py:130 ipaserver/plugins/automember.py:257 -#: ipaserver/plugins/privilege.py:159 ipaserver/plugins/vault.py:592 -#: ipaserver/plugins/caacl.py:175 ipaserver/plugins/certmap.py:279 -#: ipaserver/plugins/hbacrule.py:253 ipaserver/plugins/host.py:473 -#: ipaserver/plugins/selinuxusermap.py:265 ipaserver/plugins/idviews.py:142 -#: ipaserver/plugins/idviews.py:776 ipaserver/plugins/ca.py:91 -#: ipaserver/plugins/sudorule.py:247 -msgid "Description" -msgstr "" - -#: ipaserver/plugins/automember.py:258 -msgid "A description of this auto member rule" -msgstr "" - -#: ipaserver/plugins/automember.py:262 ipaserver/plugins/automember.py:585 -msgid "Default (fallback) Group" -msgstr "" - -#: ipaserver/plugins/automember.py:263 -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -#: ipaserver/plugins/automember.py:249 ipaserver/plugins/automember.py:250 -msgid "Automember Rule" -msgstr "" - -#: ipaserver/plugins/baseldap.py:977 -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -#: ipaserver/plugins/baseldap.py:983 -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - -#: ipaserver/plugins/automember.py:184 -msgid "Grouping Type" -msgstr "" - -#: ipaserver/plugins/automember.py:185 -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -#: ipaserver/plugins/automember.py:160 ipaserver/plugins/automember.py:161 -msgid "Inclusive Regex" -msgstr "" - -#: ipaserver/plugins/automember.py:167 ipaserver/plugins/automember.py:168 -msgid "Exclusive Regex" -msgstr "" - -#: ipaserver/plugins/automember.py:176 -msgid "Attribute Key" -msgstr "" - -#: ipaserver/plugins/automember.py:177 -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -#: ipaserver/plugins/automember.py:357 -msgid "Conditions that could not be added" -msgstr "" - -#: ipaserver/plugins/automember.py:361 -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -#: ipaserver/plugins/automember.py:586 -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -#: ipalib/output.py:204 -msgid "List of deletions that failed" -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -#: ipaserver/plugins/baseldap.py:989 -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -#: ipaserver/plugins/baseldap.py:1402 ipaserver/plugins/baseldap.py:1477 -msgid "Rights" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1403 ipaserver/plugins/baseldap.py:1478 -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - -#: ipaserver/plugins/automember.py:683 -msgid "Rebuild auto membership." -msgstr "" - -#: ipaserver/plugins/automember.py:693 -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -#: ipaserver/plugins/automember.py:697 ipaserver/plugins/baseuser.py:208 -#: ipaserver/plugins/caacl.py:220 ipaserver/plugins/hbacrule.py:260 -#: ipaserver/plugins/internal.py:1200 ipaserver/plugins/selinuxusermap.py:272 -#: ipaserver/plugins/sudorule.py:291 ipaserver/plugins/user.py:162 -msgid "Users" -msgstr "" - -#: ipaserver/plugins/automember.py:698 -msgid "Rebuild membership for specified users" -msgstr "" - -#: ipaserver/plugins/automember.py:702 ipaserver/plugins/caacl.py:228 -#: ipaserver/plugins/hbacrule.py:268 ipaserver/plugins/host.py:461 -#: ipaserver/plugins/internal.py:1174 ipaserver/plugins/selinuxusermap.py:280 -#: ipaserver/plugins/sudorule.py:304 -msgid "Hosts" -msgstr "" - -#: ipaserver/plugins/automember.py:703 -msgid "Rebuild membership for specified hosts" -msgstr "" - -#: ipaserver/plugins/automember.py:708 -msgid "No wait" -msgstr "" - -#: ipaserver/plugins/automember.py:709 -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -#: ipaserver/plugins/automember.py:441 -msgid "Conditions that could not be removed" -msgstr "" - -#: ipaserver/plugins/automember.py:445 -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -#: ipaserver/plugins/automount.py:41 -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" - -#: ipaserver/plugins/automount.py:465 ipaserver/plugins/automount.py:712 -#: ipaserver/plugins/automount.py:819 ipaserver/plugins/otptoken.py:219 -msgid "Key" -msgstr "" - -#: ipaserver/plugins/automount.py:466 ipaserver/plugins/automount.py:713 -#: ipaserver/plugins/automount.py:820 -msgid "Automount key name." -msgstr "" - -#: ipaserver/plugins/automount.py:471 ipaserver/plugins/automount.py:717 -#: ipaserver/plugins/automount.py:824 -msgid "Mount information" -msgstr "" - -#: ipaserver/plugins/automount.py:474 -msgid "description" -msgstr "" - -#: ipaserver/plugins/server.py:132 ipaserver/plugins/host.py:483 -msgid "Location" -msgstr "" - -#: ipaserver/plugins/automount.py:253 -msgid "Automount location name." -msgstr "" - -#: ipaserver/plugins/automount.py:358 -msgid "Map" -msgstr "" - -#: ipaserver/plugins/automount.py:359 -msgid "Automount map name." -msgstr "" - -#: ipaserver/plugins/automount.py:623 -msgid "Create a new automount key." -msgstr "" - -#: ipaserver/plugins/automount.py:705 -msgid "Delete an automount key." -msgstr "" - -#: ipaserver/plugins/baseldap.py:1381 -msgid "Continuous mode: Don't stop on errors." -msgstr "" - -#: ipaserver/plugins/automount.py:804 -msgid "Search for an automount key." -msgstr "" - -#: ipaserver/plugins/serverrole.py:123 ipaserver/plugins/baseldap.py:1979 -#: ipaserver/plugins/cert.py:1569 -msgid "Time Limit" -msgstr "" - -msgid "Time limit of search in seconds" -msgstr "" - -#: ipaserver/plugins/serverrole.py:131 ipaserver/plugins/baseldap.py:1986 -#: ipaserver/plugins/hbactest.py:304 ipaserver/plugins/cert.py:1574 -msgid "Size Limit" -msgstr "" - -msgid "Maximum number of entries returned" -msgstr "" - -#: ipaserver/plugins/automount.py:746 -msgid "Modify an automount key." -msgstr "자동 적재된 키를 수정합니다." - -#: ipaserver/plugins/automount.py:755 -msgid "New mount information" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1487 -msgid "Rename" -msgstr "" - -msgid "Rename the automount key object" -msgstr "" - -#: ipaserver/plugins/automount.py:814 -msgid "Display an automount key." -msgstr "" - -#: ipaserver/plugins/automount.py:261 -msgid "Create a new automount location." -msgstr "" - -#: ipaserver/plugins/automount.py:281 -msgid "Delete an automount location." -msgstr "" - -#: ipaserver/plugins/automount.py:293 -msgid "Search for an automount location." -msgstr "" - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" - -#: ipaserver/plugins/automount.py:288 -msgid "Display an automount location." -msgstr "" - -#: ipaserver/plugins/automount.py:303 -msgid "Generate automount files for a specific location." -msgstr "" - -#: ipaserver/plugins/automount.py:399 -msgid "Create a new automount map." -msgstr "" - -#: ipaserver/plugins/automount.py:652 -msgid "Create a new indirect mount point." -msgstr "" - -#: ipaserver/plugins/automount.py:659 -msgid "Mount point" -msgstr "" - -#: ipaserver/plugins/automount.py:663 -msgid "Parent map" -msgstr "" - -#: ipaserver/plugins/automount.py:664 -msgid "Name of parent automount map (default: auto.master)." -msgstr "" - -#: ipaserver/plugins/automount.py:406 -msgid "Delete an automount map." -msgstr "" - -#: ipaserver/plugins/automount.py:433 -msgid "Search for an automount map." -msgstr "" - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" - -#: ipaserver/plugins/automount.py:426 -msgid "Modify an automount map." -msgstr "" - -#: ipaserver/plugins/automount.py:443 -msgid "Display an automount map." -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\"," -"\"all\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" - -msgid "Nested Methods to execute" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "주제에서 cn 속성을 일치합니다" - -msgid "Reason" -msgstr "" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -msgid "minimum serial number" -msgstr "" - -msgid "maximum serial number" -msgstr "" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Principal" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Dictionary mapping variable name to value" -msgstr "" - -msgid "Revoke a certificate." -msgstr "" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "Maximum username length" -msgstr "" - -msgid "Home directory base" -msgstr "" - -msgid "Default location of home directories" -msgstr "" - -msgid "Default shell" -msgstr "" - -msgid "Default shell for new users" -msgstr "" - -msgid "Default users group" -msgstr "" - -msgid "Default group for new users" -msgstr "" - -#: ipaserver/plugins/config.py:193 -msgid "Default e-mail domain" -msgstr "" - -msgid "Search time limit" -msgstr "" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" - -msgid "Search size limit" -msgstr "" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "" - -msgid "User search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" - -msgid "Group search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" - -#: ipaserver/plugins/config.py:220 -msgid "Enable migration mode" -msgstr "" - -msgid "Certificate Subject base" -msgstr "" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "" - -msgid "Default group objectclasses" -msgstr "" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "" - -msgid "Default user objectclasses" -msgstr "" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" - -msgid "Password Expiration Notification (days)" -msgstr "" - -msgid "Number of days's notice of impending password expiration" -msgstr "" - -msgid "Password plugin features" -msgstr "" - -msgid "Extra hashes to generate in password plug-in" -msgstr "비밀번호 플러그-인에서 생성 할 추가 해쉬" - -msgid "SELinux user map order" -msgstr "" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" - -msgid "Default SELinux user" -msgstr "" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" - -msgid "Default PAC types" -msgstr "" - -msgid "Default types of PAC supported for services" -msgstr "" - -msgid "Default user authentication types" -msgstr "" - -msgid "Default types of supported user authentication" -msgstr "" - -msgid "Modify configuration options." -msgstr "" - -msgid "Show the current configuration." -msgstr "" - -#: ipaserver/plugins/delegation.py:29 -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -#: ipaserver/plugins/delegation.py:75 ipaserver/plugins/delegation.py:76 -#: ipaserver/plugins/servicedelegation.py:162 -msgid "Delegation name" -msgstr "" - -#: ipaserver/plugins/delegation.py:82 ipaserver/plugins/selfservice.py:85 -msgid "Permissions to grant (read, write). Default is write." -msgstr "" - -#: ipaserver/plugins/delegation.py:87 -msgid "Attributes to which the delegation applies" -msgstr "" - -#: ipaserver/plugins/delegation.py:92 -msgid "Member user group" -msgstr "" - -#: ipaserver/plugins/delegation.py:93 -msgid "User group to apply delegation to" -msgstr "" - -#: ipaserver/plugins/delegation.py:130 -msgid "Add a new delegation." -msgstr "" - -#: ipaserver/plugins/delegation.py:150 -msgid "Delete a delegation." -msgstr "" - -#: ipaserver/plugins/delegation.py:186 -msgid "Search for delegations." -msgstr "" - -#: ipaserver/plugins/delegation.py:168 -msgid "Modify a delegation." -msgstr "" - -#: ipaserver/plugins/delegation.py:211 -msgid "Display information about a delegation." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-" -"policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * " -"AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "Global forwarders" -msgstr "" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -#: ipaserver/plugins/dns.py:2049 ipaserver/plugins/dns.py:4124 -msgid "Forward policy" -msgstr "" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" - -#: ipaserver/plugins/dns.py:4131 -msgid "Allow PTR sync" -msgstr "" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" - -msgid "Zone refresh interval" -msgstr "" - -msgid "Zone name" -msgstr "" - -msgid "Zone name (FQDN)" -msgstr "" - -msgid "Reverse zone IP network" -msgstr "" - -msgid "IP network to create reverse zone name from" -msgstr "" - -msgid "Active zone" -msgstr "" - -msgid "Is zone active?" -msgstr "" - -msgid "Zone forwarders" -msgstr "" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -#: ipaserver/plugins/dns.py:3059 -msgid "Record name" -msgstr "" - -#: ipaserver/plugins/dns.py:3064 ipaserver/plugins/dns.py:3065 -msgid "Time to live" -msgstr "" - -msgid "Records" -msgstr "" - -msgid "Record type" -msgstr "" - -#: ipaserver/plugins/dns.py:1556 -msgid "Record data" -msgstr "" - -msgid "A record" -msgstr "" - -msgid "Raw A records" -msgstr "" - -msgid "A IP Address" -msgstr "" - -#: ipaserver/plugins/dns.py:983 ipaserver/plugins/host.py:682 -msgid "IP Address" -msgstr "" - -msgid "A Create reverse" -msgstr "" - -msgid "Create reverse record for this IP Address" -msgstr "" - -msgid "AAAA record" -msgstr "" - -msgid "Raw AAAA records" -msgstr "" - -msgid "AAAA IP Address" -msgstr "" - -msgid "AAAA Create reverse" -msgstr "" - -msgid "A6 record" -msgstr "" - -msgid "Raw A6 records" -msgstr "" - -msgid "A6 Record data" -msgstr "" - -msgid "AFSDB record" -msgstr "" - -msgid "Raw AFSDB records" -msgstr "" - -msgid "AFSDB Subtype" -msgstr "" - -msgid "Subtype" -msgstr "" - -msgid "AFSDB Hostname" -msgstr "" - -#: ipaserver/plugins/dns.py:1034 ipaserver/plugins/dns.py:1283 -#: ipaserver/plugins/dns.py:1346 -msgid "Hostname" -msgstr "" - -msgid "APL record" -msgstr "" - -msgid "Raw APL records" -msgstr "단순 APL 레코드" - -msgid "CERT record" -msgstr "" - -msgid "Raw CERT records" -msgstr "" - -msgid "CERT Certificate Type" -msgstr "" - -msgid "Certificate Type" -msgstr "" - -msgid "CERT Key Tag" -msgstr "" - -#: ipaserver/plugins/dns.py:1058 -msgid "Key Tag" -msgstr "" - -msgid "CERT Algorithm" -msgstr "" - -#: ipaserver/plugins/dns.py:1020 ipaserver/plugins/dns.py:1063 -#: ipaserver/plugins/dns.py:1412 -msgid "Algorithm" -msgstr "알고리즘" - -msgid "CERT Certificate/CRL" -msgstr "" - -msgid "Certificate/CRL" -msgstr "" - -msgid "CNAME record" -msgstr "" - -msgid "Raw CNAME records" -msgstr "" - -msgid "CNAME Hostname" -msgstr "CNAME 호스트이름" - -msgid "A hostname which this alias hostname points to" -msgstr "" - -msgid "DHCID record" -msgstr "" - -msgid "Raw DHCID records" -msgstr "" - -msgid "DLV record" -msgstr "" - -msgid "Raw DLV records" -msgstr "" - -msgid "DLV Key Tag" -msgstr "" - -msgid "DLV Algorithm" -msgstr "" - -msgid "DLV Digest Type" -msgstr "" - -msgid "Digest Type" -msgstr "" - -msgid "DLV Digest" -msgstr "" - -msgid "Digest" -msgstr "" - -msgid "DNAME record" -msgstr "" - -msgid "Raw DNAME records" -msgstr "" - -msgid "DNAME Target" -msgstr "" - -#: ipaserver/plugins/dns.py:1379 ipaserver/plugins/internal.py:1228 -msgid "Target" -msgstr "" - -msgid "DNSKEY record" -msgstr "" - -msgid "Raw DNSKEY records" -msgstr "" - -msgid "DS record" -msgstr "" - -msgid "Raw DS records" -msgstr "" - -msgid "DS Key Tag" -msgstr "" - -msgid "DS Algorithm" -msgstr "" - -msgid "DS Digest Type" -msgstr "" - -msgid "DS Digest" -msgstr "" - -msgid "HIP record" -msgstr "" - -msgid "Raw HIP records" -msgstr "" - -msgid "IPSECKEY record" -msgstr "" - -msgid "Raw IPSECKEY records" -msgstr "" - -msgid "KEY record" -msgstr "" - -msgid "Raw KEY records" -msgstr "" - -msgid "KX record" -msgstr "" - -msgid "Raw KX records" -msgstr "" - -msgid "KX Preference" -msgstr "" - -#: ipaserver/plugins/dns.py:1267 -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "이와 같은 교환기에 주어진 우선권. 낮은 값이 더 선호됩니다" - -msgid "KX Exchanger" -msgstr "" - -msgid "A host willing to act as a key exchanger" -msgstr "" - -msgid "LOC record" -msgstr "" - -msgid "Raw LOC records" -msgstr "" - -msgid "LOC Degrees Latitude" -msgstr "" - -msgid "Degrees Latitude" -msgstr "" - -msgid "LOC Minutes Latitude" -msgstr "" - -msgid "Minutes Latitude" -msgstr "" - -msgid "LOC Seconds Latitude" -msgstr "" - -msgid "Seconds Latitude" -msgstr "" - -msgid "LOC Direction Latitude" -msgstr "" - -msgid "Direction Latitude" -msgstr "" - -msgid "LOC Degrees Longitude" -msgstr "" - -msgid "Degrees Longitude" -msgstr "도 위도" - -msgid "LOC Minutes Longitude" -msgstr "LOC 분 위도" - -msgid "Minutes Longitude" -msgstr "" - -msgid "LOC Seconds Longitude" -msgstr "" - -msgid "Seconds Longitude" -msgstr "" - -msgid "LOC Direction Longitude" -msgstr "" - -msgid "Direction Longitude" -msgstr "" - -msgid "LOC Altitude" -msgstr "" - -msgid "Altitude" -msgstr "" - -msgid "LOC Size" -msgstr "" - -msgid "Size" -msgstr "" - -msgid "LOC Horizontal Precision" -msgstr "" - -msgid "Horizontal Precision" -msgstr "" - -msgid "LOC Vertical Precision" -msgstr "" - -msgid "Vertical Precision" -msgstr "" - -msgid "MX record" -msgstr "" - -msgid "Raw MX records" -msgstr "" - -msgid "MX Preference" -msgstr "" - -msgid "MX Exchanger" -msgstr "" - -msgid "A host willing to act as a mail exchanger" -msgstr "" - -msgid "NAPTR record" -msgstr "" - -msgid "Raw NAPTR records" -msgstr "" - -msgid "NAPTR Order" -msgstr "" - -msgid "Order" -msgstr "" - -msgid "NAPTR Preference" -msgstr "" - -#: ipaserver/plugins/dns.py:1266 ipaserver/plugins/dns.py:1314 -msgid "Preference" -msgstr "" - -msgid "NAPTR Flags" -msgstr "" - -msgid "Flags" -msgstr "" - -msgid "NAPTR Service" -msgstr "" - -#: ipaserver/plugins/hbactest.py:285 ipaserver/plugins/dns.py:1324 -#: ipaserver/plugins/internal.py:1343 ipaserver/plugins/internal.py:1687 -#: ipaserver/plugins/service.py:494 -msgid "Service" -msgstr "" - -msgid "NAPTR Regular Expression" -msgstr "" - -msgid "Regular Expression" -msgstr "" - -msgid "NAPTR Replacement" -msgstr "" - -msgid "Replacement" -msgstr "" - -msgid "NS record" -msgstr "" - -msgid "Raw NS records" -msgstr "" - -msgid "NS Hostname" -msgstr "" - -msgid "NSEC record" -msgstr "" - -msgid "Raw NSEC records" -msgstr "" - -msgid "NSEC3 record" -msgstr "" - -msgid "Raw NSEC3 records" -msgstr "" - -msgid "PTR record" -msgstr "" - -msgid "Raw PTR records" -msgstr "" - -msgid "PTR Hostname" -msgstr "" - -msgid "The hostname this reverse record points to" -msgstr "" - -msgid "RRSIG record" -msgstr "" - -msgid "Raw RRSIG records" -msgstr "" - -msgid "RP record" -msgstr "" - -msgid "Raw RP records" -msgstr "" - -msgid "SIG record" -msgstr "" - -msgid "Raw SIG records" -msgstr "" - -msgid "SPF record" -msgstr "" - -msgid "Raw SPF records" -msgstr "" - -msgid "SRV record" -msgstr "" - -msgid "Raw SRV records" -msgstr "" - -msgid "SRV Priority" -msgstr "" - -#: ipaserver/plugins/certmap.py:304 ipaserver/plugins/pwpolicy.py:345 -msgid "Priority" -msgstr "" - -msgid "SRV Weight" -msgstr "" - -#: ipaserver/plugins/dns.py:1498 -msgid "Weight" -msgstr "" - -msgid "SRV Port" -msgstr "" - -msgid "Port" -msgstr "" - -msgid "SRV Target" -msgstr "" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" - -msgid "SSHFP record" -msgstr "" - -msgid "Raw SSHFP records" -msgstr "" - -msgid "SSHFP Algorithm" -msgstr "" - -msgid "SSHFP Fingerprint Type" -msgstr "" - -msgid "Fingerprint Type" -msgstr "" - -msgid "SSHFP Fingerprint" -msgstr "" - -msgid "Fingerprint" -msgstr "" - -msgid "TA record" -msgstr "" - -msgid "Raw TA records" -msgstr "" - -msgid "TLSA record" -msgstr "" - -msgid "Raw TLSA records" -msgstr "" - -msgid "TLSA Certificate Usage" -msgstr "" - -msgid "Certificate Usage" -msgstr "" - -msgid "TLSA Selector" -msgstr "" - -msgid "Selector" -msgstr "" - -msgid "TLSA Matching Type" -msgstr "" - -msgid "Matching Type" -msgstr "" - -msgid "TLSA Certificate Association Data" -msgstr "" - -msgid "Certificate Association Data" -msgstr "" - -msgid "TKEY record" -msgstr "" - -msgid "Raw TKEY records" -msgstr "" - -msgid "TSIG record" -msgstr "" - -msgid "Raw TSIG records" -msgstr "" - -msgid "TXT record" -msgstr "" - -msgid "Raw TXT records" -msgstr "" - -msgid "TXT Text Data" -msgstr "" - -msgid "Text Data" -msgstr "" - -msgid "Authoritative nameserver" -msgstr "" - -msgid "Authoritative nameserver domain name" -msgstr "" - -#: ipaserver/plugins/dns.py:2429 msgid "Administrator e-mail address" msgstr "관리자 전자우편 주소" -msgid "SOA serial" -msgstr "" +msgid "Algorithm" +msgstr "알고리즘" -msgid "SOA record serial number" -msgstr "" +msgid "Asks for a non-random password to use for the principal" +msgstr "보안 주체에 사용 할 임의적이지 않은 비밀번호를 요청합니다" -msgid "SOA refresh" -msgstr "" - -msgid "SOA record refresh time" -msgstr "" - -msgid "SOA retry" -msgstr "" - -msgid "SOA record retry time" -msgstr "" - -msgid "SOA expire" -msgstr "" - -msgid "SOA record expire time" -msgstr "" - -msgid "SOA minimum" -msgstr "" - -msgid "How long should negative responses be cached" -msgstr "" - -msgid "Time to live for records at zone apex" -msgstr "" - -#: ipaserver/plugins/dns.py:2504 -msgid "BIND update policy" -msgstr "" - -msgid "Dynamic update" -msgstr "" - -msgid "Allow dynamic updates." -msgstr "" - -msgid "Allow query" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" - -msgid "Allow transfer" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" - -msgid "Allow in-line DNSSEC signing" -msgstr "" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "" - -msgid "NSEC3PARAM record" -msgstr "" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" - -msgid "Resolve a host name in DNS." -msgstr "" - -msgid "Modify global DNS configuration." -msgstr "" - -msgid "Show the current global DNS configuration." -msgstr "" - -msgid "Create new DNS forward zone." -msgstr "" - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" - -msgid "Permission value" -msgstr "" - -msgid "Delete DNS forward zone." -msgstr "" - -msgid "Disable DNS Forward Zone." -msgstr "" - -msgid "Enable DNS Forward Zone." -msgstr "" - -msgid "Search for DNS forward zones." -msgstr "" - -msgid "Modify DNS forward zone." -msgstr "" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" - -msgid "Display information about a DNS forward zone." -msgstr "" - -msgid "Add new DNS resource record." -msgstr "" - -#: ipaserver/plugins/realmdomains.py:151 ipaserver/plugins/permission.py:1061 -#: ipaserver/plugins/dns.py:2898 ipaserver/plugins/dns.py:3597 -#: ipaserver/plugins/host.py:674 ipaserver/plugins/service.py:655 -msgid "Force" -msgstr "" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "" - -msgid "Structured" -msgstr "" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" - -msgid "Delete DNS resource record." -msgstr "" - -msgid "Delete all associated records" -msgstr "" - -msgid "Delete DNS record entry." -msgstr "" - -msgid "Search for DNS resources." -msgstr "" - -msgid "Modify a DNS resource record." -msgstr "" - -msgid "Rename the DNS resource record object" -msgstr "" - -msgid "Display DNS resource." -msgstr "" - -msgid "Create new DNS zone (SOA record)." -msgstr "" - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" - -msgid "Add a permission for per-zone access delegation." -msgstr "" - -msgid "Delete DNS zone (SOA record)." -msgstr "" - -msgid "Disable DNS Zone." -msgstr "" - -msgid "Enable DNS Zone." -msgstr "" - -#: ipaserver/plugins/dns.py:2948 -msgid "Search for DNS zones (SOA records)." -msgstr "DNS 존을 위한 검사 (SOA 레코드)." - -msgid "Forward zones only" -msgstr "" - -msgid "Search for forward zones only" -msgstr "" - -msgid "Modify DNS zone (SOA record)." -msgstr "" - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" - -msgid "Remove a permission for per-zone access delegation." -msgstr "" - -msgid "Display information about a DNS zone (SOA record)." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#: ipaserver/plugins/idviews.py:1127 -msgid "Group name" -msgstr "" - -#: ipaserver/plugins/group.py:343 ipaserver/plugins/sudocmdgroup.py:131 -msgid "Group description" -msgstr "" - -#: ipaserver/plugins/baseuser.py:311 ipaserver/plugins/idviews.py:1037 -#: ipaserver/plugins/idviews.py:1132 -msgid "GID" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Member users" -msgstr "" - -msgid "Member groups" -msgstr "" - -msgid "Member of groups" -msgstr "" - -#: ipaserver/plugins/baseldap.py:80 -msgid "Roles" -msgstr "" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1227 ipaserver/plugins/cert.py:1341 -msgid "Suppress processing of membership attributes." -msgstr "" - -msgid "Add members to a group." -msgstr "" - -msgid "External member" -msgstr "" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -msgid "member group" -msgstr "" - -msgid "groups to add" -msgstr "" - -#: ipaserver/plugins/role.py:255 ipaserver/plugins/baseldap.py:1770 -#: ipaserver/plugins/baseldap.py:2257 ipaserver/plugins/privilege.py:226 -#: ipaserver/plugins/privilege.py:257 -msgid "Members that could not be added" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1774 ipaserver/plugins/baseldap.py:2261 -msgid "Number of members added" -msgstr "" - -msgid "Delete group." -msgstr "" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -#: ipaserver/plugins/sudorule.py:442 ipaserver/plugins/user.py:164 -msgid "user" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -#: ipaserver/plugins/group.py:417 ipaserver/plugins/group.py:678 -#: ipaserver/plugins/user.py:152 -msgid "group" -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "netgroup" -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -#: ipaserver/plugins/serverrole.py:185 -msgid "role" -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "HBAC rule" -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "sudo rule" -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1868 ipaserver/plugins/baseldap.py:2356 -msgid "Members that could not be removed" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1872 ipaserver/plugins/baseldap.py:2360 -msgid "Number of members removed" -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -#: ipaserver/plugins/hbacrule.py:39 -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host " -"\"server\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:273 ipaserver/plugins/hbacrule.py:207 -#: ipaserver/plugins/selinuxusermap.py:239 ipaserver/plugins/sudorule.py:242 -msgid "Rule name" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:213 -msgid "Rule type" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:212 -msgid "Rule type (allow)" -msgstr "" - -#: ipaserver/plugins/netgroup.py:227 ipaserver/plugins/caacl.py:195 -#: ipaserver/plugins/hbacrule.py:223 ipaserver/plugins/selinuxusermap.py:253 -#: ipaserver/plugins/sudorule.py:255 -msgid "User category" -msgstr "" - -#: ipaserver/plugins/netgroup.py:228 ipaserver/plugins/hbacrule.py:224 -#: ipaserver/plugins/selinuxusermap.py:254 ipaserver/plugins/sudorule.py:256 -msgid "User category the rule applies to" -msgstr "" - -#: ipaserver/plugins/netgroup.py:233 ipaserver/plugins/caacl.py:201 -#: ipaserver/plugins/hbacrule.py:229 ipaserver/plugins/selinuxusermap.py:259 -#: ipaserver/plugins/sudorule.py:261 -msgid "Host category" -msgstr "" - -#: ipaserver/plugins/netgroup.py:234 ipaserver/plugins/hbacrule.py:230 -#: ipaserver/plugins/selinuxusermap.py:260 ipaserver/plugins/sudorule.py:262 -msgid "Host category the rule applies to" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:243 -msgid "Service category" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:244 -msgid "Service category the rule applies to" -msgstr "" - -#: ipaserver/plugins/certmap.py:310 ipaserver/plugins/hbacrule.py:256 -#: ipaserver/plugins/internal.py:1946 ipaserver/plugins/selinuxusermap.py:268 -#: ipaserver/plugins/sudorule.py:250 -msgid "Enabled" -msgstr "" - -#: ipaserver/plugins/caacl.py:224 ipaserver/plugins/hbacrule.py:264 -#: ipaserver/plugins/internal.py:879 ipaserver/plugins/internal.py:1199 -#: ipaserver/plugins/selinuxusermap.py:276 ipaserver/plugins/sudorule.py:295 -msgid "User Groups" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:178 ipaserver/plugins/caacl.py:232 -#: ipaserver/plugins/hbacrule.py:272 ipaserver/plugins/internal.py:1073 -#: ipaserver/plugins/internal.py:1173 ipaserver/plugins/selinuxusermap.py:284 -#: ipaserver/plugins/sudorule.py:308 -msgid "Host Groups" -msgstr "" - -#: ipaserver/plugins/internal.py:956 ipaserver/plugins/service.py:493 -msgid "Services" -msgstr "" - -msgid "Service Groups" -msgstr "" - -#: ipaserver/plugins/baseldap.py:333 -msgid "External host" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:300 -msgid "Create a new HBAC rule." -msgstr "" - -#: ipaserver/plugins/hbacrule.py:534 -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "member host" -msgstr "" - -msgid "hosts to add" -msgstr "" - -msgid "member host group" -msgstr "" - -msgid "host groups to add" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:591 -msgid "Add services to an HBAC rule." -msgstr "" - -msgid "member HBAC service" -msgstr "" - -msgid "HBAC services to add" -msgstr "" - -msgid "member HBAC service group" -msgstr "" - -msgid "HBAC service groups to add" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:503 -msgid "Add users and groups to an HBAC rule." -msgstr "" - -#: ipaserver/plugins/hbacrule.py:314 -msgid "Delete an HBAC rule." -msgstr "HBAC 규칙을 삭제합니다." - -#: ipaserver/plugins/hbacrule.py:411 -msgid "Disable an HBAC rule." -msgstr "" - -#: ipaserver/plugins/hbacrule.py:381 -msgid "Enable an HBAC rule." -msgstr "" - -#: ipaserver/plugins/hbacrule.py:365 -msgid "Search for HBAC rules." -msgstr "" - -#: ipaserver/plugins/hbacrule.py:331 -msgid "Modify an HBAC rule." -msgstr "" - -#: ipaserver/plugins/hbacrule.py:556 -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "hosts to remove" -msgstr "" - -msgid "host groups to remove" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:613 -msgid "Remove service and service groups from an HBAC rule." -msgstr "" - -msgid "HBAC services to remove" -msgstr "" - -msgid "HBAC service groups to remove" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:525 -msgid "Remove users and groups from an HBAC rule." -msgstr "" - -#: ipaserver/plugins/hbacrule.py:375 -msgid "Display the properties of an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:101 -msgid "Service name" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:102 -msgid "HBAC service" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:109 -msgid "HBAC service description" -msgstr "" - -msgid "Member of HBAC service groups" -msgstr "" - -msgid "Add a new HBAC service." -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:125 -msgid "Delete an existing HBAC service." -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:141 -msgid "Search for HBAC services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:133 -msgid "Modify an HBAC service." -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:151 -msgid "Display information about an HBAC service." -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:33 -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:114 -msgid "Service group name" -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:121 -msgid "HBAC service group description" -msgstr "" - -#: ipaserver/plugins/baseldap.py:107 -msgid "Member HBAC service" -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:129 -msgid "Add a new HBAC service group." -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:169 -msgid "Add members to an HBAC service group." -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:137 -msgid "Delete an HBAC service group." -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:153 -msgid "Search for an HBAC service group." -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:145 -msgid "Modify an HBAC service group." -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:175 -msgid "Remove members from an HBAC service group." -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:163 -msgid "Display information about an HBAC service group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -#: ipaserver/plugins/hbactest.py:256 -msgid "Simulate use of Host-based access controls" -msgstr "" - -#: ipaserver/plugins/hbactest.py:270 ipaserver/plugins/krbtpolicy.py:134 -msgid "User name" -msgstr "" - -#: ipaserver/plugins/hbactest.py:281 -msgid "Target host" -msgstr "" - -#: ipaserver/plugins/hbactest.py:289 -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -#: ipaserver/plugins/hbactest.py:293 -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -#: ipaserver/plugins/hbactest.py:297 -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -#: ipaserver/plugins/hbactest.py:301 -msgid "Include all disabled IPA rules into test" -msgstr "" - -#: ipaserver/plugins/hbactest.py:305 -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -#: ipaserver/plugins/hbactest.py:260 -msgid "Warning" -msgstr "" - -#: ipaserver/plugins/hbactest.py:261 -msgid "Matched rules" -msgstr "" - -#: ipaserver/plugins/hbactest.py:262 -msgid "Not matched rules" -msgstr "" - -#: ipaserver/plugins/hbactest.py:263 -msgid "Non-existent or invalid rules" -msgstr "" - -#: ipaserver/plugins/hbactest.py:264 -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#: ipaserver/plugins/service.py:725 -msgid "Host name" -msgstr "" - -msgid "A description of this host" -msgstr "" - -msgid "Locality" -msgstr "" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "" - -msgid "Platform" -msgstr "" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "" - -msgid "Operating system" -msgstr "운영 체제" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "" - -msgid "User password" -msgstr "" - -msgid "Password used in bulk enrollment" -msgstr "" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "" - -#: ipaserver/plugins/host.py:508 -msgid "Random password" -msgstr "" - -#: ipaserver/plugins/baseuser.py:420 ipaserver/plugins/baseuser.py:886 -#: ipaserver/plugins/certmap.py:605 ipaserver/plugins/host.py:513 -#: ipaserver/plugins/internal.py:639 ipaserver/plugins/internal.py:723 -#: ipaserver/plugins/service.py:519 ipaserver/plugins/idviews.py:1060 -#: ipaserver/plugins/ca.py:114 ipaserver/plugins/cert.py:353 -msgid "Certificate" -msgstr "" +msgid "Available" +msgstr "사용 가능한" msgid "Base-64 encoded server certificate" msgstr "Base-64로 인코딩된 서버 인증서" -#: ipaserver/plugins/host.py:555 ipaserver/plugins/service.py:501 -msgid "Principal name" -msgstr "" +msgid "CNAME Hostname" +msgstr "CNAME 호스트이름" -msgid "MAC address" -msgstr "" +#, c-format +msgid "Closing keytab failed\n" +msgstr "키탭을 닫는데 실패함\n" -msgid "Hardware MAC address(es) on this host" -msgstr "" - -#: ipaserver/plugins/host.py:576 ipaserver/plugins/idviews.py:1054 -msgid "SSH public key" -msgstr "" - -#: ipaserver/plugins/host.py:586 -msgid "Class" -msgstr "" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -#: ipaserver/plugins/internal.py:1131 -msgid "Assigned ID View" -msgstr "" - -#: ipaserver/plugins/service.py:168 -msgid "Requires pre-authentication" -msgstr "" - -#: ipaserver/plugins/service.py:169 -msgid "Pre-authentication is required for the service" -msgstr "" - -#: ipaserver/plugins/service.py:174 -msgid "Trusted for delegation" -msgstr "" - -#: ipaserver/plugins/service.py:175 -msgid "Client credentials may be delegated to the service" -msgstr "" - -#: ipaserver/plugins/baseldap.py:71 -msgid "Member of host-groups" -msgstr "" - -msgid "Indirect Member of host-group" -msgstr "" - -#: ipaserver/plugins/service.py:128 -msgid "Keytab" -msgstr "" - -msgid "Managed by" -msgstr "" - -msgid "Managing" -msgstr "" - -#: ipaserver/plugins/service.py:134 -msgid "Users allowed to retrieve keytab" -msgstr "" - -#: ipaserver/plugins/service.py:137 -msgid "Groups allowed to retrieve keytab" -msgstr "" - -#: ipaserver/plugins/service.py:140 -msgid "Hosts allowed to retrieve keytab" -msgstr "" - -#: ipaserver/plugins/service.py:143 -msgid "Host Groups allowed to retrieve keytab" -msgstr "" - -#: ipaserver/plugins/service.py:146 -msgid "Users allowed to create keytab" -msgstr "" - -#: ipaserver/plugins/service.py:149 -msgid "Groups allowed to create keytab" -msgstr "" - -#: ipaserver/plugins/service.py:152 -msgid "Hosts allowed to create keytab" -msgstr "키탭을 생성하는데 허용된 호스트" - -#: ipaserver/plugins/service.py:155 -msgid "Host Groups allowed to create keytab" -msgstr "" - -msgid "Add a new host." -msgstr "" - -msgid "force host name even if not in DNS" -msgstr "" - -msgid "skip reverse DNS detection" -msgstr "" - -msgid "Add the host to DNS with this IP address" -msgstr "" - -msgid "Add hosts that can manage this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" - -msgid "Delete a host." -msgstr "" - -msgid "Remove entries from DNS" -msgstr "" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" - -msgid "Search for hosts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:106 -msgid "host group" -msgstr "" - -msgid "Search for hosts with these member of host groups." -msgstr "" - -msgid "Search for hosts without these member of host groups." -msgstr "" - -msgid "Search for hosts with these member of netgroups." -msgstr "" - -msgid "Search for hosts without these member of netgroups." -msgstr "" - -msgid "Search for hosts with these member of roles." -msgstr "역할의 이들 구성원과 함께 호스트를 위한 검색." - -msgid "Search for hosts without these member of roles." -msgstr "" - -msgid "Search for hosts with these member of HBAC rules." -msgstr "" - -msgid "Search for hosts without these member of HBAC rules." -msgstr "" - -msgid "Search for hosts with these member of sudo rules." -msgstr "" - -msgid "Search for hosts without these member of sudo rules." -msgstr "" - -msgid "Search for hosts with these enrolled by users." -msgstr "" - -msgid "Search for hosts without these enrolled by users." -msgstr "" - -#: ipaserver/plugins/cert.py:1025 ipaserver/plugins/sudorule.py:447 -msgid "host" -msgstr "" - -msgid "Search for hosts with these managed by hosts." -msgstr "" - -msgid "Search for hosts without these managed by hosts." -msgstr "" - -msgid "Search for hosts with these managing hosts." -msgstr "" - -msgid "Search for hosts without these managing hosts." -msgstr "" - -msgid "Modify information about a host." -msgstr "" - -msgid "Kerberos principal name for this host" -msgstr "" - -msgid "Update DNS entries" -msgstr "" - -msgid "Remove hosts that can manage this host." -msgstr "" - -msgid "Display information about a host." -msgstr "" - -#: ipaserver/plugins/service.py:987 ipaserver/plugins/user.py:940 -msgid "file to store certificate in" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:186 -msgid "Host-group" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:187 -msgid "Name of host-group" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:194 -msgid "A description of this host-group" -msgstr "" - -msgid "Member hosts" -msgstr "" - -msgid "Member host-groups" -msgstr "" - -#: ipaserver/plugins/baseldap.py:137 -msgid "Indirect Member hosts" -msgstr "" - -#: ipaserver/plugins/baseldap.py:140 -msgid "Indirect Member host-groups" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:220 -msgid "Add a new hostgroup." -msgstr "" - -#: ipaserver/plugins/hostgroup.py:330 -msgid "Add members to a hostgroup." -msgstr "구성원을 호스트그룹에 추가." - -#: ipaserver/plugins/hostgroup.py:260 -msgid "Delete a hostgroup." -msgstr "" - -#: ipaserver/plugins/hostgroup.py:298 -msgid "Search for hostgroups." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" - -msgid "Search for host groups with these member hosts." -msgstr "" - -msgid "Search for host groups without these member hosts." -msgstr "" - -msgid "Search for host groups with these member host groups." -msgstr "" - -msgid "Search for host groups without these member host groups." -msgstr "" - -msgid "Search for host groups with these member of host groups." -msgstr "" - -msgid "Search for host groups without these member of host groups." -msgstr "" - -msgid "Search for host groups with these member of netgroups." -msgstr "" - -msgid "Search for host groups without these member of netgroups." -msgstr "" - -msgid "Search for host groups with these member of HBAC rules." -msgstr "" - -msgid "Search for host groups without these member of HBAC rules." -msgstr "" - -msgid "Search for host groups with these member of sudo rules." -msgstr "" - -msgid "Search for host groups without these member of sudo rules." -msgstr "" - -#: ipaserver/plugins/hostgroup.py:275 -msgid "Modify a hostgroup." -msgstr "" - -#: ipaserver/plugins/hostgroup.py:340 -msgid "Remove members from a hostgroup." -msgstr "" - -#: ipaserver/plugins/hostgroup.py:316 -msgid "Display information about a hostgroup." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#: ipaserver/plugins/idrange.py:219 -msgid "Range name" -msgstr "" - -#: ipaserver/plugins/idrange.py:224 -msgid "First Posix ID of the range" -msgstr "" - -#: ipaserver/plugins/idrange.py:230 -msgid "Number of IDs in the range" -msgstr "" - -#: ipaserver/plugins/idrange.py:236 -msgid "First RID of the corresponding RID range" -msgstr "" - -#: ipaserver/plugins/idrange.py:240 -msgid "First RID of the secondary RID range" -msgstr "" - -#: ipaserver/plugins/idrange.py:245 ipaserver/plugins/idrange.py:655 -msgid "Domain SID of the trusted domain" -msgstr "" - -#: ipaserver/plugins/idrange.py:250 ipaserver/plugins/idrange.py:663 -msgid "Name of the trusted domain" -msgstr "" - -#: ipaserver/plugins/idrange.py:253 ipaserver/plugins/trust.py:711 -#: ipaserver/plugins/internal.py:1257 -msgid "Range type" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -#: ipaserver/plugins/idrange.py:556 -msgid "Delete an ID range." -msgstr "" - -#: ipaserver/plugins/idrange.py:604 -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -#: ipaserver/plugins/idrange.py:627 -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -#: ipaserver/plugins/idviews.py:772 -msgid "Anchor to override" -msgstr "" - -#: ipaserver/plugins/idviews.py:1038 ipaserver/plugins/idviews.py:1133 -msgid "Group ID Number" -msgstr "" - -#: ipaserver/plugins/idviews.py:1024 -msgid "User login" -msgstr "" - -#: ipaserver/plugins/idviews.py:1029 -msgid "UID" -msgstr "" - -#: ipaserver/plugins/idviews.py:1030 -msgid "User ID Number" -msgstr "" - -#: ipaserver/plugins/baseuser.py:250 ipaserver/plugins/idviews.py:1034 -msgid "GECOS" -msgstr "" - -#: ipaserver/plugins/idviews.py:1043 -msgid "Home directory" -msgstr "" - -#: ipaserver/plugins/idviews.py:1047 -msgid "Login shell" -msgstr "" - -#: ipaserver/plugins/idviews.py:136 -msgid "ID View Name" -msgstr "" - -#: ipaserver/plugins/idviews.py:1288 -msgid "Add a new Group ID override." -msgstr "" - -#: ipaserver/plugins/idviews.py:1294 -msgid "Delete an Group ID override." -msgstr "" - -#: ipaserver/plugins/idviews.py:1306 -msgid "Search for an Group ID override." -msgstr "" - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" - -#: ipaserver/plugins/idviews.py:1300 -msgid "Modify an Group ID override." -msgstr "" - -msgid "Rename the Group ID override object" -msgstr "" - -#: ipaserver/plugins/idviews.py:1322 -msgid "Display information about an Group ID override." -msgstr "" - -#: ipaserver/plugins/idviews.py:1189 -msgid "Add a new User ID override." -msgstr "" - -#: ipaserver/plugins/idviews.py:1214 -msgid "Delete an User ID override." -msgstr "" - -#: ipaserver/plugins/idviews.py:1252 -msgid "Search for an User ID override." -msgstr "" - -#: ipaserver/plugins/idviews.py:1220 -msgid "Modify an User ID override." -msgstr "" - -msgid "Rename the User ID override object" -msgstr "" - -#: ipaserver/plugins/idviews.py:1276 -msgid "Display information about an User ID override." -msgstr "" - -#: ipaserver/plugins/idviews.py:196 -msgid "Add a new ID View." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" - -#: ipaserver/plugins/idviews.py:454 ipaserver/plugins/idviews.py:497 -#: ipaserver/plugins/sudorule.py:447 -msgid "hosts" -msgstr "" - -#: ipaserver/plugins/idviews.py:453 -msgid "Hosts to apply the ID View to" -msgstr "" - -#: ipaserver/plugins/idviews.py:461 ipaserver/plugins/idviews.py:504 -msgid "hostgroups" -msgstr "" - -#: ipaserver/plugins/idviews.py:458 -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" - -#: ipaserver/plugins/idviews.py:469 -msgid "Hosts that this ID View was applied to." -msgstr "" - -#: ipaserver/plugins/idviews.py:473 -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" - -#: ipaserver/plugins/idviews.py:478 -msgid "Number of hosts the ID View was applied to:" -msgstr "호스트 ID 보기의 수는 다음과 같이 적용됩니다:" - -#: ipaserver/plugins/idviews.py:213 -msgid "Delete an ID View." -msgstr "" - -#: ipaserver/plugins/idviews.py:242 -msgid "Search for an ID View." -msgstr "" - -#: ipaserver/plugins/idviews.py:226 -msgid "Modify an ID View." -msgstr "" - -msgid "Rename the ID View object" -msgstr "" - -#: ipaserver/plugins/idviews.py:249 -msgid "Display information about an ID View." -msgstr "" - -#: ipaserver/plugins/idviews.py:254 -msgid "Enumerate all the hosts the view applies to." -msgstr "" - -#: ipaserver/plugins/idviews.py:485 -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" - -#: ipaserver/plugins/idviews.py:496 -msgid "Hosts to clear (any) ID View from." -msgstr "" - -#: ipaserver/plugins/idviews.py:501 -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" - -#: ipaserver/plugins/idviews.py:512 -msgid "Hosts that ID View was cleared from." -msgstr "" - -#: ipaserver/plugins/idviews.py:516 -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" - -#: ipaserver/plugins/idviews.py:521 -msgid "Number of hosts that had a ID View was unset:" -msgstr "" - -#: ipaserver/plugins/internal.py:30 -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" - -#: ipaserver/plugins/internal.py:2018 -msgid "Dict of I18N messages" -msgstr "" - -#: ipaserver/plugins/internal.py:38 -msgid "Export plugin meta-data for the webUI." -msgstr "" - -#: ipaserver/plugins/internal.py:44 ipaserver/plugins/internal.py:53 -msgid "Name of object to export" -msgstr "" - -#: ipaserver/plugins/internal.py:47 ipaserver/plugins/internal.py:56 -msgid "Name of method to export" -msgstr "" - -#: ipaserver/plugins/internal.py:59 -msgid "Name of command to export" -msgstr "" - -#: ipaserver/plugins/internal.py:64 -msgid "Dict of JSON encoded IPA Objects" -msgstr "" - -#: ipaserver/plugins/internal.py:65 -msgid "Dict of JSON encoded IPA Methods" -msgstr "" - -#: ipaserver/plugins/internal.py:66 -msgid "Dict of JSON encoded IPA Commands" -msgstr "" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" - -msgid "Join an IPA domain" -msgstr "" - -msgid "The hostname to register as" -msgstr "" - -msgid "The IPA realm" -msgstr "" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:27 -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:135 -msgid "Manage ticket policy for specific user" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:140 -msgid "Max life" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:141 -msgid "Maximum ticket life (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:146 -msgid "Max renew" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:147 -msgid "Maximum renewable age (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:233 -msgid "Modify Kerberos ticket policy." -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:312 -msgid "Reset Kerberos ticket policy to the default values." -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:258 -msgid "Display the current Kerberos ticket policy." -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," -"cn=accounts' --group-container='cn=groups,cn=accounts' " -"ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' --user-ignore-" -"objectclass=radiusprofile --user-ignore-" -"attribute=radiusgroupname ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#: ipaserver/plugins/migration.py:482 -msgid "Migrate users and groups from DS to IPA." -msgstr "" - -#: ipaserver/plugins/migration.py:529 -msgid "LDAP URI" -msgstr "" - -#: ipaserver/plugins/migration.py:530 -msgid "LDAP URI of DS server to migrate from" -msgstr "" - -#: ipaserver/plugins/migration.py:536 -msgid "bind password" -msgstr "" - -#: ipaserver/plugins/migration.py:543 -msgid "Bind DN" -msgstr "" - -#: ipaserver/plugins/migration.py:549 -msgid "User container" -msgstr "" - -#: ipaserver/plugins/migration.py:550 -msgid "DN of container for users in DS relative to base DN" -msgstr "" - -#: ipaserver/plugins/migration.py:556 -msgid "Group container" -msgstr "" - -#: ipaserver/plugins/migration.py:557 -msgid "DN of container for groups in DS relative to base DN" -msgstr "" - -#: ipaserver/plugins/migration.py:563 -msgid "User object class" -msgstr "" - -#: ipaserver/plugins/migration.py:564 -msgid "Objectclasses used to search for user entries in DS" -msgstr "" - -#: ipaserver/plugins/migration.py:570 -msgid "Group object class" -msgstr "" - -#: ipaserver/plugins/migration.py:571 -msgid "Objectclasses used to search for group entries in DS" -msgstr "" - -#: ipaserver/plugins/migration.py:577 -msgid "Ignore user object class" -msgstr "" - -#: ipaserver/plugins/migration.py:578 -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "" - -#: ipaserver/plugins/migration.py:584 -msgid "Ignore user attribute" -msgstr "" - -#: ipaserver/plugins/migration.py:585 -msgid "Attributes to be ignored for user entries in DS" -msgstr "" - -#: ipaserver/plugins/migration.py:591 -msgid "Ignore group object class" -msgstr "" - -#: ipaserver/plugins/migration.py:592 -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "" - -#: ipaserver/plugins/migration.py:598 -msgid "Ignore group attribute" -msgstr "" - -#: ipaserver/plugins/migration.py:599 -msgid "Attributes to be ignored for group entries in DS" -msgstr "" - -#: ipaserver/plugins/migration.py:605 -msgid "Overwrite GID" -msgstr "" - -#: ipaserver/plugins/migration.py:606 -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" - -#: ipaserver/plugins/migration.py:611 -msgid "LDAP schema" -msgstr "" - -#: ipaserver/plugins/migration.py:612 -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" - -#: ipaserver/plugins/migration.py:618 -msgid "Continue" -msgstr "" - -#: ipaserver/plugins/migration.py:619 -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" - -#: ipaserver/plugins/migration.py:624 -msgid "Base DN" -msgstr "" - -#: ipaserver/plugins/migration.py:625 -msgid "Base DN on remote LDAP server" -msgstr "" - -#: ipaserver/plugins/migration.py:629 -msgid "Ignore compat plugin" -msgstr "" - -#: ipaserver/plugins/migration.py:630 -msgid "Allows migration despite the usage of compat plugin" -msgstr "" - -#: ipaserver/plugins/migration.py:635 -msgid "CA certificate" -msgstr "" - -#: ipaserver/plugins/migration.py:636 -msgid "Load CA certificate of LDAP server from FILE" -msgstr "" - -msgid "groups to exclude from migration" -msgstr "" - -msgid "users to exclude from migration" -msgstr "" - -#: ipaserver/plugins/migration.py:662 -msgid "Lists of objects migrated; categorized by type." -msgstr "" - -#: ipaserver/plugins/migration.py:666 -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" - -#: ipaserver/plugins/migration.py:670 -msgid "False if migration mode was disabled." -msgstr "" - -#: ipaserver/plugins/migration.py:674 -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" - -msgid "Show environment variables." -msgstr "" - -msgid "Forward to server instead of running locally" -msgstr "" - -#: ipalib/misc.py:103 -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Total number of variables env (>= count)" -msgstr "" - -msgid "Number of variables returned (<= total)" -msgstr "" - -msgid "Show all loaded plugins." -msgstr "" - -msgid "Dictionary mapping plugin names to bases" -msgstr "" - -msgid "Number of plugins loaded" -msgstr "" - -#: ipaserver/plugins/netgroup.py:46 -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -#: ipaserver/plugins/netgroup.py:204 -msgid "Netgroup name" -msgstr "" - -#: ipaserver/plugins/netgroup.py:211 -msgid "Netgroup description" -msgstr "" - -#: ipaserver/plugins/netgroup.py:217 -msgid "NIS domain name" -msgstr "" - -#: ipaserver/plugins/netgroup.py:222 -msgid "IPA unique ID" -msgstr "" - -#: ipaserver/plugins/baseldap.py:92 -msgid "Member netgroups" -msgstr "" - -#: ipaserver/plugins/baseldap.py:155 -msgid "Indirect Member netgroups" -msgstr "" - -msgid "Member User" -msgstr "" - -msgid "Member Group" -msgstr "" - -#: ipaserver/plugins/netgroup.py:88 -msgid "Member Host" -msgstr "" - -msgid "Member Hostgroup" -msgstr "" - -#: ipaserver/plugins/netgroup.py:263 -msgid "Add a new netgroup." -msgstr "" - -#: ipaserver/plugins/netgroup.py:378 -msgid "Add members to a netgroup." -msgstr "" - -msgid "member netgroup" -msgstr "" - -msgid "netgroups to add" -msgstr "추가하려는 넷그룹" - -#: ipaserver/plugins/netgroup.py:299 -msgid "Delete a netgroup." -msgstr "" - -#: ipaserver/plugins/netgroup.py:334 -msgid "Search for a netgroup." -msgstr "" - -#: ipaserver/plugins/netgroup.py:349 -msgid "search for managed groups" -msgstr "" - -msgid "Search for netgroups with these member netgroups." -msgstr "" - -msgid "Search for netgroups without these member netgroups." -msgstr "" - -msgid "Search for netgroups with these member users." -msgstr "" - -msgid "Search for netgroups without these member users." -msgstr "" - -msgid "Search for netgroups with these member groups." -msgstr "" - -msgid "Search for netgroups without these member groups." -msgstr "이들 구성원 그룹이 없이 넷그룹를 위한 검색." - -msgid "Search for netgroups with these member hosts." -msgstr "" - -msgid "Search for netgroups without these member hosts." -msgstr "" - -msgid "Search for netgroups with these member host groups." -msgstr "" - -msgid "Search for netgroups without these member host groups." -msgstr "" - -msgid "Search for netgroups with these member of netgroups." -msgstr "" - -msgid "Search for netgroups without these member of netgroups." -msgstr "" - -#: ipaserver/plugins/netgroup.py:307 -msgid "Modify a netgroup." -msgstr "" - -#: ipaserver/plugins/netgroup.py:400 -msgid "Remove members from a netgroup." -msgstr "" - -msgid "netgroups to remove" -msgstr "" - -#: ipaserver/plugins/netgroup.py:371 -msgid "Display information about a netgroup." -msgstr "" - -#: ipaserver/plugins/otpconfig.py:24 -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" - -#: ipaserver/plugins/otpconfig.py:86 -msgid "TOTP authentication Window" -msgstr "" - -#: ipaserver/plugins/otpconfig.py:87 -msgid "TOTP authentication time variance (seconds)" -msgstr "" - -#: ipaserver/plugins/otpconfig.py:92 -msgid "TOTP Synchronization Window" -msgstr "" - -#: ipaserver/plugins/otpconfig.py:93 -msgid "TOTP synchronization time variance (seconds)" -msgstr "" - -#: ipaserver/plugins/otpconfig.py:98 -msgid "HOTP Authentication Window" -msgstr "" - -#: ipaserver/plugins/otpconfig.py:99 -msgid "HOTP authentication skip-ahead" -msgstr "" - -#: ipaserver/plugins/otpconfig.py:104 -msgid "HOTP Synchronization Window" -msgstr "" - -#: ipaserver/plugins/otpconfig.py:105 -msgid "HOTP synchronization skip-ahead" -msgstr "" - -#: ipaserver/plugins/otpconfig.py:116 -msgid "Modify OTP configuration options." -msgstr "" - -#: ipaserver/plugins/otpconfig.py:121 -msgid "Show the current OTP configuration." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " -"Hat\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -#: ipaserver/plugins/otptoken.py:160 ipaserver/plugins/subid.py:136 -msgid "Unique ID" -msgstr "" - -#: ipaserver/plugins/otptoken.py:166 -msgid "Type of the token" -msgstr "" - -#: ipaserver/plugins/otptoken.py:175 -msgid "Token description (informational only)" -msgstr "" - -#: ipaserver/plugins/otptoken.py:179 ipaserver/plugins/subid.py:149 -#: ipaserver/plugins/subid.py:467 ipaserver/plugins/internal.py:1383 -msgid "Owner" -msgstr "소유자" - -#: ipaserver/plugins/otptoken.py:180 -msgid "Assigned user of the token (default: self)" -msgstr "" - -#: ipaserver/plugins/baseuser.py:353 -msgid "Manager" -msgstr "" - -#: ipaserver/plugins/otptoken.py:184 -msgid "Assigned manager of the token (default: self)" -msgstr "" - -#: ipaserver/plugins/otptoken.py:189 ipaserver/plugins/internal.py:1944 -msgid "Disabled" -msgstr "사용불가" - -#: ipaserver/plugins/otptoken.py:190 -msgid "Mark the token as disabled (default: false)" -msgstr "" - -#: ipaserver/plugins/otptoken.py:194 -msgid "Validity start" -msgstr "" - -#: ipaserver/plugins/otptoken.py:195 -msgid "First date/time the token can be used" -msgstr "" - -#: ipaserver/plugins/otptoken.py:199 -msgid "Validity end" -msgstr "" - -#: ipaserver/plugins/otptoken.py:200 -msgid "Last date/time the token can be used" -msgstr "" - -#: ipaserver/plugins/otptoken.py:204 -msgid "Vendor" -msgstr "" - -#: ipaserver/plugins/otptoken.py:205 -msgid "Token vendor name (informational only)" -msgstr "" - -#: ipaserver/plugins/otptoken.py:209 -msgid "Model" -msgstr "" - -#: ipaserver/plugins/otptoken.py:210 -msgid "Token model (informational only)" -msgstr "" - -#: ipaserver/plugins/otptoken.py:214 -msgid "Serial" -msgstr "" - -#: ipaserver/plugins/otptoken.py:215 -msgid "Token serial (informational only)" -msgstr "" - -#: ipaserver/plugins/otptoken.py:220 -msgid "Token secret (Base32; default: random)" -msgstr "" - -#: ipaserver/plugins/otptoken.py:230 -msgid "Token hash algorithm" -msgstr "" - -#: ipaserver/plugins/otptoken.py:238 -msgid "Digits" -msgstr "" - -#: ipaserver/plugins/otptoken.py:239 -msgid "Number of digits each token code will have" -msgstr "" - -#: ipaserver/plugins/otptoken.py:247 -msgid "Clock offset" -msgstr "" - -#: ipaserver/plugins/otptoken.py:248 -msgid "TOTP token / IPA server time difference" -msgstr "" - -#: ipaserver/plugins/otptoken.py:255 -msgid "Clock interval" -msgstr "" - -#: ipaserver/plugins/otptoken.py:256 -msgid "Length of TOTP token code validity" -msgstr "TOTP 토큰 코드 유효성의 길이" - -#: ipaserver/plugins/otptoken.py:264 -msgid "Counter" -msgstr "" - -#: ipaserver/plugins/otptoken.py:265 -msgid "Initial counter for the HOTP token" -msgstr "" - -#: ipaserver/plugins/otptoken.py:280 -msgid "Add a new OTP token." -msgstr "" - -#: ipaserver/plugins/otptoken.py:284 -msgid "(deprecated)" -msgstr "" - -#: ipaserver/plugins/otptoken.py:285 -msgid "Do not display QR code" -msgstr "" - -#: ipaserver/plugins/otptoken.py:463 -msgid "Add users that can manage this token." -msgstr "" - -#: ipaserver/plugins/otptoken.py:366 -msgid "Delete an OTP token." -msgstr "" - -#: ipaserver/plugins/otptoken.py:421 -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -#: ipaserver/plugins/otptoken.py:372 -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -#: ipaserver/plugins/otptoken.py:450 -msgid "Display information about an OTP token." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "Set a user's password." -msgstr "" - -#: ipaserver/plugins/internal.py:1709 -msgid "New Password" -msgstr "" - -#: ipaserver/plugins/internal.py:1703 -msgid "Current Password" -msgstr "" - -#: ipaserver/plugins/internal.py:188 ipaserver/plugins/internal.py:1711 -msgid "OTP" -msgstr "OTP" - -msgid "One Time Password" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -"\n" -"Managed permissions\n" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -#: ipaserver/plugins/permission.py:236 -msgid "Permission name" -msgstr "" - -#: ipaserver/plugins/permission.py:245 -msgid "Granted rights" -msgstr "" - -#: ipaserver/plugins/permission.py:246 -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" - -#: ipaserver/plugins/permission.py:253 -msgid "Effective attributes" -msgstr "" - -#: ipaserver/plugins/permission.py:254 -msgid "All attributes to which the permission applies" -msgstr "" - -#: ipaserver/plugins/permission.py:259 -msgid "Included attributes" -msgstr "" - -#: ipaserver/plugins/permission.py:260 -msgid "User-specified attributes to which the permission applies" -msgstr "" - -#: ipaserver/plugins/permission.py:265 -msgid "Excluded attributes" -msgstr "" - -#: ipaserver/plugins/permission.py:266 -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" - -#: ipaserver/plugins/permission.py:272 -msgid "Default attributes" -msgstr "" - -#: ipaserver/plugins/permission.py:273 -msgid "Attributes to which the permission applies by default" -msgstr "" - -#: ipaserver/plugins/permission.py:279 ipaserver/plugins/permission.py:280 -msgid "Bind rule type" -msgstr "" - -#: ipaserver/plugins/permission.py:290 -msgid "Subtree to apply permissions to" -msgstr "" - -#: ipaserver/plugins/permission.py:298 ipaserver/plugins/permission.py:299 -msgid "Extra target filter" -msgstr "" - -#: ipaserver/plugins/permission.py:305 -msgid "Raw target filter" -msgstr "" - -#: ipaserver/plugins/permission.py:306 -msgid "All target filters, including those implied by type and memberof" -msgstr "" - -#: ipaserver/plugins/permission.py:313 -msgid "Target DN" -msgstr "" - -#: ipaserver/plugins/permission.py:314 -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" - -#: ipaserver/plugins/permission.py:335 -msgid "Member of group" -msgstr "" - -#: ipaserver/plugins/permission.py:336 -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "" - -#: ipaserver/plugins/permission.py:341 -msgid "User group to apply permissions to (sets target)" -msgstr "" - -#: ipaserver/plugins/permission.py:347 -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "" - -msgid "Deprecated; use extratargetfilter" -msgstr "" - -msgid "Deprecated; use ipapermlocation" -msgstr "" - -msgid "Deprecated; use ipapermright" -msgstr "" - -msgid "Granted to Privilege" -msgstr "" - -#: ipaserver/plugins/baseldap.py:143 -msgid "Indirect Member of roles" -msgstr "" - -#: ipaserver/plugins/permission.py:987 -msgid "Add a new permission." -msgstr "" - -#: ipaserver/plugins/permission.py:1405 -msgid "Add members to a permission." -msgstr "" - -msgid "member privilege" -msgstr "" - -msgid "privileges to add" -msgstr "" - -#: ipaserver/plugins/permission.py:959 -msgid "Add a system permission without an ACI (internal command)" -msgstr "" - -#: ipaserver/plugins/permission.py:169 -msgid "Permission flags" -msgstr "" - -#: ipaserver/plugins/permission.py:1055 -msgid "Delete a permission." -msgstr "" - -#: ipaserver/plugins/permission.py:1063 -msgid "force delete of SYSTEM permissions" -msgstr "" - -#: ipaserver/plugins/permission.py:1262 -msgid "Search for permissions." -msgstr "" - -#: ipaserver/plugins/permission.py:1090 -msgid "Modify a permission." -msgstr "" - -msgid "Rename the permission object" -msgstr "" - -#: ipaserver/plugins/permission.py:1417 -msgid "Remove members from a permission." -msgstr "" - -msgid "privileges to remove" -msgstr "" - -#: ipaserver/plugins/permission.py:1395 -msgid "Display information about a permission." -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "Ping a remote server." -msgstr "" - -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "" - -#: ipaserver/plugins/privilege.py:37 -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" - -#: ipaserver/plugins/privilege.py:154 -msgid "Privilege name" -msgstr "" - -#: ipaserver/plugins/privilege.py:160 -msgid "Privilege description" -msgstr "" - -#: ipaserver/plugins/baseldap.py:89 -msgid "Granting privilege to roles" -msgstr "" - -#: ipaserver/plugins/privilege.py:167 -msgid "Add a new privilege." -msgstr "" - -#: ipaserver/plugins/privilege.py:202 -msgid "Add members to a privilege." -msgstr "" - -msgid "member role" -msgstr "" - -msgid "roles to add" -msgstr "" - -#: ipaserver/plugins/privilege.py:215 -msgid "Add permissions to a privilege." -msgstr "" - -#: ipaserver/plugins/permission.py:180 -msgid "permission" -msgstr "" - -#: ipaserver/plugins/permission.py:181 -msgid "permissions" -msgstr "" - -#: ipaserver/plugins/privilege.py:230 -msgid "Number of permissions added" -msgstr "" - -#: ipaserver/plugins/privilege.py:174 -msgid "Delete a privilege." -msgstr "" - -#: ipaserver/plugins/privilege.py:188 -msgid "Search for privileges." -msgstr "" - -#: ipaserver/plugins/privilege.py:181 -msgid "Modify a privilege." -msgstr "" - -msgid "Rename the privilege object" -msgstr "" - -#: ipaserver/plugins/privilege.py:209 -msgid "Remove members from a privilege" -msgstr "" - -msgid "roles to remove" -msgstr "" - -#: ipaserver/plugins/privilege.py:244 -msgid "Remove permissions from a privilege." -msgstr "" - -#: ipaserver/plugins/privilege.py:262 -msgid "Number of permissions removed" -msgstr "" - -#: ipaserver/plugins/privilege.py:197 -msgid "Display information about a privilege." -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1664 ipaserver/plugins/pwpolicy.py:307 -msgid "Group" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:308 -msgid "Manage password policy for specific group" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:313 -msgid "Max lifetime (days)" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:314 -msgid "Maximum password lifetime (in days)" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:320 -msgid "Min lifetime (hours)" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:321 -msgid "Minimum password lifetime (in hours)" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:326 -msgid "History size" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:327 -msgid "Password history size" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:332 -msgid "Character classes" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:333 -msgid "Minimum number of character classes" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:339 -msgid "Min length" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:340 -msgid "Minimum length of password" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:346 -msgid "Priority of the policy (higher number means lower priority" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:353 -msgid "Max failures" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:354 -msgid "Consecutive failures before lockout" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:360 -msgid "Failure reset interval" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:361 -msgid "Period after which failure count will be reset (seconds)" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:367 -msgid "Lockout duration" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:368 -msgid "Period for which lockout is enforced (seconds)" -msgstr "" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:528 -msgid "Add a new group password policy." -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:555 -msgid "Delete a group password policy." -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:667 -msgid "Search for group password policies." -msgstr "" - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:582 -msgid "Modify a group password policy." -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:635 -msgid "Display information about password policy." -msgstr "" - -#: ipaserver/plugins/baseuser.py:209 ipaserver/plugins/internal.py:1198 -#: ipaserver/plugins/internal.py:1310 ipaserver/plugins/internal.py:1698 -#: ipaserver/plugins/pwpolicy.py:639 ipaserver/plugins/user.py:163 -msgid "User" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:640 -msgid "Display effective policy for a specific user" -msgstr "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:112 -msgid "RADIUS proxy server name" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:118 -msgid "A description of this RADIUS proxy server" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:122 ipaserver/plugins/user.py:1177 -msgid "Server" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:123 -msgid "The hostname or IP (with or without port)" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:127 ipaserver/plugins/idp.py:151 -msgid "Secret" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:128 -msgid "The secret used to encrypt data" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:133 -msgid "Timeout" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:134 -msgid "The total timeout across all retries (in seconds)" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:139 -msgid "Retries" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:140 -msgid "The number of times to retry authentication" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:146 -msgid "User attribute" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:147 -msgid "The username attribute on the user object" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:171 -msgid "Add a new RADIUS proxy server." -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:176 -msgid "Delete a RADIUS proxy server." -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:186 -msgid "Search for RADIUS proxy servers." -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:181 -msgid "Modify a RADIUS proxy server." -msgstr "" - -msgid "Rename the RADIUS proxy server object" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:201 -msgid "Display information about a RADIUS proxy server." -msgstr "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:115 ipaserver/plugins/trust.py:1246 -#: ipaserver/plugins/certmap.py:566 ipaserver/plugins/internal.py:715 -#: ipaserver/plugins/internal.py:1545 -msgid "Domain" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:121 -msgid "Add domain" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:127 -msgid "Delete domain" -msgstr "" - -msgid "Modify realm domains." -msgstr "" - -#: ipaserver/plugins/realmdomains.py:152 -msgid "Force adding domain even if not in DNS" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:361 -msgid "Display the list of realm domains." -msgstr "" - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" - -#: ipaserver/plugins/serverrole.py:64 ipaserver/plugins/serverrole.py:191 -msgid "Role name" -msgstr "" - -msgid "A description of this role-group" -msgstr "" - -msgid "Privileges" -msgstr "" - -msgid "Member services" -msgstr "" - -msgid "Add a new role." -msgstr "" - -msgid "Add members to a role." -msgstr "" - -msgid "member service" -msgstr "" - -msgid "services to add" -msgstr "" - -msgid "Add privileges to a role." -msgstr "" - -msgid "privilege" -msgstr "" - -#: ipaserver/plugins/privilege.py:107 -msgid "privileges" -msgstr "" - -msgid "Number of privileges added" -msgstr "" - -msgid "Delete a role." -msgstr "" - -msgid "Search for roles." -msgstr "" - -msgid "Modify a role." -msgstr "" - -msgid "Rename the role object" -msgstr "" - -msgid "Remove members from a role." -msgstr "" - -msgid "services to remove" -msgstr "" - -msgid "Remove privileges from a role." -msgstr "" - -msgid "Number of privileges removed" -msgstr "" - -msgid "Display information about a role." -msgstr "" - -#: ipaserver/plugins/selfservice.py:28 -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -#: ipaserver/plugins/selfservice.py:76 ipaserver/plugins/selfservice.py:77 -msgid "Self-service name" -msgstr "" - -#: ipaserver/plugins/selfservice.py:90 -msgid "Attributes to which the permission applies." -msgstr "" - -#: ipaserver/plugins/selfservice.py:122 -msgid "Add a new self-service permission." -msgstr "신규 셀프-서비스 권한을 추가합니다." - -#: ipaserver/plugins/selfservice.py:143 -msgid "Delete a self-service permission." -msgstr "셀프-서비스 권한을 삭제합니다." - -#: ipaserver/plugins/selfservice.py:182 -msgid "Search for a self-service permission." -msgstr "" - -#: ipaserver/plugins/selfservice.py:161 -msgid "Modify a self-service permission." -msgstr "" - -#: ipaserver/plugins/selfservice.py:208 -msgid "Display information about a self-service permission." -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:42 -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:244 -msgid "SELinux User" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:202 ipaserver/plugins/selinuxusermap.py:248 -msgid "HBAC Rule" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:249 -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:328 -msgid "Create a new SELinux User Map." -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:590 -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:557 -msgid "Add users and groups to an SELinux User Map rule." -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:366 -msgid "Delete a SELinux User Map." -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:527 -msgid "Disable an SELinux User Map rule." -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:497 -msgid "Enable an SELinux User Map rule." -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:446 -msgid "Search for SELinux User Maps." -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:374 -msgid "Modify a SELinux User Map." -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:614 -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:581 -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:486 -msgid "Display the properties of a SELinux User Map rule." -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -#: ipaserver/plugins/service.py:502 -msgid "Service principal" -msgstr "" - -#: ipaserver/plugins/service.py:561 -msgid "PAC type" -msgstr "" - -#: ipaserver/plugins/service.py:562 -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" - -msgid "Add a new IPA new service." -msgstr "" - -msgid "force principal name even if not in DNS" -msgstr "" - -#: ipaserver/plugins/service.py:1019 -msgid "Add hosts that can manage this service." -msgstr "" - -#: ipaserver/plugins/service.py:1075 -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" - -#: ipaserver/plugins/service.py:1036 -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -#: ipaserver/plugins/service.py:845 -msgid "Delete an IPA service." -msgstr "" - -#: ipaserver/plugins/service.py:1114 -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "" - -#: ipaserver/plugins/service.py:1095 -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" - -#: ipaserver/plugins/service.py:1056 -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -#: ipaserver/plugins/service.py:915 -msgid "Search for IPA services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" - -msgid "Search for services with these managed by hosts." -msgstr "" - -msgid "Search for services without these managed by hosts." -msgstr "" - -#: ipaserver/plugins/service.py:865 -msgid "Modify an existing IPA service." -msgstr "" - -#: ipaserver/plugins/service.py:1028 -msgid "Remove hosts that can manage this service." -msgstr "" - -#: ipaserver/plugins/service.py:982 -msgid "Display information about an IPA service." -msgstr "" - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:118 ipaserver/plugins/sudocmd.py:123 -msgid "Sudo Command" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:129 -msgid "A description of this command" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:118 ipaserver/plugins/sudocmdgroup.py:138 -#: ipaserver/plugins/baseldap.py:83 -msgid "Sudo Command Groups" -msgstr "" - -msgid "Create new Sudo Command." -msgstr "" - -#: ipaserver/plugins/sudocmd.py:158 -msgid "Delete Sudo Command." -msgstr "" - -#: ipaserver/plugins/sudocmd.py:198 -msgid "Search for Sudo Commands." -msgstr "" - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:191 -msgid "Modify Sudo Command." -msgstr "" - -#: ipaserver/plugins/sudocmd.py:207 -msgid "Display Sudo Command." -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:119 ipaserver/plugins/sudocmdgroup.py:124 -msgid "Sudo Command Group" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:134 ipaserver/plugins/internal.py:1411 -msgid "Commands" -msgstr "" - -msgid "Member Sudo commands" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:147 -msgid "Create new Sudo Command Group." -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:188 -msgid "Add members to Sudo Command Group." -msgstr "" - -msgid "member sudo command" -msgstr "" - -msgid "sudo commands to add" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:155 -msgid "Delete Sudo Command Group." -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:171 -msgid "Search for Sudo Command Groups." -msgstr "" - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:163 -msgid "Modify Sudo Command Group." -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:194 -msgid "Remove members from Sudo Command Group." -msgstr "" - -msgid "sudo commands to remove" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:182 -msgid "Display Sudo Command Group." -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " -"Group\"\n" -msgstr "" - -#: ipaserver/plugins/trust.py:1586 ipaserver/plugins/internal.py:1548 -msgid "Domain NetBIOS name" -msgstr "" - -#: ipaserver/plugins/trust.py:1589 ipaserver/plugins/internal.py:1549 -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -#: ipaserver/plugins/certmap.py:298 -msgid "Domain name" -msgstr "" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -#: ipaserver/plugins/trust.py:1799 -msgid "Active Directory domain administrator" -msgstr "" - -#: ipaserver/plugins/trust.py:1803 -msgid "Active Directory domain administrator's password" -msgstr "" - -#: ipaserver/plugins/trust.py:1808 -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "전역 신뢰 구성을 수정합니다." - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "" - -msgid "Last name" -msgstr "" - -#: ipaserver/plugins/baseuser.py:231 -msgid "Full name" -msgstr "" - -msgid "Display name" -msgstr "" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "" - -#: ipaserver/plugins/baseuser.py:277 -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Email address" -msgstr "" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -msgid "Pager Number" -msgstr "" - -msgid "Fax Number" -msgstr "" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Car License" -msgstr "" - -msgid "Account disabled" -msgstr "" - -#: ipaserver/plugins/baseuser.py:371 -msgid "User authentication types" -msgstr "" - -#: ipaserver/plugins/baseuser.py:372 -msgid "Types of supported user authentication" -msgstr "" - -#: ipaserver/plugins/baseuser.py:379 -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -#: ipaserver/plugins/baseuser.py:384 -msgid "RADIUS proxy configuration" -msgstr "" - -#: ipaserver/plugins/baseuser.py:388 -msgid "RADIUS proxy username" -msgstr "" - -#: ipaserver/plugins/baseuser.py:400 -msgid "Department Number" -msgstr "" - -#: ipaserver/plugins/baseuser.py:403 -msgid "Employee Number" -msgstr "" - -#: ipaserver/plugins/baseuser.py:406 -msgid "Employee Type" -msgstr "" - -#: ipaserver/plugins/baseuser.py:409 -msgid "Preferred Language" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -msgid "Delete a user." -msgstr "" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:267 -msgid "Command category" -msgstr "" - -#: ipaserver/plugins/sudorule.py:268 -msgid "Command category the rule applies to" -msgstr "" - -#: ipaserver/plugins/sudorule.py:273 -msgid "RunAs User category" -msgstr "" - -#: ipaserver/plugins/sudorule.py:274 -msgid "RunAs User category the rule applies to" -msgstr "" - -#: ipaserver/plugins/sudorule.py:279 -msgid "RunAs Group category" -msgstr "" - -#: ipaserver/plugins/sudorule.py:280 -msgid "RunAs Group category the rule applies to" -msgstr "" - -#: ipaserver/plugins/sudorule.py:285 -msgid "Sudo order" -msgstr "" - -#: ipaserver/plugins/sudorule.py:286 -msgid "integer to order the Sudo rules" -msgstr "" - -#: ipaserver/plugins/sudorule.py:300 -msgid "External User" -msgstr "" - -#: ipaserver/plugins/sudorule.py:301 -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -#: ipaserver/plugins/sudorule.py:313 -msgid "Host Masks" -msgstr "" - -#: ipaserver/plugins/sudorule.py:319 -msgid "Sudo Allow Commands" -msgstr "" - -#: ipaserver/plugins/sudorule.py:323 -msgid "Sudo Deny Commands" -msgstr "" - -#: ipaserver/plugins/sudorule.py:327 -msgid "Sudo Allow Command Groups" -msgstr "" - -#: ipaserver/plugins/sudorule.py:331 -msgid "Sudo Deny Command Groups" -msgstr "" - -#: ipaserver/plugins/sudorule.py:335 -msgid "RunAs Users" -msgstr "" - -#: ipaserver/plugins/sudorule.py:336 -msgid "Run as a user" -msgstr "" - -#: ipaserver/plugins/sudorule.py:340 -msgid "Groups of RunAs Users" -msgstr "" - -#: ipaserver/plugins/sudorule.py:341 -msgid "Run as any user within a specified group" -msgstr "" - -#: ipaserver/plugins/sudorule.py:346 -msgid "RunAs External User" -msgstr "" - -#: ipaserver/plugins/sudorule.py:347 -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -#: ipaserver/plugins/sudorule.py:351 -msgid "External Groups of RunAs Users" -msgstr "" - -#: ipaserver/plugins/sudorule.py:352 -msgid "External Groups of users that the command can run as" -msgstr "" - -#: ipaserver/plugins/sudorule.py:356 -msgid "RunAs Groups" -msgstr "" - -#: ipaserver/plugins/sudorule.py:357 -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -#: ipaserver/plugins/sudorule.py:362 -msgid "RunAs External Group" -msgstr "" - -#: ipaserver/plugins/sudorule.py:363 -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -#: ipaserver/plugins/sudorule.py:366 ipaserver/plugins/sudorule.py:1003 -#: ipaserver/plugins/sudorule.py:1052 -msgid "Sudo Option" -msgstr "" - -#: ipaserver/plugins/sudorule.py:394 -msgid "Create new Sudo Rule." -msgstr "" - -#: ipaserver/plugins/sudorule.py:541 ipaserver/plugins/sudorule.py:572 -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "member sudo command group" -msgstr "" - -msgid "sudo command groups to add" -msgstr "" - -#: ipaserver/plugins/sudorule.py:691 -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "" - -#: ipaserver/plugins/sudorule.py:124 -msgid "host masks of allowed hosts" -msgstr "" - -#: ipaserver/plugins/sudorule.py:997 -msgid "Add an option to the Sudo Rule." -msgstr "" - -#: ipaserver/plugins/sudorule.py:919 -msgid "Add group for Sudo to execute as." -msgstr "" - -#: ipaserver/plugins/sudorule.py:795 -msgid "Add users and groups for Sudo to execute as." -msgstr "" - -#: ipaserver/plugins/sudorule.py:592 -msgid "Add users and groups affected by Sudo Rule." -msgstr "" - -#: ipaserver/plugins/sudorule.py:408 -msgid "Delete Sudo Rule." -msgstr "" - -#: ipaserver/plugins/sudorule.py:518 -msgid "Disable a Sudo Rule." -msgstr "" - -#: ipaserver/plugins/sudorule.py:495 -msgid "Enable a Sudo Rule." -msgstr "" - -#: ipaserver/plugins/sudorule.py:481 -msgid "Search for Sudo Rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -#: ipaserver/plugins/sudorule.py:415 -msgid "Modify Sudo Rule." -msgstr "" - -#: ipaserver/plugins/sudorule.py:564 ipaserver/plugins/sudorule.py:584 -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "sudo command groups to remove" -msgstr "" - -#: ipaserver/plugins/sudorule.py:749 -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "" - -#: ipaserver/plugins/sudorule.py:1046 -msgid "Remove an option from Sudo Rule." -msgstr "" - -#: ipaserver/plugins/sudorule.py:970 -msgid "Remove group for Sudo to execute as." -msgstr "" - -#: ipaserver/plugins/sudorule.py:874 -msgid "Remove users and groups for Sudo to execute as." -msgstr "" - -#: ipaserver/plugins/sudorule.py:647 -msgid "Remove users and groups affected by Sudo Rule." -msgstr "" - -#: ipaserver/plugins/sudorule.py:490 -msgid "Display Sudo Rule." -msgstr "" - -#: ipaserver/plugins/pkinit.py:72 ipaserver/plugins/serverrole.py:124 -#: ipaserver/plugins/baseldap.py:1980 ipaserver/plugins/cert.py:1570 -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "" - -#: ipaserver/plugins/pkinit.py:80 ipaserver/plugins/serverrole.py:132 -#: ipaserver/plugins/baseldap.py:1987 ipaserver/plugins/cert.py:1575 -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "ACL name" -msgstr "" - -msgid "Profile category" -msgstr "" - -msgid "Profile category the ACL applies to" -msgstr "" - -msgid "User category the ACL applies to" -msgstr "" - -msgid "Host category the ACL applies to" -msgstr "" - -msgid "Service category the ACL applies to" -msgstr "" - -#: ipaserver/plugins/internal.py:599 -msgid "Profiles" -msgstr "" - -msgid "Create a new CA ACL." -msgstr "" - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "" - -msgid "Add profiles to a CA ACL." -msgstr "" - -msgid "member Certificate Profile" -msgstr "구성원 인증서 프로파일" - -msgid "Certificate Profiles to add" -msgstr "" - -msgid "Add services to a CA ACL." -msgstr "" - -msgid "Add users and groups to a CA ACL." -msgstr "" - -msgid "Delete a CA ACL." -msgstr "" - -msgid "Disable a CA ACL." -msgstr "" - -msgid "Enable a CA ACL." -msgstr "" - -msgid "Search for CA ACLs." -msgstr "" - -msgid "Modify a CA ACL." -msgstr "" - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "" - -msgid "Remove profiles from a CA ACL." -msgstr "" - -msgid "Certificate Profiles to remove" -msgstr "" - -msgid "Remove services from a CA ACL." -msgstr "" - -msgid "Remove users and groups from a CA ACL." -msgstr "" - -msgid "Display the properties of a CA ACL." -msgstr "" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -#: ipaserver/plugins/certprofile.py:122 ipaserver/plugins/cert.py:575 -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -#: ipaserver/plugins/certprofile.py:123 -msgid "Profile ID for referring to this profile" -msgstr "" - -#: ipaserver/plugins/certprofile.py:132 -msgid "Profile description" -msgstr "" - -#: ipaserver/plugins/certprofile.py:133 -msgid "Brief description of this profile" -msgstr "" - -#: ipaserver/plugins/certprofile.py:138 -msgid "Store issued certificates" -msgstr "" - -#: ipaserver/plugins/certprofile.py:139 -msgid "Whether to store certs issued using this profile" -msgstr "" - -#: ipaserver/plugins/certprofile.py:281 -msgid "Delete a Certificate Profile." -msgstr "" - -#: ipaserver/plugins/certprofile.py:188 -msgid "Search for Certificate Profiles." -msgstr "" - -#: ipaserver/plugins/certprofile.py:221 -msgid "Import a Certificate Profile." -msgstr "" - -#: ipaserver/plugins/certprofile.py:226 -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -#: ipaserver/plugins/certprofile.py:304 -msgid "Modify Certificate Profile configuration." -msgstr "" - -#: ipaserver/plugins/certprofile.py:310 -msgid "File containing profile configuration" -msgstr "" - -#: ipaserver/plugins/certprofile.py:200 -msgid "Display the properties of a Certificate Profile." -msgstr "" - -#: ipaserver/plugins/certprofile.py:204 -msgid "Write profile configuration to file" -msgstr "" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "" - -#: ipaserver/plugins/domainlevel.py:18 -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" - -#: ipaserver/plugins/domainlevel.py:93 -msgid "Query current Domain Level." -msgstr "" - -#: ipaserver/plugins/domainlevel.py:27 -msgid "Current domain level:" -msgstr "" - -#: ipaserver/plugins/domainlevel.py:117 -msgid "Change current Domain Level." -msgstr "" - -#: ipaserver/plugins/domainlevel.py:124 ipaserver/plugins/internal.py:792 -#: ipaserver/plugins/internal.py:793 -msgid "Domain Level" -msgstr "" - -msgid "Add certificates to host entry" -msgstr "" - -msgid "Remove certificates from host entry" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -#: ipaserver/plugins/idviews.py:80 -msgid "Fallback to AD DC LDAP" -msgstr "" - -#: ipaserver/plugins/idviews.py:81 -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" - -#: ipaserver/plugins/idviews.py:441 -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" - -#: ipaserver/plugins/migration.py:642 -msgid "Add to default group" -msgstr "" - -#: ipaserver/plugins/migration.py:643 -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" - -#: ipaserver/plugins/migration.py:650 -msgid "Search scope" -msgstr "" - -#: ipaserver/plugins/migration.py:651 -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" - -#: ipaserver/plugins/otptoken.py:469 -msgid "Remove users that can manage this token." -msgstr "" - -#: ipaserver/plugins/permission.py:321 -msgid "Target DN subtree" -msgstr "" - -#: ipaserver/plugins/permission.py:322 -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" - -#: ipaserver/plugins/permission.py:329 -msgid "Origin DN subtree" -msgstr "" - -#: ipaserver/plugins/permission.py:330 -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:112 ipaserver/plugins/pkinit.py:47 -#: ipaserver/plugins/serverrole.py:58 ipaserver/plugins/server.py:103 -msgid "Server name" -msgstr "" - -#: ipaserver/plugins/serverrole.py:59 ipaserver/plugins/server.py:104 -msgid "IPA server hostname" -msgstr "" - -msgid "Managed suffix" -msgstr "" - -msgid "Min domain level" -msgstr "" - -msgid "Minimum domain level" -msgstr "" - -msgid "Max domain level" -msgstr "" - -msgid "Maximum domain level" -msgstr "" - -msgid "Delete IPA server." -msgstr "" - -msgid "Search for IPA servers." -msgstr "" - -msgid "Show IPA server." -msgstr "" - -#: ipaserver/plugins/service.py:1157 -msgid "Add new certificates to a service" -msgstr "" - -#: ipaserver/plugins/service.py:1164 -msgid "Remove certificates from a service" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:167 -msgid "Allowed Target" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:396 -msgid "Create a new service delegation rule." -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:435 -msgid "Add member to a named service delegation rule." -msgstr "" - -msgid "member principal" -msgstr "" - -msgid "principal to add" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:452 -msgid "Add target to a named service delegation rule." -msgstr "" - -msgid "member service delegation target" -msgstr "" - -msgid "service delegation targets to add" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:403 -msgid "Delete service delegation." -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:420 -msgid "Search for service delegations rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:444 -msgid "Remove member from a named service delegation rule." -msgstr "" - -msgid "principal to remove" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:462 -msgid "Remove target from a named service delegation rule." -msgstr "" - -msgid "service delegation targets to remove" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:430 -msgid "Display information about a named service delegation rule." -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:485 -msgid "Create a new service delegation target." -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:550 -msgid "Add member to a named service delegation target." -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:492 -msgid "Delete service delegation target." -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:509 -msgid "Search for service delegation target." -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:559 -msgid "Remove member from a named service delegation target." -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:545 -msgid "Display information about a named service delegation target." -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" - -#: ipaserver/plugins/stageuser.py:506 -msgid "Activate a stage user." -msgstr "" - -#: ipaserver/plugins/stageuser.py:276 -msgid "Add a new stage user." -msgstr "" - -#: ipaserver/plugins/stageuser.py:286 -msgid "Create Stage user in from a delete user" -msgstr "" - -#: ipaserver/plugins/stageuser.py:429 -msgid "Delete a stage user." -msgstr "" - -#: ipaserver/plugins/stageuser.py:457 -msgid "Search for stage users." -msgstr "" - -msgid "Search for stage users with these member of groups." -msgstr "" - -msgid "Search for stage users without these member of groups." -msgstr "" - -msgid "Search for stage users with these member of netgroups." -msgstr "" - -msgid "Search for stage users without these member of netgroups." -msgstr "" - -msgid "Search for stage users with these member of roles." -msgstr "" - -msgid "Search for stage users without these member of roles." -msgstr "" - -msgid "Search for stage users with these member of HBAC rules." -msgstr "" - -msgid "Search for stage users without these member of HBAC rules." -msgstr "HBAC 규칙의 이들 구성원이 없이 스테이지 사용자를 검색합니다." - -msgid "Search for stage users with these member of sudo rules." -msgstr "" - -msgid "Search for stage users without these member of sudo rules." -msgstr "" - -#: ipaserver/plugins/stageuser.py:435 -msgid "Modify a stage user." -msgstr "" - -msgid "Rename the stage user object" -msgstr "" - -#: ipaserver/plugins/stageuser.py:489 -msgid "Display information about a stage user." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" - -#: ipaserver/plugins/topology.py:128 -msgid "Segment name" -msgstr "" - -#: ipaserver/plugins/topology.py:132 -msgid "Arbitrary string identifying the segment" -msgstr "" - -#: ipaserver/plugins/topology.py:140 -msgid "Left node" -msgstr "왼쪽 노드" - -#: ipaserver/plugins/topology.py:142 -msgid "Left replication node - an IPA server" -msgstr "" - -#: ipaserver/plugins/topology.py:151 -msgid "Right node" -msgstr "" - -#: ipaserver/plugins/topology.py:153 -msgid "Right replication node - an IPA server" -msgstr "" - -#: ipaserver/plugins/topology.py:159 -msgid "Connectivity" -msgstr "" - -#: ipaserver/plugins/topology.py:163 -msgid "Direction of replication between left and right replication node" -msgstr "" - -#: ipaserver/plugins/topology.py:170 -msgid "Attributes to strip" -msgstr "" - -#: ipaserver/plugins/topology.py:172 -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" - -msgid "Attributes to replicate" -msgstr "" - -#: ipaserver/plugins/topology.py:179 -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" - -#: ipaserver/plugins/topology.py:186 -msgid "Attributes for total update" -msgstr "" - -#: ipaserver/plugins/topology.py:187 -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" - -#: ipaserver/plugins/topology.py:194 -msgid "Session timeout" -msgstr "" - -#: ipaserver/plugins/topology.py:196 -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" - -#: ipaserver/plugins/topology.py:203 -msgid "Replication agreement enabled" -msgstr "" - -#: ipaserver/plugins/topology.py:204 -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" - -#: ipaserver/plugins/topology.py:420 -msgid "Suffix name" -msgstr "" - -msgid "LDAP suffix to be managed" -msgstr "" - -#: ipaserver/plugins/topology.py:287 -msgid "Add a new segment." -msgstr "" - -#: ipaserver/plugins/topology.py:300 -msgid "Delete a segment." -msgstr "" - -#: ipaserver/plugins/topology.py:277 -msgid "Search for topology segments." -msgstr "" - -#: ipaserver/plugins/topology.py:312 -msgid "Modify a segment." -msgstr "" - -#: ipaserver/plugins/topology.py:325 -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" - -#: ipaserver/plugins/topology.py:334 -msgid "Initialize left node" -msgstr "" - -#: ipaserver/plugins/topology.py:339 -msgid "Initialize right node" -msgstr "" - -#: ipaserver/plugins/topology.py:344 -msgid "Stop already started refresh of chosen node(s)" -msgstr "" - -#: ipaserver/plugins/topology.py:398 -msgid "Display a segment." -msgstr "" - -#: ipaserver/plugins/topology.py:456 -msgid "Add a new topology suffix to be managed." -msgstr "" - -#: ipaserver/plugins/topology.py:442 -msgid "Delete a topology suffix." -msgstr "" - -msgid "Search for topology suffices." -msgstr "" - -#: ipaserver/plugins/topology.py:470 -msgid "Modify a topology suffix." -msgstr "" - -#: ipaserver/plugins/topology.py:484 -msgid "Show managed suffix." -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" - -#: ipaserver/plugins/trust.py:718 -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -#: ipaserver/plugins/user.py:1173 -msgid "Preserved user" -msgstr "" - -msgid "Add one or more certificates to the user entry" -msgstr "" - -msgid "Remove one or more certificates to the user entry" -msgstr "" - -msgid "Move deleted user into staged area" -msgstr "" - -msgid "Undelete a delete user account." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "Vault name" -msgstr "" - -msgid "Vault description" -msgstr "" - -msgid "Vault type" -msgstr "" - -msgid "Salt" -msgstr "" - -msgid "Vault salt" -msgstr "" - -msgid "Public key" -msgstr "" - -msgid "Vault public key" -msgstr "" - -#: ipaserver/plugins/vault.py:620 -msgid "Owner users" -msgstr "" - -#: ipaserver/plugins/vault.py:625 -msgid "Owner groups" -msgstr "" - -#: ipaserver/plugins/vault.py:630 -msgid "Owner services" -msgstr "" - -#: ipaserver/plugins/vault.py:325 ipaserver/plugins/vault.py:635 -msgid "Failed owners" -msgstr "" - -#: ipaserver/plugins/vault.py:640 -msgid "Vault service" -msgstr "" - -#: ipaserver/plugins/vault.py:334 ipaserver/plugins/vault.py:645 -msgid "Shared vault" -msgstr "" - -#: ipaserver/plugins/vault.py:650 -msgid "Vault user" -msgstr "" - -msgid "Transport Certificate" -msgstr "" - -msgid "Service name of the service vault" -msgstr "" - -msgid "Username of the user vault" -msgstr "" - -msgid "Add members to a vault." -msgstr "" - -msgid "Add owners to a vault." -msgstr "" - -msgid "owner user" -msgstr "" - -msgid "owner group" -msgstr "" - -msgid "owner service" -msgstr "" - -#: ipaserver/plugins/vault.py:1211 -msgid "Owners that could not be added" -msgstr "" - -#: ipaserver/plugins/vault.py:1216 -msgid "Number of owners added" -msgstr "" - -#: ipaserver/plugins/vault.py:1127 -msgid "Session key wrapped with transport certificate" -msgstr "" - -msgid "Vault data encrypted with session key" -msgstr "" - -msgid "Nonce" -msgstr "" - -msgid "Delete a vault." -msgstr "" - -msgid "Search for vaults." -msgstr "" - -msgid "List all service vaults" -msgstr "" - -msgid "List all user vaults" -msgstr "" - -msgid "Remove members from a vault." -msgstr "" - -msgid "Remove owners from a vault." -msgstr "" - -#: ipaserver/plugins/vault.py:1236 -msgid "Owners that could not be removed" -msgstr "" - -#: ipaserver/plugins/vault.py:1241 -msgid "Number of owners removed" -msgstr "" - -msgid "Display information about a vault." -msgstr "" - -msgid "Show vault configuration." -msgstr "" - -msgid "Output file to store the transport certificate" -msgstr "" - -msgid "Add owners to a vault container." -msgstr "" - -msgid "Delete a vault container." -msgstr "" - -msgid "Remove owners from a vault container." -msgstr "" - -msgid "Display information about a vault container." -msgstr "" - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "" - -msgid "Hostname (FQDN)" -msgstr "" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Managed suffixes" -msgstr "" - -msgid "Check connection to remote IPA server." -msgstr "" - -#: ipaserver/plugins/trust.py:1849 -msgid "Remote server name" -msgstr "" - -#: ipaserver/plugins/trust.py:1850 -msgid "Remote IPA server hostname" -msgstr "" - -#: ipaserver/plugins/topology.py:407 -msgid "suffix" -msgstr "" - -msgid "Search for servers with these managed suffixes." -msgstr "" - -msgid "Search for servers without these managed suffixes." -msgstr "" - -#: ipaserver/plugins/stageuser.py:774 -msgid "Add a manager to the stage user entry" -msgstr "" - -#: ipaserver/plugins/stageuser.py:779 -msgid "Remove a manager to the stage user entry" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#: ipaserver/plugins/topology.py:425 -msgid "Managed LDAP suffix DN" -msgstr "" - -#: ipaserver/plugins/topology.py:432 -msgid "Search for topology suffixes." -msgstr "" - -msgid "Add a manager to the user entry" -msgstr "" - -msgid "Remove a manager to the user entry" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Comma-separated list of attributes" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-" -"policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * " -"AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" - -msgid "DNS class" -msgstr "" - -msgid "Comma-separated list of raw A records" -msgstr "" - -msgid "Comma-separated list of raw AAAA records" -msgstr "" - -msgid "Comma-separated list of raw A6 records" -msgstr "" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "" - -msgid "Comma-separated list of raw APL records" -msgstr "" - -msgid "Comma-separated list of raw CERT records" -msgstr "" - -msgid "Comma-separated list of raw CNAME records" -msgstr "" - -msgid "Comma-separated list of raw DHCID records" -msgstr "" - -msgid "Comma-separated list of raw DLV records" -msgstr "" - -msgid "Comma-separated list of raw DNAME records" -msgstr "" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "" - -msgid "Comma-separated list of raw DS records" -msgstr "" - -msgid "Comma-separated list of raw HIP records" -msgstr "" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "" - -msgid "Comma-separated list of raw KEY records" -msgstr "" - -msgid "KEY Flags" -msgstr "" - -msgid "KEY Protocol" -msgstr "" - -msgid "Protocol" -msgstr "" - -msgid "KEY Algorithm" -msgstr "키 알고리즘" - -msgid "KEY Public Key" -msgstr "" - -msgid "Public Key" -msgstr "" - -msgid "Comma-separated list of raw KX records" -msgstr "" - -msgid "Comma-separated list of raw LOC records" -msgstr "" - -msgid "Comma-separated list of raw MX records" -msgstr "" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "단순 NAPTR 레코드의 쉼표로-구분된 목록" - -msgid "Comma-separated list of raw NS records" -msgstr "" - -msgid "Comma-separated list of raw NSEC records" -msgstr "" - -msgid "NSEC Next Domain Name" -msgstr "" - -msgid "Next Domain Name" -msgstr "" - -msgid "NSEC Type Map" -msgstr "" - -msgid "Type Map" -msgstr "" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "" - -msgid "Comma-separated list of raw PTR records" -msgstr "" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "" - -msgid "RRSIG Type Covered" -msgstr "RRSIG 유형 적용" - -msgid "Type Covered" -msgstr "" - -msgid "RRSIG Algorithm" -msgstr "" - -msgid "RRSIG Labels" -msgstr "" - -msgid "Labels" -msgstr "" - -msgid "RRSIG Original TTL" -msgstr "" - -msgid "Original TTL" -msgstr "" - -msgid "RRSIG Signature Expiration" -msgstr "" - -msgid "Signature Expiration" -msgstr "" - -msgid "RRSIG Signature Inception" -msgstr "" - -msgid "Signature Inception" -msgstr "" - -msgid "RRSIG Key Tag" -msgstr "" - -msgid "RRSIG Signer's Name" -msgstr "" - -msgid "Signer's Name" -msgstr "" - -msgid "RRSIG Signature" -msgstr "" - -msgid "Signature" -msgstr "" - -msgid "Comma-separated list of raw RP records" -msgstr "" - -msgid "Comma-separated list of raw SIG records" -msgstr "" - -msgid "SIG Type Covered" -msgstr "" - -msgid "SIG Algorithm" -msgstr "" - -msgid "SIG Labels" -msgstr "" - -msgid "SIG Original TTL" -msgstr "" - -msgid "SIG Signature Expiration" -msgstr "" - -msgid "SIG Signature Inception" -msgstr "" - -msgid "SIG Key Tag" -msgstr "" - -msgid "SIG Signer's Name" -msgstr "" - -msgid "SIG Signature" -msgstr "" - -msgid "Comma-separated list of raw SPF records" -msgstr "" - -msgid "Comma-separated list of raw SRV records" -msgstr "" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "" - -msgid "Comma-separated list of raw TA records" -msgstr "" - -msgid "Comma-separated list of raw TKEY records" -msgstr "" - -msgid "Comma-separated list of raw TSIG records" -msgstr "" - -msgid "Comma-separated list of raw TXT records" -msgstr "" - -msgid "SOA time to live" -msgstr "" - -msgid "SOA record time to live" -msgstr "" - -msgid "SOA class" -msgstr "" - -msgid "SOA record class" -msgstr "" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" - -msgid "Consume an entitlement." -msgstr "" - -msgid "Quantity" -msgstr "" - -msgid "Search for entitlement accounts." -msgstr "" - -msgid "Retrieve the entitlement certs." -msgstr "" - -msgid "Import an entitlement certificate." -msgstr "" - -msgid "UUID" -msgstr "" - -msgid "Enrollment UUID" -msgstr "" - -msgid "Register to the entitlement system." -msgstr "" - -#: ipaserver/plugins/internal.py:414 -msgid "Username" -msgstr "" - -msgid "Enrollment UUID (not implemented)" -msgstr "" - -msgid "Registration password" -msgstr "" - -msgid "Display current entitlements." -msgstr "" - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" - -msgid "comma-separated list of users to add" -msgstr "" - -msgid "comma-separated list of groups to add" -msgstr "" - -msgid "comma-separated list of users to remove" -msgstr "" - -msgid "comma-separated list of groups to remove" -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host " -"\"server\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:236 -msgid "Source host category" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:237 -msgid "Source host category the rule applies to" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:277 -msgid "Source Hosts" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:282 -msgid "Source Host Groups" -msgstr "" - -msgid "comma-separated list of hosts to add" -msgstr "" - -msgid "comma-separated list of host groups to add" -msgstr "" - -msgid "comma-separated list of HBAC services to add" -msgstr "" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "" - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "" - -msgid "comma-separated list of hosts to remove" -msgstr "제거하려는 호스트의 쉼표로-구분된 목록" - -msgid "comma-separated list of host groups to remove" -msgstr "" - -msgid "comma-separated list of HBAC services to remove" -msgstr "" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:578 -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" - -#: ipaserver/plugins/hbactest.py:276 -msgid "Source host" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" +msgid "Comma separated encryption types list" +msgstr "쉼표로 구분된 암호화 유형 목록" msgid "" "Comma-separated list of attributes to be ignored for group entries in DS" msgstr "DS에서 그룹 항목을 위해 무시되는 속성의 쉼표로-구분된 목록" -msgid "comma-separated list of groups to exclude from migration" -msgstr "" +msgid "Comma-separated list of raw NAPTR records" +msgstr "단순 NAPTR 레코드의 쉼표로-구분된 목록" -msgid "comma-separated list of users to exclude from migration" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "comma-separated list of netgroups to add" -msgstr "" - -msgid "comma-separated list of netgroups to remove" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" - -msgid "Target members of a group" -msgstr "" - -msgid "User group to apply permissions to" -msgstr "" - -msgid "comma-separated list of privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI" -msgstr "" - -msgid "Permission type" -msgstr "" - -msgid "comma-separated list of privileges to remove" -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "comma-separated list of roles to add" -msgstr "" - -msgid "comma-separated list of permissions" -msgstr "" - -msgid "comma-separated list of roles to remove" -msgstr "" - -msgid "comma-separated list of privileges" -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "comma-separated list of sudo commands to add" -msgstr "" - -msgid "comma-separated list of sudo commands to remove" -msgstr "" - -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" - -msgid "comma-separated list of sudo command groups to add" -msgstr "" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "" - -#: ipaclient/frontend.py:28 ipaclient/frontend.py:90 -#: ipaserver/plugins/baseldap.py:53 -msgid "Failed members" -msgstr "" - -#: ipaclient/frontend.py:32 ipaserver/plugins/baseldap.py:176 -msgid "Failed source hosts/hostgroups" -msgstr "" - -#: ipaclient/frontend.py:36 ipaserver/plugins/baseldap.py:179 -msgid "Failed hosts/hostgroups" -msgstr "" - -#: ipaclient/frontend.py:40 ipaserver/plugins/baseldap.py:182 -msgid "Failed users/groups" -msgstr "" - -#: ipaclient/frontend.py:44 ipaserver/plugins/baseldap.py:185 -msgid "Failed service/service groups" -msgstr "" - -#: ipaclient/frontend.py:48 ipaserver/plugins/baseldap.py:188 -msgid "Failed to remove" -msgstr "" - -#: ipaclient/frontend.py:53 ipaserver/plugins/baseldap.py:192 -msgid "Failed RunAs" -msgstr "" - -#: ipaclient/frontend.py:57 ipaserver/plugins/baseldap.py:195 -msgid "Failed RunAsGroup" -msgstr "" - -#: ipaclient/frontend.py:62 ipaserver/plugins/caacl.py:473 -msgid "Failed profiles" -msgstr "" - -#: ipaclient/frontend.py:66 ipaserver/plugins/caacl.py:476 -msgid "Failed CAs" -msgstr "" - -#: ipaclient/frontend.py:71 ipaserver/plugins/group.py:183 -#: ipaserver/plugins/hostgroup.py:95 -msgid "Failed member manager" -msgstr "" - -#: ipaclient/frontend.py:76 ipaserver/plugins/host.py:209 -msgid "Failed managedby" -msgstr "" - -#: ipaclient/frontend.py:81 ipaserver/plugins/host.py:236 -#: ipaserver/plugins/service.py:158 -msgid "Failed allowed to retrieve keytab" -msgstr "" - -#: ipaclient/frontend.py:85 ipaserver/plugins/host.py:239 -#: ipaserver/plugins/service.py:161 -msgid "Failed allowed to create keytab" -msgstr "" - -#: ipaclient/frontend.py:94 -msgid "Failed targets" -msgstr "" - -#: ipalib/errors.py:296 -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" - -#: ipalib/errors.py:314 -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "" - -#: ipalib/errors.py:330 -msgid "an internal error has occurred" -msgstr "" - -#: ipalib/errors.py:352 -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "" - -#: ipalib/errors.py:368 -#, python-format -msgid "unknown command '%(name)s'" -msgstr "" - -#: ipalib/errors.py:385 ipalib/errors.py:410 -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "" - -#: ipalib/errors.py:401 -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "" - -#: ipalib/errors.py:419 -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "" - -#: ipalib/errors.py:435 -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#: ipalib/errors.py:451 -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" - -#: ipalib/errors.py:469 -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set " -"LC_ALL=\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#: ipalib/errors.py:497 -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "" - -#: ipalib/errors.py:514 -msgid "did not receive Kerberos credentials" -msgstr "" - -#: ipalib/errors.py:530 -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -#: ipalib/errors.py:546 -msgid "No credentials cache found" -msgstr "" - -#: ipalib/errors.py:562 -msgid "Ticket expired" -msgstr "" - -#: ipalib/errors.py:578 -msgid "Credentials cache permissions incorrect" -msgstr "" - -#: ipalib/errors.py:594 -msgid "Bad format in credentials cache" -msgstr "" - -#: ipalib/errors.py:610 -msgid "Cannot resolve KDC for requested realm" -msgstr "" - -#: ipalib/errors.py:622 -msgid "Session error" -msgstr "" - -#: ipalib/errors.py:630 -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#: ipalib/errors.py:666 -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "" - -#: ipalib/errors.py:710 -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#: ipalib/errors.py:730 -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "" -msgstr[1] "" - -#: ipalib/errors.py:760 -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#: ipalib/errors.py:776 -#, python-format -msgid "'%(name)s' is required" -msgstr "" - -#: ipalib/errors.py:792 ipalib/errors.py:808 -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "" - -#: ipalib/errors.py:824 -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - -#: ipalib/errors.py:833 -msgid "Passwords do not match" -msgstr "" - -#: ipalib/errors.py:842 -msgid "Command not implemented" -msgstr "" - -#: ipalib/errors.py:851 -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#: ipalib/errors.py:860 -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#: ipalib/errors.py:875 -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#: ipalib/errors.py:891 -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -#: ipalib/errors.py:918 ipalib/errors.py:1158 ipalib/errors.py:1237 -#: ipalib/errors.py:1403 ipalib/errors.py:1468 ipalib/errors.py:1785 -#: ipalib/errors.py:1802 -#, python-format -msgid "%(reason)s" -msgstr "" - -#: ipalib/errors.py:934 -msgid "This entry already exists" -msgstr "" - -#: ipalib/errors.py:950 -msgid "You must enroll a host in order to create a host service" -msgstr "" - -#: ipalib/errors.py:966 -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" - -#: ipalib/errors.py:982 -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" - -#: ipalib/errors.py:998 -msgid "This command requires root access" -msgstr "" - -#: ipalib/errors.py:1014 -msgid "This is already a posix group" -msgstr "" - -#: ipalib/errors.py:1030 -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -#: ipalib/errors.py:1046 -msgid "This entry is already enabled" -msgstr "" - -#: ipalib/errors.py:1062 -msgid "This entry is already disabled" -msgstr "" - -#: ipalib/errors.py:1078 -msgid "This entry cannot be enabled or disabled" -msgstr "" - -#: ipalib/errors.py:1094 -msgid "This entry is not a member" -msgstr "" - -#: ipalib/errors.py:1110 -msgid "A group may not be a member of itself" -msgstr "" - -#: ipalib/errors.py:1126 -msgid "This entry is already a member" -msgstr "" - -#: ipalib/errors.py:1142 -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "" - -#: ipalib/errors.py:1174 -msgid "A group may not be added as a member of itself" -msgstr "" - -#: ipalib/errors.py:1190 -msgid "The default users group cannot be removed" -msgstr "" - -#: ipalib/errors.py:1206 -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -#: ipalib/errors.py:1221 -msgid "A managed group cannot have a password policy." -msgstr "" - -#: ipalib/errors.py:1253 -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "" - -#: ipalib/errors.py:1269 -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#: ipalib/errors.py:1285 -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#: ipalib/errors.py:1303 -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#: ipalib/errors.py:1320 -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -#: ipalib/errors.py:1337 -msgid "This group already allows external members" -msgstr "" - -#: ipalib/errors.py:1354 -msgid "This group cannot be posix because it is external" -msgstr "" - -#: ipalib/errors.py:1371 -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#: ipalib/errors.py:1420 -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#: ipalib/errors.py:1430 -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#: ipalib/errors.py:1440 -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#: ipalib/errors.py:1458 -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#: ipalib/errors.py:1477 -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#: ipalib/errors.py:1501 -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -#: ipalib/errors.py:1525 -msgid "change collided with another change" -msgstr "" - -#: ipalib/errors.py:1541 -msgid "no modifications to be performed" -msgstr "" - -#: ipalib/errors.py:1557 -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "" - -#: ipalib/errors.py:1573 -msgid "limits exceeded for this query" -msgstr "" - -#: ipalib/errors.py:1588 -#, python-format -msgid "%(info)s" -msgstr "" - -#: ipalib/errors.py:1603 -msgid "modifying primary key is not allowed" -msgstr "" - -#: ipalib/errors.py:1619 -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "" - -#: ipalib/errors.py:1635 -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#: ipalib/errors.py:1651 -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -#: ipalib/errors.py:1667 -msgid "Not allowed on non-leaf entry" -msgstr "" - -#: ipalib/errors.py:1683 -msgid "LDAP timeout" -msgstr "" - -#: ipalib/errors.py:1699 -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -#: ipalib/errors.py:1708 -msgid "Configured time limit exceeded" -msgstr "" - -#: ipalib/errors.py:1717 -msgid "Configured size limit exceeded" -msgstr "" - -#: ipalib/errors.py:1727 -msgid "Configured administrative server limit exceeded" -msgstr "" - -#: ipalib/errors.py:1752 -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "" - -#: ipalib/errors.py:1768 -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "" - -#: ipalib/errors.py:1819 -msgid "Already registered" -msgstr "" - -#: ipalib/errors.py:1835 -msgid "Not registered yet" -msgstr "" - -#: ipalib/errors.py:1851 -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#: ipalib/errors.py:1867 -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#: ipalib/errors.py:1883 -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#: ipalib/errors.py:1900 -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#: ipalib/errors.py:1918 -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#: ipalib/errors.py:1945 -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#: ipalib/errors.py:1963 -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#: ipalib/errors.py:1979 -#, python-format -msgid "%(exception)s" -msgstr "" - -#: ipalib/errors.py:2006 -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - -#: ipalib/messages.py:84 -msgid "Additional instructions:" -msgstr "" - -#: ipalib/messages.py:146 -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -#: ipalib/messages.py:158 -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#: ipalib/messages.py:170 -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#: ipalib/messages.py:180 -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#: ipalib/messages.py:190 -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#: ipalib/messages.py:201 -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#: ipalib/messages.py:211 -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#: ipalib/messages.py:224 -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#: ipalib/messages.py:238 -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#: ipalib/messages.py:251 -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#: ipalib/messages.py:265 -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#: ipalib/messages.py:281 -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -#: ipalib/messages.py:295 -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#: ipalib/messages.py:310 -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#: ipalib/messages.py:323 -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#: ipalib/messages.py:333 -#, python-format -msgid "%(line)s" -msgstr "" - -#: ipalib/messages.py:343 -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#: ipalib/messages.py:353 -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#: ipalib/messages.py:372 -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -#: ipalib/messages.py:386 -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#: ipalib/messages.py:400 -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#: ipalib/messages.py:411 -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -#: ipalib/messages.py:423 -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#: ipalib/messages.py:436 -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#: ipalib/messages.py:448 -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#: ipalib/messages.py:475 -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#: ipalib/messages.py:486 -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#: ipalib/messages.py:496 -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -#: ipalib/misc.py:22 -#, python-format -msgid "%(count)d variables" -msgstr "" - -#: ipalib/misc.py:96 -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" -msgstr[1] "" - -#: ipalib/output.py:110 -msgid "A dictionary representing an LDAP entry" -msgstr "" - -#: ipalib/output.py:118 -msgid "A list of LDAP entries" -msgstr "" - -#: ipalib/output.py:170 -msgid "All commands should at least have a result" -msgstr "" - -#: ipalib/cli.py:630 -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "" - -#: ipalib/cli.py:639 -msgid "Passwords do not match!" -msgstr "" - -#: ipalib/cli.py:662 -msgid "No matching entries found" -msgstr "" - -#: ipalib/cli.py:737 -msgid "Topic or Command" -msgstr "" - -#: ipalib/cli.py:738 -msgid "The topic or command name." -msgstr "" - -#: ipalib/cli.py:910 -msgid "Topic commands:" -msgstr "" - -#: ipalib/cli.py:916 -msgid "To get command help, use:" -msgstr "" - -#: ipalib/cli.py:917 -msgid " ipa --help" -msgstr "" - -#: ipalib/cli.py:928 -msgid "Command name" -msgstr "" - -#: ipalib/cli.py:1151 -msgid "Positional arguments" -msgstr "" - -#: ipalib/cli.py:1297 -#, python-format -msgid "Same as --%s" -msgstr "" - -#: ipalib/cli.py:1300 -msgid "Deprecated options" -msgstr "" - -#: ipalib/cli.py:1429 -msgid "No file to read" -msgstr "" - -#: ipalib/frontend.py:425 -msgid "Results are truncated, try a more specific search" -msgstr "" - -#: ipalib/frontend.py:584 ipatests/test_xmlrpc/test_ping_plugin.py:52 -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -#: ipalib/frontend.py:981 ipaserver/plugins/batch.py:83 -msgid "Client version. Used to determine if server will accept request." -msgstr "" - -#: ipalib/plugable.py:534 -#, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#: ipalib/plugable.py:607 -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -#: ipalib/rpc.py:1109 -msgid "any of the configured servers" -msgstr "" - -#: ipalib/rpc.py:1192 -msgid "Exceeded number of tries to forward a request." -msgstr "" - -#: ipalib/util.py:213 -msgid "Filename is empty" -msgstr "" - -#: ipalib/util.py:217 -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -#: ipalib/util.py:412 ipalib/util.py:944 -msgid "empty DNS label" -msgstr "" - -#: ipalib/util.py:415 -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#: ipalib/util.py:420 -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -#: ipalib/util.py:436 -msgid "single label {}s are not supported" -msgstr "" - -#: ipalib/util.py:446 -msgid "too many '@' characters" -msgstr "" - -#: ipalib/util.py:475 -msgid "cannot be longer that {} characters" -msgstr "" - -#: ipalib/util.py:482 -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -#: ipalib/util.py:486 -msgid "not fully qualified" -msgstr "" - -#: ipalib/util.py:499 ipalib/util.py:508 -msgid "invalid SSH public key" -msgstr "" - -#: ipalib/util.py:511 -msgid "options are not allowed" -msgstr "" - -#: ipalib/util.py:747 -msgid "invalid hostmask" -msgstr "" - -#: ipalib/util.py:761 -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "" - -#: ipalib/util.py:765 -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#: ipalib/util.py:769 -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#: ipalib/util.py:774 -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -#: ipalib/util.py:942 -msgid "invalid escape code in domain name" -msgstr "" - -#: ipalib/util.py:946 -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -#: ipalib/util.py:948 -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -#: ipalib/util.py:950 -msgid "invalid domain name" -msgstr "" - -#: ipalib/util.py:963 -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#: ipalib/util.py:1112 -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#: ipalib/util.py:1124 -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -#: ipalib/util.py:1130 -msgid "invalid IP address format" -msgstr "" - -#: ipalib/util.py:1148 -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -#: ipalib/util.py:1181 -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -#: ipalib/util.py:1268 -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -#: ipalib/parameters.py:415 -msgid "incorrect type" -msgstr "" - -#: ipalib/parameters.py:418 -msgid "Only one value is allowed" -msgstr "" - -#: ipalib/parameters.py:885 -msgid "this option is deprecated" -msgstr "" - -#: ipalib/parameters.py:1003 -msgid "must be True or False" -msgstr "" - -#: ipalib/parameters.py:1101 ipalib/parameters.py:2294 -msgid "must be an integer" -msgstr "" - -#: ipalib/parameters.py:1167 -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#: ipalib/parameters.py:1179 -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -#: ipalib/parameters.py:1197 -msgid "must be a decimal number" -msgstr "" - -#: ipalib/parameters.py:1243 -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#: ipalib/parameters.py:1255 -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "" - -#: ipalib/parameters.py:1265 -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" - -#: ipalib/parameters.py:1388 -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -#: ipalib/parameters.py:1408 -msgid "must be binary data" -msgstr "" - -#: ipalib/parameters.py:1427 -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "" - -#: ipalib/parameters.py:1439 -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "" - -#: ipalib/parameters.py:1451 -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -#: ipalib/parameters.py:1468 -msgid "must be a certificate" -msgstr "" - -#: ipalib/parameters.py:1504 -msgid "must be a certificate signing request" -msgstr "" - -#: ipalib/parameters.py:1550 -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -#: ipalib/parameters.py:1574 -msgid "must be Unicode text" -msgstr "" - -#: ipalib/parameters.py:1605 -msgid "Leading and trailing spaces are not allowed" -msgstr "" - -#: ipalib/parameters.py:1615 -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "" - -#: ipalib/parameters.py:1627 -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "" - -#: ipalib/parameters.py:1639 -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "" - -#: ipalib/parameters.py:1661 -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "" - -#: ipalib/parameters.py:1714 -#, python-format -msgid "must be '%(value)s'" -msgstr "" - -#: ipalib/parameters.py:1717 -#, python-format -msgid "must be one of %(values)s" -msgstr "" - -#: ipalib/parameters.py:1834 -msgid "must be datetime value" -msgstr "" - -#: ipalib/parameters.py:1852 -msgid "does not match any of accepted formats: " -msgstr "" - -#: ipalib/parameters.py:2035 -msgid "incomplete time value" -msgstr "" - -#: ipalib/parameters.py:2112 -msgid "must be DNS name" -msgstr "" - -#: ipalib/parameters.py:2140 -msgid "must be absolute" -msgstr "" - -#: ipalib/parameters.py:2146 -msgid "must be relative" -msgstr "" - -#: ipalib/parameters.py:2157 -msgid "must be dictionary" -msgstr "" - -#: ipalib/parameters.py:2166 -msgid "must be Kerberos principal" -msgstr "" - -#: ipalib/parameters.py:2182 -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -#: ipalib/parameters.py:2191 -msgid "Service principal is required" -msgstr "" - -#: ipalib/parameters.py:2279 -msgid "must be at least 0" -msgstr "" - -#: ipalib/parameters.py:2288 -msgid "invalid valid hex" -msgstr "" - -#: ipalib/parameters.py:2299 -msgid "invalid serial number 0" -msgstr "" - -#: ipapython/dogtag.py:113 -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "" - -#: ipapython/dogtag.py:119 -#, python-format -msgid "request failed with HTTP status %d" -msgstr "" - -#: ipapython/dogtag.py:136 -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "" - -#: ipapython/dogtag.py:158 -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "" - -#: ipapython/ipaldap.py:1189 -#, python-format -msgid "objectclass %s not found" -msgstr "" - -#: ipaserver/dcerpc_common.py:20 -msgid "Trusting forest" -msgstr "" - -#: ipaserver/dcerpc_common.py:21 -msgid "Trusted forest" -msgstr "" - -#: ipaserver/dcerpc_common.py:26 -msgid "Established and verified" -msgstr "" - -#: ipaserver/dcerpc_common.py:27 -msgid "Waiting for confirmation by remote side" -msgstr "" - -#: ipaserver/dcerpc_common.py:30 -msgid "Unknown" -msgstr "" - -#: ipaserver/dcerpc_common.py:36 -msgid "Non-Active Directory domain" -msgstr "" - -#: ipaserver/dcerpc_common.py:37 ipaserver/plugins/internal.py:1258 -msgid "Active Directory domain" -msgstr "" - -#: ipaserver/dcerpc_common.py:38 -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -#: ipaserver/dcerpc_common.py:39 -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -#: ipaserver/dcerpc_common.py:41 -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -#: ipaserver/install/ipa_acme_manage.py:45 ipaserver/plugins/dogtag.py:1211 -msgid "Failed to authenticate to CA REST API" -msgstr "" - -#: ipaserver/install/certs.py:480 -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "" - -#: ipaserver/install/replication.py:1787 ipaserver/install/replication.py:1806 -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "" - -#: ipaserver/plugins/automount.py:218 -msgid "automount location" -msgstr "" - -#: ipaserver/plugins/automount.py:219 -msgid "automount locations" -msgstr "" - -#: ipaserver/plugins/automount.py:222 -msgid "Automount Locations" -msgstr "" - -#: ipaserver/plugins/automount.py:223 -msgid "Automount Location" -msgstr "" - -#: ipaserver/plugins/automount.py:263 -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "추가된 자동적재 위치 \"%(value)s\"" - -#: ipaserver/plugins/automount.py:283 -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:296 -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/automount.py:349 -msgid "automount map" -msgstr "" - -#: ipaserver/plugins/automount.py:350 -msgid "automount maps" -msgstr "" - -#: ipaserver/plugins/automount.py:393 -msgid "Automount Maps" -msgstr "" - -#: ipaserver/plugins/automount.py:394 -msgid "Automount Map" -msgstr "" - -#: ipaserver/plugins/automount.py:401 -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:408 -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:428 -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:436 -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/automount.py:448 -msgid "Automount key object." -msgstr "" - -#: ipaserver/plugins/automount.py:452 -msgid "automount key" -msgstr "" - -#: ipaserver/plugins/automount.py:453 -msgid "automount keys" -msgstr "" - -#: ipaserver/plugins/automount.py:512 -msgid "Automount Keys" -msgstr "" - -#: ipaserver/plugins/automount.py:513 -msgid "Automount Key" -msgstr "" - -#: ipaserver/plugins/automount.py:514 -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#: ipaserver/plugins/automount.py:515 -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#: ipaserver/plugins/automount.py:516 -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#: ipaserver/plugins/automount.py:566 -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#: ipaserver/plugins/automount.py:625 -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:654 -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:678 -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#: ipaserver/plugins/automount.py:707 -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:748 -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automount.py:807 -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/certprofile.py:21 -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -#: ipaserver/plugins/certprofile.py:86 ipaserver/plugins/cert.py:283 -msgid "CA is not configured" -msgstr "" - -#: ipaserver/plugins/certprofile.py:95 -msgid "invalid Profile ID" -msgstr "" - -#: ipaserver/plugins/certprofile.py:106 ipaserver/plugins/certprofile.py:116 -msgid "Certificate Profile" -msgstr "" - -#: ipaserver/plugins/certprofile.py:107 ipaserver/plugins/certprofile.py:115 -msgid "Certificate Profiles" -msgstr "" - -#: ipaserver/plugins/certprofile.py:126 -msgid "Profile configuration" -msgstr "" - -#: ipaserver/plugins/certprofile.py:190 -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/certprofile.py:222 -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certprofile.py:247 -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#: ipaserver/plugins/certprofile.py:255 -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#: ipaserver/plugins/certprofile.py:282 -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certprofile.py:289 -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#: ipaserver/plugins/certprofile.py:305 -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certprofile.py:322 -msgid "Certificate profiles cannot be renamed" -msgstr "" - -#: ipaserver/plugins/certprofile.py:327 -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -#: ipaserver/plugins/delegation.py:67 -msgid "delegation" -msgstr "" - -#: ipaserver/plugins/delegation.py:68 -msgid "delegations" -msgstr "" - -#: ipaserver/plugins/delegation.py:69 -msgid "Delegations" -msgstr "" - -#: ipaserver/plugins/delegation.py:70 -msgid "Delegation" -msgstr "" - -#: ipaserver/plugins/delegation.py:101 ipaserver/plugins/selfservice.py:94 -#: ipaserver/plugins/aci.py:514 ipaserver/plugins/permission.py:359 -msgid "ACI" -msgstr "" - -#: ipaserver/plugins/delegation.py:132 -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/delegation.py:153 -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/delegation.py:170 -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/delegation.py:189 -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/dnsserver.py:35 -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:37 -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:41 -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:44 -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:62 -msgid "DNS server" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:63 -msgid "DNS servers" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:71 -msgid "DNS Servers" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:72 -msgid "DNS Server" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:113 -msgid "DNS Server name" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:119 -msgid "SOA mname override" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:120 -msgid "SOA mname (authoritative server) override" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:126 -msgid "Forwarders" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:128 -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:138 -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -#: ipaserver/plugins/dnsserver.py:148 ipaserver/plugins/dns.py:2063 -#: ipaserver/plugins/dns.py:2237 ipaserver/plugins/dns.py:3210 -#: ipaserver/plugins/dns.py:4191 -msgid "DNS is not configured" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:154 -msgid "Modify DNS server configuration" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:157 -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:162 -msgid "Search for DNS servers." -msgstr "" - -#: ipaserver/plugins/dnsserver.py:166 -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/dnsserver.py:176 -msgid "IPA DNS Server is not installed" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:183 -msgid "Display configuration of a DNS server." -msgstr "" - -#: ipaserver/plugins/dnsserver.py:193 -msgid "Add a new DNS server." -msgstr "" - -#: ipaserver/plugins/dnsserver.py:196 -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:205 -msgid "Delete a DNS server" -msgstr "" - -#: ipaserver/plugins/dnsserver.py:208 -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/domainlevel.py:69 -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -#: ipaserver/plugins/domainlevel.py:112 -msgid "Server does not support domain level functionality" -msgstr "" - -#: ipaserver/plugins/domainlevel.py:147 -msgid "Domain Level cannot be lowered." -msgstr "" - -#: ipaserver/plugins/domainlevel.py:155 -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -#: ipaserver/plugins/group.py:62 -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from " -"\"localadmins\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#: ipaserver/plugins/group.py:195 -msgid "groups" -msgstr "" - -#: ipaserver/plugins/group.py:328 -msgid "User Group" -msgstr "" - -#: ipaserver/plugins/group.py:360 -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/group.py:383 -msgid "gid cannot be set for external group" -msgstr "" - -#: ipaserver/plugins/group.py:395 -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#: ipaserver/plugins/group.py:404 -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/group.py:418 -msgid "privileged group" -msgstr "" - -#: ipaserver/plugins/group.py:451 -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/group.py:526 -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/group.py:629 ipaserver/plugins/group.py:686 -#: ipaserver/plugins/hbactest.py:402 -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -#: ipaserver/plugins/group.py:634 ipaserver/plugins/group.py:691 -#: ipaserver/plugins/trust.py:874 -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#: ipaserver/plugins/group.py:725 -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/group.py:750 -msgid "not allowed to modify user entries" -msgstr "" - -#: ipaserver/plugins/group.py:761 -msgid "not allowed to modify group entries" -msgstr "" - -#: ipaserver/plugins/group.py:781 -msgid "Not a managed group" -msgstr "" - -#: ipaserver/plugins/group.py:803 -msgid "Add users that can manage members of this group." -msgstr "" - -#: ipaserver/plugins/group.py:811 -msgid "Remove users that can manage members of this group." -msgstr "" - -#: ipaserver/plugins/hbac.py:7 -msgid "Host-based access control commands" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:28 -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:62 -msgid "HBAC services" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:95 ipaserver/plugins/hbacrule.py:286 -msgid "HBAC Services" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:96 -msgid "HBAC Service" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:119 -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:127 -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:135 -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacsvc.py:144 -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/hbacsvcgroup.py:64 -msgid "HBAC service group" -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:65 -msgid "HBAC service groups" -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:108 ipaserver/plugins/hbacrule.py:290 -msgid "HBAC Service Groups" -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:109 -msgid "HBAC Service Group" -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:131 -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:139 -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:147 -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacsvcgroup.py:156 -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/hostgroup.py:35 -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:107 -msgid "host groups" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:179 -msgid "Host Group" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:223 -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:239 -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:262 -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:266 ipaserver/plugins/hostgroup.py:284 -#: ipaserver/plugins/hostgroup.py:349 -msgid "hostgroup" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:268 ipaserver/plugins/hostgroup.py:286 -msgid "privileged hostgroup" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:278 -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hostgroup.py:303 -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/hostgroup.py:362 -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -#: ipaserver/plugins/hostgroup.py:372 -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -#: ipaserver/plugins/idrange.py:43 -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -#: ipaserver/plugins/idrange.py:57 -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -#: ipaserver/plugins/idrange.py:202 -msgid "ID Ranges" -msgstr "" - -#: ipaserver/plugins/idrange.py:203 -msgid "ID Range" -msgstr "" - -#: ipaserver/plugins/idrange.py:207 -msgid "local domain range" -msgstr "" - -#: ipaserver/plugins/idrange.py:210 ipaserver/plugins/trust.py:675 -msgid "Active Directory domain range" -msgstr "" - -#: ipaserver/plugins/idrange.py:211 ipaserver/plugins/trust.py:676 -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -#: ipaserver/plugins/idrange.py:255 -msgid "ID range type, one of allowed values" -msgstr "" - -#: ipaserver/plugins/idrange.py:260 ipaserver/plugins/internal.py:1250 -msgid "Auto private groups" -msgstr "" - -#: ipaserver/plugins/idrange.py:262 -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -#: ipaserver/plugins/idrange.py:336 -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -#: ipaserver/plugins/idrange.py:341 -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -#: ipaserver/plugins/idrange.py:348 -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -#: ipaserver/plugins/idrange.py:360 -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -#: ipaserver/plugins/idrange.py:397 -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#: ipaserver/plugins/idrange.py:423 -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idrange.py:435 ipaserver/plugins/idrange.py:698 -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -#: ipaserver/plugins/idrange.py:446 -msgid "Specified trusted domain name could not be found." -msgstr "" - -#: ipaserver/plugins/idrange.py:461 -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -#: ipaserver/plugins/idrange.py:468 ipaserver/plugins/idrange.py:733 -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -#: ipaserver/plugins/idrange.py:475 -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -#: ipaserver/plugins/idrange.py:481 -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -#: ipaserver/plugins/idrange.py:500 -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -#: ipaserver/plugins/idrange.py:510 -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" - -#: ipaserver/plugins/idrange.py:517 ipaserver/plugins/idrange.py:752 -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -#: ipaserver/plugins/idrange.py:527 ipaserver/plugins/idrange.py:775 -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -#: ipaserver/plugins/idrange.py:539 -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#: ipaserver/plugins/idrange.py:558 -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idrange.py:607 -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/idrange.py:643 -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#: ipaserver/plugins/idrange.py:647 -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idrange.py:682 -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -#: ipaserver/plugins/idrange.py:710 -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -#: ipaserver/plugins/idrange.py:717 -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -#: ipaserver/plugins/idrange.py:724 -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#: ipaserver/plugins/join.py:125 -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -#: ipaserver/plugins/location.py:33 -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -#: ipaserver/plugins/location.py:35 -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -#: ipaserver/plugins/location.py:39 -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -#: ipaserver/plugins/location.py:42 -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -#: ipaserver/plugins/location.py:45 -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -#: ipaserver/plugins/location.py:48 -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -#: ipaserver/plugins/location.py:62 -msgid "location" -msgstr "" - -#: ipaserver/plugins/location.py:63 -msgid "locations" -msgstr "" - -#: ipaserver/plugins/location.py:69 -msgid "IPA Locations" -msgstr "" - -#: ipaserver/plugins/location.py:70 -msgid "IPA Location" -msgstr "" - -#: ipaserver/plugins/location.py:103 -msgid "Location name" -msgstr "" - -#: ipaserver/plugins/location.py:104 -msgid "IPA location name" -msgstr "" - -#: ipaserver/plugins/location.py:112 -msgid "IPA Location description" -msgstr "" - -#: ipaserver/plugins/location.py:116 -msgid "Servers" -msgstr "" - -#: ipaserver/plugins/location.py:117 -msgid "Servers that belongs to the IPA location" -msgstr "" - -#: ipaserver/plugins/location.py:122 -msgid "Advertised by servers" -msgstr "" - -#: ipaserver/plugins/location.py:123 -msgid "List of servers which advertise the given location" -msgstr "" - -#: ipaserver/plugins/location.py:138 -msgid "Add a new IPA location." -msgstr "" - -#: ipaserver/plugins/location.py:140 -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/location.py:145 -msgid "Delete an IPA location." -msgstr "" - -#: ipaserver/plugins/location.py:147 -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/location.py:157 ipaserver/plugins/server.py:71 -#: ipaserver/plugins/internal.py:1959 -msgid "IPA Server" -msgstr "" - -#: ipaserver/plugins/location.py:170 -msgid "Modify information about an IPA location." -msgstr "" - -#: ipaserver/plugins/location.py:172 -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/location.py:177 -msgid "Search for IPA locations." -msgstr "" - -#: ipaserver/plugins/location.py:180 -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/location.py:187 -msgid "Display information about an IPA location." -msgstr "" - -#: ipaserver/plugins/location.py:193 -msgid "Servers in location" -msgstr "" - -#: ipaserver/plugins/netgroup.py:103 -msgid "netgroups" -msgstr "" - -#: ipaserver/plugins/netgroup.py:196 ipaserver/plugins/internal.py:1176 -msgid "Netgroups" -msgstr "" - -#: ipaserver/plugins/netgroup.py:197 -msgid "Netgroup" -msgstr "" - -#: ipaserver/plugins/netgroup.py:266 -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/netgroup.py:268 -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#: ipaserver/plugins/netgroup.py:301 -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/netgroup.py:310 -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/netgroup.py:321 ipaserver/plugins/caacl.py:294 -#: ipaserver/plugins/hbacrule.py:345 -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -#: ipaserver/plugins/netgroup.py:326 ipaserver/plugins/caacl.py:298 -#: ipaserver/plugins/hbacrule.py:350 -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -#: ipaserver/plugins/netgroup.py:339 -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/otp.py:7 -msgid "One time password commands" -msgstr "" - -#: ipaserver/plugins/otpconfig.py:57 -msgid "OTP configuration options" -msgstr "" - -#: ipaserver/plugins/otpconfig.py:80 ipaserver/plugins/otpconfig.py:81 -msgid "OTP Configuration" -msgstr "" - -#: ipaserver/plugins/otptoken.py:42 -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -#: ipaserver/plugins/otptoken.py:44 -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -#: ipaserver/plugins/otptoken.py:46 -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -#: ipaserver/plugins/otptoken.py:51 -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -#: ipaserver/plugins/otptoken.py:54 -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -#: ipaserver/plugins/otptoken.py:57 -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " -"Hat\"\n" -msgstr "" - -#: ipaserver/plugins/otptoken.py:60 -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -#: ipaserver/plugins/otptoken.py:137 -msgid "OTP token" -msgstr "" - -#: ipaserver/plugins/otptoken.py:138 -msgid "OTP tokens" -msgstr "" - -#: ipaserver/plugins/otptoken.py:154 -msgid "OTP Tokens" -msgstr "" - -#: ipaserver/plugins/otptoken.py:155 -msgid "OTP Token" -msgstr "" - -#: ipaserver/plugins/otptoken.py:272 -msgid "URI" -msgstr "" - -#: ipaserver/plugins/otptoken.py:281 -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/otptoken.py:335 -msgid "cannot be empty" -msgstr "" - -#: ipaserver/plugins/otptoken.py:367 -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/otptoken.py:373 -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/otptoken.py:422 -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/passwd.py:40 -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -#: ipaserver/plugins/passwd.py:114 -msgid "The OTP if the user has a token configured" -msgstr "" - -#: ipaserver/plugins/passwd.py:120 -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/pkinit.py:13 -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -#: ipaserver/plugins/pkinit.py:39 -msgid "pkinit" -msgstr "" - -#: ipaserver/plugins/pkinit.py:41 ipaserver/plugins/internal.py:192 -msgid "PKINIT" -msgstr "" - -#: ipaserver/plugins/pkinit.py:53 -msgid "PKINIT status" -msgstr "" - -#: ipaserver/plugins/pkinit.py:54 -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -#: ipaserver/plugins/pkinit.py:63 -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#: ipaserver/plugins/pkinit.py:65 -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/radiusproxy.py:35 -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:37 -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:39 -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:45 -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:48 -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:51 -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:54 -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:57 -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:68 -msgid "invalid attribute name" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:80 -msgid "invalid port number" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:98 -msgid "RADIUS proxy server" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:99 -msgid "RADIUS proxy servers" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:106 -msgid "RADIUS Servers" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:107 -msgid "RADIUS Server" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:172 -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:177 -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:182 -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/radiusproxy.py:188 -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/realmdomains.py:34 -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:85 -msgid "Realm domains" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:107 ipaserver/plugins/realmdomains.py:108 -#: ipaserver/plugins/internal.py:1271 -msgid "Realm Domains" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:134 -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#: ipaserver/plugins/realmdomains.py:177 -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:203 -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:218 -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -#: ipaserver/plugins/realmdomains.py:241 -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -#: ipaserver/plugins/realmdomains.py:252 -msgid "IPA server domain cannot be omitted" -msgstr "" - -#: ipaserver/plugins/realmdomains.py:274 -msgid "IPA server domain cannot be deleted" -msgstr "" - -#: ipaserver/plugins/role.py:82 ipaserver/plugins/serverrole.py:186 -msgid "roles" -msgstr "" - -#: ipaserver/plugins/role.py:143 -msgid "Role" -msgstr "" - -#: ipaserver/plugins/role.py:164 -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/role.py:172 -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/role.py:180 -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/role.py:189 -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/selfservice.py:68 -msgid "self service permission" -msgstr "" - -#: ipaserver/plugins/selfservice.py:69 -msgid "self service permissions" -msgstr "" - -#: ipaserver/plugins/selfservice.py:70 -msgid "Self Service Permissions" -msgstr "" - -#: ipaserver/plugins/selfservice.py:71 -msgid "Self Service Permission" -msgstr "" - -#: ipaserver/plugins/selfservice.py:124 -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/selfservice.py:146 -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/selfservice.py:163 -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/selfservice.py:185 -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/serverrole.py:13 -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -#: ipaserver/plugins/serverrole.py:15 -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -#: ipaserver/plugins/serverrole.py:17 -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -#: ipaserver/plugins/serverrole.py:21 -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -#: ipaserver/plugins/serverrole.py:24 -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -#: ipaserver/plugins/serverrole.py:27 -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -#: ipaserver/plugins/serverrole.py:30 -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -#: ipaserver/plugins/serverrole.py:46 -msgid "server role" -msgstr "" - -#: ipaserver/plugins/serverrole.py:47 -msgid "server roles" -msgstr "서버 역할" - -#: ipaserver/plugins/serverrole.py:51 -msgid "IPA Server Roles" -msgstr "" - -#: ipaserver/plugins/serverrole.py:52 -msgid "IPA Server Role" -msgstr "" - -#: ipaserver/plugins/serverrole.py:65 -msgid "IPA server role name" -msgstr "" - -#: ipaserver/plugins/serverrole.py:71 -msgid "Role status" -msgstr "" - -#: ipaserver/plugins/serverrole.py:72 -msgid "Status of the role" -msgstr "" - -#: ipaserver/plugins/serverrole.py:89 -msgid "Show role status on a server" -msgstr "" - -#: ipaserver/plugins/serverrole.py:113 -msgid "Find a server role on a server(s)" -msgstr "" - -#: ipaserver/plugins/serverrole.py:118 -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/serverrole.py:139 -msgid "Include IPA master entries" -msgstr "" - -#: ipaserver/plugins/serverrole.py:192 -msgid "IPA role name" -msgstr "IPA 역할 이름" - -#: ipaserver/plugins/serverroles.py:84 -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#: ipaserver/plugins/serverroles.py:178 -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:26 -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:172 -msgid "Allowed to Impersonate" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:177 -msgid "Member principals" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:189 -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:199 -msgid "Add target to a named service delegation." -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:213 -#: ipaserver/plugins/servicedelegation.py:303 -#: ipaserver/plugins/baseldap.py:1720 -#, python-format -msgid "member %s" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:287 -msgid "Remove member from a named service delegation." -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:378 -#: ipaserver/plugins/servicedelegation.py:411 -msgid "service delegation rule" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:379 -msgid "service delegation rules" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:390 -msgid "Service delegation rules" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:391 -msgid "Service delegation rule" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:398 -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:405 -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:413 -msgid "privileged service delegation rule" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:423 -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/servicedelegation.py:471 -#: ipaserver/plugins/servicedelegation.py:500 -msgid "service delegation target" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:472 -msgid "service delegation targets" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:479 -msgid "Service delegation targets" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:480 -msgid "Service delegation target" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:487 -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:494 -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:502 -msgid "privileged service delegation target" -msgstr "" - -#: ipaserver/plugins/servicedelegation.py:512 -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/session.py:12 -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -#: ipaserver/plugins/subid.py:29 -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -#: ipaserver/plugins/subid.py:59 ipaserver/plugins/subid.py:62 -msgid "Subordinate id" -msgstr "" - -#: ipaserver/plugins/subid.py:60 ipaserver/plugins/subid.py:61 -msgid "Subordinate ids" -msgstr "" - -#: ipaserver/plugins/subid.py:144 -msgid "Subordinate id description" -msgstr "" - -#: ipaserver/plugins/subid.py:150 ipaserver/plugins/subid.py:468 -msgid "Owning user of subordinate id entry" -msgstr "" - -#: ipaserver/plugins/subid.py:155 ipaserver/plugins/internal.py:1387 -msgid "SubUID range start" -msgstr "" - -#: ipaserver/plugins/subid.py:157 -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -#: ipaserver/plugins/subid.py:164 ipaserver/plugins/internal.py:1386 -msgid "SubUID range size" -msgstr "" - -#: ipaserver/plugins/subid.py:166 -msgid "Subordinate user ID count" -msgstr "" - -#: ipaserver/plugins/subid.py:173 ipaserver/plugins/internal.py:1385 -msgid "SubGID range start" -msgstr "" - -#: ipaserver/plugins/subid.py:175 -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -#: ipaserver/plugins/subid.py:182 ipaserver/plugins/internal.py:1384 -msgid "SubGID range size" -msgstr "" - -#: ipaserver/plugins/subid.py:184 -msgid "Subordinate group ID count" -msgstr "" - -#: ipaserver/plugins/subid.py:213 -#, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "" - -#: ipaserver/plugins/subid.py:246 -#, python-format -msgid "'%(dn)s is not a valid user" -msgstr "" - -#: ipaserver/plugins/subid.py:278 -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -#: ipaserver/plugins/subid.py:351 -msgid "Add a new subordinate id." -msgstr "" - -#: ipaserver/plugins/subid.py:352 -#, python-format -msgid "Added subordinate id \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/subid.py:384 -msgid "Delete a subordinate id." -msgstr "" - -#: ipaserver/plugins/subid.py:385 -#, python-format -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/subid.py:393 -msgid "Modify a subordinate id." -msgstr "" - -#: ipaserver/plugins/subid.py:394 -#, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/subid.py:405 -msgid "Search for subordinate id." -msgstr "" - -#: ipaserver/plugins/subid.py:407 -#, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/subid.py:440 -msgid "Display information about a subordinate id." -msgstr "" - -#: ipaserver/plugins/subid.py:458 -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -#: ipaserver/plugins/subid.py:493 -msgid "Match users by any subordinate uid in their range" -msgstr "" - -#: ipaserver/plugins/subid.py:500 -msgid "SubUID match" -msgstr "" - -#: ipaserver/plugins/subid.py:501 -msgid "Match value for subordinate user ID" -msgstr "" - -#: ipaserver/plugins/subid.py:542 -msgid "Subordinate id statistics" -msgstr "" - -#: ipaserver/plugins/subid.py:586 -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -#: ipaserver/plugins/sudo.py:7 -msgid "commands for controlling sudo configuration" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:33 -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:55 -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:64 -msgid "sudo command" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:65 -msgid "sudo commands" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:117 -msgid "Sudo Commands" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:154 -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:160 -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:193 -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmd.py:201 -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/sudocmdgroup.py:34 -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:67 -msgid "sudo command group" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:68 -msgid "sudo command groups" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:149 -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:157 -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:165 -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudocmdgroup.py:174 -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/topology.py:24 -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -#: ipaserver/plugins/topology.py:28 -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -#: ipaserver/plugins/topology.py:33 -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -#: ipaserver/plugins/topology.py:39 -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -#: ipaserver/plugins/topology.py:43 -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -#: ipaserver/plugins/topology.py:47 -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -#: ipaserver/plugins/topology.py:52 -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -#: ipaserver/plugins/topology.py:55 -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -#: ipaserver/plugins/topology.py:58 -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -#: ipaserver/plugins/topology.py:61 -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -#: ipaserver/plugins/topology.py:64 -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -#: ipaserver/plugins/topology.py:67 -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -#: ipaserver/plugins/topology.py:70 -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -#: ipaserver/plugins/topology.py:73 -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -#: ipaserver/plugins/topology.py:76 -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#: ipaserver/plugins/topology.py:92 -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -#: ipaserver/plugins/topology.py:104 -msgid "segment" -msgstr "" - -#: ipaserver/plugins/topology.py:105 -msgid "segments" -msgstr "" - -#: ipaserver/plugins/topology.py:119 -msgid "Topology Segments" -msgstr "" - -#: ipaserver/plugins/topology.py:120 -msgid "Topology Segment" -msgstr "" - -#: ipaserver/plugins/topology.py:226 -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#: ipaserver/plugins/topology.py:233 -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -#: ipaserver/plugins/topology.py:250 -msgid "left node and right node must not be the same" -msgstr "" - -#: ipaserver/plugins/topology.py:261 -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#: ipaserver/plugins/topology.py:269 -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#: ipaserver/plugins/topology.py:280 -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/topology.py:289 -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/topology.py:302 -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/topology.py:314 -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/topology.py:329 -#, python-format -msgid "%(value)s" -msgstr "" - -#: ipaserver/plugins/topology.py:365 -msgid "left or right node has to be specified" -msgstr "" - -#: ipaserver/plugins/topology.py:370 -msgid "only one node can be specified" -msgstr "" - -#: ipaserver/plugins/topology.py:374 -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#: ipaserver/plugins/topology.py:377 -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#: ipaserver/plugins/topology.py:408 -msgid "suffixes" -msgstr "" - -#: ipaserver/plugins/topology.py:412 -msgid "Topology suffixes" -msgstr "" - -#: ipaserver/plugins/topology.py:413 -msgid "Topology suffix" -msgstr "" - -#: ipaserver/plugins/topology.py:435 -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/topology.py:446 -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/topology.py:460 -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/topology.py:474 -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/topology.py:489 -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -#: ipaserver/plugins/virtual.py:57 -msgid "operation not defined" -msgstr "" - -#: ipaserver/plugins/virtual.py:82 -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -#: ipaserver/plugins/virtual.py:84 -msgid "No such virtual command" -msgstr "" - -#: ipaserver/plugins/whoami.py:15 -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -#: ipaserver/plugins/whoami.py:77 -msgid "Describe currently authenticated identity." -msgstr "" - -#: ipaserver/plugins/whoami.py:82 ipaserver/plugins/whoami.py:88 -msgid "Object class name" -msgstr "" - -#: ipaserver/plugins/whoami.py:83 ipaserver/plugins/whoami.py:89 -msgid "Function to get details" -msgstr "" - -#: ipaserver/plugins/whoami.py:84 ipaserver/plugins/whoami.py:91 -msgid "Arguments to details function" -msgstr "" - -#: ipaserver/plugins/whoami.py:111 -msgid "Cannot query Directory Manager with API" -msgstr "" - -#: ipaserver/plugins/server.py:36 -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -#: ipaserver/plugins/server.py:38 -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -#: ipaserver/plugins/server.py:42 -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -#: ipaserver/plugins/server.py:45 -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -#: ipaserver/plugins/server.py:61 -msgid "server" -msgstr "" - -#: ipaserver/plugins/server.py:62 -msgid "servers" -msgstr "" - -#: ipaserver/plugins/server.py:70 -msgid "IPA Servers" -msgstr "" - -#: ipaserver/plugins/server.py:133 -msgid "Server location" -msgstr "" - -#: ipaserver/plugins/server.py:140 -msgid "Service weight" -msgstr "" - -#: ipaserver/plugins/server.py:141 -msgid "Weight for server services" -msgstr "" - -#: ipaserver/plugins/server.py:148 -msgid "Service relative weight" -msgstr "" - -#: ipaserver/plugins/server.py:149 -msgid "Relative weight for server services (counts per location)" -msgstr "" - -#: ipaserver/plugins/server.py:154 -msgid "Enabled server roles" -msgstr "" - -#: ipaserver/plugins/server.py:155 -msgid "List of enabled roles" -msgstr "" - -#: ipaserver/plugins/server.py:222 -msgid "Modify information about an IPA server." -msgstr "" - -#: ipaserver/plugins/server.py:224 -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/server.py:306 -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/server.py:444 -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/server.py:449 -msgid "Ignore topology errors" -msgstr "" - -#: ipaserver/plugins/server.py:450 -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -#: ipaserver/plugins/server.py:455 -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -#: ipaserver/plugins/server.py:456 -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -#: ipaserver/plugins/server.py:462 -msgid "Force server removal" -msgstr "" - -#: ipaserver/plugins/server.py:463 -msgid "Force server removal even if it does not exist" -msgstr "" - -#: ipaserver/plugins/server.py:500 -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -#: ipaserver/plugins/server.py:506 -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -#: ipaserver/plugins/server.py:520 -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -#: ipaserver/plugins/server.py:530 -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -#: ipaserver/plugins/server.py:545 -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#: ipaserver/plugins/server.py:595 -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#: ipaserver/plugins/server.py:616 -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#: ipaserver/plugins/server.py:637 -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#: ipaserver/plugins/server.py:663 -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#: ipaserver/plugins/server.py:701 -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#: ipaserver/plugins/server.py:717 -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -#: ipaserver/plugins/server.py:722 -msgid "You may need to manually remove them from the tree" -msgstr "" - -#: ipaserver/plugins/server.py:737 -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -#: ipaserver/plugins/server.py:747 -msgid "Ignoring topology connectivity errors." -msgstr "" - -#: ipaserver/plugins/server.py:766 -#, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "" - -#: ipaserver/plugins/server.py:793 -msgid "Server has already been deleted" -msgstr "" - -#: ipaserver/plugins/server.py:843 -msgid "Agreements deleted" -msgstr "" - -#: ipaserver/plugins/server.py:854 -msgid "Following segments were not deleted:" -msgstr "" - -#: ipaserver/plugins/server.py:927 ipaserver/plugins/trust.py:1866 -#, python-format -msgid "must be \"%s\"" -msgstr "" - -#: ipaserver/plugins/server.py:939 -msgid "not allowed to perform server connection check" -msgstr "" - -#: ipaserver/plugins/server.py:965 -msgid "Set enabled/hidden state of a server." -msgstr "" - -#: ipaserver/plugins/server.py:971 -msgid "State" -msgstr "" - -#: ipaserver/plugins/server.py:972 -msgid "Server state" -msgstr "" - -#: ipaserver/plugins/server.py:977 -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -#: ipaserver/plugins/server.py:986 -msgid "Cannot hide CA renewal master." -msgstr "" - -#: ipaserver/plugins/server.py:988 -msgid "Cannot hide DNSSec key master." -msgstr "" - -#: ipaserver/plugins/server.py:1000 -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -#: ipaserver/plugins/aci.py:165 -msgid "A list of ACI values" -msgstr "" - -#: ipaserver/plugins/aci.py:229 -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -#: ipaserver/plugins/aci.py:232 -msgid "ACI prefix is required" -msgstr "" - -#: ipaserver/plugins/aci.py:235 -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -#: ipaserver/plugins/aci.py:238 -msgid "filter and memberof are mutually exclusive" -msgstr "" - -#: ipaserver/plugins/aci.py:244 -msgid "group, permission and self are mutually exclusive" -msgstr "" - -#: ipaserver/plugins/aci.py:246 -msgid "One of group, permission or self is required" -msgstr "" - -#: ipaserver/plugins/aci.py:269 -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -#: ipaserver/plugins/aci.py:295 -msgid "empty filter" -msgstr "" - -#: ipaserver/plugins/aci.py:316 -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#: ipaserver/plugins/aci.py:361 -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#: ipaserver/plugins/aci.py:408 -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -#: ipaserver/plugins/aci.py:437 -msgid "ACI object." -msgstr "" - -#: ipaserver/plugins/aci.py:440 -msgid "ACIs" -msgstr "" - -#: ipaserver/plugins/aci.py:524 -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/aci.py:577 -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/aci.py:620 -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/aci.py:694 -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/aci.py:929 -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automember.py:43 -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -#: ipaserver/plugins/automember.py:45 -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -#: ipaserver/plugins/automember.py:49 -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -#: ipaserver/plugins/automember.py:52 -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -#: ipaserver/plugins/automember.py:56 -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -#: ipaserver/plugins/automember.py:60 -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -#: ipaserver/plugins/automember.py:65 -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -#: ipaserver/plugins/automember.py:69 -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -#: ipaserver/plugins/automember.py:73 -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -#: ipaserver/plugins/automember.py:77 -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -#: ipaserver/plugins/automember.py:80 -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -#: ipaserver/plugins/automember.py:83 -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -#: ipaserver/plugins/automember.py:86 -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -#: ipaserver/plugins/automember.py:98 -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -#: ipaserver/plugins/automember.py:101 -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -#: ipaserver/plugins/automember.py:104 -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -#: ipaserver/plugins/automember.py:108 -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -#: ipaserver/plugins/automember.py:112 -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -#: ipaserver/plugins/automember.py:116 -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -#: ipaserver/plugins/automember.py:119 -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -#: ipaserver/plugins/automember.py:124 -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -#: ipaserver/plugins/automember.py:128 -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -#: ipaserver/plugins/automember.py:132 -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -#: ipaserver/plugins/automember.py:135 -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -#: ipaserver/plugins/automember.py:138 -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -#: ipaserver/plugins/automember.py:141 -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -#: ipaserver/plugins/automember.py:244 -msgid "Auto Membership Rule" -msgstr "" - -#: ipaserver/plugins/automember.py:275 -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#: ipaserver/plugins/automember.py:301 -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -#: ipaserver/plugins/automember.py:314 -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#: ipaserver/plugins/automember.py:318 -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automember.py:325 -msgid "Auto Membership is not configured" -msgstr "" - -#: ipaserver/plugins/automember.py:337 -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#: ipaserver/plugins/automember.py:348 -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automember.py:371 ipaserver/plugins/automember.py:455 -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -#: ipaserver/plugins/automember.py:413 -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -#: ipaserver/plugins/automember.py:428 -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#: ipaserver/plugins/automember.py:432 -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automember.py:496 -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -#: ipaserver/plugins/automember.py:511 -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#: ipaserver/plugins/automember.py:515 -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automember.py:525 -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#: ipaserver/plugins/automember.py:529 -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automember.py:534 -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#: ipaserver/plugins/automember.py:540 ipaserver/plugins/automember.py:840 -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/automember.py:552 -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -#: ipaserver/plugins/automember.py:576 -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#: ipaserver/plugins/automember.py:590 -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automember.py:607 -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#: ipaserver/plugins/automember.py:614 -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/automember.py:625 ipaserver/plugins/automember.py:633 -#: ipaserver/plugins/automember.py:661 -msgid "No default (fallback) group set" -msgstr "" - -#: ipaserver/plugins/automember.py:644 -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -#: ipaserver/plugins/automember.py:675 -msgid "Task DN" -msgstr "" - -#: ipaserver/plugins/automember.py:676 -msgid "DN of the started task" -msgstr "" - -#: ipaserver/plugins/automember.py:727 -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -#: ipaserver/plugins/automember.py:733 -msgid "users and hosts cannot both be set" -msgstr "" - -#: ipaserver/plugins/automember.py:737 -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -#: ipaserver/plugins/automember.py:741 -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -#: ipaserver/plugins/automember.py:795 -msgid "Automember rebuild membership task started" -msgstr "" - -#: ipaserver/plugins/automember.py:799 ipaserver/plugins/internal.py:164 -msgid "Automember rebuild membership task completed" -msgstr "" - -#: ipaserver/plugins/automember.py:815 -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -#: ipaserver/plugins/automember.py:818 ipaserver/plugins/internal.py:1953 -msgid "Automember" -msgstr "" - -#: ipaserver/plugins/automember.py:828 -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -#: ipaserver/plugins/automember.py:835 -msgid "Remove orphan automember rules" -msgstr "" - -#: ipaserver/plugins/baseldap.py:101 -msgid "Member service groups" -msgstr "" - -#: ipaserver/plugins/baseldap.py:110 -msgid "Member HBAC service groups" -msgstr "" - -#: ipaserver/plugins/baseldap.py:127 -msgid "Member ID user overrides" -msgstr "" - -#: ipaserver/plugins/baseldap.py:129 -msgid "Indirect Member ID user overrides" -msgstr "" - -#: ipaserver/plugins/baseldap.py:146 -msgid "Indirect Member permissions" -msgstr "" - -#: ipaserver/plugins/baseldap.py:149 -msgid "Indirect Member HBAC service" -msgstr "" - -#: ipaserver/plugins/baseldap.py:152 -msgid "Indirect Member HBAC service group" -msgstr "" - -#: ipaserver/plugins/baseldap.py:213 -msgid "Invalid format. Should be name=value" -msgstr "" - -#: ipaserver/plugins/baseldap.py:584 -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -#: ipaserver/plugins/baseldap.py:615 -msgid "entry" -msgstr "" - -#: ipaserver/plugins/baseldap.py:616 -msgid "entries" -msgstr "" - -#: ipaserver/plugins/baseldap.py:654 ipaserver/plugins/baseldap.py:655 -msgid "Entry" -msgstr "" - -#: ipaserver/plugins/baseldap.py:658 -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#: ipaserver/plugins/baseldap.py:659 -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#: ipaserver/plugins/baseldap.py:660 ipaserver/plugins/schema.py:257 -#: ipaserver/plugins/schema.py:333 ipaserver/plugins/schema.py:424 -#: ipaserver/plugins/schema.py:661 ipaserver/plugins/schema.py:754 -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -#: ipaserver/plugins/baseldap.py:661 -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#: ipaserver/plugins/baseldap.py:954 ipaserver/plugins/baseldap.py:962 -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#: ipaserver/plugins/baseldap.py:967 -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1025 -msgid "attribute is not configurable" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1128 -msgid "No such attribute on this entry" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1488 -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1586 ipaserver/plugins/baseldap.py:2494 -msgid "the entry was deleted while being modified" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1719 ipaserver/plugins/baseldap.py:2221 -#, python-format -msgid "%s" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1762 ipaserver/plugins/baseldap.py:2245 -#, python-format -msgid "%s to add" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1861 ipaserver/plugins/baseldap.py:2344 -#, python-format -msgid "%s to remove" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1961 ipaserver/plugins/schema.py:122 -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -#: ipaserver/plugins/baseldap.py:1969 -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#: ipaserver/plugins/baseldap.py:1970 -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#: ipaserver/plugins/baseldap.py:2525 -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#: ipaserver/plugins/baseldap.py:2539 -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -#: ipaserver/plugins/baseldap.py:2548 -msgid "one or more values to remove" -msgstr "" - -#: ipaserver/plugins/batch.py:35 -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\"," -"\"all\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -#: ipaserver/plugins/batch.py:71 -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -#: ipaserver/plugins/batch.py:122 -msgid "must contain a tuple (list, dict)" -msgstr "" - -#: ipaserver/plugins/dogtag.py:1251 -msgid "REST API is not logged in." -msgstr "" - -#: ipaserver/plugins/dogtag.py:1273 -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -#: ipaserver/plugins/dogtag.py:1299 -msgid "Unable to communicate with CMS" -msgstr "" - -#: ipaserver/plugins/dogtag.py:1490 ipaserver/plugins/dogtag.py:1576 -#: ipaserver/plugins/dogtag.py:2083 ipaserver/plugins/dogtag.py:2093 -msgid "Response from CA was not valid JSON" -msgstr "" - -#: ipaserver/plugins/hbactest.py:39 ipaserver/plugins/cert.py:64 -msgid "pyhbac is not installed." -msgstr "" - -#: ipaserver/plugins/hbactest.py:45 -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -#: ipaserver/plugins/hbactest.py:384 -msgid "Unresolved rules in --rules" -msgstr "" - -#: ipaserver/plugins/hbactest.py:408 ipaserver/plugins/trust.py:345 -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#: ipaserver/plugins/hbactest.py:497 -#, python-format -msgid "Access granted: %s" -msgstr "" - -#: ipaserver/plugins/permission.py:40 -msgid "" -"\n" -"Permissions\n" -msgstr "" - -#: ipaserver/plugins/permission.py:42 -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -#: ipaserver/plugins/permission.py:48 -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -#: ipaserver/plugins/permission.py:50 -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -#: ipaserver/plugins/permission.py:56 -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -#: ipaserver/plugins/permission.py:62 -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -#: ipaserver/plugins/permission.py:72 -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -#: ipaserver/plugins/permission.py:76 -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -#: ipaserver/plugins/permission.py:81 -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -#: ipaserver/plugins/permission.py:88 -msgid "" -"\n" -"Managed permissions\n" -msgstr "" - -#: ipaserver/plugins/permission.py:90 -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -#: ipaserver/plugins/permission.py:94 -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -#: ipaserver/plugins/permission.py:99 -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -#: ipaserver/plugins/permission.py:102 -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -#: ipaserver/plugins/permission.py:129 -msgid "must be enclosed in parentheses" -msgstr "" - -#: ipaserver/plugins/permission.py:149 -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#: ipaserver/plugins/permission.py:151 ipaserver/plugins/permission.py:897 -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#: ipaserver/plugins/permission.py:353 -#, python-format -msgid "Deprecated; use %s" -msgstr "" - -#: ipaserver/plugins/permission.py:370 -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -#: ipaserver/plugins/permission.py:374 -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#: ipaserver/plugins/permission.py:624 -#, python-format -msgid "Entry %s not found" -msgstr "" - -#: ipaserver/plugins/permission.py:716 -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -#: ipaserver/plugins/permission.py:820 -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#: ipaserver/plugins/permission.py:843 -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#: ipaserver/plugins/permission.py:847 -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#: ipaserver/plugins/permission.py:861 ipaserver/plugins/permission.py:876 -#, python-format -msgid "%s: group not found" -msgstr "" - -#: ipaserver/plugins/permission.py:871 -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -#: ipaserver/plugins/permission.py:892 -msgid "subtree and type are mutually exclusive" -msgstr "" - -#: ipaserver/plugins/permission.py:930 -msgid "Bad search filter" -msgstr "" - -#: ipaserver/plugins/permission.py:940 -#, python-format -msgid "Entry %s does not exist" -msgstr "" - -#: ipaserver/plugins/permission.py:949 -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#: ipaserver/plugins/permission.py:961 ipaserver/plugins/permission.py:989 -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/permission.py:1014 -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#: ipaserver/plugins/permission.py:1046 -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#: ipaserver/plugins/permission.py:1057 -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/permission.py:1077 -msgid "cannot delete managed permissions" -msgstr "" - -#: ipaserver/plugins/permission.py:1083 -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#: ipaserver/plugins/permission.py:1092 -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/permission.py:1125 -msgid "cannot rename managed permissions" -msgstr "" - -#: ipaserver/plugins/permission.py:1132 ipaserver/plugins/permission.py:1136 -msgid "not modifiable on managed permissions" -msgstr "" - -#: ipaserver/plugins/permission.py:1143 -msgid "only available on managed permissions" -msgstr "" - -#: ipaserver/plugins/permission.py:1150 ipaserver/plugins/permission.py:1276 -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -#: ipaserver/plugins/permission.py:1161 -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#: ipaserver/plugins/permission.py:1265 -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/privilege.py:76 -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -#: ipaserver/plugins/privilege.py:149 -msgid "Privilege" -msgstr "" - -#: ipaserver/plugins/privilege.py:169 -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/privilege.py:176 -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/privilege.py:183 -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/privilege.py:191 -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/schema.py:24 -msgid "" -"\n" -"API Schema\n" -msgstr "" - -#: ipaserver/plugins/schema.py:26 -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -#: ipaserver/plugins/schema.py:30 -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -#: ipaserver/plugins/schema.py:33 -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -#: ipaserver/plugins/schema.py:48 ipaserver/plugins/trust.py:1419 -#: ipaserver/plugins/ca.py:86 -msgid "Name" -msgstr "" - -#: ipaserver/plugins/schema.py:54 -msgid "Documentation" -msgstr "" - -#: ipaserver/plugins/schema.py:59 -msgid "Exclude from" -msgstr "" - -#: ipaserver/plugins/schema.py:64 -msgid "Include in" -msgstr "" - -#: ipaserver/plugins/schema.py:135 -msgid "Help topic" -msgstr "" - -#: ipaserver/plugins/schema.py:147 ipaserver/plugins/internal.py:731 -msgid "Version" -msgstr "" - -#: ipaserver/plugins/schema.py:172 -msgid "Parameters" -msgstr "" - -#: ipaserver/plugins/schema.py:207 -msgid "Method of" -msgstr "" - -#: ipaserver/plugins/schema.py:212 -msgid "Method name" -msgstr "" - -#: ipaserver/plugins/schema.py:270 -msgid "Display information about a command." -msgstr "" - -#: ipaserver/plugins/schema.py:275 -msgid "Search for commands." -msgstr "" - -#: ipaserver/plugins/schema.py:280 -msgid "Return command defaults" -msgstr "" - -#: ipaserver/plugins/schema.py:291 -#, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "" - -#: ipaserver/plugins/schema.py:344 -msgid "Display information about a class." -msgstr "" - -#: ipaserver/plugins/schema.py:349 -msgid "Search for classes." -msgstr "등급 검색." - -#: ipaserver/plugins/schema.py:436 -msgid "Display information about a help topic." -msgstr "도움말 주제에 대한 정보를 표시합니다." - -#: ipaserver/plugins/schema.py:441 -msgid "Search for help topics." -msgstr "" - -#: ipaserver/plugins/schema.py:453 -msgid "Required" -msgstr "" - -#: ipaserver/plugins/schema.py:458 -msgid "Multi-value" -msgstr "" - -#: ipaserver/plugins/schema.py:508 -msgid "Always ask" -msgstr "" - -#: ipaserver/plugins/schema.py:513 -msgid "CLI metavar" -msgstr "" - -#: ipaserver/plugins/schema.py:518 -msgid "CLI name" -msgstr "" - -#: ipaserver/plugins/schema.py:523 -msgid "Confirm (password)" -msgstr "" - -#: ipaserver/plugins/schema.py:528 -msgid "Default" -msgstr "" - -#: ipaserver/plugins/schema.py:533 -msgid "Default from" -msgstr "" - -#: ipaserver/plugins/schema.py:538 -msgid "Label" -msgstr "" - -#: ipaserver/plugins/schema.py:543 -msgid "Convert on server" -msgstr "" - -#: ipaserver/plugins/schema.py:548 -msgid "Option group" -msgstr "" - -#: ipaserver/plugins/schema.py:553 -msgid "Sensitive" -msgstr "" - -#: ipaserver/plugins/schema.py:558 -msgid "Positional argument" -msgstr "" - -#: ipaserver/plugins/schema.py:643 -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -#: ipaserver/plugins/schema.py:682 -msgid "Display information about a command parameter." -msgstr "" - -#: ipaserver/plugins/schema.py:687 -msgid "Search command parameters." -msgstr "" - -#: ipaserver/plugins/schema.py:744 -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -#: ipaserver/plugins/schema.py:769 -msgid "Display information about a command output." -msgstr "" - -#: ipaserver/plugins/schema.py:774 -msgid "Search for command outputs." -msgstr "" - -#: ipaserver/plugins/schema.py:779 -msgid "Store and provide schema for commands and topics" -msgstr "" - -#: ipaserver/plugins/schema.py:785 -msgid "Fingerprint of schema cached by client" -msgstr "" - -#: ipaserver/plugins/trust.py:83 -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " -"Group\"\n" -msgstr "" - -#: ipaserver/plugins/trust.py:226 -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -#: ipaserver/plugins/trust.py:239 ipaserver/plugins/trust.py:872 -#: ipaserver/plugins/trust.py:888 ipaserver/plugins/trust.py:909 -#: ipaserver/plugins/trust.py:919 ipaserver/plugins/trust.py:1072 -#: ipaserver/plugins/trust.py:1107 -msgid "AD Trust setup" -msgstr "" - -#: ipaserver/plugins/trust.py:250 -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -#: ipaserver/plugins/trust.py:260 -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -#: ipaserver/plugins/trust.py:474 -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -#: ipaserver/plugins/trust.py:487 -msgid "trust" -msgstr "" - -#: ipaserver/plugins/trust.py:488 -msgid "trusts" -msgstr "" - -#: ipaserver/plugins/trust.py:530 ipaserver/plugins/internal.py:1966 -msgid "Trusts" -msgstr "" - -#: ipaserver/plugins/trust.py:531 -msgid "Trust" -msgstr "" - -#: ipaserver/plugins/trust.py:549 -msgid "SID blocklist incoming" -msgstr "" - -#: ipaserver/plugins/trust.py:553 -msgid "SID blocklist outgoing" -msgstr "" - -#: ipaserver/plugins/trust.py:556 ipaserver/plugins/internal.py:1553 -msgid "Trust direction" -msgstr "" - -#: ipaserver/plugins/trust.py:560 ipaserver/plugins/internal.py:1555 -msgid "Trust type" -msgstr "" - -#: ipaserver/plugins/trust.py:564 ipaserver/plugins/internal.py:1554 -msgid "Trust status" -msgstr "" - -#: ipaserver/plugins/trust.py:569 -msgid "UPN suffixes" -msgstr "" - -#: ipaserver/plugins/trust.py:586 -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -#: ipaserver/plugins/trust.py:655 -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -#: ipaserver/plugins/trust.py:713 -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -#: ipaserver/plugins/trust.py:725 -msgid "External trust" -msgstr "" - -#: ipaserver/plugins/trust.py:727 -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#: ipaserver/plugins/trust.py:733 -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/trust.py:734 -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/trust.py:830 -msgid "missing base_id" -msgstr "" - -#: ipaserver/plugins/trust.py:832 -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -#: ipaserver/plugins/trust.py:842 -msgid "trust type" -msgstr "" - -#: ipaserver/plugins/trust.py:843 -msgid "only \"ad\" is supported" -msgstr "" - -#: ipaserver/plugins/trust.py:849 ipaserver/plugins/certmap.py:141 -#: ipaserver/plugins/certmap.py:148 ipaserver/plugins/certmap.py:175 -msgid "domain" -msgstr "" - -#: ipaserver/plugins/trust.py:850 -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -#: ipaserver/plugins/trust.py:863 -msgid "Realm-domain mismatch" -msgstr "" - -#: ipaserver/plugins/trust.py:864 -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#: ipaserver/plugins/trust.py:890 -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -#: ipaserver/plugins/trust.py:911 -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -#: ipaserver/plugins/trust.py:920 -msgid "Realm administrator password should be specified" -msgstr "" - -#: ipaserver/plugins/trust.py:941 -msgid "id range type" -msgstr "" - -#: ipaserver/plugins/trust.py:943 -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -#: ipaserver/plugins/trust.py:953 -msgid "id range" -msgstr "" - -#: ipaserver/plugins/trust.py:955 -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -#: ipaserver/plugins/trust.py:977 -msgid "range exists" -msgstr "" - -#: ipaserver/plugins/trust.py:979 -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -#: ipaserver/plugins/trust.py:987 -msgid "range type change" -msgstr "" - -#: ipaserver/plugins/trust.py:988 -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#: ipaserver/plugins/trust.py:1026 -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -#: ipaserver/plugins/trust.py:1040 -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#: ipaserver/plugins/trust.py:1046 -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#: ipaserver/plugins/trust.py:1058 -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -#: ipaserver/plugins/trust.py:1073 -msgid "Unable to verify write permissions to the AD" -msgstr "" - -#: ipaserver/plugins/trust.py:1108 -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#: ipaserver/plugins/trust.py:1116 -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/trust.py:1121 -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#: ipaserver/plugins/trust.py:1128 -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#: ipaserver/plugins/trust.py:1146 -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/trust.py:1235 -msgid "trust configuration" -msgstr "" - -#: ipaserver/plugins/trust.py:1241 ipaserver/plugins/trust.py:1242 -msgid "Global Trust Configuration" -msgstr "" - -#: ipaserver/plugins/trust.py:1267 -msgid "IPA AD trust agents" -msgstr "" - -#: ipaserver/plugins/trust.py:1268 -msgid "IPA servers configured as AD trust agents" -msgstr "" - -#: ipaserver/plugins/trust.py:1273 -msgid "IPA AD trust controllers" -msgstr "" - -#: ipaserver/plugins/trust.py:1274 -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -#: ipaserver/plugins/trust.py:1288 -msgid "unsupported trust type" -msgstr "" - -#: ipaserver/plugins/trust.py:1355 -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -#: ipaserver/plugins/trust.py:1420 -msgid "SID" -msgstr "" - -#: ipaserver/plugins/trust.py:1546 -msgid "sidgen_was_run" -msgstr "" - -#: ipaserver/plugins/trust.py:1548 -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -#: ipaserver/plugins/trust.py:1567 -msgid "trust domain" -msgstr "" - -#: ipaserver/plugins/trust.py:1568 -msgid "trust domains" -msgstr "" - -#: ipaserver/plugins/trust.py:1576 -msgid "Trusted domains" -msgstr "" - -#: ipaserver/plugins/trust.py:1577 -msgid "Trusted domain" -msgstr "" - -#: ipaserver/plugins/trust.py:1591 -msgid "Domain enabled" -msgstr "" - -#: ipaserver/plugins/trust.py:1663 -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/trust.py:1681 -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -#: ipaserver/plugins/trust.py:1832 -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -#: ipaserver/plugins/trust.py:1840 -msgid "Configure this server as a trust agent." -msgstr "" - -#: ipaserver/plugins/trust.py:1856 -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#: ipaserver/plugins/trust.py:1872 -msgid "not allowed to remotely add agent" -msgstr "" - -#: ipaserver/plugins/trust.py:1908 -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/trust.py:1917 -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#: ipaserver/plugins/trust.py:1950 -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/trust.py:1959 -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -#: ipaserver/plugins/vault.py:52 -msgid "" -"\n" -"Vaults\n" -msgstr "" - -#: ipaserver/plugins/vault.py:54 -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -#: ipaserver/plugins/vault.py:56 -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -#: ipaserver/plugins/vault.py:60 -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -#: ipaserver/plugins/vault.py:65 -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -#: ipaserver/plugins/vault.py:70 -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -#: ipaserver/plugins/vault.py:76 -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -#: ipaserver/plugins/vault.py:80 -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -#: ipaserver/plugins/vault.py:84 -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -#: ipaserver/plugins/vault.py:90 -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -#: ipaserver/plugins/vault.py:94 -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -#: ipaserver/plugins/vault.py:99 -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -#: ipaserver/plugins/vault.py:104 -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -#: ipaserver/plugins/vault.py:109 -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -#: ipaserver/plugins/vault.py:113 -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -#: ipaserver/plugins/vault.py:118 -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -#: ipaserver/plugins/vault.py:125 -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -#: ipaserver/plugins/vault.py:138 -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -#: ipaserver/plugins/vault.py:144 -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -#: ipaserver/plugins/vault.py:148 -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -#: ipaserver/plugins/vault.py:151 -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -#: ipaserver/plugins/vault.py:156 -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -#: ipaserver/plugins/vault.py:162 -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -#: ipaserver/plugins/vault.py:167 -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -#: ipaserver/plugins/vault.py:172 -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -#: ipaserver/plugins/vault.py:178 -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -#: ipaserver/plugins/vault.py:183 -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -#: ipaserver/plugins/vault.py:188 -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -#: ipaserver/plugins/vault.py:193 -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -#: ipaserver/plugins/vault.py:198 -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -#: ipaserver/plugins/vault.py:250 -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -#: ipaserver/plugins/vault.py:256 -msgid "vaultcontainer" -msgstr "" - -#: ipaserver/plugins/vault.py:257 -msgid "vaultcontainers" -msgstr "" - -#: ipaserver/plugins/vault.py:265 -msgid "Vault Containers" -msgstr "" - -#: ipaserver/plugins/vault.py:266 -msgid "Vault Container" -msgstr "" - -#: ipaserver/plugins/vault.py:355 -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -#: ipaserver/plugins/vault.py:365 ipaserver/plugins/vault.py:695 -msgid "Host is not supported" -msgstr "" - -#: ipaserver/plugins/vault.py:407 ipaserver/plugins/vault.py:431 -#: ipaserver/plugins/vault.py:798 ipaserver/plugins/vault.py:836 -#: ipaserver/plugins/vault.py:892 ipaserver/plugins/vault.py:948 -#: ipaserver/plugins/vault.py:970 ipaserver/plugins/vault.py:1011 -#: ipaserver/plugins/vault.py:1067 ipaserver/plugins/vault.py:1146 -msgid "KRA service is not enabled" -msgstr "" - -#: ipaserver/plugins/vault.py:422 -msgid "Deleted vault container" -msgstr "" - -#: ipaserver/plugins/vault.py:447 ipaserver/plugins/vault.py:472 -#: ipaserver/plugins/vault.py:1203 ipaserver/plugins/vault.py:1228 -#, python-format -msgid "owner %s" -msgstr "" - -#: ipaserver/plugins/vault.py:492 -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -#: ipaserver/plugins/vault.py:498 -msgid "vault" -msgstr "" - -#: ipaserver/plugins/vault.py:499 -msgid "vaults" -msgstr "" - -#: ipaserver/plugins/vault.py:522 -msgid "Vaults" -msgstr "" - -#: ipaserver/plugins/vault.py:523 -msgid "Vault" -msgstr "" - -#: ipaserver/plugins/vault.py:680 -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -#: ipaserver/plugins/vault.py:784 -msgid "Add a vault." -msgstr "" - -#: ipaserver/plugins/vault.py:790 -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/vault.py:829 -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/vault.py:881 -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/vault.py:899 -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#: ipaserver/plugins/vault.py:939 -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/vault.py:981 -msgid "Vault configuration" -msgstr "" - -#: ipaserver/plugins/vault.py:990 ipaserver/plugins/config.py:317 -msgid "IPA KRA servers" -msgstr "" - -#: ipaserver/plugins/vault.py:991 -msgid "IPA servers configured as key recovery agents" -msgstr "" - -#: ipaserver/plugins/vault.py:1052 ipaserver/plugins/vault.py:1131 -msgid "Key wrapping algorithm" -msgstr "" - -#: ipaserver/plugins/vault.py:1061 -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/vault.py:1120 -msgid "Retrieve data from a vault." -msgstr "" - -#: ipaserver/plugins/vault.py:1140 -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/vault.py:1169 -msgid "No archived data." -msgstr "" - -#: ipaserver/plugins/vault.py:1262 -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -#: ipaserver/plugins/baseuser.py:57 -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -#: ipaserver/plugins/baseuser.py:88 -msgid "must be TRUE or FALSE" -msgstr "" - -#: ipaserver/plugins/baseuser.py:154 -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -#: ipaserver/plugins/baseuser.py:269 ipaserver/plugins/host.py:562 -#: ipaserver/plugins/service.py:511 -msgid "Principal alias" -msgstr "" - -#: ipaserver/plugins/baseuser.py:281 -msgid "User password expiration" -msgstr "" - -#: ipaserver/plugins/baseuser.py:365 ipaserver/plugins/host.py:581 -msgid "SSH public key fingerprint" -msgstr "SSH 공유 키 지문" - -#: ipaserver/plugins/baseuser.py:392 -msgid "External IdP configuration" -msgstr "" - -#: ipaserver/plugins/baseuser.py:396 -msgid "External IdP user identifier" -msgstr "" - -#: ipaserver/plugins/baseuser.py:397 -msgid "A string that identifies the user at external IdP" -msgstr "" - -#: ipaserver/plugins/baseuser.py:421 ipaserver/plugins/baseuser.py:887 -#: ipaserver/plugins/certmap.py:606 ipaserver/plugins/idviews.py:1061 -msgid "Base-64 encoded user certificate" -msgstr "" - -#: ipaserver/plugins/baseuser.py:426 ipaserver/plugins/baseuser.py:427 -#: ipaserver/plugins/internal.py:722 -msgid "Certificate mapping data" -msgstr "" - -#: ipaserver/plugins/baseuser.py:432 -msgid "SMB logon script path" -msgstr "" - -#: ipaserver/plugins/baseuser.py:437 -msgid "SMB profile path" -msgstr "" - -#: ipaserver/plugins/baseuser.py:442 -msgid "SMB Home Directory" -msgstr "" - -#: ipaserver/plugins/baseuser.py:447 -msgid "SMB Home Directory Drive" -msgstr "" - -#: ipaserver/plugins/baseuser.py:471 ipaserver/plugins/baseuser.py:475 -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#: ipaserver/plugins/baseuser.py:502 -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -#: ipaserver/plugins/baseuser.py:598 ipaserver/plugins/host.py:694 -#: ipaserver/plugins/stageuser.py:329 ipaserver/plugins/stageuser.py:546 -#: ipaserver/plugins/user.py:563 -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -#: ipaserver/plugins/baseuser.py:872 ipaserver/plugins/host.py:529 -#: ipaserver/plugins/internal.py:727 ipaserver/plugins/service.py:536 -#: ipaserver/plugins/cert.py:425 -msgid "Issuer" -msgstr "" - -#: ipaserver/plugins/baseuser.py:873 -msgid "Issuer of the certificate" -msgstr "" - -#: ipaserver/plugins/baseuser.py:879 ipaserver/plugins/host.py:517 -#: ipaserver/plugins/internal.py:654 ipaserver/plugins/internal.py:730 -#: ipaserver/plugins/service.py:524 ipaserver/plugins/cert.py:365 -#: ipaserver/plugins/cert.py:1501 -msgid "Subject" -msgstr "" - -#: ipaserver/plugins/baseuser.py:880 -msgid "Subject of the certificate" -msgstr "" - -#: ipaserver/plugins/baseuser.py:925 -msgid "cannot have an empty subject" -msgstr "" - -#: ipaserver/plugins/baseuser.py:965 -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -#: ipaserver/plugins/baseuser.py:969 -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -#: ipaserver/plugins/baseuser.py:993 ipaserver/plugins/user.py:1329 -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#: ipaserver/plugins/baseuser.py:994 -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/baseuser.py:1012 ipaserver/plugins/user.py:1334 -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#: ipaserver/plugins/baseuser.py:1013 -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/caacl.py:21 -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-" -"CA\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -#: ipaserver/plugins/caacl.py:87 ipaserver/plugins/caacl.py:165 -#: ipaserver/plugins/caacl.py:263 -msgid "CA ACL" -msgstr "" - -#: ipaserver/plugins/caacl.py:88 ipaserver/plugins/caacl.py:164 -msgid "CA ACLs" -msgstr "" - -#: ipaserver/plugins/caacl.py:183 -msgid "CA category" -msgstr "" - -#: ipaserver/plugins/caacl.py:184 -msgid "CA category the ACL applies to" -msgstr "" - -#: ipaserver/plugins/caacl.py:212 -msgid "CAs" -msgstr "" - -#: ipaserver/plugins/caacl.py:246 -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/caacl.py:258 -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/caacl.py:265 -msgid "default CA ACL can be only disabled" -msgstr "" - -#: ipaserver/plugins/caacl.py:273 -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/caacl.py:285 -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -#: ipaserver/plugins/caacl.py:290 -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -#: ipaserver/plugins/caacl.py:302 ipaserver/plugins/hbacrule.py:356 -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#: ipaserver/plugins/caacl.py:312 -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/caacl.py:325 -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/caacl.py:354 -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/caacl.py:385 -#, python-format -msgid "%i user or group added." -msgstr "" - -#: ipaserver/plugins/caacl.py:386 -#, python-format -msgid "%i users or groups added." -msgstr "" - -#: ipaserver/plugins/caacl.py:397 ipaserver/plugins/hbacrule.py:518 -#: ipaserver/plugins/selinuxusermap.py:572 ipaserver/plugins/sudorule.py:607 -msgid "users cannot be added when user category='all'" -msgstr "" - -#: ipaserver/plugins/caacl.py:407 -#, python-format -msgid "%i user or group removed." -msgstr "" - -#: ipaserver/plugins/caacl.py:408 -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#: ipaserver/plugins/caacl.py:417 -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#: ipaserver/plugins/caacl.py:418 -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -#: ipaserver/plugins/caacl.py:429 ipaserver/plugins/hbacrule.py:549 -#: ipaserver/plugins/selinuxusermap.py:605 ipaserver/plugins/sudorule.py:710 -msgid "hosts cannot be added when host category='all'" -msgstr "" - -#: ipaserver/plugins/caacl.py:439 -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#: ipaserver/plugins/caacl.py:440 -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#: ipaserver/plugins/caacl.py:448 -#, python-format -msgid "%i service added." -msgstr "" - -#: ipaserver/plugins/caacl.py:448 -#, python-format -msgid "%i services added." -msgstr "" - -#: ipaserver/plugins/caacl.py:459 ipaserver/plugins/hbacrule.py:606 -msgid "services cannot be added when service category='all'" -msgstr "" - -#: ipaserver/plugins/caacl.py:468 -#, python-format -msgid "%i service removed." -msgstr "" - -#: ipaserver/plugins/caacl.py:468 -#, python-format -msgid "%i services removed." -msgstr "" - -#: ipaserver/plugins/caacl.py:488 -#, python-format -msgid "%i profile added." -msgstr "" - -#: ipaserver/plugins/caacl.py:488 -#, python-format -msgid "%i profiles added." -msgstr "" - -#: ipaserver/plugins/caacl.py:499 -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#: ipaserver/plugins/caacl.py:510 -#, python-format -msgid "%i profile removed." -msgstr "" - -#: ipaserver/plugins/caacl.py:510 -#, python-format -msgid "%i profiles removed." -msgstr "" - -#: ipaserver/plugins/caacl.py:515 -msgid "Add CAs to a CA ACL." -msgstr "" - -#: ipaserver/plugins/caacl.py:520 -#, python-format -msgid "%i CA added." -msgstr "" - -#: ipaserver/plugins/caacl.py:520 -#, python-format -msgid "%i CAs added." -msgstr "" - -#: ipaserver/plugins/caacl.py:531 -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -#: ipaserver/plugins/caacl.py:537 -msgid "Remove CAs from a CA ACL." -msgstr "" - -#: ipaserver/plugins/caacl.py:542 -#, python-format -msgid "%i CA removed." -msgstr "" - -#: ipaserver/plugins/caacl.py:542 -#, python-format -msgid "%i CAs removed." -msgstr "" - -#: ipaserver/plugins/certmap.py:50 -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:52 -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:54 -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:62 -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:65 -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:68 -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:71 -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:74 -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:77 -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:80 -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:83 -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:86 -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#: ipaserver/plugins/certmap.py:142 -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -#: ipaserver/plugins/certmap.py:149 -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#: ipaserver/plugins/certmap.py:176 -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -#: ipaserver/plugins/certmap.py:186 -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -#: ipaserver/plugins/certmap.py:191 ipaserver/plugins/certmap.py:192 -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -#: ipaserver/plugins/certmap.py:198 -msgid "Prompt for the username" -msgstr "" - -#: ipaserver/plugins/certmap.py:199 -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -#: ipaserver/plugins/certmap.py:229 -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -#: ipaserver/plugins/certmap.py:234 -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -#: ipaserver/plugins/certmap.py:243 ipaserver/plugins/certmap.py:247 -msgid "Certificate Identity Mapping Rules" -msgstr "" - -#: ipaserver/plugins/certmap.py:244 ipaserver/plugins/certmap.py:246 -msgid "Certificate Identity Mapping Rule" -msgstr "" - -#: ipaserver/plugins/certmap.py:274 -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -#: ipaserver/plugins/certmap.py:280 -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -#: ipaserver/plugins/certmap.py:285 -msgid "Mapping rule" -msgstr "" - -#: ipaserver/plugins/certmap.py:286 -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -#: ipaserver/plugins/certmap.py:291 -msgid "Matching rule" -msgstr "" - -#: ipaserver/plugins/certmap.py:292 -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -#: ipaserver/plugins/certmap.py:299 -msgid "Domain where the user entry will be searched" -msgstr "" - -#: ipaserver/plugins/certmap.py:305 -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -#: ipaserver/plugins/certmap.py:356 -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#: ipaserver/plugins/certmap.py:358 -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certmap.py:369 -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#: ipaserver/plugins/certmap.py:371 -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certmap.py:392 -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#: ipaserver/plugins/certmap.py:395 -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/certmap.py:402 -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -#: ipaserver/plugins/certmap.py:408 -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#: ipaserver/plugins/certmap.py:410 -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certmap.py:415 -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#: ipaserver/plugins/certmap.py:417 -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certmap.py:444 -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#: ipaserver/plugins/certmap.py:446 -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/certmap.py:500 -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -#: ipaserver/plugins/certmap.py:554 -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -#: ipaserver/plugins/certmap.py:571 -msgid "User logins" -msgstr "" - -#: ipaserver/plugins/certmap.py:579 -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#: ipaserver/plugins/certmap.py:587 -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/config.py:50 -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -#: ipaserver/plugins/config.py:116 -msgid "must be at least 10" -msgstr "" - -#: ipaserver/plugins/config.py:124 -msgid "configuration options" -msgstr "" - -#: ipaserver/plugins/config.py:160 ipaserver/plugins/config.py:161 -msgid "Configuration" -msgstr "" - -#: ipaserver/plugins/config.py:172 -msgid "Maximum hostname length" -msgstr "" - -#: ipaserver/plugins/config.py:276 ipaserver/plugins/config.py:277 -msgid "Enable adding subids to new users" -msgstr "" - -#: ipaserver/plugins/config.py:281 -msgid "IPA masters" -msgstr "" - -#: ipaserver/plugins/config.py:282 -msgid "List of all IPA masters" -msgstr "" - -#: ipaserver/plugins/config.py:287 -msgid "Hidden IPA masters" -msgstr "" - -#: ipaserver/plugins/config.py:288 -msgid "List of all hidden IPA masters" -msgstr "" - -#: ipaserver/plugins/config.py:293 -msgid "IPA master capable of PKINIT" -msgstr "" - -#: ipaserver/plugins/config.py:294 -msgid "IPA master which can process PKINIT requests" -msgstr "" - -#: ipaserver/plugins/config.py:299 -msgid "IPA CA servers" -msgstr "" - -#: ipaserver/plugins/config.py:300 -msgid "IPA servers configured as certificate authority" -msgstr "" - -#: ipaserver/plugins/config.py:305 -msgid "Hidden IPA CA servers" -msgstr "" - -#: ipaserver/plugins/config.py:306 -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -#: ipaserver/plugins/config.py:311 -msgid "IPA CA renewal master" -msgstr "" - -#: ipaserver/plugins/config.py:312 -msgid "Renewal master for IPA certificate authority" -msgstr "" - -#: ipaserver/plugins/config.py:318 -msgid "IPA servers configured as key recovery agent" -msgstr "" - -#: ipaserver/plugins/config.py:323 -msgid "Hidden IPA KRA servers" -msgstr "" - -#: ipaserver/plugins/config.py:324 -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -#: ipaserver/plugins/config.py:330 ipaserver/plugins/idviews.py:159 -msgid "Domain resolution order" -msgstr "" - -#: ipaserver/plugins/config.py:331 ipaserver/plugins/idviews.py:160 -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -#: ipaserver/plugins/config.py:336 ipaserver/plugins/dns.py:4147 -msgid "IPA DNS servers" -msgstr "" - -#: ipaserver/plugins/config.py:337 -msgid "IPA servers configured as domain name server" -msgstr "" - -#: ipaserver/plugins/config.py:342 -msgid "Hidden IPA DNS servers" -msgstr "" - -#: ipaserver/plugins/config.py:343 -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -#: ipaserver/plugins/config.py:348 ipaserver/plugins/dns.py:4153 -msgid "IPA DNSSec key master" -msgstr "" - -#: ipaserver/plugins/config.py:349 -msgid "DNSec key master" -msgstr "" - -#: ipaserver/plugins/config.py:354 -msgid "Setup SID configuration" -msgstr "" - -#: ipaserver/plugins/config.py:355 -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -#: ipaserver/plugins/config.py:360 -msgid "Add SIDs" -msgstr "" - -#: ipaserver/plugins/config.py:361 -msgid "Add SIDs for existing users and groups" -msgstr "" - -#: ipaserver/plugins/config.py:366 ipaserver/plugins/config.py:367 -msgid "NetBIOS name of the IPA domain" -msgstr "" - -#: ipaserver/plugins/config.py:444 -msgid "Empty domain is not allowed" -msgstr "" - -#: ipaserver/plugins/config.py:452 -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#: ipaserver/plugins/config.py:457 -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#: ipaserver/plugins/config.py:464 -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -#: ipaserver/plugins/config.py:514 -msgid "not allowed to enable SID generation" -msgstr "" - -#: ipaserver/plugins/config.py:522 -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -#: ipaserver/plugins/config.py:550 -msgid "Failed to call DBus" -msgstr "" - -#: ipaserver/plugins/config.py:560 -msgid "Configuration of SID failed. See details in the error log" -msgstr "" - -#: ipaserver/plugins/config.py:570 -msgid "The group doesn't exist" -msgstr "" - -#: ipaserver/plugins/config.py:588 -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -#: ipaserver/plugins/config.py:608 -msgid "May not be empty" -msgstr "" - -#: ipaserver/plugins/config.py:627 -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -#: ipaserver/plugins/config.py:659 -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#: ipaserver/plugins/config.py:663 -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -#: ipaserver/plugins/config.py:675 -msgid "SELinux user map default user not in order list" -msgstr "" - -#: ipaserver/plugins/config.py:694 -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -#: ipaserver/plugins/dns.py:100 -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -#: ipaserver/plugins/dns.py:102 -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:104 -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -#: ipaserver/plugins/dns.py:110 -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -#: ipaserver/plugins/dns.py:112 -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -#: ipaserver/plugins/dns.py:118 -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:126 -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -#: ipaserver/plugins/dns.py:135 -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -#: ipaserver/plugins/dns.py:138 -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -#: ipaserver/plugins/dns.py:141 -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -#: ipaserver/plugins/dns.py:144 -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -#: ipaserver/plugins/dns.py:147 -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -#: ipaserver/plugins/dns.py:151 -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -#: ipaserver/plugins/dns.py:154 -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -#: ipaserver/plugins/dns.py:157 -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -#: ipaserver/plugins/dns.py:160 -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -#: ipaserver/plugins/dns.py:163 -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -#: ipaserver/plugins/dns.py:166 -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:179 -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:182 -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -#: ipaserver/plugins/dns.py:185 -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -#: ipaserver/plugins/dns.py:190 -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:193 -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -#: ipaserver/plugins/dns.py:200 -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -#: ipaserver/plugins/dns.py:217 -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:220 -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -#: ipaserver/plugins/dns.py:233 -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -#: ipaserver/plugins/dns.py:236 -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -#: ipaserver/plugins/dns.py:239 -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -#: ipaserver/plugins/dns.py:242 -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -#: ipaserver/plugins/dns.py:245 -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -#: ipaserver/plugins/dns.py:248 -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:252 -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -#: ipaserver/plugins/dns.py:255 -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:259 -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:270 -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -#: ipaserver/plugins/dns.py:277 -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -#: ipaserver/plugins/dns.py:280 -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -#: ipaserver/plugins/dns.py:284 -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -#: ipaserver/plugins/dns.py:290 -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -#: ipaserver/plugins/dns.py:293 -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -#: ipaserver/plugins/dns.py:296 -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -#: ipaserver/plugins/dns.py:299 -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -#: ipaserver/plugins/dns.py:302 -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -#: ipaserver/plugins/dns.py:307 -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -#: ipaserver/plugins/dns.py:310 -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -#: ipaserver/plugins/dns.py:315 -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -#: ipaserver/plugins/dns.py:318 -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -#: ipaserver/plugins/dns.py:406 -msgid "invalid IP network format" -msgstr "" - -#: ipaserver/plugins/dns.py:415 -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -#: ipaserver/plugins/dns.py:431 -msgid "invalid address format" -msgstr "" - -#: ipaserver/plugins/dns.py:475 -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -#: ipaserver/plugins/dns.py:484 -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -#: ipaserver/plugins/dns.py:487 -msgid "flags value: allowed interval 0-255" -msgstr "" - -#: ipaserver/plugins/dns.py:490 -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#: ipaserver/plugins/dns.py:498 -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -#: ipaserver/plugins/dns.py:505 -msgid "invalid domain-name: not fully qualified" -msgstr "" - -#: ipaserver/plugins/dns.py:514 -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#: ipaserver/plugins/dns.py:555 -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#: ipaserver/plugins/dns.py:561 -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#: ipaserver/plugins/dns.py:571 -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#: ipaserver/plugins/dns.py:588 -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#: ipaserver/plugins/dns.py:603 -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#: ipaserver/plugins/dns.py:613 -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#: ipaserver/plugins/dns.py:688 -#, python-format -msgid "%s record" -msgstr "" - -#: ipaserver/plugins/dns.py:690 -#, python-format -msgid "Raw %s records" -msgstr "" - -#: ipaserver/plugins/dns.py:691 -#, python-format -msgid "%s Record" -msgstr "" - -#: ipaserver/plugins/dns.py:692 -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#: ipaserver/plugins/dns.py:754 -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -#: ipaserver/plugins/dns.py:761 -msgid "Invalid number of parts!" -msgstr "" - -#: ipaserver/plugins/dns.py:813 -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#: ipaserver/plugins/dns.py:829 -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -#: ipaserver/plugins/dns.py:904 -msgid "Create reverse" -msgstr "" - -#: ipaserver/plugins/dns.py:940 -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -#: ipaserver/plugins/dns.py:1115 ipaserver/plugins/dns.py:1272 -msgid "Exchanger" -msgstr "" - -#: ipaserver/plugins/dns.py:1190 -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#: ipaserver/plugins/dns.py:1244 -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -#: ipaserver/plugins/dns.py:1299 -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -#: ipaserver/plugins/dns.py:1360 ipaserver/plugins/dns.py:1490 -msgid "Priority (order)" -msgstr "" - -#: ipaserver/plugins/dns.py:1361 -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -#: ipaserver/plugins/dns.py:1369 ipaserver/plugins/dns.py:1499 -msgid "Relative weight for entries with the same priority." -msgstr "" - -#: ipaserver/plugins/dns.py:1389 -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -#: ipaserver/plugins/dns.py:1491 -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -#: ipaserver/plugins/dns.py:1504 -msgid "Target Uniform Resource Identifier" -msgstr "" - -#: ipaserver/plugins/dns.py:1505 -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#: ipaserver/plugins/dns.py:1587 -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -#: ipaserver/plugins/dns.py:2056 -msgid "Managedby permission" -msgstr "" - -#: ipaserver/plugins/dns.py:2157 -msgid "cannot be used when a zone is specified" -msgstr "" - -#: ipaserver/plugins/dns.py:2169 -msgid "Only one zone type is allowed per zone name" -msgstr "" - -#: ipaserver/plugins/dns.py:2312 -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:2342 -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "" - -#: ipaserver/plugins/dns.py:2370 -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:2406 -msgid "DNS zone" -msgstr "" - -#: ipaserver/plugins/dns.py:2407 -msgid "DNS zones" -msgstr "" - -#: ipaserver/plugins/dns.py:2415 -msgid "DNS Zones" -msgstr "" - -#: ipaserver/plugins/dns.py:2416 -msgid "DNS Zone" -msgstr "" - -#: ipaserver/plugins/dns.py:2490 -msgid "Default time to live" -msgstr "" - -#: ipaserver/plugins/dns.py:2491 -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -#: ipaserver/plugins/dns.py:2706 -msgid "setting Authoritative nameserver" -msgstr "" - -#: ipaserver/plugins/dns.py:2707 -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -#: ipaserver/plugins/dns.py:2709 -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -#: ipaserver/plugins/dns.py:2744 -msgid "" -msgstr "" - -#: ipaserver/plugins/dns.py:2808 -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#: ipaserver/plugins/dns.py:2863 -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:2926 -msgid "is required" -msgstr "" - -#: ipaserver/plugins/dns.py:3008 -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:3019 -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:3044 -msgid "DNS resource record" -msgstr "" - -#: ipaserver/plugins/dns.py:3045 -msgid "DNS resource records" -msgstr "" - -#: ipaserver/plugins/dns.py:3052 -msgid "DNS Resource Records" -msgstr "" - -#: ipaserver/plugins/dns.py:3053 -msgid "DNS Resource Record" -msgstr "" - -#: ipaserver/plugins/dns.py:3088 -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -#: ipaserver/plugins/dns.py:3105 -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#: ipaserver/plugins/dns.py:3116 -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#: ipaserver/plugins/dns.py:3161 -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -#: ipaserver/plugins/dns.py:3203 -msgid "only master zones can contain records" -msgstr "" - -#: ipaserver/plugins/dns.py:3301 -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -#: ipaserver/plugins/dns.py:3307 -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -#: ipaserver/plugins/dns.py:3315 -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#: ipaserver/plugins/dns.py:3331 -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -#: ipaserver/plugins/dns.py:3347 -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#: ipaserver/plugins/dns.py:3628 -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -#: ipaserver/plugins/dns.py:3754 -msgid "DNS zone root record cannot be renamed" -msgstr "" - -#: ipaserver/plugins/dns.py:3772 -msgid "DNS records can be only updated one at a time" -msgstr "" - -#: ipaserver/plugins/dns.py:3865 -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:3958 -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#: ipaserver/plugins/dns.py:4060 -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#: ipaserver/plugins/dns.py:4075 -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -#: ipaserver/plugins/dns.py:4106 -msgid "DNS configuration options" -msgstr "" - -#: ipaserver/plugins/dns.py:4111 ipaserver/plugins/dns.py:4112 -msgid "DNS Global Configuration" -msgstr "" - -#: ipaserver/plugins/dns.py:4143 -msgid "IPA DNS version" -msgstr "" - -#: ipaserver/plugins/dns.py:4148 -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -#: ipaserver/plugins/dns.py:4154 -msgid "IPA server configured as DNSSec key master" -msgstr "" - -#: ipaserver/plugins/dns.py:4205 -msgid "Global DNS configuration is empty" -msgstr "" - -#: ipaserver/plugins/dns.py:4286 -msgid "DNS forward zone" -msgstr "" - -#: ipaserver/plugins/dns.py:4287 -msgid "DNS forward zones" -msgstr "" - -#: ipaserver/plugins/dns.py:4289 -msgid "DNS Forward Zones" -msgstr "" - -#: ipaserver/plugins/dns.py:4290 -msgid "DNS Forward Zone" -msgstr "" - -#: ipaserver/plugins/dns.py:4397 ipaserver/plugins/dns.py:4447 -msgid "Please specify forwarders." -msgstr "" - -#: ipaserver/plugins/dns.py:4416 -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:4473 -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:4479 -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/dns.py:4502 -msgid "IPA DNS records" -msgstr "" - -#: ipaserver/plugins/dns.py:4506 -msgid "IPA location records" -msgstr "" - -#: ipaserver/plugins/dns.py:4513 -msgid "Update location and IPA server DNS records" -msgstr "" - -#: ipaserver/plugins/dns.py:4524 -msgid "Result of the command" -msgstr "" - -#: ipaserver/plugins/dns.py:4531 -msgid "Dry run" -msgstr "" - -#: ipaserver/plugins/dns.py:4532 -msgid "Do not update records only return expected records" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:108 -msgid "The deny type has been deprecated." -msgstr "" - -#: ipaserver/plugins/hbacrule.py:131 -msgid "HBAC rules" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:201 -msgid "HBAC Rules" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:302 -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:316 -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:333 -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:368 -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/hbacrule.py:383 -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:413 -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:447 ipaserver/plugins/hbacrule.py:478 -msgid "Access time" -msgstr "" - -#: ipaserver/plugins/hbacrule.py:565 -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -#: ipaserver/plugins/host.py:74 -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -#: ipaserver/plugins/host.py:82 -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -#: ipaserver/plugins/host.py:94 -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -#: ipaserver/plugins/host.py:106 -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -#: ipaserver/plugins/host.py:109 -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:112 -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:115 -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:118 -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:121 -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:124 -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -#: ipaserver/plugins/host.py:127 -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -#: ipaserver/plugins/host.py:130 -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#: ipaserver/plugins/host.py:462 ipaserver/plugins/internal.py:1172 -#: ipaserver/plugins/internal.py:1294 -msgid "Host" -msgstr "" - -#: ipaserver/plugins/host.py:514 -msgid "Base-64 encoded host certificate" -msgstr "" - -#: ipaserver/plugins/host.py:521 ipaserver/plugins/internal.py:697 -#: ipaserver/plugins/service.py:528 -msgid "Serial Number" -msgstr "" - -#: ipaserver/plugins/host.py:525 ipaserver/plugins/internal.py:698 -#: ipaserver/plugins/service.py:532 -msgid "Serial Number (hex)" -msgstr "" - -#: ipaserver/plugins/host.py:533 ipaserver/plugins/service.py:540 -#: ipaserver/plugins/cert.py:431 -msgid "Not Before" -msgstr "" - -#: ipaserver/plugins/host.py:537 ipaserver/plugins/service.py:544 -#: ipaserver/plugins/cert.py:436 -msgid "Not After" -msgstr "" - -#: ipaserver/plugins/host.py:541 ipaserver/plugins/service.py:548 -#: ipaserver/plugins/cert.py:441 -msgid "Fingerprint (SHA1)" -msgstr "" - -#: ipaserver/plugins/host.py:545 ipaserver/plugins/service.py:552 -#: ipaserver/plugins/cert.py:446 -msgid "Fingerprint (SHA256)" -msgstr "" - -#: ipaserver/plugins/host.py:549 ipaserver/plugins/internal.py:651 -#: ipaserver/plugins/internal.py:692 ipaserver/plugins/service.py:556 -#: ipaserver/plugins/cert.py:1280 -msgid "Revocation reason" -msgstr "" - -#: ipaserver/plugins/host.py:597 ipaserver/plugins/service.py:570 -msgid "Authentication Indicators" -msgstr "" - -#: ipaserver/plugins/host.py:598 -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#: ipaserver/plugins/host.py:670 -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:794 -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:799 -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -#: ipaserver/plugins/host.py:871 -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#: ipaserver/plugins/host.py:887 -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:908 -msgid "Password cannot be set on enrolled host." -msgstr "" - -#: ipaserver/plugins/host.py:912 -msgid "cn is immutable" -msgstr "" - -#: ipaserver/plugins/host.py:1037 -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/host.py:1192 -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:1361 -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:1368 -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:1384 -msgid "Add new principal alias to host entry" -msgstr "" - -#: ipaserver/plugins/host.py:1385 -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/host.py:1396 -msgid "Remove principal alias from a host entry" -msgstr "" - -#: ipaserver/plugins/host.py:1397 -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idp.py:24 -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -#: ipaserver/plugins/idp.py:26 -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" - -#: ipaserver/plugins/idp.py:28 -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -#: ipaserver/plugins/idp.py:33 -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -#: ipaserver/plugins/idp.py:38 -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -#: ipaserver/plugins/idp.py:41 -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" - -#: ipaserver/plugins/idp.py:45 -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" - -#: ipaserver/plugins/idp.py:48 -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" - -#: ipaserver/plugins/idp.py:51 -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" - -#: ipaserver/plugins/idp.py:69 -msgid "Invalid URI: not an https scheme" -msgstr "" - -#: ipaserver/plugins/idp.py:72 -msgid "Invalid URI: missing netloc" -msgstr "" - -#: ipaserver/plugins/idp.py:83 ipaserver/plugins/idp.py:99 -msgid "Identity Provider server" -msgstr "" - -#: ipaserver/plugins/idp.py:84 ipaserver/plugins/idp.py:98 -msgid "Identity Provider servers" -msgstr "" - -#: ipaserver/plugins/idp.py:104 -msgid "Identity Provider server name" -msgstr "" - -#: ipaserver/plugins/idp.py:110 -msgid "Authorization URI" -msgstr "" - -#: ipaserver/plugins/idp.py:111 -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -#: ipaserver/plugins/idp.py:116 -msgid "Device authorization URI" -msgstr "" - -#: ipaserver/plugins/idp.py:117 -msgid "Device authorization endpoint" -msgstr "" - -#: ipaserver/plugins/idp.py:122 -msgid "Token URI" -msgstr "" - -#: ipaserver/plugins/idp.py:123 -msgid "Token endpoint" -msgstr "" - -#: ipaserver/plugins/idp.py:128 -msgid "User info URI" -msgstr "" - -#: ipaserver/plugins/idp.py:129 -msgid "User information endpoint" -msgstr "" - -#: ipaserver/plugins/idp.py:134 -msgid "JWKS URI" -msgstr "" - -#: ipaserver/plugins/idp.py:135 -msgid "JWKS endpoint" -msgstr "" - -#: ipaserver/plugins/idp.py:139 -msgid "OIDC URL" -msgstr "" - -#: ipaserver/plugins/idp.py:141 -msgid "The Identity Provider OIDC URL" -msgstr "" - -#: ipaserver/plugins/idp.py:145 -msgid "Client identifier" -msgstr "" - -#: ipaserver/plugins/idp.py:147 -msgid "OAuth 2.0 client identifier" -msgstr "" - -#: ipaserver/plugins/idp.py:152 -msgid "OAuth 2.0 client secret" -msgstr "" - -#: ipaserver/plugins/idp.py:158 -msgid "Scope" -msgstr "" - -#: ipaserver/plugins/idp.py:159 -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -#: ipaserver/plugins/idp.py:163 -msgid "External IdP user identifier attribute" -msgstr "" - -#: ipaserver/plugins/idp.py:164 -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -#: ipaserver/plugins/idp.py:228 -msgid "Add a new Identity Provider server." -msgstr "" - -#: ipaserver/plugins/idp.py:229 -#, python-format -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idp.py:308 -msgid "IdP provider template" -msgstr "" - -#: ipaserver/plugins/idp.py:309 -msgid "Choose a pre-defined template to use" -msgstr "" - -#: ipaserver/plugins/idp.py:315 ipaserver/plugins/internal.py:680 -msgid "Organization" -msgstr "" - -#: ipaserver/plugins/idp.py:316 -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -#: ipaserver/plugins/idp.py:320 -msgid "Base URL" -msgstr "" - -#: ipaserver/plugins/idp.py:321 -msgid "Base URL for IdP provider templates" -msgstr "" - -#: ipaserver/plugins/idp.py:335 -msgid "unknown provider" -msgstr "" - -#: ipaserver/plugins/idp.py:350 -msgid "value is missing" -msgstr "" - -#: ipaserver/plugins/idp.py:381 -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "" - -#: ipaserver/plugins/idp.py:412 -msgid "Delete an Identity Provider server." -msgstr "" - -#: ipaserver/plugins/idp.py:413 -#, python-format -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idp.py:418 -msgid "Modify an Identity Provider server." -msgstr "" - -#: ipaserver/plugins/idp.py:419 -#, python-format -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idp.py:424 -msgid "Search for Identity Provider servers." -msgstr "" - -#: ipaserver/plugins/idp.py:426 -#, python-format -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/idp.py:441 -msgid "Display information about an Identity Provider server." -msgstr "" - -#: ipaserver/plugins/internal.py:151 -msgid "Internationalization messages" -msgstr "" - -#: ipaserver/plugins/internal.py:157 -msgid "Your session has expired. Please log in again." -msgstr "" - -#: ipaserver/plugins/internal.py:161 ipaserver/plugins/internal.py:206 -msgid "Apply" -msgstr "" - -#: ipaserver/plugins/internal.py:162 -msgid "Rebuild auto membership" -msgstr "" - -#: ipaserver/plugins/internal.py:163 -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -#: ipaserver/plugins/internal.py:165 -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#: ipaserver/plugins/internal.py:166 -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:167 -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:168 -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:169 -msgid "Actions" -msgstr "" - -#: ipaserver/plugins/internal.py:172 ipaserver/plugins/internal.py:201 -#: ipaserver/plugins/internal.py:263 -msgid "Add" -msgstr "" - -#: ipaserver/plugins/internal.py:173 -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -#: ipaserver/plugins/internal.py:174 -msgid "Direct Membership" -msgstr "" - -#: ipaserver/plugins/internal.py:175 -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -#: ipaserver/plugins/internal.py:176 -msgid "Indirect Membership" -msgstr "" - -#: ipaserver/plugins/internal.py:177 -msgid "No entries." -msgstr "" - -#: ipaserver/plugins/internal.py:178 -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -#: ipaserver/plugins/internal.py:179 ipaserver/plugins/internal.py:278 -msgid "Remove" -msgstr "" - -#: ipaserver/plugins/internal.py:180 -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -#: ipaserver/plugins/internal.py:181 -msgid "Show Results" -msgstr "" - -#: ipaserver/plugins/internal.py:184 -msgid "Authentication indicators" -msgstr "" - -#: ipaserver/plugins/internal.py:185 -msgid "Authentication indicator" -msgstr "" - -#: ipaserver/plugins/internal.py:186 -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -#: ipaserver/plugins/internal.py:187 -msgid "Add Custom Authentication Indicator" -msgstr "" - -#: ipaserver/plugins/internal.py:189 -msgid "Two factor authentication (password + OTP)" -msgstr "" - -#: ipaserver/plugins/internal.py:191 -msgid "RADIUS" -msgstr "" - -#: ipaserver/plugins/internal.py:193 -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -#: ipaserver/plugins/internal.py:194 -msgid "External Identity Provider" -msgstr "" - -#: ipaserver/plugins/internal.py:195 -msgid "Disable per-user override" -msgstr "" - -#: ipaserver/plugins/internal.py:196 -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -#: ipaserver/plugins/internal.py:199 ipaserver/plugins/internal.py:273 -#: ipaserver/plugins/internal.py:1739 -msgid "About" -msgstr "" - -#: ipaserver/plugins/internal.py:200 -msgid "Activate" -msgstr "" - -#: ipaserver/plugins/internal.py:202 -msgid "Add and Add Another" -msgstr "" - -#: ipaserver/plugins/internal.py:203 -msgid "Add and Close" -msgstr "" - -#: ipaserver/plugins/internal.py:204 -msgid "Add and Edit" -msgstr "" - -#: ipaserver/plugins/internal.py:205 -msgid "Add Many" -msgstr "" - -#: ipaserver/plugins/internal.py:207 -msgid "Back" -msgstr "" - -#: ipaserver/plugins/internal.py:208 -msgid "Cancel" -msgstr "" - -#: ipaserver/plugins/internal.py:209 -msgid "Clear" -msgstr "" - -#: ipaserver/plugins/internal.py:210 -msgid "Clear all fields on the page." -msgstr "" - -#: ipaserver/plugins/internal.py:211 -msgid "Close" -msgstr "" - -#: ipaserver/plugins/internal.py:212 ipaserver/plugins/internal.py:1943 -msgid "Disable" -msgstr "" - -#: ipaserver/plugins/internal.py:213 ipaserver/plugins/internal.py:644 -msgid "Download" -msgstr "" - -#: ipaserver/plugins/internal.py:214 -msgid "Download certificate as PEM formatted file." -msgstr "" - -#: ipaserver/plugins/internal.py:215 -msgid "Edit" -msgstr "" - -#: ipaserver/plugins/internal.py:216 ipaserver/plugins/internal.py:1945 -msgid "Enable" -msgstr "" - -#: ipaserver/plugins/internal.py:218 -msgid "Find" -msgstr "" - -#: ipaserver/plugins/internal.py:219 -msgid "Get" -msgstr "" - -#: ipaserver/plugins/internal.py:220 -msgid "Hide" -msgstr "" - -#: ipaserver/plugins/internal.py:221 -msgid "Issue" -msgstr "" - -#: ipaserver/plugins/internal.py:222 -msgid "Match" -msgstr "" - -#: ipaserver/plugins/internal.py:223 -msgid "Match users according to certificate." -msgstr "" - -#: ipaserver/plugins/internal.py:224 -msgid "Migrate" -msgstr "" - -#: ipaserver/plugins/internal.py:225 -msgid "OK" -msgstr "" - -#: ipaserver/plugins/internal.py:226 -msgid "Refresh" -msgstr "" - -#: ipaserver/plugins/internal.py:227 -msgid "Reload current settings from the server." -msgstr "" - -#: ipaserver/plugins/internal.py:228 -msgid "Delete" -msgstr "" - -#: ipaserver/plugins/internal.py:229 ipaserver/plugins/internal.py:685 -msgid "Remove hold" -msgstr "" - -#: ipaserver/plugins/internal.py:230 -msgid "Reset" -msgstr "" - -#: ipaserver/plugins/internal.py:231 ipaserver/plugins/internal.py:1732 -msgid "Reset Password" -msgstr "" - -#: ipaserver/plugins/internal.py:232 -msgid "Reset Password and Log in" -msgstr "" - -#: ipaserver/plugins/internal.py:233 -msgid "Restore" -msgstr "" - -#: ipaserver/plugins/internal.py:234 -msgid "Retry" -msgstr "" - -#: ipaserver/plugins/internal.py:235 -msgid "Revert" -msgstr "" - -#: ipaserver/plugins/internal.py:237 -msgid "Revoke" -msgstr "" - -#: ipaserver/plugins/internal.py:238 -msgid "Save" -msgstr "" - -#: ipaserver/plugins/internal.py:239 -msgid "Set" -msgstr "" - -#: ipaserver/plugins/internal.py:240 -msgid "Show" -msgstr "" - -#: ipaserver/plugins/internal.py:241 -msgid "Stage" -msgstr "" - -#: ipaserver/plugins/internal.py:243 -msgid "Update" -msgstr "" - -#: ipaserver/plugins/internal.py:244 -msgid "View" -msgstr "" - -#: ipaserver/plugins/internal.py:247 ipaserver/plugins/internal.py:1740 -msgid "Customization" -msgstr "" - -#: ipaserver/plugins/internal.py:248 -msgid "Pagination Size" -msgstr "" - -#: ipaserver/plugins/internal.py:251 -msgid "Collapse All" -msgstr "" - -#: ipaserver/plugins/internal.py:252 -msgid "Expand All" -msgstr "" - -#: ipaserver/plugins/internal.py:253 -msgid "General" -msgstr "" - -#: ipaserver/plugins/internal.py:254 -msgid "Identity Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:255 -msgid "Record Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:256 -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:257 -msgid "Back to Top" -msgstr "" - -#: ipaserver/plugins/internal.py:258 -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#: ipaserver/plugins/internal.py:261 -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -#: ipaserver/plugins/internal.py:262 -msgid "Add custom value" -msgstr "" - -#: ipaserver/plugins/internal.py:264 -msgid "Available" -msgstr "사용 가능한" - -#: ipaserver/plugins/internal.py:265 -msgid "Some operations failed." -msgstr "" - -#: ipaserver/plugins/internal.py:266 -msgid "Operations Error" -msgstr "" - -#: ipaserver/plugins/internal.py:267 msgid "Confirmation" msgstr "확인" -#: ipaserver/plugins/internal.py:268 -msgid "Custom value" -msgstr "" +msgid "Contact this specific KDC Server" +msgstr "이와 같은 지정된 KDC 서버와 연락합니다" -#: ipaserver/plugins/internal.py:269 -msgid "This page has unsaved changes. Please save or revert." -msgstr "" +msgid "DN to bind as if not using kerberos" +msgstr "만약 커버러스를 사용하지 않는 것같이 바인드하는 DN" -#: ipaserver/plugins/internal.py:270 -msgid "Unsaved Changes" -msgstr "" +msgid "Data" +msgstr "자료" -#: ipaserver/plugins/internal.py:271 -#, python-brace-format -msgid "Edit ${entity}" -msgstr "" +msgid "Debugging output" +msgstr "디버깅 출력" -#: ipaserver/plugins/internal.py:272 -msgid "Hide details" -msgstr "" +msgid "Degrees Longitude" +msgstr "도 위도" -#: ipaserver/plugins/internal.py:274 -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" +msgid "Delete a self-service permission." +msgstr "셀프-서비스 권한을 삭제합니다." -#: ipaserver/plugins/internal.py:275 -msgid "Prospective" -msgstr "" +msgid "Delete an HBAC rule." +msgstr "HBAC 규칙을 삭제합니다." -#: ipaserver/plugins/internal.py:276 -msgid "Redirection" -msgstr "" +msgid "Disabled" +msgstr "사용불가" -#: ipaserver/plugins/internal.py:277 -msgid "Select entries to be removed." -msgstr "" +msgid "Display information about a help topic." +msgstr "도움말 주제에 대한 정보를 표시합니다." -#: ipaserver/plugins/internal.py:279 -msgid "Result" -msgstr "" - -#: ipaserver/plugins/internal.py:280 -msgid "Show details" -msgstr "" - -#: ipaserver/plugins/internal.py:281 -msgid "Success" -msgstr "" - -#: ipaserver/plugins/internal.py:282 -msgid "Validation error" -msgstr "" - -#: ipaserver/plugins/internal.py:283 -msgid "Input form contains invalid or missing values." -msgstr "" - -#: ipaserver/plugins/internal.py:286 -msgid "Please try the following options:" -msgstr "" - -#: ipaserver/plugins/internal.py:287 -msgid "If the problem persists please contact the system administrator." -msgstr "" - -#: ipaserver/plugins/internal.py:288 -msgid "Refresh the page." -msgstr "" - -#: ipaserver/plugins/internal.py:289 -msgid "Reload the browser." -msgstr "" - -#: ipaserver/plugins/internal.py:290 -msgid "Return to the main page and retry the operation" -msgstr "" - -#: ipaserver/plugins/internal.py:291 -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "" - -#: ipaserver/plugins/internal.py:295 -msgid "HTTP Error" -msgstr "" - -#: ipaserver/plugins/internal.py:296 -msgid "Internal Error" -msgstr "" - -#: ipaserver/plugins/internal.py:297 -msgid "IPA Error" -msgstr "" - -#: ipaserver/plugins/internal.py:298 -msgid "No response" -msgstr "" - -#: ipaserver/plugins/internal.py:299 -msgid "Unknown Error" -msgstr "" - -#: ipaserver/plugins/internal.py:300 -msgid "URL" -msgstr "" - -#: ipaserver/plugins/internal.py:303 -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#: ipaserver/plugins/internal.py:304 -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#: ipaserver/plugins/internal.py:305 -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#: ipaserver/plugins/internal.py:306 -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -#: ipaserver/plugins/internal.py:309 -msgid "Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:310 ipaserver/plugins/internal.py:1753 -msgid "Search" -msgstr "" - -#: ipaserver/plugins/internal.py:312 -msgid "False" -msgstr "" - -#: ipaserver/plugins/internal.py:315 -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:318 -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:321 -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:324 -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:327 -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:330 -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:333 -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:336 -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:338 -msgid "Allowed to create keytab" -msgstr "" - -#: ipaserver/plugins/internal.py:339 -msgid "Allowed to retrieve keytab" -msgstr "" - -#: ipaserver/plugins/internal.py:341 -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:344 -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:347 -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:350 -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:353 -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:356 -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:359 -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:362 -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:366 -msgid "Add Kerberos Principal Alias" -msgstr "" - -#: ipaserver/plugins/internal.py:367 -msgid "New kerberos principal alias" -msgstr "" - -#: ipaserver/plugins/internal.py:368 -msgid "Remove Kerberos Alias" -msgstr "" - -#: ipaserver/plugins/internal.py:369 -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -#: ipaserver/plugins/internal.py:372 -msgid "Inherited from server configuration" -msgstr "" - -#: ipaserver/plugins/internal.py:373 -msgid "MS-PAC" -msgstr "" - -#: ipaserver/plugins/internal.py:374 -msgid "Override inherited settings" -msgstr "" - -#: ipaserver/plugins/internal.py:375 -msgid "PAD" -msgstr "" - -#: ipaserver/plugins/internal.py:378 -msgid "Authenticating" -msgstr "" - -#: ipaserver/plugins/internal.py:380 -msgid "Authentication with personal certificate failed" -msgstr "" - -#: ipaserver/plugins/internal.py:382 -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -#: ipaserver/plugins/internal.py:386 -msgid "Continue to next page" -msgstr "" - -#: ipaserver/plugins/internal.py:388 -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -#: ipaserver/plugins/internal.py:391 -msgid "Login failed due to an unknown reason" -msgstr "" - -#: ipaserver/plugins/internal.py:392 -msgid "Logged In As" -msgstr "" - -#: ipaserver/plugins/internal.py:393 -msgid "Authentication with Kerberos failed" -msgstr "" - -#: ipaserver/plugins/internal.py:395 -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -#: ipaserver/plugins/internal.py:400 -msgid "Loading" -msgstr "" - -#: ipaserver/plugins/internal.py:402 -msgid "Kerberos Principal you entered is expired" -msgstr "" - -#: ipaserver/plugins/internal.py:403 -msgid "Loading data" -msgstr "" - -#: ipaserver/plugins/internal.py:404 -msgid "Log in" -msgstr "" - -#: ipaserver/plugins/internal.py:405 -msgid "Log In Using Certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:406 -msgid "Log in using personal certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:407 ipaserver/plugins/internal.py:1741 -msgid "Log out" -msgstr "" - -#: ipaserver/plugins/internal.py:408 -msgid "Log out error" -msgstr "" - -#: ipaserver/plugins/internal.py:410 ipaserver/plugins/internal.py:1726 -msgid "Password or Password+One-Time Password" -msgstr "" - -#: ipaserver/plugins/internal.py:411 -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -#: ipaserver/plugins/internal.py:412 -msgid "Sync OTP Token" -msgstr "" - -#: ipaserver/plugins/internal.py:413 -msgid "Synchronizing" -msgstr "" - -#: ipaserver/plugins/internal.py:415 -msgid "The user account you entered is locked" -msgstr "" - -#: ipaserver/plugins/internal.py:418 -msgid "number of passwords" -msgstr "" - -#: ipaserver/plugins/internal.py:419 -msgid "seconds" -msgstr "" - -#: ipaserver/plugins/internal.py:422 -msgid "Migrating" -msgstr "" - -#: ipaserver/plugins/internal.py:424 -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -#: ipaserver/plugins/internal.py:427 -msgid "Password migration was not successful" -msgstr "비밀번호 이전이 성공하지 못했습니다" - -#: ipaserver/plugins/internal.py:429 -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -#: ipaserver/plugins/internal.py:436 ipaserver/plugins/internal.py:1708 -msgid "The password or username you entered is incorrect" -msgstr "" - -#: ipaserver/plugins/internal.py:437 -msgid "Password migration was successful" -msgstr "" - -#: ipaserver/plugins/internal.py:441 ipaserver/plugins/internal.py:526 -#: ipaserver/plugins/internal.py:1224 -msgid "Attribute" -msgstr "" - -#: ipaserver/plugins/internal.py:444 -msgid "Add delegation" -msgstr "" - -#: ipaserver/plugins/internal.py:445 -msgid "Remove delegations" -msgstr "" - -#: ipaserver/plugins/internal.py:448 ipaserver/plugins/internal.py:780 -msgid "Add permission" -msgstr "" - -#: ipaserver/plugins/internal.py:450 -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:452 -msgid "Remove permissions" -msgstr "" - -#: ipaserver/plugins/internal.py:454 -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:458 -msgid "Add privilege" -msgstr "" - -#: ipaserver/plugins/internal.py:460 -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#: ipaserver/plugins/internal.py:463 -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:465 -msgid "Remove privileges" -msgstr "" - -#: ipaserver/plugins/internal.py:467 -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#: ipaserver/plugins/internal.py:470 -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:474 -msgid "Role Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:475 -msgid "Add role" -msgstr "" - -#: ipaserver/plugins/internal.py:477 -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:480 -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:483 -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:486 -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#: ipaserver/plugins/internal.py:489 -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:492 -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:494 -msgid "Remove roles" -msgstr "" - -#: ipaserver/plugins/internal.py:496 -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#: ipaserver/plugins/internal.py:499 -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:502 -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:505 -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:508 -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:511 -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:515 -msgid "Add self service permission" -msgstr "" - -#: ipaserver/plugins/internal.py:516 -msgid "Remove self service permissions" -msgstr "" - -#: ipaserver/plugins/internal.py:519 -msgid "Add rule" -msgstr "" - -#: ipaserver/plugins/internal.py:521 -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:524 -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:528 -msgid "Are you sure you want to change default group?" -msgstr "" - -#: ipaserver/plugins/internal.py:530 -msgid "Default host group" -msgstr "" - -#: ipaserver/plugins/internal.py:531 -msgid "Default user group" -msgstr "" - -#: ipaserver/plugins/internal.py:532 -msgid "Exclusive" -msgstr "" - -#: ipaserver/plugins/internal.py:533 -msgid "Expression" -msgstr "" - -#: ipaserver/plugins/internal.py:534 -msgid "Host group rule" -msgstr "" - -#: ipaserver/plugins/internal.py:535 -msgid "Host group rules" -msgstr "" - -#: ipaserver/plugins/internal.py:536 -msgid "Inclusive" -msgstr "" - -#: ipaserver/plugins/internal.py:537 -msgid "Remove auto membership rules" -msgstr "" - -#: ipaserver/plugins/internal.py:539 -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:542 -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:544 -msgid "User group rule" -msgstr "" - -#: ipaserver/plugins/internal.py:545 -msgid "User group rules" -msgstr "" - -#: ipaserver/plugins/internal.py:548 -msgid "Add automount key" -msgstr "" - -#: ipaserver/plugins/internal.py:549 -msgid "Remove automount keys" -msgstr "" - -#: ipaserver/plugins/internal.py:552 -msgid "Add automount location" -msgstr "" - -#: ipaserver/plugins/internal.py:553 -msgid "Automount Location Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:554 -msgid "Remove automount locations" -msgstr "" - -#: ipaserver/plugins/internal.py:557 -msgid "Add automount map" -msgstr "" - -#: ipaserver/plugins/internal.py:558 -msgid "Map Type" -msgstr "" - -#: ipaserver/plugins/internal.py:559 -msgid "Direct" -msgstr "" - -#: ipaserver/plugins/internal.py:560 -msgid "Indirect" -msgstr "" - -#: ipaserver/plugins/internal.py:561 -msgid "Remove automount maps" -msgstr "" - -#: ipaserver/plugins/internal.py:564 -msgid "Add certificate authority" -msgstr "" - -#: ipaserver/plugins/internal.py:565 -msgid "Remove certificate authorities" -msgstr "" - -#: ipaserver/plugins/internal.py:568 -msgid "Add CA ACL" -msgstr "" - -#: ipaserver/plugins/internal.py:570 -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:574 -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:577 -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:580 -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:583 -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:586 -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:589 -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:591 -msgid "All" -msgstr "" - -#: ipaserver/plugins/internal.py:592 -msgid "Any CA" -msgstr "" - -#: ipaserver/plugins/internal.py:593 ipaserver/plugins/internal.py:902 -#: ipaserver/plugins/internal.py:1169 ipaserver/plugins/internal.py:1292 -#: ipaserver/plugins/internal.py:1461 -msgid "Any Host" -msgstr "" - -#: ipaserver/plugins/internal.py:594 ipaserver/plugins/internal.py:903 -msgid "Any Service" -msgstr "" - -#: ipaserver/plugins/internal.py:595 -msgid "Any Profile" -msgstr "" - -#: ipaserver/plugins/internal.py:596 ipaserver/plugins/internal.py:904 -#: ipaserver/plugins/internal.py:1170 ipaserver/plugins/internal.py:1293 -#: ipaserver/plugins/internal.py:1462 -msgid "Anyone" -msgstr "" - -#: ipaserver/plugins/internal.py:597 ipaserver/plugins/internal.py:906 -#: ipaserver/plugins/internal.py:1467 -msgid "Rule status" -msgstr "" - -#: ipaserver/plugins/internal.py:598 -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -#: ipaserver/plugins/internal.py:600 -msgid "Remove CA ACLs" -msgstr "" - -#: ipaserver/plugins/internal.py:602 -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:606 -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:609 -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:612 -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:615 -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:618 -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:621 -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:623 -msgid "Specified CAs" -msgstr "" - -#: ipaserver/plugins/internal.py:624 ipaserver/plugins/internal.py:928 -#: ipaserver/plugins/internal.py:1196 ipaserver/plugins/internal.py:1308 -#: ipaserver/plugins/internal.py:1512 -msgid "Specified Hosts and Groups" -msgstr "" - -#: ipaserver/plugins/internal.py:625 -msgid "Specified Profiles" -msgstr "" - -#: ipaserver/plugins/internal.py:626 ipaserver/plugins/internal.py:929 -msgid "Specified Services and Groups" -msgstr "" - -#: ipaserver/plugins/internal.py:627 ipaserver/plugins/internal.py:930 -#: ipaserver/plugins/internal.py:1197 ipaserver/plugins/internal.py:1309 -#: ipaserver/plugins/internal.py:1513 -msgid "Specified Users and Groups" -msgstr "" - -#: ipaserver/plugins/internal.py:628 -msgid "Permitted to have certificates issued" -msgstr "" - -#: ipaserver/plugins/internal.py:631 -msgid "Remove certificate profiles" -msgstr "" - -#: ipaserver/plugins/internal.py:634 -msgid "AA Compromise" -msgstr "" - -#: ipaserver/plugins/internal.py:635 -msgid "Add principal" -msgstr "" - -#: ipaserver/plugins/internal.py:636 -msgid "Affiliation Changed" -msgstr "" - -#: ipaserver/plugins/internal.py:637 ipaserver/plugins/ca.py:351 -#: ipaserver/plugins/ca.py:360 ipaserver/plugins/ca.py:379 -#: ipaserver/plugins/ca.py:419 -msgid "CA" -msgstr "" - -#: ipaserver/plugins/internal.py:638 -msgid "CA Compromise" -msgstr "" - -#: ipaserver/plugins/internal.py:640 ipaserver/plugins/internal.py:1955 -msgid "Certificates" -msgstr "" - -#: ipaserver/plugins/internal.py:641 -msgid "Certificate Hold" -msgstr "" - -#: ipaserver/plugins/internal.py:642 -msgid "Cessation of Operation" -msgstr "" - -#: ipaserver/plugins/internal.py:643 -msgid "Common Name" -msgstr "" - -#: ipaserver/plugins/internal.py:645 -msgid "the certificate with serial number " -msgstr "" - -#: ipaserver/plugins/internal.py:646 -msgid "Expires On" -msgstr "" - -#: ipaserver/plugins/internal.py:647 -msgid "Issued on from" -msgstr "" - -#: ipaserver/plugins/internal.py:648 -msgid "Issued on to" -msgstr "" - -#: ipaserver/plugins/internal.py:649 -msgid "Maximum serial number" -msgstr "" - -#: ipaserver/plugins/internal.py:650 -msgid "Minimum serial number" -msgstr "" - -#: ipaserver/plugins/internal.py:652 -msgid "Revoked on from" -msgstr "" - -#: ipaserver/plugins/internal.py:653 -msgid "Revoked on to" -msgstr "" - -#: ipaserver/plugins/internal.py:655 -msgid "Valid not after from" -msgstr "" - -#: ipaserver/plugins/internal.py:656 -msgid "Valid not after to" -msgstr "" - -#: ipaserver/plugins/internal.py:657 -msgid "Valid not before from" -msgstr "" - -#: ipaserver/plugins/internal.py:658 -msgid "Valid not before to" -msgstr "" - -#: ipaserver/plugins/internal.py:659 -msgid "Fingerprints" -msgstr "" - -#: ipaserver/plugins/internal.py:660 -msgid "Get Certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:661 -msgid "Certificate Hold Removed" -msgstr "" - -#: ipaserver/plugins/internal.py:663 -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:666 -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:669 -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:671 -msgid "Issue new certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:672 -msgid "Issued By" -msgstr "" - -#: ipaserver/plugins/internal.py:673 -msgid "Issued On" -msgstr "" - -#: ipaserver/plugins/internal.py:674 -msgid "Issued To" -msgstr "" - -#: ipaserver/plugins/internal.py:675 -msgid "Key Compromise" -msgstr "" - -#: ipaserver/plugins/internal.py:676 -msgid "No Valid Certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:677 -msgid "New Certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:678 -msgid "Certificate in base64 or PEM format" -msgstr "" - -#: ipaserver/plugins/internal.py:679 -msgid "Note" -msgstr "" - -#: ipaserver/plugins/internal.py:681 -msgid "Organizational Unit" -msgstr "" - -#: ipaserver/plugins/internal.py:682 -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -#: ipaserver/plugins/internal.py:683 -msgid "Privilege Withdrawn" -msgstr "" - -#: ipaserver/plugins/internal.py:684 -msgid "Reason for Revocation" -msgstr "" - -#: ipaserver/plugins/internal.py:686 -msgid "Remove certificate hold" -msgstr "" - -#: ipaserver/plugins/internal.py:687 -msgid "Do you want to remove the certificate hold?" -msgstr "" - -#: ipaserver/plugins/internal.py:688 -msgid "Remove from CRL" -msgstr "" - -#: ipaserver/plugins/internal.py:689 -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#: ipaserver/plugins/internal.py:690 -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -#: ipaserver/plugins/internal.py:691 -msgid "Certificate requested" -msgstr "" - -#: ipaserver/plugins/internal.py:693 -msgid "Revoke certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:694 -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -#: ipaserver/plugins/internal.py:695 -msgid "Certificate Revoked" -msgstr "" - -#: ipaserver/plugins/internal.py:696 -msgid "REVOKED" -msgstr "" - -#: ipaserver/plugins/internal.py:699 -msgid "SHA1 Fingerprint" -msgstr "" - -#: ipaserver/plugins/internal.py:700 -msgid "SHA256 Fingerprint" -msgstr "" - -#: ipaserver/plugins/internal.py:701 ipaserver/plugins/internal.py:1031 -#: ipaserver/plugins/internal.py:1344 ipaserver/plugins/internal.py:1947 -#: ipaserver/plugins/cert.py:1270 -msgid "Status" -msgstr "" - -#: ipaserver/plugins/internal.py:702 -msgid "Superseded" -msgstr "" - -#: ipaserver/plugins/internal.py:703 -msgid "Unspecified" -msgstr "지정되지 않음" - -#: ipaserver/plugins/internal.py:704 -msgid "Valid Certificate Present" -msgstr "" - -#: ipaserver/plugins/internal.py:705 -msgid "Valid from" -msgstr "" - -#: ipaserver/plugins/internal.py:706 -msgid "Valid to" -msgstr "" - -#: ipaserver/plugins/internal.py:707 -msgid "Validity" -msgstr "" - -#: ipaserver/plugins/internal.py:708 -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -#: ipaserver/plugins/internal.py:709 -msgid "View Certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:712 -msgid "Certificate Data" -msgstr "" - -#: ipaserver/plugins/internal.py:713 -msgid "Certificate For Match" -msgstr "" - -#: ipaserver/plugins/internal.py:714 -msgid "Certificate Mapping Match" -msgstr "" - -#: ipaserver/plugins/internal.py:716 -msgid "Matched Users" -msgstr "" - -#: ipaserver/plugins/internal.py:717 -msgid "User Login" -msgstr "" - -#: ipaserver/plugins/internal.py:720 -msgid "Add certificate identity mapping rule" -msgstr "" - -#: ipaserver/plugins/internal.py:721 -msgid "Add certificate mapping data" -msgstr "" - -#: ipaserver/plugins/internal.py:724 -msgid "Configuration string" -msgstr "" - -#: ipaserver/plugins/internal.py:725 -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -#: ipaserver/plugins/internal.py:726 -msgid "Remove certificate mapping data" -msgstr "" - -#: ipaserver/plugins/internal.py:728 -msgid "Issuer and subject" -msgstr "" - -#: ipaserver/plugins/internal.py:729 -msgid "Remove certificate identity mapping rules" -msgstr "" - -#: ipaserver/plugins/internal.py:734 -msgid "Group Options" -msgstr "" - -#: ipaserver/plugins/internal.py:735 -msgid "Search Options" -msgstr "" - -#: ipaserver/plugins/internal.py:736 -msgid "SELinux Options" -msgstr "" - -#: ipaserver/plugins/internal.py:737 -msgid "Server Options" -msgstr "" - -#: ipaserver/plugins/internal.py:738 -msgid "Service Options" -msgstr "" - -#: ipaserver/plugins/internal.py:739 -msgid "User Options" -msgstr "" - -#: ipaserver/plugins/internal.py:744 -msgid "Forward first" -msgstr "" - -#: ipaserver/plugins/internal.py:745 -msgid "Forwarding disabled" -msgstr "" - -#: ipaserver/plugins/internal.py:746 -msgid "Forward only" -msgstr "" - -#: ipaserver/plugins/internal.py:747 ipaserver/plugins/internal.py:1470 -#: ipaserver/plugins/internal.py:1576 -msgid "Options" -msgstr "" - -#: ipaserver/plugins/internal.py:748 -msgid "Update System DNS Records" -msgstr "" - -#: ipaserver/plugins/internal.py:749 -msgid "Do you want to update system DNS records?" -msgstr "" - -#: ipaserver/plugins/internal.py:750 -msgid "System DNS records updated" -msgstr "" - -#: ipaserver/plugins/internal.py:753 -msgid "Add DNS forward zone" -msgstr "" - -#: ipaserver/plugins/internal.py:754 -msgid "Remove DNS forward zones" -msgstr "" - -#: ipaserver/plugins/internal.py:757 -msgid "Add DNS resource record" -msgstr "" - -#: ipaserver/plugins/internal.py:759 -msgid "DNS record was deleted because it contained no data." -msgstr "" - -#: ipaserver/plugins/internal.py:760 -msgid "Other Record Types" -msgstr "" - -#: ipaserver/plugins/internal.py:761 -msgid "Address not valid, can't redirect" -msgstr "" - -#: ipaserver/plugins/internal.py:762 -msgid "Create dns record" -msgstr "" - -#: ipaserver/plugins/internal.py:763 -msgid "Creating record." -msgstr "" - -#: ipaserver/plugins/internal.py:764 -msgid "Record creation failed." -msgstr "" - -#: ipaserver/plugins/internal.py:765 -msgid "Checking if record exists." -msgstr "" - -#: ipaserver/plugins/internal.py:766 -msgid "Record not found." -msgstr "" - -#: ipaserver/plugins/internal.py:767 -msgid "Redirection to PTR record" -msgstr "" - -#: ipaserver/plugins/internal.py:768 -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -#: ipaserver/plugins/internal.py:769 -msgid "Target reverse zone not found." -msgstr "" - -#: ipaserver/plugins/internal.py:770 -msgid "Fetching DNS zones." -msgstr "" - -#: ipaserver/plugins/internal.py:771 -msgid "An error occurred while fetching dns zones." -msgstr "" - -#: ipaserver/plugins/internal.py:772 -msgid "You will be redirected to DNS Zone." -msgstr "" - -#: ipaserver/plugins/internal.py:773 -msgid "Remove DNS resource records" -msgstr "" - -#: ipaserver/plugins/internal.py:774 -msgid "Standard Record Types" -msgstr "" - -#: ipaserver/plugins/internal.py:775 -msgid "Records for DNS Zone" -msgstr "" - -#: ipaserver/plugins/internal.py:776 -msgid "Record Type" -msgstr "" - -#: ipaserver/plugins/internal.py:779 -msgid "Add DNS zone" -msgstr "" - -#: ipaserver/plugins/internal.py:781 -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:782 -msgid "DNS Zone Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:783 -msgid "Remove DNS zones" -msgstr "" - -#: ipaserver/plugins/internal.py:784 -msgid "Remove Permission" -msgstr "" - -#: ipaserver/plugins/internal.py:785 -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:786 -msgid "Skip DNS check" -msgstr "" - -#: ipaserver/plugins/internal.py:787 -msgid "Skip overlap check" -msgstr "" - -#: ipaserver/plugins/internal.py:788 -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -#: ipaserver/plugins/internal.py:789 -msgid "Authoritative nameserver change" -msgstr "" - -#: ipaserver/plugins/internal.py:794 -msgid "Level" -msgstr "" - -#: ipaserver/plugins/internal.py:795 -msgid "Set Domain Level" -msgstr "" - -#: ipaserver/plugins/internal.py:798 -msgid "Add user group" -msgstr "" - -#: ipaserver/plugins/internal.py:800 -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:803 -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#: ipaserver/plugins/internal.py:806 -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:809 -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:812 -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#: ipaserver/plugins/internal.py:815 -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:818 -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:821 -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:824 -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:828 -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:832 -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:836 -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:840 -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:842 -msgid "Group Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:843 ipaserver/plugins/internal.py:1171 -#: ipaserver/plugins/internal.py:1465 -msgid "External" -msgstr "" - -#: ipaserver/plugins/internal.py:844 ipaserver/plugins/internal.py:1398 -msgid "Groups" -msgstr "" - -#: ipaserver/plugins/internal.py:845 -msgid "Group categories" -msgstr "" - -#: ipaserver/plugins/internal.py:846 -msgid "Change to external group" -msgstr "" - -#: ipaserver/plugins/internal.py:847 -msgid "Change to POSIX group" -msgstr "" - -#: ipaserver/plugins/internal.py:848 -msgid "Non-POSIX" -msgstr "" - -#: ipaserver/plugins/internal.py:849 -msgid "POSIX" -msgstr "" - -#: ipaserver/plugins/internal.py:850 -msgid "Remove user groups" -msgstr "" - -#: ipaserver/plugins/internal.py:852 -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#: ipaserver/plugins/internal.py:855 -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:858 -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#: ipaserver/plugins/internal.py:861 -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:864 -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:867 -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:870 -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:873 -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:876 -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:878 -msgid "Group Type" -msgstr "" - -#: ipaserver/plugins/internal.py:882 -msgid "Add HBAC rule" -msgstr "" - -#: ipaserver/plugins/internal.py:884 -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:887 -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:890 -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:893 -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:897 -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:900 -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:905 -msgid "Accessing" -msgstr "" - -#: ipaserver/plugins/internal.py:907 -msgid "Remove HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:909 -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:912 -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:915 -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:918 -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:922 -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:925 -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:927 -msgid "Via Service" -msgstr "" - -#: ipaserver/plugins/internal.py:931 ipaserver/plugins/internal.py:1514 -msgid "Who" -msgstr "" - -#: ipaserver/plugins/internal.py:934 -msgid "Add HBAC service" -msgstr "" - -#: ipaserver/plugins/internal.py:936 -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -#: ipaserver/plugins/internal.py:939 -msgid "Remove HBAC services" -msgstr "" - -#: ipaserver/plugins/internal.py:941 -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -#: ipaserver/plugins/internal.py:946 -msgid "Add HBAC service group" -msgstr "" - -#: ipaserver/plugins/internal.py:948 -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:951 -msgid "Remove HBAC service groups" -msgstr "" - -#: ipaserver/plugins/internal.py:953 -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:959 -msgid "Access Denied" -msgstr "" - -#: ipaserver/plugins/internal.py:960 -msgid "Access Granted" -msgstr "" - -#: ipaserver/plugins/internal.py:961 -msgid "Include Disabled" -msgstr "" - -#: ipaserver/plugins/internal.py:962 -msgid "Include Enabled" -msgstr "" - -#: ipaserver/plugins/internal.py:963 -msgid "HBAC Test" -msgstr "" - -#: ipaserver/plugins/internal.py:964 -msgid "Matched" -msgstr "" - -#: ipaserver/plugins/internal.py:965 -msgid "Missing values: " -msgstr "" - -#: ipaserver/plugins/internal.py:966 -msgid "New Test" -msgstr "" - -#: ipaserver/plugins/internal.py:967 -msgid "Rules" -msgstr "" - -#: ipaserver/plugins/internal.py:968 -msgid "Run Test" -msgstr "" - -#: ipaserver/plugins/internal.py:969 -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -#: ipaserver/plugins/internal.py:970 -msgid "Unmatched" -msgstr "" - -#: ipaserver/plugins/internal.py:973 -msgid "Add host" -msgstr "" - -#: ipaserver/plugins/internal.py:975 -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:978 -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#: ipaserver/plugins/internal.py:981 -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:984 -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:987 -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#: ipaserver/plugins/internal.py:990 -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:992 -msgid "Host Certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:993 ipaserver/plugins/internal.py:1333 -msgid "Host Name" -msgstr "" - -#: ipaserver/plugins/internal.py:994 ipaserver/plugins/internal.py:1331 -msgid "Delete Key, Unprovision" -msgstr "" - -#: ipaserver/plugins/internal.py:995 -msgid "Host Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:996 -msgid "Enrolled" -msgstr "" - -#: ipaserver/plugins/internal.py:997 -msgid "Enrollment" -msgstr "" - -#: ipaserver/plugins/internal.py:998 -msgid "Fully Qualified Host Name" -msgstr "" - -#: ipaserver/plugins/internal.py:999 -msgid "Generate OTP" -msgstr "" - -#: ipaserver/plugins/internal.py:1000 -msgid "Generated OTP" -msgstr "" - -#: ipaserver/plugins/internal.py:1001 -msgid "Kerberos Key" -msgstr "" - -#: ipaserver/plugins/internal.py:1002 ipaserver/plugins/internal.py:1334 -msgid "Kerberos Key Not Present" -msgstr "" - -#: ipaserver/plugins/internal.py:1003 -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -#: ipaserver/plugins/internal.py:1004 ipaserver/plugins/internal.py:1721 -msgid "One-Time Password" -msgstr "" - -#: ipaserver/plugins/internal.py:1005 -msgid "One-Time Password Not Present" -msgstr "" - -#: ipaserver/plugins/internal.py:1006 -msgid "One-Time Password Present" -msgstr "" - -#: ipaserver/plugins/internal.py:1007 -msgid "Reset OTP" -msgstr "" - -#: ipaserver/plugins/internal.py:1008 -msgid "Reset One-Time Password" -msgstr "" - -#: ipaserver/plugins/internal.py:1009 -msgid "Set OTP" -msgstr "" - -#: ipaserver/plugins/internal.py:1010 -msgid "OTP set" -msgstr "" - -#: ipaserver/plugins/internal.py:1011 -msgid "Set One-Time Password" -msgstr "" - -#: ipaserver/plugins/internal.py:1012 -msgid "Remove hosts" -msgstr "" - -#: ipaserver/plugins/internal.py:1014 -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1017 -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1020 -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1023 -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#: ipaserver/plugins/internal.py:1026 -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1029 -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1032 ipaserver/plugins/internal.py:1345 -msgid "Unprovision" -msgstr "" - -#: ipaserver/plugins/internal.py:1033 -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -#: ipaserver/plugins/internal.py:1034 -msgid "Unprovisioning host" -msgstr "" - -#: ipaserver/plugins/internal.py:1035 -msgid "Host unprovisioned" -msgstr "" - -#: ipaserver/plugins/internal.py:1038 -msgid "Add host group" -msgstr "" - -#: ipaserver/plugins/internal.py:1040 -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1043 -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1046 -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1049 -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1052 -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1055 -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1058 -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1062 -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1066 -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1070 -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1074 -msgid "Host Group Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1075 -msgid "Remove host groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1077 -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1080 -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1083 -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1086 -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1089 -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1092 -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1096 -msgid "Keycloak or Red Hat SSO" -msgstr "" - -#: ipaserver/plugins/internal.py:1097 -msgid "Google" -msgstr "" - -#: ipaserver/plugins/internal.py:1098 -msgid "Github" -msgstr "" - -#: ipaserver/plugins/internal.py:1099 -msgid "Microsoft or Azure" -msgstr "" - -#: ipaserver/plugins/internal.py:1100 -msgid "Okta" -msgstr "" - -#: ipaserver/plugins/internal.py:1101 -msgid "OAuth 2.0 client details" -msgstr "" - -#: ipaserver/plugins/internal.py:1102 -msgid "Identity provider details" -msgstr "" - -#: ipaserver/plugins/internal.py:1103 -msgid "Verify secret" -msgstr "" - -#: ipaserver/plugins/internal.py:1106 -msgid "User to override" -msgstr "" - -#: ipaserver/plugins/internal.py:1107 -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -#: ipaserver/plugins/internal.py:1108 -msgid "Enter trusted user login." -msgstr "" - -#: ipaserver/plugins/internal.py:1109 ipaserver/plugins/internal.py:1743 -msgid "Profile" -msgstr "" - -#: ipaserver/plugins/internal.py:1112 -msgid "Group to override" -msgstr "" - -#: ipaserver/plugins/internal.py:1113 -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -#: ipaserver/plugins/internal.py:1114 -msgid "Enter trusted group name." -msgstr "" - -#: ipaserver/plugins/internal.py:1117 -msgid "Add ID view" -msgstr "" - -#: ipaserver/plugins/internal.py:1118 -msgid "Add group ID override" -msgstr "" - -#: ipaserver/plugins/internal.py:1119 -msgid "Add user ID override" -msgstr "" - -#: ipaserver/plugins/internal.py:1120 -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -#: ipaserver/plugins/internal.py:1121 ipaserver/plugins/internal.py:1122 -msgid "Applied to hosts" -msgstr "" - -#: ipaserver/plugins/internal.py:1123 -msgid "Apply to host groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1125 -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1127 -msgid "Apply to hosts" -msgstr "" - -#: ipaserver/plugins/internal.py:1129 -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#: ipaserver/plugins/internal.py:1132 -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -#: ipaserver/plugins/internal.py:1133 -msgid "Remove ID views" -msgstr "" - -#: ipaserver/plugins/internal.py:1134 -msgid "Remove user ID overrides" -msgstr "" - -#: ipaserver/plugins/internal.py:1135 -msgid "Remove group ID overrides" -msgstr "" - -#: ipaserver/plugins/internal.py:1136 -msgid "Un-apply from host groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1137 -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1138 -msgid "Un-apply" -msgstr "" - -#: ipaserver/plugins/internal.py:1139 -msgid "Un-apply from hosts" -msgstr "" - -#: ipaserver/plugins/internal.py:1140 -msgid "Un-apply ID Views from hosts" -msgstr "" - -#: ipaserver/plugins/internal.py:1141 -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#: ipaserver/plugins/internal.py:1143 -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -#: ipaserver/plugins/internal.py:1147 ipaserver/plugins/krbtpolicy.py:128 -#: ipaserver/plugins/krbtpolicy.py:129 -msgid "Kerberos Ticket Policy" -msgstr "" - -#: ipaserver/plugins/internal.py:1150 -msgid "Add netgroup" -msgstr "" - -#: ipaserver/plugins/internal.py:1152 -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1155 -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1158 -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1161 -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1164 -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1167 -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1175 -msgid "Netgroup Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1177 -msgid "Remove netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1179 -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1182 -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1185 -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1188 -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1191 -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1194 -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1203 -msgid "Add OTP token" -msgstr "" - -#: ipaserver/plugins/internal.py:1205 -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1207 -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -#: ipaserver/plugins/internal.py:1208 -msgid "Configure your token" -msgstr "" - -#: ipaserver/plugins/internal.py:1209 -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -#: ipaserver/plugins/internal.py:1210 -msgid "OTP Token Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1211 -msgid "Disable token" -msgstr "" - -#: ipaserver/plugins/internal.py:1212 -msgid "Enable token" -msgstr "" - -#: ipaserver/plugins/internal.py:1213 -msgid "Remove OTP tokens" -msgstr "" - -#: ipaserver/plugins/internal.py:1215 -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1217 -msgid "Show QR code" -msgstr "" - -#: ipaserver/plugins/internal.py:1218 -msgid "Show configuration uri" -msgstr "" - -#: ipaserver/plugins/internal.py:1219 -msgid "Counter-based (HOTP)" -msgstr "" - -#: ipaserver/plugins/internal.py:1220 -msgid "Time-based (TOTP)" -msgstr "" - -#: ipaserver/plugins/internal.py:1223 -msgid "Add Custom Attribute" -msgstr "" - -#: ipaserver/plugins/internal.py:1226 -msgid "Permission settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1227 -msgid "Attribute breakdown" -msgstr "" - -#: ipaserver/plugins/internal.py:1231 -msgid "Privilege Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1234 -msgid "Public key:" -msgstr "" - -#: ipaserver/plugins/internal.py:1235 -msgid "Set public key" -msgstr "" - -#: ipaserver/plugins/internal.py:1236 ipaserver/plugins/internal.py:1355 -msgid "Show/Set key" -msgstr "" - -#: ipaserver/plugins/internal.py:1237 ipaserver/plugins/internal.py:1356 -msgid "Modified: key not set" -msgstr "" - -#: ipaserver/plugins/internal.py:1238 ipaserver/plugins/internal.py:1357 -msgid "Modified" -msgstr "" - -#: ipaserver/plugins/internal.py:1239 ipaserver/plugins/internal.py:1358 -msgid "New: key not set" -msgstr "" - -#: ipaserver/plugins/internal.py:1240 ipaserver/plugins/internal.py:1359 -msgid "New: key set" -msgstr "" - -#: ipaserver/plugins/internal.py:1243 -msgid "Add password policy" -msgstr "" - -#: ipaserver/plugins/internal.py:1244 ipaserver/plugins/pwpolicy.py:302 -msgid "Password Policy" -msgstr "" - -#: ipaserver/plugins/internal.py:1245 -msgid "Remove password policies" -msgstr "" - -#: ipaserver/plugins/internal.py:1248 -msgid "Add ID range" -msgstr "" - -#: ipaserver/plugins/internal.py:1249 -msgid "Range Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1251 ipaserver/plugins/internal.py:1381 -msgid "Base ID" -msgstr "" - -#: ipaserver/plugins/internal.py:1252 -msgid "Primary RID base" -msgstr "" - -#: ipaserver/plugins/internal.py:1253 ipaserver/plugins/internal.py:1388 -msgid "Range size" -msgstr "" - -#: ipaserver/plugins/internal.py:1254 -msgid "Domain SID" -msgstr "" - -#: ipaserver/plugins/internal.py:1255 -msgid "Secondary RID base" -msgstr "" - -#: ipaserver/plugins/internal.py:1256 -msgid "Remove ID ranges" -msgstr "" - -#: ipaserver/plugins/internal.py:1259 -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -#: ipaserver/plugins/internal.py:1260 -msgid "Detect" -msgstr "" - -#: ipaserver/plugins/internal.py:1261 -msgid "Local domain" -msgstr "" - -#: ipaserver/plugins/internal.py:1262 -msgid "IPA trust" -msgstr "" - -#: ipaserver/plugins/internal.py:1263 -msgid "Active Directory winsync" -msgstr "" - -#: ipaserver/plugins/internal.py:1266 -msgid "Add RADIUS server" -msgstr "" - -#: ipaserver/plugins/internal.py:1267 -msgid "RADIUS Proxy Server Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1268 -msgid "Remove RADIUS servers" -msgstr "" - -#: ipaserver/plugins/internal.py:1272 -msgid "Check DNS" -msgstr "" - -#: ipaserver/plugins/internal.py:1273 -msgid "Do you also want to perform DNS check?" -msgstr "" - -#: ipaserver/plugins/internal.py:1274 -msgid "Force Update" -msgstr "" - -#: ipaserver/plugins/internal.py:1279 -msgid "Add SELinux user map" -msgstr "" - -#: ipaserver/plugins/internal.py:1281 -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1284 -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1287 -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1290 -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1295 -msgid "Remove selinux user maps" -msgstr "" - -#: ipaserver/plugins/internal.py:1297 -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1300 -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1303 -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1306 -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1313 -msgid "Server Roles" -msgstr "" - -#: ipaserver/plugins/internal.py:1314 -msgid "Server Role" -msgstr "" - -#: ipaserver/plugins/internal.py:1317 -msgid "Warning: Consider service replication" -msgstr "" - -#: ipaserver/plugins/internal.py:1318 -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -#: ipaserver/plugins/internal.py:1319 -msgid "Delete Server" -msgstr "" - -#: ipaserver/plugins/internal.py:1320 -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -#: ipaserver/plugins/internal.py:1323 -msgid "Add service" -msgstr "" - -#: ipaserver/plugins/internal.py:1325 -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1328 -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -#: ipaserver/plugins/internal.py:1330 -msgid "Service Certificate" -msgstr "" - -#: ipaserver/plugins/internal.py:1332 -msgid "Service Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1335 -msgid "Provisioning" -msgstr "" - -#: ipaserver/plugins/internal.py:1336 -msgid "Remove services" -msgstr "" - -#: ipaserver/plugins/internal.py:1338 -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#: ipaserver/plugins/internal.py:1341 -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1346 -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -#: ipaserver/plugins/internal.py:1347 -msgid "Unprovisioning service" -msgstr "" - -#: ipaserver/plugins/internal.py:1348 -msgid "Service unprovisioned" -msgstr "" - -#: ipaserver/plugins/internal.py:1349 -msgid "Kerberos Key Present, Service Provisioned" -msgstr "" - -#: ipaserver/plugins/internal.py:1352 -msgid "SSH public keys" -msgstr "" - -#: ipaserver/plugins/internal.py:1353 -msgid "SSH public key:" -msgstr "" - -#: ipaserver/plugins/internal.py:1354 -msgid "Set SSH key" -msgstr "SSH 키 설정" - -#: ipaserver/plugins/internal.py:1362 -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#: ipaserver/plugins/internal.py:1363 -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:1364 -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" - -#: ipaserver/plugins/internal.py:1365 -msgid "Add stage user" -msgstr "" - -#: ipaserver/plugins/internal.py:1366 -msgid "Stage users" -msgstr "" - -#: ipaserver/plugins/internal.py:1367 -msgid "Preserved users" -msgstr "" - -#: ipaserver/plugins/internal.py:1368 -msgid "Remove preserved users" -msgstr "" - -#: ipaserver/plugins/internal.py:1369 -msgid "Remove stage users" -msgstr "" - -#: ipaserver/plugins/internal.py:1370 -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#: ipaserver/plugins/internal.py:1371 -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#: ipaserver/plugins/internal.py:1372 -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:1373 -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#: ipaserver/plugins/internal.py:1374 -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:1375 -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -#: ipaserver/plugins/internal.py:1376 -msgid "User categories" -msgstr "" - -#: ipaserver/plugins/internal.py:1379 -msgid "Add subid" -msgstr "" - -#: ipaserver/plugins/internal.py:1380 -msgid "Assigned subids" -msgstr "" - -#: ipaserver/plugins/internal.py:1382 -msgid "DNA remaining" -msgstr "" - -#: ipaserver/plugins/internal.py:1389 -msgid "Remaining subids" -msgstr "" - -#: ipaserver/plugins/internal.py:1390 -msgid "Subordinate ID Statistics" -msgstr "" - -#: ipaserver/plugins/internal.py:1393 -msgid "Add sudo command" -msgstr "" - -#: ipaserver/plugins/internal.py:1395 -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1399 -msgid "Remove sudo commands" -msgstr "" - -#: ipaserver/plugins/internal.py:1401 -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1406 -msgid "Add sudo command group" -msgstr "" - -#: ipaserver/plugins/internal.py:1408 -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1412 -msgid "Remove sudo command groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1414 -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1419 -msgid "Add sudo rule" -msgstr "" - -#: ipaserver/plugins/internal.py:1420 -msgid "Add sudo option" -msgstr "" - -#: ipaserver/plugins/internal.py:1422 -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1426 -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1430 -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1434 -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1438 -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1441 -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1444 -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1447 -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1450 -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1453 -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1456 -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1458 -msgid "Allow" -msgstr "" - -#: ipaserver/plugins/internal.py:1459 -msgid "Any Command" -msgstr "" - -#: ipaserver/plugins/internal.py:1460 -msgid "Any Group" -msgstr "" - -#: ipaserver/plugins/internal.py:1463 -msgid "Run Commands" -msgstr "" - -#: ipaserver/plugins/internal.py:1464 -msgid "Deny" -msgstr "" - -#: ipaserver/plugins/internal.py:1466 -msgid "Access this host" -msgstr "" - -#: ipaserver/plugins/internal.py:1468 -msgid "Option added" -msgstr "" - -#: ipaserver/plugins/internal.py:1469 -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -#: ipaserver/plugins/internal.py:1471 -msgid "Remove sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1473 -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1477 -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1481 -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1485 -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1489 -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1492 -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1495 -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1498 -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1501 -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1504 -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1507 -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1509 -msgid "As Whom" -msgstr "" - -#: ipaserver/plugins/internal.py:1510 -msgid "Specified Commands and Groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1511 -msgid "Specified Groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1517 -msgid "Remove sudo options" -msgstr "" - -#: ipaserver/plugins/internal.py:1520 -msgid "Autogenerated" -msgstr "" - -#: ipaserver/plugins/internal.py:1521 -msgid "Segment details" -msgstr "" - -#: ipaserver/plugins/internal.py:1522 -msgid "Replication configuration" -msgstr "" - -#: ipaserver/plugins/internal.py:1523 -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -#: ipaserver/plugins/internal.py:1526 -msgid "Add IPA location" -msgstr "" - -#: ipaserver/plugins/internal.py:1528 -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1530 -msgid "Remove IPA locations" -msgstr "" - -#: ipaserver/plugins/internal.py:1532 -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1536 -msgid "Add topology segment" -msgstr "" - -#: ipaserver/plugins/internal.py:1537 -msgid "Remove topology segments" -msgstr "" - -#: ipaserver/plugins/internal.py:1540 -msgid "Account" -msgstr "" - -#: ipaserver/plugins/internal.py:1541 -msgid "Add trust" -msgstr "" - -#: ipaserver/plugins/internal.py:1542 -msgid "Administrative account" -msgstr "" - -#: ipaserver/plugins/internal.py:1543 -msgid "SID blocklists" -msgstr "" - -#: ipaserver/plugins/internal.py:1544 -msgid "Trust Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1546 -msgid "Establish using" -msgstr "" - -#: ipaserver/plugins/internal.py:1547 -msgid "Fetch domains" -msgstr "" - -#: ipaserver/plugins/internal.py:1550 -msgid "Pre-shared password" -msgstr "" - -#: ipaserver/plugins/internal.py:1551 -msgid "Remove trusts" -msgstr "" - -#: ipaserver/plugins/internal.py:1552 -msgid "Remove domains" -msgstr "" - -#: ipaserver/plugins/internal.py:1556 -msgid "Alternative UPN suffixes" -msgstr "" - -#: ipaserver/plugins/internal.py:1560 -msgid "User attributes for SMB services" -msgstr "" - -#: ipaserver/plugins/internal.py:1563 -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -#: ipaserver/plugins/internal.py:1566 -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -#: ipaserver/plugins/internal.py:1569 -msgid "Path to a user home directory, in UNC format" -msgstr "" - -#: ipaserver/plugins/internal.py:1572 -msgid "Drive to mount a home directory" -msgstr "" - -#: ipaserver/plugins/internal.py:1579 -msgid "Account Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1580 -msgid "Account Status" -msgstr "" - -#: ipaserver/plugins/internal.py:1581 -msgid "Active users" -msgstr "" - -#: ipaserver/plugins/internal.py:1582 -msgid "Add user" -msgstr "" - -#: ipaserver/plugins/internal.py:1584 -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1587 -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1590 -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1593 -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#: ipaserver/plugins/internal.py:1596 -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1598 -msgid "Auto assign subordinate ids" -msgstr "" - -#: ipaserver/plugins/internal.py:1600 -#, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:1603 -msgid "Contact Settings" -msgstr "" - -#: ipaserver/plugins/internal.py:1604 -msgid "Delete mode" -msgstr "" - -#: ipaserver/plugins/internal.py:1605 -msgid "Employee Information" -msgstr "" - -#: ipaserver/plugins/internal.py:1606 -msgid "Error changing account status" -msgstr "" - -#: ipaserver/plugins/internal.py:1607 -msgid "Password expiration" -msgstr "" - -#: ipaserver/plugins/internal.py:1608 -msgid "Mailing Address" -msgstr "" - -#: ipaserver/plugins/internal.py:1609 -msgid "Misc. Information" -msgstr "" - -#: ipaserver/plugins/internal.py:1610 -msgid "delete" -msgstr "" - -#: ipaserver/plugins/internal.py:1611 -msgid "preserve" -msgstr "" - -#: ipaserver/plugins/internal.py:1612 -msgid "No private group" -msgstr "" - -#: ipaserver/plugins/internal.py:1613 -msgid "Remove users" -msgstr "" - -#: ipaserver/plugins/internal.py:1615 -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#: ipaserver/plugins/internal.py:1618 -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#: ipaserver/plugins/internal.py:1621 -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#: ipaserver/plugins/internal.py:1624 -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1627 -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#: ipaserver/plugins/internal.py:1629 -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#: ipaserver/plugins/internal.py:1630 -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -#: ipaserver/plugins/internal.py:1631 -msgid "Unlock" -msgstr "" - -#: ipaserver/plugins/internal.py:1632 -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -#: ipaserver/plugins/internal.py:1635 -msgid "Add vault" -msgstr "" - -#: ipaserver/plugins/internal.py:1637 -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1640 -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1643 -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1646 -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1649 -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1652 -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1655 -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -#: ipaserver/plugins/internal.py:1659 -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -#: ipaserver/plugins/internal.py:1662 -msgid "Asymmetric" -msgstr "" - -#: ipaserver/plugins/internal.py:1663 -msgid "Vaults Config" -msgstr "" - -#: ipaserver/plugins/internal.py:1665 -msgid "Members" -msgstr "" - -#: ipaserver/plugins/internal.py:1666 -msgid "My User Vaults" -msgstr "" - -#: ipaserver/plugins/internal.py:1667 -msgid "Owners" -msgstr "" - -#: ipaserver/plugins/internal.py:1668 -msgid "Remove vaults" -msgstr "저장소 제거" - -#: ipaserver/plugins/internal.py:1670 -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1673 -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1676 -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1679 -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1682 -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1685 -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -#: ipaserver/plugins/internal.py:1688 -msgid "Service Vaults" -msgstr "" - -#: ipaserver/plugins/internal.py:1689 -msgid "Shared" -msgstr "" - -#: ipaserver/plugins/internal.py:1690 -msgid "Shared Vaults" -msgstr "공유 저장소" - -#: ipaserver/plugins/internal.py:1691 -msgid "Standard" -msgstr "" - -#: ipaserver/plugins/internal.py:1692 -msgid "Symmetric" -msgstr "" - -#: ipaserver/plugins/internal.py:1693 -msgid "Vault Type" -msgstr "" - -#: ipaserver/plugins/internal.py:1695 -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -#: ipaserver/plugins/internal.py:1699 -msgid "User Vaults" -msgstr "" - -#: ipaserver/plugins/internal.py:1704 -msgid "Current password is required" -msgstr "" - -#: ipaserver/plugins/internal.py:1705 -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -#: ipaserver/plugins/internal.py:1706 -msgid "First OTP" -msgstr "" - -#: ipaserver/plugins/internal.py:1710 -msgid "New password is required" -msgstr "" - -#: ipaserver/plugins/internal.py:1713 -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -#: ipaserver/plugins/internal.py:1717 -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -#: ipaserver/plugins/internal.py:1722 -msgid "Token synchronization failed" -msgstr "" - -#: ipaserver/plugins/internal.py:1723 -msgid "The username, password or token codes are not correct" -msgstr "" - -#: ipaserver/plugins/internal.py:1724 -msgid "Token was synchronized" -msgstr "" - -#: ipaserver/plugins/internal.py:1727 -msgid "Password change complete" -msgstr "" - -#: ipaserver/plugins/internal.py:1729 -msgid "Your password has expired. Please enter a new password." -msgstr "" - -#: ipaserver/plugins/internal.py:1730 -msgid "Passwords must match" -msgstr "" - -#: ipaserver/plugins/internal.py:1731 -msgid "Password reset was not successful." -msgstr "" - -#: ipaserver/plugins/internal.py:1733 -msgid "Reset your password." -msgstr "자신의 비밀번호를 초기화합니다." - -#: ipaserver/plugins/internal.py:1734 -msgid "Second OTP" -msgstr "" - -#: ipaserver/plugins/internal.py:1736 -msgid "Verify Password" -msgstr "" - -#: ipaserver/plugins/internal.py:1746 -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#: ipaserver/plugins/internal.py:1747 -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -#: ipaserver/plugins/internal.py:1748 -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#: ipaserver/plugins/internal.py:1749 -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -#: ipaserver/plugins/internal.py:1750 -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#: ipaserver/plugins/internal.py:1751 -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -#: ipaserver/plugins/internal.py:1752 -msgid "Some entries were not deleted" -msgstr "" - -#: ipaserver/plugins/internal.py:1755 -msgid "Quick Links" -msgstr "" - -#: ipaserver/plugins/internal.py:1756 -msgid "Select All" -msgstr "" - -#: ipaserver/plugins/internal.py:1757 -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -#: ipaserver/plugins/internal.py:1758 -msgid "Unselect All" -msgstr "" - -#: ipaserver/plugins/internal.py:1762 -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1766 -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1778 -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1814 -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1826 -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1855 -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1900 -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1911 -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1948 -msgid "Working" -msgstr "" - -#: ipaserver/plugins/internal.py:1951 -msgid "Audit" -msgstr "" - -#: ipaserver/plugins/internal.py:1952 -msgid "Authentication" -msgstr "" - -#: ipaserver/plugins/internal.py:1954 -msgid "Automount" -msgstr "" - -#: ipaserver/plugins/internal.py:1956 -msgid "DNS" -msgstr "" - -#: ipaserver/plugins/internal.py:1957 -msgid "Host-Based Access Control" -msgstr "" - -#: ipaserver/plugins/internal.py:1958 -msgid "Identity" -msgstr "" - -#: ipaserver/plugins/internal.py:1960 -msgid "Network Services" -msgstr "" - -#: ipaserver/plugins/internal.py:1961 -msgid "Policy" -msgstr "" - -#: ipaserver/plugins/internal.py:1962 -msgid "Role-Based Access Control" -msgstr "" - -#: ipaserver/plugins/internal.py:1963 -msgid "Subordinate IDs" -msgstr "" - -#: ipaserver/plugins/internal.py:1964 -msgid "Sudo" -msgstr "" - -#: ipaserver/plugins/internal.py:1965 -msgid "Topology" -msgstr "" - -#: ipaserver/plugins/internal.py:1968 -msgid "True" -msgstr "" - -#: ipaserver/plugins/internal.py:1970 -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -#: ipaserver/plugins/internal.py:1987 -msgid "API Browser" -msgstr "" - -#: ipaserver/plugins/internal.py:1988 -msgid "First" -msgstr "" - -#: ipaserver/plugins/internal.py:1989 -msgid "Last" -msgstr "" - -#: ipaserver/plugins/internal.py:1990 -msgid "Next" -msgstr "" - -#: ipaserver/plugins/internal.py:1991 -msgid "Page" -msgstr "" - -#: ipaserver/plugins/internal.py:1992 -msgid "Prev" -msgstr "" - -#: ipaserver/plugins/internal.py:1993 -msgid "Undo" -msgstr "" - -#: ipaserver/plugins/internal.py:1994 -msgid "Undo this change." -msgstr "" - -#: ipaserver/plugins/internal.py:1995 -msgid "Undo All" -msgstr "" - -#: ipaserver/plugins/internal.py:1996 -msgid "Undo all changes in this field." -msgstr "" - -#: ipaserver/plugins/internal.py:1998 -msgid "Text does not match field pattern" -msgstr "" - -#: ipaserver/plugins/internal.py:1999 -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -#: ipaserver/plugins/internal.py:2000 -msgid "Must be a decimal number" -msgstr "" - -#: ipaserver/plugins/internal.py:2001 -msgid "Format error" -msgstr "" - -#: ipaserver/plugins/internal.py:2002 -msgid "Must be an integer" -msgstr "" - -#: ipaserver/plugins/internal.py:2003 -msgid "Not a valid IP address" -msgstr "" - -#: ipaserver/plugins/internal.py:2004 -msgid "Not a valid IPv4 address" -msgstr "" - -#: ipaserver/plugins/internal.py:2005 -msgid "Not a valid IPv6 address" -msgstr "" - -#: ipaserver/plugins/internal.py:2006 -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#: ipaserver/plugins/internal.py:2007 -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -#: ipaserver/plugins/internal.py:2008 -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -#: ipaserver/plugins/internal.py:2009 -msgid "Parse error" -msgstr "" - -#: ipaserver/plugins/internal.py:2010 -msgid "Must be a positive number" -msgstr "" - -#: ipaserver/plugins/internal.py:2011 -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -#: ipaserver/plugins/internal.py:2012 -msgid "Required field" -msgstr "" - -#: ipaserver/plugins/internal.py:2013 -msgid "Unsupported value" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:86 -msgid "kerberos ticket policy settings" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:152 -msgid "OTP max life" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:153 -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:157 -msgid "OTP max renew" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:158 -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:162 -msgid "RADIUS max life" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:163 -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:167 -msgid "RADIUS max renew" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:168 -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:172 -msgid "PKINIT max life" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:173 -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:177 -msgid "PKINIT max renew" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:178 -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:182 -msgid "Hardened max life" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:183 -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:187 -msgid "Hardened max renew" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:188 -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:192 -msgid "IdP max life" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:193 -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:198 -msgid "IdP max renew" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:199 -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:284 -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -#: ipaserver/plugins/krbtpolicy.py:304 -msgid "Default ticket policy could not be read" -msgstr "" - -#: ipaserver/plugins/migration.py:46 -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#: ipaserver/plugins/migration.py:145 -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#: ipaserver/plugins/migration.py:146 -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -#: ipaserver/plugins/migration.py:147 -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -#: ipaserver/plugins/migration.py:148 -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -#: ipaserver/plugins/migration.py:149 -msgid "Malformed DN" -msgstr "" - -#: ipaserver/plugins/migration.py:194 -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -#: ipaserver/plugins/migration.py:461 -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -#: ipaserver/plugins/migration.py:476 -msgid "Invalid LDAP URI." -msgstr "" - -#: ipaserver/plugins/migration.py:678 -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -#: ipaserver/plugins/migration.py:680 -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#: ipaserver/plugins/migration.py:769 -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -#: ipaserver/plugins/migration.py:804 ipaserver/plugins/user.py:593 -msgid "Default group for new users not found" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:43 -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:96 -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:147 -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:175 -msgid "Add Class of Service entry" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:198 -msgid "Delete Class of Service entry" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:204 -msgid "Modify Class of Service entry" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:222 -msgid "Display Class of Service entry" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:228 -msgid "Search for Class of Service entry" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:241 -msgid "password policy" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:242 -msgid "password policies" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:301 -msgid "Password Policies" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:374 -msgid "Max repeat" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:375 -msgid "Maximum number of same consecutive characters" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:383 -msgid "Max sequence" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:384 -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:392 -msgid "Dictionary check" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:393 -msgid "Check if the password is a dictionary word" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:399 -msgid "User check" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:400 -msgid "Check if the password contains the username" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:406 -msgid "Grace login limit" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:407 -msgid "Number of LDAP authentications allowed after expiration" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:482 -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:508 -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:567 -msgid "cannot delete global password policy" -msgstr "" - -#: ipaserver/plugins/pwpolicy.py:603 -msgid "priority cannot be set on global policy" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:89 -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:128 -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:142 -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:147 -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:161 -msgid "SELinux user map list not found in configuration" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:166 -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:176 -msgid "SELinux User Map rule" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:177 -msgid "SELinux User Map rules" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:233 -msgid "SELinux User Maps" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:234 -msgid "SELinux User Map" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:309 -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:330 -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:368 -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:376 -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:449 -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/selinuxusermap.py:499 -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/selinuxusermap.py:529 -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/service.py:60 -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -#: ipaserver/plugins/service.py:113 -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -#: ipaserver/plugins/service.py:116 -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -#: ipaserver/plugins/service.py:180 -msgid "Trusted to authenticate as user" -msgstr "" - -#: ipaserver/plugins/service.py:181 -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#: ipaserver/plugins/service.py:226 -#, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "" - -#: ipaserver/plugins/service.py:242 -msgid "Malformed principal" -msgstr "" - -#: ipaserver/plugins/service.py:321 -msgid "{} is required by the IPA master" -msgstr "" - -#: ipaserver/plugins/service.py:395 -msgid "service" -msgstr "" - -#: ipaserver/plugins/service.py:396 -msgid "services" -msgstr "" - -#: ipaserver/plugins/service.py:512 -msgid "Service principal alias" -msgstr "" - -#: ipaserver/plugins/service.py:520 -msgid "Base-64 encoded service certificate" -msgstr "" - -#: ipaserver/plugins/service.py:571 -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#: ipaserver/plugins/service.py:596 -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -#: ipaserver/plugins/service.py:648 -msgid "Add a new IPA service." -msgstr "" - -#: ipaserver/plugins/service.py:650 ipaserver/plugins/service.py:719 -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/service.py:656 -msgid "force principal name even if host not in DNS" -msgstr "" - -#: ipaserver/plugins/service.py:659 -msgid "Skip host check" -msgstr "" - -#: ipaserver/plugins/service.py:660 -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#: ipaserver/plugins/service.py:678 ipaserver/plugins/service.py:787 -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -#: ipaserver/plugins/service.py:717 -msgid "Add a new SMB service." -msgstr "" - -#: ipaserver/plugins/service.py:733 -msgid "SMB service NetBIOS name" -msgstr "" - -#: ipaserver/plugins/service.py:847 -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/service.py:867 -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/service.py:918 -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/service.py:1117 -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/service.py:1158 -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/service.py:1165 -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/service.py:1181 -msgid "Add new principal alias to a service" -msgstr "" - -#: ipaserver/plugins/service.py:1182 -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/service.py:1193 -msgid "Remove principal alias from a service" -msgstr "" - -#: ipaserver/plugins/service.py:1194 -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:65 -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -#: ipaserver/plugins/stageuser.py:128 -msgid "Stage Users" -msgstr "" - -#: ipaserver/plugins/stageuser.py:129 -msgid "Stage User" -msgstr "" - -#: ipaserver/plugins/stageuser.py:130 -msgid "stage user" -msgstr "" - -#: ipaserver/plugins/stageuser.py:131 -msgid "stage users" -msgstr "" - -#: ipaserver/plugins/stageuser.py:278 -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:297 -msgid "givenname is required" -msgstr "" - -#: ipaserver/plugins/stageuser.py:300 -msgid "sn is required" -msgstr "" - -#: ipaserver/plugins/stageuser.py:431 -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:437 -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:484 ipaserver/plugins/user.py:883 -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/stageuser.py:508 -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:521 -msgid "Entry RDN is not 'uid'" -msgstr "" - -#: ipaserver/plugins/stageuser.py:527 -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#: ipaserver/plugins/stageuser.py:703 -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#: ipaserver/plugins/stageuser.py:767 -#, python-format -msgid "Stage user %s activated" -msgstr "" - -#: ipaserver/plugins/stageuser.py:784 -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#: ipaserver/plugins/stageuser.py:785 -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:790 -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#: ipaserver/plugins/stageuser.py:791 -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:796 -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#: ipaserver/plugins/stageuser.py:797 -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:802 -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#: ipaserver/plugins/stageuser.py:803 -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/stageuser.py:808 -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -#: ipaserver/plugins/stageuser.py:814 -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -#: ipaserver/plugins/idviews.py:72 ipaserver/plugins/idviews.py:123 -#: ipaserver/plugins/idviews.py:131 ipaserver/plugins/idviews.py:352 -#: ipaserver/plugins/idviews.py:843 -msgid "ID View" -msgstr "" - -#: ipaserver/plugins/idviews.py:74 -msgid "system ID View" -msgstr "" - -#: ipaserver/plugins/idviews.py:124 ipaserver/plugins/idviews.py:130 -msgid "ID Views" -msgstr "" - -#: ipaserver/plugins/idviews.py:145 -msgid "User object overrides" -msgstr "" - -#: ipaserver/plugins/idviews.py:149 -msgid "Group object overrides" -msgstr "" - -#: ipaserver/plugins/idviews.py:153 -msgid "Hosts the view applies to" -msgstr "" - -#: ipaserver/plugins/idviews.py:197 -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:214 -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:227 -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:243 -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/idviews.py:353 -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -#: ipaserver/plugins/idviews.py:381 ipaserver/plugins/idviews.py:414 -msgid "not found" -msgstr "" - -#: ipaserver/plugins/idviews.py:395 -msgid "ID View cannot be applied to IPA master" -msgstr "" - -#: ipaserver/plugins/idviews.py:412 -msgid "ID View already applied" -msgstr "" - -#: ipaserver/plugins/idviews.py:432 -msgid "value" -msgstr "" - -#: ipaserver/plugins/idviews.py:445 -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#: ipaserver/plugins/idviews.py:446 -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#: ipaserver/plugins/idviews.py:488 -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#: ipaserver/plugins/idviews.py:489 -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -#: ipaserver/plugins/idviews.py:557 -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -#: ipaserver/plugins/idviews.py:595 -msgid "IPA object" -msgstr "" - -#: ipaserver/plugins/idviews.py:596 -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#: ipaserver/plugins/idviews.py:690 -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -#: ipaserver/plugins/idviews.py:844 -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -#: ipaserver/plugins/idviews.py:888 -msgid "Add a new ID override." -msgstr "" - -#: ipaserver/plugins/idviews.py:889 -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:904 -msgid "Delete an ID override." -msgstr "" - -#: ipaserver/plugins/idviews.py:905 -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:928 -msgid "Modify an ID override." -msgstr "" - -#: ipaserver/plugins/idviews.py:929 -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:936 -msgid "ID override" -msgstr "" - -#: ipaserver/plugins/idviews.py:937 -msgid "ID overrides cannot be renamed" -msgstr "" - -#: ipaserver/plugins/idviews.py:949 -msgid "Search for an ID override." -msgstr "" - -#: ipaserver/plugins/idviews.py:950 -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/idviews.py:962 msgid "Display information about an ID override." msgstr "ID 재정의에 대한 정보를 표시합니다." -#: ipaserver/plugins/idviews.py:974 ipaserver/plugins/idviews.py:978 -msgid "User ID override" -msgstr "" - -#: ipaserver/plugins/idviews.py:975 ipaserver/plugins/idviews.py:977 -msgid "User ID overrides" -msgstr "" - -#: ipaserver/plugins/idviews.py:1097 ipaserver/plugins/idviews.py:1101 -msgid "Group ID override" -msgstr "" - -#: ipaserver/plugins/idviews.py:1098 ipaserver/plugins/idviews.py:1100 -msgid "Group ID overrides" -msgstr "" - -#: ipaserver/plugins/idviews.py:1142 -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#: ipaserver/plugins/idviews.py:1143 -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:1165 -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#: ipaserver/plugins/idviews.py:1166 -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:1190 -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:1215 -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:1221 -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:1253 -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/idviews.py:1289 -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:1295 -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:1301 -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/idviews.py:1307 -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/ldap2.py:278 -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -#: ipaserver/plugins/ca.py:21 -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" - -#: ipaserver/plugins/ca.py:23 -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -#: ipaserver/plugins/ca.py:26 -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -#: ipaserver/plugins/ca.py:29 -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -#: ipaserver/plugins/ca.py:33 -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -#: ipaserver/plugins/ca.py:38 -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -#: ipaserver/plugins/ca.py:44 -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -#: ipaserver/plugins/ca.py:48 -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -#: ipaserver/plugins/ca.py:52 -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -#: ipaserver/plugins/ca.py:69 ipaserver/plugins/ca.py:80 -msgid "Certificate Authority" -msgstr "" - -#: ipaserver/plugins/ca.py:70 ipaserver/plugins/ca.py:79 -msgid "Certificate Authorities" -msgstr "" - -#: ipaserver/plugins/ca.py:87 -msgid "Name for referencing the CA" -msgstr "" - -#: ipaserver/plugins/ca.py:92 -msgid "Description of the purpose of the CA" -msgstr "" - -#: ipaserver/plugins/ca.py:96 -msgid "Authority ID" -msgstr "" - -#: ipaserver/plugins/ca.py:97 -msgid "Dogtag Authority ID" -msgstr "" - -#: ipaserver/plugins/ca.py:102 ipaserver/plugins/ca.py:296 -msgid "Subject DN" -msgstr "" - -#: ipaserver/plugins/ca.py:103 -msgid "Subject Distinguished Name" -msgstr "" - -#: ipaserver/plugins/ca.py:108 ipaserver/plugins/cert.py:426 -msgid "Issuer DN" -msgstr "" - -#: ipaserver/plugins/ca.py:109 -msgid "Issuer Distinguished Name" -msgstr "" - -#: ipaserver/plugins/ca.py:115 ipaserver/plugins/cert.py:354 -msgid "Base-64 encoded certificate." -msgstr "" - -#: ipaserver/plugins/ca.py:120 ipaserver/plugins/cert.py:359 -msgid "Certificate chain" -msgstr "" - -#: ipaserver/plugins/ca.py:121 ipaserver/plugins/cert.py:360 -msgid "X.509 certificate chain" -msgstr "" - -#: ipaserver/plugins/ca.py:127 -msgid "RSN Version" -msgstr "" - -#: ipaserver/plugins/ca.py:128 -msgid "Random Serial Number Version" -msgstr "" - -#: ipaserver/plugins/ca.py:228 -msgid "Search for CAs." -msgstr "" - -#: ipaserver/plugins/ca.py:230 -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/ca.py:247 ipaserver/plugins/cert.py:596 -msgid "Include certificate chain in output" -msgstr "" - -#: ipaserver/plugins/ca.py:253 -msgid "Display the properties of a CA." -msgstr "" - -#: ipaserver/plugins/ca.py:270 -msgid "Create a CA." -msgstr "" - -#: ipaserver/plugins/ca.py:271 -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/ca.py:281 -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#: ipaserver/plugins/ca.py:297 -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#: ipaserver/plugins/ca.py:312 -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -#: ipaserver/plugins/ca.py:336 -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#: ipaserver/plugins/ca.py:338 -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/ca.py:347 -msgid "Insufficient privilege to delete a CA." -msgstr "" - -#: ipaserver/plugins/ca.py:353 -msgid "IPA CA cannot be deleted" -msgstr "" - -#: ipaserver/plugins/ca.py:362 -msgid "Must be disabled first" -msgstr "" - -#: ipaserver/plugins/ca.py:370 -msgid "Modify CA configuration." -msgstr "" - -#: ipaserver/plugins/ca.py:371 -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/ca.py:397 -msgid "Insufficient privilege to modify a CA." -msgstr "" - -#: ipaserver/plugins/ca.py:413 -msgid "Disable a CA." -msgstr "" - -#: ipaserver/plugins/ca.py:414 -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/ca.py:421 -msgid "IPA CA cannot be disabled" -msgstr "" - -#: ipaserver/plugins/ca.py:431 -msgid "Enable a CA." -msgstr "" - -#: ipaserver/plugins/ca.py:432 -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/cert.py:69 -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -#: ipaserver/plugins/cert.py:71 -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:73 -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:76 -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:79 -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:82 -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -#: ipaserver/plugins/cert.py:84 -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -#: ipaserver/plugins/cert.py:87 -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -#: ipaserver/plugins/cert.py:89 -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:92 -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:95 -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:97 -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:101 -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -#: ipaserver/plugins/cert.py:104 -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -#: ipaserver/plugins/cert.py:107 -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -#: ipaserver/plugins/cert.py:110 -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -#: ipaserver/plugins/cert.py:113 -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -#: ipaserver/plugins/cert.py:116 -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -#: ipaserver/plugins/cert.py:119 -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -#: ipaserver/plugins/cert.py:122 -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -#: ipaserver/plugins/cert.py:125 -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -#: ipaserver/plugins/cert.py:128 -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -#: ipaserver/plugins/cert.py:131 -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -#: ipaserver/plugins/cert.py:134 -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -#: ipaserver/plugins/cert.py:138 -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -#: ipaserver/plugins/cert.py:141 -msgid " * 0 - unspecified\n" -msgstr "" - -#: ipaserver/plugins/cert.py:142 -msgid " * 1 - keyCompromise\n" -msgstr "" - -#: ipaserver/plugins/cert.py:143 -msgid " * 2 - cACompromise\n" -msgstr "" - -#: ipaserver/plugins/cert.py:144 -msgid " * 3 - affiliationChanged\n" -msgstr "" - -#: ipaserver/plugins/cert.py:145 -msgid " * 4 - superseded\n" -msgstr "" - -#: ipaserver/plugins/cert.py:146 -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -#: ipaserver/plugins/cert.py:147 -msgid " * 6 - certificateHold\n" -msgstr "" - -#: ipaserver/plugins/cert.py:148 -msgid " * 8 - removeFromCRL\n" -msgstr "" - -#: ipaserver/plugins/cert.py:149 -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -#: ipaserver/plugins/cert.py:150 -msgid " * 10 - aACompromise\n" -msgstr "" - -#: ipaserver/plugins/cert.py:151 -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -#: ipaserver/plugins/cert.py:153 -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#: ipaserver/plugins/cert.py:289 -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -#: ipaserver/plugins/cert.py:309 -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#: ipaserver/plugins/cert.py:313 -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -#: ipaserver/plugins/cert.py:347 -msgid "Issuing CA" -msgstr "" - -#: ipaserver/plugins/cert.py:348 -msgid "Name of issuing CA" -msgstr "" - -#: ipaserver/plugins/cert.py:370 -msgid "Subject email address" -msgstr "" - -#: ipaserver/plugins/cert.py:375 -msgid "Subject DNS name" -msgstr "" - -#: ipaserver/plugins/cert.py:380 -msgid "Subject X.400 address" -msgstr "" - -#: ipaserver/plugins/cert.py:385 -msgid "Subject directory name" -msgstr "" - -#: ipaserver/plugins/cert.py:390 -msgid "Subject EDI Party name" -msgstr "" - -#: ipaserver/plugins/cert.py:395 -msgid "Subject URI" -msgstr "" - -#: ipaserver/plugins/cert.py:400 -msgid "Subject IP Address" -msgstr "" - -#: ipaserver/plugins/cert.py:405 -msgid "Subject OID" -msgstr "대상 OID" - -#: ipaserver/plugins/cert.py:410 -msgid "Subject UPN" -msgstr "" - -#: ipaserver/plugins/cert.py:415 -msgid "Subject Kerberos principal name" -msgstr "" - -#: ipaserver/plugins/cert.py:420 -msgid "Subject Other Name" -msgstr "" - -#: ipaserver/plugins/cert.py:458 +msgid "Encryption types to request" +msgstr "요청하는 암호화 유형" + +msgid "Extra hashes to generate in password plug-in" +msgstr "비밀번호 플러그-인에서 생성 할 추가 해쉬" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "서버로 바인드 하는데 실패함!\n" + +#, c-format +msgid "Failed to create control!\n" +msgstr "제어를 생성하는데 실패함!\n" + +msgid "Failed to decode control reply!\n" +msgstr "제어 응답을 디코드 하는데 실패함\n" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "키탭을 가져오는데 실패함!\n" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "결과를 가져오는데 실패함: %s\n" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "구성 파일 %s를 여는데 실패함\n" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "키탭을 가져오는데 실패함\n" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "키탭을 여는데 실패함 '%1$s': %2$s\n" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "구성 파일 %s를 구문 분석하는데 실패함\n" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "확장된 결과를 구문 분석하는데 실패함: %s\n" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "결과를 구문 분석하는데 실패함: %s\n" + +msgid "Failed to resolve symlink to keytab.\n" +msgstr "심볼릭링크를 키탭으로 결정 하는데 실패함\n" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "키를 검색하는데 실패함" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "암호화 유형 %1$s (#%2$d)를 검색하는데 실패함\n" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "암호화 형태 유형 #%d를 검색하는데 실패함\n" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "커서 '%1$s' 설정에 실패함\n" + +msgid "Hosts allowed to create keytab" +msgstr "키탭을 생성하는데 허용된 호스트" + +msgid "IPA CA certificate" +msgstr "IPA CA 인증서" + +msgid "IPA role name" +msgstr "IPA 역할 이름" + +msgid "KEY Algorithm" +msgstr "키 알고리즘" + +msgid "Kerberos Service Principal Name" +msgstr "커버러스 서비스 주체 이름" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "커버러스 문맥 초기화에 실패함\n" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "커버러스 문맥을 초기화 하는데 실패함: %1$s (%2$d)\n" + +msgid "Keytab File Name" +msgstr "키탭 파일 이름" + +msgid "LDAP DN" +msgstr "LDAP DN" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "만약 bindd/bindpw가 없는 경우 LDAP SASL 바인드 동작원리" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "연결 할 LDAP URI입니다. --server와 상호 배타적" + +msgid "LOC Minutes Longitude" +msgstr "LOC 분 위도" + +msgid "Left node" +msgstr "왼쪽 노드" + +msgid "Length of TOTP token code validity" +msgstr "TOTP 토큰 코드 유효성의 길이" + +msgid "Match cn attribute in subject" +msgstr "주제에서 cn 속성을 일치합니다" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "응답 제어 목록이 누락됨!\n" + +#, c-format +msgid "Missing reply control!\n" +msgstr "응답 제어 누락!\n" + +msgid "Modify an automount key." +msgstr "자동 적재된 키를 수정합니다." + +msgid "Modify global trust configuration." +msgstr "전역 신뢰 구성을 수정합니다." + +msgid "New vault password" +msgstr "신규 저장소 비밀번호" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "KDC에 의해 허용하는 키가 없습니다\n" + +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "이 호스트를 IPA 도메인으로 가입 할 수 있는 권한이 없습니다.\n" + +msgid "Number of hosts the ID View was applied to:" +msgstr "호스트 ID 보기의 수는 다음과 같이 적용됩니다:" + +msgid "OTP" +msgstr "OTP" + +msgid "Operating system" +msgstr "운영 체제" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "작업 실패: %s\n" + +#, c-format +msgid "Out of Memory!\n" +msgstr "메모리 부족!\n" + +#, c-format +msgid "Out of memory \n" +msgstr "메모리 부족 \n" + +#, c-format +msgid "Out of memory!\n" +msgstr "메모리 부족!\n" + +msgid "Output only on errors" +msgstr "오류에서만 출력" + +msgid "Owner" +msgstr "소유자" + +msgid "Password migration was not successful" +msgstr "비밀번호 이전이 성공하지 못했습니다" + +#, c-format +msgid "Passwords do not match!\n" +msgstr "비밀번호가 일치하지 않습니다!\n" + +msgid "Path to the IPA CA certificate" +msgstr "IPA CA 인증서 경로" + +msgid "Permitted Encryption Types" +msgstr "허용되는 암호화 유형" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "이와 같은 교환기에 주어진 우선권. 낮은 값이 더 선호됩니다" + +msgid "Print as little as possible" +msgstr "가능한 작게 출력합니다" + +msgid "Print debugging information" +msgstr "디버깅 정보 인쇄" + +msgid "Prompt for LDAP password" +msgstr "LDAP 비밀번호를 위한 프롬프트" + +msgid "RRSIG Type Covered" +msgstr "RRSIG 유형 적용" + +msgid "Raw APL records" +msgstr "단순 APL 레코드" + +msgid "Realm name" +msgstr "영역 이름" + +msgid "Remove all principals in this realm" +msgstr "이와 같은 영역에서 모든 주체를 제거합니다" + +msgid "Remove vaults" +msgstr "저장소 제거" + +#, c-format +msgid "Removing principal %s\n" +msgstr "주체 %s를 제거하기\n" + +msgid "Reset your password." +msgstr "자신의 비밀번호를 초기화합니다." + +msgid "SASL Bind failed\n" +msgstr "SASL 바인드가 실패했습니다\n" + +msgid "SSH public key fingerprint" +msgstr "SSH 공유 키 지문" + +msgid "Search for DNS zones (SOA records)." +msgstr "DNS 존을 위한 검사 (SOA 레코드)." + +msgid "Search for classes." +msgstr "등급 검색." + +msgid "Search for hosts with these member of roles." +msgstr "역할의 이들 구성원과 함께 호스트를 위한 검색." + +msgid "Search for netgroups without these member groups." +msgstr "이들 구성원 그룹이 없이 넷그룹를 위한 검색." + +msgid "Search for stage users without these member of HBAC rules." +msgstr "HBAC 규칙의 이들 구성원이 없이 스테이지 사용자를 검색합니다." + msgid "Serial number (hex)" msgstr "일련 번호 (16 진수)" -#: ipaserver/plugins/cert.py:581 -msgid "Request status" -msgstr "" +msgid "Server Name" +msgstr "서버 이름" + +msgid "Set SSH key" +msgstr "SSH 키 설정" + +msgid "Shared Vaults" +msgstr "공유 저장소" + +msgid "Show the list of permitted encryption types and exit" +msgstr "허용된 암호화 유형의 목록을 표시하고 종료" + +msgid "Simple bind failed\n" +msgstr "단순 바인드에 실패함\n" + +msgid "Split DNS record to parts" +msgstr "DNS 레코드를 부분으로 분할" + +msgid "Subject OID" +msgstr "대상 OID" -#: ipaserver/plugins/cert.py:627 msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "신규 키를 (만약 존재 한다면 생성 될 것임)로 확장하는 키탭 파일." -#: ipaserver/plugins/cert.py:676 -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" +msgid "The keytab file to remove the principcal(s) from" +msgstr "주체를 제거하는 키탭 파일" -#: ipaserver/plugins/cert.py:728 -msgid "No Common Name was found in subject of request." -msgstr "" +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "(예제: ftp/ftp.example.com@EXAMPLE.COM)를 위해 키탭에서 가져올 주체" -#: ipaserver/plugins/cert.py:736 -#, python-format msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "keytab에서 제거 할 주체 (예제: ftp/ftp.example.com@EXAMPLE.COM)" -#: ipaserver/plugins/cert.py:742 -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" +#, c-format +msgid "Timeout exceeded." +msgstr "제한시간이 초과 되었습니다." -#: ipaserver/plugins/cert.py:751 -msgid "DN commonName does not match user's login" -msgstr "" +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "ldap 라이브러리를 초기화 할 수 없습니다\n" -#: ipaserver/plugins/cert.py:765 -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" +#, c-format +msgid "Unable to parse principal\n" +msgstr "주체를 구문 분석 할 수 없습니다\n" -#: ipaserver/plugins/cert.py:774 -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "주요 이름을 구문 분석 할 수 없습니다\n" -#: ipaserver/plugins/cert.py:795 ipaserver/plugins/cert.py:913 -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "주체를 구문 분석 할 수 없음: %1$s (%2$d)\n" -#: ipaserver/plugins/cert.py:840 -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" +#, c-format +msgid "Unable to remove entry\n" +msgstr "항목을 제거 할 수 없음\n" -#: ipaserver/plugins/cert.py:871 -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" +#, c-format +msgid "Unenrollment successful.\n" +msgstr "등록 취소 성공.\n" -#: ipaserver/plugins/cert.py:889 -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" +msgid "Unspecified" +msgstr "지정되지 않음" -#: ipaserver/plugins/cert.py:898 -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" +msgid "User-friendly description of action performed" +msgstr "수행된 동작에 대한 사용자 친화적인 설명" -#: ipaserver/plugins/cert.py:905 -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "ber_init() 실패하고, 잘못된 제어 ?!\n" -#: ipaserver/plugins/cert.py:922 -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "ber_scanf() 실패하고, kvno 찾을 수 없음 ?!\n" -#: ipaserver/plugins/cert.py:940 -#, python-format -msgid "CA '%s' is disabled" -msgstr "" +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "구성 파일 %s를 열 수 없습니다\n" -#: ipaserver/plugins/cert.py:1027 -msgid "'add' option" -msgstr "" +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "구성 파일 %s을 stat() 할 수 없습니다\n" -#: ipaserver/plugins/cert.py:1031 -msgid "The principal for this request doesn't exist." -msgstr "" +msgid "comma-separated list of hosts to remove" +msgstr "제거하려는 호스트의 쉼표로-구분된 목록" -#: ipaserver/plugins/cert.py:1147 -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "키탭은 매달린 심볼릭 링크와 다른 사용자에 의해 소유됩니다\n" -#: ipaserver/plugins/cert.py:1164 -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "krb5_kt_close %1$d: %2$s\n" -#: ipaserver/plugins/cert.py:1176 -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "krb5_kt_get_entry %1$d: %2$s\n" -#: ipaserver/plugins/cert.py:1275 -msgid "Revoked" -msgstr "" +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "krb5_kt_remove_entry %1$d: %2$s\n" -#: ipaserver/plugins/cert.py:1281 -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "krb5_parse_name %1$d: %2$s\n" -#: ipaserver/plugins/cert.py:1303 -#, python-format -msgid "Owner %s" -msgstr "" +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "krb5_unparse_name %1$d: %2$s\n" -#: ipaserver/plugins/cert.py:1390 -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" +#, c-format +msgid "kvno %d\n" +msgstr "kvno %d\n" -#: ipaserver/plugins/cert.py:1459 -msgid "7 is not a valid revocation reason" -msgstr "" +msgid "member Certificate Profile" +msgstr "구성원 인증서 프로파일" -#: ipaserver/plugins/cert.py:1559 -msgid "Status of the certificate" -msgstr "" +msgid "netgroups to add" +msgstr "추가하려는 넷그룹" -#: ipaserver/plugins/cert.py:1565 -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" +#, c-format +msgid "out of memory\n" +msgstr "메모리 부족\n" -#: ipaserver/plugins/cert.py:1581 -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" +msgid "password to use if not using kerberos" +msgstr "만약 커버러스를 사용하지 않는 것을 사용하려는 비밀번호" -#: ipaserver/plugins/cert.py:1603 -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" +#, c-format +msgid "principal not found\n" +msgstr "주체를 찾을 수 없음\n" -#: ipaserver/plugins/cert.py:1614 -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" +#, c-format +msgid "read error\n" +msgstr "읽기 오류\n" -#: ipaserver/plugins/sudorule.py:43 -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" +#, c-format +msgid "realm not found\n" +msgstr "realm을 찾을 수 없음\n" -#: ipaserver/plugins/sudorule.py:45 -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:50 -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:59 -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption " -"env_keep+=BAR.\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:64 -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:68 -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:71 -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:78 -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:81 -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:85 -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:88 -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:91 -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:94 -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:97 -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:101 -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -#: ipaserver/plugins/sudorule.py:120 -msgid "this option has been deprecated." -msgstr "" - -#: ipaserver/plugins/sudorule.py:148 -msgid "sudo rules" -msgstr "" - -#: ipaserver/plugins/sudorule.py:236 -msgid "Sudo Rules" -msgstr "" - -#: ipaserver/plugins/sudorule.py:237 -msgid "Sudo Rule" -msgstr "" - -#: ipaserver/plugins/sudorule.py:372 -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#: ipaserver/plugins/sudorule.py:403 -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudorule.py:410 -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudorule.py:417 -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/sudorule.py:436 -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -#: ipaserver/plugins/sudorule.py:442 ipaserver/plugins/user.py:165 -msgid "users" -msgstr "" - -#: ipaserver/plugins/sudorule.py:452 -msgid "command" -msgstr "" - -#: ipaserver/plugins/sudorule.py:452 -msgid "commands" -msgstr "" - -#: ipaserver/plugins/sudorule.py:458 msgid "runAs user" msgstr "runAs 사용자" -#: ipaserver/plugins/sudorule.py:458 msgid "runAs users" msgstr "runAs 사용자" -#: ipaserver/plugins/sudorule.py:463 -msgid "group runAs" -msgstr "" +msgid "server roles" +msgstr "서버 역할" -#: ipaserver/plugins/sudorule.py:463 -msgid "runAs groups" -msgstr "" - -#: ipaserver/plugins/sudorule.py:484 -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -#: ipaserver/plugins/sudorule.py:556 -msgid "commands cannot be added when command category='all'" -msgstr "" - -#: ipaserver/plugins/sudorule.py:818 ipaserver/plugins/sudorule.py:940 -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#: ipaserver/plugins/sudorule.py:825 -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#: ipaserver/plugins/sudorule.py:833 -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#: ipaserver/plugins/sudorule.py:947 -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -#: ipaserver/plugins/user.py:497 -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:596 -msgid "Default group for new users is not POSIX" -msgstr "" - -#: ipaserver/plugins/user.py:704 -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:705 -#, python-format -msgid "Preserved user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:723 -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#: ipaserver/plugins/user.py:847 -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:961 -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:975 -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#: ipaserver/plugins/user.py:1006 -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1101 -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1123 -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1140 -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#: ipaserver/plugins/user.py:1149 -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1181 -msgid "Failed logins" -msgstr "" - -#: ipaserver/plugins/user.py:1185 -msgid "Last successful authentication" -msgstr "" - -#: ipaserver/plugins/user.py:1189 -msgid "Last failed authentication" -msgstr "" - -#: ipaserver/plugins/user.py:1193 -msgid "Time now" -msgstr "" - -#: ipaserver/plugins/user.py:1197 -msgid "Password grace count" -msgstr "" - -#: ipaserver/plugins/user.py:1204 -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#: ipaserver/plugins/user.py:1260 -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#: ipaserver/plugins/user.py:1300 -#, python-format -msgid "%(host)s failed" -msgstr "" - -#: ipaserver/plugins/user.py:1310 -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#: ipaserver/plugins/user.py:1318 -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1324 -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1349 -msgid "Add new principal alias to the user entry" -msgstr "" - -#: ipaserver/plugins/user.py:1350 -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -#: ipaserver/plugins/user.py:1355 -msgid "Remove principal alias from the user entry" -msgstr "" - -#: ipaserver/plugins/user.py:1356 -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - -#: ipaserver/servroles.py:296 -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#: ipaserver/servroles.py:401 -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -#: ipaserver/servroles.py:443 -msgid "must be enabled only on a single master" -msgstr "" - -#: ipaserver/rpcserver.py:556 -msgid "Request must be a dict" -msgstr "" - -#: ipaserver/rpcserver.py:558 -msgid "Request is missing \"method\"" -msgstr "" - -#: ipaserver/rpcserver.py:560 -msgid "Request is missing \"params\"" -msgstr "" - -#: ipaserver/rpcserver.py:565 -msgid "params must be a list" -msgstr "" - -#: ipaserver/rpcserver.py:567 -msgid "params must contain [args, options]" -msgstr "" - -#: ipaserver/rpcserver.py:570 -msgid "params[0] (aka args) must be a list" -msgstr "" - -#: ipaserver/rpcserver.py:573 -msgid "params[1] (aka options) must be a dict" -msgstr "" - -#: ipaserver/topology.py:14 -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#: ipaserver/topology.py:18 -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#: ipaserver/topology.py:120 -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - -#: ipaserver/dcerpc.py:87 -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" - -#: ipaserver/dcerpc.py:107 -msgid "CIFS server denied your credentials" -msgstr "" - -#: ipaserver/dcerpc.py:111 -msgid "communication with CIFS server was unsuccessful" -msgstr "" - -#: ipaserver/dcerpc.py:117 ipaserver/dcerpc.py:1376 -msgid "AD domain controller" -msgstr "" - -#: ipaserver/dcerpc.py:118 -msgid "unsupported functional level" -msgstr "" - -#: ipaserver/dcerpc.py:121 -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" - -#: ipaserver/dcerpc.py:129 ipaserver/dcerpc.py:135 ipaserver/dcerpc.py:138 -msgid "Cannot find specified domain or server name" -msgstr "" - -#: ipaserver/dcerpc.py:141 ipaserver/dcerpc.py:147 -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" - -#: ipaserver/dcerpc.py:151 -msgid "At least the domain or IP address should be specified" -msgstr "" - -#: ipaserver/dcerpc.py:189 -#, python-format -msgid "" -"CIFS server communication error: code \"%(num)s\", message " -"\"%(message)s\" (both may be \"None\")" -msgstr "" - -#: ipaserver/dcerpc.py:293 -msgid "no trusted domain is configured" -msgstr "" - -#: ipaserver/dcerpc.py:301 -msgid "domain is not configured" -msgstr "" - -#: ipaserver/dcerpc.py:308 -msgid "SID is not valid" -msgstr "" - -#: ipaserver/dcerpc.py:323 -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "" - -#: ipaserver/dcerpc.py:334 -msgid "SID does not match any trusted domain" -msgstr "" - -#: ipaserver/dcerpc.py:376 ipaserver/dcerpc.py:383 ipaserver/dcerpc.py:711 -msgid "Trust setup" -msgstr "" - -#: ipaserver/dcerpc.py:377 -msgid "Our domain is not configured" -msgstr "" - -#: ipaserver/dcerpc.py:384 -msgid "No trusted domain is not configured" -msgstr "" - -#: ipaserver/dcerpc.py:390 ipaserver/dcerpc.py:406 ipaserver/dcerpc.py:424 -#: ipaserver/dcerpc.py:430 ipaserver/dcerpc.py:438 ipaserver/dcerpc.py:453 -#: ipaserver/dcerpc.py:461 ipaserver/dcerpc.py:525 ipaserver/dcerpc.py:581 -msgid "trusted domain object" -msgstr "" - -#: ipaserver/dcerpc.py:391 -msgid "domain is not trusted" -msgstr "" - -#: ipaserver/dcerpc.py:407 -msgid "no trusted domain matched the specified flat name" -msgstr "" - -#: ipaserver/dcerpc.py:411 -msgid "trusted domain object not found" -msgstr "" - -#: ipaserver/dcerpc.py:425 -msgid "Object does not belong to a trusted domain" -msgstr "" - -#: ipaserver/dcerpc.py:431 -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "" - -#: ipaserver/dcerpc.py:439 ipaserver/dcerpc.py:582 -msgid "Ambiguous search, user domain was not specified" -msgstr "" - -#: ipaserver/dcerpc.py:454 ipaserver/dcerpc.py:526 -msgid "Trusted domain did not return a unique object" -msgstr "" - -#: ipaserver/dcerpc.py:462 -msgid "Trusted domain did not return a valid SID for the object" -msgstr "" - -#: ipaserver/dcerpc.py:566 ipaserver/dcerpc.py:577 -msgid "trusted domain user not found" -msgstr "" - -#: ipaserver/dcerpc.py:712 -msgid "Cannot retrieve trusted domain GC list" -msgstr "" - -#: ipaserver/dcerpc.py:861 -msgid "CIFS credentials object" -msgstr "" - -#: ipaserver/dcerpc.py:899 -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "" - -#: ipaserver/dcerpc.py:904 -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "" - -#: ipaserver/dcerpc.py:1338 -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" - -#: ipaserver/dcerpc.py:1365 -#, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" - -#: ipaserver/dcerpc.py:1502 -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" - -#: ipaserver/dcerpc.py:1567 ipaserver/dcerpc.py:1697 -msgid "Credentials" -msgstr "" - -#: ipaserver/dcerpc.py:1568 -msgid "Missing credentials for cross-forest communication" -msgstr "" - -#: ipaserver/dcerpc.py:1698 -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" - -#: ipatests/test_ipalib/test_frontend.py:206 -#, python-format -msgid "must equal %r" -msgstr "" - -#: ipatests/test_ipalib/test_parameters.py:232 -msgid "Hello world" -msgstr "" - -#: ipatests/test_xmlrpc/test_radiusproxy_plugin.py:63 -#: ipatests/test_xmlrpc/test_radiusproxy_plugin.py:71 -#, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "" - -#: ipatests/test_xmlrpc/test_radiusproxy_plugin.py:119 -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "" - -#: ipatests/test_xmlrpc/test_radiusproxy_plugin.py:178 -msgid "must be at least 1" -msgstr "" - -#: util/ipa_krb5.c:813 util/ipa_krb5.c:828 -msgid "Out of memory\n" -msgstr "" - -#: util/ipa_krb5.c:846 -msgid "Warning unrecognized encryption type.\n" -msgstr "" - -#: util/ipa_krb5.c:860 -msgid "Warning unrecognized salt type.\n" -msgstr "" - -#: util/ipa_krb5.c:900 -msgid "Out of memory!?\n" -msgstr "" - -#: util/ipa_krb5.c:935 -msgid "Enctype comparison failed!\n" -msgstr "" - -#: util/ipa_krb5.c:988 -msgid "Password is too long!\n" -msgstr "" - -#: util/ipa_krb5.c:1004 -msgid "Failed to create random key!\n" -msgstr "" - -#: util/ipa_krb5.c:1017 util/ipa_krb5.c:1035 util/ipa_krb5.c:1043 -#: util/ipa_krb5.c:1083 -msgid "Failed to create key!\n" -msgstr "" - -#: util/ipa_krb5.c:1069 -msgid "Bad or unsupported salt type.\n" -msgstr "" - -#: util/ipa_ldap.c:79 -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -#: util/ipa_ldap.c:89 -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -#: util/ipa_ldap.c:97 -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -#: util/ipa_ldap.c:126 -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -#: util/ipa_ldap.c:133 -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -#: util/ipa_ldap.c:140 -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -#: util/ipa_ldap.c:147 -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -#: util/ipa_ldap.c:156 -msgid "Unable to initialize STARTTLS session\n" -msgstr "" +msgid "url" +msgstr "url" diff --git a/po/mr.po b/po/mr.po index 16d34e79f..57c9887ca 100644 --- a/po/mr.po +++ b/po/mr.po @@ -14,11496 +14,65 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, c-format -msgid "out of memory\n" -msgstr "" - -#, c-format -msgid "read error\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, c-format -msgid "Out of memory \n" -msgstr "" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -msgid "SASL Bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Out of Memory!\n" -msgstr "" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "पासवर्ड जुळत नाही!" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Output debug info" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -msgid "Server Name" -msgstr "" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -msgid "LDAP password" -msgstr "" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -msgid "Path to the IPA CA certificate" -msgstr "" - -msgid "IPA CA certificate" -msgstr "" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -msgid "Enter LDAP password" -msgstr "" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" - -#, c-format -msgid "Discovered server %s\n" -msgstr "" - -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Using provided server %s\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -msgid "New Principal Password" -msgstr "" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Out of memory!\n" -msgstr "" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "" - -#, c-format -msgid "Out of memory!" -msgstr "" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "" - -#, c-format -msgid "No values for %s" -msgstr "" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Host is already joined.\n" -msgstr "" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" - -#, c-format -msgid "json_dumps() failed\n" -msgstr "" - -#, fuzzy, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "अवैध JSON-RPC विनंती : %(error)s" - -#, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "" - -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" - -#, c-format -msgid "fork() failed\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "" - -#, c-format -msgid "child exited with %d\n" -msgstr "" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "" - -#, fuzzy, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "Kerberos credentials प्राप्त झाले नाहीत" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "" - -msgid "Quiet mode. Only errors are displayed." -msgstr "" - -msgid "Unenroll this host from IPA server" -msgstr "" - -msgid "Hostname of this server" -msgstr "" - -msgid "hostname" -msgstr "" - -msgid "IPA Server to use" -msgstr "" - -msgid "Specifies where to store keytab information." -msgstr "" - -msgid "filename" -msgstr "" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" - -msgid "LDAP password (if not using Kerberos)" -msgstr "" - -msgid "password" -msgstr "" - -msgid "LDAP basedn" -msgstr "" - -msgid "basedn" -msgstr "" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "" - -#, fuzzy -msgid "Failed to add" -msgstr "कोणतीही फाइल वाचण्यासाठी नाही " - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" - -msgid "Unrevoked" -msgstr "" - -msgid "Error" -msgstr "" - -msgid "Input filename" -msgstr "" - -msgid "File to load the certificate from." -msgstr "" - -msgid "cannot specify both raw certificate and file" -msgstr "" - -msgid "Input file" -msgstr "" - -msgid "File to load the certificate from" -msgstr "" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "" - -msgid "Split DNS record to parts" -msgstr "" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" - -msgid "DNS resource record type" -msgstr "" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" - -msgid "No option to modify specific record provided." -msgstr "" - -msgid "Current DNS record contents:\n" -msgstr "" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -msgid "No option to delete specific record provided." -msgstr "" - -msgid "Delete all?" -msgstr "" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "" - -msgid "Server will check DNS forwarder(s)." -msgstr "" - -msgid "This may take some time, please wait ..." -msgstr "" - -msgid "DNS forwarder" -msgstr "" - -msgid "file to store DNS records in nsupdate format" -msgstr "" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -msgid "Delete a user" -msgstr "" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - -msgid "maps not connected to /etc/auto.master:" -msgstr "" - -msgid "Import automount files for a specific location." -msgstr "" - -msgid "Master file" -msgstr "" - -msgid "Automount master file." -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" - -#, python-format -msgid "File %(file)s not found" -msgstr "" - -#, python-format -msgid "key %(key)s already exists" -msgstr "" - -#, python-format -msgid "map %(map)s already exists" -msgstr "" - -msgid "Imported maps:" -msgstr "" - -#, python-format -msgid "Added %(map)s" -msgstr "" - -msgid "Imported keys:" -msgstr "" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "" - -msgid "Ignored keys:" -msgstr "" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "" - -msgid "Duplicate maps skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(map)s" -msgstr "" - -msgid "Duplicate keys skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(key)s" -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -msgid "User ID" -msgstr "" - -msgid "Password" -msgstr "" - -msgid "First Code" -msgstr "" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "" - -#, fuzzy, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "'%(uri)s' ला जोडणी अपयशी : %(error)s" - -msgid "Invalid credentials" -msgstr "" - -msgid "Create a new vault." -msgstr "" - -msgid "Vault password" -msgstr "" - -msgid "File containing the vault password" -msgstr "" - -msgid "File containing the vault public key" -msgstr "" - -msgid "Password can be specified only for symmetric vault" -msgstr "" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "" - -msgid "Password specified multiple times" -msgstr "" - -msgid "Public key specified multiple times" -msgstr "" - -msgid "Missing vault public key" -msgstr "" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "" - -msgid "Modify a vault." -msgstr "" - -msgid "Change password" -msgstr "" - -msgid "Old vault password" -msgstr "" - -msgid "File containing the old vault password" -msgstr "" - -msgid "New vault password" -msgstr "" - -msgid "File containing the new vault password" -msgstr "" - -msgid "Old vault private key" -msgstr "" - -msgid "File containing the old vault private key" -msgstr "" - -msgid "File containing the new vault public key" -msgstr "" - -msgid "New public key specified multiple times" -msgstr "" - -msgid "Missing new vault public key" -msgstr "" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "" - -msgid "Binary data to archive" -msgstr "" - -msgid "File containing data to archive" -msgstr "" - -msgid "Override existing password" -msgstr "" - -msgid "Input data specified multiple times" -msgstr "" - -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" - -msgid "Invalid vault type" -msgstr "" - -msgid "Retrieve a data from a vault." -msgstr "" - -msgid "File to store retrieved data" -msgstr "" - -msgid "Vault private key" -msgstr "" - -msgid "File containing the vault private key" -msgstr "" - -msgid "Data" -msgstr "" - -msgid "Private key specified multiple times" -msgstr "" - -msgid "Missing vault private key" -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -#, fuzzy -msgid "ACI name" -msgstr "आदेशाचे नाव " - -msgid "Permission" -msgstr "" - -msgid "Permission ACI grants access to" -msgstr "" - -msgid "User group" -msgstr "" - -msgid "User group ACI grants access to" -msgstr "" - -msgid "Permissions" -msgstr "" - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Attributes to which the permission applies" -msgstr "" - -msgid "Attributes" -msgstr "" - -msgid "Type" -msgstr "" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" - -msgid "Member of" -msgstr "" - -msgid "Member of a group" -msgstr "" - -msgid "Filter" -msgstr "" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "" - -msgid "Subtree" -msgstr "" - -msgid "Subtree to apply ACI to" -msgstr "" - -msgid "Target group" -msgstr "" - -msgid "Group to apply ACI to" -msgstr "" - -msgid "Target your own entry (self)" -msgstr "" - -msgid "Apply ACI to your own entry (self)" -msgstr "" - -msgid "Create new ACI." -msgstr "" - -msgid "ACI prefix" -msgstr "" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" - -msgid "Test the ACI syntax but don't write anything" -msgstr "" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" - -msgid "User-friendly description of action performed" -msgstr "" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" - -msgid "Delete ACI." -msgstr "" - -msgid "True means the operation was successful" -msgstr "" - -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" +msgid " ipa --help" +msgstr " ipa --help" msgid "A string searched in all relevant object attributes" msgstr "एक शब्द सर्व संबंधित ऑब्जेक्ट गुणधर्मात शोधला" -msgid "Primary key only" -msgstr "" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" - -msgid "Number of entries returned" -msgstr "" - -msgid "True if not all results were returned" -msgstr "" - -msgid "Modify ACI." -msgstr "" - -msgid "Rename an ACI." -msgstr "" - -msgid "New ACI name" -msgstr "" - -msgid "Display a single ACI given an ACI name." -msgstr "" - -msgid "Location of the ACI" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Description" -msgstr "" - -msgid "A description of this auto member rule" -msgstr "" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "List of deletions that failed" -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Users" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Hosts" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" - -msgid "Key" -msgstr "" - -msgid "Automount key name." -msgstr "" - -msgid "Mount information" -msgstr "" - -msgid "description" -msgstr "" - -msgid "Location" -msgstr "" - -msgid "Automount location name." -msgstr "" - -msgid "Map" -msgstr "" - -msgid "Automount map name." -msgstr "" - -msgid "Create a new automount key." -msgstr "" - -msgid "Delete an automount key." -msgstr "" - -msgid "Continuous mode: Don't stop on errors." -msgstr "" - -msgid "Search for an automount key." -msgstr "" - -msgid "Time Limit" -msgstr "" - -msgid "Time limit of search in seconds" -msgstr "" - -msgid "Size Limit" -msgstr "" - -msgid "Maximum number of entries returned" -msgstr "" - -msgid "Modify an automount key." -msgstr "" - -msgid "New mount information" -msgstr "" - -msgid "Rename" -msgstr "" - -msgid "Rename the automount key object" -msgstr "" - -msgid "Display an automount key." -msgstr "" - -msgid "Create a new automount location." -msgstr "" - -msgid "Delete an automount location." -msgstr "" - -msgid "Search for an automount location." -msgstr "" - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" - -msgid "Display an automount location." -msgstr "" - -msgid "Generate automount files for a specific location." -msgstr "" - -msgid "Create a new automount map." -msgstr "" - -msgid "Create a new indirect mount point." -msgstr "" - -msgid "Mount point" -msgstr "" - -msgid "Parent map" -msgstr "" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" - -msgid "Delete an automount map." -msgstr "" - -msgid "Search for an automount map." -msgstr "" - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" - -msgid "Modify an automount map." -msgstr "" - -msgid "Display an automount map." -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" - -msgid "Nested Methods to execute" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason" -msgstr "" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -msgid "minimum serial number" -msgstr "" - -msgid "maximum serial number" -msgstr "" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Principal" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Dictionary mapping variable name to value" -msgstr "" - -msgid "Revoke a certificate." -msgstr "" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "Maximum username length" -msgstr "" - -msgid "Home directory base" -msgstr "" - -msgid "Default location of home directories" -msgstr "" - -msgid "Default shell" -msgstr "" - -msgid "Default shell for new users" -msgstr "" - -msgid "Default users group" -msgstr "" - -msgid "Default group for new users" -msgstr "" - -msgid "Default e-mail domain" -msgstr "" - -msgid "Search time limit" -msgstr "" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" - -msgid "Search size limit" -msgstr "" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "" - -msgid "User search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" - -msgid "Group search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" - -msgid "Enable migration mode" -msgstr "" - -msgid "Certificate Subject base" -msgstr "" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "" - -msgid "Default group objectclasses" -msgstr "" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "" - -msgid "Default user objectclasses" -msgstr "" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" - -msgid "Password Expiration Notification (days)" -msgstr "" - -msgid "Number of days's notice of impending password expiration" -msgstr "" - -msgid "Password plugin features" -msgstr "" - -msgid "Extra hashes to generate in password plug-in" -msgstr "" - -msgid "SELinux user map order" -msgstr "" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" - -msgid "Default SELinux user" -msgstr "" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" - -msgid "Default PAC types" -msgstr "" - -msgid "Default types of PAC supported for services" -msgstr "" - -msgid "Default user authentication types" -msgstr "" - -msgid "Default types of supported user authentication" -msgstr "" - -msgid "Modify configuration options." -msgstr "" - -msgid "Show the current configuration." -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "Delegation name" -msgstr "" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "" - -msgid "Attributes to which the delegation applies" -msgstr "" - -msgid "Member user group" -msgstr "" - -msgid "User group to apply delegation to" -msgstr "" - -msgid "Add a new delegation." -msgstr "" - -msgid "Delete a delegation." -msgstr "" - -msgid "Search for delegations." -msgstr "" - -msgid "Modify a delegation." -msgstr "" - -msgid "Display information about a delegation." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "Global forwarders" -msgstr "" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Forward policy" -msgstr "" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" - -msgid "Allow PTR sync" -msgstr "" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" - -msgid "Zone refresh interval" -msgstr "" - -#, fuzzy -msgid "Zone name" +msgid "Command name" msgstr "आदेशाचे नाव " -msgid "Zone name (FQDN)" -msgstr "" - -msgid "Reverse zone IP network" -msgstr "" - -msgid "IP network to create reverse zone name from" -msgstr "" - -msgid "Active zone" -msgstr "" - -msgid "Is zone active?" -msgstr "" - -msgid "Zone forwarders" -msgstr "" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -#, fuzzy -msgid "Record name" -msgstr "आदेशाचे नाव " - -msgid "Time to live" -msgstr "" - -msgid "Records" -msgstr "" - -msgid "Record type" -msgstr "" - -msgid "Record data" -msgstr "" - -msgid "A record" -msgstr "" - -msgid "Raw A records" -msgstr "" - -msgid "A IP Address" -msgstr "" - -msgid "IP Address" -msgstr "" - -msgid "A Create reverse" -msgstr "" - -msgid "Create reverse record for this IP Address" -msgstr "" - -msgid "AAAA record" -msgstr "" - -msgid "Raw AAAA records" -msgstr "" - -msgid "AAAA IP Address" -msgstr "" - -msgid "AAAA Create reverse" -msgstr "" - -msgid "A6 record" -msgstr "" - -msgid "Raw A6 records" -msgstr "" - -msgid "A6 Record data" -msgstr "" - -msgid "AFSDB record" -msgstr "" - -msgid "Raw AFSDB records" -msgstr "" - -msgid "AFSDB Subtype" -msgstr "" - -msgid "Subtype" -msgstr "" - -msgid "AFSDB Hostname" -msgstr "" - -msgid "Hostname" -msgstr "" - -msgid "APL record" -msgstr "" - -msgid "Raw APL records" -msgstr "" - -msgid "CERT record" -msgstr "" - -msgid "Raw CERT records" -msgstr "" - -msgid "CERT Certificate Type" -msgstr "" - -msgid "Certificate Type" -msgstr "" - -msgid "CERT Key Tag" -msgstr "" - -msgid "Key Tag" -msgstr "" - -msgid "CERT Algorithm" -msgstr "" - -msgid "Algorithm" -msgstr "" - -msgid "CERT Certificate/CRL" -msgstr "" - -msgid "Certificate/CRL" -msgstr "" - -msgid "CNAME record" -msgstr "" - -msgid "Raw CNAME records" -msgstr "" - -msgid "CNAME Hostname" -msgstr "" - -msgid "A hostname which this alias hostname points to" -msgstr "" - -msgid "DHCID record" -msgstr "" - -msgid "Raw DHCID records" -msgstr "" - -msgid "DLV record" -msgstr "" - -msgid "Raw DLV records" -msgstr "" - -msgid "DLV Key Tag" -msgstr "" - -msgid "DLV Algorithm" -msgstr "" - -msgid "DLV Digest Type" -msgstr "" - -msgid "Digest Type" -msgstr "" - -msgid "DLV Digest" -msgstr "" - -msgid "Digest" -msgstr "" - -msgid "DNAME record" -msgstr "" - -msgid "Raw DNAME records" -msgstr "" - -msgid "DNAME Target" -msgstr "" - -msgid "Target" -msgstr "" - -msgid "DNSKEY record" -msgstr "" - -msgid "Raw DNSKEY records" -msgstr "" - -msgid "DS record" -msgstr "" - -msgid "Raw DS records" -msgstr "" - -msgid "DS Key Tag" -msgstr "" - -msgid "DS Algorithm" -msgstr "" - -msgid "DS Digest Type" -msgstr "" - -msgid "DS Digest" -msgstr "" - -msgid "HIP record" -msgstr "" - -msgid "Raw HIP records" -msgstr "" - -msgid "IPSECKEY record" -msgstr "" - -msgid "Raw IPSECKEY records" -msgstr "" - -msgid "KEY record" -msgstr "" - -msgid "Raw KEY records" -msgstr "" - -msgid "KX record" -msgstr "" - -msgid "Raw KX records" -msgstr "" - -msgid "KX Preference" -msgstr "" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" - -msgid "KX Exchanger" -msgstr "" - -msgid "A host willing to act as a key exchanger" -msgstr "" - -msgid "LOC record" -msgstr "" - -msgid "Raw LOC records" -msgstr "" - -msgid "LOC Degrees Latitude" -msgstr "" - -msgid "Degrees Latitude" -msgstr "" - -msgid "LOC Minutes Latitude" -msgstr "" - -msgid "Minutes Latitude" -msgstr "" - -msgid "LOC Seconds Latitude" -msgstr "" - -msgid "Seconds Latitude" -msgstr "" - -msgid "LOC Direction Latitude" -msgstr "" - -msgid "Direction Latitude" -msgstr "" - -msgid "LOC Degrees Longitude" -msgstr "" - -msgid "Degrees Longitude" -msgstr "" - -msgid "LOC Minutes Longitude" -msgstr "" - -msgid "Minutes Longitude" -msgstr "" - -msgid "LOC Seconds Longitude" -msgstr "" - -msgid "Seconds Longitude" -msgstr "" - -msgid "LOC Direction Longitude" -msgstr "" - -msgid "Direction Longitude" -msgstr "" - -msgid "LOC Altitude" -msgstr "" - -msgid "Altitude" -msgstr "" - -msgid "LOC Size" -msgstr "" - -msgid "Size" -msgstr "" - -msgid "LOC Horizontal Precision" -msgstr "" - -msgid "Horizontal Precision" -msgstr "" - -msgid "LOC Vertical Precision" -msgstr "" - -msgid "Vertical Precision" -msgstr "" - -msgid "MX record" -msgstr "" - -msgid "Raw MX records" -msgstr "" - -msgid "MX Preference" -msgstr "" - -msgid "MX Exchanger" -msgstr "" - -msgid "A host willing to act as a mail exchanger" -msgstr "" - -msgid "NAPTR record" -msgstr "" - -msgid "Raw NAPTR records" -msgstr "" - -msgid "NAPTR Order" -msgstr "" - -msgid "Order" -msgstr "" - -msgid "NAPTR Preference" -msgstr "" - -msgid "Preference" -msgstr "" - -msgid "NAPTR Flags" -msgstr "" - -msgid "Flags" -msgstr "" - -msgid "NAPTR Service" -msgstr "" - -msgid "Service" -msgstr "" - -msgid "NAPTR Regular Expression" -msgstr "" - -msgid "Regular Expression" -msgstr "" - -msgid "NAPTR Replacement" -msgstr "" - -msgid "Replacement" -msgstr "" - -msgid "NS record" -msgstr "" - -msgid "Raw NS records" -msgstr "" - -msgid "NS Hostname" -msgstr "" - -msgid "NSEC record" -msgstr "" - -msgid "Raw NSEC records" -msgstr "" - -msgid "NSEC3 record" -msgstr "" - -msgid "Raw NSEC3 records" -msgstr "" - -msgid "PTR record" -msgstr "" - -msgid "Raw PTR records" -msgstr "" - -msgid "PTR Hostname" -msgstr "" - -msgid "The hostname this reverse record points to" -msgstr "" - -msgid "RRSIG record" -msgstr "" - -msgid "Raw RRSIG records" -msgstr "" - -msgid "RP record" -msgstr "" - -msgid "Raw RP records" -msgstr "" - -msgid "SIG record" -msgstr "" - -msgid "Raw SIG records" -msgstr "" - -msgid "SPF record" -msgstr "" - -msgid "Raw SPF records" -msgstr "" - -msgid "SRV record" -msgstr "" - -msgid "Raw SRV records" -msgstr "" - -msgid "SRV Priority" -msgstr "" - -msgid "Priority" -msgstr "" - -msgid "SRV Weight" -msgstr "" - -msgid "Weight" -msgstr "" - -msgid "SRV Port" -msgstr "" - -msgid "Port" -msgstr "" - -msgid "SRV Target" -msgstr "" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" - -msgid "SSHFP record" -msgstr "" - -msgid "Raw SSHFP records" -msgstr "" - -msgid "SSHFP Algorithm" -msgstr "" - -msgid "SSHFP Fingerprint Type" -msgstr "" - -msgid "Fingerprint Type" -msgstr "" - -msgid "SSHFP Fingerprint" -msgstr "" - -msgid "Fingerprint" -msgstr "" - -msgid "TA record" -msgstr "" - -msgid "Raw TA records" -msgstr "" - -msgid "TLSA record" -msgstr "" - -msgid "Raw TLSA records" -msgstr "" - -msgid "TLSA Certificate Usage" -msgstr "" - -msgid "Certificate Usage" -msgstr "" - -msgid "TLSA Selector" -msgstr "" - -msgid "Selector" -msgstr "" - -msgid "TLSA Matching Type" -msgstr "" - -msgid "Matching Type" -msgstr "" - -msgid "TLSA Certificate Association Data" -msgstr "" - -msgid "Certificate Association Data" -msgstr "" - -msgid "TKEY record" -msgstr "" - -msgid "Raw TKEY records" -msgstr "" - -msgid "TSIG record" -msgstr "" - -msgid "Raw TSIG records" -msgstr "" - -msgid "TXT record" -msgstr "" - -msgid "Raw TXT records" -msgstr "" - -msgid "TXT Text Data" -msgstr "" - -msgid "Text Data" -msgstr "" - -msgid "Authoritative nameserver" -msgstr "" - -msgid "Authoritative nameserver domain name" -msgstr "" - -msgid "Administrator e-mail address" -msgstr "" - -msgid "SOA serial" -msgstr "" - -msgid "SOA record serial number" -msgstr "" - -msgid "SOA refresh" -msgstr "" - -msgid "SOA record refresh time" -msgstr "" - -msgid "SOA retry" -msgstr "" - -msgid "SOA record retry time" -msgstr "" - -msgid "SOA expire" -msgstr "" - -msgid "SOA record expire time" -msgstr "" - -msgid "SOA minimum" -msgstr "" - -msgid "How long should negative responses be cached" -msgstr "" - -msgid "Time to live for records at zone apex" -msgstr "" - -msgid "BIND update policy" -msgstr "" - -msgid "Dynamic update" -msgstr "" - -msgid "Allow dynamic updates." -msgstr "" - -msgid "Allow query" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" - -msgid "Allow transfer" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" - -msgid "Allow in-line DNSSEC signing" -msgstr "" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "" - -msgid "NSEC3PARAM record" -msgstr "" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" - -msgid "Resolve a host name in DNS." -msgstr "" - -msgid "Modify global DNS configuration." -msgstr "" - -msgid "Show the current global DNS configuration." -msgstr "" - -msgid "Create new DNS forward zone." -msgstr "" - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" - -msgid "Permission value" -msgstr "" - -msgid "Delete DNS forward zone." -msgstr "" - -msgid "Disable DNS Forward Zone." -msgstr "" - -msgid "Enable DNS Forward Zone." -msgstr "" - -msgid "Search for DNS forward zones." -msgstr "" - -msgid "Modify DNS forward zone." -msgstr "" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" - -msgid "Display information about a DNS forward zone." -msgstr "" - -msgid "Add new DNS resource record." -msgstr "" - -msgid "Force" -msgstr "" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "" - -msgid "Structured" -msgstr "" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" - -msgid "Delete DNS resource record." -msgstr "" - -msgid "Delete all associated records" -msgstr "" - -msgid "Delete DNS record entry." -msgstr "" - -msgid "Search for DNS resources." -msgstr "" - -msgid "Modify a DNS resource record." -msgstr "" - -msgid "Rename the DNS resource record object" -msgstr "" - -msgid "Display DNS resource." -msgstr "" - -msgid "Create new DNS zone (SOA record)." -msgstr "" - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" - -msgid "Add a permission for per-zone access delegation." -msgstr "" - -msgid "Delete DNS zone (SOA record)." -msgstr "" - -msgid "Disable DNS Zone." -msgstr "" - -msgid "Enable DNS Zone." -msgstr "" - -msgid "Search for DNS zones (SOA records)." -msgstr "" - -msgid "Forward zones only" -msgstr "" - -msgid "Search for forward zones only" -msgstr "" - -msgid "Modify DNS zone (SOA record)." -msgstr "" - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" - -msgid "Remove a permission for per-zone access delegation." -msgstr "" - -msgid "Display information about a DNS zone (SOA record)." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "Group name" -msgstr "" - -msgid "Group description" -msgstr "" - -msgid "GID" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Member users" -msgstr "" - -msgid "Member groups" -msgstr "" - -msgid "Member of groups" -msgstr "" - -msgid "Roles" -msgstr "" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Suppress processing of membership attributes." -msgstr "" - -msgid "Add members to a group." -msgstr "" - -msgid "External member" -msgstr "" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -msgid "member group" -msgstr "" - -msgid "groups to add" -msgstr "" - -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - -msgid "Delete group." -msgstr "" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "user" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "group" -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "netgroup" -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "role" -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "HBAC rule" -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "sudo rule" -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Rule name" -msgstr "" - -msgid "Rule type" -msgstr "" - -msgid "Rule type (allow)" -msgstr "" - -msgid "User category" -msgstr "" - -msgid "User category the rule applies to" -msgstr "" - -msgid "Host category" -msgstr "" - -msgid "Host category the rule applies to" -msgstr "" - -msgid "Service category" -msgstr "" - -msgid "Service category the rule applies to" -msgstr "" - -msgid "Enabled" -msgstr "" - -msgid "User Groups" -msgstr "" - -msgid "Host Groups" -msgstr "" - -msgid "Services" -msgstr "" - -msgid "Service Groups" -msgstr "" - -msgid "External host" -msgstr "" - -msgid "Create a new HBAC rule." -msgstr "" - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "member host" -msgstr "" - -msgid "hosts to add" -msgstr "" - -msgid "member host group" -msgstr "" - -msgid "host groups to add" -msgstr "" - -msgid "Add services to an HBAC rule." -msgstr "" - -msgid "member HBAC service" -msgstr "" - -msgid "HBAC services to add" -msgstr "" - -msgid "member HBAC service group" -msgstr "" - -msgid "HBAC service groups to add" -msgstr "" - -msgid "Add users and groups to an HBAC rule." -msgstr "" - -msgid "Delete an HBAC rule." -msgstr "" - -msgid "Disable an HBAC rule." -msgstr "" - -msgid "Enable an HBAC rule." -msgstr "" - -msgid "Search for HBAC rules." -msgstr "" - -msgid "Modify an HBAC rule." -msgstr "" - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "hosts to remove" -msgstr "" - -msgid "host groups to remove" -msgstr "" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "" - -msgid "HBAC services to remove" -msgstr "" - -msgid "HBAC service groups to remove" -msgstr "" - -msgid "Remove users and groups from an HBAC rule." -msgstr "" - -msgid "Display the properties of an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" - -msgid "Service name" -msgstr "" - -msgid "HBAC service" -msgstr "" - -msgid "HBAC service description" -msgstr "" - -msgid "Member of HBAC service groups" -msgstr "" - -msgid "Add a new HBAC service." -msgstr "" - -msgid "Delete an existing HBAC service." -msgstr "" - -msgid "Search for HBAC services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" - -msgid "Modify an HBAC service." -msgstr "" - -msgid "Display information about an HBAC service." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "Service group name" -msgstr "" - -msgid "HBAC service group description" -msgstr "" - -msgid "Member HBAC service" -msgstr "" - -msgid "Add a new HBAC service group." -msgstr "" - -msgid "Add members to an HBAC service group." -msgstr "" - -msgid "Delete an HBAC service group." -msgstr "" - -msgid "Search for an HBAC service group." -msgstr "" - -msgid "Modify an HBAC service group." -msgstr "" - -msgid "Remove members from an HBAC service group." -msgstr "" - -msgid "Display information about an HBAC service group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -msgid "User name" -msgstr "" - -msgid "Target host" -msgstr "" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host name" -msgstr "" - -msgid "A description of this host" -msgstr "" - -msgid "Locality" -msgstr "" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "" - -msgid "Platform" -msgstr "" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "" - -msgid "Operating system" -msgstr "" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "" - -msgid "User password" -msgstr "" - -msgid "Password used in bulk enrollment" -msgstr "" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "" - -msgid "Random password" -msgstr "" - -msgid "Certificate" -msgstr "" - -msgid "Base-64 encoded server certificate" -msgstr "" - -msgid "Principal name" -msgstr "" - -msgid "MAC address" -msgstr "" - -msgid "Hardware MAC address(es) on this host" -msgstr "" - -msgid "SSH public key" -msgstr "" - -msgid "Class" -msgstr "" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "Assigned ID View" -msgstr "" - -msgid "Requires pre-authentication" -msgstr "" - -msgid "Pre-authentication is required for the service" -msgstr "" - -msgid "Trusted for delegation" -msgstr "" - -msgid "Client credentials may be delegated to the service" -msgstr "" - -msgid "Member of host-groups" -msgstr "" - -msgid "Indirect Member of host-group" -msgstr "" - -msgid "Keytab" -msgstr "" - -msgid "Managed by" -msgstr "" - -msgid "Managing" -msgstr "" - -msgid "Users allowed to retrieve keytab" -msgstr "" - -msgid "Groups allowed to retrieve keytab" -msgstr "" - -msgid "Hosts allowed to retrieve keytab" -msgstr "" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "" - -msgid "Users allowed to create keytab" -msgstr "" - -msgid "Groups allowed to create keytab" -msgstr "" - -msgid "Hosts allowed to create keytab" -msgstr "" - -msgid "Host Groups allowed to create keytab" -msgstr "" - -msgid "Add a new host." -msgstr "" - -msgid "force host name even if not in DNS" -msgstr "" - -msgid "skip reverse DNS detection" -msgstr "" - -msgid "Add the host to DNS with this IP address" -msgstr "" - -msgid "Add hosts that can manage this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" - -msgid "Delete a host." -msgstr "" - -msgid "Remove entries from DNS" -msgstr "" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" - -msgid "Search for hosts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" - -msgid "host group" -msgstr "" - -msgid "Search for hosts with these member of host groups." -msgstr "" - -msgid "Search for hosts without these member of host groups." -msgstr "" - -msgid "Search for hosts with these member of netgroups." -msgstr "" - -msgid "Search for hosts without these member of netgroups." -msgstr "" - -msgid "Search for hosts with these member of roles." -msgstr "" - -msgid "Search for hosts without these member of roles." -msgstr "" - -msgid "Search for hosts with these member of HBAC rules." -msgstr "" - -msgid "Search for hosts without these member of HBAC rules." -msgstr "" - -msgid "Search for hosts with these member of sudo rules." -msgstr "" - -msgid "Search for hosts without these member of sudo rules." -msgstr "" - -msgid "Search for hosts with these enrolled by users." -msgstr "" - -msgid "Search for hosts without these enrolled by users." -msgstr "" - -msgid "host" -msgstr "" - -msgid "Search for hosts with these managed by hosts." -msgstr "" - -msgid "Search for hosts without these managed by hosts." -msgstr "" - -msgid "Search for hosts with these managing hosts." -msgstr "" - -msgid "Search for hosts without these managing hosts." -msgstr "" - -msgid "Modify information about a host." -msgstr "" - -msgid "Kerberos principal name for this host" -msgstr "" - -msgid "Update DNS entries" -msgstr "" - -msgid "Remove hosts that can manage this host." -msgstr "" - -msgid "Display information about a host." -msgstr "" - -msgid "file to store certificate in" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "Host-group" -msgstr "" - -msgid "Name of host-group" -msgstr "" - -msgid "A description of this host-group" -msgstr "" - -msgid "Member hosts" -msgstr "" - -msgid "Member host-groups" -msgstr "" - -msgid "Indirect Member hosts" -msgstr "" - -msgid "Indirect Member host-groups" -msgstr "" - -msgid "Add a new hostgroup." -msgstr "" - -msgid "Add members to a hostgroup." -msgstr "" - -msgid "Delete a hostgroup." -msgstr "" - -msgid "Search for hostgroups." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" - -msgid "Search for host groups with these member hosts." -msgstr "" - -msgid "Search for host groups without these member hosts." -msgstr "" - -msgid "Search for host groups with these member host groups." -msgstr "" - -msgid "Search for host groups without these member host groups." -msgstr "" - -msgid "Search for host groups with these member of host groups." -msgstr "" - -msgid "Search for host groups without these member of host groups." -msgstr "" - -msgid "Search for host groups with these member of netgroups." -msgstr "" - -msgid "Search for host groups without these member of netgroups." -msgstr "" - -msgid "Search for host groups with these member of HBAC rules." -msgstr "" - -msgid "Search for host groups without these member of HBAC rules." -msgstr "" - -msgid "Search for host groups with these member of sudo rules." -msgstr "" - -msgid "Search for host groups without these member of sudo rules." -msgstr "" - -msgid "Modify a hostgroup." -msgstr "" - -msgid "Remove members from a hostgroup." -msgstr "" - -msgid "Display information about a hostgroup." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "आदेशाचे नाव " - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -msgid "Anchor to override" -msgstr "" - -msgid "Group ID Number" -msgstr "" - -msgid "User login" -msgstr "" - -msgid "UID" -msgstr "" - -msgid "User ID Number" -msgstr "" - -msgid "GECOS" -msgstr "" - -msgid "Home directory" -msgstr "" - -msgid "Login shell" -msgstr "" - -msgid "ID View Name" -msgstr "" - -msgid "Add a new Group ID override." -msgstr "" - -msgid "Delete an Group ID override." -msgstr "" - -msgid "Search for an Group ID override." -msgstr "" - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" - -msgid "Modify an Group ID override." -msgstr "" - -msgid "Rename the Group ID override object" -msgstr "" - -msgid "Display information about an Group ID override." -msgstr "" - -msgid "Add a new User ID override." -msgstr "" - -msgid "Delete an User ID override." -msgstr "" - -msgid "Search for an User ID override." -msgstr "" - -msgid "Modify an User ID override." -msgstr "" - -msgid "Rename the User ID override object" -msgstr "" - -msgid "Display information about an User ID override." -msgstr "" - -msgid "Add a new ID View." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" - -msgid "hosts" -msgstr "" - -msgid "Hosts to apply the ID View to" -msgstr "" - -msgid "hostgroups" -msgstr "" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" - -msgid "Hosts that this ID View was applied to." -msgstr "" - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" - -msgid "Number of hosts the ID View was applied to:" -msgstr "" - -msgid "Delete an ID View." -msgstr "" - -msgid "Search for an ID View." -msgstr "" - -msgid "Modify an ID View." -msgstr "" - -msgid "Rename the ID View object" -msgstr "" - -msgid "Display information about an ID View." -msgstr "" - -msgid "Enumerate all the hosts the view applies to." -msgstr "" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" - -msgid "Hosts to clear (any) ID View from." -msgstr "" - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" - -msgid "Hosts that ID View was cleared from." -msgstr "" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" - -msgid "Dict of I18N messages" -msgstr "" - -msgid "Export plugin meta-data for the webUI." -msgstr "" - -msgid "Name of object to export" -msgstr "" - -msgid "Name of method to export" -msgstr "" - -msgid "Name of command to export" -msgstr "" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" - -msgid "Join an IPA domain" -msgstr "" - -msgid "The hostname to register as" -msgstr "" - -msgid "The IPA realm" -msgstr "" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "" - -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" - -msgid "Manage ticket policy for specific user" -msgstr "" - -msgid "Max life" -msgstr "" - -msgid "Maximum ticket life (seconds)" -msgstr "" - -msgid "Max renew" -msgstr "" - -msgid "Maximum renewable age (seconds)" -msgstr "" - -msgid "Modify Kerberos ticket policy." -msgstr "" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "" - -msgid "Display the current Kerberos ticket policy." -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," -"cn=accounts' --group-container='cn=groups,cn=accounts' " -"ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' --user-ignore-" -"objectclass=radiusprofile --user-ignore-" -"attribute=radiusgroupname ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -msgid "Migrate users and groups from DS to IPA." -msgstr "" - -msgid "LDAP URI" -msgstr "" - -msgid "LDAP URI of DS server to migrate from" -msgstr "" - -msgid "bind password" -msgstr "" - -msgid "Bind DN" -msgstr "" - -msgid "User container" -msgstr "" - -msgid "DN of container for users in DS relative to base DN" -msgstr "" - -msgid "Group container" -msgstr "" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "" - -msgid "User object class" -msgstr "" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "" - -msgid "Group object class" -msgstr "" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "" - -msgid "Ignore user object class" -msgstr "" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore user attribute" -msgstr "" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore group object class" -msgstr "" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "Ignore group attribute" -msgstr "" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "" - -msgid "Overwrite GID" -msgstr "" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" - -msgid "LDAP schema" -msgstr "" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" - -msgid "Continue" -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" - -msgid "Base DN" -msgstr "" - -msgid "Base DN on remote LDAP server" -msgstr "" - -msgid "Ignore compat plugin" -msgstr "" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" - -msgid "CA certificate" -msgstr "" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "" - -msgid "groups to exclude from migration" -msgstr "" - -msgid "users to exclude from migration" -msgstr "" - -msgid "Lists of objects migrated; categorized by type." -msgstr "" - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" - -msgid "False if migration mode was disabled." -msgstr "" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" - -msgid "Show environment variables." -msgstr "" - -msgid "Forward to server instead of running locally" -msgstr "" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Total number of variables env (>= count)" -msgstr "" - -msgid "Number of variables returned (<= total)" -msgstr "" - -msgid "Show all loaded plugins." -msgstr "" - -msgid "Dictionary mapping plugin names to bases" -msgstr "" - -msgid "Number of plugins loaded" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "Netgroup name" -msgstr "" - -msgid "Netgroup description" -msgstr "" - -#, fuzzy -msgid "NIS domain name" -msgstr "आदेशाचे नाव " - -msgid "IPA unique ID" -msgstr "" - -msgid "Member netgroups" -msgstr "" - -msgid "Indirect Member netgroups" -msgstr "" - -msgid "Member User" -msgstr "" - -msgid "Member Group" -msgstr "" - -msgid "Member Host" -msgstr "" - -msgid "Member Hostgroup" -msgstr "" - -msgid "Add a new netgroup." -msgstr "" - -msgid "Add members to a netgroup." -msgstr "" - -msgid "member netgroup" -msgstr "" - -msgid "netgroups to add" -msgstr "" - -msgid "Delete a netgroup." -msgstr "" - -msgid "Search for a netgroup." -msgstr "" - -msgid "search for managed groups" -msgstr "" - -msgid "Search for netgroups with these member netgroups." -msgstr "" - -msgid "Search for netgroups without these member netgroups." -msgstr "" - -msgid "Search for netgroups with these member users." -msgstr "" - -msgid "Search for netgroups without these member users." -msgstr "" - -msgid "Search for netgroups with these member groups." -msgstr "" - -msgid "Search for netgroups without these member groups." -msgstr "" - -msgid "Search for netgroups with these member hosts." -msgstr "" - -msgid "Search for netgroups without these member hosts." -msgstr "" - -msgid "Search for netgroups with these member host groups." -msgstr "" - -msgid "Search for netgroups without these member host groups." -msgstr "" - -msgid "Search for netgroups with these member of netgroups." -msgstr "" - -msgid "Search for netgroups without these member of netgroups." -msgstr "" - -msgid "Modify a netgroup." -msgstr "" - -msgid "Remove members from a netgroup." -msgstr "" - -msgid "netgroups to remove" -msgstr "" - -msgid "Display information about a netgroup." -msgstr "" - -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" - -msgid "TOTP authentication Window" -msgstr "" - -msgid "TOTP authentication time variance (seconds)" -msgstr "" - -msgid "TOTP Synchronization Window" -msgstr "" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "" - -msgid "HOTP Authentication Window" -msgstr "" - -msgid "HOTP authentication skip-ahead" -msgstr "" - -msgid "HOTP Synchronization Window" -msgstr "" - -msgid "HOTP synchronization skip-ahead" -msgstr "" - -msgid "Modify OTP configuration options." -msgstr "" - -msgid "Show the current OTP configuration." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -msgid "Serial" -msgstr "" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -#, fuzzy -msgid "(deprecated)" +msgid "Deprecated options" msgstr "वापरात नसलेले पर्याय" -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "Set a user's password." -msgstr "" - -msgid "New Password" -msgstr "" - -msgid "Current Password" -msgstr "" - -msgid "OTP" -msgstr "" - -msgid "One Time Password" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -"\n" -"Managed permissions\n" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "Permission name" -msgstr "" - -msgid "Granted rights" -msgstr "" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" - -msgid "Effective attributes" -msgstr "" - -msgid "All attributes to which the permission applies" -msgstr "" - -msgid "Included attributes" -msgstr "" - -msgid "User-specified attributes to which the permission applies" -msgstr "" - -msgid "Excluded attributes" -msgstr "" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" - -msgid "Default attributes" -msgstr "" - -msgid "Attributes to which the permission applies by default" -msgstr "" - -msgid "Bind rule type" -msgstr "" - -msgid "Subtree to apply permissions to" -msgstr "" - -msgid "Extra target filter" -msgstr "" - -msgid "Raw target filter" -msgstr "" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" - -msgid "Target DN" -msgstr "" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" - -msgid "Member of group" -msgstr "" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "" - -msgid "User group to apply permissions to (sets target)" -msgstr "" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "" - -msgid "Deprecated; use extratargetfilter" -msgstr "" - -#, fuzzy -msgid "Deprecated; use ipapermlocation" -msgstr "वापरात नसलेले पर्याय" - -msgid "Deprecated; use ipapermright" -msgstr "" - -msgid "Granted to Privilege" -msgstr "" - -msgid "Indirect Member of roles" -msgstr "" - -msgid "Add a new permission." -msgstr "" - -msgid "Add members to a permission." -msgstr "" - -msgid "member privilege" -msgstr "" - -msgid "privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "" - -msgid "Permission flags" -msgstr "" - -msgid "Delete a permission." -msgstr "" - -msgid "force delete of SYSTEM permissions" -msgstr "" - -msgid "Search for permissions." -msgstr "" - -msgid "Modify a permission." -msgstr "" - -msgid "Rename the permission object" -msgstr "" - -msgid "Remove members from a permission." -msgstr "" - -msgid "privileges to remove" -msgstr "" - -msgid "Display information about a permission." -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "Ping a remote server." -msgstr "" - -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "" - -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" - -msgid "Privilege name" -msgstr "" - -msgid "Privilege description" -msgstr "" - -msgid "Granting privilege to roles" -msgstr "" - -msgid "Add a new privilege." -msgstr "" - -msgid "Add members to a privilege." -msgstr "" - -msgid "member role" -msgstr "" - -#, fuzzy -msgid "roles to add" -msgstr "कोणतीही फाइल वाचण्यासाठी नाही " - -msgid "Add permissions to a privilege." -msgstr "" - -msgid "permission" -msgstr "" - -msgid "permissions" -msgstr "" - -msgid "Number of permissions added" -msgstr "" - -msgid "Delete a privilege." -msgstr "" - -msgid "Search for privileges." -msgstr "" - -msgid "Modify a privilege." -msgstr "" - -msgid "Rename the privilege object" -msgstr "" - -msgid "Remove members from a privilege" -msgstr "" - -#, fuzzy -msgid "roles to remove" -msgstr "कोणतीही फाइल वाचण्यासाठी नाही " - -msgid "Remove permissions from a privilege." -msgstr "" - -msgid "Number of permissions removed" -msgstr "" - -msgid "Display information about a privilege." -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Group" -msgstr "" - -msgid "Manage password policy for specific group" -msgstr "" - -msgid "Max lifetime (days)" -msgstr "" - -msgid "Maximum password lifetime (in days)" -msgstr "" - -msgid "Min lifetime (hours)" -msgstr "" - -msgid "Minimum password lifetime (in hours)" -msgstr "" - -msgid "History size" -msgstr "" - -msgid "Password history size" -msgstr "" - -msgid "Character classes" -msgstr "" - -msgid "Minimum number of character classes" -msgstr "" - -msgid "Min length" -msgstr "" - -msgid "Minimum length of password" -msgstr "" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "" - -msgid "Max failures" -msgstr "" - -msgid "Consecutive failures before lockout" -msgstr "" - -msgid "Failure reset interval" -msgstr "" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "" - -msgid "Lockout duration" -msgstr "" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" - -msgid "Add a new group password policy." -msgstr "" - -msgid "Delete a group password policy." -msgstr "" - -msgid "Search for group password policies." -msgstr "" - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" - -msgid "Modify a group password policy." -msgstr "" - -msgid "Display information about password policy." -msgstr "" - -msgid "User" -msgstr "" - -msgid "Display effective policy for a specific user" -msgstr "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "RADIUS proxy server name" -msgstr "" - -msgid "A description of this RADIUS proxy server" -msgstr "" - -msgid "Server" -msgstr "" - -msgid "The hostname or IP (with or without port)" -msgstr "" - -msgid "Secret" -msgstr "" - -msgid "The secret used to encrypt data" -msgstr "" - -msgid "Timeout" -msgstr "" - -msgid "The total timeout across all retries (in seconds)" -msgstr "" - -msgid "Retries" -msgstr "" - -msgid "The number of times to retry authentication" -msgstr "" - -msgid "User attribute" -msgstr "" - -msgid "The username attribute on the user object" -msgstr "" - -msgid "Add a new RADIUS proxy server." -msgstr "" - -msgid "Delete a RADIUS proxy server." -msgstr "" - -msgid "Search for RADIUS proxy servers." -msgstr "" - -msgid "Modify a RADIUS proxy server." -msgstr "" - -msgid "Rename the RADIUS proxy server object" -msgstr "" - -msgid "Display information about a RADIUS proxy server." -msgstr "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Domain" -msgstr "" - -msgid "Add domain" -msgstr "" - -msgid "Delete domain" -msgstr "" - -msgid "Modify realm domains." -msgstr "" - -msgid "Force adding domain even if not in DNS" -msgstr "" - -msgid "Display the list of realm domains." -msgstr "" - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" - -msgid "Role name" -msgstr "" - -msgid "A description of this role-group" -msgstr "" - -msgid "Privileges" -msgstr "" - -msgid "Member services" -msgstr "" - -msgid "Add a new role." -msgstr "" - -msgid "Add members to a role." -msgstr "" - -msgid "member service" -msgstr "" - -msgid "services to add" -msgstr "" - -msgid "Add privileges to a role." -msgstr "" - -msgid "privilege" -msgstr "" - -msgid "privileges" -msgstr "" - -msgid "Number of privileges added" -msgstr "" - -msgid "Delete a role." -msgstr "" - -msgid "Search for roles." -msgstr "" - -msgid "Modify a role." -msgstr "" - -msgid "Rename the role object" -msgstr "" - -msgid "Remove members from a role." -msgstr "" - -msgid "services to remove" -msgstr "" - -msgid "Remove privileges from a role." -msgstr "" - -msgid "Number of privileges removed" -msgstr "" - -msgid "Display information about a role." -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "Self-service name" -msgstr "" - -msgid "Attributes to which the permission applies." -msgstr "" - -msgid "Add a new self-service permission." -msgstr "" - -msgid "Delete a self-service permission." -msgstr "" - -msgid "Search for a self-service permission." -msgstr "" - -msgid "Modify a self-service permission." -msgstr "" - -msgid "Display information about a self-service permission." -msgstr "" - -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" - -msgid "SELinux User" -msgstr "" - -msgid "HBAC Rule" -msgstr "" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "" - -msgid "Create a new SELinux User Map." -msgstr "" - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "" - -msgid "Delete a SELinux User Map." -msgstr "" - -msgid "Disable an SELinux User Map rule." -msgstr "" - -msgid "Enable an SELinux User Map rule." -msgstr "" - -msgid "Search for SELinux User Maps." -msgstr "" - -msgid "Modify a SELinux User Map." -msgstr "" - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "" - -msgid "Display the properties of a SELinux User Map rule." -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "Service principal" -msgstr "" - -msgid "PAC type" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" - -msgid "Add a new IPA new service." -msgstr "" - -msgid "force principal name even if not in DNS" -msgstr "" - -msgid "Add hosts that can manage this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Delete an IPA service." -msgstr "" - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Search for IPA services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" - -msgid "Search for services with these managed by hosts." -msgstr "" - -msgid "Search for services without these managed by hosts." -msgstr "" - -msgid "Modify an existing IPA service." -msgstr "" - -msgid "Remove hosts that can manage this service." -msgstr "" - -msgid "Display information about an IPA service." -msgstr "" - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" - -#, fuzzy -msgid "Sudo Command" -msgstr "विषय किंवा आदेश" - -msgid "A description of this command" -msgstr "" - -msgid "Sudo Command Groups" -msgstr "" - -msgid "Create new Sudo Command." -msgstr "" - -msgid "Delete Sudo Command." -msgstr "" - -msgid "Search for Sudo Commands." -msgstr "" - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" - -#, fuzzy -msgid "Modify Sudo Command." -msgstr "विषय किंवा आदेश" - -msgid "Display Sudo Command." -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "Sudo Command Group" -msgstr "" - -#, fuzzy -msgid "Commands" -msgstr "आदेशाचे नाव " - -msgid "Member Sudo commands" -msgstr "" - -msgid "Create new Sudo Command Group." -msgstr "" - -msgid "Add members to Sudo Command Group." -msgstr "" - -msgid "member sudo command" -msgstr "" - -msgid "sudo commands to add" -msgstr "" - -msgid "Delete Sudo Command Group." -msgstr "" - -msgid "Search for Sudo Command Groups." -msgstr "" - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" - -msgid "Modify Sudo Command Group." -msgstr "" - -msgid "Remove members from Sudo Command Group." -msgstr "" - -msgid "sudo commands to remove" -msgstr "" - -msgid "Display Sudo Command Group." -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -#, fuzzy -msgid "Domain name" -msgstr "आदेशाचे नाव " - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "" - -msgid "Last name" -msgstr "" - -msgid "Full name" -msgstr "" - -msgid "Display name" -msgstr "" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Email address" -msgstr "" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -msgid "Pager Number" -msgstr "" - -msgid "Fax Number" -msgstr "" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Car License" -msgstr "" - -msgid "Account disabled" -msgstr "" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "" - -msgid "RADIUS proxy username" -msgstr "" - -msgid "Department Number" -msgstr "" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -msgid "Delete a user." -msgstr "" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -#, fuzzy -msgid "Command category" -msgstr "आदेशाचे नाव " - -msgid "Command category the rule applies to" -msgstr "" - -msgid "RunAs User category" -msgstr "" - -msgid "RunAs User category the rule applies to" -msgstr "" - -msgid "RunAs Group category" -msgstr "" - -msgid "RunAs Group category the rule applies to" -msgstr "" - -msgid "Sudo order" -msgstr "" - -msgid "integer to order the Sudo rules" -msgstr "" - -msgid "External User" -msgstr "" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -msgid "Host Masks" -msgstr "" - -#, fuzzy -msgid "Sudo Allow Commands" -msgstr "विषय किंवा आदेश" - -msgid "Sudo Deny Commands" -msgstr "" - -msgid "Sudo Allow Command Groups" -msgstr "" - -msgid "Sudo Deny Command Groups" -msgstr "" - -msgid "RunAs Users" -msgstr "" - -msgid "Run as a user" -msgstr "" - -msgid "Groups of RunAs Users" -msgstr "" - -msgid "Run as any user within a specified group" -msgstr "" - -msgid "RunAs External User" -msgstr "" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -msgid "External Groups of RunAs Users" -msgstr "" - -msgid "External Groups of users that the command can run as" -msgstr "" - -msgid "RunAs Groups" -msgstr "" - -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -msgid "RunAs External Group" -msgstr "" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -msgid "Sudo Option" -msgstr "" - -msgid "Create new Sudo Rule." -msgstr "" - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "member sudo command group" -msgstr "" - -msgid "sudo command groups to add" -msgstr "" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "" - -msgid "Add group for Sudo to execute as." -msgstr "" - -msgid "Add users and groups for Sudo to execute as." -msgstr "" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "" - -msgid "Delete Sudo Rule." -msgstr "" - -msgid "Disable a Sudo Rule." -msgstr "" - -msgid "Enable a Sudo Rule." -msgstr "" - -msgid "Search for Sudo Rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -msgid "Modify Sudo Rule." -msgstr "" - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "sudo command groups to remove" -msgstr "" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "Remove an option from Sudo Rule." -msgstr "" - -msgid "Remove group for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "" - -msgid "Display Sudo Rule." -msgstr "" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -#, fuzzy -msgid "ACL name" -msgstr "आदेशाचे नाव " - -msgid "Profile category" -msgstr "" - -msgid "Profile category the ACL applies to" -msgstr "" - -msgid "User category the ACL applies to" -msgstr "" - -msgid "Host category the ACL applies to" -msgstr "" - -msgid "Service category the ACL applies to" -msgstr "" - -msgid "Profiles" -msgstr "" - -msgid "Create a new CA ACL." -msgstr "" - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "" - -msgid "Add profiles to a CA ACL." -msgstr "" - -msgid "member Certificate Profile" -msgstr "" - -msgid "Certificate Profiles to add" -msgstr "" - -msgid "Add services to a CA ACL." -msgstr "" - -msgid "Add users and groups to a CA ACL." -msgstr "" - -msgid "Delete a CA ACL." -msgstr "" - -msgid "Disable a CA ACL." -msgstr "" - -msgid "Enable a CA ACL." -msgstr "" - -msgid "Search for CA ACLs." -msgstr "" - -msgid "Modify a CA ACL." -msgstr "" - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "" - -msgid "Remove profiles from a CA ACL." -msgstr "" - -msgid "Certificate Profiles to remove" -msgstr "" - -msgid "Remove services from a CA ACL." -msgstr "" - -msgid "Remove users and groups from a CA ACL." -msgstr "" - -msgid "Display the properties of a CA ACL." -msgstr "" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" - -msgid "Query current Domain Level." -msgstr "" - -msgid "Current domain level:" -msgstr "" - -msgid "Change current Domain Level." -msgstr "" - -msgid "Domain Level" -msgstr "" - -msgid "Add certificates to host entry" -msgstr "" - -msgid "Remove certificates from host entry" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "Fallback to AD DC LDAP" -msgstr "" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" - -msgid "Add to default group" -msgstr "" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" - -msgid "Search scope" -msgstr "" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Target DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" - -msgid "Origin DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "Server name" -msgstr "" - -msgid "IPA server hostname" -msgstr "" - -msgid "Managed suffix" -msgstr "" - -msgid "Min domain level" -msgstr "" - -msgid "Minimum domain level" -msgstr "" - -msgid "Max domain level" -msgstr "" - -msgid "Maximum domain level" -msgstr "" - -msgid "Delete IPA server." -msgstr "" - -msgid "Search for IPA servers." -msgstr "" - -msgid "Show IPA server." -msgstr "" - -msgid "Add new certificates to a service" -msgstr "" - -msgid "Remove certificates from a service" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed Target" -msgstr "" - -msgid "Create a new service delegation rule." -msgstr "" - -msgid "Add member to a named service delegation rule." -msgstr "" - -msgid "member principal" -msgstr "" - -msgid "principal to add" -msgstr "" - -msgid "Add target to a named service delegation rule." -msgstr "" - -msgid "member service delegation target" -msgstr "" - -msgid "service delegation targets to add" -msgstr "" - -msgid "Delete service delegation." -msgstr "" - -msgid "Search for service delegations rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" - -msgid "Remove member from a named service delegation rule." -msgstr "" - -msgid "principal to remove" -msgstr "" - -msgid "Remove target from a named service delegation rule." -msgstr "" - -msgid "service delegation targets to remove" -msgstr "" - -msgid "Display information about a named service delegation rule." -msgstr "" - -msgid "Create a new service delegation target." -msgstr "" - -msgid "Add member to a named service delegation target." -msgstr "" - -msgid "Delete service delegation target." -msgstr "" - -msgid "Search for service delegation target." -msgstr "" - -msgid "Remove member from a named service delegation target." -msgstr "" - -msgid "Display information about a named service delegation target." -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" - -msgid "Activate a stage user." -msgstr "" - -msgid "Add a new stage user." -msgstr "" - -msgid "Create Stage user in from a delete user" -msgstr "" - -msgid "Delete a stage user." -msgstr "" - -msgid "Search for stage users." -msgstr "" - -msgid "Search for stage users with these member of groups." -msgstr "" - -msgid "Search for stage users without these member of groups." -msgstr "" - -msgid "Search for stage users with these member of netgroups." -msgstr "" - -msgid "Search for stage users without these member of netgroups." -msgstr "" - -msgid "Search for stage users with these member of roles." -msgstr "" - -msgid "Search for stage users without these member of roles." -msgstr "" - -msgid "Search for stage users with these member of HBAC rules." -msgstr "" - -msgid "Search for stage users without these member of HBAC rules." -msgstr "" - -msgid "Search for stage users with these member of sudo rules." -msgstr "" - -msgid "Search for stage users without these member of sudo rules." -msgstr "" - -msgid "Modify a stage user." -msgstr "" - -msgid "Rename the stage user object" -msgstr "" - -msgid "Display information about a stage user." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" - -msgid "Segment name" -msgstr "" - -msgid "Arbitrary string identifying the segment" -msgstr "" - -msgid "Left node" -msgstr "" - -msgid "Left replication node - an IPA server" -msgstr "" - -msgid "Right node" -msgstr "" - -msgid "Right replication node - an IPA server" -msgstr "" - -msgid "Connectivity" -msgstr "" - -msgid "Direction of replication between left and right replication node" -msgstr "" - -msgid "Attributes to strip" -msgstr "" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" - -msgid "Attributes to replicate" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" - -msgid "Attributes for total update" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" - -msgid "Session timeout" -msgstr "" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" - -msgid "Replication agreement enabled" -msgstr "" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" - -msgid "Suffix name" -msgstr "" - -msgid "LDAP suffix to be managed" -msgstr "" - -msgid "Add a new segment." -msgstr "" - -msgid "Delete a segment." -msgstr "" - -msgid "Search for topology segments." -msgstr "" - -msgid "Modify a segment." -msgstr "" - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" - -msgid "Initialize left node" -msgstr "" - -msgid "Initialize right node" -msgstr "" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "" - -msgid "Display a segment." -msgstr "" - -msgid "Add a new topology suffix to be managed." -msgstr "" - -msgid "Delete a topology suffix." -msgstr "" - -msgid "Search for topology suffices." -msgstr "" - -msgid "Modify a topology suffix." -msgstr "" - -msgid "Show managed suffix." -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "Preserved user" -msgstr "" - -msgid "Add one or more certificates to the user entry" -msgstr "" - -msgid "Remove one or more certificates to the user entry" -msgstr "" - -msgid "Move deleted user into staged area" -msgstr "" - -msgid "Undelete a delete user account." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "Vault name" -msgstr "" - -msgid "Vault description" -msgstr "" - -msgid "Vault type" -msgstr "" - -msgid "Salt" -msgstr "" - -msgid "Vault salt" -msgstr "" - -msgid "Public key" -msgstr "" - -msgid "Vault public key" -msgstr "" - -msgid "Owner users" -msgstr "" - -msgid "Owner groups" -msgstr "" - -msgid "Owner services" -msgstr "" - -msgid "Failed owners" -msgstr "" - -msgid "Vault service" -msgstr "" - -msgid "Shared vault" -msgstr "" - -msgid "Vault user" -msgstr "" - -msgid "Transport Certificate" -msgstr "" - -msgid "Service name of the service vault" -msgstr "" - -msgid "Username of the user vault" -msgstr "" - -msgid "Add members to a vault." -msgstr "" - -msgid "Add owners to a vault." -msgstr "" - -msgid "owner user" -msgstr "" - -msgid "owner group" -msgstr "" - -msgid "owner service" -msgstr "" - -msgid "Owners that could not be added" -msgstr "" - -msgid "Number of owners added" -msgstr "" - -msgid "Session key wrapped with transport certificate" -msgstr "" - -msgid "Vault data encrypted with session key" -msgstr "" - -msgid "Nonce" -msgstr "" - -msgid "Delete a vault." -msgstr "" - -msgid "Search for vaults." -msgstr "" - -msgid "List all service vaults" -msgstr "" - -msgid "List all user vaults" -msgstr "" - -msgid "Remove members from a vault." -msgstr "" - -msgid "Remove owners from a vault." -msgstr "" - -msgid "Owners that could not be removed" -msgstr "" - -msgid "Number of owners removed" -msgstr "" - -msgid "Display information about a vault." -msgstr "" - -msgid "Show vault configuration." -msgstr "" - -msgid "Output file to store the transport certificate" -msgstr "" - -msgid "Add owners to a vault container." -msgstr "" - -msgid "Delete a vault container." -msgstr "" - -msgid "Remove owners from a vault container." -msgstr "" - -msgid "Display information about a vault container." -msgstr "" - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "" - -msgid "Hostname (FQDN)" -msgstr "" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Managed suffixes" -msgstr "" - -msgid "Check connection to remote IPA server." -msgstr "" - -msgid "Remote server name" -msgstr "" - -msgid "Remote IPA server hostname" -msgstr "" - -msgid "suffix" -msgstr "" - -msgid "Search for servers with these managed suffixes." -msgstr "" - -msgid "Search for servers without these managed suffixes." -msgstr "" - -msgid "Add a manager to the stage user entry" -msgstr "" - -msgid "Remove a manager to the stage user entry" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -msgid "Managed LDAP suffix DN" -msgstr "" - -msgid "Search for topology suffixes." -msgstr "" - -msgid "Add a manager to the user entry" -msgstr "" - -msgid "Remove a manager to the user entry" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Comma-separated list of attributes" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" - -msgid "DNS class" -msgstr "" - -msgid "Comma-separated list of raw A records" -msgstr "" - -msgid "Comma-separated list of raw AAAA records" -msgstr "" - -msgid "Comma-separated list of raw A6 records" -msgstr "" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "" - -msgid "Comma-separated list of raw APL records" -msgstr "" - -msgid "Comma-separated list of raw CERT records" -msgstr "" - -msgid "Comma-separated list of raw CNAME records" -msgstr "" - -msgid "Comma-separated list of raw DHCID records" -msgstr "" - -msgid "Comma-separated list of raw DLV records" -msgstr "" - -msgid "Comma-separated list of raw DNAME records" -msgstr "" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "" - -msgid "Comma-separated list of raw DS records" -msgstr "" - -msgid "Comma-separated list of raw HIP records" -msgstr "" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "" - -msgid "Comma-separated list of raw KEY records" -msgstr "" - -msgid "KEY Flags" -msgstr "" - -msgid "KEY Protocol" -msgstr "" - -msgid "Protocol" -msgstr "" - -msgid "KEY Algorithm" -msgstr "" - -msgid "KEY Public Key" -msgstr "" - -msgid "Public Key" -msgstr "" - -msgid "Comma-separated list of raw KX records" -msgstr "" - -msgid "Comma-separated list of raw LOC records" -msgstr "" - -msgid "Comma-separated list of raw MX records" -msgstr "" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "" - -msgid "Comma-separated list of raw NS records" -msgstr "" - -msgid "Comma-separated list of raw NSEC records" -msgstr "" - -msgid "NSEC Next Domain Name" -msgstr "" - -msgid "Next Domain Name" -msgstr "" - -msgid "NSEC Type Map" -msgstr "" - -msgid "Type Map" -msgstr "" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "" - -msgid "Comma-separated list of raw PTR records" -msgstr "" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "" - -msgid "RRSIG Type Covered" -msgstr "" - -msgid "Type Covered" -msgstr "" - -msgid "RRSIG Algorithm" -msgstr "" - -msgid "RRSIG Labels" -msgstr "" - -msgid "Labels" -msgstr "" - -msgid "RRSIG Original TTL" -msgstr "" - -msgid "Original TTL" -msgstr "" - -msgid "RRSIG Signature Expiration" -msgstr "" - -msgid "Signature Expiration" -msgstr "" - -msgid "RRSIG Signature Inception" -msgstr "" - -msgid "Signature Inception" -msgstr "" - -msgid "RRSIG Key Tag" -msgstr "" - -msgid "RRSIG Signer's Name" -msgstr "" - -msgid "Signer's Name" -msgstr "" - -msgid "RRSIG Signature" -msgstr "" - -msgid "Signature" -msgstr "" - -msgid "Comma-separated list of raw RP records" -msgstr "" - -msgid "Comma-separated list of raw SIG records" -msgstr "" - -msgid "SIG Type Covered" -msgstr "" - -msgid "SIG Algorithm" -msgstr "" - -msgid "SIG Labels" -msgstr "" - -msgid "SIG Original TTL" -msgstr "" - -msgid "SIG Signature Expiration" -msgstr "" - -msgid "SIG Signature Inception" -msgstr "" - -msgid "SIG Key Tag" -msgstr "" - -msgid "SIG Signer's Name" -msgstr "" - -msgid "SIG Signature" -msgstr "" - -msgid "Comma-separated list of raw SPF records" -msgstr "" - -msgid "Comma-separated list of raw SRV records" -msgstr "" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "" - -msgid "Comma-separated list of raw TA records" -msgstr "" - -msgid "Comma-separated list of raw TKEY records" -msgstr "" - -msgid "Comma-separated list of raw TSIG records" -msgstr "" - -msgid "Comma-separated list of raw TXT records" -msgstr "" - -msgid "SOA time to live" -msgstr "" - -msgid "SOA record time to live" -msgstr "" - -msgid "SOA class" -msgstr "" - -msgid "SOA record class" -msgstr "" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" - -msgid "Consume an entitlement." -msgstr "" - -msgid "Quantity" -msgstr "" - -msgid "Search for entitlement accounts." -msgstr "" - -msgid "Retrieve the entitlement certs." -msgstr "" - -msgid "Import an entitlement certificate." -msgstr "" - -msgid "UUID" -msgstr "" - -msgid "Enrollment UUID" -msgstr "" - -msgid "Register to the entitlement system." -msgstr "" - -msgid "Username" -msgstr "" - -msgid "Enrollment UUID (not implemented)" -msgstr "" - -msgid "Registration password" -msgstr "" - -msgid "Display current entitlements." -msgstr "" - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" - -msgid "comma-separated list of users to add" -msgstr "" - -msgid "comma-separated list of groups to add" -msgstr "" - -msgid "comma-separated list of users to remove" -msgstr "" - -msgid "comma-separated list of groups to remove" -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Source host category" -msgstr "" - -msgid "Source host category the rule applies to" -msgstr "" - -msgid "Source Hosts" -msgstr "" - -msgid "Source Host Groups" -msgstr "" - -msgid "comma-separated list of hosts to add" -msgstr "" - -msgid "comma-separated list of host groups to add" -msgstr "" - -msgid "comma-separated list of HBAC services to add" -msgstr "" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "" - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "" - -msgid "comma-separated list of hosts to remove" -msgstr "" - -msgid "comma-separated list of host groups to remove" -msgstr "" - -msgid "comma-separated list of HBAC services to remove" -msgstr "" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" - -msgid "Source host" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "comma-separated list of netgroups to add" -msgstr "" - -msgid "comma-separated list of netgroups to remove" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" - -msgid "Target members of a group" -msgstr "" - -msgid "User group to apply permissions to" -msgstr "" - -msgid "comma-separated list of privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI" -msgstr "" - -msgid "Permission type" -msgstr "" - -msgid "comma-separated list of privileges to remove" -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "comma-separated list of roles to add" -msgstr "" - -msgid "comma-separated list of permissions" -msgstr "" - -msgid "comma-separated list of roles to remove" -msgstr "" - -msgid "comma-separated list of privileges" -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "comma-separated list of sudo commands to add" -msgstr "" - -msgid "comma-separated list of sudo commands to remove" -msgstr "" - -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" - -msgid "comma-separated list of sudo command groups to add" -msgstr "" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "" - -msgid "Failed members" -msgstr "" - -msgid "Failed source hosts/hostgroups" -msgstr "" - -msgid "Failed hosts/hostgroups" -msgstr "" - -msgid "Failed users/groups" -msgstr "" - -msgid "Failed service/service groups" -msgstr "" - -msgid "Failed to remove" -msgstr "" - -msgid "Failed RunAs" -msgstr "" - -msgid "Failed RunAsGroup" -msgstr "" - -msgid "Failed profiles" -msgstr "" - -msgid "Failed CAs" -msgstr "" - -msgid "Failed member manager" -msgstr "" - -msgid "Failed managedby" -msgstr "" - -msgid "Failed allowed to retrieve keytab" -msgstr "" - -msgid "Failed allowed to create keytab" -msgstr "" - -msgid "Failed targets" -msgstr "" - #, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" +msgid "Enter %(label)s again to verify: " +msgstr "सत्यापित करण्यासाठी आपण पुन्हा %(label)s प्रविष्ट करा:" -#, fuzzy, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "अवैध JSON-RPC विनंती : %(error)s" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Kerberos त्रुटी: %(major)s/%(minor)s" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "न आढळलेले किंवा अवैध HTTP Referer, %(referer)s" + +msgid "No file to read" +msgstr "कोणतीही फाइल वाचण्यासाठी नाही " + +msgid "No matching entries found" +msgstr "कोणतेही जुळणारे नोंदी आढळले" + +msgid "Passwords do not match!" +msgstr "पासवर्ड जुळत नाही!" + +msgid "Positional arguments" +msgstr "positional वितर्क" + +#, python-format +msgid "Same as --%s" +msgstr "--%s सारखा" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "सेवा '%(service)s' Kerberos माहितीकोष आढली नाही" + +msgid "The topic or command name." +msgstr "विषय किंवा आदेशाचे नाव" + +msgid "To get command help, use:" +msgstr "आदेशा संबधित मिळवण्यासाठी, वापरा:" + +msgid "Topic commands:" +msgstr "विषय आदेश:" + +msgid "Topic or Command" +msgstr "विषय किंवा आदेश" msgid "an internal error has occurred" msgstr "एक अंतर्गत त्रुटी आली आहे" @@ -11513,12416 +82,16 @@ msgid "an internal error has occurred on server at '%(server)s'" msgstr "एक अंतर्गत त्रुटी '%(server)s' वरील सर्व्हर वर आली आहे " #, python-format -msgid "unknown command '%(name)s'" -msgstr "अनोळखी आदेश '%(name)s'" +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "'%(uri)s' ला जोडणी अपयशी : %(error)s" + +msgid "did not receive Kerberos credentials" +msgstr "Kerberos credentials प्राप्त झाले नाहीत" #, python-format msgid "error on server '%(server)s': %(error)s" msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" #, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "'%(uri)s' ला जोडणी अपयशी : %(error)s" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "अवैध JSON-RPC विनंती : %(error)s" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "न आढळलेले किंवा अवैध HTTP Referer, %(referer)s" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Kerberos त्रुटी: %(major)s/%(minor)s" - -msgid "did not receive Kerberos credentials" -msgstr "Kerberos credentials प्राप्त झाले नाहीत" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "सेवा '%(service)s' Kerberos माहितीकोष आढली नाही" - -msgid "No credentials cache found" -msgstr "" - -msgid "Ticket expired" -msgstr "" - -msgid "Credentials cache permissions incorrect" -msgstr "" - -msgid "Bad format in credentials cache" -msgstr "" - -msgid "Cannot resolve KDC for requested realm" -msgstr "" - -msgid "Session error" -msgstr "" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#, python-format -msgid "'%(name)s' is required" -msgstr "" - -#, fuzzy, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "अवैध JSON-RPC विनंती : %(error)s" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - -#, fuzzy -msgid "Passwords do not match" -msgstr "पासवर्ड जुळत नाही!" - -#, fuzzy -msgid "Command not implemented" -msgstr "आदेशाचे नाव " - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -#, python-format -msgid "%(reason)s" -msgstr "" - -msgid "This entry already exists" -msgstr "" - -msgid "You must enroll a host in order to create a host service" -msgstr "" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" - -msgid "This command requires root access" -msgstr "" - -msgid "This is already a posix group" -msgstr "" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -msgid "This entry is already enabled" -msgstr "" - -msgid "This entry is already disabled" -msgstr "" - -msgid "This entry cannot be enabled or disabled" -msgstr "" - -msgid "This entry is not a member" -msgstr "" - -msgid "A group may not be a member of itself" -msgstr "" - -msgid "This entry is already a member" -msgstr "" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "" - -msgid "A group may not be added as a member of itself" -msgstr "" - -msgid "The default users group cannot be removed" -msgstr "" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -msgid "This group already allows external members" -msgstr "" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "change collided with another change" -msgstr "" - -msgid "no modifications to be performed" -msgstr "" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "" - -msgid "limits exceeded for this query" -msgstr "" - -#, python-format -msgid "%(info)s" -msgstr "" - -msgid "modifying primary key is not allowed" -msgstr "" - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "" - -msgid "Already registered" -msgstr "" - -msgid "Not registered yet" -msgstr "" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, python-format -msgid "%(exception)s" -msgstr "" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, fuzzy, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -#, python-format -msgid "%(count)d variables" -msgstr "" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" -msgstr[1] "" - -msgid "A dictionary representing an LDAP entry" -msgstr "" - -msgid "A list of LDAP entries" -msgstr "" - -msgid "All commands should at least have a result" -msgstr "" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "सत्यापित करण्यासाठी आपण पुन्हा %(label)s प्रविष्ट करा:" - -msgid "Passwords do not match!" -msgstr "पासवर्ड जुळत नाही!" - -msgid "No matching entries found" -msgstr "कोणतेही जुळणारे नोंदी आढळले" - -msgid "Topic or Command" -msgstr "विषय किंवा आदेश" - -msgid "The topic or command name." -msgstr "विषय किंवा आदेशाचे नाव" - -msgid "Topic commands:" -msgstr "विषय आदेश:" - -msgid "To get command help, use:" -msgstr "आदेशा संबधित मिळवण्यासाठी, वापरा:" - -msgid " ipa --help" -msgstr " ipa --help" - -msgid "Command name" -msgstr "आदेशाचे नाव " - -msgid "Positional arguments" -msgstr "positional वितर्क" - -#, python-format -msgid "Same as --%s" -msgstr "--%s सारखा" - -msgid "Deprecated options" -msgstr "वापरात नसलेले पर्याय" - -msgid "No file to read" -msgstr "कोणतीही फाइल वाचण्यासाठी नाही " - -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - -#, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - -msgid "Filename is empty" -msgstr "" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" -msgstr "" - -#, fuzzy, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -msgid "invalid domain name" -msgstr "" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "incorrect type" -msgstr "" - -msgid "Only one value is allowed" -msgstr "" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "" - -msgid "must be an integer" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -msgid "must be a decimal number" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -msgid "must be binary data" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -msgid "must be a certificate" -msgstr "" - -msgid "must be a certificate signing request" -msgstr "" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "" - -msgid "Leading and trailing spaces are not allowed" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "" - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "" - -#, python-format -msgid "must be '%(value)s'" -msgstr "" - -#, python-format -msgid "must be one of %(values)s" -msgstr "" - -msgid "must be datetime value" -msgstr "" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -msgid "must be DNS name" -msgstr "" - -msgid "must be absolute" -msgstr "" - -msgid "must be relative" -msgstr "" - -msgid "must be dictionary" -msgstr "" - -msgid "must be Kerberos principal" -msgstr "" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -msgid "Service principal is required" -msgstr "" - -msgid "must be at least 0" -msgstr "" - -msgid "invalid valid hex" -msgstr "" - -msgid "invalid serial number 0" -msgstr "" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "" - -#, python-format -msgid "objectclass %s not found" -msgstr "" - -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "Failed to authenticate to CA REST API" -msgstr "" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "" - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -msgid "Automount Location" -msgstr "" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -#, fuzzy -msgid "Delegations" -msgstr "वापरात नसलेले पर्याय" - -msgid "Delegation" -msgstr "" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "" - -msgid "User Group" -msgstr "" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "host groups" -msgstr "" - -msgid "Host Group" -msgstr "" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" - -msgid "hostgroup" -msgstr "" - -msgid "privileged hostgroup" -msgstr "" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "Auto private groups" -msgstr "" - -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "" - -msgid "locations" -msgstr "" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -#, fuzzy -msgid "Location name" -msgstr "आदेशाचे नाव " - -msgid "IPA location name" -msgstr "" - -msgid "IPA Location description" -msgstr "" - -msgid "Servers" -msgstr "" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -msgid "Delete an IPA location." -msgstr "" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -msgid "IPA Server" -msgstr "" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -msgid "netgroups" -msgstr "" - -msgid "Netgroups" -msgstr "" - -msgid "Netgroup" -msgstr "" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" -msgstr "" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" -msgstr "" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "Role" -msgstr "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -msgid "Self Service Permissions" -msgstr "" - -msgid "Self Service Permission" -msgstr "" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "IPA role name" -msgstr "" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -msgid "Subordinate id description" -msgstr "" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -msgid "SubUID range size" -msgstr "" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -msgid "SubGID range size" -msgstr "" - -msgid "Subordinate group ID count" -msgstr "" - -#, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "" - -#, python-format -msgid "'%(dn)s is not a valid user" -msgstr "" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -msgid "Add a new subordinate id." -msgstr "" - -#, python-format -msgid "Added subordinate id \"%(value)s\"" -msgstr "" - -msgid "Delete a subordinate id." -msgstr "" - -#, python-format -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "" - -msgid "Modify a subordinate id." -msgstr "" - -#, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Search for subordinate id." -msgstr "विषय किंवा आदेश" - -#, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a subordinate id." -msgstr "" - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -#, fuzzy -msgid "sudo command" -msgstr "विषय आदेश:" - -#, fuzzy -msgid "sudo commands" -msgstr "विषय आदेश:" - -#, fuzzy -msgid "Sudo Commands" -msgstr "विषय आदेश:" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -msgid "servers" -msgstr "" - -msgid "IPA Servers" -msgstr "" - -msgid "Server location" -msgstr "" - -msgid "Service weight" -msgstr "" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, fuzzy, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, fuzzy, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -msgid "Server state" -msgstr "" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "A list of ACI values" -msgstr "" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -msgstr "" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -msgid "" -"\n" -"Managed permissions\n" -msgstr "" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "must be enclosed in parentheses" -msgstr "" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, fuzzy, python-format -msgid "Deprecated; use %s" -msgstr "वापरात नसलेले पर्याय" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, python-format -msgid "Entry %s not found" -msgstr "" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, python-format -msgid "Entry %s does not exist" -msgstr "" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -msgid "Help topic" -msgstr "" - -msgid "Version" -msgstr "" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "आदेशाचे नाव " - -msgid "Display information about a command." -msgstr "" - -#, fuzzy -msgid "Search for commands." -msgstr "विषय किंवा आदेश" - -msgid "Return command defaults" -msgstr "" - -#, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "आदेशाचे नाव " - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -#, fuzzy -msgid "Positional argument" -msgstr "positional वितर्क" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "Trust direction" -msgstr "" - -msgid "Trust type" -msgstr "" - -msgid "Trust status" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" - -msgid "trust configuration" -msgstr "" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -msgid "Vault configuration" -msgstr "" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -msgid "Key wrapping algorithm" -msgstr "" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." -msgstr "" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "Principal alias" -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -msgid "External IdP configuration" -msgstr "" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "Certificate mapping data" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -msgid "Issuer" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -msgid "users cannot be added when user category='all'" -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "" - -#, python-format -msgid "%i services added." -msgstr "" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -msgid "User logins" -msgstr "" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "must be at least 10" -msgstr "" - -msgid "configuration options" -msgstr "" - -msgid "Configuration" -msgstr "" - -msgid "Maximum hostname length" -msgstr "" - -msgid "Enable adding subids to new users" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -msgid "IPA DNS servers" -msgstr "" - -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Setup SID configuration" -msgstr "" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -msgid "Add SIDs" -msgstr "" - -msgid "Add SIDs for existing users and groups" -msgstr "" - -msgid "NetBIOS name of the IPA domain" -msgstr "" - -msgid "Empty domain is not allowed" -msgstr "" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "not allowed to enable SID generation" -msgstr "" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -#, fuzzy -msgid "Failed to call DBus" -msgstr "कोणतीही फाइल वाचण्यासाठी नाही " - -msgid "Configuration of SID failed. See details in the error log" -msgstr "" - -msgid "The group doesn't exist" -msgstr "" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, fuzzy, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "सर्व्हरवर त्रुटी '%(server)s': %(error)s" - -msgid "SELinux user map default user not in order list" -msgstr "" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, python-format -msgid "%s Record" -msgstr "" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -msgid "Priority (order)" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -msgid "Only one zone type is allowed per zone name" -msgstr "" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -msgid "Default time to live" -msgstr "" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "" - -msgid "is required" -msgstr "" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -msgid "DNS configuration options" -msgstr "" - -msgid "DNS Global Configuration" -msgstr "" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -msgid "Result of the command" -msgstr "" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "Serial Number" -msgstr "" - -msgid "Serial Number (hex)" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" - -msgid "Invalid URI: not an https scheme" -msgstr "" - -msgid "Invalid URI: missing netloc" -msgstr "" - -msgid "Identity Provider server" -msgstr "" - -msgid "Identity Provider servers" -msgstr "" - -msgid "Identity Provider server name" -msgstr "" - -msgid "Authorization URI" -msgstr "" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -msgid "Token URI" -msgstr "" - -msgid "Token endpoint" -msgstr "" - -msgid "User info URI" -msgstr "" - -msgid "User information endpoint" -msgstr "" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -msgid "Client identifier" -msgstr "" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -msgid "Add a new Identity Provider server." -msgstr "" - -#, python-format -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -msgid "Base URL" -msgstr "" - -msgid "Base URL for IdP provider templates" -msgstr "" - -msgid "unknown provider" -msgstr "" - -msgid "value is missing" -msgstr "" - -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "" - -msgid "Delete an Identity Provider server." -msgstr "" - -#, python-format -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "Modify an Identity Provider server." -msgstr "" - -#, python-format -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "Search for Identity Provider servers." -msgstr "" - -#, python-format -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an Identity Provider server." -msgstr "" - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Apply" -msgstr "" - -msgid "Rebuild auto membership" -msgstr "" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -msgid "Actions" -msgstr "" - -msgid "Add" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -msgid "Direct Membership" -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -msgid "No entries." -msgstr "" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -msgid "Remove" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -msgid "Show Results" -msgstr "" - -msgid "Authentication indicators" -msgstr "" - -msgid "Authentication indicator" -msgstr "" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -msgid "RADIUS" -msgstr "" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "External Identity Provider" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "" - -msgid "Activate" -msgstr "" - -msgid "Add and Add Another" -msgstr "" - -msgid "Add and Close" -msgstr "" - -msgid "Add and Edit" -msgstr "" - -msgid "Add Many" -msgstr "" - -msgid "Back" -msgstr "" - -msgid "Cancel" -msgstr "" - -msgid "Clear" -msgstr "" - -msgid "Clear all fields on the page." -msgstr "" - -msgid "Close" -msgstr "" - -msgid "Disable" -msgstr "" - -msgid "Download" -msgstr "" - -msgid "Download certificate as PEM formatted file." -msgstr "" - -msgid "Edit" -msgstr "" - -msgid "Enable" -msgstr "" - -msgid "Find" -msgstr "" - -msgid "Get" -msgstr "" - -msgid "Hide" -msgstr "" - -msgid "Issue" -msgstr "" - -msgid "Match" -msgstr "" - -msgid "Match users according to certificate." -msgstr "" - -msgid "Migrate" -msgstr "" - -msgid "OK" -msgstr "" - -msgid "Refresh" -msgstr "" - -msgid "Reload current settings from the server." -msgstr "" - -msgid "Delete" -msgstr "" - -msgid "Remove hold" -msgstr "" - -msgid "Reset" -msgstr "" - -msgid "Reset Password" -msgstr "" - -msgid "Reset Password and Log in" -msgstr "" - -msgid "Restore" -msgstr "" - -msgid "Retry" -msgstr "" - -msgid "Revert" -msgstr "" - -msgid "Revoke" -msgstr "" - -msgid "Save" -msgstr "" - -msgid "Set" -msgstr "" - -msgid "Show" -msgstr "" - -msgid "Stage" -msgstr "" - -msgid "Update" -msgstr "" - -msgid "View" -msgstr "" - -msgid "Customization" -msgstr "" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "" - -msgid "Expand All" -msgstr "" - -msgid "General" -msgstr "" - -msgid "Identity Settings" -msgstr "" - -msgid "Record Settings" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -msgid "Back to Top" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -msgid "Add custom value" -msgstr "" - -msgid "Available" -msgstr "" - -msgid "Some operations failed." -msgstr "" - -msgid "Operations Error" -msgstr "" - -msgid "Confirmation" -msgstr "" - -msgid "Custom value" -msgstr "" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -msgid "Unsaved Changes" -msgstr "" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "" - -msgid "Hide details" -msgstr "" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -msgid "Redirection" -msgstr "" - -msgid "Select entries to be removed." -msgstr "" - -msgid "Result" -msgstr "" - -msgid "Show details" -msgstr "" - -msgid "Success" -msgstr "" - -msgid "Validation error" -msgstr "" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, fuzzy, python-brace-format -msgid "An error has occurred (${error})" -msgstr "एक अंतर्गत त्रुटी आली आहे" - -msgid "HTTP Error" -msgstr "" - -msgid "Internal Error" -msgstr "" - -msgid "IPA Error" -msgstr "" - -msgid "No response" -msgstr "" - -msgid "Unknown Error" -msgstr "" - -msgid "URL" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -msgid "Settings" -msgstr "" - -msgid "Search" -msgstr "" - -msgid "False" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Allowed to create keytab" -msgstr "" - -msgid "Allowed to retrieve keytab" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Add Kerberos Principal Alias" -msgstr "" - -msgid "New kerberos principal alias" -msgstr "" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "" - -msgid "Authenticating" -msgstr "" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -msgid "Kerberos Principal you entered is expired" -msgstr "" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -msgid "Log In Using Certificate" -msgstr "" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "" - -msgid "Synchronizing" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -msgid "number of passwords" -msgstr "" - -msgid "seconds" -msgstr "" - -msgid "Migrating" -msgstr "" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -msgid "Password migration was not successful" -msgstr "" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -msgid "Password migration was successful" -msgstr "" - -msgid "Attribute" -msgstr "" - -msgid "Add delegation" -msgstr "" - -msgid "Remove delegations" -msgstr "" - -msgid "Add permission" -msgstr "" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -msgid "Remove permissions" -msgstr "" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -msgid "Remove privileges" -msgstr "" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -msgid "Role Settings" -msgstr "" - -msgid "Add role" -msgstr "" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -msgid "Remove roles" -msgstr "" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -msgid "Add self service permission" -msgstr "" - -msgid "Remove self service permissions" -msgstr "" - -msgid "Add rule" -msgstr "" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to change default group?" -msgstr "" - -msgid "Default host group" -msgstr "" - -msgid "Default user group" -msgstr "" - -msgid "Exclusive" -msgstr "" - -msgid "Expression" -msgstr "" - -msgid "Host group rule" -msgstr "" - -msgid "Host group rules" -msgstr "" - -msgid "Inclusive" -msgstr "" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -msgid "User group rule" -msgstr "" - -msgid "User group rules" -msgstr "" - -msgid "Add automount key" -msgstr "" - -msgid "Remove automount keys" -msgstr "" - -msgid "Add automount location" -msgstr "" - -msgid "Automount Location Settings" -msgstr "" - -msgid "Remove automount locations" -msgstr "" - -msgid "Add automount map" -msgstr "" - -msgid "Map Type" -msgstr "" - -msgid "Direct" -msgstr "" - -msgid "Indirect" -msgstr "" - -msgid "Remove automount maps" -msgstr "" - -msgid "Add certificate authority" -msgstr "" - -msgid "Remove certificate authorities" -msgstr "" - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -msgid "All" -msgstr "" - -msgid "Any CA" -msgstr "" - -msgid "Any Host" -msgstr "" - -msgid "Any Service" -msgstr "" - -msgid "Any Profile" -msgstr "" - -msgid "Anyone" -msgstr "" - -msgid "Rule status" -msgstr "" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -msgid "Remove CA ACLs" -msgstr "" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -msgid "Specified CAs" -msgstr "" - -msgid "Specified Hosts and Groups" -msgstr "" - -msgid "Specified Profiles" -msgstr "" - -msgid "Specified Services and Groups" -msgstr "" - -msgid "Specified Users and Groups" -msgstr "" - -msgid "Permitted to have certificates issued" -msgstr "" - -msgid "Remove certificate profiles" -msgstr "" - -msgid "AA Compromise" -msgstr "" - -msgid "Add principal" -msgstr "" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" - -msgid "Certificates" -msgstr "" - -msgid "Certificate Hold" -msgstr "" - -msgid "Cessation of Operation" -msgstr "" - -#, fuzzy -msgid "Common Name" -msgstr "आदेशाचे नाव " - -msgid "the certificate with serial number " -msgstr "" - -msgid "Expires On" -msgstr "" - -msgid "Issued on from" -msgstr "" - -msgid "Issued on to" -msgstr "" - -msgid "Maximum serial number" -msgstr "" - -msgid "Minimum serial number" -msgstr "" - -msgid "Revoked on from" -msgstr "" - -msgid "Revoked on to" -msgstr "" - -msgid "Valid not after from" -msgstr "" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -msgid "Fingerprints" -msgstr "" - -msgid "Get Certificate" -msgstr "" - -msgid "Certificate Hold Removed" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -msgid "Issue new certificate" -msgstr "" - -msgid "Issued By" -msgstr "" - -msgid "Issued On" -msgstr "" - -msgid "Issued To" -msgstr "" - -msgid "Key Compromise" -msgstr "" - -msgid "No Valid Certificate" -msgstr "" - -msgid "New Certificate" -msgstr "" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -msgid "Note" -msgstr "" - -msgid "Organizational Unit" -msgstr "" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -msgid "Privilege Withdrawn" -msgstr "" - -msgid "Reason for Revocation" -msgstr "" - -msgid "Remove certificate hold" -msgstr "" - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -msgid "Certificate requested" -msgstr "" - -msgid "Revoke certificate" -msgstr "" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -msgid "Certificate Revoked" -msgstr "" - -msgid "REVOKED" -msgstr "" - -msgid "SHA1 Fingerprint" -msgstr "" - -msgid "SHA256 Fingerprint" -msgstr "" - -msgid "Status" -msgstr "" - -msgid "Superseded" -msgstr "" - -msgid "Unspecified" -msgstr "" - -msgid "Valid Certificate Present" -msgstr "" - -msgid "Valid from" -msgstr "" - -msgid "Valid to" -msgstr "" - -msgid "Validity" -msgstr "" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -msgid "View Certificate" -msgstr "" - -msgid "Certificate Data" -msgstr "" - -msgid "Certificate For Match" -msgstr "" - -msgid "Certificate Mapping Match" -msgstr "" - -msgid "Matched Users" -msgstr "" - -msgid "User Login" -msgstr "" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -msgid "Configuration string" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -msgid "Remove certificate mapping data" -msgstr "" - -msgid "Issuer and subject" -msgstr "" - -msgid "Remove certificate identity mapping rules" -msgstr "" - -msgid "Group Options" -msgstr "" - -#, fuzzy -msgid "Search Options" -msgstr "वापरात नसलेले पर्याय" - -msgid "SELinux Options" -msgstr "" - -#, fuzzy -msgid "Server Options" -msgstr "वापरात नसलेले पर्याय" - -#, fuzzy -msgid "Service Options" -msgstr "वापरात नसलेले पर्याय" - -#, fuzzy -msgid "User Options" -msgstr "वापरात नसलेले पर्याय" - -msgid "Forward first" -msgstr "" - -msgid "Forwarding disabled" -msgstr "" - -msgid "Forward only" -msgstr "" - -msgid "Options" -msgstr "" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -msgid "Other Record Types" -msgstr "" - -msgid "Address not valid, can't redirect" -msgstr "" - -msgid "Create dns record" -msgstr "" - -msgid "Creating record." -msgstr "" - -msgid "Record creation failed." -msgstr "" - -msgid "Checking if record exists." -msgstr "" - -msgid "Record not found." -msgstr "" - -msgid "Redirection to PTR record" -msgstr "" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -msgid "Target reverse zone not found." -msgstr "" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -msgid "Standard Record Types" -msgstr "" - -msgid "Records for DNS Zone" -msgstr "" - -msgid "Record Type" -msgstr "" - -msgid "Add DNS zone" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -msgid "DNS Zone Settings" -msgstr "" - -msgid "Remove DNS zones" -msgstr "" - -msgid "Remove Permission" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Level" -msgstr "" - -msgid "Set Domain Level" -msgstr "" - -msgid "Add user group" -msgstr "" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -msgid "Group Settings" -msgstr "" - -msgid "External" -msgstr "" - -msgid "Groups" -msgstr "" - -msgid "Group categories" -msgstr "" - -msgid "Change to external group" -msgstr "" - -msgid "Change to POSIX group" -msgstr "" - -msgid "Non-POSIX" -msgstr "" - -msgid "POSIX" -msgstr "" - -msgid "Remove user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -msgid "Group Type" -msgstr "" - -msgid "Add HBAC rule" -msgstr "" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -msgid "Accessing" -msgstr "" - -msgid "Remove HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -msgid "Via Service" -msgstr "" - -msgid "Who" -msgstr "" - -msgid "Add HBAC service" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -msgid "Remove HBAC services" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -msgid "Add HBAC service group" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -msgid "Remove HBAC service groups" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -msgid "Access Denied" -msgstr "" - -msgid "Access Granted" -msgstr "" - -msgid "Include Disabled" -msgstr "" - -msgid "Include Enabled" -msgstr "" - -msgid "HBAC Test" -msgstr "" - -msgid "Matched" -msgstr "" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" - -msgid "Rules" -msgstr "" - -msgid "Run Test" -msgstr "" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -msgid "Unmatched" -msgstr "" - -msgid "Add host" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -msgid "Host Certificate" -msgstr "" - -msgid "Host Name" -msgstr "" - -msgid "Delete Key, Unprovision" -msgstr "" - -msgid "Host Settings" -msgstr "" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -msgid "Generate OTP" -msgstr "" - -msgid "Generated OTP" -msgstr "" - -msgid "Kerberos Key" -msgstr "" - -msgid "Kerberos Key Not Present" -msgstr "" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -msgid "One-Time Password" -msgstr "" - -msgid "One-Time Password Not Present" -msgstr "" - -msgid "One-Time Password Present" -msgstr "" - -msgid "Reset OTP" -msgstr "" - -msgid "Reset One-Time Password" -msgstr "" - -msgid "Set OTP" -msgstr "" - -msgid "OTP set" -msgstr "" - -msgid "Set One-Time Password" -msgstr "" - -msgid "Remove hosts" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -msgid "Unprovision" -msgstr "" - -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -msgid "Add host group" -msgstr "" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -msgid "Host Group Settings" -msgstr "" - -msgid "Remove host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -msgid "Identity provider details" -msgstr "" - -msgid "Verify secret" -msgstr "" - -msgid "User to override" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -msgid "Profile" -msgstr "" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -msgid "Enter trusted group name." -msgstr "" - -msgid "Add ID view" -msgstr "" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -msgid "Apply to host groups" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -msgid "Remove ID views" -msgstr "" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -msgid "Un-apply from host groups" -msgstr "" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -msgid "Un-apply" -msgstr "" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "Add netgroup" -msgstr "" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -msgid "Netgroup Settings" -msgstr "" - -msgid "Remove netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -msgid "Add OTP token" -msgstr "" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -msgid "Configure your token" -msgstr "" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -msgid "OTP Token Settings" -msgstr "" - -msgid "Disable token" -msgstr "" - -msgid "Enable token" -msgstr "" - -msgid "Remove OTP tokens" -msgstr "" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "" - -msgid "Show configuration uri" -msgstr "" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -msgid "Add Custom Attribute" -msgstr "" - -msgid "Permission settings" -msgstr "" - -msgid "Attribute breakdown" -msgstr "" - -msgid "Privilege Settings" -msgstr "" - -msgid "Public key:" -msgstr "" - -msgid "Set public key" -msgstr "" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -msgid "Add password policy" -msgstr "" - -msgid "Password Policy" -msgstr "" - -msgid "Remove password policies" -msgstr "" - -msgid "Add ID range" -msgstr "" - -msgid "Range Settings" -msgstr "" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -msgid "Domain SID" -msgstr "" - -msgid "Secondary RID base" -msgstr "" - -msgid "Remove ID ranges" -msgstr "" - -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -msgid "Detect" -msgstr "" - -msgid "Local domain" -msgstr "" - -msgid "IPA trust" -msgstr "" - -msgid "Active Directory winsync" -msgstr "" - -msgid "Add RADIUS server" -msgstr "" - -msgid "RADIUS Proxy Server Settings" -msgstr "" - -msgid "Remove RADIUS servers" -msgstr "" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -msgid "Force Update" -msgstr "" - -msgid "Add SELinux user map" -msgstr "" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -msgid "Server Roles" -msgstr "" - -msgid "Server Role" -msgstr "" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -msgid "Delete Server" -msgstr "" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -msgid "Add service" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -msgid "Service Certificate" -msgstr "" - -msgid "Service Settings" -msgstr "" - -msgid "Provisioning" -msgstr "" - -msgid "Remove services" -msgstr "" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -msgid "Unprovisioning service" -msgstr "" - -msgid "Service unprovisioned" -msgstr "" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "" - -msgid "SSH public keys" -msgstr "" - -msgid "SSH public key:" -msgstr "" - -msgid "Set SSH key" -msgstr "" - -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" - -msgid "Add stage user" -msgstr "" - -msgid "Stage users" -msgstr "" - -msgid "Preserved users" -msgstr "" - -msgid "Remove preserved users" -msgstr "" - -msgid "Remove stage users" -msgstr "" - -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -msgid "User categories" -msgstr "" - -msgid "Add subid" -msgstr "" - -msgid "Assigned subids" -msgstr "" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -msgid "Add sudo command" -msgstr "" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -msgid "Remove sudo commands" -msgstr "" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -msgid "Add sudo command group" -msgstr "" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -msgid "Remove sudo command groups" -msgstr "" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -msgid "Add sudo rule" -msgstr "" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "" - -#, fuzzy -msgid "Any Command" -msgstr "आदेशाचे नाव " - -msgid "Any Group" -msgstr "" - -msgid "Run Commands" -msgstr "" - -msgid "Deny" -msgstr "" - -msgid "Access this host" -msgstr "" - -msgid "Option added" -msgstr "" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -msgid "Remove sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -msgid "Specified Commands and Groups" -msgstr "" - -msgid "Specified Groups" -msgstr "" - -msgid "Remove sudo options" -msgstr "" - -msgid "Autogenerated" -msgstr "" - -msgid "Segment details" -msgstr "" - -msgid "Replication configuration" -msgstr "" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -msgid "Account" -msgstr "" - -msgid "Add trust" -msgstr "" - -msgid "Administrative account" -msgstr "" - -msgid "SID blocklists" -msgstr "" - -msgid "Trust Settings" -msgstr "" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -msgid "Pre-shared password" -msgstr "" - -msgid "Remove trusts" -msgstr "" - -msgid "Remove domains" -msgstr "" - -msgid "Alternative UPN suffixes" -msgstr "" - -msgid "User attributes for SMB services" -msgstr "" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - -msgid "Account Settings" -msgstr "" - -msgid "Account Status" -msgstr "" - -msgid "Active users" -msgstr "" - -msgid "Add user" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -msgid "Auto assign subordinate ids" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "" - -msgid "Contact Settings" -msgstr "" - -msgid "Delete mode" -msgstr "" - -msgid "Employee Information" -msgstr "" - -msgid "Error changing account status" -msgstr "" - -msgid "Password expiration" -msgstr "" - -msgid "Mailing Address" -msgstr "" - -msgid "Misc. Information" -msgstr "" - -msgid "delete" -msgstr "" - -msgid "preserve" -msgstr "" - -msgid "No private group" -msgstr "" - -msgid "Remove users" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Unlock" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -msgid "Members" -msgstr "" - -msgid "My User Vaults" -msgstr "" - -msgid "Owners" -msgstr "" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -msgid "Service Vaults" -msgstr "" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -msgid "Vault Type" -msgstr "" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -msgid "User Vaults" -msgstr "" - -msgid "Current password is required" -msgstr "" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -msgid "First OTP" -msgstr "" - -msgid "New password is required" -msgstr "" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Password change complete" -msgstr "" - -msgid "Your password has expired. Please enter a new password." -msgstr "" - -#, fuzzy -msgid "Passwords must match" -msgstr "पासवर्ड जुळत नाही!" - -msgid "Password reset was not successful." -msgstr "" - -msgid "Reset your password." -msgstr "" - -msgid "Second OTP" -msgstr "" - -msgid "Verify Password" -msgstr "" - -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -msgid "Some entries were not deleted" -msgstr "" - -msgid "Quick Links" -msgstr "" - -msgid "Select All" -msgstr "" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -msgid "Unselect All" -msgstr "" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "" - -msgid "Audit" -msgstr "" - -msgid "Authentication" -msgstr "" - -msgid "Automount" -msgstr "" - -msgid "DNS" -msgstr "" - -msgid "Host-Based Access Control" -msgstr "" - -msgid "Identity" -msgstr "" - -msgid "Network Services" -msgstr "" - -msgid "Policy" -msgstr "" - -msgid "Role-Based Access Control" -msgstr "" - -msgid "Subordinate IDs" -msgstr "" - -msgid "Sudo" -msgstr "" - -msgid "Topology" -msgstr "" - -msgid "True" -msgstr "" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -msgid "First" -msgstr "" - -msgid "Last" -msgstr "" - -msgid "Next" -msgstr "" - -msgid "Page" -msgstr "" - -msgid "Prev" -msgstr "" - -msgid "Undo" -msgstr "" - -msgid "Undo this change." -msgstr "" - -msgid "Undo All" -msgstr "" - -msgid "Undo all changes in this field." -msgstr "" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -msgid "Must be a decimal number" -msgstr "" - -msgid "Format error" -msgstr "" - -msgid "Must be an integer" -msgstr "" - -msgid "Not a valid IP address" -msgstr "" - -msgid "Not a valid IPv4 address" -msgstr "" - -msgid "Not a valid IPv6 address" -msgstr "" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -msgid "Parse error" -msgstr "" - -msgid "Must be a positive number" -msgstr "" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -msgid "Required field" -msgstr "" - -msgid "Unsupported value" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -msgid "IdP max life" -msgstr "" - -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "" - -msgid "IdP max renew" -msgstr "" - -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -msgid "password policy" -msgstr "" - -msgid "password policies" -msgstr "" - -msgid "Password Policies" -msgstr "" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "Grace login limit" -msgstr "" - -msgid "Number of LDAP authentications allowed after expiration" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -msgid "service" -msgstr "" - -msgid "services" -msgstr "" - -msgid "Service principal alias" -msgstr "" - -msgid "Base-64 encoded service certificate" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." -msgstr "" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -msgid "Add a new SMB service." -msgstr "" - -msgid "SMB service NetBIOS name" -msgstr "" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a service" -msgstr "" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -msgid "Certificate Authority" -msgstr "" - -msgid "Certificate Authorities" -msgstr "" - -msgid "Name for referencing the CA" -msgstr "" - -msgid "Description of the purpose of the CA" -msgstr "" - -msgid "Authority ID" -msgstr "" - -msgid "Dogtag Authority ID" -msgstr "" - -msgid "Subject DN" -msgstr "" - -msgid "Subject Distinguished Name" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Issuer Distinguished Name" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "RSN Version" -msgstr "" - -msgid "Random Serial Number Version" -msgstr "" - -msgid "Search for CAs." -msgstr "" - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "Display the properties of a CA." -msgstr "" - -msgid "Create a CA." -msgstr "" - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -msgid "Modify CA configuration." -msgstr "" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "" - -msgid "IPA CA cannot be disabled" -msgstr "" - -msgid "Enable a CA." -msgstr "" - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "वापरात नसलेले पर्याय" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Subject email address" -msgstr "" - -msgid "Subject DNS name" -msgstr "" - -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -msgid "Subject URI" -msgstr "" - -msgid "Subject IP Address" -msgstr "" - -msgid "Subject OID" -msgstr "" - -msgid "Subject UPN" -msgstr "" - -msgid "Subject Kerberos principal name" -msgstr "" - -msgid "Subject Other Name" -msgstr "" - -msgid "Serial number (hex)" -msgstr "" - -msgid "Request status" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -#, fuzzy -msgid "'add' option" -msgstr "वापरात नसलेले पर्याय" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Status of the certificate" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -#, fuzzy -msgid "command" -msgstr "विषय आदेश:" - -#, fuzzy -msgid "commands" -msgstr "विषय आदेश:" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -msgid "runAs groups" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Preserved user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -msgid "Password grace count" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" -msgstr "" - -msgid "Request must be a dict" -msgstr "" - -msgid "Request is missing \"method\"" -msgstr "" - -msgid "Request is missing \"params\"" -msgstr "" - -msgid "params must be a list" -msgstr "" - -msgid "params must contain [args, options]" -msgstr "" - -msgid "params[0] (aka args) must be a list" -msgstr "" - -msgid "params[1] (aka options) must be a dict" -msgstr "" - -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" - -msgid "CIFS server denied your credentials" -msgstr "" - -msgid "communication with CIFS server was unsuccessful" -msgstr "" - -msgid "AD domain controller" -msgstr "" - -msgid "unsupported functional level" -msgstr "" - -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" - -msgid "Cannot find specified domain or server name" -msgstr "" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" - -msgid "At least the domain or IP address should be specified" -msgstr "" - -#, python-format -msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" -msgstr "" - -msgid "no trusted domain is configured" -msgstr "" - -msgid "domain is not configured" -msgstr "" - -msgid "SID is not valid" -msgstr "" - -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "" - -msgid "SID does not match any trusted domain" -msgstr "" - -msgid "Trust setup" -msgstr "" - -msgid "Our domain is not configured" -msgstr "" - -msgid "No trusted domain is not configured" -msgstr "" - -msgid "trusted domain object" -msgstr "" - -msgid "domain is not trusted" -msgstr "" - -msgid "no trusted domain matched the specified flat name" -msgstr "" - -msgid "trusted domain object not found" -msgstr "" - -msgid "Object does not belong to a trusted domain" -msgstr "" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "" - -msgid "Ambiguous search, user domain was not specified" -msgstr "" - -msgid "Trusted domain did not return a unique object" -msgstr "" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "" - -msgid "trusted domain user not found" -msgstr "" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "" - -msgid "CIFS credentials object" -msgstr "" - -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "" - -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" - -#, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" - -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" - -msgid "Credentials" -msgstr "" - -msgid "Missing credentials for cross-forest communication" -msgstr "" - -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" - -#, python-format -msgid "must equal %r" -msgstr "" - -msgid "Hello world" -msgstr "" - -#, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "" - -msgid "must be at least 1" -msgstr "" - -msgid "Out of memory\n" -msgstr "" - -msgid "Warning unrecognized encryption type.\n" -msgstr "" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -msgid "Out of memory!?\n" -msgstr "" - -msgid "Enctype comparison failed!\n" -msgstr "" - -#, fuzzy -msgid "Password is too long!\n" -msgstr "पासवर्ड जुळत नाही!" - -msgid "Failed to create random key!\n" -msgstr "" - -msgid "Failed to create key!\n" -msgstr "" - -msgid "Bad or unsupported salt type.\n" -msgstr "" - -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" +msgid "unknown command '%(name)s'" +msgstr "अनोळखी आदेश '%(name)s'" diff --git a/po/nl.po b/po/nl.po index e3cfcfe98..7de8706fc 100644 --- a/po/nl.po +++ b/po/nl.po @@ -14,23876 +14,5 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, c-format -msgid "out of memory\n" -msgstr "" - -#, c-format -msgid "read error\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, c-format -msgid "Out of memory \n" -msgstr "" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -msgid "SASL Bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Out of Memory!\n" -msgstr "" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "Wachtwoorden komen niet overeen!" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Output debug info" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -msgid "Server Name" -msgstr "" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -msgid "LDAP password" -msgstr "" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -msgid "Path to the IPA CA certificate" -msgstr "" - -msgid "IPA CA certificate" -msgstr "" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -msgid "Enter LDAP password" -msgstr "" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" - -#, c-format -msgid "Discovered server %s\n" -msgstr "" - -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Using provided server %s\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -msgid "New Principal Password" -msgstr "" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Out of memory!\n" -msgstr "" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "" - -#, c-format -msgid "Out of memory!" -msgstr "" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "" - -#, c-format -msgid "No values for %s" -msgstr "" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Host is already joined.\n" -msgstr "" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" - -#, c-format -msgid "json_dumps() failed\n" -msgstr "" - -#, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "" - -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" - -#, c-format -msgid "fork() failed\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "" - -#, c-format -msgid "child exited with %d\n" -msgstr "" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "" - -msgid "Quiet mode. Only errors are displayed." -msgstr "" - -msgid "Unenroll this host from IPA server" -msgstr "" - -msgid "Hostname of this server" -msgstr "" - -msgid "hostname" -msgstr "" - -msgid "IPA Server to use" -msgstr "" - -msgid "Specifies where to store keytab information." -msgstr "" - -msgid "filename" -msgstr "" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" - -msgid "LDAP password (if not using Kerberos)" -msgstr "" - -msgid "password" -msgstr "" - -msgid "LDAP basedn" -msgstr "" - -msgid "basedn" -msgstr "" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "" - -msgid "Failed to add" -msgstr "" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" - -msgid "Unrevoked" -msgstr "" - -msgid "Error" -msgstr "" - -msgid "Input filename" -msgstr "" - -msgid "File to load the certificate from." -msgstr "" - -msgid "cannot specify both raw certificate and file" -msgstr "" - -msgid "Input file" -msgstr "" - -msgid "File to load the certificate from" -msgstr "" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "" - -msgid "Split DNS record to parts" -msgstr "" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" - -msgid "DNS resource record type" -msgstr "" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" - -msgid "No option to modify specific record provided." -msgstr "" - -msgid "Current DNS record contents:\n" -msgstr "" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -msgid "No option to delete specific record provided." -msgstr "" - -msgid "Delete all?" -msgstr "" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "" - -msgid "Server will check DNS forwarder(s)." -msgstr "" - -msgid "This may take some time, please wait ..." -msgstr "" - -msgid "DNS forwarder" -msgstr "" - -msgid "file to store DNS records in nsupdate format" -msgstr "" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -msgid "Delete a user" -msgstr "" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - -msgid "maps not connected to /etc/auto.master:" -msgstr "" - -msgid "Import automount files for a specific location." -msgstr "" - -msgid "Master file" -msgstr "" - -msgid "Automount master file." -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" - -#, python-format -msgid "File %(file)s not found" -msgstr "" - -#, python-format -msgid "key %(key)s already exists" -msgstr "" - -#, python-format -msgid "map %(map)s already exists" -msgstr "" - -msgid "Imported maps:" -msgstr "" - -#, python-format -msgid "Added %(map)s" -msgstr "" - -msgid "Imported keys:" -msgstr "" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "" - -msgid "Ignored keys:" -msgstr "" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "" - -msgid "Duplicate maps skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(map)s" -msgstr "" - -msgid "Duplicate keys skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(key)s" -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -msgid "User ID" -msgstr "" - -msgid "Password" -msgstr "" - -msgid "First Code" -msgstr "" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "" - -msgid "Invalid credentials" -msgstr "" - -msgid "Create a new vault." -msgstr "" - -msgid "Vault password" -msgstr "" - -msgid "File containing the vault password" -msgstr "" - -msgid "File containing the vault public key" -msgstr "" - -msgid "Password can be specified only for symmetric vault" -msgstr "" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "" - -msgid "Password specified multiple times" -msgstr "" - -msgid "Public key specified multiple times" -msgstr "" - -msgid "Missing vault public key" -msgstr "" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "" - -msgid "Modify a vault." -msgstr "" - -msgid "Change password" -msgstr "" - -msgid "Old vault password" -msgstr "" - -msgid "File containing the old vault password" -msgstr "" - -msgid "New vault password" -msgstr "" - -msgid "File containing the new vault password" -msgstr "" - -msgid "Old vault private key" -msgstr "" - -msgid "File containing the old vault private key" -msgstr "" - -msgid "File containing the new vault public key" -msgstr "" - -msgid "New public key specified multiple times" -msgstr "" - -msgid "Missing new vault public key" -msgstr "" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "" - -msgid "Binary data to archive" -msgstr "" - -msgid "File containing data to archive" -msgstr "" - -msgid "Override existing password" -msgstr "" - -msgid "Input data specified multiple times" -msgstr "" - -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" - -msgid "Invalid vault type" -msgstr "" - -msgid "Retrieve a data from a vault." -msgstr "" - -msgid "File to store retrieved data" -msgstr "" - -msgid "Vault private key" -msgstr "" - -msgid "File containing the vault private key" -msgstr "" - -msgid "Data" -msgstr "" - -msgid "Private key specified multiple times" -msgstr "" - -msgid "Missing vault private key" -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "ACI name" -msgstr "" - -msgid "Permission" -msgstr "" - -msgid "Permission ACI grants access to" -msgstr "" - -msgid "User group" -msgstr "" - -msgid "User group ACI grants access to" -msgstr "" - -msgid "Permissions" -msgstr "" - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Attributes to which the permission applies" -msgstr "" - -msgid "Attributes" -msgstr "" - -msgid "Type" -msgstr "" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" - -msgid "Member of" -msgstr "" - -msgid "Member of a group" -msgstr "" - -msgid "Filter" -msgstr "" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "" - -msgid "Subtree" -msgstr "" - -msgid "Subtree to apply ACI to" -msgstr "" - -msgid "Target group" -msgstr "" - -msgid "Group to apply ACI to" -msgstr "" - -msgid "Target your own entry (self)" -msgstr "" - -msgid "Apply ACI to your own entry (self)" -msgstr "" - -msgid "Create new ACI." -msgstr "" - -msgid "ACI prefix" -msgstr "" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" - -msgid "Test the ACI syntax but don't write anything" -msgstr "" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" - -msgid "User-friendly description of action performed" -msgstr "" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" - -msgid "Delete ACI." -msgstr "" - -msgid "True means the operation was successful" -msgstr "" - -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" - -msgid "A string searched in all relevant object attributes" -msgstr "" - -msgid "Primary key only" -msgstr "" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" - -msgid "Number of entries returned" -msgstr "" - -msgid "True if not all results were returned" -msgstr "" - -msgid "Modify ACI." -msgstr "" - -msgid "Rename an ACI." -msgstr "" - -msgid "New ACI name" -msgstr "" - -msgid "Display a single ACI given an ACI name." -msgstr "" - -msgid "Location of the ACI" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Description" -msgstr "" - -msgid "A description of this auto member rule" -msgstr "" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "List of deletions that failed" -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Users" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Hosts" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" - -msgid "Key" -msgstr "" - -msgid "Automount key name." -msgstr "" - -msgid "Mount information" -msgstr "" - -msgid "description" -msgstr "" - -msgid "Location" -msgstr "" - -msgid "Automount location name." -msgstr "" - -msgid "Map" -msgstr "" - -msgid "Automount map name." -msgstr "" - -msgid "Create a new automount key." -msgstr "" - -msgid "Delete an automount key." -msgstr "" - -msgid "Continuous mode: Don't stop on errors." -msgstr "" - -msgid "Search for an automount key." -msgstr "" - -msgid "Time Limit" -msgstr "" - -msgid "Time limit of search in seconds" -msgstr "" - -msgid "Size Limit" -msgstr "" - -msgid "Maximum number of entries returned" -msgstr "" - -msgid "Modify an automount key." -msgstr "" - -msgid "New mount information" -msgstr "" - -msgid "Rename" -msgstr "" - -msgid "Rename the automount key object" -msgstr "" - -msgid "Display an automount key." -msgstr "" - -msgid "Create a new automount location." -msgstr "" - -msgid "Delete an automount location." -msgstr "" - -msgid "Search for an automount location." -msgstr "" - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" - -msgid "Display an automount location." -msgstr "" - -msgid "Generate automount files for a specific location." -msgstr "" - -msgid "Create a new automount map." -msgstr "" - -msgid "Create a new indirect mount point." -msgstr "" - -msgid "Mount point" -msgstr "" - -msgid "Parent map" -msgstr "" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" - -msgid "Delete an automount map." -msgstr "" - -msgid "Search for an automount map." -msgstr "" - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" - -msgid "Modify an automount map." -msgstr "" - -msgid "Display an automount map." -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" - -msgid "Nested Methods to execute" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason" -msgstr "" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -msgid "minimum serial number" -msgstr "" - -msgid "maximum serial number" -msgstr "" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Principal" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Dictionary mapping variable name to value" -msgstr "" - -msgid "Revoke a certificate." -msgstr "" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "Maximum username length" -msgstr "" - -msgid "Home directory base" -msgstr "" - -msgid "Default location of home directories" -msgstr "" - -msgid "Default shell" -msgstr "" - -msgid "Default shell for new users" -msgstr "" - -msgid "Default users group" -msgstr "" - -msgid "Default group for new users" -msgstr "" - -msgid "Default e-mail domain" -msgstr "" - -msgid "Search time limit" -msgstr "" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" - -msgid "Search size limit" -msgstr "" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "" - -msgid "User search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" - -msgid "Group search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" - -msgid "Enable migration mode" -msgstr "" - -msgid "Certificate Subject base" -msgstr "" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "" - -msgid "Default group objectclasses" -msgstr "" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "" - -msgid "Default user objectclasses" -msgstr "" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" - -msgid "Password Expiration Notification (days)" -msgstr "" - -msgid "Number of days's notice of impending password expiration" -msgstr "" - -msgid "Password plugin features" -msgstr "" - -msgid "Extra hashes to generate in password plug-in" -msgstr "" - -msgid "SELinux user map order" -msgstr "" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" - -msgid "Default SELinux user" -msgstr "" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" - -msgid "Default PAC types" -msgstr "" - -msgid "Default types of PAC supported for services" -msgstr "" - -msgid "Default user authentication types" -msgstr "" - -msgid "Default types of supported user authentication" -msgstr "" - -msgid "Modify configuration options." -msgstr "" - -msgid "Show the current configuration." -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "Delegation name" -msgstr "" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "" - -msgid "Attributes to which the delegation applies" -msgstr "" - -msgid "Member user group" -msgstr "" - -msgid "User group to apply delegation to" -msgstr "" - -msgid "Add a new delegation." -msgstr "" - -msgid "Delete a delegation." -msgstr "" - -msgid "Search for delegations." -msgstr "" - -msgid "Modify a delegation." -msgstr "" - -msgid "Display information about a delegation." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "Global forwarders" -msgstr "" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Forward policy" -msgstr "" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" - -msgid "Allow PTR sync" -msgstr "" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" - -msgid "Zone refresh interval" -msgstr "" - -msgid "Zone name" -msgstr "" - -msgid "Zone name (FQDN)" -msgstr "" - -msgid "Reverse zone IP network" -msgstr "" - -msgid "IP network to create reverse zone name from" -msgstr "" - -msgid "Active zone" -msgstr "" - -msgid "Is zone active?" -msgstr "" - -msgid "Zone forwarders" -msgstr "" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "Record name" -msgstr "" - -msgid "Time to live" -msgstr "" - -msgid "Records" -msgstr "" - -msgid "Record type" -msgstr "" - -msgid "Record data" -msgstr "" - -msgid "A record" -msgstr "" - -msgid "Raw A records" -msgstr "" - -msgid "A IP Address" -msgstr "" - -msgid "IP Address" -msgstr "" - -msgid "A Create reverse" -msgstr "" - -msgid "Create reverse record for this IP Address" -msgstr "" - -msgid "AAAA record" -msgstr "" - -msgid "Raw AAAA records" -msgstr "" - -msgid "AAAA IP Address" -msgstr "" - -msgid "AAAA Create reverse" -msgstr "" - -msgid "A6 record" -msgstr "" - -msgid "Raw A6 records" -msgstr "" - -msgid "A6 Record data" -msgstr "" - -msgid "AFSDB record" -msgstr "" - -msgid "Raw AFSDB records" -msgstr "" - -msgid "AFSDB Subtype" -msgstr "" - -msgid "Subtype" -msgstr "" - -msgid "AFSDB Hostname" -msgstr "" - -msgid "Hostname" -msgstr "" - -msgid "APL record" -msgstr "" - -msgid "Raw APL records" -msgstr "" - -msgid "CERT record" -msgstr "" - -msgid "Raw CERT records" -msgstr "" - -msgid "CERT Certificate Type" -msgstr "" - -msgid "Certificate Type" -msgstr "" - -msgid "CERT Key Tag" -msgstr "" - -msgid "Key Tag" -msgstr "" - -msgid "CERT Algorithm" -msgstr "" - -msgid "Algorithm" -msgstr "" - -msgid "CERT Certificate/CRL" -msgstr "" - -msgid "Certificate/CRL" -msgstr "" - -msgid "CNAME record" -msgstr "" - -msgid "Raw CNAME records" -msgstr "" - -msgid "CNAME Hostname" -msgstr "" - -msgid "A hostname which this alias hostname points to" -msgstr "" - -msgid "DHCID record" -msgstr "" - -msgid "Raw DHCID records" -msgstr "" - -msgid "DLV record" -msgstr "" - -msgid "Raw DLV records" -msgstr "" - -msgid "DLV Key Tag" -msgstr "" - -msgid "DLV Algorithm" -msgstr "" - -msgid "DLV Digest Type" -msgstr "" - -msgid "Digest Type" -msgstr "" - -msgid "DLV Digest" -msgstr "" - -msgid "Digest" -msgstr "" - -msgid "DNAME record" -msgstr "" - -msgid "Raw DNAME records" -msgstr "" - -msgid "DNAME Target" -msgstr "" - -msgid "Target" -msgstr "" - -msgid "DNSKEY record" -msgstr "" - -msgid "Raw DNSKEY records" -msgstr "" - -msgid "DS record" -msgstr "" - -msgid "Raw DS records" -msgstr "" - -msgid "DS Key Tag" -msgstr "" - -msgid "DS Algorithm" -msgstr "" - -msgid "DS Digest Type" -msgstr "" - -msgid "DS Digest" -msgstr "" - -msgid "HIP record" -msgstr "" - -msgid "Raw HIP records" -msgstr "" - -msgid "IPSECKEY record" -msgstr "" - -msgid "Raw IPSECKEY records" -msgstr "" - -msgid "KEY record" -msgstr "" - -msgid "Raw KEY records" -msgstr "" - -msgid "KX record" -msgstr "" - -msgid "Raw KX records" -msgstr "" - -msgid "KX Preference" -msgstr "" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" - -msgid "KX Exchanger" -msgstr "" - -msgid "A host willing to act as a key exchanger" -msgstr "" - -msgid "LOC record" -msgstr "" - -msgid "Raw LOC records" -msgstr "" - -msgid "LOC Degrees Latitude" -msgstr "" - -msgid "Degrees Latitude" -msgstr "" - -msgid "LOC Minutes Latitude" -msgstr "" - -msgid "Minutes Latitude" -msgstr "" - -msgid "LOC Seconds Latitude" -msgstr "" - -msgid "Seconds Latitude" -msgstr "" - -msgid "LOC Direction Latitude" -msgstr "" - -msgid "Direction Latitude" -msgstr "" - -msgid "LOC Degrees Longitude" -msgstr "" - -msgid "Degrees Longitude" -msgstr "" - -msgid "LOC Minutes Longitude" -msgstr "" - -msgid "Minutes Longitude" -msgstr "" - -msgid "LOC Seconds Longitude" -msgstr "" - -msgid "Seconds Longitude" -msgstr "" - -msgid "LOC Direction Longitude" -msgstr "" - -msgid "Direction Longitude" -msgstr "" - -msgid "LOC Altitude" -msgstr "" - -msgid "Altitude" -msgstr "" - -msgid "LOC Size" -msgstr "" - -msgid "Size" -msgstr "" - -msgid "LOC Horizontal Precision" -msgstr "" - -msgid "Horizontal Precision" -msgstr "" - -msgid "LOC Vertical Precision" -msgstr "" - -msgid "Vertical Precision" -msgstr "" - -msgid "MX record" -msgstr "" - -msgid "Raw MX records" -msgstr "" - -msgid "MX Preference" -msgstr "" - -msgid "MX Exchanger" -msgstr "" - -msgid "A host willing to act as a mail exchanger" -msgstr "" - -msgid "NAPTR record" -msgstr "" - -msgid "Raw NAPTR records" -msgstr "" - -msgid "NAPTR Order" -msgstr "" - -msgid "Order" -msgstr "" - -msgid "NAPTR Preference" -msgstr "" - -msgid "Preference" -msgstr "" - -msgid "NAPTR Flags" -msgstr "" - -msgid "Flags" -msgstr "" - -msgid "NAPTR Service" -msgstr "" - -msgid "Service" -msgstr "" - -msgid "NAPTR Regular Expression" -msgstr "" - -msgid "Regular Expression" -msgstr "" - -msgid "NAPTR Replacement" -msgstr "" - -msgid "Replacement" -msgstr "" - -msgid "NS record" -msgstr "" - -msgid "Raw NS records" -msgstr "" - -msgid "NS Hostname" -msgstr "" - -msgid "NSEC record" -msgstr "" - -msgid "Raw NSEC records" -msgstr "" - -msgid "NSEC3 record" -msgstr "" - -msgid "Raw NSEC3 records" -msgstr "" - -msgid "PTR record" -msgstr "" - -msgid "Raw PTR records" -msgstr "" - -msgid "PTR Hostname" -msgstr "" - -msgid "The hostname this reverse record points to" -msgstr "" - -msgid "RRSIG record" -msgstr "" - -msgid "Raw RRSIG records" -msgstr "" - -msgid "RP record" -msgstr "" - -msgid "Raw RP records" -msgstr "" - -msgid "SIG record" -msgstr "" - -msgid "Raw SIG records" -msgstr "" - -msgid "SPF record" -msgstr "" - -msgid "Raw SPF records" -msgstr "" - -msgid "SRV record" -msgstr "" - -msgid "Raw SRV records" -msgstr "" - -msgid "SRV Priority" -msgstr "" - -msgid "Priority" -msgstr "" - -msgid "SRV Weight" -msgstr "" - -msgid "Weight" -msgstr "" - -msgid "SRV Port" -msgstr "" - -msgid "Port" -msgstr "" - -msgid "SRV Target" -msgstr "" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" - -msgid "SSHFP record" -msgstr "" - -msgid "Raw SSHFP records" -msgstr "" - -msgid "SSHFP Algorithm" -msgstr "" - -msgid "SSHFP Fingerprint Type" -msgstr "" - -msgid "Fingerprint Type" -msgstr "" - -msgid "SSHFP Fingerprint" -msgstr "" - -msgid "Fingerprint" -msgstr "" - -msgid "TA record" -msgstr "" - -msgid "Raw TA records" -msgstr "" - -msgid "TLSA record" -msgstr "" - -msgid "Raw TLSA records" -msgstr "" - -msgid "TLSA Certificate Usage" -msgstr "" - -msgid "Certificate Usage" -msgstr "" - -msgid "TLSA Selector" -msgstr "" - -msgid "Selector" -msgstr "" - -msgid "TLSA Matching Type" -msgstr "" - -msgid "Matching Type" -msgstr "" - -msgid "TLSA Certificate Association Data" -msgstr "" - -msgid "Certificate Association Data" -msgstr "" - -msgid "TKEY record" -msgstr "" - -msgid "Raw TKEY records" -msgstr "" - -msgid "TSIG record" -msgstr "" - -msgid "Raw TSIG records" -msgstr "" - -msgid "TXT record" -msgstr "" - -msgid "Raw TXT records" -msgstr "" - -msgid "TXT Text Data" -msgstr "" - -msgid "Text Data" -msgstr "" - -msgid "Authoritative nameserver" -msgstr "" - -msgid "Authoritative nameserver domain name" -msgstr "" - -msgid "Administrator e-mail address" -msgstr "" - -msgid "SOA serial" -msgstr "" - -msgid "SOA record serial number" -msgstr "" - -msgid "SOA refresh" -msgstr "" - -msgid "SOA record refresh time" -msgstr "" - -msgid "SOA retry" -msgstr "" - -msgid "SOA record retry time" -msgstr "" - -msgid "SOA expire" -msgstr "" - -msgid "SOA record expire time" -msgstr "" - -msgid "SOA minimum" -msgstr "" - -msgid "How long should negative responses be cached" -msgstr "" - -msgid "Time to live for records at zone apex" -msgstr "" - -msgid "BIND update policy" -msgstr "" - -msgid "Dynamic update" -msgstr "" - -msgid "Allow dynamic updates." -msgstr "" - -msgid "Allow query" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" - -msgid "Allow transfer" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" - -msgid "Allow in-line DNSSEC signing" -msgstr "" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "" - -msgid "NSEC3PARAM record" -msgstr "" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" - -msgid "Resolve a host name in DNS." -msgstr "" - -msgid "Modify global DNS configuration." -msgstr "" - -msgid "Show the current global DNS configuration." -msgstr "" - -msgid "Create new DNS forward zone." -msgstr "" - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" - -msgid "Permission value" -msgstr "" - -msgid "Delete DNS forward zone." -msgstr "" - -msgid "Disable DNS Forward Zone." -msgstr "" - -msgid "Enable DNS Forward Zone." -msgstr "" - -msgid "Search for DNS forward zones." -msgstr "" - -msgid "Modify DNS forward zone." -msgstr "" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" - -msgid "Display information about a DNS forward zone." -msgstr "" - -msgid "Add new DNS resource record." -msgstr "" - -msgid "Force" -msgstr "" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "" - -msgid "Structured" -msgstr "" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" - -msgid "Delete DNS resource record." -msgstr "" - -msgid "Delete all associated records" -msgstr "" - -msgid "Delete DNS record entry." -msgstr "" - -msgid "Search for DNS resources." -msgstr "" - -msgid "Modify a DNS resource record." -msgstr "" - -msgid "Rename the DNS resource record object" -msgstr "" - -msgid "Display DNS resource." -msgstr "" - -msgid "Create new DNS zone (SOA record)." -msgstr "" - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" - -msgid "Add a permission for per-zone access delegation." -msgstr "" - -msgid "Delete DNS zone (SOA record)." -msgstr "" - -msgid "Disable DNS Zone." -msgstr "" - -msgid "Enable DNS Zone." -msgstr "" - -msgid "Search for DNS zones (SOA records)." -msgstr "" - -msgid "Forward zones only" -msgstr "" - -msgid "Search for forward zones only" -msgstr "" - -msgid "Modify DNS zone (SOA record)." -msgstr "" - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" - -msgid "Remove a permission for per-zone access delegation." -msgstr "" - -msgid "Display information about a DNS zone (SOA record)." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "Group name" -msgstr "" - -msgid "Group description" -msgstr "" - -msgid "GID" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Member users" -msgstr "" - -msgid "Member groups" -msgstr "" - -msgid "Member of groups" -msgstr "" - -msgid "Roles" -msgstr "" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Suppress processing of membership attributes." -msgstr "" - -msgid "Add members to a group." -msgstr "" - -msgid "External member" -msgstr "" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -msgid "member group" -msgstr "" - -msgid "groups to add" -msgstr "" - -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - -msgid "Delete group." -msgstr "" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "user" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "group" -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "netgroup" -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "role" -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "HBAC rule" -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "sudo rule" -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Rule name" -msgstr "" - -msgid "Rule type" -msgstr "" - -msgid "Rule type (allow)" -msgstr "" - -msgid "User category" -msgstr "" - -msgid "User category the rule applies to" -msgstr "" - -msgid "Host category" -msgstr "" - -msgid "Host category the rule applies to" -msgstr "" - -msgid "Service category" -msgstr "" - -msgid "Service category the rule applies to" -msgstr "" - -msgid "Enabled" -msgstr "" - -msgid "User Groups" -msgstr "" - -msgid "Host Groups" -msgstr "" - -msgid "Services" -msgstr "" - -msgid "Service Groups" -msgstr "" - -msgid "External host" -msgstr "" - -msgid "Create a new HBAC rule." -msgstr "" - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "member host" -msgstr "" - -msgid "hosts to add" -msgstr "" - -msgid "member host group" -msgstr "" - -msgid "host groups to add" -msgstr "" - -msgid "Add services to an HBAC rule." -msgstr "" - -msgid "member HBAC service" -msgstr "" - -msgid "HBAC services to add" -msgstr "" - -msgid "member HBAC service group" -msgstr "" - -msgid "HBAC service groups to add" -msgstr "" - -msgid "Add users and groups to an HBAC rule." -msgstr "" - -msgid "Delete an HBAC rule." -msgstr "" - -msgid "Disable an HBAC rule." -msgstr "" - -msgid "Enable an HBAC rule." -msgstr "" - -msgid "Search for HBAC rules." -msgstr "" - -msgid "Modify an HBAC rule." -msgstr "" - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "hosts to remove" -msgstr "" - -msgid "host groups to remove" -msgstr "" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "" - -msgid "HBAC services to remove" -msgstr "" - -msgid "HBAC service groups to remove" -msgstr "" - -msgid "Remove users and groups from an HBAC rule." -msgstr "" - -msgid "Display the properties of an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" - -msgid "Service name" -msgstr "" - -msgid "HBAC service" -msgstr "" - -msgid "HBAC service description" -msgstr "" - -msgid "Member of HBAC service groups" -msgstr "" - -msgid "Add a new HBAC service." -msgstr "" - -msgid "Delete an existing HBAC service." -msgstr "" - -msgid "Search for HBAC services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" - -msgid "Modify an HBAC service." -msgstr "" - -msgid "Display information about an HBAC service." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "Service group name" -msgstr "" - -msgid "HBAC service group description" -msgstr "" - -msgid "Member HBAC service" -msgstr "" - -msgid "Add a new HBAC service group." -msgstr "" - -msgid "Add members to an HBAC service group." -msgstr "" - -msgid "Delete an HBAC service group." -msgstr "" - -msgid "Search for an HBAC service group." -msgstr "" - -msgid "Modify an HBAC service group." -msgstr "" - -msgid "Remove members from an HBAC service group." -msgstr "" - -msgid "Display information about an HBAC service group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -msgid "User name" -msgstr "" - -msgid "Target host" -msgstr "" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host name" -msgstr "" - -msgid "A description of this host" -msgstr "" - -msgid "Locality" -msgstr "" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "" - -msgid "Platform" -msgstr "" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "" - -msgid "Operating system" -msgstr "" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "" - -msgid "User password" -msgstr "" - -msgid "Password used in bulk enrollment" -msgstr "" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "" - -msgid "Random password" -msgstr "" - -msgid "Certificate" -msgstr "" - -msgid "Base-64 encoded server certificate" -msgstr "" - -msgid "Principal name" -msgstr "" - -msgid "MAC address" -msgstr "" - -msgid "Hardware MAC address(es) on this host" -msgstr "" - -msgid "SSH public key" -msgstr "" - -msgid "Class" -msgstr "" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "Assigned ID View" -msgstr "" - -msgid "Requires pre-authentication" -msgstr "" - -msgid "Pre-authentication is required for the service" -msgstr "" - -msgid "Trusted for delegation" -msgstr "" - -msgid "Client credentials may be delegated to the service" -msgstr "" - -msgid "Member of host-groups" -msgstr "" - -msgid "Indirect Member of host-group" -msgstr "" - -msgid "Keytab" -msgstr "" - -msgid "Managed by" -msgstr "" - -msgid "Managing" -msgstr "" - -msgid "Users allowed to retrieve keytab" -msgstr "" - -msgid "Groups allowed to retrieve keytab" -msgstr "" - -msgid "Hosts allowed to retrieve keytab" -msgstr "" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "" - -msgid "Users allowed to create keytab" -msgstr "" - -msgid "Groups allowed to create keytab" -msgstr "" - -msgid "Hosts allowed to create keytab" -msgstr "" - -msgid "Host Groups allowed to create keytab" -msgstr "" - -msgid "Add a new host." -msgstr "" - -msgid "force host name even if not in DNS" -msgstr "" - -msgid "skip reverse DNS detection" -msgstr "" - -msgid "Add the host to DNS with this IP address" -msgstr "" - -msgid "Add hosts that can manage this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" - -msgid "Delete a host." -msgstr "" - -msgid "Remove entries from DNS" -msgstr "" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" - -msgid "Search for hosts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" - -msgid "host group" -msgstr "" - -msgid "Search for hosts with these member of host groups." -msgstr "" - -msgid "Search for hosts without these member of host groups." -msgstr "" - -msgid "Search for hosts with these member of netgroups." -msgstr "" - -msgid "Search for hosts without these member of netgroups." -msgstr "" - -msgid "Search for hosts with these member of roles." -msgstr "" - -msgid "Search for hosts without these member of roles." -msgstr "" - -msgid "Search for hosts with these member of HBAC rules." -msgstr "" - -msgid "Search for hosts without these member of HBAC rules." -msgstr "" - -msgid "Search for hosts with these member of sudo rules." -msgstr "" - -msgid "Search for hosts without these member of sudo rules." -msgstr "" - -msgid "Search for hosts with these enrolled by users." -msgstr "" - -msgid "Search for hosts without these enrolled by users." -msgstr "" - -msgid "host" -msgstr "" - -msgid "Search for hosts with these managed by hosts." -msgstr "" - -msgid "Search for hosts without these managed by hosts." -msgstr "" - -msgid "Search for hosts with these managing hosts." -msgstr "" - -msgid "Search for hosts without these managing hosts." -msgstr "" - -msgid "Modify information about a host." -msgstr "" - -msgid "Kerberos principal name for this host" -msgstr "" - -msgid "Update DNS entries" -msgstr "" - -msgid "Remove hosts that can manage this host." -msgstr "" - -msgid "Display information about a host." -msgstr "" - -msgid "file to store certificate in" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "Host-group" -msgstr "" - -msgid "Name of host-group" -msgstr "" - -msgid "A description of this host-group" -msgstr "" - -msgid "Member hosts" -msgstr "" - -msgid "Member host-groups" -msgstr "" - -msgid "Indirect Member hosts" -msgstr "" - -msgid "Indirect Member host-groups" -msgstr "" - -msgid "Add a new hostgroup." -msgstr "" - -msgid "Add members to a hostgroup." -msgstr "" - -msgid "Delete a hostgroup." -msgstr "" - -msgid "Search for hostgroups." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" - -msgid "Search for host groups with these member hosts." -msgstr "" - -msgid "Search for host groups without these member hosts." -msgstr "" - -msgid "Search for host groups with these member host groups." -msgstr "" - -msgid "Search for host groups without these member host groups." -msgstr "" - -msgid "Search for host groups with these member of host groups." -msgstr "" - -msgid "Search for host groups without these member of host groups." -msgstr "" - -msgid "Search for host groups with these member of netgroups." -msgstr "" - -msgid "Search for host groups without these member of netgroups." -msgstr "" - -msgid "Search for host groups with these member of HBAC rules." -msgstr "" - -msgid "Search for host groups without these member of HBAC rules." -msgstr "" - -msgid "Search for host groups with these member of sudo rules." -msgstr "" - -msgid "Search for host groups without these member of sudo rules." -msgstr "" - -msgid "Modify a hostgroup." -msgstr "" - -msgid "Remove members from a hostgroup." -msgstr "" - -msgid "Display information about a hostgroup." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "Range name" -msgstr "" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -msgid "Anchor to override" -msgstr "" - -msgid "Group ID Number" -msgstr "" - -msgid "User login" -msgstr "" - -msgid "UID" -msgstr "" - -msgid "User ID Number" -msgstr "" - -msgid "GECOS" -msgstr "" - -msgid "Home directory" -msgstr "" - -msgid "Login shell" -msgstr "" - -msgid "ID View Name" -msgstr "" - -msgid "Add a new Group ID override." -msgstr "" - -msgid "Delete an Group ID override." -msgstr "" - -msgid "Search for an Group ID override." -msgstr "" - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" - -msgid "Modify an Group ID override." -msgstr "" - -msgid "Rename the Group ID override object" -msgstr "" - -msgid "Display information about an Group ID override." -msgstr "" - -msgid "Add a new User ID override." -msgstr "" - -msgid "Delete an User ID override." -msgstr "" - -msgid "Search for an User ID override." -msgstr "" - -msgid "Modify an User ID override." -msgstr "" - -msgid "Rename the User ID override object" -msgstr "" - -msgid "Display information about an User ID override." -msgstr "" - -msgid "Add a new ID View." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" - -msgid "hosts" -msgstr "" - -msgid "Hosts to apply the ID View to" -msgstr "" - -msgid "hostgroups" -msgstr "" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" - -msgid "Hosts that this ID View was applied to." -msgstr "" - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" - -msgid "Number of hosts the ID View was applied to:" -msgstr "" - -msgid "Delete an ID View." -msgstr "" - -msgid "Search for an ID View." -msgstr "" - -msgid "Modify an ID View." -msgstr "" - -msgid "Rename the ID View object" -msgstr "" - -msgid "Display information about an ID View." -msgstr "" - -msgid "Enumerate all the hosts the view applies to." -msgstr "" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" - -msgid "Hosts to clear (any) ID View from." -msgstr "" - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" - -msgid "Hosts that ID View was cleared from." -msgstr "" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" - -msgid "Dict of I18N messages" -msgstr "" - -msgid "Export plugin meta-data for the webUI." -msgstr "" - -msgid "Name of object to export" -msgstr "" - -msgid "Name of method to export" -msgstr "" - -msgid "Name of command to export" -msgstr "" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" - -msgid "Join an IPA domain" -msgstr "" - -msgid "The hostname to register as" -msgstr "" - -msgid "The IPA realm" -msgstr "" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "" - -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" - -msgid "Manage ticket policy for specific user" -msgstr "" - -msgid "Max life" -msgstr "" - -msgid "Maximum ticket life (seconds)" -msgstr "" - -msgid "Max renew" -msgstr "" - -msgid "Maximum renewable age (seconds)" -msgstr "" - -msgid "Modify Kerberos ticket policy." -msgstr "" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "" - -msgid "Display the current Kerberos ticket policy." -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," -"cn=accounts' --group-container='cn=groups,cn=accounts' " -"ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' --user-ignore-" -"objectclass=radiusprofile --user-ignore-" -"attribute=radiusgroupname ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -msgid "Migrate users and groups from DS to IPA." -msgstr "" - -msgid "LDAP URI" -msgstr "" - -msgid "LDAP URI of DS server to migrate from" -msgstr "" - -msgid "bind password" -msgstr "" - -msgid "Bind DN" -msgstr "" - -msgid "User container" -msgstr "" - -msgid "DN of container for users in DS relative to base DN" -msgstr "" - -msgid "Group container" -msgstr "" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "" - -msgid "User object class" -msgstr "" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "" - -msgid "Group object class" -msgstr "" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "" - -msgid "Ignore user object class" -msgstr "" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore user attribute" -msgstr "" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore group object class" -msgstr "" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "Ignore group attribute" -msgstr "" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "" - -msgid "Overwrite GID" -msgstr "" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" - -msgid "LDAP schema" -msgstr "" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" - -msgid "Continue" -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" - -msgid "Base DN" -msgstr "" - -msgid "Base DN on remote LDAP server" -msgstr "" - -msgid "Ignore compat plugin" -msgstr "" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" - -msgid "CA certificate" -msgstr "" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "" - -msgid "groups to exclude from migration" -msgstr "" - -msgid "users to exclude from migration" -msgstr "" - -msgid "Lists of objects migrated; categorized by type." -msgstr "" - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" - -msgid "False if migration mode was disabled." -msgstr "" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" - -msgid "Show environment variables." -msgstr "" - -msgid "Forward to server instead of running locally" -msgstr "" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Total number of variables env (>= count)" -msgstr "" - -msgid "Number of variables returned (<= total)" -msgstr "" - -msgid "Show all loaded plugins." -msgstr "" - -msgid "Dictionary mapping plugin names to bases" -msgstr "" - -msgid "Number of plugins loaded" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "Netgroup name" -msgstr "" - -msgid "Netgroup description" -msgstr "" - -msgid "NIS domain name" -msgstr "" - -msgid "IPA unique ID" -msgstr "" - -msgid "Member netgroups" -msgstr "" - -msgid "Indirect Member netgroups" -msgstr "" - -msgid "Member User" -msgstr "" - -msgid "Member Group" -msgstr "" - -msgid "Member Host" -msgstr "" - -msgid "Member Hostgroup" -msgstr "" - -msgid "Add a new netgroup." -msgstr "" - -msgid "Add members to a netgroup." -msgstr "" - -msgid "member netgroup" -msgstr "" - -msgid "netgroups to add" -msgstr "" - -msgid "Delete a netgroup." -msgstr "" - -msgid "Search for a netgroup." -msgstr "" - -msgid "search for managed groups" -msgstr "" - -msgid "Search for netgroups with these member netgroups." -msgstr "" - -msgid "Search for netgroups without these member netgroups." -msgstr "" - -msgid "Search for netgroups with these member users." -msgstr "" - -msgid "Search for netgroups without these member users." -msgstr "" - -msgid "Search for netgroups with these member groups." -msgstr "" - -msgid "Search for netgroups without these member groups." -msgstr "" - -msgid "Search for netgroups with these member hosts." -msgstr "" - -msgid "Search for netgroups without these member hosts." -msgstr "" - -msgid "Search for netgroups with these member host groups." -msgstr "" - -msgid "Search for netgroups without these member host groups." -msgstr "" - -msgid "Search for netgroups with these member of netgroups." -msgstr "" - -msgid "Search for netgroups without these member of netgroups." -msgstr "" - -msgid "Modify a netgroup." -msgstr "" - -msgid "Remove members from a netgroup." -msgstr "" - -msgid "netgroups to remove" -msgstr "" - -msgid "Display information about a netgroup." -msgstr "" - -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" - -msgid "TOTP authentication Window" -msgstr "" - -msgid "TOTP authentication time variance (seconds)" -msgstr "" - -msgid "TOTP Synchronization Window" -msgstr "" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "" - -msgid "HOTP Authentication Window" -msgstr "" - -msgid "HOTP authentication skip-ahead" -msgstr "" - -msgid "HOTP Synchronization Window" -msgstr "" - -msgid "HOTP synchronization skip-ahead" -msgstr "" - -msgid "Modify OTP configuration options." -msgstr "" - -msgid "Show the current OTP configuration." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -msgid "Serial" -msgstr "" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "Set a user's password." -msgstr "" - -msgid "New Password" -msgstr "" - -msgid "Current Password" -msgstr "" - -msgid "OTP" -msgstr "" - -msgid "One Time Password" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -"\n" -"Managed permissions\n" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "Permission name" -msgstr "" - -msgid "Granted rights" -msgstr "" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" - -msgid "Effective attributes" -msgstr "" - -msgid "All attributes to which the permission applies" -msgstr "" - -msgid "Included attributes" -msgstr "" - -msgid "User-specified attributes to which the permission applies" -msgstr "" - -msgid "Excluded attributes" -msgstr "" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" - -msgid "Default attributes" -msgstr "" - -msgid "Attributes to which the permission applies by default" -msgstr "" - -msgid "Bind rule type" -msgstr "" - -msgid "Subtree to apply permissions to" -msgstr "" - -msgid "Extra target filter" -msgstr "" - -msgid "Raw target filter" -msgstr "" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" - -msgid "Target DN" -msgstr "" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" - -msgid "Member of group" -msgstr "" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "" - -msgid "User group to apply permissions to (sets target)" -msgstr "" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "" - -msgid "Deprecated; use extratargetfilter" -msgstr "" - -msgid "Deprecated; use ipapermlocation" -msgstr "" - -msgid "Deprecated; use ipapermright" -msgstr "" - -msgid "Granted to Privilege" -msgstr "" - -msgid "Indirect Member of roles" -msgstr "" - -msgid "Add a new permission." -msgstr "" - -msgid "Add members to a permission." -msgstr "" - -msgid "member privilege" -msgstr "" - -msgid "privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "" - -msgid "Permission flags" -msgstr "" - -msgid "Delete a permission." -msgstr "" - -msgid "force delete of SYSTEM permissions" -msgstr "" - -msgid "Search for permissions." -msgstr "" - -msgid "Modify a permission." -msgstr "" - -msgid "Rename the permission object" -msgstr "" - -msgid "Remove members from a permission." -msgstr "" - -msgid "privileges to remove" -msgstr "" - -msgid "Display information about a permission." -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "Ping a remote server." -msgstr "" - -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "" - -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" - -msgid "Privilege name" -msgstr "" - -msgid "Privilege description" -msgstr "" - -msgid "Granting privilege to roles" -msgstr "" - -msgid "Add a new privilege." -msgstr "" - -msgid "Add members to a privilege." -msgstr "" - -msgid "member role" -msgstr "" - -msgid "roles to add" -msgstr "" - -msgid "Add permissions to a privilege." -msgstr "" - -msgid "permission" -msgstr "" - -msgid "permissions" -msgstr "" - -msgid "Number of permissions added" -msgstr "" - -msgid "Delete a privilege." -msgstr "" - -msgid "Search for privileges." -msgstr "" - -msgid "Modify a privilege." -msgstr "" - -msgid "Rename the privilege object" -msgstr "" - -msgid "Remove members from a privilege" -msgstr "" - -msgid "roles to remove" -msgstr "" - -msgid "Remove permissions from a privilege." -msgstr "" - -msgid "Number of permissions removed" -msgstr "" - -msgid "Display information about a privilege." -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Group" -msgstr "" - -msgid "Manage password policy for specific group" -msgstr "" - -msgid "Max lifetime (days)" -msgstr "" - -msgid "Maximum password lifetime (in days)" -msgstr "" - -msgid "Min lifetime (hours)" -msgstr "" - -msgid "Minimum password lifetime (in hours)" -msgstr "" - -msgid "History size" -msgstr "" - -msgid "Password history size" -msgstr "" - -msgid "Character classes" -msgstr "" - -msgid "Minimum number of character classes" -msgstr "" - -msgid "Min length" -msgstr "" - -msgid "Minimum length of password" -msgstr "" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "" - -msgid "Max failures" -msgstr "" - -msgid "Consecutive failures before lockout" -msgstr "" - -msgid "Failure reset interval" -msgstr "" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "" - -msgid "Lockout duration" -msgstr "" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" - -msgid "Add a new group password policy." -msgstr "" - -msgid "Delete a group password policy." -msgstr "" - -msgid "Search for group password policies." -msgstr "" - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" - -msgid "Modify a group password policy." -msgstr "" - -msgid "Display information about password policy." -msgstr "" - -msgid "User" -msgstr "" - -msgid "Display effective policy for a specific user" -msgstr "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "RADIUS proxy server name" -msgstr "" - -msgid "A description of this RADIUS proxy server" -msgstr "" - -msgid "Server" -msgstr "" - -msgid "The hostname or IP (with or without port)" -msgstr "" - -msgid "Secret" -msgstr "" - -msgid "The secret used to encrypt data" -msgstr "" - -msgid "Timeout" -msgstr "" - -msgid "The total timeout across all retries (in seconds)" -msgstr "" - -msgid "Retries" -msgstr "" - -msgid "The number of times to retry authentication" -msgstr "" - -msgid "User attribute" -msgstr "" - -msgid "The username attribute on the user object" -msgstr "" - -msgid "Add a new RADIUS proxy server." -msgstr "" - -msgid "Delete a RADIUS proxy server." -msgstr "" - -msgid "Search for RADIUS proxy servers." -msgstr "" - -msgid "Modify a RADIUS proxy server." -msgstr "" - -msgid "Rename the RADIUS proxy server object" -msgstr "" - -msgid "Display information about a RADIUS proxy server." -msgstr "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Domain" -msgstr "" - -msgid "Add domain" -msgstr "" - -msgid "Delete domain" -msgstr "" - -msgid "Modify realm domains." -msgstr "" - -msgid "Force adding domain even if not in DNS" -msgstr "" - -msgid "Display the list of realm domains." -msgstr "" - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" - -msgid "Role name" -msgstr "" - -msgid "A description of this role-group" -msgstr "" - -msgid "Privileges" -msgstr "" - -msgid "Member services" -msgstr "" - -msgid "Add a new role." -msgstr "" - -msgid "Add members to a role." -msgstr "" - -msgid "member service" -msgstr "" - -msgid "services to add" -msgstr "" - -msgid "Add privileges to a role." -msgstr "" - -msgid "privilege" -msgstr "" - -msgid "privileges" -msgstr "" - -msgid "Number of privileges added" -msgstr "" - -msgid "Delete a role." -msgstr "" - -msgid "Search for roles." -msgstr "" - -msgid "Modify a role." -msgstr "" - -msgid "Rename the role object" -msgstr "" - -msgid "Remove members from a role." -msgstr "" - -msgid "services to remove" -msgstr "" - -msgid "Remove privileges from a role." -msgstr "" - -msgid "Number of privileges removed" -msgstr "" - -msgid "Display information about a role." -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "Self-service name" -msgstr "" - -msgid "Attributes to which the permission applies." -msgstr "" - -msgid "Add a new self-service permission." -msgstr "" - -msgid "Delete a self-service permission." -msgstr "" - -msgid "Search for a self-service permission." -msgstr "" - -msgid "Modify a self-service permission." -msgstr "" - -msgid "Display information about a self-service permission." -msgstr "" - -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" - -msgid "SELinux User" -msgstr "" - -msgid "HBAC Rule" -msgstr "" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "" - -msgid "Create a new SELinux User Map." -msgstr "" - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "" - -msgid "Delete a SELinux User Map." -msgstr "" - -msgid "Disable an SELinux User Map rule." -msgstr "" - -msgid "Enable an SELinux User Map rule." -msgstr "" - -msgid "Search for SELinux User Maps." -msgstr "" - -msgid "Modify a SELinux User Map." -msgstr "" - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "" - -msgid "Display the properties of a SELinux User Map rule." -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "Service principal" -msgstr "" - -msgid "PAC type" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" - -msgid "Add a new IPA new service." -msgstr "" - -msgid "force principal name even if not in DNS" -msgstr "" - -msgid "Add hosts that can manage this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Delete an IPA service." -msgstr "" - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Search for IPA services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" - -msgid "Search for services with these managed by hosts." -msgstr "" - -msgid "Search for services without these managed by hosts." -msgstr "" - -msgid "Modify an existing IPA service." -msgstr "" - -msgid "Remove hosts that can manage this service." -msgstr "" - -msgid "Display information about an IPA service." -msgstr "" - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" - -msgid "Sudo Command" -msgstr "" - -msgid "A description of this command" -msgstr "" - -msgid "Sudo Command Groups" -msgstr "" - -msgid "Create new Sudo Command." -msgstr "" - -msgid "Delete Sudo Command." -msgstr "" - -msgid "Search for Sudo Commands." -msgstr "" - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" - -msgid "Modify Sudo Command." -msgstr "" - -msgid "Display Sudo Command." -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "Sudo Command Group" -msgstr "" - -msgid "Commands" -msgstr "" - -msgid "Member Sudo commands" -msgstr "" - -msgid "Create new Sudo Command Group." -msgstr "" - -msgid "Add members to Sudo Command Group." -msgstr "" - -msgid "member sudo command" -msgstr "" - -msgid "sudo commands to add" -msgstr "" - -msgid "Delete Sudo Command Group." -msgstr "" - -msgid "Search for Sudo Command Groups." -msgstr "" - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" - -msgid "Modify Sudo Command Group." -msgstr "" - -msgid "Remove members from Sudo Command Group." -msgstr "" - -msgid "sudo commands to remove" -msgstr "" - -msgid "Display Sudo Command Group." -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -msgid "Domain name" -msgstr "" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "" - -msgid "Last name" -msgstr "" - -msgid "Full name" -msgstr "" - -msgid "Display name" -msgstr "" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Email address" -msgstr "" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -msgid "Pager Number" -msgstr "" - -msgid "Fax Number" -msgstr "" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Car License" -msgstr "" - -msgid "Account disabled" -msgstr "" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "" - -msgid "RADIUS proxy username" -msgstr "" - -msgid "Department Number" -msgstr "" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -msgid "Delete a user." -msgstr "" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "Command category" -msgstr "" - -msgid "Command category the rule applies to" -msgstr "" - -msgid "RunAs User category" -msgstr "" - -msgid "RunAs User category the rule applies to" -msgstr "" - -msgid "RunAs Group category" -msgstr "" - -msgid "RunAs Group category the rule applies to" -msgstr "" - -msgid "Sudo order" -msgstr "" - -msgid "integer to order the Sudo rules" -msgstr "" - -msgid "External User" -msgstr "" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -msgid "Host Masks" -msgstr "" - -msgid "Sudo Allow Commands" -msgstr "" - -msgid "Sudo Deny Commands" -msgstr "" - -msgid "Sudo Allow Command Groups" -msgstr "" - -msgid "Sudo Deny Command Groups" -msgstr "" - -msgid "RunAs Users" -msgstr "" - -msgid "Run as a user" -msgstr "" - -msgid "Groups of RunAs Users" -msgstr "" - -msgid "Run as any user within a specified group" -msgstr "" - -msgid "RunAs External User" -msgstr "" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -msgid "External Groups of RunAs Users" -msgstr "" - -msgid "External Groups of users that the command can run as" -msgstr "" - -msgid "RunAs Groups" -msgstr "" - -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -msgid "RunAs External Group" -msgstr "" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -msgid "Sudo Option" -msgstr "" - -msgid "Create new Sudo Rule." -msgstr "" - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "member sudo command group" -msgstr "" - -msgid "sudo command groups to add" -msgstr "" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "" - -msgid "Add group for Sudo to execute as." -msgstr "" - -msgid "Add users and groups for Sudo to execute as." -msgstr "" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "" - -msgid "Delete Sudo Rule." -msgstr "" - -msgid "Disable a Sudo Rule." -msgstr "" - -msgid "Enable a Sudo Rule." -msgstr "" - -msgid "Search for Sudo Rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -msgid "Modify Sudo Rule." -msgstr "" - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "sudo command groups to remove" -msgstr "" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "Remove an option from Sudo Rule." -msgstr "" - -msgid "Remove group for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "" - -msgid "Display Sudo Rule." -msgstr "" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "ACL name" -msgstr "" - -msgid "Profile category" -msgstr "" - -msgid "Profile category the ACL applies to" -msgstr "" - -msgid "User category the ACL applies to" -msgstr "" - -msgid "Host category the ACL applies to" -msgstr "" - -msgid "Service category the ACL applies to" -msgstr "" - -msgid "Profiles" -msgstr "" - -msgid "Create a new CA ACL." -msgstr "" - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "" - -msgid "Add profiles to a CA ACL." -msgstr "" - -msgid "member Certificate Profile" -msgstr "" - -msgid "Certificate Profiles to add" -msgstr "" - -msgid "Add services to a CA ACL." -msgstr "" - -msgid "Add users and groups to a CA ACL." -msgstr "" - -msgid "Delete a CA ACL." -msgstr "" - -msgid "Disable a CA ACL." -msgstr "" - -msgid "Enable a CA ACL." -msgstr "" - -msgid "Search for CA ACLs." -msgstr "" - -msgid "Modify a CA ACL." -msgstr "" - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "" - -msgid "Remove profiles from a CA ACL." -msgstr "" - -msgid "Certificate Profiles to remove" -msgstr "" - -msgid "Remove services from a CA ACL." -msgstr "" - -msgid "Remove users and groups from a CA ACL." -msgstr "" - -msgid "Display the properties of a CA ACL." -msgstr "" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" - -msgid "Query current Domain Level." -msgstr "" - -msgid "Current domain level:" -msgstr "" - -msgid "Change current Domain Level." -msgstr "" - -msgid "Domain Level" -msgstr "" - -msgid "Add certificates to host entry" -msgstr "" - -msgid "Remove certificates from host entry" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "Fallback to AD DC LDAP" -msgstr "" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" - -msgid "Add to default group" -msgstr "" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" - -msgid "Search scope" -msgstr "" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Target DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" - -msgid "Origin DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "Server name" -msgstr "" - -msgid "IPA server hostname" -msgstr "" - -msgid "Managed suffix" -msgstr "" - -msgid "Min domain level" -msgstr "" - -msgid "Minimum domain level" -msgstr "" - -msgid "Max domain level" -msgstr "" - -msgid "Maximum domain level" -msgstr "" - -msgid "Delete IPA server." -msgstr "" - -msgid "Search for IPA servers." -msgstr "" - -msgid "Show IPA server." -msgstr "" - -msgid "Add new certificates to a service" -msgstr "" - -msgid "Remove certificates from a service" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed Target" -msgstr "" - -msgid "Create a new service delegation rule." -msgstr "" - -msgid "Add member to a named service delegation rule." -msgstr "" - -msgid "member principal" -msgstr "" - -msgid "principal to add" -msgstr "" - -msgid "Add target to a named service delegation rule." -msgstr "" - -msgid "member service delegation target" -msgstr "" - -msgid "service delegation targets to add" -msgstr "" - -msgid "Delete service delegation." -msgstr "" - -msgid "Search for service delegations rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" - -msgid "Remove member from a named service delegation rule." -msgstr "" - -msgid "principal to remove" -msgstr "" - -msgid "Remove target from a named service delegation rule." -msgstr "" - -msgid "service delegation targets to remove" -msgstr "" - -msgid "Display information about a named service delegation rule." -msgstr "" - -msgid "Create a new service delegation target." -msgstr "" - -msgid "Add member to a named service delegation target." -msgstr "" - -msgid "Delete service delegation target." -msgstr "" - -msgid "Search for service delegation target." -msgstr "" - -msgid "Remove member from a named service delegation target." -msgstr "" - -msgid "Display information about a named service delegation target." -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" - -msgid "Activate a stage user." -msgstr "" - -msgid "Add a new stage user." -msgstr "" - -msgid "Create Stage user in from a delete user" -msgstr "" - -msgid "Delete a stage user." -msgstr "" - -msgid "Search for stage users." -msgstr "" - -msgid "Search for stage users with these member of groups." -msgstr "" - -msgid "Search for stage users without these member of groups." -msgstr "" - -msgid "Search for stage users with these member of netgroups." -msgstr "" - -msgid "Search for stage users without these member of netgroups." -msgstr "" - -msgid "Search for stage users with these member of roles." -msgstr "" - -msgid "Search for stage users without these member of roles." -msgstr "" - -msgid "Search for stage users with these member of HBAC rules." -msgstr "" - -msgid "Search for stage users without these member of HBAC rules." -msgstr "" - -msgid "Search for stage users with these member of sudo rules." -msgstr "" - -msgid "Search for stage users without these member of sudo rules." -msgstr "" - -msgid "Modify a stage user." -msgstr "" - -msgid "Rename the stage user object" -msgstr "" - -msgid "Display information about a stage user." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" - -msgid "Segment name" -msgstr "" - -msgid "Arbitrary string identifying the segment" -msgstr "" - -msgid "Left node" -msgstr "" - -msgid "Left replication node - an IPA server" -msgstr "" - -msgid "Right node" -msgstr "" - -msgid "Right replication node - an IPA server" -msgstr "" - -msgid "Connectivity" -msgstr "" - -msgid "Direction of replication between left and right replication node" -msgstr "" - -msgid "Attributes to strip" -msgstr "" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" - -msgid "Attributes to replicate" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" - -msgid "Attributes for total update" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" - -msgid "Session timeout" -msgstr "" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" - -msgid "Replication agreement enabled" -msgstr "" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" - -msgid "Suffix name" -msgstr "" - -msgid "LDAP suffix to be managed" -msgstr "" - -msgid "Add a new segment." -msgstr "" - -msgid "Delete a segment." -msgstr "" - -msgid "Search for topology segments." -msgstr "" - -msgid "Modify a segment." -msgstr "" - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" - -msgid "Initialize left node" -msgstr "" - -msgid "Initialize right node" -msgstr "" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "" - -msgid "Display a segment." -msgstr "" - -msgid "Add a new topology suffix to be managed." -msgstr "" - -msgid "Delete a topology suffix." -msgstr "" - -msgid "Search for topology suffices." -msgstr "" - -msgid "Modify a topology suffix." -msgstr "" - -msgid "Show managed suffix." -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "Preserved user" -msgstr "" - -msgid "Add one or more certificates to the user entry" -msgstr "" - -msgid "Remove one or more certificates to the user entry" -msgstr "" - -msgid "Move deleted user into staged area" -msgstr "" - -msgid "Undelete a delete user account." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "Vault name" -msgstr "" - -msgid "Vault description" -msgstr "" - -msgid "Vault type" -msgstr "" - -msgid "Salt" -msgstr "" - -msgid "Vault salt" -msgstr "" - -msgid "Public key" -msgstr "" - -msgid "Vault public key" -msgstr "" - -msgid "Owner users" -msgstr "" - -msgid "Owner groups" -msgstr "" - -msgid "Owner services" -msgstr "" - -msgid "Failed owners" -msgstr "" - -msgid "Vault service" -msgstr "" - -msgid "Shared vault" -msgstr "" - -msgid "Vault user" -msgstr "" - -msgid "Transport Certificate" -msgstr "" - -msgid "Service name of the service vault" -msgstr "" - -msgid "Username of the user vault" -msgstr "" - -msgid "Add members to a vault." -msgstr "" - -msgid "Add owners to a vault." -msgstr "" - -msgid "owner user" -msgstr "" - -msgid "owner group" -msgstr "" - -msgid "owner service" -msgstr "" - -msgid "Owners that could not be added" -msgstr "" - -msgid "Number of owners added" -msgstr "" - -msgid "Session key wrapped with transport certificate" -msgstr "" - -msgid "Vault data encrypted with session key" -msgstr "" - -msgid "Nonce" -msgstr "" - -msgid "Delete a vault." -msgstr "" - -msgid "Search for vaults." -msgstr "" - -msgid "List all service vaults" -msgstr "" - -msgid "List all user vaults" -msgstr "" - -msgid "Remove members from a vault." -msgstr "" - -msgid "Remove owners from a vault." -msgstr "" - -msgid "Owners that could not be removed" -msgstr "" - -msgid "Number of owners removed" -msgstr "" - -msgid "Display information about a vault." -msgstr "" - -msgid "Show vault configuration." -msgstr "" - -msgid "Output file to store the transport certificate" -msgstr "" - -msgid "Add owners to a vault container." -msgstr "" - -msgid "Delete a vault container." -msgstr "" - -msgid "Remove owners from a vault container." -msgstr "" - -msgid "Display information about a vault container." -msgstr "" - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "" - -msgid "Hostname (FQDN)" -msgstr "" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Managed suffixes" -msgstr "" - -msgid "Check connection to remote IPA server." -msgstr "" - -msgid "Remote server name" -msgstr "" - -msgid "Remote IPA server hostname" -msgstr "" - -msgid "suffix" -msgstr "" - -msgid "Search for servers with these managed suffixes." -msgstr "" - -msgid "Search for servers without these managed suffixes." -msgstr "" - -msgid "Add a manager to the stage user entry" -msgstr "" - -msgid "Remove a manager to the stage user entry" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -msgid "Managed LDAP suffix DN" -msgstr "" - -msgid "Search for topology suffixes." -msgstr "" - -msgid "Add a manager to the user entry" -msgstr "" - -msgid "Remove a manager to the user entry" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Comma-separated list of attributes" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" - -msgid "DNS class" -msgstr "" - -msgid "Comma-separated list of raw A records" -msgstr "" - -msgid "Comma-separated list of raw AAAA records" -msgstr "" - -msgid "Comma-separated list of raw A6 records" -msgstr "" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "" - -msgid "Comma-separated list of raw APL records" -msgstr "" - -msgid "Comma-separated list of raw CERT records" -msgstr "" - -msgid "Comma-separated list of raw CNAME records" -msgstr "" - -msgid "Comma-separated list of raw DHCID records" -msgstr "" - -msgid "Comma-separated list of raw DLV records" -msgstr "" - -msgid "Comma-separated list of raw DNAME records" -msgstr "" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "" - -msgid "Comma-separated list of raw DS records" -msgstr "" - -msgid "Comma-separated list of raw HIP records" -msgstr "" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "" - -msgid "Comma-separated list of raw KEY records" -msgstr "" - -msgid "KEY Flags" -msgstr "" - -msgid "KEY Protocol" -msgstr "" - -msgid "Protocol" -msgstr "" - -msgid "KEY Algorithm" -msgstr "" - -msgid "KEY Public Key" -msgstr "" - -msgid "Public Key" -msgstr "" - -msgid "Comma-separated list of raw KX records" -msgstr "" - -msgid "Comma-separated list of raw LOC records" -msgstr "" - -msgid "Comma-separated list of raw MX records" -msgstr "" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "" - -msgid "Comma-separated list of raw NS records" -msgstr "" - -msgid "Comma-separated list of raw NSEC records" -msgstr "" - -msgid "NSEC Next Domain Name" -msgstr "" - -msgid "Next Domain Name" -msgstr "" - -msgid "NSEC Type Map" -msgstr "" - -msgid "Type Map" -msgstr "" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "" - -msgid "Comma-separated list of raw PTR records" -msgstr "" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "" - -msgid "RRSIG Type Covered" -msgstr "" - -msgid "Type Covered" -msgstr "" - -msgid "RRSIG Algorithm" -msgstr "" - -msgid "RRSIG Labels" -msgstr "" - -msgid "Labels" -msgstr "" - -msgid "RRSIG Original TTL" -msgstr "" - -msgid "Original TTL" -msgstr "" - -msgid "RRSIG Signature Expiration" -msgstr "" - -msgid "Signature Expiration" -msgstr "" - -msgid "RRSIG Signature Inception" -msgstr "" - -msgid "Signature Inception" -msgstr "" - -msgid "RRSIG Key Tag" -msgstr "" - -msgid "RRSIG Signer's Name" -msgstr "" - -msgid "Signer's Name" -msgstr "" - -msgid "RRSIG Signature" -msgstr "" - -msgid "Signature" -msgstr "" - -msgid "Comma-separated list of raw RP records" -msgstr "" - -msgid "Comma-separated list of raw SIG records" -msgstr "" - -msgid "SIG Type Covered" -msgstr "" - -msgid "SIG Algorithm" -msgstr "" - -msgid "SIG Labels" -msgstr "" - -msgid "SIG Original TTL" -msgstr "" - -msgid "SIG Signature Expiration" -msgstr "" - -msgid "SIG Signature Inception" -msgstr "" - -msgid "SIG Key Tag" -msgstr "" - -msgid "SIG Signer's Name" -msgstr "" - -msgid "SIG Signature" -msgstr "" - -msgid "Comma-separated list of raw SPF records" -msgstr "" - -msgid "Comma-separated list of raw SRV records" -msgstr "" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "" - -msgid "Comma-separated list of raw TA records" -msgstr "" - -msgid "Comma-separated list of raw TKEY records" -msgstr "" - -msgid "Comma-separated list of raw TSIG records" -msgstr "" - -msgid "Comma-separated list of raw TXT records" -msgstr "" - -msgid "SOA time to live" -msgstr "" - -msgid "SOA record time to live" -msgstr "" - -msgid "SOA class" -msgstr "" - -msgid "SOA record class" -msgstr "" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" - -msgid "Consume an entitlement." -msgstr "" - -msgid "Quantity" -msgstr "" - -msgid "Search for entitlement accounts." -msgstr "" - -msgid "Retrieve the entitlement certs." -msgstr "" - -msgid "Import an entitlement certificate." -msgstr "" - -msgid "UUID" -msgstr "" - -msgid "Enrollment UUID" -msgstr "" - -msgid "Register to the entitlement system." -msgstr "" - -msgid "Username" -msgstr "" - -msgid "Enrollment UUID (not implemented)" -msgstr "" - -msgid "Registration password" -msgstr "" - -msgid "Display current entitlements." -msgstr "" - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" - -msgid "comma-separated list of users to add" -msgstr "" - -msgid "comma-separated list of groups to add" -msgstr "" - -msgid "comma-separated list of users to remove" -msgstr "" - -msgid "comma-separated list of groups to remove" -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Source host category" -msgstr "" - -msgid "Source host category the rule applies to" -msgstr "" - -msgid "Source Hosts" -msgstr "" - -msgid "Source Host Groups" -msgstr "" - -msgid "comma-separated list of hosts to add" -msgstr "" - -msgid "comma-separated list of host groups to add" -msgstr "" - -msgid "comma-separated list of HBAC services to add" -msgstr "" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "" - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "" - -msgid "comma-separated list of hosts to remove" -msgstr "" - -msgid "comma-separated list of host groups to remove" -msgstr "" - -msgid "comma-separated list of HBAC services to remove" -msgstr "" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" - -msgid "Source host" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "comma-separated list of netgroups to add" -msgstr "" - -msgid "comma-separated list of netgroups to remove" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" - -msgid "Target members of a group" -msgstr "" - -msgid "User group to apply permissions to" -msgstr "" - -msgid "comma-separated list of privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI" -msgstr "" - -msgid "Permission type" -msgstr "" - -msgid "comma-separated list of privileges to remove" -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "comma-separated list of roles to add" -msgstr "" - -msgid "comma-separated list of permissions" -msgstr "" - -msgid "comma-separated list of roles to remove" -msgstr "" - -msgid "comma-separated list of privileges" -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "comma-separated list of sudo commands to add" -msgstr "" - -msgid "comma-separated list of sudo commands to remove" -msgstr "" - -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" - -msgid "comma-separated list of sudo command groups to add" -msgstr "" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "" - -msgid "Failed members" -msgstr "" - -msgid "Failed source hosts/hostgroups" -msgstr "" - -msgid "Failed hosts/hostgroups" -msgstr "" - -msgid "Failed users/groups" -msgstr "" - -msgid "Failed service/service groups" -msgstr "" - -msgid "Failed to remove" -msgstr "" - -msgid "Failed RunAs" -msgstr "" - -msgid "Failed RunAsGroup" -msgstr "" - -msgid "Failed profiles" -msgstr "" - -msgid "Failed CAs" -msgstr "" - -msgid "Failed member manager" -msgstr "" - -msgid "Failed managedby" -msgstr "" - -msgid "Failed allowed to retrieve keytab" -msgstr "" - -msgid "Failed allowed to create keytab" -msgstr "" - -msgid "Failed targets" -msgstr "" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "" - -msgid "an internal error has occurred" -msgstr "" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "" - -msgid "did not receive Kerberos credentials" -msgstr "" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -msgid "No credentials cache found" -msgstr "" - -msgid "Ticket expired" -msgstr "" - -msgid "Credentials cache permissions incorrect" -msgstr "" - -msgid "Bad format in credentials cache" -msgstr "" - -msgid "Cannot resolve KDC for requested realm" -msgstr "" - -msgid "Session error" -msgstr "" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#, python-format -msgid "'%(name)s' is required" -msgstr "" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - -#, fuzzy -msgid "Passwords do not match" -msgstr "Wachtwoorden komen niet overeen!" - -msgid "Command not implemented" -msgstr "" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -#, python-format -msgid "%(reason)s" -msgstr "" - -msgid "This entry already exists" -msgstr "" - -msgid "You must enroll a host in order to create a host service" -msgstr "" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" - -msgid "This command requires root access" -msgstr "" - -msgid "This is already a posix group" -msgstr "" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -msgid "This entry is already enabled" -msgstr "" - -msgid "This entry is already disabled" -msgstr "" - -msgid "This entry cannot be enabled or disabled" -msgstr "" - -msgid "This entry is not a member" -msgstr "" - -msgid "A group may not be a member of itself" -msgstr "" - -msgid "This entry is already a member" -msgstr "" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "" - -msgid "A group may not be added as a member of itself" -msgstr "" - -msgid "The default users group cannot be removed" -msgstr "" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -msgid "This group already allows external members" -msgstr "" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "change collided with another change" -msgstr "" - -msgid "no modifications to be performed" -msgstr "" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "" - -msgid "limits exceeded for this query" -msgstr "" - -#, python-format -msgid "%(info)s" -msgstr "" - -msgid "modifying primary key is not allowed" -msgstr "" - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "" - -msgid "Already registered" -msgstr "" - -msgid "Not registered yet" -msgstr "" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, python-format -msgid "%(exception)s" -msgstr "" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -#, python-format -msgid "%(count)d variables" -msgstr "" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" -msgstr[1] "" - -msgid "A dictionary representing an LDAP entry" -msgstr "" - -msgid "A list of LDAP entries" -msgstr "" - -msgid "All commands should at least have a result" -msgstr "" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "" - msgid "Passwords do not match!" msgstr "Wachtwoorden komen niet overeen!" - -msgid "No matching entries found" -msgstr "" - -msgid "Topic or Command" -msgstr "" - -msgid "The topic or command name." -msgstr "" - -msgid "Topic commands:" -msgstr "" - -msgid "To get command help, use:" -msgstr "" - -msgid " ipa --help" -msgstr "" - -msgid "Command name" -msgstr "" - -msgid "Positional arguments" -msgstr "" - -#, python-format -msgid "Same as --%s" -msgstr "" - -msgid "Deprecated options" -msgstr "" - -msgid "No file to read" -msgstr "" - -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - -#, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - -msgid "Filename is empty" -msgstr "" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -msgid "invalid domain name" -msgstr "" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "incorrect type" -msgstr "" - -msgid "Only one value is allowed" -msgstr "" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "" - -msgid "must be an integer" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -msgid "must be a decimal number" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -msgid "must be binary data" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -msgid "must be a certificate" -msgstr "" - -msgid "must be a certificate signing request" -msgstr "" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "" - -msgid "Leading and trailing spaces are not allowed" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "" - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "" - -#, python-format -msgid "must be '%(value)s'" -msgstr "" - -#, python-format -msgid "must be one of %(values)s" -msgstr "" - -msgid "must be datetime value" -msgstr "" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -msgid "must be DNS name" -msgstr "" - -msgid "must be absolute" -msgstr "" - -msgid "must be relative" -msgstr "" - -msgid "must be dictionary" -msgstr "" - -msgid "must be Kerberos principal" -msgstr "" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -msgid "Service principal is required" -msgstr "" - -msgid "must be at least 0" -msgstr "" - -msgid "invalid valid hex" -msgstr "" - -msgid "invalid serial number 0" -msgstr "" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "" - -#, python-format -msgid "objectclass %s not found" -msgstr "" - -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "Failed to authenticate to CA REST API" -msgstr "" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "" - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -msgid "Automount Location" -msgstr "" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "" - -msgid "User Group" -msgstr "" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "host groups" -msgstr "" - -msgid "Host Group" -msgstr "" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" - -msgid "hostgroup" -msgstr "" - -msgid "privileged hostgroup" -msgstr "" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -msgid "Auto private groups" -msgstr "" - -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "" - -msgid "locations" -msgstr "" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -msgid "Location name" -msgstr "" - -msgid "IPA location name" -msgstr "" - -msgid "IPA Location description" -msgstr "" - -msgid "Servers" -msgstr "" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -msgid "Delete an IPA location." -msgstr "" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -msgid "IPA Server" -msgstr "" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -msgid "netgroups" -msgstr "" - -msgid "Netgroups" -msgstr "" - -msgid "Netgroup" -msgstr "" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" -msgstr "" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" -msgstr "" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "Role" -msgstr "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -msgid "Self Service Permissions" -msgstr "" - -msgid "Self Service Permission" -msgstr "" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "IPA role name" -msgstr "" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -msgid "Subordinate id description" -msgstr "" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -msgid "SubUID range size" -msgstr "" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -msgid "SubGID range size" -msgstr "" - -msgid "Subordinate group ID count" -msgstr "" - -#, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "" - -#, python-format -msgid "'%(dn)s is not a valid user" -msgstr "" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -msgid "Add a new subordinate id." -msgstr "" - -#, python-format -msgid "Added subordinate id \"%(value)s\"" -msgstr "" - -msgid "Delete a subordinate id." -msgstr "" - -#, python-format -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "" - -msgid "Modify a subordinate id." -msgstr "" - -#, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "" - -msgid "Search for subordinate id." -msgstr "" - -#, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a subordinate id." -msgstr "" - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -msgid "sudo command" -msgstr "" - -msgid "sudo commands" -msgstr "" - -msgid "Sudo Commands" -msgstr "" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -msgid "servers" -msgstr "" - -msgid "IPA Servers" -msgstr "" - -msgid "Server location" -msgstr "" - -msgid "Service weight" -msgstr "" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -msgid "Server state" -msgstr "" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "A list of ACI values" -msgstr "" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -msgstr "" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -msgid "" -"\n" -"Managed permissions\n" -msgstr "" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "must be enclosed in parentheses" -msgstr "" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, python-format -msgid "Deprecated; use %s" -msgstr "" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, python-format -msgid "Entry %s not found" -msgstr "" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, python-format -msgid "Entry %s does not exist" -msgstr "" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -msgid "Help topic" -msgstr "" - -msgid "Version" -msgstr "" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -msgid "Method name" -msgstr "" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -#, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -msgid "CLI name" -msgstr "" - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "Trust direction" -msgstr "" - -msgid "Trust type" -msgstr "" - -msgid "Trust status" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" - -msgid "trust configuration" -msgstr "" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -msgid "Vault configuration" -msgstr "" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -msgid "Key wrapping algorithm" -msgstr "" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." -msgstr "" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "Principal alias" -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -msgid "External IdP configuration" -msgstr "" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "Certificate mapping data" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -msgid "Issuer" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -msgid "users cannot be added when user category='all'" -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "" - -#, python-format -msgid "%i services added." -msgstr "" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -msgid "User logins" -msgstr "" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "must be at least 10" -msgstr "" - -msgid "configuration options" -msgstr "" - -msgid "Configuration" -msgstr "" - -msgid "Maximum hostname length" -msgstr "" - -msgid "Enable adding subids to new users" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -msgid "IPA DNS servers" -msgstr "" - -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Setup SID configuration" -msgstr "" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -msgid "Add SIDs" -msgstr "" - -msgid "Add SIDs for existing users and groups" -msgstr "" - -msgid "NetBIOS name of the IPA domain" -msgstr "" - -msgid "Empty domain is not allowed" -msgstr "" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "not allowed to enable SID generation" -msgstr "" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -msgid "Failed to call DBus" -msgstr "" - -msgid "Configuration of SID failed. See details in the error log" -msgstr "" - -msgid "The group doesn't exist" -msgstr "" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, python-format -msgid "%s Record" -msgstr "" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -msgid "Priority (order)" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -msgid "Only one zone type is allowed per zone name" -msgstr "" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -msgid "Default time to live" -msgstr "" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "" - -msgid "is required" -msgstr "" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -msgid "DNS configuration options" -msgstr "" - -msgid "DNS Global Configuration" -msgstr "" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -msgid "Result of the command" -msgstr "" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "Serial Number" -msgstr "" - -msgid "Serial Number (hex)" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" - -msgid "Invalid URI: not an https scheme" -msgstr "" - -msgid "Invalid URI: missing netloc" -msgstr "" - -msgid "Identity Provider server" -msgstr "" - -msgid "Identity Provider servers" -msgstr "" - -msgid "Identity Provider server name" -msgstr "" - -msgid "Authorization URI" -msgstr "" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -msgid "Token URI" -msgstr "" - -msgid "Token endpoint" -msgstr "" - -msgid "User info URI" -msgstr "" - -msgid "User information endpoint" -msgstr "" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -msgid "Client identifier" -msgstr "" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -msgid "Add a new Identity Provider server." -msgstr "" - -#, python-format -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -msgid "Base URL" -msgstr "" - -msgid "Base URL for IdP provider templates" -msgstr "" - -msgid "unknown provider" -msgstr "" - -msgid "value is missing" -msgstr "" - -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "" - -msgid "Delete an Identity Provider server." -msgstr "" - -#, python-format -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "Modify an Identity Provider server." -msgstr "" - -#, python-format -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "Search for Identity Provider servers." -msgstr "" - -#, python-format -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an Identity Provider server." -msgstr "" - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Apply" -msgstr "" - -msgid "Rebuild auto membership" -msgstr "" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -msgid "Actions" -msgstr "" - -msgid "Add" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -msgid "Direct Membership" -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -msgid "No entries." -msgstr "" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -msgid "Remove" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -msgid "Show Results" -msgstr "" - -msgid "Authentication indicators" -msgstr "" - -msgid "Authentication indicator" -msgstr "" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -msgid "RADIUS" -msgstr "" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "External Identity Provider" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "" - -msgid "Activate" -msgstr "" - -msgid "Add and Add Another" -msgstr "" - -msgid "Add and Close" -msgstr "" - -msgid "Add and Edit" -msgstr "" - -msgid "Add Many" -msgstr "" - -msgid "Back" -msgstr "" - -msgid "Cancel" -msgstr "" - -msgid "Clear" -msgstr "" - -msgid "Clear all fields on the page." -msgstr "" - -msgid "Close" -msgstr "" - -msgid "Disable" -msgstr "" - -msgid "Download" -msgstr "" - -msgid "Download certificate as PEM formatted file." -msgstr "" - -msgid "Edit" -msgstr "" - -msgid "Enable" -msgstr "" - -msgid "Find" -msgstr "" - -msgid "Get" -msgstr "" - -msgid "Hide" -msgstr "" - -msgid "Issue" -msgstr "" - -msgid "Match" -msgstr "" - -msgid "Match users according to certificate." -msgstr "" - -msgid "Migrate" -msgstr "" - -msgid "OK" -msgstr "" - -msgid "Refresh" -msgstr "" - -msgid "Reload current settings from the server." -msgstr "" - -msgid "Delete" -msgstr "" - -msgid "Remove hold" -msgstr "" - -msgid "Reset" -msgstr "" - -msgid "Reset Password" -msgstr "" - -msgid "Reset Password and Log in" -msgstr "" - -msgid "Restore" -msgstr "" - -msgid "Retry" -msgstr "" - -msgid "Revert" -msgstr "" - -msgid "Revoke" -msgstr "" - -msgid "Save" -msgstr "" - -msgid "Set" -msgstr "" - -msgid "Show" -msgstr "" - -msgid "Stage" -msgstr "" - -msgid "Update" -msgstr "" - -msgid "View" -msgstr "" - -msgid "Customization" -msgstr "" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "" - -msgid "Expand All" -msgstr "" - -msgid "General" -msgstr "" - -msgid "Identity Settings" -msgstr "" - -msgid "Record Settings" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -msgid "Back to Top" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -msgid "Add custom value" -msgstr "" - -msgid "Available" -msgstr "" - -msgid "Some operations failed." -msgstr "" - -msgid "Operations Error" -msgstr "" - -msgid "Confirmation" -msgstr "" - -msgid "Custom value" -msgstr "" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -msgid "Unsaved Changes" -msgstr "" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "" - -msgid "Hide details" -msgstr "" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -msgid "Redirection" -msgstr "" - -msgid "Select entries to be removed." -msgstr "" - -msgid "Result" -msgstr "" - -msgid "Show details" -msgstr "" - -msgid "Success" -msgstr "" - -msgid "Validation error" -msgstr "" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "" - -msgid "HTTP Error" -msgstr "" - -msgid "Internal Error" -msgstr "" - -msgid "IPA Error" -msgstr "" - -msgid "No response" -msgstr "" - -msgid "Unknown Error" -msgstr "" - -msgid "URL" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -msgid "Settings" -msgstr "" - -msgid "Search" -msgstr "" - -msgid "False" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Allowed to create keytab" -msgstr "" - -msgid "Allowed to retrieve keytab" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Add Kerberos Principal Alias" -msgstr "" - -msgid "New kerberos principal alias" -msgstr "" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "" - -msgid "Authenticating" -msgstr "" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -msgid "Kerberos Principal you entered is expired" -msgstr "" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -msgid "Log In Using Certificate" -msgstr "" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "" - -msgid "Synchronizing" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -msgid "number of passwords" -msgstr "" - -msgid "seconds" -msgstr "" - -msgid "Migrating" -msgstr "" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -msgid "Password migration was not successful" -msgstr "" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -msgid "Password migration was successful" -msgstr "" - -msgid "Attribute" -msgstr "" - -msgid "Add delegation" -msgstr "" - -msgid "Remove delegations" -msgstr "" - -msgid "Add permission" -msgstr "" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -msgid "Remove permissions" -msgstr "" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -msgid "Remove privileges" -msgstr "" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -msgid "Role Settings" -msgstr "" - -msgid "Add role" -msgstr "" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -msgid "Remove roles" -msgstr "" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -msgid "Add self service permission" -msgstr "" - -msgid "Remove self service permissions" -msgstr "" - -msgid "Add rule" -msgstr "" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to change default group?" -msgstr "" - -msgid "Default host group" -msgstr "" - -msgid "Default user group" -msgstr "" - -msgid "Exclusive" -msgstr "" - -msgid "Expression" -msgstr "" - -msgid "Host group rule" -msgstr "" - -msgid "Host group rules" -msgstr "" - -msgid "Inclusive" -msgstr "" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -msgid "User group rule" -msgstr "" - -msgid "User group rules" -msgstr "" - -msgid "Add automount key" -msgstr "" - -msgid "Remove automount keys" -msgstr "" - -msgid "Add automount location" -msgstr "" - -msgid "Automount Location Settings" -msgstr "" - -msgid "Remove automount locations" -msgstr "" - -msgid "Add automount map" -msgstr "" - -msgid "Map Type" -msgstr "" - -msgid "Direct" -msgstr "" - -msgid "Indirect" -msgstr "" - -msgid "Remove automount maps" -msgstr "" - -msgid "Add certificate authority" -msgstr "" - -msgid "Remove certificate authorities" -msgstr "" - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -msgid "All" -msgstr "" - -msgid "Any CA" -msgstr "" - -msgid "Any Host" -msgstr "" - -msgid "Any Service" -msgstr "" - -msgid "Any Profile" -msgstr "" - -msgid "Anyone" -msgstr "" - -msgid "Rule status" -msgstr "" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -msgid "Remove CA ACLs" -msgstr "" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -msgid "Specified CAs" -msgstr "" - -msgid "Specified Hosts and Groups" -msgstr "" - -msgid "Specified Profiles" -msgstr "" - -msgid "Specified Services and Groups" -msgstr "" - -msgid "Specified Users and Groups" -msgstr "" - -msgid "Permitted to have certificates issued" -msgstr "" - -msgid "Remove certificate profiles" -msgstr "" - -msgid "AA Compromise" -msgstr "" - -msgid "Add principal" -msgstr "" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" - -msgid "Certificates" -msgstr "" - -msgid "Certificate Hold" -msgstr "" - -msgid "Cessation of Operation" -msgstr "" - -msgid "Common Name" -msgstr "" - -msgid "the certificate with serial number " -msgstr "" - -msgid "Expires On" -msgstr "" - -msgid "Issued on from" -msgstr "" - -msgid "Issued on to" -msgstr "" - -msgid "Maximum serial number" -msgstr "" - -msgid "Minimum serial number" -msgstr "" - -msgid "Revoked on from" -msgstr "" - -msgid "Revoked on to" -msgstr "" - -msgid "Valid not after from" -msgstr "" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -msgid "Fingerprints" -msgstr "" - -msgid "Get Certificate" -msgstr "" - -msgid "Certificate Hold Removed" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -msgid "Issue new certificate" -msgstr "" - -msgid "Issued By" -msgstr "" - -msgid "Issued On" -msgstr "" - -msgid "Issued To" -msgstr "" - -msgid "Key Compromise" -msgstr "" - -msgid "No Valid Certificate" -msgstr "" - -msgid "New Certificate" -msgstr "" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -msgid "Note" -msgstr "" - -msgid "Organizational Unit" -msgstr "" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -msgid "Privilege Withdrawn" -msgstr "" - -msgid "Reason for Revocation" -msgstr "" - -msgid "Remove certificate hold" -msgstr "" - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -msgid "Certificate requested" -msgstr "" - -msgid "Revoke certificate" -msgstr "" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -msgid "Certificate Revoked" -msgstr "" - -msgid "REVOKED" -msgstr "" - -msgid "SHA1 Fingerprint" -msgstr "" - -msgid "SHA256 Fingerprint" -msgstr "" - -msgid "Status" -msgstr "" - -msgid "Superseded" -msgstr "" - -msgid "Unspecified" -msgstr "" - -msgid "Valid Certificate Present" -msgstr "" - -msgid "Valid from" -msgstr "" - -msgid "Valid to" -msgstr "" - -msgid "Validity" -msgstr "" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -msgid "View Certificate" -msgstr "" - -msgid "Certificate Data" -msgstr "" - -msgid "Certificate For Match" -msgstr "" - -msgid "Certificate Mapping Match" -msgstr "" - -msgid "Matched Users" -msgstr "" - -msgid "User Login" -msgstr "" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -msgid "Configuration string" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -msgid "Remove certificate mapping data" -msgstr "" - -msgid "Issuer and subject" -msgstr "" - -msgid "Remove certificate identity mapping rules" -msgstr "" - -msgid "Group Options" -msgstr "" - -msgid "Search Options" -msgstr "" - -msgid "SELinux Options" -msgstr "" - -msgid "Server Options" -msgstr "" - -msgid "Service Options" -msgstr "" - -msgid "User Options" -msgstr "" - -msgid "Forward first" -msgstr "" - -msgid "Forwarding disabled" -msgstr "" - -msgid "Forward only" -msgstr "" - -msgid "Options" -msgstr "" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -msgid "Other Record Types" -msgstr "" - -msgid "Address not valid, can't redirect" -msgstr "" - -msgid "Create dns record" -msgstr "" - -msgid "Creating record." -msgstr "" - -msgid "Record creation failed." -msgstr "" - -msgid "Checking if record exists." -msgstr "" - -msgid "Record not found." -msgstr "" - -msgid "Redirection to PTR record" -msgstr "" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -msgid "Target reverse zone not found." -msgstr "" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -msgid "Standard Record Types" -msgstr "" - -msgid "Records for DNS Zone" -msgstr "" - -msgid "Record Type" -msgstr "" - -msgid "Add DNS zone" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -msgid "DNS Zone Settings" -msgstr "" - -msgid "Remove DNS zones" -msgstr "" - -msgid "Remove Permission" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Level" -msgstr "" - -msgid "Set Domain Level" -msgstr "" - -msgid "Add user group" -msgstr "" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -msgid "Group Settings" -msgstr "" - -msgid "External" -msgstr "" - -msgid "Groups" -msgstr "" - -msgid "Group categories" -msgstr "" - -msgid "Change to external group" -msgstr "" - -msgid "Change to POSIX group" -msgstr "" - -msgid "Non-POSIX" -msgstr "" - -msgid "POSIX" -msgstr "" - -msgid "Remove user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -msgid "Group Type" -msgstr "" - -msgid "Add HBAC rule" -msgstr "" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -msgid "Accessing" -msgstr "" - -msgid "Remove HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -msgid "Via Service" -msgstr "" - -msgid "Who" -msgstr "" - -msgid "Add HBAC service" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -msgid "Remove HBAC services" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -msgid "Add HBAC service group" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -msgid "Remove HBAC service groups" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -msgid "Access Denied" -msgstr "" - -msgid "Access Granted" -msgstr "" - -msgid "Include Disabled" -msgstr "" - -msgid "Include Enabled" -msgstr "" - -msgid "HBAC Test" -msgstr "" - -msgid "Matched" -msgstr "" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" - -msgid "Rules" -msgstr "" - -msgid "Run Test" -msgstr "" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -msgid "Unmatched" -msgstr "" - -msgid "Add host" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -msgid "Host Certificate" -msgstr "" - -msgid "Host Name" -msgstr "" - -msgid "Delete Key, Unprovision" -msgstr "" - -msgid "Host Settings" -msgstr "" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -msgid "Generate OTP" -msgstr "" - -msgid "Generated OTP" -msgstr "" - -msgid "Kerberos Key" -msgstr "" - -msgid "Kerberos Key Not Present" -msgstr "" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -msgid "One-Time Password" -msgstr "" - -msgid "One-Time Password Not Present" -msgstr "" - -msgid "One-Time Password Present" -msgstr "" - -msgid "Reset OTP" -msgstr "" - -msgid "Reset One-Time Password" -msgstr "" - -msgid "Set OTP" -msgstr "" - -msgid "OTP set" -msgstr "" - -msgid "Set One-Time Password" -msgstr "" - -msgid "Remove hosts" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -msgid "Unprovision" -msgstr "" - -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -msgid "Add host group" -msgstr "" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -msgid "Host Group Settings" -msgstr "" - -msgid "Remove host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -msgid "Identity provider details" -msgstr "" - -msgid "Verify secret" -msgstr "" - -msgid "User to override" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -msgid "Profile" -msgstr "" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -msgid "Enter trusted group name." -msgstr "" - -msgid "Add ID view" -msgstr "" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -msgid "Apply to host groups" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -msgid "Remove ID views" -msgstr "" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -msgid "Un-apply from host groups" -msgstr "" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -msgid "Un-apply" -msgstr "" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "Add netgroup" -msgstr "" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -msgid "Netgroup Settings" -msgstr "" - -msgid "Remove netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -msgid "Add OTP token" -msgstr "" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -msgid "Configure your token" -msgstr "" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -msgid "OTP Token Settings" -msgstr "" - -msgid "Disable token" -msgstr "" - -msgid "Enable token" -msgstr "" - -msgid "Remove OTP tokens" -msgstr "" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "" - -msgid "Show configuration uri" -msgstr "" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -msgid "Add Custom Attribute" -msgstr "" - -msgid "Permission settings" -msgstr "" - -msgid "Attribute breakdown" -msgstr "" - -msgid "Privilege Settings" -msgstr "" - -msgid "Public key:" -msgstr "" - -msgid "Set public key" -msgstr "" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -msgid "Add password policy" -msgstr "" - -msgid "Password Policy" -msgstr "" - -msgid "Remove password policies" -msgstr "" - -msgid "Add ID range" -msgstr "" - -msgid "Range Settings" -msgstr "" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -msgid "Domain SID" -msgstr "" - -msgid "Secondary RID base" -msgstr "" - -msgid "Remove ID ranges" -msgstr "" - -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -msgid "Detect" -msgstr "" - -msgid "Local domain" -msgstr "" - -msgid "IPA trust" -msgstr "" - -msgid "Active Directory winsync" -msgstr "" - -msgid "Add RADIUS server" -msgstr "" - -msgid "RADIUS Proxy Server Settings" -msgstr "" - -msgid "Remove RADIUS servers" -msgstr "" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -msgid "Force Update" -msgstr "" - -msgid "Add SELinux user map" -msgstr "" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -msgid "Server Roles" -msgstr "" - -msgid "Server Role" -msgstr "" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -msgid "Delete Server" -msgstr "" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -msgid "Add service" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -msgid "Service Certificate" -msgstr "" - -msgid "Service Settings" -msgstr "" - -msgid "Provisioning" -msgstr "" - -msgid "Remove services" -msgstr "" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -msgid "Unprovisioning service" -msgstr "" - -msgid "Service unprovisioned" -msgstr "" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "" - -msgid "SSH public keys" -msgstr "" - -msgid "SSH public key:" -msgstr "" - -msgid "Set SSH key" -msgstr "" - -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" - -msgid "Add stage user" -msgstr "" - -msgid "Stage users" -msgstr "" - -msgid "Preserved users" -msgstr "" - -msgid "Remove preserved users" -msgstr "" - -msgid "Remove stage users" -msgstr "" - -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -msgid "User categories" -msgstr "" - -msgid "Add subid" -msgstr "" - -msgid "Assigned subids" -msgstr "" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -msgid "Add sudo command" -msgstr "" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -msgid "Remove sudo commands" -msgstr "" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -msgid "Add sudo command group" -msgstr "" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -msgid "Remove sudo command groups" -msgstr "" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -msgid "Add sudo rule" -msgstr "" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "" - -msgid "Any Command" -msgstr "" - -msgid "Any Group" -msgstr "" - -msgid "Run Commands" -msgstr "" - -msgid "Deny" -msgstr "" - -msgid "Access this host" -msgstr "" - -msgid "Option added" -msgstr "" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -msgid "Remove sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -msgid "Specified Commands and Groups" -msgstr "" - -msgid "Specified Groups" -msgstr "" - -msgid "Remove sudo options" -msgstr "" - -msgid "Autogenerated" -msgstr "" - -msgid "Segment details" -msgstr "" - -msgid "Replication configuration" -msgstr "" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -msgid "Account" -msgstr "" - -msgid "Add trust" -msgstr "" - -msgid "Administrative account" -msgstr "" - -msgid "SID blocklists" -msgstr "" - -msgid "Trust Settings" -msgstr "" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -msgid "Pre-shared password" -msgstr "" - -msgid "Remove trusts" -msgstr "" - -msgid "Remove domains" -msgstr "" - -msgid "Alternative UPN suffixes" -msgstr "" - -msgid "User attributes for SMB services" -msgstr "" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - -msgid "Account Settings" -msgstr "" - -msgid "Account Status" -msgstr "" - -msgid "Active users" -msgstr "" - -msgid "Add user" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -msgid "Auto assign subordinate ids" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "" - -msgid "Contact Settings" -msgstr "" - -msgid "Delete mode" -msgstr "" - -msgid "Employee Information" -msgstr "" - -msgid "Error changing account status" -msgstr "" - -msgid "Password expiration" -msgstr "" - -msgid "Mailing Address" -msgstr "" - -msgid "Misc. Information" -msgstr "" - -msgid "delete" -msgstr "" - -msgid "preserve" -msgstr "" - -msgid "No private group" -msgstr "" - -msgid "Remove users" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Unlock" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -msgid "Members" -msgstr "" - -msgid "My User Vaults" -msgstr "" - -msgid "Owners" -msgstr "" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -msgid "Service Vaults" -msgstr "" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -msgid "Vault Type" -msgstr "" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -msgid "User Vaults" -msgstr "" - -msgid "Current password is required" -msgstr "" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -msgid "First OTP" -msgstr "" - -msgid "New password is required" -msgstr "" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Password change complete" -msgstr "" - -msgid "Your password has expired. Please enter a new password." -msgstr "" - -#, fuzzy -msgid "Passwords must match" -msgstr "Wachtwoorden komen niet overeen!" - -msgid "Password reset was not successful." -msgstr "" - -msgid "Reset your password." -msgstr "" - -msgid "Second OTP" -msgstr "" - -msgid "Verify Password" -msgstr "" - -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -msgid "Some entries were not deleted" -msgstr "" - -msgid "Quick Links" -msgstr "" - -msgid "Select All" -msgstr "" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -msgid "Unselect All" -msgstr "" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "" - -msgid "Audit" -msgstr "" - -msgid "Authentication" -msgstr "" - -msgid "Automount" -msgstr "" - -msgid "DNS" -msgstr "" - -msgid "Host-Based Access Control" -msgstr "" - -msgid "Identity" -msgstr "" - -msgid "Network Services" -msgstr "" - -msgid "Policy" -msgstr "" - -msgid "Role-Based Access Control" -msgstr "" - -msgid "Subordinate IDs" -msgstr "" - -msgid "Sudo" -msgstr "" - -msgid "Topology" -msgstr "" - -msgid "True" -msgstr "" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -msgid "First" -msgstr "" - -msgid "Last" -msgstr "" - -msgid "Next" -msgstr "" - -msgid "Page" -msgstr "" - -msgid "Prev" -msgstr "" - -msgid "Undo" -msgstr "" - -msgid "Undo this change." -msgstr "" - -msgid "Undo All" -msgstr "" - -msgid "Undo all changes in this field." -msgstr "" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -msgid "Must be a decimal number" -msgstr "" - -msgid "Format error" -msgstr "" - -msgid "Must be an integer" -msgstr "" - -msgid "Not a valid IP address" -msgstr "" - -msgid "Not a valid IPv4 address" -msgstr "" - -msgid "Not a valid IPv6 address" -msgstr "" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -msgid "Parse error" -msgstr "" - -msgid "Must be a positive number" -msgstr "" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -msgid "Required field" -msgstr "" - -msgid "Unsupported value" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -msgid "IdP max life" -msgstr "" - -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "" - -msgid "IdP max renew" -msgstr "" - -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -msgid "password policy" -msgstr "" - -msgid "password policies" -msgstr "" - -msgid "Password Policies" -msgstr "" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "Grace login limit" -msgstr "" - -msgid "Number of LDAP authentications allowed after expiration" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -msgid "service" -msgstr "" - -msgid "services" -msgstr "" - -msgid "Service principal alias" -msgstr "" - -msgid "Base-64 encoded service certificate" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." -msgstr "" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -msgid "Add a new SMB service." -msgstr "" - -msgid "SMB service NetBIOS name" -msgstr "" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a service" -msgstr "" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -msgid "Certificate Authority" -msgstr "" - -msgid "Certificate Authorities" -msgstr "" - -msgid "Name for referencing the CA" -msgstr "" - -msgid "Description of the purpose of the CA" -msgstr "" - -msgid "Authority ID" -msgstr "" - -msgid "Dogtag Authority ID" -msgstr "" - -msgid "Subject DN" -msgstr "" - -msgid "Subject Distinguished Name" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Issuer Distinguished Name" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "RSN Version" -msgstr "" - -msgid "Random Serial Number Version" -msgstr "" - -msgid "Search for CAs." -msgstr "" - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "Display the properties of a CA." -msgstr "" - -msgid "Create a CA." -msgstr "" - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -msgid "Modify CA configuration." -msgstr "" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "" - -msgid "IPA CA cannot be disabled" -msgstr "" - -msgid "Enable a CA." -msgstr "" - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Subject email address" -msgstr "" - -msgid "Subject DNS name" -msgstr "" - -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -msgid "Subject URI" -msgstr "" - -msgid "Subject IP Address" -msgstr "" - -msgid "Subject OID" -msgstr "" - -msgid "Subject UPN" -msgstr "" - -msgid "Subject Kerberos principal name" -msgstr "" - -msgid "Subject Other Name" -msgstr "" - -msgid "Serial number (hex)" -msgstr "" - -msgid "Request status" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Status of the certificate" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -msgid "command" -msgstr "" - -msgid "commands" -msgstr "" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -msgid "runAs groups" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Preserved user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -msgid "Password grace count" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" -msgstr "" - -msgid "Request must be a dict" -msgstr "" - -msgid "Request is missing \"method\"" -msgstr "" - -msgid "Request is missing \"params\"" -msgstr "" - -msgid "params must be a list" -msgstr "" - -msgid "params must contain [args, options]" -msgstr "" - -msgid "params[0] (aka args) must be a list" -msgstr "" - -msgid "params[1] (aka options) must be a dict" -msgstr "" - -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" - -msgid "CIFS server denied your credentials" -msgstr "" - -msgid "communication with CIFS server was unsuccessful" -msgstr "" - -msgid "AD domain controller" -msgstr "" - -msgid "unsupported functional level" -msgstr "" - -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" - -msgid "Cannot find specified domain or server name" -msgstr "" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" - -msgid "At least the domain or IP address should be specified" -msgstr "" - -#, python-format -msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" -msgstr "" - -msgid "no trusted domain is configured" -msgstr "" - -msgid "domain is not configured" -msgstr "" - -msgid "SID is not valid" -msgstr "" - -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "" - -msgid "SID does not match any trusted domain" -msgstr "" - -msgid "Trust setup" -msgstr "" - -msgid "Our domain is not configured" -msgstr "" - -msgid "No trusted domain is not configured" -msgstr "" - -msgid "trusted domain object" -msgstr "" - -msgid "domain is not trusted" -msgstr "" - -msgid "no trusted domain matched the specified flat name" -msgstr "" - -msgid "trusted domain object not found" -msgstr "" - -msgid "Object does not belong to a trusted domain" -msgstr "" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "" - -msgid "Ambiguous search, user domain was not specified" -msgstr "" - -msgid "Trusted domain did not return a unique object" -msgstr "" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "" - -msgid "trusted domain user not found" -msgstr "" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "" - -msgid "CIFS credentials object" -msgstr "" - -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "" - -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" - -#, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" - -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" - -msgid "Credentials" -msgstr "" - -msgid "Missing credentials for cross-forest communication" -msgstr "" - -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" - -#, python-format -msgid "must equal %r" -msgstr "" - -msgid "Hello world" -msgstr "" - -#, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "" - -msgid "must be at least 1" -msgstr "" - -msgid "Out of memory\n" -msgstr "" - -msgid "Warning unrecognized encryption type.\n" -msgstr "" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -msgid "Out of memory!?\n" -msgstr "" - -msgid "Enctype comparison failed!\n" -msgstr "" - -#, fuzzy -msgid "Password is too long!\n" -msgstr "Wachtwoorden komen niet overeen!" - -msgid "Failed to create random key!\n" -msgstr "" - -msgid "Failed to create key!\n" -msgstr "" - -msgid "Bad or unsupported salt type.\n" -msgstr "" - -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" diff --git a/po/pa.po b/po/pa.po index 84adc0213..26ce976c9 100644 --- a/po/pa.po +++ b/po/pa.po @@ -14,23944 +14,55 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" +msgid "AD domain controller" +msgstr "AD ਡੋਮੇਨ ਕੰਟਰੋਲਰ" -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" +msgid "CIFS server denied your credentials" +msgstr "CIFS ਨੇ ਤੁਹਾਡੀ ਸਨਦ ਤੋਂ ਇਨਕਾਰ ਕੀਤਾ" -#, fuzzy, c-format -msgid "out of memory\n" -msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ\n" - -#, c-format -msgid "read error\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to open keytab\n" +msgid "Failed to create key!\n" msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" -#, c-format -msgid "principal not found\n" -msgstr "" +msgid "File containing the new vault password" +msgstr "ਫ਼ਾਈਲ ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ ਰੱਖਦੀ ਹੈ" -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" +msgid "Hello world" +msgstr "ਹੈਲੋ ਵਰਲਡ" -#, fuzzy, c-format -msgid "Unable to remove entry\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" +msgid "Invalid vault type" +msgstr "ਗ਼ਲਤ ਵਾਲਟ ਕਿਸਮ" -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, fuzzy, c-format -msgid "Out of memory \n" -msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ\n" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -msgid "SASL Bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to get result: %s\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to parse result: %s\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Out of Memory!\n" -msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ!\n" - -#, fuzzy, c-format -msgid "Failed to create control!\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, fuzzy, c-format -msgid "Failed to bind to server!\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, fuzzy, c-format -msgid "Failed to get keytab!\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to retrieve any keys" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, fuzzy -msgid "Failed to decode control reply!\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, c-format -msgid "Passwords do not match!\n" -msgstr "" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -#, fuzzy -msgid "Failed to resolve symlink to keytab.\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Output debug info" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -msgid "Server Name" -msgstr "" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -msgid "LDAP password" -msgstr "" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -msgid "Path to the IPA CA certificate" -msgstr "" - -msgid "IPA CA certificate" -msgstr "" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Supported encryption types:\n" -msgstr "ਚੇਤਾਵਨੀ ਅਣਪਛਾਤੀ ਇੰਕ੍ਰਿਪਸ਼ਨ ਕਿਸਮ।\n" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -msgid "Enter LDAP password" -msgstr "" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" - -#, c-format -msgid "Discovered server %s\n" -msgstr "" - -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Using provided server %s\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -#, fuzzy -msgid "New Principal Password" +msgid "New vault password" msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" -msgid "Verify Principal Password" -msgstr "" +msgid "Old vault private key" +msgstr "ਪੁਰਾਣੀ ਵਾਲਟ ਪ੍ਰਾਈਵੇਟ ਕੁੰਜੀ" -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" +msgid "Our domain is not configured" +msgstr "ਸਾਡੀ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to open Keytab\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to create key material\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, fuzzy, c-format -msgid "Failed to get keytab\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, fuzzy, c-format -msgid "Failed to add key to the keytab\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, fuzzy, c-format -msgid "Failed to close the keytab\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" +msgid "Out of memory\n" +msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ\n" #, c-format msgid "Out of memory!\n" msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ!\n" -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "" - -#, fuzzy, c-format -msgid "Out of memory!" -msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ!\n" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "" - -#, c-format -msgid "No values for %s" -msgstr "" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Host is already joined.\n" -msgstr "" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" - -#, c-format -msgid "json_dumps() failed\n" -msgstr "" - -#, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "" - -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" - -#, c-format -msgid "fork() failed\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "" - -#, c-format -msgid "child exited with %d\n" -msgstr "" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "" - -msgid "Quiet mode. Only errors are displayed." -msgstr "" - -msgid "Unenroll this host from IPA server" -msgstr "" - -msgid "Hostname of this server" -msgstr "" - -msgid "hostname" -msgstr "" - -msgid "IPA Server to use" -msgstr "" - -msgid "Specifies where to store keytab information." -msgstr "" - -msgid "filename" -msgstr "" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" - -msgid "LDAP password (if not using Kerberos)" -msgstr "" - -#, fuzzy -msgid "password" -msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" - -msgid "LDAP basedn" -msgstr "" - -msgid "basedn" -msgstr "" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "" - -#, fuzzy -msgid "Failed to add" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" - -msgid "Unrevoked" -msgstr "" - -msgid "Error" -msgstr "" - -msgid "Input filename" -msgstr "" - -msgid "File to load the certificate from." -msgstr "" - -msgid "cannot specify both raw certificate and file" -msgstr "" - -msgid "Input file" -msgstr "" - -msgid "File to load the certificate from" -msgstr "" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "" - -msgid "Split DNS record to parts" -msgstr "" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" - -msgid "DNS resource record type" -msgstr "" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" - -msgid "No option to modify specific record provided." -msgstr "" - -msgid "Current DNS record contents:\n" -msgstr "" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -msgid "No option to delete specific record provided." -msgstr "" - -msgid "Delete all?" -msgstr "" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "" - -msgid "Server will check DNS forwarder(s)." -msgstr "" - -msgid "This may take some time, please wait ..." -msgstr "" - -msgid "DNS forwarder" -msgstr "" - -msgid "file to store DNS records in nsupdate format" -msgstr "" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -msgid "Delete a user" -msgstr "" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - -msgid "maps not connected to /etc/auto.master:" -msgstr "" - -msgid "Import automount files for a specific location." -msgstr "" - -msgid "Master file" -msgstr "" - -msgid "Automount master file." -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" - -#, python-format -msgid "File %(file)s not found" -msgstr "" - -#, python-format -msgid "key %(key)s already exists" -msgstr "" - -#, python-format -msgid "map %(map)s already exists" -msgstr "" - -msgid "Imported maps:" -msgstr "" - -#, python-format -msgid "Added %(map)s" -msgstr "" - -msgid "Imported keys:" -msgstr "" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "" - -msgid "Ignored keys:" -msgstr "" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "" - -msgid "Duplicate maps skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(map)s" -msgstr "" - -msgid "Duplicate keys skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(key)s" -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -msgid "User ID" -msgstr "" - -msgid "Password" -msgstr "" - -msgid "First Code" -msgstr "" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "" - -msgid "Invalid credentials" -msgstr "" - -msgid "Create a new vault." -msgstr "" - -#, fuzzy -msgid "Vault password" -msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" - -#, fuzzy -msgid "File containing the vault password" -msgstr "ਫ਼ਾਈਲ ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ ਰੱਖਦੀ ਹੈ" - -#, fuzzy -msgid "File containing the vault public key" -msgstr "ਫ਼ਾਈਲ ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ ਰੱਖਦੀ ਹੈ" - -msgid "Password can be specified only for symmetric vault" -msgstr "" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "" - -msgid "Password specified multiple times" -msgstr "" - -msgid "Public key specified multiple times" -msgstr "" - -msgid "Missing vault public key" -msgstr "" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "" - -msgid "Modify a vault." -msgstr "" - -#, fuzzy -msgid "Change password" -msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" - -#, fuzzy -msgid "Old vault password" -msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" - -#, fuzzy -msgid "File containing the old vault password" -msgstr "ਫ਼ਾਈਲ ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ ਰੱਖਦੀ ਹੈ" - -msgid "New vault password" -msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" - -msgid "File containing the new vault password" -msgstr "ਫ਼ਾਈਲ ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ ਰੱਖਦੀ ਹੈ" - -msgid "Old vault private key" -msgstr "ਪੁਰਾਣੀ ਵਾਲਟ ਪ੍ਰਾਈਵੇਟ ਕੁੰਜੀ" - -#, fuzzy -msgid "File containing the old vault private key" -msgstr "ਫ਼ਾਈਲ ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ ਰੱਖਦੀ ਹੈ" - -#, fuzzy -msgid "File containing the new vault public key" -msgstr "ਫ਼ਾਈਲ ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ ਰੱਖਦੀ ਹੈ" - -msgid "New public key specified multiple times" -msgstr "" - -msgid "Missing new vault public key" -msgstr "" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "" - -msgid "Binary data to archive" -msgstr "" - -#, fuzzy -msgid "File containing data to archive" -msgstr "ਫ਼ਾਈਲ ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ ਰੱਖਦੀ ਹੈ" - -msgid "Override existing password" -msgstr "" - -msgid "Input data specified multiple times" -msgstr "" - -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" - -msgid "Invalid vault type" -msgstr "ਗ਼ਲਤ ਵਾਲਟ ਕਿਸਮ" - -msgid "Retrieve a data from a vault." -msgstr "" - -msgid "File to store retrieved data" -msgstr "" - -#, fuzzy -msgid "Vault private key" -msgstr "ਪੁਰਾਣੀ ਵਾਲਟ ਪ੍ਰਾਈਵੇਟ ਕੁੰਜੀ" - -#, fuzzy -msgid "File containing the vault private key" -msgstr "ਫ਼ਾਈਲ ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ ਰੱਖਦੀ ਹੈ" - -msgid "Data" -msgstr "" - -msgid "Private key specified multiple times" -msgstr "" - -#, fuzzy -msgid "Missing vault private key" -msgstr "ਪੁਰਾਣੀ ਵਾਲਟ ਪ੍ਰਾਈਵੇਟ ਕੁੰਜੀ" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "ACI name" -msgstr "" - -msgid "Permission" -msgstr "" - -msgid "Permission ACI grants access to" -msgstr "" - -msgid "User group" -msgstr "" - -msgid "User group ACI grants access to" -msgstr "" - -msgid "Permissions" -msgstr "" - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Attributes to which the permission applies" -msgstr "" - -msgid "Attributes" -msgstr "" - -msgid "Type" -msgstr "" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" - -msgid "Member of" -msgstr "" - -msgid "Member of a group" -msgstr "" - -msgid "Filter" -msgstr "" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "" - -msgid "Subtree" -msgstr "" - -msgid "Subtree to apply ACI to" -msgstr "" - -msgid "Target group" -msgstr "" - -msgid "Group to apply ACI to" -msgstr "" - -msgid "Target your own entry (self)" -msgstr "" - -msgid "Apply ACI to your own entry (self)" -msgstr "" - -msgid "Create new ACI." -msgstr "" - -msgid "ACI prefix" -msgstr "" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" - -msgid "Test the ACI syntax but don't write anything" -msgstr "" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" - -msgid "User-friendly description of action performed" -msgstr "" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" - -msgid "Delete ACI." -msgstr "" - -msgid "True means the operation was successful" -msgstr "" - -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" - -msgid "A string searched in all relevant object attributes" -msgstr "" - -msgid "Primary key only" -msgstr "" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" - -msgid "Number of entries returned" -msgstr "" - -msgid "True if not all results were returned" -msgstr "" - -msgid "Modify ACI." -msgstr "" - -msgid "Rename an ACI." -msgstr "" - -msgid "New ACI name" -msgstr "" - -msgid "Display a single ACI given an ACI name." -msgstr "" - -msgid "Location of the ACI" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Description" -msgstr "" - -msgid "A description of this auto member rule" -msgstr "" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "List of deletions that failed" -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Users" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Hosts" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" - -msgid "Key" -msgstr "" - -msgid "Automount key name." -msgstr "" - -msgid "Mount information" -msgstr "" - -msgid "description" -msgstr "" - -msgid "Location" -msgstr "" - -msgid "Automount location name." -msgstr "" - -msgid "Map" -msgstr "" - -msgid "Automount map name." -msgstr "" - -msgid "Create a new automount key." -msgstr "" - -msgid "Delete an automount key." -msgstr "" - -msgid "Continuous mode: Don't stop on errors." -msgstr "" - -msgid "Search for an automount key." -msgstr "" - -msgid "Time Limit" -msgstr "" - -msgid "Time limit of search in seconds" -msgstr "" - -msgid "Size Limit" -msgstr "" - -msgid "Maximum number of entries returned" -msgstr "" - -msgid "Modify an automount key." -msgstr "" - -msgid "New mount information" -msgstr "" - -msgid "Rename" -msgstr "" - -msgid "Rename the automount key object" -msgstr "" - -msgid "Display an automount key." -msgstr "" - -msgid "Create a new automount location." -msgstr "" - -msgid "Delete an automount location." -msgstr "" - -msgid "Search for an automount location." -msgstr "" - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" - -msgid "Display an automount location." -msgstr "" - -msgid "Generate automount files for a specific location." -msgstr "" - -msgid "Create a new automount map." -msgstr "" - -msgid "Create a new indirect mount point." -msgstr "" - -msgid "Mount point" -msgstr "" - -msgid "Parent map" -msgstr "" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" - -msgid "Delete an automount map." -msgstr "" - -msgid "Search for an automount map." -msgstr "" - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" - -msgid "Modify an automount map." -msgstr "" - -msgid "Display an automount map." -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" - -msgid "Nested Methods to execute" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason" -msgstr "" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -msgid "minimum serial number" -msgstr "" - -msgid "maximum serial number" -msgstr "" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Principal" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Dictionary mapping variable name to value" -msgstr "" - -msgid "Revoke a certificate." -msgstr "" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "Maximum username length" -msgstr "" - -msgid "Home directory base" -msgstr "" - -msgid "Default location of home directories" -msgstr "" - -msgid "Default shell" -msgstr "" - -msgid "Default shell for new users" -msgstr "" - -msgid "Default users group" -msgstr "" - -msgid "Default group for new users" -msgstr "" - -msgid "Default e-mail domain" -msgstr "" - -msgid "Search time limit" -msgstr "" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" - -msgid "Search size limit" -msgstr "" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "" - -msgid "User search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" - -msgid "Group search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" - -msgid "Enable migration mode" -msgstr "" - -msgid "Certificate Subject base" -msgstr "" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "" - -msgid "Default group objectclasses" -msgstr "" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "" - -msgid "Default user objectclasses" -msgstr "" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" - -msgid "Password Expiration Notification (days)" -msgstr "" - -msgid "Number of days's notice of impending password expiration" -msgstr "" - -msgid "Password plugin features" -msgstr "" - -msgid "Extra hashes to generate in password plug-in" -msgstr "" - -msgid "SELinux user map order" -msgstr "" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" - -msgid "Default SELinux user" -msgstr "" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" - -msgid "Default PAC types" -msgstr "" - -msgid "Default types of PAC supported for services" -msgstr "" - -msgid "Default user authentication types" -msgstr "" - -msgid "Default types of supported user authentication" -msgstr "" - -msgid "Modify configuration options." -msgstr "" - -msgid "Show the current configuration." -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "Delegation name" -msgstr "" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "" - -msgid "Attributes to which the delegation applies" -msgstr "" - -msgid "Member user group" -msgstr "" - -msgid "User group to apply delegation to" -msgstr "" - -msgid "Add a new delegation." -msgstr "" - -msgid "Delete a delegation." -msgstr "" - -msgid "Search for delegations." -msgstr "" - -msgid "Modify a delegation." -msgstr "" - -msgid "Display information about a delegation." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "Global forwarders" -msgstr "" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Forward policy" -msgstr "" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" - -msgid "Allow PTR sync" -msgstr "" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" - -msgid "Zone refresh interval" -msgstr "" - -msgid "Zone name" -msgstr "" - -msgid "Zone name (FQDN)" -msgstr "" - -msgid "Reverse zone IP network" -msgstr "" - -msgid "IP network to create reverse zone name from" -msgstr "" - -msgid "Active zone" -msgstr "" - -msgid "Is zone active?" -msgstr "" - -msgid "Zone forwarders" -msgstr "" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "Record name" -msgstr "" - -msgid "Time to live" -msgstr "" - -msgid "Records" -msgstr "" - -msgid "Record type" -msgstr "" - -msgid "Record data" -msgstr "" - -msgid "A record" -msgstr "" - -msgid "Raw A records" -msgstr "" - -msgid "A IP Address" -msgstr "" - -msgid "IP Address" -msgstr "" - -msgid "A Create reverse" -msgstr "" - -msgid "Create reverse record for this IP Address" -msgstr "" - -msgid "AAAA record" -msgstr "" - -msgid "Raw AAAA records" -msgstr "" - -msgid "AAAA IP Address" -msgstr "" - -msgid "AAAA Create reverse" -msgstr "" - -msgid "A6 record" -msgstr "" - -msgid "Raw A6 records" -msgstr "" - -msgid "A6 Record data" -msgstr "" - -msgid "AFSDB record" -msgstr "" - -msgid "Raw AFSDB records" -msgstr "" - -msgid "AFSDB Subtype" -msgstr "" - -msgid "Subtype" -msgstr "" - -msgid "AFSDB Hostname" -msgstr "" - -msgid "Hostname" -msgstr "" - -msgid "APL record" -msgstr "" - -msgid "Raw APL records" -msgstr "" - -msgid "CERT record" -msgstr "" - -msgid "Raw CERT records" -msgstr "" - -msgid "CERT Certificate Type" -msgstr "" - -msgid "Certificate Type" -msgstr "" - -msgid "CERT Key Tag" -msgstr "" - -msgid "Key Tag" -msgstr "" - -msgid "CERT Algorithm" -msgstr "" - -msgid "Algorithm" -msgstr "" - -msgid "CERT Certificate/CRL" -msgstr "" - -msgid "Certificate/CRL" -msgstr "" - -msgid "CNAME record" -msgstr "" - -msgid "Raw CNAME records" -msgstr "" - -msgid "CNAME Hostname" -msgstr "" - -msgid "A hostname which this alias hostname points to" -msgstr "" - -msgid "DHCID record" -msgstr "" - -msgid "Raw DHCID records" -msgstr "" - -msgid "DLV record" -msgstr "" - -msgid "Raw DLV records" -msgstr "" - -msgid "DLV Key Tag" -msgstr "" - -msgid "DLV Algorithm" -msgstr "" - -msgid "DLV Digest Type" -msgstr "" - -msgid "Digest Type" -msgstr "" - -msgid "DLV Digest" -msgstr "" - -msgid "Digest" -msgstr "" - -msgid "DNAME record" -msgstr "" - -msgid "Raw DNAME records" -msgstr "" - -msgid "DNAME Target" -msgstr "" - -msgid "Target" -msgstr "" - -msgid "DNSKEY record" -msgstr "" - -msgid "Raw DNSKEY records" -msgstr "" - -msgid "DS record" -msgstr "" - -msgid "Raw DS records" -msgstr "" - -msgid "DS Key Tag" -msgstr "" - -msgid "DS Algorithm" -msgstr "" - -msgid "DS Digest Type" -msgstr "" - -msgid "DS Digest" -msgstr "" - -msgid "HIP record" -msgstr "" - -msgid "Raw HIP records" -msgstr "" - -msgid "IPSECKEY record" -msgstr "" - -msgid "Raw IPSECKEY records" -msgstr "" - -msgid "KEY record" -msgstr "" - -msgid "Raw KEY records" -msgstr "" - -msgid "KX record" -msgstr "" - -msgid "Raw KX records" -msgstr "" - -msgid "KX Preference" -msgstr "" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" - -msgid "KX Exchanger" -msgstr "" - -msgid "A host willing to act as a key exchanger" -msgstr "" - -msgid "LOC record" -msgstr "" - -msgid "Raw LOC records" -msgstr "" - -msgid "LOC Degrees Latitude" -msgstr "" - -msgid "Degrees Latitude" -msgstr "" - -msgid "LOC Minutes Latitude" -msgstr "" - -msgid "Minutes Latitude" -msgstr "" - -msgid "LOC Seconds Latitude" -msgstr "" - -msgid "Seconds Latitude" -msgstr "" - -msgid "LOC Direction Latitude" -msgstr "" - -msgid "Direction Latitude" -msgstr "" - -msgid "LOC Degrees Longitude" -msgstr "" - -msgid "Degrees Longitude" -msgstr "" - -msgid "LOC Minutes Longitude" -msgstr "" - -msgid "Minutes Longitude" -msgstr "" - -msgid "LOC Seconds Longitude" -msgstr "" - -msgid "Seconds Longitude" -msgstr "" - -msgid "LOC Direction Longitude" -msgstr "" - -msgid "Direction Longitude" -msgstr "" - -msgid "LOC Altitude" -msgstr "" - -msgid "Altitude" -msgstr "" - -msgid "LOC Size" -msgstr "" - -msgid "Size" -msgstr "" - -msgid "LOC Horizontal Precision" -msgstr "" - -msgid "Horizontal Precision" -msgstr "" - -msgid "LOC Vertical Precision" -msgstr "" - -msgid "Vertical Precision" -msgstr "" - -msgid "MX record" -msgstr "" - -msgid "Raw MX records" -msgstr "" - -msgid "MX Preference" -msgstr "" - -msgid "MX Exchanger" -msgstr "" - -msgid "A host willing to act as a mail exchanger" -msgstr "" - -msgid "NAPTR record" -msgstr "" - -msgid "Raw NAPTR records" -msgstr "" - -msgid "NAPTR Order" -msgstr "" - -msgid "Order" -msgstr "" - -msgid "NAPTR Preference" -msgstr "" - -msgid "Preference" -msgstr "" - -msgid "NAPTR Flags" -msgstr "" - -msgid "Flags" -msgstr "" - -msgid "NAPTR Service" -msgstr "" - -msgid "Service" -msgstr "" - -msgid "NAPTR Regular Expression" -msgstr "" - -msgid "Regular Expression" -msgstr "" - -msgid "NAPTR Replacement" -msgstr "" - -msgid "Replacement" -msgstr "" - -msgid "NS record" -msgstr "" - -msgid "Raw NS records" -msgstr "" - -msgid "NS Hostname" -msgstr "" - -msgid "NSEC record" -msgstr "" - -msgid "Raw NSEC records" -msgstr "" - -msgid "NSEC3 record" -msgstr "" - -msgid "Raw NSEC3 records" -msgstr "" - -msgid "PTR record" -msgstr "" - -msgid "Raw PTR records" -msgstr "" - -msgid "PTR Hostname" -msgstr "" - -msgid "The hostname this reverse record points to" -msgstr "" - -msgid "RRSIG record" -msgstr "" - -msgid "Raw RRSIG records" -msgstr "" - -msgid "RP record" -msgstr "" - -msgid "Raw RP records" -msgstr "" - -msgid "SIG record" -msgstr "" - -msgid "Raw SIG records" -msgstr "" - -msgid "SPF record" -msgstr "" - -msgid "Raw SPF records" -msgstr "" - -msgid "SRV record" -msgstr "" - -msgid "Raw SRV records" -msgstr "" - -msgid "SRV Priority" -msgstr "" - -msgid "Priority" -msgstr "" - -msgid "SRV Weight" -msgstr "" - -msgid "Weight" -msgstr "" - -msgid "SRV Port" -msgstr "" - -msgid "Port" -msgstr "" - -msgid "SRV Target" -msgstr "" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" - -msgid "SSHFP record" -msgstr "" - -msgid "Raw SSHFP records" -msgstr "" - -msgid "SSHFP Algorithm" -msgstr "" - -msgid "SSHFP Fingerprint Type" -msgstr "" - -msgid "Fingerprint Type" -msgstr "" - -msgid "SSHFP Fingerprint" -msgstr "" - -msgid "Fingerprint" -msgstr "" - -msgid "TA record" -msgstr "" - -msgid "Raw TA records" -msgstr "" - -msgid "TLSA record" -msgstr "" - -msgid "Raw TLSA records" -msgstr "" - -msgid "TLSA Certificate Usage" -msgstr "" - -msgid "Certificate Usage" -msgstr "" - -msgid "TLSA Selector" -msgstr "" - -msgid "Selector" -msgstr "" - -msgid "TLSA Matching Type" -msgstr "" - -msgid "Matching Type" -msgstr "" - -msgid "TLSA Certificate Association Data" -msgstr "" - -msgid "Certificate Association Data" -msgstr "" - -msgid "TKEY record" -msgstr "" - -msgid "Raw TKEY records" -msgstr "" - -msgid "TSIG record" -msgstr "" - -msgid "Raw TSIG records" -msgstr "" - -msgid "TXT record" -msgstr "" - -msgid "Raw TXT records" -msgstr "" - -msgid "TXT Text Data" -msgstr "" - -msgid "Text Data" -msgstr "" - -msgid "Authoritative nameserver" -msgstr "" - -msgid "Authoritative nameserver domain name" -msgstr "" - -msgid "Administrator e-mail address" -msgstr "" - -msgid "SOA serial" -msgstr "" - -msgid "SOA record serial number" -msgstr "" - -msgid "SOA refresh" -msgstr "" - -msgid "SOA record refresh time" -msgstr "" - -msgid "SOA retry" -msgstr "" - -msgid "SOA record retry time" -msgstr "" - -msgid "SOA expire" -msgstr "" - -msgid "SOA record expire time" -msgstr "" - -msgid "SOA minimum" -msgstr "" - -msgid "How long should negative responses be cached" -msgstr "" - -msgid "Time to live for records at zone apex" -msgstr "" - -msgid "BIND update policy" -msgstr "" - -msgid "Dynamic update" -msgstr "" - -msgid "Allow dynamic updates." -msgstr "" - -msgid "Allow query" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" - -msgid "Allow transfer" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" - -msgid "Allow in-line DNSSEC signing" -msgstr "" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "" - -msgid "NSEC3PARAM record" -msgstr "" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" - -msgid "Resolve a host name in DNS." -msgstr "" - -msgid "Modify global DNS configuration." -msgstr "" - -msgid "Show the current global DNS configuration." -msgstr "" - -msgid "Create new DNS forward zone." -msgstr "" - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" - -msgid "Permission value" -msgstr "" - -msgid "Delete DNS forward zone." -msgstr "" - -msgid "Disable DNS Forward Zone." -msgstr "" - -msgid "Enable DNS Forward Zone." -msgstr "" - -msgid "Search for DNS forward zones." -msgstr "" - -msgid "Modify DNS forward zone." -msgstr "" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" - -msgid "Display information about a DNS forward zone." -msgstr "" - -msgid "Add new DNS resource record." -msgstr "" - -msgid "Force" -msgstr "" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "" - -msgid "Structured" -msgstr "" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" - -msgid "Delete DNS resource record." -msgstr "" - -msgid "Delete all associated records" -msgstr "" - -msgid "Delete DNS record entry." -msgstr "" - -msgid "Search for DNS resources." -msgstr "" - -msgid "Modify a DNS resource record." -msgstr "" - -msgid "Rename the DNS resource record object" -msgstr "" - -msgid "Display DNS resource." -msgstr "" - -msgid "Create new DNS zone (SOA record)." -msgstr "" - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" - -msgid "Add a permission for per-zone access delegation." -msgstr "" - -msgid "Delete DNS zone (SOA record)." -msgstr "" - -msgid "Disable DNS Zone." -msgstr "" - -msgid "Enable DNS Zone." -msgstr "" - -msgid "Search for DNS zones (SOA records)." -msgstr "" - -msgid "Forward zones only" -msgstr "" - -msgid "Search for forward zones only" -msgstr "" - -msgid "Modify DNS zone (SOA record)." -msgstr "" - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" - -msgid "Remove a permission for per-zone access delegation." -msgstr "" - -msgid "Display information about a DNS zone (SOA record)." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "Group name" -msgstr "" - -msgid "Group description" -msgstr "" - -msgid "GID" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Member users" -msgstr "" - -msgid "Member groups" -msgstr "" - -msgid "Member of groups" -msgstr "" - -msgid "Roles" -msgstr "" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Suppress processing of membership attributes." -msgstr "" - -msgid "Add members to a group." -msgstr "" - -msgid "External member" -msgstr "" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -msgid "member group" -msgstr "" - -msgid "groups to add" -msgstr "" - -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - -msgid "Delete group." -msgstr "" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "user" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "group" -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "netgroup" -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "role" -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "HBAC rule" -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "sudo rule" -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Rule name" -msgstr "" - -msgid "Rule type" -msgstr "" - -msgid "Rule type (allow)" -msgstr "" - -msgid "User category" -msgstr "" - -msgid "User category the rule applies to" -msgstr "" - -msgid "Host category" -msgstr "" - -msgid "Host category the rule applies to" -msgstr "" - -msgid "Service category" -msgstr "" - -msgid "Service category the rule applies to" -msgstr "" - -msgid "Enabled" -msgstr "" - -msgid "User Groups" -msgstr "" - -msgid "Host Groups" -msgstr "" - -msgid "Services" -msgstr "" - -msgid "Service Groups" -msgstr "" - -msgid "External host" -msgstr "" - -msgid "Create a new HBAC rule." -msgstr "" - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "member host" -msgstr "" - -msgid "hosts to add" -msgstr "" - -msgid "member host group" -msgstr "" - -msgid "host groups to add" -msgstr "" - -msgid "Add services to an HBAC rule." -msgstr "" - -msgid "member HBAC service" -msgstr "" - -msgid "HBAC services to add" -msgstr "" - -msgid "member HBAC service group" -msgstr "" - -msgid "HBAC service groups to add" -msgstr "" - -msgid "Add users and groups to an HBAC rule." -msgstr "" - -msgid "Delete an HBAC rule." -msgstr "" - -msgid "Disable an HBAC rule." -msgstr "" - -msgid "Enable an HBAC rule." -msgstr "" - -msgid "Search for HBAC rules." -msgstr "" - -msgid "Modify an HBAC rule." -msgstr "" - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "hosts to remove" -msgstr "" - -msgid "host groups to remove" -msgstr "" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "" - -msgid "HBAC services to remove" -msgstr "" - -msgid "HBAC service groups to remove" -msgstr "" - -msgid "Remove users and groups from an HBAC rule." -msgstr "" - -msgid "Display the properties of an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" - -msgid "Service name" -msgstr "" - -msgid "HBAC service" -msgstr "" - -msgid "HBAC service description" -msgstr "" - -msgid "Member of HBAC service groups" -msgstr "" - -msgid "Add a new HBAC service." -msgstr "" - -msgid "Delete an existing HBAC service." -msgstr "" - -msgid "Search for HBAC services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" - -msgid "Modify an HBAC service." -msgstr "" - -msgid "Display information about an HBAC service." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "Service group name" -msgstr "" - -msgid "HBAC service group description" -msgstr "" - -msgid "Member HBAC service" -msgstr "" - -msgid "Add a new HBAC service group." -msgstr "" - -msgid "Add members to an HBAC service group." -msgstr "" - -msgid "Delete an HBAC service group." -msgstr "" - -msgid "Search for an HBAC service group." -msgstr "" - -msgid "Modify an HBAC service group." -msgstr "" - -msgid "Remove members from an HBAC service group." -msgstr "" - -msgid "Display information about an HBAC service group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -msgid "User name" -msgstr "" - -msgid "Target host" -msgstr "" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host name" -msgstr "" - -msgid "A description of this host" -msgstr "" - -msgid "Locality" -msgstr "" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "" - -msgid "Platform" -msgstr "" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "" - -msgid "Operating system" -msgstr "" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "" - -#, fuzzy -msgid "User password" -msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" - -msgid "Password used in bulk enrollment" -msgstr "" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "" - -#, fuzzy -msgid "Random password" -msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" - -msgid "Certificate" -msgstr "" - -msgid "Base-64 encoded server certificate" -msgstr "" - -msgid "Principal name" -msgstr "" - -msgid "MAC address" -msgstr "" - -msgid "Hardware MAC address(es) on this host" -msgstr "" - -msgid "SSH public key" -msgstr "" - -msgid "Class" -msgstr "" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "Assigned ID View" -msgstr "" - -msgid "Requires pre-authentication" -msgstr "" - -msgid "Pre-authentication is required for the service" -msgstr "" - -msgid "Trusted for delegation" -msgstr "" - -msgid "Client credentials may be delegated to the service" -msgstr "" - -msgid "Member of host-groups" -msgstr "" - -msgid "Indirect Member of host-group" -msgstr "" - -msgid "Keytab" -msgstr "" - -msgid "Managed by" -msgstr "" - -msgid "Managing" -msgstr "" - -msgid "Users allowed to retrieve keytab" -msgstr "" - -msgid "Groups allowed to retrieve keytab" -msgstr "" - -msgid "Hosts allowed to retrieve keytab" -msgstr "" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "" - -#, fuzzy -msgid "Users allowed to create keytab" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, fuzzy -msgid "Groups allowed to create keytab" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, fuzzy -msgid "Hosts allowed to create keytab" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, fuzzy -msgid "Host Groups allowed to create keytab" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -msgid "Add a new host." -msgstr "" - -msgid "force host name even if not in DNS" -msgstr "" - -msgid "skip reverse DNS detection" -msgstr "" - -msgid "Add the host to DNS with this IP address" -msgstr "" - -msgid "Add hosts that can manage this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" - -msgid "Delete a host." -msgstr "" - -msgid "Remove entries from DNS" -msgstr "" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" - -msgid "Search for hosts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" - -msgid "host group" -msgstr "" - -msgid "Search for hosts with these member of host groups." -msgstr "" - -msgid "Search for hosts without these member of host groups." -msgstr "" - -msgid "Search for hosts with these member of netgroups." -msgstr "" - -msgid "Search for hosts without these member of netgroups." -msgstr "" - -msgid "Search for hosts with these member of roles." -msgstr "" - -msgid "Search for hosts without these member of roles." -msgstr "" - -msgid "Search for hosts with these member of HBAC rules." -msgstr "" - -msgid "Search for hosts without these member of HBAC rules." -msgstr "" - -msgid "Search for hosts with these member of sudo rules." -msgstr "" - -msgid "Search for hosts without these member of sudo rules." -msgstr "" - -msgid "Search for hosts with these enrolled by users." -msgstr "" - -msgid "Search for hosts without these enrolled by users." -msgstr "" - -msgid "host" -msgstr "" - -msgid "Search for hosts with these managed by hosts." -msgstr "" - -msgid "Search for hosts without these managed by hosts." -msgstr "" - -msgid "Search for hosts with these managing hosts." -msgstr "" - -msgid "Search for hosts without these managing hosts." -msgstr "" - -msgid "Modify information about a host." -msgstr "" - -msgid "Kerberos principal name for this host" -msgstr "" - -msgid "Update DNS entries" -msgstr "" - -msgid "Remove hosts that can manage this host." -msgstr "" - -msgid "Display information about a host." -msgstr "" - -msgid "file to store certificate in" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "Host-group" -msgstr "" - -msgid "Name of host-group" -msgstr "" - -msgid "A description of this host-group" -msgstr "" - -msgid "Member hosts" -msgstr "" - -msgid "Member host-groups" -msgstr "" - -msgid "Indirect Member hosts" -msgstr "" - -msgid "Indirect Member host-groups" -msgstr "" - -msgid "Add a new hostgroup." -msgstr "" - -msgid "Add members to a hostgroup." -msgstr "" - -msgid "Delete a hostgroup." -msgstr "" - -msgid "Search for hostgroups." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" - -msgid "Search for host groups with these member hosts." -msgstr "" - -msgid "Search for host groups without these member hosts." -msgstr "" - -msgid "Search for host groups with these member host groups." -msgstr "" - -msgid "Search for host groups without these member host groups." -msgstr "" - -msgid "Search for host groups with these member of host groups." -msgstr "" - -msgid "Search for host groups without these member of host groups." -msgstr "" - -msgid "Search for host groups with these member of netgroups." -msgstr "" - -msgid "Search for host groups without these member of netgroups." -msgstr "" - -msgid "Search for host groups with these member of HBAC rules." -msgstr "" - -msgid "Search for host groups without these member of HBAC rules." -msgstr "" - -msgid "Search for host groups with these member of sudo rules." -msgstr "" - -msgid "Search for host groups without these member of sudo rules." -msgstr "" - -msgid "Modify a hostgroup." -msgstr "" - -msgid "Remove members from a hostgroup." -msgstr "" - -msgid "Display information about a hostgroup." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "Range name" -msgstr "" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -msgid "Anchor to override" -msgstr "" - -msgid "Group ID Number" -msgstr "" - -msgid "User login" -msgstr "" - -msgid "UID" -msgstr "" - -msgid "User ID Number" -msgstr "" - -msgid "GECOS" -msgstr "" - -msgid "Home directory" -msgstr "" - -msgid "Login shell" -msgstr "" - -msgid "ID View Name" -msgstr "" - -msgid "Add a new Group ID override." -msgstr "" - -msgid "Delete an Group ID override." -msgstr "" - -msgid "Search for an Group ID override." -msgstr "" - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" - -msgid "Modify an Group ID override." -msgstr "" - -msgid "Rename the Group ID override object" -msgstr "" - -msgid "Display information about an Group ID override." -msgstr "" - -msgid "Add a new User ID override." -msgstr "" - -msgid "Delete an User ID override." -msgstr "" - -msgid "Search for an User ID override." -msgstr "" - -msgid "Modify an User ID override." -msgstr "" - -msgid "Rename the User ID override object" -msgstr "" - -msgid "Display information about an User ID override." -msgstr "" - -msgid "Add a new ID View." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" - -msgid "hosts" -msgstr "" - -msgid "Hosts to apply the ID View to" -msgstr "" - -msgid "hostgroups" -msgstr "" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" - -msgid "Hosts that this ID View was applied to." -msgstr "" - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" - -msgid "Number of hosts the ID View was applied to:" -msgstr "" - -msgid "Delete an ID View." -msgstr "" - -msgid "Search for an ID View." -msgstr "" - -msgid "Modify an ID View." -msgstr "" - -msgid "Rename the ID View object" -msgstr "" - -msgid "Display information about an ID View." -msgstr "" - -msgid "Enumerate all the hosts the view applies to." -msgstr "" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" - -msgid "Hosts to clear (any) ID View from." -msgstr "" - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" - -msgid "Hosts that ID View was cleared from." -msgstr "" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" - -msgid "Dict of I18N messages" -msgstr "" - -msgid "Export plugin meta-data for the webUI." -msgstr "" - -msgid "Name of object to export" -msgstr "" - -msgid "Name of method to export" -msgstr "" - -msgid "Name of command to export" -msgstr "" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" - -msgid "Join an IPA domain" -msgstr "" - -msgid "The hostname to register as" -msgstr "" - -msgid "The IPA realm" -msgstr "" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "" - -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" - -msgid "Manage ticket policy for specific user" -msgstr "" - -msgid "Max life" -msgstr "" - -msgid "Maximum ticket life (seconds)" -msgstr "" - -msgid "Max renew" -msgstr "" - -msgid "Maximum renewable age (seconds)" -msgstr "" - -msgid "Modify Kerberos ticket policy." -msgstr "" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "" - -msgid "Display the current Kerberos ticket policy." -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," -"cn=accounts' --group-container='cn=groups,cn=accounts' " -"ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' --user-ignore-" -"objectclass=radiusprofile --user-ignore-" -"attribute=radiusgroupname ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -msgid "Migrate users and groups from DS to IPA." -msgstr "" - -msgid "LDAP URI" -msgstr "" - -msgid "LDAP URI of DS server to migrate from" -msgstr "" - -msgid "bind password" -msgstr "" - -msgid "Bind DN" -msgstr "" - -msgid "User container" -msgstr "" - -msgid "DN of container for users in DS relative to base DN" -msgstr "" - -msgid "Group container" -msgstr "" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "" - -msgid "User object class" -msgstr "" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "" - -msgid "Group object class" -msgstr "" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "" - -msgid "Ignore user object class" -msgstr "" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore user attribute" -msgstr "" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore group object class" -msgstr "" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "Ignore group attribute" -msgstr "" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "" - -msgid "Overwrite GID" -msgstr "" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" - -msgid "LDAP schema" -msgstr "" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" - -msgid "Continue" -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" - -msgid "Base DN" -msgstr "" - -msgid "Base DN on remote LDAP server" -msgstr "" - -msgid "Ignore compat plugin" -msgstr "" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" - -msgid "CA certificate" -msgstr "" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "" - -msgid "groups to exclude from migration" -msgstr "" - -msgid "users to exclude from migration" -msgstr "" - -msgid "Lists of objects migrated; categorized by type." -msgstr "" - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" - -msgid "False if migration mode was disabled." -msgstr "" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" - -msgid "Show environment variables." -msgstr "" - -msgid "Forward to server instead of running locally" -msgstr "" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Total number of variables env (>= count)" -msgstr "" - -msgid "Number of variables returned (<= total)" -msgstr "" - -msgid "Show all loaded plugins." -msgstr "" - -msgid "Dictionary mapping plugin names to bases" -msgstr "" - -msgid "Number of plugins loaded" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "Netgroup name" -msgstr "" - -msgid "Netgroup description" -msgstr "" - -msgid "NIS domain name" -msgstr "" - -msgid "IPA unique ID" -msgstr "" - -msgid "Member netgroups" -msgstr "" - -msgid "Indirect Member netgroups" -msgstr "" - -msgid "Member User" -msgstr "" - -msgid "Member Group" -msgstr "" - -msgid "Member Host" -msgstr "" - -msgid "Member Hostgroup" -msgstr "" - -msgid "Add a new netgroup." -msgstr "" - -msgid "Add members to a netgroup." -msgstr "" - -msgid "member netgroup" -msgstr "" - -msgid "netgroups to add" -msgstr "" - -msgid "Delete a netgroup." -msgstr "" - -msgid "Search for a netgroup." -msgstr "" - -msgid "search for managed groups" -msgstr "" - -msgid "Search for netgroups with these member netgroups." -msgstr "" - -msgid "Search for netgroups without these member netgroups." -msgstr "" - -msgid "Search for netgroups with these member users." -msgstr "" - -msgid "Search for netgroups without these member users." -msgstr "" - -msgid "Search for netgroups with these member groups." -msgstr "" - -msgid "Search for netgroups without these member groups." -msgstr "" - -msgid "Search for netgroups with these member hosts." -msgstr "" - -msgid "Search for netgroups without these member hosts." -msgstr "" - -msgid "Search for netgroups with these member host groups." -msgstr "" - -msgid "Search for netgroups without these member host groups." -msgstr "" - -msgid "Search for netgroups with these member of netgroups." -msgstr "" - -msgid "Search for netgroups without these member of netgroups." -msgstr "" - -msgid "Modify a netgroup." -msgstr "" - -msgid "Remove members from a netgroup." -msgstr "" - -msgid "netgroups to remove" -msgstr "" - -msgid "Display information about a netgroup." -msgstr "" - -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" - -msgid "TOTP authentication Window" -msgstr "" - -msgid "TOTP authentication time variance (seconds)" -msgstr "" - -msgid "TOTP Synchronization Window" -msgstr "" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "" - -msgid "HOTP Authentication Window" -msgstr "" - -msgid "HOTP authentication skip-ahead" -msgstr "" - -msgid "HOTP Synchronization Window" -msgstr "" - -msgid "HOTP synchronization skip-ahead" -msgstr "" - -msgid "Modify OTP configuration options." -msgstr "" - -msgid "Show the current OTP configuration." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -msgid "Serial" -msgstr "" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -#, fuzzy -msgid "Set a user's password." -msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" - -#, fuzzy -msgid "New Password" -msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" - -msgid "Current Password" -msgstr "" - -msgid "OTP" -msgstr "" - -msgid "One Time Password" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -"\n" -"Managed permissions\n" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "Permission name" -msgstr "" - -msgid "Granted rights" -msgstr "" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" - -msgid "Effective attributes" -msgstr "" - -msgid "All attributes to which the permission applies" -msgstr "" - -msgid "Included attributes" -msgstr "" - -msgid "User-specified attributes to which the permission applies" -msgstr "" - -msgid "Excluded attributes" -msgstr "" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" - -msgid "Default attributes" -msgstr "" - -msgid "Attributes to which the permission applies by default" -msgstr "" - -#, fuzzy -msgid "Bind rule type" -msgstr "ਗ਼ਲਤ ਵਾਲਟ ਕਿਸਮ" - -msgid "Subtree to apply permissions to" -msgstr "" - -msgid "Extra target filter" -msgstr "" - -msgid "Raw target filter" -msgstr "" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" - -msgid "Target DN" -msgstr "" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" - -msgid "Member of group" -msgstr "" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "" - -msgid "User group to apply permissions to (sets target)" -msgstr "" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "" - -msgid "Deprecated; use extratargetfilter" -msgstr "" - -msgid "Deprecated; use ipapermlocation" -msgstr "" - -msgid "Deprecated; use ipapermright" -msgstr "" - -msgid "Granted to Privilege" -msgstr "" - -msgid "Indirect Member of roles" -msgstr "" - -msgid "Add a new permission." -msgstr "" - -msgid "Add members to a permission." -msgstr "" - -msgid "member privilege" -msgstr "" - -msgid "privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "" - -msgid "Permission flags" -msgstr "" - -msgid "Delete a permission." -msgstr "" - -msgid "force delete of SYSTEM permissions" -msgstr "" - -msgid "Search for permissions." -msgstr "" - -msgid "Modify a permission." -msgstr "" - -msgid "Rename the permission object" -msgstr "" - -msgid "Remove members from a permission." -msgstr "" - -msgid "privileges to remove" -msgstr "" - -msgid "Display information about a permission." -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "Ping a remote server." -msgstr "" - -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "" - -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" - -msgid "Privilege name" -msgstr "" - -msgid "Privilege description" -msgstr "" - -msgid "Granting privilege to roles" -msgstr "" - -msgid "Add a new privilege." -msgstr "" - -msgid "Add members to a privilege." -msgstr "" - -msgid "member role" -msgstr "" - -msgid "roles to add" -msgstr "" - -msgid "Add permissions to a privilege." -msgstr "" - -msgid "permission" -msgstr "" - -msgid "permissions" -msgstr "" - -msgid "Number of permissions added" -msgstr "" - -msgid "Delete a privilege." -msgstr "" - -msgid "Search for privileges." -msgstr "" - -msgid "Modify a privilege." -msgstr "" - -msgid "Rename the privilege object" -msgstr "" - -msgid "Remove members from a privilege" -msgstr "" - -msgid "roles to remove" -msgstr "" - -msgid "Remove permissions from a privilege." -msgstr "" - -msgid "Number of permissions removed" -msgstr "" - -msgid "Display information about a privilege." -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Group" -msgstr "" - -msgid "Manage password policy for specific group" -msgstr "" - -msgid "Max lifetime (days)" -msgstr "" - -msgid "Maximum password lifetime (in days)" -msgstr "" - -msgid "Min lifetime (hours)" -msgstr "" - -msgid "Minimum password lifetime (in hours)" -msgstr "" - -msgid "History size" -msgstr "" - -msgid "Password history size" -msgstr "" - -msgid "Character classes" -msgstr "" - -msgid "Minimum number of character classes" -msgstr "" - -msgid "Min length" -msgstr "" - -msgid "Minimum length of password" -msgstr "" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "" - -msgid "Max failures" -msgstr "" - -msgid "Consecutive failures before lockout" -msgstr "" - -msgid "Failure reset interval" -msgstr "" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "" - -msgid "Lockout duration" -msgstr "" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" - -msgid "Add a new group password policy." -msgstr "" - -msgid "Delete a group password policy." -msgstr "" - -msgid "Search for group password policies." -msgstr "" - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" - -msgid "Modify a group password policy." -msgstr "" - -msgid "Display information about password policy." -msgstr "" - -msgid "User" -msgstr "" - -msgid "Display effective policy for a specific user" -msgstr "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "RADIUS proxy server name" -msgstr "" - -msgid "A description of this RADIUS proxy server" -msgstr "" - -msgid "Server" -msgstr "" - -msgid "The hostname or IP (with or without port)" -msgstr "" - -msgid "Secret" -msgstr "" - -msgid "The secret used to encrypt data" -msgstr "" - -msgid "Timeout" -msgstr "" - -msgid "The total timeout across all retries (in seconds)" -msgstr "" - -msgid "Retries" -msgstr "" - -msgid "The number of times to retry authentication" -msgstr "" - -msgid "User attribute" -msgstr "" - -msgid "The username attribute on the user object" -msgstr "" - -msgid "Add a new RADIUS proxy server." -msgstr "" - -msgid "Delete a RADIUS proxy server." -msgstr "" - -msgid "Search for RADIUS proxy servers." -msgstr "" - -msgid "Modify a RADIUS proxy server." -msgstr "" - -msgid "Rename the RADIUS proxy server object" -msgstr "" - -msgid "Display information about a RADIUS proxy server." -msgstr "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Domain" -msgstr "" - -msgid "Add domain" -msgstr "" - -msgid "Delete domain" -msgstr "" - -msgid "Modify realm domains." -msgstr "" - -msgid "Force adding domain even if not in DNS" -msgstr "" - -msgid "Display the list of realm domains." -msgstr "" - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" - -msgid "Role name" -msgstr "" - -msgid "A description of this role-group" -msgstr "" - -msgid "Privileges" -msgstr "" - -msgid "Member services" -msgstr "" - -msgid "Add a new role." -msgstr "" - -msgid "Add members to a role." -msgstr "" - -msgid "member service" -msgstr "" - -msgid "services to add" -msgstr "" - -msgid "Add privileges to a role." -msgstr "" - -msgid "privilege" -msgstr "" - -msgid "privileges" -msgstr "" - -msgid "Number of privileges added" -msgstr "" - -msgid "Delete a role." -msgstr "" - -msgid "Search for roles." -msgstr "" - -msgid "Modify a role." -msgstr "" - -msgid "Rename the role object" -msgstr "" - -msgid "Remove members from a role." -msgstr "" - -msgid "services to remove" -msgstr "" - -msgid "Remove privileges from a role." -msgstr "" - -msgid "Number of privileges removed" -msgstr "" - -msgid "Display information about a role." -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "Self-service name" -msgstr "" - -msgid "Attributes to which the permission applies." -msgstr "" - -msgid "Add a new self-service permission." -msgstr "" - -msgid "Delete a self-service permission." -msgstr "" - -msgid "Search for a self-service permission." -msgstr "" - -msgid "Modify a self-service permission." -msgstr "" - -msgid "Display information about a self-service permission." -msgstr "" - -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" - -msgid "SELinux User" -msgstr "" - -msgid "HBAC Rule" -msgstr "" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "" - -msgid "Create a new SELinux User Map." -msgstr "" - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "" - -msgid "Delete a SELinux User Map." -msgstr "" - -msgid "Disable an SELinux User Map rule." -msgstr "" - -msgid "Enable an SELinux User Map rule." -msgstr "" - -msgid "Search for SELinux User Maps." -msgstr "" - -msgid "Modify a SELinux User Map." -msgstr "" - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "" - -msgid "Display the properties of a SELinux User Map rule." -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "Service principal" -msgstr "" - -msgid "PAC type" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" - -msgid "Add a new IPA new service." -msgstr "" - -msgid "force principal name even if not in DNS" -msgstr "" - -msgid "Add hosts that can manage this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Delete an IPA service." -msgstr "" - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Search for IPA services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" - -msgid "Search for services with these managed by hosts." -msgstr "" - -msgid "Search for services without these managed by hosts." -msgstr "" - -msgid "Modify an existing IPA service." -msgstr "" - -msgid "Remove hosts that can manage this service." -msgstr "" - -msgid "Display information about an IPA service." -msgstr "" - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" - -msgid "Sudo Command" -msgstr "" - -msgid "A description of this command" -msgstr "" - -msgid "Sudo Command Groups" -msgstr "" - -msgid "Create new Sudo Command." -msgstr "" - -msgid "Delete Sudo Command." -msgstr "" - -msgid "Search for Sudo Commands." -msgstr "" - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" - -msgid "Modify Sudo Command." -msgstr "" - -msgid "Display Sudo Command." -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "Sudo Command Group" -msgstr "" - -msgid "Commands" -msgstr "" - -msgid "Member Sudo commands" -msgstr "" - -msgid "Create new Sudo Command Group." -msgstr "" - -msgid "Add members to Sudo Command Group." -msgstr "" - -msgid "member sudo command" -msgstr "" - -msgid "sudo commands to add" -msgstr "" - -msgid "Delete Sudo Command Group." -msgstr "" - -msgid "Search for Sudo Command Groups." -msgstr "" - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" - -msgid "Modify Sudo Command Group." -msgstr "" - -msgid "Remove members from Sudo Command Group." -msgstr "" - -msgid "sudo commands to remove" -msgstr "" - -msgid "Display Sudo Command Group." -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -msgid "Domain name" -msgstr "" - -#, fuzzy -msgid "Trusted domain partner" -msgstr "ਕੋਈ ਟਰੱਸਟਡ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਕੀਤੀ ਹੈ" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "" - -msgid "Last name" -msgstr "" - -msgid "Full name" -msgstr "" - -msgid "Display name" -msgstr "" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Email address" -msgstr "" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -msgid "Pager Number" -msgstr "" - -msgid "Fax Number" -msgstr "" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Car License" -msgstr "" - -msgid "Account disabled" -msgstr "" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "" - -msgid "RADIUS proxy username" -msgstr "" - -msgid "Department Number" -msgstr "" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -msgid "Delete a user." -msgstr "" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "Command category" -msgstr "" - -msgid "Command category the rule applies to" -msgstr "" - -msgid "RunAs User category" -msgstr "" - -msgid "RunAs User category the rule applies to" -msgstr "" - -msgid "RunAs Group category" -msgstr "" - -msgid "RunAs Group category the rule applies to" -msgstr "" - -msgid "Sudo order" -msgstr "" - -msgid "integer to order the Sudo rules" -msgstr "" - -msgid "External User" -msgstr "" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -msgid "Host Masks" -msgstr "" - -msgid "Sudo Allow Commands" -msgstr "" - -msgid "Sudo Deny Commands" -msgstr "" - -msgid "Sudo Allow Command Groups" -msgstr "" - -msgid "Sudo Deny Command Groups" -msgstr "" - -msgid "RunAs Users" -msgstr "" - -msgid "Run as a user" -msgstr "" - -msgid "Groups of RunAs Users" -msgstr "" - -msgid "Run as any user within a specified group" -msgstr "" - -msgid "RunAs External User" -msgstr "" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -msgid "External Groups of RunAs Users" -msgstr "" - -msgid "External Groups of users that the command can run as" -msgstr "" - -msgid "RunAs Groups" -msgstr "" - -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -msgid "RunAs External Group" -msgstr "" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -msgid "Sudo Option" -msgstr "" - -msgid "Create new Sudo Rule." -msgstr "" - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "member sudo command group" -msgstr "" - -msgid "sudo command groups to add" -msgstr "" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "" - -msgid "Add group for Sudo to execute as." -msgstr "" - -msgid "Add users and groups for Sudo to execute as." -msgstr "" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "" - -msgid "Delete Sudo Rule." -msgstr "" - -msgid "Disable a Sudo Rule." -msgstr "" - -msgid "Enable a Sudo Rule." -msgstr "" - -msgid "Search for Sudo Rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -msgid "Modify Sudo Rule." -msgstr "" - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "sudo command groups to remove" -msgstr "" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "Remove an option from Sudo Rule." -msgstr "" - -msgid "Remove group for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "" - -msgid "Display Sudo Rule." -msgstr "" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "ACL name" -msgstr "" - -msgid "Profile category" -msgstr "" - -msgid "Profile category the ACL applies to" -msgstr "" - -msgid "User category the ACL applies to" -msgstr "" - -msgid "Host category the ACL applies to" -msgstr "" - -msgid "Service category the ACL applies to" -msgstr "" - -msgid "Profiles" -msgstr "" - -msgid "Create a new CA ACL." -msgstr "" - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "" - -msgid "Add profiles to a CA ACL." -msgstr "" - -msgid "member Certificate Profile" -msgstr "" - -msgid "Certificate Profiles to add" -msgstr "" - -msgid "Add services to a CA ACL." -msgstr "" - -msgid "Add users and groups to a CA ACL." -msgstr "" - -msgid "Delete a CA ACL." -msgstr "" - -msgid "Disable a CA ACL." -msgstr "" - -msgid "Enable a CA ACL." -msgstr "" - -msgid "Search for CA ACLs." -msgstr "" - -msgid "Modify a CA ACL." -msgstr "" - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "" - -msgid "Remove profiles from a CA ACL." -msgstr "" - -msgid "Certificate Profiles to remove" -msgstr "" - -msgid "Remove services from a CA ACL." -msgstr "" - -msgid "Remove users and groups from a CA ACL." -msgstr "" - -msgid "Display the properties of a CA ACL." -msgstr "" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" - -msgid "Query current Domain Level." -msgstr "" - -msgid "Current domain level:" -msgstr "" - -msgid "Change current Domain Level." -msgstr "" - -msgid "Domain Level" -msgstr "" - -msgid "Add certificates to host entry" -msgstr "" - -msgid "Remove certificates from host entry" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "Fallback to AD DC LDAP" -msgstr "" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" - -msgid "Add to default group" -msgstr "" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" - -msgid "Search scope" -msgstr "" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Target DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" - -msgid "Origin DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "Server name" -msgstr "" - -msgid "IPA server hostname" -msgstr "" - -msgid "Managed suffix" -msgstr "" - -msgid "Min domain level" -msgstr "" - -msgid "Minimum domain level" -msgstr "" - -msgid "Max domain level" -msgstr "" - -msgid "Maximum domain level" -msgstr "" - -msgid "Delete IPA server." -msgstr "" - -msgid "Search for IPA servers." -msgstr "" - -msgid "Show IPA server." -msgstr "" - -msgid "Add new certificates to a service" -msgstr "" - -msgid "Remove certificates from a service" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed Target" -msgstr "" - -msgid "Create a new service delegation rule." -msgstr "" - -msgid "Add member to a named service delegation rule." -msgstr "" - -msgid "member principal" -msgstr "" - -msgid "principal to add" -msgstr "" - -msgid "Add target to a named service delegation rule." -msgstr "" - -msgid "member service delegation target" -msgstr "" - -msgid "service delegation targets to add" -msgstr "" - -msgid "Delete service delegation." -msgstr "" - -msgid "Search for service delegations rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" - -msgid "Remove member from a named service delegation rule." -msgstr "" - -msgid "principal to remove" -msgstr "" - -msgid "Remove target from a named service delegation rule." -msgstr "" - -msgid "service delegation targets to remove" -msgstr "" - -msgid "Display information about a named service delegation rule." -msgstr "" - -msgid "Create a new service delegation target." -msgstr "" - -msgid "Add member to a named service delegation target." -msgstr "" - -msgid "Delete service delegation target." -msgstr "" - -msgid "Search for service delegation target." -msgstr "" - -msgid "Remove member from a named service delegation target." -msgstr "" - -msgid "Display information about a named service delegation target." -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" - -msgid "Activate a stage user." -msgstr "" - -msgid "Add a new stage user." -msgstr "" - -msgid "Create Stage user in from a delete user" -msgstr "" - -msgid "Delete a stage user." -msgstr "" - -msgid "Search for stage users." -msgstr "" - -msgid "Search for stage users with these member of groups." -msgstr "" - -msgid "Search for stage users without these member of groups." -msgstr "" - -msgid "Search for stage users with these member of netgroups." -msgstr "" - -msgid "Search for stage users without these member of netgroups." -msgstr "" - -msgid "Search for stage users with these member of roles." -msgstr "" - -msgid "Search for stage users without these member of roles." -msgstr "" - -msgid "Search for stage users with these member of HBAC rules." -msgstr "" - -msgid "Search for stage users without these member of HBAC rules." -msgstr "" - -msgid "Search for stage users with these member of sudo rules." -msgstr "" - -msgid "Search for stage users without these member of sudo rules." -msgstr "" - -msgid "Modify a stage user." -msgstr "" - -msgid "Rename the stage user object" -msgstr "" - -msgid "Display information about a stage user." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" - -msgid "Segment name" -msgstr "" - -msgid "Arbitrary string identifying the segment" -msgstr "" - -msgid "Left node" -msgstr "" - -msgid "Left replication node - an IPA server" -msgstr "" - -msgid "Right node" -msgstr "" - -msgid "Right replication node - an IPA server" -msgstr "" - -msgid "Connectivity" -msgstr "" - -msgid "Direction of replication between left and right replication node" -msgstr "" - -msgid "Attributes to strip" -msgstr "" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" - -msgid "Attributes to replicate" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" - -msgid "Attributes for total update" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" - -msgid "Session timeout" -msgstr "" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" - -msgid "Replication agreement enabled" -msgstr "" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" - -msgid "Suffix name" -msgstr "" - -msgid "LDAP suffix to be managed" -msgstr "" - -msgid "Add a new segment." -msgstr "" - -msgid "Delete a segment." -msgstr "" - -msgid "Search for topology segments." -msgstr "" - -msgid "Modify a segment." -msgstr "" - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" - -msgid "Initialize left node" -msgstr "" - -msgid "Initialize right node" -msgstr "" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "" - -msgid "Display a segment." -msgstr "" - -msgid "Add a new topology suffix to be managed." -msgstr "" - -msgid "Delete a topology suffix." -msgstr "" - -msgid "Search for topology suffices." -msgstr "" - -msgid "Modify a topology suffix." -msgstr "" - -msgid "Show managed suffix." -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "Preserved user" -msgstr "" - -msgid "Add one or more certificates to the user entry" -msgstr "" - -msgid "Remove one or more certificates to the user entry" -msgstr "" - -msgid "Move deleted user into staged area" -msgstr "" - -msgid "Undelete a delete user account." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "Vault name" -msgstr "" - -msgid "Vault description" -msgstr "" - -#, fuzzy -msgid "Vault type" -msgstr "ਗ਼ਲਤ ਵਾਲਟ ਕਿਸਮ" - -msgid "Salt" -msgstr "" - -msgid "Vault salt" -msgstr "" - -msgid "Public key" -msgstr "" - -msgid "Vault public key" -msgstr "" - -msgid "Owner users" -msgstr "" - -msgid "Owner groups" -msgstr "" - -msgid "Owner services" -msgstr "" - -msgid "Failed owners" -msgstr "" - -msgid "Vault service" -msgstr "" - -msgid "Shared vault" -msgstr "" - -msgid "Vault user" -msgstr "" - -msgid "Transport Certificate" -msgstr "" - -msgid "Service name of the service vault" -msgstr "" - -msgid "Username of the user vault" -msgstr "" - -msgid "Add members to a vault." -msgstr "" - -msgid "Add owners to a vault." -msgstr "" - -msgid "owner user" -msgstr "" - -msgid "owner group" -msgstr "" - -msgid "owner service" -msgstr "" - -msgid "Owners that could not be added" -msgstr "" - -msgid "Number of owners added" -msgstr "" - -msgid "Session key wrapped with transport certificate" -msgstr "" - -msgid "Vault data encrypted with session key" -msgstr "" - -msgid "Nonce" -msgstr "" - -msgid "Delete a vault." -msgstr "" - -msgid "Search for vaults." -msgstr "" - -msgid "List all service vaults" -msgstr "" - -msgid "List all user vaults" -msgstr "" - -msgid "Remove members from a vault." -msgstr "" - -msgid "Remove owners from a vault." -msgstr "" - -msgid "Owners that could not be removed" -msgstr "" - -msgid "Number of owners removed" -msgstr "" - -msgid "Display information about a vault." -msgstr "" - -msgid "Show vault configuration." -msgstr "" - -msgid "Output file to store the transport certificate" -msgstr "" - -msgid "Add owners to a vault container." -msgstr "" - -msgid "Delete a vault container." -msgstr "" - -msgid "Remove owners from a vault container." -msgstr "" - -msgid "Display information about a vault container." -msgstr "" - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "" - -msgid "Hostname (FQDN)" -msgstr "" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Managed suffixes" -msgstr "" - -msgid "Check connection to remote IPA server." -msgstr "" - -msgid "Remote server name" -msgstr "" - -msgid "Remote IPA server hostname" -msgstr "" - -msgid "suffix" -msgstr "" - -msgid "Search for servers with these managed suffixes." -msgstr "" - -msgid "Search for servers without these managed suffixes." -msgstr "" - -msgid "Add a manager to the stage user entry" -msgstr "" - -msgid "Remove a manager to the stage user entry" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -msgid "Managed LDAP suffix DN" -msgstr "" - -msgid "Search for topology suffixes." -msgstr "" - -msgid "Add a manager to the user entry" -msgstr "" - -msgid "Remove a manager to the user entry" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Comma-separated list of attributes" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" - -msgid "DNS class" -msgstr "" - -msgid "Comma-separated list of raw A records" -msgstr "" - -msgid "Comma-separated list of raw AAAA records" -msgstr "" - -msgid "Comma-separated list of raw A6 records" -msgstr "" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "" - -msgid "Comma-separated list of raw APL records" -msgstr "" - -msgid "Comma-separated list of raw CERT records" -msgstr "" - -msgid "Comma-separated list of raw CNAME records" -msgstr "" - -msgid "Comma-separated list of raw DHCID records" -msgstr "" - -msgid "Comma-separated list of raw DLV records" -msgstr "" - -msgid "Comma-separated list of raw DNAME records" -msgstr "" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "" - -msgid "Comma-separated list of raw DS records" -msgstr "" - -msgid "Comma-separated list of raw HIP records" -msgstr "" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "" - -msgid "Comma-separated list of raw KEY records" -msgstr "" - -msgid "KEY Flags" -msgstr "" - -msgid "KEY Protocol" -msgstr "" - -msgid "Protocol" -msgstr "" - -msgid "KEY Algorithm" -msgstr "" - -msgid "KEY Public Key" -msgstr "" - -msgid "Public Key" -msgstr "" - -msgid "Comma-separated list of raw KX records" -msgstr "" - -msgid "Comma-separated list of raw LOC records" -msgstr "" - -msgid "Comma-separated list of raw MX records" -msgstr "" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "" - -msgid "Comma-separated list of raw NS records" -msgstr "" - -msgid "Comma-separated list of raw NSEC records" -msgstr "" - -msgid "NSEC Next Domain Name" -msgstr "" - -msgid "Next Domain Name" -msgstr "" - -msgid "NSEC Type Map" -msgstr "" - -msgid "Type Map" -msgstr "" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "" - -msgid "Comma-separated list of raw PTR records" -msgstr "" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "" - -msgid "RRSIG Type Covered" -msgstr "" - -msgid "Type Covered" -msgstr "" - -msgid "RRSIG Algorithm" -msgstr "" - -msgid "RRSIG Labels" -msgstr "" - -msgid "Labels" -msgstr "" - -msgid "RRSIG Original TTL" -msgstr "" - -msgid "Original TTL" -msgstr "" - -msgid "RRSIG Signature Expiration" -msgstr "" - -msgid "Signature Expiration" -msgstr "" - -msgid "RRSIG Signature Inception" -msgstr "" - -msgid "Signature Inception" -msgstr "" - -msgid "RRSIG Key Tag" -msgstr "" - -msgid "RRSIG Signer's Name" -msgstr "" - -msgid "Signer's Name" -msgstr "" - -msgid "RRSIG Signature" -msgstr "" - -msgid "Signature" -msgstr "" - -msgid "Comma-separated list of raw RP records" -msgstr "" - -msgid "Comma-separated list of raw SIG records" -msgstr "" - -msgid "SIG Type Covered" -msgstr "" - -msgid "SIG Algorithm" -msgstr "" - -msgid "SIG Labels" -msgstr "" - -msgid "SIG Original TTL" -msgstr "" - -msgid "SIG Signature Expiration" -msgstr "" - -msgid "SIG Signature Inception" -msgstr "" - -msgid "SIG Key Tag" -msgstr "" - -msgid "SIG Signer's Name" -msgstr "" - -msgid "SIG Signature" -msgstr "" - -msgid "Comma-separated list of raw SPF records" -msgstr "" - -msgid "Comma-separated list of raw SRV records" -msgstr "" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "" - -msgid "Comma-separated list of raw TA records" -msgstr "" - -msgid "Comma-separated list of raw TKEY records" -msgstr "" - -msgid "Comma-separated list of raw TSIG records" -msgstr "" - -msgid "Comma-separated list of raw TXT records" -msgstr "" - -msgid "SOA time to live" -msgstr "" - -msgid "SOA record time to live" -msgstr "" - -msgid "SOA class" -msgstr "" - -msgid "SOA record class" -msgstr "" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" - -msgid "Consume an entitlement." -msgstr "" - -msgid "Quantity" -msgstr "" - -msgid "Search for entitlement accounts." -msgstr "" - -msgid "Retrieve the entitlement certs." -msgstr "" - -msgid "Import an entitlement certificate." -msgstr "" - -msgid "UUID" -msgstr "" - -msgid "Enrollment UUID" -msgstr "" - -msgid "Register to the entitlement system." -msgstr "" - -msgid "Username" -msgstr "" - -msgid "Enrollment UUID (not implemented)" -msgstr "" - -#, fuzzy -msgid "Registration password" -msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" - -msgid "Display current entitlements." -msgstr "" - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" - -msgid "comma-separated list of users to add" -msgstr "" - -msgid "comma-separated list of groups to add" -msgstr "" - -msgid "comma-separated list of users to remove" -msgstr "" - -msgid "comma-separated list of groups to remove" -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Source host category" -msgstr "" - -msgid "Source host category the rule applies to" -msgstr "" - -msgid "Source Hosts" -msgstr "" - -msgid "Source Host Groups" -msgstr "" - -msgid "comma-separated list of hosts to add" -msgstr "" - -msgid "comma-separated list of host groups to add" -msgstr "" - -msgid "comma-separated list of HBAC services to add" -msgstr "" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "" - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "" - -msgid "comma-separated list of hosts to remove" -msgstr "" - -msgid "comma-separated list of host groups to remove" -msgstr "" - -msgid "comma-separated list of HBAC services to remove" -msgstr "" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" - -msgid "Source host" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "comma-separated list of netgroups to add" -msgstr "" - -msgid "comma-separated list of netgroups to remove" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" - -msgid "Target members of a group" -msgstr "" - -msgid "User group to apply permissions to" -msgstr "" - -msgid "comma-separated list of privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI" -msgstr "" - -msgid "Permission type" -msgstr "" - -msgid "comma-separated list of privileges to remove" -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "comma-separated list of roles to add" -msgstr "" - -msgid "comma-separated list of permissions" -msgstr "" - -msgid "comma-separated list of roles to remove" -msgstr "" - -msgid "comma-separated list of privileges" -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "comma-separated list of sudo commands to add" -msgstr "" - -msgid "comma-separated list of sudo commands to remove" -msgstr "" - -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" - -msgid "comma-separated list of sudo command groups to add" -msgstr "" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "" - -msgid "Failed members" -msgstr "" - -msgid "Failed source hosts/hostgroups" -msgstr "" - -msgid "Failed hosts/hostgroups" -msgstr "" - -msgid "Failed users/groups" -msgstr "" - -msgid "Failed service/service groups" -msgstr "" - -#, fuzzy -msgid "Failed to remove" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -msgid "Failed RunAs" -msgstr "" - -msgid "Failed RunAsGroup" -msgstr "" - -msgid "Failed profiles" -msgstr "" - -msgid "Failed CAs" -msgstr "" - -msgid "Failed member manager" -msgstr "" - -msgid "Failed managedby" -msgstr "" - -#, fuzzy -msgid "Failed allowed to retrieve keytab" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, fuzzy -msgid "Failed allowed to create keytab" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, fuzzy -msgid "Failed targets" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "" - -msgid "an internal error has occurred" -msgstr "" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "" - -msgid "did not receive Kerberos credentials" -msgstr "" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -msgid "No credentials cache found" -msgstr "" - -msgid "Ticket expired" -msgstr "" - -msgid "Credentials cache permissions incorrect" -msgstr "" - -msgid "Bad format in credentials cache" -msgstr "" - -msgid "Cannot resolve KDC for requested realm" -msgstr "" - -msgid "Session error" -msgstr "" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#, python-format -msgid "'%(name)s' is required" -msgstr "" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - -msgid "Passwords do not match" -msgstr "" - -msgid "Command not implemented" -msgstr "" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -#, python-format -msgid "%(reason)s" -msgstr "" - -msgid "This entry already exists" -msgstr "" - -msgid "You must enroll a host in order to create a host service" -msgstr "" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" - -msgid "This command requires root access" -msgstr "" - -msgid "This is already a posix group" -msgstr "" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -msgid "This entry is already enabled" -msgstr "" - -msgid "This entry is already disabled" -msgstr "" - -msgid "This entry cannot be enabled or disabled" -msgstr "" - -msgid "This entry is not a member" -msgstr "" - -msgid "A group may not be a member of itself" -msgstr "" - -msgid "This entry is already a member" -msgstr "" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "" - -msgid "A group may not be added as a member of itself" -msgstr "" - -msgid "The default users group cannot be removed" -msgstr "" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -msgid "This group already allows external members" -msgstr "" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "change collided with another change" -msgstr "" - -msgid "no modifications to be performed" -msgstr "" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "" - -msgid "limits exceeded for this query" -msgstr "" - -#, python-format -msgid "%(info)s" -msgstr "" - -msgid "modifying primary key is not allowed" -msgstr "" - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "" - -msgid "Already registered" -msgstr "" - -msgid "Not registered yet" -msgstr "" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, python-format -msgid "%(exception)s" -msgstr "" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -#, python-format -msgid "%(count)d variables" -msgstr "" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" -msgstr[1] "" - -msgid "A dictionary representing an LDAP entry" -msgstr "" - -msgid "A list of LDAP entries" -msgstr "" - -msgid "All commands should at least have a result" -msgstr "" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "" - -msgid "Passwords do not match!" -msgstr "" - -msgid "No matching entries found" -msgstr "" - -msgid "Topic or Command" -msgstr "" - -msgid "The topic or command name." -msgstr "" - -msgid "Topic commands:" -msgstr "" - -msgid "To get command help, use:" -msgstr "" - -msgid " ipa --help" -msgstr "" - -msgid "Command name" -msgstr "" - -msgid "Positional arguments" -msgstr "" - -#, python-format -msgid "Same as --%s" -msgstr "" - -msgid "Deprecated options" -msgstr "" - -msgid "No file to read" -msgstr "" - -msgid "Results are truncated, try a more specific search" -msgstr "" +msgid "Trust setup" +msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" #, python-format msgid "Unknown option: %(option)s" msgstr "ਅਣਪਛਾਤੀ ਚੋਣ: %(option)s" -msgid "Client version. Used to determine if server will accept request." -msgstr "" - -#, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -#, fuzzy -msgid "any of the configured servers" -msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - -msgid "Filename is empty" -msgstr "" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -msgid "invalid domain name" -msgstr "" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "incorrect type" -msgstr "" - -msgid "Only one value is allowed" -msgstr "" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "" - -msgid "must be an integer" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -msgid "must be a decimal number" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -msgid "must be binary data" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -msgid "must be a certificate" -msgstr "" - -msgid "must be a certificate signing request" -msgstr "" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "" - -msgid "Leading and trailing spaces are not allowed" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "" - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "" - -#, python-format -msgid "must be '%(value)s'" -msgstr "" - -#, python-format -msgid "must be one of %(values)s" -msgstr "" - -msgid "must be datetime value" -msgstr "" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -msgid "must be DNS name" -msgstr "" - -msgid "must be absolute" -msgstr "" - -msgid "must be relative" -msgstr "" - -msgid "must be dictionary" -msgstr "" - -msgid "must be Kerberos principal" -msgstr "" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -msgid "Service principal is required" -msgstr "" - -msgid "must be at least 0" -msgstr "" - -#, fuzzy -#| msgid "Invalid vault type" -msgid "invalid valid hex" -msgstr "ਗ਼ਲਤ ਵਾਲਟ ਕਿਸਮ" - -#, fuzzy -msgid "invalid serial number 0" -msgstr "ਗ਼ਲਤ ਵਾਲਟ ਕਿਸਮ" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "" - -#, python-format -msgid "objectclass %s not found" -msgstr "" - -#, fuzzy -msgid "Trusting forest" -msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" - -#, fuzzy -msgid "Trusted forest" -msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "Failed to authenticate to CA REST API" -msgstr "" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "" - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -msgid "Automount Location" -msgstr "" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -#, fuzzy -msgid "CA is not configured" -msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -#, fuzzy -msgid "DNS is not configured" -msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "" - -msgid "User Group" -msgstr "" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "host groups" -msgstr "" - -msgid "Host Group" -msgstr "" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" - -msgid "hostgroup" -msgstr "" - -msgid "privileged hostgroup" -msgstr "" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -#, fuzzy -msgid "Auto private groups" -msgstr "ਪੁਰਾਣੀ ਵਾਲਟ ਪ੍ਰਾਈਵੇਟ ਕੁੰਜੀ" - -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "" - -msgid "locations" -msgstr "" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -msgid "Location name" -msgstr "" - -msgid "IPA location name" -msgstr "" - -msgid "IPA Location description" -msgstr "" - -msgid "Servers" -msgstr "" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -msgid "Delete an IPA location." -msgstr "" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -msgid "IPA Server" -msgstr "" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -msgid "netgroups" -msgstr "" - -msgid "Netgroups" -msgstr "" - -msgid "Netgroup" -msgstr "" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" -msgstr "" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" -msgstr "" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -#, fuzzy -msgid "invalid attribute name" -msgstr "ਗ਼ਲਤ ਵਾਲਟ ਕਿਸਮ" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "Role" -msgstr "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -msgid "Self Service Permissions" -msgstr "" - -msgid "Self Service Permission" -msgstr "" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "IPA role name" -msgstr "" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -msgid "Subordinate id description" -msgstr "" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -msgid "SubUID range size" -msgstr "" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -msgid "SubGID range size" -msgstr "" - -msgid "Subordinate group ID count" -msgstr "" - -#, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "" - -#, python-format -msgid "'%(dn)s is not a valid user" -msgstr "" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -msgid "Add a new subordinate id." -msgstr "" - -#, python-format -msgid "Added subordinate id \"%(value)s\"" -msgstr "" - -msgid "Delete a subordinate id." -msgstr "" - -#, python-format -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "" - -msgid "Modify a subordinate id." -msgstr "" - -#, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "" - -msgid "Search for subordinate id." -msgstr "" - -#, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a subordinate id." -msgstr "" - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -msgid "sudo command" -msgstr "" - -msgid "sudo commands" -msgstr "" - -msgid "Sudo Commands" -msgstr "" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -msgid "servers" -msgstr "" - -msgid "IPA Servers" -msgstr "" - -msgid "Server location" -msgstr "" - -msgid "Service weight" -msgstr "" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -msgid "Server state" -msgstr "" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "A list of ACI values" -msgstr "" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Auto Membership is not configured" -msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -#, fuzzy -msgid "attribute is not configurable" -msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -msgstr "" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -msgid "" -"\n" -"Managed permissions\n" -msgstr "" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "must be enclosed in parentheses" -msgstr "" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, python-format -msgid "Deprecated; use %s" -msgstr "" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, python-format -msgid "Entry %s not found" -msgstr "" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, python-format -msgid "Entry %s does not exist" -msgstr "" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -msgid "Help topic" -msgstr "" - -msgid "Version" -msgstr "" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -msgid "Method name" -msgstr "" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -#, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "" - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -msgid "CLI name" -msgstr "" - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -#, fuzzy -msgid "AD Trust setup" -msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -#, fuzzy -msgid "Trusts" -msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" - -#, fuzzy -msgid "Trust" -msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -#, fuzzy -msgid "Trust direction" -msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" - -#, fuzzy -msgid "Trust type" -msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" - -#, fuzzy -msgid "Trust status" -msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -#, fuzzy -msgid "trust type" -msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" - -msgid "trust configuration" -msgstr "" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -#, fuzzy -msgid "IPA AD trust controllers" -msgstr "AD ਡੋਮੇਨ ਕੰਟਰੋਲਰ" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -#, fuzzy -msgid "Trusted domains" -msgstr "ਕੋਈ ਟਰੱਸਟਡ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਕੀਤੀ ਹੈ" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -msgid "Vault configuration" -msgstr "" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -msgid "Key wrapping algorithm" -msgstr "" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." -msgstr "" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "Principal alias" -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -msgid "External IdP configuration" -msgstr "" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "Certificate mapping data" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -msgid "Issuer" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -msgid "users cannot be added when user category='all'" -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "" - -#, python-format -msgid "%i services added." -msgstr "" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -msgid "User logins" -msgstr "" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "must be at least 10" -msgstr "" - -msgid "configuration options" -msgstr "" - -msgid "Configuration" -msgstr "" - -msgid "Maximum hostname length" -msgstr "" - -msgid "Enable adding subids to new users" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -msgid "IPA DNS servers" -msgstr "" - -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Setup SID configuration" -msgstr "" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -msgid "Add SIDs" -msgstr "" - -msgid "Add SIDs for existing users and groups" -msgstr "" - -msgid "NetBIOS name of the IPA domain" -msgstr "" - -#, fuzzy -msgid "Empty domain is not allowed" -msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -#, fuzzy -msgid "not allowed to enable SID generation" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -#, fuzzy -msgid "Failed to call DBus" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -msgid "Configuration of SID failed. See details in the error log" -msgstr "" - -msgid "The group doesn't exist" -msgstr "" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, python-format -msgid "%s Record" -msgstr "" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -msgid "Priority (order)" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -msgid "Only one zone type is allowed per zone name" -msgstr "" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -msgid "Default time to live" -msgstr "" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "" - -msgid "is required" -msgstr "" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -msgid "DNS configuration options" -msgstr "" - -msgid "DNS Global Configuration" -msgstr "" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -msgid "Result of the command" -msgstr "" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "Serial Number" -msgstr "" - -msgid "Serial Number (hex)" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" - -msgid "Invalid URI: not an https scheme" -msgstr "" - -msgid "Invalid URI: missing netloc" -msgstr "" - -msgid "Identity Provider server" -msgstr "" - -msgid "Identity Provider servers" -msgstr "" - -msgid "Identity Provider server name" -msgstr "" - -msgid "Authorization URI" -msgstr "" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -msgid "Token URI" -msgstr "" - -msgid "Token endpoint" -msgstr "" - -msgid "User info URI" -msgstr "" - -msgid "User information endpoint" -msgstr "" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -msgid "Client identifier" -msgstr "" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -msgid "Add a new Identity Provider server." -msgstr "" - -#, python-format -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -msgid "Base URL" -msgstr "" - -msgid "Base URL for IdP provider templates" -msgstr "" - -msgid "unknown provider" -msgstr "" - -msgid "value is missing" -msgstr "" - -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "" - -msgid "Delete an Identity Provider server." -msgstr "" - -#, python-format -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "Modify an Identity Provider server." -msgstr "" - -#, python-format -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "Search for Identity Provider servers." -msgstr "" - -#, python-format -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an Identity Provider server." -msgstr "" - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Apply" -msgstr "" - -msgid "Rebuild auto membership" -msgstr "" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -msgid "Actions" -msgstr "" - -msgid "Add" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -msgid "Direct Membership" -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -msgid "No entries." -msgstr "" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -msgid "Remove" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -msgid "Show Results" -msgstr "" - -msgid "Authentication indicators" -msgstr "" - -msgid "Authentication indicator" -msgstr "" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -msgid "RADIUS" -msgstr "" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "External Identity Provider" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "" - -msgid "Activate" -msgstr "" - -msgid "Add and Add Another" -msgstr "" - -msgid "Add and Close" -msgstr "" - -msgid "Add and Edit" -msgstr "" - -msgid "Add Many" -msgstr "" - -msgid "Back" -msgstr "" - -msgid "Cancel" -msgstr "" - -msgid "Clear" -msgstr "" - -msgid "Clear all fields on the page." -msgstr "" - -msgid "Close" -msgstr "" - -msgid "Disable" -msgstr "" - -msgid "Download" -msgstr "" - -msgid "Download certificate as PEM formatted file." -msgstr "" - -msgid "Edit" -msgstr "" - -msgid "Enable" -msgstr "" - -msgid "Find" -msgstr "" - -msgid "Get" -msgstr "" - -msgid "Hide" -msgstr "" - -msgid "Issue" -msgstr "" - -msgid "Match" -msgstr "" - -msgid "Match users according to certificate." -msgstr "" - -msgid "Migrate" -msgstr "" - -msgid "OK" -msgstr "" - -msgid "Refresh" -msgstr "" - -msgid "Reload current settings from the server." -msgstr "" - -msgid "Delete" -msgstr "" - -msgid "Remove hold" -msgstr "" - -msgid "Reset" -msgstr "" - -#, fuzzy -msgid "Reset Password" -msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" - -msgid "Reset Password and Log in" -msgstr "" - -msgid "Restore" -msgstr "" - -msgid "Retry" -msgstr "" - -msgid "Revert" -msgstr "" - -msgid "Revoke" -msgstr "" - -msgid "Save" -msgstr "" - -msgid "Set" -msgstr "" - -msgid "Show" -msgstr "" - -msgid "Stage" -msgstr "" - -msgid "Update" -msgstr "" - -msgid "View" -msgstr "" - -msgid "Customization" -msgstr "" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "" - -msgid "Expand All" -msgstr "" - -msgid "General" -msgstr "" - -msgid "Identity Settings" -msgstr "" - -msgid "Record Settings" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -msgid "Back to Top" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -msgid "Add custom value" -msgstr "" - -msgid "Available" -msgstr "" - -msgid "Some operations failed." -msgstr "" - -msgid "Operations Error" -msgstr "" - -msgid "Confirmation" -msgstr "" - -msgid "Custom value" -msgstr "" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -msgid "Unsaved Changes" -msgstr "" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "" - -msgid "Hide details" -msgstr "" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -msgid "Redirection" -msgstr "" - -msgid "Select entries to be removed." -msgstr "" - -msgid "Result" -msgstr "" - -msgid "Show details" -msgstr "" - -msgid "Success" -msgstr "" - -msgid "Validation error" -msgstr "" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "" - -msgid "HTTP Error" -msgstr "" - -msgid "Internal Error" -msgstr "" - -msgid "IPA Error" -msgstr "" - -msgid "No response" -msgstr "" - -msgid "Unknown Error" -msgstr "" - -msgid "URL" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -msgid "Settings" -msgstr "" - -msgid "Search" -msgstr "" - -msgid "False" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Allowed to create keytab" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, fuzzy -msgid "Allowed to retrieve keytab" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Add Kerberos Principal Alias" -msgstr "" - -msgid "New kerberos principal alias" -msgstr "" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "" - -msgid "Authenticating" -msgstr "" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -msgid "Kerberos Principal you entered is expired" -msgstr "" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -msgid "Log In Using Certificate" -msgstr "" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "" - -msgid "Synchronizing" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -msgid "number of passwords" -msgstr "" - -msgid "seconds" -msgstr "" - -msgid "Migrating" -msgstr "" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -msgid "Password migration was not successful" -msgstr "" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -msgid "Password migration was successful" -msgstr "" - -msgid "Attribute" -msgstr "" - -msgid "Add delegation" -msgstr "" - -msgid "Remove delegations" -msgstr "" - -msgid "Add permission" -msgstr "" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -msgid "Remove permissions" -msgstr "" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -msgid "Remove privileges" -msgstr "" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -msgid "Role Settings" -msgstr "" - -msgid "Add role" -msgstr "" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -msgid "Remove roles" -msgstr "" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -msgid "Add self service permission" -msgstr "" - -msgid "Remove self service permissions" -msgstr "" - -msgid "Add rule" -msgstr "" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to change default group?" -msgstr "" - -msgid "Default host group" -msgstr "" - -msgid "Default user group" -msgstr "" - -msgid "Exclusive" -msgstr "" - -msgid "Expression" -msgstr "" - -msgid "Host group rule" -msgstr "" - -msgid "Host group rules" -msgstr "" - -msgid "Inclusive" -msgstr "" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -msgid "User group rule" -msgstr "" - -msgid "User group rules" -msgstr "" - -msgid "Add automount key" -msgstr "" - -msgid "Remove automount keys" -msgstr "" - -msgid "Add automount location" -msgstr "" - -msgid "Automount Location Settings" -msgstr "" - -msgid "Remove automount locations" -msgstr "" - -msgid "Add automount map" -msgstr "" - -msgid "Map Type" -msgstr "" - -msgid "Direct" -msgstr "" - -msgid "Indirect" -msgstr "" - -msgid "Remove automount maps" -msgstr "" - -msgid "Add certificate authority" -msgstr "" - -msgid "Remove certificate authorities" -msgstr "" - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -msgid "All" -msgstr "" - -msgid "Any CA" -msgstr "" - -msgid "Any Host" -msgstr "" - -msgid "Any Service" -msgstr "" - -msgid "Any Profile" -msgstr "" - -msgid "Anyone" -msgstr "" - -msgid "Rule status" -msgstr "" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -msgid "Remove CA ACLs" -msgstr "" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -msgid "Specified CAs" -msgstr "" - -msgid "Specified Hosts and Groups" -msgstr "" - -msgid "Specified Profiles" -msgstr "" - -msgid "Specified Services and Groups" -msgstr "" - -msgid "Specified Users and Groups" -msgstr "" - -msgid "Permitted to have certificates issued" -msgstr "" - -msgid "Remove certificate profiles" -msgstr "" - -msgid "AA Compromise" -msgstr "" - -msgid "Add principal" -msgstr "" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" - -msgid "Certificates" -msgstr "" - -msgid "Certificate Hold" -msgstr "" - -msgid "Cessation of Operation" -msgstr "" - -msgid "Common Name" -msgstr "" - -msgid "the certificate with serial number " -msgstr "" - -msgid "Expires On" -msgstr "" - -msgid "Issued on from" -msgstr "" - -msgid "Issued on to" -msgstr "" - -msgid "Maximum serial number" -msgstr "" - -msgid "Minimum serial number" -msgstr "" - -msgid "Revoked on from" -msgstr "" - -msgid "Revoked on to" -msgstr "" - -msgid "Valid not after from" -msgstr "" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -msgid "Fingerprints" -msgstr "" - -msgid "Get Certificate" -msgstr "" - -msgid "Certificate Hold Removed" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -msgid "Issue new certificate" -msgstr "" - -msgid "Issued By" -msgstr "" - -msgid "Issued On" -msgstr "" - -msgid "Issued To" -msgstr "" - -msgid "Key Compromise" -msgstr "" - -msgid "No Valid Certificate" -msgstr "" - -msgid "New Certificate" -msgstr "" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -msgid "Note" -msgstr "" - -msgid "Organizational Unit" -msgstr "" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -msgid "Privilege Withdrawn" -msgstr "" - -msgid "Reason for Revocation" -msgstr "" - -msgid "Remove certificate hold" -msgstr "" - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -msgid "Certificate requested" -msgstr "" - -msgid "Revoke certificate" -msgstr "" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -msgid "Certificate Revoked" -msgstr "" - -msgid "REVOKED" -msgstr "" - -msgid "SHA1 Fingerprint" -msgstr "" - -msgid "SHA256 Fingerprint" -msgstr "" - -msgid "Status" -msgstr "" - -msgid "Superseded" -msgstr "" - -msgid "Unspecified" -msgstr "" - -msgid "Valid Certificate Present" -msgstr "" - -msgid "Valid from" -msgstr "" - -msgid "Valid to" -msgstr "" - -msgid "Validity" -msgstr "" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -msgid "View Certificate" -msgstr "" - -msgid "Certificate Data" -msgstr "" - -msgid "Certificate For Match" -msgstr "" - -msgid "Certificate Mapping Match" -msgstr "" - -msgid "Matched Users" -msgstr "" - -msgid "User Login" -msgstr "" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -msgid "Configuration string" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -msgid "Remove certificate mapping data" -msgstr "" - -msgid "Issuer and subject" -msgstr "" - -msgid "Remove certificate identity mapping rules" -msgstr "" - -msgid "Group Options" -msgstr "" - -msgid "Search Options" -msgstr "" - -msgid "SELinux Options" -msgstr "" - -msgid "Server Options" -msgstr "" - -msgid "Service Options" -msgstr "" - -msgid "User Options" -msgstr "" - -msgid "Forward first" -msgstr "" - -msgid "Forwarding disabled" -msgstr "" - -msgid "Forward only" -msgstr "" - -msgid "Options" -msgstr "" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -msgid "Other Record Types" -msgstr "" - -msgid "Address not valid, can't redirect" -msgstr "" - -msgid "Create dns record" -msgstr "" - -msgid "Creating record." -msgstr "" - -msgid "Record creation failed." -msgstr "" - -msgid "Checking if record exists." -msgstr "" - -msgid "Record not found." -msgstr "" - -msgid "Redirection to PTR record" -msgstr "" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -msgid "Target reverse zone not found." -msgstr "" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -msgid "Standard Record Types" -msgstr "" - -msgid "Records for DNS Zone" -msgstr "" - -msgid "Record Type" -msgstr "" - -msgid "Add DNS zone" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -msgid "DNS Zone Settings" -msgstr "" - -msgid "Remove DNS zones" -msgstr "" - -msgid "Remove Permission" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Level" -msgstr "" - -msgid "Set Domain Level" -msgstr "" - -msgid "Add user group" -msgstr "" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -msgid "Group Settings" -msgstr "" - -msgid "External" -msgstr "" - -msgid "Groups" -msgstr "" - -msgid "Group categories" -msgstr "" - -msgid "Change to external group" -msgstr "" - -msgid "Change to POSIX group" -msgstr "" - -msgid "Non-POSIX" -msgstr "" - -msgid "POSIX" -msgstr "" - -msgid "Remove user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -msgid "Group Type" -msgstr "" - -msgid "Add HBAC rule" -msgstr "" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -msgid "Accessing" -msgstr "" - -msgid "Remove HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -msgid "Via Service" -msgstr "" - -msgid "Who" -msgstr "" - -msgid "Add HBAC service" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -msgid "Remove HBAC services" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -msgid "Add HBAC service group" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -msgid "Remove HBAC service groups" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -msgid "Access Denied" -msgstr "" - -msgid "Access Granted" -msgstr "" - -msgid "Include Disabled" -msgstr "" - -msgid "Include Enabled" -msgstr "" - -msgid "HBAC Test" -msgstr "" - -msgid "Matched" -msgstr "" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" - -msgid "Rules" -msgstr "" - -msgid "Run Test" -msgstr "" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -msgid "Unmatched" -msgstr "" - -msgid "Add host" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -msgid "Host Certificate" -msgstr "" - -msgid "Host Name" -msgstr "" - -msgid "Delete Key, Unprovision" -msgstr "" - -msgid "Host Settings" -msgstr "" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -msgid "Generate OTP" -msgstr "" - -msgid "Generated OTP" -msgstr "" - -msgid "Kerberos Key" -msgstr "" - -msgid "Kerberos Key Not Present" -msgstr "" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -msgid "One-Time Password" -msgstr "" - -msgid "One-Time Password Not Present" -msgstr "" - -msgid "One-Time Password Present" -msgstr "" - -msgid "Reset OTP" -msgstr "" - -msgid "Reset One-Time Password" -msgstr "" - -msgid "Set OTP" -msgstr "" - -msgid "OTP set" -msgstr "" - -msgid "Set One-Time Password" -msgstr "" - -msgid "Remove hosts" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -msgid "Unprovision" -msgstr "" - -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -msgid "Add host group" -msgstr "" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -msgid "Host Group Settings" -msgstr "" - -msgid "Remove host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -msgid "Identity provider details" -msgstr "" - -msgid "Verify secret" -msgstr "" - -msgid "User to override" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -msgid "Profile" -msgstr "" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -msgid "Enter trusted group name." -msgstr "" - -msgid "Add ID view" -msgstr "" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -msgid "Apply to host groups" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -msgid "Remove ID views" -msgstr "" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -msgid "Un-apply from host groups" -msgstr "" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -msgid "Un-apply" -msgstr "" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "Add netgroup" -msgstr "" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -msgid "Netgroup Settings" -msgstr "" - -msgid "Remove netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -msgid "Add OTP token" -msgstr "" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -msgid "Configure your token" -msgstr "" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -msgid "OTP Token Settings" -msgstr "" - -msgid "Disable token" -msgstr "" - -msgid "Enable token" -msgstr "" - -msgid "Remove OTP tokens" -msgstr "" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "" - -msgid "Show configuration uri" -msgstr "" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -msgid "Add Custom Attribute" -msgstr "" - -msgid "Permission settings" -msgstr "" - -msgid "Attribute breakdown" -msgstr "" - -msgid "Privilege Settings" -msgstr "" - -msgid "Public key:" -msgstr "" - -msgid "Set public key" -msgstr "" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -msgid "Add password policy" -msgstr "" - -msgid "Password Policy" -msgstr "" - -msgid "Remove password policies" -msgstr "" - -msgid "Add ID range" -msgstr "" - -msgid "Range Settings" -msgstr "" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -msgid "Domain SID" -msgstr "" - -msgid "Secondary RID base" -msgstr "" - -msgid "Remove ID ranges" -msgstr "" - -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -msgid "Detect" -msgstr "" - -msgid "Local domain" -msgstr "" - -msgid "IPA trust" -msgstr "" - -msgid "Active Directory winsync" -msgstr "" - -msgid "Add RADIUS server" -msgstr "" - -msgid "RADIUS Proxy Server Settings" -msgstr "" - -msgid "Remove RADIUS servers" -msgstr "" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -msgid "Force Update" -msgstr "" - -msgid "Add SELinux user map" -msgstr "" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -msgid "Server Roles" -msgstr "" - -msgid "Server Role" -msgstr "" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -msgid "Delete Server" -msgstr "" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -msgid "Add service" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -msgid "Service Certificate" -msgstr "" - -msgid "Service Settings" -msgstr "" - -msgid "Provisioning" -msgstr "" - -msgid "Remove services" -msgstr "" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -msgid "Unprovisioning service" -msgstr "" - -msgid "Service unprovisioned" -msgstr "" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "" - -msgid "SSH public keys" -msgstr "" - -msgid "SSH public key:" -msgstr "" - -msgid "Set SSH key" -msgstr "" - -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" - -msgid "Add stage user" -msgstr "" - -msgid "Stage users" -msgstr "" - -msgid "Preserved users" -msgstr "" - -msgid "Remove preserved users" -msgstr "" - -msgid "Remove stage users" -msgstr "" - -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -msgid "User categories" -msgstr "" - -msgid "Add subid" -msgstr "" - -msgid "Assigned subids" -msgstr "" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -msgid "Add sudo command" -msgstr "" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -msgid "Remove sudo commands" -msgstr "" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -msgid "Add sudo command group" -msgstr "" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -msgid "Remove sudo command groups" -msgstr "" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -msgid "Add sudo rule" -msgstr "" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "" - -msgid "Any Command" -msgstr "" - -msgid "Any Group" -msgstr "" - -msgid "Run Commands" -msgstr "" - -msgid "Deny" -msgstr "" - -msgid "Access this host" -msgstr "" - -msgid "Option added" -msgstr "" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -msgid "Remove sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -msgid "Specified Commands and Groups" -msgstr "" - -msgid "Specified Groups" -msgstr "" - -msgid "Remove sudo options" -msgstr "" - -msgid "Autogenerated" -msgstr "" - -msgid "Segment details" -msgstr "" - -msgid "Replication configuration" -msgstr "" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -msgid "Account" -msgstr "" - -msgid "Add trust" -msgstr "" - -msgid "Administrative account" -msgstr "" - -msgid "SID blocklists" -msgstr "" - -#, fuzzy -msgid "Trust Settings" -msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -msgid "Pre-shared password" -msgstr "" - -msgid "Remove trusts" -msgstr "" - -msgid "Remove domains" -msgstr "" - -msgid "Alternative UPN suffixes" -msgstr "" - -msgid "User attributes for SMB services" -msgstr "" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - -msgid "Account Settings" -msgstr "" - -msgid "Account Status" -msgstr "" - -msgid "Active users" -msgstr "" - -msgid "Add user" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -msgid "Auto assign subordinate ids" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "" - -msgid "Contact Settings" -msgstr "" - -msgid "Delete mode" -msgstr "" - -msgid "Employee Information" -msgstr "" - -msgid "Error changing account status" -msgstr "" - -msgid "Password expiration" -msgstr "" - -msgid "Mailing Address" -msgstr "" - -msgid "Misc. Information" -msgstr "" - -msgid "delete" -msgstr "" - -msgid "preserve" -msgstr "" - -msgid "No private group" -msgstr "" - -msgid "Remove users" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Unlock" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -msgid "Members" -msgstr "" - -msgid "My User Vaults" -msgstr "" - -msgid "Owners" -msgstr "" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -msgid "Service Vaults" -msgstr "" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -msgid "Vault Type" -msgstr "" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -msgid "User Vaults" -msgstr "" - -msgid "Current password is required" -msgstr "" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -msgid "First OTP" -msgstr "" - -msgid "New password is required" -msgstr "" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Password change complete" -msgstr "" - -msgid "Your password has expired. Please enter a new password." -msgstr "" - -msgid "Passwords must match" -msgstr "" - -msgid "Password reset was not successful." -msgstr "" - -#, fuzzy -msgid "Reset your password." -msgstr "ਨਵਾਂ ਵਾਲਟ ਪਾਸਵਰਡ" - -msgid "Second OTP" -msgstr "" - -msgid "Verify Password" -msgstr "" - -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -msgid "Some entries were not deleted" -msgstr "" - -msgid "Quick Links" -msgstr "" - -msgid "Select All" -msgstr "" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -msgid "Unselect All" -msgstr "" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "" - -msgid "Audit" -msgstr "" - -msgid "Authentication" -msgstr "" - -msgid "Automount" -msgstr "" - -msgid "DNS" -msgstr "" - -msgid "Host-Based Access Control" -msgstr "" - -msgid "Identity" -msgstr "" - -msgid "Network Services" -msgstr "" - -msgid "Policy" -msgstr "" - -msgid "Role-Based Access Control" -msgstr "" - -msgid "Subordinate IDs" -msgstr "" - -msgid "Sudo" -msgstr "" - -msgid "Topology" -msgstr "" - -msgid "True" -msgstr "" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -msgid "First" -msgstr "" - -msgid "Last" -msgstr "" - -msgid "Next" -msgstr "" - -msgid "Page" -msgstr "" - -msgid "Prev" -msgstr "" - -msgid "Undo" -msgstr "" - -msgid "Undo this change." -msgstr "" - -msgid "Undo All" -msgstr "" - -msgid "Undo all changes in this field." -msgstr "" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -msgid "Must be a decimal number" -msgstr "" - -msgid "Format error" -msgstr "" - -msgid "Must be an integer" -msgstr "" - -msgid "Not a valid IP address" -msgstr "" - -msgid "Not a valid IPv4 address" -msgstr "" - -msgid "Not a valid IPv6 address" -msgstr "" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -msgid "Parse error" -msgstr "" - -msgid "Must be a positive number" -msgstr "" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -msgid "Required field" -msgstr "" - -msgid "Unsupported value" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -msgid "IdP max life" -msgstr "" - -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "" - -msgid "IdP max renew" -msgstr "" - -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -msgid "password policy" -msgstr "" - -msgid "password policies" -msgstr "" - -msgid "Password Policies" -msgstr "" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "Grace login limit" -msgstr "" - -msgid "Number of LDAP authentications allowed after expiration" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -msgid "service" -msgstr "" - -msgid "services" -msgstr "" - -msgid "Service principal alias" -msgstr "" - -msgid "Base-64 encoded service certificate" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." -msgstr "" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -msgid "Add a new SMB service." -msgstr "" - -msgid "SMB service NetBIOS name" -msgstr "" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a service" -msgstr "" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -msgid "Certificate Authority" -msgstr "" - -msgid "Certificate Authorities" -msgstr "" - -msgid "Name for referencing the CA" -msgstr "" - -msgid "Description of the purpose of the CA" -msgstr "" - -msgid "Authority ID" -msgstr "" - -msgid "Dogtag Authority ID" -msgstr "" - -msgid "Subject DN" -msgstr "" - -msgid "Subject Distinguished Name" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Issuer Distinguished Name" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "RSN Version" -msgstr "" - -msgid "Random Serial Number Version" -msgstr "" - -msgid "Search for CAs." -msgstr "" - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "Display the properties of a CA." -msgstr "" - -msgid "Create a CA." -msgstr "" - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -msgid "Modify CA configuration." -msgstr "" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "" - -msgid "IPA CA cannot be disabled" -msgstr "" - -msgid "Enable a CA." -msgstr "" - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Subject email address" -msgstr "" - -msgid "Subject DNS name" -msgstr "" - -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -msgid "Subject URI" -msgstr "" - -msgid "Subject IP Address" -msgstr "" - -msgid "Subject OID" -msgstr "" - -msgid "Subject UPN" -msgstr "" - -msgid "Subject Kerberos principal name" -msgstr "" - -msgid "Subject Other Name" -msgstr "" - -msgid "Serial number (hex)" -msgstr "" - -msgid "Request status" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Status of the certificate" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -msgid "command" -msgstr "" - -msgid "commands" -msgstr "" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -msgid "runAs groups" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Preserved user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -msgid "Password grace count" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" -msgstr "" - -msgid "Request must be a dict" -msgstr "" - -msgid "Request is missing \"method\"" -msgstr "" - -msgid "Request is missing \"params\"" -msgstr "" - -msgid "params must be a list" -msgstr "" - -msgid "params must contain [args, options]" -msgstr "" - -msgid "params[0] (aka args) must be a list" -msgstr "" - -msgid "params[1] (aka options) must be a dict" -msgstr "" - -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" - -msgid "CIFS server denied your credentials" -msgstr "CIFS ਨੇ ਤੁਹਾਡੀ ਸਨਦ ਤੋਂ ਇਨਕਾਰ ਕੀਤਾ" - -msgid "communication with CIFS server was unsuccessful" -msgstr "" - -msgid "AD domain controller" -msgstr "AD ਡੋਮੇਨ ਕੰਟਰੋਲਰ" - -msgid "unsupported functional level" -msgstr "" - -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" - -msgid "Cannot find specified domain or server name" -msgstr "" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" - -msgid "At least the domain or IP address should be specified" -msgstr "" - -#, python-format -msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" -msgstr "" - -msgid "no trusted domain is configured" -msgstr "ਕੋਈ ਟਰੱਸਟਡ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਕੀਤੀ ਹੈ" - -msgid "domain is not configured" -msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" - -msgid "SID is not valid" -msgstr "" - -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "" - -msgid "SID does not match any trusted domain" -msgstr "" - -msgid "Trust setup" -msgstr "ਟਰੱਸਟ ਸੈਟਅੱਪ" - -msgid "Our domain is not configured" -msgstr "ਸਾਡੀ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" - -#, fuzzy -msgid "No trusted domain is not configured" -msgstr "ਕੋਈ ਟਰੱਸਟਡ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਕੀਤੀ ਹੈ" - -#, fuzzy -msgid "trusted domain object" -msgstr "ਕੋਈ ਟਰੱਸਟਡ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਕੀਤੀ ਹੈ" - -#, fuzzy -msgid "domain is not trusted" -msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" - -#, fuzzy -msgid "no trusted domain matched the specified flat name" -msgstr "ਕੋਈ ਟਰੱਸਟਡ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਕੀਤੀ ਹੈ" - -#, fuzzy -msgid "trusted domain object not found" -msgstr "ਕੋਈ ਟਰੱਸਟਡ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਕੀਤੀ ਹੈ" - -msgid "Object does not belong to a trusted domain" -msgstr "" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "" - -msgid "Ambiguous search, user domain was not specified" -msgstr "" - -msgid "Trusted domain did not return a unique object" -msgstr "" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "" - -#, fuzzy -msgid "trusted domain user not found" -msgstr "ਕੋਈ ਟਰੱਸਟਡ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਕੀਤੀ ਹੈ" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "" - -msgid "CIFS credentials object" -msgstr "" - -#, fuzzy, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "CIFS ਨੇ ਤੁਹਾਡੀ ਸਨਦ ਤੋਂ ਇਨਕਾਰ ਕੀਤਾ" - -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" - -#, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" - -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" - -msgid "Credentials" -msgstr "" - -msgid "Missing credentials for cross-forest communication" -msgstr "" - -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" - -#, python-format -msgid "must equal %r" -msgstr "" - -msgid "Hello world" -msgstr "ਹੈਲੋ ਵਰਲਡ" - -#, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "" - -msgid "must be at least 1" -msgstr "" - -msgid "Out of memory\n" -msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ\n" - msgid "Warning unrecognized encryption type.\n" msgstr "ਚੇਤਾਵਨੀ ਅਣਪਛਾਤੀ ਇੰਕ੍ਰਿਪਸ਼ਨ ਕਿਸਮ।\n" msgid "Warning unrecognized salt type.\n" msgstr "ਚੇਤਾਵਨੀ ਅਣਪਛਾਤੀ salt ਕਿਸਮ ਹੈ।\n" -#, fuzzy -msgid "Out of memory!?\n" -msgstr "ਮੈਮੋਰੀ ਖ਼ਤਮ ਹੋਈ!\n" +msgid "domain is not configured" +msgstr "ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਹੈ" -msgid "Enctype comparison failed!\n" -msgstr "" - -msgid "Password is too long!\n" -msgstr "" - -#, fuzzy -msgid "Failed to create random key!\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -msgid "Failed to create key!\n" -msgstr "ਕੁੰਜੀ ਬਣਾਉਣ ਲਈ ਅਸਫ਼ਲ ਹੈ!\n" - -#, fuzzy -msgid "Bad or unsupported salt type.\n" -msgstr "ਚੇਤਾਵਨੀ ਅਣਪਛਾਤੀ salt ਕਿਸਮ ਹੈ।\n" - -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" +msgid "no trusted domain is configured" +msgstr "ਕੋਈ ਟਰੱਸਟਡ ਡੋਮੇਨ ਸੰਰਚਿਤ ਨਹੀਂ ਕੀਤੀ ਹੈ" diff --git a/po/pl.po b/po/pl.po index c21400e69..2b4c66564 100644 --- a/po/pl.po +++ b/po/pl.po @@ -17,401 +17,600 @@ msgstr "" "|| n%100>=20) ? 1 : 2;\n" "X-Generator: Weblate 4.11.2\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "nie można otworzyć pliku konfiguracji %s\n" +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "%(attr)s nie zawiera „%(value)s”" -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "nie można wykonać stat() na pliku konfiguracji %s\n" +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "Pasuje %(count)d ACI" +msgstr[1] "Pasują %(count)d ACI" +msgstr[2] "Pasuje %(count)d ACI" -#, fuzzy, c-format -msgid "out of memory\n" -msgstr "Brak pamięci\n" +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "Pasuje %(count)d grupa" +msgstr[1] "Pasują %(count)d grupy" +msgstr[2] "Pasuje %(count)d grup" -#, c-format -msgid "read error\n" -msgstr "błąd odczytu\n" +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "Pasuje %(count)d komputer" +msgstr[1] "Pasuje %(count)d komputery" +msgstr[2] "Pasuje %(count)d komputerów" -#, c-format -msgid "Unable to parse principal name\n" -msgstr "Nie można przetworzyć nazwy naczelnika\n" +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "Pasuje %(count)d grupa komputerów" +msgstr[1] "Pasują %(count)d grupy komputerów" +msgstr[2] "Pasuje %(count)d grup komputerów" -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "Wczytano %(count)d wtyczkę" +msgstr[1] "Wczytano %(count)d wtyczki" +msgstr[2] "Wczytano %(count)d wtyczek" -#, c-format -msgid "Removing principal %s\n" -msgstr "Usuwanie naczelnika %s\n" +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "Pasuje %(count)d usługa" +msgstr[1] "Pasuje %(count)d usługi" +msgstr[2] "Pasuje %(count)d usług" -#, c-format -msgid "Failed to open keytab\n" -msgstr "Otwarcie tablicy kluczy się nie powiodło\n" +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "Pasuje %(count)d użytkownik" +msgstr[1] "Pasuje %(count)d użytkowników" +msgstr[2] "Pasuje %(count)d użytkowników" -#, c-format -msgid "principal not found\n" -msgstr "nie odnaleziono naczelnika\n" +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d zmiennych" -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" +#, python-format +msgid "%(info)s" +msgstr "%(info)s" -#, c-format -msgid "Unable to remove entry\n" -msgstr "Nie można usunąć wpisu\n" +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s: nie odnaleziono %(oname)s" -#, c-format -msgid "kvno %d\n" -msgstr "kvno %d\n" +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s: nie odnaleziono %(oname)s" -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" -#, fuzzy, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "Utworzenie kontroli się nie powiodło.\n" +msgid "A description of this command" +msgstr "Opis tego polecenia" -#, c-format -msgid "Unable to parse principal\n" -msgstr "Nie można przetworzyć naczelnika\n" +msgid "A description of this host" +msgstr "Opis tego komputera" -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" +msgid "A description of this host-group" +msgstr "Opis tej grupy komputerów" -#, fuzzy, c-format -msgid "realm not found\n" -msgstr "nie odnaleziono naczelnika\n" +msgid "A description of this role-group" +msgstr "Opis tej grupy rol" -msgid "Print debugging information" -msgstr "Wyświetlanie informacji o debugowaniu" +msgid "A dictionary representing an LDAP entry" +msgstr "Słownik reprezentujący wpis LDAP" -msgid "Debugging output" -msgstr "Wyjście debugowania" +msgid "A group may not be a member of itself" +msgstr "Grupa nie może być własnym elementem" -#, fuzzy -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"Naczelnik, dla którego uzyskać tablicę kluczy (np.: ftp/ftp.example." -"com@EXAMPLE.COM)" +msgid "A group may not be added as a member of itself" +msgstr "Nie można dodać grupy jako elementu jej samej" -msgid "Kerberos Service Principal Name" -msgstr "Nazwa naczelnika usługi Kerberos" +msgid "A list of ACI values" +msgstr "Lista wartości ACI" -msgid "The keytab file to remove the principcal(s) from" -msgstr "" +msgid "A list of LDAP entries" +msgstr "Lista wpisów LDAP" -msgid "Keytab File Name" -msgstr "Nazwa pliku tablicy kluczy" +msgid "ACI name" +msgstr "Nazwa ACI" -msgid "Remove all principals in this realm" -msgstr "Usuwa wszystkich naczelników w tym obszarze" +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "Nie odnaleziono ACI o nazwie „%s”" -msgid "Realm name" -msgstr "Nazwa obszaru" +msgid "ACIs" +msgstr "ACI" -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "Zainicjowanie kontekstu Kerberosa się nie powiodło\n" +msgid "Access time" +msgstr "Czas dostępu" -#, fuzzy, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "Otwarcie tablicy kluczy się nie powiodło\n" +msgid "Account Settings" +msgstr "Ustawienia konta" + +msgid "Active zone" +msgstr "Aktywna strefa" + +msgid "Add" +msgstr "Dodaj" + +msgid "Add and Close" +msgstr "Dodaj i zamknij" + +msgid "Add and Edit" +msgstr "Dodaj i edytuj" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Dodano grupę „%(value)s”" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "Dodano komputer „%(value)s”" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Dodano grupę komputerów „%(value)s”" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "Dodano usługę „%(value)s”" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "Dodano użytkownika „%(value)s”" + +msgid "Administrator e-mail address" +msgstr "Adres e-mail administratora" + +msgid "All commands should at least have a result" +msgstr "Wszystkie polecenia powinny powiadać przynajmniej wynik" + +msgid "Apply ACI to your own entry (self)" +msgstr "Zastosowanie ACI do własnego wpisu („self”)" + +msgid "Asks for a non-random password to use for the principal" +msgstr "Pyta o nielosowe hasło do użycia z naczelnikiem" + +msgid "Attribute" +msgstr "Atrybut" + +msgid "Attributes" +msgstr "Atrybuty" + +msgid "Automount" +msgstr "Automatyczne montowanie" + +msgid "Automount Keys" +msgstr "Automatyczne montowanie kluczy" + +msgid "Automount Maps" +msgstr "Automatyczne montowanie map" + +msgid "BIND update policy" +msgstr "Polityka aktualizacji BIND" + +msgid "Back to Top" +msgstr "Wróć na górę" + +msgid "Bad format in credentials cache" +msgstr "Błędny format w pamięci podręcznej danych uwierzytelniających" + +msgid "Base-64 encoded server certificate" +msgstr "Certyfikat serwera zakodowany za pomocą Base-64" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Dekodowanie base64 się nie powiodło: %(reason)s" + +msgid "Bind DN" +msgstr "DN dowiązania" + +msgid "Cancel" +msgstr "Anuluj" + +msgid "Cannot resolve KDC for requested realm" +msgstr "Nie można rozwiązać KDC dla żądanego obszaru" + +msgid "Certificate" +msgstr "Certyfikat" + +msgid "Certificate Revoked" +msgstr "Odrzucono certyfikat" + +msgid "Certificate Subject base" +msgstr "Podstawa tematu certyfikatu" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "Błąd formatu certyfikatu: %(error)s" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "Nie można ukończyć działania na certyfikacie: %(error)s" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Zmieniono hasło dla „%(value)s”" + +msgid "Character classes" +msgstr "Klasy znaków" + +msgid "City" +msgstr "Miasto" + +msgid "Class" +msgstr "Klasa" + +msgid "Close" +msgstr "Zamknij" #, c-format msgid "Closing keytab failed\n" msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" +msgid "Comma separated encryption types list" +msgstr "Lista typów szyfrowania oddzielonych przecinkami" + +msgid "Command not implemented" +msgstr "Polecenie nie jest zaimplementowane" + +msgid "Commands" +msgstr "Polecenia" + +msgid "Configuration" +msgstr "Konfiguracja" + +msgid "Contact this specific KDC Server" +msgstr "Kontaktuje się z konkretnym serwerem KDC" + +msgid "Continuous mode: Don't stop on errors." +msgstr "Tryb ciągły: bez zatrzymywania po błędach." + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "Utworzono ACI „%(value)s”" + +msgid "Credentials cache permissions incorrect" msgstr "" +"Uprawnienia pamięci podręcznej danych uwierzytelniających są niepoprawne" -#, fuzzy, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "Zainicjowanie kontekstu Kerberosa się nie powiodło\n" +msgid "DN to bind as if not using kerberos" +msgstr "DN do dowiązania, jeśli nie jest używany Kerberos" -#, fuzzy, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "Nie można przetworzyć naczelnika\n" +msgid "DNS" +msgstr "DNS" -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "Żadne klucze nie zostały zaakceptowane przez KDC\n" +msgid "DNS Zone Settings" +msgstr "Ustawienia strefy DNS" -#, c-format -msgid "Out of memory \n" -msgstr "Brak pamięci \n" +msgid "DNS is not configured" +msgstr "DNS nie jest skonfigurowany" -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "Nie można zainicjować biblioteki LDAP.\n" +msgid "Data" +msgstr "Dane" -msgid "Simple bind failed\n" -msgstr "Proste dowiązanie się nie powiodło\n" +msgid "Debugging output" +msgstr "Wyjście debugowania" -#, fuzzy -msgid "SASL Bind failed\n" -msgstr "Proste dowiązanie się nie powiodło\n" +msgid "Default group for new users" +msgstr "Domyślna grupa dla nowych użytkowników" -#, fuzzy, c-format -msgid "Operation failed: %s\n" -msgstr "nie można otworzyć pliku konfiguracji %s\n" +msgid "Default shell" +msgstr "Domyślna powłoka" -#, fuzzy, c-format -msgid "Failed to get result: %s\n" -msgstr "Utworzenie klucza się nie powiodło.\n" +msgid "Default shell for new users" +msgstr "Domyślna powłoka dla nowych użytkowników" -#, c-format -msgid "Timeout exceeded." +msgid "Default users group" +msgstr "Domyślna grupa użytkowników" + +msgid "Delete" +msgstr "Usuń" + +msgid "Delete all associated records" +msgstr "Usuń wszystkie powiązane wpisy" + +msgid "Delete all?" +msgstr "Usunąć wszystko?" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "Usunięto ACI „%(value)s”" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Usunięto grupę „%(value)s”" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "Usunięto komputer „%(value)s”" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Usunięto grupę komputerów „%(value)s”" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "Usunięto usługę „%(value)s”" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Usunięto użytkownika „%(value)s”" + +msgid "Deleting a managed group is not allowed. It must be detached first." msgstr "" +"Usuwanie zarządzanej grupy nie jest dozwolone. Musi zostać najpierw " +"odłączona." -#, fuzzy, c-format -msgid "Failed to parse extended result: %s\n" +msgid "Description" +msgstr "Opis" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" + +msgid "Dict of I18N messages" +msgstr "Słownik komunikatów umiędzynaradawiania" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "Słownik obiektów IPA zakodowanych w formacie JSON" + +msgid "Dictionary mapping variable name to value" +msgstr "Nazwa zmiennej mapowania słownika do ustawienia jako wartość" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "Wyłączono konto użytkownika „%(value)s”" + +msgid "Display effective policy for a specific user" +msgstr "Wyświetlanie aktywnej polityki dla podanego użytkownika" + +msgid "Display user record for current Kerberos principal" +msgstr "Wyświetlenie wpisu użytkownika dla bieżącego naczelnika Kerberosa" + +msgid "Email address" +msgstr "Adres e-mail" + +msgid "Enabled" +msgstr "Włączone" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "Włączono konto użytkownika „%(value)s”" + +msgid "Encryption types to request" +msgstr "Typy szyfrowania do zażądania" + +msgid "Enctype comparison failed!\n" +msgstr "Porównanie typów szyfrowania się nie powiodło.\n" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "Proszę podać %(label)s ponownie, aby sprawdzić: " + +msgid "Error" +msgstr "Błąd" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "" +"Błąd podczas uzyskiwania początkowych danych uwierzytelniających: %s.\n" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "Błąd podczas rozwiązywania tablicy kluczy: %s.\n" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "" +"Błąd podczas przechowywania danych uwierzytelniających w pamięci podręcznej: " +"%s.\n" + +msgid "External host" +msgstr "Zewnętrzny komputer" + +msgid "Failed members" +msgstr "Elementy, które się nie powiodły" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "Dodanie klucza do tablicy kluczy się nie powiodło\n" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" +"Dodanie użytkownika do domyślnej grupy się nie powiodło. Należy użyć " +"polecenia „ipa group-add-member”, aby dodać go ręcznie." + +#, c-format +msgid "Failed to close the keytab\n" msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" -#, fuzzy, c-format -msgid "Failed to parse result: %s\n" -msgstr "Otwarcie tablicy kluczy się nie powiodło\n" - -#, fuzzy, c-format -msgid "Missing reply control list!\n" -msgstr "Brak kontroli odpowiedzi.\n" - -#, c-format -msgid "Missing reply control!\n" -msgstr "Brak kontroli odpowiedzi.\n" - -#, c-format -msgid "Out of Memory!\n" -msgstr "Brak pamięci.\n" - #, c-format msgid "Failed to create control!\n" msgstr "Utworzenie kontroli się nie powiodło.\n" -#, fuzzy, c-format -msgid "Failed to bind to server!\n" +#, c-format +msgid "Failed to create key material\n" +msgstr "Utworzenie materiału klucza się nie powiodło\n" + +msgid "Failed to create key!\n" msgstr "Utworzenie klucza się nie powiodło.\n" -#, fuzzy, c-format -msgid "Failed to get keytab!\n" -msgstr "Otwarcie tablicy kluczy się nie powiodło\n" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "ber_init() się nie powiodło, nieprawidłowa kontrola?\n" - -#, fuzzy, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "ber_init() się nie powiodło, nieprawidłowa kontrola?\n" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to retrieve any keys" +msgid "Failed to create random key!\n" msgstr "Utworzenie losowego klucza się nie powiodło.\n" -#, fuzzy -msgid "Failed to decode control reply!\n" -msgstr "Utworzenie kontroli się nie powiodło.\n" +#, c-format +msgid "Failed to open Keytab\n" +msgstr "Otwarcie tablicy kluczy się nie powiodło\n" -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "Hasła się nie zgadzają." - -#, fuzzy, c-format -msgid "Failed to open config file %s\n" -msgstr "nie można otworzyć pliku konfiguracji %s\n" - -#, fuzzy, c-format -msgid "Failed to parse config file %s\n" -msgstr "nie można otworzyć pliku konfiguracji %s\n" - -#, fuzzy -msgid "Failed to resolve symlink to keytab.\n" +#, c-format +msgid "Failed to open keytab\n" msgstr "Otwarcie tablicy kluczy się nie powiodło\n" -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "Dekodowanie żądania podpisywania certyfikatu się nie powiodło: %s" -msgid "Print as little as possible" -msgstr "Wyświetla tak mało, jak to możliwe" +msgid "False if migration mode was disabled." +msgstr "Fałsz, jeśli wyłączono tryb migracji." -msgid "Output only on errors" -msgstr "Wyświetla tylko błędy" +msgid "Fax Number" +msgstr "Numer faksu" -msgid "Output debug info" -msgstr "" +#, python-format +msgid "File %(file)s not found" +msgstr "Nie odnaleziono pliku %(file)s" -msgid "Contact this specific KDC Server" -msgstr "Kontaktuje się z konkretnym serwerem KDC" +msgid "Filter" +msgstr "Filtr" -msgid "Server Name" -msgstr "Nazwa serwera" +msgid "Find" +msgstr "Znajdź" -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"Naczelnik, dla którego uzyskać tablicę kluczy (np.: ftp/ftp.example." -"com@EXAMPLE.COM)" +msgid "Fingerprint (SHA1)" +msgstr "Odcisk (SHA1)" -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" +msgid "First name" +msgstr "Imię" -msgid "Encryption types to request" -msgstr "Typy szyfrowania do zażądania" +msgid "Forward to server instead of running locally" +msgstr "Przekazanie do serwera zamiast uruchamiania lokalnie" -msgid "Comma separated encryption types list" -msgstr "Lista typów szyfrowania oddzielonych przecinkami" +#, python-format +msgid "Found '%(value)s'" +msgstr "Odnaleziono „%(value)s”" -msgid "Show the list of permitted encryption types and exit" -msgstr "Wyświetla listę dozwolonych typów szyfrowania i kończy działanie" +msgid "Full name" +msgstr "Pełna nazwa" -msgid "Permitted Encryption Types" -msgstr "Dozwolone typy szyfrowania" +msgid "GID" +msgstr "GID" -msgid "Asks for a non-random password to use for the principal" -msgstr "Pyta o nielosowe hasło do użycia z naczelnikiem" +msgid "GID (use this option to set it manually)" +msgstr "GID (ta opcja umożliwia jego ręczne ustawienie)" -msgid "LDAP DN" -msgstr "DN LDAP" +msgid "Group" +msgstr "Grupa" -msgid "DN to bind as if not using kerberos" -msgstr "DN do dowiązania, jeśli nie jest używany Kerberos" +#, python-format +msgid "Group '%s' does not exist" +msgstr "Grupa „%s” nie istnieje" -msgid "LDAP password" -msgstr "Hasło LDAP" +msgid "Group container" +msgstr "Kontener grupy" -msgid "password to use if not using kerberos" -msgstr "hasło do użycia, jeśli nie jest używany Kerberos" +msgid "Group description" +msgstr "Opis grupy" -#, fuzzy -msgid "Prompt for LDAP password" -msgstr "Hasło LDAP" +msgid "Group name" +msgstr "Nazwa grupy" -msgid "Path to the IPA CA certificate" -msgstr "" +msgid "Group to apply ACI to" +msgstr "Grupa, do której zastosować ACI" -#, fuzzy -msgid "IPA CA certificate" -msgstr "Certyfikat" +msgid "Groups" +msgstr "Grupy" -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" +msgid "HBAC service group description" +msgstr "Opis grupy usługi HBAC" -msgid "url" -msgstr "" +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "Platforma sprzętowa komputera (np. Lenovo T61)" -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" +msgid "History size" +msgstr "Rozmiar historii" -msgid "GSSAPI|EXTERNAL" -msgstr "" +msgid "Home directory" +msgstr "Katalog domowy" -msgid "Retrieve current keys without changing them" -msgstr "" +msgid "Home directory base" +msgstr "Podstawa katalogu domowego" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "Nie odnaleziono komputera „%(host)s”" + +msgid "Host Groups" +msgstr "Grupy komputerów" + +msgid "Host Name" +msgstr "Nazwa komputera" + +msgid "Host category" +msgstr "Kategoria komputerów" + +msgid "Host category the rule applies to" +msgstr "Kategoria komputerów, do których zastosowywana jest reguła" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "Platforma sprzętowa komputera (np. „Lenovo T61”)" #, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "Brak typów szyfrowania preferowanych przez system?\n" +msgid "Host is already joined.\n" +msgstr "Komputer jest już dołączony.\n" -#, c-format -msgid "Supported encryption types:\n" -msgstr "Obsługiwane typy szyfrowania:\n" +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "Lokalizacja komputera (np. „Baltimore, MD”)" -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "Ostrzeżenie: przekonwertowanie typu (#%d) się nie powiodło\n" +msgid "Host location (e.g. \"Lab 2\")" +msgstr "Położenie komputera (np. „Laboratorium nr 2”)" -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" +msgid "Host name" +msgstr "Nazwa komputera" -#, fuzzy -msgid "Enter LDAP password" -msgstr "Hasło LDAP" +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "System operacyjny komputera i jego wersja (np. „Fedora 9”)" -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" +msgid "Host-group" +msgstr "Grupa komputerów" -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" +msgid "Hostname" +msgstr "Nazwa komputera" -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" +msgid "Hosts" +msgstr "Komputery" -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" +msgid "IPA Server to use" +msgstr "Serwer IPA do użycia" -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" +msgid "IPA unique ID" +msgstr "Unikalny identyfikator IPA" -#, c-format -msgid "Discovered server %s\n" -msgstr "" +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Niewystarczający dostęp: %(info)s" -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Using provided server %s\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -msgid "New Principal Password" -msgstr "Nowe hasło naczelnika" - -msgid "Verify Principal Password" -msgstr "Sprawdzenie hasła naczelnika" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" -"Ostrzeżenie: typy salt nie są uwzględniane z losowymi hasłami (proszę " -"zobaczyć opcję -P)\n" +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Nieprawidłowe żądanie JSON-RPC: %(error)s" #, c-format msgid "Invalid Service Principal Name\n" msgstr "Nieprawidłowa nazwa naczelnika usługi\n" +msgid "Issuer" +msgstr "Wydawca" + #, c-format msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" msgstr "" "Nie odnaleziono pamięci podręcznej danych uwierzytelniających. Istnieje " "zgłoszenie Kerberosa?\n" +msgid "Kerberos Service Principal Name" +msgstr "Nazwa naczelnika usługi Kerberos" + +msgid "Kerberos Ticket Policy" +msgstr "Polityka zgłoszeń Kerberosa" + #, c-format msgid "" "Kerberos User Principal not found. Do you have a valid Credential Cache?\n" @@ -420,178 +619,657 @@ msgstr "" "podręczna danych uwierzytelniających?\n" #, c-format -msgid "Failed to open Keytab\n" -msgstr "Otwarcie tablicy kluczy się nie powiodło\n" +msgid "Kerberos context initialization failed\n" +msgstr "Zainicjowanie kontekstu Kerberosa się nie powiodło\n" -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Błąd Kerberosa: %(major)s/%(minor)s" + +msgid "Kerberos principal" +msgstr "Naczelnik Kerberosa" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." msgstr "" +"Naczelnik Kerberosa %s już istnieje. Należy użyć polecenia „ipa user-mod”, " +"aby ustawić go ręcznie." -#, c-format -msgid "Failed to create key material\n" -msgstr "Utworzenie materiału klucza się nie powiodło\n" +msgid "Kerberos principal name for this host" +msgstr "Nazwa naczelnika Kerberosa dla tego komputera" -#, fuzzy, c-format -msgid "Failed to get keytab\n" -msgstr "Otwarcie tablicy kluczy się nie powiodło\n" +msgid "Key" +msgstr "Klucz" -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "Dodanie klucza do tablicy kluczy się nie powiodło\n" +msgid "Keytab" +msgstr "Tabela kluczy" -#, c-format -msgid "Failed to close the keytab\n" -msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" +msgid "Keytab File Name" +msgstr "Nazwa pliku tablicy kluczy" #, c-format msgid "Keytab successfully retrieved and stored in: %s\n" msgstr "Pomyślnie pobrano tablicę kluczy i przechowano ją w: %s\n" +msgid "LDAP DN" +msgstr "DN LDAP" + +msgid "LDAP URI" +msgstr "Adres URI LDAP" + +msgid "LDAP URI of DS server to migrate from" +msgstr "Adres URI LDAP serwera DS, z którego migrować" + +msgid "LDAP password" +msgstr "Hasło LDAP" + +msgid "LDAP schema" +msgstr "Schemat LDAP" + +msgid "Last name" +msgstr "Nazwisko" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "Dozwolony filtr LDAP (np. ou=Inżynieria)" + +msgid "Lists of objects migrated; categorized by type." +msgstr "Lista migrowanych obiektów, ułożonych w kategorie według typu." + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" +"Lista obiektów, które nie mogły zostać migrowane, ułożonych w kategorie " +"według typu." + +msgid "Locality" +msgstr "Lokalizacja" + +msgid "Location" +msgstr "Położenie" + +msgid "Logged In As" +msgstr "Zalogowano jako" + +msgid "Login shell" +msgstr "Powłoka logowania" + +msgid "Mailing Address" +msgstr "Adres pocztowy" + +msgid "Manage password policy for specific group" +msgstr "Zarządzanie polityką haseł dla podanej grupy" + +msgid "Manage ticket policy for specific user" +msgstr "Zarządzanie polityką zgłoszeń dla podanego użytkownika" + +msgid "Map" +msgstr "Mapa" + +msgid "Max life" +msgstr "Maksymalny czas życia" + +msgid "Max lifetime (days)" +msgstr "Maksymalny czas życia (w dniach)" + +msgid "Max renew" +msgstr "Maksymalne odnowienie" + +msgid "Maximum number of entries returned" +msgstr "Maksymalna liczba zwróconych wpisów" + +msgid "Maximum password lifetime (in days)" +msgstr "Maksymalny czas życia hasła (w dniach)" + +msgid "Maximum renewable age (seconds)" +msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" + +msgid "Maximum ticket life (seconds)" +msgstr "Minimalny czas życia zgłoszenia (sekundy)" + +msgid "Member Host" +msgstr "Komputer elementu" + +msgid "Member groups" +msgstr "Elementy grupy" + +msgid "Member host-groups" +msgstr "Element grupy komputerów" + +msgid "Member hosts" +msgstr "Element komputerów" + +msgid "Member of" +msgstr "Element" + +msgid "Member of a group" +msgstr "Element grupy" + +msgid "Member of group" +msgstr "Członek grupy" + +msgid "Member of groups" +msgstr "Członek grup" + +msgid "Member of host-groups" +msgstr "Element grupy komputerów" + +msgid "Member service groups" +msgstr "Grupy usługi elementów" + +msgid "Member services" +msgstr "Usługi elementów" + +msgid "Member users" +msgstr "Elementy użytkowników" + +msgid "Members that could not be added" +msgstr "Elementy, które nie mogły zostać dodane" + +msgid "Members that could not be removed" +msgstr "Liczba elementów, które nie mogły zostać usunięte" + +msgid "Min length" +msgstr "Minimalna długość" + +msgid "Min lifetime (hours)" +msgstr "Minimalny czas życia (w godzinach)" + +msgid "Minimum length of password" +msgstr "Minimalna długość hasła" + +msgid "Minimum number of character classes" +msgstr "Minimalna liczba klas znaków" + +msgid "Minimum password lifetime (in hours)" +msgstr "Minimalny czas życia hasła (w godzinach)" + +msgid "Misc. Information" +msgstr "Różne informacje" + #, c-format -msgid "Out of memory!\n" -msgstr "Brak pamięci.\n" +msgid "Missing reply control!\n" +msgstr "Brak kontroli odpowiedzi.\n" + +msgid "Mobile Telephone Number" +msgstr "Numer telefonu komórkowego" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "Zmodyfikowano ACI „%(value)s”" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Zmodyfikowano grupę „%(value)s”" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "Zmodyfikowano komputer „%(value)s”" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Zmodyfikowano grupę komputerów „%(value)s”" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "Zmodyfikowano usługę „%(value)s”" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Zmodyfikowano użytkownika „%(value)s”" + +msgid "Mount information" +msgstr "Informacje o montowaniu" + +msgid "Mount point" +msgstr "Punkt montowania" + +msgid "NIS domain name" +msgstr "Nazwa domeny NIS" + +msgid "Name of host-group" +msgstr "Nazwa grupy komputerów" + +msgid "Name of object to export" +msgstr "Nazwa obiektu do wyeksportowania" + +msgid "Netgroup description" +msgstr "Opis grupy sieciowej" + +msgid "Netgroup name" +msgstr "Nazwa grupy sieciowej" + +msgid "Netgroups" +msgstr "Grupy sieciowe" + +msgid "New Certificate" +msgstr "Nowy certyfikat" + +msgid "New Password" +msgstr "Nowe hasło" + +msgid "New Principal Password" +msgstr "Nowe hasło naczelnika" + +msgid "No credentials cache found" +msgstr "Nie odnaleziono pamięci podręcznej danych uwierzytelniających" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "Żadne klucze nie zostały zaakceptowane przez KDC\n" #, c-format msgid "No permission to join this host to the IPA domain.\n" msgstr "Brak uprawnienia do dołączenia do tego komputera w domenie IPA.\n" #, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "Brak uprawnień do zapisu pliku tablicy kluczy „%s”\n" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "" - -#, c-format -msgid "Out of memory!" -msgstr "Brak pamięci." - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "Nie można włączyć SSL w LDAP\n" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "" +msgid "No system preferred enctypes ?!\n" +msgstr "Brak typów szyfrowania preferowanych przez system?\n" #, c-format msgid "No values for %s" msgstr "Brak wartości dla %s" #, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "" +msgid "No write permissions on keytab file '%s'\n" +msgstr "Brak uprawnień do zapisu pliku tablicy kluczy „%s”\n" -#, fuzzy, c-format -msgid "IPA namingContext not found\n" -msgstr "nie odnaleziono ipa-getkeytab\n" +msgid "Not After" +msgstr "Nie po" + +msgid "Not Before" +msgstr "Nie wcześniej" + +msgid "Not a managed group" +msgstr "Nie jest zarządzaną grupą" + +msgid "Number of members added" +msgstr "Liczba dodanych elementów" + +msgid "Number of members removed" +msgstr "Liczba usuniętych elementów" + +msgid "Number of plugins loaded" +msgstr "Liczba wczytanych wtyczek" + +msgid "Number of variables returned (<= total)" +msgstr "Liczba zwróconych zmiennych (<= razem)" + +msgid "Only one value is allowed" +msgstr "Dozwolona jest tylko jedna wartość" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "System operacyjny komputera i jego wersja (np. Fedora 9)" + +msgid "Operating system" +msgstr "System operacyjny" #, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "Nie można ustalić głównego DN %s\n" +msgid "Out of Memory!\n" +msgstr "Brak pamięci.\n" -#, fuzzy, c-format -msgid "Enrollment failed. %s\n" -msgstr "Wypisanie się nie powiodło.\n" +msgid "Out of memory\n" +msgstr "Brak pamięci\n" #, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "nie odnaleziono naczelnika w odpowiedzi XML-RPC\n" +msgid "Out of memory \n" +msgstr "Brak pamięci \n" #, c-format -msgid "Host is already joined.\n" -msgstr "Komputer jest już dołączony.\n" +msgid "Out of memory!" +msgstr "Brak pamięci." #, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" +msgid "Out of memory!\n" +msgstr "Brak pamięci.\n" -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" +msgid "Out of memory!?\n" +msgstr "Brak pamięci?\n" -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" +msgid "Output only on errors" +msgstr "Wyświetla tylko błędy" -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" +msgid "Pager Number" +msgstr "Numer pagera" -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" +msgid "Parent map" +msgstr "Mapa nadrzędna" -#, fuzzy, c-format -msgid "json_dumps() failed\n" -msgstr "fork() się nie powiodło\n" +msgid "Password" +msgstr "Hasło" + +msgid "Password Policy" +msgstr "Polityka haseł" + +msgid "Password change complete" +msgstr "Ukończono zmianę hasła" + +msgid "Password history size" +msgstr "Rozmiar historii haseł" + +msgid "Password used in bulk enrollment" +msgstr "Hasło używane w zapisywaniu większej części" + +msgid "Passwords do not match" +msgstr "Hasła się nie zgadzają" + +msgid "Passwords do not match!" +msgstr "Hasła się nie zgadzają." -#, fuzzy, c-format msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "Nieprawidłowe żądanie JSON-RPC: %(error)s" - -#, c-format -msgid "JSON-RPC call failed: %s\n" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." msgstr "" +"Hasła zostały migrowane w formacie sprzed mieszania.\n" +"Program IPA nie może utworzyć kluczy Kerberosa, chyba\n" +"że zostały podane z hasłami w zwykłym tekście. Wszyscy\n" +"migrowani użytkownicy muszą zalogować się na stronie\n" +"https://twoja.domena/ipa/migration/, zanim będą mogli\n" +"używać swoich kont Kerberosa." + +msgid "Passwords must match" +msgstr "Hasła muszą się zgadzać" + +msgid "Permissions" +msgstr "Uprawnienia" + +msgid "Permitted Encryption Types" +msgstr "Dozwolone typy szyfrowania" + +msgid "Platform" +msgstr "Platforma" + +msgid "Principal" +msgstr "Naczelnik" + +msgid "Principal name" +msgstr "Nazwa naczelnika" + +msgid "Print as little as possible" +msgstr "Wyświetla tak mało, jak to możliwe" + +msgid "Print debugging information" +msgstr "Wyświetlanie informacji o debugowaniu" + +msgid "Priority" +msgstr "Priorytet" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "Priorytet polityki (wyższy numer równa się niższemu priorytetowi" + +msgid "Quick Links" +msgstr "Szybkie odnośniki" + +msgid "Realm name" +msgstr "Nazwa obszaru" + +msgid "Reason" +msgstr "Przyczyna" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "Przyczyna unieważnienia certyfikatu (0-10)" + +msgid "Remove all principals in this realm" +msgstr "Usuwa wszystkich naczelników w tym obszarze" + +msgid "Remove hosts" +msgstr "Usuń komputery" #, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgid "Removing principal %s\n" +msgstr "Usuwanie naczelnika %s\n" + +msgid "Request id" +msgstr "Identyfikator żądania" + +msgid "Request status" +msgstr "Stan żądania" + +msgid "Reset" +msgstr "Przywróć" + +msgid "Restore" +msgstr "Przywróć" + +msgid "Results are truncated, try a more specific search" msgstr "" +"Wyniki zostały obcięte, proszę spróbować bardziej konkretnego wyszukiwania" -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" +msgid "Retry" +msgstr "Ponów" + +msgid "Revocation reason" +msgstr "Przyczyna unieważnienia" + +msgid "Revoke a certificate." +msgstr "Odrzuć certyfikat." + +msgid "Revoked" +msgstr "Unieważniono" + +msgid "Rights" +msgstr "Uprawnienia" + +msgid "Roles" +msgstr "Role" + +msgid "Rule name" +msgstr "Nazwa reguły" + +msgid "Rule type" +msgstr "Typ reguły" + +msgid "SOA class" +msgstr "Klasa SOA" + +msgid "SOA expire" +msgstr "Wygaszenie SOA" + +msgid "SOA minimum" +msgstr "Minimalne SOA" + +msgid "SOA refresh" +msgstr "Odświeżenie SOA" + +msgid "SOA retry" +msgstr "Ponowienie SOA" + +msgid "SOA serial" +msgstr "Numer seryjny SOA" + +msgid "Search" +msgstr "Wyszukaj" + +msgid "Search size limit" +msgstr "Ograniczenie rozmiaru wyszukiwania" + +msgid "Search time limit" +msgstr "Ograniczenie czasu wyszukiwania" + +msgid "Select All" +msgstr "Zaznacz wszystko" + +msgid "Self" +msgstr "Własny" + +msgid "Serial number" +msgstr "Numer seryjny" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" msgstr "" +"Numer seryjny w formie dziesiętnej lub szesnastkowej, jeśli poprzedzone 0x" -#, c-format +msgid "Server Name" +msgstr "Nazwa serwera" + +msgid "Service Groups" +msgstr "Grupy usług" + +msgid "Service category" +msgstr "Kategoria usług" + +msgid "Service category the rule applies to" +msgstr "Kategoria usług, do których zastosowywana jest reguła" + +msgid "Service group name" +msgstr "Nazwa grupy usługi" + +msgid "Service name" +msgstr "Nazwa usługi" + +msgid "Service principal" +msgstr "Naczelnik usługi" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "Naczelnik usługi dla tego certyfikatu (np. HTTP/test.przykład.pl)" + +#, python-format msgid "" -"JSON-RPC response:\n" -"%s\n" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" msgstr "" +"Naczelnik usługi nie jest w formacie: usługa/w pełni kwalifikowana nazwa " +"komputera: %(reason)s" + +msgid "Services" +msgstr "Usługi" + +msgid "Set OTP" +msgstr "Ustaw OTP" + +msgid "Settings" +msgstr "Ustawienia" + +msgid "Show the list of permitted encryption types and exit" +msgstr "Wyświetla listę dozwolonych typów szyfrowania i kończy działanie" + +msgid "Simple bind failed\n" +msgstr "Proste dowiązanie się nie powiodło\n" + +msgid "Size Limit" +msgstr "Ograniczenie rozmiaru" + +msgid "Status" +msgstr "Stan" + +msgid "Street address" +msgstr "Adres zamieszkania" + +msgid "Subject" +msgstr "Temat" + +msgid "Subtree" +msgstr "Poddrzewo" + +msgid "Subtree to apply ACI to" +msgstr "Poddrzewo, do którego zastosować ACI" + +msgid "Sudo Allow Commands" +msgstr "Polecenia zezwolone sudo" + +msgid "Sudo Command" +msgstr "Polecenie sudo" + +msgid "Sudo Command Groups" +msgstr "Grupy polecenia sudo" + +msgid "Sudo Deny Commands" +msgstr "Polecenia zabronione sudo" #, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgid "Supported encryption types:\n" +msgstr "Obsługiwane typy szyfrowania:\n" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Błąd składni: %(error)s" + +msgid "Target" +msgstr "Cel" + +msgid "Target group" +msgstr "Grupa docelowa" + +msgid "Target your own entry (self)" +msgstr "Cel własnego wpisu („self”)" + +msgid "Telephone Number" +msgstr "Numer telefonu" + +msgid "The IPA realm" +msgstr "Obszar IPA" + +msgid "The default users group cannot be removed" +msgstr "Nie można usunąć domyślnej grupy użytkowników" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "Nazwa komputera musi być w pełni kwalifikowana: %s\n" + +msgid "The hostname to register as" +msgstr "Nazwa komputera, pod jaką zarejestrować" + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" msgstr "" +"Naczelnik, dla którego uzyskać tablicę kluczy (np.: ftp/ftp.example." +"com@EXAMPLE.COM)" -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "Obszar naczelnika nie zgadza się z obszarem dla tego serwera IPA" -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" +msgid "This command requires root access" +msgstr "To polecenie wymaga dostępu roota" -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" +msgid "This entry already exists" +msgstr "Ten wpis już istnieje" -#, fuzzy, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "fork() się nie powiodło\n" +msgid "This is already a posix group" +msgstr "To jest już grupa POSIX" -#, c-format -msgid "Unenrollment successful.\n" -msgstr "Pomyślnie wypisano.\n" +msgid "Ticket expired" +msgstr "Zgłoszenie wygasło" -#, c-format -msgid "Unenrollment failed.\n" -msgstr "Wypisanie się nie powiodło.\n" +msgid "Time Limit" +msgstr "Ograniczenie czasu" -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "nie odnaleziono wyniku w odpowiedzi XML-RPC\n" +msgid "Time limit of search in seconds" +msgstr "Ograniczenie czasu wyszukiwania w sekundach" + +msgid "Time to live" +msgstr "Czas życia" + +msgid "Total number of variables env (>= count)" +msgstr "Całkowita liczba zmiennych środowiskowych (>= licznik)" + +msgid "Type" +msgstr "Typ" + +msgid "UID" +msgstr "UID" #, c-format msgid "Unable to determine IPA server from %s\n" msgstr "Nie można ustalić serwera IPA z %s\n" #, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" +msgid "Unable to determine root DN of %s\n" +msgstr "Nie można ustalić głównego DN %s\n" + +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "Nie można włączyć SSL w LDAP\n" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" msgstr "" -"Nie można dołączyć do komputera: zainicjowanie kontekstu Kerberosa się nie " -"powiodło\n" +"Nie można utworzyć pamięci podręcznej danych uwierzytelniających Kerberosa\n" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "Nie można zainicjować biblioteki LDAP.\n" #, c-format msgid "Unable to join host: Kerberos Credential Cache not found\n" @@ -608,3209 +1286,56 @@ msgstr "" "Kerberosa oraz nie podano hasła komputera.\n" #, c-format -msgid "fork() failed\n" -msgstr "fork() się nie powiodło\n" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "nie odnaleziono ipa-getkeytab\n" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "ipa-getkeytab ma błędne uprawnienia?\n" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "wykonanie ipa-getkeytab się nie powiodło, errno %d\n" - -#, c-format -msgid "child exited with %d\n" -msgstr "potomek został zakończony z %d\n" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "Błąd podczas rozwiązywania tablicy kluczy: %s.\n" - -#, fuzzy, c-format -msgid "Error getting default Kerberos realm: %s.\n" +msgid "Unable to join host: Kerberos context initialization failed\n" msgstr "" -"Błąd podczas uzyskiwania początkowych danych uwierzytelniających: %s.\n" - -#, fuzzy, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "Błąd podczas rozwiązywania tablicy kluczy: %s.\n" +"Nie można dołączyć do komputera: zainicjowanie kontekstu Kerberosa się nie " +"powiodło\n" #, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "" -"Błąd podczas uzyskiwania początkowych danych uwierzytelniających: %s.\n" +msgid "Unable to parse principal\n" +msgstr "Nie można przetworzyć naczelnika\n" #, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "" -"Nie można utworzyć pamięci podręcznej danych uwierzytelniających Kerberosa\n" +msgid "Unable to parse principal name\n" +msgstr "Nie można przetworzyć nazwy naczelnika\n" #, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" -"Błąd podczas przechowywania danych uwierzytelniających w pamięci podręcznej: " -"%s.\n" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "" - -msgid "Quiet mode. Only errors are displayed." -msgstr "" +msgid "Unable to remove entry\n" +msgstr "Nie można usunąć wpisu\n" msgid "Unenroll this host from IPA server" msgstr "Wypisuje ten komputer z serwera IPA" -msgid "Hostname of this server" -msgstr "" - -#, fuzzy -msgid "hostname" -msgstr "Nazwa komputera" - -msgid "IPA Server to use" -msgstr "Serwer IPA do użycia" - -msgid "Specifies where to store keytab information." -msgstr "" - -#, fuzzy -msgid "filename" -msgstr "Nazwa reguły" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" - -#, fuzzy -msgid "LDAP password (if not using Kerberos)" -msgstr "hasło do użycia, jeśli nie jest używany Kerberos" - -msgid "password" -msgstr "hasło" - -#, fuzzy -msgid "LDAP basedn" -msgstr "Hasło LDAP" - -msgid "basedn" -msgstr "" +#, c-format +msgid "Unenrollment failed.\n" +msgstr "Wypisanie się nie powiodło.\n" #, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "Nazwa komputera musi być w pełni kwalifikowana: %s\n" - -#, fuzzy, c-format -msgid "The hostname must not be: %s\n" -msgstr "Nazwa komputera musi być w pełni kwalifikowana: %s\n" - -#, fuzzy -msgid "Failed to add" -msgstr "Utworzenie klucza się nie powiodło.\n" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" +msgid "Unenrollment successful.\n" +msgstr "Pomyślnie wypisano.\n" msgid "Unrevoked" msgstr "Cofnięto unieważnienie" -msgid "Error" -msgstr "Błąd" +msgid "Unselect All" +msgstr "Odznacz wszystko" -#, fuzzy -msgid "Input filename" -msgstr "Nazwa reguły" +msgid "Unspecified" +msgstr "Nieokreślone" -#, fuzzy -msgid "File to load the certificate from." -msgstr "Odrzuć certyfikat." +msgid "Update" +msgstr "Zaktualizuj" -msgid "cannot specify both raw certificate and file" -msgstr "" - -msgid "Input file" -msgstr "" - -#, fuzzy -msgid "File to load the certificate from" -msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "" - -msgid "Split DNS record to parts" -msgstr "" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" - -msgid "DNS resource record type" -msgstr "" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" - -msgid "No option to modify specific record provided." -msgstr "" - -msgid "Current DNS record contents:\n" -msgstr "" - -#, fuzzy, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "Zmodyfikowano komputer „%(value)s”" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -msgid "No option to delete specific record provided." -msgstr "" - -msgid "Delete all?" -msgstr "Usunąć wszystko?" - -#, fuzzy, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "Usunięto komputer „%(value)s”" - -msgid "Server will check DNS forwarder(s)." -msgstr "" - -msgid "This may take some time, please wait ..." -msgstr "" - -msgid "DNS forwarder" -msgstr "" - -msgid "file to store DNS records in nsupdate format" -msgstr "" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" -"Hasła zostały migrowane w formacie sprzed mieszania.\n" -"Program IPA nie może utworzyć kluczy Kerberosa, chyba\n" -"że zostały podane z hasłami w zwykłym tekście. Wszyscy\n" -"migrowani użytkownicy muszą zalogować się na stronie\n" -"https://twoja.domena/ipa/migration/, zanim będą mogli\n" -"używać swoich kont Kerberosa." - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -#, fuzzy -msgid "Maximum number of agreements per replica" -msgstr "Maksymalna liczba zwróconych wpisów" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -#, fuzzy -msgid "Delete a user" -msgstr "Usunąć wszystko?" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - -msgid "maps not connected to /etc/auto.master:" -msgstr "" - -msgid "Import automount files for a specific location." -msgstr "" - -msgid "Master file" -msgstr "" - -#, fuzzy -msgid "Automount master file." -msgstr "Automatyczne montowanie map" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" - -#, python-format -msgid "File %(file)s not found" -msgstr "Nie odnaleziono pliku %(file)s" - -#, fuzzy, python-format -msgid "key %(key)s already exists" -msgstr "Ten wpis już istnieje" - -#, fuzzy, python-format -msgid "map %(map)s already exists" -msgstr "Ten wpis już istnieje" - -msgid "Imported maps:" -msgstr "" - -#, fuzzy, python-format -msgid "Added %(map)s" -msgstr "Dodano komputer „%(value)s”" - -msgid "Imported keys:" -msgstr "" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "" - -msgid "Ignored keys:" -msgstr "" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "" - -msgid "Duplicate maps skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(map)s" -msgstr "" - -msgid "Duplicate keys skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(key)s" -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -#, fuzzy -msgid "User ID" +msgid "User" msgstr "Użytkownik" -msgid "Password" -msgstr "Hasło" +msgid "User Groups" +msgstr "Grupy użytkowników" -#, fuzzy -msgid "First Code" -msgstr "Imię" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "" - -msgid "Invalid credentials" -msgstr "" - -msgid "Create a new vault." -msgstr "" - -#, fuzzy -msgid "Vault password" -msgstr "hasło" - -msgid "File containing the vault password" -msgstr "" - -msgid "File containing the vault public key" -msgstr "" - -msgid "Password can be specified only for symmetric vault" -msgstr "" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "" - -#, fuzzy -msgid "Password specified multiple times" -msgstr "Ukończono zmianę hasła" - -msgid "Public key specified multiple times" -msgstr "" - -msgid "Missing vault public key" -msgstr "" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "" - -msgid "Modify a vault." -msgstr "" - -#, fuzzy -msgid "Change password" -msgstr "Hasło użytkownika" - -#, fuzzy -msgid "Old vault password" -msgstr "hasło Bind" - -msgid "File containing the old vault password" -msgstr "" - -#, fuzzy -msgid "New vault password" -msgstr "Nowe hasło" - -msgid "File containing the new vault password" -msgstr "" - -#, fuzzy -msgid "Old vault private key" -msgstr "Utworzenie klucza się nie powiodło.\n" - -msgid "File containing the old vault private key" -msgstr "" - -msgid "File containing the new vault public key" -msgstr "" - -msgid "New public key specified multiple times" -msgstr "" - -msgid "Missing new vault public key" -msgstr "" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "" - -msgid "Binary data to archive" -msgstr "" - -msgid "File containing data to archive" -msgstr "" - -msgid "Override existing password" -msgstr "" - -msgid "Input data specified multiple times" -msgstr "" - -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" - -msgid "Invalid vault type" -msgstr "" - -msgid "Retrieve a data from a vault." -msgstr "" - -msgid "File to store retrieved data" -msgstr "" - -#, fuzzy -msgid "Vault private key" -msgstr "Utworzenie klucza się nie powiodło.\n" - -msgid "File containing the vault private key" -msgstr "" - -msgid "Data" -msgstr "Dane" - -msgid "Private key specified multiple times" -msgstr "" - -msgid "Missing vault private key" -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "Wyłączono konto użytkownika „%(value)s”" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "ACI name" -msgstr "Nazwa ACI" - -#, fuzzy -msgid "Permission" -msgstr "Uprawnienia" - -#, fuzzy -msgid "Permission ACI grants access to" -msgstr "Grupa użytkowników, do której ACI zapewnia dostęp" - -msgid "User group" -msgstr "Grupa użytkowników" - -msgid "User group ACI grants access to" -msgstr "Grupa użytkowników, do której ACI zapewnia dostęp" - -msgid "Permissions" -msgstr "Uprawnienia" - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Attributes to which the permission applies" -msgstr "" - -msgid "Attributes" -msgstr "Atrybuty" - -msgid "Type" -msgstr "Typ" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" - -msgid "Member of" -msgstr "Element" - -msgid "Member of a group" -msgstr "Element grupy" - -msgid "Filter" -msgstr "Filtr" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "Dozwolony filtr LDAP (np. ou=Inżynieria)" - -msgid "Subtree" -msgstr "Poddrzewo" - -msgid "Subtree to apply ACI to" -msgstr "Poddrzewo, do którego zastosować ACI" - -msgid "Target group" -msgstr "Grupa docelowa" - -msgid "Group to apply ACI to" -msgstr "Grupa, do której zastosować ACI" - -msgid "Target your own entry (self)" -msgstr "Cel własnego wpisu („self”)" - -msgid "Apply ACI to your own entry (self)" -msgstr "Zastosowanie ACI do własnego wpisu („self”)" - -msgid "Create new ACI." -msgstr "" - -msgid "ACI prefix" -msgstr "" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" - -msgid "Test the ACI syntax but don't write anything" -msgstr "" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" - -msgid "User-friendly description of action performed" -msgstr "" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" - -#, fuzzy -msgid "Delete ACI." -msgstr "Usuń" - -msgid "True means the operation was successful" -msgstr "" - -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" - -msgid "A string searched in all relevant object attributes" -msgstr "" - -msgid "Primary key only" -msgstr "" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" - -#, fuzzy -msgid "Number of entries returned" -msgstr "Maksymalna liczba zwróconych wpisów" - -msgid "True if not all results were returned" -msgstr "" - -msgid "Modify ACI." -msgstr "" - -msgid "Rename an ACI." -msgstr "" - -#, fuzzy -msgid "New ACI name" -msgstr "Nazwa ACI" - -msgid "Display a single ACI given an ACI name." -msgstr "" - -msgid "Location of the ACI" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Description" -msgstr "Opis" - -#, fuzzy -msgid "A description of this auto member rule" -msgstr "Opis tego polecenia" - -#, fuzzy -msgid "Default (fallback) Group" -msgstr "Domyślna grupa użytkowników" - -#, fuzzy -msgid "Default group for entries to land" -msgstr "Domyślna grupa dla nowych użytkowników" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - -#, fuzzy -msgid "Grouping Type" -msgstr "Nazwa grupy" - -#, fuzzy -msgid "Grouping to which the rule applies" -msgstr "Kategoria usług, do których zastosowywana jest reguła" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -#, fuzzy -msgid "Attribute Key" -msgstr "Atrybut" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -#, fuzzy -msgid "Conditions that could not be added" -msgstr "Elementy, które nie mogły zostać dodane" - -#, fuzzy -msgid "Number of conditions added" -msgstr "Liczba wczytanych wtyczek" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "List of deletions that failed" -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "Uprawnienia" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Users" -msgstr "Użytkownicy" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Hosts" -msgstr "Komputery" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -#, fuzzy -msgid "Conditions that could not be removed" -msgstr "Liczba elementów, które nie mogły zostać usunięte" - -#, fuzzy -msgid "Number of conditions removed" -msgstr "Liczba usuniętych elementów" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" - -msgid "Key" -msgstr "Klucz" - -#, fuzzy -msgid "Automount key name." -msgstr "Automatyczne montowanie kluczy" - -msgid "Mount information" -msgstr "Informacje o montowaniu" - -msgid "description" -msgstr "opis" - -msgid "Location" -msgstr "Położenie" - -msgid "Automount location name." -msgstr "" - -msgid "Map" -msgstr "Mapa" - -#, fuzzy -msgid "Automount map name." -msgstr "Automatyczne montowanie map" - -msgid "Create a new automount key." -msgstr "" - -msgid "Delete an automount key." -msgstr "" - -msgid "Continuous mode: Don't stop on errors." -msgstr "Tryb ciągły: bez zatrzymywania po błędach." - -msgid "Search for an automount key." -msgstr "" - -msgid "Time Limit" -msgstr "Ograniczenie czasu" - -msgid "Time limit of search in seconds" -msgstr "Ograniczenie czasu wyszukiwania w sekundach" - -msgid "Size Limit" -msgstr "Ograniczenie rozmiaru" - -msgid "Maximum number of entries returned" -msgstr "Maksymalna liczba zwróconych wpisów" - -msgid "Modify an automount key." -msgstr "" - -#, fuzzy -msgid "New mount information" -msgstr "Informacje o montowaniu" - -#, fuzzy -msgid "Rename" -msgstr "Nazwa reguły" - -msgid "Rename the automount key object" -msgstr "" - -msgid "Display an automount key." -msgstr "" - -msgid "Create a new automount location." -msgstr "" - -msgid "Delete an automount location." -msgstr "" - -msgid "Search for an automount location." -msgstr "" - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" - -msgid "Display an automount location." -msgstr "" - -msgid "Generate automount files for a specific location." -msgstr "" - -msgid "Create a new automount map." -msgstr "" - -msgid "Create a new indirect mount point." -msgstr "" - -msgid "Mount point" -msgstr "Punkt montowania" - -msgid "Parent map" -msgstr "Mapa nadrzędna" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" - -msgid "Delete an automount map." -msgstr "" - -msgid "Search for an automount map." -msgstr "" - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" - -msgid "Modify an automount map." -msgstr "" - -msgid "Display an automount map." -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" - -msgid "Nested Methods to execute" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -#, fuzzy -msgid "Search for existing certificates." -msgstr "Przyczyna unieważnienia certyfikatu (0-10)" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason" -msgstr "Przyczyna" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "Przyczyna unieważnienia certyfikatu (0-10)" - -#, fuzzy -msgid "minimum serial number" -msgstr "Numer seryjny" - -#, fuzzy -msgid "maximum serial number" -msgstr "Numer seryjny" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -#, fuzzy -msgid "Maximum number of certs returned" -msgstr "Maksymalna liczba zwróconych wpisów" - -#, fuzzy -msgid "Take a revoked certificate off hold." -msgstr "Odrzuć certyfikat." - -msgid "Serial number" -msgstr "Numer seryjny" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" -"Numer seryjny w formie dziesiętnej lub szesnastkowej, jeśli poprzedzone 0x" - -#, fuzzy -msgid "Submit a certificate signing request." -msgstr "Dekodowanie żądania podpisywania certyfikatu się nie powiodło: %s" - -msgid "CSR" -msgstr "" - -msgid "Principal" -msgstr "Naczelnik" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "Naczelnik usługi dla tego certyfikatu (np. HTTP/test.przykład.pl)" - -msgid "automatically add the principal if it doesn't exist" -msgstr "automatycznie dodaj naczelnika, jeśli nie istnieje" - -msgid "Dictionary mapping variable name to value" -msgstr "Nazwa zmiennej mapowania słownika do ustawienia jako wartość" - -msgid "Revoke a certificate." -msgstr "Odrzuć certyfikat." - -#, fuzzy -msgid "Retrieve an existing certificate." -msgstr "Odrzuć certyfikat." - -msgid "Output filename" -msgstr "" - -#, fuzzy -msgid "File to store the certificate in." -msgstr "Odrzuć certyfikat." - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "Identyfikator żądania" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -#, fuzzy -msgid "Maximum username length" -msgstr "Minimalna długość" - -msgid "Home directory base" -msgstr "Podstawa katalogu domowego" - -msgid "Default location of home directories" -msgstr "" - -msgid "Default shell" -msgstr "Domyślna powłoka" - -msgid "Default shell for new users" -msgstr "Domyślna powłoka dla nowych użytkowników" - -msgid "Default users group" -msgstr "Domyślna grupa użytkowników" - -msgid "Default group for new users" -msgstr "Domyślna grupa dla nowych użytkowników" - -msgid "Default e-mail domain" -msgstr "" - -msgid "Search time limit" -msgstr "Ograniczenie czasu wyszukiwania" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" - -msgid "Search size limit" -msgstr "Ograniczenie rozmiaru wyszukiwania" - -#, fuzzy -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "Maksymalna liczba zwróconych wpisów" - -msgid "User search fields" -msgstr "Pola wyszukiwania użytkowników" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" - -#, fuzzy -msgid "Group search fields" -msgstr "Pola wyszukiwania użytkowników" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" - -#, fuzzy -msgid "Enable migration mode" -msgstr "Fałsz, jeśli wyłączono tryb migracji." - -msgid "Certificate Subject base" -msgstr "Podstawa tematu certyfikatu" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "" - -#, fuzzy -msgid "Default group objectclasses" -msgstr "Domyślna grupa dla nowych użytkowników" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "" - -#, fuzzy -msgid "Default user objectclasses" -msgstr "Domyślna grupa użytkowników" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" - -msgid "Password Expiration Notification (days)" -msgstr "" - -msgid "Number of days's notice of impending password expiration" -msgstr "" - -msgid "Password plugin features" -msgstr "" - -msgid "Extra hashes to generate in password plug-in" -msgstr "" - -msgid "SELinux user map order" -msgstr "" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" - -#, fuzzy -msgid "Default SELinux user" -msgstr "Domyślna grupa użytkowników" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" - -#, fuzzy -msgid "Default PAC types" -msgstr "Domyślna powłoka" - -msgid "Default types of PAC supported for services" -msgstr "" - -msgid "Default user authentication types" -msgstr "" - -msgid "Default types of supported user authentication" -msgstr "" - -msgid "Modify configuration options." -msgstr "" - -msgid "Show the current configuration." -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "Delegation name" -msgstr "" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "" - -msgid "Attributes to which the delegation applies" -msgstr "" - -#, fuzzy -msgid "Member user group" -msgstr "Grupy usługi elementów" - -#, fuzzy -msgid "User group to apply delegation to" -msgstr "Grupa, do której zastosować ACI" - -msgid "Add a new delegation." -msgstr "" - -msgid "Delete a delegation." -msgstr "" - -msgid "Search for delegations." -msgstr "" - -msgid "Modify a delegation." -msgstr "" - -msgid "Display information about a delegation." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "Global forwarders" -msgstr "" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -#, fuzzy -msgid "Forward policy" -msgstr "Polityka haseł" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" - -msgid "Allow PTR sync" -msgstr "" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" - -msgid "Zone refresh interval" -msgstr "" - -msgid "Zone name" -msgstr "Nazwa strefy" - -msgid "Zone name (FQDN)" -msgstr "Nazwa strefy (FQDN)" - -msgid "Reverse zone IP network" -msgstr "" - -msgid "IP network to create reverse zone name from" -msgstr "" - -msgid "Active zone" -msgstr "Aktywna strefa" - -msgid "Is zone active?" -msgstr "" - -msgid "Zone forwarders" -msgstr "" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -#, fuzzy -msgid "Record name" -msgstr "Nazwa reguły" - -msgid "Time to live" -msgstr "Czas życia" - -msgid "Records" -msgstr "" - -#, fuzzy -msgid "Record type" -msgstr "Typ reguły" - -msgid "Record data" -msgstr "" - -msgid "A record" -msgstr "" - -msgid "Raw A records" -msgstr "" - -msgid "A IP Address" -msgstr "" - -#, fuzzy -msgid "IP Address" -msgstr "Adres pocztowy" - -msgid "A Create reverse" -msgstr "" - -msgid "Create reverse record for this IP Address" -msgstr "" - -msgid "AAAA record" -msgstr "" - -msgid "Raw AAAA records" -msgstr "" - -msgid "AAAA IP Address" -msgstr "" - -msgid "AAAA Create reverse" -msgstr "" - -msgid "A6 record" -msgstr "" - -msgid "Raw A6 records" -msgstr "" - -msgid "A6 Record data" -msgstr "" - -msgid "AFSDB record" -msgstr "" - -msgid "Raw AFSDB records" -msgstr "" - -msgid "AFSDB Subtype" -msgstr "" - -#, fuzzy -msgid "Subtype" -msgstr "Poddrzewo" - -#, fuzzy -msgid "AFSDB Hostname" -msgstr "Nazwa komputera" - -msgid "Hostname" -msgstr "Nazwa komputera" - -msgid "APL record" -msgstr "" - -msgid "Raw APL records" -msgstr "" - -msgid "CERT record" -msgstr "" - -msgid "Raw CERT records" -msgstr "" - -#, fuzzy -msgid "CERT Certificate Type" -msgstr "Certyfikat" - -#, fuzzy -msgid "Certificate Type" -msgstr "Certyfikat" - -msgid "CERT Key Tag" -msgstr "" - -msgid "Key Tag" -msgstr "" - -msgid "CERT Algorithm" -msgstr "" - -msgid "Algorithm" -msgstr "" - -#, fuzzy -msgid "CERT Certificate/CRL" -msgstr "Certyfikat" - -#, fuzzy -msgid "Certificate/CRL" -msgstr "Certyfikat" - -msgid "CNAME record" -msgstr "" - -msgid "Raw CNAME records" -msgstr "" - -#, fuzzy -msgid "CNAME Hostname" -msgstr "Nazwa komputera" - -msgid "A hostname which this alias hostname points to" -msgstr "" - -msgid "DHCID record" -msgstr "" - -msgid "Raw DHCID records" -msgstr "" - -msgid "DLV record" -msgstr "" - -msgid "Raw DLV records" -msgstr "" - -msgid "DLV Key Tag" -msgstr "" - -msgid "DLV Algorithm" -msgstr "" - -msgid "DLV Digest Type" -msgstr "" - -msgid "Digest Type" -msgstr "" - -msgid "DLV Digest" -msgstr "" - -msgid "Digest" -msgstr "" - -msgid "DNAME record" -msgstr "" - -msgid "Raw DNAME records" -msgstr "" - -#, fuzzy -msgid "DNAME Target" -msgstr "Cel" - -msgid "Target" -msgstr "Cel" - -msgid "DNSKEY record" -msgstr "" - -msgid "Raw DNSKEY records" -msgstr "" - -msgid "DS record" -msgstr "" - -msgid "Raw DS records" -msgstr "" - -msgid "DS Key Tag" -msgstr "" - -msgid "DS Algorithm" -msgstr "" - -msgid "DS Digest Type" -msgstr "" - -msgid "DS Digest" -msgstr "" - -msgid "HIP record" -msgstr "" - -msgid "Raw HIP records" -msgstr "" - -msgid "IPSECKEY record" -msgstr "" - -msgid "Raw IPSECKEY records" -msgstr "" - -msgid "KEY record" -msgstr "" - -msgid "Raw KEY records" -msgstr "" - -msgid "KX record" -msgstr "" - -msgid "Raw KX records" -msgstr "" - -msgid "KX Preference" -msgstr "" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" - -msgid "KX Exchanger" -msgstr "" - -msgid "A host willing to act as a key exchanger" -msgstr "" - -msgid "LOC record" -msgstr "" - -msgid "Raw LOC records" -msgstr "" - -msgid "LOC Degrees Latitude" -msgstr "" - -msgid "Degrees Latitude" -msgstr "" - -msgid "LOC Minutes Latitude" -msgstr "" - -msgid "Minutes Latitude" -msgstr "" - -msgid "LOC Seconds Latitude" -msgstr "" - -msgid "Seconds Latitude" -msgstr "" - -msgid "LOC Direction Latitude" -msgstr "" - -msgid "Direction Latitude" -msgstr "" - -msgid "LOC Degrees Longitude" -msgstr "" - -msgid "Degrees Longitude" -msgstr "" - -msgid "LOC Minutes Longitude" -msgstr "" - -msgid "Minutes Longitude" -msgstr "" - -msgid "LOC Seconds Longitude" -msgstr "" - -msgid "Seconds Longitude" -msgstr "" - -msgid "LOC Direction Longitude" -msgstr "" - -msgid "Direction Longitude" -msgstr "" - -msgid "LOC Altitude" -msgstr "" - -msgid "Altitude" -msgstr "" - -msgid "LOC Size" -msgstr "" - -msgid "Size" -msgstr "" - -msgid "LOC Horizontal Precision" -msgstr "" - -msgid "Horizontal Precision" -msgstr "" - -msgid "LOC Vertical Precision" -msgstr "" - -msgid "Vertical Precision" -msgstr "" - -msgid "MX record" -msgstr "" - -msgid "Raw MX records" -msgstr "" - -msgid "MX Preference" -msgstr "" - -msgid "MX Exchanger" -msgstr "" - -msgid "A host willing to act as a mail exchanger" -msgstr "" - -msgid "NAPTR record" -msgstr "" - -msgid "Raw NAPTR records" -msgstr "" - -msgid "NAPTR Order" -msgstr "" - -msgid "Order" -msgstr "" - -msgid "NAPTR Preference" -msgstr "" - -msgid "Preference" -msgstr "" - -msgid "NAPTR Flags" -msgstr "" - -msgid "Flags" -msgstr "" - -#, fuzzy -msgid "NAPTR Service" -msgstr "Usługi" - -#, fuzzy -msgid "Service" -msgstr "Usługi" - -msgid "NAPTR Regular Expression" -msgstr "" - -msgid "Regular Expression" -msgstr "" - -msgid "NAPTR Replacement" -msgstr "" - -msgid "Replacement" -msgstr "" - -msgid "NS record" -msgstr "" - -msgid "Raw NS records" -msgstr "" - -#, fuzzy -msgid "NS Hostname" -msgstr "Nazwa komputera" - -msgid "NSEC record" -msgstr "" - -msgid "Raw NSEC records" -msgstr "" - -msgid "NSEC3 record" -msgstr "" - -msgid "Raw NSEC3 records" -msgstr "" - -msgid "PTR record" -msgstr "" - -msgid "Raw PTR records" -msgstr "" - -#, fuzzy -msgid "PTR Hostname" -msgstr "Nazwa komputera" - -#, fuzzy -msgid "The hostname this reverse record points to" -msgstr "Nazwa komputera, pod jaką zarejestrować" - -msgid "RRSIG record" -msgstr "" - -msgid "Raw RRSIG records" -msgstr "" - -msgid "RP record" -msgstr "" - -msgid "Raw RP records" -msgstr "" - -msgid "SIG record" -msgstr "" - -msgid "Raw SIG records" -msgstr "" - -msgid "SPF record" -msgstr "" - -msgid "Raw SPF records" -msgstr "" - -msgid "SRV record" -msgstr "" - -msgid "Raw SRV records" -msgstr "" - -#, fuzzy -msgid "SRV Priority" -msgstr "Priorytet" - -msgid "Priority" -msgstr "Priorytet" - -#, fuzzy -msgid "SRV Weight" -msgstr "Uprawnienia" - -#, fuzzy -msgid "Weight" -msgstr "Uprawnienia" - -msgid "SRV Port" -msgstr "" - -msgid "Port" -msgstr "" - -#, fuzzy -msgid "SRV Target" -msgstr "Cel" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" - -msgid "SSHFP record" -msgstr "" - -msgid "Raw SSHFP records" -msgstr "" - -msgid "SSHFP Algorithm" -msgstr "" - -#, fuzzy -msgid "SSHFP Fingerprint Type" -msgstr "Odcisk (SHA1)" - -#, fuzzy -msgid "Fingerprint Type" -msgstr "Odcisk (SHA1)" - -#, fuzzy -msgid "SSHFP Fingerprint" -msgstr "Odcisk (SHA1)" - -#, fuzzy -msgid "Fingerprint" -msgstr "Odcisk (SHA1)" - -msgid "TA record" -msgstr "" - -msgid "Raw TA records" -msgstr "" - -#, fuzzy -msgid "TLSA record" -msgstr "Ponowienie SOA" - -msgid "Raw TLSA records" -msgstr "" - -#, fuzzy -msgid "TLSA Certificate Usage" -msgstr "Certyfikat" - -#, fuzzy -msgid "Certificate Usage" -msgstr "Certyfikat" - -msgid "TLSA Selector" -msgstr "" - -#, fuzzy -msgid "Selector" -msgstr "Zaznacz wszystko" - -msgid "TLSA Matching Type" -msgstr "" - -msgid "Matching Type" -msgstr "" - -msgid "TLSA Certificate Association Data" -msgstr "" - -#, fuzzy -msgid "Certificate Association Data" -msgstr "Podstawa tematu certyfikatu" - -msgid "TKEY record" -msgstr "" - -msgid "Raw TKEY records" -msgstr "" - -msgid "TSIG record" -msgstr "" - -msgid "Raw TSIG records" -msgstr "" - -msgid "TXT record" -msgstr "" - -msgid "Raw TXT records" -msgstr "" - -msgid "TXT Text Data" -msgstr "" - -#, fuzzy -msgid "Text Data" -msgstr "Dane" - -msgid "Authoritative nameserver" -msgstr "" - -msgid "Authoritative nameserver domain name" -msgstr "" - -msgid "Administrator e-mail address" -msgstr "Adres e-mail administratora" - -msgid "SOA serial" -msgstr "Numer seryjny SOA" - -#, fuzzy -msgid "SOA record serial number" -msgstr "Numer seryjny" - -msgid "SOA refresh" -msgstr "Odświeżenie SOA" - -#, fuzzy -msgid "SOA record refresh time" -msgstr "Odświeżenie SOA" - -msgid "SOA retry" -msgstr "Ponowienie SOA" - -#, fuzzy -msgid "SOA record retry time" -msgstr "Ponowienie SOA" - -msgid "SOA expire" -msgstr "Wygaszenie SOA" - -#, fuzzy -msgid "SOA record expire time" -msgstr "Wygaszenie SOA" - -msgid "SOA minimum" -msgstr "Minimalne SOA" - -msgid "How long should negative responses be cached" -msgstr "" - -msgid "Time to live for records at zone apex" -msgstr "" - -msgid "BIND update policy" -msgstr "Polityka aktualizacji BIND" - -msgid "Dynamic update" -msgstr "" - -msgid "Allow dynamic updates." -msgstr "" - -msgid "Allow query" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" - -msgid "Allow transfer" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" - -msgid "Allow in-line DNSSEC signing" -msgstr "" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "" - -msgid "NSEC3PARAM record" -msgstr "" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" - -#, fuzzy -msgid "Resolve a host name in DNS." -msgstr "wymuszenie nazwy komputera, nawet jeśli nie w DNS" - -msgid "Modify global DNS configuration." -msgstr "" - -msgid "Show the current global DNS configuration." -msgstr "" - -msgid "Create new DNS forward zone." -msgstr "" - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" - -#, fuzzy -msgid "Permission value" -msgstr "Uprawnienia" - -msgid "Delete DNS forward zone." -msgstr "" - -msgid "Disable DNS Forward Zone." -msgstr "" - -msgid "Enable DNS Forward Zone." -msgstr "" - -msgid "Search for DNS forward zones." -msgstr "" - -msgid "Modify DNS forward zone." -msgstr "" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" - -msgid "Display information about a DNS forward zone." -msgstr "" - -msgid "Add new DNS resource record." -msgstr "" - -msgid "Force" -msgstr "" - -#, fuzzy -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "wymuszenie nazwy komputera, nawet jeśli nie w DNS" - -msgid "Structured" -msgstr "" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" - -#, fuzzy -msgid "Delete DNS resource record." -msgstr "Usuń wszystkie powiązane wpisy" - -msgid "Delete all associated records" -msgstr "Usuń wszystkie powiązane wpisy" - -msgid "Delete DNS record entry." -msgstr "" - -msgid "Search for DNS resources." -msgstr "" - -msgid "Modify a DNS resource record." -msgstr "" - -msgid "Rename the DNS resource record object" -msgstr "" - -msgid "Display DNS resource." -msgstr "" - -msgid "Create new DNS zone (SOA record)." -msgstr "" - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" - -msgid "Add a permission for per-zone access delegation." -msgstr "" - -msgid "Delete DNS zone (SOA record)." -msgstr "" - -msgid "Disable DNS Zone." -msgstr "" - -msgid "Enable DNS Zone." -msgstr "" - -msgid "Search for DNS zones (SOA records)." -msgstr "" - -msgid "Forward zones only" -msgstr "" - -msgid "Search for forward zones only" -msgstr "" - -msgid "Modify DNS zone (SOA record)." -msgstr "" - -#, fuzzy -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "wymuszenie nazwy komputera, nawet jeśli nie w DNS" - -msgid "Remove a permission for per-zone access delegation." -msgstr "" - -msgid "Display information about a DNS zone (SOA record)." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "Group name" -msgstr "Nazwa grupy" - -msgid "Group description" -msgstr "Opis grupy" - -msgid "GID" -msgstr "GID" - -msgid "GID (use this option to set it manually)" -msgstr "GID (ta opcja umożliwia jego ręczne ustawienie)" - -msgid "Member users" -msgstr "Elementy użytkowników" - -msgid "Member groups" -msgstr "Elementy grupy" - -msgid "Member of groups" -msgstr "Członek grup" - -msgid "Roles" -msgstr "Role" - -#, fuzzy -msgid "Member of netgroups" -msgstr "Członek grup" - -#, fuzzy -msgid "Member of Sudo rule" -msgstr "Element grupy" - -#, fuzzy -msgid "Member of HBAC rule" -msgstr "Element grupy" - -#, fuzzy -msgid "Indirect Member users" -msgstr "Elementy użytkowników" - -#, fuzzy -msgid "Indirect Member groups" -msgstr "Elementy grupy" - -#, fuzzy -msgid "Indirect Member of group" -msgstr "Członek grupy" - -#, fuzzy -msgid "Indirect Member of netgroup" -msgstr "Członek grupy" - -#, fuzzy -msgid "Indirect Member of role" -msgstr "Członek grupy" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - -#, fuzzy -msgid "Create a new group." -msgstr "Nie jest zarządzaną grupą" - -#, fuzzy -msgid "Create as a non-POSIX group" -msgstr "zmiana na grupę POSIX" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Suppress processing of membership attributes." -msgstr "" - -#, fuzzy -msgid "Add members to a group." -msgstr "Element grupy" - -#, fuzzy -msgid "External member" -msgstr "Zewnętrzny komputer" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -#, fuzzy -msgid "member user" -msgstr "Elementy użytkowników" - -msgid "users to add" -msgstr "" - -#, fuzzy -msgid "member group" -msgstr "Elementy grupy" - -msgid "groups to add" -msgstr "" - -msgid "Members that could not be added" -msgstr "Elementy, które nie mogły zostać dodane" - -msgid "Number of members added" -msgstr "Liczba dodanych elementów" - -#, fuzzy -msgid "Delete group." -msgstr "Domyślna grupa użytkowników" - -#, fuzzy -msgid "Detach a managed group from a user." -msgstr "Nie jest zarządzaną grupą" - -#, fuzzy -msgid "Search for groups." -msgstr "Członek grup" - -msgid "search for private groups" -msgstr "" - -#, fuzzy -msgid "search for POSIX groups" -msgstr "zmiana na grupę POSIX" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -#, fuzzy -msgid "search for non-POSIX groups" -msgstr "zmiana na grupę POSIX" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "user" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -#, fuzzy -msgid "group" -msgstr "Grupa" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -#, fuzzy -msgid "netgroup" -msgstr "Grupy sieciowe" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "role" -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "HBAC rule" -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "sudo rule" -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a group." -msgstr "Element grupy" - -msgid "change to a POSIX group" -msgstr "zmiana na grupę POSIX" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -#, fuzzy -msgid "Remove members from a group." -msgstr "Element grupy" - -#, fuzzy -msgid "users to remove" -msgstr "Liczba usuniętych elementów" - -msgid "groups to remove" -msgstr "" - -msgid "Members that could not be removed" -msgstr "Liczba elementów, które nie mogły zostać usunięte" - -msgid "Number of members removed" -msgstr "Liczba usuniętych elementów" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" +msgid "User ID Number (system will assign one if not provided)" msgstr "" - -msgid "Rule name" -msgstr "Nazwa reguły" - -msgid "Rule type" -msgstr "Typ reguły" - -#, fuzzy -msgid "Rule type (allow)" -msgstr "Typ reguły" +"Numer identyfikacyjny użytkownika (system go przydzieli, jeśli nie zostanie " +"podany)" msgid "User category" msgstr "Kategoria użytkowników" @@ -3818,11653 +1343,58 @@ msgstr "Kategoria użytkowników" msgid "User category the rule applies to" msgstr "Kategoria użytkowników, do których zastosowywana jest reguła" -msgid "Host category" -msgstr "Kategoria komputerów" +msgid "User container" +msgstr "Kontener użytkownika" -msgid "Host category the rule applies to" -msgstr "Kategoria komputerów, do których zastosowywana jest reguła" +msgid "User group" +msgstr "Grupa użytkowników" -msgid "Service category" -msgstr "Kategoria usług" - -msgid "Service category the rule applies to" -msgstr "Kategoria usług, do których zastosowywana jest reguła" - -msgid "Enabled" -msgstr "Włączone" - -msgid "User Groups" -msgstr "Grupy użytkowników" - -msgid "Host Groups" -msgstr "Grupy komputerów" - -msgid "Services" -msgstr "Usługi" - -msgid "Service Groups" -msgstr "Grupy usług" - -msgid "External host" -msgstr "Zewnętrzny komputer" - -msgid "Create a new HBAC rule." -msgstr "" - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "" - -#, fuzzy -msgid "member host" -msgstr "Element komputerów" - -msgid "hosts to add" -msgstr "" - -#, fuzzy -msgid "member host group" -msgstr "Element grupy komputerów" - -#, fuzzy -msgid "host groups to add" -msgstr "Grupy komputerów" - -msgid "Add services to an HBAC rule." -msgstr "" - -#, fuzzy -msgid "member HBAC service" -msgstr "Usługi elementów" - -#, fuzzy -msgid "HBAC services to add" -msgstr "Opis grupy usługi HBAC" - -#, fuzzy -msgid "member HBAC service group" -msgstr "Grupy usługi elementów" - -#, fuzzy -msgid "HBAC service groups to add" -msgstr "Opis grupy usługi HBAC" - -msgid "Add users and groups to an HBAC rule." -msgstr "" - -msgid "Delete an HBAC rule." -msgstr "" - -msgid "Disable an HBAC rule." -msgstr "" - -msgid "Enable an HBAC rule." -msgstr "" - -msgid "Search for HBAC rules." -msgstr "" - -msgid "Modify an HBAC rule." -msgstr "" - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "hosts to remove" -msgstr "" - -msgid "host groups to remove" -msgstr "" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "" - -#, fuzzy -msgid "HBAC services to remove" -msgstr "Opis grupy usługi HBAC" - -#, fuzzy -msgid "HBAC service groups to remove" -msgstr "Opis grupy usługi HBAC" - -msgid "Remove users and groups from an HBAC rule." -msgstr "" - -msgid "Display the properties of an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" - -msgid "Service name" -msgstr "Nazwa usługi" - -#, fuzzy -msgid "HBAC service" -msgstr "Usługi" - -#, fuzzy -msgid "HBAC service description" -msgstr "Opis grupy usługi HBAC" - -#, fuzzy -msgid "Member of HBAC service groups" -msgstr "Grupy usługi elementów" - -msgid "Add a new HBAC service." -msgstr "" - -msgid "Delete an existing HBAC service." -msgstr "" - -msgid "Search for HBAC services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" - -msgid "Modify an HBAC service." -msgstr "" - -msgid "Display information about an HBAC service." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "Service group name" -msgstr "Nazwa grupy usługi" - -msgid "HBAC service group description" -msgstr "Opis grupy usługi HBAC" - -#, fuzzy -msgid "Member HBAC service" -msgstr "Usługi elementów" - -#, fuzzy -msgid "Add a new HBAC service group." -msgstr "Opis grupy usługi HBAC" - -#, fuzzy -msgid "Add members to an HBAC service group." -msgstr "Grupy usługi elementów" - -#, fuzzy -msgid "Delete an HBAC service group." -msgstr "Grupy usługi elementów" - -msgid "Search for an HBAC service group." -msgstr "" - -#, fuzzy -msgid "Modify an HBAC service group." -msgstr "Opis grupy usługi HBAC" - -#, fuzzy -msgid "Remove members from an HBAC service group." -msgstr "Grupy usługi elementów" - -msgid "Display information about an HBAC service group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -msgid "User name" -msgstr "Nazwa użytkownika" - -#, fuzzy -msgid "Target host" -msgstr "Cel" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -#, fuzzy -msgid "Not matched rules" -msgstr "Nie jest zarządzaną grupą" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host name" -msgstr "Nazwa komputera" - -msgid "A description of this host" -msgstr "Opis tego komputera" - -msgid "Locality" -msgstr "Lokalizacja" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "Lokalizacja komputera (np. „Baltimore, MD”)" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "Położenie komputera (np. „Laboratorium nr 2”)" - -msgid "Platform" -msgstr "Platforma" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "Platforma sprzętowa komputera (np. „Lenovo T61”)" - -msgid "Operating system" -msgstr "System operacyjny" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "System operacyjny komputera i jego wersja (np. „Fedora 9”)" - -msgid "User password" -msgstr "Hasło użytkownika" - -msgid "Password used in bulk enrollment" -msgstr "Hasło używane w zapisywaniu większej części" - -#, fuzzy -msgid "Generate a random password to be used in bulk enrollment" -msgstr "Hasło używane w zapisywaniu większej części" - -#, fuzzy -msgid "Random password" -msgstr "hasło Bind" - -msgid "Certificate" -msgstr "Certyfikat" - -msgid "Base-64 encoded server certificate" -msgstr "Certyfikat serwera zakodowany za pomocą Base-64" - -msgid "Principal name" -msgstr "Nazwa naczelnika" - -#, fuzzy -msgid "MAC address" -msgstr "Adres e-mail" - -msgid "Hardware MAC address(es) on this host" -msgstr "" - -msgid "SSH public key" -msgstr "" - -msgid "Class" -msgstr "Klasa" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "Assigned ID View" -msgstr "" - -msgid "Requires pre-authentication" -msgstr "" - -msgid "Pre-authentication is required for the service" -msgstr "" - -msgid "Trusted for delegation" -msgstr "" - -msgid "Client credentials may be delegated to the service" -msgstr "" - -msgid "Member of host-groups" -msgstr "Element grupy komputerów" - -#, fuzzy -msgid "Indirect Member of host-group" -msgstr "Element grupy komputerów" - -msgid "Keytab" -msgstr "Tabela kluczy" - -msgid "Managed by" -msgstr "" - -msgid "Managing" -msgstr "" - -#, fuzzy -msgid "Users allowed to retrieve keytab" -msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" - -#, fuzzy -msgid "Groups allowed to retrieve keytab" -msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" - -#, fuzzy -msgid "Hosts allowed to retrieve keytab" -msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "" - -#, fuzzy -msgid "Users allowed to create keytab" -msgstr "Utworzenie klucza się nie powiodło.\n" - -#, fuzzy -msgid "Groups allowed to create keytab" -msgstr "Utworzenie klucza się nie powiodło.\n" - -#, fuzzy -msgid "Hosts allowed to create keytab" -msgstr "Utworzenie klucza się nie powiodło.\n" - -#, fuzzy -msgid "Host Groups allowed to create keytab" -msgstr "Utworzenie klucza się nie powiodło.\n" - -#, fuzzy -msgid "Add a new host." -msgstr "Dodaj i zamknij" - -msgid "force host name even if not in DNS" -msgstr "wymuszenie nazwy komputera, nawet jeśli nie w DNS" - -msgid "skip reverse DNS detection" -msgstr "" - -msgid "Add the host to DNS with this IP address" -msgstr "" - -msgid "Add hosts that can manage this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" - -#, fuzzy -msgid "Delete a host." -msgstr "Usunąć wszystko?" - -msgid "Remove entries from DNS" -msgstr "" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" - -msgid "Search for hosts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" - -#, fuzzy -msgid "host group" -msgstr "Grupa komputerów" - -msgid "Search for hosts with these member of host groups." -msgstr "" - -msgid "Search for hosts without these member of host groups." -msgstr "" - -msgid "Search for hosts with these member of netgroups." -msgstr "" - -msgid "Search for hosts without these member of netgroups." -msgstr "" - -msgid "Search for hosts with these member of roles." -msgstr "" - -msgid "Search for hosts without these member of roles." -msgstr "" - -msgid "Search for hosts with these member of HBAC rules." -msgstr "" - -msgid "Search for hosts without these member of HBAC rules." -msgstr "" - -msgid "Search for hosts with these member of sudo rules." -msgstr "" - -msgid "Search for hosts without these member of sudo rules." -msgstr "" - -msgid "Search for hosts with these enrolled by users." -msgstr "" - -msgid "Search for hosts without these enrolled by users." -msgstr "" - -msgid "host" -msgstr "" - -msgid "Search for hosts with these managed by hosts." -msgstr "" - -msgid "Search for hosts without these managed by hosts." -msgstr "" - -msgid "Search for hosts with these managing hosts." -msgstr "" - -msgid "Search for hosts without these managing hosts." -msgstr "" - -msgid "Modify information about a host." -msgstr "" - -msgid "Kerberos principal name for this host" -msgstr "Nazwa naczelnika Kerberosa dla tego komputera" - -msgid "Update DNS entries" -msgstr "" - -msgid "Remove hosts that can manage this host." -msgstr "" - -msgid "Display information about a host." -msgstr "" - -#, fuzzy -msgid "file to store certificate in" -msgstr "Certyfikat serwera zakodowany za pomocą Base-64" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "Host-group" -msgstr "Grupa komputerów" - -msgid "Name of host-group" -msgstr "Nazwa grupy komputerów" - -msgid "A description of this host-group" -msgstr "Opis tej grupy komputerów" - -msgid "Member hosts" -msgstr "Element komputerów" - -msgid "Member host-groups" -msgstr "Element grupy komputerów" - -#, fuzzy -msgid "Indirect Member hosts" -msgstr "Element komputerów" - -#, fuzzy -msgid "Indirect Member host-groups" -msgstr "Element grupy komputerów" - -#, fuzzy -msgid "Add a new hostgroup." -msgstr "Nazwa grupy komputerów" - -#, fuzzy -msgid "Add members to a hostgroup." -msgstr "Element grupy komputerów" - -#, fuzzy -msgid "Delete a hostgroup." -msgstr "Usunięto grupę komputerów „%(value)s”" - -#, fuzzy -msgid "Search for hostgroups." -msgstr "Element grupy komputerów" - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" - -msgid "Search for host groups with these member hosts." -msgstr "" - -msgid "Search for host groups without these member hosts." -msgstr "" - -msgid "Search for host groups with these member host groups." -msgstr "" - -msgid "Search for host groups without these member host groups." -msgstr "" - -msgid "Search for host groups with these member of host groups." -msgstr "" - -msgid "Search for host groups without these member of host groups." -msgstr "" - -msgid "Search for host groups with these member of netgroups." -msgstr "" - -msgid "Search for host groups without these member of netgroups." -msgstr "" - -msgid "Search for host groups with these member of HBAC rules." -msgstr "" - -msgid "Search for host groups without these member of HBAC rules." -msgstr "" - -msgid "Search for host groups with these member of sudo rules." -msgstr "" - -msgid "Search for host groups without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a hostgroup." -msgstr "Element grupy komputerów" - -#, fuzzy -msgid "Remove members from a hostgroup." -msgstr "Element grupy komputerów" - -msgid "Display information about a hostgroup." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "Nazwa reguły" - -msgid "First Posix ID of the range" -msgstr "" - -#, fuzzy -msgid "Number of IDs in the range" -msgstr "Liczba wczytanych wtyczek" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -#, fuzzy -msgid "Range type" -msgstr "Typ reguły" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -msgid "Anchor to override" -msgstr "" - -#, fuzzy -msgid "Group ID Number" -msgstr "Nazwa grupy" +msgid "User group ACI grants access to" +msgstr "Grupa użytkowników, do której ACI zapewnia dostęp" msgid "User login" msgstr "Login użytkownika" -msgid "UID" -msgstr "UID" - -#, fuzzy -msgid "User ID Number" -msgstr "Numer pagera" - -msgid "GECOS" -msgstr "" - -msgid "Home directory" -msgstr "Katalog domowy" - -msgid "Login shell" -msgstr "Powłoka logowania" - -msgid "ID View Name" -msgstr "" - -msgid "Add a new Group ID override." -msgstr "" - -msgid "Delete an Group ID override." -msgstr "" - -msgid "Search for an Group ID override." -msgstr "" - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" - -msgid "Modify an Group ID override." -msgstr "" - -msgid "Rename the Group ID override object" -msgstr "" - -msgid "Display information about an Group ID override." -msgstr "" - -msgid "Add a new User ID override." -msgstr "" - -msgid "Delete an User ID override." -msgstr "" - -msgid "Search for an User ID override." -msgstr "" - -msgid "Modify an User ID override." -msgstr "" - -msgid "Rename the User ID override object" -msgstr "" - -msgid "Display information about an User ID override." -msgstr "" - -msgid "Add a new ID View." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" - -#, fuzzy -msgid "hosts" -msgstr "Komputery" - -#, fuzzy -msgid "Hosts to apply the ID View to" -msgstr "Kategoria komputerów, do których zastosowywana jest reguła" - -#, fuzzy -msgid "hostgroups" -msgstr "Grupa komputerów" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" - -#, fuzzy -msgid "Hosts that this ID View was applied to." -msgstr "Kategoria komputerów, do których zastosowywana jest reguła" - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" - -msgid "Number of hosts the ID View was applied to:" -msgstr "" - -msgid "Delete an ID View." -msgstr "" - -msgid "Search for an ID View." -msgstr "" - -msgid "Modify an ID View." -msgstr "" - -msgid "Rename the ID View object" -msgstr "" - -msgid "Display information about an ID View." -msgstr "" - -#, fuzzy -msgid "Enumerate all the hosts the view applies to." -msgstr "Kategoria usług, do których zastosowywana jest reguła" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" - -msgid "Hosts to clear (any) ID View from." -msgstr "" - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" - -msgid "Hosts that ID View was cleared from." -msgstr "" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" - -msgid "Dict of I18N messages" -msgstr "Słownik komunikatów umiędzynaradawiania" - -msgid "Export plugin meta-data for the webUI." -msgstr "" - -msgid "Name of object to export" -msgstr "Nazwa obiektu do wyeksportowania" - -#, fuzzy -msgid "Name of method to export" -msgstr "Nazwa obiektu do wyeksportowania" - -#, fuzzy -msgid "Name of command to export" -msgstr "Nazwa obiektu do wyeksportowania" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "Słownik obiektów IPA zakodowanych w formacie JSON" - -#, fuzzy -msgid "Dict of JSON encoded IPA Methods" -msgstr "Słownik obiektów IPA zakodowanych w formacie JSON" - -#, fuzzy -msgid "Dict of JSON encoded IPA Commands" -msgstr "Słownik obiektów IPA zakodowanych w formacie JSON" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" - -msgid "Join an IPA domain" -msgstr "" - -msgid "The hostname to register as" -msgstr "Nazwa komputera, pod jaką zarejestrować" - -msgid "The IPA realm" -msgstr "Obszar IPA" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "Platforma sprzętowa komputera (np. Lenovo T61)" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "System operacyjny komputera i jego wersja (np. Fedora 9)" - -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" - -msgid "Manage ticket policy for specific user" -msgstr "Zarządzanie polityką zgłoszeń dla podanego użytkownika" - -msgid "Max life" -msgstr "Maksymalny czas życia" - -msgid "Maximum ticket life (seconds)" -msgstr "Minimalny czas życia zgłoszenia (sekundy)" - -msgid "Max renew" -msgstr "Maksymalne odnowienie" - -msgid "Maximum renewable age (seconds)" -msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" - -#, fuzzy -msgid "Modify Kerberos ticket policy." -msgstr "Polityka zgłoszeń Kerberosa" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "" - -#, fuzzy -msgid "Display the current Kerberos ticket policy." -msgstr "Wyświetlenie wpisu użytkownika dla bieżącego naczelnika Kerberosa" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," -"cn=accounts' --group-container='cn=groups,cn=accounts' " -"ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' --user-ignore-" -"objectclass=radiusprofile --user-ignore-" -"attribute=radiusgroupname ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -msgid "Migrate users and groups from DS to IPA." -msgstr "" - -msgid "LDAP URI" -msgstr "Adres URI LDAP" - -msgid "LDAP URI of DS server to migrate from" -msgstr "Adres URI LDAP serwera DS, z którego migrować" - -msgid "bind password" -msgstr "hasło Bind" - -msgid "Bind DN" -msgstr "DN dowiązania" - -msgid "User container" -msgstr "Kontener użytkownika" - -msgid "DN of container for users in DS relative to base DN" -msgstr "" - -msgid "Group container" -msgstr "Kontener grupy" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "" - -msgid "User object class" -msgstr "" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "" - -msgid "Group object class" -msgstr "" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "" - -msgid "Ignore user object class" -msgstr "" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore user attribute" -msgstr "" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore group object class" -msgstr "" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "Ignore group attribute" -msgstr "" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "" - -msgid "Overwrite GID" -msgstr "" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" - -msgid "LDAP schema" -msgstr "Schemat LDAP" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" - -msgid "Continue" -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" - -msgid "Base DN" -msgstr "" - -msgid "Base DN on remote LDAP server" -msgstr "" - -msgid "Ignore compat plugin" -msgstr "" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" - -#, fuzzy -msgid "CA certificate" -msgstr "Certyfikat" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "" - -msgid "groups to exclude from migration" -msgstr "" - -msgid "users to exclude from migration" -msgstr "" - -msgid "Lists of objects migrated; categorized by type." -msgstr "Lista migrowanych obiektów, ułożonych w kategorie według typu." - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" -"Lista obiektów, które nie mogły zostać migrowane, ułożonych w kategorie " -"według typu." - -msgid "False if migration mode was disabled." -msgstr "Fałsz, jeśli wyłączono tryb migracji." - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" - -msgid "Show environment variables." -msgstr "" - -msgid "Forward to server instead of running locally" -msgstr "Przekazanie do serwera zamiast uruchamiania lokalnie" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Total number of variables env (>= count)" -msgstr "Całkowita liczba zmiennych środowiskowych (>= licznik)" - -msgid "Number of variables returned (<= total)" -msgstr "Liczba zwróconych zmiennych (<= razem)" - -msgid "Show all loaded plugins." -msgstr "" - -#, fuzzy -msgid "Dictionary mapping plugin names to bases" -msgstr "Nazwa zmiennej mapowania słownika do ustawienia jako wartość" - -msgid "Number of plugins loaded" -msgstr "Liczba wczytanych wtyczek" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "Netgroup name" -msgstr "Nazwa grupy sieciowej" - -msgid "Netgroup description" -msgstr "Opis grupy sieciowej" - -msgid "NIS domain name" -msgstr "Nazwa domeny NIS" - -msgid "IPA unique ID" -msgstr "Unikalny identyfikator IPA" - -#, fuzzy -msgid "Member netgroups" -msgstr "Elementy grupy" - -#, fuzzy -msgid "Indirect Member netgroups" -msgstr "Elementy grupy" - -#, fuzzy -msgid "Member User" -msgstr "Elementy użytkowników" - -#, fuzzy -msgid "Member Group" -msgstr "Elementy grupy" - -msgid "Member Host" -msgstr "Komputer elementu" - -#, fuzzy -msgid "Member Hostgroup" -msgstr "Element grupy komputerów" - -msgid "Add a new netgroup." -msgstr "" - -#, fuzzy -msgid "Add members to a netgroup." -msgstr "Element grupy" - -#, fuzzy -msgid "member netgroup" -msgstr "Elementy grupy" - -#, fuzzy -msgid "netgroups to add" -msgstr "Grupy sieciowe" - -msgid "Delete a netgroup." -msgstr "" - -#, fuzzy -msgid "Search for a netgroup." -msgstr "Element grupy" - -#, fuzzy -msgid "search for managed groups" -msgstr "Nie jest zarządzaną grupą" - -msgid "Search for netgroups with these member netgroups." -msgstr "" - -msgid "Search for netgroups without these member netgroups." -msgstr "" - -msgid "Search for netgroups with these member users." -msgstr "" - -msgid "Search for netgroups without these member users." -msgstr "" - -msgid "Search for netgroups with these member groups." -msgstr "" - -msgid "Search for netgroups without these member groups." -msgstr "" - -msgid "Search for netgroups with these member hosts." -msgstr "" - -msgid "Search for netgroups without these member hosts." -msgstr "" - -msgid "Search for netgroups with these member host groups." -msgstr "" - -msgid "Search for netgroups without these member host groups." -msgstr "" - -msgid "Search for netgroups with these member of netgroups." -msgstr "" - -msgid "Search for netgroups without these member of netgroups." -msgstr "" - -#, fuzzy -msgid "Modify a netgroup." -msgstr "Element grupy" - -#, fuzzy -msgid "Remove members from a netgroup." -msgstr "Element grupy" - -#, fuzzy -msgid "netgroups to remove" -msgstr "Nazwa grupy sieciowej" - -msgid "Display information about a netgroup." -msgstr "" - -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" - -msgid "TOTP authentication Window" -msgstr "" - -msgid "TOTP authentication time variance (seconds)" -msgstr "" - -msgid "TOTP Synchronization Window" -msgstr "" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "" - -msgid "HOTP Authentication Window" -msgstr "" - -msgid "HOTP authentication skip-ahead" -msgstr "" - -msgid "HOTP Synchronization Window" -msgstr "" - -msgid "HOTP synchronization skip-ahead" -msgstr "" - -msgid "Modify OTP configuration options." -msgstr "" - -msgid "Show the current OTP configuration." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -#, fuzzy -msgid "Unique ID" -msgstr "Unikalny identyfikator IPA" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -#, fuzzy -msgid "Disabled" -msgstr "Włączone" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -#, fuzzy -msgid "Serial" -msgstr "Numer seryjny SOA" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -#, fuzzy -msgid "Set a user's password." -msgstr "Hasło użytkownika" - -msgid "New Password" -msgstr "Nowe hasło" - -#, fuzzy -msgid "Current Password" -msgstr "Nowe hasło" - -#, fuzzy -msgid "OTP" -msgstr "Ustaw OTP" - -#, fuzzy -msgid "One Time Password" -msgstr "Nowe hasło" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -"\n" -"Managed permissions\n" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -#, fuzzy -msgid "Permission name" -msgstr "Uprawnienia" - -msgid "Granted rights" -msgstr "" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" - -#, fuzzy -msgid "Effective attributes" -msgstr "Atrybuty" - -msgid "All attributes to which the permission applies" -msgstr "" - -#, fuzzy -msgid "Included attributes" -msgstr "Atrybuty" - -msgid "User-specified attributes to which the permission applies" -msgstr "" - -#, fuzzy -msgid "Excluded attributes" -msgstr "Atrybuty" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" - -#, fuzzy -msgid "Default attributes" -msgstr "Atrybuty" - -msgid "Attributes to which the permission applies by default" -msgstr "" - -#, fuzzy -msgid "Bind rule type" -msgstr "Typ reguły" - -#, fuzzy -msgid "Subtree to apply permissions to" -msgstr "Poddrzewo, do którego zastosować ACI" - -msgid "Extra target filter" -msgstr "" - -msgid "Raw target filter" -msgstr "" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" - -#, fuzzy -msgid "Target DN" -msgstr "Cel" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" - -msgid "Member of group" -msgstr "Członek grupy" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "" - -msgid "User group to apply permissions to (sets target)" -msgstr "" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "" - -msgid "Deprecated; use extratargetfilter" -msgstr "" - -msgid "Deprecated; use ipapermlocation" -msgstr "" - -msgid "Deprecated; use ipapermright" -msgstr "" - -msgid "Granted to Privilege" -msgstr "" - -#, fuzzy -msgid "Indirect Member of roles" -msgstr "Członek grup" - -msgid "Add a new permission." -msgstr "" - -msgid "Add members to a permission." -msgstr "" - -#, fuzzy -msgid "member privilege" -msgstr "Usługi elementów" - -msgid "privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "" - -#, fuzzy -msgid "Permission flags" -msgstr "Uprawnienia" - -msgid "Delete a permission." -msgstr "" - -msgid "force delete of SYSTEM permissions" -msgstr "" - -msgid "Search for permissions." -msgstr "" - -msgid "Modify a permission." -msgstr "" - -#, fuzzy -msgid "Rename the permission object" -msgstr "" -"Uprawnienia pamięci podręcznej danych uwierzytelniających są niepoprawne" - -msgid "Remove members from a permission." -msgstr "" - -msgid "privileges to remove" -msgstr "" - -msgid "Display information about a permission." -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "Ping a remote server." -msgstr "" - -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "" - -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" - -#, fuzzy -msgid "Privilege name" -msgstr "Nazwa naczelnika" - -#, fuzzy -msgid "Privilege description" -msgstr "opis" - -msgid "Granting privilege to roles" -msgstr "" - -msgid "Add a new privilege." -msgstr "" - -msgid "Add members to a privilege." -msgstr "" - -#, fuzzy -msgid "member role" -msgstr "członek %s" - -msgid "roles to add" -msgstr "" - -msgid "Add permissions to a privilege." -msgstr "" - -#, fuzzy -msgid "permission" -msgstr "Uprawnienia" - -#, fuzzy -msgid "permissions" -msgstr "Uprawnienia" - -#, fuzzy -msgid "Number of permissions added" -msgstr "Liczba dodanych elementów" - -#, fuzzy -msgid "Delete a privilege." -msgstr "Usunąć wszystko?" - -msgid "Search for privileges." -msgstr "" - -msgid "Modify a privilege." -msgstr "" - -msgid "Rename the privilege object" -msgstr "" - -msgid "Remove members from a privilege" -msgstr "" - -#, fuzzy -msgid "roles to remove" -msgstr "Nie można usunąć wpisu\n" - -msgid "Remove permissions from a privilege." -msgstr "" - -#, fuzzy -msgid "Number of permissions removed" -msgstr "Liczba usuniętych elementów" - -msgid "Display information about a privilege." -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Group" -msgstr "Grupa" - -msgid "Manage password policy for specific group" -msgstr "Zarządzanie polityką haseł dla podanej grupy" - -msgid "Max lifetime (days)" -msgstr "Maksymalny czas życia (w dniach)" - -msgid "Maximum password lifetime (in days)" -msgstr "Maksymalny czas życia hasła (w dniach)" - -msgid "Min lifetime (hours)" -msgstr "Minimalny czas życia (w godzinach)" - -msgid "Minimum password lifetime (in hours)" -msgstr "Minimalny czas życia hasła (w godzinach)" - -msgid "History size" -msgstr "Rozmiar historii" - -msgid "Password history size" -msgstr "Rozmiar historii haseł" - -msgid "Character classes" -msgstr "Klasy znaków" - -msgid "Minimum number of character classes" -msgstr "Minimalna liczba klas znaków" - -msgid "Min length" -msgstr "Minimalna długość" - -msgid "Minimum length of password" -msgstr "Minimalna długość hasła" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "Priorytet polityki (wyższy numer równa się niższemu priorytetowi" - -#, fuzzy -msgid "Max failures" -msgstr "Maksymalny czas życia" - -msgid "Consecutive failures before lockout" -msgstr "" - -msgid "Failure reset interval" -msgstr "" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "" - -#, fuzzy -msgid "Lockout duration" -msgstr "Położenie" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" - -msgid "Add a new group password policy." -msgstr "" - -msgid "Delete a group password policy." -msgstr "" - -msgid "Search for group password policies." -msgstr "" - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" - -msgid "Modify a group password policy." -msgstr "" - -msgid "Display information about password policy." -msgstr "" - -msgid "User" -msgstr "Użytkownik" - -msgid "Display effective policy for a specific user" -msgstr "Wyświetlanie aktywnej polityki dla podanego użytkownika" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "RADIUS proxy server name" -msgstr "" - -#, fuzzy -msgid "A description of this RADIUS proxy server" -msgstr "Opis tego komputera" - -#, fuzzy -msgid "Server" -msgstr "Usługi" - -msgid "The hostname or IP (with or without port)" -msgstr "" - -msgid "Secret" -msgstr "" - -msgid "The secret used to encrypt data" -msgstr "" - -msgid "Timeout" -msgstr "" - -msgid "The total timeout across all retries (in seconds)" -msgstr "" - -#, fuzzy -msgid "Retries" -msgstr "Ponów" - -msgid "The number of times to retry authentication" -msgstr "" - -#, fuzzy -msgid "User attribute" -msgstr "Atrybut" - -msgid "The username attribute on the user object" -msgstr "" - -msgid "Add a new RADIUS proxy server." -msgstr "" - -msgid "Delete a RADIUS proxy server." -msgstr "" - -msgid "Search for RADIUS proxy servers." -msgstr "" - -msgid "Modify a RADIUS proxy server." -msgstr "" - -msgid "Rename the RADIUS proxy server object" -msgstr "" - -msgid "Display information about a RADIUS proxy server." -msgstr "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Domain" -msgstr "" - -msgid "Add domain" -msgstr "" - -#, fuzzy -msgid "Delete domain" -msgstr "Usunąć wszystko?" - -msgid "Modify realm domains." -msgstr "" - -#, fuzzy -msgid "Force adding domain even if not in DNS" -msgstr "wymuszenie nazwy naczelnika, nawet jeśli nie w DNS" - -msgid "Display the list of realm domains." -msgstr "" - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" - -#, fuzzy -msgid "Role name" -msgstr "Nazwa reguły" - -msgid "A description of this role-group" -msgstr "Opis tej grupy rol" - -msgid "Privileges" -msgstr "" - -msgid "Member services" -msgstr "Usługi elementów" - -#, fuzzy -msgid "Add a new role." -msgstr "Dodaj i zamknij" - -#, fuzzy -msgid "Add members to a role." -msgstr "Element grupy" - -#, fuzzy -msgid "member service" -msgstr "Usługi elementów" - -#, fuzzy -msgid "services to add" -msgstr "Usługi" - -msgid "Add privileges to a role." -msgstr "" - -msgid "privilege" -msgstr "" - -msgid "privileges" -msgstr "" - -#, fuzzy -msgid "Number of privileges added" -msgstr "Liczba dodanych elementów" - -#, fuzzy -msgid "Delete a role." -msgstr "Usunąć wszystko?" - -msgid "Search for roles." -msgstr "" - -msgid "Modify a role." -msgstr "" - -msgid "Rename the role object" -msgstr "" - -msgid "Remove members from a role." -msgstr "" - -#, fuzzy -msgid "services to remove" -msgstr "Nazwa grupy usługi" - -msgid "Remove privileges from a role." -msgstr "" - -#, fuzzy -msgid "Number of privileges removed" -msgstr "Liczba usuniętych elementów" - -msgid "Display information about a role." -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -#, fuzzy -msgid "Self-service name" -msgstr "Nazwa usługi" - -msgid "Attributes to which the permission applies." -msgstr "" - -msgid "Add a new self-service permission." -msgstr "" - -msgid "Delete a self-service permission." -msgstr "" - -msgid "Search for a self-service permission." -msgstr "" - -msgid "Modify a self-service permission." -msgstr "" - -msgid "Display information about a self-service permission." -msgstr "" - -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" - -msgid "SELinux User" -msgstr "" - -msgid "HBAC Rule" -msgstr "" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "" - -msgid "Create a new SELinux User Map." -msgstr "" - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "" - -msgid "Delete a SELinux User Map." -msgstr "" - -msgid "Disable an SELinux User Map rule." -msgstr "" - -msgid "Enable an SELinux User Map rule." -msgstr "" - -msgid "Search for SELinux User Maps." -msgstr "" - -msgid "Modify a SELinux User Map." -msgstr "" - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "" - -msgid "Display the properties of a SELinux User Map rule." -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "Service principal" -msgstr "Naczelnik usługi" - -msgid "PAC type" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" - -msgid "Add a new IPA new service." -msgstr "" - -msgid "force principal name even if not in DNS" -msgstr "wymuszenie nazwy naczelnika, nawet jeśli nie w DNS" - -msgid "Add hosts that can manage this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Delete an IPA service." -msgstr "" - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Search for IPA services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" - -msgid "Search for services with these managed by hosts." -msgstr "" - -msgid "Search for services without these managed by hosts." -msgstr "" - -msgid "Modify an existing IPA service." -msgstr "" - -msgid "Remove hosts that can manage this service." -msgstr "" - -msgid "Display information about an IPA service." -msgstr "" - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" - -msgid "Sudo Command" -msgstr "Polecenie sudo" - -msgid "A description of this command" -msgstr "Opis tego polecenia" - -msgid "Sudo Command Groups" -msgstr "Grupy polecenia sudo" - -#, fuzzy -msgid "Create new Sudo Command." -msgstr "Polecenie sudo" - -#, fuzzy -msgid "Delete Sudo Command." -msgstr "Polecenie sudo" - -#, fuzzy -msgid "Search for Sudo Commands." -msgstr "Polecenie sudo" - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" - -#, fuzzy -msgid "Modify Sudo Command." -msgstr "Polecenie sudo" - -#, fuzzy -msgid "Display Sudo Command." -msgstr "Polecenie sudo" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -#, fuzzy -msgid "Sudo Command Group" -msgstr "Grupy polecenia sudo" - -msgid "Commands" -msgstr "Polecenia" - -#, fuzzy -msgid "Member Sudo commands" -msgstr "Polecenie sudo" - -#, fuzzy -msgid "Create new Sudo Command Group." -msgstr "Grupy polecenia sudo" - -#, fuzzy -msgid "Add members to Sudo Command Group." -msgstr "Grupy polecenia sudo" - -#, fuzzy -msgid "member sudo command" -msgstr "Polecenie sudo" - -#, fuzzy -msgid "sudo commands to add" -msgstr "Polecenie sudo" - -#, fuzzy -msgid "Delete Sudo Command Group." -msgstr "Grupy polecenia sudo" - -#, fuzzy -msgid "Search for Sudo Command Groups." -msgstr "Grupy polecenia sudo" - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" - -#, fuzzy -msgid "Modify Sudo Command Group." -msgstr "Grupy polecenia sudo" - -#, fuzzy -msgid "Remove members from Sudo Command Group." -msgstr "Grupy polecenia sudo" - -#, fuzzy -msgid "sudo commands to remove" -msgstr "Grupy polecenia sudo" - -#, fuzzy -msgid "Display Sudo Command Group." -msgstr "Grupy polecenia sudo" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -#, fuzzy -msgid "NetBIOS name" -msgstr "Nazwa grupy sieciowej" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -#, fuzzy -msgid "Domain name" -msgstr "Nazwa domeny NIS" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -#, fuzzy -msgid "Delete a trust." -msgstr "Usunąć wszystko?" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "Imię" - -msgid "Last name" -msgstr "Nazwisko" - -msgid "Full name" -msgstr "Pełna nazwa" - -#, fuzzy -msgid "Display name" -msgstr "Imię" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "Naczelnik Kerberosa" - -#, fuzzy -msgid "Kerberos principal expiration" -msgstr "Naczelnik Kerberosa" - -msgid "Email address" -msgstr "Adres e-mail" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" -"Numer identyfikacyjny użytkownika (system go przydzieli, jeśli nie zostanie " -"podany)" - -msgid "Street address" -msgstr "Adres zamieszkania" - -msgid "City" -msgstr "Miasto" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "Numer telefonu" - -msgid "Mobile Telephone Number" -msgstr "Numer telefonu komórkowego" - -msgid "Pager Number" -msgstr "Numer pagera" - -msgid "Fax Number" -msgstr "Numer faksu" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Car License" -msgstr "" - -#, fuzzy -msgid "Account disabled" -msgstr "%(count)d zmiennych" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -#, fuzzy -msgid "RADIUS proxy configuration" -msgstr "Konfiguracja" - -msgid "RADIUS proxy username" -msgstr "" - -#, fuzzy -msgid "Department Number" -msgstr "Numer pagera" - -#, fuzzy -msgid "Employee Number" -msgstr "Numer telefonu" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -#, fuzzy -msgid "Add a new user." -msgstr "Dodaj i zamknij" - -#, fuzzy -msgid "Don't create user private group" -msgstr "Domyślna grupa użytkowników" - -#, fuzzy -msgid "Delete a user." -msgstr "Usunąć wszystko?" - -#, fuzzy -msgid "Disable a user account." -msgstr "Wyłączono konto użytkownika „%(value)s”" - -#, fuzzy -msgid "Enable a user account." -msgstr "Włączono konto użytkownika „%(value)s”" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "Własny" - -msgid "Display user record for current Kerberos principal" -msgstr "Wyświetlenie wpisu użytkownika dla bieżącego naczelnika Kerberosa" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -#, fuzzy -msgid "Command category" -msgstr "Kategoria komputerów" - -#, fuzzy -msgid "Command category the rule applies to" -msgstr "Kategoria komputerów, do których zastosowywana jest reguła" - -#, fuzzy -msgid "RunAs User category" -msgstr "Kategoria użytkowników" - -#, fuzzy -msgid "RunAs User category the rule applies to" -msgstr "Kategoria użytkowników, do których zastosowywana jest reguła" - -#, fuzzy -msgid "RunAs Group category" -msgstr "Kategoria użytkowników" - -#, fuzzy -msgid "RunAs Group category the rule applies to" -msgstr "Kategoria użytkowników, do których zastosowywana jest reguła" - -#, fuzzy -msgid "Sudo order" -msgstr "Polecenie sudo" - -msgid "integer to order the Sudo rules" -msgstr "" - -#, fuzzy -msgid "External User" -msgstr "Zewnętrzny komputer" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -#, fuzzy -msgid "Host Masks" -msgstr "Komputery" - -msgid "Sudo Allow Commands" -msgstr "Polecenia zezwolone sudo" - -msgid "Sudo Deny Commands" -msgstr "Polecenia zabronione sudo" - -#, fuzzy -msgid "Sudo Allow Command Groups" -msgstr "Polecenia zezwolone sudo" - -#, fuzzy -msgid "Sudo Deny Command Groups" -msgstr "Grupy polecenia sudo" - -#, fuzzy -msgid "RunAs Users" -msgstr "Użytkownicy" - -msgid "Run as a user" -msgstr "" - -msgid "Groups of RunAs Users" -msgstr "" - -msgid "Run as any user within a specified group" -msgstr "" - -#, fuzzy -msgid "RunAs External User" -msgstr "Zewnętrzny komputer" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -msgid "External Groups of RunAs Users" -msgstr "" - -msgid "External Groups of users that the command can run as" -msgstr "" - -#, fuzzy -msgid "RunAs Groups" -msgstr "Grupy komputerów" - -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -#, fuzzy -msgid "RunAs External Group" -msgstr "Zewnętrzny komputer" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -#, fuzzy -msgid "Sudo Option" -msgstr "Polecenie sudo" - -msgid "Create new Sudo Rule." -msgstr "" - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "member sudo command group" -msgstr "Element grupy" - -#, fuzzy -msgid "sudo command groups to add" -msgstr "Grupy polecenia sudo" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "" - -msgid "Add group for Sudo to execute as." -msgstr "" - -msgid "Add users and groups for Sudo to execute as." -msgstr "" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "" - -msgid "Delete Sudo Rule." -msgstr "" - -msgid "Disable a Sudo Rule." -msgstr "" - -msgid "Enable a Sudo Rule." -msgstr "" - -msgid "Search for Sudo Rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -msgid "Modify Sudo Rule." -msgstr "" - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "sudo command groups to remove" -msgstr "Grupy polecenia sudo" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "Remove an option from Sudo Rule." -msgstr "" - -msgid "Remove group for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "" - -msgid "Display Sudo Rule." -msgstr "" - -#, fuzzy -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "Ograniczenie czasu wyszukiwania w sekundach" - -#, fuzzy -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "Maksymalna liczba zwróconych wpisów" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -#, fuzzy -msgid "ACL name" -msgstr "Nazwa ACI" - -#, fuzzy -msgid "Profile category" -msgstr "Kategoria usług" - -#, fuzzy -msgid "Profile category the ACL applies to" -msgstr "Kategoria usług, do których zastosowywana jest reguła" - -#, fuzzy -msgid "User category the ACL applies to" -msgstr "Kategoria użytkowników, do których zastosowywana jest reguła" - -#, fuzzy -msgid "Host category the ACL applies to" -msgstr "Kategoria komputerów, do których zastosowywana jest reguła" - -#, fuzzy -msgid "Service category the ACL applies to" -msgstr "Kategoria usług, do których zastosowywana jest reguła" - -msgid "Profiles" -msgstr "" - -msgid "Create a new CA ACL." -msgstr "" - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "" - -msgid "Add profiles to a CA ACL." -msgstr "" - -#, fuzzy -msgid "member Certificate Profile" -msgstr "Nowy certyfikat" - -#, fuzzy -msgid "Certificate Profiles to add" -msgstr "Odrzucono certyfikat" - -msgid "Add services to a CA ACL." -msgstr "" - -msgid "Add users and groups to a CA ACL." -msgstr "" - -msgid "Delete a CA ACL." -msgstr "" - -msgid "Disable a CA ACL." -msgstr "" - -msgid "Enable a CA ACL." -msgstr "" - -msgid "Search for CA ACLs." -msgstr "" - -msgid "Modify a CA ACL." -msgstr "" - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "" - -msgid "Remove profiles from a CA ACL." -msgstr "" - -#, fuzzy -msgid "Certificate Profiles to remove" -msgstr "Odrzucono certyfikat" - -msgid "Remove services from a CA ACL." -msgstr "" - -msgid "Remove users and groups from a CA ACL." -msgstr "" - -msgid "Display the properties of a CA ACL." -msgstr "" - -#, fuzzy -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "Naczelnik usługi dla tego certyfikatu (np. HTTP/test.przykład.pl)" - -msgid "Profile ID" -msgstr "" - -#, fuzzy -msgid "Certificate Profile to use" -msgstr "Podstawa tematu certyfikatu" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -#, fuzzy -msgid "Profile description" -msgstr "Opis grupy" - -#, fuzzy -msgid "Brief description of this profile" -msgstr "Opis tej grupy rol" - -#, fuzzy -msgid "Store issued certificates" -msgstr "Odrzuć certyfikat." - -msgid "Whether to store certs issued using this profile" -msgstr "" - -#, fuzzy -msgid "Delete a Certificate Profile." -msgstr "Odrzuć certyfikat." - -msgid "Search for Certificate Profiles." -msgstr "" - -#, fuzzy -msgid "Import a Certificate Profile." -msgstr "Odrzuć certyfikat." - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -#, fuzzy -msgid "Write profile configuration to file" -msgstr "nie można otworzyć pliku konfiguracji %s\n" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" - -#, fuzzy -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "Maksymalna liczba zwróconych wpisów" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" - -msgid "Query current Domain Level." -msgstr "" - -msgid "Current domain level:" -msgstr "" - -msgid "Change current Domain Level." -msgstr "" - -msgid "Domain Level" -msgstr "" - -msgid "Add certificates to host entry" -msgstr "" - -msgid "Remove certificates from host entry" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "Fallback to AD DC LDAP" -msgstr "" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" - -#, fuzzy -msgid "Add to default group" -msgstr "Domyślna grupa użytkowników" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" - -#, fuzzy -msgid "Search scope" -msgstr "Wyszukaj" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Target DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" - -msgid "Origin DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -#, fuzzy -msgid "Server name" -msgstr "Nazwa serwera" - -#, fuzzy -msgid "IPA server hostname" -msgstr "Serwer IPA do użycia" - -msgid "Managed suffix" -msgstr "" - -msgid "Min domain level" -msgstr "" - -msgid "Minimum domain level" -msgstr "" - -msgid "Max domain level" -msgstr "" - -msgid "Maximum domain level" -msgstr "" - -msgid "Delete IPA server." -msgstr "" - -msgid "Search for IPA servers." -msgstr "" - -msgid "Show IPA server." -msgstr "" - -msgid "Add new certificates to a service" -msgstr "" - -msgid "Remove certificates from a service" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -#, fuzzy -msgid "Allowed Target" -msgstr "Cel" - -msgid "Create a new service delegation rule." -msgstr "" - -msgid "Add member to a named service delegation rule." -msgstr "" - -#, fuzzy -msgid "member principal" -msgstr "Naczelnik Kerberosa" - -#, fuzzy -msgid "principal to add" -msgstr "nie odnaleziono naczelnika\n" - -msgid "Add target to a named service delegation rule." -msgstr "" - -#, fuzzy -msgid "member service delegation target" -msgstr "Grupy usługi elementów" - -msgid "service delegation targets to add" -msgstr "" - -#, fuzzy -msgid "Delete service delegation." -msgstr "Usunięto usługę „%(value)s”" - -msgid "Search for service delegations rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" - -msgid "Remove member from a named service delegation rule." -msgstr "" - -#, fuzzy -msgid "principal to remove" -msgstr "nie odnaleziono naczelnika\n" - -msgid "Remove target from a named service delegation rule." -msgstr "" - -msgid "service delegation targets to remove" -msgstr "" - -msgid "Display information about a named service delegation rule." -msgstr "" - -msgid "Create a new service delegation target." -msgstr "" - -msgid "Add member to a named service delegation target." -msgstr "" - -msgid "Delete service delegation target." -msgstr "" - -msgid "Search for service delegation target." -msgstr "" - -msgid "Remove member from a named service delegation target." -msgstr "" - -msgid "Display information about a named service delegation target." -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" - -msgid "Activate a stage user." -msgstr "" - -msgid "Add a new stage user." -msgstr "" - -msgid "Create Stage user in from a delete user" -msgstr "" - -#, fuzzy -msgid "Delete a stage user." -msgstr "Usuń wszystkie powiązane wpisy" - -#, fuzzy -msgid "Search for stage users." -msgstr "Domyślna grupa dla nowych użytkowników" - -msgid "Search for stage users with these member of groups." -msgstr "" - -msgid "Search for stage users without these member of groups." -msgstr "" - -msgid "Search for stage users with these member of netgroups." -msgstr "" - -msgid "Search for stage users without these member of netgroups." -msgstr "" - -msgid "Search for stage users with these member of roles." -msgstr "" - -msgid "Search for stage users without these member of roles." -msgstr "" - -msgid "Search for stage users with these member of HBAC rules." -msgstr "" - -msgid "Search for stage users without these member of HBAC rules." -msgstr "" - -msgid "Search for stage users with these member of sudo rules." -msgstr "" - -msgid "Search for stage users without these member of sudo rules." -msgstr "" - -msgid "Modify a stage user." -msgstr "" - -msgid "Rename the stage user object" -msgstr "" - -msgid "Display information about a stage user." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" - -#, fuzzy -msgid "Segment name" -msgstr "Nazwa usługi" - -msgid "Arbitrary string identifying the segment" -msgstr "" - -msgid "Left node" -msgstr "" - -msgid "Left replication node - an IPA server" -msgstr "" - -#, fuzzy -msgid "Right node" -msgstr "Uprawnienia" - -msgid "Right replication node - an IPA server" -msgstr "" - -msgid "Connectivity" -msgstr "" - -msgid "Direction of replication between left and right replication node" -msgstr "" - -#, fuzzy -msgid "Attributes to strip" -msgstr "Atrybuty" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" - -#, fuzzy -msgid "Attributes to replicate" -msgstr "Atrybuty" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" - -msgid "Attributes for total update" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" - -#, fuzzy -msgid "Session timeout" -msgstr "Czas dostępu" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" - -msgid "Replication agreement enabled" -msgstr "" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" - -#, fuzzy -msgid "Suffix name" -msgstr "Nazwa usługi" - -msgid "LDAP suffix to be managed" -msgstr "" - -msgid "Add a new segment." -msgstr "" - -msgid "Delete a segment." -msgstr "" - -msgid "Search for topology segments." -msgstr "" - -msgid "Modify a segment." -msgstr "" - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" - -msgid "Initialize left node" -msgstr "" - -msgid "Initialize right node" -msgstr "" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "" - -msgid "Display a segment." -msgstr "" - -msgid "Add a new topology suffix to be managed." -msgstr "" - -msgid "Delete a topology suffix." -msgstr "" - -msgid "Search for topology suffices." -msgstr "" - -msgid "Modify a topology suffix." -msgstr "" - -msgid "Show managed suffix." -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -#, fuzzy -msgid "Preserved user" -msgstr "Elementy użytkowników" - -msgid "Add one or more certificates to the user entry" -msgstr "" - -msgid "Remove one or more certificates to the user entry" -msgstr "" - -msgid "Move deleted user into staged area" -msgstr "" - -msgid "Undelete a delete user account." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -#, fuzzy -msgid "Vault name" -msgstr "Nazwisko" - -#, fuzzy -msgid "Vault description" -msgstr "opis" - -#, fuzzy -msgid "Vault type" -msgstr "Typ reguły" - -msgid "Salt" -msgstr "" - -#, fuzzy -msgid "Vault salt" -msgstr "Domyślna powłoka" - -msgid "Public key" -msgstr "" - -msgid "Vault public key" -msgstr "" - -#, fuzzy -msgid "Owner users" -msgstr "Elementy użytkowników" - -#, fuzzy -msgid "Owner groups" -msgstr "Grupa użytkowników" - -#, fuzzy -msgid "Owner services" -msgstr "Usługi elementów" - -#, fuzzy -msgid "Failed owners" -msgstr "Elementy, które się nie powiodły" - -msgid "Vault service" -msgstr "" - -msgid "Shared vault" -msgstr "" - -#, fuzzy -msgid "Vault user" -msgstr "Domyślna grupa użytkowników" - -#, fuzzy -msgid "Transport Certificate" -msgstr "Certyfikat" - -#, fuzzy -msgid "Service name of the service vault" -msgstr "Kategoria usług, do których zastosowywana jest reguła" - -#, fuzzy -msgid "Username of the user vault" -msgstr "Kategoria użytkowników, do których zastosowywana jest reguła" - -msgid "Add members to a vault." -msgstr "" - -msgid "Add owners to a vault." -msgstr "" - -#, fuzzy -msgid "owner user" -msgstr "Elementy użytkowników" - -#, fuzzy -msgid "owner group" -msgstr "Grupa użytkowników" - -#, fuzzy -msgid "owner service" -msgstr "Usługi elementów" - -#, fuzzy -msgid "Owners that could not be added" -msgstr "Elementy, które nie mogły zostać dodane" - -#, fuzzy -msgid "Number of owners added" -msgstr "Liczba dodanych elementów" - -msgid "Session key wrapped with transport certificate" -msgstr "" - -msgid "Vault data encrypted with session key" -msgstr "" - -msgid "Nonce" -msgstr "" - -#, fuzzy -msgid "Delete a vault." -msgstr "Usunąć wszystko?" - -msgid "Search for vaults." -msgstr "" - -msgid "List all service vaults" -msgstr "" - -msgid "List all user vaults" -msgstr "" - -msgid "Remove members from a vault." -msgstr "" - -msgid "Remove owners from a vault." -msgstr "" - -#, fuzzy -msgid "Owners that could not be removed" -msgstr "Liczba elementów, które nie mogły zostać usunięte" - -#, fuzzy -msgid "Number of owners removed" -msgstr "Liczba usuniętych elementów" - -msgid "Display information about a vault." -msgstr "" - -#, fuzzy -msgid "Show vault configuration." -msgstr "Konfiguracja" - -msgid "Output file to store the transport certificate" -msgstr "" - -msgid "Add owners to a vault container." -msgstr "" - -msgid "Delete a vault container." -msgstr "" - -msgid "Remove owners from a vault container." -msgstr "" - -msgid "Display information about a vault container." -msgstr "" - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "" - -#, fuzzy -msgid "Hostname (FQDN)" -msgstr "Nazwa strefy (FQDN)" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Managed suffixes" -msgstr "" - -msgid "Check connection to remote IPA server." -msgstr "" - -#, fuzzy -msgid "Remote server name" -msgstr "Nazwa serwera" - -#, fuzzy -msgid "Remote IPA server hostname" -msgstr "Serwer IPA do użycia" - -msgid "suffix" -msgstr "" - -msgid "Search for servers with these managed suffixes." -msgstr "" - -msgid "Search for servers without these managed suffixes." -msgstr "" - -msgid "Add a manager to the stage user entry" -msgstr "" - -msgid "Remove a manager to the stage user entry" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -msgid "Managed LDAP suffix DN" -msgstr "" - -msgid "Search for topology suffixes." -msgstr "" - -msgid "Add a manager to the user entry" -msgstr "" - -msgid "Remove a manager to the user entry" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Comma-separated list of attributes" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" - -#, fuzzy -msgid "DNS class" -msgstr "Klasa SOA" - -msgid "Comma-separated list of raw A records" -msgstr "" - -msgid "Comma-separated list of raw AAAA records" -msgstr "" - -msgid "Comma-separated list of raw A6 records" -msgstr "" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "" - -msgid "Comma-separated list of raw APL records" -msgstr "" - -msgid "Comma-separated list of raw CERT records" -msgstr "" - -msgid "Comma-separated list of raw CNAME records" -msgstr "" - -msgid "Comma-separated list of raw DHCID records" -msgstr "" - -msgid "Comma-separated list of raw DLV records" -msgstr "" - -msgid "Comma-separated list of raw DNAME records" -msgstr "" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "" - -msgid "Comma-separated list of raw DS records" -msgstr "" - -msgid "Comma-separated list of raw HIP records" -msgstr "" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "" - -msgid "Comma-separated list of raw KEY records" -msgstr "" - -msgid "KEY Flags" -msgstr "" - -msgid "KEY Protocol" -msgstr "" - -msgid "Protocol" -msgstr "" - -msgid "KEY Algorithm" -msgstr "" - -msgid "KEY Public Key" -msgstr "" - -msgid "Public Key" -msgstr "" - -msgid "Comma-separated list of raw KX records" -msgstr "" - -msgid "Comma-separated list of raw LOC records" -msgstr "" - -msgid "Comma-separated list of raw MX records" -msgstr "" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "" - -msgid "Comma-separated list of raw NS records" -msgstr "" - -msgid "Comma-separated list of raw NSEC records" -msgstr "" - -#, fuzzy -msgid "NSEC Next Domain Name" -msgstr "Nazwa domeny NIS" - -#, fuzzy -msgid "Next Domain Name" -msgstr "Nazwa domeny NIS" - -msgid "NSEC Type Map" -msgstr "" - -#, fuzzy -msgid "Type Map" -msgstr "Typ" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "" - -msgid "Comma-separated list of raw PTR records" -msgstr "" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "" - -msgid "RRSIG Type Covered" -msgstr "" - -msgid "Type Covered" -msgstr "" - -msgid "RRSIG Algorithm" -msgstr "" - -msgid "RRSIG Labels" -msgstr "" - -msgid "Labels" -msgstr "" - -msgid "RRSIG Original TTL" -msgstr "" - -msgid "Original TTL" -msgstr "" - -msgid "RRSIG Signature Expiration" -msgstr "" - -msgid "Signature Expiration" -msgstr "" - -msgid "RRSIG Signature Inception" -msgstr "" - -msgid "Signature Inception" -msgstr "" - -msgid "RRSIG Key Tag" -msgstr "" - -msgid "RRSIG Signer's Name" -msgstr "" - -#, fuzzy -msgid "Signer's Name" -msgstr "Nazwa serwera" - -msgid "RRSIG Signature" -msgstr "" - -msgid "Signature" -msgstr "" - -msgid "Comma-separated list of raw RP records" -msgstr "" - -msgid "Comma-separated list of raw SIG records" -msgstr "" - -msgid "SIG Type Covered" -msgstr "" - -msgid "SIG Algorithm" -msgstr "" - -msgid "SIG Labels" -msgstr "" - -msgid "SIG Original TTL" -msgstr "" - -msgid "SIG Signature Expiration" -msgstr "" - -msgid "SIG Signature Inception" -msgstr "" - -msgid "SIG Key Tag" -msgstr "" - -msgid "SIG Signer's Name" -msgstr "" - -msgid "SIG Signature" -msgstr "" - -msgid "Comma-separated list of raw SPF records" -msgstr "" - -msgid "Comma-separated list of raw SRV records" -msgstr "" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "" - -msgid "Comma-separated list of raw TA records" -msgstr "" - -msgid "Comma-separated list of raw TKEY records" -msgstr "" - -msgid "Comma-separated list of raw TSIG records" -msgstr "" - -msgid "Comma-separated list of raw TXT records" -msgstr "" - -#, fuzzy -msgid "SOA time to live" -msgstr "Czas życia" - -#, fuzzy -msgid "SOA record time to live" -msgstr "Czas życia" - -msgid "SOA class" -msgstr "Klasa SOA" - -#, fuzzy -msgid "SOA record class" -msgstr "Klasa SOA" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" - -#, fuzzy -msgid "Consume an entitlement." -msgstr "Polecenie nie jest zaimplementowane" - -msgid "Quantity" -msgstr "" - -msgid "Search for entitlement accounts." -msgstr "" - -msgid "Retrieve the entitlement certs." -msgstr "" - -msgid "Import an entitlement certificate." -msgstr "" - -msgid "UUID" -msgstr "" - -msgid "Enrollment UUID" -msgstr "" - -msgid "Register to the entitlement system." -msgstr "" - -#, fuzzy -msgid "Username" +msgid "User name" msgstr "Nazwa użytkownika" -#, fuzzy -msgid "Enrollment UUID (not implemented)" -msgstr "Polecenie nie jest zaimplementowane" - -#, fuzzy -msgid "Registration password" +msgid "User password" msgstr "Hasło użytkownika" -msgid "Display current entitlements." -msgstr "" +msgid "User search fields" +msgstr "Pola wyszukiwania użytkowników" -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" +msgid "Users" +msgstr "Użytkownicy" +msgid "Validity" +msgstr "Ważność" + +msgid "Verify Principal Password" +msgstr "Sprawdzenie hasła naczelnika" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "Ostrzeżenie: przekonwertowanie typu (#%d) się nie powiodło\n" + +#, c-format msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" msgstr "" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" - -msgid "comma-separated list of users to add" -msgstr "" - -msgid "comma-separated list of groups to add" -msgstr "" - -msgid "comma-separated list of users to remove" -msgstr "" - -msgid "comma-separated list of groups to remove" -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -#, fuzzy -msgid "Source host category" -msgstr "Kategoria komputerów" - -#, fuzzy -msgid "Source host category the rule applies to" -msgstr "Kategoria komputerów, do których zastosowywana jest reguła" - -msgid "Source Hosts" -msgstr "" - -#, fuzzy -msgid "Source Host Groups" -msgstr "Grupy komputerów" - -msgid "comma-separated list of hosts to add" -msgstr "" - -msgid "comma-separated list of host groups to add" -msgstr "" - -msgid "comma-separated list of HBAC services to add" -msgstr "" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "" - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "" - -msgid "comma-separated list of hosts to remove" -msgstr "" - -msgid "comma-separated list of host groups to remove" -msgstr "" - -msgid "comma-separated list of HBAC services to remove" -msgstr "" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" - -msgid "Source host" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "comma-separated list of netgroups to add" -msgstr "" - -msgid "comma-separated list of netgroups to remove" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" - -#, fuzzy -msgid "Target members of a group" -msgstr "Element grupy" - -#, fuzzy -msgid "User group to apply permissions to" -msgstr "Grupa, do której zastosować ACI" - -msgid "comma-separated list of privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI" -msgstr "" - -#, fuzzy -msgid "Permission type" -msgstr "Uprawnienia" - -msgid "comma-separated list of privileges to remove" -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "comma-separated list of roles to add" -msgstr "" - -#, fuzzy -msgid "comma-separated list of permissions" -msgstr "Lista typów szyfrowania oddzielonych przecinkami" - -msgid "comma-separated list of roles to remove" -msgstr "" - -msgid "comma-separated list of privileges" -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "comma-separated list of sudo commands to add" -msgstr "" - -msgid "comma-separated list of sudo commands to remove" -msgstr "" - -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" - -msgid "comma-separated list of sudo command groups to add" -msgstr "" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "" - -msgid "Failed members" -msgstr "Elementy, które się nie powiodły" - -msgid "Failed source hosts/hostgroups" -msgstr "" - -#, fuzzy -msgid "Failed hosts/hostgroups" -msgstr "Nazwa grupy komputerów" - -#, fuzzy -msgid "Failed users/groups" -msgstr "Domyślna grupa użytkowników" - -#, fuzzy -msgid "Failed service/service groups" -msgstr "Grupy usługi elementów" - -#, fuzzy -msgid "Failed to remove" -msgstr "Utworzenie klucza się nie powiodło.\n" - -#, fuzzy -msgid "Failed RunAs" -msgstr "Elementy, które się nie powiodły" - -msgid "Failed RunAsGroup" -msgstr "" - -#, fuzzy -msgid "Failed profiles" -msgstr "Elementy, które się nie powiodły" - -#, fuzzy -msgid "Failed CAs" -msgstr "Elementy, które się nie powiodły" - -#, fuzzy -msgid "Failed member manager" -msgstr "Elementy, które się nie powiodły" - -#, fuzzy -msgid "Failed managedby" -msgstr "Elementy, które się nie powiodły" - -#, fuzzy -msgid "Failed allowed to retrieve keytab" -msgstr "Dodanie klucza do tablicy kluczy się nie powiodło\n" - -#, fuzzy -msgid "Failed allowed to create keytab" -msgstr "Utworzenie klucza się nie powiodło.\n" - -#, fuzzy -msgid "Failed targets" -msgstr "Elementy, które się nie powiodły" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "nieznany błąd %(code)d z %(server)s: %(error)s" - -msgid "an internal error has occurred" -msgstr "wystąpił wewnętrzny błąd" - -#, fuzzy, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "wystąpił wewnętrzny błąd" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "" - -#, fuzzy, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "nieznany błąd %(code)d z %(server)s: %(error)s" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Nieprawidłowe żądanie JSON-RPC: %(error)s" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Błąd Kerberosa: %(major)s/%(minor)s" - -msgid "did not receive Kerberos credentials" -msgstr "nie otrzymano danych uwierzytelniających Kerberosa" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -msgid "No credentials cache found" -msgstr "Nie odnaleziono pamięci podręcznej danych uwierzytelniających" - -msgid "Ticket expired" -msgstr "Zgłoszenie wygasło" - -msgid "Credentials cache permissions incorrect" -msgstr "" -"Uprawnienia pamięci podręcznej danych uwierzytelniających są niepoprawne" - -msgid "Bad format in credentials cache" -msgstr "Błędny format w pamięci podręcznej danych uwierzytelniających" - -msgid "Cannot resolve KDC for requested realm" -msgstr "Nie można rozwiązać KDC dla żądanego obszaru" - -msgid "Session error" -msgstr "" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Niewystarczający dostęp: %(info)s" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#, python-format -msgid "'%(name)s' is required" -msgstr "" - -#, fuzzy, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "Nieprawidłowe żądanie JSON-RPC: %(error)s" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - -msgid "Passwords do not match" -msgstr "Hasła się nie zgadzają" - -msgid "Command not implemented" -msgstr "Polecenie nie jest zaimplementowane" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -msgid "This entry already exists" -msgstr "Ten wpis już istnieje" +"Ostrzeżenie: typy salt nie są uwzględniane z losowymi hasłami (proszę " +"zobaczyć opcję -P)\n" msgid "You must enroll a host in order to create a host service" msgstr "Należy zapisać się do komputera, aby utworzyć jego usługę" -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" -"Naczelnik usługi nie jest w formacie: usługa/w pełni kwalifikowana nazwa " -"komputera: %(reason)s" +msgid "Zone name" +msgstr "Nazwa strefy" -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "Obszar naczelnika nie zgadza się z obszarem dla tego serwera IPA" +msgid "Zone name (FQDN)" +msgstr "Nazwa strefy (FQDN)" -msgid "This command requires root access" -msgstr "To polecenie wymaga dostępu roota" - -msgid "This is already a posix group" -msgstr "To jest już grupa POSIX" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -#, fuzzy -msgid "This entry is already enabled" -msgstr "Ten wpis już istnieje" - -#, fuzzy -msgid "This entry is already disabled" -msgstr "Ten wpis już istnieje" - -msgid "This entry cannot be enabled or disabled" -msgstr "" - -msgid "This entry is not a member" -msgstr "" - -msgid "A group may not be a member of itself" -msgstr "Grupa nie może być własnym elementem" - -#, fuzzy -msgid "This entry is already a member" -msgstr "Ten wpis już istnieje" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Dekodowanie base64 się nie powiodło: %(reason)s" - -msgid "A group may not be added as a member of itself" -msgstr "Nie można dodać grupy jako elementu jej samej" - -msgid "The default users group cannot be removed" -msgstr "Nie można usunąć domyślnej grupy użytkowników" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" -"Usuwanie zarządzanej grupy nie jest dozwolone. Musi zostać najpierw " -"odłączona." - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, fuzzy, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "Odrzuć certyfikat." - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "%(attr)s nie zawiera „%(value)s”" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -msgid "This group already allows external members" -msgstr "" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, fuzzy, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "%(attr)s nie zawiera „%(value)s”" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "change collided with another change" -msgstr "zmiana koliduje z inną zmianą" - -msgid "no modifications to be performed" -msgstr "żadne modyfikacje nie zostaną wykonane" - -#, fuzzy, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(info)s" - -msgid "limits exceeded for this query" -msgstr "przekroczono ograniczenia dla tego zapytania" - -#, python-format -msgid "%(info)s" -msgstr "%(info)s" - -msgid "modifying primary key is not allowed" -msgstr "" - -#, fuzzy, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "Dozwolona jest tylko jedna wartość" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -#, fuzzy -msgid "Not allowed on non-leaf entry" -msgstr "modyfikowanie wpisów użytkowników nie jest dozwolone" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "Nie można ukończyć działania na certyfikacie: %(error)s" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "Błąd formatu certyfikatu: %(error)s" - -msgid "Already registered" -msgstr "" - -msgid "Not registered yet" -msgstr "" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, fuzzy, python-format -msgid "%(exception)s" -msgstr "%(reason)s" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, fuzzy, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "nieznany błąd %(code)d z %(server)s: %(error)s" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d zmiennych" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "Wczytano %(count)d wtyczkę" -msgstr[1] "Wczytano %(count)d wtyczki" -msgstr[2] "Wczytano %(count)d wtyczek" - -msgid "A dictionary representing an LDAP entry" -msgstr "Słownik reprezentujący wpis LDAP" - -msgid "A list of LDAP entries" -msgstr "Lista wpisów LDAP" - -msgid "All commands should at least have a result" -msgstr "Wszystkie polecenia powinny powiadać przynajmniej wynik" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "Proszę podać %(label)s ponownie, aby sprawdzić: " - -msgid "Passwords do not match!" -msgstr "Hasła się nie zgadzają." - -msgid "No matching entries found" -msgstr "" - -#, fuzzy -msgid "Topic or Command" -msgstr "Polecenie sudo" - -msgid "The topic or command name." -msgstr "" - -#, fuzzy -msgid "Topic commands:" -msgstr "Polecenia" - -msgid "To get command help, use:" -msgstr "" - -msgid " ipa --help" -msgstr "" - -#, fuzzy -msgid "Command name" -msgstr "Polecenia" - -msgid "Positional arguments" -msgstr "" - -#, python-format -msgid "Same as --%s" -msgstr "" - -msgid "Deprecated options" -msgstr "" - -msgid "No file to read" -msgstr "" - -msgid "Results are truncated, try a more specific search" -msgstr "" -"Wyniki zostały obcięte, proszę spróbować bardziej konkretnego wyszukiwania" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - -#, fuzzy, python-format -msgid "%(filename)s: file not found" -msgstr "Nie odnaleziono pliku %(file)s" - -#, fuzzy, python-brace-format -msgid "Unable to parse option {item}" -msgstr "Nie można przetworzyć naczelnika\n" - -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - -msgid "Filename is empty" -msgstr "" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -#, fuzzy -msgid "cannot be longer that {} characters" -msgstr "może wynosić co najwyżej %(maxlength)d znaków" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" -msgstr "" - -#, fuzzy, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "nieznany błąd %(code)d z %(server)s: %(error)s" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -#, fuzzy -msgid "invalid domain name" -msgstr "Nazwa domeny NIS" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "incorrect type" -msgstr "niepoprawny typ" - -msgid "Only one value is allowed" -msgstr "Dozwolona jest tylko jedna wartość" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "musi być prawdą lub fałszem" - -msgid "must be an integer" -msgstr "musi być liczba całkowitą" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "musi wynosić co najmniej %(minvalue)d" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "może wynosić co najwyżej %(maxvalue)d" - -msgid "must be a decimal number" -msgstr "musi być liczbą dziesiętną" - -#, fuzzy, python-format -msgid "must be at least %(minvalue)s" -msgstr "musi wynosić co najmniej %(minvalue)d" - -#, fuzzy, python-format -msgid "can be at most %(maxvalue)s" -msgstr "może wynosić co najwyżej %(maxvalue)d" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "musi pasować do wzorca „%(pattern)s”" - -msgid "must be binary data" -msgstr "musi być danymi binarnymi" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "musi wynosić co najmniej %(minlength)d bajtów" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "może wynosić co najwyżej %(maxlength)d bajtów" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "musi wynosić dokładnie %(length)d bajtów" - -#, fuzzy -msgid "must be a certificate" -msgstr "Odrzuć certyfikat." - -#, fuzzy -msgid "must be a certificate signing request" -msgstr "Dekodowanie żądania podpisywania certyfikatu się nie powiodło: %s" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "Dekodowanie żądania podpisywania certyfikatu się nie powiodło: %s" - -msgid "must be Unicode text" -msgstr "musi być tekstem w unikodzie" - -msgid "Leading and trailing spaces are not allowed" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "musi wynosić co najmniej %(minlength)d znaków" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "może wynosić co najwyżej %(maxlength)d znaków" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "musi wynosić dokładnie %(length)d znaków" - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "" - -#, fuzzy, python-format -msgid "must be '%(value)s'" -msgstr "Odnaleziono „%(value)s”" - -#, fuzzy, python-format -msgid "must be one of %(values)s" -msgstr "musi wynosić co najmniej %(minvalue)d" - -#, fuzzy -msgid "must be datetime value" -msgstr "musi wynosić co najmniej %(minvalue)d" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -#, fuzzy -msgid "must be DNS name" -msgstr "musi być liczba całkowitą" - -#, fuzzy -msgid "must be absolute" -msgstr "musi być liczba całkowitą" - -#, fuzzy -msgid "must be relative" -msgstr "musi być prawdą lub fałszem" - -#, fuzzy -msgid "must be dictionary" -msgstr "musi być danymi binarnymi" - -#, fuzzy -msgid "must be Kerberos principal" -msgstr "Naczelnik Kerberosa" - -#, fuzzy, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy -msgid "Service principal is required" -msgstr "Naczelnik usługi" - -#, fuzzy -msgid "must be at least 0" -msgstr "musi wynosić co najmniej %(minvalue)d" - -#, fuzzy -msgid "invalid valid hex" -msgstr "Nazwa domeny NIS" - -#, fuzzy -msgid "invalid serial number 0" -msgstr "Numer seryjny" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "" - -#, fuzzy, python-format -msgid "objectclass %s not found" -msgstr "Nie odnaleziono komputera „%(host)s”" - -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "Failed to authenticate to CA REST API" -msgstr "" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "" - -#, fuzzy, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "%(parent)s: nie odnaleziono %(oname)s" - -#, fuzzy -msgid "automount location" -msgstr "Informacje o montowaniu" - -#, fuzzy -msgid "automount locations" -msgstr "Automatyczne montowanie map" - -#, fuzzy -msgid "Automount Locations" -msgstr "Automatyczne montowanie map" - -#, fuzzy -msgid "Automount Location" -msgstr "Automatyczne montowanie map" - -#, fuzzy, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "Pasuje %(count)d komputer" -msgstr[1] "Pasuje %(count)d komputery" -msgstr[2] "Pasuje %(count)d komputerów" - -#, fuzzy -msgid "automount map" -msgstr "Automatyczne montowanie map" - -#, fuzzy -msgid "automount maps" -msgstr "Automatyczne montowanie map" - -msgid "Automount Maps" -msgstr "Automatyczne montowanie map" - -#, fuzzy -msgid "Automount Map" -msgstr "Automatyczne montowanie map" - -#, fuzzy, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "Dodano grupę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "Usunięto grupę „%(value)s”" - -#, fuzzy, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "Zmodyfikowano grupę „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "Pasuje %(count)d grupa" -msgstr[1] "Pasują %(count)d grupy" -msgstr[2] "Pasuje %(count)d grup" - -#, fuzzy -msgid "Automount key object." -msgstr "Automatyczne montowanie kluczy" - -#, fuzzy -msgid "automount key" -msgstr "Automatyczne montowanie kluczy" - -#, fuzzy -msgid "automount keys" -msgstr "Automatyczne montowanie kluczy" - -msgid "Automount Keys" -msgstr "Automatyczne montowanie kluczy" - -#, fuzzy -msgid "Automount Key" -msgstr "Automatyczne montowanie kluczy" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, fuzzy, python-format -msgid "key named %(key)s already exists" -msgstr "Ten wpis już istnieje" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, fuzzy, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, fuzzy, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "Dodano grupę „%(value)s”" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -#, fuzzy, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "Pasuje %(count)d komputer" -msgstr[1] "Pasuje %(count)d komputery" -msgstr[2] "Pasuje %(count)d komputerów" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -#, fuzzy -msgid "CA is not configured" -msgstr "DNS nie jest skonfigurowany" - -msgid "invalid Profile ID" -msgstr "" - -#, fuzzy -msgid "Certificate Profile" -msgstr "Odrzucono certyfikat" - -#, fuzzy -msgid "Certificate Profiles" -msgstr "Odrzucono certyfikat" - -#, fuzzy -msgid "Profile configuration" -msgstr "Konfiguracja" - -#, fuzzy, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -#, fuzzy, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, fuzzy, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy -msgid "Certificate profiles cannot be renamed" -msgstr "Nie można ukończyć działania na certyfikacie: %(error)s" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -#, fuzzy -msgid "Delegation" -msgstr "Usuń" - -#, fuzzy -msgid "ACI" -msgstr "ACI" - -#, fuzzy, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "Dodano grupę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "Usunięto grupę „%(value)s”" - -#, fuzzy, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "Zmodyfikowano grupę „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "Pasuje %(count)d grupa" -msgstr[1] "Pasują %(count)d grupy" -msgstr[2] "Pasuje %(count)d grup" - -#, fuzzy -msgid "" -"\n" -"DNS server configuration\n" -msgstr "Konfiguracja" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -#, fuzzy -msgid "DNS Servers" -msgstr "Usługi" - -msgid "DNS Server" -msgstr "" - -#, fuzzy -msgid "DNS Server name" -msgstr "Nazwa serwera" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "DNS nie jest skonfigurowany" - -msgid "Modify DNS server configuration" -msgstr "" - -#, fuzzy, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -msgid "Search for DNS servers." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -#, fuzzy -msgid "IPA DNS Server is not installed" -msgstr "Serwer IPA do użycia" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, fuzzy, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -msgid "Delete a DNS server" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -msgid "groups" -msgstr "Grupy" - -#, fuzzy -msgid "User Group" -msgstr "Grupy użytkowników" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "Dodano grupę „%(value)s”" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Usunięto grupę „%(value)s”" - -#, fuzzy -msgid "privileged group" -msgstr "Grupa docelowa" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Zmodyfikowano grupę „%(value)s”" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "Pasuje %(count)d grupa" -msgstr[1] "Pasują %(count)d grupy" -msgstr[2] "Pasuje %(count)d grup" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" - -msgid "not allowed to modify user entries" -msgstr "modyfikowanie wpisów użytkowników nie jest dozwolone" - -msgid "not allowed to modify group entries" -msgstr "modyfikowanie wpisów grup nie jest dozwolone" - -msgid "Not a managed group" -msgstr "Nie jest zarządzaną grupą" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -#, fuzzy -msgid "HBAC services" -msgstr "Usługi" - -#, fuzzy -msgid "HBAC Services" -msgstr "Usługi" - -#, fuzzy -msgid "HBAC Service" -msgstr "Usługi" - -#, fuzzy, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -#, fuzzy -msgid "HBAC service group" -msgstr "Opis grupy usługi HBAC" - -#, fuzzy -msgid "HBAC service groups" -msgstr "Opis grupy usługi HBAC" - -#, fuzzy -msgid "HBAC Service Groups" -msgstr "Grupy usług" - -#, fuzzy -msgid "HBAC Service Group" -msgstr "Grupy usług" - -#, fuzzy, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -msgid "host groups" -msgstr "Grupy komputerów" - -#, fuzzy -msgid "Host Group" -msgstr "Grupy komputerów" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Dodano grupę komputerów „%(value)s”" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Usunięto grupę komputerów „%(value)s”" - -#, fuzzy -msgid "hostgroup" -msgstr "Grupa komputerów" - -#, fuzzy -msgid "privileged hostgroup" -msgstr "Element grupy komputerów" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Zmodyfikowano grupę komputerów „%(value)s”" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "Pasuje %(count)d grupa komputerów" -msgstr[1] "Pasują %(count)d grupy komputerów" -msgstr[2] "Pasuje %(count)d grup komputerów" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -#, fuzzy -msgid "local domain range" -msgstr "Nazwa domeny NIS" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -#, fuzzy -msgid "Auto private groups" -msgstr "Nie jest zarządzaną grupą" - -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "Usunięto ACI „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "Pasuje %(count)d użytkownik" -msgstr[1] "Pasuje %(count)d użytkowników" -msgstr[2] "Pasuje %(count)d użytkowników" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "Zmodyfikowano ACI „%(value)s”" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -#, fuzzy -msgid "" -"\n" -"IPA locations\n" -msgstr "Położenie" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -#, fuzzy -msgid "location" -msgstr "Położenie" - -#, fuzzy -msgid "locations" -msgstr "Położenie" - -#, fuzzy -msgid "IPA Locations" -msgstr "Położenie" - -#, fuzzy -msgid "IPA Location" -msgstr "Położenie" - -#, fuzzy -msgid "Location name" -msgstr "Położenie" - -#, fuzzy -msgid "IPA location name" -msgstr "Nazwa domeny NIS" - -#, fuzzy -msgid "IPA Location description" -msgstr "Opis grupy sieciowej" - -#, fuzzy -msgid "Servers" -msgstr "Usługi" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, fuzzy, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -msgid "Delete an IPA location." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -#, fuzzy -msgid "IPA Server" -msgstr "Serwer IPA do użycia" - -msgid "Modify information about an IPA location." -msgstr "" - -#, fuzzy, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" - -msgid "Search for IPA locations." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "Pasuje %(count)d komputer" -msgstr[1] "Pasuje %(count)d komputery" -msgstr[2] "Pasuje %(count)d komputerów" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -#, fuzzy -msgid "netgroups" -msgstr "Grupy sieciowe" - -msgid "Netgroups" -msgstr "Grupy sieciowe" - -#, fuzzy -msgid "Netgroup" -msgstr "Grupy sieciowe" - -#, fuzzy, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "Dodano grupę „%(value)s”" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Usunięto grupę „%(value)s”" - -#, fuzzy, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "Zmodyfikowano grupę „%(value)s”" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "Pasuje %(count)d grupa" -msgstr[1] "Pasują %(count)d grupy" -msgstr[2] "Pasuje %(count)d grup" - -msgid "One time password commands" -msgstr "" - -#, fuzzy -msgid "OTP configuration options" -msgstr "Konfiguracja" - -#, fuzzy -msgid "OTP Configuration" -msgstr "Konfiguracja" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -#, fuzzy -msgid "URI" -msgstr "UID" - -#, fuzzy, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -msgid "cannot be empty" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -#, fuzzy, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "Pasuje %(count)d komputer" -msgstr[1] "Pasuje %(count)d komputery" -msgstr[2] "Pasuje %(count)d komputerów" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Zmieniono hasło dla „%(value)s”" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -#, fuzzy -msgid "invalid port number" -msgstr "Numer seryjny" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, fuzzy, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -#, fuzzy -msgid "Realm domains" -msgstr "Nazwa obszaru" - -#, fuzzy -msgid "Realm Domains" -msgstr "Nazwa obszaru" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -#, fuzzy -msgid "roles" -msgstr "Role" - -#, fuzzy -msgid "Role" -msgstr "Role" - -#, fuzzy, python-format -msgid "Added role \"%(value)s\"" -msgstr "Dodano grupę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "Usunięto grupę „%(value)s”" - -#, fuzzy, python-format -msgid "Modified role \"%(value)s\"" -msgstr "Zmodyfikowano grupę „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "Pasuje %(count)d grupa" -msgstr[1] "Pasują %(count)d grupy" -msgstr[2] "Pasuje %(count)d grup" - -#, fuzzy -msgid "self service permission" -msgstr "Opis grupy usługi HBAC" - -msgid "self service permissions" -msgstr "" - -#, fuzzy -msgid "Self Service Permissions" -msgstr "Uprawnienia" - -msgid "Self Service Permission" -msgstr "" - -#, fuzzy, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -#, fuzzy -msgid "" -"\n" -"IPA server roles\n" -msgstr "Serwer IPA do użycia" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -#, fuzzy -msgid "server role" -msgstr "Nazwa serwera" - -#, fuzzy -msgid "server roles" -msgstr "Nazwa serwera" - -#, fuzzy -msgid "IPA Server Roles" -msgstr "Serwer IPA do użycia" - -#, fuzzy -msgid "IPA Server Role" -msgstr "Serwer IPA do użycia" - -#, fuzzy -msgid "IPA server role name" -msgstr "Serwer IPA do użycia" - -#, fuzzy -msgid "Role status" -msgstr "Stan żądania" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -msgid "Include IPA master entries" -msgstr "" - -#, fuzzy -msgid "IPA role name" -msgstr "Nazwa reguły" - -#, fuzzy, python-brace-format -msgid "{role}: role not found" -msgstr "Nie odnaleziono pliku %(file)s" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -#, fuzzy -msgid "Member principals" -msgstr "Naczelnik Kerberosa" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "członek %s" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -#, fuzzy -msgid "Service delegation rules" -msgstr "Kategoria usług" - -#, fuzzy -msgid "Service delegation rule" -msgstr "Kategoria usług" - -#, fuzzy, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -msgid "privileged service delegation rule" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -#, fuzzy -msgid "Service delegation target" -msgstr "Nazwa grupy usługi" - -#, fuzzy, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -msgid "privileged service delegation target" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -#, fuzzy -msgid "Subordinate id description" -msgstr "Opis grupy" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -msgid "SubUID range size" -msgstr "" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -msgid "SubGID range size" -msgstr "" - -msgid "Subordinate group ID count" -msgstr "" - -#, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "" - -#, python-format -msgid "'%(dn)s is not a valid user" -msgstr "" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -#, fuzzy -msgid "Add a new subordinate id." -msgstr "Dodaj i zamknij" - -#, fuzzy, python-format -#| msgid "Added service \"%(value)s\"" -msgid "Added subordinate id \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy -msgid "Delete a subordinate id." -msgstr "Odrzuć certyfikat." - -#, fuzzy, python-format -#| msgid "Deleted service \"%(value)s\"" -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -msgid "Modify a subordinate id." -msgstr "" - -#, fuzzy, python-format -#| msgid "Modified service \"%(value)s\"" -msgid "Modified subordinate id \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy -msgid "Search for subordinate id." -msgstr "Domyślna grupa dla nowych użytkowników" - -#, fuzzy, python-format -#| msgid "%(count)d service matched" -#| msgid_plural "%(count)d services matched" -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -msgid "Display information about a subordinate id." -msgstr "" - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -#, fuzzy -msgid "sudo command" -msgstr "Polecenie sudo" - -#, fuzzy -msgid "sudo commands" -msgstr "Polecenie sudo" - -#, fuzzy -msgid "Sudo Commands" -msgstr "Polecenie sudo" - -#, fuzzy, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "Usunięto ACI „%(value)s”" - -#, fuzzy, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "Zmodyfikowano ACI „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "Pasuje %(count)d ACI" -msgstr[1] "Pasują %(count)d ACI" -msgstr[2] "Pasuje %(count)d ACI" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -#, fuzzy -msgid "sudo command group" -msgstr "Grupy polecenia sudo" - -#, fuzzy -msgid "sudo command groups" -msgstr "Grupy polecenia sudo" - -#, fuzzy, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Dodano grupę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Usunięto grupę „%(value)s”" - -#, fuzzy, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Zmodyfikowano grupę „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "Pasuje %(count)d grupa" -msgstr[1] "Pasują %(count)d grupy" -msgstr[2] "Pasuje %(count)d grup" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "Pasuje %(count)d komputer" -msgstr[1] "Pasuje %(count)d komputery" -msgstr[2] "Pasuje %(count)d komputerów" - -#, fuzzy, python-format -msgid "Added segment \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -#, fuzzy, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" - -#, fuzzy, python-format -msgid "%(value)s" -msgstr "Odnaleziono „%(value)s”" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "Pasuje %(count)d komputer" -msgstr[1] "Pasuje %(count)d komputery" -msgstr[2] "Pasuje %(count)d komputerów" - -#, fuzzy, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -#, fuzzy, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, fuzzy, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, fuzzy, python-format -msgid "not allowed to perform operation: %s" -msgstr "modyfikowanie wpisów grup nie jest dozwolone" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"IPA servers\n" -msgstr "Serwer IPA do użycia" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -msgid "servers" -msgstr "" - -#, fuzzy -msgid "IPA Servers" -msgstr "Serwer IPA do użycia" - -#, fuzzy -msgid "Server location" -msgstr "Kategoria usług" - -#, fuzzy -msgid "Service weight" -msgstr "Nazwa usługi" - -msgid "Weight for server services" -msgstr "" - -#, fuzzy -msgid "Service relative weight" -msgstr "Kategoria usług" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -#, fuzzy -msgid "Enabled server roles" -msgstr "Włączono konto użytkownika „%(value)s”" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, fuzzy, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -#, fuzzy, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -#, fuzzy -msgid "not allowed to perform server connection check" -msgstr "modyfikowanie wpisów użytkowników nie jest dozwolone" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -#, fuzzy -msgid "State" -msgstr "Stan" - -#, fuzzy -msgid "Server state" -msgstr "Nazwa serwera" - -#, fuzzy, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "Zmieniono hasło dla „%(value)s”" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "A list of ACI values" -msgstr "Lista wartości ACI" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" -"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" - -msgid "ACI prefix is required" -msgstr "" +msgid "an internal error has occurred" +msgstr "wystąpił wewnętrzny błąd" msgid "" "at least one of: type, filter, subtree, targetgroup, attrs or memberof are " @@ -15473,7547 +1403,156 @@ msgstr "" "co najmniej jedna z wartości: „type”, „filter”, „subtree”, „targetgroup”, " "„attrs” lub „memberof” jest wymagana" -#, fuzzy -msgid "filter and memberof are mutually exclusive" -msgstr "" -"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" +msgid "automatically add the principal if it doesn't exist" +msgstr "automatycznie dodaj naczelnika, jeśli nie istnieje" -#, fuzzy -msgid "group, permission and self are mutually exclusive" -msgstr "" -"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "ber_init() się nie powiodło, nieprawidłowa kontrola?\n" -msgid "One of group, permission or self is required" -msgstr "" +msgid "bind password" +msgstr "hasło Bind" #, python-format -msgid "Group '%s' does not exist" -msgstr "Grupa „%s” nie istnieje" - -msgid "empty filter" -msgstr "" +msgid "can be at most %(maxlength)d bytes" +msgstr "może wynosić co najwyżej %(maxlength)d bajtów" #, python-format -msgid "Syntax Error: %(error)s" -msgstr "Błąd składni: %(error)s" +msgid "can be at most %(maxlength)d characters" +msgstr "może wynosić co najwyżej %(maxlength)d znaków" #, python-format -msgid "invalid DN (%s)" -msgstr "" +msgid "can be at most %(maxvalue)d" +msgstr "może wynosić co najwyżej %(maxvalue)d" -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "Nie odnaleziono ACI o nazwie „%s”" +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "nie można otworzyć pliku konfiguracji %s\n" -msgid "ACI object." -msgstr "" +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "nie można wykonać stat() na pliku konfiguracji %s\n" -msgid "ACIs" -msgstr "ACI" +msgid "change collided with another change" +msgstr "zmiana koliduje z inną zmianą" -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "Utworzono ACI „%(value)s”" +msgid "change to a POSIX group" +msgstr "zmiana na grupę POSIX" -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "Usunięto ACI „%(value)s”" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "Zmodyfikowano ACI „%(value)s”" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "Pasuje %(count)d ACI" -msgstr[1] "Pasują %(count)d ACI" -msgstr[2] "Pasuje %(count)d ACI" - -#, fuzzy, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "Utworzono ACI „%(value)s”" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, fuzzy, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(pkey)s: nie odnaleziono %(oname)s" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -#, fuzzy -msgid "Auto Membership is not configured" -msgstr "DNS nie jest skonfigurowany" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, fuzzy, python-format -msgid "Auto member rule: %s not found!" -msgstr "Nie odnaleziono ACI o nazwie „%s”" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Usunięto grupę komputerów „%(value)s”" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "Zmodyfikowano użytkownika „%(value)s”" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Usunięto użytkownika „%(value)s”" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "Pasuje %(count)d użytkownik" -msgstr[1] "Pasuje %(count)d użytkowników" -msgstr[2] "Pasuje %(count)d użytkowników" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -#, fuzzy -msgid "Automember" -msgstr "członek %s" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "Member service groups" -msgstr "Grupy usługi elementów" - -#, fuzzy -msgid "Member HBAC service groups" -msgstr "Grupy usługi elementów" - -#, fuzzy -msgid "Member ID user overrides" -msgstr "Usługi elementów" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -#, fuzzy -msgid "Indirect Member HBAC service" -msgstr "Usługi elementów" - -#, fuzzy -msgid "Indirect Member HBAC service group" -msgstr "Grupy usługi elementów" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" +#, c-format +msgid "child exited with %d\n" +msgstr "potomek został zakończony z %d\n" #, python-format msgid "container entry (%(container)s) not found" msgstr "nie odnaleziono wpisu kontenera (%(container)s)" -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s: nie odnaleziono %(oname)s" +msgid "description" +msgstr "opis" + +msgid "did not receive Kerberos credentials" +msgstr "nie otrzymano danych uwierzytelniających Kerberosa" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "wykonanie ipa-getkeytab się nie powiodło, errno %d\n" + +msgid "force host name even if not in DNS" +msgstr "wymuszenie nazwy komputera, nawet jeśli nie w DNS" + +msgid "force principal name even if not in DNS" +msgstr "wymuszenie nazwy naczelnika, nawet jeśli nie w DNS" + +#, c-format +msgid "fork() failed\n" +msgstr "fork() się nie powiodło\n" + +msgid "incorrect type" +msgstr "niepoprawny typ" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "ipa-getkeytab ma błędne uprawnienia?\n" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "nie odnaleziono ipa-getkeytab\n" + +#, c-format +msgid "kvno %d\n" +msgstr "kvno %d\n" + +msgid "limits exceeded for this query" +msgstr "przekroczono ograniczenia dla tego zapytania" #, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s: nie odnaleziono %(oname)s" +msgid "member %s" +msgstr "członek %s" -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -#, fuzzy -msgid "attribute is not configurable" -msgstr "DNS nie jest skonfigurowany" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "wpis został usunięty podczas modyfikowania" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, fuzzy, python-format -msgid "added attribute value to entry %(value)s" -msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, fuzzy, python-format -msgid "Access granted: %s" -msgstr "Czas dostępu" - -#, fuzzy -msgid "" -"\n" -"Permissions\n" -msgstr "Uprawnienia" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Managed permissions\n" -msgstr "Uprawnienia" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -#, fuzzy -msgid "must be enclosed in parentheses" -msgstr "musi być liczba całkowitą" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, fuzzy, python-format -msgid "Deprecated; use %s" -msgstr "Usunięto użytkownika „%(value)s”" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, fuzzy, python-format -msgid "Entry %s not found" -msgstr "Nie odnaleziono komputera „%(host)s”" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, fuzzy, python-format -msgid "%s: group not found" -msgstr "%(pkey)s: nie odnaleziono %(oname)s" - -#, fuzzy -msgid "target and targetgroup are mutually exclusive" -msgstr "" -"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" - -#, fuzzy -msgid "subtree and type are mutually exclusive" -msgstr "" -"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" - -#, fuzzy -msgid "Bad search filter" -msgstr "Pola wyszukiwania użytkowników" - -#, fuzzy, python-format -msgid "Entry %s does not exist" -msgstr "Grupa „%s” nie istnieje" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, fuzzy, python-format -msgid "Added permission \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -#, fuzzy -msgid "attrs and included attributes are mutually exclusive" -msgstr "" -"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "Usunięto użytkownika „%(value)s”" - -msgid "cannot delete managed permissions" -msgstr "" - -#, fuzzy, python-format -msgid "ACI of permission %s was not found" -msgstr "Nie odnaleziono ACI o nazwie „%s”" - -#, fuzzy, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "Zmodyfikowano użytkownika „%(value)s”" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "Pasuje %(count)d użytkownik" -msgstr[1] "Pasuje %(count)d użytkowników" -msgstr[2] "Pasuje %(count)d użytkowników" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, fuzzy, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -#, fuzzy -msgid "" -"\n" -"API Schema\n" -msgstr "Schemat LDAP" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -#, fuzzy -msgid "Name" -msgstr "Nazwa komputera" - -#, fuzzy -msgid "Documentation" -msgstr "Położenie" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -msgid "Help topic" -msgstr "" - -#, fuzzy -msgid "Version" -msgstr "Uprawnienia" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "Nazwa grupy sieciowej" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -#, fuzzy, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "Nie odnaleziono pliku %(file)s" - -msgid "Display information about a class." -msgstr "" - -#, fuzzy -msgid "Search for classes." -msgstr "Klasy znaków" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -#, fuzzy -msgid "Required" -msgstr "Identyfikator żądania" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "Nazwa ACI" - -#, fuzzy -msgid "Confirm (password)" -msgstr "Hasło użytkownika" - -#, fuzzy -msgid "Default" -msgstr "Domyślna powłoka" - -#, fuzzy -msgid "Default from" -msgstr "Domyślna grupa użytkowników" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, fuzzy, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(parent)s: nie odnaleziono %(oname)s" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, fuzzy, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(parent)s: nie odnaleziono %(oname)s" - -msgid "Display information about a command output." -msgstr "" - -#, fuzzy -msgid "Search for command outputs." -msgstr "Grupy polecenia sudo" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -#, fuzzy -msgid "Trust direction" -msgstr "Opis grupy" - -#, fuzzy -msgid "Trust type" -msgstr "Typ reguły" - -#, fuzzy -msgid "Trust status" -msgstr "Stan żądania" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -#, fuzzy -msgid "External trust" -msgstr "Zewnętrzny komputer" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Wyłączono konto użytkownika „%(value)s”" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -#, fuzzy -msgid "trust type" -msgstr "Typ reguły" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "Pasuje %(count)d komputer" -msgstr[1] "Pasuje %(count)d komputery" -msgstr[2] "Pasuje %(count)d komputerów" - -#, fuzzy -msgid "trust configuration" -msgstr "Konfiguracja" - -#, fuzzy -msgid "Global Trust Configuration" -msgstr "Konfiguracja" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -#, fuzzy -msgid "unsupported trust type" -msgstr "Obsługiwane typy szyfrowania:\n" - -#, fuzzy, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "Zmodyfikowano ACI „%(value)s”" - -#, fuzzy -msgid "SID" -msgstr "GID" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -#, fuzzy -msgid "Domain enabled" -msgstr "Nazwa domeny NIS" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, fuzzy -msgid "not allowed to remotely add agent" -msgstr "modyfikowanie wpisów użytkowników nie jest dozwolone" - -#, fuzzy, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "Włączono konto użytkownika „%(value)s”" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "Wyłączono konto użytkownika „%(value)s”" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -#, fuzzy -msgid "vaultcontainer" -msgstr "Kontener grupy" - -#, fuzzy -msgid "vaultcontainers" -msgstr "Kontener grupy" - -#, fuzzy -msgid "Vault Containers" -msgstr "Kontener grupy" - -#, fuzzy -msgid "Vault Container" -msgstr "Kontener grupy" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, fuzzy, python-format -msgid "Added vault \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "Pasuje %(count)d komputer" -msgstr[1] "Pasuje %(count)d komputery" -msgstr[2] "Pasuje %(count)d komputerów" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, fuzzy, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" - -#, fuzzy -msgid "Vault configuration" -msgstr "Konfiguracja" - -#, fuzzy -msgid "IPA KRA servers" -msgstr "Serwer IPA do użycia" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -msgid "Key wrapping algorithm" -msgstr "" - -#, fuzzy, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -msgid "Retrieve data from a vault." -msgstr "" - -#, fuzzy, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "Usunięto grupę „%(value)s”" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -#, fuzzy -msgid "must be TRUE or FALSE" +msgid "must be True or False" msgstr "musi być prawdą lub fałszem" -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" +msgid "must be Unicode text" +msgstr "musi być tekstem w unikodzie" -#, fuzzy -msgid "Principal alias" -msgstr "Nazwa naczelnika" - -#, fuzzy -msgid "User password expiration" -msgstr "Hasło użytkownika" - -msgid "SSH public key fingerprint" -msgstr "" - -#, fuzzy -msgid "External IdP configuration" -msgstr "Konfiguracja" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -#, fuzzy -msgid "Base-64 encoded user certificate" -msgstr "Certyfikat serwera zakodowany za pomocą Base-64" - -#, fuzzy -msgid "Certificate mapping data" -msgstr "Certyfikat" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -#, fuzzy -msgid "SMB Home Directory" -msgstr "Katalog domowy" - -#, fuzzy -msgid "SMB Home Directory Drive" -msgstr "Podstawa katalogu domowego" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, fuzzy, python-format -msgid "manager %(manager)s not found" -msgstr "%(parent)s: nie odnaleziono %(oname)s" - -#, fuzzy, python-format -msgid "can be at most %(len)d characters" -msgstr "może wynosić co najwyżej %(maxlength)d znaków" - -msgid "Issuer" -msgstr "Wydawca" - -#, fuzzy -msgid "Issuer of the certificate" -msgstr "Odrzuć certyfikat." - -msgid "Subject" -msgstr "Temat" - -#, fuzzy -msgid "Subject of the certificate" -msgstr "Odrzuć certyfikat." - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, fuzzy, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, fuzzy, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "Zmodyfikowano użytkownika „%(value)s”" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -#, fuzzy -msgid "CA category" -msgstr "Kategoria komputerów" - -#, fuzzy -msgid "CA category the ACL applies to" -msgstr "Kategoria komputerów, do których zastosowywana jest reguła" - -msgid "CAs" -msgstr "" - -#, fuzzy, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "Usunięto ACI „%(value)s”" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, fuzzy, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "Zmodyfikowano ACI „%(value)s”" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "Pasuje %(count)d ACI" -msgstr[1] "Pasują %(count)d ACI" -msgstr[2] "Pasuje %(count)d ACI" - -#, fuzzy, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "Utworzono ACI „%(value)s”" - -#, fuzzy, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "Usunięto ACI „%(value)s”" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -msgid "users cannot be added when user category='all'" -msgstr "" - -#, fuzzy, python-format -msgid "%i user or group removed." -msgstr "Liczba usuniętych elementów" - -#, fuzzy, python-format -msgid "%i users or groups removed." -msgstr "Liczba usuniętych elementów" - -#, fuzzy, python-format -msgid "%i host or hostgroup added." -msgstr "Pasuje %(count)d grupa komputerów" - -#, fuzzy, python-format -msgid "%i hosts or hostgroups added." -msgstr "Pasuje %(count)d grupa komputerów" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -#, fuzzy, python-format -msgid "%i host or hostgroup removed." -msgstr "Pasuje %(count)d grupa komputerów" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, fuzzy, python-format -msgid "%i service added." -msgstr "Nazwa usługi" - -#, fuzzy, python-format -msgid "%i services added." -msgstr "Pasuje %(count)d usługa" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -#, fuzzy -msgid "Priority of the rule (higher number means lower priority" -msgstr "Priorytet polityki (wyższy numer równa się niższemu priorytetowi" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -#, fuzzy -msgid "User logins" -msgstr "Login użytkownika" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "Pasuje %(count)d użytkownik" -msgstr[1] "Pasuje %(count)d użytkowników" -msgstr[2] "Pasuje %(count)d użytkowników" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -#, fuzzy -msgid "must be at least 10" -msgstr "musi wynosić co najmniej %(minvalue)d" - -#, fuzzy -msgid "configuration options" -msgstr "Konfiguracja" - -msgid "Configuration" -msgstr "Konfiguracja" - -#, fuzzy -msgid "Maximum hostname length" -msgstr "Minimalna długość" - -msgid "Enable adding subids to new users" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -#, fuzzy -msgid "IPA CA servers" -msgstr "Serwer IPA do użycia" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -#, fuzzy -msgid "IPA DNS servers" -msgstr "Serwer IPA do użycia" - -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -#, fuzzy -msgid "Setup SID configuration" -msgstr "Konfiguracja" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -msgid "Add SIDs" -msgstr "" - -msgid "Add SIDs for existing users and groups" -msgstr "" - -msgid "NetBIOS name of the IPA domain" -msgstr "" - -msgid "Empty domain is not allowed" -msgstr "" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -#, fuzzy -msgid "not allowed to enable SID generation" -msgstr "modyfikowanie wpisów grup nie jest dozwolone" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -#, fuzzy -msgid "Failed to call DBus" -msgstr "Utworzenie klucza się nie powiodło.\n" - -msgid "Configuration of SID failed. See details in the error log" -msgstr "" - -#, fuzzy -msgid "The group doesn't exist" -msgstr "Grupa „%s” nie istnieje" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, fuzzy, python-format -msgid "DNS zone %(zone)s not found" -msgstr "Nie odnaleziono pliku %(file)s" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, python-format -msgid "%s Record" -msgstr "" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -#, fuzzy -msgid "Priority (order)" -msgstr "Priorytet" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -#, fuzzy -msgid "Only one zone type is allowed per zone name" -msgstr "Dozwolona jest tylko jedna wartość" - -#, fuzzy, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "Ten wpis już istnieje" - -#, fuzzy, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -msgid "DNS zone" -msgstr "" - -#, fuzzy -msgid "DNS zones" -msgstr "Ustawienia strefy DNS" - -#, fuzzy -msgid "DNS Zones" -msgstr "Ustawienia strefy DNS" - -#, fuzzy -msgid "DNS Zone" -msgstr "Ustawienia strefy DNS" - -#, fuzzy -msgid "Default time to live" -msgstr "Czas życia" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -msgid "is required" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "Wyłączono konto użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "Włączono konto użytkownika „%(value)s”" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "Usunięto użytkownika „%(value)s”" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Found '%(value)s'" -msgstr "Odnaleziono „%(value)s”" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "Nie odnaleziono komputera „%(host)s”" - -#, fuzzy -msgid "DNS configuration options" -msgstr "Konfiguracja" - -#, fuzzy -msgid "DNS Global Configuration" -msgstr "Konfiguracja" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "Usunięto grupę „%(value)s”" - -#, fuzzy, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "Wyłączono konto użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "Włączono konto użytkownika „%(value)s”" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -#, fuzzy -msgid "Result of the command" -msgstr "Opis tego polecenia" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, fuzzy, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "Usunięto ACI „%(value)s”" - -#, fuzzy, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "Zmodyfikowano ACI „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "Pasuje %(count)d ACI" -msgstr[1] "Pasują %(count)d ACI" -msgstr[2] "Pasuje %(count)d ACI" - -#, fuzzy, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "Włączono konto użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "Wyłączono konto użytkownika „%(value)s”" - -msgid "Access time" -msgstr "Czas dostępu" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#, fuzzy -msgid "Host" -msgstr "Komputery" - -#, fuzzy -msgid "Base-64 encoded host certificate" -msgstr "Certyfikat serwera zakodowany za pomocą Base-64" - -#, fuzzy -msgid "Serial Number" -msgstr "Numer seryjny" - -#, fuzzy -msgid "Serial Number (hex)" -msgstr "Numer seryjny" - -msgid "Not Before" -msgstr "Nie wcześniej" - -msgid "Not After" -msgstr "Nie po" - -msgid "Fingerprint (SHA1)" -msgstr "Odcisk (SHA1)" - -#, fuzzy -msgid "Fingerprint (SHA256)" -msgstr "Odcisk (SHA1)" - -msgid "Revocation reason" -msgstr "Przyczyna unieważnienia" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" - -#, fuzzy -msgid "Password cannot be set on enrolled host." -msgstr "Hasło używane w zapisywaniu większej części" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "Pasuje %(count)d komputer" -msgstr[1] "Pasuje %(count)d komputery" -msgstr[2] "Pasuje %(count)d komputerów" - -#, fuzzy, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "Usunięto komputer „%(value)s”" - -#, fuzzy, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, fuzzy, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Dodano komputer „%(value)s”" - -#, fuzzy -msgid "Remove principal alias from a host entry" -msgstr "Usuwa wszystkich naczelników w tym obszarze" - -#, fuzzy, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "Zmodyfikowano komputer „%(value)s”" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" - -msgid "Invalid URI: not an https scheme" -msgstr "" - -msgid "Invalid URI: missing netloc" -msgstr "" - -msgid "Identity Provider server" -msgstr "" - -msgid "Identity Provider servers" -msgstr "" - -#, fuzzy -msgid "Identity Provider server name" -msgstr "Nazwa serwera" - -#, fuzzy -msgid "Authorization URI" -msgstr "Konfiguracja" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -msgid "Token URI" -msgstr "" - -#, fuzzy -#| msgid "Mount point" -msgid "Token endpoint" -msgstr "Punkt montowania" - -#, fuzzy -#| msgid "User login" -msgid "User info URI" -msgstr "Login użytkownika" - -msgid "User information endpoint" -msgstr "" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -msgid "Client identifier" -msgstr "" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -msgid "Add a new Identity Provider server." -msgstr "" - -#, fuzzy, python-format -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -msgid "Base URL" -msgstr "" - -msgid "Base URL for IdP provider templates" -msgstr "" - -msgid "unknown provider" -msgstr "" - -msgid "value is missing" -msgstr "" - -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "" - -#, fuzzy -msgid "Delete an Identity Provider server." -msgstr "Odrzuć certyfikat." - -#, fuzzy, python-format -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -msgid "Modify an Identity Provider server." -msgstr "" - -#, fuzzy, python-format -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy -msgid "Search for Identity Provider servers." -msgstr "Domyślna grupa dla nowych użytkowników" - -#, fuzzy, python-format -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -msgid "Display information about an Identity Provider server." -msgstr "" - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Apply" -msgstr "" - -msgid "Rebuild auto membership" -msgstr "" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -#, fuzzy -msgid "Actions" -msgstr "Aktywna strefa" - -msgid "Add" -msgstr "Dodaj" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -msgid "Direct Membership" -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -msgid "No entries." -msgstr "" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -msgid "Remove" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -msgid "Show Results" -msgstr "" - -msgid "Authentication indicators" -msgstr "" - -msgid "Authentication indicator" -msgstr "" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -msgid "RADIUS" -msgstr "" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "External Identity Provider" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "" - -#, fuzzy -msgid "Activate" -msgstr "Aktywna strefa" - -#, fuzzy -msgid "Add and Add Another" -msgstr "Dodaj i edytuj" - -msgid "Add and Close" -msgstr "Dodaj i zamknij" - -msgid "Add and Edit" -msgstr "Dodaj i edytuj" - -#, fuzzy -msgid "Add Many" -msgstr "Dodaj i edytuj" - -msgid "Back" -msgstr "" - -msgid "Cancel" -msgstr "Anuluj" - -msgid "Clear" -msgstr "" - -msgid "Clear all fields on the page." -msgstr "" - -msgid "Close" -msgstr "Zamknij" - -msgid "Disable" -msgstr "" - -msgid "Download" -msgstr "" - -msgid "Download certificate as PEM formatted file." -msgstr "" - -msgid "Edit" -msgstr "" - -#, fuzzy -msgid "Enable" -msgstr "Włączone" - -msgid "Find" -msgstr "Znajdź" - -msgid "Get" -msgstr "" - -msgid "Hide" -msgstr "" - -#, fuzzy -msgid "Issue" -msgstr "Wydawca" - -msgid "Match" -msgstr "" - -msgid "Match users according to certificate." -msgstr "" - -msgid "Migrate" -msgstr "" - -msgid "OK" -msgstr "" - -#, fuzzy -msgid "Refresh" -msgstr "Odświeżenie SOA" - -msgid "Reload current settings from the server." -msgstr "" - -msgid "Delete" -msgstr "Usuń" - -msgid "Remove hold" -msgstr "" - -msgid "Reset" -msgstr "Przywróć" - -#, fuzzy -msgid "Reset Password" -msgstr "Nowe hasło" - -msgid "Reset Password and Log in" -msgstr "" - -msgid "Restore" -msgstr "Przywróć" - -msgid "Retry" -msgstr "Ponów" - -msgid "Revert" -msgstr "" - -#, fuzzy -msgid "Revoke" -msgstr "Unieważniono" - -msgid "Save" -msgstr "" - -#, fuzzy -msgid "Set" -msgstr "Ustaw OTP" - -msgid "Show" -msgstr "" - -msgid "Stage" -msgstr "" - -msgid "Update" -msgstr "Zaktualizuj" - -msgid "View" -msgstr "" - -#, fuzzy -msgid "Customization" -msgstr "Konfiguracja" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "" - -msgid "Expand All" -msgstr "" - -msgid "General" -msgstr "" - -#, fuzzy -msgid "Identity Settings" -msgstr "Ustawienia konta" - -#, fuzzy -msgid "Record Settings" -msgstr "Ustawienia konta" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -msgid "Back to Top" -msgstr "Wróć na górę" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -#, fuzzy -msgid "Add custom value" -msgstr "Dodano komputer „%(value)s”" - -msgid "Available" -msgstr "" - -#, fuzzy -msgid "Some operations failed." -msgstr "Proste dowiązanie się nie powiodło\n" - -msgid "Operations Error" -msgstr "" - -#, fuzzy -msgid "Confirmation" -msgstr "Konfiguracja" - -msgid "Custom value" -msgstr "" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -msgid "Unsaved Changes" -msgstr "" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "" - -msgid "Hide details" -msgstr "" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -#, fuzzy -msgid "Redirection" -msgstr "Katalog domowy" - -msgid "Select entries to be removed." -msgstr "" - -msgid "Result" -msgstr "" - -msgid "Show details" -msgstr "" - -msgid "Success" -msgstr "" - -msgid "Validation error" -msgstr "" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, fuzzy, python-brace-format -msgid "An error has occurred (${error})" -msgstr "wystąpił wewnętrzny błąd" - -#, fuzzy -msgid "HTTP Error" -msgstr "Błąd" - -msgid "Internal Error" -msgstr "" - -#, fuzzy -msgid "IPA Error" -msgstr "Błąd" - -msgid "No response" -msgstr "" - -msgid "Unknown Error" -msgstr "" - -msgid "URL" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -msgid "Settings" -msgstr "Ustawienia" - -msgid "Search" -msgstr "Wyszukaj" - -msgid "False" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Allowed to create keytab" -msgstr "Utworzenie klucza się nie powiodło.\n" - -#, fuzzy -msgid "Allowed to retrieve keytab" -msgstr "Zamknięcie tablicy kluczy się nie powiodło\n" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add Kerberos Principal Alias" -msgstr "Naczelnik Kerberosa" - -#, fuzzy -msgid "New kerberos principal alias" -msgstr "Naczelnik Kerberosa" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "" - -#, fuzzy -msgid "Authenticating" -msgstr "Ustawienia konta" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "Zalogowano jako" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -#, fuzzy -msgid "Kerberos Principal you entered is expired" -msgstr "Nazwa naczelnika Kerberosa dla tego komputera" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -#, fuzzy -msgid "Log In Using Certificate" -msgstr "Certyfikat" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "" - -msgid "Synchronizing" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -#, fuzzy -msgid "number of passwords" -msgstr "Minimalna długość hasła" - -msgid "seconds" -msgstr "" - -#, fuzzy -msgid "Migrating" -msgstr "Konfiguracja" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -msgid "Password migration was not successful" -msgstr "" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -msgid "Password migration was successful" -msgstr "" - -msgid "Attribute" -msgstr "Atrybut" - -msgid "Add delegation" -msgstr "" - -msgid "Remove delegations" -msgstr "" - -#, fuzzy -msgid "Add permission" -msgstr "Uprawnienia" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove permissions" -msgstr "Uprawnienia" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove privileges" -msgstr "Usuwanie naczelnika %s\n" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Role Settings" -msgstr "Ustawienia" - -msgid "Add role" -msgstr "" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -msgid "Remove roles" -msgstr "" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -msgid "Add self service permission" -msgstr "" - -msgid "Remove self service permissions" -msgstr "" - -msgid "Add rule" -msgstr "" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to change default group?" -msgstr "" - -#, fuzzy -msgid "Default host group" -msgstr "Domyślna grupa użytkowników" - -#, fuzzy -msgid "Default user group" -msgstr "Domyślna grupa użytkowników" - -msgid "Exclusive" -msgstr "" - -msgid "Expression" -msgstr "" - -#, fuzzy -msgid "Host group rule" -msgstr "Grupa komputerów" - -#, fuzzy -msgid "Host group rules" -msgstr "Grupy komputerów" - -msgid "Inclusive" -msgstr "" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "User group rule" -msgstr "Grupa użytkowników" - -#, fuzzy -msgid "User group rules" -msgstr "Grupa użytkowników" - -#, fuzzy -msgid "Add automount key" -msgstr "Automatyczne montowanie kluczy" - -#, fuzzy -msgid "Remove automount keys" -msgstr "Automatyczne montowanie kluczy" - -#, fuzzy -msgid "Add automount location" -msgstr "Automatyczne montowanie map" - -#, fuzzy -msgid "Automount Location Settings" -msgstr "Ustawienia konta" - -msgid "Remove automount locations" -msgstr "" - -#, fuzzy -msgid "Add automount map" -msgstr "Automatyczne montowanie map" - -#, fuzzy -msgid "Map Type" -msgstr "Typ" - -msgid "Direct" -msgstr "" - -msgid "Indirect" -msgstr "" - -#, fuzzy -msgid "Remove automount maps" -msgstr "Automatyczne montowanie map" - -msgid "Add certificate authority" -msgstr "" - -#, fuzzy -msgid "Remove certificate authorities" -msgstr "Odrzuć certyfikat." - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -msgid "All" -msgstr "" - -msgid "Any CA" -msgstr "" - -#, fuzzy -msgid "Any Host" -msgstr "Komputery" - -#, fuzzy -msgid "Any Service" -msgstr "Usługi" - -msgid "Any Profile" -msgstr "" - -msgid "Anyone" -msgstr "" - -#, fuzzy -msgid "Rule status" -msgstr "Stan żądania" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -msgid "Remove CA ACLs" -msgstr "" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -msgid "Specified CAs" -msgstr "" - -#, fuzzy -msgid "Specified Hosts and Groups" -msgstr "Grupy polecenia sudo" - -msgid "Specified Profiles" -msgstr "" - -#, fuzzy -msgid "Specified Services and Groups" -msgstr "Grupy usług" - -msgid "Specified Users and Groups" -msgstr "" - -msgid "Permitted to have certificates issued" -msgstr "" - -#, fuzzy -msgid "Remove certificate profiles" -msgstr "Odrzuć certyfikat." - -msgid "AA Compromise" -msgstr "" - -#, fuzzy -msgid "Add principal" -msgstr "Naczelnik" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" - -#, fuzzy -msgid "Certificates" -msgstr "Certyfikat" - -#, fuzzy -msgid "Certificate Hold" -msgstr "Certyfikat" - -msgid "Cessation of Operation" -msgstr "" - -#, fuzzy -msgid "Common Name" -msgstr "Nazwa komputera" - -msgid "the certificate with serial number " -msgstr "" - -msgid "Expires On" -msgstr "" - -#, fuzzy -msgid "Issued on from" -msgstr "Wydawca" - -msgid "Issued on to" -msgstr "" - -#, fuzzy -msgid "Maximum serial number" -msgstr "Numer seryjny" - -#, fuzzy -msgid "Minimum serial number" -msgstr "Numer seryjny" - -#, fuzzy -msgid "Revoked on from" -msgstr "Unieważniono" - -#, fuzzy -msgid "Revoked on to" -msgstr "Unieważniono" - -msgid "Valid not after from" -msgstr "" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -#, fuzzy -msgid "Fingerprints" -msgstr "Odcisk (SHA1)" - -#, fuzzy -msgid "Get Certificate" -msgstr "Nowy certyfikat" - -#, fuzzy -msgid "Certificate Hold Removed" -msgstr "Odrzucono certyfikat" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Issue new certificate" -msgstr "Nowy certyfikat" - -#, fuzzy -msgid "Issued By" -msgstr "Wydawca" - -#, fuzzy -msgid "Issued On" -msgstr "Wydawca" - -#, fuzzy -msgid "Issued To" -msgstr "Wydawca" - -msgid "Key Compromise" -msgstr "" - -#, fuzzy -msgid "No Valid Certificate" -msgstr "Nowy certyfikat" - -msgid "New Certificate" -msgstr "Nowy certyfikat" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -msgid "Note" -msgstr "" - -msgid "Organizational Unit" -msgstr "" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -msgid "Privilege Withdrawn" -msgstr "" - -msgid "Reason for Revocation" -msgstr "" - -#, fuzzy -msgid "Remove certificate hold" -msgstr "Odrzuć certyfikat." - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -#, fuzzy -msgid "Certificate requested" -msgstr "Odrzucono certyfikat" - -#, fuzzy -msgid "Revoke certificate" -msgstr "Odrzuć certyfikat." - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -msgid "Certificate Revoked" -msgstr "Odrzucono certyfikat" - -msgid "REVOKED" -msgstr "" - -#, fuzzy -msgid "SHA1 Fingerprint" -msgstr "Odcisk (SHA1)" - -#, fuzzy -msgid "SHA256 Fingerprint" -msgstr "Odcisk (SHA1)" - -msgid "Status" -msgstr "Stan" - -msgid "Superseded" -msgstr "" - -msgid "Unspecified" -msgstr "Nieokreślone" - -#, fuzzy -msgid "Valid Certificate Present" -msgstr "Odrzucono certyfikat" - -msgid "Valid from" -msgstr "" - -msgid "Valid to" -msgstr "" - -msgid "Validity" -msgstr "Ważność" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -#, fuzzy -msgid "View Certificate" -msgstr "Nowy certyfikat" - -#, fuzzy -msgid "Certificate Data" -msgstr "Certyfikat" - -#, fuzzy -msgid "Certificate For Match" -msgstr "Certyfikat" - -#, fuzzy -msgid "Certificate Mapping Match" -msgstr "Certyfikat" - -msgid "Matched Users" -msgstr "" - -#, fuzzy -msgid "User Login" -msgstr "Login użytkownika" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -#, fuzzy -msgid "Configuration string" -msgstr "Konfiguracja" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -#, fuzzy -msgid "Remove certificate mapping data" -msgstr "Odrzuć certyfikat." - -msgid "Issuer and subject" -msgstr "" - -msgid "Remove certificate identity mapping rules" -msgstr "" - -#, fuzzy -msgid "Group Options" -msgstr "Opis grupy" - -#, fuzzy -msgid "Search Options" -msgstr "Wyszukaj" - -msgid "SELinux Options" -msgstr "" - -#, fuzzy -msgid "Server Options" -msgstr "Serwer IPA do użycia" - -#, fuzzy -msgid "Service Options" -msgstr "Usługi" - -#, fuzzy -msgid "User Options" -msgstr "Login użytkownika" - -msgid "Forward first" -msgstr "" - -msgid "Forwarding disabled" -msgstr "" - -msgid "Forward only" -msgstr "" - -msgid "Options" -msgstr "" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -msgid "Other Record Types" -msgstr "" - -msgid "Address not valid, can't redirect" -msgstr "" - -msgid "Create dns record" -msgstr "" - -msgid "Creating record." -msgstr "" - -msgid "Record creation failed." -msgstr "" - -msgid "Checking if record exists." -msgstr "" - -msgid "Record not found." -msgstr "" - -msgid "Redirection to PTR record" -msgstr "" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -#, fuzzy -msgid "Target reverse zone not found." -msgstr "%(parent)s: nie odnaleziono %(oname)s" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -msgid "Standard Record Types" -msgstr "" - -msgid "Records for DNS Zone" -msgstr "" - -msgid "Record Type" -msgstr "" - -msgid "Add DNS zone" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -msgid "DNS Zone Settings" -msgstr "Ustawienia strefy DNS" - -msgid "Remove DNS zones" -msgstr "" - -#, fuzzy -msgid "Remove Permission" -msgstr "Uprawnienia" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Level" -msgstr "" - -msgid "Set Domain Level" -msgstr "" - -#, fuzzy -msgid "Add user group" -msgstr "Grupa użytkowników" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Group Settings" -msgstr "Ustawienia konta" - -#, fuzzy -msgid "External" -msgstr "Zewnętrzny komputer" - -msgid "Groups" -msgstr "Grupy" - -#, fuzzy -msgid "Group categories" -msgstr "Kontener grupy" - -#, fuzzy -msgid "Change to external group" -msgstr "zmiana na grupę POSIX" - -#, fuzzy -msgid "Change to POSIX group" -msgstr "zmiana na grupę POSIX" - -msgid "Non-POSIX" -msgstr "" - -msgid "POSIX" -msgstr "" - -#, fuzzy -msgid "Remove user groups" -msgstr "Grupy usługi elementów" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Group Type" -msgstr "Nazwa grupy" - -msgid "Add HBAC rule" -msgstr "" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Accessing" -msgstr "Czas dostępu" - -msgid "Remove HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Via Service" -msgstr "Usługi" - -msgid "Who" -msgstr "" - -msgid "Add HBAC service" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -#, fuzzy -msgid "Remove HBAC services" -msgstr "Usługi elementów" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -#, fuzzy -msgid "Add HBAC service group" -msgstr "Opis grupy usługi HBAC" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove HBAC service groups" -msgstr "Grupy usługi elementów" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Access Denied" -msgstr "Czas dostępu" - -#, fuzzy -msgid "Access Granted" -msgstr "Czas dostępu" - -msgid "Include Disabled" -msgstr "" - -#, fuzzy -msgid "Include Enabled" -msgstr "Włączone" - -msgid "HBAC Test" -msgstr "" - -msgid "Matched" -msgstr "" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" - -msgid "Rules" -msgstr "" - -msgid "Run Test" -msgstr "" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -msgid "Unmatched" -msgstr "" - -msgid "Add host" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -#, fuzzy -msgid "Host Certificate" -msgstr "Certyfikat" - -msgid "Host Name" -msgstr "Nazwa komputera" - -msgid "Delete Key, Unprovision" -msgstr "" - -#, fuzzy -msgid "Host Settings" -msgstr "Ustawienia" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -#, fuzzy -msgid "Generate OTP" -msgstr "Ustaw OTP" - -#, fuzzy -msgid "Generated OTP" -msgstr "Ustaw OTP" - -#, fuzzy -msgid "Kerberos Key" -msgstr "Polityka zgłoszeń Kerberosa" - -msgid "Kerberos Key Not Present" -msgstr "" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -#, fuzzy -msgid "One-Time Password" -msgstr "Nowe hasło" - -msgid "One-Time Password Not Present" -msgstr "" - -msgid "One-Time Password Present" -msgstr "" - -#, fuzzy -msgid "Reset OTP" -msgstr "Ustaw OTP" - -msgid "Reset One-Time Password" -msgstr "" - -msgid "Set OTP" -msgstr "Ustaw OTP" - -msgid "OTP set" -msgstr "" - -#, fuzzy -msgid "Set One-Time Password" -msgstr "Nowe hasło" - -msgid "Remove hosts" -msgstr "Usuń komputery" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -msgid "Unprovision" -msgstr "" - -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -#, fuzzy -msgid "Add host group" -msgstr "Grupa komputerów" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Host Group Settings" -msgstr "Grupy komputerów" - -#, fuzzy -msgid "Remove host groups" -msgstr "Element grupy komputerów" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -#, fuzzy -msgid "Identity provider details" -msgstr "Ustawienia konta" - -#, fuzzy -msgid "Verify secret" -msgstr "Sprawdzenie hasła naczelnika" - -msgid "User to override" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -msgid "Profile" -msgstr "" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -#, fuzzy -msgid "Enter trusted group name." -msgstr "Nazwa grupy usługi" - -msgid "Add ID view" -msgstr "" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -#, fuzzy -msgid "Apply to host groups" -msgstr "Element grupy komputerów" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -msgid "Remove ID views" -msgstr "" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -#, fuzzy -msgid "Un-apply from host groups" -msgstr "Nazwa grupy komputerów" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -msgid "Un-apply" -msgstr "" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "Polityka zgłoszeń Kerberosa" - -#, fuzzy -msgid "Add netgroup" -msgstr "Grupy sieciowe" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Netgroup Settings" -msgstr "Opis grupy sieciowej" - -#, fuzzy -msgid "Remove netgroups" -msgstr "Elementy grupy" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -msgid "Add OTP token" -msgstr "" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -#, fuzzy -msgid "Configure your token" -msgstr "Konfiguracja" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -#, fuzzy -msgid "OTP Token Settings" -msgstr "Ustawienia strefy DNS" - -msgid "Disable token" -msgstr "" - -#, fuzzy -msgid "Enable token" -msgstr "Włączone" - -msgid "Remove OTP tokens" -msgstr "" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "" - -#, fuzzy -msgid "Show configuration uri" -msgstr "Konfiguracja" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -#, fuzzy -msgid "Add Custom Attribute" -msgstr "Atrybut" - -#, fuzzy -msgid "Permission settings" -msgstr "Uprawnienia" - -#, fuzzy -msgid "Attribute breakdown" -msgstr "Atrybut" - -#, fuzzy -msgid "Privilege Settings" -msgstr "Ustawienia" - -msgid "Public key:" -msgstr "" - -msgid "Set public key" -msgstr "" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -#, fuzzy -msgid "Add password policy" -msgstr "Polityka haseł" - -msgid "Password Policy" -msgstr "Polityka haseł" - -#, fuzzy -msgid "Remove password policies" -msgstr "Polityka haseł" - -msgid "Add ID range" -msgstr "" - -#, fuzzy -msgid "Range Settings" -msgstr "Ustawienia" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -msgid "Domain SID" -msgstr "" - -msgid "Secondary RID base" -msgstr "" - -msgid "Remove ID ranges" -msgstr "" - -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -msgid "Detect" -msgstr "" - -#, fuzzy -msgid "Local domain" -msgstr "Lokalizacja" - -msgid "IPA trust" -msgstr "" - -msgid "Active Directory winsync" -msgstr "" - -msgid "Add RADIUS server" -msgstr "" - -#, fuzzy -msgid "RADIUS Proxy Server Settings" -msgstr "Ustawienia strefy DNS" - -msgid "Remove RADIUS servers" -msgstr "" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -#, fuzzy -msgid "Force Update" -msgstr "Zaktualizuj" - -msgid "Add SELinux user map" -msgstr "" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Server Roles" -msgstr "Nazwa serwera" - -#, fuzzy -msgid "Server Role" -msgstr "Nazwa serwera" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -#, fuzzy -msgid "Delete Server" -msgstr "Usuń" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -#, fuzzy -msgid "Add service" -msgstr "Usługi" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -#, fuzzy -msgid "Service Certificate" -msgstr "Nowy certyfikat" - -#, fuzzy -msgid "Service Settings" -msgstr "Ustawienia strefy DNS" - -#, fuzzy -msgid "Provisioning" -msgstr "Uprawnienia" - -#, fuzzy -msgid "Remove services" -msgstr "Usługi elementów" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -msgid "Unprovisioning service" -msgstr "" - -#, fuzzy -msgid "Service unprovisioned" -msgstr "Naczelnik usługi" - -#, fuzzy -msgid "Kerberos Key Present, Service Provisioned" -msgstr "Nazwa naczelnika usługi Kerberos" - -msgid "SSH public keys" -msgstr "" - -msgid "SSH public key:" -msgstr "" - -msgid "Set SSH key" -msgstr "" - -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#, fuzzy, python-brace-format -msgid "${count} user(s) activated" -msgstr "Pasuje %(count)d użytkownik" - -msgid "Add stage user" -msgstr "" - -#, fuzzy -msgid "Stage users" -msgstr "Elementy użytkowników" - -#, fuzzy -msgid "Preserved users" -msgstr "Elementy użytkowników" - -msgid "Remove preserved users" -msgstr "" - -#, fuzzy -msgid "Remove stage users" -msgstr "Elementy użytkowników" - -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#, fuzzy, python-brace-format -msgid "${count} users(s) staged" -msgstr "Pasuje %(count)d użytkownik" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -#, fuzzy -msgid "User categories" -msgstr "Kategoria użytkowników" - -#, fuzzy -msgid "Add subid" -msgstr "Dodaj i zamknij" - -msgid "Assigned subids" -msgstr "" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -#, fuzzy -msgid "Add sudo command" -msgstr "Polecenie sudo" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -#, fuzzy -msgid "Remove sudo commands" -msgstr "Polecenie sudo" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -#, fuzzy -msgid "Add sudo command group" -msgstr "Grupy polecenia sudo" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove sudo command groups" -msgstr "Grupy polecenia sudo" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add sudo rule" -msgstr "Dodaj i zamknij" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "" - -#, fuzzy -msgid "Any Command" -msgstr "Polecenia" - -#, fuzzy -msgid "Any Group" -msgstr "Grupa" - -#, fuzzy -msgid "Run Commands" -msgstr "Polecenia" - -msgid "Deny" -msgstr "" - -#, fuzzy -msgid "Access this host" -msgstr "Czas dostępu" - -msgid "Option added" -msgstr "" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -msgid "Remove sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -#, fuzzy -msgid "Specified Commands and Groups" -msgstr "Grupy polecenia sudo" - -#, fuzzy -msgid "Specified Groups" -msgstr "Grupy usług" - -msgid "Remove sudo options" -msgstr "" - -msgid "Autogenerated" -msgstr "" - -msgid "Segment details" -msgstr "" - -#, fuzzy -msgid "Replication configuration" -msgstr "nie można otworzyć pliku konfiguracji %s\n" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -#, fuzzy -msgid "Account" -msgstr "Automatyczne montowanie" - -msgid "Add trust" -msgstr "" - -msgid "Administrative account" -msgstr "" - -msgid "SID blocklists" -msgstr "" - -#, fuzzy -msgid "Trust Settings" -msgstr "Ustawienia konta" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -#, fuzzy -msgid "Pre-shared password" -msgstr "Hasło użytkownika" - -msgid "Remove trusts" -msgstr "" - -msgid "Remove domains" -msgstr "" - -msgid "Alternative UPN suffixes" -msgstr "" - -msgid "User attributes for SMB services" -msgstr "" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - -msgid "Account Settings" -msgstr "Ustawienia konta" - -#, fuzzy -msgid "Account Status" -msgstr "Ustawienia konta" - -#, fuzzy -msgid "Active users" -msgstr "Aktywna strefa" - -msgid "Add user" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -msgid "Auto assign subordinate ids" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "" - -#, fuzzy -msgid "Contact Settings" -msgstr "Ustawienia konta" - -#, fuzzy -msgid "Delete mode" -msgstr "Usuń" - -#, fuzzy -msgid "Employee Information" -msgstr "Różne informacje" - -msgid "Error changing account status" -msgstr "" - -#, fuzzy -msgid "Password expiration" -msgstr "Rozmiar historii haseł" - -msgid "Mailing Address" -msgstr "Adres pocztowy" - -msgid "Misc. Information" -msgstr "Różne informacje" - -#, fuzzy -msgid "delete" -msgstr "Usuń" - -msgid "preserve" -msgstr "" - -#, fuzzy -msgid "No private group" -msgstr "Nie jest zarządzaną grupą" - -#, fuzzy -msgid "Remove users" -msgstr "Elementy użytkowników" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Unlock" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -#, fuzzy -msgid "Members" -msgstr "Komputer elementu" - -msgid "My User Vaults" -msgstr "" - -msgid "Owners" -msgstr "" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Service Vaults" -msgstr "Usługi" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -msgid "Vault Type" -msgstr "" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -#, fuzzy -msgid "User Vaults" -msgstr "Grupy użytkowników" - -msgid "Current password is required" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "Maksymalny czas życia hasła (w dniach)" - -#, fuzzy -msgid "First OTP" -msgstr "Imię" - -#, fuzzy -msgid "New password is required" -msgstr "Nowe hasło" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Password change complete" -msgstr "Ukończono zmianę hasła" - -msgid "Your password has expired. Please enter a new password." -msgstr "" - -msgid "Passwords must match" -msgstr "Hasła muszą się zgadzać" - -msgid "Password reset was not successful." -msgstr "" - -#, fuzzy -msgid "Reset your password." -msgstr "Hasło użytkownika" - -#, fuzzy -msgid "Second OTP" -msgstr "Ustaw OTP" - -#, fuzzy -msgid "Verify Password" -msgstr "Sprawdzenie hasła naczelnika" - -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -msgid "Some entries were not deleted" -msgstr "" - -msgid "Quick Links" -msgstr "Szybkie odnośniki" - -msgid "Select All" -msgstr "Zaznacz wszystko" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -msgid "Unselect All" -msgstr "Odznacz wszystko" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "" - -msgid "Audit" -msgstr "" - -msgid "Authentication" -msgstr "" - -msgid "Automount" -msgstr "Automatyczne montowanie" - -msgid "DNS" -msgstr "DNS" - -msgid "Host-Based Access Control" -msgstr "" - -msgid "Identity" -msgstr "" - -#, fuzzy -msgid "Network Services" -msgstr "Usługi" - -msgid "Policy" -msgstr "" - -msgid "Role-Based Access Control" -msgstr "" - -msgid "Subordinate IDs" -msgstr "" - -msgid "Sudo" -msgstr "" - -msgid "Topology" -msgstr "" - -msgid "True" -msgstr "" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -#, fuzzy -msgid "First" -msgstr "Imię" - -#, fuzzy -msgid "Last" -msgstr "Nazwisko" - -msgid "Next" -msgstr "" - -msgid "Page" -msgstr "" - -msgid "Prev" -msgstr "" - -msgid "Undo" -msgstr "" - -msgid "Undo this change." -msgstr "" - -#, fuzzy -msgid "Undo All" -msgstr "Odznacz wszystko" - -#, fuzzy -msgid "Undo all changes in this field." -msgstr "Usuwa wszystkich naczelników w tym obszarze" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -#, fuzzy -msgid "Must be a decimal number" +msgid "must be a decimal number" msgstr "musi być liczbą dziesiętną" -#, fuzzy -msgid "Format error" -msgstr "błąd odczytu\n" - -#, fuzzy -msgid "Must be an integer" +msgid "must be an integer" msgstr "musi być liczba całkowitą" -msgid "Not a valid IP address" -msgstr "" - -msgid "Not a valid IPv4 address" -msgstr "" - -msgid "Not a valid IPv6 address" -msgstr "" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -#, fuzzy -msgid "Parse error" -msgstr "błąd odczytu\n" - -#, fuzzy -msgid "Must be a positive number" -msgstr "musi być liczbą dziesiętną" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -#, fuzzy -msgid "Required field" -msgstr "Identyfikator żądania" - -msgid "Unsupported value" -msgstr "" - -#, fuzzy -msgid "kerberos ticket policy settings" -msgstr "Polityka zgłoszeń Kerberosa" - -#, fuzzy -msgid "OTP max life" -msgstr "Maksymalny czas życia" - -#, fuzzy -msgid "OTP token maximum ticket life (seconds)" -msgstr "Minimalny czas życia zgłoszenia (sekundy)" - -#, fuzzy -msgid "OTP max renew" -msgstr "Maksymalne odnowienie" - -#, fuzzy -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" - -#, fuzzy -msgid "RADIUS max life" -msgstr "Maksymalny czas życia" - -#, fuzzy -msgid "RADIUS maximum ticket life (seconds)" -msgstr "Minimalny czas życia zgłoszenia (sekundy)" - -#, fuzzy -msgid "RADIUS max renew" -msgstr "Maksymalne odnowienie" - -#, fuzzy -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" - -#, fuzzy -msgid "PKINIT max life" -msgstr "Maksymalny czas życia" - -#, fuzzy -msgid "PKINIT maximum ticket life (seconds)" -msgstr "Minimalny czas życia zgłoszenia (sekundy)" - -#, fuzzy -msgid "PKINIT max renew" -msgstr "Maksymalne odnowienie" - -#, fuzzy -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" - -msgid "Hardened max life" -msgstr "" - -#, fuzzy -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "Minimalny czas życia zgłoszenia (sekundy)" - -msgid "Hardened max renew" -msgstr "" - -#, fuzzy -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" - -#, fuzzy -msgid "IdP max life" -msgstr "Maksymalny czas życia" - -#, fuzzy -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "Minimalny czas życia zgłoszenia (sekundy)" - -#, fuzzy -msgid "IdP max renew" -msgstr "Maksymalne odnowienie" - -#, fuzzy -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "Maksymalny czas, w którym możliwe jest odnowienie (sekundy)" +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "musi wynosić co najmniej %(minlength)d bajtów" #, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" +msgid "must be at least %(minlength)d characters" +msgstr "musi wynosić co najmniej %(minlength)d znaków" #, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" -"Naczelnik Kerberosa %s już istnieje. Należy użyć polecenia „ipa user-mod”, " -"aby ustawić go ręcznie." +msgid "must be at least %(minvalue)d" +msgstr "musi wynosić co najmniej %(minvalue)d" -#, fuzzy, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" -"Naczelnik Kerberosa %s już istnieje. Należy użyć polecenia „ipa user-mod”, " -"aby ustawić go ręcznie." - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" -"Dodanie użytkownika do domyślnej grupy się nie powiodło. Należy użyć " -"polecenia „ipa group-add-member”, aby dodać go ręcznie." - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" +msgid "must be binary data" +msgstr "musi być danymi binarnymi" #, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -#, fuzzy -msgid "Invalid LDAP URI." -msgstr "Adres URI LDAP" +msgid "must be exactly %(length)d bytes" +msgstr "musi wynosić dokładnie %(length)d bajtów" #, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" +msgid "must be exactly %(length)d characters" +msgstr "musi wynosić dokładnie %(length)d znaków" #, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" +msgid "must match pattern \"%(pattern)s\"" +msgstr "musi pasować do wzorca „%(pattern)s”" -#, fuzzy -msgid "Default group for new users not found" -msgstr "Domyślna grupa dla nowych użytkowników" +msgid "no modifications to be performed" +msgstr "żadne modyfikacje nie zostaną wykonane" -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" +msgid "not allowed to modify group entries" +msgstr "modyfikowanie wpisów grup nie jest dozwolone" -msgid "Class of Service object used for linking policies with groups" -msgstr "" +msgid "not allowed to modify user entries" +msgstr "modyfikowanie wpisów użytkowników nie jest dozwolone" + +msgid "password" +msgstr "hasło" + +msgid "password to use if not using kerberos" +msgstr "hasło do użycia, jeśli nie jest używany Kerberos" + +#, c-format +msgid "principal not found\n" +msgstr "nie odnaleziono naczelnika\n" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "nie odnaleziono naczelnika w odpowiedzi XML-RPC\n" + +msgid "priority cannot be set on global policy" +msgstr "nie można ustawiać priorytetu dla globalnej polityki" #, python-format msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" @@ -23021,1868 +1560,21 @@ msgstr "" "priorytet musi być unikalną wartością (%(prio)d jest już używane przez " "%(gname)s)" -msgid "Add Class of Service entry" -msgstr "" +#, c-format +msgid "read error\n" +msgstr "błąd odczytu\n" -msgid "Delete Class of Service entry" -msgstr "" +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "nie odnaleziono wyniku w odpowiedzi XML-RPC\n" -msgid "Modify Class of Service entry" -msgstr "" +msgid "the entry was deleted while being modified" +msgstr "wpis został usunięty podczas modyfikowania" -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -#, fuzzy -msgid "password policy" -msgstr "Polityka haseł" - -#, fuzzy -msgid "password policies" -msgstr "Polityka haseł" - -#, fuzzy -msgid "Password Policies" -msgstr "Polityka haseł" - -#, fuzzy -msgid "Max repeat" -msgstr "Maksymalne odnowienie" - -#, fuzzy -msgid "Maximum number of same consecutive characters" -msgstr "Maksymalna liczba zwróconych wpisów" - -#, fuzzy -msgid "Max sequence" -msgstr "Maksymalne odnowienie" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -msgid "User check" -msgstr "Nazwa użytkownika" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "Grace login limit" -msgstr "" - -msgid "Number of LDAP authentications allowed after expiration" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -#, fuzzy -#| msgid "Maximum password life must be greater than minimum." -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "Maksymalny czas życia hasła musi być wyższy niż minimalny." - -#, fuzzy -msgid "cannot delete global password policy" -msgstr "nie można ustawiać priorytetu dla globalnej polityki" - -msgid "priority cannot be set on global policy" -msgstr "nie można ustawiać priorytetu dla globalnej polityki" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" +msgid "type, filter, subtree and targetgroup are mutually exclusive" msgstr "" +"wartości „type”, „filter”, „subtree” i „targetgroup” są wzajemnie wyłączne" #, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, fuzzy, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "Nie odnaleziono pliku %(file)s" - -#, fuzzy, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "Usunięto użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "Zmodyfikowano użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "Pasuje %(count)d użytkownik" -msgstr[1] "Pasuje %(count)d użytkowników" -msgstr[2] "Pasuje %(count)d użytkowników" - -#, fuzzy, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "Włączono konto użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "Wyłączono konto użytkownika „%(value)s”" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "" - -#, fuzzy -msgid "Malformed principal" -msgstr "Naczelnik usługi" - -msgid "{} is required by the IPA master" -msgstr "" - -#, fuzzy -msgid "service" -msgstr "Usługi" - -#, fuzzy -msgid "services" -msgstr "Usługi" - -#, fuzzy -msgid "Service principal alias" -msgstr "Naczelnik usługi" - -#, fuzzy -msgid "Base-64 encoded service certificate" -msgstr "Certyfikat serwera zakodowany za pomocą Base-64" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." -msgstr "" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy -msgid "force principal name even if host not in DNS" -msgstr "wymuszenie nazwy naczelnika, nawet jeśli nie w DNS" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -msgid "Add a new SMB service." -msgstr "" - -#, fuzzy -msgid "SMB service NetBIOS name" -msgstr "Nazwa usługi" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -#, fuzzy, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -msgid "Add new principal alias to a service" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy -msgid "Remove principal alias from a service" -msgstr "Usuwa wszystkich naczelników w tym obszarze" - -#, fuzzy, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -#, fuzzy -msgid "Stage Users" -msgstr "Użytkownicy" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -#, fuzzy -msgid "stage users" -msgstr "Elementy użytkowników" - -#, fuzzy, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Usunięto użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "Zmodyfikowano użytkownika „%(value)s”" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "Pasuje %(count)d użytkownik" -msgstr[1] "Pasuje %(count)d użytkowników" -msgstr[2] "Pasuje %(count)d użytkowników" - -#, fuzzy, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "Usunięto użytkownika „%(value)s”" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "Zmodyfikowano użytkownika „%(value)s”" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -#, fuzzy -msgid "Hosts the view applies to" -msgstr "Kategoria komputerów, do których zastosowywana jest reguła" - -#, fuzzy, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "Usunięto ACI „%(value)s”" - -#, fuzzy, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "Zmodyfikowano ACI „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "Pasuje %(count)d ACI" -msgstr[1] "Pasują %(count)d ACI" -msgstr[2] "Pasuje %(count)d ACI" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -#, fuzzy -msgid "not found" -msgstr "nie odnaleziono naczelnika\n" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, fuzzy, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "Liczba elementów, które nie mogły zostać usunięte" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -msgid "Delete an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -msgid "Modify an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "Dodano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Usunięto usługę „%(value)s”" - -#, fuzzy, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "Zmodyfikowano usługę „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -#, fuzzy, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "Dodano grupę „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Usunięto grupę „%(value)s”" - -#, fuzzy, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "Zmodyfikowano grupę „%(value)s”" - -#, fuzzy, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "Pasuje %(count)d grupa" -msgstr[1] "Pasują %(count)d grupy" -msgstr[2] "Pasuje %(count)d grup" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -#, fuzzy -msgid "Certificate Authority" -msgstr "Certyfikat" - -#, fuzzy -msgid "Certificate Authorities" -msgstr "Odrzucono certyfikat" - -msgid "Name for referencing the CA" -msgstr "" - -#, fuzzy -msgid "Description of the purpose of the CA" -msgstr "Opis tego komputera" - -msgid "Authority ID" -msgstr "" - -msgid "Dogtag Authority ID" -msgstr "" - -#, fuzzy -msgid "Subject DN" -msgstr "Temat" - -msgid "Subject Distinguished Name" -msgstr "" - -#, fuzzy -msgid "Issuer DN" -msgstr "Wydawca" - -msgid "Issuer Distinguished Name" -msgstr "" - -#, fuzzy -msgid "Base-64 encoded certificate." -msgstr "Certyfikat serwera zakodowany za pomocą Base-64" - -#, fuzzy -msgid "Certificate chain" -msgstr "Certyfikat" - -msgid "X.509 certificate chain" -msgstr "" - -#, fuzzy -msgid "RSN Version" -msgstr "Uprawnienia" - -#, fuzzy -msgid "Random Serial Number Version" -msgstr "Numer seryjny" - -msgid "Search for CAs." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "Pasuje %(count)d ACI" -msgstr[1] "Pasują %(count)d ACI" -msgstr[2] "Pasuje %(count)d ACI" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "Display the properties of a CA." -msgstr "" - -msgid "Create a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Created CA \"%(value)s\"" -msgstr "Utworzono ACI „%(value)s”" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "Usunięto ACI „%(value)s”" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -#, fuzzy -msgid "Modify CA configuration." -msgstr "Konfiguracja" - -#, fuzzy, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "Zmodyfikowano ACI „%(value)s”" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "Usunięto ACI „%(value)s”" - -msgid "IPA CA cannot be disabled" -msgstr "" - -#, fuzzy -msgid "Enable a CA." -msgstr "Włączone" - -#, fuzzy, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "Utworzono ACI „%(value)s”" - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, fuzzy, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "Nie odnaleziono komputera „%(host)s”" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -#, fuzzy -msgid "Subject email address" -msgstr "Adres e-mail" - -#, fuzzy -msgid "Subject DNS name" -msgstr "Temat" - -#, fuzzy -msgid "Subject X.400 address" -msgstr "Adres zamieszkania" - -#, fuzzy -msgid "Subject directory name" -msgstr "Podstawa katalogu domowego" - -msgid "Subject EDI Party name" -msgstr "" - -#, fuzzy -msgid "Subject URI" -msgstr "Temat" - -#, fuzzy -msgid "Subject IP Address" -msgstr "Adres zamieszkania" - -#, fuzzy -msgid "Subject OID" -msgstr "Temat" - -#, fuzzy -msgid "Subject UPN" -msgstr "Temat" - -#, fuzzy -msgid "Subject Kerberos principal name" -msgstr "Naczelnik Kerberosa" - -#, fuzzy -msgid "Subject Other Name" -msgstr "Nazwa serwera" - -#, fuzzy -msgid "Serial number (hex)" -msgstr "Numer seryjny" - -msgid "Request status" -msgstr "Stan żądania" - -#, fuzzy -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "automatycznie dodaj naczelnika, jeśli nie istnieje" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -#, fuzzy -msgid "The principal for this request doesn't exist." -msgstr "automatycznie dodaj naczelnika, jeśli nie istnieje" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "Unieważniono" - -#, fuzzy -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "Przyczyna unieważnienia certyfikatu (0-10)" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -#, fuzzy -msgid "7 is not a valid revocation reason" -msgstr "Przyczyna unieważnienia" - -#, fuzzy -msgid "Status of the certificate" -msgstr "Odrzuć certyfikat." - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "Pasuje %(count)d usługa" -msgstr[1] "Pasuje %(count)d usługi" -msgstr[2] "Pasuje %(count)d usług" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, fuzzy, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" -"priorytet musi być unikalną wartością (%(prio)d jest już używane przez " -"%(gname)s)" - -#, fuzzy, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Usunięto użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "Zmodyfikowano użytkownika „%(value)s”" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -#, fuzzy -msgid "users" -msgstr "Użytkownicy" - -#, fuzzy -msgid "command" -msgstr "Polecenia" - -#, fuzzy -msgid "commands" -msgstr "Polecenia" - -msgid "runAs user" -msgstr "" - -#, fuzzy -msgid "runAs users" -msgstr "Elementy użytkowników" - -#, fuzzy -msgid "group runAs" -msgstr "Grupy sieciowe" - -#, fuzzy -msgid "runAs groups" -msgstr "Elementy grupy" - -#, fuzzy, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "Pasuje %(count)d użytkownik" -msgstr[1] "Pasuje %(count)d użytkowników" -msgstr[2] "Pasuje %(count)d użytkowników" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -#, fuzzy -msgid "Default group for new users is not POSIX" -msgstr "Domyślna grupa dla nowych użytkowników" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Usunięto użytkownika „%(value)s”" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Preserved user \"%(value)s\"" -msgstr "Usunięto użytkownika „%(value)s”" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Zmodyfikowano użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "Włączono konto użytkownika „%(value)s”" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, fuzzy, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "Włączono konto użytkownika „%(value)s”" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "Wyłączono konto użytkownika „%(value)s”" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "Włączono konto użytkownika „%(value)s”" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, fuzzy, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "Włączono konto użytkownika „%(value)s”" - -#, fuzzy -msgid "Failed logins" -msgstr "Login użytkownika" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -#, fuzzy -msgid "Time now" -msgstr "Czas życia" - -#, fuzzy -#| msgid "Password change complete" -msgid "Password grace count" -msgstr "Ukończono zmianę hasła" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, fuzzy, python-format -msgid "%(host)s failed" -msgstr "fork() się nie powiodło\n" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -#, fuzzy, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "Zmodyfikowano użytkownika „%(value)s”" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "Dodano użytkownika „%(value)s”" - -#, fuzzy -msgid "Remove principal alias from the user entry" -msgstr "Usuwa wszystkich naczelników w tym obszarze" - -#, fuzzy, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "Odłączono grupę „%(value)s” od użytkownika „%(value)s”" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" -msgstr "" - -#, fuzzy -msgid "Request must be a dict" -msgstr "Stan żądania" - -msgid "Request is missing \"method\"" -msgstr "" - -msgid "Request is missing \"params\"" -msgstr "" - -#, fuzzy -msgid "params must be a list" -msgstr "musi być liczba całkowitą" - -msgid "params must contain [args, options]" -msgstr "" - -msgid "params[0] (aka args) must be a list" -msgstr "" - -msgid "params[1] (aka options) must be a dict" -msgstr "" - -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" - -msgid "CIFS server denied your credentials" -msgstr "" - -msgid "communication with CIFS server was unsuccessful" -msgstr "" - -msgid "AD domain controller" -msgstr "" - -#, fuzzy -msgid "unsupported functional level" -msgstr "Obsługiwane typy szyfrowania:\n" - -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" - -msgid "Cannot find specified domain or server name" -msgstr "" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" - -msgid "At least the domain or IP address should be specified" -msgstr "" - -#, python-format -msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" -msgstr "" - -msgid "no trusted domain is configured" -msgstr "" - -#, fuzzy -msgid "domain is not configured" -msgstr "DNS nie jest skonfigurowany" - -msgid "SID is not valid" -msgstr "" - -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "" - -msgid "SID does not match any trusted domain" -msgstr "" - -msgid "Trust setup" -msgstr "" - -#, fuzzy -msgid "Our domain is not configured" -msgstr "DNS nie jest skonfigurowany" - -#, fuzzy -msgid "No trusted domain is not configured" -msgstr "DNS nie jest skonfigurowany" - -msgid "trusted domain object" -msgstr "" - -msgid "domain is not trusted" -msgstr "" - -msgid "no trusted domain matched the specified flat name" -msgstr "" - -msgid "trusted domain object not found" -msgstr "" - -msgid "Object does not belong to a trusted domain" -msgstr "" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "" - -msgid "Ambiguous search, user domain was not specified" -msgstr "" - -msgid "Trusted domain did not return a unique object" -msgstr "" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "" - -msgid "trusted domain user not found" -msgstr "" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "" - -msgid "CIFS credentials object" -msgstr "" - -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "" - -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" - -#, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" - -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" - -msgid "Credentials" -msgstr "" - -msgid "Missing credentials for cross-forest communication" -msgstr "" - -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" - -#, python-format -msgid "must equal %r" -msgstr "" - -msgid "Hello world" -msgstr "" - -#, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "" - -#, fuzzy -msgid "must be at least 1" -msgstr "musi wynosić co najmniej %(minvalue)d" - -msgid "Out of memory\n" -msgstr "Brak pamięci\n" - -#, fuzzy -msgid "Warning unrecognized encryption type.\n" -msgstr "Obsługiwane typy szyfrowania:\n" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -msgid "Out of memory!?\n" -msgstr "Brak pamięci?\n" - -msgid "Enctype comparison failed!\n" -msgstr "Porównanie typów szyfrowania się nie powiodło.\n" - -#, fuzzy -msgid "Password is too long!\n" -msgstr "Rozmiar historii haseł" - -msgid "Failed to create random key!\n" -msgstr "Utworzenie losowego klucza się nie powiodło.\n" - -msgid "Failed to create key!\n" -msgstr "Utworzenie klucza się nie powiodło.\n" - -msgid "Bad or unsupported salt type.\n" -msgstr "" - -#, fuzzy, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "Nie można zainicjować biblioteki LDAP.\n" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -#, fuzzy -msgid "Unable to initialize STARTTLS session\n" -msgstr "Nie można zainicjować biblioteki LDAP.\n" +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "nieznany błąd %(code)d z %(server)s: %(error)s" diff --git a/po/pt.po b/po/pt.po index 88f66b399..d7ad7eafd 100644 --- a/po/pt.po +++ b/po/pt.po @@ -14,15397 +14,6 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1)\n" "X-Generator: Zanata 4.6.2\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, c-format -msgid "out of memory\n" -msgstr "" - -#, c-format -msgid "read error\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, c-format -msgid "Out of memory \n" -msgstr "" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -msgid "SASL Bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Out of Memory!\n" -msgstr "" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "As palavras-passe não correspondem" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Output debug info" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -msgid "Server Name" -msgstr "" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -#, fuzzy -msgid "LDAP password" -msgstr "Adicionar política de palavra-passe" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -msgid "Path to the IPA CA certificate" -msgstr "" - -msgid "IPA CA certificate" -msgstr "" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -msgid "Enter LDAP password" -msgstr "" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" - -#, c-format -msgid "Discovered server %s\n" -msgstr "" - -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Using provided server %s\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -msgid "New Principal Password" -msgstr "" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Out of memory!\n" -msgstr "" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "" - -#, c-format -msgid "Out of memory!" -msgstr "" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "" - -#, c-format -msgid "No values for %s" -msgstr "" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "" - -#, fuzzy, c-format -msgid "Host is already joined.\n" -msgstr "Esta entrada já está ativada" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" - -#, c-format -msgid "json_dumps() failed\n" -msgstr "" - -#, fuzzy, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "Pedido JSON-RPC inválido: %(error)s" - -#, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "" - -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" - -#, c-format -msgid "fork() failed\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "" - -#, c-format -msgid "child exited with %d\n" -msgstr "" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "" - -msgid "Quiet mode. Only errors are displayed." -msgstr "" - -msgid "Unenroll this host from IPA server" -msgstr "" - -msgid "Hostname of this server" -msgstr "" - -msgid "hostname" -msgstr "" - -msgid "IPA Server to use" -msgstr "" - -msgid "Specifies where to store keytab information." -msgstr "" - -msgid "filename" -msgstr "" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" - -msgid "LDAP password (if not using Kerberos)" -msgstr "" - -#, fuzzy -msgid "password" -msgstr "política de palavra-passe" - -msgid "LDAP basedn" -msgstr "" - -msgid "basedn" -msgstr "" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "" - -msgid "Failed to add" -msgstr "" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" - -msgid "Unrevoked" -msgstr "" - -msgid "Error" -msgstr "" - -msgid "Input filename" -msgstr "" - -msgid "File to load the certificate from." -msgstr "" - -msgid "cannot specify both raw certificate and file" -msgstr "" - -msgid "Input file" -msgstr "" - -msgid "File to load the certificate from" -msgstr "" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "" - -msgid "Split DNS record to parts" -msgstr "" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" - -msgid "DNS resource record type" -msgstr "" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" - -msgid "No option to modify specific record provided." -msgstr "" - -msgid "Current DNS record contents:\n" -msgstr "" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -msgid "No option to delete specific record provided." -msgstr "" - -msgid "Delete all?" -msgstr "" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "" - -msgid "Server will check DNS forwarder(s)." -msgstr "" - -msgid "This may take some time, please wait ..." -msgstr "" - -msgid "DNS forwarder" -msgstr "" - -msgid "file to store DNS records in nsupdate format" -msgstr "" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -msgid "Delete a user" -msgstr "" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - -msgid "maps not connected to /etc/auto.master:" -msgstr "" - -msgid "Import automount files for a specific location." -msgstr "" - -msgid "Master file" -msgstr "" - -msgid "Automount master file." -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" - -#, python-format -msgid "File %(file)s not found" -msgstr "" - -#, fuzzy, python-format -msgid "key %(key)s already exists" -msgstr "Esta entrada já existe" - -#, fuzzy, python-format -msgid "map %(map)s already exists" -msgstr "Esta entrada já existe" - -msgid "Imported maps:" -msgstr "" - -#, python-format -msgid "Added %(map)s" -msgstr "" - -msgid "Imported keys:" -msgstr "" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "" - -msgid "Ignored keys:" -msgstr "" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "" - -msgid "Duplicate maps skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(map)s" -msgstr "" - -msgid "Duplicate keys skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(key)s" -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -msgid "User ID" -msgstr "" - -#, fuzzy -msgid "Password" -msgstr "Política de Palavra-passe" - -msgid "First Code" -msgstr "" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, fuzzy, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "'%(name)s' inválido: %(error)s" - -#, fuzzy, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "não é possível ligar a '%(uri)s': %(error)s" - -msgid "Invalid credentials" -msgstr "" - -msgid "Create a new vault." -msgstr "" - -msgid "Vault password" -msgstr "" - -msgid "File containing the vault password" -msgstr "" - -msgid "File containing the vault public key" -msgstr "" - -msgid "Password can be specified only for symmetric vault" -msgstr "" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "" - -msgid "Password specified multiple times" -msgstr "" - -msgid "Public key specified multiple times" -msgstr "" - -#, fuzzy -msgid "Missing vault public key" -msgstr "chave SSh pública inválida" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "" - -msgid "Modify a vault." -msgstr "" - -msgid "Change password" -msgstr "" - -msgid "Old vault password" -msgstr "" - -msgid "File containing the old vault password" -msgstr "" - -msgid "New vault password" -msgstr "" - -msgid "File containing the new vault password" -msgstr "" - -msgid "Old vault private key" -msgstr "" - -msgid "File containing the old vault private key" -msgstr "" - -msgid "File containing the new vault public key" -msgstr "" - -msgid "New public key specified multiple times" -msgstr "" - -#, fuzzy -msgid "Missing new vault public key" -msgstr "chave SSh pública inválida" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "" - -msgid "Binary data to archive" -msgstr "" - -msgid "File containing data to archive" -msgstr "" - -msgid "Override existing password" -msgstr "" - -msgid "Input data specified multiple times" -msgstr "" - -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" - -msgid "Invalid vault type" -msgstr "" - -msgid "Retrieve a data from a vault." -msgstr "" - -msgid "File to store retrieved data" -msgstr "" - -msgid "Vault private key" -msgstr "" - -msgid "File containing the vault private key" -msgstr "" - -msgid "Data" -msgstr "" - -msgid "Private key specified multiple times" -msgstr "" - -msgid "Missing vault private key" -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -#, fuzzy -msgid "ACI name" -msgstr "Nome do comando" - -#, fuzzy -msgid "Permission" -msgstr "Tipo de permissão" - -msgid "Permission ACI grants access to" -msgstr "" - -msgid "User group" -msgstr "" - -msgid "User group ACI grants access to" -msgstr "" - -#, fuzzy -msgid "Permissions" -msgstr "Tipo de permissão" - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Attributes to which the permission applies" -msgstr "" - -msgid "Attributes" -msgstr "" - -msgid "Type" -msgstr "" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" - -msgid "Member of" -msgstr "" - -msgid "Member of a group" -msgstr "" - -msgid "Filter" -msgstr "" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "" - -msgid "Subtree" -msgstr "" - -msgid "Subtree to apply ACI to" -msgstr "" - -msgid "Target group" -msgstr "" - -msgid "Group to apply ACI to" -msgstr "" - -msgid "Target your own entry (self)" -msgstr "" - -msgid "Apply ACI to your own entry (self)" -msgstr "" - -msgid "Create new ACI." -msgstr "" - -msgid "ACI prefix" -msgstr "" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" - -msgid "Test the ACI syntax but don't write anything" -msgstr "" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" - -msgid "User-friendly description of action performed" -msgstr "" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" - -msgid "Delete ACI." -msgstr "" - -msgid "True means the operation was successful" -msgstr "" - -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" - -msgid "A string searched in all relevant object attributes" -msgstr "" - -msgid "Primary key only" -msgstr "" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" - -msgid "Number of entries returned" -msgstr "" - -msgid "True if not all results were returned" -msgstr "" - -msgid "Modify ACI." -msgstr "" - -msgid "Rename an ACI." -msgstr "" - -msgid "New ACI name" -msgstr "" - -msgid "Display a single ACI given an ACI name." -msgstr "" - -msgid "Location of the ACI" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Description" -msgstr "" - -msgid "A description of this auto member rule" -msgstr "" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -#, fuzzy -msgid "Add conditions to an automember rule." -msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -#, fuzzy -msgid "Display information about the default (fallback) automember groups." -msgstr "Exibir informação acerca de um grupo nomeado." - -msgid "Delete an automember rule." -msgstr "" - -msgid "List of deletions that failed" -msgstr "" - -#, fuzzy -msgid "Search for automember rules." -msgstr "Pesquisar por interligações." - -msgid "Modify an automember rule." -msgstr "" - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Users" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Hosts" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -#, fuzzy -msgid "Display information about an automember rule." -msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" - -msgid "Key" -msgstr "" - -msgid "Automount key name." -msgstr "" - -msgid "Mount information" -msgstr "" - -msgid "description" -msgstr "" - -msgid "Location" -msgstr "" - -msgid "Automount location name." -msgstr "" - -msgid "Map" -msgstr "" - -msgid "Automount map name." -msgstr "" - -msgid "Create a new automount key." -msgstr "" - -msgid "Delete an automount key." -msgstr "" - -msgid "Continuous mode: Don't stop on errors." -msgstr "" - -#, fuzzy -msgid "Search for an automount key." -msgstr "Pesquisar por interligações." - -msgid "Time Limit" -msgstr "" - -msgid "Time limit of search in seconds" -msgstr "" - -msgid "Size Limit" -msgstr "" - -msgid "Maximum number of entries returned" -msgstr "" - -msgid "Modify an automount key." -msgstr "" - -msgid "New mount information" -msgstr "" - -msgid "Rename" -msgstr "" - -msgid "Rename the automount key object" -msgstr "" - -#, fuzzy -msgid "Display an automount key." -msgstr "Exibir informação acerca de um utilizador." - -msgid "Create a new automount location." -msgstr "" - -msgid "Delete an automount location." -msgstr "" - -msgid "Search for an automount location." -msgstr "" - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" - -#, fuzzy -msgid "Display an automount location." -msgstr "Exibir informação acerca de uma localização IPA" - -msgid "Generate automount files for a specific location." -msgstr "" - -msgid "Create a new automount map." -msgstr "" - -msgid "Create a new indirect mount point." -msgstr "" - -msgid "Mount point" -msgstr "" - -msgid "Parent map" -msgstr "" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" - -msgid "Delete an automount map." -msgstr "" - -#, fuzzy -msgid "Search for an automount map." -msgstr "Pesquisar por interligações." - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" - -msgid "Modify an automount map." -msgstr "" - -#, fuzzy -msgid "Display an automount map." -msgstr "Exibir informação acerca de um utilizador." - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" - -msgid "Nested Methods to execute" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -#, fuzzy -msgid "Search for existing certificates." -msgstr "Pesquisar por interligações." - -msgid "Match cn attribute in subject" -msgstr "" - -#, fuzzy -msgid "Reason" -msgstr "%(reason)s" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -msgid "minimum serial number" -msgstr "" - -msgid "maximum serial number" -msgstr "" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Principal" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Dictionary mapping variable name to value" -msgstr "" - -msgid "Revoke a certificate." -msgstr "" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "Maximum username length" -msgstr "" - -msgid "Home directory base" -msgstr "" - -msgid "Default location of home directories" -msgstr "" - -msgid "Default shell" -msgstr "" - -msgid "Default shell for new users" -msgstr "" - -msgid "Default users group" -msgstr "" - -msgid "Default group for new users" -msgstr "" - -msgid "Default e-mail domain" -msgstr "" - -msgid "Search time limit" -msgstr "" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" - -msgid "Search size limit" -msgstr "" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "" - -msgid "User search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" - -msgid "Group search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" - -msgid "Enable migration mode" -msgstr "" - -msgid "Certificate Subject base" -msgstr "" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "" - -msgid "Default group objectclasses" -msgstr "" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "" - -msgid "Default user objectclasses" -msgstr "" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" - -msgid "Password Expiration Notification (days)" -msgstr "" - -msgid "Number of days's notice of impending password expiration" -msgstr "" - -msgid "Password plugin features" -msgstr "" - -msgid "Extra hashes to generate in password plug-in" -msgstr "" - -msgid "SELinux user map order" -msgstr "" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" - -msgid "Default SELinux user" -msgstr "" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" - -msgid "Default PAC types" -msgstr "" - -msgid "Default types of PAC supported for services" -msgstr "" - -msgid "Default user authentication types" -msgstr "" - -msgid "Default types of supported user authentication" -msgstr "" - -#, fuzzy -msgid "Modify configuration options." -msgstr "Modificar informação acerca de uma localização IPA" - -msgid "Show the current configuration." -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "Delegation name" -msgstr "" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "" - -msgid "Attributes to which the delegation applies" -msgstr "" - -msgid "Member user group" -msgstr "" - -msgid "User group to apply delegation to" -msgstr "" - -msgid "Add a new delegation." -msgstr "" - -msgid "Delete a delegation." -msgstr "" - -#, fuzzy -msgid "Search for delegations." -msgstr "Pesquisar por interligações." - -msgid "Modify a delegation." -msgstr "" - -msgid "Display information about a delegation." -msgstr "Exibir informação acerca de uma delegação." - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "Global forwarders" -msgstr "" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Forward policy" -msgstr "Política de reencaminhamento" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" - -msgid "Allow PTR sync" -msgstr "" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" - -msgid "Zone refresh interval" -msgstr "" - -#, fuzzy -msgid "Zone name" -msgstr "Nome do comando" - -msgid "Zone name (FQDN)" -msgstr "" - -msgid "Reverse zone IP network" -msgstr "" - -msgid "IP network to create reverse zone name from" -msgstr "" - -msgid "Active zone" -msgstr "" - -msgid "Is zone active?" -msgstr "" - -msgid "Zone forwarders" -msgstr "" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -#, fuzzy -msgid "Record name" -msgstr "Nome do comando" - -msgid "Time to live" -msgstr "" - -msgid "Records" -msgstr "" - -#, fuzzy -msgid "Record type" -msgstr "tipo incorreto" - -msgid "Record data" -msgstr "" - -msgid "A record" -msgstr "" - -msgid "Raw A records" -msgstr "" - -msgid "A IP Address" -msgstr "" - -msgid "IP Address" -msgstr "" - -msgid "A Create reverse" -msgstr "" - -msgid "Create reverse record for this IP Address" -msgstr "" - -msgid "AAAA record" -msgstr "" - -msgid "Raw AAAA records" -msgstr "" - -msgid "AAAA IP Address" -msgstr "" - -msgid "AAAA Create reverse" -msgstr "" - -msgid "A6 record" -msgstr "" - -msgid "Raw A6 records" -msgstr "" - -msgid "A6 Record data" -msgstr "" - -msgid "AFSDB record" -msgstr "" - -msgid "Raw AFSDB records" -msgstr "" - -msgid "AFSDB Subtype" -msgstr "" - -msgid "Subtype" -msgstr "" - -msgid "AFSDB Hostname" -msgstr "" - -msgid "Hostname" -msgstr "" - -msgid "APL record" -msgstr "" - -msgid "Raw APL records" -msgstr "" - -msgid "CERT record" -msgstr "" - -msgid "Raw CERT records" -msgstr "" - -msgid "CERT Certificate Type" -msgstr "" - -msgid "Certificate Type" -msgstr "" - -msgid "CERT Key Tag" -msgstr "" - -msgid "Key Tag" -msgstr "" - -msgid "CERT Algorithm" -msgstr "" - -msgid "Algorithm" -msgstr "" - -msgid "CERT Certificate/CRL" -msgstr "" - -msgid "Certificate/CRL" -msgstr "" - -msgid "CNAME record" -msgstr "" - -msgid "Raw CNAME records" -msgstr "" - -msgid "CNAME Hostname" -msgstr "" - -msgid "A hostname which this alias hostname points to" -msgstr "" - -msgid "DHCID record" -msgstr "" - -msgid "Raw DHCID records" -msgstr "" - -msgid "DLV record" -msgstr "" - -msgid "Raw DLV records" -msgstr "" - -msgid "DLV Key Tag" -msgstr "" - -msgid "DLV Algorithm" -msgstr "" - -msgid "DLV Digest Type" -msgstr "" - -msgid "Digest Type" -msgstr "" - -msgid "DLV Digest" -msgstr "" - -msgid "Digest" -msgstr "" - -msgid "DNAME record" -msgstr "" - -msgid "Raw DNAME records" -msgstr "" - -msgid "DNAME Target" -msgstr "" - -msgid "Target" -msgstr "" - -msgid "DNSKEY record" -msgstr "" - -msgid "Raw DNSKEY records" -msgstr "" - -msgid "DS record" -msgstr "" - -msgid "Raw DS records" -msgstr "" - -msgid "DS Key Tag" -msgstr "" - -msgid "DS Algorithm" -msgstr "" - -msgid "DS Digest Type" -msgstr "" - -msgid "DS Digest" -msgstr "" - -msgid "HIP record" -msgstr "" - -msgid "Raw HIP records" -msgstr "" - -msgid "IPSECKEY record" -msgstr "" - -msgid "Raw IPSECKEY records" -msgstr "" - -msgid "KEY record" -msgstr "" - -msgid "Raw KEY records" -msgstr "" - -msgid "KX record" -msgstr "" - -msgid "Raw KX records" -msgstr "" - -msgid "KX Preference" -msgstr "" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" - -msgid "KX Exchanger" -msgstr "" - -msgid "A host willing to act as a key exchanger" -msgstr "" - -msgid "LOC record" -msgstr "" - -msgid "Raw LOC records" -msgstr "" - -msgid "LOC Degrees Latitude" -msgstr "" - -msgid "Degrees Latitude" -msgstr "" - -msgid "LOC Minutes Latitude" -msgstr "" - -msgid "Minutes Latitude" -msgstr "" - -msgid "LOC Seconds Latitude" -msgstr "" - -msgid "Seconds Latitude" -msgstr "" - -msgid "LOC Direction Latitude" -msgstr "" - -msgid "Direction Latitude" -msgstr "" - -msgid "LOC Degrees Longitude" -msgstr "" - -msgid "Degrees Longitude" -msgstr "" - -msgid "LOC Minutes Longitude" -msgstr "" - -msgid "Minutes Longitude" -msgstr "" - -msgid "LOC Seconds Longitude" -msgstr "" - -msgid "Seconds Longitude" -msgstr "" - -msgid "LOC Direction Longitude" -msgstr "" - -msgid "Direction Longitude" -msgstr "" - -msgid "LOC Altitude" -msgstr "" - -msgid "Altitude" -msgstr "" - -msgid "LOC Size" -msgstr "" - -msgid "Size" -msgstr "" - -msgid "LOC Horizontal Precision" -msgstr "" - -msgid "Horizontal Precision" -msgstr "" - -msgid "LOC Vertical Precision" -msgstr "" - -msgid "Vertical Precision" -msgstr "" - -msgid "MX record" -msgstr "" - -msgid "Raw MX records" -msgstr "" - -msgid "MX Preference" -msgstr "" - -msgid "MX Exchanger" -msgstr "" - -msgid "A host willing to act as a mail exchanger" -msgstr "" - -msgid "NAPTR record" -msgstr "" - -msgid "Raw NAPTR records" -msgstr "" - -msgid "NAPTR Order" -msgstr "" - -msgid "Order" -msgstr "" - -msgid "NAPTR Preference" -msgstr "" - -msgid "Preference" -msgstr "" - -msgid "NAPTR Flags" -msgstr "" - -msgid "Flags" -msgstr "" - -msgid "NAPTR Service" -msgstr "" - -msgid "Service" -msgstr "" - -msgid "NAPTR Regular Expression" -msgstr "" - -msgid "Regular Expression" -msgstr "" - -msgid "NAPTR Replacement" -msgstr "" - -msgid "Replacement" -msgstr "" - -msgid "NS record" -msgstr "" - -msgid "Raw NS records" -msgstr "" - -msgid "NS Hostname" -msgstr "" - -msgid "NSEC record" -msgstr "" - -msgid "Raw NSEC records" -msgstr "" - -msgid "NSEC3 record" -msgstr "" - -msgid "Raw NSEC3 records" -msgstr "" - -msgid "PTR record" -msgstr "" - -msgid "Raw PTR records" -msgstr "" - -msgid "PTR Hostname" -msgstr "" - -msgid "The hostname this reverse record points to" -msgstr "" - -msgid "RRSIG record" -msgstr "" - -msgid "Raw RRSIG records" -msgstr "" - -msgid "RP record" -msgstr "" - -msgid "Raw RP records" -msgstr "" - -msgid "SIG record" -msgstr "" - -msgid "Raw SIG records" -msgstr "" - -msgid "SPF record" -msgstr "" - -msgid "Raw SPF records" -msgstr "" - -msgid "SRV record" -msgstr "" - -msgid "Raw SRV records" -msgstr "" - -msgid "SRV Priority" -msgstr "" - -msgid "Priority" -msgstr "" - -msgid "SRV Weight" -msgstr "" - -msgid "Weight" -msgstr "" - -msgid "SRV Port" -msgstr "" - -msgid "Port" -msgstr "" - -msgid "SRV Target" -msgstr "" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" - -msgid "SSHFP record" -msgstr "" - -msgid "Raw SSHFP records" -msgstr "" - -msgid "SSHFP Algorithm" -msgstr "" - -msgid "SSHFP Fingerprint Type" -msgstr "" - -msgid "Fingerprint Type" -msgstr "" - -msgid "SSHFP Fingerprint" -msgstr "" - -msgid "Fingerprint" -msgstr "" - -msgid "TA record" -msgstr "" - -msgid "Raw TA records" -msgstr "" - -msgid "TLSA record" -msgstr "" - -msgid "Raw TLSA records" -msgstr "" - -msgid "TLSA Certificate Usage" -msgstr "" - -msgid "Certificate Usage" -msgstr "" - -msgid "TLSA Selector" -msgstr "" - -msgid "Selector" -msgstr "" - -msgid "TLSA Matching Type" -msgstr "" - -msgid "Matching Type" -msgstr "" - -msgid "TLSA Certificate Association Data" -msgstr "" - -msgid "Certificate Association Data" -msgstr "" - -msgid "TKEY record" -msgstr "" - -msgid "Raw TKEY records" -msgstr "" - -msgid "TSIG record" -msgstr "" - -msgid "Raw TSIG records" -msgstr "" - -msgid "TXT record" -msgstr "" - -msgid "Raw TXT records" -msgstr "" - -msgid "TXT Text Data" -msgstr "" - -msgid "Text Data" -msgstr "" - -msgid "Authoritative nameserver" -msgstr "" - -msgid "Authoritative nameserver domain name" -msgstr "" - -msgid "Administrator e-mail address" -msgstr "" - -msgid "SOA serial" -msgstr "" - -msgid "SOA record serial number" -msgstr "" - -msgid "SOA refresh" -msgstr "" - -msgid "SOA record refresh time" -msgstr "" - -msgid "SOA retry" -msgstr "" - -msgid "SOA record retry time" -msgstr "" - -msgid "SOA expire" -msgstr "" - -msgid "SOA record expire time" -msgstr "" - -msgid "SOA minimum" -msgstr "" - -msgid "How long should negative responses be cached" -msgstr "" - -msgid "Time to live for records at zone apex" -msgstr "" - -msgid "BIND update policy" -msgstr "" - -msgid "Dynamic update" -msgstr "" - -msgid "Allow dynamic updates." -msgstr "" - -msgid "Allow query" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" - -msgid "Allow transfer" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" - -msgid "Allow in-line DNSSEC signing" -msgstr "" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "" - -msgid "NSEC3PARAM record" -msgstr "" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" - -msgid "Resolve a host name in DNS." -msgstr "" - -msgid "Modify global DNS configuration." -msgstr "" - -msgid "Show the current global DNS configuration." -msgstr "" - -#, fuzzy -msgid "Create new DNS forward zone." -msgstr "Exibir informação acerca de uma zona de reencaminhamento DNS." - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" - -#, fuzzy -msgid "Permission value" -msgstr "Tipo de permissão" - -#, fuzzy -msgid "Delete DNS forward zone." -msgstr "Exibir informação acerca de uma zona de reencaminhamento DNS." - -#, fuzzy -msgid "Disable DNS Forward Zone." -msgstr "Exibir informação acerca de uma zona de reencaminhamento DNS." - -msgid "Enable DNS Forward Zone." -msgstr "" - -#, fuzzy -msgid "Search for DNS forward zones." -msgstr "Exibir informação acerca de uma zona de reencaminhamento DNS." - -msgid "Modify DNS forward zone." -msgstr "" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" - -msgid "Display information about a DNS forward zone." -msgstr "Exibir informação acerca de uma zona de reencaminhamento DNS." - -msgid "Add new DNS resource record." -msgstr "" - -msgid "Force" -msgstr "" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "" - -msgid "Structured" -msgstr "" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" - -msgid "Delete DNS resource record." -msgstr "" - -msgid "Delete all associated records" -msgstr "" - -msgid "Delete DNS record entry." -msgstr "" - -#, fuzzy -msgid "Search for DNS resources." -msgstr "Pesquisar por interligações." - -msgid "Modify a DNS resource record." -msgstr "" - -msgid "Rename the DNS resource record object" -msgstr "" - -msgid "Display DNS resource." -msgstr "" - -#, fuzzy -msgid "Create new DNS zone (SOA record)." -msgstr "Exibir informação acerca de uma zona DNS (registo SOA)." - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" - -msgid "Add a permission for per-zone access delegation." -msgstr "" - -#, fuzzy -msgid "Delete DNS zone (SOA record)." -msgstr "Exibir informação acerca de uma zona DNS (registo SOA)." - -msgid "Disable DNS Zone." -msgstr "" - -msgid "Enable DNS Zone." -msgstr "" - -#, fuzzy -msgid "Search for DNS zones (SOA records)." -msgstr "Exibir informação acerca de uma zona DNS (registo SOA)." - -#, fuzzy -msgid "Forward zones only" -msgstr "Política de reencaminhamento" - -msgid "Search for forward zones only" -msgstr "" - -#, fuzzy -msgid "Modify DNS zone (SOA record)." -msgstr "Exibir informação acerca de uma zona DNS (registo SOA)." - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" - -msgid "Remove a permission for per-zone access delegation." -msgstr "" - -msgid "Display information about a DNS zone (SOA record)." -msgstr "Exibir informação acerca de uma zona DNS (registo SOA)." - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "Group name" -msgstr "" - -msgid "Group description" -msgstr "" - -msgid "GID" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Member users" -msgstr "" - -msgid "Member groups" -msgstr "" - -msgid "Member of groups" -msgstr "" - -msgid "Roles" -msgstr "" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Suppress processing of membership attributes." -msgstr "" - -msgid "Add members to a group." -msgstr "" - -msgid "External member" -msgstr "" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -msgid "member group" -msgstr "" - -msgid "groups to add" -msgstr "" - -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - -msgid "Delete group." -msgstr "" - -msgid "Detach a managed group from a user." -msgstr "" - -#, fuzzy -msgid "Search for groups." -msgstr "Pesquisar por interligações." - -#, fuzzy -msgid "search for private groups" -msgstr "Pesquisar por interligações." - -#, fuzzy -msgid "search for POSIX groups" -msgstr "Pesquisar por interligações." - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "user" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "group" -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "netgroup" -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "role" -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "HBAC rule" -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "sudo rule" -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - -msgid "Display information about a named group." -msgstr "Exibir informação acerca de um grupo nomeado." - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Rule name" -msgstr "" - -msgid "Rule type" -msgstr "" - -msgid "Rule type (allow)" -msgstr "" - -msgid "User category" -msgstr "" - -msgid "User category the rule applies to" -msgstr "" - -msgid "Host category" -msgstr "" - -msgid "Host category the rule applies to" -msgstr "" - -msgid "Service category" -msgstr "" - -msgid "Service category the rule applies to" -msgstr "" - -msgid "Enabled" -msgstr "" - -msgid "User Groups" -msgstr "" - -msgid "Host Groups" -msgstr "" - -msgid "Services" -msgstr "" - -msgid "Service Groups" -msgstr "" - -msgid "External host" -msgstr "" - -msgid "Create a new HBAC rule." -msgstr "" - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "member host" -msgstr "" - -msgid "hosts to add" -msgstr "" - -msgid "member host group" -msgstr "" - -msgid "host groups to add" -msgstr "" - -msgid "Add services to an HBAC rule." -msgstr "" - -msgid "member HBAC service" -msgstr "" - -msgid "HBAC services to add" -msgstr "" - -msgid "member HBAC service group" -msgstr "" - -msgid "HBAC service groups to add" -msgstr "" - -msgid "Add users and groups to an HBAC rule." -msgstr "" - -msgid "Delete an HBAC rule." -msgstr "" - -msgid "Disable an HBAC rule." -msgstr "" - -msgid "Enable an HBAC rule." -msgstr "" - -#, fuzzy -msgid "Search for HBAC rules." -msgstr "Pesquisar por interligações." - -msgid "Modify an HBAC rule." -msgstr "" - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "hosts to remove" -msgstr "" - -msgid "host groups to remove" -msgstr "" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "" - -msgid "HBAC services to remove" -msgstr "" - -msgid "HBAC service groups to remove" -msgstr "" - -msgid "Remove users and groups from an HBAC rule." -msgstr "" - -msgid "Display the properties of an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" - -msgid "Service name" -msgstr "" - -msgid "HBAC service" -msgstr "" - -msgid "HBAC service description" -msgstr "" - -msgid "Member of HBAC service groups" -msgstr "" - -msgid "Add a new HBAC service." -msgstr "" - -msgid "Delete an existing HBAC service." -msgstr "" - -#, fuzzy -msgid "Search for HBAC services." -msgstr "Pesquisar por interligações." - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" - -msgid "Modify an HBAC service." -msgstr "" - -#, fuzzy -msgid "Display information about an HBAC service." -msgstr "Exibir informação acerca de um utilizador." - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "Service group name" -msgstr "" - -msgid "HBAC service group description" -msgstr "" - -msgid "Member HBAC service" -msgstr "" - -msgid "Add a new HBAC service group." -msgstr "" - -msgid "Add members to an HBAC service group." -msgstr "" - -msgid "Delete an HBAC service group." -msgstr "" - -msgid "Search for an HBAC service group." -msgstr "" - -msgid "Modify an HBAC service group." -msgstr "" - -msgid "Remove members from an HBAC service group." -msgstr "" - -#, fuzzy -msgid "Display information about an HBAC service group." -msgstr "Exibir informação acerca de um grupo nomeado." - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -msgid "User name" -msgstr "" - -msgid "Target host" -msgstr "" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host name" -msgstr "" - -msgid "A description of this host" -msgstr "" - -msgid "Locality" -msgstr "" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "" - -msgid "Platform" -msgstr "" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "" - -msgid "Operating system" -msgstr "" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "" - -msgid "User password" -msgstr "" - -msgid "Password used in bulk enrollment" -msgstr "" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "" - -msgid "Random password" -msgstr "" - -msgid "Certificate" -msgstr "" - -msgid "Base-64 encoded server certificate" -msgstr "" - -msgid "Principal name" -msgstr "" - -msgid "MAC address" -msgstr "" - -msgid "Hardware MAC address(es) on this host" -msgstr "" - -#, fuzzy -msgid "SSH public key" -msgstr "chave SSh pública inválida" - -msgid "Class" -msgstr "" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "Assigned ID View" -msgstr "" - -msgid "Requires pre-authentication" -msgstr "" - -msgid "Pre-authentication is required for the service" -msgstr "" - -msgid "Trusted for delegation" -msgstr "" - -msgid "Client credentials may be delegated to the service" -msgstr "" - -msgid "Member of host-groups" -msgstr "" - -msgid "Indirect Member of host-group" -msgstr "" - -msgid "Keytab" -msgstr "" - -msgid "Managed by" -msgstr "" - -msgid "Managing" -msgstr "" - -msgid "Users allowed to retrieve keytab" -msgstr "" - -msgid "Groups allowed to retrieve keytab" -msgstr "" - -msgid "Hosts allowed to retrieve keytab" -msgstr "" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "" - -msgid "Users allowed to create keytab" -msgstr "" - -msgid "Groups allowed to create keytab" -msgstr "" - -msgid "Hosts allowed to create keytab" -msgstr "" - -msgid "Host Groups allowed to create keytab" -msgstr "" - -msgid "Add a new host." -msgstr "" - -msgid "force host name even if not in DNS" -msgstr "" - -msgid "skip reverse DNS detection" -msgstr "" - -msgid "Add the host to DNS with this IP address" -msgstr "" - -msgid "Add hosts that can manage this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" - -msgid "Delete a host." -msgstr "" - -msgid "Remove entries from DNS" -msgstr "" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" - -#, fuzzy -msgid "Search for hosts." -msgstr "Pesquisar por interligações." - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" - -msgid "host group" -msgstr "" - -msgid "Search for hosts with these member of host groups." -msgstr "" - -msgid "Search for hosts without these member of host groups." -msgstr "" - -msgid "Search for hosts with these member of netgroups." -msgstr "" - -msgid "Search for hosts without these member of netgroups." -msgstr "" - -msgid "Search for hosts with these member of roles." -msgstr "" - -msgid "Search for hosts without these member of roles." -msgstr "" - -msgid "Search for hosts with these member of HBAC rules." -msgstr "" - -msgid "Search for hosts without these member of HBAC rules." -msgstr "" - -msgid "Search for hosts with these member of sudo rules." -msgstr "" - -msgid "Search for hosts without these member of sudo rules." -msgstr "" - -msgid "Search for hosts with these enrolled by users." -msgstr "" - -msgid "Search for hosts without these enrolled by users." -msgstr "" - -msgid "host" -msgstr "" - -msgid "Search for hosts with these managed by hosts." -msgstr "" - -msgid "Search for hosts without these managed by hosts." -msgstr "" - -msgid "Search for hosts with these managing hosts." -msgstr "" - -msgid "Search for hosts without these managing hosts." -msgstr "" - -#, fuzzy -msgid "Modify information about a host." -msgstr "Modificar informação acerca de uma localização IPA" - -msgid "Kerberos principal name for this host" -msgstr "" - -msgid "Update DNS entries" -msgstr "" - -msgid "Remove hosts that can manage this host." -msgstr "" - -#, fuzzy -msgid "Display information about a host." -msgstr "Exibir informação acerca de um utilizador." - -msgid "file to store certificate in" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "Host-group" -msgstr "" - -msgid "Name of host-group" -msgstr "" - -msgid "A description of this host-group" -msgstr "" - -msgid "Member hosts" -msgstr "" - -msgid "Member host-groups" -msgstr "" - -msgid "Indirect Member hosts" -msgstr "" - -msgid "Indirect Member host-groups" -msgstr "" - -msgid "Add a new hostgroup." -msgstr "" - -msgid "Add members to a hostgroup." -msgstr "" - -msgid "Delete a hostgroup." -msgstr "" - -#, fuzzy -msgid "Search for hostgroups." -msgstr "Pesquisar por interligações." - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" - -msgid "Search for host groups with these member hosts." -msgstr "" - -msgid "Search for host groups without these member hosts." -msgstr "" - -msgid "Search for host groups with these member host groups." -msgstr "" - -msgid "Search for host groups without these member host groups." -msgstr "" - -msgid "Search for host groups with these member of host groups." -msgstr "" - -msgid "Search for host groups without these member of host groups." -msgstr "" - -msgid "Search for host groups with these member of netgroups." -msgstr "" - -msgid "Search for host groups without these member of netgroups." -msgstr "" - -msgid "Search for host groups with these member of HBAC rules." -msgstr "" - -msgid "Search for host groups without these member of HBAC rules." -msgstr "" - -msgid "Search for host groups with these member of sudo rules." -msgstr "" - -msgid "Search for host groups without these member of sudo rules." -msgstr "" - -msgid "Modify a hostgroup." -msgstr "" - -msgid "Remove members from a hostgroup." -msgstr "" - -#, fuzzy -msgid "Display information about a hostgroup." -msgstr "Exibir informação acerca de um utilizador." - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "Nome do comando" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -#, fuzzy -msgid "Search for ranges." -msgstr "Pesquisar por interligações." - -msgid "Modify ID range." -msgstr "" - -#, fuzzy -msgid "Display information about a range." -msgstr "Exibir informação acerca de um utilizador." - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -msgid "Anchor to override" -msgstr "" - -msgid "Group ID Number" -msgstr "" - -msgid "User login" -msgstr "" - -msgid "UID" -msgstr "" - -msgid "User ID Number" -msgstr "" - -#, fuzzy -msgid "GECOS" -msgstr "campo GECOS" - -msgid "Home directory" -msgstr "" - -msgid "Login shell" -msgstr "" - -msgid "ID View Name" -msgstr "" - -msgid "Add a new Group ID override." -msgstr "" - -msgid "Delete an Group ID override." -msgstr "" - -msgid "Search for an Group ID override." -msgstr "" - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" - -msgid "Modify an Group ID override." -msgstr "" - -msgid "Rename the Group ID override object" -msgstr "" - -#, fuzzy -msgid "Display information about an Group ID override." -msgstr "Exibir informação acerca de um utilizador." - -msgid "Add a new User ID override." -msgstr "" - -msgid "Delete an User ID override." -msgstr "" - -msgid "Search for an User ID override." -msgstr "" - -msgid "Modify an User ID override." -msgstr "" - -msgid "Rename the User ID override object" -msgstr "" - -#, fuzzy -msgid "Display information about an User ID override." -msgstr "Exibir informação acerca de um utilizador." - -msgid "Add a new ID View." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" - -msgid "hosts" -msgstr "" - -msgid "Hosts to apply the ID View to" -msgstr "" - -msgid "hostgroups" -msgstr "" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" - -msgid "Hosts that this ID View was applied to." -msgstr "" - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" - -msgid "Number of hosts the ID View was applied to:" -msgstr "" - -msgid "Delete an ID View." -msgstr "" - -#, fuzzy -msgid "Search for an ID View." -msgstr "Pesquisar por interligações." - -msgid "Modify an ID View." -msgstr "" - -msgid "Rename the ID View object" -msgstr "" - -#, fuzzy -msgid "Display information about an ID View." -msgstr "Exibir informação acerca de um utilizador." - -msgid "Enumerate all the hosts the view applies to." -msgstr "" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" - -msgid "Hosts to clear (any) ID View from." -msgstr "" - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" - -msgid "Hosts that ID View was cleared from." -msgstr "" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" - -msgid "Dict of I18N messages" -msgstr "" - -msgid "Export plugin meta-data for the webUI." -msgstr "" - -msgid "Name of object to export" -msgstr "" - -msgid "Name of method to export" -msgstr "" - -msgid "Name of command to export" -msgstr "" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" - -msgid "Join an IPA domain" -msgstr "" - -msgid "The hostname to register as" -msgstr "" - -msgid "The IPA realm" -msgstr "" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "" - -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" - -msgid "Manage ticket policy for specific user" -msgstr "" - -msgid "Max life" -msgstr "" - -msgid "Maximum ticket life (seconds)" -msgstr "" - -msgid "Max renew" -msgstr "" - -msgid "Maximum renewable age (seconds)" -msgstr "" - -msgid "Modify Kerberos ticket policy." -msgstr "" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "" - -msgid "Display the current Kerberos ticket policy." -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," -"cn=accounts' --group-container='cn=groups,cn=accounts' " -"ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' --user-ignore-" -"objectclass=radiusprofile --user-ignore-" -"attribute=radiusgroupname ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -msgid "Migrate users and groups from DS to IPA." -msgstr "" - -msgid "LDAP URI" -msgstr "" - -msgid "LDAP URI of DS server to migrate from" -msgstr "" - -#, fuzzy -msgid "bind password" -msgstr "Adicionar política de palavra-passe" - -msgid "Bind DN" -msgstr "" - -msgid "User container" -msgstr "" - -msgid "DN of container for users in DS relative to base DN" -msgstr "" - -msgid "Group container" -msgstr "" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "" - -msgid "User object class" -msgstr "" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "" - -msgid "Group object class" -msgstr "" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "" - -msgid "Ignore user object class" -msgstr "" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore user attribute" -msgstr "" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore group object class" -msgstr "" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "Ignore group attribute" -msgstr "" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "" - -msgid "Overwrite GID" -msgstr "" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" - -msgid "LDAP schema" -msgstr "" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" - -msgid "Continue" -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" - -msgid "Base DN" -msgstr "" - -msgid "Base DN on remote LDAP server" -msgstr "" - -msgid "Ignore compat plugin" -msgstr "" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" - -msgid "CA certificate" -msgstr "" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "" - -msgid "groups to exclude from migration" -msgstr "" - -msgid "users to exclude from migration" -msgstr "" - -msgid "Lists of objects migrated; categorized by type." -msgstr "" - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" - -msgid "False if migration mode was disabled." -msgstr "" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" - -msgid "Show environment variables." -msgstr "" - -msgid "Forward to server instead of running locally" -msgstr "" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Total number of variables env (>= count)" -msgstr "" - -msgid "Number of variables returned (<= total)" -msgstr "" - -msgid "Show all loaded plugins." -msgstr "" - -msgid "Dictionary mapping plugin names to bases" -msgstr "" - -msgid "Number of plugins loaded" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "Netgroup name" -msgstr "" - -msgid "Netgroup description" -msgstr "" - -#, fuzzy -msgid "NIS domain name" -msgstr "Nome do comando" - -msgid "IPA unique ID" -msgstr "" - -msgid "Member netgroups" -msgstr "" - -msgid "Indirect Member netgroups" -msgstr "" - -msgid "Member User" -msgstr "" - -msgid "Member Group" -msgstr "" - -msgid "Member Host" -msgstr "" - -msgid "Member Hostgroup" -msgstr "" - -msgid "Add a new netgroup." -msgstr "" - -msgid "Add members to a netgroup." -msgstr "" - -msgid "member netgroup" -msgstr "" - -msgid "netgroups to add" -msgstr "" - -msgid "Delete a netgroup." -msgstr "" - -#, fuzzy -msgid "Search for a netgroup." -msgstr "Pesquisar por interligações." - -#, fuzzy -msgid "search for managed groups" -msgstr "Pesquisar por interligações." - -msgid "Search for netgroups with these member netgroups." -msgstr "" - -msgid "Search for netgroups without these member netgroups." -msgstr "" - -msgid "Search for netgroups with these member users." -msgstr "" - -msgid "Search for netgroups without these member users." -msgstr "" - -msgid "Search for netgroups with these member groups." -msgstr "" - -msgid "Search for netgroups without these member groups." -msgstr "" - -msgid "Search for netgroups with these member hosts." -msgstr "" - -msgid "Search for netgroups without these member hosts." -msgstr "" - -msgid "Search for netgroups with these member host groups." -msgstr "" - -msgid "Search for netgroups without these member host groups." -msgstr "" - -msgid "Search for netgroups with these member of netgroups." -msgstr "" - -msgid "Search for netgroups without these member of netgroups." -msgstr "" - -msgid "Modify a netgroup." -msgstr "" - -msgid "Remove members from a netgroup." -msgstr "" - -msgid "netgroups to remove" -msgstr "" - -#, fuzzy -msgid "Display information about a netgroup." -msgstr "Exibir informação acerca de um grupo nomeado." - -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" - -msgid "TOTP authentication Window" -msgstr "" - -msgid "TOTP authentication time variance (seconds)" -msgstr "" - -msgid "TOTP Synchronization Window" -msgstr "" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "" - -msgid "HOTP Authentication Window" -msgstr "" - -msgid "HOTP authentication skip-ahead" -msgstr "" - -msgid "HOTP Synchronization Window" -msgstr "" - -msgid "HOTP synchronization skip-ahead" -msgstr "" - -msgid "Modify OTP configuration options." -msgstr "" - -msgid "Show the current OTP configuration." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -msgid "Serial" -msgstr "" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -#, fuzzy -msgid "Search for OTP token." -msgstr "Pesquisar por interligações." - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -#, fuzzy -msgid "Display information about an OTP token." -msgstr "Exibir informação acerca de uma localização IPA" - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "Set a user's password." -msgstr "" - -msgid "New Password" -msgstr "" - -msgid "Current Password" -msgstr "" - -msgid "OTP" -msgstr "" - -msgid "One Time Password" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -"\n" -"Managed permissions\n" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -#, fuzzy -msgid "Permission name" -msgstr "Tipo de permissão" - -msgid "Granted rights" -msgstr "" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" - -msgid "Effective attributes" -msgstr "" - -msgid "All attributes to which the permission applies" -msgstr "" - -msgid "Included attributes" -msgstr "" - -msgid "User-specified attributes to which the permission applies" -msgstr "" - -msgid "Excluded attributes" -msgstr "" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" - -msgid "Default attributes" -msgstr "" - -msgid "Attributes to which the permission applies by default" -msgstr "" - -#, fuzzy -msgid "Bind rule type" -msgstr "tipo incorreto" - -msgid "Subtree to apply permissions to" -msgstr "" - -msgid "Extra target filter" -msgstr "" - -msgid "Raw target filter" -msgstr "" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" - -msgid "Target DN" -msgstr "" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" - -msgid "Member of group" -msgstr "" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "" - -msgid "User group to apply permissions to (sets target)" -msgstr "" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "" - -msgid "Deprecated; use extratargetfilter" -msgstr "" - -msgid "Deprecated; use ipapermlocation" -msgstr "" - -msgid "Deprecated; use ipapermright" -msgstr "" - -msgid "Granted to Privilege" -msgstr "" - -msgid "Indirect Member of roles" -msgstr "" - -msgid "Add a new permission." -msgstr "" - -msgid "Add members to a permission." -msgstr "" - -msgid "member privilege" -msgstr "" - -msgid "privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "" - -#, fuzzy -msgid "Permission flags" -msgstr "Tipo de permissão" - -msgid "Delete a permission." -msgstr "" - -msgid "force delete of SYSTEM permissions" -msgstr "" - -#, fuzzy -msgid "Search for permissions." -msgstr "Pesquisar por interligações." - -msgid "Modify a permission." -msgstr "" - -msgid "Rename the permission object" -msgstr "" - -msgid "Remove members from a permission." -msgstr "" - -msgid "privileges to remove" -msgstr "" - -#, fuzzy -msgid "Display information about a permission." -msgstr "Exibir informação acerca de um utilizador." - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "Ping a remote server." -msgstr "" - -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "" - -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" - -msgid "Privilege name" -msgstr "" - -msgid "Privilege description" -msgstr "" - -msgid "Granting privilege to roles" -msgstr "" - -msgid "Add a new privilege." -msgstr "" - -msgid "Add members to a privilege." -msgstr "" - -msgid "member role" -msgstr "" - -msgid "roles to add" -msgstr "" - -msgid "Add permissions to a privilege." -msgstr "" - -#, fuzzy -msgid "permission" -msgstr "Tipo de permissão" - -#, fuzzy -msgid "permissions" -msgstr "Tipo de permissão" - -msgid "Number of permissions added" -msgstr "" - -msgid "Delete a privilege." -msgstr "" - -#, fuzzy -msgid "Search for privileges." -msgstr "Pesquisar por interligações." - -msgid "Modify a privilege." -msgstr "" - -msgid "Rename the privilege object" -msgstr "" - -msgid "Remove members from a privilege" -msgstr "" - -msgid "roles to remove" -msgstr "" - -msgid "Remove permissions from a privilege." -msgstr "" - -msgid "Number of permissions removed" -msgstr "" - -#, fuzzy -msgid "Display information about a privilege." -msgstr "Exibir informação acerca de um utilizador." - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Group" -msgstr "" - -msgid "Manage password policy for specific group" -msgstr "" - -msgid "Max lifetime (days)" -msgstr "" - -msgid "Maximum password lifetime (in days)" -msgstr "" - -msgid "Min lifetime (hours)" -msgstr "" - -msgid "Minimum password lifetime (in hours)" -msgstr "" - -msgid "History size" -msgstr "" - -#, fuzzy -msgid "Password history size" -msgstr "Política de Palavra-passe" - -msgid "Character classes" -msgstr "" - -msgid "Minimum number of character classes" -msgstr "" - -msgid "Min length" -msgstr "" - -msgid "Minimum length of password" -msgstr "" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "" - -msgid "Max failures" -msgstr "" - -msgid "Consecutive failures before lockout" -msgstr "" - -msgid "Failure reset interval" -msgstr "" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "" - -msgid "Lockout duration" -msgstr "" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" - -#, fuzzy -msgid "Add a new group password policy." -msgstr "Adicionar política de palavra-passe" - -#, fuzzy -msgid "Delete a group password policy." -msgstr "Exibir informação acerca da política de palavra-passe." - -#, fuzzy -msgid "Search for group password policies." -msgstr "Exibir informação acerca da política de palavra-passe." - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" - -#, fuzzy -msgid "Modify a group password policy." -msgstr "Adicionar política de palavra-passe" - -msgid "Display information about password policy." -msgstr "Exibir informação acerca da política de palavra-passe." - -msgid "User" -msgstr "" - -msgid "Display effective policy for a specific user" -msgstr "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "RADIUS proxy server name" -msgstr "" - -#, fuzzy -msgid "A description of this RADIUS proxy server" -msgstr "Exibir informação acerca do servidor proxy RADIUS." - -msgid "Server" -msgstr "" - -msgid "The hostname or IP (with or without port)" -msgstr "" - -msgid "Secret" -msgstr "" - -msgid "The secret used to encrypt data" -msgstr "" - -msgid "Timeout" -msgstr "" - -msgid "The total timeout across all retries (in seconds)" -msgstr "" - -msgid "Retries" -msgstr "" - -msgid "The number of times to retry authentication" -msgstr "" - -msgid "User attribute" -msgstr "" - -msgid "The username attribute on the user object" -msgstr "" - -#, fuzzy -msgid "Add a new RADIUS proxy server." -msgstr "Exibir informação acerca do servidor proxy RADIUS." - -#, fuzzy -msgid "Delete a RADIUS proxy server." -msgstr "Exibir informação acerca do servidor proxy RADIUS." - -#, fuzzy -msgid "Search for RADIUS proxy servers." -msgstr "Exibir informação acerca do servidor proxy RADIUS." - -#, fuzzy -msgid "Modify a RADIUS proxy server." -msgstr "Exibir informação acerca do servidor proxy RADIUS." - -msgid "Rename the RADIUS proxy server object" -msgstr "" - -msgid "Display information about a RADIUS proxy server." -msgstr "Exibir informação acerca do servidor proxy RADIUS." - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Domain" -msgstr "" - -msgid "Add domain" -msgstr "" - -msgid "Delete domain" -msgstr "" - -msgid "Modify realm domains." -msgstr "" - -msgid "Force adding domain even if not in DNS" -msgstr "" - -msgid "Display the list of realm domains." -msgstr "" - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" - -msgid "Role name" -msgstr "" - -msgid "A description of this role-group" -msgstr "" - -msgid "Privileges" -msgstr "" - -msgid "Member services" -msgstr "" - -msgid "Add a new role." -msgstr "" - -msgid "Add members to a role." -msgstr "" - -msgid "member service" -msgstr "" - -msgid "services to add" -msgstr "" - -msgid "Add privileges to a role." -msgstr "" - -msgid "privilege" -msgstr "" - -msgid "privileges" -msgstr "" - -msgid "Number of privileges added" -msgstr "" - -msgid "Delete a role." -msgstr "" - -#, fuzzy -msgid "Search for roles." -msgstr "Pesquisar por interligações." - -msgid "Modify a role." -msgstr "" - -msgid "Rename the role object" -msgstr "" - -msgid "Remove members from a role." -msgstr "" - -msgid "services to remove" -msgstr "" - -msgid "Remove privileges from a role." -msgstr "" - -msgid "Number of privileges removed" -msgstr "" - -#, fuzzy -msgid "Display information about a role." -msgstr "Exibir informação acerca de um utilizador." - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "Self-service name" -msgstr "" - -msgid "Attributes to which the permission applies." -msgstr "" - -#, fuzzy -msgid "Add a new self-service permission." -msgstr "Exibir informação acerca de uma permissão de serviço automático." - -#, fuzzy -msgid "Delete a self-service permission." -msgstr "Exibir informação acerca de uma permissão de serviço automático." - -#, fuzzy -msgid "Search for a self-service permission." -msgstr "Exibir informação acerca de uma permissão de serviço automático." - -#, fuzzy -msgid "Modify a self-service permission." -msgstr "Exibir informação acerca de uma permissão de serviço automático." - -msgid "Display information about a self-service permission." -msgstr "Exibir informação acerca de uma permissão de serviço automático." - -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" - -msgid "SELinux User" -msgstr "" - -msgid "HBAC Rule" -msgstr "" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "" - -msgid "Create a new SELinux User Map." -msgstr "" - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "" - -msgid "Delete a SELinux User Map." -msgstr "" - -msgid "Disable an SELinux User Map rule." -msgstr "" - -msgid "Enable an SELinux User Map rule." -msgstr "" - -#, fuzzy -msgid "Search for SELinux User Maps." -msgstr "Pesquisar por interligações." - -msgid "Modify a SELinux User Map." -msgstr "" - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "" - -msgid "Display the properties of a SELinux User Map rule." -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "Service principal" -msgstr "" - -msgid "PAC type" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" - -msgid "Add a new IPA new service." -msgstr "" - -msgid "force principal name even if not in DNS" -msgstr "" - -msgid "Add hosts that can manage this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Delete an IPA service." -msgstr "" - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -#, fuzzy -msgid "Search for IPA services." -msgstr "Pesquisar por interligações." - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" - -msgid "Search for services with these managed by hosts." -msgstr "" - -msgid "Search for services without these managed by hosts." -msgstr "" - -#, fuzzy -msgid "Modify an existing IPA service." -msgstr "Modificar informação acerca de um servidor IPA" - -msgid "Remove hosts that can manage this service." -msgstr "" - -#, fuzzy -msgid "Display information about an IPA service." -msgstr "Exibir informação acerca de um utilizador." - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" - -#, fuzzy -msgid "Sudo Command" -msgstr "Tópico ou Comando" - -msgid "A description of this command" -msgstr "" - -msgid "Sudo Command Groups" -msgstr "" - -msgid "Create new Sudo Command." -msgstr "" - -msgid "Delete Sudo Command." -msgstr "" - -#, fuzzy -msgid "Search for Sudo Commands." -msgstr "Pesquisar por interligações." - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" - -#, fuzzy -msgid "Modify Sudo Command." -msgstr "Tópico ou Comando" - -msgid "Display Sudo Command." -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "Sudo Command Group" -msgstr "" - -#, fuzzy -msgid "Commands" -msgstr "Nome do comando" - -msgid "Member Sudo commands" -msgstr "" - -msgid "Create new Sudo Command Group." -msgstr "" - -msgid "Add members to Sudo Command Group." -msgstr "" - -msgid "member sudo command" -msgstr "" - -msgid "sudo commands to add" -msgstr "" - -msgid "Delete Sudo Command Group." -msgstr "" - -#, fuzzy -msgid "Search for Sudo Command Groups." -msgstr "Pesquisar por interligações." - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" - -msgid "Modify Sudo Command Group." -msgstr "" - -msgid "Remove members from Sudo Command Group." -msgstr "" - -msgid "sudo commands to remove" -msgstr "" - -msgid "Display Sudo Command Group." -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -#, fuzzy -msgid "Domain name" -msgstr "Nome do comando" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -#, fuzzy -msgid "Shared secret for the trust" -msgstr "Pesquisar por interligações." - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "Pesquisar por interligações." - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -#, fuzzy -msgid "Display information about a trust." -msgstr "Exibir informação acerca de um utilizador." - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -#, fuzzy -msgid "Search domains of the trust" -msgstr "Pesquisar por interligações." - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "" - -msgid "Last name" -msgstr "" - -msgid "Full name" -msgstr "" - -msgid "Display name" -msgstr "" - -msgid "Initials" -msgstr "" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Email address" -msgstr "" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -msgid "Pager Number" -msgstr "" - -msgid "Fax Number" -msgstr "" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Car License" -msgstr "" - -msgid "Account disabled" -msgstr "" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "" - -msgid "RADIUS proxy username" -msgstr "" - -msgid "Department Number" -msgstr "" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -msgid "Delete a user." -msgstr "" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -#, fuzzy -msgid "Search for users." -msgstr "Pesquisar por interligações." - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "Exibir informação acerca de um utilizador." - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -#, fuzzy -msgid "Command category" -msgstr "Nome do comando" - -msgid "Command category the rule applies to" -msgstr "" - -msgid "RunAs User category" -msgstr "" - -msgid "RunAs User category the rule applies to" -msgstr "" - -msgid "RunAs Group category" -msgstr "" - -msgid "RunAs Group category the rule applies to" -msgstr "" - -msgid "Sudo order" -msgstr "" - -msgid "integer to order the Sudo rules" -msgstr "" - -msgid "External User" -msgstr "" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -msgid "Host Masks" -msgstr "" - -#, fuzzy -msgid "Sudo Allow Commands" -msgstr "Tópico ou Comando" - -msgid "Sudo Deny Commands" -msgstr "" - -msgid "Sudo Allow Command Groups" -msgstr "" - -msgid "Sudo Deny Command Groups" -msgstr "" - -msgid "RunAs Users" -msgstr "" - -msgid "Run as a user" -msgstr "" - -msgid "Groups of RunAs Users" -msgstr "" - -msgid "Run as any user within a specified group" -msgstr "" - -msgid "RunAs External User" -msgstr "" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -msgid "External Groups of RunAs Users" -msgstr "" - -msgid "External Groups of users that the command can run as" -msgstr "" - -msgid "RunAs Groups" -msgstr "" - -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -msgid "RunAs External Group" -msgstr "" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -msgid "Sudo Option" -msgstr "" - -msgid "Create new Sudo Rule." -msgstr "" - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "member sudo command group" -msgstr "" - -msgid "sudo command groups to add" -msgstr "" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "" - -msgid "Add group for Sudo to execute as." -msgstr "" - -msgid "Add users and groups for Sudo to execute as." -msgstr "" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "" - -msgid "Delete Sudo Rule." -msgstr "" - -msgid "Disable a Sudo Rule." -msgstr "" - -msgid "Enable a Sudo Rule." -msgstr "" - -#, fuzzy -msgid "Search for Sudo Rule." -msgstr "Pesquisar por interligações." - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -msgid "Modify Sudo Rule." -msgstr "" - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "sudo command groups to remove" -msgstr "" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "Remove an option from Sudo Rule." -msgstr "" - -msgid "Remove group for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "" - -msgid "Display Sudo Rule." -msgstr "" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -#, fuzzy -msgid "ACL name" -msgstr "Nome do comando" - -msgid "Profile category" -msgstr "" - -msgid "Profile category the ACL applies to" -msgstr "" - -msgid "User category the ACL applies to" -msgstr "" - -msgid "Host category the ACL applies to" -msgstr "" - -msgid "Service category the ACL applies to" -msgstr "" - -msgid "Profiles" -msgstr "" - -msgid "Create a new CA ACL." -msgstr "" - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "" - -msgid "Add profiles to a CA ACL." -msgstr "" - -msgid "member Certificate Profile" -msgstr "" - -msgid "Certificate Profiles to add" -msgstr "" - -msgid "Add services to a CA ACL." -msgstr "" - -msgid "Add users and groups to a CA ACL." -msgstr "" - -msgid "Delete a CA ACL." -msgstr "" - -msgid "Disable a CA ACL." -msgstr "" - -msgid "Enable a CA ACL." -msgstr "" - -#, fuzzy -msgid "Search for CA ACLs." -msgstr "Pesquisar por interligações." - -msgid "Modify a CA ACL." -msgstr "" - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "" - -msgid "Remove profiles from a CA ACL." -msgstr "" - -msgid "Certificate Profiles to remove" -msgstr "" - -msgid "Remove services from a CA ACL." -msgstr "" - -msgid "Remove users and groups from a CA ACL." -msgstr "" - -msgid "Display the properties of a CA ACL." -msgstr "" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -#, fuzzy -msgid "Search for Certificate Profiles." -msgstr "Pesquisar por interligações." - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" - -msgid "Query current Domain Level." -msgstr "" - -msgid "Current domain level:" -msgstr "" - -msgid "Change current Domain Level." -msgstr "" - -msgid "Domain Level" -msgstr "" - -msgid "Add certificates to host entry" -msgstr "" - -msgid "Remove certificates from host entry" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "Fallback to AD DC LDAP" -msgstr "" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" - -msgid "Add to default group" -msgstr "" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" - -msgid "Search scope" -msgstr "" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Target DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" - -msgid "Origin DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "Server name" -msgstr "" - -msgid "IPA server hostname" -msgstr "" - -msgid "Managed suffix" -msgstr "" - -msgid "Min domain level" -msgstr "" - -msgid "Minimum domain level" -msgstr "" - -msgid "Max domain level" -msgstr "" - -msgid "Maximum domain level" -msgstr "" - -msgid "Delete IPA server." -msgstr "" - -#, fuzzy -msgid "Search for IPA servers." -msgstr "Pesquisar por interligações." - -msgid "Show IPA server." -msgstr "" - -msgid "Add new certificates to a service" -msgstr "" - -msgid "Remove certificates from a service" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed Target" -msgstr "" - -msgid "Create a new service delegation rule." -msgstr "" - -msgid "Add member to a named service delegation rule." -msgstr "" - -msgid "member principal" -msgstr "" - -msgid "principal to add" -msgstr "" - -msgid "Add target to a named service delegation rule." -msgstr "" - -msgid "member service delegation target" -msgstr "" - -msgid "service delegation targets to add" -msgstr "" - -msgid "Delete service delegation." -msgstr "" - -msgid "Search for service delegations rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" - -msgid "Remove member from a named service delegation rule." -msgstr "" - -msgid "principal to remove" -msgstr "" - -msgid "Remove target from a named service delegation rule." -msgstr "" - -msgid "service delegation targets to remove" -msgstr "" - -#, fuzzy -msgid "Display information about a named service delegation rule." -msgstr "Exibir informação acerca de uma delegação." - -msgid "Create a new service delegation target." -msgstr "" - -msgid "Add member to a named service delegation target." -msgstr "" - -msgid "Delete service delegation target." -msgstr "" - -msgid "Search for service delegation target." -msgstr "" - -msgid "Remove member from a named service delegation target." -msgstr "" - -#, fuzzy -msgid "Display information about a named service delegation target." -msgstr "Exibir informação acerca de uma delegação." - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" - -msgid "Activate a stage user." -msgstr "" - -msgid "Add a new stage user." -msgstr "" - -msgid "Create Stage user in from a delete user" -msgstr "" - -msgid "Delete a stage user." -msgstr "" - -#, fuzzy -msgid "Search for stage users." -msgstr "Pesquisar por interligações." - -msgid "Search for stage users with these member of groups." -msgstr "" - -msgid "Search for stage users without these member of groups." -msgstr "" - -msgid "Search for stage users with these member of netgroups." -msgstr "" - -msgid "Search for stage users without these member of netgroups." -msgstr "" - -msgid "Search for stage users with these member of roles." -msgstr "" - -msgid "Search for stage users without these member of roles." -msgstr "" - -msgid "Search for stage users with these member of HBAC rules." -msgstr "" - -msgid "Search for stage users without these member of HBAC rules." -msgstr "" - -msgid "Search for stage users with these member of sudo rules." -msgstr "" - -msgid "Search for stage users without these member of sudo rules." -msgstr "" - -msgid "Modify a stage user." -msgstr "" - -msgid "Rename the stage user object" -msgstr "" - -#, fuzzy -msgid "Display information about a stage user." -msgstr "Exibir informação acerca de um utilizador." - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" - -msgid "Segment name" -msgstr "" - -msgid "Arbitrary string identifying the segment" -msgstr "" - -msgid "Left node" -msgstr "" - -#, fuzzy -msgid "Left replication node - an IPA server" -msgstr "Modificar informação acerca de um servidor IPA" - -msgid "Right node" -msgstr "" - -#, fuzzy -msgid "Right replication node - an IPA server" -msgstr "Modificar informação acerca de um servidor IPA" - -msgid "Connectivity" -msgstr "" - -msgid "Direction of replication between left and right replication node" -msgstr "" - -msgid "Attributes to strip" -msgstr "" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" - -msgid "Attributes to replicate" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" - -msgid "Attributes for total update" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" - -#, fuzzy -msgid "Session timeout" -msgstr "Erro de sessão" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" - -#, fuzzy -msgid "Replication agreement enabled" -msgstr "não são pertimidas opções" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" - -msgid "Suffix name" -msgstr "" - -msgid "LDAP suffix to be managed" -msgstr "" - -msgid "Add a new segment." -msgstr "" - -msgid "Delete a segment." -msgstr "" - -#, fuzzy -msgid "Search for topology segments." -msgstr "Pesquisar por interligações." - -msgid "Modify a segment." -msgstr "" - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" - -msgid "Initialize left node" -msgstr "" - -msgid "Initialize right node" -msgstr "" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "" - -msgid "Display a segment." -msgstr "" - -msgid "Add a new topology suffix to be managed." -msgstr "" - -msgid "Delete a topology suffix." -msgstr "" - -#, fuzzy -msgid "Search for topology suffices." -msgstr "Pesquisar por interligações." - -msgid "Modify a topology suffix." -msgstr "" - -msgid "Show managed suffix." -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "Preserved user" -msgstr "" - -msgid "Add one or more certificates to the user entry" -msgstr "" - -msgid "Remove one or more certificates to the user entry" -msgstr "" - -msgid "Move deleted user into staged area" -msgstr "" - -msgid "Undelete a delete user account." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "Vault name" -msgstr "" - -msgid "Vault description" -msgstr "" - -msgid "Vault type" -msgstr "" - -msgid "Salt" -msgstr "" - -msgid "Vault salt" -msgstr "" - -msgid "Public key" -msgstr "" - -#, fuzzy -msgid "Vault public key" -msgstr "chave SSh pública inválida" - -msgid "Owner users" -msgstr "" - -msgid "Owner groups" -msgstr "" - -msgid "Owner services" -msgstr "" - -msgid "Failed owners" -msgstr "" - -msgid "Vault service" -msgstr "" - -msgid "Shared vault" -msgstr "" - -msgid "Vault user" -msgstr "" - -msgid "Transport Certificate" -msgstr "" - -msgid "Service name of the service vault" -msgstr "" - -msgid "Username of the user vault" -msgstr "" - -msgid "Add members to a vault." -msgstr "" - -msgid "Add owners to a vault." -msgstr "" - -msgid "owner user" -msgstr "" - -msgid "owner group" -msgstr "" - -msgid "owner service" -msgstr "" - -msgid "Owners that could not be added" -msgstr "" - -msgid "Number of owners added" -msgstr "" - -msgid "Session key wrapped with transport certificate" -msgstr "" - -msgid "Vault data encrypted with session key" -msgstr "" - -msgid "Nonce" -msgstr "" - -msgid "Delete a vault." -msgstr "" - -#, fuzzy -msgid "Search for vaults." -msgstr "Pesquisar por interligações." - -msgid "List all service vaults" -msgstr "" - -msgid "List all user vaults" -msgstr "" - -msgid "Remove members from a vault." -msgstr "" - -msgid "Remove owners from a vault." -msgstr "" - -msgid "Owners that could not be removed" -msgstr "" - -msgid "Number of owners removed" -msgstr "" - -#, fuzzy -msgid "Display information about a vault." -msgstr "Exibir informação acerca de um utilizador." - -msgid "Show vault configuration." -msgstr "" - -msgid "Output file to store the transport certificate" -msgstr "" - -msgid "Add owners to a vault container." -msgstr "" - -msgid "Delete a vault container." -msgstr "" - -msgid "Remove owners from a vault container." -msgstr "" - -#, fuzzy -msgid "Display information about a vault container." -msgstr "Exibir informação acerca de um utilizador." - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "" - -msgid "Hostname (FQDN)" -msgstr "" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Managed suffixes" -msgstr "" - -msgid "Check connection to remote IPA server." -msgstr "" - -msgid "Remote server name" -msgstr "" - -msgid "Remote IPA server hostname" -msgstr "" - -msgid "suffix" -msgstr "" - -msgid "Search for servers with these managed suffixes." -msgstr "" - -msgid "Search for servers without these managed suffixes." -msgstr "" - -msgid "Add a manager to the stage user entry" -msgstr "" - -msgid "Remove a manager to the stage user entry" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -msgid "Managed LDAP suffix DN" -msgstr "" - -#, fuzzy -msgid "Search for topology suffixes." -msgstr "Pesquisar por interligações." - -msgid "Add a manager to the user entry" -msgstr "" - -msgid "Remove a manager to the user entry" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Comma-separated list of attributes" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" - -msgid "DNS class" -msgstr "" - -msgid "Comma-separated list of raw A records" -msgstr "" - -msgid "Comma-separated list of raw AAAA records" -msgstr "" - -msgid "Comma-separated list of raw A6 records" -msgstr "" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "" - -msgid "Comma-separated list of raw APL records" -msgstr "" - -msgid "Comma-separated list of raw CERT records" -msgstr "" - -msgid "Comma-separated list of raw CNAME records" -msgstr "" - -msgid "Comma-separated list of raw DHCID records" -msgstr "" - -msgid "Comma-separated list of raw DLV records" -msgstr "" - -msgid "Comma-separated list of raw DNAME records" -msgstr "" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "" - -msgid "Comma-separated list of raw DS records" -msgstr "" - -msgid "Comma-separated list of raw HIP records" -msgstr "" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "" - -msgid "Comma-separated list of raw KEY records" -msgstr "" - -msgid "KEY Flags" -msgstr "" - -msgid "KEY Protocol" -msgstr "" - -msgid "Protocol" -msgstr "" - -msgid "KEY Algorithm" -msgstr "" - -msgid "KEY Public Key" -msgstr "" - -msgid "Public Key" -msgstr "" - -msgid "Comma-separated list of raw KX records" -msgstr "" - -msgid "Comma-separated list of raw LOC records" -msgstr "" - -msgid "Comma-separated list of raw MX records" -msgstr "" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "" - -msgid "Comma-separated list of raw NS records" -msgstr "" - -msgid "Comma-separated list of raw NSEC records" -msgstr "" - -msgid "NSEC Next Domain Name" -msgstr "" - -msgid "Next Domain Name" -msgstr "" - -msgid "NSEC Type Map" -msgstr "" - -msgid "Type Map" -msgstr "" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "" - -msgid "Comma-separated list of raw PTR records" -msgstr "" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "" - -msgid "RRSIG Type Covered" -msgstr "" - -msgid "Type Covered" -msgstr "" - -msgid "RRSIG Algorithm" -msgstr "" - -msgid "RRSIG Labels" -msgstr "" - -msgid "Labels" -msgstr "" - -msgid "RRSIG Original TTL" -msgstr "" - -msgid "Original TTL" -msgstr "" - -msgid "RRSIG Signature Expiration" -msgstr "" - -msgid "Signature Expiration" -msgstr "" - -msgid "RRSIG Signature Inception" -msgstr "" - -msgid "Signature Inception" -msgstr "" - -msgid "RRSIG Key Tag" -msgstr "" - -msgid "RRSIG Signer's Name" -msgstr "" - -msgid "Signer's Name" -msgstr "" - -msgid "RRSIG Signature" -msgstr "" - -msgid "Signature" -msgstr "" - -msgid "Comma-separated list of raw RP records" -msgstr "" - -msgid "Comma-separated list of raw SIG records" -msgstr "" - -msgid "SIG Type Covered" -msgstr "" - -msgid "SIG Algorithm" -msgstr "" - -msgid "SIG Labels" -msgstr "" - -msgid "SIG Original TTL" -msgstr "" - -msgid "SIG Signature Expiration" -msgstr "" - -msgid "SIG Signature Inception" -msgstr "" - -msgid "SIG Key Tag" -msgstr "" - -msgid "SIG Signer's Name" -msgstr "" - -msgid "SIG Signature" -msgstr "" - -msgid "Comma-separated list of raw SPF records" -msgstr "" - -msgid "Comma-separated list of raw SRV records" -msgstr "" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "" - -msgid "Comma-separated list of raw TA records" -msgstr "" - -msgid "Comma-separated list of raw TKEY records" -msgstr "" - -msgid "Comma-separated list of raw TSIG records" -msgstr "" - -msgid "Comma-separated list of raw TXT records" -msgstr "" - -msgid "SOA time to live" -msgstr "" - -msgid "SOA record time to live" -msgstr "" - -msgid "SOA class" -msgstr "" - -msgid "SOA record class" -msgstr "" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" - -#, fuzzy -msgid "Consume an entitlement." -msgstr "Comando não implementado" - -#, fuzzy -msgid "Quantity" -msgstr "Identidade" - -#, fuzzy -msgid "Search for entitlement accounts." -msgstr "Pesquisar por interligações." - -msgid "Retrieve the entitlement certs." -msgstr "" - -msgid "Import an entitlement certificate." -msgstr "" - -msgid "UUID" -msgstr "" - -msgid "Enrollment UUID" -msgstr "" - -msgid "Register to the entitlement system." -msgstr "" - -msgid "Username" -msgstr "" - -#, fuzzy -msgid "Enrollment UUID (not implemented)" -msgstr "Comando não implementado" - -msgid "Registration password" -msgstr "" - -msgid "Display current entitlements." -msgstr "" - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" - -msgid "comma-separated list of users to add" -msgstr "" - -msgid "comma-separated list of groups to add" -msgstr "" - -msgid "comma-separated list of users to remove" -msgstr "" - -msgid "comma-separated list of groups to remove" -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Source host category" -msgstr "" - -msgid "Source host category the rule applies to" -msgstr "" - -msgid "Source Hosts" -msgstr "" - -msgid "Source Host Groups" -msgstr "" - -msgid "comma-separated list of hosts to add" -msgstr "" - -msgid "comma-separated list of host groups to add" -msgstr "" - -msgid "comma-separated list of HBAC services to add" -msgstr "" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "" - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "" - -msgid "comma-separated list of hosts to remove" -msgstr "" - -msgid "comma-separated list of host groups to remove" -msgstr "" - -msgid "comma-separated list of HBAC services to remove" -msgstr "" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" - -msgid "Source host" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "comma-separated list of netgroups to add" -msgstr "" - -msgid "comma-separated list of netgroups to remove" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" - -msgid "Target members of a group" -msgstr "" - -msgid "User group to apply permissions to" -msgstr "" - -msgid "comma-separated list of privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI" -msgstr "" - -msgid "Permission type" -msgstr "Tipo de permissão" - -msgid "comma-separated list of privileges to remove" -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "comma-separated list of roles to add" -msgstr "" - -msgid "comma-separated list of permissions" -msgstr "" - -msgid "comma-separated list of roles to remove" -msgstr "" - -msgid "comma-separated list of privileges" -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "comma-separated list of sudo commands to add" -msgstr "" - -msgid "comma-separated list of sudo commands to remove" -msgstr "" - -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "campo GECOS" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" - -msgid "comma-separated list of sudo command groups to add" -msgstr "" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "" - -msgid "Failed members" -msgstr "" - -msgid "Failed source hosts/hostgroups" -msgstr "" - -msgid "Failed hosts/hostgroups" -msgstr "" - -msgid "Failed users/groups" -msgstr "" - -msgid "Failed service/service groups" -msgstr "" - -msgid "Failed to remove" -msgstr "" - -msgid "Failed RunAs" -msgstr "" - -msgid "Failed RunAsGroup" -msgstr "" - -msgid "Failed profiles" -msgstr "" - -msgid "Failed CAs" -msgstr "" - -msgid "Failed member manager" -msgstr "" - -msgid "Failed managedby" -msgstr "" - -msgid "Failed allowed to retrieve keytab" -msgstr "" - -msgid "Failed allowed to create keytab" -msgstr "" - -msgid "Failed targets" -msgstr "" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "Cliente %(cver)s incompatível com servidor %(sver)s no '%(server)s'" - -#, fuzzy, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "erro no servidor '%(server)s': %(error)s" - -msgid "an internal error has occurred" -msgstr "ocorreu um erro interno " - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "ocorreu um erro interno no servidor em '%(server)s'" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "comando desconhecido '%(name)s'" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "erro no servidor '%(server)s': %(error)s" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "não é possível ligar a '%(uri)s': %(error)s" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Pedido JSON-RPC inválido: %(error)s" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "Referenciador HTTP ausente ou inválido,%(referer)s" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Erro Kerberos: %(major)s/%(minor)s" - -msgid "did not receive Kerberos credentials" -msgstr "" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -msgid "No credentials cache found" -msgstr "" - -msgid "Ticket expired" -msgstr "Pedido expirado" - -msgid "Credentials cache permissions incorrect" -msgstr "" - -msgid "Bad format in credentials cache" -msgstr "" - -msgid "Cannot resolve KDC for requested realm" -msgstr "" - -msgid "Session error" -msgstr "Erro de sessão" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Acesso insuficiente: %(info)s" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#, python-format -msgid "'%(name)s' is required" -msgstr "'%(name)s' é obrigatório" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "'%(name)s' inválido: %(error)s" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - -msgid "Passwords do not match" -msgstr "As palavras-passe não correspondem" - -msgid "Command not implemented" -msgstr "Comando não implementado" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -msgid "This entry already exists" -msgstr "Esta entrada já existe" - -msgid "You must enroll a host in order to create a host service" -msgstr "" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" - -msgid "This command requires root access" -msgstr "Este comando requer acesso \"root\"" - -#, fuzzy -msgid "This is already a posix group" -msgstr "Esta entrada já é um membro" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -msgid "This entry is already enabled" -msgstr "Esta entrada já está ativada" - -msgid "This entry is already disabled" -msgstr "Esta entrada já está desativada" - -msgid "This entry cannot be enabled or disabled" -msgstr "Esta entrada não pode estar ativada ou desativada" - -msgid "This entry is not a member" -msgstr "Esta entrada não é um membro" - -msgid "A group may not be a member of itself" -msgstr "" - -msgid "This entry is already a member" -msgstr "Esta entrada já é um membro" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "" - -msgid "A group may not be added as a member of itself" -msgstr "" - -msgid "The default users group cannot be removed" -msgstr "" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -#, fuzzy -msgid "This group already allows external members" -msgstr "Esta entrada já é um membro" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "change collided with another change" -msgstr "" - -msgid "no modifications to be performed" -msgstr "" - -#, fuzzy, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(info)s" - -msgid "limits exceeded for this query" -msgstr "" - -#, python-format -msgid "%(info)s" -msgstr "%(info)s" - -#, fuzzy -msgid "modifying primary key is not allowed" -msgstr "não são pertimidas opções" - -#, fuzzy, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "Só é permitido um valor" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "" - -msgid "Already registered" -msgstr "Já registado" - -msgid "Not registered yet" -msgstr "Ainda não registado" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, python-format -msgid "%(exception)s" -msgstr "%(exception)s" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, fuzzy, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "erro no servidor '%(server)s': %(error)s" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "%(line)s" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -#, python-format -msgid "%(count)d variables" -msgstr "" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" -msgstr[1] "" - -msgid "A dictionary representing an LDAP entry" -msgstr "" - -msgid "A list of LDAP entries" -msgstr "Uma lista de entradas LDAP" - -msgid "All commands should at least have a result" -msgstr "" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "" - -#, fuzzy -msgid "Passwords do not match!" -msgstr "As palavras-passe não correspondem" - -msgid "No matching entries found" -msgstr "" - -msgid "Topic or Command" -msgstr "Tópico ou Comando" - -msgid "The topic or command name." -msgstr "O nome do tópico ou do comando" - -msgid "Topic commands:" -msgstr "Comandos do tópico:" - -msgid "To get command help, use:" -msgstr "Para obter ajuda do comando, utilize:" - -msgid " ipa --help" -msgstr "" - -msgid "Command name" -msgstr "Nome do comando" - -msgid "Positional arguments" -msgstr "" - -#, python-format -msgid "Same as --%s" -msgstr "" - -msgid "Deprecated options" -msgstr "" - -msgid "No file to read" -msgstr "" - -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - -#, python-format -msgid "%(filename)s: file not found" -msgstr "" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - -msgid "Filename is empty" -msgstr "O nome de ficheiro está em branco" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "chave SSh pública inválida" - -msgid "options are not allowed" -msgstr "não são pertimidas opções" - -msgid "invalid hostmask" -msgstr "" - -#, fuzzy, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "erro no servidor '%(server)s': %(error)s" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -msgid "invalid domain name" -msgstr "" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, fuzzy, python-format -msgid "invalid domain-name: %s" -msgstr "'%(name)s' inválido: %(error)s" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "incorrect type" -msgstr "tipo incorreto" - -msgid "Only one value is allowed" -msgstr "Só é permitido um valor" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "" - -msgid "must be an integer" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -msgid "must be a decimal number" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -msgid "must be binary data" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -msgid "must be a certificate" -msgstr "" - -msgid "must be a certificate signing request" -msgstr "" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "" - -#, fuzzy -msgid "Leading and trailing spaces are not allowed" -msgstr "não são pertimidas opções" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "" - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "" - -#, python-format -msgid "must be '%(value)s'" -msgstr "" - -#, python-format -msgid "must be one of %(values)s" -msgstr "" - -msgid "must be datetime value" -msgstr "" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -msgid "must be DNS name" -msgstr "" - -msgid "must be absolute" -msgstr "" - -msgid "must be relative" -msgstr "" - -msgid "must be dictionary" -msgstr "" - -msgid "must be Kerberos principal" -msgstr "" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -msgid "Service principal is required" -msgstr "" - -msgid "must be at least 0" -msgstr "" - -#, fuzzy -#| msgid "invalid SSH public key" -msgid "invalid valid hex" -msgstr "chave SSh pública inválida" - -msgid "invalid serial number 0" -msgstr "" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "" - -#, python-format -msgid "objectclass %s not found" -msgstr "" - -msgid "Trusting forest" -msgstr "" - -#, fuzzy -msgid "Trusted forest" -msgstr "Interligações" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "Failed to authenticate to CA REST API" -msgstr "" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "" - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -msgid "Automount Location" -msgstr "" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, fuzzy, python-format -msgid "key named %(key)s already exists" -msgstr "Esta entrada já existe" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -msgid "Delegation" -msgstr "" - -msgid "ACI" -msgstr "" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Search for DNS servers." -msgstr "Pesquisar por interligações." - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -#, fuzzy -msgid "Display configuration of a DNS server." -msgstr "Exibir informação acerca do servidor proxy RADIUS." - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "" - -msgid "User Group" -msgstr "" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" -msgstr[1] "" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "host groups" -msgstr "" - -msgid "Host Group" -msgstr "" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" - -msgid "hostgroup" -msgstr "" - -msgid "privileged hostgroup" -msgstr "" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -#, fuzzy -msgid "Auto private groups" -msgstr "Pesquisar por interligações." - -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "" - -msgid "locations" -msgstr "" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -#, fuzzy -msgid "Location name" -msgstr "Nome do comando" - -msgid "IPA location name" -msgstr "" - -msgid "IPA Location description" -msgstr "" - -msgid "Servers" -msgstr "" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Delete an IPA location." -msgstr "Exibir informação acerca de uma localização IPA" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -msgid "IPA Server" -msgstr "" - -msgid "Modify information about an IPA location." -msgstr "Modificar informação acerca de uma localização IPA" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Search for IPA locations." -msgstr "Pesquisar por interligações." - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Display information about an IPA location." -msgstr "Exibir informação acerca de uma localização IPA" - -msgid "Servers in location" -msgstr "" - -msgid "netgroups" -msgstr "" - -msgid "Netgroups" -msgstr "" - -msgid "Netgroup" -msgstr "" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" -msgstr "" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" -msgstr "" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -#, fuzzy -msgid "Whether PKINIT is enabled or disabled" -msgstr "Esta entrada não pode estar ativada ou desativada" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "Role" -msgstr "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -msgid "Self Service Permissions" -msgstr "" - -msgid "Self Service Permission" -msgstr "" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "IPA role name" -msgstr "" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -msgid "Member principals" -msgstr "" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -msgid "Subordinate id description" -msgstr "" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -msgid "SubUID range size" -msgstr "" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -msgid "SubGID range size" -msgstr "" - -msgid "Subordinate group ID count" -msgstr "" - -#, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "" - -#, python-format -msgid "'%(dn)s is not a valid user" -msgstr "" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -msgid "Add a new subordinate id." -msgstr "" - -#, python-format -msgid "Added subordinate id \"%(value)s\"" -msgstr "" - -msgid "Delete a subordinate id." -msgstr "" - -#, python-format -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "" - -msgid "Modify a subordinate id." -msgstr "" - -#, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Search for subordinate id." -msgstr "Pesquisar por interligações." - -#, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "Display information about a subordinate id." -msgstr "Exibir informação acerca de um utilizador." - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -#, fuzzy -msgid "sudo command" -msgstr "Comandos do tópico:" - -#, fuzzy -msgid "sudo commands" -msgstr "Comandos do tópico:" - -#, fuzzy -msgid "Sudo Commands" -msgstr "Comandos do tópico:" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" -"\n" -"Obter informação acerca dos servidores IPA.\n" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -msgid "servers" -msgstr "" - -msgid "IPA Servers" -msgstr "" - -msgid "Server location" -msgstr "" - -msgid "Service weight" -msgstr "" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "Modificar informação acerca de um servidor IPA" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, fuzzy, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "erro no servidor '%(server)s': %(error)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, fuzzy, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "erro no servidor '%(server)s': %(error)s" - -#, fuzzy -msgid "Server has already been deleted" -msgstr "Esta entrada já está ativada" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -msgid "Server state" -msgstr "" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -#, fuzzy -msgid "A list of ACI values" -msgstr "Uma lista de entradas LDAP" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -msgid "ACI prefix is required" -msgstr "" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -msgid "Auto Membership is not configured" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" -msgstr[1] "" - msgid "" "\n" " Display information about an automember rule.\n" @@ -15416,8757 +25,214 @@ msgstr "" msgid "" "\n" -" Set default (fallback) group for all unmatched entries.\n" -" " +"Get information about installed IPA servers.\n" msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" -"\n" -" Exibir informação acerca de uma regra de membro automática.\n" -" " - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -#, fuzzy -msgid "An IPA master host cannot be deleted or disabled" -msgstr "Esta entrada não pode estar ativada ou desativada" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, fuzzy, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "não são pertimidas opções" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Permissions\n" -msgstr "Tipo de permissão" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -msgid "" -"\n" -"Managed permissions\n" -msgstr "" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "must be enclosed in parentheses" -msgstr "" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, python-format -msgid "Deprecated; use %s" -msgstr "" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, python-format -msgid "Entry %s not found" -msgstr "" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, python-format -msgid "Entry %s does not exist" -msgstr "" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -msgid "Help topic" -msgstr "" - -msgid "Version" -msgstr "" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "Nome do comando" - -#, fuzzy -msgid "Display information about a command." -msgstr "Exibir informação acerca de um utilizador." - -#, fuzzy -msgid "Search for commands." -msgstr "Pesquisar por interligações." - -msgid "Return command defaults" -msgstr "" - -#, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "" - -#, fuzzy -msgid "Display information about a class." -msgstr "Exibir informação acerca de um utilizador." - -#, fuzzy -msgid "Search for classes." -msgstr "Pesquisar por interligações." - -#, fuzzy -msgid "Display information about a help topic." -msgstr "Exibir informação acerca de uma delegação." - -#, fuzzy -msgid "Search for help topics." -msgstr "Pesquisar por interligações." - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "Nome do comando" - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -#, fuzzy -msgid "Display information about a command parameter." -msgstr "Exibir informação acerca de um grupo nomeado." - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -#, fuzzy -msgid "Display information about a command output." -msgstr "Exibir informação acerca de um grupo nomeado." - -#, fuzzy -msgid "Search for command outputs." -msgstr "Pesquisar por interligações." - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -#, fuzzy -msgid "AD Trust setup" -msgstr "Interligações" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -#, fuzzy -msgid "trust" -msgstr "interligações" - -msgid "trusts" -msgstr "interligações" - -msgid "Trusts" -msgstr "Interligações" - -#, fuzzy -msgid "Trust" -msgstr "Interligações" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "Trust direction" -msgstr "" - -#, fuzzy -msgid "Trust type" -msgstr "Interligações" - -#, fuzzy -msgid "Trust status" -msgstr "Interligações" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -#, fuzzy -msgid "trust type" -msgstr "interligações" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" -msgstr[1] "" - -msgid "trust configuration" -msgstr "" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -#, fuzzy -msgid "trust domains" -msgstr "interligações" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -msgid "Vault configuration" -msgstr "" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -msgid "Key wrapping algorithm" -msgstr "" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." -msgstr "" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "Principal alias" -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -msgid "External IdP configuration" -msgstr "" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "Certificate mapping data" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -msgid "Issuer" -msgstr "" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject" -msgstr "" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -msgid "users cannot be added when user category='all'" -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "" - -#, python-format -msgid "%i services added." -msgstr "" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "Exibir informação acerca de um grupo nomeado." - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -msgid "User logins" -msgstr "" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" -msgstr[1] "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "must be at least 10" -msgstr "" - -msgid "configuration options" -msgstr "" - -msgid "Configuration" -msgstr "" - -msgid "Maximum hostname length" -msgstr "" - -msgid "Enable adding subids to new users" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -msgid "IPA DNS servers" -msgstr "" - -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Setup SID configuration" -msgstr "" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -msgid "Add SIDs" -msgstr "" - -msgid "Add SIDs for existing users and groups" -msgstr "" - -msgid "NetBIOS name of the IPA domain" -msgstr "" - -#, fuzzy -msgid "Empty domain is not allowed" -msgstr "não são pertimidas opções" - -#, fuzzy, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "'%(name)s' inválido: %(error)s" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "not allowed to enable SID generation" -msgstr "" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -msgid "Failed to call DBus" -msgstr "" - -msgid "Configuration of SID failed. See details in the error log" -msgstr "" - -msgid "The group doesn't exist" -msgstr "" - -#, fuzzy, python-format -msgid "attribute \"%s\" not allowed" -msgstr "não são pertimidas opções" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, fuzzy, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "erro no servidor '%(server)s': %(error)s" - -msgid "SELinux user map default user not in order list" -msgstr "" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" "\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, python-format -msgid "%s Record" -msgstr "" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" +"Obter informação acerca dos servidores IPA.\n" #, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "Cliente %(cver)s incompatível com servidor %(sver)s no '%(server)s'" #, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -msgid "Priority (order)" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" +msgid "%(exception)s" +msgstr "%(exception)s" #, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -#, fuzzy -msgid "Only one zone type is allowed per zone name" -msgstr "Só é permitido um valor" +msgid "%(info)s" +msgstr "%(info)s" #, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "Esta entrada já existe" +msgid "%(line)s" +msgstr "%(line)s" #, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -msgid "Default time to live" -msgstr "" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" +msgid "%(reason)s" +msgstr "%(reason)s" #, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "is required" +msgid "'%(name)s' is required" msgstr "'%(name)s' é obrigatório" -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "" - -msgid "DNS configuration options" -msgstr "" - -msgid "DNS Global Configuration" -msgstr "" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -#, fuzzy -msgid "DNS Forward Zone" -msgstr "Política de reencaminhamento" - -msgid "Please specify forwarders." -msgstr "" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -msgid "Result of the command" -msgstr "" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host" -msgstr "" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "Serial Number" -msgstr "" - -msgid "Serial Number (hex)" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" - -msgid "Invalid URI: not an https scheme" -msgstr "" - -msgid "Invalid URI: missing netloc" -msgstr "" - -msgid "Identity Provider server" -msgstr "" - -msgid "Identity Provider servers" -msgstr "" - -msgid "Identity Provider server name" -msgstr "" - -msgid "Authorization URI" -msgstr "" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -msgid "Token URI" -msgstr "" - -msgid "Token endpoint" -msgstr "" - -msgid "User info URI" -msgstr "" - -msgid "User information endpoint" -msgstr "" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -msgid "Client identifier" -msgstr "" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -#, fuzzy -msgid "Add a new Identity Provider server." -msgstr "Exibir informação acerca do servidor proxy RADIUS." - -#, python-format -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -msgid "Base URL" -msgstr "" - -msgid "Base URL for IdP provider templates" -msgstr "" - -msgid "unknown provider" -msgstr "" - -msgid "value is missing" -msgstr "" - -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "" - -#, fuzzy -msgid "Delete an Identity Provider server." -msgstr "Exibir informação acerca do servidor proxy RADIUS." - -#, python-format -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Modify an Identity Provider server." -msgstr "Modificar informação acerca de um servidor IPA" - -#, python-format -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Search for Identity Provider servers." -msgstr "Pesquisar por interligações." - -#, python-format -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "Display information about an Identity Provider server." -msgstr "Exibir informação acerca de um utilizador." - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Apply" -msgstr "" - -msgid "Rebuild auto membership" -msgstr "" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -#, fuzzy -msgid "Actions" -msgstr "%(exception)s" - -msgid "Add" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -msgid "Direct Membership" -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -msgid "No entries." -msgstr "" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -#, fuzzy -msgid "Remove" -msgstr "Remover interligações" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -msgid "Show Results" -msgstr "" - -msgid "Authentication indicators" -msgstr "" - -msgid "Authentication indicator" -msgstr "" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -msgid "RADIUS" -msgstr "" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "External Identity Provider" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "" - -msgid "Activate" -msgstr "" - -msgid "Add and Add Another" -msgstr "" - -msgid "Add and Close" -msgstr "" - -msgid "Add and Edit" -msgstr "" - -msgid "Add Many" -msgstr "" - -msgid "Back" -msgstr "" - -msgid "Cancel" -msgstr "" - -msgid "Clear" -msgstr "" - -msgid "Clear all fields on the page." -msgstr "" - -msgid "Close" -msgstr "" - -msgid "Disable" -msgstr "" - -msgid "Download" -msgstr "" - -msgid "Download certificate as PEM formatted file." -msgstr "" - -msgid "Edit" -msgstr "" - -msgid "Enable" -msgstr "" - -msgid "Find" -msgstr "" - -msgid "Get" -msgstr "" - -msgid "Hide" -msgstr "" - -msgid "Issue" -msgstr "" - -msgid "Match" -msgstr "" - -msgid "Match users according to certificate." -msgstr "" - -msgid "Migrate" -msgstr "" - -msgid "OK" -msgstr "" - -msgid "Refresh" -msgstr "" - -msgid "Reload current settings from the server." -msgstr "" - -msgid "Delete" -msgstr "" - -msgid "Remove hold" -msgstr "" - -msgid "Reset" -msgstr "" - -msgid "Reset Password" -msgstr "" - -msgid "Reset Password and Log in" -msgstr "" - -msgid "Restore" -msgstr "" - -msgid "Retry" -msgstr "" - -msgid "Revert" -msgstr "" - -msgid "Revoke" -msgstr "" - -msgid "Save" -msgstr "" - -msgid "Set" -msgstr "" - -msgid "Show" -msgstr "" - -msgid "Stage" -msgstr "" - -msgid "Update" -msgstr "" - -msgid "View" -msgstr "" - -msgid "Customization" -msgstr "" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "" - -msgid "Expand All" -msgstr "" - -msgid "General" -msgstr "" - -msgid "Identity Settings" -msgstr "Configurações de Identidade" - -#, fuzzy -msgid "Record Settings" -msgstr "Configurações de Identidade" - -#, fuzzy, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "Configurações de Identidade" - -msgid "Back to Top" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -msgid "Add custom value" -msgstr "" - -msgid "Available" -msgstr "" - -msgid "Some operations failed." -msgstr "" - -#, fuzzy -msgid "Operations Error" -msgstr "Erro de sessão" - -msgid "Confirmation" -msgstr "" - -msgid "Custom value" -msgstr "" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -msgid "Unsaved Changes" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Edit ${entity}" -msgstr "Identidade" - -msgid "Hide details" -msgstr "" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -msgid "Redirection" -msgstr "" - -msgid "Select entries to be removed." -msgstr "" - -msgid "Result" -msgstr "" - -msgid "Show details" -msgstr "" - -msgid "Success" -msgstr "" - -#, fuzzy -msgid "Validation error" -msgstr "Erro de sessão" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, fuzzy, python-brace-format -msgid "An error has occurred (${error})" -msgstr "ocorreu um erro interno " - -msgid "HTTP Error" -msgstr "" - -msgid "Internal Error" -msgstr "" - -msgid "IPA Error" -msgstr "" - -msgid "No response" -msgstr "" - -msgid "Unknown Error" -msgstr "" - -msgid "URL" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -#, fuzzy -msgid "Settings" -msgstr "Configurações de Identidade" - -msgid "Search" -msgstr "" - -msgid "False" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Allowed to create keytab" -msgstr "" - -msgid "Allowed to retrieve keytab" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Add Kerberos Principal Alias" -msgstr "" - -msgid "New kerberos principal alias" -msgstr "" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "" - -msgid "Authenticating" -msgstr "" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -msgid "Kerberos Principal you entered is expired" -msgstr "" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -msgid "Log In Using Certificate" -msgstr "" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "" - -msgid "Synchronizing" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -msgid "number of passwords" -msgstr "" - -msgid "seconds" -msgstr "" - -msgid "Migrating" -msgstr "" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -msgid "Password migration was not successful" -msgstr "" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -msgid "Password migration was successful" -msgstr "" - -msgid "Attribute" -msgstr "" - -msgid "Add delegation" -msgstr "" - -msgid "Remove delegations" -msgstr "" - -#, fuzzy -msgid "Add permission" -msgstr "Tipo de permissão" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove permissions" -msgstr "Remover interligações" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove privileges" -msgstr "Remover interligações" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Role Settings" -msgstr "Configurações de Identidade" - -msgid "Add role" -msgstr "" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove roles" -msgstr "Remover interligações" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -msgid "Add self service permission" -msgstr "" - -#, fuzzy -msgid "Remove self service permissions" -msgstr "Exibir informação acerca de uma permissão de serviço automático." - -msgid "Add rule" -msgstr "" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to change default group?" -msgstr "" - -msgid "Default host group" -msgstr "" - -msgid "Default user group" -msgstr "" - -msgid "Exclusive" -msgstr "" - -msgid "Expression" -msgstr "" - -msgid "Host group rule" -msgstr "" - -msgid "Host group rules" -msgstr "" - -msgid "Inclusive" -msgstr "" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -msgid "User group rule" -msgstr "" - -msgid "User group rules" -msgstr "" - -msgid "Add automount key" -msgstr "" - -#, fuzzy -msgid "Remove automount keys" -msgstr "Remover interligações" - -msgid "Add automount location" -msgstr "" - -msgid "Automount Location Settings" -msgstr "" - -msgid "Remove automount locations" -msgstr "" - -msgid "Add automount map" -msgstr "" - -msgid "Map Type" -msgstr "" - -msgid "Direct" -msgstr "" - -msgid "Indirect" -msgstr "" - -#, fuzzy -msgid "Remove automount maps" -msgstr "Remover interligações" - -msgid "Add certificate authority" -msgstr "" - -msgid "Remove certificate authorities" -msgstr "" - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -msgid "All" -msgstr "" - -msgid "Any CA" -msgstr "" - -msgid "Any Host" -msgstr "" - -msgid "Any Service" -msgstr "" - -msgid "Any Profile" -msgstr "" - -msgid "Anyone" -msgstr "" - -msgid "Rule status" -msgstr "" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -msgid "Remove CA ACLs" -msgstr "" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -msgid "Specified CAs" -msgstr "" - -msgid "Specified Hosts and Groups" -msgstr "" - -msgid "Specified Profiles" -msgstr "" - -msgid "Specified Services and Groups" -msgstr "" - -msgid "Specified Users and Groups" -msgstr "" - -msgid "Permitted to have certificates issued" -msgstr "" - -msgid "Remove certificate profiles" -msgstr "" - -msgid "AA Compromise" -msgstr "" - -msgid "Add principal" -msgstr "" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" - -msgid "Certificates" -msgstr "" - -msgid "Certificate Hold" -msgstr "" - -msgid "Cessation of Operation" -msgstr "" - -#, fuzzy -msgid "Common Name" -msgstr "Nome do comando" - -msgid "the certificate with serial number " -msgstr "" - -msgid "Expires On" -msgstr "" - -msgid "Issued on from" -msgstr "" - -msgid "Issued on to" -msgstr "" - -msgid "Maximum serial number" -msgstr "" - -msgid "Minimum serial number" -msgstr "" - -msgid "Revoked on from" -msgstr "" - -msgid "Revoked on to" -msgstr "" - -msgid "Valid not after from" -msgstr "" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -msgid "Fingerprints" -msgstr "" - -msgid "Get Certificate" -msgstr "" - -msgid "Certificate Hold Removed" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -msgid "Issue new certificate" -msgstr "" - -msgid "Issued By" -msgstr "" - -msgid "Issued On" -msgstr "" - -msgid "Issued To" -msgstr "" - -msgid "Key Compromise" -msgstr "" - -msgid "No Valid Certificate" -msgstr "" - -msgid "New Certificate" -msgstr "" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -msgid "Note" -msgstr "" - -msgid "Organizational Unit" -msgstr "" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -msgid "Privilege Withdrawn" -msgstr "" - -msgid "Reason for Revocation" -msgstr "" - -msgid "Remove certificate hold" -msgstr "" - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -msgid "Certificate requested" -msgstr "" - -msgid "Revoke certificate" -msgstr "" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -msgid "Certificate Revoked" -msgstr "" - -msgid "REVOKED" -msgstr "" - -msgid "SHA1 Fingerprint" -msgstr "" - -msgid "SHA256 Fingerprint" -msgstr "" - -msgid "Status" -msgstr "" - -msgid "Superseded" -msgstr "" - -msgid "Unspecified" -msgstr "" - -msgid "Valid Certificate Present" -msgstr "" - -msgid "Valid from" -msgstr "" - -msgid "Valid to" -msgstr "" - -msgid "Validity" -msgstr "" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -msgid "View Certificate" -msgstr "" - -msgid "Certificate Data" -msgstr "" - -msgid "Certificate For Match" -msgstr "" - -msgid "Certificate Mapping Match" -msgstr "" - -msgid "Matched Users" -msgstr "" - -msgid "User Login" -msgstr "" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -msgid "Configuration string" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -msgid "Remove certificate mapping data" -msgstr "" - -msgid "Issuer and subject" -msgstr "" - -msgid "Remove certificate identity mapping rules" -msgstr "" - -msgid "Group Options" -msgstr "" - -msgid "Search Options" -msgstr "" - -msgid "SELinux Options" -msgstr "" - -msgid "Server Options" -msgstr "" - -#, fuzzy -msgid "Service Options" -msgstr "%(exception)s" - -msgid "User Options" -msgstr "" - -#, fuzzy -msgid "Forward first" -msgstr "Política de reencaminhamento" - -msgid "Forwarding disabled" -msgstr "" - -#, fuzzy -msgid "Forward only" -msgstr "Política de reencaminhamento" - -#, fuzzy -msgid "Options" -msgstr "%(exception)s" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -msgid "Other Record Types" -msgstr "" - -msgid "Address not valid, can't redirect" -msgstr "" - -msgid "Create dns record" -msgstr "" - -msgid "Creating record." -msgstr "" - -msgid "Record creation failed." -msgstr "" - -msgid "Checking if record exists." -msgstr "" - -msgid "Record not found." -msgstr "" - -msgid "Redirection to PTR record" -msgstr "" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -msgid "Target reverse zone not found." -msgstr "" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -msgid "Standard Record Types" -msgstr "" - -msgid "Records for DNS Zone" -msgstr "" - -msgid "Record Type" -msgstr "" - -msgid "Add DNS zone" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -msgid "DNS Zone Settings" -msgstr "" - -msgid "Remove DNS zones" -msgstr "" - -#, fuzzy -msgid "Remove Permission" -msgstr "Remover interligações" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Level" -msgstr "" - -msgid "Set Domain Level" -msgstr "" - -msgid "Add user group" -msgstr "" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -msgid "Group Settings" -msgstr "" - -msgid "External" -msgstr "" - -msgid "Groups" -msgstr "" - -msgid "Group categories" -msgstr "" - -msgid "Change to external group" -msgstr "" - -msgid "Change to POSIX group" -msgstr "" - -msgid "Non-POSIX" -msgstr "" - -msgid "POSIX" -msgstr "" - -#, fuzzy -msgid "Remove user groups" -msgstr "Remover interligações" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -msgid "Group Type" -msgstr "" - -msgid "Add HBAC rule" -msgstr "" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -msgid "Accessing" -msgstr "" - -#, fuzzy -msgid "Remove HBAC rules" -msgstr "Remover interligações" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -msgid "Via Service" -msgstr "" - -msgid "Who" -msgstr "" - -msgid "Add HBAC service" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -msgid "Remove HBAC services" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -msgid "Add HBAC service group" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -msgid "Remove HBAC service groups" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -msgid "Access Denied" -msgstr "" - -msgid "Access Granted" -msgstr "" - -msgid "Include Disabled" -msgstr "" - -msgid "Include Enabled" -msgstr "" - -msgid "HBAC Test" -msgstr "" - -msgid "Matched" -msgstr "" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" - -msgid "Rules" -msgstr "" - -msgid "Run Test" -msgstr "" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -msgid "Unmatched" -msgstr "" - -msgid "Add host" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -msgid "Host Certificate" -msgstr "" - -msgid "Host Name" -msgstr "" - -msgid "Delete Key, Unprovision" -msgstr "" - -#, fuzzy -msgid "Host Settings" -msgstr "Configurações de Identidade" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -msgid "Generate OTP" -msgstr "" - -msgid "Generated OTP" -msgstr "" - -msgid "Kerberos Key" -msgstr "" - -msgid "Kerberos Key Not Present" -msgstr "" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -msgid "One-Time Password" -msgstr "" - -msgid "One-Time Password Not Present" -msgstr "" - -msgid "One-Time Password Present" -msgstr "" - -msgid "Reset OTP" -msgstr "" - -msgid "Reset One-Time Password" -msgstr "" - -msgid "Set OTP" -msgstr "" - -msgid "OTP set" -msgstr "" - -msgid "Set One-Time Password" -msgstr "" - -#, fuzzy -msgid "Remove hosts" -msgstr "Remover interligações" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -msgid "Unprovision" -msgstr "" - -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -msgid "Add host group" -msgstr "" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -msgid "Host Group Settings" -msgstr "" - -#, fuzzy -msgid "Remove host groups" -msgstr "Remover interligações" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -#, fuzzy -#| msgid "Identity Settings" -msgid "Identity provider details" -msgstr "Configurações de Identidade" - -msgid "Verify secret" -msgstr "" - -msgid "User to override" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -msgid "Profile" -msgstr "" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -msgid "Enter trusted group name." -msgstr "" - -msgid "Add ID view" -msgstr "" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -msgid "Apply to host groups" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -msgid "Remove ID views" -msgstr "" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -msgid "Un-apply from host groups" -msgstr "" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -msgid "Un-apply" -msgstr "" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "Add netgroup" -msgstr "" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Netgroup Settings" -msgstr "Configurações de Identidade" - -#, fuzzy -msgid "Remove netgroups" -msgstr "Remover interligações" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -msgid "Add OTP token" -msgstr "" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -msgid "Configure your token" -msgstr "" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -#, fuzzy -msgid "OTP Token Settings" -msgstr "Configurações de Identidade" - -msgid "Disable token" -msgstr "" - -msgid "Enable token" -msgstr "" - -#, fuzzy -msgid "Remove OTP tokens" -msgstr "Remover interligações" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "" - -msgid "Show configuration uri" -msgstr "" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -msgid "Add Custom Attribute" -msgstr "" - -#, fuzzy -msgid "Permission settings" -msgstr "Tipo de permissão" - -msgid "Attribute breakdown" -msgstr "" - -msgid "Privilege Settings" -msgstr "" - -msgid "Public key:" -msgstr "" - -#, fuzzy -msgid "Set public key" -msgstr "chave SSh pública inválida" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" +msgid "A list of LDAP entries" +msgstr "Uma lista de entradas LDAP" msgid "Add password policy" msgstr "Adicionar política de palavra-passe" -msgid "Password Policy" -msgstr "Política de Palavra-passe" +msgid "Already registered" +msgstr "Já registado" -#, fuzzy -msgid "Remove password policies" -msgstr "política de palavra-passe" - -msgid "Add ID range" -msgstr "" - -#, fuzzy -msgid "Range Settings" -msgstr "Configurações de Identidade" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -msgid "Domain SID" -msgstr "" - -msgid "Secondary RID base" -msgstr "" - -#, fuzzy -msgid "Remove ID ranges" -msgstr "Remover interligações" - -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -msgid "Detect" -msgstr "" - -msgid "Local domain" -msgstr "" - -#, fuzzy -msgid "IPA trust" -msgstr "interligações" - -msgid "Active Directory winsync" -msgstr "" - -msgid "Add RADIUS server" -msgstr "" - -msgid "RADIUS Proxy Server Settings" -msgstr "" - -msgid "Remove RADIUS servers" -msgstr "" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -msgid "Force Update" -msgstr "" - -msgid "Add SELinux user map" -msgstr "" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -msgid "Server Roles" -msgstr "" - -msgid "Server Role" -msgstr "" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -msgid "Delete Server" -msgstr "" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -msgid "Add service" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -msgid "Service Certificate" -msgstr "" - -#, fuzzy -msgid "Service Settings" -msgstr "Configurações de Identidade" - -msgid "Provisioning" -msgstr "" - -#, fuzzy -msgid "Remove services" -msgstr "Remover interligações" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -msgid "Unprovisioning service" -msgstr "" - -msgid "Service unprovisioned" -msgstr "" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "" - -#, fuzzy -msgid "SSH public keys" -msgstr "chave SSh pública inválida" - -#, fuzzy -msgid "SSH public key:" -msgstr "chave SSh pública inválida" - -msgid "Set SSH key" -msgstr "" - -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" - -msgid "Add stage user" -msgstr "" - -msgid "Stage users" -msgstr "" - -msgid "Preserved users" -msgstr "" - -#, fuzzy -msgid "Remove preserved users" -msgstr "Remover interligações" - -#, fuzzy -msgid "Remove stage users" -msgstr "Remover interligações" - -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -msgid "User categories" -msgstr "" - -msgid "Add subid" -msgstr "" - -msgid "Assigned subids" -msgstr "" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -msgid "Add sudo command" -msgstr "" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -msgid "Remove sudo commands" -msgstr "" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -msgid "Add sudo command group" -msgstr "" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -msgid "Remove sudo command groups" -msgstr "" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -msgid "Add sudo rule" -msgstr "" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "" - -#, fuzzy -msgid "Any Command" +msgid "Command name" msgstr "Nome do comando" -msgid "Any Group" -msgstr "" +msgid "Command not implemented" +msgstr "Comando não implementado" -msgid "Run Commands" -msgstr "" +msgid "Display information about a DNS forward zone." +msgstr "Exibir informação acerca de uma zona de reencaminhamento DNS." -msgid "Deny" -msgstr "" +msgid "Display information about a DNS zone (SOA record)." +msgstr "Exibir informação acerca de uma zona DNS (registo SOA)." -msgid "Access this host" -msgstr "" +msgid "Display information about a RADIUS proxy server." +msgstr "Exibir informação acerca do servidor proxy RADIUS." -msgid "Option added" -msgstr "" +msgid "Display information about a delegation." +msgstr "Exibir informação acerca de uma delegação." -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" +msgid "Display information about a named group." +msgstr "Exibir informação acerca de um grupo nomeado." -#, fuzzy -msgid "Remove sudo rules" -msgstr "Remover interligações" +msgid "Display information about a self-service permission." +msgstr "Exibir informação acerca de uma permissão de serviço automático." -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" +msgid "Display information about a user." +msgstr "Exibir informação acerca de um utilizador." -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" +msgid "Display information about an IPA location." +msgstr "Exibir informação acerca de uma localização IPA" -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" +msgid "Display information about password policy." +msgstr "Exibir informação acerca da política de palavra-passe." -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" +msgid "Filename is empty" +msgstr "O nome de ficheiro está em branco" -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" +msgid "Forward policy" +msgstr "Política de reencaminhamento" -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -msgid "Specified Commands and Groups" -msgstr "" - -msgid "Specified Groups" -msgstr "" - -#, fuzzy -msgid "Remove sudo options" -msgstr "Remover interligações" - -msgid "Autogenerated" -msgstr "" - -msgid "Segment details" -msgstr "" - -msgid "Replication configuration" -msgstr "" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -msgid "Account" -msgstr "" - -#, fuzzy -msgid "Add trust" -msgstr "interligações" - -msgid "Administrative account" -msgstr "" - -msgid "SID blocklists" -msgstr "" - -#, fuzzy -msgid "Trust Settings" -msgstr "Configurações de Identidade" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -msgid "Pre-shared password" -msgstr "" - -msgid "Remove trusts" -msgstr "Remover interligações" - -msgid "Remove domains" -msgstr "" - -msgid "Alternative UPN suffixes" -msgstr "" - -msgid "User attributes for SMB services" -msgstr "" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - -#, fuzzy -msgid "Account Settings" -msgstr "Configurações de Identidade" - -msgid "Account Status" -msgstr "" - -msgid "Active users" -msgstr "" - -msgid "Add user" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -msgid "Auto assign subordinate ids" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "" - -#, fuzzy -msgid "Contact Settings" -msgstr "Configurações de Identidade" - -msgid "Delete mode" -msgstr "" - -msgid "Employee Information" -msgstr "" - -msgid "Error changing account status" -msgstr "" - -msgid "Password expiration" -msgstr "" - -msgid "Mailing Address" -msgstr "" - -msgid "Misc. Information" -msgstr "" - -msgid "delete" -msgstr "" - -msgid "preserve" -msgstr "" - -msgid "No private group" -msgstr "" - -#, fuzzy -msgid "Remove users" -msgstr "Remover interligações" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Unlock" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -msgid "Members" -msgstr "" - -msgid "My User Vaults" -msgstr "" - -msgid "Owners" -msgstr "" - -#, fuzzy -msgid "Remove vaults" -msgstr "Remover interligações" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -msgid "Service Vaults" -msgstr "" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -msgid "Vault Type" -msgstr "" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -msgid "User Vaults" -msgstr "" - -#, fuzzy -msgid "Current password is required" -msgstr "'%(name)s' é obrigatório" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -msgid "First OTP" -msgstr "" - -#, fuzzy -msgid "New password is required" -msgstr "'%(name)s' é obrigatório" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Password change complete" -msgstr "" - -msgid "Your password has expired. Please enter a new password." -msgstr "" - -#, fuzzy -msgid "Passwords must match" -msgstr "As palavras-passe não correspondem" - -msgid "Password reset was not successful." -msgstr "" - -msgid "Reset your password." -msgstr "" - -msgid "Second OTP" -msgstr "" - -msgid "Verify Password" -msgstr "" - -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -msgid "Some entries were not deleted" -msgstr "" - -msgid "Quick Links" -msgstr "" - -msgid "Select All" -msgstr "" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -msgid "Unselect All" -msgstr "" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "" - -msgid "Audit" -msgstr "" - -msgid "Authentication" -msgstr "" - -msgid "Automount" -msgstr "" - -msgid "DNS" -msgstr "" - -msgid "Host-Based Access Control" -msgstr "" +msgid "GECOS field" +msgstr "campo GECOS" msgid "Identity" msgstr "Identidade" -msgid "Network Services" -msgstr "" +msgid "Identity Settings" +msgstr "Configurações de Identidade" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Acesso insuficiente: %(info)s" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Pedido JSON-RPC inválido: %(error)s" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Erro Kerberos: %(major)s/%(minor)s" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "Referenciador HTTP ausente ou inválido,%(referer)s" + +msgid "Modify information about an IPA location." +msgstr "Modificar informação acerca de uma localização IPA" + +msgid "Modify information about an IPA server." +msgstr "Modificar informação acerca de um servidor IPA" + +msgid "Not registered yet" +msgstr "Ainda não registado" + +msgid "Only one value is allowed" +msgstr "Só é permitido um valor" + +msgid "Password Policy" +msgstr "Política de Palavra-passe" + +msgid "Passwords do not match" +msgstr "As palavras-passe não correspondem" + +msgid "Permission type" +msgstr "Tipo de permissão" msgid "Policy" msgstr "Política" -msgid "Role-Based Access Control" -msgstr "" +msgid "Remove trusts" +msgstr "Remover interligações" -msgid "Subordinate IDs" -msgstr "" +msgid "Search for trusts." +msgstr "Pesquisar por interligações." -msgid "Sudo" -msgstr "" +msgid "Session error" +msgstr "Erro de sessão" -msgid "Topology" -msgstr "" +msgid "The topic or command name." +msgstr "O nome do tópico ou do comando" -msgid "True" -msgstr "" +msgid "This command requires root access" +msgstr "Este comando requer acesso \"root\"" -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" +msgid "This entry already exists" +msgstr "Esta entrada já existe" -msgid "API Browser" -msgstr "" +msgid "This entry cannot be enabled or disabled" +msgstr "Esta entrada não pode estar ativada ou desativada" -msgid "First" -msgstr "" +msgid "This entry is already a member" +msgstr "Esta entrada já é um membro" -msgid "Last" -msgstr "" +msgid "This entry is already disabled" +msgstr "Esta entrada já está desativada" -msgid "Next" -msgstr "" +msgid "This entry is already enabled" +msgstr "Esta entrada já está ativada" -msgid "Page" -msgstr "" +msgid "This entry is not a member" +msgstr "Esta entrada não é um membro" -msgid "Prev" -msgstr "" +msgid "Ticket expired" +msgstr "Pedido expirado" -msgid "Undo" -msgstr "" +msgid "To get command help, use:" +msgstr "Para obter ajuda do comando, utilize:" -msgid "Undo this change." -msgstr "" +msgid "Topic commands:" +msgstr "Comandos do tópico:" -msgid "Undo All" -msgstr "" +msgid "Topic or Command" +msgstr "Tópico ou Comando" -msgid "Undo all changes in this field." -msgstr "" +msgid "Trusts" +msgstr "Interligações" -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -msgid "Must be a decimal number" -msgstr "" - -msgid "Format error" -msgstr "" - -msgid "Must be an integer" -msgstr "" - -msgid "Not a valid IP address" -msgstr "" - -msgid "Not a valid IPv4 address" -msgstr "" - -msgid "Not a valid IPv6 address" -msgstr "" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -msgid "Parse error" -msgstr "" - -msgid "Must be a positive number" -msgstr "" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -msgid "Required field" -msgstr "" - -msgid "Unsupported value" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -msgid "IdP max life" -msgstr "" - -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "" - -msgid "IdP max renew" -msgstr "" - -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "" +msgid "an internal error has occurred" +msgstr "ocorreu um erro interno " #, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "ocorreu um erro interno no servidor em '%(server)s'" #, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "não é possível ligar a '%(uri)s': %(error)s" #, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" +msgid "error on server '%(server)s': %(error)s" +msgstr "erro no servidor '%(server)s': %(error)s" -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" +msgid "incorrect type" +msgstr "tipo incorreto" #, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" +msgid "invalid '%(name)s': %(error)s" +msgstr "'%(name)s' inválido: %(error)s" -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" +msgid "invalid SSH public key" +msgstr "chave SSh pública inválida" -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" +msgid "options are not allowed" +msgstr "não são pertimidas opções" msgid "password policy" msgstr "política de palavra-passe" -#, fuzzy -msgid "password policies" -msgstr "política de palavra-passe" - -#, fuzzy -msgid "Password Policies" -msgstr "Política de Palavra-passe" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "Grace login limit" -msgstr "" - -msgid "Number of LDAP authentications allowed after expiration" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "" - -#, fuzzy -msgid "cannot delete global password policy" -msgstr "Adicionar política de palavra-passe" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -msgid "service" -msgstr "" - -msgid "services" -msgstr "" - -msgid "Service principal alias" -msgstr "" - -msgid "Base-64 encoded service certificate" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." -msgstr "" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -msgid "Add a new SMB service." -msgstr "" - -msgid "SMB service NetBIOS name" -msgstr "" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a service" -msgstr "" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "givenname is required" -msgstr "'%(name)s' é obrigatório" - -#, fuzzy -msgid "sn is required" -msgstr "'%(name)s' é obrigatório" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "Display information about an ID override." -msgstr "Exibir informação acerca de um utilizador." - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -msgid "Certificate Authority" -msgstr "" - -msgid "Certificate Authorities" -msgstr "" - -msgid "Name for referencing the CA" -msgstr "" - -msgid "Description of the purpose of the CA" -msgstr "" - -msgid "Authority ID" -msgstr "" - -msgid "Dogtag Authority ID" -msgstr "" - -msgid "Subject DN" -msgstr "" - -msgid "Subject Distinguished Name" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Issuer Distinguished Name" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -msgid "RSN Version" -msgstr "" - -msgid "Random Serial Number Version" -msgstr "" - -#, fuzzy -msgid "Search for CAs." -msgstr "Pesquisar por interligações." - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "" -msgstr[1] "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "Display the properties of a CA." -msgstr "" - -msgid "Create a CA." -msgstr "" - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -msgid "Modify CA configuration." -msgstr "" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "IPA CA cannot be disabled" -msgstr "Esta entrada não pode estar ativada ou desativada" - -msgid "Enable a CA." -msgstr "" - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Subject email address" -msgstr "" - -msgid "Subject DNS name" -msgstr "" - -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -msgid "Subject URI" -msgstr "" - -msgid "Subject IP Address" -msgstr "" - -msgid "Subject OID" -msgstr "" - -msgid "Subject UPN" -msgstr "" - -msgid "Subject Kerberos principal name" -msgstr "" - -msgid "Subject Other Name" -msgstr "" - -msgid "Serial number (hex)" -msgstr "" - -msgid "Request status" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -#, fuzzy -msgid "Status of the certificate" -msgstr "Pesquisar por interligações." - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" -msgstr[1] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -#, fuzzy -msgid "command" -msgstr "Comandos do tópico:" - -#, fuzzy -msgid "commands" -msgstr "Comandos do tópico:" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -msgid "runAs groups" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" -msgstr[1] "" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Preserved user \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "%s: user is already preserved" -msgstr "Esta entrada já está ativada" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "user \"%s\" is already active" -msgstr "Esta entrada já está ativada" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -msgid "Password grace count" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, fuzzy, python-format -msgid "Account disabled: %(disabled)s" -msgstr "Esta entrada já está desativada" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" -msgstr "" - -msgid "Request must be a dict" -msgstr "" - -msgid "Request is missing \"method\"" -msgstr "" - -msgid "Request is missing \"params\"" -msgstr "" - -msgid "params must be a list" -msgstr "" - -msgid "params must contain [args, options]" -msgstr "" - -msgid "params[0] (aka args) must be a list" -msgstr "" - -msgid "params[1] (aka options) must be a dict" -msgstr "" - -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" - -msgid "CIFS server denied your credentials" -msgstr "" - -msgid "communication with CIFS server was unsuccessful" -msgstr "" - -msgid "AD domain controller" -msgstr "" - -msgid "unsupported functional level" -msgstr "" - -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" - -msgid "Cannot find specified domain or server name" -msgstr "" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" - -msgid "At least the domain or IP address should be specified" -msgstr "" - -#, python-format -msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" -msgstr "" - -msgid "no trusted domain is configured" -msgstr "" - -msgid "domain is not configured" -msgstr "" - -msgid "SID is not valid" -msgstr "" - -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "" - -msgid "SID does not match any trusted domain" -msgstr "" - -#, fuzzy -msgid "Trust setup" -msgstr "Interligações" - -msgid "Our domain is not configured" -msgstr "" - -msgid "No trusted domain is not configured" -msgstr "" - -msgid "trusted domain object" -msgstr "" - -msgid "domain is not trusted" -msgstr "" - -msgid "no trusted domain matched the specified flat name" -msgstr "" - -msgid "trusted domain object not found" -msgstr "" - -msgid "Object does not belong to a trusted domain" -msgstr "" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "" - -msgid "Ambiguous search, user domain was not specified" -msgstr "" - -msgid "Trusted domain did not return a unique object" -msgstr "" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "" - -msgid "trusted domain user not found" -msgstr "" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "" - -msgid "CIFS credentials object" -msgstr "" - -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "" - -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" - -#, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" - -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" - -msgid "Credentials" -msgstr "" - -msgid "Missing credentials for cross-forest communication" -msgstr "" - -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" - -#, python-format -msgid "must equal %r" -msgstr "" - -msgid "Hello world" -msgstr "" +msgid "trusts" +msgstr "interligações" #, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "" - -msgid "must be at least 1" -msgstr "" - -msgid "Out of memory\n" -msgstr "" - -msgid "Warning unrecognized encryption type.\n" -msgstr "" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -msgid "Out of memory!?\n" -msgstr "" - -msgid "Enctype comparison failed!\n" -msgstr "" - -msgid "Password is too long!\n" -msgstr "" - -msgid "Failed to create random key!\n" -msgstr "" - -msgid "Failed to create key!\n" -msgstr "" - -msgid "Bad or unsupported salt type.\n" -msgstr "" - -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" +msgid "unknown command '%(name)s'" +msgstr "comando desconhecido '%(name)s'" diff --git a/po/pt_BR.po b/po/pt_BR.po index 9a07dd160..ad8719850 100644 --- a/po/pt_BR.po +++ b/po/pt_BR.po @@ -17,12030 +17,71 @@ msgstr "" "Plural-Forms: nplurals=2; plural=(n != 1);\n" "X-Generator: Weblate 4.5.1\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, c-format -msgid "out of memory\n" -msgstr "" - -#, c-format -msgid "read error\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "Incapaz de analisar o nome principal\n" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "krb5_parse_name %1$d: %2$s\n" - -#, c-format -msgid "Removing principal %s\n" -msgstr "Removendo principal %s\n" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "Falha ao abrir o keytab\n" - -#, c-format -msgid "principal not found\n" -msgstr "Principal não encontrado\n" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "krb5_kt_get_entry %1$d: %2$s\n" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "Incapaz de remover entrada\n" - -#, c-format -msgid "kvno %d\n" -msgstr "kvno %d\n" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "krb5_kt_remove_entry %1$d: %2$s\n" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "Falha ao definir o cursor '%1$s'\n" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "Incapaz de analisar o principal\n" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "krb5_unparse_name %1$d: %2$s\n" - -#, c-format -msgid "realm not found\n" -msgstr "realm não encontrado\n" - -msgid "Print debugging information" -msgstr "Imprimir informações de depuração" - -msgid "Debugging output" -msgstr "Saída de depuração" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"O principal a ser removido do keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" - -msgid "Kerberos Service Principal Name" -msgstr "Nome principal do serviço Kerberos" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "Falha ao abrir o keytab\n" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, fuzzy, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "krb5_kt_get_entry %1$d: %2$s\n" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, fuzzy, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "Incapaz de analisar o principal\n" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, c-format -msgid "Out of memory \n" -msgstr "" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -msgid "SASL Bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to get result: %s\n" -msgstr "Falha ao definir o cursor '%1$s'\n" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, fuzzy, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "Falha ao definir o cursor '%1$s'\n" - -#, fuzzy, c-format -msgid "Failed to parse result: %s\n" -msgstr "Falha ao definir o cursor '%1$s'\n" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Out of Memory!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to create control!\n" -msgstr "Falha ao definir o cursor '%1$s'\n" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to get keytab!\n" -msgstr "Falha ao abrir o keytab\n" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to retrieve any keys" -msgstr "Falha ao abrir o keytab\n" - -#, fuzzy -msgid "Failed to decode control reply!\n" -msgstr "Falha ao abrir o keytab\n" - -#, c-format -msgid "Passwords do not match!\n" -msgstr "As senhas não coincidem!\n" - -#, fuzzy, c-format -msgid "Failed to open config file %s\n" -msgstr "Falha ao abrir o keytab\n" - -#, fuzzy, c-format -msgid "Failed to parse config file %s\n" -msgstr "Falha ao definir o cursor '%1$s'\n" - -#, fuzzy -msgid "Failed to resolve symlink to keytab.\n" -msgstr "Falha ao abrir o keytab\n" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Output debug info" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -msgid "Server Name" -msgstr "" - -#, fuzzy -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"O principal a ser removido do keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -msgid "LDAP password" -msgstr "" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -#, fuzzy -msgid "Path to the IPA CA certificate" -msgstr "deve ser um certificado" - -#, fuzzy -msgid "IPA CA certificate" -msgstr "deve ser um certificado" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -msgid "Enter LDAP password" -msgstr "" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" - -#, c-format -msgid "Discovered server %s\n" -msgstr "" - -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Using provided server %s\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -msgid "New Principal Password" -msgstr "" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, fuzzy, c-format -msgid "Invalid Service Principal Name\n" -msgstr "Nome principal do serviço Kerberos" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to open Keytab\n" -msgstr "Falha ao abrir o keytab\n" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to create key material\n" -msgstr "Falha ao abrir o keytab\n" - -#, fuzzy, c-format -msgid "Failed to get keytab\n" -msgstr "Falha ao abrir o keytab\n" - -#, fuzzy, c-format -msgid "Failed to add key to the keytab\n" -msgstr "Falha ao abrir o keytab\n" - -#, fuzzy, c-format -msgid "Failed to close the keytab\n" -msgstr "Falha ao abrir o keytab\n" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Out of memory!\n" -msgstr "" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "" - -#, c-format -msgid "Out of memory!" -msgstr "" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "" - -#, c-format -msgid "No values for %s" -msgstr "" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "Principal não encontrado\n" - -#, fuzzy, c-format -msgid "Host is already joined.\n" -msgstr "Esta entrada já está habilitada" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" - -#, c-format -msgid "json_dumps() failed\n" -msgstr "" - -#, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "" -"Solicitação JSON-RPC\n" -"%s\n" - -#, fuzzy, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "" -"Solicitação JSON-RPC\n" -"%s\n" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#, fuzzy, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "" -"Solicitação JSON-RPC\n" -"%s\n" - -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" - -#, c-format -msgid "fork() failed\n" -msgstr "" - -#, fuzzy, c-format -msgid "ipa-getkeytab not found\n" -msgstr "realm não encontrado\n" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "" - -#, c-format -msgid "child exited with %d\n" -msgstr "" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "" - -#, fuzzy, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "krb5_parse_name %1$d: %2$s\n" - -#, fuzzy, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "Erro ao armazenar credenciais no cache de credenciais: %s\n" - -#, fuzzy, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "não foram recebidas as credenciais de Kerberos" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "Erro ao armazenar credenciais no cache de credenciais: %s\n" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "" - -msgid "Quiet mode. Only errors are displayed." -msgstr "" - -msgid "Unenroll this host from IPA server" -msgstr "" - -msgid "Hostname of this server" -msgstr "" - -msgid "hostname" -msgstr "" - -msgid "IPA Server to use" -msgstr "" - -msgid "Specifies where to store keytab information." -msgstr "" - -msgid "filename" -msgstr "" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" - -msgid "LDAP password (if not using Kerberos)" -msgstr "" - -#, fuzzy -msgid "password" -msgstr "Confirmar (senha)" - -msgid "LDAP basedn" -msgstr "" - -msgid "basedn" -msgstr "" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "" - -#, fuzzy -msgid "Failed to add" -msgstr "Nenhum arquivo para ler" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" - -msgid "Unrevoked" -msgstr "" - -msgid "Error" -msgstr "" - -msgid "Input filename" -msgstr "" - -msgid "File to load the certificate from." -msgstr "" - -msgid "cannot specify both raw certificate and file" -msgstr "" - -msgid "Input file" -msgstr "" - -msgid "File to load the certificate from" -msgstr "" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "" - -msgid "Split DNS record to parts" -msgstr "" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" - -msgid "DNS resource record type" -msgstr "" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" - -msgid "No option to modify specific record provided." -msgstr "" - -msgid "Current DNS record contents:\n" -msgstr "" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "Modificar %(name)s \"%(value)s\"?" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -msgid "No option to delete specific record provided." -msgstr "" - -msgid "Delete all?" -msgstr "" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "Excluir %(name)s \"%(value)s\"?" - -msgid "Server will check DNS forwarder(s)." -msgstr "" - -msgid "This may take some time, please wait ..." -msgstr "" - -msgid "DNS forwarder" -msgstr "" - -msgid "file to store DNS records in nsupdate format" -msgstr "" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -msgid "Delete a user" -msgstr "" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - -msgid "maps not connected to /etc/auto.master:" -msgstr "" - -msgid "Import automount files for a specific location." -msgstr "" - -msgid "Master file" -msgstr "" - -msgid "Automount master file." -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" - -#, python-format -msgid "File %(file)s not found" -msgstr "Arquivo %(file)s não encontrado" - -#, python-format -msgid "key %(key)s already exists" -msgstr "a chave %(key)s já existe" - -#, python-format -msgid "map %(map)s already exists" -msgstr "o mapa %(map)s já existe" - -msgid "Imported maps:" -msgstr "" - -#, python-format -msgid "Added %(map)s" -msgstr "" - -msgid "Imported keys:" -msgstr "" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "" - -msgid "Ignored keys:" -msgstr "" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "" - -msgid "Duplicate maps skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(map)s" -msgstr "" - -msgid "Duplicate keys skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(key)s" -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -msgid "User ID" -msgstr "" - -msgid "Password" -msgstr "" - -msgid "First Code" -msgstr "" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - msgid "" "\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "Não foi possível ler \"%(filename)s\": %(exc)s" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "Não foi possível decodificar o arquivo \"%(filename)s\": %(exc)s" - -msgid "Invalid credentials" -msgstr "" - -#, fuzzy -msgid "Create a new vault." -msgstr "Cria um novo comando sudo." - -msgid "Vault password" -msgstr "" - -msgid "File containing the vault password" -msgstr "" - -msgid "File containing the vault public key" -msgstr "" - -msgid "Password can be specified only for symmetric vault" -msgstr "" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "" - -msgid "Password specified multiple times" -msgstr "" - -msgid "Public key specified multiple times" -msgstr "" - -msgid "Missing vault public key" -msgstr "" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "" - -msgid "Modify a vault." -msgstr "" - -#, fuzzy -msgid "Change password" -msgstr "Confirmar (senha)" - -msgid "Old vault password" -msgstr "" - -msgid "File containing the old vault password" -msgstr "" - -msgid "New vault password" -msgstr "" - -msgid "File containing the new vault password" -msgstr "" - -msgid "Old vault private key" -msgstr "" - -msgid "File containing the old vault private key" -msgstr "" - -msgid "File containing the new vault public key" -msgstr "" - -msgid "New public key specified multiple times" -msgstr "" - -msgid "Missing new vault public key" -msgstr "" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "" - -msgid "Binary data to archive" -msgstr "" - -msgid "File containing data to archive" -msgstr "" - -msgid "Override existing password" -msgstr "" - -msgid "Input data specified multiple times" -msgstr "" - -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" - -msgid "Invalid vault type" -msgstr "" - -msgid "Retrieve a data from a vault." -msgstr "" - -msgid "File to store retrieved data" -msgstr "" - -msgid "Vault private key" -msgstr "" - -msgid "File containing the vault private key" -msgstr "" - -msgid "Data" -msgstr "" - -msgid "Private key specified multiple times" -msgstr "" - -msgid "Missing vault private key" -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -#, fuzzy -msgid "ACI name" -msgstr "Nome de CLI" - -msgid "Permission" -msgstr "" - -msgid "Permission ACI grants access to" -msgstr "" - -msgid "User group" -msgstr "" - -msgid "User group ACI grants access to" -msgstr "" - -msgid "Permissions" -msgstr "" - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Attributes to which the permission applies" -msgstr "" - -msgid "Attributes" -msgstr "" - -msgid "Type" -msgstr "" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" - -msgid "Member of" -msgstr "" - -msgid "Member of a group" -msgstr "" - -msgid "Filter" -msgstr "" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "" - -msgid "Subtree" -msgstr "" - -msgid "Subtree to apply ACI to" -msgstr "" - -msgid "Target group" -msgstr "" - -msgid "Group to apply ACI to" -msgstr "" - -msgid "Target your own entry (self)" -msgstr "" - -msgid "Apply ACI to your own entry (self)" -msgstr "" - -#, fuzzy -msgid "Create new ACI." -msgstr "Cria um novo comando sudo." - -msgid "ACI prefix" -msgstr "" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" - -msgid "Test the ACI syntax but don't write anything" -msgstr "" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" - -msgid "User-friendly description of action performed" -msgstr "" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" - -msgid "Delete ACI." -msgstr "" - -msgid "True means the operation was successful" -msgstr "" - -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" +" Display information about an automember rule.\n" " " msgstr "" - -msgid "A string searched in all relevant object attributes" -msgstr "Uma string buscada em todos os atributos de objeto relevantes" - -msgid "Primary key only" -msgstr "" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" - -msgid "Number of entries returned" -msgstr "" - -msgid "True if not all results were returned" -msgstr "" - -msgid "Modify ACI." -msgstr "" - -msgid "Rename an ACI." -msgstr "" - -#, fuzzy -msgid "New ACI name" -msgstr "Nome de CLI" - -msgid "Display a single ACI given an ACI name." -msgstr "" - -msgid "Location of the ACI" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Description" -msgstr "" - -#, fuzzy -msgid "A description of this auto member rule" -msgstr "Uma descrição deste comando" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -#, fuzzy -msgid "Add conditions to an automember rule." -msgstr "" "\n" " Exibe informações sobre um regra automembro.\n" " " -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -msgid "Attribute Key" -msgstr "" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -#, fuzzy -msgid "Display information about the default (fallback) automember groups." -msgstr "" -"\n" -" Exibe informações sobre um regra automembro.\n" -" " - -msgid "Delete an automember rule." -msgstr "" - -msgid "List of deletions that failed" -msgstr "" - -#, fuzzy -msgid "Search for automember rules." -msgstr "Pesquisa por comandos." - -msgid "Modify an automember rule." -msgstr "" - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Users" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Hosts" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -#, fuzzy -msgid "Display information about an automember rule." -msgstr "" -"\n" -" Exibe informações sobre um regra automembro.\n" -" " - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" - -msgid "Key" -msgstr "" - -msgid "Automount key name." -msgstr "" - -#, fuzzy -msgid "Mount information" -msgstr "Imprimir informações de depuração" - -msgid "description" -msgstr "" - -msgid "Location" -msgstr "" - -msgid "Automount location name." -msgstr "" - -msgid "Map" -msgstr "" - -msgid "Automount map name." -msgstr "" - -#, fuzzy -msgid "Create a new automount key." -msgstr "Cria um novo comando sudo." - -msgid "Delete an automount key." -msgstr "" - -msgid "Continuous mode: Don't stop on errors." -msgstr "" - -#, fuzzy -msgid "Search for an automount key." -msgstr "Pesquisa por comandos." - -msgid "Time Limit" -msgstr "" - -msgid "Time limit of search in seconds" -msgstr "" - -msgid "Size Limit" -msgstr "" - -msgid "Maximum number of entries returned" -msgstr "" - -msgid "Modify an automount key." -msgstr "" - -#, fuzzy -msgid "New mount information" -msgstr "Imprimir informações de depuração" - -msgid "Rename" -msgstr "" - -msgid "Rename the automount key object" -msgstr "" - -msgid "Display an automount key." -msgstr "" - -#, fuzzy -msgid "Create a new automount location." -msgstr "Cria um novo comando sudo." - -msgid "Delete an automount location." -msgstr "" - -#, fuzzy -msgid "Search for an automount location." -msgstr "Pesquisa por comandos." - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" - -#, fuzzy -msgid "Display an automount location." -msgstr "Exibe informações sobre um comando." - -msgid "Generate automount files for a specific location." -msgstr "" - -#, fuzzy -msgid "Create a new automount map." -msgstr "Cria um novo comando sudo." - -msgid "Create a new indirect mount point." -msgstr "" - -msgid "Mount point" -msgstr "" - -msgid "Parent map" -msgstr "" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" - -msgid "Delete an automount map." -msgstr "" - -#, fuzzy -msgid "Search for an automount map." -msgstr "Pesquisa por comandos." - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" - -msgid "Modify an automount map." -msgstr "" - -#, fuzzy -msgid "Display an automount map." -msgstr "Exibe informações sobre um comando." - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" - -msgid "Nested Methods to execute" -msgstr "" - msgid "" "\n" "IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -#, fuzzy -msgid "Search for existing certificates." -msgstr "Pesquisa por tópicos de ajuda." - -msgid "Match cn attribute in subject" -msgstr "" - -#, fuzzy -msgid "Reason" -msgstr "%(reason)s" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -#, fuzzy -msgid "minimum serial number" -msgstr "deve ser um número decimal" - -#, fuzzy -msgid "maximum serial number" -msgstr "deve ser um número decimal" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -#, fuzzy -msgid "Submit a certificate signing request." -msgstr "deve ser uma solicitação de assinatura de certificado" - -msgid "CSR" -msgstr "" - -msgid "Principal" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Dictionary mapping variable name to value" -msgstr "" - -#, fuzzy -msgid "Revoke a certificate." -msgstr "deve ser um certificado" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -#, fuzzy -msgid "Check the status of a certificate signing request." -msgstr "deve ser uma solicitação de assinatura de certificado" - -#, fuzzy -msgid "Request id" -msgstr "Obrigatório" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "Maximum username length" -msgstr "" - -msgid "Home directory base" -msgstr "" - -msgid "Default location of home directories" -msgstr "" - -#, fuzzy -msgid "Default shell" -msgstr "Padrão" - -msgid "Default shell for new users" -msgstr "" - -#, fuzzy -msgid "Default users group" -msgstr "O grupo de usuários padrão não pode ser removido" - -msgid "Default group for new users" -msgstr "" - -msgid "Default e-mail domain" -msgstr "" - -msgid "Search time limit" -msgstr "" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" - -msgid "Search size limit" -msgstr "" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "" - -msgid "User search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" - -msgid "Group search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" - -msgid "Enable migration mode" -msgstr "" - -msgid "Certificate Subject base" -msgstr "" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "" - -msgid "Default group objectclasses" -msgstr "" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "" - -msgid "Default user objectclasses" -msgstr "" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" - -msgid "Password Expiration Notification (days)" -msgstr "" - -msgid "Number of days's notice of impending password expiration" -msgstr "" - -msgid "Password plugin features" -msgstr "" - -msgid "Extra hashes to generate in password plug-in" -msgstr "" - -msgid "SELinux user map order" -msgstr "" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" - -msgid "Default SELinux user" -msgstr "" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" - -msgid "Default PAC types" -msgstr "" - -msgid "Default types of PAC supported for services" -msgstr "" - -msgid "Default user authentication types" -msgstr "" - -msgid "Default types of supported user authentication" -msgstr "" - -msgid "Modify configuration options." -msgstr "" - -msgid "Show the current configuration." -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "Delegation name" -msgstr "" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "" - -msgid "Attributes to which the delegation applies" -msgstr "" - -msgid "Member user group" -msgstr "" - -msgid "User group to apply delegation to" -msgstr "" - -msgid "Add a new delegation." -msgstr "" - -msgid "Delete a delegation." -msgstr "" - -#, fuzzy -msgid "Search for delegations." -msgstr "Pesquisa por tópicos de ajuda." - -msgid "Modify a delegation." -msgstr "" - -#, fuzzy -msgid "Display information about a delegation." -msgstr "Exibe informações sobre uma classe." - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "Global forwarders" -msgstr "" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Forward policy" -msgstr "" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" - -msgid "Allow PTR sync" -msgstr "" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" - -msgid "Zone refresh interval" -msgstr "" - -#, fuzzy -msgid "Zone name" -msgstr "Nome do comando" - -msgid "Zone name (FQDN)" -msgstr "" - -msgid "Reverse zone IP network" -msgstr "" - -msgid "IP network to create reverse zone name from" -msgstr "" - -msgid "Active zone" -msgstr "" - -msgid "Is zone active?" -msgstr "" - -msgid "Zone forwarders" -msgstr "" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -#, fuzzy -msgid "Record name" -msgstr "Nome do comando" - -msgid "Time to live" -msgstr "" - -msgid "Records" -msgstr "" - -#, fuzzy -msgid "Record type" -msgstr "tipo incorreto" - -msgid "Record data" -msgstr "" - -msgid "A record" -msgstr "" - -msgid "Raw A records" -msgstr "" - -msgid "A IP Address" -msgstr "" - -msgid "IP Address" -msgstr "" - -msgid "A Create reverse" -msgstr "" - -msgid "Create reverse record for this IP Address" -msgstr "" - -msgid "AAAA record" -msgstr "" - -msgid "Raw AAAA records" -msgstr "" - -msgid "AAAA IP Address" -msgstr "" - -msgid "AAAA Create reverse" -msgstr "" - -msgid "A6 record" -msgstr "" - -msgid "Raw A6 records" -msgstr "" - -msgid "A6 Record data" -msgstr "" - -msgid "AFSDB record" -msgstr "" - -msgid "Raw AFSDB records" -msgstr "" - -msgid "AFSDB Subtype" -msgstr "" - -msgid "Subtype" -msgstr "" - -msgid "AFSDB Hostname" -msgstr "" - -msgid "Hostname" -msgstr "" - -msgid "APL record" -msgstr "" - -msgid "Raw APL records" -msgstr "" - -msgid "CERT record" -msgstr "" - -msgid "Raw CERT records" -msgstr "" - -msgid "CERT Certificate Type" -msgstr "" - -msgid "Certificate Type" -msgstr "" - -msgid "CERT Key Tag" -msgstr "" - -msgid "Key Tag" -msgstr "" - -msgid "CERT Algorithm" -msgstr "" - -msgid "Algorithm" -msgstr "" - -msgid "CERT Certificate/CRL" -msgstr "" - -msgid "Certificate/CRL" -msgstr "" - -msgid "CNAME record" -msgstr "" - -msgid "Raw CNAME records" -msgstr "" - -msgid "CNAME Hostname" -msgstr "" - -msgid "A hostname which this alias hostname points to" -msgstr "" - -msgid "DHCID record" -msgstr "" - -msgid "Raw DHCID records" -msgstr "" - -msgid "DLV record" -msgstr "" - -msgid "Raw DLV records" -msgstr "" - -msgid "DLV Key Tag" -msgstr "" - -msgid "DLV Algorithm" -msgstr "" - -msgid "DLV Digest Type" -msgstr "" - -msgid "Digest Type" -msgstr "" - -msgid "DLV Digest" -msgstr "" - -msgid "Digest" -msgstr "" - -msgid "DNAME record" -msgstr "" - -msgid "Raw DNAME records" -msgstr "" - -msgid "DNAME Target" -msgstr "" - -msgid "Target" -msgstr "" - -msgid "DNSKEY record" -msgstr "" - -msgid "Raw DNSKEY records" -msgstr "" - -msgid "DS record" -msgstr "" - -msgid "Raw DS records" -msgstr "" - -msgid "DS Key Tag" -msgstr "" - -msgid "DS Algorithm" -msgstr "" - -msgid "DS Digest Type" -msgstr "" - -msgid "DS Digest" -msgstr "" - -msgid "HIP record" -msgstr "" - -msgid "Raw HIP records" -msgstr "" - -msgid "IPSECKEY record" -msgstr "" - -msgid "Raw IPSECKEY records" -msgstr "" - -msgid "KEY record" -msgstr "" - -msgid "Raw KEY records" -msgstr "" - -msgid "KX record" -msgstr "" - -msgid "Raw KX records" -msgstr "" - -msgid "KX Preference" -msgstr "" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" - -msgid "KX Exchanger" -msgstr "" - -msgid "A host willing to act as a key exchanger" -msgstr "" - -msgid "LOC record" -msgstr "" - -msgid "Raw LOC records" -msgstr "" - -msgid "LOC Degrees Latitude" -msgstr "" - -msgid "Degrees Latitude" -msgstr "" - -msgid "LOC Minutes Latitude" -msgstr "" - -msgid "Minutes Latitude" -msgstr "" - -msgid "LOC Seconds Latitude" -msgstr "" - -msgid "Seconds Latitude" -msgstr "" - -msgid "LOC Direction Latitude" -msgstr "" - -msgid "Direction Latitude" -msgstr "" - -msgid "LOC Degrees Longitude" -msgstr "" - -msgid "Degrees Longitude" -msgstr "" - -msgid "LOC Minutes Longitude" -msgstr "" - -msgid "Minutes Longitude" -msgstr "" - -msgid "LOC Seconds Longitude" -msgstr "" - -msgid "Seconds Longitude" -msgstr "" - -msgid "LOC Direction Longitude" -msgstr "" - -msgid "Direction Longitude" -msgstr "" - -msgid "LOC Altitude" -msgstr "" - -msgid "Altitude" -msgstr "" - -msgid "LOC Size" -msgstr "" - -msgid "Size" -msgstr "" - -msgid "LOC Horizontal Precision" -msgstr "" - -msgid "Horizontal Precision" -msgstr "" - -msgid "LOC Vertical Precision" -msgstr "" - -msgid "Vertical Precision" -msgstr "" - -msgid "MX record" -msgstr "" - -msgid "Raw MX records" -msgstr "" - -msgid "MX Preference" -msgstr "" - -msgid "MX Exchanger" -msgstr "" - -msgid "A host willing to act as a mail exchanger" -msgstr "" - -msgid "NAPTR record" -msgstr "" - -msgid "Raw NAPTR records" -msgstr "" - -msgid "NAPTR Order" -msgstr "" - -msgid "Order" -msgstr "" - -msgid "NAPTR Preference" -msgstr "" - -msgid "Preference" -msgstr "" - -msgid "NAPTR Flags" -msgstr "" - -msgid "Flags" -msgstr "" - -msgid "NAPTR Service" -msgstr "" - -msgid "Service" -msgstr "" - -msgid "NAPTR Regular Expression" -msgstr "" - -msgid "Regular Expression" -msgstr "" - -msgid "NAPTR Replacement" -msgstr "" - -msgid "Replacement" -msgstr "" - -msgid "NS record" -msgstr "" - -msgid "Raw NS records" -msgstr "" - -msgid "NS Hostname" -msgstr "" - -msgid "NSEC record" -msgstr "" - -msgid "Raw NSEC records" -msgstr "" - -msgid "NSEC3 record" -msgstr "" - -msgid "Raw NSEC3 records" -msgstr "" - -msgid "PTR record" -msgstr "" - -msgid "Raw PTR records" -msgstr "" - -msgid "PTR Hostname" -msgstr "" - -msgid "The hostname this reverse record points to" -msgstr "" - -msgid "RRSIG record" -msgstr "" - -msgid "Raw RRSIG records" -msgstr "" - -msgid "RP record" -msgstr "" - -msgid "Raw RP records" -msgstr "" - -msgid "SIG record" -msgstr "" - -msgid "Raw SIG records" -msgstr "" - -msgid "SPF record" -msgstr "" - -msgid "Raw SPF records" -msgstr "" - -msgid "SRV record" -msgstr "" - -msgid "Raw SRV records" -msgstr "" - -msgid "SRV Priority" -msgstr "" - -msgid "Priority" -msgstr "" - -msgid "SRV Weight" -msgstr "" - -msgid "Weight" -msgstr "" - -msgid "SRV Port" -msgstr "" - -msgid "Port" -msgstr "" - -msgid "SRV Target" -msgstr "" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" - -msgid "SSHFP record" -msgstr "" - -msgid "Raw SSHFP records" -msgstr "" - -msgid "SSHFP Algorithm" -msgstr "" - -msgid "SSHFP Fingerprint Type" -msgstr "" - -msgid "Fingerprint Type" -msgstr "" - -msgid "SSHFP Fingerprint" -msgstr "" - -msgid "Fingerprint" -msgstr "" - -msgid "TA record" -msgstr "" - -msgid "Raw TA records" -msgstr "" - -msgid "TLSA record" -msgstr "" - -msgid "Raw TLSA records" -msgstr "" - -msgid "TLSA Certificate Usage" -msgstr "" - -msgid "Certificate Usage" -msgstr "" - -msgid "TLSA Selector" -msgstr "" - -msgid "Selector" -msgstr "" - -msgid "TLSA Matching Type" -msgstr "" - -msgid "Matching Type" -msgstr "" - -#, fuzzy -msgid "TLSA Certificate Association Data" msgstr "" "\n" "Operações de certificado IPA\n" -#, fuzzy -msgid "Certificate Association Data" -msgstr "" -"\n" -"Operações de certificado IPA\n" - -msgid "TKEY record" -msgstr "" - -msgid "Raw TKEY records" -msgstr "" - -msgid "TSIG record" -msgstr "" - -msgid "Raw TSIG records" -msgstr "" - -msgid "TXT record" -msgstr "" - -msgid "Raw TXT records" -msgstr "" - -msgid "TXT Text Data" -msgstr "" - -msgid "Text Data" -msgstr "" - -msgid "Authoritative nameserver" -msgstr "" - -msgid "Authoritative nameserver domain name" -msgstr "" - -msgid "Administrator e-mail address" -msgstr "" - -msgid "SOA serial" -msgstr "" - -msgid "SOA record serial number" -msgstr "" - -msgid "SOA refresh" -msgstr "" - -msgid "SOA record refresh time" -msgstr "" - -msgid "SOA retry" -msgstr "" - -msgid "SOA record retry time" -msgstr "" - -msgid "SOA expire" -msgstr "" - -msgid "SOA record expire time" -msgstr "" - -msgid "SOA minimum" -msgstr "" - -msgid "How long should negative responses be cached" -msgstr "" - -msgid "Time to live for records at zone apex" -msgstr "" - -msgid "BIND update policy" -msgstr "" - -msgid "Dynamic update" -msgstr "" - -msgid "Allow dynamic updates." -msgstr "" - -msgid "Allow query" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" - -msgid "Allow transfer" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" - -msgid "Allow in-line DNSSEC signing" -msgstr "" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "" - -msgid "NSEC3PARAM record" -msgstr "" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" - -msgid "Resolve a host name in DNS." -msgstr "" - -msgid "Modify global DNS configuration." -msgstr "" - -msgid "Show the current global DNS configuration." -msgstr "" - -#, fuzzy -msgid "Create new DNS forward zone." -msgstr "Cria um novo comando sudo." - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" - -msgid "Permission value" -msgstr "" - -msgid "Delete DNS forward zone." -msgstr "" - -msgid "Disable DNS Forward Zone." -msgstr "" - -msgid "Enable DNS Forward Zone." -msgstr "" - -#, fuzzy -msgid "Search for DNS forward zones." -msgstr "Pesquisa por comandos." - -msgid "Modify DNS forward zone." -msgstr "" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" - -#, fuzzy -msgid "Display information about a DNS forward zone." -msgstr "Exibe informações sobre um comando." - -msgid "Add new DNS resource record." -msgstr "" - -msgid "Force" -msgstr "" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "" - -msgid "Structured" -msgstr "" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" - -msgid "Delete DNS resource record." -msgstr "" - -msgid "Delete all associated records" -msgstr "" - -msgid "Delete DNS record entry." -msgstr "" - -#, fuzzy -msgid "Search for DNS resources." -msgstr "Pesquisa por classes." - -msgid "Modify a DNS resource record." -msgstr "" - -msgid "Rename the DNS resource record object" -msgstr "" - -msgid "Display DNS resource." -msgstr "" - -msgid "Create new DNS zone (SOA record)." -msgstr "" - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" - -msgid "Add a permission for per-zone access delegation." -msgstr "" - -msgid "Delete DNS zone (SOA record)." -msgstr "" - -#, fuzzy -msgid "Disable DNS Zone." -msgstr "deve ser um nome de DNS" - -msgid "Enable DNS Zone." -msgstr "" - -msgid "Search for DNS zones (SOA records)." -msgstr "" - -msgid "Forward zones only" -msgstr "" - -#, fuzzy -msgid "Search for forward zones only" -msgstr "Pesquisa por comandos." - -msgid "Modify DNS zone (SOA record)." -msgstr "" - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" - -msgid "Remove a permission for per-zone access delegation." -msgstr "" - -#, fuzzy -msgid "Display information about a DNS zone (SOA record)." -msgstr "Exibe informações sobre um comando." - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "Group name" -msgstr "" - -msgid "Group description" -msgstr "" - -msgid "GID" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Member users" -msgstr "" - -msgid "Member groups" -msgstr "" - -msgid "Member of groups" -msgstr "" - -msgid "Roles" -msgstr "" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - -#, fuzzy -msgid "Create a new group." -msgstr "Cria um novo comando sudo." - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Suppress processing of membership attributes." -msgstr "" - -msgid "Add members to a group." -msgstr "" - -msgid "External member" -msgstr "" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -msgid "member group" -msgstr "" - -msgid "groups to add" -msgstr "" - -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - -msgid "Delete group." -msgstr "" - -msgid "Detach a managed group from a user." -msgstr "" - -#, fuzzy -msgid "Search for groups." -msgstr "Pesquisa por comandos." - -#, fuzzy -msgid "search for private groups" -msgstr "Pesquisa por tópicos de ajuda." - -#, fuzzy -msgid "search for POSIX groups" -msgstr "Pesquisa por tópicos de ajuda." - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "user" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -msgid "group" -msgstr "" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "netgroup" -msgstr "" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "role" -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "HBAC rule" -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "sudo rule" -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - -#, fuzzy -msgid "Display information about a named group." -msgstr "Exibe informações sobre um tópico de ajuda." - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Rule name" -msgstr "" - -msgid "Rule type" -msgstr "" - -msgid "Rule type (allow)" -msgstr "" - -msgid "User category" -msgstr "" - -msgid "User category the rule applies to" -msgstr "" - -msgid "Host category" -msgstr "" - -msgid "Host category the rule applies to" -msgstr "" - -msgid "Service category" -msgstr "" - -msgid "Service category the rule applies to" -msgstr "" - -msgid "Enabled" -msgstr "" - -msgid "User Groups" -msgstr "" - -msgid "Host Groups" -msgstr "" - -msgid "Services" -msgstr "" - -msgid "Service Groups" -msgstr "" - -msgid "External host" -msgstr "" - -msgid "Create a new HBAC rule." -msgstr "" - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "member host" -msgstr "" - -msgid "hosts to add" -msgstr "" - -msgid "member host group" -msgstr "" - -msgid "host groups to add" -msgstr "" - -msgid "Add services to an HBAC rule." -msgstr "" - -msgid "member HBAC service" -msgstr "" - -msgid "HBAC services to add" -msgstr "" - -msgid "member HBAC service group" -msgstr "" - -msgid "HBAC service groups to add" -msgstr "" - -msgid "Add users and groups to an HBAC rule." -msgstr "" - -msgid "Delete an HBAC rule." -msgstr "" - -msgid "Disable an HBAC rule." -msgstr "" - -msgid "Enable an HBAC rule." -msgstr "" - -#, fuzzy -msgid "Search for HBAC rules." -msgstr "Pesquisa por classes." - -msgid "Modify an HBAC rule." -msgstr "" - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "hosts to remove" -msgstr "" - -msgid "host groups to remove" -msgstr "" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "" - -msgid "HBAC services to remove" -msgstr "" - -msgid "HBAC service groups to remove" -msgstr "" - -msgid "Remove users and groups from an HBAC rule." -msgstr "" - -msgid "Display the properties of an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" - -msgid "Service name" -msgstr "" - -msgid "HBAC service" -msgstr "" - -msgid "HBAC service description" -msgstr "" - -msgid "Member of HBAC service groups" -msgstr "" - -msgid "Add a new HBAC service." -msgstr "" - -msgid "Delete an existing HBAC service." -msgstr "" - -#, fuzzy -msgid "Search for HBAC services." -msgstr "Pesquisa por classes." - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" - -msgid "Modify an HBAC service." -msgstr "" - -#, fuzzy -msgid "Display information about an HBAC service." -msgstr "Exibe informações sobre um tópico de ajuda." - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "Service group name" -msgstr "" - -msgid "HBAC service group description" -msgstr "" - -msgid "Member HBAC service" -msgstr "" - -msgid "Add a new HBAC service group." -msgstr "" - -msgid "Add members to an HBAC service group." -msgstr "" - -msgid "Delete an HBAC service group." -msgstr "" - -msgid "Search for an HBAC service group." -msgstr "" - -msgid "Modify an HBAC service group." -msgstr "" - -msgid "Remove members from an HBAC service group." -msgstr "" - -#, fuzzy -msgid "Display information about an HBAC service group." -msgstr "Exibe informações sobre um tópico de ajuda." - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -msgid "User name" -msgstr "" - -msgid "Target host" -msgstr "" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host name" -msgstr "" - -#, fuzzy -msgid "A description of this host" -msgstr "Uma descrição deste comando" - -msgid "Locality" -msgstr "" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "" - -msgid "Platform" -msgstr "" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "" - -msgid "Operating system" -msgstr "" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "" - -#, fuzzy -msgid "User password" -msgstr "Confirmar (senha)" - -msgid "Password used in bulk enrollment" -msgstr "" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "" - -#, fuzzy -msgid "Random password" -msgstr "Confirmar (senha)" - -#, fuzzy -msgid "Certificate" -msgstr "deve ser um certificado" - -msgid "Base-64 encoded server certificate" -msgstr "" - -msgid "Principal name" -msgstr "" - -msgid "MAC address" -msgstr "" - -msgid "Hardware MAC address(es) on this host" -msgstr "" - -msgid "SSH public key" -msgstr "" - -msgid "Class" -msgstr "" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "Assigned ID View" -msgstr "" - -msgid "Requires pre-authentication" -msgstr "" - -msgid "Pre-authentication is required for the service" -msgstr "" - -msgid "Trusted for delegation" -msgstr "" - -msgid "Client credentials may be delegated to the service" -msgstr "" - -msgid "Member of host-groups" -msgstr "" - -msgid "Indirect Member of host-group" -msgstr "" - -msgid "Keytab" -msgstr "" - -msgid "Managed by" -msgstr "" - -msgid "Managing" -msgstr "" - -msgid "Users allowed to retrieve keytab" -msgstr "" - -msgid "Groups allowed to retrieve keytab" -msgstr "" - -msgid "Hosts allowed to retrieve keytab" -msgstr "" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "" - -#, fuzzy -msgid "Users allowed to create keytab" -msgstr "Falha ao abrir o keytab\n" - -#, fuzzy -msgid "Groups allowed to create keytab" -msgstr "Falha ao abrir o keytab\n" - -#, fuzzy -msgid "Hosts allowed to create keytab" -msgstr "Falha ao abrir o keytab\n" - -msgid "Host Groups allowed to create keytab" -msgstr "" - -msgid "Add a new host." -msgstr "" - -msgid "force host name even if not in DNS" -msgstr "" - -msgid "skip reverse DNS detection" -msgstr "" - -msgid "Add the host to DNS with this IP address" -msgstr "" - -msgid "Add hosts that can manage this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" - -msgid "Delete a host." -msgstr "" - -msgid "Remove entries from DNS" -msgstr "" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" - -#, fuzzy -msgid "Search for hosts." -msgstr "Pesquisa por classes." - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" - -msgid "host group" -msgstr "" - -msgid "Search for hosts with these member of host groups." -msgstr "" - -msgid "Search for hosts without these member of host groups." -msgstr "" - -msgid "Search for hosts with these member of netgroups." -msgstr "" - -msgid "Search for hosts without these member of netgroups." -msgstr "" - -msgid "Search for hosts with these member of roles." -msgstr "" - -msgid "Search for hosts without these member of roles." -msgstr "" - -msgid "Search for hosts with these member of HBAC rules." -msgstr "" - -msgid "Search for hosts without these member of HBAC rules." -msgstr "" - -msgid "Search for hosts with these member of sudo rules." -msgstr "" - -msgid "Search for hosts without these member of sudo rules." -msgstr "" - -msgid "Search for hosts with these enrolled by users." -msgstr "" - -msgid "Search for hosts without these enrolled by users." -msgstr "" - -msgid "host" -msgstr "" - -msgid "Search for hosts with these managed by hosts." -msgstr "" - -msgid "Search for hosts without these managed by hosts." -msgstr "" - -msgid "Search for hosts with these managing hosts." -msgstr "" - -msgid "Search for hosts without these managing hosts." -msgstr "" - -#, fuzzy -msgid "Modify information about a host." -msgstr "Exibe informações sobre uma classe." - -#, fuzzy -msgid "Kerberos principal name for this host" -msgstr "Nome principal do serviço Kerberos" - -msgid "Update DNS entries" -msgstr "" - -msgid "Remove hosts that can manage this host." -msgstr "" - -#, fuzzy -msgid "Display information about a host." -msgstr "Exibe informações sobre uma classe." - -#, fuzzy -msgid "file to store certificate in" -msgstr "deve ser um certificado" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "Host-group" -msgstr "" - -msgid "Name of host-group" -msgstr "" - -#, fuzzy -msgid "A description of this host-group" -msgstr "Uma descrição deste comando" - -msgid "Member hosts" -msgstr "" - -msgid "Member host-groups" -msgstr "" - -msgid "Indirect Member hosts" -msgstr "" - -msgid "Indirect Member host-groups" -msgstr "" - -msgid "Add a new hostgroup." -msgstr "" - -msgid "Add members to a hostgroup." -msgstr "" - -msgid "Delete a hostgroup." -msgstr "" - -#, fuzzy -msgid "Search for hostgroups." -msgstr "Pesquisa por tópicos de ajuda." - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" - -msgid "Search for host groups with these member hosts." -msgstr "" - -msgid "Search for host groups without these member hosts." -msgstr "" - -msgid "Search for host groups with these member host groups." -msgstr "" - -msgid "Search for host groups without these member host groups." -msgstr "" - -msgid "Search for host groups with these member of host groups." -msgstr "" - -msgid "Search for host groups without these member of host groups." -msgstr "" - -msgid "Search for host groups with these member of netgroups." -msgstr "" - -msgid "Search for host groups without these member of netgroups." -msgstr "" - -msgid "Search for host groups with these member of HBAC rules." -msgstr "" - -msgid "Search for host groups without these member of HBAC rules." -msgstr "" - -msgid "Search for host groups with these member of sudo rules." -msgstr "" - -msgid "Search for host groups without these member of sudo rules." -msgstr "" - -msgid "Modify a hostgroup." -msgstr "" - -msgid "Remove members from a hostgroup." -msgstr "" - -#, fuzzy -msgid "Display information about a hostgroup." -msgstr "Exibe informações sobre um tópico de ajuda." - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "Nome do comando" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -#, fuzzy -msgid "Domain SID of the trusted domain" -msgstr "SID não corresponde a nenhum domínio confiável" - -#, fuzzy -msgid "Name of the trusted domain" -msgstr "SID não corresponde a nenhum domínio confiável" - -msgid "Range type" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -#, fuzzy -msgid "Search for ranges." -msgstr "Pesquisa por classes." - -#, fuzzy -msgid "Modify ID range." -msgstr "Modifica comando sudo." - -#, fuzzy -msgid "Display information about a range." -msgstr "Exibe informações sobre um comando." - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -msgid "Anchor to override" -msgstr "" - -msgid "Group ID Number" -msgstr "" - -msgid "User login" -msgstr "" - -msgid "UID" -msgstr "" - -msgid "User ID Number" -msgstr "" - -msgid "GECOS" -msgstr "" - -#, fuzzy -msgid "Home directory" -msgstr "deve ser um dicionário" - -msgid "Login shell" -msgstr "" - -msgid "ID View Name" -msgstr "" - -msgid "Add a new Group ID override." -msgstr "" - -msgid "Delete an Group ID override." -msgstr "" - -msgid "Search for an Group ID override." -msgstr "" - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" - -msgid "Modify an Group ID override." -msgstr "" - -msgid "Rename the Group ID override object" -msgstr "" - -#, fuzzy -msgid "Display information about an Group ID override." -msgstr "Exibe informações sobre um tópico de ajuda." - -msgid "Add a new User ID override." -msgstr "" - -msgid "Delete an User ID override." -msgstr "" - -#, fuzzy -msgid "Search for an User ID override." -msgstr "Pesquisa por classes." - -msgid "Modify an User ID override." -msgstr "" - -msgid "Rename the User ID override object" -msgstr "" - -#, fuzzy -msgid "Display information about an User ID override." -msgstr "Exibe informações sobre um tópico de ajuda." - -msgid "Add a new ID View." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" - -msgid "hosts" -msgstr "" - -msgid "Hosts to apply the ID View to" -msgstr "" - -msgid "hostgroups" -msgstr "" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" - -msgid "Hosts that this ID View was applied to." -msgstr "" - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" - -msgid "Number of hosts the ID View was applied to:" -msgstr "" - -msgid "Delete an ID View." -msgstr "" - -#, fuzzy -msgid "Search for an ID View." -msgstr "Pesquisa por classes." - -msgid "Modify an ID View." -msgstr "" - -msgid "Rename the ID View object" -msgstr "" - -#, fuzzy -msgid "Display information about an ID View." -msgstr "Exibe informações sobre uma classe." - -msgid "Enumerate all the hosts the view applies to." -msgstr "" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" - -msgid "Hosts to clear (any) ID View from." -msgstr "" - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" - -msgid "Hosts that ID View was cleared from." -msgstr "" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" - -msgid "Dict of I18N messages" -msgstr "" - -msgid "Export plugin meta-data for the webUI." -msgstr "" - -msgid "Name of object to export" -msgstr "" - -msgid "Name of method to export" -msgstr "" - -msgid "Name of command to export" -msgstr "" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" - -msgid "Join an IPA domain" -msgstr "" - -msgid "The hostname to register as" -msgstr "" - -msgid "The IPA realm" -msgstr "" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "" - -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" - -msgid "Manage ticket policy for specific user" -msgstr "" - -msgid "Max life" -msgstr "" - -msgid "Maximum ticket life (seconds)" -msgstr "" - -msgid "Max renew" -msgstr "" - -msgid "Maximum renewable age (seconds)" -msgstr "" - -msgid "Modify Kerberos ticket policy." -msgstr "" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "" - -msgid "Display the current Kerberos ticket policy." -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," -"cn=accounts' --group-container='cn=groups,cn=accounts' " -"ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' --user-ignore-" -"objectclass=radiusprofile --user-ignore-" -"attribute=radiusgroupname ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -msgid "Migrate users and groups from DS to IPA." -msgstr "" - -msgid "LDAP URI" -msgstr "" - -msgid "LDAP URI of DS server to migrate from" -msgstr "" - -#, fuzzy -msgid "bind password" -msgstr "Confirmar (senha)" - -msgid "Bind DN" -msgstr "" - -msgid "User container" -msgstr "" - -msgid "DN of container for users in DS relative to base DN" -msgstr "" - -msgid "Group container" -msgstr "" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "" - -msgid "User object class" -msgstr "" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "" - -msgid "Group object class" -msgstr "" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "" - -msgid "Ignore user object class" -msgstr "" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore user attribute" -msgstr "" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore group object class" -msgstr "" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "Ignore group attribute" -msgstr "" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "" - -msgid "Overwrite GID" -msgstr "" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" - -msgid "LDAP schema" -msgstr "" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" - -msgid "Continue" -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" - -msgid "Base DN" -msgstr "" - -msgid "Base DN on remote LDAP server" -msgstr "" - -msgid "Ignore compat plugin" -msgstr "" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" - -#, fuzzy -msgid "CA certificate" -msgstr "deve ser um certificado" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "" - -msgid "groups to exclude from migration" -msgstr "" - -msgid "users to exclude from migration" -msgstr "" - -msgid "Lists of objects migrated; categorized by type." -msgstr "" - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" - -msgid "False if migration mode was disabled." -msgstr "" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" - -msgid "Show environment variables." -msgstr "" - -msgid "Forward to server instead of running locally" -msgstr "" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Total number of variables env (>= count)" -msgstr "" - -msgid "Number of variables returned (<= total)" -msgstr "" - -msgid "Show all loaded plugins." -msgstr "" - -msgid "Dictionary mapping plugin names to bases" -msgstr "" - -msgid "Number of plugins loaded" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "Netgroup name" -msgstr "" - -msgid "Netgroup description" -msgstr "" - -#, fuzzy -msgid "NIS domain name" -msgstr "Nome do comando" - -msgid "IPA unique ID" -msgstr "" - -msgid "Member netgroups" -msgstr "" - -msgid "Indirect Member netgroups" -msgstr "" - -msgid "Member User" -msgstr "" - -msgid "Member Group" -msgstr "" - -msgid "Member Host" -msgstr "" - -msgid "Member Hostgroup" -msgstr "" - -msgid "Add a new netgroup." -msgstr "" - -msgid "Add members to a netgroup." -msgstr "" - -msgid "member netgroup" -msgstr "" - -msgid "netgroups to add" -msgstr "" - -msgid "Delete a netgroup." -msgstr "" - -#, fuzzy -msgid "Search for a netgroup." -msgstr "Pesquisa por tópicos de ajuda." - -#, fuzzy -msgid "search for managed groups" -msgstr "Pesquisa por comandos." - -msgid "Search for netgroups with these member netgroups." -msgstr "" - -msgid "Search for netgroups without these member netgroups." -msgstr "" - -msgid "Search for netgroups with these member users." -msgstr "" - -msgid "Search for netgroups without these member users." -msgstr "" - -msgid "Search for netgroups with these member groups." -msgstr "" - -msgid "Search for netgroups without these member groups." -msgstr "" - -msgid "Search for netgroups with these member hosts." -msgstr "" - -msgid "Search for netgroups without these member hosts." -msgstr "" - -msgid "Search for netgroups with these member host groups." -msgstr "" - -msgid "Search for netgroups without these member host groups." -msgstr "" - -msgid "Search for netgroups with these member of netgroups." -msgstr "" - -msgid "Search for netgroups without these member of netgroups." -msgstr "" - -msgid "Modify a netgroup." -msgstr "" - -msgid "Remove members from a netgroup." -msgstr "" - -msgid "netgroups to remove" -msgstr "" - -#, fuzzy -msgid "Display information about a netgroup." -msgstr "Exibe informações sobre um tópico de ajuda." - -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" - -msgid "TOTP authentication Window" -msgstr "" - -msgid "TOTP authentication time variance (seconds)" -msgstr "" - -msgid "TOTP Synchronization Window" -msgstr "" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "" - -msgid "HOTP Authentication Window" -msgstr "" - -msgid "HOTP authentication skip-ahead" -msgstr "" - -msgid "HOTP Synchronization Window" -msgstr "" - -msgid "HOTP synchronization skip-ahead" -msgstr "" - -msgid "Modify OTP configuration options." -msgstr "" - -msgid "Show the current OTP configuration." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -msgid "Serial" -msgstr "" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -#, fuzzy -msgid "(deprecated)" -msgstr "Opções obsoletas" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -#, fuzzy -msgid "Search for OTP token." -msgstr "Pesquisa por comandos." - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -#, fuzzy -msgid "Display information about an OTP token." -msgstr "Exibe informações sobre um comando." - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "Set a user's password." -msgstr "" - -msgid "New Password" -msgstr "" - -msgid "Current Password" -msgstr "" - -msgid "OTP" -msgstr "" - -#, fuzzy -msgid "One Time Password" -msgstr "Confirmar (senha)" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -"\n" -"Managed permissions\n" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "Permission name" -msgstr "" - -msgid "Granted rights" -msgstr "" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" - -msgid "Effective attributes" -msgstr "" - -msgid "All attributes to which the permission applies" -msgstr "" - -msgid "Included attributes" -msgstr "" - -msgid "User-specified attributes to which the permission applies" -msgstr "" - -msgid "Excluded attributes" -msgstr "" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" - -msgid "Default attributes" -msgstr "" - -msgid "Attributes to which the permission applies by default" -msgstr "" - -#, fuzzy -msgid "Bind rule type" -msgstr "tipo incorreto" - -msgid "Subtree to apply permissions to" -msgstr "" - -msgid "Extra target filter" -msgstr "" - -msgid "Raw target filter" -msgstr "" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" - -msgid "Target DN" -msgstr "" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" - -msgid "Member of group" -msgstr "" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "" - -msgid "User group to apply permissions to (sets target)" -msgstr "" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "" - -#, fuzzy -msgid "Deprecated; use extratargetfilter" -msgstr "Descontinuado; use %s" - -#, fuzzy -msgid "Deprecated; use ipapermlocation" -msgstr "Descontinuado; use %s" - -#, fuzzy -msgid "Deprecated; use ipapermright" -msgstr "Descontinuado; use %s" - -msgid "Granted to Privilege" -msgstr "" - -msgid "Indirect Member of roles" -msgstr "" - -msgid "Add a new permission." -msgstr "" - -msgid "Add members to a permission." -msgstr "" - -msgid "member privilege" -msgstr "" - -msgid "privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "" - -msgid "Permission flags" -msgstr "" - -msgid "Delete a permission." -msgstr "" - -msgid "force delete of SYSTEM permissions" -msgstr "" - -#, fuzzy -msgid "Search for permissions." -msgstr "Pesquisa por classes." - -msgid "Modify a permission." -msgstr "" - -#, fuzzy -msgid "Rename the permission object" -msgstr "Permissões incorretas de cache de credenciais" - -msgid "Remove members from a permission." -msgstr "" - -msgid "privileges to remove" -msgstr "" - -#, fuzzy -msgid "Display information about a permission." -msgstr "Exibe informações sobre uma classe." - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "Ping a remote server." -msgstr "" - -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "" - -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" - -msgid "Privilege name" -msgstr "" - -msgid "Privilege description" -msgstr "" - -msgid "Granting privilege to roles" -msgstr "" - -msgid "Add a new privilege." -msgstr "" - -msgid "Add members to a privilege." -msgstr "" - -msgid "member role" -msgstr "" - -#, fuzzy -msgid "roles to add" -msgstr "Nenhum arquivo para ler" - -msgid "Add permissions to a privilege." -msgstr "" - -msgid "permission" -msgstr "" - -msgid "permissions" -msgstr "" - -msgid "Number of permissions added" -msgstr "" - -msgid "Delete a privilege." -msgstr "" - -#, fuzzy -msgid "Search for privileges." -msgstr "Pesquisa por classes." - -msgid "Modify a privilege." -msgstr "" - -msgid "Rename the privilege object" -msgstr "" - -msgid "Remove members from a privilege" -msgstr "" - -#, fuzzy -msgid "roles to remove" -msgstr "Incapaz de remover entrada\n" - -msgid "Remove permissions from a privilege." -msgstr "" - -msgid "Number of permissions removed" -msgstr "" - -#, fuzzy -msgid "Display information about a privilege." -msgstr "Exibe informações sobre uma classe." - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Group" -msgstr "" - -msgid "Manage password policy for specific group" -msgstr "" - -msgid "Max lifetime (days)" -msgstr "" - -msgid "Maximum password lifetime (in days)" -msgstr "" - -msgid "Min lifetime (hours)" -msgstr "" - -msgid "Minimum password lifetime (in hours)" -msgstr "" - -msgid "History size" -msgstr "" - -#, fuzzy -msgid "Password history size" -msgstr "A senha é longa demais!\n" - -#, fuzzy -msgid "Character classes" -msgstr "Pesquisa por classes." - -msgid "Minimum number of character classes" -msgstr "" - -msgid "Min length" -msgstr "" - -msgid "Minimum length of password" -msgstr "" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "" - -msgid "Max failures" -msgstr "" - -msgid "Consecutive failures before lockout" -msgstr "" - -msgid "Failure reset interval" -msgstr "" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "" - -msgid "Lockout duration" -msgstr "" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" - -#, fuzzy -msgid "Add a new group password policy." -msgstr "Um grupo gerenciado não pode ter uma política de senhas." - -#, fuzzy -msgid "Delete a group password policy." -msgstr "Um grupo gerenciado não pode ter uma política de senhas." - -#, fuzzy -msgid "Search for group password policies." -msgstr "Pesquisa por tópicos de ajuda." - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" - -#, fuzzy -msgid "Modify a group password policy." -msgstr "Um grupo gerenciado não pode ter uma política de senhas." - -#, fuzzy -msgid "Display information about password policy." -msgstr "Exibe informações sobre um tópico de ajuda." - -msgid "User" -msgstr "" - -msgid "Display effective policy for a specific user" -msgstr "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "RADIUS proxy server name" -msgstr "" - -#, fuzzy -msgid "A description of this RADIUS proxy server" -msgstr "Uma descrição deste comando" - -msgid "Server" -msgstr "" - -msgid "The hostname or IP (with or without port)" -msgstr "" - -msgid "Secret" -msgstr "" - -msgid "The secret used to encrypt data" -msgstr "" - -msgid "Timeout" -msgstr "" - -msgid "The total timeout across all retries (in seconds)" -msgstr "" - -msgid "Retries" -msgstr "" - -msgid "The number of times to retry authentication" -msgstr "" - -msgid "User attribute" -msgstr "" - -msgid "The username attribute on the user object" -msgstr "" - -msgid "Add a new RADIUS proxy server." -msgstr "" - -msgid "Delete a RADIUS proxy server." -msgstr "" - -msgid "Search for RADIUS proxy servers." -msgstr "" - -msgid "Modify a RADIUS proxy server." -msgstr "" - -msgid "Rename the RADIUS proxy server object" -msgstr "" - -#, fuzzy -msgid "Display information about a RADIUS proxy server." -msgstr "Exibe informações sobre uma classe." - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Domain" -msgstr "" - -msgid "Add domain" -msgstr "" - -#, fuzzy -msgid "Delete domain" -msgstr "Exclui comando sudo." - -#, fuzzy -msgid "Modify realm domains." -msgstr "Modifica comando sudo." - -msgid "Force adding domain even if not in DNS" -msgstr "" - -msgid "Display the list of realm domains." -msgstr "" - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" - -msgid "Role name" -msgstr "" - -#, fuzzy -msgid "A description of this role-group" -msgstr "Uma descrição deste comando" - -msgid "Privileges" -msgstr "" - -msgid "Member services" -msgstr "" - -msgid "Add a new role." -msgstr "" - -msgid "Add members to a role." -msgstr "" - -msgid "member service" -msgstr "" - -msgid "services to add" -msgstr "" - -msgid "Add privileges to a role." -msgstr "" - -msgid "privilege" -msgstr "" - -msgid "privileges" -msgstr "" - -msgid "Number of privileges added" -msgstr "" - -msgid "Delete a role." -msgstr "" - -#, fuzzy -msgid "Search for roles." -msgstr "Pesquisa por classes." - -msgid "Modify a role." -msgstr "" - -msgid "Rename the role object" -msgstr "" - -msgid "Remove members from a role." -msgstr "" - -msgid "services to remove" -msgstr "" - -msgid "Remove privileges from a role." -msgstr "" - -msgid "Number of privileges removed" -msgstr "" - -#, fuzzy -msgid "Display information about a role." -msgstr "Exibe informações sobre uma classe." - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "Self-service name" -msgstr "" - -msgid "Attributes to which the permission applies." -msgstr "" - -msgid "Add a new self-service permission." -msgstr "" - -msgid "Delete a self-service permission." -msgstr "" - -#, fuzzy -msgid "Search for a self-service permission." -msgstr "Pesquisa por classes." - -msgid "Modify a self-service permission." -msgstr "" - -#, fuzzy -msgid "Display information about a self-service permission." -msgstr "Exibe informações sobre um tópico de ajuda." - -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" - -msgid "SELinux User" -msgstr "" - -msgid "HBAC Rule" -msgstr "" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "" - -msgid "Create a new SELinux User Map." -msgstr "" - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "" - -msgid "Delete a SELinux User Map." -msgstr "" - -msgid "Disable an SELinux User Map rule." -msgstr "" - -msgid "Enable an SELinux User Map rule." -msgstr "" - -#, fuzzy -msgid "Search for SELinux User Maps." -msgstr "Pesquisa por classes." - -msgid "Modify a SELinux User Map." -msgstr "" - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "" - -msgid "Display the properties of a SELinux User Map rule." -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -#, fuzzy -msgid "Service principal" -msgstr "O principal do serviço é necessário" - -msgid "PAC type" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" - -msgid "Add a new IPA new service." -msgstr "" - -msgid "force principal name even if not in DNS" -msgstr "" - -msgid "Add hosts that can manage this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Delete an IPA service." -msgstr "" - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -#, fuzzy -msgid "Search for IPA services." -msgstr "Pesquisa por classes." - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" - -msgid "Search for services with these managed by hosts." -msgstr "" - -msgid "Search for services without these managed by hosts." -msgstr "" - -msgid "Modify an existing IPA service." -msgstr "" - -msgid "Remove hosts that can manage this service." -msgstr "" - -#, fuzzy -msgid "Display information about an IPA service." -msgstr "Exibe informações sobre uma classe." - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" - -#, fuzzy -msgid "Sudo Command" -msgstr "Comandos sudo" - -msgid "A description of this command" -msgstr "Uma descrição deste comando" - -#, fuzzy -msgid "Sudo Command Groups" -msgstr "Comandos sudo" - -msgid "Create new Sudo Command." -msgstr "Cria um novo comando sudo." - -msgid "Delete Sudo Command." -msgstr "Exclui comando sudo." - -#, fuzzy -msgid "Search for Sudo Commands." -msgstr "Pesquisa por comandos." - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" - -msgid "Modify Sudo Command." -msgstr "Modifica comando sudo." - -#, fuzzy -msgid "Display Sudo Command." -msgstr "Modifica comando sudo." - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -#, fuzzy -msgid "Sudo Command Group" -msgstr "Comandos sudo" - -#, fuzzy -msgid "Commands" -msgstr "comandos" - -#, fuzzy -msgid "Member Sudo commands" -msgstr "comandos sudo" - -#, fuzzy -msgid "Create new Sudo Command Group." -msgstr "Cria um novo comando sudo." - -#, fuzzy -msgid "Add members to Sudo Command Group." -msgstr "Exclui comando sudo." - -#, fuzzy -msgid "member sudo command" -msgstr "comando sudo" - -#, fuzzy -msgid "sudo commands to add" -msgstr "comandos sudo" - -#, fuzzy -msgid "Delete Sudo Command Group." -msgstr "Exclui comando sudo." - -#, fuzzy -msgid "Search for Sudo Command Groups." -msgstr "Pesquisa por comandos." - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" - -#, fuzzy -msgid "Modify Sudo Command Group." -msgstr "Modifica comando sudo." - -msgid "Remove members from Sudo Command Group." -msgstr "" - -#, fuzzy -msgid "sudo commands to remove" -msgstr "comandos sudo" - -#, fuzzy -msgid "Display Sudo Command Group." -msgstr "Modifica comando sudo." - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -#, fuzzy -msgid "NetBIOS name" -msgstr "Nome de CLI" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -#, fuzzy -msgid "Domain name" -msgstr "Nome do comando" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -msgid "Delete a trust." -msgstr "" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -#, fuzzy -msgid "Search for trusts." -msgstr "Pesquisa por classes." - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -#, fuzzy -msgid "Display information about a trust." -msgstr "Exibe informações sobre uma classe." - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -#, fuzzy -msgid "Allow access from the trusted domain" -msgstr "SID não corresponde a nenhum domínio confiável" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "" - -#, fuzzy -msgid "Last name" -msgstr "Nome de CLI" - -msgid "Full name" -msgstr "" - -msgid "Display name" -msgstr "" - -msgid "Initials" -msgstr "" - -#, fuzzy -msgid "Kerberos principal" -msgstr "deve ser um principal de Kerberos" - -#, fuzzy -msgid "Kerberos principal expiration" -msgstr "deve ser um principal de Kerberos" - -msgid "Email address" -msgstr "" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -msgid "Pager Number" -msgstr "" - -msgid "Fax Number" -msgstr "" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Car License" -msgstr "" - -#, fuzzy -msgid "Account disabled" -msgstr "Conta desabilitada: %(disabled)s" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "" - -msgid "RADIUS proxy username" -msgstr "" - -msgid "Department Number" -msgstr "" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -msgid "Delete a user." -msgstr "" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -#, fuzzy -msgid "Search for users." -msgstr "Pesquisa por classes." - -msgid "Self" -msgstr "" - -#, fuzzy -msgid "Display user record for current Kerberos principal" -msgstr "deve ser um principal de Kerberos" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -#, fuzzy -msgid "Display information about a user." -msgstr "Exibe informações sobre uma classe." - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -#, fuzzy -msgid "Command category" -msgstr "Nome do comando" - -msgid "Command category the rule applies to" -msgstr "" - -msgid "RunAs User category" -msgstr "" - -msgid "RunAs User category the rule applies to" -msgstr "" - -msgid "RunAs Group category" -msgstr "" - -msgid "RunAs Group category the rule applies to" -msgstr "" - -#, fuzzy -msgid "Sudo order" -msgstr "Comandos sudo" - -msgid "integer to order the Sudo rules" -msgstr "" - -msgid "External User" -msgstr "" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -msgid "Host Masks" -msgstr "" - -#, fuzzy -msgid "Sudo Allow Commands" -msgstr "Comandos sudo" - -#, fuzzy -msgid "Sudo Deny Commands" -msgstr "Comandos sudo" - -#, fuzzy -msgid "Sudo Allow Command Groups" -msgstr "Comandos sudo" - -#, fuzzy -msgid "Sudo Deny Command Groups" -msgstr "Comandos sudo" - -msgid "RunAs Users" -msgstr "" - -msgid "Run as a user" -msgstr "" - -msgid "Groups of RunAs Users" -msgstr "" - -msgid "Run as any user within a specified group" -msgstr "" - -msgid "RunAs External User" -msgstr "" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -msgid "External Groups of RunAs Users" -msgstr "" - -msgid "External Groups of users that the command can run as" -msgstr "" - -msgid "RunAs Groups" -msgstr "" - -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -msgid "RunAs External Group" -msgstr "" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -msgid "Sudo Option" -msgstr "" - -#, fuzzy -msgid "Create new Sudo Rule." -msgstr "Cria um novo comando sudo." - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "member sudo command group" -msgstr "comando sudo" - -#, fuzzy -msgid "sudo command groups to add" -msgstr "comandos sudo" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "" - -msgid "Add group for Sudo to execute as." -msgstr "" - -msgid "Add users and groups for Sudo to execute as." -msgstr "" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "Delete Sudo Rule." -msgstr "Exclui comando sudo." - -msgid "Disable a Sudo Rule." -msgstr "" - -msgid "Enable a Sudo Rule." -msgstr "" - -#, fuzzy -msgid "Search for Sudo Rule." -msgstr "Pesquisa por classes." - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -#, fuzzy -msgid "Modify Sudo Rule." -msgstr "Modifica comando sudo." - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "sudo command groups to remove" -msgstr "comandos sudo" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "Remove an option from Sudo Rule." -msgstr "" - -msgid "Remove group for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "" - -msgid "Display Sudo Rule." -msgstr "" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -#, fuzzy -msgid "ACL name" -msgstr "Nome de CLI" - -msgid "Profile category" -msgstr "" - -msgid "Profile category the ACL applies to" -msgstr "" - -msgid "User category the ACL applies to" -msgstr "" - -msgid "Host category the ACL applies to" -msgstr "" - -msgid "Service category the ACL applies to" -msgstr "" - -msgid "Profiles" -msgstr "" - -#, fuzzy -msgid "Create a new CA ACL." -msgstr "Cria um novo comando sudo." - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "" - -msgid "Add profiles to a CA ACL." -msgstr "" - -msgid "member Certificate Profile" -msgstr "" - -#, fuzzy -msgid "Certificate Profiles to add" -msgstr "%(name)s certificado não é válido" - -msgid "Add services to a CA ACL." -msgstr "" - -msgid "Add users and groups to a CA ACL." -msgstr "" - -msgid "Delete a CA ACL." -msgstr "" - -msgid "Disable a CA ACL." -msgstr "" - -msgid "Enable a CA ACL." -msgstr "" - -#, fuzzy -msgid "Search for CA ACLs." -msgstr "Pesquisa por classes." - -msgid "Modify a CA ACL." -msgstr "" - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "" - -msgid "Remove profiles from a CA ACL." -msgstr "" - -msgid "Certificate Profiles to remove" -msgstr "" - -msgid "Remove services from a CA ACL." -msgstr "" - -msgid "Remove users and groups from a CA ACL." -msgstr "" - -msgid "Display the properties of a CA ACL." -msgstr "" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -msgid "Profile description" -msgstr "" - -#, fuzzy -msgid "Brief description of this profile" -msgstr "Uma descrição deste comando" - -#, fuzzy -msgid "Store issued certificates" -msgstr "deve ser um certificado" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -#, fuzzy -msgid "Delete a Certificate Profile." -msgstr "deve ser um certificado" - -#, fuzzy -msgid "Search for Certificate Profiles." -msgstr "Pesquisa por classes." - -#, fuzzy -msgid "Import a Certificate Profile." -msgstr "deve ser um certificado" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" - -msgid "Query current Domain Level." -msgstr "" - -msgid "Current domain level:" -msgstr "" - -msgid "Change current Domain Level." -msgstr "" - -msgid "Domain Level" -msgstr "" - -msgid "Add certificates to host entry" -msgstr "" - -msgid "Remove certificates from host entry" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "Fallback to AD DC LDAP" -msgstr "" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" - -msgid "Add to default group" -msgstr "" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" - -msgid "Search scope" -msgstr "" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Target DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" - -msgid "Origin DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "Server name" -msgstr "" - -msgid "IPA server hostname" -msgstr "" - -msgid "Managed suffix" -msgstr "" - -msgid "Min domain level" -msgstr "" - -msgid "Minimum domain level" -msgstr "" - -msgid "Max domain level" -msgstr "" - -msgid "Maximum domain level" -msgstr "" - -msgid "Delete IPA server." -msgstr "" - -#, fuzzy -msgid "Search for IPA servers." -msgstr "Pesquisa por classes." - -msgid "Show IPA server." -msgstr "" - -#, fuzzy -msgid "Add new certificates to a service" -msgstr "%(name)s certificado não é válido" - -msgid "Remove certificates from a service" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed Target" -msgstr "" - -msgid "Create a new service delegation rule." -msgstr "" - -msgid "Add member to a named service delegation rule." -msgstr "" - -#, fuzzy -msgid "member principal" -msgstr "deve ser um principal de Kerberos" - -#, fuzzy -msgid "principal to add" -msgstr "Principal não encontrado\n" - -msgid "Add target to a named service delegation rule." -msgstr "" - -msgid "member service delegation target" -msgstr "" - -msgid "service delegation targets to add" -msgstr "" - -msgid "Delete service delegation." -msgstr "" - -#, fuzzy -msgid "Search for service delegations rule." -msgstr "Pesquisa por classes." - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" - -msgid "Remove member from a named service delegation rule." -msgstr "" - -#, fuzzy -msgid "principal to remove" -msgstr "Principal não encontrado\n" - -msgid "Remove target from a named service delegation rule." -msgstr "" - -msgid "service delegation targets to remove" -msgstr "" - -#, fuzzy -msgid "Display information about a named service delegation rule." -msgstr "Exibe informações sobre uma classe." - -msgid "Create a new service delegation target." -msgstr "" - -msgid "Add member to a named service delegation target." -msgstr "" - -msgid "Delete service delegation target." -msgstr "" - -msgid "Search for service delegation target." -msgstr "" - -msgid "Remove member from a named service delegation target." -msgstr "" - -#, fuzzy -msgid "Display information about a named service delegation target." -msgstr "Exibe informações sobre uma classe." - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" - -msgid "Activate a stage user." -msgstr "" - -msgid "Add a new stage user." -msgstr "" - -msgid "Create Stage user in from a delete user" -msgstr "" - -msgid "Delete a stage user." -msgstr "" - -#, fuzzy -msgid "Search for stage users." -msgstr "Pesquisa por classes." - -msgid "Search for stage users with these member of groups." -msgstr "" - -msgid "Search for stage users without these member of groups." -msgstr "" - -msgid "Search for stage users with these member of netgroups." -msgstr "" - -msgid "Search for stage users without these member of netgroups." -msgstr "" - -msgid "Search for stage users with these member of roles." -msgstr "" - -msgid "Search for stage users without these member of roles." -msgstr "" - -msgid "Search for stage users with these member of HBAC rules." -msgstr "" - -msgid "Search for stage users without these member of HBAC rules." -msgstr "" - -msgid "Search for stage users with these member of sudo rules." -msgstr "" - -msgid "Search for stage users without these member of sudo rules." -msgstr "" - -msgid "Modify a stage user." -msgstr "" - -msgid "Rename the stage user object" -msgstr "" - -#, fuzzy -msgid "Display information about a stage user." -msgstr "Exibe informações sobre uma classe." - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" - -msgid "Segment name" -msgstr "" - -msgid "Arbitrary string identifying the segment" -msgstr "" - -msgid "Left node" -msgstr "" - -msgid "Left replication node - an IPA server" -msgstr "" - -msgid "Right node" -msgstr "" - -msgid "Right replication node - an IPA server" -msgstr "" - -msgid "Connectivity" -msgstr "" - -msgid "Direction of replication between left and right replication node" -msgstr "" - -msgid "Attributes to strip" -msgstr "" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" - -msgid "Attributes to replicate" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" - -msgid "Attributes for total update" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" - -#, fuzzy -msgid "Session timeout" -msgstr "Erro de sessão" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" - -msgid "Replication agreement enabled" -msgstr "" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" - -msgid "Suffix name" -msgstr "" - -msgid "LDAP suffix to be managed" -msgstr "" - -msgid "Add a new segment." -msgstr "" - -msgid "Delete a segment." -msgstr "" - -#, fuzzy -msgid "Search for topology segments." -msgstr "Pesquisa por classes." - -msgid "Modify a segment." -msgstr "" - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" - -msgid "Initialize left node" -msgstr "" - -msgid "Initialize right node" -msgstr "" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "" - -msgid "Display a segment." -msgstr "" - -msgid "Add a new topology suffix to be managed." -msgstr "" - -msgid "Delete a topology suffix." -msgstr "" - -#, fuzzy -msgid "Search for topology suffices." -msgstr "Pesquisa por tópicos de ajuda." - -msgid "Modify a topology suffix." -msgstr "" - -msgid "Show managed suffix." -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "Preserved user" -msgstr "" - -msgid "Add one or more certificates to the user entry" -msgstr "" - -msgid "Remove one or more certificates to the user entry" -msgstr "" - -msgid "Move deleted user into staged area" -msgstr "" - -msgid "Undelete a delete user account." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "Vault name" -msgstr "" - -msgid "Vault description" -msgstr "" - -msgid "Vault type" -msgstr "" - -msgid "Salt" -msgstr "" - -msgid "Vault salt" -msgstr "" - -msgid "Public key" -msgstr "" - -msgid "Vault public key" -msgstr "" - -msgid "Owner users" -msgstr "" - -msgid "Owner groups" -msgstr "" - -msgid "Owner services" -msgstr "" - -msgid "Failed owners" -msgstr "" - -msgid "Vault service" -msgstr "" - -msgid "Shared vault" -msgstr "" - -msgid "Vault user" -msgstr "" - -#, fuzzy -msgid "Transport Certificate" -msgstr "deve ser um certificado" - -msgid "Service name of the service vault" -msgstr "" - -msgid "Username of the user vault" -msgstr "" - -msgid "Add members to a vault." -msgstr "" - -msgid "Add owners to a vault." -msgstr "" - -msgid "owner user" -msgstr "" - -msgid "owner group" -msgstr "" - -msgid "owner service" -msgstr "" - -msgid "Owners that could not be added" -msgstr "" - -msgid "Number of owners added" -msgstr "" - -msgid "Session key wrapped with transport certificate" -msgstr "" - -msgid "Vault data encrypted with session key" -msgstr "" - -msgid "Nonce" -msgstr "" - -msgid "Delete a vault." -msgstr "" - -#, fuzzy -msgid "Search for vaults." -msgstr "Pesquisa por classes." - -msgid "List all service vaults" -msgstr "" - -msgid "List all user vaults" -msgstr "" - -msgid "Remove members from a vault." -msgstr "" - -msgid "Remove owners from a vault." -msgstr "" - -#, fuzzy -msgid "Owners that could not be removed" -msgstr "O grupo de usuários padrão não pode ser removido" - -msgid "Number of owners removed" -msgstr "" - -#, fuzzy -msgid "Display information about a vault." -msgstr "Exibe informações sobre uma classe." - -msgid "Show vault configuration." -msgstr "" - -msgid "Output file to store the transport certificate" -msgstr "" - -msgid "Add owners to a vault container." -msgstr "" - -msgid "Delete a vault container." -msgstr "" - -msgid "Remove owners from a vault container." -msgstr "" - -#, fuzzy -msgid "Display information about a vault container." -msgstr "Exibe informações sobre um comando." - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "" - -msgid "Hostname (FQDN)" -msgstr "" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Managed suffixes" -msgstr "" - -msgid "Check connection to remote IPA server." -msgstr "" - -msgid "Remote server name" -msgstr "" - -msgid "Remote IPA server hostname" -msgstr "" - -msgid "suffix" -msgstr "" - -msgid "Search for servers with these managed suffixes." -msgstr "" - -msgid "Search for servers without these managed suffixes." -msgstr "" - -msgid "Add a manager to the stage user entry" -msgstr "" - -msgid "Remove a manager to the stage user entry" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -msgid "Managed LDAP suffix DN" -msgstr "" - -#, fuzzy -msgid "Search for topology suffixes." -msgstr "Pesquisa por classes." - -msgid "Add a manager to the user entry" -msgstr "" - -msgid "Remove a manager to the user entry" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Comma-separated list of attributes" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" - -msgid "DNS class" -msgstr "" - -msgid "Comma-separated list of raw A records" -msgstr "" - -msgid "Comma-separated list of raw AAAA records" -msgstr "" - -msgid "Comma-separated list of raw A6 records" -msgstr "" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "" - -msgid "Comma-separated list of raw APL records" -msgstr "" - -msgid "Comma-separated list of raw CERT records" -msgstr "" - -msgid "Comma-separated list of raw CNAME records" -msgstr "" - -msgid "Comma-separated list of raw DHCID records" -msgstr "" - -msgid "Comma-separated list of raw DLV records" -msgstr "" - -msgid "Comma-separated list of raw DNAME records" -msgstr "" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "" - -msgid "Comma-separated list of raw DS records" -msgstr "" - -msgid "Comma-separated list of raw HIP records" -msgstr "" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "" - -msgid "Comma-separated list of raw KEY records" -msgstr "" - -msgid "KEY Flags" -msgstr "" - -msgid "KEY Protocol" -msgstr "" - -msgid "Protocol" -msgstr "" - -msgid "KEY Algorithm" -msgstr "" - -msgid "KEY Public Key" -msgstr "" - -msgid "Public Key" -msgstr "" - -msgid "Comma-separated list of raw KX records" -msgstr "" - -msgid "Comma-separated list of raw LOC records" -msgstr "" - -msgid "Comma-separated list of raw MX records" -msgstr "" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "" - -msgid "Comma-separated list of raw NS records" -msgstr "" - -msgid "Comma-separated list of raw NSEC records" -msgstr "" - -msgid "NSEC Next Domain Name" -msgstr "" - -msgid "Next Domain Name" -msgstr "" - -msgid "NSEC Type Map" -msgstr "" - -msgid "Type Map" -msgstr "" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "" - -msgid "Comma-separated list of raw PTR records" -msgstr "" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "" - -msgid "RRSIG Type Covered" -msgstr "" - -msgid "Type Covered" -msgstr "" - -msgid "RRSIG Algorithm" -msgstr "" - -msgid "RRSIG Labels" -msgstr "" - -msgid "Labels" -msgstr "" - -msgid "RRSIG Original TTL" -msgstr "" - -msgid "Original TTL" -msgstr "" - -msgid "RRSIG Signature Expiration" -msgstr "" - -msgid "Signature Expiration" -msgstr "" - -msgid "RRSIG Signature Inception" -msgstr "" - -msgid "Signature Inception" -msgstr "" - -msgid "RRSIG Key Tag" -msgstr "" - -msgid "RRSIG Signer's Name" -msgstr "" - -msgid "Signer's Name" -msgstr "" - -msgid "RRSIG Signature" -msgstr "" - -msgid "Signature" -msgstr "" - -msgid "Comma-separated list of raw RP records" -msgstr "" - -msgid "Comma-separated list of raw SIG records" -msgstr "" - -msgid "SIG Type Covered" -msgstr "" - -msgid "SIG Algorithm" -msgstr "" - -msgid "SIG Labels" -msgstr "" - -msgid "SIG Original TTL" -msgstr "" - -msgid "SIG Signature Expiration" -msgstr "" - -msgid "SIG Signature Inception" -msgstr "" - -msgid "SIG Key Tag" -msgstr "" - -msgid "SIG Signer's Name" -msgstr "" - -msgid "SIG Signature" -msgstr "" - -msgid "Comma-separated list of raw SPF records" -msgstr "" - -msgid "Comma-separated list of raw SRV records" -msgstr "" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "" - -msgid "Comma-separated list of raw TA records" -msgstr "" - -msgid "Comma-separated list of raw TKEY records" -msgstr "" - -msgid "Comma-separated list of raw TSIG records" -msgstr "" - -msgid "Comma-separated list of raw TXT records" -msgstr "" - -msgid "SOA time to live" -msgstr "" - -msgid "SOA record time to live" -msgstr "" - -msgid "SOA class" -msgstr "" - -#, fuzzy -msgid "SOA record class" -msgstr "Pesquisa por classes." - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" - -#, fuzzy -msgid "Consume an entitlement." -msgstr "Comando não implementado" - -msgid "Quantity" -msgstr "" - -#, fuzzy -msgid "Search for entitlement accounts." -msgstr "Pesquisa por tópicos de ajuda." - -msgid "Retrieve the entitlement certs." -msgstr "" - -msgid "Import an entitlement certificate." -msgstr "" - -msgid "UUID" -msgstr "" - -msgid "Enrollment UUID" -msgstr "" - -msgid "Register to the entitlement system." -msgstr "" - -msgid "Username" -msgstr "" - -#, fuzzy -msgid "Enrollment UUID (not implemented)" -msgstr "Comando não implementado" - -msgid "Registration password" -msgstr "" - -msgid "Display current entitlements." -msgstr "" - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" - -msgid "comma-separated list of users to add" -msgstr "" - -msgid "comma-separated list of groups to add" -msgstr "" - -msgid "comma-separated list of users to remove" -msgstr "" - -msgid "comma-separated list of groups to remove" -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Source host category" -msgstr "" - -msgid "Source host category the rule applies to" -msgstr "" - -msgid "Source Hosts" -msgstr "" - -msgid "Source Host Groups" -msgstr "" - -msgid "comma-separated list of hosts to add" -msgstr "" - -msgid "comma-separated list of host groups to add" -msgstr "" - -msgid "comma-separated list of HBAC services to add" -msgstr "" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "" - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "" - -msgid "comma-separated list of hosts to remove" -msgstr "" - -msgid "comma-separated list of host groups to remove" -msgstr "" - -msgid "comma-separated list of HBAC services to remove" -msgstr "" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" - -msgid "Source host" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "comma-separated list of netgroups to add" -msgstr "" - -msgid "comma-separated list of netgroups to remove" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" - -msgid "Target members of a group" -msgstr "" - -msgid "User group to apply permissions to" -msgstr "" - -msgid "comma-separated list of privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI" -msgstr "" - -msgid "Permission type" -msgstr "" - -msgid "comma-separated list of privileges to remove" -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "comma-separated list of roles to add" -msgstr "" - -msgid "comma-separated list of permissions" -msgstr "" - -msgid "comma-separated list of roles to remove" -msgstr "" - -msgid "comma-separated list of privileges" -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "comma-separated list of sudo commands to add" -msgstr "" - -msgid "comma-separated list of sudo commands to remove" -msgstr "" - -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" - -msgid "comma-separated list of sudo command groups to add" -msgstr "" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "" - -msgid "Failed members" -msgstr "" - -msgid "Failed source hosts/hostgroups" -msgstr "" - -msgid "Failed hosts/hostgroups" -msgstr "" - -msgid "Failed users/groups" -msgstr "" - -msgid "Failed service/service groups" -msgstr "" - -#, fuzzy -msgid "Failed to remove" -msgstr "Incapaz de remover entrada\n" - -msgid "Failed RunAs" -msgstr "" - -msgid "Failed RunAsGroup" -msgstr "" - -msgid "Failed profiles" -msgstr "" - -msgid "Failed CAs" -msgstr "" - -msgid "Failed member manager" -msgstr "" - -msgid "Failed managedby" -msgstr "" - -#, fuzzy -msgid "Failed allowed to retrieve keytab" -msgstr "Falha ao abrir o keytab\n" - -#, fuzzy -msgid "Failed allowed to create keytab" -msgstr "Falha ao abrir o keytab\n" - -msgid "Failed targets" -msgstr "" +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "%(attr)s não contém \"%(value)s\"" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "%(attr)s: Sintaxe inválida." + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "%(attr)s: Apenas um valor permitido." + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(command_name)s: %(oname)s não encontrado" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "%(count)d comando sudo correspondido" +msgstr[1] "%(count)d comando sudo correspondidos" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "%(count)d certificado correspondido" +msgstr[1] "%(count)d certificados correspondidos" #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" "Cliente %(cver)s incompatível com o servidor %(sver)s em \"%(server)s\"" -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "erro desconhecido %(code)d de %(server)s: %(error)s" - -msgid "an internal error has occurred" -msgstr "ocorreu um erro interno" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "ocorreu um erro interno no servidor em \"%(server)s\"" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "comando desconhecido \"%(name)s\"" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "erro no servidor \"%(server)s\": %(error)s" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "não foi possível se conectar a \"%(uri)s\": %(error)s" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Solicitação JSON-RPC inválida: %(error)s" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "erro ao ordenar dados para transporte XML-RPC: %(error)s" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "HTTP Referer faltando ou inválido, %(referer)s" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" -"O sistema de codificação deve ser UTF-8, não tendo suporte a \"%(encoding)s" -"\". Defina LC_ALL=\"C.UTF-8\", ou LC_ALL=\"\" e LC_CTYPE=\"C.UTF-8\"." - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Erro de Kerberos: %(major)s/%(minor)s" - -msgid "did not receive Kerberos credentials" -msgstr "não foram recebidas as credenciais de Kerberos" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" -"O serviço \"%(service)s\" não foi encontrado no banco de dados de Kerberos" - -msgid "No credentials cache found" -msgstr "Nenhum cache de credenciais encontrado" - -msgid "Ticket expired" -msgstr "Tíquete expirado" - -msgid "Credentials cache permissions incorrect" -msgstr "Permissões incorretas de cache de credenciais" - -msgid "Bad format in credentials cache" -msgstr "Formato inválido no cache de credenciais" - -msgid "Cannot resolve KDC for requested realm" -msgstr "Não foi possível resolver KDC para o reino solicitado" - -msgid "Session error" -msgstr "Erro de sessão" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "O principal %(principal)s não conseguiu ser autenticado: %(message)s" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Acesso insuficiente: %(info)s" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "o comando \"%(name)s\" leva nenhum argumento" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "o comando \"%(name)s\" leva no máximo %(count)d argumento" -msgstr[1] "o comando \"%(name)s\" leva no máximo %(count)d argumentos" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "sobreposição de argumentos e opções: %(names)s" - -#, python-format -msgid "'%(name)s' is required" -msgstr "\"%(name)s\" é necessário" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "\"%(name)s\" inválido: %(error)s" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "a api não possui tal espaço de nomes: \"%(name)s\"" - -msgid "Passwords do not match" -msgstr "As senhas não coincidem" - -msgid "Command not implemented" -msgstr "Comando não implementado" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "O cliente não está configurado. Execute ipa-client-install." - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "Não foi possível obter %(name)s interativamente" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "O comando \"%(name)s\" foi descontinuado" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" -"O domínio \"%(domain)s\" não é um domínio raiz para a floresta \"%(forest)s\"" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -msgid "This entry already exists" -msgstr "Esta entrada já existe" - -msgid "You must enroll a host in order to create a host service" -msgstr "Você deve registrar um host para criar um serviço de host" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" -"O principal do serviço não é da forma: serviço/nome de host totalmente " -"qualificado: %(reason)s" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" -"O reino para o principal não corresponde ao reino para este servidor IPA" - -msgid "This command requires root access" -msgstr "Este comando requer acesso de root" - -msgid "This is already a posix group" -msgstr "Este já é um grupo posix" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "O principal não é da forma usuário@REINO: \"%(principal)s\"" - -msgid "This entry is already enabled" -msgstr "Esta entrada já está habilitada" - -msgid "This entry is already disabled" -msgstr "Esta entrada já está desabilitada" - -msgid "This entry cannot be enabled or disabled" -msgstr "Esta entrada não pode ser habilitada ou desabilitada" - -msgid "This entry is not a member" -msgstr "Esta entrada não é um membro" - -msgid "A group may not be a member of itself" -msgstr "Um grupo não pode ser um membro de si próprio" - -msgid "This entry is already a member" -msgstr "Esta entrada já é um membro" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Decodificação base64 falhou: %(reason)s" - -msgid "A group may not be added as a member of itself" -msgstr "Um grupo não pode ser adicionado como um membro de si próprio" - -msgid "The default users group cannot be removed" -msgstr "O grupo de usuários padrão não pode ser removido" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" -"A exclusão de um grupo gerenciado não é permitida. Ele deve ser desassociado " -"primeiro." - -msgid "A managed group cannot have a password policy." -msgstr "Um grupo gerenciado não pode ter uma política de senhas." - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "\"%(entry)s\" não tem um certificado." - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" -"Não foi possível criar um grupo privado. Um grupo \"%(group)s\" já existe." - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" -"Um problema foi encontrado ao verificar se todos os membros eram %(verb)s: " -"%(exc)s" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "%(attr)s não contém \"%(value)s\"" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" -"O critério de pesquisa não foi específico o suficiente. Esperava 1 e " -"encontrou %(found)d." - -msgid "This group already allows external members" -msgstr "Este grupo já permite membros externos" - -msgid "This group cannot be posix because it is external" -msgstr "Este grupo não pode ser posix porque é externo" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "Este já é um grupo posix e não pode ser convertido para um externo" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "Remoção do servidor abortada: %(reason)s." - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "%(operation)s não é suportado para principais %(principal_type)s" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "A solicitação falhou com status %(status)s: %(reason)s" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" -"O conjunto de regras de mapeamento \"%(ruleset)s\" tem mais de uma regra " -"para o auxiliar %(helper)s" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "\"%(attr)s\" já contém um ou mais valores" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "Nenhum comando nem tópico de ajuda \"%(topic)s\"" - -msgid "change collided with another change" -msgstr "a alteração colidiu com outra alteração" - -msgid "no modifications to be performed" -msgstr "nenhuma modificação para ser realizada" - #, python-format msgid "%(desc)s: %(info)s" msgstr "%(desc)s: %(info)s" -msgid "limits exceeded for this query" -msgstr "limites excedidos para esta consulta" +#, python-format +msgid "%(exception)s" +msgstr "%(exception)s" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "%(filename)s: arquivo não encontrado" #, python-format msgid "%(info)s" msgstr "%(info)s" -msgid "modifying primary key is not allowed" -msgstr "a modificação da chave primária não é permitida" - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "%(attr)s: Apenas um valor permitido." - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "%(attr)s: Sintaxe inválida." - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "Filtro de pesquisa inválido %(info)s" - -msgid "Not allowed on non-leaf entry" -msgstr "Não permitido em uma entrada não-folha" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "%(task)s Tempo limite da tarefa LDAP, DN da tarefa: '%(task_dn)s'" - -msgid "Configured time limit exceeded" -msgstr "Limite de tempo configurado excedido" - -msgid "Configured size limit exceeded" -msgstr "Limite de tamanho configurado excedido" - -msgid "Configured administrative server limit exceeded" -msgstr "Limite de servidor administrativo configurado excedido" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "A operação do certificado não pode ser concluída: %(error)s" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "Erro de formato de certificado: %(error)s" - -msgid "Already registered" -msgstr "Já registrado" - -msgid "Not registered yet" -msgstr "Não registrado ainda" - #, python-format msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" msgstr "" @@ -12058,410 +99,719 @@ msgstr "" msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" msgstr "%(label)s %(key)s não pode ser excluído / modificado: %(reason)s" +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(metaobject)s: %(oname)s não encontrado" + #, python-format msgid "%(name)s certificate is not valid" msgstr "%(name)s certificado não é válido" #, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "%(operation)s não é suportado para principais %(principal_type)s" #, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(otype)s \"%(oname)s\" não encontrado" #, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s: %(oname)s não encontrado" #, python-format -msgid "%(exception)s" -msgstr "%(exception)s" +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s: %(oname)s não encontrado" #, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - -msgid "Additional instructions:" -msgstr "" +msgid "%(reason)s" +msgstr "%(reason)s" #, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "%(task)s Tempo limite da tarefa LDAP, DN da tarefa: '%(task_dn)s'" -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" +#, python-format +msgid "%s: user is already preserved" +msgstr "%s: o usuário já está preservado" -#, fuzzy, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "A opção \"%(option)s\" foi descontinuada. %(additional_info)s" +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "\"%(attr)s\" já contém um ou mais valores" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "\"%(entry)s\" não tem um certificado." + +#, python-format +msgid "'%(name)s' is required" +msgstr "\"%(name)s\" é necessário" #, python-format msgid "'%(option)s' option is deprecated. %(additional_info)s" msgstr "A opção \"%(option)s\" foi descontinuada. %(additional_info)s" -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" +msgid "A description of this command" +msgstr "Uma descrição deste comando" -#, fuzzy, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "erro no servidor \"%(server)s\": %(error)s" +msgid "A group may not be a member of itself" +msgstr "Um grupo não pode ser um membro de si próprio" + +msgid "A group may not be added as a member of itself" +msgstr "Um grupo não pode ser adicionado como um membro de si próprio" + +msgid "A managed group cannot have a password policy." +msgstr "Um grupo gerenciado não pode ter uma política de senhas." #, python-format msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" msgstr "" +"Um problema foi encontrado ao verificar se todos os membros eram %(verb)s: " +"%(exc)s" + +msgid "A string searched in all relevant object attributes" +msgstr "Uma string buscada em todos os atributos de objeto relevantes" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "Conta desabilitada: %(disabled)s" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Adicionado o comando sudo \"%(value)s\"" + +msgid "Already registered" +msgstr "Já registrado" + +msgid "Always ask" +msgstr "Sempre perguntar" + +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "Ocorreu um erro interno (${error})" + +msgid "Bad format in credentials cache" +msgstr "Formato inválido no cache de credenciais" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "Filtro de pesquisa inválido %(info)s" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Decodificação base64 falhou: %(reason)s" + +msgid "CLI metavar" +msgstr "Metavar de CLI" + +msgid "CLI name" +msgstr "Nome de CLI" + +#, python-format +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "Não foi possível decodificar o arquivo \"%(filename)s\": %(exc)s" + +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "Não foi possível ler \"%(filename)s\": %(exc)s" + +msgid "Cannot resolve KDC for requested realm" +msgstr "Não foi possível resolver KDC para o reino solicitado" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "Erro de formato de certificado: %(error)s" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "A operação do certificado não pode ser concluída: %(error)s" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "Alterado o estado do servidor de \"%(value)s\"." + +msgid "Client is not configured. Run ipa-client-install." +msgstr "O cliente não está configurado. Execute ipa-client-install." + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "O comando \"%(name)s\" foi descontinuado" + +msgid "Command name" +msgstr "Nome do comando" + +msgid "Command not implemented" +msgstr "Comando não implementado" + +msgid "Configured administrative server limit exceeded" +msgstr "Limite de servidor administrativo configurado excedido" + +msgid "Configured size limit exceeded" +msgstr "Limite de tamanho configurado excedido" + +msgid "Configured time limit exceeded" +msgstr "Limite de tempo configurado excedido" + +msgid "Confirm (password)" +msgstr "Confirmar (senha)" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "Não foi possível obter %(name)s interativamente" + +msgid "Create new Sudo Command." +msgstr "Cria um novo comando sudo." + +msgid "Credentials cache permissions incorrect" +msgstr "Permissões incorretas de cache de credenciais" + +msgid "Debugging output" +msgstr "Saída de depuração" + +msgid "Default" +msgstr "Padrão" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "Excluir %(name)s \"%(value)s\"?" + +msgid "Delete Sudo Command." +msgstr "Exclui comando sudo." + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "Excluído o comando sudo \"%(value)s\"" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" +"A exclusão de um grupo gerenciado não é permitida. Ele deve ser desassociado " +"primeiro." + +msgid "Deprecated options" +msgstr "Opções obsoletas" + +#, python-format +msgid "Deprecated; use %s" +msgstr "Descontinuado; use %s" + +msgid "Display information about a class." +msgstr "Exibe informações sobre uma classe." + +msgid "Display information about a command." +msgstr "Exibe informações sobre um comando." + +msgid "Display information about a help topic." +msgstr "Exibe informações sobre um tópico de ajuda." + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "" +"O domínio \"%(domain)s\" não é um domínio raiz para a floresta \"%(forest)s\"" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "Erro ao armazenar credenciais no cache de credenciais: %s\n" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "Falha ao abrir o keytab\n" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "Falha ao remover o servidor %(master)s da lista de servidores: %(err)s" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "Falha ao definir o cursor '%1$s'\n" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "Falha ao decodificar Certificate Signing Request: %s" + +#, python-format +msgid "File %(file)s not found" +msgstr "Arquivo %(file)s não encontrado" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Acesso insuficiente: %(info)s" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Solicitação JSON-RPC inválida: %(error)s" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "Nome de domínio inválido \"%(domain)s\": %(e)s" + +#, c-format +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "" +"Solicitação JSON-RPC\n" +"%s\n" + +msgid "Kerberos Service Principal Name" +msgstr "Nome principal do serviço Kerberos" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Erro de Kerberos: %(major)s/%(minor)s" + +msgid "Leading and trailing spaces are not allowed" +msgstr "Espaços no início ou fim não são permitidos" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "Principal malformado: %(error)s" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "Principal malformado: \"%(value)s\"" #, python-format msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" msgstr "" +"O conjunto de regras de mapeamento \"%(ruleset)s\" tem mais de uma regra " +"para o auxiliar %(helper)s" #, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "HTTP Referer faltando ou inválido, %(referer)s" #, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" +msgid "Modify %(name)s '%(value)s'?" +msgstr "Modificar %(name)s \"%(value)s\"?" + +msgid "Modify Sudo Command." +msgstr "Modifica comando sudo." + +msgid "Multi-value" +msgstr "Multivalor" + +msgid "No credentials cache found" +msgstr "Nenhum cache de credenciais encontrado" + +msgid "No file to read" +msgstr "Nenhum arquivo para ler" + +msgid "No matching entries found" +msgstr "Não foram encontradas entradas coincidentes" + +msgid "Not allowed on non-leaf entry" +msgstr "Não permitido em uma entrada não-folha" + +msgid "Not registered yet" +msgstr "Não registrado ainda" + +msgid "Only one value is allowed" +msgstr "Apenas um valor é permitido" + +msgid "Password is too long!\n" +msgstr "A senha é longa demais!\n" + +msgid "Passwords do not match" +msgstr "As senhas não coincidem" + +msgid "Passwords do not match!" +msgstr "As senhas não coincidem!" + +#, c-format +msgid "Passwords do not match!\n" +msgstr "As senhas não coincidem!\n" + +msgid "Passwords must match" +msgstr "As senhas devem coincidir" + +msgid "Positional arguments" +msgstr "Argumentos posicionais" #, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "O principal %(principal)s não conseguiu ser autenticado: %(message)s" #, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "O principal não é da forma usuário@REINO: \"%(principal)s\"" -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" +msgid "Print debugging information" +msgstr "Imprimir informações de depuração" + +#, c-format +msgid "Removing principal %s\n" +msgstr "Removendo principal %s\n" #, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "A solicitação falhou com status %(status)s: %(reason)s" -#, fuzzy, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "A opção \"%(option)s\" foi descontinuada. %(additional_info)s" +msgid "Required" +msgstr "Obrigatório" + +msgid "Return command defaults" +msgstr "Retorna o padrão do comando" #, python-format -msgid "%(line)s" -msgstr "" +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "O usuário SELinux \"%(user)s\" não é válido: %(error)s" -#, fuzzy, python-format -msgid "Search result has been truncated: %(reason)s" +msgid "SID does not match any trusted domain" +msgstr "SID não corresponde a nenhum domínio confiável" + +msgid "Search for classes." +msgstr "Pesquisa por classes." + +msgid "Search for commands." +msgstr "Pesquisa por comandos." + +msgid "Search for help topics." +msgstr "Pesquisa por tópicos de ajuda." + +#, python-format +msgid "Server removal aborted: %(reason)s." msgstr "Remoção do servidor abortada: %(reason)s." #, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgid "Service '%(service)s' not found in Kerberos database" msgstr "" +"O serviço \"%(service)s\" não foi encontrado no banco de dados de Kerberos" #, python-format msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" msgstr "" +"O principal do serviço não é da forma: serviço/nome de host totalmente " +"qualificado: %(reason)s" -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" +msgid "Service principal is required" +msgstr "O principal do serviço é necessário" + +msgid "Session error" +msgstr "Erro de sessão" + +msgid "Sudo Commands" +msgstr "Comandos sudo" #, python-format msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set " +"LC_ALL=\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." msgstr "" +"O sistema de codificação deve ser UTF-8, não tendo suporte a " +"\"%(encoding)s\". Defina LC_ALL=\"C.UTF-8\", ou LC_ALL=\"\" e LC_CTYPE=\"C." +"UTF-8\"." #, python-format msgid "The certificate for %(ca)s is not available on this server." msgstr "O certificado para %(ca)s não está disponível neste servidor." #, python-format -msgid "%(count)d variables" -msgstr "" +msgid "The character %(char)r is not allowed." +msgstr "O caractere %(char)r não é permitido." -#, fuzzy, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "%(count)d comando sudo correspondido" -msgstr[1] "%(count)d comando sudo correspondidos" +msgid "The default users group cannot be removed" +msgstr "O grupo de usuários padrão não pode ser removido" -msgid "A dictionary representing an LDAP entry" +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" msgstr "" +"O principal a ser removido do keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgid "A list of LDAP entries" -msgstr "" - -msgid "All commands should at least have a result" +msgid "" +"The realm for the principal does not match the realm for this IPA server" msgstr "" +"O reino para o principal não corresponde ao reino para este servidor IPA" #, python-format -msgid "Enter %(label)s again to verify: " +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." msgstr "" - -msgid "Passwords do not match!" -msgstr "As senhas não coincidem!" - -msgid "No matching entries found" -msgstr "Não foram encontradas entradas coincidentes" - -msgid "Topic or Command" -msgstr "Tópico ou comando" +"O critério de pesquisa não foi específico o suficiente. Esperava 1 e " +"encontrou %(found)d." msgid "The topic or command name." msgstr "O nome do tópico ou comando." -msgid "Topic commands:" -msgstr "Comandos do tópico:" +msgid "This command requires root access" +msgstr "Este comando requer acesso de root" + +msgid "This entry already exists" +msgstr "Esta entrada já existe" + +msgid "This entry cannot be enabled or disabled" +msgstr "Esta entrada não pode ser habilitada ou desabilitada" + +msgid "This entry is already a member" +msgstr "Esta entrada já é um membro" + +msgid "This entry is already disabled" +msgstr "Esta entrada já está desabilitada" + +msgid "This entry is already enabled" +msgstr "Esta entrada já está habilitada" + +msgid "This entry is not a member" +msgstr "Esta entrada não é um membro" + +msgid "This group already allows external members" +msgstr "Este grupo já permite membros externos" + +msgid "This group cannot be posix because it is external" +msgstr "Este grupo não pode ser posix porque é externo" + +msgid "This is already a posix group" +msgstr "Este já é um grupo posix" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "Este já é um grupo posix e não pode ser convertido para um externo" + +msgid "Ticket expired" +msgstr "Tíquete expirado" msgid "To get command help, use:" msgstr "Para obter ajuda do comando, use:" -msgid " ipa --help" -msgstr "" +msgid "Topic commands:" +msgstr "Comandos do tópico:" -msgid "Command name" -msgstr "Nome do comando" - -msgid "Positional arguments" -msgstr "Argumentos posicionais" +msgid "Topic or Command" +msgstr "Tópico ou comando" #, python-format -msgid "Same as --%s" +msgid "Unable to create private group. A group '%(group)s' already exists." msgstr "" +"Não foi possível criar um grupo privado. Um grupo \"%(group)s\" já existe." -msgid "Deprecated options" -msgstr "Opções obsoletas" - -msgid "No file to read" -msgstr "Nenhum arquivo para ler" - -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - -#, python-format -msgid "%(filename)s: file not found" -msgstr "%(filename)s: arquivo não encontrado" - -#, fuzzy, python-brace-format -msgid "Unable to parse option {item}" +#, c-format +msgid "Unable to parse principal\n" msgstr "Incapaz de analisar o principal\n" -msgid "any of the configured servers" -msgstr "" +#, c-format +msgid "Unable to parse principal name\n" +msgstr "Incapaz de analisar o nome principal\n" -msgid "Exceeded number of tries to forward a request." -msgstr "" +#, c-format +msgid "Unable to remove entry\n" +msgstr "Incapaz de remover entrada\n" -msgid "Filename is empty" -msgstr "" +msgid "You must enroll a host in order to create a host service" +msgstr "Você deve registrar um host para criar um serviço de host" + +msgid "an internal error has occurred" +msgstr "ocorreu um erro interno" #, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "" +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "ocorreu um erro interno no servidor em \"%(server)s\"" #, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" +msgid "api has no such namespace: '%(name)s'" +msgstr "a api não possui tal espaço de nomes: \"%(name)s\"" -msgid "single label {}s are not supported" -msgstr "" +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "o atributo \"%(attribute)s\" não é permitido" -msgid "too many '@' characters" -msgstr "" +#, python-format +msgid "can be at most %(len)d characters" +msgstr "pode ser no máximo %(len)d caracteres" -#, fuzzy -msgid "cannot be longer that {} characters" +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "pode ser no máximo %(maxlength)d bytes" + +#, python-format +msgid "can be at most %(maxlength)d characters" msgstr "pode ser no máximo %(maxlength)d caracteres" -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -#, fuzzy -msgid "options are not allowed" -msgstr "a modificação da chave primária não é permitida" - -#, fuzzy -msgid "invalid hostmask" -msgstr "nome de domínio inválido: %s" +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "pode ser no máximo %(maxvalue)d" #, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "consulta \"%(owner)s %(rtype)s\": %(error)s" - -#, fuzzy, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "consulta \"%(owner)s %(rtype)s\": %(error)s" +msgid "can be at most %(maxvalue)s" +msgstr "pode ser no máximo %(maxvalue)s" #, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "não foi possível se conectar a \"%(uri)s\": %(error)s" + +msgid "change collided with another change" +msgstr "a alteração colidiu com outra alteração" + +msgid "command" +msgstr "comando" #, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "o comando \"%(name)s\" leva no máximo %(count)d argumento" +msgstr[1] "o comando \"%(name)s\" leva no máximo %(count)d argumentos" -#, fuzzy -msgid "invalid escape code in domain name" -msgstr "nome de domínio inválido: %s" +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "o comando \"%(name)s\" leva nenhum argumento" -msgid "domain name cannot be longer than 255 characters" -msgstr "" +msgid "commands" +msgstr "comandos" -msgid "DNS label cannot be longer than 63 characters" -msgstr "" +msgid "did not receive Kerberos credentials" +msgstr "não foram recebidas as credenciais de Kerberos" -#, fuzzy -msgid "invalid domain name" -msgstr "nome de domínio inválido: %s" +msgid "does not match any of accepted formats: " +msgstr "não corresponde a nenhum dos formatos aceitos: " -#, fuzzy, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "Nome de domínio inválido \"%(domain)s\": %(e)s" +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "erro ao ordenar dados para transporte XML-RPC: %(error)s" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "erro no servidor \"%(server)s\": %(error)s" + +msgid "incomplete time value" +msgstr "valor de hora incompleto" + +msgid "incorrect type" +msgstr "tipo incorreto" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "\"%(name)s\" inválido: %(error)s" #, python-format msgid "invalid domain-name: %s" msgstr "nome de domínio inválido: %s" #, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" +msgid "key %(key)s already exists" +msgstr "a chave %(key)s já existe" #, python-format -msgid "%(port)s is not a valid port" -msgstr "" +msgid "key named %(key)s already exists" +msgstr "uma chave chamada %(key)s já existe" -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "krb5_kt_get_entry %1$d: %2$s\n" -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "krb5_kt_remove_entry %1$d: %2$s\n" -msgid "incorrect type" -msgstr "tipo incorreto" +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "krb5_parse_name %1$d: %2$s\n" -msgid "Only one value is allowed" -msgstr "Apenas um valor é permitido" +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "krb5_unparse_name %1$d: %2$s\n" -msgid "this option is deprecated" -msgstr "esta opção foi descontinuada" +#, c-format +msgid "kvno %d\n" +msgstr "kvno %d\n" + +msgid "limits exceeded for this query" +msgstr "limites excedidos para esta consulta" + +#, python-format +msgid "map %(map)s already exists" +msgstr "o mapa %(map)s já existe" + +msgid "modifying primary key is not allowed" +msgstr "a modificação da chave primária não é permitida" + +#, python-format +msgid "must be \"%s\"" +msgstr "deve ser \"%s\"" + +#, python-format +msgid "must be '%(value)s'" +msgstr "deve ser \"%(value)s\"" + +msgid "must be DNS name" +msgstr "deve ser um nome de DNS" + +msgid "must be Kerberos principal" +msgstr "deve ser um principal de Kerberos" msgid "must be True or False" msgstr "deve ser True ou False" +msgid "must be Unicode text" +msgstr "deve ser um texto Unicode" + +msgid "must be a certificate" +msgstr "deve ser um certificado" + +msgid "must be a certificate signing request" +msgstr "deve ser uma solicitação de assinatura de certificado" + +msgid "must be a decimal number" +msgstr "deve ser um número decimal" + +msgid "must be absolute" +msgstr "deve ser absoluto" + msgid "must be an integer" msgstr "deve ser um inteiro" +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "deve ser pelo menos %(minlength)d bytes" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "deve ser pelo menos %(minlength)d caracteres" + #, python-format msgid "must be at least %(minvalue)d" msgstr "deve ser pelo menos %(minvalue)d" -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "pode ser no máximo %(maxvalue)d" - -msgid "must be a decimal number" -msgstr "deve ser um número decimal" - #, python-format msgid "must be at least %(minvalue)s" msgstr "deve ser pelo menos %(minvalue)s" +msgid "must be binary data" +msgstr "deve ser um dado binário" + +msgid "must be datetime value" +msgstr "deve ser um valor de data e hora" + +msgid "must be dictionary" +msgstr "deve ser um dicionário" + #, python-format -msgid "can be at most %(maxvalue)s" -msgstr "pode ser no máximo %(maxvalue)s" +msgid "must be exactly %(length)d bytes" +msgstr "deve ser exatamente %(length)d bytes" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "deve ser exatamente %(length)d caracteres" + +#, python-format +msgid "must be one of %(values)s" +msgstr "deve ser um de %(values)s" + +msgid "must be relative" +msgstr "deve ser relativo" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "deve corresponder ao padrão \"%(pattern)s\"" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "Nenhum comando nem tópico de ajuda \"%(topic)s\"" + +msgid "no modifications to be performed" +msgstr "nenhuma modificação para ser realizada" #, python-format msgid "" @@ -12472,11879 +822,46 @@ msgstr "" "número: %(allowed)s" #, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "deve corresponder ao padrão \"%(pattern)s\"" - -msgid "must be binary data" -msgstr "deve ser um dado binário" +msgid "overlapping arguments and options: %(names)s" +msgstr "sobreposição de argumentos e opções: %(names)s" #, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "deve ser pelo menos %(minlength)d bytes" +msgid "permission \"%(value)s\" already exists" +msgstr "a permissão \"%(value)s\" já existe" + +#, c-format +msgid "principal not found\n" +msgstr "Principal não encontrado\n" #, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "pode ser no máximo %(maxlength)d bytes" +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "consulta \"%(owner)s %(rtype)s\": %(error)s" -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "deve ser exatamente %(length)d bytes" - -msgid "must be a certificate" -msgstr "deve ser um certificado" - -msgid "must be a certificate signing request" -msgstr "deve ser uma solicitação de assinatura de certificado" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "Falha ao decodificar Certificate Signing Request: %s" - -msgid "must be Unicode text" -msgstr "deve ser um texto Unicode" - -msgid "Leading and trailing spaces are not allowed" -msgstr "Espaços no início ou fim não são permitidos" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "deve ser pelo menos %(minlength)d caracteres" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "pode ser no máximo %(maxlength)d caracteres" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "deve ser exatamente %(length)d caracteres" - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "O caractere %(char)r não é permitido." - -#, python-format -msgid "must be '%(value)s'" -msgstr "deve ser \"%(value)s\"" - -#, python-format -msgid "must be one of %(values)s" -msgstr "deve ser um de %(values)s" - -msgid "must be datetime value" -msgstr "deve ser um valor de data e hora" - -msgid "does not match any of accepted formats: " -msgstr "não corresponde a nenhum dos formatos aceitos: " - -msgid "incomplete time value" -msgstr "valor de hora incompleto" - -msgid "must be DNS name" -msgstr "deve ser um nome de DNS" - -msgid "must be absolute" -msgstr "deve ser absoluto" - -msgid "must be relative" -msgstr "deve ser relativo" - -msgid "must be dictionary" -msgstr "deve ser um dicionário" - -msgid "must be Kerberos principal" -msgstr "deve ser um principal de Kerberos" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "Principal malformado: \"%(value)s\"" - -msgid "Service principal is required" -msgstr "O principal do serviço é necessário" - -#, fuzzy -msgid "must be at least 0" -msgstr "deve ser pelo menos %(minvalue)d" - -#, fuzzy -msgid "invalid valid hex" -msgstr "nome de domínio inválido: %s" - -#, fuzzy -msgid "invalid serial number 0" -msgstr "deve ser um número decimal" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "" +#, c-format +msgid "realm not found\n" +msgstr "realm não encontrado\n" #, python-format msgid "request failed with HTTP status %d" msgstr "a solicitação falhou com status HTTP %d" -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "" - -#, fuzzy, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "a solicitação falhou com status HTTP %d" - -#, fuzzy, python-format -msgid "objectclass %s not found" -msgstr "%(metaobject)s: %(oname)s não encontrado" - -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "Failed to authenticate to CA REST API" -msgstr "" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "" - -#, fuzzy, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "%(parent)s: %(oname)s não encontrado" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -msgid "Automount Location" -msgstr "" - -#, fuzzy, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "%(count)d comando sudo correspondido" -msgstr[1] "%(count)d comando sudo correspondidos" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, fuzzy, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "%(count)d comando sudo correspondido" -msgstr[1] "%(count)d comando sudo correspondidos" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "uma chave chamada %(key)s já existe" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, fuzzy, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "%(count)d comando sudo correspondido" -msgstr[1] "%(count)d comando sudo correspondidos" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -#, fuzzy, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "Principal malformado: \"%(value)s\"" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, fuzzy, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "Alterado o estado do servidor de \"%(value)s\"." - -#, fuzzy -msgid "Certificate profiles cannot be renamed" -msgstr "A operação do certificado não pode ser concluída: %(error)s" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -#, fuzzy -msgid "Delegations" -msgstr "Opções obsoletas" - -msgid "Delegation" -msgstr "" - -msgid "ACI" -msgstr "" - -#, fuzzy, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "" - -msgid "DNS servers" -msgstr "" - -msgid "DNS Servers" -msgstr "" - -msgid "DNS Server" -msgstr "" - -msgid "DNS Server name" -msgstr "" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, fuzzy, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "Alterado o estado do servidor de \"%(value)s\"." - -#, fuzzy -msgid "Search for DNS servers." -msgstr "Pesquisa por classes." - -#, fuzzy, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -msgid "IPA DNS Server is not installed" -msgstr "" - -#, fuzzy -msgid "Display configuration of a DNS server." -msgstr "Exibe informações sobre uma classe." - -msgid "Add a new DNS server." -msgstr "" - -#, fuzzy, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "Delete a DNS server" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "" - -msgid "User Group" -msgstr "" - -#, fuzzy, python-format -msgid "Added group \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "gid cannot be set for external group" -msgstr "" - -#, fuzzy -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "o atributo \"%(attribute)s\" não é permitido" - -#, fuzzy, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "privileged group" -msgstr "" - -#, fuzzy, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "not allowed to modify user entries" -msgstr "Não permitido em uma entrada não-folha" - -#, fuzzy -msgid "not allowed to modify group entries" -msgstr "Não permitido em uma entrada não-folha" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, fuzzy, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, fuzzy, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "Alterado o estado do servidor de \"%(value)s\"." - -#, fuzzy, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "host groups" -msgstr "" - -msgid "Host Group" -msgstr "" - -#, fuzzy, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "hostgroup" -msgstr "" - -msgid "privileged hostgroup" -msgstr "" - -#, fuzzy, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "%(count)d comando sudo correspondido" -msgstr[1] "%(count)d comando sudo correspondidos" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -#, fuzzy -msgid "Auto private groups" -msgstr "Pesquisa por tópicos de ajuda." - -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -#, fuzzy -msgid "" -"\n" -"IPA locations\n" -msgstr "" -"\n" -"Operações de certificado IPA\n" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "" - -msgid "locations" -msgstr "" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -#, fuzzy -msgid "Location name" -msgstr "Nome do comando" - -msgid "IPA location name" -msgstr "" - -msgid "IPA Location description" -msgstr "" - -msgid "Servers" -msgstr "" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, fuzzy, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "Delete an IPA location." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "IPA Server" -msgstr "" - -#, fuzzy -msgid "Modify information about an IPA location." -msgstr "Exibe informações sobre um comando." - -#, fuzzy, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy -msgid "Search for IPA locations." -msgstr "Pesquisa por comandos." - -#, fuzzy, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "%(count)d comando sudo correspondido" -msgstr[1] "%(count)d comando sudo correspondidos" - -#, fuzzy -msgid "Display information about an IPA location." -msgstr "Exibe informações sobre um comando." - -msgid "Servers in location" -msgstr "" - -msgid "netgroups" -msgstr "" - -msgid "Netgroups" -msgstr "" - -msgid "Netgroup" -msgstr "" - -#, fuzzy, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "Modificar %(name)s \"%(value)s\"?" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" -msgstr "" - -#, fuzzy, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "cannot be empty" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "%(count)d comando sudo correspondido" -msgstr[1] "%(count)d comando sudo correspondidos" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, fuzzy, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Alterado o estado do servidor de \"%(value)s\"." - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -#, fuzzy -msgid "Whether PKINIT is enabled or disabled" -msgstr "Esta entrada não pode ser habilitada ou desabilitada" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -#, fuzzy -msgid "invalid attribute name" -msgstr "nome de domínio inválido: %s" - -msgid "invalid port number" -msgstr "" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -msgid "RADIUS Servers" -msgstr "" - -msgid "RADIUS Server" -msgstr "" - -#, fuzzy, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "Role" -msgstr "" - -#, fuzzy, python-format -msgid "Added role \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified role \"%(value)s\"" -msgstr "Modificar %(name)s \"%(value)s\"?" - -#, fuzzy, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -msgid "Self Service Permissions" -msgstr "" - -msgid "Self Service Permission" -msgstr "" - -#, fuzzy, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "Alterado o estado do servidor de \"%(value)s\"." - -#, fuzzy, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "Excluir %(name)s \"%(value)s\"?" - -#, fuzzy, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "Modificar %(name)s \"%(value)s\"?" - -#, fuzzy, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "" - -msgid "server roles" -msgstr "" - -msgid "IPA Server Roles" -msgstr "" - -msgid "IPA Server Role" -msgstr "" - -msgid "IPA server role name" -msgstr "" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -msgid "Include IPA master entries" -msgstr "" - -msgid "IPA role name" -msgstr "" - -#, fuzzy, python-brace-format -msgid "{role}: role not found" -msgstr "realm não encontrado\n" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -#, fuzzy -msgid "Member principals" -msgstr "Removendo principal %s\n" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "Principal malformado: %(error)s" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, fuzzy, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "Alterado o estado do servidor de \"%(value)s\"." - -#, fuzzy, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "privileged service delegation rule" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, fuzzy, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "Alterado o estado do servidor de \"%(value)s\"." - -#, fuzzy, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "privileged service delegation target" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -msgid "Subordinate id description" -msgstr "" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -msgid "SubUID range size" -msgstr "" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -msgid "SubGID range size" -msgstr "" - -msgid "Subordinate group ID count" -msgstr "" - -#, fuzzy, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "uma chave chamada %(key)s já existe" - -#, fuzzy, python-format -msgid "'%(dn)s is not a valid user" -msgstr "%(name)s certificado não é válido" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -msgid "Add a new subordinate id." -msgstr "" - -#, fuzzy, python-format -msgid "Added subordinate id \"%(value)s\"" -msgstr "Alterado o estado do servidor de \"%(value)s\"." - -#, fuzzy -msgid "Delete a subordinate id." -msgstr "deve ser um certificado" - -#, fuzzy, python-format -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy -msgid "Modify a subordinate id." -msgstr "Modifica comando sudo." - -#, fuzzy, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "Alterado o estado do servidor de \"%(value)s\"." - -#, fuzzy -msgid "Search for subordinate id." -msgstr "Pesquisa por classes." - -#, fuzzy, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -#, fuzzy -msgid "Display information about a subordinate id." -msgstr "Exibe informações sobre um comando." - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - msgid "sudo command" msgstr "comando sudo" msgid "sudo commands" msgstr "comandos sudo" -msgid "Sudo Commands" -msgstr "Comandos sudo" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "%(count)d comando sudo correspondido" -msgstr[1] "%(count)d comando sudo correspondidos" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -#, fuzzy -msgid "sudo command group" -msgstr "comando sudo" - -#, fuzzy -msgid "sudo command groups" -msgstr "comandos sudo" - -#, fuzzy, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "%(count)d comando sudo correspondido" -msgstr[1] "%(count)d comando sudo correspondidos" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -#, fuzzy, python-format -msgid "Added segment \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "Modificar %(name)s \"%(value)s\"?" - -#, fuzzy, python-format -msgid "%(value)s" -msgstr "deve ser \"%(value)s\"" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -#, fuzzy, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "Exibe informações sobre uma classe." - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "" - -msgid "servers" -msgstr "" - -msgid "IPA Servers" -msgstr "" - -msgid "Server location" -msgstr "" - -msgid "Service weight" -msgstr "" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -#, fuzzy -msgid "Modify information about an IPA server." -msgstr "Exibe informações sobre uma classe." - -#, fuzzy, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "Alterado o estado do servidor de \"%(value)s\"." - -#, fuzzy, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -#, fuzzy, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, fuzzy, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "Falha ao remover o servidor %(master)s da lista de servidores: %(err)s" - -#, fuzzy, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "Falha ao remover o servidor %(master)s da lista de servidores: %(err)s" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "Falha ao remover o servidor %(master)s da lista de servidores: %(err)s" - -#, fuzzy, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "Falha ao remover o servidor %(master)s da lista de servidores: %(err)s" - -#, fuzzy, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "Principal malformado: %(error)s" - -#, fuzzy, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "Falha ao remover o servidor %(master)s da lista de servidores: %(err)s" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, fuzzy, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "Falha ao remover o servidor %(master)s da lista de servidores: %(err)s" - -#, fuzzy -msgid "Server has already been deleted" -msgstr "Esta entrada já está habilitada" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "deve ser \"%s\"" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -msgid "Server state" -msgstr "" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "Alterado o estado do servidor de \"%(value)s\"." - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "A list of ACI values" -msgstr "" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -#, fuzzy -msgid "ACI prefix is required" -msgstr "O principal do serviço é necessário" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, fuzzy, python-format -msgid "Syntax Error: %(error)s" -msgstr "Erro de formato de certificado: %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, fuzzy, python-format -msgid "ACI with name \"%s\" not found" -msgstr "%(otype)s \"%(oname)s\" não encontrado" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -#, fuzzy, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d comando sudo correspondido" -msgstr[1] "%(count)d comando sudo correspondidos" - -#, fuzzy, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(otype)s \"%(oname)s\" não encontrado" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" -"\n" -" Exibe informações sobre um regra automembro.\n" -" " - -#, fuzzy, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "Auto Membership is not configured" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" -"\n" -" Exibe informações sobre um regra automembro.\n" -" " - -#, fuzzy, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" -"\n" -" Exibe informações sobre um regra automembro.\n" -" " - -#, fuzzy, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" -"\n" -" Exibe informações sobre um regra automembro.\n" -" " - -#, fuzzy, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" -"\n" -" Exibe informações sobre um regra automembro.\n" -" " - -#, fuzzy, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" -"\n" -" Exibe informações sobre um regra automembro.\n" -" " - -#, fuzzy, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" -"\n" -" Exibe informações sobre um regra automembro.\n" -" " - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" -"\n" -" Exibe informações sobre um regra automembro.\n" -" " - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -#, fuzzy -msgid "An IPA master host cannot be deleted or disabled" -msgstr "Esta entrada não pode ser habilitada ou desabilitada" - -msgid "entry" -msgstr "" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "" - -#, fuzzy, python-format -msgid "container entry (%(container)s) not found" -msgstr "%(parent)s: %(oname)s não encontrado" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s: %(oname)s não encontrado" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s: %(oname)s não encontrado" - -#, fuzzy, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "uma chave chamada %(key)s já existe" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "o atributo \"%(attribute)s\" não é permitido" - -#, fuzzy, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "o atributo \"%(attribute)s\" não é permitido" - -#, fuzzy -msgid "attribute is not configurable" -msgstr "o atributo \"%(attribute)s\" não é permitido" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -msgstr "" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -msgid "" -"\n" -"Managed permissions\n" -msgstr "" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -#, fuzzy -msgid "must be enclosed in parentheses" -msgstr "deve ser um inteiro" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, python-format -msgid "Deprecated; use %s" -msgstr "Descontinuado; use %s" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, fuzzy, python-format -msgid "Entry %s not found" -msgstr "realm não encontrado\n" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, fuzzy, python-format -msgid "option was renamed; use %s" -msgstr "Descontinuado; use %s" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, fuzzy, python-format -msgid "%s: group not found" -msgstr "realm não encontrado\n" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -#, fuzzy -msgid "Bad search filter" -msgstr "Filtro de pesquisa inválido %(info)s" - -#, python-format -msgid "Entry %s does not exist" -msgstr "" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, fuzzy, python-format -msgid "Added permission \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, fuzzy, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "a permissão \"%(value)s\" já existe" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, fuzzy, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "Principal malformado: \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -msgid "Help topic" -msgstr "" - -msgid "Version" -msgstr "" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "Nome do comando" - -msgid "Display information about a command." -msgstr "Exibe informações sobre um comando." - -msgid "Search for commands." -msgstr "Pesquisa por comandos." - -msgid "Return command defaults" -msgstr "Retorna o padrão do comando" - -#, fuzzy, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "realm não encontrado\n" - -msgid "Display information about a class." -msgstr "Exibe informações sobre uma classe." - -msgid "Search for classes." -msgstr "Pesquisa por classes." - -msgid "Display information about a help topic." -msgstr "Exibe informações sobre um tópico de ajuda." - -msgid "Search for help topics." -msgstr "Pesquisa por tópicos de ajuda." - -msgid "Required" -msgstr "Obrigatório" - -msgid "Multi-value" -msgstr "Multivalor" - -msgid "Always ask" -msgstr "Sempre perguntar" - -msgid "CLI metavar" -msgstr "Metavar de CLI" - -msgid "CLI name" -msgstr "Nome de CLI" - -msgid "Confirm (password)" -msgstr "Confirmar (senha)" - -msgid "Default" -msgstr "Padrão" - -#, fuzzy -msgid "Default from" -msgstr "Padrão" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -#, fuzzy -msgid "Positional argument" -msgstr "Argumentos posicionais" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(metaobject)s: %(oname)s não encontrado" - -#, fuzzy -msgid "Display information about a command parameter." -msgstr "Exibe informações sobre um comando." - -#, fuzzy -msgid "Search command parameters." -msgstr "Pesquisa por comandos." - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(command_name)s: %(oname)s não encontrado" - -#, fuzzy -msgid "Display information about a command output." -msgstr "Exibe informações sobre um comando." - -#, fuzzy -msgid "Search for command outputs." -msgstr "Pesquisa por comandos." - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -#, fuzzy -msgid "Trust direction" -msgstr "deve ser um dicionário" - -msgid "Trust type" -msgstr "" - -msgid "Trust status" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -msgid "trust configuration" -msgstr "" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, fuzzy -msgid "not allowed to remotely add agent" -msgstr "Não permitido em uma entrada não-folha" - -#, fuzzy, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -#, fuzzy -msgid "vault" -msgstr "Padrão" - -#, fuzzy -msgid "vaults" -msgstr "Padrão" - -#, fuzzy -msgid "Vaults" -msgstr "Padrão" - -#, fuzzy -msgid "Vault" -msgstr "Padrão" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, fuzzy, python-format -msgid "Added vault \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, fuzzy, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "Modificar %(name)s \"%(value)s\"?" - -msgid "Vault configuration" -msgstr "" - -msgid "IPA KRA servers" -msgstr "" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -msgid "Key wrapping algorithm" -msgstr "" - -#, fuzzy, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "Retrieve data from a vault." -msgstr "" - -#, fuzzy, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -#, fuzzy -msgid "must be TRUE or FALSE" -msgstr "deve ser True ou False" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "Principal alias" -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -msgid "External IdP configuration" -msgstr "" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -#, fuzzy -msgid "Base-64 encoded user certificate" -msgstr "deve ser um certificado" - -msgid "Certificate mapping data" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, fuzzy, python-format -msgid "manager %(manager)s not found" -msgstr "%(command_name)s: %(oname)s não encontrado" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "pode ser no máximo %(len)d caracteres" - -msgid "Issuer" -msgstr "" - -#, fuzzy -msgid "Issuer of the certificate" -msgstr "deve ser um certificado" - -msgid "Subject" -msgstr "" - -#, fuzzy -msgid "Subject of the certificate" -msgstr "deve ser um certificado" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, fuzzy, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, fuzzy, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "%(count)d comando sudo correspondido" -msgstr[1] "%(count)d comando sudo correspondidos" - -#, fuzzy, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -msgid "users cannot be added when user category='all'" -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "" - -#, python-format -msgid "%i services added." -msgstr "" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -#, fuzzy -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "Exibe informações sobre um tópico de ajuda." - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -msgid "User logins" -msgstr "" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -#, fuzzy -msgid "must be at least 10" -msgstr "deve ser pelo menos %(minvalue)d" - -msgid "configuration options" -msgstr "" - -msgid "Configuration" -msgstr "" - -msgid "Maximum hostname length" -msgstr "" - -msgid "Enable adding subids to new users" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -msgid "IPA DNS servers" -msgstr "" - -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -msgid "Setup SID configuration" -msgstr "" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -msgid "Add SIDs" -msgstr "" - -msgid "Add SIDs for existing users and groups" -msgstr "" - -#, fuzzy -msgid "NetBIOS name of the IPA domain" -msgstr "SID não corresponde a nenhum domínio confiável" - -#, fuzzy -msgid "Empty domain is not allowed" -msgstr "a modificação da chave primária não é permitida" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "Nome de domínio inválido \"%(domain)s\": %(e)s" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "Nome de domínio inválido \"%(domain)s\": %(e)s" - -#, fuzzy -msgid "not allowed to enable SID generation" -msgstr "Não permitido em uma entrada não-folha" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -#, fuzzy -msgid "Failed to call DBus" -msgstr "Nenhum arquivo para ler" - -msgid "Configuration of SID failed. See details in the error log" -msgstr "" - -msgid "The group doesn't exist" -msgstr "" - -#, fuzzy, python-format -msgid "attribute \"%s\" not allowed" -msgstr "o atributo \"%(attribute)s\" não é permitido" - -msgid "May not be empty" -msgstr "" - -#, fuzzy, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "o atributo \"%(attribute)s\" não é permitido" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "O usuário SELinux \"%(user)s\" não é válido: %(error)s" - -msgid "SELinux user map default user not in order list" -msgstr "" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -#, fuzzy -msgid "invalid domain-name: not fully qualified" -msgstr "nome de domínio inválido: %s" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, fuzzy, python-format -msgid "DNS zone %(zone)s not found" -msgstr "%(otype)s \"%(oname)s\" não encontrado" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, python-format -msgid "%s Record" -msgstr "" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, fuzzy, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "Não foi possível ler \"%(filename)s\": %(exc)s" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -msgid "Priority (order)" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -msgid "Managedby permission" -msgstr "" - -msgid "cannot be used when a zone is specified" -msgstr "" - -#, fuzzy -msgid "Only one zone type is allowed per zone name" -msgstr "Apenas um valor é permitido" - -#, fuzzy, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "a permissão \"%(value)s\" já existe" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -msgid "Default time to live" -msgstr "" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy -msgid "is required" -msgstr "Obrigatório" - -#, fuzzy, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, fuzzy, python-format -msgid "Found '%(value)s'" -msgstr "deve ser \"%(value)s\"" - -#, fuzzy, python-format -msgid "Host '%(host)s' not found" -msgstr "%(otype)s \"%(oname)s\" não encontrado" - -msgid "DNS configuration options" -msgstr "" - -msgid "DNS Global Configuration" -msgstr "" - -msgid "IPA DNS version" -msgstr "" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -#, fuzzy -msgid "Result of the command" -msgstr "Uma descrição deste comando" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -#, fuzzy -msgid "The deny type has been deprecated." -msgstr "O comando \"%(name)s\" foi descontinuado" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, fuzzy, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host" -msgstr "" - -#, fuzzy -msgid "Base-64 encoded host certificate" -msgstr "deve ser um certificado" - -msgid "Serial Number" -msgstr "" - -msgid "Serial Number (hex)" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, fuzzy, python-format -msgid "Added host \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, fuzzy, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Modificar %(name)s \"%(value)s\"?" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -#, fuzzy, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "pode ser no máximo %(maxvalue)s" - -#, fuzzy, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "Alterado o estado do servidor de \"%(value)s\"." - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" - -msgid "Invalid URI: not an https scheme" -msgstr "" - -msgid "Invalid URI: missing netloc" -msgstr "" - -msgid "Identity Provider server" -msgstr "" - -msgid "Identity Provider servers" -msgstr "" - -msgid "Identity Provider server name" -msgstr "" - -msgid "Authorization URI" -msgstr "" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -msgid "Token URI" -msgstr "" - -msgid "Token endpoint" -msgstr "" - -msgid "User info URI" -msgstr "" - -msgid "User information endpoint" -msgstr "" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -msgid "Client identifier" -msgstr "" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -msgid "Add a new Identity Provider server." -msgstr "" - -#, fuzzy, python-format -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -msgid "Base URL" -msgstr "" - -msgid "Base URL for IdP provider templates" -msgstr "" - -msgid "unknown provider" -msgstr "" - -msgid "value is missing" -msgstr "" - -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "" - -#, fuzzy -msgid "Delete an Identity Provider server." -msgstr "deve ser um certificado" - -#, fuzzy, python-format -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "Modify an Identity Provider server." -msgstr "" - -#, fuzzy, python-format -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "Alterado o estado do servidor de \"%(value)s\"." - -#, fuzzy -msgid "Search for Identity Provider servers." -msgstr "Pesquisa por classes." - -#, fuzzy, python-format -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -#, fuzzy -msgid "Display information about an Identity Provider server." -msgstr "Exibe informações sobre uma classe." - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Apply" -msgstr "" - -msgid "Rebuild auto membership" -msgstr "" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -#, fuzzy -msgid "Actions" -msgstr "%(exception)s" - -msgid "Add" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -msgid "Direct Membership" -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -msgid "No entries." -msgstr "" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -msgid "Remove" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -msgid "Show Results" -msgstr "" - -msgid "Authentication indicators" -msgstr "" - -msgid "Authentication indicator" -msgstr "" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -msgid "RADIUS" -msgstr "" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "External Identity Provider" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "" - -msgid "Activate" -msgstr "" - -msgid "Add and Add Another" -msgstr "" - -msgid "Add and Close" -msgstr "" - -msgid "Add and Edit" -msgstr "" - -msgid "Add Many" -msgstr "" - -msgid "Back" -msgstr "" - -msgid "Cancel" -msgstr "" - -msgid "Clear" -msgstr "" - -msgid "Clear all fields on the page." -msgstr "" - -msgid "Close" -msgstr "" - -msgid "Disable" -msgstr "" - -msgid "Download" -msgstr "" - -msgid "Download certificate as PEM formatted file." -msgstr "" - -msgid "Edit" -msgstr "" - -msgid "Enable" -msgstr "" - -msgid "Find" -msgstr "" - -msgid "Get" -msgstr "" - -msgid "Hide" -msgstr "" - -msgid "Issue" -msgstr "" - -msgid "Match" -msgstr "" - -msgid "Match users according to certificate." -msgstr "" - -msgid "Migrate" -msgstr "" - -msgid "OK" -msgstr "" - -msgid "Refresh" -msgstr "" - -msgid "Reload current settings from the server." -msgstr "" - -msgid "Delete" -msgstr "" - -msgid "Remove hold" -msgstr "" - -msgid "Reset" -msgstr "" - -msgid "Reset Password" -msgstr "" - -msgid "Reset Password and Log in" -msgstr "" - -msgid "Restore" -msgstr "" - -msgid "Retry" -msgstr "" - -msgid "Revert" -msgstr "" - -msgid "Revoke" -msgstr "" - -msgid "Save" -msgstr "" - -msgid "Set" -msgstr "" - -msgid "Show" -msgstr "" - -msgid "Stage" -msgstr "" - -msgid "Update" -msgstr "" - -msgid "View" -msgstr "" - -msgid "Customization" -msgstr "" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "" - -msgid "Expand All" -msgstr "" - -msgid "General" -msgstr "" - -msgid "Identity Settings" -msgstr "" - -msgid "Record Settings" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -msgid "Back to Top" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -msgid "Add custom value" -msgstr "" - -msgid "Available" -msgstr "" - -msgid "Some operations failed." -msgstr "" - -#, fuzzy -msgid "Operations Error" -msgstr "Erro de sessão" - -#, fuzzy -msgid "Confirmation" -msgstr "Confirmar (senha)" - -#, fuzzy -msgid "Custom value" -msgstr "Multivalor" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -msgid "Unsaved Changes" -msgstr "" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "" - -msgid "Hide details" -msgstr "" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -msgid "Redirection" -msgstr "" - -msgid "Select entries to be removed." -msgstr "" - -msgid "Result" -msgstr "" - -msgid "Show details" -msgstr "" - -msgid "Success" -msgstr "" - -#, fuzzy -msgid "Validation error" -msgstr "Erro de sessão" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "Ocorreu um erro interno (${error})" - -msgid "HTTP Error" -msgstr "" - -msgid "Internal Error" -msgstr "" - -msgid "IPA Error" -msgstr "" - -msgid "No response" -msgstr "" - -msgid "Unknown Error" -msgstr "" - -msgid "URL" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -msgid "Settings" -msgstr "" - -msgid "Search" -msgstr "" - -msgid "False" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Allowed to create keytab" -msgstr "Falha ao abrir o keytab\n" - -#, fuzzy -msgid "Allowed to retrieve keytab" -msgstr "Falha ao abrir o keytab\n" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add Kerberos Principal Alias" -msgstr "Nome principal do serviço Kerberos" - -#, fuzzy -msgid "New kerberos principal alias" -msgstr "deve ser um principal de Kerberos" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "" - -msgid "Authenticating" -msgstr "" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -#, fuzzy -msgid "Kerberos Principal you entered is expired" -msgstr "O principal do serviço é necessário" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -msgid "Log In Using Certificate" -msgstr "" - -#, fuzzy -msgid "Log in using personal certificate" -msgstr "deve ser um certificado" - -msgid "Log out" -msgstr "" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "" - -msgid "Synchronizing" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -msgid "number of passwords" -msgstr "" - -msgid "seconds" -msgstr "" - -msgid "Migrating" -msgstr "" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -msgid "Password migration was not successful" -msgstr "" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -msgid "Password migration was successful" -msgstr "" - -msgid "Attribute" -msgstr "" - -msgid "Add delegation" -msgstr "" - -msgid "Remove delegations" -msgstr "" - -msgid "Add permission" -msgstr "" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -msgid "Remove permissions" -msgstr "" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove privileges" -msgstr "Removendo principal %s\n" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -msgid "Role Settings" -msgstr "" - -msgid "Add role" -msgstr "" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -msgid "Remove roles" -msgstr "" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -msgid "Add self service permission" -msgstr "" - -msgid "Remove self service permissions" -msgstr "" - -msgid "Add rule" -msgstr "" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to change default group?" -msgstr "" - -msgid "Default host group" -msgstr "" - -msgid "Default user group" -msgstr "" - -msgid "Exclusive" -msgstr "" - -msgid "Expression" -msgstr "" - -msgid "Host group rule" -msgstr "" - -msgid "Host group rules" -msgstr "" - -msgid "Inclusive" -msgstr "" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -msgid "User group rule" -msgstr "" - -msgid "User group rules" -msgstr "" - -msgid "Add automount key" -msgstr "" - -msgid "Remove automount keys" -msgstr "" - -msgid "Add automount location" -msgstr "" - -msgid "Automount Location Settings" -msgstr "" - -msgid "Remove automount locations" -msgstr "" - -msgid "Add automount map" -msgstr "" - -msgid "Map Type" -msgstr "" - -msgid "Direct" -msgstr "" - -msgid "Indirect" -msgstr "" - -msgid "Remove automount maps" -msgstr "" - -#, fuzzy -msgid "Add certificate authority" -msgstr "" -"\n" -"Operações de certificado IPA\n" - -#, fuzzy -msgid "Remove certificate authorities" -msgstr "" -"\n" -"Operações de certificado IPA\n" - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -msgid "All" -msgstr "" - -msgid "Any CA" -msgstr "" - -msgid "Any Host" -msgstr "" - -msgid "Any Service" -msgstr "" - -msgid "Any Profile" -msgstr "" - -msgid "Anyone" -msgstr "" - -msgid "Rule status" -msgstr "" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -msgid "Remove CA ACLs" -msgstr "" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -msgid "Specified CAs" -msgstr "" - -msgid "Specified Hosts and Groups" -msgstr "" - -msgid "Specified Profiles" -msgstr "" - -msgid "Specified Services and Groups" -msgstr "" - -msgid "Specified Users and Groups" -msgstr "" - -msgid "Permitted to have certificates issued" -msgstr "" - -#, fuzzy -msgid "Remove certificate profiles" -msgstr "" -"\n" -"Operações de certificado IPA\n" - -msgid "AA Compromise" -msgstr "" - -msgid "Add principal" -msgstr "" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" - -#, fuzzy -msgid "Certificates" -msgstr "deve ser um certificado" - -msgid "Certificate Hold" -msgstr "" - -msgid "Cessation of Operation" -msgstr "" - -#, fuzzy -msgid "Common Name" -msgstr "Nome do comando" - -msgid "the certificate with serial number " -msgstr "" - -msgid "Expires On" -msgstr "" - -msgid "Issued on from" -msgstr "" - -msgid "Issued on to" -msgstr "" - -#, fuzzy -msgid "Maximum serial number" -msgstr "deve ser um número decimal" - -#, fuzzy -msgid "Minimum serial number" -msgstr "deve ser um número decimal" - -msgid "Revoked on from" -msgstr "" - -msgid "Revoked on to" -msgstr "" - -msgid "Valid not after from" -msgstr "" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -msgid "Fingerprints" -msgstr "" - -#, fuzzy -msgid "Get Certificate" -msgstr "deve ser um certificado" - -msgid "Certificate Hold Removed" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Issue new certificate" -msgstr "deve ser um certificado" - -msgid "Issued By" -msgstr "" - -msgid "Issued On" -msgstr "" - -msgid "Issued To" -msgstr "" - -msgid "Key Compromise" -msgstr "" - -#, fuzzy -msgid "No Valid Certificate" -msgstr "deve ser um certificado" - -#, fuzzy -msgid "New Certificate" -msgstr "deve ser um certificado" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -msgid "Note" -msgstr "" - -msgid "Organizational Unit" -msgstr "" - -#, fuzzy, python-brace-format -msgid "${count} certificate(s) present" -msgstr "%(count)d certificado correspondido" - -msgid "Privilege Withdrawn" -msgstr "" - -msgid "Reason for Revocation" -msgstr "" - -#, fuzzy -msgid "Remove certificate hold" -msgstr "%(name)s certificado não é válido" - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -#, fuzzy -msgid "Certificate requested" -msgstr "deve ser uma solicitação de assinatura de certificado" - -#, fuzzy -msgid "Revoke certificate" -msgstr "deve ser um certificado" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -msgid "Certificate Revoked" -msgstr "" - -msgid "REVOKED" -msgstr "" - -msgid "SHA1 Fingerprint" -msgstr "" - -msgid "SHA256 Fingerprint" -msgstr "" - -msgid "Status" -msgstr "" - -msgid "Superseded" -msgstr "" - -msgid "Unspecified" -msgstr "" - -msgid "Valid Certificate Present" -msgstr "" - -msgid "Valid from" -msgstr "" - -msgid "Valid to" -msgstr "" - -msgid "Validity" -msgstr "" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -#, fuzzy -msgid "View Certificate" -msgstr "deve ser um certificado" - -msgid "Certificate Data" -msgstr "" - -#, fuzzy -msgid "Certificate For Match" -msgstr "" -"\n" -"Operações de certificado IPA\n" - -msgid "Certificate Mapping Match" -msgstr "" - -msgid "Matched Users" -msgstr "" - -msgid "User Login" -msgstr "" - -msgid "Add certificate identity mapping rule" -msgstr "" - -#, fuzzy -msgid "Add certificate mapping data" -msgstr "" -"\n" -"Operações de certificado IPA\n" - -msgid "Configuration string" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -msgid "Remove certificate mapping data" -msgstr "" - -msgid "Issuer and subject" -msgstr "" - -#, fuzzy -msgid "Remove certificate identity mapping rules" -msgstr "deve ser uma solicitação de assinatura de certificado" - -msgid "Group Options" -msgstr "" - -#, fuzzy -msgid "Search Options" -msgstr "Opções obsoletas" - -msgid "SELinux Options" -msgstr "" - -#, fuzzy -msgid "Server Options" -msgstr "Opções obsoletas" - -#, fuzzy -msgid "Service Options" -msgstr "Opções obsoletas" - -#, fuzzy -msgid "User Options" -msgstr "Opções obsoletas" - -msgid "Forward first" -msgstr "" - -msgid "Forwarding disabled" -msgstr "" - -msgid "Forward only" -msgstr "" - -#, fuzzy -msgid "Options" -msgstr "%(exception)s" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -msgid "Other Record Types" -msgstr "" - -msgid "Address not valid, can't redirect" -msgstr "" - -msgid "Create dns record" -msgstr "" - -msgid "Creating record." -msgstr "" - -msgid "Record creation failed." -msgstr "" - -msgid "Checking if record exists." -msgstr "" - -#, fuzzy -msgid "Record not found." -msgstr "realm não encontrado\n" - -msgid "Redirection to PTR record" -msgstr "" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -#, fuzzy -msgid "Target reverse zone not found." -msgstr "%(parent)s: %(oname)s não encontrado" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -msgid "Standard Record Types" -msgstr "" - -msgid "Records for DNS Zone" -msgstr "" - -msgid "Record Type" -msgstr "" - -msgid "Add DNS zone" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -msgid "DNS Zone Settings" -msgstr "" - -msgid "Remove DNS zones" -msgstr "" - -msgid "Remove Permission" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Level" -msgstr "" - -msgid "Set Domain Level" -msgstr "" - -msgid "Add user group" -msgstr "" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -msgid "Group Settings" -msgstr "" - -msgid "External" -msgstr "" - -msgid "Groups" -msgstr "" - -msgid "Group categories" -msgstr "" - -msgid "Change to external group" -msgstr "" - -msgid "Change to POSIX group" -msgstr "" - -msgid "Non-POSIX" -msgstr "" - -msgid "POSIX" -msgstr "" - -msgid "Remove user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -msgid "Group Type" -msgstr "" - -msgid "Add HBAC rule" -msgstr "" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -msgid "Accessing" -msgstr "" - -msgid "Remove HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -msgid "Via Service" -msgstr "" - -msgid "Who" -msgstr "" - -msgid "Add HBAC service" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -msgid "Remove HBAC services" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -msgid "Add HBAC service group" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -msgid "Remove HBAC service groups" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -msgid "Access Denied" -msgstr "" - -msgid "Access Granted" -msgstr "" - -msgid "Include Disabled" -msgstr "" - -msgid "Include Enabled" -msgstr "" - -msgid "HBAC Test" -msgstr "" - -msgid "Matched" -msgstr "" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" - -msgid "Rules" -msgstr "" - -msgid "Run Test" -msgstr "" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -msgid "Unmatched" -msgstr "" - -msgid "Add host" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -#, fuzzy -msgid "Host Certificate" -msgstr "deve ser um certificado" - -msgid "Host Name" -msgstr "" - -msgid "Delete Key, Unprovision" -msgstr "" - -msgid "Host Settings" -msgstr "" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -msgid "Generate OTP" -msgstr "" - -msgid "Generated OTP" -msgstr "" - -msgid "Kerberos Key" -msgstr "" - -msgid "Kerberos Key Not Present" -msgstr "" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -#, fuzzy -msgid "One-Time Password" -msgstr "Confirmar (senha)" - -msgid "One-Time Password Not Present" -msgstr "" - -msgid "One-Time Password Present" -msgstr "" - -msgid "Reset OTP" -msgstr "" - -msgid "Reset One-Time Password" -msgstr "" - -msgid "Set OTP" -msgstr "" - -msgid "OTP set" -msgstr "" - -msgid "Set One-Time Password" -msgstr "" - -msgid "Remove hosts" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -msgid "Unprovision" -msgstr "" - -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -msgid "Add host group" -msgstr "" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -msgid "Host Group Settings" -msgstr "" - -msgid "Remove host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -msgid "Identity provider details" -msgstr "" - -msgid "Verify secret" -msgstr "" - -msgid "User to override" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -msgid "Profile" -msgstr "" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -msgid "Enter trusted group name." -msgstr "" - -msgid "Add ID view" -msgstr "" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -msgid "Apply to host groups" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -msgid "Remove ID views" -msgstr "" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -msgid "Un-apply from host groups" -msgstr "" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -msgid "Un-apply" -msgstr "" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -#, fuzzy -msgid "Kerberos Ticket Policy" -msgstr "Nome principal do serviço Kerberos" - -msgid "Add netgroup" -msgstr "" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -msgid "Netgroup Settings" -msgstr "" - -msgid "Remove netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -msgid "Add OTP token" -msgstr "" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -msgid "Configure your token" -msgstr "" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -msgid "OTP Token Settings" -msgstr "" - -msgid "Disable token" -msgstr "" - -msgid "Enable token" -msgstr "" - -msgid "Remove OTP tokens" -msgstr "" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "" - -msgid "Show configuration uri" -msgstr "" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -msgid "Add Custom Attribute" -msgstr "" - -msgid "Permission settings" -msgstr "" - -msgid "Attribute breakdown" -msgstr "" - -msgid "Privilege Settings" -msgstr "" - -msgid "Public key:" -msgstr "" - -msgid "Set public key" -msgstr "" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -msgid "Add password policy" -msgstr "" - -msgid "Password Policy" -msgstr "" - -msgid "Remove password policies" -msgstr "" - -msgid "Add ID range" -msgstr "" - -msgid "Range Settings" -msgstr "" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -msgid "Domain SID" -msgstr "" - -msgid "Secondary RID base" -msgstr "" - -msgid "Remove ID ranges" -msgstr "" - -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -msgid "Detect" -msgstr "" - -msgid "Local domain" -msgstr "" - -msgid "IPA trust" -msgstr "" - -msgid "Active Directory winsync" -msgstr "" - -msgid "Add RADIUS server" -msgstr "" - -msgid "RADIUS Proxy Server Settings" -msgstr "" - -msgid "Remove RADIUS servers" -msgstr "" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -msgid "Force Update" -msgstr "" - -msgid "Add SELinux user map" -msgstr "" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -msgid "Server Roles" -msgstr "" - -msgid "Server Role" -msgstr "" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -msgid "Delete Server" -msgstr "" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -msgid "Add service" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -#, fuzzy -msgid "Service Certificate" -msgstr "deve ser um certificado" - -msgid "Service Settings" -msgstr "" - -msgid "Provisioning" -msgstr "" - -msgid "Remove services" -msgstr "" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -msgid "Unprovisioning service" -msgstr "" - -#, fuzzy -msgid "Service unprovisioned" -msgstr "O principal do serviço é necessário" - -#, fuzzy -msgid "Kerberos Key Present, Service Provisioned" -msgstr "Nome principal do serviço Kerberos" - -msgid "SSH public keys" -msgstr "" - -msgid "SSH public key:" -msgstr "" - -msgid "Set SSH key" -msgstr "" - -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" - -msgid "Add stage user" -msgstr "" - -msgid "Stage users" -msgstr "" - -msgid "Preserved users" -msgstr "" - -msgid "Remove preserved users" -msgstr "" - -msgid "Remove stage users" -msgstr "" - -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -msgid "User categories" -msgstr "" - -msgid "Add subid" -msgstr "" - -msgid "Assigned subids" -msgstr "" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -#, fuzzy -msgid "Add sudo command" -msgstr "comando sudo" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -#, fuzzy -msgid "Remove sudo commands" -msgstr "comandos sudo" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -#, fuzzy -msgid "Add sudo command group" -msgstr "comando sudo" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove sudo command groups" -msgstr "comandos sudo" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -msgid "Add sudo rule" -msgstr "" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "" - -#, fuzzy -msgid "Any Command" -msgstr "Comandos sudo" - -msgid "Any Group" -msgstr "" - -#, fuzzy -msgid "Run Commands" -msgstr "Comandos sudo" - -msgid "Deny" -msgstr "" - -msgid "Access this host" -msgstr "" - -msgid "Option added" -msgstr "" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -msgid "Remove sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -msgid "Specified Commands and Groups" -msgstr "" - -msgid "Specified Groups" -msgstr "" - -msgid "Remove sudo options" -msgstr "" - -msgid "Autogenerated" -msgstr "" - -msgid "Segment details" -msgstr "" - -msgid "Replication configuration" -msgstr "" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -msgid "Account" -msgstr "" - -msgid "Add trust" -msgstr "" - -msgid "Administrative account" -msgstr "" - -msgid "SID blocklists" -msgstr "" - -msgid "Trust Settings" -msgstr "" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -msgid "Pre-shared password" -msgstr "" - -msgid "Remove trusts" -msgstr "" - -msgid "Remove domains" -msgstr "" - -msgid "Alternative UPN suffixes" -msgstr "" - -msgid "User attributes for SMB services" -msgstr "" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - -msgid "Account Settings" -msgstr "" - -msgid "Account Status" -msgstr "" - -msgid "Active users" -msgstr "" - -msgid "Add user" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -msgid "Auto assign subordinate ids" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "" - -msgid "Contact Settings" -msgstr "" - -msgid "Delete mode" -msgstr "" - -msgid "Employee Information" -msgstr "" - -msgid "Error changing account status" -msgstr "" - -#, fuzzy -msgid "Password expiration" -msgstr "A senha é longa demais!\n" - -msgid "Mailing Address" -msgstr "" - -msgid "Misc. Information" -msgstr "" - -msgid "delete" -msgstr "" - -msgid "preserve" -msgstr "" - -msgid "No private group" -msgstr "" - -msgid "Remove users" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Unlock" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -msgid "Members" -msgstr "" - -msgid "My User Vaults" -msgstr "" - -msgid "Owners" -msgstr "" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -msgid "Service Vaults" -msgstr "" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -msgid "Vault Type" -msgstr "" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -msgid "User Vaults" -msgstr "" - -#, fuzzy -msgid "Current password is required" -msgstr "\"%(name)s\" é necessário" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -msgid "First OTP" -msgstr "" - -#, fuzzy -msgid "New password is required" -msgstr "\"%(name)s\" é necessário" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Password change complete" -msgstr "" - -msgid "Your password has expired. Please enter a new password." -msgstr "" - -msgid "Passwords must match" -msgstr "As senhas devem coincidir" - -msgid "Password reset was not successful." -msgstr "" - -msgid "Reset your password." -msgstr "" - -msgid "Second OTP" -msgstr "" - -msgid "Verify Password" -msgstr "" - -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#, fuzzy, python-brace-format -msgid "${count} item(s) disabled" -msgstr "Conta desabilitada: %(disabled)s" - -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -msgid "Some entries were not deleted" -msgstr "" - -msgid "Quick Links" -msgstr "" - -msgid "Select All" -msgstr "" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -msgid "Unselect All" -msgstr "" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "" - -msgid "Audit" -msgstr "" - -msgid "Authentication" -msgstr "" - -msgid "Automount" -msgstr "" - -msgid "DNS" -msgstr "" - -msgid "Host-Based Access Control" -msgstr "" - -msgid "Identity" -msgstr "" - -msgid "Network Services" -msgstr "" - -msgid "Policy" -msgstr "" - -msgid "Role-Based Access Control" -msgstr "" - -msgid "Subordinate IDs" -msgstr "" - -msgid "Sudo" -msgstr "" - -msgid "Topology" -msgstr "" - -msgid "True" -msgstr "" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -msgid "First" -msgstr "" - -msgid "Last" -msgstr "" - -msgid "Next" -msgstr "" - -msgid "Page" -msgstr "" - -msgid "Prev" -msgstr "" - -msgid "Undo" -msgstr "" - -msgid "Undo this change." -msgstr "" - -msgid "Undo All" -msgstr "" - -msgid "Undo all changes in this field." -msgstr "" - -#, fuzzy -msgid "Text does not match field pattern" -msgstr "SID não corresponde a nenhum domínio confiável" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -#, fuzzy -msgid "Must be a decimal number" -msgstr "deve ser um número decimal" - -msgid "Format error" -msgstr "" - -#, fuzzy -msgid "Must be an integer" -msgstr "deve ser um inteiro" - -msgid "Not a valid IP address" -msgstr "" - -msgid "Not a valid IPv4 address" -msgstr "" - -msgid "Not a valid IPv6 address" -msgstr "" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -msgid "Parse error" -msgstr "" - -#, fuzzy -msgid "Must be a positive number" -msgstr "deve ser um número decimal" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -#, fuzzy -msgid "Required field" -msgstr "Obrigatório" - -msgid "Unsupported value" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -msgid "IdP max life" -msgstr "" - -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "" - -msgid "IdP max renew" -msgstr "" - -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -#, fuzzy -msgid "Search for Class of Service entry" -msgstr "Pesquisa por classes." - -msgid "password policy" -msgstr "" - -msgid "password policies" -msgstr "" - -msgid "Password Policies" -msgstr "" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -msgid "User check" -msgstr "" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "Grace login limit" -msgstr "" - -msgid "Number of LDAP authentications allowed after expiration" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "" - -#, fuzzy -msgid "cannot delete global password policy" -msgstr "Um grupo gerenciado não pode ter uma política de senhas." - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, fuzzy, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "Arquivo %(file)s não encontrado" - -#, fuzzy, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "%(count)d comando sudo correspondido" -msgstr[1] "%(count)d comando sudo correspondidos" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "" - -#, fuzzy -msgid "Malformed principal" -msgstr "Principal malformado: %(error)s" - -msgid "{} is required by the IPA master" -msgstr "" - -msgid "service" -msgstr "" - -msgid "services" -msgstr "" - -#, fuzzy -msgid "Service principal alias" -msgstr "O principal do serviço é necessário" - -msgid "Base-64 encoded service certificate" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." -msgstr "" - -#, fuzzy, python-format -msgid "Added service \"%(value)s\"" -msgstr "Alterado o estado do servidor de \"%(value)s\"." - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -msgid "Add a new SMB service." -msgstr "" - -msgid "SMB service NetBIOS name" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified service \"%(value)s\"" -msgstr "Alterado o estado do servidor de \"%(value)s\"." - -#, fuzzy, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -#, fuzzy, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "Alterado o estado do servidor de \"%(value)s\"." - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Remove principal alias from a service" -msgstr "O principal do serviço é necessário" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, fuzzy, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy -msgid "givenname is required" -msgstr "\"%(name)s\" é necessário" - -#, fuzzy -msgid "sn is required" -msgstr "\"%(name)s\" é necessário" - -#, fuzzy, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Excluir %(name)s \"%(value)s\"?" - -#, fuzzy, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "Modificar %(name)s \"%(value)s\"?" - -#, fuzzy, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -#, fuzzy, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "Alterado o estado do servidor de \"%(value)s\"." - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, fuzzy, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "uma chave chamada %(key)s já existe" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "Modificar %(name)s \"%(value)s\"?" - -#, fuzzy, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -#, fuzzy -msgid "not found" -msgstr "realm não encontrado\n" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -#, fuzzy -msgid "value" -msgstr "Multivalor" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "Delete an ID override." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -#, fuzzy -msgid "Search for an ID override." -msgstr "Pesquisa por comandos." - -#, fuzzy, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -#, fuzzy -msgid "Display information about an ID override." -msgstr "Exibe informações sobre um comando." - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -#, fuzzy, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" -"\n" -"Operações de certificado IPA\n" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -msgid "Certificate Authority" -msgstr "" - -#, fuzzy -msgid "Certificate Authorities" -msgstr "" -"\n" -"Operações de certificado IPA\n" - -msgid "Name for referencing the CA" -msgstr "" - -msgid "Description of the purpose of the CA" -msgstr "" - -msgid "Authority ID" -msgstr "" - -msgid "Dogtag Authority ID" -msgstr "" - -msgid "Subject DN" -msgstr "" - -msgid "Subject Distinguished Name" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Issuer Distinguished Name" -msgstr "" - -#, fuzzy -msgid "Base-64 encoded certificate." -msgstr "deve ser um certificado" - -#, fuzzy -msgid "Certificate chain" -msgstr "" -"\n" -"Operações de certificado IPA\n" - -#, fuzzy -msgid "X.509 certificate chain" -msgstr "" -"\n" -"Operações de certificado IPA\n" - -msgid "RSN Version" -msgstr "" - -msgid "Random Serial Number Version" -msgstr "" - -#, fuzzy -msgid "Search for CAs." -msgstr "Pesquisa por classes." - -#, fuzzy, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "%(count)d comando sudo correspondido" -msgstr[1] "%(count)d comando sudo correspondidos" - -#, fuzzy -msgid "Include certificate chain in output" -msgstr "deve ser uma solicitação de assinatura de certificado" - -msgid "Display the properties of a CA." -msgstr "" - -msgid "Create a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Created CA \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -msgid "Modify CA configuration." -msgstr "" - -#, fuzzy, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy -msgid "IPA CA cannot be disabled" -msgstr "Esta entrada não pode ser habilitada ou desabilitada" - -msgid "Enable a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" -"\n" -"Operações de certificado IPA\n" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Subject email address" -msgstr "" - -#, fuzzy -msgid "Subject DNS name" -msgstr "deve ser um nome de DNS" - -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -msgid "Subject URI" -msgstr "" - -msgid "Subject IP Address" -msgstr "" - -msgid "Subject OID" -msgstr "" - -msgid "Subject UPN" -msgstr "" - -#, fuzzy -msgid "Subject Kerberos principal name" -msgstr "deve ser um principal de Kerberos" - -msgid "Subject Other Name" -msgstr "" - -msgid "Serial number (hex)" -msgstr "" - -msgid "Request status" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -#, fuzzy -msgid "DN commonName does not match user's login" -msgstr "SID não corresponde a nenhum domínio confiável" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -#, fuzzy -msgid "'add' option" -msgstr "Opções obsoletas" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -#, fuzzy -msgid "Status of the certificate" -msgstr "deve ser um certificado" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "%(count)d certificado correspondido" -msgstr[1] "%(count)d certificados correspondidos" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -#, fuzzy -msgid "this option has been deprecated." +msgid "this option is deprecated" msgstr "esta opção foi descontinuada" -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" +#, python-format +msgid "unknown command '%(name)s'" +msgstr "comando desconhecido \"%(name)s\"" #, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -msgid "command" -msgstr "comando" - -msgid "commands" -msgstr "comandos" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -msgid "group runAs" -msgstr "" - -msgid "runAs groups" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "%(count)d comando sudo correspondido" -msgstr[1] "%(count)d comando sudo correspondidos" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -#, fuzzy, python-format -msgid "Added user \"%(value)s\"" -msgstr "Adicionado o comando sudo \"%(value)s\"" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Preserved user \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, python-format -msgid "%s: user is already preserved" -msgstr "%s: o usuário já está preservado" - -#, fuzzy, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Modificar %(name)s \"%(value)s\"?" - -#, fuzzy, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "erro desconhecido %(code)d de %(server)s: %(error)s" #, python-format msgid "user \"%s\" is already active" msgstr "o usuário \"%s\" já está ativo" - -#, fuzzy, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "Alterado o estado do servidor de \"%(value)s\"." - -#, fuzzy, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "Alterado o estado do servidor de \"%(value)s\"." - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, fuzzy, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "Excluído o comando sudo \"%(value)s\"" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -#, fuzzy -msgid "Password grace count" -msgstr "A senha é longa demais!\n" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "Conta desabilitada: %(disabled)s" - -#, fuzzy, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "Alterado o estado do servidor de \"%(value)s\"." - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Remove principal alias from the user entry" -msgstr "O principal do serviço é necessário" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" -msgstr "" - -#, fuzzy -msgid "Request must be a dict" -msgstr "deve ser um certificado" - -msgid "Request is missing \"method\"" -msgstr "" - -msgid "Request is missing \"params\"" -msgstr "" - -#, fuzzy -msgid "params must be a list" -msgstr "deve ser um inteiro" - -msgid "params must contain [args, options]" -msgstr "" - -msgid "params[0] (aka args) must be a list" -msgstr "" - -msgid "params[1] (aka options) must be a dict" -msgstr "" - -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" - -msgid "CIFS server denied your credentials" -msgstr "" - -msgid "communication with CIFS server was unsuccessful" -msgstr "" - -msgid "AD domain controller" -msgstr "" - -msgid "unsupported functional level" -msgstr "" - -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" - -msgid "Cannot find specified domain or server name" -msgstr "" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" - -msgid "At least the domain or IP address should be specified" -msgstr "" - -#, python-format -msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" -msgstr "" - -msgid "no trusted domain is configured" -msgstr "" - -msgid "domain is not configured" -msgstr "" - -msgid "SID is not valid" -msgstr "" - -#, fuzzy -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "SID não corresponde a nenhum domínio confiável" - -msgid "SID does not match any trusted domain" -msgstr "SID não corresponde a nenhum domínio confiável" - -msgid "Trust setup" -msgstr "" - -msgid "Our domain is not configured" -msgstr "" - -msgid "No trusted domain is not configured" -msgstr "" - -msgid "trusted domain object" -msgstr "" - -msgid "domain is not trusted" -msgstr "" - -msgid "no trusted domain matched the specified flat name" -msgstr "" - -msgid "trusted domain object not found" -msgstr "" - -#, fuzzy -msgid "Object does not belong to a trusted domain" -msgstr "SID não corresponde a nenhum domínio confiável" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "" - -msgid "Ambiguous search, user domain was not specified" -msgstr "" - -msgid "Trusted domain did not return a unique object" -msgstr "" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "" - -msgid "trusted domain user not found" -msgstr "" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "" - -msgid "CIFS credentials object" -msgstr "" - -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "" - -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" - -#, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" - -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" - -msgid "Credentials" -msgstr "" - -msgid "Missing credentials for cross-forest communication" -msgstr "" - -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" - -#, fuzzy, python-format -msgid "must equal %r" -msgstr "deve ser \"%s\"" - -msgid "Hello world" -msgstr "" - -#, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "" - -#, fuzzy -msgid "must be at least 1" -msgstr "deve ser pelo menos %(minvalue)d" - -msgid "Out of memory\n" -msgstr "" - -msgid "Warning unrecognized encryption type.\n" -msgstr "" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -msgid "Out of memory!?\n" -msgstr "" - -msgid "Enctype comparison failed!\n" -msgstr "" - -msgid "Password is too long!\n" -msgstr "A senha é longa demais!\n" - -#, fuzzy -msgid "Failed to create random key!\n" -msgstr "Falha ao abrir o keytab\n" - -#, fuzzy -msgid "Failed to create key!\n" -msgstr "Falha ao abrir o keytab\n" - -msgid "Bad or unsupported salt type.\n" -msgstr "" - -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" diff --git a/po/ru.po b/po/ru.po index 7b8a40979..107da9494 100644 --- a/po/ru.po +++ b/po/ru.po @@ -14,1007 +14,633 @@ msgstr "" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" -"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && n" -"%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2)\n" +"Plural-Forms: nplurals=3; plural=(n%10==1 && n%100!=11 ? 0 : n%10>=2 && " +"n%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2)\n" "X-Generator: Zanata 4.6.2\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "не удалось открыть файл конфигурации %s\n" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "не удалось обработать файл конфигурации %s функцией stat()\n" - -#, c-format -msgid "out of memory\n" -msgstr "недостаточно памяти\n" - -#, c-format -msgid "read error\n" -msgstr "ошибка чтения\n" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "Не удалось обработать имя учётной записи\n" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "krb5_parse_name %1$d: %2$s\n" - -#, c-format -msgid "Removing principal %s\n" -msgstr "Удаление учётной записи %s\n" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "Не удалось открыть файл таблицы ключей\n" - -#, c-format -msgid "principal not found\n" -msgstr "учётная запись не найдена\n" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "krb5_kt_get_entry %1$d: %2$s\n" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "Не удалось удалить запись\n" - -#, c-format -msgid "kvno %d\n" -msgstr "kvno %d\n" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "krb5_kt_remove_entry %1$d: %2$s\n" - -#, fuzzy, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "Не удалось получить результат: %s\n" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "Не удалось обработать учётную запись\n" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "krb5_unparse_name %1$d: %2$s\n" - -#, c-format -msgid "realm not found\n" -msgstr "область (realm) не найдена\n" - -msgid "Print debugging information" -msgstr "Вывести отладочные данные" - -msgid "Debugging output" -msgstr "Отладочный вывод" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"Учётная запись, которую следует удалить из файла таблицы ключей (пример: ftp/" -"ftp.example.com@EXAMPLE.COM)" - -msgid "Kerberos Service Principal Name" -msgstr "Имя учётной записи службы Kerberos" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" -"Файл таблицы ключей, из которого следует удалить учётную запись (записи)" - -msgid "Keytab File Name" -msgstr "Имя файла таблицы ключей" - -msgid "Remove all principals in this realm" -msgstr "Удалить все учётные записи в этой области (realm)" - -msgid "Realm name" -msgstr "Имя области (realm)" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "Не удалось инициализировать Kerberos-контекст\n" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "Не удалось открыть файл таблицы ключей \"%1$s\": %2$s\n" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "Не удалось закрыть файл таблицы ключей\n" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "krb5_kt_close %1$d: %2$s\n" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "Не удалось инициализировать Kerberos-контекст: %1$s (%2$d)\n" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "Не удалось обработать учётную запись: %1$s (%2$d)\n" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "Отсутствуют принятые KDC ключи\n" - -#, c-format -msgid "Out of memory \n" -msgstr "" -"Недостаточно памяти\n" -"\n" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "Не удалось инициализировать библиотеку ldap!\n" - -msgid "Simple bind failed\n" -msgstr "Не удалось выполнить простую привязку\n" - -#, fuzzy -msgid "SASL Bind failed\n" -msgstr "Не удалось выполнить простую привязку\n" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "Не удалось выполнить операцию: %s\n" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "Не удалось получить результат: %s\n" - -#, c-format -msgid "Timeout exceeded." -msgstr "Превышено время ожидания." - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "Не удалось обработать расширенный результат: %s\n" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "Не удалось обработать результат: %s\n" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "Отсутствует список элементов управления ответами!\n" - -#, c-format -msgid "Missing reply control!\n" -msgstr "Отсутствует элемент управления ответами!\n" - -#, c-format -msgid "Out of Memory!\n" -msgstr "Недостаточно памяти!\n" - -#, c-format -msgid "Failed to create control!\n" -msgstr "Не удалось создать элемент управления!\n" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "Не удалось задать привязку к серверу!\n" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "Не удалось получить файл таблицы ключей!\n" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "Не удалось выполнить ber_init(), недопустимый элемент управления?!\n" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "Ошибка ber_scanf(), не удалось найти kvno?!\n" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "Не удалось получить данные о типе шифрования №%d\n" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "Не удалось получить данные о типе шифрования %1$s (№%2$d)\n" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "Не удалось получить ни одного ключа" - -msgid "Failed to decode control reply!\n" -msgstr "" -"Не удалось расшифровать контрольный ответ!\n" -"\n" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "Пароли не совпадают!" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "Не удалось открыть файл конфигурации %s\n" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "Не удалось обработать файл конфигурации %s\n" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "Не удалось разрешить символическую ссылку на файл таблицы ключей.\n" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" -"таблица ключей является оборванной символической ссылкой и принадлежит " -"другому пользователю.\n" - -msgid "Print as little as possible" -msgstr "Выводить минимум данных" - -msgid "Output only on errors" -msgstr "Выводить только ошибки" - -msgid "Output debug info" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "Установить связь с указанным KDC-сервером" - -msgid "Server Name" -msgstr "Имя сервера" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"Учётная запись, для которой следует получить файл таблицы ключей (пример: " -"ftp/ftp.example.com@EXAMPLE.COM)" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" -"Файл таблицы ключей, в который следует добавить новый ключ (файл будет " -"создан, если не существует)." - -msgid "Encryption types to request" -msgstr "Типы шифрования для запрашивания" - -msgid "Comma separated encryption types list" -msgstr "Список типов шифрования, разделённых запятыми" - -msgid "Show the list of permitted encryption types and exit" -msgstr "Показать список разрешённых типов шифрования и завершить работу" - -msgid "Permitted Encryption Types" -msgstr "Разрешённые типы шифрования" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" -"Запросить неслучайный пароль, который следует использовать для учётной записи" - -msgid "LDAP DN" -msgstr " DN LDAP" - -msgid "DN to bind as if not using kerberos" -msgstr "" -"DN, к которому следует установить привязку, если не используется Kerberos" - -msgid "LDAP password" -msgstr "Пароль LDAP" - -msgid "password to use if not using kerberos" -msgstr "пароль, который следует использовать, если не используется Kerberos" - -msgid "Prompt for LDAP password" -msgstr "Запрос пароля LDAP" - -msgid "Path to the IPA CA certificate" -msgstr "Путь к сертификату CA IPA" - -msgid "IPA CA certificate" -msgstr "Сертификат CA IPA" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" -"Адрес LDAP, с которым следует установить соединение. Несовместимо с --server" - -msgid "url" -msgstr "адрес" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "Механизм привязки LDAP SASL, если отсутствует bindd/bindpw" - -msgid "GSSAPI|EXTERNAL" -msgstr "GSSAPI|EXTERNAL" - -msgid "Retrieve current keys without changing them" -msgstr "Получать текущие ключи без внесения в них изменений" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "Отсутствуют установленные в системе типы шифрования?!\n" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "Поддерживаемые типы шифрования:\n" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "Предупреждение: не удалось преобразовать тип (№%d)\n" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "Привязка пароля уже предоставлена (-w).\n" - -msgid "Enter LDAP password" -msgstr "Введите пароль LDAP" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" -"При использовании DN привязки (-w или -W) необходима привязка пароля.\n" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "Невозможно одновременно указать механизм SASL и DN привязки\n" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "Некорректный механизм привязки SASL\n" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "Невозможно одновременно указать сервер и адрес LDAP\n" - -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Discovered server %s\n" -msgstr "Сообщено серверами" - -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "Не указано имя сервера, сервер недоступен\n" - -#, fuzzy, c-format -msgid "Using provided server %s\n" -msgstr "Проверить связь с удалённым сервером." - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "Указаны несовместимые параметры (-r и -P)\n" - -msgid "New Principal Password" -msgstr "Новый пароль учётной записи" - -msgid "Verify Principal Password" -msgstr "Проверка пароля учётной записи" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" -"Предупреждение: случайные пароли не поддерживают типы соли (см. параметр -" -"P)\n" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "Недопустимое имя учётной записи службы\n" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" -"Кэш учётных данных Kerberos не найден. Имеется ли у вас билет Kerberos?\n" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" -"Учётная запись пользователя Kerberos не найдена. Имеется ли у вас корректный " -"кэш учётных данных?\n" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "Не удалось открыть файл таблицы ключей\n" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" -"Повтор попытки с использованием метода получения таблицы ключей, который " -"применялся до версии 4.0\n" - -#, c-format -msgid "Failed to create key material\n" -msgstr "Не удалось создать ключ\n" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "Не удалось получить файл таблицы ключей\n" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "Не удалось добавить ключ в таблицу ключей\n" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "Не удалось закрыть файл таблицы ключей\n" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "Таблица ключей успешно получена и сохранена в: %s\n" - -#, c-format -msgid "Out of memory!\n" -msgstr "Недостаточно памяти!\n" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "Отсутствует разрешение на присоединение этого узла к домену IPA.\n" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "Отсутствуют разрешения на запись в файл таблицы ключей \"%s\"\n" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "не удалось выполнить access() для %1$s: номер ошибки = %2$d\n" - -#, c-format -msgid "Out of memory!" -msgstr "Недостаточно памяти!" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "Не удалось включить SSL в LDAP\n" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "Не удалось выполнить поиск %1$s на rootdse. Ошибка: %2$d\n" - -#, c-format -msgid "No values for %s" -msgstr "Отсутствуют значения для %s" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "Не удалось выполнить поиск namingContext IPA. Ошибка: %d\n" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "namingContext IPA не найдено\n" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "Не удалось определить корневое DN %s\n" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "Не удалось выполнить регистрацию. %s\n" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "учётная запись не найдена в ответе XML-RPC\n" - -#, c-format -msgid "Host is already joined.\n" -msgstr "Узел уже присоединён.\n" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" - -#, fuzzy, c-format -msgid "json_dumps() failed\n" -msgstr "не удалось выполнить fork()\n" - -#, fuzzy, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "Неверный JSON-RPC запрос: %(error)s" - -#, fuzzy, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "Не удалось выполнить операцию: %s\n" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#, fuzzy, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "Нет ответа" - -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "не удалось выполнить fork()\n" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "Отмена регистрации выполнена успешно.\n" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "Не удалось отменить регистрацию.\n" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "результат не найден в ответе XML-RPC\n" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "Не удалось найти IPA-сервер, используя %s\n" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" -"Не удалось присоединить узел: ошибка инициализации Kerberos-контекста\n" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "Не удалось присоединить узел: кэш учётных данных Kerberos не найден\n" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" -"Не удалось присоединить узел: учётная запись пользователя Kerberos не " -"найдена, пароль узла не указан.\n" - -#, c-format -msgid "fork() failed\n" -msgstr "не удалось выполнить fork()\n" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "команда ipa-getkeytab не найдена \n" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "неправильные разрешения команды ipa-getkeytab?\n" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "не удалось выполнить команду ipa-getkeytab, номер ошибки %d\n" - -#, c-format -msgid "child exited with %d\n" -msgstr "дочерний процесс завершился с сообщением %d\n" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "Ошибка обработки файла таблицы ключей: %s.\n" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "Ошибка получения области (realm) Kerberos по умолчанию: %s.\n" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "Ошибка обработки \"%1$s\": %2$s.\n" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "Ошибка получения начальных учётных данных: %s.\n" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "Не удалось создать кэш учётных данных Kerberos\n" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "Ошибка сохранения учётных данных в кэше: %s.\n" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "Вывести данные XML-RPC без обработки в режиме GSSAPI" - -msgid "Quiet mode. Only errors are displayed." -msgstr "Тихий режим. Отображаются только ошибки." - -msgid "Unenroll this host from IPA server" -msgstr "Отменить регистрацию этого узла на IPA-сервере" - -msgid "Hostname of this server" -msgstr "Имя узла этого сервера" - -msgid "hostname" -msgstr "имя узла" - -msgid "IPA Server to use" -msgstr "IPA-сервер, который следует использовать" - -msgid "Specifies where to store keytab information." -msgstr "Указывает место сохранения данных таблицы ключей." - -msgid "filename" -msgstr "имя файла" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" -"Принудительно присоединить узел. Повторить присоединение, даже если оно уже " -"выполнено." - -msgid "LDAP password (if not using Kerberos)" -msgstr "LDAP-пароль (если не используется Kerberos)" - -msgid "password" -msgstr "пароль" - -msgid "LDAP basedn" -msgstr "базовое расширяемое имя (DN) LDAP" - -msgid "basedn" -msgstr "базовое расширяемое имя (DN)" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "Имя узла должно быть полным: %s\n" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "Имя узла не должно быть следующим: %s\n" - -msgid "Failed to add" -msgstr "Ошибка при добавлении" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" -"Записать сертификат (цепочку сертификатов, если использовано --chain) в файл" - -msgid "Unrevoked" -msgstr "Отзыв отменён" - -msgid "Error" -msgstr "Ошибка" - -msgid "Input filename" -msgstr "Имя файла входных данных" - -msgid "File to load the certificate from." -msgstr "Файл, из которого следует загрузить сертификат." - -msgid "cannot specify both raw certificate and file" -msgstr "невозможно одновременно указать код сертификата и файл с сертификатом" - -msgid "Input file" -msgstr "Входной файл" - -msgid "File to load the certificate from" -msgstr "Файл, из которого следует загрузить сертификат" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "Конфигурация профиля, которая хранится в файле \"%(file)s\"" - -msgid "Split DNS record to parts" -msgstr "Разделить запись DNS на части" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "Выберите тип записи ресурса DNS, который следует добавить" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "Наиболее распространённые типы для этого типа зон: %s\n" - -msgid "DNS resource record type" -msgstr "Тип записи ресурса DNS" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "Тип недействителен или не поддерживается. Разрешённые значения: %s" - -msgid "No option to modify specific record provided." -msgstr "Возможность изменения определённой записи не предусмотрена." - -msgid "Current DNS record contents:\n" -msgstr "Текущее содержание записи DNS:\n" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "Изменить значения \"%(value)s\" %(name)s?" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -"Пропущена %(count)d %(type)s запись. Одновременно можно изменить только одно " -"значение на тип записи DNS." -msgstr[1] "" -"Пропущено %(count)d %(type)s записей. Одновременно можно изменить только " -"одно значение на тип записи DNS." -msgstr[2] "" -"Пропущено %(count)d %(type)s записей. Одновременно можно изменить только " -"одно значение на тип записи DNS." - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" -"Не предоставлено ни --del-all, ни параметров удаления определённой записи.\n" -"Все поддерживаемые типы записей можно посмотреть с помощью команды help." - -msgid "No option to delete specific record provided." -msgstr "Возможность удаления определённой записи не предусмотрена." - -msgid "Delete all?" -msgstr "Удалить все?" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "Удалить значения \"%(value)s\" %(name)s?" - -msgid "Server will check DNS forwarder(s)." -msgstr "Сервер проверит DNS-перенаправитель (перенаправители)." - -msgid "This may take some time, please wait ..." -msgstr "Это может занять некоторое время; пожалуйста, подождите..." - -msgid "DNS forwarder" -msgstr "DNS-перенаправитель" - -msgid "file to store DNS records in nsupdate format" -msgstr "файл для сохранения записей DNS в формате nsupdate" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "Сертификат (сертификаты), которые хранятся в файле \"%(file)s\"" - -msgid "Servers details:" -msgstr "Сведения о серверах:" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" -"Режим миграции отключён. Используйте команду \"ipa config-mod --enable-" -"migration=TRUE\", чтобы включить его." - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" -"Миграция записей паролей выполнена в формате до хеширования. IPA не удастся " -"создать ключи Kerberos, если не будут предоставлены текстовые пароли. Всем " -"пользователям с перенесёнными записями придётся выполнить вход на https://" -"your.domain/ipa/migration/ до того, как они смогут использовать свои учётные " -"записи Kerberos." - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" -"Выполняется удаление %(servers)s из топологии репликации; пожалуйста, " -"подождите..." - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" -"Топология репликации суффикса \"%(suffix)s\" соответствует требованиям." - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "Топология репликации суффикса \"%(suffix)s\" содержит ошибки." - -msgid "Topology is disconnected" -msgstr "Топология отключена" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "Сервер %(srv)s не может связаться с серверами: %(replicas)s" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" -"Превышено рекомендованное максимальное количество соглашений для реплики" - -msgid "Maximum number of agreements per replica" -msgstr " Максимальное количество соглашений для реплики" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "У сервера \"%(srv)s\" имеется %(n)d соглашений с серверами:" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" -"Удалить пользователя, сохраняя запись доступной для будущего использования" - -msgid "Delete a user" -msgstr "Удалить пользователя" - -msgid "preserve and no-preserve cannot be both set" -msgstr "невозможно одновременно указать сохранение и отсутствие сохранения" - -msgid "maps not connected to /etc/auto.master:" -msgstr "списки соответствия, которые не подключены к /etc/auto.master:" - -msgid "Import automount files for a specific location." -msgstr "Импортировать файлы автомонтирования для определённого расположения." - -msgid "Master file" -msgstr "Главный файл" - -msgid "Automount master file." -msgstr "Главный файл автомонтирования." - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" -"Непрерывный режим работы. Сообщения об ошибках выводятся, но процесс " -"продолжается." - -#, python-format -msgid "File %(file)s not found" -msgstr "Файл %(file)s не найден" - -#, python-format -msgid "key %(key)s already exists" -msgstr "ключ %(key)s уже существует" - -#, python-format -msgid "map %(map)s already exists" -msgstr "список соответствия %(map)s уже существует" - -msgid "Imported maps:" -msgstr "Импортированные списки соответствия:" - -#, python-format -msgid "Added %(map)s" -msgstr "Добавлено %(map)s" - -msgid "Imported keys:" -msgstr "Импортированные ключи:" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "Добавлено %(src)s в %(dst)s" - -msgid "Ignored keys:" -msgstr "Пропущенные ключи:" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "Пропущено %(src)s в %(dst)s" - -msgid "Duplicate maps skipped:" -msgstr "Пропущенные списки соответствия — дубликаты:" - -#, python-format -msgid "Skipped %(map)s" -msgstr "Пропущено %(map)s" - -msgid "Duplicate keys skipped:" -msgstr "Пропущенные ключи-дубликаты:" - -#, python-format -msgid "Skipped %(key)s" -msgstr "Пропущено %(key)s" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" -"Не удалось показать QR-код с помощью настроенного шифрования вывода. " -"Используйте URI токена для настройки вашего устройства OTP" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" -"Ширина QR-кода превышает ширину, заданную параметром \"tty\" для вывода. " -"Измените размер терминала." - -msgid "Synchronize an OTP token." -msgstr "Синхронизировать токен OTP." - -msgid "User ID" -msgstr "ID пользователя" - -msgid "Password" -msgstr "Пароль" - -msgid "First Code" -msgstr "Первый код" - -msgid "Second Code" -msgstr "Другой код" - -msgid "Token ID" -msgstr "ID токена" - -msgid "python-yubico is not installed." -msgstr "python-yubico не установлен." - msgid "" "\n" -"YubiKey Tokens\n" -msgstr "" -"\n" -"Токены YubiKey\n" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" -"\n" -"Управление токенами YubiKey.\n" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" -"\n" -"Этот код является расширением подключаемого модуля otptoken и предоставляет " -"поддержку прямого чтения или записи токенов YubiKey.\n" - -msgid "" "\n" "EXAMPLES:\n" msgstr "" "\n" +"\n" "ПРИМЕРЫ:\n" +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" +"\n" +"\n" +"Примеры:\n" +" Найти все IPA-серверы:\n" +" ipa server-find\n" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" +"\n" +"\n" +"ГЛОБАЛЬНАЯ КОНФИГУРАЦИЯ DNS\n" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" +"\n" +" Переопределить это, чтобы получить возможность добавить данные об " +"успехе или неудаче в возвращаемое сообщение.\n" +" " + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" +"\n" +" Переопределить это, чтобы получить возможность указать состояния " +"успеха или неудачи.\n" +" " + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" +"\n" +" Добавить правило автоучастия.\n" +" " + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" +"\n" +" Добавить условия в правило автоучастия.\n" +" " + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" +"\n" +" Удалить правило автоучастия.\n" +" " + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" +"\n" +"Показать сведения о правиле автоучастия." + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" +"\n" +" Показать сведения о группах автоучастия по умолчанию (резервных).\n" +" " + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" +"\n" +"Состояние блокировки учётной записи пользователя.\n" +"\n" +" Учётная запись может быть заблокирована, если в течение определённого " +"периода времени слишком большое количество раз был введён неверный пароль " +"(соответствующие ограничения регулируются политикой паролей). Запись " +"блокируется временно, она может быть разблокирована администратором.\n" +"\n" +" Эта программа соединяется с каждым главным IPA-сервером и показывает " +"состояние блокировки на каждом из них.\n" +"\n" +" Чтобы определить, заблокирована ли учётная запись на указанном сервере, " +"потребуется сравнить количество неудачных попыток входа и время последней " +"неудачной попытки с эталонными значениями. Для блокировки учётной записи " +"количество неудачных попыток входа должно превысить значение maxfail в " +"течение временного интервала failinterval в соответствии с политикой " +"паролей, связанной с пользователем.\n" +"\n" +" Счётчик неудачных попыток изменяется только тогда, когда пользователь " +"выполняет попытку войти, поэтому учётная запись может казаться " +"заблокированной, но время, прошедшее с последней неудачной попытки входа, " +"превышает время блокировки (lockouttime), установленное политикой паролей. " +"Это означает, что пользователь может войти в систему снова.\n" +" " + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" +"\n" +" Изменить отношение доверия (для будущего использования).\n" +"\n" +" В текущей версии для изменения атрибутов LDAP доступен только параметр " +"по умолчанию. В последующих версиях будут добавлены более специфичные " +"параметры.\n" +" " + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" +"\n" +" Изменить правило автоучастия.\n" +" " + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" +"\n" +" Изменение доменов области (realm).\n" +"\n" +" Проверка DNS: при ручном добавлении домена в список по умолчанию " +"выполняется проверка DNS. Она устанавливает, связан ли домен с областью " +"(realm) IPA, проверяя, есть ли у домена запись TXT _kerberos, которая " +"содержит имя области (realm) IPA. Эту проверку можно пропустить, указав " +"параметр --force.\n" +"\n" +" Удаление: при удалении домена области (realm), у которого имеется " +"соответствующая находящаяся под управлением IPA зона DNS, также " +"автоматически удаляется и соответствующая запись TXT _kerberos в этой зоне. " +"Другие записи в этой зоне и сама зона остаются.\n" +" " + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" +"\n" +" Удалить условия из правила автоучастия.\n" +" " + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" +"\n" +" Удалить группу по умолчанию (резервную) для всех несоответствующих " +"записей.\n" +" " + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" +"\n" +"Поиск правил автоучастия." + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" +"\n" +" Поиск неиспользуемых правил автоучастия. Чтобы найти все неиспользуемые " +"правила, может потребоваться выполнить команду с правами привилегированного " +"пользователя.\n" +" " + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" +"\n" +" Поиск пользователей, соответствующих предоставленному сертификату.\n" +"\n" +" Чтобы получить список соответствующих пользователей, эта команда " +"использует данные SSSD, следовательно, она может возвращать кэшированные " +"данные. Подробнее об очистке кэша SSSD можно узнать из документации к " +"sss_cache.\n" +" " + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" +"\n" +" Установить группу по умолчанию (резервную) для всех несоответствующих " +"записей.\n" +" " + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" +"\n" +"Разблокировка учётной записи пользователя.\n" +" \n" +"Учётная запись может быть заблокирована, если в течение определённого " +"периода времени слишком большое количество раз был введён неверный пароль " +"(соответствующие ограничения регулируются политикой паролей). Запись " +"блокируется временно, она может быть разблокирована администратором." + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" +"\n" +" Объект контейнера хранилищ.\n" +" " + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" +"\n" +" Объект хранилища.\n" +" " + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" +"\n" +" Эта команда эквивалентна следующим командам:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" +"\n" +" Добавить расположение:\n" +" ipa location-add location --description 'My location'\n" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" +"\n" +" Добавить сегмент топологии в суффикс \"ca\":\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" +"\n" +" Добавить сегмент топологии к суффиксу \"domain\":\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" +"\n" +" Удалить расположение:\n" +" ipa location-del location\n" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" +"\n" +" Удалить сегмент топологии в суффиксе \"ca\":\n" +" ipa topologysegment-del ca segment_name\n" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" +"\n" +" Удалить сегмент топологии в суффиксе \"domain\":\n" +" ipa topologysegment-del domain segment_name\n" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" +"\n" +" Найти все расположения:\n" +" ipa location-find\n" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" +"\n" +" Найти все серверы:\n" +" ipa server-find\n" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" +"\n" +" Найти все суффиксы:\n" +" ipa topologysuffix-find\n" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" +"\n" +" Вывести список всех сегментов топологии в суффиксе \"ca\":\n" +" ipa topologysegment-find ca\n" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" +"\n" +" Вывести список всех сегментов топологии в суффиксе \"domain\":\n" +" ipa topologysegment-find domain\n" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" +"\n" +" Показать конфигурацию определённого DNS-сервера:\n" +" ipa dnsserver-show\n" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" +"\n" +" Показать неявную роль главного IPA-сервера:\n" +" ipa server-role-find --include-master\n" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" +"\n" +" Показать определённое расположение:\n" +" ipa location-show location\n" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" +"\n" +" Показать определённый сервер:\n" +" ipa server-show ipa.example.com\n" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" +"\n" +" Показать состояние роли \"DNS server\" на сервере:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" +"\n" +" Показать состояние всех настроенных ролей на сервере:\n" +" ipa server-role-find ipa.example.com\n" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" +"\n" +" Показать состояние всех ролей, которые содержат \"AD\", на сервере:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" +"\n" +" Обновить конфигурацию определённого DNS-сервера:\n" +" ipa dnsserver-mod\n" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" +"\n" +" Проверить топологию суффикса \"ca\":\n" +" ipa topologysuffix-verify ca\n" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" +"\n" +" Проверить топологию суффикса \"domain\":\n" +" ipa topologysuffix-verify domain\n" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" +"\n" +" Добавить запись LOC для example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" +"\n" +" Добавить в правило условие:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" +"\n" +" Добавить узел, который может управлять таблицей ключей и сертификатом этого " +"узла:\n" +" ipa host-add-managedby --hosts=test2 test\n" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" +"\n" +" Добавить узел в правило:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" +"\n" +"Добавить узел:\n" +" ipa host-add web1.example.com\n" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" +"\n" +" Добавить почтовый сервер для example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" +"\n" +" Добавить новый узел с одноразовым паролем:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" +"\n" +" Добавить новый узел со случайным одноразовым паролем:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" +"\n" +" Добавить новый узел:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" +"\n" +" Добавить новый сервер:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" +"\n" +" Добавить новый токен:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" + msgid "" "\n" " Add a new token:\n" @@ -1024,155 +650,3048 @@ msgstr "" " Добавить новый токен:\n" " ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgid "Add a new YubiKey OTP token." -msgstr "Добавить новый токен OTP YubiKey." - -msgid "YubiKey slot" -msgstr "Слот YubiKey" - -msgid "No free YubiKey slot!" -msgstr "Нет свободных слотов YubiKey!" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "Не удалось прочитать файл \"%(filename)s\": %(exc)s" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "Не удалось расшифровать файл \"%(filename)s\": %(exc)s" - -msgid "Invalid credentials" -msgstr "Недействительные учётные данные" - -msgid "Create a new vault." -msgstr "Создать новое хранилище." - -msgid "Vault password" -msgstr "Пароль хранилища" - -msgid "File containing the vault password" -msgstr "Файл, который содержит пароль хранилища" - -msgid "File containing the vault public key" -msgstr "Файл, который содержит открытый ключ хранилища" - -msgid "Password can be specified only for symmetric vault" -msgstr "Пароль можно указать только для симметричного хранилища" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "Открытый ключ можно указать только для асимметричного хранилища" - -msgid "Password specified multiple times" -msgstr "Пароль указан несколько раз" - -msgid "Public key specified multiple times" -msgstr "Открытый ключ указан несколько раз" - -msgid "Missing vault public key" -msgstr "Отсутствует открытый ключ хранилища" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "Открытый ключ хранилища недействителен или не поддерживается: %s" - -msgid "Modify a vault." -msgstr "Изменить хранилище." - -msgid "Change password" -msgstr "Изменить пароль" - -msgid "Old vault password" -msgstr "Старый пароль хранилища" - -msgid "File containing the old vault password" -msgstr "Файл, который содержит старый пароль хранилища" - -msgid "New vault password" -msgstr "Новый пароль хранилища" - -msgid "File containing the new vault password" -msgstr "Файл, который содержит новый пароль хранилища" - -msgid "Old vault private key" -msgstr "Старый закрытый ключ хранилища" - -msgid "File containing the old vault private key" -msgstr "Файл, который содержит старый закрытый ключ хранилища" - -msgid "File containing the new vault public key" -msgstr "Файл, который содержит новый открытый ключ хранилища" - -msgid "New public key specified multiple times" -msgstr "Новый открытый ключ указан несколько раз" - -msgid "Missing new vault public key" -msgstr "Отсутствует новый открытый ключ хранилища" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "Архивировать данные в хранилище." - -msgid "Binary data to archive" -msgstr "Двоичные данные, которые следует архивировать" - -msgid "File containing data to archive" -msgstr "Файл, содержащий данные, которые следует архивировать" - -msgid "Override existing password" -msgstr "Переопределить существующий пароль" - -msgid "Input data specified multiple times" -msgstr "Входные данные указаны несколько раз" - -#, python-format msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" msgstr "" -"Размер данных превышает ограничение. Текущее ограничение размера хранилища: " -"%(limit)d Б" +"\n" +" Добавить разрешение на управление участием в группе:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" -msgid "Invalid vault type" -msgstr "Недопустимый тип хранилища" +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" +"\n" +" Добавить разрешение на создание пользователей:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgid "Retrieve a data from a vault." -msgstr "Получить данные из хранилища." +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" +"\n" +" Добавить специальное правило Sudo для конфигурации сервера Sudo по " +"умолчанию:\n" +" ipa sudorule-add defaults\n" -msgid "File to store retrieved data" -msgstr "Файл, в который следует сохранить полученные данные" +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" +"\n" +" Добавить стандартное хранилище:\n" +" ipa vault-add <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --type standard\n" -msgid "Vault private key" -msgstr "Закрытый ключ хранилища" +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" +"\n" +" Добавить симметричное хранилище:\n" +" ipa vault-add <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --type symmetric --password-file password.txt\n" -msgid "File containing the vault private key" -msgstr "Файл, который содержит закрытый ключ хранилища" +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" +"\n" +" Добавить пользователя в правило:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" -msgid "Data" -msgstr "Данные" +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" +"\n" +" Добавить пользователя:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgid "Private key specified multiple times" -msgstr "Закрытый ключ указан несколько раз" +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" +"\n" +" Добавить асимметричное хранилище:\n" +" ipa vault-add <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --type asymmetric --public-key-file public.pem\n" -msgid "Missing vault private key" -msgstr "Отсутствует закрытый ключ хранилища" +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" +"\n" +" Добавить в правило исключительное условие, чтобы предотвратить " +"автоназначение:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "Включено правило Sudo \"%s\"" +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" +"\n" +" Добавить другую запись с помощью специальных параметров записи MX:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "Отключено правило Sudo \"%s\"" +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" +"\n" +"Добавить другую запись с помощью интерактивного режима (в который программа " +"переходит в ответ на команды dnsrecord-add, dnsrecord-mod или dnsrecord-del " +"без параметров):\n" +" ipa dnsrecord-add example.com @\n" +" Выберите тип записи ресурса DNS, который следует добавить\n" +" Наиболее распространённые типы для этого типа зон: NS, MX, LOC\n" +"\n" +" Тип записи ресурса DNS: MX\n" +" Приоритет MX: 30\n" +" Обменник MX: mail3\n" +" Имя записи: example.com\n" +" Запись MX: 10 mail1, 20 mail2, 30 mail3\n" +" Запись NS: nameserver.example.com., nameserver2.example.com.\n" -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "В правило Sudo \"%(rule)s\" добавлен параметр \"%(option)s\"" +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" +"\n" +" Добавить новую запись A для www.example.com. Также создать обратную запись " +"в соответствующей обратной зоне. В этом случае запись PTR \"2\", которая " +"указывает на www.example.com, будет создана в зоне 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "Из правила Sudo \"%(rule)s\" удалён параметр \"%(option)s\"" +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" +"\n" +" Добавить новую запись PTR для www.example.com:\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" +"\n" +" Добавить новые записи SRV для LDAP-серверов. Три четверти запросов должны " +"отправляться на fast.example.com, одна четверть — на slow.example.com. Если " +"обе службы недоступны, переключиться на backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" +"\n" +" Добавить новую обратную зону, указанную с помощью сетевого IP-адреса:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" +"\n" +"Добавить новую зону:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" +"\n" +" Добавить другой сервер имён для example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" +"\n" +" Добавить объект команды Sudo и добавить его в правило в качестве " +"разрешённой команды:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" +"\n" +" Добавить общесистемные права доступа, которыми можно воспользоваться для " +"делегирования привилегий для отдельных зон:\n" +" ipa dnszone-add-permission example.com\n" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" +"\n" +" Добавить начальную группу или группу узлов:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" +"\n" +" Добавить начальное правило:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Добавить участников хранилища:\n" +" ipa vault-add-member <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Добавить владельцев хранилища:\n" +" ipa vault-add-owner <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" +"\n" +" После внесения этих изменений три пятых запросов должны направляться на " +"fast.example.com, а две пятых — на slow.example.com.\n" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" +"\n" +" Разрешить пользователю создавать таблицу ключей:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" +"\n" +" Разрешить пользователю создавать таблицу ключей:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" +"\n" +"Пример интерактивного режима для команды dnsrecord-del:\n" +" ipa dnsrecord-del example.com www\n" +" Не указан параметр удаления определённой записи.\n" +" Удалить все? Да/Нет (по умолчанию \"Нет\"): (не удалять все записи)\n" +" Текущее содержание записи DNS:\n" +"\n" +" Запись A: 192.0.2.2, 192.0.2.3\n" +"\n" +" Удалить запись A '192.0.2.2'? Да/Нет (по умолчанию \"Нет\"):\n" +" Удалить запись A '192.0.2.3'? Да/Нет (по умолчанию \"Нет\"): y\n" +" Имя записи: www\n" +" Запись A: 192.0.2.2 (запись A 192.0.2.3 удалена)\n" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" +"\n" +" Архивировать данные в асимметричное хранилище:\n" +" ipa vault-archive <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --in <файл входных данных>\n" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" +"\n" +" Архивировать данные в стандартное хранилище:\n" +" ipa vault-archive <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --in <файл входных данных>\n" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" +"\n" +" Архивировать данные в симметричное хранилище:\n" +" ipa vault-archive <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --in <файл входных данных>\n" +" --password-file password.txt\n" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" +"\n" +" Изменить политику перенаправления (параметр forward-policy) для external." +"example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" +"\n" +" Изменить секрет:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " +"Hat\"\n" +msgstr "" +"\n" +" Изменить поставщика:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " +"Hat\"\n" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" +"\n" +"Проверить состояние запроса подписи:\n" +" ipa cert-status 10\n" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" +"\n" +" Создать новое правило сопоставления сертификатов с записями пользователей:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" +"\n" +" Создать новое правило:\n" +" ipa sudorule-add readfiles\n" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" +"\n" +" Делегировать зону sub.example другому серверу имён:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" +"\n" +" Удалить правило сопоставления сертификатов с записями пользователей:\n" +" ipa certmaprule-del rule1\n" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" +"\n" +" Удалить конфигурацию:\n" +" ipa radiusproxy-del MyRADIUS\n" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" +"\n" +" Удалить узел:\n" +" ipa host-del test.example.com\n" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +" Удалить токен:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Удалить хранилище:\n" +" ipa vault-del <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" +"\n" +" Удалить правило автоучастия:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" +"\n" +" Удалить зону перенаправления external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" +"\n" +" Удалить добавленный ранее сервер имён из example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Удалить участников хранилища:\n" +" ipa vault-remove-member <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Удалить владельцев хранилища:\n" +" ipa vault-remove-owner <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" +"\n" +" Удалить зону example.com вместе со всеми записями ресурсов:\n" +" ipa dnszone-del example.com\n" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" +"\n" +" Отключить правило сопоставления сертификатов с записями пользователей:\n" +" ipa certmaprule-disable rule1\n" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" +"\n" +" Отключить глобальное перенаправление для указанного поддерева:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" +"\n" +" Отключить ключ Kerberos, SSL-сертификат и все службы узла:\n" +" ipa host-disable test.example.com\n" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" +"\n" +" Показать правило автоучастия:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" +"\n" +" Показать сведения о правиле сопоставления сертификатов с записями " +"пользователей:\n" +" ipa certmaprule-show rule1\n" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" +"\n" +"Показать глобальную конфигурацию сопоставления сертификатов с записями " +"пользователей:\n" +" ipa certmapconfig-show\n" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" +"\n" +" Показать конфигурацию хранилища:\n" +" ipa vaultconfig-show\n" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" +"\n" +" Включить правило сопоставления сертификатов с записями пользователей:\n" +" ipa certmaprule-enable rule1\n" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" +"\n" +" Проверить сертификат:\n" +" ipa cert-find --file=cert.pem --all\n" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" +"\n" +" Проверить конфигурацию:\n" +" ipa radiusproxy-show MyRADIUS\n" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +" Проверить токен:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" +"\n" +" Найти записи A со значением 192.0.2.2 в зоне example.com:\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" +"\n" +" Найти все правила сопоставления сертификатов с записями пользователей в " +"указанном домене:\n" +" ipa certmaprule-find --domain example.com\n" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" +"\n" +" Найти все правила автоучастия:\n" +" ipa automember-find\n" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" +"\n" +" Найти все неиспользуемые правила автоучастия:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Найти все неиспользуемые правила автоучастия и удалить их:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" +"\n" +" Найти все серверы, записи которых содержат строку \"example.com\":\n" +" ipa radiusproxy-find example.com\n" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" +"\n" +" Найти записи для ресурсов с \"www\" в имени в зоне example.com:\n" +" ipa dnsrecord-find example.com www\n" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" +"\n" +" Найти параметры user-find:\n" +" ipa param-find user-find\n" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" +"\n" +" Найти зону со словом \"example\" в имени домена:\n" +" ipa dnszone-find example\n" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" +"\n" +" Перенаправлять все запросы для зоны external.example.com на другой " +"перенаправитель с помощью политики \"first\" (запросы будут направлены на " +"выбранный перенаправитель, а если он не ответит, будут использованы " +"глобальные корневые серверы):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" +"\n" +"Создать и получить таблицу ключей для службы IPA:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" +"\n" +"Если настроен глобальный перенаправитель, все запросы, для которых этот " +"сервер не является полномочным (например, sub.example.com), будут " +"перенаправлены на глобальный перенаправитель. Конфигурацию глобального " +"перенаправления можно переопределить для отдельных зон.\n" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" +"\n" +" Вывести список всех зон перенаправления:\n" +" ipa dnsforwardzone-find\n" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Вывести список хранилищ:\n" +" ipa vault-find\n" +" [--user <пользователь>|--service <служба>|--shared]\n" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" +"\n" +" Изменить глобальную конфигурацию сопоставления сертификатов с записями " +"пользователей:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" +"\n" +" Изменить правило сопоставления сертификатов с записями пользователей:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" +"\n" +" Изменить ключи асимметричного хранилища:\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --private-key-file <файл старого закрытого ключа>\n" +" --public-key-file <файл нового открытого ключа>\n" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" +"\n" +"Изменить глобальную конфигурацию DNS и установить список глобальных " +"перенаправителей:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" +"\n" +" Изменить сведения об узле:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" +"\n" +" Изменить пароль симметричного хранилища:\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --change-password\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --old-password <старый пароль>\n" +" --new-password <новый пароль>\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --old-password-file <файл старого пароля>\n" +" --new-password-file <файл нового пароля>\n" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" +"\n" +" Изменить правило автоучастия:\n" +" ipa automember-mod\n" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" +"\n" +" Изменить зону, чтобы разрешить динамическое обновление для собственных " +"записей узлов в области (realm) EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" +"\n" +" Изменить зону, чтобы разрешить перенос зоны только для локальной сети:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" +"\n" +" Изменить описание хранилища:\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --desc <описание>\n" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" +"\n" +" Изменить тип хранилища:\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --type <тип>\n" +" [старый пароль / закрытый ключ]\n" +" [новый пароль / открытый ключ]\n" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" +"\n" +" Перестроить участие для всех узлов:\n" +" ipa automember-rebuild --type=hostgroup\n" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" +"\n" +" Перестроить участие для всех пользователей:\n" +" ipa automember-rebuild --type=group\n" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" +"\n" +" Перестроить участие для указанных узлов:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" +"\n" +" Перестроить участие для указанных пользователей:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" +"\n" +"Удалить открытые ключи SSH узла и обновить DNS для отображения изменений:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" +"\n" +"Удалить сертификат из списка отзыва:\n" +" ipa cert-remove-hold 1032\n" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" +"\n" +" Удалить условие из правила:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" +"\n" +" Удалить целевую группу по умолчанию (резервную):\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" +"\n" +"Запросить новый сертификат и добавить учётную запись:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" +"\n" +"Определить адрес по имени узла, чтобы узнать, существует ли он (будет " +"добавлен стандартный домен IPA, если он не включён):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" +"\n" +"Получить существующий сертификат:\n" +" ipa cert-show 1032\n" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" +"\n" +" Получить данные из асимметричного хранилища:\n" +" ipa vault-retrieve <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --out <файл выходных данных> --private-key-file private.pem\n" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" +"\n" +" Получить данные из стандартного хранилища:\n" +" ipa vault-retrieve <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --out <файл выходных данных>\n" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" +"\n" +" Получить данные из симметричного хранилища:\n" +" ipa vault-retrieve <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --out <файл выходных данных>\n" +" --password-file password.txt\n" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" +"\n" +"Отозвать сертификат (подробные сведения о причинах доступны в RFC 5280):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" +"\n" +"Поиск сертификатов по дате выдачи:\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" +"\n" +"Поиск сертификатов по имени узла:\n" +" ipa cert-find --subject=ipaserver.example.com\n" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" +"\n" +" Поиск сертификатов, владельцем которых является определённый пользователь:\n" +" ipa cert-find --user=user\n" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" +"\n" +"Поиск отозванных сертификатов по причине отзыва:\n" +" ipa cert-find --revocation-reason=5\n" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" +"\n" +" Семантика перенаправления в IPA соответствует семантике BIND и зависит от " +"типа зоны:\n" +" * Главная зона: локальный BIND предоставляет надёжные ответы на запросы " +"данных в указанной зоне (включая надёжные ответы NXDOMAIN), а " +"перенаправление применяется только для запросов имён за пределами отрезков " +"(записи NS) зон, которые обслуживаются локально.\n" +"\n" +" * Зона перенаправления: зона перенаправления не содержит надёжные данные. " +"BIND перенаправляет запросы, на которые не удалось получить ответы из " +"локального кэша, на настроенные перенаправители.\n" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" +"\n" +" Семантика параметра --forward-policy:\n" +" * none - отключить перенаправление для указанной зоны.\n" +" * first - перенаправить все запросы на настроенные перенаправители. Если " +"они не сработают,\n" +" выполнить разрешение с помощью корневых серверов DNS.\n" +" * only - перенаправить все запросы на настроенные перенаправители и " +"вернуть сообщение об ошибке, если они не сработают.\n" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" +"\n" +" Указать преобразования типа и роли SELinux в правиле:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" +"\n" +" Указать параметр Sudo по умолчанию:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" +"\n" +"Установить целевую группу по умолчанию (резервную):\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Показать хранилище:\n" +" ipa vault-show <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" +"\n" +" Показать зону перенаправления external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" +"\n" +" Показать глобальную конфигурацию DNS:\n" +" ipa dnsconfig-show\n" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" +"\n" +" Показать записи для ресурса www в зоне example.com:\n" +" ipa dnsrecord-show example.com www\n" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" +"\n" +" Показать целевую группу по умолчанию (резервную):\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" +"\n" +" Показать сведения о user-find:\n" +" ipa command-show user-find\n" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" +"\n" +" Показать зону example.com:\n" +" ipa dnszone-show example.com\n" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" +"\n" +"Для облегчения внесения изменений можно воспользоваться интерактивным " +"режимом:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" Возможность внесения изменений в определённую запись не предусмотрена.\n" +" Текущее содержание записи DNS:\n" +"\n" +" Запись SRV: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Изменить запись SRV '0 3 389 fast.example.com'? Да/Нет (по умолчанию " +"\"Нет\"):\n" +" Изменить запись SRV '0 1 389 slow.example.com'? Да/Нет (по умолчанию " +"\"Нет\"): y\n" +" Приоритет SRV [0]: (сохранить значение по умолчанию)\n" +" Вес SRV [1]: 2 (изменённое значение)\n" +" Порт SRV [389]: (сохранить значение по умолчанию)\n" +" Цель SRV [slow.example.com]: (сохранить значение по умолчанию)\n" +" Пропущена 1 запись SRV. Одновременно можно изменять только одно значение " +"на тип записи DNS.\n" +" Имя записи: _ldap._tcp\n" +" Запись SRV: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" +"\n" +" Эта конфигурация перенаправляет все запросы имён за пределами поддерева " +"example.com на глобальные перенаправители. Для имён в пределах поддерева " +"example.com используется обычный рекурсивный процесс разрешения (то есть с " +"переходом по записям NS и так далее).\n" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" +"\n" +"Проверить автоучастие:\n" +" ipa hostgroup-show webservers\n" +" Группа узлов: webservers\n" +" Описание: Web Servers\n" +" Узлы-участники: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Имя группы: devel\n" +" Описание: Developers\n" +" GID: 1004200000\n" +" Пользователи-участники: tuser\n" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" +"\n" +" Проверить, что владельцем сертификата является определённый пользователь:\n" +" ipa cert-find --file=cert.pem --user=user\n" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" +"\n" +"* Разрешение даёт доступ для чтения, записи, добавления, удаления, поиска " +"или сравнения.\n" +"* Привилегия объединяет схожие разрешения (например, все разрешения, которые " +"требуются для добавления пользователя).\n" +"* Роль даёт набор привилегий пользователям, группам, узлам или группам " +"узлов.\n" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" +"\n" +"* Должен существовать узел\n" +"* Должна существовать служба (либо следует использовать параметр --add для " +"её автоматического добавления)\n" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" +"\n" +"Сертификат хранится в учётной записи службы, а учётной записи службы " +"требуется узел.\n" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" +"\n" +"Условие является регулярным выражением, используется 389-ds для установления " +"соответствия новой входящей записи правилу автоучастия. Если имеется " +"соответствие правилу включения, запись добавляется в соответствующую группу " +"или группу узлов.\n" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" +"\n" +"Можно указать группу или группу узлов по умолчанию, которая будет " +"использоваться для записей, не соответствующих ни одному правилу. В случае " +"записей пользователей эта группа будет резервной группой, поскольку все " +"пользователи по умолчанию являются участниками группы, указанной в " +"настройках IPA.\n" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" +"\n" +"С помощью разрешений можно очень точно делегировать права доступа. " +"Разрешение представляет собой удобную для восприятия форму 389-ds ACI " +"(правила управления доступом).\n" +"Разрешение даёт право выполнять определённую задачу, например, добавлять " +"пользователей, изменять группы и так далее.\n" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" +"\n" +"Разрешение состоит из нескольких разных частей:\n" +"\n" +"1. Имя разрешения.\n" +"2. Цель разрешения.\n" +"3. Права, предоставленные разрешением.\n" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" +"\n" +"Разрешение не может содержать другие разрешения.\n" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" +"\n" +"Правило непосредственно связывается с группой по имени, следовательно, вы не " +"можете создать правило без определения группы или группы узлов.\n" + +msgid "" +"\n" +"API Schema\n" +msgstr "" +"\n" +"Схема API\n" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" +"\n" +"Добавление нового диапазона идентификаторов.\n" +"\n" +" Для добавления нового диапазона идентификаторов всегда необходимо " +"указывать\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Кроме того,\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" могут указываться для нового диапазона идентификаторов для локального " +"домена, в то время как\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" должны быть указаны для добавления нового диапазона для доверенного " +"домена AD.\n" +"\n" +" ПРЕДУПРЕЖДЕНИЕ:\n" +"\n" +"Подключаемый модуль DNA в 389-ds выделяет идентификаторы на основе " +"диапазонов, настроенных для локального домена. В текущей версии сам " +"подключаемый модуль DNA *нельзя* перенастраивать на основе локальных " +"диапазонов, установленных с помощью этого семейства команд.\n" +"\n" +"Для нового локального диапазона следует вручную изменить настройки " +"конфигурации подключаемого модуля DNA. В частности, следует изменить атрибут " +"dnaNextRange \"cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config\" таким " +"образом, чтобы он соответствовал новому диапазону.\n" +" " + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" +"\n" +"Добавление нового диапазона идентификаторов.\n" +"\n" +" Для добавления нового диапазона идентификаторов всегда необходимо " +"указывать\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Кроме того,\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" могут указываться для нового диапазона идентификаторов для локального " +"домена, в то время как\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" должны быть указаны для добавления нового диапазона для доверенного " +"домена AD.\n" +"\n" +" ПРЕДУПРЕЖДЕНИЕ:\n" +"\n" +"Подключаемый модуль DNA в 389-ds выделяет идентификаторы на основе " +"диапазонов, настроенных для локального домена. В текущей версии сам " +"подключаемый модуль DNA *нельзя* перенастраивать на основе локальных " +"диапазонов, установленных с помощью этого семейства команд.\n" +"\n" +"Для нового локального диапазона следует вручную изменить настройки " +"конфигурации подключаемого модуля DNA. В частности, следует изменить атрибут " +"dnaNextRange \"cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config\" таким " +"образом, чтобы он соответствовал новому диапазону.\n" +" " + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" +"\n" +"Добавление нового диапазона идентификаторов.\n" +"\n" +" Для добавления нового диапазона идентификаторов всегда необходимо " +"указывать\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Кроме того,\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" могут указываться для нового диапазона идентификаторов для локального " +"домена, в то время как\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" должны быть указаны для добавления нового диапазона для доверенного " +"домена AD.\n" +"\n" +"======= \n" +"ПРЕДУПРЕЖДЕНИЕ:\n" +"\n" +"Подключаемый модуль DNA в 389-ds выделяет идентификаторы на основе " +"диапазонов, настроенных для локального домена. В текущей версии сам " +"подключаемый модуль DNA *нельзя* перенастраивать на основе локальных " +"диапазонов, установленных с помощью этого семейства команд.\n" +"\n" +"Для нового локального диапазона следует вручную изменить настройки " +"конфигурации подключаемого модуля DNA. В частности, следует изменить атрибут " +"dnaNextRange \"cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config\" таким " +"образом, чтобы он соответствовал новому диапазону.\n" +"=======" + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" +"\n" +"Добавление нового отношения доверия, которое следует использовать.\n" +"\n" +"Эта команда устанавливает отношение доверия с другим доменом, который " +"становится \"доверенным\". В результате пользователи доверенного домена " +"получают доступ к ресурсам этого домена.\n" +"\n" +"В текущей версии поддерживаются только отношения доверия с доменами Active " +"Directory.\n" +"\n" +"Команду можно безопасно запускать несколько раз для одного и того же домена, " +"такой запуск приводит к изменению учётных данных отношения доверия на обеих " +"сторонах.\n" +"\n" +"Если команда уже выполнялась с определённым типом диапазона или с " +"автоматическим определением типа диапазона, а теперь необходимо настроить " +"другой тип диапазона, возможно, потребуется сначала удалить диапазон " +"идентификаторов с помощью команды ipa idrange-del. Затем повторите команду с " +"необходимым типом диапазона.\n" +"\n" +" " + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" +"\n" +"Добавление нового отношения доверия, которое следует использовать.\n" +"\n" +"Эта команда устанавливает отношение доверия с другим доменом, который " +"становится \"доверенным\". В результате пользователи доверенного домена " +"получают доступ к ресурсам этого домена.\n" +"\n" +"В текущей версии поддерживаются только отношения доверия с доменами Active " +"Directory.\n" +"\n" +"Команду можно безопасно запускать несколько раз для одного и того же домена, " +"такой запуск приводит к изменению учётных данных отношения доверия на обеих " +"сторонах.\n" +" " + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" +"\n" +"Кроме того, имеются следующие удобные параметры. Установка одного из них " +"установит соответствующий атрибут (атрибуты).\n" +"1. type: тип объекта (пользователь, группа и так далее); устанавливает " +"поддерево и фильтр целей.\n" +"2. memberof: применить к участникам группы; устанавливает фильтр целей.\n" +"3. targetgroup: предоставить доступ для изменения определённой группы " +"(например, предоставить права доступа для управления участием в группе); " +"устанавливает цель.\n" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" +"\n" +"Соглашения представляются сегментами топологии. По умолчанию сегмент " +"топологии представляет 2 соглашения о репликации: по одному для каждого " +"направления, например, от A до B и от B до A. Создание однонаправленных " +"сегментов запрещено.\n" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" +"\n" +"Все службы сертификации, кроме службы сертификации \"IPA\", можно отключать " +"и включать повторно. Отключение службы сертификации приводит к тому, что ей " +"запрещается выдавать сертификаты, но не влияет на действительность её " +"сертификата.\n" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" +"\n" +"Правилу Sudo можно добавить порядок, который будет руководить порядком " +"обработки записей (если такой порядок предусмотрен на клиентской стороне). " +"Порядок определяется числовым индексом (целое число), который не должен " +"повторяться.\n" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" +"\n" +"Асимметричное хранилище похоже на стандартное хранилище, но в нём секрет " +"перед передачей предварительно шифруется с помощью открытого ключа. Секрет " +"можно получить только с помощью закрытого ключа.\n" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" +"\n" +"Правило автоучастия.\n" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" +"\n" +"Правило автоучастия.\n" +"\n" +"Внося ясные правила о принадлежности узлов и пользователей к группам " +"посредством настройки включающих и исключающих шаблонов регулярных " +"выражений, вы можете автоматически связывать новые записи с группой или " +"группой узлов на основе данных атрибутов.\n" +"\n" +"Правило непосредственно связывается с группой по имени, следовательно, вы не " +"можете создать правило без определения группы или группы узлов. \n" +"\n" +"Условие является регулярным выражением, используется 389-ds для установления " +"соответствия новой входящей записи правилу автоучастия. Если имеется " +"соответствие правилу включения, запись добавляется в соответствующую группу " +"или группу узлов.\n" +"\n" +"Можно указать группу или группу узлов по умолчанию, которая будет " +"использоваться для записей, не соответствующих ни одному правилу. В случае " +"записей пользователей эта группа будет резервной группой, поскольку все " +"пользователи по умолчанию являются участниками группы, указанной в " +"настройках IPA.\n" +"\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +"Добавить начальную группу или группу узлов :\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Добавить начальное правило:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Добавить в правило условие:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Добавить в правило исключительное условие, чтобы предотвратить " +"автоназначение:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Добавить узел:\n" +" ipa host-add web1.example.com\n" +"\n" +" Добавить пользователя:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +"Проверить автоучастие:\n" +" ipa hostgroup-show webservers\n" +" Группа узлов: webservers\n" +" Описание: Web Servers\n" +" Узлы-участники: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Имя группы: devel\n" +" Описание: Developers\n" +" GID: 1004200000\n" +" Пользователи-участники: tuser\n" +"\n" +" Удалить условие из правила:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Изменить правило автоучастия:\n" +" ipa automember-mod\n" +"\n" +" Установить целевую группу по умолчанию (резервную):\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Удалить целевую группу по умолчанию (резервную):\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Показать целевую группу по умолчанию (резервную):\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Найти все правила автоучастия:\n" +" ipa automember-find\n" +"\n" +" Показать правило автоучастия:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Удалить правило автоучастия:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" +"\n" +"Правило автоучастия.\n" +"\n" +"Внося ясные правила о принадлежности узлов и пользователей к группам " +"посредством настройки включающих и исключающих шаблонов регулярных " +"выражений, вы можете автоматически связывать новые записи с группой или " +"группой узлов на основе данных атрибутов.\n" +"\n" +"Правило непосредственно связывается с группой по имени, следовательно, вы не " +"можете создать правило без определения группы или группы узлов. \n" +"\n" +"Условие является регулярным выражением, используется 389-ds для установления " +"соответствия новой входящей записи правилу автоучастия. Если имеется " +"соответствие правилу включения, запись добавляется в соответствующую группу " +"или группу узлов.\n" +"\n" +"Можно указать группу или группу узлов по умолчанию, которая будет " +"использоваться для записей, не соответствующих ни одному правилу. В случае " +"записей пользователей эта группа будет резервной группой, поскольку все " +"пользователи по умолчанию являются участниками группы, указанной в " +"настройках IPA.\n" +"\n" +"Команду automember-rebuild можно использовать, чтобы задним числом применить " +"правила автоучастия в отношении уже существующих записей; это перестроит их " +"участие.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +"Добавить начальную группу или группу узлов :\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Добавить начальное правило:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Добавить в правило условие:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Добавить в правило исключительное условие, чтобы предотвратить " +"автоназначение:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Добавить узел:\n" +" ipa host-add web1.example.com\n" +"\n" +" Добавить пользователя:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +"Проверить автоучастие:\n" +" ipa hostgroup-show webservers\n" +" Группа узлов: webservers\n" +" Описание: Web Servers\n" +" Узлы-участники: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Имя группы: devel\n" +" Описание: Developers\n" +" GID: 1004200000\n" +" Пользователи-участники: tuser\n" +"\n" +" Удалить условие из правила:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Изменить правило автоучастия:\n" +" ipa automember-mod\n" +"\n" +" Установить целевую группу по умолчанию (резервную):\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Удалить целевую группу по умолчанию (резервную):\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Показать целевую группу по умолчанию (резервную):\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Найти все правила автоучастия:\n" +" ipa automember-find\n" +"\n" +" Показать правило автоучастия:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Удалить правило автоучастия:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +"Перестроить участие для всех пользователей:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Перестроить участие для всех узлов:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Перестроить участие для указанных пользователей:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Перестроить участие для указанных узлов:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" + +msgid "" +"\n" +"Automount\n" +"\n" +"Stores automount(8) configuration for autofs(8) in IPA.\n" +"\n" +"The base of an automount configuration is the configuration file auto." +"master.\n" +"This is also the base location in IPA. Multiple auto.master configurations\n" +"can be stored in separate locations. A location is implementation-specific\n" +"with the default being a location named 'default'. For example, you can " +"have\n" +"locations by geographic region, by floor, by type, etc.\n" +"\n" +"Automount has three basic object types: locations, maps and keys.\n" +"\n" +"A location defines a set of maps anchored in auto.master. This allows you\n" +"to store multiple automount configurations. A location in itself isn't\n" +"very interesting, it is just a point to start a new automount map.\n" +"\n" +"A map is roughly equivalent to a discrete automount file and provides\n" +"storage for keys.\n" +"\n" +"A key is a mount point associated with a map.\n" +"\n" +"When a new location is created, two maps are automatically created for\n" +"it: auto.master and auto.direct. auto.master is the root map for all\n" +"automount maps for the location. auto.direct is the default map for\n" +"direct mounts and is mounted on /-.\n" +"\n" +"An automount map may contain a submount key. This key defines a mount\n" +"location within the map that references another map. This can be done\n" +"either using automountmap-add-indirect --parentmap or manually\n" +"with automountkey-add and setting info to \"-type=autofs :\".\n" +"\n" +"EXAMPLES:\n" +"\n" +"Locations:\n" +"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" +"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" +"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" +"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" +"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" +"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" +"\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" +"\n" +"Maps:\n" +"\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" +"\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" +msgstr "" +"\n" +"Автомонтирование\n" +"\n" +"Сохраняет конфигурацию automount(8) для autofs(8) в IPA.\n" +"\n" +"Основой конфигурации автомонтирования является файл конфигурации auto." +"master.\n" +"Это также базовое расположение в IPA. Несколько конфигураций auto.master " +"могут храниться в отдельных расположениях. Расположение зависит от " +"реализации, расположением по умолчанию является расположение с именем " +"\"default\". Например, можно создать расположения для географических " +"областей, этажей, типов и так далее.\n" +"\n" +"В автомонтировании имеется три основных типа объектов: расположения, списки " +"соответствия и ключи.\n" +"\n" +"Расположение определяет набор списков соответствия, привязанных в auto." +"master. Это позволяет хранить несколько конфигураций автомонтирования. " +"Расположение само по себе не представляет особого интереса, оно просто " +"является началом нового списка соответствия автомонтирования.\n" +"\n" +"Грубо говоря, список соответствия является отдельным файлом автомонтирования " +"и обеспечивает хранение ключей.\n" +"\n" +"Ключ — это связанная со списком соответствия точка автомонтирования.\n" +"\n" +"Когда создаётся новое расположение, для него автоматически создаются два " +"списка соответствия: auto.master и auto.direct. Список соответствия auto." +"master — это корневой список соответствия для всех списков соответствия " +"автомонтирования расположения. Список соответствия auto.direct — это список " +"соответствия по умолчанию для прямых монтирований, он монтируется на /-.\n" +"\n" +"Список соответствия автомонтирования может содержать ключ подмонтирования. " +"Этот ключ определяет расположение монтирования в списке соответствия, " +"который ссылается на другой список соответствия. Такой ключ можно добавить с " +"помощью команды automountmap-add-indirect --parentmap или вручную, с помощью " +"automountkey-add и установки info на значение \"-type=autofs :<имя списка " +"соответствия>\".\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +"Расположения:\n" +"\n" +" Создать новое именованное расположение, \"Moskva\":\n" +" ipa automountlocation-add moskva\n" +"\n" +" Показать новое расположение:\n" +" ipa automountlocation-show moskva\n" +"\n" +" Поиск доступных расположений:\n" +" ipa automountlocation-find\n" +"\n" +" Удалить именованное расположение автомонтирования:\n" +" ipa automountlocation-del moskva\n" +"\n" +" Показать, как выглядели бы списки соответствия автомонтирования, если бы " +"находились в файловой системе:\n" +" ipa automountlocation-tofiles moskva\n" +"\n" +" Импортировать существующую конфигурацию в расположение:\n" +" ipa automountlocation-import moskva /etc/auto.master\n" +"\n" +" Импорт не удастся выполнить, если будут найдены дублирующиеся записи. " +"Чтобы обеспечить непрерывное выполнение, при котором ошибки игнорируются, " +"используйте параметр --continue.\n" +"\n" +"Списки соответствия:\n" +"\n" +" Создать новый список соответствия с именем \"auto.share\":\n" +" ipa automountmap-add moskva auto.share\n" +"\n" +" Показать новый список соответствия:\n" +" ipa automountmap-show moskva auto.share\n" +"\n" +" Найти списки соответствия в расположении moskva:\n" +" ipa automountmap-find moskva\n" +"\n" +" Создать непрямой список соответствия с auto.share в качестве точки " +"подмонтирования:\n" +" ipa automountmap-add-indirect moskva --parentmap=auto.share --mount=sub " +"auto.man\n" +"\n" +" Эта команда эквивалентна следующим командам:\n" +"\n" +" ipa automountmap-add-indirect moskva --mount=/man auto.man\n" +" ipa automountkey-add moskva auto.man --key=sub --info=\"-fstype=autofs " +"ldap:auto.share\"\n" +"\n" +" Удалить список соответствия auto.share:\n" +" ipa automountmap-del moskva auto.share\n" +"\n" +"Ключи:\n" +"\n" +" Создать новый ключ для списка соответствия auto.share в расположении " +"moskva. Это привяжет ранее созданный список соответствия к auto.master:\n" +" ipa automountkey-add moskva auto.master --key=/share --info=auto.share\n" +"\n" +" Создать новый ключ для списка соответствия auto.share, смонтированного " +"ресурса NFS для страниц man:\n" +" ipa automountkey-add moskva auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Найти все ключи для списка соответствия auto.share:\n" +" ipa automountkey-find moskva auto.share\n" +"\n" +" Найти все ключи прямого автомонтирования:\n" +" ipa automountkey-find moskva --key=/-\n" +"\n" +" Удалить ключ man из списка соответствия auto.share:\n" +" ipa automountkey-del moskva auto.share --key=man\n" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" +"\n" +"В зависимости от владения хранилища подразделяются на три категории:\n" +"* хранилища пользователей или личные хранилища\n" +"* хранилища служб\n" +"* хранилища совместного использования\n" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" +"\n" +"В зависимости от механизма обеспечения безопасности выделяют три типа " +"хранилищ:\n" +"* стандартные хранилища\n" +"* симметричные хранилища\n" +"* асимметричные хранилища\n" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" +"\n" +"Основной пользователь\n" +"\n" +"Содержит общие определения для пользователя или неподтверждённого " +"пользователя\n" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" +"\n" +"Внося ясные правила о принадлежности узлов и пользователей к группам " +"посредством настройки включающих и исключающих шаблонов регулярных " +"выражений, вы можете автоматически связывать новые записи с группой или " +"группой узлов на основе данных атрибутов.\n" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" +"\n" +"Службы сертификации (все, кроме службы сертификации \"IPA\") можно удалять. " +"Удаление службы сертификации приводит к отзыву её сертификата для подписи и " +"удалению её закрытого ключа.\n" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" +"\n" +"Службы сертификации включаются при создании, но их использование " +"регулируется ACL служб сертификации, если у оператора нет разрешения " +"обходить ACL служб сертификации (CA).\n" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" +"\n" +"Сопоставление сертификатов с записями пользователей\n" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" +"\n" +"Запросы сертификатов существуют в виде запроса подписи сертификата " +"(Certificate Signing Request, CSR) в формате PEM.\n" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" +"\n" +"Сертификаты можно искать по субъекту, серийному номеру, причине отзыва, " +"датам действия и дате выдачи.\n" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" +"\n" +"Классы для управления доверенными присоединениями с помощью вызовов DCE-RPC\n" +"\n" +"Код в этом модуле жёстко зависит от содержания пакета samba4-python и " +"привязок для языка Python в Samba4.\n" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " +"Group\"\n" +msgstr "" +"\n" +"Отношения доверия между областями (realm)\n" +"\n" +"Управление отношениями доверия между доменами IPA и Active Directory.\n" +"\n" +"Чтобы разрешить пользователям из удалённого домена доступ к ресурсам в " +"домене IPA, необходимо установить отношение доверия. В текущей версии IPA " +"поддерживает только отношения доверия между доменами IPA и Active Directory " +"под управлением Windows Server 2008 или более поздней версии с " +"функциональными возможностями уровня 2008 или более поздней версии.\n" +"\n" +"Обратите внимание, что следует надлежащим образом настроить DNS на обоих " +"доменах, IPA и Active Directory, чтобы домены могли обнаруживать друг друга. " +"Работоспособность отношения доверия зависит от возможности обнаруживать " +"специальные ресурсы в другом домене с помощью записей DNS.\n" +"\n" +"Примеры:\n" +"\n" +"1. Установить отношение доверия между областями (realm) с Active Directory с " +"помощью учётных данных администратора AD:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. Вывести список всех существующих отношений доверия:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Показать подробные сведения об определённом отношении доверия:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Удалить существующее отношение доверия:\n" +"\n" +" ipa trust-del \n" +"\n" +"Как только отношение доверия будет установлено, удалённых пользователей " +"потребуется привязать к локальным POSIX-группам, чтобы воспользоваться " +"ресурсами IPA. Привязку следует выполнить с помощью внешнего участия не-" +"POSIX-группы, а затем эту группу необходимо включить в одну из локальных " +"POSIX-групп.\n" +"\n" +"Пример:\n" +"\n" +"1. Создать группу для привязки администраторов (admins) доверенного домена и " +"их локальную POSIX-группу:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Добавить идентификатор безопасности Domain Admins домена " +"группе ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Разрешить привязку группы ad_admins_external к POSIX-группе ad_admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Вывести список участников внешних участников группы ad_admins_external, " +"чтобы определить их SID:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"ГЛОБАЛЬНАЯ КОНФИГУРАЦИЯ ОТНОШЕНИЙ ДОВЕРИЯ\n" +"\n" +"После установки субпакета доверия AD IPA и запуска ipa-adtrust-install " +"создаётся конфигурация локального домена (SID, GUID, имя NetBIOS). Эти " +"идентификаторы затем используются для связи с доверенным доменом конкретного " +"типа.\n" +"\n" +"1. Показать глобальную конфигурацию отношений доверия для типа отношений " +"доверия Active Directory:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Изменить глобальную конфигурацию для всех отношений доверия типа Active " +"Directory и указать другую резервную основную группу (GID резервной основной " +"группы используется в качестве GID основного пользователя, если для " +"пользователя, который выполняет аутентификацию в домене IPA, не был " +"установлен другой основной GID):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Изменить резервную основную группу обратно на скрытую группу по умолчанию " +"(разрешена любая группа с классом объекта posixGroup):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " +"Group\"\n" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " +"Group\"\n" +msgstr "" +"\n" +"Отношения доверия между областями (realm)\n" +"\n" +"Управление отношениями доверия между доменами IPA и Active Directory.\n" +"\n" +"Чтобы разрешить пользователям из удалённого домена доступ к ресурсам в " +"домене IPA, необходимо установить отношение доверия. В текущей версии IPA " +"поддерживает только отношения доверия между доменами IPA и Active Directory " +"под управлением Windows Server 2008 или более поздней версии с " +"функциональными возможностями уровня 2008 или более поздней версии.\n" +"\n" +"Обратите внимание, что следует надлежащим образом настроить DNS на обоих " +"доменах, IPA и Active Directory, чтобы домены могли обнаруживать друг друга. " +"Работоспособность отношения доверия зависит от возможности обнаруживать " +"специальные ресурсы в другом домене с помощью записей DNS.\n" +"\n" +"Примеры:\n" +"\n" +"1. Установить отношение доверия между областями (realm) с Active Directory с " +"помощью учётных данных администратора AD:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. Вывести список всех существующих отношений доверия:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Показать подробные сведения об определённом отношении доверия:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Удалить существующее отношение доверия:\n" +"\n" +" ipa trust-del \n" +"\n" +"Как только отношение доверия будет установлено, удалённых пользователей " +"потребуется привязать к локальным POSIX-группам, чтобы воспользоваться " +"ресурсами IPA. Привязку следует выполнить с помощью внешнего участия не-" +"POSIX-группы, а затем эту группу необходимо включить в одну из локальных " +"POSIX-групп.\n" +"\n" +"Пример:\n" +"\n" +"1. Создать группу для привязки администраторов (admins) доверенного домена и " +"их локальную POSIX-группу:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Добавить идентификатор безопасности Domain Admins домена " +"группе ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Разрешить привязку группы ad_admins_external к POSIX-группе ad_admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Вывести список участников внешних участников группы ad_admins_external, " +"чтобы определить их SID:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"ГЛОБАЛЬНАЯ КОНФИГУРАЦИЯ ОТНОШЕНИЙ ДОВЕРИЯ\n" +"\n" +"После установки субпакета доверия AD IPA и запуска ipa-adtrust-install " +"создаётся конфигурация локального домена (SID, GUID, имя NetBIOS). Эти " +"идентификаторы затем используются для связи с доверенным доменом конкретного " +"типа.\n" +"\n" +"1. Показать глобальную конфигурацию отношений доверия для типа отношений " +"доверия Active Directory:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Изменить глобальную конфигурацию для всех отношений доверия типа Active " +"Directory и указать другую резервную основную группу (GID резервной основной " +"группы используется в качестве GID основного пользователя, если для " +"пользователя, который выполняет аутентификацию в домене IPA, не был " +"установлен другой основной GID):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD " +"group\"\n" +"\n" +"3. Изменить резервную основную группу обратно на скрытую группу по умолчанию " +"(разрешена любая группа с классом объекта posixGroup):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " +"Group\"\n" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" +"\n" +"Конфигурация DNS, которая передаётся сценарию командной строки для " +"установки, хранится в локальном файле конфигурации на каждом IPA-сервере, " +"где настроена служба DNS. Эти локальные настройки могут быть переопределены " +"с помощью общей конфигурации, которая хранится на LDAP-сервере:\n" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" +"\n" +"Конфигурация DNS-сервера\n" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" +"\n" +"Данные, которые хранятся на IPA-серверах, реплицируются на другие IPA-" +"серверы. Способ репликации определяется соглашениями о репликации. " +"Соглашения о репликации необходимо устанавливать для каждого из суффиксов " +"отдельно. На уровне домена 0 управление ими выполняется с помощью средств " +"ipa-replica-manage и ipa-csreplica-manage. На уровне домена 1 управление " +"выполняется централизованно с помощью команд \"ipa topology*\".\n" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" +"\n" +"Даты обрабатываются как даты по Гринвичскому времени, в соответствии с " +"датами, определёнными в в сертификатах.\n" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" +"\n" +"Запрещено удалять или переименовывать управляемое разрешение, а также " +"изменять его цель.\n" msgid "" "\n" @@ -1418,1518 +3937,671 @@ msgstr "" "включить все существующие атрибуты. Когда выполняется aci-mod, targetattr " "ЗАМЕНЯЕТ текущие атрибуты, а не добавляет к ним другие.\n" -msgid "ACI name" -msgstr "Имя ACI" - -msgid "Permission" -msgstr "Разрешение" - -msgid "Permission ACI grants access to" -msgstr "Разрешение, доступ к которому предоставляет ACI" - -msgid "User group" -msgstr "Группа пользователей" - -msgid "User group ACI grants access to" -msgstr "Группа пользователей, доступ к которой предоставляет ACI" - -msgid "Permissions" -msgstr "Разрешения" - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "" -"Разрешения, которые следует предоставить (read, write, add, delete, all)" - -msgid "Attributes to which the permission applies" -msgstr "Атрибуты, к которым применяется разрешение" - -msgid "Attributes" -msgstr "Атрибуты" - -msgid "Type" -msgstr "Тип" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" -"Тип объекта IPA (user (пользователь), group (группа), host (узел), hostgroup " -"(группа узлов), service (служба), netgroup (сетевая группа))" - -msgid "Member of" -msgstr "Участник" - -msgid "Member of a group" -msgstr "Участник группы" - -msgid "Filter" -msgstr "Фильтр" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "Допустимый фильтр LDAP (например, ou=Engineering)" - -msgid "Subtree" -msgstr "Поддерево" - -msgid "Subtree to apply ACI to" -msgstr "Поддерево, к которому следует применить ACI" - -msgid "Target group" -msgstr "Целевая группа" - -msgid "Group to apply ACI to" -msgstr "Группа, к которой следует применить ACI" - -msgid "Target your own entry (self)" -msgstr "Выполнить над своей собственной записью (self)" - -msgid "Apply ACI to your own entry (self)" -msgstr "Применить ACI к своей собственной записи (self)" - -msgid "Create new ACI." -msgstr "Создать новую запись ACI." - -msgid "ACI prefix" -msgstr "Префикс ACI" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" -"Префикс, который используется для различения типов ACI (permission, " -"delegation, selfservice, none)" - -msgid "Test the ACI syntax but don't write anything" -msgstr "Проверить синтаксис ACI, но никуда не записывать" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" -"Получить и вывести все атрибуты, возвращаемые сервером. Влияет на содержимое " -"результата исполнения команды." - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" -"Вывести записи в том виде, в котором они хранятся на сервере. Влияет только " -"на формат вывода данных." - -msgid "User-friendly description of action performed" -msgstr "Понятное пользователю описание выполненного действия" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" -"Значение primary_key (основного ключа) записи, например \"ииванов\" для " -"пользователя" - -msgid "Delete ACI." -msgstr "Удалить запись ACI." - -msgid "True means the operation was successful" -msgstr "Значение True означает, что операция выполнена успешно" - msgid "" "\n" -"Search for ACIs.\n" +"Directory Server Access Control Instructions (ACIs)\n" "\n" -" Returns a list of ACIs\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" "\n" -" EXAMPLES:\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" "\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" "\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" "\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" "\n" -"Поиск записей ACI.\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" "\n" -" Возвращает список записей ACI.\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" "\n" -" ПРИМЕРЫ:\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" "\n" -" Чтобы найти все записи ACI, которые применяются непосредственно к " -"участникам группы ipausers:\n" -" ipa aci-find --memberof=ipausers\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" "\n" -" Чтобы найти все записи ACI, которые предоставляют доступ для добавления " -"(add):\n" -" ipa aci-find --permissions=add\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" "\n" -" Следует учитывать, что с помощью команды find выполняется только поиск " -"указанного текста в наборе записей ACI; при поиске записи ACI не оцениваются " -"по критерию применимости.\n" -" Например, при поиске по тексту memberof=ipausers будут найдены все " -"записи ACI, в которых memberof содержат ipausers. Но могут иметься другие " -"записи ACI, которые применяются к участникам этой группы опосредованно.\n" -" " - -msgid "A string searched in all relevant object attributes" -msgstr "" -"Строка, поиск которой выполняется во всех соответствующих атрибутах объекта" - -msgid "Primary key only" -msgstr "Только главный ключ" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "Результаты должны содержать только атрибут главного ключа (\"name\")" - -msgid "Number of entries returned" -msgstr "Количество возвращённых записей" - -msgid "True if not all results were returned" -msgstr "Значение True, если были возвращены не все результаты" - -msgid "Modify ACI." -msgstr "Изменить запись ACI." - -msgid "Rename an ACI." -msgstr "Переименовать запись ACI." - -msgid "New ACI name" -msgstr "Новое имя ACI" - -msgid "Display a single ACI given an ACI name." -msgstr "Показать отдельную запись ACI по указанному имени ACI." - -msgid "Location of the ACI" -msgstr "Расположение ACI" - -msgid "" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" "\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" "\n" "EXAMPLES:\n" "\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" "\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" "\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" "\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" "\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" "\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of " +"editors\"\n" "\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" "\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" "\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" "\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" +"The show command shows the raw 389-ds ACI.\n" "\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" +msgstr "" "\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" +"Инструкции управления доступом к серверу каталогов (ACI)\n" "\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" +"ACI используются, чтобы разрешить или запретить доступ к информации. Текущая " +"версия модуля предназначена для предоставления, а не запрета доступа. \n" "\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" +"Команды aci позволяют предоставить разрешения, благодаря которым можно " +"обновлять существующие записи, а также добавлять или удалять новые. Задача " +"ACI, поставляемых вместе с IPA: предоставить набор низкоуровневых " +"разрешений, которые дают доступ к специальным группам. Такие группы " +"называются группами задач. Данные низкоуровневые разрешения можно сочетать " +"между собой, формируя роли, чтобы предоставить больший объём доступа. Эти " +"роли представляют собой ещё один тип групп: группы ролей.\n" "\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" +"Например, если имеются группы задач, которые разрешают добавлять и изменять " +"данные пользователей, то можно создать роль администратора пользователей " +"(useradmin). Если назначить пользователям роль useradmin, им будет разрешено " +"выполнять операции, определённые группами задач.\n" "\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" +"Можно создавать ACI, которые будут предоставлять разрешения таким образом, " +"что пользователи группы A смогут записывать атрибуты для группы B.\n" "\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" +"Параметр \"тип\" (type) — это список, который применяется ко всем записям " +"пользователей, записям групп или расположению узла. Он предназначен в " +"основном для предоставления прав доступа для добавления (создание новых " +"записей).\n" "\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" +"Запись ACI состоит из трёх частей:\n" +"1. цель\n" +"2. разрешения\n" +"3. правила привязки\n" "\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"Цель — это набор правил, которые определяют, какие объекты LDAP являются " +"целевыми. Это может быть список атрибутов, область этого дерева LDAP или " +"фильтр LDAP.\n" "\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"Цели содержат:\n" +"- attrs: список атрибутов, которых касается цель\n" +"- type: тип объектов (пользователь, группа, узел, служба и так далее)\n" +"- memberof: участники группы\n" +"- targetgroup: предоставить доступ к изменению определённой группы. Эта " +"часть в основном разработана для предоставления пользователям разрешения на " +"добавление или удаление участников определённой группы.\n" +"- filter: действующий фильтр LDAP, используемый для сужения цели.\n" +"- subtree: используется для применения правила к целому набору объектов. " +"Например, чтобы разрешить добавление пользователей, следует предоставить " +"разрешение \"add\" для поддерева ldap://uid=*,cn=users,cn=accounts," +"dc=example,dc=com. Параметр subtree подходит для объектов, которые не " +"подпадают под действие параметра type.\n" +"\n" +"Разрешения определяют, какие действия разрешены для ACI, и могут быть одними " +"из следующих (или сочетать в себе несколько вариантов):\n" +"1. write - записать один или несколько атрибутов.\n" +"2. read - прочитать один или несколько атрибутов.\n" +"3. add - добавить в дерево новую запись.\n" +"4. delete - удалить существующую запись.\n" +"5. all - предоставляются все разрешения.\n" +"\n" +"Обратите внимание на разницу между атрибутами и записями. Разрешения " +"являются независимыми, поэтому возможность добавить пользователя не означает " +"возможность изменять запись добавленного пользователя.\n" +"\n" +"Правило привязки определяет, кому предоставляет разрешения ACI. LDAP-сервер " +"позволяет сделать это для любой действительной записи LDAP, но мы " +"рекомендуем использовать группы задач, чтобы можно было легко обеспечить " +"общий доступ к правам с помощью ролей.\n" +"\n" +"Более подробные сведения об управлении доступом:\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +"ПРИМЕЧАНИЕ: в текущей версии записи записи ACI добавляются через " +"подключаемый модуль разрешений. Следующие примеры показывают, как работают " +"различные параметры, но сейчас это выполняется через командную строку (см. " +"последний пример).\n" +"\n" +" Добавить запись ACI, чтобы группа \"secretaries\" могла обновлять адрес " +"любого пользователя:\n" +" ipa group-add --desc=\"Офисные секретари\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Секретари записывают адреса\"\n" +"\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Секретари записывают адреса\"\n" +"\n" +" Добавить запись ACI, которая разрешает участникам разрешения \"addusers\" " +"добавлять новых пользователей:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Добавление пользователей\"\n" +"\n" +" Добавить запись ACI, которая разрешает участникам группы \"editors\" " +"управлять записями участников группы \"admins\":\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Редакторы управляют администраторами\"\n" +"\n" +" Добавить запись ACI, которая разрешает участникам группы \"admins\" " +"изменять название улицы и почтовый индекс участников группы \"editors\":\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"администраторы редактируют адрес " +"редакторов\"\n" +"\n" +" Добавить запись ACI, которая разрешает участникам группы \"admins\" " +"изменять название улицы и почтовый индекс тех, кто работает под руководством " +"начальника:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Редактировать адрес тех, кто работает под руководством " +"начальника\"\n" +"\n" +" Добавить в IPA совершенно новый вид записи, который не предусмотрен ни " +"одним из параметров \"--type\", путём создания разрешения:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Добавление оранжевых записей\" " +"add_orange\n" +"\n" +"\n" +"Команда show показывает необработанную запись ACI 389-ds.\n" +"\n" +"ВАЖНО: при изменении атрибутов цели существующей записи ACI необходимо также " +"включить все существующие атрибуты. Когда выполняется aci-mod, targetattr " +"ЗАМЕНЯЕТ текущие атрибуты, а не добавляет к ним другие.\n" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" +"\n" +"Система доменных имён (DNS)\n" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +"\n" +"Manage DNS zone and resource records.\n" +"\n" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +"\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-" +"policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * " +"AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 1.2.3.4, 11.22.33.44\n" +"\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." "com\n" -msgstr "" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" "\n" -"Правило автоучастия.\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" "\n" -"Внося ясные правила о принадлежности узлов и пользователей к группам " -"посредством настройки включающих и исключающих шаблонов регулярных " -"выражений, вы можете автоматически связывать новые записи с группой или " -"группой узлов на основе данных атрибутов.\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" "\n" -"Правило непосредственно связывается с группой по имени, следовательно, вы не " -"можете создать правило без определения группы или группы узлов. \n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" "\n" -"Условие является регулярным выражением, используется 389-ds для установления " -"соответствия новой входящей записи правилу автоучастия. Если имеется " -"соответствие правилу включения, запись добавляется в соответствующую группу " -"или группу узлов.\n" "\n" -"Можно указать группу или группу узлов по умолчанию, которая будет " -"использоваться для записей, не соответствующих ни одному правилу. В случае " -"записей пользователей эта группа будет резервной группой, поскольку все " -"пользователи по умолчанию являются участниками группы, указанной в " -"настройках IPA.\n" +"GLOBAL DNS CONFIGURATION\n" "\n" -"Команду automember-rebuild можно использовать, чтобы задним числом применить " -"правила автоучастия в отношении уже существующих записей; это перестроит их " -"участие.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -"Добавить начальную группу или группу узлов :\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Добавить начальное правило:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Добавить в правило условие:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Добавить в правило исключительное условие, чтобы предотвратить " -"автоназначение:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Добавить узел:\n" -" ipa host-add web1.example.com\n" -"\n" -" Добавить пользователя:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -"Проверить автоучастие:\n" -" ipa hostgroup-show webservers\n" -" Группа узлов: webservers\n" -" Описание: Web Servers\n" -" Узлы-участники: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Имя группы: devel\n" -" Описание: Developers\n" -" GID: 1004200000\n" -" Пользователи-участники: tuser\n" -"\n" -" Удалить условие из правила:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Изменить правило автоучастия:\n" -" ipa automember-mod\n" -"\n" -" Установить целевую группу по умолчанию (резервную):\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Удалить целевую группу по умолчанию (резервную):\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Показать целевую группу по умолчанию (резервную):\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Найти все правила автоучастия:\n" -" ipa automember-find\n" -"\n" -" Показать правило автоучастия:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Удалить правило автоучастия:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -"Перестроить участие для всех пользователей:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Перестроить участие для всех узлов:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Перестроить участие для указанных пользователей:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Перестроить участие для указанных узлов:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" - -msgid "Description" -msgstr "Описание" - -msgid "A description of this auto member rule" -msgstr "Описание этого правила автоучастия" - -msgid "Default (fallback) Group" -msgstr "Группа по умолчанию (резервная)" - -msgid "Default group for entries to land" -msgstr "Группа по умолчанию для размещения записей" - -msgid "Add an automember rule." -msgstr "Добавить правило автоучастия." - -msgid "Automember Rule" -msgstr "Правило автоучастия" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" -"Установить атрибут для пары имя/значение. Формат: атрибут=значение.\n" -"Если атрибут многозначный, команда заменяет уже присутствующие значения." - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" -"Добавить пару атрибут/значение. Формат: атрибут=значение. Атрибут\n" -"должен быть частью схемы." - -msgid "Grouping Type" -msgstr "Тип группировки" - -msgid "Grouping to which the rule applies" -msgstr "Группировка, к которой применяется правило " - -msgid "Add conditions to an automember rule." -msgstr "Добавить условия в правило автоучастия." - -msgid "Inclusive Regex" -msgstr "Включающие регулярные выражения" - -msgid "Exclusive Regex" -msgstr "Исключающие регулярные выражения" - -msgid "Attribute Key" -msgstr "Ключ атрибута" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" -"Атрибут для фильтрации с помощью регулярных выражений. Например, полное имя " -"для узла или руководитель для пользователя." - -msgid "Conditions that could not be added" -msgstr "Условия, которые не удалось добавить" - -msgid "Number of conditions added" -msgstr "Количество добавленных условий" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" -"Удалить группу по умолчанию (резервную) для всех несоответствующих записей." - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" -"Установить группу по умолчанию (резервную) для всех несоответствующих " -"записей." - -msgid "Default (fallback) group for entries to land" -msgstr "Группа по умолчанию (резервная) для размещения записей" - -msgid "Display information about the default (fallback) automember groups." -msgstr " Показать сведения о группах автоучастия по умолчанию (резервных)" - -msgid "Delete an automember rule." -msgstr "Удалить правило автоучастия." - -msgid "List of deletions that failed" -msgstr "Список удалений, которые не удалось выполнить" - -msgid "Search for automember rules." -msgstr "Поиск правил автоучастия." - -msgid "Modify an automember rule." -msgstr "Изменить правило автоучастия." - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" -"Удалить пару атрибут/значение. Параметр будет использован последним, после " -"всех установок и добавлений." - -msgid "Rights" -msgstr "Права" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" -"Показать права доступа этой записи (требуется --all). Подробные сведения " -"приводятся на странице справочника (man) по IPA." - -msgid "Rebuild auto membership." -msgstr "Перестроить автоучастие." - -msgid "Rebuild membership for all members of a grouping" -msgstr "Перестроить участие для всех участников группировки" - -msgid "Users" -msgstr "Пользователи" - -msgid "Rebuild membership for specified users" -msgstr "Перестроить участие для указанных пользователей" - -msgid "Hosts" -msgstr "Узлы" - -msgid "Rebuild membership for specified hosts" -msgstr "Перестроить участие для указанных узлов" - -msgid "No wait" -msgstr "Не ждать" - -msgid "Don't wait for rebuilding membership" -msgstr "Не ждать перестройки участия" - -msgid "Remove conditions from an automember rule." -msgstr "Удалить условия из правила автоучастия." - -msgid "Conditions that could not be removed" -msgstr "Условия, которые не удалось удалить" - -msgid "Number of conditions removed" -msgstr "Количество удалённых условий" - -msgid "Display information about an automember rule." -msgstr "Показать сведения о правиле автоучастия." - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" -"\n" -"Автомонтирование\n" -"\n" -"Сохраняет конфигурацию automount(8) для autofs(8) в IPA.\n" -"\n" -"Основой конфигурации автомонтирования является файл конфигурации auto." -"master.\n" -"Это также базовое расположение в IPA. Несколько конфигураций auto.master " -"могут храниться в отдельных расположениях. Расположение зависит от " -"реализации, расположением по умолчанию является расположение с именем " -"\"default\". Например, можно создать расположения для географических " -"областей, этажей, типов и так далее.\n" -"\n" -"В автомонтировании имеется три основных типа объектов: расположения, списки " -"соответствия и ключи.\n" -"\n" -"Расположение определяет набор списков соответствия, привязанных в auto." -"master. Это позволяет хранить несколько конфигураций автомонтирования. " -"Расположение само по себе не представляет особого интереса, оно просто " -"является началом нового списка соответствия автомонтирования.\n" -"\n" -"Грубо говоря, список соответствия является отдельным файлом автомонтирования " -"и обеспечивает хранение ключей.\n" -"\n" -"Ключ — это связанная со списком соответствия точка автомонтирования.\n" -"\n" -"Когда создаётся новое расположение, для него автоматически создаются два " -"списка соответствия: auto.master и auto.direct. Список соответствия auto." -"master — это корневой список соответствия для всех списков соответствия " -"автомонтирования расположения. Список соответствия auto.direct — это список " -"соответствия по умолчанию для прямых монтирований, он монтируется на /-.\n" -"\n" -"Список соответствия автомонтирования может содержать ключ подмонтирования. " -"Этот ключ определяет расположение монтирования в списке соответствия, " -"который ссылается на другой список соответствия. Такой ключ можно добавить с " -"помощью команды automountmap-add-indirect --parentmap или вручную, с помощью " -"automountkey-add и установки info на значение \"-type=autofs :<имя списка " -"соответствия>\".\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -"Расположения:\n" -"\n" -" Создать новое именованное расположение, \"Moskva\":\n" -" ipa automountlocation-add moskva\n" -"\n" -" Показать новое расположение:\n" -" ipa automountlocation-show moskva\n" -"\n" -" Поиск доступных расположений:\n" -" ipa automountlocation-find\n" -"\n" -" Удалить именованное расположение автомонтирования:\n" -" ipa automountlocation-del moskva\n" -"\n" -" Показать, как выглядели бы списки соответствия автомонтирования, если бы " -"находились в файловой системе:\n" -" ipa automountlocation-tofiles moskva\n" -"\n" -" Импортировать существующую конфигурацию в расположение:\n" -" ipa automountlocation-import moskva /etc/auto.master\n" -"\n" -" Импорт не удастся выполнить, если будут найдены дублирующиеся записи. " -"Чтобы обеспечить непрерывное выполнение, при котором ошибки игнорируются, " -"используйте параметр --continue.\n" -"\n" -"Списки соответствия:\n" -"\n" -" Создать новый список соответствия с именем \"auto.share\":\n" -" ipa automountmap-add moskva auto.share\n" -"\n" -" Показать новый список соответствия:\n" -" ipa automountmap-show moskva auto.share\n" -"\n" -" Найти списки соответствия в расположении moskva:\n" -" ipa automountmap-find moskva\n" -"\n" -" Создать непрямой список соответствия с auto.share в качестве точки " -"подмонтирования:\n" -" ipa automountmap-add-indirect moskva --parentmap=auto.share --mount=sub " -"auto.man\n" -"\n" -" Эта команда эквивалентна следующим командам:\n" -"\n" -" ipa automountmap-add-indirect moskva --mount=/man auto.man\n" -" ipa automountkey-add moskva auto.man --key=sub --info=\"-fstype=autofs " -"ldap:auto.share\"\n" -"\n" -" Удалить список соответствия auto.share:\n" -" ipa automountmap-del moskva auto.share\n" -"\n" -"Ключи:\n" -"\n" -" Создать новый ключ для списка соответствия auto.share в расположении " -"moskva. Это привяжет ранее созданный список соответствия к auto.master:\n" -" ipa automountkey-add moskva auto.master --key=/share --info=auto.share\n" -"\n" -" Создать новый ключ для списка соответствия auto.share, смонтированного " -"ресурса NFS для страниц man:\n" -" ipa automountkey-add moskva auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Найти все ключи для списка соответствия auto.share:\n" -" ipa automountkey-find moskva auto.share\n" -"\n" -" Найти все ключи прямого автомонтирования:\n" -" ipa automountkey-find moskva --key=/-\n" -"\n" -" Удалить ключ man из списка соответствия auto.share:\n" -" ipa automountkey-del moskva auto.share --key=man\n" - -msgid "Key" -msgstr "Ключ" - -msgid "Automount key name." -msgstr "Имя ключа автомонтирования" - -msgid "Mount information" -msgstr "Сведения монтирования" - -msgid "description" -msgstr "описание" - -msgid "Location" -msgstr "Расположение" - -msgid "Automount location name." -msgstr "Имя расположения автомонтирования" - -msgid "Map" -msgstr "Список соответствия" - -msgid "Automount map name." -msgstr "Имя списка соответствия автомонтирования" - -msgid "Create a new automount key." -msgstr "Создать новый ключ автомонтирования." - -msgid "Delete an automount key." -msgstr "Удалить ключ автомонтирования." - -msgid "Continuous mode: Don't stop on errors." -msgstr "Режим непрерывной работы: не останавливаться в случае ошибок" - -msgid "Search for an automount key." -msgstr "Поиск ключа автомонтирования." - -msgid "Time Limit" -msgstr "Ограничение по времени" - -msgid "Time limit of search in seconds" -msgstr "Ограничение времени поиска в секундах" - -msgid "Size Limit" -msgstr "Ограничение по размеру" - -msgid "Maximum number of entries returned" -msgstr "Максимальное количество возвращённых записей" - -msgid "Modify an automount key." -msgstr "Изменить ключ автомонтирования." - -msgid "New mount information" -msgstr "Сведения о новом монтировании" - -msgid "Rename" -msgstr "Переименовать" - -msgid "Rename the automount key object" -msgstr "Переименовать объект ключа автомонтирования" - -msgid "Display an automount key." -msgstr "Показать ключ автомонтирования." - -msgid "Create a new automount location." -msgstr "Создать новое расположение автомонтирования." - -msgid "Delete an automount location." -msgstr "Удалить расположение автомонтирования." - -msgid "Search for an automount location." -msgstr "Поиск расположения автомонтирования." - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" -"Результаты должны содержать только атрибут главного ключа (\"location\")" - -msgid "Display an automount location." -msgstr "Показать расположение автомонтирования." - -msgid "Generate automount files for a specific location." -msgstr "Создать файлы автомонтирования для определённого расположения." - -msgid "Create a new automount map." -msgstr "Создать новый список соответствия автомонтирования." - -msgid "Create a new indirect mount point." -msgstr "Создать новую непрямую точку монтирования." - -msgid "Mount point" -msgstr "Точка монтирования" - -msgid "Parent map" -msgstr "Родительский список соответствия" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" -"Имя родительского списка соответствия автомонтирования (по умолчанию: auto." -"master)" - -msgid "Delete an automount map." -msgstr "Удалить список соответствия автомонтирования." - -msgid "Search for an automount map." -msgstr "Поиск списка соответствия автомонтирования." - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "Результаты должны содержать только атрибут главного ключа (\"map\")" - -msgid "Modify an automount map." -msgstr "Изменить список соответствия автомонтирования." - -msgid "Display an automount map." -msgstr "Показать список соответствия автомонтирования." - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" -"\n" -"Подключаемый модуль для выполнения нескольких вызовов ipa с помощью одного " -"удалённого вызова процедур \n" -"\n" -"Чтобы запустить этот код на легком сервере (lite-server), выполните " -"следующие команды:\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"где содержимое файла batch_request.json соответствует следующему примеру\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"Формат ответа точно так же распределяется по уровням вложенности. На верхнем " -"уровне:\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"а далее находится вложенный ответ для каждого метода команды IPA, " -"отправленного в запросе\n" - -msgid "Nested Methods to execute" -msgstr "Вложенные методы для выполнения" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" -"\n" -"Операции с сертификатами IPA \n" -"\n" -"Применение набора команд для управления сертификатами SSL-серверов.\n" -"\n" -"Запросы сертификатов существуют в виде запроса подписи сертификата " -"(Certificate Signing Request, CSR) в формате PEM.\n" -"\n" -"Система выдачи сертификатов Dogtag Certificate System использует только " -"значение CN в CSR и принудительно устанавливает остальные параметры субъекта " -"в соответствии со значениями, настроенными на сервере.\n" -"\n" -"Сертификат хранится в учётной записи службы, а учётной записи службы " -"требуется узел.\n" -"\n" -"Чтобы запросить сертификат:\n" -"\n" -"* Должен существовать узел\n" -"* Должна существовать служба (либо следует использовать параметр --add для " -"её автоматического добавления)\n" -"\n" -"ПОИСК:\n" -"\n" -"Сертификаты можно искать по субъекту, серийному номеру, причине отзыва, " -"датам действия и дате выдачи.\n" -"\n" -"Если поиск выполняется по дате _с, используется сравнение >=, а если " -"выполняется поиск _до — сравнение <=. Сочетание обоих видов поиска приводит " -"к поиску с логической операцией И.\n" -"\n" -"Даты обрабатываются как даты по Гринвичскому времени, в соответствии с " -"датами, определёнными в в сертификатах.\n" -"\n" -"Формат даты: ГГГГ-мм-дд.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Запросить новый сертификат и добавить учётную запись:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Получить существующий сертификат:\n" -" ipa cert-show 1032\n" -"\n" -" Отозвать сертификат (подробные сведения о причинах доступны в RFC 5280):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Удалить сертификат из списка отзыва:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Проверить состояние запроса подписи:\n" -" ipa cert-status 10\n" -"\n" -" Поиск сертификатов по имени узла:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Поиск отозванных сертификатов по причине отзыва:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Поиск сертификатов по дате выдачи:\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"В текущей версии IPA немедленно выполняет (или отклоняет) все запросы " -"сертификатов, следовательно, данные о состоянии запроса не являются " -"полезными. Эти данные могут понадобиться в следующих версиях или в случае, " -"если CA не сразу выдаёт сертификат.\n" -"\n" -"Поддерживаются следующие причины отзыва:\n" -"\n" -" * 0 - не указано\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Обратите внимание, что код причины 7 не используется. Подробные сведения в " -"RFC 5280:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "Проверяет, включена ли служба CA на каких-либо серверах." - -msgid "Search for existing certificates." -msgstr "Поиск существующих сертификатов." - -msgid "Match cn attribute in subject" -msgstr "Сопоставлять атрибут \"cn\" в субъекте" - -msgid "Reason" -msgstr "Причина" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "Причина отзыва сертификата (0-10)" - -msgid "minimum serial number" -msgstr "минимальный серийный номер" - -msgid "maximum serial number" -msgstr "максимальный серийный номер" - -msgid "match the common name exactly" -msgstr "точное соответствие общему имени" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "Действующий не позднее, чем с этой даты (ГГГГ-мм-дд)" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "Действующий не позднее, чем до этой даты (ГГГГ-мм-дд)" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "Действующий не ранее, чем с этой даты (ГГГГ-мм-дд)" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "Действующий не ранее, чем до этой даты (ГГГГ-мм-дд)" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "Выдан с этой даты (ГГГГ-мм-дд)" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "Выдан до этой даты (ГГГГ-мм-дд)" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "Отозван с этой даты (ГГГГ-мм-дд)" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "Отозван до этой даты (ГГГГ-мм-дд)" - -msgid "Maximum number of certs returned" -msgstr "Максимальное количество возвращённых сертификатов" - -msgid "Take a revoked certificate off hold." -msgstr "Возобновить действие отозванного сертификата." - -msgid "Serial number" -msgstr "Серийный номер" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" -"Серийный номер в десятичной или, если есть префикс 0x, в шестнадцатеричной " -"системе" - -msgid "Submit a certificate signing request." -msgstr "Отправить запрос подписи сертификата." - -msgid "CSR" -msgstr "Запрос подписи сертификата" - -msgid "Principal" -msgstr "Учётная запись" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" -"Учётная запись службы для этого сертификата (например, HTTP/test.example.com)" - -msgid "automatically add the principal if it doesn't exist" -msgstr "автоматически добавить учётную запись, если она не существует" - -msgid "Dictionary mapping variable name to value" -msgstr "Словарь, сопоставляющий имя переменной со значением" - -msgid "Revoke a certificate." -msgstr "Отозвать сертификат." - -msgid "Retrieve an existing certificate." -msgstr "Получить существующий сертификат." - -msgid "Output filename" -msgstr "Имя файла выходных данных" - -msgid "File to store the certificate in." -msgstr "Файл для сохранения сертификата" - -msgid "Check the status of a certificate signing request." -msgstr "Проверить состояние запроса подписи сертификата." - -msgid "Request id" -msgstr "ID запроса" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " "These\n" -"include:\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" "\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" "\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" msgstr "" "\n" -"Конфигурация сервера\n" +"Система доменных имён (DNS)\n" "\n" -"Управление значениями по умолчанию, которые используются IPA, и некоторыми " -"параметрами их настройки.\n" +"Управление записями зон и ресурсов DNS.\n" "\n" -"ПРИМЕЧАНИЯ:\n" "\n" -"Здесь хранится значение уведомления о пароле (--pwdexpnotify), поэтому оно " -"будет реплицировано. В текущей версии оно не используется для " -"заблаговременного уведомления пользователей об окончании срока действия " -"пароля.\n" +"ИСПОЛЬЗОВАНИЕ СТРУКТУРИРОВАННЫХ ПАРАМЕТРОВ ДЛЯ ОТДЕЛЬНЫХ ТИПОВ\n" "\n" -"Некоторые атрибуты предоставлены в ознакомительных целях и доступны только " -"для чтения. Среди них:\n" +"Существует много структурированных типов записей ресурсов DNS, для которых " +"данные DNS, хранящиеся на сервере LDAP, являются не просто скалярным " +"значением, например IP-адрес или имя домена, а структурой данных, которая " +"часто может быть сложной. Примером может быть запись LOC [RFC1876], которая " +"состоит из многих обязательных и необязательных частей (градусов, минут, " +"секунд широты и долготы, высоты и погрешности).\n" "\n" -"Основа субъекта сертификата: настроенная основа субъекта сертификата, " -"например O=EXAMPLE.COM. Настраивается только во время установки.\n" -"Возможности подключаемого модуля паролей: в текущей версии он определяет " -"дополнительные хеши, которые создаются на основе пароля (могут быть и другие " -"условия).\n" +"При работе с такими записями DNS может быть сложно не допустить ошибок и " +"ввести корректное значение. Модуль DNS предоставляет в ваше распоряжение " +"абстракцию над этими необработанными записями и позволяет управлять каждым " +"из типов записей ресурсов с помощью определённых параметров. Для каждого из " +"поддерживаемых типов записей ресурсов в модуле DNS предусмотрен стандартный " +"параметр для работы с необработанными записями с помощью формата ---" +"rec, например --mx-rec, и специальные параметры для каждой из частей " +"структуры записи ресурса с помощью формата ---, например --" +"mx-preference и --mx-exchanger.\n" +"\n" +"При добавлении записи можно воспользоваться параметрами, специально " +"предназначенными для записей ресурсов, или стандартным параметром для " +"необработанного значения (сочетать эти варианты в одном действии по " +"добавлению нельзя). При внесении изменений в существующую запись можно " +"воспользоваться для изменения одной части записи DNS новыми специальными " +"параметрами записей ресурсов, причём для определения изменённого значения " +"будет использован стандартный вариант необработанного значения. В " +"приведенном ниже примере показано изменение приоритета записи MX с 0 на 1 в " +"записи без внесения изменений в обменник:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" "\n" -"При установке приоритета сопоставления пользователей SELinux, возможно, " -"потребуется взять значение в кавычки, чтобы оно не обрабатывалось " -"оболочкой.\n" "\n" "ПРИМЕРЫ:\n" "\n" -" Показать базовую конфигурацию сервера:\n" -" ipa config-show\n" +" Добавить новую зону:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" "\n" -" Показать все параметры конфигурации:\n" -" ipa config-show --all\n" +" Добавить общесистемные права доступа, которыми можно воспользоваться для " +"делегирования привилегий для отдельных зон:\n" +" ipa dnszone-add-permission example.com\n" "\n" -" Изменить максимальную длину имени пользователя на 99 символов:\n" -" ipa config-mod --maxusername=99\n" +" Изменить зону, чтобы разрешить динамическое обновление для собственных " +"записей узлов в области (realm) EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" "\n" -" Увеличить установленные по умолчанию ограничения времени и размера поиска " -"IPA-сервера:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" Эта команда эквивалентна следующим командам:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-" +"policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * " +"AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" "\n" -" Указать почтовый домен пользователей по умолчанию:\n" -" ipa config-mod --emaildomain=example.com\n" +" Изменить зону, чтобы разрешить перенос зоны только для локальной сети:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" "\n" -" Включить режим миграции, чтобы сделать работоспособной команду \"ipa " -"migrate-ds\":\n" -" ipa config-mod --enable-migration=TRUE\n" +" Добавить новую обратную зону, указанную с помощью сетевого IP-адреса:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" "\n" -" Определить порядок списка пользователей SELinux:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" - -msgid "Maximum username length" -msgstr "Максимальная длина имени пользователя" - -msgid "Home directory base" -msgstr "Основа домашних каталогов" - -msgid "Default location of home directories" -msgstr "Расположение домашних каталогов по умолчанию" - -msgid "Default shell" -msgstr "Оболочка по умолчанию" - -msgid "Default shell for new users" -msgstr "Оболочка по умолчанию для новых пользователей" - -msgid "Default users group" -msgstr "Группа пользователей по умолчанию" - -msgid "Default group for new users" -msgstr "Группа по умолчанию для новых пользователей" - -msgid "Default e-mail domain" -msgstr "Почтовый домен по умолчанию" - -msgid "Search time limit" -msgstr "Ограничение времени поиска" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" -"Максимальное количество времени (в секундах) для поиска (> 0 или -1 означает " -"отсутствие ограничения)" - -msgid "Search size limit" -msgstr "Ограничение размера поиска" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "" -"Максимальное количество записей результатов поиска (-1 означает отсутствие " -"ограничения)" - -msgid "User search fields" -msgstr "Поля поиска пользователей" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" -"Разделённый запятыми список полей, по которым следует выполнять поиск при " -"поиске пользователей" - -msgid "Group search fields" -msgstr "Поля поиска групп" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" -"Разделённый запятыми список полей, по которым следует выполнять поиск при " -"поиске групп" - -msgid "Enable migration mode" -msgstr "Включить режим миграции" - -msgid "Certificate Subject base" -msgstr "Основа субъекта сертификата" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "Основа для субъектов сертификатов (OU=Test,O=Example)" - -msgid "Default group objectclasses" -msgstr "Классы объектов для групп по умолчанию" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "Классы объектов для групп по умолчанию (через запятую)" - -msgid "Default user objectclasses" -msgstr "Классы объектов для пользователей по умолчанию" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "Классы объектов для пользователей по умолчанию (через запятую)" - -msgid "Password Expiration Notification (days)" -msgstr "Уведомление об окончании действия пароля (в днях)" - -msgid "Number of days's notice of impending password expiration" -msgstr "Уведомление о количестве дней, оставшихся до окончания действия пароля" - -msgid "Password plugin features" -msgstr "Возможности подключаемого модуля паролей" - -msgid "Extra hashes to generate in password plug-in" -msgstr "Дополнительные хеши для создания в подключаемом модуле паролей" - -msgid "SELinux user map order" -msgstr "Порядок применения списка пользователей SELinux" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" -"В порядке увеличения приоритета пользователей SELinux, с разделителем $" - -msgid "Default SELinux user" -msgstr "Пользователь SELinux по умолчанию" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" -"Пользователь SELinux по умолчанию, когда в правиле списка SELinux не найдено " -"соответствие" - -msgid "Default PAC types" -msgstr "Типы PAC по умолчанию" - -msgid "Default types of PAC supported for services" -msgstr "Типы PAC по умолчанию, которые поддерживаются для служб" - -msgid "Default user authentication types" -msgstr "Стандартные типы аутентификации пользователей" - -msgid "Default types of supported user authentication" -msgstr "Стандартные типы поддерживаемой аутентификации пользователей" - -msgid "Modify configuration options." -msgstr "Изменить параметры конфигурации." - -msgid "Show the current configuration." -msgstr "Показать текущую конфигурацию." - -msgid "" +" Добавить другой сервер имён для example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" "\n" -"Group to Group Delegation\n" +" Добавить почтовый сервер для example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" "\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" +" Добавить другую запись с помощью специальных параметров записи MX:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" "\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" +" Добавить другую запись с помощью интерактивного режима (в который программа " +"переходит в ответ на команды dnsrecord-add, dnsrecord-mod или dnsrecord-del " +"без параметров):\n" +" ipa dnsrecord-add example.com @\n" +" Выберите тип записи ресурса DNS, который следует добавить\n" +" Наиболее распространённые типы для этого типа зон: NS, MX, LOC\n" "\n" -"EXAMPLES:\n" +" Тип записи ресурса DNS: MX\n" +" Приоритет MX: 30\n" +" Обменник MX: mail3\n" +" Имя записи: example.com\n" +" Запись MX: 10 mail1, 20 mail2, 30 mail3\n" +" Запись NS: nameserver.example.com., nameserver2.example.com.\n" "\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" +" Удалить добавленный ранее сервер имён из example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" "\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" +" Добавить запись LOC для example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" "\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" +" Добавить новую запись A для www.example.com. Также создать обратную запись " +"в соответствующей обратной зоне. В этом случае запись PTR \"2\", которая " +"указывает на www.example.com, будет создана в зоне 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" "\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" +" Добавить новую запись PTR для www.example.com:\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" "\n" -"Межгрупповое делегирование\n" +" Добавить новые записи SRV для LDAP-серверов. Три четверти запросов должны " +"отправляться на fast.example.com, одна четверть — на slow.example.com. Если " +"обе службы недоступны, переключиться на backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" "\n" -"С помощью разрешений самообслуживания можно очень точно делегировать " -"разрешения. Правила или инструкции управления доступом (ACI) предоставляют " -"разрешениям разрешение на выполнение конкретных задач, таких как добавление " -"пользователя, изменение группы и так далее.\n" +" Для облегчения внесения изменений можно воспользоваться интерактивным " +"режимом:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" Возможность внесения изменений в определённую запись не предусмотрена.\n" +" Текущее содержание записи DNS:\n" "\n" -"Межгрупповое делегирование предоставляет участникам одной группы возможность " -"обновлять набор атрибутов участников другой группы. \n" +" Запись SRV: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" "\n" -"ПРИМЕРЫ:\n" +" Изменить запись SRV '0 3 389 fast.example.com'? Да/Нет (по умолчанию " +"\"Нет\"):\n" +" Изменить запись SRV '0 1 389 slow.example.com'? Да/Нет (по умолчанию " +"\"Нет\"): y\n" +" Приоритет SRV [0]: (сохранить значение по умолчанию)\n" +" Вес SRV [1]: 2 (изменённое значение)\n" +" Порт SRV [389]: (сохранить значение по умолчанию)\n" +" Цель SRV [slow.example.com]: (сохранить значение по умолчанию)\n" +" Пропущена 1 запись SRV. Одновременно можно изменять только одно значение " +"на тип записи DNS.\n" +" Имя записи: _ldap._tcp\n" +" Запись SRV: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" "\n" -" Добавить правило делегирования, чтобы разрешить руководителям редактировать " -"адреса сотрудников:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees\" street\"\n" +" После внесения этих изменений три пятых запросов должны направляться на\n" +" fast.example.com, а две пятых — на slow.example.com.\n" "\n" -"В список атрибутов необходимо включить все атрибуты, в том числе уже " -"существующие. Добавить postalCode в список:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees\" street\"\n" +" Пример интерактивного режима для команды dnsrecord-del:\n" +" ipa dnsrecord-del example.com www\n" +" Не указан параметр удаления определённой записи.\n" +" Удалить все? Да/Нет (по умолчанию \"Нет\"): (не удалять все записи)\n" +" Текущее содержание записи DNS:\n" "\n" -" Показать обновлённое правило:\n" -" ipa delegation-show \"managers edit employees\" street\"\n" +" Запись A: 1.2.3.4, 11.22.33.44\n" "\n" -" Удалить правило:\n" -" ipa delegation-del \"managers edit employees\" street\"\n" - -msgid "Delegation name" -msgstr "Имя делегирования" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "" -"Разрешения, которые следует предоставить (read, write). По умолчанию " -"предоставляется разрешение \"write\" (запись)." - -msgid "Attributes to which the delegation applies" -msgstr "Атрибуты, к которым применяется делегирование" - -msgid "Member user group" -msgstr "Группа пользователей — участник" - -msgid "User group to apply delegation to" -msgstr "Группа пользователей, к которой следует применить делегирование" - -msgid "Add a new delegation." -msgstr "Добавить новое делегирование." - -msgid "Delete a delegation." -msgstr "Удалить делегирование." - -msgid "Search for delegations." -msgstr "Поиск делегирований." - -msgid "Modify a delegation." -msgstr "Изменить делегирование." - -msgid "Display information about a delegation." -msgstr "Показать сведения о делегировании." +" Удалить запись A '1.2.3.4'? Да/Нет (по умолчанию \"Нет\"):\n" +" Удалить запись A '11.22.33.44'? Да/Нет (по умолчанию \"Нет\"): y\n" +" Имя записи: www\n" +" Запись A: 1.2.3.4 (запись A 11.22.33.44 удалена)\n" +"\n" +" Показать зону example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Найти зону со словом \"example\" в имени домена:\n" +" ipa dnszone-find example\n" +"\n" +" Найти записи для ресурсов с \"www\" в имени в зоне example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Найти записи A со значением 10.10.0.1 в зоне example.com:\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Показать записи для ресурса www в зоне example.com:\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Делегировать зону sub.example другому серверу имён:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Если настроены глобальные перенаправители, все запросы на sub.example.com " +"будут идти через глобальный перенаправитель. Чтобы изменить это поведение " +"только для зоны example.com и перенаправлять запрос прямо на ns.sub.example." +"com., можно отключить глобальное перенаправление для отдельной зоны:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Перенаправлять все запросы для зоны external.com на другой сервер имён с " +"помощью политики \"first\" (запросы будет отправляться на выбранный " +"перенаправитель; если он не отвечает, будут использоваться глобальные " +"сопоставители):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Удалить зону example.com вместе со всеми записями ресурсов:\n" +" ipa dnszone-del example.com\n" +"\n" +" Определить адрес по имени узла, чтобы узнать, существует ли он (будет " +"добавлен стандартный домен IPA, если он не включён):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"ГЛОБАЛЬНАЯ КОНФИГУРАЦИЯ DNS\n" +"\n" +"Конфигурация DNS, которая передаётся сценарию командной строки для " +"установки, хранится в локальном файле конфигурации на каждом IPA-сервере, " +"где настроена служба DNS. Эти локальные настройки могут быть переопределены " +"с помощью общей конфигурации, которая хранится на LDAP-сервере:\n" +"\n" +" Показать глобальную конфигурацию DNS:\n" +" ipa dnsconfig-show\n" +"\n" +" Изменить глобальную конфигурацию DNS и установить список глобальных " +"перенаправителей:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" msgid "" "\n" @@ -2988,9 +4660,9 @@ msgid "" " ipa dnszone-mod example.com --dynamic-update=TRUE\n" "\n" " This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-" +"policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * " +"AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" "\n" " Modify the zone to allow zone transfers for local network only:\n" " ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" @@ -3305,10 +4977,10 @@ msgstr "" " Запись SRV: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " "backup.example.com\n" "\n" -" Изменить запись SRV '0 3 389 fast.example.com'? Да/Нет (по умолчанию \"Нет" -"\"):\n" -" Изменить запись SRV '0 1 389 slow.example.com'? Да/Нет (по умолчанию \"Нет" -"\"): y\n" +" Изменить запись SRV '0 3 389 fast.example.com'? Да/Нет (по умолчанию " +"\"Нет\"):\n" +" Изменить запись SRV '0 1 389 slow.example.com'? Да/Нет (по умолчанию " +"\"Нет\"): y\n" " Приоритет SRV [0]: (сохранить значение по умолчанию)\n" " Вес SRV [1]: 2 (изменённое значение)\n" " Порт SRV [389]: (сохранить значение по умолчанию)\n" @@ -3429,821 +5101,845 @@ msgstr "" " ipa dnsconfig-mod --forwarder=203.0.113.113\n" "\n" -msgid "Global forwarders" -msgstr "Глобальные перенаправители" +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" +"\n" +"РЕГИСТРАЦИЯ:\n" +"\n" +"Существует три сценария регистрации нового клиента:\n" +"\n" +"1. Вы регистрируетесь как администратор с полными правами. Запись узла может " +"существовать или отсутствовать. Полноправный администратор выполняет роль " +"hostadmin или является участником группы admins.\n" +"2. Вы регистрируетесь как администратор с ограниченными правами. Узел уже " +"должен существовать. Администратор с ограниченными правами выполняет роль с " +"привилегией Host Enrollment.\n" +"3. Узел создан с одноразовым паролем.\n" msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" +"\n" +"EXAMPLES:\n" msgstr "" -"Глобальные перенаправители. Для каждого перенаправителя можно указать " -"отдельный порт с помощью стандартного формата \"IP_АДРЕС port ПОРТ\"." - -msgid "Forward policy" -msgstr "Политика перенаправления" +"\n" +"ПРИМЕРЫ:\n" msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" msgstr "" -"Глобальная политика перенаправления. Чтобы отключить все настроенные " -"глобальные перенаправители, установите значение \"none\"." - -msgid "Allow PTR sync" -msgstr "Разрешить PTR-синхронизацию" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "Разрешить синхронизацию прямых (A, AAAA) и обратных (PTR) записей" - -msgid "Zone refresh interval" -msgstr "Интервал между обновлениями данных зоны" - -msgid "Zone name" -msgstr "Имя зоны" - -msgid "Zone name (FQDN)" -msgstr "Имя зоны (FQDN)" - -msgid "Reverse zone IP network" -msgstr "IP-сеть обратной зоны" - -msgid "IP network to create reverse zone name from" -msgstr "IP-сеть для создания имени обратной зоны" - -msgid "Active zone" -msgstr "Активная зона" - -msgid "Is zone active?" -msgstr "Зона активна?" - -msgid "Zone forwarders" -msgstr "Перенаправители зон" +"\n" +"Права\n" +"\n" +"Управление правами для клиентских компьютеров\n" +"\n" +"Правами можно управлять либо путём регистрации на сервере прав с именем " +"пользователя и паролем, либо путём импорта сертификатов прав вручную. " +"Сертификат прав содержит сведения о продукте, на который выдано разрешение, " +"количестве использований прав и сроке действия.\n" +"\n" +"Сервер прав управляет количеством доступных клиентских прав.\n" +"Чтобы отметить эти права как использованные IPA-сервером, следует указать " +"количество, и они будут отмечены, как использованные на сервере прав.\n" +"\n" +" Зарегистрироваться на сервере прав:\n" +" ipa entitle-register consumer\n" +"\n" +" Импортировать сертификат прав:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Показать текущие права:\n" +" ipa entitle-status\n" +"\n" +" Получить сведения о сертификатах прав:\n" +" ipa entitle-get\n" +"\n" +" Использовать некоторые права с сервера прав:\n" +" ipa entitle-consume 50\n" +"\n" +"Регистрационный идентификатор является уникальным идентификатором (UUID). " +"Этот идентификатор будет ИМПОРТИРОВАН, если использована команда entitle-" +"import.\n" +"\n" +"Для применения изменений к /etc/rhsm/rhsm.conf необходимо перезапустить " +"службу httpd.\n" msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" +"\n" +"Get information about installed IPA servers.\n" msgstr "" -"Перенаправители для отдельных зон. Для каждого перенаправителя можно указать " -"отдельный порт с помощью стандартного формата \"IP_АДРЕС port ПОРТ\"" +"\n" +"Получить сведения об установленных IPA-серверах.\n" msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" msgstr "" -"Условная политика перенаправления для отдельных зон. Чтобы отключить для " -"этой зоны перенаправление на глобальный перенаправитель, установите значение " -"\"none\". В этом случае условные перенаправители зон не будут приниматься во " -"внимание." - -msgid "Record name" -msgstr "Имя записи" - -msgid "Time to live" -msgstr "Срок жизни" - -msgid "Records" -msgstr "Записи" - -msgid "Record type" -msgstr "Тип записи" - -msgid "Record data" -msgstr "Данные записи" - -msgid "A record" -msgstr "Запись" - -msgid "Raw A records" -msgstr "Необработанные записи A" - -msgid "A IP Address" -msgstr "IP-адрес" - -msgid "IP Address" -msgstr "IP-адрес" - -msgid "A Create reverse" -msgstr "Создать обратную запись A" - -msgid "Create reverse record for this IP Address" -msgstr "Создать обратную запись для этого IP-адреса" - -msgid "AAAA record" -msgstr "Запись AAAA" - -msgid "Raw AAAA records" -msgstr "Необработанные записи AAAA" - -msgid "AAAA IP Address" -msgstr "IP-адрес AAAA" - -msgid "AAAA Create reverse" -msgstr "Создать обратную запись AAAA" - -msgid "A6 record" -msgstr "Запись A6" - -msgid "Raw A6 records" -msgstr "Необработанные записи A6" - -msgid "A6 Record data" -msgstr "Данные записи A6" - -msgid "AFSDB record" -msgstr "Запись AFSDB" - -msgid "Raw AFSDB records" -msgstr "Необработанные записи AFSDB" - -msgid "AFSDB Subtype" -msgstr "Подтип AFSDB" - -msgid "Subtype" -msgstr "Подтип" - -msgid "AFSDB Hostname" -msgstr "Имя узла AFSDB" - -msgid "Hostname" -msgstr "Имя узла" - -msgid "APL record" -msgstr "Запись APL" - -msgid "Raw APL records" -msgstr "Необработанные записи APL" - -msgid "CERT record" -msgstr "Запись CERT" - -msgid "Raw CERT records" -msgstr "Необработанные записи CERT" - -msgid "CERT Certificate Type" -msgstr "Тип сертификата CERT" - -msgid "Certificate Type" -msgstr "Тип сертификата" - -msgid "CERT Key Tag" -msgstr "Тег ключа CERT" - -msgid "Key Tag" -msgstr "Тег ключа" - -msgid "CERT Algorithm" -msgstr "Алгоритм CERT" - -msgid "Algorithm" -msgstr "Алгоритм" - -msgid "CERT Certificate/CRL" -msgstr "Сертификат или список отзыва сертификатов (CRL) CERT" - -msgid "Certificate/CRL" -msgstr "Сертификат или список отзыва сертификатов (CRL)" - -msgid "CNAME record" -msgstr "Запись CNAME" - -msgid "Raw CNAME records" -msgstr "Необработанные записи CNAME" - -msgid "CNAME Hostname" -msgstr "Имя узла CNAME" - -msgid "A hostname which this alias hostname points to" -msgstr "Имя узла, на который указывает этот псевдоним узла" - -msgid "DHCID record" -msgstr "Запись DHCID" - -msgid "Raw DHCID records" -msgstr "Необработанные записи DHCID" - -msgid "DLV record" -msgstr "Запись DLV" - -msgid "Raw DLV records" -msgstr "Raw DLV records" - -msgid "DLV Key Tag" -msgstr "Тег ключа DLV" - -msgid "DLV Algorithm" -msgstr "Алгоритм DLV" - -msgid "DLV Digest Type" -msgstr "Тип дайджеста DLV" - -msgid "Digest Type" -msgstr "Тип дайджеста" - -msgid "DLV Digest" -msgstr "Дайджест DLV" - -msgid "Digest" -msgstr "Дайджест" - -msgid "DNAME record" -msgstr "Запись DNAME" - -msgid "Raw DNAME records" -msgstr "Необработанные записи DNAME" - -msgid "DNAME Target" -msgstr "Цель DNAME" - -msgid "Target" -msgstr "Цель" - -msgid "DNSKEY record" -msgstr "Запись DNSKEY" - -msgid "Raw DNSKEY records" -msgstr "Необработанные записи DNSKEY" - -msgid "DS record" -msgstr "Запись DS" - -msgid "Raw DS records" -msgstr "Необработанные записи DS" - -msgid "DS Key Tag" -msgstr "Тег ключа DS" - -msgid "DS Algorithm" -msgstr "Алгоритм DS" - -msgid "DS Digest Type" -msgstr "Тип дайджеста DS" - -msgid "DS Digest" -msgstr "Дайджест DS" - -msgid "HIP record" -msgstr "Запись HIP" - -msgid "Raw HIP records" -msgstr "Необработанные записи HIP" - -msgid "IPSECKEY record" -msgstr "Запись IPSECKEY" - -msgid "Raw IPSECKEY records" -msgstr "Необработанные записи IPSECKEY" - -msgid "KEY record" -msgstr "Запись KEY" - -msgid "Raw KEY records" -msgstr "Необработанные записи KEY" - -msgid "KX record" -msgstr "Запись KX" - -msgid "Raw KX records" -msgstr "Необработанные записи KX" - -msgid "KX Preference" -msgstr "Приоритет KX" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" -"Приоритет, указанный для этого обменника. Чем ниже значение, тем выше " -"приоритет." - -msgid "KX Exchanger" -msgstr "Обменник KX" - -msgid "A host willing to act as a key exchanger" -msgstr "Узел, который может работать как обменник ключей" - -msgid "LOC record" -msgstr "Запись LOC" - -msgid "Raw LOC records" -msgstr "Необработанные записи LOC" - -msgid "LOC Degrees Latitude" -msgstr "Градусы широты LOC" - -msgid "Degrees Latitude" -msgstr "Градусы широты" - -msgid "LOC Minutes Latitude" -msgstr "Минуты широты LOC" - -msgid "Minutes Latitude" -msgstr "Минуты широты" - -msgid "LOC Seconds Latitude" -msgstr "Секунды широты LOC" - -msgid "Seconds Latitude" -msgstr "Секунды широты" - -msgid "LOC Direction Latitude" -msgstr "Направление широты LOC" - -msgid "Direction Latitude" -msgstr "Направление широты" - -msgid "LOC Degrees Longitude" -msgstr "Градусы долготы LOC" - -msgid "Degrees Longitude" -msgstr "Градусы долготы" - -msgid "LOC Minutes Longitude" -msgstr "Минуты долготы LOC" - -msgid "Minutes Longitude" -msgstr "Минуты долготы" - -msgid "LOC Seconds Longitude" -msgstr "Секунды долготы LOC" - -msgid "Seconds Longitude" -msgstr "Секунды долготы" - -msgid "LOC Direction Longitude" -msgstr "Направление долготы LOC" - -msgid "Direction Longitude" -msgstr "Направление долготы" - -msgid "LOC Altitude" -msgstr "Высота над уровнем моря LOC" - -msgid "Altitude" -msgstr "Высота над уровнем моря" - -msgid "LOC Size" -msgstr "Размер LOC" - -msgid "Size" -msgstr "Размер" - -msgid "LOC Horizontal Precision" -msgstr "Горизонтальная точность LOC" - -msgid "Horizontal Precision" -msgstr "Горизонтальная точность" - -msgid "LOC Vertical Precision" -msgstr "Вертикальная точность LOC" - -msgid "Vertical Precision" -msgstr "Вертикальная точность" - -msgid "MX record" -msgstr "Запись MX" - -msgid "Raw MX records" -msgstr "Необработанные записи MX" - -msgid "MX Preference" -msgstr "Приоритет MX" - -msgid "MX Exchanger" -msgstr "Обменник MX" - -msgid "A host willing to act as a mail exchanger" -msgstr "Узел, который может работать как почтовый обменник" - -msgid "NAPTR record" -msgstr "Запись NAPTR" - -msgid "Raw NAPTR records" -msgstr "Необработанные записи NAPTR" - -msgid "NAPTR Order" -msgstr "Порядок NAPTR" - -msgid "Order" -msgstr "Порядок" - -msgid "NAPTR Preference" -msgstr "Приоритет NAPTR" - -msgid "Preference" -msgstr "Приоритет" - -msgid "NAPTR Flags" -msgstr "Флаги NAPTR" - -msgid "Flags" -msgstr "Флаги" - -msgid "NAPTR Service" -msgstr "Служба NAPTR" - -msgid "Service" -msgstr "Служба" - -msgid "NAPTR Regular Expression" -msgstr "Регулярное выражение NAPTR" - -msgid "Regular Expression" -msgstr "Регулярное выражение" - -msgid "NAPTR Replacement" -msgstr "Замена NAPTR" - -msgid "Replacement" -msgstr "Замена" - -msgid "NS record" -msgstr "Запись NS" - -msgid "Raw NS records" -msgstr "Необработанные записи NS" - -msgid "NS Hostname" -msgstr "Имя узла NS" - -msgid "NSEC record" -msgstr "Запись NSEC" - -msgid "Raw NSEC records" -msgstr "Необработанные записи NSEC" - -msgid "NSEC3 record" -msgstr "Запись NSEC3" - -msgid "Raw NSEC3 records" -msgstr "Необработанные записи NSEC3" - -msgid "PTR record" -msgstr "Запись PTR" - -msgid "Raw PTR records" -msgstr "Необработанные записи PTR" - -msgid "PTR Hostname" -msgstr "Имя узла PTR" - -msgid "The hostname this reverse record points to" -msgstr "Имя узла, на которое указывает эта обратная запись" - -msgid "RRSIG record" -msgstr "Запись RRSIG" - -msgid "Raw RRSIG records" -msgstr "Необработанные записи RRSIG" - -msgid "RP record" -msgstr "Запись RP" - -msgid "Raw RP records" -msgstr "Необработанные записи RP" - -msgid "SIG record" -msgstr "Запись SIG" - -msgid "Raw SIG records" -msgstr "Необработанные записи SIG" - -msgid "SPF record" -msgstr "Запись SPF" - -msgid "Raw SPF records" -msgstr "Необработанные записи SPF" - -msgid "SRV record" -msgstr "Запись SRV" - -msgid "Raw SRV records" -msgstr "Необработанные записи SRV" - -msgid "SRV Priority" -msgstr "Приоритет SRV" - -msgid "Priority" -msgstr "Приоритет" - -msgid "SRV Weight" -msgstr "Вес SRV" - -msgid "Weight" -msgstr "Вес" - -msgid "SRV Port" -msgstr "Порт SRV" - -msgid "Port" -msgstr "Порт" - -msgid "SRV Target" -msgstr "Цель SRV" +"\n" +"Получить состояние ролей (DNS-сервер, CA и так далее), предоставленное " +"главными IPA-серверами.\n" msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" msgstr "" -"Имя домена целевого узла или \".\", если служба явно недоступна на этом " -"домене" - -msgid "SSHFP record" -msgstr "Запись SSHFP" - -msgid "Raw SSHFP records" -msgstr "Необработанные записи SSHFP" - -msgid "SSHFP Algorithm" -msgstr "Алгоритм SSHFP" - -msgid "SSHFP Fingerprint Type" -msgstr "Тип отпечатка SSHFP" - -msgid "Fingerprint Type" -msgstr "Тип отпечатка" - -msgid "SSHFP Fingerprint" -msgstr "Отпечаток SSHFP" - -msgid "Fingerprint" -msgstr "Отпечаток" - -msgid "TA record" -msgstr "Запись TA" - -msgid "Raw TA records" -msgstr "Необработанные записи TA" - -msgid "TLSA record" -msgstr "Запись TLSA" - -msgid "Raw TLSA records" -msgstr "Необработанные записи TLSA" - -msgid "TLSA Certificate Usage" -msgstr "Использование сертификата TLSA" - -msgid "Certificate Usage" -msgstr "Использование сертификата" - -msgid "TLSA Selector" -msgstr "Селектор TLSA" - -msgid "Selector" -msgstr "Селектор" - -msgid "TLSA Matching Type" -msgstr "Тип соответствия TLSA" - -msgid "Matching Type" -msgstr "Тип соответствия" - -msgid "TLSA Certificate Association Data" -msgstr "Данные сопоставления сертификата TLSA" - -msgid "Certificate Association Data" -msgstr "Данные сопоставления сертификата " - -msgid "TKEY record" -msgstr "Запись TKEY" - -msgid "Raw TKEY records" -msgstr "Необработанные записи TKEY" - -msgid "TSIG record" -msgstr "Запись TSIG" - -msgid "Raw TSIG records" -msgstr "Необработанные записи TSIG" - -msgid "TXT record" -msgstr "Запись TXT" - -msgid "Raw TXT records" -msgstr "Необработанные записи TXT" - -msgid "TXT Text Data" -msgstr "Текстовые данные TXT" - -msgid "Text Data" -msgstr "Текстовые данные" - -msgid "Authoritative nameserver" -msgstr "Полномочный сервер имён" - -msgid "Authoritative nameserver domain name" -msgstr "Имя домена полномочного сервера имён" - -msgid "Administrator e-mail address" -msgstr "Адрес электронной почты администратора" - -msgid "SOA serial" -msgstr "Номер SOA" - -msgid "SOA record serial number" -msgstr "Серийный номер записи SOA" - -msgid "SOA refresh" -msgstr "Обновление SOA" - -msgid "SOA record refresh time" -msgstr "Время обновления записи SOA" - -msgid "SOA retry" -msgstr "Повторный запрос SOA" - -msgid "SOA record retry time" -msgstr "Интервал между повторными запросами записи SOA" - -msgid "SOA expire" -msgstr "Окончание действия SOA" - -msgid "SOA record expire time" -msgstr "Срок окончания действия записи SOA" - -msgid "SOA minimum" -msgstr "Минимальный срок жизни SOA" - -msgid "How long should negative responses be cached" -msgstr "Как долго следует кэшировать отрицательные ответы" - -msgid "Time to live for records at zone apex" -msgstr "Срок жизни записей в начале зоны" - -msgid "BIND update policy" -msgstr "Политика обновления BIND" - -msgid "Dynamic update" -msgstr "Динамическое обновление" - -msgid "Allow dynamic updates." -msgstr "Разрешить динамические обновления" - -msgid "Allow query" -msgstr "Разрешить запрос" +"\n" +"Межгрупповое делегирование\n" +"\n" +"С помощью разрешений самообслуживания можно очень точно делегировать " +"разрешения. Правила или инструкции управления доступом (ACI) предоставляют " +"разрешениям разрешение на выполнение конкретных задач, таких как добавление " +"пользователя, изменение группы и так далее.\n" +"\n" +"Межгрупповое делегирование предоставляет участникам одной группы возможность " +"обновлять набор атрибутов участников другой группы. \n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить правило делегирования, чтобы разрешить руководителям редактировать " +"адреса сотрудников:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees\" street\"\n" +"\n" +"В список атрибутов необходимо включить все атрибуты, в том числе уже " +"существующие. Добавить postalCode в список:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees\" street\"\n" +"\n" +" Показать обновлённое правило:\n" +" ipa delegation-show \"managers edit employees\" street\"\n" +"\n" +" Удалить правило:\n" +" ipa delegation-del \"managers edit employees\" street\"\n" msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" msgstr "" -"Разделённый точками с запятой список IP-адресов или сетей, которым разрешено " -"выдавать запросы" - -msgid "Allow transfer" -msgstr "Разрешить перенос" +"\n" +"Межгрупповое делегирование\n" +"\n" +"С помощью разрешений самообслуживания можно очень точно делегировать " +"разрешения. Правила или инструкции управления доступом (ACI) предоставляют " +"разрешениям разрешение на выполнение конкретных задач, таких как добавление " +"пользователя, изменение группы и так далее.\n" +"\n" +"Межгрупповое делегирование предоставляет участникам одной группы возможность " +"обновлять набор атрибутов участников другой группы. \n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить правило делегирования, чтобы разрешить руководителям редактировать " +"адреса сотрудников:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees\" street\"\n" +"\n" +"В список атрибутов необходимо включить все атрибуты, в том числе уже " +"существующие. Добавить postalCode в список:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees\" street\"\n" +"\n" +" Показать обновлённое правило:\n" +" ipa delegation-show \"managers edit employees\" street\"\n" +"\n" +" Удалить правило:\n" +" ipa delegation-del \"managers edit employees\" street\"\n" msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" msgstr "" -"Разделённый точками с запятой список IP-адресов или сетей, которым разрешено " -"переносить зону" +"\n" +"Группы команд Sudo\n" +"\n" +"Управление группами команд Sudo.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую группу команд Sudo:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Удалить группу команд Sudo:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Управлять участием в группе команд Sudo, команды:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Управлять участием в группе команд Sudo, команды:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Показать группу команд Sudo:\n" +" ipa group-show localadmins\n" msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" msgstr "" -"Разрешить синхронизацию прямых (A, AAAA) и обратных (PTR) записей в зоне" - -msgid "Allow in-line DNSSEC signing" -msgstr "Разрешить линейную подпись DNSSEC" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "Разрешить линейную подпись DNSSEC записей в зоне" - -msgid "NSEC3PARAM record" -msgstr "Запись NSEC3PARAM" +"\n" +"Группы команд Sudo\n" +"\n" +"Управление группами команд Sudo.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую группу команд Sudo:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Удалить группу команд Sudo:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Управлять участием в группе команд Sudo, команды:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Управлять участием в группе команд Sudo, команды:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Показать группу команд Sudo:\n" +" ipa sudocmdgroup-show admincmds\n" msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" msgstr "" -"Запись NSEC3PARAM для зоны в формате: алгоритм_хеширования флаги итерации " -"соль" +"\n" +"Группы команд Sudo\n" +"\n" +"Управление группами команд Sudo.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую группу команд Sudo:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Удалить группу команд Sudo:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Управлять участием в группе команд Sudo, команды:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Управлять участием в группе команд Sudo, команды:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Показать группу команд Sudo:\n" +" ipa group-show localadmins\n" -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "Проверяет, включена ли служба DNS на каких-либо серверах." - -msgid "Resolve a host name in DNS." -msgstr "Определить адрес по имени узла в DNS." - -msgid "Modify global DNS configuration." -msgstr "Изменить глобальную конфигурацию DNS." - -msgid "Show the current global DNS configuration." -msgstr "Показать текущую глобальную конфигурацию DNS." - -msgid "Create new DNS forward zone." -msgstr "Создать новую зону перенаправления DNS." - -msgid "Add a permission for per-forward zone access delegation." +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" msgstr "" -"Добавить разрешение для делегирования прав доступа для отдельных зон " -"перенаправления." +"\n" +"Группы узлов.\n" +"\n" +"Управление группами узлов. Оно полезно при применении управления доступом к " +"ряду узлов с помощью управления доступом на основе узла (HBAC).\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую группу узлов:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Добавить другую новую группу узлов:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Добавить участников в группу узлов (с использованием выражения Bash в " +"фигурных скобках):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Добавить группу узлов как участника другой группы узлов:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Удалить узел из группы узлов:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Показать группу узлов:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Удалить группу узлов:\n" +" ipa hostgroup-del baltimore\n" -msgid "Permission value" -msgstr "Значение разрешения" - -msgid "Delete DNS forward zone." -msgstr "Удалить зону перенаправления DNS." - -msgid "Disable DNS Forward Zone." -msgstr "Отключить зону перенаправления DNS." - -msgid "Enable DNS Forward Zone." -msgstr "Включить зону перенаправления DNS." - -msgid "Search for DNS forward zones." -msgstr "Поиск зон перенаправления DNS." - -msgid "Modify DNS forward zone." -msgstr "Изменить зону перенаправления DNS." - -msgid "Remove a permission for per-forward zone access delegation." +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" msgstr "" -"Удалить разрешение для делегирования прав доступа для отдельных зон " -"перенаправления." +"\n" +"Группы узлов.\n" +"\n" +"Управление группами узлов. Оно полезно при применении управления доступом к " +"ряду узлов с помощью управления доступом на основе узла (HBAC).\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую группу узлов:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Добавить другую новую группу узлов:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Добавить участников в группу узлов:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Добавить группу узлов как участника другой группы узлов:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Удалить узел из группы узлов:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Показать группу узлов:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Удалить группу узлов:\n" +" ipa hostgroup-del baltimore\n" -msgid "Display information about a DNS forward zone." -msgstr "Показать сведения о зоне перенаправления DNS." - -msgid "Add new DNS resource record." -msgstr "Добавить новую запись ресурса DNS." - -msgid "Force" -msgstr "Принудительно" - -msgid "force NS record creation even if its hostname is not in DNS" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" msgstr "" -"Принудительно создать запись NS, даже если соответствующее имя узла " -"отсутствует в DNS" +"\n" +"Группы пользователей\n" +"\n" +"Управление группами пользователей. По умолчанию все новые группы являются " +"POSIX-группами. Можно добавить параметр --nonposix в команду group-add, " +"чтобы отметить новую группу в качестве не-POSIX-группы. В команде group-mod " +"можно использовать аргумент --posix, чтобы преобразовать не-POSIX-группу в " +"POSIX-группу. POSIX-группы нельзя преобразовать в не-POSIX-группы. \n" +"\n" +"У каждой группы должно быть описание.\n" +"\n" +"У POSIX-групп должен быть идентификатор группы (GID). Изменение GID " +"поддерживается, но может повлиять на разрешения для файлов. При создании " +"группы необязательно предоставлять GID. Если он не будет предоставлен, IPA " +"создаст его автоматически.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую группу:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Добавить новую не-POSIX-группу:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Преобразовать не-POSIX-группу в posix-группу:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Добавить новую POSIX-группу с определённым ID группы:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Добавить новую POSIX-группу и позволить IPA назначить ID группы:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Удалить группу:\n" +" ipa group-del unixadmins\n" +"\n" +" Чтобы добавить группу \"remoteadmins\" в группу \"localadmins\":\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Добавить список пользователей в группу \"localadmins\":\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Удалить пользователя из группы \"localadmins\":\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Показать сведения об именованной группе:\n" +" ipa group-show localadmins\n" +"\n" +"Участие внешних групп создано для того, чтобы сделать возможной привязку " +"пользователей из доверенных доменов к локальным POSIX-группам с целью " +"использования ресурсов IPA. Внешние участники должны быть добавлены в " +"группы, которые специально созданы, как внешние и не-POSIX. Такая группа " +"затем должна быть включена в одну из групп POSIX.\n" +"\n" +"В текущей версии участник внешней группы является идентификатором " +"безопасности (Security Identifier или SID), определённым доверенным доменом. " +"Добавление участников внешней группы можно выполнить в формате SID, DOM\\имя " +"или имя@домен. IPA попытается определить SID по переданному имени путём " +"использования общего каталога доверенного домена.\n" +"\n" +"Пример:\n" +"\n" +"1. Создать группу для привязки администраторов (admins) доверенного домена и " +"их локальную POSIX-группу:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Добавить идентификатор безопасности Domain Admins домена " +"группе ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Разрешить привязку группы ad_admins_external к POSIX-группе ad_admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Вывести список внешних участников группы ad_admins_external, чтобы " +"определить их SID:\n" +"\n" +" ipa group-show ad_admins_external\n" -msgid "Structured" -msgstr "Структурировано" - -msgid "Parse all raw DNS records and return them in a structured way" +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" msgstr "" -"Проанализировать все необработанные записи DNS и вернуть их в " -"структурированном виде" - -msgid "Delete DNS resource record." -msgstr "Удалить запись ресурса DNS." - -msgid "Delete all associated records" -msgstr "Удалить все связанные записи" - -msgid "Delete DNS record entry." -msgstr "Удалить пункт записи DNS." - -msgid "Search for DNS resources." -msgstr "Поиск ресурсов DNS." - -msgid "Modify a DNS resource record." -msgstr "Изменить запись ресурса DNS." - -msgid "Rename the DNS resource record object" -msgstr "Переименовать объект записи ресурса DNS" - -msgid "Display DNS resource." -msgstr "Показать ресурс DNS." - -msgid "Create new DNS zone (SOA record)." -msgstr "Создать новую зону DNS (запись SOA)." - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" -"Принудительно создать зону DNS, даже если не удаётся определить сервер имён" - -msgid "Add a permission for per-zone access delegation." -msgstr "Добавить разрешение для делегирования прав доступа для отдельных зон." - -msgid "Delete DNS zone (SOA record)." -msgstr "Удалить зону DNS (запись SOA)." - -msgid "Disable DNS Zone." -msgstr "Отключить зону DNS." - -msgid "Enable DNS Zone." -msgstr "Включить зону DNS." - -msgid "Search for DNS zones (SOA records)." -msgstr "Поиск зон DNS (записей SOA)." - -msgid "Forward zones only" -msgstr "Только зоны перенаправления" - -msgid "Search for forward zones only" -msgstr "Поиск только зон перенаправления" - -msgid "Modify DNS zone (SOA record)." -msgstr "Изменить зону DNS (запись SOA)." - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "Принудительно изменить сервер имён, даже если он отсутствует в DNS" - -msgid "Remove a permission for per-zone access delegation." -msgstr "Удалить разрешение для делегирования прав доступа для отдельных зон." - -msgid "Display information about a DNS zone (SOA record)." -msgstr "Показать сведения о зоне DNS (записи SOA)." +"\n" +"Группы пользователей\n" +"\n" +"Управление группами пользователей. По умолчанию все новые группы являются " +"POSIX-группами. Можно добавить параметр --nonposix в команду group-add, " +"чтобы отметить новую группу в качестве не-POSIX-группы. В команде group-mod " +"можно использовать аргумент --posix, чтобы преобразовать не-POSIX-группу в " +"POSIX-группу. POSIX-группы нельзя преобразовать в не-POSIX-группы. \n" +"\n" +"У каждой группы должно быть описание.\n" +"\n" +"У POSIX-групп должен быть идентификатор группы (GID). Изменение GID " +"поддерживается, но может повлиять на разрешения для файлов. При создании " +"группы необязательно предоставлять GID. Если он не будет предоставлен, IPA " +"создаст его автоматически.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую группу:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Добавить новую не-POSIX-группу:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Преобразовать не-POSIX-группу в posix-группу:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Добавить новую POSIX-группу с определённым ID группы:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Добавить новую POSIX-группу и позволить IPA назначить ID группы:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Удалить группу:\n" +" ipa group-del unixadmins\n" +"\n" +" Чтобы добавить группу \"remoteadmins\" в группу \"localadmins\":\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Добавить нескольких пользователей в группу \"localadmins\":\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Удалить пользователя из группы \"localadmins\":\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Показать сведения об именованной группе:\n" +" ipa group-show localadmins\n" +"\n" +"Участие внешних групп создано для того, чтобы сделать возможной привязку " +"пользователей из доверенных доменов к локальным POSIX-группам с целью " +"использования ресурсов IPA. Внешние участники должны быть добавлены в " +"группы, которые специально созданы, как внешние и не-POSIX. Такая группа " +"затем должна быть включена в одну из групп POSIX.\n" +"\n" +"В текущей версии участник внешней группы является идентификатором " +"безопасности (Security Identifier или SID), определённым доверенным доменом. " +"Добавление участников внешней группы можно выполнить в формате SID, DOM\\имя " +"или имя@домен. IPA попытается определить SID по переданному имени путём " +"использования общего каталога доверенного домена.\n" +"\n" +"Пример:\n" +"\n" +"1. Создать группу для привязки администраторов (admins) доверенного домена и " +"их локальную POSIX-группу:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Добавить идентификатор безопасности Domain Admins домена " +"группе ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Разрешить привязку группы ad_admins_external к POSIX-группе ad_admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Вывести список внешних участников группы ad_admins_external, чтобы " +"определить их SID:\n" +"\n" +" ipa group-show ad_admins_external\n" msgid "" "\n" @@ -4418,218 +6114,284 @@ msgstr "" "\n" " ipa group-show ad_admins_external\n" -msgid "Group name" -msgstr "Имя группы" - -msgid "Group description" -msgstr "Описание группы" - -msgid "GID" -msgstr "ID группы" - -msgid "GID (use this option to set it manually)" -msgstr "GID (используйте этот параметр, чтобы установить его вручную)" - -msgid "Member users" -msgstr "Пользователи-участники" - -msgid "Member groups" -msgstr "Группы-участники" - -msgid "Member of groups" -msgstr "Участник групп" - -msgid "Roles" -msgstr "Роли" - -msgid "Member of netgroups" -msgstr "Участник сетевых групп" - -msgid "Member of Sudo rule" -msgstr "Участник правила Sudo" - -msgid "Member of HBAC rule" -msgstr "Участник правила HBAC" - -msgid "Indirect Member users" -msgstr "Пользователи с непрямым участием" - -msgid "Indirect Member groups" -msgstr "Группы с непрямым участием" - -msgid "Indirect Member of group" -msgstr "Непрямой участник группы" - -msgid "Indirect Member of netgroup" -msgstr "Участник сетевой группы с непрямым участием" - -msgid "Indirect Member of role" -msgstr "Участник роли с непрямым участием" - -msgid "Indirect Member of Sudo rule" -msgstr "Участник правила Sudo с непрямым участием" - -msgid "Indirect Member of HBAC rule" -msgstr "Участник правила HBAC с непрямым участием" - -msgid "Create a new group." -msgstr "Создать новую группу." - -msgid "Create as a non-POSIX group" -msgstr "Создать как не-POSIX-группу " - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "Разрешить добавление внешних не IPA-участников из доверенных доменов" - -msgid "Suppress processing of membership attributes." -msgstr "Подавить обработку атрибутов участия." - -msgid "Add members to a group." -msgstr "Добавить участников в группу." - -msgid "External member" -msgstr "Внешний участник" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "Участники доверенного домена в формате DOM\\имя или имя@домен" - -msgid "member user" -msgstr "пользователь-участник" - -msgid "users to add" -msgstr "пользователи, которых следует добавить" - -msgid "member group" -msgstr "группа-участник" - -msgid "groups to add" -msgstr "группы, которые следует добавить" - -msgid "Members that could not be added" -msgstr "Участники, которых не удалось добавить" - -msgid "Number of members added" -msgstr "Количество добавленных участников" - -msgid "Delete group." -msgstr "Удалить группу." - -msgid "Detach a managed group from a user." -msgstr "Отсоединить управляемую группу от пользователя." - -msgid "Search for groups." -msgstr "Поиск групп." - -msgid "search for private groups" -msgstr "Поиск личных групп" - -msgid "search for POSIX groups" -msgstr "Поиск POSIX-групп" +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" +"\n" +"Группы служб HBAC\n" +"\n" +"Группы служб HBAC могут содержать любое количество отдельных служб (так " +"называемых \"участников\"). У каждой группы должно быть описание.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую группу служб HBAC:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Добавить участников в группу служб HBAC:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Показать сведения об именованной группе:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Удалить группу служб HBAC:\n" +" ipa hbacsvcgroup-del login\n" msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" msgstr "" -"Поиск групп с поддержкой внешних не IPA-участников из доверенных доменов" +"\n" +"Группы служб HBAC\n" +"\n" +"Группы служб HBAC могут содержать любое количество отдельных служб (так " +"называемых \"участников\"). У каждой группы должно быть описание.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую группу служб HBAC:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Добавить участников в группу служб HBAC:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Показать сведения об именованной группе:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Добавить новую группу в группу \"login\":\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Удалить группу служб HBAC:\n" +" ipa hbacsvcgroup-del login\n" -msgid "search for non-POSIX groups" -msgstr "Поиск не POSIX-групп" - -msgid "Results should contain primary key attribute only (\"group-name\")" +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" msgstr "" -"Результаты должны содержать только атрибут главного ключа (\"group-name\")" +"\n" +"Службы HBAC\n" +"\n" +"Службы PAM, доступом к которым управляет HBAC. Используемое здесь имя должно " +"соответствовать имени службы, которую оценивает PAM.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую службу HBAC:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Изменить существующую службу HBAC:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Поиск служб HBAC. В этом примере будут возвращены два результата, служба " +"FTP\n" +" и добавленная выше служба tftp:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Удалить службу HBAC:\n" +" ipa hbacsvc-del tftp\n" -msgid "user" -msgstr "пользователь" - -msgid "Search for groups with these member users." -msgstr "Поиск групп с этими пользователями-участниками." - -msgid "Search for groups without these member users." -msgstr "Поиск групп без этих пользователей-участников." - -msgid "group" -msgstr "группа" - -msgid "Search for groups with these member groups." -msgstr "Поиск групп с этими группами-участниками." - -msgid "Search for groups without these member groups." -msgstr "Поиск групп без этих групп-участников." - -msgid "Search for groups with these member of groups." -msgstr "Поиск групп, участником которых является эта группа." - -msgid "Search for groups without these member of groups." -msgstr "Поиск групп, участником которых не является эта группа." - -msgid "netgroup" -msgstr "сетевая группа" - -msgid "Search for groups with these member of netgroups." -msgstr "Поиск групп, которые являются участниками этой сетевой группы." - -msgid "Search for groups without these member of netgroups." -msgstr "Поиск групп, которые не являются участниками этой сетевой группы." - -msgid "role" -msgstr "Роль" - -msgid "Search for groups with these member of roles." -msgstr "Поиск групп, которые являются участниками этой роли." - -msgid "Search for groups without these member of roles." -msgstr "Поиск групп, которые не являются участниками этой роли." - -msgid "HBAC rule" -msgstr "правило HBAC" - -msgid "Search for groups with these member of HBAC rules." -msgstr "Поиск групп, которые являются участниками этого правила HBAC." - -msgid "Search for groups without these member of HBAC rules." -msgstr "Поиск групп, которые не являются участниками этого правила HBAC." - -msgid "sudo rule" -msgstr "правило Sudo" - -msgid "Search for groups with these member of sudo rules." -msgstr "Поиск групп, которые являются участниками этого правила Sudo." - -msgid "Search for groups without these member of sudo rules." -msgstr "Поиск групп, которые не являются участниками этого правила Sudo." - -msgid "Modify a group." -msgstr "Изменить группу." - -msgid "change to a POSIX group" -msgstr "Изменить на POSIX-группу" - -msgid "change to support external non-IPA members from trusted domains" +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" msgstr "" -"Изменить для добавления поддержки внешних не IPA-участников из доверенных " -"доменов" +"\n" +"Службы HBAC\n" +"\n" +"Службы PAM, доступом к которым управляет HBAC. Используемое здесь имя должно " +"соответствовать имени службы, которую оценивает PAM.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую службу HBAC:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Изменить существующую службу HBAC:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Поиск служб HBAC. В этом примере будут возвращены два результата, служба " +"FTP\n" +" и добавленная выше служба tftp:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Удалить службу HBAC:\n" +" ipa hbacsvc-del tftp\n" -msgid "Rename the group object" -msgstr "Переименовать объект группы" - -msgid "Remove members from a group." -msgstr "Удалить участников из группы." - -msgid "users to remove" -msgstr "пользователи, которых следует удалить" - -msgid "groups to remove" -msgstr "группы, которые следует удалить" - -msgid "Members that could not be removed" -msgstr "Участники, которых не удалось удалить" - -msgid "Number of members removed" -msgstr "Количество удалённых участников" - -msgid "Display information about a named group." -msgstr "Показать сведения об именованной группе." +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host " +"\"server\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" +"\n" +"Управление доступом на основе узла\n" +"\n" +"Управляйте тем, кто, на каких узлах и из каких узлов сможет получать доступ " +"к определённым службам. Вы можете воспользоваться HBAC для определения тех " +"пользователей и групп на узле происхождения запроса, которые будут иметь " +"доступ к определённой службе или группе служб на целевом узле.\n" +"\n" +"Также можно указать категорию пользователей, целевых узлов и узлов " +"происхождения запроса. В текущей версии доступен только вариант \"all\", но " +"в будущих версиях, возможно, появятся и другие варианты.\n" +"\n" +"Целевые узлы и узлы происхождения запроса в правилах HBAC должны быть узлами " +"под управлением IPA.\n" +"\n" +"Доступные службы и группы служб управляются, соответственно, с помощью " +"подключаемых модулей hbacsvc и hbacsvcgroup.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Создать правило, \"test1\", которое предоставляет всем пользователям доступ " +"на узел \"server\" отовсюду:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Показать свойства именованного правила HBAC:\n" +" ipa hbacrule-show test1\n" +"\n" +" Создать правило для определённой службы. Это правило предоставит " +"пользователю john доступ к службе sshd на любом компьютере с любого " +"компьютера:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Создать правило для новой группы служб. Это правило предоставит " +"пользователю john доступ к службе FTP на любом компьютере с любого " +"компьютера:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Отключить именованное правило HBAC:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Удалить именованное правило HBAC:\n" +" ipa hbacrule-del allow_server\n" msgid "" "\n" @@ -4650,8 +6412,8 @@ msgid "" "\n" "EXAMPLES:\n" "\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" +" Create a rule, \"test1\", that grants all users access to the host " +"\"server\" from\n" " anywhere:\n" " ipa hbacrule-add --usercat=all test1\n" " ipa hbacrule-add-host --hosts=server.example.com test1\n" @@ -4730,705 +6492,143 @@ msgstr "" " Удалить именованное правило HBAC:\n" " ipa hbacrule-del allow_server\n" -msgid "Rule name" -msgstr "Имя правила" - -msgid "Rule type" -msgstr "Тип правила" - -msgid "Rule type (allow)" -msgstr "Тип правила (allow)" - -msgid "User category" -msgstr "Категория пользователей" - -msgid "User category the rule applies to" -msgstr "Категория пользователей, к которой применяется правило" - -msgid "Host category" -msgstr "Категория узлов" - -msgid "Host category the rule applies to" -msgstr "Категория узлов, к которой применяется правило" - -msgid "Service category" -msgstr "Категория служб" - -msgid "Service category the rule applies to" -msgstr "Категория служб, к которой применяется правило" - -msgid "Enabled" -msgstr "Включено" - -msgid "User Groups" -msgstr "Группы пользователей" - -msgid "Host Groups" -msgstr "Группы узлов" - -msgid "Services" -msgstr "Службы" - -msgid "Service Groups" -msgstr "Группы служб" - -msgid "External host" -msgstr "Внешний узел" - -msgid "Create a new HBAC rule." -msgstr "Создать новое правило HBAC." - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "Добавить целевые узлы и группы узлов в правило HBAC." - -msgid "member host" -msgstr "узел-участник" - -msgid "hosts to add" -msgstr "узлы, которые следует добавить" - -msgid "member host group" -msgstr "группа узлов — участник" - -msgid "host groups to add" -msgstr "группы узлов, которые следует добавить" - -msgid "Add services to an HBAC rule." -msgstr "Добавить службы в правило HBAC." - -msgid "member HBAC service" -msgstr "служба-участник HBAC" - -msgid "HBAC services to add" -msgstr "cлужбы HBAC, которые следует добавить" - -msgid "member HBAC service group" -msgstr "участник группа служб HBAC" - -msgid "HBAC service groups to add" -msgstr "группы служб HBAC, которые следует добавить" - -msgid "Add users and groups to an HBAC rule." -msgstr "Добавить пользователей и группы в правило HBAC." - -msgid "Delete an HBAC rule." -msgstr "Удалить правило HBAC." - -msgid "Disable an HBAC rule." -msgstr "Отключить правило HBAC." - -msgid "Enable an HBAC rule." -msgstr "Включить правило HBAC." - -msgid "Search for HBAC rules." -msgstr "Поиск правил HBAC." - -msgid "Modify an HBAC rule." -msgstr "Изменить правило HBAC." - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "Удалить целевые узлы и группы узлов из правила HBAC." - -msgid "hosts to remove" -msgstr "узлы, которые следует удалить" - -msgid "host groups to remove" -msgstr "группы узлов, которые следует удалить" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "Удалить службы и группы служб из правила HBAC." - -msgid "HBAC services to remove" -msgstr "службы HBAC, которые следует удалить" - -msgid "HBAC service groups to remove" -msgstr "группы служб HBAC, которые следует удалить" - -msgid "Remove users and groups from an HBAC rule." -msgstr "Удалить пользователей и группы из правила HBAC." - -msgid "Display the properties of an HBAC rule." -msgstr "Показать свойства правила HBAC." +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" +"\n" +"Узлы/Компьютеры\n" +"\n" +"Узел представляет собой отдельный компьютер. Термин может использоваться в " +"нескольких контекстах:\n" +"- записи служб, связанные с определённым узлом \n" +"- узел сохраняет учётную запись узла / службы\n" +"- узел может использоваться в правилах управления доступом на основе узла " +"(Host-based Access Control, HBAC)\n" +"- каждый зарегистрированный клиент создаёт запись узла\n" msgid "" "\n" -"HBAC Services\n" +"Hosts/Machines\n" "\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" "\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" "\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" "\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" msgstr "" "\n" -"Службы HBAC\n" +"Узлы/Компьютеры\n" "\n" -"Службы PAM, доступом к которым управляет HBAC. Используемое здесь имя должно " -"соответствовать имени службы, которую оценивает PAM.\n" +"Узел представляет собой отдельный компьютер. Термин может использоваться в " +"нескольких контекстах:\n" +"- записи служб, связанные с определённым узлом \n" +"- узел сохраняет учётную запись узла / службы\n" +"- узел может использоваться в правилах управления доступом на основе узла " +"(Host-based Access Control, HBAC)\n" +"- каждый зарегистрированный клиент создаёт запись узла\n" +"\n" +"РЕГИСТРАЦИЯ:\n" +"Существует три сценария регистрации нового клиента:\n" +"\n" +"1. Вы регистрируетесь как администратор с полными правами. Запись узла может " +"существовать или отсутствовать. Полноправный администратор выполняет роль " +"hostadmin или является участником группы admins.\n" +"2. Вы регистрируетесь как администратор с ограниченными правами. Узел уже " +"должен существовать. Администратор с ограниченными правами выполняет роль с " +"привилегией Host Enrollment.\n" +"3. Узел создан с одноразовым паролем.\n" +"\n" +"Узлу можно назначить роль только один раз. Если клиенту уже назначена роль и " +"эту роль требуется изменить, запись узла должна быть удалена и создана " +"повторно. Обратите внимание, что повторное создание записи узла приведет к " +"удалению всех служб узла и отзыву всех связанных с этими службами SSL-" +"сертификатов.\n" +"\n" +"В запись узла при необходимости можно включить данные о его расположении, " +"типе используемой операционной системы и так далее.\n" "\n" "ПРИМЕРЫ:\n" "\n" -" Добавить новую службу HBAC:\n" -" ipa hbacsvc-add tftp\n" +" Добавить новый узел:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" "\n" -" Изменить существующую службу HBAC:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +" Удалить узел:\n" +" ipa host-del test.example.com\n" "\n" -" Поиск служб HBAC. В этом примере будут возвращены два результата, служба " -"FTP\n" -" и добавленная выше служба tftp:\n" -" ipa hbacsvc-find ftp\n" +" Добавить новый узел с одноразовым паролем:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" "\n" -" Удалить службу HBAC:\n" -" ipa hbacsvc-del tftp\n" - -msgid "Service name" -msgstr "Имя службы" - -msgid "HBAC service" -msgstr "Служба HBAC" - -msgid "HBAC service description" -msgstr "Описание службы HBAC" - -msgid "Member of HBAC service groups" -msgstr "Участник групп служб HBAC" - -msgid "Add a new HBAC service." -msgstr "Добавить новую службу HBAC." - -msgid "Delete an existing HBAC service." -msgstr "Удалить существующую службу HBAC." - -msgid "Search for HBAC services." -msgstr "Поиск служб HBAC." - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" -"Результаты должны содержать только атрибут главного ключа (\"service\")" - -msgid "Modify an HBAC service." -msgstr "Изменить службу HBAC." - -msgid "Display information about an HBAC service." -msgstr "Показать сведения о службе HBAC." - -msgid "" +" Добавить новый узел со случайным одноразовым паролем:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" "\n" -"HBAC Service Groups\n" +" Изменить сведения об узле:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" "\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" +" Удалить открытые ключи SSH узла и обновить DNS для отображения изменений:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" "\n" -"EXAMPLES:\n" +" Отключить ключ Kerberos, SSL-сертификат и все службы узла:\n" +" ipa host-disable test.example.com\n" "\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" -"\n" -"Группы служб HBAC\n" -"\n" -"Группы служб HBAC могут содержать любое количество отдельных служб (так " -"называемых \"участников\"). У каждой группы должно быть описание.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую группу служб HBAC:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Добавить участников в группу служб HBAC:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Показать сведения об именованной группе:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Удалить группу служб HBAC:\n" -" ipa hbacsvcgroup-del login\n" - -msgid "Service group name" -msgstr "Имя группы служб" - -msgid "HBAC service group description" -msgstr "Описание группы служб HBAC" - -msgid "Member HBAC service" -msgstr "Служба-участник HBAC" - -msgid "Add a new HBAC service group." -msgstr "Добавить новую группу служб HBAC." - -msgid "Add members to an HBAC service group." -msgstr "Добавить участников в группу служб HBAC." - -msgid "Delete an HBAC service group." -msgstr "Удалить группу служб HBAC." - -msgid "Search for an HBAC service group." -msgstr "Поиск группы служб HBAC." - -msgid "Modify an HBAC service group." -msgstr "Изменить группу служб HBAC." - -msgid "Remove members from an HBAC service group." -msgstr "Удалить участников из группы служб HBAC." - -msgid "Display information about an HBAC service group." -msgstr "Показать сведения о группе служб HBAC." - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" -"\n" -"Имитация использования управления доступом на основе узла\n" -"\n" -"Правила HBAC управляют тем, кто и на каких узлах сможет получать доступ к " -"определённым службам. Вы можете воспользоваться HBAC для определения тех " -"пользователей и групп, которые будут иметь доступ к определённой службе или " -"группе служб на целевом узле. \n" -"\n" -"Так как применение правил HBAC подразумевает использование рабочей среды, " -"этот подключаемый модуль предназначен для обеспечения имитации оценки правил " -"HBAC при отсутствии доступа к рабочей среде.\n" -"\n" -" Проверка тестового пользователя, который обращается к службе на именованном " -"узле, на соответствие существующим включённым правилам.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" Параметры --user, --host и --service являются обязательными, остальные " -"можно не указывать.\n" -"\n" -" Если указан параметр --rules, имитировать включение указанных правил и " -"проверить возможность входа пользователя в случае использования только этих " -"правил.\n" -"\n" -" Если указан параметр --enabled, добавить все включённые правила HBAC к " -"имитации.\n" -"\n" -" Если указан параметр --disabled, добавить все отключённые правила HBAC к " -"имитации.\n" -"\n" -" Если указан параметр --nodetail, не возвращать данные о соответствующих или " -"не соответствующих правилах.\n" -"\n" -" Если одновременно указаны параметры --rules и --enabled, выполнить имитацию " -"--rules _и_\n" -" всех включённых правил IPA.\n" -"\n" -" Если не указан параметр --rules, выполнить имитацию всех включённых правил " -"IPA.\n" -" По умолчанию в IPA имеется общее ограничение количества извлекаемых " -"записей, его можно изменить с помощью параметра --sizelimit.\n" -"\n" -" ПРИМЕРЫ:\n" -"\n" -" 1. Использовать все включённые правила HBAC в базе данных IPA:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" Несоответствующие правила: my-second-rule\n" -" Несоответствующие правила: my-third-rule\n" -" Несоответствующие правила: myrule\n" -" Соответствующие правила: allow_all\n" -"\n" -" 2. Отключить подробный отчёт о применении правил:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -"\n" -" 3. Проверить явно указанные правила HBAC:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Доступ предоставлен: Нет\n" -" ---------------------\n" -" Несоответствующие правила: my-second-rule\n" -" Несоответствующие правила: myrule\n" -"\n" -" 4. Использовать все включённые правила HBAC в базе данных IPA + явно " -"указанные правила:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" Несоответствующие правила: my-second-rule\n" -" Несоответствующие правила: my-third-rule\n" -" Несоответствующие правила: myrule\n" -" Соответствующие правила: allow_all\n" -"\n" -" 5. Проверить все отключённые правила HBAC в базе данных IPA:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Доступ предоставлен: Нет\n" -" ---------------------\n" -" Несоответствующие правила: new-rule\n" -"\n" -" 6. Проверить все отключённые правила HBAC в базе данных IPA + явно " -"указанные правила:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Доступ предоставлен: Нет\n" -" ---------------------\n" -" Несоответствующие правила: my-second-rule\n" -" Несоответствующие правила: my-third-rule\n" -" Несоответствующие правила: myrule\n" -"\n" -" 7. Проверить все (включённые и отключённые) правила HBAC в базе данных " -"IPA:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --enabled --disabled\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" Несоответствующие правила: my-second-rule\n" -" Несоответствующие правила: my-third-rule\n" -" Несоответствующие правила: myrule\n" -" Несоответствующие правила: new-rule\n" -" Соответствующие правила: allow_all\n" -"\n" -"\n" -"HBACTEST И ДОВЕРЕННЫЕ ДОМЕНЫ\n" -"\n" -"Если в IPA настроен внешний доверенный домен, правила HBAC также применяются " -"к пользователям, которые выполняют доступ к ресурсам IPA из доверенного " -"домена. Пользователи и группы доверенного домена (и их SID) затем могут быть " -"привязаны к внешним группам, которые могут быть участниками POSIX-групп в " -"IPA. Такие привязки можно использовать в правилах HBAC, тем самым разрешая " -"доступ к ресурсам, которые защищены системой HBAC.\n" -"\n" -"Подключаемый модуль hbactest позволяет проверять доступ как для локальных " -"пользователей IPA, так и для пользователей из доверенных доменов, как с " -"полным именем пользователя, так и по SID пользователей. В таких именах " -"пользователей должен быть указан доверенный домен в краткой форме (DOMAIN" -"\\Administrator) или имя учётной записи пользователя (UPN), Administrator@ad." -"test.\n" -"\n" -"Обратите внимание, что выполнять hbactest с аргументом пользователя " -"доверенного домена в параметре --user могут только участники группы \"trust " -"admins\".\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" 1. Проверить, соответствует ли пользователь из доверенного домена, " -"указанный по краткому имени, какому-либо правилу:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" Соответствующие правила: allow_all\n" -" Соответствующие правила: can_login\n" -"\n" -" 2. Проверить, соответствует ли пользователь из доверенного домена, " -"указанный по имени домена, какому-либо правилу:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" Соответствующие правила: allow_all\n" -" Соответствующие правила: can_login\n" -"\n" -" 3. Проверить, соответствует ли пользователь из доверенного домена, " -"указанный по SID, какому-либо правилу:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" Соответствующие правила: allow_all\n" -" Соответствующие правила: can_login\n" -"\n" -" 4. Проверить, соответствует ли другой пользователь из доверенного " -"домена, указанный по SID, какому-либо правилу:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" Соответствующие правила: allow_all\n" -" Несоответствующие правила: can_login\n" -"\n" -" 5. Проверить, соответствует ли другой пользователь из доверенного домена, " -"указанный по краткому имени, какому-либо правилу:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Доступ предоставлен: Да\n" -" --------------------\n" -" Соответствующие правила: allow_all\n" -" Несоответствующие правила: can_login\n" -"\n" - -msgid "Simulate use of Host-based access controls" -msgstr "Имитировать использование управления доступом на основе узла" - -msgid "User name" -msgstr "Имя пользователя" - -msgid "Target host" -msgstr "Целевой узел" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" -"Правила, которые следует проверить. Если они не указаны, считается, что " -"использован параметр --enabled" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" -"Скрыть подробные сведения о том, какие правила соответствуют, не " -"соответствуют или недействительны" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "Проверить все включённые правила IPA [поведение по умолчанию]" - -msgid "Include all disabled IPA rules into test" -msgstr "Проверить все отключённые правила IPA" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" -"Максимальное количество правил, которое следует обработать, если не указан " -"параметр --rules" - -msgid "Warning" -msgstr "Предупреждение" - -msgid "Matched rules" -msgstr "Соответствующие правила" - -msgid "Not matched rules" -msgstr "Несоответствующие правила" - -msgid "Non-existent or invalid rules" -msgstr "Несуществующие или недействительные правила" - -msgid "Result of simulation" -msgstr "Результат имитации" +" Добавить узел, который может управлять таблицей ключей и сертификатом этого " +"узла:\n" +" ipa host-add-managedby --hosts=test2 test\n" msgid "" "\n" @@ -5558,663 +6758,6 @@ msgstr "" " Разрешить пользователю создавать таблицу ключей:\n" " ipa host-allow-create-keytab test2 --users=tuser1\n" -msgid "Host name" -msgstr "Имя узла" - -msgid "A description of this host" -msgstr "Описание этого узла" - -msgid "Locality" -msgstr "Адрес местонахождения" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "Адрес местонахождения узла (например, \"Москва, Россия\")" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "Расположение узла (например, \"Lab 2\")" - -msgid "Platform" -msgstr "Платформа" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "Аппаратная платформа узла (например, \"Lenovo T61\")" - -msgid "Operating system" -msgstr "Операционная система" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "Операционная система узла и её версия (например, \"Fedora 9\")" - -msgid "User password" -msgstr "Пароль пользователя" - -msgid "Password used in bulk enrollment" -msgstr "Пароль для массовой регистрации" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "Создать случайный пароль для массовой регистрации" - -msgid "Random password" -msgstr "Случайный пароль" - -msgid "Certificate" -msgstr "Сертификат" - -msgid "Base-64 encoded server certificate" -msgstr "Base-64 шифрованный сертификат сервера" - -msgid "Principal name" -msgstr "Имя учётной записи" - -msgid "MAC address" -msgstr "MAC-адрес" - -msgid "Hardware MAC address(es) on this host" -msgstr "MAC-адрес(а) данного узла" - -msgid "SSH public key" -msgstr "Открытый ключ SSH" - -msgid "Class" -msgstr "Класс" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" -"Категория узлов (семантика этого атрибута предназначена для локального " -"разбора)" - -msgid "Assigned ID View" -msgstr "Назначенное представление ID" - -msgid "Requires pre-authentication" -msgstr "Требуется предварительная аутентификация" - -msgid "Pre-authentication is required for the service" -msgstr "Для службы требуется предварительная аутентификация" - -msgid "Trusted for delegation" -msgstr "Доверено для делегирования" - -msgid "Client credentials may be delegated to the service" -msgstr "Учётные данные клиента можно делегировать службе" - -msgid "Member of host-groups" -msgstr "Участник групп узлов" - -msgid "Indirect Member of host-group" -msgstr "Участник группы узлов с непрямым участием" - -msgid "Keytab" -msgstr "Таблица ключей" - -msgid "Managed by" -msgstr "Управляется" - -msgid "Managing" -msgstr "Управление" - -msgid "Users allowed to retrieve keytab" -msgstr "Пользователи, которым разрешено получать таблицу ключей" - -msgid "Groups allowed to retrieve keytab" -msgstr "Группы, которым разрешено получать таблицу ключей" - -msgid "Hosts allowed to retrieve keytab" -msgstr "Узлы, которым разрешено получать таблицу ключей" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "Группы узлов, которым разрешено получать таблицу ключей" - -msgid "Users allowed to create keytab" -msgstr "Пользователи, которым разрешено создавать таблицу ключей" - -msgid "Groups allowed to create keytab" -msgstr "Группы, которым разрешено создавать таблицу ключей" - -msgid "Hosts allowed to create keytab" -msgstr "Узлы, которым разрешено создавать таблицу ключей" - -msgid "Host Groups allowed to create keytab" -msgstr "Группы узлов, которым разрешено создавать таблицу ключей" - -msgid "Add a new host." -msgstr "Добавить новый узел." - -msgid "force host name even if not in DNS" -msgstr "" -"Принудительно установить значение имени узла, даже если имени нет в DNS" - -msgid "skip reverse DNS detection" -msgstr "Игнорировать обратное определение DNS" - -msgid "Add the host to DNS with this IP address" -msgstr "Добавить узел в DNS с этим IP-адресом" - -msgid "Add hosts that can manage this host." -msgstr "Добавить узлы, которые могут управлять этим узлом." - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" -"Разрешить пользователям, группам, узлам или группам узлов создавать таблицу " -"ключей этого узла." - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" -"Разрешить пользователям, группам, узлам или группам узлов получать таблицу " -"ключей этого узла." - -msgid "Delete a host." -msgstr "Удалить узел." - -msgid "Remove entries from DNS" -msgstr "Удалить записи из DNS" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "Отключить ключ Kerberos, SSL-сертификат и все службы узла." - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" -"Запретить пользователям, группам, узлам или группам узлов создавать таблицу " -"ключей этого узла." - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" -"Запретить пользователям, группам, узлам или группам узлов получать таблицу " -"ключей этого узла." - -msgid "Search for hosts." -msgstr "Поиск узлов." - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" -"Результаты должны содержать только атрибут главного ключа (\"hostname\")" - -msgid "host group" -msgstr "группа узлов" - -msgid "Search for hosts with these member of host groups." -msgstr "Поиск узлов, которые являются участниками этой группы узлов." - -msgid "Search for hosts without these member of host groups." -msgstr "Поиск узлов, которые не являются участниками этой группы узлов." - -msgid "Search for hosts with these member of netgroups." -msgstr "Поиск узлов, которые являются участниками этой сетевой группы." - -msgid "Search for hosts without these member of netgroups." -msgstr "Поиск узлов, которые не являются участниками этой сетевой группы." - -msgid "Search for hosts with these member of roles." -msgstr "Поиск узлов, которые являются участниками этой роли." - -msgid "Search for hosts without these member of roles." -msgstr "Поиск узлов, которые не являются участниками этой роли." - -msgid "Search for hosts with these member of HBAC rules." -msgstr "Поиск узлов, которые являются участниками этого правила HBAC." - -msgid "Search for hosts without these member of HBAC rules." -msgstr "Поиск узлов, которые не являются участниками этого правила HBAC." - -msgid "Search for hosts with these member of sudo rules." -msgstr "Поиск узлов, которые являются участниками этого правила Sudo." - -msgid "Search for hosts without these member of sudo rules." -msgstr "Поиск узлов, которые не являются участниками этого правила Sudo." - -msgid "Search for hosts with these enrolled by users." -msgstr "Поиск узлов, которые зарегистрированы пользователями." - -msgid "Search for hosts without these enrolled by users." -msgstr "Поиск узлов, которые не зарегистрированы пользователями." - -msgid "host" -msgstr "узел" - -msgid "Search for hosts with these managed by hosts." -msgstr "Поиск узлов, которые управляются узлами." - -msgid "Search for hosts without these managed by hosts." -msgstr "Поиск узлов, которые не управляются узлами." - -msgid "Search for hosts with these managing hosts." -msgstr "Поиск узлов, включая узлы, управляющие узлами." - -msgid "Search for hosts without these managing hosts." -msgstr "Поиск узлов, не включая узлы, управляющие узлами." - -msgid "Modify information about a host." -msgstr "Изменить сведения об узле." - -msgid "Kerberos principal name for this host" -msgstr "Имя учётной записи Kerberos для этого узла" - -msgid "Update DNS entries" -msgstr "Обновить записи DNS" - -msgid "Remove hosts that can manage this host." -msgstr "Удалить узлы, которые могут управлять этим узлом." - -msgid "Display information about a host." -msgstr "Показать сведения об узле." - -msgid "file to store certificate in" -msgstr "Файл для сохранения сертификата" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" -"\n" -"Группы узлов.\n" -"\n" -"Управление группами узлов. Оно полезно при применении управления доступом к " -"ряду узлов с помощью управления доступом на основе узла (HBAC).\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую группу узлов:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Добавить другую новую группу узлов:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Добавить участников в группу узлов (с использованием выражения Bash в " -"фигурных скобках):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Добавить группу узлов как участника другой группы узлов:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Удалить узел из группы узлов:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Показать группу узлов:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Удалить группу узлов:\n" -" ipa hostgroup-del baltimore\n" - -msgid "Host-group" -msgstr "Группа узлов" - -msgid "Name of host-group" -msgstr "Имя группы узлов" - -msgid "A description of this host-group" -msgstr "Описание этой группы узлов" - -msgid "Member hosts" -msgstr "Узлы-участники" - -msgid "Member host-groups" -msgstr "Группы узлов — участники" - -msgid "Indirect Member hosts" -msgstr "Узлы с непрямым участием" - -msgid "Indirect Member host-groups" -msgstr "Группы узлов с непрямым участием" - -msgid "Add a new hostgroup." -msgstr "Добавить новую группу узлов." - -msgid "Add members to a hostgroup." -msgstr "Добавить участников в группу узлов." - -msgid "Delete a hostgroup." -msgstr "Удалить группу узлов." - -msgid "Search for hostgroups." -msgstr "Поиск групп узлов." - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" -"Результаты должны содержать только атрибут главного ключа (\"hostgroup-name" -"\")" - -msgid "Search for host groups with these member hosts." -msgstr "Поиск групп узлов с этими узлами-участниками." - -msgid "Search for host groups without these member hosts." -msgstr "Поиск групп узлов без этих узлов-участников." - -msgid "Search for host groups with these member host groups." -msgstr "Поиск групп узлов с этими группами узлов — участниками." - -msgid "Search for host groups without these member host groups." -msgstr "Поиск групп узлов без этих групп узлов — участников." - -msgid "Search for host groups with these member of host groups." -msgstr "Поиск групп узлов, которые являются участниками этой группы узлов." - -msgid "Search for host groups without these member of host groups." -msgstr "Поиск групп узлов, которые не являются участниками этой группы узлов." - -msgid "Search for host groups with these member of netgroups." -msgstr "Поиск групп узлов, которые являются участниками этой сетевой группы." - -msgid "Search for host groups without these member of netgroups." -msgstr "" -"Поиск групп узлов, которые не являются участниками этой сетевой группы." - -msgid "Search for host groups with these member of HBAC rules." -msgstr "Поиск групп узлов, которые являются участниками этого правила HBAC." - -msgid "Search for host groups without these member of HBAC rules." -msgstr "Поиск групп узлов, которые не являются участниками этого правила HBAC." - -msgid "Search for host groups with these member of sudo rules." -msgstr "Поиск групп узлов, которые являются участниками этого правила Sudo." - -msgid "Search for host groups without these member of sudo rules." -msgstr "Поиск групп узлов, которые не являются участниками этого правила Sudo." - -msgid "Modify a hostgroup." -msgstr "Изменить группу узлов." - -msgid "Remove members from a hostgroup." -msgstr "Удалить участников из группы узлов." - -msgid "Display information about a hostgroup." -msgstr "Показать сведения о группе узлов." - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "Range name" -msgstr "Имя диапазона" - -msgid "First Posix ID of the range" -msgstr "Первый идентификатор POSIX диапазона" - -msgid "Number of IDs in the range" -msgstr "Количество идентификаторов в диапазоне" - -msgid "First RID of the corresponding RID range" -msgstr "Первый RID соответствующего диапазона RID" - -msgid "First RID of the secondary RID range" -msgstr "Первый RID вторичного диапазона RID" - -msgid "Domain SID of the trusted domain" -msgstr "SID доверенного домена" - -msgid "Name of the trusted domain" -msgstr "Имя доверенного домена" - -msgid "Range type" -msgstr "Тип диапазона" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" -"Тип диапазона идентификаторов, один из следующих: ipa-ad-trust-posix, ipa-ad-" -"trust, ipa-local" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" -"\n" -"Добавление нового диапазона идентификаторов.\n" -"\n" -" Для добавления нового диапазона идентификаторов всегда необходимо " -"указывать\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Кроме того,\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" могут указываться для нового диапазона идентификаторов для локального " -"домена, в то время как\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" должны быть указаны для добавления нового диапазона для доверенного " -"домена AD.\n" -"\n" -" ПРЕДУПРЕЖДЕНИЕ:\n" -"\n" -"Подключаемый модуль DNA в 389-ds выделяет идентификаторы на основе " -"диапазонов, настроенных для локального домена. В текущей версии сам " -"подключаемый модуль DNA *нельзя* перенастраивать на основе локальных " -"диапазонов, установленных с помощью этого семейства команд.\n" -"\n" -"Для нового локального диапазона следует вручную изменить настройки " -"конфигурации подключаемого модуля DNA. В частности, следует изменить атрибут " -"dnaNextRange \"cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config\" таким " -"образом, чтобы он соответствовал новому диапазону.\n" -" " - -msgid "Delete an ID range." -msgstr "Удалить диапазон идентификаторов." - -msgid "Search for ranges." -msgstr "Поиск диапазонов." - -msgid "Modify ID range." -msgstr "Изменить диапазон идентификаторов." - -msgid "Display information about a range." -msgstr "Показать сведения о диапазоне." - msgid "" "\n" "ID Views\n" @@ -6237,189 +6780,491 @@ msgstr "" "переноса данных из устаревших систем или других решений для управления " "идентификацией и учётными записями пользователей.\n" -msgid "Anchor to override" -msgstr "Привязка, которую следует переопределить" - -msgid "Group ID Number" -msgstr "ID группы" - -msgid "User login" -msgstr "Имя учётной записи пользователя" - -msgid "UID" -msgstr "UID" - -msgid "User ID Number" -msgstr "Номер ID пользователя" - -msgid "GECOS" -msgstr "GECOS" - -msgid "Home directory" -msgstr "Домашний каталог" - -msgid "Login shell" -msgstr "Оболочка входа" - -msgid "ID View Name" -msgstr "Имя представления ID" - -msgid "Add a new Group ID override." -msgstr "Добавить новое переопределение ID группы." - -msgid "Delete an Group ID override." -msgstr "Удалить переопределение ID группы." - -msgid "Search for an Group ID override." -msgstr "Поиск переопределения ID группы." - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "Результаты должны содержать только атрибут главного ключа (\"anchor\")" - -msgid "Modify an Group ID override." -msgstr "Изменить переопределение ID группы." - -msgid "Rename the Group ID override object" -msgstr "Переименовать объект переопределения ID группы" - -msgid "Display information about an Group ID override." -msgstr "Показать сведения о переопределении ID группы." - -msgid "Add a new User ID override." -msgstr "Добавить новое переопределение ID пользователя." - -msgid "Delete an User ID override." -msgstr "Удалить переопределение ID пользователя." - -msgid "Search for an User ID override." -msgstr "Поиск переопределения ID пользователя." - -msgid "Modify an User ID override." -msgstr "Изменить переопределение ID пользователя." - -msgid "Rename the User ID override object" -msgstr "Переименовать объект переопределения ID пользователя" - -msgid "Display information about an User ID override." -msgstr "Показать сведения о переопределении ID пользователя." - -msgid "Add a new ID View." -msgstr "Добавить новое представление ID." - msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." +"\n" +"IPA certificate operations\n" msgstr "" -"Применяет представление ID к указанным узлам или текущим участникам " -"указанных групп узлов. Если к узлу применяется другое представление ID, оно " -"будет переопределено." - -msgid "hosts" -msgstr "узлы" - -msgid "Hosts to apply the ID View to" -msgstr "Узлы, к которым следует применить представление ID" - -msgid "hostgroups" -msgstr "группы узлов" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" -"Группы узлов, к узлам которых следует применить представление ID. Обратите " -"внимание, что представление не применяется автоматически к узлам, " -"добавленным в группу узлов после выполнения команды idview-apply." - -msgid "Hosts that this ID View was applied to." -msgstr "Узлы, к которым было применено это представление ID." - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" -"Узлы или группы узлов, к которым не удалось применить это представление ID." - -msgid "Number of hosts the ID View was applied to:" -msgstr "Количество узлов, к которым было применено представление ID:" - -msgid "Delete an ID View." -msgstr "Удалить представление ID." - -msgid "Search for an ID View." -msgstr "Поиск представления ID." - -msgid "Modify an ID View." -msgstr "Изменить представление ID." - -msgid "Rename the ID View object" -msgstr "Переименовать объект представления ID" - -msgid "Display information about an ID View." -msgstr "Показать сведения о представлении ID." - -msgid "Enumerate all the hosts the view applies to." -msgstr "Пронумеровать все узлы, к которым применяется представление" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" -"Очищает представление ID для указанных узлов или текущих участников " -"указанных групп узлов." - -msgid "Hosts to clear (any) ID View from." -msgstr "Узлы, для которых следует очистить (любое) представление ID." - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" -"Группы узлов, для узлов которых следует очистить представления ID. Обратите " -"внимание, что представление не очищается автоматически для узлов, " -"добавленных в группу узлов после выполнения команды idview-unapply. " - -msgid "Hosts that ID View was cleared from." -msgstr "Узлы, для которых было очищено представление ID." - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" -"Узлы или группы узлов, для которых не удалось очистить представление ID." - -msgid "Number of hosts that had a ID View was unset:" -msgstr "Количество узлов, с которых снято представление ID: " +"\n" +"Операции с сертификатами IPA\n" msgid "" "\n" -"Plugins not accessible directly through the CLI, commands used internally\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" msgstr "" "\n" -"Интерфейс командной строки не позволяет получить прямой доступ к " -"подключаемым модулям, команды используются для внутренней обработки\n" +"Операции с сертификатами IPA \n" +"\n" +"Применение набора команд для управления сертификатами SSL-серверов.\n" +"\n" +"Запросы сертификатов существуют в виде запроса подписи сертификата " +"(Certificate Signing Request, CSR) в формате PEM.\n" +"\n" +"Если используется бэкенд с самоподписанным сертификатом, субъект в CSR " +"должен соответствовать субъекту, настроенному на сервере. Система выдачи " +"сертификатов Dogtag Certificate System использует только значение CN в CSR и " +"принудительно устанавливает остальные параметры субъекта.\n" +"\n" +"Сертификат хранится в учётной записи службы, а учётной записи службы " +"требуется узел.\n" +"\n" +"Чтобы запросить сертификат:\n" +"\n" +"* Должен существовать узел\n" +"* Должна существовать служба (либо следует использовать параметр --add для " +"её автоматического добавления)\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Запросить новый сертификат и добавить учётную запись:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Получить существующий сертификат:\n" +" ipa cert-show 1032\n" +"\n" +" Отозвать сертификат (подробные сведения о причинах доступны в RFC 5280):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Удалить сертификат из списка отзыва:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Проверить состояние запроса подписи:\n" +" ipa cert-status 10\n" +"\n" +"В текущей версии IPA немедленно выполняет (или отклоняет) все запросы " +"сертификатов, следовательно, данные о состоянии запроса не являются " +"полезными. Эти данные могут понадобиться в следующих версиях или в случае, " +"если CA не сразу выдаёт сертификат.\n" +"\n" +"Поддерживаются следующие причины отзыва:\n" +"\n" +" * 0 - не указано\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Обратите внимание, что код причины 7 не используется. Подробные сведения в " +"RFC 5280:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" -msgid "Dict of I18N messages" -msgstr "Словарь переведённых сообщений (I18N)" +msgid "" +"\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +msgstr "" +"\n" +"Операции с сертификатами IPA \n" +"\n" +"Применение набора команд для управления сертификатами SSL-серверов.\n" +"\n" +"Запросы сертификатов существуют в виде запроса подписи сертификата " +"(Certificate Signing Request, CSR) в формате PEM.\n" +"\n" +"Система выдачи сертификатов Dogtag Certificate System использует только " +"значение CN в CSR и принудительно устанавливает остальные параметры субъекта " +"в соответствии со значениями, настроенными на сервере.\n" +"\n" +"Сертификат хранится в учётной записи службы, а учётной записи службы " +"требуется узел.\n" +"\n" +"Чтобы запросить сертификат:\n" +"\n" +"* Должен существовать узел\n" +"* Должна существовать служба (либо следует использовать параметр --add для " +"её автоматического добавления)\n" +"\n" +"ПОИСК:\n" +"\n" +"Сертификаты можно искать по субъекту, серийному номеру, причине отзыва, " +"датам действия и дате выдачи.\n" +"\n" +"Если поиск выполняется по дате _с, используется сравнение >=, а если " +"выполняется поиск _до — сравнение <=. Сочетание обоих видов поиска приводит " +"к поиску с логической операцией И.\n" +"\n" +"Даты обрабатываются как даты по Гринвичскому времени, в соответствии с " +"датами, определёнными в в сертификатах.\n" +"\n" +"Формат даты: ГГГГ-мм-дд.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Запросить новый сертификат и добавить учётную запись:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Получить существующий сертификат:\n" +" ipa cert-show 1032\n" +"\n" +" Отозвать сертификат (подробные сведения о причинах доступны в RFC 5280):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Удалить сертификат из списка отзыва:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Проверить состояние запроса подписи:\n" +" ipa cert-status 10\n" +"\n" +" Поиск сертификатов по имени узла:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Поиск отозванных сертификатов по причине отзыва:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Поиск сертификатов по дате выдачи:\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"В текущей версии IPA немедленно выполняет (или отклоняет) все запросы " +"сертификатов, следовательно, данные о состоянии запроса не являются " +"полезными. Эти данные могут понадобиться в следующих версиях или в случае, " +"если CA не сразу выдаёт сертификат.\n" +"\n" +"Поддерживаются следующие причины отзыва:\n" +"\n" +" * 0 - не указано\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Обратите внимание, что код причины 7 не используется. Подробные сведения в " +"RFC 5280:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" -msgid "Export plugin meta-data for the webUI." -msgstr "Экспортировать метаданные подключаемого модуля для веб-интерфейса." +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" +"\n" +"В текущей версии IPA немедленно выполняет (или отклоняет) все запросы " +"сертификатов, следовательно, данные о состоянии запроса не являются " +"полезными. Эти данные могут понадобиться в следующих версиях или в случае, " +"если CA не сразу выдаёт сертификат.\n" -msgid "Name of object to export" -msgstr "Имя объекта, который следует экспортировать" +msgid "" +"\n" +"IPA locations\n" +msgstr "" +"\n" +"расположения IPA\n" -msgid "Name of method to export" -msgstr "Имя метода, который следует экспортировать" +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" +"\n" +"IPA предусматривает специальную привязку DN (binddn) для использования с " +"Sudo:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgid "Name of command to export" -msgstr "Имя команды, которую следует экспортировать" +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" +"\n" +"IPA предоставляет возможности настройки различных аспектов Sudo:\n" +" Users: пользователь (пользователи) или группа (группы), которые могут " +"вызывать Sudo.\n" +" Hosts: узел (узлы) или группа (группы) узлов, пользователи которых могут " +"вызывать Sudo.\n" +" Allow Command: конкретная команда (команды), которые разрешены для " +"выполнения с помощью Sudo. \n" +" Deny Command: конкретная команда (команды), которые запрещены для " +"выполнения с помощью Sudo.\n" +" RunAsUser: пользователь (пользователи) или группа (группы) пользователей, " +"от имени которых Sudo будет выполнять команды.\n" +" RunAsGroup: группа (группы), от имени которых Sudo будет выполнять " +"команды.\n" +" Options: различные параметры sudoers (участники Sudo), которые могут " +"изменить поведение Sudo.\n" -msgid "Dict of JSON encoded IPA Objects" -msgstr "Словарь объектов IPA, зашифрованных JSON" +msgid "" +"\n" +"IPA server roles\n" +msgstr "" +"\n" +"Роли IPA-сервера\n" -msgid "Dict of JSON encoded IPA Methods" -msgstr "Словарь методов IPA, зашифрованных JSON" +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" +"\n" +"Данные IPA-сервера хранятся на LDAP-сервере в двух суффиксах:\n" +"* суффикс домена (domain), например, \"dc=example,dc=com\", содержит все " +"связанные с доменом данные\n" +"* суффикс центра сертификации (ca), \"o=ipaca\", имеется только на серверах " +"с установленным CA. Он содержит данные для компонента сервера сертификатов\n" -msgid "Dict of JSON encoded IPA Commands" -msgstr "Словарь команд IPA, зашифрованных JSON" +msgid "" +"\n" +"IPA servers\n" +msgstr "" +"\n" +"IPA-серверы\n" + +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" +"\n" +"IPA-серверы\n" +"\n" +"Получение сведений об установленных IPA-серверах.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Найти все серверы:\n" +" ipa server-find\n" +"\n" +" Показать определённый сервер:\n" +" ipa server-show ipa.example.com\n" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" +"\n" +"В IPA реализована поддержка использования токенов OTP для многофакторной " +"аутентификации. Этот код позволяет управлять токенами OTP.\n" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" +"\n" +"В IPA поддерживается использование внешнего прокси-сервера RADIUS для " +"выполнения аутентификации с помощью одноразового пароля krb5. Эта поддержка " +"обеспечивает значительную гибкость при интеграции со сторонними службами " +"аутентификации.\n" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" +"\n" +"В IPA предусмотрена поддержка использования сертификатов для аутентификации. " +"Сертификаты могут храниться или в записи пользователя (весь сертификат в " +"атрибуте usercertificate), или просто привязываться к записи пользователя " +"путём сопоставления. С помощью этого кода можно управлять правилами, которые " +"позволяют связывать сертификат с записью пользователя.\n" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" +"\n" +"Применение набора команд для управления сертификатами SSL-серверов.\n" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" +"\n" +"Чтобы запросить сертификат:\n" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" +"\n" +"При работе с такими записями DNS может быть сложно не допустить ошибок и " +"ввести корректное значение. Модуль DNS предоставляет в ваше распоряжение " +"абстракцию над этими необработанными записями и позволяет управлять каждым " +"из типов записей ресурсов с помощью определённых параметров. Для каждого из " +"поддерживаемых типов записей ресурсов в модуле DNS предусмотрен стандартный " +"параметр для работы с необработанными записями с помощью формата ---" +"rec, например --mx-rec, и специальные параметры для каждой из частей " +"структуры записи ресурса с помощью формата ---, например --" +"mx-preference и --mx-exchanger.\n" +"\n" +"\n" msgid "" "\n" @@ -6428,20 +7273,87 @@ msgstr "" "\n" "Присоединение к домену IPA\n" -msgid "Join an IPA domain" -msgstr "Присоединиться к домену IPA." +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" +"\n" +"Средства отчётности о состоянии функции пре-аутентификации (PKINIT) " +"Kerberos.\n" +"\n" +"Отчёт о том, включена или отключена пре-аутентификация (PKINIT) Kerberos на " +"главных IPA-серверах \n" +"\n" +"ПРИМЕРЫ:\n" +" Вывести список состояний PKINIT на всех главных серверах:\n" +" ipa pkinit-status\n" +"\n" +" Проверить состояние PKINIT на \"ipa.example.com\":\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" Вывести список всех главных IPA-серверов с отключённой PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"Дополнительные сведения о поддержке PKINIT:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgid "The hostname to register as" -msgstr "Имя узла для регистрации" - -msgid "The IPA realm" -msgstr "Область (realm) IPA" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "Аппаратная платформа узла (например, Lenovo T61)" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "Операционная система и версия узла (например, Fedora 9)" +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" +"\n" +"Параметры команды pkinit Kerberos\n" +"\n" +"Включить или отключить использование \"анонимного пользователя\" для пре-" +"аутентификации с помощью сертификатов (pkinit) путём использования учётной " +"записи WELLKNOWN/ANONYMOUS@REALM. Сервер должен быть установлен с " +"поддержкой pkinit.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Включить использование \"анонимного пользователя\" для pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Включить использование \"анонимного пользователя\" для pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"Более подробные сведения об использовании \"анонимного пользователя\" для " +"pkinit:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" msgid "" "\n" @@ -6520,29 +7432,533 @@ msgstr "" " Изменить политику для пользователя \"admin\":\n" " ipa krbtpolicy-mod admin --maxlife=3600\n" -msgid "Manage ticket policy for specific user" -msgstr "Управление политикой билетов для определённого пользователя" +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" +"\n" +"Состояние блокировки учётной записи пользователя.\n" +"\n" +" Учётная запись может быть заблокирована, если в течение определённого " +"периода времени слишком большое количество раз был введён неверный пароль " +"(соответствующие ограничения регулируются политикой паролей). Запись " +"блокируется временно, она может быть разблокирована администратором.\n" +"\n" +" Эта программа соединяется с каждым главным IPA-сервером и показывает " +"состояние блокировки на каждом из них.\n" +"\n" +" Чтобы определить, заблокирована ли учётная запись на указанном сервере, " +"потребуется сравнить количество неудачных попыток входа и время последней " +"неудачной попытки с эталонными значениями. Для блокировки учётной записи " +"количество неудачных попыток входа должно превысить значение maxfail в " +"течение временного интервала failinterval в соответствии с политикой " +"паролей, связанной с пользователем.\n" +"\n" +" Счётчик неудачных попыток изменяется только тогда, когда пользователь " +"выполняет попытку войти, поэтому учётная запись может казаться " +"заблокированной, но время, прошедшее с последней неудачной попытки входа, " +"превышает время блокировки (lockouttime), установленное политикой паролей. " +"Это означает, что пользователь может войти в систему снова.\n" +" " -msgid "Max life" -msgstr "Максимальный срок жизни" +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-" +"CA\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" +"\n" +"Управление правилами CA ACL.\n" +"\n" +"Этот подключаемый модуль используется для определения правил, которые " +"управляют тем, какие службы сертификации и профили можно использовать для " +"выдачи сертификатов конкретным учётным записям или группам учётных записей.\n" +"\n" +"ОБЛАСТЬ ДЕЙСТВИЯ УЧЁТНОЙ ЗАПИСИ СУБЪЕКТА:\n" +"\n" +"Чтобы разрешить запрос сертификата, учётная запись (записи), которая " +"является субъектом запроса сертификата (это не обязательно должна быть та " +"учётная запись, которая фактически запрашивает сертификат), должна быть " +"включена в область действия ACL службы сертификации, которая также включает " +"целевые службу сертификации и профиль.\n" +"\n" +"Пользователей можно включить по имени, группе или категорией \"все " +"пользователи\". Узлы можно включить по имени, группе узлов или категорией " +"\"все узлы\". Службы можно включить по имени службы или категорией \"все " +"службы\". ACL служб сертификации могут быть связаны с одним типом учётных " +"записей или с несколькими типами.\n" +"\n" +"ОБЛАСТЬ ДЕЙСТВИЯ СЛУЖБЫ СЕРТИФИКАЦИИ:\n" +"\n" +"ACL службы сертификации может быть связана с одной или несколькими службами " +"сертификации по имени или по категории \"все CA\". По соображениям " +"совместимости ACL службы сертификации без привязки к службе сертификации " +"считается связанной со службой сертификации \"ipa\" (и только с этой службой " +"сертификации).\n" +"\n" +"ОБЛАСТЬ ДЕЙСТВИЯ ПРОФИЛЯ:\n" +"\n" +"ACL службы сертификации может быть связана с одним или несколькими профилями " +"по идентификатору профиля. Идентификатор профиля — это строка без пробелов и " +"знаков препинания, она начинается с буквы, за которой следуют другие буквы, " +"цифры или символы подчёркивания (\"_\").\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Создать ACL службы сертификации \"test\", которая предоставляет всем " +"пользователям доступ к профилю \"UserCert\":\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Показать свойства именованной ACL службы сертификации:\n" +" ipa caacl-show test\n" +"\n" +" Создать ACL службы сертификации, чтобы разрешить пользователю \"alice\" " +"использовать профиль \"DNP3\":\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Отключить ACL службы сертификации:\n" +" ipa caacl-disable test\n" +"\n" +" Удалить ACL службы сертификации:\n" +" ipa caacl-del test\n" -msgid "Maximum ticket life (seconds)" -msgstr "Максимальный срок жизни билета (в секундах)" +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" +"\n" +"Управление правилами CA ACL.\n" +"\n" +"Этот подключаемый модуль используется для определения правил, которые " +"управляют тем, для каких учётных записей разрешено выдавать сертификаты с " +"помощью конкретного профиля сертификатов.\n" +"\n" +"СИНТАКСИС ИДЕНТИФИКАТОРА ПРОФИЛЯ:\n" +"\n" +"Идентификатор профиля — это строка без пробелов и знаков препинания, она " +"начинается с буквы, за которой следуют другие буквы, цифры или символы " +"подчёркивания (\"_\").\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Создать ACL службы сертификации \"test\", которая предоставляет всем " +"пользователям доступ к профилю \"UserCert\":\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Показать свойства именованной ACL службы сертификации:\n" +" ipa caacl-show test\n" +"\n" +" Создать ACL службы сертификации, чтобы разрешить пользователю \"alice\" " +"использовать профиль \"DNP3\":\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Отключить ACL службы сертификации:\n" +" ipa caacl-disable test\n" +"\n" +" Удалить ACL службы сертификации:\n" +" ipa caacl-del test\n" -msgid "Max renew" -msgstr "Максимальный срок для обновления" +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" +"\n" +"Управление службами сертификации\n" -msgid "Maximum renewable age (seconds)" -msgstr "Максимальный срок для обновления (в секундах)" +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" +"\n" +"Управление конфигурацией и правилами сопоставления сертификатов с записями " +"пользователей.\n" -msgid "Modify Kerberos ticket policy." -msgstr "Изменить политику билетов Kerberos." +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" +"\n" +"Управление профилями сертификатов\n" +"\n" +"Профили сертификатов используются центром сертификации (Certificate " +"Authority, CA) во время подписи сертификатов, чтобы определить, является ли " +"приемлемым запрос подписи сертификата (Certificate Signing Request, CSR), и, " +"если это так, определить, какие возможности и расширения будут предоставлены " +"сертификатом.\n" +"\n" +"Формат профиля сертификатов — это формат в виде списка свойств, который " +"распознаётся Dogtag или системой сертификации центра сертификации Red Hat.\n" +"\n" +"СИНТАКСИС ИДЕНТИФИКАТОРА ПРОФИЛЯ:\n" +"\n" +"Идентификатор профиля — это строка без пробелов и знаков препинания, она " +"начинается с буквы, за которой следуют другие буквы, цифры или символы " +"подчёркивания (\"_\").\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Импортировать профиль, в котором не будут храниться выданные сертификаты:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Удалить профиль сертификатов:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Показать сведения о профиле:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Сохранить конфигурацию профиля в файл:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Поиск профилей, в которых не хранятся сертификаты:\n" +" ipa certprofile-find --store=false\n" +"\n" +"ФОРМАТ КОНФИГУРАЦИИ ПРОФИЛЯ:\n" +"\n" +"Формат конфигурации профиля — это формат в виде необработанного списка " +"свойств, который используется системой сертификации Dogtag Certificate " +"System. Поддержка формата XML не предусмотрена.\n" +"\n" +"К профилям под управлением IPA применяются следующие ограничения:\n" +"\n" +"- При импорте профиля значение поля \"profileId\", если это поле имеется, " +"должно совпадать с идентификатором, указанным в командной строке.\n" +"\n" +"- Значением поля \"classId\" должно быть \"caEnrollImpl\".\n" +"\n" +"- Значением поля \"auth.instance_id\" должно быть \"raCertAuth\".\n" +"\n" +"- Должны использоваться входной класс \"certReqInputImpl\" и выходной класс " +"\"certOutputImpl\".\n" -msgid "Reset Kerberos ticket policy to the default values." -msgstr "Восстановить значения политики билетов Kerberos по умолчанию." +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" +"\n" +"Управление профилями сертификатов\n" +"\n" +"Профили сертификатов используются центром сертификации (Certificate " +"Authority, CA) во время подписи сертификатов, чтобы определить, является ли " +"приемлемым запрос подписи сертификата (Certificate Signing Request, CSR), и, " +"если это так, определить, какие возможности и расширения будут предоставлены " +"сертификатом.\n" +"\n" +"Формат профиля сертификатов — это формат в виде списка свойств, который " +"распознаётся Dogtag или системой сертификации центра сертификации Red Hat.\n" +"\n" +"СИНТАКСИС ИДЕНТИФИКАТОРА ПРОФИЛЯ:\n" +"\n" +"Идентификатор профиля — это строка без пробелов и знаков препинания, она " +"начинается с буквы, за которой следуют другие буквы, цифры или символы " +"подчёркивания (\"_\").\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Импортировать профиль, в котором не будут храниться выданные сертификаты:\n" +" ipa certprofile-import ShortLivedUserCert\n" +" --file UserCert.profile --desc \"User Certificates\"\n" +" --store=false\n" +"\n" +" Удалить профиль сертификатов:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Показать сведения о профиле:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Сохранить конфигурацию профиля в файл:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Поиск профилей, в которых не хранятся сертификаты:\n" +" ipa certprofile-find --store=false\n" +"\n" +"ФОРМАТ КОНФИГУРАЦИИ ПРОФИЛЯ:\n" +"\n" +"Формат конфигурации профиля — это формат в виде необработанного списка " +"свойств, который используется системой сертификации Dogtag Certificate " +"System. Поддержка формата XML не предусмотрена.\n" +"\n" +"К профилям под управлением IPA применяются следующие ограничения:\n" +"\n" +"- При импорте профиля значение поля \"profileId\", если это поле имеется, " +"должно совпадать с идентификатором, указанным в командной строке.\n" +"\n" +"- Значением поля \"classId\" должно быть \"caEnrollImpl\".\n" +"\n" +"- Значением поля \"auth.instance_id\" должно быть \"raCertAuth\".\n" +"\n" +"- Должны использоваться входной класс \"certReqInputImpl\" и выходной класс " +"\"certOutputImpl\".\n" -msgid "Display the current Kerberos ticket policy." -msgstr "Показать текущую политику билетов Kerberos." +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" +"\n" +"Управление записями зон и ресурсов DNS.\n" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" +"\n" +"Управление токенами OTP.\n" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" +"\n" +"Управление прокси-серверами RADIUS.\n" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" +"\n" +"Управление токенами YubiKey.\n" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" +"\n" +"Управление хранилищами.\n" + +msgid "" +"\n" +"Managed permissions\n" +msgstr "" +"\n" +"Управляемые разрешения\n" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" +"\n" +"Управлять расположениями DNS\n" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" +"\n" +"Управлять конфигурацией DNS-сервера\n" msgid "" "\n" @@ -6732,138 +8148,199 @@ msgstr "" "записи будет добавляться собственная запись, а также отчёт по каждому " "обновлению группы пользователей по умолчанию.\n" -msgid "Migrate users and groups from DS to IPA." -msgstr "Перенести данные пользователей и групп из DS в IPA" - -msgid "LDAP URI" -msgstr "URI LDAP" - -msgid "LDAP URI of DS server to migrate from" -msgstr "URI LDAP сервера DS, с которого будет осуществляться миграция" - -msgid "bind password" -msgstr "Привязка пароля " - -msgid "Bind DN" -msgstr "Привязка DN" - -msgid "User container" -msgstr "Контейнер пользователей" - -msgid "DN of container for users in DS relative to base DN" -msgstr "DN контейнера для пользователей в DS относительно базового DN" - -msgid "Group container" -msgstr "Контейнер групп" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "DN контейнера для групп в DS относительно базового DN" - -msgid "User object class" -msgstr "Класс объекта пользователя" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "Классы объектов, использованные для поиска записей пользователей в DS" - -msgid "Group object class" -msgstr "Класс объектов группы" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "Классы объектов, использованные для поиска записей групп в DS" - -msgid "Ignore user object class" -msgstr "Игнорировать класс объектов пользователя" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "" -"Классы объектов, которые следует игнорировать для записей пользователей в DS" - -msgid "Ignore user attribute" -msgstr "Игнорировать атрибут пользователя" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "Атрибуты, которые следует игнорировать для записей пользователей в DS" - -msgid "Ignore group object class" -msgstr "Игнорировать класс объектов группы" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "Классы объектов, которые следует игнорировать для записей групп в DS" - -msgid "Ignore group attribute" -msgstr "Игнорировать атрибут группы" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "Атрибуты, которые следует игнорировать для записей групп в DS" - -msgid "Overwrite GID" -msgstr "Перезаписать GID" - msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" msgstr "" -"При переносе группы, которая уже существует в домене IPA, перезаписать GID " -"группы и сообщить об успешном выполнении" - -msgid "LDAP schema" -msgstr "Схема LDAP" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" -"Схема, используемая на LDAP-сервере. Поддерживаются значения RFC2307 и " -"RFC2307bis. Значение по умолчанию: RFC2307bis." - -msgid "Continue" -msgstr "Продолжить" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" -"Непрерывный режим работы. Сообщения об ошибках выводятся, но процесс " -"продолжается." - -msgid "Base DN" -msgstr "Базовое DN" - -msgid "Base DN on remote LDAP server" -msgstr "Базовое DN на удалённом LDAP-сервере" - -msgid "Ignore compat plugin" -msgstr "Игнорировать подключаемый модуль совместимости" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" -"Разрешает миграцию несмотря на использование подключаемого модуля " -"совместимости" - -msgid "CA certificate" -msgstr "Сертификат CA" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "Загрузить сертификат CA LDAP-сервера из ФАЙЛА" - -msgid "groups to exclude from migration" -msgstr "группы, которые следует исключить из миграции" - -msgid "users to exclude from migration" -msgstr "пользователи, которых следует исключить из миграции" - -msgid "Lists of objects migrated; categorized by type." -msgstr "Список перенесённых объектов; упорядочены по типу" - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "Список объектов, которые не удалось перенести; упорядочены по типу" - -msgid "False if migration mode was disabled." -msgstr "Значение \"False\", если режим миграции отключён." - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" -"Значение \"False\", если миграцию не удалось выполнить из-за включённого " -"подключаемого модуля совместимости." +"\n" +"Переход на IPA\n" +"\n" +"Перенос пользователей и групп с LDAP-сервера на IPA.\n" +"\n" +"Посылает запрос LDAP к удалённому серверу с целью поиска пользователей и " +"групп в контейнере. Чтобы перенести пароли, следует выполнить привязку к " +"серверу от имени пользователя, который может читать атрибут userPassword на " +"удалённом сервере. Перечень таких пользователей обычно ограничен " +"администраторами высшего уровня, в частности cn=Directory Manager на 389-ds " +"(пользователь bind по умолчанию).\n" +"\n" +"Контейнер пользователей по умолчанию: ou=People.\n" +"\n" +"Контейнер групп по умолчанию: ou=Groups.\n" +"\n" +"Записи пользователей и групп, которые уже существуют на IPA-сервере, будут " +"пропущены.\n" +"\n" +"Две схемы LDAP определяют, как хранятся записи участников группы: RFC2307 и\n" +"RFC2307bis. RFC2307bis использует атрибуты member и uniquemember для " +"определения участников группы, а RFC2307 использует атрибут memberUid. По " +"умолчанию используется схема RFC2307bis.\n" +"\n" +"С помощью приложения compat IPA можно повторно форматировать данные для " +"систем, в которых не предусмотрена поддержка RFC2307bis. Рекомендуется " +"отключать это приложение во время переноса, чтобы уменьшить нагрузку на " +"систему. Его можно включить снова после переноса. Чтобы перенести данные с " +"включённым приложением, используйте параметр \"--with-compat\".\n" +"\n" +"У перенесённых пользователей нет учётных данных Kerberos, только пароль " +"LDAP. Для завершения процесса переноса пользователям следует открыть " +"страницу http://ipa.example.com/ipa/migration и пройти аутентификацию с " +"помощью пароля LDAP, чтобы создать свои записи учётных данных Kerberos.\n" +"\n" +"По умолчанию перенос отключён. Чтобы включить его, используйте команду ipa " +"config-mod:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"Если базовое DN не будет предоставлено с помощью --basedn, IPA будет " +"использовать значение defaultNamingContext, если оно установлено, или первое " +"значение в наборе namingContexts в корневой папке удалённого LDAP-сервера.\n" +"\n" +"Записи пользователей добавляются в группу пользователей по умолчанию. " +"Процесс такого добавления может быть довольно длительным, поэтому при " +"переносе он выполняется в пакетном режиме, пакетами по 100 пользователей. В " +"результате возникнет определённый период, когда записи пользователей уже " +"добавлены в IPA, но эти пользователи ещё не стали участниками группы " +"пользователей по умолчанию.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +"Простейший перенос, приняты все значения по умолчанию:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +"Определение контейнеров пользователей и групп. Можно использовать для " +"переноса данных пользователей и групп с сервера IPA версии 1:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts'\n" +" --group-container='cn=groups,cn=accounts'\n" +" ldap://ds.example.com:389\n" +"\n" +"Так как на сервере IPA версии 2 уже предусмотрены предопределённые группы, " +"которые могут совпадать с перенесёнными с сервера (IPA версии 1) группами " +"(например, admins, ipausers), пользователи из таких групп могут быть " +"перенесены в неизвестную группу (unknown) на новом сервере IPA версии 2.\n" +"Используйте параметр --group-overwrite-gid, чтобы перезаписать идентификатор " +"группы (GID) уже созданных групп и предотвратить эту проблему:\n" +" ipa migrate-ds --group-overwrite-gi\n" +" --user-container='cn=users,cn=accounts'\n" +" --group-container='cn=groups,cn=accounts'\n" +" ldap://ds.example.com:389\n" +"\n" +"Перенесённые данные пользователей и групп могут содержать классы объектов и " +"сопутствующие атрибуты, неизвестные серверу IPA версии 2. Эти классы " +"объектов и атрибуты можно исключить из процедуры переноса данных:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts'\n" +" --group-container='cn=groups,cn=accounts'\n" +" --user-ignore-objectclass=radiusprofile\n" +" --user-ignore-attribute=radiusgroupname\n" +" ldap://ds.example.com:389\n" +"\n" +"ВЕДЕНИЕ ЖУРНАЛА\n" +"\n" +"Во время переноса предупреждения и сообщения об ошибках будут добавляться в " +"журнал ошибок Apache. После завершения переноса следует ознакомиться с " +"соответствующим файлом, чтобы исправить или выяснить причины ошибок, которые " +"могли произойти. \n" +"\n" +"Для каждого пакета из 100 перенесённых записей пользователей будет показано " +"информационное сообщение, предназначенное для оценки прогресса обработки и " +"определения её продолжительности. \n" +"\n" +"Если определён уровень ведения журнала debug путём установления debug = True " +"в /etc/ipa/default.conf или в /etc/ipa/server.conf, для каждой перенесённой " +"записи будет добавляться собственная запись, а также отчёт по каждому " +"обновлению группы пользователей по умолчанию.\n" msgid "" "\n" @@ -6872,32 +8349,61 @@ msgstr "" "\n" "Прочие подключаемые модули\n" -msgid "Show environment variables." -msgstr "Показать переменные окружения." - -msgid "Forward to server instead of running locally" -msgstr "Перенаправить на сервер вместо локального выполнения" +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" +"\n" +"Изменить диапазон идентификаторов.\n" +" \n" +"======= \n" +"ПРЕДУПРЕЖДЕНИЕ:\n" +"\n" +"Подключаемый модуль DNA в 389-ds выделяет идентификаторы на основе " +"диапазонов, настроенных для локального домена. В текущей версии сам " +"подключаемый модуль DNA *нельзя* перенастраивать на основе локальных " +"диапазонов, установленных с помощью этого семейства команд.\n" +"\n" +"Для нового локального диапазона следует вручную изменить настройки " +"конфигурации подключаемого модуля DNA. В частности, следует изменить атрибут " +"dnaNextRange \"cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config\" таким " +"образом, чтобы он соответствовал новому диапазону.\n" +"=======" msgid "" -"retrieve and print all attributes from the server. Affects command output." +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " msgstr "" -"Получить и вывести все атрибуты, возвращаемые сервером. Влияет на содержимое " -"результата исполнения команды." - -msgid "Total number of variables env (>= count)" -msgstr "Количество переменных env (>= count)" - -msgid "Number of variables returned (<= total)" -msgstr "Количество возвращённых переменных (<= total)" - -msgid "Show all loaded plugins." -msgstr "Показать все загруженные подключаемые модули." - -msgid "Dictionary mapping plugin names to bases" -msgstr "Словарь, сопоставляющий имена подключаемых модулей с базовыми" - -msgid "Number of plugins loaded" -msgstr "Количество загруженных подключаемых модулей" +"\n" +"Изменить отношение доверия (для будущего использования).\n" +"\n" +" В текущей версии для изменения атрибутов LDAP доступен только параметр " +"по умолчанию. В последующих версиях будут добавлены более специфичные " +"параметры.\n" +" " msgid "" "\n" @@ -6946,105 +8452,125 @@ msgstr "" " Удалить сетевую группу:\n" " ipa netgroup-del admins\n" -msgid "Netgroup name" -msgstr "Имя сетевой группы" - -msgid "Netgroup description" -msgstr "Описание сетевой группы" - -msgid "NIS domain name" -msgstr "Имя домена NIS" - -msgid "IPA unique ID" -msgstr "Уникальный ID IPA" - -msgid "Member netgroups" -msgstr "Сетевые группы — участники" - -msgid "Indirect Member netgroups" -msgstr "Сетевые группы с непрямым участием" - -msgid "Member User" -msgstr "Пользователь-участник" - -msgid "Member Group" -msgstr "Группа-участник" - -msgid "Member Host" -msgstr "Узел-участник" - -msgid "Member Hostgroup" -msgstr "Группа узлов — участник" - -msgid "Add a new netgroup." -msgstr "Добавить новую сетевую группу." - -msgid "Add members to a netgroup." -msgstr "Добавить участников в сетевую группу." - -msgid "member netgroup" -msgstr "сетевая группа — участник" - -msgid "netgroups to add" -msgstr "сетевые группы, которые следует добавить" - -msgid "Delete a netgroup." -msgstr "Удалить сетевую группу." - -msgid "Search for a netgroup." -msgstr "Поиск сетевой группы." - -msgid "search for managed groups" -msgstr "Поиск управляемых групп" - -msgid "Search for netgroups with these member netgroups." -msgstr "Поиск сетевых групп с этими сетевыми группами — участниками." - -msgid "Search for netgroups without these member netgroups." -msgstr "Поиск сетевых групп без этих сетевых групп — участников." - -msgid "Search for netgroups with these member users." -msgstr "Поиск сетевых групп с этими пользователями-участниками." - -msgid "Search for netgroups without these member users." -msgstr "Поиск сетевых групп без этих пользователей-участников." - -msgid "Search for netgroups with these member groups." -msgstr "Поиск сетевых групп с этими группами-участниками." - -msgid "Search for netgroups without these member groups." -msgstr "Поиск сетевых групп без этих групп-участников." - -msgid "Search for netgroups with these member hosts." -msgstr "Поиск сетевых групп с этими узлами-участниками." - -msgid "Search for netgroups without these member hosts." -msgstr "Поиск сетевых групп без этих узлов-участников." - -msgid "Search for netgroups with these member host groups." -msgstr "Поиск сетевых групп с этими группами узлов — участниками." - -msgid "Search for netgroups without these member host groups." -msgstr "Поиск сетевых групп без этих групп узлов — участников." - -msgid "Search for netgroups with these member of netgroups." -msgstr "Поиск сетевых групп, которые являются участниками этой сетевой группы." - -msgid "Search for netgroups without these member of netgroups." +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" msgstr "" -"Поиск сетевых групп, которые не являются участниками этой сетевой группы." +"\n" +"Сетевые группы\n" +"\n" +"Сетевая группа — это группа, которая используется для проверки разрешений. " +"Она может содержать как значения пользователей, так и значения узлов.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую сетевую группу:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Добавить участников в сетевую группу:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +"Удалить участника из сетевой группы:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +"Показать сведения о сетевой группе:\n" +" ipa netgroup-show admins\n" +"\n" +" Удалить сетевую группу:\n" +" ipa netgroup-del admins\n" -msgid "Modify a netgroup." -msgstr "Изменить сетевую группу." +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" +"\n" +"Обратите внимание, что код причины 7 не используется. Подробные сведения в " +"RFC 5280:\n" -msgid "Remove members from a netgroup." -msgstr "Удалить участников из сетевой группы." +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" +"\n" +"Обратите внимание на разницу между атрибутами и записями. Разрешения " +"являются независимыми, поэтому возможность добавить пользователя не означает " +"возможность изменять запись добавленного пользователя.\n" -msgid "netgroups to remove" -msgstr "сетевые группы, которые следует удалить" +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" +"\n" +"Токены OTP\n" -msgid "Display information about a netgroup." -msgstr "Показать сведения о сетевой группе." +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " +"Hat\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +"Токены OTP\n" +"\n" +"Управление токенами OTP.\n" +"\n" +"В IPA реализована поддержка использования токенов OTP для многофакторной " +"аутентификации. Этот код позволяет управлять токенами OTP.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новый токен:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Проверить токен:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Изменить поставщика:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " +"Hat\"\n" +"\n" +" Удалить токен:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" msgid "" "\n" @@ -7100,279 +8626,211 @@ msgstr "" " Изменить максимальную продолжительность окна HOTP-синхронизации на 50:\n" " ipa hotpconfig-mod --hotp-sync-window=50\n" -msgid "TOTP authentication Window" -msgstr "Окно TOTP-аутентификации" - -msgid "TOTP authentication time variance (seconds)" -msgstr "Отклонение по времени TOTP-аутентификации (в секундах)" - -msgid "TOTP Synchronization Window" -msgstr "Окно TOTP-синхронизации" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "Отклонение по времени TOTP-синхронизации (в секундах)" - -msgid "HOTP Authentication Window" -msgstr "Окно HOTP-аутентификации" - -msgid "HOTP authentication skip-ahead" -msgstr "Пропустить HOTP-аутентификацию и перейти далее" - -msgid "HOTP Synchronization Window" -msgstr "Окно HOTP-синхронизации" - -msgid "HOTP synchronization skip-ahead" -msgstr "Пропустить HOTP-синхронизацию и перейти далее" - -msgid "Modify OTP configuration options." -msgstr "Изменить параметры конфигурации OTP." - -msgid "Show the current OTP configuration." -msgstr "Показать текущую конфигурацию OTP." - msgid "" "\n" -"OTP Tokens\n" +"Password policy\n" "\n" -"Manage OTP tokens.\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" "\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" "\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" "\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" "\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" msgstr "" "\n" -"Токены OTP\n" +"Политика паролей\n" "\n" -"Управление токенами OTP.\n" +"Политика паролей устанавливает ограничения для паролей IPA, включая " +"максимальный срок действия, минимальный срок действия, количество паролей " +"для сохранения в журнале, количество требуемых классов символов (для более " +"надёжных паролей) и минимальную длину пароля.\n" "\n" -"В IPA реализована поддержка использования токенов OTP для многофакторной " -"аутентификации. Этот код позволяет управлять токенами OTP.\n" +"По умолчанию имеется одна, глобальная политика для всех пользователей. Также " +"можно создать политику паролей для применения к группе. К каждому " +"пользователю применяется только одна политика паролей: групповая или " +"глобальная. Групповая политика автономна, она не является супермножеством " +"глобальной политики в сочетании с пользовательскими настройками.\n" +"\n" +"Для каждой групповой политики паролей должно быть установлено уникальное " +"значение приоритета. Если пользователь находится в нескольких группах, для " +"которых имеются политики паролей, этот приоритет определит, какая политика " +"паролей применяется. Чем меньше значение, тем выше приоритет политики.\n" +"\n" +"Групповые политики паролей автоматически удаляются, когда удаляются группы, " +"с которыми они связаны.\n" "\n" "ПРИМЕРЫ:\n" "\n" -" Добавить новый токен:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +" Изменить глобальную политику:\n" +" ipa pwpolicy-mod --minlength=10\n" "\n" -" Проверить токен:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"Добавить новую групповую политику паролей:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" "\n" -" Изменить поставщика:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" +" Показать глобальную политику паролей:\n" +" ipa pwpolicy-show\n" "\n" -" Удалить токен:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" - -msgid "Unique ID" -msgstr "Уникальный идентификатор" - -msgid "Type of the token" -msgstr "Тип токена" - -msgid "Token description (informational only)" -msgstr "Описание токена (только для сведения)" - -msgid "Owner" -msgstr "Владелец" - -msgid "Assigned user of the token (default: self)" -msgstr "Назначенный пользователь токена (значение по умолчанию: self)" - -msgid "Manager" -msgstr "Руководитель" - -msgid "Assigned manager of the token (default: self)" -msgstr "Назначенный руководитель токена (значение по умолчанию: self)" - -msgid "Disabled" -msgstr "Отключён" - -msgid "Mark the token as disabled (default: false)" -msgstr "Отметить токен как отключённый (значение по умолчанию: false)" - -msgid "Validity start" -msgstr "Начало срока действия" - -msgid "First date/time the token can be used" -msgstr "Начало срока действия токена (день и время)" - -msgid "Validity end" -msgstr "Окончание срока действия" - -msgid "Last date/time the token can be used" -msgstr "Окончание срока действия токена (день и время)" - -msgid "Vendor" -msgstr "Поставщик" - -msgid "Token vendor name (informational only)" -msgstr "Имя поставщика токена (только для сведения)" - -msgid "Model" -msgstr "Модель" - -msgid "Token model (informational only)" -msgstr "Модель токена (только для сведения)" - -msgid "Serial" -msgstr "Серийный номер" - -msgid "Token serial (informational only)" -msgstr "Серийный номер токена (только для сведения)" - -msgid "Token secret (Base32; default: random)" -msgstr "Секрет токена (Base32; значение по умолчанию: случайный)" - -msgid "Token hash algorithm" -msgstr "Алгоритм хеширования токена" - -msgid "Digits" -msgstr "Цифры" - -msgid "Number of digits each token code will have" -msgstr "Количество цифр, которое будет содержать каждый код токена" - -msgid "Clock offset" -msgstr "Смещение времени" - -msgid "TOTP token / IPA server time difference" -msgstr "Разница времени между токеном TOTP и сервером IPA" - -msgid "Clock interval" -msgstr "Временной интервал" - -msgid "Length of TOTP token code validity" -msgstr "Продолжительность действия кода токена TOTP" - -msgid "Counter" -msgstr "Счётчик" - -msgid "Initial counter for the HOTP token" -msgstr "Начальный счётчик токена HOTP" - -msgid "Add a new OTP token." -msgstr "Добавить новый токен OTP." - -msgid "(deprecated)" -msgstr "(больше не поддерживается)" - -msgid "Do not display QR code" -msgstr "Не показывать QR-код" - -msgid "Add users that can manage this token." -msgstr "Добавить пользователей, которые могут управлять этим токеном." - -msgid "Delete an OTP token." -msgstr "Удалить токен OTP." - -msgid "Search for OTP token." -msgstr "Поиск токена OTP." - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "Результаты должны содержать только атрибут главного ключа (\"id\")" - -msgid "Modify a OTP token." -msgstr "Изменить токен OTP." - -msgid "Rename the OTP token object" -msgstr "Переименовать объект токена OTP." - -msgid "Display information about an OTP token." -msgstr "Показать сведения о токене OTP." +" Показать групповую политику паролей:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Показать политику, которая применяется к указанному пользователю:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Изменить групповую политику паролей:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" msgid "" "\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +"Permissions\n" msgstr "" "\n" -"Токены YubiKey\n" -"\n" -"Управление токенами YubiKey.\n" -"\n" -"Этот код является расширением подключаемого модуля otptoken и предоставляет " -"поддержку прямого чтения или записи токенов YubiKey.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новый токен:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +"Разрешения\n" msgid "" "\n" -"Set a user's password\n" +"Permissions\n" "\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" "\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" "\n" "EXAMPLES:\n" "\n" -" To reset your own password:\n" -" ipa passwd\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" "\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" msgstr "" "\n" -"Установка пароля пользователя\n" +"Разрешения\n" "\n" -"Если пароль пользователя изменяет кто-то кроме самого пользователя " -"(например, его сбрасывает служба технической поддержки), пароль потребуется " -"изменить при первом использовании. Это делается для того, чтобы пароль знал " -"только конечный пользователь.\n" +"С помощью разрешений можно очень точно делегировать права доступа. " +"Разрешение представляет собой удобную для восприятия форму 389-ds ACI " +"(правила управления доступом).\n" +"Разрешение даёт право выполнять определённую задачу, например, добавлять " +"пользователей, изменять группы и так далее.\n" "\n" -"Политика паролей IPA управляет частотой смены пароля, требованиями к " -"надёжности пароля и размером журнала паролей.\n" +"Разрешение не может содержать другие разрешения.\n" +"\n" +"* Разрешение даёт доступ для чтения, записи, добавления или удаления.\n" +"* Привилегия объединяет схожие разрешения (например, все разрешения, которые " +"требуются для добавления пользователя).\n" +"* Роль даёт набор привилегий пользователям, группам, узлам или группам " +"узлов.\n" +"\n" +"Разрешение состоит из нескольких разных частей:\n" +"\n" +"1. Имя разрешения.\n" +"2. Цель разрешения.\n" +"3. Права, предоставленные разрешением.\n" +"\n" +"Права определяют, какие действия разрешены. Варианты прав (права могут " +"сочетать в себе несколько вариантов):\n" +"1. write - записать один или несколько атрибутов.\n" +"2. read - прочитать один или несколько атрибутов.\n" +"3. add - добавить в дерево новую запись.\n" +"4. delete - удалить существующую запись.\n" +"5. all - предоставляются все разрешения.\n" +"\n" +"По умолчанию доступ для чтения разрешён для большинства атрибутов, поэтому " +"потребность в использовании этого разрешения вряд ли будет возникать часто.\n" +"\n" +"Обратите внимание на разницу между атрибутами и записями. Разрешения " +"являются независимыми, поэтому возможность добавить пользователя не означает " +"возможность изменять запись добавленного пользователя.\n" +"\n" +"Существует ряд разрешённых целей:\n" +"1. type: тип объекта (пользователь, группа и так далее).\n" +"2. memberof: участник группы или группы узлов.\n" +"3. filter: фильтр LDAP.\n" +"4. subtree: фильтр LDAP, определяющий часть LDAP DIT. Это супермножество " +"цели \"type\".\n" +"5. targetgroup: предоставление доступа для изменения определённой группы " +"(например, предоставление прав доступа для управления участием в группе).\n" "\n" "ПРИМЕРЫ:\n" "\n" -" Чтобы сбросить свой собственный пароль:\n" -" ipa passwd\n" +" Добавить разрешение на создание пользователей:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" "\n" -" Чтобы изменить пароль другого пользователя:\n" -" ipa passwd tuser1\n" - -msgid "Set a user's password." -msgstr "Установить пароль пользователя." - -msgid "New Password" -msgstr "Новый пароль" - -msgid "Current Password" -msgstr "Текущий пароль" - -msgid "OTP" -msgstr "OTP" - -msgid "One Time Password" -msgstr "Одноразовый пароль" +" Добавить разрешение на управление участием в группе:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" msgid "" "\n" @@ -7516,140 +8974,17 @@ msgstr "" " ipa permission-add --attrs=member --permissions=write --type=group " "\"Manage Group Members\"\n" -msgid "Permission name" -msgstr "Имя разрешения" - -msgid "Granted rights" -msgstr "Предоставленные права" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" -"Права, которые следует предоставить (read, search, compare, write, add, " -"delete, all)" - -msgid "Effective attributes" -msgstr "Действующие атрибуты" - -msgid "All attributes to which the permission applies" -msgstr "Все атрибуты, к которым применяется разрешение" - -msgid "Included attributes" -msgstr "Включённые атрибуты" - -msgid "User-specified attributes to which the permission applies" -msgstr "Определённые пользователем атрибуты, к которым применяется разрешение" - -msgid "Excluded attributes" -msgstr "Исключённые атрибуты" - msgid "" -"User-specified attributes to which the permission explicitly does not apply" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" msgstr "" -"Определённые пользователем атрибуты, к которым явно не применяется разрешение" - -msgid "Default attributes" -msgstr "Атрибуты по умолчанию" - -msgid "Attributes to which the permission applies by default" -msgstr "Атрибуты, к которым по умолчанию применяется разрешение" - -msgid "Bind rule type" -msgstr "Тип правила привязки" - -msgid "Subtree to apply permissions to" -msgstr "Поддерево, к которому следует применить разрешения" - -msgid "Extra target filter" -msgstr "Дополнительный фильтр целей" - -msgid "Raw target filter" -msgstr "Необработанный фильтр целей" - -msgid "All target filters, including those implied by type and memberof" -msgstr "Все фильтры целей, включая те, которые применяются по type и memberof" - -msgid "Target DN" -msgstr "DN цели" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" -"Дополнительное DN, к которому следует применить разрешение (должно " -"находиться в поддереве, но может ещё не существовать)" - -msgid "Member of group" -msgstr "Участник группы" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "Целевые участники группы (устанавливает фильтр целей memberOf)" - -msgid "User group to apply permissions to (sets target)" -msgstr "" -"Группа пользователей, к которой следует применить разрешения (устанавливает " -"target)" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "Тип объекта IPA (устанавливает фильтр целей subtree и objectClass)" - -msgid "Deprecated; use extratargetfilter" -msgstr "Больше не поддерживается; используйте extratargetfilter" - -msgid "Deprecated; use ipapermlocation" -msgstr "Больше не поддерживается; используйте ipapermlocation" - -msgid "Deprecated; use ipapermright" -msgstr "Больше не поддерживается; используйте ipapermright" - -msgid "Granted to Privilege" -msgstr "Предоставлена привилегия" - -msgid "Indirect Member of roles" -msgstr "Участник ролей с непрямым участием" - -msgid "Add a new permission." -msgstr "Добавить новое разрешение." - -msgid "Add members to a permission." -msgstr "Добавить участников в разрешение." - -msgid "member privilege" -msgstr "привилегия участника" - -msgid "privileges to add" -msgstr "привилегии, которые следует добавить" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "" -"Добавить разрешение на доступ к системе без использования ACI (внутренняя " -"команда)." - -msgid "Permission flags" -msgstr "Флаги разрешения" - -msgid "Delete a permission." -msgstr "Удалить разрешение." - -msgid "force delete of SYSTEM permissions" -msgstr "Принудительно удалить разрешения SYSTEM" - -msgid "Search for permissions." -msgstr "Поиск разрешений." - -msgid "Modify a permission." -msgstr "Изменить разрешение." - -msgid "Rename the permission object" -msgstr "Переименовать объект разрешения" - -msgid "Remove members from a permission." -msgstr "Удалить участников из разрешения." - -msgid "privileges to remove" -msgstr "привилегии, которые следует удалить" - -msgid "Display information about a permission." -msgstr "Показать сведения о разрешении." +"\n" +"Разрешения, которые по умолчанию поставляются с IPA, можно называть " +"\"управляемыми\". Имеется заданный по умолчанию набор атрибутов, к которым " +"они применяются, но администратор может добавлять в набор или удалять из " +"него отдельные атрибуты.\n" msgid "" "\n" @@ -7706,54 +9041,196 @@ msgstr "" " IPA server version 2.1.9. API version 2.20\n" " -----------------------------------------------------\n" -msgid "Ping a remote server." -msgstr "Проверить связь с удалённым сервером." - msgid "" "\n" -"Kerberos pkinit options\n" +"Ping the remote IPA server to ensure it is running.\n" "\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" "\n" "EXAMPLES:\n" "\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" "\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" msgstr "" "\n" -"Параметры команды pkinit Kerberos\n" +"Проверить связь с удалённым IPA-сервером, чтобы убедиться, что он работает.\n" "\n" -"Включить или отключить использование \"анонимного пользователя\" для пре-" -"аутентификации с помощью сертификатов (pkinit) путём использования учётной " -"записи WELLKNOWN/ANONYMOUS@REALM. Сервер должен быть установлен с " -"поддержкой pkinit.\n" +"Команда ping отправляет эхо-запрос на IPA-сервер. Сервер возвращает сведения " +"о своей версии. Эти данные используются клиентом IPA для подтверждения того, " +"что сервер доступен и принимает запросы.\n" +"\n" +"Сервер из xmlrpc_uri in /etc/ipa/default.conf проверяется первым.\n" +"Если он не отвечает, клиент пытается установить связь с любым сервером, " +"указанным в записях SRV ldap в DNS.\n" "\n" "ПРИМЕРЫ:\n" "\n" -" Включить использование \"анонимного пользователя\" для pkinit:\n" -" ipa pkinit-anonymous enable\n" +" Проверить связь с IPA-сервером:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" "\n" -" Включить использование \"анонимного пользователя\" для pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"Более подробные сведения об использовании \"анонимного пользователя\" для " -"pkinit:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +" Проверить связь с IPA-сервером и получить подробные данные:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" -msgid "Enable or Disable Anonymous PKINIT." +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\"," +"\"all\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" msgstr "" -"Включить или отключить использование \"анонимного пользователя\" для пре-" -"аутентификации (PKINIT)." +"\n" +"Подключаемый модуль для выполнения нескольких вызовов ipa с помощью одного " +"удалённого вызова процедур \n" +"\n" +"Чтобы запустить этот код на легком сервере (lite-server), выполните " +"следующие команды:\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"где содержимое файла batch_request.json соответствует следующему примеру\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\"," +"\"all\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"Формат ответа точно так же распределяется по уровням вложенности. На верхнем " +"уровне:\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"а далее находится вложенный ответ для каждого метода команды IPA, " +"отправленного в запросе\n" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\"," +"\"all\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" +"\n" +"Подключаемый модуль для выполнения нескольких вызовов ipa с помощью одного " +"удалённого вызова процедур \n" +"\n" +"Чтобы запустить этот код на легком сервере (lite-server), выполните " +"следующие команды:\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"где содержимое файла batch_request.json соответствует следующему примеру\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\"," +"\"all\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"Формат ответа точно так же распределяется по уровням вложенности. На верхнем " +"уровне:\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"а далее находится вложенный ответ для каждого метода команды IPA, " +"отправленного в запросе\n" + +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" +msgstr "" +"\n" +"Интерфейс командной строки не позволяет получить прямой доступ к " +"подключаемым модулям, команды используются для внутренней обработки\n" msgid "" "\n" @@ -7796,237 +9273,19 @@ msgstr "" "\n" "Дополнительные сведения доступны в разделах справки о ролях и разрешениях.\n" -msgid "Privilege name" -msgstr "Имя привилегии" - -msgid "Privilege description" -msgstr "Описание привилегии" - -msgid "Granting privilege to roles" -msgstr "Предоставление привилегий ролям" - -msgid "Add a new privilege." -msgstr "Добавить новую привилегию." - -msgid "Add members to a privilege." -msgstr "Добавить участников в привилегию." - -msgid "member role" -msgstr "роль участника" - -msgid "roles to add" -msgstr "роли, которые следует добавить" - -msgid "Add permissions to a privilege." -msgstr "Добавить разрешения в привилегию." - -msgid "permission" -msgstr "Разрешение" - -msgid "permissions" -msgstr "Разрешения" - -msgid "Number of permissions added" -msgstr "Количество добавленных разрешений" - -msgid "Delete a privilege." -msgstr "Удалить привилегию." - -msgid "Search for privileges." -msgstr "Поиск привилегий." - -msgid "Modify a privilege." -msgstr "Изменить привилегию." - -msgid "Rename the privilege object" -msgstr "Переименовать объект привилегии" - -msgid "Remove members from a privilege" -msgstr "Удалить участников из привилегии." - -msgid "roles to remove" -msgstr "роли, которые следует удалить" - -msgid "Remove permissions from a privilege." -msgstr "Удалить разрешения из привилегии." - -msgid "Number of permissions removed" -msgstr "Количество удалённых разрешений" - -msgid "Display information about a privilege." -msgstr "Показать сведения о привилегии." +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" +"\n" +"Предоставляет возможности самоанализа API.\n" msgid "" "\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" +"RADIUS Proxy Servers\n" msgstr "" "\n" -"Политика паролей\n" -"\n" -"Политика паролей устанавливает ограничения для паролей IPA, включая " -"максимальный срок действия, минимальный срок действия, количество паролей " -"для сохранения в журнале, количество требуемых классов символов (для более " -"надёжных паролей) и минимальную длину пароля.\n" -"\n" -"По умолчанию имеется одна, глобальная политика для всех пользователей. Также " -"можно создать политику паролей для применения к группе. К каждому " -"пользователю применяется только одна политика паролей: групповая или " -"глобальная. Групповая политика автономна, она не является супермножеством " -"глобальной политики в сочетании с пользовательскими настройками.\n" -"\n" -"Для каждой групповой политики паролей должно быть установлено уникальное " -"значение приоритета. Если пользователь находится в нескольких группах, для " -"которых имеются политики паролей, этот приоритет определит, какая политика " -"паролей применяется. Чем меньше значение, тем выше приоритет политики.\n" -"\n" -"Групповые политики паролей автоматически удаляются, когда удаляются группы, " -"с которыми они связаны.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Изменить глобальную политику:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -"Добавить новую групповую политику паролей:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Показать глобальную политику паролей:\n" -" ipa pwpolicy-show\n" -"\n" -" Показать групповую политику паролей:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Показать политику, которая применяется к указанному пользователю:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Изменить групповую политику паролей:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" - -msgid "Group" -msgstr "Группа" - -msgid "Manage password policy for specific group" -msgstr "Управление политикой паролей для определённой группы" - -msgid "Max lifetime (days)" -msgstr "Максимальный срок действия (в днях)" - -msgid "Maximum password lifetime (in days)" -msgstr "Максимальный срок действия пароля (в днях)" - -msgid "Min lifetime (hours)" -msgstr "Минимальный срок действия (в часах)" - -msgid "Minimum password lifetime (in hours)" -msgstr "Минимальный срок действия пароля (в часах)" - -msgid "History size" -msgstr "Размер журнала " - -msgid "Password history size" -msgstr "Размер журнала паролей" - -msgid "Character classes" -msgstr "Классы символов" - -msgid "Minimum number of character classes" -msgstr "Минимальное количество классов символов" - -msgid "Min length" -msgstr "Минимальная длина" - -msgid "Minimum length of password" -msgstr "Минимальная длина пароля" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "Приоритет политики (чем больше число, тем ниже приоритет)" - -msgid "Max failures" -msgstr "Максимальное количество ошибок" - -msgid "Consecutive failures before lockout" -msgstr "Количество последовательных ошибок до блокировки" - -msgid "Failure reset interval" -msgstr "Интервал сброса ошибок" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "" -"Период, по истечении которого счётчик ошибок будет сброшен (в секундах)" - -msgid "Lockout duration" -msgstr "Длительность блокировки" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "Период, в течение которого будет действовать блокировка (в секундах)" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "Результаты должны содержать только атрибут главного ключа (\"cn\")" - -msgid "Add a new group password policy." -msgstr "Добавить новую групповую политику паролей." - -msgid "Delete a group password policy." -msgstr "Удалить групповую политику паролей." - -msgid "Search for group password policies." -msgstr "Поиск групповых политик паролей." - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "Результаты должны содержать только атрибут главного ключа (\"group\")" - -msgid "Modify a group password policy." -msgstr "Изменить групповую политику паролей." - -msgid "Display information about password policy." -msgstr "Показать сведения о политике паролей." - -msgid "User" -msgstr "Пользователь" - -msgid "Display effective policy for a specific user" -msgstr "Показать действующую политику для определённого пользователя" +"Прокси-серверы RADIUS\n" msgid "" "\n" @@ -8082,59 +9341,38 @@ msgstr "" " Удалить конфигурацию:\n" " ipa radiusproxy-del MyRADIUS\n" -msgid "RADIUS proxy server name" -msgstr "Имя прокси-сервера RADIUS" +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" +"\n" +"ПОВТОРНАЯ РЕГИСТРАЦИЯ\n" +"\n" +"Если узел уже когда-то был зарегистрирован и затем утратил свою конфигурацию " +"(например, была уничтожена виртуальная машина), его можно зарегистрировать " +"повторно.\n" +"\n" +"Дополнительные сведения доступны на страницах справочника по ipa-client-" +"install.\n" +"\n" +"В запись узла при необходимости можно включить данные о его расположении, " +"типе используемой операционной системы и так далее.\n" -msgid "A description of this RADIUS proxy server" -msgstr "Описание этого прокси-сервера RADIUS" - -msgid "Server" -msgstr "Сервер" - -msgid "The hostname or IP (with or without port)" -msgstr "Имя узла или IP-адрес (с портом или без порта)" - -msgid "Secret" -msgstr "Секрет" - -msgid "The secret used to encrypt data" -msgstr "Секрет, который используется для шифрования данных" - -msgid "Timeout" -msgstr "Время ожидания" - -msgid "The total timeout across all retries (in seconds)" -msgstr "Общее время ожидания для всех повторных попыток (в секундах)" - -msgid "Retries" -msgstr "Повторные попытки" - -msgid "The number of times to retry authentication" -msgstr "Количество повторных попыток аутентификации" - -msgid "User attribute" -msgstr "Атрибут пользователя" - -msgid "The username attribute on the user object" -msgstr "Атрибут имени пользователя объекта пользователя" - -msgid "Add a new RADIUS proxy server." -msgstr "Добавить новый прокси-сервер RADIUS." - -msgid "Delete a RADIUS proxy server." -msgstr "Удалить прокси-сервер RADIUS." - -msgid "Search for RADIUS proxy servers." -msgstr "Поиск прокси-серверов RADIUS." - -msgid "Modify a RADIUS proxy server." -msgstr "Изменить прокси-сервер RADIUS." - -msgid "Rename the RADIUS proxy server object" -msgstr "Переименовать объект прокси-сервера RADIUS" - -msgid "Display information about a RADIUS proxy server." -msgstr "Показать сведения о прокси-сервере RADIUS." +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" +"\n" +"Повысить уровень домена IPA.\n" msgid "" "\n" @@ -8177,23 +9415,227 @@ msgstr "" " Удалить домен из списка доменов области:\n" " ipa realmdomains-mod --del-domain=olddomain.com\n" -msgid "Domain" -msgstr "Домен" +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" +"\n" +"Домены области\n" +"\n" +"Управление списком доменов, связанных с областью (realm) IPA.\n" +"\n" +"Этот список используется контроллерами доменов из других областей (realms), " +"у которых установлено отношение доверия с этой областью (realm) IPA. Им " +"необходимы сведения о том, какой запрос следует перенаправить в центр " +"распространения ключей (KDC) этой области (realm) IPA.\n" +"\n" +"При автоматическом управлении: домен автоматически добавляется в список " +"доменов области (realm) при создании новой зоны DNS под управлением IPA. То " +"же самое относится и к удалению.\n" +"\n" +"При внешнем управлении DNS: домены, которые не управляются в DNS IPA-" +"сервера, необходимо вручную добавить в список с помощью команды ipa " +"realmdomains-mod.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Показать текущий список доменов области:\n" +" ipa realmdomains-show\n" +"\n" +" Заменить список доменов области:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Добавить домен в список доменов области:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Удалить домен из списка доменов области:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgid "Add domain" -msgstr "Добавить домен" +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" +"\n" +"Удаление \"%(hostname)s\" приводит к отключению топологии в суффиксе " +"\"%(suffix)s\":\n" +"%(errors)s" -msgid "Delete domain" -msgstr "Удалить домен" +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" +"\n" +"Топология репликация в суффиксе \"%(suffix)s\" отключена:\n" +"%(errors)s" -msgid "Modify realm domains." -msgstr "Изменить домены области." +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" +"\n" +"Возврат сведений о текущем прошедшем аутентификацию профиле \n" +"\n" +"Команда определения профиля возвращает сведения о том, как получить больше " +"данных о профиле, прошедшем аутентификацию для этого запроса. Данные " +"включают:\n" +"\n" +" * тип объекта\n" +" * команду для получения сведений об объекте\n" +" * аргументы и параметры, которые следует передать команде\n" +"\n" +"Сведения возвращаются в виде словаря. Ниже в качестве примера приведён вывод " +"в формате \"ключ: значение\".\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Поиск от имени пользователя IPA:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Поиск от имени пользователя из доверенного домена:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Поиск от имени узла:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Поиск от имени службы Kerberos:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" -msgid "Force adding domain even if not in DNS" -msgstr "Принудительно добавить домен, даже если имени нет в DNS" - -msgid "Display the list of realm domains." -msgstr "Показать список доменов области." +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" +"\n" +"Права определяют, какие действия разрешены. Варианты прав (права могут " +"сочетать в себе несколько вариантов):\n" +"1. write - записать один или несколько атрибутов.\n" +"2. read - прочитать один или несколько атрибутов.\n" +"3. search - поиск по одному или нескольким атрибутам.\n" +"4. compare - сравнить один или несколько атрибутов.\n" +"5. add - добавить в дерево новую запись.\n" +"6. delete - удалить существующую запись.\n" +"7. all - предоставляются все разрешения.\n" msgid "" "\n" @@ -8270,151 +9712,12 @@ msgstr "" "группы \"junioradmin\" смогут добавлять записи пользователей, сбрасывать " "пароли или добавлять пользователя в группу пользователей IPA по умолчанию.\n" -msgid "Role name" -msgstr "Имя роли" - -msgid "A description of this role-group" -msgstr "Описание группы этой роли " - -msgid "Privileges" -msgstr "Привилегии" - -msgid "Member services" -msgstr "Службы-участники" - -msgid "Add a new role." -msgstr "Добавить новую роль." - -msgid "Add members to a role." -msgstr "Добавить участников в роль." - -msgid "member service" -msgstr "служба-участник" - -msgid "services to add" -msgstr "cлужбы, которые следует добавить" - -msgid "Add privileges to a role." -msgstr "Добавить привилегии в роль." - -msgid "privilege" -msgstr "Привилегия" - -msgid "privileges" -msgstr "Привилегии" - -msgid "Number of privileges added" -msgstr "Количество добавленных привилегий" - -msgid "Delete a role." -msgstr "Удалить роль." - -msgid "Search for roles." -msgstr "Поиск ролей." - -msgid "Modify a role." -msgstr "Изменить роль." - -msgid "Rename the role object" -msgstr "Переименовать объект роли." - -msgid "Remove members from a role." -msgstr "Удалить участников из роли." - -msgid "services to remove" -msgstr "службы, которые следует удалить" - -msgid "Remove privileges from a role." -msgstr "Удалить привилегии из роли." - -msgid "Number of privileges removed" -msgstr "Количество удалённых привилегий" - -msgid "Display information about a role." -msgstr "Показать сведения о роли." - msgid "" "\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" +"SEARCHING:\n" msgstr "" "\n" -"Разрешения самообслуживания\n" -"\n" -"С помощью разрешений самообслуживания можно очень точно делегировать " -"разрешения. Правила или инструкции управления доступом (ACI) предоставляют " -"разрешениям разрешение на выполнение конкретных задач, таких как добавление " -"пользователя, изменение группы и так далее.\n" -"\n" -"Разрешение самообслуживания определяет, что объект может изменять в своей " -"собственной записи.\n" -"\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить правило самообслуживания, чтобы разрешить пользователям управлять " -"своим адресом (с использованием выражения Bash в фигурных скобках):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" В список атрибутов необходимо включить все атрибуты, в том числе уже " -"существующие. Добавить telephoneNumber в список (с использованием выражения " -"Bash в фигурных скобках):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Показать обновлённое правило:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Удалить правило:\n" -" ipa selfservice-del \"Users manage their own address\"\n" - -msgid "Self-service name" -msgstr "Имя самообслуживания" - -msgid "Attributes to which the permission applies." -msgstr "Атрибуты, к которым применяется разрешение." - -msgid "Add a new self-service permission." -msgstr "Добавить новое разрешение самообслуживания." - -msgid "Delete a self-service permission." -msgstr "Удалить разрешение самообслуживания." - -msgid "Search for a self-service permission." -msgstr "Поиск разрешения самообслуживания." - -msgid "Modify a self-service permission." -msgstr "Изменить разрешение самообслуживания." - -msgid "Display information about a self-service permission." -msgstr "Показать сведения о разрешении самообслуживания." +"ПОИСК:\n" msgid "" "\n" @@ -8517,51 +9820,643 @@ msgstr "" "порядок применения списка пользователей SELinux, а также показать " "пользователя SELinux по умолчанию.\n" -msgid "SELinux User" -msgstr "Пользователь SELinux" - -msgid "HBAC Rule" -msgstr "Правило HBAC" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "Правило HBAC, которое определяет пользователей, группы и группы узлов" - -msgid "Create a new SELinux User Map." -msgstr "Создать новый список пользователей SELinux." - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" msgstr "" -"Добавить целевые узлы и группы узлов в правило списка пользователей SELinux." +"\n" +"ПОДДЕРЖИВАЕМЫЕ ТИПЫ ЗОН\n" +"\n" +" * Главная зона (dnszone-*), содержит надёжные данные.\n" +" * Зона перенаправления (dnsforwardzone-*), перенаправляет запросы на " +"настроенные перенаправители\n" +" (набор DNS-серверов).\n" -msgid "Add users and groups to an SELinux User Map rule." +msgid "" +"\n" +"Search for ACIs.\n" +"\n" +" Returns a list of ACIs\n" +"\n" +" EXAMPLES:\n" +"\n" +" To find all ACIs that apply directly to members of the group ipausers:\n" +" ipa aci-find --memberof=ipausers\n" +"\n" +" To find all ACIs that grant add access:\n" +" ipa aci-find --permissions=add\n" +"\n" +" Note that the find command only looks for the given text in the set of\n" +" ACIs, it does not evaluate the ACIs to see if something would apply.\n" +" For example, searching on memberof=ipausers will find all ACIs that\n" +" have ipausers as a memberof. There may be other ACIs that apply to\n" +" members of that group indirectly.\n" +" " msgstr "" -"Добавить пользователей и группы в правило списка пользователей SELinux." +"\n" +"Поиск записей ACI.\n" +"\n" +" Возвращает список записей ACI.\n" +"\n" +" ПРИМЕРЫ:\n" +"\n" +" Чтобы найти все записи ACI, которые применяются непосредственно к " +"участникам группы ipausers:\n" +" ipa aci-find --memberof=ipausers\n" +"\n" +" Чтобы найти все записи ACI, которые предоставляют доступ для добавления " +"(add):\n" +" ipa aci-find --permissions=add\n" +"\n" +" Следует учитывать, что с помощью команды find выполняется только поиск " +"указанного текста в наборе записей ACI; при поиске записи ACI не оцениваются " +"по критерию применимости.\n" +" Например, при поиске по тексту memberof=ipausers будут найдены все " +"записи ACI, в которых memberof содержат ipausers. Но могут иметься другие " +"записи ACI, которые применяются к участникам этой группы опосредованно.\n" +" " -msgid "Delete a SELinux User Map." -msgstr "Удалить список пользователей SELinux." - -msgid "Disable an SELinux User Map rule." -msgstr "Отключить правило списка пользователей SELinux." - -msgid "Enable an SELinux User Map rule." -msgstr "Включить правило списка пользователей SELinux." - -msgid "Search for SELinux User Maps." -msgstr "Поиск списков пользователей SELinux." - -msgid "Modify a SELinux User Map." -msgstr "Изменить список пользователей SELinux." - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" msgstr "" -"Удалить целевые узлы и группы узлов из правила списка пользователей SELinux." +"\n" +"Разрешения самообслуживания\n" +"\n" +"С помощью разрешений самообслуживания можно очень точно делегировать " +"разрешения. Правила или инструкции управления доступом (ACI) предоставляют " +"разрешениям разрешение на выполнение конкретных задач, таких как добавление " +"пользователя, изменение группы и так далее.\n" +"\n" +"Разрешение самообслуживания определяет, что объект может изменять в своей " +"собственной записи.\n" +"\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить правило самообслуживания, чтобы разрешить пользователям управлять " +"своим адресом (с использованием выражения Bash в фигурных скобках):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" В список атрибутов необходимо включить все атрибуты, в том числе уже " +"существующие. Добавить telephoneNumber в список (с использованием выражения " +"Bash в фигурных скобках):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Показать обновлённое правило:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Удалить правило:\n" +" ipa selfservice-del \"Users manage their own address\"\n" -msgid "Remove users and groups from an SELinux User Map rule." +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" msgstr "" -"Удалить пользователей и группы из правила списка пользователей SELinux." +"\n" +"Разрешения самообслуживания\n" +"\n" +"С помощью разрешений самообслуживания можно очень точно делегировать " +"разрешения. Правила или инструкции управления доступом (ACI) предоставляют " +"разрешениям разрешение на выполнение конкретных задач, таких как добавление " +"пользователя, изменение группы и так далее.\n" +"\n" +"Разрешение самообслуживания определяет, что объект может изменять в своей " +"собственной записи.\n" +"\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить правило самообслуживания, чтобы разрешить пользователям управлять " +"своим адресом:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" В список атрибутов необходимо включить все атрибуты, в том числе уже " +"существующие. Добавить telephoneNumber в список:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Показать обновлённое правило:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Удалить правило:\n" +" ipa selfservice-del \"Users manage their own address\"\n" -msgid "Display the properties of a SELinux User Map rule." -msgstr "Показать свойства правила списка пользователей SELinux." +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" +"\n" +"Конфигурация сервера\n" +"\n" +"Управление значениями по умолчанию, которые используются IPA, и некоторыми " +"параметрами их настройки.\n" +"\n" +"ПРИМЕЧАНИЯ:\n" +"\n" +"Здесь хранится значение уведомления о пароле (--pwdexpnotify), поэтому оно " +"будет реплицировано. В текущей версии оно не используется для " +"заблаговременного уведомления пользователей об окончании срока действия " +"пароля.\n" +"\n" +"Некоторые атрибуты предоставлены в ознакомительных целях и доступны только " +"для чтения. Среди них:\n" +"\n" +"Основа субъекта сертификата: настроенная основа субъекта сертификата, " +"например O=EXAMPLE.COM. Настраивается только во время установки.\n" +"Возможности подключаемого модуля паролей: в текущей версии он определяет " +"дополнительные хеши, которые создаются на основе пароля (могут быть и другие " +"условия).\n" +"\n" +"При установке приоритета сопоставления пользователей SELinux, возможно, " +"потребуется взять значение в кавычки, чтобы оно не обрабатывалось " +"оболочкой.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Показать базовую конфигурацию сервера:\n" +" ipa config-show\n" +"\n" +" Показать все параметры конфигурации:\n" +" ipa config-show --all\n" +"\n" +" Изменить максимальную длину имени пользователя на 99 символов:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Увеличить установленные по умолчанию ограничения времени и размера поиска " +"IPA-сервера:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Указать почтовый домен пользователей по умолчанию:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Включить режим миграции, чтобы сделать работоспособной команду \"ipa " +"migrate-ds\":\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Определить порядок списка пользователей SELinux:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" +"\n" +"Конфигурация сервера\n" +"\n" +"Управление значениями по умолчанию, которые используются IPA, и некоторыми " +"параметрами их настройки.\n" +"\n" +"ПРИМЕЧАНИЯ:\n" +"\n" +"Здесь хранится значение уведомления о пароле (--pwdexpnotify), поэтому оно " +"будет реплицировано. В текущей версии оно не используется для " +"заблаговременного уведомления пользователей об окончании срока действия " +"пароля.\n" +"\n" +"Некоторые атрибуты предоставлены в ознакомительных целях и доступны только " +"для чтения. Среди них:\n" +"\n" +"Основа субъекта сертификата: настроенная основа субъекта сертификата, " +"например O=EXAMPLE.COM. Настраивается только во время установки.\n" +"Возможности подключаемого модуля паролей: в текущей версии он определяет " +"дополнительные хеши, которые создаются на основе пароля (могут быть и другие " +"условия).\n" +"\n" +"При установке приоритета сопоставления пользователей SELinux, возможно, " +"потребуется взять значение в кавычки, чтобы оно не обрабатывалось " +"оболочкой.\n" +"\n" +"Максимальная длина имени узла в Linux управляется параметром ядра " +"MAXHOSTNAMELEN и по умолчанию составляет 64 символа. В некоторых других " +"операционных системах, например, в Solaris, разрешены имена узлов длиной " +"вплоть до 255.\n" +"Этот параметр позволяет регулировать длину, но по умолчанию ограничен " +"максимальной длиной для Linux.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Показать базовую конфигурацию сервера:\n" +" ipa config-show\n" +"\n" +" Показать все параметры конфигурации:\n" +" ipa config-show --all\n" +"\n" +" Изменить максимальную длину имени пользователя на 99 символов:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Изменить максимальную длину имени узла на 255 символов:¶\n" +" ipa config-mod --maxhostname=255¶\n" +"\n" +" Увеличить установленные по умолчанию ограничения времени и размера поиска " +"IPA-сервера:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Указать почтовый домен пользователей по умолчанию:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Включить режим миграции, чтобы сделать работоспособной команду \"ipa " +"migrate-ds\":\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Определить порядок списка пользователей SELinux:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" +"\n" +"Ограниченное делегирование служб\n" +"\n" +"Управление правилами, с помощью которых можно ограничить делегирование " +"учётных данных таким образом, что служба сможет выполнять олицетворение " +"пользователя при обмене данными с другой службой без необходимости для " +"пользователя самом деле перенаправлять билет для получения билета (TGT). " +"Такой метод делегирования учётных данных значительно лучше, так как " +"предотвращает раскрытие краткосрочного секрета пользователя.\n" +"\n" +"В соответствии с соглашением об именовании к имени соответствующего правила " +"добавляется слово \"target\" или \"targets\". Такая схема имён не является " +"обязательной, но она помогает концептуально связать правила и их " +"назначения.\n" +"\n" +"Правило состоит из двух компонентов:\n" +" - Список целей (назначений), к которым применяется правило\n" +" - Список memberPrincipals, которым разрешено делегирование для этих " +"целей \n" +"\n" +"Цель состоит из списка учётных записей, которые можно делегировать.\n" +"\n" +"Если проще, правило утверждает, что определённую учетную запись можно " +"делегировать как указанный список учётных записей, согласно заданному списку " +"целей.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новое правило ограниченного делегирования:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Добавить новую цель ограниченного делегирования:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Добавить учётную запись в правило:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Добавить цель в правило:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Добавить учётную запись в цель:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Показать сведения об именованном правиле делегирования и цели:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Удалить ограниченное делегирование:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"В этом примере служба ftp может получать билет для получения билета для " +"службы ldap от имени связанного пользователя.\n" +"\n" +"Настоятельно не рекомендуется изменять делегирования, которые поставляются с " +"IPA, ipa-http-delegation и его цели ipa-cifs-delegation-targets и Ipa-ldap-" +"delegation-targets. Неправильная настройка может привести к потере " +"возможности делегирования, что повлечет неработоспособность всей системы.\n" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" +"\n" +"Службы\n" +"\n" +"Служба IPA — это служба, которая выполняется на узле. В записи службы IPA " +"могут храниться данные учётной записи Kerberos, SSL-сертификата или оба " +"набора данных.\n" +"\n" +"Службой IPA можно управлять непосредственно с компьютера, если системе этого " +"компьютера предоставлены соответствующие права доступа. Это касается даже " +"компьютеров, отличных от тех, с которыми связана эта служба. Например, " +"запрос SSL-сертификата с помощью учётных данных учётной записи службы узла. " +"Чтобы управлять службой с помощью учётных данных узла, следует запустить " +"команду kinit от имени узла:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Добавление службы IPA позволяет связанной службе запрашивать SSL-сертификаты " +"и таблицы ключей, но создание самих запросов является отдельным шагом: " +"соответствующие данные не создаются в результате простого добавления " +"службы.\n" +"\n" +"В записи службы хранятся только открытые данные сертификата; закрытый ключ " +"не сохраняется.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую службу IPA:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Разрешить узлу управлять сертификатом службы IPA:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Переопределить список по умолчанию, который содержит поддерживаемые типы " +"PAC для службы:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +"Такое переопределение типа PAC необходимо, например, для работы NFS. В " +"текущей версии соответствующий код в ядре Linux может работать только с " +"билетами Kerberos, размер которых не превышает максимально заданного. Так " +"как данные PAC могут быть довольно объёмными, для служб NFS рекомендуется " +"установить --pac-type=NONE.\n" +"\n" +" Удалить службу IPA:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Найти все службы IPA, связанные с узлом:\n" +" ipa service-find web.example.com\n" +"\n" +" Найти все службы HTTP:\n" +" ipa service-find HTTP\n" +"\n" +" Отключить ключ Kerberos и SSL-сертификат службы:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Запросить сертификат для службы IPA:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" msgid "" "\n" @@ -8691,85 +10586,122 @@ msgstr "" " ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" "httpd.keytab\n" -msgid "Service principal" -msgstr "Учётная запись службы" - -msgid "PAC type" -msgstr "Тип PAC" +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" +"\n" +"Службы\n" +"\n" +"Служба IPA — это служба, которая выполняется на узле. В записи службы IPA " +"могут храниться данные учётной записи Kerberos, SSL-сертификата или оба " +"набора данных.\n" +"\n" +"Службой IPA можно управлять непосредственно с компьютера, если системе этого " +"компьютера предоставлены соответствующие права доступа. Это касается даже " +"компьютеров, отличных от тех, с которыми связана эта служба. Например, " +"запрос SSL-сертификата с помощью учётных данных учётной записи службы узла. " +"Чтобы управлять службой с помощью учётных данных узла, следует запустить " +"команду kinit от имени узла:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Добавление службы IPA позволяет связанной службе запрашивать SSL-сертификаты " +"и таблицы ключей, но создание самих запросов является отдельным шагом: " +"соответствующие данные не создаются в результате простого добавления " +"службы.\n" +"\n" +"В записи службы хранятся только открытые данные сертификата; закрытый ключ " +"не сохраняется.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новую службу IPA:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Разрешить узлу управлять сертификатом службы IPA:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Переопределить список по умолчанию, который содержит поддерживаемые типы " +"PAC для службы:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Удалить службу IPA:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Найти все службы IPA, связанные с узлом:\n" +" ipa service-find web.example.com\n" +"\n" +" Найти все службы HTTP:\n" +" ipa service-find HTTP\n" +"\n" +" Отключить ключ Kerberos и SSL-сертификат службы:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Запросить сертификат для службы IPA:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Создать и получить таблицу ключей для службы IPA:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." +"\n" +"Session Support for IPA\n" msgstr "" -"Переопределить список по умолчанию, который содержит поддерживаемые типы " -"PAC. Используйте значение \"NONE\", чтобы отключить поддержку PAC для этой " -"службы; например, это может быть необходимо для служб NFS." - -msgid "Add a new IPA new service." -msgstr "Добавить новую службу IPA." - -msgid "force principal name even if not in DNS" -msgstr "" -"принудительно установить значение имени учётной записи, даже если имени нет " -"в DNS" - -msgid "Add hosts that can manage this service." -msgstr "Добавить узлы, которые могут управлять этой службой." - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" -"Разрешить пользователям, группам, узлам или группам узлов создавать таблицу " -"ключей этой службы." - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" -"Разрешить пользователям, группам, узлам или группам узлов получать таблицу " -"ключей этой службы." - -msgid "Delete an IPA service." -msgstr "Удалить службу IPA." - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "Отключить ключ Kerberos и SSL-сертификат службы." - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" -"Запретить пользователям, группам, узлам или группам узлов создавать таблицу " -"ключей этой службы." - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" -"Запретить пользователям, группам, узлам или группам узлов получать таблицу " -"ключей этой службы." - -msgid "Search for IPA services." -msgstr "Поиск служб IPA." - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" -"Результаты должны содержать только атрибут главного ключа (\"principal\")" - -msgid "Search for services with these managed by hosts." -msgstr "Поиск служб, включая службы, управляемые узлами." - -msgid "Search for services without these managed by hosts." -msgstr "Поиск служб, не включая службы, управляемые узлами." - -msgid "Modify an existing IPA service." -msgstr "Изменить существующую службу IPA." - -msgid "Remove hosts that can manage this service." -msgstr "Удалить узлы, которые могут управлять этой службой." - -msgid "Display information about an IPA service." -msgstr "Показать сведения о службе IPA." +"\n" +"Сеансовая поддержка для IPA\n" msgid "" "\n" @@ -9991,3028 +11923,275 @@ msgstr "" "данные Kerberos. Всё остальное не меняется.\n" "\n" -msgid "RPC command used to log the current user out of their session." -msgstr "" -"Команда RPC, которая используется для завершения сеанса текущего " -"пользователя." - msgid "" "\n" -"Sudo Commands\n" +"Set a user's password\n" "\n" -"Commands used as building blocks for sudo\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" "\n" "EXAMPLES:\n" "\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +" To reset your own password:\n" +" ipa passwd\n" "\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" msgstr "" "\n" -"Команды Sudo \n" +"Установка пароля пользователя\n" "\n" -"Команды, которые используются в качестве строительных блоков для Sudo\n" +"Если пароль пользователя изменяет кто-то кроме самого пользователя " +"(например, его сбрасывает служба технической поддержки), пароль потребуется " +"изменить при первом использовании. Это делается для того, чтобы пароль знал " +"только конечный пользователь.\n" +"\n" +"Политика паролей IPA управляет частотой смены пароля, требованиями к " +"надёжности пароля и размером журнала паролей.\n" "\n" "ПРИМЕРЫ:\n" "\n" -" Создать новую команду\n" -" ipa sudocmd-add --desc='Чтение файлов в журнале' /usr/bin/less\n" +" Чтобы сбросить свой собственный пароль:\n" +" ipa passwd\n" "\n" -" Удалить команду\n" -" ipa sudocmd-del /usr/bin/less\n" - -msgid "Sudo Command" -msgstr "Команда Sudo" - -msgid "A description of this command" -msgstr "Описание этой команды" - -msgid "Sudo Command Groups" -msgstr "Группы команд Sudo" - -msgid "Create new Sudo Command." -msgstr "Создать новую команду Sudo." - -msgid "Delete Sudo Command." -msgstr "Удалить команду Sudo." - -msgid "Search for Sudo Commands." -msgstr "Поиск команд Sudo." - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" -"Результаты должны содержать только атрибут главного ключа (\"command\")" - -msgid "Modify Sudo Command." -msgstr "Изменить команду Sudo." - -msgid "Display Sudo Command." -msgstr "Показать команду Sudo." +" Чтобы изменить пароль другого пользователя:\n" +" ipa passwd tuser1\n" msgid "" "\n" -"Groups of Sudo Commands\n" +"Simulate use of Host-based access controls\n" "\n" -"Manage groups of Sudo Commands.\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" +"\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" +"\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" --user, --host, and --service are mandatory, others are optional.\n" +"\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" +"\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" +"\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" +"\n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" +"\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" +"\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" "\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" "\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" "\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" "\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" +"\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" msgstr "" "\n" -"Группы команд Sudo\n" +"Имитация использования управления доступом на основе узла\n" "\n" -"Управление группами команд Sudo.\n" +"Правила HBAC управляют тем, кто, на каких узлах и из каких узлов сможет " +"получать доступ к определённым службам. Вы можете воспользоваться HBAC для " +"определения тех пользователей и групп, которые будут иметь доступ к " +"определённой службе или группе служб на целевом узле. \n" +"\n" +"Так как применение правил HBAC подразумевает использование рабочей среды, " +"этот подключаемый модуль предназначен для обеспечения имитации оценки правил " +"HBAC при отсутствии доступа к рабочей среде.\n" +"\n" +" Проверка тестового пользователя, который обращается к службе на именованном " +"узле, на соответствие существующим включённым правилам.\n" +"\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" +"\n" +" Параметры --user, --host и --service являются обязательными, остальные " +"можно не указывать.\n" +"\n" +" Если указан параметр --rules, имитировать включение указанных правил и " +"проверить возможность входа пользователя в случае использования только этих " +"правил.\n" +"\n" +" Если указан параметр --enabled, добавить все включённые правила HBAC к " +"имитации.\n" +"\n" +" Если указан параметр --disabled, добавить все отключённые правила HBAC к " +"имитации.\n" +"\n" +" Если указан параметр --nodetail, не возвращать данные о соответствующих или " +"не соответствующих правилах.\n" +"\n" +" Если одновременно указаны параметры --rules и --enabled, выполнить имитацию " +"--rules _и_\n" +" всех включённых правил IPA.\n" +"\n" +" Если не указан параметр --rules, выполнить имитацию всех включённых правил " +"IPA.\n" +" По умолчанию в IPA имеется общее ограничение количества извлекаемых " +"записей, его можно изменить с помощью параметра --sizelimit.\n" +"\n" +" Если указан параметр --srchost, он будет проигнорирован. Он сохранён только " +"для обеспечения совместимости.\n" "\n" "ПРИМЕРЫ:\n" "\n" -" Добавить новую группу команд Sudo:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Удалить группу команд Sudo:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Управлять участием в группе команд Sudo, команды:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Управлять участием в группе команд Sudo, команды:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Показать группу команд Sudo:\n" -" ipa group-show localadmins\n" - -msgid "Sudo Command Group" -msgstr "Группа команд Sudo" - -msgid "Commands" -msgstr "Команды" - -msgid "Member Sudo commands" -msgstr "Команды участника Sudo" - -msgid "Create new Sudo Command Group." -msgstr "Создать новую группу команд Sudo." - -msgid "Add members to Sudo Command Group." -msgstr "Добавить участников в группу команд Sudo." - -msgid "member sudo command" -msgstr "команда Sudo — участник" - -msgid "sudo commands to add" -msgstr "команды Sudo, которые следует добавить" - -msgid "Delete Sudo Command Group." -msgstr "Удалить группу команд Sudo." - -msgid "Search for Sudo Command Groups." -msgstr "Поиск групп команд Sudo." - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" -"Результаты должны содержать только атрибут главного ключа (\"sudocmdgroup-" -"name\")" - -msgid "Modify Sudo Command Group." -msgstr "Изменить группу команд Sudo." - -msgid "Remove members from Sudo Command Group." -msgstr "Удалить участников из группы команд Sudo." - -msgid "sudo commands to remove" -msgstr "команды Sudo, которые следует удалить" - -msgid "Display Sudo Command Group." -msgstr "Показать группу команд Sudo." - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" -"\n" -"Отношения доверия между областями (realm)\n" -"\n" -"Управление отношениями доверия между доменами IPA и Active Directory.\n" -"\n" -"Чтобы разрешить пользователям из удалённого домена доступ к ресурсам в " -"домене IPA, необходимо установить отношение доверия. В текущей версии IPA " -"поддерживает только отношения доверия между доменами IPA и Active Directory " -"под управлением Windows Server 2008 или более поздней версии с " -"функциональными возможностями уровня 2008 или более поздней версии.\n" -"\n" -"Обратите внимание, что следует надлежащим образом настроить DNS на обоих " -"доменах, IPA и Active Directory, чтобы домены могли обнаруживать друг друга. " -"Работоспособность отношения доверия зависит от возможности обнаруживать " -"специальные ресурсы в другом домене с помощью записей DNS.\n" -"\n" -"Примеры:\n" -"\n" -"1. Установить отношение доверия между областями (realm) с Active Directory с " -"помощью учётных данных администратора AD:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. Вывести список всех существующих отношений доверия:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Показать подробные сведения об определённом отношении доверия:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Удалить существующее отношение доверия:\n" -"\n" -" ipa trust-del \n" -"\n" -"Как только отношение доверия будет установлено, удалённых пользователей " -"потребуется привязать к локальным POSIX-группам, чтобы воспользоваться " -"ресурсами IPA. Привязку следует выполнить с помощью внешнего участия не-" -"POSIX-группы, а затем эту группу необходимо включить в одну из локальных " -"POSIX-групп.\n" -"\n" -"Пример:\n" -"\n" -"1. Создать группу для привязки администраторов (admins) доверенного домена и " -"их локальную POSIX-группу:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Добавить идентификатор безопасности Domain Admins домена " -"группе ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Разрешить привязку группы ad_admins_external к POSIX-группе ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Вывести список участников внешних участников группы ad_admins_external, " -"чтобы определить их SID:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"ГЛОБАЛЬНАЯ КОНФИГУРАЦИЯ ОТНОШЕНИЙ ДОВЕРИЯ\n" -"\n" -"После установки субпакета доверия AD IPA и запуска ipa-adtrust-install " -"создаётся конфигурация локального домена (SID, GUID, имя NetBIOS). Эти " -"идентификаторы затем используются для связи с доверенным доменом конкретного " -"типа.\n" -"\n" -"1. Показать глобальную конфигурацию отношений доверия для типа отношений " -"доверия Active Directory:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Изменить глобальную конфигурацию для всех отношений доверия типа Active " -"Directory и указать другую резервную основную группу (GID резервной основной " -"группы используется в качестве GID основного пользователя, если для " -"пользователя, который выполняет аутентификацию в домене IPA, не был " -"установлен другой основной GID):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Изменить резервную основную группу обратно на скрытую группу по умолчанию " -"(разрешена любая группа с классом объекта posixGroup):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" - -msgid "Domain NetBIOS name" -msgstr "Имя домена NetBIOS" - -msgid "Domain Security Identifier" -msgstr "Идентификатор безопасности домена" - -msgid "SID blacklist incoming" -msgstr "Входящий \"чёрный список\" SID" - -msgid "SID blacklist outgoing" -msgstr "Исходящий \"чёрный список\" SID" - -msgid "Security Identifier" -msgstr "Идентификатор безопасности" - -msgid "NetBIOS name" -msgstr "Имя NetBIOS" - -msgid "Domain GUID" -msgstr "GUID домена" - -msgid "Fallback primary group" -msgstr "Резервная основная группа" - -msgid "Domain name" -msgstr "Имя домена" - -msgid "Trusted domain partner" -msgstr "Партнёр доверенного домена" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "Определить, запущена ли в этой системе команда ipa-adtrust-install." - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" -"Определить, настроен ли подключаемый модуль совместимости схем (Schema " -"Compatibility) для обслуживания пользователей и групп доверенных доменов." - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "Определить, запущена ли команда ipa-adtrust-install с задачей sidgen." - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" -"\n" -"Добавление нового отношения доверия, которое следует использовать.\n" -"\n" -"Эта команда устанавливает отношение доверия с другим доменом, который " -"становится \"доверенным\". В результате пользователи доверенного домена " -"получают доступ к ресурсам этого домена.\n" -"\n" -"В текущей версии поддерживаются только отношения доверия с доменами Active " -"Directory.\n" -"\n" -"Команду можно безопасно запускать несколько раз для одного и того же домена, " -"такой запуск приводит к изменению учётных данных отношения доверия на обеих " -"сторонах.\n" -" " - -msgid "Trust type (ad for Active Directory, default)" -msgstr "Тип отношения доверия (ad для Active Directory, значение по умолчанию)" - -msgid "Active Directory domain administrator" -msgstr "Администратор домена Active Directory" - -msgid "Active Directory domain administrator's password" -msgstr "Пароль администратора домена Active Directory" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "Контроллер домена для домена Active Directory (необязательно)" - -msgid "Shared secret for the trust" -msgstr "Общий секрет для отношения доверия" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" -"Первый идентификатор POSIX диапазона, зарезервированного для доверенного " -"домена" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" -"Размер диапазона идентификаторов, зарезервированного для доверенного домена" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" -"Тип диапазона идентификаторов доверенного домена, один из следующих: ipa-ad-" -"trust-posix, ipa-ad-trust" - -msgid "Delete a trust." -msgstr "Удалить отношение доверия." - -msgid "Refresh list of the domains associated with the trust" -msgstr "Обновить список доменов, связанных с отношением доверия." - -msgid "Search for trusts." -msgstr "Поиск отношений доверия." - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "Результаты должны содержать только атрибут главного ключа (\"realm\")" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" -"\n" -"Изменить отношение доверия (для будущего использования).\n" -"\n" -" В текущей версии для изменения атрибутов LDAP доступен только параметр " -"по умолчанию. В последующих версиях будут добавлены более специфичные " -"параметры.\n" -" " - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" -"Определить идентификаторы безопасности пользователей и групп в доверенных " -"доменах" - -msgid "Security Identifiers (SIDs)" -msgstr "Идентификаторы безопасности (SID)" - -msgid "Display information about a trust." -msgstr "Показать сведения об отношении доверия." - -msgid "Modify global trust configuration." -msgstr "Изменить глобальную конфигурацию отношений доверия." - -msgid "Show global trust configuration." -msgstr "Показать глобальную конфигурацию отношений доверия." - -msgid "Allow access from the trusted domain" -msgstr "Разрешить доступ из доверенного домена." - -msgid "Remove information about the domain associated with the trust." -msgstr "Удалить сведения о домене, связанном с отношением доверия." - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "Отключить использование ресурсов IPA доменом отношения доверия" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "Разрешить использование ресурсов IPA доменом отношения доверия." - -msgid "Search domains of the trust" -msgstr "Поиск доменов отношения доверия." - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "Результаты должны содержать только атрибут главного ключа (\"domain\")" - -msgid "Modify trustdomain of the trust" -msgstr "Изменить значение доверенного домена (trustdomain) отношения доверия." - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" -"\n" -"Пользователи\n" -"\n" -"Управление записями пользователей. Все пользователи являются POSIX-" -"пользователями.\n" -"\n" -"IPA поддерживает широкий спектр форматов имён пользователей, но следует " -"учитывать те ограничения, которые могут существовать в конкретной среде. " -"Например, имена пользователей, которые начинаются с цифры или превышают " -"определённую длину, могут привести к проблемам в некоторых системах UNIX.\n" -"Используйте команду \"ipa config-mod\" для изменения формата имени " -"пользователя, разрешённого средствами IPA.\n" -"\n" -"Отключение учётной записи пользователя сделает невозможным получение таким " -"пользователем новых учётных данных Kerberos. Это не сделает " -"недействительными те учётные данные, которые уже были предоставлены.\n" -"\n" -"Управление паролями не входит в этот модуль. Дополнительные сведения можно " -"получить с помощью команды ipa help passwd\n" -"\n" -"Блокировка учётной записи при ошибке пароля выполняется на одном из главных " -"IPA-серверов. Чтобы определить, на каком главном сервере заблокирован " -"пользователь, можно использовать команду user-status.\n" -"На этом главном сервере администратор должен разблокировать пользователя:\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить нового пользователя:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Найти всех пользователей, записи которых содержат строку \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Найти всех пользователей, в записях \"Tim\" является именем:\n" -" ipa user-find --first=Tim\n" -"\n" -" Отключить учётную запись пользователя:\n" -" ipa user-disable tuser1\n" -"\n" -" Включить учётную запись пользователя:\n" -" ipa user-enable tuser1\n" -"\n" -" Удалить пользователя:\n" -" ipa user-del tuser1\n" - -msgid "First name" -msgstr "Имя" - -msgid "Last name" -msgstr "Фамилия" - -msgid "Full name" -msgstr "Полное имя" - -msgid "Display name" -msgstr "Отображаемое имя" - -msgid "Initials" -msgstr "Инициалы" - -msgid "Kerberos principal" -msgstr "Учётная запись Kerberos" - -msgid "Kerberos principal expiration" -msgstr "Окончание действия учётной записи Kerberos" - -msgid "Email address" -msgstr "Адрес электронной почты" - -msgid "Prompt to set the user password" -msgstr "Запросить пароль у пользователя" - -msgid "Generate a random user password" -msgstr "Создать случайный пользовательский пароль" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "ID пользователя (если не указан, система назначит его самостоятельно)" - -msgid "Street address" -msgstr "Адрес" - -msgid "City" -msgstr "Город" - -msgid "State/Province" -msgstr "Область/республика" - -msgid "ZIP" -msgstr "Индекс" - -msgid "Telephone Number" -msgstr "Номер телефона" - -msgid "Mobile Telephone Number" -msgstr "Номер мобильного телефона" - -msgid "Pager Number" -msgstr "Номер пейджера" - -msgid "Fax Number" -msgstr "Номер факса" - -msgid "Org. Unit" -msgstr "Отдел" - -msgid "Job Title" -msgstr "Должность" - -msgid "Car License" -msgstr "Номер автомобиля" - -msgid "Account disabled" -msgstr "Учётная запись отключена" - -msgid "User authentication types" -msgstr "Типы аутентификации пользователей" - -msgid "Types of supported user authentication" -msgstr "Поддерживаемые типы аутентификации пользователей" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" -"Категория пользователей (семантика этого атрибута предназначена для " -"локального разбора)" - -msgid "RADIUS proxy configuration" -msgstr "Конфигурация прокси RADIUS" - -msgid "RADIUS proxy username" -msgstr "Имя пользователя прокси RADIUS" - -msgid "Department Number" -msgstr "Номер отдела" - -msgid "Employee Number" -msgstr "Номер сотрудника" - -msgid "Employee Type" -msgstr "Тип сотрудника" - -msgid "Preferred Language" -msgstr "Предпочитаемый язык" - -msgid "Kerberos keys available" -msgstr "Доступные ключи Kerberos" - -msgid "Add a new user." -msgstr "Добавить нового пользователя." - -msgid "Don't create user private group" -msgstr "Не создавать личную группу пользователя" - -msgid "Delete a user." -msgstr "Удалить пользователя." - -msgid "Disable a user account." -msgstr "Отключить учётную запись пользователя." - -msgid "Enable a user account." -msgstr "Включить учётную запись пользователя." - -msgid "Search for users." -msgstr "Поиск пользователей." - -msgid "Self" -msgstr "Моя учётная запись" - -msgid "Display user record for current Kerberos principal" -msgstr "Показать запись пользователя для текущей учётной записи Kerberos" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "Результаты должны содержать только атрибут главного ключа (\"login\")" - -msgid "Search for users with these member of groups." -msgstr "Поиск пользователей, которые являются участниками этой группы." - -msgid "Search for users without these member of groups." -msgstr "Поиск пользователей, которые не являются участниками этой группы." - -msgid "Search for users with these member of netgroups." -msgstr "Поиск пользователей, которые являются участниками этой сетевой группы." - -msgid "Search for users without these member of netgroups." -msgstr "" -"Поиск пользователей, которые не являются участниками этой сетевой группы." - -msgid "Search for users with these member of roles." -msgstr "Поиск пользователей, которые являются участниками этой роли." - -msgid "Search for users without these member of roles." -msgstr "Поиск пользователей, которые не являются участниками этой роли." - -msgid "Search for users with these member of HBAC rules." -msgstr "Поиск пользователей, которые являются участниками этого правила HBAC." - -msgid "Search for users without these member of HBAC rules." -msgstr "" -"Поиск пользователей, которые не являются участниками этого правила HBAC." - -msgid "Search for users with these member of sudo rules." -msgstr "Поиск пользователей, которые являются участниками этого правила Sudo." - -msgid "Search for users without these member of sudo rules." -msgstr "" -" Поиск пользователей, которые не являются участниками этого правила Sudo." - -msgid "Modify a user." -msgstr "Изменить пользователя." - -msgid "Rename the user object" -msgstr "Переименовать объект пользователя" - -msgid "Display information about a user." -msgstr "Показать сведения о пользователе." - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" -"\n" -"Состояние блокировки учётной записи пользователя.\n" -"\n" -" Учётная запись может быть заблокирована, если в течение определённого " -"периода времени слишком большое количество раз был введён неверный пароль " -"(соответствующие ограничения регулируются политикой паролей). Запись " -"блокируется временно, она может быть разблокирована администратором.\n" -"\n" -" Эта программа соединяется с каждым главным IPA-сервером и показывает " -"состояние блокировки на каждом из них.\n" -"\n" -" Чтобы определить, заблокирована ли учётная запись на указанном сервере, " -"потребуется сравнить количество неудачных попыток входа и время последней " -"неудачной попытки с эталонными значениями. Для блокировки учётной записи " -"количество неудачных попыток входа должно превысить значение maxfail в " -"течение временного интервала failinterval в соответствии с политикой " -"паролей, связанной с пользователем.\n" -"\n" -" Счётчик неудачных попыток изменяется только тогда, когда пользователь " -"выполняет попытку войти, поэтому учётная запись может казаться " -"заблокированной, но время, прошедшее с последней неудачной попытки входа, " -"превышает время блокировки (lockouttime), установленное политикой паролей. " -"Это означает, что пользователь может войти в систему снова.\n" -" " - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" -"\n" -"Разблокировка учётной записи пользователя.\n" -" \n" -"Учётная запись может быть заблокирована, если в течение определённого " -"периода времени слишком большое количество раз был введён неверный пароль " -"(соответствующие ограничения регулируются политикой паролей). Запись " -"блокируется временно, она может быть разблокирована администратором." - -#, fuzzy -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" -"\n" -"Правила Sudo\n" -"\n" -"Sudo (su \"do\") позволяет системному администратору делегировать " -"полномочия, чтобы дать определённым пользователям (или группам " -"пользователей) возможность выполнять некоторые (или все) команды от имени " -"пользователя \"root\" или другого пользователя, вместе с тем предоставляя " -"журнал аудита команд и их аргументов.\n" -"\n" -"IPA предоставляет возможности настройки различных аспектов Sudo:\n" -" Users: пользователь (пользователи) или группа (группы), которые могут " -"вызывать Sudo.\n" -" Hosts: узел (узлы) или группа (группы) узлов, пользователи которых могут " -"вызывать Sudo.\n" -" Allow Command: конкретная команда (команды), которые разрешены для " -"выполнения с помощью Sudo. \n" -" Deny Command: конкретная команда (команды), которые запрещены для " -"выполнения с помощью Sudo.\n" -" RunAsUser: пользователь (пользователи) или группа (группы) пользователей, " -"от имени которых Sudo будет выполнять команды.\n" -" RunAsGroup: группа (группы), от имени которых Sudo будет выполнять " -"команды.\n" -" Options: различные параметры sudoers (участники Sudo), которые могут " -"изменить поведение Sudo.\n" -"\n" -"Правилу Sudo можно добавить порядок, который будет руководить порядком " -"обработки записей (если такой порядок предусмотрен на клиентской стороне). " -"Порядок определяется числовым индексом (целое число), который не должен " -"повторяться.\n" -"\n" -"IPA предусматривает специальную привязку DN (binddn) для использования с " -"Sudo:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"Чтобы включить binddn, выполните следующую команду для установки пароля:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Создать новое правило:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Добавить объект команды Sudo и добавить его в правило в качестве " -"разрешённой команды:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Добавить узел в правило:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Добавить пользователя в правило:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Добавить специальное правило Sudo для конфигурации сервера Sudo по " -"умолчанию:\n" -" ipa sudorule-add defaults\n" -"\n" -" Указать параметр Sudo по умолчанию:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" - -msgid "Command category" -msgstr "Категория команд" - -msgid "Command category the rule applies to" -msgstr "Категория команд, к которой применяется правило" - -msgid "RunAs User category" -msgstr "Категория запуска от имени пользователей" - -msgid "RunAs User category the rule applies to" -msgstr "" -"Категория запуска от имени пользователей, к которой применяется правило" - -msgid "RunAs Group category" -msgstr "Категория запуска от имени группы" - -msgid "RunAs Group category the rule applies to" -msgstr "Категория запуска от имени группы, к которой применяется правило" - -msgid "Sudo order" -msgstr "Порядок Sudo" - -msgid "integer to order the Sudo rules" -msgstr "Целое число для упорядочивания правил Sudo" - -msgid "External User" -msgstr "Внешний пользователь" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" -"Внешний пользователь, к которому применяется правило (только sudorule-find)" - -msgid "Host Masks" -msgstr "Маски узлов" - -msgid "Sudo Allow Commands" -msgstr "Разрешённые команды Sudo" - -msgid "Sudo Deny Commands" -msgstr "Запрещённые команды Sudo" - -msgid "Sudo Allow Command Groups" -msgstr "Группы разрешённых команд Sudo" - -msgid "Sudo Deny Command Groups" -msgstr "Группы запрещённых команд Sudo" - -msgid "RunAs Users" -msgstr "Пользователи запуска от имени" - -msgid "Run as a user" -msgstr "Запустить от имени пользователя" - -msgid "Groups of RunAs Users" -msgstr "Группы пользователей запуска от имени" - -msgid "Run as any user within a specified group" -msgstr "Запустить от имени любого пользователя из указанной группы" - -msgid "RunAs External User" -msgstr "Внешний пользователь для RunAs" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" -"Внешний пользователь, от имени которого можно выполнять команды (только " -"sudorule-find)" - -msgid "External Groups of RunAs Users" -msgstr "Внешние группы пользователей запуска от имени" - -msgid "External Groups of users that the command can run as" -msgstr "Внешние группы пользователей, от имени которых можно выполнять команду" - -msgid "RunAs Groups" -msgstr "Группы запуска от имени" - -msgid "Run with the gid of a specified POSIX group" -msgstr "Запускать с идентификатором указанной POSIX-группы" - -msgid "RunAs External Group" -msgstr "Внешняя группа для RunAs" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" -"Внешняя группа, от имени которой можно выполнять команды (только sudorule-" -"find)" - -msgid "Sudo Option" -msgstr "Параметр Sudo" - -msgid "Create new Sudo Rule." -msgstr "Создать новое правило Sudo." - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "Добавить команды и группы команд Sudo, которых касается правило Sudo." - -msgid "member sudo command group" -msgstr "группа команд — участник Sudo" - -msgid "sudo command groups to add" -msgstr "группы команд Sudo, которые следует добавить" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "Добавить узлы и группы узлов, которых касается правило Sudo." - -msgid "host masks of allowed hosts" -msgstr "Маски разрешённых узлов" - -msgid "Add an option to the Sudo Rule." -msgstr "Добавить параметр в правило Sudo." - -msgid "Add group for Sudo to execute as." -msgstr "Добавить группу для выполнения Sudo от её имени." - -msgid "Add users and groups for Sudo to execute as." -msgstr "Добавить пользователей и группы для выполнения Sudo от их имени." - -msgid "Add users and groups affected by Sudo Rule." -msgstr "Добавить пользователей и группы, которых касается правило Sudo." - -msgid "Delete Sudo Rule." -msgstr "Удалить правило Sudo." - -msgid "Disable a Sudo Rule." -msgstr "Отключить правило Sudo." - -msgid "Enable a Sudo Rule." -msgstr "Включить правило Sudo." - -msgid "Search for Sudo Rule." -msgstr "Поиск правила Sudo." - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" -"Результаты должны содержать только атрибут главного ключа (\"sudorule-name\")" - -msgid "Modify Sudo Rule." -msgstr "Изменить правило Sudo." - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "Удалить команды и группы команд Sudo, которых касается правило Sudo." - -msgid "sudo command groups to remove" -msgstr "группы команд Sudo, которые следует удалить" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "Удалить узлы и группы узлов, которых касается правило Sudo." - -msgid "Remove an option from Sudo Rule." -msgstr "Удалить параметр из правила Sudo." - -msgid "Remove group for Sudo to execute as." -msgstr "Удалить группу для выполнения Sudo от её имени." - -msgid "Remove users and groups for Sudo to execute as." -msgstr "Удалить пользователей и группы для выполнения Sudo от их имени." - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "Удалить пользователей и группы, которых касается правило Sudo." - -msgid "Display Sudo Rule." -msgstr "Показать правило Sudo." - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "" -"Ограничение времени поиска в секундах (\"0\" означает отсутствие ограничения)" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "" -"Максимальное количество возвращённых записей (\"0\" означает отсутствие " -"ограничения)" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" -"\n" -"Управление правилами CA ACL.\n" -"\n" -"Этот подключаемый модуль используется для определения правил, которые " -"управляют тем, для каких учётных записей разрешено выдавать сертификаты с " -"помощью конкретного профиля сертификатов.\n" -"\n" -"СИНТАКСИС ИДЕНТИФИКАТОРА ПРОФИЛЯ:\n" -"\n" -"Идентификатор профиля — это строка без пробелов и знаков препинания, она " -"начинается с буквы, за которой следуют другие буквы, цифры или символы " -"подчёркивания (\"_\").\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Создать ACL службы сертификации \"test\", которая предоставляет всем " -"пользователям доступ к профилю \"UserCert\":\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Показать свойства именованной ACL службы сертификации:\n" -" ipa caacl-show test\n" -"\n" -" Создать ACL службы сертификации, чтобы разрешить пользователю \"alice\" " -"использовать профиль \"DNP3\":\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Отключить ACL службы сертификации:\n" -" ipa caacl-disable test\n" -"\n" -" Удалить ACL службы сертификации:\n" -" ipa caacl-del test\n" - -msgid "ACL name" -msgstr "Имя ACL" - -msgid "Profile category" -msgstr "Категория профилей" - -msgid "Profile category the ACL applies to" -msgstr "Категория профилей, к которой применяется ACL" - -msgid "User category the ACL applies to" -msgstr "Категория пользователей, к которой применяется ACL" - -msgid "Host category the ACL applies to" -msgstr "Категория узлов, к которой применяется ACL" - -msgid "Service category the ACL applies to" -msgstr "Категория служб, к которой применяется ACL" - -msgid "Profiles" -msgstr "Профили" - -msgid "Create a new CA ACL." -msgstr "Создать новую запись CA ACL." - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "Добавить целевые узлы или группы узлов в CA ACL." - -msgid "Add profiles to a CA ACL." -msgstr "Добавить профили в CA ACL." - -msgid "member Certificate Profile" -msgstr "Профиль сертификатов — участник" - -msgid "Certificate Profiles to add" -msgstr "Профили сертификатов, которые следует добавить" - -msgid "Add services to a CA ACL." -msgstr "Добавить службы в CA ACL." - -msgid "Add users and groups to a CA ACL." -msgstr "Добавить пользователей и группы в CA ACL." - -msgid "Delete a CA ACL." -msgstr "Удалить CA ACL." - -msgid "Disable a CA ACL." -msgstr "Отключить CA ACL." - -msgid "Enable a CA ACL." -msgstr "Включить CA ACL." - -msgid "Search for CA ACLs." -msgstr "Поиск CA ACL." - -msgid "Modify a CA ACL." -msgstr "Изменить CA ACL." - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "Удалить целевые узлы или группы узлов из CA ACL." - -msgid "Remove profiles from a CA ACL." -msgstr "Удалить профили из CA ACL." - -msgid "Certificate Profiles to remove" -msgstr "Профили сертификатов, которые следует удалить" - -msgid "Remove services from a CA ACL." -msgstr "Удалить службы из CA ACL." - -msgid "Remove users and groups from a CA ACL." -msgstr "Удалить пользователей и группы из CA ACL." - -msgid "Display the properties of a CA ACL." -msgstr "Показать свойства CA ACL." - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "Учётная запись для этого сертификата (например, HTTP/test.example.com)" - -msgid "Profile ID" -msgstr "Идентификатор профиля" - -msgid "Certificate Profile to use" -msgstr "Сертификат профиля, который следует использовать" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" -"\n" -"Управление профилями сертификатов\n" -"\n" -"Профили сертификатов используются центром сертификации (Certificate " -"Authority, CA) во время подписи сертификатов, чтобы определить, является ли " -"приемлемым запрос подписи сертификата (Certificate Signing Request, CSR), и, " -"если это так, определить, какие возможности и расширения будут предоставлены " -"сертификатом.\n" -"\n" -"Формат профиля сертификатов — это формат в виде списка свойств, который " -"распознаётся Dogtag или системой сертификации центра сертификации Red Hat.\n" -"\n" -"СИНТАКСИС ИДЕНТИФИКАТОРА ПРОФИЛЯ:\n" -"\n" -"Идентификатор профиля — это строка без пробелов и знаков препинания, она " -"начинается с буквы, за которой следуют другие буквы, цифры или символы " -"подчёркивания (\"_\").\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Импортировать профиль, в котором не будут храниться выданные сертификаты:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Удалить профиль сертификатов:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Показать сведения о профиле:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Сохранить конфигурацию профиля в файл:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Поиск профилей, в которых не хранятся сертификаты:\n" -" ipa certprofile-find --store=false\n" -"\n" -"ФОРМАТ КОНФИГУРАЦИИ ПРОФИЛЯ:\n" -"\n" -"Формат конфигурации профиля — это формат в виде необработанного списка " -"свойств, который используется системой сертификации Dogtag Certificate " -"System. Поддержка формата XML не предусмотрена.\n" -"\n" -"К профилям под управлением IPA применяются следующие ограничения:\n" -"\n" -"- При импорте профиля значение поля \"profileId\", если это поле имеется, " -"должно совпадать с идентификатором, указанным в командной строке.\n" -"\n" -"- Значением поля \"classId\" должно быть \"caEnrollImpl\".\n" -"\n" -"- Значением поля \"auth.instance_id\" должно быть \"raCertAuth\".\n" -"\n" -"- Должны использоваться входной класс \"certReqInputImpl\" и выходной класс " -"\"certOutputImpl\".\n" - -msgid "Profile ID for referring to this profile" -msgstr "Идентификатор профиля для ссылки на этот профиль" - -msgid "Profile description" -msgstr "Описание профиля" - -msgid "Brief description of this profile" -msgstr "Краткое описание этого профиля" - -msgid "Store issued certificates" -msgstr "Сохранять выданные сертификаты" - -msgid "Whether to store certs issued using this profile" -msgstr "" -"Определяет, следует ли сохранять сертификаты, выданные с помощью этого " -"профиля" - -msgid "Delete a Certificate Profile." -msgstr "Удалить профиль сертификатов." - -msgid "Search for Certificate Profiles." -msgstr "Поиск профилей сертификатов." - -msgid "Import a Certificate Profile." -msgstr "Импортировать профиль сертификатов." - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" -"Имя файла необработанного профиля. Поддержка формата XML не предусмотрена." - -msgid "Modify Certificate Profile configuration." -msgstr "Изменить конфигурацию профиля сертификатов." - -msgid "File containing profile configuration" -msgstr "Файл, который содержит конфигурацию профиля" - -msgid "Display the properties of a Certificate Profile." -msgstr "Показать свойства профиля сертификатов." - -msgid "Write profile configuration to file" -msgstr "Записать конфигурацию профиля в файл" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" -"Максимальное количество времени (в секундах) для поиска (-1 или 0 означает " -"отсутствие ограничения)" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "" -"Максимальное количество записей результатов поиска (-1 или 0 означает " -"отсутствие ограничения)" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" -"\n" -"Повысить уровень домена IPA.\n" - -msgid "Query current Domain Level." -msgstr "Запросить текущий уровень домена." - -msgid "Current domain level:" -msgstr "Текущий уровень домена:" - -msgid "Change current Domain Level." -msgstr "Изменить текущий уровень домена." - -msgid "Domain Level" -msgstr "Уровень домена" - -msgid "Add certificates to host entry" -msgstr "Добавить сертификаты в запись узла" - -msgid "Remove certificates from host entry" -msgstr "Удалить сертификаты из записи узла." - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" -"\n" -"Добавление нового диапазона идентификаторов.\n" -"\n" -" Для добавления нового диапазона идентификаторов всегда необходимо " -"указывать\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Кроме того,\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" могут указываться для нового диапазона идентификаторов для локального " -"домена, в то время как\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" должны быть указаны для добавления нового диапазона для доверенного " -"домена AD.\n" -"\n" -"======= \n" -"ПРЕДУПРЕЖДЕНИЕ:\n" -"\n" -"Подключаемый модуль DNA в 389-ds выделяет идентификаторы на основе " -"диапазонов, настроенных для локального домена. В текущей версии сам " -"подключаемый модуль DNA *нельзя* перенастраивать на основе локальных " -"диапазонов, установленных с помощью этого семейства команд.\n" -"\n" -"Для нового локального диапазона следует вручную изменить настройки " -"конфигурации подключаемого модуля DNA. В частности, следует изменить атрибут " -"dnaNextRange \"cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config\" таким " -"образом, чтобы он соответствовал новому диапазону.\n" -"=======" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" -"\n" -"Изменить диапазон идентификаторов.\n" -" \n" -"======= \n" -"ПРЕДУПРЕЖДЕНИЕ:\n" -"\n" -"Подключаемый модуль DNA в 389-ds выделяет идентификаторы на основе " -"диапазонов, настроенных для локального домена. В текущей версии сам " -"подключаемый модуль DNA *нельзя* перенастраивать на основе локальных " -"диапазонов, установленных с помощью этого семейства команд.\n" -"\n" -"Для нового локального диапазона следует вручную изменить настройки " -"конфигурации подключаемого модуля DNA. В частности, следует изменить атрибут " -"dnaNextRange \"cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config\" таким " -"образом, чтобы он соответствовал новому диапазону.\n" -"=======" - -msgid "Fallback to AD DC LDAP" -msgstr "Перейти к резервному варианту LDAP DC AD " - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" -"Разрешить переход к резервному варианту LDAP DC AD при определении адресов " -"доверенных объектов AD. Только для двусторонних отношений доверия." - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" -"Применяет представление ID к указанным узлам или текущим участникам " -"указанных групп узлов. Если к узлу применяется другое представление ID, оно " -"будет переопределено." - -msgid "Add to default group" -msgstr "Добавить в группу по умолчанию" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" -"Добавить перенесённые записи пользователей без группы в группу по умолчанию " -"(значение по умолчанию: true)" - -msgid "Search scope" -msgstr "Область поиска" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" -"Область поиска LDAP для пользователей и групп: base, onelevel или subtree. " -"Значение по умолчанию: onelevel." - -msgid "Remove users that can manage this token." -msgstr "Удалить пользователей, которые могут управлять этим токеном." - -msgid "Target DN subtree" -msgstr "Поддерево DN цели" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" -"Необязательное поддерево DN, в которое может быть перемещена запись (должна " -"находиться в поддереве, но может ещё не существовать)" - -msgid "Origin DN subtree" -msgstr "Поддерево DN происхождения" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" -"Необязательное поддерево DN, из которого может быть перемещена запись " -"(должна принадлежать к поддереву, но может ещё не существовать)" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" -"\n" -"IPA-серверы\n" -"\n" -"Получение сведений об установленных IPA-серверах.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Найти все серверы:\n" -" ipa server-find\n" -"\n" -" Показать определённый сервер:\n" -" ipa server-show ipa.example.com\n" - -msgid "Server name" -msgstr "Имя сервера" - -msgid "IPA server hostname" -msgstr "Имя узла IPA-сервера" - -msgid "Managed suffix" -msgstr "Управляемый суффикс" - -msgid "Min domain level" -msgstr "Мин. уровень домена" - -msgid "Minimum domain level" -msgstr "Минимальный уровень домена" - -msgid "Max domain level" -msgstr "Макс. уровень домена" - -msgid "Maximum domain level" -msgstr "Максимальный уровень домена" - -msgid "Delete IPA server." -msgstr "Удалить IPA-сервер." - -msgid "Search for IPA servers." -msgstr "Поиск IPA-серверов." - -msgid "Show IPA server." -msgstr "Показать IPA-сервер." - -msgid "Add new certificates to a service" -msgstr "Добавить новые сертификаты в запись службы." - -msgid "Remove certificates from a service" -msgstr "Удалить сертификаты из записи службы." - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" -"\n" -"Ограниченное делегирование служб\n" -"\n" -"Управление правилами, с помощью которых можно ограничить делегирование " -"учётных данных таким образом, что служба сможет выполнять олицетворение " -"пользователя при обмене данными с другой службой без необходимости для " -"пользователя самом деле перенаправлять билет для получения билета (TGT). " -"Такой метод делегирования учётных данных значительно лучше, так как " -"предотвращает раскрытие краткосрочного секрета пользователя.\n" -"\n" -"В соответствии с соглашением об именовании к имени соответствующего правила " -"добавляется слово \"target\" или \"targets\". Такая схема имён не является " -"обязательной, но она помогает концептуально связать правила и их " -"назначения.\n" -"\n" -"Правило состоит из двух компонентов:\n" -" - Список целей (назначений), к которым применяется правило\n" -" - Список memberPrincipals, которым разрешено делегирование для этих " -"целей \n" -"\n" -"Цель состоит из списка учётных записей, которые можно делегировать.\n" -"\n" -"Если проще, правило утверждает, что определённую учетную запись можно " -"делегировать как указанный список учётных записей, согласно заданному списку " -"целей.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новое правило ограниченного делегирования:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Добавить новую цель ограниченного делегирования:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Добавить учётную запись в правило:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Добавить цель в правило:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Добавить учётную запись в цель:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Показать сведения об именованном правиле делегирования и цели:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Удалить ограниченное делегирование:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"В этом примере служба ftp может получать билет для получения билета для " -"службы ldap от имени связанного пользователя.\n" -"\n" -"Настоятельно не рекомендуется изменять делегирования, которые поставляются с " -"IPA, ipa-http-delegation и его цели ipa-cifs-delegation-targets и Ipa-ldap-" -"delegation-targets. Неправильная настройка может привести к потере " -"возможности делегирования, что повлечет неработоспособность всей системы.\n" - -msgid "Allowed Target" -msgstr "Допустимая цель" - -msgid "Create a new service delegation rule." -msgstr "Создать новое правило делегирования служб." - -msgid "Add member to a named service delegation rule." -msgstr "Добавить участника в именованное правило делегирования служб." - -msgid "member principal" -msgstr "учётная запись — участник" - -msgid "principal to add" -msgstr "учётная запись, которую следует добавить" - -msgid "Add target to a named service delegation rule." -msgstr "Добавить цель в именованное правило делегирования служб." - -msgid "member service delegation target" -msgstr "цель делегирования служб — участник" - -msgid "service delegation targets to add" -msgstr "цели делегирования служб, которые следует добавить" - -msgid "Delete service delegation." -msgstr "Удалить делегирование служб." - -msgid "Search for service delegations rule." -msgstr "Поиск правила делегирования служб." - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" -"Результаты должны содержать только атрибут главного ключа (\"delegation-name" -"\")" - -msgid "Remove member from a named service delegation rule." -msgstr "Удалить участника из именованного правила делегирования служб." - -msgid "principal to remove" -msgstr "учётная запись, которую следует удалить" - -msgid "Remove target from a named service delegation rule." -msgstr "Удалить цель из именованного правила делегирования служб." - -msgid "service delegation targets to remove" -msgstr "цели делегирования служб, которые следует удалить" - -msgid "Display information about a named service delegation rule." -msgstr "Показать сведения об именованном правиле делегирования служб." - -msgid "Create a new service delegation target." -msgstr "Создать новую цель делегирования служб." - -msgid "Add member to a named service delegation target." -msgstr "Добавить участника в именованную цель делегирования служб." - -msgid "Delete service delegation target." -msgstr "Удалить цель делегирования служб." - -msgid "Search for service delegation target." -msgstr "Поиск цели делегирования служб." - -msgid "Remove member from a named service delegation target." -msgstr "Удалить участника из именованной цели делегирования служб." - -msgid "Display information about a named service delegation target." -msgstr "Показать сведения об именованной цели делегирования служб." - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" -"\n" -"Неподтверждённые пользователи\n" -"\n" -"Управление записями неподтверждённых пользователей.\n" -"\n" -"Записи неподтверждённых пользователей находятся непосредственно в " -"контейнере: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\". Пользователь не может проходить " -"аутентификацию с помощью этих записей (даже если они содержат учётные " -"данные), они являются кандидатами на преобразование в активные записи. \n" -"\n" -"Активные записи пользователей являются пользователями Posix, находящимися " -"непосредственно в контейнере: \"cn=accounts, SUFFIX\". Пользователь может " -"проходить аутентификацию с помощью активных записей, если они содержат " -"учётные данные.\n" -"\n" -"Удалённые записи пользователей являются пользователями Posix, находящимися " -"непосредственно в контейнере: \"cn=deleted users, cn=accounts, " -"cn=provisioning, SUFFIX\". Пользователь не может проходить аутентификацию с " -"помощью этих записей (даже если они содержат учётные данные).\n" -"\n" -"Контейнер неподтверждённых пользователей содержит записи:\n" -" - созданные с помощью команд \"stageuser-add\", которые являются " -"пользователями Posix\n" -" - созданные с помощью внешней системы подготовки \n" -"\n" -"Корректная запись неподтверждённого пользователя ДОЛЖНА отвечать следующим " -"требованиям:\n" -" - RDN записи имеет значение \"uid\"\n" -" - ipaUniqueID имеет значение \"autogenerate\"\n" -"\n" -"IPA поддерживает широкий спектр форматов имён пользователей, но следует " -"учитывать те ограничения, которые могут существовать в конкретной среде. " -"Например, имена пользователей, которые начинаются с цифры или превышают " -"определённую длину, могут привести к проблемам в некоторых системах UNIX.\n" -"Используйте команду \"ipa config-mod\" для изменения формата имени " -"пользователя, разрешённого средствами IPA.\n" -"\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить нового неподтверждённого пользователя:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Добавить неподтверждённого пользователя из контейнера Delete:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" - -msgid "Activate a stage user." -msgstr "Активировать неподтверждённого пользователя." - -msgid "Add a new stage user." -msgstr "Добавить нового неподтверждённого пользователя." - -msgid "Create Stage user in from a delete user" -msgstr "" -"Создать неподтверждённого пользователя на основе удалённого пользователя" - -msgid "Delete a stage user." -msgstr "Удалить неподтверждённого пользователя." - -msgid "Search for stage users." -msgstr "Поиск неподтверждённых пользователей." - -msgid "Search for stage users with these member of groups." -msgstr "" -"Поиск неподтверждённых пользователей, которые являются участниками этой " -"группы." - -msgid "Search for stage users without these member of groups." -msgstr "" -"Поиск неподтверждённых пользователей, которые не являются участниками этой " -"группы." - -msgid "Search for stage users with these member of netgroups." -msgstr "" -"Поиск неподтверждённых пользователей, которые являются участниками этой " -"сетевой группы." - -msgid "Search for stage users without these member of netgroups." -msgstr "" -"Поиск неподтверждённых пользователей, которые не являются участниками этой " -"сетевой группы." - -msgid "Search for stage users with these member of roles." -msgstr "" -"Поиск неподтверждённых пользователей, которые являются участниками этой роли." - -msgid "Search for stage users without these member of roles." -msgstr "" -"Поиск неподтверждённых пользователей, которые не являются участниками этой " -"роли." - -msgid "Search for stage users with these member of HBAC rules." -msgstr "" -"Поиск неподтверждённых пользователей, которые являются участниками этого " -"правила HBAC." - -msgid "Search for stage users without these member of HBAC rules." -msgstr "" -"Поиск неподтверждённых пользователей, которые не являются участниками этого " -"правила HBAC." - -msgid "Search for stage users with these member of sudo rules." -msgstr "" -"Поиск неподтверждённых пользователей, которые являются участниками этого " -"правила Sudo." - -msgid "Search for stage users without these member of sudo rules." -msgstr "" -"Поиск неподтверждённых пользователей, которые не являются участниками этого " -"правила Sudo." - -msgid "Modify a stage user." -msgstr "Изменить неподтверждённого пользователя." - -msgid "Rename the stage user object" -msgstr "Переименовать объект неподтверждённого пользователя" - -msgid "Display information about a stage user." -msgstr "Показать сведения о неподтверждённом пользователе." - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" -"\n" -"Топология\n" -"\n" -"Управление топологией репликации.\n" -"\n" -"Требуется уровень домена не ниже 1.\n" - -msgid "Segment name" -msgstr "Имя сегмента" - -msgid "Arbitrary string identifying the segment" -msgstr "Обязательная строка, которая идентифицирует сегмент" - -msgid "Left node" -msgstr "Левый узел" - -msgid "Left replication node - an IPA server" -msgstr "Левый узел репликации — IPA-сервер" - -msgid "Right node" -msgstr "Правый узел" - -msgid "Right replication node - an IPA server" -msgstr "Правый узел репликации — IPA-сервер" - -msgid "Connectivity" -msgstr "Возможность подключения" - -msgid "Direction of replication between left and right replication node" -msgstr "Направление репликации между левым и правым узлами репликации" - -msgid "Attributes to strip" -msgstr "Атрибуты, которые следует убрать" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" -"Разделённый пробелами список атрибутов, которые удалены из обновлений " -"репликации" - -msgid "Attributes to replicate" -msgstr "Атрибуты, которые следует реплицировать" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" -"Атрибуты, которые не реплицируются на сервер-потребитель при частичном " -"обновлении. Например, `(objectclass=*) $ EXCLUDE accountlockout memberof" - -msgid "Attributes for total update" -msgstr "Атрибуты для общего обновления" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" -"Атрибуты, которые не реплицируются на сервер-потребитель при общем " -"обновлении. Например, (objectclass=*) $ EXCLUDE accountlockout memberof" - -msgid "Session timeout" -msgstr "Время ожидания сеанса" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" -"Количество секунд, в течение которого исходящие операции LDAP ожидают ответа " -"от удалённой реплики, прежде чем будет превышено время ожидания и выдано " -"сообщение об ошибке" - -msgid "Replication agreement enabled" -msgstr "Соглашение о репликации включено" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" -"Активно ли соглашение о репликации, то есть выполняется ли репликация по " -"этому соглашению" - -msgid "Suffix name" -msgstr "Имя суффикса" - -msgid "LDAP suffix to be managed" -msgstr "Суффикс LDAP, которым следует управлять" - -msgid "Add a new segment." -msgstr "Добавить новый сегмент." - -msgid "Delete a segment." -msgstr "Удалить сегмент." - -msgid "Search for topology segments." -msgstr "Поиск сегментов топологии." - -msgid "Modify a segment." -msgstr "Изменить сегмент." - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" -"Отправить запрос на полную повторную инициализацию узла, чтобы получить " -"данные с другого узла." - -msgid "Initialize left node" -msgstr "Инициализировать левый узел" - -msgid "Initialize right node" -msgstr "Инициализировать правый узел" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "Остановить уже начатое обновление выбранного узла (узлов)" - -msgid "Display a segment." -msgstr "Показать сегмент." - -msgid "Add a new topology suffix to be managed." -msgstr "Добавить новый суффикс топологии, которым следует управлять." - -msgid "Delete a topology suffix." -msgstr "Удалить суффикс топологии." - -msgid "Search for topology suffices." -msgstr "Поиск суффиксов топологии." - -msgid "Modify a topology suffix." -msgstr "Изменить суффикс топологии." - -msgid "Show managed suffix." -msgstr "Показать управляемый суффикс." - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" -"\n" -"Проверка топологии репликации для суффикса.\n" -"\n" -"Проверки, которые выполняются:\n" -" 1. проверка того, не отключена ли топология (иначе говоря, имеются ли пути " -"репликации между всеми серверами).\n" -" 2. проверка того, не превышено ли рекомендованное количество соглашений о " -"репликации между серверами. \n" -" " - -msgid "Two-way trust" -msgstr "Двустороннее отношение доверия" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" -"Установить двунаправленное отношение доверия. По умолчанию устанавливается " -"только одностороннее отношение." - -msgid "Preserved user" -msgstr "Хранимый пользователь" - -msgid "Add one or more certificates to the user entry" -msgstr "Добавить один или несколько сертификатов в запись пользователя." - -msgid "Remove one or more certificates to the user entry" -msgstr "Удалить один или несколько сертификатов из записи пользователя." - -msgid "Move deleted user into staged area" -msgstr "Переместить удалённую запись пользователя в область хранения." - -msgid "Undelete a delete user account." -msgstr "Восстановить удалённую учётную запись пользователя." - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -"Хранилища\n" -"\n" -"Управление хранилищами.\n" -"\n" -"Хранилище — это безопасное место для хранения секрета.\n" -"\n" -"В зависимости от владения хранилища подразделяются на три категории:\n" -"* хранилища пользователей или личные хранилища\n" -"* хранилища служб\n" -"* хранилища совместного использования\n" -"\n" -"Хранилища пользователей — это хранилища, владельцем которых является " -"конкретный пользователь. Личными являются хранилища, владельцем которых " -"является текущий пользователь. Владельцем хранилища службы является " -"определённая служба. Хранилища совместного использования принадлежат " -"администратору, но могут использоваться другими пользователями или " -"службами.\n" -"\n" -"В зависимости от механизма обеспечения безопасности выделяют три типа " -"хранилищ:\n" -"* стандартные хранилища\n" -"* симметричные хранилища\n" -"* асимметричные хранилища\n" -"\n" -"В стандартном хранилище для передачи и хранения секрета используются " -"безопасные механизмы. Секрет могут получить только те пользователи, у " -"которых есть доступ к хранилищу.\n" -"\n" -"Симметричное хранилище похоже на стандартное хранилище, но в нём секрет " -"перед передачей предварительно шифруется с помощью пароля. Секрет можно " -"получить только с помощью этого пароля.\n" -"\n" -"Асимметричное хранилище похоже на стандартное хранилище, но в нём секрет " -"перед передачей предварительно шифруется с помощью открытого ключа. Секрет " -"можно получить только с помощью закрытого ключа.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Вывести список хранилищ:\n" -" ipa vault-find\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -"\n" -" Добавить стандартное хранилище:\n" -" ipa vault-add <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --type standard\n" -"\n" -" Добавить симметричное хранилище:\n" -" ipa vault-add <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Добавить асимметричное хранилище:\n" -" ipa vault-add <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Показать хранилище:\n" -" ipa vault-show <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -"\n" -" Изменить описание хранилища:\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --desc <описание>\n" -"\n" -" Изменить тип хранилища:\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --type <тип>\n" -" [старый пароль / закрытый ключ]\n" -" [новый пароль / открытый ключ]\n" -"\n" -" Изменить пароль симметричного хранилища:\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --change-password\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --old-password <старый пароль>\n" -" --new-password <новый пароль>\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --old-password-file <файл старого пароля>\n" -" --new-password-file <файл нового пароля>\n" -"\n" -" Изменить ключи асимметричного хранилища:\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --private-key-file <файл старого закрытого ключа>\n" -" --public-key-file <файл нового открытого ключа>\n" -"\n" -" Удалить хранилище:\n" -" ipa vault-del <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -"\n" -" Показать конфигурацию хранилища:\n" -" ipa vaultconfig-show\n" -"\n" -" Архивировать данные в стандартное хранилище:\n" -" ipa vault-archive <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --in <файл входных данных>\n" -"\n" -" Архивировать данные в симметричное хранилище:\n" -" ipa vault-archive <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --in <файл входных данных>\n" -" --password-file password.txt\n" -"\n" -" Архивировать данные в асимметричное хранилище:\n" -" ipa vault-archive <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --in <файл входных данных>\n" -"\n" -" Получить данные из стандартного хранилища:\n" -" ipa vault-retrieve <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --out <файл выходных данных>\n" -"\n" -" Получить данные из симметричного хранилища:\n" -" ipa vault-retrieve <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --out <файл выходных данных>\n" -" --password-file password.txt\n" -"\n" -" Получить данные из асимметричного хранилища:\n" -" ipa vault-retrieve <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --out <файл выходных данных> --private-key-file private.pem\n" -"\n" -" Добавить владельцев хранилища:\n" -" ipa vault-add-owner <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" -"\n" -" Удалить владельцев хранилища:\n" -" ipa vault-remove-owner <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" -"\n" -" Добавить участников хранилища:\n" -" ipa vault-add-member <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" -"\n" -" Удалить участников хранилища:\n" -" ipa vault-remove-member <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" - -msgid "Vault name" -msgstr "Имя хранилища" - -msgid "Vault description" -msgstr "Описание хранилища" - -msgid "Vault type" -msgstr "Тип хранилища" - -msgid "Salt" -msgstr "Соль" - -msgid "Vault salt" -msgstr "Соль хранилища" - -msgid "Public key" -msgstr "Открытый ключ" - -msgid "Vault public key" -msgstr "Открытый ключ хранилища" - -msgid "Owner users" -msgstr "Пользователи-владельцы" - -msgid "Owner groups" -msgstr "Группы-владельцы" - -msgid "Owner services" -msgstr "Службы-владельцы" - -msgid "Failed owners" -msgstr "Записи владельцев с ошибками" - -msgid "Vault service" -msgstr "Служба хранилища" - -msgid "Shared vault" -msgstr "Хранилище совместного использования" - -msgid "Vault user" -msgstr "Пользователь хранилища" - -msgid "Transport Certificate" -msgstr "Сертификат транспорта" - -msgid "Service name of the service vault" -msgstr "Имя службы хранилища служб" - -msgid "Username of the user vault" -msgstr "Имя пользователя хранилища пользователей" - -msgid "Add members to a vault." -msgstr "Добавить участников в хранилище." - -msgid "Add owners to a vault." -msgstr "Добавить владельцев в хранилище." - -msgid "owner user" -msgstr "пользователь-владелец" - -msgid "owner group" -msgstr "группа-владелец" - -msgid "owner service" -msgstr "служба-владелец" - -msgid "Owners that could not be added" -msgstr "Владельцы, которых не удалось добавить" - -msgid "Number of owners added" -msgstr "Количество добавленных владельцев" - -msgid "Session key wrapped with transport certificate" -msgstr "Ключ сеанса, упакованный с сертификатом транспорта" - -msgid "Vault data encrypted with session key" -msgstr "Данные хранилища, зашифрованные ключом сеанса" - -msgid "Nonce" -msgstr "Специальный" - -msgid "Delete a vault." -msgstr "Удалить хранилище." - -msgid "Search for vaults." -msgstr "Поиск хранилищ." - -msgid "List all service vaults" -msgstr "Вывести список всех хранилищ служб" - -msgid "List all user vaults" -msgstr "Вывести список всех хранилищ пользователей" - -msgid "Remove members from a vault." -msgstr "Удалить участников из хранилища." - -msgid "Remove owners from a vault." -msgstr "Удалить владельцев из хранилища." - -msgid "Owners that could not be removed" -msgstr "Владельцы, которых не удалось удалить" - -msgid "Number of owners removed" -msgstr "Количество удалённых владельцев" - -msgid "Display information about a vault." -msgstr "Показать сведения о хранилище." - -msgid "Show vault configuration." -msgstr "Показать конфигурацию хранилища." - -msgid "Output file to store the transport certificate" -msgstr "Выходной файл для хранения сертификата транспорта" - -msgid "Add owners to a vault container." -msgstr "Добавить владельцев в контейнер хранилищ." - -msgid "Delete a vault container." -msgstr "Удалить контейнер хранилищ." - -msgid "Remove owners from a vault container." -msgstr "Удалить владельцев из контейнера хранилищ." - -msgid "Display information about a vault container." -msgstr "Показать сведения о контейнере хранилищ." - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "Определить адрес по имени узла в DNS. (Больше не поддерживается.)" - -msgid "Hostname (FQDN)" -msgstr "Имя узла (FQDN)" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" -"Принудительно создать зону DNS, даже если она будет пересекаться с " -"существующей зоной" - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" -"Принудительно создать зону DNS, даже если не удаётся определить сервер имён. " -"(Больше не поддерживается.)" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" -"\n" -"Группы пользователей\n" -"\n" -"Управление группами пользователей. По умолчанию все новые группы являются " -"POSIX-группами. Можно добавить параметр --nonposix в команду group-add, " -"чтобы отметить новую группу в качестве не-POSIX-группы. В команде group-mod " -"можно использовать аргумент --posix, чтобы преобразовать не-POSIX-группу в " -"POSIX-группу. POSIX-группы нельзя преобразовать в не-POSIX-группы. \n" -"\n" -"У каждой группы должно быть описание.\n" -"\n" -"У POSIX-групп должен быть идентификатор группы (GID). Изменение GID " -"поддерживается, но может повлиять на разрешения для файлов. При создании " -"группы необязательно предоставлять GID. Если он не будет предоставлен, IPA " -"создаст его автоматически.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую группу:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Добавить новую не-POSIX-группу:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Преобразовать не-POSIX-группу в posix-группу:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Добавить новую POSIX-группу с определённым ID группы:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Добавить новую POSIX-группу и позволить IPA назначить ID группы:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Удалить группу:\n" -" ipa group-del unixadmins\n" -"\n" -" Чтобы добавить группу \"remoteadmins\" в группу \"localadmins\":\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Добавить нескольких пользователей в группу \"localadmins\":\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Удалить пользователя из группы \"localadmins\":\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Показать сведения об именованной группе:\n" -" ipa group-show localadmins\n" -"\n" -"Участие внешних групп создано для того, чтобы сделать возможной привязку " -"пользователей из доверенных доменов к локальным POSIX-группам с целью " -"использования ресурсов IPA. Внешние участники должны быть добавлены в " -"группы, которые специально созданы, как внешние и не-POSIX. Такая группа " -"затем должна быть включена в одну из групп POSIX.\n" -"\n" -"В текущей версии участник внешней группы является идентификатором " -"безопасности (Security Identifier или SID), определённым доверенным доменом. " -"Добавление участников внешней группы можно выполнить в формате SID, DOM\\имя " -"или имя@домен. IPA попытается определить SID по переданному имени путём " -"использования общего каталога доверенного домена.\n" -"\n" -"Пример:\n" -"\n" -"1. Создать группу для привязки администраторов (admins) доверенного домена и " -"их локальную POSIX-группу:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Добавить идентификатор безопасности Domain Admins домена " -"группе ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Разрешить привязку группы ad_admins_external к POSIX-группе ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Вывести список внешних участников группы ad_admins_external, чтобы " -"определить их SID:\n" -"\n" -" ipa group-show ad_admins_external\n" +" 1. Использовать все включённые правила HBAC в базе данных IPA:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" не соответствует: my-second-rule\n" +" не соответствует: my-third-rule\n" +" не соответствует: myrule\n" +" соответствует: allow_all\n" +"\n" +" 2. Отключить подробный отчёт о применении правил:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +"\n" +" 3. Проверить явно указанные правила HBAC:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Доступ предоставлен: Нет\n" +" ---------------------\n" +" не соответствует: my-second-rule\n" +" не соответствует: myrule\n" +"\n" +" 4. Использовать все включённые правила HBAC в базе данных IPA + явно " +"указанные правила:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" не соответствует: my-second-rule\n" +" не соответствует: my-third-rule\n" +" не соответствует: myrule\n" +" соответствует: allow_all\n" +"\n" +" 5. Проверить все отключённые правила HBAC в базе данных IPA:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Доступ предоставлен: Нет\n" +" ---------------------\n" +" не соответствует: new-rule\n" +"\n" +" 6. Проверить все отключённые правила HBAC в базе данных IPA + явно " +"указанные правила:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Доступ предоставлен: Нет\n" +" ---------------------\n" +" не соответствует: my-second-rule\n" +" не соответствует: my-third-rule\n" +" не соответствует: myrule\n" +"\n" +" 7. Проверить все (включённые и отключённые) правила HBAC в базе данных " +"IPA:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" не соответствует: my-second-rule\n" +" не соответствует: my-third-rule\n" +" не соответствует: myrule\n" +" не соответствует: new-rule\n" +" соответствует: allow_all\n" msgid "" "\n" @@ -13339,9 +12518,9 @@ msgstr "" "Подключаемый модуль hbactest позволяет проверять доступ как для локальных " "пользователей IPA, так и для пользователей из доверенных доменов, как с " "полным именем пользователя, так и по SID пользователей. В таких именах " -"пользователей должен быть указан доверенный домен в краткой форме (DOMAIN" -"\\Administrator) или имя учётной записи пользователя (UPN), Administrator@ad." -"test.\n" +"пользователей должен быть указан доверенный домен в краткой форме " +"(DOMAIN\\Administrator) или имя учётной записи пользователя (UPN), " +"Administrator@ad.test.\n" "\n" "Обратите внимание, что выполнять hbactest с аргументом пользователя " "доверенного домена в параметре --user могут только участники группы \"trust " @@ -13407,1948 +12586,11 @@ msgstr "" " Несоответствующие правила: can_login\n" "\n" -msgid "Managed suffixes" -msgstr "Управляемые суффиксы" - -msgid "Check connection to remote IPA server." -msgstr "Проверить связь с удалённым IPA-сервером." - -msgid "Remote server name" -msgstr "Имя удалённого сервера" - -msgid "Remote IPA server hostname" -msgstr "Имя узла удалённого IPA-сервера" - -msgid "suffix" -msgstr "суффикс" - -msgid "Search for servers with these managed suffixes." -msgstr "Поиск серверов, включая серверы с этими управляемыми суффиксами." - -msgid "Search for servers without these managed suffixes." -msgstr "Поиск серверов, не включая серверы с этими управляемыми суффиксами. " - -msgid "Add a manager to the stage user entry" -msgstr "Добавить руководителя в запись неподтверждённого пользователя." - -msgid "Remove a manager to the stage user entry" -msgstr "Удалить руководителя из записи неподтверждённого пользователя." - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" -"\n" -"Топология\n" -"\n" -"Управление топологией репликации на уровне домена 1.\n" -"\n" -"Данные IPA-сервера хранятся на LDAP-сервере в двух суффиксах:\n" -"* суффикс домена (domain), например, \"dc=example,dc=com\", содержит все " -"связанные с доменом данные\n" -"* суффикс центра сертификации (ca), \"o=ipaca\", имеется только на серверах " -"с установленным CA. Он содержит данные для компонента сервера сертификатов\n" -"\n" -"Данные, которые хранятся на IPA-серверах, реплицируются на другие IPA-" -"серверы. Способ репликации определяется соглашениями о репликации. " -"Соглашения о репликации необходимо устанавливать для каждого из суффиксов " -"отдельно. На уровне домена 0 управление ими выполняется с помощью средств " -"ipa-replica-manage и ipa-csreplica-manage. На уровне домена 1 управление " -"выполняется централизованно с помощью команд \"ipa topology*\".\n" -"\n" -"Соглашения представляются сегментами топологии. По умолчанию сегмент " -"топологии представляет 2 соглашения о репликации: по одному для каждого " -"направления, например, от A до B и от B до A. Создание однонаправленных " -"сегментов запрещено.\n" -"\n" -"Чтобы проверить, что ни один сервер не отключается в топологии указанного " -"суффикса, используйте эту команду:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Примеры:\n" -" Найти все IPA-серверы:\n" -" ipa server-find\n" -"\n" -" Найти все суффиксы:\n" -" ipa topologysuffix-find\n" -"\n" -" Добавить сегмент топологии в суффикс \"domain\":\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Добавить сегмент топологии в суффикс \"ca\":\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Вывести список всех сегментов топологии в суффиксе \"domain\":\n" -" ipa topologysegment-find domain\n" -"\n" -" Вывести список всех сегментов топологии в суффиксе \"ca\":\n" -" ipa topologysegment-find ca\n" -"\n" -" Удалить сегмент топологии в суффиксе \"domain\":\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Удалить сегмент топологии в суффиксе \"ca\":\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Проверить топологию суффикса \"domain\":\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Проверить топологию суффикса \"ca\":\n" -" ipa topologysuffix-verify ca\n" - -msgid "Managed LDAP suffix DN" -msgstr "DN управляемого суффикса LDAP" - -msgid "Search for topology suffixes." -msgstr "Поиск суффиксов топологии." - -msgid "Add a manager to the user entry" -msgstr "Добавить руководителя в запись пользователя." - -msgid "Remove a manager to the user entry" -msgstr "Удалить руководителя из записи пользователя." - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" -"\n" -"Инструкции управления доступом к серверу каталогов (ACI)\n" -"\n" -"ACI используются, чтобы разрешить или запретить доступ к информации. Текущая " -"версия модуля предназначена для предоставления, а не запрета доступа. \n" -"\n" -"Команды aci позволяют предоставить разрешения, благодаря которым можно " -"обновлять существующие записи, а также добавлять или удалять новые. Задача " -"ACI, поставляемых вместе с IPA: предоставить набор низкоуровневых " -"разрешений, которые дают доступ к специальным группам. Такие группы " -"называются группами задач. Данные низкоуровневые разрешения можно сочетать " -"между собой, формируя роли, чтобы предоставить больший объём доступа. Эти " -"роли представляют собой ещё один тип групп: группы ролей.\n" -"\n" -"Например, если имеются группы задач, которые разрешают добавлять и изменять " -"данные пользователей, то можно создать роль администратора пользователей " -"(useradmin). Если назначить пользователям роль useradmin, им будет разрешено " -"выполнять операции, определённые группами задач.\n" -"\n" -"Можно создавать ACI, которые будут предоставлять разрешения таким образом, " -"что пользователи группы A смогут записывать атрибуты для группы B.\n" -"\n" -"Параметр \"тип\" (type) — это список, который применяется ко всем записям " -"пользователей, записям групп или расположению узла. Он предназначен в " -"основном для предоставления прав доступа для добавления (создание новых " -"записей).\n" -"\n" -"Запись ACI состоит из трёх частей:\n" -"1. цель\n" -"2. разрешения\n" -"3. правила привязки\n" -"\n" -"Цель — это набор правил, которые определяют, какие объекты LDAP являются " -"целевыми. Это может быть список атрибутов, область этого дерева LDAP или " -"фильтр LDAP.\n" -"\n" -"Цели содержат:\n" -"- attrs: список атрибутов, которых касается цель\n" -"- type: тип объектов (пользователь, группа, узел, служба и так далее)\n" -"- memberof: участники группы\n" -"- targetgroup: предоставить доступ к изменению определённой группы. Эта " -"часть в основном разработана для предоставления пользователям разрешения на " -"добавление или удаление участников определённой группы.\n" -"- filter: действующий фильтр LDAP, используемый для сужения цели.\n" -"- subtree: используется для применения правила к целому набору объектов. " -"Например, чтобы разрешить добавление пользователей, следует предоставить " -"разрешение \"add\" для поддерева ldap://uid=*,cn=users,cn=accounts," -"dc=example,dc=com. Параметр subtree подходит для объектов, которые не " -"подпадают под действие параметра type.\n" -"\n" -"Разрешения определяют, какие действия разрешены для ACI, и могут быть одними " -"из следующих (или сочетать в себе несколько вариантов):\n" -"1. write - записать один или несколько атрибутов.\n" -"2. read - прочитать один или несколько атрибутов.\n" -"3. add - добавить в дерево новую запись.\n" -"4. delete - удалить существующую запись.\n" -"5. all - предоставляются все разрешения.\n" -"\n" -"Обратите внимание на разницу между атрибутами и записями. Разрешения " -"являются независимыми, поэтому возможность добавить пользователя не означает " -"возможность изменять запись добавленного пользователя.\n" -"\n" -"Правило привязки определяет, кому предоставляет разрешения ACI. LDAP-сервер " -"позволяет сделать это для любой действительной записи LDAP, но мы " -"рекомендуем использовать группы задач, чтобы можно было легко обеспечить " -"общий доступ к правам с помощью ролей.\n" -"\n" -"Более подробные сведения об управлении доступом:\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -"ПРИМЕЧАНИЕ: в текущей версии записи записи ACI добавляются через " -"подключаемый модуль разрешений. Следующие примеры показывают, как работают " -"различные параметры, но сейчас это выполняется через командную строку (см. " -"последний пример).\n" -"\n" -" Добавить запись ACI, чтобы группа \"secretaries\" могла обновлять адрес " -"любого пользователя:\n" -" ipa group-add --desc=\"Офисные секретари\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Секретари записывают адреса\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Секретари записывают адреса\"\n" -"\n" -" Добавить запись ACI, которая разрешает участникам разрешения \"addusers\" " -"добавлять новых пользователей:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Добавление пользователей\"\n" -"\n" -" Добавить запись ACI, которая разрешает участникам группы \"editors\" " -"управлять записями участников группы \"admins\":\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Редакторы управляют администраторами\"\n" -"\n" -" Добавить запись ACI, которая разрешает участникам группы \"admins\" " -"изменять название улицы и почтовый индекс участников группы \"editors\":\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"администраторы редактируют адрес " -"редакторов\"\n" -"\n" -" Добавить запись ACI, которая разрешает участникам группы \"admins\" " -"изменять название улицы и почтовый индекс тех, кто работает под руководством " -"начальника:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Редактировать адрес тех, кто работает под руководством " -"начальника\"\n" -"\n" -" Добавить в IPA совершенно новый вид записи, который не предусмотрен ни " -"одним из параметров \"--type\", путём создания разрешения:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Добавление оранжевых записей\" " -"add_orange\n" -"\n" -"\n" -"Команда show показывает необработанную запись ACI 389-ds.\n" -"\n" -"ВАЖНО: при изменении атрибутов цели существующей записи ACI необходимо также " -"включить все существующие атрибуты. Когда выполняется aci-mod, targetattr " -"ЗАМЕНЯЕТ текущие атрибуты, а не добавляет к ним другие.\n" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" -"Разделённый запятыми список разрешений, которые следует предоставить (read, " -"write, add, delete, all)" - -msgid "Comma-separated list of attributes" -msgstr "Разделённый запятыми список атрибутов" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" -"\n" -"Правило автоучастия.\n" -"\n" -"Внося ясные правила о принадлежности узлов и пользователей к группам " -"посредством настройки включающих и исключающих шаблонов регулярных " -"выражений, вы можете автоматически связывать новые записи с группой или " -"группой узлов на основе данных атрибутов.\n" -"\n" -"Правило непосредственно связывается с группой по имени, следовательно, вы не " -"можете создать правило без определения группы или группы узлов. \n" -"\n" -"Условие является регулярным выражением, используется 389-ds для установления " -"соответствия новой входящей записи правилу автоучастия. Если имеется " -"соответствие правилу включения, запись добавляется в соответствующую группу " -"или группу узлов.\n" -"\n" -"Можно указать группу или группу узлов по умолчанию, которая будет " -"использоваться для записей, не соответствующих ни одному правилу. В случае " -"записей пользователей эта группа будет резервной группой, поскольку все " -"пользователи по умолчанию являются участниками группы, указанной в " -"настройках IPA.\n" -"\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -"Добавить начальную группу или группу узлов :\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Добавить начальное правило:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Добавить в правило условие:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Добавить в правило исключительное условие, чтобы предотвратить " -"автоназначение:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Добавить узел:\n" -" ipa host-add web1.example.com\n" -"\n" -" Добавить пользователя:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -"Проверить автоучастие:\n" -" ipa hostgroup-show webservers\n" -" Группа узлов: webservers\n" -" Описание: Web Servers\n" -" Узлы-участники: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Имя группы: devel\n" -" Описание: Developers\n" -" GID: 1004200000\n" -" Пользователи-участники: tuser\n" -"\n" -" Удалить условие из правила:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Изменить правило автоучастия:\n" -" ipa automember-mod\n" -"\n" -" Установить целевую группу по умолчанию (резервную):\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Удалить целевую группу по умолчанию (резервную):\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Показать целевую группу по умолчанию (резервную):\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Найти все правила автоучастия:\n" -" ipa automember-find\n" -"\n" -" Показать правило автоучастия:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Удалить правило автоучастия:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" -"\n" -"Операции с сертификатами IPA \n" -"\n" -"Применение набора команд для управления сертификатами SSL-серверов.\n" -"\n" -"Запросы сертификатов существуют в виде запроса подписи сертификата " -"(Certificate Signing Request, CSR) в формате PEM.\n" -"\n" -"Если используется бэкенд с самоподписанным сертификатом, субъект в CSR " -"должен соответствовать субъекту, настроенному на сервере. Система выдачи " -"сертификатов Dogtag Certificate System использует только значение CN в CSR и " -"принудительно устанавливает остальные параметры субъекта.\n" -"\n" -"Сертификат хранится в учётной записи службы, а учётной записи службы " -"требуется узел.\n" -"\n" -"Чтобы запросить сертификат:\n" -"\n" -"* Должен существовать узел\n" -"* Должна существовать служба (либо следует использовать параметр --add для " -"её автоматического добавления)\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Запросить новый сертификат и добавить учётную запись:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Получить существующий сертификат:\n" -" ipa cert-show 1032\n" -"\n" -" Отозвать сертификат (подробные сведения о причинах доступны в RFC 5280):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Удалить сертификат из списка отзыва:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Проверить состояние запроса подписи:\n" -" ipa cert-status 10\n" -"\n" -"В текущей версии IPA немедленно выполняет (или отклоняет) все запросы " -"сертификатов, следовательно, данные о состоянии запроса не являются " -"полезными. Эти данные могут понадобиться в следующих версиях или в случае, " -"если CA не сразу выдаёт сертификат.\n" -"\n" -"Поддерживаются следующие причины отзыва:\n" -"\n" -" * 0 - не указано\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Обратите внимание, что код причины 7 не используется. Подробные сведения в " -"RFC 5280:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" -"\n" -"Межгрупповое делегирование\n" -"\n" -"С помощью разрешений самообслуживания можно очень точно делегировать " -"разрешения. Правила или инструкции управления доступом (ACI) предоставляют " -"разрешениям разрешение на выполнение конкретных задач, таких как добавление " -"пользователя, изменение группы и так далее.\n" -"\n" -"Межгрупповое делегирование предоставляет участникам одной группы возможность " -"обновлять набор атрибутов участников другой группы. \n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить правило делегирования, чтобы разрешить руководителям редактировать " -"адреса сотрудников:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees\" street\"\n" -"\n" -"В список атрибутов необходимо включить все атрибуты, в том числе уже " -"существующие. Добавить postalCode в список:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees\" street\"\n" -"\n" -" Показать обновлённое правило:\n" -" ipa delegation-show \"managers edit employees\" street\"\n" -"\n" -" Удалить правило:\n" -" ipa delegation-del \"managers edit employees\" street\"\n" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" -"Разделённый запятыми список разрешений, которые следует предоставить (read, " -"write). По умолчанию предоставляется разрешение \"write\" (запись)." - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" -"\n" -"Система доменных имён (DNS)\n" -"\n" -"Управление записями зон и ресурсов DNS.\n" -"\n" -"\n" -"ИСПОЛЬЗОВАНИЕ СТРУКТУРИРОВАННЫХ ПАРАМЕТРОВ ДЛЯ ОТДЕЛЬНЫХ ТИПОВ\n" -"\n" -"Существует много структурированных типов записей ресурсов DNS, для которых " -"данные DNS, хранящиеся на сервере LDAP, являются не просто скалярным " -"значением, например IP-адрес или имя домена, а структурой данных, которая " -"часто может быть сложной. Примером может быть запись LOC [RFC1876], которая " -"состоит из многих обязательных и необязательных частей (градусов, минут, " -"секунд широты и долготы, высоты и погрешности).\n" -"\n" -"При работе с такими записями DNS может быть сложно не допустить ошибок и " -"ввести корректное значение. Модуль DNS предоставляет в ваше распоряжение " -"абстракцию над этими необработанными записями и позволяет управлять каждым " -"из типов записей ресурсов с помощью определённых параметров. Для каждого из " -"поддерживаемых типов записей ресурсов в модуле DNS предусмотрен стандартный " -"параметр для работы с необработанными записями с помощью формата ---" -"rec, например --mx-rec, и специальные параметры для каждой из частей " -"структуры записи ресурса с помощью формата ---, например --" -"mx-preference и --mx-exchanger.\n" -"\n" -"При добавлении записи можно воспользоваться параметрами, специально " -"предназначенными для записей ресурсов, или стандартным параметром для " -"необработанного значения (сочетать эти варианты в одном действии по " -"добавлению нельзя). При внесении изменений в существующую запись можно " -"воспользоваться для изменения одной части записи DNS новыми специальными " -"параметрами записей ресурсов, причём для определения изменённого значения " -"будет использован стандартный вариант необработанного значения. В " -"приведенном ниже примере показано изменение приоритета записи MX с 0 на 1 в " -"записи без внесения изменений в обменник:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую зону:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Добавить общесистемные права доступа, которыми можно воспользоваться для " -"делегирования привилегий для отдельных зон:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Изменить зону, чтобы разрешить динамическое обновление для собственных " -"записей узлов в области (realm) EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" Эта команда эквивалентна следующим командам:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Изменить зону, чтобы разрешить перенос зоны только для локальной сети:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Добавить новую обратную зону, указанную с помощью сетевого IP-адреса:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Добавить другой сервер имён для example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Добавить почтовый сервер для example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Добавить другую запись с помощью специальных параметров записи MX:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Добавить другую запись с помощью интерактивного режима (в который программа " -"переходит в ответ на команды dnsrecord-add, dnsrecord-mod или dnsrecord-del " -"без параметров):\n" -" ipa dnsrecord-add example.com @\n" -" Выберите тип записи ресурса DNS, который следует добавить\n" -" Наиболее распространённые типы для этого типа зон: NS, MX, LOC\n" -"\n" -" Тип записи ресурса DNS: MX\n" -" Приоритет MX: 30\n" -" Обменник MX: mail3\n" -" Имя записи: example.com\n" -" Запись MX: 10 mail1, 20 mail2, 30 mail3\n" -" Запись NS: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Удалить добавленный ранее сервер имён из example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Добавить запись LOC для example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Добавить новую запись A для www.example.com. Также создать обратную запись " -"в соответствующей обратной зоне. В этом случае запись PTR \"2\", которая " -"указывает на www.example.com, будет создана в зоне 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Добавить новую запись PTR для www.example.com:\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Добавить новые записи SRV для LDAP-серверов. Три четверти запросов должны " -"отправляться на fast.example.com, одна четверть — на slow.example.com. Если " -"обе службы недоступны, переключиться на backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" Для облегчения внесения изменений можно воспользоваться интерактивным " -"режимом:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" Возможность внесения изменений в определённую запись не предусмотрена.\n" -" Текущее содержание записи DNS:\n" -"\n" -" Запись SRV: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Изменить запись SRV '0 3 389 fast.example.com'? Да/Нет (по умолчанию \"Нет" -"\"):\n" -" Изменить запись SRV '0 1 389 slow.example.com'? Да/Нет (по умолчанию \"Нет" -"\"): y\n" -" Приоритет SRV [0]: (сохранить значение по умолчанию)\n" -" Вес SRV [1]: 2 (изменённое значение)\n" -" Порт SRV [389]: (сохранить значение по умолчанию)\n" -" Цель SRV [slow.example.com]: (сохранить значение по умолчанию)\n" -" Пропущена 1 запись SRV. Одновременно можно изменять только одно значение " -"на тип записи DNS.\n" -" Имя записи: _ldap._tcp\n" -" Запись SRV: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" После внесения этих изменений три пятых запросов должны направляться на\n" -" fast.example.com, а две пятых — на slow.example.com.\n" -"\n" -" Пример интерактивного режима для команды dnsrecord-del:\n" -" ipa dnsrecord-del example.com www\n" -" Не указан параметр удаления определённой записи.\n" -" Удалить все? Да/Нет (по умолчанию \"Нет\"): (не удалять все записи)\n" -" Текущее содержание записи DNS:\n" -"\n" -" Запись A: 1.2.3.4, 11.22.33.44\n" -"\n" -" Удалить запись A '1.2.3.4'? Да/Нет (по умолчанию \"Нет\"):\n" -" Удалить запись A '11.22.33.44'? Да/Нет (по умолчанию \"Нет\"): y\n" -" Имя записи: www\n" -" Запись A: 1.2.3.4 (запись A 11.22.33.44 удалена)\n" -"\n" -" Показать зону example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Найти зону со словом \"example\" в имени домена:\n" -" ipa dnszone-find example\n" -"\n" -" Найти записи для ресурсов с \"www\" в имени в зоне example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Найти записи A со значением 10.10.0.1 в зоне example.com:\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Показать записи для ресурса www в зоне example.com:\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Делегировать зону sub.example другому серверу имён:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Если настроены глобальные перенаправители, все запросы на sub.example.com " -"будут идти через глобальный перенаправитель. Чтобы изменить это поведение " -"только для зоны example.com и перенаправлять запрос прямо на ns.sub.example." -"com., можно отключить глобальное перенаправление для отдельной зоны:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Перенаправлять все запросы для зоны external.com на другой сервер имён с " -"помощью политики \"first\" (запросы будет отправляться на выбранный " -"перенаправитель; если он не отвечает, будут использоваться глобальные " -"сопоставители):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Удалить зону example.com вместе со всеми записями ресурсов:\n" -" ipa dnszone-del example.com\n" -"\n" -" Определить адрес по имени узла, чтобы узнать, существует ли он (будет " -"добавлен стандартный домен IPA, если он не включён):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"ГЛОБАЛЬНАЯ КОНФИГУРАЦИЯ DNS\n" -"\n" -"Конфигурация DNS, которая передаётся сценарию командной строки для " -"установки, хранится в локальном файле конфигурации на каждом IPA-сервере, " -"где настроена служба DNS. Эти локальные настройки могут быть переопределены " -"с помощью общей конфигурации, которая хранится на LDAP-сервере:\n" -"\n" -" Показать глобальную конфигурацию DNS:\n" -" ipa dnsconfig-show\n" -"\n" -" Изменить глобальную конфигурацию DNS и установить список глобальных " -"перенаправителей:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Список глобальных перенаправителей. Для каждого перенаправителя можно " -"указать отдельный порт с помощью стандартного формата \"IP_АДРЕС port ПОРТ\"" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "Интервал между регулярными опросами сервера имён о новых зонах DNS" - -msgid "DNS class" -msgstr "Класс DNS" - -msgid "Comma-separated list of raw A records" -msgstr "Разделённый запятыми список необработанных записей A" - -msgid "Comma-separated list of raw AAAA records" -msgstr "Разделённый запятыми список необработанных записей AAAA" - -msgid "Comma-separated list of raw A6 records" -msgstr "Разделённый запятыми список необработанных записей A6" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "Разделённый запятыми список необработанных записей AFSDB" - -msgid "Comma-separated list of raw APL records" -msgstr "Разделённый запятыми список необработанных записей APL" - -msgid "Comma-separated list of raw CERT records" -msgstr "Разделённый запятыми список необработанных записей CERT" - -msgid "Comma-separated list of raw CNAME records" -msgstr "Разделённый запятыми список необработанных записей CNAME" - -msgid "Comma-separated list of raw DHCID records" -msgstr "Разделённый запятыми список необработанных записей DHCID" - -msgid "Comma-separated list of raw DLV records" -msgstr "Разделённый запятыми список необработанных записей DLV" - -msgid "Comma-separated list of raw DNAME records" -msgstr "Разделённый запятыми список необработанных записей DNAME" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "Разделённый запятыми список необработанных записей DNSKEY" - -msgid "Comma-separated list of raw DS records" -msgstr "Разделённый запятыми список необработанных записей DS" - -msgid "Comma-separated list of raw HIP records" -msgstr "Разделённый запятыми список необработанных записей HIP" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "Разделённый запятыми список необработанных записей IPSECKEY" - -msgid "Comma-separated list of raw KEY records" -msgstr "Разделённый запятыми список необработанных записей KEY" - -msgid "KEY Flags" -msgstr "Флаги KEY" - -msgid "KEY Protocol" -msgstr "Протокол KEY" - -msgid "Protocol" -msgstr "Протокол" - -msgid "KEY Algorithm" -msgstr "Алгоритм KEY" - -msgid "KEY Public Key" -msgstr "Открытый ключ KEY" - -msgid "Public Key" -msgstr "Открытый ключ" - -msgid "Comma-separated list of raw KX records" -msgstr "Разделённый запятыми список необработанных записей KX" - -msgid "Comma-separated list of raw LOC records" -msgstr "Разделённый запятыми список необработанных записей LOC" - -msgid "Comma-separated list of raw MX records" -msgstr "Разделённый запятыми список необработанных записей MX" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "Разделённый запятыми список необработанных записей NAPTR" - -msgid "Comma-separated list of raw NS records" -msgstr "Разделённый запятыми список необработанных записей NS" - -msgid "Comma-separated list of raw NSEC records" -msgstr "Разделённый запятыми список необработанных записей NSEC" - -msgid "NSEC Next Domain Name" -msgstr "Имя следующего домена NSEC" - -msgid "Next Domain Name" -msgstr "Имя следующего домена" - -msgid "NSEC Type Map" -msgstr "Список сопоставления типов NSEC" - -msgid "Type Map" -msgstr "Список сопоставления типов" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "Разделённый запятыми список необработанных записей NSEC3" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "Разделённый запятыми список необработанных записей NSEC3PARAM" - -msgid "Comma-separated list of raw PTR records" -msgstr "Разделённый запятыми список необработанных записей PTR" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "Разделённый запятыми список необработанных записей RRSIG" - -msgid "RRSIG Type Covered" -msgstr "Охваченные типы RRSIG" - -msgid "Type Covered" -msgstr "Охваченные типы" - -msgid "RRSIG Algorithm" -msgstr "Алгоритм RRSIG" - -msgid "RRSIG Labels" -msgstr "Метки RRSIG" - -msgid "Labels" -msgstr "Метки" - -msgid "RRSIG Original TTL" -msgstr "Исходное значение срока жизни RRSIG" - -msgid "Original TTL" -msgstr "Исходное значение срока жизни" - -msgid "RRSIG Signature Expiration" -msgstr "Окончание действия подписи RRSIG" - -msgid "Signature Expiration" -msgstr "Окончание действия подписи" - -msgid "RRSIG Signature Inception" -msgstr "Начало действия подписи RRSIG" - -msgid "Signature Inception" -msgstr "Начало действия подписи" - -msgid "RRSIG Key Tag" -msgstr "Тег ключа RRSIG" - -msgid "RRSIG Signer's Name" -msgstr "Имя подписавшего RRSIG" - -msgid "Signer's Name" -msgstr "Имя подписавшего" - -msgid "RRSIG Signature" -msgstr "Подпись RRSIG" - -msgid "Signature" -msgstr "Подпись" - -msgid "Comma-separated list of raw RP records" -msgstr "Разделённый запятыми список необработанных записей RP" - -msgid "Comma-separated list of raw SIG records" -msgstr "Разделённый запятыми список необработанных записей SIG" - -msgid "SIG Type Covered" -msgstr "Охваченные типы SIG" - -msgid "SIG Algorithm" -msgstr "Алгоритм SIG" - -msgid "SIG Labels" -msgstr "Метки SIG" - -msgid "SIG Original TTL" -msgstr "Исходное значение срока жизни SIG" - -msgid "SIG Signature Expiration" -msgstr "Окончание действия подписи SIG" - -msgid "SIG Signature Inception" -msgstr "Начало действия подписи SIG" - -msgid "SIG Key Tag" -msgstr "Тег ключа SIG" - -msgid "SIG Signer's Name" -msgstr "Имя подписавшего SIG" - -msgid "SIG Signature" -msgstr "Подпись SIG" - -msgid "Comma-separated list of raw SPF records" -msgstr "Разделённый запятыми список необработанных записей SPF" - -msgid "Comma-separated list of raw SRV records" -msgstr "Разделённый запятыми список необработанных записей SRV" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "Разделённый запятыми список необработанных записей SSHFP" - -msgid "Comma-separated list of raw TA records" -msgstr "Разделённый запятыми список необработанных записей TA" - -msgid "Comma-separated list of raw TKEY records" -msgstr "Разделённый запятыми список необработанных записей TKEY" - -msgid "Comma-separated list of raw TSIG records" -msgstr "Разделённый запятыми список необработанных записей TSIG" - -msgid "Comma-separated list of raw TXT records" -msgstr "Разделённый запятыми список необработанных записей TXT" - -msgid "SOA time to live" -msgstr "Срок жизни SOA" - -msgid "SOA record time to live" -msgstr "Срок жизни записи SOA" - -msgid "SOA class" -msgstr "Класс SOA" - -msgid "SOA record class" -msgstr "Класс записи SOA" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Список перенаправителей для отдельных зон. Для каждого перенаправителя можно " -"указать отдельный порт с помощью стандартного формата \"IP_АДРЕС port ПОРТ\"" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" -"Добавить запись перенаправления для сервера имён, расположенного в созданной " -"зоне" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" -"\n" -"Права\n" -"\n" -"Управление правами для клиентских компьютеров\n" -"\n" -"Правами можно управлять либо путём регистрации на сервере прав с именем " -"пользователя и паролем, либо путём импорта сертификатов прав вручную. " -"Сертификат прав содержит сведения о продукте, на который выдано разрешение, " -"количестве использований прав и сроке действия.\n" -"\n" -"Сервер прав управляет количеством доступных клиентских прав.\n" -"Чтобы отметить эти права как использованные IPA-сервером, следует указать " -"количество, и они будут отмечены, как использованные на сервере прав.\n" -"\n" -" Зарегистрироваться на сервере прав:\n" -" ipa entitle-register consumer\n" -"\n" -" Импортировать сертификат прав:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Показать текущие права:\n" -" ipa entitle-status\n" -"\n" -" Получить сведения о сертификатах прав:\n" -" ipa entitle-get\n" -"\n" -" Использовать некоторые права с сервера прав:\n" -" ipa entitle-consume 50\n" -"\n" -"Регистрационный идентификатор является уникальным идентификатором (UUID). " -"Этот идентификатор будет ИМПОРТИРОВАН, если использована команда entitle-" -"import.\n" -"\n" -"Для применения изменений к /etc/rhsm/rhsm.conf необходимо перезапустить " -"службу httpd.\n" - -msgid "Consume an entitlement." -msgstr "Использовать право." - -msgid "Quantity" -msgstr "Количество" - -msgid "Search for entitlement accounts." -msgstr "Поиск учётных записей прав." - -msgid "Retrieve the entitlement certs." -msgstr "Получить сертификаты прав." - -msgid "Import an entitlement certificate." -msgstr "Импортировать сертификат прав." - -msgid "UUID" -msgstr "UUID" - -msgid "Enrollment UUID" -msgstr "UUID регистрации" - -msgid "Register to the entitlement system." -msgstr "Зарегистрироваться в системе прав." - -msgid "Username" -msgstr "Имя пользователя" - -msgid "Enrollment UUID (not implemented)" -msgstr "UUID регистрации (не поддерживается)" - -msgid "Registration password" -msgstr "Пароль для регистрации" - -msgid "Display current entitlements." -msgstr "Показать текущие права." - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "Повторно синхронизировать локальный кэш прав с сервером прав." - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" -"\n" -"Группы пользователей\n" -"\n" -"Управление группами пользователей. По умолчанию все новые группы являются " -"POSIX-группами. Можно добавить параметр --nonposix в команду group-add, " -"чтобы отметить новую группу в качестве не-POSIX-группы. В команде group-mod " -"можно использовать аргумент --posix, чтобы преобразовать не-POSIX-группу в " -"POSIX-группу. POSIX-группы нельзя преобразовать в не-POSIX-группы. \n" -"\n" -"У каждой группы должно быть описание.\n" -"\n" -"У POSIX-групп должен быть идентификатор группы (GID). Изменение GID " -"поддерживается, но может повлиять на разрешения для файлов. При создании " -"группы необязательно предоставлять GID. Если он не будет предоставлен, IPA " -"создаст его автоматически.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую группу:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Добавить новую не-POSIX-группу:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Преобразовать не-POSIX-группу в posix-группу:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Добавить новую POSIX-группу с определённым ID группы:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Добавить новую POSIX-группу и позволить IPA назначить ID группы:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Удалить группу:\n" -" ipa group-del unixadmins\n" -"\n" -" Чтобы добавить группу \"remoteadmins\" в группу \"localadmins\":\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Добавить список пользователей в группу \"localadmins\":\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Удалить пользователя из группы \"localadmins\":\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Показать сведения об именованной группе:\n" -" ipa group-show localadmins\n" -"\n" -"Участие внешних групп создано для того, чтобы сделать возможной привязку " -"пользователей из доверенных доменов к локальным POSIX-группам с целью " -"использования ресурсов IPA. Внешние участники должны быть добавлены в " -"группы, которые специально созданы, как внешние и не-POSIX. Такая группа " -"затем должна быть включена в одну из групп POSIX.\n" -"\n" -"В текущей версии участник внешней группы является идентификатором " -"безопасности (Security Identifier или SID), определённым доверенным доменом. " -"Добавление участников внешней группы можно выполнить в формате SID, DOM\\имя " -"или имя@домен. IPA попытается определить SID по переданному имени путём " -"использования общего каталога доверенного домена.\n" -"\n" -"Пример:\n" -"\n" -"1. Создать группу для привязки администраторов (admins) доверенного домена и " -"их локальную POSIX-группу:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Добавить идентификатор безопасности Domain Admins домена " -"группе ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Разрешить привязку группы ad_admins_external к POSIX-группе ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Вывести список внешних участников группы ad_admins_external, чтобы " -"определить их SID:\n" -"\n" -" ipa group-show ad_admins_external\n" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" -"Разделённый запятыми список участников доверенного домена в формате DOM\\имя " -"или имя@домен" - -msgid "comma-separated list of users to add" -msgstr "Разделённый запятыми список пользователей, которых следует добавить" - -msgid "comma-separated list of groups to add" -msgstr "Разделённый запятыми список групп, которые следует добавить" - -msgid "comma-separated list of users to remove" -msgstr "Разделённый запятыми список пользователей, которых следует удалить" - -msgid "comma-separated list of groups to remove" -msgstr "Разделённый запятыми список групп, которые следует удалить" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" -"\n" -"Управление доступом на основе узла\n" -"\n" -"Управляйте тем, кто, на каких узлах и из каких узлов сможет получать доступ " -"к определённым службам. Вы можете воспользоваться HBAC для определения тех " -"пользователей и групп на узле происхождения запроса, которые будут иметь " -"доступ к определённой службе или группе служб на целевом узле.\n" -"\n" -"Также можно указать категорию пользователей, целевых узлов и узлов " -"происхождения запроса. В текущей версии доступен только вариант \"all\", но " -"в будущих версиях, возможно, появятся и другие варианты.\n" -"\n" -"Целевые узлы и узлы происхождения запроса в правилах HBAC должны быть узлами " -"под управлением IPA.\n" -"\n" -"Доступные службы и группы служб управляются, соответственно, с помощью " -"подключаемых модулей hbacsvc и hbacsvcgroup.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Создать правило, \"test1\", которое предоставляет всем пользователям доступ " -"на узел \"server\" отовсюду:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Показать свойства именованного правила HBAC:\n" -" ipa hbacrule-show test1\n" -"\n" -" Создать правило для определённой службы. Это правило предоставит " -"пользователю john доступ к службе sshd на любом компьютере с любого " -"компьютера:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Создать правило для новой группы служб. Это правило предоставит " -"пользователю john доступ к службе FTP на любом компьютере с любого " -"компьютера:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Отключить именованное правило HBAC:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Удалить именованное правило HBAC:\n" -" ipa hbacrule-del allow_server\n" - -msgid "Source host category" -msgstr "Категория узлов-источников" - -msgid "Source host category the rule applies to" -msgstr "Категория узлов-источников, к которой применяется правило" - -msgid "Source Hosts" -msgstr "Узлы-источники" - -msgid "Source Host Groups" -msgstr "Группы узлов-источников" - -msgid "comma-separated list of hosts to add" -msgstr "Разделённый запятыми список узлов, которые следует добавить" - -msgid "comma-separated list of host groups to add" -msgstr "Разделённый запятыми список групп узлов, которые следует добавить" - -msgid "comma-separated list of HBAC services to add" -msgstr "Разделённый запятыми список служб HBAC, которые следует добавить" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "Разделённый запятыми список групп служб HBAC, которые следует добавить" - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "Добавить узлы-источники и группы узлов из правила HBAC." - -msgid "comma-separated list of hosts to remove" -msgstr "Разделённый запятыми список узлов, которые следует удалить" - -msgid "comma-separated list of host groups to remove" -msgstr "Разделённый запятыми список групп узлов, которые следует удалить" - -msgid "comma-separated list of HBAC services to remove" -msgstr "Разделённый запятыми список служб HBAC, которые следует удалить" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "Разделённый запятыми список групп служб HBAC, которые следует удалить" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "Удалить узлы-источники и группы узлов из правила HBAC." - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" -"\n" -"Группы служб HBAC\n" -"\n" -"Группы служб HBAC могут содержать любое количество отдельных служб (так " -"называемых \"участников\"). У каждой группы должно быть описание.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую группу служб HBAC:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Добавить участников в группу служб HBAC:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Показать сведения об именованной группе:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Добавить новую группу в группу \"login\":\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Удалить группу служб HBAC:\n" -" ipa hbacsvcgroup-del login\n" - msgid "" "\n" "Simulate use of Host-based access controls\n" "\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" +"HBAC rules control who can access what services on what hosts.\n" "You can use HBAC to control which users or groups can access a service,\n" "or group of services, on a target host.\n" "\n" @@ -15361,7 +12603,7 @@ msgid "" "\n" " ipa hbactest --user= --host= --service=\n" " [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" +" [--sizelimit= ]\n" "\n" " --user, --host, and --service are mandatory, others are optional.\n" "\n" @@ -15386,9 +12628,6 @@ msgid "" "change it\n" " with --sizelimit option.\n" "\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" "EXAMPLES:\n" "\n" " 1. Use all enabled HBAC rules in IPA database to simulate:\n" @@ -15396,10 +12635,10 @@ msgid "" " --------------------\n" " Access granted: True\n" " --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" " 2. Disable detailed summary of how rules were applied:\n" " $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" @@ -15408,63 +12647,148 @@ msgid "" " --------------------\n" "\n" " 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" " ---------------------\n" " Access granted: False\n" " ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" "\n" " 4. Use all enabled HBAC rules in IPA database + explicitly specified " "rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" " --------------------\n" " Access granted: True\n" " --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" " 5. Test all disabled HBAC rules in IPA database:\n" " $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" " ---------------------\n" " Access granted: False\n" " ---------------------\n" -" notmatched: new-rule\n" +" Not matched rules: new-rule\n" "\n" " 6. Test all disabled HBAC rules in IPA database + explicitly specified " "rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" " ---------------------\n" " Access granted: False\n" " ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" "\n" " 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" " --------------------\n" " Access granted: True\n" " --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" "\n" "Имитация использования управления доступом на основе узла\n" "\n" -"Правила HBAC управляют тем, кто, на каких узлах и из каких узлов сможет " -"получать доступ к определённым службам. Вы можете воспользоваться HBAC для " -"определения тех пользователей и групп, которые будут иметь доступ к " -"определённой службе или группе служб на целевом узле. \n" +"Правила HBAC управляют тем, кто и на каких узлах сможет получать доступ к " +"определённым службам. Вы можете воспользоваться HBAC для определения тех " +"пользователей и групп, которые будут иметь доступ к определённой службе или " +"группе служб на целевом узле. \n" "\n" "Так как применение правил HBAC подразумевает использование рабочей среды, " "этот подключаемый модуль предназначен для обеспечения имитации оценки правил " @@ -15475,7 +12799,7 @@ msgstr "" "\n" " ipa hbactest --user= --host= --service=\n" " [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" +" [--sizelimit= ]\n" "\n" " Параметры --user, --host и --service являются обязательными, остальные " "можно не указывать.\n" @@ -15502,20 +12826,17 @@ msgstr "" " По умолчанию в IPA имеется общее ограничение количества извлекаемых " "записей, его можно изменить с помощью параметра --sizelimit.\n" "\n" -" Если указан параметр --srchost, он будет проигнорирован. Он сохранён только " -"для обеспечения совместимости.\n" -"\n" -"ПРИМЕРЫ:\n" +" ПРИМЕРЫ:\n" "\n" " 1. Использовать все включённые правила HBAC в базе данных IPA:\n" " $ ipa hbactest --user=a1a --host=bar --service=sshd\n" " --------------------\n" " Доступ предоставлен: Да\n" " --------------------\n" -" не соответствует: my-second-rule\n" -" не соответствует: my-third-rule\n" -" не соответствует: myrule\n" -" соответствует: allow_all\n" +" Несоответствующие правила: my-second-rule\n" +" Несоответствующие правила: my-third-rule\n" +" Несоответствующие правила: myrule\n" +" Соответствующие правила: allow_all\n" "\n" " 2. Отключить подробный отчёт о применении правил:\n" " $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" @@ -15524,6178 +12845,135 @@ msgstr "" " --------------------\n" "\n" " 3. Проверить явно указанные правила HBAC:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --rules=myrule --rules=my-second-rule\n" " ---------------------\n" " Доступ предоставлен: Нет\n" " ---------------------\n" -" не соответствует: my-second-rule\n" -" не соответствует: myrule\n" +" Несоответствующие правила: my-second-rule\n" +" Несоответствующие правила: myrule\n" "\n" " 4. Использовать все включённые правила HBAC в базе данных IPA + явно " "указанные правила:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --rules=myrule --rules=my-second-rule --enabled\n" " --------------------\n" " Доступ предоставлен: Да\n" " --------------------\n" -" не соответствует: my-second-rule\n" -" не соответствует: my-third-rule\n" -" не соответствует: myrule\n" -" соответствует: allow_all\n" +" Несоответствующие правила: my-second-rule\n" +" Несоответствующие правила: my-third-rule\n" +" Несоответствующие правила: myrule\n" +" Соответствующие правила: allow_all\n" "\n" " 5. Проверить все отключённые правила HBAC в базе данных IPA:\n" " $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" " ---------------------\n" " Доступ предоставлен: Нет\n" " ---------------------\n" -" не соответствует: new-rule\n" +" Несоответствующие правила: new-rule\n" "\n" " 6. Проверить все отключённые правила HBAC в базе данных IPA + явно " "указанные правила:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --rules=myrule --rules=my-second-rule --disabled\n" " ---------------------\n" " Доступ предоставлен: Нет\n" " ---------------------\n" -" не соответствует: my-second-rule\n" -" не соответствует: my-third-rule\n" -" не соответствует: myrule\n" +" Несоответствующие правила: my-second-rule\n" +" Несоответствующие правила: my-third-rule\n" +" Несоответствующие правила: myrule\n" "\n" " 7. Проверить все (включённые и отключённые) правила HBAC в базе данных " "IPA:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --enabled --disabled\n" " --------------------\n" " Доступ предоставлен: Да\n" " --------------------\n" -" не соответствует: my-second-rule\n" -" не соответствует: my-third-rule\n" -" не соответствует: myrule\n" -" не соответствует: new-rule\n" -" соответствует: allow_all\n" - -msgid "Source host" -msgstr "Узел-источник" - -msgid "" +" Несоответствующие правила: my-second-rule\n" +" Несоответствующие правила: my-third-rule\n" +" Несоответствующие правила: myrule\n" +" Несоответствующие правила: new-rule\n" +" Соответствующие правила: allow_all\n" "\n" -"Hosts/Machines\n" "\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" +"HBACTEST И ДОВЕРЕННЫЕ ДОМЕНЫ\n" "\n" -"ENROLLMENT:\n" +"Если в IPA настроен внешний доверенный домен, правила HBAC также применяются " +"к пользователям, которые выполняют доступ к ресурсам IPA из доверенного " +"домена. Пользователи и группы доверенного домена (и их SID) затем могут быть " +"привязаны к внешним группам, которые могут быть участниками POSIX-групп в " +"IPA. Такие привязки можно использовать в правилах HBAC, тем самым разрешая " +"доступ к ресурсам, которые защищены системой HBAC.\n" "\n" -"There are three enrollment scenarios when enrolling a new client:\n" +"Подключаемый модуль hbactest позволяет проверять доступ как для локальных " +"пользователей IPA, так и для пользователей из доверенных доменов, как с " +"полным именем пользователя, так и по SID пользователей. В таких именах " +"пользователей должен быть указан доверенный домен в краткой форме " +"(DOMAIN\\Administrator) или имя учётной записи пользователя (UPN), " +"Administrator@ad.test.\n" "\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" -"\n" -"Узлы/Компьютеры\n" -"\n" -"Узел представляет собой отдельный компьютер. Термин может использоваться в " -"нескольких контекстах:\n" -"- записи служб, связанные с определённым узлом \n" -"- узел сохраняет учётную запись узла / службы\n" -"- узел может использоваться в правилах управления доступом на основе узла " -"(Host-based Access Control, HBAC)\n" -"- каждый зарегистрированный клиент создаёт запись узла\n" -"\n" -"РЕГИСТРАЦИЯ:\n" -"Существует три сценария регистрации нового клиента:\n" -"\n" -"1. Вы регистрируетесь как администратор с полными правами. Запись узла может " -"существовать или отсутствовать. Полноправный администратор выполняет роль " -"hostadmin или является участником группы admins.\n" -"2. Вы регистрируетесь как администратор с ограниченными правами. Узел уже " -"должен существовать. Администратор с ограниченными правами выполняет роль с " -"привилегией Host Enrollment.\n" -"3. Узел создан с одноразовым паролем.\n" -"\n" -"Узлу можно назначить роль только один раз. Если клиенту уже назначена роль и " -"эту роль требуется изменить, запись узла должна быть удалена и создана " -"повторно. Обратите внимание, что повторное создание записи узла приведет к " -"удалению всех служб узла и отзыву всех связанных с этими службами SSL-" -"сертификатов.\n" -"\n" -"В запись узла при необходимости можно включить данные о его расположении, " -"типе используемой операционной системы и так далее.\n" +"Обратите внимание, что выполнять hbactest с аргументом пользователя " +"доверенного домена в параметре --user могут только участники группы \"trust " +"admins\".\n" "\n" "ПРИМЕРЫ:\n" "\n" -" Добавить новый узел:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" +" 1. Проверить, соответствует ли пользователь из доверенного домена, " +"указанный по краткому имени, какому-либо правилу:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" Соответствующие правила: allow_all\n" +" Соответствующие правила: can_login\n" +"\n" +" 2. Проверить, соответствует ли пользователь из доверенного домена, " +"указанный по имени домена, какому-либо правилу:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" Соответствующие правила: allow_all\n" +" Соответствующие правила: can_login\n" +"\n" +" 3. Проверить, соответствует ли пользователь из доверенного домена, " +"указанный по SID, какому-либо правилу:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" Соответствующие правила: allow_all\n" +" Соответствующие правила: can_login\n" +"\n" +" 4. Проверить, соответствует ли другой пользователь из доверенного " +"домена, указанный по SID, какому-либо правилу:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" Соответствующие правила: allow_all\n" +" Несоответствующие правила: can_login\n" +"\n" +" 5. Проверить, соответствует ли другой пользователь из доверенного домена, " +"указанный по краткому имени, какому-либо правилу:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Доступ предоставлен: Да\n" +" --------------------\n" +" Соответствующие правила: allow_all\n" +" Несоответствующие правила: can_login\n" "\n" -" Удалить узел:\n" -" ipa host-del test.example.com\n" -"\n" -" Добавить новый узел с одноразовым паролем:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Добавить новый узел со случайным одноразовым паролем:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Изменить сведения об узле:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Удалить открытые ключи SSH узла и обновить DNS для отображения изменений:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Отключить ключ Kerberos, SSL-сертификат и все службы узла:\n" -" ipa host-disable test.example.com\n" -"\n" -" Добавить узел, который может управлять таблицей ключей и сертификатом этого " -"узла:\n" -" ipa host-add-managedby --hosts=test2 test\n" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" -"\n" -"Группы узлов.\n" -"\n" -"Управление группами узлов. Оно полезно при применении управления доступом к " -"ряду узлов с помощью управления доступом на основе узла (HBAC).\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую группу узлов:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Добавить другую новую группу узлов:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Добавить участников в группу узлов:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Добавить группу узлов как участника другой группы узлов:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Удалить узел из группы узлов:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Показать группу узлов:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Удалить группу узлов:\n" -" ipa hostgroup-del baltimore\n" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" -"\n" -"Добавление нового диапазона идентификаторов.\n" -"\n" -" Для добавления нового диапазона идентификаторов всегда необходимо " -"указывать\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Кроме того,\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" могут указываться для нового диапазона идентификаторов для локального " -"домена, в то время как\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" должны быть указаны для добавления нового диапазона для доверенного " -"домена AD.\n" -"\n" -" ПРЕДУПРЕЖДЕНИЕ:\n" -"\n" -"Подключаемый модуль DNA в 389-ds выделяет идентификаторы на основе " -"диапазонов, настроенных для локального домена. В текущей версии сам " -"подключаемый модуль DNA *нельзя* перенастраивать на основе локальных " -"диапазонов, установленных с помощью этого семейства команд.\n" -"\n" -"Для нового локального диапазона следует вручную изменить настройки " -"конфигурации подключаемого модуля DNA. В частности, следует изменить атрибут " -"dnaNextRange \"cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config\" таким " -"образом, чтобы он соответствовал новому диапазону.\n" -" " - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" -"Разделённый запятыми список классов объектов, использованных для поиска " -"записей пользователей в DS" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" -"Разделённый запятыми список классов объектов, использованных для поиска " -"записей групп в DS" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" -"Разделённый запятыми список классов объектов, которые следует игнорировать " -"для записей пользователей в DS" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" -"Разделённый запятыми список атрибутов, которые следует игнорировать для " -"записей пользователей в DS" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" -"Разделённый запятыми список классов объектов, которые следует игнорировать " -"для записей групп в DS" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" -"Разделённый запятыми список атрибутов, которые следует игнорировать для " -"записей групп в DS" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "" -"Разделённый запятыми список групп, которые следует исключить из миграции" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" -"Разделённый запятыми список пользователей, которых следует исключить из " -"миграции" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" -"\n" -"Сетевые группы\n" -"\n" -"Сетевая группа — это группа, которая используется для проверки разрешений. " -"Она может содержать как значения пользователей, так и значения узлов.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую сетевую группу:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Добавить участников в сетевую группу:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -"Удалить участника из сетевой группы:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -"Показать сведения о сетевой группе:\n" -" ipa netgroup-show admins\n" -"\n" -" Удалить сетевую группу:\n" -" ipa netgroup-del admins\n" - -msgid "comma-separated list of netgroups to add" -msgstr "Разделённый запятыми список сетевых групп, которые следует добавить" - -msgid "comma-separated list of netgroups to remove" -msgstr "Разделённый запятыми список сетевых групп, которые следует удалить" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" -"\n" -"Разрешения\n" -"\n" -"С помощью разрешений можно очень точно делегировать права доступа. " -"Разрешение представляет собой удобную для восприятия форму 389-ds ACI " -"(правила управления доступом).\n" -"Разрешение даёт право выполнять определённую задачу, например, добавлять " -"пользователей, изменять группы и так далее.\n" -"\n" -"Разрешение не может содержать другие разрешения.\n" -"\n" -"* Разрешение даёт доступ для чтения, записи, добавления или удаления.\n" -"* Привилегия объединяет схожие разрешения (например, все разрешения, которые " -"требуются для добавления пользователя).\n" -"* Роль даёт набор привилегий пользователям, группам, узлам или группам " -"узлов.\n" -"\n" -"Разрешение состоит из нескольких разных частей:\n" -"\n" -"1. Имя разрешения.\n" -"2. Цель разрешения.\n" -"3. Права, предоставленные разрешением.\n" -"\n" -"Права определяют, какие действия разрешены. Варианты прав (права могут " -"сочетать в себе несколько вариантов):\n" -"1. write - записать один или несколько атрибутов.\n" -"2. read - прочитать один или несколько атрибутов.\n" -"3. add - добавить в дерево новую запись.\n" -"4. delete - удалить существующую запись.\n" -"5. all - предоставляются все разрешения.\n" -"\n" -"По умолчанию доступ для чтения разрешён для большинства атрибутов, поэтому " -"потребность в использовании этого разрешения вряд ли будет возникать часто.\n" -"\n" -"Обратите внимание на разницу между атрибутами и записями. Разрешения " -"являются независимыми, поэтому возможность добавить пользователя не означает " -"возможность изменять запись добавленного пользователя.\n" -"\n" -"Существует ряд разрешённых целей:\n" -"1. type: тип объекта (пользователь, группа и так далее).\n" -"2. memberof: участник группы или группы узлов.\n" -"3. filter: фильтр LDAP.\n" -"4. subtree: фильтр LDAP, определяющий часть LDAP DIT. Это супермножество " -"цели \"type\".\n" -"5. targetgroup: предоставление доступа для изменения определённой группы " -"(например, предоставление прав доступа для управления участием в группе).\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить разрешение на создание пользователей:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Добавить разрешение на управление участием в группе:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" -"Разделённый запятыми список разрешений, которые следует предоставить (read, " -"write, add, delete, all)" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" -"Тип объекта IPA (user (пользователь), group (группа), host (узел), hostgroup " -"(группа узлов), service (служба), netgroup (сетевая группа), dns)" - -msgid "Target members of a group" -msgstr "Целевые участники группы" - -msgid "User group to apply permissions to" -msgstr "Группа пользователей, к которой следует применить разрешения" - -msgid "comma-separated list of privileges to add" -msgstr "Разделённый запятыми список привилегий, которые следует добавить" - -msgid "Add a system permission without an ACI" -msgstr "Добавить разрешение на доступ к системе без использования ACI" - -msgid "Permission type" -msgstr "Тип разрешения" - -msgid "comma-separated list of privileges to remove" -msgstr "Разделённый запятыми список привилегий, которые следует удалить" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" -"\n" -"Проверить связь с удалённым IPA-сервером, чтобы убедиться, что он работает.\n" -"\n" -"Команда ping отправляет эхо-запрос на IPA-сервер. Сервер возвращает сведения " -"о своей версии. Эти данные используются клиентом IPA для подтверждения того, " -"что сервер доступен и принимает запросы.\n" -"\n" -"Сервер из xmlrpc_uri in /etc/ipa/default.conf проверяется первым.\n" -"Если он не отвечает, клиент пытается установить связь с любым сервером, " -"указанным в записях SRV ldap в DNS.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Проверить связь с IPA-сервером:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Проверить связь с IPA-сервером и получить подробные данные:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" - -msgid "comma-separated list of roles to add" -msgstr "Разделённый запятыми список ролей, которые следует добавить" - -msgid "comma-separated list of permissions" -msgstr "Разделённый запятыми список разрешений" - -msgid "comma-separated list of roles to remove" -msgstr "Разделённый запятыми список ролей, которые следует удалить" - -msgid "comma-separated list of privileges" -msgstr "Разделённый запятыми список привилегий" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" -"\n" -"Разрешения самообслуживания\n" -"\n" -"С помощью разрешений самообслуживания можно очень точно делегировать " -"разрешения. Правила или инструкции управления доступом (ACI) предоставляют " -"разрешениям разрешение на выполнение конкретных задач, таких как добавление " -"пользователя, изменение группы и так далее.\n" -"\n" -"Разрешение самообслуживания определяет, что объект может изменять в своей " -"собственной записи.\n" -"\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить правило самообслуживания, чтобы разрешить пользователям управлять " -"своим адресом:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" В список атрибутов необходимо включить все атрибуты, в том числе уже " -"существующие. Добавить telephoneNumber в список:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Показать обновлённое правило:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Удалить правило:\n" -" ipa selfservice-del \"Users manage their own address\"\n" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" -"\n" -"Службы\n" -"\n" -"Служба IPA — это служба, которая выполняется на узле. В записи службы IPA " -"могут храниться данные учётной записи Kerberos, SSL-сертификата или оба " -"набора данных.\n" -"\n" -"Службой IPA можно управлять непосредственно с компьютера, если системе этого " -"компьютера предоставлены соответствующие права доступа. Это касается даже " -"компьютеров, отличных от тех, с которыми связана эта служба. Например, " -"запрос SSL-сертификата с помощью учётных данных учётной записи службы узла. " -"Чтобы управлять службой с помощью учётных данных узла, следует запустить " -"команду kinit от имени узла:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Добавление службы IPA позволяет связанной службе запрашивать SSL-сертификаты " -"и таблицы ключей, но создание самих запросов является отдельным шагом: " -"соответствующие данные не создаются в результате простого добавления " -"службы.\n" -"\n" -"В записи службы хранятся только открытые данные сертификата; закрытый ключ " -"не сохраняется.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую службу IPA:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Разрешить узлу управлять сертификатом службы IPA:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Переопределить список по умолчанию, который содержит поддерживаемые типы " -"PAC для службы:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Удалить службу IPA:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Найти все службы IPA, связанные с узлом:\n" -" ipa service-find web.example.com\n" -"\n" -" Найти все службы HTTP:\n" -" ipa service-find HTTP\n" -"\n" -" Отключить ключ Kerberos и SSL-сертификат службы:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Запросить сертификат для службы IPA:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Создать и получить таблицу ключей для службы IPA:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" -"Переопределить список по умолчанию, который содержит поддерживаемые типы " -"PAC. Используйте значение \"NONE\", чтобы отключить поддержку PAC для этой " -"службы" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" -"\n" -"Группы команд Sudo\n" -"\n" -"Управление группами команд Sudo.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую группу команд Sudo:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Удалить группу команд Sudo:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Управлять участием в группе команд Sudo, команды:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Управлять участием в группе команд Sudo, команды:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Показать группу команд Sudo:\n" -" ipa group-show localadmins\n" - -msgid "comma-separated list of sudo commands to add" -msgstr "Разделённый запятыми список команд Sudo, которые следует добавить" - -msgid "comma-separated list of sudo commands to remove" -msgstr "Разделённый запятыми список команд Sudo, которые следует удалить" - -msgid "Active directory domain administrator's password" -msgstr "Пароль администратора домена Active Directory" - -msgid "GECOS field" -msgstr "Поле GECOS" - -#, fuzzy -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" -"\n" -"Правила Sudo\n" -"\n" -"Sudo (su \"do\") позволяет системному администратору делегировать " -"полномочия, чтобы дать определённым пользователям (или группам " -"пользователей) возможность выполнять некоторые (или все) команды от имени " -"пользователя \"root\" или другого пользователя, вместе с тем предоставляя " -"журнал аудита команд и их аргументов.\n" -"\n" -"IPA предоставляет возможности настройки различных аспектов Sudo:\n" -" Users: пользователь (пользователи) или группа (группы), которые могут " -"вызывать Sudo.\n" -" Hosts: узел (узлы) или группа (группы) узлов, пользователи которых могут " -"вызывать Sudo.\n" -" Allow Command: конкретная команда (команды), которые разрешены для " -"выполнения с помощью Sudo. \n" -" Deny Command: конкретная команда (команды), которые запрещены для " -"выполнения с помощью Sudo.\n" -" RunAsUser: пользователь (пользователи) или группа (группы) пользователей, " -"от имени которых Sudo будет выполнять команды.\n" -" RunAsGroup: группа (группы), от имени которых Sudo будет выполнять " -"команды.\n" -" Options: различные параметры sudoers (участники Sudo), которые могут " -"изменить поведение Sudo.\n" -"\n" -"Правилу Sudo можно добавить порядок, который будет руководить порядком " -"обработки записей (если такой порядок предусмотрен на клиентской стороне). " -"Порядок определяется числовым индексом (целое число), который не должен " -"повторяться.\n" -"\n" -"IPA предусматривает специальную привязку DN (binddn) для использования с " -"Sudo:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"Чтобы включить binddn, выполните следующую команду для установки пароля:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -"\n" -"Дополнительные сведения приведены в документации IPA по Sudo.\n" - -msgid "comma-separated list of sudo command groups to add" -msgstr "" -"Разделённый запятыми список групп команд Sudo, которые следует добавить" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "Разделённый запятыми список групп команд Sudo, которые следует удалить" - -msgid "Failed members" -msgstr "Ошибка участников" - -msgid "Failed source hosts/hostgroups" -msgstr "Ошибка узлов-источников или групп узлов — источников" - -msgid "Failed hosts/hostgroups" -msgstr "Ошибка узлов или групп узлов" - -msgid "Failed users/groups" -msgstr "Ошибка пользователей или групп" - -msgid "Failed service/service groups" -msgstr "Ошибка службы или групп служб" - -msgid "Failed to remove" -msgstr "Ошибка при удалении" - -msgid "Failed RunAs" -msgstr "Ошибка запуска от имени" - -msgid "Failed RunAsGroup" -msgstr "Ошибка запуска от имени группы" - -msgid "Failed profiles" -msgstr "Ошибка профилей" - -msgid "Failed CAs" -msgstr "Ошибка центров сертификации (CA)" - -#, fuzzy -msgid "Failed member manager" -msgstr "Ошибка участников" - -msgid "Failed managedby" -msgstr "Ошибка managedby" - -msgid "Failed allowed to retrieve keytab" -msgstr "Не удалось разрешить получать таблицу ключей" - -msgid "Failed allowed to create keytab" -msgstr "Не удалось разрешить создавать таблицу ключей" - -msgid "Failed targets" -msgstr "Ошибка целей" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" -"%(cver)s версия клиента несовместима с %(sver)s версией сервера \"%(server)s" -"\"" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "%(server)s сообщает о неизвестной ошибке %(code)d: %(error)s" - -msgid "an internal error has occurred" -msgstr "произошла внутренняя ошибка" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "на сервере \"%(server)s\" произошла внутренняя ошибка " - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "неизвестная команда \"%(name)s\"" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "ошибка на сервере \"%(server)s\": %(error)s" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "не удалось установить соединение с \"%(uri)s\": %(error)s " - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Неверный JSON-RPC запрос: %(error)s" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" -"ошибка преобразования данных для передачи по протоколу XML-RPC: %(error)s" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "Отсутствует или неверный HTTP Referer, %(referer)s" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" -"Системной кодировкой должна быть UTF-8, поддержка \"%(encoding)s\" не " -"предусмотрена. Установите либо LC_ALL=\"C.UTF-8\", либо LC_ALL=\"\" и " -"LC_CTYPE=\"C.UTF-8\"." - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "ошибка Kerberos: %(major)s/%(minor)s" - -msgid "did not receive Kerberos credentials" -msgstr "не получены учётные данные Kerberos" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "В базе данных Kerberos не найдена служба \"%(service)s\" " - -msgid "No credentials cache found" -msgstr "Кэш учётных данных не найден" - -msgid "Ticket expired" -msgstr "Срок действия билета истек" - -msgid "Credentials cache permissions incorrect" -msgstr "Неправильные права доступа к кэшу учётных данных" - -msgid "Bad format in credentials cache" -msgstr "Неверный формат кэша учётных данных " - -msgid "Cannot resolve KDC for requested realm" -msgstr "Не удалось определить KDC для запрошенной области (realm)" - -msgid "Session error" -msgstr "Сеансовая ошибка" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" -"Не удалось проверить подлинность учётной записи %(principal)s: %(message)s" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Недостаточно прав для доступа: %(info)s" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "команда \"%(name)s\" не имеет аргументов" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "команда \"%(name)s\" имеет не более %(count)d аргумента" -msgstr[1] "команда \"%(name)s\" имеет не более %(count)d аргументов" -msgstr[2] "команда \"%(name)s\" имеет не более %(count)d аргументов" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "пересекающиеся аргументы и параметры: %(names)s" - -#, python-format -msgid "'%(name)s' is required" -msgstr "следует указать \"%(name)s\"" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "недопустимое \"%(name)s\": %(error)s" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "api не предоставляет такого пространства имён: \"%(name)s\"" - -msgid "Passwords do not match" -msgstr "Пароли не совпадают" - -msgid "Command not implemented" -msgstr "Команда не поддерживается" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "Клиент не настроен. Выполните команду ipa-client-install." - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "Не удалось получить %(name)s в интерактивном режиме" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "Команда \"%(name)s\" больше не поддерживается" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "Домен \"%(domain)s\" не является корневым для леса \"%(forest)s\"" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -msgid "This entry already exists" -msgstr "Такая запись уже существует" - -msgid "You must enroll a host in order to create a host service" -msgstr "Чтобы создать службу узла, необходимо сначала зарегистрировать узел" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" -"Учётная запись службы указана в виде, отличном от: служба/полностью-" -"определённое-имя узла: %(reason)s" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" -"Область (realm) для учётной записи не совпадает с областью этого IPA-сервера" - -msgid "This command requires root access" -msgstr "Для выполнения этой команды требуются права администратора (root)" - -msgid "This is already a posix group" -msgstr "Уже является POSIX-группой" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" -"Учётная запись указана в виде, отличном от от user@REALM: \"%(principal)s\"" - -msgid "This entry is already enabled" -msgstr "Эта запись уже включена" - -msgid "This entry is already disabled" -msgstr "Эта запись уже отключена" - -msgid "This entry cannot be enabled or disabled" -msgstr "Эту запись нельзя включать или отключать" - -msgid "This entry is not a member" -msgstr "Этой записи нет среди участников" - -msgid "A group may not be a member of itself" -msgstr "Группа не может входить в состав самой себя" - -msgid "This entry is already a member" -msgstr "Эта запись уже есть среди участников" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Не удалось выполнить декодирование Base64: %(reason)s" - -msgid "A group may not be added as a member of itself" -msgstr "Группа не может быть добавлена сама в себя" - -msgid "The default users group cannot be removed" -msgstr "Невозможно удалить группу пользователей по умолчанию" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" -"Удаление управляемой группы запрещено. Сначала её необходимо отключить." - -msgid "A managed group cannot have a password policy." -msgstr "Управляемая группа не может иметь политику паролей." - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "\"%(entry)s\" не содержит сертификат." - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "Не удалось создать личную группу. Группа \"%(group)s\" уже существует." - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "Ошибка при проверке того, что все участники были %(verb)s: %(exc)s" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "%(attr)s не содержит \"%(value)s\"" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "Недостаточно строгие условия поиска. Ожидалось: 1. Найдено: %(found)d." - -msgid "This group already allows external members" -msgstr "В этой группе уже разрешены внешние участники" - -msgid "This group cannot be posix because it is external" -msgstr "Эта группа не может быть POSIX-группой, так как является внешней" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" -"Эта группа уже является POSIX-группой и не может быть преобразована во " -"внешнюю группу" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "Удаление сервера прервано: %(reason)s." - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" -"%(operation)s не поддерживается для учётных записей %(principal_type)s " - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "Ошибка выполнения запроса, состояние %(status)s: %(reason)s" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" -"Набор правил сопоставления \"%(ruleset)s\" содержит более одного правила для " -"вспомогательной службы %(helper)s" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "\"%(attr)s\" уже содержит одно или несколько значений" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "команда или раздел справки \"%(topic)s\" не обнаружены" - -msgid "change collided with another change" -msgstr "изменение конфликтует с другим выполненным изменением" - -msgid "no modifications to be performed" -msgstr "отсутствуют изменения для выполнения" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(desc)s: %(info)s" - -msgid "limits exceeded for this query" -msgstr "для этого запроса превышены ограничения" - -#, python-format -msgid "%(info)s" -msgstr "%(info)s" - -msgid "modifying primary key is not allowed" -msgstr "изменение главного ключа запрещено" - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "%(attr)s: допустимо только одно значение." - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "%(attr)s: неправильный синтаксис." - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "Неверный фильтр поиска %(info)s" - -msgid "Not allowed on non-leaf entry" -msgstr "Запрещено для неконцевой записи" - -msgid "LDAP timeout" -msgstr "Время ожидания LDAP" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" -"Превышение времени ожидания завершения задачи LDAP %(task)s, DN задачи: " -"\"%(task_dn)s\"" - -msgid "Configured time limit exceeded" -msgstr "Превышено заданное ограничение по времени " - -msgid "Configured size limit exceeded" -msgstr "Превышено заданное ограничение по размеру" - -msgid "Configured administrative server limit exceeded" -msgstr "Превышено заданное ограничение административного сервера" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "Не удалось завершить операцию с сертификатом: %(error)s" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "Ошибка формата сертификата: %(error)s" - -msgid "Already registered" -msgstr "Уже зарегистрировано" - -msgid "Not registered yet" -msgstr "Ещё не зарегистрировано" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" -"%(key)s невозможно удалить, так как он нужен для %(label)s %(dependent)s" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" -"%(key)s не может быть удалён или отключён, потому что является последним в " -"%(label)s %(container)s" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "%(label)s %(key)s не может быть удалён или изменён: %(reason)s" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "Сертификат %(name)s недействителен" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" -"Схема не нуждается в обновлении (отпечаток \"%(fingerprint)s\", TTL %(ttl)s " -"с)" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "На узле \"%(hostname)s\" нет соответствующей записи DNS A/AAAA" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" -"Не удалось выполнить проверку DNS: ожидалось {%(expected)s}, получено " -"{%(got)s}" - -#, python-format -msgid "%(exception)s" -msgstr "%(exception)s" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" -"У леса \"%(forest)s\" существует отношение доверия с лесом (лесами) " -"%(domains)s, это не позволяет установить отношение доверия с \"%(conflict)s\"" - -msgid "Additional instructions:" -msgstr "Дополнительные инструкции:" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" -"Не отправлен номер версии программного интерфейса (API), совместимость с " -"новейшими версиями не гарантируется. Предполагается следующая версия API " -"сервера: %(server_version)s" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" -"С выходом IPA 4.0 изменилась семантика DNS-перенаправителя.\n" -"Рекомендуется перейти на использование зон перенаправления (dnsforwardzone-" -"*).\n" -"Подробные сведения содержатся в документации." - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" -"Экспериментальная поддержка DNSSEC.\n" -"%(additional_info)s" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "Параметр \"%(option)s\" не поддерживается. %(additional_info)s" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" -"Семантика %(label)s изменена. %(current_behavior)s\n" -"%(hint)s" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "DNS-сервер %(server)s: %(error)s." - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"DNS-сервер %(server)s не поддерживает DNSSEC: %(error)s.\n" -"Если на IPA-сервере (серверах) включена проверка DNSSEC, отключите её." - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" -"зона перенаправления \"%(fwzone)s\" не действует из-за отсутствия " -"надлежащего NS-делегирования в основной зоне \"%(authzone)s\". Добавьте NS-" -"запись \"%(ns_rec)s\" в родительскую зону \"%(authzone)s\"." - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"DNS-сервер %(server)s не поддерживает EDNS0 (RFC 6891): %(error)s.\n" -"Если на IPA-сервере (серверах) включена проверка DNSSEC, отключите её." - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" -"Сбой проверки DNSSEC: %(error)s.\n" -"Проверьте конфигурацию DNSSEC или отключите проверку DNSSEC на всех IPA-" -"серверах." - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" -"Не удалось создать запись TXT _kerberos из домена %(domain)s (%(error)s).\n" -"Возможная причина: зона не находится под управлением IPA. Создайте запись " -"вручную, включив в неё следующее значение: \"%(realm)s\"" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" -"Не удалось удалить запись TXT _kerberos из домена %(domain)s (%(error)s).\n" -"Возможная причина: зона не находится под управлением IPA. Удалите запись " -"вручную." - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" -"Не установлен мастер ключей DNSSEC. Подпись в зоне DNSSEC будет работать " -"только после установки мастера ключей DNSSEC." - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" -"Относительное имя записи \"%(record)s\" содержит имя зоны \"%(zone)s\" в " -"качестве суффикса, что превращает её в полное имя домена \"%(fqdn)s\". " -"Обычно эта ошибка вызвана отсутствием точки в конце определения имени." - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "\"%(command)s\" не поддерживается. %(additional_info)s" - -#, python-format -msgid "%(line)s" -msgstr "%(line)s" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "Результат поиска усечён: %(reason)s" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" -"Доверительные отношения с %(domain)s разорваны. Восстановите их, выполнив " -"команду \"ipa trust-add\"." - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "Не удалось удалить DNS-запись (записи) узла %(host)s. (%(reason)s)" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" -"Политика перенаправления конфликтует с некоторыми автоматически созданными " -"пустыми зонами. Запросы для зон, указанных в RFC 6303, будут игнорировать " -"перенаправление и рекурсию и всегда возвращать ответы \"NXDOMAIN\". Чтобы " -"переопределить это поведение, используйте политику перенаправления \"only\"." - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "Не удалось обновить системную запись \"%(record)s\". Ошибка: %(error)s" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" -"IPA не управляет зоной %(zone)s. Добавьте записи на DNS-сервер вручную." - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" -"Не удалось автоматически обновить системные записи DNS. Повторно запустите " -"обновление системных записей вручную, чтобы получить список отсутствующих " -"записей." - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" -"Для применения изменений конфигурации необходимо перезапустить службу " -"%(service)s на IPA-сервере %(server)s." - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" -"В расположении IPA %(location)s нет DNS-серверов. Без них расположение не " -"будет работать надлежащим образом." - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "%(subject)s: неверно сформированный сертификат. %(reason)s" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "Узел добавлен, но при обновлении DNS произошла ошибка: %(reason)s" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "Сертификат для %(ca)s недоступен на этом сервере." - -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d переменных" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "загружен %(count)d подключаемый модуль" -msgstr[1] "загружено %(count)d подключаемых модуля" -msgstr[2] "загружено %(count)d подключаемых модулей" - -msgid "A dictionary representing an LDAP entry" -msgstr "Словарь, соответствующий записи LDAP" - -msgid "A list of LDAP entries" -msgstr "Список записей LDAP" - -msgid "All commands should at least have a result" -msgstr "Все команды должны выводить результат" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "Введите %(label)s ещё раз для проверки: " - -msgid "Passwords do not match!" -msgstr "Пароли не совпадают!" - -msgid "No matching entries found" -msgstr "Соответствующих записей не найдено" - -msgid "Topic or Command" -msgstr "Тема или команда" - -msgid "The topic or command name." -msgstr "Имя темы или команды." - -msgid "Topic commands:" -msgstr "Команды темы:" - -msgid "To get command help, use:" -msgstr "Чтобы получить справку по команде, используйте команду:" - -msgid " ipa --help" -msgstr " ipa <команда> --help" - -msgid "Command name" -msgstr "Имя команды" - -msgid "Positional arguments" -msgstr "Позиционные аргументы" - -#, python-format -msgid "Same as --%s" -msgstr "То же, что и --%s" - -msgid "Deprecated options" -msgstr "Неподдерживаемые опции" - -msgid "No file to read" -msgstr "Отсутствует файл для чтения" - -msgid "Results are truncated, try a more specific search" -msgstr "Результаты усечены. Попробуйте задать более точные условия поиска" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "Неизвестный параметр: %(option)s" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" -"Версия клиента. Используется для определения того, примет ли сервер запрос." - -#, python-format -msgid "%(filename)s: file not found" -msgstr "%(filename)s: файл не найден" - -#, fuzzy, python-brace-format -msgid "Unable to parse option {item}" -msgstr "Не удалось обработать учётную запись\n" - -msgid "any of the configured servers" -msgstr "любой из настроенных серверов" - -msgid "Exceeded number of tries to forward a request." -msgstr "Превышено количество попыток перенаправления запроса." - -msgid "Filename is empty" -msgstr "Пустое имя файла" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "В доступе отказано: %(file)s" - -msgid "empty DNS label" -msgstr "пустая DNS-метка" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "Длина DNS-метки не может быть больше 63 символов" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" -"можно использовать только буквы, цифры, символы %(chars)s. DNS-метка не " -"может начинаться или заканчиваться символом %(chars2)s" - -msgid "single label {}s are not supported" -msgstr "поддержка одноуровневых доменов {}s не предусмотрена" - -msgid "too many '@' characters" -msgstr "слишком много символов @" - -msgid "cannot be longer that {} characters" -msgstr "не может превышать {} символов" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "имя узла содержит пустую метку (точки подряд)" - -msgid "not fully qualified" -msgstr "указано не полностью" - -msgid "invalid SSH public key" -msgstr "неверный открытый ключ SSH" - -msgid "options are not allowed" -msgstr "использование параметров запрещено" - -msgid "invalid hostmask" -msgstr "недопустимая маска узла" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "запрос \"%(owner)s %(rtype)s\": %(error)s" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "запрос \"%(owner)s %(rtype)s\" с помощью EDNS0: %(error)s" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" -"ответ на запрос \"%(owner)s %(rtype)s\" не содержит подписи DNSSEC (нет " -"данных RRSIG)" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" -"запись \"%(owner)s %(rtype)s\" не прошла проверку DNSSEC на сервере %(ip)s" - -msgid "invalid escape code in domain name" -msgstr "" -"недопустимая управляющая последовательность (escape code) в имени домена" - -msgid "domain name cannot be longer than 255 characters" -msgstr "имя домена не может быть длиннее 255 символов" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "DNS-метка не может быть длиннее 63 символов" - -msgid "invalid domain name" -msgstr "недопустимое имя домена" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "имя домена \"%(domain)s\" должно быть нормализовано до: %(normalized)s" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "недопустимое имя домена: %s" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" -"недопустимая версия IP-адреса (сейчас %(value)d, должна быть " -"%(required_value)d)!" - -msgid "invalid IP address format" -msgstr "недопустимый формат IP-адреса" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "%(port)s не является допустимым портом" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" -"должно присутствовать хотя бы одно значение, равное каноническому имени " -"учётной записи" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" -"область (realm) или UPN-суффикс пересекается с пространством имён " -"доверенного домена" - -msgid "incorrect type" -msgstr "неверный тип" - -msgid "Only one value is allowed" -msgstr "Допускается только одно значение" - -msgid "this option is deprecated" -msgstr "это опция устарела" - -msgid "must be True or False" -msgstr "должно равняться либо True, либо False" - -msgid "must be an integer" -msgstr "должно быть целым числом" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "должно быть не меньше %(minvalue)d" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "может быть не больше %(maxvalue)d" - -msgid "must be a decimal number" -msgstr "должно быть десятичным числом" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "должно быть не меньше %(minvalue)s" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "не может быть больше %(maxvalue)s" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" -"класс чисел \"%(cls)s\" не входит в список допустимых классов чисел: " -"%(allowed)s" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "должно соответствовать шаблону \"%(pattern)s\"" - -msgid "must be binary data" -msgstr "должно быть двоичными данными" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "размер должен быть не меньше %(minlength)d байт" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "размер должен быть не больше %(maxlength)d байт" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "размер должен быть точно %(length)d байт" - -msgid "must be a certificate" -msgstr "должно быть сертификатом" - -msgid "must be a certificate signing request" -msgstr "должно быть запросом подписи сертификата" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "Сбой при декодировании запроса подписи сертификата: %s" - -msgid "must be Unicode text" -msgstr "должно быть Юникод-текстом" - -msgid "Leading and trailing spaces are not allowed" -msgstr "Использование пробелов в начале и в конце запрещено" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "должно быть не короче %(minlength)d символов" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "может быть не длиннее %(maxlength)d символов" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "должно быть точно %(length)d символов длиной" - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "Использовать символ %(char)r запрещено." - -#, python-format -msgid "must be '%(value)s'" -msgstr "должно быть \"%(value)s\"" - -#, python-format -msgid "must be one of %(values)s" -msgstr "должно быть одним из следующих значений: %(values)s" - -msgid "must be datetime value" -msgstr "должно быть значением даты и времени (datetime)" - -msgid "does not match any of accepted formats: " -msgstr "не соответствует ни одному допустимому формату:" - -msgid "incomplete time value" -msgstr "неполное значение времени" - -msgid "must be DNS name" -msgstr "должно быть DNS-именем" - -msgid "must be absolute" -msgstr "должно быть абсолютным" - -msgid "must be relative" -msgstr "должно быть относительным" - -msgid "must be dictionary" -msgstr "должно быть словарём" - -msgid "must be Kerberos principal" -msgstr "должно быть учётной записью Kerberos" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "Недопустимая учётная запись: \"%(value)s\"" - -msgid "Service principal is required" -msgstr "Следует указать учётную запись службы" - -#, fuzzy -#| msgid "must be at least 10" -msgid "must be at least 0" -msgstr "должно быть не меньше 10" - -#, fuzzy -#| msgid "Invalid vault type" -msgid "invalid valid hex" -msgstr "Недопустимый тип хранилища" - -#, fuzzy -#| msgid "Minimum serial number" -msgid "invalid serial number 0" -msgstr "Минимальный серийный номер" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "Не удалось получить цепочку сертификатов CA: %s" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "не удалось выполнить запрос, состояние HTTP %d" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "Не удалось получить данные о состоянии CA: %s" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "Не удалось получить данные о состоянии CA: %d" - -#, python-format -msgid "objectclass %s not found" -msgstr "класс объектов %s не найден" - -msgid "Trusting forest" -msgstr "Доверяющий лес" - -msgid "Trusted forest" -msgstr "Доверенный лес" - -msgid "Established and verified" -msgstr "Установлено и проверено" - -msgid "Waiting for confirmation by remote side" -msgstr "Ожидание подтверждения удалённой стороной" - -msgid "Unknown" -msgstr "Неизвестно" - -msgid "Non-Active Directory domain" -msgstr "Домен, который не является доменом Active Directory" - -msgid "Active Directory domain" -msgstr "Домен Active Directory" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "Область (realm) Kerberos, которая соответствует RFC4120" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" -"Нетранзитивное внешнее отношение доверия с доменом в другом лесу Active " -"Directory" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" -"Нетранзитивное внешнее отношение доверия с областью (realm) Kerberos, " -"которая соответствует RFC4120" - -msgid "Failed to authenticate to CA REST API" -msgstr "" -"Не удалось выполнить аутентификацию с помощью программного интерфейса CA REST" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "Не удалось обменяться данными с CMS (состояние %d)" - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "Соглашение о репликации для %(hostname)s не найдено" - -msgid "automount location" -msgstr "расположение автомонтирования" - -msgid "automount locations" -msgstr "расположения автомонтирования" - -msgid "Automount Locations" -msgstr "Расположения автомонтирования" - -msgid "Automount Location" -msgstr "Расположение автомонтирования" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "Добавлено расположение автомонтирования \"%(value)s\"" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "Удаление расположения автомонтирования. \"%(value)s\"" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "установлено соответствие %(count)d расположения автомонтирования" -msgstr[1] "установлено соответствие %(count)d расположений автомонтирования" -msgstr[2] "установлено соответствие %(count)d расположений автомонтирования" - -msgid "automount map" -msgstr "список соответствия автомонтирования" - -msgid "automount maps" -msgstr "списки соответствия автомонтирования" - -msgid "Automount Maps" -msgstr "Списки соответствия автомонтирования" - -msgid "Automount Map" -msgstr "Список соответствия автомонтирования" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "Добавлен список соответствия автомонтирования \"%(value)s\"" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "Удалён список соответствия автомонтирования \"%(value)s\"" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "Изменён список соответствия автомонтирования \"%(value)s\"" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" -"установлено соответствие %(count)d списка соответствия автомонтирования" -msgstr[1] "" -"установлено соответствие %(count)d списков соответствия автомонтирования" -msgstr[2] "" -"установлено соответствие %(count)d списков соответствия автомонтирования" - -msgid "Automount key object." -msgstr "Объект ключа автомонтирования." - -msgid "automount key" -msgstr "ключ автомонтирования" - -msgid "automount keys" -msgstr "ключи автомонтирования" - -msgid "Automount Keys" -msgstr "Ключи автомонтирования" - -msgid "Automount Key" -msgstr "Ключ автомонтирования" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" -"Пара ключ,информация должна быть уникальной. Ключ с именем %(key)s и " -"информацией %(info)s уже существует" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "ключ с именем %(key)s уже существует" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "Ключ автомонтирования %(key)s с информацией %(info)s не существует" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" -"Найдено несколько записей с ключом %(key)s. Используйте --info, чтобы " -"выбрать определённую запись." - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "Добавлен ключ автомонтирования \"%(value)s\"" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "Добавлен непрямой список соответствия автомонтирования \"%(value)s\"" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" -"точка монтирования указывается относительно родительского списка " -"соответствия, её запись не может начинаться с /" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "Удалён ключ автомонтирования \"%(value)s\"" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "Изменён ключ автомонтирования \"%(value)s\"" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "установлено соответствие %(count)d ключа автомонтирования" -msgstr[1] "установлено соответствие %(count)d ключей автомонтирования" -msgstr[2] "установлено соответствие %(count)d ключей автомонтирования" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" -"\n" -"Управление профилями сертификатов\n" -"\n" -"Профили сертификатов используются центром сертификации (Certificate " -"Authority, CA) во время подписи сертификатов, чтобы определить, является ли " -"приемлемым запрос подписи сертификата (Certificate Signing Request, CSR), и, " -"если это так, определить, какие возможности и расширения будут предоставлены " -"сертификатом.\n" -"\n" -"Формат профиля сертификатов — это формат в виде списка свойств, который " -"распознаётся Dogtag или системой сертификации центра сертификации Red Hat.\n" -"\n" -"СИНТАКСИС ИДЕНТИФИКАТОРА ПРОФИЛЯ:\n" -"\n" -"Идентификатор профиля — это строка без пробелов и знаков препинания, она " -"начинается с буквы, за которой следуют другие буквы, цифры или символы " -"подчёркивания (\"_\").\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Импортировать профиль, в котором не будут храниться выданные сертификаты:\n" -" ipa certprofile-import ShortLivedUserCert\n" -" --file UserCert.profile --desc \"User Certificates\"\n" -" --store=false\n" -"\n" -" Удалить профиль сертификатов:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Показать сведения о профиле:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Сохранить конфигурацию профиля в файл:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Поиск профилей, в которых не хранятся сертификаты:\n" -" ipa certprofile-find --store=false\n" -"\n" -"ФОРМАТ КОНФИГУРАЦИИ ПРОФИЛЯ:\n" -"\n" -"Формат конфигурации профиля — это формат в виде необработанного списка " -"свойств, который используется системой сертификации Dogtag Certificate " -"System. Поддержка формата XML не предусмотрена.\n" -"\n" -"К профилям под управлением IPA применяются следующие ограничения:\n" -"\n" -"- При импорте профиля значение поля \"profileId\", если это поле имеется, " -"должно совпадать с идентификатором, указанным в командной строке.\n" -"\n" -"- Значением поля \"classId\" должно быть \"caEnrollImpl\".\n" -"\n" -"- Значением поля \"auth.instance_id\" должно быть \"raCertAuth\".\n" -"\n" -"- Должны использоваться входной класс \"certReqInputImpl\" и выходной класс " -"\"certOutputImpl\".\n" - -msgid "CA is not configured" -msgstr "CA не настроен" - -msgid "invalid Profile ID" -msgstr "недопустимый идентификатор профиля" - -msgid "Certificate Profile" -msgstr "Профиль сертификатов" - -msgid "Certificate Profiles" -msgstr "Профили сертификатов" - -msgid "Profile configuration" -msgstr "Конфигурация профиля" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "установлено соответствие %(count)d профиля" -msgstr[1] "установлено соответствие %(count)d профилей" -msgstr[2] "установлено соответствие %(count)d профилей" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "Импортирован профиль \"%(value)s\"" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" -"В данных профиля несколько раз указан идентификатор \"profileId\": %(values)s" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" -"Идентификатор профиля \"%(cli_value)s\" не соответствует данным профиля " -"\"%(file_value)s\"" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "Удалён профиль \"%(value)s\"" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "Предустановленный профиль \"%(profile_id)s\" невозможно удалить" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "Изменён профиль сертификатов \"%(value)s\"" - -msgid "Certificate profiles cannot be renamed" -msgstr "Профили сертификатов невозможно переименовать" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "Недостаточно привилегий для внесения изменений в профиль сертификатов." - -msgid "delegation" -msgstr "делегирование" - -msgid "delegations" -msgstr "делегирования" - -msgid "Delegations" -msgstr "Делегирования" - -msgid "Delegation" -msgstr "Делегирование" - -msgid "ACI" -msgstr "ACI" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "Добавлено делегирование \"%(value)s\"" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "Удалено делегирование \"%(value)s\"" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "Изменено делегирование \"%(value)s\"" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "установлено соответствие %(count)d делегирования" -msgstr[1] "установлено соответствие %(count)d делегирований" -msgstr[2] "установлено соответствие %(count)d делегирований" - -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" -"\n" -"Конфигурация DNS-сервера\n" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" -"\n" -"Управлять конфигурацией DNS-сервера\n" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" -"\n" -" Показать конфигурацию определённого DNS-сервера:\n" -" ipa dnsserver-show\n" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" -"\n" -" Обновить конфигурацию определённого DNS-сервера:\n" -" ipa dnsserver-mod\n" - -msgid "DNS server" -msgstr "DNS-сервер" - -msgid "DNS servers" -msgstr "DNS-серверы" - -msgid "DNS Servers" -msgstr "DNS-серверы" - -msgid "DNS Server" -msgstr "DNS-сервер" - -msgid "DNS Server name" -msgstr "Имя DNS-сервера" - -msgid "SOA mname override" -msgstr "Переопределение mname SOA" - -msgid "SOA mname (authoritative server) override" -msgstr "Переопределение mname SOA (полномочный сервер)" - -msgid "Forwarders" -msgstr "Перенаправители" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Перенаправители для отдельных серверов. Для каждого перенаправителя можно " -"указать отдельный порт с помощью стандартного формата \"IP_АДРЕС port ПОРТ\"" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" -"Условная политика перенаправления для отдельных серверов. Чтобы отключить " -"для этой зоны перенаправление на глобальный перенаправитель, установите " -"значение \"none\". В этом случае условные перенаправители зон не будут " -"приниматься во внимание." - -msgid "DNS is not configured" -msgstr "DNS не настроено" - -msgid "Modify DNS server configuration" -msgstr "Изменить конфигурацию DNS-сервера" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "Изменена запись DNS-сервера \"%(value)s\"" - -msgid "Search for DNS servers." -msgstr "Поиск DNS-серверов." - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "установлено соответствие %(count)d DNS-сервера" -msgstr[1] "установлено соответствие %(count)d DNS-серверов" -msgstr[2] "установлено соответствие %(count)d DNS-серверов" - -msgid "IPA DNS Server is not installed" -msgstr "DNS-сервер IPA не установлен" - -msgid "Display configuration of a DNS server." -msgstr "Показать конфигурацию DNS-сервера." - -msgid "Add a new DNS server." -msgstr "Добавить новый DNS-сервер." - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "Добавлен новый DNS-сервер \"%(value)s\"" - -msgid "Delete a DNS server" -msgstr "Удалить DNS-сервер" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "Удалён DNS-сервер \"%(value)s\"" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" -"Уровень домена не может быть поднят до {0}, следует устранить существующие " -"конфликты репликации." - -msgid "Server does not support domain level functionality" -msgstr "Сервер не поддерживает функционал уровня домена" - -msgid "Domain Level cannot be lowered." -msgstr "Уровень домена не может быть понижен." - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" -"Уровень домена не может быть поднят до {0}, так на сервере {1} не " -"предусмотрена поддержка такого уровня." - -#, fuzzy -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" -"\n" -"Группы пользователей\n" -"\n" -"Управление группами пользователей. По умолчанию все новые группы являются " -"POSIX-группами. Можно добавить параметр --nonposix в команду group-add, " -"чтобы отметить новую группу в качестве не-POSIX-группы. В команде group-mod " -"можно использовать аргумент --posix, чтобы преобразовать не-POSIX-группу в " -"POSIX-группу. POSIX-группы нельзя преобразовать в не-POSIX-группы. \n" -"\n" -"У каждой группы должно быть описание.\n" -"\n" -"У POSIX-групп должен быть идентификатор группы (GID). Изменение GID " -"поддерживается, но может повлиять на разрешения для файлов. При создании " -"группы необязательно предоставлять GID. Если он не будет предоставлен, IPA " -"создаст его автоматически.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую группу:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Добавить новую не-POSIX-группу:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Преобразовать не-POSIX-группу в posix-группу:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Добавить новую POSIX-группу с определённым ID группы:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Добавить новую POSIX-группу и позволить IPA назначить ID группы:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Удалить группу:\n" -" ipa group-del unixadmins\n" -"\n" -" Чтобы добавить группу \"remoteadmins\" в группу \"localadmins\":\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Добавить нескольких пользователей в группу \"localadmins\":\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Удалить пользователя из группы \"localadmins\":\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Показать сведения об именованной группе:\n" -" ipa group-show localadmins\n" -"\n" -"Участие внешних групп создано для того, чтобы сделать возможной привязку " -"пользователей из доверенных доменов к локальным POSIX-группам с целью " -"использования ресурсов IPA. Внешние участники должны быть добавлены в " -"группы, которые специально созданы, как внешние и не-POSIX. Такая группа " -"затем должна быть включена в одну из групп POSIX.\n" -"\n" -"В текущей версии участник внешней группы является идентификатором " -"безопасности (Security Identifier или SID), определённым доверенным доменом. " -"Добавление участников внешней группы можно выполнить в формате SID, DOM\\имя " -"или имя@домен. IPA попытается определить SID по переданному имени путём " -"использования общего каталога доверенного домена.\n" -"\n" -"Пример:\n" -"\n" -"1. Создать группу для привязки администраторов (admins) доверенного домена и " -"их локальную POSIX-группу:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Добавить идентификатор безопасности Domain Admins домена " -"группе ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Разрешить привязку группы ad_admins_external к POSIX-группе ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Вывести список внешних участников группы ad_admins_external, чтобы " -"определить их SID:\n" -"\n" -" ipa group-show ad_admins_external\n" - -msgid "groups" -msgstr "группы" - -msgid "User Group" -msgstr "Группа пользователей" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "Добавлена группа \"%(value)s\"" - -msgid "gid cannot be set for external group" -msgstr "невозможно указать gid для внешней группы" - -#, fuzzy -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "атрибут \"%s\" нельзя использовать" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Удалена группа \"%(value)s\"" - -msgid "privileged group" -msgstr "привилегированная группа" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Изменена группа \"%(value)s\"" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "установлено соответствие %(count)d группы" -msgstr[1] "установлено соответствие %(count)d групп" -msgstr[2] "установлено соответствие %(count)d групп" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"Невозможно выполнить проверку внешнего участника без установленной поддержки " -"Samba 4. Убедитесь, что на сервере установлен субпакет IPA server-trust-ad" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" -"Без настройки собственного домена нельзя выполнять операцию присоединения. " -"Убедитесь, что на IPA-сервере запущена команда ipa-adtrust-install" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "Отсоединена группа \"%(value)s\" от пользователя \"%(value)s\"" - -msgid "not allowed to modify user entries" -msgstr "запрещено изменять записи пользователей" - -msgid "not allowed to modify group entries" -msgstr "запрещено изменять записи групп" - -msgid "Not a managed group" -msgstr "Не является управляемой группой" - -#, fuzzy -msgid "Add users that can manage members of this group." -msgstr "Добавить пользователей, которые могут управлять этим токеном." - -#, fuzzy -msgid "Remove users that can manage members of this group." -msgstr "Удалить пользователей, которые могут управлять этим токеном." - -msgid "Host-based access control commands" -msgstr "Команды управления доступом на основе узла" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" -"\n" -"Службы HBAC\n" -"\n" -"Службы PAM, доступом к которым управляет HBAC. Используемое здесь имя должно " -"соответствовать имени службы, которую оценивает PAM.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую службу HBAC:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Изменить существующую службу HBAC:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Поиск служб HBAC. В этом примере будут возвращены два результата, служба " -"FTP\n" -" и добавленная выше служба tftp:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Удалить службу HBAC:\n" -" ipa hbacsvc-del tftp\n" - -msgid "HBAC services" -msgstr "cлужбы HBAC" - -msgid "HBAC Services" -msgstr "Cлужбы HBAC" - -msgid "HBAC Service" -msgstr "Cлужба HBAC" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "Добавлена служба HBAC \"%(value)s\"" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "Удалена служба HBAC \"%(value)s\"" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "Изменена служба HBAC \"%(value)s\"" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "установлено соответствие %(count)d службы HBAC" -msgstr[1] "установлено соответствие %(count)d служб HBAC" -msgstr[2] "установлено соответствие %(count)d служб HBAC" - -msgid "HBAC service group" -msgstr "группа служб HBAC" - -msgid "HBAC service groups" -msgstr "группы служб HBAC" - -msgid "HBAC Service Groups" -msgstr "Группы служб HBAC" - -msgid "HBAC Service Group" -msgstr "Группа служб HBAC" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "Добавлена группа служб HBAC \"%(value)s\"" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "Удалена группа служб HBAC \"%(value)s\"" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "Изменена группа служб HBAC \"%(value)s\"" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "установлено соответствие %(count)d группы служб HBAC" -msgstr[1] "установлено соответствие %(count)d групп служб HBAC" -msgstr[2] "установлено соответствие %(count)d групп служб HBAC" - -#, fuzzy -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" -"\n" -"Группы узлов.\n" -"\n" -"Управление группами узлов. Оно полезно при применении управления доступом к " -"ряду узлов с помощью управления доступом на основе узла (HBAC).\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую группу узлов:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Добавить другую новую группу узлов:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Добавить участников в группу узлов (с использованием выражения Bash в " -"фигурных скобках):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Добавить группу узлов как участника другой группы узлов:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Удалить узел из группы узлов:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Показать группу узлов:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Удалить группу узлов:\n" -" ipa hostgroup-del baltimore\n" - -msgid "host groups" -msgstr "группы узлов" - -msgid "Host Group" -msgstr "Группа узлов" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Добавлена группа узлов \"%(value)s\"" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"сетевая группа с именем \"%s\" уже существует. Группы узлов и сетевые группы " -"имеют общее пространство имён" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Удалена группа узлов \"%(value)s\"" - -msgid "hostgroup" -msgstr "группа узлов" - -msgid "privileged hostgroup" -msgstr "привилегированная группа узлов" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Изменена группа узлов \"%(value)s\"" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "установлено соответствие %(count)d группы узлов" -msgstr[1] "установлено соответствие %(count)d групп узлов" -msgstr[2] "установлено соответствие %(count)d групп узлов" - -#, fuzzy -msgid "Add users that can manage members of this hostgroup." -msgstr "Добавить пользователей, которые могут управлять этим токеном." - -#, fuzzy -msgid "Remove users that can manage members of this hostgroup." -msgstr "Удалить пользователей, которые могут управлять этим токеном." - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" -"=======\n" -"ПРЕДУПРЕЖДЕНИЕ:\n" -"\n" -"Подключаемый модуль DNA в 389-ds выделяет идентификаторы на основе " -"диапазонов, настроенных для локального домена. В текущей версии сам " -"подключаемый модуль DNA *нельзя* перенастраивать на основе локальных " -"диапазонов, установленных с помощью этого семейства команд.\n" -"\n" -"Для нового локального диапазона следует вручную изменить настройки " -"конфигурации подключаемого модуля DNA. В частности, следует изменить атрибут " -"dnaNextRange \"cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config\" таким " -"образом, чтобы он соответствовал новому диапазону.\n" -"=======\n" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "Диапазоны идентификаторов" - -msgid "ID Range" -msgstr "Диапазон идентификаторов" - -msgid "local domain range" -msgstr "диапазон локальных доменов" - -msgid "Active Directory domain range" -msgstr "диапазон доменов Active Directory" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "Диапазон доверия Active Directory с атрибутами POSIX" - -msgid "ID range type, one of allowed values" -msgstr "Тип диапазона идентификаторов, одно из разрешённых значений" - -#, fuzzy -msgid "Auto private groups" -msgstr "Без личной группы" - -#, fuzzy -msgid "Auto creation of private groups, one of allowed values" -msgstr "Тип диапазона идентификаторов, одно из разрешённых значений" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" -"изменение диапазона, при котором появляются объекты с идентификаторами за " -"пределами указанного диапазона, запрещено " - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"Невозможно выполнить проверку SID без установленной поддержки Samba 4. " -"Убедитесь, что на сервере установлен субпакет IPA server-trust-ad" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" -"Отношения доверия между областями (realm) не настроены. Убедитесь, что на " -"IPA-сервере запущена команда ipa-adtrust-install" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" -"Не удалось распознать SID в качестве допустимого идентификатора безопасности " -"для доверенного домена" - -#, fuzzy -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" -"\n" -"Добавление нового диапазона идентификаторов.\n" -"\n" -" Для добавления нового диапазона идентификаторов всегда необходимо " -"указывать\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Кроме того,\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" могут указываться для нового диапазона идентификаторов для локального " -"домена, в то время как\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" должны быть указаны для добавления нового диапазона для доверенного " -"домена AD.\n" -"\n" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "Добавлен диапазон идентификаторов \"%(value)s\"" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "Невозможно одновременно использовать параметры dom-sid и dom-name" - -msgid "Specified trusted domain name could not be found." -msgstr "Указанное имя доверенного домена не найдено." - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" -"Параметры dom-sid/dom-name и rid-base необходимо использовать одновременно" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" -"Если типом диапазона IPA является ipa-ad-trust-posix, параметр rid-base " -"использовать нельзя" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" -"Если указан SID доверенного домена, тип диапазона IPA должен быть ipa-ad-" -"trust или ipa-ad-trust-posix" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" -"Невозможно одновременно использовать параметры dom-sid/dom-name и secondary-" -"rid-base" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" -"Если не указан SID доверенного домена, тип диапазона IPA не должен быть ipa-" -"ad-trust или ipa-ad-trust-posix" - -#, fuzzy -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" -"Если указан SID доверенного домена, тип диапазона IPA должен быть ipa-ad-" -"trust или ipa-ad-trust-posix" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" -"Параметры secondary-rid-base и rid-base необходимо использовать одновременно" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "Основной диапазон RID и вторичный диапазон RID не могут пересекаться" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" -"Необходимо указать оба параметра, rid-base и secondary-rid-base, так как " -"команда ipa-adtrust-install уже запущена." - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "Удалён диапазон идентификаторов \"%(value)s\"" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "установлено соответствие %(count)d диапазона" -msgstr[1] "установлено соответствие %(count)d диапазонов" -msgstr[2] "установлено соответствие %(count)d диапазонов" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" -"Изменить диапазон идентификаторов.\n" -"\n" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "Изменён диапазон идентификаторов \"%(value)s\"" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" -"Эту команду нельзя использовать для изменения выделения идентификаторов для " -"локального домена IPA. Чтобы получить дополнительные сведения, выполните " -"команду `ipa help idrange`" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" -"Не удалось найти SID указанного доверенного домена. Укажите SID в явном виде " -"с помощью параметра dom-sid." - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" -"Невозможно одновременно использовать параметры dom-sid и secondary-rid-base" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "Параметры dom-sid и rid-base необходимо использовать одновременно" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" -"Недостаточно привилегий \"write\" для атрибута \"krbLastPwdChange\" записи " -"\"%s\"." - -msgid "" -"\n" -"IPA locations\n" -msgstr "" -"\n" -"расположения IPA\n" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" -"\n" -"Управлять расположениями DNS\n" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" -"\n" -" Найти все расположения:\n" -" ipa location-find\n" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" -"\n" -" Показать определённое расположение:\n" -" ipa location-show location\n" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" -"\n" -" Добавить расположение:\n" -" ipa location-add location --description 'My location'\n" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" -"\n" -" Удалить расположение:\n" -" ipa location-del location\n" - -msgid "location" -msgstr "расположение" - -msgid "locations" -msgstr "расположения" - -msgid "IPA Locations" -msgstr "Расположения IPA" - -msgid "IPA Location" -msgstr "Расположение IPA" - -msgid "Location name" -msgstr "Имя расположения" - -msgid "IPA location name" -msgstr "Имя расположения IPA" - -msgid "IPA Location description" -msgstr "Описание расположения IPA" - -msgid "Servers" -msgstr "Серверы" - -msgid "Servers that belongs to the IPA location" -msgstr "Серверы, которые принадлежат к записи расположения IPA" - -msgid "Advertised by servers" -msgstr "Сообщено серверами" - -msgid "List of servers which advertise the given location" -msgstr "Список серверов, которые сообщают указанное расположение" - -msgid "Add a new IPA location." -msgstr "Добавить новую запись расположения IPA." - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "Добавлена запись расположения IPA \"%(value)s\"" - -msgid "Delete an IPA location." -msgstr "Удалить запись расположения IPA." - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Удалена запись расположения IPA \"%(value)s\"" - -msgid "IPA Server" -msgstr "IPA-сервер" - -msgid "Modify information about an IPA location." -msgstr "Изменить сведения о расположении IPA." - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "Изменена запись расположения IPA \"%(value)s\"" - -msgid "Search for IPA locations." -msgstr "Поиск расположений IPA." - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "установлено соответствие %(count)d расположения IPA" -msgstr[1] "установлено соответствие %(count)d расположений IPA" -msgstr[2] "установлено соответствие %(count)d расположений IPA" - -msgid "Display information about an IPA location." -msgstr "Показать сведения о расположении IPA." - -msgid "Servers in location" -msgstr "Серверы в расположении" - -msgid "netgroups" -msgstr "сетевые группы" - -msgid "Netgroups" -msgstr "Сетевые группы" - -msgid "Netgroup" -msgstr "Сетевая группа" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "Добавлена сетевая группа \"%(value)s\"" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"группа узлов с именем \"%s\" уже существует. Группы узлов и сетевые группы " -"имеют общее пространство имён" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Удалена сетевая группа \"%(value)s\"" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "Изменена сетевая группа \"%(value)s\"" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" -"для категории пользователей нельзя установить значение \"all\", когда " -"имеются разрешённые пользователи" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" -"для категории узлов нельзя установить значение \"all\", когда имеются " -"разрешённые узлы" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "установлено соответствие %(count)d сетевой группы" -msgstr[1] "установлено соответствие %(count)d сетевых групп" -msgstr[2] "установлено соответствие %(count)d сетевых групп" - -msgid "One time password commands" -msgstr "Команды для одноразового пароля" - -msgid "OTP configuration options" -msgstr "Параметры конфигурации OTP" - -msgid "OTP Configuration" -msgstr "Конфигурация OTP" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" -"\n" -"Токены OTP\n" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" -"\n" -"Управление токенами OTP.\n" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" -"\n" -"В IPA реализована поддержка использования токенов OTP для многофакторной " -"аутентификации. Этот код позволяет управлять токенами OTP.\n" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" -"\n" -" Добавить новый токен:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" -"\n" -" Проверить токен:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" -"\n" -" Изменить поставщика:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" -"\n" -" Удалить токен:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" - -msgid "OTP token" -msgstr "токен OTP" - -msgid "OTP tokens" -msgstr "токены OTP" - -msgid "OTP Tokens" -msgstr "Токены OTP" - -msgid "OTP Token" -msgstr "Токен OTP" - -msgid "URI" -msgstr "Универсальный код ресурса (URI)" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "Добавлен токен OTP \"%(value)s\"" - -msgid "cannot be empty" -msgstr "не может быть пустым" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Удалён токен OTP \"%(value)s\"" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "Изменён токен OTP \"%(value)s\"" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "установлено соответствие %(count)d токена OTP" -msgstr[1] "установлено соответствие %(count)d токенов OTP" -msgstr[2] "установлено соответствие %(count)d токенов OTP" - -#, fuzzy -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" -"\n" -"Установка пароля пользователя\n" -"\n" -"Если пароль пользователя изменяет кто-то кроме самого пользователя " -"(например, его сбрасывает служба технической поддержки), пароль потребуется " -"изменить при первом использовании. Это делается для того, чтобы пароль знал " -"только конечный пользователь.\n" -"\n" -"Политика паролей IPA управляет частотой смены пароля, требованиями к " -"надёжности пароля и размером журнала паролей.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Чтобы сбросить свой собственный пароль:\n" -" ipa passwd\n" -"\n" -" Чтобы изменить пароль другого пользователя:\n" -" ipa passwd tuser1\n" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Изменён пароль \"%(value)s\"" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" -"\n" -"Средства отчётности о состоянии функции пре-аутентификации (PKINIT) " -"Kerberos.\n" -"\n" -"Отчёт о том, включена или отключена пре-аутентификация (PKINIT) Kerberos на " -"главных IPA-серверах \n" -"\n" -"ПРИМЕРЫ:\n" -" Вывести список состояний PKINIT на всех главных серверах:\n" -" ipa pkinit-status\n" -"\n" -" Проверить состояние PKINIT на \"ipa.example.com\":\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" Вывести список всех главных IPA-серверов с отключённой PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"Дополнительные сведения о поддержке PKINIT:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" - -msgid "pkinit" -msgstr "pkinit" - -msgid "PKINIT" -msgstr "PKINIT" - -msgid "PKINIT status" -msgstr "Состояние PKINIT" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "Включена или отключена пре-аутентификация (PKINIT)" - -msgid "Report PKINIT status on the IPA masters" -msgstr "Сообщить состояние PKINIT на главных IPA-серверах" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "установлено соответствие %(count)s сервера" -msgstr[1] "установлено соответствие %(count)s серверов" -msgstr[2] "установлено соответствие %(count)s серверов" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" -"\n" -"Прокси-серверы RADIUS\n" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" -"\n" -"Управление прокси-серверами RADIUS.\n" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" -"\n" -"В IPA поддерживается использование внешнего прокси-сервера RADIUS для " -"выполнения аутентификации с помощью одноразового пароля krb5. Эта поддержка " -"обеспечивает значительную гибкость при интеграции со сторонними службами " -"аутентификации.\n" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" -"\n" -" Добавить новый сервер:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" -"\n" -" Найти все серверы, записи которых содержат строку \"example.com\":\n" -" ipa radiusproxy-find example.com\n" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" -"\n" -" Проверить конфигурацию:\n" -" ipa radiusproxy-show MyRADIUS\n" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" -"\n" -" Изменить секрет:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" -"\n" -" Удалить конфигурацию:\n" -" ipa radiusproxy-del MyRADIUS\n" - -msgid "invalid attribute name" -msgstr "недопустимое имя атрибута" - -msgid "invalid port number" -msgstr "недопустимый номер порта" - -msgid "RADIUS proxy server" -msgstr "прокси-сервер RADIUS" - -msgid "RADIUS proxy servers" -msgstr "прокси-серверы RADIUS" - -msgid "RADIUS Servers" -msgstr "Серверы RADIUS" - -msgid "RADIUS Server" -msgstr "Сервер RADIUS" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "Добавлен прокси-сервер RADIUS \"%(value)s\"" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "Удалён прокси-сервер RADIUS \"%(value)s\"" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "Изменён прокси-сервер RADIUS \"%(value)s\"" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "установлено соответствие %(count)d прокси-сервера RADIUS" -msgstr[1] "установлено соответствие %(count)d прокси-серверов RADIUS" -msgstr[2] "установлено соответствие %(count)d прокси-серверов RADIUS" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" -"\n" -"Домены области\n" -"\n" -"Управление списком доменов, связанных с областью (realm) IPA.\n" -"\n" -"Этот список используется контроллерами доменов из других областей (realms), " -"у которых установлено отношение доверия с этой областью (realm) IPA. Им " -"необходимы сведения о том, какой запрос следует перенаправить в центр " -"распространения ключей (KDC) этой области (realm) IPA.\n" -"\n" -"При автоматическом управлении: домен автоматически добавляется в список " -"доменов области (realm) при создании новой зоны DNS под управлением IPA. То " -"же самое относится и к удалению.\n" -"\n" -"При внешнем управлении DNS: домены, которые не управляются в DNS IPA-" -"сервера, необходимо вручную добавить в список с помощью команды ipa " -"realmdomains-mod.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Показать текущий список доменов области:\n" -" ipa realmdomains-show\n" -"\n" -" Заменить список доменов области:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Добавить домен в список доменов области:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Удалить домен из списка доменов области:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" - -msgid "Realm domains" -msgstr "Домены области (realm)" - -msgid "Realm Domains" -msgstr "Домены области (realm)" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" -"\n" -" Изменение доменов области (realm).\n" -"\n" -" Проверка DNS: при ручном добавлении домена в список по умолчанию " -"выполняется проверка DNS. Она устанавливает, связан ли домен с областью " -"(realm) IPA, проверяя, есть ли у домена запись TXT _kerberos, которая " -"содержит имя области (realm) IPA. Эту проверку можно пропустить, указав " -"параметр --force.\n" -"\n" -" Удаление: при удалении домена области (realm), у которого имеется " -"соответствующая находящаяся под управлением IPA зона DNS, также " -"автоматически удаляется и соответствующая запись TXT _kerberos в этой зоне. " -"Другие записи в этой зоне и сама зона остаются.\n" -" " - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" -"Запись зоны DNS для каждого realmdomain должна содержать записи SOA или NS. " -"Для %s такие записи не найдены." - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "Следующие домены не принадлежат к этой области (realm): %(domains)s" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" -"Не удалось определить область (realm) следующих доменов: %(domains)s. Если " -"эти домены принадлежат к этой области, создайте на каждом из них запись TXT " -"_kerberos, которая содержит \"%(realm)s\"." - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" -"Параметр --domain невозможно использовать одновременно с параметром --add-" -"domain или --del-domain. Используйте параметр --domain, чтобы явно указать " -"весь список доменов области (realm). Используйте параметр --add-domain/del-" -"domain, чтобы добавить или удалить отдельные домены." - -msgid "IPA server domain cannot be omitted" -msgstr "Домен IPA-сервера не может быть пропущен" - -msgid "IPA server domain cannot be deleted" -msgstr "Домен IPA-сервера не может быть удалён" - -msgid "roles" -msgstr "роли" - -msgid "Role" -msgstr "Роль" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "Добавлена роль \"%(value)s\"" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "Удалена роль \"%(value)s\"" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "Изменена роль \"%(value)s\"" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "установлено соответствие %(count)d роли" -msgstr[1] "установлено соответствие %(count)d ролей" -msgstr[2] "установлено соответствие %(count)d ролей" - -msgid "self service permission" -msgstr "разрешение самообслуживания" - -msgid "self service permissions" -msgstr "разрешения самообслуживания" - -msgid "Self Service Permissions" -msgstr "Разрешения самообслуживания" - -msgid "Self Service Permission" -msgstr "Разрешение самообслуживания" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "Добавлено самообслуживание \"%(value)s\"" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "Удалено самообслуживание \"%(value)s\"" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "Изменено самообслуживание \"%(value)s\"" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "установлено соответствие %(count)d самообслуживания" -msgstr[1] "установлено соответствие %(count)d самообслуживаний" -msgstr[2] "установлено соответствие %(count)d самообслуживаний" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" -"\n" -"Роли IPA-сервера\n" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" -"\n" -"Получить состояние ролей (DNS-сервер, CA и так далее), предоставленное " -"главными IPA-серверами.\n" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" -"\n" -"Роль может находиться в одном из следующих состояний: включена, настроена " -"или отсутствует.\n" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" -"\n" -" Показать состояние роли \"DNS server\" на сервере:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" -"\n" -" Показать состояние всех ролей, которые содержат \"AD\", на сервере:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" -"\n" -" Показать состояние всех настроенных ролей на сервере:\n" -" ipa server-role-find ipa.example.com\n" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" -"\n" -" Показать неявную роль главного IPA-сервера:\n" -" ipa server-role-find --include-master\n" - -msgid "server role" -msgstr "роль сервера" - -msgid "server roles" -msgstr "роли сервера" - -msgid "IPA Server Roles" -msgstr "Роли IPA-сервера" - -msgid "IPA Server Role" -msgstr "Роль IPA-сервера" - -msgid "IPA server role name" -msgstr "Имя роли IPA-сервера" - -msgid "Role status" -msgstr "Состояние роли" - -msgid "Status of the role" -msgstr "Состояние роли" - -msgid "Show role status on a server" -msgstr "Показать состояние роли на сервере." - -msgid "Find a server role on a server(s)" -msgstr "Поиск роли сервера на сервере (серверах)." - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "установлено соответствие %(count)s роли сервера" -msgstr[1] "установлено соответствие %(count)s ролей сервера" -msgstr[2] "установлено соответствие %(count)s ролей сервера" - -msgid "Include IPA master entries" -msgstr "Включить записи главных IPA-cерверов" - -msgid "IPA role name" -msgstr "Имя роли IPA" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "{role}: роль не найдена" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "{attr}: атрибут не найден" - -#, fuzzy -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" -"\n" -"Ограниченное делегирование служб\n" -"\n" -"Управление правилами, с помощью которых можно ограничить делегирование " -"учётных данных таким образом, что служба сможет выполнять олицетворение " -"пользователя при обмене данными с другой службой без необходимости для " -"пользователя самом деле перенаправлять билет для получения билета (TGT). " -"Такой метод делегирования учётных данных значительно лучше, так как " -"предотвращает раскрытие краткосрочного секрета пользователя.\n" -"\n" -"В соответствии с соглашением об именовании к имени соответствующего правила " -"добавляется слово \"target\" или \"targets\". Такая схема имён не является " -"обязательной, но она помогает концептуально связать правила и их " -"назначения.\n" -"\n" -"Правило состоит из двух компонентов:\n" -" - Список целей (назначений), к которым применяется правило\n" -" - Список memberPrincipals, которым разрешено делегирование для этих " -"целей \n" -"\n" -"Цель состоит из списка учётных записей, которые можно делегировать.\n" -"\n" -"Если проще, правило утверждает, что определённую учетную запись можно " -"делегировать как указанный список учётных записей, согласно заданному списку " -"целей.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новое правило ограниченного делегирования:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Добавить новую цель ограниченного делегирования:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Добавить учётную запись в правило:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Добавить цель в правило:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Добавить учётную запись в цель:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Показать сведения об именованном правиле делегирования и цели:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Удалить ограниченное делегирование:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"В этом примере служба ftp может получать билет для получения билета для " -"службы ldap от имени связанного пользователя.\n" -"\n" -"Настоятельно не рекомендуется изменять делегирования, которые поставляются с " -"IPA, ipa-http-delegation и его цели ipa-cifs-delegation-targets и Ipa-ldap-" -"delegation-targets. Неправильная настройка может привести к потере " -"возможности делегирования, что повлечет неработоспособность всей системы.\n" - -msgid "Allowed to Impersonate" -msgstr "Разрешено олицетворять" - -msgid "Member principals" -msgstr "Учётные записи — участники" - -#, fuzzy, python-format -msgid "Malformed principal: %(error)s" -msgstr "Недопустимая учётная запись: \"%(value)s\"" - -msgid "Add target to a named service delegation." -msgstr "Добавить цель в именованное делегирование служб." - -#, python-format -msgid "member %s" -msgstr "участник %s" - -msgid "Remove member from a named service delegation." -msgstr "Удалить участника из именованного делегирования служб." - -msgid "service delegation rule" -msgstr "правило делегирования служб" - -msgid "service delegation rules" -msgstr "правила делегирования служб" - -msgid "Service delegation rules" -msgstr "Правила делегирования служб" - -msgid "Service delegation rule" -msgstr "Правило делегирования служб" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "Добавлено правило делегирования служб \"%(value)s\"" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "Удалено делегирование служб \"%(value)s\"" - -msgid "privileged service delegation rule" -msgstr "правило делегирования привилегированных служб" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "установлено соответствие %(count)d правила делегирования служб" -msgstr[1] "установлено соответствие %(count)d правил делегирования служб" -msgstr[2] "установлено соответствие %(count)d правил делегирования служб" - -msgid "service delegation target" -msgstr "цель делегирования служб" - -msgid "service delegation targets" -msgstr "цели делегирования служб" - -msgid "Service delegation targets" -msgstr "Цели делегирования служб" - -msgid "Service delegation target" -msgstr "Цель делегирования служб" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "Добавлена цель делегирования служб \"%(value)s\"" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "Удалена цель делегирования служб \"%(value)s\"" - -msgid "privileged service delegation target" -msgstr "цель делегирования привилегированных служб" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "установлено соответствие %(count)d цели делегирования служб" -msgstr[1] "установлено соответствие %(count)d целей делегирования служб" -msgstr[2] "установлено соответствие %(count)d целей делегирования служб" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" -"\n" -"Сеансовая поддержка для IPA\n" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -#, fuzzy -msgid "Subordinate id description" -msgstr "Описание профиля" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -#, fuzzy -msgid "SubUID range size" -msgstr "Размер диапазона" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -#, fuzzy -msgid "SubGID range size" -msgstr "Размер диапазона" - -msgid "Subordinate group ID count" -msgstr "" - -#, fuzzy, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "%(oname)s с именем \"%(pkey)s\" уже существует" - -#, fuzzy, python-format -msgid "'%(dn)s is not a valid user" -msgstr "%(port)s не является допустимым портом" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -#, fuzzy -msgid "Add a new subordinate id." -msgstr "Добавить нового неподтверждённого пользователя." - -#, fuzzy, python-format -msgid "Added subordinate id \"%(value)s\"" -msgstr "Добавлена служба \"%(value)s\"" - -#, fuzzy -msgid "Delete a subordinate id." -msgstr "Удалить профиль сертификатов." - -#, fuzzy, python-format -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "Удалена служба \"%(value)s\"" - -#, fuzzy -msgid "Modify a subordinate id." -msgstr "Изменить неподтверждённого пользователя." - -#, fuzzy, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "Изменена служба \"%(value)s\"" - -#, fuzzy -msgid "Search for subordinate id." -msgstr "Поиск диапазонов." - -#, fuzzy, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "установлено соответствие %(count)d службы" -msgstr[1] "установлено соответствие %(count)d служб" -msgstr[2] "установлено соответствие %(count)d служб" - -#, fuzzy -msgid "Display information about a subordinate id." -msgstr "Показать сведения о диапазоне." - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "команды управления конфигурацией Sudo" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" -"\n" -"Команды Sudo \n" -"\n" -"Команды, которые используются в качестве строительных блоков для Sudo\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Создать новую команду\n" -" ipa sudocmd-add --desc='Чтение файлов в журнале' /usr/bin/less\n" -"\n" -" Удалить команду\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -msgid "sudo command" -msgstr "команда Sudo" - -msgid "sudo commands" -msgstr "команды Sudo" - -msgid "Sudo Commands" -msgstr "Команды Sudo" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "Добавлена команда Sudo \"%(value)s\"" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "Удалена команда Sudo \"%(value)s\"" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "Изменена команда Sudo \"%(value)s\"" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "установлено соответствие %(count)d команды Sudo" -msgstr[1] "установлено соответствие %(count)d команд Sudo" -msgstr[2] "установлено соответствие %(count)d команд Sudo" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" -"\n" -"Группы команд Sudo\n" -"\n" -"Управление группами команд Sudo.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую группу команд Sudo:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Удалить группу команд Sudo:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Управлять участием в группе команд Sudo, команды:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Управлять участием в группе команд Sudo, команды:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Показать группу команд Sudo:\n" -" ipa sudocmdgroup-show admincmds\n" - -msgid "sudo command group" -msgstr "группа команд Sudo" - -msgid "sudo command groups" -msgstr "группы команд Sudo" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Добавлена группа команд Sudo \"%(value)s\"" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Удалена группа команд Sudo \"%(value)s\"" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Изменена группа команд Sudo \"%(value)s\"" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "установлено соответствие %(count)d группы команд Sudo" -msgstr[1] "установлено соответствие %(count)d групп команд Sudo" -msgstr[2] "установлено соответствие %(count)d групп команд Sudo" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" -"\n" -"Топология\n" -"\n" -"Управление топологией репликации на уровне домена 1.\n" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" -"\n" -"Данные IPA-сервера хранятся на LDAP-сервере в двух суффиксах:\n" -"* суффикс домена (domain), например, \"dc=example,dc=com\", содержит все " -"связанные с доменом данные\n" -"* суффикс центра сертификации (ca), \"o=ipaca\", имеется только на серверах " -"с установленным CA. Он содержит данные для компонента сервера сертификатов\n" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" -"\n" -"Данные, которые хранятся на IPA-серверах, реплицируются на другие IPA-" -"серверы. Способ репликации определяется соглашениями о репликации. " -"Соглашения о репликации необходимо устанавливать для каждого из суффиксов " -"отдельно. На уровне домена 0 управление ими выполняется с помощью средств " -"ipa-replica-manage и ipa-csreplica-manage. На уровне домена 1 управление " -"выполняется централизованно с помощью команд \"ipa topology*\".\n" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" -"\n" -"Соглашения представляются сегментами топологии. По умолчанию сегмент " -"топологии представляет 2 соглашения о репликации: по одному для каждого " -"направления, например, от A до B и от B до A. Создание однонаправленных " -"сегментов запрещено.\n" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" -"\n" -"Чтобы проверить, что ни один сервер не отключается в топологии указанного " -"суффикса, используйте эту команду:\n" -" ipa topologysuffix-verify $suffix\n" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -"\n" -"Примеры:\n" -" Найти все IPA-серверы:\n" -" ipa server-find\n" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" -"\n" -" Найти все суффиксы:\n" -" ipa topologysuffix-find\n" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" -"\n" -" Добавить сегмент топологии к суффиксу \"domain\":\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" -"\n" -" Добавить сегмент топологии в суффикс \"ca\":\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" -"\n" -" Вывести список всех сегментов топологии в суффиксе \"domain\":\n" -" ipa topologysegment-find domain\n" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" -"\n" -" Вывести список всех сегментов топологии в суффиксе \"ca\":\n" -" ipa topologysegment-find ca\n" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" -"\n" -" Удалить сегмент топологии в суффиксе \"domain\":\n" -" ipa topologysegment-del domain segment_name\n" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" -"\n" -" Удалить сегмент топологии в суффиксе \"ca\":\n" -" ipa topologysegment-del ca segment_name\n" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" -"\n" -" Проверить топологию суффикса \"domain\":\n" -" ipa topologysuffix-verify domain\n" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" -"\n" -" Проверить топологию суффикса \"ca\":\n" -" ipa topologysuffix-verify ca\n" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "Управление топологией требует уровня домена не ниже {0}" - -msgid "segment" -msgstr "сегмент" - -msgid "segments" -msgstr "сегменты" - -msgid "Topology Segments" -msgstr "Сегменты топологии" - -msgid "Topology Segment" -msgstr "Сегмент топологии" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "левый узел не является узлом топологии: %(leftnode)s" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "правый узел не является узлом топологии: %(rightnode)s" - -msgid "left node and right node must not be the same" -msgstr "левый узел и правый узел должны быть разными узлами" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "в левом узле ({host}) не предусмотрена поддержка суффикса '{suff}'" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "в правом узле ({host}) не предусмотрена поддержка суффикса '{suff}'" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "установлено соответствие %(count)d сегмента" -msgstr[1] "установлено соответствие %(count)d сегментов" -msgstr[2] "установлено соответствие %(count)d сегментов" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "Добавлен сегмент \"%(value)s\"" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "Удалён сегмент \"%(value)s\"" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "Изменён сегмент \"%(value)s\"" - -#, python-format -msgid "%(value)s" -msgstr "%(value)s" - -msgid "left or right node has to be specified" -msgstr "следует указать левый или правый узел" - -msgid "only one node can be specified" -msgstr "можно указать только один узел" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "Обновление репликации для сегмента: направлен запрос \"%(pkey)s\"." - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "Остановка репликации для сегмента: направлен запрос \"%(pkey)s\"." - -msgid "suffixes" -msgstr "суффиксы" - -msgid "Topology suffixes" -msgstr "Суффиксы топологии" - -msgid "Topology suffix" -msgstr "Суффикс топологии" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "установлено соответствие %(count)d суффикса топологии" -msgstr[1] "установлено соответствие %(count)d суффиксов топологии" -msgstr[2] "установлено соответствие %(count)d суффиксов топологии" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Удалён суффикс топологии \"%(value)s\"" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "Добавлен суффикс топологии \"%(value)s\"" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "Изменён суффикс топологии \"%(value)s\"" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" -"\n" -"Проверка топологии репликации для суффикса.\n" -"\n" -"Проверки, которые выполняются:\n" -" 1. проверка того, не отключена ли топология (иначе говоря, имеются ли пути " -"репликации между всеми серверами).\n" -" 2. проверка того, не превышено ли рекомендованное количество соглашений о " -"репликации между серверами.\n" -" \n" - -msgid "operation not defined" -msgstr "операция не определена" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "не разрешено выполнение операции: %s" - -msgid "No such virtual command" -msgstr "Такая виртуальная команда отсутствует" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" -"\n" -"Возврат сведений о текущем прошедшем аутентификацию профиле \n" -"\n" -"Команда определения профиля возвращает сведения о том, как получить больше " -"данных о профиле, прошедшем аутентификацию для этого запроса. Данные " -"включают:\n" -"\n" -" * тип объекта\n" -" * команду для получения сведений об объекте\n" -" * аргументы и параметры, которые следует передать команде\n" -"\n" -"Сведения возвращаются в виде словаря. Ниже в качестве примера приведён вывод " -"в формате \"ключ: значение\".\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Поиск от имени пользователя IPA:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Поиск от имени пользователя из доверенного домена:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Поиск от имени узла:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Поиск от имени службы Kerberos:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" - -msgid "Describe currently authenticated identity." -msgstr "Показать описание текущего прошедшего аутентификацию профиля." - -msgid "Object class name" -msgstr "Имя класса объектов." - -msgid "Function to get details" -msgstr "Функция для получения сведений" - -msgid "Arguments to details function" -msgstr "Аргументы функции для получения сведений" - -msgid "Cannot query Directory Manager with API" -msgstr "" -"Не удалось отправить запрос средству управления каталогом (Directory " -"Manager) с помощью программного интерфейса" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" -"\n" -"IPA-серверы\n" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" -"\n" -"Получить сведения об установленных IPA-серверах.\n" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -" Найти все серверы:\n" -" ipa server-find\n" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" -"\n" -" Показать определённый сервер:\n" -" ipa server-show ipa.example.com\n" - -msgid "server" -msgstr "сервер" - -msgid "servers" -msgstr "серверы" - -msgid "IPA Servers" -msgstr "IPA-серверы" - -msgid "Server location" -msgstr "Расположение сервера" - -msgid "Service weight" -msgstr "Вес служб" - -msgid "Weight for server services" -msgstr "Вес служб сервера" - -msgid "Service relative weight" -msgstr "Относительный вес служб" - -msgid "Relative weight for server services (counts per location)" -msgstr "" -"Относительный вес служб сервера (вычисляется для отдельного расположения)" - -msgid "Enabled server roles" -msgstr "Включены роли сервера" - -msgid "List of enabled roles" -msgstr "Список включённых ролей" - -msgid "Modify information about an IPA server." -msgstr "Изменить сведения о IPA-сервере." - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "Изменена запись IPA-сервера \"%(value)s\"" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "установлено соответствие %(count)d IPA-сервера" -msgstr[1] "установлено соответствие %(count)d IPA-серверов" -msgstr[2] "установлено соответствие %(count)d IPA-серверов" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "Удалён IPA-сервер \"%(value)s\"" - -msgid "Ignore topology errors" -msgstr "Игнорировать ошибки топологии" - -msgid "Ignore topology connectivity problems after removal" -msgstr "Игнорировать ошибки топологии подключений после удаления" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" -"Игнорировать проверку того, является ли удаляемый сервер последним сервером " -"CA или DNS" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" -"Пропустить проверку того, удаляется ли последний главный сервер CA или DNS-" -"сервер" - -msgid "Force server removal" -msgstr "Принудительное удаление сервера" - -msgid "Force server removal even if it does not exist" -msgstr "Принудительное удаление сервера, даже если он не существует" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" -"Реплика является активным мастером ключей DNSSEC. Удаление может привести к " -"неработоспособности вашей системы DNS. Сначала следует отключить или " -"заменить мастер ключей DNSSEC." - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" -"Удаление этой записи сервера оставит вашу установленную систему без DNS." - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" -"Удаление этой записи сервера запрещено, так как это оставило бы вашу " -"установленную систему без KRA." - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" -"Удаление этой записи сервера запрещено, так как это оставило бы вашу " -"установленную систему без CA." - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "Предупреждения игнорируются, процесс удаления продолжается" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" -"Не удалось удалить memberPrincipal %(principal)s из записи s4u2proxy %(dn)s: " -"%(err)s" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "Не удалось удалить записи имени узла DNA для %(master)s: %(err)s" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "Не удалось удалить сервер %(master)s из списка серверов: %(err)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "Не удалось удалить ключи Custodia для %(master)s: %(err)s" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "Не удалось удалить учётные записи или ключи сервера: %(err)s" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "Не удалось удалить записи DNS %(hostname)s: %(err)s" - -msgid "You may need to manually remove them from the tree" -msgstr "Возможно, потребуется вручную удалить их из дерева" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "Принудительное удаление %(hostname)s" - -msgid "Ignoring topology connectivity errors." -msgstr "Игнорирование ошибок топологии подключений." - -#, fuzzy, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "Не удалось удалить сервер %(master)s из списка серверов: %(err)s" - -msgid "Server has already been deleted" -msgstr "Сервер уже удалён" - -msgid "Agreements deleted" -msgstr "Соглашения удалены" - -msgid "Following segments were not deleted:" -msgstr "Следующие сегменты не были удалены:" - -#, python-format -msgid "must be \"%s\"" -msgstr "должно быть \"%s\"" - -msgid "not allowed to perform server connection check" -msgstr "не разрешено выполнение проверки связи с сервером" - -msgid "Set enabled/hidden state of a server." -msgstr "Установить включённое/скрытое состояние сервера." - -msgid "State" -msgstr "Состояние" - -msgid "Server state" -msgstr "Состояние сервера" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "Изменено состояние сервера \"%(value)s\"." - -msgid "Cannot hide CA renewal master." -msgstr "Не удалось скрыть мастер обновления CA." - -msgid "Cannot hide DNSSec key master." -msgstr "Не удалось скрыть мастер ключей DNSSec." - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "Не удалось скрыть последний включённый сервер %(name)s." - -msgid "A list of ACI values" -msgstr "Список значений ACI" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "type, filter, subtree и targetgroup нельзя использовать вместе" - -msgid "ACI prefix is required" -msgstr "Следует указать префикс ACI" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" -"следует указать хотя бы одно из: type, filter, subtree, targetgroup, attrs " -"или memberof" - -msgid "filter and memberof are mutually exclusive" -msgstr "filter и memberof нельзя использовать вместе" - -msgid "group, permission and self are mutually exclusive" -msgstr "group, permission и self нельзя использовать вместе" - -msgid "One of group, permission or self is required" -msgstr "Следует указать одно из значений: group, permission или self" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "Группа \"%s\" не существует" - -msgid "empty filter" -msgstr "пустой фильтр" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Ошибка синтаксиса: %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "Некорректное DN (%s)" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "ACI с именем \"%s\" не найдена" - -msgid "ACI object." -msgstr "Объект ACI." - -msgid "ACIs" -msgstr "ACI" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "Создана ACI \"%(value)s\"" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "Удалена ACI \"%(value)s\"" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "Изменена ACI \"%(value)s\"" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "установлено соответствие %(count)d ACI" -msgstr[1] "установлено соответствие %(count)d ACI" -msgstr[2] "установлено соответствие %(count)d ACI" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "ACI переименована в \"%(value)s\"" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" -"\n" -"Правило автоучастия.\n" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" -"\n" -"Внося ясные правила о принадлежности узлов и пользователей к группам " -"посредством настройки включающих и исключающих шаблонов регулярных " -"выражений, вы можете автоматически связывать новые записи с группой или " -"группой узлов на основе данных атрибутов.\n" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" -"\n" -"Правило непосредственно связывается с группой по имени, следовательно, вы не " -"можете создать правило без определения группы или группы узлов.\n" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" -"\n" -"Условие является регулярным выражением, используется 389-ds для установления " -"соответствия новой входящей записи правилу автоучастия. Если имеется " -"соответствие правилу включения, запись добавляется в соответствующую группу " -"или группу узлов.\n" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" -"\n" -"Можно указать группу или группу узлов по умолчанию, которая будет " -"использоваться для записей, не соответствующих ни одному правилу. В случае " -"записей пользователей эта группа будет резервной группой, поскольку все " -"пользователи по умолчанию являются участниками группы, указанной в " -"настройках IPA.\n" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" -"\n" -"Команду automember-rebuild можно использовать, чтобы задним числом применить " -"правила автоучастия в отношении уже существующих записей; это перестроит их " -"участие.\n" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" -"\n" -" Добавить начальную группу или группу узлов:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" -"\n" -" Добавить начальное правило:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" -"\n" -" Добавить в правило условие:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" -"\n" -" Добавить в правило исключительное условие, чтобы предотвратить " -"автоназначение:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" -"\n" -"Добавить узел:\n" -" ipa host-add web1.example.com\n" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" -"\n" -" Добавить пользователя:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" -"\n" -"Проверить автоучастие:\n" -" ipa hostgroup-show webservers\n" -" Группа узлов: webservers\n" -" Описание: Web Servers\n" -" Узлы-участники: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Имя группы: devel\n" -" Описание: Developers\n" -" GID: 1004200000\n" -" Пользователи-участники: tuser\n" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" -"\n" -" Удалить условие из правила:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" -"\n" -" Изменить правило автоучастия:\n" -" ipa automember-mod\n" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" -"\n" -"Установить целевую группу по умолчанию (резервную):\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" -"\n" -" Удалить целевую группу по умолчанию (резервную):\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" -"\n" -" Показать целевую группу по умолчанию (резервную):\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" -"\n" -" Найти все правила автоучастия:\n" -" ipa automember-find\n" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" -"\n" -" Найти все неиспользуемые правила автоучастия:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Найти все неиспользуемые правила автоучастия и удалить их:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" -"\n" -" Показать правило автоучастия:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" -"\n" -" Удалить правило автоучастия:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" -"\n" -" Перестроить участие для всех пользователей:\n" -" ipa automember-rebuild --type=group\n" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" -"\n" -" Перестроить участие для всех узлов:\n" -" ipa automember-rebuild --type=hostgroup\n" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" -"\n" -" Перестроить участие для указанных пользователей:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" -"\n" -" Перестроить участие для указанных узлов:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" - -msgid "Auto Membership Rule" -msgstr "Правило автоучастия" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(otype)s \"%(oname)s\" не найден(а)" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "%s неправильный атрибут" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" -"\n" -" Добавить правило автоучастия.\n" -" " - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "Добавлено правило автоучастия \"%(value)s\"" - -msgid "Auto Membership is not configured" -msgstr "Автоучастие не настроено" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" -"\n" -" Добавить условия в правило автоучастия.\n" -" " - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Добавлено условие (условия) в \"%(value)s\"" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "Правило автоучастия: %s не найдено!" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" -"\n" -" Переопределить это, чтобы получить возможность добавить данные об " -"успехе или неудаче в возвращаемое сообщение.\n" -" " - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" -"\n" -" Удалить условия из правила автоучастия.\n" -" " - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Удалено условие (условия) из \"%(value)s\"" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" -"\n" -" Переопределить это, чтобы получить возможность указать состояния " -"успеха или неудачи.\n" -" " - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" -"\n" -" Изменить правило автоучастия.\n" -" " - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "Изменено правило автоучастия \"%(value)s\"" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" -"\n" -" Удалить правило автоучастия.\n" -" " - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Удалено правило автоучастия \"%(value)s\"" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" -"\n" -"Поиск правил автоучастия." - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "установлено соответствие %(count)d правила" -msgstr[1] "установлено соответствие %(count)d правил" -msgstr[2] "установлено соответствие %(count)d правил" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" -"\n" -"Показать сведения о правиле автоучастия." - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" -"\n" -" Установить группу по умолчанию (резервную) для всех несоответствующих " -"записей.\n" -" " - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" -"Установить группу по умолчанию (резервную) для автоучастия \"%(value)s\"" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" -"\n" -" Удалить группу по умолчанию (резервную) для всех несоответствующих " -"записей.\n" -" " - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "Удалена группа по умолчанию (резервная) для автоучастия \"%(value)s\"" - -msgid "No default (fallback) group set" -msgstr "Группа по умолчанию (резервная) не установлена" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" -"\n" -" Показать сведения о группах автоучастия по умолчанию (резервных).\n" -" " - -msgid "Task DN" -msgstr "DN задачи" - -msgid "DN of the started task" -msgstr "DN запущенной задачи" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "следует указать хотя бы один из параметров: тип, пользователи, узлы" - -msgid "users and hosts cannot both be set" -msgstr "невозможно одновременно указать пользователей и узлы" - -msgid "hosts cannot be set when type is 'group'" -msgstr "невозможно указать узлы, когда тип \"group\"" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "невозможно указать пользователей, когда тип \"hostgroup\"" - -msgid "Automember rebuild membership task started" -msgstr "Выполняется задача по перестройке записей автоучастия" - -msgid "Automember rebuild membership task completed" -msgstr "Завершена задача по перестройке записей автоучастия" - -#, python-format -msgid "Task DN = '%s'" -msgstr "DN задачи = \"%s\"" - -msgid "Automember" -msgstr "Автоучастник" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" -"\n" -" Поиск неиспользуемых правил автоучастия. Чтобы найти все неиспользуемые " -"правила, может потребоваться выполнить команду с правами привилегированного " -"пользователя.\n" -" " - -msgid "Remove orphan automember rules" -msgstr "Удалить неиспользуемые правила автоучастия" - -msgid "Member service groups" -msgstr "Группы служб — участники" - -msgid "Member HBAC service groups" -msgstr "Группы служб HBAC — участники" - -#, fuzzy -msgid "Member ID user overrides" -msgstr "Удалить переопределения ID пользователя" - -#, fuzzy -msgid "Indirect Member ID user overrides" -msgstr "Пользователи с непрямым участием" - -msgid "Indirect Member permissions" -msgstr "Разрешения с непрямым участием" - -msgid "Indirect Member HBAC service" -msgstr "Служба HBAC с непрямым участием" - -msgid "Indirect Member HBAC service group" -msgstr "Группа служб HBAC с непрямым участием" - -msgid "Invalid format. Should be name=value" -msgstr "Неправильный формат. Должно быть имя=значение" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "Главный IPA-сервер не может быть удалён или отключён" - -msgid "entry" -msgstr "запись" - -msgid "entries" -msgstr "записи" - -msgid "Entry" -msgstr "Запись" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "запись контейнера (%(container)s) не найдена" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s: %(oname)s не найден" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s: %(oname)s не найден" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "%(oname)s с именем \"%(pkey)s\" уже существует" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "атрибут \"%(attribute)s\" запрещён" - -#, fuzzy, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "атрибут \"%s\" нельзя использовать" - -msgid "attribute is not configurable" -msgstr "настройка атрибута невозможна" - -msgid "No such attribute on this entry" -msgstr "В этой записи нет такого атрибута" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "Переименовать объект %(ldap_obj_name)s" - -msgid "the entry was deleted while being modified" -msgstr "запись была удалена во время внесения изменений" - -#, python-format -msgid "%s" -msgstr "%s" - -#, python-format -msgid "%s to add" -msgstr "%s для добавления" - -#, python-format -msgid "%s to remove" -msgstr "%s для удаления" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "Результаты должны содержать только атрибут главного ключа (\"%s\")" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "Поиск %(searched_object)s с этими %(relationship)s %(ldap_object)s." - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "Поиск %(searched_object)s без этих %(relationship)s %(ldap_object)s." - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "добавлено значение атрибута в запись %(value)s" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "удалены значения атрибута из записи %(value)s" - -msgid "one or more values to remove" -msgstr "одно или несколько значений, которые следует удалить" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" -"\n" -"Подключаемый модуль для выполнения нескольких вызовов ipa с помощью одного " -"удалённого вызова процедур \n" -"\n" -"Чтобы запустить этот код на легком сервере (lite-server), выполните " -"следующие команды:\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"где содержимое файла batch_request.json соответствует следующему примеру\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"Формат ответа точно так же распределяется по уровням вложенности. На верхнем " -"уровне:\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"а далее находится вложенный ответ для каждого метода команды IPA, " -"отправленного в запросе\n" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" -"Совершать несколько вызовов ipa с помощью одного удалённого вызова процедур " - -msgid "must contain a tuple (list, dict)" -msgstr "должно содержать кортеж (список, словарь)" - -msgid "REST API is not logged in." -msgstr "Не выполнен вход в программный интерфейс REST." - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" -"Ответ от программного интерфейса REST CA не соответствует 2xx: %(status)d. " -"%(explanation)s" - -msgid "Unable to communicate with CMS" -msgstr "Не удалось обменяться данными с CMS" - -msgid "Response from CA was not valid JSON" -msgstr "Ответ от CA не являлся корректным кодом JSON" - -msgid "pyhbac is not installed." -msgstr "Пакет pyhbac не установлен." msgid "" "\n" @@ -22021,9 +13299,9 @@ msgstr "" "Подключаемый модуль hbactest позволяет проверять доступ как для локальных " "пользователей IPA, так и для пользователей из доверенных доменов, как с " "полным именем пользователя, так и по SID пользователей. В таких именах " -"пользователей должен быть указан доверенный домен в краткой форме (DOMAIN" -"\\Administrator) или имя учётной записи пользователя (UPN), Administrator@ad." -"test.\n" +"пользователей должен быть указан доверенный домен в краткой форме " +"(DOMAIN\\Administrator) или имя учётной записи пользователя (UPN), " +"Administrator@ad.test.\n" "\n" "Обратите внимание, что выполнять hbactest с аргументом пользователя " "доверенного домена в параметре --user могут только участники группы \"trust " @@ -22087,8390 +13365,98 @@ msgstr "" " Соответствующие правила: allow_all\n" " Несоответствующие правила: can_login\n" -msgid "Unresolved rules in --rules" -msgstr "Непригодные к обработке правила в --rules" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" -"Без настройки собственного домена нельзя выполнять поиск в доверенных " -"доменах. Убедитесь, что на IPA-сервере запущена команда ipa-adtrust-install" - -#, python-format -msgid "Access granted: %s" -msgstr "Доступ предоставлен: %s" - -msgid "" -"\n" -"Permissions\n" -msgstr "" -"\n" -"Разрешения\n" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" -"\n" -"С помощью разрешений можно очень точно делегировать права доступа. " -"Разрешение представляет собой удобную для восприятия форму 389-ds ACI " -"(правила управления доступом).\n" -"Разрешение даёт право выполнять определённую задачу, например, добавлять " -"пользователей, изменять группы и так далее.\n" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" -"\n" -"Разрешение не может содержать другие разрешения.\n" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" -"\n" -"* Разрешение даёт доступ для чтения, записи, добавления, удаления, поиска " -"или сравнения.\n" -"* Привилегия объединяет схожие разрешения (например, все разрешения, которые " -"требуются для добавления пользователя).\n" -"* Роль даёт набор привилегий пользователям, группам, узлам или группам " -"узлов.\n" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" -"\n" -"Разрешение состоит из нескольких разных частей:\n" -"\n" -"1. Имя разрешения.\n" -"2. Цель разрешения.\n" -"3. Права, предоставленные разрешением.\n" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" -"\n" -"Права определяют, какие действия разрешены. Варианты прав (права могут " -"сочетать в себе несколько вариантов):\n" -"1. write - записать один или несколько атрибутов.\n" -"2. read - прочитать один или несколько атрибутов.\n" -"3. search - поиск по одному или нескольким атрибутам.\n" -"4. compare - сравнить один или несколько атрибутов.\n" -"5. add - добавить в дерево новую запись.\n" -"6. delete - удалить существующую запись.\n" -"7. all - предоставляются все разрешения.\n" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" -"\n" -"Обратите внимание на разницу между атрибутами и записями. Разрешения " -"являются независимыми, поэтому возможность добавить пользователя не означает " -"возможность изменять запись добавленного пользователя.\n" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" -"\n" -"Существует ряд разрешённых целей:\n" -"1. subtree: DN; разрешение применяется к поддереву под этим DN.\n" -"2. target filter: фильтр LDAP.\n" -"3. target: DN с возможными подстановочными знаками, определяет записи, к " -"которым применяется разрешение.\n" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" -"\n" -"Кроме того, имеются следующие удобные параметры. Установка одного из них " -"установит соответствующий атрибут (атрибуты).\n" -"1. type: тип объекта (пользователь, группа и так далее); устанавливает " -"поддерево и фильтр целей.\n" -"2. memberof: применить к участникам группы; устанавливает фильтр целей.\n" -"3. targetgroup: предоставить доступ для изменения определённой группы " -"(например, предоставить права доступа для управления участием в группе); " -"устанавливает цель.\n" - -msgid "" -"\n" -"Managed permissions\n" -msgstr "" -"\n" -"Управляемые разрешения\n" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" -"\n" -"Разрешения, которые по умолчанию поставляются с IPA, можно называть " -"\"управляемыми\". Имеется заданный по умолчанию набор атрибутов, к которым " -"они применяются, но администратор может добавлять в набор или удалять из " -"него отдельные атрибуты.\n" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" -"\n" -"Запрещено удалять или переименовывать управляемое разрешение, а также " -"изменять его цель.\n" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" -"\n" -" Добавить разрешение на создание пользователей:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" -"\n" -" Добавить разрешение на управление участием в группе:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" - -msgid "must be enclosed in parentheses" -msgstr "должно быть заключено в скобки" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "\"%s\" не является типом объекта" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "\"%s\" не является корректным типом разрешения" - -#, python-format -msgid "Deprecated; use %s" -msgstr "Больше не поддерживается; используйте %s" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "Разрешение с неизвестным флагом %s не может быть изменено или удалено" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "Разрешение SYSTEM не может быть изменено или удалено" - -#, python-format -msgid "Entry %s not found" -msgstr "Запись %s не найдена" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "ACI для разрешения %(name)s не найдена в %(dn)s " - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" -"невозможно одновременно указать полный фильтр целей и дополнительный фильтр " -"целей" - -#, python-format -msgid "option was renamed; use %s" -msgstr "параметр переименован; используйте %s" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "Невозможно использовать %(old_name)s с %(new_name)s" - -#, python-format -msgid "%s: group not found" -msgstr "%s: группа не найдена" - -msgid "target and targetgroup are mutually exclusive" -msgstr "target и targetgroup нельзя использовать вместе" - -msgid "subtree and type are mutually exclusive" -msgstr "subtree и type нельзя использовать вместе" - -msgid "Bad search filter" -msgstr "Неверный фильтр поиска" - -#, python-format -msgid "Entry %s does not exist" -msgstr "Запись %s не существует" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" -"должен быть указан хотя бы один спецификатор записи назначения (например, " -"target, targetfilter, attrs)" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "Добавлено разрешение \"%(value)s\"" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "attrs и включённые атрибуты нельзя использовать вместе" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "Не удалось сохранить ACI разрешения в %s" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "Удалено разрешение \"%(value)s\"" - -msgid "cannot delete managed permissions" -msgstr "невозможно удалить управляемые разрешения" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "ACI разрешения %s не найдена" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "Изменено разрешение \"%(value)s\"" - -msgid "cannot rename managed permissions" -msgstr "невозможно переименовать управляемые разрешения" - -msgid "not modifiable on managed permissions" -msgstr "нельзя изменять в управляемых разрешениях" - -msgid "only available on managed permissions" -msgstr "доступно только в управляемых разрешениях" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "attrs и включённые или исключённые атрибуты нельзя использовать вместе" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" -"невозможно установить тип привязки для разрешения, которое связано с " -"привилегией" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "установлено соответствие %(count)d разрешения" -msgstr[1] "установлено соответствие %(count)d разрешений" -msgstr[2] "установлено соответствие %(count)d разрешений" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" -"невозможно добавить разрешение \"%(perm)s\" с типом привязки \"%(bindtype)s" -"\" в привилегию" - -msgid "Privilege" -msgstr "Привилегия" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "Добавлена привилегия \"%(value)s\"" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "Удалена привилегия \"%(value)s\"" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "Изменена привилегия \"%(value)s\"" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "установлено соответствие %(count)d привилегии" -msgstr[1] "установлено соответствие %(count)d привилегий" -msgstr[2] "установлено соответствие %(count)d привилегий" - -msgid "" -"\n" -"API Schema\n" -msgstr "" -"\n" -"Схема API\n" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" -"\n" -"Предоставляет возможности самоанализа API.\n" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" -"\n" -" Показать сведения о user-find:\n" -" ipa command-show user-find\n" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" -"\n" -" Найти параметры user-find:\n" -" ipa param-find user-find\n" - -msgid "Name" -msgstr "Имя" - -msgid "Documentation" -msgstr "Документация" - -msgid "Exclude from" -msgstr "Исключить из" - -msgid "Include in" -msgstr "Включить в" - -msgid "Help topic" -msgstr "Раздел справки" - -msgid "Version" -msgstr "Версия" - -msgid "Parameters" -msgstr "Параметры" - -msgid "Method of" -msgstr "Метод" - -msgid "Method name" -msgstr "Имя метода" - -msgid "Display information about a command." -msgstr "Показать сведения о команде." - -msgid "Search for commands." -msgstr "Поиск команд." - -msgid "Return command defaults" -msgstr "Вернуть значения команд по умолчанию" - -#, fuzzy, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "{role}: роль не найдена" - -msgid "Display information about a class." -msgstr "Показать сведения о классе." - -msgid "Search for classes." -msgstr "Поиск классов." - -msgid "Display information about a help topic." -msgstr "Показать сведения о разделе справки." - -msgid "Search for help topics." -msgstr "Поиск разделов справки." - -msgid "Required" -msgstr "Обязательно" - -msgid "Multi-value" -msgstr "Многозначный" - -msgid "Always ask" -msgstr "Всегда спрашивать" - -msgid "CLI metavar" -msgstr "Метапеременная CLI" - -msgid "CLI name" -msgstr "Имя CLI" - -msgid "Confirm (password)" -msgstr "Подтвердить (пароль)" - -msgid "Default" -msgstr "По умолчанию" - -msgid "Default from" -msgstr "По умолчанию с" - -msgid "Label" -msgstr "Метка" - -msgid "Convert on server" -msgstr "Преобразовывать на сервере" - -msgid "Option group" -msgstr "Группа параметров" - -msgid "Sensitive" -msgstr "Учитывать" - -msgid "Positional argument" -msgstr "Позиционный аргумент" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(metaobject)s: %(oname)s не найден" - -msgid "Display information about a command parameter." -msgstr "Показать сведения о параметре команды." - -msgid "Search command parameters." -msgstr "Поиск параметров команды." - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(command_name)s: %(oname)s не найден" - -msgid "Display information about a command output." -msgstr "Показать сведения о выводе команды." - -msgid "Search for command outputs." -msgstr "Поиск выводов команд." - -msgid "Store and provide schema for commands and topics" -msgstr "Хранить и предоставлять схему для команд и тем" - -msgid "Fingerprint of schema cached by client" -msgstr "Отпечаток схемы, кэшированный клиентом" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" -"\n" -"Отношения доверия между областями (realm)\n" -"\n" -"Управление отношениями доверия между доменами IPA и Active Directory.\n" -"\n" -"Чтобы разрешить пользователям из удалённого домена доступ к ресурсам в " -"домене IPA, необходимо установить отношение доверия. В текущей версии IPA " -"поддерживает только отношения доверия между доменами IPA и Active Directory " -"под управлением Windows Server 2008 или более поздней версии с " -"функциональными возможностями уровня 2008 или более поздней версии.\n" -"\n" -"Обратите внимание, что следует надлежащим образом настроить DNS на обоих " -"доменах, IPA и Active Directory, чтобы домены могли обнаруживать друг друга. " -"Работоспособность отношения доверия зависит от возможности обнаруживать " -"специальные ресурсы в другом домене с помощью записей DNS.\n" -"\n" -"Примеры:\n" -"\n" -"1. Установить отношение доверия между областями (realm) с Active Directory с " -"помощью учётных данных администратора AD:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. Вывести список всех существующих отношений доверия:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Показать подробные сведения об определённом отношении доверия:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Удалить существующее отношение доверия:\n" -"\n" -" ipa trust-del \n" -"\n" -"Как только отношение доверия будет установлено, удалённых пользователей " -"потребуется привязать к локальным POSIX-группам, чтобы воспользоваться " -"ресурсами IPA. Привязку следует выполнить с помощью внешнего участия не-" -"POSIX-группы, а затем эту группу необходимо включить в одну из локальных " -"POSIX-групп.\n" -"\n" -"Пример:\n" -"\n" -"1. Создать группу для привязки администраторов (admins) доверенного домена и " -"их локальную POSIX-группу:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Добавить идентификатор безопасности Domain Admins домена " -"группе ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Разрешить привязку группы ad_admins_external к POSIX-группе ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Вывести список участников внешних участников группы ad_admins_external, " -"чтобы определить их SID:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"ГЛОБАЛЬНАЯ КОНФИГУРАЦИЯ ОТНОШЕНИЙ ДОВЕРИЯ\n" -"\n" -"После установки субпакета доверия AD IPA и запуска ipa-adtrust-install " -"создаётся конфигурация локального домена (SID, GUID, имя NetBIOS). Эти " -"идентификаторы затем используются для связи с доверенным доменом конкретного " -"типа.\n" -"\n" -"1. Показать глобальную конфигурацию отношений доверия для типа отношений " -"доверия Active Directory:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Изменить глобальную конфигурацию для всех отношений доверия типа Active " -"Directory и указать другую резервную основную группу (GID резервной основной " -"группы используется в качестве GID основного пользователя, если для " -"пользователя, который выполняет аутентификацию в домене IPA, не был " -"установлен другой основной GID):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Изменить резервную основную группу обратно на скрытую группу по умолчанию " -"(разрешена любая группа с классом объекта posixGroup):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" -" Кроме того, выполнить эту команду могут следующие серверы: %(masters)s" - -msgid "AD Trust setup" -msgstr "Настройка отношений доверия AD" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" -"Невозможно выполнить выбранную команду без установленной поддержки Samba 4. " -"Убедитесь, что субпакет IPA server-trust-ad установлен." - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" -"Невозможно выполнить выбранную команду без настройки экземпляра Samba 4 на " -"этом компьютере. Убедитесь, что на этом сервере запущена команда ipa-adtrust-" -"install." - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" -"Не удалось получить домены из доверенного леса. Подробные сведения доступны " -"в файле error_log" - -msgid "trust" -msgstr "отношение доверия" - -msgid "trusts" -msgstr "отношения доверия" - -msgid "Trusts" -msgstr "Отношения доверия" - -msgid "Trust" -msgstr "Отношение доверия" - -#, fuzzy -msgid "SID blocklist incoming" -msgstr "Входящий \"чёрный список\" SID" - -#, fuzzy -msgid "SID blocklist outgoing" -msgstr "Исходящий \"чёрный список\" SID" - -msgid "Trust direction" -msgstr "Направление отношения доверия" - -msgid "Trust type" -msgstr "Тип отношения доверия" - -msgid "Trust status" -msgstr "Состояние отношения доверия" - -msgid "UPN suffixes" -msgstr "Суффиксы UPN" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "недопустимый SID: {SID}" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" -"\n" -"Добавление нового отношения доверия, которое следует использовать.\n" -"\n" -"Эта команда устанавливает отношение доверия с другим доменом, который " -"становится \"доверенным\". В результате пользователи доверенного домена " -"получают доступ к ресурсам этого домена.\n" -"\n" -"В текущей версии поддерживаются только отношения доверия с доменами Active " -"Directory.\n" -"\n" -"Команду можно безопасно запускать несколько раз для одного и того же домена, " -"такой запуск приводит к изменению учётных данных отношения доверия на обеих " -"сторонах.\n" -"\n" -"Если команда уже выполнялась с определённым типом диапазона или с " -"автоматическим определением типа диапазона, а теперь необходимо настроить " -"другой тип диапазона, возможно, потребуется сначала удалить диапазон " -"идентификаторов с помощью команды ipa idrange-del. Затем повторите команду с " -"необходимым типом диапазона.\n" -"\n" -" " - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" -"Тип диапазона идентификаторов доверенного домена, одно из разрешённых " -"значений" - -msgid "External trust" -msgstr "Внешнее отношение доверия" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" -"Установить внешнее отношение доверия с доменом в другом лесу. Отношение " -"доверия не является транзитивным за пределами этого домена." - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" -"Добавлено отношение доверия Active Directory для области (realm) \"%(value)s" -"\"" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Повторно установлено отношение доверия с доменом \"%(value)s\"" - -msgid "missing base_id" -msgstr "отсутствует base_id" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "pysss_murmur недоступен на сервере, base-id не предоставлен." - -msgid "trust type" -msgstr "тип отношения доверия" - -msgid "only \"ad\" is supported" -msgstr "предусмотрена поддержка только \"ad\"" - -msgid "domain" -msgstr "домен" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" -"Невозможно установить отношение доверия с AD, развёрнутой в том же домене, " -"что и IPA. Поддержка такой настройки не предусмотрена." - -msgid "Realm-domain mismatch" -msgstr "Несоответствие области (realm) и домена" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" -"Для установления отношения доверия с Active Directory имя домена и имя " -"области (realm) IPA-сервера должны совпадать" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" -"Доверенный домен %(domain)s находится среди доменов области (realm) IPA. Его " -"необходимо удалить до установления отношения доверия. Смотрите команду \"ipa " -"realmdomains-mod --del-domain\"." - -msgid "Trusted domain and administrator account use different realms" -msgstr "" -"Доверенным доменом и учётной записью администратора используются разные " -"области (realms)" - -msgid "Realm administrator password should be specified" -msgstr "Следует указать пароль администратора области (realm)" - -msgid "id range type" -msgstr "тип диапазона идентификаторов" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" -"При добавлении отношения доверия AD значениями --range-type могут быть " -"только ipa-ad-trust или ipa-ad-trust-posix." - -msgid "id range" -msgstr "диапазон идентификаторов" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" -"Для этого отношения доверия уже существует диапазон идентификаторов. Следует " -"либо удалить старый диапазон, либо исключить из команды параметры --base-" -"id/--range-size." - -msgid "range exists" -msgstr "диапазон существует" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" -"Уже существует диапазон идентификаторов с тем же именем, но другим SID " -"домена. Диапазон идентификаторов для нового доверенного домена необходимо " -"создать вручную." - -msgid "range type change" -msgstr "изменение типа диапазона" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" -"Диапазон идентификаторов для доверенного домена уже существует, но имеет " -"другой тип. Удалите старый диапазон вручную или не устанавливайте тип " -"принудительно с помощью параметра --range-type." - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "Не удалось определить контроллер домена для домена {domain}. " - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" -"В DNS IPA определена соответствующая политика перенаправления. Возможно, " -"перенаправитель указывает на некорректный узел?" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" -"IPA управляет DNS. Проверьте вашу конфигурацию DNS и убедитесь, что " -"настройки позволяют определять адреса служебных записей домена \"{domain}\". " -"Примеры настройки DNS с помощью команд CLI или веб-интерфейса доступны в " -"документации. " - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" -"Поскольку IPA не управляет записями DNS, следует настроить DNS так, чтобы " -"система определяла адрес домена \"{domain}\" по данным узлов IPA и наоборот." - -msgid "Unable to verify write permissions to the AD" -msgstr "Не удалось проверить разрешения на запись в AD" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" -"Указано недостаточно аргументов для выполнения настройки отношения доверия" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "Удалено отношение доверия \"%(value)s\"" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" -"\n" -" Изменить отношение доверия (для будущего использования).\n" -"\n" -" В текущей версии для изменения атрибутов LDAP доступен только параметр " -"по умолчанию. В последующих версиях будут добавлены более специфичные " -"параметры.\n" -" " - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" -"Изменено отношение доверия \"%(value)s\" (изменения будут применены через 60 " -"секунд)" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "установлено соответствие %(count)d отношения доверия" -msgstr[1] "установлено соответствие %(count)d отношений доверия" -msgstr[2] "установлено соответствие %(count)d отношений доверия" - -msgid "trust configuration" -msgstr "конфигурация отношений доверия" - -msgid "Global Trust Configuration" -msgstr "Глобальная конфигурация отношений доверия" - -msgid "IPA AD trust agents" -msgstr "Агенты отношений доверия AD IPA" - -msgid "IPA servers configured as AD trust agents" -msgstr "IPA-серверы, настроенные в качестве агентов отношений доверия AD" - -msgid "IPA AD trust controllers" -msgstr "Контролёры отношений доверия AD IPA" - -msgid "IPA servers configured as AD trust controllers" -msgstr "IPA-серверы, настроенные в качестве контролёров отношений доверия AD" - -msgid "unsupported trust type" -msgstr "неподдерживаемый тип отношения доверия" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "Изменена конфигурация отношений доверия \"%(value)s\"" - -msgid "SID" -msgstr "Идентификатор безопасности (SID)" - -msgid "sidgen_was_run" -msgstr "sidgen_was_run" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" -"Для выполнения этой команды должна существовать группа \"editors\", но такая " -"группа не найдена." - -msgid "trust domain" -msgstr "надёжный домен" - -msgid "trust domains" -msgstr "надёжные домены" - -msgid "Trusted domains" -msgstr "Доверенные домены" - -msgid "Trusted domain" -msgstr "Доверенный домен" - -msgid "Domain enabled" -msgstr "Домен включён" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "Удалены сведения о доверенном домене \"%(value)s\"" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" -"невозможно удалить корневой домен отношения доверия, используйте trust-del " -"для удаления самого отношения доверия" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" -"Список надёжных доменов успешно обновлён. Используйте команду trustdomain-" -"find для вывода этого списка." - -#, fuzzy -msgid "Configure this server as a trust agent." -msgstr "IPA-серверы, настроенные в качестве агентов отношений доверия AD" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, fuzzy -msgid "not allowed to remotely add agent" -msgstr "запрещено изменять записи пользователей" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "Включён надёжный домен \"%(value)s\"" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" -"Корневой домен отношения доверия всегда включён для существующего доверия" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "Отключён надёжный домен \"%(value)s\"" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" -"невозможно отключить корневой домен отношения доверия, используйте trust-del " -"для удаления самого отношения доверия" - -msgid "" -"\n" -"Vaults\n" -msgstr "" -"\n" -"Хранилища\n" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" -"\n" -"Управление хранилищами.\n" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" -"\n" -"Хранилище — это безопасное место для хранения секрета. В одном хранилище " -"может храниться только один секрет. При архивировании секрета в хранилище " -"существующий секрет (если имеется) будет перезаписан.\n" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" -"\n" -"В зависимости от владения хранилища подразделяются на три категории:\n" -"* хранилища пользователей или личные хранилища\n" -"* хранилища служб\n" -"* хранилища совместного использования\n" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" -"\n" -"Хранилища пользователей — это хранилища, владельцем которых является " -"конкретный пользователь. Личными являются хранилища, владельцем которых " -"является текущий пользователь. Владельцем хранилища службы является " -"определённая служба. Хранилища совместного использования принадлежат " -"администратору, но могут использоваться другими пользователями или " -"службами.\n" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" -"\n" -"В зависимости от механизма обеспечения безопасности выделяют три типа " -"хранилищ:\n" -"* стандартные хранилища\n" -"* симметричные хранилища\n" -"* асимметричные хранилища\n" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" -"\n" -"В стандартном хранилище для передачи и хранения секрета используются " -"безопасные механизмы. Секрет могут получить только те пользователи, у " -"которых есть доступ к хранилищу.\n" -"\n" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" -"\n" -"Симметричное хранилище похоже на стандартное хранилище, но в нём секрет " -"перед передачей предварительно шифруется с помощью пароля. Секрет можно " -"получить только с помощью этого пароля.\n" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" -"\n" -"Асимметричное хранилище похоже на стандартное хранилище, но в нём секрет " -"перед передачей предварительно шифруется с помощью открытого ключа. Секрет " -"можно получить только с помощью закрытого ключа.\n" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Вывести список хранилищ:\n" -" ipa vault-find\n" -" [--user <пользователь>|--service <служба>|--shared]\n" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" -"\n" -" Добавить стандартное хранилище:\n" -" ipa vault-add <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --type standard\n" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" -"\n" -" Добавить симметричное хранилище:\n" -" ipa vault-add <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --type symmetric --password-file password.txt\n" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" -"\n" -" Добавить асимметричное хранилище:\n" -" ipa vault-add <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --type asymmetric --public-key-file public.pem\n" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Показать хранилище:\n" -" ipa vault-show <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" -"\n" -" Изменить описание хранилища:\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --desc <описание>\n" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" -"\n" -" Изменить тип хранилища:\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --type <тип>\n" -" [старый пароль / закрытый ключ]\n" -" [новый пароль / открытый ключ]\n" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" -"\n" -" Изменить пароль симметричного хранилища:\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --change-password\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --old-password <старый пароль>\n" -" --new-password <новый пароль>\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --old-password-file <файл старого пароля>\n" -" --new-password-file <файл нового пароля>\n" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" -"\n" -" Изменить ключи асимметричного хранилища:\n" -" ipa vault-mod <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --private-key-file <файл старого закрытого ключа>\n" -" --public-key-file <файл нового открытого ключа>\n" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Удалить хранилище:\n" -" ipa vault-del <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" -"\n" -" Показать конфигурацию хранилища:\n" -" ipa vaultconfig-show\n" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" -"\n" -" Архивировать данные в стандартное хранилище:\n" -" ipa vault-archive <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --in <файл входных данных>\n" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" -"\n" -" Архивировать данные в симметричное хранилище:\n" -" ipa vault-archive <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --in <файл входных данных>\n" -" --password-file password.txt\n" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" -"\n" -" Архивировать данные в асимметричное хранилище:\n" -" ipa vault-archive <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --in <файл входных данных>\n" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" -"\n" -" Получить данные из стандартного хранилища:\n" -" ipa vault-retrieve <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --out <файл выходных данных>\n" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" -"\n" -" Получить данные из симметричного хранилища:\n" -" ipa vault-retrieve <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --out <файл выходных данных>\n" -" --password-file password.txt\n" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" -"\n" -" Получить данные из асимметричного хранилища:\n" -" ipa vault-retrieve <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" --out <файл выходных данных> --private-key-file private.pem\n" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Добавить владельцев хранилища:\n" -" ipa vault-add-owner <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Удалить владельцев хранилища:\n" -" ipa vault-remove-owner <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Добавить участников хранилища:\n" -" ipa vault-add-member <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Удалить участников хранилища:\n" -" ipa vault-remove-member <имя>\n" -" [--user <пользователь>|--service <служба>|--shared]\n" -" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" -"\n" -" Объект контейнера хранилищ.\n" -" " - -msgid "vaultcontainer" -msgstr "контейнер хранилищ" - -msgid "vaultcontainers" -msgstr "контейнеры хранилищ" - -msgid "Vault Containers" -msgstr "Контейнеры хранилищ" - -msgid "Vault Container" -msgstr "Контейнер хранилищ" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" -"Невозможно одновременно указать параметры службы, совместного использования " -"и пользователя" - -msgid "Host is not supported" -msgstr "Поддержка узла не предусмотрена" - -msgid "KRA service is not enabled" -msgstr "Служба KRA не включена" - -msgid "Deleted vault container" -msgstr "Удалён контейнер хранилищ" - -#, python-format -msgid "owner %s" -msgstr "владелец %s" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" -"\n" -" Объект хранилища.\n" -" " - -msgid "vault" -msgstr "хранилище" - -msgid "vaults" -msgstr "хранилища" - -msgid "Vaults" -msgstr "Хранилища" - -msgid "Vault" -msgstr "Хранилище" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" -"Невозможно одновременно указать параметры службы, общего доступа и " -"пользователя" - -msgid "Add a vault." -msgstr "Добавить хранилище." - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "Добавлено хранилище \"%(value)s\"" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "Удалено хранилище \"%(value)s\"" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "установлено соответствие %(count)d хранилища" -msgstr[1] "установлено соответствие %(count)d хранилищ" -msgstr[2] "установлено соответствие %(count)d хранилищ" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" -"Невозможно одновременно указать параметры службы (служб), общего доступа и " -"пользователя (пользователей)" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "Изменено хранилище \"%(value)s\"" - -msgid "Vault configuration" -msgstr "Конфигурация хранилища" - -msgid "IPA KRA servers" -msgstr "KRA-серверы IPA" - -msgid "IPA servers configured as key recovery agents" -msgstr "IPA-серверы, настроенные в качестве агентов восстановления ключей" - -#, fuzzy -msgid "Key wrapping algorithm" -msgstr "Алгоритм хеширования токена" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "Данные архивированы в хранилище \"%(value)s\"" - -msgid "Retrieve data from a vault." -msgstr "Извлечь данные из хранилища." - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "Данные получены из хранища \"%(value)s\"" - -msgid "No archived data." -msgstr "Архивированных данных нет." - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "Проверяет, включена ли служба KRA на каких-либо серверах." - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" -"\n" -"Основной пользователь\n" -"\n" -"Содержит общие определения для пользователя или неподтверждённого " -"пользователя\n" - -msgid "must be TRUE or FALSE" -msgstr "должно быть TRUE или FALSE" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" -"Класс объектов ipaNTUserAttrs отсутствует, запись пользователя не может " -"иметь атрибуты SMB." - -msgid "Principal alias" -msgstr "Псевдоним учётной записи" - -msgid "User password expiration" -msgstr "Окончание действия пароля пользователя" - -msgid "SSH public key fingerprint" -msgstr "Отпечаток открытого ключа SSH" - -#, fuzzy -#| msgid "Vault configuration" -msgid "External IdP configuration" -msgstr "Конфигурация хранилища" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "Base-64 шифрованный сертификат пользователя" - -msgid "Certificate mapping data" -msgstr "Данные сопоставления сертификата" - -msgid "SMB logon script path" -msgstr "Путь к сценарию входа SMB" - -msgid "SMB profile path" -msgstr "Путь к профилю SMB" - -msgid "SMB Home Directory" -msgstr "Домашний каталог SMB" - -msgid "SMB Home Directory Drive" -msgstr "Диск домашнего каталога SMB" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "неправильный формат почты: %(email)s" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "руководитель %(manager)s не найден" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "может быть не длиннее %(len)d символов" - -msgid "Issuer" -msgstr "Издатель" - -msgid "Issuer of the certificate" -msgstr "Издатель сертификата" - -msgid "Subject" -msgstr "Субъект" - -msgid "Subject of the certificate" -msgstr "Субъект сертификата" - -msgid "cannot have an empty subject" -msgstr "поле субъекта не может быть пустым" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "невозможно одновременно указать subject/issuer и certificate" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "невозможно одновременно указать subject/issuer и ipacertmapdata" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" -"Добавить одно или несколько сопоставлений сертификатов в запись пользователя." - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" -"Добавлены сопоставления сертификатов в запись пользователя \"%(value)s\"" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" -"Удалить одно или несколько сопоставлений сертификатов из записи пользователя." - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" -"Удалены сопоставления сертификатов из записи пользователя \"%(value)s\"" - msgid "" "\n" -"Manage CA ACL rules.\n" +"Stageusers\n" "\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" +"Manage stage user entries.\n" "\n" -"SUBJECT PRINCIPAL SCOPE:\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" "\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" "\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" "\n" -"CERTIFICATE AUTHORITY SCOPE:\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" "\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" "\n" -"PROFILE SCOPE:\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" "\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" "\n" "EXAMPLES:\n" "\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" "\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" msgstr "" "\n" -"Управление правилами CA ACL.\n" +"Неподтверждённые пользователи\n" "\n" -"Этот подключаемый модуль используется для определения правил, которые " -"управляют тем, какие службы сертификации и профили можно использовать для " -"выдачи сертификатов конкретным учётным записям или группам учётных записей.\n" +"Управление записями неподтверждённых пользователей.\n" "\n" -"ОБЛАСТЬ ДЕЙСТВИЯ УЧЁТНОЙ ЗАПИСИ СУБЪЕКТА:\n" +"Записи неподтверждённых пользователей находятся непосредственно в " +"контейнере: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\". Пользователь не может проходить " +"аутентификацию с помощью этих записей (даже если они содержат учётные " +"данные), они являются кандидатами на преобразование в активные записи. \n" "\n" -"Чтобы разрешить запрос сертификата, учётная запись (записи), которая " -"является субъектом запроса сертификата (это не обязательно должна быть та " -"учётная запись, которая фактически запрашивает сертификат), должна быть " -"включена в область действия ACL службы сертификации, которая также включает " -"целевые службу сертификации и профиль.\n" +"Активные записи пользователей являются пользователями Posix, находящимися " +"непосредственно в контейнере: \"cn=accounts, SUFFIX\". Пользователь может " +"проходить аутентификацию с помощью активных записей, если они содержат " +"учётные данные.\n" "\n" -"Пользователей можно включить по имени, группе или категорией \"все " -"пользователи\". Узлы можно включить по имени, группе узлов или категорией " -"\"все узлы\". Службы можно включить по имени службы или категорией \"все " -"службы\". ACL служб сертификации могут быть связаны с одним типом учётных " -"записей или с несколькими типами.\n" +"Удалённые записи пользователей являются пользователями Posix, находящимися " +"непосредственно в контейнере: \"cn=deleted users, cn=accounts, " +"cn=provisioning, SUFFIX\". Пользователь не может проходить аутентификацию с " +"помощью этих записей (даже если они содержат учётные данные).\n" "\n" -"ОБЛАСТЬ ДЕЙСТВИЯ СЛУЖБЫ СЕРТИФИКАЦИИ:\n" +"Контейнер неподтверждённых пользователей содержит записи:\n" +" - созданные с помощью команд \"stageuser-add\", которые являются " +"пользователями Posix\n" +" - созданные с помощью внешней системы подготовки \n" "\n" -"ACL службы сертификации может быть связана с одной или несколькими службами " -"сертификации по имени или по категории \"все CA\". По соображениям " -"совместимости ACL службы сертификации без привязки к службе сертификации " -"считается связанной со службой сертификации \"ipa\" (и только с этой службой " -"сертификации).\n" +"Корректная запись неподтверждённого пользователя ДОЛЖНА отвечать следующим " +"требованиям:\n" +" - RDN записи имеет значение \"uid\"\n" +" - ipaUniqueID имеет значение \"autogenerate\"\n" "\n" -"ОБЛАСТЬ ДЕЙСТВИЯ ПРОФИЛЯ:\n" +"IPA поддерживает широкий спектр форматов имён пользователей, но следует " +"учитывать те ограничения, которые могут существовать в конкретной среде. " +"Например, имена пользователей, которые начинаются с цифры или превышают " +"определённую длину, могут привести к проблемам в некоторых системах UNIX.\n" +"Используйте команду \"ipa config-mod\" для изменения формата имени " +"пользователя, разрешённого средствами IPA.\n" "\n" -"ACL службы сертификации может быть связана с одним или несколькими профилями " -"по идентификатору профиля. Идентификатор профиля — это строка без пробелов и " -"знаков препинания, она начинается с буквы, за которой следуют другие буквы, " -"цифры или символы подчёркивания (\"_\").\n" "\n" "ПРИМЕРЫ:\n" "\n" -" Создать ACL службы сертификации \"test\", которая предоставляет всем " -"пользователям доступ к профилю \"UserCert\":\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" +" Добавить нового неподтверждённого пользователя:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" "\n" -" Показать свойства именованной ACL службы сертификации:\n" -" ipa caacl-show test\n" -"\n" -" Создать ACL службы сертификации, чтобы разрешить пользователю \"alice\" " -"использовать профиль \"DNP3\":\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Отключить ACL службы сертификации:\n" -" ipa caacl-disable test\n" -"\n" -" Удалить ACL службы сертификации:\n" -" ipa caacl-del test\n" - -msgid "CA ACL" -msgstr "CA ACL" - -msgid "CA ACLs" -msgstr "CA ACL" - -msgid "CA category" -msgstr "Категория CA" - -msgid "CA category the ACL applies to" -msgstr "Категория CA, к которой применяется ACL" - -msgid "CAs" -msgstr "CA" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "Добавлена CA ACL \"%(value)s\"" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "Удалена CA ACL \"%(value)s\"" - -msgid "default CA ACL can be only disabled" -msgstr "CA ACL по умолчанию можно только отключить" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "Изменена CA ACL \"%(value)s\"" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" -"для категории CA нельзя установить значение \"all\", когда имеются " -"разрешённые CA" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" -"для категории профилей нельзя установить значение \"all\", когда имеются " -"разрешённые профили" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" -"для категории служб нельзя установить значение \"all\", когда имеются " -"разрешённые службы" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "установлено соответствие %(count)d CA ACL" -msgstr[1] "установлено соответствие %(count)d CA ACL" -msgstr[2] "установлено соответствие %(count)d CA ACL" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "Включена CA ACL \"%(value)s\"" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "Отключена CA ACL \"%(value)s\"" - -#, python-format -msgid "%i user or group added." -msgstr "Добавлен %i пользователь или группа." - -#, python-format -msgid "%i users or groups added." -msgstr "Добавлено пользователей или групп: %i." - -msgid "users cannot be added when user category='all'" -msgstr "" -"невозможно добавить пользователей, когда категория пользователей=\"all\"" - -#, python-format -msgid "%i user or group removed." -msgstr "Удалён %i пользователь или группа." - -#, python-format -msgid "%i users or groups removed." -msgstr "Удалено пользователей или групп: %i." - -#, python-format -msgid "%i host or hostgroup added." -msgstr "Добавлен %i узел или группа узлов." - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "Добавлено узлов или групп узлов: %i." - -msgid "hosts cannot be added when host category='all'" -msgstr "невозможно добавить узлы, когда категория узлов=\"all\"" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "Удалён %i узел или группа узлов." - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "Удалено узлов или групп узлов: %i." - -#, python-format -msgid "%i service added." -msgstr "Добавлена %i служба." - -#, python-format -msgid "%i services added." -msgstr "Добавлено служб: %i." - -msgid "services cannot be added when service category='all'" -msgstr "невозможно добавить службы, когда категория служб=\"all\"" - -#, python-format -msgid "%i service removed." -msgstr "Удалена %i служба." - -#, python-format -msgid "%i services removed." -msgstr "Удалено служб: %i." - -#, python-format -msgid "%i profile added." -msgstr "Добавлен %i профиль." - -#, python-format -msgid "%i profiles added." -msgstr "Добавлено профилей: %i." - -msgid "profiles cannot be added when profile category='all'" -msgstr "невозможно добавить профили, когда категория профилей=\"all\"" - -#, python-format -msgid "%i profile removed." -msgstr "Удалён %i профиль." - -#, python-format -msgid "%i profiles removed." -msgstr "Удалено профилей: %i." - -msgid "Add CAs to a CA ACL." -msgstr "Добавить CA в CA ACL." - -#, python-format -msgid "%i CA added." -msgstr "Добавлена %i CA." - -#, python-format -msgid "%i CAs added." -msgstr "Добавлено CA: %i." - -msgid "CAs cannot be added when CA category='all'" -msgstr "невозможно добавить CA, когда категория CA=\"all\"" - -msgid "Remove CAs from a CA ACL." -msgstr "Удалить CA из CA ACL." - -#, python-format -msgid "%i CA removed." -msgstr "Удалена %i CA." - -#, python-format -msgid "%i CAs removed." -msgstr "Удалено CA: %i." - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" -"\n" -"Сопоставление сертификатов с записями пользователей\n" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" -"\n" -"Управление конфигурацией и правилами сопоставления сертификатов с записями " -"пользователей.\n" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" -"\n" -"В IPA предусмотрена поддержка использования сертификатов для аутентификации. " -"Сертификаты могут храниться или в записи пользователя (весь сертификат в " -"атрибуте usercertificate), или просто привязываться к записи пользователя " -"путём сопоставления. С помощью этого кода можно управлять правилами, которые " -"позволяют связывать сертификат с записью пользователя.\n" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" -"\n" -"Показать глобальную конфигурацию сопоставления сертификатов с записями " -"пользователей:\n" -" ipa certmapconfig-show\n" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" -"\n" -" Изменить глобальную конфигурацию сопоставления сертификатов с записями " -"пользователей:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" -"\n" -" Создать новое правило сопоставления сертификатов с записями пользователей:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" -"\n" -" Изменить правило сопоставления сертификатов с записями пользователей:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" -"\n" -" Отключить правило сопоставления сертификатов с записями пользователей:\n" -" ipa certmaprule-disable rule1\n" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" -"\n" -" Включить правило сопоставления сертификатов с записями пользователей:\n" -" ipa certmaprule-enable rule1\n" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" -"\n" -" Показать сведения о правиле сопоставления сертификатов с записями " -"пользователей:\n" -" ipa certmaprule-show rule1\n" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" -"\n" -" Найти все правила сопоставления сертификатов с записями пользователей в " -"указанном домене:\n" -" ipa certmaprule-find --domain example.com\n" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" -"\n" -" Удалить правило сопоставления сертификатов с записями пользователей:\n" -" ipa certmaprule-del rule1\n" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" -"Домен(ы) \"%s\" не могут использоваться для применения проверки " -"altSecurityIdentities." - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" -"Правило сопоставления с altSecurityIdentities должно применяться к " -"доверенному домену Active Directory, но с правилом не был связан ни один " -"домен." - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "Домен %s не является ни доменом IPA, ни доверенным доменом." - -msgid "Certificate Identity Mapping configuration options" -msgstr "" -"Параметры конфигурации сопоставления сертификатов с записями пользователей" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" -"Глобальная конфигурация сопоставления сертификатов с записями пользователей" - -msgid "Prompt for the username" -msgstr "Запрос имени пользователя" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" -"Запрашивать имя пользователя, когда с сертификатом сопоставляются несколько " -"записей пользователей" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" -"Изменить конфигурацию сопоставления сертификатов с записями пользователей." - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" -"Показать текущую конфигурацию сопоставления сертификатов с записями " -"пользователей." - -msgid "Certificate Identity Mapping Rules" -msgstr "Правила сопоставления сертификатов с записями пользователей" - -msgid "Certificate Identity Mapping Rule" -msgstr "Правило сопоставления сертификатов с записями пользователей" - -msgid "Certificate Identity Mapping Rule name" -msgstr "Имя правила сопоставления сертификатов с записями пользователей" - -msgid "Certificate Identity Mapping Rule description" -msgstr "Описание правила сопоставления сертификатов с записями пользователей" - -msgid "Mapping rule" -msgstr "Правило сопоставления" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" -"Правило, которое используется для сопоставления сертификата с записью " -"пользователя" - -msgid "Matching rule" -msgstr "Правило соответствия" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" -"Правило, которое используется для определения того, пригоден ли сертификат " -"для аутентификации" - -msgid "Domain where the user entry will be searched" -msgstr "Домен, в котором будет выполняться поиск записи пользователя" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "Приоритет правила (чем больше число, тем ниже приоритет)" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" -"Создать новое правило сопоставления сертификатов с записями пользователей." - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" -"Добавлено правило сопоставления сертификатов с записями пользователей " -"\"%(value)s\"" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "Изменить правило сопоставления сертификатов с записями пользователей." - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" -"Изменено правило сопоставления сертификатов с записями пользователей " -"\"%(value)s\"" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "Поиск правил сопоставления сертификатов с записями пользователей." - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -"установлено соответствие %(count)d правила сопоставления сертификатов с " -"записями пользователей" -msgstr[1] "" -"установлено соответствие %(count)d правил сопоставления сертификатов с " -"записями пользователей" -msgstr[2] "" -"установлено соответствие %(count)d правил сопоставления сертификатов с " -"записями пользователей" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" -"Показать сведения о правиле сопоставления сертификатов с записями " -"пользователей." - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "Удалить правило сопоставления сертификатов с записями пользователей." - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" -"Удалено правило сопоставления сертификатов с записями пользователей " -"\"%(value)s\"" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "Включить правило сопоставления сертификатов с записями пользователей." - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" -"Включено правило сопоставления сертификатов с записями пользователей " -"\"%(value)s\"" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "Отключить правило сопоставления сертификатов с записями пользователей." - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" -"Отключено правило сопоставления сертификатов с записями пользователей " -"\"%(value)s\"" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" -"Не удалось установить соединение с sssd с помощью SystemBus. Подробные " -"сведения доступны в файле error_log" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" -"Не удалось найти пользователей с помощью SystemBus. Подробные сведения " -"доступны в файле error_log" - -msgid "User logins" -msgstr "Имена входа пользователя" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" -"\n" -" Поиск пользователей, соответствующих предоставленному сертификату.\n" -"\n" -" Чтобы получить список соответствующих пользователей, эта команда " -"использует данные SSSD, следовательно, она может возвращать кэшированные " -"данные. Подробнее об очистке кэша SSSD можно узнать из документации к " -"sss_cache.\n" -" " - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "установлено соответствие %(count)s пользователя" -msgstr[1] "установлено соответствие %(count)s пользователей" -msgstr[2] "установлено соответствие %(count)s пользователей" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" -"\n" -"Конфигурация сервера\n" -"\n" -"Управление значениями по умолчанию, которые используются IPA, и некоторыми " -"параметрами их настройки.\n" -"\n" -"ПРИМЕЧАНИЯ:\n" -"\n" -"Здесь хранится значение уведомления о пароле (--pwdexpnotify), поэтому оно " -"будет реплицировано. В текущей версии оно не используется для " -"заблаговременного уведомления пользователей об окончании срока действия " -"пароля.\n" -"\n" -"Некоторые атрибуты предоставлены в ознакомительных целях и доступны только " -"для чтения. Среди них:\n" -"\n" -"Основа субъекта сертификата: настроенная основа субъекта сертификата, " -"например O=EXAMPLE.COM. Настраивается только во время установки.\n" -"Возможности подключаемого модуля паролей: в текущей версии он определяет " -"дополнительные хеши, которые создаются на основе пароля (могут быть и другие " -"условия).\n" -"\n" -"При установке приоритета сопоставления пользователей SELinux, возможно, " -"потребуется взять значение в кавычки, чтобы оно не обрабатывалось " -"оболочкой.\n" -"\n" -"Максимальная длина имени узла в Linux управляется параметром ядра " -"MAXHOSTNAMELEN и по умолчанию составляет 64 символа. В некоторых других " -"операционных системах, например, в Solaris, разрешены имена узлов длиной " -"вплоть до 255.\n" -"Этот параметр позволяет регулировать длину, но по умолчанию ограничен " -"максимальной длиной для Linux.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Показать базовую конфигурацию сервера:\n" -" ipa config-show\n" -"\n" -" Показать все параметры конфигурации:\n" -" ipa config-show --all\n" -"\n" -" Изменить максимальную длину имени пользователя на 99 символов:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Изменить максимальную длину имени узла на 255 символов:¶\n" -" ipa config-mod --maxhostname=255¶\n" -"\n" -" Увеличить установленные по умолчанию ограничения времени и размера поиска " -"IPA-сервера:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Указать почтовый домен пользователей по умолчанию:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Включить режим миграции, чтобы сделать работоспособной команду \"ipa " -"migrate-ds\":\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Определить порядок списка пользователей SELinux:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" - -msgid "must be at least 10" -msgstr "должно быть не меньше 10" - -msgid "configuration options" -msgstr "параметры конфигурации" - -msgid "Configuration" -msgstr "Конфигурация" - -msgid "Maximum hostname length" -msgstr "Максимальная длина имени узла" - -msgid "Enable adding subids to new users" -msgstr "" - -msgid "IPA masters" -msgstr "Главные IPA-серверы" - -msgid "List of all IPA masters" -msgstr "Список всех главных IPA-серверов" - -msgid "Hidden IPA masters" -msgstr "Скрытые главные IPA-серверы" - -msgid "List of all hidden IPA masters" -msgstr "Список всех скрытых главных IPA-серверов" - -msgid "IPA master capable of PKINIT" -msgstr "Главный IPA-сервер с поддержкой PKINIT" - -msgid "IPA master which can process PKINIT requests" -msgstr "Главный IPA-сервер, которой может обрабатывать запросы PKINIT" - -msgid "IPA CA servers" -msgstr "Серверы CA IPA" - -msgid "IPA servers configured as certificate authority" -msgstr "IPA-серверы, настроенные в качестве центра сертификации" - -msgid "Hidden IPA CA servers" -msgstr "Скрытые серверы CA IPA" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "Скрытые IPA-серверы, настроенные в качестве центра сертификации" - -msgid "IPA CA renewal master" -msgstr "Главный сервер обновления CA IPA" - -msgid "Renewal master for IPA certificate authority" -msgstr "Главный сервер обновления центра сертификации IPA" - -msgid "IPA servers configured as key recovery agent" -msgstr "IPA-серверы, настроенные в качестве агента восстановления ключей" - -msgid "Hidden IPA KRA servers" -msgstr "Скрытые KRA-серверы IPA" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" -"Скрытые IPA-серверы, настроенные в качестве агента восстановления ключей" - -msgid "Domain resolution order" -msgstr "Порядок разрешения доменов" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" -"Разделённый двоеточиями список доменов, которые используются для обработки " -"кратких имён" - -msgid "IPA DNS servers" -msgstr "DNS-серверы IPA" - -msgid "IPA servers configured as domain name server" -msgstr "IPA-серверы, настроенные в качестве сервера доменных имен" - -msgid "Hidden IPA DNS servers" -msgstr "Скрытые DNS-серверы IPA" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "Скрытыие IPA-серверы, настроенные в качестве сервера доменных имен" - -msgid "IPA DNSSec key master" -msgstr "Мастер ключей DNSSec IPA" - -msgid "DNSec key master" -msgstr "Мастер ключей DNSec" - -#, fuzzy -msgid "Setup SID configuration" -msgstr "конфигурация отношений доверия" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -#, fuzzy -msgid "Add SIDs" -msgstr "Добавить представление ID" - -msgid "Add SIDs for existing users and groups" -msgstr "" - -#, fuzzy -msgid "NetBIOS name of the IPA domain" -msgstr "Имя доверенного домена" - -msgid "Empty domain is not allowed" -msgstr "Использование пустого домена запрещено" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "Недопустимое имя домена \"%(domain)s\": %(e)s" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "На сервере нет сведений о домене \"%(domain)s\"" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "Отключённый домен \"%(domain)s\" нельзя использовать" - -#, fuzzy -msgid "not allowed to enable SID generation" -msgstr "не разрешено выполнение операции: %s" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -#, fuzzy -msgid "Failed to call DBus" -msgstr "Ошибка при добавлении" - -#, fuzzy -msgid "Configuration of SID failed. See details in the error log" -msgstr "" -"Не удалось получить домены из доверенного леса. Подробные сведения доступны " -"в файле error_log" - -msgid "The group doesn't exist" -msgstr "Группа не существует" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "атрибут \"%s\" нельзя использовать" - -msgid "May not be empty" -msgstr "Не может быть пустым" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "Атрибут %(obj)s по умолчанию, %(attr)s, не будет разрешён!" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "Ожидается список пользователей SELinux, с разделителем $" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" -"Запись пользователя SELinux \"%(user)s\" не является корректной: %(error)s" - -msgid "SELinux user map default user not in order list" -msgstr "" -"Пользователя списка соответствия пользователей SELinux по умолчанию нет в " -"порядковом списке" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" -"\n" -"Система доменных имён (DNS)\n" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" -"\n" -"Управление записями зон и ресурсов DNS.\n" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" -"\n" -"ПОДДЕРЖИВАЕМЫЕ ТИПЫ ЗОН\n" -"\n" -" * Главная зона (dnszone-*), содержит надёжные данные.\n" -" * Зона перенаправления (dnsforwardzone-*), перенаправляет запросы на " -"настроенные перенаправители\n" -" (набор DNS-серверов).\n" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" -"\n" -"ИСПОЛЬЗОВАНИЕ СТРУКТУРИРОВАННЫХ ПАРАМЕТРОВ ДЛЯ ОТДЕЛЬНЫХ ТИПОВ\n" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" -"\n" -"Существует много структурированных типов записей ресурсов DNS, для которых " -"данные DNS, хранящиеся на сервере LDAP, являются не просто скалярным " -"значением, например IP-адрес или имя домена, а структурой данных, которая " -"часто может быть сложной. Примером может быть запись LOC [RFC1876], которая " -"состоит из многих обязательных и необязательных частей (градусов, минут, " -"секунд широты и долготы, высоты и погрешности).\n" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" -"\n" -"При работе с такими записями DNS может быть сложно не допустить ошибок и " -"ввести корректное значение. Модуль DNS предоставляет в ваше распоряжение " -"абстракцию над этими необработанными записями и позволяет управлять каждым " -"из типов записей ресурсов с помощью определённых параметров. Для каждого из " -"поддерживаемых типов записей ресурсов в модуле DNS предусмотрен стандартный " -"параметр для работы с необработанными записями с помощью формата ---" -"rec, например --mx-rec, и специальные параметры для каждой из частей " -"структуры записи ресурса с помощью формата ---, например --" -"mx-preference и --mx-exchanger.\n" -"\n" -"\n" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" -"\n" -"\n" -"При добавлении записи можно воспользоваться параметрами, специально " -"предназначенными для записей ресурсов, или стандартным параметром для " -"необработанного значения (сочетать эти варианты в одном действии по " -"добавлению нельзя). При внесении изменений в существующую запись можно " -"воспользоваться для изменения одной части записи DNS новыми специальными " -"параметрами записей ресурсов, причём для определения изменённого значения " -"будет использован стандартный вариант необработанного значения. В " -"приведенном ниже примере показано изменение приоритета записи MX с 0 на 1 в " -"записи без внесения изменений в обменник:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" -"\n" -"\n" -"ПРИМЕРЫ:\n" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" -"\n" -"Добавить новую зону:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" -"\n" -" Добавить общесистемные права доступа, которыми можно воспользоваться для " -"делегирования привилегий для отдельных зон:\n" -" ipa dnszone-add-permission example.com\n" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" -"\n" -" Изменить зону, чтобы разрешить динамическое обновление для собственных " -"записей узлов в области (realm) EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" -"\n" -" Эта команда эквивалентна следующим командам:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" -"\n" -" Изменить зону, чтобы разрешить перенос зоны только для локальной сети:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" -"\n" -" Добавить новую обратную зону, указанную с помощью сетевого IP-адреса:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" -"\n" -" Добавить другой сервер имён для example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" -"\n" -" Добавить почтовый сервер для example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" -"\n" -" Добавить другую запись с помощью специальных параметров записи MX:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" -"\n" -"Добавить другую запись с помощью интерактивного режима (в который программа " -"переходит в ответ на команды dnsrecord-add, dnsrecord-mod или dnsrecord-del " -"без параметров):\n" -" ipa dnsrecord-add example.com @\n" -" Выберите тип записи ресурса DNS, который следует добавить\n" -" Наиболее распространённые типы для этого типа зон: NS, MX, LOC\n" -"\n" -" Тип записи ресурса DNS: MX\n" -" Приоритет MX: 30\n" -" Обменник MX: mail3\n" -" Имя записи: example.com\n" -" Запись MX: 10 mail1, 20 mail2, 30 mail3\n" -" Запись NS: nameserver.example.com., nameserver2.example.com.\n" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" -"\n" -" Удалить добавленный ранее сервер имён из example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" -"\n" -" Добавить запись LOC для example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" -"\n" -" Добавить новую запись A для www.example.com. Также создать обратную запись " -"в соответствующей обратной зоне. В этом случае запись PTR \"2\", которая " -"указывает на www.example.com, будет создана в зоне 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" -"\n" -" Добавить новую запись PTR для www.example.com:\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" -"\n" -" Добавить новые записи SRV для LDAP-серверов. Три четверти запросов должны " -"отправляться на fast.example.com, одна четверть — на slow.example.com. Если " -"обе службы недоступны, переключиться на backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" -"\n" -"Для облегчения внесения изменений можно воспользоваться интерактивным " -"режимом:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" Возможность внесения изменений в определённую запись не предусмотрена.\n" -" Текущее содержание записи DNS:\n" -"\n" -" Запись SRV: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Изменить запись SRV '0 3 389 fast.example.com'? Да/Нет (по умолчанию \"Нет" -"\"):\n" -" Изменить запись SRV '0 1 389 slow.example.com'? Да/Нет (по умолчанию \"Нет" -"\"): y\n" -" Приоритет SRV [0]: (сохранить значение по умолчанию)\n" -" Вес SRV [1]: 2 (изменённое значение)\n" -" Порт SRV [389]: (сохранить значение по умолчанию)\n" -" Цель SRV [slow.example.com]: (сохранить значение по умолчанию)\n" -" Пропущена 1 запись SRV. Одновременно можно изменять только одно значение " -"на тип записи DNS.\n" -" Имя записи: _ldap._tcp\n" -" Запись SRV: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" -"\n" -" После внесения этих изменений три пятых запросов должны направляться на " -"fast.example.com, а две пятых — на slow.example.com.\n" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" -"\n" -"Пример интерактивного режима для команды dnsrecord-del:\n" -" ipa dnsrecord-del example.com www\n" -" Не указан параметр удаления определённой записи.\n" -" Удалить все? Да/Нет (по умолчанию \"Нет\"): (не удалять все записи)\n" -" Текущее содержание записи DNS:\n" -"\n" -" Запись A: 192.0.2.2, 192.0.2.3\n" -"\n" -" Удалить запись A '192.0.2.2'? Да/Нет (по умолчанию \"Нет\"):\n" -" Удалить запись A '192.0.2.3'? Да/Нет (по умолчанию \"Нет\"): y\n" -" Имя записи: www\n" -" Запись A: 192.0.2.2 (запись A 192.0.2.3 удалена)\n" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" -"\n" -" Показать зону example.com:\n" -" ipa dnszone-show example.com\n" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" -"\n" -" Найти зону со словом \"example\" в имени домена:\n" -" ipa dnszone-find example\n" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" -"\n" -" Найти записи для ресурсов с \"www\" в имени в зоне example.com:\n" -" ipa dnsrecord-find example.com www\n" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" -"\n" -" Найти записи A со значением 192.0.2.2 в зоне example.com:\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" -"\n" -" Показать записи для ресурса www в зоне example.com:\n" -" ipa dnsrecord-show example.com www\n" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" -"\n" -" Делегировать зону sub.example другому серверу имён:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" -"\n" -" Удалить зону example.com вместе со всеми записями ресурсов:\n" -" ipa dnszone-del example.com\n" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" -"\n" -"Если настроен глобальный перенаправитель, все запросы, для которых этот " -"сервер не является полномочным (например, sub.example.com), будут " -"перенаправлены на глобальный перенаправитель. Конфигурацию глобального " -"перенаправления можно переопределить для отдельных зон.\n" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" -"\n" -" Семантика перенаправления в IPA соответствует семантике BIND и зависит от " -"типа зоны:\n" -" * Главная зона: локальный BIND предоставляет надёжные ответы на запросы " -"данных в указанной зоне (включая надёжные ответы NXDOMAIN), а " -"перенаправление применяется только для запросов имён за пределами отрезков " -"(записи NS) зон, которые обслуживаются локально.\n" -"\n" -" * Зона перенаправления: зона перенаправления не содержит надёжные данные. " -"BIND перенаправляет запросы, на которые не удалось получить ответы из " -"локального кэша, на настроенные перенаправители.\n" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" -"\n" -" Семантика параметра --forward-policy:\n" -" * none - отключить перенаправление для указанной зоны.\n" -" * first - перенаправить все запросы на настроенные перенаправители. Если " -"они не сработают,\n" -" выполнить разрешение с помощью корневых серверов DNS.\n" -" * only - перенаправить все запросы на настроенные перенаправители и " -"вернуть сообщение об ошибке, если они не сработают.\n" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" -"\n" -" Отключить глобальное перенаправление для указанного поддерева:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" -"\n" -" Эта конфигурация перенаправляет все запросы имён за пределами поддерева " -"example.com на глобальные перенаправители. Для имён в пределах поддерева " -"example.com используется обычный рекурсивный процесс разрешения (то есть с " -"переходом по записям NS и так далее).\n" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" -"\n" -" Перенаправлять все запросы для зоны external.example.com на другой " -"перенаправитель с помощью политики \"first\" (запросы будут направлены на " -"выбранный перенаправитель, а если он не ответит, будут использованы " -"глобальные корневые серверы):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" -"\n" -" Изменить политику перенаправления (параметр forward-policy) для external." -"example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" -"\n" -" Показать зону перенаправления external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" -"\n" -" Вывести список всех зон перенаправления:\n" -" ipa dnsforwardzone-find\n" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" -"\n" -" Удалить зону перенаправления external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" -"\n" -"Определить адрес по имени узла, чтобы узнать, существует ли он (будет " -"добавлен стандартный домен IPA, если он не включён):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" -"\n" -"\n" -"ГЛОБАЛЬНАЯ КОНФИГУРАЦИЯ DNS\n" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" -"\n" -"Конфигурация DNS, которая передаётся сценарию командной строки для " -"установки, хранится в локальном файле конфигурации на каждом IPA-сервере, " -"где настроена служба DNS. Эти локальные настройки могут быть переопределены " -"с помощью общей конфигурации, которая хранится на LDAP-сервере:\n" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" -"\n" -" Показать глобальную конфигурацию DNS:\n" -" ipa dnsconfig-show\n" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" -"\n" -"Изменить глобальную конфигурацию DNS и установить список глобальных " -"перенаправителей:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" - -msgid "invalid IP network format" -msgstr "недопустимый формат IP-сети" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "каждый элемент ACL должен заканчиваться точкой с запятой" - -msgid "invalid address format" -msgstr "недопустимый формат адреса" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" -"ожидаемый формат: <0-255> <0-255> <0-65535> " -"шестнадцатеричные_цифры_равной_длины_или_дефис" - -msgid "algorithm value: allowed interval 0-255" -msgstr "значение алгоритма: допустимый интервал 0-255" - -msgid "flags value: allowed interval 0-255" -msgstr "значение флагов: допустимый интервал от 0 до 255" - -msgid "iterations value: allowed interval 0-65535" -msgstr "значение количества итераций: допустимый интервал от 0 до 65535" - -#, python-format -msgid "salt value: %(err)s" -msgstr "значение соли: %(err)s" - -msgid "invalid domain-name: not fully qualified" -msgstr "недействительное имя домена: не является полным" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" -"не должно быть именем домена с подстановочными знаками (RFC 4592, раздел 4)" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "Ни один сервер имён не ответил на запрос обратной зоны DNS %(revdns)s" - -#, fuzzy, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "Ни один сервер имён не ответил на запрос обратной зоны DNS %(revdns)s" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" -"Обратная зона DNS %(revzone)s для IP-адреса %(addr)s не управляется этим " -"сервером" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "Зона DNS %(zone)s не найдена" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "IP-адрес %(ip)s уже назначен в домене %(domain)s." - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" -"Обратная запись для IP-адреса %(ip)s уже существует в обратной зоне %(zone)s." - -#, python-format -msgid "%s record" -msgstr "запись %s" - -#, python-format -msgid "Raw %s records" -msgstr "Необработанные записи %s" - -#, python-format -msgid "%s Record" -msgstr "Запись %s" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "(подробности доступны в RFC %s)" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "\"%s\" является обязательной частью записи DNS" - -msgid "Invalid number of parts!" -msgstr "Неверное количество частей!" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" -"В подключаемом модуле bind-dyndb-ldap не предусмотрена поддержка типа записи " -"ресурсов DNS \"%s\"" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "формат должен быть указан следующим образом: \"%(format)s\" %(rfcs)s" - -msgid "Create reverse" -msgstr "Создать обратную запись" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "Не удалось создать обратную запись для \"%(value)s\": %(exc)s" - -msgid "Exchanger" -msgstr "Обменник" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" -"формат должен быть указан следующим образом:\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" где:\n" -" d1: [0 .. 90] (градусы широты)\n" -" d2: [0 .. 180] (градусы долготы)\n" -" m1, m2: [0 .. 59] (минуты широты / долготы)\n" -" s1, s2: [0 .. 59.999] (секунды широты / долготы)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (высота в метрах)\n" -" siz, hp, vp: [0 .. 90000000.00] (размер / точность в метрах)\n" -" Подробные сведения доступны в RFC 1876" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "\"%(required)s\" не должно быть пустым, если указано \"%(name)s\"" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" -"значением флагов должна быть одна из следующих букв: \"S\", \"A\", \"U\" или " -"\"P\"" - -msgid "Priority (order)" -msgstr "Приоритет (порядок)" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" -"Чем меньше число, тем выше приоритет. Клиентские части попытаются связаться " -"с тем доступным для них сервером, у которого ниже число приоритета. " - -msgid "Relative weight for entries with the same priority." -msgstr "Относительный вес записей с одинаковым приоритетом" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "значение не подходит под формат времени \"ГГГГММДДЧЧММСС\"" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" -"Чем меньше число, тем выше приоритет. Клиентские части попытаются связаться " -"с тем доступным для них адресом, у которого ниже число приоритета. " - -msgid "Target Uniform Resource Identifier" -msgstr "Универсальный код ресурса (URI) запрошенного конечного объекта " - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" -"Универсальный код ресурса (URI) запрошенного конечного объекта в " -"соответствии с RFC 3986" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "На сервере имён \"%(host)s\" нет соответствующей записи A/AAAA" - -msgid "Managedby permission" -msgstr "Разрешение managedby" - -#, fuzzy -msgid "cannot be used when a zone is specified" -msgstr "невозможно указать узлы, когда тип \"group\"" - -msgid "Only one zone type is allowed per zone name" -msgstr "Для одного имени зоны можно использовать только один тип зоны" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "Добавлено системное разрешение \"%(value)s\"" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "разрешение \"%(value)s\" уже существует" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "Удалено системное разрешение \"%(value)s\"" - -msgid "DNS zone" -msgstr "зона DNS" - -msgid "DNS zones" -msgstr "зоны DNS" - -msgid "DNS Zones" -msgstr "Зоны DNS" - -msgid "DNS Zone" -msgstr "Зона DNS" - -msgid "Default time to live" -msgstr "Срок жизни по умолчанию" - -msgid "Time to live for records without explicit TTL definition" -msgstr "Срок жизни записей без явного определения срока жизни" - -msgid "setting Authoritative nameserver" -msgstr "установка полномочного сервера имён" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "Используется только для установки атрибута MNAME SOA" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "Запись (записи) NS можно изменять в начале зоны: \"@\". " - -msgid "" -msgstr "<все серверы DNS IPA>" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "Сервер имён для обратной зоны не может быть относительным DNS-именем" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "Удалена зона DNS \"%(value)s\"" - -msgid "is required" -msgstr "следует указать" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "Отключена зона DNS \"%(value)s\"" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "Включена зона DNS \"%(value)s\"" - -msgid "DNS resource record" -msgstr "запись ресурса DNS" - -msgid "DNS resource records" -msgstr "записи ресурсов DNS" - -msgid "DNS Resource Records" -msgstr "Записи ресурсов DNS" - -msgid "DNS Resource Record" -msgstr "Запись ресурса DNS" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "запись DS не должна находиться в начале зоны (RFC 4035, раздел 2.4)" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" -"данные вне зоны: имя записи должно быть поддоменом зоны или относительным " -"именем" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" -"нельзя использовать шаблон имени домена в поле владельца записей %(types)s " -"(RFC 4592, раздел 4)" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" -"Обратной зоне %(name)s требуется ровно %(count)d компонтов IP-адресов, " -"предоставлено %(user_count)d" - -msgid "only master zones can contain records" -msgstr "только главные зоны могут содержать записи" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" -"для одного имени можно использовать только одну запись CNAME (RFC 2136, " -"раздел 1.1.5)" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" -"Запись CNAME нельзя использовать вместе с любыми другими записями (RFC 1034, " -"раздел 3.6.2)" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" -"для одного имени можно использовать только одну запись DNAME (RFC 6672, " -"раздел 2.4)" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" -"Запись NS нельзя использовать вместе с записью %(type)s, если только они не " -"расположены в корневой записи зоны (RFC 2181, раздел 6.1)" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" -"запись DS должна использоваться вместе с записью NS (RFC 4592, раздел 4.6, " -"RFC 4035, раздел 2.4)" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "Необработанное значение записи DNS уже задано параметром \"%(name)s\"" - -msgid "DNS zone root record cannot be renamed" -msgstr "Невозможно переименовать корневую запись зоны DNS" - -msgid "DNS records can be only updated one at a time" -msgstr "Записи DNS можно обновлять только по одной" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "Удалена запись \"%(value)s\"" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "Невозможно удалить запись зоны \"%s\"" - -#, python-format -msgid "Found '%(value)s'" -msgstr "Найдено: \"%(value)s\"" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "Узел \"%(host)s\" не найден" - -msgid "DNS configuration options" -msgstr "Параметры конфигурации DNS" - -msgid "DNS Global Configuration" -msgstr "Глобальная конфигурация DNS" - -msgid "IPA DNS version" -msgstr "Версия DNS IPA" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" -"Вывести список главных IPA-серверов, настроенных в качестве DNS-серверов" - -msgid "IPA server configured as DNSSec key master" -msgstr "IPA-сервер, настроенный в качестве мастера ключей DNSSec" - -msgid "Global DNS configuration is empty" -msgstr "Пустая глобальная конфигурация DNS" - -msgid "DNS forward zone" -msgstr "зона перенаправления DNS" - -msgid "DNS forward zones" -msgstr "зоны перенаправления DNS" - -msgid "DNS Forward Zones" -msgstr "Зоны перенаправления DNS" - -msgid "DNS Forward Zone" -msgstr "Зона перенаправления DNS" - -msgid "Please specify forwarders." -msgstr "Укажите серверы-перенаправители." - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "Удалена зона перенаправления DNS \"%(value)s\"" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "Отключена зона перенаправления DNS \"%(value)s\"" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "Включена зона перенаправления DNS \"%(value)s\"" - -msgid "IPA DNS records" -msgstr "Записи DNS IPA" - -msgid "IPA location records" -msgstr "Записи расположений IPA" - -msgid "Update location and IPA server DNS records" -msgstr "Обновить записи расположений и DNS-серверов IPA. " - -msgid "Result of the command" -msgstr "Результат команды" - -msgid "Dry run" -msgstr "Пробное выполнение" - -msgid "Do not update records only return expected records" -msgstr "Не обновлять записи, только вернуть ожидаемые записи" - -msgid "The deny type has been deprecated." -msgstr "Тип \"deny\" больше не поддерживается." - -msgid "HBAC rules" -msgstr "правила HBAC" - -msgid "HBAC Rules" -msgstr "Правила HBAC" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "Добавлено правило HBAC \"%(value)s\"" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "Удалено правило HBAC \"%(value)s\"" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "Изменено правило HBAC \"%(value)s\"" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "установлено соответствие %(count)d правила HBAC" -msgstr[1] "установлено соответствие %(count)d правил HBAC" -msgstr[2] "установлено соответствие %(count)d правил HBAC" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "Включено правило HBAC \"%(value)s\"" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "Отключено правило HBAC \"%(value)s\"" - -msgid "Access time" -msgstr "Время доступа" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "Добавить узлы-источники и группы узлов в правило HBAC." - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" -"\n" -"Узлы/Компьютеры\n" -"\n" -"Узел представляет собой отдельный компьютер. Термин может использоваться в " -"нескольких контекстах:\n" -"- записи служб, связанные с определённым узлом \n" -"- узел сохраняет учётную запись узла / службы\n" -"- узел может использоваться в правилах управления доступом на основе узла " -"(Host-based Access Control, HBAC)\n" -"- каждый зарегистрированный клиент создаёт запись узла\n" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" -"\n" -"РЕГИСТРАЦИЯ:\n" -"\n" -"Существует три сценария регистрации нового клиента:\n" -"\n" -"1. Вы регистрируетесь как администратор с полными правами. Запись узла может " -"существовать или отсутствовать. Полноправный администратор выполняет роль " -"hostadmin или является участником группы admins.\n" -"2. Вы регистрируетесь как администратор с ограниченными правами. Узел уже " -"должен существовать. Администратор с ограниченными правами выполняет роль с " -"привилегией Host Enrollment.\n" -"3. Узел создан с одноразовым паролем.\n" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" -"\n" -"ПОВТОРНАЯ РЕГИСТРАЦИЯ\n" -"\n" -"Если узел уже когда-то был зарегистрирован и затем утратил свою конфигурацию " -"(например, была уничтожена виртуальная машина), его можно зарегистрировать " -"повторно.\n" -"\n" -"Дополнительные сведения доступны на страницах справочника по ipa-client-" -"install.\n" -"\n" -"В запись узла при необходимости можно включить данные о его расположении, " -"типе используемой операционной системы и так далее.\n" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" -"\n" -" Добавить новый узел:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" -"\n" -" Удалить узел:\n" -" ipa host-del test.example.com\n" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" -"\n" -" Добавить новый узел с одноразовым паролем:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" -"\n" -" Добавить новый узел со случайным одноразовым паролем:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" -"\n" -" Изменить сведения об узле:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" -"\n" -"Удалить открытые ключи SSH узла и обновить DNS для отображения изменений:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" -"\n" -" Отключить ключ Kerberos, SSL-сертификат и все службы узла:\n" -" ipa host-disable test.example.com\n" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" -"\n" -" Добавить узел, который может управлять таблицей ключей и сертификатом этого " -"узла:\n" -" ipa host-add-managedby --hosts=test2 test\n" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" -"\n" -" Разрешить пользователю создавать таблицу ключей:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" - -msgid "Host" -msgstr "Узел" - -msgid "Base-64 encoded host certificate" -msgstr "Base-64 шифрованный сертификат узла" - -msgid "Serial Number" -msgstr "Серийный номер" - -msgid "Serial Number (hex)" -msgstr "Серийный номер (шестнадцатеричный)" - -msgid "Not Before" -msgstr "Недействителен до" - -msgid "Not After" -msgstr "Недействителен после" - -msgid "Fingerprint (SHA1)" -msgstr "Отпечаток (SHA1)" - -msgid "Fingerprint (SHA256)" -msgstr "Отпечаток (SHA256)" - -msgid "Revocation reason" -msgstr "Причина отзыва" - -msgid "Authentication Indicators" -msgstr "Индикаторы аутентификации" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "Добавлен узел \"%(value)s\"" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Удалён узел \"%(value)s\"" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" -"Удалить записи A, AAAA, SSHFP и PTR узла (узлов) под управлением DNS IPA" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "Записи A, AAAA, SSHFP или PTR не найдены." - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Изменён узел \"%(value)s\"" - -msgid "Password cannot be set on enrolled host." -msgstr "Невозможно установить пароль для зарегистрированного узла." - -msgid "cn is immutable" -msgstr "cn нельзя изменять" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "установлено соответствие %(count)d узела" -msgstr[1] "установлено соответствие %(count)d узлов" -msgstr[2] "установлено соответствие %(count)d узлов" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "Отключён узел \"%(value)s\"" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "Добавлены сертификаты в запись узла \"%(value)s\"" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "Удалены сертификаты из записи узла \"%(value)s\"" - -msgid "Add new principal alias to host entry" -msgstr "Добавить новый псевдоним учётной записи в запись узла." - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Добавлены новые псевдонимы в запись узла \"%(value)s\"" - -msgid "Remove principal alias from a host entry" -msgstr "Удалить псевдоним учётной записи из записи узла." - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "Удалены псевдонимы из записи узла \"%(value)s\"" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| "Manage RADIUS Proxy Servers.\n" -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" -"\n" -"Управление прокси-серверами RADIUS.\n" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Find all servers whose entries include the string \"example.com\":\n" -#| " ipa radiusproxy-find example.com\n" -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" -"\n" -" Найти все серверы, записи которых содержат строку \"example.com\":\n" -" ipa radiusproxy-find example.com\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Examine the configuration:\n" -#| " ipa radiusproxy-show MyRADIUS\n" -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" -"\n" -" Проверить конфигурацию:\n" -" ipa radiusproxy-show MyRADIUS\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Change the secret:\n" -#| " ipa radiusproxy-mod MyRADIUS --secret\n" -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" -"\n" -" Изменить секрет:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Delete a Certificate Identity Mapping Rule:\n" -#| " ipa certmaprule-del rule1\n" -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" -"\n" -" Удалить правило сопоставления сертификатов с записями пользователей:\n" -" ipa certmaprule-del rule1\n" - -msgid "Invalid URI: not an https scheme" -msgstr "" - -msgid "Invalid URI: missing netloc" -msgstr "" - -#, fuzzy -msgid "Identity Provider server" -msgstr "Проверить связь с удалённым сервером." - -#, fuzzy -msgid "Identity Provider servers" -msgstr "Проверить связь с удалённым сервером." - -#, fuzzy -#| msgid "Remote server name" -msgid "Identity Provider server name" -msgstr "Имя удалённого сервера" - -#, fuzzy -#| msgid "Authority ID" -msgid "Authorization URI" -msgstr "ID центра" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -#, fuzzy -#| msgid "Token ID" -msgid "Token URI" -msgstr "ID токена" - -#, fuzzy -#| msgid "Mount point" -msgid "Token endpoint" -msgstr "Точка монтирования" - -#, fuzzy -#| msgid "User Login" -msgid "User info URI" -msgstr "Имя учётной записи пользователя" - -#, fuzzy -#| msgid "Token serial (informational only)" -msgid "User information endpoint" -msgstr "Серийный номер токена (только для сведения)" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -#, fuzzy -#| msgid "Security Identifier" -msgid "Client identifier" -msgstr "Идентификатор безопасности" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -#, fuzzy -#| msgid "Add a new RADIUS proxy server." -msgid "Add a new Identity Provider server." -msgstr "Добавить новый прокси-сервер RADIUS." - -#, fuzzy, python-format -#| msgid "Added RADIUS proxy server \"%(value)s\"" -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "Добавлен прокси-сервер RADIUS \"%(value)s\"" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "Организация" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -#, fuzzy -#| msgid "Base DN" -msgid "Base URL" -msgstr "Базовое DN" - -msgid "Base URL for IdP provider templates" -msgstr "" - -#, fuzzy -#| msgid "Unknown Error" -msgid "unknown provider" -msgstr "Неизвестная ошибка" - -#, fuzzy -#| msgid "Request is missing \"method\"" -msgid "value is missing" -msgstr "В запросе не указан метод (\"method\")" - -#, fuzzy -#| msgid "cannot specify both raw certificate and file" -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "невозможно одновременно указать код сертификата и файл с сертификатом" - -#, fuzzy -#| msgid "Delete an IPA service." -msgid "Delete an Identity Provider server." -msgstr "Удалить службу IPA." - -#, fuzzy, python-format -#| msgid "Deleted IPA server \"%(value)s\"" -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "Удалён IPA-сервер \"%(value)s\"" - -#, fuzzy -#| msgid "Modify an existing IPA service." -msgid "Modify an Identity Provider server." -msgstr "Изменить существующую службу IPA." - -#, fuzzy, python-format -#| msgid "Modified IPA server \"%(value)s\"" -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "Изменена запись IPA-сервера \"%(value)s\"" - -#, fuzzy -#| msgid "Search for IPA servers." -msgid "Search for Identity Provider servers." -msgstr "Поиск IPA-серверов." - -#, fuzzy, python-format -#| msgid "%(count)d IPA server matched" -#| msgid_plural "%(count)d IPA servers matched" -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "установлено соответствие %(count)d IPA-сервера" -msgstr[1] "установлено соответствие %(count)d IPA-серверов" -msgstr[2] "установлено соответствие %(count)d IPA-серверов" - -#, fuzzy -#| msgid "Display information about an IPA service." -msgid "Display information about an Identity Provider server." -msgstr "Показать сведения о службе IPA." - -msgid "Internationalization messages" -msgstr "Сообщения интернационализации" - -msgid "Your session has expired. Please log in again." -msgstr "Время вашего сеанса истекло. Пожалуйста, войдите в систему ещё раз." - -msgid "Apply" -msgstr "Применить" - -msgid "Rebuild auto membership" -msgstr "Перестроить автоучастие" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "Вы действительно хотите перестроить автоучастие?" - -msgid "Are you sure you want to proceed with the action?" -msgstr "Вы действительно хотите выполнить это действие?" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "Вы действительно хотите удалить ${object}?" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "Вы действительно хотите отключить ${object}?" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "Вы действительно хотите включить ${object}?" - -msgid "Actions" -msgstr "Действия" - -msgid "Add" -msgstr "Добавить" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "Добавлено записей: ${count}" - -msgid "Direct Membership" -msgstr "Прямое участие" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "Доступный фильтр ${other_entity}" - -msgid "Indirect Membership" -msgstr "Непрямое участие" - -msgid "No entries." -msgstr "Отсутствуют записи." - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "Показано записей: с ${start} по ${end} из ${total}." - -msgid "Remove" -msgstr "Удалить" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "Удалено записей: ${count}" - -msgid "Show Results" -msgstr "Показать результаты" - -msgid "Authentication indicators" -msgstr "Индикаторы аутентификации" - -msgid "Authentication indicator" -msgstr "Индикатор аутентификации" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" -"

Если метод не выбран, будет использован неявный метод (пароль).

Пароль + двухфакторная аутентификация: в LDAP и " -"Kerberos предусмотрена аутентификация по одному из этих типов " -"аутентификации, но Kerberos использует метод предварительной " -"аутентификации, который требует использования armor ccache.

RADIUS с другим типом: в Kerberos всегда используется " -"RADIUS, а в LDAP он не используется никогда. LDAP распознаёт только варианты " -"аутентификации по паролю и двухфакторной аутентификации.

" - -msgid "Add Custom Authentication Indicator" -msgstr "Добавить пользовательский идентификатор аутентификации" - -msgid "Two factor authentication (password + OTP)" -msgstr "Двухфакторная аутентификация (пароль + OTP)" - -msgid "RADIUS" -msgstr "RADIUS" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "Пароль с усиленной защитой (SPAKE или FAST)" - -msgid "External Identity Provider" -msgstr "" - -msgid "Disable per-user override" -msgstr "Отключить переопределение на уровне пользователя" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" -"

Параметр для отдельных пользователей переопределяет общее значение, если " -"будет выбран один из вариантов.

Пароль + двухфакторная " -"аутентификация: в LDAP и Kerberos предусмотрена аутентификация по " -"одному из этих типов аутентификации, но Kerberos использует метод " -"предварительной аутентификации, который требует использования armor ccache." -"

RADIUS с другим типом: в Kerberos всегда " -"используется RADIUS, а в LDAP он не используется никогда. LDAP распознаёт " -"только варианты аутентификации по паролю и двухфакторной аутентификации.

" - -msgid "About" -msgstr "О программе" - -msgid "Activate" -msgstr "Активировать" - -msgid "Add and Add Another" -msgstr "Добавить и добавить ещё" - -msgid "Add and Close" -msgstr "Добавить и закрыть" - -msgid "Add and Edit" -msgstr "Добавить и изменить" - -msgid "Add Many" -msgstr "Добавить много" - -msgid "Back" -msgstr "Назад" - -msgid "Cancel" -msgstr "Отменить" - -msgid "Clear" -msgstr "Очистить" - -msgid "Clear all fields on the page." -msgstr "Очистить все поля на странице." - -msgid "Close" -msgstr "Закрыть" - -msgid "Disable" -msgstr "Отключить" - -msgid "Download" -msgstr "Загрузить" - -msgid "Download certificate as PEM formatted file." -msgstr "Загрузить сертификат в виде файла в формате PEM." - -msgid "Edit" -msgstr "Изменить" - -msgid "Enable" -msgstr "Включить" - -msgid "Find" -msgstr "Найти" - -msgid "Get" -msgstr "Получить" - -msgid "Hide" -msgstr "Скрыть" - -msgid "Issue" -msgstr "Выдать" - -msgid "Match" -msgstr "Сопоставить" - -msgid "Match users according to certificate." -msgstr "Установить соответствие пользователей по сертификату." - -msgid "Migrate" -msgstr "Перенести" - -msgid "OK" -msgstr "OK" - -msgid "Refresh" -msgstr "Обновить" - -msgid "Reload current settings from the server." -msgstr "Перезагрузить текущие параметры с сервера" - -msgid "Delete" -msgstr "Удалить" - -msgid "Remove hold" -msgstr "Отменить приостановку действия" - -msgid "Reset" -msgstr "Сбросить" - -msgid "Reset Password" -msgstr "Сбросить пароль" - -msgid "Reset Password and Log in" -msgstr "Сбросить пароль и войти" - -msgid "Restore" -msgstr "Восстановить" - -msgid "Retry" -msgstr "Повторить попытку" - -msgid "Revert" -msgstr "Вернуть" - -msgid "Revoke" -msgstr "Отозвать" - -msgid "Save" -msgstr "Сохранить" - -msgid "Set" -msgstr "Установить" - -msgid "Show" -msgstr "Показать" - -msgid "Stage" -msgstr "Сделать неподтверждённым" - -msgid "Update" -msgstr "Обновить" - -msgid "View" -msgstr "Показать" - -msgid "Customization" -msgstr "Настройка" - -msgid "Pagination Size" -msgstr "Размер для разбивки на страницы" - -msgid "Collapse All" -msgstr "Свернуть все" - -msgid "Expand All" -msgstr "Развернуть все" - -msgid "General" -msgstr "Основные" - -msgid "Identity Settings" -msgstr "Параметры идентификации" - -#, fuzzy -msgid "Record Settings" -msgstr "Параметры роли" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "Параметры ${primary_key} ${entity}" - -msgid "Back to Top" -msgstr "К началу" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "Обновлено ${primary_key} ${entity}" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "Успешно добавлено ${entity}" - -msgid "Add custom value" -msgstr "Добавить пользовательское значение" - -msgid "Available" -msgstr "Доступно" - -msgid "Some operations failed." -msgstr "Не удалось выполнить некоторые операции." - -msgid "Operations Error" -msgstr "Ошибка операций" - -msgid "Confirmation" -msgstr "Подтверждение" - -msgid "Custom value" -msgstr "Пользовательское значение" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" -"На этой странице имеются несохранённые изменения. Пожалуйста, сохраните или " -"отмените их. " - -msgid "Unsaved Changes" -msgstr "Несохранённые изменения" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "Изменить ${entity}" - -msgid "Hide details" -msgstr "Скрыть подробности" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "${product}, версия: ${version}" - -msgid "Prospective" -msgstr "Ожидается" - -msgid "Redirection" -msgstr "Перенаправление" - -msgid "Select entries to be removed." -msgstr "Выбранные записи, которые следует удалить." - -msgid "Result" -msgstr "Результат" - -msgid "Show details" -msgstr "Показать подробные сведения" - -msgid "Success" -msgstr "Успех" - -msgid "Validation error" -msgstr "Ошибка подтверждения" - -msgid "Input form contains invalid or missing values." -msgstr "Форма ввода данных содержит недопустимые или отсутствующие значения." - -msgid "Please try the following options:" -msgstr "Попробуйте использовать следующие параметры:" - -msgid "If the problem persists please contact the system administrator." -msgstr "" -"При повторном возникновении проблемы обратитесь к системному администратору." - -msgid "Refresh the page." -msgstr "Обновить страницу." - -msgid "Reload the browser." -msgstr "Перезапустить браузер." - -msgid "Return to the main page and retry the operation" -msgstr "Вернуться на главную страницу и снова попытаться выполнить операцию" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "Произошла ошибка (${error})" - -msgid "HTTP Error" -msgstr "Ошибка HTTP" - -msgid "Internal Error" -msgstr "Внутренняя ошибка" - -msgid "IPA Error" -msgstr "Ошибка IPA" - -msgid "No response" -msgstr "Нет ответа" - -msgid "Unknown Error" -msgstr "Неизвестная ошибка" - -msgid "URL" -msgstr "URL-адрес" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "${primary_key} управляется:" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "Участники ${primary_key}:" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "${primary_key} является участником:" - -#, fuzzy, python-brace-format -msgid "${primary_key} member managers:" -msgstr "Участники ${primary_key}:" - -msgid "Settings" -msgstr "Параметры" - -msgid "Search" -msgstr "Поиск" - -msgid "False" -msgstr "Нет (False)" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" -"Разрешить группам пользователей создавать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Разрешить группам пользователей получать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "Разрешить группам узлов создавать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "Разрешить группам узлов получать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "Разрешить узлам создавать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "Разрешить узлам получать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "Разрешить пользователям создавать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "Разрешить пользователям получать таблицу ключей '${primary_key}'" - -msgid "Allowed to create keytab" -msgstr "Разрешено создавать таблицу ключей" - -msgid "Allowed to retrieve keytab" -msgstr "Разрешено получать таблицу ключей" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" -"Запретить группам пользователей создавать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Запретить группам пользователей получать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "Запретить группам узлов создавать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "Запретить группам узлов получать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "Запретить узлам создавать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "Запретить узлам получать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "Запретить пользователям создавать таблицу ключей '${primary_key}'" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "Запретить пользователям получать таблицу ключей '${primary_key}'" - -msgid "Add Kerberos Principal Alias" -msgstr "Добавить псевдоним учётной записи Kerberos" - -msgid "New kerberos principal alias" -msgstr "Новый псевдоним учётной записи Kerberos" - -msgid "Remove Kerberos Alias" -msgstr "Удалить псевдоним Kerberos" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "Вы хотите удалить псевдоним Kerberos ${alias}?" - -msgid "Inherited from server configuration" -msgstr "Унаследовано из конфигурации сервера" - -msgid "MS-PAC" -msgstr "MS-PAC" - -msgid "Override inherited settings" -msgstr "Переопределить унаследованные параметры" - -msgid "PAD" -msgstr "PAD" - -msgid "Authenticating" -msgstr "Аутентификация" - -msgid "Authentication with personal certificate failed" -msgstr "Не удалось выполнить аутентификацию с личным сертификатом" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" -" Чтобы войти с помощью " -"сертификата, убедитесь, что у вас имеется действительный " -"личный сертификат. " - -msgid "Continue to next page" -msgstr "Перейти на следующую страницу" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" -" Чтобы войти с помощью имени " -"пользователя и пароля, введите их в соответствующие поля, затем " -"нажмите кнопку \"Войти\"." - -msgid "Login failed due to an unknown reason" -msgstr "Не удалось войти по неизвестной причине" - -msgid "Logged In As" -msgstr "Выполнен вход под именем" - -msgid "Authentication with Kerberos failed" -msgstr "Не удалось выполнить аутентификацию с Kerberos" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" -" Чтобы войти с помощью Kerberos, убедитесь, что у вас имеются действительные билеты (получить их " -"можно через kinit) и правильно настроен браузер, затем нажмите кнопку \"Войти\"." - -msgid "Loading" -msgstr "Загрузка" - -msgid "Kerberos Principal you entered is expired" -msgstr "Срок действия введённой учётной записи Kerberos истёк" - -msgid "Loading data" -msgstr "Загрузка данных" - -msgid "Log in" -msgstr "Войти" - -msgid "Log In Using Certificate" -msgstr "Войти с помощью сертификата" - -msgid "Log in using personal certificate" -msgstr "Войти с помощью личного сертификата" - -msgid "Log out" -msgstr "Выйти" - -msgid "Log out error" -msgstr "Ошибка при выходе" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "Вы будете перенаправлены через ${count}s" - -msgid "Sync OTP Token" -msgstr "Синхронизировать токен OTP" - -msgid "Synchronizing" -msgstr "Выполняется синхронизация" - -msgid "The user account you entered is locked" -msgstr "Введённая учётная запись пользователя заблокирована" - -msgid "number of passwords" -msgstr "количество паролей" - -msgid "seconds" -msgstr "в секундах" - -msgid "Migrating" -msgstr "Выполняется перенос" - -msgid "There was a problem with your request. Please, try again later." -msgstr "Ошибка при обработке запроса. Пожалуйста, повторите попытку позже." - -msgid "Password migration was not successful" -msgstr "Не удалось выполнить перенос пароля" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" -"

Перенос пароля

Если вас направил на эту страницу ваш системный " -"администратор, это означает, что ваши личные данные переносятся в новую " -"систему управления идентификацией и учётными записями пользователей (IPA).

Пожалуйста, введите ваши учётные данные в форму, чтобы завершить этот " -"процесс. После успешного выполнения входа ваша учётная запись Kerberos будет " -"активирована.

" - -msgid "The password or username you entered is incorrect" -msgstr "Введён неверный пароль или имя пользователя" - -msgid "Password migration was successful" -msgstr "Перенос пароля успешно завершён" - -msgid "Attribute" -msgstr "Атрибут" - -msgid "Add delegation" -msgstr "Добавить делегирование" - -msgid "Remove delegations" -msgstr "Удалить делегирования" - -msgid "Add permission" -msgstr "Добавить разрешение" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "Добавить привилегии в разрешение '${primary_key}'" - -msgid "Remove permissions" -msgstr "Удалить разрешения" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "Удалить привилегии из разрешения '${primary_key}'" - -msgid "Add privilege" -msgstr "Добавить привилегию" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "Добавить привилегию '${primary_key}' в разрешения" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "Добавить роли в привилегию '${primary_key}'" - -msgid "Remove privileges" -msgstr "Удалить привилегии" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "Удалить привилегию '${primary_key}' из разрешений" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "Удалить роли из привилегии '${primary_key}'" - -msgid "Role Settings" -msgstr "Параметры роли" - -msgid "Add role" -msgstr "Добавить роль" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "Добавить группы пользователей в роль '${primary_key}'" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "Добавить узлы в роль '${primary_key}'" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "Добавить группы узлов в роль '${primary_key}'" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "Добавить роль '${primary_key}' в привилегии" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "Добавить службы в роль '${primary_key}'" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "Добавить пользователей в роль '${primary_key}'" - -msgid "Remove roles" -msgstr "Удалить роли" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "Удалить роль '${primary_key}' из привилегий" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "Удалить группы пользователей из роли '${primary_key}'" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "Удалить узлы из роли '${primary_key}'" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "Удалить группы узлов из роли '${primary_key}'" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "Удалить службы из роли '${primary_key}'" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "Удалить пользователей из роли '${primary_key}'" - -msgid "Add self service permission" -msgstr "Добавить разрешение самообслуживания" - -msgid "Remove self service permissions" -msgstr "Удалить разрешения самообслуживания" - -msgid "Add rule" -msgstr "Добавить правило" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "Добавить включающее условие в '${primary_key}'" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "Добавить исключающее условие в '${primary_key}'" - -#, fuzzy -msgid "Are you sure you want to change default group?" -msgstr "" -"Вы действительно хотите сделать выбранных пользователей неподтверждёнными?" - -msgid "Default host group" -msgstr "Группа узлов по умолчанию" - -msgid "Default user group" -msgstr "Группа пользователей по умолчанию" - -msgid "Exclusive" -msgstr "Исключающий" - -msgid "Expression" -msgstr "Выражение" - -msgid "Host group rule" -msgstr "Правило группы узлов" - -msgid "Host group rules" -msgstr "Правила группы узлов" - -msgid "Inclusive" -msgstr "Включающий" - -msgid "Remove auto membership rules" -msgstr "Удалить правила автоучастия" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "Удалить исключающие условия из правила '${primary_key}'" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "Удалить включающие условия из правила '${primary_key}'" - -msgid "User group rule" -msgstr "Правило группы пользователей" - -msgid "User group rules" -msgstr "Правила группы пользователей" - -msgid "Add automount key" -msgstr "Добавить ключ автомонтирования" - -msgid "Remove automount keys" -msgstr "Удалить ключи автомонтирования" - -msgid "Add automount location" -msgstr "Добавить расположение автомонтирования" - -msgid "Automount Location Settings" -msgstr "Параметры расположения автомонтирования" - -msgid "Remove automount locations" -msgstr "Удалить расположения автомонтирования" - -msgid "Add automount map" -msgstr "Добавить список соответствия автомонтирования" - -msgid "Map Type" -msgstr "Тип списка соответствия" - -msgid "Direct" -msgstr "Прямой" - -msgid "Indirect" -msgstr "Непрямой" - -msgid "Remove automount maps" -msgstr "Удалить списки соответствия автомонтирования" - -msgid "Add certificate authority" -msgstr "Добавить центр сертификации" - -msgid "Remove certificate authorities" -msgstr "Удалить центры сертификации" - -msgid "Add CA ACL" -msgstr "Добавить CA ACL" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "Добавить центры сертификации в CA ACL '${primary_key}'" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "Добавить группы пользователей в CA ACL '${primary_key}'" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "Добавить группы узлов в CA ACL '${primary_key}'" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "Добавить узлы в CA ACL '${primary_key}'" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "Добавить профили сертификатов в CA ACL '${primary_key}'" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "Добавить службы в CA ACL '${primary_key}'" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "Добавить пользователей в CA ACL '${primary_key}'" - -msgid "All" -msgstr "Все" - -msgid "Any CA" -msgstr "Любой CA" - -msgid "Any Host" -msgstr "Любой узел" - -msgid "Any Service" -msgstr "Любая служба" - -msgid "Any Profile" -msgstr "Любой профиль" - -msgid "Anyone" -msgstr "Любой" - -msgid "Rule status" -msgstr "Состояние правила" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "Если CA не указаны, будут разрешены запросы к CA по умолчанию." - -msgid "Remove CA ACLs" -msgstr "Удалить CA ACL" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "Удалить центры сертификации из CA ACL '${primary_key}'" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "Удалить группы пользователей из CA ACL '${primary_key}'" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "Удалить группы узлов из CA ACL '${primary_key}'" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "Удалить узлы из CA ACL '${primary_key}'" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "Удалить профили сертификатов из CA ACL '${primary_key}'" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "Удалить службы из CA ACL '${primary_key}'" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "Удалить пользователей из CA ACL '${primary_key}'" - -msgid "Specified CAs" -msgstr "Указанные CA" - -msgid "Specified Hosts and Groups" -msgstr "Указанные узлы и группы" - -msgid "Specified Profiles" -msgstr "Указанные профили" - -msgid "Specified Services and Groups" -msgstr "Указанные службы и группы" - -msgid "Specified Users and Groups" -msgstr "Указанные пользователи и группы" - -msgid "Permitted to have certificates issued" -msgstr "Разрешено иметь выданные сертификаты" - -msgid "Remove certificate profiles" -msgstr "Удалить профили сертификатов" - -msgid "AA Compromise" -msgstr "Компрометация AA" - -msgid "Add principal" -msgstr "Добавить учётную запись" - -msgid "Affiliation Changed" -msgstr "Изменение принадлежности" - -msgid "CA" -msgstr "Центр сертификации (CA)" - -msgid "CA Compromise" -msgstr "Компрометация центра сертификации (CA)" - -msgid "Certificates" -msgstr "Сертификаты" - -msgid "Certificate Hold" -msgstr "Приостановка действия сертификата" - -msgid "Cessation of Operation" -msgstr "Прекращение действия" - -msgid "Common Name" -msgstr "Общее имя" - -msgid "the certificate with serial number " -msgstr "сертификат с серийным номером" - -msgid "Expires On" -msgstr "Истекает" - -msgid "Issued on from" -msgstr "Выдан с" - -msgid "Issued on to" -msgstr "Выдан до" - -msgid "Maximum serial number" -msgstr "Максимальный серийный номер" - -msgid "Minimum serial number" -msgstr "Минимальный серийный номер" - -msgid "Revoked on from" -msgstr "Отозван с" - -msgid "Revoked on to" -msgstr "Отозван до" - -msgid "Valid not after from" -msgstr "Действующий не позднее, чем с" - -msgid "Valid not after to" -msgstr "Действующий не позднее, чем до" - -msgid "Valid not before from" -msgstr "Действующий не ранее, чем с" - -msgid "Valid not before to" -msgstr "Действующий не ранее, чем до" - -msgid "Fingerprints" -msgstr "Отпечатки" - -msgid "Get Certificate" -msgstr "Получить сертификат" - -msgid "Certificate Hold Removed" -msgstr "Приостановка действия сертификата отменена" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "Выдать новый сертификат для узла '${primary_key}'" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "Выдать новый сертификат для службы '${primary_key}'" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "Выдать новый сертификат для пользователя '${primary_key}'" - -msgid "Issue new certificate" -msgstr "Выдать новый сертификат" - -msgid "Issued By" -msgstr "Выдан (издатель)" - -msgid "Issued On" -msgstr "Выдан (дата)" - -msgid "Issued To" -msgstr "Выдан для" - -msgid "Key Compromise" -msgstr "Компрометация ключа" - -msgid "No Valid Certificate" -msgstr "Отсутствуют действительные сертификаты" - -msgid "New Certificate" -msgstr "Новый сертификат" - -msgid "Certificate in base64 or PEM format" -msgstr "Сертификат в формате base64 или PEM" - -msgid "Note" -msgstr "Примечание" - -msgid "Organizational Unit" -msgstr "Организационное подразделение" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "Имеется сертификатов: ${count}" - -msgid "Privilege Withdrawn" -msgstr "Отзыв привилегии" - -msgid "Reason for Revocation" -msgstr "Причина отзыва" - -msgid "Remove certificate hold" -msgstr "Отменить приостановку действия сертификата" - -msgid "Do you want to remove the certificate hold?" -msgstr "Вы хотите отменить приостановку действия сертификата?" - -msgid "Remove from CRL" -msgstr "Удаление из списка отзыва сертификатов (CRL)" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" -"
  1. Создать базу данных сертификатов или использовать существующую. " -"Чтобы создать новую базу данных, выполните команду:
    # certutil -N " -"-d <путь к базе данных>
  2. Создайте CSR с субъектом " -"CN=<${cn_name}>,O=<область (realm)>, например:
    " -"# certutil -R -d <путь к базе данных> -a -g <размер ключа> " -"-s 'CN=${cn},O=${realm}'${san}
  3. Скопируйте и вставьте CSR " -"(от -----BEGIN NEW CERTIFICATE REQUEST----- до -----END NEW " -"CERTIFICATE REQUEST-----) в расположенную ниже область для ввода " -"текста:
" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr " -8 '${cn}'" - -msgid "Certificate requested" -msgstr "Отправлен запрос сертификата" - -msgid "Revoke certificate" -msgstr "Отозвать сертификат" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" -"Вы хотите отозвать этот сертификат? Выберите причину в раскрывающемся списке." - -msgid "Certificate Revoked" -msgstr "Сертификат отозван" - -msgid "REVOKED" -msgstr "ОТОЗВАНО" - -msgid "SHA1 Fingerprint" -msgstr "Отпечаток SHA1" - -msgid "SHA256 Fingerprint" -msgstr "Отпечаток SHA256" - -msgid "Status" -msgstr "Состояние" - -msgid "Superseded" -msgstr "Замена" - -msgid "Unspecified" -msgstr "Не указана" - -msgid "Valid Certificate Present" -msgstr "Имеется действительный сертификат" - -msgid "Valid from" -msgstr "Действителен с" - -msgid "Valid to" -msgstr "Действителен до" - -msgid "Validity" -msgstr "Действительность" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "Сертификат для ${primary_key} ${entity}" - -msgid "View Certificate" -msgstr "Просмотреть сертификат" - -msgid "Certificate Data" -msgstr "Данные сертификата" - -msgid "Certificate For Match" -msgstr "Сертификат для соответствия" - -msgid "Certificate Mapping Match" -msgstr "Соответствие сопоставления сертификата" - -msgid "Matched Users" -msgstr "Соответствующие пользователи" - -msgid "User Login" -msgstr "Имя учётной записи пользователя" - -msgid "Add certificate identity mapping rule" -msgstr "Добавить правило сопоставления сертификатов с записями пользователей" - -msgid "Add certificate mapping data" -msgstr "Добавить данные сопоставления сертификата" - -msgid "Configuration string" -msgstr "Строка конфигурации" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "Вы хотите удалить данные сопоставления сертификата ${data}?" - -msgid "Remove certificate mapping data" -msgstr "Удалить данные сопоставления сертификата" - -msgid "Issuer and subject" -msgstr "Издатель и субъект" - -msgid "Remove certificate identity mapping rules" -msgstr "Удалить правила сопоставления сертификатов с записями пользователей" - -msgid "Group Options" -msgstr "Параметры группы" - -msgid "Search Options" -msgstr "Параметры поиска" - -msgid "SELinux Options" -msgstr "Параметры SELinux" - -msgid "Server Options" -msgstr "Параметры сервера" - -msgid "Service Options" -msgstr "Параметры службы" - -msgid "User Options" -msgstr "Параметры пользователя" - -msgid "Forward first" -msgstr "Сначала перенаправлять" - -msgid "Forwarding disabled" -msgstr "Перенаправление отключено" - -msgid "Forward only" -msgstr "Только перенаправлять" - -msgid "Options" -msgstr "Параметры" - -msgid "Update System DNS Records" -msgstr "Обновить записи DNS системы" - -msgid "Do you want to update system DNS records?" -msgstr "Вы хотите обновить записи DNS системы?" - -msgid "System DNS records updated" -msgstr "Записи DNS системы обновлены" - -msgid "Add DNS forward zone" -msgstr "Добавить зону перенаправления DNS" - -msgid "Remove DNS forward zones" -msgstr "Удалить зоны перенаправления DNS" - -msgid "Add DNS resource record" -msgstr "Добавить запись ресурса DNS" - -msgid "DNS record was deleted because it contained no data." -msgstr "Запись DNS была удалена, так как не содержала данные." - -msgid "Other Record Types" -msgstr "Другие типы записей" - -msgid "Address not valid, can't redirect" -msgstr "Адрес недействителен, перенаправление невозможно" - -msgid "Create dns record" -msgstr "Создать запись DNS" - -msgid "Creating record." -msgstr "Создание записи." - -msgid "Record creation failed." -msgstr "Не удалось создать запись." - -msgid "Checking if record exists." -msgstr "Проверка существования записи." - -msgid "Record not found." -msgstr "Запись не найдена." - -msgid "Redirection to PTR record" -msgstr "Перенаправление на запись PTR" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "Найдена зона: ${zone}" - -msgid "Target reverse zone not found." -msgstr "Целевая обратная зона не найдена." - -msgid "Fetching DNS zones." -msgstr "Получение данных зон DNS." - -msgid "An error occurred while fetching dns zones." -msgstr "Ошибка при получении данных зон DNS." - -msgid "You will be redirected to DNS Zone." -msgstr "Вы будете перенаправлены в зону DNS." - -msgid "Remove DNS resource records" -msgstr "Удалить записи ресурсов DNS" - -msgid "Standard Record Types" -msgstr "Стандартные типы записей" - -msgid "Records for DNS Zone" -msgstr "Записи зоны DNS" - -msgid "Record Type" -msgstr "Тип записи" - -msgid "Add DNS zone" -msgstr "Добавить зону DNS" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "Вы действительно хотите добавить разрешение для зоны DNS ${object}?" - -msgid "DNS Zone Settings" -msgstr "Параметры зоны DNS" - -msgid "Remove DNS zones" -msgstr "Удалить зоны DNS" - -msgid "Remove Permission" -msgstr "Удалить разрешение" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "Вы действительно хотите удалить разрешение для зоны DNS ${object}?" - -msgid "Skip DNS check" -msgstr "Пропустить проверку DNS" - -msgid "Skip overlap check" -msgstr "Пропустить проверку пересечения" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" -"Следует ли проверить, есть ли адрес нового полномочного сервера имён в DNS" - -msgid "Authoritative nameserver change" -msgstr "Изменение полномочного сервера имён" - -msgid "Level" -msgstr "Уровень" - -msgid "Set Domain Level" -msgstr "Указать уровень домена" - -msgid "Add user group" -msgstr "Добавить группу пользователей" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "Добавить группы пользователей в группу пользователей '${primary_key}'" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "Добавить группу пользователей '${primary_key}' в группы пользователей" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "Добавить группу пользователей '${primary_key}' в правила HBAC" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "Добавить группу пользователей '${primary_key}' в сетевые группы" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "Добавить группу пользователей '${primary_key}' в роли" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "Добавить группу пользователей '${primary_key}' в правила Sudo" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "Добавить службы в группу пользователей '${primary_key}'" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "Добавить пользователей в группу пользователей '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "Добавить группы пользователей в группу пользователей '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "Удалить группы пользователей из группы пользователей '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "Добавить пользователей в группу пользователей '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "Удалить пользователей из группы пользователей '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "Добавить службы в группу пользователей '${primary_key}'" - -msgid "Group Settings" -msgstr "Параметры группы" - -msgid "External" -msgstr "Внешний" - -msgid "Groups" -msgstr "Группы" - -msgid "Group categories" -msgstr "Категории групп" - -msgid "Change to external group" -msgstr "Изменение на внешнюю группу" - -msgid "Change to POSIX group" -msgstr "Изменение на POSIX-группу" - -msgid "Non-POSIX" -msgstr "Не POSIX" - -msgid "POSIX" -msgstr "POSIX" - -msgid "Remove user groups" -msgstr "Удалить группы пользователей" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "Удалить группу пользователей '${primary_key}' из групп пользователей" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "Удалить группу пользователей '${primary_key}' из сетевых групп" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "Удалить группу пользователей '${primary_key}' из ролей" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "Удалить группу пользователей '${primary_key}' из правил HBAC" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "Удалить группу пользователей '${primary_key}' из правил Sudo" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "Удалить группы пользователей из группы пользователей '${primary_key}'" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "Удалить службы из группы пользователей '${primary_key}'" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "Удалить пользователей из группы пользователей '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "Удалить службы из группы пользователей '${primary_key}'" - -msgid "Group Type" -msgstr "Тип группы" - -msgid "Add HBAC rule" -msgstr "Добавить правило HBAC" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "Добавить группы пользователей в правило HBAC '${primary_key}'" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "Добавить группы узлов в правило HBAC '${primary_key}'" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "Добавить узлы в правило HBAC '${primary_key}'" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "Добавить группы служб HBAC в правило HBAC '${primary_key}'" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "Добавить службы HBAC в правило HBAC '${primary_key}'" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "Добавить пользователей в правило HBAC '${primary_key}'" - -msgid "Accessing" -msgstr "Получение доступа" - -msgid "Remove HBAC rules" -msgstr "Удалить правила HBAC" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "Удалить группы пользователей из правила HBAC '${primary_key}'" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "Удалить группы узлов из правила HBAC '${primary_key}'" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "Удалить узлы из правила HBAC '${primary_key}'" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "Удалить группы служб HBAC из правила HBAC '${primary_key}'" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "Удалить службы HBAC из правила HBAC '${primary_key}'" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "Удалить пользователей из правила HBAC '${primary_key}'" - -msgid "Via Service" -msgstr "Служба для использования" - -msgid "Who" -msgstr "Кто" - -msgid "Add HBAC service" -msgstr "Добавить службу HBAC" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "Добавить службу HBAC '${primary_key}' в группы служб HBAC" - -msgid "Remove HBAC services" -msgstr "Удалить службы HBAC" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "Удалить службу HBAC '${primary_key}' из групп служб HBAC" - -msgid "Add HBAC service group" -msgstr "Добавить группу служб HBAC" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "Добавить службы HBAC в группу служб HBAC '${primary_key}'" - -msgid "Remove HBAC service groups" -msgstr "Удалить группы служб HBAC" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "Удалить службы HBAC из группы служб HBAC '${primary_key}'" - -msgid "Access Denied" -msgstr "Отказано в доступе" - -msgid "Access Granted" -msgstr "Доступ предоставлен" - -msgid "Include Disabled" -msgstr "Включать отключённые" - -msgid "Include Enabled" -msgstr "Включать включённые" - -msgid "HBAC Test" -msgstr "Проверка HBAC" - -msgid "Matched" -msgstr "Установлено соответствие" - -msgid "Missing values: " -msgstr "Отсутствующие значения:" - -msgid "New Test" -msgstr "Новая проверка" - -msgid "Rules" -msgstr "Правила" - -msgid "Run Test" -msgstr "Выполнить проверку" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "Указать внешний адрес: ${entity}" - -msgid "Unmatched" -msgstr "Соответствие не установлено" - -msgid "Add host" -msgstr "Добавить узел" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "Добавить узлы, которые управляют узлом '${primary_key}'" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "Добавить узел '${primary_key}' в группы узлов" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "Добавить узел '${primary_key}' в правила HBAC" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "Добавить узел '${primary_key}' в сетевые группы" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "Добавить узел '${primary_key}' в роли" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "Добавить узел '${primary_key}' в правила Sudo" - -msgid "Host Certificate" -msgstr "Сертификат узла" - -msgid "Host Name" -msgstr "Имя узла" - -msgid "Delete Key, Unprovision" -msgstr "Удалить ключ, отменить подготовку к работе" - -msgid "Host Settings" -msgstr "Параметры узла" - -msgid "Enrolled" -msgstr "Зарегистрировано" - -msgid "Enrollment" -msgstr "Регистрация" - -msgid "Fully Qualified Host Name" -msgstr "Полное имя узла" - -msgid "Generate OTP" -msgstr "Создать OTP" - -msgid "Generated OTP" -msgstr "Созданный OTP" - -msgid "Kerberos Key" -msgstr "Ключ Kerberos" - -msgid "Kerberos Key Not Present" -msgstr "Отсутствует ключ Kerberos" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "Имеется ключ Kerberos, узел подготовлен к работе" - -#, fuzzy -msgid "One-Time Password" -msgstr "Одноразовый пароль" - -#, fuzzy -msgid "One-Time Password Not Present" -msgstr "Одноразовый пароль" - -#, fuzzy -msgid "One-Time Password Present" -msgstr "Одноразовый пароль" - -msgid "Reset OTP" -msgstr "Сбросить OTP" - -#, fuzzy -msgid "Reset One-Time Password" -msgstr "Одноразовый пароль" - -msgid "Set OTP" -msgstr "Установить OTP" - -msgid "OTP set" -msgstr "Установлен OTP" - -#, fuzzy -msgid "Set One-Time Password" -msgstr "Одноразовый пароль" - -msgid "Remove hosts" -msgstr "Удалить узлы" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "Удалить узлы, которые управляют узлом '${primary_key}'" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "Удалить узел '${primary_key}' из групп узлов" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "Удалить узел '${primary_key}' из сетевых групп" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "Удалить узел '${primary_key}' из ролей" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "Удалить узел '${primary_key}' из правил HBAC" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "Удалить узел '${primary_key}' из правил Sudo" - -msgid "Unprovision" -msgstr "Отменить подготовку" - -msgid "Are you sure you want to unprovision this host?" -msgstr "Вы действительно хотите отменить подготовку этого узла?" - -msgid "Unprovisioning host" -msgstr "Отмена подготовки узла" - -msgid "Host unprovisioned" -msgstr "Узел, подготовка которого к работе отменена" - -msgid "Add host group" -msgstr "Добавить группу узлов" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "Добавить узлы в группу узлов '${primary_key}'" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "Добавить группы узлов в группу узлов '${primary_key}'" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "Добавить группу узлов '${primary_key}' в группы узлов" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "Добавить группу узлов '${primary_key}' в правила HBAC" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "Добавить группу узлов '${primary_key}' в сетевые группы" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "Добавить группу узлов '${primary_key}' в правила Sudo" - -#, fuzzy, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "Добавить группы узлов в группу узлов '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "Удалить группы узлов из группы узлов '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "Добавить пользователей в группу пользователей '${primary_key}'" - -#, fuzzy, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "Удалить пользователей из сетевой группы '${primary_key}'" - -msgid "Host Group Settings" -msgstr "Параметры группы узлов" - -msgid "Remove host groups" -msgstr "Удалить группы узлов" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "Удалить группу узлов '${primary_key}' из групп узлов" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "Удалить группу узлов '${primary_key}' из сетевых групп" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "Удалить группу узлов '${primary_key}' из правил HBAC" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "Удалить группу узлов '${primary_key}' из правил Sudo" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "Удалить узлы из группы узлов '${primary_key}'" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "Удалить группы узлов из группы узлов '${primary_key}'" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -#, fuzzy -#| msgid "Servers details:" -msgid "Identity provider details" -msgstr "Сведения о серверах:" - -#, fuzzy -#| msgid "Verify Password" -msgid "Verify secret" -msgstr "Проверить пароль" - -msgid "User to override" -msgstr "Пользователь, которого следует переопределить" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" -"Введите имя учётной записи доверенного пользователя или пользователя IPA. " -"Примечание: в списке результатов поиска не будет записей пользователей из " -"доверенных доменов." - -msgid "Enter trusted user login." -msgstr "Введите имя учётной записи доверенного пользователя." - -msgid "Profile" -msgstr "Профиль" - -msgid "Group to override" -msgstr "Группа, которую следует переопределить" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" -"Введите имя учётной записи доверенной группы или группы IPA. Примечание: в " -"списке результатов поиска не будет записей групп из доверенных доменов." - -msgid "Enter trusted group name." -msgstr "Введите имя доверенной группы." - -msgid "Add ID view" -msgstr "Добавить представление ID" - -msgid "Add group ID override" -msgstr "Добавить переопределение ID группы" - -msgid "Add user ID override" -msgstr "Добавить переопределение ID пользователя" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "${primary_key} применяется к:" - -msgid "Applied to hosts" -msgstr "Применено к узлам" - -msgid "Apply to host groups" -msgstr "Применить к группам узлов" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "Применить представление ID '${primary_key}' к узлам групп узлов" - -msgid "Apply to hosts" -msgstr "Применить к узлам" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "Применить представление ID '${primary_key}' к узлам" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "${primary_key} переопределяет:" - -msgid "Remove ID views" -msgstr "Удалить представления ID" - -msgid "Remove user ID overrides" -msgstr "Удалить переопределения ID пользователя" - -msgid "Remove group ID overrides" -msgstr "Удалить переопределения ID группы" - -msgid "Un-apply from host groups" -msgstr "Отменить применение к группам узлов" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "Отменить применение представлений ID к узлам групп узлов" - -msgid "Un-apply" -msgstr "Отменить применение" - -msgid "Un-apply from hosts" -msgstr "Отменить применение к узлам" - -msgid "Un-apply ID Views from hosts" -msgstr "Отменить применение представлений ID к узлам" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" -"Вы действительно хотите отменить применение представления ID к выбранным " -"записям?" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "Отменить применение представления ID '${primary_key}' к узлам" - -msgid "Kerberos Ticket Policy" -msgstr "Политика билетов Kerberos" - -msgid "Add netgroup" -msgstr "Добавить сетевую группу" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "Добавить сетевую группу '${primary_key}' в сетевые группы" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "Добавить сетевые группы в сетевую группу '${primary_key}'" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "Добавить группы пользователей в сетевую группу '${primary_key}'" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "Добавить узлы в сетевую группу '${primary_key}'" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "Добавить группы узлов в сетевую группу '${primary_key}'" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "Добавить пользователей в сетевую группу '${primary_key}'" - -msgid "Netgroup Settings" -msgstr "Параметры сетевой группы" - -msgid "Remove netgroups" -msgstr "Удалить сетевые группы" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "Удалить сетевую группу '${primary_key}' из сетевых групп" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "Удалить группы пользователей из сетевой группы '${primary_key}'" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "Удалить узлы из сетевой группы '${primary_key}'" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "Удалить группы узлов из сетевой группы '${primary_key}'" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "Удалить сетевые группы из сетевой группы '${primary_key}'" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "Удалить пользователей из сетевой группы '${primary_key}'" - -msgid "Add OTP token" -msgstr "Добавить токен OTP" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "Добавить пользователей, которые управляют токеном OTP '${primary_key}'" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" -"В качестве приложения для работы с токенами OTP можно использовать FreeOTP." - -msgid "Configure your token" -msgstr "Настройте ваш токен" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" -"Настройте ваш токен, отсканировав расположенный ниже QR-код. Щёлкните по QR-" -"коду, если видите правильные данные на устройстве, которое вы хотите " -"настроить." - -msgid "OTP Token Settings" -msgstr "Параметры токена OTP" - -msgid "Disable token" -msgstr "Отключить токен" - -msgid "Enable token" -msgstr "Включить токен" - -msgid "Remove OTP tokens" -msgstr "Удалить токены OTP" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "Удалить пользователей, которые управляют токеном OTP '${primary_key}'" - -msgid "Show QR code" -msgstr "Показать QR-код" - -msgid "Show configuration uri" -msgstr "Показать адрес конфигурации" - -msgid "Counter-based (HOTP)" -msgstr "На основе счётчика (HOTP)" - -msgid "Time-based (TOTP)" -msgstr "На основе времени (TOTP)" - -msgid "Add Custom Attribute" -msgstr "Добавить пользовательский атрибут" - -msgid "Permission settings" -msgstr "Параметры разрешений" - -msgid "Attribute breakdown" -msgstr "Разбивка по атрибутам" - -msgid "Privilege Settings" -msgstr "Параметры привилегий" - -msgid "Public key:" -msgstr "Открытый ключ:" - -msgid "Set public key" -msgstr "Установить открытый ключ" - -msgid "Show/Set key" -msgstr "Показать или установить ключ" - -msgid "Modified: key not set" -msgstr "Изменено: ключ не установлен" - -msgid "Modified" -msgstr "Изменено" - -msgid "New: key not set" -msgstr "Новый: ключ не установлен" - -msgid "New: key set" -msgstr "Новый: ключ установлен" - -msgid "Add password policy" -msgstr "Добавить политику паролей" - -msgid "Password Policy" -msgstr "Политика паролей" - -msgid "Remove password policies" -msgstr "Удалить политики паролей" - -msgid "Add ID range" -msgstr "Добавить диапазон идентификаторов" - -msgid "Range Settings" -msgstr "Параметры диапазона" - -msgid "Base ID" -msgstr "Основной ID" - -msgid "Primary RID base" -msgstr "Основа основного RID" - -msgid "Range size" -msgstr "Размер диапазона" - -msgid "Domain SID" -msgstr "SID домена" - -msgid "Secondary RID base" -msgstr "Основа вторичного RID" - -msgid "Remove ID ranges" -msgstr "Удалить диапазоны идентификаторов" - -msgid "Active Directory domain with POSIX attributes" -msgstr "Домен Active Directory с атрибутами POSIX" - -msgid "Detect" -msgstr "Определить" - -msgid "Local domain" -msgstr "Локальный домен" - -msgid "IPA trust" -msgstr "Отношение доверия IPA" - -msgid "Active Directory winsync" -msgstr "winsync Active Directory" - -msgid "Add RADIUS server" -msgstr "Добавить сервер RADIUS" - -msgid "RADIUS Proxy Server Settings" -msgstr "Параметры прокси-сервера RADIUS" - -msgid "Remove RADIUS servers" -msgstr "Удалить серверы RADIUS" - -msgid "Check DNS" -msgstr "Проверить DNS" - -msgid "Do you also want to perform DNS check?" -msgstr "Вы хотите также выполнить проверку DNS?" - -msgid "Force Update" -msgstr "Принудительное обновление" - -msgid "Add SELinux user map" -msgstr "Добавить список пользователей SELinux" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" -"Добавить группы пользователей в список пользователей SELinux '${primary_key}'" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "Добавить группы узлов в список пользователей SELinux '${primary_key}'" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "Добавить узлы в список пользователей SELinux '${primary_key}'" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "Добавить пользователей в список пользователей SELinux '${primary_key}'" - -msgid "Remove selinux user maps" -msgstr "Удалить списки пользователей SELinux" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" -"Удалить группы пользователей из списка пользователей SELinux '${primary_key}'" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "Удалить группы узлов из списка пользователей SELinux '${primary_key}'" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "Удалить узлы из списка пользователей SELinux '${primary_key}'" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "Удалить пользователей из списка пользователей SELinux '${primary_key}'" - -msgid "Server Roles" -msgstr "Роли сервера" - -msgid "Server Role" -msgstr "Роль сервера" - -msgid "Warning: Consider service replication" -msgstr "Предупреждение: рекомендуется использовать репликацию служб" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" -"Настоятельно рекомендуется установить следующие службы на нескольких " -"серверах:" - -msgid "Delete Server" -msgstr "Удалить сервер" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" -"Удаление сервера приводит к его необратимому удалению из топологии. Это " -"действие нельзя отменить." - -msgid "Add service" -msgstr "Добавить службу" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "Добавить узлы, которые управляют службой '${primary_key}'" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "Добавить службу '${primary_key}' в роли" - -msgid "Service Certificate" -msgstr "Сертификат службы" - -msgid "Service Settings" -msgstr "Параметры службы" - -msgid "Provisioning" -msgstr "Подготовка" - -msgid "Remove services" -msgstr "Удалить службы" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "Удалить службу '${primary_key}' из ролей" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "Удалить узлы, которые управляют службой '${primary_key}'" - -msgid "Are you sure you want to unprovision this service?" -msgstr "Вы действительно хотите отменить подготовку этой службы?" - -msgid "Unprovisioning service" -msgstr "Отмена подготовки службы" - -msgid "Service unprovisioned" -msgstr "Служба, подготовка которой к работе отменена" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "Имеется ключ Kerberos, служба подготовлена к работе" - -msgid "SSH public keys" -msgstr "Открытые ключи SSH" - -msgid "SSH public key:" -msgstr "Открытый ключ SSH:" - -msgid "Set SSH key" -msgstr "Указать ключ SSH" - -msgid "Are you sure you want to activate selected users?" -msgstr "Вы действительно хотите активировать выбранные записи пользователей?" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "Вы действительно хотите активировать ${object}?" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "Активировано пользователей: ${count}" - -msgid "Add stage user" -msgstr "Добавить неподтверждённого пользователя" - -msgid "Stage users" -msgstr "Неподтверждённые пользователи" - -msgid "Preserved users" -msgstr "Хранимые пользователи" - -msgid "Remove preserved users" -msgstr "Удалить хранимых пользователей" - -msgid "Remove stage users" -msgstr "Удалить неподтверждённых пользователей" - -msgid "Are you sure you want to stage selected users?" -msgstr "" -"Вы действительно хотите сделать выбранных пользователей неподтверждёнными?" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "Пользователей, сделанных неподтверждёнными: ${count}" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "Вы действительно хотите разместить ${object} на хранение?" - -msgid "Are you sure you want to restore selected users?" -msgstr "Вы действительно хотите восстановить выбранные записи пользователей?" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "Вы действительно хотите восстановить ${object}?" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "Восстановлено пользователей: ${count}" - -msgid "User categories" -msgstr "Категории пользователей" - -#, fuzzy -msgid "Add subid" -msgstr "Добавить правило Sudo" - -#, fuzzy -msgid "Assigned subids" -msgstr "Назначенное представление ID" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -msgid "Add sudo command" -msgstr "Добавить команду Sudo" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "Добавить команду Sudo '${primary_key}' в группы команд Sudo" - -msgid "Remove sudo commands" -msgstr "Удалить команды Sudo" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "Удалить команду Sudo '${primary_key}' из групп команд Sudo" - -msgid "Add sudo command group" -msgstr "Добавить группу команд Sudo" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "Добавить команды Sudo в группу команд Sudo '${primary_key}'" - -msgid "Remove sudo command groups" -msgstr "Удалить группы команд Sudo" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "Удалить команды Sudo из группы команд Sudo '${primary_key}'" - -msgid "Add sudo rule" -msgstr "Добавить правило Sudo" - -msgid "Add sudo option" -msgstr "Добавить параметр Sudo" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "Добавить разрешённые команды Sudo в правило Sudo '${primary_key}'" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" -"Добавить группы разрешённых команд Sudo в правило Sudo '${primary_key}'" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "Добавить запрещённые команды Sudo в правило Sudo '${primary_key}'" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" -"Добавить группы запрещённых команд Sudo в правило Sudo '${primary_key}'" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "Добавить группы пользователей в правило Sudo '${primary_key}'" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "Добавить группы узлов в правило Sudo '${primary_key}'" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "Добавить узлы в правило Sudo '${primary_key}'" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" -"Добавить пользователей запуска от имени в правило Sudo '${primary_key}'" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" -"Добавить группы пользователей запуска от имени в правило Sudo " -"'${primary_key}'" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "Добавить группы запуска от имени в правило Sudo '${primary_key}'" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "Добавить пользователей в правило Sudo '${primary_key}'" - -msgid "Allow" -msgstr "Разрешить" - -msgid "Any Command" -msgstr "Любая команда" - -msgid "Any Group" -msgstr "Любая группа" - -msgid "Run Commands" -msgstr "Выполнить команды" - -msgid "Deny" -msgstr "Запретить" - -msgid "Access this host" -msgstr "Получить доступ к узлу" - -msgid "Option added" -msgstr "Параметр добавлен" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "Удалено параметров: ${count}" - -msgid "Remove sudo rules" -msgstr "Удалить правила Sudo" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "Удалить разрешённые команды Sudo из правила Sudo '${primary_key}'" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" -"Удалить группы разрешённых команд Sudo из правила Sudo '${primary_key}'" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "Удалить запрещённые команды Sudo из правила Sudo '${primary_key}'" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" -"Удалить группы запрещённых команд Sudo из правила Sudo '${primary_key}'" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "Удалить группы пользователей из правила Sudo '${primary_key}'" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "Удалить группы узлов из правила Sudo '${primary_key}'" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "Удалить узлы из правила Sudo '${primary_key}'" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" -"Удалить пользователей запуска от имени из правила Sudo '${primary_key}'" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" -"Удалить группы пользователей запуска от имени из правила Sudo " -"'${primary_key}'" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "Удалить группы запуска от имени из правила Sudo '${primary_key}'" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "Удалить пользователей из правила Sudo '${primary_key}'" - -msgid "As Whom" -msgstr "В качестве" - -msgid "Specified Commands and Groups" -msgstr "Указанные команды и группы" - -msgid "Specified Groups" -msgstr "Указанные группы" - -msgid "Remove sudo options" -msgstr "Удалить параметры Sudo" - -msgid "Autogenerated" -msgstr "Созданные автоматически" - -msgid "Segment details" -msgstr "Свойства сегмента" - -msgid "Replication configuration" -msgstr "Конфигурация репликации" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" -"Управляемая топология требует минимального уровня домена ${domainlevel}" - -msgid "Add IPA location" -msgstr "Добавить расположение IPA" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "Добавить IPA-сервер в расположение IPA '${primary_key}'" - -msgid "Remove IPA locations" -msgstr "Удалить расположения IPA" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "Удалить IPA-серверы из расположения IPA '${primary_key}'" - -msgid "Add topology segment" -msgstr "Добавить сегмент топологии" - -msgid "Remove topology segments" -msgstr "Удалить сегменты топологии" - -msgid "Account" -msgstr "Учётная запись" - -msgid "Add trust" -msgstr "Добавить отношение доверия" - -msgid "Administrative account" -msgstr "Учётная запись администратора" - -#, fuzzy -msgid "SID blocklists" -msgstr "Входящий \"чёрный список\" SID" - -msgid "Trust Settings" -msgstr "Параметры отношения доверия" - -msgid "Establish using" -msgstr "Установить с помощью" - -msgid "Fetch domains" -msgstr "Получить домены" - -msgid "Pre-shared password" -msgstr "Общий пароль" - -msgid "Remove trusts" -msgstr "Удалить отношения доверия" - -msgid "Remove domains" -msgstr "Удалить домены" - -msgid "Alternative UPN suffixes" -msgstr "Альтернативные суффиксы UPN" - -msgid "User attributes for SMB services" -msgstr "Пользовательские атрибуты для служб SMB" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "Путь к сценарию, исполняемому в системе Windows при входе" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "Путь к профилю пользователя, в формате UNC \\\\server\\share\\" - -msgid "Path to a user home directory, in UNC format" -msgstr "Путь к домашнему каталогу пользователя, в формате UNC" - -msgid "Drive to mount a home directory" -msgstr "Диск для монтирования домашнего каталога" - -msgid "Account Settings" -msgstr "Параметры учётной записи" - -msgid "Account Status" -msgstr "Состояние учётной записи" - -msgid "Active users" -msgstr "Активные пользователи" - -msgid "Add user" -msgstr "Добавить пользователя" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "Добавить пользователя '${primary_key}' в группы пользователей" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "Добавить пользователя '${primary_key}' в правила HBAC" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "Добавить пользователя '${primary_key}' в сетевые группы" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "Добавить пользователя '${primary_key}' в роли" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "Добавить пользователя '${primary_key}' в правила Sudo" - -msgid "Auto assign subordinate ids" -msgstr "" - -#, fuzzy, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "Вы действительно хотите разблокировать пользователя ${object}?" - -msgid "Contact Settings" -msgstr "Параметры контакта" - -msgid "Delete mode" -msgstr "Режим удаления" - -msgid "Employee Information" -msgstr "Сведения о сотруднике" - -msgid "Error changing account status" -msgstr "Ошибка при изменении состояния учётной записи" - -msgid "Password expiration" -msgstr "Окончание действия пароля" - -msgid "Mailing Address" -msgstr "Почтовый адрес" - -msgid "Misc. Information" -msgstr "Прочие сведения" - -msgid "delete" -msgstr "удалить" - -msgid "preserve" -msgstr "сохранить" - -msgid "No private group" -msgstr "Без личной группы" - -msgid "Remove users" -msgstr "Удалить пользователей" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "Удалить пользователя '${primary_key}' из групп пользователей" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "Удалить пользователя '${primary_key}' из сетевых групп" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "Удалить пользователя '${primary_key}' из ролей" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "Удалить пользователя '${primary_key}' из правил HBAC" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "Удалить пользователя '${primary_key}' из правил Sudo" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" -"Вы действительно хотите ${action} пользователя?
Изменения вступят в силу " -"немедленно." - -#, python-brace-format -msgid "Click to ${action}" -msgstr "Щёлкните, чтобы ${action}" - -msgid "Unlock" -msgstr "Разблокировать" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "Вы действительно хотите разблокировать пользователя ${object}?" - -msgid "Add vault" -msgstr "Добавить хранилище" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "Добавить группы пользователей в участники хранилища '${primary_key}'" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "Добавить службы в участники хранилища '${primary_key}'" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "Добавить пользователей в участники хранилища '${primary_key}'" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "Добавить группы пользователей во владельцы хранилища '${primary_key}'" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "Добавить службы во владельцы хранилища '${primary_key}'" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "Добавить пользователей во владельцы хранилища '${primary_key}'" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" -"Секреты можно добавлять или извлекать из хранилища только с помощью " -"инструментов командной строки vault-archive и vault-retrieve." - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" -"Содержимое \"стандартных\" хранилищ могут просматривать пользователи с более " -"высоким уровнем привилегий (администраторы)." - -msgid "Asymmetric" -msgstr "Асимметричное" - -msgid "Vaults Config" -msgstr "Конфигурация хранилищ" - -msgid "Members" -msgstr "Участники" - -msgid "My User Vaults" -msgstr "Мои хранилища пользователей" - -msgid "Owners" -msgstr "Владельцы" - -msgid "Remove vaults" -msgstr "Удалить хранилища" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "Удалить группы пользователей из участников хранилища '${primary_key}'" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "Удалить службы из участников хранилища '${primary_key}'" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "Удалить пользователей из участников хранилища '${primary_key}'" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "Удалить группы пользователей из владельцев хранилища '${primary_key}'" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "Удалить службы из владельцев хранилища '${primary_key}'" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "Удалить пользователей из владельцев хранилища '${primary_key}'" - -msgid "Service Vaults" -msgstr "Хранилища служб" - -msgid "Shared" -msgstr "Общее" - -msgid "Shared Vaults" -msgstr "Хранилища совместного использования" - -msgid "Standard" -msgstr "Стандартное" - -msgid "Symmetric" -msgstr "Симметричное" - -msgid "Vault Type" -msgstr "Тип хранилища" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" -"С помощью веб-интерфейса можно создавать только стандартные хранилища. " -"Используйте интерфейс командной строки для создания других типов хранилищ." - -msgid "User Vaults" -msgstr "Хранилища пользователей" - -msgid "Current password is required" -msgstr "Следует указать текущий пароль" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "Количество дней до окончания действия вашего пароля: ${days}." - -msgid "First OTP" -msgstr "Первый OTP" - -msgid "New password is required" -msgstr "Следует указать новый пароль" - -#, fuzzy -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" -" Чтобы войти с помощью имени " -"пользователя и пароля, введите их в соответствующие поля, затем " -"нажмите кнопку \"Войти\"." - -#, fuzzy -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" -" Чтобы войти с помощью имени " -"пользователя и пароля, введите их в соответствующие поля, затем " -"нажмите кнопку \"Войти\"." - -msgid "Token synchronization failed" -msgstr "Не удалось синхронизировать токен" - -msgid "The username, password or token codes are not correct" -msgstr "Неправильное имя пользователя, пароль или коды токена." - -msgid "Token was synchronized" -msgstr "Токен синхронизирован" - -msgid "Password change complete" -msgstr "Изменение пароля завершено" - -msgid "Your password has expired. Please enter a new password." -msgstr "Срок действия вашего пароля истёк. Пожалуйста, введите новый пароль." - -msgid "Passwords must match" -msgstr "Пароли должны совпадать" - -msgid "Password reset was not successful." -msgstr "Не удалось сбросить пароль." - -msgid "Reset your password." -msgstr "Сбросить свой пароль." - -msgid "Second OTP" -msgstr "Второй OTP" - -msgid "Verify Password" -msgstr "Проверить пароль" - -msgid "Are you sure you want to delete selected entries?" -msgstr "Вы действительно хотите удалить выбранные записи?" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "Удалено записей: ${count}" - -msgid "Are you sure you want to disable selected entries?" -msgstr "Вы действительно хотите отключить выбранные записи?" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "Отключено записей: ${count}" - -msgid "Are you sure you want to enable selected entries?" -msgstr "Вы действительно хотите включить выбранные записи?" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "Включено записей: ${count}" - -msgid "Some entries were not deleted" -msgstr "Не удалось удалить некоторые записи" - -msgid "Quick Links" -msgstr "Быстрые ссылки" - -msgid "Select All" -msgstr "Выбрать все" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" -"Запрос вернул количество результатов, которое превышает заданное ограничение " -"по размеру. Показано результатов: первые ${counter}." - -msgid "Unselect All" -msgstr "Отменить выбор" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" -"

Настройка Kerberos для браузера

\n" -"\n" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" -"

Firefox

\n" -"\n" -"

\n" -" Можно настроить Firefox на использование Kerberos для единого " -"входа. Приведённые далее инструкции помогут настроить веб-браузер для " -"отправки ваших учётных данных Kerberos подходящему центру распространения " -"ключей, что позволит выполнять единый вход.\n" -"

\n" -"\n" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" -"

Chrome

\n" -"\n" -"

\n" -" Можно настроить Chrome на использование Kerberos для единого " -"входа. Приведённые далее инструкции помогут настроить веб-браузер для " -"отправки ваших учётных данных Kerberos подходящему центру распространения " -"ключей, что позволит выполнять единый вход.\n" -"

\n" -"\n" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" -"

Импортировать сертификат центра сертификации

\n" -"
    \n" -"
  1. \n" -" Загрузите сертификат центра сертификации. Либо используйте сертификат /etc/ipa/ca.crt., если узел также является " -"клиентом управления учётными данными.\n" -"
    2. \n" -"
  2. \n" -" Нажмите кнопку меню с подсказкой Настройка и управление " -"Google Chrome (по умолчанию она расположена в правом верхнем углу " -"Chrome) и выберите пункт Настройки.\n" -"
    3. \n" -"
  3. \n" -" Затем нажмите кнопку Показать дополнительные настройки, чтобы просмотреть дополнительные параметры, и нажмите кнопку " -"Настроить сертификаты, которая расположена под заголовком HTTPS/" -"SSL.\n" -"
    4. \n" -"
  4. \n" -" На вкладке Доверенные корневые центры сертификации " -"нажмите кнопку Импорт..., которая расположена в нижней части окна.\n" -"
    5. \n" -"
  5. Выберите файл сертификата центра сертификации, который был загружен вами " -"ранее.
    6. \n" -"
\n" -"\n" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" -"

Internet Explorer

\n" -"

ПРЕДУПРЕЖДЕНИЕ: браузер Internet Explorer больше не " -"поддерживается.

\n" -"

\n" -" После входа в систему на рабочей станции с вашим ключом Kerberos " -"вы сможете использовать этот билет в Internet Explorer.\n" -"

\n" -"

\n" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" -"Войдите на компьютер под управлением Windows с помощью учётной " -"записи вашей области (realm) Kerberos (административный домен)\n" -"

\n" -"

\n" -"В Internet Explorer: выберите в меню \"Инструменты\" пункт " -"\"Параметры Интернета\".\n" -"

\n" -"
\n" -"
    \n" -"
  1. Откройте вкладку \"Безопасность\"
    2. \n" -"
  2. Выберите пункт \"Местная интрасеть\"
    3. \n" -"
  3. Нажмите кнопку \"Узлы...\"
    4. \n" -"
  4. Нажмите кнопку \"Дополнительно\"
    5. \n" -"
  5. Добавьте ваш домен в список
    6. \n" -"
\n" -"
    \n" -"
  1. Откройте вкладку \"Безопасность\"
    2. \n" -"
  2. Выберите пункт \"Местная интрасеть\"
    3. \n" -"
  3. Нажмите кнопку \"Другой...\"
    4. \n" -"
  4. Выберите пункт \"Автоматический вход в сеть только в зоне интрасети\"\n" -"
\n" -"\n" -"
    \n" -"
  1. Посетите веб-сайт, который использует Kerberos, с помощью IE (в URL-" -"адресе необходимо использовать полное имя домена)
    2. \n" -"
  2. Всё готово.
    3. \n" -"
\n" -"
\n" -"\n" - -msgid "Working" -msgstr "В процессе" - -msgid "Audit" -msgstr "Аудит" - -msgid "Authentication" -msgstr "Аутентификация" - -msgid "Automount" -msgstr "Автомонтирование" - -msgid "DNS" -msgstr "DNS" - -msgid "Host-Based Access Control" -msgstr "Управление доступом на основе узла" - -msgid "Identity" -msgstr "Идентификация" - -msgid "Network Services" -msgstr "Сетевые службы" - -msgid "Policy" -msgstr "Политика" - -msgid "Role-Based Access Control" -msgstr "Управление доступом на основе ролей" - -msgid "Subordinate IDs" -msgstr "" - -msgid "Sudo" -msgstr "Sudo" - -msgid "Topology" -msgstr "Топология" - -msgid "True" -msgstr "Да" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"\n" -msgstr "" -"

Не удалось проверить ваши учётные данные Kerberos

\n" -"

\n" -" Убедитесь, что у вас имеются действительные билеты (их можно " -"получить через kinit) и правильно настроен браузер.\n" -"

\n" -"\n" -"

Конфигурация браузера

\n" -"\n" -"
\n" -"

\n" -" Если вы используете веб-интерфейс впервые, пожалуйста, настройте ваш браузер.\n" -"

\n" -"
\n" - -msgid "API Browser" -msgstr "Навигатор API " - -msgid "First" -msgstr "Первый" - -msgid "Last" -msgstr "Последний" - -msgid "Next" -msgstr "Вперёд" - -msgid "Page" -msgstr "Страница" - -msgid "Prev" -msgstr "Назад" - -msgid "Undo" -msgstr "Отменить" - -msgid "Undo this change." -msgstr "Отменить это изменение." - -msgid "Undo All" -msgstr "Отменить все" - -msgid "Undo all changes in this field." -msgstr "Отменить все изменения в этом поле." - -msgid "Text does not match field pattern" -msgstr "Текст не соответствует шаблону поля" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" -"Должно быть значением даты / времени в формате UTC (например, \"2014-01-20 " -"17:58:01Z\")" - -msgid "Must be a decimal number" -msgstr "Должно быть десятичным числом" - -msgid "Format error" -msgstr "Ошибка форматирования" - -msgid "Must be an integer" -msgstr "Должно быть целым числом" - -msgid "Not a valid IP address" -msgstr "Недопустимый IP-адрес" - -msgid "Not a valid IPv4 address" -msgstr "Недопустимый адрес IPv4" - -msgid "Not a valid IPv6 address" -msgstr "Недопустимый адрес IPv6" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "Максимальное значение равно ${value}" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "Минимальное значение равно ${value}" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "Недопустимый сетевой адрес (примеры: 2001:db8::/64, 192.0.2.0/24)" - -msgid "Parse error" -msgstr "Ошибка обработки" - -msgid "Must be a positive number" -msgstr "Должно быть положительным числом" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "'${port}' не является допустимым портом" - -msgid "Required field" -msgstr "Обязательное поле" - -msgid "Unsupported value" -msgstr "Неподдерживаемое значение" - -msgid "kerberos ticket policy settings" -msgstr "параметры политики билетов Kerberos" - -#, fuzzy -msgid "OTP max life" -msgstr "Максимальный срок жизни" - -#, fuzzy -msgid "OTP token maximum ticket life (seconds)" -msgstr "Максимальный срок жизни билета (в секундах)" - -#, fuzzy -msgid "OTP max renew" -msgstr "Максимальный срок для обновления" - -#, fuzzy -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "Максимальный срок для обновления (в секундах)" - -#, fuzzy -msgid "RADIUS max life" -msgstr "Максимальный срок жизни" - -#, fuzzy -msgid "RADIUS maximum ticket life (seconds)" -msgstr "Максимальный срок жизни билета (в секундах)" - -#, fuzzy -msgid "RADIUS max renew" -msgstr "Имя прокси-сервера RADIUS" - -#, fuzzy -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "Максимальный срок для обновления (в секундах)" - -#, fuzzy -msgid "PKINIT max life" -msgstr "Максимальный срок жизни" - -#, fuzzy -msgid "PKINIT maximum ticket life (seconds)" -msgstr "Максимальный срок жизни билета (в секундах)" - -#, fuzzy -msgid "PKINIT max renew" -msgstr "Максимальный срок для обновления" - -#, fuzzy -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "Максимальный срок для обновления (в секундах)" - -msgid "Hardened max life" -msgstr "" - -#, fuzzy -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "Максимальный срок жизни билета (в секундах)" - -msgid "Hardened max renew" -msgstr "" - -#, fuzzy -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "Максимальный срок для обновления (в секундах)" - -#, fuzzy -msgid "IdP max life" -msgstr "Максимальный срок жизни" - -#, fuzzy -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "Максимальный срок жизни билета (в секундах)" - -#, fuzzy -msgid "IdP max renew" -msgstr "Максимальный срок для обновления" - -#, fuzzy -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "Максимальный срок для обновления (в секундах)" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "Не удалось прочитать политику билетов для %s" - -msgid "Default ticket policy could not be read" -msgstr "Не удалось прочитать политику билетов по умолчанию" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" -"\n" -"Переход на IPA\n" -"\n" -"Перенос пользователей и групп с LDAP-сервера на IPA.\n" -"\n" -"Посылает запрос LDAP к удалённому серверу с целью поиска пользователей и " -"групп в контейнере. Чтобы перенести пароли, следует выполнить привязку к " -"серверу от имени пользователя, который может читать атрибут userPassword на " -"удалённом сервере. Перечень таких пользователей обычно ограничен " -"администраторами высшего уровня, в частности cn=Directory Manager на 389-ds " -"(пользователь bind по умолчанию).\n" -"\n" -"Контейнер пользователей по умолчанию: ou=People.\n" -"\n" -"Контейнер групп по умолчанию: ou=Groups.\n" -"\n" -"Записи пользователей и групп, которые уже существуют на IPA-сервере, будут " -"пропущены.\n" -"\n" -"Две схемы LDAP определяют, как хранятся записи участников группы: RFC2307 и\n" -"RFC2307bis. RFC2307bis использует атрибуты member и uniquemember для " -"определения участников группы, а RFC2307 использует атрибут memberUid. По " -"умолчанию используется схема RFC2307bis.\n" -"\n" -"С помощью приложения compat IPA можно повторно форматировать данные для " -"систем, в которых не предусмотрена поддержка RFC2307bis. Рекомендуется " -"отключать это приложение во время переноса, чтобы уменьшить нагрузку на " -"систему. Его можно включить снова после переноса. Чтобы перенести данные с " -"включённым приложением, используйте параметр \"--with-compat\".\n" -"\n" -"У перенесённых пользователей нет учётных данных Kerberos, только пароль " -"LDAP. Для завершения процесса переноса пользователям следует открыть " -"страницу http://ipa.example.com/ipa/migration и пройти аутентификацию с " -"помощью пароля LDAP, чтобы создать свои записи учётных данных Kerberos.\n" -"\n" -"По умолчанию перенос отключён. Чтобы включить его, используйте команду ipa " -"config-mod:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"Если базовое DN не будет предоставлено с помощью --basedn, IPA будет " -"использовать значение defaultNamingContext, если оно установлено, или первое " -"значение в наборе namingContexts в корневой папке удалённого LDAP-сервера.\n" -"\n" -"Записи пользователей добавляются в группу пользователей по умолчанию. " -"Процесс такого добавления может быть довольно длительным, поэтому при " -"переносе он выполняется в пакетном режиме, пакетами по 100 пользователей. В " -"результате возникнет определённый период, когда записи пользователей уже " -"добавлены в IPA, но эти пользователи ещё не стали участниками группы " -"пользователей по умолчанию.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -"Простейший перенос, приняты все значения по умолчанию:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -"Определение контейнеров пользователей и групп. Можно использовать для " -"переноса данных пользователей и групп с сервера IPA версии 1:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts'\n" -" --group-container='cn=groups,cn=accounts'\n" -" ldap://ds.example.com:389\n" -"\n" -"Так как на сервере IPA версии 2 уже предусмотрены предопределённые группы, " -"которые могут совпадать с перенесёнными с сервера (IPA версии 1) группами " -"(например, admins, ipausers), пользователи из таких групп могут быть " -"перенесены в неизвестную группу (unknown) на новом сервере IPA версии 2.\n" -"Используйте параметр --group-overwrite-gid, чтобы перезаписать идентификатор " -"группы (GID) уже созданных групп и предотвратить эту проблему:\n" -" ipa migrate-ds --group-overwrite-gi\n" -" --user-container='cn=users,cn=accounts'\n" -" --group-container='cn=groups,cn=accounts'\n" -" ldap://ds.example.com:389\n" -"\n" -"Перенесённые данные пользователей и групп могут содержать классы объектов и " -"сопутствующие атрибуты, неизвестные серверу IPA версии 2. Эти классы " -"объектов и атрибуты можно исключить из процедуры переноса данных:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts'\n" -" --group-container='cn=groups,cn=accounts'\n" -" --user-ignore-objectclass=radiusprofile\n" -" --user-ignore-attribute=radiusgroupname\n" -" ldap://ds.example.com:389\n" -"\n" -"ВЕДЕНИЕ ЖУРНАЛА\n" -"\n" -"Во время переноса предупреждения и сообщения об ошибках будут добавляться в " -"журнал ошибок Apache. После завершения переноса следует ознакомиться с " -"соответствующим файлом, чтобы исправить или выяснить причины ошибок, которые " -"могли произойти. \n" -"\n" -"Для каждого пакета из 100 перенесённых записей пользователей будет показано " -"информационное сообщение, предназначенное для оценки прогресса обработки и " -"определения её продолжительности. \n" -"\n" -"Если определён уровень ведения журнала debug путём установления debug = True " -"в /etc/ipa/default.conf или в /etc/ipa/server.conf, для каждой перенесённой " -"записи будет добавляться собственная запись, а также отчёт по каждому " -"обновлению группы пользователей по умолчанию.\n" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" -"Учётная запись Kerberos %s уже существует. Используйте команду \"ipa user-mod" -"\", чтобы установить её параметры вручную." - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" -"Не удалось определить, существует ли уже учётная запись Kerberos %s. " -"Используйте команду \"ipa user-mod\", чтобы установить её параметры вручную." - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" -"Не удалось добавить пользователя в группу по умолчанию. Используйте команду " -"\"ipa group-add-member\", чтобы добавить его вручную." - -msgid "Migration of LDAP search reference is not supported." -msgstr "Поддержка миграции поисковой ссылки LDAP не предусмотрена." - -msgid "Malformed DN" -msgstr "Некорректное DN" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "%(user)s не является POSIX-пользователем" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" -". Проверьте идентификатор существующей группы. Используйте параметр --group-" -"overwrite-gid для перезаписи идентификатора группы" - -msgid "Invalid LDAP URI." -msgstr "Неверный URI LDAP." - -#, python-format -msgid "%s to exclude from migration" -msgstr "%s для исключения из миграции" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" -"список результатов поиска объектов миграции был усечён сервером; возможно, " -"процесс миграции не завершён\n" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" -"Поиск LDAP в %(container)s не вернул никаких результатов (основа поиска: " -"%(search_base)s, класс объектов: %(objectclass)s)" - -msgid "Default group for new users not found" -msgstr "Группа по умолчанию для новых пользователей не найдена" - -#, fuzzy -#| msgid "" -#| "\n" -#| "Password policy\n" -#| "\n" -#| "A password policy sets limitations on IPA passwords, including maximum\n" -#| "lifetime, minimum lifetime, the number of passwords to save in\n" -#| "history, the number of character classes required (for stronger " -#| "passwords)\n" -#| "and the minimum password length.\n" -#| "\n" -#| "By default there is a single, global policy for all users. You can also\n" -#| "create a password policy to apply to a group. Each user is only subject\n" -#| "to one password policy, either the group policy or the global policy. A\n" -#| "group policy stands alone; it is not a super-set of the global policy " -#| "plus\n" -#| "custom settings.\n" -#| "\n" -#| "Each group password policy requires a unique priority setting. If a user\n" -#| "is in multiple groups that have password policies, this priority " -#| "determines\n" -#| "which password policy is applied. A lower value indicates a higher " -#| "priority\n" -#| "policy.\n" -#| "\n" -#| "Group password policies are automatically removed when the groups they\n" -#| "are associated with are removed.\n" -#| "\n" -#| "EXAMPLES:\n" -#| "\n" -#| " Modify the global policy:\n" -#| " ipa pwpolicy-mod --minlength=10\n" -#| "\n" -#| " Add a new group password policy:\n" -#| " ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 " -#| "--minlength=8 --priority=10 localadmins\n" -#| "\n" -#| " Display the global password policy:\n" -#| " ipa pwpolicy-show\n" -#| "\n" -#| " Display a group password policy:\n" -#| " ipa pwpolicy-show localadmins\n" -#| "\n" -#| " Display the policy that would be applied to a given user:\n" -#| " ipa pwpolicy-show --user=tuser1\n" -#| "\n" -#| " Modify a group password policy:\n" -#| " ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" -"\n" -"Политика паролей\n" -"\n" -"Политика паролей устанавливает ограничения для паролей IPA, включая " -"максимальный срок действия, минимальный срок действия, количество паролей " -"для сохранения в журнале, количество требуемых классов символов (для более " -"надёжных паролей) и минимальную длину пароля.\n" -"\n" -"По умолчанию имеется одна, глобальная политика для всех пользователей. Также " -"можно создать политику паролей для применения к группе. К каждому " -"пользователю применяется только одна политика паролей: групповая или " -"глобальная. Групповая политика автономна, она не является супермножеством " -"глобальной политики в сочетании с пользовательскими настройками.\n" -"\n" -"Для каждой групповой политики паролей должно быть установлено уникальное " -"значение приоритета. Если пользователь находится в нескольких группах, для " -"которых имеются политики паролей, этот приоритет определит, какая политика " -"паролей применяется. Чем меньше значение, тем выше приоритет политики.\n" -"\n" -"Групповые политики паролей автоматически удаляются, когда удаляются группы, " -"с которыми они связаны.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Изменить глобальную политику:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -"Добавить новую групповую политику паролей:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Показать глобальную политику паролей:\n" -" ipa pwpolicy-show\n" -"\n" -" Показать групповую политику паролей:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Показать политику, которая применяется к указанному пользователю:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Изменить групповую политику паролей:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" -"Объект класса обслуживания, который используется для связывания политик с " -"группами" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" -"приоритет должен иметь уникальное значение (%(prio)d уже использовано для " -"%(gname)s)" - -msgid "Add Class of Service entry" -msgstr "Добавить запись класса обслуживания" - -msgid "Delete Class of Service entry" -msgstr "Удалить запись класса обслуживания" - -msgid "Modify Class of Service entry" -msgstr "Изменить запись класса обслуживания" - -msgid "Display Class of Service entry" -msgstr "Показать запись класса обслуживания" - -msgid "Search for Class of Service entry" -msgstr "Поиск записи класса обслуживания" - -msgid "password policy" -msgstr "политика паролей" - -msgid "password policies" -msgstr "политики паролей" - -msgid "Password Policies" -msgstr "Политики паролей" - -#, fuzzy -msgid "Max repeat" -msgstr "Максимальный срок для обновления" - -#, fuzzy -msgid "Maximum number of same consecutive characters" -msgstr "Максимальное количество возвращённых записей" - -#, fuzzy -msgid "Max sequence" -msgstr "Максимальный срок для обновления" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -msgid "User check" -msgstr "Имя пользователя" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "Grace login limit" -msgstr "" - -msgid "Number of LDAP authentications allowed after expiration" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -#, fuzzy -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "Максимальный срок жизни пароля должен быть больше минимального." - -msgid "cannot delete global password policy" -msgstr "невозможно удалить глобальную политику паролей" - -msgid "priority cannot be set on global policy" -msgstr "невозможно установить приоритет для глобальной политики" - -msgid "HBAC rule and local members cannot both be set" -msgstr "Невозможно одновременно указать правило HBAC и локальных участников" - -msgid "Invalid SELinux user name, must match {}" -msgstr "Некорректное имя пользователя SELinux, должно соответствовать {}" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" -"Некорректное значение MLS, должно соответстовать {mls}, где максимальный " -"уровень {mls_max}" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" -"Некорректное значение MCS, должно соответстовать {mcs}, где максимальная " -"категория {mcs_max}" - -msgid "SELinux user map list not found in configuration" -msgstr "Список пользователей SELinux не найден в конфигурации" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" -"Пользователь SELinux %(user)s не найден в списке порядка применения (в " -"конфигурации)" - -msgid "SELinux User Map rule" -msgstr "Правило списка пользователей SELinux" - -msgid "SELinux User Map rules" -msgstr "Правила списка пользователей SELinux" - -msgid "SELinux User Maps" -msgstr "Списки пользователей SELinux" - -msgid "SELinux User Map" -msgstr "Список пользователей SELinux" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "Правило HBAC %(rule)s не найдено" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "Добавлен список пользователей SELinux \"%(value)s\"" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "Удалён список пользователей SELinux \"%(value)s\"" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "Изменён список пользователей SELinux \"%(value)s\"" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "установлено соответствие %(count)d списка пользователей SELinux" -msgstr[1] "установлено соответствие %(count)d списков пользователей SELinux" -msgstr[2] "установлено соответствие %(count)d списков пользователей SELinux" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "Включён список пользователей SELinux \"%(value)s\"" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "Отключён список пользователей SELinux \"%(value)s\"" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" -"\n" -"Службы\n" -"\n" -"Служба IPA — это служба, которая выполняется на узле. В записи службы IPA " -"могут храниться данные учётной записи Kerberos, SSL-сертификата или оба " -"набора данных.\n" -"\n" -"Службой IPA можно управлять непосредственно с компьютера, если системе этого " -"компьютера предоставлены соответствующие права доступа. Это касается даже " -"компьютеров, отличных от тех, с которыми связана эта служба. Например, " -"запрос SSL-сертификата с помощью учётных данных учётной записи службы узла. " -"Чтобы управлять службой с помощью учётных данных узла, следует запустить " -"команду kinit от имени узла:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Добавление службы IPA позволяет связанной службе запрашивать SSL-сертификаты " -"и таблицы ключей, но создание самих запросов является отдельным шагом: " -"соответствующие данные не создаются в результате простого добавления " -"службы.\n" -"\n" -"В записи службы хранятся только открытые данные сертификата; закрытый ключ " -"не сохраняется.\n" -"\n" -"ПРИМЕРЫ:\n" -"\n" -" Добавить новую службу IPA:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Разрешить узлу управлять сертификатом службы IPA:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Переопределить список по умолчанию, который содержит поддерживаемые типы " -"PAC для службы:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -"Такое переопределение типа PAC необходимо, например, для работы NFS. В " -"текущей версии соответствующий код в ядре Linux может работать только с " -"билетами Kerberos, размер которых не превышает максимально заданного. Так " -"как данные PAC могут быть довольно объёмными, для служб NFS рекомендуется " -"установить --pac-type=NONE.\n" -"\n" -" Удалить службу IPA:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Найти все службы IPA, связанные с узлом:\n" -" ipa service-find web.example.com\n" -"\n" -" Найти все службы HTTP:\n" -" ipa service-find HTTP\n" -"\n" -" Отключить ключ Kerberos и SSL-сертификат службы:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Запросить сертификат для службы IPA:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" -"\n" -" Разрешить пользователю создавать таблицу ключей:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" -"\n" -"Создать и получить таблицу ключей для службы IPA:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" - -msgid "Trusted to authenticate as user" -msgstr "Доверие для аутентификации в качестве пользователя" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "Службе разрешена аутентификация от имени клиента" - -#, fuzzy, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "Индикаторы аутентификации" - -msgid "Malformed principal" -msgstr "Недопустимая учётная запись" - -msgid "{} is required by the IPA master" -msgstr "" - -msgid "service" -msgstr "служба" - -msgid "services" -msgstr "службы" - -msgid "Service principal alias" -msgstr "Псевдоним учётной записи службы" - -msgid "Base-64 encoded service certificate" -msgstr "Base-64 шифрованный сертификат службы" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "Значение NONE нельзя сочетать с другими типами PAC" - -msgid "Add a new IPA service." -msgstr "Добавить новую службу IPA." - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "Добавлена служба \"%(value)s\"" - -msgid "force principal name even if host not in DNS" -msgstr "" -"Принудительно установить значение имени учётной записи, даже если узла нет в " -"DNS" - -msgid "Skip host check" -msgstr "Пропустить проверку узла" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" -"Принудительно создать службу, даже если объект узла для управления ей не " -"существует" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "Узел \"%s\", в который следовало добавить службу, не существует." - -msgid "Add a new SMB service." -msgstr "Добавить новую службу SMB." - -msgid "SMB service NetBIOS name" -msgstr "Имя NetBIOS службы SMB" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "Удалена служба \"%(value)s\"" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "Изменена служба \"%(value)s\"" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "установлено соответствие %(count)d службы" -msgstr[1] "установлено соответствие %(count)d служб" -msgstr[2] "установлено соответствие %(count)d служб" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "Отключена служба \"%(value)s\"" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "Добавлены сертификаты в учётную запись службы \"%(value)s\"" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "Удалены сертификаты из учётной записи службы \"%(value)s\"" - -msgid "Add new principal alias to a service" -msgstr "Добавить новый псевдоним учётной записи в запись службы." - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "Добавлены новые псевдонимы в учётную запись службы \"%(value)s\"" - -msgid "Remove principal alias from a service" -msgstr "Удалить псевдоним учётной записи из службы." - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "Удалены псевдонимы учётной записи службы \"%(value)s\"" +" Добавить неподтверждённого пользователя из контейнера Delete:\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" msgid "" "\n" @@ -30569,325 +13555,17 @@ msgstr "" "пользователей:\n" " ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgid "Stage Users" -msgstr "Неподтверждённые пользователи" - -msgid "Stage User" -msgstr "Неподтверждённый пользователь" - -msgid "stage user" -msgstr "неподтверждённый пользователь" - -msgid "stage users" -msgstr "неподтверждённые пользователи" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "Добавлен неподтверждённый пользователь \"%(value)s\"" - -msgid "givenname is required" -msgstr "следует указать имя" - -msgid "sn is required" -msgstr "следует указать sn" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Удалён неподтверждённый пользователь \"%(value)s\"" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "Изменён неподтверждённый пользователь \"%(value)s\"" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "установлено соответствие %(count)d пользователя" -msgstr[1] "установлено соответствие %(count)d пользователей" -msgstr[2] "установлено соответствие %(count)d пользователей" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "Активировать неподтверждённого пользователя \"%(value)s\"" - -msgid "Entry RDN is not 'uid'" -msgstr "RDN записи не имеет значение \"uid\"" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "В записи нет \"%(attribute)s\"" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "активный пользователь с именем \"%(user)s\" уже существует" - -#, python-format -msgid "Stage user %s activated" -msgstr "Неподтверждённый пользователь %s активирован" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" -"Добавить один или несколько сертификатов в запись неподтверждённого " -"пользователя." - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" -"Добавлены сертификаты в запись неподтверждённого пользователя \"%(value)s\"" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" -"Удалить один или несколько сертификатов из записи неподтверждённого " -"пользователя." - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" -"Удалены сертификаты из записи неподтверждённого пользователя \"%(value)s\"" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" -"Добавить новый псевдоним учётной записи в запись неподтверждённого " -"пользователя." - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" -"Добавлены новые псевдонимы в запись неподтверждённого пользователя " -"\"%(value)s\"" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" -"Удалить псевдоним учётной записи из записи неподтверждённого пользователя." - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" -"Удалены псевдонимы из записи неподтверждённого пользователя \"%(value)s\"" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" -"Добавить одно или несколько сопоставлений сертификатов в запись " -"неподтверждённого пользователя." - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" -"Удалить одно или несколько сопоставлений сертификатов из записи " -"неподтверждённого пользователя." - -msgid "ID View" -msgstr "Представление ID" - -msgid "system ID View" -msgstr "системное представление ID" - -msgid "ID Views" -msgstr "Представления ID" - -msgid "User object overrides" -msgstr "Приоритет объекта пользователя" - -msgid "Group object overrides" -msgstr "Приоритет объекта группы" - -msgid "Hosts the view applies to" -msgstr "Узлы, к которым применяется представление" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "Добавлено представление ID \"%(value)s\"" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "Удалено представление ID \"%(value)s\"" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "Изменено представление ID \"%(value)s\"" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "установлено соответствие %(count)d представления ID" -msgstr[1] "установлено соответствие %(count)d представлений ID" -msgstr[2] "установлено соответствие %(count)d представлений ID" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" -"Представление отношений доверия по умолчанию невозможно применить к узлам" - -msgid "not found" -msgstr "не найдено" - -#, fuzzy -msgid "ID View cannot be applied to IPA master" -msgstr "" -"Представление отношений доверия по умолчанию невозможно применить к узлам" - -msgid "ID View already applied" -msgstr "Представление ID уже применено" - -msgid "value" -msgstr "значение" - -#, python-format -msgid "ID View applied to %i host." -msgstr "Представление ID применено к узлу: %i." - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "Представление ID применено к узлам: %i." - -#, python-format -msgid "ID View cleared from %i host." -msgstr "Представление ID очищено из %i узла." - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "Представление ID очищено из %i узлов." - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" -"Вы пытаетесь сослаться на личную группу, которую запрещено переопределять. " -"Попробуйте переопределить атрибут GID соответствующего пользователя." - -msgid "IPA object" -msgstr "Объект IPA" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" -"невозможно переопределить системные объекты IPA (например, системные группы, " -"личные группы пользователей)" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "Не удалось определить привязку \"%(anchor)s\"." - -msgid "Default Trust View cannot contain IPA users" -msgstr "" -"Представление отношений доверия по умолчанию не может содержать " -"пользователей IPA" - -msgid "Add a new ID override." -msgstr "Добавить новое переопределение ID." - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "Добавлено переопределение ID \"%(value)s\"" - -msgid "Delete an ID override." -msgstr "Удалить переопределение ID." - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "Удалено переопределение ID \"%(value)s\"" - -msgid "Modify an ID override." -msgstr "Изменить переопределение ID." - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "Изменено переопределение ID \"%(value)s\"" - -msgid "ID override" -msgstr "Переопределение ID" - -msgid "ID overrides cannot be renamed" -msgstr "Невозможно переименовать переопределения ID" - -msgid "Search for an ID override." -msgstr "Поиск переопределения ID." - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "установлено соответствие %(count)d переопределения ID" -msgstr[1] "установлено соответствие %(count)d переопределений ID" -msgstr[2] "установлено соответствие %(count)d переопределений ID" - -msgid "Display information about an ID override." -msgstr "Показать сведения о переопределении ID." - -msgid "User ID override" -msgstr "Переопределение ID пользователя" - -msgid "User ID overrides" -msgstr "Переопределения ID пользователя" - -msgid "Group ID override" -msgstr "Переопределение ID группы" - -msgid "Group ID overrides" -msgstr "Переопределения ID группы" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "Добавить один или несколько сертификатов в запись idoverrideuser." - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "Добавлены сертификаты в запись idoverrideuser \"%(value)s\"" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "Удалить один или несколько сертификатов из записи idoverrideuser." - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "Удалены сертификаты из записи idoverrideuser \"%(value)s\"" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "Добавлено переопределение ID пользователя \"%(value)s\"" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Удалено переопределение ID пользователя \"%(value)s\"" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "Изменено переопределение ID пользователя \"%(value)s\"" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "установлено соответствие %(count)d переопределения ID пользователя" -msgstr[1] "установлено соответствие %(count)d переопределений ID пользователя" -msgstr[2] "установлено соответствие %(count)d переопределений ID пользователя" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "Добавлено переопределение ID группы \"%(value)s\"" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Удалено переопределение ID группы \"%(value)s\"" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "Изменено переопределение ID группы \"%(value)s\"" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "установлено соответствие %(count)d переопределения ID группы" -msgstr[1] "установлено соответствие %(count)d переопределений ID группы" -msgstr[2] "установлено соответствие %(count)d переопределений ID группы" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" -"Не удалось прочитать фильтр происхождения (originfilter) определения личной " -"группы пользователя (UPG Definition). Проверьте ваши разрешения." - msgid "" "\n" -"Manage Certificate Authorities\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" msgstr "" "\n" -"Управление службами сертификации\n" +"В стандартном хранилище для передачи и хранения секрета используются " +"безопасные механизмы. Секрет могут получить только те пользователи, у " +"которых есть доступ к хранилищу.\n" +"\n" msgid "" "\n" @@ -30901,220 +13579,109 @@ msgstr "" msgid "" "\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" msgstr "" "\n" -"Службы сертификации включаются при создании, но их использование " -"регулируется ACL служб сертификации, если у оператора нет разрешения " -"обходить ACL служб сертификации (CA).\n" +"Sudo (su \"do\") позволяет системному администратору делегировать " +"полномочия, чтобы дать определённым пользователям (или группам " +"пользователей) возможность выполнять некоторые (или все) команды от имени " +"пользователя \"root\" или другого пользователя, вместе с тем предоставляя " +"журнал аудита команд и их аргументов.\n" msgid "" "\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" msgstr "" "\n" -"Все службы сертификации, кроме службы сертификации \"IPA\", можно отключать " -"и включать повторно. Отключение службы сертификации приводит к тому, что ей " -"запрещается выдавать сертификаты, но не влияет на действительность её " -"сертификата.\n" +"Команды Sudo \n" +"\n" +"Команды, которые используются в качестве строительных блоков для Sudo\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Создать новую команду\n" +" ipa sudocmd-add --desc='Чтение файлов в журнале' /usr/bin/less\n" +"\n" +" Удалить команду\n" +" ipa sudocmd-del /usr/bin/less\n" msgid "" "\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" msgstr "" "\n" -"Службы сертификации (все, кроме службы сертификации \"IPA\") можно удалять. " -"Удаление службы сертификации приводит к отзыву её сертификата для подписи и " -"удалению её закрытого ключа.\n" +"Команды Sudo \n" +"\n" +"Команды, которые используются в качестве строительных блоков для Sudo\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Создать новую команду\n" +" ipa sudocmd-add --desc='Чтение файлов в журнале' /usr/bin/less\n" +"\n" +" Удалить команду\n" +" ipa sudocmd-del /usr/bin/less\n" +"\n" msgid "" "\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +"Sudo Rules\n" msgstr "" +"\n" +"Правила Sudo\n" msgid "" "\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" msgstr "" +"\n" +"Симметричное хранилище похоже на стандартное хранилище, но в нём секрет " +"перед передачей предварительно шифруется с помощью пароля. Секрет можно " +"получить только с помощью этого пароля.\n" msgid "" "\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" msgstr "" +"\n" +"Команду automember-rebuild можно использовать, чтобы задним числом применить " +"правила автоучастия в отношении уже существующих записей; это перестроит их " +"участие.\n" msgid "" "\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -msgid "Certificate Authority" -msgstr "Центр сертификации" - -msgid "Certificate Authorities" -msgstr "Центры сертификации" - -msgid "Name for referencing the CA" -msgstr "Имя для ссылки на CA" - -msgid "Description of the purpose of the CA" -msgstr "Описание предназначения CA" - -msgid "Authority ID" -msgstr "ID центра" - -msgid "Dogtag Authority ID" -msgstr "ID Dogtag центра " - -msgid "Subject DN" -msgstr "DN субъекта" - -msgid "Subject Distinguished Name" -msgstr "Различающееся имя субъекта" - -msgid "Issuer DN" -msgstr "DN издателя" - -msgid "Issuer Distinguished Name" -msgstr "Различающееся имя издателя" - -msgid "Base-64 encoded certificate." -msgstr "Base-64 шифрованный сертификат" - -msgid "Certificate chain" -msgstr "Цепочка сертификатов" - -msgid "X.509 certificate chain" -msgstr "Цепочка сертификатов X.509" - -#, fuzzy -#| msgid "Version" -msgid "RSN Version" -msgstr "Версия" - -#, fuzzy -#| msgid "Serial Number (hex)" -msgid "Random Serial Number Version" -msgstr "Серийный номер (шестнадцатеричный)" - -msgid "Search for CAs." -msgstr "Поиск CA." - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "установлено соответствие %(count)d CA" -msgstr[1] "установлено соответствие %(count)d CA" -msgstr[2] "установлено соответствие %(count)d CA" - -msgid "Include certificate chain in output" -msgstr "Включить цепочку сертификатов в вывод" - -msgid "Display the properties of a CA." -msgstr "Показать свойства CA." - -msgid "Create a CA." -msgstr "Создать запись CA." - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "Создана запись CA \"%(value)s\"" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "Недостаточно привилегий \"add\" для записи \"%s\"." - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "Нераспознанные атрибуты: %(attrs)s" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "DN субъекта уже используется CA \"%s\"" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "Удалена запись CA \"%(value)s\"" - -msgid "Insufficient privilege to delete a CA." -msgstr "Недостаточно привилегий для удаления записи CA." - -msgid "IPA CA cannot be deleted" -msgstr "Невозможно удалить CA IPA" - -#, fuzzy -msgid "Must be disabled first" -msgstr "Должно быть десятичным числом" - -msgid "Modify CA configuration." -msgstr "Изменить конфигурацию CA." - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "Изменена запись CA \"%(value)s\"" - -msgid "Insufficient privilege to modify a CA." -msgstr "Недостаточно привилегий для внесения изменений в запись CA." - -msgid "Disable a CA." -msgstr "Отключить службу сертификации." - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "Отключена служба сертификации \"%(value)s\"" - -msgid "IPA CA cannot be disabled" -msgstr "Службу сертификации IPA нельзя отключить" - -msgid "Enable a CA." -msgstr "Включить службу сертификации." - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "Включена служба сертификации \"%(value)s\"" - -msgid "" -"\n" -"IPA certificate operations\n" +"The date format is YYYY-mm-dd.\n" msgstr "" "\n" -"Операции с сертификатами IPA\n" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" -"\n" -"Применение набора команд для управления сертификатами SSL-серверов.\n" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" -"\n" -"Запросы сертификатов существуют в виде запроса подписи сертификата " -"(Certificate Signing Request, CSR) в формате PEM.\n" +"Формат даты: ГГГГ-мм-дд.\n" msgid "" "\n" @@ -31128,46 +13695,751 @@ msgstr "" msgid "" "\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" +"The following revocation reasons are supported:\n" +"\n" msgstr "" "\n" -"Сертификат хранится в учётной записи службы, а учётной записи службы " -"требуется узел.\n" +"Поддерживаются следующие причины отзыва:\n" msgid "" "\n" -"In order to request a certificate:\n" +"The status of a role is either enabled, configured, or absent.\n" msgstr "" "\n" -"Чтобы запросить сертификат:\n" +"Роль может находиться в одном из следующих состояний: включена, настроена " +"или отсутствует.\n" msgid "" "\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" msgstr "" "\n" -"* Должен существовать узел\n" -"* Должна существовать служба (либо следует использовать параметр --add для " -"её автоматического добавления)\n" +"Существует ряд разрешённых целей:\n" +"1. subtree: DN; разрешение применяется к поддереву под этим DN.\n" +"2. target filter: фильтр LDAP.\n" +"3. target: DN с возможными подстановочными знаками, определяет записи, к " +"которым применяется разрешение.\n" msgid "" "\n" -"SEARCHING:\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" msgstr "" "\n" -"ПОИСК:\n" +"Существует много структурированных типов записей ресурсов DNS, для которых " +"данные DNS, хранящиеся на сервере LDAP, являются не просто скалярным " +"значением, например IP-адрес или имя домена, а структурой данных, которая " +"часто может быть сложной. Примером может быть запись LOC [RFC1876], которая " +"состоит из многих обязательных и необязательных частей (градусов, минут, " +"секунд широты и долготы, высоты и погрешности).\n" msgid "" "\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" msgstr "" "\n" -"Сертификаты можно искать по субъекту, серийному номеру, причине отзыва, " -"датам действия и дате выдачи.\n" +"Этот код является расширением подключаемого модуля otptoken и предоставляет " +"поддержку прямого чтения или записи токенов YubiKey.\n" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." +"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +"dc=example,dc=com\n" +msgstr "" +"\n" +"Чтобы включить binddn, выполните следующую команду для установки пароля:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." +"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +"dc=example,dc=com\n" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" +"\n" +"Чтобы проверить, что ни один сервер не отключается в топологии указанного " +"суффикса, используйте эту команду:\n" +" ipa topologysuffix-verify $suffix\n" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" +"\n" +"Топология\n" +"\n" +"Управление топологией репликации на уровне домена 1.\n" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" +"\n" +"Топология\n" +"\n" +"Управление топологией репликации на уровне домена 1.\n" +"\n" +"Данные IPA-сервера хранятся на LDAP-сервере в двух суффиксах:\n" +"* суффикс домена (domain), например, \"dc=example,dc=com\", содержит все " +"связанные с доменом данные\n" +"* суффикс центра сертификации (ca), \"o=ipaca\", имеется только на серверах " +"с установленным CA. Он содержит данные для компонента сервера сертификатов\n" +"\n" +"Данные, которые хранятся на IPA-серверах, реплицируются на другие IPA-" +"серверы. Способ репликации определяется соглашениями о репликации. " +"Соглашения о репликации необходимо устанавливать для каждого из суффиксов " +"отдельно. На уровне домена 0 управление ими выполняется с помощью средств " +"ipa-replica-manage и ipa-csreplica-manage. На уровне домена 1 управление " +"выполняется централизованно с помощью команд \"ipa topology*\".\n" +"\n" +"Соглашения представляются сегментами топологии. По умолчанию сегмент " +"топологии представляет 2 соглашения о репликации: по одному для каждого " +"направления, например, от A до B и от B до A. Создание однонаправленных " +"сегментов запрещено.\n" +"\n" +"Чтобы проверить, что ни один сервер не отключается в топологии указанного " +"суффикса, используйте эту команду:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Примеры:\n" +" Найти все IPA-серверы:\n" +" ipa server-find\n" +"\n" +" Найти все суффиксы:\n" +" ipa topologysuffix-find\n" +"\n" +" Добавить сегмент топологии в суффикс \"domain\":\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Добавить сегмент топологии в суффикс \"ca\":\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Вывести список всех сегментов топологии в суффиксе \"domain\":\n" +" ipa topologysegment-find domain\n" +"\n" +" Вывести список всех сегментов топологии в суффиксе \"ca\":\n" +" ipa topologysegment-find ca\n" +"\n" +" Удалить сегмент топологии в суффиксе \"domain\":\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Удалить сегмент топологии в суффиксе \"ca\":\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Проверить топологию суффикса \"domain\":\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Проверить топологию суффикса \"ca\":\n" +" ipa topologysuffix-verify ca\n" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" +"\n" +"Топология\n" +"\n" +"Управление топологией репликации.\n" +"\n" +"Требуется уровень домена не ниже 1.\n" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" +"\n" +"ИСПОЛЬЗОВАНИЕ СТРУКТУРИРОВАННЫХ ПАРАМЕТРОВ ДЛЯ ОТДЕЛЬНЫХ ТИПОВ\n" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" +"\n" +"Разблокировка учётной записи пользователя.\n" +" \n" +"Учётная запись может быть заблокирована, если в течение определённого " +"периода времени слишком большое количество раз был введён неверный пароль " +"(соответствующие ограничения регулируются политикой паролей). Запись " +"блокируется временно, она может быть разблокирована администратором." + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" +"\n" +"Хранилища пользователей — это хранилища, владельцем которых является " +"конкретный пользователь. Личными являются хранилища, владельцем которых " +"является текущий пользователь. Владельцем хранилища службы является " +"определённая служба. Хранилища совместного использования принадлежат " +"администратору, но могут использоваться другими пользователями или " +"службами.\n" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" +"\n" +"Пользователи\n" +"\n" +"Управление записями пользователей. Все пользователи являются POSIX-" +"пользователями.\n" +"\n" +"IPA поддерживает широкий спектр форматов имён пользователей, но следует " +"учитывать те ограничения, которые могут существовать в конкретной среде. " +"Например, имена пользователей, которые начинаются с цифры или превышают " +"определённую длину, могут привести к проблемам в некоторых системах UNIX.\n" +"Используйте команду \"ipa config-mod\" для изменения формата имени " +"пользователя, разрешённого средствами IPA.\n" +"\n" +"Отключение учётной записи пользователя сделает невозможным получение таким " +"пользователем новых учётных данных Kerberos. Это не сделает " +"недействительными те учётные данные, которые уже были предоставлены.\n" +"\n" +"Управление паролями не входит в этот модуль. Дополнительные сведения можно " +"получить с помощью команды ipa help passwd\n" +"\n" +"Блокировка учётной записи при ошибке пароля выполняется на одном из главных " +"IPA-серверов. Чтобы определить, на каком главном сервере заблокирован " +"пользователь, можно использовать команду user-status.\n" +"На этом главном сервере администратор должен разблокировать пользователя:\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить нового пользователя:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Найти всех пользователей, записи которых содержат строку \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Найти всех пользователей, в записях \"Tim\" является именем:\n" +" ipa user-find --first=Tim\n" +"\n" +" Отключить учётную запись пользователя:\n" +" ipa user-disable tuser1\n" +"\n" +" Включить учётную запись пользователя:\n" +" ipa user-enable tuser1\n" +"\n" +" Удалить пользователя:\n" +" ipa user-del tuser1\n" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" +"\n" +"Хранилище — это безопасное место для хранения секрета. В одном хранилище " +"может храниться только один секрет. При архивировании секрета в хранилище " +"существующий секрет (если имеется) будет перезаписан.\n" + +msgid "" +"\n" +"Vaults\n" +msgstr "" +"\n" +"Хранилища\n" + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +"Хранилища\n" +"\n" +"Управление хранилищами.\n" +"\n" +"Хранилище — это безопасное место для хранения секрета.\n" +"\n" +"В зависимости от владения хранилища подразделяются на три категории:\n" +"* хранилища пользователей или личные хранилища\n" +"* хранилища служб\n" +"* хранилища совместного использования\n" +"\n" +"Хранилища пользователей — это хранилища, владельцем которых является " +"конкретный пользователь. Личными являются хранилища, владельцем которых " +"является текущий пользователь. Владельцем хранилища службы является " +"определённая служба. Хранилища совместного использования принадлежат " +"администратору, но могут использоваться другими пользователями или " +"службами.\n" +"\n" +"В зависимости от механизма обеспечения безопасности выделяют три типа " +"хранилищ:\n" +"* стандартные хранилища\n" +"* симметричные хранилища\n" +"* асимметричные хранилища\n" +"\n" +"В стандартном хранилище для передачи и хранения секрета используются " +"безопасные механизмы. Секрет могут получить только те пользователи, у " +"которых есть доступ к хранилищу.\n" +"\n" +"Симметричное хранилище похоже на стандартное хранилище, но в нём секрет " +"перед передачей предварительно шифруется с помощью пароля. Секрет можно " +"получить только с помощью этого пароля.\n" +"\n" +"Асимметричное хранилище похоже на стандартное хранилище, но в нём секрет " +"перед передачей предварительно шифруется с помощью открытого ключа. Секрет " +"можно получить только с помощью закрытого ключа.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Вывести список хранилищ:\n" +" ipa vault-find\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +"\n" +" Добавить стандартное хранилище:\n" +" ipa vault-add <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --type standard\n" +"\n" +" Добавить симметричное хранилище:\n" +" ipa vault-add <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Добавить асимметричное хранилище:\n" +" ipa vault-add <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Показать хранилище:\n" +" ipa vault-show <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +"\n" +" Изменить описание хранилища:\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --desc <описание>\n" +"\n" +" Изменить тип хранилища:\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --type <тип>\n" +" [старый пароль / закрытый ключ]\n" +" [новый пароль / открытый ключ]\n" +"\n" +" Изменить пароль симметричного хранилища:\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --change-password\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --old-password <старый пароль>\n" +" --new-password <новый пароль>\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --old-password-file <файл старого пароля>\n" +" --new-password-file <файл нового пароля>\n" +"\n" +" Изменить ключи асимметричного хранилища:\n" +" ipa vault-mod <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --private-key-file <файл старого закрытого ключа>\n" +" --public-key-file <файл нового открытого ключа>\n" +"\n" +" Удалить хранилище:\n" +" ipa vault-del <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +"\n" +" Показать конфигурацию хранилища:\n" +" ipa vaultconfig-show\n" +"\n" +" Архивировать данные в стандартное хранилище:\n" +" ipa vault-archive <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --in <файл входных данных>\n" +"\n" +" Архивировать данные в симметричное хранилище:\n" +" ipa vault-archive <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --in <файл входных данных>\n" +" --password-file password.txt\n" +"\n" +" Архивировать данные в асимметричное хранилище:\n" +" ipa vault-archive <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --in <файл входных данных>\n" +"\n" +" Получить данные из стандартного хранилища:\n" +" ipa vault-retrieve <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --out <файл выходных данных>\n" +"\n" +" Получить данные из симметричного хранилища:\n" +" ipa vault-retrieve <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --out <файл выходных данных>\n" +" --password-file password.txt\n" +"\n" +" Получить данные из асимметричного хранилища:\n" +" ipa vault-retrieve <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" --out <файл выходных данных> --private-key-file private.pem\n" +"\n" +" Добавить владельцев хранилища:\n" +" ipa vault-add-owner <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" +"\n" +" Удалить владельцев хранилища:\n" +" ipa vault-remove-owner <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" +"\n" +" Добавить участников хранилища:\n" +" ipa vault-add-member <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" +"\n" +" Удалить участников хранилища:\n" +" ipa vault-remove-member <имя>\n" +" [--user <пользователь>|--service <служба>|--shared]\n" +" [--users <пользователи>] [--groups <группы>] [--services <службы>]\n" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" +"\n" +"Проверка топологии репликации для суффикса.\n" +"\n" +"Проверки, которые выполняются:\n" +" 1. проверка того, не отключена ли топология (иначе говоря, имеются ли пути " +"репликации между всеми серверами).\n" +" 2. проверка того, не превышено ли рекомендованное количество соглашений о " +"репликации между серверами.\n" +" \n" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" +"\n" +"Проверка топологии репликации для суффикса.\n" +"\n" +"Проверки, которые выполняются:\n" +" 1. проверка того, не отключена ли топология (иначе говоря, имеются ли пути " +"репликации между всеми серверами).\n" +" 2. проверка того, не превышено ли рекомендованное количество соглашений о " +"репликации между серверами. \n" +" " + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" +"\n" +"\n" +"При добавлении записи можно воспользоваться параметрами, специально " +"предназначенными для записей ресурсов, или стандартным параметром для " +"необработанного значения (сочетать эти варианты в одном действии по " +"добавлению нельзя). При внесении изменений в существующую запись можно " +"воспользоваться для изменения одной части записи DNS новыми специальными " +"параметрами записей ресурсов, причём для определения изменённого значения " +"будет использован стандартный вариант необработанного значения. В " +"приведенном ниже примере показано изменение приоритета записи MX с 0 на 1 в " +"записи без внесения изменений в обменник:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" msgid "" "\n" @@ -31181,137 +14453,46 @@ msgstr "" msgid "" "\n" -"Dates are treated as GMT to match the dates in the certificates.\n" +"YubiKey Tokens\n" msgstr "" "\n" -"Даты обрабатываются как даты по Гринвичскому времени, в соответствии с " -"датами, определёнными в в сертификатах.\n" +"Токены YubiKey\n" msgid "" "\n" -"The date format is YYYY-mm-dd.\n" +"YubiKey Tokens\n" +"\n" +"Manage YubiKey tokens.\n" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" msgstr "" "\n" -"Формат даты: ГГГГ-мм-дд.\n" +"Токены YubiKey\n" +"\n" +"Управление токенами YubiKey.\n" +"\n" +"Этот код является расширением подключаемого модуля otptoken и предоставляет " +"поддержку прямого чтения или записи токенов YubiKey.\n" +"\n" +"ПРИМЕРЫ:\n" +"\n" +" Добавить новый токен:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" msgid "" "\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" -"\n" -"Запросить новый сертификат и добавить учётную запись:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" -"\n" -"Получить существующий сертификат:\n" -" ipa cert-show 1032\n" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" -"\n" -"Отозвать сертификат (подробные сведения о причинах доступны в RFC 5280):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" -"\n" -"Удалить сертификат из списка отзыва:\n" -" ipa cert-remove-hold 1032\n" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" -"\n" -"Проверить состояние запроса подписи:\n" -" ipa cert-status 10\n" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" -"\n" -"Поиск сертификатов по имени узла:\n" -" ipa cert-find --subject=ipaserver.example.com\n" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" -"\n" -"Поиск отозванных сертификатов по причине отзыва:\n" -" ipa cert-find --revocation-reason=5\n" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" -"\n" -"Поиск сертификатов по дате выдачи:\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" -"\n" -" Поиск сертификатов, владельцем которых является определённый пользователь:\n" -" ipa cert-find --user=user\n" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" -"\n" -" Проверить сертификат:\n" -" ipa cert-find --file=cert.pem --all\n" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" -"\n" -" Проверить, что владельцем сертификата является определённый пользователь:\n" -" ipa cert-find --file=cert.pem --user=user\n" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" -"\n" -"В текущей версии IPA немедленно выполняет (или отклоняет) все запросы " -"сертификатов, следовательно, данные о состоянии запроса не являются " -"полезными. Эти данные могут понадобиться в следующих версиях или в случае, " -"если CA не сразу выдаёт сертификат.\n" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" "\n" msgstr "" "\n" -"Поддерживаются следующие причины отзыва:\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" +"\n" msgid " * 0 - unspecified\n" msgstr " * 0 - не указана\n" @@ -31319,6 +14500,9 @@ msgstr " * 0 - не указана\n" msgid " * 1 - keyCompromise\n" msgstr " * 1 - keyCompromise\n" +msgid " * 10 - aACompromise\n" +msgstr " * 10 - aACompromise\n" + msgid " * 2 - cACompromise\n" msgstr " * 2 - cACompromise\n" @@ -31340,25 +14524,9096 @@ msgstr " * 8 - removeFromCRL\n" msgid " * 9 - privilegeWithdrawn\n" msgstr " * 9 - privilegeWithdrawn\n" -msgid " * 10 - aACompromise\n" -msgstr " * 10 - aACompromise\n" +msgid " ipa --help" +msgstr " ipa <команда> --help" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr " -8 '${cn}'" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "" +" Кроме того, выполнить эту команду могут следующие серверы: %(masters)s" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "\"%s\" не является корректным типом разрешения" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "\"%s\" не является типом объекта" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "Имеется сертификатов: ${count}" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "Добавлено записей: ${count}" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "Удалено записей: ${count}" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "Отключено записей: ${count}" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "Включено записей: ${count}" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "Удалено записей: ${count}" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "Удалено параметров: ${count}" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "Активировано пользователей: ${count}" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "Восстановлено пользователей: ${count}" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "Пользователей, сделанных неподтверждёнными: ${count}" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "Параметры ${primary_key} ${entity}" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "Обновлено ${primary_key} ${entity}" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "Успешно добавлено ${entity}" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "${primary_key} применяется к:" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "${primary_key} является участником:" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "${primary_key} управляется:" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "Участники ${primary_key}:" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "${primary_key} переопределяет:" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "${product}, версия: ${version}" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "%(attr)s не содержит \"%(value)s\"" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "%(attr)s: неправильный синтаксис." + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "%(attr)s: допустимо только одно значение." + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(command_name)s: %(oname)s не найден" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" +"Поиск LDAP в %(container)s не вернул никаких результатов (основа поиска: " +"%(search_base)s, класс объектов: %(objectclass)s)" + +#, python-format +msgid "" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +"Пропущена %(count)d %(type)s запись. Одновременно можно изменить только одно " +"значение на тип записи DNS." +msgstr[1] "" +"Пропущено %(count)d %(type)s записей. Одновременно можно изменить только " +"одно значение на тип записи DNS." +msgstr[2] "" +"Пропущено %(count)d %(type)s записей. Одновременно можно изменить только " +"одно значение на тип записи DNS." + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "установлено соответствие %(count)d ACI" +msgstr[1] "установлено соответствие %(count)d ACI" +msgstr[2] "установлено соответствие %(count)d ACI" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "установлено соответствие %(count)d CA ACL" +msgstr[1] "установлено соответствие %(count)d CA ACL" +msgstr[2] "установлено соответствие %(count)d CA ACL" + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "установлено соответствие %(count)d CA" +msgstr[1] "установлено соответствие %(count)d CA" +msgstr[2] "установлено соответствие %(count)d CA" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +"установлено соответствие %(count)d правила сопоставления сертификатов с " +"записями пользователей" +msgstr[1] "" +"установлено соответствие %(count)d правил сопоставления сертификатов с " +"записями пользователей" +msgstr[2] "" +"установлено соответствие %(count)d правил сопоставления сертификатов с " +"записями пользователей" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "установлено соответствие %(count)d DNS-сервера" +msgstr[1] "установлено соответствие %(count)d DNS-серверов" +msgstr[2] "установлено соответствие %(count)d DNS-серверов" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "установлено соответствие %(count)d переопределения ID группы" +msgstr[1] "установлено соответствие %(count)d переопределений ID группы" +msgstr[2] "установлено соответствие %(count)d переопределений ID группы" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "установлено соответствие %(count)d правила HBAC" +msgstr[1] "установлено соответствие %(count)d правил HBAC" +msgstr[2] "установлено соответствие %(count)d правил HBAC" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "установлено соответствие %(count)d группы служб HBAC" +msgstr[1] "установлено соответствие %(count)d групп служб HBAC" +msgstr[2] "установлено соответствие %(count)d групп служб HBAC" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "установлено соответствие %(count)d службы HBAC" +msgstr[1] "установлено соответствие %(count)d служб HBAC" +msgstr[2] "установлено соответствие %(count)d служб HBAC" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "установлено соответствие %(count)d представления ID" +msgstr[1] "установлено соответствие %(count)d представлений ID" +msgstr[2] "установлено соответствие %(count)d представлений ID" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "установлено соответствие %(count)d переопределения ID" +msgstr[1] "установлено соответствие %(count)d переопределений ID" +msgstr[2] "установлено соответствие %(count)d переопределений ID" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "установлено соответствие %(count)d расположения IPA" +msgstr[1] "установлено соответствие %(count)d расположений IPA" +msgstr[2] "установлено соответствие %(count)d расположений IPA" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "установлено соответствие %(count)d IPA-сервера" +msgstr[1] "установлено соответствие %(count)d IPA-серверов" +msgstr[2] "установлено соответствие %(count)d IPA-серверов" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "установлено соответствие %(count)d токена OTP" +msgstr[1] "установлено соответствие %(count)d токенов OTP" +msgstr[2] "установлено соответствие %(count)d токенов OTP" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "установлено соответствие %(count)d прокси-сервера RADIUS" +msgstr[1] "установлено соответствие %(count)d прокси-серверов RADIUS" +msgstr[2] "установлено соответствие %(count)d прокси-серверов RADIUS" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "установлено соответствие %(count)d списка пользователей SELinux" +msgstr[1] "установлено соответствие %(count)d списков пользователей SELinux" +msgstr[2] "установлено соответствие %(count)d списков пользователей SELinux" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "установлено соответствие %(count)d группы команд Sudo" +msgstr[1] "установлено соответствие %(count)d групп команд Sudo" +msgstr[2] "установлено соответствие %(count)d групп команд Sudo" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "установлено соответствие %(count)d команды Sudo" +msgstr[1] "установлено соответствие %(count)d команд Sudo" +msgstr[2] "установлено соответствие %(count)d команд Sudo" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "установлено соответствие %(count)d правила Sudo" +msgstr[1] "установлено соответствие %(count)d правил Sudo" +msgstr[2] "установлено соответствие %(count)d правил Sudo" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "установлено соответствие %(count)d переопределения ID пользователя" +msgstr[1] "установлено соответствие %(count)d переопределений ID пользователя" +msgstr[2] "установлено соответствие %(count)d переопределений ID пользователя" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "установлено соответствие %(count)d ключа автомонтирования" +msgstr[1] "установлено соответствие %(count)d ключей автомонтирования" +msgstr[2] "установлено соответствие %(count)d ключей автомонтирования" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "установлено соответствие %(count)d расположения автомонтирования" +msgstr[1] "установлено соответствие %(count)d расположений автомонтирования" +msgstr[2] "установлено соответствие %(count)d расположений автомонтирования" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "" +"установлено соответствие %(count)d списка соответствия автомонтирования" +msgstr[1] "" +"установлено соответствие %(count)d списков соответствия автомонтирования" +msgstr[2] "" +"установлено соответствие %(count)d списков соответствия автомонтирования" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "установлено соответствие %(count)d сертификата" +msgstr[1] "установлено соответствие %(count)d сертификатов" +msgstr[2] "установлено соответствие %(count)d сертификатов" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "установлено соответствие %(count)d делегирования" +msgstr[1] "установлено соответствие %(count)d делегирований" +msgstr[2] "установлено соответствие %(count)d делегирований" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "установлено соответствие %(count)d группы" +msgstr[1] "установлено соответствие %(count)d групп" +msgstr[2] "установлено соответствие %(count)d групп" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "установлено соответствие %(count)d узела" +msgstr[1] "установлено соответствие %(count)d узлов" +msgstr[2] "установлено соответствие %(count)d узлов" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "установлено соответствие %(count)d группы узлов" +msgstr[1] "установлено соответствие %(count)d групп узлов" +msgstr[2] "установлено соответствие %(count)d групп узлов" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "установлено соответствие %(count)d сетевой группы" +msgstr[1] "установлено соответствие %(count)d сетевых групп" +msgstr[2] "установлено соответствие %(count)d сетевых групп" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "установлено соответствие %(count)d разрешения" +msgstr[1] "установлено соответствие %(count)d разрешений" +msgstr[2] "установлено соответствие %(count)d разрешений" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "загружен %(count)d подключаемый модуль" +msgstr[1] "загружено %(count)d подключаемых модуля" +msgstr[2] "загружено %(count)d подключаемых модулей" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "установлено соответствие %(count)d привилегии" +msgstr[1] "установлено соответствие %(count)d привилегий" +msgstr[2] "установлено соответствие %(count)d привилегий" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "установлено соответствие %(count)d профиля" +msgstr[1] "установлено соответствие %(count)d профилей" +msgstr[2] "установлено соответствие %(count)d профилей" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "установлено соответствие %(count)d диапазона" +msgstr[1] "установлено соответствие %(count)d диапазонов" +msgstr[2] "установлено соответствие %(count)d диапазонов" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "установлено соответствие %(count)d роли" +msgstr[1] "установлено соответствие %(count)d ролей" +msgstr[2] "установлено соответствие %(count)d ролей" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "установлено соответствие %(count)d правила" +msgstr[1] "установлено соответствие %(count)d правил" +msgstr[2] "установлено соответствие %(count)d правил" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "установлено соответствие %(count)d сегмента" +msgstr[1] "установлено соответствие %(count)d сегментов" +msgstr[2] "установлено соответствие %(count)d сегментов" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "установлено соответствие %(count)d самообслуживания" +msgstr[1] "установлено соответствие %(count)d самообслуживаний" +msgstr[2] "установлено соответствие %(count)d самообслуживаний" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "установлено соответствие %(count)d правила делегирования служб" +msgstr[1] "установлено соответствие %(count)d правил делегирования служб" +msgstr[2] "установлено соответствие %(count)d правил делегирования служб" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "установлено соответствие %(count)d цели делегирования служб" +msgstr[1] "установлено соответствие %(count)d целей делегирования служб" +msgstr[2] "установлено соответствие %(count)d целей делегирования служб" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "установлено соответствие %(count)d службы" +msgstr[1] "установлено соответствие %(count)d служб" +msgstr[2] "установлено соответствие %(count)d служб" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "установлено соответствие %(count)d суффикса топологии" +msgstr[1] "установлено соответствие %(count)d суффиксов топологии" +msgstr[2] "установлено соответствие %(count)d суффиксов топологии" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "установлено соответствие %(count)d отношения доверия" +msgstr[1] "установлено соответствие %(count)d отношений доверия" +msgstr[2] "установлено соответствие %(count)d отношений доверия" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "установлено соответствие %(count)d пользователя" +msgstr[1] "установлено соответствие %(count)d пользователей" +msgstr[2] "установлено соответствие %(count)d пользователей" + +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d переменных" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "установлено соответствие %(count)d хранилища" +msgstr[1] "установлено соответствие %(count)d хранилищ" +msgstr[2] "установлено соответствие %(count)d хранилищ" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "установлено соответствие %(count)s сервера" +msgstr[1] "установлено соответствие %(count)s серверов" +msgstr[2] "установлено соответствие %(count)s серверов" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "установлено соответствие %(count)s роли сервера" +msgstr[1] "установлено соответствие %(count)s ролей сервера" +msgstr[2] "установлено соответствие %(count)s ролей сервера" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "установлено соответствие %(count)s пользователя" +msgstr[1] "установлено соответствие %(count)s пользователей" +msgstr[2] "установлено соответствие %(count)s пользователей" + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "" +"%(cver)s версия клиента несовместима с %(sver)s версией сервера " +"\"%(server)s\"" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "%(desc)s: %(info)s" + +#, python-format +msgid "%(exception)s" +msgstr "%(exception)s" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "%(filename)s: файл не найден" + +#, python-format +msgid "%(host)s failed" +msgstr "Ошибка %(host)s" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "Ошибка %(host)s: %(error)s" + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" +"%(key)s невозможно удалить, так как он нужен для %(label)s %(dependent)s" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" +"%(key)s не может быть удалён или отключён, потому что является последним в " +"%(label)s %(container)s" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "%(label)s %(key)s не может быть удалён или изменён: %(reason)s" + +#, python-format +msgid "%(line)s" +msgstr "%(line)s" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(metaobject)s: %(oname)s не найден" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "Сертификат %(name)s недействителен" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "Атрибут %(obj)s по умолчанию, %(attr)s, не будет разрешён!" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "%(oname)s с именем \"%(pkey)s\" уже существует" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" +"%(operation)s не поддерживается для учётных записей %(principal_type)s " + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(otype)s \"%(oname)s\" не найден(а)" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s: %(oname)s не найден" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s: %(oname)s не найден" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "%(port)s не является допустимым портом" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "%(subject)s: неверно сформированный сертификат. %(reason)s" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" +"Превышение времени ожидания завершения задачи LDAP %(task)s, DN задачи: " +"\"%(task_dn)s\"" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" +"для категории %(type)s нельзя установить значение \"all\", когда имеются " +"разрешённые %(objects)s" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "%(user)s не является POSIX-пользователем" + +#, python-format +msgid "%(value)s" +msgstr "%(value)s" + +#, python-format +msgid "%i CA added." +msgstr "Добавлена %i CA." + +#, python-format +msgid "%i CA removed." +msgstr "Удалена %i CA." + +#, python-format +msgid "%i CAs added." +msgstr "Добавлено CA: %i." + +#, python-format +msgid "%i CAs removed." +msgstr "Удалено CA: %i." + +#, python-format +msgid "%i host or hostgroup added." +msgstr "Добавлен %i узел или группа узлов." + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "Удалён %i узел или группа узлов." + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "Добавлено узлов или групп узлов: %i." + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "Удалено узлов или групп узлов: %i." + +#, python-format +msgid "%i profile added." +msgstr "Добавлен %i профиль." + +#, python-format +msgid "%i profile removed." +msgstr "Удалён %i профиль." + +#, python-format +msgid "%i profiles added." +msgstr "Добавлено профилей: %i." + +#, python-format +msgid "%i profiles removed." +msgstr "Удалено профилей: %i." + +#, python-format +msgid "%i service added." +msgstr "Добавлена %i служба." + +#, python-format +msgid "%i service removed." +msgstr "Удалена %i служба." + +#, python-format +msgid "%i services added." +msgstr "Добавлено служб: %i." + +#, python-format +msgid "%i services removed." +msgstr "Удалено служб: %i." + +#, python-format +msgid "%i user or group added." +msgstr "Добавлен %i пользователь или группа." + +#, python-format +msgid "%i user or group removed." +msgstr "Удалён %i пользователь или группа." + +#, python-format +msgid "%i users or groups added." +msgstr "Добавлено пользователей или групп: %i." + +#, python-format +msgid "%i users or groups removed." +msgstr "Удалено пользователей или групп: %i." + +#, python-format +msgid "%s" +msgstr "%s" + +#, python-format +msgid "%s Record" +msgstr "Запись %s" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "%s неправильный атрибут" + +#, python-format +msgid "%s record" +msgstr "запись %s" + +#, python-format +msgid "%s to add" +msgstr "%s для добавления" + +#, python-format +msgid "%s to exclude from migration" +msgstr "%s для исключения из миграции" + +#, python-format +msgid "%s to remove" +msgstr "%s для удаления" + +#, python-format +msgid "%s: RADIUS proxy server not found" +msgstr "%s: прокси-сервер RADIUS не найден" + +#, python-format +msgid "%s: group not found" +msgstr "%s: группа не найдена" + +#, python-format +msgid "%s: user is already preserved" +msgstr "%s: пользователь уже хранится" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "'${port}' не является допустимым портом" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "\"%(attr)s\" уже содержит одно или несколько значений" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "\"%(command)s\" не поддерживается. %(additional_info)s" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "\"%(entry)s\" не содержит сертификат." + +#, python-format +msgid "'%(name)s' is required" +msgstr "следует указать \"%(name)s\"" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "Параметр \"%(option)s\" не поддерживается. %(additional_info)s" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "\"%(required)s\" не должно быть пустым, если указано \"%(name)s\"" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "\"%s\" является обязательной частью записи DNS" + +msgid "'add' option" +msgstr "параметр \"add\"" + +msgid "(deprecated)" +msgstr "(больше не поддерживается)" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "(подробности доступны в RFC %s)" msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" msgstr "" -"\n" -"Обратите внимание, что код причины 7 не используется. Подробные сведения в " -"RFC 5280:\n" +". Проверьте идентификатор существующей группы. Используйте параметр --group-" +"overwrite-gid для перезаписи идентификатора группы" + +msgid "7 is not a valid revocation reason" +msgstr "7 — неверная причина отзыва сертификата" + +msgid "" +msgstr "<все серверы DNS IPA>" msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" +"

Browser Kerberos Setup

\n" "\n" msgstr "" +"

Настройка Kerberos для браузера

\n" "\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" +"

Перенос пароля

Если вас направил на эту страницу ваш системный " +"администратор, это означает, что ваши личные данные переносятся в новую " +"систему управления идентификацией и учётными записями пользователей (IPA).

Пожалуйста, введите ваши учётные данные в форму, чтобы завершить этот " +"процесс. После успешного выполнения входа ваша учётная запись Kerberos будет " +"активирована.

" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" "\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" +"

Не удалось проверить ваши учётные данные Kerberos

\n" +"

\n" +" Убедитесь, что у вас имеются действительные билеты (их можно " +"получить через kinit) и правильно настроен браузер.\n" +"

\n" +"\n" +"

Конфигурация браузера

\n" +"\n" +"
\n" +"

\n" +" Если вы используете веб-интерфейс впервые, пожалуйста, настройте ваш браузер.\n" +"

\n" +"
\n" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" +"

Chrome

\n" +"\n" +"

\n" +" Можно настроить Chrome на использование Kerberos для единого " +"входа. Приведённые далее инструкции помогут настроить веб-браузер для " +"отправки ваших учётных данных Kerberos подходящему центру распространения " +"ключей, что позволит выполнять единый вход.\n" +"

\n" +"\n" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" +"

Firefox

\n" +"\n" +"

\n" +" Можно настроить Firefox на использование Kerberos для единого " +"входа. Приведённые далее инструкции помогут настроить веб-браузер для " +"отправки ваших учётных данных Kerberos подходящему центру распространения " +"ключей, что позволит выполнять единый вход.\n" +"

\n" +"\n" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" +"

Internet Explorer

\n" +"

ПРЕДУПРЕЖДЕНИЕ: браузер Internet Explorer больше не " +"поддерживается.

\n" +"

\n" +" После входа в систему на рабочей станции с вашим ключом Kerberos " +"вы сможете использовать этот билет в Internet Explorer.\n" +"

\n" +"

\n" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" +"

Импортировать сертификат центра сертификации

\n" +"
    \n" +"
  1. \n" +" Загрузите сертификат центра сертификации. Либо используйте сертификат /etc/ipa/ca.crt., если узел также является " +"клиентом управления учётными данными.\n" +"
    2. \n" +"
  2. \n" +" Нажмите кнопку меню с подсказкой Настройка и управление " +"Google Chrome (по умолчанию она расположена в правом верхнем углу " +"Chrome) и выберите пункт Настройки.\n" +"
    3. \n" +"
  3. \n" +" Затем нажмите кнопку Показать дополнительные настройки, чтобы просмотреть дополнительные параметры, и нажмите кнопку " +"Настроить сертификаты, которая расположена под заголовком HTTPS/" +"SSL.\n" +"
    4. \n" +"
  4. \n" +" На вкладке Доверенные корневые центры сертификации " +"нажмите кнопку Импорт..., которая расположена в нижней части окна.\n" +"
    5. \n" +"
  5. Выберите файл сертификата центра сертификации, который был загружен вами " +"ранее.
    6. \n" +"
\n" +"\n" + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" +" Чтобы войти с помощью Kerberos, убедитесь, что у вас имеются действительные билеты (получить их " +"можно через kinit) и правильно настроен браузер, затем нажмите кнопку \"Войти\"." + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" +" Чтобы войти с помощью " +"сертификата, убедитесь, что у вас имеется действительный " +"личный сертификат. " + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" +" Чтобы войти с помощью имени " +"пользователя и пароля, введите их в соответствующие поля, затем " +"нажмите кнопку \"Войти\"." + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" +"
  1. Создать базу данных сертификатов или использовать существующую. " +"Чтобы создать новую базу данных, выполните команду:
    # certutil -N " +"-d <путь к базе данных>
  2. Создайте CSR с субъектом " +"CN=<${cn_name}>,O=<область (realm)>, например:
    " +"# certutil -R -d <путь к базе данных> -a -g <размер ключа> " +"-s 'CN=${cn},O=${realm}'${san}
  3. Скопируйте и вставьте CSR " +"(от -----BEGIN NEW CERTIFICATE REQUEST----- до -----END NEW " +"CERTIFICATE REQUEST-----) в расположенную ниже область для ввода " +"текста:
" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" +"

Если метод не выбран, будет использован неявный метод (пароль).

Пароль + двухфакторная аутентификация: в LDAP и " +"Kerberos предусмотрена аутентификация по одному из этих типов " +"аутентификации, но Kerberos использует метод предварительной " +"аутентификации, который требует использования armor ccache.

RADIUS с другим типом: в Kerberos всегда используется " +"RADIUS, а в LDAP он не используется никогда. LDAP распознаёт только варианты " +"аутентификации по паролю и двухфакторной аутентификации.

" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" +"

Параметр для отдельных пользователей переопределяет общее значение, если " +"будет выбран один из вариантов.

Пароль + двухфакторная " +"аутентификация: в LDAP и Kerberos предусмотрена аутентификация по " +"одному из этих типов аутентификации, но Kerberos использует метод " +"предварительной аутентификации, который требует использования armor ccache." +"

RADIUS с другим типом: в Kerberos всегда " +"используется RADIUS, а в LDAP он не используется никогда. LDAP распознаёт " +"только варианты аутентификации по паролю и двухфакторной аутентификации.

" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" +"Войдите на компьютер под управлением Windows с помощью учётной " +"записи вашей области (realm) Kerberos (административный домен)\n" +"

\n" +"

\n" +"В Internet Explorer: выберите в меню \"Инструменты\" пункт " +"\"Параметры Интернета\".\n" +"

\n" +"
\n" +"
    \n" +"
  1. Откройте вкладку \"Безопасность\"
    2. \n" +"
  2. Выберите пункт \"Местная интрасеть\"
    3. \n" +"
  3. Нажмите кнопку \"Узлы...\"
    4. \n" +"
  4. Нажмите кнопку \"Дополнительно\"
    5. \n" +"
  5. Добавьте ваш домен в список
    6. \n" +"
\n" +"
    \n" +"
  1. Откройте вкладку \"Безопасность\"
    2. \n" +"
  2. Выберите пункт \"Местная интрасеть\"
    3. \n" +"
  3. Нажмите кнопку \"Другой...\"
    4. \n" +"
  4. Выберите пункт \"Автоматический вход в сеть только в зоне интрасети\"\n" +"
\n" +"\n" +"
    \n" +"
  1. Посетите веб-сайт, который использует Kerberos, с помощью IE (в URL-" +"адресе необходимо использовать полное имя домена)
    2. \n" +"
  2. Всё готово.
    3. \n" +"
\n" +"
\n" +"\n" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" +"=======\n" +"ПРЕДУПРЕЖДЕНИЕ:\n" +"\n" +"Подключаемый модуль DNA в 389-ds выделяет идентификаторы на основе " +"диапазонов, настроенных для локального домена. В текущей версии сам " +"подключаемый модуль DNA *нельзя* перенастраивать на основе локальных " +"диапазонов, установленных с помощью этого семейства команд.\n" +"\n" +"Для нового локального диапазона следует вручную изменить настройки " +"конфигурации подключаемого модуля DNA. В частности, следует изменить атрибут " +"dnaNextRange \"cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config\" таким " +"образом, чтобы он соответствовал новому диапазону.\n" +"=======\n" + +msgid "A Create reverse" +msgstr "Создать обратную запись A" + +msgid "A IP Address" +msgstr "IP-адрес" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "Разрешение SYSTEM не может быть изменено или удалено" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" +"Разделённый запятыми список полей, по которым следует выполнять поиск при " +"поиске групп" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" +"Разделённый запятыми список полей, по которым следует выполнять поиск при " +"поиске пользователей" + +msgid "A description of this RADIUS proxy server" +msgstr "Описание этого прокси-сервера RADIUS" + +msgid "A description of this auto member rule" +msgstr "Описание этого правила автоучастия" + +msgid "A description of this command" +msgstr "Описание этой команды" + +msgid "A description of this host" +msgstr "Описание этого узла" + +msgid "A description of this host-group" +msgstr "Описание этой группы узлов" + +msgid "A description of this role-group" +msgstr "Описание группы этой роли " + +msgid "A dictionary representing an LDAP entry" +msgstr "Словарь, соответствующий записи LDAP" + +msgid "A group may not be a member of itself" +msgstr "Группа не может входить в состав самой себя" + +msgid "A group may not be added as a member of itself" +msgstr "Группа не может быть добавлена сама в себя" + +msgid "A host willing to act as a key exchanger" +msgstr "Узел, который может работать как обменник ключей" + +msgid "A host willing to act as a mail exchanger" +msgstr "Узел, который может работать как почтовый обменник" + +msgid "A hostname which this alias hostname points to" +msgstr "Имя узла, на который указывает этот псевдоним узла" + +msgid "A list of ACI values" +msgstr "Список значений ACI" + +msgid "A list of LDAP entries" +msgstr "Список записей LDAP" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "Ожидается список пользователей SELinux, с разделителем $" + +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Список глобальных перенаправителей. Для каждого перенаправителя можно " +"указать отдельный порт с помощью стандартного формата \"IP_АДРЕС port ПОРТ\"" + +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Список перенаправителей для отдельных зон. Для каждого перенаправителя можно " +"указать отдельный порт с помощью стандартного формата \"IP_АДРЕС port ПОРТ\"" + +msgid "A managed group cannot have a password policy." +msgstr "Управляемая группа не может иметь политику паролей." + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "Ошибка при проверке того, что все участники были %(verb)s: %(exc)s" + +msgid "A record" +msgstr "Запись" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" +"Разделённый пробелами список атрибутов, которые удалены из обновлений " +"репликации" + +msgid "A string searched in all relevant object attributes" +msgstr "" +"Строка, поиск которой выполняется во всех соответствующих атрибутах объекта" + +msgid "A6 Record data" +msgstr "Данные записи A6" + +msgid "A6 record" +msgstr "Запись A6" + +msgid "AA Compromise" +msgstr "Компрометация AA" + +msgid "AAAA Create reverse" +msgstr "Создать обратную запись AAAA" + +msgid "AAAA IP Address" +msgstr "IP-адрес AAAA" + +msgid "AAAA record" +msgstr "Запись AAAA" + +msgid "ACI" +msgstr "ACI" + +msgid "ACI name" +msgstr "Имя ACI" + +msgid "ACI object." +msgstr "Объект ACI." + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "ACI разрешения %s не найдена" + +msgid "ACI prefix" +msgstr "Префикс ACI" + +msgid "ACI prefix is required" +msgstr "Следует указать префикс ACI" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "ACI с именем \"%s\" не найдена" + +msgid "ACIs" +msgstr "ACI" + +msgid "ACL name" +msgstr "Имя ACL" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "" +"DC AD не удалось получить доступ к контроллерам домена IPA. Скорее всего, " +"проблема связана с DNS или брандмауэром" + +msgid "AD Trust setup" +msgstr "Настройка отношений доверия AD" + +msgid "AD domain controller" +msgstr "Контроллер домена AD" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "" +"Контроллер домена AD сообщает о непоследовательности команд установления " +"связи. Это может означать, например, рассинхронизацию времени между " +"компьютерами, которые обмениваются данными" + +msgid "AFSDB Hostname" +msgstr "Имя узла AFSDB" + +msgid "AFSDB Subtype" +msgstr "Подтип AFSDB" + +msgid "AFSDB record" +msgstr "Запись AFSDB" + +msgid "API Browser" +msgstr "Навигатор API " + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" +"Не отправлен номер версии программного интерфейса (API), совместимость с " +"новейшими версиями не гарантируется. Предполагается следующая версия API " +"сервера: %(server_version)s" + +msgid "APL record" +msgstr "Запись APL" + +msgid "About" +msgstr "О программе" + +msgid "Access Denied" +msgstr "Отказано в доступе" + +msgid "Access Granted" +msgstr "Доступ предоставлен" + +#, python-format +msgid "Access granted: %s" +msgstr "Доступ предоставлен: %s" + +msgid "Access this host" +msgstr "Получить доступ к узлу" + +msgid "Access time" +msgstr "Время доступа" + +msgid "Accessing" +msgstr "Получение доступа" + +msgid "Account" +msgstr "Учётная запись" + +msgid "Account Settings" +msgstr "Параметры учётной записи" + +msgid "Account Status" +msgstr "Состояние учётной записи" + +msgid "Account disabled" +msgstr "Учётная запись отключена" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "Учётная запись отключена: %(disabled)s" + +msgid "Actions" +msgstr "Действия" + +msgid "Activate" +msgstr "Активировать" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "Активировать неподтверждённого пользователя \"%(value)s\"" + +msgid "Activate a stage user." +msgstr "Активировать неподтверждённого пользователя." + +msgid "Active Directory domain" +msgstr "Домен Active Directory" + +msgid "Active Directory domain administrator" +msgstr "Администратор домена Active Directory" + +msgid "Active Directory domain administrator's password" +msgstr "Пароль администратора домена Active Directory" + +msgid "Active Directory domain range" +msgstr "диапазон доменов Active Directory" + +msgid "Active Directory domain with POSIX attributes" +msgstr "Домен Active Directory с атрибутами POSIX" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "Диапазон доверия Active Directory с атрибутами POSIX" + +msgid "Active Directory winsync" +msgstr "winsync Active Directory" + +msgid "Active directory domain administrator's password" +msgstr "Пароль администратора домена Active Directory" + +msgid "Active users" +msgstr "Активные пользователи" + +msgid "Active zone" +msgstr "Активная зона" + +msgid "Add" +msgstr "Добавить" + +msgid "Add CA ACL" +msgstr "Добавить CA ACL" + +msgid "Add CAs to a CA ACL." +msgstr "Добавить CA в CA ACL." + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "Добавить центры сертификации в CA ACL '${primary_key}'" + +msgid "Add Class of Service entry" +msgstr "Добавить запись класса обслуживания" + +msgid "Add Custom Attribute" +msgstr "Добавить пользовательский атрибут" + +msgid "Add Custom Authentication Indicator" +msgstr "Добавить пользовательский идентификатор аутентификации" + +msgid "Add DNS forward zone" +msgstr "Добавить зону перенаправления DNS" + +msgid "Add DNS resource record" +msgstr "Добавить запись ресурса DNS" + +msgid "Add DNS zone" +msgstr "Добавить зону DNS" + +msgid "Add HBAC rule" +msgstr "Добавить правило HBAC" + +msgid "Add HBAC service" +msgstr "Добавить службу HBAC" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "Добавить службу HBAC '${primary_key}' в группы служб HBAC" + +msgid "Add HBAC service group" +msgstr "Добавить группу служб HBAC" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "Добавить группы служб HBAC в правило HBAC '${primary_key}'" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "Добавить службы HBAC в правило HBAC '${primary_key}'" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "Добавить службы HBAC в группу служб HBAC '${primary_key}'" + +msgid "Add ID range" +msgstr "Добавить диапазон идентификаторов" + +msgid "Add ID view" +msgstr "Добавить представление ID" + +msgid "Add IPA location" +msgstr "Добавить расположение IPA" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "Добавить IPA-сервер в расположение IPA '${primary_key}'" + +msgid "Add Kerberos Principal Alias" +msgstr "Добавить псевдоним учётной записи Kerberos" + +msgid "Add Many" +msgstr "Добавить много" + +msgid "Add OTP token" +msgstr "Добавить токен OTP" + +msgid "Add RADIUS server" +msgstr "Добавить сервер RADIUS" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "Добавить группы запуска от имени в правило Sudo '${primary_key}'" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "" +"Добавить группы пользователей запуска от имени в правило Sudo " +"'${primary_key}'" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "" +"Добавить пользователей запуска от имени в правило Sudo '${primary_key}'" + +msgid "Add SELinux user map" +msgstr "Добавить список пользователей SELinux" + +msgid "Add a manager to the stage user entry" +msgstr "Добавить руководителя в запись неподтверждённого пользователя." + +msgid "Add a manager to the user entry" +msgstr "Добавить руководителя в запись пользователя." + +msgid "Add a new DNS server." +msgstr "Добавить новый DNS-сервер." + +msgid "Add a new Group ID override." +msgstr "Добавить новое переопределение ID группы." + +msgid "Add a new HBAC service group." +msgstr "Добавить новую группу служб HBAC." + +msgid "Add a new HBAC service." +msgstr "Добавить новую службу HBAC." + +msgid "Add a new ID View." +msgstr "Добавить новое представление ID." + +msgid "Add a new ID override." +msgstr "Добавить новое переопределение ID." + +msgid "Add a new IPA location." +msgstr "Добавить новую запись расположения IPA." + +msgid "Add a new IPA new service." +msgstr "Добавить новую службу IPA." + +msgid "Add a new IPA service." +msgstr "Добавить новую службу IPA." + +msgid "Add a new OTP token." +msgstr "Добавить новый токен OTP." + +msgid "Add a new RADIUS proxy server." +msgstr "Добавить новый прокси-сервер RADIUS." + +msgid "Add a new SMB service." +msgstr "Добавить новую службу SMB." + +msgid "Add a new User ID override." +msgstr "Добавить новое переопределение ID пользователя." + +msgid "Add a new YubiKey OTP token." +msgstr "Добавить новый токен OTP YubiKey." + +msgid "Add a new delegation." +msgstr "Добавить новое делегирование." + +msgid "Add a new group password policy." +msgstr "Добавить новую групповую политику паролей." + +msgid "Add a new host." +msgstr "Добавить новый узел." + +msgid "Add a new hostgroup." +msgstr "Добавить новую группу узлов." + +msgid "Add a new netgroup." +msgstr "Добавить новую сетевую группу." + +msgid "Add a new permission." +msgstr "Добавить новое разрешение." + +msgid "Add a new privilege." +msgstr "Добавить новую привилегию." + +msgid "Add a new role." +msgstr "Добавить новую роль." + +msgid "Add a new segment." +msgstr "Добавить новый сегмент." + +msgid "Add a new self-service permission." +msgstr "Добавить новое разрешение самообслуживания." + +msgid "Add a new stage user." +msgstr "Добавить нового неподтверждённого пользователя." + +msgid "Add a new topology suffix to be managed." +msgstr "Добавить новый суффикс топологии, которым следует управлять." + +msgid "Add a new user." +msgstr "Добавить нового пользователя." + +msgid "Add a permission for per-forward zone access delegation." +msgstr "" +"Добавить разрешение для делегирования прав доступа для отдельных зон " +"перенаправления." + +msgid "Add a permission for per-zone access delegation." +msgstr "Добавить разрешение для делегирования прав доступа для отдельных зон." + +msgid "Add a system permission without an ACI" +msgstr "Добавить разрешение на доступ к системе без использования ACI" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "" +"Добавить разрешение на доступ к системе без использования ACI (внутренняя " +"команда)." + +msgid "Add a vault." +msgstr "Добавить хранилище." + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "" +"Добавить группы разрешённых команд Sudo в правило Sudo '${primary_key}'" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "Добавить разрешённые команды Sudo в правило Sudo '${primary_key}'" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" +"Добавить пару атрибут/значение. Формат: атрибут=значение. Атрибут\n" +"должен быть частью схемы." + +msgid "Add an automember rule." +msgstr "Добавить правило автоучастия." + +msgid "Add an option to the Sudo Rule." +msgstr "Добавить параметр в правило Sudo." + +msgid "Add and Add Another" +msgstr "Добавить и добавить ещё" + +msgid "Add and Close" +msgstr "Добавить и закрыть" + +msgid "Add and Edit" +msgstr "Добавить и изменить" + +msgid "Add automount key" +msgstr "Добавить ключ автомонтирования" + +msgid "Add automount location" +msgstr "Добавить расположение автомонтирования" + +msgid "Add automount map" +msgstr "Добавить список соответствия автомонтирования" + +msgid "Add certificate authority" +msgstr "Добавить центр сертификации" + +msgid "Add certificate identity mapping rule" +msgstr "Добавить правило сопоставления сертификатов с записями пользователей" + +msgid "Add certificate mapping data" +msgstr "Добавить данные сопоставления сертификата" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "Добавить профили сертификатов в CA ACL '${primary_key}'" + +msgid "Add certificates to host entry" +msgstr "Добавить сертификаты в запись узла" + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "Добавить команды и группы команд Sudo, которых касается правило Sudo." + +msgid "Add conditions to an automember rule." +msgstr "Добавить условия в правило автоучастия." + +msgid "Add custom value" +msgstr "Добавить пользовательское значение" + +msgid "Add delegation" +msgstr "Добавить делегирование" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "" +"Добавить группы запрещённых команд Sudo в правило Sudo '${primary_key}'" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "Добавить запрещённые команды Sudo в правило Sudo '${primary_key}'" + +msgid "Add domain" +msgstr "Добавить домен" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "Добавить исключающее условие в '${primary_key}'" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" +"Добавить запись перенаправления для сервера имён, расположенного в созданной " +"зоне" + +msgid "Add group ID override" +msgstr "Добавить переопределение ID группы" + +msgid "Add group for Sudo to execute as." +msgstr "Добавить группу для выполнения Sudo от её имени." + +msgid "Add host" +msgstr "Добавить узел" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "Добавить узел '${primary_key}' в правила HBAC" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "Добавить узел '${primary_key}' в группы узлов" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "Добавить узел '${primary_key}' в сетевые группы" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "Добавить узел '${primary_key}' в роли" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "Добавить узел '${primary_key}' в правила Sudo" + +msgid "Add host group" +msgstr "Добавить группу узлов" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "Добавить группу узлов '${primary_key}' в правила HBAC" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "Добавить группу узлов '${primary_key}' в группы узлов" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "Добавить группу узлов '${primary_key}' в сетевые группы" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "Добавить группу узлов '${primary_key}' в правила Sudo" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "Добавить группы узлов в CA ACL '${primary_key}'" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "Добавить группы узлов в правило HBAC '${primary_key}'" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "Добавить группы узлов в список пользователей SELinux '${primary_key}'" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "Добавить группы узлов в группу узлов '${primary_key}'" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "Добавить группы узлов в сетевую группу '${primary_key}'" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "Добавить группы узлов в роль '${primary_key}'" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "Добавить группы узлов в правило Sudo '${primary_key}'" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "Добавить узлы и группы узлов, которых касается правило Sudo." + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "Добавить узлы в CA ACL '${primary_key}'" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "Добавить узлы в правило HBAC '${primary_key}'" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "Добавить узлы в список пользователей SELinux '${primary_key}'" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "Добавить узлы в группу узлов '${primary_key}'" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "Добавить узлы в сетевую группу '${primary_key}'" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "Добавить узлы в роль '${primary_key}'" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "Добавить узлы в правило Sudo '${primary_key}'" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "Добавить узлы, которые управляют узлом '${primary_key}'" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "Добавить узлы, которые управляют службой '${primary_key}'" + +msgid "Add hosts that can manage this host." +msgstr "Добавить узлы, которые могут управлять этим узлом." + +msgid "Add hosts that can manage this service." +msgstr "Добавить узлы, которые могут управлять этой службой." + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "Добавить включающее условие в '${primary_key}'" + +msgid "Add member to a named service delegation rule." +msgstr "Добавить участника в именованное правило делегирования служб." + +msgid "Add member to a named service delegation target." +msgstr "Добавить участника в именованную цель делегирования служб." + +msgid "Add members to Sudo Command Group." +msgstr "Добавить участников в группу команд Sudo." + +msgid "Add members to a group." +msgstr "Добавить участников в группу." + +msgid "Add members to a hostgroup." +msgstr "Добавить участников в группу узлов." + +msgid "Add members to a netgroup." +msgstr "Добавить участников в сетевую группу." + +msgid "Add members to a permission." +msgstr "Добавить участников в разрешение." + +msgid "Add members to a privilege." +msgstr "Добавить участников в привилегию." + +msgid "Add members to a role." +msgstr "Добавить участников в роль." + +msgid "Add members to a vault." +msgstr "Добавить участников в хранилище." + +msgid "Add members to an HBAC service group." +msgstr "Добавить участников в группу служб HBAC." + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" +"Добавить перенесённые записи пользователей без группы в группу по умолчанию " +"(значение по умолчанию: true)" + +msgid "Add netgroup" +msgstr "Добавить сетевую группу" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "Добавить сетевую группу '${primary_key}' в сетевые группы" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "Добавить сетевые группы в сетевую группу '${primary_key}'" + +msgid "Add new DNS resource record." +msgstr "Добавить новую запись ресурса DNS." + +msgid "Add new certificates to a service" +msgstr "Добавить новые сертификаты в запись службы." + +msgid "Add new principal alias to a service" +msgstr "Добавить новый псевдоним учётной записи в запись службы." + +msgid "Add new principal alias to host entry" +msgstr "Добавить новый псевдоним учётной записи в запись узла." + +msgid "Add new principal alias to the stageuser entry" +msgstr "" +"Добавить новый псевдоним учётной записи в запись неподтверждённого " +"пользователя." + +msgid "Add new principal alias to the user entry" +msgstr "Добавить новый псевдоним учётной записи в запись пользователя." + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" +"Добавить одно или несколько сопоставлений сертификатов в запись " +"неподтверждённого пользователя." + +msgid "Add one or more certificate mappings to the user entry." +msgstr "" +"Добавить одно или несколько сопоставлений сертификатов в запись пользователя." + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "Добавить один или несколько сертификатов в запись idoverrideuser." + +msgid "Add one or more certificates to the stageuser entry" +msgstr "" +"Добавить один или несколько сертификатов в запись неподтверждённого " +"пользователя." + +msgid "Add one or more certificates to the user entry" +msgstr "Добавить один или несколько сертификатов в запись пользователя." + +msgid "Add owners to a vault container." +msgstr "Добавить владельцев в контейнер хранилищ." + +msgid "Add owners to a vault." +msgstr "Добавить владельцев в хранилище." + +msgid "Add password policy" +msgstr "Добавить политику паролей" + +msgid "Add permission" +msgstr "Добавить разрешение" + +msgid "Add permissions to a privilege." +msgstr "Добавить разрешения в привилегию." + +msgid "Add principal" +msgstr "Добавить учётную запись" + +msgid "Add privilege" +msgstr "Добавить привилегию" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "Добавить привилегию '${primary_key}' в разрешения" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "Добавить привилегии в разрешение '${primary_key}'" + +msgid "Add privileges to a role." +msgstr "Добавить привилегии в роль." + +msgid "Add profiles to a CA ACL." +msgstr "Добавить профили в CA ACL." + +msgid "Add role" +msgstr "Добавить роль" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "Добавить роль '${primary_key}' в привилегии" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "Добавить роли в привилегию '${primary_key}'" + +msgid "Add rule" +msgstr "Добавить правило" + +msgid "Add self service permission" +msgstr "Добавить разрешение самообслуживания" + +msgid "Add service" +msgstr "Добавить службу" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "Добавить службу '${primary_key}' в роли" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "Добавить службы в CA ACL '${primary_key}'" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "Добавить службы в участники хранилища '${primary_key}'" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "Добавить службы во владельцы хранилища '${primary_key}'" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "Добавить службы в роль '${primary_key}'" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "Добавить службы в группу пользователей '${primary_key}'" + +msgid "Add services to a CA ACL." +msgstr "Добавить службы в CA ACL." + +msgid "Add services to an HBAC rule." +msgstr "Добавить службы в правило HBAC." + +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "Добавить узлы-источники и группы узлов из правила HBAC." + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "Добавить узлы-источники и группы узлов в правило HBAC." + +msgid "Add stage user" +msgstr "Добавить неподтверждённого пользователя" + +msgid "Add sudo command" +msgstr "Добавить команду Sudo" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "Добавить команду Sudo '${primary_key}' в группы команд Sudo" + +msgid "Add sudo command group" +msgstr "Добавить группу команд Sudo" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "Добавить команды Sudo в группу команд Sudo '${primary_key}'" + +msgid "Add sudo option" +msgstr "Добавить параметр Sudo" + +msgid "Add sudo rule" +msgstr "Добавить правило Sudo" + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "Добавить целевые узлы или группы узлов в CA ACL." + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "Добавить целевые узлы и группы узлов в правило HBAC." + +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "" +"Добавить целевые узлы и группы узлов в правило списка пользователей SELinux." + +msgid "Add target to a named service delegation rule." +msgstr "Добавить цель в именованное правило делегирования служб." + +msgid "Add target to a named service delegation." +msgstr "Добавить цель в именованное делегирование служб." + +msgid "Add the host to DNS with this IP address" +msgstr "Добавить узел в DNS с этим IP-адресом" + +msgid "Add to default group" +msgstr "Добавить в группу по умолчанию" + +msgid "Add topology segment" +msgstr "Добавить сегмент топологии" + +msgid "Add trust" +msgstr "Добавить отношение доверия" + +msgid "Add user" +msgstr "Добавить пользователя" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "Добавить пользователя '${primary_key}' в правила HBAC" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "Добавить пользователя '${primary_key}' в сетевые группы" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "Добавить пользователя '${primary_key}' в роли" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "Добавить пользователя '${primary_key}' в правила Sudo" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "Добавить пользователя '${primary_key}' в группы пользователей" + +msgid "Add user ID override" +msgstr "Добавить переопределение ID пользователя" + +msgid "Add user group" +msgstr "Добавить группу пользователей" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "Добавить группу пользователей '${primary_key}' в правила HBAC" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "Добавить группу пользователей '${primary_key}' в сетевые группы" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "Добавить группу пользователей '${primary_key}' в роли" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "Добавить группу пользователей '${primary_key}' в правила Sudo" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "Добавить группу пользователей '${primary_key}' в группы пользователей" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "Добавить группы пользователей в CA ACL '${primary_key}'" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "Добавить группы пользователей в правило HBAC '${primary_key}'" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" +"Добавить группы пользователей в список пользователей SELinux '${primary_key}'" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "Добавить группы пользователей в участники хранилища '${primary_key}'" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "Добавить группы пользователей в сетевую группу '${primary_key}'" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "Добавить группы пользователей во владельцы хранилища '${primary_key}'" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "Добавить группы пользователей в роль '${primary_key}'" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "Добавить группы пользователей в правило Sudo '${primary_key}'" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "Добавить группы пользователей в группу пользователей '${primary_key}'" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "Добавить пользователей и группы, которых касается правило Sudo." + +msgid "Add users and groups for Sudo to execute as." +msgstr "Добавить пользователей и группы для выполнения Sudo от их имени." + +msgid "Add users and groups to a CA ACL." +msgstr "Добавить пользователей и группы в CA ACL." + +msgid "Add users and groups to an HBAC rule." +msgstr "Добавить пользователей и группы в правило HBAC." + +msgid "Add users and groups to an SELinux User Map rule." +msgstr "" +"Добавить пользователей и группы в правило списка пользователей SELinux." + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "Добавить пользователей в CA ACL '${primary_key}'" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "Добавить пользователей в правило HBAC '${primary_key}'" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "Добавить пользователей в список пользователей SELinux '${primary_key}'" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "Добавить пользователей в участники хранилища '${primary_key}'" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "Добавить пользователей в сетевую группу '${primary_key}'" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "Добавить пользователей во владельцы хранилища '${primary_key}'" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "Добавить пользователей в роль '${primary_key}'" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "Добавить пользователей в правило Sudo '${primary_key}'" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "Добавить пользователей в группу пользователей '${primary_key}'" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "Добавить пользователей, которые управляют токеном OTP '${primary_key}'" + +msgid "Add users that can manage this token." +msgstr "Добавить пользователей, которые могут управлять этим токеном." + +msgid "Add vault" +msgstr "Добавить хранилище" + +#, python-format +msgid "Added %(map)s" +msgstr "Добавлено %(map)s" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "Добавлено %(src)s в %(dst)s" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "" +"Добавлено отношение доверия Active Directory для области (realm) " +"\"%(value)s\"" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "Добавлена CA ACL \"%(value)s\"" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" +"Добавлено правило сопоставления сертификатов с записями пользователей " +"\"%(value)s\"" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "Добавлено переопределение ID группы \"%(value)s\"" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "Добавлено правило HBAC \"%(value)s\"" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "Добавлена служба HBAC \"%(value)s\"" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "Добавлена группа служб HBAC \"%(value)s\"" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "Добавлено представление ID \"%(value)s\"" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "Добавлено переопределение ID \"%(value)s\"" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "Добавлен диапазон идентификаторов \"%(value)s\"" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "Добавлена запись расположения IPA \"%(value)s\"" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "Добавлен токен OTP \"%(value)s\"" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "Добавлен прокси-сервер RADIUS \"%(value)s\"" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "Добавлен список пользователей SELinux \"%(value)s\"" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Добавлена команда Sudo \"%(value)s\"" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Добавлена группа команд Sudo \"%(value)s\"" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Добавлено правило Sudo \"%(value)s\"" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "Добавлено переопределение ID пользователя \"%(value)s\"" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "Добавлено правило автоучастия \"%(value)s\"" + +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "Добавлен непрямой список соответствия автомонтирования \"%(value)s\"" + +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "Добавлен ключ автомонтирования \"%(value)s\"" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "Добавлено расположение автомонтирования \"%(value)s\"" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "Добавлен список соответствия автомонтирования \"%(value)s\"" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "" +"Добавлены сопоставления сертификатов в запись пользователя \"%(value)s\"" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "Добавлены сертификаты в запись узла \"%(value)s\"" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "Добавлены сертификаты в запись idoverrideuser \"%(value)s\"" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "Добавлены сертификаты в учётную запись службы \"%(value)s\"" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "" +"Добавлены сертификаты в запись неподтверждённого пользователя \"%(value)s\"" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "Добавлены сертификаты в запись пользователя \"%(value)s\"" + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "Добавлено условие (условия) в \"%(value)s\"" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "Добавлено делегирование \"%(value)s\"" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Добавлена группа \"%(value)s\"" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "Добавлен узел \"%(value)s\"" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Добавлена группа узлов \"%(value)s\"" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "Добавлена сетевая группа \"%(value)s\"" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "Добавлен новый DNS-сервер \"%(value)s\"" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Добавлены новые псевдонимы в запись узла \"%(value)s\"" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "" +"Добавлены новые псевдонимы в запись неподтверждённого пользователя " +"\"%(value)s\"" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "Добавлены новые псевдонимы в учётную запись службы \"%(value)s\"" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "Добавлены новые псевдонимы в запись пользователя \"%(value)s\"" + +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "В правило Sudo \"%(rule)s\" добавлен параметр \"%(option)s\"" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "Добавлено разрешение \"%(value)s\"" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "Добавлена привилегия \"%(value)s\"" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "Добавлена роль \"%(value)s\"" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "Добавлен сегмент \"%(value)s\"" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "Добавлено самообслуживание \"%(value)s\"" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "Добавлена служба \"%(value)s\"" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "Добавлено правило делегирования служб \"%(value)s\"" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "Добавлена цель делегирования служб \"%(value)s\"" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "Добавлен неподтверждённый пользователь \"%(value)s\"" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "Добавлено системное разрешение \"%(value)s\"" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "Добавлен суффикс топологии \"%(value)s\"" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "Добавлен пользователь \"%(value)s\"" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "Добавлено хранилище \"%(value)s\"" + +msgid "Additional instructions:" +msgstr "Дополнительные инструкции:" + +msgid "Address not valid, can't redirect" +msgstr "Адрес недействителен, перенаправление невозможно" + +msgid "Administrative account" +msgstr "Учётная запись администратора" + +msgid "Administrator e-mail address" +msgstr "Адрес электронной почты администратора" + +msgid "Advertised by servers" +msgstr "Сообщено серверами" + +msgid "Affiliation Changed" +msgstr "Изменение принадлежности" + +msgid "Agreements deleted" +msgstr "Соглашения удалены" + +msgid "Algorithm" +msgstr "Алгоритм" + +msgid "All" +msgstr "Все" + +msgid "All attributes to which the permission applies" +msgstr "Все атрибуты, к которым применяется разрешение" + +msgid "All commands should at least have a result" +msgstr "Все команды должны выводить результат" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "Ни один сервер имён не ответил на запрос обратной зоны DNS %(revdns)s" + +msgid "All target filters, including those implied by type and memberof" +msgstr "Все фильтры целей, включая те, которые применяются по type и memberof" + +msgid "Allow" +msgstr "Разрешить" + +msgid "Allow PTR sync" +msgstr "Разрешить PTR-синхронизацию" + +msgid "Allow access from the trusted domain" +msgstr "Разрешить доступ из доверенного домена." + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "Разрешить добавление внешних не IPA-участников из доверенных доменов" + +msgid "Allow dynamic updates." +msgstr "Разрешить динамические обновления" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" +"Разрешить переход к резервному варианту LDAP DC AD при определении адресов " +"доверенных объектов AD. Только для двусторонних отношений доверия." + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "Разрешить группам узлов создавать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "Разрешить группам узлов получать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "Разрешить узлам создавать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "Разрешить узлам получать таблицу ключей '${primary_key}'" + +msgid "Allow in-line DNSSEC signing" +msgstr "Разрешить линейную подпись DNSSEC" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "Разрешить линейную подпись DNSSEC записей в зоне" + +msgid "Allow query" +msgstr "Разрешить запрос" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "Разрешить синхронизацию прямых (A, AAAA) и обратных (PTR) записей" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" +"Разрешить синхронизацию прямых (A, AAAA) и обратных (PTR) записей в зоне" + +msgid "Allow transfer" +msgstr "Разрешить перенос" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "Разрешить использование ресурсов IPA доменом отношения доверия." + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" +"Разрешить группам пользователей создавать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Разрешить группам пользователей получать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "Разрешить пользователям создавать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "Разрешить пользователям получать таблицу ключей '${primary_key}'" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" +"Разрешить пользователям, группам, узлам или группам узлов создавать таблицу " +"ключей этого узла." + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" +"Разрешить пользователям, группам, узлам или группам узлов создавать таблицу " +"ключей этой службы." + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" +"Разрешить пользователям, группам, узлам или группам узлов получать таблицу " +"ключей этого узла." + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" +"Разрешить пользователям, группам, узлам или группам узлов получать таблицу " +"ключей этой службы." + +msgid "Allowed Target" +msgstr "Допустимая цель" + +msgid "Allowed to Impersonate" +msgstr "Разрешено олицетворять" + +msgid "Allowed to create keytab" +msgstr "Разрешено создавать таблицу ключей" + +msgid "Allowed to retrieve keytab" +msgstr "Разрешено получать таблицу ключей" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "" +"Разрешает миграцию несмотря на использование подключаемого модуля " +"совместимости" + +msgid "Already registered" +msgstr "Уже зарегистрировано" + +msgid "Alternative UPN suffixes" +msgstr "Альтернативные суффиксы UPN" + +msgid "Altitude" +msgstr "Высота над уровнем моря" + +msgid "Always ask" +msgstr "Всегда спрашивать" + +msgid "Ambiguous search, user domain was not specified" +msgstr "Неоднозначные параметры поиска: не указан домен пользователя" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "Главный IPA-сервер не может быть удалён или отключён" + +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "Произошла ошибка (${error})" + +msgid "An error occurred while fetching dns zones." +msgstr "Ошибка при получении данных зон DNS." + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" +"Для этого отношения доверия уже существует диапазон идентификаторов. Следует " +"либо удалить старый диапазон, либо исключить из команды параметры --base-" +"id/--range-size." + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "Интервал между регулярными опросами сервера имён о новых зонах DNS" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "Не удалось определить привязку \"%(anchor)s\"." + +msgid "Anchor to override" +msgstr "Привязка, которую следует переопределить" + +msgid "Any CA" +msgstr "Любой CA" + +msgid "Any Command" +msgstr "Любая команда" + +msgid "Any Group" +msgstr "Любая группа" + +msgid "Any Host" +msgstr "Любой узел" + +msgid "Any Profile" +msgstr "Любой профиль" + +msgid "Any Service" +msgstr "Любая служба" + +msgid "Anyone" +msgstr "Любой" + +msgid "Applied to hosts" +msgstr "Применено к узлам" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" +"Применяет представление ID к указанным узлам или текущим участникам " +"указанных групп узлов. Если к узлу применяется другое представление ID, оно " +"будет переопределено." + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" +"Применяет представление ID к указанным узлам или текущим участникам " +"указанных групп узлов. Если к узлу применяется другое представление ID, оно " +"будет переопределено." + +msgid "Apply" +msgstr "Применить" + +msgid "Apply ACI to your own entry (self)" +msgstr "Применить ACI к своей собственной записи (self)" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "Применить представление ID '${primary_key}' к узлам" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "Применить представление ID '${primary_key}' к узлам групп узлов" + +msgid "Apply to host groups" +msgstr "Применить к группам узлов" + +msgid "Apply to hosts" +msgstr "Применить к узлам" + +msgid "Arbitrary string identifying the segment" +msgstr "Обязательная строка, которая идентифицирует сегмент" + +msgid "Archive data into a vault." +msgstr "Архивировать данные в хранилище." + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "Данные архивированы в хранилище \"%(value)s\"" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" +"Вы действительно хотите ${action} пользователя?
Изменения вступят в силу " +"немедленно." + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "Вы действительно хотите активировать ${object}?" + +msgid "Are you sure you want to activate selected users?" +msgstr "Вы действительно хотите активировать выбранные записи пользователей?" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "Вы действительно хотите добавить разрешение для зоны DNS ${object}?" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "Вы действительно хотите удалить ${object}?" + +msgid "Are you sure you want to delete selected entries?" +msgstr "Вы действительно хотите удалить выбранные записи?" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "Вы действительно хотите отключить ${object}?" + +msgid "Are you sure you want to disable selected entries?" +msgstr "Вы действительно хотите отключить выбранные записи?" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "Вы действительно хотите включить ${object}?" + +msgid "Are you sure you want to enable selected entries?" +msgstr "Вы действительно хотите включить выбранные записи?" + +msgid "Are you sure you want to proceed with the action?" +msgstr "Вы действительно хотите выполнить это действие?" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "Вы действительно хотите перестроить автоучастие?" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "Вы действительно хотите удалить разрешение для зоны DNS ${object}?" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "Вы действительно хотите восстановить ${object}?" + +msgid "Are you sure you want to restore selected users?" +msgstr "Вы действительно хотите восстановить выбранные записи пользователей?" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "Вы действительно хотите разместить ${object} на хранение?" + +msgid "Are you sure you want to stage selected users?" +msgstr "" +"Вы действительно хотите сделать выбранных пользователей неподтверждёнными?" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" +"Вы действительно хотите отменить применение представления ID к выбранным " +"записям?" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "Вы действительно хотите разблокировать пользователя ${object}?" + +msgid "Are you sure you want to unprovision this host?" +msgstr "Вы действительно хотите отменить подготовку этого узла?" + +msgid "Are you sure you want to unprovision this service?" +msgstr "Вы действительно хотите отменить подготовку этой службы?" + +msgid "Arguments to details function" +msgstr "Аргументы функции для получения сведений" + +msgid "As Whom" +msgstr "В качестве" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" +"Запросить неслучайный пароль, который следует использовать для учётной записи" + +msgid "Assigned ID View" +msgstr "Назначенное представление ID" + +msgid "Assigned manager of the token (default: self)" +msgstr "Назначенный руководитель токена (значение по умолчанию: self)" + +msgid "Assigned user of the token (default: self)" +msgstr "Назначенный пользователь токена (значение по умолчанию: self)" + +msgid "Asymmetric" +msgstr "Асимметричное" + +msgid "At least the domain or IP address should be specified" +msgstr "Следует указать хотя бы домен или IP-адрес" + +msgid "Attribute" +msgstr "Атрибут" + +msgid "Attribute Key" +msgstr "Ключ атрибута" + +msgid "Attribute breakdown" +msgstr "Разбивка по атрибутам" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" +"Атрибут для фильтрации с помощью регулярных выражений. Например, полное имя " +"для узла или руководитель для пользователя." + +msgid "Attributes" +msgstr "Атрибуты" + +msgid "Attributes for total update" +msgstr "Атрибуты для общего обновления" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" +"Атрибуты, которые не реплицируются на сервер-потребитель при частичном " +"обновлении. Например, `(objectclass=*) $ EXCLUDE accountlockout memberof" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" +"Атрибуты, которые не реплицируются на сервер-потребитель при общем " +"обновлении. Например, (objectclass=*) $ EXCLUDE accountlockout memberof" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "Атрибуты, которые следует игнорировать для записей групп в DS" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "Атрибуты, которые следует игнорировать для записей пользователей в DS" + +msgid "Attributes to replicate" +msgstr "Атрибуты, которые следует реплицировать" + +msgid "Attributes to strip" +msgstr "Атрибуты, которые следует убрать" + +msgid "Attributes to which the delegation applies" +msgstr "Атрибуты, к которым применяется делегирование" + +msgid "Attributes to which the permission applies" +msgstr "Атрибуты, к которым применяется разрешение" + +msgid "Attributes to which the permission applies by default" +msgstr "Атрибуты, к которым по умолчанию применяется разрешение" + +msgid "Attributes to which the permission applies." +msgstr "Атрибуты, к которым применяется разрешение." + +msgid "Audit" +msgstr "Аудит" + +msgid "Authenticating" +msgstr "Аутентификация" + +msgid "Authentication" +msgstr "Аутентификация" + +msgid "Authentication Indicators" +msgstr "Индикаторы аутентификации" + +msgid "Authentication indicator" +msgstr "Индикатор аутентификации" + +msgid "Authentication indicators" +msgstr "Индикаторы аутентификации" + +msgid "Authentication with Kerberos failed" +msgstr "Не удалось выполнить аутентификацию с Kerberos" + +msgid "Authentication with personal certificate failed" +msgstr "Не удалось выполнить аутентификацию с личным сертификатом" + +msgid "Authoritative nameserver" +msgstr "Полномочный сервер имён" + +msgid "Authoritative nameserver change" +msgstr "Изменение полномочного сервера имён" + +msgid "Authoritative nameserver domain name" +msgstr "Имя домена полномочного сервера имён" + +msgid "Authority ID" +msgstr "ID центра" + +msgid "Auto Membership Rule" +msgstr "Правило автоучастия" + +msgid "Auto Membership is not configured" +msgstr "Автоучастие не настроено" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "Правило автоучастия: %s не найдено!" + +msgid "Autogenerated" +msgstr "Созданные автоматически" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" +"Не удалось автоматически обновить системные записи DNS. Повторно запустите " +"обновление системных записей вручную, чтобы получить список отсутствующих " +"записей." + +msgid "Automember" +msgstr "Автоучастник" + +msgid "Automember Rule" +msgstr "Правило автоучастия" + +msgid "Automember rebuild membership task completed" +msgstr "Завершена задача по перестройке записей автоучастия" + +msgid "Automember rebuild membership task started" +msgstr "Выполняется задача по перестройке записей автоучастия" + +msgid "Automount" +msgstr "Автомонтирование" + +msgid "Automount Key" +msgstr "Ключ автомонтирования" + +msgid "Automount Keys" +msgstr "Ключи автомонтирования" + +msgid "Automount Location" +msgstr "Расположение автомонтирования" + +msgid "Automount Location Settings" +msgstr "Параметры расположения автомонтирования" + +msgid "Automount Locations" +msgstr "Расположения автомонтирования" + +msgid "Automount Map" +msgstr "Список соответствия автомонтирования" + +msgid "Automount Maps" +msgstr "Списки соответствия автомонтирования" + +msgid "Automount key name." +msgstr "Имя ключа автомонтирования" + +msgid "Automount key object." +msgstr "Объект ключа автомонтирования." + +msgid "Automount location name." +msgstr "Имя расположения автомонтирования" + +msgid "Automount map name." +msgstr "Имя списка соответствия автомонтирования" + +msgid "Automount master file." +msgstr "Главный файл автомонтирования." + +msgid "Available" +msgstr "Доступно" + +msgid "BIND update policy" +msgstr "Политика обновления BIND" + +msgid "Back" +msgstr "Назад" + +msgid "Back to Top" +msgstr "К началу" + +msgid "Bad format in credentials cache" +msgstr "Неверный формат кэша учётных данных " + +msgid "Bad or unsupported salt type.\n" +msgstr "Недопустимый или неподдерживаемый тип соли.\n" + +msgid "Bad search filter" +msgstr "Неверный фильтр поиска" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "Неверный фильтр поиска %(info)s" + +msgid "Base DN" +msgstr "Базовое DN" + +msgid "Base DN on remote LDAP server" +msgstr "Базовое DN на удалённом LDAP-сервере" + +msgid "Base ID" +msgstr "Основной ID" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "Основа для субъектов сертификатов (OU=Test,O=Example)" + +msgid "Base-64 encoded certificate." +msgstr "Base-64 шифрованный сертификат" + +msgid "Base-64 encoded host certificate" +msgstr "Base-64 шифрованный сертификат узла" + +msgid "Base-64 encoded server certificate" +msgstr "Base-64 шифрованный сертификат сервера" + +msgid "Base-64 encoded service certificate" +msgstr "Base-64 шифрованный сертификат службы" + +msgid "Base-64 encoded user certificate" +msgstr "Base-64 шифрованный сертификат пользователя" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Не удалось выполнить декодирование Base64: %(reason)s" + +msgid "Binary data to archive" +msgstr "Двоичные данные, которые следует архивировать" + +msgid "Bind DN" +msgstr "Привязка DN" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "Привязка пароля уже предоставлена (-w).\n" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "" +"При использовании DN привязки (-w или -W) необходима привязка пароля.\n" + +msgid "Bind rule type" +msgstr "Тип правила привязки" + +msgid "Brief description of this profile" +msgstr "Краткое описание этого профиля" + +msgid "CA" +msgstr "Центр сертификации (CA)" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "CA \"%s\" отключён" + +msgid "CA ACL" +msgstr "CA ACL" + +msgid "CA ACLs" +msgstr "CA ACL" + +msgid "CA Compromise" +msgstr "Компрометация центра сертификации (CA)" + +msgid "CA category" +msgstr "Категория CA" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" +"для категории CA нельзя установить значение \"all\", когда имеются " +"разрешённые CA" + +msgid "CA category the ACL applies to" +msgstr "Категория CA, к которой применяется ACL" + +msgid "CA certificate" +msgstr "Сертификат CA" + +msgid "CA is not configured" +msgstr "CA не настроен" + +msgid "CAs" +msgstr "CA" + +msgid "CAs cannot be added when CA category='all'" +msgstr "невозможно добавить CA, когда категория CA=\"all\"" + +msgid "CERT Algorithm" +msgstr "Алгоритм CERT" + +msgid "CERT Certificate Type" +msgstr "Тип сертификата CERT" + +msgid "CERT Certificate/CRL" +msgstr "Сертификат или список отзыва сертификатов (CRL) CERT" + +msgid "CERT Key Tag" +msgstr "Тег ключа CERT" + +msgid "CERT record" +msgstr "Запись CERT" + +msgid "CIFS credentials object" +msgstr "Объект учётных данных CIFS" + +#, python-format +msgid "CIFS server %(host)s denied your credentials" +msgstr "Ваши регистрационные данные отклонены сервером CIFS %(host)s" + +#, python-format +msgid "" +"CIFS server communication error: code \"%(num)s\", message " +"\"%(message)s\" (both may be \"None\")" +msgstr "" +"Ошибка обмена данными с сервером CIFS: код \"%(num)s\", сообщение " +"\"%(message)s\" (оба значения могут быть \"None\")" + +msgid "CIFS server denied your credentials" +msgstr "Ваши регистрационные данные отклонены сервером CIFS" + +msgid "CLI metavar" +msgstr "Метапеременная CLI" + +msgid "CLI name" +msgstr "Имя CLI" + +msgid "CNAME Hostname" +msgstr "Имя узла CNAME" + +msgid "CNAME record" +msgstr "Запись CNAME" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" +"Запись CNAME нельзя использовать вместе с любыми другими записями (RFC 1034, " +"раздел 3.6.2)" + +msgid "CSR" +msgstr "Запрос подписи сертификата" + +msgid "Cancel" +msgstr "Отменить" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "Не удалось создать обратную запись для \"%(value)s\": %(exc)s" + +#, python-format +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "Не удалось расшифровать файл \"%(filename)s\": %(exc)s" + +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "Не удалось установить соединение LSA с %(host)s. Сервер CIFS работает?" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" +"Невозможно установить отношение доверия с AD, развёрнутой в том же домене, " +"что и IPA. Поддержка такой настройки не предусмотрена." + +msgid "Cannot find specified domain or server name" +msgstr "Не удалось найти домен или сервер с указанным именем" + +msgid "Cannot hide CA renewal master." +msgstr "Не удалось скрыть мастер обновления CA." + +msgid "Cannot hide DNSSec key master." +msgstr "Не удалось скрыть мастер ключей DNSSec." + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "Не удалось скрыть последний включённый сервер %(name)s." + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"Невозможно выполнить проверку SID без установленной поддержки Samba 4. " +"Убедитесь, что на сервере установлен субпакет IPA server-trust-ad" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"Невозможно выполнить проверку внешнего участника без установленной поддержки " +"Samba 4. Убедитесь, что на сервере установлен субпакет IPA server-trust-ad" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" +"Без настройки собственного домена нельзя выполнять операцию присоединения. " +"Убедитесь, что на IPA-сервере запущена команда ipa-adtrust-install" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" +"Невозможно выполнить выбранную команду без настройки экземпляра Samba 4 на " +"этом компьютере. Убедитесь, что на этом сервере запущена команда ipa-adtrust-" +"install." + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" +"Невозможно выполнить выбранную команду без установленной поддержки Samba 4. " +"Убедитесь, что субпакет IPA server-trust-ad установлен." + +msgid "Cannot query Directory Manager with API" +msgstr "" +"Не удалось отправить запрос средству управления каталогом (Directory " +"Manager) с помощью программного интерфейса" + +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "Не удалось прочитать файл \"%(filename)s\": %(exc)s" + +msgid "Cannot resolve KDC for requested realm" +msgstr "Не удалось определить KDC для запрошенной области (realm)" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "Не удалось получить список сборщиков мусора (GC) доверенного домена" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" +"Без настройки собственного домена нельзя выполнять поиск в доверенных " +"доменах. Убедитесь, что на IPA-сервере запущена команда ipa-adtrust-install" + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "Невозможно одновременно указать механизм SASL и DN привязки\n" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "Невозможно одновременно указать сервер и адрес LDAP\n" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "Не удалось сохранить ACI разрешения в %s" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "Невозможно использовать %(old_name)s с %(new_name)s" + +msgid "Car License" +msgstr "Номер автомобиля" + +msgid "Certificate" +msgstr "Сертификат" + +msgid "Certificate Association Data" +msgstr "Данные сопоставления сертификата " + +msgid "Certificate Authorities" +msgstr "Центры сертификации" + +msgid "Certificate Authority" +msgstr "Центр сертификации" + +msgid "Certificate Data" +msgstr "Данные сертификата" + +msgid "Certificate For Match" +msgstr "Сертификат для соответствия" + +msgid "Certificate Hold" +msgstr "Приостановка действия сертификата" + +msgid "Certificate Hold Removed" +msgstr "Приостановка действия сертификата отменена" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "" +"Глобальная конфигурация сопоставления сертификатов с записями пользователей" + +msgid "Certificate Identity Mapping Rule" +msgstr "Правило сопоставления сертификатов с записями пользователей" + +msgid "Certificate Identity Mapping Rule description" +msgstr "Описание правила сопоставления сертификатов с записями пользователей" + +msgid "Certificate Identity Mapping Rule name" +msgstr "Имя правила сопоставления сертификатов с записями пользователей" + +msgid "Certificate Identity Mapping Rules" +msgstr "Правила сопоставления сертификатов с записями пользователей" + +msgid "Certificate Identity Mapping configuration options" +msgstr "" +"Параметры конфигурации сопоставления сертификатов с записями пользователей" + +msgid "Certificate Mapping Match" +msgstr "Соответствие сопоставления сертификата" + +msgid "Certificate Profile" +msgstr "Профиль сертификатов" + +msgid "Certificate Profile to use" +msgstr "Сертификат профиля, который следует использовать" + +msgid "Certificate Profiles" +msgstr "Профили сертификатов" + +msgid "Certificate Profiles to add" +msgstr "Профили сертификатов, которые следует добавить" + +msgid "Certificate Profiles to remove" +msgstr "Профили сертификатов, которые следует удалить" + +msgid "Certificate Revoked" +msgstr "Сертификат отозван" + +msgid "Certificate Subject base" +msgstr "Основа субъекта сертификата" + +msgid "Certificate Type" +msgstr "Тип сертификата" + +msgid "Certificate Usage" +msgstr "Использование сертификата" + +msgid "Certificate chain" +msgstr "Цепочка сертификатов" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "Сертификат для ${primary_key} ${entity}" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "Ошибка формата сертификата: %(error)s" + +msgid "Certificate in base64 or PEM format" +msgstr "Сертификат в формате base64 или PEM" + +msgid "Certificate mapping data" +msgstr "Данные сопоставления сертификата" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "Не удалось завершить операцию с сертификатом: %(error)s" + +msgid "Certificate profiles cannot be renamed" +msgstr "Профили сертификатов невозможно переименовать" + +msgid "Certificate requested" +msgstr "Отправлен запрос сертификата" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" +"Сертификат с серийным номером %(serial)s, выданный CA \"%(ca)s\", не найден" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "Сертификат (сертификаты), которые хранятся в файле \"%(file)s\"" + +msgid "Certificate/CRL" +msgstr "Сертификат или список отзыва сертификатов (CRL)" + +msgid "Certificates" +msgstr "Сертификаты" + +msgid "Cessation of Operation" +msgstr "Прекращение действия" + +msgid "Change current Domain Level." +msgstr "Изменить текущий уровень домена." + +msgid "Change password" +msgstr "Изменить пароль" + +msgid "Change to POSIX group" +msgstr "Изменение на POSIX-группу" + +msgid "Change to external group" +msgstr "Изменение на внешнюю группу" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Изменён пароль \"%(value)s\"" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "Изменено состояние сервера \"%(value)s\"." + +msgid "Character classes" +msgstr "Классы символов" + +msgid "Check DNS" +msgstr "Проверить DNS" + +msgid "Check connection to remote IPA server." +msgstr "Проверить связь с удалённым IPA-сервером." + +msgid "Check the status of a certificate signing request." +msgstr "Проверить состояние запроса подписи сертификата." + +msgid "Checking if record exists." +msgstr "Проверка существования записи." + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "Проверяет, включена ли служба CA на каких-либо серверах." + +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "Проверяет, включена ли служба DNS на каких-либо серверах." + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "Проверяет, включена ли служба KRA на каких-либо серверах." + +msgid "City" +msgstr "Город" + +msgid "Class" +msgstr "Класс" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" +"Объект класса обслуживания, который используется для связывания политик с " +"группами" + +msgid "Clear" +msgstr "Очистить" + +msgid "Clear all fields on the page." +msgstr "Очистить все поля на странице." + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" +"Очищает представление ID для указанных узлов или текущих участников " +"указанных групп узлов." + +#, python-brace-format +msgid "Click to ${action}" +msgstr "Щёлкните, чтобы ${action}" + +msgid "Client credentials may be delegated to the service" +msgstr "Учётные данные клиента можно делегировать службе" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "Клиент не настроен. Выполните команду ipa-client-install." + +msgid "Client version. Used to determine if server will accept request." +msgstr "" +"Версия клиента. Используется для определения того, примет ли сервер запрос." + +msgid "Clock interval" +msgstr "Временной интервал" + +msgid "Clock offset" +msgstr "Смещение времени" + +msgid "Close" +msgstr "Закрыть" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "Не удалось закрыть файл таблицы ключей\n" + +msgid "Collapse All" +msgstr "Свернуть все" + +msgid "Comma separated encryption types list" +msgstr "Список типов шифрования, разделённых запятыми" + +msgid "Comma-separated list of attributes" +msgstr "Разделённый запятыми список атрибутов" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "" +"Разделённый запятыми список атрибутов, которые следует игнорировать для " +"записей групп в DS" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "" +"Разделённый запятыми список атрибутов, которые следует игнорировать для " +"записей пользователей в DS" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "" +"Разделённый запятыми список классов объектов, которые следует игнорировать " +"для записей групп в DS" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "" +"Разделённый запятыми список классов объектов, которые следует игнорировать " +"для записей пользователей в DS" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "" +"Разделённый запятыми список классов объектов, использованных для поиска " +"записей групп в DS" + +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" +"Разделённый запятыми список классов объектов, использованных для поиска " +"записей пользователей в DS" + +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "" +"Разделённый запятыми список разрешений, которые следует предоставить (read, " +"write). По умолчанию предоставляется разрешение \"write\" (запись)." + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" +"Разделённый запятыми список разрешений, которые следует предоставить (read, " +"write, add, delete, all)" + +msgid "Comma-separated list of raw A records" +msgstr "Разделённый запятыми список необработанных записей A" + +msgid "Comma-separated list of raw A6 records" +msgstr "Разделённый запятыми список необработанных записей A6" + +msgid "Comma-separated list of raw AAAA records" +msgstr "Разделённый запятыми список необработанных записей AAAA" + +msgid "Comma-separated list of raw AFSDB records" +msgstr "Разделённый запятыми список необработанных записей AFSDB" + +msgid "Comma-separated list of raw APL records" +msgstr "Разделённый запятыми список необработанных записей APL" + +msgid "Comma-separated list of raw CERT records" +msgstr "Разделённый запятыми список необработанных записей CERT" + +msgid "Comma-separated list of raw CNAME records" +msgstr "Разделённый запятыми список необработанных записей CNAME" + +msgid "Comma-separated list of raw DHCID records" +msgstr "Разделённый запятыми список необработанных записей DHCID" + +msgid "Comma-separated list of raw DLV records" +msgstr "Разделённый запятыми список необработанных записей DLV" + +msgid "Comma-separated list of raw DNAME records" +msgstr "Разделённый запятыми список необработанных записей DNAME" + +msgid "Comma-separated list of raw DNSKEY records" +msgstr "Разделённый запятыми список необработанных записей DNSKEY" + +msgid "Comma-separated list of raw DS records" +msgstr "Разделённый запятыми список необработанных записей DS" + +msgid "Comma-separated list of raw HIP records" +msgstr "Разделённый запятыми список необработанных записей HIP" + +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "Разделённый запятыми список необработанных записей IPSECKEY" + +msgid "Comma-separated list of raw KEY records" +msgstr "Разделённый запятыми список необработанных записей KEY" + +msgid "Comma-separated list of raw KX records" +msgstr "Разделённый запятыми список необработанных записей KX" + +msgid "Comma-separated list of raw LOC records" +msgstr "Разделённый запятыми список необработанных записей LOC" + +msgid "Comma-separated list of raw MX records" +msgstr "Разделённый запятыми список необработанных записей MX" + +msgid "Comma-separated list of raw NAPTR records" +msgstr "Разделённый запятыми список необработанных записей NAPTR" + +msgid "Comma-separated list of raw NS records" +msgstr "Разделённый запятыми список необработанных записей NS" + +msgid "Comma-separated list of raw NSEC records" +msgstr "Разделённый запятыми список необработанных записей NSEC" + +msgid "Comma-separated list of raw NSEC3 records" +msgstr "Разделённый запятыми список необработанных записей NSEC3" + +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "Разделённый запятыми список необработанных записей NSEC3PARAM" + +msgid "Comma-separated list of raw PTR records" +msgstr "Разделённый запятыми список необработанных записей PTR" + +msgid "Comma-separated list of raw RP records" +msgstr "Разделённый запятыми список необработанных записей RP" + +msgid "Comma-separated list of raw RRSIG records" +msgstr "Разделённый запятыми список необработанных записей RRSIG" + +msgid "Comma-separated list of raw SIG records" +msgstr "Разделённый запятыми список необработанных записей SIG" + +msgid "Comma-separated list of raw SPF records" +msgstr "Разделённый запятыми список необработанных записей SPF" + +msgid "Comma-separated list of raw SRV records" +msgstr "Разделённый запятыми список необработанных записей SRV" + +msgid "Comma-separated list of raw SSHFP records" +msgstr "Разделённый запятыми список необработанных записей SSHFP" + +msgid "Comma-separated list of raw TA records" +msgstr "Разделённый запятыми список необработанных записей TA" + +msgid "Comma-separated list of raw TKEY records" +msgstr "Разделённый запятыми список необработанных записей TKEY" + +msgid "Comma-separated list of raw TSIG records" +msgstr "Разделённый запятыми список необработанных записей TSIG" + +msgid "Comma-separated list of raw TXT records" +msgstr "Разделённый запятыми список необработанных записей TXT" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "Команда \"%(name)s\" больше не поддерживается" + +msgid "Command category" +msgstr "Категория команд" + +msgid "Command category the rule applies to" +msgstr "Категория команд, к которой применяется правило" + +msgid "Command name" +msgstr "Имя команды" + +msgid "Command not implemented" +msgstr "Команда не поддерживается" + +msgid "Commands" +msgstr "Команды" + +msgid "Common Name" +msgstr "Общее имя" + +msgid "Conditions that could not be added" +msgstr "Условия, которые не удалось добавить" + +msgid "Conditions that could not be removed" +msgstr "Условия, которые не удалось удалить" + +msgid "Configuration" +msgstr "Конфигурация" + +msgid "Configuration string" +msgstr "Строка конфигурации" + +msgid "Configure your token" +msgstr "Настройте ваш токен" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" +"Настройте ваш токен, отсканировав расположенный ниже QR-код. Щёлкните по QR-" +"коду, если видите правильные данные на устройстве, которое вы хотите " +"настроить." + +msgid "Configured administrative server limit exceeded" +msgstr "Превышено заданное ограничение административного сервера" + +msgid "Configured size limit exceeded" +msgstr "Превышено заданное ограничение по размеру" + +msgid "Configured time limit exceeded" +msgstr "Превышено заданное ограничение по времени " + +msgid "Confirm (password)" +msgstr "Подтвердить (пароль)" + +msgid "Confirmation" +msgstr "Подтверждение" + +msgid "Connectivity" +msgstr "Возможность подключения" + +msgid "Consecutive failures before lockout" +msgstr "Количество последовательных ошибок до блокировки" + +msgid "Consume an entitlement." +msgstr "Использовать право." + +msgid "Contact Settings" +msgstr "Параметры контакта" + +msgid "Contact this specific KDC Server" +msgstr "Установить связь с указанным KDC-сервером" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" +"Содержимое \"стандартных\" хранилищ могут просматривать пользователи с более " +"высоким уровнем привилегий (администраторы)." + +msgid "Continue" +msgstr "Продолжить" + +msgid "Continue to next page" +msgstr "Перейти на следующую страницу" + +msgid "Continuous mode: Don't stop on errors." +msgstr "Режим непрерывной работы: не останавливаться в случае ошибок" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" +"Непрерывный режим работы. Сообщения об ошибках выводятся, но процесс " +"продолжается." + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "" +"Непрерывный режим работы. Сообщения об ошибках выводятся, но процесс " +"продолжается." + +msgid "Convert on server" +msgstr "Преобразовывать на сервере" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "Не удалось получить %(name)s в интерактивном режиме" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" +"Не удалось прочитать фильтр происхождения (originfilter) определения личной " +"группы пользователя (UPG Definition). Проверьте ваши разрешения." + +msgid "Counter" +msgstr "Счётчик" + +msgid "Counter-based (HOTP)" +msgstr "На основе счётчика (HOTP)" + +msgid "Create Stage user in from a delete user" +msgstr "" +"Создать неподтверждённого пользователя на основе удалённого пользователя" + +msgid "Create a CA." +msgstr "Создать запись CA." + +msgid "Create a new CA ACL." +msgstr "Создать новую запись CA ACL." + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "" +"Создать новое правило сопоставления сертификатов с записями пользователей." + +msgid "Create a new HBAC rule." +msgstr "Создать новое правило HBAC." + +msgid "Create a new SELinux User Map." +msgstr "Создать новый список пользователей SELinux." + +msgid "Create a new automount key." +msgstr "Создать новый ключ автомонтирования." + +msgid "Create a new automount location." +msgstr "Создать новое расположение автомонтирования." + +msgid "Create a new automount map." +msgstr "Создать новый список соответствия автомонтирования." + +msgid "Create a new group." +msgstr "Создать новую группу." + +msgid "Create a new indirect mount point." +msgstr "Создать новую непрямую точку монтирования." + +msgid "Create a new service delegation rule." +msgstr "Создать новое правило делегирования служб." + +msgid "Create a new service delegation target." +msgstr "Создать новую цель делегирования служб." + +msgid "Create a new vault." +msgstr "Создать новое хранилище." + +msgid "Create as a non-POSIX group" +msgstr "Создать как не-POSIX-группу " + +msgid "Create dns record" +msgstr "Создать запись DNS" + +msgid "Create new ACI." +msgstr "Создать новую запись ACI." + +msgid "Create new DNS forward zone." +msgstr "Создать новую зону перенаправления DNS." + +msgid "Create new DNS zone (SOA record)." +msgstr "Создать новую зону DNS (запись SOA)." + +msgid "Create new Sudo Command Group." +msgstr "Создать новую группу команд Sudo." + +msgid "Create new Sudo Command." +msgstr "Создать новую команду Sudo." + +msgid "Create new Sudo Rule." +msgstr "Создать новое правило Sudo." + +msgid "Create reverse" +msgstr "Создать обратную запись" + +msgid "Create reverse record for this IP Address" +msgstr "Создать обратную запись для этого IP-адреса" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "Создана ACI \"%(value)s\"" + +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "Создана запись CA \"%(value)s\"" + +msgid "Creating record." +msgstr "Создание записи." + +msgid "Credentials" +msgstr "Учётные данные" + +msgid "Credentials cache permissions incorrect" +msgstr "Неправильные права доступа к кэшу учётных данных" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" +"Отношения доверия между областями (realm) не настроены. Убедитесь, что на " +"IPA-сервере запущена команда ipa-adtrust-install" + +msgid "Current DNS record contents:\n" +msgstr "Текущее содержание записи DNS:\n" + +msgid "Current Password" +msgstr "Текущий пароль" + +msgid "Current domain level:" +msgstr "Текущий уровень домена:" + +msgid "Current password is required" +msgstr "Следует указать текущий пароль" + +msgid "Custom value" +msgstr "Пользовательское значение" + +msgid "Customization" +msgstr "Настройка" + +msgid "DHCID record" +msgstr "Запись DHCID" + +msgid "DLV Algorithm" +msgstr "Алгоритм DLV" + +msgid "DLV Digest" +msgstr "Дайджест DLV" + +msgid "DLV Digest Type" +msgstr "Тип дайджеста DLV" + +msgid "DLV Key Tag" +msgstr "Тег ключа DLV" + +msgid "DLV record" +msgstr "Запись DLV" + +msgid "DN commonName does not match user's login" +msgstr "В commonName DN не соответствует имени пользователя" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" +"В emailAddress DN не соответствует ни одному адресу электронной почты " +"пользователя" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "DN контейнера для групп в DS относительно базового DN" + +msgid "DN of container for users in DS relative to base DN" +msgstr "DN контейнера для пользователей в DS относительно базового DN" + +msgid "DN of the started task" +msgstr "DN запущенной задачи" + +msgid "DN to bind as if not using kerberos" +msgstr "" +"DN, к которому следует установить привязку, если не используется Kerberos" + +msgid "DNAME Target" +msgstr "Цель DNAME" + +msgid "DNAME record" +msgstr "Запись DNAME" + +msgid "DNS" +msgstr "DNS" + +msgid "DNS Forward Zone" +msgstr "Зона перенаправления DNS" + +msgid "DNS Forward Zones" +msgstr "Зоны перенаправления DNS" + +msgid "DNS Global Configuration" +msgstr "Глобальная конфигурация DNS" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "" +"В подключаемом модуле bind-dyndb-ldap не предусмотрена поддержка типа записи " +"ресурсов DNS \"%s\"" + +msgid "DNS Resource Record" +msgstr "Запись ресурса DNS" + +msgid "DNS Resource Records" +msgstr "Записи ресурсов DNS" + +msgid "DNS Server" +msgstr "DNS-сервер" + +msgid "DNS Server name" +msgstr "Имя DNS-сервера" + +msgid "DNS Servers" +msgstr "DNS-серверы" + +msgid "DNS Zone" +msgstr "Зона DNS" + +msgid "DNS Zone Settings" +msgstr "Параметры зоны DNS" + +msgid "DNS Zones" +msgstr "Зоны DNS" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" +"Не удалось выполнить проверку DNS: ожидалось {%(expected)s}, получено " +"{%(got)s}" + +msgid "DNS class" +msgstr "Класс DNS" + +msgid "DNS configuration options" +msgstr "Параметры конфигурации DNS" + +msgid "DNS forward zone" +msgstr "зона перенаправления DNS" + +msgid "DNS forward zones" +msgstr "зоны перенаправления DNS" + +msgid "DNS forwarder" +msgstr "DNS-перенаправитель" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" +"С выходом IPA 4.0 изменилась семантика DNS-перенаправителя.\n" +"Рекомендуется перейти на использование зон перенаправления (dnsforwardzone-" +"*).\n" +"Подробные сведения содержатся в документации." + +msgid "DNS is not configured" +msgstr "DNS не настроено" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "DNS-метка не может быть длиннее 63 символов" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "Длина DNS-метки не может быть больше 63 символов" + +msgid "DNS record was deleted because it contained no data." +msgstr "Запись DNS была удалена, так как не содержала данные." + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "Не удалось удалить DNS-запись (записи) узла %(host)s. (%(reason)s)" + +msgid "DNS records can be only updated one at a time" +msgstr "Записи DNS можно обновлять только по одной" + +msgid "DNS resource record" +msgstr "запись ресурса DNS" + +msgid "DNS resource record type" +msgstr "Тип записи ресурса DNS" + +msgid "DNS resource records" +msgstr "записи ресурсов DNS" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" +"Обратная зона DNS %(revzone)s для IP-адреса %(addr)s не управляется этим " +"сервером" + +msgid "DNS server" +msgstr "DNS-сервер" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"DNS-сервер %(server)s не поддерживает DNSSEC: %(error)s.\n" +"Если на IPA-сервере (серверах) включена проверка DNSSEC, отключите её." + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"DNS-сервер %(server)s не поддерживает EDNS0 (RFC 6891): %(error)s.\n" +"Если на IPA-сервере (серверах) включена проверка DNSSEC, отключите её." + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "DNS-сервер %(server)s: %(error)s." + +msgid "DNS servers" +msgstr "DNS-серверы" + +msgid "DNS zone" +msgstr "зона DNS" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "Зона DNS %(zone)s не найдена" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" +"Запись зоны DNS для каждого realmdomain должна содержать записи SOA или NS. " +"Для %s такие записи не найдены." + +msgid "DNS zone root record cannot be renamed" +msgstr "Невозможно переименовать корневую запись зоны DNS" + +msgid "DNS zones" +msgstr "зоны DNS" + +msgid "DNSKEY record" +msgstr "Запись DNSKEY" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" +"Экспериментальная поддержка DNSSEC.\n" +"%(additional_info)s" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" +"Сбой проверки DNSSEC: %(error)s.\n" +"Проверьте конфигурацию DNSSEC или отключите проверку DNSSEC на всех IPA-" +"серверах." + +msgid "DNSec key master" +msgstr "Мастер ключей DNSec" + +msgid "DS Algorithm" +msgstr "Алгоритм DS" + +msgid "DS Digest" +msgstr "Дайджест DS" + +msgid "DS Digest Type" +msgstr "Тип дайджеста DS" + +msgid "DS Key Tag" +msgstr "Тег ключа DS" + +msgid "DS record" +msgstr "Запись DS" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "запись DS не должна находиться в начале зоны (RFC 4035, раздел 2.4)" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" +"запись DS должна использоваться вместе с записью NS (RFC 4592, раздел 4.6, " +"RFC 4035, раздел 2.4)" + +msgid "Data" +msgstr "Данные" + +msgid "Debugging output" +msgstr "Отладочный вывод" + +msgid "Default" +msgstr "По умолчанию" + +msgid "Default (fallback) Group" +msgstr "Группа по умолчанию (резервная)" + +msgid "Default (fallback) group for entries to land" +msgstr "Группа по умолчанию (резервная) для размещения записей" + +msgid "Default PAC types" +msgstr "Типы PAC по умолчанию" + +msgid "Default SELinux user" +msgstr "Пользователь SELinux по умолчанию" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" +"Пользователь SELinux по умолчанию, когда в правиле списка SELinux не найдено " +"соответствие" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "" +"Представление отношений доверия по умолчанию невозможно применить к узлам" + +msgid "Default Trust View cannot contain IPA users" +msgstr "" +"Представление отношений доверия по умолчанию не может содержать " +"пользователей IPA" + +msgid "Default attributes" +msgstr "Атрибуты по умолчанию" + +msgid "Default e-mail domain" +msgstr "Почтовый домен по умолчанию" + +msgid "Default from" +msgstr "По умолчанию с" + +msgid "Default group for entries to land" +msgstr "Группа по умолчанию для размещения записей" + +msgid "Default group for new users" +msgstr "Группа по умолчанию для новых пользователей" + +msgid "Default group for new users is not POSIX" +msgstr "Группа по умолчанию для новых пользователей не является POSIX-группой" + +msgid "Default group for new users not found" +msgstr "Группа по умолчанию для новых пользователей не найдена" + +msgid "Default group objectclasses" +msgstr "Классы объектов для групп по умолчанию" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "Классы объектов для групп по умолчанию (через запятую)" + +msgid "Default host group" +msgstr "Группа узлов по умолчанию" + +msgid "Default location of home directories" +msgstr "Расположение домашних каталогов по умолчанию" + +msgid "Default shell" +msgstr "Оболочка по умолчанию" + +msgid "Default shell for new users" +msgstr "Оболочка по умолчанию для новых пользователей" + +msgid "Default ticket policy could not be read" +msgstr "Не удалось прочитать политику билетов по умолчанию" + +msgid "Default time to live" +msgstr "Срок жизни по умолчанию" + +msgid "Default types of PAC supported for services" +msgstr "Типы PAC по умолчанию, которые поддерживаются для служб" + +msgid "Default types of supported user authentication" +msgstr "Стандартные типы поддерживаемой аутентификации пользователей" + +msgid "Default user authentication types" +msgstr "Стандартные типы аутентификации пользователей" + +msgid "Default user group" +msgstr "Группа пользователей по умолчанию" + +msgid "Default user objectclasses" +msgstr "Классы объектов для пользователей по умолчанию" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "Классы объектов для пользователей по умолчанию (через запятую)" + +msgid "Default users group" +msgstr "Группа пользователей по умолчанию" + +msgid "Degrees Latitude" +msgstr "Градусы широты" + +msgid "Degrees Longitude" +msgstr "Градусы долготы" + +msgid "Delegation" +msgstr "Делегирование" + +msgid "Delegation name" +msgstr "Имя делегирования" + +msgid "Delegations" +msgstr "Делегирования" + +msgid "Delete" +msgstr "Удалить" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "Удалить значения \"%(value)s\" %(name)s?" + +msgid "Delete ACI." +msgstr "Удалить запись ACI." + +msgid "Delete Class of Service entry" +msgstr "Удалить запись класса обслуживания" + +msgid "Delete DNS forward zone." +msgstr "Удалить зону перенаправления DNS." + +msgid "Delete DNS record entry." +msgstr "Удалить пункт записи DNS." + +msgid "Delete DNS resource record." +msgstr "Удалить запись ресурса DNS." + +msgid "Delete DNS zone (SOA record)." +msgstr "Удалить зону DNS (запись SOA)." + +msgid "Delete IPA server." +msgstr "Удалить IPA-сервер." + +msgid "Delete Key, Unprovision" +msgstr "Удалить ключ, отменить подготовку к работе" + +msgid "Delete Server" +msgstr "Удалить сервер" + +msgid "Delete Sudo Command Group." +msgstr "Удалить группу команд Sudo." + +msgid "Delete Sudo Command." +msgstr "Удалить команду Sudo." + +msgid "Delete Sudo Rule." +msgstr "Удалить правило Sudo." + +msgid "Delete a CA ACL." +msgstr "Удалить CA ACL." + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "Удалить правило сопоставления сертификатов с записями пользователей." + +msgid "Delete a Certificate Profile." +msgstr "Удалить профиль сертификатов." + +msgid "Delete a DNS server" +msgstr "Удалить DNS-сервер" + +msgid "Delete a RADIUS proxy server." +msgstr "Удалить прокси-сервер RADIUS." + +msgid "Delete a SELinux User Map." +msgstr "Удалить список пользователей SELinux." + +msgid "Delete a delegation." +msgstr "Удалить делегирование." + +msgid "Delete a group password policy." +msgstr "Удалить групповую политику паролей." + +msgid "Delete a host." +msgstr "Удалить узел." + +msgid "Delete a hostgroup." +msgstr "Удалить группу узлов." + +msgid "Delete a netgroup." +msgstr "Удалить сетевую группу." + +msgid "Delete a permission." +msgstr "Удалить разрешение." + +msgid "Delete a privilege." +msgstr "Удалить привилегию." + +msgid "Delete a role." +msgstr "Удалить роль." + +msgid "Delete a segment." +msgstr "Удалить сегмент." + +msgid "Delete a self-service permission." +msgstr "Удалить разрешение самообслуживания." + +msgid "Delete a stage user." +msgstr "Удалить неподтверждённого пользователя." + +msgid "Delete a topology suffix." +msgstr "Удалить суффикс топологии." + +msgid "Delete a trust." +msgstr "Удалить отношение доверия." + +msgid "Delete a user" +msgstr "Удалить пользователя" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "" +"Удалить пользователя, сохраняя запись доступной для будущего использования" + +msgid "Delete a user." +msgstr "Удалить пользователя." + +msgid "Delete a vault container." +msgstr "Удалить контейнер хранилищ." + +msgid "Delete a vault." +msgstr "Удалить хранилище." + +msgid "Delete all associated records" +msgstr "Удалить все связанные записи" + +msgid "Delete all?" +msgstr "Удалить все?" + +msgid "Delete an Group ID override." +msgstr "Удалить переопределение ID группы." + +msgid "Delete an HBAC rule." +msgstr "Удалить правило HBAC." + +msgid "Delete an HBAC service group." +msgstr "Удалить группу служб HBAC." + +msgid "Delete an ID View." +msgstr "Удалить представление ID." + +msgid "Delete an ID override." +msgstr "Удалить переопределение ID." + +msgid "Delete an ID range." +msgstr "Удалить диапазон идентификаторов." + +msgid "Delete an IPA location." +msgstr "Удалить запись расположения IPA." + +msgid "Delete an IPA service." +msgstr "Удалить службу IPA." + +msgid "Delete an OTP token." +msgstr "Удалить токен OTP." + +msgid "Delete an User ID override." +msgstr "Удалить переопределение ID пользователя." + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" +"Удалить пару атрибут/значение. Параметр будет использован последним, после " +"всех установок и добавлений." + +msgid "Delete an automember rule." +msgstr "Удалить правило автоучастия." + +msgid "Delete an automount key." +msgstr "Удалить ключ автомонтирования." + +msgid "Delete an automount location." +msgstr "Удалить расположение автомонтирования." + +msgid "Delete an automount map." +msgstr "Удалить список соответствия автомонтирования." + +msgid "Delete an existing HBAC service." +msgstr "Удалить существующую службу HBAC." + +msgid "Delete domain" +msgstr "Удалить домен" + +msgid "Delete group." +msgstr "Удалить группу." + +msgid "Delete mode" +msgstr "Режим удаления" + +msgid "Delete service delegation target." +msgstr "Удалить цель делегирования служб." + +msgid "Delete service delegation." +msgstr "Удалить делегирование служб." + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "Удалена ACI \"%(value)s\"" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "Удалена запись CA \"%(value)s\"" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "Удалена CA ACL \"%(value)s\"" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" +"Удалено правило сопоставления сертификатов с записями пользователей " +"\"%(value)s\"" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "Удалена зона перенаправления DNS \"%(value)s\"" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "Удалён DNS-сервер \"%(value)s\"" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "Удалена зона DNS \"%(value)s\"" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "Удалено переопределение ID группы \"%(value)s\"" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "Удалено правило HBAC \"%(value)s\"" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "Удалена служба HBAC \"%(value)s\"" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "Удалена группа служб HBAC \"%(value)s\"" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "Удалено представление ID \"%(value)s\"" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "Удалено переопределение ID \"%(value)s\"" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "Удалён диапазон идентификаторов \"%(value)s\"" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Удалена запись расположения IPA \"%(value)s\"" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "Удалён IPA-сервер \"%(value)s\"" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Удалён токен OTP \"%(value)s\"" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "Удалён прокси-сервер RADIUS \"%(value)s\"" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "Удалён список пользователей SELinux \"%(value)s\"" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "Удалена команда Sudo \"%(value)s\"" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Удалена группа команд Sudo \"%(value)s\"" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Удалено правило Sudo \"%(value)s\"" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Удалено переопределение ID пользователя \"%(value)s\"" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "Удалено правило автоучастия \"%(value)s\"" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "Удалён ключ автомонтирования \"%(value)s\"" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "Удаление расположения автомонтирования. \"%(value)s\"" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "Удалён список соответствия автомонтирования \"%(value)s\"" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "Удалено делегирование \"%(value)s\"" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Удалена группа \"%(value)s\"" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "Удалён узел \"%(value)s\"" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Удалена группа узлов \"%(value)s\"" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Удалена сетевая группа \"%(value)s\"" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "Удалено разрешение \"%(value)s\"" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "Удалена привилегия \"%(value)s\"" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "Удалён профиль \"%(value)s\"" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "Удалена запись \"%(value)s\"" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "Удалена роль \"%(value)s\"" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "Удалён сегмент \"%(value)s\"" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "Удалено самообслуживание \"%(value)s\"" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "Удалена служба \"%(value)s\"" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "Удалено делегирование служб \"%(value)s\"" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "Удалена цель делегирования служб \"%(value)s\"" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "Удалён неподтверждённый пользователь \"%(value)s\"" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Удалён суффикс топологии \"%(value)s\"" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "Удалено отношение доверия \"%(value)s\"" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Удален пользователь \"%(value)s\"" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "Удалено хранилище \"%(value)s\"" + +msgid "Deleted vault container" +msgstr "Удалён контейнер хранилищ" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "" +"Удаление управляемой группы запрещено. Сначала её необходимо отключить." + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" +"Удаление сервера приводит к его необратимому удалению из топологии. Это " +"действие нельзя отменить." + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" +"Удаление этой записи сервера запрещено, так как это оставило бы вашу " +"установленную систему без CA." + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" +"Удаление этой записи сервера запрещено, так как это оставило бы вашу " +"установленную систему без KRA." + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" +"Удаление этой записи сервера оставит вашу установленную систему без DNS." + +msgid "Deny" +msgstr "Запретить" + +msgid "Department Number" +msgstr "Номер отдела" + +msgid "Deprecated options" +msgstr "Неподдерживаемые опции" + +#, python-format +msgid "Deprecated; use %s" +msgstr "Больше не поддерживается; используйте %s" + +msgid "Deprecated; use extratargetfilter" +msgstr "Больше не поддерживается; используйте extratargetfilter" + +msgid "Deprecated; use ipapermlocation" +msgstr "Больше не поддерживается; используйте ipapermlocation" + +msgid "Deprecated; use ipapermright" +msgstr "Больше не поддерживается; используйте ipapermright" + +msgid "Describe currently authenticated identity." +msgstr "Показать описание текущего прошедшего аутентификацию профиля." + +msgid "Description" +msgstr "Описание" + +msgid "Description of the purpose of the CA" +msgstr "Описание предназначения CA" + +msgid "Detach a managed group from a user." +msgstr "Отсоединить управляемую группу от пользователя." + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Отсоединена группа \"%(value)s\" от пользователя \"%(value)s\"" + +msgid "Detect" +msgstr "Определить" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" +"Определить, настроен ли подключаемый модуль совместимости схем (Schema " +"Compatibility) для обслуживания пользователей и групп доверенных доменов." + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "Определить, запущена ли в этой системе команда ipa-adtrust-install." + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "Определить, запущена ли команда ipa-adtrust-install с задачей sidgen." + +msgid "Dict of I18N messages" +msgstr "Словарь переведённых сообщений (I18N)" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "Словарь команд IPA, зашифрованных JSON" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "Словарь методов IPA, зашифрованных JSON" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "Словарь объектов IPA, зашифрованных JSON" + +msgid "Dictionary mapping plugin names to bases" +msgstr "Словарь, сопоставляющий имена подключаемых модулей с базовыми" + +msgid "Dictionary mapping variable name to value" +msgstr "Словарь, сопоставляющий имя переменной со значением" + +msgid "Digest" +msgstr "Дайджест" + +msgid "Digest Type" +msgstr "Тип дайджеста" + +msgid "Digits" +msgstr "Цифры" + +msgid "Direct" +msgstr "Прямой" + +msgid "Direct Membership" +msgstr "Прямое участие" + +msgid "Direction Latitude" +msgstr "Направление широты" + +msgid "Direction Longitude" +msgstr "Направление долготы" + +msgid "Direction of replication between left and right replication node" +msgstr "Направление репликации между левым и правым узлами репликации" + +msgid "Disable" +msgstr "Отключить" + +msgid "Disable DNS Forward Zone." +msgstr "Отключить зону перенаправления DNS." + +msgid "Disable DNS Zone." +msgstr "Отключить зону DNS." + +msgid "Disable a CA ACL." +msgstr "Отключить CA ACL." + +msgid "Disable a CA." +msgstr "Отключить службу сертификации." + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "Отключить правило сопоставления сертификатов с записями пользователей." + +msgid "Disable a Sudo Rule." +msgstr "Отключить правило Sudo." + +msgid "Disable a user account." +msgstr "Отключить учётную запись пользователя." + +msgid "Disable an HBAC rule." +msgstr "Отключить правило HBAC." + +msgid "Disable an SELinux User Map rule." +msgstr "Отключить правило списка пользователей SELinux." + +msgid "Disable per-user override" +msgstr "Отключить переопределение на уровне пользователя" + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "Отключить ключ Kerberos и SSL-сертификат службы." + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "Отключить ключ Kerberos, SSL-сертификат и все службы узла." + +msgid "Disable token" +msgstr "Отключить токен" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "Отключить использование ресурсов IPA доменом отношения доверия" + +msgid "Disabled" +msgstr "Отключён" + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "Отключена служба сертификации \"%(value)s\"" + +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "Отключена CA ACL \"%(value)s\"" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" +"Отключено правило сопоставления сертификатов с записями пользователей " +"\"%(value)s\"" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "Отключена зона перенаправления DNS \"%(value)s\"" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "Отключена зона DNS \"%(value)s\"" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "Отключено правило HBAC \"%(value)s\"" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "Отключён список пользователей SELinux \"%(value)s\"" + +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "Отключено правило Sudo \"%s\"" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "Отключённый домен \"%(domain)s\" нельзя использовать" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "Отключён узел \"%(value)s\"" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "Отключена служба \"%(value)s\"" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "Отключён надёжный домен \"%(value)s\"" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "Учётная запись пользователя \"%(value)s\" отключена" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "Запретить группам узлов создавать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "Запретить группам узлов получать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "Запретить узлам создавать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "Запретить узлам получать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" +"Запретить группам пользователей создавать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Запретить группам пользователей получать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "Запретить пользователям создавать таблицу ключей '${primary_key}'" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "Запретить пользователям получать таблицу ключей '${primary_key}'" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" +"Запретить пользователям, группам, узлам или группам узлов создавать таблицу " +"ключей этого узла." + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" +"Запретить пользователям, группам, узлам или группам узлов создавать таблицу " +"ключей этой службы." + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" +"Запретить пользователям, группам, узлам или группам узлов получать таблицу " +"ключей этого узла." + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" +"Запретить пользователям, группам, узлам или группам узлов получать таблицу " +"ключей этой службы." + +msgid "Display Class of Service entry" +msgstr "Показать запись класса обслуживания" + +msgid "Display DNS resource." +msgstr "Показать ресурс DNS." + +msgid "Display Sudo Command Group." +msgstr "Показать группу команд Sudo." + +msgid "Display Sudo Command." +msgstr "Показать команду Sudo." + +msgid "Display Sudo Rule." +msgstr "Показать правило Sudo." + +msgid "Display a segment." +msgstr "Показать сегмент." + +msgid "Display a single ACI given an ACI name." +msgstr "Показать отдельную запись ACI по указанному имени ACI." + +msgid "Display an automount key." +msgstr "Показать ключ автомонтирования." + +msgid "Display an automount location." +msgstr "Показать расположение автомонтирования." + +msgid "Display an automount map." +msgstr "Показать список соответствия автомонтирования." + +msgid "Display configuration of a DNS server." +msgstr "Показать конфигурацию DNS-сервера." + +msgid "Display current entitlements." +msgstr "Показать текущие права." + +msgid "Display effective policy for a specific user" +msgstr "Показать действующую политику для определённого пользователя" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "" +"Показать сведения о правиле сопоставления сертификатов с записями " +"пользователей." + +msgid "Display information about a DNS forward zone." +msgstr "Показать сведения о зоне перенаправления DNS." + +msgid "Display information about a DNS zone (SOA record)." +msgstr "Показать сведения о зоне DNS (записи SOA)." + +msgid "Display information about a RADIUS proxy server." +msgstr "Показать сведения о прокси-сервере RADIUS." + +msgid "Display information about a class." +msgstr "Показать сведения о классе." + +msgid "Display information about a command output." +msgstr "Показать сведения о выводе команды." + +msgid "Display information about a command parameter." +msgstr "Показать сведения о параметре команды." + +msgid "Display information about a command." +msgstr "Показать сведения о команде." + +msgid "Display information about a delegation." +msgstr "Показать сведения о делегировании." + +msgid "Display information about a help topic." +msgstr "Показать сведения о разделе справки." + +msgid "Display information about a host." +msgstr "Показать сведения об узле." + +msgid "Display information about a hostgroup." +msgstr "Показать сведения о группе узлов." + +msgid "Display information about a named group." +msgstr "Показать сведения об именованной группе." + +msgid "Display information about a named service delegation rule." +msgstr "Показать сведения об именованном правиле делегирования служб." + +msgid "Display information about a named service delegation target." +msgstr "Показать сведения об именованной цели делегирования служб." + +msgid "Display information about a netgroup." +msgstr "Показать сведения о сетевой группе." + +msgid "Display information about a permission." +msgstr "Показать сведения о разрешении." + +msgid "Display information about a privilege." +msgstr "Показать сведения о привилегии." + +msgid "Display information about a range." +msgstr "Показать сведения о диапазоне." + +msgid "Display information about a role." +msgstr "Показать сведения о роли." + +msgid "Display information about a self-service permission." +msgstr "Показать сведения о разрешении самообслуживания." + +msgid "Display information about a stage user." +msgstr "Показать сведения о неподтверждённом пользователе." + +msgid "Display information about a trust." +msgstr "Показать сведения об отношении доверия." + +msgid "Display information about a user." +msgstr "Показать сведения о пользователе." + +msgid "Display information about a vault container." +msgstr "Показать сведения о контейнере хранилищ." + +msgid "Display information about a vault." +msgstr "Показать сведения о хранилище." + +msgid "Display information about an Group ID override." +msgstr "Показать сведения о переопределении ID группы." + +msgid "Display information about an HBAC service group." +msgstr "Показать сведения о группе служб HBAC." + +msgid "Display information about an HBAC service." +msgstr "Показать сведения о службе HBAC." + +msgid "Display information about an ID View." +msgstr "Показать сведения о представлении ID." + +msgid "Display information about an ID override." +msgstr "Показать сведения о переопределении ID." + +msgid "Display information about an IPA location." +msgstr "Показать сведения о расположении IPA." + +msgid "Display information about an IPA service." +msgstr "Показать сведения о службе IPA." + +msgid "Display information about an OTP token." +msgstr "Показать сведения о токене OTP." + +msgid "Display information about an User ID override." +msgstr "Показать сведения о переопределении ID пользователя." + +msgid "Display information about an automember rule." +msgstr "Показать сведения о правиле автоучастия." + +msgid "Display information about password policy." +msgstr "Показать сведения о политике паролей." + +msgid "Display information about the default (fallback) automember groups." +msgstr " Показать сведения о группах автоучастия по умолчанию (резервных)" + +msgid "Display name" +msgstr "Отображаемое имя" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" +"Показать права доступа этой записи (требуется --all). Подробные сведения " +"приводятся на странице справочника (man) по IPA." + +msgid "Display the current Kerberos ticket policy." +msgstr "Показать текущую политику билетов Kerberos." + +msgid "Display the list of realm domains." +msgstr "Показать список доменов области." + +msgid "Display the properties of a CA ACL." +msgstr "Показать свойства CA ACL." + +msgid "Display the properties of a CA." +msgstr "Показать свойства CA." + +msgid "Display the properties of a Certificate Profile." +msgstr "Показать свойства профиля сертификатов." + +msgid "Display the properties of a SELinux User Map rule." +msgstr "Показать свойства правила списка пользователей SELinux." + +msgid "Display the properties of an HBAC rule." +msgstr "Показать свойства правила HBAC." + +msgid "Display user record for current Kerberos principal" +msgstr "Показать запись пользователя для текущей учётной записи Kerberos" + +msgid "Do not display QR code" +msgstr "Не показывать QR-код" + +msgid "Do not update records only return expected records" +msgstr "Не обновлять записи, только вернуть ожидаемые записи" + +msgid "Do you also want to perform DNS check?" +msgstr "Вы хотите также выполнить проверку DNS?" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "" +"Следует ли проверить, есть ли адрес нового полномочного сервера имён в DNS" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "Вы хотите удалить данные сопоставления сертификата ${data}?" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "Вы хотите удалить псевдоним Kerberos ${alias}?" + +msgid "Do you want to remove the certificate hold?" +msgstr "Вы хотите отменить приостановку действия сертификата?" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "" +"Вы хотите отозвать этот сертификат? Выберите причину в раскрывающемся списке." + +msgid "Do you want to update system DNS records?" +msgstr "Вы хотите обновить записи DNS системы?" + +msgid "Documentation" +msgstr "Документация" + +msgid "Dogtag Authority ID" +msgstr "ID Dogtag центра " + +msgid "Domain" +msgstr "Домен" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "Домен \"%(domain)s\" не является корневым для леса \"%(forest)s\"" + +msgid "Domain GUID" +msgstr "GUID домена" + +msgid "Domain Level" +msgstr "Уровень домена" + +msgid "Domain Level cannot be lowered." +msgstr "Уровень домена не может быть понижен." + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" +"Уровень домена не может быть поднят до {0}, следует устранить существующие " +"конфликты репликации." + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" +"Уровень домена не может быть поднят до {0}, так на сервере {1} не " +"предусмотрена поддержка такого уровня." + +msgid "Domain NetBIOS name" +msgstr "Имя домена NetBIOS" + +msgid "Domain SID" +msgstr "SID домена" + +msgid "Domain SID of the trusted domain" +msgstr "SID доверенного домена" + +msgid "Domain Security Identifier" +msgstr "Идентификатор безопасности домена" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "Контроллер домена для домена Active Directory (необязательно)" + +msgid "Domain enabled" +msgstr "Домен включён" + +msgid "Domain name" +msgstr "Имя домена" + +msgid "Domain resolution order" +msgstr "Порядок разрешения доменов" + +msgid "Domain where the user entry will be searched" +msgstr "Домен, в котором будет выполняться поиск записи пользователя" + +msgid "Don't create user private group" +msgstr "Не создавать личную группу пользователя" + +msgid "Don't wait for rebuilding membership" +msgstr "Не ждать перестройки участия" + +msgid "Download" +msgstr "Загрузить" + +msgid "Download certificate as PEM formatted file." +msgstr "Загрузить сертификат в виде файла в формате PEM." + +msgid "Drive to mount a home directory" +msgstr "Диск для монтирования домашнего каталога" + +msgid "Dry run" +msgstr "Пробное выполнение" + +msgid "Duplicate keys skipped:" +msgstr "Пропущенные ключи-дубликаты:" + +msgid "Duplicate maps skipped:" +msgstr "Пропущенные списки соответствия — дубликаты:" + +msgid "Dynamic update" +msgstr "Динамическое обновление" + +msgid "Edit" +msgstr "Изменить" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "Изменить ${entity}" + +msgid "Effective attributes" +msgstr "Действующие атрибуты" + +msgid "Email address" +msgstr "Адрес электронной почты" + +msgid "Employee Information" +msgstr "Сведения о сотруднике" + +msgid "Employee Number" +msgstr "Номер сотрудника" + +msgid "Employee Type" +msgstr "Тип сотрудника" + +msgid "Empty domain is not allowed" +msgstr "Использование пустого домена запрещено" + +msgid "Enable" +msgstr "Включить" + +msgid "Enable DNS Forward Zone." +msgstr "Включить зону перенаправления DNS." + +msgid "Enable DNS Zone." +msgstr "Включить зону DNS." + +msgid "Enable a CA ACL." +msgstr "Включить CA ACL." + +msgid "Enable a CA." +msgstr "Включить службу сертификации." + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "Включить правило сопоставления сертификатов с записями пользователей." + +msgid "Enable a Sudo Rule." +msgstr "Включить правило Sudo." + +msgid "Enable a user account." +msgstr "Включить учётную запись пользователя." + +msgid "Enable an HBAC rule." +msgstr "Включить правило HBAC." + +msgid "Enable an SELinux User Map rule." +msgstr "Включить правило списка пользователей SELinux." + +msgid "Enable migration mode" +msgstr "Включить режим миграции" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "" +"Включить или отключить использование \"анонимного пользователя\" для пре-" +"аутентификации (PKINIT)." + +msgid "Enable token" +msgstr "Включить токен" + +msgid "Enabled" +msgstr "Включено" + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "Включена служба сертификации \"%(value)s\"" + +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "Включена CA ACL \"%(value)s\"" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" +"Включено правило сопоставления сертификатов с записями пользователей " +"\"%(value)s\"" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "Включена зона перенаправления DNS \"%(value)s\"" + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "Включена зона DNS \"%(value)s\"" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "Включено правило HBAC \"%(value)s\"" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "Включён список пользователей SELinux \"%(value)s\"" + +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "Включено правило Sudo \"%s\"" + +msgid "Enabled server roles" +msgstr "Включены роли сервера" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "Включён надёжный домен \"%(value)s\"" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "Учётная запись пользователя \"%(value)s\" включена" + +msgid "Encryption types to request" +msgstr "Типы шифрования для запрашивания" + +msgid "Enctype comparison failed!\n" +msgstr "Ошибка сравнения значений типа шифрования!\n" + +msgid "Enrolled" +msgstr "Зарегистрировано" + +msgid "Enrollment" +msgstr "Регистрация" + +msgid "Enrollment UUID" +msgstr "UUID регистрации" + +msgid "Enrollment UUID (not implemented)" +msgstr "UUID регистрации (не поддерживается)" + +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "Не удалось выполнить регистрацию. %s\n" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "Введите %(label)s ещё раз для проверки: " + +msgid "Enter LDAP password" +msgstr "Введите пароль LDAP" + +msgid "Enter trusted group name." +msgstr "Введите имя доверенной группы." + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" +"Введите имя учётной записи доверенной группы или группы IPA. Примечание: в " +"списке результатов поиска не будет записей групп из доверенных доменов." + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" +"Введите имя учётной записи доверенного пользователя или пользователя IPA. " +"Примечание: в списке результатов поиска не будет записей пользователей из " +"доверенных доменов." + +msgid "Enter trusted user login." +msgstr "Введите имя учётной записи доверенного пользователя." + +msgid "Entry" +msgstr "Запись" + +#, python-format +msgid "Entry %s does not exist" +msgstr "Запись %s не существует" + +#, python-format +msgid "Entry %s not found" +msgstr "Запись %s не найдена" + +msgid "Entry RDN is not 'uid'" +msgstr "RDN записи не имеет значение \"uid\"" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "В записи нет \"%(attribute)s\"" + +msgid "Enumerate all the hosts the view applies to." +msgstr "Пронумеровать все узлы, к которым применяется представление" + +msgid "Error" +msgstr "Ошибка" + +msgid "Error changing account status" +msgstr "Ошибка при изменении состояния учётной записи" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "Ошибка получения области (realm) Kerberos по умолчанию: %s.\n" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "Ошибка получения начальных учётных данных: %s.\n" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "Ошибка обработки \"%1$s\": %2$s.\n" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "Ошибка обработки файла таблицы ключей: %s.\n" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "Ошибка сохранения учётных данных в кэше: %s.\n" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "" +"Установить двунаправленное отношение доверия. По умолчанию устанавливается " +"только одностороннее отношение." + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" +"Установить внешнее отношение доверия с доменом в другом лесу. Отношение " +"доверия не является транзитивным за пределами этого домена." + +msgid "Establish using" +msgstr "Установить с помощью" + +msgid "Established and verified" +msgstr "Установлено и проверено" + +msgid "Exceeded number of tries to forward a request." +msgstr "Превышено количество попыток перенаправления запроса." + +msgid "Exchanger" +msgstr "Обменник" + +msgid "Exclude from" +msgstr "Исключить из" + +msgid "Excluded attributes" +msgstr "Исключённые атрибуты" + +msgid "Exclusive" +msgstr "Исключающий" + +msgid "Exclusive Regex" +msgstr "Исключающие регулярные выражения" + +msgid "Expand All" +msgstr "Развернуть все" + +msgid "Expires On" +msgstr "Истекает" + +msgid "Export plugin meta-data for the webUI." +msgstr "Экспортировать метаданные подключаемого модуля для веб-интерфейса." + +msgid "Expression" +msgstr "Выражение" + +msgid "External" +msgstr "Внешний" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" +"Внешняя группа, от имени которой можно выполнять команды (только sudorule-" +"find)" + +msgid "External Groups of RunAs Users" +msgstr "Внешние группы пользователей запуска от имени" + +msgid "External Groups of users that the command can run as" +msgstr "Внешние группы пользователей, от имени которых можно выполнять команду" + +msgid "External User" +msgstr "Внешний пользователь" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" +"Внешний пользователь, от имени которого можно выполнять команды (только " +"sudorule-find)" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" +"Внешний пользователь, к которому применяется правило (только sudorule-find)" + +msgid "External host" +msgstr "Внешний узел" + +msgid "External member" +msgstr "Внешний участник" + +msgid "External trust" +msgstr "Внешнее отношение доверия" + +msgid "Extra hashes to generate in password plug-in" +msgstr "Дополнительные хеши для создания в подключаемом модуле паролей" + +msgid "Extra target filter" +msgstr "Дополнительный фильтр целей" + +msgid "Failed CAs" +msgstr "Ошибка центров сертификации (CA)" + +msgid "Failed RunAs" +msgstr "Ошибка запуска от имени" + +msgid "Failed RunAsGroup" +msgstr "Ошибка запуска от имени группы" + +msgid "Failed allowed to create keytab" +msgstr "Не удалось разрешить создавать таблицу ключей" + +msgid "Failed allowed to retrieve keytab" +msgstr "Не удалось разрешить получать таблицу ключей" + +msgid "Failed hosts/hostgroups" +msgstr "Ошибка узлов или групп узлов" + +msgid "Failed logins" +msgstr "Неудачные попытки входа" + +msgid "Failed managedby" +msgstr "Ошибка managedby" + +msgid "Failed members" +msgstr "Ошибка участников" + +msgid "Failed owners" +msgstr "Записи владельцев с ошибками" + +msgid "Failed profiles" +msgstr "Ошибка профилей" + +msgid "Failed service/service groups" +msgstr "Ошибка службы или групп служб" + +msgid "Failed source hosts/hostgroups" +msgstr "Ошибка узлов-источников или групп узлов — источников" + +msgid "Failed targets" +msgstr "Ошибка целей" + +msgid "Failed to add" +msgstr "Ошибка при добавлении" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "Не удалось добавить ключ в таблицу ключей\n" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" +"Не удалось добавить пользователя в группу по умолчанию. Используйте команду " +"\"ipa group-add-member\", чтобы добавить его вручную." + +msgid "Failed to authenticate to CA REST API" +msgstr "" +"Не удалось выполнить аутентификацию с помощью программного интерфейса CA REST" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "Не удалось задать привязку к серверу!\n" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" +"Не удалось удалить memberPrincipal %(principal)s из записи s4u2proxy %(dn)s: " +"%(err)s" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "Не удалось удалить ключи Custodia для %(master)s: %(err)s" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "Не удалось удалить записи имени узла DNA для %(master)s: %(err)s" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "Не удалось удалить записи DNS %(hostname)s: %(err)s" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "Не удалось удалить учётные записи или ключи сервера: %(err)s" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "Не удалось закрыть файл таблицы ключей\n" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" +"Не удалось установить соединение с sssd с помощью SystemBus. Подробные " +"сведения доступны в файле error_log" + +#, c-format +msgid "Failed to create control!\n" +msgstr "Не удалось создать элемент управления!\n" + +#, c-format +msgid "Failed to create key material\n" +msgstr "Не удалось создать ключ\n" + +msgid "Failed to create key!\n" +msgstr "Не удалось создать ключ!\n" + +msgid "Failed to create random key!\n" +msgstr "Не удалось создать случайный ключ!\n" + +msgid "Failed to decode control reply!\n" +msgstr "" +"Не удалось расшифровать контрольный ответ!\n" +"\n" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" +"Не удалось найти пользователей с помощью SystemBus. Подробные сведения " +"доступны в файле error_log" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "Не удалось получить файл таблицы ключей\n" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "Не удалось получить файл таблицы ключей!\n" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "Не удалось получить результат: %s\n" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "Не удалось открыть файл таблицы ключей\n" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "Не удалось открыть файл конфигурации %s\n" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "Не удалось открыть файл таблицы ключей\n" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "Не удалось открыть файл таблицы ключей \"%1$s\": %2$s\n" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "Не удалось обработать файл конфигурации %s\n" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "Не удалось обработать расширенный результат: %s\n" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "Не удалось обработать результат: %s\n" + +msgid "Failed to remove" +msgstr "Ошибка при удалении" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "Не удалось удалить сервер %(master)s из списка серверов: %(err)s" + +msgid "Failed to resolve symlink to keytab.\n" +msgstr "Не удалось разрешить символическую ссылку на файл таблицы ключей.\n" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "Не удалось получить ни одного ключа" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "Не удалось получить данные о типе шифрования %1$s (№%2$d)\n" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "Не удалось получить данные о типе шифрования №%d\n" + +msgid "Failed users/groups" +msgstr "Ошибка пользователей или групп" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "Сбой при декодировании запроса подписи сертификата: %s" + +msgid "Failure reset interval" +msgstr "Интервал сброса ошибок" + +msgid "Fallback primary group" +msgstr "Резервная основная группа" + +msgid "Fallback to AD DC LDAP" +msgstr "Перейти к резервному варианту LDAP DC AD " + +msgid "False" +msgstr "Нет (False)" + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" +"Значение \"False\", если миграцию не удалось выполнить из-за включённого " +"подключаемого модуля совместимости." + +msgid "False if migration mode was disabled." +msgstr "Значение \"False\", если режим миграции отключён." + +msgid "Fax Number" +msgstr "Номер факса" + +msgid "Fetch domains" +msgstr "Получить домены" + +msgid "Fetching DNS zones." +msgstr "Получение данных зон DNS." + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" +"Не удалось получить домены из доверенного леса. Подробные сведения доступны " +"в файле error_log" + +#, python-format +msgid "File %(file)s not found" +msgstr "Файл %(file)s не найден" + +msgid "File containing data to archive" +msgstr "Файл, содержащий данные, которые следует архивировать" + +msgid "File containing profile configuration" +msgstr "Файл, который содержит конфигурацию профиля" + +msgid "File containing the new vault password" +msgstr "Файл, который содержит новый пароль хранилища" + +msgid "File containing the new vault public key" +msgstr "Файл, который содержит новый открытый ключ хранилища" + +msgid "File containing the old vault password" +msgstr "Файл, который содержит старый пароль хранилища" + +msgid "File containing the old vault private key" +msgstr "Файл, который содержит старый закрытый ключ хранилища" + +msgid "File containing the vault password" +msgstr "Файл, который содержит пароль хранилища" + +msgid "File containing the vault private key" +msgstr "Файл, который содержит закрытый ключ хранилища" + +msgid "File containing the vault public key" +msgstr "Файл, который содержит открытый ключ хранилища" + +msgid "File to load the certificate from" +msgstr "Файл, из которого следует загрузить сертификат" + +msgid "File to load the certificate from." +msgstr "Файл, из которого следует загрузить сертификат." + +msgid "File to store retrieved data" +msgstr "Файл, в который следует сохранить полученные данные" + +msgid "File to store the certificate in." +msgstr "Файл для сохранения сертификата" + +msgid "Filename is empty" +msgstr "Пустое имя файла" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" +"Имя файла необработанного профиля. Поддержка формата XML не предусмотрена." + +msgid "Filter" +msgstr "Фильтр" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "Доступный фильтр ${other_entity}" + +msgid "Find" +msgstr "Найти" + +msgid "Find a server role on a server(s)" +msgstr "Поиск роли сервера на сервере (серверах)." + +msgid "Fingerprint" +msgstr "Отпечаток" + +msgid "Fingerprint (SHA1)" +msgstr "Отпечаток (SHA1)" + +msgid "Fingerprint (SHA256)" +msgstr "Отпечаток (SHA256)" + +msgid "Fingerprint Type" +msgstr "Тип отпечатка" + +msgid "Fingerprint of schema cached by client" +msgstr "Отпечаток схемы, кэшированный клиентом" + +msgid "Fingerprints" +msgstr "Отпечатки" + +msgid "First" +msgstr "Первый" + +msgid "First Code" +msgstr "Первый код" + +msgid "First OTP" +msgstr "Первый OTP" + +msgid "First Posix ID of the range" +msgstr "Первый идентификатор POSIX диапазона" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" +"Первый идентификатор POSIX диапазона, зарезервированного для доверенного " +"домена" + +msgid "First RID of the corresponding RID range" +msgstr "Первый RID соответствующего диапазона RID" + +msgid "First RID of the secondary RID range" +msgstr "Первый RID вторичного диапазона RID" + +msgid "First date/time the token can be used" +msgstr "Начало срока действия токена (день и время)" + +msgid "First name" +msgstr "Имя" + +msgid "Flags" +msgstr "Флаги" + +msgid "Following segments were not deleted:" +msgstr "Следующие сегменты не были удалены:" + +msgid "Force" +msgstr "Принудительно" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" +"Принудительно создать зону DNS, даже если она будет пересекаться с " +"существующей зоной" + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" +"Принудительно создать зону DNS, даже если не удаётся определить сервер имён" + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" +"Принудительно создать зону DNS, даже если не удаётся определить сервер имён. " +"(Больше не поддерживается.)" + +msgid "Force Update" +msgstr "Принудительное обновление" + +msgid "Force adding domain even if not in DNS" +msgstr "Принудительно добавить домен, даже если имени нет в DNS" + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "Принудительно изменить сервер имён, даже если он отсутствует в DNS" + +msgid "Force server removal" +msgstr "Принудительное удаление сервера" + +msgid "Force server removal even if it does not exist" +msgstr "Принудительное удаление сервера, даже если он не существует" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "" +"Принудительно присоединить узел. Повторить присоединение, даже если оно уже " +"выполнено." + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "Принудительное удаление %(hostname)s" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" +"У леса \"%(forest)s\" существует отношение доверия с лесом (лесами) " +"%(domains)s, это не позволяет установить отношение доверия с \"%(conflict)s\"" + +msgid "Format error" +msgstr "Ошибка форматирования" + +msgid "Forward first" +msgstr "Сначала перенаправлять" + +msgid "Forward only" +msgstr "Только перенаправлять" + +msgid "Forward policy" +msgstr "Политика перенаправления" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" +"В DNS IPA определена соответствующая политика перенаправления. Возможно, " +"перенаправитель указывает на некорректный узел?" + +msgid "Forward to server instead of running locally" +msgstr "Перенаправить на сервер вместо локального выполнения" + +msgid "Forward zones only" +msgstr "Только зоны перенаправления" + +msgid "Forwarders" +msgstr "Перенаправители" + +msgid "Forwarding disabled" +msgstr "Перенаправление отключено" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" +"Политика перенаправления конфликтует с некоторыми автоматически созданными " +"пустыми зонами. Запросы для зон, указанных в RFC 6303, будут игнорировать " +"перенаправление и рекурсию и всегда возвращать ответы \"NXDOMAIN\". Чтобы " +"переопределить это поведение, используйте политику перенаправления \"only\"." + +#, python-format +msgid "Found '%(value)s'" +msgstr "Найдено: \"%(value)s\"" + +msgid "Full name" +msgstr "Полное имя" + +msgid "Fully Qualified Host Name" +msgstr "Полное имя узла" + +msgid "Function to get details" +msgstr "Функция для получения сведений" + +msgid "GECOS" +msgstr "GECOS" + +msgid "GECOS field" +msgstr "Поле GECOS" + +msgid "GID" +msgstr "ID группы" + +msgid "GID (use this option to set it manually)" +msgstr "GID (используйте этот параметр, чтобы установить его вручную)" + +msgid "GSSAPI|EXTERNAL" +msgstr "GSSAPI|EXTERNAL" + +msgid "General" +msgstr "Основные" + +msgid "Generate OTP" +msgstr "Создать OTP" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "Создать случайный пароль для массовой регистрации" + +msgid "Generate a random user password" +msgstr "Создать случайный пользовательский пароль" + +msgid "Generate automount files for a specific location." +msgstr "Создать файлы автомонтирования для определённого расположения." + +msgid "Generated OTP" +msgstr "Созданный OTP" + +msgid "Get" +msgstr "Получить" + +msgid "Get Certificate" +msgstr "Получить сертификат" + +msgid "Global DNS configuration is empty" +msgstr "Пустая глобальная конфигурация DNS" + +msgid "Global Trust Configuration" +msgstr "Глобальная конфигурация отношений доверия" + +msgid "Global forwarders" +msgstr "Глобальные перенаправители" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Глобальные перенаправители. Для каждого перенаправителя можно указать " +"отдельный порт с помощью стандартного формата \"IP_АДРЕС port ПОРТ\"." + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" +"Глобальная политика перенаправления. Чтобы отключить все настроенные " +"глобальные перенаправители, установите значение \"none\"." + +msgid "Granted rights" +msgstr "Предоставленные права" + +msgid "Granted to Privilege" +msgstr "Предоставлена привилегия" + +msgid "Granting privilege to roles" +msgstr "Предоставление привилегий ролям" + +msgid "Group" +msgstr "Группа" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "Группа \"%s\" не существует" + +msgid "Group ID Number" +msgstr "ID группы" + +msgid "Group ID override" +msgstr "Переопределение ID группы" + +msgid "Group ID overrides" +msgstr "Переопределения ID группы" + +msgid "Group Options" +msgstr "Параметры группы" + +msgid "Group Settings" +msgstr "Параметры группы" + +msgid "Group Type" +msgstr "Тип группы" + +msgid "Group categories" +msgstr "Категории групп" + +msgid "Group container" +msgstr "Контейнер групп" + +msgid "Group description" +msgstr "Описание группы" + +msgid "Group name" +msgstr "Имя группы" + +msgid "Group object class" +msgstr "Класс объектов группы" + +msgid "Group object overrides" +msgstr "Приоритет объекта группы" + +msgid "Group search fields" +msgstr "Поля поиска групп" + +msgid "Group to apply ACI to" +msgstr "Группа, к которой следует применить ACI" + +msgid "Group to override" +msgstr "Группа, которую следует переопределить" + +msgid "Grouping Type" +msgstr "Тип группировки" + +msgid "Grouping to which the rule applies" +msgstr "Группировка, к которой применяется правило " + +msgid "Groups" +msgstr "Группы" + +msgid "Groups allowed to create keytab" +msgstr "Группы, которым разрешено создавать таблицу ключей" + +msgid "Groups allowed to retrieve keytab" +msgstr "Группы, которым разрешено получать таблицу ключей" + +msgid "Groups of RunAs Users" +msgstr "Группы пользователей запуска от имени" + +msgid "HBAC Rule" +msgstr "Правило HBAC" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "Правило HBAC, которое определяет пользователей, группы и группы узлов" + +msgid "HBAC Rules" +msgstr "Правила HBAC" + +msgid "HBAC Service" +msgstr "Cлужба HBAC" + +msgid "HBAC Service Group" +msgstr "Группа служб HBAC" + +msgid "HBAC Service Groups" +msgstr "Группы служб HBAC" + +msgid "HBAC Services" +msgstr "Cлужбы HBAC" + +msgid "HBAC Test" +msgstr "Проверка HBAC" + +msgid "HBAC rule" +msgstr "правило HBAC" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "Правило HBAC %(rule)s не найдено" + +msgid "HBAC rule and local members cannot both be set" +msgstr "Невозможно одновременно указать правило HBAC и локальных участников" + +msgid "HBAC rules" +msgstr "правила HBAC" + +msgid "HBAC service" +msgstr "Служба HBAC" + +msgid "HBAC service description" +msgstr "Описание службы HBAC" + +msgid "HBAC service group" +msgstr "группа служб HBAC" + +msgid "HBAC service group description" +msgstr "Описание группы служб HBAC" + +msgid "HBAC service groups" +msgstr "группы служб HBAC" + +msgid "HBAC service groups to add" +msgstr "группы служб HBAC, которые следует добавить" + +msgid "HBAC service groups to remove" +msgstr "группы служб HBAC, которые следует удалить" + +msgid "HBAC services" +msgstr "cлужбы HBAC" + +msgid "HBAC services to add" +msgstr "cлужбы HBAC, которые следует добавить" + +msgid "HBAC services to remove" +msgstr "службы HBAC, которые следует удалить" + +msgid "HIP record" +msgstr "Запись HIP" + +msgid "HOTP Authentication Window" +msgstr "Окно HOTP-аутентификации" + +msgid "HOTP Synchronization Window" +msgstr "Окно HOTP-синхронизации" + +msgid "HOTP authentication skip-ahead" +msgstr "Пропустить HOTP-аутентификацию и перейти далее" + +msgid "HOTP synchronization skip-ahead" +msgstr "Пропустить HOTP-синхронизацию и перейти далее" + +msgid "HTTP Error" +msgstr "Ошибка HTTP" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "Пароль с усиленной защитой (SPAKE или FAST)" + +msgid "Hardware MAC address(es) on this host" +msgstr "MAC-адрес(а) данного узла" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "Аппаратная платформа узла (например, Lenovo T61)" + +msgid "Hello world" +msgstr "Привет всем!" + +msgid "Help topic" +msgstr "Раздел справки" + +msgid "Hidden IPA CA servers" +msgstr "Скрытые серверы CA IPA" + +msgid "Hidden IPA DNS servers" +msgstr "Скрытые DNS-серверы IPA" + +msgid "Hidden IPA KRA servers" +msgstr "Скрытые KRA-серверы IPA" + +msgid "Hidden IPA masters" +msgstr "Скрытые главные IPA-серверы" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "Скрытые IPA-серверы, настроенные в качестве центра сертификации" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "Скрытыие IPA-серверы, настроенные в качестве сервера доменных имен" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "" +"Скрытые IPA-серверы, настроенные в качестве агента восстановления ключей" + +msgid "Hide" +msgstr "Скрыть" + +msgid "Hide details" +msgstr "Скрыть подробности" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" +"Скрыть подробные сведения о том, какие правила соответствуют, не " +"соответствуют или недействительны" + +msgid "History size" +msgstr "Размер журнала " + +msgid "Home directory" +msgstr "Домашний каталог" + +msgid "Home directory base" +msgstr "Основа домашних каталогов" + +msgid "Horizontal Precision" +msgstr "Горизонтальная точность" + +msgid "Host" +msgstr "Узел" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "Узел \"%(host)s\" не найден" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "На узле \"%(hostname)s\" нет соответствующей записи DNS A/AAAA" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "" +"Узел \"%(hostname)s\" не является активным центром распространения ключей " +"(KDC)" + +msgid "Host Certificate" +msgstr "Сертификат узла" + +msgid "Host Group" +msgstr "Группа узлов" + +msgid "Host Group Settings" +msgstr "Параметры группы узлов" + +msgid "Host Groups" +msgstr "Группы узлов" + +msgid "Host Groups allowed to create keytab" +msgstr "Группы узлов, которым разрешено создавать таблицу ключей" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "Группы узлов, которым разрешено получать таблицу ключей" + +msgid "Host Masks" +msgstr "Маски узлов" + +msgid "Host Name" +msgstr "Имя узла" + +msgid "Host Settings" +msgstr "Параметры узла" + +msgid "Host category" +msgstr "Категория узлов" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" +"Категория узлов (семантика этого атрибута предназначена для локального " +"разбора)" + +msgid "Host category the ACL applies to" +msgstr "Категория узлов, к которой применяется ACL" + +msgid "Host category the rule applies to" +msgstr "Категория узлов, к которой применяется правило" + +msgid "Host group rule" +msgstr "Правило группы узлов" + +msgid "Host group rules" +msgstr "Правила группы узлов" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "Аппаратная платформа узла (например, \"Lenovo T61\")" + +#, c-format +msgid "Host is already joined.\n" +msgstr "Узел уже присоединён.\n" + +msgid "Host is not supported" +msgstr "Поддержка узла не предусмотрена" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "Адрес местонахождения узла (например, \"Москва, Россия\")" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "Расположение узла (например, \"Lab 2\")" + +msgid "Host name" +msgstr "Имя узла" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "Операционная система узла и её версия (например, \"Fedora 9\")" + +msgid "Host unprovisioned" +msgstr "Узел, подготовка которого к работе отменена" + +msgid "Host-Based Access Control" +msgstr "Управление доступом на основе узла" + +msgid "Host-based access control commands" +msgstr "Команды управления доступом на основе узла" + +msgid "Host-group" +msgstr "Группа узлов" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" +"Группы узлов, к узлам которых следует применить представление ID. Обратите " +"внимание, что представление не применяется автоматически к узлам, " +"добавленным в группу узлов после выполнения команды idview-apply." + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" +"Группы узлов, для узлов которых следует очистить представления ID. Обратите " +"внимание, что представление не очищается автоматически для узлов, " +"добавленных в группу узлов после выполнения команды idview-unapply. " + +msgid "Hostname" +msgstr "Имя узла" + +msgid "Hostname (FQDN)" +msgstr "Имя узла (FQDN)" + +msgid "Hostname of this server" +msgstr "Имя узла этого сервера" + +msgid "Hosts" +msgstr "Узлы" + +msgid "Hosts allowed to create keytab" +msgstr "Узлы, которым разрешено создавать таблицу ключей" + +msgid "Hosts allowed to retrieve keytab" +msgstr "Узлы, которым разрешено получать таблицу ключей" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" +"Узлы или группы узлов, для которых не удалось очистить представление ID." + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" +"Узлы или группы узлов, к которым не удалось применить это представление ID." + +msgid "Hosts that ID View was cleared from." +msgstr "Узлы, для которых было очищено представление ID." + +msgid "Hosts that this ID View was applied to." +msgstr "Узлы, к которым было применено это представление ID." + +msgid "Hosts the view applies to" +msgstr "Узлы, к которым применяется представление" + +msgid "Hosts to apply the ID View to" +msgstr "Узлы, к которым следует применить представление ID" + +msgid "Hosts to clear (any) ID View from." +msgstr "Узлы, для которых следует очистить (любое) представление ID." + +msgid "How long should negative responses be cached" +msgstr "Как долго следует кэшировать отрицательные ответы" + +msgid "ID Range" +msgstr "Диапазон идентификаторов" + +msgid "ID Ranges" +msgstr "Диапазоны идентификаторов" + +msgid "ID View" +msgstr "Представление ID" + +msgid "ID View Name" +msgstr "Имя представления ID" + +msgid "ID View already applied" +msgstr "Представление ID уже применено" + +#, python-format +msgid "ID View applied to %i host." +msgstr "Представление ID применено к узлу: %i." + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "Представление ID применено к узлам: %i." + +#, python-format +msgid "ID View cleared from %i host." +msgstr "Представление ID очищено из %i узла." + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "Представление ID очищено из %i узлов." + +msgid "ID Views" +msgstr "Представления ID" + +msgid "ID override" +msgstr "Переопределение ID" + +msgid "ID overrides cannot be renamed" +msgstr "Невозможно переименовать переопределения ID" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" +"Диапазон идентификаторов для доверенного домена уже существует, но имеет " +"другой тип. Удалите старый диапазон вручную или не устанавливайте тип " +"принудительно с помощью параметра --range-type." + +msgid "ID range type, one of allowed values" +msgstr "Тип диапазона идентификаторов, одно из разрешённых значений" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" +"Тип диапазона идентификаторов, один из следующих: ipa-ad-trust-posix, ipa-ad-" +"trust, ipa-local" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" +"Уже существует диапазон идентификаторов с тем же именем, но другим SID " +"домена. Диапазон идентификаторов для нового доверенного домена необходимо " +"создать вручную." + +msgid "IP Address" +msgstr "IP-адрес" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "IP-адрес %(ip)s уже назначен в домене %(domain)s." + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "IP-адрес в subjectAltName (%s) не имеет записи PTR" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "IP-адрес в subjectAltName (%s) недоступен из DNS-имён" + +msgid "IP network to create reverse zone name from" +msgstr "IP-сеть для создания имени обратной зоны" + +msgid "IPA AD trust agents" +msgstr "Агенты отношений доверия AD IPA" + +msgid "IPA AD trust controllers" +msgstr "Контролёры отношений доверия AD IPA" + +msgid "IPA CA cannot be deleted" +msgstr "Невозможно удалить CA IPA" + +msgid "IPA CA cannot be disabled" +msgstr "Службу сертификации IPA нельзя отключить" + +msgid "IPA CA certificate" +msgstr "Сертификат CA IPA" + +msgid "IPA CA renewal master" +msgstr "Главный сервер обновления CA IPA" + +msgid "IPA CA servers" +msgstr "Серверы CA IPA" + +msgid "IPA DNS Server is not installed" +msgstr "DNS-сервер IPA не установлен" + +msgid "IPA DNS records" +msgstr "Записи DNS IPA" + +msgid "IPA DNS servers" +msgstr "DNS-серверы IPA" + +msgid "IPA DNS version" +msgstr "Версия DNS IPA" + +msgid "IPA DNSSec key master" +msgstr "Мастер ключей DNSSec IPA" + +msgid "IPA Error" +msgstr "Ошибка IPA" + +msgid "IPA KRA servers" +msgstr "KRA-серверы IPA" + +msgid "IPA Location" +msgstr "Расположение IPA" + +msgid "IPA Location description" +msgstr "Описание расположения IPA" + +msgid "IPA Locations" +msgstr "Расположения IPA" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" +"Если указан SID доверенного домена, тип диапазона IPA должен быть ipa-ad-" +"trust или ipa-ad-trust-posix" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" +"Если не указан SID доверенного домена, тип диапазона IPA не должен быть ipa-" +"ad-trust или ipa-ad-trust-posix" + +msgid "IPA Server" +msgstr "IPA-сервер" + +msgid "IPA Server Role" +msgstr "Роль IPA-сервера" + +msgid "IPA Server Roles" +msgstr "Роли IPA-сервера" + +msgid "IPA Server to use" +msgstr "IPA-сервер, который следует использовать" + +msgid "IPA Servers" +msgstr "IPA-серверы" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" +"IPA не управляет зоной %(zone)s. Добавьте записи на DNS-сервер вручную." + +msgid "IPA location name" +msgstr "Имя расположения IPA" + +msgid "IPA location records" +msgstr "Записи расположений IPA" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" +"IPA управляет DNS. Проверьте вашу конфигурацию DNS и убедитесь, что " +"настройки позволяют определять адреса служебных записей домена \"{domain}\". " +"Примеры настройки DNS с помощью команд CLI или веб-интерфейса доступны в " +"документации. " + +msgid "IPA master capable of PKINIT" +msgstr "Главный IPA-сервер с поддержкой PKINIT" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" +"Главный IPA-сервер ответил отказом на запросы по утверждению отношений " +"доверия от DC AD следующее количество раз: %(count)d. Скорее всего, DC AD " +"была установлена связь с репликой, на которой ещё не выполнена репликация " +"данных об отношениях доверия. Кроме того, проверьте, может ли DNS AD " +"определять по записям SRV %(records)s корректный IPA-сервер." + +msgid "IPA master which can process PKINIT requests" +msgstr "Главный IPA-сервер, которой может обрабатывать запросы PKINIT" + +msgid "IPA masters" +msgstr "Главные IPA-серверы" + +#, c-format +msgid "IPA namingContext not found\n" +msgstr "namingContext IPA не найдено\n" + +msgid "IPA object" +msgstr "Объект IPA" + +msgid "IPA role name" +msgstr "Имя роли IPA" + +msgid "IPA server configured as DNSSec key master" +msgstr "IPA-сервер, настроенный в качестве мастера ключей DNSSec" + +msgid "IPA server domain cannot be deleted" +msgstr "Домен IPA-сервера не может быть удалён" + +msgid "IPA server domain cannot be omitted" +msgstr "Домен IPA-сервера не может быть пропущен" + +msgid "IPA server hostname" +msgstr "Имя узла IPA-сервера" + +msgid "IPA server role name" +msgstr "Имя роли IPA-сервера" + +msgid "IPA servers configured as AD trust agents" +msgstr "IPA-серверы, настроенные в качестве агентов отношений доверия AD" + +msgid "IPA servers configured as AD trust controllers" +msgstr "IPA-серверы, настроенные в качестве контролёров отношений доверия AD" + +msgid "IPA servers configured as certificate authority" +msgstr "IPA-серверы, настроенные в качестве центра сертификации" + +msgid "IPA servers configured as domain name server" +msgstr "IPA-серверы, настроенные в качестве сервера доменных имен" + +msgid "IPA servers configured as key recovery agent" +msgstr "IPA-серверы, настроенные в качестве агента восстановления ключей" + +msgid "IPA servers configured as key recovery agents" +msgstr "IPA-серверы, настроенные в качестве агентов восстановления ключей" + +msgid "IPA trust" +msgstr "Отношение доверия IPA" + +msgid "IPA unique ID" +msgstr "Уникальный ID IPA" + +msgid "IPSECKEY record" +msgstr "Запись IPSECKEY" + +msgid "Identity" +msgstr "Идентификация" + +msgid "Identity Settings" +msgstr "Параметры идентификации" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "Если CA не указаны, будут разрешены запросы к CA по умолчанию." + +msgid "If the problem persists please contact the system administrator." +msgstr "" +"При повторном возникновении проблемы обратитесь к системному администратору." + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" +"Игнорировать проверку того, является ли удаляемый сервер последним сервером " +"CA или DNS" + +msgid "Ignore compat plugin" +msgstr "Игнорировать подключаемый модуль совместимости" + +msgid "Ignore group attribute" +msgstr "Игнорировать атрибут группы" + +msgid "Ignore group object class" +msgstr "Игнорировать класс объектов группы" + +msgid "Ignore topology connectivity problems after removal" +msgstr "Игнорировать ошибки топологии подключений после удаления" + +msgid "Ignore topology errors" +msgstr "Игнорировать ошибки топологии" + +msgid "Ignore user attribute" +msgstr "Игнорировать атрибут пользователя" + +msgid "Ignore user object class" +msgstr "Игнорировать класс объектов пользователя" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "Пропущено %(src)s в %(dst)s" + +msgid "Ignored keys:" +msgstr "Пропущенные ключи:" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "Предупреждения игнорируются, процесс удаления продолжается" + +msgid "Ignoring topology connectivity errors." +msgstr "Игнорирование ошибок топологии подключений." + +msgid "Import a Certificate Profile." +msgstr "Импортировать профиль сертификатов." + +msgid "Import an entitlement certificate." +msgstr "Импортировать сертификат прав." + +msgid "Import automount files for a specific location." +msgstr "Импортировать файлы автомонтирования для определённого расположения." + +msgid "Imported keys:" +msgstr "Импортированные ключи:" + +msgid "Imported maps:" +msgstr "Импортированные списки соответствия:" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "Импортирован профиль \"%(value)s\"" + +msgid "Include Disabled" +msgstr "Включать отключённые" + +msgid "Include Enabled" +msgstr "Включать включённые" + +msgid "Include IPA master entries" +msgstr "Включить записи главных IPA-cерверов" + +msgid "Include all disabled IPA rules into test" +msgstr "Проверить все отключённые правила IPA" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "Проверить все включённые правила IPA [поведение по умолчанию]" + +msgid "Include certificate chain in output" +msgstr "Включить цепочку сертификатов в вывод" + +msgid "Include in" +msgstr "Включить в" + +msgid "Included attributes" +msgstr "Включённые атрибуты" + +msgid "Inclusive" +msgstr "Включающий" + +msgid "Inclusive Regex" +msgstr "Включающие регулярные выражения" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "Указаны несовместимые параметры (-r и -P)\n" + +msgid "Indirect" +msgstr "Непрямой" + +msgid "Indirect Member HBAC service" +msgstr "Служба HBAC с непрямым участием" + +msgid "Indirect Member HBAC service group" +msgstr "Группа служб HBAC с непрямым участием" + +msgid "Indirect Member groups" +msgstr "Группы с непрямым участием" + +msgid "Indirect Member host-groups" +msgstr "Группы узлов с непрямым участием" + +msgid "Indirect Member hosts" +msgstr "Узлы с непрямым участием" + +msgid "Indirect Member netgroups" +msgstr "Сетевые группы с непрямым участием" + +msgid "Indirect Member of HBAC rule" +msgstr "Участник правила HBAC с непрямым участием" + +msgid "Indirect Member of Sudo rule" +msgstr "Участник правила Sudo с непрямым участием" + +msgid "Indirect Member of group" +msgstr "Непрямой участник группы" + +msgid "Indirect Member of host-group" +msgstr "Участник группы узлов с непрямым участием" + +msgid "Indirect Member of netgroup" +msgstr "Участник сетевой группы с непрямым участием" + +msgid "Indirect Member of role" +msgstr "Участник роли с непрямым участием" + +msgid "Indirect Member of roles" +msgstr "Участник ролей с непрямым участием" + +msgid "Indirect Member permissions" +msgstr "Разрешения с непрямым участием" + +msgid "Indirect Member users" +msgstr "Пользователи с непрямым участием" + +msgid "Indirect Membership" +msgstr "Непрямое участие" + +msgid "Inherited from server configuration" +msgstr "Унаследовано из конфигурации сервера" + +msgid "Initial counter for the HOTP token" +msgstr "Начальный счётчик токена HOTP" + +msgid "Initialize left node" +msgstr "Инициализировать левый узел" + +msgid "Initialize right node" +msgstr "Инициализировать правый узел" + +msgid "Initials" +msgstr "Инициалы" + +msgid "Input data specified multiple times" +msgstr "Входные данные указаны несколько раз" + +msgid "Input file" +msgstr "Входной файл" + +msgid "Input filename" +msgstr "Имя файла входных данных" + +msgid "Input form contains invalid or missing values." +msgstr "Форма ввода данных содержит недопустимые или отсутствующие значения." + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "Недостаточно привилегий \"add\" для записи \"%s\"." + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" +"Недостаточно привилегий \"write\" для атрибута \"krbLastPwdChange\" записи " +"\"%s\"." + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "" +"Недостаточно привилегий \"write\" для атрибута \"userCertificate\" записи " +"\"%s\"." + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Недостаточно прав для доступа: %(info)s" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" +"Недостаточно привилегий для создания сертификата с альтернативным именем " +"субъекта \"%s\"." + +msgid "Insufficient privilege to delete a CA." +msgstr "Недостаточно привилегий для удаления записи CA." + +msgid "Insufficient privilege to modify a CA." +msgstr "Недостаточно привилегий для внесения изменений в запись CA." + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "Недостаточно привилегий для внесения изменений в профиль сертификатов." + +msgid "Internal Error" +msgstr "Внутренняя ошибка" + +msgid "Internationalization messages" +msgstr "Сообщения интернационализации" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Неверный JSON-RPC запрос: %(error)s" + +msgid "Invalid LDAP URI." +msgstr "Неверный URI LDAP." + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" +"Некорректное значение MCS, должно соответстовать {mcs}, где максимальная " +"категория {mcs_max}" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" +"Некорректное значение MLS, должно соответстовать {mls}, где максимальный " +"уровень {mls_max}" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "Некорректный механизм привязки SASL\n" + +msgid "Invalid SELinux user name, must match {}" +msgstr "Некорректное имя пользователя SELinux, должно соответствовать {}" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "Недопустимое имя учётной записи службы\n" + +msgid "Invalid credentials" +msgstr "Недействительные учётные данные" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "Недопустимое имя домена \"%(domain)s\": %(e)s" + +msgid "Invalid format. Should be name=value" +msgstr "Неправильный формат. Должно быть имя=значение" + +msgid "Invalid number of parts!" +msgstr "Неверное количество частей!" + +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "Тип недействителен или не поддерживается. Разрешённые значения: %s" + +#, python-format +msgid "Invalid or unsupported vault public key: %s" +msgstr "Открытый ключ хранилища недействителен или не поддерживается: %s" + +msgid "Invalid vault type" +msgstr "Недопустимый тип хранилища" + +msgid "Is zone active?" +msgstr "Зона активна?" + +msgid "Issue" +msgstr "Выдать" + +msgid "Issue new certificate" +msgstr "Выдать новый сертификат" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "Выдать новый сертификат для узла '${primary_key}'" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "Выдать новый сертификат для службы '${primary_key}'" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "Выдать новый сертификат для пользователя '${primary_key}'" + +msgid "Issued By" +msgstr "Выдан (издатель)" + +msgid "Issued On" +msgstr "Выдан (дата)" + +msgid "Issued To" +msgstr "Выдан для" + +msgid "Issued on from" +msgstr "Выдан с" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "Выдан с этой даты (ГГГГ-мм-дд)" + +msgid "Issued on to" +msgstr "Выдан до" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "Выдан до этой даты (ГГГГ-мм-дд)" + +msgid "Issuer" +msgstr "Издатель" + +msgid "Issuer DN" +msgstr "DN издателя" + +msgid "Issuer Distinguished Name" +msgstr "Различающееся имя издателя" + +msgid "Issuer and subject" +msgstr "Издатель и субъект" + +msgid "Issuer of the certificate" +msgstr "Издатель сертификата" + +msgid "Issuing CA" +msgstr "Выдающий CA" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" +"Настоятельно рекомендуется установить следующие службы на нескольких " +"серверах:" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "Используется только для установки атрибута MNAME SOA" + +msgid "Job Title" +msgstr "Должность" + +msgid "Join an IPA domain" +msgstr "Присоединиться к домену IPA." + +msgid "KEY Algorithm" +msgstr "Алгоритм KEY" + +msgid "KEY Flags" +msgstr "Флаги KEY" + +msgid "KEY Protocol" +msgstr "Протокол KEY" + +msgid "KEY Public Key" +msgstr "Открытый ключ KEY" + +msgid "KEY record" +msgstr "Запись KEY" + +msgid "KRA service is not enabled" +msgstr "Служба KRA не включена" + +msgid "KX Exchanger" +msgstr "Обменник KX" + +msgid "KX Preference" +msgstr "Приоритет KX" + +msgid "KX record" +msgstr "Запись KX" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" +"Кэш учётных данных Kerberos не найден. Имеется ли у вас билет Kerberos?\n" + +msgid "Kerberos Key" +msgstr "Ключ Kerberos" + +msgid "Kerberos Key Not Present" +msgstr "Отсутствует ключ Kerberos" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "Имеется ключ Kerberos, узел подготовлен к работе" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "Имеется ключ Kerberos, служба подготовлена к работе" + +msgid "Kerberos Principal you entered is expired" +msgstr "Срок действия введённой учётной записи Kerberos истёк" + +msgid "Kerberos Service Principal Name" +msgstr "Имя учётной записи службы Kerberos" + +msgid "Kerberos Ticket Policy" +msgstr "Политика билетов Kerberos" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" +"Учётная запись пользователя Kerberos не найдена. Имеется ли у вас корректный " +"кэш учётных данных?\n" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "Не удалось инициализировать Kerberos-контекст\n" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "Не удалось инициализировать Kerberos-контекст: %1$s (%2$d)\n" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "ошибка Kerberos: %(major)s/%(minor)s" + +msgid "Kerberos keys available" +msgstr "Доступные ключи Kerberos" + +msgid "Kerberos principal" +msgstr "Учётная запись Kerberos" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" +"Учётная запись Kerberos %s уже существует. Используйте команду \"ipa user-" +"mod\", чтобы установить её параметры вручную." + +msgid "Kerberos principal expiration" +msgstr "Окончание действия учётной записи Kerberos" + +msgid "Kerberos principal name for this host" +msgstr "Имя учётной записи Kerberos для этого узла" + +msgid "Key" +msgstr "Ключ" + +msgid "Key Compromise" +msgstr "Компрометация ключа" + +msgid "Key Tag" +msgstr "Тег ключа" + +msgid "Keytab" +msgstr "Таблица ключей" + +msgid "Keytab File Name" +msgstr "Имя файла таблицы ключей" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "Таблица ключей успешно получена и сохранена в: %s\n" + +msgid "LDAP DN" +msgstr " DN LDAP" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "Механизм привязки LDAP SASL, если отсутствует bindd/bindpw" + +msgid "LDAP URI" +msgstr "URI LDAP" + +msgid "LDAP URI of DS server to migrate from" +msgstr "URI LDAP сервера DS, с которого будет осуществляться миграция" + +msgid "LDAP basedn" +msgstr "базовое расширяемое имя (DN) LDAP" + +msgid "LDAP password" +msgstr "Пароль LDAP" + +msgid "LDAP password (if not using Kerberos)" +msgstr "LDAP-пароль (если не используется Kerberos)" + +msgid "LDAP schema" +msgstr "Схема LDAP" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" +"Область поиска LDAP для пользователей и групп: base, onelevel или subtree. " +"Значение по умолчанию: onelevel." + +msgid "LDAP suffix to be managed" +msgstr "Суффикс LDAP, которым следует управлять" + +msgid "LDAP timeout" +msgstr "Время ожидания LDAP" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "" +"Адрес LDAP, с которым следует установить соединение. Несовместимо с --server" + +msgid "LOC Altitude" +msgstr "Высота над уровнем моря LOC" + +msgid "LOC Degrees Latitude" +msgstr "Градусы широты LOC" + +msgid "LOC Degrees Longitude" +msgstr "Градусы долготы LOC" + +msgid "LOC Direction Latitude" +msgstr "Направление широты LOC" + +msgid "LOC Direction Longitude" +msgstr "Направление долготы LOC" + +msgid "LOC Horizontal Precision" +msgstr "Горизонтальная точность LOC" + +msgid "LOC Minutes Latitude" +msgstr "Минуты широты LOC" + +msgid "LOC Minutes Longitude" +msgstr "Минуты долготы LOC" + +msgid "LOC Seconds Latitude" +msgstr "Секунды широты LOC" + +msgid "LOC Seconds Longitude" +msgstr "Секунды долготы LOC" + +msgid "LOC Size" +msgstr "Размер LOC" + +msgid "LOC Vertical Precision" +msgstr "Вертикальная точность LOC" + +msgid "LOC record" +msgstr "Запись LOC" + +msgid "Label" +msgstr "Метка" + +msgid "Labels" +msgstr "Метки" + +msgid "Last" +msgstr "Последний" + +msgid "Last date/time the token can be used" +msgstr "Окончание срока действия токена (день и время)" + +msgid "Last failed authentication" +msgstr "Последняя ошибка при аутентификации" + +msgid "Last name" +msgstr "Фамилия" + +msgid "Last successful authentication" +msgstr "Последняя успешная аутентификация" + +msgid "Leading and trailing spaces are not allowed" +msgstr "Использование пробелов в начале и в конце запрещено" + +msgid "Left node" +msgstr "Левый узел" + +msgid "Left replication node - an IPA server" +msgstr "Левый узел репликации — IPA-сервер" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "Допустимый фильтр LDAP (например, ou=Engineering)" + +msgid "Length of TOTP token code validity" +msgstr "Продолжительность действия кода токена TOTP" + +msgid "Level" +msgstr "Уровень" + +msgid "List all service vaults" +msgstr "Вывести список всех хранилищ служб" + +msgid "List all user vaults" +msgstr "Вывести список всех хранилищ пользователей" + +msgid "List of IPA masters configured as DNS servers" +msgstr "" +"Вывести список главных IPA-серверов, настроенных в качестве DNS-серверов" + +msgid "List of all IPA masters" +msgstr "Список всех главных IPA-серверов" + +msgid "List of all hidden IPA masters" +msgstr "Список всех скрытых главных IPA-серверов" + +msgid "List of deletions that failed" +msgstr "Список удалений, которые не удалось выполнить" + +msgid "List of enabled roles" +msgstr "Список включённых ролей" + +msgid "List of servers which advertise the given location" +msgstr "Список серверов, которые сообщают указанное расположение" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" +"Список надёжных доменов успешно обновлён. Используйте команду trustdomain-" +"find для вывода этого списка." + +msgid "Lists of objects migrated; categorized by type." +msgstr "Список перенесённых объектов; упорядочены по типу" + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "Список объектов, которые не удалось перенести; упорядочены по типу" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "Загрузить сертификат CA LDAP-сервера из ФАЙЛА" + +msgid "Loading" +msgstr "Загрузка" + +msgid "Loading data" +msgstr "Загрузка данных" + +msgid "Local domain" +msgstr "Локальный домен" + +msgid "Locality" +msgstr "Адрес местонахождения" + +msgid "Location" +msgstr "Расположение" + +msgid "Location name" +msgstr "Имя расположения" + +msgid "Location of the ACI" +msgstr "Расположение ACI" + +msgid "Lockout duration" +msgstr "Длительность блокировки" + +msgid "Log In Using Certificate" +msgstr "Войти с помощью сертификата" + +msgid "Log in" +msgstr "Войти" + +msgid "Log in using personal certificate" +msgstr "Войти с помощью личного сертификата" + +msgid "Log out" +msgstr "Выйти" + +msgid "Log out error" +msgstr "Ошибка при выходе" + +msgid "Logged In As" +msgstr "Выполнен вход под именем" + +msgid "Login failed due to an unknown reason" +msgstr "Не удалось войти по неизвестной причине" + +msgid "Login shell" +msgstr "Оболочка входа" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" +"Чем меньше число, тем выше приоритет. Клиентские части попытаются связаться " +"с тем доступным для них адресом, у которого ниже число приоритета. " + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" +"Чем меньше число, тем выше приоритет. Клиентские части попытаются связаться " +"с тем доступным для них сервером, у которого ниже число приоритета. " + +msgid "MAC address" +msgstr "MAC-адрес" + +msgid "MS-PAC" +msgstr "MS-PAC" + +msgid "MX Exchanger" +msgstr "Обменник MX" + +msgid "MX Preference" +msgstr "Приоритет MX" + +msgid "MX record" +msgstr "Запись MX" + +msgid "Mailing Address" +msgstr "Почтовый адрес" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" +"Совершать несколько вызовов ipa с помощью одного удалённого вызова процедур " + +msgid "Malformed DN" +msgstr "Некорректное DN" + +msgid "Malformed principal" +msgstr "Недопустимая учётная запись" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "Недопустимая учётная запись: \"%(value)s\"" + +msgid "Manage password policy for specific group" +msgstr "Управление политикой паролей для определённой группы" + +msgid "Manage ticket policy for specific user" +msgstr "Управление политикой билетов для определённого пользователя" + +msgid "Managed LDAP suffix DN" +msgstr "DN управляемого суффикса LDAP" + +msgid "Managed by" +msgstr "Управляется" + +msgid "Managed suffix" +msgstr "Управляемый суффикс" + +msgid "Managed suffixes" +msgstr "Управляемые суффиксы" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" +"Управляемая топология требует минимального уровня домена ${domainlevel}" + +msgid "Managedby permission" +msgstr "Разрешение managedby" + +msgid "Manager" +msgstr "Руководитель" + +msgid "Managing" +msgstr "Управление" + +msgid "Map" +msgstr "Список соответствия" + +msgid "Map Type" +msgstr "Тип списка соответствия" + +msgid "Mapping rule" +msgstr "Правило сопоставления" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" +"Набор правил сопоставления \"%(ruleset)s\" содержит более одного правила для " +"вспомогательной службы %(helper)s" + +msgid "Mark the token as disabled (default: false)" +msgstr "Отметить токен как отключённый (значение по умолчанию: false)" + +msgid "Master file" +msgstr "Главный файл" + +msgid "Match" +msgstr "Сопоставить" + +msgid "Match cn attribute in subject" +msgstr "Сопоставлять атрибут \"cn\" в субъекте" + +msgid "Match users according to certificate." +msgstr "Установить соответствие пользователей по сертификату." + +msgid "Matched" +msgstr "Установлено соответствие" + +msgid "Matched Users" +msgstr "Соответствующие пользователи" + +msgid "Matched rules" +msgstr "Соответствующие правила" + +msgid "Matching Type" +msgstr "Тип соответствия" + +msgid "Matching rule" +msgstr "Правило соответствия" + +msgid "Max domain level" +msgstr "Макс. уровень домена" + +msgid "Max failures" +msgstr "Максимальное количество ошибок" + +msgid "Max life" +msgstr "Максимальный срок жизни" + +msgid "Max lifetime (days)" +msgstr "Максимальный срок действия (в днях)" + +msgid "Max renew" +msgstr "Максимальный срок для обновления" + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "" +"Максимальное количество времени (в секундах) для поиска (-1 или 0 означает " +"отсутствие ограничения)" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "" +"Максимальное количество времени (в секундах) для поиска (> 0 или -1 означает " +"отсутствие ограничения)" + +msgid "Maximum domain level" +msgstr "Максимальный уровень домена" + +msgid "Maximum hostname length" +msgstr "Максимальная длина имени узла" + +msgid "Maximum number of agreements per replica" +msgstr " Максимальное количество соглашений для реплики" + +msgid "Maximum number of certs returned" +msgstr "Максимальное количество возвращённых сертификатов" + +msgid "Maximum number of entries returned" +msgstr "Максимальное количество возвращённых записей" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "" +"Максимальное количество возвращённых записей (\"0\" означает отсутствие " +"ограничения)" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "" +"Максимальное количество записей результатов поиска (-1 означает отсутствие " +"ограничения)" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "" +"Максимальное количество записей результатов поиска (-1 или 0 означает " +"отсутствие ограничения)" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" +"Максимальное количество правил, которое следует обработать, если не указан " +"параметр --rules" + +msgid "Maximum password lifetime (in days)" +msgstr "Максимальный срок действия пароля (в днях)" + +msgid "Maximum renewable age (seconds)" +msgstr "Максимальный срок для обновления (в секундах)" + +msgid "Maximum serial number" +msgstr "Максимальный серийный номер" + +msgid "Maximum ticket life (seconds)" +msgstr "Максимальный срок жизни билета (в секундах)" + +msgid "Maximum username length" +msgstr "Максимальная длина имени пользователя" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "Максимальное значение равно ${value}" + +msgid "May not be empty" +msgstr "Не может быть пустым" + +msgid "Member Group" +msgstr "Группа-участник" + +msgid "Member HBAC service" +msgstr "Служба-участник HBAC" + +msgid "Member HBAC service groups" +msgstr "Группы служб HBAC — участники" + +msgid "Member Host" +msgstr "Узел-участник" + +msgid "Member Hostgroup" +msgstr "Группа узлов — участник" + +msgid "Member Sudo commands" +msgstr "Команды участника Sudo" + +msgid "Member User" +msgstr "Пользователь-участник" + +msgid "Member groups" +msgstr "Группы-участники" + +msgid "Member host-groups" +msgstr "Группы узлов — участники" + +msgid "Member hosts" +msgstr "Узлы-участники" + +msgid "Member netgroups" +msgstr "Сетевые группы — участники" + +msgid "Member of" +msgstr "Участник" + +msgid "Member of HBAC rule" +msgstr "Участник правила HBAC" + +msgid "Member of HBAC service groups" +msgstr "Участник групп служб HBAC" + +msgid "Member of Sudo rule" +msgstr "Участник правила Sudo" + +msgid "Member of a group" +msgstr "Участник группы" + +msgid "Member of group" +msgstr "Участник группы" + +msgid "Member of groups" +msgstr "Участник групп" + +msgid "Member of host-groups" +msgstr "Участник групп узлов" + +msgid "Member of netgroups" +msgstr "Участник сетевых групп" + +msgid "Member principals" +msgstr "Учётные записи — участники" + +msgid "Member service groups" +msgstr "Группы служб — участники" + +msgid "Member services" +msgstr "Службы-участники" + +msgid "Member user group" +msgstr "Группа пользователей — участник" + +msgid "Member users" +msgstr "Пользователи-участники" + +msgid "Members" +msgstr "Участники" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "Участники доверенного домена в формате DOM\\имя или имя@домен" + +msgid "Members that could not be added" +msgstr "Участники, которых не удалось добавить" + +msgid "Members that could not be removed" +msgstr "Участники, которых не удалось удалить" + +msgid "Method name" +msgstr "Имя метода" + +msgid "Method of" +msgstr "Метод" + +msgid "Migrate" +msgstr "Перенести" + +msgid "Migrate users and groups from DS to IPA." +msgstr "Перенести данные пользователей и групп из DS в IPA" + +msgid "Migrating" +msgstr "Выполняется перенос" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" +"Режим миграции отключён. Используйте команду \"ipa config-mod --enable-" +"migration=TRUE\", чтобы включить его." + +msgid "Migration of LDAP search reference is not supported." +msgstr "Поддержка миграции поисковой ссылки LDAP не предусмотрена." + +msgid "Min domain level" +msgstr "Мин. уровень домена" + +msgid "Min length" +msgstr "Минимальная длина" + +msgid "Min lifetime (hours)" +msgstr "Минимальный срок действия (в часах)" + +msgid "Minimum domain level" +msgstr "Минимальный уровень домена" + +msgid "Minimum length of password" +msgstr "Минимальная длина пароля" + +msgid "Minimum number of character classes" +msgstr "Минимальное количество классов символов" + +msgid "Minimum password lifetime (in hours)" +msgstr "Минимальный срок действия пароля (в часах)" + +msgid "Minimum serial number" +msgstr "Минимальный серийный номер" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "Минимальное значение равно ${value}" + +msgid "Minutes Latitude" +msgstr "Минуты широты" + +msgid "Minutes Longitude" +msgstr "Минуты долготы" + +msgid "Misc. Information" +msgstr "Прочие сведения" + +msgid "Missing credentials for cross-forest communication" +msgstr "Отсутствуют учётные данные для обмена данными между лесами" + +msgid "Missing new vault public key" +msgstr "Отсутствует новый открытый ключ хранилища" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "Отсутствует или неверный HTTP Referer, %(referer)s" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "Отсутствует список элементов управления ответами!\n" + +#, c-format +msgid "Missing reply control!\n" +msgstr "Отсутствует элемент управления ответами!\n" + +msgid "Missing values: " +msgstr "Отсутствующие значения:" + +msgid "Missing vault private key" +msgstr "Отсутствует закрытый ключ хранилища" + +msgid "Missing vault public key" +msgstr "Отсутствует открытый ключ хранилища" + +msgid "Mobile Telephone Number" +msgstr "Номер мобильного телефона" + +msgid "Model" +msgstr "Модель" + +msgid "Modified" +msgstr "Изменено" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "Изменена конфигурация отношений доверия \"%(value)s\"" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "Изменена ACI \"%(value)s\"" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "Изменена запись CA \"%(value)s\"" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "Изменена CA ACL \"%(value)s\"" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "" +"Изменено правило сопоставления сертификатов с записями пользователей " +"\"%(value)s\"" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Изменён профиль сертификатов \"%(value)s\"" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "Изменена запись DNS-сервера \"%(value)s\"" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "Изменено правило HBAC \"%(value)s\"" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "Изменена служба HBAC \"%(value)s\"" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "Изменена группа служб HBAC \"%(value)s\"" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "Изменён диапазон идентификаторов \"%(value)s\"" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "Изменена запись расположения IPA \"%(value)s\"" + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "Изменена запись IPA-сервера \"%(value)s\"" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "Изменён токен OTP \"%(value)s\"" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "Изменён прокси-сервер RADIUS \"%(value)s\"" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "Изменён список пользователей SELinux \"%(value)s\"" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "Изменена команда Sudo \"%(value)s\"" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Изменена группа команд Sudo \"%(value)s\"" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Изменено правило Sudo \"%(value)s\"" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "Изменено переопределение ID группы \"%(value)s\"" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "Изменено представление ID \"%(value)s\"" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "Изменено переопределение ID \"%(value)s\"" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "Изменено переопределение ID пользователя \"%(value)s\"" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "Изменено правило автоучастия \"%(value)s\"" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "Изменён ключ автомонтирования \"%(value)s\"" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "Изменён список соответствия автомонтирования \"%(value)s\"" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "Изменено делегирование \"%(value)s\"" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Изменена группа \"%(value)s\"" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "Изменён узел \"%(value)s\"" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Изменена группа узлов \"%(value)s\"" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "Изменена сетевая группа \"%(value)s\"" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "Изменено разрешение \"%(value)s\"" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "Изменена привилегия \"%(value)s\"" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "Изменена роль \"%(value)s\"" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "Изменён сегмент \"%(value)s\"" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "Изменено самообслуживание \"%(value)s\"" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "Изменена служба \"%(value)s\"" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "Изменён неподтверждённый пользователь \"%(value)s\"" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "Изменён суффикс топологии \"%(value)s\"" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "" +"Изменено отношение доверия \"%(value)s\" (изменения будут применены через 60 " +"секунд)" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Изменён пользователь \"%(value)s\"" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "Изменено хранилище \"%(value)s\"" + +msgid "Modified: key not set" +msgstr "Изменено: ключ не установлен" + +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "Изменить значения \"%(value)s\" %(name)s?" + +msgid "Modify ACI." +msgstr "Изменить запись ACI." + +msgid "Modify CA configuration." +msgstr "Изменить конфигурацию CA." + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "" +"Изменить конфигурацию сопоставления сертификатов с записями пользователей." + +msgid "Modify Certificate Profile configuration." +msgstr "Изменить конфигурацию профиля сертификатов." + +msgid "Modify Class of Service entry" +msgstr "Изменить запись класса обслуживания" + +msgid "Modify DNS forward zone." +msgstr "Изменить зону перенаправления DNS." + +msgid "Modify DNS server configuration" +msgstr "Изменить конфигурацию DNS-сервера" + +msgid "Modify DNS zone (SOA record)." +msgstr "Изменить зону DNS (запись SOA)." + +msgid "Modify ID range." +msgstr "Изменить диапазон идентификаторов." + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" +"Изменить диапазон идентификаторов.\n" +"\n" + +msgid "Modify Kerberos ticket policy." +msgstr "Изменить политику билетов Kerberos." + +msgid "Modify OTP configuration options." +msgstr "Изменить параметры конфигурации OTP." + +msgid "Modify Sudo Command Group." +msgstr "Изменить группу команд Sudo." + +msgid "Modify Sudo Command." +msgstr "Изменить команду Sudo." + +msgid "Modify Sudo Rule." +msgstr "Изменить правило Sudo." + +msgid "Modify a CA ACL." +msgstr "Изменить CA ACL." + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "Изменить правило сопоставления сертификатов с записями пользователей." + +msgid "Modify a DNS resource record." +msgstr "Изменить запись ресурса DNS." + +msgid "Modify a OTP token." +msgstr "Изменить токен OTP." + +msgid "Modify a RADIUS proxy server." +msgstr "Изменить прокси-сервер RADIUS." + +msgid "Modify a SELinux User Map." +msgstr "Изменить список пользователей SELinux." + +msgid "Modify a delegation." +msgstr "Изменить делегирование." + +msgid "Modify a group password policy." +msgstr "Изменить групповую политику паролей." + +msgid "Modify a group." +msgstr "Изменить группу." + +msgid "Modify a hostgroup." +msgstr "Изменить группу узлов." + +msgid "Modify a netgroup." +msgstr "Изменить сетевую группу." + +msgid "Modify a permission." +msgstr "Изменить разрешение." + +msgid "Modify a privilege." +msgstr "Изменить привилегию." + +msgid "Modify a role." +msgstr "Изменить роль." + +msgid "Modify a segment." +msgstr "Изменить сегмент." + +msgid "Modify a self-service permission." +msgstr "Изменить разрешение самообслуживания." + +msgid "Modify a stage user." +msgstr "Изменить неподтверждённого пользователя." + +msgid "Modify a topology suffix." +msgstr "Изменить суффикс топологии." + +msgid "Modify a user." +msgstr "Изменить пользователя." + +msgid "Modify a vault." +msgstr "Изменить хранилище." + +msgid "Modify an Group ID override." +msgstr "Изменить переопределение ID группы." + +msgid "Modify an HBAC rule." +msgstr "Изменить правило HBAC." + +msgid "Modify an HBAC service group." +msgstr "Изменить группу служб HBAC." + +msgid "Modify an HBAC service." +msgstr "Изменить службу HBAC." + +msgid "Modify an ID View." +msgstr "Изменить представление ID." + +msgid "Modify an ID override." +msgstr "Изменить переопределение ID." + +msgid "Modify an User ID override." +msgstr "Изменить переопределение ID пользователя." + +msgid "Modify an automember rule." +msgstr "Изменить правило автоучастия." + +msgid "Modify an automount key." +msgstr "Изменить ключ автомонтирования." + +msgid "Modify an automount map." +msgstr "Изменить список соответствия автомонтирования." + +msgid "Modify an existing IPA service." +msgstr "Изменить существующую службу IPA." + +msgid "Modify configuration options." +msgstr "Изменить параметры конфигурации." + +msgid "Modify global DNS configuration." +msgstr "Изменить глобальную конфигурацию DNS." + +msgid "Modify global trust configuration." +msgstr "Изменить глобальную конфигурацию отношений доверия." + +msgid "Modify information about a host." +msgstr "Изменить сведения об узле." + +msgid "Modify information about an IPA location." +msgstr "Изменить сведения о расположении IPA." + +msgid "Modify information about an IPA server." +msgstr "Изменить сведения о IPA-сервере." + +msgid "Modify realm domains." +msgstr "Изменить домены области." + +msgid "Modify trustdomain of the trust" +msgstr "Изменить значение доверенного домена (trustdomain) отношения доверия." + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" +"Найдено несколько записей с ключом %(key)s. Используйте --info, чтобы " +"выбрать определённую запись." + +msgid "Mount information" +msgstr "Сведения монтирования" + +msgid "Mount point" +msgstr "Точка монтирования" + +msgid "Move deleted user into staged area" +msgstr "Переместить удалённую запись пользователя в область хранения." + +msgid "Multi-value" +msgstr "Многозначный" + +msgid "Must be a decimal number" +msgstr "Должно быть десятичным числом" + +msgid "Must be a positive number" +msgstr "Должно быть положительным числом" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" +"Должно быть значением даты / времени в формате UTC (например, \"2014-01-20 " +"17:58:01Z\")" + +msgid "Must be an integer" +msgstr "Должно быть целым числом" + +msgid "My User Vaults" +msgstr "Мои хранилища пользователей" + +msgid "NAPTR Flags" +msgstr "Флаги NAPTR" + +msgid "NAPTR Order" +msgstr "Порядок NAPTR" + +msgid "NAPTR Preference" +msgstr "Приоритет NAPTR" + +msgid "NAPTR Regular Expression" +msgstr "Регулярное выражение NAPTR" + +msgid "NAPTR Replacement" +msgstr "Замена NAPTR" + +msgid "NAPTR Service" +msgstr "Служба NAPTR" + +msgid "NAPTR record" +msgstr "Запись NAPTR" + +msgid "NIS domain name" +msgstr "Имя домена NIS" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "Значение NONE нельзя сочетать с другими типами PAC" + +msgid "NS Hostname" +msgstr "Имя узла NS" + +msgid "NS record" +msgstr "Запись NS" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" +"Запись NS нельзя использовать вместе с записью %(type)s, если только они не " +"расположены в корневой записи зоны (RFC 2181, раздел 6.1)" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "Запись (записи) NS можно изменять в начале зоны: \"@\". " + +msgid "NSEC Next Domain Name" +msgstr "Имя следующего домена NSEC" + +msgid "NSEC Type Map" +msgstr "Список сопоставления типов NSEC" + +msgid "NSEC record" +msgstr "Запись NSEC" + +msgid "NSEC3 record" +msgstr "Запись NSEC3" + +msgid "NSEC3PARAM record" +msgstr "Запись NSEC3PARAM" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" +"Запись NSEC3PARAM для зоны в формате: алгоритм_хеширования флаги итерации " +"соль" + +msgid "Name" +msgstr "Имя" + +msgid "Name for referencing the CA" +msgstr "Имя для ссылки на CA" + +msgid "Name of command to export" +msgstr "Имя команды, которую следует экспортировать" + +msgid "Name of host-group" +msgstr "Имя группы узлов" + +msgid "Name of issuing CA" +msgstr "Имя выдающего CA" + +msgid "Name of method to export" +msgstr "Имя метода, который следует экспортировать" + +msgid "Name of object to export" +msgstr "Имя объекта, который следует экспортировать" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" +"Имя родительского списка соответствия автомонтирования (по умолчанию: auto." +"master)" + +msgid "Name of the trusted domain" +msgstr "Имя доверенного домена" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "На сервере имён \"%(host)s\" нет соответствующей записи A/AAAA" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "Сервер имён для обратной зоны не может быть относительным DNS-именем" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" +"Не предоставлено ни --del-all, ни параметров удаления определённой записи.\n" +"Все поддерживаемые типы записей можно посмотреть с помощью команды help." + +msgid "Nested Methods to execute" +msgstr "Вложенные методы для выполнения" + +msgid "NetBIOS name" +msgstr "Имя NetBIOS" + +msgid "Netgroup" +msgstr "Сетевая группа" + +msgid "Netgroup Settings" +msgstr "Параметры сетевой группы" + +msgid "Netgroup description" +msgstr "Описание сетевой группы" + +msgid "Netgroup name" +msgstr "Имя сетевой группы" + +msgid "Netgroups" +msgstr "Сетевые группы" + +msgid "Network Services" +msgstr "Сетевые службы" + +msgid "New ACI name" +msgstr "Новое имя ACI" + +msgid "New Certificate" +msgstr "Новый сертификат" + +msgid "New Password" +msgstr "Новый пароль" + +msgid "New Principal Password" +msgstr "Новый пароль учётной записи" + +msgid "New Test" +msgstr "Новая проверка" + +msgid "New kerberos principal alias" +msgstr "Новый псевдоним учётной записи Kerberos" + +msgid "New mount information" +msgstr "Сведения о новом монтировании" + +msgid "New password is required" +msgstr "Следует указать новый пароль" + +msgid "New public key specified multiple times" +msgstr "Новый открытый ключ указан несколько раз" + +msgid "New vault password" +msgstr "Новый пароль хранилища" + +msgid "New: key not set" +msgstr "Новый: ключ не установлен" + +msgid "New: key set" +msgstr "Новый: ключ установлен" + +msgid "Next" +msgstr "Вперёд" + +msgid "Next Domain Name" +msgstr "Имя следующего домена" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "Записи A, AAAA, SSHFP или PTR не найдены." + +msgid "No Common Name was found in subject of request." +msgstr "В субъекте запроса не найдено общее имя (CN)." + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" +"В расположении IPA %(location)s нет DNS-серверов. Без них расположение не " +"будет работать надлежащим образом." + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" +"Не установлен мастер ключей DNSSEC. Подпись в зоне DNSSEC будет работать " +"только после установки мастера ключей DNSSEC." + +msgid "No Valid Certificate" +msgstr "Отсутствуют действительные сертификаты" + +msgid "No archived data." +msgstr "Архивированных данных нет." + +msgid "No credentials cache found" +msgstr "Кэш учётных данных не найден" + +msgid "No default (fallback) group set" +msgstr "Группа по умолчанию (резервная) не установлена" + +msgid "No entries." +msgstr "Отсутствуют записи." + +msgid "No file to read" +msgstr "Отсутствует файл для чтения" + +msgid "No free YubiKey slot!" +msgstr "Нет свободных слотов YubiKey!" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "Отсутствуют принятые KDC ключи\n" + +msgid "No matching entries found" +msgstr "Соответствующих записей не найдено" + +msgid "No option to delete specific record provided." +msgstr "Возможность удаления определённой записи не предусмотрена." + +msgid "No option to modify specific record provided." +msgstr "Возможность изменения определённой записи не предусмотрена." + +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "Отсутствует разрешение на присоединение этого узла к домену IPA.\n" + +msgid "No private group" +msgstr "Без личной группы" + +msgid "No response" +msgstr "Нет ответа" + +msgid "No such attribute on this entry" +msgstr "В этой записи нет такого атрибута" + +msgid "No such virtual command" +msgstr "Такая виртуальная команда отсутствует" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "Отсутствуют установленные в системе типы шифрования?!\n" + +msgid "No trusted domain is not configured" +msgstr "Не настроено ни одного доверенного домена" + +#, c-format +msgid "No values for %s" +msgstr "Отсутствуют значения для %s" + +msgid "No wait" +msgstr "Не ждать" + +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "Отсутствуют разрешения на запись в файл таблицы ключей \"%s\"\n" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" +"Ответ от программного интерфейса REST CA не соответствует 2xx: %(status)d. " +"%(explanation)s" + +msgid "Non-Active Directory domain" +msgstr "Домен, который не является доменом Active Directory" + +msgid "Non-POSIX" +msgstr "Не POSIX" + +msgid "Non-existent or invalid rules" +msgstr "Несуществующие или недействительные правила" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "" +"Нетранзитивное внешнее отношение доверия с доменом в другом лесу Active " +"Directory" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "" +"Нетранзитивное внешнее отношение доверия с областью (realm) Kerberos, " +"которая соответствует RFC4120" + +msgid "Nonce" +msgstr "Специальный" + +msgid "Not After" +msgstr "Недействителен после" + +msgid "Not Before" +msgstr "Недействителен до" + +msgid "Not a managed group" +msgstr "Не является управляемой группой" + +msgid "Not a valid IP address" +msgstr "Недопустимый IP-адрес" + +msgid "Not a valid IPv4 address" +msgstr "Недопустимый адрес IPv4" + +msgid "Not a valid IPv6 address" +msgstr "Недопустимый адрес IPv6" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "Недопустимый сетевой адрес (примеры: 2001:db8::/64, 192.0.2.0/24)" + +msgid "Not allowed on non-leaf entry" +msgstr "Запрещено для неконцевой записи" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "" +"Указано недостаточно аргументов для выполнения настройки отношения доверия" + +msgid "Not matched rules" +msgstr "Несоответствующие правила" + +msgid "Not registered yet" +msgstr "Ещё не зарегистрировано" + +msgid "Note" +msgstr "Примечание" + +msgid "Number of IDs in the range" +msgstr "Количество идентификаторов в диапазоне" + +msgid "Number of conditions added" +msgstr "Количество добавленных условий" + +msgid "Number of conditions removed" +msgstr "Количество удалённых условий" + +msgid "Number of days's notice of impending password expiration" +msgstr "Уведомление о количестве дней, оставшихся до окончания действия пароля" + +msgid "Number of digits each token code will have" +msgstr "Количество цифр, которое будет содержать каждый код токена" + +msgid "Number of entries returned" +msgstr "Количество возвращённых записей" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "Количество узлов, с которых снято представление ID: " + +msgid "Number of hosts the ID View was applied to:" +msgstr "Количество узлов, к которым было применено представление ID:" + +msgid "Number of members added" +msgstr "Количество добавленных участников" + +msgid "Number of members removed" +msgstr "Количество удалённых участников" + +msgid "Number of owners added" +msgstr "Количество добавленных владельцев" + +msgid "Number of owners removed" +msgstr "Количество удалённых владельцев" + +msgid "Number of permissions added" +msgstr "Количество добавленных разрешений" + +msgid "Number of permissions removed" +msgstr "Количество удалённых разрешений" + +msgid "Number of plugins loaded" +msgstr "Количество загруженных подключаемых модулей" + +msgid "Number of privileges added" +msgstr "Количество добавленных привилегий" + +msgid "Number of privileges removed" +msgstr "Количество удалённых привилегий" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" +"Количество секунд, в течение которого исходящие операции LDAP ожидают ответа " +"от удалённой реплики, прежде чем будет превышено время ожидания и выдано " +"сообщение об ошибке" + +msgid "Number of variables returned (<= total)" +msgstr "Количество возвращённых переменных (<= total)" + +msgid "OK" +msgstr "OK" + +msgid "OTP" +msgstr "OTP" + +msgid "OTP Configuration" +msgstr "Конфигурация OTP" + +msgid "OTP Token" +msgstr "Токен OTP" + +msgid "OTP Token Settings" +msgstr "Параметры токена OTP" + +msgid "OTP Tokens" +msgstr "Токены OTP" + +msgid "OTP configuration options" +msgstr "Параметры конфигурации OTP" + +msgid "OTP set" +msgstr "Установлен OTP" + +msgid "OTP token" +msgstr "токен OTP" + +msgid "OTP tokens" +msgstr "токены OTP" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" +"Класс объектов ipaNTUserAttrs отсутствует, запись пользователя не может " +"иметь атрибуты SMB." + +msgid "Object class name" +msgstr "Имя класса объектов." + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "Классы объектов, которые следует игнорировать для записей групп в DS" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "" +"Классы объектов, которые следует игнорировать для записей пользователей в DS" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "Классы объектов, использованные для поиска записей групп в DS" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "Классы объектов, использованные для поиска записей пользователей в DS" + +msgid "Old vault password" +msgstr "Старый пароль хранилища" + +msgid "Old vault private key" +msgstr "Старый закрытый ключ хранилища" + +msgid "One Time Password" +msgstr "Одноразовый пароль" + +msgid "One of group, permission or self is required" +msgstr "Следует указать одно из значений: group, permission или self" + +msgid "One time password commands" +msgstr "Команды для одноразового пароля" + +msgid "Only one value is allowed" +msgstr "Допускается только одно значение" + +msgid "Only one zone type is allowed per zone name" +msgstr "Для одного имени зоны можно использовать только один тип зоны" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" +"С помощью веб-интерфейса можно создавать только стандартные хранилища. " +"Используйте интерфейс командной строки для создания других типов хранилищ." + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" +"При добавлении отношения доверия AD значениями --range-type могут быть " +"только ipa-ad-trust или ipa-ad-trust-posix." + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "Операционная система и версия узла (например, Fedora 9)" + +msgid "Operating system" +msgstr "Операционная система" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "Не удалось выполнить операцию: %s\n" + +msgid "Operations Error" +msgstr "Ошибка операций" + +msgid "Option added" +msgstr "Параметр добавлен" + +msgid "Option group" +msgstr "Группа параметров" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" +"Если типом диапазона IPA является ipa-ad-trust-posix, параметр rid-base " +"использовать нельзя" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" +"Необязательное поддерево DN, из которого может быть перемещена запись " +"(должна принадлежать к поддереву, но может ещё не существовать)" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" +"Необязательное поддерево DN, в которое может быть перемещена запись (должна " +"находиться в поддереве, но может ещё не существовать)" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" +"Дополнительное DN, к которому следует применить разрешение (должно " +"находиться в поддереве, но может ещё не существовать)" + +msgid "Options" +msgstr "Параметры" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "Невозможно одновременно использовать параметры dom-sid и dom-name" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "Параметры dom-sid и rid-base необходимо использовать одновременно" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "" +"Невозможно одновременно использовать параметры dom-sid и secondary-rid-base" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "" +"Параметры dom-sid/dom-name и rid-base необходимо использовать одновременно" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" +"Невозможно одновременно использовать параметры dom-sid/dom-name и secondary-" +"rid-base" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "" +"Параметры secondary-rid-base и rid-base необходимо использовать одновременно" + +msgid "Order" +msgstr "Порядок" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" +"В порядке увеличения приоритета пользователей SELinux, с разделителем $" + +msgid "Org. Unit" +msgstr "Отдел" + +msgid "Organization" +msgstr "Организация" + +msgid "Organizational Unit" +msgstr "Организационное подразделение" + +msgid "Origin DN subtree" +msgstr "Поддерево DN происхождения" + +msgid "Original TTL" +msgstr "Исходное значение срока жизни" + +msgid "Other Record Types" +msgstr "Другие типы записей" + +msgid "Our domain is not configured" +msgstr "Наш домен не настроен" + +#, c-format +msgid "Out of Memory!\n" +msgstr "Недостаточно памяти!\n" + +msgid "Out of memory\n" +msgstr "Недостаточно памяти\n" + +#, c-format +msgid "Out of memory \n" +msgstr "" +"Недостаточно памяти\n" +"\n" + +#, c-format +msgid "Out of memory!" +msgstr "Недостаточно памяти!" + +#, c-format +msgid "Out of memory!\n" +msgstr "Недостаточно памяти!\n" + +msgid "Out of memory!?\n" +msgstr "Недостаточно памяти!?\n" + +msgid "Output file to store the transport certificate" +msgstr "Выходной файл для хранения сертификата транспорта" + +msgid "Output filename" +msgstr "Имя файла выходных данных" + +msgid "Output only on errors" +msgstr "Выводить только ошибки" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" +"Переопределить список по умолчанию, который содержит поддерживаемые типы " +"PAC. Используйте значение \"NONE\", чтобы отключить поддержку PAC для этой " +"службы" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" +"Переопределить список по умолчанию, который содержит поддерживаемые типы " +"PAC. Используйте значение \"NONE\", чтобы отключить поддержку PAC для этой " +"службы; например, это может быть необходимо для служб NFS." + +msgid "Override existing password" +msgstr "Переопределить существующий пароль" + +msgid "Override inherited settings" +msgstr "Переопределить унаследованные параметры" + +msgid "Overwrite GID" +msgstr "Перезаписать GID" + +msgid "Owner" +msgstr "Владелец" + +#, python-format +msgid "Owner %s" +msgstr "Владелец %s" + +msgid "Owner groups" +msgstr "Группы-владельцы" + +msgid "Owner services" +msgstr "Службы-владельцы" + +msgid "Owner users" +msgstr "Пользователи-владельцы" + +msgid "Owners" +msgstr "Владельцы" + +msgid "Owners that could not be added" +msgstr "Владельцы, которых не удалось добавить" + +msgid "Owners that could not be removed" +msgstr "Владельцы, которых не удалось удалить" + +msgid "PAC type" +msgstr "Тип PAC" + +msgid "PAD" +msgstr "PAD" + +msgid "PKINIT" +msgstr "PKINIT" + +msgid "PKINIT status" +msgstr "Состояние PKINIT" + +msgid "POSIX" +msgstr "POSIX" + +msgid "PTR Hostname" +msgstr "Имя узла PTR" + +msgid "PTR record" +msgstr "Запись PTR" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "Запись PTR для SAN IP (%s) не соответствует записям A/AAAA" + +msgid "Page" +msgstr "Страница" + +msgid "Pager Number" +msgstr "Номер пейджера" + +msgid "Pagination Size" +msgstr "Размер для разбивки на страницы" + +msgid "Parameters" +msgstr "Параметры" + +msgid "Parent map" +msgstr "Родительский список соответствия" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "" +"Проанализировать все необработанные записи DNS и вернуть их в " +"структурированном виде" + +msgid "Parse error" +msgstr "Ошибка обработки" + +msgid "Password" +msgstr "Пароль" + +msgid "Password Expiration Notification (days)" +msgstr "Уведомление об окончании действия пароля (в днях)" + +msgid "Password Policies" +msgstr "Политики паролей" + +msgid "Password Policy" +msgstr "Политика паролей" + +msgid "Password can be specified only for symmetric vault" +msgstr "Пароль можно указать только для симметричного хранилища" + +msgid "Password cannot be set on enrolled host." +msgstr "Невозможно установить пароль для зарегистрированного узла." + +msgid "Password change complete" +msgstr "Изменение пароля завершено" + +msgid "Password expiration" +msgstr "Окончание действия пароля" + +msgid "Password history size" +msgstr "Размер журнала паролей" + +msgid "Password migration was not successful" +msgstr "Не удалось выполнить перенос пароля" + +msgid "Password migration was successful" +msgstr "Перенос пароля успешно завершён" + +msgid "Password plugin features" +msgstr "Возможности подключаемого модуля паролей" + +msgid "Password reset was not successful." +msgstr "Не удалось сбросить пароль." + +msgid "Password specified multiple times" +msgstr "Пароль указан несколько раз" + +msgid "Password used in bulk enrollment" +msgstr "Пароль для массовой регистрации" + +msgid "Passwords do not match" +msgstr "Пароли не совпадают" + +msgid "Passwords do not match!" +msgstr "Пароли не совпадают!" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" +"Миграция записей паролей выполнена в формате до хеширования. IPA не удастся " +"создать ключи Kerberos, если не будут предоставлены текстовые пароли. Всем " +"пользователям с перенесёнными записями придётся выполнить вход на https://" +"your.domain/ipa/migration/ до того, как они смогут использовать свои учётные " +"записи Kerberos." + +msgid "Passwords must match" +msgstr "Пароли должны совпадать" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "Путь к сценарию, исполняемому в системе Windows при входе" + +msgid "Path to a user home directory, in UNC format" +msgstr "Путь к домашнему каталогу пользователя, в формате UNC" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "Путь к профилю пользователя, в формате UNC \\\\server\\share\\" + +msgid "Path to the IPA CA certificate" +msgstr "Путь к сертификату CA IPA" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" +"Условная политика перенаправления для отдельных серверов. Чтобы отключить " +"для этой зоны перенаправление на глобальный перенаправитель, установите " +"значение \"none\". В этом случае условные перенаправители зон не будут " +"приниматься во внимание." + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Перенаправители для отдельных серверов. Для каждого перенаправителя можно " +"указать отдельный порт с помощью стандартного формата \"IP_АДРЕС port ПОРТ\"" + +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" +"Условная политика перенаправления для отдельных зон. Чтобы отключить для " +"этой зоны перенаправление на глобальный перенаправитель, установите значение " +"\"none\". В этом случае условные перенаправители зон не будут приниматься во " +"внимание." + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Перенаправители для отдельных зон. Для каждого перенаправителя можно указать " +"отдельный порт с помощью стандартного формата \"IP_АДРЕС port ПОРТ\"" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "" +"Период, по истечении которого счётчик ошибок будет сброшен (в секундах)" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "Период, в течение которого будет действовать блокировка (в секундах)" + +msgid "Permission" +msgstr "Разрешение" + +msgid "Permission ACI grants access to" +msgstr "Разрешение, доступ к которому предоставляет ACI" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "В доступе отказано: %(file)s" + +msgid "Permission flags" +msgstr "Флаги разрешения" + +msgid "Permission name" +msgstr "Имя разрешения" + +msgid "Permission settings" +msgstr "Параметры разрешений" + +msgid "Permission type" +msgstr "Тип разрешения" + +msgid "Permission value" +msgstr "Значение разрешения" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "Разрешение с неизвестным флагом %s не может быть изменено или удалено" + +msgid "Permissions" +msgstr "Разрешения" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "" +"Разрешения, которые следует предоставить (read, write). По умолчанию " +"предоставляется разрешение \"write\" (запись)." + +msgid "Permissions to grant(read, write, add, delete, all)" +msgstr "" +"Разрешения, которые следует предоставить (read, write, add, delete, all)" + +msgid "Permitted Encryption Types" +msgstr "Разрешённые типы шифрования" + +msgid "Permitted to have certificates issued" +msgstr "Разрешено иметь выданные сертификаты" + +msgid "Ping a remote server." +msgstr "Проверить связь с удалённым сервером." + +msgid "Platform" +msgstr "Платформа" + +msgid "Please choose a type of DNS resource record to be added" +msgstr "Выберите тип записи ресурса DNS, который следует добавить" + +msgid "Please specify forwarders." +msgstr "Укажите серверы-перенаправители." + +msgid "Please try the following options:" +msgstr "Попробуйте использовать следующие параметры:" + +msgid "Policy" +msgstr "Политика" + +msgid "Port" +msgstr "Порт" + +msgid "Positional argument" +msgstr "Позиционный аргумент" + +msgid "Positional arguments" +msgstr "Позиционные аргументы" + +msgid "Pre-authentication is required for the service" +msgstr "Для службы требуется предварительная аутентификация" + +msgid "Pre-shared password" +msgstr "Общий пароль" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "Предустановленный профиль \"%(profile_id)s\" невозможно удалить" + +msgid "Preference" +msgstr "Приоритет" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" +"Приоритет, указанный для этого обменника. Чем ниже значение, тем выше " +"приоритет." + +msgid "Preferred Language" +msgstr "Предпочитаемый язык" + +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "" +"Префикс, который используется для различения типов ACI (permission, " +"delegation, selfservice, none)" + +msgid "Preserved user" +msgstr "Хранимый пользователь" + +msgid "Preserved users" +msgstr "Хранимые пользователи" + +msgid "Prev" +msgstr "Назад" + +msgid "Primary RID base" +msgstr "Основа основного RID" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "Основной диапазон RID и вторичный диапазон RID не могут пересекаться" + +msgid "Primary key only" +msgstr "Только главный ключ" + +msgid "Principal" +msgstr "Учётная запись" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" +"Не удалось проверить подлинность учётной записи %(principal)s: %(message)s" #, python-format msgid "" @@ -31369,59 +23624,4536 @@ msgstr "" "сертификации \"%(ca)s\" с профилем \"%(profile_id)s\" для выдачи " "сертификатов." -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "enabledService/configuredService не в записи kdc ipaConfigString" +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "" +"Учётная запись \"%s\" в альтернативном имени субъекта не соответствует " +"запрошенной учётной записи" + +msgid "Principal alias" +msgstr "Псевдоним учётной записи" + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "Учётная запись для этого сертификата (например, HTTP/test.example.com)" #, python-format -msgid "Host '%(hostname)s' is not an active KDC" +msgid "Principal is not of the form user@REALM: '%(principal)s'" msgstr "" -"Узел \"%(hostname)s\" не является активным центром распространения ключей " -"(KDC)" +"Учётная запись указана в виде, отличном от от user@REALM: \"%(principal)s\"" -msgid "Issuing CA" -msgstr "Выдающий CA" +msgid "Principal name" +msgstr "Имя учётной записи" -msgid "Name of issuing CA" -msgstr "Имя выдающего CA" +msgid "Print as little as possible" +msgstr "Выводить минимум данных" -msgid "Subject email address" -msgstr "Адрес электронной почты субъекта" +msgid "Print debugging information" +msgstr "Вывести отладочные данные" -msgid "Subject DNS name" -msgstr "DNS-имя субъекта" +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" +"Вывести записи в том виде, в котором они хранятся на сервере. Влияет только " +"на формат вывода данных." -msgid "Subject X.400 address" -msgstr "Адрес X.400 субъекта" +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "Вывести данные XML-RPC без обработки в режиме GSSAPI" -msgid "Subject directory name" -msgstr "Имя каталога субъекта" +msgid "Priority" +msgstr "Приоритет" -msgid "Subject EDI Party name" -msgstr "Имя стороны EDI субъекта" +msgid "Priority (order)" +msgstr "Приоритет (порядок)" -msgid "Subject URI" -msgstr "Универсальный код ресурса (URI) субъекта" +msgid "Priority of the policy (higher number means lower priority" +msgstr "Приоритет политики (чем больше число, тем ниже приоритет)" -msgid "Subject IP Address" -msgstr "IP-адрес субъекта" +msgid "Priority of the rule (higher number means lower priority" +msgstr "Приоритет правила (чем больше число, тем ниже приоритет)" -msgid "Subject OID" -msgstr "Идентификатор объекта (OID) субъекта" +msgid "Private key specified multiple times" +msgstr "Закрытый ключ указан несколько раз" -msgid "Subject UPN" -msgstr "Имя участника-пользователя (UPN) субъекта" +msgid "Privilege" +msgstr "Привилегия" -msgid "Subject Kerberos principal name" -msgstr "Имя учётной записи Kerberos субъекта" +msgid "Privilege Settings" +msgstr "Параметры привилегий" -msgid "Subject Other Name" -msgstr "Другое имя субъекта" +msgid "Privilege Withdrawn" +msgstr "Отзыв привилегии" + +msgid "Privilege description" +msgstr "Описание привилегии" + +msgid "Privilege name" +msgstr "Имя привилегии" + +msgid "Privileges" +msgstr "Привилегии" + +msgid "Profile" +msgstr "Профиль" + +msgid "Profile ID" +msgstr "Идентификатор профиля" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" +"Идентификатор профиля \"%(cli_value)s\" не соответствует данным профиля " +"\"%(file_value)s\"" + +msgid "Profile ID for referring to this profile" +msgstr "Идентификатор профиля для ссылки на этот профиль" + +msgid "Profile category" +msgstr "Категория профилей" + +msgid "Profile category the ACL applies to" +msgstr "Категория профилей, к которой применяется ACL" + +msgid "Profile configuration" +msgstr "Конфигурация профиля" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "Конфигурация профиля, которая хранится в файле \"%(file)s\"" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "" +"В данных профиля несколько раз указан идентификатор \"profileId\": %(values)s" + +msgid "Profile description" +msgstr "Описание профиля" + +msgid "Profiles" +msgstr "Профили" + +msgid "Prompt for LDAP password" +msgstr "Запрос пароля LDAP" + +msgid "Prompt for the username" +msgstr "Запрос имени пользователя" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" +"Запрашивать имя пользователя, когда с сертификатом сопоставляются несколько " +"записей пользователей" + +msgid "Prompt to set the user password" +msgstr "Запросить пароль у пользователя" + +msgid "Prospective" +msgstr "Ожидается" + +msgid "Protocol" +msgstr "Протокол" + +msgid "Provisioning" +msgstr "Подготовка" + +msgid "Public Key" +msgstr "Открытый ключ" + +msgid "Public key" +msgstr "Открытый ключ" + +msgid "Public key can be specified only for asymmetric vault" +msgstr "Открытый ключ можно указать только для асимметричного хранилища" + +msgid "Public key specified multiple times" +msgstr "Открытый ключ указан несколько раз" + +msgid "Public key:" +msgstr "Открытый ключ:" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" +"Ширина QR-кода превышает ширину, заданную параметром \"tty\" для вывода. " +"Измените размер терминала." + +msgid "Quantity" +msgstr "Количество" + +msgid "Query current Domain Level." +msgstr "Запросить текущий уровень домена." + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" +"Запрос вернул количество результатов, которое превышает заданное ограничение " +"по размеру. Показано результатов: первые ${counter}." + +msgid "Quick Links" +msgstr "Быстрые ссылки" + +msgid "Quiet mode. Only errors are displayed." +msgstr "Тихий режим. Отображаются только ошибки." + +msgid "RADIUS" +msgstr "RADIUS" + +msgid "RADIUS Proxy Server Settings" +msgstr "Параметры прокси-сервера RADIUS" + +msgid "RADIUS Server" +msgstr "Сервер RADIUS" + +msgid "RADIUS Servers" +msgstr "Серверы RADIUS" + +msgid "RADIUS proxy configuration" +msgstr "Конфигурация прокси RADIUS" + +msgid "RADIUS proxy server" +msgstr "прокси-сервер RADIUS" + +msgid "RADIUS proxy server name" +msgstr "Имя прокси-сервера RADIUS" + +#, python-format +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "Прокси-сервер RADIUS с именем \"%s\" уже существует" + +msgid "RADIUS proxy servers" +msgstr "прокси-серверы RADIUS" + +msgid "RADIUS proxy username" +msgstr "Имя пользователя прокси RADIUS" + +msgid "REST API is not logged in." +msgstr "Не выполнен вход в программный интерфейс REST." + +msgid "REVOKED" +msgstr "ОТОЗВАНО" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "Область (realm) Kerberos, которая соответствует RFC4120" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" +"RFC822Name не соответствует ни одному адресу электронной почты пользователя" + +msgid "RP record" +msgstr "Запись RP" + +msgid "RPC command used to log the current user out of their session." +msgstr "" +"Команда RPC, которая используется для завершения сеанса текущего " +"пользователя." + +msgid "RRSIG Algorithm" +msgstr "Алгоритм RRSIG" + +msgid "RRSIG Key Tag" +msgstr "Тег ключа RRSIG" + +msgid "RRSIG Labels" +msgstr "Метки RRSIG" + +msgid "RRSIG Original TTL" +msgstr "Исходное значение срока жизни RRSIG" + +msgid "RRSIG Signature" +msgstr "Подпись RRSIG" + +msgid "RRSIG Signature Expiration" +msgstr "Окончание действия подписи RRSIG" + +msgid "RRSIG Signature Inception" +msgstr "Начало действия подписи RRSIG" + +msgid "RRSIG Signer's Name" +msgstr "Имя подписавшего RRSIG" + +msgid "RRSIG Type Covered" +msgstr "Охваченные типы RRSIG" + +msgid "RRSIG record" +msgstr "Запись RRSIG" + +msgid "Random password" +msgstr "Случайный пароль" + +msgid "Range Settings" +msgstr "Параметры диапазона" + +msgid "Range name" +msgstr "Имя диапазона" + +msgid "Range size" +msgstr "Размер диапазона" + +msgid "Range type" +msgstr "Тип диапазона" + +#, python-format +msgid "Raw %s records" +msgstr "Необработанные записи %s" + +msgid "Raw A records" +msgstr "Необработанные записи A" + +msgid "Raw A6 records" +msgstr "Необработанные записи A6" + +msgid "Raw AAAA records" +msgstr "Необработанные записи AAAA" + +msgid "Raw AFSDB records" +msgstr "Необработанные записи AFSDB" + +msgid "Raw APL records" +msgstr "Необработанные записи APL" + +msgid "Raw CERT records" +msgstr "Необработанные записи CERT" + +msgid "Raw CNAME records" +msgstr "Необработанные записи CNAME" + +msgid "Raw DHCID records" +msgstr "Необработанные записи DHCID" + +msgid "Raw DLV records" +msgstr "Raw DLV records" + +msgid "Raw DNAME records" +msgstr "Необработанные записи DNAME" + +msgid "Raw DNSKEY records" +msgstr "Необработанные записи DNSKEY" + +msgid "Raw DS records" +msgstr "Необработанные записи DS" + +msgid "Raw HIP records" +msgstr "Необработанные записи HIP" + +msgid "Raw IPSECKEY records" +msgstr "Необработанные записи IPSECKEY" + +msgid "Raw KEY records" +msgstr "Необработанные записи KEY" + +msgid "Raw KX records" +msgstr "Необработанные записи KX" + +msgid "Raw LOC records" +msgstr "Необработанные записи LOC" + +msgid "Raw MX records" +msgstr "Необработанные записи MX" + +msgid "Raw NAPTR records" +msgstr "Необработанные записи NAPTR" + +msgid "Raw NS records" +msgstr "Необработанные записи NS" + +msgid "Raw NSEC records" +msgstr "Необработанные записи NSEC" + +msgid "Raw NSEC3 records" +msgstr "Необработанные записи NSEC3" + +msgid "Raw PTR records" +msgstr "Необработанные записи PTR" + +msgid "Raw RP records" +msgstr "Необработанные записи RP" + +msgid "Raw RRSIG records" +msgstr "Необработанные записи RRSIG" + +msgid "Raw SIG records" +msgstr "Необработанные записи SIG" + +msgid "Raw SPF records" +msgstr "Необработанные записи SPF" + +msgid "Raw SRV records" +msgstr "Необработанные записи SRV" + +msgid "Raw SSHFP records" +msgstr "Необработанные записи SSHFP" + +msgid "Raw TA records" +msgstr "Необработанные записи TA" + +msgid "Raw TKEY records" +msgstr "Необработанные записи TKEY" + +msgid "Raw TLSA records" +msgstr "Необработанные записи TLSA" + +msgid "Raw TSIG records" +msgstr "Необработанные записи TSIG" + +msgid "Raw TXT records" +msgstr "Необработанные записи TXT" + +msgid "Raw target filter" +msgstr "Необработанный фильтр целей" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "Необработанное значение записи DNS уже задано параметром \"%(name)s\"" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Повторно установлено отношение доверия с доменом \"%(value)s\"" + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "Повторно синхронизировать локальный кэш прав с сервером прав." + +msgid "Realm Domains" +msgstr "Домены области (realm)" + +msgid "Realm administrator password should be specified" +msgstr "Следует указать пароль администратора области (realm)" + +msgid "Realm domains" +msgstr "Домены области (realm)" + +msgid "Realm name" +msgstr "Имя области (realm)" + +msgid "Realm-domain mismatch" +msgstr "Несоответствие области (realm) и домена" + +msgid "Reason" +msgstr "Причина" + +msgid "Reason for Revocation" +msgstr "Причина отзыва" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "Причина отзыва сертификата (0-10)" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" +"Причина отзыва сертификата (0-10). Введите \"ipa help cert\", чтобы получить " +"сведения о причине отзыва. " + +msgid "Rebuild auto membership" +msgstr "Перестроить автоучастие" + +msgid "Rebuild auto membership." +msgstr "Перестроить автоучастие." + +msgid "Rebuild membership for all members of a grouping" +msgstr "Перестроить участие для всех участников группировки" + +msgid "Rebuild membership for specified hosts" +msgstr "Перестроить участие для указанных узлов" + +msgid "Rebuild membership for specified users" +msgstr "Перестроить участие для указанных пользователей" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "" +"Превышено рекомендованное максимальное количество соглашений для реплики" + +msgid "Record Type" +msgstr "Тип записи" + +msgid "Record creation failed." +msgstr "Не удалось создать запись." + +msgid "Record data" +msgstr "Данные записи" + +msgid "Record name" +msgstr "Имя записи" + +msgid "Record not found." +msgstr "Запись не найдена." + +msgid "Record type" +msgstr "Тип записи" + +msgid "Records" +msgstr "Записи" + +msgid "Records for DNS Zone" +msgstr "Записи зоны DNS" + +msgid "Redirection" +msgstr "Перенаправление" + +msgid "Redirection to PTR record" +msgstr "Перенаправление на запись PTR" + +msgid "Refresh" +msgstr "Обновить" + +msgid "Refresh list of the domains associated with the trust" +msgstr "Обновить список доменов, связанных с отношением доверия." + +msgid "Refresh the page." +msgstr "Обновить страницу." + +msgid "Register to the entitlement system." +msgstr "Зарегистрироваться в системе прав." + +msgid "Registration password" +msgstr "Пароль для регистрации" + +msgid "Regular Expression" +msgstr "Регулярное выражение" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" +"Относительное имя записи \"%(record)s\" содержит имя зоны \"%(zone)s\" в " +"качестве суффикса, что превращает её в полное имя домена \"%(fqdn)s\". " +"Обычно эта ошибка вызвана отсутствием точки в конце определения имени." + +msgid "Relative weight for entries with the same priority." +msgstr "Относительный вес записей с одинаковым приоритетом" + +msgid "Relative weight for server services (counts per location)" +msgstr "" +"Относительный вес служб сервера (вычисляется для отдельного расположения)" + +msgid "Reload current settings from the server." +msgstr "Перезагрузить текущие параметры с сервера" + +msgid "Reload the browser." +msgstr "Перезапустить браузер." + +msgid "Remote IPA server hostname" +msgstr "Имя узла удалённого IPA-сервера" + +msgid "Remote server name" +msgstr "Имя удалённого сервера" + +msgid "Remove" +msgstr "Удалить" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "" +"Удалить записи A, AAAA, SSHFP и PTR узла (узлов) под управлением DNS IPA" + +msgid "Remove CA ACLs" +msgstr "Удалить CA ACL" + +msgid "Remove CAs from a CA ACL." +msgstr "Удалить CA из CA ACL." + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "Удалить центры сертификации из CA ACL '${primary_key}'" + +msgid "Remove DNS forward zones" +msgstr "Удалить зоны перенаправления DNS" + +msgid "Remove DNS resource records" +msgstr "Удалить записи ресурсов DNS" + +msgid "Remove DNS zones" +msgstr "Удалить зоны DNS" + +msgid "Remove HBAC rules" +msgstr "Удалить правила HBAC" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "Удалить службу HBAC '${primary_key}' из групп служб HBAC" + +msgid "Remove HBAC service groups" +msgstr "Удалить группы служб HBAC" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "Удалить группы служб HBAC из правила HBAC '${primary_key}'" + +msgid "Remove HBAC services" +msgstr "Удалить службы HBAC" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "Удалить службы HBAC из правила HBAC '${primary_key}'" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "Удалить службы HBAC из группы служб HBAC '${primary_key}'" + +msgid "Remove ID ranges" +msgstr "Удалить диапазоны идентификаторов" + +msgid "Remove ID views" +msgstr "Удалить представления ID" + +msgid "Remove IPA locations" +msgstr "Удалить расположения IPA" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "Удалить IPA-серверы из расположения IPA '${primary_key}'" + +msgid "Remove Kerberos Alias" +msgstr "Удалить псевдоним Kerberos" + +msgid "Remove OTP tokens" +msgstr "Удалить токены OTP" + +msgid "Remove Permission" +msgstr "Удалить разрешение" + +msgid "Remove RADIUS servers" +msgstr "Удалить серверы RADIUS" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "Удалить группы запуска от имени из правила Sudo '${primary_key}'" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "" +"Удалить группы пользователей запуска от имени из правила Sudo " +"'${primary_key}'" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "" +"Удалить пользователей запуска от имени из правила Sudo '${primary_key}'" + +msgid "Remove a manager to the stage user entry" +msgstr "Удалить руководителя из записи неподтверждённого пользователя." + +msgid "Remove a manager to the user entry" +msgstr "Удалить руководителя из записи пользователя." + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "" +"Удалить разрешение для делегирования прав доступа для отдельных зон " +"перенаправления." + +msgid "Remove a permission for per-zone access delegation." +msgstr "Удалить разрешение для делегирования прав доступа для отдельных зон." + +msgid "Remove all principals in this realm" +msgstr "Удалить все учётные записи в этой области (realm)" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "" +"Удалить группы разрешённых команд Sudo из правила Sudo '${primary_key}'" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "Удалить разрешённые команды Sudo из правила Sudo '${primary_key}'" + +msgid "Remove an option from Sudo Rule." +msgstr "Удалить параметр из правила Sudo." + +msgid "Remove auto membership rules" +msgstr "Удалить правила автоучастия" + +msgid "Remove automount keys" +msgstr "Удалить ключи автомонтирования" + +msgid "Remove automount locations" +msgstr "Удалить расположения автомонтирования" + +msgid "Remove automount maps" +msgstr "Удалить списки соответствия автомонтирования" + +msgid "Remove certificate authorities" +msgstr "Удалить центры сертификации" + +msgid "Remove certificate hold" +msgstr "Отменить приостановку действия сертификата" + +msgid "Remove certificate identity mapping rules" +msgstr "Удалить правила сопоставления сертификатов с записями пользователей" + +msgid "Remove certificate mapping data" +msgstr "Удалить данные сопоставления сертификата" + +msgid "Remove certificate profiles" +msgstr "Удалить профили сертификатов" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "Удалить профили сертификатов из CA ACL '${primary_key}'" + +msgid "Remove certificates from a service" +msgstr "Удалить сертификаты из записи службы." + +msgid "Remove certificates from host entry" +msgstr "Удалить сертификаты из записи узла." + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "Удалить команды и группы команд Sudo, которых касается правило Sudo." + +msgid "Remove conditions from an automember rule." +msgstr "Удалить условия из правила автоучастия." + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "" +"Удалить группу по умолчанию (резервную) для всех несоответствующих записей." + +msgid "Remove delegations" +msgstr "Удалить делегирования" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "" +"Удалить группы запрещённых команд Sudo из правила Sudo '${primary_key}'" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "Удалить запрещённые команды Sudo из правила Sudo '${primary_key}'" + +msgid "Remove domains" +msgstr "Удалить домены" + +msgid "Remove entries from DNS" +msgstr "Удалить записи из DNS" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "Удалить исключающие условия из правила '${primary_key}'" + +msgid "Remove from CRL" +msgstr "Удаление из списка отзыва сертификатов (CRL)" + +msgid "Remove group ID overrides" +msgstr "Удалить переопределения ID группы" + +msgid "Remove group for Sudo to execute as." +msgstr "Удалить группу для выполнения Sudo от её имени." + +msgid "Remove hold" +msgstr "Отменить приостановку действия" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "Удалить узел '${primary_key}' из правил HBAC" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "Удалить узел '${primary_key}' из групп узлов" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "Удалить узел '${primary_key}' из сетевых групп" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "Удалить узел '${primary_key}' из ролей" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "Удалить узел '${primary_key}' из правил Sudo" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "Удалить группу узлов '${primary_key}' из правил HBAC" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "Удалить группу узлов '${primary_key}' из групп узлов" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "Удалить группу узлов '${primary_key}' из сетевых групп" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "Удалить группу узлов '${primary_key}' из правил Sudo" + +msgid "Remove host groups" +msgstr "Удалить группы узлов" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "Удалить группы узлов из CA ACL '${primary_key}'" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "Удалить группы узлов из правила HBAC '${primary_key}'" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "Удалить группы узлов из списка пользователей SELinux '${primary_key}'" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "Удалить группы узлов из группы узлов '${primary_key}'" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "Удалить группы узлов из сетевой группы '${primary_key}'" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "Удалить группы узлов из роли '${primary_key}'" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "Удалить группы узлов из правила Sudo '${primary_key}'" + +msgid "Remove hosts" +msgstr "Удалить узлы" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "Удалить узлы и группы узлов, которых касается правило Sudo." + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "Удалить узлы из CA ACL '${primary_key}'" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "Удалить узлы из правила HBAC '${primary_key}'" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "Удалить узлы из списка пользователей SELinux '${primary_key}'" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "Удалить узлы из группы узлов '${primary_key}'" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "Удалить узлы из сетевой группы '${primary_key}'" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "Удалить узлы из роли '${primary_key}'" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "Удалить узлы из правила Sudo '${primary_key}'" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "Удалить узлы, которые управляют узлом '${primary_key}'" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "Удалить узлы, которые управляют службой '${primary_key}'" + +msgid "Remove hosts that can manage this host." +msgstr "Удалить узлы, которые могут управлять этим узлом." + +msgid "Remove hosts that can manage this service." +msgstr "Удалить узлы, которые могут управлять этой службой." + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "Удалить включающие условия из правила '${primary_key}'" + +msgid "Remove information about the domain associated with the trust." +msgstr "Удалить сведения о домене, связанном с отношением доверия." + +msgid "Remove member from a named service delegation rule." +msgstr "Удалить участника из именованного правила делегирования служб." + +msgid "Remove member from a named service delegation target." +msgstr "Удалить участника из именованной цели делегирования служб." + +msgid "Remove member from a named service delegation." +msgstr "Удалить участника из именованного делегирования служб." + +msgid "Remove members from Sudo Command Group." +msgstr "Удалить участников из группы команд Sudo." + +msgid "Remove members from a group." +msgstr "Удалить участников из группы." + +msgid "Remove members from a hostgroup." +msgstr "Удалить участников из группы узлов." + +msgid "Remove members from a netgroup." +msgstr "Удалить участников из сетевой группы." + +msgid "Remove members from a permission." +msgstr "Удалить участников из разрешения." + +msgid "Remove members from a privilege" +msgstr "Удалить участников из привилегии." + +msgid "Remove members from a role." +msgstr "Удалить участников из роли." + +msgid "Remove members from a vault." +msgstr "Удалить участников из хранилища." + +msgid "Remove members from an HBAC service group." +msgstr "Удалить участников из группы служб HBAC." + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "Удалить сетевую группу '${primary_key}' из сетевых групп" + +msgid "Remove netgroups" +msgstr "Удалить сетевые группы" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "Удалить сетевые группы из сетевой группы '${primary_key}'" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" +"Удалить одно или несколько сопоставлений сертификатов из записи " +"неподтверждённого пользователя." + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" +"Удалить одно или несколько сопоставлений сертификатов из записи пользователя." + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "Удалить один или несколько сертификатов из записи idoverrideuser." + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "" +"Удалить один или несколько сертификатов из записи неподтверждённого " +"пользователя." + +msgid "Remove one or more certificates to the user entry" +msgstr "Удалить один или несколько сертификатов из записи пользователя." + +msgid "Remove orphan automember rules" +msgstr "Удалить неиспользуемые правила автоучастия" + +msgid "Remove owners from a vault container." +msgstr "Удалить владельцев из контейнера хранилищ." + +msgid "Remove owners from a vault." +msgstr "Удалить владельцев из хранилища." + +msgid "Remove password policies" +msgstr "Удалить политики паролей" + +msgid "Remove permissions" +msgstr "Удалить разрешения" + +msgid "Remove permissions from a privilege." +msgstr "Удалить разрешения из привилегии." + +msgid "Remove preserved users" +msgstr "Удалить хранимых пользователей" + +msgid "Remove principal alias from a host entry" +msgstr "Удалить псевдоним учётной записи из записи узла." + +msgid "Remove principal alias from a service" +msgstr "Удалить псевдоним учётной записи из службы." + +msgid "Remove principal alias from the stageuser entry" +msgstr "" +"Удалить псевдоним учётной записи из записи неподтверждённого пользователя." + +msgid "Remove principal alias from the user entry" +msgstr "Удалить псевдоним учётной записи из записи пользователя." + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "Удалить привилегию '${primary_key}' из разрешений" + +msgid "Remove privileges" +msgstr "Удалить привилегии" + +msgid "Remove privileges from a role." +msgstr "Удалить привилегии из роли." + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "Удалить привилегии из разрешения '${primary_key}'" + +msgid "Remove profiles from a CA ACL." +msgstr "Удалить профили из CA ACL." + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "Удалить роль '${primary_key}' из привилегий" + +msgid "Remove roles" +msgstr "Удалить роли" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "Удалить роли из привилегии '${primary_key}'" + +msgid "Remove self service permissions" +msgstr "Удалить разрешения самообслуживания" + +msgid "Remove selinux user maps" +msgstr "Удалить списки пользователей SELinux" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "Удалить службу '${primary_key}' из ролей" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "Удалить службы и группы служб из правила HBAC." + +msgid "Remove services" +msgstr "Удалить службы" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "Удалить службы из CA ACL '${primary_key}'" + +msgid "Remove services from a CA ACL." +msgstr "Удалить службы из CA ACL." + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "Удалить службы из участников хранилища '${primary_key}'" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "Удалить службы из владельцев хранилища '${primary_key}'" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "Удалить службы из роли '${primary_key}'" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "Удалить службы из группы пользователей '${primary_key}'" + +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "Удалить узлы-источники и группы узлов из правила HBAC." + +msgid "Remove stage users" +msgstr "Удалить неподтверждённых пользователей" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "Удалить команду Sudo '${primary_key}' из групп команд Sudo" + +msgid "Remove sudo command groups" +msgstr "Удалить группы команд Sudo" + +msgid "Remove sudo commands" +msgstr "Удалить команды Sudo" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "Удалить команды Sudo из группы команд Sudo '${primary_key}'" + +msgid "Remove sudo options" +msgstr "Удалить параметры Sudo" + +msgid "Remove sudo rules" +msgstr "Удалить правила Sudo" + +msgid "Remove target from a named service delegation rule." +msgstr "Удалить цель из именованного правила делегирования служб." + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "Удалить целевые узлы или группы узлов из CA ACL." + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "Удалить целевые узлы и группы узлов из правила HBAC." + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "" +"Удалить целевые узлы и группы узлов из правила списка пользователей SELinux." + +msgid "Remove topology segments" +msgstr "Удалить сегменты топологии" + +msgid "Remove trusts" +msgstr "Удалить отношения доверия" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "Удалить пользователя '${primary_key}' из правил HBAC" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "Удалить пользователя '${primary_key}' из сетевых групп" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "Удалить пользователя '${primary_key}' из ролей" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "Удалить пользователя '${primary_key}' из правил Sudo" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "Удалить пользователя '${primary_key}' из групп пользователей" + +msgid "Remove user ID overrides" +msgstr "Удалить переопределения ID пользователя" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "Удалить группу пользователей '${primary_key}' из правил HBAC" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "Удалить группу пользователей '${primary_key}' из сетевых групп" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "Удалить группу пользователей '${primary_key}' из ролей" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "Удалить группу пользователей '${primary_key}' из правил Sudo" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "Удалить группу пользователей '${primary_key}' из групп пользователей" + +msgid "Remove user groups" +msgstr "Удалить группы пользователей" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "Удалить группы пользователей из CA ACL '${primary_key}'" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "Удалить группы пользователей из правила HBAC '${primary_key}'" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" +"Удалить группы пользователей из списка пользователей SELinux '${primary_key}'" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "Удалить группы пользователей из участников хранилища '${primary_key}'" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "Удалить группы пользователей из сетевой группы '${primary_key}'" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "Удалить группы пользователей из владельцев хранилища '${primary_key}'" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "Удалить группы пользователей из роли '${primary_key}'" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "Удалить группы пользователей из правила Sudo '${primary_key}'" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "Удалить группы пользователей из группы пользователей '${primary_key}'" + +msgid "Remove users" +msgstr "Удалить пользователей" + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "Удалить пользователей и группы, которых касается правило Sudo." + +msgid "Remove users and groups for Sudo to execute as." +msgstr "Удалить пользователей и группы для выполнения Sudo от их имени." + +msgid "Remove users and groups from a CA ACL." +msgstr "Удалить пользователей и группы из CA ACL." + +msgid "Remove users and groups from an HBAC rule." +msgstr "Удалить пользователей и группы из правила HBAC." + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "" +"Удалить пользователей и группы из правила списка пользователей SELinux." + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "Удалить пользователей из CA ACL '${primary_key}'" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "Удалить пользователей из правила HBAC '${primary_key}'" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "Удалить пользователей из списка пользователей SELinux '${primary_key}'" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "Удалить пользователей из участников хранилища '${primary_key}'" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "Удалить пользователей из сетевой группы '${primary_key}'" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "Удалить пользователей из владельцев хранилища '${primary_key}'" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "Удалить пользователей из роли '${primary_key}'" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "Удалить пользователей из правила Sudo '${primary_key}'" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "Удалить пользователей из группы пользователей '${primary_key}'" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "Удалить пользователей, которые управляют токеном OTP '${primary_key}'" + +msgid "Remove users that can manage this token." +msgstr "Удалить пользователей, которые могут управлять этим токеном." + +msgid "Remove vaults" +msgstr "Удалить хранилища" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "Удалены псевдонимы из записи узла \"%(value)s\"" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "" +"Удалены псевдонимы из записи неподтверждённого пользователя \"%(value)s\"" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "Удалены псевдонимы из записи пользователя \"%(value)s\"" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "Удалены псевдонимы учётной записи службы \"%(value)s\"" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "" +"Удалены сопоставления сертификатов из записи пользователя \"%(value)s\"" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "Удалены сертификаты из записи узла \"%(value)s\"" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "Удалены сертификаты из записи idoverrideuser \"%(value)s\"" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "Удалены сертификаты из учётной записи службы \"%(value)s\"" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "" +"Удалены сертификаты из записи неподтверждённого пользователя \"%(value)s\"" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "Удалены сертификаты из записи пользователя \"%(value)s\"" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "Удалено условие (условия) из \"%(value)s\"" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "Удалена группа по умолчанию (резервная) для автоучастия \"%(value)s\"" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "Удалены сведения о доверенном домене \"%(value)s\"" + +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "Из правила Sudo \"%(rule)s\" удалён параметр \"%(option)s\"" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "Удалено системное разрешение \"%(value)s\"" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "" +"Выполняется удаление %(servers)s из топологии репликации; пожалуйста, " +"подождите..." + +#, c-format +msgid "Removing principal %s\n" +msgstr "Удаление учётной записи %s\n" + +msgid "Rename" +msgstr "Переименовать" + +msgid "Rename an ACI." +msgstr "Переименовать запись ACI." + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "Переименовать объект %(ldap_obj_name)s" + +msgid "Rename the DNS resource record object" +msgstr "Переименовать объект записи ресурса DNS" + +msgid "Rename the Group ID override object" +msgstr "Переименовать объект переопределения ID группы" + +msgid "Rename the ID View object" +msgstr "Переименовать объект представления ID" + +msgid "Rename the OTP token object" +msgstr "Переименовать объект токена OTP." + +msgid "Rename the RADIUS proxy server object" +msgstr "Переименовать объект прокси-сервера RADIUS" + +msgid "Rename the User ID override object" +msgstr "Переименовать объект переопределения ID пользователя" + +msgid "Rename the automount key object" +msgstr "Переименовать объект ключа автомонтирования" + +msgid "Rename the group object" +msgstr "Переименовать объект группы" + +msgid "Rename the permission object" +msgstr "Переименовать объект разрешения" + +msgid "Rename the privilege object" +msgstr "Переименовать объект привилегии" + +msgid "Rename the role object" +msgstr "Переименовать объект роли." + +msgid "Rename the stage user object" +msgstr "Переименовать объект неподтверждённого пользователя" + +msgid "Rename the user object" +msgstr "Переименовать объект пользователя" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "ACI переименована в \"%(value)s\"" + +msgid "Renewal master for IPA certificate authority" +msgstr "Главный сервер обновления центра сертификации IPA" + +msgid "Replacement" +msgstr "Замена" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" +"Реплика является активным мастером ключей DNSSEC. Удаление может привести к " +"неработоспособности вашей системы DNS. Сначала следует отключить или " +"заменить мастер ключей DNSSEC." + +msgid "Replication agreement enabled" +msgstr "Соглашение о репликации включено" + +#, python-format +msgid "Replication agreement for %(hostname)s not found" +msgstr "Соглашение о репликации для %(hostname)s не найдено" + +msgid "Replication configuration" +msgstr "Конфигурация репликации" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "Обновление репликации для сегмента: направлен запрос \"%(pkey)s\"." + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "Топология репликации суффикса \"%(suffix)s\" содержит ошибки." + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "" +"Топология репликации суффикса \"%(suffix)s\" соответствует требованиям." + +msgid "Report PKINIT status on the IPA masters" +msgstr "Сообщить состояние PKINIT на главных IPA-серверах" + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" +"Отправить запрос на полную повторную инициализацию узла, чтобы получить " +"данные с другого узла." + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "Ошибка выполнения запроса, состояние %(status)s: %(reason)s" + +msgid "Request id" +msgstr "ID запроса" + +msgid "Request is missing \"method\"" +msgstr "В запросе не указан метод (\"method\")" + +msgid "Request is missing \"params\"" +msgstr "В запросе не указаны параметры (\"params\")" + +msgid "Request must be a dict" +msgstr "Запрос должен принадлежать к типу словаря (dict)" + +msgid "Request status" +msgstr "Состояние запроса" + +msgid "Required" +msgstr "Обязательно" + +msgid "Required field" +msgstr "Обязательное поле" + +msgid "Requires pre-authentication" +msgstr "Требуется предварительная аутентификация" + +msgid "Reset" +msgstr "Сбросить" + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "Восстановить значения политики билетов Kerberos по умолчанию." + +msgid "Reset OTP" +msgstr "Сбросить OTP" + +msgid "Reset Password" +msgstr "Сбросить пароль" + +msgid "Reset Password and Log in" +msgstr "Сбросить пароль и войти" + +msgid "Reset your password." +msgstr "Сбросить свой пароль." + +msgid "Resolve a host name in DNS." +msgstr "Определить адрес по имени узла в DNS." + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "Определить адрес по имени узла в DNS. (Больше не поддерживается.)" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" +"Определить идентификаторы безопасности пользователей и групп в доверенных " +"доменах" + +msgid "Response from CA was not valid JSON" +msgstr "Ответ от CA не являлся корректным кодом JSON" + +msgid "Restore" +msgstr "Восстановить" + +msgid "Result" +msgstr "Результат" + +msgid "Result of simulation" +msgstr "Результат имитации" + +msgid "Result of the command" +msgstr "Результат команды" + +msgid "Results are truncated, try a more specific search" +msgstr "Результаты усечены. Попробуйте задать более точные условия поиска" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "Результаты должны содержать только атрибут главного ключа (\"%s\")" + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "Результаты должны содержать только атрибут главного ключа (\"anchor\")" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "" +"Результаты должны содержать только атрибут главного ключа (\"certificate\")" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "Результаты должны содержать только атрибут главного ключа (\"cn\")" + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "" +"Результаты должны содержать только атрибут главного ключа (\"command\")" + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" +"Результаты должны содержать только атрибут главного ключа (\"delegation-" +"name\")" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "Результаты должны содержать только атрибут главного ключа (\"domain\")" + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "Результаты должны содержать только атрибут главного ключа (\"group\")" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "" +"Результаты должны содержать только атрибут главного ключа (\"group-name\")" + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" +"Результаты должны содержать только атрибут главного ключа (\"hostgroup-" +"name\")" + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "" +"Результаты должны содержать только атрибут главного ключа (\"hostname\")" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "Результаты должны содержать только атрибут главного ключа (\"id\")" + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "" +"Результаты должны содержать только атрибут главного ключа (\"location\")" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "Результаты должны содержать только атрибут главного ключа (\"login\")" + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "Результаты должны содержать только атрибут главного ключа (\"map\")" + +msgid "Results should contain primary key attribute only (\"name\")" +msgstr "Результаты должны содержать только атрибут главного ключа (\"name\")" + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "" +"Результаты должны содержать только атрибут главного ключа (\"principal\")" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "Результаты должны содержать только атрибут главного ключа (\"realm\")" + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "" +"Результаты должны содержать только атрибут главного ключа (\"service\")" + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" +"Результаты должны содержать только атрибут главного ключа (\"sudocmdgroup-" +"name\")" + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" +"Результаты должны содержать только атрибут главного ключа (\"sudorule-name\")" + +msgid "Retries" +msgstr "Повторные попытки" + +msgid "Retrieve a data from a vault." +msgstr "Получить данные из хранилища." + +msgid "Retrieve an existing certificate." +msgstr "Получить существующий сертификат." + +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "" +"Получить и вывести все атрибуты, возвращаемые сервером. Влияет на содержимое " +"результата исполнения команды." + +msgid "Retrieve current keys without changing them" +msgstr "Получать текущие ключи без внесения в них изменений" + +msgid "Retrieve data from a vault." +msgstr "Извлечь данные из хранилища." + +msgid "Retrieve the entitlement certs." +msgstr "Получить сертификаты прав." + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Данные получены из хранища \"%(value)s\"" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "Не удалось получить цепочку сертификатов CA: %s" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "Не удалось получить данные о состоянии CA: %d" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "Не удалось получить данные о состоянии CA: %s" + +msgid "Retry" +msgstr "Повторить попытку" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" +"Повтор попытки с использованием метода получения таблицы ключей, который " +"применялся до версии 4.0\n" + +msgid "Return command defaults" +msgstr "Вернуть значения команд по умолчанию" + +msgid "Return to the main page and retry the operation" +msgstr "Вернуться на главную страницу и снова попытаться выполнить операцию" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" +"Обратная запись для IP-адреса %(ip)s уже существует в обратной зоне %(zone)s." + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" +"Обратной зоне %(name)s требуется ровно %(count)d компонтов IP-адресов, " +"предоставлено %(user_count)d" + +msgid "Reverse zone IP network" +msgstr "IP-сеть обратной зоны" + +msgid "Revert" +msgstr "Вернуть" + +msgid "Revocation reason" +msgstr "Причина отзыва" + +msgid "Revoke" +msgstr "Отозвать" + +msgid "Revoke a certificate." +msgstr "Отозвать сертификат." + +msgid "Revoke certificate" +msgstr "Отозвать сертификат" + +msgid "Revoked" +msgstr "Отозван" + +msgid "Revoked on from" +msgstr "Отозван с" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "Отозван с этой даты (ГГГГ-мм-дд)" + +msgid "Revoked on to" +msgstr "Отозван до" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "Отозван до этой даты (ГГГГ-мм-дд)" + +msgid "Right node" +msgstr "Правый узел" + +msgid "Right replication node - an IPA server" +msgstr "Правый узел репликации — IPA-сервер" + +msgid "Rights" +msgstr "Права" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "" +"Права, которые следует предоставить (read, search, compare, write, add, " +"delete, all)" + +msgid "Role" +msgstr "Роль" + +msgid "Role Settings" +msgstr "Параметры роли" + +msgid "Role name" +msgstr "Имя роли" + +msgid "Role status" +msgstr "Состояние роли" + +msgid "Role-Based Access Control" +msgstr "Управление доступом на основе ролей" + +msgid "Roles" +msgstr "Роли" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" +"Корневой домен отношения доверия всегда включён для существующего доверия" + +msgid "Rule name" +msgstr "Имя правила" + +msgid "Rule status" +msgstr "Состояние правила" + +msgid "Rule type" +msgstr "Тип правила" + +msgid "Rule type (allow)" +msgstr "Тип правила (allow)" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" +"Правило, которое используется для определения того, пригоден ли сертификат " +"для аутентификации" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" +"Правило, которое используется для сопоставления сертификата с записью " +"пользователя" + +msgid "Rules" +msgstr "Правила" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" +"Правила, которые следует проверить. Если они не указаны, считается, что " +"использован параметр --enabled" + +msgid "Run Commands" +msgstr "Выполнить команды" + +msgid "Run Test" +msgstr "Выполнить проверку" + +msgid "Run as a user" +msgstr "Запустить от имени пользователя" + +msgid "Run as any user within a specified group" +msgstr "Запустить от имени любого пользователя из указанной группы" + +msgid "Run with the gid of a specified POSIX group" +msgstr "Запускать с идентификатором указанной POSIX-группы" + +msgid "RunAs External Group" +msgstr "Внешняя группа для RunAs" + +msgid "RunAs External User" +msgstr "Внешний пользователь для RunAs" + +msgid "RunAs Group category" +msgstr "Категория запуска от имени группы" + +msgid "RunAs Group category the rule applies to" +msgstr "Категория запуска от имени группы, к которой применяется правило" + +msgid "RunAs Groups" +msgstr "Группы запуска от имени" + +msgid "RunAs User category" +msgstr "Категория запуска от имени пользователей" + +msgid "RunAs User category the rule applies to" +msgstr "" +"Категория запуска от имени пользователей, к которой применяется правило" + +msgid "RunAs Users" +msgstr "Пользователи запуска от имени" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "Имя группы \"%(name)s\" не принимается RunAsGroup" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "Имя группы \"%(name)s\" не принимается RunAsUser" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "" +"Нельзя указывать \"%(name)s\" в качестве имени пользователя в записи " +"RunAsUser" + +msgid "SELinux Options" +msgstr "Параметры SELinux" + +msgid "SELinux User" +msgstr "Пользователь SELinux" + +msgid "SELinux User Map" +msgstr "Список пользователей SELinux" + +msgid "SELinux User Map rule" +msgstr "Правило списка пользователей SELinux" + +msgid "SELinux User Map rules" +msgstr "Правила списка пользователей SELinux" + +msgid "SELinux User Maps" +msgstr "Списки пользователей SELinux" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" +"Пользователь SELinux %(user)s не найден в списке порядка применения (в " +"конфигурации)" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "" +"Запись пользователя SELinux \"%(user)s\" не является корректной: %(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "" +"Пользователя списка соответствия пользователей SELinux по умолчанию нет в " +"порядковом списке" + +msgid "SELinux user map list not found in configuration" +msgstr "Список пользователей SELinux не найден в конфигурации" + +msgid "SELinux user map order" +msgstr "Порядок применения списка пользователей SELinux" + +msgid "SHA1 Fingerprint" +msgstr "Отпечаток SHA1" + +msgid "SHA256 Fingerprint" +msgstr "Отпечаток SHA256" + +msgid "SID" +msgstr "Идентификатор безопасности (SID)" + +msgid "SID blacklist incoming" +msgstr "Входящий \"чёрный список\" SID" + +msgid "SID blacklist outgoing" +msgstr "Исходящий \"чёрный список\" SID" + +msgid "SID does not match any trusted domain" +msgstr "SID не соответствует ни одному доверенному домену" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "SID не совпадает точно ни с одним из SID доверенных доменов" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" +"Не удалось найти SID указанного доверенного домена. Укажите SID в явном виде " +"с помощью параметра dom-sid." + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "" +"Не удалось распознать SID в качестве допустимого идентификатора безопасности " +"для доверенного домена" + +msgid "SID is not valid" +msgstr "SID недействителен" + +msgid "SIG Algorithm" +msgstr "Алгоритм SIG" + +msgid "SIG Key Tag" +msgstr "Тег ключа SIG" + +msgid "SIG Labels" +msgstr "Метки SIG" + +msgid "SIG Original TTL" +msgstr "Исходное значение срока жизни SIG" + +msgid "SIG Signature" +msgstr "Подпись SIG" + +msgid "SIG Signature Expiration" +msgstr "Окончание действия подписи SIG" + +msgid "SIG Signature Inception" +msgstr "Начало действия подписи SIG" + +msgid "SIG Signer's Name" +msgstr "Имя подписавшего SIG" + +msgid "SIG Type Covered" +msgstr "Охваченные типы SIG" + +msgid "SIG record" +msgstr "Запись SIG" + +msgid "SMB Home Directory" +msgstr "Домашний каталог SMB" + +msgid "SMB Home Directory Drive" +msgstr "Диск домашнего каталога SMB" + +msgid "SMB logon script path" +msgstr "Путь к сценарию входа SMB" + +msgid "SMB profile path" +msgstr "Путь к профилю SMB" + +msgid "SMB service NetBIOS name" +msgstr "Имя NetBIOS службы SMB" + +msgid "SOA class" +msgstr "Класс SOA" + +msgid "SOA expire" +msgstr "Окончание действия SOA" + +msgid "SOA minimum" +msgstr "Минимальный срок жизни SOA" + +msgid "SOA mname (authoritative server) override" +msgstr "Переопределение mname SOA (полномочный сервер)" + +msgid "SOA mname override" +msgstr "Переопределение mname SOA" + +msgid "SOA record class" +msgstr "Класс записи SOA" + +msgid "SOA record expire time" +msgstr "Срок окончания действия записи SOA" + +msgid "SOA record refresh time" +msgstr "Время обновления записи SOA" + +msgid "SOA record retry time" +msgstr "Интервал между повторными запросами записи SOA" + +msgid "SOA record serial number" +msgstr "Серийный номер записи SOA" + +msgid "SOA record time to live" +msgstr "Срок жизни записи SOA" + +msgid "SOA refresh" +msgstr "Обновление SOA" + +msgid "SOA retry" +msgstr "Повторный запрос SOA" + +msgid "SOA serial" +msgstr "Номер SOA" + +msgid "SOA time to live" +msgstr "Срок жизни SOA" + +msgid "SPF record" +msgstr "Запись SPF" + +msgid "SRV Port" +msgstr "Порт SRV" + +msgid "SRV Priority" +msgstr "Приоритет SRV" + +msgid "SRV Target" +msgstr "Цель SRV" + +msgid "SRV Weight" +msgstr "Вес SRV" + +msgid "SRV record" +msgstr "Запись SRV" + +msgid "SSH public key" +msgstr "Открытый ключ SSH" + +msgid "SSH public key fingerprint" +msgstr "Отпечаток открытого ключа SSH" + +msgid "SSH public key:" +msgstr "Открытый ключ SSH:" + +msgid "SSH public keys" +msgstr "Открытые ключи SSH" + +msgid "SSHFP Algorithm" +msgstr "Алгоритм SSHFP" + +msgid "SSHFP Fingerprint" +msgstr "Отпечаток SSHFP" + +msgid "SSHFP Fingerprint Type" +msgstr "Тип отпечатка SSHFP" + +msgid "SSHFP record" +msgstr "Запись SSHFP" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "SSSD не удалось определить для объекта корректный SID" + +msgid "Salt" +msgstr "Соль" + +#, python-format +msgid "Same as --%s" +msgstr "То же, что и --%s" + +msgid "Save" +msgstr "Сохранить" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" +"Схема не нуждается в обновлении (отпечаток \"%(fingerprint)s\", TTL %(ttl)s " +"с)" + +msgid "Search" +msgstr "Поиск" + +msgid "Search Options" +msgstr "Параметры поиска" + +msgid "Search command parameters." +msgstr "Поиск параметров команды." + +msgid "Search domains of the trust" +msgstr "Поиск доменов отношения доверия." + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "Поиск %(searched_object)s с этими %(relationship)s %(ldap_object)s." + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "Поиск %(searched_object)s без этих %(relationship)s %(ldap_object)s." + +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "Не удалось выполнить поиск %1$s на rootdse. Ошибка: %2$d\n" + +msgid "Search for CA ACLs." +msgstr "Поиск CA ACL." + +msgid "Search for CAs." +msgstr "Поиск CA." + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "Поиск правил сопоставления сертификатов с записями пользователей." + +msgid "Search for Certificate Profiles." +msgstr "Поиск профилей сертификатов." + +msgid "Search for Class of Service entry" +msgstr "Поиск записи класса обслуживания" + +msgid "Search for DNS forward zones." +msgstr "Поиск зон перенаправления DNS." + +msgid "Search for DNS resources." +msgstr "Поиск ресурсов DNS." + +msgid "Search for DNS servers." +msgstr "Поиск DNS-серверов." + +msgid "Search for DNS zones (SOA records)." +msgstr "Поиск зон DNS (записей SOA)." + +msgid "Search for HBAC rules." +msgstr "Поиск правил HBAC." + +msgid "Search for HBAC services." +msgstr "Поиск служб HBAC." + +msgid "Search for IPA locations." +msgstr "Поиск расположений IPA." + +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "Не удалось выполнить поиск namingContext IPA. Ошибка: %d\n" + +msgid "Search for IPA servers." +msgstr "Поиск IPA-серверов." + +msgid "Search for IPA services." +msgstr "Поиск служб IPA." + +msgid "Search for OTP token." +msgstr "Поиск токена OTP." + +msgid "Search for RADIUS proxy servers." +msgstr "Поиск прокси-серверов RADIUS." + +msgid "Search for SELinux User Maps." +msgstr "Поиск списков пользователей SELinux." + +msgid "Search for Sudo Command Groups." +msgstr "Поиск групп команд Sudo." + +msgid "Search for Sudo Commands." +msgstr "Поиск команд Sudo." + +msgid "Search for Sudo Rule." +msgstr "Поиск правила Sudo." + +msgid "Search for a netgroup." +msgstr "Поиск сетевой группы." + +msgid "Search for a self-service permission." +msgstr "Поиск разрешения самообслуживания." + +msgid "Search for an Group ID override." +msgstr "Поиск переопределения ID группы." + +msgid "Search for an HBAC service group." +msgstr "Поиск группы служб HBAC." + +msgid "Search for an ID View." +msgstr "Поиск представления ID." + +msgid "Search for an ID override." +msgstr "Поиск переопределения ID." + +msgid "Search for an User ID override." +msgstr "Поиск переопределения ID пользователя." + +msgid "Search for an automount key." +msgstr "Поиск ключа автомонтирования." + +msgid "Search for an automount location." +msgstr "Поиск расположения автомонтирования." + +msgid "Search for an automount map." +msgstr "Поиск списка соответствия автомонтирования." + +msgid "Search for automember rules." +msgstr "Поиск правил автоучастия." + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "Поиск сертификатов, включая те, владельцами которых являются %s" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "Поиск сертификатов, не включая те, владельцами которых являются %s" + +msgid "Search for classes." +msgstr "Поиск классов." + +msgid "Search for command outputs." +msgstr "Поиск выводов команд." + +msgid "Search for commands." +msgstr "Поиск команд." + +msgid "Search for delegations." +msgstr "Поиск делегирований." + +msgid "Search for entitlement accounts." +msgstr "Поиск учётных записей прав." + +msgid "Search for existing certificates." +msgstr "Поиск существующих сертификатов." + +msgid "Search for forward zones only" +msgstr "Поиск только зон перенаправления" + +msgid "Search for group password policies." +msgstr "Поиск групповых политик паролей." + +msgid "Search for groups with these member groups." +msgstr "Поиск групп с этими группами-участниками." + +msgid "Search for groups with these member of HBAC rules." +msgstr "Поиск групп, которые являются участниками этого правила HBAC." + +msgid "Search for groups with these member of groups." +msgstr "Поиск групп, участником которых является эта группа." + +msgid "Search for groups with these member of netgroups." +msgstr "Поиск групп, которые являются участниками этой сетевой группы." + +msgid "Search for groups with these member of roles." +msgstr "Поиск групп, которые являются участниками этой роли." + +msgid "Search for groups with these member of sudo rules." +msgstr "Поиск групп, которые являются участниками этого правила Sudo." + +msgid "Search for groups with these member users." +msgstr "Поиск групп с этими пользователями-участниками." + +msgid "Search for groups without these member groups." +msgstr "Поиск групп без этих групп-участников." + +msgid "Search for groups without these member of HBAC rules." +msgstr "Поиск групп, которые не являются участниками этого правила HBAC." + +msgid "Search for groups without these member of groups." +msgstr "Поиск групп, участником которых не является эта группа." + +msgid "Search for groups without these member of netgroups." +msgstr "Поиск групп, которые не являются участниками этой сетевой группы." + +msgid "Search for groups without these member of roles." +msgstr "Поиск групп, которые не являются участниками этой роли." + +msgid "Search for groups without these member of sudo rules." +msgstr "Поиск групп, которые не являются участниками этого правила Sudo." + +msgid "Search for groups without these member users." +msgstr "Поиск групп без этих пользователей-участников." + +msgid "Search for groups." +msgstr "Поиск групп." + +msgid "Search for help topics." +msgstr "Поиск разделов справки." + +msgid "Search for host groups with these member host groups." +msgstr "Поиск групп узлов с этими группами узлов — участниками." + +msgid "Search for host groups with these member hosts." +msgstr "Поиск групп узлов с этими узлами-участниками." + +msgid "Search for host groups with these member of HBAC rules." +msgstr "Поиск групп узлов, которые являются участниками этого правила HBAC." + +msgid "Search for host groups with these member of host groups." +msgstr "Поиск групп узлов, которые являются участниками этой группы узлов." + +msgid "Search for host groups with these member of netgroups." +msgstr "Поиск групп узлов, которые являются участниками этой сетевой группы." + +msgid "Search for host groups with these member of sudo rules." +msgstr "Поиск групп узлов, которые являются участниками этого правила Sudo." + +msgid "Search for host groups without these member host groups." +msgstr "Поиск групп узлов без этих групп узлов — участников." + +msgid "Search for host groups without these member hosts." +msgstr "Поиск групп узлов без этих узлов-участников." + +msgid "Search for host groups without these member of HBAC rules." +msgstr "Поиск групп узлов, которые не являются участниками этого правила HBAC." + +msgid "Search for host groups without these member of host groups." +msgstr "Поиск групп узлов, которые не являются участниками этой группы узлов." + +msgid "Search for host groups without these member of netgroups." +msgstr "" +"Поиск групп узлов, которые не являются участниками этой сетевой группы." + +msgid "Search for host groups without these member of sudo rules." +msgstr "Поиск групп узлов, которые не являются участниками этого правила Sudo." + +msgid "Search for hostgroups." +msgstr "Поиск групп узлов." + +msgid "Search for hosts with these enrolled by users." +msgstr "Поиск узлов, которые зарегистрированы пользователями." + +msgid "Search for hosts with these managed by hosts." +msgstr "Поиск узлов, которые управляются узлами." + +msgid "Search for hosts with these managing hosts." +msgstr "Поиск узлов, включая узлы, управляющие узлами." + +msgid "Search for hosts with these member of HBAC rules." +msgstr "Поиск узлов, которые являются участниками этого правила HBAC." + +msgid "Search for hosts with these member of host groups." +msgstr "Поиск узлов, которые являются участниками этой группы узлов." + +msgid "Search for hosts with these member of netgroups." +msgstr "Поиск узлов, которые являются участниками этой сетевой группы." + +msgid "Search for hosts with these member of roles." +msgstr "Поиск узлов, которые являются участниками этой роли." + +msgid "Search for hosts with these member of sudo rules." +msgstr "Поиск узлов, которые являются участниками этого правила Sudo." + +msgid "Search for hosts without these enrolled by users." +msgstr "Поиск узлов, которые не зарегистрированы пользователями." + +msgid "Search for hosts without these managed by hosts." +msgstr "Поиск узлов, которые не управляются узлами." + +msgid "Search for hosts without these managing hosts." +msgstr "Поиск узлов, не включая узлы, управляющие узлами." + +msgid "Search for hosts without these member of HBAC rules." +msgstr "Поиск узлов, которые не являются участниками этого правила HBAC." + +msgid "Search for hosts without these member of host groups." +msgstr "Поиск узлов, которые не являются участниками этой группы узлов." + +msgid "Search for hosts without these member of netgroups." +msgstr "Поиск узлов, которые не являются участниками этой сетевой группы." + +msgid "Search for hosts without these member of roles." +msgstr "Поиск узлов, которые не являются участниками этой роли." + +msgid "Search for hosts without these member of sudo rules." +msgstr "Поиск узлов, которые не являются участниками этого правила Sudo." + +msgid "Search for hosts." +msgstr "Поиск узлов." + +msgid "Search for netgroups with these member groups." +msgstr "Поиск сетевых групп с этими группами-участниками." + +msgid "Search for netgroups with these member host groups." +msgstr "Поиск сетевых групп с этими группами узлов — участниками." + +msgid "Search for netgroups with these member hosts." +msgstr "Поиск сетевых групп с этими узлами-участниками." + +msgid "Search for netgroups with these member netgroups." +msgstr "Поиск сетевых групп с этими сетевыми группами — участниками." + +msgid "Search for netgroups with these member of netgroups." +msgstr "Поиск сетевых групп, которые являются участниками этой сетевой группы." + +msgid "Search for netgroups with these member users." +msgstr "Поиск сетевых групп с этими пользователями-участниками." + +msgid "Search for netgroups without these member groups." +msgstr "Поиск сетевых групп без этих групп-участников." + +msgid "Search for netgroups without these member host groups." +msgstr "Поиск сетевых групп без этих групп узлов — участников." + +msgid "Search for netgroups without these member hosts." +msgstr "Поиск сетевых групп без этих узлов-участников." + +msgid "Search for netgroups without these member netgroups." +msgstr "Поиск сетевых групп без этих сетевых групп — участников." + +msgid "Search for netgroups without these member of netgroups." +msgstr "" +"Поиск сетевых групп, которые не являются участниками этой сетевой группы." + +msgid "Search for netgroups without these member users." +msgstr "Поиск сетевых групп без этих пользователей-участников." + +msgid "Search for permissions." +msgstr "Поиск разрешений." + +msgid "Search for privileges." +msgstr "Поиск привилегий." + +msgid "Search for ranges." +msgstr "Поиск диапазонов." + +msgid "Search for roles." +msgstr "Поиск ролей." + +msgid "Search for servers with these managed suffixes." +msgstr "Поиск серверов, включая серверы с этими управляемыми суффиксами." + +msgid "Search for servers without these managed suffixes." +msgstr "Поиск серверов, не включая серверы с этими управляемыми суффиксами. " + +msgid "Search for service delegation target." +msgstr "Поиск цели делегирования служб." + +msgid "Search for service delegations rule." +msgstr "Поиск правила делегирования служб." + +msgid "Search for services with these managed by hosts." +msgstr "Поиск служб, включая службы, управляемые узлами." + +msgid "Search for services without these managed by hosts." +msgstr "Поиск служб, не включая службы, управляемые узлами." + +msgid "Search for stage users with these member of HBAC rules." +msgstr "" +"Поиск неподтверждённых пользователей, которые являются участниками этого " +"правила HBAC." + +msgid "Search for stage users with these member of groups." +msgstr "" +"Поиск неподтверждённых пользователей, которые являются участниками этой " +"группы." + +msgid "Search for stage users with these member of netgroups." +msgstr "" +"Поиск неподтверждённых пользователей, которые являются участниками этой " +"сетевой группы." + +msgid "Search for stage users with these member of roles." +msgstr "" +"Поиск неподтверждённых пользователей, которые являются участниками этой роли." + +msgid "Search for stage users with these member of sudo rules." +msgstr "" +"Поиск неподтверждённых пользователей, которые являются участниками этого " +"правила Sudo." + +msgid "Search for stage users without these member of HBAC rules." +msgstr "" +"Поиск неподтверждённых пользователей, которые не являются участниками этого " +"правила HBAC." + +msgid "Search for stage users without these member of groups." +msgstr "" +"Поиск неподтверждённых пользователей, которые не являются участниками этой " +"группы." + +msgid "Search for stage users without these member of netgroups." +msgstr "" +"Поиск неподтверждённых пользователей, которые не являются участниками этой " +"сетевой группы." + +msgid "Search for stage users without these member of roles." +msgstr "" +"Поиск неподтверждённых пользователей, которые не являются участниками этой " +"роли." + +msgid "Search for stage users without these member of sudo rules." +msgstr "" +"Поиск неподтверждённых пользователей, которые не являются участниками этого " +"правила Sudo." + +msgid "Search for stage users." +msgstr "Поиск неподтверждённых пользователей." + +msgid "Search for topology segments." +msgstr "Поиск сегментов топологии." + +msgid "Search for topology suffices." +msgstr "Поиск суффиксов топологии." + +msgid "Search for topology suffixes." +msgstr "Поиск суффиксов топологии." + +msgid "Search for trusts." +msgstr "Поиск отношений доверия." + +msgid "Search for users with these member of HBAC rules." +msgstr "Поиск пользователей, которые являются участниками этого правила HBAC." + +msgid "Search for users with these member of groups." +msgstr "Поиск пользователей, которые являются участниками этой группы." + +msgid "Search for users with these member of netgroups." +msgstr "Поиск пользователей, которые являются участниками этой сетевой группы." + +msgid "Search for users with these member of roles." +msgstr "Поиск пользователей, которые являются участниками этой роли." + +msgid "Search for users with these member of sudo rules." +msgstr "Поиск пользователей, которые являются участниками этого правила Sudo." + +msgid "Search for users without these member of HBAC rules." +msgstr "" +"Поиск пользователей, которые не являются участниками этого правила HBAC." + +msgid "Search for users without these member of groups." +msgstr "Поиск пользователей, которые не являются участниками этой группы." + +msgid "Search for users without these member of netgroups." +msgstr "" +"Поиск пользователей, которые не являются участниками этой сетевой группы." + +msgid "Search for users without these member of roles." +msgstr "Поиск пользователей, которые не являются участниками этой роли." + +msgid "Search for users without these member of sudo rules." +msgstr "" +" Поиск пользователей, которые не являются участниками этого правила Sudo." + +msgid "Search for users." +msgstr "Поиск пользователей." + +msgid "Search for vaults." +msgstr "Поиск хранилищ." + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "Результат поиска усечён: %(reason)s" + +msgid "Search scope" +msgstr "Область поиска" + +msgid "Search size limit" +msgstr "Ограничение размера поиска" + +msgid "Search time limit" +msgstr "Ограничение времени поиска" + +msgid "Second Code" +msgstr "Другой код" + +msgid "Second OTP" +msgstr "Второй OTP" + +msgid "Secondary RID base" +msgstr "Основа вторичного RID" + +msgid "Seconds Latitude" +msgstr "Секунды широты" + +msgid "Seconds Longitude" +msgstr "Секунды долготы" + +msgid "Secret" +msgstr "Секрет" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" +"Секреты можно добавлять или извлекать из хранилища только с помощью " +"инструментов командной строки vault-archive и vault-retrieve." + +msgid "Security Identifier" +msgstr "Идентификатор безопасности" + +msgid "Security Identifiers (SIDs)" +msgstr "Идентификаторы безопасности (SID)" + +msgid "Segment details" +msgstr "Свойства сегмента" + +msgid "Segment name" +msgstr "Имя сегмента" + +msgid "Select All" +msgstr "Выбрать все" + +msgid "Select entries to be removed." +msgstr "Выбранные записи, которые следует удалить." + +msgid "Selector" +msgstr "Селектор" + +msgid "Self" +msgstr "Моя учётная запись" + +msgid "Self Service Permission" +msgstr "Разрешение самообслуживания" + +msgid "Self Service Permissions" +msgstr "Разрешения самообслуживания" + +msgid "Self-service name" +msgstr "Имя самообслуживания" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" +"Семантика %(label)s изменена. %(current_behavior)s\n" +"%(hint)s" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" +"Разделённый точками с запятой список IP-адресов или сетей, которым разрешено " +"выдавать запросы" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" +"Разделённый точками с запятой список IP-адресов или сетей, которым разрешено " +"переносить зону" + +msgid "Sensitive" +msgstr "Учитывать" + +msgid "Serial" +msgstr "Серийный номер" + +msgid "Serial Number" +msgstr "Серийный номер" + +msgid "Serial Number (hex)" +msgstr "Серийный номер (шестнадцатеричный)" + +msgid "Serial number" +msgstr "Серийный номер" msgid "Serial number (hex)" msgstr "Серийный номер (hex)" -msgid "Request status" -msgstr "Состояние запроса" +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "" +"Серийный номер в десятичной или, если есть префикс 0x, в шестнадцатеричной " +"системе" + +msgid "Server" +msgstr "Сервер" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "У сервера \"%(srv)s\" имеется %(n)d соглашений с серверами:" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "Сервер %(srv)s не может связаться с серверами: %(replicas)s" + +msgid "Server Name" +msgstr "Имя сервера" + +msgid "Server Options" +msgstr "Параметры сервера" + +msgid "Server Role" +msgstr "Роль сервера" + +msgid "Server Roles" +msgstr "Роли сервера" + +msgid "Server does not support domain level functionality" +msgstr "Сервер не поддерживает функционал уровня домена" + +msgid "Server has already been deleted" +msgstr "Сервер уже удалён" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "На сервере нет сведений о домене \"%(domain)s\"" + +msgid "Server location" +msgstr "Расположение сервера" + +msgid "Server name" +msgstr "Имя сервера" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "Не указано имя сервера, сервер недоступен\n" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "Удаление сервера прервано: %(reason)s." + +msgid "Server state" +msgstr "Состояние сервера" + +msgid "Server will check DNS forwarder(s)." +msgstr "Сервер проверит DNS-перенаправитель (перенаправители)." + +msgid "Servers" +msgstr "Серверы" + +msgid "Servers details:" +msgstr "Сведения о серверах:" + +msgid "Servers in location" +msgstr "Серверы в расположении" + +msgid "Servers that belongs to the IPA location" +msgstr "Серверы, которые принадлежат к записи расположения IPA" + +msgid "Service" +msgstr "Служба" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" +"Для применения изменений конфигурации необходимо перезапустить службу " +"%(service)s на IPA-сервере %(server)s." + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "В базе данных Kerberos не найдена служба \"%(service)s\" " + +msgid "Service Certificate" +msgstr "Сертификат службы" + +msgid "Service Groups" +msgstr "Группы служб" + +msgid "Service Options" +msgstr "Параметры службы" + +msgid "Service Settings" +msgstr "Параметры службы" + +msgid "Service Vaults" +msgstr "Хранилища служб" + +msgid "Service category" +msgstr "Категория служб" + +msgid "Service category the ACL applies to" +msgstr "Категория служб, к которой применяется ACL" + +msgid "Service category the rule applies to" +msgstr "Категория служб, к которой применяется правило" + +msgid "Service delegation rule" +msgstr "Правило делегирования служб" + +msgid "Service delegation rules" +msgstr "Правила делегирования служб" + +msgid "Service delegation target" +msgstr "Цель делегирования служб" + +msgid "Service delegation targets" +msgstr "Цели делегирования служб" + +msgid "Service group name" +msgstr "Имя группы служб" + +msgid "Service name" +msgstr "Имя службы" + +msgid "Service name of the service vault" +msgstr "Имя службы хранилища служб" + +msgid "Service principal" +msgstr "Учётная запись службы" + +msgid "Service principal alias" +msgstr "Псевдоним учётной записи службы" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" +"Учётная запись службы для этого сертификата (например, HTTP/test.example.com)" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" +"Учётная запись службы указана в виде, отличном от: служба/полностью-" +"определённое-имя узла: %(reason)s" + +msgid "Service principal is required" +msgstr "Следует указать учётную запись службы" + +msgid "Service relative weight" +msgstr "Относительный вес служб" + +msgid "Service unprovisioned" +msgstr "Служба, подготовка которой к работе отменена" + +msgid "Service weight" +msgstr "Вес служб" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" +"Невозможно одновременно указать параметры службы (служб), общего доступа и " +"пользователя (пользователей)" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" +"Невозможно одновременно указать параметры службы, совместного использования " +"и пользователя" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" +"Невозможно одновременно указать параметры службы, общего доступа и " +"пользователя" + +msgid "Services" +msgstr "Службы" + +msgid "Session error" +msgstr "Сеансовая ошибка" + +msgid "Session key wrapped with transport certificate" +msgstr "Ключ сеанса, упакованный с сертификатом транспорта" + +msgid "Session timeout" +msgstr "Время ожидания сеанса" + +msgid "Set" +msgstr "Установить" + +msgid "Set Domain Level" +msgstr "Указать уровень домена" + +msgid "Set OTP" +msgstr "Установить OTP" + +msgid "Set SSH key" +msgstr "Указать ключ SSH" + +msgid "Set a user's password." +msgstr "Установить пароль пользователя." + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" +"Установить атрибут для пары имя/значение. Формат: атрибут=значение.\n" +"Если атрибут многозначный, команда заменяет уже присутствующие значения." + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "" +"Установить группу по умолчанию (резервную) для всех несоответствующих " +"записей." + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "" +"Установить группу по умолчанию (резервную) для автоучастия \"%(value)s\"" + +msgid "Set enabled/hidden state of a server." +msgstr "Установить включённое/скрытое состояние сервера." + +msgid "Set public key" +msgstr "Установить открытый ключ" + +msgid "Settings" +msgstr "Параметры" + +msgid "Shared" +msgstr "Общее" + +msgid "Shared Vaults" +msgstr "Хранилища совместного использования" + +msgid "Shared secret for the trust" +msgstr "Общий секрет для отношения доверия" + +msgid "Shared vault" +msgstr "Хранилище совместного использования" + +msgid "Show" +msgstr "Показать" + +msgid "Show IPA server." +msgstr "Показать IPA-сервер." + +msgid "Show QR code" +msgstr "Показать QR-код" + +msgid "Show Results" +msgstr "Показать результаты" + +msgid "Show all loaded plugins." +msgstr "Показать все загруженные подключаемые модули." + +msgid "Show configuration uri" +msgstr "Показать адрес конфигурации" + +msgid "Show details" +msgstr "Показать подробные сведения" + +msgid "Show environment variables." +msgstr "Показать переменные окружения." + +msgid "Show global trust configuration." +msgstr "Показать глобальную конфигурацию отношений доверия." + +msgid "Show managed suffix." +msgstr "Показать управляемый суффикс." + +msgid "Show role status on a server" +msgstr "Показать состояние роли на сервере." + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "" +"Показать текущую конфигурацию сопоставления сертификатов с записями " +"пользователей." + +msgid "Show the current OTP configuration." +msgstr "Показать текущую конфигурацию OTP." + +msgid "Show the current configuration." +msgstr "Показать текущую конфигурацию." + +msgid "Show the current global DNS configuration." +msgstr "Показать текущую глобальную конфигурацию DNS." + +msgid "Show the list of permitted encryption types and exit" +msgstr "Показать список разрешённых типов шифрования и завершить работу" + +msgid "Show vault configuration." +msgstr "Показать конфигурацию хранилища." + +msgid "Show/Set key" +msgstr "Показать или установить ключ" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "Показано записей: с ${start} по ${end} из ${total}." + +msgid "Signature" +msgstr "Подпись" + +msgid "Signature Expiration" +msgstr "Окончание действия подписи" + +msgid "Signature Inception" +msgstr "Начало действия подписи" + +msgid "Signer's Name" +msgstr "Имя подписавшего" + +msgid "Simple bind failed\n" +msgstr "Не удалось выполнить простую привязку\n" + +msgid "Simulate use of Host-based access controls" +msgstr "Имитировать использование управления доступом на основе узла" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" +"Поскольку IPA не управляет записями DNS, следует настроить DNS так, чтобы " +"система определяла адрес домена \"{domain}\" по данным узлов IPA и наоборот." + +msgid "Size" +msgstr "Размер" + +msgid "Size Limit" +msgstr "Ограничение по размеру" + +#, python-format +msgid "" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +msgstr "" +"Размер данных превышает ограничение. Текущее ограничение размера хранилища: " +"%(limit)d Б" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" +"Размер диапазона идентификаторов, зарезервированного для доверенного домена" + +msgid "Skip DNS check" +msgstr "Пропустить проверку DNS" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" +"Пропустить проверку того, удаляется ли последний главный сервер CA или DNS-" +"сервер" + +msgid "Skip host check" +msgstr "Пропустить проверку узла" + +msgid "Skip overlap check" +msgstr "Пропустить проверку пересечения" + +#, python-format +msgid "Skipped %(key)s" +msgstr "Пропущено %(key)s" + +#, python-format +msgid "Skipped %(map)s" +msgstr "Пропущено %(map)s" + +msgid "Some entries were not deleted" +msgstr "Не удалось удалить некоторые записи" + +msgid "Some operations failed." +msgstr "Не удалось выполнить некоторые операции." + +msgid "Source Host Groups" +msgstr "Группы узлов-источников" + +msgid "Source Hosts" +msgstr "Узлы-источники" + +msgid "Source host" +msgstr "Узел-источник" + +msgid "Source host category" +msgstr "Категория узлов-источников" + +msgid "Source host category the rule applies to" +msgstr "Категория узлов-источников, к которой применяется правило" + +msgid "Specified CAs" +msgstr "Указанные CA" + +msgid "Specified Commands and Groups" +msgstr "Указанные команды и группы" + +msgid "Specified Groups" +msgstr "Указанные группы" + +msgid "Specified Hosts and Groups" +msgstr "Указанные узлы и группы" + +msgid "Specified Profiles" +msgstr "Указанные профили" + +msgid "Specified Services and Groups" +msgstr "Указанные службы и группы" + +msgid "Specified Users and Groups" +msgstr "Указанные пользователи и группы" + +msgid "Specified trusted domain name could not be found." +msgstr "Указанное имя доверенного домена не найдено." + +msgid "Specifies where to store keytab information." +msgstr "Указывает место сохранения данных таблицы ключей." + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "Указать внешний адрес: ${entity}" + +msgid "Split DNS record to parts" +msgstr "Разделить запись DNS на части" + +msgid "Stage" +msgstr "Сделать неподтверждённым" + +msgid "Stage User" +msgstr "Неподтверждённый пользователь" + +msgid "Stage Users" +msgstr "Неподтверждённые пользователи" + +#, python-format +msgid "Stage user %s activated" +msgstr "Неподтверждённый пользователь %s активирован" + +msgid "Stage users" +msgstr "Неподтверждённые пользователи" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "Учётная запись неподтверждённого пользователя \"%(value)s\"" + +msgid "Standard" +msgstr "Стандартное" + +msgid "Standard Record Types" +msgstr "Стандартные типы записей" + +msgid "State" +msgstr "Состояние" + +msgid "State/Province" +msgstr "Область/республика" + +msgid "Status" +msgstr "Состояние" + +msgid "Status of the role" +msgstr "Состояние роли" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "Остановить уже начатое обновление выбранного узла (узлов)" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "Остановка репликации для сегмента: направлен запрос \"%(pkey)s\"." + +msgid "Store and provide schema for commands and topics" +msgstr "Хранить и предоставлять схему для команд и тем" + +msgid "Store issued certificates" +msgstr "Сохранять выданные сертификаты" + +msgid "Street address" +msgstr "Адрес" + +msgid "Structured" +msgstr "Структурировано" + +msgid "Subject" +msgstr "Субъект" + +msgid "Subject DN" +msgstr "DN субъекта" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "DN субъекта уже используется CA \"%s\"" + +msgid "Subject DNS name" +msgstr "DNS-имя субъекта" + +msgid "Subject Distinguished Name" +msgstr "Различающееся имя субъекта" + +msgid "Subject EDI Party name" +msgstr "Имя стороны EDI субъекта" + +msgid "Subject IP Address" +msgstr "IP-адрес субъекта" + +msgid "Subject Kerberos principal name" +msgstr "Имя учётной записи Kerberos субъекта" + +msgid "Subject OID" +msgstr "Идентификатор объекта (OID) субъекта" + +msgid "Subject Other Name" +msgstr "Другое имя субъекта" + +msgid "Subject UPN" +msgstr "Имя участника-пользователя (UPN) субъекта" + +msgid "Subject URI" +msgstr "Универсальный код ресурса (URI) субъекта" + +msgid "Subject X.400 address" +msgstr "Адрес X.400 субъекта" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "Использование типа альтернативного имени субъекта %s запрещено" + +msgid "Subject directory name" +msgstr "Имя каталога субъекта" + +msgid "Subject email address" +msgstr "Адрес электронной почты субъекта" + +msgid "Subject of the certificate" +msgstr "Субъект сертификата" + +msgid "Submit a certificate signing request." +msgstr "Отправить запрос подписи сертификата." + +msgid "Subtree" +msgstr "Поддерево" + +msgid "Subtree to apply ACI to" +msgstr "Поддерево, к которому следует применить ACI" + +msgid "Subtree to apply permissions to" +msgstr "Поддерево, к которому следует применить разрешения" + +msgid "Subtype" +msgstr "Подтип" + +msgid "Success" +msgstr "Успех" + +msgid "Sudo" +msgstr "Sudo" + +msgid "Sudo Allow Command Groups" +msgstr "Группы разрешённых команд Sudo" + +msgid "Sudo Allow Commands" +msgstr "Разрешённые команды Sudo" + +msgid "Sudo Command" +msgstr "Команда Sudo" + +msgid "Sudo Command Group" +msgstr "Группа команд Sudo" + +msgid "Sudo Command Groups" +msgstr "Группы команд Sudo" + +msgid "Sudo Commands" +msgstr "Команды Sudo" + +msgid "Sudo Deny Command Groups" +msgstr "Группы запрещённых команд Sudo" + +msgid "Sudo Deny Commands" +msgstr "Запрещённые команды Sudo" + +msgid "Sudo Option" +msgstr "Параметр Sudo" + +msgid "Sudo Rule" +msgstr "Правило Sudo" + +msgid "Sudo Rules" +msgstr "Правила Sudo" + +msgid "Sudo order" +msgstr "Порядок Sudo" + +msgid "Suffix name" +msgstr "Имя суффикса" + +msgid "Superseded" +msgstr "Замена" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "Поддерживаемые типы шифрования:\n" + +msgid "Suppress processing of membership attributes." +msgstr "Подавить обработку атрибутов участия." + +msgid "Symmetric" +msgstr "Симметричное" + +msgid "Sync OTP Token" +msgstr "Синхронизировать токен OTP" + +msgid "Synchronize an OTP token." +msgstr "Синхронизировать токен OTP." + +msgid "Synchronizing" +msgstr "Выполняется синхронизация" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Ошибка синтаксиса: %(error)s" + +msgid "System DNS records updated" +msgstr "Записи DNS системы обновлены" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set " +"LC_ALL=\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" +"Системной кодировкой должна быть UTF-8, поддержка \"%(encoding)s\" не " +"предусмотрена. Установите либо LC_ALL=\"C.UTF-8\", либо LC_ALL=\"\" и " +"LC_CTYPE=\"C.UTF-8\"." + +msgid "TA record" +msgstr "Запись TA" + +msgid "TKEY record" +msgstr "Запись TKEY" + +msgid "TLSA Certificate Association Data" +msgstr "Данные сопоставления сертификата TLSA" + +msgid "TLSA Certificate Usage" +msgstr "Использование сертификата TLSA" + +msgid "TLSA Matching Type" +msgstr "Тип соответствия TLSA" + +msgid "TLSA Selector" +msgstr "Селектор TLSA" + +msgid "TLSA record" +msgstr "Запись TLSA" + +msgid "TOTP Synchronization Window" +msgstr "Окно TOTP-синхронизации" + +msgid "TOTP authentication Window" +msgstr "Окно TOTP-аутентификации" + +msgid "TOTP authentication time variance (seconds)" +msgstr "Отклонение по времени TOTP-аутентификации (в секундах)" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "Отклонение по времени TOTP-синхронизации (в секундах)" + +msgid "TOTP token / IPA server time difference" +msgstr "Разница времени между токеном TOTP и сервером IPA" + +msgid "TSIG record" +msgstr "Запись TSIG" + +msgid "TXT Text Data" +msgstr "Текстовые данные TXT" + +msgid "TXT record" +msgstr "Запись TXT" + +msgid "Take a revoked certificate off hold." +msgstr "Возобновить действие отозванного сертификата." + +msgid "Target" +msgstr "Цель" + +msgid "Target DN" +msgstr "DN цели" + +msgid "Target DN subtree" +msgstr "Поддерево DN цели" + +msgid "Target Uniform Resource Identifier" +msgstr "Универсальный код ресурса (URI) запрошенного конечного объекта " + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "" +"Универсальный код ресурса (URI) запрошенного конечного объекта в " +"соответствии с RFC 3986" + +msgid "Target group" +msgstr "Целевая группа" + +msgid "Target host" +msgstr "Целевой узел" + +msgid "Target members of a group" +msgstr "Целевые участники группы" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "Целевые участники группы (устанавливает фильтр целей memberOf)" + +msgid "Target reverse zone not found." +msgstr "Целевая обратная зона не найдена." + +msgid "Target your own entry (self)" +msgstr "Выполнить над своей собственной записью (self)" + +msgid "Task DN" +msgstr "DN задачи" + +#, python-format +msgid "Task DN = '%s'" +msgstr "DN задачи = \"%s\"" + +msgid "Telephone Number" +msgstr "Номер телефона" + +msgid "Test the ACI syntax but don't write anything" +msgstr "Проверить синтаксис ACI, но никуда не записывать" + +msgid "Text Data" +msgstr "Текстовые данные" + +msgid "Text does not match field pattern" +msgstr "Текст не соответствует шаблону поля" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" +"Параметр --domain невозможно использовать одновременно с параметром --add-" +"domain или --del-domain. Используйте параметр --domain, чтобы явно указать " +"весь список доменов области (realm). Используйте параметр --add-domain/del-" +"domain, чтобы добавить или удалить отдельные домены." + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "ACI для разрешения %(name)s не найдена в %(dn)s " + +msgid "The IPA realm" +msgstr "Область (realm) IPA" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" +"Не удалось создать запись TXT _kerberos из домена %(domain)s (%(error)s).\n" +"Возможная причина: зона не находится под управлением IPA. Создайте запись " +"вручную, включив в неё следующее значение: \"%(realm)s\"" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" +"Не удалось удалить запись TXT _kerberos из домена %(domain)s (%(error)s).\n" +"Возможная причина: зона не находится под управлением IPA. Удалите запись " +"вручную." + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "Ключ автомонтирования %(key)s с информацией %(info)s не существует" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "Сертификат для %(ca)s недоступен на этом сервере." + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "Использовать символ %(char)r запрещено." + +msgid "The default users group cannot be removed" +msgstr "Невозможно удалить группу пользователей по умолчанию" + +msgid "The deny type has been deprecated." +msgstr "Тип \"deny\" больше не поддерживается." + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "Домен %s не является ни доменом IPA, ни доверенным доменом." + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" +"Имя домена целевого узла или \".\", если служба явно недоступна на этом " +"домене" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" +"Домен(ы) \"%s\" не могут использоваться для применения проверки " +"altSecurityIdentities." + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "Следующие домены не принадлежат к этой области (realm): %(domains)s" + +msgid "The group doesn't exist" +msgstr "Группа не существует" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "Узел \"%s\", в который следовало добавить службу, не существует." + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "Узел добавлен, но при обновлении DNS произошла ошибка: %(reason)s" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "Имя узла должно быть полным: %s\n" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "Имя узла не должно быть следующим: %s\n" + +msgid "The hostname or IP (with or without port)" +msgstr "Имя узла или IP-адрес (с портом или без порта)" + +msgid "The hostname this reverse record points to" +msgstr "Имя узла, на которое указывает эта обратная запись" + +msgid "The hostname to register as" +msgstr "Имя узла для регистрации" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" +"Пара ключ,информация должна быть уникальной. Ключ с именем %(key)s и " +"информацией %(info)s уже существует" + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" +"Файл таблицы ключей, в который следует добавить новый ключ (файл будет " +"создан, если не существует)." + +msgid "The keytab file to remove the principcal(s) from" +msgstr "" +"Файл таблицы ключей, из которого следует удалить учётную запись (записи)" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" +"Правило сопоставления с altSecurityIdentities должно применяться к " +"доверенному домену Active Directory, но с правилом не был связан ни один " +"домен." + +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "Наиболее распространённые типы для этого типа зон: %s\n" + +msgid "The number of times to retry authentication" +msgstr "Количество повторных попыток аутентификации" + +msgid "The password or username you entered is incorrect" +msgstr "Введён неверный пароль или имя пользователя" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" +msgstr "" +"Значение primary_key (основного ключа) записи, например \"ииванов\" для " +"пользователя" + +msgid "The principal for this request doesn't exist." +msgstr "Учётная запись для этого запроса не существует." + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" +"Учётная запись, для которой следует получить файл таблицы ключей (пример: " +"ftp/ftp.example.com@EXAMPLE.COM)" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" +"Учётная запись, которую следует удалить из файла таблицы ключей (пример: ftp/" +"ftp.example.com@EXAMPLE.COM)" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "" +"Область (realm) для учётной записи не совпадает с областью этого IPA-сервера" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" +"Не удалось определить область (realm) следующих доменов: %(domains)s. Если " +"эти домены принадлежат к этой области, создайте на каждом из них запись TXT " +"_kerberos, которая содержит \"%(realm)s\"." + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" +"Схема, используемая на LDAP-сервере. Поддерживаются значения RFC2307 и " +"RFC2307bis. Значение по умолчанию: RFC2307bis." + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "Недостаточно строгие условия поиска. Ожидалось: 1. Найдено: %(found)d." + +msgid "The secret used to encrypt data" +msgstr "Секрет, который используется для шифрования данных" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "Службе разрешена аутентификация от имени клиента" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" +"Учётная запись службы для альтернативного имени субъекта %s в запросе " +"сертификата не существует" + +msgid "The topic or command name." +msgstr "Имя темы или команды." + +msgid "The total timeout across all retries (in seconds)" +msgstr "Общее время ожидания для всех повторных попыток (в секундах)" + +msgid "The user account you entered is locked" +msgstr "Введённая учётная запись пользователя заблокирована" + +msgid "The username attribute on the user object" +msgstr "Атрибут имени пользователя объекта пользователя" + +msgid "The username, password or token codes are not correct" +msgstr "Неправильное имя пользователя, пароль или коды токена." + +#, python-brace-format +msgid "" +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." +msgstr "" +"Отношение доверия с {ipa_domain} с неподдерживаемым типом {trust_type} уже " +"существует. Пожалуйста, удалите его вручную на стороне DC AD." + +msgid "There was a problem with your request. Please, try again later." +msgstr "Ошибка при обработке запроса. Пожалуйста, повторите попытку позже." + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" +"Эту команду нельзя использовать для изменения выделения идентификаторов для " +"локального домена IPA. Чтобы получить дополнительные сведения, выполните " +"команду `ipa help idrange`" + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" +"Для выполнения этой команды должна существовать группа \"editors\", но такая " +"группа не найдена." + +msgid "This command requires root access" +msgstr "Для выполнения этой команды требуются права администратора (root)" + +msgid "This entry already exists" +msgstr "Такая запись уже существует" + +msgid "This entry cannot be enabled or disabled" +msgstr "Эту запись нельзя включать или отключать" + +msgid "This entry is already a member" +msgstr "Эта запись уже есть среди участников" + +msgid "This entry is already disabled" +msgstr "Эта запись уже отключена" + +msgid "This entry is already enabled" +msgstr "Эта запись уже включена" + +msgid "This entry is not a member" +msgstr "Этой записи нет среди участников" + +msgid "This group already allows external members" +msgstr "В этой группе уже разрешены внешние участники" + +msgid "This group cannot be posix because it is external" +msgstr "Эта группа не может быть POSIX-группой, так как является внешней" + +msgid "This is already a posix group" +msgstr "Уже является POSIX-группой" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" +"Эта группа уже является POSIX-группой и не может быть преобразована во " +"внешнюю группу" + +msgid "This may take some time, please wait ..." +msgstr "Это может занять некоторое время; пожалуйста, подождите..." + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" +"На этой странице имеются несохранённые изменения. Пожалуйста, сохраните или " +"отмените их. " + +msgid "Ticket expired" +msgstr "Срок действия билета истек" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "Не удалось прочитать политику билетов для %s" + +msgid "Time Limit" +msgstr "Ограничение по времени" + +msgid "Time limit of search in seconds" +msgstr "Ограничение времени поиска в секундах" + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "" +"Ограничение времени поиска в секундах (\"0\" означает отсутствие ограничения)" + +msgid "Time now" +msgstr "Время сейчас" + +msgid "Time to live" +msgstr "Срок жизни" + +msgid "Time to live for records at zone apex" +msgstr "Срок жизни записей в начале зоны" + +msgid "Time to live for records without explicit TTL definition" +msgstr "Срок жизни записей без явного определения срока жизни" + +msgid "Time-based (TOTP)" +msgstr "На основе времени (TOTP)" + +msgid "Timeout" +msgstr "Время ожидания" + +#, c-format +msgid "Timeout exceeded." +msgstr "Превышено время ожидания." + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" +"Для установления отношения доверия с Active Directory имя домена и имя " +"области (realm) IPA-сервера должны совпадать" + +msgid "To get command help, use:" +msgstr "Чтобы получить справку по команде, используйте команду:" + +msgid "Token ID" +msgstr "ID токена" + +msgid "Token description (informational only)" +msgstr "Описание токена (только для сведения)" + +msgid "Token hash algorithm" +msgstr "Алгоритм хеширования токена" + +msgid "Token model (informational only)" +msgstr "Модель токена (только для сведения)" + +msgid "Token secret (Base32; default: random)" +msgstr "Секрет токена (Base32; значение по умолчанию: случайный)" + +msgid "Token serial (informational only)" +msgstr "Серийный номер токена (только для сведения)" + +msgid "Token synchronization failed" +msgstr "Не удалось синхронизировать токен" + +msgid "Token vendor name (informational only)" +msgstr "Имя поставщика токена (только для сведения)" + +msgid "Token was synchronized" +msgstr "Токен синхронизирован" + +msgid "Topic commands:" +msgstr "Команды темы:" + +msgid "Topic or Command" +msgstr "Тема или команда" + +msgid "Topology" +msgstr "Топология" + +msgid "Topology Segment" +msgstr "Сегмент топологии" + +msgid "Topology Segments" +msgstr "Сегменты топологии" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" +"Топология не позволяет серверу %(server)s выполнять репликацию с серверами:" + +msgid "Topology is disconnected" +msgstr "Топология отключена" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "Управление топологией требует уровня домена не ниже {0}" + +msgid "Topology suffix" +msgstr "Суффикс топологии" + +msgid "Topology suffixes" +msgstr "Суффиксы топологии" + +msgid "Total number of variables env (>= count)" +msgstr "Количество переменных env (>= count)" + +msgid "Transport Certificate" +msgstr "Сертификат транспорта" + +msgid "True" +msgstr "Да" + +msgid "True if not all results were returned" +msgstr "Значение True, если были возвращены не все результаты" + +msgid "True means the operation was successful" +msgstr "Значение True означает, что операция выполнена успешно" + +msgid "Trust" +msgstr "Отношение доверия" + +msgid "Trust Settings" +msgstr "Параметры отношения доверия" + +msgid "Trust direction" +msgstr "Направление отношения доверия" + +msgid "Trust setup" +msgstr "Настройка отношения доверия" + +msgid "Trust status" +msgstr "Состояние отношения доверия" + +msgid "Trust type" +msgstr "Тип отношения доверия" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "Тип отношения доверия (ad для Active Directory, значение по умолчанию)" + +msgid "Trusted domain" +msgstr "Доверенный домен" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" +"Доверенный домен %(domain)s находится среди доменов области (realm) IPA. Его " +"необходимо удалить до установления отношения доверия. Смотрите команду \"ipa " +"realmdomains-mod --del-domain\"." + +msgid "Trusted domain and administrator account use different realms" +msgstr "" +"Доверенным доменом и учётной записью администратора используются разные " +"области (realms)" + +msgid "Trusted domain did not return a unique object" +msgstr "Доверенным доменом не возвращён уникальный объект" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "Доверенным доменом не возвращён корректный SID объекта" + +msgid "Trusted domain partner" +msgstr "Партнёр доверенного домена" + +msgid "Trusted domains" +msgstr "Доверенные домены" + +msgid "Trusted for delegation" +msgstr "Доверено для делегирования" + +msgid "Trusted forest" +msgstr "Доверенный лес" + +msgid "Trusted to authenticate as user" +msgstr "Доверие для аутентификации в качестве пользователя" + +msgid "Trusting forest" +msgstr "Доверяющий лес" + +msgid "Trusts" +msgstr "Отношения доверия" + +msgid "Two factor authentication (password + OTP)" +msgstr "Двухфакторная аутентификация (пароль + OTP)" + +msgid "Two-way trust" +msgstr "Двустороннее отношение доверия" + +msgid "Type" +msgstr "Тип" + +msgid "Type Covered" +msgstr "Охваченные типы" + +msgid "Type Map" +msgstr "Список сопоставления типов" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "Тип объекта IPA (устанавливает фильтр целей subtree и objectClass)" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" +"Тип объекта IPA (user (пользователь), group (группа), host (узел), hostgroup " +"(группа узлов), service (служба), netgroup (сетевая группа), dns)" + +msgid "Type of the token" +msgstr "Тип токена" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" +"Тип диапазона идентификаторов доверенного домена, одно из разрешённых " +"значений" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" +"Тип диапазона идентификаторов доверенного домена, один из следующих: ipa-ad-" +"trust-posix, ipa-ad-trust" + +msgid "Types of supported user authentication" +msgstr "Поддерживаемые типы аутентификации пользователей" + +msgid "UID" +msgstr "UID" + +msgid "UPN suffixes" +msgstr "Суффиксы UPN" + +msgid "URI" +msgstr "Универсальный код ресурса (URI)" + +msgid "URL" +msgstr "URL-адрес" + +msgid "UUID" +msgstr "UUID" + +msgid "Un-apply" +msgstr "Отменить применение" + +msgid "Un-apply ID Views from hosts" +msgstr "Отменить применение представлений ID к узлам" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "Отменить применение представлений ID к узлам групп узлов" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "Отменить применение представления ID '${primary_key}' к узлам" + +msgid "Un-apply from host groups" +msgstr "Отменить применение к группам узлов" + +msgid "Un-apply from hosts" +msgstr "Отменить применение к узлам" + +msgid "Unable to communicate with CMS" +msgstr "Не удалось обменяться данными с CMS" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "Не удалось обменяться данными с CMS (состояние %d)" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "Не удалось создать личную группу. Группа \"%(group)s\" уже существует." + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "Не удалось найти IPA-сервер, используя %s\n" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" +"Не удалось определить, существует ли уже учётная запись Kerberos %s. " +"Используйте команду \"ipa user-mod\", чтобы установить её параметры вручную." + +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "Не удалось определить корневое DN %s\n" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" +"Не удалось показать QR-код с помощью настроенного шифрования вывода. " +"Используйте URI токена для настройки вашего устройства OTP" + +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "Не удалось включить SSL в LDAP\n" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "Не удалось создать кэш учётных данных Kerberos\n" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "Не удалось инициализировать сеанс STARTTLS\n" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "Не удалось инициализировать подключение к LDAP-серверу %1$s: %2$s\n" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "Не удалось инициализировать библиотеку ldap!\n" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "Не удалось присоединить узел: кэш учётных данных Kerberos не найден\n" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" +"Не удалось присоединить узел: учётная запись пользователя Kerberos не " +"найдена, пароль узла не указан.\n" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" +"Не удалось присоединить узел: ошибка инициализации Kerberos-контекста\n" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "Не удалось обработать учётную запись\n" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "Не удалось обработать имя учётной записи\n" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "Не удалось обработать учётную запись: %1$s (%2$d)\n" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "Не удалось удалить запись\n" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "Не удалось определить контроллер домена для домена {domain}. " + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "Не удалось задать LDAP_OPT_PROTOCOL_VERSION\n" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "Не удалось задать LDAP_OPT_X_SASL_NOCANON\n" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "Не удалось задать LDAP_OPT_X_TLS_CACERTFILE\n" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "Не удалось задать LDAP_OPT_X_TLS_PROTOCOL_MIN\n" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "Не удалось задать LDAP_OPT_X_TLS_REQUIRE_CERT\n" + +msgid "Unable to verify write permissions to the AD" +msgstr "Не удалось проверить разрешения на запись в AD" + +msgid "Undelete a delete user account." +msgstr "Восстановить удалённую учётную запись пользователя." + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "Учётная запись пользователя \"%(value)s\" возвращена после удаления" + +msgid "Undo" +msgstr "Отменить" + +msgid "Undo All" +msgstr "Отменить все" + +msgid "Undo all changes in this field." +msgstr "Отменить все изменения в этом поле." + +msgid "Undo this change." +msgstr "Отменить это изменение." + +msgid "Unenroll this host from IPA server" +msgstr "Отменить регистрацию этого узла на IPA-сервере" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "Не удалось отменить регистрацию.\n" + +#, c-format +msgid "Unenrollment successful.\n" +msgstr "Отмена регистрации выполнена успешно.\n" + +msgid "Unique ID" +msgstr "Уникальный идентификатор" + +msgid "Unknown" +msgstr "Неизвестно" + +msgid "Unknown Error" +msgstr "Неизвестная ошибка" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "Неизвестный параметр: %(option)s" + +msgid "Unlock" +msgstr "Разблокировать" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "Учётная запись \"%(value)s\" разблокирована" + +msgid "Unmatched" +msgstr "Соответствие не установлено" + +msgid "Unprovision" +msgstr "Отменить подготовку" + +msgid "Unprovisioning host" +msgstr "Отмена подготовки узла" + +msgid "Unprovisioning service" +msgstr "Отмена подготовки службы" + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "Нераспознанные атрибуты: %(attrs)s" + +msgid "Unresolved rules in --rules" +msgstr "Непригодные к обработке правила в --rules" + +msgid "Unrevoked" +msgstr "Отзыв отменён" + +msgid "Unsaved Changes" +msgstr "Несохранённые изменения" + +msgid "Unselect All" +msgstr "Отменить выбор" + +msgid "Unspecified" +msgstr "Не указана" + +msgid "Unsupported value" +msgstr "Неподдерживаемое значение" + +msgid "Update" +msgstr "Обновить" + +msgid "Update DNS entries" +msgstr "Обновить записи DNS" + +msgid "Update System DNS Records" +msgstr "Обновить записи DNS системы" + +msgid "Update location and IPA server DNS records" +msgstr "Обновить записи расположений и DNS-серверов IPA. " + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "Не удалось обновить системную запись \"%(record)s\". Ошибка: %(error)s" + +msgid "User" +msgstr "Пользователь" + +msgid "User Group" +msgstr "Группа пользователей" + +msgid "User Groups" +msgstr "Группы пользователей" + +msgid "User ID" +msgstr "ID пользователя" + +msgid "User ID Number" +msgstr "Номер ID пользователя" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "ID пользователя (если не указан, система назначит его самостоятельно)" + +msgid "User ID override" +msgstr "Переопределение ID пользователя" + +msgid "User ID overrides" +msgstr "Переопределения ID пользователя" + +msgid "User Login" +msgstr "Имя учётной записи пользователя" + +msgid "User Options" +msgstr "Параметры пользователя" + +msgid "User Vaults" +msgstr "Хранилища пользователей" + +msgid "User attribute" +msgstr "Атрибут пользователя" + +msgid "User attributes for SMB services" +msgstr "Пользовательские атрибуты для служб SMB" + +msgid "User authentication types" +msgstr "Типы аутентификации пользователей" + +msgid "User categories" +msgstr "Категории пользователей" + +msgid "User category" +msgstr "Категория пользователей" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" +"Категория пользователей (семантика этого атрибута предназначена для " +"локального разбора)" + +msgid "User category the ACL applies to" +msgstr "Категория пользователей, к которой применяется ACL" + +msgid "User category the rule applies to" +msgstr "Категория пользователей, к которой применяется правило" + +msgid "User container" +msgstr "Контейнер пользователей" + +msgid "User group" +msgstr "Группа пользователей" + +msgid "User group ACI grants access to" +msgstr "Группа пользователей, доступ к которой предоставляет ACI" + +msgid "User group rule" +msgstr "Правило группы пользователей" + +msgid "User group rules" +msgstr "Правила группы пользователей" + +msgid "User group to apply delegation to" +msgstr "Группа пользователей, к которой следует применить делегирование" + +msgid "User group to apply permissions to" +msgstr "Группа пользователей, к которой следует применить разрешения" + +msgid "User group to apply permissions to (sets target)" +msgstr "" +"Группа пользователей, к которой следует применить разрешения (устанавливает " +"target)" + +msgid "User login" +msgstr "Имя учётной записи пользователя" + +msgid "User logins" +msgstr "Имена входа пользователя" + +msgid "User name" +msgstr "Имя пользователя" + +msgid "User object class" +msgstr "Класс объекта пользователя" + +msgid "User object overrides" +msgstr "Приоритет объекта пользователя" + +msgid "User password" +msgstr "Пароль пользователя" + +msgid "User password expiration" +msgstr "Окончание действия пароля пользователя" + +msgid "User search fields" +msgstr "Поля поиска пользователей" + +msgid "User to override" +msgstr "Пользователь, которого следует переопределить" + +msgid "User-friendly description of action performed" +msgstr "Понятное пользователю описание выполненного действия" + +msgid "User-specified attributes to which the permission applies" +msgstr "Определённые пользователем атрибуты, к которым применяется разрешение" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" +"Определённые пользователем атрибуты, к которым явно не применяется разрешение" + +msgid "Username" +msgstr "Имя пользователя" + +msgid "Username of the user vault" +msgstr "Имя пользователя хранилища пользователей" + +msgid "Users" +msgstr "Пользователи" + +msgid "Users allowed to create keytab" +msgstr "Пользователи, которым разрешено создавать таблицу ключей" + +msgid "Users allowed to retrieve keytab" +msgstr "Пользователи, которым разрешено получать таблицу ключей" + +msgid "Valid Certificate Present" +msgstr "Имеется действительный сертификат" + +msgid "Valid from" +msgstr "Действителен с" + +msgid "Valid not after from" +msgstr "Действующий не позднее, чем с" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "Действующий не позднее, чем с этой даты (ГГГГ-мм-дд)" + +msgid "Valid not after to" +msgstr "Действующий не позднее, чем до" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "Действующий не позднее, чем до этой даты (ГГГГ-мм-дд)" + +msgid "Valid not before from" +msgstr "Действующий не ранее, чем с" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "Действующий не ранее, чем с этой даты (ГГГГ-мм-дд)" + +msgid "Valid not before to" +msgstr "Действующий не ранее, чем до" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "Действующий не ранее, чем до этой даты (ГГГГ-мм-дд)" + +msgid "Valid to" +msgstr "Действителен до" + +msgid "Validation error" +msgstr "Ошибка подтверждения" + +msgid "Validity" +msgstr "Действительность" + +msgid "Validity end" +msgstr "Окончание срока действия" + +msgid "Validity start" +msgstr "Начало срока действия" + +msgid "Vault" +msgstr "Хранилище" + +msgid "Vault Container" +msgstr "Контейнер хранилищ" + +msgid "Vault Containers" +msgstr "Контейнеры хранилищ" + +msgid "Vault Type" +msgstr "Тип хранилища" + +msgid "Vault configuration" +msgstr "Конфигурация хранилища" + +msgid "Vault data encrypted with session key" +msgstr "Данные хранилища, зашифрованные ключом сеанса" + +msgid "Vault description" +msgstr "Описание хранилища" + +msgid "Vault name" +msgstr "Имя хранилища" + +msgid "Vault password" +msgstr "Пароль хранилища" + +msgid "Vault private key" +msgstr "Закрытый ключ хранилища" + +msgid "Vault public key" +msgstr "Открытый ключ хранилища" + +msgid "Vault salt" +msgstr "Соль хранилища" + +msgid "Vault service" +msgstr "Служба хранилища" + +msgid "Vault type" +msgstr "Тип хранилища" + +msgid "Vault user" +msgstr "Пользователь хранилища" + +msgid "Vaults" +msgstr "Хранилища" + +msgid "Vaults Config" +msgstr "Конфигурация хранилищ" + +msgid "Vendor" +msgstr "Поставщик" + +msgid "Verify Password" +msgstr "Проверить пароль" + +msgid "Verify Principal Password" +msgstr "Проверка пароля учётной записи" + +msgid "Version" +msgstr "Версия" + +msgid "Vertical Precision" +msgstr "Вертикальная точность" + +msgid "Via Service" +msgstr "Служба для использования" + +msgid "View" +msgstr "Показать" + +msgid "View Certificate" +msgstr "Просмотреть сертификат" + +msgid "Waiting for confirmation by remote side" +msgstr "Ожидание подтверждения удалённой стороной" + +msgid "Warning" +msgstr "Предупреждение" + +msgid "Warning unrecognized encryption type.\n" +msgstr "Предупреждение: неопознанный тип шифрования.\n" + +msgid "Warning unrecognized salt type.\n" +msgstr "Предупреждение: неопознанный тип соли.\n" + +msgid "Warning: Consider service replication" +msgstr "Предупреждение: рекомендуется использовать репликацию служб" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "Предупреждение: не удалось преобразовать тип (№%d)\n" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" +"Предупреждение: случайные пароли не поддерживают типы соли (см. параметр -" +"P)\n" + +msgid "Weight" +msgstr "Вес" + +msgid "Weight for server services" +msgstr "Вес служб сервера" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" +"При переносе группы, которая уже существует в домене IPA, перезаписать GID " +"группы и сообщить об успешном выполнении" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "Включена или отключена пре-аутентификация (PKINIT)" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" +"Активно ли соглашение о репликации, то есть выполняется ли репликация по " +"этому соглашению" + +msgid "Whether to store certs issued using this profile" +msgstr "" +"Определяет, следует ли сохранять сертификаты, выданные с помощью этого " +"профиля" + +msgid "Who" +msgstr "Кто" + +msgid "Working" +msgstr "В процессе" + +msgid "Write certificate (chain if --chain used) to file" +msgstr "" +"Записать сертификат (цепочку сертификатов, если использовано --chain) в файл" + +msgid "Write profile configuration to file" +msgstr "Записать конфигурацию профиля в файл" + +msgid "X.509 certificate chain" +msgstr "Цепочка сертификатов X.509" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" +"Вы пытаетесь сослаться на личную группу, которую запрещено переопределять. " +"Попробуйте переопределить атрибут GID соответствующего пользователя." + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" +"В качестве приложения для работы с токенами OTP можно использовать FreeOTP." + +msgid "You may need to manually remove them from the tree" +msgstr "Возможно, потребуется вручную удалить их из дерева" + +msgid "You must enroll a host in order to create a host service" +msgstr "Чтобы создать службу узла, необходимо сначала зарегистрировать узел" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" +"Необходимо указать оба параметра, rid-base и secondary-rid-base, так как " +"команда ipa-adtrust-install уже запущена." + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "Вы будете перенаправлены через ${count}s" + +msgid "You will be redirected to DNS Zone." +msgstr "Вы будете перенаправлены в зону DNS." + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "Количество дней до окончания действия вашего пароля: ${days}." + +msgid "Your password has expired. Please enter a new password." +msgstr "Срок действия вашего пароля истёк. Пожалуйста, введите новый пароль." + +msgid "Your session has expired. Please log in again." +msgstr "Время вашего сеанса истекло. Пожалуйста, войдите в систему ещё раз." + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" +"Доверительные отношения с %(domain)s разорваны. Восстановите их, выполнив " +"команду \"ipa trust-add\"." + +msgid "YubiKey slot" +msgstr "Слот YubiKey" + +msgid "ZIP" +msgstr "Индекс" + +msgid "Zone forwarders" +msgstr "Перенаправители зон" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "Найдена зона: ${zone}" + +msgid "Zone name" +msgstr "Имя зоны" + +msgid "Zone name (FQDN)" +msgstr "Имя зоны (FQDN)" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "Невозможно удалить запись зоны \"%s\"" + +msgid "Zone refresh interval" +msgstr "Интервал между обновлениями данных зоны" + +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "не удалось выполнить access() для %1$s: номер ошибки = %2$d\n" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "активный пользователь с именем \"%(user)s\" уже существует" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "добавлено значение атрибута в запись %(value)s" + +msgid "algorithm value: allowed interval 0-255" +msgstr "значение алгоритма: допустимый интервал 0-255" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "на всех главных серверах должна быть включена роль %(role)s" + +msgid "an internal error has occurred" +msgstr "произошла внутренняя ошибка" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "на сервере \"%(server)s\" произошла внутренняя ошибка " + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" +"ответ на запрос \"%(owner)s %(rtype)s\" не содержит подписи DNSSEC (нет " +"данных RRSIG)" + +msgid "any of the configured servers" +msgstr "любой из настроенных серверов" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "api не предоставляет такого пространства имён: \"%(name)s\"" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "следует указать хотя бы один из параметров: тип, пользователи, узлы" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" +"следует указать хотя бы одно из: type, filter, subtree, targetgroup, attrs " +"или memberof" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" +"должно присутствовать хотя бы одно значение, равное каноническому имени " +"учётной записи" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "атрибут \"%(attribute)s\" запрещён" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "атрибут \"%s\" нельзя использовать" + +msgid "attribute is not configurable" +msgstr "настройка атрибута невозможна" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "attrs и включённые атрибуты нельзя использовать вместе" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "attrs и включённые или исключённые атрибуты нельзя использовать вместе" + +msgid "automatically add the principal if it doesn't exist" +msgstr "автоматически добавить учётную запись, если она не существует" msgid "" "automatically add the principal if it doesn't exist (service principals only)" @@ -31429,12 +28161,516 @@ msgstr "" "Автоматически добавить учётную запись, если она не существует (только для " "учётных записей служб)" -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "сертификаты krbtgt могут использовать только профиль %s" +msgid "automount key" +msgstr "ключ автомонтирования" -msgid "No Common Name was found in subject of request." -msgstr "В субъекте запроса не найдено общее имя (CN)." +msgid "automount keys" +msgstr "ключи автомонтирования" + +msgid "automount location" +msgstr "расположение автомонтирования" + +msgid "automount locations" +msgstr "расположения автомонтирования" + +msgid "automount map" +msgstr "список соответствия автомонтирования" + +msgid "automount maps" +msgstr "списки соответствия автомонтирования" + +msgid "basedn" +msgstr "базовое расширяемое имя (DN)" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "Не удалось выполнить ber_init(), недопустимый элемент управления?!\n" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "Ошибка ber_scanf(), не удалось найти kvno?!\n" + +msgid "bind password" +msgstr "Привязка пароля " + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "может быть не длиннее %(len)d символов" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "размер должен быть не больше %(maxlength)d байт" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "может быть не длиннее %(maxlength)d символов" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "может быть не больше %(maxvalue)d" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "не может быть больше %(maxvalue)s" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" +"невозможно добавить разрешение \"%(perm)s\" с типом привязки " +"\"%(bindtype)s\" в привилегию" + +msgid "cannot be empty" +msgstr "не может быть пустым" + +msgid "cannot be longer that {} characters" +msgstr "не может превышать {} символов" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "не удалось установить соединение с \"%(uri)s\": %(error)s " + +msgid "cannot delete global password policy" +msgstr "невозможно удалить глобальную политику паролей" + +msgid "cannot delete managed permissions" +msgstr "невозможно удалить управляемые разрешения" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" +"невозможно удалить корневой домен отношения доверия, используйте trust-del " +"для удаления самого отношения доверия" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" +"невозможно отключить корневой домен отношения доверия, используйте trust-del " +"для удаления самого отношения доверия" + +msgid "cannot have an empty subject" +msgstr "поле субъекта не может быть пустым" + +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "не удалось открыть файл конфигурации %s\n" + +msgid "cannot rename managed permissions" +msgstr "невозможно переименовать управляемые разрешения" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" +"невозможно установить тип привязки для разрешения, которое связано с " +"привилегией" + +msgid "cannot specify both raw certificate and file" +msgstr "невозможно одновременно указать код сертификата и файл с сертификатом" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "невозможно одновременно указать subject/issuer и certificate" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "невозможно одновременно указать subject/issuer и ipacertmapdata" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" +"невозможно одновременно указать полный фильтр целей и дополнительный фильтр " +"целей" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "не удалось обработать файл конфигурации %s функцией stat()\n" + +msgid "change collided with another change" +msgstr "изменение конфликтует с другим выполненным изменением" + +msgid "change to a POSIX group" +msgstr "Изменить на POSIX-группу" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "" +"Изменить для добавления поддержки внешних не IPA-участников из доверенных " +"доменов" + +#, c-format +msgid "child exited with %d\n" +msgstr "дочерний процесс завершился с сообщением %d\n" + +msgid "cn is immutable" +msgstr "cn нельзя изменять" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" +"Разделённый двоеточиями список доменов, которые используются для обработки " +"кратких имён" + +msgid "comma-separated list of HBAC service groups to add" +msgstr "Разделённый запятыми список групп служб HBAC, которые следует добавить" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "Разделённый запятыми список групп служб HBAC, которые следует удалить" + +msgid "comma-separated list of HBAC services to add" +msgstr "Разделённый запятыми список служб HBAC, которые следует добавить" + +msgid "comma-separated list of HBAC services to remove" +msgstr "Разделённый запятыми список служб HBAC, которые следует удалить" + +msgid "comma-separated list of groups to add" +msgstr "Разделённый запятыми список групп, которые следует добавить" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "" +"Разделённый запятыми список групп, которые следует исключить из миграции" + +msgid "comma-separated list of groups to remove" +msgstr "Разделённый запятыми список групп, которые следует удалить" + +msgid "comma-separated list of host groups to add" +msgstr "Разделённый запятыми список групп узлов, которые следует добавить" + +msgid "comma-separated list of host groups to remove" +msgstr "Разделённый запятыми список групп узлов, которые следует удалить" + +msgid "comma-separated list of hosts to add" +msgstr "Разделённый запятыми список узлов, которые следует добавить" + +msgid "comma-separated list of hosts to remove" +msgstr "Разделённый запятыми список узлов, которые следует удалить" + +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "" +"Разделённый запятыми список участников доверенного домена в формате DOM\\имя " +"или имя@домен" + +msgid "comma-separated list of netgroups to add" +msgstr "Разделённый запятыми список сетевых групп, которые следует добавить" + +msgid "comma-separated list of netgroups to remove" +msgstr "Разделённый запятыми список сетевых групп, которые следует удалить" + +msgid "comma-separated list of permissions" +msgstr "Разделённый запятыми список разрешений" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" +"Разделённый запятыми список разрешений, которые следует предоставить (read, " +"write, add, delete, all)" + +msgid "comma-separated list of privileges" +msgstr "Разделённый запятыми список привилегий" + +msgid "comma-separated list of privileges to add" +msgstr "Разделённый запятыми список привилегий, которые следует добавить" + +msgid "comma-separated list of privileges to remove" +msgstr "Разделённый запятыми список привилегий, которые следует удалить" + +msgid "comma-separated list of roles to add" +msgstr "Разделённый запятыми список ролей, которые следует добавить" + +msgid "comma-separated list of roles to remove" +msgstr "Разделённый запятыми список ролей, которые следует удалить" + +msgid "comma-separated list of sudo command groups to add" +msgstr "" +"Разделённый запятыми список групп команд Sudo, которые следует добавить" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "Разделённый запятыми список групп команд Sudo, которые следует удалить" + +msgid "comma-separated list of sudo commands to add" +msgstr "Разделённый запятыми список команд Sudo, которые следует добавить" + +msgid "comma-separated list of sudo commands to remove" +msgstr "Разделённый запятыми список команд Sudo, которые следует удалить" + +msgid "comma-separated list of users to add" +msgstr "Разделённый запятыми список пользователей, которых следует добавить" + +msgid "comma-separated list of users to exclude from migration" +msgstr "" +"Разделённый запятыми список пользователей, которых следует исключить из " +"миграции" + +msgid "comma-separated list of users to remove" +msgstr "Разделённый запятыми список пользователей, которых следует удалить" + +msgid "command" +msgstr "команда" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "команда \"%(name)s\" имеет не более %(count)d аргумента" +msgstr[1] "команда \"%(name)s\" имеет не более %(count)d аргументов" +msgstr[2] "команда \"%(name)s\" имеет не более %(count)d аргументов" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "команда \"%(name)s\" не имеет аргументов" + +msgid "commands" +msgstr "команды" + +msgid "commands cannot be added when command category='all'" +msgstr "невозможно добавить команды, когда категория команд=\"all\"" + +msgid "commands for controlling sudo configuration" +msgstr "команды управления конфигурацией Sudo" + +msgid "communication with CIFS server was unsuccessful" +msgstr "не удалось обменяться данными с сервером CIFS" + +msgid "configuration options" +msgstr "параметры конфигурации" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "запись контейнера (%(container)s) не найдена" + +msgid "default CA ACL can be only disabled" +msgstr "CA ACL по умолчанию можно только отключить" + +msgid "delegation" +msgstr "делегирование" + +msgid "delegations" +msgstr "делегирования" + +msgid "delete" +msgstr "удалить" + +msgid "description" +msgstr "описание" + +msgid "did not receive Kerberos credentials" +msgstr "не получены учётные данные Kerberos" + +msgid "does not match any of accepted formats: " +msgstr "не соответствует ни одному допустимому формату:" + +msgid "domain" +msgstr "домен" + +msgid "domain is not configured" +msgstr "домен не настроен" + +msgid "domain is not trusted" +msgstr "домен не является доверенным" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "имя домена \"%(domain)s\" должно быть нормализовано до: %(normalized)s" + +msgid "domain name cannot be longer than 255 characters" +msgstr "имя домена не может быть длиннее 255 символов" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "каждый элемент ACL должен заканчиваться точкой с запятой" + +msgid "empty DNS label" +msgstr "пустая DNS-метка" + +msgid "empty filter" +msgstr "пустой фильтр" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "enabledService/configuredService не в записи kdc ipaConfigString" + +msgid "entries" +msgstr "записи" + +msgid "entry" +msgstr "запись" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" +"ошибка преобразования данных для передачи по протоколу XML-RPC: %(error)s" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "ошибка на сервере \"%(server)s\": %(error)s" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "не удалось выполнить команду ipa-getkeytab, номер ошибки %d\n" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" +"ожидаемый формат: <0-255> <0-255> <0-65535> " +"шестнадцатеричные_цифры_равной_длины_или_дефис" + +msgid "file to store DNS records in nsupdate format" +msgstr "файл для сохранения записей DNS в формате nsupdate" + +msgid "file to store certificate in" +msgstr "Файл для сохранения сертификата" + +msgid "filename" +msgstr "имя файла" + +msgid "filter and memberof are mutually exclusive" +msgstr "filter и memberof нельзя использовать вместе" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" +"значением флагов должна быть одна из следующих букв: \"S\", \"A\", \"U\" или " +"\"P\"" + +msgid "flags value: allowed interval 0-255" +msgstr "значение флагов: допустимый интервал от 0 до 255" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "" +"Принудительно создать запись NS, даже если соответствующее имя узла " +"отсутствует в DNS" + +msgid "force delete of SYSTEM permissions" +msgstr "Принудительно удалить разрешения SYSTEM" + +msgid "force host name even if not in DNS" +msgstr "" +"Принудительно установить значение имени узла, даже если имени нет в DNS" + +msgid "force principal name even if host not in DNS" +msgstr "" +"Принудительно установить значение имени учётной записи, даже если узла нет в " +"DNS" + +msgid "force principal name even if not in DNS" +msgstr "" +"принудительно установить значение имени учётной записи, даже если имени нет " +"в DNS" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" +"Принудительно создать службу, даже если объект узла для управления ей не " +"существует" + +#, c-format +msgid "fork() failed\n" +msgstr "не удалось выполнить fork()\n" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" +"формат должен быть указан следующим образом:\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" где:\n" +" d1: [0 .. 90] (градусы широты)\n" +" d2: [0 .. 180] (градусы долготы)\n" +" m1, m2: [0 .. 59] (минуты широты / долготы)\n" +" s1, s2: [0 .. 59.999] (секунды широты / долготы)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (высота в метрах)\n" +" siz, hp, vp: [0 .. 90000000.00] (размер / точность в метрах)\n" +" Подробные сведения доступны в RFC 1876" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "формат должен быть указан следующим образом: \"%(format)s\" %(rfcs)s" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" +"зона перенаправления \"%(fwzone)s\" не действует из-за отсутствия " +"надлежащего NS-делегирования в основной зоне \"%(authzone)s\". Добавьте NS-" +"запись \"%(ns_rec)s\" в родительскую зону \"%(authzone)s\"." + +msgid "gid cannot be set for external group" +msgstr "невозможно указать gid для внешней группы" + +msgid "givenname is required" +msgstr "следует указать имя" + +msgid "group" +msgstr "группа" + +msgid "group runAs" +msgstr "группа запуска от имени" + +msgid "group, permission and self are mutually exclusive" +msgstr "group, permission и self нельзя использовать вместе" + +msgid "groups" +msgstr "группы" + +msgid "groups to add" +msgstr "группы, которые следует добавить" + +msgid "groups to exclude from migration" +msgstr "группы, которые следует исключить из миграции" + +msgid "groups to remove" +msgstr "группы, которые следует удалить" + +msgid "host" +msgstr "узел" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" +"для категории узлов нельзя установить значение \"all\", когда имеются " +"разрешённые узлы" + +msgid "host group" +msgstr "группа узлов" + +msgid "host groups" +msgstr "группы узлов" + +msgid "host groups to add" +msgstr "группы узлов, которые следует добавить" + +msgid "host groups to remove" +msgstr "группы узлов, которые следует удалить" + +msgid "host masks of allowed hosts" +msgstr "Маски разрешённых узлов" + +msgid "hostgroup" +msgstr "группа узлов" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"группа узлов с именем \"%s\" уже существует. Группы узлов и сетевые группы " +"имеют общее пространство имён" + +msgid "hostgroups" +msgstr "группы узлов" + +msgid "hostname" +msgstr "имя узла" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "имя узла содержит пустую метку (точки подряд)" #, python-format msgid "" @@ -31452,318 +28688,477 @@ msgstr "" "имя узла в субъекте запроса \"%(cn)s\" не соответствует имени узла учётной " "записи \"%(hostname)s\"" -msgid "DN commonName does not match user's login" -msgstr "В commonName DN не соответствует имени пользователя" +msgid "hosts" +msgstr "узлы" -msgid "DN emailAddress does not match any of user's email addresses" +msgid "hosts cannot be added when host category='all'" +msgstr "невозможно добавить узлы, когда категория узлов=\"all\"" + +msgid "hosts cannot be set when type is 'group'" +msgstr "невозможно указать узлы, когда тип \"group\"" + +msgid "hosts to add" +msgstr "узлы, которые следует добавить" + +msgid "hosts to remove" +msgstr "узлы, которые следует удалить" + +msgid "id range" +msgstr "диапазон идентификаторов" + +msgid "id range type" +msgstr "тип диапазона идентификаторов" + +msgid "incomplete time value" +msgstr "неполное значение времени" + +msgid "incorrect type" +msgstr "неверный тип" + +msgid "integer to order the Sudo rules" +msgstr "Целое число для упорядочивания правил Sudo" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "недопустимое \"%(name)s\": %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "Некорректное DN (%s)" + +msgid "invalid IP address format" +msgstr "недопустимый формат IP-адреса" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" msgstr "" -"В emailAddress DN не соответствует ни одному адресу электронной почты " -"пользователя" +"недопустимая версия IP-адреса (сейчас %(value)d, должна быть " +"%(required_value)d)!" + +msgid "invalid IP network format" +msgstr "недопустимый формат IP-сети" + +msgid "invalid Profile ID" +msgstr "недопустимый идентификатор профиля" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "недопустимый SID: {SID}" + +msgid "invalid SSH public key" +msgstr "неверный открытый ключ SSH" + +msgid "invalid address format" +msgstr "недопустимый формат адреса" + +msgid "invalid attribute name" +msgstr "недопустимое имя атрибута" + +msgid "invalid domain name" +msgstr "недопустимое имя домена" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "недопустимое имя домена: %s" + +msgid "invalid domain-name: not fully qualified" +msgstr "недействительное имя домена: не является полным" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "неправильный формат почты: %(email)s" + +msgid "invalid escape code in domain name" +msgstr "" +"недопустимая управляющая последовательность (escape code) в имени домена" + +msgid "invalid hostmask" +msgstr "недопустимая маска узла" + +msgid "invalid port number" +msgstr "недопустимый номер порта" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "неправильные разрешения команды ipa-getkeytab?\n" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "команда ipa-getkeytab не найдена \n" + +msgid "is required" +msgstr "следует указать" + +msgid "iterations value: allowed interval 0-65535" +msgstr "значение количества итераций: допустимый интервал от 0 до 65535" + +msgid "kerberos ticket policy settings" +msgstr "параметры политики билетов Kerberos" + +#, python-format +msgid "key %(key)s already exists" +msgstr "ключ %(key)s уже существует" + +#, python-format +msgid "key named %(key)s already exists" +msgstr "ключ с именем %(key)s уже существует" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" +"таблица ключей является оборванной символической ссылкой и принадлежит " +"другому пользователю.\n" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "krb5_kt_close %1$d: %2$s\n" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "krb5_kt_get_entry %1$d: %2$s\n" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "krb5_kt_remove_entry %1$d: %2$s\n" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "krb5_parse_name %1$d: %2$s\n" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "krb5_unparse_name %1$d: %2$s\n" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "сертификаты krbtgt могут использовать только профиль %s" + +#, c-format +msgid "kvno %d\n" +msgstr "kvno %d\n" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "в левом узле ({host}) не предусмотрена поддержка суффикса '{suff}'" + +msgid "left node and right node must not be the same" +msgstr "левый узел и правый узел должны быть разными узлами" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "левый узел не является узлом топологии: %(leftnode)s" + +msgid "left or right node has to be specified" +msgstr "следует указать левый или правый узел" + +msgid "limits exceeded for this query" +msgstr "для этого запроса превышены ограничения" + +msgid "local domain range" +msgstr "диапазон локальных доменов" + +msgid "location" +msgstr "расположение" + +msgid "locations" +msgstr "расположения" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "руководитель %(manager)s не найден" + +#, python-format +msgid "map %(map)s already exists" +msgstr "список соответствия %(map)s уже существует" + +msgid "maps not connected to /etc/auto.master:" +msgstr "списки соответствия, которые не подключены к /etc/auto.master:" + +msgid "match the common name exactly" +msgstr "точное соответствие общему имени" + +msgid "maximum serial number" +msgstr "максимальный серийный номер" + +#, python-format +msgid "member %s" +msgstr "участник %s" + +msgid "member Certificate Profile" +msgstr "Профиль сертификатов — участник" + +msgid "member HBAC service" +msgstr "служба-участник HBAC" + +msgid "member HBAC service group" +msgstr "участник группа служб HBAC" + +msgid "member group" +msgstr "группа-участник" + +msgid "member host" +msgstr "узел-участник" + +msgid "member host group" +msgstr "группа узлов — участник" + +msgid "member netgroup" +msgstr "сетевая группа — участник" + +msgid "member principal" +msgstr "учётная запись — участник" + +msgid "member privilege" +msgstr "привилегия участника" + +msgid "member role" +msgstr "роль участника" + +msgid "member service" +msgstr "служба-участник" + +msgid "member service delegation target" +msgstr "цель делегирования служб — участник" + +msgid "member sudo command" +msgstr "команда Sudo — участник" + +msgid "member sudo command group" +msgstr "группа команд — участник Sudo" + +msgid "member user" +msgstr "пользователь-участник" + +msgid "minimum serial number" +msgstr "минимальный серийный номер" + +msgid "missing base_id" +msgstr "отсутствует base_id" + +msgid "modifying primary key is not allowed" +msgstr "изменение главного ключа запрещено" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" +"точка монтирования указывается относительно родительского списка " +"соответствия, её запись не может начинаться с /" + +#, python-format +msgid "must be \"%s\"" +msgstr "должно быть \"%s\"" + +#, python-format +msgid "must be '%(value)s'" +msgstr "должно быть \"%(value)s\"" + +msgid "must be DNS name" +msgstr "должно быть DNS-именем" + +msgid "must be Kerberos principal" +msgstr "должно быть учётной записью Kerberos" + +msgid "must be TRUE or FALSE" +msgstr "должно быть TRUE или FALSE" + +msgid "must be True or False" +msgstr "должно равняться либо True, либо False" + +msgid "must be Unicode text" +msgstr "должно быть Юникод-текстом" + +msgid "must be a certificate" +msgstr "должно быть сертификатом" + +msgid "must be a certificate signing request" +msgstr "должно быть запросом подписи сертификата" + +msgid "must be a decimal number" +msgstr "должно быть десятичным числом" + +msgid "must be absolute" +msgstr "должно быть абсолютным" + +msgid "must be an integer" +msgstr "должно быть целым числом" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "размер должен быть не меньше %(minlength)d байт" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "должно быть не короче %(minlength)d символов" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "должно быть не меньше %(minvalue)d" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "должно быть не меньше %(minvalue)s" + +msgid "must be at least 1" +msgstr "должно быть не меньше 1" + +msgid "must be at least 10" +msgstr "должно быть не меньше 10" + +msgid "must be binary data" +msgstr "должно быть двоичными данными" + +msgid "must be datetime value" +msgstr "должно быть значением даты и времени (datetime)" + +msgid "must be dictionary" +msgstr "должно быть словарём" + +msgid "must be enabled only on a single master" +msgstr "должно быть включено только на одном главном сервере" + +msgid "must be enclosed in parentheses" +msgstr "должно быть заключено в скобки" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "размер должен быть точно %(length)d байт" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "должно быть точно %(length)d символов длиной" + +#, python-format +msgid "must be one of %(values)s" +msgstr "должно быть одним из следующих значений: %(values)s" + +msgid "must be relative" +msgstr "должно быть относительным" + +msgid "must contain a tuple (list, dict)" +msgstr "должно содержать кортеж (список, словарь)" + +#, python-format +msgid "must equal %r" +msgstr "должно равняться %r" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "должна быть включена роль %(role)s" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "должно соответствовать шаблону \"%(pattern)s\"" + +msgid "netgroup" +msgstr "сетевая группа" #, python-format msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" msgstr "" -"Недостаточно привилегий \"write\" для атрибута \"userCertificate\" записи " -"\"%s\"." +"сетевая группа с именем \"%s\" уже существует. Группы узлов и сетевые группы " +"имеют общее пространство имён" + +msgid "netgroups" +msgstr "сетевые группы" + +msgid "netgroups to add" +msgstr "сетевые группы, которые следует добавить" + +msgid "netgroups to remove" +msgstr "сетевые группы, которые следует удалить" #, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" -"использование типа альтернативного имени субъекта %s запрещено для учётных " -"записей пользователей" +msgid "no command nor help topic '%(topic)s'" +msgstr "команда или раздел справки \"%(topic)s\" не обнаружены" + +msgid "no modifications to be performed" +msgstr "отсутствуют изменения для выполнения" + +msgid "no trusted domain is configured" +msgstr "отсутствуют настроенные доверенные домены" + +msgid "no trusted domain matched the specified flat name" +msgstr "указанному плоскому имени не соответствует ни один доверенный домен" + +msgid "not allowed to modify group entries" +msgstr "запрещено изменять записи групп" + +msgid "not allowed to modify user entries" +msgstr "запрещено изменять записи пользователей" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "не разрешено выполнение операции: %s" + +msgid "not allowed to perform server connection check" +msgstr "не разрешено выполнение проверки связи с сервером" + +msgid "not found" +msgstr "не найдено" + +msgid "not fully qualified" +msgstr "указано не полностью" + +msgid "not modifiable on managed permissions" +msgstr "нельзя изменять в управляемых разрешениях" #, python-format msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" msgstr "" -"Учётная запись службы для альтернативного имени субъекта %s в запросе " -"сертификата не существует" +"класс чисел \"%(cls)s\" не входит в список допустимых классов чисел: " +"%(allowed)s" + +msgid "number of passwords" +msgstr "количество паролей" + +#, python-format +msgid "objectclass %s not found" +msgstr "класс объектов %s не найден" + +msgid "one or more values to remove" +msgstr "одно или несколько значений, которые следует удалить" + +msgid "only \"ad\" is supported" +msgstr "предусмотрена поддержка только \"ad\"" + +msgid "only available on managed permissions" +msgstr "доступно только в управляемых разрешениях" #, python-format msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" msgstr "" -"Недостаточно привилегий для создания сертификата с альтернативным именем " -"субъекта \"%s\"." +"можно использовать только буквы, цифры, символы %(chars)s. DNS-метка не " +"может начинаться или заканчиваться символом %(chars2)s" + +msgid "only master zones can contain records" +msgstr "только главные зоны могут содержать записи" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" +"для одного имени можно использовать только одну запись CNAME (RFC 2136, " +"раздел 1.1.5)" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" +"для одного имени можно использовать только одну запись DNAME (RFC 6672, " +"раздел 2.4)" + +msgid "only one node can be specified" +msgstr "можно указать только один узел" + +msgid "operation not defined" +msgstr "операция не определена" #, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" -"Учётная запись \"%s\" в альтернативном имени субъекта не соответствует " -"запрошенной учётной записи" +msgid "option was renamed; use %s" +msgstr "параметр переименован; используйте %s" -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" -"RFC822Name не соответствует ни одному адресу электронной почты пользователя" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" -"использование типа альтернативного имени субъекта %s запрещено для учётных " -"записей, которые не относятся к пользователям" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "Использование типа альтернативного имени субъекта %s запрещено" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "CA \"%s\" отключён" - -msgid "'add' option" -msgstr "параметр \"add\"" - -msgid "The principal for this request doesn't exist." -msgstr "Учётная запись для этого запроса не существует." - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "IP-адрес в subjectAltName (%s) недоступен из DNS-имён" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "IP-адрес в subjectAltName (%s) не имеет записи PTR" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "Запись PTR для SAN IP (%s) не соответствует записям A/AAAA" - -msgid "Revoked" -msgstr "Отозван" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" -"Причина отзыва сертификата (0-10). Введите \"ipa help cert\", чтобы получить " -"сведения о причине отзыва. " - -#, python-format -msgid "Owner %s" -msgstr "Владелец %s" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" -"Сертификат с серийным номером %(serial)s, выданный CA \"%(ca)s\", не найден" - -msgid "7 is not a valid revocation reason" -msgstr "7 — неверная причина отзыва сертификата" - -#, fuzzy -msgid "Status of the certificate" -msgstr "Субъект сертификата" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" -"Результаты должны содержать только атрибут главного ключа (\"certificate\")" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "установлено соответствие %(count)d сертификата" -msgstr[1] "установлено соответствие %(count)d сертификатов" -msgstr[2] "установлено соответствие %(count)d сертификатов" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "Поиск сертификатов, включая те, владельцами которых являются %s" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "Поиск сертификатов, не включая те, владельцами которых являются %s" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" -"\n" -"Правила Sudo\n" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" -"\n" -"Sudo (su \"do\") позволяет системному администратору делегировать " -"полномочия, чтобы дать определённым пользователям (или группам " -"пользователей) возможность выполнять некоторые (или все) команды от имени " -"пользователя \"root\" или другого пользователя, вместе с тем предоставляя " -"журнал аудита команд и их аргументов.\n" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" -"\n" -"IPA предоставляет возможности настройки различных аспектов Sudo:\n" -" Users: пользователь (пользователи) или группа (группы), которые могут " -"вызывать Sudo.\n" -" Hosts: узел (узлы) или группа (группы) узлов, пользователи которых могут " -"вызывать Sudo.\n" -" Allow Command: конкретная команда (команды), которые разрешены для " -"выполнения с помощью Sudo. \n" -" Deny Command: конкретная команда (команды), которые запрещены для " -"выполнения с помощью Sudo.\n" -" RunAsUser: пользователь (пользователи) или группа (группы) пользователей, " -"от имени которых Sudo будет выполнять команды.\n" -" RunAsGroup: группа (группы), от имени которых Sudo будет выполнять " -"команды.\n" -" Options: различные параметры sudoers (участники Sudo), которые могут " -"изменить поведение Sudo.\n" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" -"\n" -"Правилу Sudo можно добавить порядок, который будет руководить порядком " -"обработки записей (если такой порядок предусмотрен на клиентской стороне). " -"Порядок определяется числовым индексом (целое число), который не должен " -"повторяться.\n" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" -"\n" -"IPA предусматривает специальную привязку DN (binddn) для использования с " -"Sudo:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" -"\n" -"Чтобы включить binddn, выполните следующую команду для установки пароля:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" -"\n" -" Создать новое правило:\n" -" ipa sudorule-add readfiles\n" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" -"\n" -" Добавить объект команды Sudo и добавить его в правило в качестве " -"разрешённой команды:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" -"\n" -" Добавить узел в правило:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" -"\n" -" Добавить пользователя в правило:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" -"\n" -" Добавить специальное правило Sudo для конфигурации сервера Sudo по " -"умолчанию:\n" -" ipa sudorule-add defaults\n" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" -"\n" -" Указать параметр Sudo по умолчанию:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" - -#, fuzzy -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" -"\n" -" Указать параметр Sudo по умолчанию:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" -"\n" -" Указать преобразования типа и роли SELinux в правиле:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" - -msgid "this option has been deprecated." -msgstr "этот параметр больше не поддерживается." - -msgid "sudo rules" -msgstr "правила Sudo" - -msgid "Sudo Rules" -msgstr "Правила Sudo" - -msgid "Sudo Rule" -msgstr "Правило Sudo" +msgid "options are not allowed" +msgstr "использование параметров запрещено" #, python-format msgid "order must be a unique value (%(order)d already used by %(rule)s)" @@ -31771,263 +29166,41 @@ msgstr "" "порядковый номер должен иметь уникальное значение (%(order)d уже " "использовано для %(rule)s)" -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "Добавлено правило Sudo \"%(value)s\"" +#, c-format +msgid "out of memory\n" +msgstr "недостаточно памяти\n" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" +"данные вне зоны: имя записи должно быть поддоменом зоны или относительным " +"именем" #, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Удалено правило Sudo \"%(value)s\"" +msgid "overlapping arguments and options: %(names)s" +msgstr "пересекающиеся аргументы и параметры: %(names)s" #, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "Изменено правило Sudo \"%(value)s\"" +msgid "owner %s" +msgstr "владелец %s" + +msgid "owner group" +msgstr "группа-владелец" #, python-format msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" msgstr "" -"для категории %(type)s нельзя установить значение \"all\", когда имеются " -"разрешённые %(objects)s" +"нельзя использовать шаблон имени домена в поле владельца записей %(types)s " +"(RFC 4592, раздел 4)" -msgid "users" -msgstr "пользователи" +msgid "owner service" +msgstr "служба-владелец" -msgid "command" -msgstr "команда" - -msgid "commands" -msgstr "команды" - -msgid "runAs user" -msgstr "пользователь запуска от имени" - -msgid "runAs users" -msgstr "пользователи запуска от имени" - -msgid "group runAs" -msgstr "группа запуска от имени" - -msgid "runAs groups" -msgstr "группы запуска от имени" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "установлено соответствие %(count)d правила Sudo" -msgstr[1] "установлено соответствие %(count)d правил Sudo" -msgstr[2] "установлено соответствие %(count)d правил Sudo" - -msgid "commands cannot be added when command category='all'" -msgstr "невозможно добавить команды, когда категория команд=\"all\"" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" -"невозможно добавить пользователей, когда категория запуска от имени " -"пользователей или запуска от имени групп=\"all\"" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" -"Нельзя указывать \"%(name)s\" в качестве имени пользователя в записи " -"RunAsUser" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "Имя группы \"%(name)s\" не принимается RunAsUser" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "Имя группы \"%(name)s\" не принимается RunAsGroup" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "Добавлен пользователь \"%(value)s\"" - -msgid "Default group for new users is not POSIX" -msgstr "Группа по умолчанию для новых пользователей не является POSIX-группой" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Удален пользователь \"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Preserved user \"%(value)s\"" -msgstr "Удален пользователь \"%(value)s\"" - -#, python-format -msgid "%s: user is already preserved" -msgstr "%s: пользователь уже хранится" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Изменён пользователь \"%(value)s\"" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "Учётная запись пользователя \"%(value)s\" возвращена после удаления" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "пользователь \"%s\" уже активен" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "Учётная запись неподтверждённого пользователя \"%(value)s\"" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "Учётная запись пользователя \"%(value)s\" отключена" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "Учётная запись пользователя \"%(value)s\" включена" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" -"\n" -"Разблокировка учётной записи пользователя.\n" -" \n" -"Учётная запись может быть заблокирована, если в течение определённого " -"периода времени слишком большое количество раз был введён неверный пароль " -"(соответствующие ограничения регулируются политикой паролей). Запись " -"блокируется временно, она может быть разблокирована администратором." - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "Учётная запись \"%(value)s\" разблокирована" - -msgid "Failed logins" -msgstr "Неудачные попытки входа" - -msgid "Last successful authentication" -msgstr "Последняя успешная аутентификация" - -msgid "Last failed authentication" -msgstr "Последняя ошибка при аутентификации" - -msgid "Time now" -msgstr "Время сейчас" - -#, fuzzy -#| msgid "Password change complete" -msgid "Password grace count" -msgstr "Изменение пароля завершено" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" -"\n" -"Состояние блокировки учётной записи пользователя.\n" -"\n" -" Учётная запись может быть заблокирована, если в течение определённого " -"периода времени слишком большое количество раз был введён неверный пароль " -"(соответствующие ограничения регулируются политикой паролей). Запись " -"блокируется временно, она может быть разблокирована администратором.\n" -"\n" -" Эта программа соединяется с каждым главным IPA-сервером и показывает " -"состояние блокировки на каждом из них.\n" -"\n" -" Чтобы определить, заблокирована ли учётная запись на указанном сервере, " -"потребуется сравнить количество неудачных попыток входа и время последней " -"неудачной попытки с эталонными значениями. Для блокировки учётной записи " -"количество неудачных попыток входа должно превысить значение maxfail в " -"течение временного интервала failinterval в соответствии с политикой " -"паролей, связанной с пользователем.\n" -"\n" -" Счётчик неудачных попыток изменяется только тогда, когда пользователь " -"выполняет попытку войти, поэтому учётная запись может казаться " -"заблокированной, но время, прошедшее с последней неудачной попытки входа, " -"превышает время блокировки (lockouttime), установленное политикой паролей. " -"Это означает, что пользователь может войти в систему снова.\n" -" " - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "Ошибка %(host)s: %(error)s" - -#, python-format -msgid "%(host)s failed" -msgstr "Ошибка %(host)s" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "Учётная запись отключена: %(disabled)s" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "Добавлены сертификаты в запись пользователя \"%(value)s\"" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "Удалены сертификаты из записи пользователя \"%(value)s\"" - -msgid "Add new principal alias to the user entry" -msgstr "Добавить новый псевдоним учётной записи в запись пользователя." - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "Добавлены новые псевдонимы в запись пользователя \"%(value)s\"" - -msgid "Remove principal alias from the user entry" -msgstr "Удалить псевдоним учётной записи из записи пользователя." - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "Удалены псевдонимы из записи пользователя \"%(value)s\"" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "на всех главных серверах должна быть включена роль %(role)s" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "должна быть включена роль %(role)s" - -msgid "must be enabled only on a single master" -msgstr "должно быть включено только на одном главном сервере" - -msgid "Request must be a dict" -msgstr "Запрос должен принадлежать к типу словаря (dict)" - -msgid "Request is missing \"method\"" -msgstr "В запросе не указан метод (\"method\")" - -msgid "Request is missing \"params\"" -msgstr "В запросе не указаны параметры (\"params\")" +msgid "owner user" +msgstr "пользователь-владелец" msgid "params must be a list" msgstr "params должны быть списком (list)" @@ -32041,265 +29214,516 @@ msgstr "params [0] (или аргументы) должны быть списк msgid "params[1] (aka options) must be a dict" msgstr "params [1] (или параметры) должны принадлежать к типу словаря (dict)" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" -"\n" -"Топология репликация в суффиксе \"%(suffix)s\" отключена:\n" -"%(errors)s" +msgid "password" +msgstr "пароль" + +msgid "password policies" +msgstr "политики паролей" + +msgid "password policy" +msgstr "политика паролей" + +msgid "password to use if not using kerberos" +msgstr "пароль, который следует использовать, если не используется Kerberos" + +msgid "permission" +msgstr "Разрешение" #, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" -"\n" -"Удаление \"%(hostname)s\" приводит к отключению топологии в суффиксе " -"\"%(suffix)s\":\n" -"%(errors)s" +msgid "permission \"%(value)s\" already exists" +msgstr "разрешение \"%(value)s\" уже существует" + +msgid "permissions" +msgstr "Разрешения" + +msgid "pkinit" +msgstr "pkinit" + +msgid "preserve" +msgstr "сохранить" + +msgid "preserve and no-preserve cannot be both set" +msgstr "невозможно одновременно указать сохранение и отсутствие сохранения" + +#, c-format +msgid "principal not found\n" +msgstr "учётная запись не найдена\n" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "учётная запись не найдена в ответе XML-RPC\n" + +msgid "principal to add" +msgstr "учётная запись, которую следует добавить" + +msgid "principal to remove" +msgstr "учётная запись, которую следует удалить" + +msgid "priority cannot be set on global policy" +msgstr "невозможно установить приоритет для глобальной политики" #, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" msgstr "" -"Топология не позволяет серверу %(server)s выполнять репликацию с серверами:" +"приоритет должен иметь уникальное значение (%(prio)d уже использовано для " +"%(gname)s)" + +msgid "privilege" +msgstr "Привилегия" + +msgid "privileged group" +msgstr "привилегированная группа" + +msgid "privileged hostgroup" +msgstr "привилегированная группа узлов" + +msgid "privileged service delegation rule" +msgstr "правило делегирования привилегированных служб" + +msgid "privileged service delegation target" +msgstr "цель делегирования привилегированных служб" + +msgid "privileges" +msgstr "Привилегии" + +msgid "privileges to add" +msgstr "привилегии, которые следует добавить" + +msgid "privileges to remove" +msgstr "привилегии, которые следует удалить" msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" +"profile category cannot be set to 'all' while there are allowed profiles" msgstr "" -"\n" -"Классы для управления доверенными присоединениями с помощью вызовов DCE-RPC\n" -"\n" -"Код в этом модуле жёстко зависит от содержания пакета samba4-python и " -"привязок для языка Python в Samba4.\n" +"для категории профилей нельзя установить значение \"all\", когда имеются " +"разрешённые профили" -msgid "CIFS server denied your credentials" -msgstr "Ваши регистрационные данные отклонены сервером CIFS" +msgid "profiles cannot be added when profile category='all'" +msgstr "невозможно добавить профили, когда категория профилей=\"all\"" -msgid "communication with CIFS server was unsuccessful" -msgstr "не удалось обменяться данными с сервером CIFS" +msgid "pyhbac is not installed." +msgstr "Пакет pyhbac не установлен." -msgid "AD domain controller" -msgstr "Контроллер домена AD" +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "pysss_murmur недоступен на сервере, base-id не предоставлен." -msgid "unsupported functional level" -msgstr "неподдерживаемый функциональный уровень" - -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" -"Контроллер домена AD сообщает о непоследовательности команд установления " -"связи. Это может означать, например, рассинхронизацию времени между " -"компьютерами, которые обмениваются данными" - -msgid "Cannot find specified domain or server name" -msgstr "Не удалось найти домен или сервер с указанным именем" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" -"DC AD не удалось получить доступ к контроллерам домена IPA. Скорее всего, " -"проблема связана с DNS или брандмауэром" - -msgid "At least the domain or IP address should be specified" -msgstr "Следует указать хотя бы домен или IP-адрес" +msgid "python-yubico is not installed." +msgstr "python-yubico не установлен." #, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "запрос \"%(owner)s %(rtype)s\" с помощью EDNS0: %(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "запрос \"%(owner)s %(rtype)s\": %(error)s" + +msgid "range exists" +msgstr "диапазон существует" + msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" +"range modification leaving objects with ID out of the defined range is not " +"allowed" msgstr "" -"Ошибка обмена данными с сервером CIFS: код \"%(num)s\", сообщение " -"\"%(message)s\" (оба значения могут быть \"None\")" +"изменение диапазона, при котором появляются объекты с идентификаторами за " +"пределами указанного диапазона, запрещено " -msgid "no trusted domain is configured" -msgstr "отсутствуют настроенные доверенные домены" +msgid "range type change" +msgstr "изменение типа диапазона" -msgid "domain is not configured" -msgstr "домен не настроен" +#, c-format +msgid "read error\n" +msgstr "ошибка чтения\n" -msgid "SID is not valid" -msgstr "SID недействителен" +#, c-format +msgid "realm not found\n" +msgstr "область (realm) не найдена\n" -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "SID не совпадает точно ни с одним из SID доверенных доменов" - -msgid "SID does not match any trusted domain" -msgstr "SID не соответствует ни одному доверенному домену" - -msgid "Trust setup" -msgstr "Настройка отношения доверия" - -msgid "Our domain is not configured" -msgstr "Наш домен не настроен" - -msgid "No trusted domain is not configured" -msgstr "Не настроено ни одного доверенного домена" - -msgid "trusted domain object" -msgstr "объект доверенного домена" - -msgid "domain is not trusted" -msgstr "домен не является доверенным" - -msgid "no trusted domain matched the specified flat name" -msgstr "указанному плоскому имени не соответствует ни один доверенный домен" - -msgid "trusted domain object not found" -msgstr "объект доверенного домена не найден" - -#, fuzzy -msgid "Object does not belong to a trusted domain" -msgstr "SID не соответствует ни одному доверенному домену" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "SSSD не удалось определить для объекта корректный SID" - -msgid "Ambiguous search, user domain was not specified" -msgstr "Неоднозначные параметры поиска: не указан домен пользователя" - -msgid "Trusted domain did not return a unique object" -msgstr "Доверенным доменом не возвращён уникальный объект" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "Доверенным доменом не возвращён корректный SID объекта" - -msgid "trusted domain user not found" -msgstr "пользователь доверенного домена не найден" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "Не удалось получить список сборщиков мусора (GC) доверенного домена" - -msgid "CIFS credentials object" -msgstr "Объект учётных данных CIFS" +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" +"область (realm) или UPN-суффикс пересекается с пространством имён " +"доверенного домена" #, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "Ваши регистрационные данные отклонены сервером CIFS %(host)s" +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" +"запись \"%(owner)s %(rtype)s\" не прошла проверку DNSSEC на сервере %(ip)s" #, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "Не удалось установить соединение LSA с %(host)s. Сервер CIFS работает?" +msgid "removed attribute values from entry %(value)s" +msgstr "удалены значения атрибута из записи %(value)s" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "не удалось выполнить запрос, состояние HTTP %d" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "результат не найден в ответе XML-RPC\n" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "" +"Получить и вывести все атрибуты, возвращаемые сервером. Влияет на содержимое " +"результата исполнения команды." + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "в правом узле ({host}) не предусмотрена поддержка суффикса '{suff}'" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "правый узел не является узлом топологии: %(rightnode)s" + +msgid "role" +msgstr "Роль" + +msgid "roles" +msgstr "роли" + +msgid "roles to add" +msgstr "роли, которые следует добавить" + +msgid "roles to remove" +msgstr "роли, которые следует удалить" + +msgid "runAs groups" +msgstr "группы запуска от имени" + +msgid "runAs user" +msgstr "пользователь запуска от имени" + +msgid "runAs users" +msgstr "пользователи запуска от имени" + +#, python-format +msgid "salt value: %(err)s" +msgstr "значение соли: %(err)s" + +msgid "search for POSIX groups" +msgstr "Поиск POSIX-групп" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" +"Поиск групп с поддержкой внешних не IPA-участников из доверенных доменов" + +msgid "search for managed groups" +msgstr "Поиск управляемых групп" + +msgid "search for non-POSIX groups" +msgstr "Поиск не POSIX-групп" + +msgid "search for private groups" +msgstr "Поиск личных групп" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" +"список результатов поиска объектов миграции был усечён сервером; возможно, " +"процесс миграции не завершён\n" + +msgid "seconds" +msgstr "в секундах" + +msgid "segment" +msgstr "сегмент" + +msgid "segments" +msgstr "сегменты" + +msgid "self service permission" +msgstr "разрешение самообслуживания" + +msgid "self service permissions" +msgstr "разрешения самообслуживания" + +msgid "server" +msgstr "сервер" + +msgid "server role" +msgstr "роль сервера" + +msgid "server roles" +msgstr "роли сервера" + +msgid "servers" +msgstr "серверы" + +msgid "service" +msgstr "служба" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" +"для категории служб нельзя установить значение \"all\", когда имеются " +"разрешённые службы" + +msgid "service delegation rule" +msgstr "правило делегирования служб" + +msgid "service delegation rules" +msgstr "правила делегирования служб" + +msgid "service delegation target" +msgstr "цель делегирования служб" + +msgid "service delegation targets" +msgstr "цели делегирования служб" + +msgid "service delegation targets to add" +msgstr "цели делегирования служб, которые следует добавить" + +msgid "service delegation targets to remove" +msgstr "цели делегирования служб, которые следует удалить" + +msgid "services" +msgstr "службы" + +msgid "services cannot be added when service category='all'" +msgstr "невозможно добавить службы, когда категория служб=\"all\"" + +msgid "services to add" +msgstr "cлужбы, которые следует добавить" + +msgid "services to remove" +msgstr "службы, которые следует удалить" + +msgid "setting Authoritative nameserver" +msgstr "установка полномочного сервера имён" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "" +"не должно быть именем домена с подстановочными знаками (RFC 4592, раздел 4)" + +msgid "sidgen_was_run" +msgstr "sidgen_was_run" + +msgid "single label {}s are not supported" +msgstr "поддержка одноуровневых доменов {}s не предусмотрена" + +msgid "skip reverse DNS detection" +msgstr "Игнорировать обратное определение DNS" + +msgid "sn is required" +msgstr "следует указать sn" + +msgid "stage user" +msgstr "неподтверждённый пользователь" + +msgid "stage users" +msgstr "неподтверждённые пользователи" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" +"использование типа альтернативного имени субъекта %s запрещено для учётных " +"записей, которые не относятся к пользователям" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" +"использование типа альтернативного имени субъекта %s запрещено для учётных " +"записей пользователей" + +msgid "subtree and type are mutually exclusive" +msgstr "subtree и type нельзя использовать вместе" + +msgid "sudo command" +msgstr "команда Sudo" + +msgid "sudo command group" +msgstr "группа команд Sudo" + +msgid "sudo command groups" +msgstr "группы команд Sudo" + +msgid "sudo command groups to add" +msgstr "группы команд Sudo, которые следует добавить" + +msgid "sudo command groups to remove" +msgstr "группы команд Sudo, которые следует удалить" + +msgid "sudo commands" +msgstr "команды Sudo" + +msgid "sudo commands to add" +msgstr "команды Sudo, которые следует добавить" + +msgid "sudo commands to remove" +msgstr "команды Sudo, которые следует удалить" + +msgid "sudo rule" +msgstr "правило Sudo" + +msgid "sudo rules" +msgstr "правила Sudo" + +msgid "suffix" +msgstr "суффикс" + +msgid "suffixes" +msgstr "суффиксы" + +msgid "system ID View" +msgstr "системное представление ID" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" +"невозможно переопределить системные объекты IPA (например, системные группы, " +"личные группы пользователей)" + +msgid "target and targetgroup are mutually exclusive" +msgstr "target и targetgroup нельзя использовать вместе" #, python-format msgid "" "the IPA server and the remote domain cannot share the same NetBIOS name: %s" msgstr "IPA-сервер и удалённый домен не могут иметь общее имя NetBIOS: %s" +msgid "the certificate with serial number " +msgstr "сертификат с серийным номером" + +msgid "the entry was deleted while being modified" +msgstr "запись была удалена во время внесения изменений" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "значение не подходит под формат времени \"ГГГГММДДЧЧММСС\"" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" +"должен быть указан хотя бы один спецификатор записи назначения (например, " +"target, targetfilter, attrs)" + +msgid "this option has been deprecated." +msgstr "этот параметр больше не поддерживается." + +msgid "this option is deprecated" +msgstr "это опция устарела" + +msgid "too many '@' characters" +msgstr "слишком много символов @" + +msgid "trust" +msgstr "отношение доверия" + +msgid "trust configuration" +msgstr "конфигурация отношений доверия" + +msgid "trust domain" +msgstr "надёжный домен" + +msgid "trust domains" +msgstr "надёжные домены" + +msgid "trust type" +msgstr "тип отношения доверия" + +msgid "trusted domain object" +msgstr "объект доверенного домена" + +msgid "trusted domain object not found" +msgstr "объект доверенного домена не найден" + +msgid "trusted domain user not found" +msgstr "пользователь доверенного домена не найден" + +msgid "trusts" +msgstr "отношения доверия" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "" +"Тип объекта IPA (user (пользователь), group (группа), host (узел), hostgroup " +"(группа узлов), service (служба), netgroup (сетевая группа))" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "type, filter, subtree и targetgroup нельзя использовать вместе" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "неизвестная команда \"%(name)s\"" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "%(server)s сообщает о неизвестной ошибке %(code)d: %(error)s" + +msgid "unsupported functional level" +msgstr "неподдерживаемый функциональный уровень" + +msgid "unsupported trust type" +msgstr "неподдерживаемый тип отношения доверия" + +msgid "url" +msgstr "адрес" + +msgid "user" +msgstr "пользователь" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "пользователь \"%s\" уже активен" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" +"для категории пользователей нельзя установить значение \"all\", когда " +"имеются разрешённые пользователи" + +msgid "users" +msgstr "пользователи" + +msgid "users and hosts cannot both be set" +msgstr "невозможно одновременно указать пользователей и узлы" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" +"невозможно добавить пользователей, когда категория запуска от имени " +"пользователей или запуска от имени групп=\"all\"" + +msgid "users cannot be added when user category='all'" +msgstr "" +"невозможно добавить пользователей, когда категория пользователей=\"all\"" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "невозможно указать пользователей, когда тип \"hostgroup\"" + +msgid "users to add" +msgstr "пользователи, которых следует добавить" + +msgid "users to exclude from migration" +msgstr "пользователи, которых следует исключить из миграции" + +msgid "users to remove" +msgstr "пользователи, которых следует удалить" + +msgid "value" +msgstr "значение" + +msgid "vault" +msgstr "хранилище" + +msgid "vaultcontainer" +msgstr "контейнер хранилищ" + +msgid "vaultcontainers" +msgstr "контейнеры хранилищ" + +msgid "vaults" +msgstr "хранилища" + #, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" -"Отношение доверия с {ipa_domain} с неподдерживаемым типом {trust_type} уже " -"существует. Пожалуйста, удалите его вручную на стороне DC AD." +msgid "{attr}: no such attribute" +msgstr "{attr}: атрибут не найден" -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" -"Главный IPA-сервер ответил отказом на запросы по утверждению отношений " -"доверия от DC AD следующее количество раз: %(count)d. Скорее всего, DC AD " -"была установлена связь с репликой, на которой ещё не выполнена репликация " -"данных об отношениях доверия. Кроме того, проверьте, может ли DNS AD " -"определять по записям SRV %(records)s корректный IPA-сервер." - -msgid "Credentials" -msgstr "Учётные данные" - -msgid "Missing credentials for cross-forest communication" -msgstr "Отсутствуют учётные данные для обмена данными между лесами" - -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" - -#, python-format -msgid "must equal %r" -msgstr "должно равняться %r" - -msgid "Hello world" -msgstr "Привет всем!" - -#, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "%s: прокси-сервер RADIUS не найден" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "Прокси-сервер RADIUS с именем \"%s\" уже существует" - -msgid "must be at least 1" -msgstr "должно быть не меньше 1" - -msgid "Out of memory\n" -msgstr "Недостаточно памяти\n" - -msgid "Warning unrecognized encryption type.\n" -msgstr "Предупреждение: неопознанный тип шифрования.\n" - -msgid "Warning unrecognized salt type.\n" -msgstr "Предупреждение: неопознанный тип соли.\n" - -msgid "Out of memory!?\n" -msgstr "Недостаточно памяти!?\n" - -msgid "Enctype comparison failed!\n" -msgstr "Ошибка сравнения значений типа шифрования!\n" - -#, fuzzy -msgid "Password is too long!\n" -msgstr "Размер журнала паролей" - -msgid "Failed to create random key!\n" -msgstr "Не удалось создать случайный ключ!\n" - -msgid "Failed to create key!\n" -msgstr "Не удалось создать ключ!\n" - -msgid "Bad or unsupported salt type.\n" -msgstr "Недопустимый или неподдерживаемый тип соли.\n" - -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "Не удалось инициализировать подключение к LDAP-серверу %1$s: %2$s\n" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "Не удалось задать LDAP_OPT_PROTOCOL_VERSION\n" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "Не удалось задать LDAP_OPT_X_SASL_NOCANON\n" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "Не удалось задать LDAP_OPT_X_TLS_CACERTFILE\n" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "Не удалось задать LDAP_OPT_X_TLS_REQUIRE_CERT\n" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "Не удалось задать LDAP_OPT_X_TLS_PROTOCOL_MIN\n" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "Не удалось инициализировать сеанс STARTTLS\n" +#, python-brace-format +msgid "{role}: role not found" +msgstr "{role}: роль не найдена" #~ msgid "" #~ "\n" @@ -32347,212 +29771,6 @@ msgstr "Не удалось инициализировать сеанс STARTTLS #~ "домена AD.\n" #~ "\n" -#~ msgid "Maximum password life must be greater than minimum." -#~ msgstr "Максимальный срок жизни пароля должен быть больше минимального." - -#~ msgid "" -#~ "\n" -#~ "Sudo Rules\n" -#~ "\n" -#~ "Sudo (su \"do\") allows a system administrator to delegate authority to\n" -#~ "give certain users (or groups of users) the ability to run some (or all)\n" -#~ "commands as root or another user while providing an audit trail of the\n" -#~ "commands and their arguments.\n" -#~ "\n" -#~ "IPA provides a means to configure the various aspects of Sudo:\n" -#~ " Users: The user(s)/group(s) allowed to invoke Sudo.\n" -#~ " Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -#~ "Sudo.\n" -#~ " Allow Command: The specific command(s) permitted to be run via Sudo.\n" -#~ " Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -#~ " RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -#~ "invoked with.\n" -#~ " RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -#~ " Options: The various Sudoers Options that can modify Sudo's behavior.\n" -#~ "\n" -#~ "An order can be added to a sudorule to control the order in which they\n" -#~ "are evaluated (if the client supports it). This order is an integer and\n" -#~ "must be unique.\n" -#~ "\n" -#~ "IPA provides a designated binddn to use with Sudo located at:\n" -#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -#~ "\n" -#~ "To enable the binddn run the following command to set the password:\n" -#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." -#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -#~ "dc=example,dc=com\n" -#~ "\n" -#~ "EXAMPLES:\n" -#~ "\n" -#~ " Create a new rule:\n" -#~ " ipa sudorule-add readfiles\n" -#~ "\n" -#~ " Add sudo command object and add it as allowed command in the rule:\n" -#~ " ipa sudocmd-add /usr/bin/less\n" -#~ " ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -#~ "\n" -#~ " Add a host to the rule:\n" -#~ " ipa sudorule-add-host readfiles --hosts server.example.com\n" -#~ "\n" -#~ " Add a user to the rule:\n" -#~ " ipa sudorule-add-user readfiles --users jsmith\n" -#~ "\n" -#~ " Add a special Sudo rule for default Sudo server configuration:\n" -#~ " ipa sudorule-add defaults\n" -#~ "\n" -#~ " Set a default Sudo option:\n" -#~ " ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -#~ msgstr "" -#~ "\n" -#~ "Правила Sudo\n" -#~ "\n" -#~ "Sudo (su \"do\") позволяет системному администратору делегировать " -#~ "полномочия, чтобы дать определённым пользователям (или группам " -#~ "пользователей) возможность выполнять некоторые (или все) команды от имени " -#~ "пользователя \"root\" или другого пользователя, вместе с тем предоставляя " -#~ "журнал аудита команд и их аргументов.\n" -#~ "\n" -#~ "IPA предоставляет возможности настройки различных аспектов Sudo:\n" -#~ " Users: пользователь (пользователи) или группа (группы), которые могут " -#~ "вызывать Sudo.\n" -#~ " Hosts: узел (узлы) или группа (группы) узлов, пользователи которых " -#~ "могут вызывать Sudo.\n" -#~ " Allow Command: конкретная команда (команды), которые разрешены для " -#~ "выполнения с помощью Sudo. \n" -#~ " Deny Command: конкретная команда (команды), которые запрещены для " -#~ "выполнения с помощью Sudo.\n" -#~ " RunAsUser: пользователь (пользователи) или группа (группы) " -#~ "пользователей, от имени которых Sudo будет выполнять команды.\n" -#~ " RunAsGroup: группа (группы), от имени которых Sudo будет выполнять " -#~ "команды.\n" -#~ " Options: различные параметры sudoers (участники Sudo), которые могут " -#~ "изменить поведение Sudo.\n" -#~ "\n" -#~ "Правилу Sudo можно добавить порядок, который будет руководить порядком " -#~ "обработки записей (если такой порядок предусмотрен на клиентской " -#~ "стороне). Порядок определяется числовым индексом (целое число), который " -#~ "не должен повторяться.\n" -#~ "\n" -#~ "IPA предусматривает специальную привязку DN (binddn) для использования с " -#~ "Sudo:\n" -#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -#~ "\n" -#~ "Чтобы включить binddn, выполните следующую команду для установки пароля:\n" -#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." -#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -#~ "dc=example,dc=com\n" -#~ "\n" -#~ "ПРИМЕРЫ:\n" -#~ "\n" -#~ " Создать новое правило:\n" -#~ " ipa sudorule-add readfiles\n" -#~ "\n" -#~ " Добавить объект команды Sudo и добавить его в правило в качестве " -#~ "разрешённой команды:\n" -#~ " ipa sudocmd-add /usr/bin/less\n" -#~ " ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -#~ "\n" -#~ " Добавить узел в правило:\n" -#~ " ipa sudorule-add-host readfiles --hosts server.example.com\n" -#~ "\n" -#~ " Добавить пользователя в правило:\n" -#~ " ipa sudorule-add-user readfiles --users jsmith\n" -#~ "\n" -#~ " Добавить специальное правило Sudo для конфигурации сервера Sudo по " -#~ "умолчанию:\n" -#~ " ipa sudorule-add defaults\n" -#~ "\n" -#~ " Указать параметр Sudo по умолчанию:\n" -#~ " ipa sudorule-add-option defaults --sudooption '!authenticate'\n" - -#~ msgid "" -#~ "\n" -#~ "Sudo Rules\n" -#~ "\n" -#~ "Sudo (su \"do\") allows a system administrator to delegate authority to\n" -#~ "give certain users (or groups of users) the ability to run some (or all)\n" -#~ "commands as root or another user while providing an audit trail of the\n" -#~ "commands and their arguments.\n" -#~ "\n" -#~ "IPA provides a means to configure the various aspects of Sudo:\n" -#~ " Users: The user(s)/group(s) allowed to invoke Sudo.\n" -#~ " Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -#~ "Sudo.\n" -#~ " Allow Command: The specific command(s) permitted to be run via Sudo.\n" -#~ " Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -#~ " RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -#~ "invoked with.\n" -#~ " RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -#~ " Options: The various Sudoers Options that can modify Sudo's behavior.\n" -#~ "\n" -#~ "An order can be added to a sudorule to control the order in which they\n" -#~ "are evaluated (if the client supports it). This order is an integer and\n" -#~ "must be unique.\n" -#~ "\n" -#~ "IPA provides a designated binddn to use with Sudo located at:\n" -#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -#~ "\n" -#~ "To enable the binddn run the following command to set the password:\n" -#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." -#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -#~ "dc=example,dc=com\n" -#~ "\n" -#~ "For more information, see the IPA Documentation to Sudo.\n" -#~ msgstr "" -#~ "\n" -#~ "Правила Sudo\n" -#~ "\n" -#~ "Sudo (su \"do\") позволяет системному администратору делегировать " -#~ "полномочия, чтобы дать определённым пользователям (или группам " -#~ "пользователей) возможность выполнять некоторые (или все) команды от имени " -#~ "пользователя \"root\" или другого пользователя, вместе с тем предоставляя " -#~ "журнал аудита команд и их аргументов.\n" -#~ "\n" -#~ "IPA предоставляет возможности настройки различных аспектов Sudo:\n" -#~ " Users: пользователь (пользователи) или группа (группы), которые могут " -#~ "вызывать Sudo.\n" -#~ " Hosts: узел (узлы) или группа (группы) узлов, пользователи которых " -#~ "могут вызывать Sudo.\n" -#~ " Allow Command: конкретная команда (команды), которые разрешены для " -#~ "выполнения с помощью Sudo. \n" -#~ " Deny Command: конкретная команда (команды), которые запрещены для " -#~ "выполнения с помощью Sudo.\n" -#~ " RunAsUser: пользователь (пользователи) или группа (группы) " -#~ "пользователей, от имени которых Sudo будет выполнять команды.\n" -#~ " RunAsGroup: группа (группы), от имени которых Sudo будет выполнять " -#~ "команды.\n" -#~ " Options: различные параметры sudoers (участники Sudo), которые могут " -#~ "изменить поведение Sudo.\n" -#~ "\n" -#~ "Правилу Sudo можно добавить порядок, который будет руководить порядком " -#~ "обработки записей (если такой порядок предусмотрен на клиентской " -#~ "стороне). Порядок определяется числовым индексом (целое число), который " -#~ "не должен повторяться.\n" -#~ "\n" -#~ "IPA предусматривает специальную привязку DN (binddn) для использования с " -#~ "Sudo:\n" -#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -#~ "\n" -#~ "Чтобы включить binddn, выполните следующую команду для установки пароля:\n" -#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." -#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -#~ "dc=example,dc=com\n" -#~ "\n" -#~ "Дополнительные сведения приведены в документации IPA по Sudo.\n" - -#~ msgid "" -#~ "\n" -#~ "To enable the binddn run the following command to set the password:\n" -#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." -#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -#~ "dc=example,dc=com\n" -#~ msgstr "" -#~ "\n" -#~ "Чтобы включить binddn, выполните следующую команду для установки пароля:\n" -#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." -#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -#~ "dc=example,dc=com\n" - #~ msgid "" #~ "\n" #~ " Delete a CA.\n" @@ -32771,6 +29989,209 @@ msgstr "Не удалось инициализировать сеанс STARTTLS #~ "\n" #~ "Дополнительные сведения приведены в документации IPA по Sudo.\n" +#~ msgid "" +#~ "\n" +#~ "Sudo Rules\n" +#~ "\n" +#~ "Sudo (su \"do\") allows a system administrator to delegate authority to\n" +#~ "give certain users (or groups of users) the ability to run some (or all)\n" +#~ "commands as root or another user while providing an audit trail of the\n" +#~ "commands and their arguments.\n" +#~ "\n" +#~ "IPA provides a means to configure the various aspects of Sudo:\n" +#~ " Users: The user(s)/group(s) allowed to invoke Sudo.\n" +#~ " Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +#~ "Sudo.\n" +#~ " Allow Command: The specific command(s) permitted to be run via Sudo.\n" +#~ " Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +#~ " RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +#~ "invoked with.\n" +#~ " RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +#~ " Options: The various Sudoers Options that can modify Sudo's behavior.\n" +#~ "\n" +#~ "An order can be added to a sudorule to control the order in which they\n" +#~ "are evaluated (if the client supports it). This order is an integer and\n" +#~ "must be unique.\n" +#~ "\n" +#~ "IPA provides a designated binddn to use with Sudo located at:\n" +#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +#~ "\n" +#~ "To enable the binddn run the following command to set the password:\n" +#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." +#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +#~ "dc=example,dc=com\n" +#~ "\n" +#~ "EXAMPLES:\n" +#~ "\n" +#~ " Create a new rule:\n" +#~ " ipa sudorule-add readfiles\n" +#~ "\n" +#~ " Add sudo command object and add it as allowed command in the rule:\n" +#~ " ipa sudocmd-add /usr/bin/less\n" +#~ " ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +#~ "\n" +#~ " Add a host to the rule:\n" +#~ " ipa sudorule-add-host readfiles --hosts server.example.com\n" +#~ "\n" +#~ " Add a user to the rule:\n" +#~ " ipa sudorule-add-user readfiles --users jsmith\n" +#~ "\n" +#~ " Add a special Sudo rule for default Sudo server configuration:\n" +#~ " ipa sudorule-add defaults\n" +#~ "\n" +#~ " Set a default Sudo option:\n" +#~ " ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +#~ msgstr "" +#~ "\n" +#~ "Правила Sudo\n" +#~ "\n" +#~ "Sudo (su \"do\") позволяет системному администратору делегировать " +#~ "полномочия, чтобы дать определённым пользователям (или группам " +#~ "пользователей) возможность выполнять некоторые (или все) команды от имени " +#~ "пользователя \"root\" или другого пользователя, вместе с тем предоставляя " +#~ "журнал аудита команд и их аргументов.\n" +#~ "\n" +#~ "IPA предоставляет возможности настройки различных аспектов Sudo:\n" +#~ " Users: пользователь (пользователи) или группа (группы), которые могут " +#~ "вызывать Sudo.\n" +#~ " Hosts: узел (узлы) или группа (группы) узлов, пользователи которых " +#~ "могут вызывать Sudo.\n" +#~ " Allow Command: конкретная команда (команды), которые разрешены для " +#~ "выполнения с помощью Sudo. \n" +#~ " Deny Command: конкретная команда (команды), которые запрещены для " +#~ "выполнения с помощью Sudo.\n" +#~ " RunAsUser: пользователь (пользователи) или группа (группы) " +#~ "пользователей, от имени которых Sudo будет выполнять команды.\n" +#~ " RunAsGroup: группа (группы), от имени которых Sudo будет выполнять " +#~ "команды.\n" +#~ " Options: различные параметры sudoers (участники Sudo), которые могут " +#~ "изменить поведение Sudo.\n" +#~ "\n" +#~ "Правилу Sudo можно добавить порядок, который будет руководить порядком " +#~ "обработки записей (если такой порядок предусмотрен на клиентской " +#~ "стороне). Порядок определяется числовым индексом (целое число), который " +#~ "не должен повторяться.\n" +#~ "\n" +#~ "IPA предусматривает специальную привязку DN (binddn) для использования с " +#~ "Sudo:\n" +#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +#~ "\n" +#~ "Чтобы включить binddn, выполните следующую команду для установки пароля:\n" +#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." +#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +#~ "dc=example,dc=com\n" +#~ "\n" +#~ "ПРИМЕРЫ:\n" +#~ "\n" +#~ " Создать новое правило:\n" +#~ " ipa sudorule-add readfiles\n" +#~ "\n" +#~ " Добавить объект команды Sudo и добавить его в правило в качестве " +#~ "разрешённой команды:\n" +#~ " ipa sudocmd-add /usr/bin/less\n" +#~ " ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +#~ "\n" +#~ " Добавить узел в правило:\n" +#~ " ipa sudorule-add-host readfiles --hosts server.example.com\n" +#~ "\n" +#~ " Добавить пользователя в правило:\n" +#~ " ipa sudorule-add-user readfiles --users jsmith\n" +#~ "\n" +#~ " Добавить специальное правило Sudo для конфигурации сервера Sudo по " +#~ "умолчанию:\n" +#~ " ipa sudorule-add defaults\n" +#~ "\n" +#~ " Указать параметр Sudo по умолчанию:\n" +#~ " ipa sudorule-add-option defaults --sudooption '!authenticate'\n" + +#~ msgid "" +#~ "\n" +#~ "Sudo Rules\n" +#~ "\n" +#~ "Sudo (su \"do\") allows a system administrator to delegate authority to\n" +#~ "give certain users (or groups of users) the ability to run some (or all)\n" +#~ "commands as root or another user while providing an audit trail of the\n" +#~ "commands and their arguments.\n" +#~ "\n" +#~ "IPA provides a means to configure the various aspects of Sudo:\n" +#~ " Users: The user(s)/group(s) allowed to invoke Sudo.\n" +#~ " Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +#~ "Sudo.\n" +#~ " Allow Command: The specific command(s) permitted to be run via Sudo.\n" +#~ " Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +#~ " RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +#~ "invoked with.\n" +#~ " RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +#~ " Options: The various Sudoers Options that can modify Sudo's behavior.\n" +#~ "\n" +#~ "An order can be added to a sudorule to control the order in which they\n" +#~ "are evaluated (if the client supports it). This order is an integer and\n" +#~ "must be unique.\n" +#~ "\n" +#~ "IPA provides a designated binddn to use with Sudo located at:\n" +#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +#~ "\n" +#~ "To enable the binddn run the following command to set the password:\n" +#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." +#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +#~ "dc=example,dc=com\n" +#~ "\n" +#~ "For more information, see the IPA Documentation to Sudo.\n" +#~ msgstr "" +#~ "\n" +#~ "Правила Sudo\n" +#~ "\n" +#~ "Sudo (su \"do\") позволяет системному администратору делегировать " +#~ "полномочия, чтобы дать определённым пользователям (или группам " +#~ "пользователей) возможность выполнять некоторые (или все) команды от имени " +#~ "пользователя \"root\" или другого пользователя, вместе с тем предоставляя " +#~ "журнал аудита команд и их аргументов.\n" +#~ "\n" +#~ "IPA предоставляет возможности настройки различных аспектов Sudo:\n" +#~ " Users: пользователь (пользователи) или группа (группы), которые могут " +#~ "вызывать Sudo.\n" +#~ " Hosts: узел (узлы) или группа (группы) узлов, пользователи которых " +#~ "могут вызывать Sudo.\n" +#~ " Allow Command: конкретная команда (команды), которые разрешены для " +#~ "выполнения с помощью Sudo. \n" +#~ " Deny Command: конкретная команда (команды), которые запрещены для " +#~ "выполнения с помощью Sudo.\n" +#~ " RunAsUser: пользователь (пользователи) или группа (группы) " +#~ "пользователей, от имени которых Sudo будет выполнять команды.\n" +#~ " RunAsGroup: группа (группы), от имени которых Sudo будет выполнять " +#~ "команды.\n" +#~ " Options: различные параметры sudoers (участники Sudo), которые могут " +#~ "изменить поведение Sudo.\n" +#~ "\n" +#~ "Правилу Sudo можно добавить порядок, который будет руководить порядком " +#~ "обработки записей (если такой порядок предусмотрен на клиентской " +#~ "стороне). Порядок определяется числовым индексом (целое число), который " +#~ "не должен повторяться.\n" +#~ "\n" +#~ "IPA предусматривает специальную привязку DN (binddn) для использования с " +#~ "Sudo:\n" +#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +#~ "\n" +#~ "Чтобы включить binddn, выполните следующую команду для установки пароля:\n" +#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." +#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +#~ "dc=example,dc=com\n" +#~ "\n" +#~ "Дополнительные сведения приведены в документации IPA по Sudo.\n" + +#~ msgid "" +#~ "\n" +#~ "To enable the binddn run the following command to set the password:\n" +#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." +#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +#~ "dc=example,dc=com\n" +#~ msgstr "" +#~ "\n" +#~ "Чтобы включить binddn, выполните следующую команду для установки пароля:\n" +#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." +#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +#~ "dc=example,dc=com\n" + #~ msgid "CSR Generation Profile to use" #~ msgstr "Профиль создания CSR, который следует использовать" @@ -32795,6 +30216,9 @@ msgstr "Не удалось инициализировать сеанс STARTTLS #~ msgid "Generation rule \"%(rulename)s\" is missing the \"rule\" key" #~ msgstr "В правиле создания \"%(rulename)s\" отсутствует ключ \"rule\"" +#~ msgid "Maximum password life must be greater than minimum." +#~ msgstr "Максимальный срок жизни пароля должен быть больше минимального." + #~ msgid "Name of CSR generation profile (if not the same as profile_id)" #~ msgstr "Имя профиля создания CSR (если не совпадает с profile_id)" diff --git a/po/sk.po b/po/sk.po index 54b23921b..7af968df2 100644 --- a/po/sk.po +++ b/po/sk.po @@ -14,14219 +14,23 @@ msgstr "" "Plural-Forms: nplurals=3; plural=(n==1) ? 0 : (n>=2 && n<=4) ? 1 : 2\n" "X-Generator: Zanata 4.6.2\n" -#, fuzzy, c-format -msgid "cannot open configuration file %s\n" -msgstr "Konfigurácia repliky" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, c-format -msgid "out of memory\n" -msgstr "" - -#, fuzzy, c-format -msgid "read error\n" -msgstr "Chyba formátu" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to open keytab\n" -msgstr "Zlyhalo pridanie" - -#, fuzzy, c-format -msgid "principal not found\n" -msgstr "Nenašlo sa" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -msgid "realm not found\n" -msgstr "Nenašlo sa" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -#, fuzzy -msgid "Realm name" -msgstr "Premenovať" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, c-format -msgid "Out of memory \n" -msgstr "" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -msgid "SASL Bind failed\n" -msgstr "" - -#, fuzzy, c-format -msgid "Operation failed: %s\n" -msgstr "Vytvorenie záznamu zlyhalo." - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Out of Memory!\n" -msgstr "" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to get keytab!\n" -msgstr "Zlyhalo pridanie" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "Heslá sa nezhodujú!" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Output debug info" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -#, fuzzy -msgid "Server Name" -msgstr "Názov služby" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -#, fuzzy -msgid "LDAP DN" -msgstr "LDAP URI" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -#, fuzzy -msgid "LDAP password" -msgstr "Heslo" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -#, fuzzy -msgid "Path to the IPA CA certificate" -msgstr "CA certifikát" - -#, fuzzy -msgid "IPA CA certificate" -msgstr "CA certifikát" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -#, fuzzy -msgid "Enter LDAP password" -msgstr "Používateľské heslo" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" - -#, fuzzy, c-format -#| msgid "Advertised by servers" -msgid "Discovered server %s\n" -msgstr "Oznamované servermi" - -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Using provided server %s\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -#, fuzzy -msgid "New Principal Password" -msgstr "Nové heslo" - -#, fuzzy -msgid "Verify Principal Password" -msgstr "Overiť heslo" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to open Keytab\n" -msgstr "Zlyhalo pridanie" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to get keytab\n" -msgstr "Zlyhalo pridanie" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Out of memory!\n" -msgstr "" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "" - -#, c-format -msgid "Out of memory!" -msgstr "" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "" - -#, c-format -msgid "No values for %s" -msgstr "" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "" - -#, fuzzy, c-format -msgid "Host is already joined.\n" -msgstr "Táto položka bola už deaktivovaná" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" - -#, c-format -msgid "json_dumps() failed\n" -msgstr "" - -#, fuzzy, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "Nevalídna JSON-RPC požiadavka: %(error)s" - -#, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#, fuzzy, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "Bez odpovede" - -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" - -#, c-format -msgid "fork() failed\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "" - -#, c-format -msgid "child exited with %d\n" -msgstr "" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "" - -msgid "Quiet mode. Only errors are displayed." -msgstr "" - -msgid "Unenroll this host from IPA server" -msgstr "" - -msgid "Hostname of this server" -msgstr "" - -#, fuzzy -msgid "hostname" -msgstr "Priezvisko" - -#, fuzzy -msgid "IPA Server to use" -msgstr "IPA Server" - -msgid "Specifies where to store keytab information." -msgstr "" - -#, fuzzy -msgid "filename" -msgstr "Premenovať" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" - -msgid "LDAP password (if not using Kerberos)" -msgstr "" - -#, fuzzy -msgid "password" -msgstr "Heslo" - -#, fuzzy -msgid "LDAP basedn" -msgstr "LDAP schéma" - -msgid "basedn" -msgstr "" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "" - -msgid "Failed to add" -msgstr "Zlyhalo pridanie" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" - -msgid "Unrevoked" -msgstr "" - -#, fuzzy -msgid "Error" -msgstr "IPA chyba" - -#, fuzzy -msgid "Input filename" -msgstr "Názov pravidla" - -#, fuzzy -msgid "File to load the certificate from." -msgstr "Odstrániť certifikačný profil" - -msgid "cannot specify both raw certificate and file" -msgstr "" - -msgid "Input file" -msgstr "" - -#, fuzzy -msgid "File to load the certificate from" -msgstr "Odstrániť certifikačný profil" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "Konfigurácia profilu bola uložená do súboru '%(file)s'" - -#, fuzzy -msgid "Split DNS record to parts" -msgstr "IPA DNS záznamy" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "Prosím vyberte typ DNS záznamu" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "Najbežnejšie typy záznamov pre tento typ zóny sú: %s\n" - -msgid "DNS resource record type" -msgstr "Typ DNS záznamu" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "Nesprávny alebo nepodporovaný typ. Povolené hodnoty sú: %s" - -#, fuzzy -msgid "No option to modify specific record provided." -msgstr "Nebola poskytnutá žiadna voľba pre zmazanie špecifického záznamu" - -msgid "Current DNS record contents:\n" -msgstr "Aktuálny obsah DNS záznamu:\n" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "Upraviť %(name)s '%(value)s'?" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" -"Nebola zadaná ani voľba --del-all a ani voľby pre zmazanie špecifického " -"záznamu.\n" -"Príkaz help môže byť použitý pre zobrazenie podporovaných typov záznamov." - -msgid "No option to delete specific record provided." -msgstr "Nebola poskytnutá žiadna voľba pre zmazanie špecifického záznamu" - -msgid "Delete all?" -msgstr "Odstrániť všetko?" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "Odstrániť %(name)s '%(value)s'?" - -msgid "Server will check DNS forwarder(s)." -msgstr "Server skontroluje DNS forwarder(y)." - -msgid "This may take some time, please wait ..." -msgstr "Toto môže trvať nejaký čas, prosím čakajte ..." - -#, fuzzy -msgid "DNS forwarder" -msgstr "DNS forward zóna" - -msgid "file to store DNS records in nsupdate format" -msgstr "" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "Certifikát(y) sú uložené v súbore '%(file)s'" - -msgid "Servers details:" -msgstr "Detaily serverov:" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "Odstraňovanie %(servers)s z replikačnej topológie, prosím čakajte..." - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "Topológia je odpojená" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "Server %(srv)s nemôže kontaktovať servery: %(replicas)s" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -msgid "Delete a user" -msgstr "Odstrániť používateľa" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - -msgid "maps not connected to /etc/auto.master:" -msgstr "" - -msgid "Import automount files for a specific location." -msgstr "" - -msgid "Master file" -msgstr "" - -msgid "Automount master file." -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" - -#, python-format -msgid "File %(file)s not found" -msgstr "Súbor %(file)s nenájdený" - -#, python-format -msgid "key %(key)s already exists" -msgstr "kľúč %(key)s už existuje" - -#, python-format -msgid "map %(map)s already exists" -msgstr "mapovanie %(map)s už existuje" - -#, fuzzy -msgid "Imported maps:" -msgstr "Importované kľúče:" - -#, python-format -msgid "Added %(map)s" -msgstr "Pridané %(map)s" - -msgid "Imported keys:" -msgstr "Importované kľúče:" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "Pridané %(src)s do %(dst)s" - -msgid "Ignored keys:" -msgstr "Ignorované kľúče:" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "Ignorované %(src)s do %(dst)s" - -#, fuzzy -msgid "Duplicate maps skipped:" -msgstr "Duplikované kľúče preskočené:" - -#, python-format -msgid "Skipped %(map)s" -msgstr "Preskočené %(map)s" - -msgid "Duplicate keys skipped:" -msgstr "Duplikované kľúče preskočené:" - -#, python-format -msgid "Skipped %(key)s" -msgstr "Preskočené %(key)s" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "Synchronizovať OTP token" - -msgid "User ID" -msgstr "ID používateľa" - -msgid "Password" -msgstr "Heslo" - -msgid "First Code" -msgstr "Prvý kód" - -msgid "Second Code" -msgstr "Druhý kód" - -msgid "Token ID" -msgstr "Token ID" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" -"\n" -"YubiKey Tokeny\n" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" -"\n" -"Spravovať YubiKey tokeny.\n" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" -"\n" -"PRÍKLADY:\n" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "Pridať nový YubiKey OTP token." - -msgid "YubiKey slot" -msgstr "YubiKey slot" - -msgid "No free YubiKey slot!" -msgstr "Žiadny voľný YubiKey slot!" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "Nie je možné čítať súbor '%(filename)s': %(exc)s" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "Nie je možné dekódovať súbor '%(filename)s': %(exc)s" - -msgid "Invalid credentials" -msgstr "Nesprávne prihlasovacie údaje" - -#, fuzzy -msgid "Create a new vault." -msgstr "Vytvoriť novú skupinu." - -#, fuzzy -msgid "Vault password" -msgstr "Zmeniť heslo" - -msgid "File containing the vault password" -msgstr "" - -msgid "File containing the vault public key" -msgstr "" - -msgid "Password can be specified only for symmetric vault" -msgstr "Heslo môže byť špecifikované len pre symetrický vault" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "Verejný kľúč môže byť špecifikovný len pre asymetrický vault" - -#, fuzzy -msgid "Password specified multiple times" -msgstr "Zmena hesla dokončená" - -msgid "Public key specified multiple times" -msgstr "" - -#, fuzzy -msgid "Missing vault public key" -msgstr "neplatný verejný SSH kľúč" - -#, fuzzy, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "Nesprávny alebo nepodporovaný typ. Povolené hodnoty sú: %s" - -msgid "Modify a vault." -msgstr "Upraviť vault." - -msgid "Change password" -msgstr "Zmeniť heslo" - -#, fuzzy -msgid "Old vault password" -msgstr "Zmeniť heslo" - -msgid "File containing the old vault password" -msgstr "" - -#, fuzzy -msgid "New vault password" -msgstr "Nové heslo" - -msgid "File containing the new vault password" -msgstr "" - -msgid "Old vault private key" -msgstr "" - -msgid "File containing the old vault private key" -msgstr "" - -msgid "File containing the new vault public key" -msgstr "" - -msgid "New public key specified multiple times" -msgstr "" - -#, fuzzy -msgid "Missing new vault public key" -msgstr "neplatný verejný SSH kľúč" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "" - -msgid "Binary data to archive" -msgstr "" - -msgid "File containing data to archive" -msgstr "" - -#, fuzzy -msgid "Override existing password" -msgstr "Potlačiť zdedené nastavenia" - -msgid "Input data specified multiple times" -msgstr "" - -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" - -msgid "Invalid vault type" -msgstr "" - -msgid "Retrieve a data from a vault." -msgstr "" - -msgid "File to store retrieved data" -msgstr "" - -msgid "Vault private key" -msgstr "" - -msgid "File containing the vault private key" -msgstr "" - -msgid "Data" -msgstr "" - -msgid "Private key specified multiple times" -msgstr "" - -msgid "Missing vault private key" -msgstr "" - -#, fuzzy, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "Deaktivované sudo pravidlá \"%s\"" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "Deaktivované sudo pravidlá \"%s\"" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "ACI name" -msgstr "ACI názov" - -msgid "Permission" -msgstr "Povolenie" - -#, fuzzy -msgid "Permission ACI grants access to" -msgstr "ACI používateľskej skupiny udeluje prístup k" - -msgid "User group" -msgstr "Používateľská skupina" - -msgid "User group ACI grants access to" -msgstr "ACI používateľskej skupiny udeluje prístup k" - -msgid "Permissions" -msgstr "Povolenia" - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Attributes to which the permission applies" -msgstr "" - -msgid "Attributes" -msgstr "Atribúty" - -msgid "Type" -msgstr "Typ" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" - -msgid "Member of" -msgstr "Členom" - -msgid "Member of a group" -msgstr "Členom skupiny" - -msgid "Filter" -msgstr "Filter" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "" - -msgid "Subtree" -msgstr "Podstrom" - -msgid "Subtree to apply ACI to" -msgstr "" - -msgid "Target group" -msgstr "Cieľová skupina" - -msgid "Group to apply ACI to" -msgstr "" - -msgid "Target your own entry (self)" -msgstr "" - -msgid "Apply ACI to your own entry (self)" -msgstr "" - -#, fuzzy -msgid "Create new ACI." -msgstr "Vytvoriť nové HBAC pravidlo" - -msgid "ACI prefix" -msgstr "" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" - -msgid "Test the ACI syntax but don't write anything" -msgstr "" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" - -msgid "User-friendly description of action performed" -msgstr "" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" - -#, fuzzy -msgid "Delete ACI." -msgstr "Odstrániť CA ACL." - -msgid "True means the operation was successful" -msgstr "" - -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" - -msgid "A string searched in all relevant object attributes" -msgstr "" - -msgid "Primary key only" -msgstr "" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" - -msgid "Number of entries returned" -msgstr "Počet vrátených položiek" - -#, fuzzy -msgid "True if not all results were returned" -msgstr "Počet vrátených položiek" - -#, fuzzy -msgid "Modify ACI." -msgstr "Upraviť HBAC pravidlo." - -#, fuzzy -msgid "Rename an ACI." -msgstr "Premenovať" - -msgid "New ACI name" -msgstr "Nový ACI názov" - -msgid "Display a single ACI given an ACI name." -msgstr "" - -msgid "Location of the ACI" -msgstr "Umiestnenie ACI" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Description" -msgstr "Popis" - -msgid "A description of this auto member rule" -msgstr "" - -#, fuzzy -msgid "Default (fallback) Group" -msgstr "Predvolená používateľská skupina" - -#, fuzzy -msgid "Default group for entries to land" -msgstr "Predvolená skupina pre nových používateľov nenájdená" - -#, fuzzy -msgid "Add an automember rule." -msgstr "Automember pravidlo" - -msgid "Automember Rule" -msgstr "Automember pravidlo" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - -#, fuzzy -msgid "Grouping Type" -msgstr "Typ skupiny" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -#, fuzzy -msgid "Attribute Key" -msgstr "Atribúty" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -#, fuzzy -msgid "Number of conditions added" -msgstr "Počet vrátených položiek" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -#, fuzzy -msgid "Default (fallback) group for entries to land" -msgstr "Predvolená skupina pre nových používateľov nenájdená" - -#, fuzzy -msgid "Display information about the default (fallback) automember groups." -msgstr "Zobraziť informácie o IPA lokalite." - -#, fuzzy -msgid "Delete an automember rule." -msgstr "Odstránené automember pravidlo \"%(value)s\"" - -msgid "List of deletions that failed" -msgstr "Zoznam odstránení, ktoré zlyhaly" - -#, fuzzy -msgid "Search for automember rules." -msgstr "Vyhľadať HBAC pravidlá." - -#, fuzzy -msgid "Modify an automember rule." -msgstr "Upraviť HBAC pravidlo." - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -#, fuzzy -msgid "Rights" -msgstr "Váha" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Users" -msgstr "Používatelia" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Hosts" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -#, fuzzy -msgid "Remove conditions from an automember rule." -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -msgid "Conditions that could not be removed" -msgstr "" - -#, fuzzy -msgid "Number of conditions removed" -msgstr "Počet vrátených položiek" - -#, fuzzy -msgid "Display information about an automember rule." -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" - -#, fuzzy -msgid "Key" -msgstr "Keytab" - -#, fuzzy -msgid "Automount key name." -msgstr "Automount" - -#, fuzzy -msgid "Mount information" -msgstr "Rôzne informácie" - -#, fuzzy -msgid "description" -msgstr "Popis" - -#, fuzzy -msgid "Location" -msgstr "lokalita" - -#, fuzzy -msgid "Automount location name." -msgstr "Názov IPA lokality" - -msgid "Map" -msgstr "" - -#, fuzzy -msgid "Automount map name." -msgstr "Automount" - -#, fuzzy -msgid "Create a new automount key." -msgstr "Vytvoriť novú skupinu." - -#, fuzzy -msgid "Delete an automount key." -msgstr "Odstrániť OTP token" - -msgid "Continuous mode: Don't stop on errors." -msgstr "" - -#, fuzzy -msgid "Search for an automount key." -msgstr "Vyhľadať OTP token" - -msgid "Time Limit" -msgstr "" - -msgid "Time limit of search in seconds" -msgstr "" - -msgid "Size Limit" -msgstr "" - -#, fuzzy -msgid "Maximum number of entries returned" -msgstr "Počet vrátených položiek" - -#, fuzzy -msgid "Modify an automount key." -msgstr "Upraviť vault." - -#, fuzzy -msgid "New mount information" -msgstr "Informácie o zamestnancovi" - -msgid "Rename" -msgstr "Premenovať" - -msgid "Rename the automount key object" -msgstr "" - -#, fuzzy -msgid "Display an automount key." -msgstr "Zobrazované meno" - -#, fuzzy -msgid "Create a new automount location." -msgstr "Vytvoriť novú skupinu." - -#, fuzzy -msgid "Delete an automount location." -msgstr "Odstrániť IPA lokalitu." - -#, fuzzy -msgid "Search for an automount location." -msgstr "Vyhľadať IPA lokalitu." - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" - -#, fuzzy -msgid "Display an automount location." -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "Generate automount files for a specific location." -msgstr "" - -#, fuzzy -msgid "Create a new automount map." -msgstr "Vytvoriť novú skupinu." - -#, fuzzy -msgid "Create a new indirect mount point." -msgstr "Vytvoriť novú skupinu." - -msgid "Mount point" -msgstr "" - -msgid "Parent map" -msgstr "" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" - -#, fuzzy -msgid "Delete an automount map." -msgstr "Odstrániť IPA lokalitu." - -#, fuzzy -msgid "Search for an automount map." -msgstr "Vyhľadať OTP token" - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" - -#, fuzzy -msgid "Modify an automount map." -msgstr "Upraviť skupinu." - -msgid "Display an automount map." -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" - -msgid "Nested Methods to execute" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "Vyhľadávanie existujúcich certifikátov." - -msgid "Match cn attribute in subject" -msgstr "" - -#, fuzzy -msgid "Reason" -msgstr "%(reason)s" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "Dôvod revokácie certifikátu (0-10)" - -msgid "minimum serial number" -msgstr "minimálne sériové číslo" - -msgid "maximum serial number" -msgstr "maximálne sériové číslo" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -#, fuzzy -msgid "Maximum number of certs returned" -msgstr "Počet vrátených položiek" - -#, fuzzy -msgid "Take a revoked certificate off hold." -msgstr "Revokácia certifikátu." - -msgid "Serial number" -msgstr "Sériové číslo" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -#, fuzzy -msgid "Submit a certificate signing request." -msgstr "Certifikačná požiadavka" - -msgid "CSR" -msgstr "" - -msgid "Principal" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Dictionary mapping variable name to value" -msgstr "" - -msgid "Revoke a certificate." -msgstr "Revokácia certifikátu." - -msgid "Retrieve an existing certificate." -msgstr "Získať existujúci certifikát." - -msgid "Output filename" -msgstr "" - -#, fuzzy -msgid "File to store the certificate in." -msgstr "Revokácia certifikátu." - -msgid "Check the status of a certificate signing request." -msgstr "" - -#, fuzzy -msgid "Request id" -msgstr "Povinné" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -#, fuzzy -msgid "Maximum username length" -msgstr "Maximálne sériové číslo" - -#, fuzzy -msgid "Home directory base" -msgstr "Domovský priečinok" - -msgid "Default location of home directories" -msgstr "" - -#, fuzzy -msgid "Default shell" -msgstr "Predvolená používateľská skupina" - -#, fuzzy -msgid "Default shell for new users" -msgstr "Predvolená skupina pre nových používateľov nenájdená" - -#, fuzzy -msgid "Default users group" -msgstr "Predvolená používateľská skupina" - -#, fuzzy -msgid "Default group for new users" -msgstr "Predvolená skupina pre nových používateľov nenájdená" - -msgid "Default e-mail domain" -msgstr "" - -msgid "Search time limit" -msgstr "" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" - -#, fuzzy -msgid "Search size limit" -msgstr "Rozsah vyhľadávania" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "" - -#, fuzzy -msgid "User search fields" -msgstr "Kategórie používateľov" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" - -msgid "Group search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" - -msgid "Enable migration mode" -msgstr "" - -#, fuzzy -msgid "Certificate Subject base" -msgstr "Certifikačná požiadavka" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "" - -msgid "Default group objectclasses" -msgstr "" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "" - -#, fuzzy -msgid "Default user objectclasses" -msgstr "Predvolená používateľská skupina" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" - -#, fuzzy -msgid "Password Expiration Notification (days)" -msgstr "Vypršanie hesla" - -msgid "Number of days's notice of impending password expiration" -msgstr "" - -#, fuzzy -msgid "Password plugin features" -msgstr "Politiky hesiel" - -msgid "Extra hashes to generate in password plug-in" -msgstr "" - -#, fuzzy -msgid "SELinux user map order" -msgstr "SELinux používateľ" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" - -#, fuzzy -msgid "Default SELinux user" -msgstr "SELinux používateľ" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" - -#, fuzzy -msgid "Default PAC types" -msgstr "Predvolené atribúty" - -msgid "Default types of PAC supported for services" -msgstr "" - -#, fuzzy -msgid "Default user authentication types" -msgstr "Typy autentifikácie používateľa" - -#, fuzzy -msgid "Default types of supported user authentication" -msgstr "Podporované typy autentifikácie používateľa" - -msgid "Modify configuration options." -msgstr "Upraviť konfiguračné voľby." - -msgid "Show the current configuration." -msgstr "Zobraziť konfiguračné voľby" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -#, fuzzy -msgid "Delegation name" -msgstr "Názov lokality" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "" - -msgid "Attributes to which the delegation applies" -msgstr "" - -#, fuzzy -msgid "Member user group" -msgstr "Členské skupiny" - -msgid "User group to apply delegation to" -msgstr "" - -#, fuzzy -msgid "Add a new delegation." -msgstr "Pridať novú IPA lokalitu." - -#, fuzzy -msgid "Delete a delegation." -msgstr "Odstrániť IPA lokalitu." - -#, fuzzy -msgid "Search for delegations." -msgstr "Vyhľadať IPA lokalitu." - -#, fuzzy -msgid "Modify a delegation." -msgstr "Upraviť skupinu." - -#, fuzzy -msgid "Display information about a delegation." -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "Global forwarders" -msgstr "Globálne forwardery" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Globálne forwardery. Vlastný port môže byť nastavený použítím štandardného " -"formátu \"IP_ADRESA port PORT\" pre každý forwarder " - -#, fuzzy -msgid "Forward policy" -msgstr "Politika hesiel" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" -"Globálna forward politika. Nastavením na \"none\" sa deaktivuje akýkoľvek " -"nastavený globálny forwarder." - -msgid "Allow PTR sync" -msgstr "Povoliť PTR synchronizáciu" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" - -msgid "Zone refresh interval" -msgstr "" - -msgid "Zone name" -msgstr "Názov zóny" - -msgid "Zone name (FQDN)" -msgstr "Názov zóny (FQDN)" - -msgid "Reverse zone IP network" -msgstr "" - -msgid "IP network to create reverse zone name from" -msgstr "" - -msgid "Active zone" -msgstr "Aktívna zóna" - -msgid "Is zone active?" -msgstr "Je zóna aktívna?" - -msgid "Zone forwarders" -msgstr "Zónové forwardery" - -#, fuzzy -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Globálne forwardery. Vlastný port môže byť nastavený použítím štandardného " -"formátu \"IP_ADRESA port PORT\" pre každý forwarder " - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "Record name" -msgstr "Názov záznamu" - -msgid "Time to live" -msgstr "" - -msgid "Records" -msgstr "Záznamy" - -msgid "Record type" -msgstr "Typ záznamu" - -#, fuzzy -msgid "Record data" -msgstr "Názov záznamu" - -#, fuzzy -msgid "A record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw A records" -msgstr "Záznamy" - -#, fuzzy -msgid "A IP Address" -msgstr "IP adresa" - -msgid "IP Address" -msgstr "IP adresa" - -#, fuzzy -msgid "A Create reverse" -msgstr "Vytvoriť reverzný" - -msgid "Create reverse record for this IP Address" -msgstr "" - -#, fuzzy -msgid "AAAA record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw AAAA records" -msgstr "Záznamy" - -#, fuzzy -msgid "AAAA IP Address" -msgstr "IP adresa" - -#, fuzzy -msgid "AAAA Create reverse" -msgstr "Vytvoriť reverzný" - -#, fuzzy -msgid "A6 record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw A6 records" -msgstr "Záznamy" - -#, fuzzy -msgid "A6 Record data" -msgstr "Názov záznamu" - -#, fuzzy -msgid "AFSDB record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw AFSDB records" -msgstr "IPA DNS záznamy" - -msgid "AFSDB Subtype" -msgstr "" - -#, fuzzy -msgid "Subtype" -msgstr "Podstrom" - -msgid "AFSDB Hostname" -msgstr "" - -#, fuzzy -msgid "Hostname" -msgstr "Priezvisko" - -#, fuzzy -msgid "APL record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw APL records" -msgstr "Záznamy" - -#, fuzzy -msgid "CERT record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw CERT records" -msgstr "Záznamy" - -#, fuzzy -msgid "CERT Certificate Type" -msgstr "Typ certifikátu" - -msgid "Certificate Type" -msgstr "Typ certifikátu" - -msgid "CERT Key Tag" -msgstr "" - -msgid "Key Tag" -msgstr "" - -msgid "CERT Algorithm" -msgstr "" - -msgid "Algorithm" -msgstr "" - -#, fuzzy -msgid "CERT Certificate/CRL" -msgstr "Certifikát" - -#, fuzzy -msgid "Certificate/CRL" -msgstr "Certifikát" - -#, fuzzy -msgid "CNAME record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw CNAME records" -msgstr "IPA DNS záznamy" - -msgid "CNAME Hostname" -msgstr "" - -msgid "A hostname which this alias hostname points to" -msgstr "" - -#, fuzzy -msgid "DHCID record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw DHCID records" -msgstr "IPA DNS záznamy" - -#, fuzzy -msgid "DLV record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw DLV records" -msgstr "IPA DNS záznamy" - -msgid "DLV Key Tag" -msgstr "" - -msgid "DLV Algorithm" -msgstr "" - -msgid "DLV Digest Type" -msgstr "" - -msgid "Digest Type" -msgstr "" - -msgid "DLV Digest" -msgstr "" - -msgid "Digest" -msgstr "" - -#, fuzzy -msgid "DNAME record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw DNAME records" -msgstr "IPA DNS záznamy" - -msgid "DNAME Target" -msgstr "" - -#, fuzzy -msgid "Target" -msgstr "Cieľové DN" - -#, fuzzy -msgid "DNSKEY record" -msgstr "IPA DNS záznamy" - -#, fuzzy -msgid "Raw DNSKEY records" -msgstr "IPA DNS záznamy" - -#, fuzzy -msgid "DS record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw DS records" -msgstr "IPA DNS záznamy" - -msgid "DS Key Tag" -msgstr "" - -msgid "DS Algorithm" -msgstr "" - -msgid "DS Digest Type" -msgstr "" - -msgid "DS Digest" -msgstr "" - -#, fuzzy -msgid "HIP record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw HIP records" -msgstr "IPA DNS záznamy" - -#, fuzzy -msgid "IPSECKEY record" -msgstr "IPA DNS záznamy" - -#, fuzzy -msgid "Raw IPSECKEY records" -msgstr "IPA DNS záznamy" - -#, fuzzy -msgid "KEY record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw KEY records" -msgstr "Záznamy" - -#, fuzzy -msgid "KX record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw KX records" -msgstr "Záznamy" - -msgid "KX Preference" -msgstr "" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" - -msgid "KX Exchanger" -msgstr "" - -msgid "A host willing to act as a key exchanger" -msgstr "" - -#, fuzzy -msgid "LOC record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw LOC records" -msgstr "Záznamy" - -msgid "LOC Degrees Latitude" -msgstr "" - -msgid "Degrees Latitude" -msgstr "" - -msgid "LOC Minutes Latitude" -msgstr "" - -msgid "Minutes Latitude" -msgstr "" - -msgid "LOC Seconds Latitude" -msgstr "" - -#, fuzzy -msgid "Seconds Latitude" -msgstr "Druhý kód" - -msgid "LOC Direction Latitude" -msgstr "" - -msgid "Direction Latitude" -msgstr "" - -msgid "LOC Degrees Longitude" -msgstr "" - -msgid "Degrees Longitude" -msgstr "" - -msgid "LOC Minutes Longitude" -msgstr "" - -msgid "Minutes Longitude" -msgstr "" - -#, fuzzy -msgid "LOC Seconds Longitude" -msgstr "Druhý kód" - -#, fuzzy -msgid "Seconds Longitude" -msgstr "Druhý kód" - -msgid "LOC Direction Longitude" -msgstr "" - -msgid "Direction Longitude" -msgstr "" - -msgid "LOC Altitude" -msgstr "" - -msgid "Altitude" -msgstr "" - -#, fuzzy -msgid "LOC Size" -msgstr "Veľkosť" - -msgid "Size" -msgstr "Veľkosť" - -msgid "LOC Horizontal Precision" -msgstr "" - -msgid "Horizontal Precision" -msgstr "" - -msgid "LOC Vertical Precision" -msgstr "" - -#, fuzzy -msgid "Vertical Precision" -msgstr "Prítomný platný certifikát" - -#, fuzzy -msgid "MX record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw MX records" -msgstr "Záznamy" - -msgid "MX Preference" -msgstr "" - -msgid "MX Exchanger" -msgstr "" - -msgid "A host willing to act as a mail exchanger" -msgstr "" - -#, fuzzy -msgid "NAPTR record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw NAPTR records" -msgstr "IPA DNS záznamy" - -#, fuzzy -msgid "NAPTR Order" -msgstr "Poradie" - -msgid "Order" -msgstr "Poradie" - -msgid "NAPTR Preference" -msgstr "" - -#, fuzzy -msgid "Preference" -msgstr "Preferovaný jazyk" - -msgid "NAPTR Flags" -msgstr "" - -msgid "Flags" -msgstr "" - -#, fuzzy -msgid "NAPTR Service" -msgstr "Akákoľvek služba" - -msgid "Service" -msgstr "Služba" - -msgid "NAPTR Regular Expression" -msgstr "" - -#, fuzzy -msgid "Regular Expression" -msgstr "Výraz" - -msgid "NAPTR Replacement" -msgstr "" - -msgid "Replacement" -msgstr "" - -#, fuzzy -msgid "NS record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw NS records" -msgstr "IPA DNS záznamy" - -#, fuzzy -msgid "NS Hostname" -msgstr "NIS doménové meno" - -#, fuzzy -msgid "NSEC record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw NSEC records" -msgstr "IPA DNS záznamy" - -#, fuzzy -msgid "NSEC3 record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw NSEC3 records" -msgstr "IPA DNS záznamy" - -#, fuzzy -msgid "PTR record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw PTR records" -msgstr "Záznamy" - -msgid "PTR Hostname" -msgstr "" - -msgid "The hostname this reverse record points to" -msgstr "" - -#, fuzzy -msgid "RRSIG record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw RRSIG records" -msgstr "IPA DNS záznamy" - -#, fuzzy -msgid "RP record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw RP records" -msgstr "Záznamy" - -#, fuzzy -msgid "SIG record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw SIG records" -msgstr "IPA DNS záznamy" - -#, fuzzy -msgid "SPF record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw SPF records" -msgstr "IPA DNS záznamy" - -#, fuzzy -msgid "SRV record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw SRV records" -msgstr "IPA DNS záznamy" - -#, fuzzy -msgid "SRV Priority" -msgstr "Priorita" - -msgid "Priority" -msgstr "Priorita" - -#, fuzzy -msgid "SRV Weight" -msgstr "Váha" - -msgid "Weight" -msgstr "Váha" - -#, fuzzy -msgid "SRV Port" -msgstr "Port" - -msgid "Port" -msgstr "Port" - -#, fuzzy -msgid "SRV Target" -msgstr "Cieľové DN" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" - -#, fuzzy -msgid "SSHFP record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw SSHFP records" -msgstr "IPA DNS záznamy" - -msgid "SSHFP Algorithm" -msgstr "" - -msgid "SSHFP Fingerprint Type" -msgstr "" - -msgid "Fingerprint Type" -msgstr "" - -#, fuzzy -msgid "SSHFP Fingerprint" -msgstr "Odtlačok verejného SSH kľúča (fingerprint)" - -msgid "Fingerprint" -msgstr "" - -#, fuzzy -msgid "TA record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw TA records" -msgstr "Záznamy" - -#, fuzzy -msgid "TLSA record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw TLSA records" -msgstr "IPA DNS záznamy" - -#, fuzzy -msgid "TLSA Certificate Usage" -msgstr "Certifikáty" - -#, fuzzy -msgid "Certificate Usage" -msgstr "Certifikáty" - -msgid "TLSA Selector" -msgstr "" - -#, fuzzy -msgid "Selector" -msgstr "Označiť všetko" - -msgid "TLSA Matching Type" -msgstr "" - -msgid "Matching Type" -msgstr "" - -#, fuzzy -msgid "TLSA Certificate Association Data" -msgstr "Certifikačné autority" - -#, fuzzy -msgid "Certificate Association Data" -msgstr "Certifikačné autority" - -#, fuzzy -msgid "TKEY record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw TKEY records" -msgstr "Záznamy" - -#, fuzzy -msgid "TSIG record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw TSIG records" -msgstr "IPA DNS záznamy" - -#, fuzzy -msgid "TXT record" -msgstr "%s záznam" - -#, fuzzy -msgid "Raw TXT records" -msgstr "Záznamy" - -msgid "TXT Text Data" -msgstr "" - -msgid "Text Data" -msgstr "" - -msgid "Authoritative nameserver" -msgstr "Autoritatívny nameserver" - -msgid "Authoritative nameserver domain name" -msgstr "Doménové meno autoritatívneho nameservera" - -msgid "Administrator e-mail address" -msgstr "E-mailová adresa administrátora" - -msgid "SOA serial" -msgstr "" - -msgid "SOA record serial number" -msgstr "Sériové číslo SOA záznamu" - -#, fuzzy -msgid "SOA refresh" -msgstr "Znovu načítať" - -#, fuzzy -msgid "SOA record refresh time" -msgstr "Sériové číslo SOA záznamu" - -msgid "SOA retry" -msgstr "" - -#, fuzzy -msgid "SOA record retry time" -msgstr "Sériové číslo SOA záznamu" - -msgid "SOA expire" -msgstr "" - -#, fuzzy -msgid "SOA record expire time" -msgstr "Sériové číslo SOA záznamu" - -msgid "SOA minimum" -msgstr "" - -msgid "How long should negative responses be cached" -msgstr "" - -msgid "Time to live for records at zone apex" -msgstr "" - -msgid "BIND update policy" -msgstr "" - -msgid "Dynamic update" -msgstr "Dynamické aktualizácie" - -msgid "Allow dynamic updates." -msgstr "Povoliť dynamické aktualizácie" - -msgid "Allow query" -msgstr "Povoliť dotazy" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" - -msgid "Allow transfer" -msgstr "Povoliť prenos" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" - -msgid "Allow in-line DNSSEC signing" -msgstr "" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "" - -msgid "NSEC3PARAM record" -msgstr "" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" - -msgid "Resolve a host name in DNS." -msgstr "" - -#, fuzzy -msgid "Modify global DNS configuration." -msgstr "Upraviť CA konfiguráciu." - -#, fuzzy -msgid "Show the current global DNS configuration." -msgstr "Zobraziť konfiguračné voľby" - -msgid "Create new DNS forward zone." -msgstr "Vytvoriť novú DNS forward zónu" - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" - -#, fuzzy -msgid "Permission value" -msgstr "Povolenie" - -msgid "Delete DNS forward zone." -msgstr "Odstrániť DNS forward zónu." - -msgid "Disable DNS Forward Zone." -msgstr "Deaktivovať DNS forward zónu." - -#, fuzzy -msgid "Enable DNS Forward Zone." -msgstr "Deaktivovať DNS forward zónu." - -msgid "Search for DNS forward zones." -msgstr "Vyhľadávať DNS forward zóny" - -msgid "Modify DNS forward zone." -msgstr "Upraviť DNS forward zónu" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" - -msgid "Display information about a DNS forward zone." -msgstr "Zobraziť informácie o DNS forward zóne" - -msgid "Add new DNS resource record." -msgstr "Pridať nový DNS záznam" - -msgid "Force" -msgstr "Vynútiť" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "" - -msgid "Structured" -msgstr "Štrukturovane" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" - -msgid "Delete DNS resource record." -msgstr "Odstrániť DNS záznam" - -#, fuzzy -msgid "Delete all associated records" -msgstr "Odstrániť DNS záznam" - -#, fuzzy -msgid "Delete DNS record entry." -msgstr "Odstrániť DNS záznam" - -#, fuzzy -msgid "Search for DNS resources." -msgstr "Vyhľadať DNS servery" - -msgid "Modify a DNS resource record." -msgstr "Upraviť DNS záznam" - -#, fuzzy -msgid "Rename the DNS resource record object" -msgstr "Odstrániť DNS záznam" - -#, fuzzy -msgid "Display DNS resource." -msgstr "Odstrániť DNS záznam" - -#, fuzzy -msgid "Create new DNS zone (SOA record)." -msgstr "Odstrániť DNS zónu (SOA záznam)." - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" - -msgid "Add a permission for per-zone access delegation." -msgstr "" - -msgid "Delete DNS zone (SOA record)." -msgstr "Odstrániť DNS zónu (SOA záznam)." - -msgid "Disable DNS Zone." -msgstr "Deaktivovať DNS zónu." - -#, fuzzy -msgid "Enable DNS Zone." -msgstr "Deaktivovať DNS zónu." - -#, fuzzy -msgid "Search for DNS zones (SOA records)." -msgstr "Odstrániť DNS zónu (SOA záznam)." - -#, fuzzy -msgid "Forward zones only" -msgstr "DNS forward zóny" - -#, fuzzy -msgid "Search for forward zones only" -msgstr "Vyhľadávať DNS forward zóny" - -#, fuzzy -msgid "Modify DNS zone (SOA record)." -msgstr "Odstrániť DNS zónu (SOA záznam)." - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" - -msgid "Remove a permission for per-zone access delegation." -msgstr "" - -#, fuzzy -msgid "Display information about a DNS zone (SOA record)." -msgstr "Zobraziť informácie o DNS forward zóne" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "Group name" -msgstr "Názov skupiny" - -msgid "Group description" -msgstr "Popis skupiny" - -msgid "GID" -msgstr "GID" - -msgid "GID (use this option to set it manually)" -msgstr "" - -#, fuzzy -msgid "Member users" -msgstr "Členské skupiny" - -msgid "Member groups" -msgstr "Členské skupiny" - -msgid "Member of groups" -msgstr "Člen skupín" - -msgid "Roles" -msgstr "Role" - -#, fuzzy -msgid "Member of netgroups" -msgstr "Člen skupín" - -#, fuzzy -msgid "Member of Sudo rule" -msgstr "Členom skupiny" - -#, fuzzy -msgid "Member of HBAC rule" -msgstr "Členom skupiny" - -#, fuzzy -msgid "Indirect Member users" -msgstr "Nepriame členstvo" - -#, fuzzy -msgid "Indirect Member groups" -msgstr "Nepriame členstvo" - -#, fuzzy -msgid "Indirect Member of group" -msgstr "Člen skupín" - -#, fuzzy -msgid "Indirect Member of netgroup" -msgstr "Člen skupín" - -#, fuzzy -msgid "Indirect Member of role" -msgstr "Nepriame členstvo" - -#, fuzzy -msgid "Indirect Member of Sudo rule" -msgstr "Nepriame členstvo" - -#, fuzzy -msgid "Indirect Member of HBAC rule" -msgstr "Nepriame členstvo" - -msgid "Create a new group." -msgstr "Vytvoriť novú skupinu." - -#, fuzzy -msgid "Create as a non-POSIX group" -msgstr "Vytvoriť novú skupinu." - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Suppress processing of membership attributes." -msgstr "" - -#, fuzzy -msgid "Add members to a group." -msgstr "Členom skupiny" - -#, fuzzy -msgid "External member" -msgstr "Sériové číslo" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -#, fuzzy -msgid "member user" -msgstr "Automember pravidlo" - -#, fuzzy -msgid "users to add" -msgstr "Zlyhalo pridanie" - -#, fuzzy -msgid "member group" -msgstr "Členské skupiny" - -#, fuzzy -msgid "groups to add" -msgstr "skupiny" - -msgid "Members that could not be added" -msgstr "" - -#, fuzzy -msgid "Number of members added" -msgstr "Počet vrátených položiek" - -msgid "Delete group." -msgstr "Odstrániť skupinu." - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "Vyhľadávať skupiny." - -#, fuzzy -msgid "search for private groups" -msgstr "Vyhľadávať skupiny." - -#, fuzzy -msgid "search for POSIX groups" -msgstr "Vyhľadávať skupiny." - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -#, fuzzy -msgid "search for non-POSIX groups" -msgstr "Vyhľadávať skupiny." - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "user" -msgstr "" - -#, fuzzy -msgid "Search for groups with these member users." -msgstr "Vyhľadávať skupiny." - -msgid "Search for groups without these member users." -msgstr "" - -msgid "group" -msgstr "skupina" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -#, fuzzy -msgid "netgroup" -msgstr "skupina" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "role" -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -#, fuzzy -msgid "HBAC rule" -msgstr "HBAC pravidlá" - -#, fuzzy -msgid "Search for groups with these member of HBAC rules." -msgstr "Vyhľadať HBAC pravidlá." - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -#, fuzzy -msgid "sudo rule" -msgstr "sudo pravidlá" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "Upraviť skupinu." - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -#, fuzzy -msgid "Remove members from a group." -msgstr "Členom skupiny" - -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - -msgid "Members that could not be removed" -msgstr "" - -#, fuzzy -msgid "Number of members removed" -msgstr "Počet vrátených položiek" - -#, fuzzy -msgid "Display information about a named group." -msgstr "Zobraziť informácie o DNS forward zóne" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Rule name" -msgstr "Názov pravidla" - -#, fuzzy -msgid "Rule type" -msgstr "Typ záznamu" - -msgid "Rule type (allow)" -msgstr "" - -#, fuzzy -msgid "User category" -msgstr "Kategórie používateľov" - -#, fuzzy -msgid "User category the rule applies to" -msgstr "Kategórie používateľov" - -#, fuzzy -msgid "Host category" -msgstr "Kategórie používateľov" - -msgid "Host category the rule applies to" -msgstr "" - -#, fuzzy -msgid "Service category" -msgstr "Názov služby" - -msgid "Service category the rule applies to" -msgstr "" - -#, fuzzy -msgid "Enabled" -msgstr "Deaktivované" - -msgid "User Groups" -msgstr "Používateľské skupiny" - -#, fuzzy -msgid "Host Groups" -msgstr "Používateľské skupiny" - -msgid "Services" -msgstr "Služby" - -#, fuzzy -msgid "Service Groups" -msgstr "Špecifikované skupiny" - -msgid "External host" -msgstr "" - -msgid "Create a new HBAC rule." -msgstr "Vytvoriť nové HBAC pravidlo" - -#, fuzzy -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "Pridať používateľov a skupiny do HBAC pravidla." - -#, fuzzy -msgid "member host" -msgstr "Členom" - -msgid "hosts to add" -msgstr "" - -#, fuzzy -msgid "member host group" -msgstr "Člen skupín" - -msgid "host groups to add" -msgstr "" - -msgid "Add services to an HBAC rule." -msgstr "Pridať služby do HBAC pravidla." - -#, fuzzy -msgid "member HBAC service" -msgstr "HBAC služba" - -#, fuzzy -msgid "HBAC services to add" -msgstr "HBAC služby" - -#, fuzzy -msgid "member HBAC service group" -msgstr "HBAC služba" - -#, fuzzy -msgid "HBAC service groups to add" -msgstr "HBAC popis služby" - -msgid "Add users and groups to an HBAC rule." -msgstr "Pridať používateľov a skupiny do HBAC pravidla." - -msgid "Delete an HBAC rule." -msgstr "Odstrániť HBAC pravidlo." - -msgid "Disable an HBAC rule." -msgstr "Deaktivovať HBAC pravidlo." - -msgid "Enable an HBAC rule." -msgstr "Aktivovať HBAC pravidlo." - -msgid "Search for HBAC rules." -msgstr "Vyhľadať HBAC pravidlá." - -msgid "Modify an HBAC rule." -msgstr "Upraviť HBAC pravidlo." - -#, fuzzy -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -msgid "hosts to remove" -msgstr "" - -msgid "host groups to remove" -msgstr "" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "Odstrániť služby a skupiny služieb z HBAC pravidla." - -#, fuzzy -msgid "HBAC services to remove" -msgstr "HBAC služby" - -#, fuzzy -msgid "HBAC service groups to remove" -msgstr "HBAC popis služby" - -msgid "Remove users and groups from an HBAC rule." -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, fuzzy -msgid "Display the properties of an HBAC rule." -msgstr "Pridať služby do HBAC pravidla." - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" - -msgid "Service name" -msgstr "Názov služby" - -msgid "HBAC service" -msgstr "HBAC služba" - -msgid "HBAC service description" -msgstr "HBAC popis služby" - -#, fuzzy -msgid "Member of HBAC service groups" -msgstr "Člen skupín" - -msgid "Add a new HBAC service." -msgstr "Pridať novú HBAC službu." - -msgid "Delete an existing HBAC service." -msgstr "Odstrániť existujúcu HBAC službu." - -msgid "Search for HBAC services." -msgstr "Vyhľadať HBAC služby." - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" - -msgid "Modify an HBAC service." -msgstr "Upraviť HBAC službu." - -#, fuzzy -msgid "Display information about an HBAC service." -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -#, fuzzy -msgid "Service group name" -msgstr "Názov služby" - -#, fuzzy -msgid "HBAC service group description" -msgstr "HBAC popis služby" - -#, fuzzy -msgid "Member HBAC service" -msgstr "HBAC služba" - -#, fuzzy -msgid "Add a new HBAC service group." -msgstr "Pridať novú HBAC službu." - -#, fuzzy -msgid "Add members to an HBAC service group." -msgstr "Pridať služby do HBAC pravidla." - -#, fuzzy -msgid "Delete an HBAC service group." -msgstr "Odstrániť existujúcu HBAC službu." - -#, fuzzy -msgid "Search for an HBAC service group." -msgstr "Vyhľadať HBAC služby." - -#, fuzzy -msgid "Modify an HBAC service group." -msgstr "Upraviť HBAC službu." - -#, fuzzy -msgid "Remove members from an HBAC service group." -msgstr "Odstrániť certifikáty zo služby" - -#, fuzzy -msgid "Display information about an HBAC service group." -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -msgid "User name" -msgstr "Používateľské meno" - -#, fuzzy -msgid "Target host" -msgstr "Cieľové DN" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -#, fuzzy -msgid "Include all enabled IPA rules into test [default]" -msgstr "Zahrnúť všetky deaktivované IPA pravidlá do testu" - -msgid "Include all disabled IPA rules into test" -msgstr "Zahrnúť všetky deaktivované IPA pravidlá do testu" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "Varovanie" - -#, fuzzy -msgid "Matched rules" -msgstr "sudo pravidlá" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -#, fuzzy -msgid "Result of simulation" -msgstr "Konfigurácia repliky" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#, fuzzy -msgid "Host name" -msgstr "Priezvisko" - -msgid "A description of this host" -msgstr "" - -msgid "Locality" -msgstr "Lokalita" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "" - -msgid "Platform" -msgstr "" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "" - -msgid "Operating system" -msgstr "Operačný systém" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "" - -msgid "User password" -msgstr "Používateľské heslo" - -msgid "Password used in bulk enrollment" -msgstr "" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "" - -#, fuzzy -msgid "Random password" -msgstr "Zmeniť heslo" - -msgid "Certificate" -msgstr "Certifikát" - -#, fuzzy -msgid "Base-64 encoded server certificate" -msgstr "Base-64 zakódovaný certifikát služby" - -#, fuzzy -msgid "Principal name" -msgstr "Zobrazované meno" - -msgid "MAC address" -msgstr "MAC adresa" - -msgid "Hardware MAC address(es) on this host" -msgstr "" - -msgid "SSH public key" -msgstr "Verejný SSH kľúč" - -msgid "Class" -msgstr "" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -#, fuzzy -msgid "Assigned ID View" -msgstr "Pridať nové ID View" - -#, fuzzy -msgid "Requires pre-authentication" -msgstr "Typy autentifikácie používateľa" - -msgid "Pre-authentication is required for the service" -msgstr "" - -msgid "Trusted for delegation" -msgstr "" - -msgid "Client credentials may be delegated to the service" -msgstr "" - -#, fuzzy -msgid "Member of host-groups" -msgstr "Člen skupín" - -#, fuzzy -msgid "Indirect Member of host-group" -msgstr "Nepriame členstvo" - -msgid "Keytab" -msgstr "Keytab" - -#, fuzzy -msgid "Managed by" -msgstr "Manažér" - -#, fuzzy -msgid "Managing" -msgstr "Manažér" - -msgid "Users allowed to retrieve keytab" -msgstr "" - -msgid "Groups allowed to retrieve keytab" -msgstr "" - -msgid "Hosts allowed to retrieve keytab" -msgstr "" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "" - -msgid "Users allowed to create keytab" -msgstr "" - -msgid "Groups allowed to create keytab" -msgstr "" - -msgid "Hosts allowed to create keytab" -msgstr "" - -msgid "Host Groups allowed to create keytab" -msgstr "" - -#, fuzzy -msgid "Add a new host." -msgstr "Pridať novú IPA lokalitu." - -msgid "force host name even if not in DNS" -msgstr "" - -msgid "skip reverse DNS detection" -msgstr "" - -msgid "Add the host to DNS with this IP address" -msgstr "" - -#, fuzzy -msgid "Add hosts that can manage this host." -msgstr "Pridať používateľa, ktorý môže spravovať tento token." - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" - -#, fuzzy -msgid "Delete a host." -msgstr "Odstrániť používateľa" - -#, fuzzy -msgid "Remove entries from DNS" -msgstr "Odstrániť certifikáty zo služby" - -#, fuzzy -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "Deaktivovať Kerberos kľúč a SSL certifikát služby." - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" - -#, fuzzy -msgid "Search for hosts." -msgstr "Vyhľadávať skupiny." - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" - -#, fuzzy -msgid "host group" -msgstr "Používateľská skupina" - -msgid "Search for hosts with these member of host groups." -msgstr "" - -msgid "Search for hosts without these member of host groups." -msgstr "" - -msgid "Search for hosts with these member of netgroups." -msgstr "" - -msgid "Search for hosts without these member of netgroups." -msgstr "" - -msgid "Search for hosts with these member of roles." -msgstr "" - -msgid "Search for hosts without these member of roles." -msgstr "" - -#, fuzzy -msgid "Search for hosts with these member of HBAC rules." -msgstr "Vyhľadať HBAC pravidlá." - -msgid "Search for hosts without these member of HBAC rules." -msgstr "" - -msgid "Search for hosts with these member of sudo rules." -msgstr "" - -msgid "Search for hosts without these member of sudo rules." -msgstr "" - -msgid "Search for hosts with these enrolled by users." -msgstr "" - -msgid "Search for hosts without these enrolled by users." -msgstr "" - -msgid "host" -msgstr "" - -msgid "Search for hosts with these managed by hosts." -msgstr "" - -msgid "Search for hosts without these managed by hosts." -msgstr "" - -msgid "Search for hosts with these managing hosts." -msgstr "" - -msgid "Search for hosts without these managing hosts." -msgstr "" - -#, fuzzy -msgid "Modify information about a host." -msgstr "Upraviť informácie o IPA lokalite." - -msgid "Kerberos principal name for this host" -msgstr "" - -msgid "Update DNS entries" -msgstr "Aktualizovať DNS položky." - -#, fuzzy -msgid "Remove hosts that can manage this host." -msgstr "Pridať používateľa, ktorý môže spravovať tento token." - -#, fuzzy -msgid "Display information about a host." -msgstr "Zobraziť informácie o IPA lokalite." - -#, fuzzy -msgid "file to store certificate in" -msgstr "Revokácia certifikátu." - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -msgid "Host-group" -msgstr "skupina" - -#, fuzzy -msgid "Name of host-group" -msgstr "Člen skupín" - -msgid "A description of this host-group" -msgstr "" - -#, fuzzy -msgid "Member hosts" -msgstr "Členom" - -#, fuzzy -msgid "Member host-groups" -msgstr "Členské skupiny" - -#, fuzzy -msgid "Indirect Member hosts" -msgstr "Nepriame členstvo" - -#, fuzzy -msgid "Indirect Member host-groups" -msgstr "Nepriame členstvo" - -#, fuzzy -msgid "Add a new hostgroup." -msgstr "Vytvoriť novú skupinu." - -#, fuzzy -msgid "Add members to a hostgroup." -msgstr "Členom skupiny" - -#, fuzzy -msgid "Delete a hostgroup." -msgstr "Odstrániť skupinu." - -#, fuzzy -msgid "Search for hostgroups." -msgstr "Vyhľadávať skupiny." - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" - -msgid "Search for host groups with these member hosts." -msgstr "" - -msgid "Search for host groups without these member hosts." -msgstr "" - -msgid "Search for host groups with these member host groups." -msgstr "" - -msgid "Search for host groups without these member host groups." -msgstr "" - -msgid "Search for host groups with these member of host groups." -msgstr "" - -msgid "Search for host groups without these member of host groups." -msgstr "" - -msgid "Search for host groups with these member of netgroups." -msgstr "" - -msgid "Search for host groups without these member of netgroups." -msgstr "" - -msgid "Search for host groups with these member of HBAC rules." -msgstr "" - -msgid "Search for host groups without these member of HBAC rules." -msgstr "" - -msgid "Search for host groups with these member of sudo rules." -msgstr "" - -msgid "Search for host groups without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a hostgroup." -msgstr "Upraviť skupinu." - -#, fuzzy -msgid "Remove members from a hostgroup." -msgstr "Členom skupiny" - -#, fuzzy -msgid "Display information about a hostgroup." -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "Premenovať" - -msgid "First Posix ID of the range" -msgstr "" - -#, fuzzy -msgid "Number of IDs in the range" -msgstr "Počet vrátených položiek" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -#, fuzzy -msgid "Range type" -msgstr "Typ záznamu" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "Zmazať ID rozsah." - -#, fuzzy -msgid "Search for ranges." -msgstr "Vyhľadávať skupiny." - -#, fuzzy -msgid "Modify ID range." -msgstr "Upraviť DNS forward zónu" - -#, fuzzy -msgid "Display information about a range." -msgstr "Zobraziť informácie o DNS forward zóne" - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -msgid "Anchor to override" -msgstr "" - -msgid "Group ID Number" -msgstr "ID skupiny" - -msgid "User login" -msgstr "Prihlasovacie meno" - -msgid "UID" -msgstr "UID" - -msgid "User ID Number" -msgstr "ID používateľa" - -msgid "GECOS" -msgstr "GECOS" - -msgid "Home directory" -msgstr "Domovský priečinok" - -msgid "Login shell" -msgstr "" - -msgid "ID View Name" -msgstr "Názov ID View" - -#, fuzzy -msgid "Add a new Group ID override." -msgstr "Pridať nové ID View" - -#, fuzzy -msgid "Delete an Group ID override." -msgstr "Odstrániť ID View." - -#, fuzzy -msgid "Search for an Group ID override." -msgstr "Vyhľadávať skupiny." - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" - -#, fuzzy -msgid "Modify an Group ID override." -msgstr "Upraviť skupinu." - -msgid "Rename the Group ID override object" -msgstr "" - -#, fuzzy -msgid "Display information about an Group ID override." -msgstr "Zobraziť informácie o DNS forward zóne" - -#, fuzzy -msgid "Add a new User ID override." -msgstr "Pridať nové ID View" - -#, fuzzy -msgid "Delete an User ID override." -msgstr "Odstrániť ID View." - -#, fuzzy -msgid "Search for an User ID override." -msgstr "Vyhľadať DNS servery" - -#, fuzzy -msgid "Modify an User ID override." -msgstr "Upraviť HBAC službu." - -msgid "Rename the User ID override object" -msgstr "" - -#, fuzzy -msgid "Display information about an User ID override." -msgstr "Zobraziť informácie o DNS forward zóne" - -msgid "Add a new ID View." -msgstr "Pridať nové ID View" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" - -msgid "hosts" -msgstr "" - -msgid "Hosts to apply the ID View to" -msgstr "" - -#, fuzzy -msgid "hostgroups" -msgstr "skupiny" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" - -msgid "Hosts that this ID View was applied to." -msgstr "" - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" - -msgid "Number of hosts the ID View was applied to:" -msgstr "" - -msgid "Delete an ID View." -msgstr "Odstrániť ID View." - -#, fuzzy -msgid "Search for an ID View." -msgstr "Vyhľadať DNS servery" - -#, fuzzy -msgid "Modify an ID View." -msgstr "Pridať nové ID View" - -msgid "Rename the ID View object" -msgstr "" - -#, fuzzy -msgid "Display information about an ID View." -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "Enumerate all the hosts the view applies to." -msgstr "" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" - -msgid "Hosts to clear (any) ID View from." -msgstr "" - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" - -msgid "Hosts that ID View was cleared from." -msgstr "" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" - -msgid "Dict of I18N messages" -msgstr "" - -msgid "Export plugin meta-data for the webUI." -msgstr "" - -msgid "Name of object to export" -msgstr "" - -msgid "Name of method to export" -msgstr "" - -msgid "Name of command to export" -msgstr "" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "Slovník JSON zakódovaných IPA objektov" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "Slovník JSON zakódovaných IPA metód" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "Slovník JSON zakódovaných IPA príkazov" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" - -#, fuzzy -msgid "Join an IPA domain" -msgstr "Lokálna doména" - -msgid "The hostname to register as" -msgstr "" - -msgid "The IPA realm" -msgstr "IPA realm" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "" - -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" - -msgid "Manage ticket policy for specific user" -msgstr "" - -msgid "Max life" -msgstr "" - -msgid "Maximum ticket life (seconds)" -msgstr "" - -msgid "Max renew" -msgstr "" - -msgid "Maximum renewable age (seconds)" -msgstr "" - -#, fuzzy -msgid "Modify Kerberos ticket policy." -msgstr "nastavenia kerberos ticket policy" - -#, fuzzy -msgid "Reset Kerberos ticket policy to the default values." -msgstr "nastavenia kerberos ticket policy" - -msgid "Display the current Kerberos ticket policy." -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," -"cn=accounts' --group-container='cn=groups,cn=accounts' " -"ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' --user-ignore-" -"objectclass=radiusprofile --user-ignore-" -"attribute=radiusgroupname ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, fuzzy -msgid "Migrate users and groups from DS to IPA." -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -msgid "LDAP URI" -msgstr "LDAP URI" - -msgid "LDAP URI of DS server to migrate from" -msgstr "" - -#, fuzzy -msgid "bind password" -msgstr "Zmeniť heslo" - -msgid "Bind DN" -msgstr "" - -#, fuzzy -msgid "User container" -msgstr "Používateľské meno" - -msgid "DN of container for users in DS relative to base DN" -msgstr "" - -#, fuzzy -msgid "Group container" -msgstr "Názov skupiny" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "" - -msgid "User object class" -msgstr "" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "" - -msgid "Group object class" -msgstr "" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "" - -msgid "Ignore user object class" -msgstr "" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "" - -#, fuzzy -msgid "Ignore user attribute" -msgstr "Zahrnuté atribúty" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore group object class" -msgstr "" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "" - -#, fuzzy -msgid "Ignore group attribute" -msgstr "Zahrnuté atribúty" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "" - -msgid "Overwrite GID" -msgstr "Prepísať GID" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" - -msgid "LDAP schema" -msgstr "LDAP schéma" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" - -msgid "Continue" -msgstr "Pokračovať" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" - -msgid "Base DN" -msgstr "" - -msgid "Base DN on remote LDAP server" -msgstr "" - -msgid "Ignore compat plugin" -msgstr "" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" - -msgid "CA certificate" -msgstr "CA certifikát" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "Načítať CA certifikát LDAP servera zo súboru" - -msgid "groups to exclude from migration" -msgstr "" - -msgid "users to exclude from migration" -msgstr "" - -msgid "Lists of objects migrated; categorized by type." -msgstr "" - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" - -msgid "False if migration mode was disabled." -msgstr "" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" - -msgid "Show environment variables." -msgstr "" - -msgid "Forward to server instead of running locally" -msgstr "" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Total number of variables env (>= count)" -msgstr "" - -#, fuzzy -msgid "Number of variables returned (<= total)" -msgstr "Počet vrátených položiek" - -msgid "Show all loaded plugins." -msgstr "" - -msgid "Dictionary mapping plugin names to bases" -msgstr "" - -#, fuzzy -msgid "Number of plugins loaded" -msgstr "Počet vrátených položiek" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -#, fuzzy -msgid "Netgroup name" -msgstr "Názov skupiny" - -#, fuzzy -msgid "Netgroup description" -msgstr "Popis skupiny" - -msgid "NIS domain name" -msgstr "NIS doménové meno" - -msgid "IPA unique ID" -msgstr "IPA unikátne ID" - -#, fuzzy -msgid "Member netgroups" -msgstr "Členské skupiny" - -#, fuzzy -msgid "Indirect Member netgroups" -msgstr "Nepriame členstvo" - -#, fuzzy -msgid "Member User" -msgstr "Členom" - -#, fuzzy -msgid "Member Group" -msgstr "Členské skupiny" - -#, fuzzy -msgid "Member Host" -msgstr "Členom" - -#, fuzzy -msgid "Member Hostgroup" -msgstr "Členské skupiny" - -#, fuzzy -msgid "Add a new netgroup." -msgstr "Vytvoriť novú skupinu." - -#, fuzzy -msgid "Add members to a netgroup." -msgstr "Členom skupiny" - -#, fuzzy -msgid "member netgroup" -msgstr "Členské skupiny" - -msgid "netgroups to add" -msgstr "" - -#, fuzzy -msgid "Delete a netgroup." -msgstr "Odstrániť skupinu." - -#, fuzzy -msgid "Search for a netgroup." -msgstr "Vyhľadávať skupiny." - -#, fuzzy -msgid "search for managed groups" -msgstr "Vyhľadávať skupiny." - -msgid "Search for netgroups with these member netgroups." -msgstr "" - -msgid "Search for netgroups without these member netgroups." -msgstr "" - -msgid "Search for netgroups with these member users." -msgstr "" - -msgid "Search for netgroups without these member users." -msgstr "" - -msgid "Search for netgroups with these member groups." -msgstr "" - -msgid "Search for netgroups without these member groups." -msgstr "" - -msgid "Search for netgroups with these member hosts." -msgstr "" - -msgid "Search for netgroups without these member hosts." -msgstr "" - -msgid "Search for netgroups with these member host groups." -msgstr "" - -msgid "Search for netgroups without these member host groups." -msgstr "" - -msgid "Search for netgroups with these member of netgroups." -msgstr "" - -msgid "Search for netgroups without these member of netgroups." -msgstr "" - -#, fuzzy -msgid "Modify a netgroup." -msgstr "Upraviť skupinu." - -#, fuzzy -msgid "Remove members from a netgroup." -msgstr "Členom skupiny" - -msgid "netgroups to remove" -msgstr "" - -#, fuzzy -msgid "Display information about a netgroup." -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" - -#, fuzzy -msgid "TOTP authentication Window" -msgstr "Autentifikácia" - -msgid "TOTP authentication time variance (seconds)" -msgstr "" - -#, fuzzy -msgid "TOTP Synchronization Window" -msgstr "Synchronizácia tokenu zlyhala" - -#, fuzzy -msgid "TOTP synchronization time variance (seconds)" -msgstr "Synchronizácia tokenu zlyhala" - -#, fuzzy -msgid "HOTP Authentication Window" -msgstr "Autentifikácia" - -#, fuzzy -msgid "HOTP authentication skip-ahead" -msgstr "Typy autentifikácie používateľa" - -#, fuzzy -msgid "HOTP Synchronization Window" -msgstr "Synchronizácia tokenu zlyhala" - -#, fuzzy -msgid "HOTP synchronization skip-ahead" -msgstr "Synchronizácia tokenu zlyhala" - -msgid "Modify OTP configuration options." -msgstr "Upraviť OTP konfiguračné voľby." - -msgid "Show the current OTP configuration." -msgstr "Zobraziť aktuálnu OTP konfiguráciu." - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "Unikátne ID" - -msgid "Type of the token" -msgstr "Typ tokenu" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "Vlastník" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Manager" -msgstr "Manažér" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "Deaktivované" - -msgid "Mark the token as disabled (default: false)" -msgstr "Označiť token ako deaktivovaný (predvolené: false)" - -msgid "Validity start" -msgstr "Začiatok platnosti" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "Koniec platnosti" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -#, fuzzy -msgid "Serial" -msgstr "Sériové číslo" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "Dĺžka platnosti TOTP token kódu" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -#, fuzzy -msgid "Add a new OTP token." -msgstr "Pridať nový YubiKey OTP token." - -#, fuzzy -msgid "(deprecated)" -msgstr "Zastarané voľby" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "Pridať používateľa, ktorý môže spravovať tento token." - -msgid "Delete an OTP token." -msgstr "Odstrániť OTP token" - -msgid "Search for OTP token." -msgstr "Vyhľadať OTP token" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "Upraviť OTP token" - -msgid "Rename the OTP token object" -msgstr "" - -#, fuzzy -msgid "Display information about an OTP token." -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "Set a user's password." -msgstr "Nastaviť používateľské heslo." - -msgid "New Password" -msgstr "Nové heslo" - -msgid "Current Password" -msgstr "Súčasné heslo" - -msgid "OTP" -msgstr "OTP" - -msgid "One Time Password" -msgstr "Jednorázové heslo (OTP)" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -"\n" -"Managed permissions\n" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -#, fuzzy -msgid "Permission name" -msgstr "Povolenie" - -msgid "Granted rights" -msgstr "" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" - -#, fuzzy -msgid "Effective attributes" -msgstr "Vylúčené atribúty" - -msgid "All attributes to which the permission applies" -msgstr "" - -msgid "Included attributes" -msgstr "Zahrnuté atribúty" - -msgid "User-specified attributes to which the permission applies" -msgstr "" - -msgid "Excluded attributes" -msgstr "Vylúčené atribúty" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" - -msgid "Default attributes" -msgstr "Predvolené atribúty" - -msgid "Attributes to which the permission applies by default" -msgstr "" - -#, fuzzy -msgid "Bind rule type" -msgstr "Nesprávný typ" - -msgid "Subtree to apply permissions to" -msgstr "" - -msgid "Extra target filter" -msgstr "" - -msgid "Raw target filter" -msgstr "" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" - -msgid "Target DN" -msgstr "Cieľové DN" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" - -#, fuzzy -msgid "Member of group" -msgstr "Člen skupín" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "" - -msgid "User group to apply permissions to (sets target)" -msgstr "" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "" - -msgid "Deprecated; use extratargetfilter" -msgstr "" - -#, fuzzy -msgid "Deprecated; use ipapermlocation" -msgstr "Zastarané voľby" - -msgid "Deprecated; use ipapermright" -msgstr "" - -msgid "Granted to Privilege" -msgstr "" - -#, fuzzy -msgid "Indirect Member of roles" -msgstr "Nepriame členstvo" - -#, fuzzy -msgid "Add a new permission." -msgstr "povolenie" - -#, fuzzy -msgid "Add members to a permission." -msgstr "Vyhľadať povolenia." - -msgid "member privilege" -msgstr "" - -#, fuzzy -msgid "privileges to add" -msgstr "Zlyhalo pridanie" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "" - -#, fuzzy -msgid "Permission flags" -msgstr "Povolenia" - -#, fuzzy -msgid "Delete a permission." -msgstr "povolenie" - -msgid "force delete of SYSTEM permissions" -msgstr "" - -msgid "Search for permissions." -msgstr "Vyhľadať povolenia." - -#, fuzzy -msgid "Modify a permission." -msgstr "Upraviť skupinu." - -#, fuzzy -msgid "Rename the permission object" -msgstr "Odstrániť povolenie" - -#, fuzzy -msgid "Remove members from a permission." -msgstr "Odstrániť povolenie" - -msgid "privileges to remove" -msgstr "" - -#, fuzzy -msgid "Display information about a permission." -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "Ping a remote server." -msgstr "" - -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "" - -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" - -#, fuzzy -msgid "Privilege name" -msgstr "Názov služby" - -#, fuzzy -msgid "Privilege description" -msgstr "Nastavenia privilégia" - -msgid "Granting privilege to roles" -msgstr "" - -#, fuzzy -msgid "Add a new privilege." -msgstr "Pridať novú HBAC službu." - -#, fuzzy -msgid "Add members to a privilege." -msgstr "Pridať služby do HBAC pravidla." - -#, fuzzy -msgid "member role" -msgstr "Členom" - -#, fuzzy -msgid "roles to add" -msgstr "Zlyhalo pridanie" - -#, fuzzy -msgid "Add permissions to a privilege." -msgstr "Pridať služby do HBAC pravidla." - -msgid "permission" -msgstr "povolenie" - -#, fuzzy -msgid "permissions" -msgstr "povolenie" - -#, fuzzy -msgid "Number of permissions added" -msgstr "Počet vrátených položiek" - -#, fuzzy -msgid "Delete a privilege." -msgstr "Zmazať ID rozsah." - -#, fuzzy -msgid "Search for privileges." -msgstr "Vyhľadať povolenia." - -#, fuzzy -msgid "Modify a privilege." -msgstr "Upraviť vault." - -msgid "Rename the privilege object" -msgstr "" - -#, fuzzy -msgid "Remove members from a privilege" -msgstr "Odstrániť certifikáty zo služby" - -msgid "roles to remove" -msgstr "" - -#, fuzzy -msgid "Remove permissions from a privilege." -msgstr "Odstrániť certifikáty zo služby" - -#, fuzzy -msgid "Number of permissions removed" -msgstr "Počet vrátených položiek" - -#, fuzzy -msgid "Display information about a privilege." -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -#, fuzzy -msgid "Group" -msgstr "Skupiny" - -msgid "Manage password policy for specific group" -msgstr "" - -msgid "Max lifetime (days)" -msgstr "" - -msgid "Maximum password lifetime (in days)" -msgstr "" - -msgid "Min lifetime (hours)" -msgstr "" - -msgid "Minimum password lifetime (in hours)" -msgstr "" - -msgid "History size" -msgstr "" - -#, fuzzy -msgid "Password history size" -msgstr "Politiky hesiel" - -msgid "Character classes" -msgstr "" - -msgid "Minimum number of character classes" -msgstr "" - -msgid "Min length" -msgstr "" - -msgid "Minimum length of password" -msgstr "" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "" - -msgid "Max failures" -msgstr "" - -msgid "Consecutive failures before lockout" -msgstr "" - -msgid "Failure reset interval" -msgstr "" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "" - -msgid "Lockout duration" -msgstr "" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" - -msgid "Add a new group password policy." -msgstr "" - -#, fuzzy -msgid "Delete a group password policy." -msgstr "Obnoviť Vaše heslo." - -#, fuzzy -msgid "Search for group password policies." -msgstr "Vyhľadávať skupiny." - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" - -#, fuzzy -msgid "Modify a group password policy." -msgstr "Upraviť skupinu." - -#, fuzzy -msgid "Display information about password policy." -msgstr "Zobraziť informácie o DNS forward zóne" - -msgid "User" -msgstr "Používateľ" - -msgid "Display effective policy for a specific user" -msgstr "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -#, fuzzy -msgid "RADIUS proxy server name" -msgstr "RADIUS proxy používateľské meno" - -msgid "A description of this RADIUS proxy server" -msgstr "" - -#, fuzzy -msgid "Server" -msgstr "Servery" - -msgid "The hostname or IP (with or without port)" -msgstr "" - -msgid "Secret" -msgstr "" - -msgid "The secret used to encrypt data" -msgstr "" - -msgid "Timeout" -msgstr "" - -msgid "The total timeout across all retries (in seconds)" -msgstr "" - -#, fuzzy -msgid "Retries" -msgstr "Žiadne položky." - -#, fuzzy -msgid "The number of times to retry authentication" -msgstr "Podporované typy autentifikácie používateľa" - -#, fuzzy -msgid "User attribute" -msgstr "Kategórie používateľov" - -msgid "The username attribute on the user object" -msgstr "" - -#, fuzzy -msgid "Add a new RADIUS proxy server." -msgstr "Pridať novú HBAC službu." - -#, fuzzy -msgid "Delete a RADIUS proxy server." -msgstr "RADIUS proxy používateľské meno" - -#, fuzzy -msgid "Search for RADIUS proxy servers." -msgstr "Vyhľadať DNS servery" - -#, fuzzy -msgid "Modify a RADIUS proxy server." -msgstr "RADIUS proxy používateľské meno" - -#, fuzzy -msgid "Rename the RADIUS proxy server object" -msgstr "RADIUS Proxy serverové nastavenia" - -#, fuzzy -msgid "Display information about a RADIUS proxy server." -msgstr "Zobraziť informácie o DNS forward zóne" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Domain" -msgstr "Doména" - -#, fuzzy -msgid "Add domain" -msgstr "Lokálna doména" - -#, fuzzy -msgid "Delete domain" -msgstr "Odstrániť všetko?" - -#, fuzzy -msgid "Modify realm domains." -msgstr "Realm domény" - -msgid "Force adding domain even if not in DNS" -msgstr "" - -msgid "Display the list of realm domains." -msgstr "" - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" - -msgid "Role name" -msgstr "Názov role" - -msgid "A description of this role-group" -msgstr "" - -#, fuzzy -msgid "Privileges" -msgstr "Nastavenia privilégia" - -#, fuzzy -msgid "Member services" -msgstr "Sieťové služby" - -#, fuzzy -msgid "Add a new role." -msgstr "Pridať nové ID View" - -#, fuzzy -msgid "Add members to a role." -msgstr "Pridať služby do HBAC pravidla." - -#, fuzzy -msgid "member service" -msgstr "HBAC služba" - -#, fuzzy -msgid "services to add" -msgstr "Zlyhalo pridanie" - -#, fuzzy -msgid "Add privileges to a role." -msgstr "Pridať služby do HBAC pravidla." - -msgid "privilege" -msgstr "" - -#, fuzzy -msgid "privileges" -msgstr "Nastavenia privilégia" - -#, fuzzy -msgid "Number of privileges added" -msgstr "Počet vrátených položiek" - -#, fuzzy -msgid "Delete a role." -msgstr "Odstrániť HBAC pravidlo." - -#, fuzzy -msgid "Search for roles." -msgstr "Vyhľadávať skupiny." - -#, fuzzy -msgid "Modify a role." -msgstr "Upraviť skupinu." - -msgid "Rename the role object" -msgstr "" - -#, fuzzy -msgid "Remove members from a role." -msgstr "Odstrániť certifikáty zo služby" - -#, fuzzy -msgid "services to remove" -msgstr "Držanie certifikátu odstránené" - -#, fuzzy -msgid "Remove privileges from a role." -msgstr "Odstrániť certifikáty zo služby" - -#, fuzzy -msgid "Number of privileges removed" -msgstr "Počet vrátených položiek" - -#, fuzzy -msgid "Display information about a role." -msgstr "Zobraziť informácie o DNS forward zóne" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -#, fuzzy -msgid "Self-service name" -msgstr "Názov služby" - -msgid "Attributes to which the permission applies." -msgstr "" - -#, fuzzy -msgid "Add a new self-service permission." -msgstr "Pridať novú HBAC službu." - -#, fuzzy -msgid "Delete a self-service permission." -msgstr "Vyhľadať povolenia." - -#, fuzzy -msgid "Search for a self-service permission." -msgstr "Vyhľadať povolenia." - -#, fuzzy -msgid "Modify a self-service permission." -msgstr "Upraviť HBAC službu." - -#, fuzzy -msgid "Display information about a self-service permission." -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" - -msgid "SELinux User" -msgstr "SELinux používateľ" - -#, fuzzy -msgid "HBAC Rule" -msgstr "HBAC pravidlá" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "" - -#, fuzzy -msgid "Create a new SELinux User Map." -msgstr "Vytvoriť novú skupinu." - -#, fuzzy -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "Pridať používateľov a skupiny do HBAC pravidla." - -#, fuzzy -msgid "Add users and groups to an SELinux User Map rule." -msgstr "Pridať používateľov a skupiny do HBAC pravidla." - -#, fuzzy -msgid "Delete a SELinux User Map." -msgstr "Odstrániť používateľa" - -#, fuzzy -msgid "Disable an SELinux User Map rule." -msgstr "Deaktivovať používateľský účet." - -#, fuzzy -msgid "Enable an SELinux User Map rule." -msgstr "Aktivovať HBAC pravidlo." - -#, fuzzy -msgid "Search for SELinux User Maps." -msgstr "Vyhľadať DNS servery" - -#, fuzzy -msgid "Modify a SELinux User Map." -msgstr "SELinux používateľ" - -#, fuzzy -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, fuzzy -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -msgid "Display the properties of a SELinux User Map rule." -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -#, fuzzy -msgid "Service principal" -msgstr "Názov služby" - -msgid "PAC type" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" - -#, fuzzy -msgid "Add a new IPA new service." -msgstr "Pridať novú HBAC službu." - -msgid "force principal name even if not in DNS" -msgstr "" - -#, fuzzy -msgid "Add hosts that can manage this service." -msgstr "Pridať používateľa, ktorý môže spravovať tento token." - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -#, fuzzy -msgid "Delete an IPA service." -msgstr "Odstrániť ID View." - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "Deaktivovať Kerberos kľúč a SSL certifikát služby." - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -#, fuzzy -msgid "Search for IPA services." -msgstr "Vyhľadať HBAC služby." - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" - -msgid "Search for services with these managed by hosts." -msgstr "" - -msgid "Search for services without these managed by hosts." -msgstr "" - -#, fuzzy -msgid "Modify an existing IPA service." -msgstr "Upraviť HBAC službu." - -#, fuzzy -msgid "Remove hosts that can manage this service." -msgstr "Pridať používateľa, ktorý môže spravovať tento token." - -#, fuzzy -msgid "Display information about an IPA service." -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" - -#, fuzzy -msgid "Sudo Command" -msgstr "Sudo príkazy" - -msgid "A description of this command" -msgstr "" - -#, fuzzy -msgid "Sudo Command Groups" -msgstr "Sudo príkazy" - -#, fuzzy -msgid "Create new Sudo Command." -msgstr "Vyhľadať sudo príkazy." - -#, fuzzy -msgid "Delete Sudo Command." -msgstr "Sudo príkazy" - -msgid "Search for Sudo Commands." -msgstr "Vyhľadať sudo príkazy." - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" - -#, fuzzy -msgid "Modify Sudo Command." -msgstr "Sudo príkazy" - -#, fuzzy -msgid "Display Sudo Command." -msgstr "Sudo príkazy" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -#, fuzzy -msgid "Sudo Command Group" -msgstr "Sudo príkazy" - -msgid "Commands" -msgstr "Príkazy" - -#, fuzzy -msgid "Member Sudo commands" -msgstr "sudo príkazy" - -#, fuzzy -msgid "Create new Sudo Command Group." -msgstr "Vytvoriť novú DNS forward zónu" - -#, fuzzy -msgid "Add members to Sudo Command Group." -msgstr "Vyhľadať sudo príkazy." - -#, fuzzy -msgid "member sudo command" -msgstr "sudo príkazy" - -#, fuzzy -msgid "sudo commands to add" -msgstr "sudo príkazy" - -#, fuzzy -msgid "Delete Sudo Command Group." -msgstr "Sudo príkazy" - -#, fuzzy -msgid "Search for Sudo Command Groups." -msgstr "Vyhľadať sudo príkazy." - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" - -#, fuzzy -msgid "Modify Sudo Command Group." -msgstr "Upraviť skupinu." - -msgid "Remove members from Sudo Command Group." -msgstr "" - -#, fuzzy -msgid "sudo commands to remove" -msgstr "sudo príkazy" - -#, fuzzy -msgid "Display Sudo Command Group." -msgstr "Sudo príkazy" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "Doménové NetBIOS meno" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -msgid "NetBIOS name" -msgstr "NetBIOS meno" - -#, fuzzy -msgid "Domain GUID" -msgstr "Doména" - -msgid "Fallback primary group" -msgstr "" - -msgid "Domain name" -msgstr "Doménové meno" - -#, fuzzy -msgid "Trusted domain partner" -msgstr "trust doménový užívateľ nenájdený" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -#, fuzzy -msgid "Active Directory domain administrator" -msgstr "Active Directory doména" - -#, fuzzy -msgid "Active Directory domain administrator's password" -msgstr "Active Directory doména" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -#, fuzzy -msgid "Delete a trust." -msgstr "Odstrániť používateľa" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -#, fuzzy -msgid "Search for trusts." -msgstr "Vyhľadávať skupiny." - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -#, fuzzy -msgid "Display information about a trust." -msgstr "Zobraziť informácie o IPA lokalite." - -#, fuzzy -msgid "Modify global trust configuration." -msgstr "Upraviť CA konfiguráciu." - -#, fuzzy -msgid "Show global trust configuration." -msgstr "Zobraziť konfiguračné voľby" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "Meno" - -msgid "Last name" -msgstr "Priezvisko" - -msgid "Full name" -msgstr "Celé meno" - -msgid "Display name" -msgstr "Zobrazované meno" - -msgid "Initials" -msgstr "Iniciály" - -#, fuzzy -msgid "Kerberos principal" -msgstr "Kerberos kľúč" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Email address" -msgstr "E-mailová adresa" - -#, fuzzy -msgid "Prompt to set the user password" -msgstr "Nastaviť používateľské heslo." - -#, fuzzy -msgid "Generate a random user password" -msgstr "Nastaviť používateľské heslo." - -msgid "User ID Number (system will assign one if not provided)" -msgstr "ID používateľa (systém priradí automaticky ak nie je zadané) " - -msgid "Street address" -msgstr "Ulica" - -msgid "City" -msgstr "Mesto" - -msgid "State/Province" -msgstr "Štát/Provincia" - -msgid "ZIP" -msgstr "PSČ" - -msgid "Telephone Number" -msgstr "Telefónne číslo" - -msgid "Mobile Telephone Number" -msgstr "Mobilné číslo" - -msgid "Pager Number" -msgstr "Pager číslo" - -msgid "Fax Number" -msgstr "Faxové číslo" - -msgid "Org. Unit" -msgstr "Org. jednotka" - -msgid "Job Title" -msgstr "Pracovná pozícia" - -msgid "Car License" -msgstr "" - -msgid "Account disabled" -msgstr "Účet deaktivovaný" - -msgid "User authentication types" -msgstr "Typy autentifikácie používateľa" - -msgid "Types of supported user authentication" -msgstr "Podporované typy autentifikácie používateľa" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "RADIUS proxy configuration" -msgstr "RADIUS proxy konfigurácia" - -msgid "RADIUS proxy username" -msgstr "RADIUS proxy používateľské meno" - -msgid "Department Number" -msgstr "Číslo oddelenia" - -msgid "Employee Number" -msgstr "Zamestnanecké číslo" - -msgid "Employee Type" -msgstr "Typ zamestnanca" - -msgid "Preferred Language" -msgstr "Preferovaný jazyk" - -#, fuzzy -msgid "Kerberos keys available" -msgstr "Kerberos kľúč" - -#, fuzzy -msgid "Add a new user." -msgstr "Pridať novú HBAC službu." - -#, fuzzy -msgid "Don't create user private group" -msgstr "Bez privátnej skupiny" - -#, fuzzy -msgid "Delete a user." -msgstr "Odstrániť používateľa" - -msgid "Disable a user account." -msgstr "Deaktivovať používateľský účet." - -#, fuzzy -msgid "Enable a user account." -msgstr "Deaktivovať používateľský účet." - -#, fuzzy -msgid "Search for users." -msgstr "Vyhľadať DNS servery" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -#, fuzzy -msgid "Search for users with these member of HBAC rules." -msgstr "Vyhľadať HBAC pravidlá." - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a user." -msgstr "Upraviť skupinu." - -msgid "Rename the user object" -msgstr "" - -#, fuzzy -msgid "Display information about a user." -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -#, fuzzy -msgid "Command category" -msgstr "Názov príkazu" - -msgid "Command category the rule applies to" -msgstr "" - -#, fuzzy -msgid "RunAs User category" -msgstr "Kategórie používateľov" - -msgid "RunAs User category the rule applies to" -msgstr "" - -msgid "RunAs Group category" -msgstr "" - -msgid "RunAs Group category the rule applies to" -msgstr "" - -#, fuzzy -msgid "Sudo order" -msgstr "Sudo príkazy" - -msgid "integer to order the Sudo rules" -msgstr "" - -msgid "External User" -msgstr "" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -msgid "Host Masks" -msgstr "" - -#, fuzzy -msgid "Sudo Allow Commands" -msgstr "Sudo príkazy" - -#, fuzzy -msgid "Sudo Deny Commands" -msgstr "Sudo príkazy" - -#, fuzzy -msgid "Sudo Allow Command Groups" -msgstr "Sudo príkazy" - -#, fuzzy -msgid "Sudo Deny Command Groups" -msgstr "Sudo príkazy" - -#, fuzzy -msgid "RunAs Users" -msgstr "Používatelia" - -msgid "Run as a user" -msgstr "" - -msgid "Groups of RunAs Users" -msgstr "" - -msgid "Run as any user within a specified group" -msgstr "" - -msgid "RunAs External User" -msgstr "" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -msgid "External Groups of RunAs Users" -msgstr "" - -msgid "External Groups of users that the command can run as" -msgstr "" - -#, fuzzy -msgid "RunAs Groups" -msgstr "Používateľské skupiny" - -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -#, fuzzy -msgid "RunAs External Group" -msgstr "Používateľská skupina" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -#, fuzzy -msgid "Sudo Option" -msgstr "SELinux voľby" - -#, fuzzy -msgid "Create new Sudo Rule." -msgstr "Vytvoriť nové HBAC pravidlo" - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "member sudo command group" -msgstr "Členom skupiny" - -#, fuzzy -msgid "sudo command groups to add" -msgstr "sudo príkazy" - -#, fuzzy -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "Pridať používateľov a skupiny do HBAC pravidla." - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "" - -msgid "Add group for Sudo to execute as." -msgstr "" - -#, fuzzy -msgid "Add users and groups for Sudo to execute as." -msgstr "Pridať používateľov a skupiny do HBAC pravidla." - -#, fuzzy -msgid "Add users and groups affected by Sudo Rule." -msgstr "Pridať používateľov a skupiny do HBAC pravidla." - -#, fuzzy -msgid "Delete Sudo Rule." -msgstr "Sudo pravidlá" - -#, fuzzy -msgid "Disable a Sudo Rule." -msgstr "Deaktivované sudo pravidlá \"%s\"" - -#, fuzzy -msgid "Enable a Sudo Rule." -msgstr "Aktivovať HBAC pravidlo." - -#, fuzzy -msgid "Search for Sudo Rule." -msgstr "Vyhľadať HBAC pravidlá." - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -#, fuzzy -msgid "Modify Sudo Rule." -msgstr "Upraviť vault." - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "sudo command groups to remove" -msgstr "sudo príkazy" - -#, fuzzy -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, fuzzy -msgid "Remove an option from Sudo Rule." -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -msgid "Remove group for Sudo to execute as." -msgstr "" - -#, fuzzy -msgid "Remove users and groups for Sudo to execute as." -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, fuzzy -msgid "Remove users and groups affected by Sudo Rule." -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, fuzzy -msgid "Display Sudo Rule." -msgstr "Deaktivované sudo pravidlá \"%s\"" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "" - -#, fuzzy -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "Počet vrátených položiek" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -#, fuzzy -msgid "ACL name" -msgstr "ACI názov" - -#, fuzzy -msgid "Profile category" -msgstr "Configurácia profilu" - -msgid "Profile category the ACL applies to" -msgstr "" - -#, fuzzy -msgid "User category the ACL applies to" -msgstr "Kategórie používateľov" - -msgid "Host category the ACL applies to" -msgstr "" - -msgid "Service category the ACL applies to" -msgstr "" - -msgid "Profiles" -msgstr "Profily" - -#, fuzzy -msgid "Create a new CA ACL." -msgstr "Vytvoriť nové HBAC pravidlo" - -#, fuzzy -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "Pridať používateľov a skupiny do HBAC pravidla." - -#, fuzzy -msgid "Add profiles to a CA ACL." -msgstr "Odstrániť CA ACL." - -#, fuzzy -msgid "member Certificate Profile" -msgstr "Certifikačný profil" - -#, fuzzy -msgid "Certificate Profiles to add" -msgstr "Certifikačné profily" - -#, fuzzy -msgid "Add services to a CA ACL." -msgstr "Pridať služby do HBAC pravidla." - -#, fuzzy -msgid "Add users and groups to a CA ACL." -msgstr "Pridať používateľov a skupiny do HBAC pravidla." - -msgid "Delete a CA ACL." -msgstr "Odstrániť CA ACL." - -msgid "Disable a CA ACL." -msgstr "Deaktivovať CA ACL." - -#, fuzzy -msgid "Enable a CA ACL." -msgstr "Deaktivovať CA ACL." - -#, fuzzy -msgid "Search for CA ACLs." -msgstr "Vyhľadať HBAC pravidlá." - -#, fuzzy -msgid "Modify a CA ACL." -msgstr "Deaktivovať CA ACL." - -#, fuzzy -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, fuzzy -msgid "Remove profiles from a CA ACL." -msgstr "Odstrániť certifikáty zo služby" - -#, fuzzy -msgid "Certificate Profiles to remove" -msgstr "Certifikačné profily" - -#, fuzzy -msgid "Remove services from a CA ACL." -msgstr "Odstrániť certifikáty zo služby" - -#, fuzzy -msgid "Remove users and groups from a CA ACL." -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -msgid "Display the properties of a CA ACL." -msgstr "" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "ID profilu" - -#, fuzzy -msgid "Certificate Profile to use" -msgstr "Certifikačné profily" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -#, fuzzy -msgid "Profile description" -msgstr "Popis skupiny" - -msgid "Brief description of this profile" -msgstr "" - -#, fuzzy -msgid "Store issued certificates" -msgstr "Certifikát služby" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "Odstrániť certifikačný profil" - -#, fuzzy -msgid "Search for Certificate Profiles." -msgstr "Certifikačné profily" - -msgid "Import a Certificate Profile." -msgstr "Importovať certifikačný profil" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -#, fuzzy -msgid "Modify Certificate Profile configuration." -msgstr "Upraviť CA konfiguráciu." - -#, fuzzy -msgid "File containing profile configuration" -msgstr "Configurácia profilu" - -#, fuzzy -msgid "Display the properties of a Certificate Profile." -msgstr "Odstrániť certifikačný profil" - -#, fuzzy -msgid "Write profile configuration to file" -msgstr "Configurácia profilu" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" - -msgid "Query current Domain Level." -msgstr "" - -msgid "Current domain level:" -msgstr "" - -msgid "Change current Domain Level." -msgstr "" - -#, fuzzy -msgid "Domain Level" -msgstr "Doménové meno" - -#, fuzzy -msgid "Add certificates to host entry" -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy -msgid "Remove certificates from host entry" -msgstr "Odstrániť certifikáty zo služby" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "Fallback to AD DC LDAP" -msgstr "" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" - -msgid "Add to default group" -msgstr "Pridať do predvolenej skupiny" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" - -msgid "Search scope" -msgstr "Rozsah vyhľadávania" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" - -#, fuzzy -msgid "Remove users that can manage this token." -msgstr "Pridať používateľa, ktorý môže spravovať tento token." - -#, fuzzy -msgid "Target DN subtree" -msgstr "Cieľové DN" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" - -msgid "Origin DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -#, fuzzy -msgid "Server name" -msgstr "Názov služby" - -#, fuzzy -msgid "IPA server hostname" -msgstr "Názov role servera" - -msgid "Managed suffix" -msgstr "" - -#, fuzzy -msgid "Min domain level" -msgstr "neplatné doménové meno" - -#, fuzzy -msgid "Minimum domain level" -msgstr "neplatné doménové meno" - -msgid "Max domain level" -msgstr "" - -msgid "Maximum domain level" -msgstr "" - -#, fuzzy -msgid "Delete IPA server." -msgstr "Odstrániť používateľa" - -#, fuzzy -msgid "Search for IPA servers." -msgstr "Vyhľadať DNS servery" - -#, fuzzy -msgid "Show IPA server." -msgstr "IPA Server" - -msgid "Add new certificates to a service" -msgstr "Pridať nové certifikáty k službe" - -msgid "Remove certificates from a service" -msgstr "Odstrániť certifikáty zo služby" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed Target" -msgstr "" - -#, fuzzy -msgid "Create a new service delegation rule." -msgstr "Vytvoriť nové HBAC pravidlo" - -msgid "Add member to a named service delegation rule." -msgstr "" - -msgid "member principal" -msgstr "" - -#, fuzzy -msgid "principal to add" -msgstr "Zlyhalo pridanie" - -msgid "Add target to a named service delegation rule." -msgstr "" - -msgid "member service delegation target" -msgstr "" - -msgid "service delegation targets to add" -msgstr "" - -#, fuzzy -msgid "Delete service delegation." -msgstr "Odstrániť IPA lokalitu." - -#, fuzzy -msgid "Search for service delegations rule." -msgstr "Vyhľadať HBAC služby." - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" - -#, fuzzy -msgid "Remove member from a named service delegation rule." -msgstr "Odstrániť služby a skupiny služieb z HBAC pravidla." - -msgid "principal to remove" -msgstr "" - -#, fuzzy -msgid "Remove target from a named service delegation rule." -msgstr "Odstrániť služby a skupiny služieb z HBAC pravidla." - -msgid "service delegation targets to remove" -msgstr "" - -#, fuzzy -msgid "Display information about a named service delegation rule." -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "Create a new service delegation target." -msgstr "" - -msgid "Add member to a named service delegation target." -msgstr "" - -msgid "Delete service delegation target." -msgstr "" - -#, fuzzy -msgid "Search for service delegation target." -msgstr "Vyhľadať HBAC služby." - -msgid "Remove member from a named service delegation target." -msgstr "" - -#, fuzzy -msgid "Display information about a named service delegation target." -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" - -#, fuzzy -msgid "Activate a stage user." -msgstr "Aktívni používatelia" - -#, fuzzy -msgid "Add a new stage user." -msgstr "Pridať novú HBAC službu." - -msgid "Create Stage user in from a delete user" -msgstr "" - -#, fuzzy -msgid "Delete a stage user." -msgstr "Odstrániť používateľa" - -#, fuzzy -msgid "Search for stage users." -msgstr "Vyhľadať DNS servery" - -msgid "Search for stage users with these member of groups." -msgstr "" - -msgid "Search for stage users without these member of groups." -msgstr "" - -msgid "Search for stage users with these member of netgroups." -msgstr "" - -msgid "Search for stage users without these member of netgroups." -msgstr "" - -msgid "Search for stage users with these member of roles." -msgstr "" - -msgid "Search for stage users without these member of roles." -msgstr "" - -msgid "Search for stage users with these member of HBAC rules." -msgstr "" - -msgid "Search for stage users without these member of HBAC rules." -msgstr "" - -msgid "Search for stage users with these member of sudo rules." -msgstr "" - -msgid "Search for stage users without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a stage user." -msgstr "Upraviť skupinu." - -msgid "Rename the stage user object" -msgstr "" - -#, fuzzy -msgid "Display information about a stage user." -msgstr "Zobraziť informácie o DNS forward zóne" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" - -#, fuzzy -msgid "Segment name" -msgstr "Detaily segmentu" - -msgid "Arbitrary string identifying the segment" -msgstr "" - -msgid "Left node" -msgstr "" - -msgid "Left replication node - an IPA server" -msgstr "" - -msgid "Right node" -msgstr "" - -msgid "Right replication node - an IPA server" -msgstr "" - -msgid "Connectivity" -msgstr "" - -msgid "Direction of replication between left and right replication node" -msgstr "" - -#, fuzzy -msgid "Attributes to strip" -msgstr "Atribúty" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" - -#, fuzzy -msgid "Attributes to replicate" -msgstr "Atribúty" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" - -msgid "Attributes for total update" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" - -#, fuzzy -msgid "Session timeout" -msgstr "Čas prístupu" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" - -#, fuzzy -msgid "Replication agreement enabled" -msgstr "voľby nie sú povolené" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" - -#, fuzzy -msgid "Suffix name" -msgstr "Názov služby" - -msgid "LDAP suffix to be managed" -msgstr "" - -#, fuzzy -msgid "Add a new segment." -msgstr "Pridať novú HBAC službu." - -#, fuzzy -msgid "Delete a segment." -msgstr "Odstrániť používateľa" - -#, fuzzy -msgid "Search for topology segments." -msgstr "Vyhľadať DNS servery" - -#, fuzzy -msgid "Modify a segment." -msgstr "Upraviť skupinu." - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" - -msgid "Initialize left node" -msgstr "" - -msgid "Initialize right node" -msgstr "" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "" - -#, fuzzy -msgid "Display a segment." -msgstr "Zobrazované meno" - -msgid "Add a new topology suffix to be managed." -msgstr "" - -msgid "Delete a topology suffix." -msgstr "" - -#, fuzzy -msgid "Search for topology suffices." -msgstr "Vyhľadať HBAC služby." - -#, fuzzy -msgid "Modify a topology suffix." -msgstr "Upraviť skupinu." - -msgid "Show managed suffix." -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "Preserved user" -msgstr "Uschovaný používateľ" - -msgid "Add one or more certificates to the user entry" -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -msgid "Remove one or more certificates to the user entry" -msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" - -msgid "Move deleted user into staged area" -msgstr "" - -#, fuzzy -msgid "Undelete a delete user account." -msgstr "Deaktivovať používateľský účet." - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -#, fuzzy -msgid "Vault name" -msgstr "Priezvisko" - -#, fuzzy -msgid "Vault description" -msgstr "Popis skupiny" - -msgid "Vault type" -msgstr "" - -msgid "Salt" -msgstr "" - -msgid "Vault salt" -msgstr "" - -#, fuzzy -msgid "Public key" -msgstr "Verejný SSH kľúč" - -#, fuzzy -msgid "Vault public key" -msgstr "Verejný SSH kľúč" - -#, fuzzy -msgid "Owner users" -msgstr "Predpripravení používatelia" - -#, fuzzy -msgid "Owner groups" -msgstr "Používateľská skupina" - -#, fuzzy -msgid "Owner services" -msgstr "HBAC služby" - -#, fuzzy -msgid "Failed owners" -msgstr "Zlyhalo pridanie" - -#, fuzzy -msgid "Vault service" -msgstr "HBAC služba" - -msgid "Shared vault" -msgstr "" - -#, fuzzy -msgid "Vault user" -msgstr "Predvolená používateľská skupina" - -#, fuzzy -msgid "Transport Certificate" -msgstr "Získať certifikát" - -msgid "Service name of the service vault" -msgstr "" - -msgid "Username of the user vault" -msgstr "" - -#, fuzzy -msgid "Add members to a vault." -msgstr "Pridať služby do HBAC pravidla." - -#, fuzzy -msgid "Add owners to a vault." -msgstr "Pridať služby do HBAC pravidla." - -msgid "owner user" -msgstr "" - -#, fuzzy -msgid "owner group" -msgstr "Používateľská skupina" - -#, fuzzy -msgid "owner service" -msgstr "Akákoľvek služba" - -msgid "Owners that could not be added" -msgstr "" - -#, fuzzy -msgid "Number of owners added" -msgstr "Počet vrátených položiek" - -msgid "Session key wrapped with transport certificate" -msgstr "" - -msgid "Vault data encrypted with session key" -msgstr "" - -msgid "Nonce" -msgstr "" - -#, fuzzy -msgid "Delete a vault." -msgstr "Odstrániť používateľa" - -#, fuzzy -msgid "Search for vaults." -msgstr "Vyhľadávať skupiny." - -#, fuzzy -msgid "List all service vaults" -msgstr "Deaktivovaná služba \"%(value)s\"" - -#, fuzzy -msgid "List all user vaults" -msgstr "Deaktivovať používateľský účet." - -#, fuzzy -msgid "Remove members from a vault." -msgstr "Odstrániť certifikáty zo služby" - -#, fuzzy -msgid "Remove owners from a vault." -msgstr "Odstrániť certifikáty zo služby" - -#, fuzzy -msgid "Owners that could not be removed" -msgstr "Certifikačné profily nemôžu byť premenované" - -#, fuzzy -msgid "Number of owners removed" -msgstr "Počet vrátených položiek" - -#, fuzzy -msgid "Display information about a vault." -msgstr "Zobraziť informácie o IPA lokalite." - -#, fuzzy -msgid "Show vault configuration." -msgstr "Zobraziť konfiguračné voľby" - -msgid "Output file to store the transport certificate" -msgstr "" - -msgid "Add owners to a vault container." -msgstr "" - -#, fuzzy -msgid "Delete a vault container." -msgstr "Zmazať ID rozsah." - -msgid "Remove owners from a vault container." -msgstr "" - -#, fuzzy -msgid "Display information about a vault container." -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "" - -#, fuzzy -msgid "Hostname (FQDN)" -msgstr "Názov zóny (FQDN)" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Managed suffixes" -msgstr "" - -msgid "Check connection to remote IPA server." -msgstr "" - -#, fuzzy -msgid "Remote server name" -msgstr "Názov role servera" - -#, fuzzy -msgid "Remote IPA server hostname" -msgstr "Názov role servera" - -msgid "suffix" -msgstr "" - -msgid "Search for servers with these managed suffixes." -msgstr "" - -msgid "Search for servers without these managed suffixes." -msgstr "" - -#, fuzzy -msgid "Add a manager to the stage user entry" -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy -msgid "Remove a manager to the stage user entry" -msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -msgid "Managed LDAP suffix DN" -msgstr "" - -#, fuzzy -msgid "Search for topology suffixes." -msgstr "Vyhľadávať skupiny." - -#, fuzzy -msgid "Add a manager to the user entry" -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy -msgid "Remove a manager to the user entry" -msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Comma-separated list of attributes" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" - -#, fuzzy -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Globálne forwardery. Vlastný port môže byť nastavený použítím štandardného " -"formátu \"IP_ADRESA port PORT\" pre každý forwarder " - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" - -msgid "DNS class" -msgstr "" - -msgid "Comma-separated list of raw A records" -msgstr "" - -msgid "Comma-separated list of raw AAAA records" -msgstr "" - -msgid "Comma-separated list of raw A6 records" -msgstr "" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "" - -msgid "Comma-separated list of raw APL records" -msgstr "" - -msgid "Comma-separated list of raw CERT records" -msgstr "" - -msgid "Comma-separated list of raw CNAME records" -msgstr "" - -msgid "Comma-separated list of raw DHCID records" -msgstr "" - -msgid "Comma-separated list of raw DLV records" -msgstr "" - -msgid "Comma-separated list of raw DNAME records" -msgstr "" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "" - -msgid "Comma-separated list of raw DS records" -msgstr "" - -msgid "Comma-separated list of raw HIP records" -msgstr "" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "" - -msgid "Comma-separated list of raw KEY records" -msgstr "" - -msgid "KEY Flags" -msgstr "" - -msgid "KEY Protocol" -msgstr "" - -msgid "Protocol" -msgstr "" - -msgid "KEY Algorithm" -msgstr "" - -#, fuzzy -msgid "KEY Public Key" -msgstr "Verejný SSH kľúč" - -#, fuzzy -msgid "Public Key" -msgstr "Verejný SSH kľúč" - -msgid "Comma-separated list of raw KX records" -msgstr "" - -msgid "Comma-separated list of raw LOC records" -msgstr "" - -msgid "Comma-separated list of raw MX records" -msgstr "" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "" - -msgid "Comma-separated list of raw NS records" -msgstr "" - -msgid "Comma-separated list of raw NSEC records" -msgstr "" - -#, fuzzy -msgid "NSEC Next Domain Name" -msgstr "NIS doménové meno" - -#, fuzzy -msgid "Next Domain Name" -msgstr "Doménové meno" - -msgid "NSEC Type Map" -msgstr "" - -#, fuzzy -msgid "Type Map" -msgstr "Typ" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "" - -msgid "Comma-separated list of raw PTR records" -msgstr "" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "" - -msgid "RRSIG Type Covered" -msgstr "" - -msgid "Type Covered" -msgstr "" - -msgid "RRSIG Algorithm" -msgstr "" - -msgid "RRSIG Labels" -msgstr "" - -msgid "Labels" -msgstr "" - -msgid "RRSIG Original TTL" -msgstr "" - -msgid "Original TTL" -msgstr "" - -msgid "RRSIG Signature Expiration" -msgstr "" - -#, fuzzy -msgid "Signature Expiration" -msgstr "Vypršanie hesla" - -msgid "RRSIG Signature Inception" -msgstr "" - -msgid "Signature Inception" -msgstr "" - -msgid "RRSIG Key Tag" -msgstr "" - -msgid "RRSIG Signer's Name" -msgstr "" - -msgid "Signer's Name" -msgstr "" - -msgid "RRSIG Signature" -msgstr "" - -msgid "Signature" -msgstr "" - -msgid "Comma-separated list of raw RP records" -msgstr "" - -msgid "Comma-separated list of raw SIG records" -msgstr "" - -msgid "SIG Type Covered" -msgstr "" - -msgid "SIG Algorithm" -msgstr "" - -msgid "SIG Labels" -msgstr "" - -msgid "SIG Original TTL" -msgstr "" - -msgid "SIG Signature Expiration" -msgstr "" - -msgid "SIG Signature Inception" -msgstr "" - -msgid "SIG Key Tag" -msgstr "" - -#, fuzzy -msgid "SIG Signer's Name" -msgstr "Názov ID View" - -msgid "SIG Signature" -msgstr "" - -msgid "Comma-separated list of raw SPF records" -msgstr "" - -msgid "Comma-separated list of raw SRV records" -msgstr "" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "" - -msgid "Comma-separated list of raw TA records" -msgstr "" - -msgid "Comma-separated list of raw TKEY records" -msgstr "" - -msgid "Comma-separated list of raw TSIG records" -msgstr "" - -msgid "Comma-separated list of raw TXT records" -msgstr "" - -msgid "SOA time to live" -msgstr "" - -msgid "SOA record time to live" -msgstr "" - -msgid "SOA class" -msgstr "" - -#, fuzzy -msgid "SOA record class" -msgstr "Sériové číslo SOA záznamu" - -#, fuzzy -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Globálne forwardery. Vlastný port môže byť nastavený použítím štandardného " -"formátu \"IP_ADRESA port PORT\" pre každý forwarder " - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" - -#, fuzzy -msgid "Consume an entitlement." -msgstr "Príkaz nie je implementovaný" - -#, fuzzy -msgid "Quantity" -msgstr "Identita" - -#, fuzzy -msgid "Search for entitlement accounts." -msgstr "Vyhľadávanie existujúcich certifikátov." - -#, fuzzy -msgid "Retrieve the entitlement certs." -msgstr "Získať existujúci certifikát." - -#, fuzzy -msgid "Import an entitlement certificate." -msgstr "Získať existujúci certifikát." - -msgid "UUID" -msgstr "" - -msgid "Enrollment UUID" -msgstr "" - -msgid "Register to the entitlement system." -msgstr "" - -msgid "Username" -msgstr "Používateľské meno" - -#, fuzzy -msgid "Enrollment UUID (not implemented)" -msgstr "Príkaz nie je implementovaný" - -#, fuzzy -msgid "Registration password" -msgstr "Obnoviť heslo" - -msgid "Display current entitlements." -msgstr "" - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" - -msgid "comma-separated list of users to add" -msgstr "" - -msgid "comma-separated list of groups to add" -msgstr "" - -msgid "comma-separated list of users to remove" -msgstr "" - -msgid "comma-separated list of groups to remove" -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Source host category" -msgstr "" - -msgid "Source host category the rule applies to" -msgstr "" - -msgid "Source Hosts" -msgstr "" - -#, fuzzy -msgid "Source Host Groups" -msgstr "Vyhľadávať skupiny." - -msgid "comma-separated list of hosts to add" -msgstr "" - -msgid "comma-separated list of host groups to add" -msgstr "" - -msgid "comma-separated list of HBAC services to add" -msgstr "" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "" - -#, fuzzy -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "Pridať používateľov a skupiny do HBAC pravidla." - -msgid "comma-separated list of hosts to remove" -msgstr "" - -msgid "comma-separated list of host groups to remove" -msgstr "" - -msgid "comma-separated list of HBAC services to remove" -msgstr "" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "" - -#, fuzzy -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" - -msgid "Source host" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "comma-separated list of netgroups to add" -msgstr "" - -msgid "comma-separated list of netgroups to remove" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" - -#, fuzzy -msgid "Target members of a group" -msgstr "Členom skupiny" - -#, fuzzy -msgid "User group to apply permissions to" -msgstr "ACI používateľskej skupiny udeluje prístup k" - -msgid "comma-separated list of privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI" -msgstr "" - -#, fuzzy -msgid "Permission type" -msgstr "Povolenie" - -msgid "comma-separated list of privileges to remove" -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "comma-separated list of roles to add" -msgstr "" - -msgid "comma-separated list of permissions" -msgstr "" - -msgid "comma-separated list of roles to remove" -msgstr "" - -msgid "comma-separated list of privileges" -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "comma-separated list of sudo commands to add" -msgstr "" - -msgid "comma-separated list of sudo commands to remove" -msgstr "" - -#, fuzzy -msgid "Active directory domain administrator's password" -msgstr "Active Directory doména s POSIX attribútmy" - -#, fuzzy -msgid "GECOS field" -msgstr "GECOS" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" - -msgid "comma-separated list of sudo command groups to add" -msgstr "" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "" - -msgid "Failed members" -msgstr "" - -msgid "Failed source hosts/hostgroups" -msgstr "" - -msgid "Failed hosts/hostgroups" -msgstr "" - -#, fuzzy -msgid "Failed users/groups" -msgstr "Predvolená používateľská skupina" - -msgid "Failed service/service groups" -msgstr "" - -#, fuzzy -msgid "Failed to remove" -msgstr "Zlyhalo pridanie" - -msgid "Failed RunAs" -msgstr "" - -msgid "Failed RunAsGroup" -msgstr "" - -#, fuzzy -msgid "Failed profiles" -msgstr "Špecifikované profily" - -#, fuzzy -msgid "Failed CAs" -msgstr "Zlyhalo pridanie" - -msgid "Failed member manager" -msgstr "" - -#, fuzzy -msgid "Failed managedby" -msgstr "Zlyhalo pridanie" - -msgid "Failed allowed to retrieve keytab" -msgstr "" - -msgid "Failed allowed to create keytab" -msgstr "" - -#, fuzzy -msgid "Failed targets" -msgstr "Zlyhalo pridanie" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "neznáma chyba %(code)d od %(server)s: %(error)s" - -msgid "an internal error has occurred" -msgstr "nastala interná chyba" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "nastala interná chyba na serveri '%(server)s'" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "neznámy príkaz '%(name)s'" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "chyba na serveri '%(server)s': %(error)s" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "nedá sa pripojiť k '%(uri)s': %(error)s" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Nevalídna JSON-RPC požiadavka: %(error)s" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "" - -msgid "did not receive Kerberos credentials" -msgstr "" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "Služba '%(service)s' nenájdená v Kerberos databáze" - -msgid "No credentials cache found" -msgstr "" - -msgid "Ticket expired" -msgstr "" - -msgid "Credentials cache permissions incorrect" -msgstr "" - -msgid "Bad format in credentials cache" -msgstr "" - -msgid "Cannot resolve KDC for requested realm" -msgstr "" - -#, fuzzy -msgid "Session error" -msgstr "Chyba validácie" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Nedostatočný prístup: %(info)s" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#, python-format -msgid "'%(name)s' is required" -msgstr "'%(name)s' je požadované" - -#, fuzzy, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "Nevalídna JSON-RPC požiadavka: %(error)s" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - -msgid "Passwords do not match" -msgstr "Heslá sa nezhodujú" - -msgid "Command not implemented" -msgstr "Príkaz nie je implementovaný" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "Klient nie je nakonfigurovaný. Spustite ipa-client-install." - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "Nie je možné interaktívne získať %(name)s" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "Doména '%(domain)s' nie je koreňovou doménou pre les '%(forest)s'" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -msgid "This entry already exists" -msgstr "Táto položka už existuje" - -msgid "You must enroll a host in order to create a host service" -msgstr "" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" - -msgid "This command requires root access" -msgstr "Tento príkaz vyžaduje root oprávnenia" - -msgid "This is already a posix group" -msgstr "Toto už je posix skupina" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -#, fuzzy -msgid "This entry is already enabled" -msgstr "Táto položka bola už deaktivovaná" - -msgid "This entry is already disabled" -msgstr "Táto položka bola už deaktivovaná" - -msgid "This entry cannot be enabled or disabled" -msgstr "Táto položka nemôže byť aktivovaná alebo deaktivovaná" - -msgid "This entry is not a member" -msgstr "Táto položka nie je členom" - -msgid "A group may not be a member of itself" -msgstr "Skupina nemože byť členom seba samej" - -msgid "This entry is already a member" -msgstr "Táto položka už je členom" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Base64 dekódovanie zlyhalo: %(reason)s" - -#, fuzzy -msgid "A group may not be added as a member of itself" -msgstr "Skupina nemože byť členom seba samej" - -#, fuzzy -msgid "The default users group cannot be removed" -msgstr "Certifikačné profily nemôžu byť premenované" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "'%(entry)s' nemá certifikát." - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "%(attr)s neobsahuje '%(value)s'" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -#, fuzzy -msgid "This group already allows external members" -msgstr "Táto položka už je členom" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, fuzzy, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "požiadavka zlyhala s HTTP stavom %d" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, fuzzy, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "%(attr)s neobsahuje '%(value)s'" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "change collided with another change" -msgstr "zmena spôsobila kolíziu s inou zmenou" - -msgid "no modifications to be performed" -msgstr "žiadne úpravy neboli vykonané" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(desc)s: %(info)s" - -msgid "limits exceeded for this query" -msgstr "" - -#, python-format -msgid "%(info)s" -msgstr "%(info)s" - -#, fuzzy -msgid "modifying primary key is not allowed" -msgstr "voľby nie sú povolené" - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "%(attr)s: Len jedna hodnota je povolená." - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "%(attr)s: Nesprávna syntax." - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "Zlý vyhľadávací filter %(info)s" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "Nakonfigurovaný časový limit bol dosiahnutý" - -msgid "Configured size limit exceeded" -msgstr "Nakonfigurovaný veľkostný limit bol dosiahnutý" - -#, fuzzy -msgid "Configured administrative server limit exceeded" -msgstr "Nakonfigurovaný veľkostný limit bol dosiahnutý" - -#, fuzzy, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "Chyba formátu certifikátu: %(error)s" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "Chyba formátu certifikátu: %(error)s" - -msgid "Already registered" -msgstr "" - -msgid "Not registered yet" -msgstr "" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" -"%(key)s nemôže byť odstránené pretože %(label)s %(dependent)s to vyžaduje" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" -"%(key)s nemôže byť odstránené alebo deaktivované pretože je to posledný člen " -"%(label)s %(container)s" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "%(label)s %(key)s nemôže byť ostránené/upravené: %(reason)s" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "%(name)s certifikát nie je platný" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, fuzzy, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "Nameserver '%(host)s' nemá zodpovedajúci A/AAAA záznam" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "DNS kontrola zlyhala: Očakávané {%(expected)s} prijaté {%(got)s}" - -#, python-format -msgid "%(exception)s" -msgstr "%(exception)s" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" -"Sémantika DNS forwarderov je zmenená od IPA 4.0.\n" -"Pravdepodobne ste chceli použiť (dnsforwardzone-*).\n" -"Pre viac informácií prosím prečítajte dokumentáciu." - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" -"DNSSEC podpora je experimentálna.\n" -"%(additional_info)s" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "'%(option)s'voľba je zastaraná. %(additional_info)s" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" -"Sémantika %(label)s bola zmenená. %(current_behavior)s\n" -"%(hint)s" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "DNS server %(server)s: %(error)s." - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"DNS server %(server)s nepodporuje DNSSEC: %(error)s.\n" -"Ak je DNSSEC validácia aktivovaná na IPA serveroch, prosím deaktivujte ju." - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"DNS server %(server)s nepodporuje EDNS0 (RFC 6891): %(error)s.\n" -"Ak je DNSSEC validácia aktivovaná na IPA serveroch, prosím deaktivujte ju." - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" -"DNSSEC validácia zlyhala: %(error)s.\n" -"Prosím overte Vašu DNSSEC konfiguráciu alebo deaktivujte DNSSEC validáciu na " -"všetkých IPA serveroch." - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "'%(command)s' príkaz je zastaraný %(additional_info)s" - -#, python-format -msgid "%(line)s" -msgstr "%(line)s" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d variables" -msgstr "Účet deaktivovaný" - -#, fuzzy, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -msgid "A dictionary representing an LDAP entry" -msgstr "" - -msgid "A list of LDAP entries" -msgstr "" - -msgid "All commands should at least have a result" -msgstr "" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "" - -msgid "Passwords do not match!" -msgstr "Heslá sa nezhodujú!" - -msgid "No matching entries found" -msgstr "Nenašli sa žiadne zhodné položky" - -msgid "Topic or Command" -msgstr "Téma alebo príkaz" - -#, fuzzy -msgid "The topic or command name." -msgstr "Téma alebo príkaz" - -#, fuzzy -msgid "Topic commands:" -msgstr "Téma alebo príkaz" - -msgid "To get command help, use:" -msgstr "" - -msgid " ipa --help" -msgstr "" - -msgid "Command name" -msgstr "Názov príkazu" - -msgid "Positional arguments" -msgstr "Pozičný argument" - -#, python-format -msgid "Same as --%s" -msgstr "Rovnaké ako --%s" - -msgid "Deprecated options" -msgstr "Zastarané voľby" - -#, fuzzy -msgid "No file to read" -msgstr "Zlyhalo pridanie" - -msgid "Results are truncated, try a more specific search" -msgstr "Výsledky sú skrátené, vyskúšajte viac špecifické vyhľadávanie" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "Neznáma voľba: %(option)s" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - -#, fuzzy, python-format -msgid "%(filename)s: file not found" -msgstr "Súbor %(file)s nenájdený" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - -msgid "Filename is empty" -msgstr "" - -#, fuzzy, python-format -msgid "Permission denied: %(file)s" -msgstr "Nastavenia oprávnenia" - -msgid "empty DNS label" -msgstr "prázdny DNS label" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "DNS label nemôže byť dlhší ako 63 znakov" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" -"povolené sú len písmená, čísla, %(chars)s . DNS label nesmie začínať alebo " -"končiť s %(chars2)s" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "príliš mnoho '@' znakov" - -#, fuzzy -msgid "cannot be longer that {} characters" -msgstr "DNS label nemôže byť dlhší ako 63 znakov" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "nie je plne kvalifikované (FQDN)" - -msgid "invalid SSH public key" -msgstr "neplatný verejný SSH kľúč" - -msgid "options are not allowed" -msgstr "voľby nie sú povolené" - -#, fuzzy -msgid "invalid hostmask" -msgstr "neplatné doménové meno" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "dotaz '%(owner)s %(rtype)s': %(error)s" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "dotaz '%(owner)s %(rtype)s' s EDNS0: %(error)s" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" -"záznam '%(owner)s %(rtype)s' neprešiel DNSSEC validáciou na serveri %(ip)s" - -msgid "invalid escape code in domain name" -msgstr "neplatný escape kód v doménovom mene" - -msgid "domain name cannot be longer than 255 characters" -msgstr "doménové meno nemôže byť dlhšie ako 255 znakov" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "DNS label nemôže byť dlhší ako 63 znakov" - -msgid "invalid domain name" -msgstr "neplatné doménové meno" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" -"doménové meno '%(domain)s' by malo byť normalizované na: %(normalized)s" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "neplatné doménové meno: %s" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "neplatná verzia IP adresy (je %(value)d, musí byť %(required_value)d)!" - -msgid "invalid IP address format" -msgstr "neplatný formát IP adresy" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "%(port)s nie je platný port" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "incorrect type" -msgstr "Nesprávný typ" - -msgid "Only one value is allowed" -msgstr "Len jedna hodnota je povolená" - -msgid "this option is deprecated" -msgstr "táto voľba je zastaraná" - -msgid "must be True or False" -msgstr "musí byť True alebo False" - -msgid "must be an integer" -msgstr "musí byť integer" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "musí byť najmenej %(minvalue)d" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "môže byť najviac %(maxvalue)d" - -msgid "must be a decimal number" -msgstr "musí byť desiatkové číslo" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "musí byť najmenej %(minvalue)s" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "môže byť najviac %(maxvalue)s" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -msgid "must be binary data" -msgstr "musí byť binárny údaj" - -#, fuzzy, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "musí byť najmenej %(minvalue)d" - -#, fuzzy, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "môže byť najviac %(maxvalue)d" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -#, fuzzy -msgid "must be a certificate" -msgstr "Revokácia certifikátu." - -#, fuzzy -msgid "must be a certificate signing request" -msgstr "Certifikačná požiadavka" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "musí byť Unicode text" - -msgid "Leading and trailing spaces are not allowed" -msgstr "Počiatočné a koncové medzery nie sú povolené" - -#, fuzzy, python-format -msgid "must be at least %(minlength)d characters" -msgstr "musí byť najmenej %(minvalue)d" - -#, fuzzy, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "môže byť najviac %(maxvalue)d" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "" - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "" - -#, fuzzy, python-format -msgid "must be '%(value)s'" -msgstr "Nájdené '%(value)s'" - -#, fuzzy, python-format -msgid "must be one of %(values)s" -msgstr "musí byť najmenej %(minvalue)s" - -#, fuzzy -msgid "must be datetime value" -msgstr "musí byť najmenej %(minvalue)d" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -#, fuzzy -msgid "must be DNS name" -msgstr "musí byť integer" - -#, fuzzy -msgid "must be absolute" -msgstr "musí byť integer" - -#, fuzzy -msgid "must be relative" -msgstr "musí byť True alebo False" - -#, fuzzy -msgid "must be dictionary" -msgstr "musí byť binárny údaj" - -msgid "must be Kerberos principal" -msgstr "" - -#, fuzzy, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "Odstránený profil \"%(value)s\"" - -#, fuzzy -msgid "Service principal is required" -msgstr "Nové heslo je povinné" - -#, fuzzy -msgid "must be at least 0" -msgstr "musí byť najmenej %(minvalue)d" - -#, fuzzy -#| msgid "invalid domain name" -msgid "invalid valid hex" -msgstr "neplatné doménové meno" - -#, fuzzy -#| msgid "minimum serial number" -msgid "invalid serial number 0" -msgstr "minimálne sériové číslo" - -#, fuzzy, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "Získanie CA stavu zlyhalo: %s" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "požiadavka zlyhala s HTTP stavom %d" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "Získanie CA stavu zlyhalo: %s" - -#, fuzzy, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "Získanie CA stavu zlyhalo: %s" - -#, python-format -msgid "objectclass %s not found" -msgstr "objectclass %s nenájdená" - -#, fuzzy -msgid "Trusting forest" -msgstr "Trust nastavenia" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -#, fuzzy -msgid "Unknown" -msgstr "Neznáma chyba" - -#, fuzzy -msgid "Non-Active Directory domain" -msgstr "Active Directory doména" - -msgid "Active Directory domain" -msgstr "Active Directory doména" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "Failed to authenticate to CA REST API" -msgstr "" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "" - -#, fuzzy, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "%(parent)s: %(oname)s nenájdený" - -#, fuzzy -msgid "automount location" -msgstr "Autentifikácia" - -#, fuzzy -msgid "automount locations" -msgstr "lokality" - -#, fuzzy -msgid "Automount Locations" -msgstr "IPA lokality" - -#, fuzzy -msgid "Automount Location" -msgstr "Autentifikácia" - -#, fuzzy, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "Pridaná IPA lokalita \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "Odstránená IPA lokalita \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -#, fuzzy -msgid "automount map" -msgstr "Automount" - -#, fuzzy -msgid "automount maps" -msgstr "Automount" - -#, fuzzy -msgid "Automount Maps" -msgstr "Automount" - -#, fuzzy -msgid "Automount Map" -msgstr "Automount" - -#, fuzzy, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -#, fuzzy -msgid "Automount key object." -msgstr "Automount" - -#, fuzzy -msgid "automount key" -msgstr "Automount" - -#, fuzzy -msgid "automount keys" -msgstr "Automount" - -#, fuzzy -msgid "Automount Keys" -msgstr "Automount" - -#, fuzzy -msgid "Automount Key" -msgstr "Automount" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, fuzzy, python-format -msgid "key named %(key)s already exists" -msgstr "kľúč %(key)s už existuje" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, fuzzy, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "Pridané automember pravidlo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "Pridané automember pravidlo \"%(value)s\"" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "Odstránené automember pravidlo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "Upravený OTP token \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "nevalídne ID profilu" - -msgid "Certificate Profile" -msgstr "Certifikačný profil" - -msgid "Certificate Profiles" -msgstr "Certifikačné profily" - -msgid "Profile configuration" -msgstr "Configurácia profilu" - -#, fuzzy, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "Odstránený profil \"%(value)s\"" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "Odstránený profil \"%(value)s\"" - -#, fuzzy, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "Certifikačné profily nemôžu byť premenované" - -#, fuzzy, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -msgid "Certificate profiles cannot be renamed" -msgstr "Certifikačné profily nemôžu byť premenované" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -#, fuzzy -msgid "delegation" -msgstr "lokalita" - -#, fuzzy -msgid "delegations" -msgstr "lokality" - -#, fuzzy -msgid "Delegations" -msgstr "lokality" - -#, fuzzy -msgid "Delegation" -msgstr "lokalita" - -msgid "ACI" -msgstr "ACI" - -#, fuzzy, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "Pridaná IPA lokalita \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "Odstránená IPA lokalita \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "Upravená IPA lokalita \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -#, fuzzy -msgid "" -"\n" -"DNS server configuration\n" -msgstr "RADIUS proxy konfigurácia" - -#, fuzzy -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" -"\n" -"Narábanie s DNS lokalitami\n" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "DNS server" - -#, fuzzy -msgid "DNS servers" -msgstr "DNS server" - -#, fuzzy -msgid "DNS Servers" -msgstr "DNS server" - -#, fuzzy -msgid "DNS Server" -msgstr "DNS server" - -#, fuzzy -msgid "DNS Server name" -msgstr "Názov služby" - -msgid "SOA mname override" -msgstr "" - -#, fuzzy -msgid "SOA mname (authoritative server) override" -msgstr "Doménové meno autoritatívneho nameservera" - -msgid "Forwarders" -msgstr "Forwardery" - -#, fuzzy -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Globálne forwardery. Vlastný port môže byť nastavený použítím štandardného " -"formátu \"IP_ADRESA port PORT\" pre každý forwarder " - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -#, fuzzy -msgid "Modify DNS server configuration" -msgstr "Upraviť CA konfiguráciu." - -#, fuzzy, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -msgid "Search for DNS servers." -msgstr "Vyhľadať DNS servery" - -#, fuzzy, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -msgid "IPA DNS Server is not installed" -msgstr "Verzia IPA DNS" - -#, fuzzy -msgid "Display configuration of a DNS server." -msgstr "Zobraziť informácie o DNS forward zóne" - -#, fuzzy -msgid "Add a new DNS server." -msgstr "Pridať novú HBAC službu." - -#, fuzzy, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola pridaná" - -#, fuzzy -msgid "Delete a DNS server" -msgstr "Odstrániť používateľa" - -#, fuzzy, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "Odstránená DNS zóna \"%(value)s\"" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "skupiny" - -msgid "User Group" -msgstr "Používateľská skupina" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy -msgid "privileged group" -msgstr "Bez privátnej skupiny" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, fuzzy, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -#, fuzzy -msgid "Not a managed group" -msgstr "Vytvoriť novú skupinu." - -#, fuzzy -msgid "Add users that can manage members of this group." -msgstr "Pridať používateľa, ktorý môže spravovať tento token." - -#, fuzzy -msgid "Remove users that can manage members of this group." -msgstr "Pridať používateľa, ktorý môže spravovať tento token." - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "HBAC služby" - -msgid "HBAC Services" -msgstr "HBAC služby" - -msgid "HBAC Service" -msgstr "HBAC služba" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola pridaná" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -#, fuzzy, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -msgid "HBAC service group" -msgstr "HBAC služba" - -#, fuzzy -msgid "HBAC service groups" -msgstr "HBAC služby" - -#, fuzzy -msgid "HBAC Service Groups" -msgstr "HBAC služby" - -#, fuzzy -msgid "HBAC Service Group" -msgstr "HBAC služba" - -#, fuzzy, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola pridaná" - -#, fuzzy, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" - -#, fuzzy, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -#, fuzzy, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -msgid "host groups" -msgstr "skupiny" - -#, fuzzy -msgid "Host Group" -msgstr "Používateľská skupina" - -#, fuzzy, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy -msgid "hostgroup" -msgstr "skupina" - -#, fuzzy -msgid "privileged hostgroup" -msgstr "Bez privátnej skupiny" - -#, fuzzy, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -msgid "Add users that can manage members of this hostgroup." -msgstr "Pridať používateľa, ktorý môže spravovať tento token." - -#, fuzzy -msgid "Remove users that can manage members of this hostgroup." -msgstr "Pridať používateľa, ktorý môže spravovať tento token." - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "ID rozsahy" - -msgid "ID Range" -msgstr "ID rozsah" - -#, fuzzy -msgid "local domain range" -msgstr "Lokálna doména" - -#, fuzzy -msgid "Active Directory domain range" -msgstr "Active Directory doména" - -#, fuzzy -msgid "Active Directory trust range with POSIX attributes" -msgstr "Active Directory doména s POSIX attribútmy" - -msgid "ID range type, one of allowed values" -msgstr "" - -#, fuzzy -#| msgid "No private group" -msgid "Auto private groups" -msgstr "Bez privátnej skupiny" - -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "Pridané ID View \"%(value)s\"" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -#, fuzzy -msgid "Specified trusted domain name could not be found." -msgstr "trust doménový objekt nenájdený" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "Odstránené ID View \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -msgid "" -"Modify ID range.\n" -"\n" -msgstr "Upraviť DNS forward zónu" - -#, fuzzy, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "Upravené ACI \"%(value)s\"" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - msgid "" "\n" -"IPA locations\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" msgstr "" "\n" -"IPA lokality\n" +" Pridanie lokality:\n" +" ipa location-add lokalita --description 'Moja lokalita'\n" msgid "" "\n" -"Manipulate DNS locations\n" +" Delete location:\n" +" ipa location-del location\n" msgstr "" "\n" -"Narábanie s DNS lokalitami\n" +" Odstránenie lokality:\n" +" ipa location-del lokalita\n" msgid "" "\n" @@ -14248,147 +52,31 @@ msgstr "" msgid "" "\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" +"EXAMPLES:\n" msgstr "" "\n" -" Pridanie lokality:\n" -" ipa location-add lokalita --description 'Moja lokalita'\n" +"PRÍKLADY:\n" msgid "" "\n" -" Delete location:\n" -" ipa location-del location\n" +"IPA locations\n" msgstr "" "\n" -" Odstránenie lokality:\n" -" ipa location-del lokalita\n" +"IPA lokality\n" -msgid "location" -msgstr "lokalita" - -msgid "locations" -msgstr "lokality" - -msgid "IPA Locations" -msgstr "IPA lokality" - -msgid "IPA Location" -msgstr "IPA lokalita" - -msgid "Location name" -msgstr "Názov lokality" - -msgid "IPA location name" -msgstr "Názov IPA lokality" - -msgid "IPA Location description" -msgstr "Popis IPA lokality" - -msgid "Servers" -msgstr "Servery" - -msgid "Servers that belongs to the IPA location" -msgstr "Servery patriace do IPA lokality" - -msgid "Advertised by servers" -msgstr "Oznamované servermi" - -msgid "List of servers which advertise the given location" -msgstr "Zoznam serverov oznamujúcich danú lokalitu" - -msgid "Add a new IPA location." -msgstr "Pridať novú IPA lokalitu." - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "Pridaná IPA lokalita \"%(value)s\"" - -msgid "Delete an IPA location." -msgstr "Odstrániť IPA lokalitu." - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Odstránená IPA lokalita \"%(value)s\"" - -msgid "IPA Server" -msgstr "IPA Server" - -msgid "Modify information about an IPA location." -msgstr "Upraviť informácie o IPA lokalite." - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "Upravená IPA lokalita \"%(value)s\"" - -msgid "Search for IPA locations." -msgstr "Vyhľadať IPA lokalitu." - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -msgid "Display information about an IPA location." -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "Servers in location" -msgstr "Servery v lokalite." - -#, fuzzy -msgid "netgroups" -msgstr "skupiny" - -#, fuzzy -msgid "Netgroups" -msgstr "skupiny" - -#, fuzzy -msgid "Netgroup" -msgstr "skupina" - -#, fuzzy, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, python-format msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" +"\n" +"Manage YubiKey tokens.\n" msgstr "" +"\n" +"Spravovať YubiKey tokeny.\n" -#, fuzzy, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -msgid "user category cannot be set to 'all' while there are allowed users" +msgid "" +"\n" +"Manipulate DNS locations\n" msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -msgid "One time password commands" -msgstr "Jednorázové heslo (OTP)" - -msgid "OTP configuration options" -msgstr "OTP konfiguračné voľby" - -msgid "OTP Configuration" -msgstr "OTP konfigurácia" +"\n" +"Narábanie s DNS lokalitami\n" msgid "" "\n" @@ -14397,5031 +85,64 @@ msgstr "" "\n" "OTP tokeny\n" -#, fuzzy msgid "" "\n" -"Manage OTP tokens.\n" +"YubiKey Tokens\n" msgstr "" "\n" -"Spravovať YubiKey tokeny.\n" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "OTP token" - -msgid "OTP tokens" -msgstr "OTP tokeny" - -msgid "OTP Tokens" -msgstr "OTP tokeny" - -msgid "OTP Token" -msgstr "OTP token" - -msgid "URI" -msgstr "URI" - -#, fuzzy, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "Upravený OTP token \"%(value)s\"" - -#, fuzzy -msgid "cannot be empty" -msgstr "IPA CA nemôže byť odstránené" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Odstránený OTP token \"%(value)s\"" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "Upravený OTP token \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Zmenené heslo pre \"%(value)s\"" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "pkinit" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -#, fuzzy -msgid "Whether PKINIT is enabled or disabled" -msgstr "Táto položka nemôže byť aktivovaná alebo deaktivovaná" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "RADIUS Proxy serverové nastavenia" - -#, fuzzy -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "RADIUS Proxy serverové nastavenia" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" -"\n" -" Odstránenie lokality:\n" -" ipa location-del lokalita\n" - -#, fuzzy -msgid "invalid attribute name" -msgstr "neplatné doménové meno" - -#, fuzzy -msgid "invalid port number" -msgstr "neplatné doménové meno" - -#, fuzzy -msgid "RADIUS proxy server" -msgstr "RADIUS proxy používateľské meno" - -#, fuzzy -msgid "RADIUS proxy servers" -msgstr "RADIUS proxy používateľské meno" - -#, fuzzy -msgid "RADIUS Servers" -msgstr "RADIUS Proxy serverové nastavenia" - -#, fuzzy -msgid "RADIUS Server" -msgstr "IPA Server" - -#, fuzzy, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola pridaná" - -#, fuzzy, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" - -#, fuzzy, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -#, fuzzy, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -#, fuzzy -msgid "Realm domains" -msgstr "Realm domény" - -msgid "Realm Domains" -msgstr "Realm domény" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -#, fuzzy -msgid "IPA server domain cannot be omitted" -msgstr "IPA CA nemôže byť odstránené" - -#, fuzzy -msgid "IPA server domain cannot be deleted" -msgstr "IPA CA nemôže byť odstránené" - -#, fuzzy -msgid "roles" -msgstr "Role" - -#, fuzzy -msgid "Role" -msgstr "Role" - -#, fuzzy, python-format -msgid "Added role \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "Odstránený profil \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified role \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -msgid "self service permission" -msgstr "Odstrániť povolenie" - -#, fuzzy -msgid "self service permissions" -msgstr "Vyhľadať povolenia." - -#, fuzzy -msgid "Self Service Permissions" -msgstr "Odstrániť povolenie" - -#, fuzzy -msgid "Self Service Permission" -msgstr "Odstrániť povolenie" - -#, fuzzy, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola pridaná" - -#, fuzzy, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" - -#, fuzzy, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -#, fuzzy, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -msgid "" -"\n" -"IPA server roles\n" -msgstr "Názov role servera" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -#, fuzzy -msgid "server role" -msgstr "Server rola" - -#, fuzzy -msgid "server roles" -msgstr "Serverové role" - -#, fuzzy -msgid "IPA Server Roles" -msgstr "Serverové role" - -#, fuzzy -msgid "IPA Server Role" -msgstr "Server rola" - -msgid "IPA server role name" -msgstr "Názov role servera" - -#, fuzzy -msgid "Role status" -msgstr "Stav pravidla" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -#, fuzzy -msgid "Find a server role on a server(s)" -msgstr "Názov role servera" - -#, fuzzy, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -msgid "Include IPA master entries" -msgstr "Zahrnuté atribúty" - -msgid "IPA role name" -msgstr "Názov IPA role" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "{role}: rola nenájdená" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -#, fuzzy -msgid "Member principals" -msgstr "Členské skupiny" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, fuzzy, python-format -msgid "member %s" -msgstr "Členom" - -#, fuzzy -msgid "Remove member from a named service delegation." -msgstr "Odstrániť certifikáty zo služby" - -#, fuzzy -msgid "service delegation rule" -msgstr "Pridať služby do HBAC pravidla." - -#, fuzzy -msgid "service delegation rules" -msgstr "Voľby služieb" - -#, fuzzy -msgid "Service delegation rules" -msgstr "Voľby služieb" - -#, fuzzy -msgid "Service delegation rule" -msgstr "Voľby služieb" - -#, fuzzy, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" - -msgid "privileged service delegation rule" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -msgid "service delegation target" -msgstr "" - -#, fuzzy -msgid "service delegation targets" -msgstr "Nastavenia služby" - -#, fuzzy -msgid "Service delegation targets" -msgstr "Nastavenia služby" - -#, fuzzy -msgid "Service delegation target" -msgstr "Nastavenia služby" - -#, fuzzy, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" - -msgid "privileged service delegation target" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -#, fuzzy -msgid "Subordinate id description" -msgstr "Popis skupiny" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -#, fuzzy -msgid "SubUID range size" -msgstr "ID rozsahy" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -#, fuzzy -msgid "SubGID range size" -msgstr "ID rozsahy" - -msgid "Subordinate group ID count" -msgstr "" - -#, fuzzy, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "kľúč %(key)s už existuje" - -#, fuzzy, python-format -#| msgid "%(port)s is not a valid port" -msgid "'%(dn)s is not a valid user" -msgstr "%(port)s nie je platný port" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -#, fuzzy -msgid "Add a new subordinate id." -msgstr "Pridať novú HBAC službu." - -#, fuzzy, python-format -msgid "Added subordinate id \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola pridaná" - -#, fuzzy -#| msgid "Delete a Certificate Profile." -msgid "Delete a subordinate id." -msgstr "Odstrániť certifikačný profil" - -#, fuzzy, python-format -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" - -#, fuzzy -msgid "Modify a subordinate id." -msgstr "Upraviť skupinu." - -#, fuzzy, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -#, fuzzy -msgid "Search for subordinate id." -msgstr "Vyhľadávať skupiny." - -#, fuzzy, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -msgid "Display information about a subordinate id." -msgstr "Zobraziť informácie o DNS forward zóne" - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -#, fuzzy -msgid "sudo command" -msgstr "sudo príkazy" - -msgid "sudo commands" -msgstr "sudo príkazy" - -msgid "Sudo Commands" -msgstr "Sudo príkazy" - -#, fuzzy, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "Pridaná IPA lokalita \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "Odstránená DNS zóna \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "Upravené ACI \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -#, fuzzy -msgid "sudo command group" -msgstr "sudo príkazy" - -#, fuzzy -msgid "sudo command groups" -msgstr "sudo príkazy" - -#, fuzzy, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" -"\n" -" Nájdenie všetkých lokalít:\n" -" ipa location-find\n" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -#, fuzzy -msgid "segments" -msgstr "Detaily segmentu" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -msgid "Added segment \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(value)s" -msgstr "hodnota" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Odstránený profil \"%(value)s\"" - -#, fuzzy, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"IPA servers\n" -msgstr "IPA Server" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -" Nájdenie všetkých lokalít:\n" -" ipa location-find\n" - -#, fuzzy -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" -"\n" -" Zobrazenie špecifickej lokality:\n" -" ipa location-show lokalita\n" - -#, fuzzy -msgid "server" -msgstr "Servery" - -#, fuzzy -msgid "servers" -msgstr "Servery" - -#, fuzzy -msgid "IPA Servers" -msgstr "IPA Server" - -#, fuzzy -msgid "Server location" -msgstr "Servery v lokalite." - -#, fuzzy -msgid "Service weight" -msgstr "Nastavenia služby" - -msgid "Weight for server services" -msgstr "Váha pre služby servera" - -#, fuzzy -msgid "Service relative weight" -msgstr "Certifikát služby" - -#, fuzzy -msgid "Relative weight for server services (counts per location)" -msgstr "Váha pre služby servera" - -#, fuzzy -msgid "Enabled server roles" -msgstr "Deaktivovaná služba \"%(value)s\"" - -msgid "List of enabled roles" -msgstr "" - -#, fuzzy -msgid "Modify information about an IPA server." -msgstr "Upraviť informácie o IPA lokalite." - -#, fuzzy, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -#, fuzzy, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, fuzzy, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "chyba na serveri '%(server)s': %(error)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, fuzzy, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "chyba na serveri '%(server)s': %(error)s" - -#, fuzzy -msgid "Server has already been deleted" -msgstr "Niektoré položky neboli odstránené" - -msgid "Agreements deleted" -msgstr "" - -#, fuzzy -msgid "Following segments were not deleted:" -msgstr "Niektoré položky neboli odstránené" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -#, fuzzy -msgid "State" -msgstr "Stav" - -#, fuzzy -msgid "Server state" -msgstr "Servery" - -#, fuzzy, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "Zmenené heslo pre \"%(value)s\"" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -#, fuzzy -msgid "A list of ACI values" -msgstr "Odstránené ACI \"%(value)s\"" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -#, fuzzy -msgid "ACI prefix is required" -msgstr "je povinné" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, fuzzy, python-format -msgid "Group '%s' does not exist" -msgstr "Položka %s neexistuje" - -msgid "empty filter" -msgstr "" - -#, fuzzy, python-format -msgid "Syntax Error: %(error)s" -msgstr "Chyba formátu certifikátu: %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "neplatné DN (%s)" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "ACI s názvom \"%s\" nenájdené" - -#, fuzzy -msgid "ACI object." -msgstr "IPA objekt" - -msgid "ACIs" -msgstr "ACI" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "Vytvorené ACI \"%(value)s\"" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "Odstránené ACI \"%(value)s\"" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "Upravené ACI \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "Vytvorené ACI \"%(value)s\"" - -#, fuzzy -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "Automember pravidlo" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" -"\n" -" Nájdenie všetkých lokalít:\n" -" ipa location-find\n" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -#, fuzzy -msgid "Auto Membership Rule" -msgstr "Automember pravidlo" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(otype)s \"%(oname)s\" nenájdené" - -#, fuzzy, python-format -msgid "%s is not a valid attribute." -msgstr "%(port)s nie je platný port" - -#, fuzzy -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "Pridané automember pravidlo \"%(value)s\"" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "Pridané automember pravidlo \"%(value)s\"" - -#, fuzzy -msgid "Auto Membership is not configured" -msgstr "Automember pravidlo: %s nenájdené!" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Pridaná IPA lokalita \"%(value)s\"" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "Automember pravidlo: %s nenájdené!" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "Pridané automember pravidlo \"%(value)s\"" - -#, fuzzy -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "Odstránené automember pravidlo \"%(value)s\"" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Odstránené automember pravidlo \"%(value)s\"" - -#, fuzzy -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "Vyhľadať HBAC pravidlá." - -#, fuzzy, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "Úloha obnovenia automember členstva začala" - -msgid "Automember rebuild membership task completed" -msgstr "Úloha obnovenia automember členstva dokončená" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "Automember" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -#, fuzzy -msgid "Member service groups" -msgstr "Členské skupiny" - -#, fuzzy -msgid "Member HBAC service groups" -msgstr "HBAC služby" - -msgid "Member ID user overrides" -msgstr "" - -#, fuzzy -msgid "Indirect Member ID user overrides" -msgstr "Nepriame členstvo" - -#, fuzzy -msgid "Indirect Member permissions" -msgstr "Nepriame členstvo" - -#, fuzzy -msgid "Indirect Member HBAC service" -msgstr "Nepriame členstvo" - -#, fuzzy -msgid "Indirect Member HBAC service group" -msgstr "Nepriame členstvo" - -msgid "Invalid format. Should be name=value" -msgstr "" - -#, fuzzy -msgid "An IPA master host cannot be deleted or disabled" -msgstr "Táto položka nemôže byť aktivovaná alebo deaktivovaná" - -msgid "entry" -msgstr "" - -#, fuzzy -msgid "entries" -msgstr "Žiadne položky." - -msgid "Entry" -msgstr "" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "kontajner (%(container)s) nenájdený" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s: %(oname)s nenájdený" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s: %(oname)s nenájdený" - -#, fuzzy, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "kľúč %(key)s už existuje" - -#, fuzzy, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "voľby nie sú povolené" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, fuzzy, python-format -msgid "%s to add" -msgstr "Zlyhalo pridanie" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, fuzzy, python-format -msgid "added attribute value to entry %(value)s" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "Prístup povolený: %s" - -#, fuzzy -msgid "" -"\n" -"Permissions\n" -msgstr "Povolenia" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "SYSTEM-ové povolenia nemožu byť upravené alebo odstránené" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Managed permissions\n" -msgstr "povolenie" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -#, fuzzy -msgid "must be enclosed in parentheses" -msgstr "musí byť integer" - -#, fuzzy, python-format -msgid "\"%s\" is not an object type" -msgstr "\"%s\" nie je platný typ povolenia" +"YubiKey Tokeny\n" #, python-format msgid "\"%s\" is not a valid permission type" msgstr "\"%s\" nie je platný typ povolenia" -#, fuzzy, python-format -msgid "Deprecated; use %s" -msgstr "Zastarané voľby" - -#, fuzzy, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "SYSTEM-ové povolenia nemožu byť upravené alebo odstránené" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "SYSTEM-ové povolenia nemožu byť upravené alebo odstránené" - -#, python-format -msgid "Entry %s not found" -msgstr "Položka %s nenájdená" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "ACI pre oprávnenie %(name)s sa nenašlo v %(dn)s " - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "%s: skupina nenájdená" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -#, fuzzy -msgid "Bad search filter" -msgstr "Zlý vyhľadávací filter %(info)s" - -#, python-format -msgid "Entry %s does not exist" -msgstr "Položka %s neexistuje" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, fuzzy, python-format -msgid "Added permission \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "Odstránený profil \"%(value)s\"" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "ACI pre oprávnenie %s sa nenašlo" - -#, fuzzy, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "%(count)d IPA lokalita nájdená" -msgstr[1] "%(count)d IPA lokalít nájdených" -msgstr[2] "%(count)d IPA lokalít nájdených" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -#, fuzzy -msgid "Privilege" -msgstr "Nastavenia privilégia" - -#, fuzzy, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo pridané" - -#, fuzzy, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "Odstránený profil \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo upravené" - -#, fuzzy, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -msgid "" -"\n" -"API Schema\n" -msgstr "LDAP schéma" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" -"\n" -" Zobrazenie špecifickej lokality:\n" -" ipa location-show lokalita\n" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "Názov" - -#, fuzzy -msgid "Documentation" -msgstr "Autentifikácia" - -msgid "Exclude from" -msgstr "" - -#, fuzzy -msgid "Include in" -msgstr "Zahrnuté atribúty" - -msgid "Help topic" -msgstr "" - -#, fuzzy -msgid "Version" -msgstr "Povolenie" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "Názov záznamu" - -#, fuzzy -msgid "Display information about a command." -msgstr "Zobraziť informácie o IPA lokalite." - -#, fuzzy -msgid "Search for commands." -msgstr "Vyhľadať sudo príkazy." - -msgid "Return command defaults" -msgstr "" - -#, fuzzy, python-brace-format -#| msgid "{role}: role not found" -msgid "{oname}: {command_name} not found" -msgstr "{role}: rola nenájdená" - -#, fuzzy -msgid "Display information about a class." -msgstr "Zobraziť informácie o IPA lokalite." - -#, fuzzy -msgid "Search for classes." -msgstr "Vyhľadať HBAC pravidlá." - -#, fuzzy -msgid "Display information about a help topic." -msgstr "Zobraziť informácie o IPA lokalite." - -#, fuzzy -msgid "Search for help topics." -msgstr "Vyhľadávať skupiny." - -msgid "Required" -msgstr "Povinné" - -#, fuzzy -msgid "Multi-value" -msgstr "hodnota" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "ACI názov" - -#, fuzzy -msgid "Confirm (password)" -msgstr "Zmeniť heslo" - -msgid "Default" -msgstr "" - -#, fuzzy -msgid "Default from" -msgstr "Predvolená používateľská skupina" - -msgid "Label" -msgstr "" - -#, fuzzy -msgid "Convert on server" -msgstr "Oznamované servermi" - -#, fuzzy -msgid "Option group" -msgstr "Voľby" - -msgid "Sensitive" -msgstr "" - -#, fuzzy -msgid "Positional argument" -msgstr "Pozičný argument" - -#, fuzzy, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(parent)s: %(oname)s nenájdený" - -#, fuzzy -msgid "Display information about a command parameter." -msgstr "Zobraziť informácie o DNS forward zóne" - -msgid "Search command parameters." -msgstr "" - -#, fuzzy, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(parent)s: %(oname)s nenájdený" - -#, fuzzy -msgid "Display information about a command output." -msgstr "Zobraziť informácie o DNS forward zóne" - -#, fuzzy -msgid "Search for command outputs." -msgstr "Vyhľadať sudo príkazy." - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -#, fuzzy -msgid "trust" -msgstr "IPA trust" - -#, fuzzy -msgid "trusts" -msgstr "IPA trust" - -#, fuzzy -msgid "Trusts" -msgstr "Trust nastavenia" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -#, fuzzy -msgid "Trust direction" -msgstr "Trust nastavenia" - -msgid "Trust type" -msgstr "" - -#, fuzzy -msgid "Trust status" -msgstr "Stav pravidla" - -msgid "UPN suffixes" -msgstr "" - -#, fuzzy, python-brace-format -msgid "invalid SID: {SID}" -msgstr "nevalídne ID profilu" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, fuzzy, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -#, fuzzy -msgid "domain" -msgstr "Doména" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -#, fuzzy -msgid "Realm-domain mismatch" -msgstr "Realm domény" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -#, fuzzy -msgid "id range" -msgstr "ID rozsah" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -#, fuzzy -msgid "range exists" -msgstr "Nastavenie rozsahu" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "${count} certifikátov prítomných" #, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" +msgid "${count} item(s) deleted" +msgstr "${count} položiek odstránených" #, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" +msgid "${count} item(s) disabled" +msgstr "${count} item(s) deaktivovaných" #, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" +msgid "${count} item(s) removed" +msgstr "${count} položiek odstránneých" -msgid "Unable to verify write permissions to the AD" -msgstr "" +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "${count} option(s) odstránených" -msgid "Not enough arguments specified to perform trust setup" -msgstr "" +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "${count} používateľov obnovených" -#, fuzzy, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "${count} users(s) predpripravených" -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "Nastavenia pre ${entity} ${primary_key}" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "${primary_key} je členom:" #, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -msgid "trust configuration" -msgstr "Configurácia profilu" - -#, fuzzy -msgid "Global Trust Configuration" -msgstr "DNS globálne nastavenia" - -#, fuzzy -msgid "IPA AD trust agents" -msgstr "IPA trust" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -#, fuzzy -msgid "unsupported trust type" -msgstr "Nepodporovaná hodnota" - -#, fuzzy, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "Upravené ACI \"%(value)s\"" - -msgid "SID" -msgstr "SID" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -#, fuzzy -msgid "trust domains" -msgstr "trust doménový užívateľ nenájdený" - -#, fuzzy -msgid "Trusted domains" -msgstr "trust doménový užívateľ nenájdený" - -#, fuzzy -msgid "Trusted domain" -msgstr "trust doménový užívateľ nenájdený" - -#, fuzzy -msgid "Domain enabled" -msgstr "Doménové meno" - -#, fuzzy, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, fuzzy, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo aktivované" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" -"\n" -"Spravovať YubiKey tokeny.\n" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -#, fuzzy -msgid "Vault Container" -msgstr "Pokračovať" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -#, fuzzy -msgid "Deleted vault container" -msgstr "Odstrániť používateľa" - -#, fuzzy, python-format -msgid "owner %s" -msgstr "Vlastník" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -#, fuzzy -msgid "Add a vault." -msgstr "Upraviť vault." - -#, fuzzy, python-format -msgid "Added vault \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, fuzzy, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy -msgid "Vault configuration" -msgstr "Configurácia profilu" - -#, fuzzy -msgid "IPA KRA servers" -msgstr "IPA Server" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -msgid "Key wrapping algorithm" -msgstr "" - -#, fuzzy, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "Pridané automember pravidlo \"%(value)s\"" - -msgid "Retrieve data from a vault." -msgstr "" - -#, fuzzy, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -#, fuzzy -msgid "must be TRUE or FALSE" -msgstr "musí byť True alebo False" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "Principal alias" -msgstr "" - -#, fuzzy -msgid "User password expiration" -msgstr "Vypršanie hesla" - -msgid "SSH public key fingerprint" -msgstr "Odtlačok verejného SSH kľúča (fingerprint)" - -#, fuzzy -msgid "External IdP configuration" -msgstr "Configurácia profilu" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "Base-64 zakódovaný používateľský certifikát" - -#, fuzzy -msgid "Certificate mapping data" -msgstr "Držanie certifikátu" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -#, fuzzy -msgid "SMB Home Directory" -msgstr "Domovský priečinok" - -#, fuzzy -msgid "SMB Home Directory Drive" -msgstr "Domovský priečinok" +msgid "%(attr)s does not contain '%(value)s'" +msgstr "%(attr)s neobsahuje '%(value)s'" #, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "neplatný formát e-mailovej adresy: %(email)s" +msgid "%(attr)s: Invalid syntax." +msgstr "%(attr)s: Nesprávna syntax." #, python-format -msgid "manager %(manager)s not found" -msgstr "manažér %(manager)s nenájdený" - -#, fuzzy, python-format -msgid "can be at most %(len)d characters" -msgstr "môže byť najviac %(maxvalue)d" - -#, fuzzy -msgid "Issuer" -msgstr "Vydať" - -#, fuzzy -msgid "Issuer of the certificate" -msgstr "Revokácia certifikátu." - -msgid "Subject" -msgstr "" - -#, fuzzy -msgid "Subject of the certificate" -msgstr "Certifikát služby" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -#, fuzzy -msgid "Add one or more certificate mappings to the user entry." -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -msgid "Remove one or more certificate mappings from the user entry." -msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" - -#, fuzzy, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -#, fuzzy -msgid "CA category" -msgstr "Kategórie používateľov" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, fuzzy, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "Odstránené CA ACL \"%(value)s\"" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "Odstránené CA ACL \"%(value)s\"" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, fuzzy, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "Upravené ACI \"%(value)s\"" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "Deaktivované CA ACL \"%(value)s\"" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "Deaktivované CA ACL \"%(value)s\"" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, fuzzy, python-format -msgid "%i users or groups added." -msgstr "Vyhľadávať skupiny." - -msgid "users cannot be added when user category='all'" -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, fuzzy, python-format -msgid "%i service added." -msgstr "Názov služby" - -#, fuzzy, python-format -msgid "%i services added." -msgstr "Názov služby" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -#, fuzzy -msgid "Add CAs to a CA ACL." -msgstr "Odstrániť CA ACL." - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "Certifikačná autorita" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -#, fuzzy -msgid "Certificate Identity Mapping configuration options" -msgstr "Upraviť konfiguračné voľby." - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -#, fuzzy -msgid "Modify Certificate Identity Mapping configuration." -msgstr "Upraviť CA konfiguráciu." - -#, fuzzy -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "Zobraziť konfiguračné voľby" - -#, fuzzy -msgid "Certificate Identity Mapping Rules" -msgstr "Certifikačné autority" - -#, fuzzy -msgid "Certificate Identity Mapping Rule" -msgstr "Typ certifikátu" - -#, fuzzy -msgid "Certificate Identity Mapping Rule name" -msgstr "Certifikačné profily nemôžu byť premenované" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -#, fuzzy -msgid "Rule used to map the certificate with a user entry" -msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" -msgstr[2] "" - -#, fuzzy -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "Zobraziť informácie o DNS forward zóne" - -#, fuzzy -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "Odstrániť certifikačný profil" - -#, fuzzy, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "Odstrániť certifikačný profil" - -#, fuzzy, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -#, fuzzy -msgid "User logins" -msgstr "Prihlasovacie meno" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -#, fuzzy -msgid "must be at least 10" -msgstr "musí byť najmenej %(minvalue)d" - -msgid "configuration options" -msgstr "konfiguračné voľby" - -msgid "Configuration" -msgstr "Konfigurácia" - -msgid "Maximum hostname length" -msgstr "" - -msgid "Enable adding subids to new users" -msgstr "" - -#, fuzzy -msgid "IPA masters" -msgstr "IPA trust" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -#, fuzzy -msgid "IPA CA servers" -msgstr "IPA Server" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -#, fuzzy -msgid "IPA DNS servers" -msgstr "DNS server" - -msgid "IPA servers configured as domain name server" -msgstr "" - -#, fuzzy -msgid "Hidden IPA DNS servers" -msgstr "Verzia IPA DNS" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -#, fuzzy -msgid "Setup SID configuration" -msgstr "Configurácia profilu" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -#, fuzzy -msgid "Add SIDs" -msgstr "Pridať nové ID View" - -msgid "Add SIDs for existing users and groups" -msgstr "" - -msgid "NetBIOS name of the IPA domain" -msgstr "" - -#, fuzzy -msgid "Empty domain is not allowed" -msgstr "voľby nie sú povolené" - -#, fuzzy, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "neplatné doménové meno: %s" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "not allowed to enable SID generation" -msgstr "" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -#, fuzzy -#| msgid "Failed to add" -msgid "Failed to call DBus" -msgstr "Zlyhalo pridanie" - -msgid "Configuration of SID failed. See details in the error log" -msgstr "" - -#, fuzzy -msgid "The group doesn't exist" -msgstr "Položka %s neexistuje" - -#, fuzzy, python-format -msgid "attribute \"%s\" not allowed" -msgstr "voľby nie sú povolené" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, fuzzy, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "chyba na serveri '%(server)s': %(error)s" - -msgid "SELinux user map default user not in order list" -msgstr "" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "Pridať nový DNS záznam" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" -"\n" -"PRÍKLADY:\n" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" -"\n" -" Nájdenie všetkých lokalít:\n" -" ipa location-find\n" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "neplatný formát IP siete" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "neplatný formát adresy" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "algoritmus: hodnota má povolený interval 0-255" - -msgid "flags value: allowed interval 0-255" -msgstr "flagy: hodnota má povolený interval 0-255" - -msgid "iterations value: allowed interval 0-65535" -msgstr "iterácie: hodnota má povolený interval 0-65535" - -#, python-format -msgid "salt value: %(err)s" -msgstr "salt hodnota: %(err)s" - -msgid "invalid domain-name: not fully qualified" -msgstr "neplatné doménové meno: nie je plne kvalifikované (FQDN)" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "DNS zóna %(zone)s nenájdená" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "%s záznam" - -#, fuzzy, python-format -msgid "Raw %s records" -msgstr "%s záznam" - -#, python-format -msgid "%s Record" -msgstr "%s záznam" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "(pozrite RFC %s pre viac detailov)" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "Vytvoriť reverzný" - -#, fuzzy, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "Nie je možné čítať súbor '%(filename)s': %(exc)s" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -#, fuzzy -msgid "Priority (order)" -msgstr "Priorita" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "Nameserver '%(host)s' nemá zodpovedajúci A/AAAA záznam" - -#, fuzzy -msgid "Managedby permission" -msgstr "povolenie" - -msgid "cannot be used when a zone is specified" -msgstr "" - -#, fuzzy -msgid "Only one zone type is allowed per zone name" -msgstr "Len jedna hodnota je povolená" - -#, fuzzy, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "kľúč %(key)s už existuje" - -#, fuzzy, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "DNS zone" -msgstr "DNS zóna" - -msgid "DNS zones" -msgstr "DNS zóny" - -msgid "DNS Zones" -msgstr "DNS zóny" - -msgid "DNS Zone" -msgstr "DNS zóna" - -#, fuzzy -msgid "Default time to live" -msgstr "Predvolené atribúty" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -#, fuzzy -msgid "setting Authoritative nameserver" -msgstr "Autoritatívny nameserver" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -#, fuzzy -msgid "" -msgstr "Verzia IPA DNS" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "Odstránená DNS zóna \"%(value)s\"" - -msgid "is required" -msgstr "je povinné" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "Deaktivovaná DNS zóna \"%(value)s\"" - -#, fuzzy, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "Deaktivovaná DNS zóna \"%(value)s\"" - -#, fuzzy -msgid "DNS resource record" -msgstr "Typ DNS záznamu" - -#, fuzzy -msgid "DNS resource records" -msgstr "Typ DNS záznamu" - -#, fuzzy -msgid "DNS Resource Records" -msgstr "Typ DNS záznamu" - -#, fuzzy -msgid "DNS Resource Record" -msgstr "Typ DNS záznamu" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -#, fuzzy -msgid "DNS zone root record cannot be renamed" -msgstr "Certifikačné profily nemôžu byť premenované" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "Odstránený záznam \"%(value)s\"" - -#, fuzzy, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "IPA CA nemôže byť odstránené" - -#, python-format -msgid "Found '%(value)s'" -msgstr "Nájdené '%(value)s'" - -#, fuzzy, python-format -msgid "Host '%(host)s' not found" -msgstr "DNS zóna %(zone)s nenájdená" - -msgid "DNS configuration options" -msgstr "DNS konfiguračné voľby" - -msgid "DNS Global Configuration" -msgstr "DNS globálne nastavenia" - -msgid "IPA DNS version" -msgstr "Verzia IPA DNS" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "Globálna DNS konfigurácia je prázdna," - -msgid "DNS forward zone" -msgstr "DNS forward zóna" - -msgid "DNS forward zones" -msgstr "DNS forward zóny" - -msgid "DNS Forward Zones" -msgstr "DNS forward zóny" - -msgid "DNS Forward Zone" -msgstr "DNS forward zóna" - -msgid "Please specify forwarders." -msgstr "Prosím špecifikujte forwardery." - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "Odstránená DNS forward zóna \"%(value)s\"" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "Deaktivovaná DNS forward zóna \"%(value)s\"" - -#, fuzzy, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "Deaktivovaná DNS forward zóna \"%(value)s\"" - -msgid "IPA DNS records" -msgstr "IPA DNS záznamy" - -#, fuzzy -msgid "IPA location records" -msgstr "Názov IPA lokality" - -msgid "Update location and IPA server DNS records" -msgstr "" - -#, fuzzy -msgid "Result of the command" -msgstr "sudo príkazy" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "HBAC pravidlá" - -msgid "HBAC Rules" -msgstr "HBAC pravidlá" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo pridané" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "Odstránené HBAC pravidlo \"%(value)s\"" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo upravené" +msgid "%(attr)s: Only one value allowed." +msgstr "%(attr)s: Len jedna hodnota je povolená." #, python-format msgid "%(count)d HBAC rule matched" @@ -19431,1523 +152,112 @@ msgstr[1] "%(count)d HBAC pravidiel nájdených" msgstr[2] "%(count)d HBAC pravidiel nájdených" #, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo aktivované" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "Deaktivované HBAC pravidlo \"%(value)s\"" - -msgid "Access time" -msgstr "Čas prístupu" - -#, fuzzy -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "Pridať používateľov a skupiny do HBAC pravidla." - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" -"\n" -" Odstránenie lokality:\n" -" ipa location-del lokalita\n" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "Deaktivovať Kerberos kľúč a SSL certifikát služby." - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host" -msgstr "" - -#, fuzzy -msgid "Base-64 encoded host certificate" -msgstr "Base-64 zakódovaný používateľský certifikát" - -msgid "Serial Number" -msgstr "Sériové číslo" - -msgid "Serial Number (hex)" -msgstr "Sériové číslo (hexadecimálne)" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -#, fuzzy -msgid "Revocation reason" -msgstr "Konfigurácia repliky" - -#, fuzzy -msgid "Authentication Indicators" -msgstr "Autentifikácia" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, fuzzy, python-format -msgid "Added host \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "Nenašli sa žiadne A, AAAA, SSHFP, alebo PTR záznamy." - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "Nenašli sa žiadne A, AAAA, SSHFP, alebo PTR záznamy." - -#, fuzzy, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "cn je nemeniteľné" - -#, fuzzy, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" msgstr[0] "%(count)d IPA lokalita nájdená" msgstr[1] "%(count)d IPA lokalít nájdených" msgstr[2] "%(count)d IPA lokalít nájdených" -#, fuzzy, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "Deaktivovaná služba \"%(value)s\"" +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "%(desc)s: %(info)s" -#, fuzzy, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" +#, python-format +msgid "%(exception)s" +msgstr "%(exception)s" -#, fuzzy, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" +#, python-format +msgid "%(info)s" +msgstr "%(info)s" -#, fuzzy -msgid "Add new principal alias to host entry" -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -msgid "Remove principal alias from a host entry" -msgstr "Odstrániť certifikáty zo služby" - -#, fuzzy, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" +"%(key)s nemôže byť odstránené pretože %(label)s %(dependent)s to vyžaduje" +#, python-format msgid "" -"\n" -"External Identity Provider Servers\n" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" msgstr "" +"%(key)s nemôže byť odstránené alebo deaktivované pretože je to posledný člen " +"%(label)s %(container)s" -#, fuzzy -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "RADIUS Proxy serverové nastavenia" +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "%(label)s %(key)s nemôže byť ostránené/upravené: %(reason)s" -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" +#, python-format +msgid "%(line)s" +msgstr "%(line)s" -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "%(name)s certifikát nie je platný" -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(otype)s \"%(oname)s\" nenájdené" -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s: %(oname)s nenájdený" -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s: %(oname)s nenájdený" -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" +#, python-format +msgid "%(port)s is not a valid port" +msgstr "%(port)s nie je platný port" -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" -msgid "Invalid URI: not an https scheme" -msgstr "" +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "%(user)s nie je POSIX užívateľ" -msgid "Invalid URI: missing netloc" -msgstr "" +#, python-format +msgid "%s Record" +msgstr "%s záznam" -msgid "Identity Provider server" -msgstr "" +#, python-format +msgid "%s record" +msgstr "%s záznam" -msgid "Identity Provider servers" -msgstr "" +#, python-format +msgid "%s: group not found" +msgstr "%s: skupina nenájdená" -#, fuzzy -msgid "Identity Provider server name" -msgstr "Názov role servera" - -#, fuzzy -#| msgid "Authority ID" -msgid "Authorization URI" -msgstr "ID autority" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -#, fuzzy -#| msgid "Token ID" -msgid "Token URI" -msgstr "Token ID" - -msgid "Token endpoint" -msgstr "" - -#, fuzzy -#| msgid "User login" -msgid "User info URI" -msgstr "Prihlasovacie meno" - -msgid "User information endpoint" -msgstr "" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -msgid "Client identifier" -msgstr "" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -#, fuzzy -msgid "Add a new Identity Provider server." -msgstr "Pridať novú HBAC službu." - -#, fuzzy, python-format -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola pridaná" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "Organizácia" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -msgid "Base URL" -msgstr "" - -msgid "Base URL for IdP provider templates" -msgstr "" - -#, fuzzy -#| msgid "Unknown Error" -msgid "unknown provider" -msgstr "Neznáma chyba" - -msgid "value is missing" -msgstr "" - -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "" - -#, fuzzy -msgid "Delete an Identity Provider server." -msgstr "Odstrániť ID View." - -#, fuzzy, python-format -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" - -#, fuzzy -msgid "Modify an Identity Provider server." -msgstr "Upraviť HBAC službu." - -#, fuzzy, python-format -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -#, fuzzy -msgid "Search for Identity Provider servers." -msgstr "Vyhľadať DNS servery" - -#, fuzzy, python-format -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -msgid "Display information about an Identity Provider server." -msgstr "Zobraziť informácie o IPA lokalite." - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Apply" -msgstr "Použiť" - -#, fuzzy -msgid "Rebuild auto membership" -msgstr "Priame členstvo" - -#, fuzzy -msgid "Are you sure you want to rebuild auto membership?" -msgstr "Ste si istý/istá, že chcete aktivovať ${object}?" - -#, fuzzy -msgid "Are you sure you want to proceed with the action?" -msgstr "Ste si istý/istá, že chcete odstrániť ${object}?" +#, python-format +msgid "%s: user is already preserved" +msgstr "%s: používateľ je už uschovaný" #, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "Ste si istý/istá, že chcete odstrániť ${object}?" +msgid "'${port}' is not a valid port" +msgstr "'${port}' nie je valídny port" -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "Ste si istý/istá, že chcete deaktivovať ${object}?" +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "'%(command)s' príkaz je zastaraný %(additional_info)s" -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "Ste si istý/istá, že chcete aktivovať ${object}?" +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "'%(entry)s' nemá certifikát." -msgid "Actions" -msgstr "Akcie" +#, python-format +msgid "'%(name)s' is required" +msgstr "'%(name)s' je požadované" -msgid "Add" -msgstr "Pridať" +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "'%(option)s'voľba je zastaraná. %(additional_info)s" -#, fuzzy, python-brace-format -msgid "${count} item(s) added" -msgstr "${count} položiek odstránených" - -msgid "Direct Membership" -msgstr "Priame členstvo" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "Nepriame členstvo" - -msgid "No entries." -msgstr "Žiadne položky." - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "Zobrazených ${start} až ${end} z ${total} položiek." - -msgid "Remove" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "${count} položiek odstránneých" - -msgid "Show Results" -msgstr "Zobraz výsledky" - -#, fuzzy -msgid "Authentication indicators" -msgstr "Autentifikácia" - -#, fuzzy -msgid "Authentication indicator" -msgstr "Autentifikácia" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "Dvojfaktorová autentifikácia (heslo + OTP)" - -msgid "RADIUS" -msgstr "RADIUS" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "External Identity Provider" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "" - -#, fuzzy -msgid "Activate" -msgstr "Aktívna zóna" - -msgid "Add and Add Another" -msgstr "Pridať a pridať ďalšie" - -msgid "Add and Close" -msgstr "Pridať a zavrieť" - -msgid "Add and Edit" -msgstr "Pridať a upraviť" - -#, fuzzy -msgid "Add Many" -msgstr "Pridať a upraviť" - -msgid "Back" -msgstr "" - -msgid "Cancel" -msgstr "Zrušiť" - -msgid "Clear" -msgstr "" - -#, fuzzy -msgid "Clear all fields on the page." -msgstr "Znovu načítať stránku." - -msgid "Close" -msgstr "" - -msgid "Disable" -msgstr "Deaktivovať" - -msgid "Download" -msgstr "" - -#, fuzzy -msgid "Download certificate as PEM formatted file." -msgstr "Odstrániť certifikačný profil" - -msgid "Edit" -msgstr "Upraviť" - -#, fuzzy -msgid "Enable" -msgstr "Deaktivovať" - -msgid "Find" -msgstr "Hľadať" - -#, fuzzy -msgid "Get" -msgstr "Nastaviť" - -msgid "Hide" -msgstr "Skryť" - -msgid "Issue" -msgstr "Vydať" - -msgid "Match" -msgstr "" - -#, fuzzy -msgid "Match users according to certificate." -msgstr "Vyhľadávanie existujúcich certifikátov." - -msgid "Migrate" -msgstr "" - -msgid "OK" -msgstr "OK" - -msgid "Refresh" -msgstr "Znovu načítať" - -msgid "Reload current settings from the server." -msgstr "Znovu načítať aktuálne nastavenia zo servera." - -msgid "Delete" -msgstr "Odstrániť" - -msgid "Remove hold" -msgstr "" - -msgid "Reset" -msgstr "" - -msgid "Reset Password" -msgstr "Obnoviť heslo" - -#, fuzzy -msgid "Reset Password and Log in" -msgstr "Obnoviť heslo" - -msgid "Restore" -msgstr "Obnoviť" - -msgid "Retry" -msgstr "" - -msgid "Revert" -msgstr "Vrátiť" - -msgid "Revoke" -msgstr "" - -msgid "Save" -msgstr "Uložiť" - -msgid "Set" -msgstr "Nastaviť" - -msgid "Show" -msgstr "Zobraziť" - -#, fuzzy -msgid "Stage" -msgstr "Predpripravení používatelia" - -msgid "Update" -msgstr "Aktualizovať" - -#, fuzzy -msgid "View" -msgstr "ID Views" - -#, fuzzy -msgid "Customization" -msgstr "Potvrdenie" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "Zbaliť všetko" - -msgid "Expand All" -msgstr "Rozbaliť všetko" - -msgid "General" -msgstr "" - -msgid "Identity Settings" -msgstr "Nastavenia identity" - -#, fuzzy -msgid "Record Settings" -msgstr "Nastavenia role" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "Nastavenia pre ${entity} ${primary_key}" - -msgid "Back to Top" -msgstr "" - -#, fuzzy, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "Nastavenia pre ${entity} ${primary_key}" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -#, fuzzy -msgid "Add custom value" -msgstr "Vlastná hodnota" - -#, fuzzy -msgid "Available" -msgstr "Deaktivovať" - -#, fuzzy -msgid "Some operations failed." -msgstr "Vytvorenie záznamu zlyhalo." - -#, fuzzy -msgid "Operations Error" -msgstr "Chyba validácie" - -msgid "Confirmation" -msgstr "Potvrdenie" - -msgid "Custom value" -msgstr "Vlastná hodnota" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" -"Táto stránka obsahuje neuložené zmeny. Prosím uložte alebo vráťte zmeny späť." - -msgid "Unsaved Changes" -msgstr "Neuložené zmeny" - -#, fuzzy, python-brace-format -msgid "Edit ${entity}" -msgstr "Identita" - -msgid "Hide details" -msgstr "Skryť detaily" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -#, fuzzy -msgid "Redirection" -msgstr "Domovský priečinok" - -msgid "Select entries to be removed." -msgstr "" - -#, fuzzy -msgid "Result" -msgstr "Zobraz výsledky" - -msgid "Show details" -msgstr "Zobraziť detaily" - -msgid "Success" -msgstr "Úspech" - -msgid "Validation error" -msgstr "Chyba validácie" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "Znovu načítať stránku." - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "Nastala chyba (${error})" - -msgid "HTTP Error" -msgstr "Chyba HTTP" - -msgid "Internal Error" -msgstr "Vnútorná chyba" - -msgid "IPA Error" -msgstr "IPA chyba" - -msgid "No response" -msgstr "Bez odpovede" - -msgid "Unknown Error" -msgstr "Neznáma chyba" - -msgid "URL" -msgstr "URL" - -#, fuzzy, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "${primary_key} je členom:" - -#, fuzzy, python-brace-format -msgid "${primary_key} members:" -msgstr "${primary_key} je členom:" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "${primary_key} je členom:" - -#, fuzzy, python-brace-format -msgid "${primary_key} member managers:" -msgstr "${primary_key} je členom:" - -msgid "Settings" -msgstr "Nastavenia" - -msgid "Search" -msgstr "Vyhľadávanie" - -msgid "False" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Allowed to create keytab" -msgstr "" - -msgid "Allowed to retrieve keytab" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Add Kerberos Principal Alias" -msgstr "" - -msgid "New kerberos principal alias" -msgstr "" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "Zdedené z konfigurácie servera" - -msgid "MS-PAC" -msgstr "MS-PAC" - -msgid "Override inherited settings" -msgstr "Potlačiť zdedené nastavenia" - -msgid "PAD" -msgstr "" - -#, fuzzy -msgid "Authenticating" -msgstr "Autentifikácia" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -msgid "Kerberos Principal you entered is expired" -msgstr "" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -#, fuzzy -msgid "Log In Using Certificate" -msgstr "Žiadny platný certifikát" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -#, fuzzy -msgid "Log out error" -msgstr "Chyba formátu" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "Synchronizovať OTP Token" - -msgid "Synchronizing" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -#, fuzzy -msgid "number of passwords" -msgstr "Používateľské heslo" - -msgid "seconds" -msgstr "" - -#, fuzzy -msgid "Migrating" -msgstr "Konfigurácia" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -#, fuzzy -msgid "Password migration was not successful" -msgstr "Nastavenie hesla nebolo úspešné" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -#, fuzzy -msgid "The password or username you entered is incorrect" -msgstr "Prihlasovacie meno, heslo alebo token sú nesprávne" - -#, fuzzy -msgid "Password migration was successful" -msgstr "Nastavenie hesla nebolo úspešné" - -#, fuzzy -msgid "Attribute" -msgstr "Atribúty" - -msgid "Add delegation" -msgstr "" - -#, fuzzy -msgid "Remove delegations" -msgstr "Odstrániť povolenie" - -#, fuzzy -msgid "Add permission" -msgstr "povolenie" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove permissions" -msgstr "Odstrániť povolenie" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -msgid "Remove privileges" -msgstr "" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -msgid "Role Settings" -msgstr "Nastavenia role" - -msgid "Add role" -msgstr "" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "Certifikát pre ${entity} ${primary_key}" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove roles" -msgstr "Serverové role" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "Certifikát pre ${entity} ${primary_key}" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add self service permission" -msgstr "HBAC popis služby" - -#, fuzzy -msgid "Remove self service permissions" -msgstr "Odstrániť povolenie" - -#, fuzzy -msgid "Add rule" -msgstr "HBAC pravidlá" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to change default group?" -msgstr "Ste si istý/istá, že chcete odstrániť ${object}?" - -#, fuzzy -msgid "Default host group" -msgstr "Predvolená používateľská skupina" - -msgid "Default user group" -msgstr "Predvolená používateľská skupina" - -msgid "Exclusive" -msgstr "" - -msgid "Expression" -msgstr "Výraz" - -msgid "Host group rule" -msgstr "" - -#, fuzzy -msgid "Host group rules" -msgstr "sudo pravidlá" - -msgid "Inclusive" -msgstr "" - -#, fuzzy -msgid "Remove auto membership rules" -msgstr "Automember pravidlo" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "User group rule" -msgstr "Používateľská skupina" - -#, fuzzy -msgid "User group rules" -msgstr "Používateľská skupina" - -#, fuzzy -msgid "Add automount key" -msgstr "Automount" - -msgid "Remove automount keys" -msgstr "" - -#, fuzzy -msgid "Add automount location" -msgstr "Pridať novú IPA lokalitu." - -#, fuzzy -msgid "Automount Location Settings" -msgstr "Nastavenia účtu" - -#, fuzzy -msgid "Remove automount locations" -msgstr "Servery v lokalite." - -#, fuzzy -msgid "Add automount map" -msgstr "Automount" - -#, fuzzy -msgid "Map Type" -msgstr "Typ skupiny" - -msgid "Direct" -msgstr "Priame" - -msgid "Indirect" -msgstr "Nepriame" - -msgid "Remove automount maps" -msgstr "" - -#, fuzzy -msgid "Add certificate authority" -msgstr "Certifikačná autorita" - -#, fuzzy -msgid "Remove certificate authorities" -msgstr "Certifikačné autority" - -msgid "Add CA ACL" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "Certifikát pre ${entity} ${primary_key}" - -#, fuzzy, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "Pridať používateľov a skupiny do HBAC pravidla." - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "Certifikát pre ${entity} ${primary_key}" - -#, fuzzy, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "Pridať služby do HBAC pravidla." - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -msgid "All" -msgstr "Všetko" - -msgid "Any CA" -msgstr "Akákoľvek CA" - -msgid "Any Host" -msgstr "" - -msgid "Any Service" -msgstr "Akákoľvek služba" - -msgid "Any Profile" -msgstr "Akýkoľvek profil" - -msgid "Anyone" -msgstr "Každý" - -msgid "Rule status" -msgstr "Stav pravidla" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -#, fuzzy -msgid "Remove CA ACLs" -msgstr "Odstrániť CA ACL." - -#, fuzzy, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "Certifikát pre ${entity} ${primary_key}" - -#, fuzzy, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, fuzzy, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "Odstrániť certifikáty zo služby" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -msgid "Specified CAs" -msgstr "Špecifikované CA" - -#, fuzzy -msgid "Specified Hosts and Groups" -msgstr "Špecifikované služby a skupiny" - -msgid "Specified Profiles" -msgstr "Špecifikované profily" - -msgid "Specified Services and Groups" -msgstr "Špecifikované služby a skupiny" - -#, fuzzy -msgid "Specified Users and Groups" -msgstr "Špecifikované služby a skupiny" - -msgid "Permitted to have certificates issued" -msgstr "" - -#, fuzzy -msgid "Remove certificate profiles" -msgstr "Certifikačné profily" - -msgid "AA Compromise" -msgstr "" - -msgid "Add principal" -msgstr "" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" - -msgid "Certificates" -msgstr "Certifikáty" - -msgid "Certificate Hold" -msgstr "Držanie certifikátu" - -#, fuzzy -msgid "Cessation of Operation" -msgstr "Konfigurácia repliky" - -#, fuzzy -msgid "Common Name" -msgstr "Názov príkazu" - -#, fuzzy -msgid "the certificate with serial number " -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -msgid "Expires On" -msgstr "" - -msgid "Issued on from" -msgstr "" - -msgid "Issued on to" -msgstr "" - -msgid "Maximum serial number" -msgstr "Maximálne sériové číslo" - -msgid "Minimum serial number" -msgstr "Minimálne sériové číslo" - -msgid "Revoked on from" -msgstr "" - -msgid "Revoked on to" -msgstr "" - -#, fuzzy -msgid "Valid not after from" -msgstr "Chyba validácie" - -#, fuzzy -msgid "Valid not after to" -msgstr "Začiatok platnosti" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -msgid "Fingerprints" -msgstr "" - -msgid "Get Certificate" -msgstr "Získať certifikát" - -msgid "Certificate Hold Removed" -msgstr "Držanie certifikátu odstránené" - -#, fuzzy, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "Certifikát pre ${entity} ${primary_key}" - -#, fuzzy, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "Certifikát pre ${entity} ${primary_key}" - -#, fuzzy, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "Certifikát pre ${entity} ${primary_key}" - -#, fuzzy -msgid "Issue new certificate" -msgstr "Nový certifikát" - -#, fuzzy -msgid "Issued By" -msgstr "Vydať" - -#, fuzzy -msgid "Issued On" -msgstr "Vydať" - -#, fuzzy -msgid "Issued To" -msgstr "Vydať" - -msgid "Key Compromise" -msgstr "" - -msgid "No Valid Certificate" -msgstr "Žiadny platný certifikát" - -msgid "New Certificate" -msgstr "Nový certifikát" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -msgid "Note" -msgstr "Poznámka" - -msgid "Organizational Unit" -msgstr "Organizačná jednotka" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "${count} certifikátov prítomných" - -#, fuzzy -msgid "Privilege Withdrawn" -msgstr "Nastavenia privilégia" - -msgid "Reason for Revocation" -msgstr "Dôvod pre revokáciu" - -#, fuzzy -msgid "Remove certificate hold" -msgstr "Revokácia certifikátu." - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" +#, python-format +msgid "(see RFC %s for details)" +msgstr "(pozrite RFC %s pre viac detailov)" #, python-brace-format msgid "" @@ -20969,492 +279,28 @@ msgstr "" "-----END NEW CERTIFICATE REQUEST-----) do textového poľa nižšie: " -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" +msgid "A SYSTEM permission may not be modified or removed" +msgstr "SYSTEM-ové povolenia nemožu byť upravené alebo odstránené" -msgid "Certificate requested" -msgstr "Certifikačná požiadavka" +msgid "A group may not be a member of itself" +msgstr "Skupina nemože byť členom seba samej" -#, fuzzy -msgid "Revoke certificate" -msgstr "Revokácia certifikátu." +msgid "ACI" +msgstr "ACI" -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" +msgid "ACI name" +msgstr "ACI názov" -msgid "Certificate Revoked" -msgstr "Certifikát revokovaný" +#, python-format +msgid "ACI of permission %s was not found" +msgstr "ACI pre oprávnenie %s sa nenašlo" -msgid "REVOKED" -msgstr "" +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "ACI s názvom \"%s\" nenájdené" -#, fuzzy -msgid "SHA1 Fingerprint" -msgstr "Odtlačok verejného SSH kľúča (fingerprint)" - -msgid "SHA256 Fingerprint" -msgstr "" - -msgid "Status" -msgstr "Stav" - -msgid "Superseded" -msgstr "" - -msgid "Unspecified" -msgstr "Nešpecifikované" - -msgid "Valid Certificate Present" -msgstr "Prítomný platný certifikát" - -#, fuzzy -msgid "Valid from" -msgstr "Chyba validácie" - -#, fuzzy -msgid "Valid to" -msgstr "Platnosť" - -msgid "Validity" -msgstr "Platnosť" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "Certifikát pre ${entity} ${primary_key}" - -msgid "View Certificate" -msgstr "Prezrieť certifikát" - -#, fuzzy -msgid "Certificate Data" -msgstr "Certifikát" - -#, fuzzy -msgid "Certificate For Match" -msgstr "Certifikačná autorita" - -#, fuzzy -msgid "Certificate Mapping Match" -msgstr "Typ certifikátu" - -msgid "Matched Users" -msgstr "" - -#, fuzzy -msgid "User Login" -msgstr "Prihlasovacie meno" - -#, fuzzy -msgid "Add certificate identity mapping rule" -msgstr "Pridať nové certifikáty k službe" - -#, fuzzy -msgid "Add certificate mapping data" -msgstr "CA certifikát" - -#, fuzzy -msgid "Configuration string" -msgstr "Konfigurácia" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -#, fuzzy -msgid "Remove certificate mapping data" -msgstr "Odstrániť certifikáty zo služby" - -msgid "Issuer and subject" -msgstr "" - -#, fuzzy -msgid "Remove certificate identity mapping rules" -msgstr "Odstrániť certifikáty zo služby" - -msgid "Group Options" -msgstr "Voľby skupiny" - -msgid "Search Options" -msgstr "Voľby vyhľadávania" - -msgid "SELinux Options" -msgstr "SELinux voľby" - -#, fuzzy -msgid "Server Options" -msgstr "Voľby služieb" - -msgid "Service Options" -msgstr "Voľby služieb" - -msgid "User Options" -msgstr "Voľby používateľov" - -#, fuzzy -msgid "Forward first" -msgstr "Forwardery" - -#, fuzzy -msgid "Forwarding disabled" -msgstr "Účet deaktivovaný" - -#, fuzzy -msgid "Forward only" -msgstr "DNS forward zóna" - -msgid "Options" -msgstr "Voľby" - -#, fuzzy -msgid "Update System DNS Records" -msgstr "Aktualizovať DNS položky." - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -#, fuzzy -msgid "Add DNS forward zone" -msgstr "DNS forward zóna" - -#, fuzzy -msgid "Remove DNS forward zones" -msgstr "DNS forward zóny" - -#, fuzzy -msgid "Add DNS resource record" -msgstr "Pridať nový DNS záznam" - -msgid "DNS record was deleted because it contained no data." -msgstr "DNS záznam bol odstránený pretože neobsahoval žiadne údaje." - -msgid "Other Record Types" -msgstr "Ostatné typy záznamov" - -msgid "Address not valid, can't redirect" -msgstr "Neplatná adresa, nemôžem presmerovať" - -msgid "Create dns record" -msgstr "Vytvoriť DNS záznam" - -msgid "Creating record." -msgstr "Vytváranie záznamu." - -msgid "Record creation failed." -msgstr "Vytvorenie záznamu zlyhalo." - -#, fuzzy -msgid "Checking if record exists." -msgstr "Vytváranie záznamu." - -msgid "Record not found." -msgstr "Záznam nenájdený" - -msgid "Redirection to PTR record" -msgstr "Presmerovanie na PTR záznam" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "Zóna nájdená: ${zone}" - -msgid "Target reverse zone not found." -msgstr "Cieľová reverzná zóna nenájdená." - -#, fuzzy -msgid "Fetching DNS zones." -msgstr "DNS zóny" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -#, fuzzy -msgid "Remove DNS resource records" -msgstr "Odstrániť DNS záznam" - -msgid "Standard Record Types" -msgstr "Štandardné typy záznamov" - -msgid "Records for DNS Zone" -msgstr "Záznamy pre DNS zónu" - -msgid "Record Type" -msgstr "Typ záznamu" - -#, fuzzy -msgid "Add DNS zone" -msgstr "DNS zóna" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "Ste si istý/istá, že chcete pridať povolenie pre DNS zónu ${object}?" - -msgid "DNS Zone Settings" -msgstr "Nastavenia DNS zóny" - -#, fuzzy -msgid "Remove DNS zones" -msgstr "DNS zóny" - -msgid "Remove Permission" -msgstr "Odstrániť povolenie" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" -"Ste si istý/istá, že chcete odstrániť povolenie pre DNS zónu ${object}?" - -msgid "Skip DNS check" -msgstr "Preskočiť DNS kontrolu" - -#, fuzzy -msgid "Skip overlap check" -msgstr "Preskočiť DNS kontrolu" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -#, fuzzy -msgid "Authoritative nameserver change" -msgstr "Autoritatívny nameserver" - -msgid "Level" -msgstr "" - -msgid "Set Domain Level" -msgstr "" - -#, fuzzy -msgid "Add user group" -msgstr "Používateľská skupina" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "Pridať používateľov a skupiny do HBAC pravidla." - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -msgid "Group Settings" -msgstr "Nastavenia skupiny" - -msgid "External" -msgstr "" - -msgid "Groups" -msgstr "Skupiny" - -#, fuzzy -msgid "Group categories" -msgstr "Kategórie používateľov" - -msgid "Change to external group" -msgstr "" - -#, fuzzy -msgid "Change to POSIX group" -msgstr "Cieľová skupina" - -#, fuzzy -msgid "Non-POSIX" -msgstr "POSIX" - -msgid "POSIX" -msgstr "POSIX" - -#, fuzzy -msgid "Remove user groups" -msgstr "Členské skupiny" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, fuzzy, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, fuzzy, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, fuzzy, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "Odstrániť služby a skupiny služieb z HBAC pravidla." - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -msgid "Group Type" -msgstr "Typ skupiny" - -#, fuzzy -msgid "Add HBAC rule" -msgstr "HBAC pravidlá" - -#, fuzzy, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "Pridať používateľov a skupiny do HBAC pravidla." - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "Pridať služby do HBAC pravidla." - -#, fuzzy, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "Pridať služby do HBAC pravidla." - -#, fuzzy -msgid "Accessing" -msgstr "Čas prístupu" - -#, fuzzy -msgid "Remove HBAC rules" -msgstr "HBAC pravidlá" - -#, fuzzy, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, fuzzy, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "Odstrániť služby a skupiny služieb z HBAC pravidla." - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, fuzzy -msgid "Via Service" -msgstr "Služba" - -msgid "Who" -msgstr "Kto" - -#, fuzzy -msgid "Add HBAC service" -msgstr "HBAC služba" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -#, fuzzy -msgid "Remove HBAC services" -msgstr "HBAC služby" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -#, fuzzy -msgid "Add HBAC service group" -msgstr "Pridať novú HBAC službu." - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove HBAC service groups" -msgstr "HBAC služby" - -#, fuzzy, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "Odstrániť služby a skupiny služieb z HBAC pravidla." +msgid "ACIs" +msgstr "ACI" msgid "Access Denied" msgstr "Prístup odmietnutý" @@ -21462,1162 +308,179 @@ msgstr "Prístup odmietnutý" msgid "Access Granted" msgstr "Prístup povolený" -#, fuzzy -msgid "Include Disabled" -msgstr "Deaktivované" +#, python-format +msgid "Access granted: %s" +msgstr "Prístup povolený: %s" -#, fuzzy -msgid "Include Enabled" -msgstr "Zahrnuté atribúty" - -msgid "HBAC Test" -msgstr "HBAC test" - -msgid "Matched" -msgstr "" - -msgid "Missing values: " -msgstr "" - -#, fuzzy -msgid "New Test" -msgstr "Spustiť test" - -msgid "Rules" -msgstr "Pravidlá" - -msgid "Run Test" -msgstr "Spustiť test" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -msgid "Unmatched" -msgstr "" - -msgid "Add host" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "Pridať služby do HBAC pravidla." - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -#, fuzzy -msgid "Host Certificate" -msgstr "Získať certifikát" - -#, fuzzy -msgid "Host Name" -msgstr "Názov" - -msgid "Delete Key, Unprovision" -msgstr "" - -#, fuzzy -msgid "Host Settings" -msgstr "Trust nastavenia" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -#, fuzzy -msgid "Generate OTP" -msgstr "Nastaviť OTP" - -#, fuzzy -msgid "Generated OTP" -msgstr "Druhé OTP" - -msgid "Kerberos Key" -msgstr "Kerberos kľúč" - -msgid "Kerberos Key Not Present" -msgstr "Kerberos kľúč nie je prítomný" - -#, fuzzy -msgid "Kerberos Key Present, Host Provisioned" -msgstr "Kerberos kľúč nie je prítomný" - -#, fuzzy -msgid "One-Time Password" -msgstr "Jednorázové heslo (OTP)" - -#, fuzzy -msgid "One-Time Password Not Present" -msgstr "Jednorázové heslo (OTP)" - -#, fuzzy -msgid "One-Time Password Present" -msgstr "Jednorázové heslo (OTP)" - -#, fuzzy -msgid "Reset OTP" -msgstr "Nastaviť OTP" - -#, fuzzy -msgid "Reset One-Time Password" -msgstr "Jednorázové heslo (OTP)" - -msgid "Set OTP" -msgstr "Nastaviť OTP" - -#, fuzzy -msgid "OTP set" -msgstr "OTP token" - -#, fuzzy -msgid "Set One-Time Password" -msgstr "Jednorázové heslo (OTP)" - -#, fuzzy -msgid "Remove hosts" -msgstr "Odstrániť povolenie" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -#, fuzzy -msgid "Unprovision" -msgstr "povolenie" - -#, fuzzy -msgid "Are you sure you want to unprovision this host?" -msgstr "Ste si istý/istá, že chcete odomknúť užívateľa ${object}?" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -#, fuzzy -msgid "Add host group" -msgstr "Pridať do predvolenej skupiny" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Host Group Settings" -msgstr "Nastavenia skupiny" - -#, fuzzy -msgid "Remove host groups" -msgstr "Člen skupín" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -#, fuzzy -#| msgid "Servers details:" -msgid "Identity provider details" -msgstr "Detaily serverov:" - -#, fuzzy -#| msgid "Verify Password" -msgid "Verify secret" -msgstr "Overiť heslo" - -#, fuzzy -msgid "User to override" -msgstr "Kategórie používateľov" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -#, fuzzy -msgid "Profile" -msgstr "Profily" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -msgid "Enter trusted group name." -msgstr "" - -#, fuzzy -msgid "Add ID view" -msgstr "Pridať nové ID View" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, fuzzy, python-brace-format -msgid "${primary_key} applies to:" -msgstr "${primary_key} je členom:" - -msgid "Applied to hosts" -msgstr "" - -#, fuzzy -msgid "Apply to host groups" -msgstr "Pridať do predvolenej skupiny" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, fuzzy, python-brace-format -msgid "${primary_key} overrides:" -msgstr "${primary_key} je členom:" - -#, fuzzy -msgid "Remove ID views" -msgstr "ID Views" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -msgid "Un-apply from host groups" -msgstr "" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -#, fuzzy -msgid "Un-apply" -msgstr "Použiť" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "Ste si istý/istá, že chcete aktivovať vybrané položky?" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -#, fuzzy -msgid "Kerberos Ticket Policy" -msgstr "nastavenia kerberos ticket policy" - -#, fuzzy -msgid "Add netgroup" -msgstr "Pridať do predvolenej skupiny" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -msgid "Netgroup Settings" -msgstr "Netgroup nastavenia" - -#, fuzzy -msgid "Remove netgroups" -msgstr "Členské skupiny" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add OTP token" -msgstr "OTP token" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -#, fuzzy -msgid "Configure your token" -msgstr "Konfigurácia" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -msgid "OTP Token Settings" -msgstr "Nastavenia pre OTP token" - -msgid "Disable token" -msgstr "Deaktiovať token" - -#, fuzzy -msgid "Enable token" -msgstr "Deaktiovať token" - -#, fuzzy -msgid "Remove OTP tokens" -msgstr "OTP tokeny" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "Zobraziť QR kód" - -#, fuzzy -msgid "Show configuration uri" -msgstr "DNS konfiguračné voľby" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -#, fuzzy -msgid "Add Custom Attribute" -msgstr "Atribúty" - -msgid "Permission settings" -msgstr "Nastavenia oprávnenia" - -#, fuzzy -msgid "Attribute breakdown" -msgstr "Atribúty" - -msgid "Privilege Settings" -msgstr "Nastavenia privilégia" - -#, fuzzy -msgid "Public key:" -msgstr "Verejný SSH kľuč" - -#, fuzzy -msgid "Set public key" -msgstr "Verejný SSH kľúč" - -msgid "Show/Set key" -msgstr "Zobraziť/Nastaviť kľúč" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "Modifikované" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -#, fuzzy -msgid "Add password policy" -msgstr "Politky hesiel" - -msgid "Password Policy" -msgstr "Politika hesiel" - -#, fuzzy -msgid "Remove password policies" -msgstr "Politky hesiel" - -#, fuzzy -msgid "Add ID range" -msgstr "ID rozsah" - -msgid "Range Settings" -msgstr "Nastavenie rozsahu" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -#, fuzzy -msgid "Range size" -msgstr "ID rozsahy" - -#, fuzzy -msgid "Domain SID" -msgstr "Doména" - -msgid "Secondary RID base" -msgstr "" - -#, fuzzy -msgid "Remove ID ranges" -msgstr "ID rozsahy" - -msgid "Active Directory domain with POSIX attributes" -msgstr "Active Directory doména s POSIX attribútmy" - -msgid "Detect" -msgstr "Detekovať" - -msgid "Local domain" -msgstr "Lokálna doména" - -msgid "IPA trust" -msgstr "IPA trust" - -msgid "Active Directory winsync" -msgstr "Active Directory winsync" - -#, fuzzy -msgid "Add RADIUS server" -msgstr "DNS server" - -msgid "RADIUS Proxy Server Settings" -msgstr "RADIUS Proxy serverové nastavenia" - -msgid "Remove RADIUS servers" -msgstr "" - -msgid "Check DNS" -msgstr "Skontrolovať DNS" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -msgid "Force Update" -msgstr "Vynútiť aktualizáciu" - -#, fuzzy -msgid "Add SELinux user map" -msgstr "SELinux používateľ" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -msgid "Server Roles" -msgstr "Serverové role" - -msgid "Server Role" -msgstr "Server rola" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -#, fuzzy -msgid "Delete Server" -msgstr "Odstrániť používateľa" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -#, fuzzy -msgid "Add service" -msgstr "HBAC služba" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -msgid "Service Certificate" -msgstr "Certifikát služby" - -msgid "Service Settings" -msgstr "Nastavenia služby" - -#, fuzzy -msgid "Provisioning" -msgstr "Nastavenia oprávnenia" - -#, fuzzy -msgid "Remove services" -msgstr "Odstrániť povolenie" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to unprovision this service?" -msgstr "Ste si istý/istá, že chcete obnoviť vybraných používateľov?" - -msgid "Unprovisioning service" -msgstr "" - -#, fuzzy -msgid "Service unprovisioned" -msgstr "Voľby služieb" - -#, fuzzy -msgid "Kerberos Key Present, Service Provisioned" -msgstr "Kerberos kľúč nie je prítomný" - -msgid "SSH public keys" -msgstr "Verejné SSH kľúče" - -msgid "SSH public key:" -msgstr "Verejný SSH kľuč" - -msgid "Set SSH key" -msgstr "Nastaviť SSH kľúč" - -#, fuzzy -msgid "Are you sure you want to activate selected users?" -msgstr "Ste si istý/istá, že chcete obnoviť vybraných používateľov?" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "Ste si istý/istá, že chcete deaktivovať ${object}?" - -#, fuzzy, python-brace-format -msgid "${count} user(s) activated" -msgstr "${count} users(s) predpripravených" - -#, fuzzy -msgid "Add stage user" -msgstr "Predpripravení používatelia" - -msgid "Stage users" -msgstr "Predpripravení používatelia" - -msgid "Preserved users" -msgstr "Uschovaní používatelia" - -#, fuzzy -msgid "Remove preserved users" -msgstr "Uschovaní používatelia" - -#, fuzzy -msgid "Remove stage users" -msgstr "Predpripravení používatelia" - -#, fuzzy -msgid "Are you sure you want to stage selected users?" -msgstr "Ste si istý/istá, že chcete obnoviť vybraných používateľov?" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "${count} users(s) predpripravených" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "Ste si istý/istá, že chcete deaktivovať ${object}?" - -msgid "Are you sure you want to restore selected users?" -msgstr "Ste si istý/istá, že chcete obnoviť vybraných používateľov?" - -#, fuzzy, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "Ste si istý/istá, že chcete odstrániť ${object}?" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "${count} používateľov obnovených" - -msgid "User categories" -msgstr "Kategórie používateľov" - -#, fuzzy -msgid "Add subid" -msgstr "sudo pravidlá" - -#, fuzzy -msgid "Assigned subids" -msgstr "Pridať nové ID View" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -#, fuzzy -msgid "Add sudo command" -msgstr "sudo príkazy" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -#, fuzzy -msgid "Remove sudo commands" -msgstr "sudo príkazy" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -#, fuzzy -msgid "Add sudo command group" -msgstr "sudo príkazy" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove sudo command groups" -msgstr "sudo príkazy" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add sudo rule" -msgstr "sudo pravidlá" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "Povoliť" - -msgid "Any Command" -msgstr "Akýkoľvek príkaz" - -msgid "Any Group" -msgstr "Akákoľvek skupina" - -#, fuzzy -msgid "Run Commands" -msgstr "Sudo príkazy" - -msgid "Deny" -msgstr "Zakázať" - -#, fuzzy -msgid "Access this host" +msgid "Access time" msgstr "Čas prístupu" -msgid "Option added" -msgstr "Voľba pridaná" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "${count} option(s) odstránených" - -#, fuzzy -msgid "Remove sudo rules" -msgstr "sudo pravidlá" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -#, fuzzy -msgid "Specified Commands and Groups" -msgstr "Špecifikované služby a skupiny" - -msgid "Specified Groups" -msgstr "Špecifikované skupiny" - -#, fuzzy -msgid "Remove sudo options" -msgstr "Odstrániť povolenie" - -#, fuzzy -msgid "Autogenerated" -msgstr "Automember" - -msgid "Segment details" -msgstr "Detaily segmentu" - -msgid "Replication configuration" -msgstr "Konfigurácia repliky" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -#, fuzzy -msgid "Add IPA location" -msgstr "Pridať novú IPA lokalitu." - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove IPA locations" -msgstr "" -"\n" -"IPA lokality\n" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - msgid "Account" msgstr "Účet" -#, fuzzy -msgid "Add trust" -msgstr "IPA trust" - -msgid "Administrative account" -msgstr "" - -msgid "SID blocklists" -msgstr "" - -msgid "Trust Settings" -msgstr "Trust nastavenia" - -msgid "Establish using" -msgstr "" - -#, fuzzy -msgid "Fetch domains" -msgstr "Lokálna doména" - -#, fuzzy -msgid "Pre-shared password" -msgstr "Zmeniť heslo" - -#, fuzzy -msgid "Remove trusts" -msgstr "Odstrániť povolenie" - -#, fuzzy -msgid "Remove domains" -msgstr "Realm domény" - -msgid "Alternative UPN suffixes" -msgstr "" - -#, fuzzy -msgid "User attributes for SMB services" -msgstr "Vyhľadať HBAC služby." - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - msgid "Account Settings" msgstr "Nastavenia účtu" msgid "Account Status" msgstr "Stav účtu" +msgid "Account disabled" +msgstr "Účet deaktivovaný" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "Účet deaktivovaný: %(disabled)s" + +msgid "Actions" +msgstr "Akcie" + +msgid "Active Directory domain" +msgstr "Active Directory doména" + +msgid "Active Directory domain with POSIX attributes" +msgstr "Active Directory doména s POSIX attribútmy" + +msgid "Active Directory winsync" +msgstr "Active Directory winsync" + msgid "Active users" msgstr "Aktívni používatelia" -#, fuzzy -msgid "Add user" -msgstr "Aktívni používatelia" +msgid "Active zone" +msgstr "Aktívna zóna" -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" +msgid "Add" +msgstr "Pridať" -#, fuzzy, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" +msgid "Add a new HBAC service." +msgstr "Pridať novú HBAC službu." + +msgid "Add a new ID View." +msgstr "Pridať nové ID View" + +msgid "Add a new IPA location." +msgstr "Pridať novú IPA lokalitu." + +msgid "Add a new YubiKey OTP token." +msgstr "Pridať nový YubiKey OTP token." + +msgid "Add and Add Another" +msgstr "Pridať a pridať ďalšie" + +msgid "Add and Close" +msgstr "Pridať a zavrieť" + +msgid "Add and Edit" +msgstr "Pridať a upraviť" + +msgid "Add new DNS resource record." +msgstr "Pridať nový DNS záznam" + +msgid "Add new certificates to a service" +msgstr "Pridať nové certifikáty k službe" + +msgid "Add one or more certificates to the user entry" +msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" + +msgid "Add services to an HBAC rule." msgstr "Pridať služby do HBAC pravidla." -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" +msgid "Add to default group" +msgstr "Pridať do predvolenej skupiny" + +msgid "Add users and groups to an HBAC rule." +msgstr "Pridať používateľov a skupiny do HBAC pravidla." + +msgid "Add users that can manage this token." +msgstr "Pridať používateľa, ktorý môže spravovať tento token." + +#, python-format +msgid "Added %(map)s" +msgstr "Pridané %(map)s" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "Pridané %(src)s do %(dst)s" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo pridané" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola pridaná" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "Pridané ID View \"%(value)s\"" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "Pridaná IPA lokalita \"%(value)s\"" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "Pridané automember pravidlo \"%(value)s\"" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Pridaná skupina \"%(value)s\"" + +msgid "Address not valid, can't redirect" +msgstr "Neplatná adresa, nemôžem presmerovať" + +msgid "Administrator e-mail address" +msgstr "E-mailová adresa administrátora" + +msgid "Advertised by servers" +msgstr "Oznamované servermi" + +msgid "All" +msgstr "Všetko" + +msgid "Allow" +msgstr "Povoliť" + +msgid "Allow PTR sync" +msgstr "Povoliť PTR synchronizáciu" + +msgid "Allow dynamic updates." +msgstr "Povoliť dynamické aktualizácie" + +msgid "Allow query" +msgstr "Povoliť dotazy" + +msgid "Allow transfer" +msgstr "Povoliť prenos" #, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" +msgid "An error has occurred (${error})" +msgstr "Nastala chyba (${error})" -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" +msgid "Any CA" +msgstr "Akákoľvek CA" -msgid "Auto assign subordinate ids" -msgstr "" +msgid "Any Command" +msgstr "Akýkoľvek príkaz" -#, fuzzy, python-brace-format -#| msgid "Are you sure you want to unlock user ${object}?" -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "Ste si istý/istá, že chcete odomknúť užívateľa ${object}?" +msgid "Any Group" +msgstr "Akákoľvek skupina" -msgid "Contact Settings" -msgstr "Nastavenia kontaktných údajov" +msgid "Any Profile" +msgstr "Akýkoľvek profil" -msgid "Delete mode" -msgstr "Mód odstránenia" +msgid "Any Service" +msgstr "Akákoľvek služba" -msgid "Employee Information" -msgstr "Informácie o zamestnancovi" +msgid "Anyone" +msgstr "Každý" -msgid "Error changing account status" -msgstr "" - -msgid "Password expiration" -msgstr "Vypršanie hesla" - -msgid "Mailing Address" -msgstr "Poštová adresa" - -msgid "Misc. Information" -msgstr "Rôzne informácie" - -msgid "delete" -msgstr "odstrániť" - -msgid "preserve" -msgstr "uschovať" - -msgid "No private group" -msgstr "Bez privátnej skupiny" - -#, fuzzy -msgid "Remove users" -msgstr "Odstrániť povolenie" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" +msgid "Apply" +msgstr "Použiť" #, python-brace-format msgid "" @@ -22628,397 +491,44 @@ msgstr "" "okamžite." #, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Unlock" -msgstr "Odomknúť" +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "Ste si istý/istá, že chcete pridať povolenie pre DNS zónu ${object}?" #, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "Ste si istý/istá, že chcete odomknúť užívateľa ${object}?" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -#, fuzzy -msgid "Members" -msgstr "Členom" - -msgid "My User Vaults" -msgstr "" - -#, fuzzy -msgid "Owners" -msgstr "Vlastník" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Service Vaults" -msgstr "Služby" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -#, fuzzy -msgid "Vault Type" -msgstr "Typ skupiny" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -#, fuzzy -msgid "User Vaults" -msgstr "Používateľské skupiny" - -msgid "Current password is required" -msgstr "Súčasné heslo je povinné" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -msgid "First OTP" -msgstr "Prvé OTP" - -msgid "New password is required" -msgstr "Nové heslo je povinné" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "Synchronizácia tokenu zlyhala" - -msgid "The username, password or token codes are not correct" -msgstr "Prihlasovacie meno, heslo alebo token sú nesprávne" - -msgid "Token was synchronized" -msgstr "Token bol zosynchronizovaný" - -msgid "Password change complete" -msgstr "Zmena hesla dokončená" - -msgid "Your password has expired. Please enter a new password." -msgstr "" - -msgid "Passwords must match" -msgstr "Heslá sa musia zhodovať" - -msgid "Password reset was not successful." -msgstr "Nastavenie hesla nebolo úspešné" - -msgid "Reset your password." -msgstr "Obnoviť Vaše heslo." - -msgid "Second OTP" -msgstr "Druhé OTP" - -msgid "Verify Password" -msgstr "Overiť heslo" +msgid "Are you sure you want to delete ${object}?" +msgstr "Ste si istý/istá, že chcete odstrániť ${object}?" msgid "Are you sure you want to delete selected entries?" msgstr "Ste si istý/istá, že chcete odstrániť vybrané položky?" #, python-brace-format -msgid "${count} item(s) deleted" -msgstr "${count} položiek odstránených" +msgid "Are you sure you want to disable ${object}?" +msgstr "Ste si istý/istá, že chcete deaktivovať ${object}?" msgid "Are you sure you want to disable selected entries?" msgstr "Ste si istý/istá, že chcete deaktivovať vybrané položky?" #, python-brace-format -msgid "${count} item(s) disabled" -msgstr "${count} item(s) deaktivovaných" +msgid "Are you sure you want to enable ${object}?" +msgstr "Ste si istý/istá, že chcete aktivovať ${object}?" msgid "Are you sure you want to enable selected entries?" msgstr "Ste si istý/istá, že chcete aktivovať vybrané položky?" -#, fuzzy, python-brace-format -msgid "${count} item(s) enabled" -msgstr "${count} item(s) deaktivovaných" +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "" +"Ste si istý/istá, že chcete odstrániť povolenie pre DNS zónu ${object}?" -msgid "Some entries were not deleted" -msgstr "Niektoré položky neboli odstránené" - -msgid "Quick Links" -msgstr "Rýchle odkazy" - -msgid "Select All" -msgstr "Označiť všetko" +msgid "Are you sure you want to restore selected users?" +msgstr "Ste si istý/istá, že chcete obnoviť vybraných používateľov?" #, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" +msgid "Are you sure you want to unlock user ${object}?" +msgstr "Ste si istý/istá, že chcete odomknúť užívateľa ${object}?" -msgid "Unselect All" -msgstr "Odznačiť všetko" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "" +msgid "Attributes" +msgstr "Atribúty" msgid "Audit" msgstr "Audit" @@ -23026,105 +536,1059 @@ msgstr "Audit" msgid "Authentication" msgstr "Autentifikácia" +msgid "Authoritative nameserver" +msgstr "Autoritatívny nameserver" + +msgid "Authoritative nameserver domain name" +msgstr "Doménové meno autoritatívneho nameservera" + +msgid "Authority ID" +msgstr "ID autority" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "Automember pravidlo: %s nenájdené!" + +msgid "Automember" +msgstr "Automember" + +msgid "Automember Rule" +msgstr "Automember pravidlo" + +msgid "Automember rebuild membership task completed" +msgstr "Úloha obnovenia automember členstva dokončená" + +msgid "Automember rebuild membership task started" +msgstr "Úloha obnovenia automember členstva začala" + msgid "Automount" msgstr "Automount" +#, python-format +msgid "Bad search filter %(info)s" +msgstr "Zlý vyhľadávací filter %(info)s" + +msgid "Base-64 encoded certificate." +msgstr "Base-64 zakódovaný certifikát." + +msgid "Base-64 encoded service certificate" +msgstr "Base-64 zakódovaný certifikát služby" + +msgid "Base-64 encoded user certificate" +msgstr "Base-64 zakódovaný používateľský certifikát" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Base64 dekódovanie zlyhalo: %(reason)s" + +msgid "CA certificate" +msgstr "CA certifikát" + +msgid "Cancel" +msgstr "Zrušiť" + +#, python-format +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "Nie je možné dekódovať súbor '%(filename)s': %(exc)s" + +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "Nie je možné čítať súbor '%(filename)s': %(exc)s" + +msgid "Certificate" +msgstr "Certifikát" + +msgid "Certificate Authorities" +msgstr "Certifikačné autority" + +msgid "Certificate Authority" +msgstr "Certifikačná autorita" + +msgid "Certificate Hold" +msgstr "Držanie certifikátu" + +msgid "Certificate Hold Removed" +msgstr "Držanie certifikátu odstránené" + +msgid "Certificate Profile" +msgstr "Certifikačný profil" + +msgid "Certificate Profiles" +msgstr "Certifikačné profily" + +msgid "Certificate Revoked" +msgstr "Certifikát revokovaný" + +msgid "Certificate Type" +msgstr "Typ certifikátu" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "Certifikát pre ${entity} ${primary_key}" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "Chyba formátu certifikátu: %(error)s" + +msgid "Certificate profiles cannot be renamed" +msgstr "Certifikačné profily nemôžu byť premenované" + +msgid "Certificate requested" +msgstr "Certifikačná požiadavka" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" +"Certifikát so sériovým číslom %(serial)s vydaný CA '%(ca)s' sa nenašiel" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "Certifikát(y) sú uložené v súbore '%(file)s'" + +msgid "Certificates" +msgstr "Certifikáty" + +msgid "Change password" +msgstr "Zmeniť heslo" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Zmenené heslo pre \"%(value)s\"" + +msgid "Check DNS" +msgstr "Skontrolovať DNS" + +msgid "City" +msgstr "Mesto" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "Klient nie je nakonfigurovaný. Spustite ipa-client-install." + +msgid "Collapse All" +msgstr "Zbaliť všetko" + +msgid "Command name" +msgstr "Názov príkazu" + +msgid "Command not implemented" +msgstr "Príkaz nie je implementovaný" + +msgid "Commands" +msgstr "Príkazy" + +msgid "Configuration" +msgstr "Konfigurácia" + +msgid "Configured size limit exceeded" +msgstr "Nakonfigurovaný veľkostný limit bol dosiahnutý" + +msgid "Configured time limit exceeded" +msgstr "Nakonfigurovaný časový limit bol dosiahnutý" + +msgid "Confirmation" +msgstr "Potvrdenie" + +msgid "Contact Settings" +msgstr "Nastavenia kontaktných údajov" + +msgid "Continue" +msgstr "Pokračovať" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "Nie je možné interaktívne získať %(name)s" + +msgid "Create a new HBAC rule." +msgstr "Vytvoriť nové HBAC pravidlo" + +msgid "Create a new group." +msgstr "Vytvoriť novú skupinu." + +msgid "Create dns record" +msgstr "Vytvoriť DNS záznam" + +msgid "Create new DNS forward zone." +msgstr "Vytvoriť novú DNS forward zónu" + +msgid "Create reverse" +msgstr "Vytvoriť reverzný" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "Vytvorené ACI \"%(value)s\"" + +msgid "Creating record." +msgstr "Vytváranie záznamu." + +msgid "Current DNS record contents:\n" +msgstr "Aktuálny obsah DNS záznamu:\n" + +msgid "Current Password" +msgstr "Súčasné heslo" + +msgid "Current password is required" +msgstr "Súčasné heslo je povinné" + +msgid "Custom value" +msgstr "Vlastná hodnota" + msgid "DNS" msgstr "DNS" -msgid "Host-Based Access Control" -msgstr "" +msgid "DNS Forward Zone" +msgstr "DNS forward zóna" -msgid "Identity" -msgstr "Identita" +msgid "DNS Forward Zones" +msgstr "DNS forward zóny" -msgid "Network Services" -msgstr "Sieťové služby" +msgid "DNS Global Configuration" +msgstr "DNS globálne nastavenia" -msgid "Policy" -msgstr "Politika" +msgid "DNS Zone" +msgstr "DNS zóna" -msgid "Role-Based Access Control" -msgstr "" +msgid "DNS Zone Settings" +msgstr "Nastavenia DNS zóny" -msgid "Subordinate IDs" -msgstr "" +msgid "DNS Zones" +msgstr "DNS zóny" -msgid "Sudo" -msgstr "" +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "DNS kontrola zlyhala: Očakávané {%(expected)s} prijaté {%(got)s}" -msgid "Topology" -msgstr "" +msgid "DNS configuration options" +msgstr "DNS konfiguračné voľby" -msgid "True" -msgstr "" +msgid "DNS forward zone" +msgstr "DNS forward zóna" + +msgid "DNS forward zones" +msgstr "DNS forward zóny" msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." msgstr "" +"Sémantika DNS forwarderov je zmenená od IPA 4.0.\n" +"Pravdepodobne ste chceli použiť (dnsforwardzone-*).\n" +"Pre viac informácií prosím prečítajte dokumentáciu." -msgid "API Browser" +msgid "DNS label cannot be longer than 63 characters" +msgstr "DNS label nemôže byť dlhší ako 63 znakov" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "DNS label nemôže byť dlhší ako 63 znakov" + +msgid "DNS record was deleted because it contained no data." +msgstr "DNS záznam bol odstránený pretože neobsahoval žiadne údaje." + +msgid "DNS resource record type" +msgstr "Typ DNS záznamu" + +msgid "DNS server" +msgstr "DNS server" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." msgstr "" +"DNS server %(server)s nepodporuje DNSSEC: %(error)s.\n" +"Ak je DNSSEC validácia aktivovaná na IPA serveroch, prosím deaktivujte ju." -#, fuzzy -msgid "First" +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"DNS server %(server)s nepodporuje EDNS0 (RFC 6891): %(error)s.\n" +"Ak je DNSSEC validácia aktivovaná na IPA serveroch, prosím deaktivujte ju." + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "DNS server %(server)s: %(error)s." + +msgid "DNS zone" +msgstr "DNS zóna" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "DNS zóna %(zone)s nenájdená" + +msgid "DNS zones" +msgstr "DNS zóny" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" +"DNSSEC podpora je experimentálna.\n" +"%(additional_info)s" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" +"DNSSEC validácia zlyhala: %(error)s.\n" +"Prosím overte Vašu DNSSEC konfiguráciu alebo deaktivujte DNSSEC validáciu na " +"všetkých IPA serveroch." + +msgid "Default attributes" +msgstr "Predvolené atribúty" + +msgid "Default group for new users not found" +msgstr "Predvolená skupina pre nových používateľov nenájdená" + +msgid "Default user group" +msgstr "Predvolená používateľská skupina" + +msgid "Delete" +msgstr "Odstrániť" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "Odstrániť %(name)s '%(value)s'?" + +msgid "Delete DNS forward zone." +msgstr "Odstrániť DNS forward zónu." + +msgid "Delete DNS resource record." +msgstr "Odstrániť DNS záznam" + +msgid "Delete DNS zone (SOA record)." +msgstr "Odstrániť DNS zónu (SOA záznam)." + +msgid "Delete a CA ACL." +msgstr "Odstrániť CA ACL." + +msgid "Delete a Certificate Profile." +msgstr "Odstrániť certifikačný profil" + +msgid "Delete a user" +msgstr "Odstrániť používateľa" + +msgid "Delete all?" +msgstr "Odstrániť všetko?" + +msgid "Delete an HBAC rule." +msgstr "Odstrániť HBAC pravidlo." + +msgid "Delete an ID View." +msgstr "Odstrániť ID View." + +msgid "Delete an ID range." +msgstr "Zmazať ID rozsah." + +msgid "Delete an IPA location." +msgstr "Odstrániť IPA lokalitu." + +msgid "Delete an OTP token." +msgstr "Odstrániť OTP token" + +msgid "Delete an existing HBAC service." +msgstr "Odstrániť existujúcu HBAC službu." + +msgid "Delete group." +msgstr "Odstrániť skupinu." + +msgid "Delete mode" +msgstr "Mód odstránenia" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "Odstránené ACI \"%(value)s\"" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "Odstránené CA ACL \"%(value)s\"" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "Odstránená DNS forward zóna \"%(value)s\"" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "Odstránená DNS zóna \"%(value)s\"" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "Odstránené HBAC pravidlo \"%(value)s\"" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola odstránená" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "Odstránené ID View \"%(value)s\"" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Odstránená IPA lokalita \"%(value)s\"" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Odstránený OTP token \"%(value)s\"" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "Odstránené automember pravidlo \"%(value)s\"" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Odstránená skupina \"%(value)s\"" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "Odstránený profil \"%(value)s\"" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "Odstránený záznam \"%(value)s\"" + +msgid "Deny" +msgstr "Zakázať" + +msgid "Department Number" +msgstr "Číslo oddelenia" + +msgid "Deprecated options" +msgstr "Zastarané voľby" + +msgid "Description" +msgstr "Popis" + +msgid "Detect" +msgstr "Detekovať" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "Slovník JSON zakódovaných IPA príkazov" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "Slovník JSON zakódovaných IPA metód" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "Slovník JSON zakódovaných IPA objektov" + +msgid "Direct" +msgstr "Priame" + +msgid "Direct Membership" +msgstr "Priame členstvo" + +msgid "Disable" +msgstr "Deaktivovať" + +msgid "Disable DNS Forward Zone." +msgstr "Deaktivovať DNS forward zónu." + +msgid "Disable DNS Zone." +msgstr "Deaktivovať DNS zónu." + +msgid "Disable a CA ACL." +msgstr "Deaktivovať CA ACL." + +msgid "Disable a user account." +msgstr "Deaktivovať používateľský účet." + +msgid "Disable an HBAC rule." +msgstr "Deaktivovať HBAC pravidlo." + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "Deaktivovať Kerberos kľúč a SSL certifikát služby." + +msgid "Disable token" +msgstr "Deaktiovať token" + +msgid "Disabled" +msgstr "Deaktivované" + +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "Deaktivované CA ACL \"%(value)s\"" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "Deaktivovaná DNS forward zóna \"%(value)s\"" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "Deaktivovaná DNS zóna \"%(value)s\"" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "Deaktivované HBAC pravidlo \"%(value)s\"" + +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "Deaktivované sudo pravidlá \"%s\"" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "Deaktivovaná služba \"%(value)s\"" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "Deaktivovaný používateľský účet \"%(value)s\"" + +msgid "Display information about a DNS forward zone." +msgstr "Zobraziť informácie o DNS forward zóne" + +msgid "Display information about an IPA location." +msgstr "Zobraziť informácie o IPA lokalite." + +msgid "Display name" +msgstr "Zobrazované meno" + +msgid "Dogtag Authority ID" +msgstr "ID Dogtag autority" + +msgid "Domain" +msgstr "Doména" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "Doména '%(domain)s' nie je koreňovou doménou pre les '%(forest)s'" + +msgid "Domain NetBIOS name" +msgstr "Doménové NetBIOS meno" + +msgid "Domain name" +msgstr "Doménové meno" + +msgid "Duplicate keys skipped:" +msgstr "Duplikované kľúče preskočené:" + +msgid "Dynamic update" +msgstr "Dynamické aktualizácie" + +msgid "Edit" +msgstr "Upraviť" + +msgid "Email address" +msgstr "E-mailová adresa" + +msgid "Employee Information" +msgstr "Informácie o zamestnancovi" + +msgid "Employee Number" +msgstr "Zamestnanecké číslo" + +msgid "Employee Type" +msgstr "Typ zamestnanca" + +msgid "Enable an HBAC rule." +msgstr "Aktivovať HBAC pravidlo." + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo aktivované" + +#, python-format +msgid "Entry %s does not exist" +msgstr "Položka %s neexistuje" + +#, python-format +msgid "Entry %s not found" +msgstr "Položka %s nenájdená" + +msgid "Excluded attributes" +msgstr "Vylúčené atribúty" + +msgid "Expand All" +msgstr "Rozbaliť všetko" + +msgid "Expression" +msgstr "Výraz" + +msgid "Failed to add" +msgstr "Zlyhalo pridanie" + +msgid "Fax Number" +msgstr "Faxové číslo" + +#, python-format +msgid "File %(file)s not found" +msgstr "Súbor %(file)s nenájdený" + +msgid "Filter" +msgstr "Filter" + +msgid "Find" +msgstr "Hľadať" + +msgid "First Code" +msgstr "Prvý kód" + +msgid "First OTP" msgstr "Prvé OTP" -#, fuzzy -msgid "Last" -msgstr "Priezvisko" +msgid "First name" +msgstr "Meno" -msgid "Next" -msgstr "Ďalšie" +msgid "Force" +msgstr "Vynútiť" -msgid "Page" -msgstr "Strana" - -msgid "Prev" -msgstr "Predcházajúce" - -msgid "Undo" -msgstr "Vrátiť späť" - -msgid "Undo this change." -msgstr "Vrátiť späť túto zmenu." - -msgid "Undo All" -msgstr "Vrátiť späť všetko" - -msgid "Undo all changes in this field." -msgstr "" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -#, fuzzy -msgid "Must be a decimal number" -msgstr "musí byť desiatkové číslo" +msgid "Force Update" +msgstr "Vynútiť aktualizáciu" msgid "Format error" msgstr "Chyba formátu" -#, fuzzy -msgid "Must be an integer" -msgstr "musí byť integer" +msgid "Forwarders" +msgstr "Forwardery" + +#, python-format +msgid "Found '%(value)s'" +msgstr "Nájdené '%(value)s'" + +msgid "Full name" +msgstr "Celé meno" + +msgid "GECOS" +msgstr "GECOS" + +msgid "GID" +msgstr "GID" + +msgid "Get Certificate" +msgstr "Získať certifikát" + +msgid "Global DNS configuration is empty" +msgstr "Globálna DNS konfigurácia je prázdna," + +msgid "Global forwarders" +msgstr "Globálne forwardery" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Globálne forwardery. Vlastný port môže byť nastavený použítím štandardného " +"formátu \"IP_ADRESA port PORT\" pre každý forwarder " + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" +"Globálna forward politika. Nastavením na \"none\" sa deaktivuje akýkoľvek " +"nastavený globálny forwarder." + +msgid "Group ID Number" +msgstr "ID skupiny" + +msgid "Group Options" +msgstr "Voľby skupiny" + +msgid "Group Settings" +msgstr "Nastavenia skupiny" + +msgid "Group Type" +msgstr "Typ skupiny" + +msgid "Group description" +msgstr "Popis skupiny" + +msgid "Group name" +msgstr "Názov skupiny" + +msgid "Groups" +msgstr "Skupiny" + +msgid "HBAC Rules" +msgstr "HBAC pravidlá" + +msgid "HBAC Service" +msgstr "HBAC služba" + +msgid "HBAC Services" +msgstr "HBAC služby" + +msgid "HBAC Test" +msgstr "HBAC test" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "HBAC pravidlo %(rule)s nenájdené" + +msgid "HBAC rules" +msgstr "HBAC pravidlá" + +msgid "HBAC service" +msgstr "HBAC služba" + +msgid "HBAC service description" +msgstr "HBAC popis služby" + +msgid "HBAC services" +msgstr "HBAC služby" + +msgid "HTTP Error" +msgstr "Chyba HTTP" + +msgid "Hide" +msgstr "Skryť" + +msgid "Hide details" +msgstr "Skryť detaily" + +msgid "Home directory" +msgstr "Domovský priečinok" + +msgid "ID Range" +msgstr "ID rozsah" + +msgid "ID Ranges" +msgstr "ID rozsahy" + +msgid "ID View Name" +msgstr "Názov ID View" + +msgid "ID Views" +msgstr "ID Views" + +msgid "IP Address" +msgstr "IP adresa" + +msgid "IPA CA cannot be deleted" +msgstr "IPA CA nemôže byť odstránené" + +msgid "IPA DNS records" +msgstr "IPA DNS záznamy" + +msgid "IPA DNS version" +msgstr "Verzia IPA DNS" + +msgid "IPA Error" +msgstr "IPA chyba" + +msgid "IPA Location" +msgstr "IPA lokalita" + +msgid "IPA Location description" +msgstr "Popis IPA lokality" + +msgid "IPA Locations" +msgstr "IPA lokality" + +msgid "IPA Server" +msgstr "IPA Server" + +msgid "IPA location name" +msgstr "Názov IPA lokality" + +msgid "IPA object" +msgstr "IPA objekt" + +msgid "IPA role name" +msgstr "Názov IPA role" + +msgid "IPA server role name" +msgstr "Názov role servera" + +msgid "IPA trust" +msgstr "IPA trust" + +msgid "IPA unique ID" +msgstr "IPA unikátne ID" + +msgid "Identity" +msgstr "Identita" + +msgid "Identity Settings" +msgstr "Nastavenia identity" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "Ignorované %(src)s do %(dst)s" + +msgid "Ignored keys:" +msgstr "Ignorované kľúče:" + +msgid "Import a Certificate Profile." +msgstr "Importovať certifikačný profil" + +msgid "Imported keys:" +msgstr "Importované kľúče:" + +msgid "Include all disabled IPA rules into test" +msgstr "Zahrnúť všetky deaktivované IPA pravidlá do testu" + +msgid "Included attributes" +msgstr "Zahrnuté atribúty" + +msgid "Indirect" +msgstr "Nepriame" + +msgid "Indirect Membership" +msgstr "Nepriame členstvo" + +msgid "Inherited from server configuration" +msgstr "Zdedené z konfigurácie servera" + +msgid "Initials" +msgstr "Iniciály" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Nedostatočný prístup: %(info)s" + +msgid "Internal Error" +msgstr "Vnútorná chyba" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Nevalídna JSON-RPC požiadavka: %(error)s" + +msgid "Invalid LDAP URI." +msgstr "Neplatná LDAP URI." + +msgid "Invalid credentials" +msgstr "Nesprávne prihlasovacie údaje" + +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "Nesprávny alebo nepodporovaný typ. Povolené hodnoty sú: %s" + +msgid "Is zone active?" +msgstr "Je zóna aktívna?" + +msgid "Issue" +msgstr "Vydať" + +msgid "Job Title" +msgstr "Pracovná pozícia" + +msgid "Kerberos Key" +msgstr "Kerberos kľúč" + +msgid "Kerberos Key Not Present" +msgstr "Kerberos kľúč nie je prítomný" + +msgid "Keytab" +msgstr "Keytab" + +msgid "LDAP URI" +msgstr "LDAP URI" + +msgid "LDAP schema" +msgstr "LDAP schéma" + +msgid "Last name" +msgstr "Priezvisko" + +msgid "Leading and trailing spaces are not allowed" +msgstr "Počiatočné a koncové medzery nie sú povolené" + +msgid "Length of TOTP token code validity" +msgstr "Dĺžka platnosti TOTP token kódu" + +msgid "List of deletions that failed" +msgstr "Zoznam odstránení, ktoré zlyhaly" + +msgid "List of servers which advertise the given location" +msgstr "Zoznam serverov oznamujúcich danú lokalitu" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "Načítať CA certifikát LDAP servera zo súboru" + +msgid "Local domain" +msgstr "Lokálna doména" + +msgid "Locality" +msgstr "Lokalita" + +msgid "Location name" +msgstr "Názov lokality" + +msgid "Location of the ACI" +msgstr "Umiestnenie ACI" + +msgid "MAC address" +msgstr "MAC adresa" + +msgid "MS-PAC" +msgstr "MS-PAC" + +msgid "Mailing Address" +msgstr "Poštová adresa" + +msgid "Malformed DN" +msgstr "Poškodené DN" + +msgid "Manager" +msgstr "Manažér" + +msgid "Mark the token as disabled (default: false)" +msgstr "Označiť token ako deaktivovaný (predvolené: false)" + +msgid "Maximum serial number" +msgstr "Maximálne sériové číslo" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "Maximálna hodnota je ${value}" + +msgid "Member groups" +msgstr "Členské skupiny" + +msgid "Member of" +msgstr "Členom" + +msgid "Member of a group" +msgstr "Členom skupiny" + +msgid "Member of groups" +msgstr "Člen skupín" + +msgid "Minimum serial number" +msgstr "Minimálne sériové číslo" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "Minimálna hodnota je ${value}" + +msgid "Misc. Information" +msgstr "Rôzne informácie" + +msgid "Mobile Telephone Number" +msgstr "Mobilné číslo" + +msgid "Modified" +msgstr "Modifikované" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "Upravené ACI \"%(value)s\"" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "HBAC pravidlo \"%(value)s\" bolo upravené" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "HBAC služba \"%(value)s\" bola upravená." + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "Upravená IPA lokalita \"%(value)s\"" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "Upravený OTP token \"%(value)s\"" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Upravená skupina \"%(value)s\"" + +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "Upraviť %(name)s '%(value)s'?" + +msgid "Modify CA configuration." +msgstr "Upraviť CA konfiguráciu." + +msgid "Modify DNS forward zone." +msgstr "Upraviť DNS forward zónu" + +msgid "Modify OTP configuration options." +msgstr "Upraviť OTP konfiguračné voľby." + +msgid "Modify a DNS resource record." +msgstr "Upraviť DNS záznam" + +msgid "Modify a OTP token." +msgstr "Upraviť OTP token" + +msgid "Modify a group." +msgstr "Upraviť skupinu." + +msgid "Modify a vault." +msgstr "Upraviť vault." + +msgid "Modify an HBAC rule." +msgstr "Upraviť HBAC pravidlo." + +msgid "Modify an HBAC service." +msgstr "Upraviť HBAC službu." + +msgid "Modify configuration options." +msgstr "Upraviť konfiguračné voľby." + +msgid "Modify information about an IPA location." +msgstr "Upraviť informácie o IPA lokalite." + +msgid "NIS domain name" +msgstr "NIS doménové meno" + +msgid "Name" +msgstr "Názov" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "Nameserver '%(host)s' nemá zodpovedajúci A/AAAA záznam" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" +"Nebola zadaná ani voľba --del-all a ani voľby pre zmazanie špecifického " +"záznamu.\n" +"Príkaz help môže byť použitý pre zobrazenie podporovaných typov záznamov." + +msgid "NetBIOS name" +msgstr "NetBIOS meno" + +msgid "Netgroup Settings" +msgstr "Netgroup nastavenia" + +msgid "Network Services" +msgstr "Sieťové služby" + +msgid "New ACI name" +msgstr "Nový ACI názov" + +msgid "New Certificate" +msgstr "Nový certifikát" + +msgid "New Password" +msgstr "Nové heslo" + +msgid "New password is required" +msgstr "Nové heslo je povinné" + +msgid "Next" +msgstr "Ďalšie" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "Nenašli sa žiadne A, AAAA, SSHFP, alebo PTR záznamy." + +msgid "No Valid Certificate" +msgstr "Žiadny platný certifikát" + +msgid "No entries." +msgstr "Žiadne položky." + +msgid "No free YubiKey slot!" +msgstr "Žiadny voľný YubiKey slot!" + +msgid "No matching entries found" +msgstr "Nenašli sa žiadne zhodné položky" + +msgid "No option to delete specific record provided." +msgstr "Nebola poskytnutá žiadna voľba pre zmazanie špecifického záznamu" + +msgid "No private group" +msgstr "Bez privátnej skupiny" + +msgid "No response" +msgstr "Bez odpovede" msgid "Not a valid IP address" msgstr "Neplatná IP adresa" @@ -23135,2205 +1599,1053 @@ msgstr "Neplatná IPv4 adresa" msgid "Not a valid IPv6 address" msgstr "Neplatná IPv6 adresa" -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "Maximálna hodnota je ${value}" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "Minimálna hodnota je ${value}" - msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" msgstr "Neplatná sieťová adresa (príklady: 2001:db8::/64, 192.0.2.0/24)" -#, fuzzy -msgid "Parse error" -msgstr "Chyba formátu" +msgid "Note" +msgstr "Poznámka" -#, fuzzy -msgid "Must be a positive number" -msgstr "musí byť desiatkové číslo" +msgid "Number of entries returned" +msgstr "Počet vrátených položiek" -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "'${port}' nie je valídny port" +msgid "OK" +msgstr "OK" -msgid "Required field" -msgstr "Povinné pole" +msgid "OTP" +msgstr "OTP" -msgid "Unsupported value" -msgstr "Nepodporovaná hodnota" +msgid "OTP Configuration" +msgstr "OTP konfigurácia" -msgid "kerberos ticket policy settings" -msgstr "nastavenia kerberos ticket policy" +msgid "OTP Token" +msgstr "OTP token" -msgid "OTP max life" -msgstr "" +msgid "OTP Token Settings" +msgstr "Nastavenia pre OTP token" -msgid "OTP token maximum ticket life (seconds)" -msgstr "" +msgid "OTP Tokens" +msgstr "OTP tokeny" -msgid "OTP max renew" -msgstr "" +msgid "OTP configuration options" +msgstr "OTP konfiguračné voľby" -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" +msgid "OTP token" +msgstr "OTP token" -msgid "RADIUS max life" -msgstr "" +msgid "OTP tokens" +msgstr "OTP tokeny" -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" +msgid "One Time Password" +msgstr "Jednorázové heslo (OTP)" -#, fuzzy -msgid "RADIUS max renew" -msgstr "RADIUS proxy používateľské meno" +msgid "Only one value is allowed" +msgstr "Len jedna hodnota je povolená" -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" +msgid "Operating system" +msgstr "Operačný systém" -msgid "PKINIT max life" -msgstr "" +msgid "Option added" +msgstr "Voľba pridaná" -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" +msgid "Options" +msgstr "Voľby" -msgid "PKINIT max renew" -msgstr "" +msgid "Order" +msgstr "Poradie" -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" +msgid "Org. Unit" +msgstr "Org. jednotka" -msgid "Hardened max life" -msgstr "" +msgid "Organization" +msgstr "Organizácia" -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" +msgid "Organizational Unit" +msgstr "Organizačná jednotka" -msgid "Hardened max renew" -msgstr "" +msgid "Other Record Types" +msgstr "Ostatné typy záznamov" -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" +msgid "Override inherited settings" +msgstr "Potlačiť zdedené nastavenia" -msgid "IdP max life" -msgstr "" +msgid "Overwrite GID" +msgstr "Prepísať GID" -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "" +msgid "Owner" +msgstr "Vlastník" -#, fuzzy -msgid "IdP max renew" -msgstr "RADIUS proxy používateľské meno" +msgid "POSIX" +msgstr "POSIX" -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "" +msgid "Page" +msgstr "Strana" -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" +msgid "Pager Number" +msgstr "Pager číslo" -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "Poškodené DN" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "%(user)s nie je POSIX užívateľ" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "Neplatná LDAP URI." - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "Predvolená skupina pre nových používateľov nenájdená" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -#, fuzzy -msgid "Modify Class of Service entry" -msgstr "Upraviť HBAC službu." - -msgid "Display Class of Service entry" -msgstr "" - -#, fuzzy -msgid "Search for Class of Service entry" -msgstr "Vyhľadať HBAC služby." - -#, fuzzy -msgid "password policy" -msgstr "Politky hesiel" - -msgid "password policies" -msgstr "Politky hesiel" +msgid "Password" +msgstr "Heslo" msgid "Password Policies" msgstr "Politiky hesiel" -msgid "Max repeat" -msgstr "" +msgid "Password Policy" +msgstr "Politika hesiel" -msgid "Maximum number of same consecutive characters" -msgstr "" +msgid "Password can be specified only for symmetric vault" +msgstr "Heslo môže byť špecifikované len pre symetrický vault" -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -msgid "User check" -msgstr "Používateľské meno" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "Grace login limit" -msgstr "" - -msgid "Number of LDAP authentications allowed after expiration" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -#, fuzzy -msgid "SELinux User Map rule" -msgstr "SELinux používateľ" - -#, fuzzy -msgid "SELinux User Map rules" -msgstr "SELinux používateľ" - -#, fuzzy -msgid "SELinux User Maps" -msgstr "SELinux používateľ" - -#, fuzzy -msgid "SELinux User Map" -msgstr "SELinux používateľ" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "HBAC pravidlo %(rule)s nenájdené" - -#, fuzzy, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -#, fuzzy, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, fuzzy, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "Autentifikácia" - -#, fuzzy -msgid "Malformed principal" -msgstr "Poškodené DN" - -msgid "{} is required by the IPA master" -msgstr "" - -#, fuzzy -msgid "service" -msgstr "Služba" - -#, fuzzy -msgid "services" -msgstr "Služby" - -#, fuzzy -msgid "Service principal alias" -msgstr "Voľby služieb" - -msgid "Base-64 encoded service certificate" -msgstr "Base-64 zakódovaný certifikát služby" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -#, fuzzy -msgid "Add a new IPA service." -msgstr "Pridať novú HBAC službu." - -#, fuzzy, python-format -msgid "Added service \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola pridaná" - -msgid "force principal name even if host not in DNS" -msgstr "" - -#, fuzzy -msgid "Skip host check" -msgstr "Preskočiť DNS kontrolu" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -#, fuzzy -msgid "Add a new SMB service." -msgstr "Pridať novú HBAC službu." - -#, fuzzy -msgid "SMB service NetBIOS name" -msgstr "NetBIOS meno" - -#, fuzzy, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola odstránená" - -#, fuzzy, python-format -msgid "Modified service \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -#, fuzzy, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "Deaktivovaná služba \"%(value)s\"" - -#, fuzzy, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -#, fuzzy -msgid "Add new principal alias to a service" -msgstr "Pridať nové certifikáty k službe" - -#, fuzzy, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -msgid "Remove principal alias from a service" -msgstr "Odstrániť certifikáty zo služby" - -#, fuzzy, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -#, fuzzy -msgid "Stage Users" -msgstr "Predpripravení používatelia" - -#, fuzzy -msgid "Stage User" -msgstr "Predpripravení používatelia" - -#, fuzzy -msgid "stage user" -msgstr "Predpripravení používatelia" - -#, fuzzy -msgid "stage users" -msgstr "Predpripravení používatelia" - -#, fuzzy, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -msgid "givenname is required" -msgstr "'%(name)s' je požadované" - -#, fuzzy -msgid "sn is required" -msgstr "je povinné" - -#, fuzzy, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Odstránená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -msgid "Entry RDN is not 'uid'" -msgstr "Položka %s nenájdená" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, fuzzy, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "kľúč %(key)s už existuje" - -#, fuzzy, python-format -msgid "Stage user %s activated" -msgstr "Predpripravení používatelia" - -#, fuzzy -msgid "Add one or more certificates to the stageuser entry" -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -msgid "Remove one or more certificates to the stageuser entry" -msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" - -#, fuzzy, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -#, fuzzy -msgid "Add new principal alias to the stageuser entry" -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -msgid "Remove principal alias from the stageuser entry" -msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" - -#, fuzzy, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -#, fuzzy -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" - -#, fuzzy -msgid "ID View" -msgstr "ID Views" - -#, fuzzy -msgid "system ID View" -msgstr "ID Views" - -msgid "ID Views" -msgstr "ID Views" - -#, fuzzy -msgid "User object overrides" -msgstr "Kategórie používateľov" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "Pridané ID View \"%(value)s\"" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "Odstránené ID View \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "Pridané ID View \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "Nenašlo sa" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "hodnota" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "IPA objekt" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -#, fuzzy -msgid "Add a new ID override." -msgstr "Pridať nové ID View" - -#, fuzzy, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "Pridané ID View \"%(value)s\"" - -#, fuzzy -msgid "Delete an ID override." -msgstr "Odstrániť ID View." - -#, fuzzy, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "Odstránené ID View \"%(value)s\"" - -#, fuzzy -msgid "Modify an ID override." -msgstr "Upraviť HBAC službu." - -#, fuzzy, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -msgid "ID override" -msgstr "" - -#, fuzzy -msgid "ID overrides cannot be renamed" -msgstr "Certifikačné profily nemôžu byť premenované" - -#, fuzzy -msgid "Search for an ID override." -msgstr "Vyhľadať DNS servery" - -#, fuzzy, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy -msgid "Display information about an ID override." -msgstr "Zobraziť informácie o DNS forward zóne" - -#, fuzzy -msgid "User ID override" -msgstr "ID používateľa" - -#, fuzzy -msgid "User ID overrides" -msgstr "ID používateľa" - -#, fuzzy -msgid "Group ID override" -msgstr "ID skupiny" - -#, fuzzy -msgid "Group ID overrides" -msgstr "ID skupiny" - -#, fuzzy -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" - -#, fuzzy -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" - -#, fuzzy, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" - -#, fuzzy, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "Pridané ID View \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Odstránené ID View \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "HBAC služba \"%(value)s\" bola upravená." - -#, fuzzy, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "Pridané ID View \"%(value)s\"" - -#, fuzzy, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Odstránené ID View \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "Certifikačné autority" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -msgid "Certificate Authority" -msgstr "Certifikačná autorita" - -msgid "Certificate Authorities" -msgstr "Certifikačné autority" - -msgid "Name for referencing the CA" -msgstr "" - -msgid "Description of the purpose of the CA" -msgstr "" - -msgid "Authority ID" -msgstr "ID autority" - -msgid "Dogtag Authority ID" -msgstr "ID Dogtag autority" - -msgid "Subject DN" -msgstr "" - -msgid "Subject Distinguished Name" -msgstr "" - -#, fuzzy -msgid "Issuer DN" -msgstr "Vydať" - -msgid "Issuer Distinguished Name" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "Base-64 zakódovaný certifikát." - -#, fuzzy -msgid "Certificate chain" -msgstr "Certifikát" - -#, fuzzy -msgid "X.509 certificate chain" -msgstr "CA certifikát" - -#, fuzzy -msgid "RSN Version" -msgstr "Povolenie" - -#, fuzzy -#| msgid "Serial Number (hex)" -msgid "Random Serial Number Version" -msgstr "Sériové číslo (hexadecimálne)" - -#, fuzzy -msgid "Search for CAs." -msgstr "Vyhľadávať skupiny." - -#, fuzzy, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "Display the properties of a CA." -msgstr "" - -#, fuzzy -msgid "Create a CA." -msgstr "Vytvoriť novú skupinu." - -#, fuzzy, python-format -msgid "Created CA \"%(value)s\"" -msgstr "Vytvorené ACI \"%(value)s\"" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "Odstránené ACI \"%(value)s\"" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "IPA CA nemôže byť odstránené" - -msgid "Must be disabled first" -msgstr "" - -msgid "Modify CA configuration." -msgstr "Upraviť CA konfiguráciu." - -#, fuzzy, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "Upravené ACI \"%(value)s\"" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -#, fuzzy -msgid "Disable a CA." -msgstr "Deaktivovať CA ACL." - -#, fuzzy, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "Deaktivované CA ACL \"%(value)s\"" - -#, fuzzy -msgid "IPA CA cannot be disabled" -msgstr "IPA CA nemôže byť odstránené" - -#, fuzzy -msgid "Enable a CA." -msgstr "Deaktivovať CA ACL." - -#, fuzzy, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo aktivované" - -#, fuzzy -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "Certifikačné autority" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "Získať existujúci certifikát." - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -#, fuzzy -msgid " * 0 - unspecified\n" -msgstr "Nešpecifikované" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -#, fuzzy -msgid " * 6 - certificateHold\n" -msgstr "Držanie certifikátu" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -#, fuzzy -msgid "Subject email address" -msgstr "E-mailová adresa" - -msgid "Subject DNS name" -msgstr "" - -#, fuzzy -msgid "Subject X.400 address" -msgstr "Ulica" - -#, fuzzy -msgid "Subject directory name" -msgstr "Domovský priečinok" - -msgid "Subject EDI Party name" -msgstr "" - -msgid "Subject URI" -msgstr "" - -#, fuzzy -msgid "Subject IP Address" -msgstr "IP adresa" - -msgid "Subject OID" -msgstr "" - -msgid "Subject UPN" -msgstr "" - -msgid "Subject Kerberos principal name" -msgstr "" - -msgid "Subject Other Name" -msgstr "" - -msgid "Serial number (hex)" -msgstr "Sériové číslo (hexadecimálne)" - -#, fuzzy -msgid "Request status" -msgstr "Stav pravidla" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -#, fuzzy -msgid "'add' option" -msgstr "Zastarané voľby" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "" - -#, fuzzy -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "Dôvod revokácie certifikátu (0-10)" - -#, fuzzy, python-format -msgid "Owner %s" -msgstr "Vlastník" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" -"Certifikát so sériovým číslom %(serial)s vydaný CA '%(ca)s' sa nenašiel" - -#, fuzzy -msgid "7 is not a valid revocation reason" -msgstr "\"%s\" nie je platný typ povolenia" - -#, fuzzy -msgid "Status of the certificate" -msgstr "Certifikát služby" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -#, fuzzy, python-format -msgid "Search for certificates with these owner %s." -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy, python-format -msgid "Search for certificates without these owner %s." -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" - -#, fuzzy -msgid "" -"\n" -"Sudo Rules\n" -msgstr "Sudo pravidlá" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -#, fuzzy -msgid "this option has been deprecated." -msgstr "táto voľba je zastaraná" - -msgid "sudo rules" -msgstr "sudo pravidlá" - -msgid "Sudo Rules" -msgstr "Sudo pravidlá" - -#, fuzzy -msgid "Sudo Rule" -msgstr "Sudo pravidlá" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo pridané" - -#, fuzzy, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Odstránené HBAC pravidlo \"%(value)s\"" - -#, fuzzy, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "HBAC pravidlo \"%(value)s\" bolo upravené" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -#, fuzzy -msgid "users" -msgstr "Používatelia" - -#, fuzzy -msgid "command" -msgstr "Príkazy" - -#, fuzzy -msgid "commands" -msgstr "Príkazy" - -msgid "runAs user" -msgstr "" - -#, fuzzy -msgid "runAs users" -msgstr "Uschovaní používatelia" - -#, fuzzy -msgid "group runAs" -msgstr "skupiny" - -#, fuzzy -msgid "runAs groups" -msgstr "skupiny" - -#, fuzzy, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "%(count)d HBAC pravidlo nájdené" -msgstr[1] "%(count)d HBAC pravidiel nájdených" -msgstr[2] "%(count)d HBAC pravidiel nájdených" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -#, fuzzy, python-format -msgid "Added user \"%(value)s\"" -msgstr "Pridaná skupina \"%(value)s\"" - -#, fuzzy -msgid "Default group for new users is not POSIX" -msgstr "Predvolená skupina pre nových používateľov nenájdená" - -#, fuzzy, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Odstránený záznam \"%(value)s\"" - -#, fuzzy, python-format -msgid "Preserved user \"%(value)s\"" -msgstr "Odstránený záznam \"%(value)s\"" - -#, python-format -msgid "%s: user is already preserved" -msgstr "%s: používateľ je už uschovaný" - -#, fuzzy, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Upravená skupina \"%(value)s\"" - -#, fuzzy, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -#, fuzzy, python-format -msgid "user \"%s\" is already active" -msgstr "%s: používateľ je už uschovaný" - -#, fuzzy, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -#, fuzzy, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, fuzzy, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "Deaktivovaný používateľský účet \"%(value)s\"" - -#, fuzzy -msgid "Failed logins" -msgstr "Zlyhalo pridanie" - -#, fuzzy -msgid "Last successful authentication" -msgstr "Typy autentifikácie používateľa" - -#, fuzzy -msgid "Last failed authentication" -msgstr "Typy autentifikácie používateľa" - -msgid "Time now" -msgstr "" - -#, fuzzy -#| msgid "Password change complete" -msgid "Password grace count" +msgid "Password change complete" msgstr "Zmena hesla dokončená" -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" +msgid "Password expiration" +msgstr "Vypršanie hesla" -#, fuzzy, python-format -msgid "%(host)s failed: %(error)s" -msgstr "salt hodnota: %(err)s" +msgid "Password reset was not successful." +msgstr "Nastavenie hesla nebolo úspešné" + +msgid "Passwords do not match" +msgstr "Heslá sa nezhodujú" + +msgid "Passwords do not match!" +msgstr "Heslá sa nezhodujú!" + +msgid "Passwords must match" +msgstr "Heslá sa musia zhodovať" + +msgid "Permission" +msgstr "Povolenie" + +msgid "Permission settings" +msgstr "Nastavenia oprávnenia" + +msgid "Permissions" +msgstr "Povolenia" + +msgid "Please choose a type of DNS resource record to be added" +msgstr "Prosím vyberte typ DNS záznamu" + +msgid "Please specify forwarders." +msgstr "Prosím špecifikujte forwardery." + +msgid "Policy" +msgstr "Politika" + +msgid "Port" +msgstr "Port" + +msgid "Positional arguments" +msgstr "Pozičný argument" + +msgid "Preferred Language" +msgstr "Preferovaný jazyk" + +msgid "Preserved user" +msgstr "Uschovaný používateľ" + +msgid "Preserved users" +msgstr "Uschovaní používatelia" + +msgid "Prev" +msgstr "Predcházajúce" + +msgid "Priority" +msgstr "Priorita" + +msgid "Privilege Settings" +msgstr "Nastavenia privilégia" + +msgid "Profile ID" +msgstr "ID profilu" + +msgid "Profile configuration" +msgstr "Configurácia profilu" #, python-format -msgid "%(host)s failed" -msgstr "" +msgid "Profile configuration stored in file '%(file)s'" +msgstr "Konfigurácia profilu bola uložená do súboru '%(file)s'" -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "Účet deaktivovaný: %(disabled)s" +msgid "Profiles" +msgstr "Profily" -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" +msgid "Public key can be specified only for asymmetric vault" +msgstr "Verejný kľúč môže byť špecifikovný len pre asymetrický vault" + +msgid "Quick Links" +msgstr "Rýchle odkazy" + +msgid "RADIUS" +msgstr "RADIUS" + +msgid "RADIUS Proxy Server Settings" +msgstr "RADIUS Proxy serverové nastavenia" + +msgid "RADIUS proxy configuration" +msgstr "RADIUS proxy konfigurácia" + +msgid "RADIUS proxy username" +msgstr "RADIUS proxy používateľské meno" + +msgid "Range Settings" +msgstr "Nastavenie rozsahu" + +msgid "Realm Domains" +msgstr "Realm domény" + +msgid "Reason for Revocation" +msgstr "Dôvod pre revokáciu" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "Dôvod revokácie certifikátu (0-10)" + +msgid "Record Type" +msgstr "Typ záznamu" + +msgid "Record creation failed." +msgstr "Vytvorenie záznamu zlyhalo." + +msgid "Record name" +msgstr "Názov záznamu" + +msgid "Record not found." +msgstr "Záznam nenájdený" + +msgid "Record type" +msgstr "Typ záznamu" + +msgid "Records" +msgstr "Záznamy" + +msgid "Records for DNS Zone" +msgstr "Záznamy pre DNS zónu" + +msgid "Redirection to PTR record" +msgstr "Presmerovanie na PTR záznam" + +msgid "Refresh" +msgstr "Znovu načítať" + +msgid "Refresh the page." +msgstr "Znovu načítať stránku." + +msgid "Reload current settings from the server." +msgstr "Znovu načítať aktuálne nastavenia zo servera." + +msgid "Remove Permission" +msgstr "Odstrániť povolenie" + +msgid "Remove certificates from a service" +msgstr "Odstrániť certifikáty zo služby" + +msgid "Remove one or more certificates to the user entry" +msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "Odstrániť služby a skupiny služieb z HBAC pravidla." + +msgid "Remove users and groups from an HBAC rule." +msgstr "Odstrániť používateľov a skupiny z HBAC pravidla." #, python-format msgid "Removed certificates from user \"%(value)s\"" msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" -#, fuzzy -msgid "Add new principal alias to the user entry" -msgstr "Pridať jeden alebo viac certifikátov do používateľskej položky" +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "Odstraňovanie %(servers)s z replikačnej topológie, prosím čakajte..." -#, fuzzy, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "Certifikáty boli pridané k používateľovi \"%(value)s\"" +msgid "Rename" +msgstr "Premenovať" -#, fuzzy -msgid "Remove principal alias from the user entry" -msgstr "Odtrániť jeden alebo viac certifikátov z používateľskej položky" +msgid "Replication configuration" +msgstr "Konfigurácia repliky" -#, fuzzy, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "Certifikáty boli odstránené používateľovi \"%(value)s\"" +msgid "Required" +msgstr "Povinné" + +msgid "Required field" +msgstr "Povinné pole" + +msgid "Reset Password" +msgstr "Obnoviť heslo" + +msgid "Reset your password." +msgstr "Obnoviť Vaše heslo." + +msgid "Restore" +msgstr "Obnoviť" + +msgid "Results are truncated, try a more specific search" +msgstr "Výsledky sú skrátené, vyskúšajte viac špecifické vyhľadávanie" + +msgid "Retrieve an existing certificate." +msgstr "Získať existujúci certifikát." #, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" +msgid "Retrieving CA status failed: %s" +msgstr "Získanie CA stavu zlyhalo: %s" + +msgid "Revert" +msgstr "Vrátiť" + +msgid "Revoke a certificate." +msgstr "Revokácia certifikátu." + +msgid "Role Settings" +msgstr "Nastavenia role" + +msgid "Role name" +msgstr "Názov role" + +msgid "Roles" +msgstr "Role" + +msgid "Rule name" +msgstr "Názov pravidla" + +msgid "Rule status" +msgstr "Stav pravidla" + +msgid "Rules" +msgstr "Pravidlá" + +msgid "Run Test" +msgstr "Spustiť test" + +msgid "SELinux Options" +msgstr "SELinux voľby" + +msgid "SELinux User" +msgstr "SELinux používateľ" + +msgid "SID" +msgstr "SID" + +msgid "SOA record serial number" +msgstr "Sériové číslo SOA záznamu" + +msgid "SSH public key" +msgstr "Verejný SSH kľúč" + +msgid "SSH public key fingerprint" +msgstr "Odtlačok verejného SSH kľúča (fingerprint)" + +msgid "SSH public key:" +msgstr "Verejný SSH kľuč" + +msgid "SSH public keys" +msgstr "Verejné SSH kľúče" #, python-format -msgid "must have %(role)s role enabled" -msgstr "" +msgid "Same as --%s" +msgstr "Rovnaké ako --%s" -msgid "must be enabled only on a single master" -msgstr "" +msgid "Save" +msgstr "Uložiť" -#, fuzzy -msgid "Request must be a dict" -msgstr "musí byť integer" +msgid "Search" +msgstr "Vyhľadávanie" -msgid "Request is missing \"method\"" -msgstr "" +msgid "Search Options" +msgstr "Voľby vyhľadávania" -msgid "Request is missing \"params\"" -msgstr "" +msgid "Search for DNS forward zones." +msgstr "Vyhľadávať DNS forward zóny" -#, fuzzy -msgid "params must be a list" -msgstr "musí byť integer" +msgid "Search for DNS servers." +msgstr "Vyhľadať DNS servery" -msgid "params must contain [args, options]" -msgstr "" +msgid "Search for HBAC rules." +msgstr "Vyhľadať HBAC pravidlá." -msgid "params[0] (aka args) must be a list" -msgstr "" +msgid "Search for HBAC services." +msgstr "Vyhľadať HBAC služby." -msgid "params[1] (aka options) must be a dict" -msgstr "" +msgid "Search for IPA locations." +msgstr "Vyhľadať IPA lokalitu." + +msgid "Search for OTP token." +msgstr "Vyhľadať OTP token" + +msgid "Search for Sudo Commands." +msgstr "Vyhľadať sudo príkazy." + +msgid "Search for existing certificates." +msgstr "Vyhľadávanie existujúcich certifikátov." + +msgid "Search for groups." +msgstr "Vyhľadávať skupiny." + +msgid "Search for permissions." +msgstr "Vyhľadať povolenia." + +msgid "Search scope" +msgstr "Rozsah vyhľadávania" + +msgid "Second Code" +msgstr "Druhý kód" + +msgid "Second OTP" +msgstr "Druhé OTP" + +msgid "Segment details" +msgstr "Detaily segmentu" + +msgid "Select All" +msgstr "Označiť všetko" #, python-format msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" msgstr "" +"Sémantika %(label)s bola zmenená. %(current_behavior)s\n" +"%(hint)s" + +msgid "Serial Number" +msgstr "Sériové číslo" + +msgid "Serial Number (hex)" +msgstr "Sériové číslo (hexadecimálne)" + +msgid "Serial number" +msgstr "Sériové číslo" + +msgid "Serial number (hex)" +msgstr "Sériové číslo (hexadecimálne)" #, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "Server %(srv)s nemôže kontaktovať servery: %(replicas)s" + +msgid "Server Role" +msgstr "Server rola" + +msgid "Server Roles" +msgstr "Serverové role" + +msgid "Server will check DNS forwarder(s)." +msgstr "Server skontroluje DNS forwarder(y)." + +msgid "Servers" +msgstr "Servery" + +msgid "Servers details:" +msgstr "Detaily serverov:" + +msgid "Servers in location" +msgstr "Servery v lokalite." + +msgid "Servers that belongs to the IPA location" +msgstr "Servery patriace do IPA lokality" + +msgid "Service" +msgstr "Služba" #, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "Služba '%(service)s' nenájdená v Kerberos databáze" -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" +msgid "Service Certificate" +msgstr "Certifikát služby" -msgid "CIFS server denied your credentials" -msgstr "" +msgid "Service Options" +msgstr "Voľby služieb" -msgid "communication with CIFS server was unsuccessful" -msgstr "" +msgid "Service Settings" +msgstr "Nastavenia služby" -msgid "AD domain controller" -msgstr "" +msgid "Service name" +msgstr "Názov služby" -#, fuzzy -msgid "unsupported functional level" -msgstr "Nepodporovaná hodnota" +msgid "Services" +msgstr "Služby" -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" +msgid "Set" +msgstr "Nastaviť" -msgid "Cannot find specified domain or server name" -msgstr "" +msgid "Set OTP" +msgstr "Nastaviť OTP" -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" +msgid "Set SSH key" +msgstr "Nastaviť SSH kľúč" -msgid "At least the domain or IP address should be specified" -msgstr "" +msgid "Set a user's password." +msgstr "Nastaviť používateľské heslo." + +msgid "Settings" +msgstr "Nastavenia" + +msgid "Show" +msgstr "Zobraziť" + +msgid "Show QR code" +msgstr "Zobraziť QR kód" + +msgid "Show Results" +msgstr "Zobraz výsledky" + +msgid "Show details" +msgstr "Zobraziť detaily" + +msgid "Show the current OTP configuration." +msgstr "Zobraziť aktuálnu OTP konfiguráciu." + +msgid "Show the current configuration." +msgstr "Zobraziť konfiguračné voľby" + +msgid "Show/Set key" +msgstr "Zobraziť/Nastaviť kľúč" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "Zobrazených ${start} až ${end} z ${total} položiek." + +msgid "Size" +msgstr "Veľkosť" + +msgid "Skip DNS check" +msgstr "Preskočiť DNS kontrolu" #, python-format -msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" +msgid "Skipped %(key)s" +msgstr "Preskočené %(key)s" + +#, python-format +msgid "Skipped %(map)s" +msgstr "Preskočené %(map)s" + +msgid "Some entries were not deleted" +msgstr "Niektoré položky neboli odstránené" + +msgid "Specified CAs" +msgstr "Špecifikované CA" + +msgid "Specified Groups" +msgstr "Špecifikované skupiny" + +msgid "Specified Profiles" +msgstr "Špecifikované profily" + +msgid "Specified Services and Groups" +msgstr "Špecifikované služby a skupiny" + +msgid "Stage users" +msgstr "Predpripravení používatelia" + +msgid "Standard Record Types" +msgstr "Štandardné typy záznamov" + +msgid "State/Province" +msgstr "Štát/Provincia" + +msgid "Status" +msgstr "Stav" + +msgid "Street address" +msgstr "Ulica" + +msgid "Structured" +msgstr "Štrukturovane" + +msgid "Subtree" +msgstr "Podstrom" + +msgid "Success" +msgstr "Úspech" + +msgid "Sudo Commands" +msgstr "Sudo príkazy" + +msgid "Sudo Rules" +msgstr "Sudo pravidlá" + +msgid "Sync OTP Token" +msgstr "Synchronizovať OTP Token" + +msgid "Synchronize an OTP token." +msgstr "Synchronizovať OTP token" + +msgid "Target DN" +msgstr "Cieľové DN" + +msgid "Target group" +msgstr "Cieľová skupina" + +msgid "Target reverse zone not found." +msgstr "Cieľová reverzná zóna nenájdená." + +msgid "Telephone Number" +msgstr "Telefónne číslo" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "ACI pre oprávnenie %(name)s sa nenašlo v %(dn)s " + +msgid "The IPA realm" +msgstr "IPA realm" + +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "Najbežnejšie typy záznamov pre tento typ zóny sú: %s\n" + +msgid "The username, password or token codes are not correct" +msgstr "Prihlasovacie meno, heslo alebo token sú nesprávne" + +msgid "This command requires root access" +msgstr "Tento príkaz vyžaduje root oprávnenia" + +msgid "This entry already exists" +msgstr "Táto položka už existuje" + +msgid "This entry cannot be enabled or disabled" +msgstr "Táto položka nemôže byť aktivovaná alebo deaktivovaná" + +msgid "This entry is already a member" +msgstr "Táto položka už je členom" + +msgid "This entry is already disabled" +msgstr "Táto položka bola už deaktivovaná" + +msgid "This entry is not a member" +msgstr "Táto položka nie je členom" + +msgid "This is already a posix group" +msgstr "Toto už je posix skupina" + +msgid "This may take some time, please wait ..." +msgstr "Toto môže trvať nejaký čas, prosím čakajte ..." + +msgid "This page has unsaved changes. Please save or revert." msgstr "" +"Táto stránka obsahuje neuložené zmeny. Prosím uložte alebo vráťte zmeny späť." -#, fuzzy -msgid "no trusted domain is configured" -msgstr "trust doménový užívateľ nenájdený" +msgid "Token ID" +msgstr "Token ID" -#, fuzzy -msgid "domain is not configured" -msgstr "trust doménový užívateľ nenájdený" +msgid "Token synchronization failed" +msgstr "Synchronizácia tokenu zlyhala" -msgid "SID is not valid" -msgstr "" +msgid "Token was synchronized" +msgstr "Token bol zosynchronizovaný" -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "" +msgid "Topic or Command" +msgstr "Téma alebo príkaz" -msgid "SID does not match any trusted domain" -msgstr "" +msgid "Topology is disconnected" +msgstr "Topológia je odpojená" -#, fuzzy -msgid "Trust setup" +msgid "Trust Settings" msgstr "Trust nastavenia" -#, fuzzy -msgid "Our domain is not configured" -msgstr "trust doménový užívateľ nenájdený" +msgid "Two factor authentication (password + OTP)" +msgstr "Dvojfaktorová autentifikácia (heslo + OTP)" -#, fuzzy -msgid "No trusted domain is not configured" -msgstr "trust doménový užívateľ nenájdený" +msgid "Type" +msgstr "Typ" -#, fuzzy -msgid "trusted domain object" -msgstr "trust doménový objekt nenájdený" +msgid "Type of the token" +msgstr "Typ tokenu" -#, fuzzy -msgid "domain is not trusted" -msgstr "trust doménový užívateľ nenájdený" +msgid "Types of supported user authentication" +msgstr "Podporované typy autentifikácie používateľa" -msgid "no trusted domain matched the specified flat name" +msgid "UID" +msgstr "UID" + +msgid "URI" +msgstr "URI" + +msgid "URL" +msgstr "URL" + +msgid "Undo" +msgstr "Vrátiť späť" + +msgid "Undo All" +msgstr "Vrátiť späť všetko" + +msgid "Undo this change." +msgstr "Vrátiť späť túto zmenu." + +msgid "Unique ID" +msgstr "Unikátne ID" + +msgid "Unknown Error" +msgstr "Neznáma chyba" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "Neznáma voľba: %(option)s" + +msgid "Unlock" +msgstr "Odomknúť" + +msgid "Unsaved Changes" +msgstr "Neuložené zmeny" + +msgid "Unselect All" +msgstr "Odznačiť všetko" + +msgid "Unspecified" +msgstr "Nešpecifikované" + +msgid "Unsupported value" +msgstr "Nepodporovaná hodnota" + +msgid "Update" +msgstr "Aktualizovať" + +msgid "Update DNS entries" +msgstr "Aktualizovať DNS položky." + +msgid "User" +msgstr "Používateľ" + +msgid "User Group" +msgstr "Používateľská skupina" + +msgid "User Groups" +msgstr "Používateľské skupiny" + +msgid "User ID" +msgstr "ID používateľa" + +msgid "User ID Number" +msgstr "ID používateľa" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "ID používateľa (systém priradí automaticky ak nie je zadané) " + +msgid "User Options" +msgstr "Voľby používateľov" + +msgid "User authentication types" +msgstr "Typy autentifikácie používateľa" + +msgid "User categories" +msgstr "Kategórie používateľov" + +msgid "User group" +msgstr "Používateľská skupina" + +msgid "User group ACI grants access to" +msgstr "ACI používateľskej skupiny udeluje prístup k" + +msgid "User login" +msgstr "Prihlasovacie meno" + +msgid "User name" +msgstr "Používateľské meno" + +msgid "User password" +msgstr "Používateľské heslo" + +msgid "Username" +msgstr "Používateľské meno" + +msgid "Users" +msgstr "Používatelia" + +msgid "Valid Certificate Present" +msgstr "Prítomný platný certifikát" + +msgid "Validation error" +msgstr "Chyba validácie" + +msgid "Validity" +msgstr "Platnosť" + +msgid "Validity end" +msgstr "Koniec platnosti" + +msgid "Validity start" +msgstr "Začiatok platnosti" + +msgid "Verify Password" +msgstr "Overiť heslo" + +msgid "View Certificate" +msgstr "Prezrieť certifikát" + +msgid "Warning" +msgstr "Varovanie" + +msgid "Weight" +msgstr "Váha" + +msgid "Weight for server services" +msgstr "Váha pre služby servera" + +msgid "Who" +msgstr "Kto" + +msgid "YubiKey slot" +msgstr "YubiKey slot" + +msgid "ZIP" +msgstr "PSČ" + +msgid "Zone forwarders" +msgstr "Zónové forwardery" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "Zóna nájdená: ${zone}" + +msgid "Zone name" +msgstr "Názov zóny" + +msgid "Zone name (FQDN)" +msgstr "Názov zóny (FQDN)" + +msgid "algorithm value: allowed interval 0-255" +msgstr "algoritmus: hodnota má povolený interval 0-255" + +msgid "an internal error has occurred" +msgstr "nastala interná chyba" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "nastala interná chyba na serveri '%(server)s'" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "môže byť najviac %(maxvalue)d" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "môže byť najviac %(maxvalue)s" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "nedá sa pripojiť k '%(uri)s': %(error)s" + +msgid "change collided with another change" +msgstr "zmena spôsobila kolíziu s inou zmenou" + +msgid "cn is immutable" +msgstr "cn je nemeniteľné" + +msgid "configuration options" +msgstr "konfiguračné voľby" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "kontajner (%(container)s) nenájdený" + +msgid "delete" +msgstr "odstrániť" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" msgstr "" +"doménové meno '%(domain)s' by malo byť normalizované na: %(normalized)s" + +msgid "domain name cannot be longer than 255 characters" +msgstr "doménové meno nemôže byť dlhšie ako 255 znakov" + +msgid "empty DNS label" +msgstr "prázdny DNS label" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "chyba na serveri '%(server)s': %(error)s" + +msgid "flags value: allowed interval 0-255" +msgstr "flagy: hodnota má povolený interval 0-255" + +msgid "group" +msgstr "skupina" + +msgid "groups" +msgstr "skupiny" + +msgid "incorrect type" +msgstr "Nesprávný typ" + +#, python-format +msgid "invalid DN (%s)" +msgstr "neplatné DN (%s)" + +msgid "invalid IP address format" +msgstr "neplatný formát IP adresy" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "neplatná verzia IP adresy (je %(value)d, musí byť %(required_value)d)!" + +msgid "invalid IP network format" +msgstr "neplatný formát IP siete" + +msgid "invalid Profile ID" +msgstr "nevalídne ID profilu" + +msgid "invalid SSH public key" +msgstr "neplatný verejný SSH kľúč" + +msgid "invalid address format" +msgstr "neplatný formát adresy" + +msgid "invalid domain name" +msgstr "neplatné doménové meno" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "neplatné doménové meno: %s" + +msgid "invalid domain-name: not fully qualified" +msgstr "neplatné doménové meno: nie je plne kvalifikované (FQDN)" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "neplatný formát e-mailovej adresy: %(email)s" + +msgid "invalid escape code in domain name" +msgstr "neplatný escape kód v doménovom mene" + +msgid "is required" +msgstr "je povinné" + +msgid "iterations value: allowed interval 0-65535" +msgstr "iterácie: hodnota má povolený interval 0-65535" + +msgid "kerberos ticket policy settings" +msgstr "nastavenia kerberos ticket policy" + +#, python-format +msgid "key %(key)s already exists" +msgstr "kľúč %(key)s už existuje" + +msgid "location" +msgstr "lokalita" + +msgid "locations" +msgstr "lokality" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "manažér %(manager)s nenájdený" + +#, python-format +msgid "map %(map)s already exists" +msgstr "mapovanie %(map)s už existuje" + +msgid "maximum serial number" +msgstr "maximálne sériové číslo" + +msgid "minimum serial number" +msgstr "minimálne sériové číslo" + +msgid "must be True or False" +msgstr "musí byť True alebo False" + +msgid "must be Unicode text" +msgstr "musí byť Unicode text" + +msgid "must be a decimal number" +msgstr "musí byť desiatkové číslo" + +msgid "must be an integer" +msgstr "musí byť integer" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "musí byť najmenej %(minvalue)d" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "musí byť najmenej %(minvalue)s" + +msgid "must be binary data" +msgstr "musí byť binárny údaj" + +msgid "no modifications to be performed" +msgstr "žiadne úpravy neboli vykonané" + +msgid "not found" +msgstr "Nenašlo sa" + +msgid "not fully qualified" +msgstr "nie je plne kvalifikované (FQDN)" + +#, python-format +msgid "objectclass %s not found" +msgstr "objectclass %s nenájdená" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" +"povolené sú len písmená, čísla, %(chars)s . DNS label nesmie začínať alebo " +"končiť s %(chars2)s" + +msgid "options are not allowed" +msgstr "voľby nie sú povolené" + +msgid "password policies" +msgstr "Politky hesiel" + +msgid "permission" +msgstr "povolenie" + +msgid "pkinit" +msgstr "pkinit" + +msgid "preserve" +msgstr "uschovať" + +#, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "dotaz '%(owner)s %(rtype)s' s EDNS0: %(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "dotaz '%(owner)s %(rtype)s': %(error)s" + +#, python-format +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" +"záznam '%(owner)s %(rtype)s' neprešiel DNSSEC validáciou na serveri %(ip)s" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "požiadavka zlyhala s HTTP stavom %d" + +#, python-format +msgid "salt value: %(err)s" +msgstr "salt hodnota: %(err)s" + +msgid "sudo commands" +msgstr "sudo príkazy" + +msgid "sudo rules" +msgstr "sudo pravidlá" + +msgid "this option is deprecated" +msgstr "táto voľba je zastaraná" + +msgid "too many '@' characters" +msgstr "príliš mnoho '@' znakov" msgid "trusted domain object not found" msgstr "trust doménový objekt nenájdený" -msgid "Object does not belong to a trusted domain" -msgstr "" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "" - -msgid "Ambiguous search, user domain was not specified" -msgstr "" - -msgid "Trusted domain did not return a unique object" -msgstr "" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "" - msgid "trusted domain user not found" msgstr "trust doménový užívateľ nenájdený" -msgid "Cannot retrieve trusted domain GC list" -msgstr "" - -#, fuzzy -msgid "CIFS credentials object" -msgstr "Nesprávne prihlasovacie údaje" +#, python-format +msgid "unknown command '%(name)s'" +msgstr "neznámy príkaz '%(name)s'" #, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "" +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "neznáma chyba %(code)d od %(server)s: %(error)s" -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" +msgid "value" +msgstr "hodnota" #, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" - -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" - -#, fuzzy -msgid "Credentials" -msgstr "Nesprávne prihlasovacie údaje" - -msgid "Missing credentials for cross-forest communication" -msgstr "" - -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" - -#, python-format -msgid "must equal %r" -msgstr "" - -msgid "Hello world" -msgstr "" - -#, fuzzy, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "RADIUS Proxy serverové nastavenia" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "" - -#, fuzzy -msgid "must be at least 1" -msgstr "musí byť najmenej %(minvalue)d" - -msgid "Out of memory\n" -msgstr "" - -msgid "Warning unrecognized encryption type.\n" -msgstr "" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -msgid "Out of memory!?\n" -msgstr "" - -msgid "Enctype comparison failed!\n" -msgstr "" - -#, fuzzy -msgid "Password is too long!\n" -msgstr "Vypršanie hesla" - -msgid "Failed to create random key!\n" -msgstr "" - -#, fuzzy -msgid "Failed to create key!\n" -msgstr "Zlyhalo pridanie" - -msgid "Bad or unsupported salt type.\n" -msgstr "" - -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" +msgid "{role}: role not found" +msgstr "{role}: rola nenájdená" diff --git a/po/tg.po b/po/tg.po index d00ac918c..58cd097ef 100644 --- a/po/tg.po +++ b/po/tg.po @@ -18,24199 +18,308 @@ msgstr "" "Plural-Forms: nplurals=1; plural=0\n" "X-Generator: Zanata 4.6.2\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" +#, python-format +msgid "%(info)s" +msgstr "%(info)s" -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" +msgid "ACI name" +msgstr "Номи ACI" -#, c-format -msgid "out of memory\n" -msgstr "берун аз хотира\n" +msgid "ACI prefix" +msgstr "Префикси ACI" -#, c-format -msgid "read error\n" -msgstr "хатогии хониш\n" +msgid "ACIs" +msgstr "ACIs" -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" +msgid "Add" +msgstr "Илова кардан" -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" +msgid "Allow" +msgstr "Иҷозат додан" -#, c-format -msgid "Removing principal %s\n" -msgstr "" +msgid "Already registered" +msgstr "Ааллакай қайд карда шуд" -#, c-format -msgid "Failed to open keytab\n" -msgstr "" +msgid "Attribute" +msgstr "Аттрибут" -#, fuzzy, c-format -msgid "principal not found\n" +msgid "Attributes" +msgstr "Аттрибутҳо" + +msgid "Audit" +msgstr "Назорат" + +msgid "Available" +msgstr "Дастрас" + +msgid "Cancel" +msgstr "Бекор кардан" + +msgid "City" +msgstr "Шаҳр" + +msgid "Class" +msgstr "Синф" + +msgid "Close" +msgstr "Пӯшидан" + +msgid "Commands" +msgstr "Фармонҳо" + +msgid "Configuration" +msgstr "Ҷӯрсозӣ" + +msgid "Data" +msgstr "Маълумот" + +msgid "Delete" +msgstr "Нест кардан" + +msgid "Delete all?" +msgstr "Ҳамаро нест мекунед?" + +msgid "Description" +msgstr "Шарҳ" + +msgid "Display name" +msgstr "Номи намоишӣ" + +msgid "Enabled" +msgstr "Фаъолшуда" + +msgid "Entry" +msgstr "Вуруд" + +msgid "Error" +msgstr "Хатогӣ" + +msgid "Fax Number" +msgstr "Рақами факс" + +#, python-format +msgid "File %(file)s not found" msgstr "Файли %(file)s пайдо нашуд." -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" +msgid "Filter" +msgstr "Полоишгар" + +msgid "Find" +msgstr "Ёфтан" + +msgid "First name" +msgstr "Ном" + +msgid "Force" +msgstr "Маҷбурӣ" + +msgid "General" +msgstr "Умумӣ" + +msgid "Get" +msgstr "Гирифтан" + +msgid "Group" +msgstr "Гурӯҳ" + +msgid "Groups" +msgstr "Гуруҳҳо" + +msgid "Host Name" +msgstr "Номи мизбон" + +msgid "Host name" +msgstr "Номи мизбон" + +msgid "Hostname" +msgstr "Номи мизбон" + +msgid "IPA Server" +msgstr "Сервери IPA" + +msgid "Initials" +msgstr "Ному насаб" + +msgid "Issue" +msgstr "Барориш" + +msgid "Issued By" +msgstr "Додааст:" + +msgid "Issued To" +msgstr "Додашудааст ба:" + +msgid "Issuer" +msgstr "Диҳанда" + +msgid "Job Title" +msgstr "Вазифа" + +msgid "Key" +msgstr "Тугма" + +msgid "LDAP DN" +msgstr "LDAP DN" + +msgid "LDAP password" +msgstr "Пароли LDAP" + +msgid "Last name" +msgstr "Насаб" + +msgid "Location" +msgstr "Макон" + +msgid "Manager" +msgstr "Диспетчер" + +msgid "New Password" +msgstr "Пароли нав" + +msgid "Note" +msgstr "Эзоҳ" + +msgid "OK" +msgstr "Хуб" + +msgid "Organization" +msgstr "Ташкилот" #, c-format -msgid "Unable to remove entry\n" -msgstr "" +msgid "Out of Memory!\n" +msgstr "Берун аз хотира!\n" -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -msgid "realm not found\n" -msgstr "Файли %(file)s пайдо нашуд." - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" -msgstr "" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "Kerberos Service Principal Name" -msgstr "" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -#, fuzzy -msgid "Realm name" -msgstr "Азнавномгузорӣ" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" +msgid "Out of memory\n" +msgstr "Берун аз хотира \n" #, c-format msgid "Out of memory \n" msgstr "Берун аз хотира \n" #, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -msgid "SASL Bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Out of Memory!\n" -msgstr "Берун аз хотира!\n" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "Паролҳо номувофиқанд!" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Output debug info" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -msgid "Server Name" -msgstr "Номи сервер" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "LDAP DN" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -msgid "LDAP password" -msgstr "Пароли LDAP" - -msgid "password to use if not using kerberos" -msgstr "" - -#, fuzzy -msgid "Prompt for LDAP password" -msgstr "Пароли LDAP" - -msgid "Path to the IPA CA certificate" -msgstr "" - -msgid "IPA CA certificate" -msgstr "" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -#, fuzzy -msgid "Enter LDAP password" -msgstr "Пароли LDAP" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" - -#, c-format -msgid "Discovered server %s\n" -msgstr "" - -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Using provided server %s\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -#, fuzzy -msgid "New Principal Password" -msgstr "Пароли нав" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" +msgid "Out of memory!" +msgstr "Берун аз хотира!" #, c-format msgid "Out of memory!\n" msgstr "Берун аз хотира!\n" -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "" - -#, c-format -msgid "Out of memory!" -msgstr "Берун аз хотира!" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "" - -#, c-format -msgid "No values for %s" -msgstr "" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Host is already joined.\n" -msgstr "" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" - -#, c-format -msgid "json_dumps() failed\n" -msgstr "" - -#, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "" - -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" - -#, c-format -msgid "fork() failed\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "" - -#, c-format -msgid "child exited with %d\n" -msgstr "" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "" - -msgid "Quiet mode. Only errors are displayed." -msgstr "" - -msgid "Unenroll this host from IPA server" -msgstr "" - -msgid "Hostname of this server" -msgstr "" - -msgid "hostname" -msgstr "номи мизбон" - -#, fuzzy -msgid "IPA Server to use" -msgstr "Сервери IPA" - -msgid "Specifies where to store keytab information." -msgstr "" - -msgid "filename" -msgstr "номи файл" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" - -msgid "LDAP password (if not using Kerberos)" -msgstr "" - -msgid "password" -msgstr "парол" - -#, fuzzy -msgid "LDAP basedn" -msgstr "Пароли LDAP" - -msgid "basedn" -msgstr "" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "" - -msgid "Failed to add" -msgstr "" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" - -msgid "Unrevoked" -msgstr "" - -msgid "Error" -msgstr "Хатогӣ" - -#, fuzzy -msgid "Input filename" -msgstr "номи файл" - -msgid "File to load the certificate from." -msgstr "" - -msgid "cannot specify both raw certificate and file" -msgstr "" - -msgid "Input file" -msgstr "" - -msgid "File to load the certificate from" -msgstr "" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "" - -msgid "Split DNS record to parts" -msgstr "" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" - -msgid "DNS resource record type" -msgstr "" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" - -msgid "No option to modify specific record provided." -msgstr "" - -msgid "Current DNS record contents:\n" -msgstr "" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -msgid "No option to delete specific record provided." -msgstr "" - -msgid "Delete all?" -msgstr "Ҳамаро нест мекунед?" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "" - -msgid "Server will check DNS forwarder(s)." -msgstr "" - -msgid "This may take some time, please wait ..." -msgstr "" - -msgid "DNS forwarder" -msgstr "" - -msgid "file to store DNS records in nsupdate format" -msgstr "" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -msgid "Maximum number of agreements per replica" -msgstr "" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -#, fuzzy -msgid "Delete a user" -msgstr "Ҳамаро нест мекунед?" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - -msgid "maps not connected to /etc/auto.master:" -msgstr "" - -msgid "Import automount files for a specific location." -msgstr "" - -msgid "Master file" -msgstr "" - -msgid "Automount master file." -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" - -#, python-format -msgid "File %(file)s not found" -msgstr "Файли %(file)s пайдо нашуд." - -#, python-format -msgid "key %(key)s already exists" -msgstr "" - -#, python-format -msgid "map %(map)s already exists" -msgstr "" - -msgid "Imported maps:" -msgstr "" - -#, python-format -msgid "Added %(map)s" -msgstr "" - -msgid "Imported keys:" -msgstr "" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "" - -msgid "Ignored keys:" -msgstr "" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "" - -msgid "Duplicate maps skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(map)s" -msgstr "" - -msgid "Duplicate keys skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(key)s" -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -#, fuzzy -msgid "User ID" -msgstr "Корбар" +msgid "Out of memory!?\n" +msgstr "Аз хотира берун шуд!?\n" msgid "Password" msgstr "Парол" -#, fuzzy -msgid "First Code" -msgstr "Ном" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "" - -msgid "Invalid credentials" -msgstr "" - -msgid "Create a new vault." -msgstr "" - -#, fuzzy -msgid "Vault password" -msgstr "парол" - -msgid "File containing the vault password" -msgstr "" - -msgid "File containing the vault public key" -msgstr "" - -msgid "Password can be specified only for symmetric vault" -msgstr "" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "" - -msgid "Password specified multiple times" -msgstr "" - -msgid "Public key specified multiple times" -msgstr "" - -msgid "Missing vault public key" -msgstr "" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "" - -msgid "Modify a vault." -msgstr "" - -#, fuzzy -msgid "Change password" -msgstr "парол" - -#, fuzzy -msgid "Old vault password" -msgstr "парол" - -msgid "File containing the old vault password" -msgstr "" - -#, fuzzy -msgid "New vault password" -msgstr "Пароли нав" - -msgid "File containing the new vault password" -msgstr "" - -msgid "Old vault private key" -msgstr "" - -msgid "File containing the old vault private key" -msgstr "" - -msgid "File containing the new vault public key" -msgstr "" - -msgid "New public key specified multiple times" -msgstr "" - -msgid "Missing new vault public key" -msgstr "" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "" - -msgid "Binary data to archive" -msgstr "" - -msgid "File containing data to archive" -msgstr "" - -msgid "Override existing password" -msgstr "" - -msgid "Input data specified multiple times" -msgstr "" - -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" - -msgid "Invalid vault type" -msgstr "" - -msgid "Retrieve a data from a vault." -msgstr "" - -msgid "File to store retrieved data" -msgstr "" - -msgid "Vault private key" -msgstr "" - -msgid "File containing the vault private key" -msgstr "" - -msgid "Data" -msgstr "Маълумот" - -msgid "Private key specified multiple times" -msgstr "" - -msgid "Missing vault private key" -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "ACI name" -msgstr "Номи ACI" - -msgid "Permission" -msgstr "Иҷозат" - -msgid "Permission ACI grants access to" -msgstr "" - -msgid "User group" -msgstr "Гурӯҳи корбар" - -msgid "User group ACI grants access to" -msgstr "" - -msgid "Permissions" -msgstr "Иҷозатҳо" - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Attributes to which the permission applies" -msgstr "" - -msgid "Attributes" -msgstr "Аттрибутҳо" - -msgid "Type" -msgstr "Намуд" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" - -msgid "Member of" -msgstr "" - -msgid "Member of a group" -msgstr "" - -msgid "Filter" -msgstr "Полоишгар" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "" - -msgid "Subtree" -msgstr "" - -msgid "Subtree to apply ACI to" -msgstr "" - -#, fuzzy -msgid "Target group" -msgstr "Мақсад" - -msgid "Group to apply ACI to" -msgstr "" - -msgid "Target your own entry (self)" -msgstr "" - -msgid "Apply ACI to your own entry (self)" -msgstr "" - -msgid "Create new ACI." -msgstr "" - -msgid "ACI prefix" -msgstr "Префикси ACI" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" - -msgid "Test the ACI syntax but don't write anything" -msgstr "" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" - -msgid "User-friendly description of action performed" -msgstr "" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" - -#, fuzzy -msgid "Delete ACI." -msgstr "Нест кардан" - -msgid "True means the operation was successful" -msgstr "" - -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" - -msgid "A string searched in all relevant object attributes" -msgstr "" - -msgid "Primary key only" -msgstr "" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" - -msgid "Number of entries returned" -msgstr "" - -msgid "True if not all results were returned" -msgstr "" - -msgid "Modify ACI." -msgstr "" - -#, fuzzy -msgid "Rename an ACI." -msgstr "Азнавномгузорӣ" - -#, fuzzy -msgid "New ACI name" -msgstr "Номи ACI" - -msgid "Display a single ACI given an ACI name." -msgstr "" - -msgid "Location of the ACI" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Description" -msgstr "Шарҳ" - -msgid "A description of this auto member rule" -msgstr "" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - -msgid "Grouping Type" -msgstr "" - -msgid "Grouping to which the rule applies" -msgstr "" - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -#, fuzzy -msgid "Attribute Key" -msgstr "Аттрибут" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -msgid "Number of conditions added" -msgstr "" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -msgid "Display information about the default (fallback) automember groups." -msgstr "" - -msgid "Delete an automember rule." -msgstr "" - -msgid "List of deletions that failed" -msgstr "" - -msgid "Search for automember rules." -msgstr "" - -msgid "Modify an automember rule." -msgstr "" - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -#, fuzzy -msgid "Users" -msgstr "Корбар" - -msgid "Rebuild membership for specified users" -msgstr "" - -#, fuzzy -msgid "Hosts" -msgstr "Номи мизбон" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -msgid "Number of conditions removed" -msgstr "" - -msgid "Display information about an automember rule." -msgstr "" - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" - -msgid "Key" -msgstr "Тугма" - -msgid "Automount key name." -msgstr "" - -#, fuzzy -msgid "Mount information" -msgstr "Ҷӯрсозӣ" - -msgid "description" -msgstr "шарҳ" - -msgid "Location" -msgstr "Макон" - -msgid "Automount location name." -msgstr "" - -msgid "Map" -msgstr "" - -msgid "Automount map name." -msgstr "" - -msgid "Create a new automount key." -msgstr "" - -msgid "Delete an automount key." -msgstr "" - -msgid "Continuous mode: Don't stop on errors." -msgstr "" - -msgid "Search for an automount key." -msgstr "" - -msgid "Time Limit" -msgstr "" - -msgid "Time limit of search in seconds" -msgstr "" - -msgid "Size Limit" -msgstr "" - -msgid "Maximum number of entries returned" -msgstr "" - -msgid "Modify an automount key." -msgstr "" - -msgid "New mount information" -msgstr "" - -msgid "Rename" -msgstr "Азнавномгузорӣ" - -msgid "Rename the automount key object" -msgstr "" - -#, fuzzy -msgid "Display an automount key." -msgstr "Номи намоишӣ" - -msgid "Create a new automount location." -msgstr "" - -msgid "Delete an automount location." -msgstr "" - -msgid "Search for an automount location." -msgstr "" - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" - -msgid "Display an automount location." -msgstr "" - -msgid "Generate automount files for a specific location." -msgstr "" - -msgid "Create a new automount map." -msgstr "" - -msgid "Create a new indirect mount point." -msgstr "" - -msgid "Mount point" -msgstr "" - -msgid "Parent map" -msgstr "" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" - -msgid "Delete an automount map." -msgstr "" - -msgid "Search for an automount map." -msgstr "" - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" - -msgid "Modify an automount map." -msgstr "" - -msgid "Display an automount map." -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" - -msgid "Nested Methods to execute" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -msgid "Match cn attribute in subject" -msgstr "" - -msgid "Reason" -msgstr "" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -#, fuzzy -msgid "minimum serial number" -msgstr "Рақами силсилавӣ" - -#, fuzzy -msgid "maximum serial number" -msgstr "Рақами силсилавӣ" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "" - -msgid "Take a revoked certificate off hold." -msgstr "" - -msgid "Serial number" -msgstr "Рақами силсилавӣ" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -msgid "Submit a certificate signing request." -msgstr "" - -msgid "CSR" -msgstr "" - -msgid "Principal" -msgstr "Асосӣ" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Dictionary mapping variable name to value" -msgstr "" - -msgid "Revoke a certificate." -msgstr "" - -msgid "Retrieve an existing certificate." -msgstr "" - -#, fuzzy -msgid "Output filename" -msgstr "номи файл" - -msgid "File to store the certificate in." -msgstr "" - -msgid "Check the status of a certificate signing request." -msgstr "" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "Maximum username length" -msgstr "" - -msgid "Home directory base" -msgstr "" - -msgid "Default location of home directories" -msgstr "" - -msgid "Default shell" -msgstr "" - -msgid "Default shell for new users" -msgstr "" - -#, fuzzy -msgid "Default users group" -msgstr "Гурӯҳи корбар" - -msgid "Default group for new users" -msgstr "" - -msgid "Default e-mail domain" -msgstr "" - -msgid "Search time limit" -msgstr "" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" - -msgid "Search size limit" -msgstr "" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "" - -msgid "User search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" - -msgid "Group search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" - -msgid "Enable migration mode" -msgstr "" - -msgid "Certificate Subject base" -msgstr "" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "" - -msgid "Default group objectclasses" -msgstr "" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "" - -msgid "Default user objectclasses" -msgstr "" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" - -msgid "Password Expiration Notification (days)" -msgstr "" - -msgid "Number of days's notice of impending password expiration" -msgstr "" - -msgid "Password plugin features" -msgstr "" - -msgid "Extra hashes to generate in password plug-in" -msgstr "" - -msgid "SELinux user map order" -msgstr "" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" - -msgid "Default SELinux user" -msgstr "" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" - -msgid "Default PAC types" -msgstr "" - -msgid "Default types of PAC supported for services" -msgstr "" - -msgid "Default user authentication types" -msgstr "" - -msgid "Default types of supported user authentication" -msgstr "" - -msgid "Modify configuration options." -msgstr "" - -msgid "Show the current configuration." -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "Delegation name" -msgstr "" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "" - -msgid "Attributes to which the delegation applies" -msgstr "" - -#, fuzzy -msgid "Member user group" -msgstr "Гурӯҳи корбар" - -msgid "User group to apply delegation to" -msgstr "" - -msgid "Add a new delegation." -msgstr "" - -msgid "Delete a delegation." -msgstr "" - -msgid "Search for delegations." -msgstr "" - -msgid "Modify a delegation." -msgstr "" - -msgid "Display information about a delegation." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "Global forwarders" -msgstr "" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Forward policy" -msgstr "" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" - -msgid "Allow PTR sync" -msgstr "" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" - -msgid "Zone refresh interval" -msgstr "" - -#, fuzzy -msgid "Zone name" -msgstr "Номи мизбон" - -msgid "Zone name (FQDN)" -msgstr "" - -msgid "Reverse zone IP network" -msgstr "" - -msgid "IP network to create reverse zone name from" -msgstr "" - -msgid "Active zone" -msgstr "" - -msgid "Is zone active?" -msgstr "" - -msgid "Zone forwarders" -msgstr "" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -#, fuzzy -msgid "Record name" -msgstr "Азнавномгузорӣ" - -msgid "Time to live" -msgstr "" - -msgid "Records" -msgstr "" - -msgid "Record type" -msgstr "" - -msgid "Record data" -msgstr "" - -msgid "A record" -msgstr "" - -msgid "Raw A records" -msgstr "" - -msgid "A IP Address" -msgstr "" - -msgid "IP Address" -msgstr "" - -msgid "A Create reverse" -msgstr "" - -msgid "Create reverse record for this IP Address" -msgstr "" - -msgid "AAAA record" -msgstr "" - -msgid "Raw AAAA records" -msgstr "" - -msgid "AAAA IP Address" -msgstr "" - -msgid "AAAA Create reverse" -msgstr "" - -msgid "A6 record" -msgstr "" - -msgid "Raw A6 records" -msgstr "" - -msgid "A6 Record data" -msgstr "" - -msgid "AFSDB record" -msgstr "" - -msgid "Raw AFSDB records" -msgstr "" - -msgid "AFSDB Subtype" -msgstr "" - -msgid "Subtype" -msgstr "" - -#, fuzzy -msgid "AFSDB Hostname" -msgstr "Номи мизбон" - -msgid "Hostname" -msgstr "Номи мизбон" - -msgid "APL record" -msgstr "" - -msgid "Raw APL records" -msgstr "" - -msgid "CERT record" -msgstr "" - -msgid "Raw CERT records" -msgstr "" - -msgid "CERT Certificate Type" -msgstr "" - -msgid "Certificate Type" -msgstr "" - -msgid "CERT Key Tag" -msgstr "" - -msgid "Key Tag" -msgstr "" - -msgid "CERT Algorithm" -msgstr "" - -msgid "Algorithm" -msgstr "" - -msgid "CERT Certificate/CRL" -msgstr "" - -msgid "Certificate/CRL" -msgstr "" - -msgid "CNAME record" -msgstr "" - -msgid "Raw CNAME records" -msgstr "" - -#, fuzzy -msgid "CNAME Hostname" -msgstr "Номи мизбон" - -msgid "A hostname which this alias hostname points to" -msgstr "" - -msgid "DHCID record" -msgstr "" - -msgid "Raw DHCID records" -msgstr "" - -msgid "DLV record" -msgstr "" - -msgid "Raw DLV records" -msgstr "" - -msgid "DLV Key Tag" -msgstr "" - -msgid "DLV Algorithm" -msgstr "" - -msgid "DLV Digest Type" -msgstr "" - -msgid "Digest Type" -msgstr "" - -msgid "DLV Digest" -msgstr "" - -msgid "Digest" -msgstr "" - -msgid "DNAME record" -msgstr "" - -msgid "Raw DNAME records" -msgstr "" - -#, fuzzy -msgid "DNAME Target" -msgstr "Мақсад" - -msgid "Target" -msgstr "Мақсад" - -msgid "DNSKEY record" -msgstr "" - -msgid "Raw DNSKEY records" -msgstr "" - -msgid "DS record" -msgstr "" - -msgid "Raw DS records" -msgstr "" - -msgid "DS Key Tag" -msgstr "" - -msgid "DS Algorithm" -msgstr "" - -msgid "DS Digest Type" -msgstr "" - -msgid "DS Digest" -msgstr "" - -msgid "HIP record" -msgstr "" - -msgid "Raw HIP records" -msgstr "" - -msgid "IPSECKEY record" -msgstr "" - -msgid "Raw IPSECKEY records" -msgstr "" - -msgid "KEY record" -msgstr "" - -msgid "Raw KEY records" -msgstr "" - -msgid "KX record" -msgstr "" - -msgid "Raw KX records" -msgstr "" - -msgid "KX Preference" -msgstr "" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" - -msgid "KX Exchanger" -msgstr "" - -msgid "A host willing to act as a key exchanger" -msgstr "" - -msgid "LOC record" -msgstr "" - -msgid "Raw LOC records" -msgstr "" - -msgid "LOC Degrees Latitude" -msgstr "" - -msgid "Degrees Latitude" -msgstr "" - -msgid "LOC Minutes Latitude" -msgstr "" - -msgid "Minutes Latitude" -msgstr "" - -msgid "LOC Seconds Latitude" -msgstr "" - -msgid "Seconds Latitude" -msgstr "" - -msgid "LOC Direction Latitude" -msgstr "" - -msgid "Direction Latitude" -msgstr "" - -msgid "LOC Degrees Longitude" -msgstr "" - -msgid "Degrees Longitude" -msgstr "" - -msgid "LOC Minutes Longitude" -msgstr "" - -msgid "Minutes Longitude" -msgstr "" - -msgid "LOC Seconds Longitude" -msgstr "" - -msgid "Seconds Longitude" -msgstr "" - -msgid "LOC Direction Longitude" -msgstr "" - -msgid "Direction Longitude" -msgstr "" - -msgid "LOC Altitude" -msgstr "" - -msgid "Altitude" -msgstr "" - -msgid "LOC Size" -msgstr "" - -msgid "Size" -msgstr "" - -msgid "LOC Horizontal Precision" -msgstr "" - -msgid "Horizontal Precision" -msgstr "" - -msgid "LOC Vertical Precision" -msgstr "" - -msgid "Vertical Precision" -msgstr "" - -msgid "MX record" -msgstr "" - -msgid "Raw MX records" -msgstr "" - -msgid "MX Preference" -msgstr "" - -msgid "MX Exchanger" -msgstr "" - -msgid "A host willing to act as a mail exchanger" -msgstr "" - -msgid "NAPTR record" -msgstr "" - -msgid "Raw NAPTR records" -msgstr "" - -msgid "NAPTR Order" -msgstr "" - -msgid "Order" -msgstr "" - -msgid "NAPTR Preference" -msgstr "" - -msgid "Preference" -msgstr "" - -msgid "NAPTR Flags" -msgstr "" - -msgid "Flags" -msgstr "" - -#, fuzzy -msgid "NAPTR Service" -msgstr "Хидмат" - -msgid "Service" -msgstr "Хидмат" - -msgid "NAPTR Regular Expression" -msgstr "" - -msgid "Regular Expression" -msgstr "" - -msgid "NAPTR Replacement" -msgstr "" - -msgid "Replacement" -msgstr "" - -msgid "NS record" -msgstr "" - -msgid "Raw NS records" -msgstr "" - -#, fuzzy -msgid "NS Hostname" -msgstr "Номи мизбон" - -msgid "NSEC record" -msgstr "" - -msgid "Raw NSEC records" -msgstr "" - -msgid "NSEC3 record" -msgstr "" - -msgid "Raw NSEC3 records" -msgstr "" - -msgid "PTR record" -msgstr "" - -msgid "Raw PTR records" -msgstr "" - -#, fuzzy -msgid "PTR Hostname" -msgstr "Номи мизбон" - -msgid "The hostname this reverse record points to" -msgstr "" - -msgid "RRSIG record" -msgstr "" - -msgid "Raw RRSIG records" -msgstr "" - -msgid "RP record" -msgstr "" - -msgid "Raw RP records" -msgstr "" - -msgid "SIG record" -msgstr "" - -msgid "Raw SIG records" -msgstr "" - -msgid "SPF record" -msgstr "" - -msgid "Raw SPF records" -msgstr "" - -msgid "SRV record" -msgstr "" - -msgid "Raw SRV records" -msgstr "" - -msgid "SRV Priority" -msgstr "" - -msgid "Priority" -msgstr "" - -msgid "SRV Weight" -msgstr "" - -msgid "Weight" -msgstr "" - -msgid "SRV Port" -msgstr "" - -msgid "Port" -msgstr "" - -#, fuzzy -msgid "SRV Target" -msgstr "Мақсад" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" - -msgid "SSHFP record" -msgstr "" - -msgid "Raw SSHFP records" -msgstr "" - -msgid "SSHFP Algorithm" -msgstr "" - -msgid "SSHFP Fingerprint Type" -msgstr "" - -msgid "Fingerprint Type" -msgstr "" - -msgid "SSHFP Fingerprint" -msgstr "" - -msgid "Fingerprint" -msgstr "" - -msgid "TA record" -msgstr "" - -msgid "Raw TA records" -msgstr "" - -msgid "TLSA record" -msgstr "" - -msgid "Raw TLSA records" -msgstr "" - -msgid "TLSA Certificate Usage" -msgstr "" - -msgid "Certificate Usage" -msgstr "" - -msgid "TLSA Selector" -msgstr "" - -#, fuzzy -msgid "Selector" -msgstr "Интихоби ҳама" - -msgid "TLSA Matching Type" -msgstr "" - -msgid "Matching Type" -msgstr "" - -msgid "TLSA Certificate Association Data" -msgstr "" - -msgid "Certificate Association Data" -msgstr "" - -msgid "TKEY record" -msgstr "" - -msgid "Raw TKEY records" -msgstr "" - -msgid "TSIG record" -msgstr "" - -msgid "Raw TSIG records" -msgstr "" - -msgid "TXT record" -msgstr "" - -msgid "Raw TXT records" -msgstr "" - -msgid "TXT Text Data" -msgstr "" - -#, fuzzy -msgid "Text Data" -msgstr "Маълумот" - -msgid "Authoritative nameserver" -msgstr "" - -msgid "Authoritative nameserver domain name" -msgstr "" - -msgid "Administrator e-mail address" -msgstr "" - -msgid "SOA serial" -msgstr "" - -#, fuzzy -msgid "SOA record serial number" -msgstr "Рақами силсилавӣ" - -msgid "SOA refresh" -msgstr "" - -msgid "SOA record refresh time" -msgstr "" - -msgid "SOA retry" -msgstr "" - -msgid "SOA record retry time" -msgstr "" - -msgid "SOA expire" -msgstr "" - -msgid "SOA record expire time" -msgstr "" - -msgid "SOA minimum" -msgstr "" - -msgid "How long should negative responses be cached" -msgstr "" - -msgid "Time to live for records at zone apex" -msgstr "" - -msgid "BIND update policy" -msgstr "" - -msgid "Dynamic update" -msgstr "" - -msgid "Allow dynamic updates." -msgstr "" - -#, fuzzy -msgid "Allow query" -msgstr "Иҷозат додан" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" - -msgid "Allow transfer" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" - -msgid "Allow in-line DNSSEC signing" -msgstr "" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "" - -msgid "NSEC3PARAM record" -msgstr "" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" - -msgid "Resolve a host name in DNS." -msgstr "" - -msgid "Modify global DNS configuration." -msgstr "" - -msgid "Show the current global DNS configuration." -msgstr "" - -msgid "Create new DNS forward zone." -msgstr "" - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" - -#, fuzzy -msgid "Permission value" -msgstr "Иҷозат" - -msgid "Delete DNS forward zone." -msgstr "" - -msgid "Disable DNS Forward Zone." -msgstr "" - -msgid "Enable DNS Forward Zone." -msgstr "" - -msgid "Search for DNS forward zones." -msgstr "" - -msgid "Modify DNS forward zone." -msgstr "" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" - -msgid "Display information about a DNS forward zone." -msgstr "" - -msgid "Add new DNS resource record." -msgstr "" - -msgid "Force" -msgstr "Маҷбурӣ" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "" - -msgid "Structured" -msgstr "" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" - -msgid "Delete DNS resource record." -msgstr "" - -msgid "Delete all associated records" -msgstr "" - -msgid "Delete DNS record entry." -msgstr "" - -msgid "Search for DNS resources." -msgstr "" - -msgid "Modify a DNS resource record." -msgstr "" - -msgid "Rename the DNS resource record object" -msgstr "" - -msgid "Display DNS resource." -msgstr "" - -msgid "Create new DNS zone (SOA record)." -msgstr "" - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" - -msgid "Add a permission for per-zone access delegation." -msgstr "" - -msgid "Delete DNS zone (SOA record)." -msgstr "" - -msgid "Disable DNS Zone." -msgstr "" - -msgid "Enable DNS Zone." -msgstr "" - -msgid "Search for DNS zones (SOA records)." -msgstr "" - -msgid "Forward zones only" -msgstr "" - -msgid "Search for forward zones only" -msgstr "" - -msgid "Modify DNS zone (SOA record)." -msgstr "" - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" - -msgid "Remove a permission for per-zone access delegation." -msgstr "" - -msgid "Display information about a DNS zone (SOA record)." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -msgid "Group name" -msgstr "Гурӯҳ" - -#, fuzzy -msgid "Group description" -msgstr "шарҳ" - -msgid "GID" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -msgid "Member users" -msgstr "" - -#, fuzzy -msgid "Member groups" -msgstr "Гурӯҳи корбар" - -#, fuzzy -msgid "Member of groups" -msgstr "Гурӯҳи корбар" - -msgid "Roles" -msgstr "" - -msgid "Member of netgroups" -msgstr "" - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -msgid "Indirect Member of group" -msgstr "" - -msgid "Indirect Member of netgroup" -msgstr "" - -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - -msgid "Create a new group." -msgstr "" - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Suppress processing of membership attributes." -msgstr "" - -msgid "Add members to a group." -msgstr "" - -#, fuzzy -msgid "External member" -msgstr "Рақами силсилавӣ" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -msgid "member user" -msgstr "" - -msgid "users to add" -msgstr "" - -#, fuzzy -msgid "member group" -msgstr "Гурӯҳи корбар" - -msgid "groups to add" -msgstr "" - -msgid "Members that could not be added" -msgstr "" - -msgid "Number of members added" -msgstr "" - -#, fuzzy -msgid "Delete group." -msgstr "Нест кардан" - -msgid "Detach a managed group from a user." -msgstr "" - -msgid "Search for groups." -msgstr "" - -msgid "search for private groups" -msgstr "" - -msgid "search for POSIX groups" -msgstr "" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -msgid "search for non-POSIX groups" -msgstr "" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "user" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -#, fuzzy -msgid "group" -msgstr "Гурӯҳ" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -#, fuzzy -msgid "netgroup" -msgstr "Гурӯҳи корбар" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "role" -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "HBAC rule" -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "sudo rule" -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -msgid "Modify a group." -msgstr "" - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -msgid "Remove members from a group." -msgstr "" - -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - -msgid "Members that could not be removed" -msgstr "" - -msgid "Number of members removed" -msgstr "" - -msgid "Display information about a named group." -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -#, fuzzy -msgid "Rule name" -msgstr "Азнавномгузорӣ" - -msgid "Rule type" -msgstr "" - -msgid "Rule type (allow)" -msgstr "" - -#, fuzzy -msgid "User category" -msgstr "Номи корбар" - -msgid "User category the rule applies to" -msgstr "" - -#, fuzzy -msgid "Host category" -msgstr "Номи мизбон" - -msgid "Host category the rule applies to" -msgstr "" - -#, fuzzy -msgid "Service category" -msgstr "Хидмат" - -msgid "Service category the rule applies to" -msgstr "" - -msgid "Enabled" -msgstr "Фаъолшуда" - -#, fuzzy -msgid "User Groups" -msgstr "Гурӯҳи корбар" - -#, fuzzy -msgid "Host Groups" -msgstr "Гуруҳҳо" - -#, fuzzy -msgid "Services" -msgstr "Хидмат" - -#, fuzzy -msgid "Service Groups" -msgstr "Хидмат" - -msgid "External host" -msgstr "" - -msgid "Create a new HBAC rule." -msgstr "" - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "member host" -msgstr "" - -msgid "hosts to add" -msgstr "" - -msgid "member host group" -msgstr "" - -msgid "host groups to add" -msgstr "" - -msgid "Add services to an HBAC rule." -msgstr "" - -msgid "member HBAC service" -msgstr "" - -msgid "HBAC services to add" -msgstr "" - -msgid "member HBAC service group" -msgstr "" - -msgid "HBAC service groups to add" -msgstr "" - -msgid "Add users and groups to an HBAC rule." -msgstr "" - -msgid "Delete an HBAC rule." -msgstr "" - -msgid "Disable an HBAC rule." -msgstr "" - -msgid "Enable an HBAC rule." -msgstr "" - -msgid "Search for HBAC rules." -msgstr "" - -msgid "Modify an HBAC rule." -msgstr "" - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "hosts to remove" -msgstr "" - -msgid "host groups to remove" -msgstr "" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "" - -msgid "HBAC services to remove" -msgstr "" - -msgid "HBAC service groups to remove" -msgstr "" - -msgid "Remove users and groups from an HBAC rule." -msgstr "" - -msgid "Display the properties of an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" - -#, fuzzy -msgid "Service name" -msgstr "Номи сервер" - -#, fuzzy -msgid "HBAC service" -msgstr "Хидмат" - -#, fuzzy -msgid "HBAC service description" -msgstr "шарҳ" - -msgid "Member of HBAC service groups" -msgstr "" - -msgid "Add a new HBAC service." -msgstr "" - -msgid "Delete an existing HBAC service." -msgstr "" - -msgid "Search for HBAC services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" - -msgid "Modify an HBAC service." -msgstr "" - -msgid "Display information about an HBAC service." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -#, fuzzy -msgid "Service group name" -msgstr "Номи сервер" - -msgid "HBAC service group description" -msgstr "" - -msgid "Member HBAC service" -msgstr "" - -msgid "Add a new HBAC service group." -msgstr "" - -msgid "Add members to an HBAC service group." -msgstr "" - -msgid "Delete an HBAC service group." -msgstr "" - -msgid "Search for an HBAC service group." -msgstr "" - -msgid "Modify an HBAC service group." -msgstr "" - -msgid "Remove members from an HBAC service group." -msgstr "" - -msgid "Display information about an HBAC service group." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -msgid "User name" -msgstr "Номи корбар" - -#, fuzzy -msgid "Target host" -msgstr "Мақсад" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host name" -msgstr "Номи мизбон" - -msgid "A description of this host" -msgstr "" - -#, fuzzy -msgid "Locality" -msgstr "Макон" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "" - -msgid "Platform" -msgstr "" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "" - -msgid "Operating system" -msgstr "" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "" - -#, fuzzy -msgid "User password" -msgstr "парол" - -msgid "Password used in bulk enrollment" -msgstr "" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "" - -#, fuzzy -msgid "Random password" -msgstr "парол" - -msgid "Certificate" -msgstr "" - -msgid "Base-64 encoded server certificate" -msgstr "" - -#, fuzzy -msgid "Principal name" -msgstr "Асосӣ" - -msgid "MAC address" -msgstr "" - -msgid "Hardware MAC address(es) on this host" -msgstr "" - -msgid "SSH public key" -msgstr "" - -msgid "Class" -msgstr "Синф" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "Assigned ID View" -msgstr "" - -msgid "Requires pre-authentication" -msgstr "" - -msgid "Pre-authentication is required for the service" -msgstr "" - -msgid "Trusted for delegation" -msgstr "" - -msgid "Client credentials may be delegated to the service" -msgstr "" - -msgid "Member of host-groups" -msgstr "" - -msgid "Indirect Member of host-group" -msgstr "" - -msgid "Keytab" -msgstr "" - -#, fuzzy -msgid "Managed by" -msgstr "Диспетчер" - -#, fuzzy -msgid "Managing" -msgstr "Диспетчер" - -msgid "Users allowed to retrieve keytab" -msgstr "" - -msgid "Groups allowed to retrieve keytab" -msgstr "" - -msgid "Hosts allowed to retrieve keytab" -msgstr "" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "" - -msgid "Users allowed to create keytab" -msgstr "" - -msgid "Groups allowed to create keytab" -msgstr "" - -msgid "Hosts allowed to create keytab" -msgstr "" - -msgid "Host Groups allowed to create keytab" -msgstr "" - -msgid "Add a new host." -msgstr "" - -msgid "force host name even if not in DNS" -msgstr "" - -msgid "skip reverse DNS detection" -msgstr "" - -msgid "Add the host to DNS with this IP address" -msgstr "" - -msgid "Add hosts that can manage this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" - -#, fuzzy -msgid "Delete a host." -msgstr "Ҳамаро нест мекунед?" - -msgid "Remove entries from DNS" -msgstr "" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" - -msgid "Search for hosts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" - -#, fuzzy -msgid "host group" -msgstr "Гурӯҳи корбар" - -msgid "Search for hosts with these member of host groups." -msgstr "" - -msgid "Search for hosts without these member of host groups." -msgstr "" - -msgid "Search for hosts with these member of netgroups." -msgstr "" - -msgid "Search for hosts without these member of netgroups." -msgstr "" - -msgid "Search for hosts with these member of roles." -msgstr "" - -msgid "Search for hosts without these member of roles." -msgstr "" - -msgid "Search for hosts with these member of HBAC rules." -msgstr "" - -msgid "Search for hosts without these member of HBAC rules." -msgstr "" - -msgid "Search for hosts with these member of sudo rules." -msgstr "" - -msgid "Search for hosts without these member of sudo rules." -msgstr "" - -msgid "Search for hosts with these enrolled by users." -msgstr "" - -msgid "Search for hosts without these enrolled by users." -msgstr "" - -#, fuzzy -msgid "host" -msgstr "номи мизбон" - -msgid "Search for hosts with these managed by hosts." -msgstr "" - -msgid "Search for hosts without these managed by hosts." -msgstr "" - -msgid "Search for hosts with these managing hosts." -msgstr "" - -msgid "Search for hosts without these managing hosts." -msgstr "" - -msgid "Modify information about a host." -msgstr "" - -msgid "Kerberos principal name for this host" -msgstr "" - -msgid "Update DNS entries" -msgstr "" - -msgid "Remove hosts that can manage this host." -msgstr "" - -msgid "Display information about a host." -msgstr "" - -msgid "file to store certificate in" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -msgid "Host-group" -msgstr "Гурӯҳи корбар" - -msgid "Name of host-group" -msgstr "" - -msgid "A description of this host-group" -msgstr "" - -msgid "Member hosts" -msgstr "" - -msgid "Member host-groups" -msgstr "" - -msgid "Indirect Member hosts" -msgstr "" - -msgid "Indirect Member host-groups" -msgstr "" - -msgid "Add a new hostgroup." -msgstr "" - -msgid "Add members to a hostgroup." -msgstr "" - -msgid "Delete a hostgroup." -msgstr "" - -msgid "Search for hostgroups." -msgstr "" - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" - -msgid "Search for host groups with these member hosts." -msgstr "" - -msgid "Search for host groups without these member hosts." -msgstr "" - -msgid "Search for host groups with these member host groups." -msgstr "" - -msgid "Search for host groups without these member host groups." -msgstr "" - -msgid "Search for host groups with these member of host groups." -msgstr "" - -msgid "Search for host groups without these member of host groups." -msgstr "" - -msgid "Search for host groups with these member of netgroups." -msgstr "" - -msgid "Search for host groups without these member of netgroups." -msgstr "" - -msgid "Search for host groups with these member of HBAC rules." -msgstr "" - -msgid "Search for host groups without these member of HBAC rules." -msgstr "" - -msgid "Search for host groups with these member of sudo rules." -msgstr "" - -msgid "Search for host groups without these member of sudo rules." -msgstr "" - -msgid "Modify a hostgroup." -msgstr "" - -msgid "Remove members from a hostgroup." -msgstr "" - -msgid "Display information about a hostgroup." -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "Азнавномгузорӣ" - -msgid "First Posix ID of the range" -msgstr "" - -msgid "Number of IDs in the range" -msgstr "" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "" - -msgid "Search for ranges." -msgstr "" - -msgid "Modify ID range." -msgstr "" - -msgid "Display information about a range." -msgstr "" - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -msgid "Anchor to override" -msgstr "" - -msgid "Group ID Number" -msgstr "" - -#, fuzzy -msgid "User login" -msgstr "Номи корбар" - -msgid "UID" -msgstr "" - -#, fuzzy -msgid "User ID Number" -msgstr "Рақами силсилавӣ" - -msgid "GECOS" -msgstr "" - -msgid "Home directory" -msgstr "" - -msgid "Login shell" -msgstr "" - -msgid "ID View Name" -msgstr "" - -msgid "Add a new Group ID override." -msgstr "" - -msgid "Delete an Group ID override." -msgstr "" - -msgid "Search for an Group ID override." -msgstr "" - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" - -msgid "Modify an Group ID override." -msgstr "" - -msgid "Rename the Group ID override object" -msgstr "" - -msgid "Display information about an Group ID override." -msgstr "" - -msgid "Add a new User ID override." -msgstr "" - -msgid "Delete an User ID override." -msgstr "" - -msgid "Search for an User ID override." -msgstr "" - -msgid "Modify an User ID override." -msgstr "" - -msgid "Rename the User ID override object" -msgstr "" - -msgid "Display information about an User ID override." -msgstr "" - -msgid "Add a new ID View." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" - -#, fuzzy -msgid "hosts" -msgstr "номи мизбон" - -msgid "Hosts to apply the ID View to" -msgstr "" - -#, fuzzy -msgid "hostgroups" -msgstr "Гуруҳҳо" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" - -msgid "Hosts that this ID View was applied to." -msgstr "" - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" - -msgid "Number of hosts the ID View was applied to:" -msgstr "" - -msgid "Delete an ID View." -msgstr "" - -msgid "Search for an ID View." -msgstr "" - -msgid "Modify an ID View." -msgstr "" - -msgid "Rename the ID View object" -msgstr "" - -msgid "Display information about an ID View." -msgstr "" - -msgid "Enumerate all the hosts the view applies to." -msgstr "" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" - -msgid "Hosts to clear (any) ID View from." -msgstr "" - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" - -msgid "Hosts that ID View was cleared from." -msgstr "" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" - -msgid "Dict of I18N messages" -msgstr "" - -msgid "Export plugin meta-data for the webUI." -msgstr "" - -msgid "Name of object to export" -msgstr "" - -msgid "Name of method to export" -msgstr "" - -msgid "Name of command to export" -msgstr "" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" - -msgid "Join an IPA domain" -msgstr "" - -msgid "The hostname to register as" -msgstr "" - -msgid "The IPA realm" -msgstr "" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "" - -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" - -msgid "Manage ticket policy for specific user" -msgstr "" - -msgid "Max life" -msgstr "" - -msgid "Maximum ticket life (seconds)" -msgstr "" - -msgid "Max renew" -msgstr "" - -msgid "Maximum renewable age (seconds)" -msgstr "" - -msgid "Modify Kerberos ticket policy." -msgstr "" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "" - -msgid "Display the current Kerberos ticket policy." -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," -"cn=accounts' --group-container='cn=groups,cn=accounts' " -"ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' --user-ignore-" -"objectclass=radiusprofile --user-ignore-" -"attribute=radiusgroupname ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -msgid "Migrate users and groups from DS to IPA." -msgstr "" - -#, fuzzy -msgid "LDAP URI" -msgstr "LDAP DN" - -msgid "LDAP URI of DS server to migrate from" -msgstr "" - -#, fuzzy -msgid "bind password" -msgstr "парол" - -msgid "Bind DN" -msgstr "" - -#, fuzzy -msgid "User container" -msgstr "Номи корбар" - -msgid "DN of container for users in DS relative to base DN" -msgstr "" - -msgid "Group container" -msgstr "" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "" - -msgid "User object class" -msgstr "" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "" - -msgid "Group object class" -msgstr "" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "" - -msgid "Ignore user object class" -msgstr "" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore user attribute" -msgstr "" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore group object class" -msgstr "" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "Ignore group attribute" -msgstr "" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "" - -msgid "Overwrite GID" -msgstr "" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" - -msgid "LDAP schema" -msgstr "" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" - -msgid "Continue" -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" - -msgid "Base DN" -msgstr "" - -msgid "Base DN on remote LDAP server" -msgstr "" - -msgid "Ignore compat plugin" -msgstr "" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" - -msgid "CA certificate" -msgstr "" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "" - -msgid "groups to exclude from migration" -msgstr "" - -msgid "users to exclude from migration" -msgstr "" - -msgid "Lists of objects migrated; categorized by type." -msgstr "" - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" - -msgid "False if migration mode was disabled." -msgstr "" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" - -msgid "Show environment variables." -msgstr "" - -msgid "Forward to server instead of running locally" -msgstr "" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "" - -msgid "Total number of variables env (>= count)" -msgstr "" - -msgid "Number of variables returned (<= total)" -msgstr "" - -msgid "Show all loaded plugins." -msgstr "" - -msgid "Dictionary mapping plugin names to bases" -msgstr "" - -msgid "Number of plugins loaded" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -#, fuzzy -msgid "Netgroup name" -msgstr "Номи корбар" - -#, fuzzy -msgid "Netgroup description" -msgstr "шарҳ" - -msgid "NIS domain name" -msgstr "" - -msgid "IPA unique ID" -msgstr "" - -#, fuzzy -msgid "Member netgroups" -msgstr "Гурӯҳи корбар" - -msgid "Indirect Member netgroups" -msgstr "" - -msgid "Member User" -msgstr "" - -#, fuzzy -msgid "Member Group" -msgstr "Гурӯҳи корбар" - -msgid "Member Host" -msgstr "" - -#, fuzzy -msgid "Member Hostgroup" -msgstr "Гурӯҳи корбар" - -msgid "Add a new netgroup." -msgstr "" - -msgid "Add members to a netgroup." -msgstr "" - -#, fuzzy -msgid "member netgroup" -msgstr "Гурӯҳи корбар" - -msgid "netgroups to add" -msgstr "" - -msgid "Delete a netgroup." -msgstr "" - -msgid "Search for a netgroup." -msgstr "" - -msgid "search for managed groups" -msgstr "" - -msgid "Search for netgroups with these member netgroups." -msgstr "" - -msgid "Search for netgroups without these member netgroups." -msgstr "" - -msgid "Search for netgroups with these member users." -msgstr "" - -msgid "Search for netgroups without these member users." -msgstr "" - -msgid "Search for netgroups with these member groups." -msgstr "" - -msgid "Search for netgroups without these member groups." -msgstr "" - -msgid "Search for netgroups with these member hosts." -msgstr "" - -msgid "Search for netgroups without these member hosts." -msgstr "" - -msgid "Search for netgroups with these member host groups." -msgstr "" - -msgid "Search for netgroups without these member host groups." -msgstr "" - -msgid "Search for netgroups with these member of netgroups." -msgstr "" - -msgid "Search for netgroups without these member of netgroups." -msgstr "" - -msgid "Modify a netgroup." -msgstr "" - -msgid "Remove members from a netgroup." -msgstr "" - -msgid "netgroups to remove" -msgstr "" - -msgid "Display information about a netgroup." -msgstr "" - -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" - -msgid "TOTP authentication Window" -msgstr "" - -msgid "TOTP authentication time variance (seconds)" -msgstr "" - -msgid "TOTP Synchronization Window" -msgstr "" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "" - -msgid "HOTP Authentication Window" -msgstr "" - -msgid "HOTP authentication skip-ahead" -msgstr "" - -msgid "HOTP Synchronization Window" -msgstr "" - -msgid "HOTP synchronization skip-ahead" -msgstr "" - -msgid "Modify OTP configuration options." -msgstr "" - -msgid "Show the current OTP configuration." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Manager" -msgstr "Диспетчер" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -#, fuzzy -msgid "Disabled" -msgstr "Фаъолшуда" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -#, fuzzy -msgid "Validity start" -msgstr "Саҳеҳият" - -msgid "First date/time the token can be used" -msgstr "" - -#, fuzzy -msgid "Validity end" -msgstr "Саҳеҳият" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -#, fuzzy -msgid "Serial" -msgstr "Рақами силсилавӣ" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -msgid "Add a new OTP token." -msgstr "" - -msgid "(deprecated)" -msgstr "" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -msgid "Delete an OTP token." -msgstr "" - -msgid "Search for OTP token." -msgstr "" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -msgid "Modify a OTP token." -msgstr "" - -msgid "Rename the OTP token object" -msgstr "" - -msgid "Display information about an OTP token." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "Set a user's password." -msgstr "" - -msgid "New Password" -msgstr "Пароли нав" - -#, fuzzy -msgid "Current Password" -msgstr "Пароли нав" - -msgid "OTP" -msgstr "" - -#, fuzzy -msgid "One Time Password" -msgstr "Пароли нав" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -"\n" -"Managed permissions\n" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -#, fuzzy -msgid "Permission name" -msgstr "Иҷозат" - -msgid "Granted rights" -msgstr "" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" - -#, fuzzy -msgid "Effective attributes" -msgstr "Аттрибутҳо" - -msgid "All attributes to which the permission applies" -msgstr "" - -#, fuzzy -msgid "Included attributes" -msgstr "Аттрибутҳо" - -msgid "User-specified attributes to which the permission applies" -msgstr "" - -#, fuzzy -msgid "Excluded attributes" -msgstr "Аттрибутҳо" - -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "" - -#, fuzzy -msgid "Default attributes" -msgstr "Аттрибутҳо" - -msgid "Attributes to which the permission applies by default" -msgstr "" - -msgid "Bind rule type" -msgstr "" - -msgid "Subtree to apply permissions to" -msgstr "" - -msgid "Extra target filter" -msgstr "" - -msgid "Raw target filter" -msgstr "" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" - -#, fuzzy -msgid "Target DN" -msgstr "Мақсад" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" - -#, fuzzy -msgid "Member of group" -msgstr "Гурӯҳи корбар" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "" - -msgid "User group to apply permissions to (sets target)" -msgstr "" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "" - -msgid "Deprecated; use extratargetfilter" -msgstr "" - -msgid "Deprecated; use ipapermlocation" -msgstr "" - -msgid "Deprecated; use ipapermright" -msgstr "" - -msgid "Granted to Privilege" -msgstr "" - -msgid "Indirect Member of roles" -msgstr "" - -msgid "Add a new permission." -msgstr "" - -msgid "Add members to a permission." -msgstr "" - -msgid "member privilege" -msgstr "" - -msgid "privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "" - -#, fuzzy -msgid "Permission flags" -msgstr "Иҷозатҳо" - -#, fuzzy -msgid "Delete a permission." -msgstr "Иҷозат" - -msgid "force delete of SYSTEM permissions" -msgstr "" - -msgid "Search for permissions." -msgstr "" - -#, fuzzy -msgid "Modify a permission." -msgstr "Иҷозат" - -msgid "Rename the permission object" -msgstr "" - -msgid "Remove members from a permission." -msgstr "" - -msgid "privileges to remove" -msgstr "" - -msgid "Display information about a permission." -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "Ping a remote server." -msgstr "" - -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "" - -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" - -#, fuzzy -msgid "Privilege name" -msgstr "номи файл" - -#, fuzzy -msgid "Privilege description" -msgstr "шарҳ" - -msgid "Granting privilege to roles" -msgstr "" - -msgid "Add a new privilege." -msgstr "" - -msgid "Add members to a privilege." -msgstr "" - -msgid "member role" -msgstr "" - -msgid "roles to add" -msgstr "" - -msgid "Add permissions to a privilege." -msgstr "" - -#, fuzzy -msgid "permission" -msgstr "Иҷозат" - -#, fuzzy -msgid "permissions" -msgstr "Иҷозатҳо" - -msgid "Number of permissions added" -msgstr "" - -#, fuzzy -msgid "Delete a privilege." -msgstr "Ҳамаро нест мекунед?" - -msgid "Search for privileges." -msgstr "" - -msgid "Modify a privilege." -msgstr "" - -msgid "Rename the privilege object" -msgstr "" - -msgid "Remove members from a privilege" -msgstr "" - -msgid "roles to remove" -msgstr "" - -msgid "Remove permissions from a privilege." -msgstr "" - -msgid "Number of permissions removed" -msgstr "" - -msgid "Display information about a privilege." -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Group" -msgstr "Гурӯҳ" - -msgid "Manage password policy for specific group" -msgstr "" - -msgid "Max lifetime (days)" -msgstr "" - -msgid "Maximum password lifetime (in days)" -msgstr "" - -msgid "Min lifetime (hours)" -msgstr "" - -msgid "Minimum password lifetime (in hours)" -msgstr "" - -msgid "History size" -msgstr "" - -msgid "Password history size" -msgstr "" - -msgid "Character classes" -msgstr "" - -msgid "Minimum number of character classes" -msgstr "" - -msgid "Min length" -msgstr "" - -msgid "Minimum length of password" -msgstr "" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "" - -msgid "Max failures" -msgstr "" - -msgid "Consecutive failures before lockout" -msgstr "" - -msgid "Failure reset interval" -msgstr "" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "" - -#, fuzzy -msgid "Lockout duration" -msgstr "Макон" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" - -msgid "Add a new group password policy." -msgstr "" - -msgid "Delete a group password policy." -msgstr "" - -msgid "Search for group password policies." -msgstr "" - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" - -msgid "Modify a group password policy." -msgstr "" - -msgid "Display information about password policy." -msgstr "" - -msgid "User" -msgstr "Корбар" - -msgid "Display effective policy for a specific user" -msgstr "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "RADIUS proxy server name" -msgstr "" - -msgid "A description of this RADIUS proxy server" -msgstr "" - -#, fuzzy -msgid "Server" -msgstr "Хидмат" - -msgid "The hostname or IP (with or without port)" -msgstr "" - -msgid "Secret" -msgstr "" - -msgid "The secret used to encrypt data" -msgstr "" - -msgid "Timeout" -msgstr "" - -msgid "The total timeout across all retries (in seconds)" -msgstr "" - -#, fuzzy -msgid "Retries" -msgstr "Кӯшиш" - -msgid "The number of times to retry authentication" -msgstr "" - -#, fuzzy -msgid "User attribute" -msgstr "Аттрибут" - -msgid "The username attribute on the user object" -msgstr "" - -msgid "Add a new RADIUS proxy server." -msgstr "" - -msgid "Delete a RADIUS proxy server." -msgstr "" - -msgid "Search for RADIUS proxy servers." -msgstr "" - -msgid "Modify a RADIUS proxy server." -msgstr "" - -msgid "Rename the RADIUS proxy server object" -msgstr "" - -msgid "Display information about a RADIUS proxy server." -msgstr "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Domain" -msgstr "" - -msgid "Add domain" -msgstr "" - -#, fuzzy -msgid "Delete domain" -msgstr "Ҳамаро нест мекунед?" - -msgid "Modify realm domains." -msgstr "" - -msgid "Force adding domain even if not in DNS" -msgstr "" - -msgid "Display the list of realm domains." -msgstr "" - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" - -#, fuzzy -msgid "Role name" -msgstr "Азнавномгузорӣ" - -msgid "A description of this role-group" -msgstr "" - -msgid "Privileges" -msgstr "" - -msgid "Member services" -msgstr "" - -msgid "Add a new role." -msgstr "" - -msgid "Add members to a role." -msgstr "" - -msgid "member service" -msgstr "" - -msgid "services to add" -msgstr "" - -msgid "Add privileges to a role." -msgstr "" - -msgid "privilege" -msgstr "" - -msgid "privileges" -msgstr "" - -msgid "Number of privileges added" -msgstr "" - -#, fuzzy -msgid "Delete a role." -msgstr "Ҳамаро нест мекунед?" - -msgid "Search for roles." -msgstr "" - -msgid "Modify a role." -msgstr "" - -msgid "Rename the role object" -msgstr "" - -msgid "Remove members from a role." -msgstr "" - -msgid "services to remove" -msgstr "" - -msgid "Remove privileges from a role." -msgstr "" - -msgid "Number of privileges removed" -msgstr "" - -msgid "Display information about a role." -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -#, fuzzy -msgid "Self-service name" -msgstr "Номи корбар" - -msgid "Attributes to which the permission applies." -msgstr "" - -msgid "Add a new self-service permission." -msgstr "" - -msgid "Delete a self-service permission." -msgstr "" - -msgid "Search for a self-service permission." -msgstr "" - -msgid "Modify a self-service permission." -msgstr "" - -msgid "Display information about a self-service permission." -msgstr "" - -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" - -msgid "SELinux User" -msgstr "" - -msgid "HBAC Rule" -msgstr "" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "" - -msgid "Create a new SELinux User Map." -msgstr "" - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "" - -msgid "Delete a SELinux User Map." -msgstr "" - -msgid "Disable an SELinux User Map rule." -msgstr "" - -msgid "Enable an SELinux User Map rule." -msgstr "" - -msgid "Search for SELinux User Maps." -msgstr "" - -msgid "Modify a SELinux User Map." -msgstr "" - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "" - -msgid "Display the properties of a SELinux User Map rule." -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -#, fuzzy -msgid "Service principal" -msgstr "Асосӣ" - -msgid "PAC type" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" - -msgid "Add a new IPA new service." -msgstr "" - -msgid "force principal name even if not in DNS" -msgstr "" - -msgid "Add hosts that can manage this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Delete an IPA service." -msgstr "" - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -msgid "Search for IPA services." -msgstr "" - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" - -msgid "Search for services with these managed by hosts." -msgstr "" - -msgid "Search for services without these managed by hosts." -msgstr "" - -msgid "Modify an existing IPA service." -msgstr "" - -msgid "Remove hosts that can manage this service." -msgstr "" - -msgid "Display information about an IPA service." -msgstr "" - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" - -#, fuzzy -msgid "Sudo Command" -msgstr "Фармонҳо" - -msgid "A description of this command" -msgstr "" - -msgid "Sudo Command Groups" -msgstr "" - -msgid "Create new Sudo Command." -msgstr "" - -msgid "Delete Sudo Command." -msgstr "" - -msgid "Search for Sudo Commands." -msgstr "" - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" - -msgid "Modify Sudo Command." -msgstr "" - -msgid "Display Sudo Command." -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "Sudo Command Group" -msgstr "" - -msgid "Commands" -msgstr "Фармонҳо" - -msgid "Member Sudo commands" -msgstr "" - -msgid "Create new Sudo Command Group." -msgstr "" - -msgid "Add members to Sudo Command Group." -msgstr "" - -msgid "member sudo command" -msgstr "" - -msgid "sudo commands to add" -msgstr "" - -msgid "Delete Sudo Command Group." -msgstr "" - -msgid "Search for Sudo Command Groups." -msgstr "" - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" - -msgid "Modify Sudo Command Group." -msgstr "" - -msgid "Remove members from Sudo Command Group." -msgstr "" - -msgid "sudo commands to remove" -msgstr "" - -msgid "Display Sudo Command Group." -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -#, fuzzy -msgid "NetBIOS name" -msgstr "Номи ACI" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -#, fuzzy -msgid "Domain name" -msgstr "Номи намоишӣ" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -#, fuzzy -msgid "Delete a trust." -msgstr "Ҳамаро нест мекунед?" - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -msgid "Search for trusts." -msgstr "" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -msgid "Display information about a trust." -msgstr "" - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "Ном" - -msgid "Last name" -msgstr "Насаб" - -#, fuzzy -msgid "Full name" -msgstr "Ном" - -msgid "Display name" -msgstr "Номи намоишӣ" - -msgid "Initials" -msgstr "Ному насаб" - -msgid "Kerberos principal" -msgstr "" - -msgid "Kerberos principal expiration" -msgstr "" - -msgid "Email address" -msgstr "" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "Шаҳр" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "Рамзи ZIP" - -#, fuzzy -msgid "Telephone Number" -msgstr "Рақами силсилавӣ" - -msgid "Mobile Telephone Number" -msgstr "" - -#, fuzzy -msgid "Pager Number" -msgstr "Рақами факс" - -msgid "Fax Number" -msgstr "Рақами факс" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "Вазифа" - -msgid "Car License" -msgstr "" - -msgid "Account disabled" -msgstr "" - -msgid "User authentication types" -msgstr "" - -msgid "Types of supported user authentication" -msgstr "" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -#, fuzzy -msgid "RADIUS proxy configuration" -msgstr "Ҷӯрсозӣ" - -msgid "RADIUS proxy username" -msgstr "" - -#, fuzzy -msgid "Department Number" -msgstr "Рақами силсилавӣ" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -msgid "Add a new user." -msgstr "" - -msgid "Don't create user private group" -msgstr "" - -#, fuzzy -msgid "Delete a user." -msgstr "Ҳамаро нест мекунед?" - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -msgid "Search for users." -msgstr "" - -msgid "Self" -msgstr "" - -msgid "Display user record for current Kerberos principal" -msgstr "" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -msgid "Search for users with these member of netgroups." -msgstr "" - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -msgid "Modify a user." -msgstr "" - -msgid "Rename the user object" -msgstr "" - -msgid "Display information about a user." -msgstr "" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "Command category" -msgstr "" - -msgid "Command category the rule applies to" -msgstr "" - -msgid "RunAs User category" -msgstr "" - -msgid "RunAs User category the rule applies to" -msgstr "" - -msgid "RunAs Group category" -msgstr "" - -msgid "RunAs Group category the rule applies to" -msgstr "" - -msgid "Sudo order" -msgstr "" - -msgid "integer to order the Sudo rules" -msgstr "" - -msgid "External User" -msgstr "" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -#, fuzzy -msgid "Host Masks" -msgstr "Номи мизбон" - -msgid "Sudo Allow Commands" -msgstr "" - -#, fuzzy -msgid "Sudo Deny Commands" -msgstr "Фармонҳо" - -msgid "Sudo Allow Command Groups" -msgstr "" - -msgid "Sudo Deny Command Groups" -msgstr "" - -msgid "RunAs Users" -msgstr "" - -msgid "Run as a user" -msgstr "" - -msgid "Groups of RunAs Users" -msgstr "" - -msgid "Run as any user within a specified group" -msgstr "" - -msgid "RunAs External User" -msgstr "" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -msgid "External Groups of RunAs Users" -msgstr "" - -msgid "External Groups of users that the command can run as" -msgstr "" - -#, fuzzy -msgid "RunAs Groups" -msgstr "Гуруҳҳо" - -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -msgid "RunAs External Group" -msgstr "" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -msgid "Sudo Option" -msgstr "" - -msgid "Create new Sudo Rule." -msgstr "" - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "member sudo command group" -msgstr "" - -msgid "sudo command groups to add" -msgstr "" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "" - -msgid "Add group for Sudo to execute as." -msgstr "" - -msgid "Add users and groups for Sudo to execute as." -msgstr "" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "" - -msgid "Delete Sudo Rule." -msgstr "" - -msgid "Disable a Sudo Rule." -msgstr "" - -msgid "Enable a Sudo Rule." -msgstr "" - -msgid "Search for Sudo Rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -msgid "Modify Sudo Rule." -msgstr "" - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "sudo command groups to remove" -msgstr "" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "Remove an option from Sudo Rule." -msgstr "" - -msgid "Remove group for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "Display Sudo Rule." -msgstr "Номи намоишӣ" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -#, fuzzy -msgid "ACL name" -msgstr "Номи ACI" - -msgid "Profile category" -msgstr "" - -msgid "Profile category the ACL applies to" -msgstr "" - -msgid "User category the ACL applies to" -msgstr "" - -msgid "Host category the ACL applies to" -msgstr "" - -msgid "Service category the ACL applies to" -msgstr "" - -msgid "Profiles" -msgstr "" - -msgid "Create a new CA ACL." -msgstr "" - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "" - -msgid "Add profiles to a CA ACL." -msgstr "" - -msgid "member Certificate Profile" -msgstr "" - -msgid "Certificate Profiles to add" -msgstr "" - -msgid "Add services to a CA ACL." -msgstr "" - -msgid "Add users and groups to a CA ACL." -msgstr "" - -msgid "Delete a CA ACL." -msgstr "" - -msgid "Disable a CA ACL." -msgstr "" - -msgid "Enable a CA ACL." -msgstr "" - -msgid "Search for CA ACLs." -msgstr "" - -msgid "Modify a CA ACL." -msgstr "" - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "" - -msgid "Remove profiles from a CA ACL." -msgstr "" - -msgid "Certificate Profiles to remove" -msgstr "" - -msgid "Remove services from a CA ACL." -msgstr "" - -msgid "Remove users and groups from a CA ACL." -msgstr "" - -msgid "Display the properties of a CA ACL." -msgstr "" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -#, fuzzy -msgid "Profile description" -msgstr "шарҳ" - -msgid "Brief description of this profile" -msgstr "" - -msgid "Store issued certificates" -msgstr "" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -msgid "Delete a Certificate Profile." -msgstr "" - -msgid "Search for Certificate Profiles." -msgstr "" - -msgid "Import a Certificate Profile." -msgstr "" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" - -msgid "Query current Domain Level." -msgstr "" - -msgid "Current domain level:" -msgstr "" - -msgid "Change current Domain Level." -msgstr "" - -msgid "Domain Level" -msgstr "" - -msgid "Add certificates to host entry" -msgstr "" - -msgid "Remove certificates from host entry" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "Fallback to AD DC LDAP" -msgstr "" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" - -msgid "Add to default group" -msgstr "" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" - -#, fuzzy -msgid "Search scope" -msgstr "Ҷустуҷӯ" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Target DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" - -msgid "Origin DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -#, fuzzy -msgid "Server name" -msgstr "Номи сервер" - -#, fuzzy -msgid "IPA server hostname" -msgstr "Сервери IPA" - -msgid "Managed suffix" -msgstr "" - -msgid "Min domain level" -msgstr "" - -msgid "Minimum domain level" -msgstr "" - -msgid "Max domain level" -msgstr "" - -msgid "Maximum domain level" -msgstr "" - -#, fuzzy -msgid "Delete IPA server." -msgstr "Сервери IPA" - -msgid "Search for IPA servers." -msgstr "" - -#, fuzzy -msgid "Show IPA server." -msgstr "Сервери IPA" - -msgid "Add new certificates to a service" -msgstr "" - -msgid "Remove certificates from a service" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -#, fuzzy -msgid "Allowed Target" -msgstr "Мақсад" - -msgid "Create a new service delegation rule." -msgstr "" - -msgid "Add member to a named service delegation rule." -msgstr "" - -#, fuzzy -msgid "member principal" -msgstr "Асосӣ" - -#, fuzzy -msgid "principal to add" -msgstr "Асосӣ" - -msgid "Add target to a named service delegation rule." -msgstr "" - -msgid "member service delegation target" -msgstr "" - -msgid "service delegation targets to add" -msgstr "" - -msgid "Delete service delegation." -msgstr "" - -msgid "Search for service delegations rule." -msgstr "" - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" - -msgid "Remove member from a named service delegation rule." -msgstr "" - -msgid "principal to remove" -msgstr "" - -msgid "Remove target from a named service delegation rule." -msgstr "" - -msgid "service delegation targets to remove" -msgstr "" - -msgid "Display information about a named service delegation rule." -msgstr "" - -msgid "Create a new service delegation target." -msgstr "" - -msgid "Add member to a named service delegation target." -msgstr "" - -msgid "Delete service delegation target." -msgstr "" - -msgid "Search for service delegation target." -msgstr "" - -msgid "Remove member from a named service delegation target." -msgstr "" - -msgid "Display information about a named service delegation target." -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" - -msgid "Activate a stage user." -msgstr "" - -msgid "Add a new stage user." -msgstr "" - -msgid "Create Stage user in from a delete user" -msgstr "" - -msgid "Delete a stage user." -msgstr "" - -msgid "Search for stage users." -msgstr "" - -msgid "Search for stage users with these member of groups." -msgstr "" - -msgid "Search for stage users without these member of groups." -msgstr "" - -msgid "Search for stage users with these member of netgroups." -msgstr "" - -msgid "Search for stage users without these member of netgroups." -msgstr "" - -msgid "Search for stage users with these member of roles." -msgstr "" - -msgid "Search for stage users without these member of roles." -msgstr "" - -msgid "Search for stage users with these member of HBAC rules." -msgstr "" - -msgid "Search for stage users without these member of HBAC rules." -msgstr "" - -msgid "Search for stage users with these member of sudo rules." -msgstr "" - -msgid "Search for stage users without these member of sudo rules." -msgstr "" - -msgid "Modify a stage user." -msgstr "" - -msgid "Rename the stage user object" -msgstr "" - -msgid "Display information about a stage user." -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" - -msgid "Segment name" -msgstr "" - -msgid "Arbitrary string identifying the segment" -msgstr "" - -msgid "Left node" -msgstr "" - -msgid "Left replication node - an IPA server" -msgstr "" - -msgid "Right node" -msgstr "" - -msgid "Right replication node - an IPA server" -msgstr "" - -msgid "Connectivity" -msgstr "" - -msgid "Direction of replication between left and right replication node" -msgstr "" - -#, fuzzy -msgid "Attributes to strip" -msgstr "Аттрибутҳо" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" - -#, fuzzy -msgid "Attributes to replicate" -msgstr "Аттрибутҳо" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" - -msgid "Attributes for total update" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" - -msgid "Session timeout" -msgstr "" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" - -msgid "Replication agreement enabled" -msgstr "" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" - -#, fuzzy -msgid "Suffix name" -msgstr "номи файл" - -msgid "LDAP suffix to be managed" -msgstr "" - -msgid "Add a new segment." -msgstr "" - -msgid "Delete a segment." -msgstr "" - -msgid "Search for topology segments." -msgstr "" - -msgid "Modify a segment." -msgstr "" - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" - -msgid "Initialize left node" -msgstr "" - -msgid "Initialize right node" -msgstr "" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "" - -#, fuzzy -msgid "Display a segment." -msgstr "Номи намоишӣ" - -msgid "Add a new topology suffix to be managed." -msgstr "" - -msgid "Delete a topology suffix." -msgstr "" - -msgid "Search for topology suffices." -msgstr "" - -msgid "Modify a topology suffix." -msgstr "" - -msgid "Show managed suffix." -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "Preserved user" -msgstr "" - -msgid "Add one or more certificates to the user entry" -msgstr "" - -msgid "Remove one or more certificates to the user entry" -msgstr "" - -msgid "Move deleted user into staged area" -msgstr "" - -msgid "Undelete a delete user account." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -#, fuzzy -msgid "Vault name" -msgstr "Насаб" - -#, fuzzy -msgid "Vault description" -msgstr "шарҳ" - -msgid "Vault type" -msgstr "" - -msgid "Salt" -msgstr "" - -msgid "Vault salt" -msgstr "" - -msgid "Public key" -msgstr "" - -msgid "Vault public key" -msgstr "" - -msgid "Owner users" -msgstr "" - -#, fuzzy -msgid "Owner groups" -msgstr "Гурӯҳи корбар" - -msgid "Owner services" -msgstr "" - -msgid "Failed owners" -msgstr "" - -#, fuzzy -msgid "Vault service" -msgstr "Хидмат" - -msgid "Shared vault" -msgstr "" - -msgid "Vault user" -msgstr "" - -msgid "Transport Certificate" -msgstr "" - -msgid "Service name of the service vault" -msgstr "" - -msgid "Username of the user vault" -msgstr "" - -msgid "Add members to a vault." -msgstr "" - -msgid "Add owners to a vault." -msgstr "" - -msgid "owner user" -msgstr "" - -#, fuzzy -msgid "owner group" -msgstr "Гурӯҳи корбар" - -#, fuzzy -msgid "owner service" -msgstr "Хидмат" - -msgid "Owners that could not be added" -msgstr "" - -msgid "Number of owners added" -msgstr "" - -msgid "Session key wrapped with transport certificate" -msgstr "" - -msgid "Vault data encrypted with session key" -msgstr "" - -msgid "Nonce" -msgstr "" - -#, fuzzy -msgid "Delete a vault." -msgstr "Ҳамаро нест мекунед?" - -msgid "Search for vaults." -msgstr "" - -msgid "List all service vaults" -msgstr "" - -msgid "List all user vaults" -msgstr "" - -msgid "Remove members from a vault." -msgstr "" - -msgid "Remove owners from a vault." -msgstr "" - -msgid "Owners that could not be removed" -msgstr "" - -msgid "Number of owners removed" -msgstr "" - -msgid "Display information about a vault." -msgstr "" - -#, fuzzy -msgid "Show vault configuration." -msgstr "Ҷӯрсозӣ" - -msgid "Output file to store the transport certificate" -msgstr "" - -msgid "Add owners to a vault container." -msgstr "" - -msgid "Delete a vault container." -msgstr "" - -msgid "Remove owners from a vault container." -msgstr "" - -msgid "Display information about a vault container." -msgstr "" - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "" - -#, fuzzy -msgid "Hostname (FQDN)" -msgstr "Номи мизбон" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Managed suffixes" -msgstr "" - -msgid "Check connection to remote IPA server." -msgstr "" - -#, fuzzy -msgid "Remote server name" -msgstr "Номи сервер" - -msgid "Remote IPA server hostname" -msgstr "" - -msgid "suffix" -msgstr "" - -msgid "Search for servers with these managed suffixes." -msgstr "" - -msgid "Search for servers without these managed suffixes." -msgstr "" - -msgid "Add a manager to the stage user entry" -msgstr "" - -msgid "Remove a manager to the stage user entry" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -msgid "Managed LDAP suffix DN" -msgstr "" - -msgid "Search for topology suffixes." -msgstr "" - -msgid "Add a manager to the user entry" -msgstr "" - -msgid "Remove a manager to the user entry" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Comma-separated list of attributes" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" - -msgid "DNS class" -msgstr "" - -msgid "Comma-separated list of raw A records" -msgstr "" - -msgid "Comma-separated list of raw AAAA records" -msgstr "" - -msgid "Comma-separated list of raw A6 records" -msgstr "" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "" - -msgid "Comma-separated list of raw APL records" -msgstr "" - -msgid "Comma-separated list of raw CERT records" -msgstr "" - -msgid "Comma-separated list of raw CNAME records" -msgstr "" - -msgid "Comma-separated list of raw DHCID records" -msgstr "" - -msgid "Comma-separated list of raw DLV records" -msgstr "" - -msgid "Comma-separated list of raw DNAME records" -msgstr "" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "" - -msgid "Comma-separated list of raw DS records" -msgstr "" - -msgid "Comma-separated list of raw HIP records" -msgstr "" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "" - -msgid "Comma-separated list of raw KEY records" -msgstr "" - -msgid "KEY Flags" -msgstr "" - -msgid "KEY Protocol" -msgstr "" - -msgid "Protocol" -msgstr "" - -msgid "KEY Algorithm" -msgstr "" - -msgid "KEY Public Key" -msgstr "" - -msgid "Public Key" -msgstr "" - -msgid "Comma-separated list of raw KX records" -msgstr "" - -msgid "Comma-separated list of raw LOC records" -msgstr "" - -msgid "Comma-separated list of raw MX records" -msgstr "" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "" - -msgid "Comma-separated list of raw NS records" -msgstr "" - -msgid "Comma-separated list of raw NSEC records" -msgstr "" - -msgid "NSEC Next Domain Name" -msgstr "" - -msgid "Next Domain Name" -msgstr "" - -msgid "NSEC Type Map" -msgstr "" - -#, fuzzy -msgid "Type Map" -msgstr "Намуд" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "" - -msgid "Comma-separated list of raw PTR records" -msgstr "" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "" - -msgid "RRSIG Type Covered" -msgstr "" - -msgid "Type Covered" -msgstr "" - -msgid "RRSIG Algorithm" -msgstr "" - -msgid "RRSIG Labels" -msgstr "" - -msgid "Labels" -msgstr "" - -msgid "RRSIG Original TTL" -msgstr "" - -msgid "Original TTL" -msgstr "" - -msgid "RRSIG Signature Expiration" -msgstr "" - -msgid "Signature Expiration" -msgstr "" - -msgid "RRSIG Signature Inception" -msgstr "" - -msgid "Signature Inception" -msgstr "" - -msgid "RRSIG Key Tag" -msgstr "" - -msgid "RRSIG Signer's Name" -msgstr "" - -#, fuzzy -msgid "Signer's Name" -msgstr "Номи сервер" - -msgid "RRSIG Signature" -msgstr "" - -msgid "Signature" -msgstr "" - -msgid "Comma-separated list of raw RP records" -msgstr "" - -msgid "Comma-separated list of raw SIG records" -msgstr "" - -msgid "SIG Type Covered" -msgstr "" - -msgid "SIG Algorithm" -msgstr "" - -msgid "SIG Labels" -msgstr "" - -msgid "SIG Original TTL" -msgstr "" - -msgid "SIG Signature Expiration" -msgstr "" - -msgid "SIG Signature Inception" -msgstr "" - -msgid "SIG Key Tag" -msgstr "" - -msgid "SIG Signer's Name" -msgstr "" - -msgid "SIG Signature" -msgstr "" - -msgid "Comma-separated list of raw SPF records" -msgstr "" - -msgid "Comma-separated list of raw SRV records" -msgstr "" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "" - -msgid "Comma-separated list of raw TA records" -msgstr "" - -msgid "Comma-separated list of raw TKEY records" -msgstr "" - -msgid "Comma-separated list of raw TSIG records" -msgstr "" - -msgid "Comma-separated list of raw TXT records" -msgstr "" - -msgid "SOA time to live" -msgstr "" - -msgid "SOA record time to live" -msgstr "" - -msgid "SOA class" -msgstr "" - -msgid "SOA record class" -msgstr "" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" - -msgid "Consume an entitlement." -msgstr "" - -msgid "Quantity" -msgstr "" - -msgid "Search for entitlement accounts." -msgstr "" - -msgid "Retrieve the entitlement certs." -msgstr "" - -msgid "Import an entitlement certificate." -msgstr "" - -msgid "UUID" -msgstr "" - -msgid "Enrollment UUID" -msgstr "" - -msgid "Register to the entitlement system." -msgstr "" - -msgid "Username" -msgstr "Номи корбар" - -msgid "Enrollment UUID (not implemented)" -msgstr "" - -msgid "Registration password" -msgstr "" - -msgid "Display current entitlements." -msgstr "" - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" - -msgid "comma-separated list of users to add" -msgstr "" - -msgid "comma-separated list of groups to add" -msgstr "" - -msgid "comma-separated list of users to remove" -msgstr "" - -msgid "comma-separated list of groups to remove" -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Source host category" -msgstr "" - -msgid "Source host category the rule applies to" -msgstr "" - -msgid "Source Hosts" -msgstr "" - -msgid "Source Host Groups" -msgstr "" - -msgid "comma-separated list of hosts to add" -msgstr "" - -msgid "comma-separated list of host groups to add" -msgstr "" - -msgid "comma-separated list of HBAC services to add" -msgstr "" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "" - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "" - -msgid "comma-separated list of hosts to remove" -msgstr "" - -msgid "comma-separated list of host groups to remove" -msgstr "" - -msgid "comma-separated list of HBAC services to remove" -msgstr "" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" - -msgid "Source host" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "comma-separated list of netgroups to add" -msgstr "" - -msgid "comma-separated list of netgroups to remove" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" - -msgid "Target members of a group" -msgstr "" - -msgid "User group to apply permissions to" -msgstr "" - -msgid "comma-separated list of privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI" -msgstr "" - -#, fuzzy -msgid "Permission type" -msgstr "Иҷозат" - -msgid "comma-separated list of privileges to remove" -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "comma-separated list of roles to add" -msgstr "" - -msgid "comma-separated list of permissions" -msgstr "" - -msgid "comma-separated list of roles to remove" -msgstr "" - -msgid "comma-separated list of privileges" -msgstr "" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "comma-separated list of sudo commands to add" -msgstr "" - -msgid "comma-separated list of sudo commands to remove" -msgstr "" - -msgid "Active directory domain administrator's password" -msgstr "" - -msgid "GECOS field" -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" - -msgid "comma-separated list of sudo command groups to add" -msgstr "" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "" - -msgid "Failed members" -msgstr "" - -msgid "Failed source hosts/hostgroups" -msgstr "" - -msgid "Failed hosts/hostgroups" -msgstr "" - -msgid "Failed users/groups" -msgstr "" - -msgid "Failed service/service groups" -msgstr "" - -msgid "Failed to remove" -msgstr "" - -msgid "Failed RunAs" -msgstr "" - -msgid "Failed RunAsGroup" -msgstr "" - -msgid "Failed profiles" -msgstr "" - -msgid "Failed CAs" -msgstr "" - -msgid "Failed member manager" -msgstr "" - -msgid "Failed managedby" -msgstr "" - -msgid "Failed allowed to retrieve keytab" -msgstr "" - -msgid "Failed allowed to create keytab" -msgstr "" - -msgid "Failed targets" -msgstr "" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "" - -msgid "an internal error has occurred" -msgstr "" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "" - -msgid "did not receive Kerberos credentials" -msgstr "" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "" - -msgid "No credentials cache found" -msgstr "" - -msgid "Ticket expired" -msgstr "" - -msgid "Credentials cache permissions incorrect" -msgstr "" - -msgid "Bad format in credentials cache" -msgstr "" - -msgid "Cannot resolve KDC for requested realm" -msgstr "" - -msgid "Session error" -msgstr "" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "" - -#, python-format -msgid "'%(name)s' is required" -msgstr "" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "" - msgid "Passwords do not match" msgstr "Паролҳо номувофиқанд" -msgid "Command not implemented" -msgstr "" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "" - -#, python-format -msgid "%(reason)s" -msgstr "" - -msgid "This entry already exists" -msgstr "" - -msgid "You must enroll a host in order to create a host service" -msgstr "" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" - -msgid "This command requires root access" -msgstr "" - -msgid "This is already a posix group" -msgstr "" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" - -msgid "This entry is already enabled" -msgstr "" - -msgid "This entry is already disabled" -msgstr "" - -msgid "This entry cannot be enabled or disabled" -msgstr "" - -msgid "This entry is not a member" -msgstr "" - -msgid "A group may not be a member of itself" -msgstr "" - -msgid "This entry is already a member" -msgstr "" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "" - -msgid "A group may not be added as a member of itself" -msgstr "" - -msgid "The default users group cannot be removed" -msgstr "" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "" - -msgid "A managed group cannot have a password policy." -msgstr "" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" - -msgid "This group already allows external members" -msgstr "" - -msgid "This group cannot be posix because it is external" -msgstr "" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "" - -msgid "change collided with another change" -msgstr "" - -msgid "no modifications to be performed" -msgstr "" - -#, fuzzy, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(info)s" - -msgid "limits exceeded for this query" -msgstr "" - -#, python-format -msgid "%(info)s" -msgstr "%(info)s" - -msgid "modifying primary key is not allowed" -msgstr "" - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "" - -msgid "Not allowed on non-leaf entry" -msgstr "" - -msgid "LDAP timeout" -msgstr "" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" - -msgid "Configured time limit exceeded" -msgstr "" - -msgid "Configured size limit exceeded" -msgstr "" - -msgid "Configured administrative server limit exceeded" -msgstr "" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "" - -#, fuzzy, python-format -msgid "Certificate format error: %(error)s" -msgstr "Хатогии синтаксисӣ: %(error)s" - -msgid "Already registered" -msgstr "Ааллакай қайд карда шуд" - -#, fuzzy -msgid "Not registered yet" -msgstr "Ааллакай қайд карда шуд" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" - -#, python-format -msgid "%(exception)s" -msgstr "" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" - -msgid "Additional instructions:" -msgstr "" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "" - -#, python-format -msgid "%(count)d variables" -msgstr "" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "" - -msgid "A dictionary representing an LDAP entry" -msgstr "" - -msgid "A list of LDAP entries" -msgstr "" - -msgid "All commands should at least have a result" -msgstr "" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "" - msgid "Passwords do not match!" msgstr "Паролҳо номувофиқанд!" -msgid "No matching entries found" -msgstr "" - -msgid "Topic or Command" -msgstr "" - -msgid "The topic or command name." -msgstr "" - -#, fuzzy -msgid "Topic commands:" -msgstr "Фармонҳо" - -msgid "To get command help, use:" -msgstr "" - -msgid " ipa --help" -msgstr "" - -#, fuzzy -msgid "Command name" -msgstr "Фармонҳо" - -msgid "Positional arguments" -msgstr "" - -#, python-format -msgid "Same as --%s" -msgstr "" - -msgid "Deprecated options" -msgstr "" - -msgid "No file to read" -msgstr "" - -msgid "Results are truncated, try a more specific search" -msgstr "" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" - -#, fuzzy, python-format -msgid "%(filename)s: file not found" -msgstr "Файли %(file)s пайдо нашуд." - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "any of the configured servers" -msgstr "" - -msgid "Exceeded number of tries to forward a request." -msgstr "" - -msgid "Filename is empty" -msgstr "" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "" - -msgid "empty DNS label" -msgstr "" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" - -msgid "single label {}s are not supported" -msgstr "" - -msgid "too many '@' characters" -msgstr "" - -msgid "cannot be longer that {} characters" -msgstr "" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "" - -msgid "not fully qualified" -msgstr "" - -msgid "invalid SSH public key" -msgstr "" - -msgid "options are not allowed" -msgstr "" - -msgid "invalid hostmask" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" - -msgid "invalid escape code in domain name" -msgstr "" - -msgid "domain name cannot be longer than 255 characters" -msgstr "" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "" - -msgid "invalid domain name" -msgstr "" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" - -msgid "invalid IP address format" -msgstr "" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" - -msgid "incorrect type" -msgstr "" - -msgid "Only one value is allowed" -msgstr "" - -msgid "this option is deprecated" -msgstr "" - -msgid "must be True or False" -msgstr "" - -msgid "must be an integer" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "" - -msgid "must be a decimal number" -msgstr "" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "" - -msgid "must be binary data" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "" - -msgid "must be a certificate" -msgstr "" - -msgid "must be a certificate signing request" -msgstr "" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" - -msgid "must be Unicode text" -msgstr "" - -msgid "Leading and trailing spaces are not allowed" -msgstr "" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "" - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "" - -#, python-format -msgid "must be '%(value)s'" -msgstr "" - -#, python-format -msgid "must be one of %(values)s" -msgstr "" - -msgid "must be datetime value" -msgstr "" - -msgid "does not match any of accepted formats: " -msgstr "" - -msgid "incomplete time value" -msgstr "" - -msgid "must be DNS name" -msgstr "" - -msgid "must be absolute" -msgstr "" - -msgid "must be relative" -msgstr "" - -msgid "must be dictionary" -msgstr "" - -msgid "must be Kerberos principal" -msgstr "" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "" - -msgid "Service principal is required" -msgstr "" - -msgid "must be at least 0" -msgstr "" - -msgid "invalid valid hex" -msgstr "" - -#, fuzzy -msgid "invalid serial number 0" -msgstr "Рақами силсилавӣ" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "" - -#, python-format -msgid "objectclass %s not found" -msgstr "" - -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "Failed to authenticate to CA REST API" -msgstr "" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "" - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -#, fuzzy -msgid "Automount Location" -msgstr "Макон" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, python-format -msgid "key named %(key)s already exists" -msgstr "" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -msgid "invalid Profile ID" -msgstr "" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -#, fuzzy -msgid "Profile configuration" -msgstr "Ҷӯрсозӣ" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "" - -msgid "Certificate profiles cannot be renamed" -msgstr "" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -msgid "Delegations" -msgstr "" - -#, fuzzy -msgid "Delegation" -msgstr "Нест кардан" - -#, fuzzy -msgid "ACI" -msgstr "ACIs" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "" - -#, fuzzy -msgid "" -"\n" -"DNS server configuration\n" -msgstr "Ҷӯрсозӣ" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -#, fuzzy -msgid "DNS server" -msgstr "Сервери IPA" - -msgid "DNS servers" -msgstr "" - -#, fuzzy -msgid "DNS Servers" -msgstr "Сервери IPA" - -#, fuzzy -msgid "DNS Server" -msgstr "Сервери IPA" - -#, fuzzy -msgid "DNS Server name" -msgstr "Номи сервер" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "" - -msgid "Search for DNS servers." -msgstr "" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "" - -msgid "IPA DNS Server is not installed" -msgstr "" - -msgid "Display configuration of a DNS server." -msgstr "" - -msgid "Add a new DNS server." -msgstr "" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "" - -msgid "Delete a DNS server" -msgstr "" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -msgid "groups" -msgstr "Гуруҳҳо" - -#, fuzzy -msgid "User Group" -msgstr "Гурӯҳи корбар" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "" - -msgid "privileged group" -msgstr "" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "" - -msgid "not allowed to modify user entries" -msgstr "" - -msgid "not allowed to modify group entries" -msgstr "" - -msgid "Not a managed group" -msgstr "" - -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -#, fuzzy -msgid "HBAC services" -msgstr "Хидмат" - -#, fuzzy -msgid "HBAC Services" -msgstr "Хидмат" - -#, fuzzy -msgid "HBAC Service" -msgstr "Хидмат" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "" - -#, fuzzy -msgid "HBAC service group" -msgstr "Гурӯҳи корбар" - -#, fuzzy -msgid "HBAC service groups" -msgstr "Гурӯҳи корбар" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -msgid "host groups" -msgstr "Гурӯҳи корбар" - -#, fuzzy -msgid "Host Group" -msgstr "Гурӯҳ" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "hostgroup" -msgstr "Гурӯҳи корбар" - -msgid "privileged hostgroup" -msgstr "" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -msgid "local domain range" -msgstr "" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -#, fuzzy -msgid "Auto private groups" -msgstr "Гурӯҳи корбар" - -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -#, fuzzy -msgid "" -"\n" -"IPA locations\n" -msgstr "Макон" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -#, fuzzy -msgid "location" -msgstr "Макон" - -#, fuzzy -msgid "locations" -msgstr "Макон" - -#, fuzzy -msgid "IPA Locations" -msgstr "Макон" - -#, fuzzy -msgid "IPA Location" -msgstr "Макон" - -#, fuzzy -msgid "Location name" -msgstr "Макон" - -msgid "IPA location name" -msgstr "" - -#, fuzzy -msgid "IPA Location description" -msgstr "шарҳ" - -#, fuzzy -msgid "Servers" -msgstr "Хидмат" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -msgid "Add a new IPA location." -msgstr "" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "" - -msgid "Delete an IPA location." -msgstr "" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "" - -msgid "IPA Server" -msgstr "Сервери IPA" - -msgid "Modify information about an IPA location." -msgstr "" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "" - -msgid "Search for IPA locations." -msgstr "" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "" - -msgid "Display information about an IPA location." -msgstr "" - -msgid "Servers in location" -msgstr "" - -#, fuzzy -msgid "netgroups" -msgstr "Гуруҳҳо" - -#, fuzzy -msgid "Netgroups" -msgstr "Гуруҳҳо" - -#, fuzzy -msgid "Netgroup" -msgstr "Гурӯҳи корбар" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "" - -msgid "One time password commands" -msgstr "" - -#, fuzzy -msgid "OTP configuration options" -msgstr "Ҷӯрсозӣ" - -#, fuzzy -msgid "OTP Configuration" -msgstr "Ҷӯрсозӣ" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" -msgstr "" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "" - -msgid "cannot be empty" -msgstr "" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -msgid "PKINIT status" -msgstr "" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "" - -#, fuzzy -msgid "invalid port number" -msgstr "Рақами силсилавӣ" - -msgid "RADIUS proxy server" -msgstr "" - -msgid "RADIUS proxy servers" -msgstr "" - -#, fuzzy -msgid "RADIUS Servers" -msgstr "Сервери IPA" - -#, fuzzy -msgid "RADIUS Server" -msgstr "Сервери IPA" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "Role" -msgstr "" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "" - -msgid "self service permission" -msgstr "" - -msgid "self service permissions" -msgstr "" - -#, fuzzy -msgid "Self Service Permissions" -msgstr "Иҷозатҳо" - -#, fuzzy -msgid "Self Service Permission" +msgid "Permission" msgstr "Иҷозат" -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "" +msgid "Permissions" +msgstr "Иҷозатҳо" -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "" +msgid "Policy" +msgstr "Сиёсат" -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "" - -#, fuzzy -msgid "" -"\n" -"IPA server roles\n" -msgstr "Сервери IPA" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -#, fuzzy -msgid "server role" -msgstr "Номи сервер" - -#, fuzzy -msgid "server roles" -msgstr "Номи сервер" - -#, fuzzy -msgid "IPA Server Roles" -msgstr "Сервери IPA" - -#, fuzzy -msgid "IPA Server Role" -msgstr "Сервери IPA" - -#, fuzzy -msgid "IPA server role name" -msgstr "Сервери IPA" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "" - -msgid "Include IPA master entries" -msgstr "" - -msgid "IPA role name" -msgstr "" - -#, fuzzy, python-brace-format -msgid "{role}: role not found" -msgstr "Файли %(file)s пайдо нашуд." - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -#, fuzzy -msgid "Member principals" +msgid "Principal" msgstr "Асосӣ" -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "" - -msgid "Add target to a named service delegation." -msgstr "" - -#, python-format -msgid "member %s" -msgstr "" - -msgid "Remove member from a named service delegation." -msgstr "" - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation rule" -msgstr "" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "" - -msgid "privileged service delegation target" -msgstr "" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -#, fuzzy -msgid "Subordinate id description" -msgstr "шарҳ" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -msgid "SubUID range size" -msgstr "" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -msgid "SubGID range size" -msgstr "" - -msgid "Subordinate group ID count" -msgstr "" - -#, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "" - -#, python-format -msgid "'%(dn)s is not a valid user" -msgstr "" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -msgid "Add a new subordinate id." -msgstr "" - -#, python-format -msgid "Added subordinate id \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Delete a subordinate id." -msgstr "Ҳамаро нест мекунед?" - -#, python-format -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "" - -msgid "Modify a subordinate id." -msgstr "" - -#, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "" - -msgid "Search for subordinate id." -msgstr "" - -#, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "" - -msgid "Display information about a subordinate id." -msgstr "" - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -#, fuzzy -msgid "sudo command" -msgstr "Фармонҳо" - -#, fuzzy -msgid "sudo commands" -msgstr "Фармонҳо" - -#, fuzzy -msgid "Sudo Commands" -msgstr "Фармонҳо" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "" - -msgid "sudo command groups" -msgstr "" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(value)s" -msgstr "" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"IPA servers\n" -msgstr "Сервери IPA" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -#, fuzzy -msgid "server" -msgstr "Сервери IPA" - -msgid "servers" -msgstr "" - -#, fuzzy -msgid "IPA Servers" -msgstr "Сервери IPA" - -#, fuzzy -msgid "Server location" -msgstr "Номи сервер" - -#, fuzzy -msgid "Service weight" -msgstr "Хидмат" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -msgid "Modify information about an IPA server." -msgstr "" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "" - -msgid "Server has already been deleted" -msgstr "" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, python-format -msgid "must be \"%s\"" -msgstr "" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -#, fuzzy -msgid "State" -msgstr "Ҳолат" - -#, fuzzy -msgid "Server state" -msgstr "Номи сервер" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "A list of ACI values" -msgstr "" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -#, fuzzy -msgid "ACI prefix is required" -msgstr "Префикси ACI" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Хатогии синтаксисӣ: %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "ACIs" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, fuzzy, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "Файли %(file)s пайдо нашуд." - -#, python-format -msgid "%s is not a valid attribute." -msgstr "" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -msgid "Indirect Member permissions" -msgstr "" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "" - -#, fuzzy -msgid "entry" -msgstr "Вуруд" - -msgid "entries" -msgstr "" - -msgid "Entry" -msgstr "Вуруд" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "" - -#, fuzzy, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "Файли %(file)s пайдо нашуд." - -#, fuzzy, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "Файли %(file)s пайдо нашуд." - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -msgid "No such attribute on this entry" -msgstr "" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -msgid "Unable to communicate with CMS" -msgstr "" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Permissions\n" -msgstr "Иҷозатҳо" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Managed permissions\n" -msgstr "Иҷозатҳо" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "must be enclosed in parentheses" -msgstr "" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "" - -#, python-format -msgid "Deprecated; use %s" -msgstr "" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" - -#, fuzzy, python-format -msgid "Entry %s not found" -msgstr "Файли %(file)s пайдо нашуд." - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -msgid "Bad search filter" -msgstr "" - -#, python-format -msgid "Entry %s does not exist" -msgstr "" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "" - -msgid "cannot delete managed permissions" -msgstr "" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "" - -msgid "cannot rename managed permissions" -msgstr "" - -msgid "not modifiable on managed permissions" -msgstr "" - -msgid "only available on managed permissions" -msgstr "" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -#, fuzzy -msgid "Name" -msgstr "Номи мизбон" - -#, fuzzy -msgid "Documentation" -msgstr "Макон" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -msgid "Help topic" -msgstr "" - -#, fuzzy -msgid "Version" -msgstr "Иҷозат" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "номи мизбон" - -msgid "Display information about a command." -msgstr "" - -msgid "Search for commands." -msgstr "" - -msgid "Return command defaults" -msgstr "" - -#, fuzzy, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "Файли %(file)s пайдо нашуд." - -msgid "Display information about a class." -msgstr "" - -msgid "Search for classes." -msgstr "" - -msgid "Display information about a help topic." -msgstr "" - -msgid "Search for help topics." -msgstr "" - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "Номи ACI" - -#, fuzzy -msgid "Confirm (password)" -msgstr "парол" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -msgid "Option group" -msgstr "" - -msgid "Sensitive" -msgstr "" - -msgid "Positional argument" -msgstr "" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command parameter." -msgstr "" - -msgid "Search command parameters." -msgstr "" - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "" - -msgid "Display information about a command output." -msgstr "" - -msgid "Search for command outputs." -msgstr "" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -msgid "Trust direction" -msgstr "" - -msgid "Trust type" -msgstr "" - -msgid "Trust status" -msgstr "" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "" - -msgid "missing base_id" -msgstr "" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "" - -#, fuzzy -msgid "trust configuration" -msgstr "Ҷӯрсозӣ" - -#, fuzzy -msgid "Global Trust Configuration" -msgstr "Ҷӯрсозӣ" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -msgid "Domain enabled" -msgstr "" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -msgid "not allowed to remotely add agent" -msgstr "" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -msgid "Host is not supported" -msgstr "" - -msgid "KRA service is not enabled" -msgstr "" - -msgid "Deleted vault container" -msgstr "" - -#, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "Vault configuration" -msgstr "Ҷӯрсозӣ" - -#, fuzzy -msgid "IPA KRA servers" -msgstr "Сервери IPA" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -msgid "Key wrapping algorithm" -msgstr "" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "" - -msgid "Retrieve data from a vault." -msgstr "" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -msgid "must be TRUE or FALSE" -msgstr "" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -#, fuzzy -msgid "Principal alias" -msgstr "Асосӣ" - -msgid "User password expiration" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -#, fuzzy -msgid "External IdP configuration" -msgstr "Ҷӯрсозӣ" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "" - -msgid "Certificate mapping data" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" - -#, fuzzy, python-format -msgid "manager %(manager)s not found" -msgstr "Файли %(file)s пайдо нашуд." - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "" - -msgid "Issuer" -msgstr "Диҳанда" - -msgid "Issuer of the certificate" -msgstr "" - -msgid "Subject" -msgstr "Мавзӯъ" - -msgid "Subject of the certificate" -msgstr "" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "" - -msgid "CA category the ACL applies to" -msgstr "" - -msgid "CAs" -msgstr "" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -msgid "users cannot be added when user category='all'" -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "" - -#, python-format -msgid "%i services added." -msgstr "" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -msgid "Remove CAs from a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "" - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -#, fuzzy -msgid "User logins" -msgstr "Номи корбар" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "must be at least 10" -msgstr "" - -#, fuzzy -msgid "configuration options" -msgstr "Ҷӯрсозӣ" - -msgid "Configuration" -msgstr "Ҷӯрсозӣ" - -msgid "Maximum hostname length" -msgstr "" - -msgid "Enable adding subids to new users" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -#, fuzzy -msgid "IPA CA servers" -msgstr "Сервери IPA" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -#, fuzzy -msgid "IPA DNS servers" -msgstr "Сервери IPA" - -msgid "IPA servers configured as domain name server" -msgstr "" - -#, fuzzy -msgid "Hidden IPA DNS servers" -msgstr "Сервери IPA" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -#, fuzzy -msgid "Setup SID configuration" -msgstr "Ҷӯрсозӣ" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -msgid "Add SIDs" -msgstr "" - -msgid "Add SIDs for existing users and groups" -msgstr "" - -msgid "NetBIOS name of the IPA domain" -msgstr "" - -msgid "Empty domain is not allowed" -msgstr "" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -msgid "not allowed to enable SID generation" -msgstr "" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -msgid "Failed to call DBus" -msgstr "" - -msgid "Configuration of SID failed. See details in the error log" -msgstr "" - -msgid "The group doesn't exist" -msgstr "" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "" - -msgid "SELinux user map default user not in order list" -msgstr "" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -msgid "invalid address format" -msgstr "" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -msgid "invalid domain-name: not fully qualified" -msgstr "" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, fuzzy, python-format -msgid "DNS zone %(zone)s not found" -msgstr "Файли %(file)s пайдо нашуд." - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, python-format -msgid "%s Record" -msgstr "" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -msgid "Invalid number of parts!" -msgstr "" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -msgid "Priority (order)" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "" - -#, fuzzy -msgid "Managedby permission" -msgstr "Иҷозат" - -msgid "cannot be used when a zone is specified" -msgstr "" - -msgid "Only one zone type is allowed per zone name" -msgstr "" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -msgid "Default time to live" -msgstr "" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -#, fuzzy -msgid "" -msgstr "Сервери IPA" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "" - -msgid "is required" -msgstr "" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, python-format -msgid "Found '%(value)s'" -msgstr "" - -#, fuzzy, python-format -msgid "Host '%(host)s' not found" -msgstr "Файли %(file)s пайдо нашуд." - -#, fuzzy -msgid "DNS configuration options" -msgstr "Ҷӯрсозӣ" - -#, fuzzy -msgid "DNS Global Configuration" -msgstr "Ҷӯрсозӣ" - -#, fuzzy -msgid "IPA DNS version" -msgstr "Сервери IPA" - -msgid "List of IPA masters configured as DNS servers" -msgstr "" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -#, fuzzy -msgid "IPA DNS records" -msgstr "Сервери IPA" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -msgid "Result of the command" -msgstr "" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -msgid "The deny type has been deprecated." -msgstr "" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#, fuzzy -msgid "Host" -msgstr "Номи мизбон" - -msgid "Base-64 encoded host certificate" -msgstr "" - -msgid "Serial Number" -msgstr "Рақами силсилавӣ" - -#, fuzzy -msgid "Serial Number (hex)" -msgstr "Рақами силсилавӣ" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" - -msgid "Invalid URI: not an https scheme" -msgstr "" - -msgid "Invalid URI: missing netloc" -msgstr "" - -msgid "Identity Provider server" -msgstr "" - -msgid "Identity Provider servers" -msgstr "" - -#, fuzzy -msgid "Identity Provider server name" -msgstr "Номи сервер" - -#, fuzzy -msgid "Authorization URI" -msgstr "Ҷӯрсозӣ" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -msgid "Token URI" -msgstr "" - -msgid "Token endpoint" -msgstr "" - -#, fuzzy -msgid "User info URI" -msgstr "Номи корбар" - -msgid "User information endpoint" -msgstr "" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -msgid "Client identifier" -msgstr "" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -msgid "Add a new Identity Provider server." -msgstr "" - -#, python-format -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "Ташкилот" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -msgid "Base URL" -msgstr "" - -msgid "Base URL for IdP provider templates" -msgstr "" - -msgid "unknown provider" -msgstr "" - -msgid "value is missing" -msgstr "" - -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "" - -#, fuzzy -msgid "Delete an Identity Provider server." -msgstr "Сервери IPA" - -#, python-format -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "Modify an Identity Provider server." -msgstr "" - -#, python-format -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "" - -msgid "Search for Identity Provider servers." -msgstr "" - -#, python-format -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "" - -msgid "Display information about an Identity Provider server." -msgstr "" - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Apply" -msgstr "" - -msgid "Rebuild auto membership" -msgstr "" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -#, fuzzy -msgid "Actions" -msgstr "Макон" - -msgid "Add" -msgstr "Илова кардан" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -msgid "Direct Membership" -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -msgid "No entries." -msgstr "" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -msgid "Remove" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -msgid "Show Results" -msgstr "" - -msgid "Authentication indicators" -msgstr "" - -msgid "Authentication indicator" -msgstr "" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -msgid "RADIUS" -msgstr "" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "External Identity Provider" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "" - -msgid "Activate" -msgstr "" - -msgid "Add and Add Another" -msgstr "" - -msgid "Add and Close" -msgstr "" - -msgid "Add and Edit" -msgstr "" - -msgid "Add Many" -msgstr "" - -msgid "Back" -msgstr "" - -msgid "Cancel" -msgstr "Бекор кардан" - -msgid "Clear" -msgstr "" - -msgid "Clear all fields on the page." -msgstr "" - -msgid "Close" -msgstr "Пӯшидан" - -#, fuzzy -msgid "Disable" -msgstr "Дастрас" - -msgid "Download" -msgstr "" - -msgid "Download certificate as PEM formatted file." -msgstr "" - -msgid "Edit" -msgstr "" - -#, fuzzy -msgid "Enable" -msgstr "Фаъолшуда" - -msgid "Find" -msgstr "Ёфтан" - -msgid "Get" -msgstr "Гирифтан" - -msgid "Hide" -msgstr "" - -msgid "Issue" -msgstr "Барориш" - -msgid "Match" -msgstr "" - -msgid "Match users according to certificate." -msgstr "" - -msgid "Migrate" -msgstr "" - -msgid "OK" -msgstr "Хуб" - -msgid "Refresh" -msgstr "" - -msgid "Reload current settings from the server." -msgstr "" - -msgid "Delete" -msgstr "Нест кардан" - -msgid "Remove hold" -msgstr "" +msgid "Rename" +msgstr "Азнавномгузорӣ" msgid "Reset" msgstr "Бозсозӣ" -#, fuzzy -msgid "Reset Password" -msgstr "Пароли нав" - -msgid "Reset Password and Log in" -msgstr "" - msgid "Restore" msgstr "Барқароркунӣ" msgid "Retry" msgstr "Кӯшиш" -msgid "Revert" -msgstr "" - -msgid "Revoke" -msgstr "" - -msgid "Save" -msgstr "" - -#, fuzzy -msgid "Set" -msgstr "Гирифтан" - -msgid "Show" -msgstr "" - -msgid "Stage" -msgstr "" - -msgid "Update" -msgstr "Ҷадидсозӣ" - -msgid "View" -msgstr "Намоиш" - -#, fuzzy -msgid "Customization" -msgstr "Ҷӯрсозӣ" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "" - -msgid "Expand All" -msgstr "" - -msgid "General" -msgstr "Умумӣ" - -#, fuzzy -msgid "Identity Settings" -msgstr "Танзимотҳо" - -#, fuzzy -msgid "Record Settings" -msgstr "Танзимотҳо" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -msgid "Back to Top" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -msgid "Add custom value" -msgstr "" - -msgid "Available" -msgstr "Дастрас" - -msgid "Some operations failed." -msgstr "" - -msgid "Operations Error" -msgstr "" - -#, fuzzy -msgid "Confirmation" -msgstr "Ҷӯрсозӣ" - -msgid "Custom value" -msgstr "" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -msgid "Unsaved Changes" -msgstr "" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "" - -msgid "Hide details" -msgstr "" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -#, fuzzy -msgid "Redirection" -msgstr "шарҳ" - -msgid "Select entries to be removed." -msgstr "" - -msgid "Result" -msgstr "" - -msgid "Show details" -msgstr "" - -msgid "Success" -msgstr "" - -msgid "Validation error" -msgstr "" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "" - -#, fuzzy -msgid "HTTP Error" -msgstr "Хатогӣ" - -msgid "Internal Error" -msgstr "" - -#, fuzzy -msgid "IPA Error" -msgstr "Хатогӣ" - -msgid "No response" -msgstr "" - -msgid "Unknown Error" -msgstr "" - -msgid "URL" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -msgid "Settings" -msgstr "Танзимотҳо" - msgid "Search" msgstr "Ҷустуҷӯ" -msgid "False" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Allowed to create keytab" -msgstr "" - -msgid "Allowed to retrieve keytab" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Add Kerberos Principal Alias" -msgstr "" - -msgid "New kerberos principal alias" -msgstr "" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "" - -msgid "Authenticating" -msgstr "" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -msgid "Kerberos Principal you entered is expired" -msgstr "" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -msgid "Log In Using Certificate" -msgstr "" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "" - -msgid "Synchronizing" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -msgid "number of passwords" -msgstr "" - -msgid "seconds" -msgstr "" - -#, fuzzy -msgid "Migrating" -msgstr "Ҷӯрсозӣ" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -msgid "Password migration was not successful" -msgstr "" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -msgid "Password migration was successful" -msgstr "" - -msgid "Attribute" -msgstr "Аттрибут" - -msgid "Add delegation" -msgstr "" - -msgid "Remove delegations" -msgstr "" - -#, fuzzy -msgid "Add permission" -msgstr "Иҷозат" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove permissions" -msgstr "Иҷозатҳо" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -msgid "Remove privileges" -msgstr "" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Role Settings" -msgstr "Танзимотҳо" - -msgid "Add role" -msgstr "" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -msgid "Remove roles" -msgstr "" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -msgid "Add self service permission" -msgstr "" - -msgid "Remove self service permissions" -msgstr "" - -msgid "Add rule" -msgstr "" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to change default group?" -msgstr "" - -msgid "Default host group" -msgstr "" - -#, fuzzy -msgid "Default user group" -msgstr "Гурӯҳи корбар" - -msgid "Exclusive" -msgstr "" - -#, fuzzy -msgid "Expression" -msgstr "Иҷозат" - -msgid "Host group rule" -msgstr "" - -msgid "Host group rules" -msgstr "" - -msgid "Inclusive" -msgstr "" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "User group rule" -msgstr "Гурӯҳи корбар" - -#, fuzzy -msgid "User group rules" -msgstr "Гурӯҳи корбар" - -msgid "Add automount key" -msgstr "" - -msgid "Remove automount keys" -msgstr "" - -msgid "Add automount location" -msgstr "" - -msgid "Automount Location Settings" -msgstr "" - -msgid "Remove automount locations" -msgstr "" - -msgid "Add automount map" -msgstr "" - -#, fuzzy -msgid "Map Type" -msgstr "Намуд" - -msgid "Direct" -msgstr "" - -msgid "Indirect" -msgstr "" - -msgid "Remove automount maps" -msgstr "" - -msgid "Add certificate authority" -msgstr "" - -msgid "Remove certificate authorities" -msgstr "" - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "All" -msgstr "Иҷозат додан" - -msgid "Any CA" -msgstr "" - -msgid "Any Host" -msgstr "" - -#, fuzzy -msgid "Any Service" -msgstr "Хидмат" - -msgid "Any Profile" -msgstr "" - -msgid "Anyone" -msgstr "" - -msgid "Rule status" -msgstr "" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -msgid "Remove CA ACLs" -msgstr "" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -msgid "Specified CAs" -msgstr "" - -msgid "Specified Hosts and Groups" -msgstr "" - -msgid "Specified Profiles" -msgstr "" - -msgid "Specified Services and Groups" -msgstr "" - -msgid "Specified Users and Groups" -msgstr "" - -msgid "Permitted to have certificates issued" -msgstr "" - -msgid "Remove certificate profiles" -msgstr "" - -msgid "AA Compromise" -msgstr "" - -#, fuzzy -msgid "Add principal" -msgstr "Асосӣ" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" - -msgid "Certificates" -msgstr "" - -msgid "Certificate Hold" -msgstr "" - -msgid "Cessation of Operation" -msgstr "" - -#, fuzzy -msgid "Common Name" -msgstr "Номи мизбон" - -msgid "the certificate with serial number " -msgstr "" - -msgid "Expires On" -msgstr "" - -#, fuzzy -msgid "Issued on from" -msgstr "Додашудааст ба:" - -#, fuzzy -msgid "Issued on to" -msgstr "Додашудааст ба:" - -#, fuzzy -msgid "Maximum serial number" -msgstr "Рақами силсилавӣ" - -#, fuzzy -msgid "Minimum serial number" -msgstr "Рақами силсилавӣ" - -msgid "Revoked on from" -msgstr "" - -msgid "Revoked on to" -msgstr "" - -msgid "Valid not after from" -msgstr "" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -msgid "Fingerprints" -msgstr "" - -msgid "Get Certificate" -msgstr "" - -msgid "Certificate Hold Removed" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -msgid "Issue new certificate" -msgstr "" - -msgid "Issued By" -msgstr "Додааст:" - -#, fuzzy -msgid "Issued On" -msgstr "Додааст:" - -msgid "Issued To" -msgstr "Додашудааст ба:" - -msgid "Key Compromise" -msgstr "" - -msgid "No Valid Certificate" -msgstr "" - -msgid "New Certificate" -msgstr "" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -msgid "Note" -msgstr "Эзоҳ" - -#, fuzzy -msgid "Organizational Unit" -msgstr "Ташкилот" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -msgid "Privilege Withdrawn" -msgstr "" - -msgid "Reason for Revocation" -msgstr "" - -msgid "Remove certificate hold" -msgstr "" - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -msgid "Certificate requested" -msgstr "" - -msgid "Revoke certificate" -msgstr "" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -msgid "Certificate Revoked" -msgstr "" - -msgid "REVOKED" -msgstr "" - -msgid "SHA1 Fingerprint" -msgstr "" - -msgid "SHA256 Fingerprint" -msgstr "" - -msgid "Status" -msgstr "Ҳолат" - -msgid "Superseded" -msgstr "" - -msgid "Unspecified" -msgstr "" - -msgid "Valid Certificate Present" -msgstr "" - -msgid "Valid from" -msgstr "" - -#, fuzzy -msgid "Valid to" -msgstr "Саҳеҳият" - -msgid "Validity" -msgstr "Саҳеҳият" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -msgid "View Certificate" -msgstr "" - -msgid "Certificate Data" -msgstr "" - -msgid "Certificate For Match" -msgstr "" - -msgid "Certificate Mapping Match" -msgstr "" - -msgid "Matched Users" -msgstr "" - -#, fuzzy -msgid "User Login" -msgstr "Номи корбар" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -#, fuzzy -msgid "Configuration string" -msgstr "Ҷӯрсозӣ" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -msgid "Remove certificate mapping data" -msgstr "" - -msgid "Issuer and subject" -msgstr "" - -msgid "Remove certificate identity mapping rules" -msgstr "" - -#, fuzzy -msgid "Group Options" -msgstr "Гуруҳҳо" - -#, fuzzy -msgid "Search Options" -msgstr "Ҷустуҷӯ" - -msgid "SELinux Options" -msgstr "" - -msgid "Server Options" -msgstr "" - -#, fuzzy -msgid "Service Options" -msgstr "Хидмат" - -#, fuzzy -msgid "User Options" -msgstr "Шарҳ" - -msgid "Forward first" -msgstr "" - -msgid "Forwarding disabled" -msgstr "" - -msgid "Forward only" -msgstr "" - -msgid "Options" -msgstr "" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -msgid "Other Record Types" -msgstr "" - -msgid "Address not valid, can't redirect" -msgstr "" - -msgid "Create dns record" -msgstr "" - -msgid "Creating record." -msgstr "" - -msgid "Record creation failed." -msgstr "" - -msgid "Checking if record exists." -msgstr "" - -msgid "Record not found." -msgstr "" - -msgid "Redirection to PTR record" -msgstr "" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -msgid "Target reverse zone not found." -msgstr "" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -msgid "Standard Record Types" -msgstr "" - -msgid "Records for DNS Zone" -msgstr "" - -msgid "Record Type" -msgstr "" - -msgid "Add DNS zone" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -#, fuzzy -msgid "DNS Zone Settings" -msgstr "Танзимотҳо" - -msgid "Remove DNS zones" -msgstr "" - -#, fuzzy -msgid "Remove Permission" -msgstr "Иҷозат" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Level" -msgstr "" - -msgid "Set Domain Level" -msgstr "" - -#, fuzzy -msgid "Add user group" -msgstr "Гурӯҳи корбар" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Group Settings" -msgstr "Танзимотҳо" - -msgid "External" -msgstr "" - -msgid "Groups" -msgstr "Гуруҳҳо" - -msgid "Group categories" -msgstr "" - -msgid "Change to external group" -msgstr "" - -msgid "Change to POSIX group" -msgstr "" - -msgid "Non-POSIX" -msgstr "" - -msgid "POSIX" -msgstr "" - -#, fuzzy -msgid "Remove user groups" -msgstr "Гурӯҳи корбар" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Group Type" -msgstr "Гурӯҳ" - -msgid "Add HBAC rule" -msgstr "" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -msgid "Accessing" -msgstr "" - -msgid "Remove HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Via Service" -msgstr "Хидмат" - -msgid "Who" -msgstr "" - -msgid "Add HBAC service" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -msgid "Remove HBAC services" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -msgid "Add HBAC service group" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -msgid "Remove HBAC service groups" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -msgid "Access Denied" -msgstr "" - -msgid "Access Granted" -msgstr "" - -msgid "Include Disabled" -msgstr "" - -#, fuzzy -msgid "Include Enabled" -msgstr "Фаъолшуда" - -msgid "HBAC Test" -msgstr "" - -msgid "Matched" -msgstr "" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" - -msgid "Rules" -msgstr "" - -msgid "Run Test" -msgstr "" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -msgid "Unmatched" -msgstr "" - -msgid "Add host" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -msgid "Host Certificate" -msgstr "" - -msgid "Host Name" -msgstr "Номи мизбон" - -msgid "Delete Key, Unprovision" -msgstr "" - -#, fuzzy -msgid "Host Settings" -msgstr "Танзимотҳо" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -#, fuzzy -msgid "Generate OTP" -msgstr "Умумӣ" - -#, fuzzy -msgid "Generated OTP" -msgstr "Умумӣ" - -msgid "Kerberos Key" -msgstr "" - -msgid "Kerberos Key Not Present" -msgstr "" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -#, fuzzy -msgid "One-Time Password" -msgstr "Пароли нав" - -msgid "One-Time Password Not Present" -msgstr "" - -msgid "One-Time Password Present" -msgstr "" - -#, fuzzy -msgid "Reset OTP" -msgstr "Бозсозӣ" - -msgid "Reset One-Time Password" -msgstr "" - -msgid "Set OTP" -msgstr "" - -msgid "OTP set" -msgstr "" - -#, fuzzy -msgid "Set One-Time Password" -msgstr "Пароли нав" - -msgid "Remove hosts" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -msgid "Unprovision" -msgstr "" - -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -msgid "Add host group" -msgstr "" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -msgid "Host Group Settings" -msgstr "" - -msgid "Remove host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -#, fuzzy -msgid "Identity provider details" -msgstr "Танзимотҳо" - -#, fuzzy -msgid "Verify secret" -msgstr "Пароли нав" - -msgid "User to override" -msgstr "" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -msgid "Profile" -msgstr "" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -msgid "Enter trusted group name." -msgstr "" - -msgid "Add ID view" -msgstr "" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -msgid "Apply to host groups" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -msgid "Remove ID views" -msgstr "" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -msgid "Un-apply from host groups" -msgstr "" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -msgid "Un-apply" -msgstr "" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -msgid "Add netgroup" -msgstr "" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Netgroup Settings" -msgstr "Танзимотҳо" - -msgid "Remove netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "" - -msgid "Add OTP token" -msgstr "" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -#, fuzzy -msgid "Configure your token" -msgstr "Ҷӯрсозӣ" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -#, fuzzy -msgid "OTP Token Settings" -msgstr "Танзимотҳо" - -msgid "Disable token" -msgstr "" - -#, fuzzy -msgid "Enable token" -msgstr "Фаъолшуда" - -msgid "Remove OTP tokens" -msgstr "" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "" - -#, fuzzy -msgid "Show configuration uri" -msgstr "Ҷӯрсозӣ" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -#, fuzzy -msgid "Add Custom Attribute" -msgstr "Аттрибут" - -#, fuzzy -msgid "Permission settings" -msgstr "Иҷозатҳо" - -#, fuzzy -msgid "Attribute breakdown" -msgstr "Аттрибут" - -#, fuzzy -msgid "Privilege Settings" -msgstr "Танзимотҳо" - -msgid "Public key:" -msgstr "" - -msgid "Set public key" -msgstr "" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -#, fuzzy -msgid "Add password policy" -msgstr "Пароли LDAP" - -#, fuzzy -msgid "Password Policy" -msgstr "Парол" - -msgid "Remove password policies" -msgstr "" - -msgid "Add ID range" -msgstr "" - -#, fuzzy -msgid "Range Settings" -msgstr "Танзимотҳо" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -msgid "Domain SID" -msgstr "" - -msgid "Secondary RID base" -msgstr "" - -msgid "Remove ID ranges" -msgstr "" - -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -msgid "Detect" -msgstr "" - -#, fuzzy -msgid "Local domain" -msgstr "Макон" - -msgid "IPA trust" -msgstr "" - -msgid "Active Directory winsync" -msgstr "" - -msgid "Add RADIUS server" -msgstr "" - -msgid "RADIUS Proxy Server Settings" -msgstr "" - -msgid "Remove RADIUS servers" -msgstr "" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -#, fuzzy -msgid "Force Update" -msgstr "Ҷадидсозӣ" - -msgid "Add SELinux user map" -msgstr "" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Server Roles" -msgstr "Номи сервер" - -#, fuzzy -msgid "Server Role" -msgstr "Номи сервер" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -#, fuzzy -msgid "Delete Server" -msgstr "Нест кардан" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -#, fuzzy -msgid "Add service" -msgstr "Хидмат" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -msgid "Service Certificate" -msgstr "" - -#, fuzzy -msgid "Service Settings" -msgstr "Танзимотҳо" - -#, fuzzy -msgid "Provisioning" -msgstr "Иҷозат" - -msgid "Remove services" -msgstr "" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -msgid "Unprovisioning service" -msgstr "" - -msgid "Service unprovisioned" -msgstr "" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "" - -msgid "SSH public keys" -msgstr "" - -msgid "SSH public key:" -msgstr "" - -msgid "Set SSH key" -msgstr "" - -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" - -msgid "Add stage user" -msgstr "" - -msgid "Stage users" -msgstr "" - -msgid "Preserved users" -msgstr "" - -msgid "Remove preserved users" -msgstr "" - -msgid "Remove stage users" -msgstr "" - -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -msgid "User categories" -msgstr "" - -#, fuzzy -msgid "Add subid" -msgstr "Хидмат" - -msgid "Assigned subids" -msgstr "" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -msgid "Add sudo command" -msgstr "" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -msgid "Remove sudo commands" -msgstr "" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -msgid "Add sudo command group" -msgstr "" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -msgid "Remove sudo command groups" -msgstr "" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -msgid "Add sudo rule" -msgstr "" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "Иҷозат додан" - -#, fuzzy -msgid "Any Command" -msgstr "Фармонҳо" - -#, fuzzy -msgid "Any Group" -msgstr "Гурӯҳ" - -#, fuzzy -msgid "Run Commands" -msgstr "Фармонҳо" - -msgid "Deny" -msgstr "" - -msgid "Access this host" -msgstr "" - -msgid "Option added" -msgstr "" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -msgid "Remove sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -msgid "Specified Commands and Groups" -msgstr "" - -msgid "Specified Groups" -msgstr "" - -msgid "Remove sudo options" -msgstr "" - -msgid "Autogenerated" -msgstr "" - -msgid "Segment details" -msgstr "" - -#, fuzzy -msgid "Replication configuration" -msgstr "Ҷӯрсозӣ" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -msgid "Account" -msgstr "" - -msgid "Add trust" -msgstr "" - -msgid "Administrative account" -msgstr "" - -msgid "SID blocklists" -msgstr "" - -#, fuzzy -msgid "Trust Settings" -msgstr "Танзимотҳо" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -#, fuzzy -msgid "Pre-shared password" -msgstr "Пароли LDAP" - -msgid "Remove trusts" -msgstr "" - -msgid "Remove domains" -msgstr "" - -msgid "Alternative UPN suffixes" -msgstr "" - -msgid "User attributes for SMB services" -msgstr "" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - -#, fuzzy -msgid "Account Settings" -msgstr "Танзимотҳо" - -#, fuzzy -msgid "Account Status" -msgstr "Ҳолат" - -msgid "Active users" -msgstr "" - -msgid "Add user" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -msgid "Auto assign subordinate ids" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "" - -#, fuzzy -msgid "Contact Settings" -msgstr "Танзимотҳо" - -#, fuzzy -msgid "Delete mode" -msgstr "Нест кардан" - -msgid "Employee Information" -msgstr "" - -msgid "Error changing account status" -msgstr "" - -msgid "Password expiration" -msgstr "" - -msgid "Mailing Address" -msgstr "" - -msgid "Misc. Information" -msgstr "" - -#, fuzzy -msgid "delete" -msgstr "Нест кардан" - -msgid "preserve" -msgstr "" - -msgid "No private group" -msgstr "" - -msgid "Remove users" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Unlock" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -msgid "Members" -msgstr "" - -msgid "My User Vaults" -msgstr "" - -msgid "Owners" -msgstr "" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Service Vaults" -msgstr "Хидмат" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -msgid "Vault Type" -msgstr "" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -#, fuzzy -msgid "User Vaults" -msgstr "Номи корбар" - -msgid "Current password is required" -msgstr "" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -#, fuzzy -msgid "First OTP" -msgstr "Ном" - -#, fuzzy -msgid "New password is required" -msgstr "Пароли нав" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Password change complete" -msgstr "" - -msgid "Your password has expired. Please enter a new password." -msgstr "" - -#, fuzzy -msgid "Passwords must match" -msgstr "Паролҳо номувофиқанд" - -msgid "Password reset was not successful." -msgstr "" - -msgid "Reset your password." -msgstr "" - -msgid "Second OTP" -msgstr "" - -#, fuzzy -msgid "Verify Password" -msgstr "Пароли нав" - -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -msgid "Some entries were not deleted" -msgstr "" - -msgid "Quick Links" -msgstr "" - msgid "Select All" msgstr "Интихоби ҳама" -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" +msgid "Serial Number" +msgstr "Рақами силсилавӣ" -#, fuzzy -msgid "Unselect All" -msgstr "Интихоби ҳама" +msgid "Serial number" +msgstr "Рақами силсилавӣ" -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" +msgid "Server Name" +msgstr "Номи сервер" -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "" - -msgid "Audit" -msgstr "Назорат" - -msgid "Authentication" -msgstr "" - -msgid "Automount" -msgstr "" - -msgid "DNS" -msgstr "" - -msgid "Host-Based Access Control" -msgstr "" - -msgid "Identity" -msgstr "" - -#, fuzzy -msgid "Network Services" +msgid "Service" msgstr "Хидмат" -msgid "Policy" -msgstr "Сиёсат" +msgid "Settings" +msgstr "Танзимотҳо" -msgid "Role-Based Access Control" -msgstr "" +msgid "Status" +msgstr "Ҳолат" -msgid "Subordinate IDs" -msgstr "" +msgid "Subject" +msgstr "Мавзӯъ" msgid "Sudo" msgstr "Sudo" -msgid "Topology" -msgstr "" - -msgid "True" -msgstr "" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -#, fuzzy -msgid "First" -msgstr "Ном" - -#, fuzzy -msgid "Last" -msgstr "Насаб" - -msgid "Next" -msgstr "" - -msgid "Page" -msgstr "" - -msgid "Prev" -msgstr "" - -msgid "Undo" -msgstr "" - -msgid "Undo this change." -msgstr "" - -msgid "Undo All" -msgstr "" - -msgid "Undo all changes in this field." -msgstr "" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -msgid "Must be a decimal number" -msgstr "" - -#, fuzzy -msgid "Format error" -msgstr "хатогии хониш\n" - -msgid "Must be an integer" -msgstr "" - -msgid "Not a valid IP address" -msgstr "" - -msgid "Not a valid IPv4 address" -msgstr "" - -msgid "Not a valid IPv6 address" -msgstr "" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -#, fuzzy -msgid "Parse error" -msgstr "хатогии хониш\n" - -msgid "Must be a positive number" -msgstr "" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "" - -msgid "Required field" -msgstr "" - -msgid "Unsupported value" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -msgid "RADIUS max renew" -msgstr "" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -msgid "IdP max life" -msgstr "" - -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "" - -msgid "IdP max renew" -msgstr "" - -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -msgid "Delete Class of Service entry" -msgstr "" - -msgid "Modify Class of Service entry" -msgstr "" - -msgid "Display Class of Service entry" -msgstr "" - -msgid "Search for Class of Service entry" -msgstr "" - -#, fuzzy -msgid "password policy" -msgstr "парол" - -#, fuzzy -msgid "password policies" -msgstr "парол" - -#, fuzzy -msgid "Password Policies" -msgstr "Парол" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -msgid "User check" -msgstr "Номи корбар" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "Grace login limit" -msgstr "" - -msgid "Number of LDAP authentications allowed after expiration" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "" - -msgid "cannot delete global password policy" -msgstr "" - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, fuzzy, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "Файли %(file)s пайдо нашуд." - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "" - -msgid "Malformed principal" -msgstr "" - -msgid "{} is required by the IPA master" -msgstr "" - -#, fuzzy -msgid "service" -msgstr "Хидмат" - -#, fuzzy -msgid "services" -msgstr "Хидмат" - -msgid "Service principal alias" -msgstr "" - -msgid "Base-64 encoded service certificate" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -msgid "Add a new IPA service." -msgstr "" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -msgid "Add a new SMB service." -msgstr "" - -msgid "SMB service NetBIOS name" -msgstr "" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to a service" -msgstr "" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from a service" -msgstr "" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "" - -msgid "givenname is required" -msgstr "" - -msgid "sn is required" -msgstr "" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -#, fuzzy -msgid "ID View" -msgstr "Намоиш" - -msgid "system ID View" -msgstr "" - -#, fuzzy -msgid "ID Views" -msgstr "Намоиш" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -msgid "Hosts the view applies to" -msgstr "" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -msgid "Add a new ID override." -msgstr "" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "" - -msgid "Delete an ID override." -msgstr "" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "" - -msgid "Modify an ID override." -msgstr "" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -msgid "Search for an ID override." -msgstr "" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "" - -msgid "Display information about an ID override." -msgstr "" - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -msgid "Certificate Authority" -msgstr "" - -msgid "Certificate Authorities" -msgstr "" - -msgid "Name for referencing the CA" -msgstr "" - -msgid "Description of the purpose of the CA" -msgstr "" - -msgid "Authority ID" -msgstr "" - -msgid "Dogtag Authority ID" -msgstr "" - -#, fuzzy -msgid "Subject DN" -msgstr "Мавзӯъ" - -msgid "Subject Distinguished Name" -msgstr "" - -#, fuzzy -msgid "Issuer DN" -msgstr "Диҳанда" - -msgid "Issuer Distinguished Name" -msgstr "" - -msgid "Base-64 encoded certificate." -msgstr "" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -#, fuzzy -msgid "RSN Version" -msgstr "Иҷозат" - -#, fuzzy -msgid "Random Serial Number Version" -msgstr "Рақами силсилавӣ" - -msgid "Search for CAs." -msgstr "" - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "Display the properties of a CA." -msgstr "" - -msgid "Create a CA." -msgstr "" - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -#, fuzzy -msgid "Modify CA configuration." -msgstr "Ҷӯрсозӣ" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "" - -msgid "IPA CA cannot be disabled" -msgstr "" - -#, fuzzy -msgid "Enable a CA." -msgstr "Фаъолшуда" - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Subject email address" -msgstr "" - -#, fuzzy -msgid "Subject DNS name" -msgstr "Мавзӯъ" - -msgid "Subject X.400 address" -msgstr "" - -msgid "Subject directory name" -msgstr "" - -msgid "Subject EDI Party name" -msgstr "" - -#, fuzzy -msgid "Subject URI" -msgstr "Мавзӯъ" - -msgid "Subject IP Address" -msgstr "" - -#, fuzzy -msgid "Subject OID" -msgstr "Мавзӯъ" - -#, fuzzy -msgid "Subject UPN" -msgstr "Мавзӯъ" - -msgid "Subject Kerberos principal name" -msgstr "" - -#, fuzzy -msgid "Subject Other Name" -msgstr "Номи сервер" - -#, fuzzy -msgid "Serial number (hex)" -msgstr "Рақами силсилавӣ" - -msgid "Request status" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - #, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -msgid "'add' option" -msgstr "" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -msgid "7 is not a valid revocation reason" -msgstr "" - -msgid "Status of the certificate" -msgstr "" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -#, fuzzy -msgid "Sudo Rule" -msgstr "Sudo" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "" - -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" - -msgid "users" -msgstr "" - -#, fuzzy -msgid "command" -msgstr "Фармонҳо" +msgid "Syntax Error: %(error)s" +msgstr "Хатогии синтаксисӣ: %(error)s" -#, fuzzy -msgid "commands" -msgstr "Фармонҳо" +msgid "Target" +msgstr "Мақсад" -msgid "runAs user" -msgstr "" +msgid "Type" +msgstr "Намуд" -msgid "runAs users" -msgstr "" +msgid "Update" +msgstr "Ҷадидсозӣ" -msgid "group runAs" -msgstr "" +msgid "User" +msgstr "Корбар" -#, fuzzy -msgid "runAs groups" +msgid "User group" msgstr "Гурӯҳи корбар" -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "" +msgid "User name" +msgstr "Номи корбар" -msgid "commands cannot be added when command category='all'" -msgstr "" +msgid "Username" +msgstr "Номи корбар" -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" +msgid "Validity" +msgstr "Саҳеҳият" -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" +msgid "View" +msgstr "Намоиш" -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" +msgid "ZIP" +msgstr "Рамзи ZIP" -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" +msgid "description" +msgstr "шарҳ" -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "" +msgid "filename" +msgstr "номи файл" -msgid "Default group for new users is not POSIX" -msgstr "" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Preserved user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "%s: user is already preserved" -msgstr "" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -msgid "Time now" -msgstr "" - -msgid "Password grace count" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "" - -msgid "Remove principal alias from the user entry" -msgstr "" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -msgid "must be enabled only on a single master" -msgstr "" - -msgid "Request must be a dict" -msgstr "" - -msgid "Request is missing \"method\"" -msgstr "" - -msgid "Request is missing \"params\"" -msgstr "" - -msgid "params must be a list" -msgstr "" - -msgid "params must contain [args, options]" -msgstr "" - -msgid "params[0] (aka args) must be a list" -msgstr "" - -msgid "params[1] (aka options) must be a dict" -msgstr "" - -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" - -msgid "CIFS server denied your credentials" -msgstr "" - -msgid "communication with CIFS server was unsuccessful" -msgstr "" - -msgid "AD domain controller" -msgstr "" - -msgid "unsupported functional level" -msgstr "" - -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" - -msgid "Cannot find specified domain or server name" -msgstr "" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" - -msgid "At least the domain or IP address should be specified" -msgstr "" - -#, python-format -msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" -msgstr "" - -msgid "no trusted domain is configured" -msgstr "" - -msgid "domain is not configured" -msgstr "" - -msgid "SID is not valid" -msgstr "" - -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "" - -msgid "SID does not match any trusted domain" -msgstr "" - -msgid "Trust setup" -msgstr "" - -msgid "Our domain is not configured" -msgstr "" - -msgid "No trusted domain is not configured" -msgstr "" - -msgid "trusted domain object" -msgstr "" - -msgid "domain is not trusted" -msgstr "" - -msgid "no trusted domain matched the specified flat name" -msgstr "" - -msgid "trusted domain object not found" -msgstr "" - -msgid "Object does not belong to a trusted domain" -msgstr "" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "" - -msgid "Ambiguous search, user domain was not specified" -msgstr "" - -msgid "Trusted domain did not return a unique object" -msgstr "" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "" - -msgid "trusted domain user not found" -msgstr "" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "" - -msgid "CIFS credentials object" -msgstr "" - -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "" - -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" - -#, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" - -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" - -#, fuzzy -msgid "Credentials" -msgstr "Ному насаб" - -msgid "Missing credentials for cross-forest communication" -msgstr "" - -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" - -#, python-format -msgid "must equal %r" -msgstr "" - -msgid "Hello world" -msgstr "" - -#, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "" - -msgid "must be at least 1" -msgstr "" - -msgid "Out of memory\n" -msgstr "Берун аз хотира \n" - -msgid "Warning unrecognized encryption type.\n" -msgstr "" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -msgid "Out of memory!?\n" -msgstr "Аз хотира берун шуд!?\n" - -msgid "Enctype comparison failed!\n" -msgstr "" - -#, fuzzy -msgid "Password is too long!\n" -msgstr "Паролҳо номувофиқанд!" - -msgid "Failed to create random key!\n" -msgstr "" - -msgid "Failed to create key!\n" -msgstr "" - -msgid "Bad or unsupported salt type.\n" -msgstr "" +msgid "hostname" +msgstr "номи мизбон" #, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" +msgid "out of memory\n" +msgstr "берун аз хотира\n" -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" +msgid "password" +msgstr "парол" -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" +#, c-format +msgid "read error\n" +msgstr "хатогии хониш\n" diff --git a/po/tr.po b/po/tr.po index 1f1d0d832..d439df15c 100644 --- a/po/tr.po +++ b/po/tr.po @@ -18,5482 +18,226 @@ msgstr "" "Plural-Forms: nplurals=2; plural=n != 1;\n" "X-Generator: Weblate 4.2.1\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "" - -#, c-format -msgid "out of memory\n" -msgstr "" - -#, c-format -msgid "read error\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Removing principal %s\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "" - -#, c-format -msgid "principal not found\n" -msgstr "" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -msgid "realm not found\n" -msgstr "%s nesne sınıfı bulunamadı" - -msgid "Print debugging information" -msgstr "" - -msgid "Debugging output" +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" msgstr "" +"\n" +" Yeni bir sunucu ekleyin:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" - -#, fuzzy -msgid "Kerberos Service Principal Name" -msgstr "Hizmet yetkilisi gereklidir" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "" - -msgid "Remove all principals in this realm" -msgstr "" - -msgid "Realm name" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "" - -#, c-format -msgid "Out of memory \n" -msgstr "" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "" - -msgid "Simple bind failed\n" -msgstr "" - -msgid "SASL Bind failed\n" -msgstr "" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "" - -#, c-format -msgid "Timeout exceeded." -msgstr "" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "" - -#, c-format -msgid "Missing reply control!\n" -msgstr "" - -#, c-format -msgid "Out of Memory!\n" -msgstr "" - -#, c-format -msgid "Failed to create control!\n" -msgstr "" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "" - -msgid "Failed to decode control reply!\n" -msgstr "" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "Parolalar eşleşmiyor!" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "" - -msgid "Output only on errors" -msgstr "" - -msgid "Output debug info" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "" - -#, fuzzy -msgid "Server Name" -msgstr "Sunucu adı" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" msgstr "" +"\n" +" Grup üyeliğini yönetme yeteneği veren bir izin ekleyin:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" msgstr "" +"\n" +" Kullanıcıların oluşturulmasına izin veren bir izin ekleyin:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgid "Encryption types to request" -msgstr "" - -msgid "Comma separated encryption types list" -msgstr "" - -msgid "Show the list of permitted encryption types and exit" -msgstr "" - -msgid "Permitted Encryption Types" -msgstr "" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" - -msgid "LDAP DN" -msgstr "" - -msgid "DN to bind as if not using kerberos" -msgstr "" - -msgid "LDAP password" -msgstr "" - -msgid "password to use if not using kerberos" -msgstr "" - -msgid "Prompt for LDAP password" -msgstr "" - -#, fuzzy -msgid "Path to the IPA CA certificate" -msgstr "bir sertifika olmalı" - -#, fuzzy -msgid "IPA CA certificate" -msgstr "bir sertifika olmalı" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -msgid "Enter LDAP password" -msgstr "" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "" - -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" - -#, c-format -msgid "Discovered server %s\n" -msgstr "" - -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "" - -#, c-format -msgid "Using provided server %s\n" -msgstr "" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "" - -msgid "New Principal Password" -msgstr "" - -msgid "Verify Principal Password" -msgstr "" - -#, c-format msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" msgstr "" +"\n" +" Parolayı değiştirin:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" -#, fuzzy, c-format -msgid "Invalid Service Principal Name\n" -msgstr "Hizmet yetkilisi gereklidir" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" - -#, c-format msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" msgstr "" +"\n" +" Bir yapılandırmayı silin:\n" +" ipa radiusproxy-del MyRADIUS\n" -#, c-format -msgid "Failed to open Keytab\n" -msgstr "" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" - -#, c-format -msgid "Failed to create key material\n" -msgstr "" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "" - -#, c-format -msgid "Out of memory!\n" -msgstr "" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "" - -#, c-format -msgid "Out of memory!" -msgstr "" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "" - -#, c-format -msgid "No values for %s" -msgstr "" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "" - -#, fuzzy, c-format -msgid "Host is already joined.\n" -msgstr "Bu girdi zaten etkin" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" - -#, c-format -msgid "json_dumps() failed\n" -msgstr "" - -#, c-format msgid "" -"JSON-RPC request:\n" -"%s\n" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" msgstr "" -"JSON-RPC isteği:\n" -"%s\n" +"\n" +" Yapılandırmayı inceleyin:\n" +" ipa radiusproxy-show MyRADIUS\n" -#, fuzzy, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "" -"JSON-RPC isteği:\n" -"%s\n" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#, fuzzy, c-format msgid "" -"JSON-RPC response:\n" -"%s\n" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" msgstr "" -"JSON-RPC isteği:\n" -"%s\n" +"\n" +" Girdileri \"example.com\" dizgesini içeren tüm sunucuları bulun:\n" +" ipa radiusproxy-find example.com\n" -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" - -#, c-format msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" msgstr "" +"\n" +"* Bir izin okuma, yazma, ekleme, silme, arama veya karşılaştırma erişimi " +"verir.\n" +"* Bir ayrıcalık, benzer izinleri birleştirir (örneğin, bir kullanıcı " +"eklemek\n" +" için gereken tüm izinler).\n" +"* Bir rol kullanıcılara, gruplara, ana makinelere veya ana makine " +"gruplarına\n" +" bir dizi ayrıcalık verir.\n" -#, c-format -msgid "fork() failed\n" +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" msgstr "" +"\n" +"Bir izin, hakların ayrıntılı şekilde tayin edilmesini sağlar. İzin, 389-ds\n" +"Erişim Denetim Kuralı veya talimatı (ACI) etrafında insan tarafından\n" +"okunabilir bir sarmalayıcıdır.\n" +"Bir izin, kullanıcı ekleme, grup değiştirme vb. gibi belirli bir görevi\n" +"gerçekleştirme hakkı verir.\n" -#, c-format -msgid "ipa-getkeytab not found\n" +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" msgstr "" +"\n" +"Bir izin birkaç farklı bölümden oluşur:\n" +"\n" +"1. İznin adı.\n" +"2. İznin hedefi.\n" +"3. İzin tarafından verilen haklar.\n" -#, fuzzy, c-format -msgid "ipa-getkeytab has bad permissions?\n" +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" +"\n" +"Bir izin başka izinler içeremez.\n" + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" +"\n" +"Ek olarak, aşağıdaki kolaylık seçenekleri vardır.\n" +"Bu seçeneklerden birinin ayarlanması, ilgili nitelik(ler)i ayarlayacaktır.\n" +"1. type: bir nesne türü (user, group, vs.); alt ağacı ve hedef filtreyi " +"ayarlar.\n" +"2. memberof: bir grubun üyelerine uygula; hedef filtreyi ayarlar\n" +"3. targetgroup: belirli bir grubu değiştirmek için izin ver (örneğin, grup\n" +" üyeliğini yönetme hakları vermek); hedefi ayarlar.\n" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" +"\n" +"Yönetilen bir iznin silinmesine veya yeniden adlandırılmasına ve hedefinin\n" +"değiştirilmesine izin verilmez.\n" + +msgid "" +"\n" +"EXAMPLES:\n" +msgstr "" +"\n" +"ÖRNEKLER:\n" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" +"\n" +"IPA, krb5 OTP kimlik doğrulamaları için harici bir RADIUS vekil\n" +"sunucusunun kullanılmasını destekler. Bu, üçüncü taraf kimlik doğrulama\n" +"hizmetleriyle birleşme sırasında büyük bir esneklik sağlar.\n" + +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" +"\n" +"Kerberos PKINIT özellik durumu bildirim araçları.\n" +"\n" +"Kerberos PKINIT etkinleştirilen veya devre dışı bırakılan IPA yöneticilerini " +"bildir\n" +"\n" +"ÖRNEKLER:\n" +" Tüm yöneticilerde PKINIT durumunu listele:\n" +" ipa pkinit-status\n" +"\n" +" `ipa.example.com` üzerinde PKINIT durumunu denetle:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" PKINIT devre dışı bırakılan tüm IPA yöneticilerini listele:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"PKINIT desteği hakkında daha fazla bilgi için:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" +"\n" +"RADIUS Vekil Sunucularını yönetin.\n" + +msgid "" +"\n" +"Managed permissions\n" msgstr "" "\n" "Yönetilen izinler\n" -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "" - -#, c-format -msgid "child exited with %d\n" -msgstr "" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "" - -#, fuzzy, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "Kerberos kimlik bilgileri alınmadı" - -#, fuzzy, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "Kimlik bilgileri önbelleğinde bozuk biçim" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "" - -msgid "Quiet mode. Only errors are displayed." -msgstr "" - -msgid "Unenroll this host from IPA server" -msgstr "" - -msgid "Hostname of this server" -msgstr "" - -msgid "hostname" -msgstr "" - -#, fuzzy -msgid "IPA Server to use" -msgstr "IPA sunucusu ana makine adı" - -msgid "Specifies where to store keytab information." -msgstr "" - -msgid "filename" -msgstr "" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" - -msgid "LDAP password (if not using Kerberos)" -msgstr "" - -msgid "password" -msgstr "" - -msgid "LDAP basedn" -msgstr "" - -msgid "basedn" -msgstr "" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "" - -#, fuzzy -msgid "Failed to add" -msgstr "Okunacak dosya yok" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" - -msgid "Unrevoked" -msgstr "" - -msgid "Error" -msgstr "" - -msgid "Input filename" -msgstr "" - -msgid "File to load the certificate from." -msgstr "" - -msgid "cannot specify both raw certificate and file" -msgstr "" - -msgid "Input file" -msgstr "" - -msgid "File to load the certificate from" -msgstr "" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "" - -msgid "Split DNS record to parts" -msgstr "" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "" - -msgid "DNS resource record type" -msgstr "" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "" - -msgid "No option to modify specific record provided." -msgstr "" - -msgid "Current DNS record contents:\n" -msgstr "" - -#, fuzzy, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -msgstr[1] "" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" - -msgid "No option to delete specific record provided." -msgstr "" - -msgid "Delete all?" -msgstr "" - -#, fuzzy, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "Server will check DNS forwarder(s)." -msgstr "" - -msgid "This may take some time, please wait ..." -msgstr "" - -msgid "DNS forwarder" -msgstr "" - -msgid "file to store DNS records in nsupdate format" -msgstr "" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "" - -msgid "Servers details:" -msgstr "" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "" - -msgid "Topology is disconnected" -msgstr "" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -#, fuzzy -msgid "Maximum number of agreements per replica" -msgstr "Döndürülen en fazla girdi sayısı (0 sınırsızdır)" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "" - -#, fuzzy -msgid "Delete a user" -msgstr "Bir ağ grubunu sil." - -msgid "preserve and no-preserve cannot be both set" -msgstr "" - -msgid "maps not connected to /etc/auto.master:" -msgstr "" - -msgid "Import automount files for a specific location." -msgstr "" - -msgid "Master file" -msgstr "" - -msgid "Automount master file." -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" - -#, fuzzy, python-format -msgid "File %(file)s not found" -msgstr "%(filename)s: dosya bulunamadı" - -#, fuzzy, python-format -msgid "key %(key)s already exists" -msgstr "Bu girdi zaten var" - -#, fuzzy, python-format -msgid "map %(map)s already exists" -msgstr "Bu girdi zaten var" - -msgid "Imported maps:" -msgstr "" - -#, python-format -msgid "Added %(map)s" -msgstr "" - -msgid "Imported keys:" -msgstr "" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "" - -msgid "Ignored keys:" -msgstr "" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "" - -msgid "Duplicate maps skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(map)s" -msgstr "" - -msgid "Duplicate keys skipped:" -msgstr "" - -#, python-format -msgid "Skipped %(key)s" -msgstr "" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" - -msgid "Synchronize an OTP token." -msgstr "" - -msgid "User ID" -msgstr "" - -msgid "Password" -msgstr "" - -msgid "First Code" -msgstr "" - -msgid "Second Code" -msgstr "" - -msgid "Token ID" -msgstr "" - -msgid "python-yubico is not installed." -msgstr "" - -msgid "" -"\n" -"YubiKey Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" - -msgid "" -"\n" -"EXAMPLES:\n" -msgstr "" -"\n" -"ÖRNEKLER:\n" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "Add a new YubiKey OTP token." -msgstr "" - -msgid "YubiKey slot" -msgstr "" - -msgid "No free YubiKey slot!" -msgstr "" - -#, fuzzy, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "geçersiz '%(name)s': %(error)s" - -#, fuzzy, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "'%(uri)s' adresine bağlanamıyor: %(error)s" - -msgid "Invalid credentials" -msgstr "" - -msgid "Create a new vault." -msgstr "" - -msgid "Vault password" -msgstr "" - -msgid "File containing the vault password" -msgstr "" - -msgid "File containing the vault public key" -msgstr "" - -msgid "Password can be specified only for symmetric vault" -msgstr "" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "" - -msgid "Password specified multiple times" -msgstr "" - -msgid "Public key specified multiple times" -msgstr "" - -#, fuzzy -msgid "Missing vault public key" -msgstr "geçersiz SSH genel anahtarı" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "" - -#, fuzzy -msgid "Modify a vault." -msgstr "Bir ağ grubunu değiştir." - -msgid "Change password" -msgstr "" - -msgid "Old vault password" -msgstr "" - -msgid "File containing the old vault password" -msgstr "" - -msgid "New vault password" -msgstr "" - -msgid "File containing the new vault password" -msgstr "" - -msgid "Old vault private key" -msgstr "" - -msgid "File containing the old vault private key" -msgstr "" - -msgid "File containing the new vault public key" -msgstr "" - -msgid "New public key specified multiple times" -msgstr "" - -#, fuzzy -msgid "Missing new vault public key" -msgstr "geçersiz SSH genel anahtarı" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "" - -msgid "Binary data to archive" -msgstr "" - -msgid "File containing data to archive" -msgstr "" - -msgid "Override existing password" -msgstr "" - -msgid "Input data specified multiple times" -msgstr "" - -#, python-format -msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "" - -#, fuzzy -msgid "Invalid vault type" -msgstr "geçersiz nitelik adı" - -msgid "Retrieve a data from a vault." -msgstr "" - -msgid "File to store retrieved data" -msgstr "" - -msgid "Vault private key" -msgstr "" - -msgid "File containing the vault private key" -msgstr "" - -msgid "Data" -msgstr "" - -msgid "Private key specified multiple times" -msgstr "" - -msgid "Missing vault private key" -msgstr "" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -#, fuzzy -msgid "ACI name" -msgstr "Komut adı" - -msgid "Permission" -msgstr "İzin" - -#, fuzzy -msgid "Permission ACI grants access to" -msgstr "İzin adı" - -#, fuzzy -msgid "User group" -msgstr "Ağ grubu" - -msgid "User group ACI grants access to" -msgstr "" - -msgid "Permissions" -msgstr "İzinler" - -#, fuzzy -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "Verilecek izinler (okuma, yazma) Öntanımlı: yazma." - -#, fuzzy -msgid "Attributes to which the permission applies" -msgstr "İznin geçerli olduğu nitelikler." - -msgid "Attributes" -msgstr "Nitelikler" - -msgid "Type" -msgstr "" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" - -#, fuzzy -msgid "Member of" -msgstr "Üye Ana Makine" - -#, fuzzy -msgid "Member of a group" -msgstr "Bir ağ grubuna üye ekle." - -msgid "Filter" -msgstr "" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "" - -msgid "Subtree" -msgstr "" - -msgid "Subtree to apply ACI to" -msgstr "" - -#, fuzzy -msgid "Target group" -msgstr "Ağ grubu" - -msgid "Group to apply ACI to" -msgstr "" - -msgid "Target your own entry (self)" -msgstr "" - -msgid "Apply ACI to your own entry (self)" -msgstr "" - -msgid "Create new ACI." -msgstr "" - -msgid "ACI prefix" -msgstr "" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" - -msgid "Test the ACI syntax but don't write anything" -msgstr "" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "Tüm nitelikleri sunucudan al ve yazdır. Komut çıktısını etkiler." - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" -"Girdileri sunucuda depolandığı şekilde yazdır. Sadece çıktı biçimini etkiler." - -msgid "User-friendly description of action performed" -msgstr "Gerçekleştirilen eylemin kullanıcı dostu açıklaması" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" -"Girdinin primary_key (birincil anahtar) değeri, örneğin bir kullanıcı için " -"'jdoe'" - -msgid "Delete ACI." -msgstr "" - -msgid "True means the operation was successful" -msgstr "True, işlemin başarılı olduğu anlamına gelir" - -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" - -msgid "A string searched in all relevant object attributes" -msgstr "İlgili tüm nesne niteliklerinde aranan bir dizge" - -msgid "Primary key only" -msgstr "" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "" - -msgid "Number of entries returned" -msgstr "Döndürülen girdi sayısı" - -msgid "True if not all results were returned" -msgstr "Tüm sonuçlar döndürülmediyse True" - -msgid "Modify ACI." -msgstr "" - -msgid "Rename an ACI." -msgstr "" - -msgid "New ACI name" -msgstr "" - -msgid "Display a single ACI given an ACI name." -msgstr "" - -msgid "Location of the ACI" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Description" -msgstr "Açıklama" - -#, fuzzy -msgid "A description of this auto member rule" -msgstr "Bu RADIUS vekil sunucusunun açıklaması" - -msgid "Default (fallback) Group" -msgstr "" - -msgid "Default group for entries to land" -msgstr "" - -msgid "Add an automember rule." -msgstr "" - -msgid "Automember Rule" -msgstr "" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" - -msgid "Grouping Type" -msgstr "" - -#, fuzzy -msgid "Grouping to which the rule applies" -msgstr "İznin geçerli olduğu nitelikler." - -msgid "Add conditions to an automember rule." -msgstr "" - -msgid "Inclusive Regex" -msgstr "" - -msgid "Exclusive Regex" -msgstr "" - -#, fuzzy -msgid "Attribute Key" -msgstr "Nitelikler" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" - -msgid "Conditions that could not be added" -msgstr "" - -#, fuzzy -msgid "Number of conditions added" -msgstr "Yüklenen eklenti sayısı" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "" - -msgid "Default (fallback) group for entries to land" -msgstr "" - -#, fuzzy -msgid "Display information about the default (fallback) automember groups." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "Delete an automember rule." -msgstr "" - -msgid "List of deletions that failed" -msgstr "Başarısız olan silmelerin listesi" - -#, fuzzy -msgid "Search for automember rules." -msgstr "Bir ağ grubu ara." - -msgid "Modify an automember rule." -msgstr "" - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" - -msgid "Rebuild auto membership." -msgstr "" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Users" -msgstr "" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Hosts" -msgstr "" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "" - -msgid "Don't wait for rebuilding membership" -msgstr "" - -msgid "Remove conditions from an automember rule." -msgstr "" - -msgid "Conditions that could not be removed" -msgstr "" - -#, fuzzy -msgid "Number of conditions removed" -msgstr "Döndürülen girdi sayısı" - -#, fuzzy -msgid "Display information about an automember rule." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" - -msgid "Key" -msgstr "" - -msgid "Automount key name." -msgstr "" - -msgid "Mount information" -msgstr "" - -#, fuzzy -msgid "description" -msgstr "Açıklama" - -msgid "Location" -msgstr "" - -msgid "Automount location name." -msgstr "" - -msgid "Map" -msgstr "" - -msgid "Automount map name." -msgstr "" - -msgid "Create a new automount key." -msgstr "" - -#, fuzzy -msgid "Delete an automount key." -msgstr "Bir ağ grubunu sil." - -msgid "Continuous mode: Don't stop on errors." -msgstr "" - -#, fuzzy -msgid "Search for an automount key." -msgstr "Bir ağ grubu ara." - -msgid "Time Limit" -msgstr "Zaman Sınırı" - -#, fuzzy -msgid "Time limit of search in seconds" -msgstr "Saniye cinsinden aramanın zaman sınırı (0 sınırsızdır)" - -msgid "Size Limit" -msgstr "Boyut Sınırı" - -#, fuzzy -msgid "Maximum number of entries returned" -msgstr "Döndürülen girdi sayısı" - -#, fuzzy -msgid "Modify an automount key." -msgstr "Bir ağ grubunu değiştir." - -msgid "New mount information" -msgstr "" - -msgid "Rename" -msgstr "" - -msgid "Rename the automount key object" -msgstr "" - -msgid "Display an automount key." -msgstr "" - -msgid "Create a new automount location." -msgstr "" - -msgid "Delete an automount location." -msgstr "" - -#, fuzzy -msgid "Search for an automount location." -msgstr "Bir ağ grubu ara." - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "" - -msgid "Display an automount location." -msgstr "" - -msgid "Generate automount files for a specific location." -msgstr "" - -msgid "Create a new automount map." -msgstr "" - -msgid "Create a new indirect mount point." -msgstr "" - -msgid "Mount point" -msgstr "" - -msgid "Parent map" -msgstr "" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" - -#, fuzzy -msgid "Delete an automount map." -msgstr "Bir ağ grubunu sil." - -#, fuzzy -msgid "Search for an automount map." -msgstr "Bir ağ grubu ara." - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "" - -#, fuzzy -msgid "Modify an automount map." -msgstr "Bir ağ grubunu değiştir." - -#, fuzzy -msgid "Display an automount map." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" - -msgid "Nested Methods to execute" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "" - -msgid "Search for existing certificates." -msgstr "" - -#, fuzzy -msgid "Match cn attribute in subject" -msgstr "Kullanıcı nesnesindeki kullanıcı adı niteliği" - -#, fuzzy -msgid "Reason" -msgstr "%(reason)s" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "" - -#, fuzzy -msgid "minimum serial number" -msgstr "bir ondalık sayı olmalı" - -#, fuzzy -msgid "maximum serial number" -msgstr "bir ondalık sayı olmalı" - -msgid "match the common name exactly" -msgstr "" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -#, fuzzy -msgid "Maximum number of certs returned" -msgstr "Döndürülen girdi sayısı" - -msgid "Take a revoked certificate off hold." -msgstr "" - -#, fuzzy -msgid "Serial number" -msgstr "geçersiz bağlantı noktası numarası" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "" - -#, fuzzy -msgid "Submit a certificate signing request." -msgstr "bir sertifika imzalama isteği olmalı" - -msgid "CSR" -msgstr "" - -msgid "Principal" -msgstr "" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "automatically add the principal if it doesn't exist" -msgstr "" - -msgid "Dictionary mapping variable name to value" -msgstr "Değişken adını değere eşleyen sözlük" - -#, fuzzy -msgid "Revoke a certificate." -msgstr "bir sertifika olmalı" - -msgid "Retrieve an existing certificate." -msgstr "" - -msgid "Output filename" -msgstr "" - -msgid "File to store the certificate in." -msgstr "" - -#, fuzzy -msgid "Check the status of a certificate signing request." -msgstr "bir sertifika imzalama isteği olmalı" - -msgid "Request id" -msgstr "" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "Maximum username length" -msgstr "" - -msgid "Home directory base" -msgstr "" - -msgid "Default location of home directories" -msgstr "" - -msgid "Default shell" -msgstr "" - -msgid "Default shell for new users" -msgstr "" - -#, fuzzy -msgid "Default users group" -msgstr "Öntanımlı kullanıcılar grubu kaldırılamaz" - -msgid "Default group for new users" -msgstr "" - -msgid "Default e-mail domain" -msgstr "" - -msgid "Search time limit" -msgstr "" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" - -#, fuzzy -msgid "Search size limit" -msgstr "Boyut Sınırı" - -#, fuzzy -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "Döndürülen en fazla girdi sayısı (0 sınırsızdır)" - -msgid "User search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" - -msgid "Group search fields" -msgstr "" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" - -msgid "Enable migration mode" -msgstr "" - -msgid "Certificate Subject base" -msgstr "" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "" - -msgid "Default group objectclasses" -msgstr "" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "" - -msgid "Default user objectclasses" -msgstr "" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" - -msgid "Password Expiration Notification (days)" -msgstr "" - -msgid "Number of days's notice of impending password expiration" -msgstr "" - -msgid "Password plugin features" -msgstr "" - -msgid "Extra hashes to generate in password plug-in" -msgstr "" - -msgid "SELinux user map order" -msgstr "" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" - -msgid "Default SELinux user" -msgstr "" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" - -msgid "Default PAC types" -msgstr "" - -msgid "Default types of PAC supported for services" -msgstr "" - -msgid "Default user authentication types" -msgstr "" - -#, fuzzy -msgid "Default types of supported user authentication" -msgstr "Kimlik doğrulamayı yeniden deneme sayısı" - -msgid "Modify configuration options." -msgstr "" - -msgid "Show the current configuration." -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" -"\n" -"Self-servis İzinleri\n" -"\n" -"Bir izin, izinlerin ayrıntılı şekilde tayin edilmesini sağlar. Erişim " -"Denetim\n" -"Kuralları veya talimatları (ACI), kullanıcı ekleme, grup değiştirme vb. " -"gibi\n" -"belirli görevleri gerçekleştirme izinleri için izin verir.\n" -"\n" -"Self-servis izni, bir nesnenin kendi girdisinde neleri değiştirebileceğini " -"tanımlar.\n" -"\n" -"\n" -"ÖRNEKLER:\n" -"\n" -" Kullanıcıların adreslerini yönetmesine izin vermek için bir self-servis " -"kuralı\n" -" ekleyin (Bash küme ayracı genişletmesini kullanarak):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" Nitelikler listesini yönetirken, mevcut özellikler de dahil olmak üzere\n" -" tüm nitelikleri listeye eklemeniz gerekir.\n" -" Listeye telephoneNumber ekleyin (Bash küme ayracı genişletmesini " -"kullanarak):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Güncellenmiş kuralımızı görüntüleyin:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Bir kuralı silin:\n" -" ipa selfservice-del \"Users manage their own address\"\n" - -#, fuzzy -msgid "Delegation name" -msgstr "İzin adı" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "Verilecek izinler (okuma, yazma) Öntanımlı: yazma." - -#, fuzzy -msgid "Attributes to which the delegation applies" -msgstr "İznin geçerli olduğu nitelikler." - -msgid "Member user group" -msgstr "" - -msgid "User group to apply delegation to" -msgstr "" - -#, fuzzy -msgid "Add a new delegation." -msgstr "Yeni bir ağ grubu ekle." - -#, fuzzy -msgid "Delete a delegation." -msgstr "Bir ağ grubunu sil." - -#, fuzzy -msgid "Search for delegations." -msgstr "Bir ağ grubu ara." - -#, fuzzy -msgid "Modify a delegation." -msgstr "Bir ağ grubunu değiştir." - -#, fuzzy -msgid "Display information about a delegation." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "Global forwarders" -msgstr "" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Forward policy" -msgstr "" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "" - -msgid "Allow PTR sync" -msgstr "" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "" - -msgid "Zone refresh interval" -msgstr "" - -#, fuzzy -msgid "Zone name" -msgstr "Komut adı" - -msgid "Zone name (FQDN)" -msgstr "" - -msgid "Reverse zone IP network" -msgstr "" - -msgid "IP network to create reverse zone name from" -msgstr "" - -msgid "Active zone" -msgstr "" - -msgid "Is zone active?" -msgstr "" - -msgid "Zone forwarders" -msgstr "" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -#, fuzzy -msgid "Record name" -msgstr "Sunucu adı" - -msgid "Time to live" -msgstr "" - -msgid "Records" -msgstr "" - -#, fuzzy -msgid "Record type" -msgstr "yanlış tür" - -msgid "Record data" -msgstr "" - -msgid "A record" -msgstr "" - -msgid "Raw A records" -msgstr "" - -msgid "A IP Address" -msgstr "" - -msgid "IP Address" -msgstr "" - -msgid "A Create reverse" -msgstr "" - -msgid "Create reverse record for this IP Address" -msgstr "" - -msgid "AAAA record" -msgstr "" - -msgid "Raw AAAA records" -msgstr "" - -msgid "AAAA IP Address" -msgstr "" - -msgid "AAAA Create reverse" -msgstr "" - -msgid "A6 record" -msgstr "" - -msgid "Raw A6 records" -msgstr "" - -msgid "A6 Record data" -msgstr "" - -msgid "AFSDB record" -msgstr "" - -msgid "Raw AFSDB records" -msgstr "" - -msgid "AFSDB Subtype" -msgstr "" - -msgid "Subtype" -msgstr "" - -msgid "AFSDB Hostname" -msgstr "" - -msgid "Hostname" -msgstr "" - -msgid "APL record" -msgstr "" - -msgid "Raw APL records" -msgstr "" - -msgid "CERT record" -msgstr "" - -msgid "Raw CERT records" -msgstr "" - -msgid "CERT Certificate Type" -msgstr "" - -msgid "Certificate Type" -msgstr "" - -msgid "CERT Key Tag" -msgstr "" - -msgid "Key Tag" -msgstr "" - -msgid "CERT Algorithm" -msgstr "" - -msgid "Algorithm" -msgstr "" - -msgid "CERT Certificate/CRL" -msgstr "" - -msgid "Certificate/CRL" -msgstr "" - -msgid "CNAME record" -msgstr "" - -msgid "Raw CNAME records" -msgstr "" - -msgid "CNAME Hostname" -msgstr "" - -msgid "A hostname which this alias hostname points to" -msgstr "" - -msgid "DHCID record" -msgstr "" - -msgid "Raw DHCID records" -msgstr "" - -msgid "DLV record" -msgstr "" - -msgid "Raw DLV records" -msgstr "" - -msgid "DLV Key Tag" -msgstr "" - -msgid "DLV Algorithm" -msgstr "" - -msgid "DLV Digest Type" -msgstr "" - -msgid "Digest Type" -msgstr "" - -msgid "DLV Digest" -msgstr "" - -msgid "Digest" -msgstr "" - -msgid "DNAME record" -msgstr "" - -msgid "Raw DNAME records" -msgstr "" - -msgid "DNAME Target" -msgstr "" - -msgid "Target" -msgstr "" - -msgid "DNSKEY record" -msgstr "" - -msgid "Raw DNSKEY records" -msgstr "" - -msgid "DS record" -msgstr "" - -msgid "Raw DS records" -msgstr "" - -msgid "DS Key Tag" -msgstr "" - -msgid "DS Algorithm" -msgstr "" - -msgid "DS Digest Type" -msgstr "" - -msgid "DS Digest" -msgstr "" - -msgid "HIP record" -msgstr "" - -msgid "Raw HIP records" -msgstr "" - -msgid "IPSECKEY record" -msgstr "" - -msgid "Raw IPSECKEY records" -msgstr "" - -msgid "KEY record" -msgstr "" - -msgid "Raw KEY records" -msgstr "" - -msgid "KX record" -msgstr "" - -msgid "Raw KX records" -msgstr "" - -msgid "KX Preference" -msgstr "" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" - -msgid "KX Exchanger" -msgstr "" - -msgid "A host willing to act as a key exchanger" -msgstr "" - -msgid "LOC record" -msgstr "" - -msgid "Raw LOC records" -msgstr "" - -msgid "LOC Degrees Latitude" -msgstr "" - -msgid "Degrees Latitude" -msgstr "" - -msgid "LOC Minutes Latitude" -msgstr "" - -msgid "Minutes Latitude" -msgstr "" - -msgid "LOC Seconds Latitude" -msgstr "" - -msgid "Seconds Latitude" -msgstr "" - -msgid "LOC Direction Latitude" -msgstr "" - -msgid "Direction Latitude" -msgstr "" - -msgid "LOC Degrees Longitude" -msgstr "" - -msgid "Degrees Longitude" -msgstr "" - -msgid "LOC Minutes Longitude" -msgstr "" - -msgid "Minutes Longitude" -msgstr "" - -msgid "LOC Seconds Longitude" -msgstr "" - -msgid "Seconds Longitude" -msgstr "" - -msgid "LOC Direction Longitude" -msgstr "" - -msgid "Direction Longitude" -msgstr "" - -msgid "LOC Altitude" -msgstr "" - -msgid "Altitude" -msgstr "" - -msgid "LOC Size" -msgstr "" - -msgid "Size" -msgstr "" - -msgid "LOC Horizontal Precision" -msgstr "" - -msgid "Horizontal Precision" -msgstr "" - -msgid "LOC Vertical Precision" -msgstr "" - -msgid "Vertical Precision" -msgstr "" - -msgid "MX record" -msgstr "" - -msgid "Raw MX records" -msgstr "" - -msgid "MX Preference" -msgstr "" - -msgid "MX Exchanger" -msgstr "" - -msgid "A host willing to act as a mail exchanger" -msgstr "" - -msgid "NAPTR record" -msgstr "" - -msgid "Raw NAPTR records" -msgstr "" - -msgid "NAPTR Order" -msgstr "" - -msgid "Order" -msgstr "" - -msgid "NAPTR Preference" -msgstr "" - -msgid "Preference" -msgstr "" - -msgid "NAPTR Flags" -msgstr "" - -msgid "Flags" -msgstr "" - -msgid "NAPTR Service" -msgstr "" - -#, fuzzy -msgid "Service" -msgstr "Sunucu" - -msgid "NAPTR Regular Expression" -msgstr "" - -msgid "Regular Expression" -msgstr "" - -msgid "NAPTR Replacement" -msgstr "" - -msgid "Replacement" -msgstr "" - -msgid "NS record" -msgstr "" - -msgid "Raw NS records" -msgstr "" - -#, fuzzy -msgid "NS Hostname" -msgstr "NIS etki alanı adı" - -msgid "NSEC record" -msgstr "" - -msgid "Raw NSEC records" -msgstr "" - -msgid "NSEC3 record" -msgstr "" - -msgid "Raw NSEC3 records" -msgstr "" - -msgid "PTR record" -msgstr "" - -msgid "Raw PTR records" -msgstr "" - -msgid "PTR Hostname" -msgstr "" - -msgid "The hostname this reverse record points to" -msgstr "" - -msgid "RRSIG record" -msgstr "" - -msgid "Raw RRSIG records" -msgstr "" - -msgid "RP record" -msgstr "" - -msgid "Raw RP records" -msgstr "" - -msgid "SIG record" -msgstr "" - -msgid "Raw SIG records" -msgstr "" - -msgid "SPF record" -msgstr "" - -msgid "Raw SPF records" -msgstr "" - -msgid "SRV record" -msgstr "" - -msgid "Raw SRV records" -msgstr "" - -msgid "SRV Priority" -msgstr "" - -msgid "Priority" -msgstr "" - -msgid "SRV Weight" -msgstr "" - -msgid "Weight" -msgstr "" - -msgid "SRV Port" -msgstr "" - -msgid "Port" -msgstr "" - -msgid "SRV Target" -msgstr "" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "" - -msgid "SSHFP record" -msgstr "" - -msgid "Raw SSHFP records" -msgstr "" - -msgid "SSHFP Algorithm" -msgstr "" - -msgid "SSHFP Fingerprint Type" -msgstr "" - -msgid "Fingerprint Type" -msgstr "" - -msgid "SSHFP Fingerprint" -msgstr "" - -msgid "Fingerprint" -msgstr "" - -msgid "TA record" -msgstr "" - -msgid "Raw TA records" -msgstr "" - -msgid "TLSA record" -msgstr "" - -msgid "Raw TLSA records" -msgstr "" - -msgid "TLSA Certificate Usage" -msgstr "" - -msgid "Certificate Usage" -msgstr "" - -msgid "TLSA Selector" -msgstr "" - -msgid "Selector" -msgstr "" - -msgid "TLSA Matching Type" -msgstr "" - -msgid "Matching Type" -msgstr "" - -msgid "TLSA Certificate Association Data" -msgstr "" - -msgid "Certificate Association Data" -msgstr "" - -msgid "TKEY record" -msgstr "" - -msgid "Raw TKEY records" -msgstr "" - -msgid "TSIG record" -msgstr "" - -msgid "Raw TSIG records" -msgstr "" - -msgid "TXT record" -msgstr "" - -msgid "Raw TXT records" -msgstr "" - -msgid "TXT Text Data" -msgstr "" - -msgid "Text Data" -msgstr "" - -msgid "Authoritative nameserver" -msgstr "" - -msgid "Authoritative nameserver domain name" -msgstr "" - -msgid "Administrator e-mail address" -msgstr "" - -msgid "SOA serial" -msgstr "" - -msgid "SOA record serial number" -msgstr "" - -msgid "SOA refresh" -msgstr "" - -msgid "SOA record refresh time" -msgstr "" - -msgid "SOA retry" -msgstr "" - -msgid "SOA record retry time" -msgstr "" - -msgid "SOA expire" -msgstr "" - -msgid "SOA record expire time" -msgstr "" - -msgid "SOA minimum" -msgstr "" - -msgid "How long should negative responses be cached" -msgstr "" - -msgid "Time to live for records at zone apex" -msgstr "" - -msgid "BIND update policy" -msgstr "" - -msgid "Dynamic update" -msgstr "" - -msgid "Allow dynamic updates." -msgstr "" - -msgid "Allow query" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "" - -msgid "Allow transfer" -msgstr "" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "" - -msgid "Allow in-line DNSSEC signing" -msgstr "" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "" - -msgid "NSEC3PARAM record" -msgstr "" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "" - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "" - -msgid "Resolve a host name in DNS." -msgstr "" - -msgid "Modify global DNS configuration." -msgstr "" - -msgid "Show the current global DNS configuration." -msgstr "" - -msgid "Create new DNS forward zone." -msgstr "" - -msgid "Add a permission for per-forward zone access delegation." -msgstr "" - -#, fuzzy -msgid "Permission value" -msgstr "İzin adı" - -msgid "Delete DNS forward zone." -msgstr "" - -msgid "Disable DNS Forward Zone." -msgstr "" - -msgid "Enable DNS Forward Zone." -msgstr "" - -#, fuzzy -msgid "Search for DNS forward zones." -msgstr "Bir ağ grubu ara." - -msgid "Modify DNS forward zone." -msgstr "" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "" - -#, fuzzy -msgid "Display information about a DNS forward zone." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -#, fuzzy -msgid "Add new DNS resource record." -msgstr "Yeni bir RADIUS vekil sunucusu ekle." - -msgid "Force" -msgstr "" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "" - -msgid "Structured" -msgstr "" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "" - -#, fuzzy -msgid "Delete DNS resource record." -msgstr "Bir RADIUS vekil sunucusunu sil." - -msgid "Delete all associated records" -msgstr "" - -#, fuzzy -msgid "Delete DNS record entry." -msgstr "Bir RADIUS vekil sunucusunu sil." - -#, fuzzy -msgid "Search for DNS resources." -msgstr "RADIUS vekil sunucularını ara." - -#, fuzzy -msgid "Modify a DNS resource record." -msgstr "Bir RADIUS vekil sunucusunu değiştir." - -msgid "Rename the DNS resource record object" -msgstr "" - -msgid "Display DNS resource." -msgstr "" - -msgid "Create new DNS zone (SOA record)." -msgstr "" - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "" - -msgid "Add a permission for per-zone access delegation." -msgstr "" - -msgid "Delete DNS zone (SOA record)." -msgstr "" - -#, fuzzy -msgid "Disable DNS Zone." -msgstr "DNS adı olmalı" - -msgid "Enable DNS Zone." -msgstr "" - -#, fuzzy -msgid "Search for DNS zones (SOA records)." -msgstr "RADIUS vekil sunucularını ara." - -msgid "Forward zones only" -msgstr "" - -#, fuzzy -msgid "Search for forward zones only" -msgstr "Bir ağ grubu ara." - -msgid "Modify DNS zone (SOA record)." -msgstr "" - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "" - -msgid "Remove a permission for per-zone access delegation." -msgstr "" - -#, fuzzy -msgid "Display information about a DNS zone (SOA record)." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -msgid "Group name" -msgstr "Ağ grubu adı" - -#, fuzzy -msgid "Group description" -msgstr "Ağ grubu açıklaması" - -msgid "GID" -msgstr "" - -msgid "GID (use this option to set it manually)" -msgstr "" - -#, fuzzy -msgid "Member users" -msgstr "Üye Ana Makine" - -#, fuzzy -msgid "Member groups" -msgstr "Üye Ana Makine" - -#, fuzzy -msgid "Member of groups" -msgstr "Üye Ana Makine" - -msgid "Roles" -msgstr "" - -#, fuzzy -msgid "Member of netgroups" -msgstr "Bir ağ grubuna üye ekle." - -msgid "Member of Sudo rule" -msgstr "" - -msgid "Member of HBAC rule" -msgstr "" - -msgid "Indirect Member users" -msgstr "" - -msgid "Indirect Member groups" -msgstr "" - -#, fuzzy -msgid "Indirect Member of group" -msgstr "Bir ağ grubuna üye ekle." - -#, fuzzy -msgid "Indirect Member of netgroup" -msgstr "Bir ağ grubuna üye ekle." - -msgid "Indirect Member of role" -msgstr "" - -msgid "Indirect Member of Sudo rule" -msgstr "" - -msgid "Indirect Member of HBAC rule" -msgstr "" - -#, fuzzy -msgid "Create a new group." -msgstr "Bir ağ grubunu sil." - -msgid "Create as a non-POSIX group" -msgstr "" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "" - -msgid "Suppress processing of membership attributes." -msgstr "" - -#, fuzzy -msgid "Add members to a group." -msgstr "Bir ağ grubuna üye ekle." - -msgid "External member" -msgstr "" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "" - -#, fuzzy -msgid "member user" -msgstr "Üye Ana Makine" - -msgid "users to add" -msgstr "" - -#, fuzzy -msgid "member group" -msgstr "Bir ağ grubuna üye ekle." - -msgid "groups to add" -msgstr "" - -msgid "Members that could not be added" -msgstr "" - -#, fuzzy -msgid "Number of members added" -msgstr "Yüklenen eklenti sayısı" - -#, fuzzy -msgid "Delete group." -msgstr "Bir ağ grubunu sil." - -#, fuzzy -msgid "Detach a managed group from a user." -msgstr "yönetilen grupları ara" - -#, fuzzy -msgid "Search for groups." -msgstr "Bir ağ grubu ara." - -#, fuzzy -msgid "search for private groups" -msgstr "yönetilen grupları ara" - -#, fuzzy -msgid "search for POSIX groups" -msgstr "yönetilen grupları ara" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "" - -#, fuzzy -msgid "search for non-POSIX groups" -msgstr "yönetilen grupları ara" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "" - -msgid "user" -msgstr "" - -msgid "Search for groups with these member users." -msgstr "" - -msgid "Search for groups without these member users." -msgstr "" - -#, fuzzy -msgid "group" -msgstr "Ağ grubu" - -msgid "Search for groups with these member groups." -msgstr "" - -msgid "Search for groups without these member groups." -msgstr "" - -msgid "Search for groups with these member of groups." -msgstr "" - -msgid "Search for groups without these member of groups." -msgstr "" - -msgid "netgroup" -msgstr "ağ grubu" - -msgid "Search for groups with these member of netgroups." -msgstr "" - -msgid "Search for groups without these member of netgroups." -msgstr "" - -msgid "role" -msgstr "" - -msgid "Search for groups with these member of roles." -msgstr "" - -msgid "Search for groups without these member of roles." -msgstr "" - -msgid "HBAC rule" -msgstr "" - -msgid "Search for groups with these member of HBAC rules." -msgstr "" - -msgid "Search for groups without these member of HBAC rules." -msgstr "" - -msgid "sudo rule" -msgstr "" - -msgid "Search for groups with these member of sudo rules." -msgstr "" - -msgid "Search for groups without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a group." -msgstr "Bir ağ grubunu değiştir." - -msgid "change to a POSIX group" -msgstr "" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "" - -msgid "Rename the group object" -msgstr "" - -#, fuzzy -msgid "Remove members from a group." -msgstr "Bir ağ grubundan üye kaldır." - -msgid "users to remove" -msgstr "" - -msgid "groups to remove" -msgstr "" - -msgid "Members that could not be removed" -msgstr "" - -#, fuzzy -msgid "Number of members removed" -msgstr "Döndürülen girdi sayısı" - -#, fuzzy -msgid "Display information about a named group." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -#, fuzzy -msgid "Rule name" -msgstr "Sunucu adı" - -msgid "Rule type" -msgstr "" - -msgid "Rule type (allow)" -msgstr "" - -msgid "User category" -msgstr "Kullanıcı kategorisi" - -msgid "User category the rule applies to" -msgstr "Kuralın geçerli olduğu kullanıcı kategorisi" - -msgid "Host category" -msgstr "Ana makine kategorisi" - -msgid "Host category the rule applies to" -msgstr "Kuralın geçerli olduğu ana makine kategorisi" - -#, fuzzy -msgid "Service category" -msgstr "Kullanıcı kategorisi" - -#, fuzzy -msgid "Service category the rule applies to" -msgstr "Kuralın geçerli olduğu kullanıcı kategorisi" - -msgid "Enabled" -msgstr "" - -#, fuzzy -msgid "User Groups" -msgstr "Ağ grupları" - -#, fuzzy -msgid "Host Groups" -msgstr "Ağ grupları" - -#, fuzzy -msgid "Services" -msgstr "Sunucu" - -#, fuzzy -msgid "Service Groups" -msgstr "Sunucu" - -msgid "External host" -msgstr "" - -msgid "Create a new HBAC rule." -msgstr "" - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "" - -#, fuzzy -msgid "member host" -msgstr "Üye Ana Makine" - -msgid "hosts to add" -msgstr "" - -#, fuzzy -msgid "member host group" -msgstr "Bir ağ grubuna üye ekle." - -msgid "host groups to add" -msgstr "" - -msgid "Add services to an HBAC rule." -msgstr "" - -msgid "member HBAC service" -msgstr "" - -msgid "HBAC services to add" -msgstr "" - -msgid "member HBAC service group" -msgstr "" - -msgid "HBAC service groups to add" -msgstr "" - -msgid "Add users and groups to an HBAC rule." -msgstr "" - -#, fuzzy -msgid "Delete an HBAC rule." -msgstr "Bir ağ grubunu sil." - -msgid "Disable an HBAC rule." -msgstr "" - -msgid "Enable an HBAC rule." -msgstr "" - -#, fuzzy -msgid "Search for HBAC rules." -msgstr "Bir ağ grubu ara." - -#, fuzzy -msgid "Modify an HBAC rule." -msgstr "Bir ağ grubunu değiştir." - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "hosts to remove" -msgstr "" - -msgid "host groups to remove" -msgstr "" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "" - -msgid "HBAC services to remove" -msgstr "" - -msgid "HBAC service groups to remove" -msgstr "" - -msgid "Remove users and groups from an HBAC rule." -msgstr "" - -msgid "Display the properties of an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" - -#, fuzzy -msgid "Service name" -msgstr "Sunucu adı" - -msgid "HBAC service" -msgstr "" - -#, fuzzy -msgid "HBAC service description" -msgstr "self servis izni" - -msgid "Member of HBAC service groups" -msgstr "" - -#, fuzzy -msgid "Add a new HBAC service." -msgstr "Yeni bir RADIUS vekil sunucusu ekle." - -msgid "Delete an existing HBAC service." -msgstr "" - -#, fuzzy -msgid "Search for HBAC services." -msgstr "RADIUS vekil sunucularını ara." - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "" - -#, fuzzy -msgid "Modify an HBAC service." -msgstr "Bir RADIUS vekil sunucusunu değiştir." - -#, fuzzy -msgid "Display information about an HBAC service." -msgstr "Bir RADIUS vekil sunucusu hakkında bilgileri görüntüle." - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -#, fuzzy -msgid "Service group name" -msgstr "Sunucu adı" - -#, fuzzy -msgid "HBAC service group description" -msgstr "Ağ grubu açıklaması" - -#, fuzzy -msgid "Member HBAC service" -msgstr "Üye Ana Makine" - -#, fuzzy -msgid "Add a new HBAC service group." -msgstr "Yeni bir ağ grubu ekle." - -#, fuzzy -msgid "Add members to an HBAC service group." -msgstr "Bir ağ grubuna üye ekle." - -#, fuzzy -msgid "Delete an HBAC service group." -msgstr "Bir ağ grubunu sil." - -#, fuzzy -msgid "Search for an HBAC service group." -msgstr "Bir ağ grubu ara." - -#, fuzzy -msgid "Modify an HBAC service group." -msgstr "Bir ağ grubunu değiştir." - -#, fuzzy -msgid "Remove members from an HBAC service group." -msgstr "Bir ağ grubundan üye kaldır." - -#, fuzzy -msgid "Display information about an HBAC service group." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "" - -#, fuzzy -msgid "User name" -msgstr "Sunucu adı" - -msgid "Target host" -msgstr "" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "" - -msgid "Include all disabled IPA rules into test" -msgstr "" - -#, fuzzy -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "Döndürülen en fazla girdi sayısı (0 sınırsızdır)" - -msgid "Warning" -msgstr "" - -msgid "Matched rules" -msgstr "" - -msgid "Not matched rules" -msgstr "" - -msgid "Non-existent or invalid rules" -msgstr "" - -msgid "Result of simulation" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -#, fuzzy -msgid "Host name" -msgstr "Ana makine kategorisi" - -#, fuzzy -msgid "A description of this host" -msgstr "Bu RADIUS vekil sunucusunun açıklaması" - -msgid "Locality" -msgstr "" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "" - -msgid "Platform" -msgstr "" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "" - -msgid "Operating system" -msgstr "" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "" - -#, fuzzy -msgid "User password" -msgstr "Kullanıcı kategorisi" - -msgid "Password used in bulk enrollment" -msgstr "" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "" - -msgid "Random password" -msgstr "" - -#, fuzzy -msgid "Certificate" -msgstr "bir sertifika olmalı" - -msgid "Base-64 encoded server certificate" -msgstr "" - -#, fuzzy -msgid "Principal name" -msgstr "İzin adı" - -msgid "MAC address" -msgstr "" - -msgid "Hardware MAC address(es) on this host" -msgstr "" - -#, fuzzy -msgid "SSH public key" -msgstr "geçersiz SSH genel anahtarı" - -msgid "Class" -msgstr "" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -msgid "Assigned ID View" -msgstr "" - -#, fuzzy -msgid "Requires pre-authentication" -msgstr "Kimlik doğrulamayı yeniden deneme sayısı" - -msgid "Pre-authentication is required for the service" -msgstr "" - -msgid "Trusted for delegation" -msgstr "" - -msgid "Client credentials may be delegated to the service" -msgstr "" - -#, fuzzy -msgid "Member of host-groups" -msgstr "Üye Ana Makine" - -msgid "Indirect Member of host-group" -msgstr "" - -msgid "Keytab" -msgstr "" - -msgid "Managed by" -msgstr "" - -msgid "Managing" -msgstr "" - -msgid "Users allowed to retrieve keytab" -msgstr "" - -msgid "Groups allowed to retrieve keytab" -msgstr "" - -msgid "Hosts allowed to retrieve keytab" -msgstr "" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "" - -msgid "Users allowed to create keytab" -msgstr "" - -msgid "Groups allowed to create keytab" -msgstr "" - -#, fuzzy -msgid "Hosts allowed to create keytab" -msgstr "Yaprak (leaf) olmayan girdilerde izin verilmiyor" - -msgid "Host Groups allowed to create keytab" -msgstr "" - -#, fuzzy -msgid "Add a new host." -msgstr "Yeni bir ağ grubu ekle." - -msgid "force host name even if not in DNS" -msgstr "" - -msgid "skip reverse DNS detection" -msgstr "" - -msgid "Add the host to DNS with this IP address" -msgstr "" - -msgid "Add hosts that can manage this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" - -#, fuzzy -msgid "Delete a host." -msgstr "Bir ağ grubunu sil." - -msgid "Remove entries from DNS" -msgstr "" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" - -#, fuzzy -msgid "Search for hosts." -msgstr "Bir ağ grubu ara." - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "" - -#, fuzzy -msgid "host group" -msgstr "Ağ grubu" - -msgid "Search for hosts with these member of host groups." -msgstr "" - -msgid "Search for hosts without these member of host groups." -msgstr "" - -#, fuzzy -msgid "Search for hosts with these member of netgroups." -msgstr "Bir ağ grubu ara." - -msgid "Search for hosts without these member of netgroups." -msgstr "" - -msgid "Search for hosts with these member of roles." -msgstr "" - -msgid "Search for hosts without these member of roles." -msgstr "" - -msgid "Search for hosts with these member of HBAC rules." -msgstr "" - -msgid "Search for hosts without these member of HBAC rules." -msgstr "" - -msgid "Search for hosts with these member of sudo rules." -msgstr "" - -msgid "Search for hosts without these member of sudo rules." -msgstr "" - -msgid "Search for hosts with these enrolled by users." -msgstr "" - -msgid "Search for hosts without these enrolled by users." -msgstr "" - -msgid "host" -msgstr "" - -msgid "Search for hosts with these managed by hosts." -msgstr "" - -msgid "Search for hosts without these managed by hosts." -msgstr "" - -msgid "Search for hosts with these managing hosts." -msgstr "" - -msgid "Search for hosts without these managing hosts." -msgstr "" - -#, fuzzy -msgid "Modify information about a host." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "Kerberos principal name for this host" -msgstr "" - -msgid "Update DNS entries" -msgstr "" - -msgid "Remove hosts that can manage this host." -msgstr "" - -#, fuzzy -msgid "Display information about a host." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -#, fuzzy -msgid "file to store certificate in" -msgstr "bir sertifika olmalı" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -msgid "Host-group" -msgstr "Ağ grubu" - -#, fuzzy -msgid "Name of host-group" -msgstr "Ağ grubu" - -#, fuzzy -msgid "A description of this host-group" -msgstr "Bu RADIUS vekil sunucusunun açıklaması" - -#, fuzzy -msgid "Member hosts" -msgstr "Üye Ana Makine" - -#, fuzzy -msgid "Member host-groups" -msgstr "Üye Ana Makine" - -#, fuzzy -msgid "Indirect Member hosts" -msgstr "Üye Ana Makine" - -msgid "Indirect Member host-groups" -msgstr "" - -#, fuzzy -msgid "Add a new hostgroup." -msgstr "Yeni bir ağ grubu ekle." - -#, fuzzy -msgid "Add members to a hostgroup." -msgstr "Bir ağ grubuna üye ekle." - -#, fuzzy -msgid "Delete a hostgroup." -msgstr "Bir ağ grubunu sil." - -#, fuzzy -msgid "Search for hostgroups." -msgstr "Bir ağ grubu ara." - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "" - -msgid "Search for host groups with these member hosts." -msgstr "" - -msgid "Search for host groups without these member hosts." -msgstr "" - -msgid "Search for host groups with these member host groups." -msgstr "" - -msgid "Search for host groups without these member host groups." -msgstr "" - -msgid "Search for host groups with these member of host groups." -msgstr "" - -msgid "Search for host groups without these member of host groups." -msgstr "" - -msgid "Search for host groups with these member of netgroups." -msgstr "" - -msgid "Search for host groups without these member of netgroups." -msgstr "" - -msgid "Search for host groups with these member of HBAC rules." -msgstr "" - -msgid "Search for host groups without these member of HBAC rules." -msgstr "" - -msgid "Search for host groups with these member of sudo rules." -msgstr "" - -msgid "Search for host groups without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a hostgroup." -msgstr "Bir ağ grubunu değiştir." - -#, fuzzy -msgid "Remove members from a hostgroup." -msgstr "Bir ağ grubundan üye kaldır." - -#, fuzzy -msgid "Display information about a hostgroup." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -#, fuzzy -msgid "Range name" -msgstr "Komut adı" - -msgid "First Posix ID of the range" -msgstr "" - -#, fuzzy -msgid "Number of IDs in the range" -msgstr "Döndürülen girdi sayısı" - -msgid "First RID of the corresponding RID range" -msgstr "" - -msgid "First RID of the secondary RID range" -msgstr "" - -msgid "Domain SID of the trusted domain" -msgstr "" - -msgid "Name of the trusted domain" -msgstr "" - -msgid "Range type" -msgstr "" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -#, fuzzy -msgid "Delete an ID range." -msgstr "Bir ağ grubunu sil." - -#, fuzzy -msgid "Search for ranges." -msgstr "Bir ağ grubu ara." - -#, fuzzy -msgid "Modify ID range." -msgstr "Bir ağ grubunu değiştir." - -#, fuzzy -msgid "Display information about a range." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -msgid "Anchor to override" -msgstr "" - -msgid "Group ID Number" -msgstr "" - -msgid "User login" -msgstr "" - -msgid "UID" -msgstr "" - -msgid "User ID Number" -msgstr "" - -msgid "GECOS" -msgstr "" - -#, fuzzy -msgid "Home directory" -msgstr "sözlük olmalı" - -msgid "Login shell" -msgstr "" - -msgid "ID View Name" -msgstr "" - -#, fuzzy -msgid "Add a new Group ID override." -msgstr "Yeni bir ağ grubu ekle." - -#, fuzzy -msgid "Delete an Group ID override." -msgstr "Bir ağ grubunu sil." - -#, fuzzy -msgid "Search for an Group ID override." -msgstr "Bir ağ grubu ara." - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "" - -#, fuzzy -msgid "Modify an Group ID override." -msgstr "Bir ağ grubunu değiştir." - -msgid "Rename the Group ID override object" -msgstr "" - -#, fuzzy -msgid "Display information about an Group ID override." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -#, fuzzy -msgid "Add a new User ID override." -msgstr "Yeni bir RADIUS vekil sunucusu ekle." - -#, fuzzy -msgid "Delete an User ID override." -msgstr "Bir RADIUS vekil sunucusunu sil." - -#, fuzzy -msgid "Search for an User ID override." -msgstr "Bir ağ grubu ara." - -#, fuzzy -msgid "Modify an User ID override." -msgstr "Bir RADIUS vekil sunucusunu değiştir." - -msgid "Rename the User ID override object" -msgstr "" - -#, fuzzy -msgid "Display information about an User ID override." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -#, fuzzy -msgid "Add a new ID View." -msgstr "Yeni bir ağ grubu ekle." - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" - -msgid "hosts" -msgstr "" - -#, fuzzy -msgid "Hosts to apply the ID View to" -msgstr "Kuralın geçerli olduğu ana makine kategorisi" - -#, fuzzy -msgid "hostgroups" -msgstr "Ağ grupları" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" - -#, fuzzy -msgid "Hosts that this ID View was applied to." -msgstr "Kuralın geçerli olduğu ana makine kategorisi" - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" - -msgid "Number of hosts the ID View was applied to:" -msgstr "" - -#, fuzzy -msgid "Delete an ID View." -msgstr "Bir ağ grubunu sil." - -#, fuzzy -msgid "Search for an ID View." -msgstr "Bir ağ grubu ara." - -#, fuzzy -msgid "Modify an ID View." -msgstr "Bir ağ grubunu değiştir." - -msgid "Rename the ID View object" -msgstr "" - -#, fuzzy -msgid "Display information about an ID View." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -#, fuzzy -msgid "Enumerate all the hosts the view applies to." -msgstr "Kuralın geçerli olduğu kullanıcı kategorisi" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" - -msgid "Hosts to clear (any) ID View from." -msgstr "" - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" - -msgid "Hosts that ID View was cleared from." -msgstr "" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" - -msgid "Dict of I18N messages" -msgstr "" - -msgid "Export plugin meta-data for the webUI." -msgstr "" - -msgid "Name of object to export" -msgstr "" - -msgid "Name of method to export" -msgstr "" - -msgid "Name of command to export" -msgstr "" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" - -msgid "Join an IPA domain" -msgstr "" - -msgid "The hostname to register as" -msgstr "" - -msgid "The IPA realm" -msgstr "" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "" - -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" - -msgid "Manage ticket policy for specific user" -msgstr "" - -msgid "Max life" -msgstr "" - -msgid "Maximum ticket life (seconds)" -msgstr "" - -msgid "Max renew" -msgstr "" - -msgid "Maximum renewable age (seconds)" -msgstr "" - -msgid "Modify Kerberos ticket policy." -msgstr "" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "" - -msgid "Display the current Kerberos ticket policy." -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," -"cn=accounts' --group-container='cn=groups,cn=accounts' " -"ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' --user-ignore-" -"objectclass=radiusprofile --user-ignore-" -"attribute=radiusgroupname ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -msgid "Migrate users and groups from DS to IPA." -msgstr "" - -msgid "LDAP URI" -msgstr "" - -msgid "LDAP URI of DS server to migrate from" -msgstr "" - -msgid "bind password" -msgstr "" - -msgid "Bind DN" -msgstr "" - -#, fuzzy -msgid "User container" -msgstr "Kullanıcı kategorisi" - -msgid "DN of container for users in DS relative to base DN" -msgstr "" - -msgid "Group container" -msgstr "" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "" - -msgid "User object class" -msgstr "" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "" - -msgid "Group object class" -msgstr "" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "" - -msgid "Ignore user object class" -msgstr "" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "" - -#, fuzzy -msgid "Ignore user attribute" -msgstr "Kullanıcı niteliği" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "" - -msgid "Ignore group object class" -msgstr "" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "" - -#, fuzzy -msgid "Ignore group attribute" -msgstr "Kullanıcı niteliği" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "" - -msgid "Overwrite GID" -msgstr "" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "" - -msgid "LDAP schema" -msgstr "" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" - -msgid "Continue" -msgstr "" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" - -msgid "Base DN" -msgstr "" - -msgid "Base DN on remote LDAP server" -msgstr "" - -msgid "Ignore compat plugin" -msgstr "" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "" - -#, fuzzy -msgid "CA certificate" -msgstr "bir sertifika olmalı" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "" - -msgid "groups to exclude from migration" -msgstr "" - -msgid "users to exclude from migration" -msgstr "" - -msgid "Lists of objects migrated; categorized by type." -msgstr "" - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" - -msgid "False if migration mode was disabled." -msgstr "" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" - -msgid "Show environment variables." -msgstr "Ortam değişkenlerini göster." - -msgid "Forward to server instead of running locally" -msgstr "Yerel olarak çalışmak yerine sunucuya ilet" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "tüm nitelikleri sunucudan al ve yazdır. Komut çıktısını etkiler." - -msgid "Total number of variables env (>= count)" -msgstr "Toplam ortam değişkeni sayısı (>= count)" - -msgid "Number of variables returned (<= total)" -msgstr "Döndürülen değişken sayısı (<= total)" - -msgid "Show all loaded plugins." -msgstr "Yüklenen tüm eklentileri göster." - -#, fuzzy -msgid "Dictionary mapping plugin names to bases" -msgstr "Değişken adını değere eşleyen sözlük" - -msgid "Number of plugins loaded" -msgstr "Yüklenen eklenti sayısı" - msgid "" "\n" "Netgroups\n" @@ -5541,392 +285,47 @@ msgstr "" " Bir ağ grubunu silin:\n" " ipa netgroup-del admins\n" -msgid "Netgroup name" -msgstr "Ağ grubu adı" - -msgid "Netgroup description" -msgstr "Ağ grubu açıklaması" - -msgid "NIS domain name" -msgstr "NIS etki alanı adı" - -msgid "IPA unique ID" -msgstr "IPA benzersiz kimliği" - -#, fuzzy -msgid "Member netgroups" -msgstr "ağ grupları" - -#, fuzzy -msgid "Indirect Member netgroups" -msgstr "Bir ağ grubuna üye ekle." - -#, fuzzy -msgid "Member User" -msgstr "Üye Ana Makine" - -#, fuzzy -msgid "Member Group" -msgstr "Üye Ana Makine" - -msgid "Member Host" -msgstr "Üye Ana Makine" - -#, fuzzy -msgid "Member Hostgroup" -msgstr "Üye Ana Makine" - -msgid "Add a new netgroup." -msgstr "Yeni bir ağ grubu ekle." - -msgid "Add members to a netgroup." -msgstr "Bir ağ grubuna üye ekle." - -#, fuzzy -msgid "member netgroup" -msgstr "Bir ağ grubuna üye ekle." - -#, fuzzy -msgid "netgroups to add" -msgstr "ağ grupları" - -msgid "Delete a netgroup." -msgstr "Bir ağ grubunu sil." - -msgid "Search for a netgroup." -msgstr "Bir ağ grubu ara." - -msgid "search for managed groups" -msgstr "yönetilen grupları ara" - -msgid "Search for netgroups with these member netgroups." -msgstr "" - -msgid "Search for netgroups without these member netgroups." -msgstr "" - -msgid "Search for netgroups with these member users." -msgstr "" - -msgid "Search for netgroups without these member users." -msgstr "" - -msgid "Search for netgroups with these member groups." -msgstr "" - -msgid "Search for netgroups without these member groups." -msgstr "" - -msgid "Search for netgroups with these member hosts." -msgstr "" - -msgid "Search for netgroups without these member hosts." -msgstr "" - -msgid "Search for netgroups with these member host groups." -msgstr "" - -msgid "Search for netgroups without these member host groups." -msgstr "" - -msgid "Search for netgroups with these member of netgroups." -msgstr "" - -msgid "Search for netgroups without these member of netgroups." -msgstr "" - -msgid "Modify a netgroup." -msgstr "Bir ağ grubunu değiştir." - -msgid "Remove members from a netgroup." -msgstr "Bir ağ grubundan üye kaldır." - -#, fuzzy -msgid "netgroups to remove" -msgstr "ağ grupları" - -msgid "Display information about a netgroup." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - msgid "" "\n" -"OTP configuration\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" "\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" - -msgid "TOTP authentication Window" -msgstr "" - -msgid "TOTP authentication time variance (seconds)" -msgstr "" - -msgid "TOTP Synchronization Window" -msgstr "" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "" - -msgid "HOTP Authentication Window" -msgstr "" - -msgid "HOTP authentication skip-ahead" -msgstr "" - -msgid "HOTP Synchronization Window" -msgstr "" - -msgid "HOTP synchronization skip-ahead" -msgstr "" - -msgid "Modify OTP configuration options." -msgstr "" - -msgid "Show the current OTP configuration." -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -#, fuzzy -msgid "Unique ID" -msgstr "IPA benzersiz kimliği" - -msgid "Type of the token" -msgstr "" - -msgid "Token description (informational only)" -msgstr "" - -msgid "Owner" -msgstr "" - -msgid "Assigned user of the token (default: self)" -msgstr "" - -msgid "Manager" -msgstr "" - -msgid "Assigned manager of the token (default: self)" -msgstr "" - -msgid "Disabled" -msgstr "" - -msgid "Mark the token as disabled (default: false)" -msgstr "" - -msgid "Validity start" -msgstr "" - -msgid "First date/time the token can be used" -msgstr "" - -msgid "Validity end" -msgstr "" - -msgid "Last date/time the token can be used" -msgstr "" - -msgid "Vendor" -msgstr "" - -msgid "Token vendor name (informational only)" -msgstr "" - -msgid "Model" -msgstr "" - -msgid "Token model (informational only)" -msgstr "" - -msgid "Serial" -msgstr "" - -msgid "Token serial (informational only)" -msgstr "" - -msgid "Token secret (Base32; default: random)" -msgstr "" - -msgid "Token hash algorithm" -msgstr "" - -msgid "Digits" -msgstr "" - -msgid "Number of digits each token code will have" -msgstr "" - -msgid "Clock offset" -msgstr "" - -msgid "TOTP token / IPA server time difference" -msgstr "" - -msgid "Clock interval" -msgstr "" - -msgid "Length of TOTP token code validity" -msgstr "" - -msgid "Counter" -msgstr "" - -msgid "Initial counter for the HOTP token" -msgstr "" - -#, fuzzy -msgid "Add a new OTP token." -msgstr "Yeni bir ağ grubu ekle." - -#, fuzzy -msgid "(deprecated)" -msgstr "Kullanımdan kaldırılan seçenekler" - -msgid "Do not display QR code" -msgstr "" - -msgid "Add users that can manage this token." -msgstr "" - -#, fuzzy -msgid "Delete an OTP token." -msgstr "Bir ağ grubunu sil." - -#, fuzzy -msgid "Search for OTP token." -msgstr "Bir ağ grubu ara." - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "" - -#, fuzzy -msgid "Modify a OTP token." -msgstr "Bir ağ grubunu değiştir." - -msgid "Rename the OTP token object" -msgstr "" - -#, fuzzy -msgid "Display information about an OTP token." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "Set a user's password." -msgstr "" - -msgid "New Password" -msgstr "" - -msgid "Current Password" -msgstr "" - -msgid "OTP" -msgstr "" - -msgid "One Time Password" -msgstr "" +"Nitelikler ve girdiler arasındaki farka dikkat edin. İzinler bağımsızdır, " +"bu\n" +"nedenle bir kullanıcı ekleyebilmek, kullanıcının düzenlenebilir olacağı\n" +"anlamına gelmez.\n" msgid "" "\n" "Permissions\n" +msgstr "" "\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" +"İzinler\n" + +msgid "" "\n" -"A permission may not contain other permissions.\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" +msgstr "" "\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"IPA ile birlikte öntanımlı olarak gelen izinler, \"yönetilen\" izinler " +"olarak\n" +"adlandırılabilir. Bunların geçerli oldukları öntanımlı bir nitelik kümesi " +"vardır,\n" +"ancak yönetici kümeye nitelikler ekleyebilir/kümeden nitelikleri " +"kaldırabilir.\n" + +msgid "" "\n" -"A permission is made up of a number of different parts:\n" +"RADIUS Proxy Servers\n" +msgstr "" "\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" +"RADIUS Vekil Sunucuları\n" + +msgid "" "\n" "Rights define what operations are allowed, and may be one or more\n" "of the following:\n" @@ -5937,713 +336,17 @@ msgid "" "5. add - add a new entry to the tree\n" "6. delete - delete an existing entry\n" "7. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -"\n" -"Managed permissions\n" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "Permission name" -msgstr "İzin adı" - -msgid "Granted rights" -msgstr "" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" - -#, fuzzy -msgid "Effective attributes" -msgstr "Kullanıcı niteliği" - -#, fuzzy -msgid "All attributes to which the permission applies" -msgstr "İznin geçerli olduğu nitelikler." - -#, fuzzy -msgid "Included attributes" -msgstr "Kullanıcı niteliği" - -#, fuzzy -msgid "User-specified attributes to which the permission applies" -msgstr "İznin geçerli olduğu nitelikler." - -#, fuzzy -msgid "Excluded attributes" -msgstr "Kullanıcı niteliği" - -#, fuzzy -msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "İznin geçerli olduğu nitelikler." - -#, fuzzy -msgid "Default attributes" -msgstr "Kullanıcı niteliği" - -#, fuzzy -msgid "Attributes to which the permission applies by default" -msgstr "İznin geçerli olduğu nitelikler." - -#, fuzzy -msgid "Bind rule type" -msgstr "yanlış tür" - -msgid "Subtree to apply permissions to" -msgstr "" - -msgid "Extra target filter" -msgstr "" - -msgid "Raw target filter" -msgstr "" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" - -msgid "Target DN" -msgstr "" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" - -#, fuzzy -msgid "Member of group" -msgstr "Bir ağ grubuna üye ekle." - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "" - -msgid "User group to apply permissions to (sets target)" -msgstr "" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "" - -msgid "Deprecated; use extratargetfilter" -msgstr "" - -#, fuzzy -msgid "Deprecated; use ipapermlocation" -msgstr "Kullanımdan kaldırılan seçenekler" - -msgid "Deprecated; use ipapermright" -msgstr "" - -msgid "Granted to Privilege" -msgstr "" - -msgid "Indirect Member of roles" -msgstr "" - -#, fuzzy -msgid "Add a new permission." -msgstr "Yeni bir self-servis izni ekle." - -#, fuzzy -msgid "Add members to a permission." -msgstr "Bir ağ grubuna üye ekle." - -msgid "member privilege" -msgstr "" - -msgid "privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "" - -msgid "Permission flags" -msgstr "İzin bayrakları" - -#, fuzzy -msgid "Delete a permission." -msgstr "Bir self-servis iznini sil." - -msgid "force delete of SYSTEM permissions" -msgstr "" - -#, fuzzy -msgid "Search for permissions." -msgstr "Bir self-servis izni ara." - -#, fuzzy -msgid "Modify a permission." -msgstr "Bir self-servis iznini değiştir." - -#, fuzzy -msgid "Rename the permission object" -msgstr "Kimlik bilgileri önbelleği izinleri yanlış" - -#, fuzzy -msgid "Remove members from a permission." -msgstr "Bir ağ grubundan üye kaldır." - -msgid "privileges to remove" -msgstr "" - -#, fuzzy -msgid "Display information about a permission." -msgstr "Bir self-servis izni hakkında bilgileri görüntüle." - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "Ping a remote server." -msgstr "" - -msgid "" -"\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" -msgstr "" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "" - -msgid "" -"\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" - -#, fuzzy -msgid "Privilege name" -msgstr "Sunucu adı" - -#, fuzzy -msgid "Privilege description" -msgstr "Ağ grubu açıklaması" - -msgid "Granting privilege to roles" -msgstr "" - -#, fuzzy -msgid "Add a new privilege." -msgstr "Yeni bir ağ grubu ekle." - -#, fuzzy -msgid "Add members to a privilege." -msgstr "Bir ağ grubuna üye ekle." - -#, fuzzy -msgid "member role" -msgstr "Üye Ana Makine" - -#, fuzzy -msgid "roles to add" -msgstr "Okunacak dosya yok" - -msgid "Add permissions to a privilege." -msgstr "" - -msgid "permission" -msgstr "izin" - -msgid "permissions" -msgstr "izinler" - -#, fuzzy -msgid "Number of permissions added" -msgstr "Yüklenen eklenti sayısı" - -#, fuzzy -msgid "Delete a privilege." -msgstr "Bir ağ grubunu sil." - -#, fuzzy -msgid "Search for privileges." -msgstr "Bir ağ grubu ara." - -#, fuzzy -msgid "Modify a privilege." -msgstr "Bir ağ grubunu değiştir." - -msgid "Rename the privilege object" -msgstr "" - -#, fuzzy -msgid "Remove members from a privilege" -msgstr "Bir ağ grubundan üye kaldır." - -#, fuzzy -msgid "roles to remove" -msgstr "Okunacak dosya yok" - -#, fuzzy -msgid "Remove permissions from a privilege." -msgstr "Bir ağ grubundan üye kaldır." - -#, fuzzy -msgid "Number of permissions removed" -msgstr "Döndürülen girdi sayısı" - -#, fuzzy -msgid "Display information about a privilege." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -#, fuzzy -msgid "Group" -msgstr "Ağ grubu" - -msgid "Manage password policy for specific group" -msgstr "" - -msgid "Max lifetime (days)" -msgstr "" - -msgid "Maximum password lifetime (in days)" -msgstr "" - -msgid "Min lifetime (hours)" -msgstr "" - -msgid "Minimum password lifetime (in hours)" -msgstr "" - -msgid "History size" -msgstr "" - -msgid "Password history size" -msgstr "" - -msgid "Character classes" -msgstr "" - -msgid "Minimum number of character classes" -msgstr "" - -msgid "Min length" -msgstr "" - -msgid "Minimum length of password" -msgstr "" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "" - -msgid "Max failures" -msgstr "" - -msgid "Consecutive failures before lockout" -msgstr "" - -msgid "Failure reset interval" msgstr "" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "" - -msgid "Lockout duration" -msgstr "" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "" - -#, fuzzy -msgid "Add a new group password policy." -msgstr "Yönetilen bir grubun parola politikası olamaz." - -#, fuzzy -msgid "Delete a group password policy." -msgstr "Yönetilen bir grubun parola politikası olamaz." - -msgid "Search for group password policies." -msgstr "" - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "" - -#, fuzzy -msgid "Modify a group password policy." -msgstr "Yönetilen bir grubun parola politikası olamaz." - -#, fuzzy -msgid "Display information about password policy." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "User" -msgstr "" - -msgid "Display effective policy for a specific user" -msgstr "" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" "\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "RADIUS proxy server name" -msgstr "RADIUS vekil sunucusu adı" - -msgid "A description of this RADIUS proxy server" -msgstr "Bu RADIUS vekil sunucusunun açıklaması" - -msgid "Server" -msgstr "Sunucu" - -msgid "The hostname or IP (with or without port)" -msgstr "Ana makine adı veya IP (bağlantı noktasıyla birlikte veya değil)" - -msgid "Secret" -msgstr "Parola" - -msgid "The secret used to encrypt data" -msgstr "Verileri şifrelemek için kullanılan parola" - -msgid "Timeout" -msgstr "Zaman aşımı" - -msgid "The total timeout across all retries (in seconds)" -msgstr "Tüm yeniden denemelerde toplam zaman aşımı (saniye cinsinden)" - -msgid "Retries" -msgstr "Yeniden denemeler" - -msgid "The number of times to retry authentication" -msgstr "Kimlik doğrulamayı yeniden deneme sayısı" - -msgid "User attribute" -msgstr "Kullanıcı niteliği" - -msgid "The username attribute on the user object" -msgstr "Kullanıcı nesnesindeki kullanıcı adı niteliği" - -msgid "Add a new RADIUS proxy server." -msgstr "Yeni bir RADIUS vekil sunucusu ekle." - -msgid "Delete a RADIUS proxy server." -msgstr "Bir RADIUS vekil sunucusunu sil." - -msgid "Search for RADIUS proxy servers." -msgstr "RADIUS vekil sunucularını ara." - -msgid "Modify a RADIUS proxy server." -msgstr "Bir RADIUS vekil sunucusunu değiştir." - -#, fuzzy -msgid "Rename the RADIUS proxy server object" -msgstr "Bir RADIUS vekil sunucusunu sil." - -msgid "Display information about a RADIUS proxy server." -msgstr "Bir RADIUS vekil sunucusu hakkında bilgileri görüntüle." - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Domain" -msgstr "" - -msgid "Add domain" -msgstr "" - -msgid "Delete domain" -msgstr "" - -msgid "Modify realm domains." -msgstr "" - -msgid "Force adding domain even if not in DNS" -msgstr "" - -msgid "Display the list of realm domains." -msgstr "" - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" - -#, fuzzy -msgid "Role name" -msgstr "Sunucu adı" - -#, fuzzy -msgid "A description of this role-group" -msgstr "Bu RADIUS vekil sunucusunun açıklaması" - -msgid "Privileges" -msgstr "" - -#, fuzzy -msgid "Member services" -msgstr "Üye Ana Makine" - -#, fuzzy -msgid "Add a new role." -msgstr "Yeni bir ağ grubu ekle." - -#, fuzzy -msgid "Add members to a role." -msgstr "Bir ağ grubuna üye ekle." - -msgid "member service" -msgstr "" - -msgid "services to add" -msgstr "" - -#, fuzzy -msgid "Add privileges to a role." -msgstr "Bir ağ grubuna üye ekle." - -msgid "privilege" -msgstr "" - -msgid "privileges" -msgstr "" - -#, fuzzy -msgid "Number of privileges added" -msgstr "Yüklenen eklenti sayısı" - -#, fuzzy -msgid "Delete a role." -msgstr "Bir ağ grubunu sil." - -#, fuzzy -msgid "Search for roles." -msgstr "Bir ağ grubu ara." - -#, fuzzy -msgid "Modify a role." -msgstr "Bir ağ grubunu değiştir." - -msgid "Rename the role object" -msgstr "" - -#, fuzzy -msgid "Remove members from a role." -msgstr "Bir ağ grubundan üye kaldır." - -msgid "services to remove" -msgstr "" - -#, fuzzy -msgid "Remove privileges from a role." -msgstr "Bir ağ grubundan üye kaldır." - -#, fuzzy -msgid "Number of privileges removed" -msgstr "Döndürülen girdi sayısı" - -#, fuzzy -msgid "Display information about a role." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." +"Haklar, hangi işlemlere izin verildiğini tanımlar ve aşağıdakilerden biri\n" +"veya daha fazlası olabilir:\n" +"1. write - bir veya daha fazla nitelik yaz\n" +"2. read - bir veya daha fazla niteliği oku\n" +"3. search - bir veya daha fazla nitelik ara\n" +"4. compare - bir veya daha fazla niteliği karşılaştır\n" +"5. add - ağaca yeni bir girdi ekle\n" +"6. delete - mevcut bir girdiyi sil\n" +"7. all - tüm izinler verildi\n" msgid "" "\n" @@ -6710,5692 +413,99 @@ msgstr "" " Bir kuralı silin:\n" " ipa selfservice-del \"Users manage their own address\"\n" -msgid "Self-service name" -msgstr "Self-servis adı" - -msgid "Attributes to which the permission applies." -msgstr "İznin geçerli olduğu nitelikler." - -msgid "Add a new self-service permission." -msgstr "Yeni bir self-servis izni ekle." - -msgid "Delete a self-service permission." -msgstr "Bir self-servis iznini sil." - -msgid "Search for a self-service permission." -msgstr "Bir self-servis izni ara." - -msgid "Modify a self-service permission." -msgstr "Bir self-servis iznini değiştir." - -msgid "Display information about a self-service permission." -msgstr "Bir self-servis izni hakkında bilgileri görüntüle." - msgid "" "\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" - -msgid "SELinux User" -msgstr "" - -msgid "HBAC Rule" -msgstr "" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "" - -msgid "Create a new SELinux User Map." -msgstr "" - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "" - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "" - -#, fuzzy -msgid "Delete a SELinux User Map." -msgstr "Bir ağ grubunu sil." - -msgid "Disable an SELinux User Map rule." -msgstr "" - -msgid "Enable an SELinux User Map rule." -msgstr "" - -#, fuzzy -msgid "Search for SELinux User Maps." -msgstr "Bir ağ grubu ara." - -#, fuzzy -msgid "Modify a SELinux User Map." -msgstr "Bir ağ grubunu değiştir." - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "" - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "" - -msgid "Display the properties of a SELinux User Map rule." -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -#, fuzzy -msgid "Service principal" -msgstr "Hizmet yetkilisi gereklidir" - -msgid "PAC type" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" - -#, fuzzy -msgid "Add a new IPA new service." -msgstr "Yeni bir RADIUS vekil sunucusu ekle." - -msgid "force principal name even if not in DNS" -msgstr "" - -msgid "Add hosts that can manage this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -#, fuzzy -msgid "Delete an IPA service." -msgstr "Bir RADIUS vekil sunucusunu sil." - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" - -#, fuzzy -msgid "Search for IPA services." -msgstr "RADIUS vekil sunucularını ara." - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "" - -msgid "Search for services with these managed by hosts." -msgstr "" - -msgid "Search for services without these managed by hosts." -msgstr "" - -msgid "Modify an existing IPA service." -msgstr "" - -msgid "Remove hosts that can manage this service." -msgstr "" - -#, fuzzy -msgid "Display information about an IPA service." -msgstr "Bir RADIUS vekil sunucusu hakkında bilgileri görüntüle." - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" - -#, fuzzy -msgid "Sudo Command" -msgstr "Konu veya Komut" - -#, fuzzy -msgid "A description of this command" -msgstr "Bu RADIUS vekil sunucusunun açıklaması" - -msgid "Sudo Command Groups" -msgstr "" - -msgid "Create new Sudo Command." -msgstr "" - -msgid "Delete Sudo Command." -msgstr "" - -#, fuzzy -msgid "Search for Sudo Commands." -msgstr "yönetilen grupları ara" - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "" - -#, fuzzy -msgid "Modify Sudo Command." -msgstr "Konu veya Komut" - -msgid "Display Sudo Command." -msgstr "" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "Sudo Command Group" -msgstr "" - -#, fuzzy -msgid "Commands" -msgstr "Komut adı" - -msgid "Member Sudo commands" -msgstr "" - -msgid "Create new Sudo Command Group." -msgstr "" - -#, fuzzy -msgid "Add members to Sudo Command Group." -msgstr "Bir ağ grubuna üye ekle." - -msgid "member sudo command" -msgstr "" - -msgid "sudo commands to add" -msgstr "" - -#, fuzzy -msgid "Delete Sudo Command Group." -msgstr "Bir ağ grubunu sil." - -#, fuzzy -msgid "Search for Sudo Command Groups." -msgstr "yönetilen grupları ara" - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" - -#, fuzzy -msgid "Modify Sudo Command Group." -msgstr "Bir ağ grubunu değiştir." - -#, fuzzy -msgid "Remove members from Sudo Command Group." -msgstr "Bir ağ grubundan üye kaldır." - -msgid "sudo commands to remove" -msgstr "" - -msgid "Display Sudo Command Group." -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "" - -msgid "Domain Security Identifier" -msgstr "" - -msgid "SID blacklist incoming" -msgstr "" - -msgid "SID blacklist outgoing" -msgstr "" - -msgid "Security Identifier" -msgstr "" - -#, fuzzy -msgid "NetBIOS name" -msgstr "Ağ grubu adı" - -msgid "Domain GUID" -msgstr "" - -msgid "Fallback primary group" -msgstr "" - -#, fuzzy -msgid "Domain name" -msgstr "Komut adı" - -msgid "Trusted domain partner" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "" - -msgid "Active Directory domain administrator" -msgstr "" - -msgid "Active Directory domain administrator's password" -msgstr "" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "" - -msgid "Shared secret for the trust" -msgstr "" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" - -#, fuzzy -msgid "Delete a trust." -msgstr "Bir ağ grubunu sil." - -msgid "Refresh list of the domains associated with the trust" -msgstr "" - -#, fuzzy -msgid "Search for trusts." -msgstr "Bir ağ grubu ara." - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" - -msgid "Security Identifiers (SIDs)" -msgstr "" - -#, fuzzy -msgid "Display information about a trust." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "Modify global trust configuration." -msgstr "" - -msgid "Show global trust configuration." -msgstr "" - -msgid "Allow access from the trusted domain" -msgstr "" - -msgid "Remove information about the domain associated with the trust." -msgstr "" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "" - -msgid "Search domains of the trust" -msgstr "" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "" - -msgid "Modify trustdomain of the trust" -msgstr "" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "" - -msgid "Last name" -msgstr "" - -msgid "Full name" -msgstr "" - -msgid "Display name" -msgstr "" - -msgid "Initials" -msgstr "" - -#, fuzzy -msgid "Kerberos principal" -msgstr "Kerberos yetkilisi olmalı" - -#, fuzzy -msgid "Kerberos principal expiration" -msgstr "Kerberos yetkilisi olmalı" - -msgid "Email address" -msgstr "" - -msgid "Prompt to set the user password" -msgstr "" - -msgid "Generate a random user password" -msgstr "" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" - -msgid "Street address" -msgstr "" - -msgid "City" -msgstr "" - -msgid "State/Province" -msgstr "" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "" - -msgid "Mobile Telephone Number" -msgstr "" - -msgid "Pager Number" -msgstr "" - -msgid "Fax Number" -msgstr "" - -msgid "Org. Unit" -msgstr "" - -msgid "Job Title" -msgstr "" - -msgid "Car License" -msgstr "" - -#, fuzzy -msgid "Account disabled" -msgstr "%(count)d değişken" - -msgid "User authentication types" -msgstr "" - -#, fuzzy -msgid "Types of supported user authentication" -msgstr "Kimlik doğrulamayı yeniden deneme sayısı" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" - -#, fuzzy -msgid "RADIUS proxy configuration" -msgstr "RADIUS vekil sunucusu" - -#, fuzzy -msgid "RADIUS proxy username" -msgstr "RADIUS vekil sunucusu adı" - -msgid "Department Number" -msgstr "" - -msgid "Employee Number" -msgstr "" - -msgid "Employee Type" -msgstr "" - -msgid "Preferred Language" -msgstr "" - -msgid "Kerberos keys available" -msgstr "" - -#, fuzzy -msgid "Add a new user." -msgstr "Yeni bir ağ grubu ekle." - -msgid "Don't create user private group" -msgstr "" - -#, fuzzy -msgid "Delete a user." -msgstr "Bir ağ grubunu sil." - -msgid "Disable a user account." -msgstr "" - -msgid "Enable a user account." -msgstr "" - -#, fuzzy -msgid "Search for users." -msgstr "Bir ağ grubu ara." - -msgid "Self" -msgstr "" - -#, fuzzy -msgid "Display user record for current Kerberos principal" -msgstr "Kerberos yetkilisi olmalı" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "" - -msgid "Search for users with these member of groups." -msgstr "" - -msgid "Search for users without these member of groups." -msgstr "" - -#, fuzzy -msgid "Search for users with these member of netgroups." -msgstr "Bir ağ grubu ara." - -msgid "Search for users without these member of netgroups." -msgstr "" - -msgid "Search for users with these member of roles." -msgstr "" - -msgid "Search for users without these member of roles." -msgstr "" - -msgid "Search for users with these member of HBAC rules." -msgstr "" - -msgid "Search for users without these member of HBAC rules." -msgstr "" - -msgid "Search for users with these member of sudo rules." -msgstr "" - -msgid "Search for users without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a user." -msgstr "Bir ağ grubunu değiştir." - -#, fuzzy -msgid "Rename the user object" -msgstr "Kullanıcı nesnesindeki kullanıcı adı niteliği" - -#, fuzzy -msgid "Display information about a user." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -#, fuzzy -msgid "Command category" -msgstr "Komut adı" - -#, fuzzy -msgid "Command category the rule applies to" -msgstr "Kuralın geçerli olduğu ana makine kategorisi" - -#, fuzzy -msgid "RunAs User category" -msgstr "Kullanıcı kategorisi" - -#, fuzzy -msgid "RunAs User category the rule applies to" -msgstr "Kuralın geçerli olduğu kullanıcı kategorisi" - -#, fuzzy -msgid "RunAs Group category" -msgstr "Kullanıcı kategorisi" - -#, fuzzy -msgid "RunAs Group category the rule applies to" -msgstr "Kuralın geçerli olduğu kullanıcı kategorisi" - -msgid "Sudo order" -msgstr "" - -msgid "integer to order the Sudo rules" -msgstr "" - -msgid "External User" -msgstr "" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" - -msgid "Host Masks" -msgstr "" - -#, fuzzy -msgid "Sudo Allow Commands" -msgstr "Konu veya Komut" - -msgid "Sudo Deny Commands" -msgstr "" - -msgid "Sudo Allow Command Groups" -msgstr "" - -msgid "Sudo Deny Command Groups" -msgstr "" - -msgid "RunAs Users" -msgstr "" - -msgid "Run as a user" -msgstr "" - -msgid "Groups of RunAs Users" -msgstr "" - -msgid "Run as any user within a specified group" -msgstr "" - -msgid "RunAs External User" -msgstr "" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" - -msgid "External Groups of RunAs Users" -msgstr "" - -msgid "External Groups of users that the command can run as" -msgstr "" - -msgid "RunAs Groups" -msgstr "" - -msgid "Run with the gid of a specified POSIX group" -msgstr "" - -msgid "RunAs External Group" -msgstr "" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" - -msgid "Sudo Option" -msgstr "" - -msgid "Create new Sudo Rule." -msgstr "" - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "" - -#, fuzzy -msgid "member sudo command group" -msgstr "Bir ağ grubuna üye ekle." - -msgid "sudo command groups to add" -msgstr "" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "" - -msgid "Add group for Sudo to execute as." -msgstr "" - -msgid "Add users and groups for Sudo to execute as." -msgstr "" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "" - -msgid "Delete Sudo Rule." -msgstr "" - -msgid "Disable a Sudo Rule." -msgstr "" - -msgid "Enable a Sudo Rule." -msgstr "" - -#, fuzzy -msgid "Search for Sudo Rule." -msgstr "Bir ağ grubu ara." - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" - -msgid "Modify Sudo Rule." -msgstr "" - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "" - -msgid "sudo command groups to remove" -msgstr "" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "" - -msgid "Remove an option from Sudo Rule." -msgstr "" - -msgid "Remove group for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups for Sudo to execute as." -msgstr "" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "" - -msgid "Display Sudo Rule." -msgstr "" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "Saniye cinsinden aramanın zaman sınırı (0 sınırsızdır)" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "Döndürülen en fazla girdi sayısı (0 sınırsızdır)" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -#, fuzzy -msgid "ACL name" -msgstr "Komut adı" - -#, fuzzy -msgid "Profile category" -msgstr "Ana makine kategorisi" - -#, fuzzy -msgid "Profile category the ACL applies to" -msgstr "Kuralın geçerli olduğu ana makine kategorisi" - -#, fuzzy -msgid "User category the ACL applies to" -msgstr "Kuralın geçerli olduğu kullanıcı kategorisi" - -#, fuzzy -msgid "Host category the ACL applies to" -msgstr "Kuralın geçerli olduğu ana makine kategorisi" - -#, fuzzy -msgid "Service category the ACL applies to" -msgstr "Kuralın geçerli olduğu kullanıcı kategorisi" - -msgid "Profiles" -msgstr "" - -msgid "Create a new CA ACL." -msgstr "" - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "" - -msgid "Add profiles to a CA ACL." -msgstr "" - -msgid "member Certificate Profile" -msgstr "" - -#, fuzzy -msgid "Certificate Profiles to add" -msgstr "%(name)s sertifikası geçerli değil" - -msgid "Add services to a CA ACL." -msgstr "" - -msgid "Add users and groups to a CA ACL." -msgstr "" - -msgid "Delete a CA ACL." -msgstr "" - -msgid "Disable a CA ACL." -msgstr "" - -msgid "Enable a CA ACL." -msgstr "" - -#, fuzzy -msgid "Search for CA ACLs." -msgstr "Bir ağ grubu ara." - -msgid "Modify a CA ACL." -msgstr "" - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "" - -msgid "Remove profiles from a CA ACL." -msgstr "" - -msgid "Certificate Profiles to remove" -msgstr "" - -#, fuzzy -msgid "Remove services from a CA ACL." -msgstr "Bir ağ grubundan üye kaldır." - -msgid "Remove users and groups from a CA ACL." -msgstr "" - -msgid "Display the properties of a CA ACL." -msgstr "" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" - -msgid "Profile ID" -msgstr "" - -msgid "Certificate Profile to use" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" - -msgid "Profile ID for referring to this profile" -msgstr "" - -#, fuzzy -msgid "Profile description" -msgstr "Ağ grubu açıklaması" - -#, fuzzy -msgid "Brief description of this profile" -msgstr "Bu RADIUS vekil sunucusunun açıklaması" - -#, fuzzy -msgid "Store issued certificates" -msgstr "bir sertifika olmalı" - -msgid "Whether to store certs issued using this profile" -msgstr "" - -#, fuzzy -msgid "Delete a Certificate Profile." -msgstr "bir sertifika olmalı" - -#, fuzzy -msgid "Search for Certificate Profiles." -msgstr "Bir self-servis izni ara." - -#, fuzzy -msgid "Import a Certificate Profile." -msgstr "bir sertifika olmalı" - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" - -msgid "Modify Certificate Profile configuration." -msgstr "" - -msgid "File containing profile configuration" -msgstr "" - -msgid "Display the properties of a Certificate Profile." -msgstr "" - -msgid "Write profile configuration to file" -msgstr "" - -#, fuzzy -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "Döndürülen en fazla girdi sayısı (0 sınırsızdır)" - -#, fuzzy -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "Döndürülen en fazla girdi sayısı (0 sınırsızdır)" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" - -msgid "Query current Domain Level." -msgstr "" - -msgid "Current domain level:" -msgstr "" - -msgid "Change current Domain Level." -msgstr "" - -msgid "Domain Level" -msgstr "" - -msgid "Add certificates to host entry" -msgstr "" - -#, fuzzy -msgid "Remove certificates from host entry" -msgstr "Bir ağ grubundan üye kaldır." - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" - -msgid "Fallback to AD DC LDAP" -msgstr "" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" - -#, fuzzy -msgid "Add to default group" -msgstr "Yeni bir ağ grubu ekle." - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" - -msgid "Search scope" -msgstr "" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" - -msgid "Remove users that can manage this token." -msgstr "" - -msgid "Target DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" - -msgid "Origin DN subtree" -msgstr "" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "Server name" -msgstr "Sunucu adı" - -msgid "IPA server hostname" -msgstr "IPA sunucusu ana makine adı" - -msgid "Managed suffix" -msgstr "" - -#, fuzzy -msgid "Min domain level" -msgstr "geçersiz etki alanı adı" - -#, fuzzy -msgid "Minimum domain level" -msgstr "geçersiz etki alanı adı" - -msgid "Max domain level" -msgstr "" - -msgid "Maximum domain level" -msgstr "" - -#, fuzzy -msgid "Delete IPA server." -msgstr "Bir RADIUS vekil sunucusunu sil." - -#, fuzzy -msgid "Search for IPA servers." -msgstr "RADIUS vekil sunucularını ara." - -msgid "Show IPA server." -msgstr "" - -#, fuzzy -msgid "Add new certificates to a service" -msgstr "%(name)s sertifikası geçerli değil" - -#, fuzzy -msgid "Remove certificates from a service" -msgstr "Bir ağ grubundan üye kaldır." - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed Target" -msgstr "" - -msgid "Create a new service delegation rule." -msgstr "" - -#, fuzzy -msgid "Add member to a named service delegation rule." -msgstr "Bir ağ grubuna üye ekle." - -#, fuzzy -msgid "member principal" -msgstr "Kerberos yetkilisi olmalı" - -msgid "principal to add" -msgstr "" - -msgid "Add target to a named service delegation rule." -msgstr "" - -msgid "member service delegation target" -msgstr "" - -msgid "service delegation targets to add" -msgstr "" - -#, fuzzy -msgid "Delete service delegation." -msgstr "Bir self-servis iznini sil." - -#, fuzzy -msgid "Search for service delegations rule." -msgstr "Bir self-servis izni ara." - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" - -#, fuzzy -msgid "Remove member from a named service delegation rule." -msgstr "Bir ağ grubundan üye kaldır." - -msgid "principal to remove" -msgstr "" - -msgid "Remove target from a named service delegation rule." -msgstr "" - -msgid "service delegation targets to remove" -msgstr "" - -#, fuzzy -msgid "Display information about a named service delegation rule." -msgstr "Bir self-servis izni hakkında bilgileri görüntüle." - -msgid "Create a new service delegation target." -msgstr "" - -msgid "Add member to a named service delegation target." -msgstr "" - -#, fuzzy -msgid "Delete service delegation target." -msgstr "Bir self-servis iznini sil." - -#, fuzzy -msgid "Search for service delegation target." -msgstr "Bir self-servis izni ara." - -#, fuzzy -msgid "Remove member from a named service delegation target." -msgstr "Bir ağ grubundan üye kaldır." - -#, fuzzy -msgid "Display information about a named service delegation target." -msgstr "Bir self-servis izni hakkında bilgileri görüntüle." - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" - -msgid "Activate a stage user." -msgstr "" - -#, fuzzy -msgid "Add a new stage user." -msgstr "Yeni bir ağ grubu ekle." - -msgid "Create Stage user in from a delete user" -msgstr "" - -#, fuzzy -msgid "Delete a stage user." -msgstr "Bir ağ grubunu sil." - -#, fuzzy -msgid "Search for stage users." -msgstr "Bir ağ grubu ara." - -msgid "Search for stage users with these member of groups." -msgstr "" - -msgid "Search for stage users without these member of groups." -msgstr "" - -msgid "Search for stage users with these member of netgroups." -msgstr "" - -msgid "Search for stage users without these member of netgroups." -msgstr "" - -msgid "Search for stage users with these member of roles." -msgstr "" - -msgid "Search for stage users without these member of roles." -msgstr "" - -msgid "Search for stage users with these member of HBAC rules." -msgstr "" - -msgid "Search for stage users without these member of HBAC rules." -msgstr "" - -msgid "Search for stage users with these member of sudo rules." -msgstr "" - -msgid "Search for stage users without these member of sudo rules." -msgstr "" - -#, fuzzy -msgid "Modify a stage user." -msgstr "Bir ağ grubunu değiştir." - -#, fuzzy -msgid "Rename the stage user object" -msgstr "Kullanıcı nesnesindeki kullanıcı adı niteliği" - -#, fuzzy -msgid "Display information about a stage user." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" - -#, fuzzy -msgid "Segment name" -msgstr "Sunucu adı" - -msgid "Arbitrary string identifying the segment" -msgstr "" - -msgid "Left node" -msgstr "" - -msgid "Left replication node - an IPA server" -msgstr "" - -msgid "Right node" -msgstr "" - -msgid "Right replication node - an IPA server" -msgstr "" - -msgid "Connectivity" -msgstr "" - -msgid "Direction of replication between left and right replication node" -msgstr "" - -#, fuzzy -msgid "Attributes to strip" -msgstr "Nitelikler" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" - -#, fuzzy -msgid "Attributes to replicate" -msgstr "Nitelikler" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" - -msgid "Attributes for total update" -msgstr "" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" - -#, fuzzy -msgid "Session timeout" -msgstr "Oturum hatası" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" - -#, fuzzy -msgid "Replication agreement enabled" -msgstr "%(hostname)s için çoğaltma anlaşması bulunamadı" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" - -msgid "Suffix name" -msgstr "" - -msgid "LDAP suffix to be managed" -msgstr "" - -#, fuzzy -msgid "Add a new segment." -msgstr "Yeni bir ağ grubu ekle." - -#, fuzzy -msgid "Delete a segment." -msgstr "Bir ağ grubunu sil." - -#, fuzzy -msgid "Search for topology segments." -msgstr "RADIUS vekil sunucularını ara." - -#, fuzzy -msgid "Modify a segment." -msgstr "Bir ağ grubunu değiştir." - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" - -msgid "Initialize left node" -msgstr "" - -msgid "Initialize right node" -msgstr "" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "" - -msgid "Display a segment." -msgstr "" - -msgid "Add a new topology suffix to be managed." -msgstr "" - -#, fuzzy -msgid "Delete a topology suffix." -msgstr "Bir ağ grubunu sil." - -#, fuzzy -msgid "Search for topology suffices." -msgstr "RADIUS vekil sunucularını ara." - -#, fuzzy -msgid "Modify a topology suffix." -msgstr "Bir ağ grubunu değiştir." - -msgid "Show managed suffix." -msgstr "" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" - -msgid "Two-way trust" -msgstr "" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "" - -msgid "Preserved user" -msgstr "" - -msgid "Add one or more certificates to the user entry" -msgstr "" - -msgid "Remove one or more certificates to the user entry" -msgstr "" - -msgid "Move deleted user into staged area" -msgstr "" - -msgid "Undelete a delete user account." -msgstr "" - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "Vault name" -msgstr "" - -#, fuzzy -msgid "Vault description" -msgstr "Açıklama" - -msgid "Vault type" -msgstr "" - -msgid "Salt" -msgstr "" - -msgid "Vault salt" -msgstr "" - -msgid "Public key" -msgstr "" - -#, fuzzy -msgid "Vault public key" -msgstr "geçersiz SSH genel anahtarı" - -msgid "Owner users" -msgstr "" - -#, fuzzy -msgid "Owner groups" -msgstr "ağ grupları" - -msgid "Owner services" -msgstr "" - -msgid "Failed owners" -msgstr "" - -msgid "Vault service" -msgstr "" - -msgid "Shared vault" -msgstr "" - -msgid "Vault user" -msgstr "" - -#, fuzzy -msgid "Transport Certificate" -msgstr "bir sertifika olmalı" - -msgid "Service name of the service vault" -msgstr "" - -#, fuzzy -msgid "Username of the user vault" -msgstr "Kuralın geçerli olduğu kullanıcı kategorisi" - -#, fuzzy -msgid "Add members to a vault." -msgstr "Bir ağ grubuna üye ekle." - -#, fuzzy -msgid "Add owners to a vault." -msgstr "Bir ağ grubuna üye ekle." - -msgid "owner user" -msgstr "" - -#, fuzzy -msgid "owner group" -msgstr "ağ grubu" - -msgid "owner service" -msgstr "" - -msgid "Owners that could not be added" -msgstr "" - -#, fuzzy -msgid "Number of owners added" -msgstr "Yüklenen eklenti sayısı" - -msgid "Session key wrapped with transport certificate" -msgstr "" - -msgid "Vault data encrypted with session key" -msgstr "" - -msgid "Nonce" -msgstr "" - -#, fuzzy -msgid "Delete a vault." -msgstr "Bir ağ grubunu sil." - -#, fuzzy -msgid "Search for vaults." -msgstr "Bir ağ grubu ara." - -msgid "List all service vaults" -msgstr "" - -msgid "List all user vaults" -msgstr "" - -#, fuzzy -msgid "Remove members from a vault." -msgstr "Bir ağ grubundan üye kaldır." - -#, fuzzy -msgid "Remove owners from a vault." -msgstr "Bir ağ grubundan üye kaldır." - -#, fuzzy -msgid "Owners that could not be removed" -msgstr "Öntanımlı kullanıcılar grubu kaldırılamaz" - -#, fuzzy -msgid "Number of owners removed" -msgstr "Döndürülen girdi sayısı" - -#, fuzzy -msgid "Display information about a vault." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "Show vault configuration." -msgstr "" - -msgid "Output file to store the transport certificate" -msgstr "" - -msgid "Add owners to a vault container." -msgstr "" - -#, fuzzy -msgid "Delete a vault container." -msgstr "Bir ağ grubunu sil." - -#, fuzzy -msgid "Remove owners from a vault container." -msgstr "Bir ağ grubundan üye kaldır." - -#, fuzzy -msgid "Display information about a vault container." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "" - -msgid "Hostname (FQDN)" -msgstr "" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Managed suffixes" -msgstr "" - -msgid "Check connection to remote IPA server." -msgstr "" - -#, fuzzy -msgid "Remote server name" -msgstr "Sunucu adı" - -#, fuzzy -msgid "Remote IPA server hostname" -msgstr "IPA sunucusu ana makine adı" - -msgid "suffix" -msgstr "" - -msgid "Search for servers with these managed suffixes." -msgstr "" - -msgid "Search for servers without these managed suffixes." -msgstr "" - -msgid "Add a manager to the stage user entry" -msgstr "" - -msgid "Remove a manager to the stage user entry" -msgstr "" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -msgid "Managed LDAP suffix DN" -msgstr "" - -#, fuzzy -msgid "Search for topology suffixes." -msgstr "RADIUS vekil sunucularını ara." - -msgid "Add a manager to the user entry" -msgstr "" - -msgid "Remove a manager to the user entry" -msgstr "" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" - -msgid "Comma-separated list of attributes" -msgstr "" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" -"\n" -"Self-servis İzinleri\n" -"\n" -"Bir izin, izinlerin ayrıntılı şekilde tayin edilmesini sağlar. Erişim " -"Denetim\n" -"Kuralları veya talimatları (ACI), kullanıcı ekleme, grup değiştirme vb. " -"gibi\n" -"belirli görevleri gerçekleştirme izinleri için izin verir.\n" -"\n" -"Self-servis izni, bir nesnenin kendi girdisinde neleri değiştirebileceğini " -"tanımlar.\n" -"\n" -"\n" -"ÖRNEKLER:\n" -"\n" -" Kullanıcıların adreslerini yönetmesine izin vermek için bir self-servis " -"kuralı\n" -" ekleyin (Bash küme ayracı genişletmesini kullanarak):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" Nitelikler listesini yönetirken, mevcut özellikler de dahil olmak üzere\n" -" tüm nitelikleri listeye eklemeniz gerekir.\n" -" Listeye telephoneNumber ekleyin (Bash küme ayracı genişletmesini " -"kullanarak):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Güncellenmiş kuralımızı görüntüleyin:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Bir kuralı silin:\n" -" ipa selfservice-del \"Users manage their own address\"\n" - -#, fuzzy -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "Verilecek izinler (okuma, yazma) Öntanımlı: yazma." - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "" - -msgid "DNS class" -msgstr "" - -msgid "Comma-separated list of raw A records" -msgstr "" - -msgid "Comma-separated list of raw AAAA records" -msgstr "" - -msgid "Comma-separated list of raw A6 records" -msgstr "" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "" - -msgid "Comma-separated list of raw APL records" -msgstr "" - -msgid "Comma-separated list of raw CERT records" -msgstr "" - -msgid "Comma-separated list of raw CNAME records" -msgstr "" - -msgid "Comma-separated list of raw DHCID records" -msgstr "" - -msgid "Comma-separated list of raw DLV records" -msgstr "" - -msgid "Comma-separated list of raw DNAME records" -msgstr "" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "" - -msgid "Comma-separated list of raw DS records" -msgstr "" - -msgid "Comma-separated list of raw HIP records" -msgstr "" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "" - -msgid "Comma-separated list of raw KEY records" -msgstr "" - -msgid "KEY Flags" -msgstr "" - -msgid "KEY Protocol" -msgstr "" - -msgid "Protocol" -msgstr "" - -msgid "KEY Algorithm" -msgstr "" - -msgid "KEY Public Key" -msgstr "" - -msgid "Public Key" -msgstr "" - -msgid "Comma-separated list of raw KX records" -msgstr "" - -msgid "Comma-separated list of raw LOC records" -msgstr "" - -msgid "Comma-separated list of raw MX records" -msgstr "" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "" - -msgid "Comma-separated list of raw NS records" -msgstr "" - -msgid "Comma-separated list of raw NSEC records" -msgstr "" - -#, fuzzy -msgid "NSEC Next Domain Name" -msgstr "NIS etki alanı adı" - -#, fuzzy -msgid "Next Domain Name" -msgstr "NIS etki alanı adı" - -msgid "NSEC Type Map" -msgstr "" - -msgid "Type Map" -msgstr "" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "" - -msgid "Comma-separated list of raw PTR records" -msgstr "" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "" - -msgid "RRSIG Type Covered" -msgstr "" - -msgid "Type Covered" -msgstr "" - -msgid "RRSIG Algorithm" -msgstr "" - -msgid "RRSIG Labels" -msgstr "" - -msgid "Labels" -msgstr "" - -msgid "RRSIG Original TTL" -msgstr "" - -msgid "Original TTL" -msgstr "" - -msgid "RRSIG Signature Expiration" -msgstr "" - -msgid "Signature Expiration" -msgstr "" - -msgid "RRSIG Signature Inception" -msgstr "" - -msgid "Signature Inception" -msgstr "" - -msgid "RRSIG Key Tag" -msgstr "" - -msgid "RRSIG Signer's Name" -msgstr "" - -msgid "Signer's Name" -msgstr "" - -msgid "RRSIG Signature" -msgstr "" - -msgid "Signature" -msgstr "" - -msgid "Comma-separated list of raw RP records" -msgstr "" - -msgid "Comma-separated list of raw SIG records" -msgstr "" - -msgid "SIG Type Covered" -msgstr "" - -msgid "SIG Algorithm" -msgstr "" - -msgid "SIG Labels" -msgstr "" - -msgid "SIG Original TTL" -msgstr "" - -msgid "SIG Signature Expiration" -msgstr "" - -msgid "SIG Signature Inception" -msgstr "" - -msgid "SIG Key Tag" -msgstr "" - -msgid "SIG Signer's Name" -msgstr "" - -msgid "SIG Signature" -msgstr "" - -msgid "Comma-separated list of raw SPF records" -msgstr "" - -msgid "Comma-separated list of raw SRV records" -msgstr "" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "" - -msgid "Comma-separated list of raw TA records" -msgstr "" - -msgid "Comma-separated list of raw TKEY records" -msgstr "" - -msgid "Comma-separated list of raw TSIG records" -msgstr "" - -msgid "Comma-separated list of raw TXT records" -msgstr "" - -msgid "SOA time to live" -msgstr "" - -msgid "SOA record time to live" -msgstr "" - -msgid "SOA class" -msgstr "" - -msgid "SOA record class" -msgstr "" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" - -#, fuzzy -msgid "Consume an entitlement." -msgstr "Komut uygulanmadı" - -msgid "Quantity" -msgstr "" - -#, fuzzy -msgid "Search for entitlement accounts." -msgstr "Bir ağ grubu ara." - -msgid "Retrieve the entitlement certs." -msgstr "" - -msgid "Import an entitlement certificate." -msgstr "" - -msgid "UUID" -msgstr "" - -msgid "Enrollment UUID" -msgstr "" - -msgid "Register to the entitlement system." -msgstr "" - -#, fuzzy -msgid "Username" -msgstr "Sunucu adı" - -#, fuzzy -msgid "Enrollment UUID (not implemented)" -msgstr "Komut uygulanmadı" - -msgid "Registration password" -msgstr "" - -msgid "Display current entitlements." -msgstr "" - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" - -msgid "comma-separated list of users to add" -msgstr "" - -msgid "comma-separated list of groups to add" -msgstr "" - -msgid "comma-separated list of users to remove" -msgstr "" - -msgid "comma-separated list of groups to remove" -msgstr "" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -#, fuzzy -msgid "Source host category" -msgstr "Ana makine kategorisi" - -#, fuzzy -msgid "Source host category the rule applies to" -msgstr "Kuralın geçerli olduğu ana makine kategorisi" - -msgid "Source Hosts" -msgstr "" - -msgid "Source Host Groups" -msgstr "" - -msgid "comma-separated list of hosts to add" -msgstr "" - -msgid "comma-separated list of host groups to add" -msgstr "" - -msgid "comma-separated list of HBAC services to add" -msgstr "" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "" - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "" - -msgid "comma-separated list of hosts to remove" -msgstr "" - -msgid "comma-separated list of host groups to remove" -msgstr "" - -msgid "comma-separated list of HBAC services to remove" -msgstr "" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" - -msgid "Source host" -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" -"\n" -"Ağ grupları (netgroups)\n" -"\n" -"Bir ağ grubu, izin denetimi için kullanılan bir gruptur. Hem kullanıcı\n" -"hem de ana makine değerleri içerebilir.\n" -"\n" -"ÖRNEKLER:\n" -"\n" -" Yeni bir ağ grubu ekleyin:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Ağ grubuna üye ekleyin:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Bir üyeyi ağ grubundan kaldırın:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Bir ağ grubu hakkında bilgileri görüntüleyin:\n" -" ipa netgroup-show admins\n" -"\n" -" Bir ağ grubunu silin:\n" -" ipa netgroup-del admins\n" - -msgid "comma-separated list of netgroups to add" -msgstr "" - -msgid "comma-separated list of netgroups to remove" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" "There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" - -#, fuzzy -msgid "Target members of a group" -msgstr "Bir ağ grubuna üye ekle." - -msgid "User group to apply permissions to" -msgstr "" - -msgid "comma-separated list of privileges to add" -msgstr "" - -msgid "Add a system permission without an ACI" -msgstr "" - -#, fuzzy -msgid "Permission type" -msgstr "İzin adı" - -msgid "comma-separated list of privileges to remove" -msgstr "" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "comma-separated list of roles to add" -msgstr "" - -msgid "comma-separated list of permissions" -msgstr "" - -msgid "comma-separated list of roles to remove" -msgstr "" - -msgid "comma-separated list of privileges" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" msgstr "" "\n" -"Self-servis İzinleri\n" -"\n" -"Bir izin, izinlerin ayrıntılı şekilde tayin edilmesini sağlar. Erişim " -"Denetim\n" -"Kuralları veya talimatları (ACI), kullanıcı ekleme, grup değiştirme vb. " -"gibi\n" -"belirli görevleri gerçekleştirme izinleri için izin verir.\n" -"\n" -"Self-servis izni, bir nesnenin kendi girdisinde neleri değiştirebileceğini " -"tanımlar.\n" -"\n" -"\n" -"ÖRNEKLER:\n" -"\n" -" Kullanıcıların adreslerini yönetmesine izin vermek için bir self-servis " -"kuralı\n" -" ekleyin (Bash küme ayracı genişletmesini kullanarak):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" Nitelikler listesini yönetirken, mevcut özellikler de dahil olmak üzere\n" -" tüm nitelikleri listeye eklemeniz gerekir.\n" -" Listeye telephoneNumber ekleyin (Bash küme ayracı genişletmesini " -"kullanarak):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Güncellenmiş kuralımızı görüntüleyin:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Bir kuralı silin:\n" -" ipa selfservice-del \"Users manage their own address\"\n" +"İzin verilen birkaç hedef vardır:\n" +"1. alt ağaç: bir DN; izin, bu DN altındaki alt ağaç için geçerlidir\n" +"2. hedef filtre: bir LDAP filtresi\n" +"3. hedef: Olası joker karakterli DN, iznin geçerli olduğu girdileri " +"belirtir\n" -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" +msgid " ipa --help" +msgstr " ipa --help" -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "\"%s\" geçerli bir izin türü değil" -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" +#, python-format +msgid "\"%s\" is not an object type" +msgstr "\"%s\" bir nesne türü değil" -msgid "comma-separated list of sudo commands to add" -msgstr "" +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "%(attr)s, '%(value)s' içermiyor" -msgid "comma-separated list of sudo commands to remove" -msgstr "" +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "%(attr)s: Geçersiz söz dizimi." -msgid "Active directory domain administrator's password" -msgstr "" +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "%(attr)s: Sadece bir değere izin veriliyor." -msgid "GECOS field" -msgstr "" +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "%(count)d RADIUS vekil sunucusu eşleşti" +msgstr[1] "%(count)d RADIUS vekil sunucusu eşleşti" -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "%(count)d ağ grubu eşleşti" +msgstr[1] "%(count)d ağ grubu eşleşti" -msgid "comma-separated list of sudo command groups to add" -msgstr "" +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "%(count)d eklenti yüklendi" +msgstr[1] "%(count)d eklenti yüklendi" -msgid "comma-separated list of sudo command groups to remove" -msgstr "" +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "%(count)d self-servis eşleşti" +msgstr[1] "%(count)d self-servis eşleşti" -msgid "Failed members" -msgstr "" +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d değişken" -msgid "Failed source hosts/hostgroups" -msgstr "" - -msgid "Failed hosts/hostgroups" -msgstr "" - -msgid "Failed users/groups" -msgstr "" - -msgid "Failed service/service groups" -msgstr "" - -msgid "Failed to remove" -msgstr "" - -msgid "Failed RunAs" -msgstr "" - -msgid "Failed RunAsGroup" -msgstr "" - -msgid "Failed profiles" -msgstr "" - -msgid "Failed CAs" -msgstr "" - -msgid "Failed member manager" -msgstr "" - -msgid "Failed managedby" -msgstr "" - -msgid "Failed allowed to retrieve keytab" -msgstr "" - -msgid "Failed allowed to create keytab" -msgstr "" - -msgid "Failed targets" -msgstr "" +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "%(count)s sunucu eşleşti" +msgstr[1] "%(count)s sunucu eşleşti" #, python-format msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" msgstr "" "%(cver)s istemcisi '%(server)s' konumundaki %(sver)s sunucusu ile uyumsuz" -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "%(server)s sunucusundan bilinmeyen hata %(code)d: %(error)s" - -msgid "an internal error has occurred" -msgstr "dahili bir hata oluştu" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "'%(server)s' konumundaki sunucuda dahili bir hata oluştu" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "bilinmeyen komut '%(name)s'" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "'%(server)s' sunucusunda hata: %(error)s" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "'%(uri)s' adresine bağlanamıyor: %(error)s" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "Geçersiz JSON-RPC isteği: %(error)s" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "XML-RPC aktarımı için veri dönüştürürken hata oluştu: %(error)s" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "Eksik veya geçersiz HTTP Yönlendiricisi, %(referer)s" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" -"Sistem kodlaması UTF-8 olmalı, '%(encoding)s' desteklenmiyor. LC_ALL=\"C." -"UTF-8\", veya LC_ALL=\"\" ve LC_CTYPE=\"C.UTF-8\" olarak ayarlayın." - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Kerberos hatası: %(major)s/%(minor)s" - -msgid "did not receive Kerberos credentials" -msgstr "Kerberos kimlik bilgileri alınmadı" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "'%(service)s' hizmeti Kerberos veri tabanında bulunamadı" - -msgid "No credentials cache found" -msgstr "Kimlik bilgileri önbelleği bulunamadı" - -msgid "Ticket expired" -msgstr "Biletin süresi doldu" - -msgid "Credentials cache permissions incorrect" -msgstr "Kimlik bilgileri önbelleği izinleri yanlış" - -msgid "Bad format in credentials cache" -msgstr "Kimlik bilgileri önbelleğinde bozuk biçim" - -msgid "Cannot resolve KDC for requested realm" -msgstr "İstenen erişim alanı (realm) için KDC çözülemiyor" - -msgid "Session error" -msgstr "Oturum hatası" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "Yetkili %(principal)s doğrulanamıyor: %(message)s" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Yetersiz erişim: %(info)s" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "'%(name)s' komutu argüman almıyor" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "'%(name)s' komutu en fazla %(count)d argüman alıyor" -msgstr[1] "'%(name)s' komutu en fazla %(count)d argüman alıyor" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "çakışan argümanlar ve seçenekler: %(names)s" - -#, python-format -msgid "'%(name)s' is required" -msgstr "'%(name)s' gereklidir" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "geçersiz '%(name)s': %(error)s" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "api, böyle bir ad uzayına sahip değil: '%(name)s'" - -msgid "Passwords do not match" -msgstr "Parolalar eşleşmiyor" - -msgid "Command not implemented" -msgstr "Komut uygulanmadı" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "İstemci yapılandırılmadı. ipa-client-install komutunu çalıştırın." - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "%(name)s etkileşimli olarak alınamadı" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "'%(name)s' komutu kullanımdan kaldırıldı" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "'%(domain)s' etki alanı '%(forest)s' ormanı için kök etki alanı değil" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -msgid "This entry already exists" -msgstr "Bu girdi zaten var" - -msgid "You must enroll a host in order to create a host service" -msgstr "" -"Bir ana makine hizmeti oluşturmak için bir ana makineyi kaydettirmelisiniz" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" -"Hizmet yetkilisi şu biçimde değil: hizmet/tam nitelikli ana makine adı: " -"%(reason)s" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "Yetkilinin erişim alanı, bu IPA sunucusunun erişim alanıyla eşleşmiyor" - -msgid "This command requires root access" -msgstr "Bu komut root erişimi gerektirir" - -msgid "This is already a posix group" -msgstr "Bu zaten bir posix grubu" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "Yetkili, kullanıcı@ERİŞİM_ALANI biçiminde değil: '%(principal)s'" - -msgid "This entry is already enabled" -msgstr "Bu girdi zaten etkin" - -msgid "This entry is already disabled" -msgstr "Bu girdi zaten devre dışı" - -msgid "This entry cannot be enabled or disabled" -msgstr "Bu girdi etkinleştirilemez veya devre dışı bırakılamaz" - -msgid "This entry is not a member" -msgstr "Bu girdi bir üye değil" - -msgid "A group may not be a member of itself" -msgstr "Bir grup, kendisinin üyesi olamaz" - -msgid "This entry is already a member" -msgstr "Bu girdi zaten bir üye" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Base64 kod çözme başarısız oldu: %(reason)s" - -msgid "A group may not be added as a member of itself" -msgstr "Bir grup, kendisinin üyesi olarak eklenemez" - -msgid "The default users group cannot be removed" -msgstr "Öntanımlı kullanıcılar grubu kaldırılamaz" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "Yönetilen bir grubun silinmesine izin verilmiyor. Önce ayrılmalıdır." - -msgid "A managed group cannot have a password policy." -msgstr "Yönetilen bir grubun parola politikası olamaz." - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "'%(entry)s' bir sertifikaya sahip değil." - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "Özel grup oluşturulamadı. '%(group)s' grubu zaten var." - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" -"Tüm üyelerin %(verb)s olduğunu doğrularken bir sorunla karşılaşıldı: %(exc)s" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "%(attr)s, '%(value)s' içermiyor" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" -"Arama ölçütleri yeterince özel değildi. 1 tane bekleniyordu ve %(found)d " -"tane bulundu." - -msgid "This group already allows external members" -msgstr "Bu grup zaten harici üyelere izin veriyor" - -msgid "This group cannot be posix because it is external" -msgstr "Bu grup harici olduğu için posix olamaz" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "Bu zaten bir posix grubudur ve harici bir gruba dönüştürülemez" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "Sunucu kaldırma işlemi iptal edildi: %(reason)s." - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "%(operation)s, %(principal_type)s yetkilileri için desteklenmiyor" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "%(status)s durumuyla istek başarısız oldu: %(reason)s" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" -"\"%(ruleset)s\" eşleme kural kümesinde %(helper)s yardımcısı için birden " -"fazla kural var" - -#, fuzzy, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "%(attr)s, '%(value)s' içermiyor" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "komut ya da yardım konusu '%(topic)s' yok" - -msgid "change collided with another change" -msgstr "değişiklik başka bir değişiklikle çakıştı" - -msgid "no modifications to be performed" -msgstr "yapılacak değişiklik yok" - #, python-format msgid "%(desc)s: %(info)s" msgstr "%(desc)s: %(info)s" -msgid "limits exceeded for this query" -msgstr "bu sorgu için sınırlar aşıldı" +#, python-format +msgid "%(exception)s" +msgstr "%(exception)s" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "%(filename)s: dosya bulunamadı" #, python-format msgid "%(info)s" msgstr "%(info)s" -msgid "modifying primary key is not allowed" -msgstr "birincil anahtarın değiştirilmesine izin verilmiyor" - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "%(attr)s: Sadece bir değere izin veriliyor." - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "%(attr)s: Geçersiz söz dizimi." - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "Yanlış arama filtresi %(info)s" - -msgid "Not allowed on non-leaf entry" -msgstr "Yaprak (leaf) olmayan girdilerde izin verilmiyor" - -msgid "LDAP timeout" -msgstr "LDAP zaman aşımı" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "%(task)s LDAP görev zaman aşımı, Görev DN: '%(task_dn)s'" - -msgid "Configured time limit exceeded" -msgstr "Yapılandırılmış zaman sınırı aşıldı" - -msgid "Configured size limit exceeded" -msgstr "Yapılandırılmış boyut sınırı aşıldı" - -msgid "Configured administrative server limit exceeded" -msgstr "Yapılandırılmış yönetim sunucusu sınırı aşıldı" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "Sertifika işlemi tamamlanamıyor: %(error)s" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "Sertifika biçim hatası: %(error)s" - -msgid "Already registered" -msgstr "Zaten kayıtlı" - -msgid "Not registered yet" -msgstr "Henüz kayıtlı değil" - #, python-format msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" msgstr "%(key)s silinemiyor çünkü %(label)s %(dependent)s onu gerektiriyor" @@ -12412,36 +522,80 @@ msgstr "" msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" msgstr "%(label)s %(key)s silinemiyor/değiştirilemiyor: %(reason)s" +#, python-format +msgid "%(line)s" +msgstr "%(line)s" + #, python-format msgid "%(name)s certificate is not valid" msgstr "%(name)s sertifikası geçerli değil" #, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "Şema güncel (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "%(operation)s, %(principal_type)s yetkilileri için desteklenmiyor" #, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "'%(hostname)s' ana makinesinin karşılık gelen DNS A/AAAA kaydı yok" +msgid "%(port)s is not a valid port" +msgstr "%(port)s geçerli bir bağlantı noktası değil" #, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "DNS denetimi başarısız oldu: Beklenen {%(expected)s} alınan {%(got)s}" +msgid "%(reason)s" +msgstr "%(reason)s" #, python-format -msgid "%(exception)s" -msgstr "%(exception)s" +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "%(subject)s: Hatalı biçimlendirilmiş sertifika. %(reason)s" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "%(task)s LDAP görev zaman aşımı, Görev DN: '%(task_dn)s'" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "'%(command)s' kullanımdan kaldırıldı. %(additional_info)s" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "'%(entry)s' bir sertifikaya sahip değil." + +#, python-format +msgid "'%(name)s' is required" +msgstr "'%(name)s' gereklidir" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "'%(option)s' seçeneği kullanımdan kaldırıldı. %(additional_info)s" + +msgid "A description of this RADIUS proxy server" +msgstr "Bu RADIUS vekil sunucusunun açıklaması" + +msgid "A dictionary representing an LDAP entry" +msgstr "Bir LDAP girdisini temsil eden bir sözlük" + +msgid "A group may not be a member of itself" +msgstr "Bir grup, kendisinin üyesi olamaz" + +msgid "A group may not be added as a member of itself" +msgstr "Bir grup, kendisinin üyesi olarak eklenemez" + +msgid "A list of LDAP entries" +msgstr "LDAP girdilerinin bir listesi" + +msgid "A managed group cannot have a password policy." +msgstr "Yönetilen bir grubun parola politikası olamaz." #, python-format msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" msgstr "" -"'%(forest)s' ormanının %(domains)s orman(lar)ına mevcut güveni var, bu da " -"'%(conflict)s' güvenmeyi engelliyor" +"Tüm üyelerin %(verb)s olduğunu doğrularken bir sorunla karşılaşıldı: %(exc)s" -msgid "Additional instructions:" -msgstr "Ek talimatlar:" +msgid "A string searched in all relevant object attributes" +msgstr "İlgili tüm nesne niteliklerinde aranan bir dizge" + +msgid "ACI" +msgstr "ACI" #, python-format msgid "" @@ -12451,6 +605,113 @@ msgstr "" "API Sürüm numarası gönderilmedi, ileri dönük uyumluluk garanti edilmiyor. " "Sunucunun API sürümünü varsayılıyor, %(server_version)s" +msgid "Add a new RADIUS proxy server." +msgstr "Yeni bir RADIUS vekil sunucusu ekle." + +msgid "Add a new netgroup." +msgstr "Yeni bir ağ grubu ekle." + +msgid "Add a new self-service permission." +msgstr "Yeni bir self-servis izni ekle." + +msgid "Add members to a netgroup." +msgstr "Bir ağ grubuna üye ekle." + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "RADIUS vekil sunucusu \"%(value)s\" eklendi" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" eklendi" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" eklendi" + +msgid "Additional instructions:" +msgstr "Ek talimatlar:" + +msgid "All commands should at least have a result" +msgstr "Tüm komutların en azından bir sonucu olmalıdır" + +msgid "Already registered" +msgstr "Zaten kayıtlı" + +msgid "Attributes" +msgstr "Nitelikler" + +msgid "Attributes to which the permission applies." +msgstr "İznin geçerli olduğu nitelikler." + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" +"DNS sistem kayıtlarının otomatik güncellenmesi başarısız oldu. Eksik " +"kayıtların listesini almak için lütfen sistem kayıtlarının güncellemesini el " +"ile yeniden çalıştırın." + +msgid "Bad format in credentials cache" +msgstr "Kimlik bilgileri önbelleğinde bozuk biçim" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "Yanlış arama filtresi %(info)s" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Base64 kod çözme başarısız oldu: %(reason)s" + +msgid "Cannot resolve KDC for requested realm" +msgstr "İstenen erişim alanı (realm) için KDC çözülemiyor" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "Sertifika biçim hatası: %(error)s" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "Sertifika işlemi tamamlanamıyor: %(error)s" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "İstemci yapılandırılmadı. ipa-client-install komutunu çalıştırın." + +msgid "Client version. Used to determine if server will accept request." +msgstr "" +"İstemci sürümü. Sunucunun isteği kabul edip etmeyeceğini belirlemek için " +"kullanılır." + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "'%(name)s' komutu kullanımdan kaldırıldı" + +msgid "Command name" +msgstr "Komut adı" + +msgid "Command not implemented" +msgstr "Komut uygulanmadı" + +msgid "Configured administrative server limit exceeded" +msgstr "Yapılandırılmış yönetim sunucusu sınırı aşıldı" + +msgid "Configured size limit exceeded" +msgstr "Yapılandırılmış boyut sınırı aşıldı" + +msgid "Configured time limit exceeded" +msgstr "Yapılandırılmış zaman sınırı aşıldı" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "%(name)s etkileşimli olarak alınamadı" + +msgid "Credentials cache permissions incorrect" +msgstr "Kimlik bilgileri önbelleği izinleri yanlış" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "DNS denetimi başarısız oldu: Beklenen {%(expected)s} alınan {%(got)s}" + msgid "" "DNS forwarder semantics changed since IPA 4.0.\n" "You may want to use forward zones (dnsforwardzone-*) instead.\n" @@ -12460,29 +721,15 @@ msgstr "" "Bunun yerine ileri bölgeler (dnsforwardzone-*) kullanmak isteyebilirsiniz.\n" "Daha fazla ayrıntı için belgeleri okuyun." -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" -"DNSSEC desteği deneyseldir.\n" -"%(additional_info)s" +msgid "DNS label cannot be longer than 63 characters" +msgstr "DNS etiketi 63 karakterden uzun olamaz" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "DNS etiketi 63 karakterden uzun olamaz" #, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "'%(option)s' seçeneği kullanımdan kaldırıldı. %(additional_info)s" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" -"%(label)s semantiği değişti. %(current_behavior)s\n" -"%(hint)s" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "%(server)s DNS sunucusu: %(error)s." +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "%(host)s ana makinesinin DNS kayıt(lar)ı kaldırılamadı. (%(reason)s)" #, python-format msgid "" @@ -12492,16 +739,6 @@ msgstr "" "%(server)s DNS sunucusu DNSSEC desteklemiyor: %(error)s.\n" "IPA sunucu(lar)ında DNSSEC doğrulaması etkinse, lütfen devre dışı bırakın." -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" -"\"%(fwzone)s\" ileri bölgesi, \"%(authzone)s\" yetkili bölgesinde uygun NS " -"temsilcisinin eksik olması nedeniyle etkili değildir. Lütfen \"%(authzone)s" -"\" üst bölgesine \"%(ns_rec)s\" NS kaydını ekleyin." - #, python-format msgid "" "DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" @@ -12510,6 +747,18 @@ msgstr "" "%(server)s DNS sunucusu EDNS0 desteklemiyor (RFC 6891): %(error)s.\n" "IPA sunucu(lar)ında DNSSEC doğrulaması etkinse, lütfen devre dışı bırakın." +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "%(server)s DNS sunucusu: %(error)s." + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" +"DNSSEC desteği deneyseldir.\n" +"%(additional_info)s" + #, python-format msgid "" "DNSSEC validation failed: %(error)s.\n" @@ -12520,6 +769,443 @@ msgstr "" "Lütfen DNSSEC yapılandırmanızı doğrulayın veya tüm IPA sunucularında DNSSEC " "doğrulamasını devre dışı bırakın." +msgid "Delete a RADIUS proxy server." +msgstr "Bir RADIUS vekil sunucusunu sil." + +msgid "Delete a netgroup." +msgstr "Bir ağ grubunu sil." + +msgid "Delete a self-service permission." +msgstr "Bir self-servis iznini sil." + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "RADIUS vekil sunucusu \"%(value)s\" silindi" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" silindi" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" silindi" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "Yönetilen bir grubun silinmesine izin verilmiyor. Önce ayrılmalıdır." + +msgid "Deprecated options" +msgstr "Kullanımdan kaldırılan seçenekler" + +msgid "Description" +msgstr "Açıklama" + +msgid "Dictionary mapping variable name to value" +msgstr "Değişken adını değere eşleyen sözlük" + +msgid "Display information about a RADIUS proxy server." +msgstr "Bir RADIUS vekil sunucusu hakkında bilgileri görüntüle." + +msgid "Display information about a netgroup." +msgstr "Bir ağ grubu hakkında bilgileri görüntüle." + +msgid "Display information about a self-service permission." +msgstr "Bir self-servis izni hakkında bilgileri görüntüle." + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "'%(domain)s' etki alanı '%(forest)s' ormanı için kök etki alanı değil" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "Doğrulamak için tekrar %(label)s girin: " + +msgid "Exceeded number of tries to forward a request." +msgstr "İsteği iletme denemesi sayısı aşıldı." + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "Certificate Signing Request kodu çözülemedi: %s" + +msgid "Filename is empty" +msgstr "Dosya adı boş" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" +"'%(forest)s' ormanının %(domains)s orman(lar)ına mevcut güveni var, bu da " +"'%(conflict)s' güvenmeyi engelliyor" + +msgid "Forward to server instead of running locally" +msgstr "Yerel olarak çalışmak yerine sunucuya ilet" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" +"İletme politikası bazı otomatik boş bölgelerle çakışıyor. RFC 6303 " +"tarafından belirtilen bölgeler için sorgular, iletme ve yinelemeyi yok sayar " +"ve her zaman NXDOMAIN cavaplarıyla sonuçlanır. Bu davranışı geçersiz kılmak " +"için 'only' iletme politikasını kullanın." + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "'%(hostname)s' ana makinesinin karşılık gelen DNS A/AAAA kaydı yok" + +msgid "Host category" +msgstr "Ana makine kategorisi" + +msgid "Host category the rule applies to" +msgstr "Kuralın geçerli olduğu ana makine kategorisi" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" +"IPA %(zone)s bölgesini yönetmiyor, lütfen kayıtları DNS sunucunuza el ile " +"ekleyin" + +msgid "IPA server hostname" +msgstr "IPA sunucusu ana makine adı" + +msgid "IPA unique ID" +msgstr "IPA benzersiz kimliği" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Yetersiz erişim: %(info)s" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "Geçersiz JSON-RPC isteği: %(error)s" + +#, c-format +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "" +"JSON-RPC isteği:\n" +"%s\n" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Kerberos hatası: %(major)s/%(minor)s" + +msgid "LDAP timeout" +msgstr "LDAP zaman aşımı" + +msgid "Leading and trailing spaces are not allowed" +msgstr "Baştaki ve sondaki boşluklara izin verilmiyor" + +msgid "List of deletions that failed" +msgstr "Başarısız olan silmelerin listesi" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "Hatalı biçimlendirilmiş yetkili: '%(value)s'" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" +"\"%(ruleset)s\" eşleme kural kümesinde %(helper)s yardımcısı için birden " +"fazla kural var" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "Döndürülen en fazla girdi sayısı (0 sınırsızdır)" + +msgid "Member Host" +msgstr "Üye Ana Makine" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "Eksik veya geçersiz HTTP Yönlendiricisi, %(referer)s" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "RADIUS vekil sunucusu \"%(value)s\" değiştirildi" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "Ağ grubu \"%(value)s\" değiştirildi" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "Self-servis \"%(value)s\" değiştirildi" + +msgid "Modify a RADIUS proxy server." +msgstr "Bir RADIUS vekil sunucusunu değiştir." + +msgid "Modify a netgroup." +msgstr "Bir ağ grubunu değiştir." + +msgid "Modify a self-service permission." +msgstr "Bir self-servis iznini değiştir." + +msgid "NIS domain name" +msgstr "NIS etki alanı adı" + +msgid "Netgroup" +msgstr "Ağ grubu" + +msgid "Netgroup description" +msgstr "Ağ grubu açıklaması" + +msgid "Netgroup name" +msgstr "Ağ grubu adı" + +msgid "Netgroups" +msgstr "Ağ grupları" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" +"%(location)s IPA konumunda DNS sunucusu yok. DNS sunucuları olmadan konum " +"beklendiği gibi çalışmıyor." + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" +"Kurulu DNSSEC anahtar yöneticisi yok. DNSSEC anahtar yöneticisi kurulana " +"kadar DNSSEC bölge imzalama çalışmayacaktır." + +msgid "No credentials cache found" +msgstr "Kimlik bilgileri önbelleği bulunamadı" + +msgid "No file to read" +msgstr "Okunacak dosya yok" + +msgid "No matching entries found" +msgstr "Eşleşen girdi bulunamadı" + +msgid "Not allowed on non-leaf entry" +msgstr "Yaprak (leaf) olmayan girdilerde izin verilmiyor" + +msgid "Not registered yet" +msgstr "Henüz kayıtlı değil" + +msgid "Number of entries returned" +msgstr "Döndürülen girdi sayısı" + +msgid "Number of plugins loaded" +msgstr "Yüklenen eklenti sayısı" + +msgid "Number of variables returned (<= total)" +msgstr "Döndürülen değişken sayısı (<= total)" + +msgid "Only one value is allowed" +msgstr "Sadece bir değere izin veriliyor" + +msgid "PKINIT" +msgstr "PKINIT" + +msgid "PKINIT status" +msgstr "PKINIT durumu" + +msgid "Passwords do not match" +msgstr "Parolalar eşleşmiyor" + +msgid "Passwords do not match!" +msgstr "Parolalar eşleşmiyor!" + +msgid "Permission" +msgstr "İzin" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "İzin reddedildi: %(file)s" + +msgid "Permission flags" +msgstr "İzin bayrakları" + +msgid "Permission name" +msgstr "İzin adı" + +msgid "Permissions" +msgstr "İzinler" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "Verilecek izinler (okuma, yazma) Öntanımlı: yazma." + +msgid "Positional arguments" +msgstr "Konumsal argümanlar" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "Yetkili %(principal)s doğrulanamıyor: %(message)s" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "Yetkili, kullanıcı@ERİŞİM_ALANI biçiminde değil: '%(principal)s'" + +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" +"Girdileri sunucuda depolandığı şekilde yazdır. Sadece çıktı biçimini etkiler." + +msgid "RADIUS Server" +msgstr "RADIUS Sunucusu" + +msgid "RADIUS Servers" +msgstr "RADIUS Sunucuları" + +msgid "RADIUS proxy server" +msgstr "RADIUS vekil sunucusu" + +msgid "RADIUS proxy server name" +msgstr "RADIUS vekil sunucusu adı" + +msgid "RADIUS proxy servers" +msgstr "RADIUS vekil sunucuları" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" +"'%(record)s' göreceli kayıt adı, '%(zone)s' bölge adını son ek olarak " +"içeriyor, bu da '%(fqdn)s' tam nitelikli etki alanı adıyla sonuçlanıyor. Bu " +"genellikle ad belirtiminin sonundaki noktanın eksik olmasının neden olduğu " +"bir hatadır." + +msgid "Remove members from a netgroup." +msgstr "Bir ağ grubundan üye kaldır." + +#, python-format +msgid "Replication agreement for %(hostname)s not found" +msgstr "%(hostname)s için çoğaltma anlaşması bulunamadı" + +msgid "Report PKINIT status on the IPA masters" +msgstr "IPA yöneticilerinde PKINIT durumunu bildir" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "%(status)s durumuyla istek başarısız oldu: %(reason)s" + +msgid "Results are truncated, try a more specific search" +msgstr "Sonuçlar kısaltıldı, daha özel bir arama yapmayı deneyin" + +msgid "Retries" +msgstr "Yeniden denemeler" + +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "Tüm nitelikleri sunucudan al ve yazdır. Komut çıktısını etkiler." + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "CA sertifika zinciri alınamadı: %s" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "CA durumunu alma %d durumuyla başarısız oldu" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "CA durumu alınamadı: %s" + +#, python-format +msgid "Same as --%s" +msgstr "--%s ile aynı" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "Şema güncel (FP '%(fingerprint)s', TTL %(ttl)s s)" + +msgid "Search for RADIUS proxy servers." +msgstr "RADIUS vekil sunucularını ara." + +msgid "Search for a netgroup." +msgstr "Bir ağ grubu ara." + +msgid "Search for a self-service permission." +msgstr "Bir self-servis izni ara." + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "Arama sonucu kısaltıldı: %(reason)s" + +msgid "Secret" +msgstr "Parola" + +msgid "Self Service Permission" +msgstr "Self Servis İzni" + +msgid "Self Service Permissions" +msgstr "Self Servis İzinleri" + +msgid "Self-service name" +msgstr "Self-servis adı" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" +"%(label)s semantiği değişti. %(current_behavior)s\n" +"%(hint)s" + +msgid "Server" +msgstr "Sunucu" + +msgid "Server name" +msgstr "Sunucu adı" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "Sunucu kaldırma işlemi iptal edildi: %(reason)s." + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" +"%(service)s hizmeti, yapılandırma değişikliklerini uygulamak için %(server)s " +"IPA sunucusunda yeniden başlatma gerektiriyor." + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "'%(service)s' hizmeti Kerberos veri tabanında bulunamadı" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" +"Hizmet yetkilisi şu biçimde değil: hizmet/tam nitelikli ana makine adı: " +"%(reason)s" + +msgid "Service principal is required" +msgstr "Hizmet yetkilisi gereklidir" + +msgid "Session error" +msgstr "Oturum hatası" + +msgid "Show all loaded plugins." +msgstr "Yüklenen tüm eklentileri göster." + +msgid "Show environment variables." +msgstr "Ortam değişkenlerini göster." + +msgid "Size Limit" +msgstr "Boyut Sınırı" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set " +"LC_ALL=\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" +"Sistem kodlaması UTF-8 olmalı, '%(encoding)s' desteklenmiyor. LC_ALL=\"C." +"UTF-8\", veya LC_ALL=\"\" ve LC_CTYPE=\"C.UTF-8\" olarak ayarlayın." + #, python-format msgid "" "The _kerberos TXT record from domain %(domain)s could not be created " @@ -12542,35 +1228,154 @@ msgstr "" "Bu, bölge IPA tarafından yönetilmiyorsa meydana gelebilir. Lütfen kaydı el " "ile kaldırın." -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "%(ca)s için bu sunucuda sertifika yok." + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "%(char)r karakterine izin verilmiyor." + +msgid "The default users group cannot be removed" +msgstr "Öntanımlı kullanıcılar grubu kaldırılamaz" + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "Ana makine eklendi ancak DNS güncellemesi başarısız oldu: %(reason)s" + +msgid "The hostname or IP (with or without port)" +msgstr "Ana makine adı veya IP (bağlantı noktasıyla birlikte veya değil)" + +msgid "The number of times to retry authentication" +msgstr "Kimlik doğrulamayı yeniden deneme sayısı" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" msgstr "" -"Kurulu DNSSEC anahtar yöneticisi yok. DNSSEC anahtar yöneticisi kurulana " -"kadar DNSSEC bölge imzalama çalışmayacaktır." +"Girdinin primary_key (birincil anahtar) değeri, örneğin bir kullanıcı için " +"'jdoe'" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "Yetkilinin erişim alanı, bu IPA sunucusunun erişim alanıyla eşleşmiyor" #, python-format msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." +"The search criteria was not specific enough. Expected 1 and found %(found)d." msgstr "" -"'%(record)s' göreceli kayıt adı, '%(zone)s' bölge adını son ek olarak " -"içeriyor, bu da '%(fqdn)s' tam nitelikli etki alanı adıyla sonuçlanıyor. Bu " -"genellikle ad belirtiminin sonundaki noktanın eksik olmasının neden olduğu " -"bir hatadır." +"Arama ölçütleri yeterince özel değildi. 1 tane bekleniyordu ve %(found)d " +"tane bulundu." + +msgid "The secret used to encrypt data" +msgstr "Verileri şifrelemek için kullanılan parola" + +msgid "The topic or command name." +msgstr "Konu veya komut adı." + +msgid "The total timeout across all retries (in seconds)" +msgstr "Tüm yeniden denemelerde toplam zaman aşımı (saniye cinsinden)" + +msgid "The username attribute on the user object" +msgstr "Kullanıcı nesnesindeki kullanıcı adı niteliği" + +msgid "This command requires root access" +msgstr "Bu komut root erişimi gerektirir" + +msgid "This entry already exists" +msgstr "Bu girdi zaten var" + +msgid "This entry cannot be enabled or disabled" +msgstr "Bu girdi etkinleştirilemez veya devre dışı bırakılamaz" + +msgid "This entry is already a member" +msgstr "Bu girdi zaten bir üye" + +msgid "This entry is already disabled" +msgstr "Bu girdi zaten devre dışı" + +msgid "This entry is already enabled" +msgstr "Bu girdi zaten etkin" + +msgid "This entry is not a member" +msgstr "Bu girdi bir üye değil" + +msgid "This group already allows external members" +msgstr "Bu grup zaten harici üyelere izin veriyor" + +msgid "This group cannot be posix because it is external" +msgstr "Bu grup harici olduğu için posix olamaz" + +msgid "This is already a posix group" +msgstr "Bu zaten bir posix grubu" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "Bu zaten bir posix grubudur ve harici bir gruba dönüştürülemez" + +msgid "Ticket expired" +msgstr "Biletin süresi doldu" + +msgid "Time Limit" +msgstr "Zaman Sınırı" + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "Saniye cinsinden aramanın zaman sınırı (0 sınırsızdır)" + +msgid "Timeout" +msgstr "Zaman aşımı" + +msgid "To get command help, use:" +msgstr "Komut yardımı almak için şunu kullanın:" + +msgid "Topic commands:" +msgstr "Konu komutları:" + +msgid "Topic or Command" +msgstr "Konu veya Komut" + +msgid "Total number of variables env (>= count)" +msgstr "Toplam ortam değişkeni sayısı (>= count)" + +msgid "True if not all results were returned" +msgstr "Tüm sonuçlar döndürülmediyse True" + +msgid "True means the operation was successful" +msgstr "True, işlemin başarılı olduğu anlamına gelir" #, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "'%(command)s' kullanımdan kaldırıldı. %(additional_info)s" +msgid "Unable to communicate with CMS (status %d)" +msgstr "CMS ile iletişim kurulamadı (durum %d)" #, python-format -msgid "%(line)s" -msgstr "%(line)s" +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "Özel grup oluşturulamadı. '%(group)s' grubu zaten var." #, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "Arama sonucu kısaltıldı: %(reason)s" +msgid "Unknown option: %(option)s" +msgstr "Bilinmeyen seçenek: %(option)s" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" +"'%(record)s' sistem kaydının güncellenmesi şu hatayla başarısız oldu: " +"%(error)s" + +msgid "User attribute" +msgstr "Kullanıcı niteliği" + +msgid "User category" +msgstr "Kullanıcı kategorisi" + +msgid "User category the rule applies to" +msgstr "Kuralın geçerli olduğu kullanıcı kategorisi" + +msgid "User-friendly description of action performed" +msgstr "Gerçekleştirilen eylemin kullanıcı dostu açıklaması" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "PKINIT etkin mi devre dışı mı olduğu" + +msgid "You must enroll a host in order to create a host service" +msgstr "" +"Bir ana makine hizmeti oluşturmak için bir ana makineyi kaydettirmelisiniz" #, python-format msgid "" @@ -12580,209 +1385,12 @@ msgstr "" "%(domain)s etki alanına güveniniz bozuldu. Lütfen 'ipa trust-add' komutunu " "çalıştırarak yeniden oluşturun." -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "%(host)s ana makinesinin DNS kayıt(lar)ı kaldırılamadı. (%(reason)s)" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" -"İletme politikası bazı otomatik boş bölgelerle çakışıyor. RFC 6303 " -"tarafından belirtilen bölgeler için sorgular, iletme ve yinelemeyi yok sayar " -"ve her zaman NXDOMAIN cavaplarıyla sonuçlanır. Bu davranışı geçersiz kılmak " -"için 'only' iletme politikasını kullanın." +msgid "an internal error has occurred" +msgstr "dahili bir hata oluştu" #, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" -"'%(record)s' sistem kaydının güncellenmesi şu hatayla başarısız oldu: " -"%(error)s" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" -"IPA %(zone)s bölgesini yönetmiyor, lütfen kayıtları DNS sunucunuza el ile " -"ekleyin" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" -"DNS sistem kayıtlarının otomatik güncellenmesi başarısız oldu. Eksik " -"kayıtların listesini almak için lütfen sistem kayıtlarının güncellemesini el " -"ile yeniden çalıştırın." - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" -"%(service)s hizmeti, yapılandırma değişikliklerini uygulamak için %(server)s " -"IPA sunucusunda yeniden başlatma gerektiriyor." - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" -"%(location)s IPA konumunda DNS sunucusu yok. DNS sunucuları olmadan konum " -"beklendiği gibi çalışmıyor." - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "%(subject)s: Hatalı biçimlendirilmiş sertifika. %(reason)s" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "Ana makine eklendi ancak DNS güncellemesi başarısız oldu: %(reason)s" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "%(ca)s için bu sunucuda sertifika yok." - -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d değişken" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "%(count)d eklenti yüklendi" -msgstr[1] "%(count)d eklenti yüklendi" - -msgid "A dictionary representing an LDAP entry" -msgstr "Bir LDAP girdisini temsil eden bir sözlük" - -msgid "A list of LDAP entries" -msgstr "LDAP girdilerinin bir listesi" - -msgid "All commands should at least have a result" -msgstr "Tüm komutların en azından bir sonucu olmalıdır" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "Doğrulamak için tekrar %(label)s girin: " - -msgid "Passwords do not match!" -msgstr "Parolalar eşleşmiyor!" - -msgid "No matching entries found" -msgstr "Eşleşen girdi bulunamadı" - -msgid "Topic or Command" -msgstr "Konu veya Komut" - -msgid "The topic or command name." -msgstr "Konu veya komut adı." - -msgid "Topic commands:" -msgstr "Konu komutları:" - -msgid "To get command help, use:" -msgstr "Komut yardımı almak için şunu kullanın:" - -msgid " ipa --help" -msgstr " ipa --help" - -msgid "Command name" -msgstr "Komut adı" - -msgid "Positional arguments" -msgstr "Konumsal argümanlar" - -#, python-format -msgid "Same as --%s" -msgstr "--%s ile aynı" - -msgid "Deprecated options" -msgstr "Kullanımdan kaldırılan seçenekler" - -msgid "No file to read" -msgstr "Okunacak dosya yok" - -msgid "Results are truncated, try a more specific search" -msgstr "Sonuçlar kısaltıldı, daha özel bir arama yapmayı deneyin" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "Bilinmeyen seçenek: %(option)s" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" -"İstemci sürümü. Sunucunun isteği kabul edip etmeyeceğini belirlemek için " -"kullanılır." - -#, python-format -msgid "%(filename)s: file not found" -msgstr "%(filename)s: dosya bulunamadı" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "" - -msgid "any of the configured servers" -msgstr "yapılandırılan sunuculardan herhangi biri" - -msgid "Exceeded number of tries to forward a request." -msgstr "İsteği iletme denemesi sayısı aşıldı." - -msgid "Filename is empty" -msgstr "Dosya adı boş" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "İzin reddedildi: %(file)s" - -msgid "empty DNS label" -msgstr "boş DNS etiketi" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "DNS etiketi 63 karakterden uzun olamaz" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" -"sadece harflere, sayılara, %(chars)s karakterlerine izin veriliyor, DNS " -"etiketi %(chars2)s ile başlayamaz veya bitemez" - -msgid "single label {}s are not supported" -msgstr "tek etiketli {}s desteklenmiyor" - -msgid "too many '@' characters" -msgstr "çok fazla '@' karakteri" - -msgid "cannot be longer that {} characters" -msgstr "{} karakterden uzun olamaz" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "ana makine adı boş etiket içeriyor (ardışık noktalar)" - -msgid "not fully qualified" -msgstr "tam nitelikli değil" - -msgid "invalid SSH public key" -msgstr "geçersiz SSH genel anahtarı" - -msgid "options are not allowed" -msgstr "seçeneklere izin verilmiyor" - -msgid "invalid hostmask" -msgstr "geçersiz ana makine maskesi" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "sorgu '%(owner)s %(rtype)s': %(error)s" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "sorgu '%(owner)s %(rtype)s' EDNS0 ile: %(error)s" +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "'%(server)s' konumundaki sunucuda dahili bir hata oluştu" #, python-format msgid "" @@ -12792,32 +1400,116 @@ msgstr "" "'%(owner)s %(rtype)s' sorgusunun yanıtında DNSSEC imzaları eksik (RRSIG " "verisi yok)" +msgid "any of the configured servers" +msgstr "yapılandırılan sunuculardan herhangi biri" + #, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" -"%(ip)s sunucusunda '%(owner)s %(rtype)s' kaydının DNSSEC doğrulaması " -"başarısız oldu" +msgid "api has no such namespace: '%(name)s'" +msgstr "api, böyle bir ad uzayına sahip değil: '%(name)s'" -msgid "invalid escape code in domain name" -msgstr "etki alanı adında geçersiz kaçış kodu" +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "standart yetkili adına eşit en az bir değer bulunmalıdır" -msgid "domain name cannot be longer than 255 characters" -msgstr "etki alanı adı 255 karakterden uzun olamaz" +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "en fazla %(maxlength)d bayt olabilir" -msgid "DNS label cannot be longer than 63 characters" -msgstr "DNS etiketi 63 karakterden uzun olamaz" +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "en fazla %(maxlength)d olabilir" -msgid "invalid domain name" -msgstr "geçersiz etki alanı adı" +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "en fazla %(maxvalue)d olabilir" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "en fazla %(maxvalue)s olabilir" + +msgid "cannot be longer that {} characters" +msgstr "{} karakterden uzun olamaz" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "'%(uri)s' adresine bağlanamıyor: %(error)s" + +msgid "change collided with another change" +msgstr "değişiklik başka bir değişiklikle çakıştı" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "'%(name)s' komutu en fazla %(count)d argüman alıyor" +msgstr[1] "'%(name)s' komutu en fazla %(count)d argüman alıyor" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "'%(name)s' komutu argüman almıyor" + +msgid "did not receive Kerberos credentials" +msgstr "Kerberos kimlik bilgileri alınmadı" + +msgid "does not match any of accepted formats: " +msgstr "kabul edilen biçimlerle eşleşmiyor: " #, python-format msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" msgstr "" "'%(domain)s' etki alanı adı şu şekilde normalleştirilmelidir: %(normalized)s" +msgid "domain name cannot be longer than 255 characters" +msgstr "etki alanı adı 255 karakterden uzun olamaz" + +msgid "empty DNS label" +msgstr "boş DNS etiketi" + #, python-format -msgid "invalid domain-name: %s" -msgstr "geçersiz etki alanı adı: %s" +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "XML-RPC aktarımı için veri dönüştürürken hata oluştu: %(error)s" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "'%(server)s' sunucusunda hata: %(error)s" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" +"\"%(fwzone)s\" ileri bölgesi, \"%(authzone)s\" yetkili bölgesinde uygun NS " +"temsilcisinin eksik olması nedeniyle etkili değildir. Lütfen " +"\"%(authzone)s\" üst bölgesine \"%(ns_rec)s\" NS kaydını ekleyin." + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" +"izin verilen ana makineler varken ana makine kategorisi 'all' olarak " +"ayarlanamaz" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"\"%s\" adlı bir ana makine grubu zaten var. Ana makine grupları ve ağ " +"grupları ortak bir ad uzayını paylaşmaktadır" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "ana makine adı boş etiket içeriyor (ardışık noktalar)" + +msgid "incomplete time value" +msgstr "eksik zaman değeri" + +msgid "incorrect type" +msgstr "yanlış tür" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "geçersiz '%(name)s': %(error)s" + +msgid "invalid IP address format" +msgstr "geçersiz IP adresi biçimi" #, python-format msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" @@ -12825,54 +1517,127 @@ msgstr "" "geçersiz IP adresi sürümü (olan %(value)d, olması gereken " "%(required_value)d)!" -msgid "invalid IP address format" -msgstr "geçersiz IP adresi biçimi" +msgid "invalid SSH public key" +msgstr "geçersiz SSH genel anahtarı" + +msgid "invalid attribute name" +msgstr "geçersiz nitelik adı" + +msgid "invalid domain name" +msgstr "geçersiz etki alanı adı" #, python-format -msgid "%(port)s is not a valid port" -msgstr "%(port)s geçerli bir bağlantı noktası değil" +msgid "invalid domain-name: %s" +msgstr "geçersiz etki alanı adı: %s" -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "standart yetkili adına eşit en az bir değer bulunmalıdır" +msgid "invalid escape code in domain name" +msgstr "etki alanı adında geçersiz kaçış kodu" -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" -"erişim alanı veya UPN son eki güvenilir etki alanı ad uzayı ile çakışıyor" +msgid "invalid hostmask" +msgstr "geçersiz ana makine maskesi" -msgid "incorrect type" -msgstr "yanlış tür" +msgid "invalid port number" +msgstr "geçersiz bağlantı noktası numarası" -msgid "Only one value is allowed" -msgstr "Sadece bir değere izin veriliyor" +msgid "limits exceeded for this query" +msgstr "bu sorgu için sınırlar aşıldı" -msgid "this option is deprecated" -msgstr "bu seçenek kullanımdan kaldırıldı" +msgid "modifying primary key is not allowed" +msgstr "birincil anahtarın değiştirilmesine izin verilmiyor" + +#, python-format +msgid "must be '%(value)s'" +msgstr "'%(value)s' olmalı" + +msgid "must be DNS name" +msgstr "DNS adı olmalı" + +msgid "must be Kerberos principal" +msgstr "Kerberos yetkilisi olmalı" msgid "must be True or False" msgstr "True veya False olmalı" +msgid "must be Unicode text" +msgstr "Unicode metni olmalı" + +msgid "must be a certificate" +msgstr "bir sertifika olmalı" + +msgid "must be a certificate signing request" +msgstr "bir sertifika imzalama isteği olmalı" + +msgid "must be a decimal number" +msgstr "bir ondalık sayı olmalı" + +msgid "must be absolute" +msgstr "mutlak olmalı" + msgid "must be an integer" msgstr "bir tam sayı olmalı" +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "en az %(minlength)d bayt olmalı" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "en az %(minlength)d karakter olmalı" + #, python-format msgid "must be at least %(minvalue)d" msgstr "en az %(minvalue)d olmalı" -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "en fazla %(maxvalue)d olabilir" - -msgid "must be a decimal number" -msgstr "bir ondalık sayı olmalı" - #, python-format msgid "must be at least %(minvalue)s" msgstr "en az %(minvalue)s olmalı" +msgid "must be binary data" +msgstr "ikili veri olmalı" + +msgid "must be datetime value" +msgstr "bir datetime değeri olmalı" + +msgid "must be dictionary" +msgstr "sözlük olmalı" + +msgid "must be enclosed in parentheses" +msgstr "parantez içine alınmalı" + #, python-format -msgid "can be at most %(maxvalue)s" -msgstr "en fazla %(maxvalue)s olabilir" +msgid "must be exactly %(length)d bytes" +msgstr "tam olarak %(length)d bayt olmalı" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "tam olarak %(length)d karakter olmalı" + +#, python-format +msgid "must be one of %(values)s" +msgstr "%(values)s değerlerinden biri olmalı" + +msgid "must be relative" +msgstr "göreceli olmalı" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "\"%(pattern)s\" kalıbıyla eşleşmeli" + +msgid "netgroup" +msgstr "ağ grubu" + +msgid "netgroups" +msgstr "ağ grupları" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "komut ya da yardım konusu '%(topic)s' yok" + +msgid "no modifications to be performed" +msgstr "yapılacak değişiklik yok" + +msgid "not fully qualified" +msgstr "tam nitelikli değil" #, python-format msgid "" @@ -12883,12139 +1648,86 @@ msgstr "" "%(allowed)s" #, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "\"%(pattern)s\" kalıbıyla eşleşmeli" - -msgid "must be binary data" -msgstr "ikili veri olmalı" +msgid "objectclass %s not found" +msgstr "%s nesne sınıfı bulunamadı" #, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "en az %(minlength)d bayt olmalı" +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "" +"sadece harflere, sayılara, %(chars)s karakterlerine izin veriliyor, DNS " +"etiketi %(chars2)s ile başlayamaz veya bitemez" + +msgid "options are not allowed" +msgstr "seçeneklere izin verilmiyor" #, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "en fazla %(maxlength)d bayt olabilir" +msgid "overlapping arguments and options: %(names)s" +msgstr "çakışan argümanlar ve seçenekler: %(names)s" + +msgid "permission" +msgstr "izin" + +msgid "permissions" +msgstr "izinler" + +msgid "pkinit" +msgstr "pkinit" #, python-format -msgid "must be exactly %(length)d bytes" -msgstr "tam olarak %(length)d bayt olmalı" - -msgid "must be a certificate" -msgstr "bir sertifika olmalı" - -msgid "must be a certificate signing request" -msgstr "bir sertifika imzalama isteği olmalı" +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "sorgu '%(owner)s %(rtype)s' EDNS0 ile: %(error)s" #, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "Certificate Signing Request kodu çözülemedi: %s" +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "sorgu '%(owner)s %(rtype)s': %(error)s" -msgid "must be Unicode text" -msgstr "Unicode metni olmalı" - -msgid "Leading and trailing spaces are not allowed" -msgstr "Baştaki ve sondaki boşluklara izin verilmiyor" +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" +"erişim alanı veya UPN son eki güvenilir etki alanı ad uzayı ile çakışıyor" #, python-format -msgid "must be at least %(minlength)d characters" -msgstr "en az %(minlength)d karakter olmalı" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "en fazla %(maxlength)d olabilir" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "tam olarak %(length)d karakter olmalı" - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "%(char)r karakterine izin verilmiyor." - -#, python-format -msgid "must be '%(value)s'" -msgstr "'%(value)s' olmalı" - -#, python-format -msgid "must be one of %(values)s" -msgstr "%(values)s değerlerinden biri olmalı" - -msgid "must be datetime value" -msgstr "bir datetime değeri olmalı" - -msgid "does not match any of accepted formats: " -msgstr "kabul edilen biçimlerle eşleşmiyor: " - -msgid "incomplete time value" -msgstr "eksik zaman değeri" - -msgid "must be DNS name" -msgstr "DNS adı olmalı" - -msgid "must be absolute" -msgstr "mutlak olmalı" - -msgid "must be relative" -msgstr "göreceli olmalı" - -msgid "must be dictionary" -msgstr "sözlük olmalı" - -msgid "must be Kerberos principal" -msgstr "Kerberos yetkilisi olmalı" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "Hatalı biçimlendirilmiş yetkili: '%(value)s'" - -msgid "Service principal is required" -msgstr "Hizmet yetkilisi gereklidir" - -#, fuzzy -msgid "must be at least 0" -msgstr "en az %(minvalue)d olmalı" - -#, fuzzy -msgid "invalid valid hex" -msgstr "geçersiz nitelik adı" - -#, fuzzy -msgid "invalid serial number 0" -msgstr "bir ondalık sayı olmalı" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "CA sertifika zinciri alınamadı: %s" +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" +"%(ip)s sunucusunda '%(owner)s %(rtype)s' kaydının DNSSEC doğrulaması " +"başarısız oldu" #, python-format msgid "request failed with HTTP status %d" msgstr "istek %d HTTP durumuyla başarısız oldu" -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "CA durumu alınamadı: %s" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "CA durumunu alma %d durumuyla başarısız oldu" - -#, python-format -msgid "objectclass %s not found" -msgstr "%s nesne sınıfı bulunamadı" - -msgid "Trusting forest" -msgstr "" - -msgid "Trusted forest" -msgstr "" - -msgid "Established and verified" -msgstr "" - -msgid "Waiting for confirmation by remote side" -msgstr "" - -msgid "Unknown" -msgstr "" - -msgid "Non-Active Directory domain" -msgstr "" - -msgid "Active Directory domain" -msgstr "" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "" - msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "tüm nitelikleri sunucudan al ve yazdır. Komut çıktısını etkiler." -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "" - -msgid "Failed to authenticate to CA REST API" -msgstr "" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "CMS ile iletişim kurulamadı (durum %d)" - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "%(hostname)s için çoğaltma anlaşması bulunamadı" - -msgid "automount location" -msgstr "" - -msgid "automount locations" -msgstr "" - -msgid "Automount Locations" -msgstr "" - -msgid "Automount Location" -msgstr "" - -#, fuzzy, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -msgid "automount map" -msgstr "" - -msgid "automount maps" -msgstr "" - -msgid "Automount Maps" -msgstr "" - -msgid "Automount Map" -msgstr "" - -#, fuzzy, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -msgid "Automount key object." -msgstr "" - -msgid "automount key" -msgstr "" - -msgid "automount keys" -msgstr "" - -msgid "Automount Keys" -msgstr "" - -msgid "Automount Key" -msgstr "" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" - -#, fuzzy, python-format -msgid "key named %(key)s already exists" -msgstr "Bu girdi zaten var" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" - -#, fuzzy, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "" - -#, fuzzy -msgid "invalid Profile ID" -msgstr "geçersiz nitelik adı" - -msgid "Certificate Profile" -msgstr "" - -msgid "Certificate Profiles" -msgstr "" - -msgid "Profile configuration" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -#, fuzzy, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "" - -#, fuzzy, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" değiştirildi" - -#, fuzzy -msgid "Certificate profiles cannot be renamed" -msgstr "Sertifika işlemi tamamlanamıyor: %(error)s" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "" - -msgid "delegation" -msgstr "" - -msgid "delegations" -msgstr "" - -#, fuzzy -msgid "Delegations" -msgstr "Kullanımdan kaldırılan seçenekler" - -msgid "Delegation" -msgstr "" - -msgid "ACI" -msgstr "ACI" - -#, fuzzy, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -#, fuzzy -msgid "DNS server" -msgstr "Sunucu" - -#, fuzzy -msgid "DNS servers" -msgstr "RADIUS Sunucuları" - -#, fuzzy -msgid "DNS Servers" -msgstr "RADIUS Sunucuları" - -#, fuzzy -msgid "DNS Server" -msgstr "RADIUS Sunucusu" - -#, fuzzy -msgid "DNS Server name" -msgstr "Sunucu adı" - -msgid "SOA mname override" -msgstr "" - -msgid "SOA mname (authoritative server) override" -msgstr "" - -msgid "Forwarders" -msgstr "" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" - -msgid "DNS is not configured" -msgstr "" - -msgid "Modify DNS server configuration" -msgstr "" - -#, fuzzy, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "RADIUS vekil sunucusu \"%(value)s\" değiştirildi" - -#, fuzzy -msgid "Search for DNS servers." -msgstr "RADIUS vekil sunucularını ara." - -#, fuzzy, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "%(count)s sunucu eşleşti" -msgstr[1] "%(count)s sunucu eşleşti" - -#, fuzzy -msgid "IPA DNS Server is not installed" -msgstr "IPA sunucusu ana makine adı" - -#, fuzzy -msgid "Display configuration of a DNS server." -msgstr "Bir RADIUS vekil sunucusu hakkında bilgileri görüntüle." - -#, fuzzy -msgid "Add a new DNS server." -msgstr "Yeni bir RADIUS vekil sunucusu ekle." - -#, fuzzy, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -#, fuzzy -msgid "Delete a DNS server" -msgstr "Bir RADIUS vekil sunucusunu sil." - -#, fuzzy, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "RADIUS vekil sunucusu \"%(value)s\" silindi" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -#, fuzzy -msgid "groups" -msgstr "Ağ grupları" - -msgid "User Group" -msgstr "" - -#, fuzzy, python-format -msgid "Added group \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -msgid "gid cannot be set for external group" -msgstr "" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "privileged group" -msgstr "" - -#, fuzzy, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, fuzzy, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy -msgid "not allowed to modify user entries" -msgstr "Yaprak (leaf) olmayan girdilerde izin verilmiyor" - -#, fuzzy -msgid "not allowed to modify group entries" -msgstr "Yaprak (leaf) olmayan girdilerde izin verilmiyor" - -#, fuzzy -msgid "Not a managed group" +msgid "search for managed groups" msgstr "yönetilen grupları ara" -msgid "Add users that can manage members of this group." -msgstr "" - -msgid "Remove users that can manage members of this group." -msgstr "" - -msgid "Host-based access control commands" -msgstr "" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "" - -msgid "HBAC Services" -msgstr "" - -msgid "HBAC Service" -msgstr "" - -#, fuzzy, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "%(count)d self-servis eşleşti" -msgstr[1] "%(count)d self-servis eşleşti" - -msgid "HBAC service group" -msgstr "" - -msgid "HBAC service groups" -msgstr "" - -msgid "HBAC Service Groups" -msgstr "" - -msgid "HBAC Service Group" -msgstr "" - -#, fuzzy, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -#, fuzzy -msgid "host groups" -msgstr "Ağ grupları" - -msgid "Host Group" -msgstr "" - -#, fuzzy, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"\"%s\" adlı bir ana makine grubu zaten var. Ana makine grupları ve ağ " -"grupları ortak bir ad uzayını paylaşmaktadır" - -#, fuzzy, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy -msgid "hostgroup" -msgstr "Ağ grubu" - -msgid "privileged hostgroup" -msgstr "" - -#, fuzzy, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "" - -msgid "ID Range" -msgstr "" - -#, fuzzy -msgid "local domain range" -msgstr "geçersiz etki alanı adı" - -msgid "Active Directory domain range" -msgstr "" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "" - -msgid "ID range type, one of allowed values" -msgstr "" - -#, fuzzy -msgid "Auto private groups" -msgstr "yönetilen grupları ara" - -msgid "Auto creation of private groups, one of allowed values" -msgstr "" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, fuzzy, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "" - -msgid "Specified trusted domain name could not be found." -msgstr "" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -#, fuzzy -msgid "" -"Modify ID range.\n" -"\n" -msgstr "Bir ağ grubunu değiştir." - -#, fuzzy, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" -"\n" -" Bir yapılandırmayı silin:\n" -" ipa radiusproxy-del MyRADIUS\n" - -msgid "location" -msgstr "" - -msgid "locations" -msgstr "" - -msgid "IPA Locations" -msgstr "" - -msgid "IPA Location" -msgstr "" - -#, fuzzy -msgid "Location name" -msgstr "NIS etki alanı adı" - -#, fuzzy -msgid "IPA location name" -msgstr "NIS etki alanı adı" - -#, fuzzy -msgid "IPA Location description" -msgstr "Ağ grubu açıklaması" - -#, fuzzy -msgid "Servers" -msgstr "Sunucu" - -msgid "Servers that belongs to the IPA location" -msgstr "" - -msgid "Advertised by servers" -msgstr "" - -msgid "List of servers which advertise the given location" -msgstr "" - -#, fuzzy -msgid "Add a new IPA location." -msgstr "Yeni bir ağ grubu ekle." - -#, fuzzy, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -msgid "Delete an IPA location." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy -msgid "IPA Server" -msgstr "Sunucu" - -#, fuzzy -msgid "Modify information about an IPA location." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -#, fuzzy, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy -msgid "Search for IPA locations." -msgstr "Bir ağ grubu ara." - -#, fuzzy, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -#, fuzzy -msgid "Display information about an IPA location." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -#, fuzzy -msgid "Servers in location" -msgstr "Sunucu adı" - -msgid "netgroups" -msgstr "ağ grupları" - -msgid "Netgroups" -msgstr "Ağ grupları" - -msgid "Netgroup" -msgstr "Ağ grubu" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"\"%s\" adlı bir ana makine grubu zaten var. Ana makine grupları ve ağ " -"grupları ortak bir ad uzayını paylaşmaktadır" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" -"izin verilen kullanıcılar varken kullanıcı kategorisi 'all' olarak " -"ayarlanamaz" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" -"izin verilen ana makineler varken ana makine kategorisi 'all' olarak " -"ayarlanamaz" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -msgid "One time password commands" -msgstr "" - -msgid "OTP configuration options" -msgstr "" - -msgid "OTP Configuration" -msgstr "" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "" - -msgid "OTP tokens" -msgstr "" - -msgid "OTP Tokens" -msgstr "" - -msgid "OTP Token" -msgstr "" - -msgid "URI" -msgstr "" - -#, fuzzy, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -msgid "cannot be empty" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" -"\n" -"Kerberos PKINIT özellik durumu bildirim araçları.\n" -"\n" -"Kerberos PKINIT etkinleştirilen veya devre dışı bırakılan IPA yöneticilerini " -"bildir\n" -"\n" -"ÖRNEKLER:\n" -" Tüm yöneticilerde PKINIT durumunu listele:\n" -" ipa pkinit-status\n" -"\n" -" `ipa.example.com` üzerinde PKINIT durumunu denetle:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" PKINIT devre dışı bırakılan tüm IPA yöneticilerini listele:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"PKINIT desteği hakkında daha fazla bilgi için:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" - -msgid "pkinit" -msgstr "pkinit" - -msgid "PKINIT" -msgstr "PKINIT" - -msgid "PKINIT status" -msgstr "PKINIT durumu" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "PKINIT etkin mi devre dışı mı olduğu" - -msgid "Report PKINIT status on the IPA masters" -msgstr "IPA yöneticilerinde PKINIT durumunu bildir" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "%(count)s sunucu eşleşti" -msgstr[1] "%(count)s sunucu eşleşti" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" -"\n" -"RADIUS Vekil Sunucuları\n" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" -"\n" -"RADIUS Vekil Sunucularını yönetin.\n" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" -"\n" -"IPA, krb5 OTP kimlik doğrulamaları için harici bir RADIUS vekil\n" -"sunucusunun kullanılmasını destekler. Bu, üçüncü taraf kimlik doğrulama\n" -"hizmetleriyle birleşme sırasında büyük bir esneklik sağlar.\n" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" -"\n" -" Yeni bir sunucu ekleyin:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" -"\n" -" Girdileri \"example.com\" dizgesini içeren tüm sunucuları bulun:\n" -" ipa radiusproxy-find example.com\n" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" -"\n" -" Yapılandırmayı inceleyin:\n" -" ipa radiusproxy-show MyRADIUS\n" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" -"\n" -" Parolayı değiştirin:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" -"\n" -" Bir yapılandırmayı silin:\n" -" ipa radiusproxy-del MyRADIUS\n" - -msgid "invalid attribute name" -msgstr "geçersiz nitelik adı" - -msgid "invalid port number" -msgstr "geçersiz bağlantı noktası numarası" - -msgid "RADIUS proxy server" -msgstr "RADIUS vekil sunucusu" - -msgid "RADIUS proxy servers" -msgstr "RADIUS vekil sunucuları" - -msgid "RADIUS Servers" -msgstr "RADIUS Sunucuları" - -msgid "RADIUS Server" -msgstr "RADIUS Sunucusu" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "RADIUS vekil sunucusu \"%(value)s\" eklendi" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "RADIUS vekil sunucusu \"%(value)s\" silindi" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "RADIUS vekil sunucusu \"%(value)s\" değiştirildi" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "%(count)d RADIUS vekil sunucusu eşleşti" -msgstr[1] "%(count)d RADIUS vekil sunucusu eşleşti" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "" - -msgid "Realm Domains" -msgstr "" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" - -msgid "IPA server domain cannot be omitted" -msgstr "" - -msgid "IPA server domain cannot be deleted" -msgstr "" - -msgid "roles" -msgstr "" - -msgid "Role" -msgstr "" - -#, fuzzy, python-format -msgid "Added role \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Modified role \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - msgid "self service permission" msgstr "self servis izni" msgid "self service permissions" msgstr "self servis izinleri" -msgid "Self Service Permissions" -msgstr "Self Servis İzinleri" - -msgid "Self Service Permission" -msgstr "Self Servis İzni" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" değiştirildi" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "%(count)d self-servis eşleşti" -msgstr[1] "%(count)d self-servis eşleşti" - -#, fuzzy -msgid "" -"\n" -"IPA server roles\n" -msgstr "IPA sunucusu ana makine adı" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -#, fuzzy -msgid "server role" -msgstr "Sunucu adı" - -#, fuzzy -msgid "server roles" -msgstr "Sunucu adı" - -#, fuzzy -msgid "IPA Server Roles" -msgstr "IPA sunucusu ana makine adı" - -#, fuzzy -msgid "IPA Server Role" -msgstr "IPA sunucusu ana makine adı" - -#, fuzzy -msgid "IPA server role name" -msgstr "IPA sunucusu ana makine adı" - -msgid "Role status" -msgstr "" - -msgid "Status of the role" -msgstr "" - -msgid "Show role status on a server" -msgstr "" - -msgid "Find a server role on a server(s)" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "%(count)s sunucu eşleşti" -msgstr[1] "%(count)s sunucu eşleşti" - -msgid "Include IPA master entries" -msgstr "" - -#, fuzzy -msgid "IPA role name" -msgstr "IPA sunucusu ana makine adı" - -#, fuzzy, python-brace-format -msgid "{role}: role not found" -msgstr "%(filename)s: dosya bulunamadı" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "" - -#, fuzzy -msgid "Member principals" -msgstr "Kerberos yetkilisi olmalı" - -#, fuzzy, python-format -msgid "Malformed principal: %(error)s" -msgstr "Hatalı biçimlendirilmiş yetkili: '%(value)s'" - -msgid "Add target to a named service delegation." -msgstr "" - -#, fuzzy, python-format -msgid "member %s" -msgstr "Üye Ana Makine" - -#, fuzzy -msgid "Remove member from a named service delegation." -msgstr "Bir ağ grubundan üye kaldır." - -msgid "service delegation rule" -msgstr "" - -msgid "service delegation rules" -msgstr "" - -msgid "Service delegation rules" -msgstr "" - -msgid "Service delegation rule" -msgstr "" - -#, fuzzy, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -msgid "privileged service delegation rule" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "%(count)d self-servis eşleşti" -msgstr[1] "%(count)d self-servis eşleşti" - -msgid "service delegation target" -msgstr "" - -msgid "service delegation targets" -msgstr "" - -msgid "Service delegation targets" -msgstr "" - -msgid "Service delegation target" -msgstr "" - -#, fuzzy, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -msgid "privileged service delegation target" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "%(count)d self-servis eşleşti" -msgstr[1] "%(count)d self-servis eşleşti" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -#, fuzzy -msgid "Subordinate id description" -msgstr "Ağ grubu açıklaması" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -msgid "SubUID range size" -msgstr "" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -msgid "SubGID range size" -msgstr "" - -msgid "Subordinate group ID count" -msgstr "" - -#, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "" - -#, fuzzy, python-format -msgid "'%(dn)s is not a valid user" -msgstr "%(port)s geçerli bir bağlantı noktası değil" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -#, fuzzy -msgid "Add a new subordinate id." -msgstr "Yeni bir ağ grubu ekle." - -#, fuzzy, python-format -msgid "Added subordinate id \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -#, fuzzy -msgid "Delete a subordinate id." -msgstr "bir sertifika olmalı" - -#, fuzzy, python-format -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -#, fuzzy -msgid "Modify a subordinate id." -msgstr "Bir ağ grubunu değiştir." - -#, fuzzy, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" değiştirildi" - -#, fuzzy -msgid "Search for subordinate id." -msgstr "Bir ağ grubu ara." - -#, fuzzy, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "%(count)d self-servis eşleşti" -msgstr[1] "%(count)d self-servis eşleşti" - -#, fuzzy -msgid "Display information about a subordinate id." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -#, fuzzy -msgid "sudo command" -msgstr "Konu komutları:" - -#, fuzzy -msgid "sudo commands" -msgstr "Konu komutları:" - -#, fuzzy -msgid "Sudo Commands" -msgstr "Konu komutları:" - -#, fuzzy, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -#, fuzzy -msgid "sudo command group" -msgstr "yönetilen grupları ara" - -#, fuzzy -msgid "sudo command groups" -msgstr "yönetilen grupları ara" - -#, fuzzy, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "" - -msgid "segment" -msgstr "" - -msgid "segments" -msgstr "" - -msgid "Topology Segments" -msgstr "" - -msgid "Topology Segment" -msgstr "" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "" - -msgid "left node and right node must not be the same" -msgstr "" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "%(count)s sunucu eşleşti" -msgstr[1] "%(count)s sunucu eşleşti" - -#, fuzzy, python-format -msgid "Added segment \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -msgid "%(value)s" -msgstr "'%(value)s' olmalı" - -msgid "left or right node has to be specified" -msgstr "" - -msgid "only one node can be specified" -msgstr "" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "" - -msgid "suffixes" -msgstr "" - -msgid "Topology suffixes" -msgstr "" - -msgid "Topology suffix" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -#, fuzzy, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" - -msgid "operation not defined" -msgstr "" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "" - -msgid "No such virtual command" -msgstr "" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -msgid "Object class name" -msgstr "" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"IPA servers\n" -msgstr "IPA sunucusu ana makine adı" - -#, fuzzy -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "Bir RADIUS vekil sunucusu hakkında bilgileri görüntüle." - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -#, fuzzy -msgid "server" -msgstr "Sunucu" - -#, fuzzy -msgid "servers" -msgstr "Sunucu" - -#, fuzzy -msgid "IPA Servers" -msgstr "RADIUS Sunucuları" - -#, fuzzy -msgid "Server location" -msgstr "Sunucu adı" - -msgid "Service weight" -msgstr "" - -msgid "Weight for server services" -msgstr "" - -msgid "Service relative weight" -msgstr "" - -msgid "Relative weight for server services (counts per location)" -msgstr "" - -msgid "Enabled server roles" -msgstr "" - -msgid "List of enabled roles" -msgstr "" - -#, fuzzy -msgid "Modify information about an IPA server." -msgstr "Bir RADIUS vekil sunucusu hakkında bilgileri görüntüle." - -#, fuzzy, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "%(count)s sunucu eşleşti" -msgstr[1] "%(count)s sunucu eşleşti" - -#, fuzzy, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -msgid "Ignore topology errors" -msgstr "" - -msgid "Ignore topology connectivity problems after removal" -msgstr "" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" - -msgid "Force server removal" -msgstr "" - -msgid "Force server removal even if it does not exist" -msgstr "" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "" - -#, fuzzy, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "'%(server)s' sunucusunda hata: %(error)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "" - -msgid "You may need to manually remove them from the tree" -msgstr "" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "" - -msgid "Ignoring topology connectivity errors." -msgstr "" - -#, fuzzy, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "'%(server)s' sunucusunda hata: %(error)s" - -#, fuzzy -msgid "Server has already been deleted" -msgstr "Bu girdi zaten etkin" - -msgid "Agreements deleted" -msgstr "" - -msgid "Following segments were not deleted:" -msgstr "" - -#, fuzzy, python-format -msgid "must be \"%s\"" -msgstr "'%(value)s' olmalı" - -msgid "not allowed to perform server connection check" -msgstr "" - -msgid "Set enabled/hidden state of a server." -msgstr "" - -msgid "State" -msgstr "" - -#, fuzzy -msgid "Server state" -msgstr "Sunucu adı" - -#, fuzzy, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "Self-servis \"%(value)s\" eklendi" - -msgid "Cannot hide CA renewal master." -msgstr "" - -msgid "Cannot hide DNSSec key master." -msgstr "" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -#, fuzzy -msgid "A list of ACI values" -msgstr "LDAP girdilerinin bir listesi" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "" - -#, fuzzy -msgid "ACI prefix is required" -msgstr "Hizmet yetkilisi gereklidir" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" - -msgid "filter and memberof are mutually exclusive" -msgstr "" - -msgid "group, permission and self are mutually exclusive" -msgstr "" - -msgid "One of group, permission or self is required" -msgstr "" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "" - -msgid "empty filter" -msgstr "" - -#, fuzzy, python-format -msgid "Syntax Error: %(error)s" -msgstr "Sertifika biçim hatası: %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "" - -msgid "ACI object." -msgstr "" - -msgid "ACIs" -msgstr "" - -#, fuzzy, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -#, fuzzy, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "" - -#, fuzzy, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(filename)s: dosya bulunamadı" - -#, fuzzy, python-format -msgid "%s is not a valid attribute." -msgstr "%(port)s geçerli bir bağlantı noktası değil" - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -msgid "Auto Membership is not configured" -msgstr "" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Auto member rule: %s not found!" -msgstr "%s nesne sınıfı bulunamadı" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -#, fuzzy -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "" - -msgid "No default (fallback) group set" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "Task DN" -msgstr "" - -msgid "DN of the started task" -msgstr "" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "" - -msgid "users and hosts cannot both be set" -msgstr "" - -msgid "hosts cannot be set when type is 'group'" -msgstr "" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "" - -msgid "Automember rebuild membership task started" -msgstr "" - -msgid "Automember rebuild membership task completed" -msgstr "" - -#, python-format -msgid "Task DN = '%s'" -msgstr "" - -msgid "Automember" -msgstr "" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -msgid "Remove orphan automember rules" -msgstr "" - -msgid "Member service groups" -msgstr "" - -msgid "Member HBAC service groups" -msgstr "" - -msgid "Member ID user overrides" -msgstr "" - -msgid "Indirect Member ID user overrides" -msgstr "" - -#, fuzzy -msgid "Indirect Member permissions" -msgstr "self servis izinleri" - -msgid "Indirect Member HBAC service" -msgstr "" - -msgid "Indirect Member HBAC service group" -msgstr "" - -msgid "Invalid format. Should be name=value" -msgstr "" - -#, fuzzy -msgid "An IPA master host cannot be deleted or disabled" -msgstr "Bu girdi etkinleştirilemez veya devre dışı bırakılamaz" - -msgid "entry" -msgstr "" - -#, fuzzy -msgid "entries" -msgstr "Yeniden denemeler" - -msgid "Entry" -msgstr "" - -#, fuzzy, python-format -msgid "container entry (%(container)s) not found" -msgstr "%(hostname)s için çoğaltma anlaşması bulunamadı" - -#, fuzzy, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(hostname)s için çoğaltma anlaşması bulunamadı" - -#, fuzzy, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(filename)s: dosya bulunamadı" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "" - -#, fuzzy, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "%(char)r karakterine izin verilmiyor." - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "" - -msgid "attribute is not configurable" -msgstr "" - -#, fuzzy -msgid "No such attribute on this entry" -msgstr "Kullanıcı nesnesindeki kullanıcı adı niteliği" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "" - -msgid "the entry was deleted while being modified" -msgstr "" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "" - -#, python-format -msgid "%s to remove" -msgstr "" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "" - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "" - -msgid "one or more values to remove" -msgstr "" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "" - -msgid "REST API is not logged in." -msgstr "" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" - -#, fuzzy -msgid "Unable to communicate with CMS" -msgstr "CMS ile iletişim kurulamadı (durum %d)" - -msgid "Response from CA was not valid JSON" -msgstr "" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" - -#, python-format -msgid "Access granted: %s" -msgstr "" - -msgid "" -"\n" -"Permissions\n" -msgstr "" -"\n" -"İzinler\n" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" -"\n" -"Bir izin, hakların ayrıntılı şekilde tayin edilmesini sağlar. İzin, 389-ds\n" -"Erişim Denetim Kuralı veya talimatı (ACI) etrafında insan tarafından\n" -"okunabilir bir sarmalayıcıdır.\n" -"Bir izin, kullanıcı ekleme, grup değiştirme vb. gibi belirli bir görevi\n" -"gerçekleştirme hakkı verir.\n" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" -"\n" -"Bir izin başka izinler içeremez.\n" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" -"\n" -"* Bir izin okuma, yazma, ekleme, silme, arama veya karşılaştırma erişimi " -"verir.\n" -"* Bir ayrıcalık, benzer izinleri birleştirir (örneğin, bir kullanıcı " -"eklemek\n" -" için gereken tüm izinler).\n" -"* Bir rol kullanıcılara, gruplara, ana makinelere veya ana makine " -"gruplarına\n" -" bir dizi ayrıcalık verir.\n" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" -"\n" -"Bir izin birkaç farklı bölümden oluşur:\n" -"\n" -"1. İznin adı.\n" -"2. İznin hedefi.\n" -"3. İzin tarafından verilen haklar.\n" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" -"\n" -"Haklar, hangi işlemlere izin verildiğini tanımlar ve aşağıdakilerden biri\n" -"veya daha fazlası olabilir:\n" -"1. write - bir veya daha fazla nitelik yaz\n" -"2. read - bir veya daha fazla niteliği oku\n" -"3. search - bir veya daha fazla nitelik ara\n" -"4. compare - bir veya daha fazla niteliği karşılaştır\n" -"5. add - ağaca yeni bir girdi ekle\n" -"6. delete - mevcut bir girdiyi sil\n" -"7. all - tüm izinler verildi\n" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" -"\n" -"Nitelikler ve girdiler arasındaki farka dikkat edin. İzinler bağımsızdır, " -"bu\n" -"nedenle bir kullanıcı ekleyebilmek, kullanıcının düzenlenebilir olacağı\n" -"anlamına gelmez.\n" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" -"\n" -"İzin verilen birkaç hedef vardır:\n" -"1. alt ağaç: bir DN; izin, bu DN altındaki alt ağaç için geçerlidir\n" -"2. hedef filtre: bir LDAP filtresi\n" -"3. hedef: Olası joker karakterli DN, iznin geçerli olduğu girdileri " -"belirtir\n" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" -"\n" -"Ek olarak, aşağıdaki kolaylık seçenekleri vardır.\n" -"Bu seçeneklerden birinin ayarlanması, ilgili nitelik(ler)i ayarlayacaktır.\n" -"1. type: bir nesne türü (user, group, vs.); alt ağacı ve hedef filtreyi " -"ayarlar.\n" -"2. memberof: bir grubun üyelerine uygula; hedef filtreyi ayarlar\n" -"3. targetgroup: belirli bir grubu değiştirmek için izin ver (örneğin, grup\n" -" üyeliğini yönetme hakları vermek); hedefi ayarlar.\n" - -msgid "" -"\n" -"Managed permissions\n" -msgstr "" -"\n" -"Yönetilen izinler\n" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" -"\n" -"IPA ile birlikte öntanımlı olarak gelen izinler, \"yönetilen\" izinler " -"olarak\n" -"adlandırılabilir. Bunların geçerli oldukları öntanımlı bir nitelik kümesi " -"vardır,\n" -"ancak yönetici kümeye nitelikler ekleyebilir/kümeden nitelikleri " -"kaldırabilir.\n" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" -"\n" -"Yönetilen bir iznin silinmesine veya yeniden adlandırılmasına ve hedefinin\n" -"değiştirilmesine izin verilmez.\n" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" -"\n" -" Kullanıcıların oluşturulmasına izin veren bir izin ekleyin:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" -"\n" -" Grup üyeliğini yönetme yeteneği veren bir izin ekleyin:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" - -msgid "must be enclosed in parentheses" -msgstr "parantez içine alınmalı" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "\"%s\" bir nesne türü değil" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "\"%s\" geçerli bir izin türü değil" - -#, fuzzy, python-format -msgid "Deprecated; use %s" -msgstr "Kullanımdan kaldırılan seçenekler" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "" - -#, fuzzy -msgid "A SYSTEM permission may not be modified or removed" -msgstr "" -"\n" -"Bir izin başka izinler içeremez.\n" - -#, fuzzy, python-format -msgid "Entry %s not found" -msgstr "%s nesne sınıfı bulunamadı" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" - -#, python-format -msgid "option was renamed; use %s" -msgstr "" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "" - -#, python-format -msgid "%s: group not found" -msgstr "" - -msgid "target and targetgroup are mutually exclusive" -msgstr "" - -msgid "subtree and type are mutually exclusive" -msgstr "" - -#, fuzzy -msgid "Bad search filter" -msgstr "Yanlış arama filtresi %(info)s" - -#, python-format -msgid "Entry %s does not exist" -msgstr "" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" - -#, fuzzy, python-format -msgid "Added permission \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy -msgid "cannot delete managed permissions" -msgstr "" -"\n" -"Yönetilen izinler\n" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "" - -#, fuzzy, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy -msgid "cannot rename managed permissions" -msgstr "" -"\n" -"Yönetilen izinler\n" - -#, fuzzy -msgid "not modifiable on managed permissions" -msgstr "" -"\n" -"Yönetilen izinler\n" - -#, fuzzy -msgid "only available on managed permissions" -msgstr "" -"\n" -"Yönetilen izinler\n" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" - -msgid "Privilege" -msgstr "" - -#, fuzzy, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "%(count)d self-servis eşleşti" -msgstr[1] "%(count)d self-servis eşleşti" - -msgid "" -"\n" -"API Schema\n" -msgstr "" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "" - -msgid "Documentation" -msgstr "" - -msgid "Exclude from" -msgstr "" - -msgid "Include in" -msgstr "" - -msgid "Help topic" -msgstr "" - -#, fuzzy -msgid "Version" -msgstr "İzin" - -msgid "Parameters" -msgstr "" - -msgid "Method of" -msgstr "" - -#, fuzzy -msgid "Method name" -msgstr "Ağ grubu adı" - -#, fuzzy -msgid "Display information about a command." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -#, fuzzy -msgid "Search for commands." -msgstr "Bir ağ grubu ara." - -msgid "Return command defaults" -msgstr "" - -#, fuzzy, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "%(filename)s: dosya bulunamadı" - -#, fuzzy -msgid "Display information about a class." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -#, fuzzy -msgid "Search for classes." -msgstr "Bir ağ grubu ara." - -#, fuzzy -msgid "Display information about a help topic." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -#, fuzzy -msgid "Search for help topics." -msgstr "Bir ağ grubu ara." - -msgid "Required" -msgstr "" - -msgid "Multi-value" -msgstr "" - -msgid "Always ask" -msgstr "" - -msgid "CLI metavar" -msgstr "" - -#, fuzzy -msgid "CLI name" -msgstr "Komut adı" - -msgid "Confirm (password)" -msgstr "" - -msgid "Default" -msgstr "" - -msgid "Default from" -msgstr "" - -msgid "Label" -msgstr "" - -msgid "Convert on server" -msgstr "" - -#, fuzzy -msgid "Option group" -msgstr "Ağ grubu" - -msgid "Sensitive" -msgstr "" - -#, fuzzy -msgid "Positional argument" -msgstr "Konumsal argümanlar" - -#, fuzzy, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%s nesne sınıfı bulunamadı" - -#, fuzzy -msgid "Display information about a command parameter." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "Search command parameters." -msgstr "" - -#, fuzzy, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(filename)s: dosya bulunamadı" - -#, fuzzy -msgid "Display information about a command output." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -#, fuzzy -msgid "Search for command outputs." -msgstr "yönetilen grupları ara" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "" - -msgid "AD Trust setup" -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" - -msgid "trust" -msgstr "" - -msgid "trusts" -msgstr "" - -msgid "Trusts" -msgstr "" - -msgid "Trust" -msgstr "" - -msgid "SID blocklist incoming" -msgstr "" - -msgid "SID blocklist outgoing" -msgstr "" - -#, fuzzy -msgid "Trust direction" -msgstr "sözlük olmalı" - -msgid "Trust type" -msgstr "" - -#, fuzzy -msgid "Trust status" -msgstr "PKINIT durumu" - -msgid "UPN suffixes" -msgstr "" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" - -msgid "External trust" -msgstr "" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" - -#, fuzzy, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "RADIUS vekil sunucusu \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy -msgid "missing base_id" -msgstr "İzin adı" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "" - -msgid "trust type" -msgstr "" - -msgid "only \"ad\" is supported" -msgstr "" - -msgid "domain" -msgstr "" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" - -msgid "Realm-domain mismatch" -msgstr "" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" - -msgid "Trusted domain and administrator account use different realms" -msgstr "" - -msgid "Realm administrator password should be specified" -msgstr "" - -msgid "id range type" -msgstr "" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" - -msgid "id range" -msgstr "" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" - -msgid "range exists" -msgstr "" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" - -msgid "range type change" -msgstr "" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -msgid "trust configuration" -msgstr "" - -msgid "Global Trust Configuration" -msgstr "" - -msgid "IPA AD trust agents" -msgstr "" - -msgid "IPA servers configured as AD trust agents" -msgstr "" - -msgid "IPA AD trust controllers" -msgstr "" - -msgid "IPA servers configured as AD trust controllers" -msgstr "" - -msgid "unsupported trust type" -msgstr "" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "" - -msgid "SID" -msgstr "" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" - -msgid "trust domain" -msgstr "" - -msgid "trust domains" -msgstr "" - -msgid "Trusted domains" -msgstr "" - -msgid "Trusted domain" -msgstr "" - -#, fuzzy -msgid "Domain enabled" -msgstr "NIS etki alanı adı" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" - -msgid "Configure this server as a trust agent." -msgstr "" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, fuzzy -msgid "not allowed to remotely add agent" -msgstr "Yaprak (leaf) olmayan girdilerde izin verilmiyor" - -#, fuzzy, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" - -msgid "" -"\n" -"Vaults\n" -msgstr "" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" -"\n" -" Yapılandırmayı inceleyin:\n" -" ipa radiusproxy-show MyRADIUS\n" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" - -msgid "vaultcontainer" -msgstr "" - -msgid "vaultcontainers" -msgstr "" - -msgid "Vault Containers" -msgstr "" - -msgid "Vault Container" -msgstr "" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" - -#, fuzzy -msgid "Host is not supported" +msgid "single label {}s are not supported" msgstr "tek etiketli {}s desteklenmiyor" -msgid "KRA service is not enabled" -msgstr "" +msgid "this option is deprecated" +msgstr "bu seçenek kullanımdan kaldırıldı" -msgid "Deleted vault container" -msgstr "" +msgid "too many '@' characters" +msgstr "çok fazla '@' karakteri" #, python-format -msgid "owner %s" -msgstr "" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" - -msgid "vault" -msgstr "" - -msgid "vaults" -msgstr "" - -msgid "Vaults" -msgstr "" - -msgid "Vault" -msgstr "" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" - -msgid "Add a vault." -msgstr "" - -#, fuzzy, python-format -msgid "Added vault \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" - -#, fuzzy, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -msgid "Vault configuration" -msgstr "" - -#, fuzzy -msgid "IPA KRA servers" -msgstr "IPA sunucusu ana makine adı" - -msgid "IPA servers configured as key recovery agents" -msgstr "" - -msgid "Key wrapping algorithm" -msgstr "" - -#, fuzzy, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -msgid "Retrieve data from a vault." -msgstr "" - -#, fuzzy, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "No archived data." -msgstr "" - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" - -#, fuzzy -msgid "must be TRUE or FALSE" -msgstr "True veya False olmalı" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "Principal alias" -msgstr "" - -msgid "User password expiration" -msgstr "" - -msgid "SSH public key fingerprint" -msgstr "" - -#, fuzzy -msgid "External IdP configuration" -msgstr "RADIUS vekil sunucusu" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -#, fuzzy -msgid "Base-64 encoded user certificate" -msgstr "bir sertifika olmalı" - -msgid "Certificate mapping data" -msgstr "" - -msgid "SMB logon script path" -msgstr "" - -msgid "SMB profile path" -msgstr "" - -msgid "SMB Home Directory" -msgstr "" - -msgid "SMB Home Directory Drive" -msgstr "" +msgid "unknown command '%(name)s'" +msgstr "bilinmeyen komut '%(name)s'" #, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "" +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "%(server)s sunucusundan bilinmeyen hata %(code)d: %(error)s" -#, fuzzy, python-format -msgid "manager %(manager)s not found" -msgstr "%(hostname)s için çoğaltma anlaşması bulunamadı" - -#, fuzzy, python-format -msgid "can be at most %(len)d characters" -msgstr "en fazla %(maxlength)d olabilir" - -msgid "Issuer" -msgstr "" - -#, fuzzy -msgid "Issuer of the certificate" -msgstr "bir sertifika olmalı" - -msgid "Subject" -msgstr "" - -#, fuzzy -msgid "Subject of the certificate" -msgstr "bir sertifika olmalı" - -msgid "cannot have an empty subject" -msgstr "" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "" - -#, fuzzy, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" - -#, fuzzy, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -#, fuzzy -msgid "CA category" -msgstr "Ana makine kategorisi" - -#, fuzzy -msgid "CA category the ACL applies to" -msgstr "Kuralın geçerli olduğu ana makine kategorisi" - -msgid "CAs" -msgstr "" - -#, fuzzy, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "default CA ACL can be only disabled" -msgstr "" - -#, fuzzy, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" -"izin verilen ana makineler varken ana makine kategorisi 'all' olarak " -"ayarlanamaz" - -#, fuzzy -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" -"izin verilen ana makineler varken ana makine kategorisi 'all' olarak " -"ayarlanamaz" - -#, fuzzy -msgid "" -"service category cannot be set to 'all' while there are allowed services" +msgid "user category cannot be set to 'all' while there are allowed users" msgstr "" "izin verilen kullanıcılar varken kullanıcı kategorisi 'all' olarak " "ayarlanamaz" - -#, fuzzy, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, python-format -msgid "%i user or group added." -msgstr "" - -#, python-format -msgid "%i users or groups added." -msgstr "" - -msgid "users cannot be added when user category='all'" -msgstr "" - -#, python-format -msgid "%i user or group removed." -msgstr "" - -#, python-format -msgid "%i users or groups removed." -msgstr "" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "" - -msgid "hosts cannot be added when host category='all'" -msgstr "" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "" - -#, python-format -msgid "%i service added." -msgstr "" - -#, python-format -msgid "%i services added." -msgstr "" - -msgid "services cannot be added when service category='all'" -msgstr "" - -#, python-format -msgid "%i service removed." -msgstr "" - -#, python-format -msgid "%i services removed." -msgstr "" - -#, python-format -msgid "%i profile added." -msgstr "" - -#, python-format -msgid "%i profiles added." -msgstr "" - -msgid "profiles cannot be added when profile category='all'" -msgstr "" - -#, python-format -msgid "%i profile removed." -msgstr "" - -#, python-format -msgid "%i profiles removed." -msgstr "" - -msgid "Add CAs to a CA ACL." -msgstr "" - -#, python-format -msgid "%i CA added." -msgstr "" - -#, python-format -msgid "%i CAs added." -msgstr "" - -msgid "CAs cannot be added when CA category='all'" -msgstr "" - -#, fuzzy -msgid "Remove CAs from a CA ACL." -msgstr "Bir ağ grubundan üye kaldır." - -#, python-format -msgid "%i CA removed." -msgstr "" - -#, python-format -msgid "%i CAs removed." -msgstr "" - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -msgid "Certificate Identity Mapping configuration options" -msgstr "" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "" - -msgid "Prompt for the username" -msgstr "" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "" - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "" - -msgid "Certificate Identity Mapping Rules" -msgstr "" - -msgid "Certificate Identity Mapping Rule" -msgstr "" - -msgid "Certificate Identity Mapping Rule name" -msgstr "" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" - -msgid "Matching rule" -msgstr "" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" değiştirildi" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "" - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -msgstr[1] "" - -#, fuzzy -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "Bir self-servis izni hakkında bilgileri görüntüle." - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "" - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" - -msgid "User logins" -msgstr "" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "%(count)s sunucu eşleşti" -msgstr[1] "%(count)s sunucu eşleşti" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -#, fuzzy -msgid "must be at least 10" -msgstr "en az %(minvalue)d olmalı" - -msgid "configuration options" -msgstr "" - -msgid "Configuration" -msgstr "" - -msgid "Maximum hostname length" -msgstr "" - -msgid "Enable adding subids to new users" -msgstr "" - -msgid "IPA masters" -msgstr "" - -msgid "List of all IPA masters" -msgstr "" - -msgid "Hidden IPA masters" -msgstr "" - -msgid "List of all hidden IPA masters" -msgstr "" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -#, fuzzy -msgid "IPA CA servers" -msgstr "IPA sunucusu ana makine adı" - -msgid "IPA servers configured as certificate authority" -msgstr "" - -msgid "Hidden IPA CA servers" -msgstr "" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "" - -msgid "IPA CA renewal master" -msgstr "" - -msgid "Renewal master for IPA certificate authority" -msgstr "" - -msgid "IPA servers configured as key recovery agent" -msgstr "" - -msgid "Hidden IPA KRA servers" -msgstr "" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "" - -msgid "Domain resolution order" -msgstr "" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" - -#, fuzzy -msgid "IPA DNS servers" -msgstr "RADIUS Sunucuları" - -msgid "IPA servers configured as domain name server" -msgstr "" - -msgid "Hidden IPA DNS servers" -msgstr "" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "" - -msgid "IPA DNSSec key master" -msgstr "" - -msgid "DNSec key master" -msgstr "" - -#, fuzzy -msgid "Setup SID configuration" -msgstr "RADIUS vekil sunucusu" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -msgid "Add SIDs" -msgstr "" - -msgid "Add SIDs for existing users and groups" -msgstr "" - -msgid "NetBIOS name of the IPA domain" -msgstr "" - -#, fuzzy -msgid "Empty domain is not allowed" -msgstr "seçeneklere izin verilmiyor" - -#, fuzzy, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "geçersiz etki alanı adı: %s" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -#, fuzzy -msgid "not allowed to enable SID generation" -msgstr "Yaprak (leaf) olmayan girdilerde izin verilmiyor" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -#, fuzzy -msgid "Failed to call DBus" -msgstr "Okunacak dosya yok" - -msgid "Configuration of SID failed. See details in the error log" -msgstr "" - -msgid "The group doesn't exist" -msgstr "" - -#, fuzzy, python-format -msgid "attribute \"%s\" not allowed" -msgstr "seçeneklere izin verilmiyor" - -msgid "May not be empty" -msgstr "" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" - -#, fuzzy, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "'%(server)s' sunucusunda hata: %(error)s" - -msgid "SELinux user map default user not in order list" -msgstr "" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" -"\n" -"ÖRNEKLER:\n" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" -"\n" -" Girdileri \"example.com\" dizgesini içeren tüm sunucuları bulun:\n" -" ipa radiusproxy-find example.com\n" - -#, fuzzy -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" -"\n" -" Girdileri \"example.com\" dizgesini içeren tüm sunucuları bulun:\n" -" ipa radiusproxy-find example.com\n" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" -"\n" -" Yapılandırmayı inceleyin:\n" -" ipa radiusproxy-show MyRADIUS\n" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -#, fuzzy -msgid "invalid IP network format" -msgstr "geçersiz IP adresi biçimi" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "" - -#, fuzzy -msgid "invalid address format" -msgstr "geçersiz IP adresi biçimi" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" - -msgid "algorithm value: allowed interval 0-255" -msgstr "" - -msgid "flags value: allowed interval 0-255" -msgstr "" - -msgid "iterations value: allowed interval 0-65535" -msgstr "" - -#, python-format -msgid "salt value: %(err)s" -msgstr "" - -#, fuzzy -msgid "invalid domain-name: not fully qualified" -msgstr "geçersiz etki alanı adı: %s" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" - -#, python-format -msgid "%s record" -msgstr "" - -#, python-format -msgid "Raw %s records" -msgstr "" - -#, python-format -msgid "%s Record" -msgstr "" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "" - -#, fuzzy -msgid "Invalid number of parts!" -msgstr "geçersiz bağlantı noktası numarası" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" - -msgid "Create reverse" -msgstr "" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "" - -msgid "Exchanger" -msgstr "" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" - -msgid "Priority (order)" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Relative weight for entries with the same priority." -msgstr "" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" - -msgid "Target Uniform Resource Identifier" -msgstr "" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "" - -#, fuzzy, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "'%(hostname)s' ana makinesinin karşılık gelen DNS A/AAAA kaydı yok" - -#, fuzzy -msgid "Managedby permission" -msgstr "" -"\n" -"Yönetilen izinler\n" - -msgid "cannot be used when a zone is specified" -msgstr "" - -#, fuzzy -msgid "Only one zone type is allowed per zone name" -msgstr "Sadece bir değere izin veriliyor" - -#, fuzzy, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "Bu girdi zaten var" - -#, fuzzy, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -msgid "DNS zone" -msgstr "" - -msgid "DNS zones" -msgstr "" - -msgid "DNS Zones" -msgstr "" - -msgid "DNS Zone" -msgstr "" - -msgid "Default time to live" -msgstr "" - -msgid "Time to live for records without explicit TTL definition" -msgstr "" - -msgid "setting Authoritative nameserver" -msgstr "" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "" - -msgid "" -msgstr "" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy -msgid "is required" -msgstr "'%(name)s' gereklidir" - -#, fuzzy, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "DNS resource record" -msgstr "" - -msgid "DNS resource records" -msgstr "" - -msgid "DNS Resource Records" -msgstr "" - -msgid "DNS Resource Record" -msgstr "" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" - -msgid "only master zones can contain records" -msgstr "" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" - -msgid "DNS zone root record cannot be renamed" -msgstr "" - -msgid "DNS records can be only updated one at a time" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "" - -#, fuzzy, python-format -msgid "Found '%(value)s'" -msgstr "'%(value)s' olmalı" - -#, fuzzy, python-format -msgid "Host '%(host)s' not found" -msgstr "%s nesne sınıfı bulunamadı" - -msgid "DNS configuration options" -msgstr "" - -msgid "DNS Global Configuration" -msgstr "" - -msgid "IPA DNS version" -msgstr "" - -#, fuzzy -msgid "List of IPA masters configured as DNS servers" -msgstr "yapılandırılan sunuculardan herhangi biri" - -msgid "IPA server configured as DNSSec key master" -msgstr "" - -msgid "Global DNS configuration is empty" -msgstr "" - -msgid "DNS forward zone" -msgstr "" - -msgid "DNS forward zones" -msgstr "" - -msgid "DNS Forward Zones" -msgstr "" - -msgid "DNS Forward Zone" -msgstr "" - -msgid "Please specify forwarders." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "RADIUS vekil sunucusu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "RADIUS vekil sunucusu \"%(value)s\" silindi" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "" - -msgid "IPA DNS records" -msgstr "" - -msgid "IPA location records" -msgstr "" - -msgid "Update location and IPA server DNS records" -msgstr "" - -msgid "Result of the command" -msgstr "" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "" - -#, fuzzy -msgid "The deny type has been deprecated." -msgstr "'%(name)s' komutu kullanımdan kaldırıldı" - -msgid "HBAC rules" -msgstr "" - -msgid "HBAC Rules" -msgstr "" - -#, fuzzy, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -#, fuzzy, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "Access time" -msgstr "" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host" -msgstr "" - -#, fuzzy -msgid "Base-64 encoded host certificate" -msgstr "bir sertifika olmalı" - -msgid "Serial Number" -msgstr "" - -msgid "Serial Number (hex)" -msgstr "" - -msgid "Not Before" -msgstr "" - -msgid "Not After" -msgstr "" - -msgid "Fingerprint (SHA1)" -msgstr "" - -msgid "Fingerprint (SHA256)" -msgstr "" - -msgid "Revocation reason" -msgstr "" - -msgid "Authentication Indicators" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, fuzzy, python-format -msgid "Added host \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "" - -#, fuzzy, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -msgid "Password cannot be set on enrolled host." -msgstr "" - -msgid "cn is immutable" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -#, fuzzy, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "" - -msgid "Add new principal alias to host entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -msgid "Remove principal alias from a host entry" -msgstr "" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| "Manage RADIUS Proxy Servers.\n" -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" -"\n" -"RADIUS Vekil Sunucularını yönetin.\n" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Find all servers whose entries include the string \"example.com\":\n" -#| " ipa radiusproxy-find example.com\n" -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" -"\n" -" Girdileri \"example.com\" dizgesini içeren tüm sunucuları bulun:\n" -" ipa radiusproxy-find example.com\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Examine the configuration:\n" -#| " ipa radiusproxy-show MyRADIUS\n" -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" -"\n" -" Yapılandırmayı inceleyin:\n" -" ipa radiusproxy-show MyRADIUS\n" - -#, fuzzy -#| msgid "" -#| "\n" -#| " Change the secret:\n" -#| " ipa radiusproxy-mod MyRADIUS --secret\n" -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" -"\n" -" Parolayı değiştirin:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" - -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" - -msgid "Invalid URI: not an https scheme" -msgstr "" - -msgid "Invalid URI: missing netloc" -msgstr "" - -msgid "Identity Provider server" -msgstr "" - -msgid "Identity Provider servers" -msgstr "" - -#, fuzzy -msgid "Identity Provider server name" -msgstr "Sunucu adı" - -msgid "Authorization URI" -msgstr "" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -msgid "Token URI" -msgstr "" - -msgid "Token endpoint" -msgstr "" - -msgid "User info URI" -msgstr "" - -msgid "User information endpoint" -msgstr "" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -msgid "Client identifier" -msgstr "" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -#, fuzzy -#| msgid "Add a new RADIUS proxy server." -msgid "Add a new Identity Provider server." -msgstr "Yeni bir RADIUS vekil sunucusu ekle." - -#, fuzzy, python-format -#| msgid "Added RADIUS proxy server \"%(value)s\"" -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "RADIUS vekil sunucusu \"%(value)s\" eklendi" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -msgid "Base URL" -msgstr "" - -msgid "Base URL for IdP provider templates" -msgstr "" - -msgid "unknown provider" -msgstr "" - -msgid "value is missing" -msgstr "" - -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "" - -#, fuzzy -msgid "Delete an Identity Provider server." -msgstr "Bir RADIUS vekil sunucusunu sil." - -#, fuzzy, python-format -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -#, fuzzy -msgid "Modify an Identity Provider server." -msgstr "Bir RADIUS vekil sunucusunu değiştir." - -#, fuzzy, python-format -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" değiştirildi" - -#, fuzzy -msgid "Search for Identity Provider servers." -msgstr "RADIUS vekil sunucularını ara." - -#, fuzzy, python-format -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "%(count)s sunucu eşleşti" -msgstr[1] "%(count)s sunucu eşleşti" - -#, fuzzy -msgid "Display information about an Identity Provider server." -msgstr "Bir RADIUS vekil sunucusu hakkında bilgileri görüntüle." - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Apply" -msgstr "" - -msgid "Rebuild auto membership" -msgstr "" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "" - -msgid "Are you sure you want to proceed with the action?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "" - -#, fuzzy -msgid "Actions" -msgstr "%(exception)s" - -msgid "Add" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "" - -msgid "Direct Membership" -msgstr "" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "" - -msgid "Indirect Membership" -msgstr "" - -#, fuzzy -msgid "No entries." -msgstr "Yeniden denemeler" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "" - -msgid "Remove" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "" - -msgid "Show Results" -msgstr "" - -msgid "Authentication indicators" -msgstr "" - -msgid "Authentication indicator" -msgstr "" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "Add Custom Authentication Indicator" -msgstr "" - -msgid "Two factor authentication (password + OTP)" -msgstr "" - -#, fuzzy -msgid "RADIUS" -msgstr "RADIUS Sunucusu" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" - -msgid "External Identity Provider" -msgstr "" - -msgid "Disable per-user override" -msgstr "" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" - -msgid "About" -msgstr "" - -msgid "Activate" -msgstr "" - -msgid "Add and Add Another" -msgstr "" - -msgid "Add and Close" -msgstr "" - -msgid "Add and Edit" -msgstr "" - -msgid "Add Many" -msgstr "" - -msgid "Back" -msgstr "" - -msgid "Cancel" -msgstr "" - -msgid "Clear" -msgstr "" - -msgid "Clear all fields on the page." -msgstr "" - -msgid "Close" -msgstr "" - -msgid "Disable" -msgstr "" - -msgid "Download" -msgstr "" - -msgid "Download certificate as PEM formatted file." -msgstr "" - -msgid "Edit" -msgstr "" - -msgid "Enable" -msgstr "" - -msgid "Find" -msgstr "" - -msgid "Get" -msgstr "" - -msgid "Hide" -msgstr "" - -msgid "Issue" -msgstr "" - -msgid "Match" -msgstr "" - -msgid "Match users according to certificate." -msgstr "" - -msgid "Migrate" -msgstr "" - -msgid "OK" -msgstr "" - -msgid "Refresh" -msgstr "" - -msgid "Reload current settings from the server." -msgstr "" - -msgid "Delete" -msgstr "" - -msgid "Remove hold" -msgstr "" - -msgid "Reset" -msgstr "" - -msgid "Reset Password" -msgstr "" - -msgid "Reset Password and Log in" -msgstr "" - -msgid "Restore" -msgstr "" - -#, fuzzy -msgid "Retry" -msgstr "Yeniden denemeler" - -msgid "Revert" -msgstr "" - -msgid "Revoke" -msgstr "" - -msgid "Save" -msgstr "" - -#, fuzzy -msgid "Set" -msgstr "Parola" - -msgid "Show" -msgstr "" - -msgid "Stage" -msgstr "" - -msgid "Update" -msgstr "" - -msgid "View" -msgstr "" - -msgid "Customization" -msgstr "" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "" - -msgid "Expand All" -msgstr "" - -msgid "General" -msgstr "" - -msgid "Identity Settings" -msgstr "" - -msgid "Record Settings" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "" - -msgid "Back to Top" -msgstr "" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "" - -msgid "Add custom value" -msgstr "" - -msgid "Available" -msgstr "" - -msgid "Some operations failed." -msgstr "" - -#, fuzzy -msgid "Operations Error" -msgstr "Oturum hatası" - -msgid "Confirmation" -msgstr "" - -msgid "Custom value" -msgstr "" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" - -msgid "Unsaved Changes" -msgstr "" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "" - -msgid "Hide details" -msgstr "" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "" - -msgid "Prospective" -msgstr "" - -msgid "Redirection" -msgstr "" - -msgid "Select entries to be removed." -msgstr "" - -msgid "Result" -msgstr "" - -msgid "Show details" -msgstr "" - -msgid "Success" -msgstr "" - -#, fuzzy -msgid "Validation error" -msgstr "Oturum hatası" - -msgid "Input form contains invalid or missing values." -msgstr "" - -msgid "Please try the following options:" -msgstr "" - -msgid "If the problem persists please contact the system administrator." -msgstr "" - -msgid "Refresh the page." -msgstr "" - -msgid "Reload the browser." -msgstr "" - -msgid "Return to the main page and retry the operation" -msgstr "" - -#, fuzzy, python-brace-format -msgid "An error has occurred (${error})" -msgstr "dahili bir hata oluştu" - -msgid "HTTP Error" -msgstr "" - -msgid "Internal Error" -msgstr "" - -msgid "IPA Error" -msgstr "" - -msgid "No response" -msgstr "" - -msgid "Unknown Error" -msgstr "" - -msgid "URL" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "" - -msgid "Settings" -msgstr "" - -msgid "Search" -msgstr "" - -msgid "False" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "" - -msgid "Allowed to create keytab" -msgstr "" - -msgid "Allowed to retrieve keytab" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add Kerberos Principal Alias" -msgstr "Kerberos yetkilisi olmalı" - -#, fuzzy -msgid "New kerberos principal alias" -msgstr "Kerberos yetkilisi olmalı" - -msgid "Remove Kerberos Alias" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "" - -msgid "Inherited from server configuration" -msgstr "" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "" - -msgid "PAD" -msgstr "" - -msgid "Authenticating" -msgstr "" - -msgid "Authentication with personal certificate failed" -msgstr "" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" - -msgid "Continue to next page" -msgstr "" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" - -msgid "Login failed due to an unknown reason" -msgstr "" - -msgid "Logged In As" -msgstr "" - -msgid "Authentication with Kerberos failed" -msgstr "" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -#, fuzzy -msgid "Kerberos Principal you entered is expired" -msgstr "Hizmet yetkilisi gereklidir" - -msgid "Loading data" -msgstr "" - -msgid "Log in" -msgstr "" - -msgid "Log In Using Certificate" -msgstr "" - -#, fuzzy -msgid "Log in using personal certificate" -msgstr "bir sertifika olmalı" - -msgid "Log out" -msgstr "" - -msgid "Log out error" -msgstr "" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "" - -msgid "Sync OTP Token" -msgstr "" - -msgid "Synchronizing" -msgstr "" - -msgid "The user account you entered is locked" -msgstr "" - -#, fuzzy -msgid "number of passwords" -msgstr "Yüklenen eklenti sayısı" - -msgid "seconds" -msgstr "" - -msgid "Migrating" -msgstr "" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -#, fuzzy -msgid "Password migration was not successful" -msgstr "True, işlemin başarılı olduğu anlamına gelir" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -msgid "The password or username you entered is incorrect" -msgstr "" - -#, fuzzy -msgid "Password migration was successful" -msgstr "True, işlemin başarılı olduğu anlamına gelir" - -#, fuzzy -msgid "Attribute" -msgstr "Nitelikler" - -msgid "Add delegation" -msgstr "" - -msgid "Remove delegations" -msgstr "" - -#, fuzzy -msgid "Add permission" -msgstr "izin" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove permissions" -msgstr "izinler" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "" - -msgid "Add privilege" -msgstr "" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -msgid "Remove privileges" -msgstr "" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "" - -msgid "Role Settings" -msgstr "" - -msgid "Add role" -msgstr "" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -msgid "Remove roles" -msgstr "" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add self service permission" -msgstr "self servis izni" - -#, fuzzy -msgid "Remove self service permissions" -msgstr "self servis izinleri" - -msgid "Add rule" -msgstr "" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to change default group?" -msgstr "" - -#, fuzzy -msgid "Default host group" -msgstr "Bir ağ grubunu sil." - -#, fuzzy -msgid "Default user group" -msgstr "Bir ağ grubunu sil." - -msgid "Exclusive" -msgstr "" - -#, fuzzy -msgid "Expression" -msgstr "izin" - -msgid "Host group rule" -msgstr "" - -msgid "Host group rules" -msgstr "" - -msgid "Inclusive" -msgstr "" - -msgid "Remove auto membership rules" -msgstr "" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" - -msgid "User group rule" -msgstr "" - -msgid "User group rules" -msgstr "" - -msgid "Add automount key" -msgstr "" - -msgid "Remove automount keys" -msgstr "" - -msgid "Add automount location" -msgstr "" - -msgid "Automount Location Settings" -msgstr "" - -msgid "Remove automount locations" -msgstr "" - -msgid "Add automount map" -msgstr "" - -msgid "Map Type" -msgstr "" - -msgid "Direct" -msgstr "" - -msgid "Indirect" -msgstr "" - -msgid "Remove automount maps" -msgstr "" - -msgid "Add certificate authority" -msgstr "" - -msgid "Remove certificate authorities" -msgstr "" - -msgid "Add CA ACL" -msgstr "" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -msgid "All" -msgstr "" - -msgid "Any CA" -msgstr "" - -msgid "Any Host" -msgstr "" - -msgid "Any Service" -msgstr "" - -msgid "Any Profile" -msgstr "" - -msgid "Anyone" -msgstr "" - -msgid "Rule status" -msgstr "" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "" - -msgid "Remove CA ACLs" -msgstr "" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "" - -msgid "Specified CAs" -msgstr "" - -msgid "Specified Hosts and Groups" -msgstr "" - -msgid "Specified Profiles" -msgstr "" - -msgid "Specified Services and Groups" -msgstr "" - -msgid "Specified Users and Groups" -msgstr "" - -msgid "Permitted to have certificates issued" -msgstr "" - -msgid "Remove certificate profiles" -msgstr "" - -msgid "AA Compromise" -msgstr "" - -msgid "Add principal" -msgstr "" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -msgid "CA Compromise" -msgstr "" - -#, fuzzy -msgid "Certificates" -msgstr "bir sertifika olmalı" - -msgid "Certificate Hold" -msgstr "" - -msgid "Cessation of Operation" -msgstr "" - -#, fuzzy -msgid "Common Name" -msgstr "Komut adı" - -msgid "the certificate with serial number " -msgstr "" - -msgid "Expires On" -msgstr "" - -msgid "Issued on from" -msgstr "" - -msgid "Issued on to" -msgstr "" - -#, fuzzy -msgid "Maximum serial number" -msgstr "bir ondalık sayı olmalı" - -#, fuzzy -msgid "Minimum serial number" -msgstr "bir ondalık sayı olmalı" - -msgid "Revoked on from" -msgstr "" - -msgid "Revoked on to" -msgstr "" - -msgid "Valid not after from" -msgstr "" - -msgid "Valid not after to" -msgstr "" - -msgid "Valid not before from" -msgstr "" - -msgid "Valid not before to" -msgstr "" - -msgid "Fingerprints" -msgstr "" - -#, fuzzy -msgid "Get Certificate" -msgstr "bir sertifika olmalı" - -msgid "Certificate Hold Removed" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Issue new certificate" -msgstr "bir sertifika olmalı" - -msgid "Issued By" -msgstr "" - -msgid "Issued On" -msgstr "" - -msgid "Issued To" -msgstr "" - -msgid "Key Compromise" -msgstr "" - -#, fuzzy -msgid "No Valid Certificate" -msgstr "bir sertifika olmalı" - -#, fuzzy -msgid "New Certificate" -msgstr "bir sertifika olmalı" - -msgid "Certificate in base64 or PEM format" -msgstr "" - -msgid "Note" -msgstr "" - -msgid "Organizational Unit" -msgstr "" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "" - -msgid "Privilege Withdrawn" -msgstr "" - -msgid "Reason for Revocation" -msgstr "" - -#, fuzzy -msgid "Remove certificate hold" -msgstr "%(name)s sertifikası geçerli değil" - -msgid "Do you want to remove the certificate hold?" -msgstr "" - -msgid "Remove from CRL" -msgstr "" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -#, fuzzy -msgid "Certificate requested" -msgstr "bir sertifika imzalama isteği olmalı" - -#, fuzzy -msgid "Revoke certificate" -msgstr "bir sertifika olmalı" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "" - -msgid "Certificate Revoked" -msgstr "" - -msgid "REVOKED" -msgstr "" - -msgid "SHA1 Fingerprint" -msgstr "" - -msgid "SHA256 Fingerprint" -msgstr "" - -msgid "Status" -msgstr "" - -msgid "Superseded" -msgstr "" - -msgid "Unspecified" -msgstr "" - -msgid "Valid Certificate Present" -msgstr "" - -msgid "Valid from" -msgstr "" - -msgid "Valid to" -msgstr "" - -msgid "Validity" -msgstr "" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "" - -#, fuzzy -msgid "View Certificate" -msgstr "bir sertifika olmalı" - -msgid "Certificate Data" -msgstr "" - -msgid "Certificate For Match" -msgstr "" - -msgid "Certificate Mapping Match" -msgstr "" - -msgid "Matched Users" -msgstr "" - -msgid "User Login" -msgstr "" - -msgid "Add certificate identity mapping rule" -msgstr "" - -msgid "Add certificate mapping data" -msgstr "" - -msgid "Configuration string" -msgstr "" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "" - -msgid "Remove certificate mapping data" -msgstr "" - -msgid "Issuer and subject" -msgstr "" - -#, fuzzy -msgid "Remove certificate identity mapping rules" -msgstr "bir sertifika imzalama isteği olmalı" - -#, fuzzy -msgid "Group Options" -msgstr "Ağ grubu açıklaması" - -#, fuzzy -msgid "Search Options" -msgstr "Kullanımdan kaldırılan seçenekler" - -msgid "SELinux Options" -msgstr "" - -#, fuzzy -msgid "Server Options" -msgstr "Sunucu adı" - -#, fuzzy -msgid "Service Options" -msgstr "Kullanımdan kaldırılan seçenekler" - -#, fuzzy -msgid "User Options" -msgstr "Açıklama" - -msgid "Forward first" -msgstr "" - -msgid "Forwarding disabled" -msgstr "" - -msgid "Forward only" -msgstr "" - -#, fuzzy -msgid "Options" -msgstr "%(exception)s" - -msgid "Update System DNS Records" -msgstr "" - -msgid "Do you want to update system DNS records?" -msgstr "" - -msgid "System DNS records updated" -msgstr "" - -msgid "Add DNS forward zone" -msgstr "" - -msgid "Remove DNS forward zones" -msgstr "" - -msgid "Add DNS resource record" -msgstr "" - -msgid "DNS record was deleted because it contained no data." -msgstr "" - -msgid "Other Record Types" -msgstr "" - -msgid "Address not valid, can't redirect" -msgstr "" - -msgid "Create dns record" -msgstr "" - -msgid "Creating record." -msgstr "" - -msgid "Record creation failed." -msgstr "" - -msgid "Checking if record exists." -msgstr "" - -msgid "Record not found." -msgstr "" - -msgid "Redirection to PTR record" -msgstr "" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "" - -msgid "Target reverse zone not found." -msgstr "" - -msgid "Fetching DNS zones." -msgstr "" - -msgid "An error occurred while fetching dns zones." -msgstr "" - -msgid "You will be redirected to DNS Zone." -msgstr "" - -msgid "Remove DNS resource records" -msgstr "" - -msgid "Standard Record Types" -msgstr "" - -msgid "Records for DNS Zone" -msgstr "" - -msgid "Record Type" -msgstr "" - -msgid "Add DNS zone" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "" - -msgid "DNS Zone Settings" -msgstr "" - -msgid "Remove DNS zones" -msgstr "" - -#, fuzzy -msgid "Remove Permission" -msgstr "İzin" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "" - -msgid "Skip DNS check" -msgstr "" - -msgid "Skip overlap check" -msgstr "" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "" - -msgid "Authoritative nameserver change" -msgstr "" - -msgid "Level" -msgstr "" - -msgid "Set Domain Level" -msgstr "" - -#, fuzzy -msgid "Add user group" -msgstr "Yeni bir ağ grubu ekle." - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -msgid "Group Settings" -msgstr "" - -msgid "External" -msgstr "" - -#, fuzzy -msgid "Groups" -msgstr "Ağ grupları" - -#, fuzzy -msgid "Group categories" -msgstr "Ana makine kategorisi" - -msgid "Change to external group" -msgstr "" - -msgid "Change to POSIX group" -msgstr "" - -msgid "Non-POSIX" -msgstr "" - -msgid "POSIX" -msgstr "" - -#, fuzzy -msgid "Remove user groups" -msgstr "Bir ağ grubundan üye kaldır." - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "Bir ağ grubundan üye kaldır." - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -msgid "Group Type" -msgstr "" - -msgid "Add HBAC rule" -msgstr "" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "" - -msgid "Accessing" -msgstr "" - -msgid "Remove HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "" - -msgid "Via Service" -msgstr "" - -msgid "Who" -msgstr "" - -msgid "Add HBAC service" -msgstr "" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "" - -msgid "Remove HBAC services" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "" - -msgid "Add HBAC service group" -msgstr "" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "" - -msgid "Remove HBAC service groups" -msgstr "" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "" - -msgid "Access Denied" -msgstr "" - -msgid "Access Granted" -msgstr "" - -msgid "Include Disabled" -msgstr "" - -msgid "Include Enabled" -msgstr "" - -msgid "HBAC Test" -msgstr "" - -msgid "Matched" -msgstr "" - -msgid "Missing values: " -msgstr "" - -msgid "New Test" -msgstr "" - -msgid "Rules" -msgstr "" - -msgid "Run Test" -msgstr "" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "" - -msgid "Unmatched" -msgstr "" - -msgid "Add host" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -#, fuzzy -msgid "Host Certificate" -msgstr "bir sertifika olmalı" - -#, fuzzy -msgid "Host Name" -msgstr "Ana makine kategorisi" - -msgid "Delete Key, Unprovision" -msgstr "" - -msgid "Host Settings" -msgstr "" - -msgid "Enrolled" -msgstr "" - -msgid "Enrollment" -msgstr "" - -msgid "Fully Qualified Host Name" -msgstr "" - -msgid "Generate OTP" -msgstr "" - -msgid "Generated OTP" -msgstr "" - -msgid "Kerberos Key" -msgstr "" - -msgid "Kerberos Key Not Present" -msgstr "" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "" - -msgid "One-Time Password" -msgstr "" - -msgid "One-Time Password Not Present" -msgstr "" - -msgid "One-Time Password Present" -msgstr "" - -msgid "Reset OTP" -msgstr "" - -msgid "Reset One-Time Password" -msgstr "" - -msgid "Set OTP" -msgstr "" - -msgid "OTP set" -msgstr "" - -msgid "Set One-Time Password" -msgstr "" - -msgid "Remove hosts" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "Bir ağ grubundan üye kaldır." - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "" - -#, fuzzy -msgid "Unprovision" -msgstr "izin" - -msgid "Are you sure you want to unprovision this host?" -msgstr "" - -msgid "Unprovisioning host" -msgstr "" - -msgid "Host unprovisioned" -msgstr "" - -#, fuzzy -msgid "Add host group" -msgstr "Yeni bir ağ grubu ekle." - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -msgid "Host Group Settings" -msgstr "" - -msgid "Remove host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -msgid "Identity provider details" -msgstr "" - -msgid "Verify secret" -msgstr "" - -#, fuzzy -msgid "User to override" -msgstr "Kullanıcı niteliği" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" - -msgid "Enter trusted user login." -msgstr "" - -msgid "Profile" -msgstr "" - -msgid "Group to override" -msgstr "" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" - -#, fuzzy -msgid "Enter trusted group name." -msgstr "Ağ grubu adı" - -msgid "Add ID view" -msgstr "" - -msgid "Add group ID override" -msgstr "" - -msgid "Add user ID override" -msgstr "" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "" - -msgid "Applied to hosts" -msgstr "" - -msgid "Apply to host groups" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" - -msgid "Apply to hosts" -msgstr "" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "" - -msgid "Remove ID views" -msgstr "" - -msgid "Remove user ID overrides" -msgstr "" - -msgid "Remove group ID overrides" -msgstr "" - -msgid "Un-apply from host groups" -msgstr "" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" - -msgid "Un-apply" -msgstr "" - -msgid "Un-apply from hosts" -msgstr "" - -msgid "Un-apply ID Views from hosts" -msgstr "" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" - -msgid "Kerberos Ticket Policy" -msgstr "" - -#, fuzzy -msgid "Add netgroup" -msgstr "ağ grubu" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Netgroup Settings" -msgstr "Ağ grubu açıklaması" - -#, fuzzy -msgid "Remove netgroups" -msgstr "ağ grupları" - -#, fuzzy, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "Bir ağ grubundan üye kaldır." - -#, fuzzy, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "Bir ağ grubundan üye kaldır." - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "Bir ağ grubundan üye kaldır." - -#, fuzzy, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "Bir ağ grubundan üye kaldır." - -msgid "Add OTP token" -msgstr "" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" - -msgid "Configure your token" -msgstr "" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" - -msgid "OTP Token Settings" -msgstr "" - -msgid "Disable token" -msgstr "" - -msgid "Enable token" -msgstr "" - -msgid "Remove OTP tokens" -msgstr "" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "" - -msgid "Show configuration uri" -msgstr "" - -msgid "Counter-based (HOTP)" -msgstr "" - -msgid "Time-based (TOTP)" -msgstr "" - -#, fuzzy -msgid "Add Custom Attribute" -msgstr "Nitelikler" - -#, fuzzy -msgid "Permission settings" -msgstr "İzin bayrakları" - -#, fuzzy -msgid "Attribute breakdown" -msgstr "Nitelikler" - -msgid "Privilege Settings" -msgstr "" - -msgid "Public key:" -msgstr "" - -#, fuzzy -msgid "Set public key" -msgstr "geçersiz SSH genel anahtarı" - -msgid "Show/Set key" -msgstr "" - -msgid "Modified: key not set" -msgstr "" - -msgid "Modified" -msgstr "" - -msgid "New: key not set" -msgstr "" - -msgid "New: key set" -msgstr "" - -msgid "Add password policy" -msgstr "" - -msgid "Password Policy" -msgstr "" - -msgid "Remove password policies" -msgstr "" - -msgid "Add ID range" -msgstr "" - -msgid "Range Settings" -msgstr "" - -msgid "Base ID" -msgstr "" - -msgid "Primary RID base" -msgstr "" - -msgid "Range size" -msgstr "" - -msgid "Domain SID" -msgstr "" - -msgid "Secondary RID base" -msgstr "" - -msgid "Remove ID ranges" -msgstr "" - -msgid "Active Directory domain with POSIX attributes" -msgstr "" - -msgid "Detect" -msgstr "" - -msgid "Local domain" -msgstr "" - -msgid "IPA trust" -msgstr "" - -msgid "Active Directory winsync" -msgstr "" - -#, fuzzy -msgid "Add RADIUS server" -msgstr "RADIUS Sunucusu" - -#, fuzzy -msgid "RADIUS Proxy Server Settings" -msgstr "" -"\n" -"RADIUS Vekil Sunucuları\n" - -#, fuzzy -msgid "Remove RADIUS servers" -msgstr "RADIUS Sunucuları" - -msgid "Check DNS" -msgstr "" - -msgid "Do you also want to perform DNS check?" -msgstr "" - -msgid "Force Update" -msgstr "" - -msgid "Add SELinux user map" -msgstr "" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "" - -msgid "Remove selinux user maps" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Server Roles" -msgstr "Sunucu adı" - -#, fuzzy -msgid "Server Role" -msgstr "Sunucu adı" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -#, fuzzy -msgid "Delete Server" -msgstr "Sunucu" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" - -msgid "Add service" -msgstr "" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -#, fuzzy -msgid "Service Certificate" -msgstr "bir sertifika olmalı" - -#, fuzzy -msgid "Service Settings" -msgstr "Self Servis İzinleri" - -#, fuzzy -msgid "Provisioning" -msgstr "İzin" - -msgid "Remove services" -msgstr "" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "" - -msgid "Are you sure you want to unprovision this service?" -msgstr "" - -msgid "Unprovisioning service" -msgstr "" - -#, fuzzy -msgid "Service unprovisioned" -msgstr "Self Servis İzni" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "" - -#, fuzzy -msgid "SSH public keys" -msgstr "geçersiz SSH genel anahtarı" - -#, fuzzy -msgid "SSH public key:" -msgstr "geçersiz SSH genel anahtarı" - -msgid "Set SSH key" -msgstr "" - -msgid "Are you sure you want to activate selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "" - -msgid "Add stage user" -msgstr "" - -msgid "Stage users" -msgstr "" - -msgid "Preserved users" -msgstr "" - -msgid "Remove preserved users" -msgstr "" - -msgid "Remove stage users" -msgstr "" - -msgid "Are you sure you want to stage selected users?" -msgstr "" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "" - -msgid "Are you sure you want to restore selected users?" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "" - -#, fuzzy -msgid "User categories" -msgstr "Kullanıcı kategorisi" - -msgid "Add subid" -msgstr "" - -msgid "Assigned subids" -msgstr "" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -msgid "Add sudo command" -msgstr "" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "" - -msgid "Remove sudo commands" -msgstr "" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "" - -msgid "Add sudo command group" -msgstr "" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove sudo command groups" -msgstr "Bir ağ grubundan üye kaldır." - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "" - -msgid "Add sudo rule" -msgstr "" - -msgid "Add sudo option" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "" - -#, fuzzy -msgid "Any Command" -msgstr "Komut adı" - -msgid "Any Group" -msgstr "" - -msgid "Run Commands" -msgstr "" - -msgid "Deny" -msgstr "" - -msgid "Access this host" -msgstr "" - -msgid "Option added" -msgstr "" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "" - -msgid "Remove sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "" - -msgid "Specified Commands and Groups" -msgstr "" - -msgid "Specified Groups" -msgstr "" - -msgid "Remove sudo options" -msgstr "" - -msgid "Autogenerated" -msgstr "" - -msgid "Segment details" -msgstr "" - -msgid "Replication configuration" -msgstr "" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" - -msgid "Add IPA location" -msgstr "" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -msgid "Remove IPA locations" -msgstr "" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -msgid "Add topology segment" -msgstr "" - -msgid "Remove topology segments" -msgstr "" - -msgid "Account" -msgstr "" - -msgid "Add trust" -msgstr "" - -msgid "Administrative account" -msgstr "" - -msgid "SID blocklists" -msgstr "" - -msgid "Trust Settings" -msgstr "" - -msgid "Establish using" -msgstr "" - -msgid "Fetch domains" -msgstr "" - -msgid "Pre-shared password" -msgstr "" - -msgid "Remove trusts" -msgstr "" - -msgid "Remove domains" -msgstr "" - -msgid "Alternative UPN suffixes" -msgstr "" - -#, fuzzy -msgid "User attributes for SMB services" -msgstr "Kullanıcı niteliği" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -msgid "Drive to mount a home directory" -msgstr "" - -msgid "Account Settings" -msgstr "" - -msgid "Account Status" -msgstr "" - -msgid "Active users" -msgstr "" - -msgid "Add user" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -msgid "Auto assign subordinate ids" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "" - -msgid "Contact Settings" -msgstr "" - -msgid "Delete mode" -msgstr "" - -msgid "Employee Information" -msgstr "" - -msgid "Error changing account status" -msgstr "" - -msgid "Password expiration" -msgstr "" - -msgid "Mailing Address" -msgstr "" - -msgid "Misc. Information" -msgstr "" - -msgid "delete" -msgstr "" - -msgid "preserve" -msgstr "" - -msgid "No private group" -msgstr "" - -msgid "Remove users" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "Bir ağ grubundan üye kaldır." - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "" - -msgid "Unlock" -msgstr "" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "" - -msgid "Add vault" -msgstr "" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -msgid "Vaults Config" -msgstr "" - -#, fuzzy -msgid "Members" -msgstr "Üye Ana Makine" - -msgid "My User Vaults" -msgstr "" - -msgid "Owners" -msgstr "" - -msgid "Remove vaults" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -msgid "Service Vaults" -msgstr "" - -msgid "Shared" -msgstr "" - -msgid "Shared Vaults" -msgstr "" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -msgid "Vault Type" -msgstr "" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -#, fuzzy -msgid "User Vaults" -msgstr "Kullanıcı niteliği" - -#, fuzzy -msgid "Current password is required" -msgstr "'%(name)s' gereklidir" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "" - -msgid "First OTP" -msgstr "" - -#, fuzzy -msgid "New password is required" -msgstr "'%(name)s' gereklidir" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" - -msgid "Token synchronization failed" -msgstr "" - -msgid "The username, password or token codes are not correct" -msgstr "" - -msgid "Token was synchronized" -msgstr "" - -msgid "Password change complete" -msgstr "" - -msgid "Your password has expired. Please enter a new password." -msgstr "" - -#, fuzzy -msgid "Passwords must match" -msgstr "Parolalar eşleşmiyor" - -msgid "Password reset was not successful." -msgstr "" - -msgid "Reset your password." -msgstr "" - -msgid "Second OTP" -msgstr "" - -msgid "Verify Password" -msgstr "" - -msgid "Are you sure you want to delete selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "" - -msgid "Are you sure you want to disable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "" - -msgid "Are you sure you want to enable selected entries?" -msgstr "" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "" - -msgid "Some entries were not deleted" -msgstr "" - -msgid "Quick Links" -msgstr "" - -msgid "Select All" -msgstr "" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" - -msgid "Unselect All" -msgstr "" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "" - -msgid "Audit" -msgstr "" - -msgid "Authentication" -msgstr "" - -msgid "Automount" -msgstr "" - -msgid "DNS" -msgstr "" - -msgid "Host-Based Access Control" -msgstr "" - -msgid "Identity" -msgstr "" - -msgid "Network Services" -msgstr "" - -msgid "Policy" -msgstr "" - -msgid "Role-Based Access Control" -msgstr "" - -msgid "Subordinate IDs" -msgstr "" - -msgid "Sudo" -msgstr "" - -msgid "Topology" -msgstr "" - -msgid "True" -msgstr "" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "" - -msgid "First" -msgstr "" - -msgid "Last" -msgstr "" - -msgid "Next" -msgstr "" - -msgid "Page" -msgstr "" - -msgid "Prev" -msgstr "" - -msgid "Undo" -msgstr "" - -msgid "Undo this change." -msgstr "" - -msgid "Undo All" -msgstr "" - -msgid "Undo all changes in this field." -msgstr "" - -msgid "Text does not match field pattern" -msgstr "" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" - -#, fuzzy -msgid "Must be a decimal number" -msgstr "bir ondalık sayı olmalı" - -msgid "Format error" -msgstr "" - -#, fuzzy -msgid "Must be an integer" -msgstr "bir tam sayı olmalı" - -#, fuzzy -msgid "Not a valid IP address" -msgstr "geçersiz IP adresi biçimi" - -#, fuzzy -msgid "Not a valid IPv4 address" -msgstr "geçersiz IP adresi biçimi" - -#, fuzzy -msgid "Not a valid IPv6 address" -msgstr "geçersiz IP adresi biçimi" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" - -msgid "Parse error" -msgstr "" - -#, fuzzy -msgid "Must be a positive number" -msgstr "bir ondalık sayı olmalı" - -#, fuzzy, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "%(port)s geçerli bir bağlantı noktası değil" - -msgid "Required field" -msgstr "" - -msgid "Unsupported value" -msgstr "" - -msgid "kerberos ticket policy settings" -msgstr "" - -msgid "OTP max life" -msgstr "" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "" - -msgid "OTP max renew" -msgstr "" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" - -msgid "RADIUS max life" -msgstr "" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "" - -#, fuzzy -msgid "RADIUS max renew" -msgstr "RADIUS vekil sunucusu adı" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -msgid "PKINIT max life" -msgstr "" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -msgid "IdP max life" -msgstr "" - -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "" - -#, fuzzy -msgid "IdP max renew" -msgstr "RADIUS vekil sunucusu adı" - -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "" - -msgid "Default ticket policy could not be read" -msgstr "" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" - -msgid "Migration of LDAP search reference is not supported." -msgstr "" - -msgid "Malformed DN" -msgstr "" - -#, fuzzy, python-format -msgid "%(user)s is not a POSIX user" -msgstr "%(port)s geçerli bir bağlantı noktası değil" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" - -msgid "Invalid LDAP URI." -msgstr "" - -#, python-format -msgid "%s to exclude from migration" -msgstr "" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" - -msgid "Default group for new users not found" -msgstr "" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" - -msgid "Add Class of Service entry" -msgstr "" - -#, fuzzy -msgid "Delete Class of Service entry" -msgstr "Bir self-servis iznini sil." - -#, fuzzy -msgid "Modify Class of Service entry" -msgstr "Bir self-servis iznini değiştir." - -msgid "Display Class of Service entry" -msgstr "" - -#, fuzzy -msgid "Search for Class of Service entry" -msgstr "Bir self-servis izni ara." - -msgid "password policy" -msgstr "" - -msgid "password policies" -msgstr "" - -msgid "Password Policies" -msgstr "" - -msgid "Max repeat" -msgstr "" - -msgid "Maximum number of same consecutive characters" -msgstr "" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -msgid "User check" -msgstr "Kullanıcı kategorisi" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "Grace login limit" -msgstr "" - -msgid "Number of LDAP authentications allowed after expiration" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "" - -#, fuzzy -msgid "cannot delete global password policy" -msgstr "Yönetilen bir grubun parola politikası olamaz." - -msgid "priority cannot be set on global policy" -msgstr "" - -msgid "HBAC rule and local members cannot both be set" -msgstr "" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" - -msgid "SELinux User Map rule" -msgstr "" - -msgid "SELinux User Map rules" -msgstr "" - -msgid "SELinux User Maps" -msgstr "" - -msgid "SELinux User Map" -msgstr "" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "" - -#, fuzzy, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -#, fuzzy, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "" - -#, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "" - -#, fuzzy -msgid "Malformed principal" -msgstr "Hatalı biçimlendirilmiş yetkili: '%(value)s'" - -msgid "{} is required by the IPA master" -msgstr "" - -msgid "service" -msgstr "" - -msgid "services" -msgstr "" - -#, fuzzy -msgid "Service principal alias" -msgstr "Hizmet yetkilisi gereklidir" - -msgid "Base-64 encoded service certificate" -msgstr "" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "" - -#, fuzzy -msgid "Add a new IPA service." -msgstr "Yeni bir RADIUS vekil sunucusu ekle." - -#, fuzzy, python-format -msgid "Added service \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -msgid "force principal name even if host not in DNS" -msgstr "" - -msgid "Skip host check" -msgstr "" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -#, fuzzy -msgid "Add a new SMB service." -msgstr "Yeni bir RADIUS vekil sunucusu ekle." - -#, fuzzy -msgid "SMB service NetBIOS name" -msgstr "Self-servis adı" - -#, fuzzy, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Modified service \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "%(count)d self-servis eşleşti" -msgstr[1] "%(count)d self-servis eşleşti" - -#, fuzzy, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" değiştirildi" - -msgid "Add new principal alias to a service" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -#, fuzzy -msgid "Remove principal alias from a service" -msgstr "Hizmet yetkilisi gereklidir" - -#, fuzzy, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "" - -msgid "Stage User" -msgstr "" - -msgid "stage user" -msgstr "" - -msgid "stage users" -msgstr "" - -#, fuzzy, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -#, fuzzy -msgid "givenname is required" -msgstr "'%(name)s' gereklidir" - -#, fuzzy -msgid "sn is required" -msgstr "'%(name)s' gereklidir" - -#, fuzzy, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "%(count)s sunucu eşleşti" -msgstr[1] "%(count)s sunucu eşleşti" - -#, fuzzy, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -msgid "Entry RDN is not 'uid'" -msgstr "" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "" - -#, python-format -msgid "Stage user %s activated" -msgstr "" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" değiştirildi" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -msgid "Remove principal alias from the stageuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" - -msgid "ID View" -msgstr "" - -msgid "system ID View" -msgstr "" - -msgid "ID Views" -msgstr "" - -msgid "User object overrides" -msgstr "" - -msgid "Group object overrides" -msgstr "" - -#, fuzzy -msgid "Hosts the view applies to" -msgstr "Kuralın geçerli olduğu ana makine kategorisi" - -#, fuzzy, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "" - -msgid "not found" -msgstr "" - -msgid "ID View cannot be applied to IPA master" -msgstr "" - -msgid "ID View already applied" -msgstr "" - -msgid "value" -msgstr "" - -#, python-format -msgid "ID View applied to %i host." -msgstr "" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" - -msgid "IPA object" -msgstr "" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "" - -msgid "Default Trust View cannot contain IPA users" -msgstr "" - -#, fuzzy -msgid "Add a new ID override." -msgstr "Yeni bir RADIUS vekil sunucusu ekle." - -#, fuzzy, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -#, fuzzy -msgid "Delete an ID override." -msgstr "Bir RADIUS vekil sunucusunu sil." - -#, fuzzy, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -#, fuzzy -msgid "Modify an ID override." -msgstr "Bir RADIUS vekil sunucusunu değiştir." - -#, fuzzy, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -msgid "ID override" -msgstr "" - -msgid "ID overrides cannot be renamed" -msgstr "" - -#, fuzzy -msgid "Search for an ID override." -msgstr "Bir ağ grubu ara." - -#, fuzzy, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "%(count)d self-servis eşleşti" -msgstr[1] "%(count)d self-servis eşleşti" - -#, fuzzy -msgid "Display information about an ID override." -msgstr "Bir ağ grubu hakkında bilgileri görüntüle." - -msgid "User ID override" -msgstr "" - -msgid "User ID overrides" -msgstr "" - -msgid "Group ID override" -msgstr "" - -msgid "Group ID overrides" -msgstr "" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "" - -#, fuzzy, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "%(count)s sunucu eşleşti" -msgstr[1] "%(count)s sunucu eşleşti" - -#, fuzzy, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" - -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -msgid "Certificate Authority" -msgstr "" - -msgid "Certificate Authorities" -msgstr "" - -msgid "Name for referencing the CA" -msgstr "" - -msgid "Description of the purpose of the CA" -msgstr "" - -msgid "Authority ID" -msgstr "" - -msgid "Dogtag Authority ID" -msgstr "" - -msgid "Subject DN" -msgstr "" - -msgid "Subject Distinguished Name" -msgstr "" - -msgid "Issuer DN" -msgstr "" - -msgid "Issuer Distinguished Name" -msgstr "" - -#, fuzzy -msgid "Base-64 encoded certificate." -msgstr "bir sertifika olmalı" - -msgid "Certificate chain" -msgstr "" - -msgid "X.509 certificate chain" -msgstr "" - -#, fuzzy -msgid "RSN Version" -msgstr "İzin" - -msgid "Random Serial Number Version" -msgstr "" - -#, fuzzy -msgid "Search for CAs." -msgstr "Bir ağ grubu ara." - -#, fuzzy, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -#, fuzzy -msgid "Include certificate chain in output" -msgstr "bir sertifika imzalama isteği olmalı" - -msgid "Display the properties of a CA." -msgstr "" - -msgid "Create a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Created CA \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, fuzzy, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "Insufficient privilege to delete a CA." -msgstr "" - -msgid "IPA CA cannot be deleted" -msgstr "" - -msgid "Must be disabled first" -msgstr "" - -#, fuzzy -msgid "Modify CA configuration." -msgstr "Bir ağ grubunu değiştir." - -#, fuzzy, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -msgid "Insufficient privilege to modify a CA." -msgstr "" - -msgid "Disable a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy -msgid "IPA CA cannot be disabled" -msgstr "Bu girdi etkinleştirilemez veya devre dışı bırakılamaz" - -msgid "Enable a CA." -msgstr "" - -#, fuzzy, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "Kullanımdan kaldırılan seçenekler" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" - -msgid " * 0 - unspecified\n" -msgstr "" - -msgid " * 1 - keyCompromise\n" -msgstr "" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -msgid " * 6 - certificateHold\n" -msgstr "" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -msgid " * 9 - privilegeWithdrawn\n" -msgstr "" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" - -#, python-format -msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" - -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" - -#, fuzzy, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "'%(hostname)s' ana makinesinin karşılık gelen DNS A/AAAA kaydı yok" - -msgid "Issuing CA" -msgstr "" - -msgid "Name of issuing CA" -msgstr "" - -msgid "Subject email address" -msgstr "" - -#, fuzzy -msgid "Subject DNS name" -msgstr "DNS adı olmalı" - -msgid "Subject X.400 address" -msgstr "" - -#, fuzzy -msgid "Subject directory name" -msgstr "Sunucu adı" - -msgid "Subject EDI Party name" -msgstr "" - -msgid "Subject URI" -msgstr "" - -msgid "Subject IP Address" -msgstr "" - -msgid "Subject OID" -msgstr "" - -msgid "Subject UPN" -msgstr "" - -#, fuzzy -msgid "Subject Kerberos principal name" -msgstr "Kerberos yetkilisi olmalı" - -msgid "Subject Other Name" -msgstr "" - -msgid "Serial number (hex)" -msgstr "" - -msgid "Request status" -msgstr "" - -msgid "" -"automatically add the principal if it doesn't exist (service principals only)" -msgstr "" - -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" - -msgid "No Common Name was found in subject of request." -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "" - -#, python-format -msgid "" -"hostname in subject of request '%(cn)s' does not match principal hostname " -"'%(hostname)s'" -msgstr "" - -msgid "DN commonName does not match user's login" -msgstr "" - -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" - -#, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "" - -#, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "" - -#, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" - -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "" - -#, fuzzy -msgid "'add' option" -msgstr "Kullanımdan kaldırılan seçenekler" - -msgid "The principal for this request doesn't exist." -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" - -msgid "Revoked" -msgstr "" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" - -#, python-format -msgid "Owner %s" -msgstr "" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" - -#, fuzzy -msgid "7 is not a valid revocation reason" -msgstr "\"%s\" geçerli bir izin türü değil" - -#, fuzzy -msgid "Status of the certificate" -msgstr "bir sertifika olmalı" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "%(count)d self-servis eşleşti" -msgstr[1] "%(count)d self-servis eşleşti" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "" - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -#, fuzzy -msgid "this option has been deprecated." -msgstr "bu seçenek kullanımdan kaldırıldı" - -msgid "sudo rules" -msgstr "" - -msgid "Sudo Rules" -msgstr "" - -msgid "Sudo Rule" -msgstr "" - -#, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "" - -#, fuzzy, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "" -"izin verilen ana makineler varken ana makine kategorisi 'all' olarak " -"ayarlanamaz" - -msgid "users" -msgstr "" - -#, fuzzy -msgid "command" -msgstr "Konu komutları:" - -#, fuzzy -msgid "commands" -msgstr "Konu komutları:" - -msgid "runAs user" -msgstr "" - -msgid "runAs users" -msgstr "" - -#, fuzzy -msgid "group runAs" -msgstr "Ağ grupları" - -#, fuzzy -msgid "runAs groups" -msgstr "ağ grupları" - -#, fuzzy, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "%(count)d ağ grubu eşleşti" -msgstr[1] "%(count)d ağ grubu eşleşti" - -msgid "commands cannot be added when command category='all'" -msgstr "" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "" - -#, fuzzy, python-format -msgid "Added user \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -msgid "Default group for new users is not POSIX" -msgstr "" - -#, fuzzy, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Preserved user \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "%s: user is already preserved" -msgstr "Bu girdi zaten etkin" - -#, fuzzy, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" değiştirildi" - -#, fuzzy, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "user \"%s\" is already active" -msgstr "Bu girdi zaten etkin" - -#, fuzzy, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -#, fuzzy, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, fuzzy, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" silindi" - -msgid "Failed logins" -msgstr "" - -msgid "Last successful authentication" -msgstr "" - -msgid "Last failed authentication" -msgstr "" - -#, fuzzy -msgid "Time now" -msgstr "Zaman aşımı" - -msgid "Password grace count" -msgstr "" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "" - -#, python-format -msgid "%(host)s failed" -msgstr "" - -#, fuzzy, python-format -msgid "Account disabled: %(disabled)s" -msgstr "Bu girdi zaten devre dışı" - -#, fuzzy, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" değiştirildi" - -msgid "Add new principal alias to the user entry" -msgstr "" - -#, fuzzy, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "Ağ grubu \"%(value)s\" eklendi" - -#, fuzzy -msgid "Remove principal alias from the user entry" -msgstr "Hizmet yetkilisi gereklidir" - -#, fuzzy, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "Self-servis \"%(value)s\" silindi" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "" - -#, fuzzy -msgid "must be enabled only on a single master" -msgstr "parantez içine alınmalı" - -#, fuzzy -msgid "Request must be a dict" -msgstr "bir sertifika olmalı" - -msgid "Request is missing \"method\"" -msgstr "" - -msgid "Request is missing \"params\"" -msgstr "" - -#, fuzzy -msgid "params must be a list" -msgstr "bir tam sayı olmalı" - -msgid "params must contain [args, options]" -msgstr "" - -msgid "params[0] (aka args) must be a list" -msgstr "" - -msgid "params[1] (aka options) must be a dict" -msgstr "" - -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" - -#, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "" - -msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" - -msgid "CIFS server denied your credentials" -msgstr "" - -msgid "communication with CIFS server was unsuccessful" -msgstr "" - -msgid "AD domain controller" -msgstr "" - -msgid "unsupported functional level" -msgstr "" - -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" - -msgid "Cannot find specified domain or server name" -msgstr "" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" - -msgid "At least the domain or IP address should be specified" -msgstr "" - -#, python-format -msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" -msgstr "" - -msgid "no trusted domain is configured" -msgstr "" - -#, fuzzy -msgid "domain is not configured" -msgstr "yapılandırılan sunuculardan herhangi biri" - -msgid "SID is not valid" -msgstr "" - -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "" - -#, fuzzy -msgid "SID does not match any trusted domain" -msgstr "kabul edilen biçimlerle eşleşmiyor: " - -msgid "Trust setup" -msgstr "" - -msgid "Our domain is not configured" -msgstr "" - -msgid "No trusted domain is not configured" -msgstr "" - -msgid "trusted domain object" -msgstr "" - -msgid "domain is not trusted" -msgstr "" - -msgid "no trusted domain matched the specified flat name" -msgstr "" - -msgid "trusted domain object not found" -msgstr "" - -msgid "Object does not belong to a trusted domain" -msgstr "" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "" - -msgid "Ambiguous search, user domain was not specified" -msgstr "" - -msgid "Trusted domain did not return a unique object" -msgstr "" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "" - -msgid "trusted domain user not found" -msgstr "" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "" - -msgid "CIFS credentials object" -msgstr "" - -#, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "" - -#, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "" - -#, python-format -msgid "" -"the IPA server and the remote domain cannot share the same NetBIOS name: %s" -msgstr "" - -#, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" - -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" - -msgid "Credentials" -msgstr "" - -msgid "Missing credentials for cross-forest communication" -msgstr "" - -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" - -#, python-format -msgid "must equal %r" -msgstr "" - -msgid "Hello world" -msgstr "" - -#, fuzzy, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "RADIUS vekil sunucusu adı" - -#, fuzzy, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "RADIUS vekil sunucusu adı" - -#, fuzzy -msgid "must be at least 1" -msgstr "en az %(minvalue)d olmalı" - -msgid "Out of memory\n" -msgstr "" - -msgid "Warning unrecognized encryption type.\n" -msgstr "" - -msgid "Warning unrecognized salt type.\n" -msgstr "" - -msgid "Out of memory!?\n" -msgstr "" - -msgid "Enctype comparison failed!\n" -msgstr "" - -#, fuzzy -msgid "Password is too long!\n" -msgstr "Parolalar eşleşmiyor!" - -msgid "Failed to create random key!\n" -msgstr "" - -msgid "Failed to create key!\n" -msgstr "" - -msgid "Bad or unsupported salt type.\n" -msgstr "" - -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "" diff --git a/po/uk.po b/po/uk.po index 8800411fe..8fb363ed2 100644 --- a/po/uk.po +++ b/po/uk.po @@ -17,1012 +17,769 @@ msgstr "" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" -"Plural-Forms: nplurals=3; plural=n%10==1 && n%100!=11 ? 0 : n%10>=2 && n" -"%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2;\n" +"Plural-Forms: nplurals=3; plural=n%10==1 && n%100!=11 ? 0 : n%10>=2 && " +"n%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2;\n" "X-Generator: Weblate 4.13\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "не вдалося відкрити файл налаштувань %s\n" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "не вдалося обробити функцією stat() файл налаштування %s\n" - -#, c-format -msgid "out of memory\n" -msgstr "не вистачає пам'яті\n" - -#, c-format -msgid "read error\n" -msgstr "помилка читання\n" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "Не вдалося обробити назву реєстраційного запису\n" - -#, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "krb5_parse_name %1$d: %2$s\n" - -#, c-format -msgid "Removing principal %s\n" -msgstr "Вилучення реєстраційного запису %s\n" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "Не вдалося відкрити таблицю ключів\n" - -#, c-format -msgid "principal not found\n" -msgstr "реєстраційного запису не знайдено\n" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "krb5_kt_get_entry %1$d: %2$s\n" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "Не вдалося вилучити запис\n" - -#, c-format -msgid "kvno %d\n" -msgstr "kvno %d\n" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "krb5_kt_remove_entry %1$d: %2$s\n" - -#, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "Не вдалося встановити курсор, «%1$s»\n" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "Не вдалося обробити реєстраційний запис\n" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "krb5_unparse_name %1$d: %2$s\n" - -#, c-format -msgid "realm not found\n" -msgstr "область не знайдено\n" - -msgid "Print debugging information" -msgstr "Вивести діагностичні дані" - -msgid "Debugging output" -msgstr "Діагностична інформація" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"Реєстраційні записи, які слід вилучити із таблиці ключів (приклад: ftp/ftp." -"example.com@EXAMPLE.COM)" - -msgid "Kerberos Service Principal Name" -msgstr "Назва реєстраційного запису служби Kerberos" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "Файл таблиці ключів, звідки слід вилучити реєстраційні записи" - -msgid "Keytab File Name" -msgstr "Назва файла таблиці ключів" - -msgid "Remove all principals in this realm" -msgstr "Вилучити всі реєстраційні записи у цій області" - -msgid "Realm name" -msgstr "Назва області" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "Невдала спроба ініціалізації контексту Kerberos\n" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "Не вдалося відкрити таблицю ключів «%1$s»: %2$s\n" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "Спроба закриття таблиці ключів зазнала невдачі\n" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "krb5_kt_close %1$d: %2$s\n" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "Невдала спроба ініціалізації контексту Kerberos: %1$s (%2$d)\n" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "Не вдалося обробити реєстраційний запис: %1$s (%2$d)\n" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "Жоден з ключів не прийнято KDC\n" - -#, c-format -msgid "Out of memory \n" -msgstr "Не вистачає пам'яті \n" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "Не вдалося ініціалізувати бібліотеку ldap!\n" - -msgid "Simple bind failed\n" -msgstr "Невдала спроба простого прив’язування\n" - -msgid "SASL Bind failed\n" -msgstr "Помилка прив'язки SASL\n" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "Невдала спроба виконання дії: %s\n" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "Не вдалося отримати результат: %s\n" - -#, c-format -msgid "Timeout exceeded." -msgstr "Перевищено обмеження за часом." - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "Не вдалося обробити розширений результат: %s\n" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "Не вдалося обробити результат: %s\n" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "Немає списку керування відповідями!\n" - -#, c-format -msgid "Missing reply control!\n" -msgstr "Немає керування відповіддю!\n" - -#, c-format -msgid "Out of Memory!\n" -msgstr "Не вистачає пам'яті!\n" - -#, c-format -msgid "Failed to create control!\n" -msgstr "Не вдалося створити керування!\n" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "Не вдалося прив’язати до сервера!\n" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "Не вдалося отримати таблицю ключів!\n" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "Спроба виконання ber_init() зазнала невдачі. Некоректне керування?!\n" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "помилка ber_scanf(), не вдалося знайти kvno?!\n" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "Не вдалося отримати дані щодо типу шифрування №%d\n" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "Не вдалося отримати дані щодо типу шифрування %1$s (№%2$d)\n" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "Не вдалося отримати жодного ключа" - -msgid "Failed to decode control reply!\n" -msgstr "Не вдалося декодувати контрольну відповідь!\n" - -#, c-format -msgid "Passwords do not match!\n" -msgstr "Вказано різні паролі!\n" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "Не вдалося відкрити файл налаштувань %s\n" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "Не вдалося обробити файл налаштувань %s\n" - -msgid "Failed to resolve symlink to keytab.\n" -msgstr "Не вдалося визначити таблицю ключів за символічним посиланням.\n" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" -"keytab є осиротілим символічним посиланням, яке належить іншому " -"користувачу.\n" - -msgid "Print as little as possible" -msgstr "Виводити мінімум даних" - -msgid "Output only on errors" -msgstr "Виводити лише повідомлення про помилки" - -msgid "Output debug info" -msgstr "Вивести діагностичні дані" - -msgid "Contact this specific KDC Server" -msgstr "Встановити зв’язок з вказаним сервером KDC" - -msgid "Server Name" -msgstr "Назва сервера" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "" -"Реєстраційний запис, для якого слід отримати таблицю ключів (приклад: ftp/" -"ftp.example.com@EXAMPLE.COM)" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" -"Файл таблиці ключів, до якого слід долучати новий ключ (файл буде створено, " -"якщо його не існувало)." - -msgid "Encryption types to request" -msgstr "Типи шифрування, запит щодо яких слід надсилати" - -msgid "Comma separated encryption types list" -msgstr "Список типів шифрування, відокремлених комами" - -msgid "Show the list of permitted encryption types and exit" -msgstr "Показати список дозволених типів шифрування і завершити роботу" - -msgid "Permitted Encryption Types" -msgstr "Дозволені типи шифрування" - -msgid "Asks for a non-random password to use for the principal" -msgstr "" -"Запитати невипадковий пароль, який слід використати для реєстраційного запису" - -msgid "LDAP DN" -msgstr "DN LDAP" - -msgid "DN to bind as if not using kerberos" -msgstr "" -"DN, до якого слід виконати прив’язку, якщо не використовується kerberos" - -msgid "LDAP password" -msgstr "Пароль LDAP" - -msgid "password to use if not using kerberos" -msgstr "пароль, який слід використати, якщо не використовується kerberos" - -msgid "Prompt for LDAP password" -msgstr "Запит щодо пароля LDAP" - -msgid "Path to the IPA CA certificate" -msgstr "Шлях до сертифіката CA IPA" - -msgid "IPA CA certificate" -msgstr "Сертифікат CA IPA" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "Адреса LDAP, з якою слід встановити з’єднання. Несумісний з --server" - -msgid "url" -msgstr "адреса" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "Механізм прив’язування SASL LDAP, якщо без bindd/bindpw" - -msgid "GSSAPI|EXTERNAL" -msgstr "GSSAPI|EXTERNAL" - -msgid "Retrieve current keys without changing them" -msgstr "Отримувати поточні ключі без внесення до них змін" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "Немає основних системних типів шифрування?!\n" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "Підтримувані типи шифрування:\n" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "Попередження: не вдалося виконати перетворення типу (№%d)\n" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "Пароль до Bind вже вказано (-w).\n" - -msgid "Enter LDAP password" -msgstr "Вкажіть пароль до LDAP" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "Для використання DN bind (-w або -W) потрібен пароль до bind.\n" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "Не можна одночасно вказувати механізм SASL і DN прив’язки.\n" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "Некоректний механізм прив’язування SASL\n" - -#, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "Не можна одночасно вказувати сервер і адресу LDAP.\n" - -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "DNS-визначення для домену %s\n" - -#, c-format -msgid "Discovered server %s\n" -msgstr "Виявлений сервер %s\n" - -#, c-format -msgid "Using discovered server %s\n" -msgstr "Використовуємо виявлений сервер %s\n" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "Спроба виявлення DNS зазнала невдачі\n" - -#, c-format -msgid "Using server from config %s\n" -msgstr "Використовуємо сервер з налаштувань %s\n" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "Не надано назви сервера, сервер недоступний\n" - -#, c-format -msgid "Using provided server %s\n" -msgstr "Використовуємо наданий сервер %s\n" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "Вказано несумісні параметри (-r і -P)\n" - -msgid "New Principal Password" -msgstr "Новий пароль реєстраційного запису" - -msgid "Verify Principal Password" -msgstr "Перевірка пароля реєстраційного запису" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "" -"Попередження: для випадкових паролів типи солі (salt) не мають значення " -"(див. параметр -P)\n" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "Некоректна назва реєстраційного запису служби\n" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "" -"Не знайдено кешу реєстраційних даних Kerberos. Чи є у вас квиток Kerberos?\n" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "" -"Не знайдено реєстраційного запису користувача Kerberos. Ви маєте ви " -"коректний кеш реєстраційних даних?\n" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "Не вдалося відкрити таблицю ключів\n" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "" -"Повторюємо спробу з використанням способу отримання сховища ключів, який " -"використовувався до версії 4.0…\n" - -#, c-format -msgid "Failed to create key material\n" -msgstr "Не вдалося створити вихідні дані для ключа\n" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "Не вдалося отримати таблицю ключів\n" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "Не вдалося додати ключ до таблиці ключів\n" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "Не вдалося закрити таблицю ключів\n" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "Таблицю ключів успішно отримати і збережено до: %s\n" - -#, c-format -msgid "Out of memory!\n" -msgstr "Не вистачає пам'яті!\n" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "Немає дозволу на долучення цього вузла до домену IPA.\n" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "Немає дозволу на запис до файла таблиці ключів «%s»\n" - -#, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "Невдала спроба виконання access() для %1$s: номер помилки = %2$d\n" - -#, c-format -msgid "Out of memory!" -msgstr "Не вистачає пам'яті!" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "Не вдалося увімкнути SSL у LDAP\n" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "" -"Спроба пошуку %1$s у rootdse завершилася невдало з повідомленням про помилку " -"%2$d\n" - -#, c-format -msgid "No values for %s" -msgstr "Немає значень %s" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "Спроба пошуку namingContext IPA завершилася помилкою %d\n" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "namingContext IPA не знайдено\n" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "Не вдалося визначити кореневий DN %s\n" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "Помилка реєстрування. %s\n" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "реєстраційного запису не знайдено у XML-RPC відповіді\n" - -#, c-format -msgid "Host is already joined.\n" -msgstr "Вузол вже приєднано.\n" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "помилка curl_slist_append() для значення «%s»\n" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "помилка curl_easy_setopt()\n" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "Не вдалося розгорнути буфер у jsonrpc_handle_response" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "помилка curl_global_init()\n" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "помилка curl_easy_init()\n" - -#, c-format -msgid "json_dumps() failed\n" -msgstr "помилка json_dumps()\n" - -#, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "" -"Запит JSON-RPC:\n" -"%s\n" - -#, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "Помилка під час виконання запиту JSON-RPC: %s\n" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" -"Виклик JSON-RPC не було уповноважено. Перевірте, чи правильно вказано " -"реєстраційні дані.\n" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "Виклик JSON-RPC завершився помилкою із кодом стану: %li\n" - -#, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "" -"Відповідь JSON-RPC:\n" -"%s\n" - -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" -"Не вдалося видобути повідомлення про помилку з відповіді JSON-RPC: %s\n" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "Не вдалося обробити відповідь JSON-RPC: %s\n" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" -"Не вдалося обробити відповідь JSON-RPC: не знайдено значення «result».\n" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "Не вдалося видобути дані з відповіді JSON-RPC: %s\n" - -#, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "помилка json_pack_ex(): %s\n" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "Успішне скасування реєстрації.\n" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "Спроба скасування реєстрації зазнала невдачі.\n" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "у відповіді XML-RPC не знайдено результату\n" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "Не вдалося визначити сервер IPA з %s\n" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "" -"Не вдалося долучити вузол: невдала спроба ініціалізації контексту Kerberos\n" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "" -"Не вдалося долучити вузол: не знайдено кешу реєстраційних даних Kerberos\n" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "" -"Не вдалося долучити вузол: не знайдено реєстраційного запису користувача " -"Kerberos і не вказано пароля вузла.\n" - -#, c-format -msgid "fork() failed\n" -msgstr "невдала спроба виконання fork()\n" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "Не знайдено ipa-getkeytab\n" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "Помилкові права доступу до ipa-getkeytab?\n" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "спроба виконання ipa-getkeytab зазнала невдачі, номер помилки %d\n" - -#, c-format -msgid "child exited with %d\n" -msgstr "дочірній процес завершив роботу з повідомленням %d\n" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "Помилка при визначенні адрес таблиці ключів: %s.\n" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "Помилка під час отримання типової області дії Kerberos: %s.\n" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "Помилка під час обробки «%1$s»: %2$s.\n" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "Помилка під час отримання початкових реєстраційних даних: %s.\n" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "Не вдалося створити кеш реєстраційних даних Kerberos\n" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "Помилка під час спроби збереження реєстраційних даних у кеші: %s.\n" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "Вивести дані XML-RPC без обробки у режимі GSSAPI" - -msgid "Quiet mode. Only errors are displayed." -msgstr "«Мовчазний» режим. Буде показано лише повідомлення про помилки." - -msgid "Unenroll this host from IPA server" -msgstr "Скасувати реєстрацію цього вузла на сервері IPA" - -msgid "Hostname of this server" -msgstr "Назва вузла цього сервера" - -msgid "hostname" -msgstr "назва вузла" - -msgid "IPA Server to use" -msgstr "Сервер IPA, який слід використовувати" - -msgid "Specifies where to store keytab information." -msgstr "Визначає, де слід зберігати дані таблиці ключів." - -msgid "filename" -msgstr "назва файла" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "" -"Долучити вузол у примусовому режимі. Повторне долучення виконуватиметься, " -"навіть якщо вузол вже долучено." - -msgid "LDAP password (if not using Kerberos)" -msgstr "Пароль LDAP (якщо не використовується Kerberos)" - -msgid "password" -msgstr "пароль" - -msgid "LDAP basedn" -msgstr "Базовий DN LDAP" - -msgid "basedn" -msgstr "Базовий DN" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "Не вдалося отримати FQDN вузла!\n" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "Назву вузла слід вказувати повністю: %s\n" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "Назва вузла не повинна бути такою: %s\n" - -msgid "Failed to add" -msgstr "Не вдалося додати" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" -"Записати сертифікат (ланцюжок сертифікації, якщо використано --chain) до " -"файла" - -msgid "Unrevoked" -msgstr "Відкликання скасовано" - -msgid "Error" -msgstr "Помилка" - -msgid "Input filename" -msgstr "Назва вхідного файла" - -msgid "File to load the certificate from." -msgstr "Файл, з якого слід завантажити сертифікат." - -msgid "cannot specify both raw certificate and file" -msgstr "не можна одночасно вказувати код сертифіката і файл із сертифікатом" - -msgid "Input file" -msgstr "Вхідний файл" - -msgid "File to load the certificate from" -msgstr "Файл, з якого слід завантажити сертифікат" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "Налаштування профілів збережено до файла «%(file)s»" - -msgid "Split DNS record to parts" -msgstr "Поділити запис DNS на частини" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "Будь ласка, виберіть тип запису ресурсу DNS, який слід додати" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "Найпоширенішими типами для цього типу зон є: %s\n" - -msgid "DNS resource record type" -msgstr "Тип запису ресурсу DNS" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "Некоректний або непідтримуваний тип. Дозволені значення: %s" - -msgid "No option to modify specific record provided." -msgstr "Можливості внесення змін у певний запис не передбачено." - -msgid "Current DNS record contents:\n" -msgstr "Поточний вміст запису DNS:\n" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "Змінити значення «%(value)s» %(name)s?" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "" -"Пропущено %(count)d %(type)s запис. Одночасно можна змінювати лише одне " -"значення на тип запису DNS." -msgstr[1] "" -"Пропущено %(count)d %(type)s записи. Одночасно можна змінювати лише одне " -"значення на тип запису DNS." -msgstr[2] "" -"Пропущено %(count)d %(type)s записів. Одночасно можна змінювати лише одне " -"значення на тип запису DNS." - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" -"Не надано ні --del-all, ні параметрів вилучення певного запису.\n" -"Всі підтримувані типи записів можна знайти у виводі команди help." - -msgid "No option to delete specific record provided." -msgstr "Не вказано параметр вилучення певного запису." - -msgid "Delete all?" -msgstr "Вилучити все?" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "Вилучити значення «%(value)s» %(name)s?" - -msgid "Server will check DNS forwarder(s)." -msgstr "Сервер перевірятиме засоби переспрямовування DNS." - -msgid "This may take some time, please wait ..." -msgstr "Це доволі тривала дія. Будь ласка, зачекайте…" - -msgid "DNS forwarder" -msgstr "Переспрямовувач DNS" - -msgid "file to store DNS records in nsupdate format" -msgstr "файл для зберігання записів DNS у форматі nsupdate" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "Сертифікати, що зберігаються у файлі «%(file)s»" - -msgid "Servers details:" -msgstr "Параметри сервера:" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" -"Режим міграції вимкнено.\n" -"Скористайтеся командою «ipa config-mod--enable-migration=TRUE», щоб " -"увімкнути його." - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" -"Міграцію записів паролів здійснено у форматі до хешування.\n" -"IPA не вдасться створити ключі Kerberos, якщо не буде\n" -"надано текстових паролів. Всім користувачам з перенесеними\n" -"записами, доведеться пройти розпізнавання на\n" -"https://your.domain/ipa/migration/ до того, як вони зможуть\n" -"скористатися обліковими записами Kerberos." - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "Вилучаємо %(servers)s з топології реплікації, будь ласка, зачекайте…" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "Топологія реплікації суфікса «%(suffix)s» у порядку." - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "Топологія реплікації суфікса «%(suffix)s» містить помилки." - -msgid "Topology is disconnected" -msgstr "Топологію від’єднано" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "Сервер %(srv)s не може встановити зв’язок із серверами: %(replicas)s" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "Перевищено рекомендовану максимальну кількість узгоджень на репліку" - -msgid "Maximum number of agreements per replica" -msgstr "Максимальна кількість узгоджень на репліку" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "Сервер «%(srv)s» має %(n)d узгоджень із такими серверами:" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "Вилучити користувача, зберігаючи запис для наступного використання" - -msgid "Delete a user" -msgstr "Вилучити користувача" - -msgid "preserve and no-preserve cannot be both set" -msgstr "" -"не можна одночасно встановлювати ознаку зарезервованості та " -"незарезервованості" - -msgid "maps not connected to /etc/auto.master:" -msgstr "карти, не з’єднані з /etc/auto.master:" - -msgid "Import automount files for a specific location." -msgstr "Імпортувати файли automount для певної адреси." - -msgid "Master file" -msgstr "Основний файл" - -msgid "Automount master file." -msgstr "Основний файл automount." - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "" -"Режим неперервної обробки. Програма повідомляє про помилки, але продовжує " -"обробку." - -#, python-format -msgid "File %(file)s not found" -msgstr "Файла %(file)s не знайдено" - -#, python-format -msgid "key %(key)s already exists" -msgstr "запис ключа %(key)s вже існує" - -#, python-format -msgid "map %(map)s already exists" -msgstr "запис карти %(map)s вже існує" - -msgid "Imported maps:" -msgstr "Імпортовані карти:" - -#, python-format -msgid "Added %(map)s" -msgstr "Додано %(map)s" - -msgid "Imported keys:" -msgstr "Імпортовані ключі:" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "Додано %(src)s до %(dst)s" - -msgid "Ignored keys:" -msgstr "Проігноровані ключі:" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "Проігноровано %(src)s до %(dst)s" - -msgid "Duplicate maps skipped:" -msgstr "Пропущені дублікати карт:" - -#, python-format -msgid "Skipped %(map)s" -msgstr "Пропущено %(map)s" - -msgid "Duplicate keys skipped:" -msgstr "Пропущені дублікати ключів:" - -#, python-format -msgid "Skipped %(key)s" -msgstr "Пропущено %(key)s" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "" -"Неможливо показати код QR за допомогою налаштованого кодування виведення " -"результатів. Будь ласка, скористайтеся адресою ключа для налаштовування " -"вашого пристрою OTP" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "" -"Ширина QR-коду перевищує розмір термінала для виведення. Будь ласка, змініть " -"розміри вашого термінала." - -msgid "Synchronize an OTP token." -msgstr "Синхронізувати жетон OTP." - -msgid "User ID" -msgstr "Ід. користувача" - -msgid "Password" -msgstr "Пароль" - -msgid "First Code" -msgstr "Перший код" - -msgid "Second Code" -msgstr "Другий код" - -msgid "Token ID" -msgstr "Ідентифікатор жетона" - -msgid "python-yubico is not installed." -msgstr "python-yubico не встановлено." - msgid "" "\n" -"YubiKey Tokens\n" -msgstr "" -"\n" -"Жетони YubiKey\n" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" -"\n" -"Керування жетонами YubiKey.\n" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" -"\n" -"Цей код є розширенням до додатка otptoken, він надає підтримку " -"безпосереднього\n" -"читання та запису жетонів YubiKey.\n" - -msgid "" "\n" "EXAMPLES:\n" msgstr "" "\n" +"\n" "ПРИКЛАДИ:\n" +msgid "" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +msgstr "" +"\n" +"\n" +"Приклади:\n" +" Знайти усі сервери IPA:\n" +" ipa server-find\n" + +msgid "" +"\n" +"\n" +"GLOBAL DNS CONFIGURATION\n" +msgstr "" +"\n" +"\n" +"ЗАГАЛЬНІ НАЛАШТУВАННЯ DNS\n" + +msgid "" +"\n" +" Override this so we can add completed and failed to the return " +"result.\n" +" " +msgstr "" +"\n" +" Перевизначення з метою додавання у повернуте повідомлення даних щодо " +"успіху чи невдачі.\n" +" " + +msgid "" +"\n" +" Override this so we can set completed and failed.\n" +" " +msgstr "" +"\n" +" Перевизначення з метою встановлення станів успіху та невдачі.\n" +" " + +msgid "" +"\n" +" Add an automember rule.\n" +" " +msgstr "" +"\n" +" Додати правило автоматичної участі.\n" +" " + +msgid "" +"\n" +" Add conditions to an automember rule.\n" +" " +msgstr "" +"\n" +" Додати умови до правила автоматичної участі.\n" +" " + +msgid "" +"\n" +" Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --auto-private-groups\n" +"\n" +" may be given for a new ID range for a trusted AD domain and\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +msgstr "" +"\n" +" Додати новий діапазон ідентифікаторів.\n" +"\n" +" Щоб додати новий діапазон ідентифікаторів, вам слід завжди вказати\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Крім того, можна вказати\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" для нового діапазону ідентифікаторів для локального домену, а\n" +"\n" +" --auto-private-groups\n" +"\n" +" може бути вказано для створення діапазону ідентифікаторів для довіреного " +"домену AD і\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" слід вказати для додавання нового діапазону для довіреного домену AD.\n" +"\n" + +msgid "" +"\n" +" Delete an automember rule.\n" +" " +msgstr "" +"\n" +" Вилучити правило автоматичної участі.\n" +" " + +msgid "" +"\n" +" Display information about an automember rule.\n" +" " +msgstr "" +"\n" +" Показати дані щодо правила автоматичної участі.\n" +" " + +msgid "" +"\n" +" Display information about the default (fallback) automember groups.\n" +" " +msgstr "" +"\n" +" Показати дані щодо типових (резервних) груп автоматичної участі.\n" +" " + +msgid "" +"\n" +" Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again. " +msgstr "" +"\n" +" Стан блокування облікового запису користувача\n" +"\n" +" Обліковий запис може бути заблоковано, якщо введено неправильний пароль\n" +" забагато разів протягом певного проміжку часу, який визначається " +"правилами\n" +" роботи з паролями. Блокування облікового запису є тимчасовим станом, " +"його\n" +" може бути розблоковано адміністратором.\n" +"\n" +" Ця програма з’єднується з кожним основним вузлом IPA і показує стан\n" +" блокування на кожному з них.\n" +"\n" +" Щоб визначити, чи слід блокувати обліковий запис на певному сервері, " +"слід\n" +" виконати порівняння кількості помилкових спроб входу та час останньої\n" +" невдалої спроби з еталонними значеннями. Обліковий запис буде " +"заблоковано,\n" +" якщо буде перевищено кількість maxfail помилкових спроб протягом " +"проміжку\n" +" часу failinterval. Відповідні значення задаються правилами обробки " +"паролів,\n" +" пов’язаними з обліковим записом користувача.\n" +"\n" +" Зміни до лічильника помилкових спроб входу вносяться, лише коли " +"користувач\n" +" виконує спробу увійти, тому може статися так, що обліковий запис " +"заблоковано,\n" +" хоча час, що минув з останньої помилкової спроби, перевищує час " +"блокування\n" +" (lockouttime), заданий правилам обробки паролів. Це означає, що " +"користувач\n" +" може увійти до системи знову. " + +msgid "" +"\n" +" Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " +msgstr "" +"\n" +" Змінити запис довіри (для наступного використання).\n" +"\n" +" У поточній версії можлива зміна лише типова зміна атрибутів LDAP.\n" +" Додаткові варіанти буде додано у наступних випусках.\n" +" " + +msgid "" +"\n" +" Modify an automember rule.\n" +" " +msgstr "" +"\n" +" Змінити правило автоматичної участі.\n" +" " + +msgid "" +"\n" +" Modify realm domains\n" +"\n" +" DNS check: When manually adding a domain to the list, a DNS check is\n" +" performed by default. It ensures that the domain is associated with\n" +" the IPA realm, by checking whether the domain has a _kerberos TXT " +"record\n" +" containing the IPA realm name. This check can be skipped by specifying\n" +" --force option.\n" +"\n" +" Removal: when a realm domain which has a matching DNS zone managed by\n" +" IPA is being removed, a corresponding _kerberos TXT record in the zone " +"is\n" +" removed automatically as well. Other records in the zone or the zone\n" +" itself are not affected.\n" +" " +msgstr "" +"\n" +" Внесення змін до доменів області\n" +"\n" +" Перевірка DNS: при додаванні домену до списку вручну типово\n" +" виконується перевірка DNS. Вона дає дані щодо прив'язки домену\n" +" до області IPA за рахунок перевірки того, чи містить запис TXT домену у\n" +" _kerberos TXT назву області IPA. Цю перевірку можна обійти, вказавши\n" +" параметр --force.\n" +"\n" +" Вилучення: коли вилучається домен області, який мав відповідну зону\n" +" DNS керовану IPA, також автоматично вилучається відповідний запис\n" +" TXT у зоні у _kerberos. Інші записи у зоні та сама зона лишаються\n" +" незмінними.\n" +" " + +msgid "" +"\n" +" Remove conditions from an automember rule.\n" +" " +msgstr "" +"\n" +" Вилучити умови з правила автоматичної участі.\n" +" " + +msgid "" +"\n" +" Remove default (fallback) group for all unmatched entries.\n" +" " +msgstr "" +"\n" +" Вилучити типову (резервну) групу для невідповідних записів.\n" +" " + +msgid "" +"\n" +" Search for automember rules.\n" +" " +msgstr "" +"\n" +" Шукати правила автоматичної участі.\n" +" " + +msgid "" +"\n" +" Search for orphan automember rules. The command might need to be run as\n" +" a privileged user user to get all orphan rules.\n" +" " +msgstr "" +"\n" +" Виконати пошук осиротілих правил автоматичної участі. Можливо, команду\n" +" слід запускати від імені привілейованого користувача, щоб отримати усі " +"правила.\n" +" " + +msgid "" +"\n" +" Search for users matching the provided certificate.\n" +"\n" +" This command relies on SSSD to retrieve the list of matching users and\n" +" may return cached data. For more information on purging SSSD cache,\n" +" please refer to sss_cache documentation.\n" +" " +msgstr "" +"\n" +" Шукати користувачів, яких пов’язано із наданим сертифікатом.\n" +"\n" +" Для отримання списку відповідних користувачів ця команда покладається\n" +" на дані SSSD, отже, вона може повертати кешовані дані. Докладніше про\n" +" очищення кешу SSSD можна дізнатися із документації до sss_cache.\n" +" " + +msgid "" +"\n" +" Set default (fallback) group for all unmatched entries.\n" +" " +msgstr "" +"\n" +" Встановити типову (резервну) групу для невідповідних записів.\n" +" " + +msgid "" +"\n" +" Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator." +msgstr "" +"\n" +" Розблокувати обліковий запис користувача\n" +"\n" +" Обліковий запис може бути заблоковано, якщо відповідно до правил " +"безпеки\n" +" користувач перевищить обмеження на кількість введення помилкових " +"паролів\n" +" протягом певного часу. Запис блокується тимчасово, його може бути\n" +" розблоковано адміністратором." + +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" +"\n" +" Об’єкт контейнера сховищ.\n" +" " + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" +"\n" +" Об’єкт сховища.\n" +" " + +msgid "" +"\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" +msgstr "" +"\n" +" Ця команда еквівалентна до такої команди:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" +" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " +"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" + +msgid "" +"\n" +" Add location:\n" +" ipa location-add location --description 'My location'\n" +msgstr "" +"\n" +" Додати запис місця:\n" +" ipa location-add location --description 'My location'\n" + +msgid "" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" +"\n" +" Додати сегмент топології до суфікса «ca»:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" + +msgid "" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +msgstr "" +"\n" +" Додати сегмент топології до суфікса «domain»:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" + +msgid "" +"\n" +" Create new CA, subordinate to the IPA CA (requires permission\n" +" \"System: Add CA\"):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" +msgstr "" +"\n" +" Створити новий запис служби сертифікації, підлеглий щодо служби " +"сертифікації IPA (потребує прав доступу\n" +" «Система: Додати CA»):\n" +"\n" +" ipa ca-add puppet --desc \"Puppet\" \\\n" +" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" + +msgid "" +"\n" +" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" +" CA to be disabled first):\n" +"\n" +" ipa ca-del puppet\n" +msgstr "" +"\n" +" Вилучити запис служби сертифікації (потребує прав доступу «Система: " +"Вилучити CA»; також потребує попереднього вимикання\n" +" CA):\n" +"\n" +" ipa ca-del puppet\n" + +msgid "" +"\n" +" Delete location:\n" +" ipa location-del location\n" +msgstr "" +"\n" +" Вилучити запис місця:\n" +" ipa location-del location\n" + +msgid "" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +msgstr "" +"\n" +" Вилучити сегмент топології у суфіксі «ca»:\n" +" ipa topologysegment-del ca segment_name\n" + +msgid "" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +msgstr "" +"\n" +" Вилучити сегмент топології у суфіксі «domain»:\n" +" ipa topologysegment-del domain segment_name\n" + +msgid "" +"\n" +" Disable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-disable puppet\n" +msgstr "" +"\n" +" Вимкнути службу сертифікації (потребує прав доступу «Система: Змінити " +"CA»):.\n" +"\n" +" ipa ca-disable puppet\n" + +msgid "" +"\n" +" Find all locations:\n" +" ipa location-find\n" +msgstr "" +"\n" +" Знайти усі місця:\n" +" ipa location-find\n" + +msgid "" +"\n" +" Find all servers:\n" +" ipa server-find\n" +msgstr "" +"\n" +" Знайти усі сервери:\n" +" ipa server-find\n" + +msgid "" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +msgstr "" +"\n" +" Знайти усі суфікси:\n" +" ipa topologysuffix-find\n" + +msgid "" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +msgstr "" +"\n" +" Вивести список усіх сегментів топології у суфіксі «ca»:\n" +" ipa topologysegment-find ca\n" + +msgid "" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +msgstr "" +"\n" +" Вивести список усіх сегментів топології у суфіксі «domain»:\n" +" ipa topologysegment-find domain\n" + +msgid "" +"\n" +" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"\n" +" ipa ca-enable puppet\n" +msgstr "" +"\n" +" Повторно увімкнути службу сертифікації (потребує прав доступу «Система: " +"Змінити CA»):\n" +"\n" +" ipa ca-enable puppet\n" + +msgid "" +"\n" +" Show configuration of a specific DNS server:\n" +" ipa dnsserver-show\n" +msgstr "" +"\n" +" Показати налаштування певного сервера DNS:\n" +" ipa dnsserver-show\n" + +msgid "" +"\n" +" Show implicit IPA master role:\n" +" ipa server-role-find --include-master\n" +msgstr "" +"\n" +" Показати неявну основну роль IPA:\n" +" ipa server-role-find --include-master\n" + +msgid "" +"\n" +" Show specific location:\n" +" ipa location-show location\n" +msgstr "" +"\n" +" Показати певне місце:\n" +" ipa location-show location\n" + +msgid "" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" +"\n" +" Показати вказаний сервер:\n" +" ipa server-show ipa.example.com\n" + +msgid "" +"\n" +" Show status of 'DNS server' role on a server:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" +msgstr "" +"\n" +" Показати стан ролі «DNS server» на сервері:\n" +" ipa server-role-show ipa.example.com \"DNS server\"\n" + +msgid "" +"\n" +" Show status of all configured roles on a server:\n" +" ipa server-role-find ipa.example.com\n" +msgstr "" +"\n" +" Показати стан усіх налаштованих ролей на сервері:\n" +" ipa server-role-find ipa.example.com\n" + +msgid "" +"\n" +" Show status of all roles containing 'AD' on a server:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" +msgstr "" +"\n" +" Показати стан усіх ролей, назва яких містить «AD», на сервері:\n" +" ipa server-role-find --server ipa.example.com --role=\"AD trust " +"controller\"\n" + +msgid "" +"\n" +" Update configuration of a specific DNS server:\n" +" ipa dnsserver-mod\n" +msgstr "" +"\n" +" Оновити налаштування для вказаного сервера DNS:\n" +" ipa dnsserver-mod\n" + +msgid "" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" +"\n" +" Перевірити топологію суфікса «ca»:\n" +" ipa topologysuffix-verify ca\n" + +msgid "" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +msgstr "" +"\n" +" Перевірити топологію суфікса «domain»:\n" +" ipa topologysuffix-verify domain\n" + +msgid "" +"\n" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" +msgstr "" +"\n" +" Додавання запису LOC для example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" + +msgid "" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +msgstr "" +"\n" +" Додати умову до правила:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" + +msgid "" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" +msgstr "" +"\n" +"Додати вузол, який може керувати сховищем ключів та сертифікатом цього " +"вузла :\n" +" ipa host-add-managedby --hosts=test2 test\n" + +msgid "" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +msgstr "" +"\n" +" Додати запис вузла до правила:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" + +msgid "" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +msgstr "" +"\n" +" Додати вузол:\n" +" ipa host-add web1.example.com\n" + +msgid "" +"\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" +msgstr "" +"\n" +" Додавання поштового сервера для example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" + +msgid "" +"\n" +" Add a new external Identity Provider server using github predefined " +"endpoints:\n" +" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" +msgstr "" +"\n" +" Додати новий сервер надавача зовнішніх профілів за допомогою попередньо " +"визначених кінцевих точок github:\n" +" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" + +msgid "" +"\n" +" Add a new external Identity Provider server:\n" +" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." +"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" +msgstr "" +"\n" +" Додати новий запис сервера надавача зовнішніх профілів:\n" +" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." +"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" + +msgid "" +"\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" +msgstr "" +"\n" +" Додати новий вузол з одноразовим паролем:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" + +msgid "" +"\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +msgstr "" +"\n" +"Додати новий вузол з випадковим одноразовим паролем:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" + +msgid "" +"\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" +msgstr "" +"\n" +"Додати новий вузол:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" + +msgid "" +"\n" +" Add a new server:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" +msgstr "" +"\n" +" Додати новий сервер:\n" +" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" + +msgid "" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +msgstr "" +"\n" +" Додати новий жетон:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" + msgid "" "\n" " Add a new token:\n" @@ -1032,155 +789,3133 @@ msgstr "" " Додати новий жетон:\n" " ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgid "Add a new YubiKey OTP token." -msgstr "Додати новий жетон OTP YubiKey." - -msgid "YubiKey slot" -msgstr "Слот YubiKey" - -msgid "No free YubiKey slot!" -msgstr "Немає вільних слотів YubiKey!" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "Не вдалося прочитати файл «%(filename)s»: %(exc)s" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "Не вдалося розшифрувати файл «%(filename)s»: %(exc)s" - -msgid "Invalid credentials" -msgstr "Реєстраційні дані вказано з помилками" - -msgid "Create a new vault." -msgstr "Створити сховище." - -msgid "Vault password" -msgstr "Пароль до сховища" - -msgid "File containing the vault password" -msgstr "Файл, який містить пароль до сховища" - -msgid "File containing the vault public key" -msgstr "Файл, який містить відкритий ключ сховища" - -msgid "Password can be specified only for symmetric vault" -msgstr "Пароль можна вказувати лише для симетричного сховища" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "Відкритий ключ можна вказувати лише для асиметричного сховища" - -msgid "Password specified multiple times" -msgstr "Пароль вказано декілька разів" - -msgid "Public key specified multiple times" -msgstr "Відкритий ключ вказано декілька разів" - -msgid "Missing vault public key" -msgstr "Не вказано відкритого ключа сховища" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "Некоректний або непідтримуваний відкритий ключ сховища: %s" - -msgid "Modify a vault." -msgstr "Змінити сховище." - -msgid "Change password" -msgstr "Змінити пароль" - -msgid "Old vault password" -msgstr "Старий пароль до сховища" - -msgid "File containing the old vault password" -msgstr "Файл, який містить старий пароль до сховища" - -msgid "New vault password" -msgstr "Новий пароль до сховища" - -msgid "File containing the new vault password" -msgstr "Файл, який містить новий пароль до сховища" - -msgid "Old vault private key" -msgstr "Старий закритий ключ сховища" - -msgid "File containing the old vault private key" -msgstr "Файл, який містить старий закритий ключ сховища" - -msgid "File containing the new vault public key" -msgstr "Файл, який містить новий відкритий ключ сховища" - -msgid "New public key specified multiple times" -msgstr "Новий відкритий ключ вказано декілька разів" - -msgid "Missing new vault public key" -msgstr "Не вказано нового відкритого ключа сховища" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "{algo} не є підтримуваним алгоритмом обгортки сховища" - -msgid "Archive data into a vault." -msgstr "Архівувати дані до сховища." - -msgid "Binary data to archive" -msgstr "Двійкові дані для архівування" - -msgid "File containing data to archive" -msgstr "Файл, що містить дані для архівування" - -msgid "Override existing password" -msgstr "Перевизначити наявний пароль" - -msgid "Input data specified multiple times" -msgstr "Вхідні дані вказано декілька разів" - -#, python-format msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" msgstr "" -"Об’єм даних перевищує обмеження. Поточне обмеження об’єму сховища — " -"%(limit)d Б" +"\n" +" Додати право доступу, яке надає можливість керувати участю у групах:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" -msgid "Invalid vault type" -msgstr "Некоректний тип сховища" +msgid "" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +msgstr "" +"\n" +" Додати право доступу до створення записів користувачів:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgid "Retrieve a data from a vault." -msgstr "Отримати дані зі сховища." +msgid "" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +msgstr "" +"\n" +" Додати особливе правило sudo для типового налаштовування сервера sudo:\n" +" ipa sudorule-add defaults\n" -msgid "File to store retrieved data" -msgstr "Файл для зберігання отриманих даних" +msgid "" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +msgstr "" +"\n" +" Додати стандартне сховище:\n" +" ipa vault-add <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --type standard\n" -msgid "Vault private key" -msgstr "Закритий ключ сховища" +msgid "" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +msgstr "" +"\n" +" Додати симетричне сховище:\n" +" ipa vault-add <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --type symmetric --password-file пароль.txt\n" -msgid "File containing the vault private key" -msgstr "Файл, який містить закритий ключ сховища" +msgid "" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +msgstr "" +"\n" +" Додати запис користувача до правила:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" -msgid "Data" -msgstr "Дані" +msgid "" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +msgstr "" +"\n" +" Додати запис користувача:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgid "Private key specified multiple times" -msgstr "Закритий ключ вказано декілька разів" +msgid "" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +msgstr "" +"\n" +" Додати асиметричне сховище:\n" +" ipa vault-add <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --type asymmetric --public-key-file відкритий_ключ.pem\n" -msgid "Missing vault private key" -msgstr "Не вказано закритого ключа сховища" +msgid "" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +msgstr "" +"\n" +" Додати умову виключення до правила для запобігання автоматичному " +"пов’язуванню:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "Увімкнено правило sudo «%s»" +msgid "" +"\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" +msgstr "" +"\n" +" Додавання ще одного запису за допомогою специфічних для запису MX " +"параметрів:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "Вимкнено правило «%s»" +msgid "" +"\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" +"\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" +msgstr "" +"\n" +" Додавання ще одного запису за допомогою інтерактивного режиму (у який " +"програма переходить\n" +" у відповідь на команди dnsrecord-add, dnsrecord-mod або dnsrecord-del без " +"параметрів):\n" +" ipa dnsrecord-add example.com @\n" +" Будь ласка, виберіть тип запису ресурсу DNS, який слід додати\n" +" Найпоширенішими типами для цього типу зон є: NS, MX, LOC\n" +"\n" +" Тип запису ресурсу DNS: MX\n" +" Пріоритетність MX: 30\n" +" Обмінник MX: mail3\n" +" Назва запису: example.com\n" +" Запис MX: 10 mail1, 20 mail2, 30 mail3\n" +" Запис NS: nameserver.example.com., nameserver2.example.com.\n" -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "До правила sudo «%(rule)s» додано параметр «%(option)s»" +msgid "" +"\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" +msgstr "" +"\n" +" Додавання нового запису A для www.example.com, крім того, створення " +"зворотного\n" +" запису у відповідній зворотній зоні. У цьому випадку запис PTR «2» вказує " +"на\n" +" www.example.com буде створено у зоні 2.0.192.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "З правила sudo «%(rule)s» вилучено параметр «%(option)s»" +msgid "" +"\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" +msgstr "" +"\n" +" Додавання нового запису PTR для www.example.com\n" +" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" + +msgid "" +"\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" +msgstr "" +"\n" +" Додавання нових записів SRV для серверів LDAP. Три чверті запитів мають\n" +" надсилатися до fast.example.com, а одна чверть — на slow.example.com.\n" +" Якщо жодна зі служб не буде доступною, перемкнутися на backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" + +msgid "" +"\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" +msgstr "" +"\n" +" Додавання нової реверсивної зони, вказаної за допомогою мережевої IP-" +"адреси:\n" +" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" + +msgid "" +"\n" +" Add new zone:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" +msgstr "" +"\n" +" Додавання нової зони:\n" +" ipa dnszone-add example.com --admin-email=admin@example.com\n" + +msgid "" +"\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" +msgstr "" +"\n" +" Додати другий сервер назв для example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" + +msgid "" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +msgstr "" +"\n" +" Додати об’єкт команди sudo і записати його як дозволену команду до " +"правила:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" + +msgid "" +"\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" +msgstr "" +"\n" +" Додавання загальносистемних прав доступу, якими можна скористатися для " +"делегування привілеїв для окремих зон:\n" +" ipa dnszone-add-permission example.com\n" + +msgid "" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +msgstr "" +"\n" +" Додати початкову групу або групу вузлів:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" + +msgid "" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +msgstr "" +"\n" +" Додати початкове правило:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" + +msgid "" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Додати записи учасників сховища:\n" +" ipa vault-add-member <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" + +msgid "" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Додати записи власників сховища:\n" +" ipa vault-add-owner <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" + +msgid "" +"\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" +msgstr "" +"\n" +" Після внесення цих змін три п’ятих запитів має надсилатися до\n" +" fast.example.com, а дві п’ятих — до slow.example.com.\n" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" +msgstr "" +"\n" +" Дозволити користувачеві створення таблиці ключів:\n" +" ipa host-allow-create-keytab test2 --users=tuser1\n" + +msgid "" +"\n" +" Allow user to create a keytab:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" +msgstr "" +"\n" +" Дозволити користувачеві створювати таблицю ключів:\n" +" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" + +msgid "" +"\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" +"\n" +" A record: 192.0.2.2, 192.0.2.3\n" +"\n" +" Delete A record '192.0.2.2'? Yes/No (default No):\n" +" Delete A record '192.0.2.3'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 192.0.2.2 (A record 192.0.2.3 has been " +"deleted)\n" +msgstr "" +"\n" +" Приклад інтерактивного режиму для команди dnsrecord-del:\n" +" ipa dnsrecord-del example.com www\n" +" Не вказано параметр вилучення певного запису.\n" +" Вилучити усі? Так/Ні (типово «Ні»): (не вилучати усі записи)\n" +" Поточний вміст запису DNS:\n" +"\n" +" Запис A: 192.0.2.2, 192.0.2.3\n" +"\n" +" Вилучити запис A «192.0.2.2»? Так/Ні (типово «Ні»):\n" +" Вилучити запис A «192.0.2.3»? Так/Ні (типово «Ні»): y\n" +" Назва запису: www\n" +" Запис A: 192.0.2.2 (Запис A 192.0.2.3 вилучено)\n" + +msgid "" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" +"\n" +" Архівувати дані до асиметричного сховища:\n" +" ipa vault-archive \n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --in <файл вхідних даних>\n" + +msgid "" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +msgstr "" +"\n" +" Архівувати дані до стандартного сховища:\n" +" ipa vault-archive \n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --in <файл вхідних даних>\n" + +msgid "" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +msgstr "" +"\n" +" Архівувати дані до симетричного сховища:\n" +" ipa vault-archive \n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --in <файл вхідних даних>\n" +" --password-file пароль.txt\n" + +msgid "" +"\n" +" Change forward-policy for external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" +msgstr "" +"\n" +" Змінити правила переспрямовування для external.example.com:\n" +" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" + +msgid "" +"\n" +" Change the secret:\n" +" ipa idp-mod MyIdP --secret\n" +msgstr "" +"\n" +" Змінити реєстраційні дані:\n" +" ipa idp-mod MyIdP --secret\n" + +msgid "" +"\n" +" Change the secret:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" +msgstr "" +"\n" +" Змінити реєстраційні дані:\n" +" ipa radiusproxy-mod MyRADIUS --secret\n" + +msgid "" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " +"Hat\"\n" +msgstr "" +"\n" +" Змінити постачальника:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " +"Hat\"\n" + +msgid "" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +msgstr "" +"\n" +" Перевірити стан запиту щодо підписування:\n" +" ipa cert-status 10\n" + +msgid "" +"\n" +" Create a new Certificate Identity Mapping Rule:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" +msgstr "" +"\n" +" Створити правило прив’язування сертифікатів до профілів:\n" +" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " +"issuer\"\n" + +msgid "" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +msgstr "" +"\n" +" Створити правило:\n" +" ipa sudorule-add readfiles\n" + +msgid "" +"\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +msgstr "" +"\n" +" Делегування зони sub.example до іншого сервера назв:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" + +msgid "" +"\n" +" Delete a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-del rule1\n" +msgstr "" +"\n" +" Вилучити правило прив’язування сертифікатів до профілів:\n" +" ipa certmaprule-del rule1\n" + +msgid "" +"\n" +" Delete a configuration:\n" +" ipa radiusproxy-del MyRADIUS\n" +msgstr "" +"\n" +" Вилучити налаштування:\n" +" ipa radiusproxy-del MyRADIUS\n" + +msgid "" +"\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" +msgstr "" +"\n" +" Вилучити вузол:\n" +" ipa host-del test.example.com\n" + +msgid "" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +" Вилучити жетон:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Вилучити сховище:\n" +" ipa vault-del <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" + +msgid "" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" +"\n" +" Вилучити правило автоматичної участі:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" + +msgid "" +"\n" +" Delete an external Identity Provider server:\n" +" ipa idp-del MyIdP\n" +msgstr "" +"\n" +" Вилучити сервер надавача зовнішніх профілів:\n" +" ipa idp-del MyIdP\n" + +msgid "" +"\n" +" Delete forward zone external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" +msgstr "" +"\n" +" Вилучення зони переспрямовування external.example.com:\n" +" ipa dnsforwardzone-del external.example.com\n" + +msgid "" +"\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" +msgstr "" +"\n" +" Вилучення раніше доданого сервера назв з example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" + +msgid "" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Вилучити записи учасників сховища:\n" +" ipa vault-remove-member <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" + +msgid "" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +" Вилучити записи учасників сховища:\n" +" ipa vault-remove-owner <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" + +msgid "" +"\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" +msgstr "" +"\n" +" Вилучення зони example.com з усіма записами ресурсів:\n" +" ipa dnszone-del example.com\n" + +msgid "" +"\n" +" Disable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-disable rule1\n" +msgstr "" +"\n" +" Вимкнути правило прив’язування сертифікатів до профілів:\n" +" ipa certmaprule-disable rule1\n" + +msgid "" +"\n" +" Disable global forwarding for given sub-tree:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +msgstr "" +"\n" +" Вимикання загального переспрямовування для вказаного піддерева:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" + +msgid "" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +msgstr "" +"\n" +"Вимкнути ключ Kerberos вузла, сертифікат SSL та усі його служби:\n" +" ipa host-disable test.example.com\n" + +msgid "" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +msgstr "" +"\n" +" Показати правило автоматичної участі:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" + +msgid "" +"\n" +" Display information about a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-show rule1\n" +msgstr "" +"\n" +" Вивести дані щодо правила прив’язування сертифікатів до профілів:\n" +" ipa certmaprule-show rule1\n" + +msgid "" +"\n" +" Display the Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-show\n" +msgstr "" +"\n" +" Вивести загальні налаштування прив’язки сертифікатів до профілів:\n" +" ipa certmapconfig-show\n" + +msgid "" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +msgstr "" +"\n" +" Вивести налаштування сховищ:\n" +" ipa vaultconfig-show\n" + +msgid "" +"\n" +" Enable a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-enable rule1\n" +msgstr "" +"\n" +" Увімкнути правило прив’язування сертифікатів до профілів:\n" +" ipa certmaprule-enable rule1\n" + +msgid "" +"\n" +" Examine a certificate:\n" +" ipa cert-find --file=cert.pem --all\n" +msgstr "" +"\n" +" Перевірити сертифікат:\n" +" ipa cert-find --file=cert.pem --all\n" + +msgid "" +"\n" +" Examine the configuration of an external Identity Provider server:\n" +" ipa idp-show MyIdP\n" +msgstr "" +"\n" +" Перевірити налаштування сервера надавача зовнішніх профілів:\n" +" ipa idp-show MyIdP\n" + +msgid "" +"\n" +" Examine the configuration:\n" +" ipa radiusproxy-show MyRADIUS\n" +msgstr "" +"\n" +" Перевірити налаштування:\n" +" ipa radiusproxy-show MyRADIUS\n" + +msgid "" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +" Перевірити жетон:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" + +msgid "" +"\n" +" Find A records with value 192.0.2.2 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" +msgstr "" +"\n" +" Знайти записи A зі значенням 192.0.2.2 у зоні example.com\n" +" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" + +msgid "" +"\n" +" Find all Certificate Identity Mapping Rules with the specified domain:\n" +" ipa certmaprule-find --domain example.com\n" +msgstr "" +"\n" +" Знайти усі правила прив’язування сертифікатів до профілів із вказаним " +"доменом:\n" +" ipa certmaprule-find --domain example.com\n" + +msgid "" +"\n" +" Find all external Identity Provider servers whose entries include the " +"string\n" +" \"test.com\":\n" +" ipa idp-find test.com\n" +msgstr "" +"\n" +" Знайти усі сервери надавачів зовнішніх профілів, записи яких містять рядок\n" +" \"test.com\":\n" +" ipa idp-find test.com\n" + +msgid "" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +msgstr "" +"\n" +" Знайти усіх правила автоматичної участі:\n" +" ipa automember-find\n" + +msgid "" +"\n" +" Find all of the orphan automember rules:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Find all of the orphan automember rules and remove them:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" +msgstr "" +"\n" +" Знайти усі осиротілі правила автоматичної участі:\n" +" ipa automember-find-orphans --type=hostgroup\n" +" Знайти усі осиротілі правила автоматичної участі і вилучити їх:\n" +" ipa automember-find-orphans --type=hostgroup --remove\n" + +msgid "" +"\n" +" Find all servers whose entries include the string \"example.com\":\n" +" ipa radiusproxy-find example.com\n" +msgstr "" +"\n" +" Знайти усі сервери, чиї запис містять рядок «example.com»:\n" +" ipa radiusproxy-find example.com\n" + +msgid "" +"\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" +msgstr "" +"\n" +" Знайти записи для ресурсів з «www» у назві у зоні example.com:\n" +" ipa dnsrecord-find example.com www\n" + +msgid "" +"\n" +" Find user-find parameters:\n" +" ipa param-find user-find\n" +msgstr "" +"\n" +" Знайти параметри user-find:\n" +" ipa param-find user-find\n" + +msgid "" +"\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" +msgstr "" +"\n" +" Знайти зону зі словом «example» у назві домену:\n" +" ipa dnszone-find example\n" + +msgid "" +"\n" +" Forward all requests for the zone external.example.com to another " +"forwarder\n" +" using a \"first\" policy (it will send the queries to the selected " +"forwarder\n" +" and if not answered it will use global root servers):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" +msgstr "" +"\n" +" Переспрямувати усі запити для зони external.example.com до іншого " +"переспрямовувача\n" +" з використанням правила «first» (надсилати запити до вибраного " +"переспрямовувача і,\n" +" якщо він не відповість, скористатися загальними кореневими серверами):\n" +" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" +" --forwarder=203.0.113.1\n" + +msgid "" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" +msgstr "" +"\n" +" Створити і отримати таблицю ключів служби IPA:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +"\n" + +msgid "" +"\n" +" If a global forwarder is configured, all queries for which this server is " +"not\n" +" authoritative (e.g. sub.example.com) will be routed to the global " +"forwarder.\n" +" Global forwarding configuration can be overridden per-zone.\n" +msgstr "" +"\n" +" Якщо налаштовано загальний переспрямовувач, усі запити, для яких цей сервер " +"не є\n" +" надійним (наприклад sub.example.com) не маршрутизуватимуться до загального\n" +" переспрямовувача.\n" +" Загальні налаштування переспрямовування можна перевизначати для окремих " +"зон.\n" + +msgid "" +"\n" +" List all forward zones:\n" +" ipa dnsforwardzone-find\n" +msgstr "" +"\n" +" Показати список усіх зон переспрямовування:\n" +" ipa dnsforwardzone-find\n" + +msgid "" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Вивести список сховищ:\n" +" ipa vault-find\n" +" [--user <користувач>|--service <служба>|--shared]\n" + +msgid "" +"\n" +" Modify Certificate Identity Mapping global configuration:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" +msgstr "" +"\n" +" Змінити загальні налаштування прив’язки сертифікатів до профілів:\n" +" ipa certmapconfig-mod --promptusername=TRUE\n" + +msgid "" +"\n" +" Modify a Certificate Identity Mapping Rule:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" +msgstr "" +"\n" +" Змінити правило прив’язування сертифікатів до профілів:\n" +" ipa certmaprule-mod rule1 --maprule=\"\"\n" + +msgid "" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +msgstr "" +"\n" +" Змінити ключ асиметричного сховища:\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --private-key-file <файл старого закритого ключа>\n" +" --public-key-file <файл нового відкритого ключа>\n" + +msgid "" +"\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" +msgstr "" +"\n" +" Зміна загальних налаштувань DNS і встановлення списку загальних " +"переспрямовувачів:\n" +" ipa dnsconfig-mod --forwarder=203.0.113.113\n" + +msgid "" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +msgstr "" +"\n" +" Змінити відомості щодо вузла:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" + +msgid "" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +msgstr "" +"\n" +" Змінити пароль до симетричного сховища:\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --change-password\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --old-password <старий пароль>\n" +" --new-password <новий пароль>\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --old-password-file <файл старого пароля>\n" +" --new-password-file <файл нового пароля>\n" + +msgid "" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +msgstr "" +"\n" +" Змінити правило автоматичної участі:\n" +" ipa automember-mod\n" + +msgid "" +"\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" +msgstr "" +"\n" +" Зміна зони таким чином, щоб дозволити динамічне оновлення для власних " +"записів вузлів у області EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" + +msgid "" +"\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" +msgstr "" +"\n" +" Зміна зони таким чином, щоб дозволити перенесення зони лише для локальної " +"мережі:\n" +" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" + +msgid "" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +msgstr "" +"\n" +" Змінити опис сховища:\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --desc <опис>\n" + +msgid "" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +msgstr "" +"\n" +" Змінити тип сховища:\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --type <тип>\n" +" [старий пароль/закритий ключ]\n" +" [новий пароль/відкритий ключ]\n" + +msgid "" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +msgstr "" +"\n" +" Перебудувати записи участі для усіх вузлів:\n" +" ipa automember-rebuild --type=hostgroup\n" + +msgid "" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +msgstr "" +"\n" +" Перебудувати записи участі для усіх користувачів:\n" +" ipa automember-rebuild --type=group\n" + +msgid "" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" +"\n" +" Перебудувати записи участі для вказаних вузлів:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" + +msgid "" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +msgstr "" +"\n" +" Перебудувати записи участі для вказаних користувачів:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" + +msgid "" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +msgstr "" +"\n" +" Вилучити відкриті ключі SSH вузла і оновити DNS відповідно до внесених " +"змін:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" + +msgid "" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +msgstr "" +"\n" +" Вилучити сертифікат зі списку відкликання:\n" +" ipa cert-remove-hold 1032\n" + +msgid "" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +msgstr "" +"\n" +" Вилучити умову з правила:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" + +msgid "" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +msgstr "" +"\n" +" Вилучити типову (резервну) групу призначення:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" + +msgid "" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +msgstr "" +"\n" +" Створити запит щодо нового сертифіката і додати реєстраційний запис: ipa " +"cert-request --add --principal=HTTP/lion.example.com example.csr\n" + +msgid "" +"\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +msgstr "" +"\n" +" Визначити адресу вузла за назвою, якщо адреса існує (додасть типовий\n" +" домен IPA, якщо домен не включено):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" + +msgid "" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +msgstr "" +"\n" +" Отримати вже створений сертифікат:\n" +" ipa cert-show 1032\n" + +msgid "" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +msgstr "" +"\n" +" Отримати дані з асиметричного сховища:\n" +" ipa vault-retrieve <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --out <файл результатів> --private-key-file private.pem\n" + +msgid "" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +msgstr "" +"\n" +" Отримати дані зі стандартного сховища:\n" +" ipa vault-retrieve <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --out <файл результатів>\n" + +msgid "" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +msgstr "" +"\n" +" Отримати дані з симетричного сховища:\n" +" ipa vault-retrieve <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --out <файл результатів>\n" +" --password-file password.txt\n" + +msgid "" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +msgstr "" +"\n" +" Відкликати сертифікат (причини визначено у RFC 5280):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" + +msgid "" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +msgstr "" +"\n" +" Пошук сертифікатів за датою видання\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" + +msgid "" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +msgstr "" +"\n" +" Пошук сертифікатів за назвою вузла:\n" +" ipa cert-find --subject=ipaserver.example.com\n" + +msgid "" +"\n" +" Search for certificates owned by a specific user:\n" +" ipa cert-find --user=user\n" +msgstr "" +"\n" +" Пошук сертифікатів, власником яких є вказаний користувач:\n" +" ipa cert-find --user=user\n" + +msgid "" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +msgstr "" +"\n" +" Пошук відкликаних сертифікатів за причиною:\n" +" ipa cert-find --revocation-reason=5\n" + +msgid "" +"\n" +" Semantics of forwarding in IPA matches BIND semantics and depends on the " +"type\n" +" of zone:\n" +" * Master zone: local BIND replies authoritatively to queries for data in\n" +" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" +" affects only queries for names below zone cuts (NS records) of locally\n" +" served zones.\n" +"\n" +" * Forward zone: forward zone contains no authoritative data. BIND " +"forwards\n" +" queries, which cannot be answered from its local cache, to configured\n" +" forwarders.\n" +msgstr "" +"\n" +" Семантика переспрямовування у IPA збігається із семантикою BIND і залежить\n" +" від типу зони:\n" +" * Основна зона: локальний BIND надає надійні відповіді для даних у " +"заданій\n" +" зоні (включено з надійними відповідями NXDOMAIN), а переспрямовування\n" +" стосуватиметься лише запитів щодо назв за межами (записами NS) зон, що\n" +" обслуговуються локально.\n" +"\n" +" * Зона переспрямовування: зона переспрямовування не містить надійних " +"даних. BIND\n" +" переспрямовує запити, на які не вдалося отримати відповіді з локального " +"кешу, до\n" +" налаштованих переспрямовувачів.\n" + +msgid "" +"\n" +" Semantics of the --forward-policy option:\n" +" * none - disable forwarding for the given zone.\n" +" * first - forward all queries to configured forwarders. If they fail,\n" +" do resolution using DNS root servers.\n" +" * only - forward all queries to configured forwarders and if they fail,\n" +" return failure.\n" +msgstr "" +"\n" +" Семантика параметра --forward-policy:\n" +" * none — вимкнути переспрямовування для вказаної зони.\n" +" * first — спрямувати усі запити до налаштованих переспрямовувачів. Якщо\n" +" це не спрацює, виконати перетворення за допомогою кореневих серверів " +"DNS.\n" +" * only — спрямувати усі запити до налаштованих переспрямовувачів. Якщо\n" +" це не спрацює, повернути повідомлення про помилку.\n" + +msgid "" +"\n" +" Set SELinux type and role transitions on a rule:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" +msgstr "" +"\n" +" Встановити переходи типу і ролі SELinux на правило:\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" +" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" + +msgid "" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +msgstr "" +"\n" +" Встановити типовий варіант дій для sudo:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" + +msgid "" +"\n" +" Set multiple default Sudo options:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" +msgstr "" +"\n" +" Встановити декілька типових параметрів для sudo:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate' --" +"sudooption mail_badpass\n" + +msgid "" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +msgstr "" +"\n" +" Встановити типову (резервну) групу призначення:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" + +msgid "" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +msgstr "" +"\n" +" Показати сховище:\n" +" ipa vault-show <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" + +msgid "" +"\n" +" Show forward zone external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" +msgstr "" +"\n" +" Показати зону переспрямовування external.example.com:\n" +" ipa dnsforwardzone-show external.example.com\n" + +msgid "" +"\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" +msgstr "" +"\n" +" Показати загальні налаштування DNS:\n" +" ipa dnsconfig-show\n" + +msgid "" +"\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" +msgstr "" +"\n" +" Показати записи для ресурсу www у зоні example.com\n" +" ipa dnsrecord-show example.com www\n" + +msgid "" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +msgstr "" +"\n" +" Показати типову (резервну) групу призначення:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" + +msgid "" +"\n" +" Show user-find details:\n" +" ipa command-show user-find\n" +msgstr "" +"\n" +" Показати подробиці щодо user-find:\n" +" ipa command-show user-find\n" + +msgid "" +"\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" +msgstr "" +"\n" +" Показати зону example.com:\n" +" ipa dnszone-show example.com\n" + +msgid "" +"\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" +"\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" +msgstr "" +"\n" +" Для полегшення внесення змін можна скористатися інтерактивним режимом:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" Можливості внесення змін у певний запис не передбачено.\n" +" Поточний вміст запису DNS:\n" +"\n" +" Запис SRV: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" +"\n" +" Змінити запис SRV «0 3 389 fast.example.com»? Так/Ні (типово «Ні»):\n" +" Змінити запис SRV «0 1 389 slow.example.com»? Так/Ні (типово «Ні»): y\n" +" Пріоритетність SRV [0]: (зберегти типове значення)\n" +" Вага SRV [1]: 2 (змінене значення)\n" +" Порт SRV [389]: (зберегти типове значення)\n" +" Призначення SRV [slow.example.com]: (зберегти типове значення)\n" +" Пропущено 1 запис SRV. Одночасно можна змінювати лише одне значення на тип " +"запису DNS.\n" +" Назва запису: _ldap._tcp\n" +" Запис SRV: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 389 " +"slow.example.com\n" + +msgid "" +"\n" +" This configuration forwards all queries for names outside the example.com\n" +" sub-tree to global forwarders. Normal recursive resolution process is used\n" +" for names inside the example.com sub-tree (i.e. NS records are followed " +"etc.).\n" +msgstr "" +"\n" +" За цих налаштувань усі запити щодо назв поза піддеревом example.com буде\n" +" спрямовано до загальних переспрямовувачів. Для назв у межах піддерева\n" +" example.com буде використано звичайну рекурсивну (тобто з переходом за\n" +" записами NS) процедуру визначення.\n" + +msgid "" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +msgstr "" +"\n" +" Перевірити правила автоматичної участі:\n" +" ipa hostgroup-show webservers\n" +" Група вузлів: webservers\n" +" Опис: Web Servers\n" +" Вузли-учасники: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Назва групи: devel\n" +" Опис: Developers\n" +" GID: 1004200000\n" +" Користувачі-учасники: tuser\n" + +msgid "" +"\n" +" Verify that a certificate is owned by a specific user:\n" +" ipa cert-find --file=cert.pem --user=user\n" +msgstr "" +"\n" +" Перевірити, чи є власником сертифіката вказаний користувач:\n" +" ipa cert-find --file=cert.pem --user=user\n" + +msgid "" +"\n" +"* A permission grants access to read, write, add, delete, read, search,\n" +" or compare.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" +"\n" +"* Права доступу надають можливість читати, записувати, вилучати, шукати або\n" +" порівнювати.\n" +"* Привілеї поєднують подібні права доступу (наприклад усі права доступу,\n" +" потрібні для додавання запису користувача).\n" +"* Роль надає набір привілеїв користувачам, групам, вузлам або групам " +"вузлів.\n" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" +"\n" +"* Вузол має існувати\n" +"* Служба має існувати (або слід скористатися параметром --add " +"дляавтоматичного додавання)\n" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" +"\n" +"Сертифікат зберігається з реєстраційним записом, а реєстраційний запис\n" +"потребує вузла.\n" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" +"\n" +"Умова є формальним виразом, використовується 389-ds для встановлення\n" +"відповідності нового вхідного запису з правилом автоматичної участі.\n" +"Якщо умові відповідає правило включення, запис додається до відповідної\n" +"групи або групи вузлів.\n" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" +"\n" +"Можна визначити типову групу або групу вузлів, яку буде використано для\n" +"записів, які не відповідають жодному правилу. У випадку записів " +"користувачів\n" +"ця група буде резервною групою, оскільки усіх користувачі типово є " +"учасниками\n" +"групи, вказаної у налаштуваннях IPA.\n" + +msgid "" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable wrapper around a 389-ds Access Control Rule,\n" +"or instruction (ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +msgstr "" +"\n" +"Запис правил доступу уможливлює точне делегування прав. Запис прав доступу\n" +"є зручною для читання обгорткою навколо правила керування доступом 389-ds\n" +"або інструкції (ACI).\n" +"Право доступу надає право виконувати специфічне завдання, зокрема додавання\n" +"запису користувача, внесення зміни до групи тощо.\n" + +msgid "" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +msgstr "" +"\n" +"Запис права доступу складається з декількох різних частин:\n" +"\n" +"1. Назви запису права доступу.\n" +"2. Призначення права доступу.\n" +"3. Права, які надаються записом.\n" + +msgid "" +"\n" +"A permission may not contain other permissions.\n" +msgstr "" +"\n" +"Запис прав доступу не може містити інших прав доступу.\n" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" +"\n" +"Правило безпосередньо пов’язується з групою за назвою, отже ви не можете\n" +"створити правило без визначення групи або групи вузлів.\n" + +msgid "" +"\n" +"API Schema\n" +msgstr "" +"\n" +"Схема API\n" + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-bas\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" +"\n" +"Додати новий діапазон ідентифікаторів.\n" +"\n" +" Для додавання нового діапазону ідентифікаторів вам слід завжди " +"вказувати\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Крім того, може бути надано\n" +"\n" +" --rid-base\n" +" --econdary-rid-base\n" +"\n" +" для додавання нового діапазону ідентифікаторів для локального домену і\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" для додавання нового діапазону для довіреного домену AD.\n" +"\n" +" ПОПЕРЕДЖЕННЯ:\n" +"\n" +" Додаток DNA у 389-ds визначатиме ідентифікатори у діапазонах, " +"налаштованих\n" +" для локального домену. У поточній версії додаток DNA *не може* змінити\n" +" власні налаштування на основі локальних діапазонів, встановлених за\n" +" допомогою цього сімейства команд.\n" +"\n" +" Для внесення змін щодо локального діапазону слід змінити налаштування\n" +" додатка DNA вручну. Зокрема, слід внести зміни до атрибута 'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " +"відповідно\n" +" до параметрів нового діапазону.\n" +" " + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +" WARNING:\n" +"\n" +" DNA plugin in 389-ds will allocate IDs based on the ranges configured " +"for the\n" +" local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +" on the local ranges set via this family of commands.\n" +"\n" +" Manual configuration change has to be done in the DNA plugin " +"configuration for\n" +" the new local range. Specifically, The dnaNextRange attribute of " +"'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " +"to be\n" +" modified to match the new range.\n" +" " +msgstr "" +"\n" +"Додати новий діапазон ідентифікаторів.\n" +"\n" +" Для додавання нового діапазону ідентифікаторів вам слід завжди " +"вказувати\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Крім того, може бути надано\n" +"\n" +" --rid-base\n" +" --econdary-rid-base\n" +"\n" +" для додавання нового діапазону ідентифікаторів для локального домену і\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" для додавання нового діапазону для довіреного домену AD.\n" +"\n" +" ПОПЕРЕДЖЕННЯ:\n" +"\n" +" Додаток DNA у 389-ds визначатиме ідентифікатори у діапазонах, " +"налаштованих\n" +" для локального домену. У поточній версії додаток DNA *не може* змінити\n" +" власні налаштування на основі локальних діапазонів, встановлених за\n" +" допомогою цього сімейства команд.\n" +"\n" +" Для внесення змін щодо локального діапазону слід змінити налаштування\n" +" додатка DNA вручну. Зокрема, слід внести зміни до атрибута 'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " +"відповідно\n" +" до параметрів нового діапазону.\n" +" " + +msgid "" +"\n" +"Add new ID range.\n" +"\n" +" To add a new ID range you always have to specify\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Additionally\n" +"\n" +" --rid-base\n" +" --secondary-rid-base\n" +"\n" +" may be given for a new ID range for the local domain while\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" must be given to add a new range for a trusted AD domain.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" +"\n" +"Додати новий діапазон ідентифікаторів.\n" +"\n" +" Для додавання нового діапазону ідентифікаторів вам слід завжди " +"вказувати\n" +"\n" +" --base-id\n" +" --range-size\n" +"\n" +" Крім того, може бути надано\n" +"\n" +" --rid-base\n" +" --econdary-rid-base\n" +"\n" +" для додавання нового діапазону ідентифікаторів для локального домену і\n" +"\n" +" --rid-base\n" +" --dom-sid\n" +"\n" +" для додавання нового діапазону для довіреного домену AD.\n" +"\n" +"=======\n" +"ПОПЕРЕДЖЕННЯ:\n" +"\n" +" Додаток DNA у 389-ds визначатиме ідентифікатори у діапазонах, " +"налаштованих\n" +" для локального домену. У поточній версії додаток DNA *не може* змінити\n" +" власні налаштування на основі локальних діапазонів, встановлених за\n" +" допомогою цього сімейства команд.\n" +"\n" +" Для внесення змін щодо локального діапазону слід змінити налаштування\n" +" додатка DNA вручну. Зокрема, слід внести зміни до атрибута 'cn=Posix\n" +" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " +"відповідно\n" +" до параметрів нового діапазону.\n" +"=======\n" +" " + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +"\n" +"Note that if the command was previously run with a specific range type,\n" +"or with automatic detection of the range type, and you want to configure a\n" +"different range type, you may need to delete first the ID range using\n" +"ipa idrange-del before retrying the command with the desired range type.\n" +" " +msgstr "" +"\n" +"Додати новий запис довіри для використання.\n" +"\n" +"За допомогою цієї команди можна встановити відносини довіри з\n" +"іншим доменом, який після цього вважається «довіреним». У результаті\n" +"користувачі довіреного домену зможуть отримувати доступ до ресурсів\n" +"цього домену.\n" +"\n" +"У поточній версії передбачено підтримку лише відносин довіри з доменами\n" +"Active Directory.\n" +"\n" +"Команду можна безпечно запускати декілька разів для одного і того самого\n" +"домену, такий запуск призводить до зміни у реєстраційних записах відносин\n" +"довіри з обох боків.\n" +"\n" +"Зауважте, що якщо команда раніше виконувалася із вказаним типом діапазону\n" +"або автоматичним визначенням типу діапазону, і ви хочете налаштувати\n" +"інший тип діапазону, ймовірно, вам доведеться вилучити першй діапазон " +"ідентифікаторів\n" +"за допомогою ipa idrange-del, перш ніж ви зможете повторити команду із " +"бажаним типом.\n" +" " + +msgid "" +"\n" +"Add new trust to use.\n" +"\n" +"This command establishes trust relationship to another domain\n" +"which becomes 'trusted'. As result, users of the trusted domain\n" +"may access resources of this domain.\n" +"\n" +"Only trusts to Active Directory domains are supported right now.\n" +"\n" +"The command can be safely run multiple times against the same domain,\n" +"this will cause change to trust relationship credentials on both\n" +"sides.\n" +" " +msgstr "" +"\n" +"Додати новий запис довіри для використання.\n" +"\n" +"За допомогою цієї команди можна встановити відносини довіри з\n" +"іншим доменом, який після цього вважається «довіреним». У результаті\n" +"користувачі довіреного домену зможуть отримувати доступ до ресурсів\n" +"цього домену.\n" +"\n" +"У поточній версії передбачено підтримку лише відносин довіри з доменами\n" +"Active Directory.\n" +"\n" +"Команду можна безпечно запускати декілька разів для одного і того самого\n" +"домену, такий запуск призводить до зміни у реєстраційних записах відносин\n" +"довіри з обох боків.\n" +" " + +msgid "" +"\n" +"Additionally, there are the following convenience options.\n" +"Setting one of these options will set the corresponding attribute(s).\n" +"1. type: a type of object (user, group, etc); sets subtree and target " +"filter.\n" +"2. memberof: apply to members of a group; sets target filter\n" +"3. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership); sets target.\n" +msgstr "" +"\n" +"Крім того, передбачено вказані нижче параметри.\n" +"Встановлення одного з цих параметрів призводить до встановлення відповідних " +"атрибутів.\n" +"1. type: тип об’єкта (користувач, група тощо); встановлює фільтрування за " +"піддеревом (subtree) та фільтрування за призначенням (target filter).\n" +"2. memberof: застосовувати до учасників групи; встановлює фільтр за " +"призначенням (target filter).\n" +"3. targetgroup: надає доступ до внесення змін до певної групи (зокрема, " +"доступ до\n" +" надання можливості керування участю у групі); встановлює призначення " +"(target).\n" + +msgid "" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +msgstr "" +"\n" +"Угоди представляються сегментами топології. Типово, сегмент топології\n" +"представляється 2 угодами реплікації — по одній для кожного напрямку, " +"наприклад\n" +"від A до B і від B до A. Створення односпрямованих сегментів заборонене.\n" + +msgid "" +"\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" +"\n" +"Усі слжуби сертифікації, окрім служби сертифікації «IPA», можна вимикати і " +"повторно вмикати. Вимикання\n" +"служби сертифікації призводить до заборони для неї видавати сертифікати, але " +"не впливає на\n" +"чинність її сертифіката.\n" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" +"\n" +"До правила sudo можна додати порядок, який керуватиме порядком\n" +"обробки записів (якщо такий порядок передбачено на клієнтському боці).\n" +"Порядок визначається числовим індексом, який не повинен повторюватися.\n" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" +"\n" +"Асиметричне сховище є подібним до стандартного сховища, але\n" +"у ньому реєстраційні дані попередньо шифруються до\n" +"передавання за допомогою відкритого ключа.\n" +"Реєстраційні дані можна отримати лише за допомогою закритого ключа.\n" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" +"\n" +"Правило автоматичної участі.\n" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +msgstr "" +"\n" +"Правило автоматичної участі.\n" +"\n" +"Внесіть ясність у правила участі вузлів та користувачів налаштовуванням\n" +"формальних виразів шаблонів включення або виключення. Ви можете автоматично\n" +"пов’язувати нові записи з групою або групою вузлів на основі даних щодо " +"атрибутів.\n" +"\n" +"Правило безпосередньо пов’язується з групою за назвою, отже ви не можете\n" +"створити правило без визначення групи або групи вузлів.\n" +"\n" +"Умова є формальним виразом, використовується 389-ds для встановлення\n" +"відповідності нового вхідного запису з правилом автоматичної участі.\n" +"Якщо умові відповідає правило включення, запис додається до відповідної\n" +"групи або групи вузлів.\n" +"\n" +"Можна визначити типову групу або групу вузлів, яку буде використано для\n" +"записів, які не відповідають жодному правилу. У випадку записів " +"користувачів\n" +"ця група буде резервною групою, оскільки усіх користувачі типово є " +"учасниками\n" +"групи, вказаної у налаштуваннях IPA.\n" +"\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати початкову групу або групу вузлів:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Додати початкове правило:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Додати умову до правила:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Додати умову виключення до правила для запобігання автоматичному " +"пов’язуванню:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Додати вузол:\n" +" ipa host-add web1.example.com\n" +"\n" +" Додати запис користувача:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Перевірити правила автоматичної участі:\n" +" ipa hostgroup-show webservers\n" +" Група вузлів: webservers\n" +" Опис: Web Servers\n" +" Вузли-учасники: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Назва групи: devel\n" +" Опис: Developers\n" +" GID: 1004200000\n" +" Користувачі-учасники: tuser\n" +"\n" +" Вилучити умову з правила:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Змінити правило автоматичної участі:\n" +" ipa automember-mod\n" +"\n" +" Встановити типову (резервну) групу призначення:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Вилучити типову (резервну) групу призначення:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Показати типову (резервну) групу призначення:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Знайти усіх правила автоматичної участі:\n" +" ipa automember-find\n" +"\n" +" Показати правило автоматичної участі:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Вилучити правило автоматичної участі:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" + +msgid "" +"\n" +"Auto Membership Rule.\n" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add the initial group or hostgroup:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Add the initial rule:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Add a condition to the rule:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Add an exclusive condition to the rule to prevent auto assignment:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Add a host:\n" +" ipa host-add web1.example.com\n" +"\n" +" Add a user:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Verify automembership:\n" +" ipa hostgroup-show webservers\n" +" Host-group: webservers\n" +" Description: Web Servers\n" +" Member hosts: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Group name: devel\n" +" Description: Developers\n" +" GID: 1004200000\n" +" Member users: tuser\n" +"\n" +" Remove a condition from the rule:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Modify the automember rule:\n" +" ipa automember-mod\n" +"\n" +" Set the default (fallback) target group:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Remove the default (fallback) target group:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Show the default (fallback) target group:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Find all of the automember rules:\n" +" ipa automember-find\n" +"\n" +" Display a automember rule:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Delete an automember rule:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Rebuild membership for all users:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Rebuild membership for all hosts:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Rebuild membership for specified users:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Rebuild membership for specified hosts:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" +msgstr "" +"\n" +"Правило автоматичної участі.\n" +"\n" +"Внесіть ясність у правила участі вузлів та користувачів налаштовуванням\n" +"формальних виразів шаблонів включення або виключення. Ви можете автоматично\n" +"пов’язувати нові записи з групою або групою вузлів на основі даних щодо " +"атрибутів.\n" +"\n" +"Правило безпосередньо пов’язується з групою за назвою, отже ви не можете\n" +"створити правило без визначення групи або групи вузлів.\n" +"\n" +"Умова є формальним виразом, використовується 389-ds для встановлення\n" +"відповідності нового вхідного запису з правилом автоматичної участі.\n" +"Якщо умові відповідає правило включення, запис додається до відповідної\n" +"групи або групи вузлів.\n" +"\n" +"Можна визначити типову групу або групу вузлів, яку буде використано для\n" +"записів, які не відповідають жодному правилу. У випадку записів " +"користувачів\n" +"ця група буде резервною групою, оскільки усіх користувачі типово є " +"учасниками\n" +"групи, вказаної у налаштуваннях IPA.\n" +"\n" +"За допомогою програми automember-rebuild ви можете повторно застосувати " +"правила\n" +"автоматичної участі до вже створених записів, тобто перебудувати схему " +"участі.\n" +"\n" +" Додати початкову групу або групу вузлів:\n" +" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" +" ipa group-add --desc=\"Developers\" devel\n" +"\n" +" Додати початкове правило:\n" +" ipa automember-add --type=hostgroup webservers\n" +" ipa automember-add --type=group devel\n" +"\n" +" Додати умову до правила:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +" ipa automember-add-condition --key=manager --type=group --inclusive-" +"regex=^uid=mscott devel\n" +"\n" +" Додати умову виключення до правила для запобігання автоматичному " +"пов’язуванню:\n" +" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" +"regex=^web5\\.example\\.com webservers\n" +"\n" +" Додати вузол:\n" +" ipa host-add web1.example.com\n" +"\n" +" Додати запис користувача:\n" +" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +"\n" +" Перевірити правила автоматичної участі:\n" +" ipa hostgroup-show webservers\n" +" Група вузлів: webservers\n" +" Опис: Web Servers\n" +" Вузли-учасники: web1.example.com\n" +"\n" +" ipa group-show devel\n" +" Назва групи: devel\n" +" Опис: Developers\n" +" GID: 1004200000\n" +" Користувачі-учасники: tuser\n" +"\n" +" Вилучити умову з правила:\n" +" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" +"regex=^web[1-9]+\\.example\\.com webservers\n" +"\n" +" Змінити правило автоматичної участі:\n" +" ipa automember-mod\n" +"\n" +" Встановити типову (резервну) групу призначення:\n" +" ipa automember-default-group-set --default-group=webservers --" +"type=hostgroup\n" +" ipa automember-default-group-set --default-group=ipausers --type=group\n" +"\n" +" Вилучити типову (резервну) групу призначення:\n" +" ipa automember-default-group-remove --type=hostgroup\n" +" ipa automember-default-group-remove --type=group\n" +"\n" +" Показати типову (резервну) групу призначення:\n" +" ipa automember-default-group-show --type=hostgroup\n" +" ipa automember-default-group-show --type=group\n" +"\n" +" Знайти усіх правила автоматичної участі:\n" +" ipa automember-find\n" +"\n" +" Показати правило автоматичної участі:\n" +" ipa automember-show --type=hostgroup webservers\n" +" ipa automember-show --type=group devel\n" +"\n" +" Вилучити правило автоматичної участі:\n" +" ipa automember-del --type=hostgroup webservers\n" +" ipa automember-del --type=group devel\n" +"\n" +" Перебудувати записи участі для усіх користувачів:\n" +" ipa automember-rebuild --type=group\n" +"\n" +" Перебудувати записи участі для усіх вузлів:\n" +" ipa automember-rebuild --type=hostgroup\n" +"\n" +" Перебудувати записи участі для вказаних користувачів:\n" +" ipa automember-rebuild --users=tuser1 --users=tuser2\n" +"\n" +" Перебудувати записи участі для вказаних вузлів:\n" +" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." +"com\n" + +msgid "" +"\n" +"Automount\n" +"\n" +"Stores automount(8) configuration for autofs(8) in IPA.\n" +"\n" +"The base of an automount configuration is the configuration file auto." +"master.\n" +"This is also the base location in IPA. Multiple auto.master configurations\n" +"can be stored in separate locations. A location is implementation-specific\n" +"with the default being a location named 'default'. For example, you can " +"have\n" +"locations by geographic region, by floor, by type, etc.\n" +"\n" +"Automount has three basic object types: locations, maps and keys.\n" +"\n" +"A location defines a set of maps anchored in auto.master. This allows you\n" +"to store multiple automount configurations. A location in itself isn't\n" +"very interesting, it is just a point to start a new automount map.\n" +"\n" +"A map is roughly equivalent to a discrete automount file and provides\n" +"storage for keys.\n" +"\n" +"A key is a mount point associated with a map.\n" +"\n" +"When a new location is created, two maps are automatically created for\n" +"it: auto.master and auto.direct. auto.master is the root map for all\n" +"automount maps for the location. auto.direct is the default map for\n" +"direct mounts and is mounted on /-.\n" +"\n" +"An automount map may contain a submount key. This key defines a mount\n" +"location within the map that references another map. This can be done\n" +"either using automountmap-add-indirect --parentmap or manually\n" +"with automountkey-add and setting info to \"-type=autofs :\".\n" +"\n" +"EXAMPLES:\n" +"\n" +"Locations:\n" +"\n" +" Create a named location, \"Baltimore\":\n" +" ipa automountlocation-add baltimore\n" +"\n" +" Display the new location:\n" +" ipa automountlocation-show baltimore\n" +"\n" +" Find available locations:\n" +" ipa automountlocation-find\n" +"\n" +" Remove a named automount location:\n" +" ipa automountlocation-del baltimore\n" +"\n" +" Show what the automount maps would look like if they were in the " +"filesystem:\n" +" ipa automountlocation-tofiles baltimore\n" +"\n" +" Import an existing configuration into a location:\n" +" ipa automountlocation-import baltimore /etc/auto.master\n" +"\n" +" The import will fail if any duplicate entries are found. For\n" +" continuous operation where errors are ignored, use the --continue\n" +" option.\n" +"\n" +"Maps:\n" +"\n" +" Create a new map, \"auto.share\":\n" +" ipa automountmap-add baltimore auto.share\n" +"\n" +" Display the new map:\n" +" ipa automountmap-show baltimore auto.share\n" +"\n" +" Find maps in the location baltimore:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Create an indirect map with auto.share as a submount:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" This is equivalent to:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Remove the auto.share map:\n" +" ipa automountmap-del baltimore auto.share\n" +"\n" +"Keys:\n" +"\n" +" Create a new key for the auto.share map in location baltimore. This ties\n" +" the map we previously created to auto.master:\n" +" ipa automountkey-add baltimore auto.master --key=/share --info=auto." +"share\n" +"\n" +" Create a new key for our auto.share map, an NFS mount for man pages:\n" +" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Find all keys for the auto.share map:\n" +" ipa automountkey-find baltimore auto.share\n" +"\n" +" Find all direct automount keys:\n" +" ipa automountkey-find baltimore --key=/-\n" +"\n" +" Remove the man key from the auto.share map:\n" +" ipa automountkey-del baltimore auto.share --key=man\n" +msgstr "" +"\n" +"Автоматичне монтування\n" +"\n" +"Зберігає налаштування automount(8) для autofs(8) у IPA.\n" +"\n" +"Основою налаштувань автоматичного монтування є файл налаштувань auto." +"master.\n" +"Це також основне місце у IPA. Декілька налаштувань auto.master можна\n" +"зберігати у окремих місцях. Місце залежить від реалізації, типовим\n" +"є місце з назвою «default». Наприклад, ви можете створити місця для\n" +"географічної області, поверху, типу тощо.\n" +"\n" +"У автоматичного монтування є три основних типи об’єктів: місця, карти і " +"ключі.\n" +"\n" +"Місце визначає набір карт, прив’язаних у auto.master. За його допомогою\n" +"можна зберігати одразу декілька налаштувань автоматичного монтування. Місце\n" +"саме собою не є дуже цікавим, це просто початок нової карти автоматичного\n" +"монтування.\n" +"\n" +"Карта є наближеним еквівалентом окремого файла автоматичного монтування, у\n" +"ній зберігаються ключі.\n" +"\n" +"Ключ — точка монтування, пов’язана з картою.\n" +"\n" +"Під час створення нового місця автоматично створюються дві карти:\n" +"auto.master і auto.direct. auto.master — коренева карта для всіх карт\n" +"автоматичного монтування місця. auto.direct — типова карта для " +"безпосередніх\n" +"монтувань, її змонтовано до /-.\n" +"\n" +"Карта автоматичного монтування може містити ключ підмонтування. Цей ключ\n" +"визначає адресу монтування у карті, що посилається на іншу карту. Такий " +"ключ\n" +"може бути додано або за допомогою команди automountmap-add-indirect --" +"parentmap\n" +"або вручну за допомогою automountkey-add зі встановленням info у значення\n" +"\"-type=autofs :<назва карти>\".\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +"Місця:\n" +"\n" +" Створення нового місця, \"Kyiv\":\n" +" ipa automountlocation-add kyiv\n" +"\n" +" Показ нового місця:\n" +" ipa automountlocation-show kyiv\n" +"\n" +" Пошук доступних місць:\n" +" ipa automountlocation-find\n" +"\n" +" Вилучення іменованого місця автоматичного монтування:\n" +" ipa automountlocation-del kyiv\n" +"\n" +" Показ того, як мають виглядати карти автоматичного монтування, якщо б вони " +"перебували у файловій системі:\n" +" ipa automountlocation-tofiles kyiv\n" +"\n" +" Імпортування вже створених налаштувань до місця:\n" +" ipa automountlocation-import kyiv /etc/auto.master\n" +"\n" +" Спроба імпортування зазнає невдачі, якщо буде знайдено дублікати " +"записів.\n" +" Щоб програма працювала безперервно (з пропусканням всіх помилок),\n" +" скористайтеся параметром --continue.\n" +"\n" +"Карти:\n" +"\n" +" Створення карти \"auto.share\":\n" +" ipa automountmap-add kyiv auto.share\n" +"\n" +" Показ нової карти:\n" +" ipa automountmap-show kyiv auto.share\n" +"\n" +" Пошук карт у місці kyiv:\n" +" ipa automountmap-find baltimore\n" +"\n" +" Створити непряму карту з auto.share як точкою підмонтування:\n" +" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" +"mount=sub auto.man\n" +"\n" +" Ця команда еквівалентна до таких команд:\n" +"\n" +" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" +" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" +"fstype=autofs ldap:auto.share\"\n" +"\n" +" Вилучення карти auto.share:\n" +" ipa automountmap-del kyiv auto.share\n" +"\n" +"Ключі:\n" +"\n" +" Створення ключа для карти auto.share у місці kyiv. Карту буде\n" +" пов’язано з раніше створеною у auto.master:\n" +" ipa automountkey-add kyiv auto.master --key=/share --info=auto.share\n" +"\n" +" Створення ключа для нашої карти auto.share, змонтованого ресурсу NFS для " +"сторінок man:\n" +" ipa automountkey-add kyiv auto.share --key=man --info=\"-ro,soft," +"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" +"\n" +" Знайти всі ключі для карти auto.share:\n" +" ipa automountkey-find kyiv auto.share\n" +"\n" +" Пошук всіх безпосередніх ключів автоматичного монтування:\n" +" ipa automountkey-find kyiv --key=/-\n" +"\n" +" Вилучення ключа man для карти auto.share:\n" +" ipa automountkey-del kyiv auto.share --key=man\n" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" +"\n" +"За правами власності сховища поділяються на три категорії:\n" +"* приватні сховища користувачів\n" +"* сховища служб\n" +"* сховища спільного використання\n" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" +"\n" +"За механізмами захисту сховища поділяються на три\n" +"типи:\n" +"* стандартні сховища\n" +"* симетричні сховища\n" +"* асиметричні сховища\n" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" +"\n" +"Основний користувач\n" +"\n" +"Містить загальні визначення щодо користувача або користувача етапу.\n" + +msgid "" +"\n" +"Bring clarity to the membership of hosts and users by configuring inclusive\n" +"or exclusive regex patterns, you can automatically assign a new entries " +"into\n" +"a group or hostgroup based upon attribute information.\n" +msgstr "" +"\n" +"Внесіть ясність у правила участі вузлів та користувачів налаштовуванням\n" +"формальних виразів шаблонів включення або виключення. Ви можете автоматично\n" +"пов’язувати нові записи з групою або групою вузлів на основі даних щодо " +"атрибутів.\n" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" +"\n" +"Усі записи служб сертифікації (окрім служби «IPA») можна вилучати. Вилучення " +"запису служби сертифікації\n" +"призводить до відкликання її підписувального сертифіката і вилучення " +"закритого ключа.\n" + +msgid "" +"\n" +"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" +"operator has permission to bypass CA ACLs.\n" +msgstr "" +"\n" +"Служби сертифікації увімкнено при створенні, але їхнє використання " +"регулюється ACL служб сертифікації,\n" +"якщо у оператора немає дозволу обходити ACL служб сертифікації (CA).\n" + +msgid "" +"\n" +"Certificate Identity Mapping\n" +msgstr "" +"\n" +"Прив’язка сертифікатів до профілів\n" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" +"\n" +"Запити щодо сертифікатів існують у формі Certificate Signing Request (CSR)\n" +"і форматі PEM.\n" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" +"\n" +"Шукати сертифікати можна за призначенням сертифіката, серійним номером,\n" +"причиною відкликання, датами чинності та датою видання.\n" + +msgid "" +"\n" +"Classes to manage trust joins using DCE-RPC calls\n" +"\n" +"The code in this module relies heavily on samba4-python package\n" +"and Samba4 python bindings.\n" +msgstr "" +"\n" +"Класи для керування довіреними приєднаннями за допомогою викликів DCE-RPC\n" +"\n" +"Код цього модуля жорстко залежить від вмісту пакунка samba4-python\n" +"та обгорток для мови Python у Samba4.\n" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA\n" +"domain, trust relationship needs to be established. Currently IPA supports\n" +"only trusts between IPA and Active Directory domains under control of " +"Windows\n" +"Server 2008 or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --" +"password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping " +"should\n" +"be done via use of external membership of non-POSIX group and then this " +"group\n" +"should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" +"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used " +"as\n" +" a primary user GID if user authenticating to IPA domain does not have any " +"other\n" +" primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " +"Group\"\n" +msgstr "" +"\n" +"Довіра між областями\n" +"\n" +"Керування відносинами довіри між доменами IPA і Active Directory.\n" +"\n" +"З метою надання доступу користувачам віддаленого домену до ресурсів у " +"домені\n" +"IPA слід встановити відносини довіри. У поточній версії у IPA передбачено\n" +"підтримку довіри лише між доменами IPA і Active Directory під керуванням " +"Windows\n" +"Server 2008 або новішої версії з функціональними можливостями рівня 2008 " +"або\n" +"новішої версії.\n" +"\n" +"Будь ласка, зауважте, що слід належним чином налаштувати DNS на обох " +"доменах,\n" +"IPA і Active Directory, щоб домени могли виявити один одного. " +"Працездатність\n" +"відносин довіри залежить від можливості виявлення спеціальних ресурсів у\n" +"іншому домені за допомогою записів DNS.\n" +"\n" +"Приклад:\n" +"\n" +"1. Встановити довіру між областями з Active Directory за допомогою " +"реєстраційних\n" +" даних адміністратора AD:\n" +"\n" +" ipa trust-add --type=ad <домен.ad> --admin <адміністратор домену AD> --" +"password\n" +"\n" +"2. Показати список всіх наявних відносин довіри:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Показати подробиці щодо певних відносин довіри:\n" +"\n" +" ipa trust-show <домен.ad>\n" +"\n" +"4. Вилучити наявні відносини довіри:\n" +"\n" +" ipa trust-del <домен.ad>\n" +"\n" +"Щойно відносини довіри буде встановлено, віддалених користувачів слід " +"прив’язати\n" +"до локальних груп POSIX, щоб скористатися ресурсами IPA. Прив’язку слід\n" +"виконати за допомогою використання зовнішньої участі групи не-POSIX, а " +"потім\n" +"цю групу має бути включено до однієї з локальних груп POSIX.\n" +"\n" +"Приклади:\n" +"\n" +"1. Створити групу для прив’язки адміністраторів та їхньої локальної групи " +"POSIX\n" +" довіреного домену:\n" +"\n" +" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc='<домен.ad> admins' ad_admins\n" +"\n" +"2. Додати ідентифікатор безпеки Domain Admins домену <домен.ad> до групи " +"ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Дозволити прив’язування учасників групи ad_admins_external до групи POSIX " +"ad_admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Показати список зовнішніх учасників групи ad_admins_external для " +"перегляду їхніх SID:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"НАЛАШТУВАННЯ ДОВІРИ ЗАГАЛЬНОГО РІВНЯ\n" +"\n" +"Якщо встановлено підпакунок довіри AD IPA та запущено ipa-adtrust-install,\n" +"створюються налаштування локального домену (SID, GUID, назва NetBIOS). " +"Після\n" +"цього створені ідентифікатори використовуються для обміну даними з\n" +"довіреним доменом певного типу.\n" +"\n" +"1. Показати налаштування довіри загального рівня для типів довіри Active " +"Directory:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Змінити загальні налаштування для всіх довір типу Active Directory і\n" +" встановити іншу резервну основну групу (GID резервної основної групи\n" +" використовується як GID основного користувача, якщо користувача\n" +" розпізнано у домені IPA, але він не має жодного вже встановленого\n" +" основного GID):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " +"group\"\n" +"\n" +"3. Повернути для резервної основної групи значення типової прихованої групи\n" +" (будь-якої групи, у якій дозволено клас об’єктів posixGroup):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " +"Group\"\n" + +msgid "" +"\n" +"Cross-realm trusts\n" +"\n" +"Manage trust relationship between IPA and Active Directory domains.\n" +"\n" +"In order to allow users from a remote domain to access resources in IPA " +"domain,\n" +"trust relationship needs to be established. Currently IPA supports only " +"trusts\n" +"between IPA and Active Directory domains under control of Windows Server " +"2008\n" +"or later, with functional level 2008 or later.\n" +"\n" +"Please note that DNS on both IPA and Active Directory domain sides should " +"be\n" +"configured properly to discover each other. Trust relationship relies on\n" +"ability to discover special resources in the other domain via DNS records.\n" +"\n" +"Examples:\n" +"\n" +"1. Establish cross-realm trust with Active Directory using AD administrator\n" +" credentials:\n" +"\n" +" ipa trust-add --type=ad --admin --password\n" +"\n" +"2. List all existing trust relationships:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Show details of the specific trust relationship:\n" +"\n" +" ipa trust-show \n" +"\n" +"4. Delete existing trust relationship:\n" +"\n" +" ipa trust-del \n" +"\n" +"Once trust relationship is established, remote users will need to be mapped\n" +"to local POSIX groups in order to actually use IPA resources. The mapping\n" +"should be done via use of external membership of non-POSIX group and then\n" +"this group should be included into one of local POSIX groups.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local " +"POSIX\n" +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' " +"ad_admins_external --external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the\n" +" ad_admins_external group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with\n" +" ad_admins POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see\n" +" their SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"GLOBAL TRUST CONFIGURATION\n" +"\n" +"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" +"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" +"identifiers are then used when communicating with a trusted domain of the\n" +"particular type.\n" +"\n" +"1. Show global trust configuration for Active Directory type of trusts:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Modify global configuration for all trusts of Active Directory type and " +"set\n" +" a different fallback primary group (fallback primary group GID is used as " +"a\n" +" primary user GID if user authenticating to IPA domain does not have any\n" +" other primary GID already set):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD " +"group\"\n" +"\n" +"3. Change primary fallback group back to default hidden group (any group " +"with\n" +" posixGroup object class is allowed):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " +"Group\"\n" +msgstr "" +"\n" +"Довіра між областями\n" +"\n" +"Керування відносинами довіри між доменами IPA і Active Directory.\n" +"\n" +"З метою надання доступу користувачам віддаленого домену до ресурсів у " +"домені\n" +"IPA слід встановити відносини довіри. У поточній версії у IPA передбачено\n" +"підтримку довіри лише між доменами IPA і Active Directory під керуванням " +"Windows\n" +"Server 2008 або новішої версії з функціональними можливостями рівня 2008 " +"або\n" +"новішої версії.\n" +"\n" +"Будь ласка, зауважте, що слід належним чином налаштувати DNS на обох " +"доменах,\n" +"IPA і Active Directory, щоб домени могли виявити один одного. " +"Працездатність\n" +"відносин довіри залежить від можливості виявлення спеціальних ресурсів у\n" +"іншому домені за допомогою записів DNS.\n" +"\n" +"Приклад:\n" +"\n" +"1. Встановити довіру між областями з Active Directory за допомогою " +"реєстраційних\n" +" даних адміністратора AD:\n" +"\n" +" ipa trust-add --type=ad <домен.ad> --admin <адміністратор домену AD> --" +"password\n" +"\n" +"2. Показати список всіх наявних відносин довіри:\n" +"\n" +" ipa trust-find\n" +"\n" +"3. Показати подробиці щодо певних відносин довіри:\n" +"\n" +" ipa trust-show <домен.ad>\n" +"\n" +"4. Вилучити наявні відносини довіри:\n" +"\n" +" ipa trust-del <домен.ad>\n" +"\n" +"Щойно відносини довіри буде встановлено, віддалених користувачів слід " +"прив’язати\n" +"до локальних груп POSIX, щоб скористатися ресурсами IPA. Прив’язку слід\n" +"виконати за допомогою використання зовнішньої участі групи не-POSIX, а " +"потім\n" +"цю групу має бути включено до однієї з локальних груп POSIX.\n" +"\n" +"Приклади:\n" +"\n" +"1. Створити групу для прив’язки адміністраторів та їхньої локальної групи " +"POSIX\n" +" довіреного домену:\n" +"\n" +" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc='<домен.ad> admins' ad_admins\n" +"\n" +"2. Додати ідентифікатор безпеки Domain Admins домену <домен.ad> до групи " +"ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Дозволити прив’язування учасників групи ad_admins_external до групи POSIX " +"ad_admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Показати список зовнішніх учасників групи ad_admins_external для " +"перегляду їхніх SID:\n" +"\n" +" ipa group-show ad_admins_external\n" +"\n" +"\n" +"НАЛАШТУВАННЯ ДОВІРИ ЗАГАЛЬНОГО РІВНЯ\n" +"\n" +"Якщо встановлено підпакунок довіри AD IPA та запущено ipa-adtrust-install,\n" +"створюються налаштування локального домену (SID, GUID, назва NetBIOS). " +"Після\n" +"цього створені ідентифікатори використовуються для обміну даними з\n" +"довіреним доменом певного типу.\n" +"\n" +"1. Показати налаштування довіри загального рівня для типів довіри Active " +"Directory:\n" +"\n" +" ipa trustconfig-show --type ad\n" +"\n" +"2. Змінити загальні налаштування для всіх довір типу Active Directory і\n" +" встановити іншу резервну основну групу (GID резервної основної групи\n" +" використовується як GID основного користувача, якщо користувача\n" +" розпізнано у домені IPA, але він не має жодного вже встановленого\n" +" основного GID):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD " +"group\"\n" +"\n" +"3. Повернути для резервної основної групи значення типової прихованої групи\n" +" (будь-якої групи, у якій дозволено клас об’єктів posixGroup):\n" +"\n" +" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB " +"Group\"\n" + +msgid "" +"\n" +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " +"These\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" +msgstr "" +"\n" +"Налаштування DNS, що передаються до скрипту командного рядка для " +"встановлення,\n" +"зберігаються у локальному файлі налаштувань на кожному з серверів IPA, де\n" +"налаштовано службу DNS. Ці локальні параметри можна перевизначити за " +"допомогою\n" +"загальних налаштувань, що зберігаються на сервері LDAP:\n" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" +"\n" +"Налаштування сервера DNS\n" + +msgid "" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +msgstr "" +"\n" +"Дані, що зберігаються на серверах IPA, відтворюються на інших серверах IPA. " +"Спосіб\n" +"відтворення (реплікації) визначається угодами. Угоди реплікації потрібно\n" +"встановлювати для обох суфіксів окремо. На рівні домену 0 угодами керують\n" +"програми ipa-replica-manage та ipa-csreplica-manage. На рівні доменів 1\n" +"керування виконується централізовано за допомогою команд «ipa topology*».\n" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" +"\n" +"Дати обробляються як дати за Гринвічем, відповідно до дат визначених " +"усертифікатах.\n" + +msgid "" +"\n" +"Deleting or renaming a managed permission, as well as changing its target,\n" +"is not allowed.\n" +msgstr "" +"\n" +"Вилучення або перейменування керованих прав доступу, а також зміну " +"призначення\n" +"таких прав, заборонено.\n" msgid "" "\n" @@ -1426,8 +4161,8 @@ msgstr "" "та індексу всіх, хто працює начальником:\n" " ipa aci-add --permissions=write --group=admins --attrs=street --" "attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Зміна адрес тих, хто працює начальником" -"\"\n" +"dc=example,dc=com)\" --prefix=none \"Зміна адрес тих, хто працює " +"начальником\"\n" "\n" " Додавання повністю нового типу записів до IPA, який не визначається жодним " "з параметрів --type, створення прав доступу:\n" @@ -1442,1505 +4177,693 @@ msgstr "" "слід включити всі вже створені атрибути. Під час внесення змін до aci\n" "targetattr ЗАМІНЮЄ поточні атрибути, а не додає ці атрибути.\n" -msgid "ACI name" -msgstr "Назва ACI" - -msgid "Permission" -msgstr "Права доступу" - -msgid "Permission ACI grants access to" -msgstr "ACI прав доступу надає доступ до" - -msgid "User group" -msgstr "Група користувачів" - -msgid "User group ACI grants access to" -msgstr "Група користувачів, до якої надає доступ ACI" - -msgid "Permissions" -msgstr "Права доступу" - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "Права доступу, які слід надати (read, write, add, delete, all)" - -msgid "Attributes to which the permission applies" -msgstr "Атрибути, до яких застосовується правило доступу" - -msgid "Attributes" -msgstr "Атрибути" - -msgid "Type" -msgstr "Тип" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "" -"тип об’єкта IPA (user (користувач), group (група), host (вузол), hostgroup " -"(група вузлів), service (служба), netgroup (мережева група))" - -msgid "Member of" -msgstr "Учасник" - -msgid "Member of a group" -msgstr "Учасник групи" - -msgid "Filter" -msgstr "Фільтр" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "Припустимий фільтр LDAP (наприклад, ou=Engineering)" - -msgid "Subtree" -msgstr "Піддерево" - -msgid "Subtree to apply ACI to" -msgstr "Піддерево, до якого слід застосувати ACI" - -msgid "Target group" -msgstr "Цільова група" - -msgid "Group to apply ACI to" -msgstr "Група, до якої слід застосувати ACI" - -msgid "Target your own entry (self)" -msgstr "Виконати над власним записом (self)" - -msgid "Apply ACI to your own entry (self)" -msgstr "Застосувати ACI до вашого власного запису (self)" - -msgid "Create new ACI." -msgstr "Створити запис ACI." - -msgid "ACI prefix" -msgstr "префікс ACI" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "" -"Префікс, за яким визначається тип ACI (permission, delegation, selfservice, " -"none)" - -msgid "Test the ACI syntax but don't write anything" -msgstr "Перевірити синтаксис ACI, але не виконувати запису" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "" -"Отримати і вивести всі атрибути з сервера. Стосується лише виводу команд." - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "" -"Вивести записи у формі, у якій вони зберігаються на сервері. Стосується лише " -"формату виведення даних." - -msgid "User-friendly description of action performed" -msgstr "Зручний для користувача опис дії, що виконується" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" -"Значення primary_key (основного ключа) запису, наприклад, «iivanenko» для " -"користувача" - -msgid "Delete ACI." -msgstr "Вилучити ACI." - -msgid "True means the operation was successful" -msgstr "True означає, що дію було виконано успішно" - msgid "" "\n" -"Search for ACIs.\n" +"Directory Server Access Control Instructions (ACIs)\n" "\n" -" Returns a list of ACIs\n" +"ACIs are used to allow or deny access to information. This module is\n" +"currently designed to allow, not deny, access.\n" "\n" -" EXAMPLES:\n" +"The aci commands are designed to grant permissions that allow updating\n" +"existing entries or adding or deleting new ones. The goal of the ACIs\n" +"that ship with IPA is to provide a set of low-level permissions that\n" +"grant access to special groups called taskgroups. These low-level\n" +"permissions can be combined into roles that grant broader access. These\n" +"roles are another type of group, roles.\n" "\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" +"For example, if you have taskgroups that allow adding and modifying users " +"you\n" +"could create a role, useradmin. You would assign users to the useradmin\n" +"role to allow them to do the operations defined by the taskgroups.\n" "\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" +"You can create ACIs that delegate permission so users in group A can write\n" +"attributes on group B.\n" "\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" +"The type option is a map that applies to all entries in the users, groups " +"or\n" +"host location. It is primarily designed to be used when granting add\n" +"permissions (to write new entries).\n" "\n" -"Пошук ACI.\n" +"An ACI consists of three parts:\n" +"1. target\n" +"2. permissions\n" +"3. bind rules\n" "\n" -" Повертає список ACI\n" +"The target is a set of rules that define which LDAP objects are being\n" +"targeted. This can include a list of attributes, an area of that LDAP\n" +"tree or an LDAP filter.\n" "\n" -" ПРИКЛАДИ:\n" +"The targets include:\n" +"- attrs: list of attributes affected\n" +"- type: an object type (user, group, host, service, etc)\n" +"- memberof: members of a group\n" +"- targetgroup: grant access to modify a specific group. This is primarily\n" +" designed to enable users to add or remove members of a specific group.\n" +"- filter: A legal LDAP filter used to narrow the scope of the target.\n" +"- subtree: Used to apply a rule across an entire set of objects. For " +"example,\n" +" to allow adding users you need to grant \"add\" permission to the subtree\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" +" is a fail-safe for objects that may not be covered by the type option.\n" "\n" -" Знайти усі ACI, які застосовуються безпосередньо до учасників групи " -"ipausers:\n" -" ipa aci-find --memberof=ipausers\n" +"The permissions define what the ACI is allowed to do, and are one or\n" +"more of:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" "\n" -" Знайти усі ACI, які надають доступ add:\n" -" ipa aci-find --permissions=add\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" "\n" -" Зауважте, що команда пошуку виконує пошук вказаного тексту лише у\n" -" наборі ACI, а не визначає, чи буде застосовано щось у ACI.\n" -" Наприклад, у результаті пошуку memberof=ipausers буде знайдено усі ACI,\n" -" у яких memberof містить ipausers. Але можуть існувати інші ACI, які\n" -" застосовуються до учасників цієї групи опосередковано.\n" -" " - -msgid "A string searched in all relevant object attributes" -msgstr "" -"Рядок, пошук якого відбуватиметься у всіх відповідних атрибутах об’єктів" - -msgid "Primary key only" -msgstr "Лише первинний ключ" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "Результати мають містити лише атрибут основного ключа («name»)" - -msgid "Number of entries returned" -msgstr "Кількість повернутих записів" - -msgid "True if not all results were returned" -msgstr "True, якщо повернуто було всі результати" - -msgid "Modify ACI." -msgstr "Змінити запис ACI." - -msgid "Rename an ACI." -msgstr "Перейменувати запис ACI." - -msgid "New ACI name" -msgstr "Нова назва ACI" - -msgid "Display a single ACI given an ACI name." -msgstr "Показати окремий запис ACI за вказаною назвою ACI." - -msgid "Location of the ACI" -msgstr "Розташування ACI" - -msgid "" +"The bind rule defines who this ACI grants permissions to. The LDAP server\n" +"allows this to be any valid LDAP entry but we encourage the use of\n" +"taskgroups so that the rights can be easily shared through roles.\n" "\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" +"For a more thorough description of access controls see\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" "\n" "EXAMPLES:\n" "\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" +"NOTE: ACIs are now added via the permission plugin. These examples are to\n" +"demonstrate how the various options work but this is done via the " +"permission\n" +"command-line now (see last example).\n" "\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" +" Add an ACI so that the group \"secretaries\" can update the address on any " +"user:\n" +" ipa group-add --desc=\"Office secretaries\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Secretaries write addresses\"\n" "\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" +" Show the new ACI:\n" +" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" "\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" +" Add an ACI that allows members of the \"addusers\" permission to add new " +"users:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Add new users\"\n" "\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" +" Add an ACI that allows members of the editors manage members of the admins " +"group:\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Editors manage admins\"\n" "\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" +" Add an ACI that allows members of the admins group to manage the street and " +"zip code of those in the editors group:\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"admins edit the address of " +"editors\"\n" "\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" +" Add an ACI that allows the admins group manage the street and zipcode of " +"those who work for the boss:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Edit the address of those who work for the boss\"\n" "\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" +" Add an entirely new kind of record to IPA that isn't covered by any of the " +"--type options, creating a permission:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" "\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" "\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" +"The show command shows the raw 389-ds ACI.\n" "\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" +"IMPORTANT: When modifying the target attributes of an existing ACI you\n" +"must include all existing attributes as well. When doing an aci-mod the\n" +"targetattr REPLACES the current attributes, it does not add to them.\n" msgstr "" "\n" -"Правило автоматичної участі.\n" -"\n" -"Внесіть ясність у правила участі вузлів та користувачів налаштовуванням\n" -"формальних виразів шаблонів включення або виключення. Ви можете автоматично\n" -"пов’язувати нові записи з групою або групою вузлів на основі даних щодо " -"атрибутів.\n" -"\n" -"Правило безпосередньо пов’язується з групою за назвою, отже ви не можете\n" -"створити правило без визначення групи або групи вузлів.\n" -"\n" -"Умова є формальним виразом, використовується 389-ds для встановлення\n" -"відповідності нового вхідного запису з правилом автоматичної участі.\n" -"Якщо умові відповідає правило включення, запис додається до відповідної\n" -"групи або групи вузлів.\n" -"\n" -"Можна визначити типову групу або групу вузлів, яку буде використано для\n" -"записів, які не відповідають жодному правилу. У випадку записів " -"користувачів\n" -"ця група буде резервною групою, оскільки усіх користувачі типово є " -"учасниками\n" -"групи, вказаної у налаштуваннях IPA.\n" -"\n" -"За допомогою програми automember-rebuild ви можете повторно застосувати " -"правила\n" -"автоматичної участі до вже створених записів, тобто перебудувати схему " -"участі.\n" -"\n" -" Додати початкову групу або групу вузлів:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Додати початкове правило:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Додати умову до правила:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Додати умову виключення до правила для запобігання автоматичному " -"пов’язуванню:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Додати вузол:\n" -" ipa host-add web1.example.com\n" -"\n" -" Додати запис користувача:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Перевірити правила автоматичної участі:\n" -" ipa hostgroup-show webservers\n" -" Група вузлів: webservers\n" -" Опис: Web Servers\n" -" Вузли-учасники: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Назва групи: devel\n" -" Опис: Developers\n" -" GID: 1004200000\n" -" Користувачі-учасники: tuser\n" -"\n" -" Вилучити умову з правила:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Змінити правило автоматичної участі:\n" -" ipa automember-mod\n" -"\n" -" Встановити типову (резервну) групу призначення:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Вилучити типову (резервну) групу призначення:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Показати типову (резервну) групу призначення:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Знайти усіх правила автоматичної участі:\n" -" ipa automember-find\n" -"\n" -" Показати правило автоматичної участі:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Вилучити правило автоматичної участі:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Перебудувати записи участі для усіх користувачів:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Перебудувати записи участі для усіх вузлів:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Перебудувати записи участі для вказаних користувачів:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Перебудувати записи участі для вказаних вузлів:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" - -msgid "Description" -msgstr "Опис" - -msgid "A description of this auto member rule" -msgstr "Опис цього правила автоматичної участі" - -msgid "Default (fallback) Group" -msgstr "Типова (резервна) група" - -msgid "Default group for entries to land" -msgstr "Типова група для додавання записів" - -msgid "Add an automember rule." -msgstr "Додати правило автоматичної участі." - -msgid "Automember Rule" -msgstr "Правило автоматичної участі" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" -"Встановити атрибут для пари назва/значення. Формат: атрибут=значення.\n" -"Для атрибутів з багатьма значенням команда замінює вже вказані значення." - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "" -"Додати пару атрибут/значення. Формат: атрибут=значення. Атрибут має бути\n" -"частиною схеми." - -msgid "Grouping Type" -msgstr "Тип групування" - -msgid "Grouping to which the rule applies" -msgstr "Групування, якого стосується правило" - -msgid "Add conditions to an automember rule." -msgstr "Додати умови до правила автоматичної участі." - -msgid "Inclusive Regex" -msgstr "Формальний вираз включення" - -msgid "Exclusive Regex" -msgstr "Формальний вираз виключення" - -msgid "Attribute Key" -msgstr "Ключ атрибута" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" -"Атрибут для фільтрування за формальним виразом. Приклад: fqdn для вузла або " -"manager для користувача" - -msgid "Conditions that could not be added" -msgstr "Умови, які не вдалося додати" - -msgid "Number of conditions added" -msgstr "Кількість доданих умов" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "Вилучити типову (резервну) групу для невідповідних записів." - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "Встановити типову (резервну) групу для невідповідних записів." - -msgid "Default (fallback) group for entries to land" -msgstr "Типова (резервна) група для додавання записів" - -msgid "Display information about the default (fallback) automember groups." -msgstr "Показати дані щодо типових (резервних) груп автоматичної участі." - -msgid "Delete an automember rule." -msgstr "Вилучити правило автоматичної участі." - -msgid "List of deletions that failed" -msgstr "Список вилучень, які не вдалося виконати" - -msgid "Search for automember rules." -msgstr "Шукати правила автоматичної участі." - -msgid "Modify an automember rule." -msgstr "Змінити правило автоматичної участі." - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" -"Вилучити парну атрибут-значення. Цей параметр буде використано\n" -"останнім, після всіх встановлень і додавань." - -msgid "Rights" -msgstr "Права" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "" -"Показати права доступу цього запису (потребує --all). Докладніше про це " -"можна дізнатися зі сторінки довідника (man) ipa." - -msgid "Rebuild auto membership." -msgstr "Повторне збирання правил автоматичної участі." - -msgid "Rebuild membership for all members of a grouping" -msgstr "Повторне збирання правил участі для усіх учасників угрупування" - -msgid "Users" -msgstr "Користувачі" - -msgid "Rebuild membership for specified users" -msgstr "Повторне збирання правил участі для вказаних користувачів" - -msgid "Hosts" -msgstr "Вузли" - -msgid "Rebuild membership for specified hosts" -msgstr "Повторне збирання правил участі для вказаних вузлів" - -msgid "No wait" -msgstr "Не чекати" - -msgid "Don't wait for rebuilding membership" -msgstr "Не чекати на завершення перебудови записів участі" - -msgid "Remove conditions from an automember rule." -msgstr "Вилучити умови з правила автоматичної участі." - -msgid "Conditions that could not be removed" -msgstr "Умови, які не вдалося вилучити" - -msgid "Number of conditions removed" -msgstr "Кількість вилучених умов" - -msgid "Display information about an automember rule." -msgstr "Показати дані щодо правила автоматичної участі." - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" -"\n" -"Автоматичне монтування\n" -"\n" -"Зберігає налаштування automount(8) для autofs(8) у IPA.\n" -"\n" -"Основою налаштувань автоматичного монтування є файл налаштувань auto." -"master.\n" -"Це також основне місце у IPA. Декілька налаштувань auto.master можна\n" -"зберігати у окремих місцях. Місце залежить від реалізації, типовим\n" -"є місце з назвою «default». Наприклад, ви можете створити місця для\n" -"географічної області, поверху, типу тощо.\n" -"\n" -"У автоматичного монтування є три основних типи об’єктів: місця, карти і " -"ключі.\n" -"\n" -"Місце визначає набір карт, прив’язаних у auto.master. За його допомогою\n" -"можна зберігати одразу декілька налаштувань автоматичного монтування. Місце\n" -"саме собою не є дуже цікавим, це просто початок нової карти автоматичного\n" -"монтування.\n" -"\n" -"Карта є наближеним еквівалентом окремого файла автоматичного монтування, у\n" -"ній зберігаються ключі.\n" -"\n" -"Ключ — точка монтування, пов’язана з картою.\n" -"\n" -"Під час створення нового місця автоматично створюються дві карти:\n" -"auto.master і auto.direct. auto.master — коренева карта для всіх карт\n" -"автоматичного монтування місця. auto.direct — типова карта для " -"безпосередніх\n" -"монтувань, її змонтовано до /-.\n" -"\n" -"Карта автоматичного монтування може містити ключ підмонтування. Цей ключ\n" -"визначає адресу монтування у карті, що посилається на іншу карту. Такий " -"ключ\n" -"може бути додано або за допомогою команди automountmap-add-indirect --" -"parentmap\n" -"або вручну за допомогою automountkey-add зі встановленням info у значення\n" -"\"-type=autofs :<назва карти>\".\n" +"Інструкції керування доступом до сервера каталогів (ACI)\n" +"\n" +"ACI використовуються для надання або заборони доступу до даних. Поточну\n" +"версію цього модуля розроблено з метою надання, а не заборони доступу.\n" +"\n" +"Команди aci розроблено для надання прав доступу до оновлення вже\n" +"створених записів та додавання або вилучення записів. Метою ACI, які\n" +"постачаються з IPA є створення набору низькорівневих прав доступу до " +"особливих\n" +"груп, які називаються групами завдань. Ці низькорівневі права доступу\n" +"можна поєднувати у ролі, які надаватимуть ширший доступ. Ролі є іншим типом\n" +"груп, який називається групами ролей.\n" +"\n" +"Наприклад, якщо у вас є групи завдань, які надають доступ до додавання або " +"зміни записів\n" +"користувачів, ви можете створити роль, адміністратора користувачів " +"(useradmin).\n" +"Далі, можна призначати користувачів до ролі useradmin, щоб надати їм доступ " +"до операцій,\n" +"визначених групами завдань.\n" +"\n" +"Ви можете створити ACI, які надаватимуть дозволи так, що користувачі групи A " +"зможуть\n" +"записувати атрибути для групи B.\n" +"\n" +"Параметр типу визначає карту, яка застосовується до всіх записів у списках " +"користувачів, груп та\n" +"розташування вузла. Основним призначенням є надання прав доступу на " +"додавання\n" +"(створення нових записів).\n" +"\n" +"ACI складається з трьох частин:\n" +"1. призначення\n" +"2. прав доступу\n" +"3. правил прив’язування\n" +"\n" +"Призначення — набір правил, який визначає, які з об’єктів LDAP є " +"призначенням.\n" +"Призначення може включати список атрибутів, області цієї ієрархії LDAP або\n" +"фільтра LDAP.\n" +"\n" +"До призначень включаються:\n" +"- attrs: список атрибутів, яких стосується призначення;\n" +"- type: тип об’єктів (користувач, група, вузол, служба тощо);\n" +"- memberof: учасники групи;\n" +"- targetgroup: надати доступ до зміни певної групи. Ця частина в основному\n" +" розроблена для надання дозволу користувачам на додавання або вилучення " +"учасників\n" +" певної групи.\n" +"- filter: чинний фільтр LDAP, використаний для звуження області " +"призначення.\n" +"- subtree: використовується для застосування правила для цілого набору " +"об’єктів.\n" +" Наприклад, для надання доступу на додавання користувачів вам слід надати " +"право\n" +" доступу \"add\" до підієрархії\n" +" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. Параметр subtree\n" +" є безпечним для об’єктів, які можуть не стосуватися параметром type.\n" +"\n" +"Права доступу визначають набір доступних ACI записів, можуть містити з " +"одного\n" +"або декількох варіантів:\n" +"1. write - запис одного або декількох атрибутів;\n" +"2. read - читання одного або декількох атрибутів;\n" +"3. add - додавання нового запису до ієрархії;\n" +"4. delete - вилучення наявного запису;\n" +"5. all - надання всіх прав доступу.\n" +"\n" +"Зауважте відмінність між атрибутами та записами. Права доступу є " +"незалежними,\n" +"отже можливість додавання користувача не означає можливості зміни " +"параметрів\n" +"його облікового запису.\n" +"\n" +"Правило прив’язування визначає, кому це ACI надає права доступу. Сервер " +"LDAP\n" +"надає можливість визначати будь-який коректний запис LDAP, але вам варто " +"використовувати\n" +"групи завдань, щоб права можна було без проблем спільно використовувати для " +"декількох ролей.\n" +"\n" +"Повніший опис керування доступом можна знайти тут:\n" +"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." +"html\n" "\n" "ПРИКЛАДИ:\n" "\n" -"Місця:\n" +"ЗАУВАЖЕННЯ: у поточній версії ACI додаються за допомогою додатка прав " +"доступу.\n" +"Ці приклади мають продемонструвати роботу різних параметрів, але у поточній\n" +"версії це завдання виконується за допомогою команди надання прав доступу " +"(останній приклад).\n" "\n" -" Створення нового місця, \"Kyiv\":\n" -" ipa automountlocation-add kyiv\n" +" Додавання ACI для надання доступу групі \"secretaries\" до оновлення адреси " +"будь-якого користувача:\n" +" ipa group-add --desc=\"Офісні секретарки\" secretaries\n" +" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " +"--permissions=write --prefix=none \"Секретарки записують адреси\"\n" "\n" -" Показ нового місця:\n" -" ipa automountlocation-show kyiv\n" +" Показ нового ACI:\n" +" ipa aci-show --prefix=none \"Секретарки записують адреси\"\n" "\n" -" Пошук доступних місць:\n" -" ipa automountlocation-find\n" +" Додавання ACI, яке надасть доступ учасникам групи \"addusers\" доступ до " +"додавання нових користувачів:\n" +" ipa aci-add --type=user --permission=addusers --permissions=add --" +"prefix=none \"Додавання користувачів\"\n" "\n" -" Вилучення іменованого місця автоматичного монтування:\n" -" ipa automountlocation-del kyiv\n" +" Додавання ACI, яке надасть доступ учасникам групи \"editors\" до керування " +"записами\n" +"учасників групи \"admins\":\n" +" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" +"group=editors --prefix=none \"Редактори керують адміністраторами\"\n" "\n" -" Показ того, як мають виглядати карти автоматичного монтування, якщо б вони " -"перебували у файловій системі:\n" -" ipa automountlocation-tofiles kyiv\n" +" Додавання ACI, яке надасть доступ учасникам групи \"admins\" до зміни " +"поштової адреси та індексу користувачів групи \"editors\":\n" +" ipa aci-add --permissions=write --memberof=editors --group=admins --" +"attrs=street,postalcode --prefix=none \"Адміністратори редагують адреси " +"редакторів\"\n" "\n" -" Імпортування вже створених налаштувань до місця:\n" -" ipa automountlocation-import kyiv /etc/auto.master\n" +" Додавання ACI, яке надасть доступ групі \"admins\" до зміни поштової адреси " +"та індексу всіх, хто працює начальником:\n" +" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " +"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" +"prefix=none \"Зміна адрес тих, хто працює начальником\"\n" "\n" -" Спроба імпортування зазнає невдачі, якщо буде знайдено дублікати " -"записів.\n" -" Щоб програма працювала безперервно (з пропусканням всіх помилок),\n" -" скористайтеся параметром --continue.\n" +" Додавання повністю нового типу записів до IPA, який не визначається жодним " +"з параметрів --type, створення прав доступу:\n" +" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," +"cn=accounts,dc=example,dc=com\" --desc=\"Додавання помаранчевих записів\" " +"add_orange\n" "\n" -"Карти:\n" "\n" -" Створення карти \"auto.share\":\n" -" ipa automountmap-add kyiv auto.share\n" +"Команда show показує прості 389-ds ACI.\n" "\n" -" Показ нової карти:\n" -" ipa automountmap-show kyiv auto.share\n" -"\n" -" Пошук карт у місці kyiv:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Створити непряму карту з auto.share як точкою підмонтування:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" Ця команда еквівалентна до таких команд:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Вилучення карти auto.share:\n" -" ipa automountmap-del kyiv auto.share\n" -"\n" -"Ключі:\n" -"\n" -" Створення ключа для карти auto.share у місці kyiv. Карту буде\n" -" пов’язано з раніше створеною у auto.master:\n" -" ipa automountkey-add kyiv auto.master --key=/share --info=auto.share\n" -"\n" -" Створення ключа для нашої карти auto.share, змонтованого ресурсу NFS для " -"сторінок man:\n" -" ipa automountkey-add kyiv auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Знайти всі ключі для карти auto.share:\n" -" ipa automountkey-find kyiv auto.share\n" -"\n" -" Пошук всіх безпосередніх ключів автоматичного монтування:\n" -" ipa automountkey-find kyiv --key=/-\n" -"\n" -" Вилучення ключа man для карти auto.share:\n" -" ipa automountkey-del kyiv auto.share --key=man\n" - -msgid "Key" -msgstr "Ключ" - -msgid "Automount key name." -msgstr "Назва ключа автоматичного монтування." - -msgid "Mount information" -msgstr "Інформація щодо монтування" - -msgid "description" -msgstr "опис" - -msgid "Location" -msgstr "Запис" - -msgid "Automount location name." -msgstr "Адреса автомонтування." - -msgid "Map" -msgstr "Карта" - -msgid "Automount map name." -msgstr "Назва карти автоматичного монтування." - -msgid "Create a new automount key." -msgstr "Створити ключ автоматичного монтування." - -msgid "Delete an automount key." -msgstr "Вилучити ключ автоматичного монтування." - -msgid "Continuous mode: Don't stop on errors." -msgstr "Режим неперервної роботи: не зупинятися у разі помилок." - -msgid "Search for an automount key." -msgstr "Виконати пошук ключа автоматичного монтування." - -msgid "Time Limit" -msgstr "Обмеження часу" - -msgid "Time limit of search in seconds" -msgstr "Обмеження часу пошуку у секундах" - -msgid "Size Limit" -msgstr "Обмеження розміру" - -msgid "Maximum number of entries returned" -msgstr "Максимальна кількість повернутих записів" - -msgid "Modify an automount key." -msgstr "Змінити ключ автоматичного монтування." - -msgid "New mount information" -msgstr "Інформація нового монтування" - -msgid "Rename" -msgstr "Перейменувати" - -msgid "Rename the automount key object" -msgstr "Перейменувати об’єкт ключа автоматичного монтування" - -msgid "Display an automount key." -msgstr "Показати ключ автоматичного монтування." - -msgid "Create a new automount location." -msgstr "Створити новий запис автоматичного монтування." - -msgid "Delete an automount location." -msgstr "Вилучити запис автоматичного монтування." - -msgid "Search for an automount location." -msgstr "Шукати запис автоматичного монтування." - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "Результати мають містити лише атрибут основного ключа («location»)" - -msgid "Display an automount location." -msgstr "Показати запис автоматичного монтування." - -msgid "Generate automount files for a specific location." -msgstr "Створити файли automount для певної адреси." - -msgid "Create a new automount map." -msgstr "Створити карту автомонтування." - -msgid "Create a new indirect mount point." -msgstr "Створити опосередковану точку монтування." - -msgid "Mount point" -msgstr "Точка монтування" - -msgid "Parent map" -msgstr "Батьківська карта" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "" -"Назва батьківської карти автомонтування (типове значення: auto.master)." - -msgid "Delete an automount map." -msgstr "Вилучити карту автоматичного монтування." - -msgid "Search for an automount map." -msgstr "Виконати пошук карти автоматичного монтування." - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "Результати мають містити лише атрибут основного ключа («map»)" - -msgid "Modify an automount map." -msgstr "Змінити карту автоматичного монтування." - -msgid "Display an automount map." -msgstr "Показати карту автоматичного монтування." +"ВАЖЛИВО: під час зміни атрибутів призначення вже створеного ACI вам\n" +"слід включити всі вже створені атрибути. Під час внесення змін до aci\n" +"targetattr ЗАМІНЮЄ поточні атрибути, а не додає ці атрибути.\n" msgid "" "\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" +"Domain Name System (DNS)\n" msgstr "" "\n" -"Додаток для виконання декількох викликів ipa за допомогою одного віддаленого " -"виклику процедури\n" -"\n" -"Щоб запустити цей код на легкому сервері, віддайте такі команди:\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"де у файлі batch_request.json міститься десь такий код:\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"Формат відповіді має бути розподілений за рівнями вкладеності у подібний же " -"спосіб. На початку ви побачите таке:\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"а далі буде вкладена відповідь для кожного методу команди IPA, який було " -"надіслано у запиті\n" - -msgid "Nested Methods to execute" -msgstr "Вкладені методи, які слід виконати" +"Система назв доменів (DNS)\n" msgid "" "\n" -"IPA certificate operations\n" +"Domain Name System (DNS)\n" "\n" -"Implements a set of commands for managing server SSL certificates.\n" +"Manage DNS zone and resource records.\n" "\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" "\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" "\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" "\n" -"In order to request a certificate:\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" "\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" "\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" "\n" "EXAMPLES:\n" "\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +" Add new zone:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" "\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" +" Add system permission that can be used for per-zone privilege delegation:\n" +" ipa dnszone-add-permission example.com\n" "\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" +" Modify the zone to allow dynamic updates for hosts own records in realm " +"EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" "\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" +" This is the equivalent of:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-" +"policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * " +"AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" "\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" +" Modify the zone to allow zone transfers for local network only:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" "\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" +" Add new reverse zone specified by network IP address:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" "\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" +" Add second nameserver for example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" "\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +" Add a mail server for example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" "\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" +" Add another record using MX record specific options:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" "\n" -"The following revocation reasons are supported:\n" +" Add another record using interactive mode (started when dnsrecord-add, " +"dnsrecord-mod,\n" +" or dnsrecord-del are executed with no options):\n" +" ipa dnsrecord-add example.com @\n" +" Please choose a type of DNS resource record to be added\n" +" The most common types for this type of zone are: NS, MX, LOC\n" "\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" +" DNS resource record type: MX\n" +" MX Preference: 30\n" +" MX Exchanger: mail3\n" +" Record name: example.com\n" +" MX record: 10 mail1, 20 mail2, 30 mail3\n" +" NS record: nameserver.example.com., nameserver2.example.com.\n" "\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +" Delete previously added nameserver from example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" "\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" +" Add LOC record for example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" "\n" -"Дії з сертифікатами IPA\n" +" Add new A record for www.example.com. Create a reverse record in " +"appropriate\n" +" reverse zone as well. In this case a PTR record \"2\" pointing to www." +"example.com\n" +" will be created in zone 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" "\n" -"Реалізує набір команд для керування сертифікатами серверів SSL.\n" +" Add new PTR record for www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" "\n" -"Запити щодо сертифікатів існують у формі Certificate Signing Request (CSR)\n" -"і форматі PEM.\n" +" Add new SRV records for LDAP servers. Three quarters of the requests\n" +" should go to fast.example.com, one quarter to slow.example.com. If neither\n" +" is available, switch to backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" "\n" -"Якщо використовується автопідписний модуль, призначення CSR має збігатися\n" -"з призначенням на сервері. Служба сертифікації використовує лише CN\n" -"CSR і примусово визначає призначення.\n" +" The interactive mode can be used for easy modification:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" No option to modify specific record provided.\n" +" Current DNS record contents:\n" "\n" -"Сертифікат зберігається з реєстраційним записом, а реєстраційний запис\n" -"потребує вузла.\n" +" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" "\n" -"Для того, щоб створити запит щодо сертифіката:\n" +" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" +" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" +" SRV Priority [0]: (keep the default value)\n" +" SRV Weight [1]: 2 (modified value)\n" +" SRV Port [389]: (keep the default value)\n" +" SRV Target [slow.example.com]: (keep the default value)\n" +" 1 SRV record skipped. Only one value per DNS record type can be modified " +"at one time.\n" +" Record name: _ldap._tcp\n" +" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " +"389 slow.example.com\n" "\n" -"* Вузол має існувати\n" -"* Служба має існувати (або слід скористатися параметром --add для\n" -"автоматичного додавання)\n" +" After this modification, three fifths of the requests should go to\n" +" fast.example.com and two fifths to slow.example.com.\n" "\n" -"ПОШУК:\n" +" An example of the interactive mode for dnsrecord-del command:\n" +" ipa dnsrecord-del example.com www\n" +" No option to delete specific record provided.\n" +" Delete all? Yes/No (default No): (do not delete all records)\n" +" Current DNS record contents:\n" "\n" -"Шукати сертифікати можна за призначенням сертифіката, серійним номером,\n" -"причиною відкликання, датами чинності та датою видання.\n" +" A record: 1.2.3.4, 11.22.33.44\n" "\n" -"Якщо пошук виконується за датою _від, використовується порівняння >=, а " -"якщо\n" -"виконується пошук _до дати — порівняння <=. Поєднання обох пошуків " -"призводить\n" -"до пошуку з логічним поєднанням ТА.\n" +" Delete A record '1.2.3.4'? Yes/No (default No):\n" +" Delete A record '11.22.33.44'? Yes/No (default No): y\n" +" Record name: www\n" +" A record: 1.2.3.4 (A record 11.22.33.44 has been " +"deleted)\n" "\n" -"Дати обробляються як дати за Гринвічем, відповідно до дат визначених у\n" -"сертифікатах.\n" +" Show zone example.com:\n" +" ipa dnszone-show example.com\n" "\n" -"Формат дати є таким: РРРР-мм-дд.\n" +" Find zone with \"example\" in its domain name:\n" +" ipa dnszone-find example\n" "\n" -"ПРИКЛАДИ:\n" +" Find records for resources with \"www\" in their name in zone example.com:\n" +" ipa dnsrecord-find example.com www\n" "\n" -" Створити запит щодо нового сертифіката і додати реєстраційний запис:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +" Find A records with value 10.10.0.1 in zone example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" "\n" -" Отримати вже створений сертифікат:\n" -" ipa cert-show 1032\n" +" Show records for resource www in zone example.com\n" +" ipa dnsrecord-show example.com www\n" "\n" -" Відкликати сертифікат (причини визначено у RFC 5280):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" +" Delegate zone sub.example to another nameserver:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" "\n" -" Вилучити сертифікат зі списку відкликання:\n" -" ipa cert-remove-hold 1032\n" +" If global forwarder is configured, all requests to sub.example.com will be\n" +" routed through the global forwarder. To change the behavior for example." +"com\n" +" zone only and forward the request directly to ns.sub.example.com., global\n" +" forwarding may be disabled per-zone:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" "\n" -" Перевірити стан запиту щодо підписування:\n" -" ipa cert-status 10\n" +" Forward all requests for the zone external.com to another nameserver using\n" +" a \"first\" policy (it will send the queries to the selected forwarder and " +"if\n" +" not answered it will use global resolvers):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" "\n" -" Пошук сертифікатів за назвою вузла:\n" -" ipa cert-find --subject=ipaserver.example.com\n" +" Delete zone example.com with all resource records:\n" +" ipa dnszone-del example.com\n" "\n" -" Пошук відкликаних сертифікатів за причиною:\n" -" ipa cert-find --revocation-reason=5\n" +" Resolve a host name to see if it exists (will add default IPA domain\n" +" if one is not included):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" "\n" -" Пошук сертифікатів за датою видання\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" "\n" -"У поточній версії IPA негайно виконує (або відхиляє) всі запити щодо\n" -"сертифікатів, отже дані щодо стану запиту не мають сенсу. Ці дані\n" -"можуть знадобитися у наступних версіях або у разі, якщо CA видає\n" -"сертифікат не одразу.\n" +"GLOBAL DNS CONFIGURATION\n" "\n" -"Передбачено підтримку таких причин відкликання:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Зауважте, що коди причини 7 не використовується. Докладніші дані у RFC " -"5280:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "Перевіряє, чи увімкнено на якомусь із серверів службу CA." - -msgid "Search for existing certificates." -msgstr "Шукати наявні сертифікати." - -msgid "Match cn attribute in subject" -msgstr "Порівняти із атрибутом cn у темі" - -msgid "Reason" -msgstr "Підстава" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "Причина відкликання сертифіката (0-10)" - -msgid "minimum serial number" -msgstr "мінімальний серійний номер" - -msgid "maximum serial number" -msgstr "максимальний серійний номер" - -msgid "match the common name exactly" -msgstr "повна відповідність загальній назві" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "Чинний не пізніше, ніж з цієї дати (РРРР-мм-дд)" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "Чинний не пізніше, ніж до цієї дати (РРРР-мм-дд)" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "Чинний не раніше від цієї дати (РРРР-мм-дд)" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "Чинний не раніше цієї дати (РРРР-мм-дд)" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "Видано з цієї дати (РРРР-мм-дд)" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "Видано до цієї дати (РРРР-мм-дд)" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "Відкликано з цієї дати (РРРР-мм-дд)" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "Відкликано до цієї дати (РРРР-мм-дд)" - -msgid "Maximum number of certs returned" -msgstr "Максимальна кількість сертифікатів у повернутому списку" - -msgid "Take a revoked certificate off hold." -msgstr "Забрати відкликаний сертифікат." - -msgid "Serial number" -msgstr "Серійний номер" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "Серійний десятковий номер або шістнадцятковий номер з префіксом 0x" - -msgid "Submit a certificate signing request." -msgstr "Надіслати запит щодо підписування сертифіката." - -msgid "CSR" -msgstr "CSR" - -msgid "Principal" -msgstr "Реєстраційний запис" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" -"Реєстраційний запис служби для цього сертифіката (наприклад HTTP/test." -"example.com)" - -msgid "automatically add the principal if it doesn't exist" -msgstr "автоматично додати реєстраційний запис, якщо його не існує" - -msgid "Dictionary mapping variable name to value" -msgstr "Відображення назви змінної на значення за словником" - -msgid "Revoke a certificate." -msgstr "Відкликати сертифікат." - -msgid "Retrieve an existing certificate." -msgstr "Отримати вже створений сертифікат." - -msgid "Output filename" -msgstr "Назва файла виводу" - -msgid "File to store the certificate in." -msgstr "Файл, у якому зберігатимуться дані сертифіката." - -msgid "Check the status of a certificate signing request." -msgstr "Перевірити стан запиту щодо підписування сертифіката." - -msgid "Request id" -msgstr "Ід. запиту" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " +"DNS configuration passed to command line install script is stored in a " +"local\n" +"configuration file on each IPA server where DNS service is configured. " "These\n" -"include:\n" +"local settings can be overridden with a common configuration stored in LDAP\n" +"server:\n" "\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" +" Show global DNS configuration:\n" +" ipa dnsconfig-show\n" "\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +" Modify global DNS configuration and set a list of global forwarders:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" msgstr "" "\n" -"Налаштування сервера\n" +"Система назв доменів (DNS)\n" "\n" -"Керування типовими значеннями, які використовує IPA, та деякими з\n" -"придатних до зміни параметрів.\n" +"Керування записами зон та ресурсів DNS.\n" "\n" -"ЗАУВАЖЕННЯ:\n" +"ВИКОРИСТАННЯ СТРУКТУРОВАНИХ ПАРАМЕТРІВ ДЛЯ ОКРЕМИХ ТИПІВ\n" "\n" -"Тут зберігається значення параметра сповіщення щодо паролів\n" -"(--pwdexpnotify), отже його не буде скопійовано. Це значення поки що\n" -"не використовується для сповіщення користувачів щодо завершення строку дії\n" -"пароля.\n" +"Існує багато структурованих типів RR DNS, для яких дані DNS, що " +"зберігаються\n" +"на сервері LDAP, не є скалярним значенням, наприклад дані щодо IP-адресу " +"або\n" +"назву домену, а структурою даних, яка часто може бути складною. Прикладом\n" +"може бути запис LOC [RFC1876], який складається з багатьох обов’язкових і\n" +"необов’язкових частин (градусів, мінут, секунд широти і довготи, висоти\n" +"та похибки).\n" "\n" -"Деякі з атрибутів придатні лише для читання, їх буде показано лише з метою\n" -"інформування. Серед цих атрибутів:\n" +"Робота з такими записами DNS без помилки і введення некоректного значення\n" +"може бути складною. Модуль DNS надає у ваше розпорядження абстракцію над\n" +"цими необробленими записами і спосіб керування кожним з типів RR за\n" +"допомогою специфічних параметрів. Для кожного з підтримуваних типів\n" +"RR у модулі DNS передбачено стандартний параметр для роботи із\n" +"необробленими записами за допомогою формату --<тип_rr>-rec, наприклад,\n" +"--mx-rec та зі спеціальними параметрами для кожної із частин структури RR\n" +"за допомогою формату --<тип_rr>-<назва_частини>, наприклад --mx-preference\n" +"та --mx-exchanger.\n" "\n" -"Основа призначення сертифіката: змінна основа призначення сертифіката,\n" -" наприклад O=EXAMPLE.COM. Цей атрибут можна налаштувати лише під час\n" -" встановлення.\n" -"Параметри додатка роботи з паролями: у поточній версії визначають додаткові\n" -" хеші, які створюються на основі пароля (можуть бути і інші умови).\n" +"Під час додавання запису можна скористатися специфічними для RR параметрами\n" +"або стандартним параметром для необробленого значення. Втім, поєднувати\n" +"ці варіанти у одній дії із додавання не можна. Під час внесення змін до\n" +"наявного запису можна скористатися для зміни однієї частини запису DNS\n" +"новими специфічними параметрами RR, причому для визначення зміненого\n" +"значення буде використано стандартний варіант необробленого значення.\n" +"У наведеному нижче прикладі продемонстровано зміну пріоритетності запису\n" +"MX з 0 на 1 у записі без внесення змін до обмінника:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" "\n" -"Під час встановлення списку пріоритетності для користувачів SELinux може " -"виникнути\n" -"потреба у додаванні лапок до значення, щоб оболонка не обробляла параметр.\n" "\n" "ПРИКЛАДИ:\n" "\n" -" Показати основні налаштування сервера:\n" -" ipa config-show\n" +" Додавання нової зони:\n" +" ipa dnszone-add example.com --name-" +"server=ns --admin-email=admin@example." +"com --ip-address=10.0.0.1\n" "\n" -" Показати всі параметри налаштування:\n" -" ipa config-show --all\n" +" Додавання загальносистемних прав доступу, якими можна скористатися для " +"делегування привілеїв для окремих зон:\n" +" ipa dnszone-add-permission example.com\n" "\n" -" Змінити максимальну довжину імені користувача на 99 символів:\n" -" ipa config-mod --maxusername=99\n" +" Зміна зони таким чином, щоб дозволити динамічне оновлення для власних " +"записів вузлів у області EXAMPLE.COM:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE\n" "\n" -" Збільшити типовий час і максимальне обмеження на розмір пошуку\n" -" сервера IPA:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +" Ця команда еквівалентна до такої команди:\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-" +"policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * " +"AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" "\n" -" Встановити типовий домен електронної пошти користувачів:\n" -" ipa config-mod --emaildomain=example.com\n" +" Зміна зони таким чином, щоб дозволити перенесення зони лише для локальної " +"мережі:\n" +" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" "\n" -" Увімкнути режим перенесення, щоб зробити команду \"ipa migrate-ds\"\n" -" працездатною:\n" -" ipa config-mod --enable-migration=TRUE\n" +" Додавання нової реверсивної зони, вказаної за допомогою мережевої IP-" +"адреси:\n" +" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" +"server=ns.example.com.\n" "\n" -" Визначити пріоритетність користувачів у карті SELinux:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" - -msgid "Maximum username length" -msgstr "Максимальна довжина імені користувача" - -msgid "Home directory base" -msgstr "Адреса домашніх каталогів" - -msgid "Default location of home directories" -msgstr "Типова адреса домашніх каталогів" - -msgid "Default shell" -msgstr "Типова оболонка" - -msgid "Default shell for new users" -msgstr "Типова оболонка для нових користувачів" - -msgid "Default users group" -msgstr "Типова група користувачів" - -msgid "Default group for new users" -msgstr "Типова група для нових користувачів" - -msgid "Default e-mail domain" -msgstr "Типовий домен ел. пошти" - -msgid "Search time limit" -msgstr "Обмеження часу пошуку" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "" -"Максимальний проміжок часу (у секундах) для виконання однієї дії з пошуку " -"(>0, -1 — без обмежень)" - -msgid "Search size limit" -msgstr "Обмеження розміру пошуку" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "Максимальна кількість записів результатів пошуку (-1 — без обмежень)" - -msgid "User search fields" -msgstr "Поля пошуку користувачів" - -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "" -"Відокремлений комами список полів, за якими виконуватиметься пошук " -"користувачів" - -msgid "Group search fields" -msgstr "Поля пошуку груп" - -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "" -"Відокремлений комами список полів, за якими виконуватиметься пошук груп" - -msgid "Enable migration mode" -msgstr "Увімкнути режим міграції" - -msgid "Certificate Subject base" -msgstr "Базовий об’єкт сертифікації" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "Основа для створення записів об’єктів сертифікації (OU=Test,O=Example)" - -msgid "Default group objectclasses" -msgstr "Типові класи об’єктів групи" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "Типові класи об’єктів груп (список класів, відокремлених комами)" - -msgid "Default user objectclasses" -msgstr "Типові класи об’єктів користувачів" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "" -"Типові класи об’єктів користувачів (список класів, відокремлених комами)" - -msgid "Password Expiration Notification (days)" -msgstr "Сповіщення про вичерпання строку дії пароля (у днях)" - -msgid "Number of days's notice of impending password expiration" -msgstr "Сповіщення про кількість днів, які залишилися до завершення дії пароля" - -msgid "Password plugin features" -msgstr "Можливості додатка паролів" - -msgid "Extra hashes to generate in password plug-in" -msgstr "Додаткові хеші для створення у додатку паролів" - -msgid "SELinux user map order" -msgstr "Порядок карт користувачів SELinux" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "" -"Порядок у збільшенні пріоритетності користувачів SELinux, відокремлений $" - -msgid "Default SELinux user" -msgstr "Типовий користувач SELinux" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "" -"Типовий користувач SELinux, якщо не буде знайдено відповідного у правилі " -"карти SELinux" - -msgid "Default PAC types" -msgstr "Типові типи PAC" - -msgid "Default types of PAC supported for services" -msgstr "Типові типи PAC, підтримувані для служб" - -msgid "Default user authentication types" -msgstr "Типові типи розпізнавання користувачів" - -msgid "Default types of supported user authentication" -msgstr "Типові типи підтримуваного розпізнавання користувачів" - -msgid "Modify configuration options." -msgstr "Змінити параметри налаштування." - -msgid "Show the current configuration." -msgstr "Показати поточні налаштування." - -msgid "" +" Додати другий сервер назв для example.com:\n" +" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" "\n" -"Group to Group Delegation\n" +" Додавання поштового сервера для example.com:\n" +" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" "\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" +" Додавання ще одного запису за допомогою специфічних для запису MX " +"параметрів:\n" +" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" "\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" +" Додавання ще одного запису за допомогою інтерактивного режиму (у який " +"програма переходить\n" +" у відповідь на команди dnsrecord-add, dnsrecord-mod або dnsrecord-del без " +"параметрів):\n" +" ipa dnsrecord-add example.com @\n" +" Будь ласка, виберіть тип запису ресурсу DNS, який слід додати\n" +" Найпоширенішими типами для цього типу зон є: NS, MX, LOC\n" "\n" -"EXAMPLES:\n" +" Тип запису ресурсу DNS: MX\n" +" Пріоритетність MX: 30\n" +" Обмінник MX: mail3\n" +" Назва запису: example.com\n" +" Запис MX: 10 mail1, 20 mail2, 30 mail3\n" +" Запис NS: nameserver.example.com., nameserver2.example.com.\n" "\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" +" Вилучення раніше доданого сервера назв з example.com:\n" +" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" "\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" +" Додавання запису LOC для example.com:\n" +" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " +"227.64m\"\n" "\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" +" Додавання нового запису A для www.example.com, крім того, створення " +"зворотного\n" +" запису у відповідній зворотній зоні. У цьому випадку запис PTR «2» вказує " +"на\n" +" www.example.com буде створено у зоні 15.142.80.in-addr.arpa.\n" +" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-" +"reverse\n" "\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" +" Додавання нового запису PTR для www.example.com\n" +" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" "\n" -"Міжгрупове уповноваження\n" +" Додавання нових записів SRV для серверів LDAP. Три чверті запитів мають\n" +" надсилатися до fast.example.com, а одна чверть — на slow.example.com.\n" +" Якщо жодна зі служб не буде доступною, перемкнутися на backup.example.com.\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." +"com\"\n" +" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." +"example.com\"\n" "\n" -"Права доступу може бути точно налаштовано. Правила керування доступом\n" -"або інструкції (ACI), надання дозволу на виконання певних завдань, зокрема\n" -"додавання користувача, внесення змін до групи тощо.\n" +" Для полегшення внесення змін можна скористатися інтерактивним режимом:\n" +" ipa dnsrecord-mod example.com _ldap._tcp\n" +" Можливості внесення змін у певний запис не передбачено.\n" +" Поточний вміст запису DNS:\n" "\n" -"Міжгрупові уповноваження надають учасникам однієї групи можливість\n" -"оновлювати набір атрибутів учасників іншої групи.\n" +" Запис SRV: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " +"backup.example.com\n" "\n" -"ПРИКЛАДИ:\n" +" Змінити запис SRV «0 3 389 fast.example.com»? Так/Ні (типово «Ні»):\n" +" Змінити запис SRV «0 1 389 slow.example.com»? Так/Ні (типово «Ні»): y\n" +" Пріоритетність SRV [0]: (зберегти типове значення)\n" +" Вага SRV [1]: 2 (змінене значення)\n" +" Порт SRV [389]: (зберегти типове значення)\n" +" Призначення SRV [slow.example.com]: (зберегти типове значення)\n" +" Пропущено 1 запис SRV. Одночасно можна змінювати лише одне значення на тип " +"запису DNS.\n" +" Назва запису: _ldap._tcp\n" +" Запис SRV: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 389 " +"slow.example.com\n" "\n" -" Додати правило уповноваження, яке надасть змогу керівникам (managers)\n" -" редагувати адреси співробітників:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" +" Після внесення цих змін три п’ятих запитів має надсилатися до\n" +" fast.example.com, а дві п’ятих — до slow.example.com.\n" "\n" -" Під час керування списком атрибутів слід включати всі атрибути списку\n" -" разом з вже створеними. Додавання до списку postalCode:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" +" Приклад інтерактивного режиму для команди dnsrecord-del:\n" +" ipa dnsrecord-del example.com www\n" +" Не вказано параметр вилучення певного запису.\n" +" Вилучити усі? Так/Ні (типово «Ні»): (не вилучати усі записи)\n" +" Поточний вміст запису DNS:\n" "\n" -" Показ нашого оновленого правила:\n" -" ipa delegation-show \"managers edit employees' street\"\n" +" Запис A: 192.0.2.2, 192.0.2.3\n" "\n" -" Вилучення правила:\n" -" ipa delegation-del \"managers edit employees' street\"\n" - -msgid "Delegation name" -msgstr "Назва уповноваження" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "" -"Права доступу, які слід надати (read, write). Типовими є права доступу write." - -msgid "Attributes to which the delegation applies" -msgstr "Атрибути, до яких застосовується уповноваження" - -msgid "Member user group" -msgstr "Учасник групи користувачів" - -msgid "User group to apply delegation to" -msgstr "Група користувачів, до якої слід застосувати уповноваження" - -msgid "Add a new delegation." -msgstr "Додати нове уповноваження." - -msgid "Delete a delegation." -msgstr "Вилучити уповноваження." - -msgid "Search for delegations." -msgstr "Пошук уповноважень." - -msgid "Modify a delegation." -msgstr "Змінити уповноваження." - -msgid "Display information about a delegation." -msgstr "Показати дані щодо уповноваження." +" Вилучити запис A «192.0.2.2»? Так/Ні (типово «Ні»):\n" +" Вилучити запис A «192.0.2.3»? Так/Ні (типово «Ні»): y\n" +" Назва запису: www\n" +" Запис A: 192.0.2.2 (Запис A 192.0.2.3 вилучено)\n" +"\n" +" Показати зону example.com:\n" +" ipa dnszone-show example.com\n" +"\n" +" Знайти зону зі словом «example» у назві домену:\n" +" ipa dnszone-find example\n" +"\n" +" Знайти записи для ресурсів з «www» у назві у зоні example.com:\n" +" ipa dnsrecord-find example.com www\n" +"\n" +" Знайти записи A зі значенням 10.10.0.1 у зоні example.com\n" +" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" +"\n" +" Показати записи для ресурсу www у зоні example.com\n" +" ipa dnsrecord-show example.com www\n" +"\n" +" Делегування зони sub.example до іншого сервера назв:\n" +" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" +" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" +"\n" +" Якщо налаштовано загальний переспрямовувач, усі запити, для яких цей сервер " +"не є\n" +" надійним (наприклад sub.example.com) не маршрутизуватимуться до загального\n" +" переспрямовувача. Щоб змінити поведінку лише для зони example.com\n" +" і переспрямувати запит безпосередньо до ns.sub.example.com, можна вимкнути\n" +" загальне переспрямовування для окремої зони:\n" +" ipa dnszone-mod example.com --forward-policy=none\n" +"\n" +" Переспрямувати усі запити для зони external.com до іншого сервера назв\n" +" за правилами «first» (надіслати запити до вибраного переспрямовувача,\n" +" а якщо він не відповів, використати загальні засоби визначення):\n" +" ipa dnszone-add external.com\n" +" ipa dnszone-mod external.com --" +"forwarder=10.20.0.1 --forward-policy=first\n" +"\n" +" Вилучити зону example.com із усіма записами ресурсів:\n" +" ipa dnszone-del example.com\n" +"\n" +" Визначити адресу за назвою вузла, щоб визначити, чи він існує (додасть\n" +" типовий домен IPA, якщо його не включено):\n" +" ipa dns-resolve www.example.com\n" +" ipa dns-resolve www\n" +"\n" +"\n" +"ЗАГАЛЬНІ НАЛАШТУВАННЯ DNS\n" +"\n" +"Налаштування DNS, що передаються до скрипту командного рядка для " +"встановлення,\n" +"зберігаються у локальному файлі налаштувань на кожному з серверів IPA, де\n" +"налаштовано службу DNS. Ці локальні параметри можна перевизначити за " +"допомогою\n" +"загальних налаштувань, що зберігаються на сервері LDAP:\n" +"\n" +" Показати загальні налаштування DNS:\n" +" ipa dnsconfig-show\n" +"\n" +" Зміна загальних налаштувань DNS і встановлення списку загальних " +"переспрямовувачів:\n" +" ipa dnsconfig-mod --forwarder=10.0.0.1\n" msgid "" "\n" @@ -2999,9 +4922,9 @@ msgid "" " ipa dnszone-mod example.com --dynamic-update=TRUE\n" "\n" " This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" +" ipa dnszone-mod example.com --dynamic-update=TRUE --update-" +"policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * " +"AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" "\n" " Modify the zone to allow zone transfers for local network only:\n" " ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" @@ -3453,820 +5376,1171 @@ msgstr "" "переспрямовувачів:\n" " ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgid "Global forwarders" -msgstr "Загальні переспрямовувачі" +msgid "" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +msgstr "" +"\n" +"РЕЄСТРАЦІЯ:\n" +"\n" +"Передбачено три сценарії реєстрації нових клієнтів:\n" +"\n" +"1. Ви реєструєтеся як повноцінний адміністратор. Запис вузла може існувати\n" +" або не існувати. Повноцінний адміністратор виконує роль hostadmin або є\n" +" учасником групи admins.\n" +"2. Ви реєструєтеся як адміністратор з обмеженими правами. Вузол вже має\n" +" існувати. Обмежений адміністратор виконує роль з привілеями\n" +" Host Enrollment.\n" +"3. Вузол було створено з одноразовим паролем.\n" msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" +"\n" +"EXAMPLES:\n" msgstr "" -"Переспрямовувачі загального рівня. Для кожного переспрямовувача можна " -"вказати нетиповий порт за допомогою стандартного формату: «IP_АДРЕСА port " -"ПОРТ»" - -msgid "Forward policy" -msgstr "Правила переспрямовування" +"\n" +"ПРИКЛАДИ:\n" msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." +"\n" +"Each option needs to be added separately and no validation is done whether\n" +"the option is known by sudo or is in a valid format. Environment variables\n" +"also need to be set individually. For example env_keep=\"FOO BAR\" in " +"sudoers\n" +"needs be represented as --sudooption env_keep=FOO --sudooption " +"env_keep+=BAR.\n" msgstr "" -"Загальні правил переспрямовування. Щоб вимкнути будь-які переспрямовувачі на " -"загальному рівні, встановіть значення «none»." - -msgid "Allow PTR sync" -msgstr "Дозволити PTR-синхронізацію" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "Дозволити синхронізацію прямих (A, AAAA) і зворотних (PTR) записів" - -msgid "Zone refresh interval" -msgstr "Інтервал між оновленнями даних зони" - -msgid "Zone name" -msgstr "Назва зони" - -msgid "Zone name (FQDN)" -msgstr "Назва зони (FQDN)" - -msgid "Reverse zone IP network" -msgstr "Мережа IP зворотної зони" - -msgid "IP network to create reverse zone name from" -msgstr "Мережа IP для створення зворотних назв зони" - -msgid "Active zone" -msgstr "Активна зона" - -msgid "Is zone active?" -msgstr "Чи є зона активною?" - -msgid "Zone forwarders" -msgstr "Переспрямовувачі зон" +"\n" +"Усі параметри слід додавати окремо. Перевірки коректності щодо обробки\n" +"параметра у sudo або коректності формату не виконуватиметься. Також слід\n" +"окремо встановлювати значення змінних середовища. Наприклад,\n" +"env_keep=\"ЩОСЬ ДЕСЬ\" у sudoers має бути представлено як\n" +"--sudooption env_keep=ЩОСЬ --sudooption env_keep+=ДЕСЬ.\n" msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" +"\n" +"Entitlements\n" +"\n" +"Manage entitlements for client machines\n" +"\n" +"Entitlements can be managed either by registering with an entitlement\n" +"server with a username and password or by manually importing entitlement\n" +"certificates. An entitlement certificate contains embedded information\n" +"such as the product being entitled, the quantity and the validity dates.\n" +"\n" +"An entitlement server manages the number of client entitlements available.\n" +"To mark these entitlements as used by the IPA server you provide a quantity\n" +"and they are marked as consumed on the entitlement server.\n" +"\n" +" Register with an entitlement server:\n" +" ipa entitle-register consumer\n" +"\n" +" Import an entitlement certificate:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Display current entitlements:\n" +" ipa entitle-status\n" +"\n" +" Retrieve details on entitlement certificates:\n" +" ipa entitle-get\n" +"\n" +" Consume some entitlements from the entitlement server:\n" +" ipa entitle-consume 50\n" +"\n" +"The registration ID is a Unique Identifier (UUID). This ID will be\n" +"IMPORTED if you have used entitle-import.\n" +"\n" +"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" msgstr "" -"Переспрямовувачі для окремої зони. Можна вказати нетиповий порт для кожного " -"переспрямовувача у стандартному форматі: «IP_АДРЕСА port ПОРТ»" +"\n" +"Іменування\n" +"\n" +"Керування іменуванням для клієнтських комп’ютерів\n" +"\n" +"Іменуванням можна керувати або шляхом реєстрації на сервері іменування\n" +"з визначенням імені користувача і пароля, або вручну, імпортуванням " +"сертифікатів\n" +"іменування. Сертифікат іменування містить вбудовані дані, зокрема те, як\n" +"слід іменувати продукт, щодо кількості та дат чинності.\n" +"\n" +"Сервер іменування керує кількістю доступних іменувань клієнтів.\n" +"Для позначення іменувань як таких, що використовуються сервером IPA, ви " +"надаєте\n" +"кількість, а система позначає їх як використані на сервері іменування.\n" +"\n" +" Зареєструватися на сервері іменування:\n" +" ipa entitle-register consumer\n" +"\n" +" Імпортувати сертифікат іменування:\n" +" ipa entitle-import /home/user/ipaclient.pem\n" +"\n" +" Показати поточні іменування:\n" +" ipa entitle-status\n" +"\n" +" Отримати подробиці щодо сертифікатів іменування:\n" +" ipa entitle-get\n" +"\n" +" Вжити деякі іменування із сервера іменувань:\n" +" ipa entitle-consume 50\n" +"\n" +"Реєстраційним ідентифікатором є унікальний ідентифікатор (UUID). Цей " +"ідентифікатор\n" +"буде ІМПОРТОВАНО, якщо ви скористалися entitle-import.\n" +"\n" +"Зміни у /etc/rhsm/rhsm.conf для набуття чинності потребуватимуть перезапуску " +"служби httpd.\n" msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." +"\n" +"External Identity Provider Servers\n" msgstr "" -"Умовні правила переспрямування для окремої зони. Встановіть значення «none» " -"для вимикання переспрямовувача загального рівня для цієї зони. Якщо ви " -"встановите це значення, умовні переспрямовувачі зони не братимуться до уваги." - -msgid "Record name" -msgstr "Назва запису" - -msgid "Time to live" -msgstr "Строк дії" - -msgid "Records" -msgstr "Записи" - -msgid "Record type" -msgstr "Тип запису" - -msgid "Record data" -msgstr "Дані запису" - -msgid "A record" -msgstr "запис A" - -msgid "Raw A records" -msgstr "Прості записи A" - -msgid "A IP Address" -msgstr "IP-адреса A" - -msgid "IP Address" -msgstr "IP-адреса" - -msgid "A Create reverse" -msgstr "Створити зворотний A" - -msgid "Create reverse record for this IP Address" -msgstr "Створити зворотний запис для цієї IP-адреси" - -msgid "AAAA record" -msgstr "запис AAAA" - -msgid "Raw AAAA records" -msgstr "Прості записи AAAA" - -msgid "AAAA IP Address" -msgstr "IP-адреса AAAA" - -msgid "AAAA Create reverse" -msgstr "Створити зворотний запис AAAA" - -msgid "A6 record" -msgstr "Запис A6" - -msgid "Raw A6 records" -msgstr "Прості записи A6" - -msgid "A6 Record data" -msgstr "Дані запису A6" - -msgid "AFSDB record" -msgstr "Запис AFSDB" - -msgid "Raw AFSDB records" -msgstr "Прості записи AFSDB" - -msgid "AFSDB Subtype" -msgstr "Підтип AFSDB" - -msgid "Subtype" -msgstr "Підтип" - -msgid "AFSDB Hostname" -msgstr "Назва вузла AFSDB" - -msgid "Hostname" -msgstr "Назва вузла" - -msgid "APL record" -msgstr "запис APL" - -msgid "Raw APL records" -msgstr "Прості записи APL" - -msgid "CERT record" -msgstr "запис CERT" - -msgid "Raw CERT records" -msgstr "Прості записи CERT" - -msgid "CERT Certificate Type" -msgstr "Тип сертифіката CERT" - -msgid "Certificate Type" -msgstr "Тип сертифіката" - -msgid "CERT Key Tag" -msgstr "Мітка ключа CERT" - -msgid "Key Tag" -msgstr "Мітка ключа" - -msgid "CERT Algorithm" -msgstr "Алгоритм CERT" - -msgid "Algorithm" -msgstr "Алгоритм" - -msgid "CERT Certificate/CRL" -msgstr "Сертифікат або CRL CERT" - -msgid "Certificate/CRL" -msgstr "Сертифікат/CRL" - -msgid "CNAME record" -msgstr "запис CNAME" - -msgid "Raw CNAME records" -msgstr "Прості записи CNAME" - -msgid "CNAME Hostname" -msgstr "Назва вузла CNAME" - -msgid "A hostname which this alias hostname points to" -msgstr "Назва вузла на яку вказує цей псевдонім вузла" - -msgid "DHCID record" -msgstr "запис DHCID" - -msgid "Raw DHCID records" -msgstr "Прості записи DHCID" - -msgid "DLV record" -msgstr "Запис DLV" - -msgid "Raw DLV records" -msgstr "Прості записи DLV" - -msgid "DLV Key Tag" -msgstr "Мітка ключа DLV" - -msgid "DLV Algorithm" -msgstr "Алгоритм DLV" - -msgid "DLV Digest Type" -msgstr "Тип контрольної суми DLV" - -msgid "Digest Type" -msgstr "Тип контрольної суми" - -msgid "DLV Digest" -msgstr "Контрольна сума DLV" - -msgid "Digest" -msgstr "Контрольна сума" - -msgid "DNAME record" -msgstr "Запис DNAME" - -msgid "Raw DNAME records" -msgstr "Прості записи DNAME" - -msgid "DNAME Target" -msgstr "Ціль DNAME" - -msgid "Target" -msgstr "Ціль" - -msgid "DNSKEY record" -msgstr "Запис DNSKEY" - -msgid "Raw DNSKEY records" -msgstr "Прості записи DNSKEY" - -msgid "DS record" -msgstr "Запис DS" - -msgid "Raw DS records" -msgstr "Прості записи DS" - -msgid "DS Key Tag" -msgstr "Мітка ключа DS" - -msgid "DS Algorithm" -msgstr "Алгоритм DS" - -msgid "DS Digest Type" -msgstr "Тип контрольної суми DS" - -msgid "DS Digest" -msgstr "Контрольна сума DS" - -msgid "HIP record" -msgstr "Запис HIP" - -msgid "Raw HIP records" -msgstr "Прості записи HIP" - -msgid "IPSECKEY record" -msgstr "Запис IPSECKEY" - -msgid "Raw IPSECKEY records" -msgstr "Прості записи IPSECKEY" - -msgid "KEY record" -msgstr "Запис KEY" - -msgid "Raw KEY records" -msgstr "Прості записи KEY" - -msgid "KX record" -msgstr "Запис KX" - -msgid "Raw KX records" -msgstr "Прості записи KX" - -msgid "KX Preference" -msgstr "Пріоритетність KX" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "" -"Пріоритет цього обмінника. Записи з меншим значенням мають вищий пріоритет." - -msgid "KX Exchanger" -msgstr "Обмінник KX" - -msgid "A host willing to act as a key exchanger" -msgstr "Вузол, який може працювати як обмінник ключів" - -msgid "LOC record" -msgstr "Запис LOC" - -msgid "Raw LOC records" -msgstr "Прості записи LOC" - -msgid "LOC Degrees Latitude" -msgstr "Градуси широти LOC" - -msgid "Degrees Latitude" -msgstr "Градуси широти" - -msgid "LOC Minutes Latitude" -msgstr "Мінути широти LOC" - -msgid "Minutes Latitude" -msgstr "Мінути широти" - -msgid "LOC Seconds Latitude" -msgstr "Секунди широти LOC" - -msgid "Seconds Latitude" -msgstr "Секунди широти" - -msgid "LOC Direction Latitude" -msgstr "Півкуля широти LOC" - -msgid "Direction Latitude" -msgstr "Півкуля широти" - -msgid "LOC Degrees Longitude" -msgstr "Градуси довготи LOC" - -msgid "Degrees Longitude" -msgstr "Градуси довготи" - -msgid "LOC Minutes Longitude" -msgstr "Мінути довготи LOC" - -msgid "Minutes Longitude" -msgstr "Мінути довготи" - -msgid "LOC Seconds Longitude" -msgstr "Секунди довготи LOC" - -msgid "Seconds Longitude" -msgstr "Секунди довготи" - -msgid "LOC Direction Longitude" -msgstr "Півкуля довготи LOC" - -msgid "Direction Longitude" -msgstr "Півкуля довготи" - -msgid "LOC Altitude" -msgstr "Висота LOC" - -msgid "Altitude" -msgstr "Висота" - -msgid "LOC Size" -msgstr "Розмір LOC" - -msgid "Size" -msgstr "Розмір" - -msgid "LOC Horizontal Precision" -msgstr "Точність за горизонталлю LOC" - -msgid "Horizontal Precision" -msgstr "Точність за горизонталлю" - -msgid "LOC Vertical Precision" -msgstr "Точність за вертикаллю LOC" - -msgid "Vertical Precision" -msgstr "Точність за вертикаллю" - -msgid "MX record" -msgstr "Запис MX" - -msgid "Raw MX records" -msgstr "Прості записи MX" - -msgid "MX Preference" -msgstr "Пріоритетність MX" - -msgid "MX Exchanger" -msgstr "Обмінник MX" - -msgid "A host willing to act as a mail exchanger" -msgstr "Вузол, який може працювати як обмінник поштовими даними" - -msgid "NAPTR record" -msgstr "Запис NAPTR" - -msgid "Raw NAPTR records" -msgstr "Прості записи NAPTR" - -msgid "NAPTR Order" -msgstr "Порядок NAPTR" - -msgid "Order" -msgstr "Порядок" - -msgid "NAPTR Preference" -msgstr "Пріоритетність NAPTR" - -msgid "Preference" -msgstr "Пріоритет" - -msgid "NAPTR Flags" -msgstr "Прапорці NAPTR" - -msgid "Flags" -msgstr "Прапорці" - -msgid "NAPTR Service" -msgstr "Служба NAPTR" - -msgid "Service" -msgstr "Служба" - -msgid "NAPTR Regular Expression" -msgstr "Формальний вираз NAPTR" - -msgid "Regular Expression" -msgstr "Формальний вираз" - -msgid "NAPTR Replacement" -msgstr "Замінник NAPTR" - -msgid "Replacement" -msgstr "Заміна" - -msgid "NS record" -msgstr "Запис NS" - -msgid "Raw NS records" -msgstr "Прості записи NS" - -msgid "NS Hostname" -msgstr "Назва вузла NS" - -msgid "NSEC record" -msgstr "запис NSEC" - -msgid "Raw NSEC records" -msgstr "Прості записи NSEC" - -msgid "NSEC3 record" -msgstr "Запис NSEC3" - -msgid "Raw NSEC3 records" -msgstr "Прості записи NSEC3" - -msgid "PTR record" -msgstr "Запис PTR" - -msgid "Raw PTR records" -msgstr "Прості записи PTR" - -msgid "PTR Hostname" -msgstr "Назва вузла PTR" - -msgid "The hostname this reverse record points to" -msgstr "Назва вузла, на яку вказує цей зворотний запис" - -msgid "RRSIG record" -msgstr "Запис RRSIG" - -msgid "Raw RRSIG records" -msgstr "Прості записи RRSIG" - -msgid "RP record" -msgstr "Запис RP" - -msgid "Raw RP records" -msgstr "Прості записи RP" - -msgid "SIG record" -msgstr "Запис SIG" - -msgid "Raw SIG records" -msgstr "Прості записи SIG" - -msgid "SPF record" -msgstr "Запис SPF" - -msgid "Raw SPF records" -msgstr "Прості записи SPF" - -msgid "SRV record" -msgstr "Запис SRV" - -msgid "Raw SRV records" -msgstr "Прості записи SRV" - -msgid "SRV Priority" -msgstr "Пріоритетність SRV" - -msgid "Priority" -msgstr "Пріоритет" - -msgid "SRV Weight" -msgstr "Вага SRV" - -msgid "Weight" -msgstr "Вага" - -msgid "SRV Port" -msgstr "Порт SRV" - -msgid "Port" -msgstr "Порт" - -msgid "SRV Target" -msgstr "Ціль SRV" +"\n" +"Сервери надавача зовнішніх профілів\n" msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" +"\n" +"Get information about installed IPA servers.\n" msgstr "" -"Доменна назва вузла призначення або '.', якщо служба є явно недоступною на " -"цьому домені" - -msgid "SSHFP record" -msgstr "Запис SSHFP" - -msgid "Raw SSHFP records" -msgstr "Прості записи SSHFP" - -msgid "SSHFP Algorithm" -msgstr "Алгоритм SSHFP" - -msgid "SSHFP Fingerprint Type" -msgstr "Тип відбитка SSHFP" - -msgid "Fingerprint Type" -msgstr "Тип відбитка" - -msgid "SSHFP Fingerprint" -msgstr "Відбиток SSHFP" - -msgid "Fingerprint" -msgstr "Відбиток" - -msgid "TA record" -msgstr "Запис TA" - -msgid "Raw TA records" -msgstr "Прості записи TA" - -msgid "TLSA record" -msgstr "Запис TLSA" - -msgid "Raw TLSA records" -msgstr "Прості записи TLSA" - -msgid "TLSA Certificate Usage" -msgstr "Використання сертифіката TLSA" - -msgid "Certificate Usage" -msgstr "Використання сертифіката" - -msgid "TLSA Selector" -msgstr "Селектор TLSA" - -msgid "Selector" -msgstr "Селектор" - -msgid "TLSA Matching Type" -msgstr "Відповідний тип TLSA" - -msgid "Matching Type" -msgstr "Відповідний тип" - -msgid "TLSA Certificate Association Data" -msgstr "Дані прив’язки сертифікатів TLSA" - -msgid "Certificate Association Data" -msgstr "Дані прив’язки сертифікатів" - -msgid "TKEY record" -msgstr "Запис TKEY" - -msgid "Raw TKEY records" -msgstr "Прості записи TKEY" - -msgid "TSIG record" -msgstr "Запис TSIG" - -msgid "Raw TSIG records" -msgstr "Прості записи TSIG" - -msgid "TXT record" -msgstr "Запис TXT" - -msgid "Raw TXT records" -msgstr "Прості записи TXT" - -msgid "TXT Text Data" -msgstr "Текстові дані TXT" - -msgid "Text Data" -msgstr "Текстові дані" - -msgid "Authoritative nameserver" -msgstr "Основний сервер назв" - -msgid "Authoritative nameserver domain name" -msgstr "Назва домену основного сервера назв" - -msgid "Administrator e-mail address" -msgstr "Адреса електронної пошти адміністратора" - -msgid "SOA serial" -msgstr "Серійний номер SOA" - -msgid "SOA record serial number" -msgstr "Серійний номер запису SOA" - -msgid "SOA refresh" -msgstr "Освіження SOA" - -msgid "SOA record refresh time" -msgstr "Час оновлення запису SOA" - -msgid "SOA retry" -msgstr "Повторення спроби SOA" - -msgid "SOA record retry time" -msgstr "Проміжок між повторними спробами для запису SOA" - -msgid "SOA expire" -msgstr "Застарівання SOA" - -msgid "SOA record expire time" -msgstr "Час завершення строку дії запису SOA" - -msgid "SOA minimum" -msgstr "Мінімальний SOA" - -msgid "How long should negative responses be cached" -msgstr "Тривалість кешування відмов" - -msgid "Time to live for records at zone apex" -msgstr "Час життя записів у апексі зони" - -msgid "BIND update policy" -msgstr "Правила оновлення BIND" - -msgid "Dynamic update" -msgstr "Динамічне оновлення" - -msgid "Allow dynamic updates." -msgstr "Дозволити динамічні оновлення." - -msgid "Allow query" -msgstr "Дозволити запит" +"\n" +"Отримати дані щодо встановлених серверів IPA.\n" msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" msgstr "" -"Список відокремлених крапкою з комою записів IP-адрес або мереж, яким надано " -"доступ до надсилання запитів" - -msgid "Allow transfer" -msgstr "Дозволити перенесення" +"\n" +"Отримати стан ролей (сервер DNS, CA тощо), що надається основними серверами " +"IPA.\n" msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" msgstr "" -"Список відокремлених крапкою з комою записів IP-адрес або мереж, яким надано " -"доступ до перенесення зони" +"\n" +"Міжгрупове уповноваження\n" +"\n" +"Права доступу може бути точно налаштовано. Правила керування доступом\n" +"або інструкції (ACI), надання дозволу на виконання певних завдань, зокрема\n" +"додавання користувача, внесення змін до групи тощо.\n" +"\n" +"Міжгрупові уповноваження надають учасникам однієї групи можливість\n" +"оновлювати набір атрибутів учасників іншої групи.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати правило уповноваження, яке надасть змогу керівникам (managers)\n" +" редагувати адреси співробітників:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Під час керування списком атрибутів слід включати всі атрибути списку\n" +" разом з вже створеними. Додавання до списку postalCode:\n" +" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Показ нашого оновленого правила:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Вилучення правила:\n" +" ipa delegation-del \"managers edit employees' street\"\n" msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" +"\n" +"Group to Group Delegation\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"Group to Group Delegations grants the members of one group to update a set\n" +"of attributes of members of another group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a delegation rule to allow managers to edit employee's addresses:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add postalCode to the list:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Display our updated rule:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Delete a rule:\n" +" ipa delegation-del \"managers edit employees' street\"\n" msgstr "" -"Дозволити у зоні синхронізацію прямих (A, AAAA) і зворотних (PTR) записів" - -msgid "Allow in-line DNSSEC signing" -msgstr "Дозволити вбудоване підписування DNSSEC" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "Дозволити вбудоване підписування DNSSEC записів у зоні" - -msgid "NSEC3PARAM record" -msgstr "Запис NSEC3PARAM" +"\n" +"Міжгрупове уповноваження\n" +"\n" +"Права доступу може бути точно налаштовано. Правила керування доступом\n" +"або інструкції (ACI), надання дозволу на виконання певних завдань, зокрема\n" +"додавання користувача, внесення змін до групи тощо.\n" +"\n" +"Міжгрупові уповноваження надають учасникам однієї групи можливість\n" +"оновлювати набір атрибутів учасників іншої групи.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати правило уповноваження, яке надасть змогу керівникам (managers)\n" +" редагувати адреси співробітників:\n" +" ipa delegation-add --attrs=street --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Під час керування списком атрибутів слід включати всі атрибути списку\n" +" разом з вже створеними. Додавання до списку postalCode:\n" +" ipa delegation-mod --attrs=street,postalCode --group=managers --" +"membergroup=employees \"managers edit employees' street\"\n" +"\n" +" Показ нашого оновленого правила:\n" +" ipa delegation-show \"managers edit employees' street\"\n" +"\n" +" Вилучення правила:\n" +" ipa delegation-del \"managers edit employees' street\"\n" msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" msgstr "" -"Запис NSEC3PARAM для зони у такому форматі: алгоритм_хешування прапорці " -"ітерації сіль" +"\n" +"Групи команд sudo\n" +"\n" +"Керування групами команд sudo.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати нову групу команд sudo:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Вилучити групу команд sudo:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Керування участю групи команд sudo, команди:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Керування участю групи команд sudo, команди:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Показ групи команд sudo:\n" +" ipa group-show localadmins\n" -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "Перевіряє, чи увімкнено на якомусь із серверів службу DNS." - -msgid "Resolve a host name in DNS." -msgstr "Визначити назву вузла у DNS." - -msgid "Modify global DNS configuration." -msgstr "Змінити загальні налаштування DNS." - -msgid "Show the current global DNS configuration." -msgstr "Показати поточні загальні налаштування DNS." - -msgid "Create new DNS forward zone." -msgstr "Створити зону переспрямовування DNS." - -msgid "Add a permission for per-forward zone access delegation." +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa sudocmdgroup-show admincmds\n" msgstr "" -"Додати право доступу до делегування доступу на основі окремих зон " -"переспрямовування." +"\n" +"Групи команд sudo\n" +"\n" +"Керування групами команд sudo.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати нову групу команд sudo:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Вилучити групу команд sudo:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Керування участю групи команд sudo, команди:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" +"vim admincmds\n" +"\n" +" Керування участю групи команд sudo, команди:\n" +" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Показ групи команд sudo:\n" +" ipa sudocmdgroup-show admincmds\n" -msgid "Permission value" -msgstr "Значення прав доступу" - -msgid "Delete DNS forward zone." -msgstr "Вилучити зону переспрямовування DNS." - -msgid "Disable DNS Forward Zone." -msgstr "Вимкнути зону переспрямовування DNS." - -msgid "Enable DNS Forward Zone." -msgstr "Увімкнути зону переспрямовування DNS." - -msgid "Search for DNS forward zones." -msgstr "Пошук зон переспрямовування DNS." - -msgid "Modify DNS forward zone." -msgstr "Змінити зону переспрямовування DNS." - -msgid "Remove a permission for per-forward zone access delegation." +msgid "" +"\n" +"Groups of Sudo Commands\n" +"\n" +"Manage groups of Sudo Commands.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new Sudo Command Group:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Remove a Sudo Command Group:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Manage Sudo Command Group membership, commands:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Show a Sudo Command Group:\n" +" ipa group-show localadmins\n" msgstr "" -"Вилучити права доступу до делегування доступу для окремих зон " -"переспрямовування." +"\n" +"Групи команд sudo\n" +"\n" +"Керування групами команд sudo.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати нову групу команд sudo:\n" +" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"\n" +" Вилучити групу команд sudo:\n" +" ipa sudocmdgroup-del admincmds\n" +"\n" +" Керування участю групи команд sudo, команди:\n" +" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " +"admincmds\n" +"\n" +" Керування участю групи команд sudo, команди:\n" +" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"\n" +" Показ групи команд sudo:\n" +" ipa group-show localadmins\n" -msgid "Display information about a DNS forward zone." -msgstr "Показ даних щодо зони переспрямовування DNS." - -msgid "Add new DNS resource record." -msgstr "Додати новий запис ресурсу DNS." - -msgid "Force" -msgstr "Примусово" - -msgid "force NS record creation even if its hostname is not in DNS" +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Add a member manager:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Remove a member manager\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" msgstr "" -"примусово створити запис сервера назв, навіть якщо відповідної назви вузла " -"немає у DNS" +"\n" +"Групи вузлів.\n" +"\n" +"Керування групами вузлів. Корисні для застосування керування\n" +"до декількох вузлів на основі заснованого на вузлах керування\n" +"доступом (Host-based Access Control або HBAC).\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" додавання нової групи вузлів:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Додавання нової групи вузлів:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Додавання учасників до групи вузлів з використанням виразу Bash у фігурних " +"дужках):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Додавання групи вузлів як учасника іншої групи вузлів:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Вилучення вузла з групи вузлів:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Показ списку групи вузлів:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Додавання керівника учасниками:\n" +" ipa hostgroup-add-member-manager --users=user1 baltimore\n" +"\n" +" Вилучення керівника учасниками\n" +" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" +"\n" +" Вилучення групи вузлів:\n" +" ipa hostgroup-del baltimore\n" -msgid "Structured" -msgstr "Структурована" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "Обробити всі записи DNS і повернути дані у структурованій формі" - -msgid "Delete DNS resource record." -msgstr "Вилучити запис ресурсу DNS." - -msgid "Delete all associated records" -msgstr "Вилучити всі пов’язані записи" - -msgid "Delete DNS record entry." -msgstr "Вилучити пункт запису DNS." - -msgid "Search for DNS resources." -msgstr "Шукати ресурси DNS." - -msgid "Modify a DNS resource record." -msgstr "Змінити запис ресурсу DNS." - -msgid "Rename the DNS resource record object" -msgstr "Перейменувати об’єкт запису ресурсу DNS" - -msgid "Display DNS resource." -msgstr "Показати ресурс DNS." - -msgid "Create new DNS zone (SOA record)." -msgstr "Створити зону DNS (запис SOA)." - -msgid "Force DNS zone creation even if nameserver is not resolvable." +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup (using Bash brace expansion):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" msgstr "" -"Примусово створити зону DNS, навіть якщо не вдається визначити адресу " -"сервера назв." +"\n" +"Групи вузлів.\n" +"\n" +"Керування групами вузлів. Корисні для застосування керування\n" +"до декількох вузлів на основі заснованого на вузлах керування\n" +"доступом (Host-based Access Control або HBAC).\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" додавання нової групи вузлів:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Додавання нової групи вузлів:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Додавання учасників до групи вузлів з використанням виразу Bash у фігурних " +"дужках):\n" +" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +"\n" +" Додавання групи вузлів як учасника іншої групи вузлів:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Вилучення вузла з групи вузлів:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Показ списку групи вузлів:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Вилучення групи вузлів:\n" +" ipa hostgroup-del baltimore\n" -msgid "Add a permission for per-zone access delegation." -msgstr "Додати права доступу до надання доступу до окремих зон." - -msgid "Delete DNS zone (SOA record)." -msgstr "Вилучити зону DNS (запис SOA)." - -msgid "Disable DNS Zone." -msgstr "Вимкнути зону DNS." - -msgid "Enable DNS Zone." -msgstr "Увімкнути зону DNS." - -msgid "Search for DNS zones (SOA records)." -msgstr "Пошук зон DNS (записів SOA)." - -msgid "Forward zones only" -msgstr "Лише прямі зони" - -msgid "Search for forward zones only" -msgstr "Шукати лише прямі зони" - -msgid "Modify DNS zone (SOA record)." -msgstr "Змінити зону DNS (запис SOA)." - -msgid "Force nameserver change even if nameserver not in DNS" +msgid "" +"\n" +"Groups of hosts.\n" +"\n" +"Manage groups of hosts. This is useful for applying access control to a\n" +"number of hosts by using Host-based Access Control.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new host group:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Add another new host group:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Add members to the hostgroup:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Add a hostgroup as a member of another hostgroup:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Remove a host from the hostgroup:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Display a host group:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Delete a hostgroup:\n" +" ipa hostgroup-del baltimore\n" msgstr "" -"Примусово змінити сервер назв, навіть якщо запису сервера назв немає у DNS" +"\n" +"Групи вузлів.\n" +"\n" +"Керування групами вузлів. Корисні для застосування керування\n" +"до декількох вузлів на основі заснованого на вузлах керування\n" +"доступом (Host-based Access Control або HBAC).\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" додавання нової групи вузлів:\n" +" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +"\n" +" Додавання нової групи вузлів:\n" +" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"\n" +" Додавання учасників до групи вузлів:\n" +" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" +"\n" +" Додавання групи вузлів як учасника іншої групи вузлів:\n" +" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"\n" +" Вилучення вузла з групи вузлів:\n" +" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"\n" +" Показ списку групи вузлів:\n" +" ipa hostgroup-show baltimore\n" +"\n" +" Вилучення групи вузлів:\n" +" ipa hostgroup-del baltimore\n" -msgid "Remove a permission for per-zone access delegation." -msgstr "Вилучити права доступу до надання доступу до окремих зон." +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users, groups, or services. By default, new groups are " +"POSIX\n" +"groups. You can add the --nonposix option to the group-add command to mark " +"a\n" +"new group as non-POSIX. You can use the --posix argument with the group-mod\n" +"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " +"be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"Groups members can be users, other groups, and Kerberos services. In POSIX\n" +"environments only users will be visible as group members, but nested groups " +"and\n" +"groups of services can be used for IPA management purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" To add Kerberos services to the \"printer admins\" group:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"Group membership managers are users or groups that can add members to a\n" +"group or remove members from a group.\n" +"\n" +" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Revoke membership management rights for user \"test2\" from " +"\"localadmins\":\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\\name, or name@domain format. IPA will " +"attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" +"\n" +"Групи користувачів\n" +"\n" +"Керування групами користувачів, групами або службами. Типово нові групи є " +"групами POSIX. Ви можете\n" +"додати параметр --nonposix до команди group-add з метою позначення нової\n" +"групи як групи не-POSIX. Ви можете скористатися аргументом --posix команди " +"group-mod\n" +"для перетворення групи не-POSIX на групу POSIX. Групи POSIX не можна\n" +"перетворювати на групи не-POSIX.\n" +"\n" +"Кожна група повинна мати опис.\n" +"\n" +"Групи POSIX повинні мати номер ідентифікатора групи (GID). Передбачено " +"підтримку\n" +"зміни GID, але ця зміна може вплинути на права доступу до ваших файлів. Для\n" +"створення групи слід вказати GID. IPA створить одну групу автоматично, якщо\n" +"таку не вказано.\n" +"\n" +"\n" +"Учасниками груп можуть бути користувачі, інші групи і служби Kerberos. У\n" +"середовищах POSIX як учасників груп можна бути бачити лише користувачів, " +"але\n" +"для керування у межах IPA може бути використано вкладені групи і групи\n" +"служб.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додавання нової групи:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Додавання нової групи не-POSIX:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Перетворити групу не-POSIX на групу posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Додати нову групу POSIX з вказаним ідентифікатором групи:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Додати нову групу POSIX і надати IPA змогу призначити ідентифікатор:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Вилучення групи:\n" +" ipa group-del unixadmins\n" +"\n" +" Додати групу \"remoteadmins\" до групи \"localadmins\":\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Додати список користувачів до групи \"localadmins\":\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Додавання служб Kerberos до групи «printer admins»:\n" +" ipa group-add-member --services=CUPS/some.host printeradmins\n" +"\n" +" Вилучення користувача з групи \"localadmins\":\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Показати інформацію щодо іменованої групи.\n" +" ipa group-show localadmins\n" +"\n" +"Керівниками учасників груп є користувачі або групи, які можуть додавати " +"учасників\n" +"до групи або вилучати учасників з групи.\n" +"\n" +" Дозволити користувачу «test2» додавати або вилучати учасників з групи " +"«localadmins»:\n" +" ipa group-add-member-manager --users=test2 localadmins\n" +"\n" +" Відкликати права керування учасниками для користувача «test2» з " +"«localadmins»:\n" +" ipa group-remove-member-manager --users=test2 localadmins\n" +"\n" +"Участь із зовнішніх груп створено для того, щоб уможливити прив’язку\n" +"користувачів з довірених доменів до локальних груп POSIX з метою\n" +"використання ресурсів IPA. Зовнішніх користувачів слід додавати до груп\n" +"які спеціально створено як зовнішні або групи не-POSIX. Таку групу\n" +"слід пізніше включити до одної з груп POSIX.\n" +"\n" +"У поточній версії учасник зовнішньої групи є ідентифікатором безпеки\n" +"(Security Identifier або SID) визначеним довіреним доменом. Додавання\n" +"учасників зовнішньої групи можна виконати у форматі SID, DOM\\ім’я або\n" +"ім’я@домен. IPA намагатиметься визначити за переданим іменем SID за\n" +"допомогою використання Загального каталогу довіреного домену.\n" +"\n" +"Приклад:\n" +"\n" +"1. Створити групу для прив’язки адміністраторів довіреного домену до\n" +"відповідної локальної групи POSIX:\n" +"\n" +" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc='<домен.ad> admins' ad_admins\n" +"\n" +"2. Додати ідентифікатор Domain Admins домену <домен.ad> до\n" +"групи ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Дозволити прив’язку групи ad_admins_external до групи POSIX ad_admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Показати список зовнішніх учасників групи ad_admins_external, щоб " +"визначити\n" +"їхні SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" -msgid "Display information about a DNS zone (SOA record)." -msgstr "Показати дані щодо зони DNS (запису SOA)." +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add a list of users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" +"\n" +"Групи користувачів\n" +"\n" +"Керування групами користувачів. Типово нові групи є групами POSIX. Ви " +"можете\n" +"додати параметр --nonposix до команди group-add з метою позначення нової\n" +"групи як групи не-POSIX. Ви можете скористатися аргументом --posix команди " +"group-mod\n" +"для перетворення групи не-POSIX на групу POSIX. Групи POSIX не можна\n" +"перетворювати на групи не-POSIX.\n" +"\n" +"Кожна група повинна мати опис.\n" +"\n" +"Групи POSIX повинні мати номер ідентифікатора групи (GID). Передбачено " +"підтримку\n" +"зміни GID, але ця зміна може вплинути на права доступу до ваших файлів. Для\n" +"створення групи слід вказати GID. IPA створить одну групу автоматично, якщо\n" +"таку не вказано.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додавання нової групи:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Додавання нової групи не-POSIX:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Перетворити групу не-POSIX на групу posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Додати нову групу POSIX з вказаним ідентифікатором групи:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Додати нову групу POSIX і надати IPA змогу призначити ідентифікатор:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Вилучення групи:\n" +" ipa group-del unixadmins\n" +"\n" +" Додати групу \"remoteadmins\" до групи \"localadmins\":\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Додати список користувачів до групи \"localadmins\":\n" +" ipa group-add-member --users=test1,test2 localadmins\n" +"\n" +" Вилучення користувача з групи \"localadmins\":\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Показати інформацію щодо іменованої групи.\n" +" ipa group-show localadmins\n" +"\n" +"Участь із зовнішніх груп створено для того, щоб уможливити прив’язку\n" +"користувачів з довірених доменів до локальних груп POSIX з метою\n" +"використання ресурсів IPA. Зовнішніх користувачів слід додавати до груп\n" +"які спеціально створено як зовнішні або групи не-POSIX. Таку групу\n" +"слід пізніше включити до одної з груп POSIX.\n" +"\n" +"У поточній версії учасник зовнішньої групи є ідентифікатором безпеки\n" +"(Security Identifier або SID) визначеним довіреним доменом. Додавання\n" +"учасників зовнішньої групи можна виконати у форматі SID, DOM\\ім’я або\n" +"ім’я@домен. IPA намагатиметься визначити за переданим іменем SID за\n" +"допомогою використання Загального каталогу довіреного домену.\n" +"\n" +"Приклад:\n" +"\n" +"1. Створити групу для прив’язки адміністраторів довіреного домену до\n" +"відповідної локальної групи POSIX:\n" +"\n" +" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc='<домен.ad> admins' ad_admins\n" +"\n" +"2. Додати ідентифікатор Domain Admins домену <домен.ad> до\n" +"групи ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Дозволити прив’язку групи ad_admins_external до групи POSIX ad_admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Показати список зовнішніх учасників групи ad_admins_external, щоб " +"визначити\n" +"їхні SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" + +msgid "" +"\n" +"Groups of users\n" +"\n" +"Manage groups of users. By default, new groups are POSIX groups. You\n" +"can add the --nonposix option to the group-add command to mark a new group\n" +"as non-POSIX. You can use the --posix argument with the group-mod command\n" +"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" +"converted to non-POSIX groups.\n" +"\n" +"Every group must have a description.\n" +"\n" +"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" +"supported but can have an impact on your file permissions. It is not " +"necessary\n" +"to supply a GID when creating a group. IPA will generate one automatically\n" +"if it is not provided.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new group:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Add a new non-POSIX group:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Convert a non-POSIX group to posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Add a new POSIX group with a specific Group ID number:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Add a new POSIX group and let IPA assign a Group ID number:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Remove a group:\n" +" ipa group-del unixadmins\n" +"\n" +" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Add multiple users to the \"localadmins\" group:\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Remove a user from the \"localadmins\" group:\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Display information about a named group.\n" +" ipa group-show localadmins\n" +"\n" +"External group membership is designed to allow users from trusted domains\n" +"to be mapped to local POSIX groups in order to actually use IPA resources.\n" +"External members should be added to groups that specifically created as\n" +"external and non-POSIX. Such group later should be included into one of " +"POSIX\n" +"groups.\n" +"\n" +"An external group member is currently a Security Identifier (SID) as defined " +"by\n" +"the trusted domain. When adding external group members, it is possible to\n" +"specify them in either SID, or DOM\n" +"ame, or name@domain format. IPA will attempt\n" +"to resolve passed name to SID with the use of Global Catalog of the trusted " +"domain.\n" +"\n" +"Example:\n" +"\n" +"1. Create group for the trusted domain admins' mapping and their local POSIX " +"group:\n" +"\n" +" ipa group-add --desc=' admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc=' admins' ad_admins\n" +"\n" +"2. Add security identifier of Domain Admins of the to the " +"ad_admins_external\n" +" group:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Allow members of ad_admins_external group to be associated with ad_admins " +"POSIX group:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. List members of external members of ad_admins_external group to see their " +"SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" +msgstr "" +"\n" +"Групи користувачів\n" +"\n" +"Керування групами користувачів. Типово нові групи є групами POSIX. Ви " +"можете\n" +"додати параметр --nonposix до команди group-add з метою позначення нової\n" +"групи як групи не-POSIX. Ви можете скористатися аргументом --posix команди " +"group-mod\n" +"для перетворення групи не-POSIX на групу POSIX. Групи POSIX не можна\n" +"перетворювати на групи не-POSIX.\n" +"\n" +"Кожна група повинна мати опис.\n" +"\n" +"Групи POSIX повинні мати номер ідентифікатора групи (GID). Передбачено " +"підтримку\n" +"зміни GID, але ця зміна може вплинути на права доступу до ваших файлів. Для\n" +"створення групи слід вказати GID. IPA створить одну групу автоматично, якщо\n" +"таку не вказано.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додавання нової групи:\n" +" ipa group-add --desc='local administrators' localadmins\n" +"\n" +" Додавання нової групи не-POSIX:\n" +" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" +"\n" +" Перетворити групу не-POSIX на групу posix:\n" +" ipa group-mod --posix remoteadmins\n" +"\n" +" Додати нову групу POSIX з вказаним ідентифікатором групи:\n" +" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" +"\n" +" Додати нову групу POSIX і надати IPA змогу призначити ідентифікатор:\n" +" ipa group-add --desc='printer admins' printeradmins\n" +"\n" +" Вилучення групи:\n" +" ipa group-del unixadmins\n" +"\n" +" Додати групу \"remoteadmins\" до групи \"localadmins\":\n" +" ipa group-add-member --groups=remoteadmins localadmins\n" +"\n" +" Додати список користувачів до групи \"localadmins\":\n" +" ipa group-add-member --users=test1 --users=test2 localadmins\n" +"\n" +" Вилучення користувача з групи \"localadmins\":\n" +" ipa group-remove-member --users=test2 localadmins\n" +"\n" +" Показати інформацію щодо іменованої групи.\n" +" ipa group-show localadmins\n" +"\n" +"Участь із зовнішніх груп створено для того, щоб уможливити прив’язку\n" +"користувачів з довірених доменів до локальних груп POSIX з метою\n" +"використання ресурсів IPA. Зовнішніх користувачів слід додавати до груп\n" +"які спеціально створено як зовнішні або групи не-POSIX. Таку групу\n" +"слід пізніше включити до одної з груп POSIX.\n" +"\n" +"У поточній версії учасник зовнішньої групи є ідентифікатором безпеки\n" +"(Security Identifier або SID) визначеним довіреним доменом. Додавання\n" +"учасників зовнішньої групи можна виконати у форматі SID, DOM\\ім’я або\n" +"ім’я@домен. IPA намагатиметься визначити за переданим іменем SID за\n" +"допомогою використання Загального каталогу довіреного домену.\n" +"\n" +"Приклад:\n" +"\n" +"1. Створити групу для прив’язки адміністраторів довіреного домену до\n" +"відповідної локальної групи POSIX:\n" +"\n" +" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " +"--external\n" +" ipa group-add --desc='<домен.ad> admins' ad_admins\n" +"\n" +"2. Додати ідентифікатор Domain Admins домену <домен.ad> до\n" +"групи ad_admins_external:\n" +"\n" +" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" +"\n" +"3. Дозволити прив’язку групи ad_admins_external до групи POSIX ad_admins:\n" +"\n" +" ipa group-add-member ad_admins --groups ad_admins_external\n" +"\n" +"4. Показати список зовнішніх учасників групи ad_admins_external, щоб " +"визначити\n" +"їхні SIDs:\n" +"\n" +" ipa group-show ad_admins_external\n" msgid "" "\n" @@ -4445,215 +6719,282 @@ msgstr "" "\n" " ipa group-show ad_admins_external\n" -msgid "Group name" -msgstr "Назва групи" - -msgid "Group description" -msgstr "Опис групи" - -msgid "GID" -msgstr "GID" - -msgid "GID (use this option to set it manually)" -msgstr "GID (за допомогою цього параметра можна встановити значення вручну)" - -msgid "Member users" -msgstr "Користувачі «member»" - -msgid "Member groups" -msgstr "Групи «member»" - -msgid "Member of groups" -msgstr "Групи «member of»" - -msgid "Roles" -msgstr "Ролі" - -msgid "Member of netgroups" -msgstr "Мережеві групи «member of»" - -msgid "Member of Sudo rule" -msgstr "Правило Sudo «member of»" - -msgid "Member of HBAC rule" -msgstr "Правило HBAC «member of»" - -msgid "Indirect Member users" -msgstr "Опосередковані користувачі «member»" - -msgid "Indirect Member groups" -msgstr "Опосередковані групи «member»" - -msgid "Indirect Member of group" -msgstr "Опосередкована група «member of»" - -msgid "Indirect Member of netgroup" -msgstr "Опосередкована група «member of»" - -msgid "Indirect Member of role" -msgstr "Опосередкована роль «member of»" - -msgid "Indirect Member of Sudo rule" -msgstr "Опосередковане правило sudo «member of»" - -msgid "Indirect Member of HBAC rule" -msgstr "Опосередковане правило HBAC «member of»" - -msgid "Create a new group." -msgstr "Створити нову групу." - -msgid "Create as a non-POSIX group" -msgstr "Створити як групу, що не відповідає POSIX" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "Дозволити додавання зовнішніх учасників поза IPA з довірених доменів" - -msgid "Suppress processing of membership attributes." -msgstr "Придушити обробку атрибутів участі." - -msgid "Add members to a group." -msgstr "Додати учасників до групи." - -msgid "External member" -msgstr "Зовнішній учасник" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "Учасники довіреного домену у форматі ДОМЕН\\ім’я або ім’я@домен" - -msgid "member user" -msgstr "користувач учасника" - -msgid "users to add" -msgstr "користувачі для додавання" - -msgid "member group" -msgstr "група учасника" - -msgid "groups to add" -msgstr "групи для додавання" - -msgid "Members that could not be added" -msgstr "Учасники, записи яких не вдалося додати" - -msgid "Number of members added" -msgstr "Кількість доданих учасників" - -msgid "Delete group." -msgstr "Вилучити групу." - -msgid "Detach a managed group from a user." -msgstr "Від’єднати керовану групу від користувача." - -msgid "Search for groups." -msgstr "Шукати групи." - -msgid "search for private groups" -msgstr "шукати закриті групи" - -msgid "search for POSIX groups" -msgstr "шукати групи POSIX" +msgid "" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" +msgstr "" +"\n" +"Групи служб HBAC\n" +"\n" +"Групи служб HBAC можуть містити будь-яку кількість окремих служб\n" +"або «учасників». Кожна з груп повинна мати опис.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додавання нової групи служб HBAC:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Додавання учасників до групи служб HBAC:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Показ даних щодо вказаної групи:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Вилучення групи служб HBAC:\n" +" ipa hbacsvcgroup-del login\n" msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" +"\n" +"HBAC Service Groups\n" +"\n" +"HBAC service groups can contain any number of individual services,\n" +"or \"members\". Every group must have a description.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service group:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Add members to an HBAC service group:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" +"\n" +" Display information about a named group:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Add a new group to the \"login\" group:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Delete an HBAC service group:\n" +" ipa hbacsvcgroup-del login\n" msgstr "" -"шукати групи з підтримкою зовнішніх учасників поза IPA з довірених доменів" +"\n" +"Групи служб HBAC\n" +"\n" +"Групи служб HBAC можуть містити будь-яку кількість окремих служб\n" +"або «учасників». Кожна з груп повинна мати опис.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додавання нової групи служб HBAC:\n" +" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"\n" +" Додавання учасників до групи служб HBAC:\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" +"\n" +" Показ даних щодо вказаної групи:\n" +" ipa hbacsvcgroup-show login\n" +"\n" +" Додавання нової групи до групи «login»:\n" +" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" +"\n" +" Вилучення групи служб HBAC:\n" +" ipa hbacsvcgroup-del login\n" -msgid "search for non-POSIX groups" -msgstr "шукати групи, які не є групами POSIX" +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +msgstr "" +"\n" +"Служби HBAC\n" +"\n" +"Служби PAM, якими може керувати HBAC. Назва, використана тут, має\n" +"відповідати назві служби, з якою працює PAM.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати нову службу HBAC:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Змінити вже створену службу HBAC:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Шукати служби HBAC. У нашому прикладі буде повернуто два результати\n" +" службу FTP і щойно додану службу tftp:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Вилучення служби HBAC:\n" +" ipa hbacsvc-del tftp\n" -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "Результати мають містити лише атрибут основного ключа («group-name»)" +msgid "" +"\n" +"HBAC Services\n" +"\n" +"The PAM services that HBAC can control access to. The name used here\n" +"must match the service name that PAM is evaluating.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new HBAC service:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Modify an existing HBAC service:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Search for HBAC services. This example will return two results, the FTP\n" +" service and the newly-added tftp service:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Delete an HBAC service:\n" +" ipa hbacsvc-del tftp\n" +"\n" +msgstr "" +"\n" +"Служби HBAC\n" +"\n" +"Служби PAM, якими може керувати HBAC. Назва, використана тут, має\n" +"відповідати назві служби, з якою працює PAM.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати нову службу HBAC:\n" +" ipa hbacsvc-add tftp\n" +"\n" +" Змінити вже створену службу HBAC:\n" +" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"\n" +" Шукати служби HBAC. У нашому прикладі буде повернуто два результати\n" +" службу FTP і щойно додану службу tftp:\n" +" ipa hbacsvc-find ftp\n" +"\n" +" Вилучення служби HBAC:\n" +" ipa hbacsvc-del tftp\n" +"\n" -msgid "user" -msgstr "користувач" - -msgid "Search for groups with these member users." -msgstr "Шукати групи із вказаними користувачами-учасниками." - -msgid "Search for groups without these member users." -msgstr "Шукати групи без вказаних користувачів-учасників." - -msgid "group" -msgstr "група" - -msgid "Search for groups with these member groups." -msgstr "Шукати групи із вказаними групами-учасниками." - -msgid "Search for groups without these member groups." -msgstr "Шукати групи без вказаних груп-учасників." - -msgid "Search for groups with these member of groups." -msgstr "Шукати групи із вказаними групами участі." - -msgid "Search for groups without these member of groups." -msgstr "Шукати групи без вказаних груп участі." - -msgid "netgroup" -msgstr "мережева група" - -msgid "Search for groups with these member of netgroups." -msgstr "Шукати групи із вказаними мережевими групами участі." - -msgid "Search for groups without these member of netgroups." -msgstr "Шукати групи без вказаних мережевих груп участі." - -msgid "role" -msgstr "роль" - -msgid "Search for groups with these member of roles." -msgstr "Шукати групи із вказаними ролями участі." - -msgid "Search for groups without these member of roles." -msgstr "Шукати групи без вказаних ролей участі." - -msgid "HBAC rule" -msgstr "Правило HBAC" - -msgid "Search for groups with these member of HBAC rules." -msgstr "Шукати групи із цими правилами HBAC участі." - -msgid "Search for groups without these member of HBAC rules." -msgstr "Шукати групи без цих правил HBAC участі." - -msgid "sudo rule" -msgstr "правило sudo" - -msgid "Search for groups with these member of sudo rules." -msgstr "Шукати групи із цими правилами sudo участі." - -msgid "Search for groups without these member of sudo rules." -msgstr "Шукати групи без цих правил sudo участі." - -msgid "Modify a group." -msgstr "Змінити групу." - -msgid "change to a POSIX group" -msgstr "змінити на групу POSIX" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "змінити для підтримки зовнішніх учасників поза IPA з довірених доменів" - -msgid "Rename the group object" -msgstr "Перейменувати об’єкт групи" - -msgid "Remove members from a group." -msgstr "Вилучити учасників з групи." - -msgid "users to remove" -msgstr "користувачі, записи яких слід вилучити" - -msgid "groups to remove" -msgstr "групи для вилучення" - -msgid "Members that could not be removed" -msgstr "Учасники, записи яких не вдалося вилучити" - -msgid "Number of members removed" -msgstr "Кількість вилучених учасників" - -msgid "Display information about a named group." -msgstr "Показати дані щодо іменованої групи." +msgid "" +"\n" +"Host-based access control\n" +"\n" +"Control who can access what services on what hosts and from where. You\n" +"can use HBAC to control which users or groups on a source host can\n" +"access a service, or group of services, on a target host.\n" +"\n" +"You can also specify a category of users, target hosts, and source\n" +"hosts. This is currently limited to \"all\", but might be expanded in the\n" +"future.\n" +"\n" +"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" +"\n" +"The available services and groups of services are controlled by the\n" +"hbacsvc and hbacsvcgroup plug-ins respectively.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a rule, \"test1\", that grants all users access to the host " +"\"server\" from\n" +" anywhere:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Display the properties of a named HBAC rule:\n" +" ipa hbacrule-show test1\n" +"\n" +" Create a rule for a specific service. This lets the user john access\n" +" the sshd service on any machine from any machine:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Create a rule for a new service group. This lets the user john access\n" +" the FTP service on any machine from any machine:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Disable a named HBAC rule:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Remove a named HBAC rule:\n" +" ipa hbacrule-del allow_server\n" +msgstr "" +"\n" +"Керування доступом на основі вузлів\n" +"\n" +"Керуйте тим, хто, на яких вузлах і з яких вузлів зможе отримувати доступ\n" +"до певних служб. Ви можете скористатися HBAC для визначення\n" +"користувачів і груп на вузлі походження запиту зможе отримувати\n" +"доступ до певної служби або групи служб.\n" +"\n" +"Ви також можете визначити категорію користувачів та вузли призначення.\n" +"У поточній версії можливі варіанти\n" +"обмежено варіантом \"all\", але перелік варіантів може бути\n" +"розширено у майбутніх версіях.\n" +"\n" +"Вузли призначення та вузли походження у правилах HBAC мають бути\n" +"вузлами, керованими IPA.\n" +"\n" +"Доступними службами і групами служб є служби, керовані hbacsvc\n" +"та додатками hbacsvcgroup, відповідно.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Створення правила \"test1\", яке надає всім користувачам доступ\n" +" до вузла \"server\" звідусюди:\n" +" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" +" ipa hbacrule-add-host --hosts=server.example.com test1\n" +"\n" +" Показ властивостей вказаного правила HBAC:\n" +" ipa hbacrule-show test1\n" +"\n" +" Створення правила для певної служби. Це правило надасть користувачу john\n" +" доступ до служби sshd у будь-якій системі звідусіль:\n" +" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" +" ipa hbacrule-add-user --users=john john_sshd\n" +" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" +"\n" +" Створення правила для нової групи служб. Користувачу john\n" +" надається доступ до служби FTP у будь-якій системі звідусіль:\n" +" ipa hbacsvcgroup-add ftpers\n" +" ipa hbacsvc-add sftp\n" +" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" +" ipa hbacrule-add --type=allow --hostcat=all --srchostcat=all john_ftp\n" +" ipa hbacrule-add-user --users=john john_ftp\n" +" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" +"\n" +" Вимикання вказаного правила HBAC:\n" +" ipa hbacrule-disable test1\n" +"\n" +" Вилучення вказаного правила HBAC:\n" +" ipa hbacrule-del allow_server\n" msgid "" "\n" @@ -4674,8 +7015,8 @@ msgid "" "\n" "EXAMPLES:\n" "\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" +" Create a rule, \"test1\", that grants all users access to the host " +"\"server\" from\n" " anywhere:\n" " ipa hbacrule-add --usercat=all test1\n" " ipa hbacrule-add-host --hosts=server.example.com test1\n" @@ -4754,697 +7095,144 @@ msgstr "" " Вилучення вказаного правила HBAC:\n" " ipa hbacrule-del allow_server\n" -msgid "Rule name" -msgstr "Назва правила" - -msgid "Rule type" -msgstr "Тип правила" - -msgid "Rule type (allow)" -msgstr "Тип правила (allow)" - -msgid "User category" -msgstr "Категорія користувачів" - -msgid "User category the rule applies to" -msgstr "Категорія користувачів, до якої застосовується правило" - -msgid "Host category" -msgstr "Категорія вузлів" - -msgid "Host category the rule applies to" -msgstr "Категорія вузлів, до якої застосовується правило" - -msgid "Service category" -msgstr "Категорія служб" - -msgid "Service category the rule applies to" -msgstr "Категорія служб, до якої застосовується правило" - -msgid "Enabled" -msgstr "Увімкнено" - -msgid "User Groups" -msgstr "Групи користувачів" - -msgid "Host Groups" -msgstr "Групи вузлів" - -msgid "Services" -msgstr "Служби" - -msgid "Service Groups" -msgstr "Групи служб" - -msgid "External host" -msgstr "Зовнішній вузол" - -msgid "Create a new HBAC rule." -msgstr "Створити правило HBAC." - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "Додати вузли призначення та групи вузлів до правила HBAC." - -msgid "member host" -msgstr "вузол-учасник" - -msgid "hosts to add" -msgstr "вузли для додавання" - -msgid "member host group" -msgstr "група вузлів учасника" - -msgid "host groups to add" -msgstr "групи вузлів для додавання" - -msgid "Add services to an HBAC rule." -msgstr "Додати служби до правила HBAC." - -msgid "member HBAC service" -msgstr "служба HBAC учасника" - -msgid "HBAC services to add" -msgstr "служби HBAC для додавання" - -msgid "member HBAC service group" -msgstr "група служб учасника HBAC" - -msgid "HBAC service groups to add" -msgstr "група служб HBAC для додавання" - -msgid "Add users and groups to an HBAC rule." -msgstr "Додати користувачів та групи до правила HBAC." - -msgid "Delete an HBAC rule." -msgstr "Вилучити правило HBAC." - -msgid "Disable an HBAC rule." -msgstr "Вимкнути правило HBAC." - -msgid "Enable an HBAC rule." -msgstr "Увімкнути правило HBAC." - -msgid "Search for HBAC rules." -msgstr "Шукати правила HBAC." - -msgid "Modify an HBAC rule." -msgstr "Змінити правило HBAC." - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "Вилучити вузли призначення та групи вузлів з правила HBAC." - -msgid "hosts to remove" -msgstr "вузли для вилучення" - -msgid "host groups to remove" -msgstr "групи вузлів для вилучення" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "Вилучити служби та групи служб з правила HBAC." - -msgid "HBAC services to remove" -msgstr "служби HBAC для вилучення" - -msgid "HBAC service groups to remove" -msgstr "групи служб HBAC для вилучення" - -msgid "Remove users and groups from an HBAC rule." -msgstr "Вилучити користувачів і групи з правила HBAC." - -msgid "Display the properties of an HBAC rule." -msgstr "Показати властивості правила HBAC." +msgid "" +"\n" +"Hosts/Machines\n" +"\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +msgstr "" +"\n" +"Вузли/Комп’ютери\n" +"\n" +"Вузол — це окремий комп’ютер. Термін може використовуватися у декількох " +"контекстах:\n" +"- записи служб, пов’язані з певним вузлом\n" +"- вузол зберігає реєстраційні дані вузол/служба\n" +"- вузол можна використовувати у правилах Host-based Access Control (HBAC)\n" +"- для усіх зареєстрованих клієнтів створюється запис вузла\n" msgid "" "\n" -"HBAC Services\n" +"Hosts/Machines\n" "\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" +"A host represents a machine. It can be used in a number of contexts:\n" +"- service entries are associated with a host\n" +"- a host stores the host/ service principal\n" +"- a host can be used in Host-based Access Control (HBAC) rules\n" +"- every enrolled client generates a host entry\n" +"\n" +"ENROLLMENT:\n" +"\n" +"There are three enrollment scenarios when enrolling a new client:\n" +"\n" +"1. You are enrolling as a full administrator. The host entry may exist\n" +" or not. A full administrator is a member of the hostadmin role\n" +" or the admins group.\n" +"2. You are enrolling as a limited administrator. The host must already\n" +" exist. A limited administrator is a member a role with the\n" +" Host Enrollment privilege.\n" +"3. The host has been created with a one-time password.\n" +"\n" +"A host can only be enrolled once. If a client has enrolled and needs to\n" +"be re-enrolled, the host entry must be removed and re-created. Note that\n" +"re-creating the host entry will result in all services for the host being\n" +"removed, and all SSL certificates associated with those services being\n" +"revoked.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" +" Add a new host:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" "\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +" Delete a host:\n" +" ipa host-del test.example.com\n" "\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" +" Add a new host with a one-time password:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" "\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" +" Add a new host with a random one-time password:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" +"\n" +" Modify information about a host:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" +"\n" +" Remove SSH public keys of a host and update DNS to reflect this change:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" +"\n" +" Disable the host Kerberos key, SSL certificate and all of its services:\n" +" ipa host-disable test.example.com\n" +"\n" +" Add a host that can manage this host's keytab and certificate:\n" +" ipa host-add-managedby --hosts=test2 test\n" msgstr "" "\n" -"Служби HBAC\n" +"Вузли/Комп’ютери\n" "\n" -"Служби PAM, якими може керувати HBAC. Назва, використана тут, має\n" -"відповідати назві служби, з якою працює PAM.\n" +"Вузол — це окремий комп’ютер. Термін може використовуватися у декількох " +"контекстах:\n" +"- записи служб, пов’язані з певним вузлом\n" +"- вузол зберігає реєстраційні дані вузол/служба\n" +"- вузол можна використовувати у правилах Host-based Access Control (HBAC)\n" +"- для усіх зареєстрованих клієнтів створюється запис вузла\n" +"\n" +"РЕЄСТРАЦІЯ:\n" +"\n" +"Передбачено три сценарії реєстрації нових клієнтів:\n" +"\n" +"1. Ви реєструєтеся як повноцінний адміністратор. Запис вузла може існувати\n" +" або не існувати. Повноцінний адміністратор виконує роль hostadmin або є\n" +" учасником групи admins.\n" +"2. Ви реєструєтеся як адміністратор з обмеженими правами. Вузол вже має\n" +" існувати. Обмежений адміністратор виконує роль з привілеями\n" +" Host Enrollment.\n" +"3. Вузол було створено з одноразовим паролем.\n" +"\n" +"Вузлу можна надати роль лише один раз. Якщо клієнту вже надано роль і\n" +"роль слід змінити, запис вузла має бути вилучено і створено повторно.\n" +"Зауважте, що повторне створення запису вузла призведе до вилучення усіх\n" +"служб для вузла, а усі сертифікати SSL, пов’язані із цими службами\n" +"буде відкликано.\n" +"\n" +"Запис вузла може, якщо потрібно, містити дані щодо його розташування,\n" +"типу операційної системи тощо.\n" "\n" "ПРИКЛАДИ:\n" "\n" -" Додати нову службу HBAC:\n" -" ipa hbacsvc-add tftp\n" "\n" -" Змінити вже створену службу HBAC:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" +"Додати новий вузол:\n" +" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." +"com\n" "\n" -" Шукати служби HBAC. У нашому прикладі буде повернуто два результати\n" -" службу FTP і щойно додану службу tftp:\n" -" ipa hbacsvc-find ftp\n" +" Вилучити вузол:\n" +" ipa host-del test.example.com\n" "\n" -" Вилучення служби HBAC:\n" -" ipa hbacsvc-del tftp\n" - -msgid "Service name" -msgstr "Назва служби" - -msgid "HBAC service" -msgstr "Служба HBAC" - -msgid "HBAC service description" -msgstr "Опис служби HBAC" - -msgid "Member of HBAC service groups" -msgstr "Учасник груп служб HBAC" - -msgid "Add a new HBAC service." -msgstr "Додати нову службу HBAC." - -msgid "Delete an existing HBAC service." -msgstr "Вилучити вже створену службу HBAC." - -msgid "Search for HBAC services." -msgstr "Шукати служби HBAC." - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "Результати мають містити лише атрибут основного ключа («service»)" - -msgid "Modify an HBAC service." -msgstr "Змінити службу HBAC." - -msgid "Display information about an HBAC service." -msgstr "Показати дані щодо служби HBAC." - -msgid "" +" Додати новий вузол з одноразовим паролем:\n" +" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" "\n" -"HBAC Service Groups\n" +"Додати новий вузол з випадковим одноразовим паролем:\n" +" ipa host-add --os='Fedora 12' --random test.example.com\n" "\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" +" Змінити відомості щодо вузла:\n" +" ipa host-mod --os='Fedora 12' test.example.com\n" "\n" -"EXAMPLES:\n" +" Вилучити відкриті ключі SSH вузла і оновити DNS відповідно до внесених " +"змін:\n" +" ipa host-mod --sshpubkey= --updatedns test.example.com\n" "\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" +"Вимкнути ключ Kerberos вузла, сертифікат SSL та усі його служби:\n" +" ipa host-disable test.example.com\n" "\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" -"\n" -"Групи служб HBAC\n" -"\n" -"Групи служб HBAC можуть містити будь-яку кількість окремих служб\n" -"або «учасників». Кожна з груп повинна мати опис.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додавання нової групи служб HBAC:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Додавання учасників до групи служб HBAC:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Показ даних щодо вказаної групи:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Вилучення групи служб HBAC:\n" -" ipa hbacsvcgroup-del login\n" - -msgid "Service group name" -msgstr "Назва групи служб" - -msgid "HBAC service group description" -msgstr "Опис групи служб HBAC" - -msgid "Member HBAC service" -msgstr "Служба HBAC учасника" - -msgid "Add a new HBAC service group." -msgstr "Додати нову групу служб HBAC." - -msgid "Add members to an HBAC service group." -msgstr "Додати учасників до групи служб HBAC." - -msgid "Delete an HBAC service group." -msgstr "Вилучити групу служб HBAC." - -msgid "Search for an HBAC service group." -msgstr "Шукати групу служб HBAC." - -msgid "Modify an HBAC service group." -msgstr "Змінити групу служб HBAC." - -msgid "Remove members from an HBAC service group." -msgstr "Вилучити учасників з групи служб HBAC." - -msgid "Display information about an HBAC service group." -msgstr "Показати дані щодо групи служб HBAC." - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" -"\n" -"Імітація використання керування доступом на основі вузлів (HBAC)\n" -"\n" -"Правила HBAC керують тим, хто може отримувати доступ до певних служб на\n" -"певних вузлах.\n" -"Ви можете скористатися HBAC для керування тим, які користувачі або групи\n" -"на початковому вузлі можуть отримувати доступ до служби або групи служб\n" -"на вузлі призначення\n" -"\n" -"Оскільки застосування правил HBAC передбачає використання робочого\n" -"середовища, це додаток призначено для імітації обробки правил HBAC без\n" -"доступу до реального середовища\n" -"\n" -" Перевірити відповідність користувача з початкового вузла до служби на " -"іменованому\n" -" вузлі правилам уможливлення доступу.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host і --service є обов’язковими, інші можна не вказувати.\n" -"\n" -" Якщо вказано --rules, імітувати вмикання вказаних правил і перевірити\n" -" можливість входу користувача у разі використання лише цих правил.\n" -"\n" -" Якщо вказано --enabled, додати всі увімкнені правила HBAC до імітації\n" -"\n" -" Якщо вказано --disabled, додати всі вимкнені правила HBAC до імітації\n" -"\n" -" Якщо вказано --nodetail, не повертати даних щодо відповідних і " -"невідповідних\n" -" правил.\n" -"\n" -" Якщо вказано одночасно --rules і --enabled, виконати імітацію --rules _і_\n" -" всіх увімкнених правил IPA.\n" -"\n" -" Якщо не вказано --rules, буде виконано імітацію всіх увімкнених правил " -"IPA.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" 1. Використання всіх увімкнених правил HBAC у базі даних IPA:\n" -" $ ipa hbactest --user=a1a --srchost=foo --host=bar --service=sshd\n" -" --------------------\n" -" Надано доступ: Так\n" -" --------------------\n" -" невідповідне: my-second-rule\n" -" невідповідне: my-third-rule\n" -" невідповідне: myrule\n" -" відповідне: allow_all\n" -"\n" -" 2. Вимикання докладного резюме застосування правил:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Надано доступ: Так\n" -" --------------------\n" -"\n" -" 3. Перевірити явно вказані правила HBAC:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Надано доступ: Ні\n" -" ---------------------\n" -" невідповідне: my-second-rule\n" -" невідповідне: myrule\n" -"\n" -" 4. Використання всіх увімкнених правил HBAC у базі даних IPA + явно " -"вказаних правил:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Доступ надано: Так\n" -" --------------------\n" -" невідповідне: my-second-rule\n" -" невідповідне: my-third-rule\n" -" невідповідне: myrule\n" -" відповідне: allow_all\n" -"\n" -" 5. Перевірка всіх вимкнених правил HBAC у базі даних IPA:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Надано доступ: Ні\n" -" ---------------------\n" -" невідповідне: new-rule\n" -"\n" -" 6. Перевірка всіх вимкнених правил HBAC у базі даних IPA + явно вказані " -"правила:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Надано доступ: Ні\n" -" ---------------------\n" -" невідповідне: my-second-rule\n" -" невідповідне: my-third-rule\n" -" невідповідне: myrule\n" -"\n" -" 7. Перевірка всіх (увімкнених і вимкнених) правил HBAC у базі даних " -"IPA:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Надано доступ: Так\n" -" --------------------\n" -" невідповідне: my-second-rule\n" -" невідповідне: my-third-rule\n" -" невідповідне: myrule\n" -" невідповідне: new-rule\n" -" відповідне: allow_all\n" -"\n" -"\n" -"HBACTEST І ДОВІРЕНІ ДОМЕНИ\n" -"\n" -"Якщо у IPA налаштовано зовнішній довірений домен, правила HBAC також\n" -"застосовуються до користувачів, що отримують доступ до ресурсів IPA з\n" -"з довіреного домену. Після цього користувачі і групи довіреного домену\n" -"(на їхні SID) може бути прив’язано до зовнішніх груп, які можуть бути\n" -"учасниками груп POSIX у IPA. Такі прив’язки може бути використано у\n" -"правилах HBAC, отже уможливлення доступу до ресурсів, захищених системою\n" -"HBAC.\n" -"\n" -"Додаток hbactest здатен тестувати доступ як для локальних користувачів\n" -"IPA, так і користувачів з довірених доменів, як за повним іменем\n" -"користувача, так і за SID користувачів. У таких іменах користувачів\n" -"має бути вказано скорочено довірений домен (ДОМЕН\\Administrator) або\n" -"назву реєстраційного запису користувача (UPN), Administrator@ad.test.\n" -"\n" -"Будь ласка, зауважте, що виконувати hbactest з аргументом користувача\n" -"довіреного домену у параметрі --user можуть виконувати лише учасники\n" -"групи «trust admins».\n" -"\n" -"ПРИКЛАД:\n" -"\n" -" 1. Перевірити, чи відповідає користувач з довіреного домену,\n" -" вказаний за коротким іменем, якомусь правилу:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Надано доступ: Так\n" -" --------------------\n" -" Відповідні правила: allow_all\n" -" Відповідні правила: can_login\n" -"\n" -" 2. Перевірити, чи відповідає користувач з довіреного домену,\n" -" вказаний за назвою його домену, якомусь правилу:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Надано доступ: Так\n" -" --------------------\n" -" Відповідні правила: allow_all\n" -" Невідповідні правила: can_login\n" -"\n" -" 3. Перевірити, чи відповідає користувач з довіреного домену\n" -" вказаний за SID, якомусь правилу:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Надано доступ: Так\n" -" --------------------\n" -" Відповідні правила: allow_all\n" -" Відповідні правила: can_login\n" -"\n" -" 4. Перевірити, чи відповідає інший користувач з довіреного домену,\n" -" вказаний за SID, якомусь правилу:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Надано доступ: Так\n" -" --------------------\n" -" Відповідні правила: allow_all\n" -" Відповідні правила: can_login\n" -"\n" -" 5. Перевірити, чи відповідає інший користувач з довіреного домену,\n" -" вказаний за коротким ім’ям, якомусь правилу:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Надано доступ: Так\n" -" --------------------\n" -" Відповідні правила: allow_all\n" -" Невідповідні правила: can_login\n" - -msgid "Simulate use of Host-based access controls" -msgstr "Імітувати використання керування доступом на основі вузлів" - -msgid "User name" -msgstr "Ім'я користувача" - -msgid "Target host" -msgstr "Вузол призначення" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "" -"Правила для перевірки. Якщо не вказано, вважається, що використано --enabled." - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "" -"Приховати дані щодо того, які правила є відповідними, які не є відповідними " -"і які є некоректними" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "Перевірити всі увімкнені правила IPA [типова поведінка]" - -msgid "Include all disabled IPA rules into test" -msgstr "Перевірити всі вимкнені правила IPA" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "" -"Максимальна кількість правил, які слід обробити, якщо не вказано параметра --" -"rules" - -msgid "Warning" -msgstr "Попередження" - -msgid "Matched rules" -msgstr "Відповідні правила" - -msgid "Not matched rules" -msgstr "Невідповідні правила" - -msgid "Non-existent or invalid rules" -msgstr "Некоректні правила або правила, яких не існує" - -msgid "Result of simulation" -msgstr "Результат імітації" +"Додати вузол, який може керувати сховищем ключів та сертифікатом цього " +"вузла :\n" +" ipa host-add-managedby --hosts=test2 test\n" msgid "" "\n" @@ -5578,397 +7366,616 @@ msgstr "" " Дозволити користувачеві створення таблиці ключів:\n" " ipa host-allow-create-keytab test2 --users=tuser1\n" -msgid "Host name" -msgstr "Назва вузла" - -msgid "A description of this host" -msgstr "Опис цього вузла" - -msgid "Locality" -msgstr "Адреса" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "Адреса розташування вузла (наприклад, «Київ, Україна»)" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "Розташування вузла (наприклад, «Lab 2»)" - -msgid "Platform" -msgstr "Платформа" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "Апаратна платформа вузла (наприклад, «Lenovo T61»)" - -msgid "Operating system" -msgstr "Операційна система" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "Операційна система вузла і її версія (наприклад, «Fedora 9\")" - -msgid "User password" -msgstr "Пароль користувача" - -msgid "Password used in bulk enrollment" -msgstr "Пароль для загального керування реєстраційними записами" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "" -"Створити випадковий пароль, який буде використано для загальної реєстрації" - -msgid "Random password" -msgstr "Випадковий пароль" - -msgid "Certificate" -msgstr "Сертифікат" - -msgid "Base-64 encoded server certificate" -msgstr "Сертифікат сервера у кодуванні Base-64" - -msgid "Principal name" -msgstr "Назва реєстраційного запису" - -msgid "MAC address" -msgstr "MAC-адреса" - -msgid "Hardware MAC address(es) on this host" -msgstr "Апаратні MAC-адреси цього вузла" - -msgid "SSH public key" -msgstr "Відкритий ключ SSH" - -msgid "Class" -msgstr "Клас" - msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" +"\n" +"ID Views\n" +"\n" +"Manage ID Views\n" +"\n" +"IPA allows to override certain properties of users and groups per each " +"host.\n" +"This functionality is primarily used to allow migration from older systems " +"or\n" +"other Identity Management solutions.\n" msgstr "" -"Категорія вузлів (семантика розташування цього атрибуту призначена для " -"локальної обробки)" - -msgid "Assigned ID View" -msgstr "Перегляд призначених ідентифікаторів" - -msgid "Requires pre-authentication" -msgstr "Вимагає попереднього розпізнавання" - -msgid "Pre-authentication is required for the service" -msgstr "Для роботи з цією службою потрібне попереднє розпізнавання" - -msgid "Trusted for delegation" -msgstr "Довірено для уповноваження" - -msgid "Client credentials may be delegated to the service" -msgstr "Реєстраційні дані клієнта може бути передано службі" - -msgid "Member of host-groups" -msgstr "Учасник host-groups" - -msgid "Indirect Member of host-group" -msgstr "Опосередкований учасник групи вузлів" - -msgid "Keytab" -msgstr "Таблиця ключів" - -msgid "Managed by" -msgstr "Керується" - -msgid "Managing" -msgstr "Керування" - -msgid "Users allowed to retrieve keytab" -msgstr "Користувачі, яким дозволено отримувати таблицю ключів" - -msgid "Groups allowed to retrieve keytab" -msgstr "Групи, яким дозволено отримувати таблицю ключів" - -msgid "Hosts allowed to retrieve keytab" -msgstr "Вузли, яким дозволено отримувати таблицю ключів" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "Групи вузлів, яким дозволено отримувати таблицю ключів" - -msgid "Users allowed to create keytab" -msgstr "Користувачі, яким дозволено створення таблиці ключів" - -msgid "Groups allowed to create keytab" -msgstr "Групи, яким дозволено створення таблиці ключів" - -msgid "Hosts allowed to create keytab" -msgstr "Вузли, яким дозволено створення таблиці ключів" - -msgid "Host Groups allowed to create keytab" -msgstr "Групи вузлів, яким дозволено створення таблиці ключів" - -msgid "Add a new host." -msgstr "Додати новий запис вузла." - -msgid "force host name even if not in DNS" -msgstr "примусове значення назви вузла, навіть якщо назви немає у DNS" - -msgid "skip reverse DNS detection" -msgstr "пропустити зворотне визначення DNS" - -msgid "Add the host to DNS with this IP address" -msgstr "Додати запис вузла до DNS з цією IP-адресою" - -msgid "Add hosts that can manage this host." -msgstr "Додати записи вузлів, які можуть керувати цим вузлом." - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" -"Дозволити користувачам, групам, вузлам і групам вузлів створювати таблицю " -"ключів цього вузла." - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "" -"Дозволити користувачам, групам, вузлам і групам вузлів отримувати таблицю " -"ключів цього вузла." - -msgid "Delete a host." -msgstr "Вилучити вузол." - -msgid "Remove entries from DNS" -msgstr "Вилучити записи з DNS" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "Вимкнути ключ Kerberos, сертифікат SSL і всі служби на вузлі." - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "" -"Заборонити користувачам, групам, вузлам і групам вузлів створювати таблицю " -"ключів цього вузла." - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "" -"Заборонити користувачам, групам, вузлам і групам вузлів отримувати таблицю " -"ключів цього вузла." - -msgid "Search for hosts." -msgstr "Шукати вузли." - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "Результати мають містити лише атрибут основного ключа («hostname»)" - -msgid "host group" -msgstr "група вузлів" - -msgid "Search for hosts with these member of host groups." -msgstr "Шукати вузли із вказаними групами вузлів участі." - -msgid "Search for hosts without these member of host groups." -msgstr "Шукати вузли без вказаних груп вузлів участі." - -msgid "Search for hosts with these member of netgroups." -msgstr "Шукати вузли із вказаними мережевими групами участі." - -msgid "Search for hosts without these member of netgroups." -msgstr "Шукати вузли без вказаних мережевих груп участі." - -msgid "Search for hosts with these member of roles." -msgstr "Шукати вузли із вказаними ролями участі." - -msgid "Search for hosts without these member of roles." -msgstr "Шукати вузли без вказаних ролей участі." - -msgid "Search for hosts with these member of HBAC rules." -msgstr "Шукати вузли із цими правилами HBAC участі." - -msgid "Search for hosts without these member of HBAC rules." -msgstr "Шукати вузли без цих правил HBAC участі." - -msgid "Search for hosts with these member of sudo rules." -msgstr "Шукати вузли із цими правилами sudo участі." - -msgid "Search for hosts without these member of sudo rules." -msgstr "Шукати вузли без цих правил sudo участі." - -msgid "Search for hosts with these enrolled by users." -msgstr "Шукати вузли з цими користувачами, якими надано ролі." - -msgid "Search for hosts without these enrolled by users." -msgstr "Шукати вузли без цих користувачів, якими надано ролі." - -msgid "host" -msgstr "вузол" - -msgid "Search for hosts with these managed by hosts." -msgstr "Шукати вузли із цими керованими вузлами." - -msgid "Search for hosts without these managed by hosts." -msgstr "Шукати вузли без цих керованих вузлів." - -msgid "Search for hosts with these managing hosts." -msgstr "Шукати вузли із цими керівними вузлами." - -msgid "Search for hosts without these managing hosts." -msgstr "Шукати вузли без цих керівних вузлів." - -msgid "Modify information about a host." -msgstr "Змінити дані щодо вузла." - -msgid "Kerberos principal name for this host" -msgstr "Назва реєстраційного запису Kerberos для цього вузла" - -msgid "Update DNS entries" -msgstr "Оновити записи DNS" - -msgid "Remove hosts that can manage this host." -msgstr "Вилучити записи вузлів, які можуть керувати цим вузлом." - -msgid "Display information about a host." -msgstr "Показати дані щодо вузла." - -msgid "file to store certificate in" -msgstr "файл, у якому зберігатимуться дані сертифіката" +"\n" +"Перегляди ідентифікаторів\n" +"\n" +"Керування переглядами ідентифікаторів\n" +"\n" +"IPA надає вам змогу перевизначити певні властивості записів користувачів та " +"груп для окремих вузлів.\n" +"В основному, ці функціональні можливості призначено для уможливлення " +"перенесення даних із застарілих\n" +"систем або інших рішень для керування профілями.\n" msgid "" "\n" -"Groups of hosts.\n" +"ID ranges\n" "\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" "\n" -"EXAMPLES:\n" +"There are two type of ID ranges which are both handled by this utility:\n" "\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" "\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"Both types have the following attributes in common:\n" "\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" "\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" "\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" "\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - dom_sid: domain SID of the trusted domain\n" "\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" msgstr "" "\n" -"Групи вузлів.\n" +"Діапазони ідентифікаторів\n" "\n" -"Керування групами вузлів. Корисні для застосування керування\n" -"до декількох вузлів на основі заснованого на вузлах керування\n" -"доступом (Host-based Access Control або HBAC).\n" +"Керування діапазонами ідентифікаторів, використаних для відображення\n" +"ідентифікаторів POSIX на SID, і навпаки.\n" "\n" -"ПРИКЛАДИ:\n" +"За допомогою цієї програми можна керувати обома типами діапазонів " +"ідентифікаторів:\n" "\n" -" додавання нової групи вузлів:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" +" - діапазони ідентифікаторів локального домену\n" +" - діапазони ідентифікаторів довірених віддалених доменів\n" "\n" -" Додавання нової групи вузлів:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" +"Обидва типи мають такі спільні атрибути:\n" "\n" -" Додавання учасників до групи вузлів з використанням виразу Bash у фігурних " -"дужках):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" +" - base-id: перший ідентифікатор діапазону ідентифікаторів POSIX\n" +" - range-size: розмір діапазону\n" "\n" -" Додавання групи вузлів як учасника іншої групи вузлів:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" +"На основі цих двох атрибутів об’єкт діапазону може зарезервувати " +"ідентифікатори\n" +"POSIX, починаючи з base-id аж до, але не включно, base-id+range-size.\n" "\n" -" Вилучення вузла з групи вузлів:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" +"Крім того, можна встановити діапазон ідентифікаторів локального домену\n" +" - rid-base: перший RID(*) відповідного діапазону RID\n" +" - secondary-rid-base: перший RID вторинного діапазону RID\n" "\n" -" Показ списку групи вузлів:\n" -" ipa hostgroup-show baltimore\n" +"а діапазон ідентифікаторів довіреного домену слід задавати за допомогою\n" +" - rid-base: перший RID відповідного діапазону RID\n" +" - dom_sid: SID довіреного домену\n" "\n" -" Вилучення групи вузлів:\n" -" ipa hostgroup-del baltimore\n" +"\n" +"\n" +"ПРИКЛАД: додавання нового діапазону ідентифікаторів для довіреного домену\n" +"\n" +"Оскільки може бути декілька довірених доменів, під час створення діапазону\n" +"ідентифікаторів слід вказати SID домену.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"Цей діапазон ідентифікаторів потім використовуватиметься сервером IPA\n" +"та надавачем даних IPA SSSD для призначення UID Posix користувачам з\n" +"довіреного домену.\n" +"\n" +"Якщо, наприклад, налаштовано діапазон для довіреного домену з такими\n" +"значеннями:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"RID від 0 до 199999 прив’язуються до ідентифікаторів Posix від 1200000 до\n" +"13999999. Отже RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"ПРИКЛАД: додавання нового діапазону ідентифікаторів до локального домену\n" +"\n" +"Щоб створити діапазон ідентифікаторів для локального домену не потрібно\n" +"вказувати SID домену. Але оскільки можливий конфлікт між ідентифікаторами\n" +"користувача і групи та ідентифікаторами POSIX, потрібен вторинний інтервал\n" +"RID.\n" +"\n" +" ipa range-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"Дані з діапазонів ідентифікаторів локального домену використовуються\n" +"сервером IPA на внутрішньому рівні для призначення SID користувачам і " +"групам\n" +"IPA. SID буде збережено у об’єктах користувача або групи.\n" +"\n" +"Якщо, наприклад, для діапазону ідентифікаторів локального домену визначено\n" +"значення з наведеного вище прикладу, новий користувач з UID 1200007 отримає\n" +"RID 1007. Якщо цей RID вже буде використано групою, його буде змінено на " +"1000007.\n" +"Таке може трапитися лише, якщо об’єкт користувача або групи було створено з\n" +"фіксованим ідентифікатором, оскільки у разі автоматичного призначення один\n" +"ідентифікатор не може бути призначено двічі. Оскільки спільний простір назв\n" +"є лише у користувачів і груп, достатньо одного резервного діапазону для\n" +"того, щоб повністю позбутися конфліктів.\n" +"\n" +"Для визначення ідентифікатора POSIX за вказаним RID з локального домену " +"слід\n" +"спочатку перевірити, чи потрапляє RID у основний або вторинний діапазон " +"RID,\n" +"також, щоб отримати ідентифікатор POSIX, слід відняти від ідентифікатор rid-" +"base\n" +"або secondary-rid-base, відповідно, і додати base-id.\n" +"\n" +"Типово, створення діапазонів ідентифікаторів є зовні непомітним і потреби у\n" +"цьому інтерфейсі командного рядка не виникає. Діапазон ідентифікаторів\n" +"для локального домену буде створено під час встановлення або оновлення\n" +"попередньої версії. Діапазон ідентифікаторів для довіреного домену буде\n" +"створено разом з записом довіри командою «ipa trust-add ...».\n" +"Нижче наведено можливі випадки використання цього командного інтерфейсу.\n" +"\n" +"ВИПАДКИ ВИКОРИСТАННЯ:\n" +"\n" +" Додавання діапазону ідентифікаторів з перехідного довіреного домену\n" +"\n" +" Якщо довірений домен (A) довіряється іншому домену (B) і цей запис\n" +" довіри є перехідним, «ipa trust-add домен-A» створить лише діапазон\n" +" для домену A. Діапазон ідентифікаторів домену B має бути додано вручну.\n" +"\n" +" Додавання додаткового діапазону ідентифікаторів для локального домену\n" +"\n" +" Якщо діапазон ідентифікаторів локального домену вичерпано, тобто " +"додатком\n" +" DNA не може бути призначено нові ідентифікатори користувачам або групам\n" +" POSIX, має бути створено новий діапазон для додавання нових " +"користувачів\n" +" та груп. (У поточній версії між цим командним інтерфейсом і додатком " +"DNA\n" +" немає безпосереднього зв’язку, але у майбутній версії може бути " +"передбачено\n" +" можливість внесення змін і до налаштувань додатка DNS.)\n" +"\n" +"Загалом, потреби у зміні або вилученні діапазонів ідентифікаторів немає.\n" +"Якщо немає іншого виходу, окрім внесення змін або вилучення діапазону\n" +"ідентифікаторів, робити це слід дуже обережно. Оскільки UID зберігаються у\n" +"файловій системі і використовуються для керування доступом, можлива " +"ситуація,\n" +"коли одні користувачі отримуватимуть доступ до файлів інших користувачів\n" +"у разі вилучення діапазону ідентифікаторів і повторного його використання\n" +"у іншому домені.\n" +"\n" +"(*) RID типово є останнім цілим числом SID користувача або групи, перед " +"якими\n" +"має бути вказано SID домену. Наприклад, якщо SID домену " +"S-1-5-21-123-456-789, а\n" +"користувач з цього домену має SID S-1-5-21-123-456-789-1010, RID " +"користувача\n" +"буде 1010. RID є унікальними в межах домену, є 32-бітовими значенням і\n" +"використовуються для користувачів і груп.\n" +"\n" +"ПОПЕРЕДЖЕННЯ:\n" +"\n" +"Додаток DNA у 389-ds розміщуватиме ідентифікатори на основі діапазонів\n" +"налаштованих для локального домену. У поточній версії додаток DNA *не " +"можна*\n" +"переналаштовувати самостійно на основі локальних діапазонів, встановлених\n" +"за допомогою цього сімейства команд.\n" +"\n" +"Зміни налаштувань вручну має бути виконано у налаштуваннях додатка DNA\n" +"для локального діапазону. Зокрема слід змінити атрибут dnaNextRange " +"«cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config» так, щоб\n" +"він відповідав новому діапазону.\n" -msgid "Host-group" -msgstr "Група вузлів" - -msgid "Name of host-group" -msgstr "Назва групи вузлів" - -msgid "A description of this host-group" -msgstr "Опис цієї групи вузлів" - -msgid "Member hosts" -msgstr "Вузли-учасники" - -msgid "Member host-groups" -msgstr "Учасник host-groups" - -msgid "Indirect Member hosts" -msgstr "Вузли з опосередкованою участю" - -msgid "Indirect Member host-groups" -msgstr "Групи вузлів з опосередкованою участю" - -msgid "Add a new hostgroup." -msgstr "Додати нову групу вузлів." - -msgid "Add members to a hostgroup." -msgstr "Додати записи до групи вузлів." - -msgid "Delete a hostgroup." -msgstr "Вилучити групу вузлів." - -msgid "Search for hostgroups." -msgstr "Шукати групи вузлів." - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" +"base=1000 --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" msgstr "" -"Результати мають містити лише атрибут основного ключа («hostgroup-name»)" - -msgid "Search for host groups with these member hosts." -msgstr "Шукати групи вузлів із цими вузлами-учасниками." - -msgid "Search for host groups without these member hosts." -msgstr "Шукати групи вузлів без цих вузлів-учасників." - -msgid "Search for host groups with these member host groups." -msgstr "Шукати групи вузлів із цими групами вузлів-учасників." - -msgid "Search for host groups without these member host groups." -msgstr "Шукати групи вузлів без цих груп вузлів-учасників." - -msgid "Search for host groups with these member of host groups." -msgstr "Шукати групи вузлів із цими групами вузлів участі." - -msgid "Search for host groups without these member of host groups." -msgstr "Шукати групи вузлів без цих груп вузлів участі." - -msgid "Search for host groups with these member of netgroups." -msgstr "Шукати групи вузлів із вказаними мережевими групами участі." - -msgid "Search for host groups without these member of netgroups." -msgstr "Шукати групи вузлів без вказаних мережевих груп учасників." - -msgid "Search for host groups with these member of HBAC rules." -msgstr "Шукати групи вузлів із цими правилами HBAC участі." - -msgid "Search for host groups without these member of HBAC rules." -msgstr "Шукати групи вузлів без цього учасника правил HBAC." - -msgid "Search for host groups with these member of sudo rules." -msgstr "Шукати групи вузлів із цим учасником правил sudo." - -msgid "Search for host groups without these member of sudo rules." -msgstr "Шукати групи вузлів без вказаних учасників правил sudo." - -msgid "Modify a hostgroup." -msgstr "Змінити групу вузлів." - -msgid "Remove members from a hostgroup." -msgstr "Вилучити записи з групи вузлів." - -msgid "Display information about a hostgroup." -msgstr "Показати дані щодо групи вузлів." +"\n" +"Діапазони ідентифікаторів\n" +"\n" +"Керування діапазонами ідентифікаторів, використаних для відображення\n" +"ідентифікаторів POSIX на SID, і навпаки.\n" +"\n" +"За допомогою цієї програми можна керувати обома типами діапазонів " +"ідентифікаторів:\n" +"\n" +" - діапазони ідентифікаторів локального домену\n" +" - діапазони ідентифікаторів довірених віддалених доменів\n" +"\n" +"Обидва типи мають такі спільні атрибути:\n" +"\n" +" - base-id: перший ідентифікатор діапазону ідентифікаторів POSIX\n" +" - range-size: розмір діапазону\n" +"\n" +"На основі цих двох атрибутів об’єкт діапазону може зарезервувати " +"ідентифікатори\n" +"POSIX, починаючи з base-id аж до, але не включно, base-id+range-size.\n" +"\n" +"Крім того, можна встановити діапазон ідентифікаторів локального домену\n" +" - rid-base: перший RID(*) відповідного діапазону RID\n" +" - secondary-rid-base: перший RID вторинного діапазону RID\n" +"\n" +"а діапазон ідентифікаторів довіреного домену слід задавати за допомогою\n" +" - rid-base: перший RID відповідного діапазону RID\n" +" - dom_sid: SID довіреного домену\n" +"\n" +"\n" +"\n" +"ПРИКЛАД: додавання нового діапазону ідентифікаторів для довіреного домену\n" +"\n" +"Оскільки може бути декілька довірених доменів, під час створення діапазону\n" +"ідентифікаторів слід вказати SID домену.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"Цей діапазон ідентифікаторів потім використовуватиметься сервером IPA\n" +"та надавачем даних IPA SSSD для призначення UID Posix користувачам з\n" +"довіреного домену.\n" +"\n" +"Якщо, наприклад, налаштовано діапазон для довіреного домену з такими\n" +"значеннями:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"RID від 0 до 199999 прив’язуються до ідентифікаторів Posix від 1200000 до\n" +"13999999. Отже RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"ПРИКЛАД: додавання нового діапазону ідентифікаторів до локального домену\n" +"\n" +"Щоб створити діапазон ідентифікаторів для локального домену не потрібно\n" +"вказувати SID домену. Але оскільки можливий конфлікт між ідентифікаторами\n" +"користувача і групи та ідентифікаторами POSIX, потрібен вторинний інтервал\n" +"RID.\n" +"\n" +" ipa range-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"Дані з діапазонів ідентифікаторів локального домену використовуються\n" +"сервером IPA на внутрішньому рівні для призначення SID користувачам і " +"групам\n" +"IPA. SID буде збережено у об’єктах користувача або групи.\n" +"\n" +"Якщо, наприклад, для діапазону ідентифікаторів локального домену визначено\n" +"значення з наведеного вище прикладу, новий користувач з UID 1200007 отримає\n" +"RID 1007. Якщо цей RID вже буде використано групою, його буде змінено на " +"1000007.\n" +"Таке може трапитися лише, якщо об’єкт користувача або групи було створено з\n" +"фіксованим ідентифікатором, оскільки у разі автоматичного призначення один\n" +"ідентифікатор не може бути призначено двічі. Оскільки спільний простір назв\n" +"є лише у користувачів і груп, достатньо одного резервного діапазону для\n" +"того, щоб повністю позбутися конфліктів.\n" +"\n" +"Для визначення ідентифікатора POSIX за вказаним RID з локального домену " +"слід\n" +"спочатку перевірити, чи потрапляє RID у основний або вторинний діапазон " +"RID,\n" +"також, щоб отримати ідентифікатор POSIX, слід відняти від ідентифікатор rid-" +"base\n" +"або secondary-rid-base, відповідно, і додати base-id.\n" +"\n" +"Типово, створення діапазонів ідентифікаторів є зовні непомітним і потреби у\n" +"цьому інтерфейсі командного рядка не виникає. Діапазон ідентифікаторів\n" +"для локального домену буде створено під час встановлення або оновлення\n" +"попередньої версії. Діапазон ідентифікаторів для довіреного домену буде\n" +"створено разом з записом довіри командою «ipa trust-add ...».\n" +"Нижче наведено можливі випадки використання цього командного інтерфейсу.\n" +"\n" +"ВИПАДКИ ВИКОРИСТАННЯ:\n" +"\n" +" Додавання діапазону ідентифікаторів з перехідного довіреного домену\n" +"\n" +" Якщо довірений домен (A) довіряється іншому домену (B) і цей запис\n" +" довіри є перехідним, «ipa trust-add домен-A» створить лише діапазон\n" +" для домену A. Діапазон ідентифікаторів домену B має бути додано вручну.\n" +"\n" +" Додавання додаткового діапазону ідентифікаторів для локального домену\n" +"\n" +" Якщо діапазон ідентифікаторів локального домену вичерпано, тобто " +"додатком\n" +" DNA не може бути призначено нові ідентифікатори користувачам або групам\n" +" POSIX, має бути створено новий діапазон для додавання нових " +"користувачів\n" +" та груп. (У поточній версії між цим командним інтерфейсом і додатком " +"DNA\n" +" немає безпосереднього зв’язку, але у майбутній версії може бути " +"передбачено\n" +" можливість внесення змін і до налаштувань додатка DNS.)\n" +"\n" +"Загалом, потреби у зміні або вилученні діапазонів ідентифікаторів немає.\n" +"Якщо немає іншого виходу, окрім внесення змін або вилучення діапазону\n" +"ідентифікаторів, робити це слід дуже обережно. Оскільки UID зберігаються у\n" +"файловій системі і використовуються для керування доступом, можлива " +"ситуація,\n" +"коли одні користувачі отримуватимуть доступ до файлів інших користувачів\n" +"у разі вилучення діапазону ідентифікаторів і повторного його використання\n" +"у іншому домені.\n" +"\n" +"(*) RID типово є останнім цілим числом SID користувача або групи, перед " +"якими\n" +"має бути вказано SID домену. Наприклад, якщо SID домену " +"S-1-5-21-123-456-789, а\n" +"користувач з цього домену має SID S-1-5-21-123-456-789-1010, RID " +"користувача\n" +"буде 1010. RID є унікальними в межах домену, є 32-бітовими значенням і\n" +"використовуються для користувачів і груп.\n" +"\n" +"=======\n" +"ПОПЕРЕДЖЕННЯ:\n" +"\n" +"Додаток DNA у 389-ds розміщуватиме ідентифікатори на основі діапазонів\n" +"налаштованих для локального домену. У поточній версії додаток DNA *не " +"можна*\n" +"переналаштовувати самостійно на основі локальних діапазонів, встановлених\n" +"за допомогою цього сімейства команд.\n" +"\n" +"Зміни налаштувань вручну має бути виконано у налаштуваннях додатка DNA\n" +"для локального діапазону. Зокрема слід змінити атрибут dnaNextRange " +"«cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config» так, щоб\n" +"він відповідав новому діапазону.\n" +"=======\n" msgid "" "\n" @@ -6262,328 +8269,774 @@ msgstr "" "IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config» так, щоб\n" "він відповідав новому діапазону.\n" -msgid "Range name" -msgstr "Назва діапазону" - -msgid "First Posix ID of the range" -msgstr "Перший ідентифікатор POSIX діапазону" - -msgid "Number of IDs in the range" -msgstr "Кількість ідентифікаторів у діапазоні" - -msgid "First RID of the corresponding RID range" -msgstr "Перший RID відповідного діапазону RID" - -msgid "First RID of the secondary RID range" -msgstr "Перший RID вторинного діапазону RID" - -msgid "Domain SID of the trusted domain" -msgstr "SID довіреного домену" - -msgid "Name of the trusted domain" -msgstr "Назва довіреного домену" - -msgid "Range type" -msgstr "Тип діапазону" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgid "" +"\n" +"ID ranges\n" +"\n" +"Manage ID ranges used to map Posix IDs to SIDs and back.\n" +"\n" +"There are two type of ID ranges which are both handled by this utility:\n" +"\n" +" - the ID ranges of the local domain\n" +" - the ID ranges of trusted remote domains\n" +"\n" +"Both types have the following attributes in common:\n" +"\n" +" - base-id: the first ID of the Posix ID range\n" +" - range-size: the size of the range\n" +"\n" +"With those two attributes a range object can reserve the Posix IDs starting\n" +"with base-id up to but not including base-id+range-size exclusively.\n" +"\n" +"Additionally an ID range of the local domain may set\n" +" - rid-base: the first RID(*) of the corresponding RID range\n" +" - secondary-rid-base: first RID of the secondary RID range\n" +"\n" +"and an ID range of a trusted domain must set\n" +" - rid-base: the first RID of the corresponding RID range\n" +" - sid: domain SID of the trusted domain\n" +"\n" +"and an ID range of a trusted domain may set\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for a trusted domain\n" +"\n" +"Since there might be more than one trusted domain the domain SID must be " +"given\n" +"while creating the ID range.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"This ID range is then used by the IPA server and the SSSD IPA provider to\n" +"assign Posix UIDs to users from the trusted domain.\n" +"\n" +"If e.g. a range for a trusted domain is configured with the following " +"values:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " +"So\n" +"RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"EXAMPLE: Add a new ID range for the local domain\n" +"\n" +"To create an ID range for the local domain it is not necessary to specify a\n" +"domain SID. But since it is possible that a user and a group can have the " +"same\n" +"value as Posix ID a second RID interval is needed to handle conflicts.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"The data from the ID ranges of the local domain are used by the IPA server\n" +"internally to assign SIDs to IPA users and groups. The SID will then be " +"stored\n" +"in the user or group objects.\n" +"\n" +"If e.g. the ID range for the local domain is configured with the values " +"from\n" +"the example above then a new user with the UID 1200007 will get the RID " +"1007.\n" +"If this RID is already used by a group the RID will be 1000007. This can " +"only\n" +"happen if a user or a group object was created with a fixed ID because the\n" +"automatic assignment will not assign the same ID twice. Since there are " +"only\n" +"users and groups sharing the same ID namespace it is sufficient to have " +"only\n" +"one fallback range to handle conflicts.\n" +"\n" +"To find the Posix ID for a given RID from the local domain it has to be\n" +"checked first if the RID falls in the primary or secondary RID range and\n" +"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" +"and the base-id has to be added to get the Posix ID.\n" +"\n" +"Typically the creation of ID ranges happens behind the scenes and this CLI\n" +"must not be used at all. The ID range for the local domain will be created\n" +"during installation or upgrade from an older version. The ID range for a\n" +"trusted domain will be created together with the trust by 'ipa trust-" +"add ...'.\n" +"\n" +"USE CASES:\n" +"\n" +" Add an ID range from a transitively trusted domain\n" +"\n" +" If the trusted domain (A) trusts another domain (B) as well and this " +"trust\n" +" is transitive 'ipa trust-add domain-A' will only create a range for\n" +" domain A. The ID range for domain B must be added manually.\n" +"\n" +" Add an additional ID range for the local domain\n" +"\n" +" If the ID range of the local domain is exhausted, i.e. no new IDs can " +"be\n" +" assigned to Posix users or groups by the DNA plugin, a new range has to " +"be\n" +" created to allow new users and groups to be added. (Currently there is " +"no\n" +" connection between this range CLI and the DNA plugin, but a future " +"version\n" +" might be able to modify the configuration of the DNS plugin as well)\n" +"\n" +"In general it is not necessary to modify or delete ID ranges. If there is " +"no\n" +"other way to achieve a certain configuration than to modify or delete an ID\n" +"range it should be done with great care. Because UIDs are stored in the " +"file\n" +"system and are used for access control it might be possible that users are\n" +"allowed to access files of other users if an ID range got deleted and " +"reused\n" +"for a different domain.\n" +"\n" +"(*) The RID is typically the last integer of a user or group SID which " +"follows\n" +"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " +"from\n" +"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " +"the\n" +"user. RIDs are unique in a domain, 32bit values and are used for users and\n" +"groups.\n" +"\n" msgstr "" -"Тип діапазону ідентифікаторів. Можливі варіанти: ipa-ad-trust-posix, ipa-ad-" -"trust, ipa-local" +"\n" +"Діапазони ідентифікаторів\n" +"\n" +"Керування діапазонами ідентифікаторів, використаних для відображення\n" +"ідентифікаторів POSIX на SID, і навпаки.\n" +"\n" +"За допомогою цієї програми можна керувати обома типами діапазонів " +"ідентифікаторів:\n" +"\n" +" - діапазони ідентифікаторів локального домену\n" +" - діапазони ідентифікаторів довірених віддалених доменів\n" +"\n" +"Обидва типи мають такі спільні атрибути:\n" +"\n" +" - base-id: перший ідентифікатор діапазону ідентифікаторів POSIX\n" +" - range-size: розмір діапазону\n" +"\n" +"На основі цих двох атрибутів об’єкт діапазону може зарезервувати " +"ідентифікатори\n" +"POSIX, починаючи з base-id аж до, але не включно, base-id+range-size.\n" +"\n" +"Крім того, можна встановити діапазон ідентифікаторів локального домену\n" +" - rid-base: перший RID(*) відповідного діапазону RID\n" +" - secondary-rid-base: перший RID вторинного діапазону RID\n" +"\n" +"а діапазон ідентифікаторів довіреного домену слід задавати за допомогою\n" +" - rid-base: перший RID відповідного діапазону RID\n" +" - dom_sid: SID довіреного домену\n" +"\n" +"також можна встановити діапазон ідентифікаторів довіреного домену\n" +" - auto-private-groups: [true|false|hybrid] automatic creation of private " +"groups\n" +"\n" +"\n" +"\n" +"ПРИКЛАД: додавання нового діапазону ідентифікаторів для довіреного домену\n" +"\n" +"Оскільки може бути декілька довірених доменів, під час створення діапазону\n" +"ідентифікаторів слід вказати SID домену.\n" +"\n" +" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" +" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" +"\n" +"Цей діапазон ідентифікаторів потім використовуватиметься сервером IPA\n" +"та надавачем даних IPA SSSD для призначення UID Posix користувачам з\n" +"довіреного домену.\n" +"\n" +"Якщо, наприклад, налаштовано діапазон для довіреного домену з такими\n" +"значеннями:\n" +" base-id = 1200000\n" +" range-size = 200000\n" +" rid-base = 0\n" +"RID від 0 до 199999 прив’язуються до ідентифікаторів Posix від 1200000 до\n" +"13999999. Отже RID 1000 <-> Posix ID 1201000\n" +"\n" +"\n" +"\n" +"ПРИКЛАД: додавання нового діапазону ідентифікаторів до локального домену\n" +"\n" +"Щоб створити діапазон ідентифікаторів для локального домену не потрібно\n" +"вказувати SID домену. Але оскільки можливий конфлікт між ідентифікаторами\n" +"користувача і групи та ідентифікаторами POSIX, потрібен вторинний інтервал\n" +"RID.\n" +"\n" +" ipa range-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" +" --secondary-rid-base=1000000 local_range\n" +"\n" +"Дані з діапазонів ідентифікаторів локального домену використовуються\n" +"сервером IPA на внутрішньому рівні для призначення SID користувачам і " +"групам\n" +"IPA. SID буде збережено у об’єктах користувача або групи.\n" +"\n" +"Якщо, наприклад, для діапазону ідентифікаторів локального домену визначено\n" +"значення з наведеного вище прикладу, новий користувач з UID 1200007 отримає\n" +"RID 1007. Якщо цей RID вже буде використано групою, його буде змінено на " +"1000007.\n" +"Таке може трапитися лише, якщо об’єкт користувача або групи було створено з\n" +"фіксованим ідентифікатором, оскільки у разі автоматичного призначення один\n" +"ідентифікатор не може бути призначено двічі. Оскільки спільний простір назв\n" +"є лише у користувачів і груп, достатньо одного резервного діапазону для\n" +"того, щоб повністю позбутися конфліктів.\n" +"\n" +"Для визначення ідентифікатора POSIX за вказаним RID з локального домену " +"слід\n" +"спочатку перевірити, чи потрапляє RID у основний або вторинний діапазон " +"RID,\n" +"також, щоб отримати ідентифікатор POSIX, слід відняти від ідентифікатор rid-" +"base\n" +"або secondary-rid-base, відповідно, і додати base-id.\n" +"\n" +"Типово, створення діапазонів ідентифікаторів є зовні непомітним і потреби у\n" +"цьому інтерфейсі командного рядка не виникає. Діапазон ідентифікаторів\n" +"для локального домену буде створено під час встановлення або оновлення\n" +"попередньої версії. Діапазон ідентифікаторів для довіреного домену буде\n" +"створено разом з записом довіри командою «ipa trust-add ...».\n" +"Нижче наведено можливі випадки використання цього командного інтерфейсу.\n" +"\n" +"ВИПАДКИ ВИКОРИСТАННЯ:\n" +"\n" +" Додавання діапазону ідентифікаторів з перехідного довіреного домену\n" +"\n" +" Якщо довірений домен (A) довіряється іншому домену (B) і цей запис\n" +" довіри є перехідним, «ipa trust-add домен-A» створить лише діапазон\n" +" для домену A. Діапазон ідентифікаторів домену B має бути додано вручну.\n" +"\n" +" Додавання додаткового діапазону ідентифікаторів для локального домену\n" +"\n" +" Якщо діапазон ідентифікаторів локального домену вичерпано, тобто " +"додатком\n" +" DNA не може бути призначено нові ідентифікатори користувачам або групам\n" +" POSIX, має бути створено новий діапазон для додавання нових " +"користувачів\n" +" та груп. (У поточній версії між цим командним інтерфейсом і додатком " +"DNA\n" +" немає безпосереднього зв’язку, але у майбутній версії може бути " +"передбачено\n" +" можливість внесення змін і до налаштувань додатка DNS.)\n" +"\n" +"Загалом, потреби у зміні або вилученні діапазонів ідентифікаторів немає.\n" +"Якщо немає іншого виходу, окрім внесення змін або вилучення діапазону\n" +"ідентифікаторів, робити це слід дуже обережно. Оскільки UID зберігаються у\n" +"файловій системі і використовуються для керування доступом, можлива " +"ситуація,\n" +"коли одні користувачі отримуватимуть доступ до файлів інших користувачів\n" +"у разі вилучення діапазону ідентифікаторів і повторного його використання\n" +"у іншому домені.\n" +"\n" +"(*) RID типово є останнім цілим числом SID користувача або групи, перед " +"якими\n" +"має бути вказано SID домену. Наприклад, якщо SID домену " +"S-1-5-21-123-456-789, а\n" +"користувач з цього домену має SID S-1-5-21-123-456-789-1010, RID " +"користувача\n" +"буде 1010. RID є унікальними в межах домену, є 32-бітовими значенням і\n" +"використовуються для користувачів і груп.\n" +"\n" msgid "" "\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " +"IPA certificate operations\n" msgstr "" "\n" -"Додати новий діапазон ідентифікаторів.\n" -"\n" -" Для додавання нового діапазону ідентифікаторів вам слід завжди " -"вказувати\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Крім того, може бути надано\n" -"\n" -" --rid-base\n" -" --econdary-rid-base\n" -"\n" -" для додавання нового діапазону ідентифікаторів для локального домену і\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" для додавання нового діапазону для довіреного домену AD.\n" -"\n" -" ПОПЕРЕДЖЕННЯ:\n" -"\n" -" Додаток DNA у 389-ds визначатиме ідентифікатори у діапазонах, " -"налаштованих\n" -" для локального домену. У поточній версії додаток DNA *не може* змінити\n" -" власні налаштування на основі локальних діапазонів, встановлених за\n" -" допомогою цього сімейства команд.\n" -"\n" -" Для внесення змін щодо локального діапазону слід змінити налаштування\n" -" додатка DNA вручну. Зокрема, слід внести зміни до атрибута 'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " -"відповідно\n" -" до параметрів нового діапазону.\n" -" " - -msgid "Delete an ID range." -msgstr "Вилучити діапазон ідентифікаторів." - -msgid "Search for ranges." -msgstr "Шукати діапазони." - -msgid "Modify ID range." -msgstr "Змінити діапазон ідентифікаторів." - -msgid "Display information about a range." -msgstr "Показати дані щодо діапазону." +"Дії з сертифікатами IPA\n" msgid "" "\n" -"ID Views\n" +"IPA certificate operations\n" "\n" -"Manage ID Views\n" +"Implements a set of commands for managing server SSL certificates.\n" "\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"If using the selfsign back end then the subject in the CSR needs to match\n" +"the subject configured in the server. The dogtag CA uses just the CN\n" +"value of the CSR and forces the rest of the subject.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" msgstr "" "\n" -"Перегляди ідентифікаторів\n" +"Дії з сертифікатами IPA\n" "\n" -"Керування переглядами ідентифікаторів\n" +"Реалізує набір команд для керування сертифікатами серверів SSL.\n" "\n" -"IPA надає вам змогу перевизначити певні властивості записів користувачів та " -"груп для окремих вузлів.\n" -"В основному, ці функціональні можливості призначено для уможливлення " -"перенесення даних із застарілих\n" -"систем або інших рішень для керування профілями.\n" - -msgid "Anchor to override" -msgstr "Прив’язка для перевизначення" - -msgid "Group ID Number" -msgstr "Ід. номер групи" - -msgid "User login" -msgstr "Користувач" - -msgid "UID" -msgstr "UID" - -msgid "User ID Number" -msgstr "Номер ідентифікатора користувача" - -msgid "GECOS" -msgstr "GECOS" - -msgid "Home directory" -msgstr "Домашній каталог" - -msgid "Login shell" -msgstr "Оболонка входу" - -msgid "ID View Name" -msgstr "Назва перегляду ідентифікаторів" - -msgid "Add a new Group ID override." -msgstr "Додати нове перевизначення ідентифікаторів групи." - -msgid "Delete an Group ID override." -msgstr "Вилучити перевизначення ідентифікаторів групи." - -msgid "Search for an Group ID override." -msgstr "Шукати перевизначення ідентифікаторів групи." - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "Результати мають містити лише атрибут основного ключа («anchor»)" - -msgid "Modify an Group ID override." -msgstr "Змінити перевизначення ідентифікаторів групи." - -msgid "Rename the Group ID override object" -msgstr "Перейменувати об’єкт перевизначення ідентифікатора групи" - -msgid "Display information about an Group ID override." -msgstr "Показати дані щодо перевизначення ідентифікаторів групи." - -msgid "Add a new User ID override." -msgstr "Додати нове перевизначення ідентифікатора користувача." - -msgid "Delete an User ID override." -msgstr "Вилучити перевизначення ідентифікатора користувача." - -msgid "Search for an User ID override." -msgstr "Шукати перевизначення ідентифікатора користувача." - -msgid "Modify an User ID override." -msgstr "Змінити перевизначення ідентифікатора користувача." - -msgid "Rename the User ID override object" -msgstr "Перейменувати об’єкт перевизначення ідентифікатора користувача" - -msgid "Display information about an User ID override." -msgstr "Показати дані щодо перевизначення ідентифікатора користувача." - -msgid "Add a new ID View." -msgstr "Додати новий перегляд ідентифікаторів." - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" -"Застосовує перегляд ідентифікаторів до вказаних вузлів або поточних " -"учасників вказаних груп вузлів. Якщо до вузла застосовується якийсь інший " -"перегляд ідентифікаторів, його буде перевизначено." - -msgid "hosts" -msgstr "вузли" - -msgid "Hosts to apply the ID View to" -msgstr "Вузли, до яких слід застосувати перегляд ідентифікаторів" - -msgid "hostgroups" -msgstr "групи вузлів" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" -"Групи вузлів, до чиїх вузлів буде застосовано перегляд ідентифікаторів. Будь " -"ласка, зауважте, що перегляд не застосовується автоматично до жодних вузлів, " -"доданих до групи вузлів після виконання команди idview-apply." - -msgid "Hosts that this ID View was applied to." -msgstr "Вузли, до яких було застосовано цей перегляд ідентифікаторів." - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "" -"Вузли або групи вузлів, до яких не можна застосувати цей перегляд " -"ідентифікаторів." - -msgid "Number of hosts the ID View was applied to:" -msgstr "Кількість вузлів, до яких застосовано перегляд ідентифікаторів:" - -msgid "Delete an ID View." -msgstr "Вилучити перегляд ідентифікаторів." - -msgid "Search for an ID View." -msgstr "Шукати перегляд ідентифікаторів." - -msgid "Modify an ID View." -msgstr "Змінити перегляд ідентифікаторів." - -msgid "Rename the ID View object" -msgstr "Перейменувати об’єкт перегляду ідентифікатора" - -msgid "Display information about an ID View." -msgstr "Показати дані щодо перегляду ідентифікаторів." - -msgid "Enumerate all the hosts the view applies to." -msgstr "Пронумерувати усі вузли, до яких застосовний перегляд." - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "" -"Знімає перегляд ідентифікаторів із вказаних вузлів або поточних учасників " -"вказаних груп вузлів." - -msgid "Hosts to clear (any) ID View from." -msgstr "Вузли, з яких слід зняти (будь-який) перегляд ідентифікаторів." - -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" -"Групи вузлів, для вузлів яких знято обробку переглядами ідентифікаторів. " -"Зауважте, що після запуску команди idview-unapply перегляд з будь-якого " -"вузла, доданого до групи вузлів, не зніматиметься автоматично." - -msgid "Hosts that ID View was cleared from." -msgstr "Вузли, з яких знято перегляд ідентифікаторів." - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "" -"Вузли або групи вузлів, з яких не можна зняти перегляд ідентифікаторів." - -msgid "Number of hosts that had a ID View was unset:" -msgstr "Кількість вузлів, з яких знято перегляд ідентифікаторів:" +"Запити щодо сертифікатів існують у формі Certificate Signing Request (CSR)\n" +"і форматі PEM.\n" +"\n" +"Якщо використовується модуль самопідписування, призначення у CSR має\n" +"збігатися із призначенням, вказаним на сервері. Служба сертифікації dogtag\n" +"використовує лише значення CN CSR і примусово встановлює\n" +"решту параметрів призначення за налаштуваннями сервера.\n" +"\n" +"Сертифікат зберігається з реєстраційним записом, а реєстраційний запис\n" +"потребує вузла.\n" +"\n" +"Для того, щоб створити запит щодо сертифіката:\n" +"\n" +"* Вузол має існувати\n" +"* Служба має існувати (або слід скористатися параметром --add " +"дляавтоматичного додавання)\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Створити запит щодо нового сертифіката і додати реєстраційний запис: ipa " +"cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Отримати вже створений сертифікат:\n" +" ipa cert-show 1032\n" +"\n" +" Відкликати сертифікат (причини визначено у RFC 5280):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Вилучити сертифікат зі списку відкликання:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Перевірити стан запиту щодо підписування:\n" +" ipa cert-status 10\n" +"\n" +"У поточній версії IPA негайно виконує (або відхиляє) всі запити щодо\n" +"сертифікатів, отже дані щодо стану запиту не мають сенсу. Ці дані\n" +"можуть знадобитися у наступних версіях або у разі, якщо CA видає\n" +"сертифікат не одразу.\n" +"\n" +"Передбачено підтримку таких причин відкликання:\n" +"\n" +" * 0 - не визначено\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Зауважте, що коди причини 7 не використовується. Докладніші дані у RFC " +"5280:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" msgid "" "\n" -"Plugins not accessible directly through the CLI, commands used internally\n" +"IPA certificate operations\n" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +"\n" +"In order to request a certificate:\n" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +"\n" +"SEARCHING:\n" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +"\n" +"When searching on dates the _from date does a >= search and the _to date\n" +"does a <= search. When combined these are done as an AND.\n" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +"\n" +"The date format is YYYY-mm-dd.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Request a new certificate and add the principal:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Retrieve an existing certificate:\n" +" ipa cert-show 1032\n" +"\n" +" Revoke a certificate (see RFC 5280 for reason details):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Remove a certificate from revocation hold status:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Check the status of a signing request:\n" +" ipa cert-status 10\n" +"\n" +" Search for certificates by hostname:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Search for revoked certificates by reason:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Search for certificates based on issuance date\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +"\n" +"The following revocation reasons are supported:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" msgstr "" "\n" -"Інтерфейс командного рядка не надає безпосереднього доступу до додатків, " -"команди використано для внутрішньої обробки\n" +"Дії з сертифікатами IPA\n" +"\n" +"Реалізує набір команд для керування сертифікатами серверів SSL.\n" +"\n" +"Запити щодо сертифікатів існують у формі Certificate Signing Request (CSR)\n" +"і форматі PEM.\n" +"\n" +"Якщо використовується автопідписний модуль, призначення CSR має збігатися\n" +"з призначенням на сервері. Служба сертифікації використовує лише CN\n" +"CSR і примусово визначає призначення.\n" +"\n" +"Сертифікат зберігається з реєстраційним записом, а реєстраційний запис\n" +"потребує вузла.\n" +"\n" +"Для того, щоб створити запит щодо сертифіката:\n" +"\n" +"* Вузол має існувати\n" +"* Служба має існувати (або слід скористатися параметром --add для\n" +"автоматичного додавання)\n" +"\n" +"ПОШУК:\n" +"\n" +"Шукати сертифікати можна за призначенням сертифіката, серійним номером,\n" +"причиною відкликання, датами чинності та датою видання.\n" +"\n" +"Якщо пошук виконується за датою _від, використовується порівняння >=, а " +"якщо\n" +"виконується пошук _до дати — порівняння <=. Поєднання обох пошуків " +"призводить\n" +"до пошуку з логічним поєднанням ТА.\n" +"\n" +"Дати обробляються як дати за Гринвічем, відповідно до дат визначених у\n" +"сертифікатах.\n" +"\n" +"Формат дати є таким: РРРР-мм-дд.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Створити запит щодо нового сертифіката і додати реєстраційний запис:\n" +" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" +"\n" +" Отримати вже створений сертифікат:\n" +" ipa cert-show 1032\n" +"\n" +" Відкликати сертифікат (причини визначено у RFC 5280):\n" +" ipa cert-revoke --revocation-reason=6 1032\n" +"\n" +" Вилучити сертифікат зі списку відкликання:\n" +" ipa cert-remove-hold 1032\n" +"\n" +" Перевірити стан запиту щодо підписування:\n" +" ipa cert-status 10\n" +"\n" +" Пошук сертифікатів за назвою вузла:\n" +" ipa cert-find --subject=ipaserver.example.com\n" +"\n" +" Пошук відкликаних сертифікатів за причиною:\n" +" ipa cert-find --revocation-reason=5\n" +"\n" +" Пошук сертифікатів за датою видання\n" +" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" +"\n" +"У поточній версії IPA негайно виконує (або відхиляє) всі запити щодо\n" +"сертифікатів, отже дані щодо стану запиту не мають сенсу. Ці дані\n" +"можуть знадобитися у наступних версіях або у разі, якщо CA видає\n" +"сертифікат не одразу.\n" +"\n" +"Передбачено підтримку таких причин відкликання:\n" +"\n" +" * 0 - unspecified\n" +" * 1 - keyCompromise\n" +" * 2 - cACompromise\n" +" * 3 - affiliationChanged\n" +" * 4 - superseded\n" +" * 5 - cessationOfOperation\n" +" * 6 - certificateHold\n" +" * 8 - removeFromCRL\n" +" * 9 - privilegeWithdrawn\n" +" * 10 - aACompromise\n" +"\n" +"Зауважте, що коди причини 7 не використовується. Докладніші дані у RFC " +"5280:\n" +"\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" -msgid "Dict of I18N messages" -msgstr "Словник перекладених повідомлень" +msgid "" +"\n" +"IPA currently immediately issues (or declines) all certificate requests so\n" +"the status of a request is not normally useful. This is for future use\n" +"or the case where a CA does not immediately issue a certificate.\n" +msgstr "" +"\n" +"У поточній версії IPA негайно виконує (або відхиляє) всі запити щодо\n" +"сертифікатів, отже дані щодо стану запиту не мають сенсу. Ці дані\n" +"можуть знадобитися у наступних версіях або у разі, якщо CA видає\n" +"сертифікат не одразу.\n" -msgid "Export plugin meta-data for the webUI." -msgstr "Експортувати метадані додатка для webUI." +msgid "" +"\n" +"IPA locations\n" +msgstr "" +"\n" +"Місця IPA\n" -msgid "Name of object to export" -msgstr "Назва об’єкта, який слід експортувати" +msgid "" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +msgstr "" +"\n" +"У IPA передбачено визначений binddn для використання з sudo, який " +"розташовано у\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgid "Name of method to export" -msgstr "Назва методу, який буде експортовано" +msgid "" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +msgstr "" +"\n" +"У IPA передбачено декілька параметрів налаштовування роботи sudo:\n" +" Users: користувачі або групи, які можуть викликати sudo.\n" +" Hosts: вузли або групи вузлів, користувачі якого можуть викликати sudo.\n" +" Allow Command: специфічні команди, які можна виконувати за допомогою " +"sudo.\n" +" Deny Command: специфічні команди, які не можна виконувати за допомогою " +"sudo.\n" +" RunAsUser: користувачі або групи, від імені яких sudo виконуватиме " +"команди.\n" +" RunAsGroup: групи, ідентифікатори яких буде використано sudo для " +"виконання команд.\n" +" Options: різноманітні параметри sudoers, які можуть змінити поведінку " +"sudo.\n" -msgid "Name of command to export" -msgstr "Назва команди для експортування" +msgid "" +"\n" +"IPA server roles\n" +msgstr "" +"\n" +"Ролі сервера IPA\n" -msgid "Dict of JSON encoded IPA Objects" -msgstr "Словник закодованих JSON об’єктів IPA" +msgid "" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +msgstr "" +"\n" +"Дані сервера IPA зберігаються на сервері LDAP у двох суфіксах:\n" +"* суфіксі домену, наприклад «dc=example,dc=com», тут містяться усі пов’язані " +"із доменом дані\n" +"* суфіксі ca, «o=ipaca», наявні лише на серверах із встановленим CA. Тут\n" +" містяться дані для компонента сервера сертифікатів.\n" -msgid "Dict of JSON encoded IPA Methods" -msgstr "Словник JSON-закодованих методів IPA" +msgid "" +"\n" +"IPA servers\n" +msgstr "" +"\n" +"Сервери IPA\n" -msgid "Dict of JSON encoded IPA Commands" -msgstr "Словник закодованих JSON команд IPA" +msgid "" +"\n" +"IPA servers\n" +"\n" +"Get information about installed IPA servers.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Find all servers:\n" +" ipa server-find\n" +"\n" +" Show specific server:\n" +" ipa server-show ipa.example.com\n" +msgstr "" +"\n" +"Сервери IPA\n" +"\n" +"Отримати дані щодо встановлених серверів IPA.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Знайти усі сервери:\n" +" ipa server-find\n" +"\n" +" Показати вказаний сервер:\n" +" ipa server-show ipa.example.com\n" + +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" +"\n" +"У IPA передбачено підтримку використання жетонів OTP для багатофакторного " +"розпізнавання.\n" +"За допомогою цього коду уможливлюється керування жетонами OTP.\n" + +msgid "" +"\n" +"IPA supports the use of an external Identity Provider for Oauth2.0 Device " +"Flow\n" +"authentication.\n" +msgstr "" +"\n" +"В IPA передбачено підтримку надавачів зовнішніх профілів для процесу\n" +"розпізнавання пристроїв Oauth2.0.\n" + +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" +"\n" +"У IPA передбачено підтримку зовнішнього проксі-сервера RADIUS для\n" +"виконання розпізнавання OTP krb5. Це надає системі значної гнучкості\n" +"з метою інтеграції зі сторонніми службами розпізнавання.\n" + +msgid "" +"\n" +"IPA supports the use of certificates for authentication. Certificates can\n" +"either be stored in the user entry (full certificate in the usercertificate\n" +"attribute), or simply linked to the user entry through a mapping.\n" +"This code enables the management of the rules allowing to link a\n" +"certificate to a user entry.\n" +msgstr "" +"\n" +"У IPA передбачено підтримку використання сертифікатів для розпізнавання. " +"Сертифікати\n" +"можуть зберігатися або у записі користувача (весь сертифікат у атрибуті\n" +"usercertificate), або просто прив’язуватися до запису користувача.\n" +"Цей код уможливлює керування правилами доступу до прив’язування сертифіката " +"до\n" +"запису користувача.\n" + +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" +"\n" +"Реалізує набір команд для керування сертифікатами серверів SSL.\n" + +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" +"\n" +"Для того, щоб створити запит щодо сертифіката:\n" + +msgid "" +"\n" +"It may be difficult to manipulate such DNS records without making a mistake\n" +"and entering an invalid value. DNS module provides an abstraction over " +"these\n" +"raw records and allows to manipulate each RR type with specific options. " +"For\n" +"each supported RR type, DNS module provides a standard option to manipulate\n" +"a raw records with format ---rec, e.g. --mx-rec, and special " +"options\n" +"for every part of the RR structure with format ---, e.g.\n" +"--mx-preference and --mx-exchanger.\n" +msgstr "" +"\n" +"Робота з такими записами DNS без помилки і введення некоректного значення\n" +"може бути складною. Модуль DNS надає у ваше розпорядження абстракцію над\n" +"цими необробленими записами і спосіб керування кожним з типів RR за\n" +"допомогою специфічних параметрів. Для кожного з підтримуваних типів\n" +"RR у модулі DNS передбачено стандартний параметр для роботи із\n" +"необробленими записами за допомогою формату --<тип_rr>-rec, наприклад,\n" +"--mx-rec та зі спеціальними параметрами для кожної із частин структури RR\n" +"за допомогою формату --<тип_rr>-<назва_частини>, наприклад --mx-preference\n" +"та --mx-exchanger.\n" msgid "" "\n" @@ -6592,20 +9045,84 @@ msgstr "" "\n" "Долучення до домену IPA\n" -msgid "Join an IPA domain" -msgstr "Долучитися до домену IPA" +msgid "" +"\n" +"Kerberos PKINIT feature status reporting tools.\n" +"\n" +"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" +"\n" +"EXAMPLES:\n" +" List PKINIT status on all masters:\n" +" ipa pkinit-status\n" +"\n" +" Check PKINIT status on `ipa.example.com`:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" List all IPA masters with disabled PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"For more info about PKINIT support see:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" +msgstr "" +"\n" +"Засоби звітування щодо стану можливості PKINIT Kerberos\n" +"\n" +"Звітування щодо того, увімкнено чи вимкнено PKINIT у Kerberos на основних " +"елементах IPA\n" +"\n" +"ПРИКЛАДИ:\n" +" Вивести список станів PKINIT для усіх основних елементів:\n" +" ipa pkinit-status\n" +"\n" +" Перевірити стан PKINIT на «ipa.example.com»:\n" +" ipa pkinit-status --server ipa.example.com\n" +"\n" +" Вивести список усіх основних елементів IPA із вимкненим PKINIT:\n" +" ipa pkinit-status --status='disabled'\n" +"\n" +"Докладніші дані щодо підтримки PKINIT:\n" +"\n" +"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgid "The hostname to register as" -msgstr "Назва вузла для реєстрації" - -msgid "The IPA realm" -msgstr "Область IPA" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "Апаратна платформа вузла (наприклад, «Lenovo T61»)" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "Операційна система вузла і її версія (наприклад, «Fedora 9»)" +msgid "" +"\n" +"Kerberos pkinit options\n" +"\n" +"Enable or disable anonymous pkinit using the principal\n" +"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" +"pkinit support.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Enable anonymous pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Disable anonymous pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"For more information on anonymous pkinit see:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +msgstr "" +"\n" +"Параметри pkinit Kerberos\n" +"\n" +"Вмикання або вимикання анонімного pkinit за допомогою реєстраційного\n" +"запису WELLKNOWN/ANONYMOUS@REALM. Має бути встановлено сервер з\n" +"підтримкою pkinit.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Вмикання анонімного pkinit:\n" +" ipa pkinit-anonymous enable\n" +"\n" +" Вимикання анонімного pkinit:\n" +" ipa pkinit-anonymous disable\n" +"\n" +"Щоб дізнатися більше про анонімний pkinit відвідайте цю сторінку:\n" +"\n" +"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" msgid "" "\n" @@ -6684,29 +9201,556 @@ msgstr "" " Зміна окремих правил для користувача «admin»:\n" " ipa krbtpolicy-mod admin --maxlife=3600\n" -msgid "Manage ticket policy for specific user" -msgstr "Керування правилами обробки квитків певного користувача" +msgid "" +"\n" +"Lockout status of a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +"\n" +" This connects to each IPA master and displays the lockout status on\n" +" each one.\n" +"\n" +" To determine whether an account is locked on a given server you need\n" +" to compare the number of failed logins and the time of the last " +"failure.\n" +" For an account to be locked it must exceed the maxfail failures within\n" +" the failinterval duration as specified in the password policy " +"associated\n" +" with the user.\n" +"\n" +" The failed login counter is modified only when a user attempts a log in\n" +" so it is possible that an account may appear locked but the last failed\n" +" login attempt is older than the lockouttime of the password policy. " +"This\n" +" means that the user may attempt a login again.\n" +" " +msgstr "" +"\n" +"Стан блокування облікового запису користувача\n" +"\n" +" Обліковий запис може бути заблоковано, якщо введено неправильний пароль\n" +" забагато разів протягом певного проміжку часу, який визначається " +"правилами\n" +" роботи з паролями. Блокування облікового запису є тимчасовим станом, " +"його\n" +" може бути розблоковано адміністратором.\n" +"\n" +" Ця програма з’єднується з кожним основним вузлом IPA і показує стан\n" +" блокування на кожному з них.\n" +"\n" +" Щоб визначити, чи слід блокувати обліковий запис на певному сервері, " +"слід\n" +" виконати порівняння кількості помилкових спроб входу та час останньої\n" +" невдалої спроби з еталонними значеннями. Обліковий запис буде " +"заблоковано,\n" +" якщо буде перевищено кількість maxfail помилкових спроб протягом " +"проміжку\n" +" часу failinterval. Відповідні значення задаються правилами обробки " +"паролів,\n" +" пов’язаними з обліковим записом користувача.\n" +"\n" +" Зміни до лічильника помилкових спроб входу вносяться, лише коли " +"користувач\n" +" виконує спробу увійти, тому може статися так, що обліковий запис " +"заблоковано,\n" +" хоча час, що минув з останньої помилкової спроби, перевищує час " +"блокування\n" +" (lockouttime), заданий правилам обробки паролів. Це означає, що " +"користувач\n" +" може увійти до системи знову.\n" +" " -msgid "Max life" -msgstr "Макс. строк дії" +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which CAs and profiles\n" +"may be used to issue certificates to particular principals or groups\n" +"of principals.\n" +"\n" +"SUBJECT PRINCIPAL SCOPE:\n" +"\n" +"For a certificate request to be allowed, the principal(s) that are\n" +"the subject of a certificate request (not necessarily the principal\n" +"actually requesting the certificate) must be included in the scope\n" +"of a CA ACL that also includes the target CA and profile.\n" +"\n" +"Users can be included by name, group or the \"all users\" category.\n" +"Hosts can be included by name, hostgroup or the \"all hosts\"\n" +"category. Services can be included by service name or the \"all\n" +"services\" category. CA ACLs may be associated with a single type of\n" +"principal, or multiple types.\n" +"\n" +"CERTIFICATE AUTHORITY SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more CAs by name, or by the\n" +"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" +"association implies an association with the 'ipa' CA (and only this\n" +"CA).\n" +"\n" +"PROFILE SCOPE:\n" +"\n" +"A CA ACL can be associated with one or more profiles by Profile ID.\n" +"The Profile ID is a string without spaces or punctuation starting\n" +"with a letter and followed by a sequence of letters, digits or\n" +"underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile on all CAs:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-" +"CA\":\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" +"\n" +"Керування правилами ACL CA.\n" +"\n" +"Цим додатком можна скористатися для визначення правил керування тим,\n" +"які служби сертифікації та профілі можна використовувати для видавання\n" +"сертифікатів певним реєстраційним записам або група реєстраційних\n" +"записів.\n" +"\n" +"ОБЛАСТЬ ДІЇ РЕЄСТРАЦІЙНИХ ЗАПИСІВ ОБ’ЄКТА:\n" +"\n" +"Щоб запит щодо сертифікації було задоволено, реєстраційні записи,\n" +"які є об’єктом запиту щодо сертифікації (необов’язково ті самі,\n" +"що і реєстраційний запис, з якого надсилається запит щодо сертифікації)\n" +"має бути включено до області дії ACL служби сертифікації, що\n" +"також включає службу сертифікації та профіль призначення.\n" +"\n" +"Користувачів можна включати за іменем, групою або категорією\n" +"«усі користувачі». Вузли можна включати за назвою, групою вузлів\n" +"або категорією «усі вузли». Служби можна включати за назвою служби\n" +"або категорією «усі служби». ACL служб сертифікації може бути\n" +"пов’язано із одним типом реєстраційних записів або із декількома\n" +"типами.\n" +"\n" +"ОБЛАСТЬ ДІЇ СЛУЖБИ СЕРТИФІКАЦІЇ:\n" +"\n" +"ACL служби сертифікації може бути пов’язано із однією або\n" +"декількома службами сертифікації за назвою або за категорією\n" +"«усі CA». З міркувань сумісності ACL служби сертифікації без\n" +"прив’язки до служби сертифікації вважається таким, що пов’язано\n" +"із службою сертифікації «ipa» (і лише з цією службою сертифікації).\n" +"\n" +"ОБЛАСТЬ ДІЇ ПРОФІЛІВ:\n" +"\n" +"ACL служби сертифікації може бути пов’язано із одним або декількома\n" +"профілями за ідентифікатором профілю. Ідентифікатором профілю\n" +"вважається рядок без пробілів і символів пунктуації, що починається\n" +"із літери і є послідовністю літер, цифр та символів підкреслювання\n" +"(«_»).\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Створити ACL служби сертифікації «test», який надає доступ усім\n" +" користувачам до профілю «UserCert» на усіх службах сертифікації:\n" +" ipa caacl-add test --usercat=all --cacat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Вивести властивості вказаного за назвою ACL служби сертифікації:\n" +" ipa caacl-show test\n" +"\n" +" Створити ACL служби сертифікації, який надаватиме змогу\n" +" користувачеві «alice» використовувати профіль «DNP3» на «DNP3-CA»:\n" +" ipa caacl-add alice_dnp3\n" +" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Вимкнути ACL служби сертифікації:\n" +" ipa caacl-disable test\n" +"\n" +" Вилучити ACL служби сертифікації:\n" +" ipa caacl-del test\n" -msgid "Maximum ticket life (seconds)" -msgstr "Максимальний строк дії квитка (у секундах)" +msgid "" +"\n" +"Manage CA ACL rules.\n" +"\n" +"This plugin is used to define rules governing which principals are\n" +"permitted to have certificates issued using a given certificate\n" +"profile.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a CA ACL \"test\" that grants all users access to the\n" +" \"UserCert\" profile:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Display the properties of a named CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Disable a CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Remove a CA ACL:\n" +" ipa caacl-del test\n" +msgstr "" +"\n" +"Керування правилами CA ACL.\n" +"\n" +"Цей додаток призначено для визначення правил, що керують тим,\n" +"які реєстраційні записи можуть мати сертифікати, випущені за\n" +"допомогою даного профілю сертифікатів.\n" +"\n" +"СИНТАКСИС ІДЕНТИФІКАТОРА ПРОФІЛЮ:\n" +"\n" +"Ідентифікатор профілю — рядок без пробілів і символів пунктуації,\n" +"що починається з літери і складається з послідовності літер, цифр, та " +"символів підкреслювання («_»).\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Створити CA ACL «test», який надає доступ усім користувачам до\n" +" профілю «UserCert»:\n" +" ipa caacl-add test --usercat=all\n" +" ipa caacl-add-profile test --certprofiles UserCert\n" +"\n" +" Показати усі властивості вказаного за назвою CA ACL:\n" +" ipa caacl-show test\n" +"\n" +" Створити CA ACL, який надає користувачеві «alice» право\n" +" використовувати профіль «DNP3»:\n" +" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" +" ipa caacl-add-user alice_dnp3 --user=alice\n" +"\n" +" Вимкнути певний CA ACL:\n" +" ipa caacl-disable test\n" +"\n" +" Вилучити певний CA ACL:\n" +" ipa caacl-del test\n" -msgid "Max renew" -msgstr "Макс. вік поновлення" +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" +"\n" +"Керування службами сертифікації\n" -msgid "Maximum renewable age (seconds)" -msgstr "Максимальний вік, протягом якого можливе поновлення (у секундах)" +msgid "" +"\n" +"Manage Certificate Identity Mapping configuration and rules.\n" +msgstr "" +"\n" +"Керування налаштуваннями і правилами прив’язки сертифікатів до профілів.\n" -msgid "Modify Kerberos ticket policy." -msgstr "Змінити правила квитків Kerberos." +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " +"--desc \"User Certificates\" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +msgstr "" +"\n" +"Керування профілями сертифікатів\n" +"\n" +"Профілі сертифікатів використовуються службами сертифікації (CA) під час\n" +"підписування сертифікатів для визначення того, чи є прийнятним запит на\n" +"підписування сертифіката (CSR), і, якщо це так, визначення можливостей\n" +"і розширень, які буде надано сертифікатом.\n" +"\n" +"Форматом профілю сертифікатів є список значень, які може обробляти\n" +"Dogtag або система сертифікації служби сертифікації Red Hat.\n" +"\n" +"СИНТАКСИС ІДЕНТИФІКАТОРА ПРОФІЛЮ:\n" +"\n" +"Ідентифікатор профілю — рядок без пробілів і символів пунктуації,\n" +"що починається з літери і складається з послідовності літер, цифр, та " +"символів підкреслювання («_»).\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Імпортувати профіль, у якому не зберігатимуться видані сертифікати:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --summary \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Вилучити профіль сертифікатів:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Показати дані щодо профілю:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Зберегти налаштування профілю до файла:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Шукати профілі, у яких не зберігаються сертифікати:\n" +" ipa certprofile-find --store=false\n" +"\n" +"ФОРМАТ НАЛАШТУВАНЬ ПРОФІЛЮ:\n" +"\n" +"Налаштування профілю зберігаються у вигляді простого списку\n" +"властивостей, що використовується системою сертифікації Dogtag.\n" +"Підтримки формату XML не передбачено.\n" +"\n" +"Профілів, які керуються IPA, стосуються такі обмеження:\n" +"\n" +"- Під час імпортування профілю поле «profileId», якщо таке є, має\n" +" містити значення, що збігається з ідентифікатором, вказаним у рядку " +"команди.\n" +"\n" +"- Значенням поля «classId» має бути «caEnrollImpl»\n" +"\n" +"- Значенням поля «auth.instance_id» має бути «raCertAuth»\n" +"\n" +"- Має бути використано вхідний клас «certReqInputImpl» і вихідний\n" +" клас «certOutputImpl».\n" -msgid "Reset Kerberos ticket policy to the default values." -msgstr "Відновити типові правила квитків Kerberos." +msgid "" +"\n" +"Manage Certificate Profiles\n" +"\n" +"Certificate Profiles are used by Certificate Authority (CA) in the signing " +"of\n" +"certificates to determine if a Certificate Signing Request (CSR) is " +"acceptable,\n" +"and if so what features and extensions will be present on the certificate.\n" +"\n" +"The Certificate Profile format is the property-list format understood by " +"the\n" +"Dogtag or Red Hat Certificate System CA.\n" +"\n" +"PROFILE ID SYNTAX:\n" +"\n" +"A Profile ID is a string without spaces or punctuation starting with a " +"letter\n" +"and followed by a sequence of letters, digits or underscore (\"_\").\n" +"\n" +"EXAMPLES:\n" +"\n" +" Import a profile that will not store issued certificates:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --desc \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Delete a certificate profile:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Show information about a profile:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Save profile configuration to a file:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Search for profiles that do not store certificates:\n" +" ipa certprofile-find --store=false\n" +"\n" +"PROFILE CONFIGURATION FORMAT:\n" +"\n" +"The profile configuration format is the raw property-list format\n" +"used by Dogtag Certificate System. The XML format is not supported.\n" +"\n" +"The following restrictions apply to profiles managed by IPA:\n" +"\n" +"- When importing a profile the \"profileId\" field, if present, must\n" +" match the ID given on the command line.\n" +"\n" +"- The \"classId\" field must be set to \"caEnrollImpl\"\n" +"\n" +"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" +"\n" +"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" +" class must be used.\n" +"\n" +msgstr "" +"\n" +"Керування профілями сертифікатів\n" +"\n" +"Профілі сертифікатів використовуються службами сертифікації (CA) під час\n" +"підписування сертифікатів для визначення того, чи є прийнятним запит на\n" +"підписування сертифіката (CSR), і, якщо це так, визначення можливостей\n" +"і розширень, які буде надано сертифікатом.\n" +"\n" +"Форматом профілю сертифікатів є список значень, які може обробляти\n" +"Dogtag або система сертифікації служби сертифікації Red Hat.\n" +"\n" +"СИНТАКСИС ІДЕНТИФІКАТОРА ПРОФІЛЮ:\n" +"\n" +"Ідентифікатор профілю — рядок без пробілів і символів пунктуації,\n" +"що починається з літери і складається з послідовності літер, цифр, та " +"символів підкреслювання («_»).\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Імпортувати профіль, у якому не зберігатимуться видані сертифікати:\n" +" ipa certprofile-import ShortLivedUserCert \\\n" +" --file UserCert.profile --summary \"User Certificates\" \\\n" +" --store=false\n" +"\n" +" Вилучити профіль сертифікатів:\n" +" ipa certprofile-del ShortLivedUserCert\n" +"\n" +" Показати дані щодо профілю:\n" +" ipa certprofile-show ShortLivedUserCert\n" +"\n" +" Зберегти налаштування профілю до файла:\n" +" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" +"\n" +" Шукати профілі, у яких не зберігаються сертифікати:\n" +" ipa certprofile-find --store=false\n" +"\n" +"ФОРМАТ НАЛАШТУВАНЬ ПРОФІЛЮ:\n" +"\n" +"Налаштування профілю зберігаються у вигляді простого списку\n" +"властивостей, що використовується системою сертифікації Dogtag.\n" +"Підтримки формату XML не передбачено.\n" +"\n" +"Профілів, які керуються IPA, стосуються такі обмеження:\n" +"\n" +"- Під час імпортування профілю поле «profileId», якщо таке є, має\n" +" містити значення, що збігається з ідентифікатором, вказаним у рядку " +"команди.\n" +"\n" +"- Значенням поля «classId» має бути «caEnrollImpl»\n" +"\n" +"- Значенням поля «auth.instance_id» має бути «raCertAuth»\n" +"\n" +"- Має бути використано вхідний клас «certReqInputImpl» і вихідний\n" +" клас «certOutputImpl».\n" +"\n" -msgid "Display the current Kerberos ticket policy." -msgstr "Показати поточні правила квитків Kerberos." +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" +"\n" +"Керування записами зон та ресурсів DNS.\n" + +msgid "" +"\n" +"Manage External Identity Provider Servers.\n" +msgstr "" +"\n" +"Керування серверами надавачів зовнішніх профілів.\n" + +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" +"\n" +"Керування жетонами OTP.\n" + +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" +"\n" +"Керування проксі-серверами RADIUS.\n" + +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" +"\n" +"Керування жетонами YubiKey.\n" + +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" +"\n" +"Керування сховищами.\n" + +msgid "" +"\n" +"Managed permissions\n" +msgstr "" +"\n" +"Керовані права доступу\n" + +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" +"\n" +"Робота з місцями DNS\n" + +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" +"\n" +"Керування налаштуваннями сервера DNS\n" msgid "" "\n" @@ -6902,135 +9946,206 @@ msgstr "" "додаватиметься резюме щодо кожного оновлення типової групи\n" "користувачів.\n" -msgid "Migrate users and groups from DS to IPA." -msgstr "Перенести дані користувачів і груп з DS до IPA." - -msgid "LDAP URI" -msgstr "URI LDAP" - -msgid "LDAP URI of DS server to migrate from" -msgstr "URI LDAP сервера DS, з якого здійснюватиметься міграція" - -msgid "bind password" -msgstr "пароль прив’язки" - -msgid "Bind DN" -msgstr "DN для прив'язки" - -msgid "User container" -msgstr "Контейнер користувачів" - -msgid "DN of container for users in DS relative to base DN" -msgstr "DN контейнера користувачів у DS відносно до основного DN" - -msgid "Group container" -msgstr "Контейнер груп" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "DN контейнера груп у DS відносно до основного DN" - -msgid "User object class" -msgstr "Клас об’єктів користувача" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "Класи об’єктів, використаних для пошуку записів користувачів у DS" - -msgid "Group object class" -msgstr "Клас об’єктів групи" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "Класи об’єктів, використаних для пошуку записів груп у DS" - -msgid "Ignore user object class" -msgstr "Ігнорувати клас об’єктів користувача" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "Класи об’єктів, які буде проігноровано для записів користувачів у DS" - -msgid "Ignore user attribute" -msgstr "Ігнорувати атрибут користувача" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "Атрибути, які буде проігноровано для записів користувачів у DS" - -msgid "Ignore group object class" -msgstr "Ігнорувати клас об’єктів групи" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "Класи об’єктів, які буде проігноровано для записів груп у DS" - -msgid "Ignore group attribute" -msgstr "Ігнорувати атрибут групи" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "Атрибути, які буде проігноровано для записів груп у DS" - -msgid "Overwrite GID" -msgstr "Перезаписати ідентифікатор групи" - msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" +"\n" +"Migration to IPA\n" +"\n" +"Migrate users and groups from an LDAP server to IPA.\n" +"\n" +"This performs an LDAP query against the remote server searching for\n" +"users and groups in a container. In order to migrate passwords you need\n" +"to bind as a user that can read the userPassword attribute on the remote\n" +"server. This is generally restricted to high-level admins such as\n" +"cn=Directory Manager in 389-ds (this is the default bind user).\n" +"\n" +"The default user container is ou=People.\n" +"\n" +"The default group container is ou=Groups.\n" +"\n" +"Users and groups that already exist on the IPA server are skipped.\n" +"\n" +"Two LDAP schemas define how group members are stored: RFC2307 and\n" +"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" +"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" +"\n" +"The schema compat feature allows IPA to reformat data for systems that\n" +"do not support RFC2307bis. It is recommended that this feature is disabled\n" +"during migration to reduce system overhead. It can be re-enabled after\n" +"migration. To migrate with it enabled use the \"--with-compat\" option.\n" +"\n" +"Migrated users do not have Kerberos credentials, they have only their\n" +"LDAP password. To complete the migration process, users need to go\n" +"to http://ipa.example.com/ipa/migration and authenticate using their\n" +"LDAP password in order to generate their Kerberos credentials.\n" +"\n" +"Migration is disabled by default. Use the command ipa config-mod to\n" +"enable it:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"If a base DN is not provided with --basedn then IPA will use either\n" +"the value of defaultNamingContext if it is set or the first value\n" +"in namingContexts set in the root of the remote LDAP server.\n" +"\n" +"Users are added as members to the default user group. This can be a\n" +"time-intensive task so during migration this is done in a batch\n" +"mode for every 100 users. As a result there will be a window in which\n" +"users will be added to IPA but will not be members of the default\n" +"user group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" The simplest migration, accepting all defaults:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Specify the user and group container. This can be used to migrate user\n" +" and group data from an IPA v1 server:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Since IPA v2 server already contain predefined groups that may collide " +"with\n" +" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" +" having colliding group as their primary group may happen to belong to\n" +" an unknown group on new IPA v2 server.\n" +" Use --group-overwrite-gid option to overwrite GID of already existing " +"groups\n" +" to prevent this issue:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Migrated users or groups may have object class and accompanied attributes\n" +" unknown to the IPA v2 server. These object classes and attributes may be\n" +" left out of the migration process:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"LOGGING\n" +"\n" +"Migration will log warnings and errors to the Apache error log. This\n" +"file should be evaluated post-migration to correct or investigate any\n" +"issues that were discovered.\n" +"\n" +"For every 100 users migrated an info-level message will be displayed to\n" +"give the current progress and duration to make it possible to track\n" +"the progress of migration.\n" +"\n" +"If the log level is debug, either by setting debug = True in\n" +"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " +"printed\n" +"for each user added plus a summary when the default user group is\n" +"updated.\n" msgstr "" -"Під час перенесення групи, яку вже створено у домені IPA буде перезаписано " -"ідентифікатор групи і повідомлено про успіх" - -msgid "LDAP schema" -msgstr "Схема LDAP" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" -"Схема, використана на сервері LDAP. Підтримувані значення: RFC2307 і " -"RFC2307bis. Типове значення: RFC2307bis" - -msgid "Continue" -msgstr "Продовжити" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "" -"Режим неперервної обробки. Програма повідомляє про помилки, але продовжує " -"обробку." - -msgid "Base DN" -msgstr "Кореневий DN" - -msgid "Base DN on remote LDAP server" -msgstr "Основний DN на віддаленому сервері LDAP" - -msgid "Ignore compat plugin" -msgstr "Ігнорувати додаток compat" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "Уможливлює перенесення, незважаючи на використання додатка compat" - -msgid "CA certificate" -msgstr "Сертифікат CA" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "Завантажити сертифікат CA сервера LDAP з вказаного файла" - -msgid "groups to exclude from migration" -msgstr "групи, які слід виключити з перенесення" - -msgid "users to exclude from migration" -msgstr "записи користувачів, які слід виключити з перенесення" - -msgid "Lists of objects migrated; categorized by type." -msgstr "Списки об’єктів, міграцію яких виконано; впорядкований за типами." - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "" -"Списки об’єктів, міграцію яких не вдалося виконати; впорядкований за типами." - -msgid "False if migration mode was disabled." -msgstr "False, якщо режим міграції було вимкнено." - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "" -"False, якщо перенесення зазнає невдачі через увімкнення додатка сумісності." +"\n" +"Перехід на IPA\n" +"\n" +"Перенесення користувачів і груп з сервера LDAP на IPA.\n" +"\n" +"Надсилає запит LDAP до віддаленого сервера з метою пошуку користувачів\n" +"і груп у контейнері. З метою перенесення паролів вам слід прив’язатися\n" +"до сервера від імені користувача, який може читати атрибут userPassword\n" +"на сервері. Перелік таких користувачів зазвичай обмежено адміністраторами\n" +"вищого рівня, зокрема cn=Directory Manager на 389-ds (типовий користувач\n" +"bind).\n" +"\n" +"Типовим контейнером користувачів є ou=People.\n" +"\n" +"Типовим контейнером груп є ou=Groups.\n" +"\n" +"Записи користувачів і груп, які вже створено на сервері IPA буде\n" +"пропущено.\n" +"\n" +"Дві схеми LDAP визначають спосіб зберігання записів учасників групи:\n" +"RFC2307 і RFC2307bis. RFC2307bis використовує атрибути member і\n" +"uniquemember для визначення учасників групи, RFC2307 використовує\n" +"memberUid. Типовою є схема RFC2307bis.\n" +"\n" +"За допомогою додатка compat IPA може повторно форматувати дані для систем,\n" +"де не передбачено підтримки RFC2307bis. Рекомендується вимикати цей додаток\n" +"під час перенесення, щоб зменшити навантаження на систему. Ви зможете\n" +"увімкнути його після перенесення. Щоб перенести дані з увімкненим додатком\n" +"скористайтеся параметром «--with-compat».\n" +"\n" +"Перенесені користувачі не матимуть реєстраційних записів Kerberos,\n" +"перенесено буде лише пароль LDAP. Щоб завершити процес перенесення,\n" +"користувачам слід відкрити сторінку\n" +"http://ipa.example.com/ipa/migration і пройти розпізнавання за\n" +"допомогою пароля LDAP з метою створення запису реєстраційних даних\n" +"Kerberos.\n" +"\n" +"Типово перенесення вимкнено. Для його вмикання скористайтеся командою\n" +"ipa config-mod:\n" +"\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +"Якщо основний DN не буде надано за допомогою --basedn, IPA " +"використовуватиме\n" +"значення defaultNamingContext, якщо його встановлено, або перше значення у\n" +"наборі namingContexts у кореневій теці віддаленого сервера LDAP.\n" +"\n" +"Записи користувачів додають до типової групи користувачів. Процес такого\n" +"додавання може бути доволі тривалим, отже під час перенесення він " +"виконується\n" +"у пакетному режимі, пакетами по 100 користувачів. У результаті буде певний\n" +"період, коли записи користувачів вже буде додано до IPA, але ці користувачі\n" +"ще не будуть учасниками типової групи користувачів.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Найпростіше перенесення з типовими параметрами:\n" +" ipa migrate-ds ldap://ds.example.com:389\n" +"\n" +" Визначення контейнерів користувача і групи. Можна скористатися для\n" +" перенесення даних користувача і групи з сервера IPA версії 1:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Оскільки на сервері IPA версії 2 вже передбачено попередньо\n" +" визначені групи, які можуть збігатися з групами, які переносяться з\n" +" сервера (IPA версії 1), наприклад admins, ipausers, користувачів з\n" +" таких груп може бути перенесено до невідомої (unknown) групи на\n" +" новому сервері IPA версії 2.\n" +" Скористайтеся параметром --group-overwrite-gid для перезапису\n" +" ідентифікатора групи вже створених груп для запобігання цій\n" +" незручності:\n" +" ipa migrate-ds --group-overwrite-gid \\\n" +" --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" ldap://ds.example.com:389\n" +"\n" +" Перенесені дані користувачів та груп можуть містити класи об’єктів та " +"супутні\n" +" атрибути, невідомі серверу IPA версії 2. Ці класти об’єктів та атрибутів\n" +" може бути виключено з процедури перенесення даних:\n" +" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" +" --group-container='cn=groups,cn=accounts' \\\n" +" --user-ignore-objectclass=radiusprofile \\\n" +" --user-ignore-attribute=radiusgroupname \\\n" +" ldap://ds.example.com:389\n" +"\n" +"ВЕДЕННЯ ЖУРНАЛУ\n" +"\n" +"Під час перенесення повідомлення з попередженнями та записами помилок\n" +"додаватимуться до журналу помилок Apache. З відповідним файлом слід\n" +"ознайомитися після завершення перенесення для виправлення та виявлення\n" +"помилок, які могли статися.\n" +"\n" +"Для кожного пакета зі 100 перенесених записів користувачів буде показано\n" +"інформаційне повідомлення, призначене для оцінки поступу обробки та\n" +"визначення її тривалості.\n" +"\n" +"Якщо визначено рівень ведення журналу debug за допомогою встановлення\n" +"debug = True у /etc/ipa/default.conf або у /etc/ipa/server.conf,\n" +"для кожного перенесеного запису додаватиметься власний запис, також\n" +"додаватиметься резюме щодо кожного оновлення типової групи\n" +"користувачів.\n" msgid "" "\n" @@ -7039,31 +10154,61 @@ msgstr "" "\n" "Інші додатки\n" -msgid "Show environment variables." -msgstr "Показати змінні середовища." - -msgid "Forward to server instead of running locally" -msgstr "Переспрямувати на сервер замість локального виконання" +msgid "" +"\n" +"Modify ID range.\n" +"\n" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +" " +msgstr "" +"\n" +"Змінити діапазон ідентифікаторів.\n" +"\n" +"=======\n" +"ПОПЕРЕДЖЕННЯ:\n" +"\n" +"Додаток DNA у 389-ds розподілятиме ідентифікатори на основі діапазонів,\n" +"налаштованих для локального домену. У поточній версії додаток DNA *не може*\n" +"переналаштуватися на основі локальних діапазонів, встановлених цим\n" +"сімейством команд.\n" +"\n" +"Для використання нового локального діапазону до налаштувань додатка DNA\n" +"слід внести зміни вручну. Зокрема, слід змінити атрибут dnaNextRange " +"'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' так, щоб\n" +"він відповідав новому діапазону.\n" +"=======\n" +" " msgid "" -"retrieve and print all attributes from the server. Affects command output." +"\n" +"Modify a trust (for future use).\n" +"\n" +" Currently only the default option to modify the LDAP attributes is\n" +" available. More specific options will be added in coming releases.\n" +" " msgstr "" -"отримати і вивести всі атрибути з сервера. Стосується лише виводу команд." - -msgid "Total number of variables env (>= count)" -msgstr "Кількість змінних env (>= count)" - -msgid "Number of variables returned (<= total)" -msgstr "Кількість повернутих змінних (<= загальної)" - -msgid "Show all loaded plugins." -msgstr "Показати список завантажених додатків." - -msgid "Dictionary mapping plugin names to bases" -msgstr "Словник для встановлення відповідності назв додатків основним" - -msgid "Number of plugins loaded" -msgstr "Кількість завантажених додатків" +"\n" +" Змінити запис довіри (для наступного використання).\n" +"\n" +" У поточній версії можлива зміна лише типова зміна атрибутів LDAP.\n" +" Додаткові варіанти буде додано у наступних випусках.\n" +" " msgid "" "\n" @@ -7112,104 +10257,126 @@ msgstr "" " Вилучення мережевої групи:\n" " ipa netgroup-del admins\n" -msgid "Netgroup name" -msgstr "Назва мережевої групи" +msgid "" +"\n" +"Netgroups\n" +"\n" +"A netgroup is a group used for permission checking. It can contain both\n" +"user and host values.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new netgroup:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Add members to the netgroup:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Remove a member from the netgroup:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Display information about a netgroup:\n" +" ipa netgroup-show admins\n" +"\n" +" Delete a netgroup:\n" +" ipa netgroup-del admins\n" +msgstr "" +"\n" +"Мережеві групи\n" +"\n" +"Мережева група — група для перевірки прав доступу. Може містити значення\n" +"користувачів та вузлів.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додавання нової мережевої групи:\n" +" ipa netgroup-add --desc=\"NFS admins\" admins\n" +"\n" +" Додавання учасників до мережевої групи:\n" +" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" +"\n" +" Вилучення користувача з мережевої групи:\n" +" ipa netgroup-remove-member --users=tuser2 admins\n" +"\n" +" Показ даних щодо мережевої групи:\n" +" ipa netgroup-show admins\n" +"\n" +" Вилучення мережевої групи:\n" +" ipa netgroup-del admins\n" -msgid "Netgroup description" -msgstr "Опис мережевої групи" +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" +"\n" +"Зауважте, що коди причини 7 не використовується. Докладніші дані у RFC " +"5280:\n" -msgid "NIS domain name" -msgstr "Назва домену NIS" +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" +"\n" +"Зауважте відмінність між атрибутами і записами. Права доступу є " +"незалежними,\n" +"отже можливість додавання запису користувача не означає, що цей запис " +"згодом\n" +"буде придатним до редагування.\n" -msgid "IPA unique ID" -msgstr "Унікальний ід. IPA" +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" +"\n" +"Жетони OTP\n" -msgid "Member netgroups" -msgstr "Мережеві групи учасника" - -msgid "Indirect Member netgroups" -msgstr "Опосередковані мережеві групи учасника" - -msgid "Member User" -msgstr "Користувач учасника" - -msgid "Member Group" -msgstr "Група учасника" - -msgid "Member Host" -msgstr "Вузол-учасник" - -msgid "Member Hostgroup" -msgstr "Група вузлів учасника" - -msgid "Add a new netgroup." -msgstr "Додати нову мережеву групу." - -msgid "Add members to a netgroup." -msgstr "Додати учасників до мережевої групи." - -msgid "member netgroup" -msgstr "мережева група учасника" - -msgid "netgroups to add" -msgstr "мережеві групи, які слід додати" - -msgid "Delete a netgroup." -msgstr "Вилучити мережеву групу." - -msgid "Search for a netgroup." -msgstr "Шукати мережеву групу." - -msgid "search for managed groups" -msgstr "шукати керовані групи" - -msgid "Search for netgroups with these member netgroups." -msgstr "Шукати мережеві групи з цими мережевими групами-учасниками." - -msgid "Search for netgroups without these member netgroups." -msgstr "Шукати мережеві групи без цих мережевих груп-учасників." - -msgid "Search for netgroups with these member users." -msgstr "Шукати мережеві групи з цими користувачами-учасниками." - -msgid "Search for netgroups without these member users." -msgstr "Шукати мережеві групи без цих користувачів-учасників." - -msgid "Search for netgroups with these member groups." -msgstr "Шукати мережеві групи із вказаними групами-учасниками." - -msgid "Search for netgroups without these member groups." -msgstr "Шукати мережеві групи без цих груп-учасників." - -msgid "Search for netgroups with these member hosts." -msgstr "Шукати мережеві групи з цими вузлами-учасниками." - -msgid "Search for netgroups without these member hosts." -msgstr "Шукати мережеві групи без цих вузлів-учасників." - -msgid "Search for netgroups with these member host groups." -msgstr "Шукати мережеві групи із вказаними групами вузлів-учасниками." - -msgid "Search for netgroups without these member host groups." -msgstr "Шукати мережеві групи без цих груп вузлів-учасників." - -msgid "Search for netgroups with these member of netgroups." -msgstr "Шукати мережеві групи з цими мережевими групами участі." - -msgid "Search for netgroups without these member of netgroups." -msgstr "Шукати мережеві групи без цих мережевих груп участі." - -msgid "Modify a netgroup." -msgstr "Змінити мережеву групу." - -msgid "Remove members from a netgroup." -msgstr "Вилучити учасників з мережевої групи." - -msgid "netgroups to remove" -msgstr "мережеві групи для вилучення" - -msgid "Display information about a netgroup." -msgstr "Показати дані щодо мережевої групи." +msgid "" +"\n" +"OTP Tokens\n" +"\n" +"Manage OTP tokens.\n" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Examine the token:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Change the vendor:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " +"Hat\"\n" +"\n" +" Delete a token:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +msgstr "" +"\n" +"Жетони OTP\n" +"\n" +"Керування жетонами OTP.\n" +"\n" +"У IPA передбачено підтримку використання жетонів OTP для багатофакторного " +"розпізнавання.\n" +"За допомогою цього коду уможливлюється керування жетонами OTP.\n" +"\n" +" Додати новий жетон:\n" +" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"\n" +" Перевірити жетон:\n" +" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +"\n" +" Змінити постачальника:\n" +" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red " +"Hat\"\n" +"\n" +" Вилучити жетон:\n" +" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" msgid "" "\n" @@ -7262,279 +10429,314 @@ msgstr "" " Змінити тривалість максимального вікна синхронізації HOTP на 50:\n" " ipa hotpconfig-mod --hotp-sync-window=50\n" -msgid "TOTP authentication Window" -msgstr "Вікно розпізнавання TOTP" - -msgid "TOTP authentication time variance (seconds)" -msgstr "Відхилення часу розпізнавання TOTP (у секундах)" - -msgid "TOTP Synchronization Window" -msgstr "Вікно синхронізації TOTP" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "Відхилення часу синхронізації TOTP (у секундах)" - -msgid "HOTP Authentication Window" -msgstr "Вікно розпізнавання HOTP" - -msgid "HOTP authentication skip-ahead" -msgstr "Випереджальне пропускання розпізнавання HOTP" - -msgid "HOTP Synchronization Window" -msgstr "Вікно синхронізації HOTP" - -msgid "HOTP synchronization skip-ahead" -msgstr "Випереджальне пропускання синхронізації HOTP" - -msgid "Modify OTP configuration options." -msgstr "Змінити параметри налаштування OTP." - -msgid "Show the current OTP configuration." -msgstr "Показати поточні налаштування OTP." - msgid "" "\n" -"OTP Tokens\n" +"Password policy\n" "\n" -"Manage OTP tokens.\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" "\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" "\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" "\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" "\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" msgstr "" "\n" -"Жетони OTP\n" +"Правила паролів\n" "\n" -"Керування жетонами OTP.\n" +"Правила паролів встановлюють обмеження щодо використання паролів IPA,\n" +"зокрема максимальний строк дії, мінімальний строк дії, кількість паролів,\n" +"які зберігатимуться у журналі, потрібна кількість класів символів (для\n" +"складних паролів) та мінімальну довжину пароля.\n" "\n" -"У IPA передбачено підтримку використання жетонів OTP для багатофакторного " -"розпізнавання.\n" -"За допомогою цього коду уможливлюється керування жетонами OTP.\n" +"Типово, визначено одні загальні правила для всіх користувачів. Ви можете\n" +"створити правило паролів, яке стосуватиметься однієї групи. Для одного\n" +"користувача може бути використано лише один набір правил паролів: груповий\n" +"або загальний. Групові правила паролів є незалежними, вони не є загальними\n" +"правилами з додаванням нетипових параметрів.\n" "\n" -" Додати новий жетон:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" +"Для кожного набору групових правил паролів має бути встановлено окреме\n" +"значення пріоритету. Якщо користувач є учасником декількох груп, для яких\n" +"встановлено правила паролів, пріоритет визначає, які з правил має бути\n" +"застосовано. Менші значення відповідають вищому пріоритету правил.\n" "\n" -" Перевірити жетон:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Змінити постачальника:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Вилучити жетон:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" - -msgid "Unique ID" -msgstr "Унікальний ід." - -msgid "Type of the token" -msgstr "Тип ключа" - -msgid "Token description (informational only)" -msgstr "Опис ключа (лише інформаційний)" - -msgid "Owner" -msgstr "Власник" - -msgid "Assigned user of the token (default: self)" -msgstr "Призначений користувач ключа (типове значення: self)" - -msgid "Manager" -msgstr "Керівник" - -msgid "Assigned manager of the token (default: self)" -msgstr "Призначений керівник ключа (типове значення: self)" - -msgid "Disabled" -msgstr "Вимкнено" - -msgid "Mark the token as disabled (default: false)" -msgstr "Позначення ключа як вимкненого (типове значення: false)" - -msgid "Validity start" -msgstr "Початок чинності" - -msgid "First date/time the token can be used" -msgstr "Час початку використання ключа (дата і час)" - -msgid "Validity end" -msgstr "Завершення чинності" - -msgid "Last date/time the token can be used" -msgstr "Строк дії ключа (дата і час)" - -msgid "Vendor" -msgstr "Постачальник" - -msgid "Token vendor name (informational only)" -msgstr "Назва виробника ключа (лише інформація)" - -msgid "Model" -msgstr "Модель" - -msgid "Token model (informational only)" -msgstr "Модель ключа (лише інформація)" - -msgid "Serial" -msgstr "Серійний номер" - -msgid "Token serial (informational only)" -msgstr "Серійний номер ключа (лише інформація)" - -msgid "Token secret (Base32; default: random)" -msgstr "Пароль ключа (Base32; типове значення: випадковий)" - -msgid "Token hash algorithm" -msgstr "Алгоритм хешування ключа" - -msgid "Digits" -msgstr "Цифри" - -msgid "Number of digits each token code will have" -msgstr "Кількість цифр у кожному з кодів ключа" - -msgid "Clock offset" -msgstr "Зсув годинника" - -msgid "TOTP token / IPA server time difference" -msgstr "Часова розбіжність між ключем TOTP і сервером IPA" - -msgid "Clock interval" -msgstr "Інтервал годинника" - -msgid "Length of TOTP token code validity" -msgstr "Тривалість чинності коду ключа TOTP" - -msgid "Counter" -msgstr "Лічильник" - -msgid "Initial counter for the HOTP token" -msgstr "Початковий лічильник для ключа HOTP" - -msgid "Add a new OTP token." -msgstr "Додати новий жетон OTP." - -msgid "(deprecated)" -msgstr "(застаріле)" - -msgid "Do not display QR code" -msgstr "Не показувати код QR" - -msgid "Add users that can manage this token." -msgstr "Додати записи користувачів, які можуть керувати цим жетоном." - -msgid "Delete an OTP token." -msgstr "Вилучити жетон OTP." - -msgid "Search for OTP token." -msgstr "Шукати жетон OTP." - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "Результати мають містити лише атрибут основного ключа («id»)" - -msgid "Modify a OTP token." -msgstr "Змінити жетон OTP." - -msgid "Rename the OTP token object" -msgstr "Перейменувати об’єкт жетона OTP" - -msgid "Display information about an OTP token." -msgstr "Показати інформацію щодо жетона OTP." - -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" -"\n" -"Жетони YubiKey\n" -"\n" -"Керування жетонами YubiKey.\n" -"\n" -"Цей код є розширенням до додатка otptoken, він надає підтримку " -"безпосереднього\n" -"читання та запису жетонів YubiKey.\n" +"Групові правила паролів автоматично вилучаються під час вилучення\n" +"відповідних груп.\n" "\n" "ПРИКЛАДИ:\n" "\n" -" Додати новий жетон:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" +" Внесення змін до загальних правил:\n" +" ipa pwpolicy-mod --minlength=10\n" +"\n" +" Додавання нових групових правил паролів:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Показ загальних правил паролів:\n" +" ipa pwpolicy-show\n" +"\n" +" Показ групових правил паролів:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Показ правил, які має бути застосовано до певного користувача:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Внесення змін до групових правил паролів:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" msgid "" "\n" -"Set a user's password\n" +"Password policy\n" "\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" +"A password policy sets limitations on IPA passwords, including maximum\n" +"lifetime, minimum lifetime, the number of passwords to save in\n" +"history, the number of character classes required (for stronger passwords)\n" +"and the minimum password length.\n" "\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" +"By default there is a single, global policy for all users. You can also\n" +"create a password policy to apply to a group. Each user is only subject\n" +"to one password policy, either the group policy or the global policy. A\n" +"group policy stands alone; it is not a super-set of the global policy plus\n" +"custom settings.\n" +"\n" +"Each group password policy requires a unique priority setting. If a user\n" +"is in multiple groups that have password policies, this priority determines\n" +"which password policy is applied. A lower value indicates a higher priority\n" +"policy.\n" +"\n" +"Group password policies are automatically removed when the groups they\n" +"are associated with are removed.\n" +"\n" +"Grace period defines the number of LDAP logins allowed after expiration.\n" +"-1 means do not enforce expiration to match previous behavior. 0 allows\n" +"no additional logins after expiration.\n" "\n" "EXAMPLES:\n" "\n" -" To reset your own password:\n" -" ipa passwd\n" +" Modify the global policy:\n" +" ipa pwpolicy-mod --minlength=10\n" "\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" +" Add a new group password policy:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Display the global password policy:\n" +" ipa pwpolicy-show\n" +"\n" +" Display a group password policy:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Display the policy that would be applied to a given user:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Modify a group password policy:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" msgstr "" "\n" -"Встановлення пароля користувача\n" +"Правила паролів\n" "\n" -"Якщо якась стороння особа змінює пароль користувача (наприклад його\n" -"відновлює допоміжний персонал), новий пароль має бути змінено під\n" -"час його першого використання. Метою такого способу дій є забезпечення\n" -"ситуації, коли пароль буде відомий лише тому, хто ним користується.\n" +"Правила паролів встановлюють обмеження щодо використання паролів IPA,\n" +"зокрема максимальний строк дії, мінімальний строк дії, кількість паролів,\n" +"які зберігатимуться у журналі, потрібна кількість класів символів (для\n" +"складних паролів) та мінімальну довжину пароля.\n" "\n" -"Правила щодо паролів IPA керують частотою зміни пароля, вимогами щодо\n" -"складності пароля та об’ємом журналу зміни паролів.\n" +"Типово, визначено одні загальні правила для всіх користувачів. Ви можете\n" +"створити правило паролів, яке стосуватиметься однієї групи. Для одного\n" +"користувача може бути використано лише один набір правил паролів: груповий\n" +"або загальний. Групові правила паролів є незалежними, вони не є загальними\n" +"правилами з додаванням нетипових параметрів.\n" +"\n" +"Для кожного набору групових правил паролів має бути встановлено окреме\n" +"значення пріоритету. Якщо користувач є учасником декількох груп, для яких\n" +"встановлено правила паролів, пріоритет визначає, які з правил має бути\n" +"застосовано. Менші значення відповідають вищому пріоритету правил.\n" +"\n" +"Групові правила паролів автоматично вилучаються під час вилучення\n" +"відповідних груп.\n" +"\n" +"Період лояльності визначає кількість дозволених входів LDAP після завершення " +"строку дії.\n" +"-1 означає, що примусове вичерпання строку дії не буде застосовано " +"(попередня поведінка).\n" +"0 забороняє додаткові входи після завершення строку дії.\n" "\n" "ПРИКЛАДИ:\n" "\n" -" Щоб скинути ваш власний пароль, виконайте команду:\n" -" ipa passwd\n" +" Внесення змін до загальних правил:\n" +" ipa pwpolicy-mod --minlength=10\n" "\n" -" Щоб змінити пароль іншого користувача, виконайте команду:\n" -" ipa passwd tuser1\n" +" Додавання нових групових правил паролів:\n" +" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" +"minlength=8 --priority=10 localadmins\n" +"\n" +" Показ загальних правил паролів:\n" +" ipa pwpolicy-show\n" +"\n" +" Показ групових правил паролів:\n" +" ipa pwpolicy-show localadmins\n" +"\n" +" Показ правил, які має бути застосовано до певного користувача:\n" +" ipa pwpolicy-show --user=tuser1\n" +"\n" +" Внесення змін до групових правил паролів:\n" +" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgid "Set a user's password." -msgstr "Встановити пароль користувача." +msgid "" +"\n" +"Permissions\n" +msgstr "" +"\n" +"Права доступу\n" -msgid "New Password" -msgstr "Новий пароль" - -msgid "Current Password" -msgstr "Поточний пароль" - -msgid "OTP" -msgstr "OTP" - -msgid "One Time Password" -msgstr "Одноразовий пароль" +msgid "" +"\n" +"Permissions\n" +"\n" +"A permission enables fine-grained delegation of rights. A permission is\n" +"a human-readable form of a 389-ds Access Control Rule, or instruction " +"(ACI).\n" +"A permission grants the right to perform a specific task such as adding a\n" +"user, modifying a group, etc.\n" +"\n" +"A permission may not contain other permissions.\n" +"\n" +"* A permission grants access to read, write, add or delete.\n" +"* A privilege combines similar permissions (for example all the permissions\n" +" needed to add a user).\n" +"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +"\n" +"A permission is made up of a number of different parts:\n" +"\n" +"1. The name of the permission.\n" +"2. The target of the permission.\n" +"3. The rights granted by the permission.\n" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. add - add a new entry to the tree\n" +"4. delete - delete an existing entry\n" +"5. all - all permissions are granted\n" +"\n" +"Read permission is granted for most attributes by default so the read\n" +"permission is not expected to be used very often.\n" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +"\n" +"There are a number of allowed targets:\n" +"1. type: a type of object (user, group, etc).\n" +"2. memberof: a member of a group or hostgroup\n" +"3. filter: an LDAP filter\n" +"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" +" super-set of the \"type\" target.\n" +"5. targetgroup: grant access to modify a specific group (such as granting\n" +" the rights to manage group membership)\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a permission that grants the creation of users:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Add a permission that grants the ability to manage group membership:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" +msgstr "" +"\n" +"Права доступу\n" +"\n" +"Запис правил доступу уможливлює точне делегування прав. Запис прав доступу\n" +"є зручною для читання обгорткою навколо правила керування доступом 389-ds\n" +"або інструкції (ACI).\n" +"Право доступу надає право виконувати специфічне завдання, зокрема додавання\n" +"запису користувача, внесення зміни до групи тощо.\n" +"\n" +"Запис прав доступу не може містити інших прав доступу.\n" +"\n" +"* Права доступу надають можливість читати, записувати, вилучати, шукати або\n" +" порівнювати.\n" +"* Привілеї поєднують подібні права доступу (наприклад усі права доступу,\n" +" потрібні для додавання запису користувача).\n" +"* Роль надає набір привілеїв користувачам, групам, вузлам або групам " +"вузлів.\n" +"\n" +"Запис права доступу складається з декількох різних частин:\n" +"\n" +"1. Назви запису права доступу.\n" +"2. Призначення права доступу.\n" +"3. Права, які надаються записом.\n" +"\n" +"Права визначають список дій, які можна виконувати. Запис прав може\n" +"бути один або може бути декілька записів з такого набору:\n" +"1. write - запис одного або декількох атрибутів\n" +"2. read - читання одного або декількох атрибутів\n" +"3. search - пошук одного або декількох атрибутів\n" +"4. compare - порівняння одного або декількох атрибутів\n" +"5. add - додавання нового запису до ієрархії\n" +"6. delete - вилучення наявного запису\n" +"7. all - надати усі права доступу\n" +"\n" +"Типово, доступ до читання надається до більшості з атрибутів, отже потреба\n" +"у визначенні прав доступу до читання має виникати доволі нечасто.\n" +"\n" +"Зауважте відмінність між атрибутами і записами. Права доступу є " +"незалежними,\n" +"отже можливість додавання запису користувача не означає, що цей запис " +"згодом\n" +"буде придатним до редагування.\n" +"\n" +"Передбачено декілька можливих призначень:\n" +"1. type: тип об’єкта (user, group тощо).\n" +"2. memberof: учасник групи або групи вузлів\n" +"3. filter: фільтр LDAP\n" +"4. subtree: фільтр LDAP, що визначає частину DIT LDAP. Є надмножиною\n" +" призначення «type».\n" +"5. targetgroup: надати доступ до зміни вказаної групи (зокрема надати " +"доступ\n" +" до керування участю у групі)\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати право доступу до створення записів користувачів:\n" +" ipa permission-add --type=user --permissions=add \"Add Users\"\n" +"\n" +" Додати право доступу, яке надає можливість керувати участю у групах:\n" +" ipa permission-add --attrs=member --permissions=write --type=group " +"\"Manage Group Members\"\n" msgid "" "\n" @@ -7684,140 +10886,17 @@ msgstr "" " ipa permission-add --attrs=member --permissions=write --type=group " "\"Manage Group Members\"\n" -msgid "Permission name" -msgstr "Назва прав доступу" - -msgid "Granted rights" -msgstr "Надані права" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "" -"Права доступу, які слід надати (read, search, compare, write, add, delete, " -"all)" - -msgid "Effective attributes" -msgstr "Ефективні атрибути" - -msgid "All attributes to which the permission applies" -msgstr "Усі атрибути, яких стосуються ці права доступу" - -msgid "Included attributes" -msgstr "Атрибути включення" - -msgid "User-specified attributes to which the permission applies" -msgstr "Вказані користувачем атрибути, до яких застосовується правило доступу" - -msgid "Excluded attributes" -msgstr "Атрибути виключення" - msgid "" -"User-specified attributes to which the permission explicitly does not apply" +"\n" +"Permissions that come with IPA by default can be so-called \"managed\"\n" +"permissions. These have a default set of attributes they apply to,\n" +"but the administrator can add/remove individual attributes to/from the set.\n" msgstr "" -"Вказані користувачем атрибути, до яких права доступу явним чином не " -"застосовуватимуться" - -msgid "Default attributes" -msgstr "Типові атрибути" - -msgid "Attributes to which the permission applies by default" -msgstr "Атрибути, до яких типово застосовується правило доступу" - -msgid "Bind rule type" -msgstr "Тип правила прив’язування" - -msgid "Subtree to apply permissions to" -msgstr "Піддерево, до якого буде застосовано права доступу" - -msgid "Extra target filter" -msgstr "Додатковий фільтр призначення" - -msgid "Raw target filter" -msgstr "Фільтр призначення без обробки" - -msgid "All target filters, including those implied by type and memberof" -msgstr "" -"Усі фільтри призначення, зокрема ті, які визначаються типом та членством" - -msgid "Target DN" -msgstr "DN призначення" - -msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" -msgstr "" -"Необов’язковий DN, до якого застосовуватимуться дозвіл (має належати до " -"піддерева, але може ще не існувати)" - -msgid "Member of group" -msgstr "Учасник групи" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "Цільові учасники групи (встановлює фільтр призначення memberOf)" - -msgid "User group to apply permissions to (sets target)" -msgstr "" -"Група користувачів, до якої буде застосовано права доступу (встановлює " -"target)" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "Тип об’єкта IPA (встановлює фільтри призначення subtree і objectClass)" - -msgid "Deprecated; use extratargetfilter" -msgstr "Вважається застарілою; скористайтеся extratargetfilter" - -msgid "Deprecated; use ipapermlocation" -msgstr "Вважається застарілою; скористайтеся ipapermlocation" - -msgid "Deprecated; use ipapermright" -msgstr "Вважається застарілою; скористайтеся ipapermright" - -msgid "Granted to Privilege" -msgstr "Надані привілеї" - -msgid "Indirect Member of roles" -msgstr "Опосередкований учасник roles" - -msgid "Add a new permission." -msgstr "Додати нові права доступу." - -msgid "Add members to a permission." -msgstr "Додати учасників до запису прав доступу." - -msgid "member privilege" -msgstr "привілеї учасника" - -msgid "privileges to add" -msgstr "привілеї для додавання" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "Додати системні права доступу без ACI (внутрішня команда)" - -msgid "Permission flags" -msgstr "Прапорці прав доступу" - -msgid "Delete a permission." -msgstr "Вилучити права доступу." - -msgid "force delete of SYSTEM permissions" -msgstr "примусове вилучення прав доступу SYSTEM" - -msgid "Search for permissions." -msgstr "Знайти права доступу." - -msgid "Modify a permission." -msgstr "Змінити права доступу." - -msgid "Rename the permission object" -msgstr "Перейменувати об’єкт права доступу" - -msgid "Remove members from a permission." -msgstr "Вилучити учасників із запису права доступу." - -msgid "privileges to remove" -msgstr "привілеї для вилучення" - -msgid "Display information about a permission." -msgstr "Показати дані щодо прав доступу." +"\n" +"Права доступу, які типово встановлюються разом з IPA, можуть бути\n" +"так званими «керованим» правами доступу. Такі права доступу мають\n" +"типовий набір атрибутів, до яких вони застосовуються. Втім, адміністратор\n" +"може додавати або вилучати окремі атрибути набору.\n" msgid "" "\n" @@ -7875,50 +10954,195 @@ msgstr "" " Сервер IPA версії 2.1.9. Версія API 2.20\n" " -----------------------------------------------------\n" -msgid "Ping a remote server." -msgstr "Перевірити луна-імпульсом (пінгом) віддалений сервер." - msgid "" "\n" -"Kerberos pkinit options\n" +"Ping the remote IPA server to ensure it is running.\n" "\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" +"The ping command sends an echo request to an IPA server. The server\n" +"returns its version information. This is used by an IPA client\n" +"to confirm that the server is available and accepting requests.\n" +"\n" +"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" +"If it does not respond then the client will contact any servers defined\n" +"by ldap SRV records in DNS.\n" "\n" "EXAMPLES:\n" "\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" +" Ping an IPA server:\n" +" ipa ping\n" +" ------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" ------------------------------------------\n" "\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +" Ping an IPA server verbosely:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" +"xml'\n" +" -----------------------------------------------------\n" +" IPA server version 2.1.9. API version 2.20\n" +" -----------------------------------------------------\n" msgstr "" "\n" -"Параметри pkinit Kerberos\n" +"Перевірка віддаленого сервера IPA з метою переконатися, що він є " +"працездатним.\n" "\n" -"Вмикання або вимикання анонімного pkinit за допомогою реєстраційного\n" -"запису WELLKNOWN/ANONYMOUS@REALM. Має бути встановлено сервер з\n" -"підтримкою pkinit.\n" +"Програма ping надсилає луна-запит до сервера IPA. Сервер повертає\n" +"дані щодо його версії. Ці дані використовуються клієнтом IPA\n" +"для підтвердження, що сервер є доступним і що він приймає запити.\n" +"\n" +"Сервер з xmlrpc_uri у /etc/ipa/default.conf перевіряється першим.\n" +"Якщо він не відповідає, клієнт намагається встановити зв’язок з\n" +"будь-яким сервером, визначеним записами SRV ldap у DNS.\n" "\n" "ПРИКЛАДИ:\n" "\n" -" Вмикання анонімного pkinit:\n" -" ipa pkinit-anonymous enable\n" +" Перевірити луна-імпульсом сервер IPA:\n" +" ipa ping\n" +" ------------------------------------------\n" +" Сервер IPA версії 2.1.9. Версія API 2.20\n" +" ------------------------------------------\n" "\n" -" Вимикання анонімного pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"Щоб дізнатися більше про анонімний pkinit відвідайте цю сторінку:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +" Перевірити луна-імпульсом сервер IPA і отримати докладні дані:\n" +" ipa -v ping\n" +" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" +" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" +" -----------------------------------------------------\n" +" Сервер IPA версії 2.1.9. Версія API 2.20\n" +" -----------------------------------------------------\n" -msgid "Enable or Disable Anonymous PKINIT." -msgstr "Увімкнути або вимкнути анонімний PKINIT." +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\"," +"\"all\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +msgstr "" +"\n" +"Додаток для виконання декількох викликів ipa за допомогою одного віддаленого " +"виклику процедури\n" +"\n" +"Щоб запустити цей код на легкому сервері, віддайте такі команди:\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"де у файлі batch_request.json міститься десь такий код:\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\"," +"\"all\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"Формат відповіді має бути розподілений за рівнями вкладеності у подібний же " +"спосіб. На початку ви побачите таке:\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"а далі буде вкладена відповідь для кожного методу команди IPA, який було " +"надіслано у запиті\n" + +msgid "" +"\n" +"Plugin to make multiple ipa calls via one remote procedure call\n" +"\n" +"To run this code in the lite-server\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"where the contents of the file batch_request.json follow the below example\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\"," +"\"all\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"The format of the response is nested the same way. At the top you will see\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"And then a nested response for each IPA command method sent in the request\n" +"\n" +msgstr "" +"\n" +"Додаток для виконання декількох викликів ipa за допомогою одного віддаленого " +"виклику процедури\n" +"\n" +"Щоб запустити цей код на легкому сервері, віддайте такі команди:\n" +"\n" +"curl -H \"Content-Type:application/json\" -H \"Accept:application/" +"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" +"etc/ipa/ca.crt -d @batch_request.json -X POST http://" +"localhost:8888/ipa/json\n" +"\n" +"де у файлі batch_request.json міститься десь такий код:\n" +"\n" +"{\"method\":\"batch\",\"params\":[[\n" +" {\"method\":\"group_find\",\"params\":[[],{}]},\n" +" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\"," +"\"all\":\"true\"}]},\n" +" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" +" ],{}],\"id\":1}\n" +"\n" +"Формат відповіді має бути розподілений за рівнями вкладеності у подібний же " +"спосіб. На початку ви побачите таке:\n" +" \"error\": null,\n" +" \"id\": 1,\n" +" \"result\": {\n" +" \"count\": 3,\n" +" \"results\": [\n" +"\n" +"\n" +"а далі буде вкладена відповідь для кожного методу команди IPA, який було " +"надіслано у запиті\n" + +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" +msgstr "" +"\n" +"Інтерфейс командного рядка не надає безпосереднього доступу до додатків, " +"команди використано для внутрішньої обробки\n" msgid "" "\n" @@ -7961,238 +11185,19 @@ msgstr "" "\n" "Щоб дізнатися більше, ознайомтеся з довідною щодо ролей та прав доступу.\n" -msgid "Privilege name" -msgstr "Назва привілею" - -msgid "Privilege description" -msgstr "Опис привілею" - -msgid "Granting privilege to roles" -msgstr "Надання привілеїв ролям" - -msgid "Add a new privilege." -msgstr "Додати новий привілей." - -msgid "Add members to a privilege." -msgstr "Додати учасників до запису привілею." - -msgid "member role" -msgstr "роль учасника" - -msgid "roles to add" -msgstr "ролі для додавання" - -msgid "Add permissions to a privilege." -msgstr "Додати права доступу до привілею." - -msgid "permission" -msgstr "права доступу" - -msgid "permissions" -msgstr "права доступу" - -msgid "Number of permissions added" -msgstr "Кількість доданих прав доступу" - -msgid "Delete a privilege." -msgstr "Вилучити привілей." - -msgid "Search for privileges." -msgstr "Знайти привілеї." - -msgid "Modify a privilege." -msgstr "Змінити привілей." - -msgid "Rename the privilege object" -msgstr "Перейменувати об’єкт привілеїв" - -msgid "Remove members from a privilege" -msgstr "Вилучити учасників з запису привілеїв" - -msgid "roles to remove" -msgstr "ролі для вилучення" - -msgid "Remove permissions from a privilege." -msgstr "Вилучити права доступу з привілею." - -msgid "Number of permissions removed" -msgstr "Кількість вилучених записів прав доступу" - -msgid "Display information about a privilege." -msgstr "Показати дані щодо привілею." +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" +"\n" +"Надає можливості інтроспекції програмного інтерфейсу.\n" msgid "" "\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" +"RADIUS Proxy Servers\n" msgstr "" "\n" -"Правила паролів\n" -"\n" -"Правила паролів встановлюють обмеження щодо використання паролів IPA,\n" -"зокрема максимальний строк дії, мінімальний строк дії, кількість паролів,\n" -"які зберігатимуться у журналі, потрібна кількість класів символів (для\n" -"складних паролів) та мінімальну довжину пароля.\n" -"\n" -"Типово, визначено одні загальні правила для всіх користувачів. Ви можете\n" -"створити правило паролів, яке стосуватиметься однієї групи. Для одного\n" -"користувача може бути використано лише один набір правил паролів: груповий\n" -"або загальний. Групові правила паролів є незалежними, вони не є загальними\n" -"правилами з додаванням нетипових параметрів.\n" -"\n" -"Для кожного набору групових правил паролів має бути встановлено окреме\n" -"значення пріоритету. Якщо користувач є учасником декількох груп, для яких\n" -"встановлено правила паролів, пріоритет визначає, які з правил має бути\n" -"застосовано. Менші значення відповідають вищому пріоритету правил.\n" -"\n" -"Групові правила паролів автоматично вилучаються під час вилучення\n" -"відповідних груп.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Внесення змін до загальних правил:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Додавання нових групових правил паролів:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Показ загальних правил паролів:\n" -" ipa pwpolicy-show\n" -"\n" -" Показ групових правил паролів:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Показ правил, які має бути застосовано до певного користувача:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Внесення змін до групових правил паролів:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" - -msgid "Group" -msgstr "Група" - -msgid "Manage password policy for specific group" -msgstr "Керування правилами обробки паролів для певної групи" - -msgid "Max lifetime (days)" -msgstr "Макс. строк дії (у днях)" - -msgid "Maximum password lifetime (in days)" -msgstr "Максимальний строк дії пароля (у днях)" - -msgid "Min lifetime (hours)" -msgstr "Мін. строк дії (у годинах)" - -msgid "Minimum password lifetime (in hours)" -msgstr "Мінімальний строк дії пароля (у годинах)" - -msgid "History size" -msgstr "Розмір журналу" - -msgid "Password history size" -msgstr "Розмір журналу паролів" - -msgid "Character classes" -msgstr "Класи символів" - -msgid "Minimum number of character classes" -msgstr "Мінімальна кількість класів символів" - -msgid "Min length" -msgstr "Мін. довжина" - -msgid "Minimum length of password" -msgstr "Мінімальна довжина пароля" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "Пріоритет правил (більше число — нижчий пріоритет)" - -msgid "Max failures" -msgstr "Макс. к-ть помилок" - -msgid "Consecutive failures before lockout" -msgstr "Кількість помилок для блокування" - -msgid "Failure reset interval" -msgstr "Проміжок скидання помилок" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "" -"Проміжок часу, по завершенню якого кількість помилок буде скинуто (у " -"секундах)" - -msgid "Lockout duration" -msgstr "Тривалість блокування" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "Проміжок часу, протягом якого діятиме блокування (у секундах)" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "Результати мають містити лише атрибут основного ключа («cn»)" - -msgid "Add a new group password policy." -msgstr "Додати нову групу правил для паролів." - -msgid "Delete a group password policy." -msgstr "Вилучити групу правил для паролів." - -msgid "Search for group password policies." -msgstr "Знайти групу правил для паролів." - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "Результати мають містити лише атрибут основного ключа («group»)" - -msgid "Modify a group password policy." -msgstr "Змінити групу правил для паролів." - -msgid "Display information about password policy." -msgstr "Показати дані щодо групи правил для паролів." - -msgid "User" -msgstr "Користувач" - -msgid "Display effective policy for a specific user" -msgstr "Показати поточні правила для певного користувача" +"Проксі-сервери RADIUS\n" msgid "" "\n" @@ -8247,59 +11252,40 @@ msgstr "" " Вилучити налаштування:\n" " ipa radiusproxy-del MyRADIUS\n" -msgid "RADIUS proxy server name" -msgstr "Назва проксі-сервера RADIUS" +msgid "" +"\n" +"RE-ENROLLMENT:\n" +"\n" +"Host that has been enrolled at some point, and lost its configuration (e.g. " +"VM\n" +"destroyed) can be re-enrolled.\n" +"\n" +"For more information, consult the manual pages for ipa-client-install.\n" +"\n" +"A host can optionally store information such as where it is located,\n" +"the OS that it runs, etc.\n" +msgstr "" +"\n" +"ПОВТОРНА РЕЄСТРАЦІЯ:\n" +"\n" +"Вузол, якому вже колись було надано певну роль, але налаштування було " +"втрачено\n" +"(наприклад через знищення віртуальної машини), можна знову зареєструвати " +"(надати роль).\n" +"\n" +"Щоб дізнатися більше, зверніться до сторінок підручника (man) щодо ipa-" +"client-install.\n" +"\n" +"Запис вузла може, якщо потрібно, зберігати відомості щодо розташування, " +"запущеної\n" +"операційної системи тощо.\n" -msgid "A description of this RADIUS proxy server" -msgstr "Опис цього проксі-сервера RADIUS" - -msgid "Server" -msgstr "Сервер" - -msgid "The hostname or IP (with or without port)" -msgstr "Назва вузла або IP-адреса (з портом або без порту)" - -msgid "Secret" -msgstr "Ключ" - -msgid "The secret used to encrypt data" -msgstr "Ключ, який використовується для шифрування даних" - -msgid "Timeout" -msgstr "Час очікування" - -msgid "The total timeout across all retries (in seconds)" -msgstr "Загальний час очікування за усіма спробами (у секундах)" - -msgid "Retries" -msgstr "Кількість спроб" - -msgid "The number of times to retry authentication" -msgstr "Кількість спроб пройти розпізнавання" - -msgid "User attribute" -msgstr "Атрибут користувача" - -msgid "The username attribute on the user object" -msgstr "Атрибут імені користувача об’єкта користувача" - -msgid "Add a new RADIUS proxy server." -msgstr "Додати новий проксі-сервер RADIUS." - -msgid "Delete a RADIUS proxy server." -msgstr "Вилучити проксі-сервер RADIUS." - -msgid "Search for RADIUS proxy servers." -msgstr "Шукати проксі-сервери RADIUS." - -msgid "Modify a RADIUS proxy server." -msgstr "Змінити запис проксі-сервера RADIUS." - -msgid "Rename the RADIUS proxy server object" -msgstr "Перейменувати об’єкт проксі-сервера RADIUS" - -msgid "Display information about a RADIUS proxy server." -msgstr "Показати дані щодо проксі-сервера RADIUS." +msgid "" +"\n" +"Raise the IPA Domain Level.\n" +msgstr "" +"\n" +"Підняти рівень домену IPA.\n" msgid "" "\n" @@ -8342,23 +11328,227 @@ msgstr "" " Вилучити домен зі списку доменів області:\n" " ipa realmdomains-mod --del-domain=olddomain.com\n" -msgid "Domain" -msgstr "Домен" +msgid "" +"\n" +"Realm domains\n" +"\n" +"Manage the list of domains associated with IPA realm.\n" +"\n" +"This list is useful for Domain Controllers from other realms which have\n" +"established trust with this IPA realm. They need the information to know\n" +"which request should be forwarded to KDC of this IPA realm.\n" +"\n" +"Automatic management: a domain is automatically added to the realm domains\n" +"list when a new DNS Zone managed by IPA is created. Same applies for " +"deletion.\n" +"\n" +"Externally managed DNS: domains which are not managed in IPA server DNS\n" +"need to be manually added to the list using ipa realmdomains-mod command.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Display the current list of realm domains:\n" +" ipa realmdomains-show\n" +"\n" +" Replace the list of realm domains:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Add a domain to the list of realm domains:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Delete a domain from the list of realm domains:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" +msgstr "" +"\n" +"Домени області\n" +"\n" +"Керування списком доменів, пов’язаних з областю IPA.\n" +"\n" +"Цей список є корисним для контролерів доменів з інших областей, які\n" +"мають встановити відносини довіри із цією областю IPA. Цим контролерам\n" +"потрібні дані щодо того, які запити слід переспрямовувати до KDC цієї\n" +"області IPA.\n" +"\n" +"Автоматичне керування: домен автоматично додається до списку доменів\n" +"області, коли створюється нова зона DNS, керована IPA. Те саме стосується\n" +"вилучення.\n" +"\n" +"Керована ззовні DNS: домени, які не керуються у DNS сервера IPA, має бути\n" +"вручну додано до списку за допомогою команди ipa realmdomains-mod.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Показати поточний список доменів області:\n" +" ipa realmdomains-show\n" +"\n" +" Замірити список доменів області:\n" +" ipa realmdomains-mod --domain=example.com\n" +" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" +"\n" +" Додати домен до списку доменів області:\n" +" ipa realmdomains-mod --add-domain=newdomain.com\n" +"\n" +" Вилучити домен зі списку доменів області:\n" +" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgid "Add domain" -msgstr "Додати домен" +#, python-format +msgid "" +"\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" +msgstr "" +"\n" +"Вилучення запису «%(hostname)s» призведе до нез’єднаної топології у суфіксу " +"«%(suffix)s»:\n" +"%(errors)s" -msgid "Delete domain" -msgstr "Вилучити домен" +#, python-format +msgid "" +"\n" +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" +msgstr "" +"\n" +"Топологія реплікації у суфіксі «%(suffix)s» є нез’єднаною:\n" +"%(errors)s" -msgid "Modify realm domains." -msgstr "Змінити домени області." +msgid "" +"\n" +"Return information about currently authenticated identity\n" +"\n" +"Who am I command returns information on how to get\n" +"more details about the identity authenticated for this\n" +"request. The information includes:\n" +"\n" +" * type of object\n" +" * command to retrieve details of the object\n" +" * arguments and options to pass to the command\n" +"\n" +"The information is returned as a dictionary. Examples below use\n" +"'key: value' output for illustrative purposes.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Look up as IPA user:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Look up as a user from a trusted domain:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Look up as a host:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Look up as a Kerberos service:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" +msgstr "" +"\n" +"Повернути дані щодо поточного розпізнаного профілю\n" +"\n" +"Команда визначення профілю повертає дані щодо того, як\n" +"отримати більше даних про профіль, розпізнаний для\n" +"цього запиту. Дані:\n" +"\n" +" * тип об’єкта\n" +" * команда для отримання подробиць щодо об’єкта\n" +" * аргументи та параметри, які слід передати команді\n" +"\n" +"Дані повертаються у форматі словника. Нижче, як приклад,\n" +"наведено виведення у форматі «ключ: значення».\n" +"\n" +"Приклади:\n" +"\n" +" Пошук від імені користувача IPA:\n" +" kinit admin\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: user\n" +" command: user_show/1\n" +" arguments: admin\n" +" ------------------------------------------\n" +"\n" +" Пошук від імені користувача довіреного домену:\n" +" kinit user@AD.DOMAIN\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: idoverrideuser\n" +" command: idoverrideuser_show/1\n" +" arguments: ('default trust view', 'user@ad.domain')\n" +" ------------------------------------------\n" +"\n" +" Пошук від імені вузла:\n" +" kinit -k\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: host\n" +" command: host_show/1\n" +" arguments: ipa.example.com\n" +" ------------------------------------------\n" +"\n" +" Пошук від імені служби Kerberos:\n" +" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" +" ipa console\n" +" >> api.Command.whoami()\n" +" ------------------------------------------\n" +" object: service\n" +" command: service_show/1\n" +" arguments: HTTP/ipa.example.com\n" +" ------------------------------------------\n" -msgid "Force adding domain even if not in DNS" -msgstr "Примусове додавання домену, навіть якщо назви немає у DNS" - -msgid "Display the list of realm domains." -msgstr "Показати список доменів області." +msgid "" +"\n" +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" +msgstr "" +"\n" +"Права визначають список дій, які можна виконувати. Запис прав може\n" +"бути один або може бути декілька записів з такого набору:\n" +"1. write - запис одного або декількох атрибутів\n" +"2. read - читання одного або декількох атрибутів\n" +"3. search - пошук одного або декількох атрибутів\n" +"4. compare - порівняння одного або декількох атрибутів\n" +"5. add - додавання нового запису до ієрархії\n" +"6. delete - вилучення наявного запису\n" +"7. all - надати усі права доступу\n" msgid "" "\n" @@ -8441,153 +11631,12 @@ msgstr "" "користувача\n" " до типової групи користувачів IPA.\n" -msgid "Role name" -msgstr "Назва ролі" - -msgid "A description of this role-group" -msgstr "Опис цієї групи ролей" - -msgid "Privileges" -msgstr "Привілеї" - -msgid "Member services" -msgstr "Служби учасника" - -msgid "Add a new role." -msgstr "Додати нову роль." - -msgid "Add members to a role." -msgstr "Додати учасників до запису ролі." - -msgid "member service" -msgstr "учасник служба" - -msgid "services to add" -msgstr "служби для додавання" - -msgid "Add privileges to a role." -msgstr "Додати привілеї до запису ролі." - -msgid "privilege" -msgstr "привілей" - -msgid "privileges" -msgstr "привілеї" - -msgid "Number of privileges added" -msgstr "Кількість доданих привілеїв" - -msgid "Delete a role." -msgstr "Вилучити роль." - -msgid "Search for roles." -msgstr "Знайти ролі." - -msgid "Modify a role." -msgstr "Змінити роль." - -msgid "Rename the role object" -msgstr "Перейменувати об’єкт ролі" - -msgid "Remove members from a role." -msgstr "Вилучити учасників з запису ролі." - -msgid "services to remove" -msgstr "служби для вилучення" - -msgid "Remove privileges from a role." -msgstr "Вилучити привілеї з запису ролі." - -msgid "Number of privileges removed" -msgstr "Кількість вилучених привілеїв" - -msgid "Display information about a role." -msgstr "Показати дані щодо ролі." - msgid "" "\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" +"SEARCHING:\n" msgstr "" "\n" -"Права доступу самообслуговування\n" -"\n" -"Права доступу надають змогу точно налаштувати уповноваження. За допомогою\n" -"правил керування доступом та інструкцій (ACI) надаються права доступу до\n" -"виконання вказаних завдань, зокрема додавання записів користувачів,\n" -"внесення змін до записів груп тощо.\n" -"\n" -"Права доступу самообслуговування визначають права об’єкта на внесення змін\n" -"до власного запису.\n" -"\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додавання правила самообслуговування для уможливлення керування " -"користувачами\n" -" власною адресою (з використанням виразу Bash у фігурних дужках):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" Якщо ви керуєте списком атрибутів, вам слід включити до списку всі " -"атрибути,\n" -" зокрема вже створені. Додавання telephoneNumber до списку (з використанням " -"виразу Bash у фігурних дужках):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Показ нашого оновленого правила:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Вилучення правила:\n" -" ipa selfservice-del \"Users manage their own address\"\n" - -msgid "Self-service name" -msgstr "Назва самообслуговування" - -msgid "Attributes to which the permission applies." -msgstr "Атрибути, до яких застосовується правило доступу." - -msgid "Add a new self-service permission." -msgstr "Додати нові права доступу автослужби." - -msgid "Delete a self-service permission." -msgstr "Вилучити права доступу автослужби." - -msgid "Search for a self-service permission." -msgstr "Шукати права доступу автослужби." - -msgid "Modify a self-service permission." -msgstr "Змінити права доступу автослужби." - -msgid "Display information about a self-service permission." -msgstr "Показати дані щодо прав доступу автослужби." +"ПОШУК:\n" msgid "" "\n" @@ -8689,51 +11738,793 @@ msgstr "" " відповідність користувачів. Типового користувача можна за допомогою\n" " програми config-show.\n" -msgid "SELinux User" -msgstr "Користувач SELinux" - -msgid "HBAC Rule" -msgstr "Правило HBAC" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "Правило HBAC, яке визначає користувачів, групи і групи вузлів" - -msgid "Create a new SELinux User Map." -msgstr "Створити карту користувачів SELinux." - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgid "" +"\n" +"SUPPORTED ZONE TYPES\n" +"\n" +" * Master zone (dnszone-*), contains authoritative data.\n" +" * Forward zone (dnsforwardzone-*), forwards queries to configured " +"forwarders\n" +" (a set of DNS servers).\n" msgstr "" -"Додати вузли призначення та групи вузлів до правила карти користувачів " -"SELinux." +"\n" +"ПІДТРИМУВАНІ ТИПИ ЗОН\n" +"\n" +" * Основна зона (dnszone-*), містить довірені дані.\n" +" * Зона переспрямовування (dnsforwardzone-*), переспрямовує запити до " +"налаштованих засобів обробки\n" +" (набору серверів DNS).\n" -msgid "Add users and groups to an SELinux User Map rule." -msgstr "Додати користувачів і групи до правила карти користувачів SELinux." - -msgid "Delete a SELinux User Map." -msgstr "Вилучити карту користувачів SELinux." - -msgid "Disable an SELinux User Map rule." -msgstr "Вимкнути правило карти користувачів SELinux." - -msgid "Enable an SELinux User Map rule." -msgstr "Увімкнути правило карти користувачів SELinux." - -msgid "Search for SELinux User Maps." -msgstr "Шукати карти користувачів SELinux." - -msgid "Modify a SELinux User Map." -msgstr "Змінити карту користувачів SELinux." - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgid "" +"\n" +"Search for ACIs.\n" +"\n" +" Returns a list of ACIs\n" +"\n" +" EXAMPLES:\n" +"\n" +" To find all ACIs that apply directly to members of the group ipausers:\n" +" ipa aci-find --memberof=ipausers\n" +"\n" +" To find all ACIs that grant add access:\n" +" ipa aci-find --permissions=add\n" +"\n" +" Note that the find command only looks for the given text in the set of\n" +" ACIs, it does not evaluate the ACIs to see if something would apply.\n" +" For example, searching on memberof=ipausers will find all ACIs that\n" +" have ipausers as a memberof. There may be other ACIs that apply to\n" +" members of that group indirectly.\n" +" " msgstr "" -"Вилучити вузли призначення та групи вузлів з правила карти користувачів " -"SELinux." +"\n" +"Пошук ACI.\n" +"\n" +" Повертає список ACI\n" +"\n" +" ПРИКЛАДИ:\n" +"\n" +" Знайти усі ACI, які застосовуються безпосередньо до учасників групи " +"ipausers:\n" +" ipa aci-find --memberof=ipausers\n" +"\n" +" Знайти усі ACI, які надають доступ add:\n" +" ipa aci-find --permissions=add\n" +"\n" +" Зауважте, що команда пошуку виконує пошук вказаного тексту лише у\n" +" наборі ACI, а не визначає, чи буде застосовано щось у ACI.\n" +" Наприклад, у результаті пошуку memberof=ipausers буде знайдено усі ACI,\n" +" у яких memberof містить ipausers. Але можуть існувати інші ACI, які\n" +" застосовуються до учасників цієї групи опосередковано.\n" +" " -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "Вилучити користувачів і групи з правила карти користувачів SELinux." +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address (using Bash\n" +" brace expansion):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones.\n" +" Add telephoneNumber to the list (using Bash brace expansion):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" +"\n" +"Права доступу самообслуговування\n" +"\n" +"Права доступу надають змогу точно налаштувати уповноваження. За допомогою\n" +"правил керування доступом та інструкцій (ACI) надаються права доступу до\n" +"виконання вказаних завдань, зокрема додавання записів користувачів,\n" +"внесення змін до записів груп тощо.\n" +"\n" +"Права доступу самообслуговування визначають права об’єкта на внесення змін\n" +"до власного запису.\n" +"\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додавання правила самообслуговування для уможливлення керування " +"користувачами\n" +" власною адресою (з використанням виразу Bash у фігурних дужках):\n" +" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," +"st} \"Users manage their own address\"\n" +"\n" +" Якщо ви керуєте списком атрибутів, вам слід включити до списку всі " +"атрибути,\n" +" зокрема вже створені. Додавання telephoneNumber до списку (з використанням " +"виразу Bash у фігурних дужках):\n" +" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " +"\"Users manage their own address\"\n" +"\n" +" Показ нашого оновленого правила:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Вилучення правила:\n" +" ipa selfservice-del \"Users manage their own address\"\n" -msgid "Display the properties of a SELinux User Map rule." -msgstr "Показати властивості правила карти користувачів SELinux." +msgid "" +"\n" +"Self-service Permissions\n" +"\n" +"A permission enables fine-grained delegation of permissions. Access Control\n" +"Rules, or instructions (ACIs), grant permission to permissions to perform\n" +"given tasks such as adding a user, modifying a group, etc.\n" +"\n" +"A Self-service permission defines what an object can change in its own " +"entry.\n" +"\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a self-service rule to allow users to manage their address:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" When managing the list of attributes you need to include all attributes\n" +" in the list, including existing ones. Add telephoneNumber to the list:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Display our updated rule:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Delete a rule:\n" +" ipa selfservice-del \"Users manage their own address\"\n" +msgstr "" +"\n" +"Права доступу самообслуговування\n" +"\n" +"Права доступу надають змогу точно налаштувати уповноваження. За допомогою\n" +"правил керування доступом та інструкцій (ACI) надаються права доступу до\n" +"виконання вказаних завдань, зокрема додавання записів користувачів,\n" +"внесення змін до записів груп тощо.\n" +"\n" +"Права доступу самообслуговування визначають права об’єкта на внесення змін\n" +"до власного запису.\n" +"\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додавання правила самообслуговування для уможливлення керування " +"користувачами\n" +" власною адресою:\n" +" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " +"\"Users manage their own address\"\n" +"\n" +" Якщо ви керуєте списком атрибутів, вам слід включити до списку всі " +"атрибути,\n" +" зокрема вже створені. Додавання telephoneNumber до списку:\n" +" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " +"\"Users manage their own address\"\n" +"\n" +" Показ нашого оновленого правила:\n" +" ipa selfservice-show \"Users manage their own address\"\n" +"\n" +" Вилучення правила:\n" +" ipa selfservice-del \"Users manage their own address\"\n" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" +"\n" +"Налаштування сервера\n" +"\n" +"Керування типовими значеннями, які використовує IPA, та деякими з\n" +"придатних до зміни параметрів.\n" +"\n" +"ЗАУВАЖЕННЯ:\n" +"\n" +"Тут зберігається значення параметра сповіщення щодо паролів\n" +"(--pwdexpnotify), отже його не буде скопійовано. Це значення поки що\n" +"не використовується для сповіщення користувачів щодо завершення строку дії\n" +"пароля.\n" +"\n" +"Деякі з атрибутів придатні лише для читання, їх буде показано лише з метою\n" +"інформування. Серед цих атрибутів:\n" +"\n" +"Основа призначення сертифіката: змінна основа призначення сертифіката,\n" +" наприклад O=EXAMPLE.COM. Цей атрибут можна налаштувати лише під час\n" +" встановлення.\n" +"Параметри додатка роботи з паролями: у поточній версії визначають додаткові\n" +" хеші, які створюються на основі пароля (можуть бути і інші умови).\n" +"\n" +"Під час встановлення списку пріоритетності для користувачів SELinux може " +"виникнути\n" +"потреба у додаванні лапок до значення, щоб оболонка не обробляла параметр.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Показати основні налаштування сервера:\n" +" ipa config-show\n" +"\n" +" Показати всі параметри налаштування:\n" +" ipa config-show --all\n" +"\n" +" Змінити максимальну довжину імені користувача на 99 символів:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Збільшити типовий час і максимальне обмеження на розмір пошуку\n" +" сервера IPA:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Встановити типовий домен електронної пошти користувачів:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Увімкнути режим перенесення, щоб зробити команду \"ipa migrate-ds\"\n" +" працездатною:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Визначити пріоритетність користувачів у карті SELinux:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" + +msgid "" +"\n" +"Server configuration\n" +"\n" +"Manage the default values that IPA uses and some of its tuning parameters.\n" +"\n" +"NOTES:\n" +"\n" +"The password notification value (--pwdexpnotify) is stored here so it will\n" +"be replicated. It is not currently used to notify users in advance of an\n" +"expiring password.\n" +"\n" +"Some attributes are read-only, provided only for information purposes. " +"These\n" +"include:\n" +"\n" +"Certificate Subject base: the configured certificate subject base,\n" +" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" +"Password plug-in features: currently defines additional hashes that the\n" +" password will generate (there may be other conditions).\n" +"\n" +"When setting the order list for mapping SELinux users you may need to\n" +"quote the value so it isn't interpreted by the shell.\n" +"\n" +"The maximum length of a hostname in Linux is controlled by\n" +"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" +"systems, Solaris for example, allows hostnames up to 255 characters.\n" +"This option will allow flexibility in length but by default limiting\n" +"to the Linux maximum length.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Show basic server configuration:\n" +" ipa config-show\n" +"\n" +" Show all configuration options:\n" +" ipa config-show --all\n" +"\n" +" Change maximum username length to 99 characters:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Change maximum host name length to 255 characters:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +" Increase default time and size limits for maximum IPA server search:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Set default user e-mail domain:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Define SELinux user map order:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" +msgstr "" +"\n" +"Налаштування сервера\n" +"\n" +"Керування типовими значеннями, які використовує IPA, та деякими з\n" +"придатних до зміни параметрів.\n" +"\n" +"ЗАУВАЖЕННЯ:\n" +"\n" +"Тут зберігається значення параметра сповіщення щодо паролів\n" +"(--pwdexpnotify), отже його не буде скопійовано. Це значення поки що\n" +"не використовується для сповіщення користувачів щодо завершення строку дії\n" +"пароля.\n" +"\n" +"Деякі з атрибутів придатні лише для читання, їх буде показано лише з метою\n" +"інформування. Серед цих атрибутів:\n" +"\n" +"Основа призначення сертифіката: змінна основа призначення сертифіката,\n" +" наприклад O=EXAMPLE.COM. Цей атрибут можна налаштувати лише під час\n" +" встановлення.\n" +"Параметри додатка роботи з паролями: у поточній версії визначають додаткові\n" +" хеші, які створюються на основі пароля (можуть бути і інші умови).\n" +"\n" +"Під час встановлення списку пріоритетності для користувачів SELinux може " +"виникнути\n" +"потреба у додаванні лапок до значення, щоб оболонка не обробляла параметр.\n" +"\n" +"Максимальна довжина назви вузла у Linux керується значенням\n" +"MAXHOSTNAMELEN у ядрі. Типовим значенням є 64. У деяких інших\n" +"операційних системах, наприклад у Solaris, можна використовувати у\n" +"назвах до 255 символів. Цей параметр надає гнучкості щодо довжини, але\n" +"у Linux його значення все одно обмежено максимальним можливим.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Показати основні налаштування сервера:\n" +" ipa config-show\n" +"\n" +" Показати всі параметри налаштування:\n" +" ipa config-show --all\n" +"\n" +" Змінити максимальну довжину імені користувача на 99 символів:\n" +" ipa config-mod --maxusername=99\n" +"\n" +" Змінити максимальну довжину назви вузла на 255 символів:\n" +" ipa config-mod --maxhostname=255\n" +"\n" +"Збільшити типовий час і максимальне обмеження на розмір пошуку\n" +" сервера IPA:\n" +" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" +"\n" +" Встановити типовий домен електронної пошти користувачів:\n" +" ipa config-mod --emaildomain=example.com\n" +"\n" +" Увімкнути режим перенесення, щоб зробити команду \"ipa migrate-ds\"\n" +" працездатною:\n" +" ipa config-mod --enable-migration=TRUE\n" +"\n" +" Визначити пріоритетність користувачів у карті SELinux:\n" +" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" +"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" +"\n" +"Обмежене службами делегування\n" +"\n" +"Керування правилами, за допомогою яких можна обмежити делегування\n" +"реєстраційних даних так, що служба зможе виконувати персоніфікацію\n" +"користувача під час обміну даними з іншою службою без потреби для\n" +"користувача насправді переспрямовувати квиток для отримання квитка\n" +"(TGT). Так створюється значно кращий метод делегування реєстраційних\n" +"даних, оскільки він запобігає розкриттю короткотермінових ключів\n" +"доступу користувачів.\n" +"\n" +"Відповідно до угоди з іменування, до назви правила додається слово\n" +"\"target\" або \"targets\". Така схема назв не є обов’язковою, але вона\n" +"допомагає концептуально пов’язати правила та їхні призначення.\n" +"\n" +"Правило складається з двох компонентів:\n" +" - Списку цілей (призначень), яких стосується правило\n" +" - Списку memberPrincipals, яким дозволено делегування для\n" +" цих цілей\n" +"\n" +"Запис цілі складається зі списку реєстраційних записів, які можна\n" +"делегувати.\n" +"\n" +"Якщо простіше, правило стверджує, що певний реєстраційний запис\n" +"можна делегувати як вказаний список реєстраційних записів,\n" +"відповідно до визначеного списку цілей.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати нове правило обмеженого делегування:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Додати нову ціль обмеженого делегування:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Додати реєстраційний запис до правила:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Додати нашу ціль до правила:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Додати реєстраційний запис до цілі:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Показати дані щодо іменованого правила і цілі:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Вилучити обмежене делегування:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"У цьому прикладі служба ftp може отримувати квиток для отримання квитка для\n" +"служби ldap від імені пов’язаного користувача.\n" +"\n" +"Ми наполегливо не рекомендуємо змінювати делегування, які постачаються з\n" +"IPA, ipa-http-delegation та його цілі ipa-cifs-delegation-targets і\n" +"ipa-ldap-delegation-targets. Некоректні зміни можуть усунути можливість\n" +"делегування, що спричинить непрацездатність усієї системи.\n" + +msgid "" +"\n" +"Service Constrained Delegation\n" +"\n" +"Manage rules to allow constrained delegation of credentials so\n" +"that a service can impersonate a user when communicating with another\n" +"service without requiring the user to actually forward their TGT.\n" +"This makes for a much better method of delegating credentials as it\n" +"prevents exposure of the short term secret of the user.\n" +"\n" +"The naming convention is to append the word \"target\" or \"targets\" to\n" +"a matching rule name. This is not mandatory but helps conceptually\n" +"to associate rules and targets.\n" +"\n" +"A rule consists of two things:\n" +" - A list of targets the rule applies to\n" +" - A list of memberPrincipals that are allowed to delegate for\n" +" those targets\n" +"\n" +"A target consists of a list of principals that can be delegated.\n" +"\n" +"In English, a rule says that this principal can delegate as this\n" +"list of principals, as defined by these targets.\n" +"\n" +"In both a rule and a target Kerberos principals may be specified\n" +"by their name or an alias and the realm can be omitted. Additionally,\n" +"hosts can be specified by their names. If Kerberos principal specified\n" +"has a single component and does not end with '$' sign, it will be treated\n" +"as a host name. Kerberos principal names ending with '$' are typically\n" +"used as aliases for Active Directory-related services.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new constrained delegation rule:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Add a new constrained delegation target:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Add a principal to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Add a host principal of the host 'ipa.example.com' to the rule:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Add our target to the rule:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Add a principal to the target:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Display information about a named delegation rule and target:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Remove a constrained delegation:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"In this example the ftp service can get a TGT for the ldap service on\n" +"the bound user's behalf.\n" +"\n" +"It is strongly discouraged to modify the delegations that ship with\n" +"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" +"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" +"to delegate, causing the framework to stop functioning.\n" +msgstr "" +"\n" +"Обмежене службами делегування\n" +"\n" +"Керування правилами, за допомогою яких можна обмежити делегування\n" +"реєстраційних даних так, що служба зможе виконувати персоніфікацію\n" +"користувача під час обміну даними з іншою службою без потреби для\n" +"користувача насправді переспрямовувати квиток для отримання квитка\n" +"(TGT). Так створюється значно кращий метод делегування реєстраційних\n" +"даних, оскільки він запобігає розкриттю короткотермінових ключів\n" +"доступу користувачів.\n" +"\n" +"Відповідно до угоди з іменування, до назви правила додається слово\n" +"\"target\" або \"targets\". Така схема назв не є обов’язковою, але вона\n" +"допомагає концептуально пов’язати правила та їхні призначення.\n" +"\n" +"Правило складається з двох компонентів:\n" +" - Списку цілей (призначень), яких стосується правило\n" +" - Списку memberPrincipals, яким дозволено делегування для\n" +" цих цілей\n" +"\n" +"Запис цілі складається зі списку реєстраційних записів, які можна\n" +"делегувати.\n" +"\n" +"Якщо простіше, правило стверджує, що певний реєстраційний запис\n" +"можна делегувати як вказаний список реєстраційних записів,\n" +"відповідно до визначеного списку цілей.\n" +"\n" +"У правилі і цілі реєстраційні дані Kerberos може бути вказано за\n" +"їхньою назвою або альтернативною назвою, область дії можна пропустити.\n" +"Крім того, вузли можна вказувати за їхніми назвами. Якщо вказані\n" +"реєстраційні дані Kerberos містять один компонент і не завершуються " +"символом\n" +"«$», запис вважатиметься назвою вузла. Назви реєстраційних даних Kerberos, " +"які\n" +"завершуються «$» типово використовуються як альтернативні назви для " +"пов'язаних\n" +"із Active Directory служб.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати нове правило обмеженого делегування:\n" +" ipa servicedelegationrule-add ftp-delegation\n" +"\n" +" Додати нову ціль обмеженого делегування:\n" +" ipa servicedelegationtarget-add ftp-delegation-target\n" +"\n" +" Додати реєстраційний запис до правила:\n" +" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." +"com ftp-delegation\n" +"\n" +" Додати реєстраційні дані вузла «ipa.example.com» до правила:\n" +" ipa servicedelegationrule-add-member --principals=ipa.example.com " +"ftp-delegation\n" +"\n" +" Додати нашу ціль до правила:\n" +" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" +"delegation-target ftp-delegation\n" +"\n" +" Додати реєстраційний запис до цілі:\n" +" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." +"com ftp-delegation-target\n" +"\n" +" Показати дані щодо іменованого правила і цілі:\n" +" ipa servicedelegationrule_show ftp-delegation\n" +" ipa servicedelegationtarget_show ftp-delegation-target\n" +"\n" +" Вилучити обмежене делегування:\n" +" ipa servicedelegationrule-del ftp-delegation-target\n" +" ipa servicedelegationtarget-del ftp-delegation\n" +"\n" +"У цьому прикладі служба ftp може отримувати квиток для отримання квитка для\n" +"служби ldap від імені пов’язаного користувача.\n" +"\n" +"Ми наполегливо не рекомендуємо змінювати делегування, які постачаються з\n" +"IPA, ipa-http-delegation та його цілі ipa-cifs-delegation-targets і\n" +"ipa-ldap-delegation-targets. Некоректні зміни можуть усунути можливість\n" +"делегування, що спричинить непрацездатність усієї системи.\n" + +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" A typical use case where overriding the PAC type is needed is NFS.\n" +" Currently the related code in the Linux kernel can only handle Kerberos\n" +" tickets up to a maximal size. Since the PAC data can become quite large " +"it\n" +" is recommended to set --pac-type=NONE for NFS services.\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +msgstr "" +"\n" +"Служби\n" +"\n" +"Служба IPA — це служба, що працює на вузлі системи. У записі служби\n" +"IPA можуть зберігатися дані реєстраційного запису Kerberos, сертифікат\n" +"SSL або обидва набори даних.\n" +"\n" +"Службою IPA можна керувати безпосередньо з комп’ютера, якщо системі\n" +"цього комп’ютера надано достатні права доступу. Це стосується навіть\n" +"комп’ютерів, відмінних від тих, з якими пов’язано службу. Наприклад,\n" +"вони можуть надсилати запит щодо сертифіката SSL за допомогою\n" +"реєстраційних даних служби вузла. Для керування службою за допомогою\n" +"реєстраційних даних вузла слід віддати команду ініціалізації kinit\n" +"від імені вузла:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Додавання служби IPA надає доступ пов’язаній службі до надсилання\n" +"запитів щодо сертифікатів SSL та таблиці ключів, але створення самих\n" +"запитів є окремим кроком: відповідні дані не створюються у результаті\n" +"простого додавання служби.\n" +"\n" +"У записі служби зберігаються лише відкриті дані сертифіката; закритий\n" +"ключ не зберігається.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати нову службу IPA:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Дозволити вузлу керувати сертифікатом служби IPA:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Перевизначити типовий список підтримуваних типів PAC для служби:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Типовим випадком, коли потрібне перевизначення типу PAC є NFS.\n" +" У поточній версії ядра Linux відповідний код може працювати лише з\n" +" квитками Kerberos, розмір яких не перевищує максимально заданого.\n" +" Оскільки дані PAC можуть бути доволі об’ємними, для служб NFS\n" +" рекомендуємо встановити --pac-type=NONE.\n" +"\n" +" Вилучити службу IPA:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Знайти усіх служби IPA, пов’язані із вузлом:\n" +" ipa service-find web.example.com\n" +"\n" +" Знайти усі служби HTTP:\n" +" ipa service-find HTTP\n" +"\n" +" Вимкнути службу ключів Kerberos і сертифіката SSL:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Надіслати запит щодо сертифіката для служби IPA:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" msgid "" "\n" @@ -8863,83 +12654,122 @@ msgstr "" " ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" "httpd.keytab\n" -msgid "Service principal" -msgstr "Реєстраційний запис служби" - -msgid "PAC type" -msgstr "Тип PAC" +msgid "" +"\n" +"Services\n" +"\n" +"A IPA service represents a service that runs on a host. The IPA service\n" +"record can store a Kerberos principal, an SSL certificate, or both.\n" +"\n" +"An IPA service can be managed directly from a machine, provided that\n" +"machine has been given the correct permission. This is true even for\n" +"machines other than the one the service is associated with. For example,\n" +"requesting an SSL certificate using the host service principal credentials\n" +"of the host. To manage a service using host credentials you need to\n" +"kinit as the host:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Adding an IPA service allows the associated service to request an SSL\n" +"certificate or keytab, but this is performed as a separate step; they\n" +"are not produced as a result of adding the service.\n" +"\n" +"Only the public aspect of a certificate is stored in a service record;\n" +"the private key is not stored.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new IPA service:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Allow a host to manage an IPA service certificate:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Override a default list of supported PAC types for the service:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Delete an IPA service:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Find all IPA services associated with a host:\n" +" ipa service-find web.example.com\n" +"\n" +" Find all HTTP services:\n" +" ipa service-find HTTP\n" +"\n" +" Disable the service Kerberos key and SSL certificate:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Request a certificate for an IPA service:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Generate and retrieve a keytab for an IPA service:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" +msgstr "" +"\n" +"Служби\n" +"\n" +"Служба IPA — це служба, що працює на вузлі системи. У записі служби\n" +"IPA можуть зберігатися дані реєстраційного запису Kerberos, сертифікат\n" +"SSL або обидва набори даних.\n" +"\n" +"Службою IPA можна керувати безпосередньо з комп’ютера, якщо системі\n" +"цього комп’ютера надано достатні права доступу. Це стосується навіть\n" +"комп’ютерів, відмінних від тих, з якими пов’язано службу. Наприклад,\n" +"вони можуть надсилати запит щодо сертифіката SSL за допомогою\n" +"реєстраційних даних служби вузла. Для керування службою за допомогою\n" +"реєстраційних даних вузла слід віддати команду ініціалізації kinit\n" +"від імені вузла:\n" +"\n" +" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" +"\n" +"Додавання служби IPA надає доступ пов’язаній службі до надсилання\n" +"запитів щодо сертифікатів SSL та таблиці ключів, але створення самих\n" +"запитів є окремим кроком: відповідні дані не створюються у результаті\n" +"простого додавання служби.\n" +"\n" +"У записі служби зберігаються лише відкриті дані сертифіката; закритий\n" +"ключ не зберігається.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати нову службу IPA:\n" +" ipa service-add HTTP/web.example.com\n" +"\n" +" Дозволити вузлу керувати сертифікатом служби IPA:\n" +" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" +" ipa role-add-member --hosts=web.example.com certadmin\n" +"\n" +" Перевизначити типовий список підтримуваних типів PAC для служби:\n" +" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" +"\n" +" Вилучити службу IPA:\n" +" ipa service-del HTTP/web.example.com\n" +"\n" +" Знайти усіх служби IPA, пов’язані із вузлом:\n" +" ipa service-find web.example.com\n" +"\n" +" Знайти усі служби HTTP:\n" +" ipa service-find HTTP\n" +"\n" +" Вимкнути службу ключів Kerberos і сертифіката SSL:\n" +" ipa service-disable HTTP/web.example.com\n" +"\n" +" Надіслати запит щодо сертифіката для служби IPA:\n" +" ipa cert-request --principal=HTTP/web.example.com example.csr\n" +"\n" +" Створити і отримати вміст сховища ключів для служби IPA:\n" +" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" +"httpd.keytab\n" msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." +"\n" +"Session Support for IPA\n" msgstr "" -"Перевизначити типовий список підтримуваних типів PAC. Скористайтеся " -"значенням «NONE», щоб вимкнути підтримку PAC для цієї служби. Це, наприклад, " -"може бути необхідним для служб NFS." - -msgid "Add a new IPA new service." -msgstr "Додати нову службу IPA." - -msgid "force principal name even if not in DNS" -msgstr "" -"примусове значення назви реєстраційного запису, навіть якщо назви немає у DNS" - -msgid "Add hosts that can manage this service." -msgstr "Додати вузли, які можуть керувати цією службою." - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "" -"Дозволити користувачам, групам, вузлам і групам вузлів створювати таблицю " -"ключів цієї служби." - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" -"Дозволити користувачам, групам, вузлам і групам вузлів отримувати таблицю " -"ключів цієї служби." - -msgid "Delete an IPA service." -msgstr "Вилучити службу IPA." - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "Вимкнути ключ Kerberos і сертифікат SSL служби." - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "" -"Заборонити користувачам, групам, вузлам і групам вузлів створювати таблицю " -"ключів цієї служби." - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "" -"Заборонити користувачам, групам, вузлам і групам вузлів отримувати таблицю " -"ключів цієї служби." - -msgid "Search for IPA services." -msgstr "Знайти служби IPA." - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "Результати мають містити лише атрибут основного ключа («principal»)" - -msgid "Search for services with these managed by hosts." -msgstr "Шукати служби із цими керованими вузлами." - -msgid "Search for services without these managed by hosts." -msgstr "Шукати служби без цих керованих вузлів." - -msgid "Modify an existing IPA service." -msgstr "Змінити вже створену службу IPA." - -msgid "Remove hosts that can manage this service." -msgstr "Вилучити вузли, які можуть керувати цією службою." - -msgid "Display information about an IPA service." -msgstr "Показати дані щодо служби IPA." +"\n" +"Підтримка сеансів для IPA\n" msgid "" "\n" @@ -10140,3172 +13970,322 @@ msgstr "" "дані Kerberos видобуватимуться зі змінної середовища KRB5CCNAME,\n" "за вміст якої відповідає mod_auth_kerb. Усе інше залишається тим самим.\n" -msgid "RPC command used to log the current user out of their session." -msgstr "" -"Команда RPC, яка використовується для завершення сеансу поточного " -"користувача." - msgid "" "\n" -"Sudo Commands\n" +"Set a user's password\n" "\n" -"Commands used as building blocks for sudo\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" "\n" "EXAMPLES:\n" "\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +" To reset your own password:\n" +" ipa passwd\n" "\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" msgstr "" "\n" -"Команди sudo\n" +"Встановлення пароля користувача\n" "\n" -"Команди, використані як будівельні блоки для sudo\n" +"Якщо якась стороння особа змінює пароль користувача (наприклад його\n" +"відновлює допоміжний персонал), новий пароль має бути змінено під\n" +"час його першого використання. Метою такого способу дій є забезпечення\n" +"ситуації, коли пароль буде відомий лише тому, хто ним користується.\n" +"\n" +"Правила щодо паролів IPA керують частотою зміни пароля, вимогами щодо\n" +"складності пароля та об’ємом журналу зміни паролів.\n" "\n" "ПРИКЛАДИ:\n" "\n" -" Створення запису команди\n" -" ipa sudocmd-add --desc='Читання файлів журналу' /usr/bin/less\n" +" Щоб скинути ваш власний пароль, виконайте команду:\n" +" ipa passwd\n" "\n" -" Вилучення команди\n" -" ipa sudocmd-del /usr/bin/less\n" - -msgid "Sudo Command" -msgstr "Команда sudo" - -msgid "A description of this command" -msgstr "Опис цієї команди" - -msgid "Sudo Command Groups" -msgstr "Групи команд sudo" - -msgid "Create new Sudo Command." -msgstr "Створити запис команди sudo." - -msgid "Delete Sudo Command." -msgstr "Вилучити запис команди sudo." - -msgid "Search for Sudo Commands." -msgstr "Знайти команди sudo." - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "Результати мають містити лише атрибут основного ключа («command»)" - -msgid "Modify Sudo Command." -msgstr "Змінити команду sudo." - -msgid "Display Sudo Command." -msgstr "Показати команду sudo." +" Щоб змінити пароль іншого користувача, виконайте команду:\n" +" ipa passwd tuser1\n" msgid "" "\n" -"Groups of Sudo Commands\n" +"Set a user's password\n" "\n" -"Manage groups of Sudo Commands.\n" +"If someone other than a user changes that user's password (e.g., Helpdesk\n" +"resets it) then the password will need to be changed the first time it\n" +"is used. This is so the end-user is the only one who knows the password.\n" +"\n" +"The IPA password policy controls how often a password may be changed,\n" +"what strength requirements exist, and the length of the password history.\n" +"\n" +"If the user authentication method is set to password+OTP, the user should\n" +"pass the --otp option when resetting the password.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +" To reset your own password:\n" +" ipa passwd\n" "\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" +" To reset your own password when password+OTP is set as authentication " +"method:\n" +" ipa passwd --otp\n" "\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" +" To change another user's password:\n" +" ipa passwd tuser1\n" msgstr "" "\n" -"Групи команд sudo\n" +"Встановлення пароля користувача\n" "\n" -"Керування групами команд sudo.\n" +"Якщо якась стороння особа змінює пароль користувача (наприклад його\n" +"відновлює допоміжний персонал), новий пароль має бути змінено під\n" +"час його першого використання. Метою такого способу дій є забезпечення\n" +"ситуації, коли пароль буде відомий лише тому, хто ним користується.\n" "\n" -"ПРИКЛАДИ:\n" +"Правила щодо паролів IPA керують частотою зміни пароля, вимогами щодо\n" +"складності пароля та об’ємом журналу зміни паролів.\n" "\n" -" Додати нову групу команд sudo:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" +"Якщо встановлено спосіб розпізнавання пароль+OTP, користувач має\n" +"передати параметри --otp при скиданні пароля.\n" "\n" -" Вилучити групу команд sudo:\n" -" ipa sudocmdgroup-del admincmds\n" +"ПРИКЛАД:\n" "\n" -" Керування участю групи команд sudo, команди:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" +"Щоб скинувати ваш власний пароль, віддайте таку команду:\n" +" ipa passwd\n" "\n" -" Керування участю групи команд sudo, команди:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" +"Щоб скинути ваш пароль, якщо встановлено спосіб розпізнавання пароль+OTP, " +"віддайте команду\n" +" ipa passwd --otp\n" "\n" -" Показ групи команд sudo:\n" -" ipa group-show localadmins\n" - -msgid "Sudo Command Group" -msgstr "Група команд sudo" - -msgid "Commands" -msgstr "Команди" - -msgid "Member Sudo commands" -msgstr "Команди учасника Sudo" - -msgid "Create new Sudo Command Group." -msgstr "Створити групу команд sudo." - -msgid "Add members to Sudo Command Group." -msgstr "Додати учасників до групи команд sudo." - -msgid "member sudo command" -msgstr "команда учасника sudo" - -msgid "sudo commands to add" -msgstr "команди sudo, які слід додати" - -msgid "Delete Sudo Command Group." -msgstr "Вилучити групу команд sudo." - -msgid "Search for Sudo Command Groups." -msgstr "Шукати групи команд sudo." - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "" -"Результати мають містити лише атрибут основного ключа («suydocmdgroup-name»)" - -msgid "Modify Sudo Command Group." -msgstr "Змінити групу команд sudo." - -msgid "Remove members from Sudo Command Group." -msgstr "Вилучити учасників з групи команд sudo." - -msgid "sudo commands to remove" -msgstr "команди sudo для вилучення" - -msgid "Display Sudo Command Group." -msgstr "Показати групу команд sudo." +" Щоб змінити пароль іншого користувача, виконайте команду:\n" +" ipa passwd tuser1\n" msgid "" "\n" -"Cross-realm trusts\n" +"Simulate use of Host-based access controls\n" "\n" -"Manage trust relationship between IPA and Active Directory domains.\n" +"HBAC rules control who can access what services on what hosts and from " +"where.\n" +"You can use HBAC to control which users or groups can access a service,\n" +"or group of services, on a target host.\n" "\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" +"Since applying HBAC rules implies use of a production environment,\n" +"this plugin aims to provide simulation of HBAC rules evaluation without\n" +"having access to the production environment.\n" "\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" +" Test user coming to a service on a named host against\n" +" existing enabled rules.\n" "\n" -"Examples:\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" "\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" +" --user, --host, and --service are mandatory, others are optional.\n" "\n" -" ipa trust-add --type=ad --admin --" -"password\n" +" If --rules is specified simulate enabling of the specified rules and test\n" +" the login of the user using only these rules.\n" "\n" -"2. List all existing trust relationships:\n" +" If --enabled is specified, all enabled HBAC rules will be added to " +"simulation\n" "\n" -" ipa trust-find\n" +" If --disabled is specified, all disabled HBAC rules will be added to " +"simulation\n" "\n" -"3. Show details of the specific trust relationship:\n" +" If --nodetail is specified, do not return information about rules matched/" +"not matched.\n" "\n" -" ipa trust-show \n" +" If both --rules and --enabled are specified, apply simulation to --rules " +"_and_\n" +" all IPA enabled rules.\n" "\n" -"4. Delete existing trust relationship:\n" +" If no --rules specified, simulation is run against all IPA enabled rules.\n" +" By default there is a IPA-wide limit to number of entries fetched, you can " +"change it\n" +" with --sizelimit option.\n" "\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" -"\n" -"Довіра між областями\n" -"\n" -"Керування відносинами довіри між доменами IPA і Active Directory.\n" -"\n" -"З метою надання доступу користувачам віддаленого домену до ресурсів у " -"домені\n" -"IPA слід встановити відносини довіри. У поточній версії у IPA передбачено\n" -"підтримку довіри лише між доменами IPA і Active Directory під керуванням " -"Windows\n" -"Server 2008 або новішої версії з функціональними можливостями рівня 2008 " -"або\n" -"новішої версії.\n" -"\n" -"Будь ласка, зауважте, що слід належним чином налаштувати DNS на обох " -"доменах,\n" -"IPA і Active Directory, щоб домени могли виявити один одного. " -"Працездатність\n" -"відносин довіри залежить від можливості виявлення спеціальних ресурсів у\n" -"іншому домені за допомогою записів DNS.\n" -"\n" -"Приклад:\n" -"\n" -"1. Встановити довіру між областями з Active Directory за допомогою " -"реєстраційних\n" -" даних адміністратора AD:\n" -"\n" -" ipa trust-add --type=ad <домен.ad> --admin <адміністратор домену AD> --" -"password\n" -"\n" -"2. Показати список всіх наявних відносин довіри:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Показати подробиці щодо певних відносин довіри:\n" -"\n" -" ipa trust-show <домен.ad>\n" -"\n" -"4. Вилучити наявні відносини довіри:\n" -"\n" -" ipa trust-del <домен.ad>\n" -"\n" -"Щойно відносини довіри буде встановлено, віддалених користувачів слід " -"прив’язати\n" -"до локальних груп POSIX, щоб скористатися ресурсами IPA. Прив’язку слід\n" -"виконати за допомогою використання зовнішньої участі групи не-POSIX, а " -"потім\n" -"цю групу має бути включено до однієї з локальних груп POSIX.\n" -"\n" -"Приклади:\n" -"\n" -"1. Створити групу для прив’язки адміністраторів та їхньої локальної групи " -"POSIX\n" -" довіреного домену:\n" -"\n" -" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc='<домен.ad> admins' ad_admins\n" -"\n" -"2. Додати ідентифікатор безпеки Domain Admins домену <домен.ad> до групи " -"ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Дозволити прив’язування учасників групи ad_admins_external до групи POSIX " -"ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Показати список зовнішніх учасників групи ad_admins_external для " -"перегляду їхніх SID:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"НАЛАШТУВАННЯ ДОВІРИ ЗАГАЛЬНОГО РІВНЯ\n" -"\n" -"Якщо встановлено підпакунок довіри AD IPA та запущено ipa-adtrust-install,\n" -"створюються налаштування локального домену (SID, GUID, назва NetBIOS). " -"Після\n" -"цього створені ідентифікатори використовуються для обміну даними з\n" -"довіреним доменом певного типу.\n" -"\n" -"1. Показати налаштування довіри загального рівня для типів довіри Active " -"Directory:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Змінити загальні налаштування для всіх довір типу Active Directory і\n" -" встановити іншу резервну основну групу (GID резервної основної групи\n" -" використовується як GID основного користувача, якщо користувача\n" -" розпізнано у домені IPA, але він не має жодного вже встановленого\n" -" основного GID):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Повернути для резервної основної групи значення типової прихованої групи\n" -" (будь-якої групи, у якій дозволено клас об’єктів posixGroup):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" - -msgid "Domain NetBIOS name" -msgstr "Назва домену у NetBIOS" - -msgid "Domain Security Identifier" -msgstr "Ідентифікатор безпеки домену" - -msgid "SID blacklist incoming" -msgstr "Чорний список вхідних SID" - -msgid "SID blacklist outgoing" -msgstr "Чорний список вихідних SID" - -msgid "Security Identifier" -msgstr "Ідентифікатор безпеки" - -msgid "NetBIOS name" -msgstr "Назва NetBIOS" - -msgid "Domain GUID" -msgstr "GUID домену" - -msgid "Fallback primary group" -msgstr "Резервна основна група" - -msgid "Domain name" -msgstr "Назва домену" - -msgid "Trusted domain partner" -msgstr "Партнер довіреного домену" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "Визначити, чи було запущено ipa-adtrust-install для цієї системи" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "" -"Визначити, чи налаштовано додаток сумісності схем (Schema Compatibility) на " -"обслуговування користувачів і груп довіреного домену" - -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "Визначити, чи було запущено ipa-adtrust-install з завданням sidgen" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" -"\n" -"Додати новий запис довіри для використання.\n" -"\n" -"За допомогою цієї команди можна встановити відносини довіри з\n" -"іншим доменом, який після цього вважається «довіреним». У результаті\n" -"користувачі довіреного домену зможуть отримувати доступ до ресурсів\n" -"цього домену.\n" -"\n" -"У поточній версії передбачено підтримку лише відносин довіри з доменами\n" -"Active Directory.\n" -"\n" -"Команду можна безпечно запускати декілька разів для одного і того самого\n" -"домену, такий запуск призводить до зміни у реєстраційних записах відносин\n" -"довіри з обох боків.\n" -" " - -msgid "Trust type (ad for Active Directory, default)" -msgstr "Тип довіри (типовим для Active Directory є ad)" - -msgid "Active Directory domain administrator" -msgstr "Адміністратор домену Active Directory" - -msgid "Active Directory domain administrator's password" -msgstr "Пароль адміністратора домену Active Directory" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "Контролер домену Active Directory (необов’язковий)" - -msgid "Shared secret for the trust" -msgstr "Оприлюднений ключ для довіри" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "" -"Перший ідентифікатор POSIX діапазону, зарезервованого для довіреного домену" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "" -"Розмір діапазону ідентифікаторів, зарезервованого для довіреного домену" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "" -"Тип діапазону ідентифікаторів довіреного домену, одне з таких значень: ipa-" -"ad-trust-posix, ipa-ad-trust" - -msgid "Delete a trust." -msgstr "Вилучити запис довіри." - -msgid "Refresh list of the domains associated with the trust" -msgstr "Освіжити список доменів, пов’язаних з правилом довіри" - -msgid "Search for trusts." -msgstr "Шукати записи довіри." - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "Результати мають містити лише атрибут основного ключа («realm»)" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" -"\n" -" Змінити запис довіри (для наступного використання).\n" -"\n" -" У поточній версії можлива зміна лише типова зміна атрибутів LDAP.\n" -" Додаткові варіанти буде додано у наступних випусках.\n" -" " - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "" -"Визначати ідентифікатори безпеки користувачів та груп у довірених доменах" - -msgid "Security Identifiers (SIDs)" -msgstr "Ідентифікатори безпеки (SID)" - -msgid "Display information about a trust." -msgstr "Показати дані щодо довіри." - -msgid "Modify global trust configuration." -msgstr "Змінити налаштування довіри на загальному рівні." - -msgid "Show global trust configuration." -msgstr "Показати налаштування довіри на загальному рівні." - -msgid "Allow access from the trusted domain" -msgstr "Дозволити доступ з довіреного домену" - -msgid "Remove information about the domain associated with the trust." -msgstr "Вилучити дані щодо домену, пов’язаного з цим правилом довіри." - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "Вимкнути використання ресурсів IPA доменом правила довіри" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "Дозволити використання ресурсів IPA доменом правила довіри" - -msgid "Search domains of the trust" -msgstr "Шукати довірені домени" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "Результати мають містити лише атрибут основного ключа («domain»)" - -msgid "Modify trustdomain of the trust" -msgstr "Змінити значення довіреного домену (trustdomain) правила довіри" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" +" If --srchost is specified, it will be ignored. It is left because of " +"compatibility reasons only.\n" "\n" "EXAMPLES:\n" "\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" +" 1. Use all enabled HBAC rules in IPA database to simulate:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" "\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" +" 2. Disable detailed summary of how rules were applied:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" "\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" +" 3. Test explicitly specified HBAC rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: myrule\n" "\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" +" 4. Use all enabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" matched: allow_all\n" "\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" +" 5. Test all disabled HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: new-rule\n" "\n" -" Delete a user:\n" -" ipa user-del tuser1\n" +" 6. Test all disabled HBAC rules in IPA database + explicitly specified " +"rules:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Access granted: False\n" +" ---------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +"\n" +" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" notmatched: my-second-rule\n" +" notmatched: my-third-rule\n" +" notmatched: myrule\n" +" notmatched: new-rule\n" +" matched: allow_all\n" msgstr "" "\n" -"Користувачі\n" +"Імітація використання керування доступом на основі вузлів (HBAC)\n" "\n" -"Керування записами користувачів. Всі користувачі є користувачами POSIX.\n" +"Правила HBAC керують тим, хто може отримувати доступ до певних служб.\n" +"Ви можете скористатися HBAC для керування тим, які користувачі або групи\n" +"на початковому вузлі можуть отримувати доступ до служби або групи служб\n" +"на вузлі призначення\n" "\n" -"У IPA передбачено підтримку широкого діапазону форматів імен\n" -"користувачів, але вам слід враховувати всі обмеження, які накладаються\n" -"вашим робочим середовищем. Наприклад, імена, що починаються з цифри, або\n" -"занадто довгі імена можуть спричинити проблеми у деяких системах UNIX.\n" -"Скористайтеся командою «ipa config-mod» для зміни формату імені\n" -"користувача, яке дозволятиметься інструментами IPA.\n" +"Оскільки застосування правил HBAC передбачає використання робочого\n" +"середовища, це додаток призначено для імітації обробки правил HBAC без\n" +"доступу до реального середовища\n" "\n" -"Вимикання облікового запису користувача лише заборонить отримання\n" -"користувачами нових реєстраційних даних Kerberos. Всі вже отримані\n" -"реєстраційні дані не втратять своєї чинності.\n" +" Перевірити відповідність користувача з початкового вузла до служби на " +"іменованому\n" +" вузлі правилам уможливлення доступу.\n" "\n" -"Керування паролями не є завданням цього модуля. Докладніші дані щодо\n" -"керування паролями можна отримати у відповідь на команду ipa help passwd\n" +" ipa hbactest --user= --host= --service=\n" +" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" +" [--srchost= ] [--sizelimit= ]\n" "\n" -"Блокування облікового запису виконується окремим основним вузлом IPA.\n" -"Для визначення основного вузла, на якому було заблоковано запис, можна\n" -"скористатися командою user-status. Адміністратор має розблоковувати\n" -"користувача саме на цьому основному вузлі.\n" +" --user, --host і --service є обов’язковими, інші можна не вказувати.\n" +"\n" +" Якщо вказано --rules, імітувати вмикання вказаних правил і перевірити\n" +" можливість входу користувача у разі використання лише цих правил.\n" +"\n" +" Якщо вказано --enabled, додати всі увімкнені правила HBAC до імітації\n" +"\n" +" Якщо вказано --disabled, додати всі вимкнені правила HBAC до імітації\n" +"\n" +" Якщо вказано --nodetail, не повертати даних щодо відповідних і " +"невідповідних\n" +" правил.\n" +"\n" +" Якщо вказано одночасно --rules і --enabled, виконати імітацію --rules _і_\n" +" всіх увімкнених правил IPA.\n" +"\n" +" Якщо не вказано --rules, буде виконано імітацію всіх увімкнених правил " +"IPA.\n" +"\n" +" Якщо вказано --srchost, його буде проігноровано. Цей параметр збережено " +"лише з міркувань сумісності.\n" "\n" "ПРИКЛАДИ:\n" "\n" -" Додавання нового користувача:\n" -" ipa user-add --first=Ivan --last=Ivanenko --password tuser1\n" +" 1. Використання всіх увімкнених правил HBAC у базі даних IPA:\n" +" $ ipa hbactest --user=a1a --srchost=foo --host=bar --service=sshd\n" +" --------------------\n" +" Надано доступ: Так\n" +" --------------------\n" +" невідповідне: my-second-rule\n" +" невідповідне: my-third-rule\n" +" невідповідне: myrule\n" +" відповідне: allow_all\n" "\n" -" Пошук всіх користувачів, чиї записи містять рядок «Ivan»:\n" -" ipa user-find Ivan\n" +" 2. Вимикання докладного резюме застосування правил:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" +" --------------------\n" +" Надано доступ: Так\n" +" --------------------\n" "\n" -" Пошук всіх користувачів з іменем (не прізвищем) «Ivan»:\n" -" ipa user-find --first=Ivan\n" +" 3. Перевірити явно вказані правила HBAC:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule\n" +" ---------------------\n" +" Надано доступ: Ні\n" +" ---------------------\n" +" невідповідне: my-second-rule\n" +" невідповідне: myrule\n" "\n" -" Вимикання запису користувача:\n" -" ipa user-disable tuser1\n" +" 4. Використання всіх увімкнених правил HBAC у базі даних IPA + явно " +"вказаних правил:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --enabled\n" +" --------------------\n" +" Доступ надано: Так\n" +" --------------------\n" +" невідповідне: my-second-rule\n" +" невідповідне: my-third-rule\n" +" невідповідне: myrule\n" +" відповідне: allow_all\n" "\n" -" Вмикання запису користувача:\n" -" ipa user-enable tuser1\n" +" 5. Перевірка всіх вимкнених правил HBAC у базі даних IPA:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" +" ---------------------\n" +" Надано доступ: Ні\n" +" ---------------------\n" +" невідповідне: new-rule\n" "\n" -" Вилучення запису користувача:\n" -" ipa user-del tuser1\n" - -msgid "First name" -msgstr "Ім'я" - -msgid "Last name" -msgstr "Прізвище" - -msgid "Full name" -msgstr "Повне ім’я" - -msgid "Display name" -msgstr "Екранне ім'я" - -msgid "Initials" -msgstr "Ініціали" - -msgid "Kerberos principal" -msgstr "Реєстраційний запис Kerberos" - -msgid "Kerberos principal expiration" -msgstr "Завершення строку дії реєстраційного запису Kerberos" - -msgid "Email address" -msgstr "Адреса ел. пошти" - -msgid "Prompt to set the user password" -msgstr "Надіслати запит щодо встановлення пароля користувача" - -msgid "Generate a random user password" -msgstr "Створити випадковий пароль для користувача" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "" -"Ідентифікаційний номер користувача (система призначить його, якщо не буде " -"вказано)" - -msgid "Street address" -msgstr "Вулиця і будинок" - -msgid "City" -msgstr "Місто" - -msgid "State/Province" -msgstr "Область/провінція" - -msgid "ZIP" -msgstr "Індекс" - -msgid "Telephone Number" -msgstr "Номер телефону" - -msgid "Mobile Telephone Number" -msgstr "Номер мобільного телефону" - -msgid "Pager Number" -msgstr "Номер пейджера" - -msgid "Fax Number" -msgstr "Номер факсу" - -msgid "Org. Unit" -msgstr "Підрозділ" - -msgid "Job Title" -msgstr "Посада" - -msgid "Car License" -msgstr "Водійська ліцензія" - -msgid "Account disabled" -msgstr "Обліковий запис вимкнено" - -msgid "User authentication types" -msgstr "Типи розпізнавання користувачів" - -msgid "Types of supported user authentication" -msgstr "Типи підтримуваного розпізнавання користувачів" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "" -"Категорія вузлів (семантику цього атрибуту призначено для локальної обробки)" - -msgid "RADIUS proxy configuration" -msgstr "Налаштування проксі RADIUS" - -msgid "RADIUS proxy username" -msgstr "Ім’я користувача проксі-сервера RADIUS" - -msgid "Department Number" -msgstr "Номер відділу" - -msgid "Employee Number" -msgstr "Номер працівника" - -msgid "Employee Type" -msgstr "Тип працівника" - -msgid "Preferred Language" -msgstr "Бажана мова" - -msgid "Kerberos keys available" -msgstr "Доступні ключі Kerberos" - -msgid "Add a new user." -msgstr "Додати нового користувача." - -msgid "Don't create user private group" -msgstr "Не створювати закриту групу користувача" - -msgid "Delete a user." -msgstr "Вилучити користувача." - -msgid "Disable a user account." -msgstr "Вимкнути обліковий запис користувача." - -msgid "Enable a user account." -msgstr "Увімкнути обліковий запис користувача." - -msgid "Search for users." -msgstr "Шукати користувачів." - -msgid "Self" -msgstr "Self" - -msgid "Display user record for current Kerberos principal" -msgstr "" -"Показати запис користувача для поточного реєстраційного запису Kerberos" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "Результати мають містити лише атрибут основного ключа («login»)" - -msgid "Search for users with these member of groups." -msgstr "Шукати користувачів з вказаними групами участі." - -msgid "Search for users without these member of groups." -msgstr "Шукати користувачів без вказаних груп участі." - -msgid "Search for users with these member of netgroups." -msgstr "Шукати користувачів із вказаними мережевими групами участі." - -msgid "Search for users without these member of netgroups." -msgstr "Шукати користувачів без вказаних мережевих груп участі." - -msgid "Search for users with these member of roles." -msgstr "Шукати користувачів із вказаними ролями участі." - -msgid "Search for users without these member of roles." -msgstr "Шукати користувачів без вказаних ролей участі." - -msgid "Search for users with these member of HBAC rules." -msgstr "Шукати користувачів із цими правилами HBAC участі." - -msgid "Search for users without these member of HBAC rules." -msgstr "Шукати користувачів без цих правил HBAC участі." - -msgid "Search for users with these member of sudo rules." -msgstr "Шукати користувачів із цими правилами sudo участі." - -msgid "Search for users without these member of sudo rules." -msgstr "Шукати користувачів без цих правил sudo участі." - -msgid "Modify a user." -msgstr "Змінити параметри користувача." - -msgid "Rename the user object" -msgstr "Перейменувати об’єкт користувача" - -msgid "Display information about a user." -msgstr "Показати дані щодо користувача." - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" -"\n" -"Стан блокування облікового запису користувача\n" -"\n" -" Обліковий запис може бути заблоковано, якщо введено неправильний пароль\n" -" забагато разів протягом певного проміжку часу, який визначається " -"правилами\n" -" роботи з паролями. Блокування облікового запису є тимчасовим станом, " -"його\n" -" може бути розблоковано адміністратором.\n" -"\n" -" Ця програма з’єднується з кожним основним вузлом IPA і показує стан\n" -" блокування на кожному з них.\n" -"\n" -" Щоб визначити, чи слід блокувати обліковий запис на певному сервері, " -"слід\n" -" виконати порівняння кількості помилкових спроб входу та час останньої\n" -" невдалої спроби з еталонними значеннями. Обліковий запис буде " -"заблоковано,\n" -" якщо буде перевищено кількість maxfail помилкових спроб протягом " -"проміжку\n" -" часу failinterval. Відповідні значення задаються правилами обробки " -"паролів,\n" -" пов’язаними з обліковим записом користувача.\n" -"\n" -" Зміни до лічильника помилкових спроб входу вносяться, лише коли " -"користувач\n" -" виконує спробу увійти, тому може статися так, що обліковий запис " -"заблоковано,\n" -" хоча час, що минув з останньої помилкової спроби, перевищує час " -"блокування\n" -" (lockouttime), заданий правилам обробки паролів. Це означає, що " -"користувач\n" -" може увійти до системи знову.\n" -" " - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" -"\n" -" Розблокувати обліковий запис користувача\n" -"\n" -" Обліковий запис може бути заблоковано, якщо відповідно до правил " -"безпеки\n" -" користувач перевищить обмеження на кількість введення помилкових " -"паролів\n" -" протягом певного часу. Запис блокується тимчасово, його може бути\n" -" розблоковано адміністратором.\n" -" " - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" -"\n" -"Правила sudo\n" -"\n" -"Sudo (su \"do\") надає системному адміністратору змогу делегувати\n" -"повноваження певним користувачам (або групам користувачів) на виконання\n" -"деяких (або усіх) команд від імені адміністратора (root) або іншого\n" -"користувача, зберігаючи водночас журнал виконання команд та\n" -"аргументів.\n" -"\n" -"У IPA передбачено декілька параметрів налаштовування роботи sudo:\n" -" Users: користувачі або групи, які можуть викликати sudo.\n" -" Hosts: вузли або групи вузлів, користувачі якого можуть викликати sudo.\n" -" Allow Command: специфічні команди, які можна виконувати за допомогою " -"sudo.\n" -" Deny Command: специфічні команди, які не можна виконувати за допомогою " -"sudo.\n" -" RunAsUser: користувачі або групи, від імені яких sudo виконуватиме " -"команди.\n" -" RunAsGroup: групи, ідентифікатори яких буде використано sudo для " -"виконання команд.\n" -" Options: різноманітні параметри sudoers, які можуть змінити поведінку " -"sudo.\n" -"\n" -"До правила sudo можна додати порядок, який керуватиме порядком\n" -"обробки записів (якщо такий порядок передбачено на клієнтському боці).\n" -"Порядок визначається числовим індексом, який не повинен повторюватися.\n" -"\n" -"У IPA передбачено визначений binddn для використання з sudo, який " -"розташовано у\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"Щоб увімкнути binddn, віддайте таку команду для встановлення пароля:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Створити правило:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Додати об’єкт команди sudo і записати його як дозволену команду до " +" 6. Перевірка всіх вимкнених правил HBAC у базі даних IPA + явно вказані " "правила:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Додати запис вузла до правила:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Додати запис користувача до правила:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Додати особливе правило sudo для типового налаштовування сервера sudo:\n" -" ipa sudorule-add defaults\n" -"\n" -" Встановити типовий варіант дій для sudo:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" - -msgid "Command category" -msgstr "Категорія команд" - -msgid "Command category the rule applies to" -msgstr "Категорія команд, до якої застосовується правило" - -msgid "RunAs User category" -msgstr "Категорія запуску від імені користувачів" - -msgid "RunAs User category the rule applies to" -msgstr "" -"Категорія запуску від імені користувачів, до якої застосовується правило" - -msgid "RunAs Group category" -msgstr "Категорія запуску від імені групи" - -msgid "RunAs Group category the rule applies to" -msgstr "Категорія запуску від імені групи, до якої застосовується правило" - -msgid "Sudo order" -msgstr "Порядок sudo" - -msgid "integer to order the Sudo rules" -msgstr "ціле число для впорядковування правил sudo" - -msgid "External User" -msgstr "Зовнішній користувач" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "" -"Зовнішній користувач, до якого застосовуватиметься правило (лише sudorule-" -"find)" - -msgid "Host Masks" -msgstr "Маски вузлів" - -msgid "Sudo Allow Commands" -msgstr "Дозволені команди sudo" - -msgid "Sudo Deny Commands" -msgstr "Заборонені команди sudo" - -msgid "Sudo Allow Command Groups" -msgstr "Групи дозволених команд sudo" - -msgid "Sudo Deny Command Groups" -msgstr "Групи заборонених команд sudo" - -msgid "RunAs Users" -msgstr "Користувачі запуску від імені" - -msgid "Run as a user" -msgstr "Запуск від користувача" - -msgid "Groups of RunAs Users" -msgstr "Групи користувачів запуску від імені" - -msgid "Run as any user within a specified group" -msgstr "Запускати від імені будь-якого користувача вказаної групи" - -msgid "RunAs External User" -msgstr "Зовнішній користувач для RunAs" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "" -"Зовнішній користувач, від імені якого можна віддавати команди (лише sudorule-" -"find)" - -msgid "External Groups of RunAs Users" -msgstr "Зовнішні групи користувачів для запуску від імені" - -msgid "External Groups of users that the command can run as" -msgstr "Зовнішні групи користувачів, від імені яких можна виконувати команду" - -msgid "RunAs Groups" -msgstr "Групи запуску від імені" - -msgid "Run with the gid of a specified POSIX group" -msgstr "Запускати з ідентифікатором вказаної групи POSIX" - -msgid "RunAs External Group" -msgstr "Зовнішня група для RunAs" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "" -"Зовнішня група, від імені якої можна віддавати команди (лише sudorule-find)" - -msgid "Sudo Option" -msgstr "Пункт sudo" - -msgid "Create new Sudo Rule." -msgstr "Створити правило sudo." - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "Додати команди і групи команд sudo, яких стосується правило sudo." - -msgid "member sudo command group" -msgstr "учасник група команд sudo" - -msgid "sudo command groups to add" -msgstr "групи команд sudo для додавання" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "Додати вузли та групи вузлів, яких стосується правило sudo." - -msgid "host masks of allowed hosts" -msgstr "маски для дозволених вузлів" - -msgid "Add an option to the Sudo Rule." -msgstr "Додати пункт до правила sudo." - -msgid "Add group for Sudo to execute as." -msgstr "Додати групу виконання до запису sudo." - -msgid "Add users and groups for Sudo to execute as." -msgstr "" -"Додати користувачів та групи для виконання команд sudo від їхнього імені." - -msgid "Add users and groups affected by Sudo Rule." -msgstr "Додати записи користувачів та груп, яких стосується правило sudo." - -msgid "Delete Sudo Rule." -msgstr "Вилучити правило sudo." - -msgid "Disable a Sudo Rule." -msgstr "Вимкнути правило sudo." - -msgid "Enable a Sudo Rule." -msgstr "Увімкнути правило sudo." - -msgid "Search for Sudo Rule." -msgstr "Знайти правило sudo." - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "" -"Результати мають містити лише атрибут основного ключа («sudorule-name»)" - -msgid "Modify Sudo Rule." -msgstr "Змінити правило sudo." - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "Вилучити команди і групи команд sudo, яких стосується правило sudo." - -msgid "sudo command groups to remove" -msgstr "групи команд sudo для вилучення" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "Вилучити вузли та групи вузлів, яких стосується правило sudo." - -msgid "Remove an option from Sudo Rule." -msgstr "Вилучити пункт з правила sudo." - -msgid "Remove group for Sudo to execute as." -msgstr "Вилучити групу виконання з запису sudo." - -msgid "Remove users and groups for Sudo to execute as." -msgstr "" -"Вилучити користувачів та групи для виконання команд sudo від їхнього імені." - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "Вилучити записи користувачів та груп, яких стосується правило sudo." - -msgid "Display Sudo Rule." -msgstr "Показати правило sudo." - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "Обмеження часу пошуку у секундах (0 — без обмежень)" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "Максимальна кількість повернутих записів (0 — без обмежень)" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" -"\n" -"Керування правилами CA ACL.\n" -"\n" -"Цей додаток призначено для визначення правил, що керують тим,\n" -"які реєстраційні записи можуть мати сертифікати, випущені за\n" -"допомогою даного профілю сертифікатів.\n" -"\n" -"СИНТАКСИС ІДЕНТИФІКАТОРА ПРОФІЛЮ:\n" -"\n" -"Ідентифікатор профілю — рядок без пробілів і символів пунктуації,\n" -"що починається з літери і складається з послідовності літер, цифр, та " -"символів підкреслювання («_»).\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Створити CA ACL «test», який надає доступ усім користувачам до\n" -" профілю «UserCert»:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Показати усі властивості вказаного за назвою CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Створити CA ACL, який надає користувачеві «alice» право\n" -" використовувати профіль «DNP3»:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Вимкнути певний CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Вилучити певний CA ACL:\n" -" ipa caacl-del test\n" - -msgid "ACL name" -msgstr "Назва ACL" - -msgid "Profile category" -msgstr "Категорія профілів" - -msgid "Profile category the ACL applies to" -msgstr "Категорія профілів, до якої застосовується ACL" - -msgid "User category the ACL applies to" -msgstr "Категорія користувачів, до якої застосовується ACL" - -msgid "Host category the ACL applies to" -msgstr "Категорія вузлів, до якої застосовується ACL" - -msgid "Service category the ACL applies to" -msgstr "Категорія служб, до якої застосовується ACL" - -msgid "Profiles" -msgstr "Профілі" - -msgid "Create a new CA ACL." -msgstr "Створити запис CA ACL." - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "Додати вузли і групи вузлів призначення до CA ACL." - -msgid "Add profiles to a CA ACL." -msgstr "Додати профілі до CA ACL." - -msgid "member Certificate Profile" -msgstr "учасник Профіль сертифікатів" - -msgid "Certificate Profiles to add" -msgstr "Профілі сертифікатів для додавання" - -msgid "Add services to a CA ACL." -msgstr "Додати служби до CA ACL." - -msgid "Add users and groups to a CA ACL." -msgstr "Додати користувачів і групи до CA ACL." - -msgid "Delete a CA ACL." -msgstr "Вилучити CA ACL." - -msgid "Disable a CA ACL." -msgstr "Вимкнути CA ACL." - -msgid "Enable a CA ACL." -msgstr "Увімкнути CA ACL." - -msgid "Search for CA ACLs." -msgstr "Шукати CA ACL." - -msgid "Modify a CA ACL." -msgstr "Змінити CA ACL." - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "Вилучити вузли призначення та групи вузлів з CA ACL." - -msgid "Remove profiles from a CA ACL." -msgstr "Вилучити профілі із CA ACL." - -msgid "Certificate Profiles to remove" -msgstr "Профілі сертифікатів для вилучення" - -msgid "Remove services from a CA ACL." -msgstr "Вилучити служби з CA ACL." - -msgid "Remove users and groups from a CA ACL." -msgstr "Вилучити користувачів або групи з CA ACL." - -msgid "Display the properties of a CA ACL." -msgstr "Показати властивості CA ACL." - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "" -"Реєстраційний запис для цього сертифіката (наприклад HTTP/test.example.com)" - -msgid "Profile ID" -msgstr "Ід. профілю" - -msgid "Certificate Profile to use" -msgstr "Профіль сертифіката, яким слід скористатися" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -msgstr "" -"\n" -"Керування профілями сертифікатів\n" -"\n" -"Профілі сертифікатів використовуються службами сертифікації (CA) під час\n" -"підписування сертифікатів для визначення того, чи є прийнятним запит на\n" -"підписування сертифіката (CSR), і, якщо це так, визначення можливостей\n" -"і розширень, які буде надано сертифікатом.\n" -"\n" -"Форматом профілю сертифікатів є список значень, які може обробляти\n" -"Dogtag або система сертифікації служби сертифікації Red Hat.\n" -"\n" -"СИНТАКСИС ІДЕНТИФІКАТОРА ПРОФІЛЮ:\n" -"\n" -"Ідентифікатор профілю — рядок без пробілів і символів пунктуації,\n" -"що починається з літери і складається з послідовності літер, цифр, та " -"символів підкреслювання («_»).\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Імпортувати профіль, у якому не зберігатимуться видані сертифікати:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --summary \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Вилучити профіль сертифікатів:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Показати дані щодо профілю:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Зберегти налаштування профілю до файла:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Шукати профілі, у яких не зберігаються сертифікати:\n" -" ipa certprofile-find --store=false\n" -"\n" -"ФОРМАТ НАЛАШТУВАНЬ ПРОФІЛЮ:\n" -"\n" -"Налаштування профілю зберігаються у вигляді простого списку\n" -"властивостей, що використовується системою сертифікації Dogtag.\n" -"Підтримки формату XML не передбачено.\n" -"\n" -"Профілів, які керуються IPA, стосуються такі обмеження:\n" -"\n" -"- Під час імпортування профілю поле «profileId», якщо таке є, має\n" -" містити значення, що збігається з ідентифікатором, вказаним у рядку " -"команди.\n" -"\n" -"- Значенням поля «classId» має бути «caEnrollImpl»\n" -"\n" -"- Значенням поля «auth.instance_id» має бути «raCertAuth»\n" -"\n" -"- Має бути використано вхідний клас «certReqInputImpl» і вихідний\n" -" клас «certOutputImpl».\n" - -msgid "Profile ID for referring to this profile" -msgstr "Ідентифікатор профілю для посилання на цей профіль" - -msgid "Profile description" -msgstr "Опис профілю" - -msgid "Brief description of this profile" -msgstr "Короткий опис профілю" - -msgid "Store issued certificates" -msgstr "Зберігати видані сертифікати" - -msgid "Whether to store certs issued using this profile" -msgstr "" -"Визначає, чи слід зберігати сертифікати, видані за допомогою цього профілю" - -msgid "Delete a Certificate Profile." -msgstr "Вилучити профіль сертифікатів." - -msgid "Search for Certificate Profiles." -msgstr "Шукати профілі сертифікатів." - -msgid "Import a Certificate Profile." -msgstr "Імпортувати профіль сертифікатів." - -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "" -"Назва файла профілю з необробленими даними. Підтримки формату XML не " -"передбачено." - -msgid "Modify Certificate Profile configuration." -msgstr "Змінити налаштування профілю сертифікатів." - -msgid "File containing profile configuration" -msgstr "Файл, який містить налаштування профілів" - -msgid "Display the properties of a Certificate Profile." -msgstr "Показати властивості профілю сертифікатів." - -msgid "Write profile configuration to file" -msgstr "Записати налаштування профілів до файла" - -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "" -"Максимальний проміжок часу (у секундах) для виконання однієї дії з пошуку " -"(-1 або 0 — без обмежень)" - -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "" -"Максимальна кількість записів результатів пошуку (-1 або 0 — без обмежень)" - -msgid "" -"\n" -"Raise the IPA Domain Level.\n" -msgstr "" -"\n" -"Підняти рівень домену IPA.\n" - -msgid "Query current Domain Level." -msgstr "Надіслати запити щодо поточного рівня домену." - -msgid "Current domain level:" -msgstr "Поточний рівень домену:" - -msgid "Change current Domain Level." -msgstr "Змінити поточний рівень домену." - -msgid "Domain Level" -msgstr "Рівень домену" - -msgid "Add certificates to host entry" -msgstr "Додати сертифікати до запису вузла" - -msgid "Remove certificates from host entry" -msgstr "Вилучити сертифікати із запису вузла" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" -"\n" -"Діапазони ідентифікаторів\n" -"\n" -"Керування діапазонами ідентифікаторів, використаних для відображення\n" -"ідентифікаторів POSIX на SID, і навпаки.\n" -"\n" -"За допомогою цієї програми можна керувати обома типами діапазонів " -"ідентифікаторів:\n" -"\n" -" - діапазони ідентифікаторів локального домену\n" -" - діапазони ідентифікаторів довірених віддалених доменів\n" -"\n" -"Обидва типи мають такі спільні атрибути:\n" -"\n" -" - base-id: перший ідентифікатор діапазону ідентифікаторів POSIX\n" -" - range-size: розмір діапазону\n" -"\n" -"На основі цих двох атрибутів об’єкт діапазону може зарезервувати " -"ідентифікатори\n" -"POSIX, починаючи з base-id аж до, але не включно, base-id+range-size.\n" -"\n" -"Крім того, можна встановити діапазон ідентифікаторів локального домену\n" -" - rid-base: перший RID(*) відповідного діапазону RID\n" -" - secondary-rid-base: перший RID вторинного діапазону RID\n" -"\n" -"а діапазон ідентифікаторів довіреного домену слід задавати за допомогою\n" -" - rid-base: перший RID відповідного діапазону RID\n" -" - dom_sid: SID довіреного домену\n" -"\n" -"\n" -"\n" -"ПРИКЛАД: додавання нового діапазону ідентифікаторів для довіреного домену\n" -"\n" -"Оскільки може бути декілька довірених доменів, під час створення діапазону\n" -"ідентифікаторів слід вказати SID домену.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"Цей діапазон ідентифікаторів потім використовуватиметься сервером IPA\n" -"та надавачем даних IPA SSSD для призначення UID Posix користувачам з\n" -"довіреного домену.\n" -"\n" -"Якщо, наприклад, налаштовано діапазон для довіреного домену з такими\n" -"значеннями:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"RID від 0 до 199999 прив’язуються до ідентифікаторів Posix від 1200000 до\n" -"13999999. Отже RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"ПРИКЛАД: додавання нового діапазону ідентифікаторів до локального домену\n" -"\n" -"Щоб створити діапазон ідентифікаторів для локального домену не потрібно\n" -"вказувати SID домену. Але оскільки можливий конфлікт між ідентифікаторами\n" -"користувача і групи та ідентифікаторами POSIX, потрібен вторинний інтервал\n" -"RID.\n" -"\n" -" ipa range-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"Дані з діапазонів ідентифікаторів локального домену використовуються\n" -"сервером IPA на внутрішньому рівні для призначення SID користувачам і " -"групам\n" -"IPA. SID буде збережено у об’єктах користувача або групи.\n" -"\n" -"Якщо, наприклад, для діапазону ідентифікаторів локального домену визначено\n" -"значення з наведеного вище прикладу, новий користувач з UID 1200007 отримає\n" -"RID 1007. Якщо цей RID вже буде використано групою, його буде змінено на " -"1000007.\n" -"Таке може трапитися лише, якщо об’єкт користувача або групи було створено з\n" -"фіксованим ідентифікатором, оскільки у разі автоматичного призначення один\n" -"ідентифікатор не може бути призначено двічі. Оскільки спільний простір назв\n" -"є лише у користувачів і груп, достатньо одного резервного діапазону для\n" -"того, щоб повністю позбутися конфліктів.\n" -"\n" -"Для визначення ідентифікатора POSIX за вказаним RID з локального домену " -"слід\n" -"спочатку перевірити, чи потрапляє RID у основний або вторинний діапазон " -"RID,\n" -"також, щоб отримати ідентифікатор POSIX, слід відняти від ідентифікатор rid-" -"base\n" -"або secondary-rid-base, відповідно, і додати base-id.\n" -"\n" -"Типово, створення діапазонів ідентифікаторів є зовні непомітним і потреби у\n" -"цьому інтерфейсі командного рядка не виникає. Діапазон ідентифікаторів\n" -"для локального домену буде створено під час встановлення або оновлення\n" -"попередньої версії. Діапазон ідентифікаторів для довіреного домену буде\n" -"створено разом з записом довіри командою «ipa trust-add ...».\n" -"Нижче наведено можливі випадки використання цього командного інтерфейсу.\n" -"\n" -"ВИПАДКИ ВИКОРИСТАННЯ:\n" -"\n" -" Додавання діапазону ідентифікаторів з перехідного довіреного домену\n" -"\n" -" Якщо довірений домен (A) довіряється іншому домену (B) і цей запис\n" -" довіри є перехідним, «ipa trust-add домен-A» створить лише діапазон\n" -" для домену A. Діапазон ідентифікаторів домену B має бути додано вручну.\n" -"\n" -" Додавання додаткового діапазону ідентифікаторів для локального домену\n" -"\n" -" Якщо діапазон ідентифікаторів локального домену вичерпано, тобто " -"додатком\n" -" DNA не може бути призначено нові ідентифікатори користувачам або групам\n" -" POSIX, має бути створено новий діапазон для додавання нових " -"користувачів\n" -" та груп. (У поточній версії між цим командним інтерфейсом і додатком " -"DNA\n" -" немає безпосереднього зв’язку, але у майбутній версії може бути " -"передбачено\n" -" можливість внесення змін і до налаштувань додатка DNS.)\n" -"\n" -"Загалом, потреби у зміні або вилученні діапазонів ідентифікаторів немає.\n" -"Якщо немає іншого виходу, окрім внесення змін або вилучення діапазону\n" -"ідентифікаторів, робити це слід дуже обережно. Оскільки UID зберігаються у\n" -"файловій системі і використовуються для керування доступом, можлива " -"ситуація,\n" -"коли одні користувачі отримуватимуть доступ до файлів інших користувачів\n" -"у разі вилучення діапазону ідентифікаторів і повторного його використання\n" -"у іншому домені.\n" -"\n" -"(*) RID типово є останнім цілим числом SID користувача або групи, перед " -"якими\n" -"має бути вказано SID домену. Наприклад, якщо SID домену " -"S-1-5-21-123-456-789, а\n" -"користувач з цього домену має SID S-1-5-21-123-456-789-1010, RID " -"користувача\n" -"буде 1010. RID є унікальними в межах домену, є 32-бітовими значенням і\n" -"використовуються для користувачів і груп.\n" -"\n" -"=======\n" -"ПОПЕРЕДЖЕННЯ:\n" -"\n" -"Додаток DNA у 389-ds розміщуватиме ідентифікатори на основі діапазонів\n" -"налаштованих для локального домену. У поточній версії додаток DNA *не " -"можна*\n" -"переналаштовувати самостійно на основі локальних діапазонів, встановлених\n" -"за допомогою цього сімейства команд.\n" -"\n" -"Зміни налаштувань вручну має бути виконано у налаштуваннях додатка DNA\n" -"для локального діапазону. Зокрема слід змінити атрибут dnaNextRange " -"«cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config» так, щоб\n" -"він відповідав новому діапазону.\n" -"=======\n" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" -"\n" -"Додати новий діапазон ідентифікаторів.\n" -"\n" -" Для додавання нового діапазону ідентифікаторів вам слід завжди " -"вказувати\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Крім того, може бути надано\n" -"\n" -" --rid-base\n" -" --econdary-rid-base\n" -"\n" -" для додавання нового діапазону ідентифікаторів для локального домену і\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" для додавання нового діапазону для довіреного домену AD.\n" -"\n" -"=======\n" -"ПОПЕРЕДЖЕННЯ:\n" -"\n" -" Додаток DNA у 389-ds визначатиме ідентифікатори у діапазонах, " -"налаштованих\n" -" для локального домену. У поточній версії додаток DNA *не може* змінити\n" -" власні налаштування на основі локальних діапазонів, встановлених за\n" -" допомогою цього сімейства команд.\n" -"\n" -" Для внесення змін щодо локального діапазону слід змінити налаштування\n" -" додатка DNA вручну. Зокрема, слід внести зміни до атрибута 'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " -"відповідно\n" -" до параметрів нового діапазону.\n" -"=======\n" -" " - -msgid "" -"\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " -msgstr "" -"\n" -"Змінити діапазон ідентифікаторів.\n" -"\n" -"=======\n" -"ПОПЕРЕДЖЕННЯ:\n" -"\n" -"Додаток DNA у 389-ds розподілятиме ідентифікатори на основі діапазонів,\n" -"налаштованих для локального домену. У поточній версії додаток DNA *не може*\n" -"переналаштуватися на основі локальних діапазонів, встановлених цим\n" -"сімейством команд.\n" -"\n" -"Для використання нового локального діапазону до налаштувань додатка DNA\n" -"слід внести зміни вручну. Зокрема, слід змінити атрибут dnaNextRange " -"'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' так, щоб\n" -"він відповідав новому діапазону.\n" -"=======\n" -" " - -msgid "Fallback to AD DC LDAP" -msgstr "Повернення до резервного DC LDAP AD" - -msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "" -"Дозволити повернення до резервного варіанта LDAP DC AD під час визначення " -"адрес довірених об’єктів AD. Лише для двобічних відносин довіри." - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." -msgstr "" -"Застосовує перегляд ідентифікаторів до вказаних вузлів або поточних " -"учасників вказаних груп вузлів. Якщо до вузла застосовується якийсь інший " -"перегляд ідентифікаторів, його буде перевизначено." - -msgid "Add to default group" -msgstr "Додати до типової групи" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "" -"Додавати перенесені записи користувачів без групи до типової групи (типове " -"значення: true)" - -msgid "Search scope" -msgstr "Область пошуку" - -msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "" -"Область пошуку LDAP для користувачів і груп: base, onelevel або subtree. " -"Типове значення: onelevel" - -msgid "Remove users that can manage this token." -msgstr "Вилучити записи користувачів, які можуть керувати цим жетоном." - -msgid "Target DN subtree" -msgstr "Піддерево DN призначення" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" -"Необов’язкове піддерево DN, куди має бути пересунуто запис (має належати до " -"піддерева, але може ще не існувати)" - -msgid "Origin DN subtree" -msgstr "Піддерево DN походження" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" -msgstr "" -"Необов’язкове піддерево DN, звідки має бути пересунуто запис (має належати " -"до піддерева, але може ще не існувати)" - -msgid "" -"\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" -"\n" -"Сервери IPA\n" -"\n" -"Отримати дані щодо встановлених серверів IPA.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Знайти усі сервери:\n" -" ipa server-find\n" -"\n" -" Показати вказаний сервер:\n" -" ipa server-show ipa.example.com\n" - -msgid "Server name" -msgstr "Назва сервера" - -msgid "IPA server hostname" -msgstr "Назва вузла сервера IPA" - -msgid "Managed suffix" -msgstr "Керований суфікс" - -msgid "Min domain level" -msgstr "Мін. рівень домену" - -msgid "Minimum domain level" -msgstr "Мінімальний рівень домену" - -msgid "Max domain level" -msgstr "Макс. рівень домену" - -msgid "Maximum domain level" -msgstr "Максимальний рівень домену" - -msgid "Delete IPA server." -msgstr "Вилучити сервер IPA." - -msgid "Search for IPA servers." -msgstr "Шукати сервери IPA." - -msgid "Show IPA server." -msgstr "Показати сервер IPA." - -msgid "Add new certificates to a service" -msgstr "Додати нові сертифікати до запису служби" - -msgid "Remove certificates from a service" -msgstr "Вилучити сертифікати із запису служби" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" -"\n" -"Обмежене службами делегування\n" -"\n" -"Керування правилами, за допомогою яких можна обмежити делегування\n" -"реєстраційних даних так, що служба зможе виконувати персоніфікацію\n" -"користувача під час обміну даними з іншою службою без потреби для\n" -"користувача насправді переспрямовувати квиток для отримання квитка\n" -"(TGT). Так створюється значно кращий метод делегування реєстраційних\n" -"даних, оскільки він запобігає розкриттю короткотермінових ключів\n" -"доступу користувачів.\n" -"\n" -"Відповідно до угоди з іменування, до назви правила додається слово\n" -"\"target\" або \"targets\". Така схема назв не є обов’язковою, але вона\n" -"допомагає концептуально пов’язати правила та їхні призначення.\n" -"\n" -"Правило складається з двох компонентів:\n" -" - Списку цілей (призначень), яких стосується правило\n" -" - Списку memberPrincipals, яким дозволено делегування для\n" -" цих цілей\n" -"\n" -"Запис цілі складається зі списку реєстраційних записів, які можна\n" -"делегувати.\n" -"\n" -"Якщо простіше, правило стверджує, що певний реєстраційний запис\n" -"можна делегувати як вказаний список реєстраційних записів,\n" -"відповідно до визначеного списку цілей.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати нове правило обмеженого делегування:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Додати нову ціль обмеженого делегування:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Додати реєстраційний запис до правила:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Додати нашу ціль до правила:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Додати реєстраційний запис до цілі:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Показати дані щодо іменованого правила і цілі:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Вилучити обмежене делегування:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"У цьому прикладі служба ftp може отримувати квиток для отримання квитка для\n" -"служби ldap від імені пов’язаного користувача.\n" -"\n" -"Ми наполегливо не рекомендуємо змінювати делегування, які постачаються з\n" -"IPA, ipa-http-delegation та його цілі ipa-cifs-delegation-targets і\n" -"ipa-ldap-delegation-targets. Некоректні зміни можуть усунути можливість\n" -"делегування, що спричинить непрацездатність усієї системи.\n" - -msgid "Allowed Target" -msgstr "Дозволена ціль" - -msgid "Create a new service delegation rule." -msgstr "Створити правило делегування служб." - -msgid "Add member to a named service delegation rule." -msgstr "Додати запис учасника до іменованого правила делегування служб." - -msgid "member principal" -msgstr "учасник «реєстраційний запис»" - -msgid "principal to add" -msgstr "реєстраційний запис для додавання" - -msgid "Add target to a named service delegation rule." -msgstr "Додати ціль до іменованого правила делегування служб." - -msgid "member service delegation target" -msgstr "учасник призначення делегування служб" - -msgid "service delegation targets to add" -msgstr "призначення делегування служб для додавання" - -msgid "Delete service delegation." -msgstr "Вилучити делегування служб." - -msgid "Search for service delegations rule." -msgstr "Шукати правило делегування служб." - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "" -"Результати мають містити лише атрибут основного ключа («delegation-name»)" - -msgid "Remove member from a named service delegation rule." -msgstr "Вилучити запис учасника із іменованого правила делегування служб." - -msgid "principal to remove" -msgstr "реєстраційний запис для вилучення" - -msgid "Remove target from a named service delegation rule." -msgstr "Вилучити ціль із іменованого правила делегування служб." - -msgid "service delegation targets to remove" -msgstr "призначення делегування служб для вилучення" - -msgid "Display information about a named service delegation rule." -msgstr "Показати дані щодо іменованого правила делегування служб." - -msgid "Create a new service delegation target." -msgstr "Створити ціль делегування служб." - -msgid "Add member to a named service delegation target." -msgstr "Додати запис учасника до іменованого призначення делегування служб." - -msgid "Delete service delegation target." -msgstr "Вилучити ціль делегування служб." - -msgid "Search for service delegation target." -msgstr "Шукати ціль делегування служб." - -msgid "Remove member from a named service delegation target." -msgstr "Вилучити запис учасника із іменованого призначення делегування служб." - -msgid "Display information about a named service delegation target." -msgstr "Показати дані щодо іменованого призначення делегування служб." - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -msgstr "" -"\n" -"Користувачі етапу\n" -"\n" -"Керування записами користувачів етапу.\n" -"\n" -"Записи користувачів етапу перебувають безпосередньо у контейнері:\n" -"\"cn=stage users, cn=accounts, cn=provisioning, SUFFIX\".\n" -"Користувач не може пройти розпізнавання за допомогою цих записів\n" -"(навіть якщо записи містять реєстраційні дані) і є кандидатами на\n" -"перетворення на активні записи.\n" -"\n" -"Записи активних користувачів є користувачами Posix, що перебувають\n" -"безпосередньо у контейнері: \"cn=accounts, SUFFIX\".\n" -"Користувач може пройти розпізнавання за допомогою активних записів,\n" -"якщо для них передбачено реєстраційні дані\n" -"\n" -"Вилучені записи користувачів є записами користувачів Posix, що\n" -"перебувають безпосередньо у контейнері: \"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Користувачі не можуть проходити розпізнавання за допомогою цих\n" -"записів (навіть якщо записи містять реєстраційні дані)\n" -"\n" -"Контейнер користувачів етапу містить записи\n" -" - створені командами 'stageuser-add', які є користувачами Posix\n" -" - створені зовнішньою системою забезпечення\n" -"\n" -"Коректний запис користувача етапу МАЄ відповідати таким вимогам:\n" -" - RDN запису має значення 'uid'\n" -" - ipaUniqueID має значення 'autogenerate'\n" -"\n" -"У IPA передбачено підтримку широкого діапазону форматів імен користувачів,\n" -"але слід зважати на різноманітні обмеження, які можуть стосуватися " -"середовища,\n" -"у якому ви працюєте. Наприклад, імена користувачів, що починаються з цифри,\n" -"або імена користувачів, довжина яких перевищує певну довжину, що може\n" -"призвести до проблем у деяких системах UNIX.\n" -"Для зміни формату, який дозволено інструментами IPA, скористайтеся командою\n" -"'ipa config-mod'.\n" -"\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати нового користувача етапу:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Додати користувача етапу з контейнера Delete\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" - -msgid "Activate a stage user." -msgstr "Активувати користувача етапу." - -msgid "Add a new stage user." -msgstr "Додати нового користувача етапу." - -msgid "Create Stage user in from a delete user" -msgstr "" -"Створити запис користувача етапу на основі вилученого запису користувача" - -msgid "Delete a stage user." -msgstr "Вилучити запис користувача етапу." - -msgid "Search for stage users." -msgstr "Шукати записи користувачів етапу." - -msgid "Search for stage users with these member of groups." -msgstr "Шукати користувачів етапу із вказаними групами участі." - -msgid "Search for stage users without these member of groups." -msgstr "Шукати користувачів етапу без вказаних груп участі." - -msgid "Search for stage users with these member of netgroups." -msgstr "Шукати користувачів етапу із вказаними мережевими групами участі." - -msgid "Search for stage users without these member of netgroups." -msgstr "Шукати користувачів етапу без вказаних мережевих груп участі." - -msgid "Search for stage users with these member of roles." -msgstr "Шукати користувачів етапу із вказаними ролями участі." - -msgid "Search for stage users without these member of roles." -msgstr "Шукати користувачів етапу без вказаних ролей участі." - -msgid "Search for stage users with these member of HBAC rules." -msgstr "Шукати користувачів етапу із цими правилами HBAC участі." - -msgid "Search for stage users without these member of HBAC rules." -msgstr "Шукати користувачів етапу без цих правил HBAC участі." - -msgid "Search for stage users with these member of sudo rules." -msgstr "Шукати користувачів етапу із цими правилами sudo участі." - -msgid "Search for stage users without these member of sudo rules." -msgstr "Шукати користувачів етапу без цих правил sudo участі." - -msgid "Modify a stage user." -msgstr "Змінити запис користувача етапу." - -msgid "Rename the stage user object" -msgstr "Перейменувати об’єкт користувача етапу" - -msgid "Display information about a stage user." -msgstr "Показати дані щодо користувача етапу." - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" -msgstr "" -"\n" -"Топологія\n" -"\n" -"Керування топологією реплікації.\n" -"\n" -"Потребує мінімального рівня домену 1.\n" - -msgid "Segment name" -msgstr "Назва сегмента" - -msgid "Arbitrary string identifying the segment" -msgstr "Довільний рядок для ідентифікації сегмента" - -msgid "Left node" -msgstr "Лівий вузол" - -msgid "Left replication node - an IPA server" -msgstr "Лівий вузол реплікації — сервер IPA" - -msgid "Right node" -msgstr "Правий вузол" - -msgid "Right replication node - an IPA server" -msgstr "Правий вузол реплікації — сервер IPA" - -msgid "Connectivity" -msgstr "Можливість з’єднання" - -msgid "Direction of replication between left and right replication node" -msgstr "Напрямок реплікації між лівим і правим вузлами реплікації" - -msgid "Attributes to strip" -msgstr "Атрибути, які слід прибрати" - -msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "" -"Розділений пробілами список атрибутів, які слід вилучати під час оновлено " -"реплікації." - -msgid "Attributes to replicate" -msgstr "Атрибути для реплікації" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" -msgstr "" -"Атрибути, для яких не відбуватиметься реплікація до сервера споживання під " -"час часткового оновлення. Наприклад, `(objectclass=*) $ EXCLUDE " -"accountlockout memberof" - -msgid "Attributes for total update" -msgstr "Атрибути для загального оновлення" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" -"Атрибути, для яких не відбуватиметься реплікація до сервера споживання під " -"час загального оновлення. Наприклад, (objectclass=*) $ EXCLUDE accountlockout" - -msgid "Session timeout" -msgstr "Час очікування сеансу" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "" -"Кількість секунд, протягом яких відбуватиметься очікування зовнішнім LDAP на " -"відповідь під час дій від віддаленої репліки, перш ніж дію буде припинено " -"через перевищення часу очікування і буде видано повідомлення щодо помилки" - -msgid "Replication agreement enabled" -msgstr "Увімкнено угоду щодо реплікації" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" -"Визначає, чи є активною угода щодо реплікації, тобто, чи відбувається " -"реплікація за цією угодою" - -msgid "Suffix name" -msgstr "Назва суфікса" - -msgid "LDAP suffix to be managed" -msgstr "Суфікс LDAP, яким слід керувати" - -msgid "Add a new segment." -msgstr "Додати новий сегмент." - -msgid "Delete a segment." -msgstr "Вилучити сегмент." - -msgid "Search for topology segments." -msgstr "Шукати сегменти топології." - -msgid "Modify a segment." -msgstr "Змінити сегмент." - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "" -"Надіслати запит щодо повної повторної ініціалізації вузла, щоб отримує дані " -"з іншого вузла." - -msgid "Initialize left node" -msgstr "Ініціалізувати лівий вузол" - -msgid "Initialize right node" -msgstr "Ініціалізувати правий вузол" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "Зупинити вже почате оновлення вибраних вузлів" - -msgid "Display a segment." -msgstr "Показати сегмент." - -msgid "Add a new topology suffix to be managed." -msgstr "Додати новий суфікс топології для керування." - -msgid "Delete a topology suffix." -msgstr "Вилучити суфікс топології." - -msgid "Search for topology suffices." -msgstr "Шукати суфікси топології." - -msgid "Modify a topology suffix." -msgstr "Змінити суфікс топології." - -msgid "Show managed suffix." -msgstr "Показати керований суфікс." - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -" " -msgstr "" -"\n" -"Перевірити топологію реплікації для суфікса.\n" -"\n" -"Перевірки, які виконуються:\n" -" 1. перевірка того, чи є топологія роз’єднаною. Іншими словами, того, чи\n" -" пов’язано усі сервери шляхами реплікації.\n" -" 2. перевірка того, чи не перевищено кількість рекомендованих угод з\n" -" реплікації між серверами.\n" -" " - -msgid "Two-way trust" -msgstr "Двобічна довіра" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "Встановлено двобічну довіру. Типово, довіра є лише однобічною вхідною." - -msgid "Preserved user" -msgstr "Зарезервований користувач" - -msgid "Add one or more certificates to the user entry" -msgstr "Додати один або декілька сертифікатів до запису користувача" - -msgid "Remove one or more certificates to the user entry" -msgstr "Вилучити один або декілька сертифікатів запису користувача" - -msgid "Move deleted user into staged area" -msgstr "Пересунути вилучений запис користувача до області етапу" - -msgid "Undelete a delete user account." -msgstr "Відновити вилучений обліковий запис користувача." - -msgid "" -"\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -"Сховища\n" -"\n" -"Керування сховищами.\n" -"\n" -"Сховище — безпечне місце для зберігання ключів і паролів.\n" -"\n" -"За правами власності сховища поділяються на три категорії:\n" -"* приватні сховища користувачів\n" -"* сховища служб\n" -"* сховища спільного використання\n" -"\n" -"Сховища користувачів — це сховища, власником яких є конкретний\n" -"користувач. Приватними є сховища, власником яких є поточний\n" -"користувач. Власником сховища служби є певна служба. Сховища\n" -"спільного використання належать адміністратору, але можуть\n" -"використовуватися іншими користувачами або службами.\n" -"\n" -"За механізмами захисту сховища поділяються на три\n" -"типи:\n" -"* стандартні сховища\n" -"* симетричні сховища\n" -"* асиметричні сховища\n" -"\n" -"У стандартному сховищі для передавання і зберігання реєстраційних\n" -"даних використовуються безпечні механізми. Реєстраційні дані\n" -"може бути отримано лише користувачами, які мають доступ\n" -"до сховища.\n" -"\n" -"Симетричне сховище є подібним до стандартного сховища, але\n" -"у ньому реєстраційні дані попередньо шифруються до\n" -"передавання за допомогою пароля.\n" -"Реєстраційні дані можна отримати лише за допомогою цього пароля.\n" -"\n" -"Асиметричне сховище є подібним до стандартного сховища, але\n" -"у ньому реєстраційні дані попередньо шифруються до\n" -"передавання за допомогою відкритого ключа.\n" -"Реєстраційні дані можна отримати лише за допомогою закритого ключа.\n" -"\n" -" Вивести список сховищ:\n" -" ipa vault-find\n" -" [--user <користувач>|--service <служба>|--shared]\n" -"\n" -" Додати стандартне сховище:\n" -" ipa vault-add <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --type standard\n" -"\n" -" Додати симетричне сховище:\n" -" ipa vault-add <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --type symmetric --password-file пароль.txt\n" -"\n" -" Додати асиметричне сховище:\n" -" ipa vault-add <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --type asymmetric --public-key-file відкритий_ключ.pem\n" -"\n" -" Показати сховище:\n" -" ipa vault-show <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -"\n" -" Змінити опис сховища:\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --desc <опис>\n" -"\n" -" Змінити тип сховища:\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --type <тип>\n" -" [старий пароль/закритий ключ]\n" -" [новий пароль/відкритий ключ]\n" -"\n" -" Змінити пароль до симетричного сховища:\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --change-password\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --old-password <старий пароль>\n" -" --new-password <новий пароль>\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --old-password-file <файл старого пароля>\n" -" --new-password-file <файл нового пароля>\n" -"\n" -" Змінити ключ асиметричного сховища:\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --private-key-file <файл старого закритого ключа>\n" -" --public-key-file <файл нового відкритого ключа>\n" -"\n" -" Вилучити сховище:\n" -" ipa vault-del <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -"\n" -" Вивести налаштування сховищ:\n" -" ipa vaultconfig-show\n" -"\n" -" Архівувати дані до стандартного сховища:\n" -" ipa vault-archive \n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --in <файл вхідних даних>\n" -"\n" -" Архівувати дані до симетричного сховища:\n" -" ipa vault-archive \n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --in <файл вхідних даних>\n" -" --password-file пароль.txt\n" -"\n" -" Архівувати дані до асиметричного сховища:\n" -" ipa vault-archive \n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --in <файл вхідних даних>\n" -"\n" -" Отримати дані зі стандартного сховища:\n" -" ipa vault-retrieve <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --out <файл результатів>\n" -"\n" -" Отримати дані з симетричного сховища:\n" -" ipa vault-retrieve <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --out <файл результатів>\n" -" --password-file password.txt\n" -"\n" -" Отримати дані з асиметричного сховища:\n" -" ipa vault-retrieve <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --out <файл результатів> --private-key-file private.pem\n" -"\n" -" Додати записи власників сховища:\n" -" ipa vault-add-owner <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" -"\n" -" Вилучити записи учасників сховища:\n" -" ipa vault-remove-owner <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" -"\n" -" Додати записи учасників сховища:\n" -" ipa vault-add-member <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" -"\n" -" Вилучити записи учасників сховища:\n" -" ipa vault-remove-member <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" - -msgid "Vault name" -msgstr "Назва сховища" - -msgid "Vault description" -msgstr "Опис сховища" - -msgid "Vault type" -msgstr "Тип сховища" - -msgid "Salt" -msgstr "Сіль" - -msgid "Vault salt" -msgstr "«Сіль» сховища" - -msgid "Public key" -msgstr "Відкритий ключ" - -msgid "Vault public key" -msgstr "Відкритий ключ сховища" - -msgid "Owner users" -msgstr "Користувачі власника" - -msgid "Owner groups" -msgstr "Групи власника" - -msgid "Owner services" -msgstr "Служби власника" - -msgid "Failed owners" -msgstr "Записи власників із помилками" - -msgid "Vault service" -msgstr "Служба сховища" - -msgid "Shared vault" -msgstr "Сховище спільного використання" - -msgid "Vault user" -msgstr "Користувач сховища" - -msgid "Transport Certificate" -msgstr "Сертифікат передавання" - -msgid "Service name of the service vault" -msgstr "Назва служби сховища служби" - -msgid "Username of the user vault" -msgstr "Ім’я користувача сховища користувача" - -msgid "Add members to a vault." -msgstr "Додати записи учасників сховища." - -msgid "Add owners to a vault." -msgstr "Додати записи власників до сховища." - -msgid "owner user" -msgstr "користувач-власник" - -msgid "owner group" -msgstr "група-власник" - -msgid "owner service" -msgstr "служба-власник" - -msgid "Owners that could not be added" -msgstr "Власники, записи яких не вдалося додати" - -msgid "Number of owners added" -msgstr "Кількість доданих записів власників" - -msgid "Session key wrapped with transport certificate" -msgstr "Ключ сеансу, пов’язаний із сертифікатом передавання" - -msgid "Vault data encrypted with session key" -msgstr "Дані сховища зашифровано за допомогою ключа сеансу" - -msgid "Nonce" -msgstr "Цей випадок" - -msgid "Delete a vault." -msgstr "Вилучити сховище." - -msgid "Search for vaults." -msgstr "Шукати сховища." - -msgid "List all service vaults" -msgstr "Список усіх сховищ служб" - -msgid "List all user vaults" -msgstr "Список усіх сховищ користувачів" - -msgid "Remove members from a vault." -msgstr "Вилучити записи учасників сховища." - -msgid "Remove owners from a vault." -msgstr "Вилучити записи власників сховища." - -msgid "Owners that could not be removed" -msgstr "Власники, записи яких не вдалося вилучити" - -msgid "Number of owners removed" -msgstr "Кількість вилучених записів власників" - -msgid "Display information about a vault." -msgstr "Показати дані щодо сховища." - -msgid "Show vault configuration." -msgstr "Показати налаштування сховища." - -msgid "Output file to store the transport certificate" -msgstr "Файл для зберігання сертифіката передавання даних" - -msgid "Add owners to a vault container." -msgstr "Додати записи власників до контейнера сховища." - -msgid "Delete a vault container." -msgstr "Вилучити контейнер сховищ." - -msgid "Remove owners from a vault container." -msgstr "Вилучити записи власників із контейнера сховища." - -msgid "Display information about a vault container." -msgstr "Показати дані щодо контейнера сховищ." - -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "Визначити назву вузла у DNS. (Застаріле)" - -msgid "Hostname (FQDN)" -msgstr "Назва вузла (FQDN)" - -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "" -"Примусове створення зони DNS, навіть якщо вона перекриватиметься із наявною." - -msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "" -"Примусове створення зони DNS, навіть якщо адресу сервера назв не вдається " -"визначити. (застаріле)" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" -"\n" -"Групи користувачів\n" -"\n" -"Керування групами користувачів. Типово нові групи є групами POSIX. Ви " -"можете\n" -"додати параметр --nonposix до команди group-add з метою позначення нової\n" -"групи як групи не-POSIX. Ви можете скористатися аргументом --posix команди " -"group-mod\n" -"для перетворення групи не-POSIX на групу POSIX. Групи POSIX не можна\n" -"перетворювати на групи не-POSIX.\n" -"\n" -"Кожна група повинна мати опис.\n" -"\n" -"Групи POSIX повинні мати номер ідентифікатора групи (GID). Передбачено " -"підтримку\n" -"зміни GID, але ця зміна може вплинути на права доступу до ваших файлів. Для\n" -"створення групи слід вказати GID. IPA створить одну групу автоматично, якщо\n" -"таку не вказано.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додавання нової групи:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Додавання нової групи не-POSIX:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Перетворити групу не-POSIX на групу posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Додати нову групу POSIX з вказаним ідентифікатором групи:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Додати нову групу POSIX і надати IPA змогу призначити ідентифікатор:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Вилучення групи:\n" -" ipa group-del unixadmins\n" -"\n" -" Додати групу \"remoteadmins\" до групи \"localadmins\":\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Додати список користувачів до групи \"localadmins\":\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Вилучення користувача з групи \"localadmins\":\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Показати інформацію щодо іменованої групи.\n" -" ipa group-show localadmins\n" -"\n" -"Участь із зовнішніх груп створено для того, щоб уможливити прив’язку\n" -"користувачів з довірених доменів до локальних груп POSIX з метою\n" -"використання ресурсів IPA. Зовнішніх користувачів слід додавати до груп\n" -"які спеціально створено як зовнішні або групи не-POSIX. Таку групу\n" -"слід пізніше включити до одної з груп POSIX.\n" -"\n" -"У поточній версії учасник зовнішньої групи є ідентифікатором безпеки\n" -"(Security Identifier або SID) визначеним довіреним доменом. Додавання\n" -"учасників зовнішньої групи можна виконати у форматі SID, DOM\\ім’я або\n" -"ім’я@домен. IPA намагатиметься визначити за переданим іменем SID за\n" -"допомогою використання Загального каталогу довіреного домену.\n" -"\n" -"Приклад:\n" -"\n" -"1. Створити групу для прив’язки адміністраторів довіреного домену до\n" -"відповідної локальної групи POSIX:\n" -"\n" -" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc='<домен.ad> admins' ad_admins\n" -"\n" -"2. Додати ідентифікатор Domain Admins домену <домен.ad> до\n" -"групи ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Дозволити прив’язку групи ad_admins_external до групи POSIX ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Показати список зовнішніх учасників групи ad_admins_external, щоб " -"визначити\n" -"їхні SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" +"second-rule,myrule --disabled\n" +" ---------------------\n" +" Надано доступ: Ні\n" +" ---------------------\n" +" невідповідне: my-second-rule\n" +" невідповідне: my-third-rule\n" +" невідповідне: myrule\n" +"\n" +" 7. Перевірка всіх (увімкнених і вимкнених) правил HBAC у базі даних " +"IPA:\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " +"--disabled\n" +" --------------------\n" +" Надано доступ: Так\n" +" --------------------\n" +" невідповідне: my-second-rule\n" +" невідповідне: my-third-rule\n" +" невідповідне: myrule\n" +" невідповідне: new-rule\n" +" відповідне: allow_all\n" msgid "" "\n" @@ -13694,1978 +14674,11 @@ msgstr "" " Відповідні правила: allow_all\n" " Невідповідні правила: can_login\n" -msgid "Managed suffixes" -msgstr "Керовані суфікси" - -msgid "Check connection to remote IPA server." -msgstr "Перевірити з’єднання із віддаленим сервером IPA." - -msgid "Remote server name" -msgstr "Назва віддаленого сервера" - -msgid "Remote IPA server hostname" -msgstr "Назва вузла віддаленого сервера IPA" - -msgid "suffix" -msgstr "суфікс" - -msgid "Search for servers with these managed suffixes." -msgstr "Шукати сервери із цими керованими суфіксами." - -msgid "Search for servers without these managed suffixes." -msgstr "Шукати сервери без цих керованих суфіксів." - -msgid "Add a manager to the stage user entry" -msgstr "Додати керування до запису користувача етапу" - -msgid "Remove a manager to the stage user entry" -msgstr "Вилучити керування із запису користувача етапу" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" -"\n" -"Топологія\n" -"\n" -"Керування топологією реплікації на домені рівня 1.\n" -"\n" -"Дані сервера IPA зберігаються на сервері LDAP у двох суфіксах:\n" -"* суфіксі домену, наприклад «dc=example,dc=com», тут містяться усі пов’язані " -"із доменом дані\n" -"* суфіксі ca, «o=ipaca», наявні лише на серверах із встановленим CA. Тут\n" -" містяться дані для компонента сервера сертифікатів.\n" -"\n" -"Дані, що зберігаються на серверах IPA, відтворюються на інших серверах IPA. " -"Спосіб\n" -"відтворення (реплікації) визначається угодами. Угоди реплікації потрібно\n" -"встановлювати для обох суфіксів окремо. На рівні домену 0 угодами керують\n" -"програми ipa-replica-manage та ipa-csreplica-manage. На рівні доменів 1\n" -"керування виконується централізовано за допомогою команд «ipa topology*».\n" -"\n" -"Угоди представляються сегментами топології. Типово, сегмент топології\n" -"представляється 2 угодами реплікації — по одній для кожного напрямку, " -"наприклад\n" -"від A до B і від B до A. Створення односпрямованих сегментів заборонене.\n" -"\n" -"Щоб перевірити, що жоден сервер не від’єднано у топології вказаного " -"суфікса,\n" -"скористайтеся такою командою:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Приклади:\n" -" Знайти усі сервери IPA:\n" -" ipa server-find\n" -"\n" -" Знайти усі суфікси:\n" -" ipa topologysuffix-find\n" -"\n" -" Додати сегмент топології до суфікса «domain»:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Додати сегмент топології до суфікса «ca»:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Вивести список усіх сегментів топології у суфіксі «domain»:\n" -" ipa topologysegment-find domain\n" -"\n" -" Вивести список усіх сегментів топології у суфіксі «ca»:\n" -" ipa topologysegment-find ca\n" -"\n" -" Вилучити сегмент топології у суфіксі «domain»:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Вилучити сегмент топології у суфіксі «ca»:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Перевірити топологію суфікса «domain»:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Перевірити топологію суфікса «ca»:\n" -" ipa topologysuffix-verify ca\n" - -msgid "Managed LDAP suffix DN" -msgstr "DN керованого суфікса LDAP" - -msgid "Search for topology suffixes." -msgstr "Шукати суфікси топології." - -msgid "Add a manager to the user entry" -msgstr "Додати керування до запису користувача" - -msgid "Remove a manager to the user entry" -msgstr "Вилучити керування із запису користувача" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" -"\n" -"Інструкції керування доступом до сервера каталогів (ACI)\n" -"\n" -"ACI використовуються для надання або заборони доступу до даних. Поточну\n" -"версію цього модуля розроблено з метою надання, а не заборони доступу.\n" -"\n" -"Команди aci розроблено для надання прав доступу до оновлення вже\n" -"створених записів та додавання або вилучення записів. Метою ACI, які\n" -"постачаються з IPA є створення набору низькорівневих прав доступу до " -"особливих\n" -"груп, які називаються групами завдань. Ці низькорівневі права доступу\n" -"можна поєднувати у ролі, які надаватимуть ширший доступ. Ролі є іншим типом\n" -"груп, який називається групами ролей.\n" -"\n" -"Наприклад, якщо у вас є групи завдань, які надають доступ до додавання або " -"зміни записів\n" -"користувачів, ви можете створити роль, адміністратора користувачів " -"(useradmin).\n" -"Далі, можна призначати користувачів до ролі useradmin, щоб надати їм доступ " -"до операцій,\n" -"визначених групами завдань.\n" -"\n" -"Ви можете створити ACI, які надаватимуть дозволи так, що користувачі групи A " -"зможуть\n" -"записувати атрибути для групи B.\n" -"\n" -"Параметр типу визначає карту, яка застосовується до всіх записів у списках " -"користувачів, груп та\n" -"розташування вузла. Основним призначенням є надання прав доступу на " -"додавання\n" -"(створення нових записів).\n" -"\n" -"ACI складається з трьох частин:\n" -"1. призначення\n" -"2. прав доступу\n" -"3. правил прив’язування\n" -"\n" -"Призначення — набір правил, який визначає, які з об’єктів LDAP є " -"призначенням.\n" -"Призначення може включати список атрибутів, області цієї ієрархії LDAP або\n" -"фільтра LDAP.\n" -"\n" -"До призначень включаються:\n" -"- attrs: список атрибутів, яких стосується призначення;\n" -"- type: тип об’єктів (користувач, група, вузол, служба тощо);\n" -"- memberof: учасники групи;\n" -"- targetgroup: надати доступ до зміни певної групи. Ця частина в основному\n" -" розроблена для надання дозволу користувачам на додавання або вилучення " -"учасників\n" -" певної групи.\n" -"- filter: чинний фільтр LDAP, використаний для звуження області " -"призначення.\n" -"- subtree: використовується для застосування правила для цілого набору " -"об’єктів.\n" -" Наприклад, для надання доступу на додавання користувачів вам слід надати " -"право\n" -" доступу \"add\" до підієрархії\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. Параметр subtree\n" -" є безпечним для об’єктів, які можуть не стосуватися параметром type.\n" -"\n" -"Права доступу визначають набір доступних ACI записів, можуть містити з " -"одного\n" -"або декількох варіантів:\n" -"1. write - запис одного або декількох атрибутів;\n" -"2. read - читання одного або декількох атрибутів;\n" -"3. add - додавання нового запису до ієрархії;\n" -"4. delete - вилучення наявного запису;\n" -"5. all - надання всіх прав доступу.\n" -"\n" -"Зауважте відмінність між атрибутами та записами. Права доступу є " -"незалежними,\n" -"отже можливість додавання користувача не означає можливості зміни " -"параметрів\n" -"його облікового запису.\n" -"\n" -"Правило прив’язування визначає, кому це ACI надає права доступу. Сервер " -"LDAP\n" -"надає можливість визначати будь-який коректний запис LDAP, але вам варто " -"використовувати\n" -"групи завдань, щоб права можна було без проблем спільно використовувати для " -"декількох ролей.\n" -"\n" -"Повніший опис керування доступом можна знайти тут:\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -"ЗАУВАЖЕННЯ: у поточній версії ACI додаються за допомогою додатка прав " -"доступу.\n" -"Ці приклади мають продемонструвати роботу різних параметрів, але у поточній\n" -"версії це завдання виконується за допомогою команди надання прав доступу " -"(останній приклад).\n" -"\n" -" Додавання ACI для надання доступу групі \"secretaries\" до оновлення адреси " -"будь-якого користувача:\n" -" ipa group-add --desc=\"Офісні секретарки\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Секретарки записують адреси\"\n" -"\n" -" Показ нового ACI:\n" -" ipa aci-show --prefix=none \"Секретарки записують адреси\"\n" -"\n" -" Додавання ACI, яке надасть доступ учасникам групи \"addusers\" доступ до " -"додавання нових користувачів:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Додавання користувачів\"\n" -"\n" -" Додавання ACI, яке надасть доступ учасникам групи \"editors\" до керування " -"записами\n" -"учасників групи \"admins\":\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Редактори керують адміністраторами\"\n" -"\n" -" Додавання ACI, яке надасть доступ учасникам групи \"admins\" до зміни " -"поштової адреси та індексу користувачів групи \"editors\":\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"Адміністратори редагують адреси " -"редакторів\"\n" -"\n" -" Додавання ACI, яке надасть доступ групі \"admins\" до зміни поштової адреси " -"та індексу всіх, хто працює начальником:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Зміна адрес тих, хто працює начальником\"\n" -"\n" -" Додавання повністю нового типу записів до IPA, який не визначається жодним " -"з параметрів --type, створення прав доступу:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Додавання помаранчевих записів\" " -"add_orange\n" -"\n" -"\n" -"Команда show показує прості 389-ds ACI.\n" -"\n" -"ВАЖЛИВО: під час зміни атрибутів призначення вже створеного ACI вам\n" -"слід включити всі вже створені атрибути. Під час внесення змін до aci\n" -"targetattr ЗАМІНЮЄ поточні атрибути, а не додає ці атрибути.\n" - -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "" -"права доступу, які слід надати, відокремлених комами (read, write, add, " -"delete, all)" - -msgid "Comma-separated list of attributes" -msgstr "Список атрибутів, відокремлених комами" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" -"\n" -"Правило автоматичної участі.\n" -"\n" -"Внесіть ясність у правила участі вузлів та користувачів налаштовуванням\n" -"формальних виразів шаблонів включення або виключення. Ви можете автоматично\n" -"пов’язувати нові записи з групою або групою вузлів на основі даних щодо " -"атрибутів.\n" -"\n" -"Правило безпосередньо пов’язується з групою за назвою, отже ви не можете\n" -"створити правило без визначення групи або групи вузлів.\n" -"\n" -"Умова є формальним виразом, використовується 389-ds для встановлення\n" -"відповідності нового вхідного запису з правилом автоматичної участі.\n" -"Якщо умові відповідає правило включення, запис додається до відповідної\n" -"групи або групи вузлів.\n" -"\n" -"Можна визначити типову групу або групу вузлів, яку буде використано для\n" -"записів, які не відповідають жодному правилу. У випадку записів " -"користувачів\n" -"ця група буде резервною групою, оскільки усіх користувачі типово є " -"учасниками\n" -"групи, вказаної у налаштуваннях IPA.\n" -"\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати початкову групу або групу вузлів:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Додати початкове правило:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Додати умову до правила:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Додати умову виключення до правила для запобігання автоматичному " -"пов’язуванню:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Додати вузол:\n" -" ipa host-add web1.example.com\n" -"\n" -" Додати запис користувача:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Перевірити правила автоматичної участі:\n" -" ipa hostgroup-show webservers\n" -" Група вузлів: webservers\n" -" Опис: Web Servers\n" -" Вузли-учасники: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Назва групи: devel\n" -" Опис: Developers\n" -" GID: 1004200000\n" -" Користувачі-учасники: tuser\n" -"\n" -" Вилучити умову з правила:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Змінити правило автоматичної участі:\n" -" ipa automember-mod\n" -"\n" -" Встановити типову (резервну) групу призначення:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Вилучити типову (резервну) групу призначення:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Показати типову (резервну) групу призначення:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Знайти усіх правила автоматичної участі:\n" -" ipa automember-find\n" -"\n" -" Показати правило автоматичної участі:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Вилучити правило автоматичної участі:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" -"\n" -"Дії з сертифікатами IPA\n" -"\n" -"Реалізує набір команд для керування сертифікатами серверів SSL.\n" -"\n" -"Запити щодо сертифікатів існують у формі Certificate Signing Request (CSR)\n" -"і форматі PEM.\n" -"\n" -"Якщо використовується модуль самопідписування, призначення у CSR має\n" -"збігатися із призначенням, вказаним на сервері. Служба сертифікації dogtag\n" -"використовує лише значення CN CSR і примусово встановлює\n" -"решту параметрів призначення за налаштуваннями сервера.\n" -"\n" -"Сертифікат зберігається з реєстраційним записом, а реєстраційний запис\n" -"потребує вузла.\n" -"\n" -"Для того, щоб створити запит щодо сертифіката:\n" -"\n" -"* Вузол має існувати\n" -"* Служба має існувати (або слід скористатися параметром --add " -"дляавтоматичного додавання)\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Створити запит щодо нового сертифіката і додати реєстраційний запис: ipa " -"cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Отримати вже створений сертифікат:\n" -" ipa cert-show 1032\n" -"\n" -" Відкликати сертифікат (причини визначено у RFC 5280):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Вилучити сертифікат зі списку відкликання:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Перевірити стан запиту щодо підписування:\n" -" ipa cert-status 10\n" -"\n" -"У поточній версії IPA негайно виконує (або відхиляє) всі запити щодо\n" -"сертифікатів, отже дані щодо стану запиту не мають сенсу. Ці дані\n" -"можуть знадобитися у наступних версіях або у разі, якщо CA видає\n" -"сертифікат не одразу.\n" -"\n" -"Передбачено підтримку таких причин відкликання:\n" -"\n" -" * 0 - не визначено\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Зауважте, що коди причини 7 не використовується. Докладніші дані у RFC " -"5280:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" -"\n" -"Міжгрупове уповноваження\n" -"\n" -"Права доступу може бути точно налаштовано. Правила керування доступом\n" -"або інструкції (ACI), надання дозволу на виконання певних завдань, зокрема\n" -"додавання користувача, внесення змін до групи тощо.\n" -"\n" -"Міжгрупові уповноваження надають учасникам однієї групи можливість\n" -"оновлювати набір атрибутів учасників іншої групи.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати правило уповноваження, яке надасть змогу керівникам (managers)\n" -" редагувати адреси співробітників:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Під час керування списком атрибутів слід включати всі атрибути списку\n" -" разом з вже створеними. Додавання до списку postalCode:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Показ нашого оновленого правила:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Вилучення правила:\n" -" ipa delegation-del \"managers edit employees' street\"\n" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "" -"Права доступу, які слід надати, відокремлених комами (read, write). Типовим " -"варіантом є «write» (запис)." - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" -"\n" -"Система назв доменів (DNS)\n" -"\n" -"Керування записами зон та ресурсів DNS.\n" -"\n" -"ВИКОРИСТАННЯ СТРУКТУРОВАНИХ ПАРАМЕТРІВ ДЛЯ ОКРЕМИХ ТИПІВ\n" -"\n" -"Існує багато структурованих типів RR DNS, для яких дані DNS, що " -"зберігаються\n" -"на сервері LDAP, не є скалярним значенням, наприклад дані щодо IP-адресу " -"або\n" -"назву домену, а структурою даних, яка часто може бути складною. Прикладом\n" -"може бути запис LOC [RFC1876], який складається з багатьох обов’язкових і\n" -"необов’язкових частин (градусів, мінут, секунд широти і довготи, висоти\n" -"та похибки).\n" -"\n" -"Робота з такими записами DNS без помилки і введення некоректного значення\n" -"може бути складною. Модуль DNS надає у ваше розпорядження абстракцію над\n" -"цими необробленими записами і спосіб керування кожним з типів RR за\n" -"допомогою специфічних параметрів. Для кожного з підтримуваних типів\n" -"RR у модулі DNS передбачено стандартний параметр для роботи із\n" -"необробленими записами за допомогою формату --<тип_rr>-rec, наприклад,\n" -"--mx-rec та зі спеціальними параметрами для кожної із частин структури RR\n" -"за допомогою формату --<тип_rr>-<назва_частини>, наприклад --mx-preference\n" -"та --mx-exchanger.\n" -"\n" -"Під час додавання запису можна скористатися специфічними для RR параметрами\n" -"або стандартним параметром для необробленого значення. Втім, поєднувати\n" -"ці варіанти у одній дії із додавання не можна. Під час внесення змін до\n" -"наявного запису можна скористатися для зміни однієї частини запису DNS\n" -"новими специфічними параметрами RR, причому для визначення зміненого\n" -"значення буде використано стандартний варіант необробленого значення.\n" -"У наведеному нижче прикладі продемонстровано зміну пріоритетності запису\n" -"MX з 0 на 1 у записі без внесення змін до обмінника:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додавання нової зони:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Додавання загальносистемних прав доступу, якими можна скористатися для " -"делегування привілеїв для окремих зон:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Зміна зони таким чином, щоб дозволити динамічне оновлення для власних " -"записів вузлів у області EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" Ця команда еквівалентна до такої команди:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Зміна зони таким чином, щоб дозволити перенесення зони лише для локальної " -"мережі:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Додавання нової реверсивної зони, вказаної за допомогою мережевої IP-" -"адреси:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Додати другий сервер назв для example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Додавання поштового сервера для example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Додавання ще одного запису за допомогою специфічних для запису MX " -"параметрів:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Додавання ще одного запису за допомогою інтерактивного режиму (у який " -"програма переходить\n" -" у відповідь на команди dnsrecord-add, dnsrecord-mod або dnsrecord-del без " -"параметрів):\n" -" ipa dnsrecord-add example.com @\n" -" Будь ласка, виберіть тип запису ресурсу DNS, який слід додати\n" -" Найпоширенішими типами для цього типу зон є: NS, MX, LOC\n" -"\n" -" Тип запису ресурсу DNS: MX\n" -" Пріоритетність MX: 30\n" -" Обмінник MX: mail3\n" -" Назва запису: example.com\n" -" Запис MX: 10 mail1, 20 mail2, 30 mail3\n" -" Запис NS: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Вилучення раніше доданого сервера назв з example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Додавання запису LOC для example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Додавання нового запису A для www.example.com, крім того, створення " -"зворотного\n" -" запису у відповідній зворотній зоні. У цьому випадку запис PTR «2» вказує " -"на\n" -" www.example.com буде створено у зоні 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-" -"reverse\n" -"\n" -" Додавання нового запису PTR для www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Додавання нових записів SRV для серверів LDAP. Три чверті запитів мають\n" -" надсилатися до fast.example.com, а одна чверть — на slow.example.com.\n" -" Якщо жодна зі служб не буде доступною, перемкнутися на backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" Для полегшення внесення змін можна скористатися інтерактивним режимом:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" Можливості внесення змін у певний запис не передбачено.\n" -" Поточний вміст запису DNS:\n" -"\n" -" Запис SRV: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Змінити запис SRV «0 3 389 fast.example.com»? Так/Ні (типово «Ні»):\n" -" Змінити запис SRV «0 1 389 slow.example.com»? Так/Ні (типово «Ні»): y\n" -" Пріоритетність SRV [0]: (зберегти типове значення)\n" -" Вага SRV [1]: 2 (змінене значення)\n" -" Порт SRV [389]: (зберегти типове значення)\n" -" Призначення SRV [slow.example.com]: (зберегти типове значення)\n" -" Пропущено 1 запис SRV. Одночасно можна змінювати лише одне значення на тип " -"запису DNS.\n" -" Назва запису: _ldap._tcp\n" -" Запис SRV: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 389 " -"slow.example.com\n" -"\n" -" Після внесення цих змін три п’ятих запитів має надсилатися до\n" -" fast.example.com, а дві п’ятих — до slow.example.com.\n" -"\n" -" Приклад інтерактивного режиму для команди dnsrecord-del:\n" -" ipa dnsrecord-del example.com www\n" -" Не вказано параметр вилучення певного запису.\n" -" Вилучити усі? Так/Ні (типово «Ні»): (не вилучати усі записи)\n" -" Поточний вміст запису DNS:\n" -"\n" -" Запис A: 192.0.2.2, 192.0.2.3\n" -"\n" -" Вилучити запис A «192.0.2.2»? Так/Ні (типово «Ні»):\n" -" Вилучити запис A «192.0.2.3»? Так/Ні (типово «Ні»): y\n" -" Назва запису: www\n" -" Запис A: 192.0.2.2 (Запис A 192.0.2.3 вилучено)\n" -"\n" -" Показати зону example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Знайти зону зі словом «example» у назві домену:\n" -" ipa dnszone-find example\n" -"\n" -" Знайти записи для ресурсів з «www» у назві у зоні example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Знайти записи A зі значенням 10.10.0.1 у зоні example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Показати записи для ресурсу www у зоні example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Делегування зони sub.example до іншого сервера назв:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Якщо налаштовано загальний переспрямовувач, усі запити, для яких цей сервер " -"не є\n" -" надійним (наприклад sub.example.com) не маршрутизуватимуться до загального\n" -" переспрямовувача. Щоб змінити поведінку лише для зони example.com\n" -" і переспрямувати запит безпосередньо до ns.sub.example.com, можна вимкнути\n" -" загальне переспрямовування для окремої зони:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Переспрямувати усі запити для зони external.com до іншого сервера назв\n" -" за правилами «first» (надіслати запити до вибраного переспрямовувача,\n" -" а якщо він не відповів, використати загальні засоби визначення):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Вилучити зону example.com із усіма записами ресурсів:\n" -" ipa dnszone-del example.com\n" -"\n" -" Визначити адресу за назвою вузла, щоб визначити, чи він існує (додасть\n" -" типовий домен IPA, якщо його не включено):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"ЗАГАЛЬНІ НАЛАШТУВАННЯ DNS\n" -"\n" -"Налаштування DNS, що передаються до скрипту командного рядка для " -"встановлення,\n" -"зберігаються у локальному файлі налаштувань на кожному з серверів IPA, де\n" -"налаштовано службу DNS. Ці локальні параметри можна перевизначити за " -"допомогою\n" -"загальних налаштувань, що зберігаються на сервері LDAP:\n" -"\n" -" Показати загальні налаштування DNS:\n" -" ipa dnsconfig-show\n" -"\n" -" Зміна загальних налаштувань DNS і встановлення списку загальних " -"переспрямовувачів:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" - -msgid "" -"A list of global forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Список загальних переспрямовувачів. Для кожного переспрямовувача можна " -"вказати нетиповий порт за допомогою стандартного формату «IP_АДРЕСА port " -"ПОРТ»" - -msgid "An interval between regular polls of the name server for new DNS zones" -msgstr "Інтервал між регулярними опитуваннями сервера назв щодо нових зон DNS" - -msgid "DNS class" -msgstr "Клас DNS" - -msgid "Comma-separated list of raw A records" -msgstr "Список простих записів A, відокремлених комами" - -msgid "Comma-separated list of raw AAAA records" -msgstr "Список простих записів AAAA, відокремлених комами" - -msgid "Comma-separated list of raw A6 records" -msgstr "Список простих записів A6, відокремлених комами" - -msgid "Comma-separated list of raw AFSDB records" -msgstr "Список простих записів AFSDB, відокремлених комами" - -msgid "Comma-separated list of raw APL records" -msgstr "Список простих записів APL, відокремлених комами" - -msgid "Comma-separated list of raw CERT records" -msgstr "Список простих записів CERT, відокремлених комами" - -msgid "Comma-separated list of raw CNAME records" -msgstr "Список простих записів CNAME, відокремлених комами" - -msgid "Comma-separated list of raw DHCID records" -msgstr "Список простих записів DHCID, відокремлених комами" - -msgid "Comma-separated list of raw DLV records" -msgstr "Список простих записів DLV, відокремлених комами" - -msgid "Comma-separated list of raw DNAME records" -msgstr "Список простих записів DNAME, відокремлених комами" - -msgid "Comma-separated list of raw DNSKEY records" -msgstr "Список простих записів DNSKEY, відокремлених комами" - -msgid "Comma-separated list of raw DS records" -msgstr "Список простих записів DS, відокремлених комами" - -msgid "Comma-separated list of raw HIP records" -msgstr "Список простих записів HIP, відокремлених комами" - -msgid "Comma-separated list of raw IPSECKEY records" -msgstr "Список простих записів IPSECKEY, відокремлених комами" - -msgid "Comma-separated list of raw KEY records" -msgstr "Список простих записів KEY, відокремлених комами" - -msgid "KEY Flags" -msgstr "Прапорці KEY" - -msgid "KEY Protocol" -msgstr "Протокол КЛЮЧА" - -msgid "Protocol" -msgstr "Протокол" - -msgid "KEY Algorithm" -msgstr "Алгоритм КЛЮЧА" - -msgid "KEY Public Key" -msgstr "Відкритий ключ KEY" - -msgid "Public Key" -msgstr "Відкритий ключ" - -msgid "Comma-separated list of raw KX records" -msgstr "Список простих записів KX, відокремлених комами" - -msgid "Comma-separated list of raw LOC records" -msgstr "Список простих записів LOC, відокремлених комами" - -msgid "Comma-separated list of raw MX records" -msgstr "Список простих записів MX, відокремлених комами" - -msgid "Comma-separated list of raw NAPTR records" -msgstr "Список простих записів NAPTR, відокремлених комами" - -msgid "Comma-separated list of raw NS records" -msgstr "Список простих записів NS, відокремлених комами" - -msgid "Comma-separated list of raw NSEC records" -msgstr "Список простих записів NSEC, відокремлених комами" - -msgid "NSEC Next Domain Name" -msgstr "Наступна назва домену NSEC" - -msgid "Next Domain Name" -msgstr "Наступна назва домену" - -msgid "NSEC Type Map" -msgstr "Карта типів NSEC" - -msgid "Type Map" -msgstr "Карта типів" - -msgid "Comma-separated list of raw NSEC3 records" -msgstr "Список простих записів NSEC3, відокремлених комами" - -msgid "Comma-separated list of raw NSEC3PARAM records" -msgstr "Список простих записів NSEC3PARAM, відокремлених комами" - -msgid "Comma-separated list of raw PTR records" -msgstr "Список простих записів PTR, відокремлених комами" - -msgid "Comma-separated list of raw RRSIG records" -msgstr "Список простих записів RRSIG, відокремлених комами" - -msgid "RRSIG Type Covered" -msgstr "Об’єднувані типи RRSIG" - -msgid "Type Covered" -msgstr "Об’єднувані типи" - -msgid "RRSIG Algorithm" -msgstr "Алгоритм RRSIG" - -msgid "RRSIG Labels" -msgstr "Мітки RRSIG" - -msgid "Labels" -msgstr "Мітки" - -msgid "RRSIG Original TTL" -msgstr "Початковий TTL RRSIG" - -msgid "Original TTL" -msgstr "Початковий TTL" - -msgid "RRSIG Signature Expiration" -msgstr "Строк дії підпису RRSIG" - -msgid "Signature Expiration" -msgstr "Строк дії підпису" - -msgid "RRSIG Signature Inception" -msgstr "Початок підпису RRSIG" - -msgid "Signature Inception" -msgstr "Початок підпису" - -msgid "RRSIG Key Tag" -msgstr "Мітка ключа RRSIG" - -msgid "RRSIG Signer's Name" -msgstr "Ім’я підписника RRSIG" - -msgid "Signer's Name" -msgstr "Ім’я підписника" - -msgid "RRSIG Signature" -msgstr "Підпис RRSIG" - -msgid "Signature" -msgstr "Підпис" - -msgid "Comma-separated list of raw RP records" -msgstr "Список простих записів RP, відокремлених комами" - -msgid "Comma-separated list of raw SIG records" -msgstr "Список простих записів SIG, відокремлених комами" - -msgid "SIG Type Covered" -msgstr "Об’єднувані типи SIG" - -msgid "SIG Algorithm" -msgstr "Алгоритм SIG" - -msgid "SIG Labels" -msgstr "Мітки SIG" - -msgid "SIG Original TTL" -msgstr "Початковий TTL SIG" - -msgid "SIG Signature Expiration" -msgstr "Строк дії підпису SIG" - -msgid "SIG Signature Inception" -msgstr "Початок підпису SIG" - -msgid "SIG Key Tag" -msgstr "Мітка ключа SIG" - -msgid "SIG Signer's Name" -msgstr "Ім’я підписника SIG" - -msgid "SIG Signature" -msgstr "Підпис SIG" - -msgid "Comma-separated list of raw SPF records" -msgstr "Список простих записів SPF, відокремлених комами" - -msgid "Comma-separated list of raw SRV records" -msgstr "Список простих записів SRV, відокремлених комами" - -msgid "Comma-separated list of raw SSHFP records" -msgstr "Список простих записів SSHFP, відокремлених комами" - -msgid "Comma-separated list of raw TA records" -msgstr "Список простих записів TA, відокремлених комами" - -msgid "Comma-separated list of raw TKEY records" -msgstr "Список простих записів TKEY, відокремлених комами" - -msgid "Comma-separated list of raw TSIG records" -msgstr "Список простих записів TSIG, відокремлених комами" - -msgid "Comma-separated list of raw TXT records" -msgstr "Список простих записів TXT, відокремлених комами" - -msgid "SOA time to live" -msgstr "Строк дії SOA" - -msgid "SOA record time to live" -msgstr "Строк дії запису SOA" - -msgid "SOA class" -msgstr "Клас SOA" - -msgid "SOA record class" -msgstr "Клас записів SOA" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Список переспрямовувачів для окремих зон. Для кожного переспрямовувача можна " -"вказати нетиповий порт за допомогою стандартного формату: «IP_АДРЕСА port " -"ПОРТ»" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "" -"Додати запис переспрямування для сервера назв, розташованого у створеній зоні" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" -"\n" -"Іменування\n" -"\n" -"Керування іменуванням для клієнтських комп’ютерів\n" -"\n" -"Іменуванням можна керувати або шляхом реєстрації на сервері іменування\n" -"з визначенням імені користувача і пароля, або вручну, імпортуванням " -"сертифікатів\n" -"іменування. Сертифікат іменування містить вбудовані дані, зокрема те, як\n" -"слід іменувати продукт, щодо кількості та дат чинності.\n" -"\n" -"Сервер іменування керує кількістю доступних іменувань клієнтів.\n" -"Для позначення іменувань як таких, що використовуються сервером IPA, ви " -"надаєте\n" -"кількість, а система позначає їх як використані на сервері іменування.\n" -"\n" -" Зареєструватися на сервері іменування:\n" -" ipa entitle-register consumer\n" -"\n" -" Імпортувати сертифікат іменування:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Показати поточні іменування:\n" -" ipa entitle-status\n" -"\n" -" Отримати подробиці щодо сертифікатів іменування:\n" -" ipa entitle-get\n" -"\n" -" Вжити деякі іменування із сервера іменувань:\n" -" ipa entitle-consume 50\n" -"\n" -"Реєстраційним ідентифікатором є унікальний ідентифікатор (UUID). Цей " -"ідентифікатор\n" -"буде ІМПОРТОВАНО, якщо ви скористалися entitle-import.\n" -"\n" -"Зміни у /etc/rhsm/rhsm.conf для набуття чинності потребуватимуть перезапуску " -"служби httpd.\n" - -msgid "Consume an entitlement." -msgstr "Використати іменування." - -msgid "Quantity" -msgstr "Кількість" - -msgid "Search for entitlement accounts." -msgstr "Шукати облікові записи іменування." - -msgid "Retrieve the entitlement certs." -msgstr "Отримати сертифікати іменування." - -msgid "Import an entitlement certificate." -msgstr "Імпортувати сертифікат надання імен." - -msgid "UUID" -msgstr "UUID" - -msgid "Enrollment UUID" -msgstr "UUID надання ролей" - -msgid "Register to the entitlement system." -msgstr "Зареєструватися у системі іменування." - -msgid "Username" -msgstr "Користувач" - -msgid "Enrollment UUID (not implemented)" -msgstr "UUID надання ролі (не реалізовано)" - -msgid "Registration password" -msgstr "Пароль для реєстрації" - -msgid "Display current entitlements." -msgstr "Показати поточні іменування." - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "" -"Повторно синхронізувати локальний кеш іменування із сервером іменування." - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" -"\n" -"Групи користувачів\n" -"\n" -"Керування групами користувачів. Типово нові групи є групами POSIX. Ви " -"можете\n" -"додати параметр --nonposix до команди group-add з метою позначення нової\n" -"групи як групи не-POSIX. Ви можете скористатися аргументом --posix команди " -"group-mod\n" -"для перетворення групи не-POSIX на групу POSIX. Групи POSIX не можна\n" -"перетворювати на групи не-POSIX.\n" -"\n" -"Кожна група повинна мати опис.\n" -"\n" -"Групи POSIX повинні мати номер ідентифікатора групи (GID). Передбачено " -"підтримку\n" -"зміни GID, але ця зміна може вплинути на права доступу до ваших файлів. Для\n" -"створення групи слід вказати GID. IPA створить одну групу автоматично, якщо\n" -"таку не вказано.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додавання нової групи:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Додавання нової групи не-POSIX:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Перетворити групу не-POSIX на групу posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Додати нову групу POSIX з вказаним ідентифікатором групи:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Додати нову групу POSIX і надати IPA змогу призначити ідентифікатор:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Вилучення групи:\n" -" ipa group-del unixadmins\n" -"\n" -" Додати групу \"remoteadmins\" до групи \"localadmins\":\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Додати список користувачів до групи \"localadmins\":\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Вилучення користувача з групи \"localadmins\":\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Показати інформацію щодо іменованої групи.\n" -" ipa group-show localadmins\n" -"\n" -"Участь із зовнішніх груп створено для того, щоб уможливити прив’язку\n" -"користувачів з довірених доменів до локальних груп POSIX з метою\n" -"використання ресурсів IPA. Зовнішніх користувачів слід додавати до груп\n" -"які спеціально створено як зовнішні або групи не-POSIX. Таку групу\n" -"слід пізніше включити до одної з груп POSIX.\n" -"\n" -"У поточній версії учасник зовнішньої групи є ідентифікатором безпеки\n" -"(Security Identifier або SID) визначеним довіреним доменом. Додавання\n" -"учасників зовнішньої групи можна виконати у форматі SID, DOM\\ім’я або\n" -"ім’я@домен. IPA намагатиметься визначити за переданим іменем SID за\n" -"допомогою використання Загального каталогу довіреного домену.\n" -"\n" -"Приклад:\n" -"\n" -"1. Створити групу для прив’язки адміністраторів довіреного домену до\n" -"відповідної локальної групи POSIX:\n" -"\n" -" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc='<домен.ad> admins' ad_admins\n" -"\n" -"2. Додати ідентифікатор Domain Admins домену <домен.ad> до\n" -"групи ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Дозволити прив’язку групи ad_admins_external до групи POSIX ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Показати список зовнішніх учасників групи ad_admins_external, щоб " -"визначити\n" -"їхні SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "" -"список учасників довіреного домену у форматі ДОМЕН\\ім’я або ім’я@домен, " -"відокремлених комами" - -msgid "comma-separated list of users to add" -msgstr "список записів користувачів, які слід додати, відокремлених комами" - -msgid "comma-separated list of groups to add" -msgstr "список груп, які слід додати, відокремлених комами" - -msgid "comma-separated list of users to remove" -msgstr "список записів користувачів, які слід вилучити, відокремлених комами" - -msgid "comma-separated list of groups to remove" -msgstr "список груп, які слід вилучити, відокремлених комами" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" -"\n" -"Керування доступом на основі вузлів\n" -"\n" -"Керуйте тим, хто, на яких вузлах і з яких вузлів зможе отримувати доступ\n" -"до певних служб. Ви можете скористатися HBAC для визначення\n" -"користувачів і груп на вузлі походження запиту зможе отримувати\n" -"доступ до певної служби або групи служб.\n" -"\n" -"Ви також можете визначити категорію користувачів та вузли призначення.\n" -"У поточній версії можливі варіанти\n" -"обмежено варіантом \"all\", але перелік варіантів може бути\n" -"розширено у майбутніх версіях.\n" -"\n" -"Вузли призначення та вузли походження у правилах HBAC мають бути\n" -"вузлами, керованими IPA.\n" -"\n" -"Доступними службами і групами служб є служби, керовані hbacsvc\n" -"та додатками hbacsvcgroup, відповідно.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Створення правила \"test1\", яке надає всім користувачам доступ\n" -" до вузла \"server\" звідусюди:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Показ властивостей вказаного правила HBAC:\n" -" ipa hbacrule-show test1\n" -"\n" -" Створення правила для певної служби. Це правило надасть користувачу john\n" -" доступ до служби sshd у будь-якій системі звідусіль:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Створення правила для нової групи служб. Користувачу john\n" -" надається доступ до служби FTP у будь-якій системі звідусіль:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --type=allow --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Вимикання вказаного правила HBAC:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Вилучення вказаного правила HBAC:\n" -" ipa hbacrule-del allow_server\n" - -msgid "Source host category" -msgstr "Категорія вузлів-джерел" - -msgid "Source host category the rule applies to" -msgstr "Категорія вузлів-джерел, якої має стосуватися правило" - -msgid "Source Hosts" -msgstr "Вузли-джерела" - -msgid "Source Host Groups" -msgstr "Групи вузлів-джерел" - -msgid "comma-separated list of hosts to add" -msgstr "список вузлів, які слід додати, відокремлених комами" - -msgid "comma-separated list of host groups to add" -msgstr "список груп вузлів, які слід додати, відокремлених комами" - -msgid "comma-separated list of HBAC services to add" -msgstr "список служб HBAC, які слід додати, відокремлених комами" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "список груп служб HBAC, які слід додати, відокремлених комами" - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "Додати вузли джерела та групи вузлів з правила HBAC." - -msgid "comma-separated list of hosts to remove" -msgstr "список вузлів, які слід вилучити, відокремлених комами" - -msgid "comma-separated list of host groups to remove" -msgstr "список груп вузлів, які слід вилучити, відокремлених комами" - -msgid "comma-separated list of HBAC services to remove" -msgstr "список служб HBAC, які слід вилучити, відокремлених комами" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "список груп служб HBAC, які слід вилучити, відокремлених комами" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "Вилучити вузли джерела та групи вузлів з правила HBAC." - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" -"\n" -"Групи служб HBAC\n" -"\n" -"Групи служб HBAC можуть містити будь-яку кількість окремих служб\n" -"або «учасників». Кожна з груп повинна мати опис.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додавання нової групи служб HBAC:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Додавання учасників до групи служб HBAC:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Показ даних щодо вказаної групи:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Додавання нової групи до групи «login»:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Вилучення групи служб HBAC:\n" -" ipa hbacsvcgroup-del login\n" - msgid "" "\n" "Simulate use of Host-based access controls\n" "\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" +"HBAC rules control who can access what services on what hosts.\n" "You can use HBAC to control which users or groups can access a service,\n" "or group of services, on a target host.\n" "\n" @@ -15678,7 +14691,7 @@ msgid "" "\n" " ipa hbactest --user= --host= --service=\n" " [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" +" [--sizelimit= ]\n" "\n" " --user, --host, and --service are mandatory, others are optional.\n" "\n" @@ -15703,9 +14716,6 @@ msgid "" "change it\n" " with --sizelimit option.\n" "\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" "EXAMPLES:\n" "\n" " 1. Use all enabled HBAC rules in IPA database to simulate:\n" @@ -15713,10 +14723,10 @@ msgid "" " --------------------\n" " Access granted: True\n" " --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" " 2. Disable detailed summary of how rules were applied:\n" " $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" @@ -15725,60 +14735,146 @@ msgid "" " --------------------\n" "\n" " 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule\n" " ---------------------\n" " Access granted: False\n" " ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: myrule\n" "\n" " 4. Use all enabled HBAC rules in IPA database + explicitly specified " "rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --enabled\n" " --------------------\n" " Access granted: True\n" " --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Matched rules: allow_all\n" "\n" " 5. Test all disabled HBAC rules in IPA database:\n" " $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" " ---------------------\n" " Access granted: False\n" " ---------------------\n" -" notmatched: new-rule\n" +" Not matched rules: new-rule\n" "\n" " 6. Test all disabled HBAC rules in IPA database + explicitly specified " "rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --rules=myrule --rules=my-second-rule --disabled\n" " ---------------------\n" " Access granted: False\n" " ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" "\n" " 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" +" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" +" --enabled --disabled\n" " --------------------\n" " Access granted: True\n" " --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" +" Not matched rules: my-second-rule\n" +" Not matched rules: my-third-rule\n" +" Not matched rules: myrule\n" +" Not matched rules: new-rule\n" +" Matched rules: allow_all\n" +"\n" +"\n" +"HBACTEST AND TRUSTED DOMAINS\n" +"\n" +"When an external trusted domain is configured in IPA, HBAC rules are also " +"applied\n" +"on users accessing IPA resources from the trusted domain. Trusted domain " +"users and\n" +"groups (and their SIDs) can be then assigned to external groups which can " +"be\n" +"members of POSIX groups in IPA which can be used in HBAC rules and thus " +"allowing\n" +"access to resources protected by the HBAC system.\n" +"\n" +"hbactest plugin is capable of testing access for both local IPA users and " +"users\n" +"from the trusted domains, either by a fully qualified user name or by user " +"SID.\n" +"Such user names need to have a trusted domain specified as a short name\n" +"(DOMAIN\\Administrator) or with a user principal name (UPN), " +"Administrator@ad.test.\n" +"\n" +"Please note that hbactest executed with a trusted domain user as --user " +"parameter\n" +"can be only run by members of \"trust admins\" group.\n" +"\n" +"EXAMPLES:\n" +"\n" +" 1. Test if a user from a trusted domain specified by its shortname " +"matches any\n" +" rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 2. Test if a user from a trusted domain specified by its domain name " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 3. Test if a user from a trusted domain specified by its SID matches any " +"rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Matched rules: can_login\n" +"\n" +" 4. Test if other user from a trusted domain specified by its SID matches " +"any rule:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" +"\n" +" 5. Test if other user from a trusted domain specified by its shortname " +"matches\n" +" any rule:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Access granted: True\n" +" --------------------\n" +" Matched rules: allow_all\n" +" Not matched rules: can_login\n" msgstr "" "\n" "Імітація використання керування доступом на основі вузлів (HBAC)\n" "\n" -"Правила HBAC керують тим, хто може отримувати доступ до певних служб.\n" +"Правила HBAC керують тим, хто може отримувати доступ до певних служб на\n" +"певних вузлах.\n" "Ви можете скористатися HBAC для керування тим, які користувачі або групи\n" "на початковому вузлі можуть отримувати доступ до служби або групи служб\n" "на вузлі призначення\n" @@ -15793,7 +14889,7 @@ msgstr "" "\n" " ipa hbactest --user= --host= --service=\n" " [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" +" [--sizelimit= ]\n" "\n" " --user, --host і --service є обов’язковими, інші можна не вказувати.\n" "\n" @@ -15814,9 +14910,6 @@ msgstr "" " Якщо не вказано --rules, буде виконано імітацію всіх увімкнених правил " "IPA.\n" "\n" -" Якщо вказано --srchost, його буде проігноровано. Цей параметр збережено " -"лише з міркувань сумісності.\n" -"\n" "ПРИКЛАДИ:\n" "\n" " 1. Використання всіх увімкнених правил HBAC у базі даних IPA:\n" @@ -15886,6464 +14979,84 @@ msgstr "" " невідповідне: myrule\n" " невідповідне: new-rule\n" " відповідне: allow_all\n" - -msgid "Source host" -msgstr "Вузол джерела" - -msgid "" "\n" -"Hosts/Machines\n" "\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" +"HBACTEST І ДОВІРЕНІ ДОМЕНИ\n" "\n" -"ENROLLMENT:\n" +"Якщо у IPA налаштовано зовнішній довірений домен, правила HBAC також\n" +"застосовуються до користувачів, що отримують доступ до ресурсів IPA з\n" +"з довіреного домену. Після цього користувачі і групи довіреного домену\n" +"(на їхні SID) може бути прив’язано до зовнішніх груп, які можуть бути\n" +"учасниками груп POSIX у IPA. Такі прив’язки може бути використано у\n" +"правилах HBAC, отже уможливлення доступу до ресурсів, захищених системою\n" +"HBAC.\n" "\n" -"There are three enrollment scenarios when enrolling a new client:\n" +"Додаток hbactest здатен тестувати доступ як для локальних користувачів\n" +"IPA, так і користувачів з довірених доменів, як за повним іменем\n" +"користувача, так і за SID користувачів. У таких іменах користувачів\n" +"має бути вказано скорочено довірений домен (ДОМЕН\\Administrator) або\n" +"назву реєстраційного запису користувача (UPN), Administrator@ad.test.\n" "\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" -"\n" -"Вузли/Комп’ютери\n" -"\n" -"Вузол — це окремий комп’ютер. Термін може використовуватися у декількох " -"контекстах:\n" -"- записи служб, пов’язані з певним вузлом\n" -"- вузол зберігає реєстраційні дані вузол/служба\n" -"- вузол можна використовувати у правилах Host-based Access Control (HBAC)\n" -"- для усіх зареєстрованих клієнтів створюється запис вузла\n" -"\n" -"РЕЄСТРАЦІЯ:\n" -"\n" -"Передбачено три сценарії реєстрації нових клієнтів:\n" -"\n" -"1. Ви реєструєтеся як повноцінний адміністратор. Запис вузла може існувати\n" -" або не існувати. Повноцінний адміністратор виконує роль hostadmin або є\n" -" учасником групи admins.\n" -"2. Ви реєструєтеся як адміністратор з обмеженими правами. Вузол вже має\n" -" існувати. Обмежений адміністратор виконує роль з привілеями\n" -" Host Enrollment.\n" -"3. Вузол було створено з одноразовим паролем.\n" -"\n" -"Вузлу можна надати роль лише один раз. Якщо клієнту вже надано роль і\n" -"роль слід змінити, запис вузла має бути вилучено і створено повторно.\n" -"Зауважте, що повторне створення запису вузла призведе до вилучення усіх\n" -"служб для вузла, а усі сертифікати SSL, пов’язані із цими службами\n" -"буде відкликано.\n" -"\n" -"Запис вузла може, якщо потрібно, містити дані щодо його розташування,\n" -"типу операційної системи тощо.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -"\n" -"Додати новий вузол:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Вилучити вузол:\n" -" ipa host-del test.example.com\n" -"\n" -" Додати новий вузол з одноразовим паролем:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -"Додати новий вузол з випадковим одноразовим паролем:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Змінити відомості щодо вузла:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Вилучити відкриті ключі SSH вузла і оновити DNS відповідно до внесених " -"змін:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -"Вимкнути ключ Kerberos вузла, сертифікат SSL та усі його служби:\n" -" ipa host-disable test.example.com\n" -"\n" -"Додати вузол, який може керувати сховищем ключів та сертифікатом цього " -"вузла :\n" -" ipa host-add-managedby --hosts=test2 test\n" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" -"\n" -"Групи вузлів.\n" -"\n" -"Керування групами вузлів. Корисні для застосування керування\n" -"до декількох вузлів на основі заснованого на вузлах керування\n" -"доступом (Host-based Access Control або HBAC).\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" додавання нової групи вузлів:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Додавання нової групи вузлів:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Додавання учасників до групи вузлів:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Додавання групи вузлів як учасника іншої групи вузлів:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Вилучення вузла з групи вузлів:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Показ списку групи вузлів:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Вилучення групи вузлів:\n" -" ipa hostgroup-del baltimore\n" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" -"\n" -"Діапазони ідентифікаторів\n" -"\n" -"Керування діапазонами ідентифікаторів, використаних для відображення\n" -"ідентифікаторів POSIX на SID, і навпаки.\n" -"\n" -"За допомогою цієї програми можна керувати обома типами діапазонів " -"ідентифікаторів:\n" -"\n" -" - діапазони ідентифікаторів локального домену\n" -" - діапазони ідентифікаторів довірених віддалених доменів\n" -"\n" -"Обидва типи мають такі спільні атрибути:\n" -"\n" -" - base-id: перший ідентифікатор діапазону ідентифікаторів POSIX\n" -" - range-size: розмір діапазону\n" -"\n" -"На основі цих двох атрибутів об’єкт діапазону може зарезервувати " -"ідентифікатори\n" -"POSIX, починаючи з base-id аж до, але не включно, base-id+range-size.\n" -"\n" -"Крім того, можна встановити діапазон ідентифікаторів локального домену\n" -" - rid-base: перший RID(*) відповідного діапазону RID\n" -" - secondary-rid-base: перший RID вторинного діапазону RID\n" -"\n" -"а діапазон ідентифікаторів довіреного домену слід задавати за допомогою\n" -" - rid-base: перший RID відповідного діапазону RID\n" -" - dom_sid: SID довіреного домену\n" -"\n" -"\n" -"\n" -"ПРИКЛАД: додавання нового діапазону ідентифікаторів для довіреного домену\n" -"\n" -"Оскільки може бути декілька довірених доменів, під час створення діапазону\n" -"ідентифікаторів слід вказати SID домену.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"Цей діапазон ідентифікаторів потім використовуватиметься сервером IPA\n" -"та надавачем даних IPA SSSD для призначення UID Posix користувачам з\n" -"довіреного домену.\n" -"\n" -"Якщо, наприклад, налаштовано діапазон для довіреного домену з такими\n" -"значеннями:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"RID від 0 до 199999 прив’язуються до ідентифікаторів Posix від 1200000 до\n" -"13999999. Отже RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"ПРИКЛАД: додавання нового діапазону ідентифікаторів до локального домену\n" -"\n" -"Щоб створити діапазон ідентифікаторів для локального домену не потрібно\n" -"вказувати SID домену. Але оскільки можливий конфлікт між ідентифікаторами\n" -"користувача і групи та ідентифікаторами POSIX, потрібен вторинний інтервал\n" -"RID.\n" -"\n" -" ipa range-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"Дані з діапазонів ідентифікаторів локального домену використовуються\n" -"сервером IPA на внутрішньому рівні для призначення SID користувачам і " -"групам\n" -"IPA. SID буде збережено у об’єктах користувача або групи.\n" -"\n" -"Якщо, наприклад, для діапазону ідентифікаторів локального домену визначено\n" -"значення з наведеного вище прикладу, новий користувач з UID 1200007 отримає\n" -"RID 1007. Якщо цей RID вже буде використано групою, його буде змінено на " -"1000007.\n" -"Таке може трапитися лише, якщо об’єкт користувача або групи було створено з\n" -"фіксованим ідентифікатором, оскільки у разі автоматичного призначення один\n" -"ідентифікатор не може бути призначено двічі. Оскільки спільний простір назв\n" -"є лише у користувачів і груп, достатньо одного резервного діапазону для\n" -"того, щоб повністю позбутися конфліктів.\n" -"\n" -"Для визначення ідентифікатора POSIX за вказаним RID з локального домену " -"слід\n" -"спочатку перевірити, чи потрапляє RID у основний або вторинний діапазон " -"RID,\n" -"також, щоб отримати ідентифікатор POSIX, слід відняти від ідентифікатор rid-" -"base\n" -"або secondary-rid-base, відповідно, і додати base-id.\n" -"\n" -"Типово, створення діапазонів ідентифікаторів є зовні непомітним і потреби у\n" -"цьому інтерфейсі командного рядка не виникає. Діапазон ідентифікаторів\n" -"для локального домену буде створено під час встановлення або оновлення\n" -"попередньої версії. Діапазон ідентифікаторів для довіреного домену буде\n" -"створено разом з записом довіри командою «ipa trust-add ...».\n" -"Нижче наведено можливі випадки використання цього командного інтерфейсу.\n" -"\n" -"ВИПАДКИ ВИКОРИСТАННЯ:\n" -"\n" -" Додавання діапазону ідентифікаторів з перехідного довіреного домену\n" -"\n" -" Якщо довірений домен (A) довіряється іншому домену (B) і цей запис\n" -" довіри є перехідним, «ipa trust-add домен-A» створить лише діапазон\n" -" для домену A. Діапазон ідентифікаторів домену B має бути додано вручну.\n" -"\n" -" Додавання додаткового діапазону ідентифікаторів для локального домену\n" -"\n" -" Якщо діапазон ідентифікаторів локального домену вичерпано, тобто " -"додатком\n" -" DNA не може бути призначено нові ідентифікатори користувачам або групам\n" -" POSIX, має бути створено новий діапазон для додавання нових " -"користувачів\n" -" та груп. (У поточній версії між цим командним інтерфейсом і додатком " -"DNA\n" -" немає безпосереднього зв’язку, але у майбутній версії може бути " -"передбачено\n" -" можливість внесення змін і до налаштувань додатка DNS.)\n" -"\n" -"Загалом, потреби у зміні або вилученні діапазонів ідентифікаторів немає.\n" -"Якщо немає іншого виходу, окрім внесення змін або вилучення діапазону\n" -"ідентифікаторів, робити це слід дуже обережно. Оскільки UID зберігаються у\n" -"файловій системі і використовуються для керування доступом, можлива " -"ситуація,\n" -"коли одні користувачі отримуватимуть доступ до файлів інших користувачів\n" -"у разі вилучення діапазону ідентифікаторів і повторного його використання\n" -"у іншому домені.\n" -"\n" -"(*) RID типово є останнім цілим числом SID користувача або групи, перед " -"якими\n" -"має бути вказано SID домену. Наприклад, якщо SID домену " -"S-1-5-21-123-456-789, а\n" -"користувач з цього домену має SID S-1-5-21-123-456-789-1010, RID " -"користувача\n" -"буде 1010. RID є унікальними в межах домену, є 32-бітовими значенням і\n" -"використовуються для користувачів і груп.\n" -"\n" -"ПОПЕРЕДЖЕННЯ:\n" -"\n" -"Додаток DNA у 389-ds розміщуватиме ідентифікатори на основі діапазонів\n" -"налаштованих для локального домену. У поточній версії додаток DNA *не " -"можна*\n" -"переналаштовувати самостійно на основі локальних діапазонів, встановлених\n" -"за допомогою цього сімейства команд.\n" -"\n" -"Зміни налаштувань вручну має бути виконано у налаштуваннях додатка DNA\n" -"для локального діапазону. Зокрема слід змінити атрибут dnaNextRange " -"«cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config» так, щоб\n" -"він відповідав новому діапазону.\n" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" -"\n" -"Додати новий діапазон ідентифікаторів.\n" -"\n" -" Для додавання нового діапазону ідентифікаторів вам слід завжди " -"вказувати\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Крім того, може бути надано\n" -"\n" -" --rid-base\n" -" --econdary-rid-base\n" -"\n" -" для додавання нового діапазону ідентифікаторів для локального домену і\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" для додавання нового діапазону для довіреного домену AD.\n" -"\n" -" ПОПЕРЕДЖЕННЯ:\n" -"\n" -" Додаток DNA у 389-ds визначатиме ідентифікатори у діапазонах, " -"налаштованих\n" -" для локального домену. У поточній версії додаток DNA *не може* змінити\n" -" власні налаштування на основі локальних діапазонів, встановлених за\n" -" допомогою цього сімейства команд.\n" -"\n" -" Для внесення змін щодо локального діапазону слід змінити налаштування\n" -" додатка DNA вручну. Зокрема, слід внести зміни до атрибута 'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' " -"відповідно\n" -" до параметрів нового діапазону.\n" -" " - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "" -"Список класів об’єктів, використаних для пошуку записів користувачів у DS, " -"відокремлених комами" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "" -"Список класів об’єктів, використаних для пошуку записів груп у DS, " -"відокремлених комами" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "" -"Список класів об’єктів, які буде проігноровано для записів користувачів у " -"DS, відокремлених комами" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "" -"Список атрибутів, які буде проігноровано для записів користувачів у DS, " -"відокремлених комами" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "" -"Список класів об’єктів, які буде проігноровано для записів груп у DS, " -"відокремлених комами" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "" -"Список атрибутів, які буде проігноровано для записів груп у DS, " -"відокремлених комами" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "список груп, які слід виключити з перенесення, відокремлених комами" - -msgid "comma-separated list of users to exclude from migration" -msgstr "" -"список записів користувачів, які слід виключити з перенесення, відокремлених " -"комами" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" -"\n" -"Мережеві групи\n" -"\n" -"Мережева група — група для перевірки прав доступу. Може містити значення\n" -"користувачів та вузлів.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додавання нової мережевої групи:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Додавання учасників до мережевої групи:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Вилучення користувача з мережевої групи:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Показ даних щодо мережевої групи:\n" -" ipa netgroup-show admins\n" -"\n" -" Вилучення мережевої групи:\n" -" ipa netgroup-del admins\n" - -msgid "comma-separated list of netgroups to add" -msgstr "список мережевих груп, які слід додати, відокремлених комами" - -msgid "comma-separated list of netgroups to remove" -msgstr "список мережевих груп, які слід вилучити, відокремлених комами" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" -"\n" -"Права доступу\n" -"\n" -"Запис правил доступу уможливлює точне делегування прав. Запис прав доступу\n" -"є зручною для читання обгорткою навколо правила керування доступом 389-ds\n" -"або інструкції (ACI).\n" -"Право доступу надає право виконувати специфічне завдання, зокрема додавання\n" -"запису користувача, внесення зміни до групи тощо.\n" -"\n" -"Запис прав доступу не може містити інших прав доступу.\n" -"\n" -"* Права доступу надають можливість читати, записувати, вилучати, шукати або\n" -" порівнювати.\n" -"* Привілеї поєднують подібні права доступу (наприклад усі права доступу,\n" -" потрібні для додавання запису користувача).\n" -"* Роль надає набір привілеїв користувачам, групам, вузлам або групам " -"вузлів.\n" -"\n" -"Запис права доступу складається з декількох різних частин:\n" -"\n" -"1. Назви запису права доступу.\n" -"2. Призначення права доступу.\n" -"3. Права, які надаються записом.\n" -"\n" -"Права визначають список дій, які можна виконувати. Запис прав може\n" -"бути один або може бути декілька записів з такого набору:\n" -"1. write - запис одного або декількох атрибутів\n" -"2. read - читання одного або декількох атрибутів\n" -"3. search - пошук одного або декількох атрибутів\n" -"4. compare - порівняння одного або декількох атрибутів\n" -"5. add - додавання нового запису до ієрархії\n" -"6. delete - вилучення наявного запису\n" -"7. all - надати усі права доступу\n" -"\n" -"Типово, доступ до читання надається до більшості з атрибутів, отже потреба\n" -"у визначенні прав доступу до читання має виникати доволі нечасто.\n" -"\n" -"Зауважте відмінність між атрибутами і записами. Права доступу є " -"незалежними,\n" -"отже можливість додавання запису користувача не означає, що цей запис " -"згодом\n" -"буде придатним до редагування.\n" -"\n" -"Передбачено декілька можливих призначень:\n" -"1. type: тип об’єкта (user, group тощо).\n" -"2. memberof: учасник групи або групи вузлів\n" -"3. filter: фільтр LDAP\n" -"4. subtree: фільтр LDAP, що визначає частину DIT LDAP. Є надмножиною\n" -" призначення «type».\n" -"5. targetgroup: надати доступ до зміни вказаної групи (зокрема надати " -"доступ\n" -" до керування участю у групі)\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати право доступу до створення записів користувачів:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Додати право доступу, яке надає можливість керувати участю у групах:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "" -"Права доступу, які слід надати, відокремлених комами (read, write, add, " -"delete, all)" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "" -"тип об’єкта IPA (user (користувач), group (група), host (вузол), hostgroup " -"(група вузлів), service (служба), netgroup (мережева група), dns)" - -msgid "Target members of a group" -msgstr "Цільові учасники групи" - -msgid "User group to apply permissions to" -msgstr "Група користувачів, до якої буде застосовано права доступу" - -msgid "comma-separated list of privileges to add" -msgstr "список привілеїв, які слід додати, відокремлених комами" - -msgid "Add a system permission without an ACI" -msgstr "Додати права доступу до системи без ACI" - -msgid "Permission type" -msgstr "Тип прав доступу" - -msgid "comma-separated list of privileges to remove" -msgstr "список привілеїв, які слід вилучити, відокремлених комами" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" -"\n" -"Перевірка віддаленого сервера IPA з метою переконатися, що він є " -"працездатним.\n" -"\n" -"Програма ping надсилає луна-запит до сервера IPA. Сервер повертає\n" -"дані щодо його версії. Ці дані використовуються клієнтом IPA\n" -"для підтвердження, що сервер є доступним і що він приймає запити.\n" -"\n" -"Сервер з xmlrpc_uri у /etc/ipa/default.conf перевіряється першим.\n" -"Якщо він не відповідає, клієнт намагається встановити зв’язок з\n" -"будь-яким сервером, визначеним записами SRV ldap у DNS.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Перевірити луна-імпульсом сервер IPA:\n" -" ipa ping\n" -" ------------------------------------------\n" -" Сервер IPA версії 2.1.9. Версія API 2.20\n" -" ------------------------------------------\n" -"\n" -" Перевірити луна-імпульсом сервер IPA і отримати докладні дані:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" Сервер IPA версії 2.1.9. Версія API 2.20\n" -" -----------------------------------------------------\n" - -msgid "comma-separated list of roles to add" -msgstr "список ролей, які слід додати, відокремлених комами" - -msgid "comma-separated list of permissions" -msgstr "список прав доступу, відокремлених комами" - -msgid "comma-separated list of roles to remove" -msgstr "список ролей, які слід вилучити, відокремлених комами" - -msgid "comma-separated list of privileges" -msgstr "список привілеїв, відокремлених комами" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" -"\n" -"Права доступу самообслуговування\n" -"\n" -"Права доступу надають змогу точно налаштувати уповноваження. За допомогою\n" -"правил керування доступом та інструкцій (ACI) надаються права доступу до\n" -"виконання вказаних завдань, зокрема додавання записів користувачів,\n" -"внесення змін до записів груп тощо.\n" -"\n" -"Права доступу самообслуговування визначають права об’єкта на внесення змін\n" -"до власного запису.\n" -"\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додавання правила самообслуговування для уможливлення керування " -"користувачами\n" -" власною адресою:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" Якщо ви керуєте списком атрибутів, вам слід включити до списку всі " -"атрибути,\n" -" зокрема вже створені. Додавання telephoneNumber до списку:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Показ нашого оновленого правила:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Вилучення правила:\n" -" ipa selfservice-del \"Users manage their own address\"\n" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" -"\n" -"Служби\n" -"\n" -"Служба IPA — це служба, що працює на вузлі системи. У записі служби\n" -"IPA можуть зберігатися дані реєстраційного запису Kerberos, сертифікат\n" -"SSL або обидва набори даних.\n" -"\n" -"Службою IPA можна керувати безпосередньо з комп’ютера, якщо системі\n" -"цього комп’ютера надано достатні права доступу. Це стосується навіть\n" -"комп’ютерів, відмінних від тих, з якими пов’язано службу. Наприклад,\n" -"вони можуть надсилати запит щодо сертифіката SSL за допомогою\n" -"реєстраційних даних служби вузла. Для керування службою за допомогою\n" -"реєстраційних даних вузла слід віддати команду ініціалізації kinit\n" -"від імені вузла:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Додавання служби IPA надає доступ пов’язаній службі до надсилання\n" -"запитів щодо сертифікатів SSL та таблиці ключів, але створення самих\n" -"запитів є окремим кроком: відповідні дані не створюються у результаті\n" -"простого додавання служби.\n" -"\n" -"У записі служби зберігаються лише відкриті дані сертифіката; закритий\n" -"ключ не зберігається.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати нову службу IPA:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Дозволити вузлу керувати сертифікатом служби IPA:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Перевизначити типовий список підтримуваних типів PAC для служби:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Вилучити службу IPA:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Знайти усіх служби IPA, пов’язані із вузлом:\n" -" ipa service-find web.example.com\n" -"\n" -" Знайти усі служби HTTP:\n" -" ipa service-find HTTP\n" -"\n" -" Вимкнути службу ключів Kerberos і сертифіката SSL:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Надіслати запит щодо сертифіката для служби IPA:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Створити і отримати вміст сховища ключів для служби IPA:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "" -"Перевизначити типовий список підтримуваних типів PAC. Скористайтеся " -"значенням «NONE», щоб вимкнути підтримку PAC для цієї служби." - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" -"\n" -"Групи команд sudo\n" -"\n" -"Керування групами команд sudo.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати нову групу команд sudo:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Вилучити групу команд sudo:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Керування участю групи команд sudo, команди:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Керування участю групи команд sudo, команди:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Показ групи команд sudo:\n" -" ipa group-show localadmins\n" - -msgid "comma-separated list of sudo commands to add" -msgstr "список команд sudo, які слід додати, відокремлених комами" - -msgid "comma-separated list of sudo commands to remove" -msgstr "список команд sudo, які слід вилучити, відокремлених комами" - -msgid "Active directory domain administrator's password" -msgstr "Пароль адміністратора домену Active directory" - -msgid "GECOS field" -msgstr "поле GECOS" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" -"\n" -"Правила sudo\n" -"\n" -"Sudo (su \"do\") надає системному адміністратору змогу делегувати\n" -"повноваження певним користувачам (або групам користувачів) на виконання\n" -"деяких (або усіх) команд від імені адміністратора (root) або іншого\n" -"користувача, зберігаючи водночас журнал виконання команд та\n" -"аргументів.\n" -"\n" -"У IPA передбачено декілька параметрів налаштовування роботи sudo:\n" -" Users: користувачі або групи, які можуть викликати sudo.\n" -" Hosts: вузли або групи вузлів, користувачі якого можуть викликати sudo.\n" -" Allow Command: специфічні команди, які можна виконувати за допомогою " -"sudo.\n" -" Deny Command: специфічні команди, які не можна виконувати за допомогою " -"sudo.\n" -" RunAsUser: користувачі або групи, від імені яких sudo виконуватиме " -"команди.\n" -" RunAsGroup: групи, ідентифікатори яких буде використано sudo для " -"виконання команд.\n" -" Options: різноманітні параметри sudoers, які можуть змінити поведінку " -"sudo.\n" -"\n" -"До правила sudo можна додати порядок, який керуватиме порядком\n" -"обробки записів (якщо такий порядок передбачено на клієнтському боці).\n" -"Порядок визначається числовим індексом, який не повинен повторюватися.\n" -"\n" -"У IPA передбачено визначений binddn для використання з sudo, який " -"розташовано у\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"Щоб увімкнути binddn, віддайте таку команду для встановлення пароля:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"Докладніші відомості наведено у документації з IPA щодо sudo.\n" - -msgid "comma-separated list of sudo command groups to add" -msgstr "список груп команд sudo, які слід додати, відокремлених комами" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "список груп команд sudo, які слід вилучити, відокремлених комами" - -msgid "Failed members" -msgstr "Помилка members" - -msgid "Failed source hosts/hostgroups" -msgstr "Помилка hosts/hostgroups джерела" - -msgid "Failed hosts/hostgroups" -msgstr "Помилка hosts/hostgroups" - -msgid "Failed users/groups" -msgstr "Помилка users/groups" - -msgid "Failed service/service groups" -msgstr "Помилки служб/груп служб" - -msgid "Failed to remove" -msgstr "Спроба вилучення зазнала невдачі" - -msgid "Failed RunAs" -msgstr "Помилка запуску від імені" - -msgid "Failed RunAsGroup" -msgstr "Помилка запуску від імені групи" - -msgid "Failed profiles" -msgstr "Профілі із помилками" - -msgid "Failed CAs" -msgstr "Помилкові CA" - -msgid "Failed member manager" -msgstr "Помилка керівника учасниками" - -msgid "Failed managedby" -msgstr "Помилка managedby" - -msgid "Failed allowed to retrieve keytab" -msgstr "Не вдалося дозволити отримувати таблицю ключів" - -msgid "Failed allowed to create keytab" -msgstr "Не вдалося дозволити створювати таблицю ключів" - -msgid "Failed targets" -msgstr "Помилкові цілі" - -#, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "Клієнт %(cver)s є несумісним з сервером %(sver)s на «%(server)s»" - -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "%(server)s повідомляє про невідому помилку %(code)d: %(error)s" - -msgid "an internal error has occurred" -msgstr "сталася внутрішня помилка" - -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "на сервері «%(server)s» сталася внутрішня помилка" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "невідома команда: «%(name)s»" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "помилка на сервері «%(server)s»: %(error)s" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "не вдалося встановити з’єднання з «%(uri)s»: %(error)s" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "некоректний запит JSON-RPC: %(error)s" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "" -"помилка під час розміщення даних для каналу передавання XML-RPC: %(error)s" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "Не вказано HTTP Referer або вказано помилкове значення, %(referer)s" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" -"Кодуванням системи має бути UTF-8, підтримки «%(encoding)s» не передбачено. " -"Встановіть такі значення змінних середовища: LC_ALL=\"C.UTF-8\" або LC_ALL=" -"\"\" і LC_CTYPE=\"C.UTF-8\"." - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Помилка Kerberos: %(major)s/%(minor)s" - -msgid "did not receive Kerberos credentials" -msgstr "не отримано реєстраційних даних Kerberos" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "У базі даних Kerberos не виявлено служби «%(service)s»" - -msgid "No credentials cache found" -msgstr "Не знайдено кешу реєстраційних даних" - -msgid "Ticket expired" -msgstr "Сплив строк дії квитка" - -msgid "Credentials cache permissions incorrect" -msgstr "Помилкові права доступу до кешу реєстраційних даних" - -msgid "Bad format in credentials cache" -msgstr "Помилковий формат кешу реєстраційних даних" - -msgid "Cannot resolve KDC for requested realm" -msgstr "Не вдалося визначити KDC для бажаної області (realm)" - -msgid "Session error" -msgstr "Помилка сеансу" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "" -"Не вдалося виконати розпізнавання для реєстраційного запису %(principal)s: " -"%(message)s" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "Недостатні права для доступу: %(info)s" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "команда «%(name)s» не приймає ніяких аргументів" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "команда «%(name)s» приймає не більше %(count)d аргументу" -msgstr[1] "команда «%(name)s» приймає не більше %(count)d аргументів" -msgstr[2] "команда «%(name)s» приймає не більше %(count)d аргументів" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "перекриття аргументів і параметрів: %(names)s" - -#, python-format -msgid "'%(name)s' is required" -msgstr "Слід вказати «%(name)s»" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "некоректне «%(name)s»: %(error)s" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "api не надає такого простору назв: «%(name)s»" - -msgid "Passwords do not match" -msgstr "Паролі не збігаються" - -msgid "Command not implemented" -msgstr "Команду не реалізовано" - -msgid "Client is not configured. Run ipa-client-install." -msgstr "" -"Клієнтську частину не налаштовано. Віддайте команду ipa-client-install." - -#, python-format -msgid "Could not get %(name)s interactively" -msgstr "Не вдалося отримати %(name)s у інтерактивному режимі" - -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "Команда «%(name)s» вважається застарілою" - -#, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "Домен «%(domain)s» не є кореневим доменом для лісу «%(forest)s»" - -#, python-format -msgid "%(reason)s" -msgstr "%(reason)s" - -msgid "This entry already exists" -msgstr "Цей запис вже існує" - -msgid "You must enroll a host in order to create a host service" -msgstr "Щоб створити службу вузла, вам слід зареєструвати вузол" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "" -"Реєстраційний запис служби вказано у формі, відмінній від: служба/повна " -"назва вузла: %(reason)s" - -msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "" -"Область дії реєстраційного запису не збігається з областю цього сервера IPA" - -msgid "This command requires root access" -msgstr "Для виконання цієї команди потрібні права доступу користувача root" - -msgid "This is already a posix group" -msgstr "Вже є posix-групою" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "" -"Реєстраційний запис вказано у формі, відмінній від користувач@ОБЛАСТЬ: " -"«%(principal)s»" - -msgid "This entry is already enabled" -msgstr "Цей запис вже увімкнено" - -msgid "This entry is already disabled" -msgstr "Цей запис вже вимкнено" - -msgid "This entry cannot be enabled or disabled" -msgstr "Цей запис не можна вмикати або вимикати" - -msgid "This entry is not a member" -msgstr "Цього запису немає серед учасників" - -msgid "A group may not be a member of itself" -msgstr "Група не може бути елементом самої себе" - -msgid "This entry is already a member" -msgstr "Цей запис вже є серед учасників" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Помилка декодування Base64: %(reason)s" - -msgid "A group may not be added as a member of itself" -msgstr "Групу не може бути додано як елемент самої себе" - -msgid "The default users group cannot be removed" -msgstr "Не можна вилучати типову групу користувачів" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "Вилучення керованих груп заборонено. Спочатку групу слід від’єднати." - -msgid "A managed group cannot have a password policy." -msgstr "У керованої групи не може бути власних правил для паролів." - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "«%(entry)s» не містить сертифіката." - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "Не вдалося створити закриту групу. Група «%(group)s» вже існує." - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "" -"Під час перевірки виявлено проблему, всі записи учасників %(verb)s: %(exc)s" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "%(attr)s не містить «%(value)s»" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "" -"Критерій пошуку не був достатньо точним. Мало бути вказано один критерій, " -"виявлено — %(found)d." - -msgid "This group already allows external members" -msgstr "У цій групі вже дозволено зовнішніх учасників" - -msgid "This group cannot be posix because it is external" -msgstr "Ця група не може належати до груп POSIX, оскільки є зовнішньою" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "" -"Ця група вже належить до груп POSIX, отже її не можна перетворити на зовнішню" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "Вилучення сервера перервано: %(reason)s." - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "" -"Підтримки %(operation)s для реєстраційних записів %(principal_type)s не " -"передбачено" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "Помилка під час виконання запиту, стан %(status)s: %(reason)s" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" -msgstr "" -"Набір правил прив’язки «%(ruleset)s» містить декілька правил для допоміжного " -"засобу %(helper)s" - -#, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "«%(attr)s» вже містить одне або декілька значень" - -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "не виявлено ні команди, ні запису довідки «%(topic)s»" - -msgid "change collided with another change" -msgstr "зміна конфліктує з іншою внесеною зміною" - -msgid "no modifications to be performed" -msgstr "змін не внесено" - -#, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(desc)s: %(info)s" - -msgid "limits exceeded for this query" -msgstr "цим запитом перевищено обмеження" - -#, python-format -msgid "%(info)s" -msgstr "%(info)s" - -msgid "modifying primary key is not allowed" -msgstr "зміну основного ключа заборонено" - -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "%(attr)s: можна використовувати лише одне значення." - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "%(attr)s: некоректний синтаксис." - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "Помилковий фільтр пошуку %(info)s" - -msgid "Not allowed on non-leaf entry" -msgstr "Заборонено для записів, які не є записами листків (leaf)" - -msgid "LDAP timeout" -msgstr "Час очікування LDAP" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "" -"Перевищення часу очікування на завершення завдання LDAP %(task)s, DN " -"завдання: «%(task_dn)s»" - -msgid "Configured time limit exceeded" -msgstr "Перевищено налаштоване обмеження за часом" - -msgid "Configured size limit exceeded" -msgstr "Перевищено налаштоване обмеження за розміром" - -msgid "Configured administrative server limit exceeded" -msgstr "Перевищено налаштоване обмеження адміністративного сервера" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "Не вдалося завершити дію з сертифікатом: %(error)s" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "Помилка форматування сертифіката: %(error)s" - -msgid "Already registered" -msgstr "Вже зареєстровано" - -msgid "Not registered yet" -msgstr "Ще не зареєстровано" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "" -"%(key)s неможливо вилучити, оскільки він потрібен для %(dependent)s %(label)s" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "" -"%(key)s не може бути вилучено або вимкнено, оскільки він є останнім у " -"%(container)s %(label)s" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "%(key)s %(label)s не можна вилучати або змінювати: %(reason)s" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "Сертифікат %(name)s не є чинним" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "" -"Схема не потребує оновлення (Відбиток «%(fingerprint)s», TTL %(ttl)s с)" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "На вузлі «%(hostname)s» немає відповідного запису DNS A/AAAA" - -#, python-format -msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" -msgstr "" -"Перевірка DNS зазнала невдачі: мало бути {%(expected)s}, отримано {%(got)s}" - -#, python-format -msgid "%(exception)s" -msgstr "%(exception)s" - -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" -"У лісу «%(forest)s» наявні відносини довіри з лісами %(domains)s, що не дає " -"змоги встановити довіру до «%(conflict)s»" - -msgid "Additional instructions:" -msgstr "Додаткові настанови:" - -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" -"Не було надіслано номера версії програмного інтерфейсу (API), сумісність з " -"найновішими версіями не можна гарантувати. Припускаємо таку версію API " -"сервера: %(server_version)s" - -msgid "" -"DNS forwarder semantics changed since IPA 4.0.\n" -"You may want to use forward zones (dnsforwardzone-*) instead.\n" -"For more details read the docs." -msgstr "" -"З виходом версії IPA 4.0 змінилася семантика засобу переспрямовування DNS.\n" -"Вам варто перейти на використання зон переспрямовування (dnsforwardzone-*).\n" -"Докладніше про це у документації." - -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "" -"Підтримка DNSSEC є експериментальною.\n" -"%(additional_info)s" - -#, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "Параметр «%(option)s» є застарілим. %(additional_info)s" - -#, python-format -msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "" -"Семантику %(label)s було змінено. %(current_behavior)s\n" -"%(hint)s" - -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "Сервер DNS %(server)s: %(error)s." - -#, python-format -msgid "" -"DNS server %(server)s does not support DNSSEC: %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"На сервері DNS %(server)s не передбачено підтримки DNSSEC: %(error)s.\n" -"Якщо на серверах IPA увімкнено перевірку DNSSEC, будь ласка, вимкніть її." - -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" -"зона переспрямовування «%(fwzone)s» не є ефективною, оскільки не вказано " -"належного делегування NS у основній зоні «%(authzone)s». Будь ласка, додайте " -"запис NS «%(ns_rec)s» до батьківської зони «%(authzone)s»." - -#, python-format -msgid "" -"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" -"If DNSSEC validation is enabled on IPA server(s), please disable it." -msgstr "" -"На сервері DNS %(server)s не передбачено підтримки EDNS0 (RFC 6891): " -"%(error)s.\n" -"Якщо на серверах IPA увімкнено перевірку DNSSEC, будь ласка, вимкніть її." - -#, python-format -msgid "" -"DNSSEC validation failed: %(error)s.\n" -"Please verify your DNSSEC configuration or disable DNSSEC validation on all " -"IPA servers." -msgstr "" -"Не пройдено перевірку DNSSEC: %(error)s.\n" -"Будь ласка, перевірте, чи правильно вказано налаштування DNSSEC, або " -"вимкніть перевірку DNSSEC на усіх серверах IPA." - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be created " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please create the record " -"manually, containing the following value: '%(realm)s'" -msgstr "" -"Не вдалося створити запис TXT _kerberos з домену %(domain)s (%(error)s).\n" -"Причиною може бути те, що зона не є керованою IPA. Будь ласка, створіть " -"запис вручну так, щоб він містив таке значення: «%(realm)s»" - -#, python-format -msgid "" -"The _kerberos TXT record from domain %(domain)s could not be removed " -"(%(error)s).\n" -"This can happen if the zone is not managed by IPA. Please remove the record " -"manually." -msgstr "" -"Не вдалося вилучити запис TXT _kerberos з домену %(domain)s (%(error)s).\n" -"Причиною може бути те, що зона не є керованою IPA. Будь ласка, вилучіть " -"запис вручну." - -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "" -"Не встановлено основного ключа DNSSEC. Підписування у зоні DNSSEC не " -"працюватиме, доки не буде встановлено основний ключ DNSSEC." - -#, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" -"Назва відносного запису «%(record)s» містить як суфікс назву зони " -"«%(zone)s», що дає повну назву домену «%(fqdn)s». Зазвичай, такі назви є " -"помилковими, спричиненими пропущеною крапкою наприкінці специфікації назви." - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "«%(command)s» вважається застарілою. %(additional_info)s" - -#, python-format -msgid "%(line)s" -msgstr "%(line)s" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "Результат пошуку обрізано: %(reason)s" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "" -"Довіру до %(domain)s втрачено. Будь ласка, відновіть її за допомогою команди " -"«ipa trust-add»." - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "Записи DNS вузла %(host)s не вдалося вилучити. (%(reason)s)" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" -"Правила переспрямовування конфліктують із деякими автоматично порожніми " -"зонами. Запити для зон, вказаних на основі RFC 6303, ігноруватимуть " -"переспрямовування і завжди призводитимуть до відповідей NXDOMAIN. Щоб " -"перевизначити цю поведінку, скористайтеся правилами переспрямовування «only»." - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "" -"Спроба оновлення запису системи «%(record)s» зазнала невдачі. Повідомлення " -"про помилку: %(error)s" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "" -"IPA не керує зоною %(zone)s. Будь ласка, додайте запис на вашому сервері DNS " -"вручну" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "" -"Спроба автоматичного оновлення записів системи DNS зазнала невдачі. Будь " -"ласка, повторно запустіть оновлення записів системи вручну, щоб отримати " -"список пропущених записів." - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "" -"Для застосування змін у налаштуваннях службу %(service)s на сервері IPA " -"%(server)s слід перезапустити." - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" -"Немає серверів DNS на місці IPA %(location)s. Без серверів DNS місце не " -"працюватиме як слід." - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "%(subject)s: помилкове форматування сертифіката. %(reason)s" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" -"Запис вузла було додано, але спроба оновлення DNS зазнала невдачі: %(reason)s" - -#, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "Сертифікат %(ca)s на цьому сервері не доступний." - -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d змінних" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "завантажено %(count)d додаток" -msgstr[1] "завантажено %(count)d додатки" -msgstr[2] "завантажено %(count)d додатків" - -msgid "A dictionary representing an LDAP entry" -msgstr "Словник, що відповідає запису LDAP" - -msgid "A list of LDAP entries" -msgstr "Список записів LDAP" - -msgid "All commands should at least have a result" -msgstr "Виконання всіх команд має призводити до якогось результату" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "Введіть %(label)s ще раз для перевірки: " - -msgid "Passwords do not match!" -msgstr "Паролі не збігаються!" - -msgid "No matching entries found" -msgstr "Відповідних записів не знайдено" - -msgid "Topic or Command" -msgstr "Тема або команда" - -msgid "The topic or command name." -msgstr "Назва теми або команди." - -msgid "Topic commands:" -msgstr "Команди теми:" - -msgid "To get command help, use:" -msgstr "Щоб отримати довідку щодо команди, скористайтеся такою командою:" - -msgid " ipa --help" -msgstr " ipa <команда> --help" - -msgid "Command name" -msgstr "Назва команди" - -msgid "Positional arguments" -msgstr "Обов’язкові аргументи" - -#, python-format -msgid "Same as --%s" -msgstr "Те саме, що і --%s" - -msgid "Deprecated options" -msgstr "Застарілі параметри" - -msgid "No file to read" -msgstr "Немає файла для читання" - -msgid "Results are truncated, try a more specific search" -msgstr "" -"Список результатів обрізано. Спробуйте точніше визначити критерії пошуку." - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "Невідомий параметр: %(option)s" - -msgid "Client version. Used to determine if server will accept request." -msgstr "" -"Версія клієнта. Використовується для визначення, якщо сервер приймає запит." - -#, python-format -msgid "%(filename)s: file not found" -msgstr "%(filename)s: файл не знайдено" - -#, python-brace-format -msgid "Unable to parse option {item}" -msgstr "Не вдалося обробити параметр {item}" - -msgid "any of the configured servers" -msgstr "будь-який з налаштованих серверів" - -msgid "Exceeded number of tries to forward a request." -msgstr "Перевищено кількість спроб переспрямовування запиту." - -msgid "Filename is empty" -msgstr "Порожня назва файла" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "Доступ заборонено: %(file)s" - -msgid "empty DNS label" -msgstr "порожня мітка DNS" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "Довжина мітки DNS не повинна перевищувати 63 символи" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "" -"можна використовувати лише літери, цифри, %(chars)s. Символ %(chars2)s не " -"повинен бути першим або останнім символом мітки DNS." - -msgid "single label {}s are not supported" -msgstr "підтримки одинарних міток {}ів не передбачено" - -msgid "too many '@' characters" -msgstr "занадто багато символів «@»" - -msgid "cannot be longer that {} characters" -msgstr "не може бути довшим за {}" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "назва вузла містить лише порожню мітку (послідовні крапки)" - -msgid "not fully qualified" -msgstr "вказано не повністю" - -msgid "invalid SSH public key" -msgstr "некоректний відкритий ключ SSH" - -msgid "options are not allowed" -msgstr "не можна використовувати параметри" - -msgid "invalid hostmask" -msgstr "некоректна маска вузлів" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "запит «%(owner)s %(rtype)s»: %(error)s" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "запит «%(owner)s %(rtype)s» за допомогою EDNS0: %(error)s" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "" -"відповідь на запит «%(owner)s %(rtype)s» не містить підписів DNSSEC (немає " -"даних RRSIG)" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "" -"запис «%(owner)s %(rtype)s» не пройшов перевірки DNSSEC на сервері %(ip)s" - -msgid "invalid escape code in domain name" -msgstr "некоректний керівний код у назві домену" - -msgid "domain name cannot be longer than 255 characters" -msgstr "назва домену не повинна перевищувати за довжиною 255 символів" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "Довжина мітки DNS не повинна перевищувати 63 символів" - -msgid "invalid domain name" -msgstr "некоректна назва домену" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "назву домену «%(domain)s» слід нормалізувати до %(normalized)s" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "некоректна назва домену: %s" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "" -"некоректна версія IP-адреси (маємо: %(value)d, має бути: %(required_value)d)!" - -msgid "invalid IP address format" -msgstr "некоректний формат запису IP-адреси" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "%(port)s не є чинним портом" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "" -"має бути надано принаймні одне значення, що є рівним канонічній назві " -"реєстраційного запису" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "" -"область або суфікс UPN перекриваються із простором назв довіреного домену" - -msgid "incorrect type" -msgstr "помилковий тип" - -msgid "Only one value is allowed" -msgstr "Можна використовувати лише одне значення" - -msgid "this option is deprecated" -msgstr "цей параметр вважається застарілим" - -msgid "must be True or False" -msgstr "має дорівнювати True або False" - -msgid "must be an integer" -msgstr "має бути цілим числом" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "має бути числом, не меншим за %(minvalue)d" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "не може перевищувати %(maxvalue)d" - -msgid "must be a decimal number" -msgstr "має бути десятковим числом" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "має бути принаймні %(minvalue)s" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "не може перевищувати %(maxvalue)s" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "" -"числовий клас «%(cls)s» не включено до списку дозволених числових класів: " -"%(allowed)s" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "має відповідати шаблону «%(pattern)s»" - -msgid "must be binary data" -msgstr "має бути бінарними даними" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "має бути розміром, не менше за %(minlength)d байтів" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "не повинне перевищувати за розміром %(maxlength)d байтів" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "має бути розміром точно у %(length)d байтів" - -msgid "must be a certificate" -msgstr "має бути сертифікатом" - -msgid "must be a certificate signing request" -msgstr "має бути запитом щодо підписування сертифіката" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "" -"Помилка під час декодування запиту на підписування сертифіката (CSR): %s" - -msgid "must be Unicode text" -msgstr "має бути текстом у Unicode" - -msgid "Leading and trailing spaces are not allowed" -msgstr "Використання пробілів на початку і у кінці заборонено" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "має бути не меншим за %(minlength)d символів довжиною" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "не повинне перевищувати %(maxlength)d символів у довжину" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "має бути точно %(length)d символів у довжину" - -#, python-format -msgid "The character %(char)r is not allowed." -msgstr "Не можна використовувати символ %(char)r." - -#, python-format -msgid "must be '%(value)s'" -msgstr "має бути «%(value)s»" - -#, python-format -msgid "must be one of %(values)s" -msgstr "має бути одним з таких значень: %(values)s" - -msgid "must be datetime value" -msgstr "має бути значенням дати і часу" - -msgid "does not match any of accepted formats: " -msgstr "не відповідає жодному з прийнятних форматів: " - -msgid "incomplete time value" -msgstr "неповне часове значення" - -msgid "must be DNS name" -msgstr "має бути назвою DNS" - -msgid "must be absolute" -msgstr "має бути абсолютною" - -msgid "must be relative" -msgstr "має бути відносною" - -msgid "must be dictionary" -msgstr "має бути словником" - -msgid "must be Kerberos principal" -msgstr "має бути реєстраційним записом Kerberos" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "Помилкове форматування реєстраційного запису: «%(value)s»" - -msgid "Service principal is required" -msgstr "Слід вказати реєстраційний запис служби" - -msgid "must be at least 0" -msgstr "має бути принаймні 0" - -msgid "invalid valid hex" -msgstr "некоректне шістнадцяткове значення" - -msgid "invalid serial number 0" -msgstr "некоректний серійний номер 0" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "Спроба отримання ланцюжка сертифікації CA зазнала невдачі: %s" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "помилка запиту зі станом HTTP %d" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "" -"Спроба отримання даних щодо стану служби сертифікації зазнала невдачі: %s" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "Спроба отримання стану CA зазнала невдачі, стан %d" - -#, python-format -msgid "objectclass %s not found" -msgstr "клас об’єктів %s не знайдено" - -msgid "Trusting forest" -msgstr "«Ліс» довіри" - -msgid "Trusted forest" -msgstr "Довірений «ліс»" - -msgid "Established and verified" -msgstr "Встановлено і перевірено" - -msgid "Waiting for confirmation by remote side" -msgstr "Очікуємо на підтвердження з віддаленого боку" - -msgid "Unknown" -msgstr "Невідомо" - -msgid "Non-Active Directory domain" -msgstr "Домен не-Active Directory" - -msgid "Active Directory domain" -msgstr "Домен Active Directory" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "Область Kerberos, сумісна з RFC4120" - -msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "Неперехідна зовнішня довіра до домену у іншому лісі Active Directory" - -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "Неперехідна зовнішня довіра до сумісної із RFC4120 області Kerberos" - -msgid "Failed to authenticate to CA REST API" -msgstr "" -"Не вдалося пройти розпізнавання за допомогою програмного інтерфейсу CA REST" - -#, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "Не вдалося обмінятися даними з CMS (стан %d)" - -#, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "Не знайдено угоди щодо реплікації для %(hostname)s" - -msgid "automount location" -msgstr "запис автомонтування" - -msgid "automount locations" -msgstr "записи автомонтування" - -msgid "Automount Locations" -msgstr "Записи автомонтування" - -msgid "Automount Location" -msgstr "Запис автомонтування" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "Додано місце автоматичного монтування «%(value)s»" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "Вилучено місце автоматичного монтування «%(value)s»" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "встановлено відповідність %(count)d місця автоматичного монтування" -msgstr[1] "встановлено відповідність %(count)d місця автоматичного монтування" -msgstr[2] "встановлено відповідність %(count)d місць автоматичного монтування" - -msgid "automount map" -msgstr "карта автомонтування" - -msgid "automount maps" -msgstr "карти автоматичного монтування" - -msgid "Automount Maps" -msgstr "Карти автоматичного монтування" - -msgid "Automount Map" -msgstr "Карта автомонтування" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "Додано карту автоматичного монтування «%(value)s»" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "Вилучено карту автоматичного монтування «%(value)s»" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "Змінено карту автоматичного монтування «%(value)s»" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "встановлено відповідність %(count)d карти автоматичного монтування" -msgstr[1] "встановлено відповідність %(count)d карти автоматичного монтування" -msgstr[2] "встановлено відповідність %(count)d карт автоматичного монтування" - -msgid "Automount key object." -msgstr "Об’єкт ключа автоматичного монтування." - -msgid "automount key" -msgstr "ключ автомонтування" - -msgid "automount keys" -msgstr "ключі автомонтування" - -msgid "Automount Keys" -msgstr "Ключі автомонтування" - -msgid "Automount Key" -msgstr "Ключ автомонтування" - -#, python-format -msgid "" -"The key,info pair must be unique. A key named %(key)s with info %(info)s " -"already exists" -msgstr "" -"Пара ключ,інформація має бути унікальною. Ключ з назвою %(key)s та " -"інформацією %(info)s вже існує." - -#, python-format -msgid "key named %(key)s already exists" -msgstr "ключ з назвою %(key)s вже існує" - -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "Ключа автоматичного монтування %(key)s з інформацією %(info)s не існує" - -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "" -"Знайдено декілька записів ключів %(key)s, скористайтеся --info для вибору " -"певного запису." - -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "Додано ключ автоматичного монтування «%(value)s»" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "Додано опосередковану карту автоматичного монтування «%(value)s»" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "" -"точка монтування вказується відносно батьківської картки, її запис не може " -"починатися з «/»" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "Вилучено ключ автоматичного монтування «%(value)s»" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "Змінено ключ автоматичного монтування «%(value)s»" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "встановлено відповідність %(count)d ключа автоматичного монтування" -msgstr[1] "встановлено відповідність %(count)d ключі автоматичного монтування" -msgstr[2] "встановлено відповідність %(count)d ключів автоматичного монтування" - -msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" -"\n" -"Керування профілями сертифікатів\n" -"\n" -"Профілі сертифікатів використовуються службами сертифікації (CA) під час\n" -"підписування сертифікатів для визначення того, чи є прийнятним запит на\n" -"підписування сертифіката (CSR), і, якщо це так, визначення можливостей\n" -"і розширень, які буде надано сертифікатом.\n" -"\n" -"Форматом профілю сертифікатів є список значень, які може обробляти\n" -"Dogtag або система сертифікації служби сертифікації Red Hat.\n" -"\n" -"СИНТАКСИС ІДЕНТИФІКАТОРА ПРОФІЛЮ:\n" -"\n" -"Ідентифікатор профілю — рядок без пробілів і символів пунктуації,\n" -"що починається з літери і складається з послідовності літер, цифр, та " -"символів підкреслювання («_»).\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Імпортувати профіль, у якому не зберігатимуться видані сертифікати:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --summary \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Вилучити профіль сертифікатів:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Показати дані щодо профілю:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Зберегти налаштування профілю до файла:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Шукати профілі, у яких не зберігаються сертифікати:\n" -" ipa certprofile-find --store=false\n" -"\n" -"ФОРМАТ НАЛАШТУВАНЬ ПРОФІЛЮ:\n" -"\n" -"Налаштування профілю зберігаються у вигляді простого списку\n" -"властивостей, що використовується системою сертифікації Dogtag.\n" -"Підтримки формату XML не передбачено.\n" -"\n" -"Профілів, які керуються IPA, стосуються такі обмеження:\n" -"\n" -"- Під час імпортування профілю поле «profileId», якщо таке є, має\n" -" містити значення, що збігається з ідентифікатором, вказаним у рядку " -"команди.\n" -"\n" -"- Значенням поля «classId» має бути «caEnrollImpl»\n" -"\n" -"- Значенням поля «auth.instance_id» має бути «raCertAuth»\n" -"\n" -"- Має бути використано вхідний клас «certReqInputImpl» і вихідний\n" -" клас «certOutputImpl».\n" -"\n" - -msgid "CA is not configured" -msgstr "CA не налаштовано" - -msgid "invalid Profile ID" -msgstr "некоректний ідентифікатор профілю" - -msgid "Certificate Profile" -msgstr "Профіль сертифікатів" - -msgid "Certificate Profiles" -msgstr "Профілі сертифікатів" - -msgid "Profile configuration" -msgstr "Налаштування профілю" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "встановлено відповідність %(count)d профілю" -msgstr[1] "встановлено відповідність %(count)d профілів" -msgstr[2] "встановлено відповідність %(count)d профілів" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "Імпортовано профіль «%(value)s»" - -#, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "У даних профілю profileId вказано декілька разів: %(values)s" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "" -"Ідентифікатор профілю, «%(cli_value)s», не збігається із вказаним у даних " -"профілю, «%(file_value)s»" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "Вилучено профіль «%(value)s»" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "Стандартний профіль «%(profile_id)s» не може бути вилучено" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "Змінено профіль сертифікатів «%(value)s»" - -msgid "Certificate profiles cannot be renamed" -msgstr "Профілі сертифікатів не можна перейменовувати" - -msgid "Insufficient privilege to modify a certificate profile." -msgstr "Недостатні права доступу для внесення змін до профілю сертифікації." - -msgid "delegation" -msgstr "уповноваження" - -msgid "delegations" -msgstr "уповноваження" - -msgid "Delegations" -msgstr "Уповноваження" - -msgid "Delegation" -msgstr "Уповноваження" - -msgid "ACI" -msgstr "ACI" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "Додано уповноваження «%(value)s»" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "Вилучено уповноваження «%(value)s»" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "Змінено уповноваження «%(value)s»" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "встановлено відповідність %(count)d уповноваження" -msgstr[1] "встановлено відповідність %(count)d уповноваження" -msgstr[2] "встановлено відповідність %(count)d уповноважень" - -msgid "" -"\n" -"DNS server configuration\n" -msgstr "" -"\n" -"Налаштування сервера DNS\n" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" -"\n" -"Керування налаштуваннями сервера DNS\n" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" -"\n" -" Показати налаштування певного сервера DNS:\n" -" ipa dnsserver-show\n" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" -"\n" -" Оновити налаштування для вказаного сервера DNS:\n" -" ipa dnsserver-mod\n" - -msgid "DNS server" -msgstr "Сервер DNS" - -msgid "DNS servers" -msgstr "Сервери DNS" - -msgid "DNS Servers" -msgstr "Сервери DNS" - -msgid "DNS Server" -msgstr "Сервер DNS" - -msgid "DNS Server name" -msgstr "Назва сервера DNS" - -msgid "SOA mname override" -msgstr "Перевизначення mname SOA" - -msgid "SOA mname (authoritative server) override" -msgstr "Перевизначити mname SOA (довірений сервер)" - -msgid "Forwarders" -msgstr "Переспрямовувачі" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Окремі переспрямовувачі для серверів. Нетиповий порт можна вказати для " -"кожного переспрямовувача за допомогою стандартної конструкції «IP_АДРЕСА " -"port ПОРТ»" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" -"Умовні правила переспрямування для окремого сервера. Встановіть значення " -"«none» для вимикання переспрямовувача загального рівня для цієї зони. Якщо " -"ви встановите це значення, умовні переспрямовувачі зони не братимуться до " -"уваги." - -msgid "DNS is not configured" -msgstr "DNS не налаштовано" - -msgid "Modify DNS server configuration" -msgstr "Змінити налаштування сервера DNS" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "Змінено запис сервера DNS «%(value)s»" - -msgid "Search for DNS servers." -msgstr "Шукати сервери DNS." - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "встановлено відповідність %(count)d сервера DNS" -msgstr[1] "встановлено відповідність %(count)d серверів DNS" -msgstr[2] "встановлено відповідність %(count)d серверів DNS" - -msgid "IPA DNS Server is not installed" -msgstr "Сервер DNS IPA не встановлено" - -msgid "Display configuration of a DNS server." -msgstr "Показати налаштування сервера DNS." - -msgid "Add a new DNS server." -msgstr "Додати новий запис сервера DNS." - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "Додано новий запис сервера DNS «%(value)s»" - -msgid "Delete a DNS server" -msgstr "Вилучити запис сервера DNS" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "Вилучено сервер DNS «%(value)s»" - -#, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "" -"Рівень домену не може бути піднято до {0}, слід розв’язати наявні конфлікти " -"реплікації." - -msgid "Server does not support domain level functionality" -msgstr "" -"На сервері не передбачено підтримки функціональних можливостей рівня домену" - -msgid "Domain Level cannot be lowered." -msgstr "Не можна знижувати рівень домену." - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "" -"Не можна підняти рівень домену до {0}, оскільки на сервері {1} не " -"передбачено підтримки такого рівня." - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" -"\n" -"Групи користувачів\n" -"\n" -"Керування групами користувачів, групами або службами. Типово нові групи є " -"групами POSIX. Ви можете\n" -"додати параметр --nonposix до команди group-add з метою позначення нової\n" -"групи як групи не-POSIX. Ви можете скористатися аргументом --posix команди " -"group-mod\n" -"для перетворення групи не-POSIX на групу POSIX. Групи POSIX не можна\n" -"перетворювати на групи не-POSIX.\n" -"\n" -"Кожна група повинна мати опис.\n" -"\n" -"Групи POSIX повинні мати номер ідентифікатора групи (GID). Передбачено " -"підтримку\n" -"зміни GID, але ця зміна може вплинути на права доступу до ваших файлів. Для\n" -"створення групи слід вказати GID. IPA створить одну групу автоматично, якщо\n" -"таку не вказано.\n" -"\n" -"\n" -"Учасниками груп можуть бути користувачі, інші групи і служби Kerberos. У\n" -"середовищах POSIX як учасників груп можна бути бачити лише користувачів, " -"але\n" -"для керування у межах IPA може бути використано вкладені групи і групи\n" -"служб.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додавання нової групи:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Додавання нової групи не-POSIX:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Перетворити групу не-POSIX на групу posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Додати нову групу POSIX з вказаним ідентифікатором групи:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Додати нову групу POSIX і надати IPA змогу призначити ідентифікатор:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Вилучення групи:\n" -" ipa group-del unixadmins\n" -"\n" -" Додати групу \"remoteadmins\" до групи \"localadmins\":\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Додати список користувачів до групи \"localadmins\":\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Додавання служб Kerberos до групи «printer admins»:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Вилучення користувача з групи \"localadmins\":\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Показати інформацію щодо іменованої групи.\n" -" ipa group-show localadmins\n" -"\n" -"Керівниками учасників груп є користувачі або групи, які можуть додавати " -"учасників\n" -"до групи або вилучати учасників з групи.\n" -"\n" -" Дозволити користувачу «test2» додавати або вилучати учасників з групи " -"«localadmins»:\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Відкликати права керування учасниками для користувача «test2» з " -"«localadmins»:\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"Участь із зовнішніх груп створено для того, щоб уможливити прив’язку\n" -"користувачів з довірених доменів до локальних груп POSIX з метою\n" -"використання ресурсів IPA. Зовнішніх користувачів слід додавати до груп\n" -"які спеціально створено як зовнішні або групи не-POSIX. Таку групу\n" -"слід пізніше включити до одної з груп POSIX.\n" -"\n" -"У поточній версії учасник зовнішньої групи є ідентифікатором безпеки\n" -"(Security Identifier або SID) визначеним довіреним доменом. Додавання\n" -"учасників зовнішньої групи можна виконати у форматі SID, DOM\\ім’я або\n" -"ім’я@домен. IPA намагатиметься визначити за переданим іменем SID за\n" -"допомогою використання Загального каталогу довіреного домену.\n" -"\n" -"Приклад:\n" -"\n" -"1. Створити групу для прив’язки адміністраторів довіреного домену до\n" -"відповідної локальної групи POSIX:\n" -"\n" -" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc='<домен.ad> admins' ad_admins\n" -"\n" -"2. Додати ідентифікатор Domain Admins домену <домен.ad> до\n" -"групи ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Дозволити прив’язку групи ad_admins_external до групи POSIX ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Показати список зовнішніх учасників групи ad_admins_external, щоб " -"визначити\n" -"їхні SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" - -msgid "groups" -msgstr "групи" - -msgid "User Group" -msgstr "Група користувачів" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "Додано групу «%(value)s»" - -msgid "gid cannot be set for external group" -msgstr "Не можна встановлювати gid для зовнішньої групи" - -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "не можна використовувати атрибут «gidNumber» разом із --nonposix" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "Вилучено групу «%(value)s»" - -msgid "privileged group" -msgstr "привілейована група" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "Змінено групу «%(value)s»" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "встановлено відповідність %(count)d групи" -msgstr[1] "встановлено відповідність %(count)d груп" -msgstr[2] "встановлено відповідність %(count)d груп" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"Виконати дію з перевірки зовнішніх учасників без встановленої підтримки " -"Samba 4 неможливо. Переконайтеся, що вами встановлено на сервері підпакунок " -"IPA server-trust-ad." - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" -"Без налаштовування власного домену не можна виконувати дію з приєднання. " -"Спочатку запустіть ipa-adtrust-install на сервері IPA." - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "Від’єднати групу «%(value)s» від користувача «%(value)s»" - -msgid "not allowed to modify user entries" -msgstr "заборонено змінювати записи користувачів" - -msgid "not allowed to modify group entries" -msgstr "заборонено змінювати записи груп" - -msgid "Not a managed group" -msgstr "Не є керованою групою" - -msgid "Add users that can manage members of this group." -msgstr "Додати записи користувачів, які можуть керувати учасниками цієї групи." - -msgid "Remove users that can manage members of this group." -msgstr "" -"Вилучити записи користувачів, які можуть керувати учасниками цієї групи." - -msgid "Host-based access control commands" -msgstr "Команди керування доступом на основі вузлів" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" -"\n" -"Служби HBAC\n" -"\n" -"Служби PAM, якими може керувати HBAC. Назва, використана тут, має\n" -"відповідати назві служби, з якою працює PAM.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати нову службу HBAC:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Змінити вже створену службу HBAC:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Шукати служби HBAC. У нашому прикладі буде повернуто два результати\n" -" службу FTP і щойно додану службу tftp:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Вилучення служби HBAC:\n" -" ipa hbacsvc-del tftp\n" -"\n" - -msgid "HBAC services" -msgstr "Служби HBAC" - -msgid "HBAC Services" -msgstr "Служби HBAC" - -msgid "HBAC Service" -msgstr "Служба HBAC" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "Додано службу HBAC «%(value)s»" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "Вилучено службу HBAC «%(value)s»" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "Змінено службу HBAC «%(value)s»" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "встановлено відповідність %(count)d служби HBAC" -msgstr[1] "встановлено відповідність %(count)d служб HBAC" -msgstr[2] "встановлено відповідність %(count)d служб HBAC" - -msgid "HBAC service group" -msgstr "група служб HBAC" - -msgid "HBAC service groups" -msgstr "Група служб HBAC" - -msgid "HBAC Service Groups" -msgstr "Група служб HBAC" - -msgid "HBAC Service Group" -msgstr "Група служб HBAC" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "Додано групу служб HBAC «%(value)s»" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "Вилучено групу служб HBAC «%(value)s»" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "Змінено групу служб HBAC «%(value)s»" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "встановлено відповідність %(count)d групи служб HBAC" -msgstr[1] "встановлено відповідність %(count)d груп служб HBAC" -msgstr[2] "встановлено відповідність %(count)d груп служб HBAC" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" -"\n" -"Групи вузлів.\n" -"\n" -"Керування групами вузлів. Корисні для застосування керування\n" -"до декількох вузлів на основі заснованого на вузлах керування\n" -"доступом (Host-based Access Control або HBAC).\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" додавання нової групи вузлів:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Додавання нової групи вузлів:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Додавання учасників до групи вузлів з використанням виразу Bash у фігурних " -"дужках):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Додавання групи вузлів як учасника іншої групи вузлів:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Вилучення вузла з групи вузлів:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Показ списку групи вузлів:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Додавання керівника учасниками:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Вилучення керівника учасниками\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Вилучення групи вузлів:\n" -" ipa hostgroup-del baltimore\n" - -msgid "host groups" -msgstr "групи вузлів" - -msgid "Host Group" -msgstr "Група вузлів" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "Додано групу вузлів «%(value)s»" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"Мережеву групу з назвою «%s» вже створено. Групи вузлів і мережеві групи " -"мають спільний простір назв." - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "Вилучено групу вузлів «%(value)s»" - -msgid "hostgroup" -msgstr "група вузлів" - -msgid "privileged hostgroup" -msgstr "привілейована група вузлів" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "Змінено групу вузлів «%(value)s»" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "встановлено відповідність %(count)d групи вузлів" -msgstr[1] "встановлено відповідність %(count)d груп вузлів" -msgstr[2] "встановлено відповідність %(count)d груп вузлів" - -msgid "Add users that can manage members of this hostgroup." -msgstr "" -"Додати записи користувачів, які можуть керувати учасниками цієї групи вузлів." - -msgid "Remove users that can manage members of this hostgroup." -msgstr "" -"Вилучити записи користувачів, які можуть керувати учасниками цієї групи " -"вузлів." - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" -"=======\n" -"ПОПЕРЕДЖЕННЯ:\n" -"\n" -"Додаток DNA у 389-ds розподілятиме ідентифікатори на основі діапазонів,\n" -"налаштованих для локального домену. У поточній версії додаток DNA *не може*\n" -"переналаштуватися на основі локальних діапазонів, встановлених цим\n" -"сімейством команд.\n" -"\n" -"Для використання нового локального діапазону до налаштувань додатка DNA\n" -"слід внести зміни вручну. Зокрема, слід змінити атрибут dnaNextRange " -"'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' так, щоб\n" -"він відповідав новому діапазону.\n" -"=======\n" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" -"\n" -"Діапазони ідентифікаторів\n" -"\n" -"Керування діапазонами ідентифікаторів, використаних для відображення\n" -"ідентифікаторів POSIX на SID, і навпаки.\n" -"\n" -"За допомогою цієї програми можна керувати обома типами діапазонів " -"ідентифікаторів:\n" -"\n" -" - діапазони ідентифікаторів локального домену\n" -" - діапазони ідентифікаторів довірених віддалених доменів\n" -"\n" -"Обидва типи мають такі спільні атрибути:\n" -"\n" -" - base-id: перший ідентифікатор діапазону ідентифікаторів POSIX\n" -" - range-size: розмір діапазону\n" -"\n" -"На основі цих двох атрибутів об’єкт діапазону може зарезервувати " -"ідентифікатори\n" -"POSIX, починаючи з base-id аж до, але не включно, base-id+range-size.\n" -"\n" -"Крім того, можна встановити діапазон ідентифікаторів локального домену\n" -" - rid-base: перший RID(*) відповідного діапазону RID\n" -" - secondary-rid-base: перший RID вторинного діапазону RID\n" -"\n" -"а діапазон ідентифікаторів довіреного домену слід задавати за допомогою\n" -" - rid-base: перший RID відповідного діапазону RID\n" -" - dom_sid: SID довіреного домену\n" -"\n" -"також можна встановити діапазон ідентифікаторів довіреного домену\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"ПРИКЛАД: додавання нового діапазону ідентифікаторів для довіреного домену\n" -"\n" -"Оскільки може бути декілька довірених доменів, під час створення діапазону\n" -"ідентифікаторів слід вказати SID домену.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"Цей діапазон ідентифікаторів потім використовуватиметься сервером IPA\n" -"та надавачем даних IPA SSSD для призначення UID Posix користувачам з\n" -"довіреного домену.\n" -"\n" -"Якщо, наприклад, налаштовано діапазон для довіреного домену з такими\n" -"значеннями:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"RID від 0 до 199999 прив’язуються до ідентифікаторів Posix від 1200000 до\n" -"13999999. Отже RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"ПРИКЛАД: додавання нового діапазону ідентифікаторів до локального домену\n" -"\n" -"Щоб створити діапазон ідентифікаторів для локального домену не потрібно\n" -"вказувати SID домену. Але оскільки можливий конфлікт між ідентифікаторами\n" -"користувача і групи та ідентифікаторами POSIX, потрібен вторинний інтервал\n" -"RID.\n" -"\n" -" ipa range-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"Дані з діапазонів ідентифікаторів локального домену використовуються\n" -"сервером IPA на внутрішньому рівні для призначення SID користувачам і " -"групам\n" -"IPA. SID буде збережено у об’єктах користувача або групи.\n" -"\n" -"Якщо, наприклад, для діапазону ідентифікаторів локального домену визначено\n" -"значення з наведеного вище прикладу, новий користувач з UID 1200007 отримає\n" -"RID 1007. Якщо цей RID вже буде використано групою, його буде змінено на " -"1000007.\n" -"Таке може трапитися лише, якщо об’єкт користувача або групи було створено з\n" -"фіксованим ідентифікатором, оскільки у разі автоматичного призначення один\n" -"ідентифікатор не може бути призначено двічі. Оскільки спільний простір назв\n" -"є лише у користувачів і груп, достатньо одного резервного діапазону для\n" -"того, щоб повністю позбутися конфліктів.\n" -"\n" -"Для визначення ідентифікатора POSIX за вказаним RID з локального домену " -"слід\n" -"спочатку перевірити, чи потрапляє RID у основний або вторинний діапазон " -"RID,\n" -"також, щоб отримати ідентифікатор POSIX, слід відняти від ідентифікатор rid-" -"base\n" -"або secondary-rid-base, відповідно, і додати base-id.\n" -"\n" -"Типово, створення діапазонів ідентифікаторів є зовні непомітним і потреби у\n" -"цьому інтерфейсі командного рядка не виникає. Діапазон ідентифікаторів\n" -"для локального домену буде створено під час встановлення або оновлення\n" -"попередньої версії. Діапазон ідентифікаторів для довіреного домену буде\n" -"створено разом з записом довіри командою «ipa trust-add ...».\n" -"Нижче наведено можливі випадки використання цього командного інтерфейсу.\n" -"\n" -"ВИПАДКИ ВИКОРИСТАННЯ:\n" -"\n" -" Додавання діапазону ідентифікаторів з перехідного довіреного домену\n" -"\n" -" Якщо довірений домен (A) довіряється іншому домену (B) і цей запис\n" -" довіри є перехідним, «ipa trust-add домен-A» створить лише діапазон\n" -" для домену A. Діапазон ідентифікаторів домену B має бути додано вручну.\n" -"\n" -" Додавання додаткового діапазону ідентифікаторів для локального домену\n" -"\n" -" Якщо діапазон ідентифікаторів локального домену вичерпано, тобто " -"додатком\n" -" DNA не може бути призначено нові ідентифікатори користувачам або групам\n" -" POSIX, має бути створено новий діапазон для додавання нових " -"користувачів\n" -" та груп. (У поточній версії між цим командним інтерфейсом і додатком " -"DNA\n" -" немає безпосереднього зв’язку, але у майбутній версії може бути " -"передбачено\n" -" можливість внесення змін і до налаштувань додатка DNS.)\n" -"\n" -"Загалом, потреби у зміні або вилученні діапазонів ідентифікаторів немає.\n" -"Якщо немає іншого виходу, окрім внесення змін або вилучення діапазону\n" -"ідентифікаторів, робити це слід дуже обережно. Оскільки UID зберігаються у\n" -"файловій системі і використовуються для керування доступом, можлива " -"ситуація,\n" -"коли одні користувачі отримуватимуть доступ до файлів інших користувачів\n" -"у разі вилучення діапазону ідентифікаторів і повторного його використання\n" -"у іншому домені.\n" -"\n" -"(*) RID типово є останнім цілим числом SID користувача або групи, перед " -"якими\n" -"має бути вказано SID домену. Наприклад, якщо SID домену " -"S-1-5-21-123-456-789, а\n" -"користувач з цього домену має SID S-1-5-21-123-456-789-1010, RID " -"користувача\n" -"буде 1010. RID є унікальними в межах домену, є 32-бітовими значенням і\n" -"використовуються для користувачів і груп.\n" -"\n" - -msgid "ID Ranges" -msgstr "Діапазони ідентифікаторів" - -msgid "ID Range" -msgstr "Діапазон ідентифікаторів" - -msgid "local domain range" -msgstr "локальний діапазон доменів" - -msgid "Active Directory domain range" -msgstr "Діапазон доменів Active Directory" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "Діапазон довіри Active Directory з атрибутами POSIX" - -msgid "ID range type, one of allowed values" -msgstr "Тип діапазону ідентифікаторів, одне з дозволених значень" - -msgid "Auto private groups" -msgstr "Автоматичні приватні групи" - -msgid "Auto creation of private groups, one of allowed values" -msgstr "Автоматичне створення приватних груп, одне з дозволених значень" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "" -"не можна виконувати зміни діапазону, у результаті яких виникають об’єкти з " -"ідентифікаторами поза визначеним діапазоном" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"Виконати дію з перевірки SID без встановленої підтримки Samba 4 неможливо. " -"Переконайтеся, що вами встановлено на сервері підпакунок IPA server-trust-ad." - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" -"Зв’язки довіри між областями не налаштовано. Спочатку запустіть ipa-adtrust-" -"install на сервері IPA." - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "SID не розпізнано як чинний SID для довіреного домену" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" -"\n" -" Додати новий діапазон ідентифікаторів.\n" -"\n" -" Щоб додати новий діапазон ідентифікаторів, вам слід завжди вказати\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Крім того, можна вказати\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" для нового діапазону ідентифікаторів для локального домену, а\n" -"\n" -" --auto-private-groups\n" -"\n" -" може бути вказано для створення діапазону ідентифікаторів для довіреного " -"домену AD і\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" слід вказати для додавання нового діапазону для довіреного домену AD.\n" -"\n" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "Додано діапазон ідентифікаторів «%(value)s»" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "Параметри dom-sid і dom-name не можна використовувати разом" - -msgid "Specified trusted domain name could not be found." -msgstr "Не вдалося знайти назву вказаного довіреного домену." - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "Параметри dom-sid/dom-name і rid-base слід використовувати разом" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "" -"Параметр rid-base не слід використовувати, якщо типом діапазону IPA є ipa-ad-" -"trust-posix" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" -"Якщо вказано SID довіреного домену, типом діапазону IPA має бути ipa-ad-" -"trust або ipa-ad-trust-posix" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "" -"Параметри dom-sid/dom-name і secondary-rid-base не можна використовувати " -"разом" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" -"Якщо не вказано SID довіреного домену, типом діапазону IPA не може бути ipa-" -"ad-trust або ipa-ad-trust-posix." - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" -"Якщо вказано auto-private-groups, типом діапазону IPA має бути ipa-ad-trust " -"або ipa-ad-trust-posix" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "Параметри secondary-rid-base і rid-base слід використовувати разом" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "" -"Основний діапазон RID і вторинний діапазон RID не повинні перекриватися" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" -"Вам слід вказати обидва параметри, rid-base і secondary-rid-base, оскільки " -"вже запущено ipa-adtrust-install." - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "Вилучено діапазон ідентифікаторів «%(value)s»" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "встановлено відповідність %(count)d діапазону" -msgstr[1] "встановлено відповідність %(count)d діапазонів" -msgstr[2] "встановлено відповідність %(count)d діапазонів" - -msgid "" -"Modify ID range.\n" -"\n" -msgstr "" -"Змінити діапазон ідентифікаторів.\n" -"\n" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "Змінено діапазон ідентифікаторів «%(value)s»" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" -"Цією командою не можна скористатися для зміни розподілу ідентифікаторів для " -"локального домену IPA. Щоб дізнатися більше, скористайтеся командою «ipa " -"help idrange»." - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "" -"Не вдалося знайти SID для вказаного довіреного домену. Будь ласка, вкажіть " -"SID безпосередньо за допомогою параметра dom-sid." - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "Параметри dom-sid і secondary-rid-base не можна використовувати разом" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "Параметри dom-sid і rid-base слід використовувати разом" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "" -"Недостатні привілеї «write» до атрибута «krbLastPwdChange» запису «%s»." - -msgid "" -"\n" -"IPA locations\n" -msgstr "" -"\n" -"Місця IPA\n" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" -"\n" -"Робота з місцями DNS\n" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" -"\n" -" Знайти усі місця:\n" -" ipa location-find\n" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" -"\n" -" Показати певне місце:\n" -" ipa location-show location\n" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" -"\n" -" Додати запис місця:\n" -" ipa location-add location --description 'My location'\n" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" -"\n" -" Вилучити запис місця:\n" -" ipa location-del location\n" - -msgid "location" -msgstr "місце" - -msgid "locations" -msgstr "місця" - -msgid "IPA Locations" -msgstr "Місця IPA" - -msgid "IPA Location" -msgstr "Місце IPA" - -msgid "Location name" -msgstr "Назва місця" - -msgid "IPA location name" -msgstr "Назва місця IPA" - -msgid "IPA Location description" -msgstr "Опис місця IPA" - -msgid "Servers" -msgstr "Сервери" - -msgid "Servers that belongs to the IPA location" -msgstr "Сервери, що належать до запису місця IPA" - -msgid "Advertised by servers" -msgstr "Повідомлено серверами" - -msgid "List of servers which advertise the given location" -msgstr "Вивести список серверів, які повідомляють про вказане місце" - -msgid "Add a new IPA location." -msgstr "Додати новий запис місця IPA." - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "Додано запис місця IPA «%(value)s»" - -msgid "Delete an IPA location." -msgstr "Вилучити місце IPA." - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "Вилучено запис місця IPA «%(value)s»" - -msgid "IPA Server" -msgstr "Сервер IPA" - -msgid "Modify information about an IPA location." -msgstr "Змінити дані щодо місця IPA." - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "Змінено запис місця IPA «%(value)s»" - -msgid "Search for IPA locations." -msgstr "Шукати місця IPA." - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "встановлено відповідність %(count)d місця IPA" -msgstr[1] "встановлено відповідність %(count)d місць IPA" -msgstr[2] "встановлено відповідність %(count)d місць IPA" - -msgid "Display information about an IPA location." -msgstr "Показати дані щодо місця IPA." - -msgid "Servers in location" -msgstr "Сервери у місці" - -msgid "netgroups" -msgstr "мережеві групи" - -msgid "Netgroups" -msgstr "Мережеві групи" - -msgid "Netgroup" -msgstr "Мережева група" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "Додано групу мережеву групу «%(value)s»" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "" -"Групу вузлів з назвою «%s» вже створено. Групи вузлів і мережеві групи мають " -"спільний простір назв." - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "Вилучено мережеву групу «%(value)s»" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "Змінено мережеву групу «%(value)s»" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "" -"не можна встановлювати для категорії користувачів значення «all», доки є " -"записи дозволених користувачів" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "" -"не можна встановлювати для категорії вузлів значення «all», доки є записи " -"дозволених вузлів" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "встановлено відповідність %(count)d групи" -msgstr[1] "встановлено відповідність %(count)d груп" -msgstr[2] "встановлено відповідність %(count)d груп" - -msgid "One time password commands" -msgstr "Команди для одноразового пароля" - -msgid "OTP configuration options" -msgstr "Параметри налаштування OTP" - -msgid "OTP Configuration" -msgstr "Налаштування OTP" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" -"\n" -"Жетони OTP\n" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" -"\n" -"Керування жетонами OTP.\n" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" -"\n" -"У IPA передбачено підтримку використання жетонів OTP для багатофакторного " -"розпізнавання.\n" -"За допомогою цього коду уможливлюється керування жетонами OTP.\n" - -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" -"\n" -" Додати новий жетон:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" -"\n" -" Перевірити жетон:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" -"\n" -" Змінити постачальника:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" -"\n" -" Вилучити жетон:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" - -msgid "OTP token" -msgstr "Жетон OTP" - -msgid "OTP tokens" -msgstr "Жетони OTP" - -msgid "OTP Tokens" -msgstr "Жетони OTP" - -msgid "OTP Token" -msgstr "Жетон OTP" - -msgid "URI" -msgstr "URI" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "Додано жетон OTP «%(value)s»" - -msgid "cannot be empty" -msgstr "не може бути порожнім" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "Вилучено жетон OTP «%(value)s»" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "Змінено жетон OTP «%(value)s»" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "встановлено відповідність %(count)d жетона OTP" -msgstr[1] "встановлено відповідність %(count)d жетони OTP" -msgstr[2] "встановлено відповідність %(count)d жетонів OTP" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" -"\n" -"Встановлення пароля користувача\n" -"\n" -"Якщо якась стороння особа змінює пароль користувача (наприклад його\n" -"відновлює допоміжний персонал), новий пароль має бути змінено під\n" -"час його першого використання. Метою такого способу дій є забезпечення\n" -"ситуації, коли пароль буде відомий лише тому, хто ним користується.\n" -"\n" -"Правила щодо паролів IPA керують частотою зміни пароля, вимогами щодо\n" -"складності пароля та об’ємом журналу зміни паролів.\n" -"\n" -"Якщо встановлено спосіб розпізнавання пароль+OTP, користувач має\n" -"передати параметри --otp при скиданні пароля.\n" +"Будь ласка, зауважте, що виконувати hbactest з аргументом користувача\n" +"довіреного домену у параметрі --user можуть виконувати лише учасники\n" +"групи «trust admins».\n" "\n" "ПРИКЛАД:\n" "\n" -"Щоб скинувати ваш власний пароль, віддайте таку команду:\n" -" ipa passwd\n" -"\n" -"Щоб скинути ваш пароль, якщо встановлено спосіб розпізнавання пароль+OTP, " -"віддайте команду\n" -" ipa passwd --otp\n" -"\n" -" Щоб змінити пароль іншого користувача, виконайте команду:\n" -" ipa passwd tuser1\n" - -msgid "The OTP if the user has a token configured" -msgstr "OTP, якщо користувач має налаштований жетон" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "Змінити пароль «%(value)s»" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" -"\n" -"Засоби звітування щодо стану можливості PKINIT Kerberos\n" -"\n" -"Звітування щодо того, увімкнено чи вимкнено PKINIT у Kerberos на основних " -"елементах IPA\n" -"\n" -"ПРИКЛАДИ:\n" -" Вивести список станів PKINIT для усіх основних елементів:\n" -" ipa pkinit-status\n" -"\n" -" Перевірити стан PKINIT на «ipa.example.com»:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" Вивести список усіх основних елементів IPA із вимкненим PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"Докладніші дані щодо підтримки PKINIT:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" - -msgid "pkinit" -msgstr "pkinit" - -msgid "PKINIT" -msgstr "PKINIT" - -msgid "PKINIT status" -msgstr "стан PKINIT" - -msgid "Whether PKINIT is enabled or disabled" -msgstr "Визначає, увімкнено чи вимкнено PKINIT" - -msgid "Report PKINIT status on the IPA masters" -msgstr "Звіт щодо стану PKINIT на основних елементах IPA" - -#, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "Встановлено відповідність %(count)s сервера" -msgstr[1] "Встановлено відповідність %(count)s серверів" -msgstr[2] "Встановлено відповідність %(count)s серверів" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" -"\n" -"Проксі-сервери RADIUS\n" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" -"\n" -"Керування проксі-серверами RADIUS.\n" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" -"\n" -"У IPA передбачено підтримку зовнішнього проксі-сервера RADIUS для\n" -"виконання розпізнавання OTP krb5. Це надає системі значної гнучкості\n" -"з метою інтеграції зі сторонніми службами розпізнавання.\n" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" -"\n" -" Додати новий сервер:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" -"\n" -" Знайти усі сервери, чиї запис містять рядок «example.com»:\n" -" ipa radiusproxy-find example.com\n" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" -"\n" -" Перевірити налаштування:\n" -" ipa radiusproxy-show MyRADIUS\n" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" -"\n" -" Змінити реєстраційні дані:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" -"\n" -" Вилучити налаштування:\n" -" ipa radiusproxy-del MyRADIUS\n" - -msgid "invalid attribute name" -msgstr "некоректна назва атрибута" - -msgid "invalid port number" -msgstr "некоректний номер порту" - -msgid "RADIUS proxy server" -msgstr "Проксі-сервер RADIUS" - -msgid "RADIUS proxy servers" -msgstr "Проксі-сервери RADIUS" - -msgid "RADIUS Servers" -msgstr "Сервери RADIUS" - -msgid "RADIUS Server" -msgstr "Сервер RADIUS" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "Додано проксі-сервер RADIUS «%(value)s»" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "Вилучити проксі-сервер RADIUS «%(value)s»" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "Змінено запис проксі-сервера RADIUS «%(value)s»" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "Встановлено відповідність %(count)d проксі-сервера RADIUS" -msgstr[1] "Встановлено відповідність %(count)d проксі-серверів RADIUS" -msgstr[2] "Встановлено відповідність %(count)d проксі-серверів RADIUS" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" -"\n" -"Домени області\n" -"\n" -"Керування списком доменів, пов’язаних з областю IPA.\n" -"\n" -"Цей список є корисним для контролерів доменів з інших областей, які\n" -"мають встановити відносини довіри із цією областю IPA. Цим контролерам\n" -"потрібні дані щодо того, які запити слід переспрямовувати до KDC цієї\n" -"області IPA.\n" -"\n" -"Автоматичне керування: домен автоматично додається до списку доменів\n" -"області, коли створюється нова зона DNS, керована IPA. Те саме стосується\n" -"вилучення.\n" -"\n" -"Керована ззовні DNS: домени, які не керуються у DNS сервера IPA, має бути\n" -"вручну додано до списку за допомогою команди ipa realmdomains-mod.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Показати поточний список доменів області:\n" -" ipa realmdomains-show\n" -"\n" -" Замірити список доменів області:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Додати домен до списку доменів області:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Вилучити домен зі списку доменів області:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" - -msgid "Realm domains" -msgstr "Домени області" - -msgid "Realm Domains" -msgstr "Домени області" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" -"\n" -" Внесення змін до доменів області\n" -"\n" -" Перевірка DNS: при додаванні домену до списку вручну типово\n" -" виконується перевірка DNS. Вона дає дані щодо прив'язки домену\n" -" до області IPA за рахунок перевірки того, чи містить запис TXT домену у\n" -" _kerberos TXT назву області IPA. Цю перевірку можна обійти, вказавши\n" -" параметр --force.\n" -"\n" -" Вилучення: коли вилучається домен області, який мав відповідну зону\n" -" DNS керовану IPA, також автоматично вилучається відповідний запис\n" -" TXT у зоні у _kerberos. Інші записи у зоні та сама зона лишаються\n" -" незмінними.\n" -" " - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "" -"Запис зони DNS для кожного realmdomain має містити записи SOA або NS. Для %s " -"таких записів не виявлено" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "Вказані нижче домени не належать до цієї області: %(domains)s" - -#, python-format -msgid "" -"The realm of the following domains could not be detected: %(domains)s. If " -"these are domains that belong to the this realm, please create a _kerberos " -"TXT record containing \"%(realm)s\" in each of them." -msgstr "" -"Не вдалося виявити область таких доменів: %(domains)s. Якщо ці домени " -"належать до цієї області, будь ласка, створіть запис TXT _kerberos, що " -"міститиме «%(realm)s», на кожному з них." - -msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." -msgstr "" -"Параметр --domain не можна використовувати разом із параметрами --add-domain " -"і --del-domain. Скористайтеся параметром --domain для визначення усього " -"списку доменів області явним чином. Щоб додати або вилучити окремі домени, " -"скористайтеся параметрами --add-domain/del-domain." - -msgid "IPA server domain cannot be omitted" -msgstr "Домен сервера IPA не можна пропускати" - -msgid "IPA server domain cannot be deleted" -msgstr "Домен сервера IPA не можна вилучати" - -msgid "roles" -msgstr "ролі" - -msgid "Role" -msgstr "Роль" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "Додано роль «%(value)s»" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "Вилучено роль «%(value)s»" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "Змінено роль «%(value)s»" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "встановлено відповідність %(count)d ролі" -msgstr[1] "встановлено відповідність %(count)d ролей" -msgstr[2] "встановлено відповідність %(count)d ролей" - -msgid "self service permission" -msgstr "права доступу автослужби" - -msgid "self service permissions" -msgstr "права доступу до автослужби" - -msgid "Self Service Permissions" -msgstr "Права доступу до самообслуговування" - -msgid "Self Service Permission" -msgstr "Права доступу автослужби" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "Додано самообслуговування «%(value)s»" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "Вилучено самообслуговування «%(value)s»" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "Змінено самообслуговування «%(value)s»" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "встановлено відповідність %(count)d самообслуговування" -msgstr[1] "встановлено відповідність %(count)d самообслуговування" -msgstr[2] "встановлено відповідність %(count)d самообслуговувань" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" -"\n" -"Ролі сервера IPA\n" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" -"\n" -"Отримати стан ролей (сервер DNS, CA тощо), що надається основними серверами " -"IPA.\n" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" -"\n" -"Стан ролі може бути одним зі значень: enabled, configured або absent.\n" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" -"\n" -" Показати стан ролі «DNS server» на сервері:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" -"\n" -" Показати стан усіх ролей, назва яких містить «AD», на сервері:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" -"\n" -" Показати стан усіх налаштованих ролей на сервері:\n" -" ipa server-role-find ipa.example.com\n" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" -"\n" -" Показати неявну основну роль IPA:\n" -" ipa server-role-find --include-master\n" - -msgid "server role" -msgstr "роль сервера" - -msgid "server roles" -msgstr "ролі сервера" - -msgid "IPA Server Roles" -msgstr "Ролі сервера IPA" - -msgid "IPA Server Role" -msgstr "Роль сервера IPA" - -msgid "IPA server role name" -msgstr "Назва ролі сервера IPA" - -msgid "Role status" -msgstr "Стан ролі" - -msgid "Status of the role" -msgstr "Стан ролі" - -msgid "Show role status on a server" -msgstr "Показати стан ролі на сервері" - -msgid "Find a server role on a server(s)" -msgstr "Знайти роль сервера на серверах" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "встановлено відповідність %(count)s ролі сервера" -msgstr[1] "встановлено відповідність %(count)s ролей сервера" -msgstr[2] "встановлено відповідність %(count)s ролей сервера" - -msgid "Include IPA master entries" -msgstr "Включити основні записи IPA" - -msgid "IPA role name" -msgstr "Назва ролі IPA" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "{role}: такої ролі не знайдено" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "{attr}: немає такого атрибута" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" -"\n" -"Обмежене службами делегування\n" -"\n" -"Керування правилами, за допомогою яких можна обмежити делегування\n" -"реєстраційних даних так, що служба зможе виконувати персоніфікацію\n" -"користувача під час обміну даними з іншою службою без потреби для\n" -"користувача насправді переспрямовувати квиток для отримання квитка\n" -"(TGT). Так створюється значно кращий метод делегування реєстраційних\n" -"даних, оскільки він запобігає розкриттю короткотермінових ключів\n" -"доступу користувачів.\n" -"\n" -"Відповідно до угоди з іменування, до назви правила додається слово\n" -"\"target\" або \"targets\". Така схема назв не є обов’язковою, але вона\n" -"допомагає концептуально пов’язати правила та їхні призначення.\n" -"\n" -"Правило складається з двох компонентів:\n" -" - Списку цілей (призначень), яких стосується правило\n" -" - Списку memberPrincipals, яким дозволено делегування для\n" -" цих цілей\n" -"\n" -"Запис цілі складається зі списку реєстраційних записів, які можна\n" -"делегувати.\n" -"\n" -"Якщо простіше, правило стверджує, що певний реєстраційний запис\n" -"можна делегувати як вказаний список реєстраційних записів,\n" -"відповідно до визначеного списку цілей.\n" -"\n" -"У правилі і цілі реєстраційні дані Kerberos може бути вказано за\n" -"їхньою назвою або альтернативною назвою, область дії можна пропустити.\n" -"Крім того, вузли можна вказувати за їхніми назвами. Якщо вказані\n" -"реєстраційні дані Kerberos містять один компонент і не завершуються " -"символом\n" -"«$», запис вважатиметься назвою вузла. Назви реєстраційних даних Kerberos, " -"які\n" -"завершуються «$» типово використовуються як альтернативні назви для " -"пов'язаних\n" -"із Active Directory служб.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати нове правило обмеженого делегування:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Додати нову ціль обмеженого делегування:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Додати реєстраційний запис до правила:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Додати реєстраційні дані вузла «ipa.example.com» до правила:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Додати нашу ціль до правила:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Додати реєстраційний запис до цілі:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Показати дані щодо іменованого правила і цілі:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Вилучити обмежене делегування:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"У цьому прикладі служба ftp може отримувати квиток для отримання квитка для\n" -"служби ldap від імені пов’язаного користувача.\n" -"\n" -"Ми наполегливо не рекомендуємо змінювати делегування, які постачаються з\n" -"IPA, ipa-http-delegation та його цілі ipa-cifs-delegation-targets і\n" -"ipa-ldap-delegation-targets. Некоректні зміни можуть усунути можливість\n" -"делегування, що спричинить непрацездатність усієї системи.\n" - -msgid "Allowed to Impersonate" -msgstr "Дозволено виконувати імперсонацію" - -msgid "Member principals" -msgstr "Реєстраційні записи учасників" - -#, python-format -msgid "Malformed principal: %(error)s" -msgstr "Помилкове форматування реєстраційного запису: %(error)s" - -msgid "Add target to a named service delegation." -msgstr "Додати ціль до делегування іменованої служби." - -#, python-format -msgid "member %s" -msgstr "%s учасника" - -msgid "Remove member from a named service delegation." -msgstr "Вилучити запис із делегування іменованої служби." - -msgid "service delegation rule" -msgstr "правило делегування служби" - -msgid "service delegation rules" -msgstr "правила делегування служб" - -msgid "Service delegation rules" -msgstr "Правила делегування служб" - -msgid "Service delegation rule" -msgstr "Правило делегування служб" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "Додано правило делегування служб «%(value)s»" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "Вилучено делегування служб «%(value)s»" - -msgid "privileged service delegation rule" -msgstr "привілейоване правило делегування служб" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "встановлено відповідність %(count)d правила делегування служб" -msgstr[1] "встановлено відповідність %(count)d правил делегування служб" -msgstr[2] "встановлено відповідність %(count)d правил делегування служб" - -msgid "service delegation target" -msgstr "ціль делегування служб" - -msgid "service delegation targets" -msgstr "призначення делегування служб" - -msgid "Service delegation targets" -msgstr "Призначення делегування служб" - -msgid "Service delegation target" -msgstr "Ціль делегування служб" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "Додано ціль делегування служб «%(value)s»" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "Вилучено ціль делегування служб «%(value)s»" - -msgid "privileged service delegation target" -msgstr "привілейована ціль делегування служб" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "встановлено відповідність %(count)d призначення делегування служб" -msgstr[1] "встановлено відповідність %(count)d призначень делегування служб" -msgstr[2] "встановлено відповідність %(count)d призначень делегування служб" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" -"\n" -"Підтримка сеансів для IPA\n" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" -"\n" -"Підлеглі ідентифікатори\n" -"\n" -"Керування підлеглими ідентифікаторами користувача і групи для користувачів\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Автоматично призначати діапазон підлеглих ідентифікаторів для поточного " -"користувача\n" -" ipa subid-generate\n" -"\n" -" Автоматично призначити діапазон підлеглих ідентифікаторів для користувача " -"alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Знайти підлеглі ідентифікатори для користувача alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Встановити відповідність запису за будь-яким підлеглим uid у діапазоні:\n" -" ipa subid-match --subuid=2147483649\n" - -msgid "Subordinate id" -msgstr "Підлеглий ідентифікатор" - -msgid "Subordinate ids" -msgstr "Підлеглі ідентифікатори" - -msgid "Subordinate id description" -msgstr "Опис підлеглого ідентифікатора" - -msgid "Owning user of subordinate id entry" -msgstr "Користувач-власник запису підлеглого ідентифікатора" - -msgid "SubUID range start" -msgstr "Початок діапазону SubUID" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" -"Початкове значення діапазону підлеглих ідентифікаторів користувача (subuid)" - -msgid "SubUID range size" -msgstr "Розмір діапазону SubUID" - -msgid "Subordinate user ID count" -msgstr "Лічильник підлеглих ідентифікаторів користувачів" - -msgid "SubGID range start" -msgstr "Початок діапазону SubGID" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "Початкове значення діапазону підлеглих ідентифікаторів групи (subgid)" - -msgid "SubGID range size" -msgstr "Розмір діапазону SubGID" - -msgid "Subordinate group ID count" -msgstr "Лічильник ідентифікаторів підлеглих груп" - -#, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "%(oname)s з назвою «%(pkey)s» або для користувача «%(uid)s» вже існує." - -#, python-format -msgid "'%(dn)s is not a valid user" -msgstr "'%(dn)s не є коректним користувачем" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "subgidnumber має бути рівним subuidnumber" - -msgid "Add a new subordinate id." -msgstr "Додати новий підлеглий ідентифікатор." - -#, python-format -msgid "Added subordinate id \"%(value)s\"" -msgstr "Додано підлеглий ідентифікатор «%(value)s»" - -msgid "Delete a subordinate id." -msgstr "Вилучити підлеглий ідентифікатор." - -#, python-format -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "Вилучено підлеглий ідентифікатор «%(value)s»" - -msgid "Modify a subordinate id." -msgstr "Змінити підлеглий ідентифікатор." - -#, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "Змінено підлеглий ідентифікатор «%(value)s»" - -msgid "Search for subordinate id." -msgstr "Шукати за підлеглим ідентифікатором." - -#, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "встановлено відповідність %(count)d підлеглого ідентифікатора" -msgstr[1] "встановлено відповідність %(count)d підлеглих ідентифікаторів" -msgstr[2] "встановлено відповідність %(count)d підлеглих ідентифікаторів" - -msgid "Display information about a subordinate id." -msgstr "Показати дані щодо підлеглого ідентифікатора." - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" -"Створити і автоматично призначити до запису користувача діапазон subuid та " -"subgid" - -msgid "Match users by any subordinate uid in their range" -msgstr "" -"Встановити відповідній користувачів за будь-яким підлеглим uid у їхньому " -"діапазоні" - -msgid "SubUID match" -msgstr "Відповідність за SubUID" - -msgid "Match value for subordinate user ID" -msgstr "Встановити відповідність за підлеглим ідентифікатором користувача" - -msgid "Subordinate id statistics" -msgstr "Статистика щодо підлеглих ідентифікаторів" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "%(remaining)i залишкових діапазонів підлеглих ідентифікаторів" - -msgid "commands for controlling sudo configuration" -msgstr "команди керування налаштуванням sudo" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" -"\n" -"Команди sudo\n" -"\n" -"Команди, використані як будівельні блоки для sudo\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Створення запису команди\n" -" ipa sudocmd-add --desc='Читання файлів журналу' /usr/bin/less\n" -"\n" -" Вилучення команди\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "не може використовувати кінцеву крапку: %s" - -msgid "sudo command" -msgstr "команда sudo" - -msgid "sudo commands" -msgstr "команди sudo" - -msgid "Sudo Commands" -msgstr "Команди sudo" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "Додано команду sudo «%(value)s»" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "Вилучено команду sudo «%(value)s»" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "Змінено команду sudo «%(value)s»" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "встановлено відповідність %(count)d команди sudo" -msgstr[1] "встановлено відповідність %(count)d команд sudo" -msgstr[2] "встановлено відповідність %(count)d команд sudo" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" -"\n" -"Групи команд sudo\n" -"\n" -"Керування групами команд sudo.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати нову групу команд sudo:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Вилучити групу команд sudo:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Керування участю групи команд sudo, команди:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Керування участю групи команд sudo, команди:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Показ групи команд sudo:\n" -" ipa sudocmdgroup-show admincmds\n" - -msgid "sudo command group" -msgstr "група команд sudo" - -msgid "sudo command groups" -msgstr "групи команд sudo" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "Додано групу команд sudo «%(value)s»" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "Вилучено групу команд sudo «%(value)s»" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "Змінено групу команд sudo «%(value)s»" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "встановлено відповідність %(count)d групи команд sudo" -msgstr[1] "встановлено відповідність %(count)d груп команд sudo" -msgstr[2] "встановлено відповідність %(count)d груп команд sudo" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" -"\n" -"Топологія\n" -"\n" -"Керування топологією реплікації на домені рівня 1.\n" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" -"\n" -"Дані сервера IPA зберігаються на сервері LDAP у двох суфіксах:\n" -"* суфіксі домену, наприклад «dc=example,dc=com», тут містяться усі пов’язані " -"із доменом дані\n" -"* суфіксі ca, «o=ipaca», наявні лише на серверах із встановленим CA. Тут\n" -" містяться дані для компонента сервера сертифікатів.\n" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" -"\n" -"Дані, що зберігаються на серверах IPA, відтворюються на інших серверах IPA. " -"Спосіб\n" -"відтворення (реплікації) визначається угодами. Угоди реплікації потрібно\n" -"встановлювати для обох суфіксів окремо. На рівні домену 0 угодами керують\n" -"програми ipa-replica-manage та ipa-csreplica-manage. На рівні доменів 1\n" -"керування виконується централізовано за допомогою команд «ipa topology*».\n" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" -"\n" -"Угоди представляються сегментами топології. Типово, сегмент топології\n" -"представляється 2 угодами реплікації — по одній для кожного напрямку, " -"наприклад\n" -"від A до B і від B до A. Створення односпрямованих сегментів заборонене.\n" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" -"\n" -"Щоб перевірити, що жоден сервер не від’єднано у топології вказаного " -"суфікса,\n" -"скористайтеся такою командою:\n" -" ipa topologysuffix-verify $suffix\n" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -"\n" -"Приклади:\n" -" Знайти усі сервери IPA:\n" -" ipa server-find\n" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" -"\n" -" Знайти усі суфікси:\n" -" ipa topologysuffix-find\n" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" -"\n" -" Додати сегмент топології до суфікса «domain»:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" -"\n" -" Додати сегмент топології до суфікса «ca»:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" -"\n" -" Вивести список усіх сегментів топології у суфіксі «domain»:\n" -" ipa topologysegment-find domain\n" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" -"\n" -" Вивести список усіх сегментів топології у суфіксі «ca»:\n" -" ipa topologysegment-find ca\n" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" -"\n" -" Вилучити сегмент топології у суфіксі «domain»:\n" -" ipa topologysegment-del domain segment_name\n" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" -"\n" -" Вилучити сегмент топології у суфіксі «ca»:\n" -" ipa topologysegment-del ca segment_name\n" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" -"\n" -" Перевірити топологію суфікса «domain»:\n" -" ipa topologysuffix-verify domain\n" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" -"\n" -" Перевірити топологію суфікса «ca»:\n" -" ipa topologysuffix-verify ca\n" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "Керування топологією потребує мінімального рівня домену {0} " - -msgid "segment" -msgstr "сегмент" - -msgid "segments" -msgstr "сегменти" - -msgid "Topology Segments" -msgstr "Сегменти топології" - -msgid "Topology Segment" -msgstr "Сегмент топології" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "лівий вузол не є вузлом топології: %(leftnode)s" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "правий вузол не є вузлом топології: %(rightnode)s" - -msgid "left node and right node must not be the same" -msgstr "лівий і правий вузли повинні бути різними вузлами" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "у лівому вузлі ({host}) не передбачено підтримки суфіксів «{suff}»" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "у правому вузлі ({host}) не передбачено підтримки суфіксів «{suff}»" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "встановлено відповідність %(count)d сегмента" -msgstr[1] "встановлено відповідність %(count)d сегментів" -msgstr[2] "встановлено відповідність %(count)d сегментів" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "Додано сегмент «%(value)s»" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "Вилучено сегмент «%(value)s»" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "Змінено сегмент «%(value)s»" - -#, python-format -msgid "%(value)s" -msgstr "%(value)s" - -msgid "left or right node has to be specified" -msgstr "слід вказати лівий або правий вузол" - -msgid "only one node can be specified" -msgstr "можна вказувати лише один вузол" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "Оновлення реплікації для сегмента: надіслано запит щодо «%(pkey)s»." - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "Зупиняємо реплікацію для сегмента: надіслано запит щодо «%(pkey)s»." - -msgid "suffixes" -msgstr "суфікси" - -msgid "Topology suffixes" -msgstr "Суфікси топології" - -msgid "Topology suffix" -msgstr "Суфікс топології" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "встановлено відповідність %(count)d суфікса топології" -msgstr[1] "встановлено відповідність %(count)d суфіксів топології" -msgstr[2] "встановлено відповідність %(count)d суфіксів топології" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "Вилучено суфікс топології «%(value)s»" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "Додано суфікс топології «%(value)s»" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "Змінено суфікс топології «%(value)s»" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" -"\n" -"Перевірити топологію реплікації для вказаного суфікса.\n" -"\n" -"Перевірки, які виконуються:\n" -" 1. перевірка того, чи не є топологія від’єднаною. Іншими словами, чи є\n" -" шляхи реплікації між усіма серверами.\n" -" 2. перевірка того, чи немає у сервера перевищення рекомендованої\n" -" кількості узгоджень реплікації.\n" - -msgid "operation not defined" -msgstr "дію не визначено" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "виконувати цю дію заборонено: %s" - -msgid "No such virtual command" -msgstr "Такої віртуальної команди не передбачено" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" -"\n" -"Повернути дані щодо поточного розпізнаного профілю\n" -"\n" -"Команда визначення профілю повертає дані щодо того, як\n" -"отримати більше даних про профіль, розпізнаний для\n" -"цього запиту. Дані:\n" -"\n" -" * тип об’єкта\n" -" * команда для отримання подробиць щодо об’єкта\n" -" * аргументи та параметри, які слід передати команді\n" -"\n" -"Дані повертаються у форматі словника. Нижче, як приклад,\n" -"наведено виведення у форматі «ключ: значення».\n" -"\n" -"Приклади:\n" -"\n" -" Пошук від імені користувача IPA:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Пошук від імені користувача довіреного домену:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Пошук від імені вузла:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Пошук від імені служби Kerberos:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" - -msgid "Describe currently authenticated identity." -msgstr "Описати поточний розпізнаний профіль." - -msgid "Object class name" -msgstr "Назва класу об’єктів" - -msgid "Function to get details" -msgstr "Функція, подробиці щодо якої слід отримати" - -msgid "Arguments to details function" -msgstr "Аргументи до функції details" - -msgid "Cannot query Directory Manager with API" -msgstr "" -"Не вдалося опитати засіб керування каталогом за допомогою програмного " -"інтерфейсу" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" -"\n" -"Сервери IPA\n" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" -"\n" -"Отримати дані щодо встановлених серверів IPA.\n" - -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "" -"\n" -" Знайти усі сервери:\n" -" ipa server-find\n" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" -"\n" -" Показати вказаний сервер:\n" -" ipa server-show ipa.example.com\n" - -msgid "server" -msgstr "сервер" - -msgid "servers" -msgstr "сервери" - -msgid "IPA Servers" -msgstr "Сервери IPA" - -msgid "Server location" -msgstr "Місце сервера" - -msgid "Service weight" -msgstr "Вага служб" - -msgid "Weight for server services" -msgstr "Вага служб сервера" - -msgid "Service relative weight" -msgstr "Відносна вага служб" - -msgid "Relative weight for server services (counts per location)" -msgstr "Відносна вага служб для сервера (обчислюється для окремого місця)" - -msgid "Enabled server roles" -msgstr "Увімкнені ролі сервера" - -msgid "List of enabled roles" -msgstr "Список усіх увімкнених ролей" - -msgid "Modify information about an IPA server." -msgstr "Змінити дані щодо сервера IPA." - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "Змінено запис сервера IPA «%(value)s»" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "встановлено відповідність %(count)d сервера IPA" -msgstr[1] "встановлено відповідність %(count)d серверів IPA" -msgstr[2] "встановлено відповідність %(count)d серверів IPA" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "Вилучено сервер IPA «%(value)s»" - -msgid "Ignore topology errors" -msgstr "Ігнорувати помилки топології" - -msgid "Ignore topology connectivity problems after removal" -msgstr "Ігнорувати проблеми із з’єднуваністю топології після вилучення" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "" -"Ігнорувати перевірку на те, чи є сервер, який вилучають, останнім сервером " -"CA або DNS" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "" -"Пропустити перевірку того, чи вилучено останній основний сервер CA або " -"сервер DNS" - -msgid "Force server removal" -msgstr "Примусове вилучення сервера" - -msgid "Force server removal even if it does not exist" -msgstr "Примусове вилучення сервера, навіть якщо його не існує" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" -"Репліка є активним основним сервером ключів DNSSEC. Вилучення може зашкодити " -"вашій системі DNS. Будь ласка, спочатку вимкніть або замініть основний " -"сервер ключів DNSSEC." - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "" -"Вилучення цього запису сервера залишить вашу встановлену систему без DNS." - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "" -"Вилучення цього сервера заборонено, оскільки воно залишить вашу встановлену " -"систему без KRA." - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "" -"Вилучення цього сервера заборонено, оскільки воно залишить вашу встановлену " -"систему без CA." - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "Ігноруємо ці попередження і продовжуємо процедуру вилучення" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "" -"Не вдалося вилучити %(principal)s memberPrincipal із запису s4u2proxy " -"%(dn)s: %(err)s" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "Не вдалося вилучити записи назви вузла DNA для %(master)s: %(err)s" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "" -"Не вдалося вилучити запис сервера %(master)s зі списку серверів: %(err)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "Не вдалося вилучити ключі Custodia для %(master)s: %(err)s" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "Не вдалося вилучити реєстраційні запис або ключі сервера: %(err)s" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "Не вдалося вилучити записи DNS %(hostname)s: %(err)s" - -msgid "You may need to manually remove them from the tree" -msgstr "Ймовірно, вам доведеться вилучити їх із ієрархії вручну" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "Примусово вилучаємо %(hostname)s" - -msgid "Ignoring topology connectivity errors." -msgstr "Ігноруємо помилки із з’єднуваністю топології." - -#, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "Не вдалося вилучити запис сервер з домену безпеки: %s" - -msgid "Server has already been deleted" -msgstr "Запис сервера вже вилучено" - -msgid "Agreements deleted" -msgstr "Угоди вилучено" - -msgid "Following segments were not deleted:" -msgstr "Вказані нижче сегменти не було вилучено:" - -#, python-format -msgid "must be \"%s\"" -msgstr "має бути «%s»" - -msgid "not allowed to perform server connection check" -msgstr "не дозволено виконувати перевірку з’єднання сервера" - -msgid "Set enabled/hidden state of a server." -msgstr "Встановити стан увімкнено/приховано для сервера." - -msgid "State" -msgstr "Стан" - -msgid "Server state" -msgstr "Стан сервера" - -#, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "Змінено стан сервера «%(value)s»." - -msgid "Cannot hide CA renewal master." -msgstr "Не можна приховувати основний сервер оновлення CA." - -msgid "Cannot hide DNSSec key master." -msgstr "Не можна приховувати основний сервер ключів DNSSec." - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "Не можна приховувати останній увімкнений сервер %(name)s." - -msgid "A list of ACI values" -msgstr "Список значень ACI" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "type, filter, subtree і targetgroup є взаємовиключними" - -msgid "ACI prefix is required" -msgstr "Слід вказати префікс ACI" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "" -"слід вказати хоча б одне з: type, filter, subtree, targetgroup, attrs або " -"memberof" - -msgid "filter and memberof are mutually exclusive" -msgstr "filter і memberof не можна використовувати разом" - -msgid "group, permission and self are mutually exclusive" -msgstr "group, permission і self не можна використовувати разом" - -msgid "One of group, permission or self is required" -msgstr "Слід вказати одне зі значень, group, permission або self" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "Групи з назвою «%s» не існує" - -msgid "empty filter" -msgstr "порожній фільтр" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "Синтаксична помилка: %(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "некоректне DN (%s)" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "Не знайдено ACI з назвою «%s»" - -msgid "ACI object." -msgstr "Об'єкт ACI." - -msgid "ACIs" -msgstr "ACI" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "Створено ACI «%(value)s»" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "Вилучено ACI «%(value)s»" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "Змінено ACI «%(value)s»" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "встановлено відповідність %(count)d ACI" -msgstr[1] "встановлено відповідність %(count)d ACI" -msgstr[2] "встановлено відповідність %(count)d ACI" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "ACI перейменовано на «%(value)s»" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" -"\n" -"Правило автоматичної участі.\n" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" -"\n" -"Внесіть ясність у правила участі вузлів та користувачів налаштовуванням\n" -"формальних виразів шаблонів включення або виключення. Ви можете автоматично\n" -"пов’язувати нові записи з групою або групою вузлів на основі даних щодо " -"атрибутів.\n" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" -"\n" -"Правило безпосередньо пов’язується з групою за назвою, отже ви не можете\n" -"створити правило без визначення групи або групи вузлів.\n" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" -"\n" -"Умова є формальним виразом, використовується 389-ds для встановлення\n" -"відповідності нового вхідного запису з правилом автоматичної участі.\n" -"Якщо умові відповідає правило включення, запис додається до відповідної\n" -"групи або групи вузлів.\n" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" -"\n" -"Можна визначити типову групу або групу вузлів, яку буде використано для\n" -"записів, які не відповідають жодному правилу. У випадку записів " -"користувачів\n" -"ця група буде резервною групою, оскільки усіх користувачі типово є " -"учасниками\n" -"групи, вказаної у налаштуваннях IPA.\n" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" -"\n" -"За допомогою програми automember-rebuild ви можете повторно застосувати " -"правила\n" -"автоматичної участі до вже створених записів, тобто перебудувати схему " -"участі.\n" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" -"\n" -" Додати початкову групу або групу вузлів:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" -"\n" -" Додати початкове правило:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" -"\n" -" Додати умову до правила:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" -"\n" -" Додати умову виключення до правила для запобігання автоматичному " -"пов’язуванню:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" -"\n" -" Додати вузол:\n" -" ipa host-add web1.example.com\n" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" -"\n" -" Додати запис користувача:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" -"\n" -" Перевірити правила автоматичної участі:\n" -" ipa hostgroup-show webservers\n" -" Група вузлів: webservers\n" -" Опис: Web Servers\n" -" Вузли-учасники: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Назва групи: devel\n" -" Опис: Developers\n" -" GID: 1004200000\n" -" Користувачі-учасники: tuser\n" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" -"\n" -" Вилучити умову з правила:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" -"\n" -" Змінити правило автоматичної участі:\n" -" ipa automember-mod\n" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" -"\n" -" Встановити типову (резервну) групу призначення:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" -"\n" -" Вилучити типову (резервну) групу призначення:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" -"\n" -" Показати типову (резервну) групу призначення:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" -"\n" -" Знайти усіх правила автоматичної участі:\n" -" ipa automember-find\n" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" -"\n" -" Знайти усі осиротілі правила автоматичної участі:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Знайти усі осиротілі правила автоматичної участі і вилучити їх:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" -"\n" -" Показати правило автоматичної участі:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" -"\n" -" Вилучити правило автоматичної участі:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" -"\n" -" Перебудувати записи участі для усіх користувачів:\n" -" ipa automember-rebuild --type=group\n" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" -"\n" -" Перебудувати записи участі для усіх вузлів:\n" -" ipa automember-rebuild --type=hostgroup\n" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" -"\n" -" Перебудувати записи участі для вказаних користувачів:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" -"\n" -" Перебудувати записи участі для вказаних вузлів:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" - -msgid "Auto Membership Rule" -msgstr "Правило автоматичної участі" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(otype)s «%(oname)s» не знайдено" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "%s не є коректним атрибутом." - -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "" -"\n" -" Додати правило автоматичної участі.\n" -" " - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "Додано правило автоматичної участі «%(value)s»" - -msgid "Auto Membership is not configured" -msgstr "Автоматичну участь не налаштовано" - -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "" -"\n" -" Додати умови до правила автоматичної участі.\n" -" " - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "Додано умови до «%(value)s»" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "Правило автоматичної участі: %s не знайдено!" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" -"\n" -" Перевизначення з метою додавання у повернуте повідомлення даних щодо " -"успіху чи невдачі.\n" -" " - -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "" -"\n" -" Вилучити умови з правила автоматичної участі.\n" -" " - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "Вилучено умови з «%(value)s»" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" -"\n" -" Перевизначення з метою встановлення станів успіху та невдачі.\n" -" " - -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "" -"\n" -" Змінити правило автоматичної участі.\n" -" " - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "Змінено правило автоматичної участі «%(value)s»" - -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "" -"\n" -" Вилучити правило автоматичної участі.\n" -" " - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "Вилучено правило автоматичної участі «%(value)s»" - -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "" -"\n" -" Шукати правила автоматичної участі.\n" -" " - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "встановлено відповідність %(count)d правила" -msgstr[1] "встановлено відповідність %(count)d правил" -msgstr[2] "встановлено відповідність %(count)d правил" - -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "" -"\n" -" Показати дані щодо правила автоматичної участі.\n" -" " - -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "" -"\n" -" Встановити типову (резервну) групу для невідповідних записів.\n" -" " - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "Встановити типову (резервну) групу для автоматичної участі «%(value)s»" - -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "" -"\n" -" Вилучити типову (резервну) групу для невідповідних записів.\n" -" " - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "Вилучити типову (резервну) групу для автоматичної участі «%(value)s»" - -msgid "No default (fallback) group set" -msgstr "Не встановлено типової (резервної) групи" - -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "" -"\n" -" Показати дані щодо типових (резервних) груп автоматичної участі.\n" -" " - -msgid "Task DN" -msgstr "DN завдання" - -msgid "DN of the started task" -msgstr "DN запущеного завдання" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "має бути вказано принаймні один з варіантів: тип, користувачі чи вузли" - -msgid "users and hosts cannot both be set" -msgstr "не можна одночасно вказувати користувачів і вузли" - -msgid "hosts cannot be set when type is 'group'" -msgstr "не можна вказувати вузли, якщо типом є «group»" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "не можна вказувати користувачів, якщо типом є «hostgroup»" - -msgid "Automember rebuild membership task started" -msgstr "Виконується завдання з перебудови записів автоматичної участі" - -msgid "Automember rebuild membership task completed" -msgstr "Завдання з перезбирання правил автоматичної участі виконано" - -#, python-format -msgid "Task DN = '%s'" -msgstr "DN завдання = «%s»" - -msgid "Automember" -msgstr "Автоматична участь" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" -"\n" -" Виконати пошук осиротілих правил автоматичної участі. Можливо, команду\n" -" слід запускати від імені привілейованого користувача, щоб отримати усі " -"правила.\n" -" " - -msgid "Remove orphan automember rules" -msgstr "Вилучити осиротілі правила автоматичної участі" - -msgid "Member service groups" -msgstr "Групи служб учасника" - -msgid "Member HBAC service groups" -msgstr "Групи служб HBAC учасника" - -msgid "Member ID user overrides" -msgstr "Перевизначення ідентифікатора учасника користувача" - -msgid "Indirect Member ID user overrides" -msgstr "Перевизначення ідентифікатора опосередкованого учасника користувача" - -msgid "Indirect Member permissions" -msgstr "Опосередковані права доступу учасника" - -msgid "Indirect Member HBAC service" -msgstr "Опосередкована служба HBAC учасника" - -msgid "Indirect Member HBAC service group" -msgstr "Опосередкована група служб HBAC учасника" - -msgid "Invalid format. Should be name=value" -msgstr "Некоректний формат. Правильний формат: назва=значення" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "Основний вузол IPA не можна вилучати або вимикати" - -msgid "entry" -msgstr "запис" - -msgid "entries" -msgstr "записи" - -msgid "Entry" -msgstr "Запис" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "не знайдено запис контейнера (%(container)s)" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s: не знайдено %(oname)s" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s: не знайдено %(oname)s" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "%(oname)s з назвою «%(pkey)s» вже існує" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "не можна використовувати атрибут «%(attribute)s»" - -#, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "ці атрибути не можна використовувати: %(attrs)s" - -msgid "attribute is not configurable" -msgstr "атрибут не можна налаштовувати" - -msgid "No such attribute on this entry" -msgstr "У цього запису немає такого атрибута" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "Перейменувати об’єкт %(ldap_obj_name)s" - -msgid "the entry was deleted while being modified" -msgstr "запис було вилучено під час внесення змін" - -#, python-format -msgid "%s" -msgstr "%s" - -#, python-format -msgid "%s to add" -msgstr "%s для додавання" - -#, python-format -msgid "%s to remove" -msgstr "%s для вилучення" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "Результати мають містити лише атрибут основного ключа («%s»)" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "Шукати %(searched_object)s у цих %(relationship)s %(ldap_object)s." - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "Шукати %(searched_object)s не у цих %(relationship)s %(ldap_object)s." - -#, python-format -msgid "added attribute value to entry %(value)s" -msgstr "додано значення атрибута до запису %(value)s" - -#, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "вилучено значення атрибутів із запису %(value)s" - -msgid "one or more values to remove" -msgstr "одне або декілька значень для вилучення" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" -"\n" -"Додаток для виконання декількох викликів ipa за допомогою одного віддаленого " -"виклику процедури\n" -"\n" -"Щоб запустити цей код на легкому сервері, віддайте такі команди:\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"де у файлі batch_request.json міститься десь такий код:\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"Формат відповіді має бути розподілений за рівнями вкладеності у подібний же " -"спосіб. На початку ви побачите таке:\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"а далі буде вкладена відповідь для кожного методу команди IPA, який було " -"надіслано у запиті\n" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" -"Виконати декілька викликів ipa за допомогою одного віддаленого виклику " -"процедури" - -msgid "must contain a tuple (list, dict)" -msgstr "має містити кортеж (список, словник)" - -msgid "REST API is not logged in." -msgstr "Вхід до програмного інтерфейсу REST не виконано." - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "" -"Відповідь від програмного інтерфейсу REST CA, що не відповідає 2xx: " -"%(status)d. %(explanation)s" - -msgid "Unable to communicate with CMS" -msgstr "Не вдалося обмінятися даними з CMS" - -msgid "Response from CA was not valid JSON" -msgstr "Відповідь від CA не була коректним кодом JSON" - -msgid "pyhbac is not installed." -msgstr "pyhbac не встановлено." +" 1. Перевірити, чи відповідає користувач з довіреного домену,\n" +" вказаний за коротким іменем, якомусь правилу:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Надано доступ: Так\n" +" --------------------\n" +" Відповідні правила: allow_all\n" +" Відповідні правила: can_login\n" +"\n" +" 2. Перевірити, чи відповідає користувач з довіреного домену,\n" +" вказаний за назвою його домену, якомусь правилу:\n" +"\n" +" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" +"service sshd\n" +" --------------------\n" +" Надано доступ: Так\n" +" --------------------\n" +" Відповідні правила: allow_all\n" +" Невідповідні правила: can_login\n" +"\n" +" 3. Перевірити, чи відповідає користувач з довіреного домену\n" +" вказаний за SID, якомусь правилу:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Надано доступ: Так\n" +" --------------------\n" +" Відповідні правила: allow_all\n" +" Відповідні правила: can_login\n" +"\n" +" 4. Перевірити, чи відповідає інший користувач з довіреного домену,\n" +" вказаний за SID, якомусь правилу:\n" +"\n" +" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" +" --host `hostname` --service sshd\n" +" --------------------\n" +" Надано доступ: Так\n" +" --------------------\n" +" Відповідні правила: allow_all\n" +" Відповідні правила: can_login\n" +"\n" +" 5. Перевірити, чи відповідає інший користувач з довіреного домену,\n" +" вказаний за коротким ім’ям, якомусь правилу:\n" +"\n" +" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " +"sshd\n" +" --------------------\n" +" Надано доступ: Так\n" +" --------------------\n" +" Відповідні правила: allow_all\n" +" Невідповідні правила: can_login\n" msgid "" "\n" @@ -22730,8375 +15443,99 @@ msgstr "" " Відповідні правила: allow_all\n" " Невідповідні правила: can_login\n" -msgid "Unresolved rules in --rules" -msgstr "Непридатні до обробки правила у --rules" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" -"Без налаштовування власного домену не можна виконувати пошук у довірених " -"доменах. Спочатку запустіть ipa-adtrust-install на сервері IPA." - -#, python-format -msgid "Access granted: %s" -msgstr "Надано доступ: %s" - -msgid "" -"\n" -"Permissions\n" -msgstr "" -"\n" -"Права доступу\n" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" -"\n" -"Запис правил доступу уможливлює точне делегування прав. Запис прав доступу\n" -"є зручною для читання обгорткою навколо правила керування доступом 389-ds\n" -"або інструкції (ACI).\n" -"Право доступу надає право виконувати специфічне завдання, зокрема додавання\n" -"запису користувача, внесення зміни до групи тощо.\n" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" -"\n" -"Запис прав доступу не може містити інших прав доступу.\n" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" -"\n" -"* Права доступу надають можливість читати, записувати, вилучати, шукати або\n" -" порівнювати.\n" -"* Привілеї поєднують подібні права доступу (наприклад усі права доступу,\n" -" потрібні для додавання запису користувача).\n" -"* Роль надає набір привілеїв користувачам, групам, вузлам або групам " -"вузлів.\n" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" -"\n" -"Запис права доступу складається з декількох різних частин:\n" -"\n" -"1. Назви запису права доступу.\n" -"2. Призначення права доступу.\n" -"3. Права, які надаються записом.\n" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" -"\n" -"Права визначають список дій, які можна виконувати. Запис прав може\n" -"бути один або може бути декілька записів з такого набору:\n" -"1. write - запис одного або декількох атрибутів\n" -"2. read - читання одного або декількох атрибутів\n" -"3. search - пошук одного або декількох атрибутів\n" -"4. compare - порівняння одного або декількох атрибутів\n" -"5. add - додавання нового запису до ієрархії\n" -"6. delete - вилучення наявного запису\n" -"7. all - надати усі права доступу\n" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" -"\n" -"Зауважте відмінність між атрибутами і записами. Права доступу є " -"незалежними,\n" -"отже можливість додавання запису користувача не означає, що цей запис " -"згодом\n" -"буде придатним до редагування.\n" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" -"\n" -"Передбачено декілька можливих призначень:\n" -"1. subtree: DN; право доступу застосовується до піддерева DN\n" -"2. target filter: фільтр LDAP\n" -"3. target: DN з можливими символами-замінниками, що визначає записи, яких " -"стосуються права доступу\n" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" -"\n" -"Крім того, передбачено вказані нижче параметри.\n" -"Встановлення одного з цих параметрів призводить до встановлення відповідних " -"атрибутів.\n" -"1. type: тип об’єкта (користувач, група тощо); встановлює фільтрування за " -"піддеревом (subtree) та фільтрування за призначенням (target filter).\n" -"2. memberof: застосовувати до учасників групи; встановлює фільтр за " -"призначенням (target filter).\n" -"3. targetgroup: надає доступ до внесення змін до певної групи (зокрема, " -"доступ до\n" -" надання можливості керування участю у групі); встановлює призначення " -"(target).\n" - -msgid "" -"\n" -"Managed permissions\n" -msgstr "" -"\n" -"Керовані права доступу\n" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" -"\n" -"Права доступу, які типово встановлюються разом з IPA, можуть бути\n" -"так званими «керованим» правами доступу. Такі права доступу мають\n" -"типовий набір атрибутів, до яких вони застосовуються. Втім, адміністратор\n" -"може додавати або вилучати окремі атрибути набору.\n" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" -"\n" -"Вилучення або перейменування керованих прав доступу, а також зміну " -"призначення\n" -"таких прав, заборонено.\n" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" -"\n" -" Додати право доступу до створення записів користувачів:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" -"\n" -" Додати право доступу, яке надає можливість керувати участю у групах:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" - -msgid "must be enclosed in parentheses" -msgstr "слід брати у дужки" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "«%s» не є об’єктним типом" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "«%s» не є коректним типом прав доступу" - -#, python-format -msgid "Deprecated; use %s" -msgstr "Застаріло; користуйтеся %s" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "Не можна змінювати чи вилучати права доступу з невідомим прапорцем %s" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "Права доступу SYSTEM не можна змінювати чи вилучати" - -#, python-format -msgid "Entry %s not found" -msgstr "Запису %s не знайдено" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "ACI для прав доступу %(name)s у %(dn)s не знайдено " - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "" -"не можна одразу вказувати повне фільтрування за призначенням та фільтрування " -"за додатковими параметрами призначення" - -#, python-format -msgid "option was renamed; use %s" -msgstr "назву параметра змінено; користуйтеся новою назвою — %s" - -#, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "Не можна одночасно використовувати %(old_name)s і %(new_name)s" - -#, python-format -msgid "%s: group not found" -msgstr "%s: групи не знайдено" - -msgid "target and targetgroup are mutually exclusive" -msgstr "не можна одночасно використовувати target і targetgroup" - -msgid "subtree and type are mutually exclusive" -msgstr "не можна одночасно використовувати subtree і type" - -msgid "Bad search filter" -msgstr "Помилковий фільтр пошуку" - -#, python-format -msgid "Entry %s does not exist" -msgstr "Запису %s не існує" - -msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "" -"має бути вказано хоча б один специфікатор запису призначення (наприклад " -"target, targetfilter, attrs)" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "Додано права доступу «%(value)s»" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "не можна одразу вказувати attrs та атрибути включення" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "Не вдалося зберегти ACI прав доступу до %s" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "Вилучено права доступу «%(value)s»" - -msgid "cannot delete managed permissions" -msgstr "неможливо вилучити керовані права доступу" - -#, python-format -msgid "ACI of permission %s was not found" -msgstr "ACI права доступу %s не знайдено" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "Змінено права доступу «%(value)s»" - -msgid "cannot rename managed permissions" -msgstr "неможливо перейменувати керовані права доступу" - -msgid "not modifiable on managed permissions" -msgstr "не можна змінювати для керованих прав доступу" - -msgid "only available on managed permissions" -msgstr "доступне лише для керованих прав доступу" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "не можна одразу вказувати attrs та атрибути включення або виключення" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "" -"не можна встановлювати типу прив’язки для прав доступу, які пов’язано з " -"привілеєм" - -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "встановлено відповідність %(count)d запису" -msgstr[1] "встановлено відповідність %(count)d записів" -msgstr[2] "встановлено відповідність %(count)d записів" - -#, python-format -msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "" -"неможливо додати права доступу «%(perm)s» з типом прив’язки «%(bindtype)s» " -"до привілею" - -msgid "Privilege" -msgstr "Привілей" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "Додано привілей «%(value)s»" - -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "Вилучено привілей «%(value)s»" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "Змінено привілей «%(value)s»" - -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "встановлено відповідність %(count)d привілею" -msgstr[1] "встановлено відповідність %(count)d привілеїв" -msgstr[2] "встановлено відповідність %(count)d привілеїв" - -msgid "" -"\n" -"API Schema\n" -msgstr "" -"\n" -"Схема API\n" - -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" -"\n" -"Надає можливості інтроспекції програмного інтерфейсу.\n" - -msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" -msgstr "" -"\n" -" Показати подробиці щодо user-find:\n" -" ipa command-show user-find\n" - -msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" -"\n" -" Знайти параметри user-find:\n" -" ipa param-find user-find\n" - -msgid "Name" -msgstr "Назва" - -msgid "Documentation" -msgstr "Документація" - -msgid "Exclude from" -msgstr "Виключити з" - -msgid "Include in" -msgstr "Включити до" - -msgid "Help topic" -msgstr "Тема довідки" - -msgid "Version" -msgstr "Версія" - -msgid "Parameters" -msgstr "Параметри" - -msgid "Method of" -msgstr "Метод" - -msgid "Method name" -msgstr "Назва методу" - -msgid "Display information about a command." -msgstr "Показати інформацію щодо команди." - -msgid "Search for commands." -msgstr "Шукати команди." - -msgid "Return command defaults" -msgstr "Повернути типові параметри команди" - -#, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "{oname}: {command_name} не знайдено" - -msgid "Display information about a class." -msgstr "Показати дані щодо класу." - -msgid "Search for classes." -msgstr "Шукати класи." - -msgid "Display information about a help topic." -msgstr "Показати дані щодо теми довідки." - -msgid "Search for help topics." -msgstr "Шукати у темах довідки." - -msgid "Required" -msgstr "Обов’язкове" - -msgid "Multi-value" -msgstr "Багато значень" - -msgid "Always ask" -msgstr "Завжди питати" - -msgid "CLI metavar" -msgstr "Метазмінна CLI" - -msgid "CLI name" -msgstr "Назва CLI" - -msgid "Confirm (password)" -msgstr "Підтвердження (пароль)" - -msgid "Default" -msgstr "Типовий" - -msgid "Default from" -msgstr "Типовий з" - -msgid "Label" -msgstr "Мітка" - -msgid "Convert on server" -msgstr "Перетворити на сервері" - -msgid "Option group" -msgstr "Група варіантів" - -msgid "Sensitive" -msgstr "З врахуванням" - -msgid "Positional argument" -msgstr "Позиційний аргумент" - -#, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(metaobject)s: не знайдено %(oname)s" - -msgid "Display information about a command parameter." -msgstr "Показати інформацію щодо параметра команди." - -msgid "Search command parameters." -msgstr "Шукати параметри команди." - -#, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(command_name)s: не знайдено %(oname)s" - -msgid "Display information about a command output." -msgstr "Показати інформацію щодо даних, які виводить команда." - -msgid "Search for command outputs." -msgstr "Шукати за даними, які виводить команда." - -msgid "Store and provide schema for commands and topics" -msgstr "Збереження і надання схеми для команд і тем" - -msgid "Fingerprint of schema cached by client" -msgstr "Відбиток схеми, кешований клієнтом" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" -"\n" -"Довіра між областями\n" -"\n" -"Керування відносинами довіри між доменами IPA і Active Directory.\n" -"\n" -"З метою надання доступу користувачам віддаленого домену до ресурсів у " -"домені\n" -"IPA слід встановити відносини довіри. У поточній версії у IPA передбачено\n" -"підтримку довіри лише між доменами IPA і Active Directory під керуванням " -"Windows\n" -"Server 2008 або новішої версії з функціональними можливостями рівня 2008 " -"або\n" -"новішої версії.\n" -"\n" -"Будь ласка, зауважте, що слід належним чином налаштувати DNS на обох " -"доменах,\n" -"IPA і Active Directory, щоб домени могли виявити один одного. " -"Працездатність\n" -"відносин довіри залежить від можливості виявлення спеціальних ресурсів у\n" -"іншому домені за допомогою записів DNS.\n" -"\n" -"Приклад:\n" -"\n" -"1. Встановити довіру між областями з Active Directory за допомогою " -"реєстраційних\n" -" даних адміністратора AD:\n" -"\n" -" ipa trust-add --type=ad <домен.ad> --admin <адміністратор домену AD> --" -"password\n" -"\n" -"2. Показати список всіх наявних відносин довіри:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Показати подробиці щодо певних відносин довіри:\n" -"\n" -" ipa trust-show <домен.ad>\n" -"\n" -"4. Вилучити наявні відносини довіри:\n" -"\n" -" ipa trust-del <домен.ad>\n" -"\n" -"Щойно відносини довіри буде встановлено, віддалених користувачів слід " -"прив’язати\n" -"до локальних груп POSIX, щоб скористатися ресурсами IPA. Прив’язку слід\n" -"виконати за допомогою використання зовнішньої участі групи не-POSIX, а " -"потім\n" -"цю групу має бути включено до однієї з локальних груп POSIX.\n" -"\n" -"Приклади:\n" -"\n" -"1. Створити групу для прив’язки адміністраторів та їхньої локальної групи " -"POSIX\n" -" довіреного домену:\n" -"\n" -" ipa group-add --desc='<домен.ad> admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc='<домен.ad> admins' ad_admins\n" -"\n" -"2. Додати ідентифікатор безпеки Domain Admins домену <домен.ad> до групи " -"ad_admins_external:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Дозволити прив’язування учасників групи ad_admins_external до групи POSIX " -"ad_admins:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. Показати список зовнішніх учасників групи ad_admins_external для " -"перегляду їхніх SID:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"НАЛАШТУВАННЯ ДОВІРИ ЗАГАЛЬНОГО РІВНЯ\n" -"\n" -"Якщо встановлено підпакунок довіри AD IPA та запущено ipa-adtrust-install,\n" -"створюються налаштування локального домену (SID, GUID, назва NetBIOS). " -"Після\n" -"цього створені ідентифікатори використовуються для обміну даними з\n" -"довіреним доменом певного типу.\n" -"\n" -"1. Показати налаштування довіри загального рівня для типів довіри Active " -"Directory:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Змінити загальні налаштування для всіх довір типу Active Directory і\n" -" встановити іншу резервну основну групу (GID резервної основної групи\n" -" використовується як GID основного користувача, якщо користувача\n" -" розпізнано у домені IPA, але він не має жодного вже встановленого\n" -" основного GID):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Повернути для резервної основної групи значення типової прихованої групи\n" -" (будь-якої групи, у якій дозволено клас об’єктів posixGroup):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" - -#, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr " Крім того, цю команду можуть виконати такі сервери: %(masters)s" - -msgid "AD Trust setup" -msgstr "Налаштування довіри AD" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" -"Виконати вибрану команду без встановленої підтримки Samba 4 неможливо. " -"Переконайтеся, що вами встановлено підпакунок IPA server-trust-ad." - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" -"Вибрану команду не можна виконати без екземпляра Samba 4, встановленого у " -"цій системі. Переконайтеся, що на цьому сервері було виконано ipa-adtrust-" -"install." - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "" -"Спроба отримати список доменів із довіреного лісу зазнала невдачі. Подробиці " -"можна знайти у error_log" - -msgid "trust" -msgstr "довіра" - -msgid "trusts" -msgstr "записи довіри" - -msgid "Trusts" -msgstr "Записи довіри" - -msgid "Trust" -msgstr "Довіра" - -msgid "SID blocklist incoming" -msgstr "Список блокування вхідних SID" - -msgid "SID blocklist outgoing" -msgstr "Список блокування вихідних SID" - -msgid "Trust direction" -msgstr "Напрямок довіри" - -msgid "Trust type" -msgstr "Тип довіри" - -msgid "Trust status" -msgstr "Стан довіри" - -msgid "UPN suffixes" -msgstr "Суфікси UPN" - -#, python-brace-format -msgid "invalid SID: {SID}" -msgstr "некоректний SID: {SID}" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" -"\n" -"Додати новий запис довіри для використання.\n" -"\n" -"За допомогою цієї команди можна встановити відносини довіри з\n" -"іншим доменом, який після цього вважається «довіреним». У результаті\n" -"користувачі довіреного домену зможуть отримувати доступ до ресурсів\n" -"цього домену.\n" -"\n" -"У поточній версії передбачено підтримку лише відносин довіри з доменами\n" -"Active Directory.\n" -"\n" -"Команду можна безпечно запускати декілька разів для одного і того самого\n" -"домену, такий запуск призводить до зміни у реєстраційних записах відносин\n" -"довіри з обох боків.\n" -"\n" -"Зауважте, що якщо команда раніше виконувалася із вказаним типом діапазону\n" -"або автоматичним визначенням типу діапазону, і ви хочете налаштувати\n" -"інший тип діапазону, ймовірно, вам доведеться вилучити першй діапазон " -"ідентифікаторів\n" -"за допомогою ipa idrange-del, перш ніж ви зможете повторити команду із " -"бажаним типом.\n" -" " - -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "" -"Тип діапазону ідентифікаторів довіреного домену, одне з дозволених значень" - -msgid "External trust" -msgstr "Зовнішня довіра" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "" -"Встановити зовнішню довіру до домену у іншому лісі. Довіра не переходить за " -"межі домену." - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "Додано запис довіри Active Directory для області «%(value)s»" - -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "Відновлено довіру до домену «%(value)s»" - -msgid "missing base_id" -msgstr "не вистачає base_id" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "pysss_murmur на сервері не доступний, отже base-id не надано." - -msgid "trust type" -msgstr "тип довіри" - -msgid "only \"ad\" is supported" -msgstr "передбачено підтримку лише «ad»" - -msgid "domain" -msgstr "домен" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "" -"Не можна встановлювати довіру до AD, розгорнутою у тому самому домені, що і " -"IPA. Підтримки такої можливості не передбачено." - -msgid "Realm-domain mismatch" -msgstr "Невідповідність між областю і доменом" - -msgid "" -"To establish trust with Active Directory, the domain name and the realm name " -"of the IPA server must match" -msgstr "" -"Для встановлення довіри з Active Directory назва домену і назва області " -"сервера IPA мають збігатися" - -#, python-format -msgid "" -"Trusted domain %(domain)s is included among IPA realm domains. It needs to " -"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" -"del-domain\" command." -msgstr "" -"До доменів області IPA включено домен %(domain)s. Перш ніж встановлювати " -"довіру, це включення слід усунути. Див. команду «ipa realmdomains-mod --del-" -"domain»." - -msgid "Trusted domain and administrator account use different realms" -msgstr "" -"Довіреним доменом і обліковим записом адміністратора використовуються різні " -"області" - -msgid "Realm administrator password should be specified" -msgstr "Має бути вказано пароль адміністратора області" - -msgid "id range type" -msgstr "тип діапазону ідентифікаторів" - -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" -"Якщо додається зв’язок довіри AD, значенням --range-type має бути лише ipa-" -"ad-trust або ipa-ad-trust-posix." - -msgid "id range" -msgstr "діапазон ідентифікаторів" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" -"Для цього зв’язку довіри вже існує діапазон ідентифікаторів. Вам слід або " -"вилучити попередній діапазон, або виключити з команди параметри --base-id/--" -"range-size." - -msgid "range exists" -msgstr "діапазон вже існує" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "" -"Вже існує діапазон ідентифікаторів з тією самою назвою але іншим доменом " -"SID. Діапазон ідентифікаторів для нового довіреного домену має бути створено " -"вручну." - -msgid "range type change" -msgstr "зміна типу діапазону" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" -"Діапазон ідентифікаторів для довіреного домену вже існує, але належить до " -"іншого типу. Будь ласка, вилучіть попередній діапазон вручну або не " -"визначайте тип у примусовому порядку за допомогою параметра --range-type." - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "Не вдалося визначити контролер домену для домену {domain}. " - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "" -"Для нього у DNS IPA визначено правила переспрямовування. Можливо, " -"переспрямовувач вказує не помилковий вузол?" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" -"IPA керує DNS. Будь ласка, переконайтеся, що поточні налаштування DNS " -"уможливлюють визначення адрес службових записів домену «{domain}». Приклади " -"налаштовування DNS за допомогою командного інтерфейсу або вебінтерфейсу " -"наведено у документації. " - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" -"Оскільки IPA не керує записами DNS, слід налаштувати DNS так, щоб система " -"визначала адресу домену «{domain}» за даними щодо вузлів IPA, і навпаки." - -msgid "Unable to verify write permissions to the AD" -msgstr "Не вдалося перевірити права доступу на запис до AD" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "Вказано недостатньо аргументів для виконання налаштовування довіри" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "Вилучено запис довіри «%(value)s»" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" -"\n" -" Змінити запис довіри (для наступного використання).\n" -"\n" -" У поточній версії можлива зміна лише типова зміна атрибутів LDAP.\n" -" Додаткові варіанти буде додано у наступних випусках.\n" -" " - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "Змінено довіру «%(value)s» (зміни набудуть чинності за 60 секунд)" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "встановлено відповідність %(count)d запису довіри" -msgstr[1] "встановлено відповідність %(count)d записів довіри" -msgstr[2] "встановлено відповідність %(count)d записів довіри" - -msgid "trust configuration" -msgstr "довірені налаштування" - -msgid "Global Trust Configuration" -msgstr "Загальні довірені налаштування" - -msgid "IPA AD trust agents" -msgstr "Агенти довіри AD IPA" - -msgid "IPA servers configured as AD trust agents" -msgstr "Сервери IPA, які налаштовано як агенти довіри AD" - -msgid "IPA AD trust controllers" -msgstr "Контролери довіри AD IPA" - -msgid "IPA servers configured as AD trust controllers" -msgstr "Сервери IPA, які налаштовано як контролери довіри AD" - -msgid "unsupported trust type" -msgstr "непідтримуваний тип довіри" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "Змінено налаштування довіри «%(value)s»" - -msgid "SID" -msgstr "SID" - -msgid "sidgen_was_run" -msgstr "sidgen_was_run" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "" -"Для виконання цієї команди має існувати група «editors», але групи з такою " -"назвою не знайдено." - -msgid "trust domain" -msgstr "довірений домен" - -msgid "trust domains" -msgstr "довірені домени" - -msgid "Trusted domains" -msgstr "Довірені домени" - -msgid "Trusted domain" -msgstr "Довірений домен" - -msgid "Domain enabled" -msgstr "Домен увімкнено" - -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "Дані щодо довіреного домену «%(value)s» вилучено" - -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" -"вилучення кореневого домену правила довіри неможливе, скористайтеся trust-" -"del для вилучення самого правила довіри" - -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "" -"Список довірених доменів успішно оновлено. Для отримання поточного списку " -"цих доменів скористайтеся командою trustdomain-find." - -msgid "Configure this server as a trust agent." -msgstr "Налаштувати цей сервер як довірений агент." - -msgid "Enable support for trusted domains for old clients" -msgstr "Увімкнути підтримку довірених доменів для застарілих клієнтів" - -msgid "not allowed to remotely add agent" -msgstr "заборонено віддалено додавати агентів" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "Увімкнено домен довіри «%(value)s»" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "" -"Кореневий домен правила довіри для наявного правила довіри завжди увімкнено" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "Домен довіри «%(value)s» вимкнено" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "" -"вимикання кореневого домену правила довіри неможливе, скористайтеся trust-" -"del для вилучення самого правила довіри" - -msgid "" -"\n" -"Vaults\n" -msgstr "" -"\n" -"Сховища\n" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" -"\n" -"Керування сховищами.\n" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" -"\n" -"Сховище — безпечне місце для зберігання ключа. Одне сховище\n" -"може містити лише один ключ. При архівуванні ключа до сховища,\n" -"наявний ключ (якщо такий існує) буде перезаписано.\n" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" -"\n" -"За правами власності сховища поділяються на три категорії:\n" -"* приватні сховища користувачів\n" -"* сховища служб\n" -"* сховища спільного використання\n" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" -"\n" -"Сховища користувачів — це сховища, власником яких є конкретний\n" -"користувач. Приватними є сховища, власником яких є поточний\n" -"користувач. Власником сховища служби є певна служба. Сховища\n" -"спільного використання належать адміністратору, але можуть\n" -"використовуватися іншими користувачами або службами.\n" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" -"\n" -"За механізмами захисту сховища поділяються на три\n" -"типи:\n" -"* стандартні сховища\n" -"* симетричні сховища\n" -"* асиметричні сховища\n" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" -"\n" -"У стандартному сховищі для передавання і зберігання реєстраційних\n" -"даних використовуються безпечні механізми. Реєстраційні дані\n" -"може бути отримано лише користувачами, які мають доступ\n" -"до сховища.\n" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" -"\n" -"Симетричне сховище є подібним до стандартного сховища, але\n" -"у ньому реєстраційні дані попередньо шифруються до\n" -"передавання за допомогою пароля.\n" -"Реєстраційні дані можна отримати лише за допомогою цього пароля.\n" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" -"\n" -"Асиметричне сховище є подібним до стандартного сховища, але\n" -"у ньому реєстраційні дані попередньо шифруються до\n" -"передавання за допомогою відкритого ключа.\n" -"Реєстраційні дані можна отримати лише за допомогою закритого ключа.\n" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Вивести список сховищ:\n" -" ipa vault-find\n" -" [--user <користувач>|--service <служба>|--shared]\n" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" -"\n" -" Додати стандартне сховище:\n" -" ipa vault-add <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --type standard\n" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" -"\n" -" Додати симетричне сховище:\n" -" ipa vault-add <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --type symmetric --password-file пароль.txt\n" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" -"\n" -" Додати асиметричне сховище:\n" -" ipa vault-add <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --type asymmetric --public-key-file відкритий_ключ.pem\n" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Показати сховище:\n" -" ipa vault-show <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" -"\n" -" Змінити опис сховища:\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --desc <опис>\n" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" -"\n" -" Змінити тип сховища:\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --type <тип>\n" -" [старий пароль/закритий ключ]\n" -" [новий пароль/відкритий ключ]\n" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" -"\n" -" Змінити пароль до симетричного сховища:\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --change-password\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --old-password <старий пароль>\n" -" --new-password <новий пароль>\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --old-password-file <файл старого пароля>\n" -" --new-password-file <файл нового пароля>\n" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" -"\n" -" Змінити ключ асиметричного сховища:\n" -" ipa vault-mod <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --private-key-file <файл старого закритого ключа>\n" -" --public-key-file <файл нового відкритого ключа>\n" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" -"\n" -" Вилучити сховище:\n" -" ipa vault-del <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" -"\n" -" Вивести налаштування сховищ:\n" -" ipa vaultconfig-show\n" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" -"\n" -" Архівувати дані до стандартного сховища:\n" -" ipa vault-archive \n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --in <файл вхідних даних>\n" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" -"\n" -" Архівувати дані до симетричного сховища:\n" -" ipa vault-archive \n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --in <файл вхідних даних>\n" -" --password-file пароль.txt\n" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" -"\n" -" Архівувати дані до асиметричного сховища:\n" -" ipa vault-archive \n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --in <файл вхідних даних>\n" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" -"\n" -" Отримати дані зі стандартного сховища:\n" -" ipa vault-retrieve <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --out <файл результатів>\n" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" -"\n" -" Отримати дані з симетричного сховища:\n" -" ipa vault-retrieve <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --out <файл результатів>\n" -" --password-file password.txt\n" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" -"\n" -" Отримати дані з асиметричного сховища:\n" -" ipa vault-retrieve <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" --out <файл результатів> --private-key-file private.pem\n" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Додати записи власників сховища:\n" -" ipa vault-add-owner <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Вилучити записи учасників сховища:\n" -" ipa vault-remove-owner <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Додати записи учасників сховища:\n" -" ipa vault-add-member <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" -"\n" -" Вилучити записи учасників сховища:\n" -" ipa vault-remove-member <назва>\n" -" [--user <користувач>|--service <служба>|--shared]\n" -" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" -"\n" -" Об’єкт контейнера сховищ.\n" -" " - -msgid "vaultcontainer" -msgstr "контейнер сховищ" - -msgid "vaultcontainers" -msgstr "контейнери сховищ" - -msgid "Vault Containers" -msgstr "Контейнери сховищ" - -msgid "Vault Container" -msgstr "Контейнер сховищ" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "" -"Параметри служби, спільного використання та користувача не можна вказувати " -"одночасно" - -msgid "Host is not supported" -msgstr "Підтримки вузла не передбачено" - -msgid "KRA service is not enabled" -msgstr "Службу KRA не увімкнено" - -msgid "Deleted vault container" -msgstr "Вилучено контейнер сховищ" - -#, python-format -msgid "owner %s" -msgstr "власник %s" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" -"\n" -" Об’єкт сховища.\n" -" " - -msgid "vault" -msgstr "сховище" - -msgid "vaults" -msgstr "сховища" - -msgid "Vaults" -msgstr "Сховища" - -msgid "Vault" -msgstr "Сховище" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "" -"Параметри служби, спільного використання та користувача не можна вказувати " -"одночасно" - -msgid "Add a vault." -msgstr "Додати сховище." - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "Додано сховище «%(value)s»" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "Вилучено сховище «%(value)s»" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "встановлено відповідність %(count)d сховища" -msgstr[1] "встановлено відповідність %(count)d сховищ" -msgstr[2] "встановлено відповідність %(count)d сховищ" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "" -"Параметри служби, спільного використання та користувача не можна вказувати " -"одночасно" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "Змінено сховище «%(value)s»" - -msgid "Vault configuration" -msgstr "Налаштування сховища" - -msgid "IPA KRA servers" -msgstr "Сервери KRA IPA" - -msgid "IPA servers configured as key recovery agents" -msgstr "" -"Сервери IPA, налаштовані як агенти відновлення ключів (key recovery agents)" - -msgid "Key wrapping algorithm" -msgstr "Алгоритм обгортки ключа" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "Дані архівовано до сховища «%(value)s»" - -msgid "Retrieve data from a vault." -msgstr "Отримати дані зі сховища." - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "Отримано дані зі сховища «%(value)s»" - -msgid "No archived data." -msgstr "Немає архівованих даних." - -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "Перевіряє, чи увімкнено на якомусь із серверів службу KRA" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" -"\n" -"Основний користувач\n" -"\n" -"Містить загальні визначення щодо користувача або користувача етапу.\n" - -msgid "must be TRUE or FALSE" -msgstr "має дорівнювати TRUE або FALSE" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" -"Немає класу об'єктів ipaNTUserAttrs. Через це запис користувача не може " -"містити атрибутів SMB." - -msgid "Principal alias" -msgstr "Псевдонім реєстраційного запису" - -msgid "User password expiration" -msgstr "Вичерпання строку дії пароля користувача" - -msgid "SSH public key fingerprint" -msgstr "Відбиток відкритого ключа SSH" - -msgid "External IdP configuration" -msgstr "Налаштування зовнішнього IdP" - -msgid "External IdP user identifier" -msgstr "Ідентифікатор користувача зовнішнього IdP" - -msgid "A string that identifies the user at external IdP" -msgstr "Рядок, який ідентифікує користувача на зовнішньому IdP" - -msgid "Base-64 encoded user certificate" -msgstr "Сертифікат користувача у кодуванні Base-64" - -msgid "Certificate mapping data" -msgstr "Дані прив’язки сертифіката" - -msgid "SMB logon script path" -msgstr "Шлях до скрипту входу до SMB" - -msgid "SMB profile path" -msgstr "Шлях до профілю SMB" - -msgid "SMB Home Directory" -msgstr "Домашній каталог SMB" - -msgid "SMB Home Directory Drive" -msgstr "Диск домашнього каталогу SMB" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "некоректний формат адреси електронної пошти: %(email)s" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "керування %(manager)s не знайдено" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "не повинне перевищувати %(len)d символів у довжину" - -msgid "Issuer" -msgstr "Видавець" - -msgid "Issuer of the certificate" -msgstr "Видавець сертифіката" - -msgid "Subject" -msgstr "Об’єкт" - -msgid "Subject of the certificate" -msgstr "Призначення сертифіката" - -msgid "cannot have an empty subject" -msgstr "поле призначення не може бути порожнім" - -msgid "cannot specify both subject/issuer and certificate" -msgstr "не можна вказувати одночасно subject/issuer і certificate" - -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "не можна вказувати одночасно subject/issuer і ipacertmapdata" - -msgid "Add one or more certificate mappings to the user entry." -msgstr "Додати одну або декілька прив’язок сертифікатів до запису користувача." - -#, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "Додано прив’язки сертифікатів до запису користувача «%(value)s»" - -msgid "Remove one or more certificate mappings from the user entry." -msgstr "" -"Вилучити одну або декілька прив’язок сертифікатів із запису користувача." - -#, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "Вилучено прив’язки сертифікатів до запису користувача «%(value)s»" - msgid "" "\n" -"Manage CA ACL rules.\n" +"Stageusers\n" "\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" +"Manage stage user entries.\n" "\n" -"SUBJECT PRINCIPAL SCOPE:\n" +"Stage user entries are directly under the container: \"cn=stage users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries\n" +"contain credentials) and are candidate to become Active entries.\n" "\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" +"Active user entries are Posix users directly under the container: " +"\"cn=accounts, SUFFIX\".\n" +"User can authenticate with Active entries, at the condition they have\n" +"credentials\n" "\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" +"Delete user entries are Posix users directly under the container: " +"\"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"User can not authenticate with those entries (even if the entries contain " +"credentials)\n" "\n" -"CERTIFICATE AUTHORITY SCOPE:\n" +"The stage user container contains entries\n" +" - created by 'stageuser-add' commands that are Posix users\n" +" - created by external provisioning system\n" "\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" +"A valid stage user entry MUST:\n" +" - entry RDN is 'uid'\n" +" - ipaUniqueID is 'autogenerate'\n" "\n" -"PROFILE SCOPE:\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" "\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" "\n" "EXAMPLES:\n" "\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" +" Add a new stageuser:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" "\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" +" Add a stageuser from the Delete container\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" msgstr "" "\n" -"Керування правилами ACL CA.\n" +"Користувачі етапу\n" "\n" -"Цим додатком можна скористатися для визначення правил керування тим,\n" -"які служби сертифікації та профілі можна використовувати для видавання\n" -"сертифікатів певним реєстраційним записам або група реєстраційних\n" -"записів.\n" +"Керування записами користувачів етапу.\n" "\n" -"ОБЛАСТЬ ДІЇ РЕЄСТРАЦІЙНИХ ЗАПИСІВ ОБ’ЄКТА:\n" +"Записи користувачів етапу перебувають безпосередньо у контейнері:\n" +"\"cn=stage users, cn=accounts, cn=provisioning, SUFFIX\".\n" +"Користувач не може пройти розпізнавання за допомогою цих записів\n" +"(навіть якщо записи містять реєстраційні дані) і є кандидатами на\n" +"перетворення на активні записи.\n" "\n" -"Щоб запит щодо сертифікації було задоволено, реєстраційні записи,\n" -"які є об’єктом запиту щодо сертифікації (необов’язково ті самі,\n" -"що і реєстраційний запис, з якого надсилається запит щодо сертифікації)\n" -"має бути включено до області дії ACL служби сертифікації, що\n" -"також включає службу сертифікації та профіль призначення.\n" +"Записи активних користувачів є користувачами Posix, що перебувають\n" +"безпосередньо у контейнері: \"cn=accounts, SUFFIX\".\n" +"Користувач може пройти розпізнавання за допомогою активних записів,\n" +"якщо для них передбачено реєстраційні дані\n" "\n" -"Користувачів можна включати за іменем, групою або категорією\n" -"«усі користувачі». Вузли можна включати за назвою, групою вузлів\n" -"або категорією «усі вузли». Служби можна включати за назвою служби\n" -"або категорією «усі служби». ACL служб сертифікації може бути\n" -"пов’язано із одним типом реєстраційних записів або із декількома\n" -"типами.\n" +"Вилучені записи користувачів є записами користувачів Posix, що\n" +"перебувають безпосередньо у контейнері: \"cn=deleted users,\n" +"cn=accounts, cn=provisioning, SUFFIX\".\n" +"Користувачі не можуть проходити розпізнавання за допомогою цих\n" +"записів (навіть якщо записи містять реєстраційні дані)\n" "\n" -"ОБЛАСТЬ ДІЇ СЛУЖБИ СЕРТИФІКАЦІЇ:\n" +"Контейнер користувачів етапу містить записи\n" +" - створені командами 'stageuser-add', які є користувачами Posix\n" +" - створені зовнішньою системою забезпечення\n" "\n" -"ACL служби сертифікації може бути пов’язано із однією або\n" -"декількома службами сертифікації за назвою або за категорією\n" -"«усі CA». З міркувань сумісності ACL служби сертифікації без\n" -"прив’язки до служби сертифікації вважається таким, що пов’язано\n" -"із службою сертифікації «ipa» (і лише з цією службою сертифікації).\n" +"Коректний запис користувача етапу МАЄ відповідати таким вимогам:\n" +" - RDN запису має значення 'uid'\n" +" - ipaUniqueID має значення 'autogenerate'\n" "\n" -"ОБЛАСТЬ ДІЇ ПРОФІЛІВ:\n" +"У IPA передбачено підтримку широкого діапазону форматів імен користувачів,\n" +"але слід зважати на різноманітні обмеження, які можуть стосуватися " +"середовища,\n" +"у якому ви працюєте. Наприклад, імена користувачів, що починаються з цифри,\n" +"або імена користувачів, довжина яких перевищує певну довжину, що може\n" +"призвести до проблем у деяких системах UNIX.\n" +"Для зміни формату, який дозволено інструментами IPA, скористайтеся командою\n" +"'ipa config-mod'.\n" "\n" -"ACL служби сертифікації може бути пов’язано із одним або декількома\n" -"профілями за ідентифікатором профілю. Ідентифікатором профілю\n" -"вважається рядок без пробілів і символів пунктуації, що починається\n" -"із літери і є послідовністю літер, цифр та символів підкреслювання\n" -"(«_»).\n" "\n" "ПРИКЛАДИ:\n" "\n" -" Створити ACL служби сертифікації «test», який надає доступ усім\n" -" користувачам до профілю «UserCert» на усіх службах сертифікації:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" +" Додати нового користувача етапу:\n" +" ipa stageuser-add --first=Tim --last=User --password tuser1\n" "\n" -" Вивести властивості вказаного за назвою ACL служби сертифікації:\n" -" ipa caacl-show test\n" -"\n" -" Створити ACL служби сертифікації, який надаватиме змогу\n" -" користувачеві «alice» використовувати профіль «DNP3» на «DNP3-CA»:\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Вимкнути ACL служби сертифікації:\n" -" ipa caacl-disable test\n" -"\n" -" Вилучити ACL служби сертифікації:\n" -" ipa caacl-del test\n" - -msgid "CA ACL" -msgstr "CA ACL" - -msgid "CA ACLs" -msgstr "CA ACL" - -msgid "CA category" -msgstr "Категорія CA" - -msgid "CA category the ACL applies to" -msgstr "Категорія CA, до якої застосовується ACL" - -msgid "CAs" -msgstr "CA" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "Додано CA ACL «%(value)s»" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "Вилучено CA ACL «%(value)s»" - -msgid "default CA ACL can be only disabled" -msgstr "типовий ACL CA можна лише вимкнути" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "Змінено CA ACL «%(value)s»" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "" -"не можна встановлювати для категорії CA значення «all», доки є записи " -"дозволених CA" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "" -"не можна встановлювати для категорії профілів значення «all», доки є записи " -"дозволених профілів" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "" -"не можна встановлювати для категорії служб значення «all», доки є дозволені " -"служби" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "встановлено відповідність %(count)d CA ACL" -msgstr[1] "встановлено відповідність %(count)d CA ACL" -msgstr[2] "встановлено відповідність %(count)d CA ACL" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "Увімкнено CA ACL «%(value)s»" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "Вимкнено CA ACL «%(value)s»" - -#, python-format -msgid "%i user or group added." -msgstr "Додано %i користувача або групу." - -#, python-format -msgid "%i users or groups added." -msgstr "Додано %i користувачів або груп." - -msgid "users cannot be added when user category='all'" -msgstr "" -"не можна додавати записи користувачів, якщо категорія користувачів=«all»" - -#, python-format -msgid "%i user or group removed." -msgstr "Вилучено %i користувача або групу." - -#, python-format -msgid "%i users or groups removed." -msgstr "Вилучено %i користувачів або груп." - -#, python-format -msgid "%i host or hostgroup added." -msgstr "Додано %i вузол або групу вузлів." - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "Додано %i вузлів або груп вузлів." - -msgid "hosts cannot be added when host category='all'" -msgstr "не можна додавати записи вузлів, якщо категорія вузлів=«all»" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "Вилучено %i вузол або групу вузлів." - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "Вилучено %i вузлів або груп вузлів." - -#, python-format -msgid "%i service added." -msgstr "Додано %i службу." - -#, python-format -msgid "%i services added." -msgstr "Додано %i служб." - -msgid "services cannot be added when service category='all'" -msgstr "не можна додавати записи служб, якщо категорія служб=«all»" - -#, python-format -msgid "%i service removed." -msgstr "Вилучено %i службу." - -#, python-format -msgid "%i services removed." -msgstr "Вилучено %i служб." - -#, python-format -msgid "%i profile added." -msgstr "Додано %i профіль." - -#, python-format -msgid "%i profiles added." -msgstr "Додано %i профілів." - -msgid "profiles cannot be added when profile category='all'" -msgstr "профілі не можна додавати, якщо категорія профілів «all»" - -#, python-format -msgid "%i profile removed." -msgstr "Вилучено %i профіль." - -#, python-format -msgid "%i profiles removed." -msgstr "Вилучено %i профілів." - -msgid "Add CAs to a CA ACL." -msgstr "Додати CA до ACL CA." - -#, python-format -msgid "%i CA added." -msgstr "Додано %i CA." - -#, python-format -msgid "%i CAs added." -msgstr "Додано %i CA." - -msgid "CAs cannot be added when CA category='all'" -msgstr "Не можна додавати CA, якщо категорія CA='all'" - -msgid "Remove CAs from a CA ACL." -msgstr "Вилучити CA з ACL CA." - -#, python-format -msgid "%i CA removed." -msgstr "Вилучено %i." - -#, python-format -msgid "%i CAs removed." -msgstr "Вилучено %i CA." - -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "" -"\n" -"Прив’язка сертифікатів до профілів\n" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" -"\n" -"Керування налаштуваннями і правилами прив’язки сертифікатів до профілів.\n" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" -"\n" -"У IPA передбачено підтримку використання сертифікатів для розпізнавання. " -"Сертифікати\n" -"можуть зберігатися або у записі користувача (весь сертифікат у атрибуті\n" -"usercertificate), або просто прив’язуватися до запису користувача.\n" -"Цей код уможливлює керування правилами доступу до прив’язування сертифіката " -"до\n" -"запису користувача.\n" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" -"\n" -" Вивести загальні налаштування прив’язки сертифікатів до профілів:\n" -" ipa certmapconfig-show\n" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" -"\n" -" Змінити загальні налаштування прив’язки сертифікатів до профілів:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" -"\n" -" Створити правило прив’язування сертифікатів до профілів:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" -"\n" -" Змінити правило прив’язування сертифікатів до профілів:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" -"\n" -" Вимкнути правило прив’язування сертифікатів до профілів:\n" -" ipa certmaprule-disable rule1\n" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" -"\n" -" Увімкнути правило прив’язування сертифікатів до профілів:\n" -" ipa certmaprule-enable rule1\n" - -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "" -"\n" -" Вивести дані щодо правила прив’язування сертифікатів до профілів:\n" -" ipa certmaprule-show rule1\n" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" -"\n" -" Знайти усі правила прив’язування сертифікатів до профілів із вказаним " -"доменом:\n" -" ipa certmaprule-find --domain example.com\n" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" -"\n" -" Вилучити правило прив’язування сертифікатів до профілів:\n" -" ipa certmaprule-del rule1\n" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" -"Домени «%s» не можна використовувати для застосування перевірки " -"altSecurityIdentities." - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" -"До довіреного домену Active Directory має бути застосовано правило прив'язки " -"з altSecurityIdentities, але з цим правилом не пов'язано жодного домену." - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "Домен %s не є ні доменом IPA, ні довіреним доменом." - -msgid "Certificate Identity Mapping configuration options" -msgstr "Параметри налаштування прив’язки сертифікатів до профілів" - -msgid "Certificate Identity Mapping Global Configuration" -msgstr "Загальні налаштування прив’язки сертифікатів до профілів" - -msgid "Prompt for the username" -msgstr "Запит щодо імені користувача" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" -"Запитувати ім’я користувача, якщо із сертифікатом пов’язано декілька профілів" - -msgid "Modify Certificate Identity Mapping configuration." -msgstr "Змінити налаштування прив’язки сертифікатів до профілів." - -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "Показати поточні налаштування прив’язки сертифікатів до профілів." - -msgid "Certificate Identity Mapping Rules" -msgstr "Правила прив’язування сертифікатів до профілів" - -msgid "Certificate Identity Mapping Rule" -msgstr "Правило прив’язування сертифікатів до профілів" - -msgid "Certificate Identity Mapping Rule name" -msgstr "Назва правила прив’язування сертифікатів до профілів" - -msgid "Certificate Identity Mapping Rule description" -msgstr "Опис правила прив’язування сертифікатів до профілів" - -msgid "Mapping rule" -msgstr "Правило прив’язування" - -msgid "Rule used to map the certificate with a user entry" -msgstr "" -"Правило, яке використовується для прив’язування сертифіката до запису " -"користувача" - -msgid "Matching rule" -msgstr "Правило відповідності" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" -"Правило, яке використовується для визначення того, чи придатний сертифікат " -"для розпізнавання" - -msgid "Domain where the user entry will be searched" -msgstr "Домен, у якому слід шукати запис користувача" - -msgid "Priority of the rule (higher number means lower priority" -msgstr "Пріоритет правила (більше число — нижчий пріоритет)" - -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "Створити правило прив’язування сертифіката до профілів." - -#, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Додано правило прив’язування сертифікатів до профілів «%(value)s»" - -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "Змінити правило прив’язування сертифікатів до профілів." - -#, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Змінено правило прив’язування сертифікатів до профілів «%(value)s»" - -msgid "Search for Certificate Identity Mapping Rules." -msgstr "Шукати правила прив’язування сертифікатів до профілів." - -#, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "" -"Встановлено відповідність %(count)d правила прив’язування сертифікатів до " -"профілів" -msgstr[1] "" -"Встановлено відповідність %(count)d правил прив’язування сертифікатів до " -"профілів" -msgstr[2] "" -"Встановлено відповідність %(count)d правил прив’язування сертифікатів до " -"профілів" - -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "Вивести дані щодо правила прив’язування сертифікатів до профілів." - -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "Вилучити правило прив’язування сертифікатів до профілів." - -#, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Вилучено правило прив’язування сертифікатів до профілів «%(value)s»" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "Увімкнути правило прив’язування сертифікатів до профілів." - -#, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Увімкнено правило прив’язування сертифікатів до профілів «%(value)s»" - -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "Вимкнути правило прив’язування сертифікатів до профілів." - -#, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "Вимкнено правило прив’язування сертифікатів до профілів «%(value)s»" - -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "" -"Не вдалося встановити з’єднання із sssd за допомогою SystemBus. Докладніший " -"опис — у файлі error_log" - -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "" -"Не вдалося знайти користувачів за допомогою SystemBus. Докладніший опис — у " -"файлі error_log" - -msgid "User logins" -msgstr "Користувачі" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" -"\n" -" Шукати користувачів, яких пов’язано із наданим сертифікатом.\n" -"\n" -" Для отримання списку відповідних користувачів ця команда покладається\n" -" на дані SSSD, отже, вона може повертати кешовані дані. Докладніше про\n" -" очищення кешу SSSD можна дізнатися із документації до sss_cache.\n" -" " - -#, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "Встановлено відповідність %(count)s користувача" -msgstr[1] "Встановлено відповідність %(count)s користувачів" -msgstr[2] "Встановлено відповідність %(count)s користувачів" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" -"\n" -"Налаштування сервера\n" -"\n" -"Керування типовими значеннями, які використовує IPA, та деякими з\n" -"придатних до зміни параметрів.\n" -"\n" -"ЗАУВАЖЕННЯ:\n" -"\n" -"Тут зберігається значення параметра сповіщення щодо паролів\n" -"(--pwdexpnotify), отже його не буде скопійовано. Це значення поки що\n" -"не використовується для сповіщення користувачів щодо завершення строку дії\n" -"пароля.\n" -"\n" -"Деякі з атрибутів придатні лише для читання, їх буде показано лише з метою\n" -"інформування. Серед цих атрибутів:\n" -"\n" -"Основа призначення сертифіката: змінна основа призначення сертифіката,\n" -" наприклад O=EXAMPLE.COM. Цей атрибут можна налаштувати лише під час\n" -" встановлення.\n" -"Параметри додатка роботи з паролями: у поточній версії визначають додаткові\n" -" хеші, які створюються на основі пароля (можуть бути і інші умови).\n" -"\n" -"Під час встановлення списку пріоритетності для користувачів SELinux може " -"виникнути\n" -"потреба у додаванні лапок до значення, щоб оболонка не обробляла параметр.\n" -"\n" -"Максимальна довжина назви вузла у Linux керується значенням\n" -"MAXHOSTNAMELEN у ядрі. Типовим значенням є 64. У деяких інших\n" -"операційних системах, наприклад у Solaris, можна використовувати у\n" -"назвах до 255 символів. Цей параметр надає гнучкості щодо довжини, але\n" -"у Linux його значення все одно обмежено максимальним можливим.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Показати основні налаштування сервера:\n" -" ipa config-show\n" -"\n" -" Показати всі параметри налаштування:\n" -" ipa config-show --all\n" -"\n" -" Змінити максимальну довжину імені користувача на 99 символів:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Змінити максимальну довжину назви вузла на 255 символів:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -"Збільшити типовий час і максимальне обмеження на розмір пошуку\n" -" сервера IPA:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Встановити типовий домен електронної пошти користувачів:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Увімкнути режим перенесення, щоб зробити команду \"ipa migrate-ds\"\n" -" працездатною:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Визначити пріоритетність користувачів у карті SELinux:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" - -msgid "must be at least 10" -msgstr "має бути принаймні 10" - -msgid "configuration options" -msgstr "параметри налаштування" - -msgid "Configuration" -msgstr "Налаштування" - -msgid "Maximum hostname length" -msgstr "Максимальна довжина назви вузла" - -msgid "Enable adding subids to new users" -msgstr "Увімкнути додавання підлеглих ідентифікаторів для нових користувачів" - -msgid "IPA masters" -msgstr "Основні вузли IPA" - -msgid "List of all IPA masters" -msgstr "Список усіх основних вузлів IPA" - -msgid "Hidden IPA masters" -msgstr "Приховані основні сервери IPA" - -msgid "List of all hidden IPA masters" -msgstr "Список усіх прихованих основних серверів IPA" - -msgid "IPA master capable of PKINIT" -msgstr "Основний IPA з можливістю PKINIT" - -msgid "IPA master which can process PKINIT requests" -msgstr "Основний IPA, який може обробляти запити PKINIT" - -msgid "IPA CA servers" -msgstr "Сервери CA IPA" - -msgid "IPA servers configured as certificate authority" -msgstr "Сервери IPA, які налаштовано як центри сертифікації" - -msgid "Hidden IPA CA servers" -msgstr "Приховані сервери CA IPA" - -msgid "Hidden IPA servers configured as certificate authority" -msgstr "Приховані сервери IPA, які налаштовано як служби сертифікації" - -msgid "IPA CA renewal master" -msgstr "Основних вузол відновлення CA IPA" - -msgid "Renewal master for IPA certificate authority" -msgstr "Основний сервер відновлення для центру сертифікації IPA" - -msgid "IPA servers configured as key recovery agent" -msgstr "Сервери IPA, які налаштовано як агенти відновлення ключів" - -msgid "Hidden IPA KRA servers" -msgstr "Приховані сервери KRA IPA" - -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "Приховані сервери IPA, які налаштовано як агенти відновлення ключів" - -msgid "Domain resolution order" -msgstr "Порядок визначення доменів" - -msgid "colon-separated list of domains used for short name qualification" -msgstr "" -"список доменів, відокремлених двокрапками, які використовуються для обробки " -"коротких назв" - -msgid "IPA DNS servers" -msgstr "Сервери DNS IPA" - -msgid "IPA servers configured as domain name server" -msgstr "Сервери IPA, які налаштовано як сервери назв доменів (DNS)" - -msgid "Hidden IPA DNS servers" -msgstr "Приховані сервери DNS IPA" - -msgid "Hidden IPA servers configured as domain name server" -msgstr "Приховані сервери IPA, які налаштовано як сервери назв доменів" - -msgid "IPA DNSSec key master" -msgstr "Основний сервер ключів DNSSec IPA" - -msgid "DNSec key master" -msgstr "Основний сервер ключів DNSec" - -msgid "Setup SID configuration" -msgstr "Вказати налаштування SID" - -msgid "New users and groups automatically get a SID assigned" -msgstr "Нові користувачі і групи автоматично отримують SID" - -msgid "Add SIDs" -msgstr "Додати SID-и" - -msgid "Add SIDs for existing users and groups" -msgstr "Додати SID-и для наявних користувачів та груп" - -msgid "NetBIOS name of the IPA domain" -msgstr "Назва NetBIOS домену IPA" - -msgid "Empty domain is not allowed" -msgstr "Не можна використовувати порожні домени" - -#, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "Некоректна назва домену, «%(domain)s»: %(e)s" - -#, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "На сервері немає інформації щодо домену «%(domain)s»" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "Вимкнений домен «%(domain)s» не можна використовувати" - -msgid "not allowed to enable SID generation" -msgstr "заборонено вмикати створення SID" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" -"Можна використати до 15 символів і лише великих літер ASCII, цифр та " -"дефісів. Не можна лишати рядок порожнім." - -msgid "Failed to call DBus" -msgstr "Не вдалося викликати DBus" - -msgid "Configuration of SID failed. See details in the error log" -msgstr "" -"Не вдалося виконати налаштовування SID. Подробиці можна знайти у журналі" - -msgid "The group doesn't exist" -msgstr "Такої групи не існує" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "не можна використовувати атрибут «%s»" - -msgid "May not be empty" -msgstr "Не може бути порожнім" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "Типовий атрибут %(obj)s, %(attr)s, не буде дозволено!" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "" -"Мало бути вказано список користувачів SELinux, записи якого відокремлено " -"символом $" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "Користувач SELinux «%(user)s» є некоректним: %(error)s" - -msgid "SELinux user map default user not in order list" -msgstr "" -"Типового користувача типової карти користувачів SELinux немає у порядковому " -"списку" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "Ви не можете вказати %s без параметра --enable-sid" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" -"\n" -"Система назв доменів (DNS)\n" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" -"\n" -"Керування записами зон та ресурсів DNS.\n" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" -"\n" -"ПІДТРИМУВАНІ ТИПИ ЗОН\n" -"\n" -" * Основна зона (dnszone-*), містить довірені дані.\n" -" * Зона переспрямовування (dnsforwardzone-*), переспрямовує запити до " -"налаштованих засобів обробки\n" -" (набору серверів DNS).\n" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" -"\n" -"ВИКОРИСТАННЯ СТРУКТУРОВАНИХ ПАРАМЕТРІВ ДЛЯ ОКРЕМИХ ТИПІВ\n" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" -"\n" -"Існує багато структурованих типів RR DNS, для яких дані DNS, що " -"зберігаються\n" -"на сервері LDAP, не є скалярним значенням, наприклад дані щодо IP-адресу " -"або\n" -"назву домену, а структурою даних, яка часто може бути складною. Прикладом\n" -"може бути запис LOC [RFC1876], який складається з багатьох обов’язкових і\n" -"необов’язкових частин (градусів, мінут, секунд широти і довготи, висоти\n" -"та похибки).\n" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" -"\n" -"Робота з такими записами DNS без помилки і введення некоректного значення\n" -"може бути складною. Модуль DNS надає у ваше розпорядження абстракцію над\n" -"цими необробленими записами і спосіб керування кожним з типів RR за\n" -"допомогою специфічних параметрів. Для кожного з підтримуваних типів\n" -"RR у модулі DNS передбачено стандартний параметр для роботи із\n" -"необробленими записами за допомогою формату --<тип_rr>-rec, наприклад,\n" -"--mx-rec та зі спеціальними параметрами для кожної із частин структури RR\n" -"за допомогою формату --<тип_rr>-<назва_частини>, наприклад --mx-preference\n" -"та --mx-exchanger.\n" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" -"\n" -"Під час додавання запису можна скористатися специфічними для RR параметрами\n" -"або стандартним параметром для необробленого значення. Втім, поєднувати\n" -"ці варіанти у одній дії із додавання не можна. Під час внесення змін до\n" -"наявного запису можна скористатися для зміни однієї частини запису DNS\n" -"новими специфічними параметрами RR, причому для визначення зміненого\n" -"значення буде використано стандартний варіант необробленого значення.\n" -"У наведеному нижче прикладі продемонстровано зміну пріоритетності запису\n" -"MX з 0 на 1 у записі без внесення змін до обмінника:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" -"\n" -"\n" -"ПРИКЛАДИ:\n" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" -"\n" -" Додавання нової зони:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" -"\n" -" Додавання загальносистемних прав доступу, якими можна скористатися для " -"делегування привілеїв для окремих зон:\n" -" ipa dnszone-add-permission example.com\n" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" -"\n" -" Зміна зони таким чином, щоб дозволити динамічне оновлення для власних " -"записів вузлів у області EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" -"\n" -" Ця команда еквівалентна до такої команди:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" -"\n" -" Зміна зони таким чином, щоб дозволити перенесення зони лише для локальної " -"мережі:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" -"\n" -" Додавання нової реверсивної зони, вказаної за допомогою мережевої IP-" -"адреси:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" -"\n" -" Додати другий сервер назв для example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" -"\n" -" Додавання поштового сервера для example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" -"\n" -" Додавання ще одного запису за допомогою специфічних для запису MX " -"параметрів:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" -"\n" -" Додавання ще одного запису за допомогою інтерактивного режиму (у який " -"програма переходить\n" -" у відповідь на команди dnsrecord-add, dnsrecord-mod або dnsrecord-del без " -"параметрів):\n" -" ipa dnsrecord-add example.com @\n" -" Будь ласка, виберіть тип запису ресурсу DNS, який слід додати\n" -" Найпоширенішими типами для цього типу зон є: NS, MX, LOC\n" -"\n" -" Тип запису ресурсу DNS: MX\n" -" Пріоритетність MX: 30\n" -" Обмінник MX: mail3\n" -" Назва запису: example.com\n" -" Запис MX: 10 mail1, 20 mail2, 30 mail3\n" -" Запис NS: nameserver.example.com., nameserver2.example.com.\n" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" -"\n" -" Вилучення раніше доданого сервера назв з example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" -"\n" -" Додавання запису LOC для example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" -"\n" -" Додавання нового запису A для www.example.com, крім того, створення " -"зворотного\n" -" запису у відповідній зворотній зоні. У цьому випадку запис PTR «2» вказує " -"на\n" -" www.example.com буде створено у зоні 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" -"\n" -" Додавання нового запису PTR для www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" -"\n" -" Додавання нових записів SRV для серверів LDAP. Три чверті запитів мають\n" -" надсилатися до fast.example.com, а одна чверть — на slow.example.com.\n" -" Якщо жодна зі служб не буде доступною, перемкнутися на backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" -"\n" -" Для полегшення внесення змін можна скористатися інтерактивним режимом:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" Можливості внесення змін у певний запис не передбачено.\n" -" Поточний вміст запису DNS:\n" -"\n" -" Запис SRV: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Змінити запис SRV «0 3 389 fast.example.com»? Так/Ні (типово «Ні»):\n" -" Змінити запис SRV «0 1 389 slow.example.com»? Так/Ні (типово «Ні»): y\n" -" Пріоритетність SRV [0]: (зберегти типове значення)\n" -" Вага SRV [1]: 2 (змінене значення)\n" -" Порт SRV [389]: (зберегти типове значення)\n" -" Призначення SRV [slow.example.com]: (зберегти типове значення)\n" -" Пропущено 1 запис SRV. Одночасно можна змінювати лише одне значення на тип " -"запису DNS.\n" -" Назва запису: _ldap._tcp\n" -" Запис SRV: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 389 " -"slow.example.com\n" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" -"\n" -" Після внесення цих змін три п’ятих запитів має надсилатися до\n" -" fast.example.com, а дві п’ятих — до slow.example.com.\n" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" -"\n" -" Приклад інтерактивного режиму для команди dnsrecord-del:\n" -" ipa dnsrecord-del example.com www\n" -" Не вказано параметр вилучення певного запису.\n" -" Вилучити усі? Так/Ні (типово «Ні»): (не вилучати усі записи)\n" -" Поточний вміст запису DNS:\n" -"\n" -" Запис A: 192.0.2.2, 192.0.2.3\n" -"\n" -" Вилучити запис A «192.0.2.2»? Так/Ні (типово «Ні»):\n" -" Вилучити запис A «192.0.2.3»? Так/Ні (типово «Ні»): y\n" -" Назва запису: www\n" -" Запис A: 192.0.2.2 (Запис A 192.0.2.3 вилучено)\n" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" -"\n" -" Показати зону example.com:\n" -" ipa dnszone-show example.com\n" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" -"\n" -" Знайти зону зі словом «example» у назві домену:\n" -" ipa dnszone-find example\n" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" -"\n" -" Знайти записи для ресурсів з «www» у назві у зоні example.com:\n" -" ipa dnsrecord-find example.com www\n" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" -"\n" -" Знайти записи A зі значенням 192.0.2.2 у зоні example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" -"\n" -" Показати записи для ресурсу www у зоні example.com\n" -" ipa dnsrecord-show example.com www\n" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" -"\n" -" Делегування зони sub.example до іншого сервера назв:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" -"\n" -" Вилучення зони example.com з усіма записами ресурсів:\n" -" ipa dnszone-del example.com\n" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" -"\n" -" Якщо налаштовано загальний переспрямовувач, усі запити, для яких цей сервер " -"не є\n" -" надійним (наприклад sub.example.com) не маршрутизуватимуться до загального\n" -" переспрямовувача.\n" -" Загальні налаштування переспрямовування можна перевизначати для окремих " -"зон.\n" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" -"\n" -" Семантика переспрямовування у IPA збігається із семантикою BIND і залежить\n" -" від типу зони:\n" -" * Основна зона: локальний BIND надає надійні відповіді для даних у " -"заданій\n" -" зоні (включено з надійними відповідями NXDOMAIN), а переспрямовування\n" -" стосуватиметься лише запитів щодо назв за межами (записами NS) зон, що\n" -" обслуговуються локально.\n" -"\n" -" * Зона переспрямовування: зона переспрямовування не містить надійних " -"даних. BIND\n" -" переспрямовує запити, на які не вдалося отримати відповіді з локального " -"кешу, до\n" -" налаштованих переспрямовувачів.\n" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" -"\n" -" Семантика параметра --forward-policy:\n" -" * none — вимкнути переспрямовування для вказаної зони.\n" -" * first — спрямувати усі запити до налаштованих переспрямовувачів. Якщо\n" -" це не спрацює, виконати перетворення за допомогою кореневих серверів " -"DNS.\n" -" * only — спрямувати усі запити до налаштованих переспрямовувачів. Якщо\n" -" це не спрацює, повернути повідомлення про помилку.\n" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" -"\n" -" Вимикання загального переспрямовування для вказаного піддерева:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" -"\n" -" За цих налаштувань усі запити щодо назв поза піддеревом example.com буде\n" -" спрямовано до загальних переспрямовувачів. Для назв у межах піддерева\n" -" example.com буде використано звичайну рекурсивну (тобто з переходом за\n" -" записами NS) процедуру визначення.\n" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" -"\n" -" Переспрямувати усі запити для зони external.example.com до іншого " -"переспрямовувача\n" -" з використанням правила «first» (надсилати запити до вибраного " -"переспрямовувача і,\n" -" якщо він не відповість, скористатися загальними кореневими серверами):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" -"\n" -" Змінити правила переспрямовування для external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" -"\n" -" Показати зону переспрямовування external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" -"\n" -" Показати список усіх зон переспрямовування:\n" -" ipa dnsforwardzone-find\n" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" -"\n" -" Вилучення зони переспрямовування external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" -"\n" -" Визначити адресу вузла за назвою, якщо адреса існує (додасть типовий\n" -" домен IPA, якщо домен не включено):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" -"\n" -"\n" -"ЗАГАЛЬНІ НАЛАШТУВАННЯ DNS\n" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" -"\n" -"Налаштування DNS, що передаються до скрипту командного рядка для " -"встановлення,\n" -"зберігаються у локальному файлі налаштувань на кожному з серверів IPA, де\n" -"налаштовано службу DNS. Ці локальні параметри можна перевизначити за " -"допомогою\n" -"загальних налаштувань, що зберігаються на сервері LDAP:\n" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" -"\n" -" Показати загальні налаштування DNS:\n" -" ipa dnsconfig-show\n" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" -"\n" -" Зміна загальних налаштувань DNS і встановлення списку загальних " -"переспрямовувачів:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" - -msgid "invalid IP network format" -msgstr "некоректний формат запису мережі IP" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "кожен з елементів ACL має бути відокремлено від інших крапкою з комою" - -msgid "invalid address format" -msgstr "некоректний формат адреси" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "" -"очікуваний формат: <0-255> <0-255> <0-65535> " -"парна_кількість_шістнадцяткових_цифр_або_дефіс" - -msgid "algorithm value: allowed interval 0-255" -msgstr "значення алгоритму: дозволеним є інтервал від 0 до 255" - -msgid "flags value: allowed interval 0-255" -msgstr "значення прапорців: дозволеним є інтервал від 0 до 255" - -msgid "iterations value: allowed interval 0-65535" -msgstr "значення кількості ітерацій: дозволеним є інтервал від 0 до 65535" - -#, python-format -msgid "salt value: %(err)s" -msgstr "значення солі: %(err)s" - -msgid "invalid domain-name: not fully qualified" -msgstr "некоректна назва домену: назва не є повною" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "не можна використовувати шаблон назви домену (RFC 4592, розділ 4)" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" -"Не вдалося отримати відповідь на запит щодо зворотної зони DNS %(revdns)s " -"від жодного із серверів назв" - -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" -"Не вдалося знайти жодної відповіді протягом вказаного періоду життя " -"зворотної зони DNS %(revdns)s" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "" -"Зворотна зона DNS %(revzone)s для IP-адреси %(addr)s не керується цим " -"сервером" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "Зони DNS %(zone)s не знайдено" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "IP-адресу %(ip)s вже призначено у домені %(domain)s." - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "" -"Зворотний запис для IP-адреси %(ip)s вже існує у зворотній зоні %(zone)s." - -#, python-format -msgid "%s record" -msgstr "Запис %s" - -#, python-format -msgid "Raw %s records" -msgstr "Необроблені записи %s" - -#, python-format -msgid "%s Record" -msgstr "Запис %s" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "(докладніше про це у RFC %s)" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "«%s» є обов’язковою частиною запису DNS" - -msgid "Invalid number of parts!" -msgstr "Некоректна кількість частин!" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "Тип RR DNS «%s» не підтримується додатком bind-dyndb-ldap" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "" -"формат має бути встановлено так: \"%(format)s\", відповідно до %(rfcs)s" - -msgid "Create reverse" -msgstr "Створити зворотний запис" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "Не вдалося створити зворотний запис для «%(value)s»: %(exc)s" - -msgid "Exchanger" -msgstr "Обмінник" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" -"формат має бути таким:\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (широта у градусах)\n" -" d2: [0 .. 180] (довгота у градусах)\n" -" m1, m2: [0 .. 59] (мінути широти і довготи)\n" -" s1, s2: [0 .. 59.999] (секунди широти і довготи)\n" -" alt: [-100000.00 .. 42849672.95] крок — .01 (висота у метрах)\n" -" siz, hp, vp: [0 .. 90000000.00] (розміри, точність у метрах)\n" -" Див. RFC 1876." - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "«%(required)s» має бути порожнім, якщо вказано «%(name)s»" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "" -"значенням прапорців (flags) має бути одна з літер, \"S\", \"A\", \"U\" або " -"\"P\"" - -msgid "Priority (order)" -msgstr "Пріоритетність (порядок)" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" -"Менше число — вища пріоритетність. Клієнтські частини намагатимуться " -"встановити зв’язок із ттим доступноми для них сервером, у якого нижче число " -"пріоритетності." - -msgid "Relative weight for entries with the same priority." -msgstr "Відносна вага для записів із однаковою пріоритетністю." - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "значення не відповідає формату «РРРРММДДГГХХСС»" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" -"Менше число — вища пріоритетність. Клієнтські частини намагатимуться " -"встановити зв’язок із тією доступною для них адресою, у якої нижче число " -"пріоритетності." - -msgid "Target Uniform Resource Identifier" -msgstr "Універсальний ідентифікатор ресурсу призначення" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "Універсальний ідентифікатор ресурсу призначення відповідно до RFC 3986" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "Сервер назв «%(host)s» не має відповідного запису A/AAAA" - -msgid "Managedby permission" -msgstr "Права доступу managedby" - -msgid "cannot be used when a zone is specified" -msgstr "не можна використовувати, якщо вказано зону" - -msgid "Only one zone type is allowed per zone name" -msgstr "Можна використовувати лише один тип зони на одну назву зони" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "Додано системні права доступу «%(value)s»" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "право доступу «%(value)s» вже існує" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "Вилучено системні права доступу «%(value)s»" - -msgid "DNS zone" -msgstr "зона DNS" - -msgid "DNS zones" -msgstr "зони DNS" - -msgid "DNS Zones" -msgstr "Зони DNS" - -msgid "DNS Zone" -msgstr "Зона DNS" - -msgid "Default time to live" -msgstr "Типовий час життя" - -msgid "Time to live for records without explicit TTL definition" -msgstr "Час життя записів без явного визначення TTL" - -msgid "setting Authoritative nameserver" -msgstr "встановлення основного сервера назв" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "Використовується лише для встановлення атрибута MNAME SOA." - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "Записи NS можна редагувати у апексі зони — «@». " - -msgid "" -msgstr "<усі сервери DNS IPA>" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "Не можна задавати сервер назв для зворотної зони відносно назви DNS" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "Вилучено зону DNS «%(value)s»" - -msgid "is required" -msgstr "є обов’язковим" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "Вимкнено зону DNS «%(value)s»" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "Увімкнено зону DNS «%(value)s»" - -msgid "DNS resource record" -msgstr "Запис ресурсу DNS" - -msgid "DNS resource records" -msgstr "Записи ресурсів DNS" - -msgid "DNS Resource Records" -msgstr "Записи ресурсів DNS" - -msgid "DNS Resource Record" -msgstr "Запис ресурсу DNS" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "запис DS не повинен перебувати у апексі зони (RFC 4035, розділ 2.4)" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "" -"дані поза зоною: назва запису має бути піддоменом зони або відносною назвою" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "" -"не можна використовувати шаблон назви домену у полі власника записів " -"%(types)s (RFC 4592, розділ 4)" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "" -"Зворотна зона %(name)s потребує точно %(count)d компонентів IP-адрес, надано " -"%(user_count)d" - -msgid "only master zones can contain records" -msgstr "записи можуть містити лише основні зони" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "" -"можна використовувати лише один запис CNAME на назву (RFC 2136, розділ 1.1.5)" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "" -"Записом CNAME не можна користуватися разом з будь-якими іншими записами, " -"окрім PTR (RFC 1034, розділ 3.6.2)" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "" -"можна використовувати лише один запис DNAME на назву (RFC 6672, розділ 2.4)" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" -"запис NS не можна використовувати разом з записом %(type)s, якщо їх не " -"розташовано у запису кореня зони (RFC 2181, розділ 6.1)" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "" -"Запис DS має існувати паралельно із записом NS (RFC 4592, розділ 4.6, RFC " -"4035, розділ 2.4)" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "" -"Необроблене значення для запису DNS вже було встановлено за допомогою " -"параметра «%(name)s»" - -msgid "DNS zone root record cannot be renamed" -msgstr "Кореневий запис зони DNS не можна перейменовувати" - -msgid "DNS records can be only updated one at a time" -msgstr "Записи DNS можна оновлювати лише поодинці" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "Вилучено запис «%(value)s»" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "Запис зони «%s» не можна вилучати" - -#, python-format -msgid "Found '%(value)s'" -msgstr "Знайдено «%(value)s»" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "Вузла «%(host)s» не знайдено" - -msgid "DNS configuration options" -msgstr "Параметри налаштування DNS" - -msgid "DNS Global Configuration" -msgstr "Загальні налаштування DNS" - -msgid "IPA DNS version" -msgstr "Версія DNS IPA" - -msgid "List of IPA masters configured as DNS servers" -msgstr "Список основних серверів IPA, які налаштовано як сервери DNS" - -msgid "IPA server configured as DNSSec key master" -msgstr "Сервер IPA налаштований як основний сервер ключів DNSSec" - -msgid "Global DNS configuration is empty" -msgstr "Загальні налаштування DNS є порожніми" - -msgid "DNS forward zone" -msgstr "Зона переспрямовування DNS" - -msgid "DNS forward zones" -msgstr "Зони переспрямовування DNS" - -msgid "DNS Forward Zones" -msgstr "Зони переспрямовування DNS" - -msgid "DNS Forward Zone" -msgstr "Зона переспрямовування DNS" - -msgid "Please specify forwarders." -msgstr "Будь ласка, вкажіть переспрямовувачі." - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "Вилучено зону переспрямовування DNS «%(value)s»" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "Вимкнено зону переспрямовування DNS «%(value)s»" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "Увімкнено зону переспрямовування DNS «%(value)s»" - -msgid "IPA DNS records" -msgstr "Записи DNS IPA" - -msgid "IPA location records" -msgstr "Записи місць IPA" - -msgid "Update location and IPA server DNS records" -msgstr "Оновити записи місць та серверів DNS IPA" - -msgid "Result of the command" -msgstr "Результат виконання команди" - -msgid "Dry run" -msgstr "Тестовий запуск" - -msgid "Do not update records only return expected records" -msgstr "Не оновлювати записи, лише повернути список очікуваних записів" - -msgid "The deny type has been deprecated." -msgstr "Тип «deny» вважається застарілим." - -msgid "HBAC rules" -msgstr "правила HBAC" - -msgid "HBAC Rules" -msgstr "Правила HBAC" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "Додано правило HBAC «%(value)s»" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "Вилучено правило HBAC «%(value)s»" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "Змінено правило HBAC «%(value)s»" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "встановлено відповідність %(count)d правила HBAC" -msgstr[1] "встановлено відповідність %(count)d правил HBAC" -msgstr[2] "встановлено відповідність %(count)d правил HBAC" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "Увімкнено правило HBAC «%(value)s»" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "Вимкнено правило HBAC «%(value)s»" - -msgid "Access time" -msgstr "Час доступу" - -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "Додати вузли джерела та групи вузлів до правила HBAC." - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" -"\n" -"Вузли/Комп’ютери\n" -"\n" -"Вузол — це окремий комп’ютер. Термін може використовуватися у декількох " -"контекстах:\n" -"- записи служб, пов’язані з певним вузлом\n" -"- вузол зберігає реєстраційні дані вузол/служба\n" -"- вузол можна використовувати у правилах Host-based Access Control (HBAC)\n" -"- для усіх зареєстрованих клієнтів створюється запис вузла\n" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" -"\n" -"РЕЄСТРАЦІЯ:\n" -"\n" -"Передбачено три сценарії реєстрації нових клієнтів:\n" -"\n" -"1. Ви реєструєтеся як повноцінний адміністратор. Запис вузла може існувати\n" -" або не існувати. Повноцінний адміністратор виконує роль hostadmin або є\n" -" учасником групи admins.\n" -"2. Ви реєструєтеся як адміністратор з обмеженими правами. Вузол вже має\n" -" існувати. Обмежений адміністратор виконує роль з привілеями\n" -" Host Enrollment.\n" -"3. Вузол було створено з одноразовим паролем.\n" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" -"\n" -"ПОВТОРНА РЕЄСТРАЦІЯ:\n" -"\n" -"Вузол, якому вже колись було надано певну роль, але налаштування було " -"втрачено\n" -"(наприклад через знищення віртуальної машини), можна знову зареєструвати " -"(надати роль).\n" -"\n" -"Щоб дізнатися більше, зверніться до сторінок підручника (man) щодо ipa-" -"client-install.\n" -"\n" -"Запис вузла може, якщо потрібно, зберігати відомості щодо розташування, " -"запущеної\n" -"операційної системи тощо.\n" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" -"\n" -"Додати новий вузол:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" -"\n" -" Вилучити вузол:\n" -" ipa host-del test.example.com\n" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" -"\n" -" Додати новий вузол з одноразовим паролем:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" -"\n" -"Додати новий вузол з випадковим одноразовим паролем:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" -"\n" -" Змінити відомості щодо вузла:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" -"\n" -" Вилучити відкриті ключі SSH вузла і оновити DNS відповідно до внесених " -"змін:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" - -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "" -"\n" -"Вимкнути ключ Kerberos вузла, сертифікат SSL та усі його служби:\n" -" ipa host-disable test.example.com\n" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" -"\n" -"Додати вузол, який може керувати сховищем ключів та сертифікатом цього " -"вузла :\n" -" ipa host-add-managedby --hosts=test2 test\n" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" -"\n" -" Дозволити користувачеві створення таблиці ключів:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" - -msgid "Host" -msgstr "Вузол" - -msgid "Base-64 encoded host certificate" -msgstr "Сертифікат вузла у кодуванні Base-64" - -msgid "Serial Number" -msgstr "Серійний номер" - -msgid "Serial Number (hex)" -msgstr "Серійний номер (шістнадцятковий)" - -msgid "Not Before" -msgstr "Не раніше" - -msgid "Not After" -msgstr "Не пізніше" - -msgid "Fingerprint (SHA1)" -msgstr "Відбиток (SHA1)" - -msgid "Fingerprint (SHA256)" -msgstr "Відбиток (SHA256)" - -msgid "Revocation reason" -msgstr "Причина відкликання" - -msgid "Authentication Indicators" -msgstr "Індикатори розпізнавання" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" -"Визначає список дозволених індикаторів розпізнавання. Скористайтеся " -"значенням «otp», щоб дозволити розпізнавання 2FA на основі OTP. " -"Скористайтеся значенням «radius», щоб дозволити розпізнавання 2FA на основі " -"RADIUS. Скористайтеся значенням «pkinit», щоб дозволити розпізнавання 2FA на " -"основі PKINIT. Скористайтеся значенням «hardened», щоб дозволити захищене " -"від простого перебирання розпізнавання за паролем на основі SPAKE або FAST. " -"Скористайтеся значенням «idp», щоб уможливити розпізнавання за допомогою " -"зовнішнього надавача профілів. Якщо індикатор не буде вказано, буде " -"дозволено усі механізми." - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "Додано вузол «%(value)s»" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "Вилучено вузол «%(value)s»" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "Вилучити записи A, AAAA, SSHFP і PTR вузлів, керованих DNS IPA" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "Не знайдено записів A, AAAA, SSHFP або PTR." - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "Змінено вузол «%(value)s»" - -msgid "Password cannot be set on enrolled host." -msgstr "Не можна визначати пароль для вузла з визначеною роллю." - -msgid "cn is immutable" -msgstr "cn є незмінним" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "встановлено відповідність %(count)d вузла" -msgstr[1] "встановлено відповідність %(count)d вузлів" -msgstr[2] "встановлено відповідність %(count)d вузлів" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "Вимкнено вузол «%(value)s»" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "Додано сертифікати до запису вузла «%(value)s»" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "Вилучено сертифікати із запису вузла «%(value)s»" - -msgid "Add new principal alias to host entry" -msgstr "Додати новий псевдонім реєстраційного запису до запису вузла" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "Додано нові псевдоніми до запису вузла «%(value)s»" - -msgid "Remove principal alias from a host entry" -msgstr "Вилучити псевдонім реєстраційного запису із запису вузла" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "Вилучити псевдоніми із запису вузла «%(value)s»" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" -"\n" -"Сервери надавача зовнішніх профілів\n" - -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" -"\n" -"Керування серверами надавачів зовнішніх профілів.\n" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" -"\n" -"В IPA передбачено підтримку надавачів зовнішніх профілів для процесу\n" -"розпізнавання пристроїв Oauth2.0.\n" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" -"\n" -" Додати новий запис сервера надавача зовнішніх профілів:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2.idp" -".com/auth --token-uri https://oauth2.idp.com/token --secret\n" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" -"\n" -" Додати новий сервер надавача зовнішніх профілів за допомогою попередньо " -"визначених кінцевих точок github:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" - -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" -"\n" -" Знайти усі сервери надавачів зовнішніх профілів, записи яких містять рядок\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" - -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" -"\n" -" Перевірити налаштування сервера надавача зовнішніх профілів:\n" -" ipa idp-show MyIdP\n" - -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" -"\n" -" Змінити реєстраційні дані:\n" -" ipa idp-mod MyIdP --secret\n" - -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" -"\n" -" Вилучити сервер надавача зовнішніх профілів:\n" -" ipa idp-del MyIdP\n" - -msgid "Invalid URI: not an https scheme" -msgstr "Некоректна адреса: не використано схему https" - -msgid "Invalid URI: missing netloc" -msgstr "Некоректна адреса: пропущено netloc" - -msgid "Identity Provider server" -msgstr "Сервер надавача профілів" - -msgid "Identity Provider servers" -msgstr "Сервери надавачів профілів" - -msgid "Identity Provider server name" -msgstr "Назва сервера надавача профілів" - -msgid "Authorization URI" -msgstr "Адреса уповноваження" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "Кінцева точка уповноваження OAuth 2.0" - -msgid "Device authorization URI" -msgstr "Адреса уповноваження пристрою" - -msgid "Device authorization endpoint" -msgstr "Кінцева точка уповноваження пристрою" - -msgid "Token URI" -msgstr "Адреса жетона" - -msgid "Token endpoint" -msgstr "Кінцева точка жетона" - -msgid "User info URI" -msgstr "Адреса даних користувача" - -msgid "User information endpoint" -msgstr "Кінцева точка даних користувача" - -msgid "JWKS URI" -msgstr "Адреса JWKS" - -msgid "JWKS endpoint" -msgstr "Кінцева точка JWKS" - -msgid "OIDC URL" -msgstr "Адреса OIDC" - -msgid "The Identity Provider OIDC URL" -msgstr "Адреса OIDC надавача профілів" - -msgid "Client identifier" -msgstr "Ідентифікатор клієнта" - -msgid "OAuth 2.0 client identifier" -msgstr "Ідентифікатор клієнта OAuth 2.0" - -msgid "OAuth 2.0 client secret" -msgstr "Пароль клієнта OAuth 2.0" - -msgid "Scope" -msgstr "Область" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "Область OAuth 2.0. Декілька профілів слід відокремлювати пробілами" - -msgid "External IdP user identifier attribute" -msgstr "Атрибут ідентифікатора користувача зовнішнього IdP" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "Атрибут для профілю користувача у даних користувача OAuth 2.0" - -msgid "Add a new Identity Provider server." -msgstr "Додати новий сервер надавача профілів." - -#, python-format -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "Додано сервер надавача профілів «%(value)s»" - -msgid "IdP provider template" -msgstr "Шаблон надавача IdP" - -msgid "Choose a pre-defined template to use" -msgstr "Виберіть попередньо визначений шаблон для використання" - -msgid "Organization" -msgstr "Установа" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "Ідентифікатор організації або назва області для шаблонів надавача IdP" - -msgid "Base URL" -msgstr "Базова адреса" - -msgid "Base URL for IdP provider templates" -msgstr "Базова адреса для шаблонів надавача IdP" - -msgid "unknown provider" -msgstr "невідомий надавач" - -msgid "value is missing" -msgstr "не вказано значення" - -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "" -"не можна одночасно вказувати індивідуальні кінцеві точки та надавача IdP" - -msgid "Delete an Identity Provider server." -msgstr "Вилучити сервер надавача профілів." - -#, python-format -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "Вилучено сервер надавача профілів «%(value)s»" - -msgid "Modify an Identity Provider server." -msgstr "Змінити сервер надавача профілів." - -#, python-format -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "Змінено запис сервера надавача профілів «%(value)s»" - -msgid "Search for Identity Provider servers." -msgstr "Шукати сервери надавачів профілів." - -#, python-format -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "встановлено відповідність %(count)d сервера надавача профілів" -msgstr[1] "встановлено відповідність %(count)d серверів надавачів профілів" -msgstr[2] "встановлено відповідність %(count)d серверів надавачів профілів" - -msgid "Display information about an Identity Provider server." -msgstr "Показати дані щодо сервера надавача профілів." - -msgid "Internationalization messages" -msgstr "Повідомлення перекладу" - -msgid "Your session has expired. Please log in again." -msgstr "" -"Строк роботи у вашому сеансі вичерпано. Будь ласка, увійдіть до системи ще " -"раз." - -msgid "Apply" -msgstr "Застосувати" - -msgid "Rebuild auto membership" -msgstr "Повторне збирання правил автоматичної участі" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "Ви справді хочете перебудувати записи автоматичної участі?" - -msgid "Are you sure you want to proceed with the action?" -msgstr "Ви справді хочете виконати цю дію?" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "Ви справді хочете вилучити ${object}?" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "Ви справді хочете вимкнути ${object}?" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "Ви справді хочете увімкнути ${object}?" - -msgid "Actions" -msgstr "Дії" - -msgid "Add" -msgstr "Додати" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "Додано ${count} записів" - -msgid "Direct Membership" -msgstr "Безпосередня участь" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "Доступний фільтр ${other_entity}" - -msgid "Indirect Membership" -msgstr "Опосередкована участь" - -msgid "No entries." -msgstr "Немає записів." - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "Показано записи від ${start} до ${end} з ${total} записів." - -msgid "Remove" -msgstr "Вилучити" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "Вилучено ${count} записів" - -msgid "Show Results" -msgstr "Показати результати" - -msgid "Authentication indicators" -msgstr "Індикатори розпізнавання" - -msgid "Authentication indicator" -msgstr "Індикатор розпізнавання" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" -"

Якщо метод не вибрано, буде використано неявний метод (пароль).

Пароль + двофакторне розпізнавання: у LDAP і Kerberos " -"передбачено розпізнавання за одним із цих типів розпізнавання, а у Kerberos " -"використовується метод попереднього розпізнавання, який потребує " -"використання ccache armor.

RADIUS із іншим типом: у " -"Kerberos завжди використовується RADIUS, а у LDAP він не використовується " -"ніколи. LDAP розпізнає лише варіанти розпізнавання за паролем або " -"двофакторне розпізнавання.

" - -msgid "Add Custom Authentication Indicator" -msgstr "Додати нетиповий індикатор розпізнавання" - -msgid "Two factor authentication (password + OTP)" -msgstr "Двофакторне розпізнавання (пароль + OTP)" - -msgid "RADIUS" -msgstr "RADIUS" - -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "Захищений пароль (за допомогою SPAKE або FAST)" - -msgid "External Identity Provider" -msgstr "Зовнішній надавач профілів" - -msgid "Disable per-user override" -msgstr "Вимкнути перевизначення на рівні користувача" - -msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" -"

Параметр для окремих користувачів, перевизначає загальне значення, якщо " -"буде вибрано один з варіантів.

Пароль + двофакторне " -"розпізнавання: у LDAP і Kerberos передбачено розпізнавання за одним " -"із цих типів розпізнавання, а у Kerberos використовується метод попереднього " -"розпізнавання, який потребує використання ccache armor.

RADIUS " -"із іншим типом: у Kerberos завжди використовується RADIUS, а у LDAP " -"він не використовується ніколи. LDAP розпізнає лише варіанти розпізнавання " -"за паролем або двофакторне розпізнавання.

" - -msgid "About" -msgstr "Про програму" - -msgid "Activate" -msgstr "Задіяти" - -msgid "Add and Add Another" -msgstr "Додати і додати ще" - -msgid "Add and Close" -msgstr "Додати і закрити" - -msgid "Add and Edit" -msgstr "Додати і змінити" - -msgid "Add Many" -msgstr "Додати багато" - -msgid "Back" -msgstr "Назад" - -msgid "Cancel" -msgstr "Скасувати" - -msgid "Clear" -msgstr "Спорожнити" - -msgid "Clear all fields on the page." -msgstr "Спорожнити усі поля на сторінці." - -msgid "Close" -msgstr "Закрити" - -msgid "Disable" -msgstr "Вимкнути" - -msgid "Download" -msgstr "Отримати" - -msgid "Download certificate as PEM formatted file." -msgstr "Отримати сертифікат у формі файла формату PEM." - -msgid "Edit" -msgstr "Змінити" - -msgid "Enable" -msgstr "Увімкнути" - -msgid "Find" -msgstr "Знайти" - -msgid "Get" -msgstr "Отримати" - -msgid "Hide" -msgstr "Приховати" - -msgid "Issue" -msgstr "Створити" - -msgid "Match" -msgstr "Відповідність" - -msgid "Match users according to certificate." -msgstr "Встановити відповідність користувачів за сертифікатом." - -msgid "Migrate" -msgstr "Перенести" - -msgid "OK" -msgstr "Гаразд" - -msgid "Refresh" -msgstr "Оновити" - -msgid "Reload current settings from the server." -msgstr "Перезавантажити поточні параметри з сервера." - -msgid "Delete" -msgstr "Вилучити" - -msgid "Remove hold" -msgstr "Вилучити затримання" - -msgid "Reset" -msgstr "Скинути" - -msgid "Reset Password" -msgstr "Скинути пароль" - -msgid "Reset Password and Log in" -msgstr "Скинути пароль і увійти" - -msgid "Restore" -msgstr "Відновити" - -msgid "Retry" -msgstr "Повторити" - -msgid "Revert" -msgstr "Повернути" - -msgid "Revoke" -msgstr "Відкликати" - -msgid "Save" -msgstr "Зберегти" - -msgid "Set" -msgstr "Встановити" - -msgid "Show" -msgstr "Показати" - -msgid "Stage" -msgstr "Етап" - -msgid "Update" -msgstr "Оновити" - -msgid "View" -msgstr "Перегляд" - -msgid "Customization" -msgstr "Налаштування" - -msgid "Pagination Size" -msgstr "Розмір сторінки" - -msgid "Collapse All" -msgstr "Згорнути всі" - -msgid "Expand All" -msgstr "Розгорнути всі" - -msgid "General" -msgstr "Загальне" - -msgid "Identity Settings" -msgstr "Параметри профілю" - -msgid "Record Settings" -msgstr "Параметри запису" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "Параметри ${primary_key} ${entity}" - -msgid "Back to Top" -msgstr "Повернутися до початку" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "Оновлено ${primary_key} ${entity}" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "${entity} успішно додано" - -msgid "Add custom value" -msgstr "Додати нетипове значення" - -msgid "Available" -msgstr "Доступний" - -msgid "Some operations failed." -msgstr "Деякі з дій не вдалося виконати." - -msgid "Operations Error" -msgstr "Помилка під час обробки" - -msgid "Confirmation" -msgstr "Підтвердження" - -msgid "Custom value" -msgstr "Нетипове значення" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "" -"На цій сторінці виявлено незбережені зміни. Будь ласка, збережіть зміни або " -"скасуйте їх." - -msgid "Unsaved Changes" -msgstr "Незбережені зміни" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "Змінити ${entity}" - -msgid "Hide details" -msgstr "Сховати подробиці" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "${product}, версія: ${version}" - -msgid "Prospective" -msgstr "Очікуваний" - -msgid "Redirection" -msgstr "Переспрямування" - -msgid "Select entries to be removed." -msgstr "Виберіть записи, які слід вилучити." - -msgid "Result" -msgstr "Результат" - -msgid "Show details" -msgstr "Показати подробиці" - -msgid "Success" -msgstr "Успіх" - -msgid "Validation error" -msgstr "Помилка під час перевірки" - -msgid "Input form contains invalid or missing values." -msgstr "" -"У форму введення даних не введено деякі з даних або у формі містяться " -"некоректні записи." - -msgid "Please try the following options:" -msgstr "Будь ласка, спробуйте такі параметри:" - -msgid "If the problem persists please contact the system administrator." -msgstr "" -"Якщо проблему не вдасться усунути, зверніться до адміністратора системи." - -msgid "Refresh the page." -msgstr "Оновити сторінку." - -msgid "Reload the browser." -msgstr "Перезавантажити переглядач." - -msgid "Return to the main page and retry the operation" -msgstr "Повернутися до головної сторінки і повторити спробу" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "Сталася помилка (${error})" - -msgid "HTTP Error" -msgstr "Помилка HTTP" - -msgid "Internal Error" -msgstr "Внутрішня помилка" - -msgid "IPA Error" -msgstr "Помилка IPA" - -msgid "No response" -msgstr "Немає відповіді" - -msgid "Unknown Error" -msgstr "Невідома помилка" - -msgid "URL" -msgstr "Адреса" - -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "${primary_key} керується:" - -#, python-brace-format -msgid "${primary_key} members:" -msgstr "Учасники ${primary_key}:" - -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "${primary_key} міститься у:" - -#, python-brace-format -msgid "${primary_key} member managers:" -msgstr "Керівники учасника ${primary_key}:" - -msgid "Settings" -msgstr "Параметри" - -msgid "Search" -msgstr "Пошук" - -msgid "False" -msgstr "Ні" - -#, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "" -"Дозволити групам користувачів створювати сховище ключів «${primary_key}»" - -#, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Дозволити групам користувачів отримувати сховище ключів «${primary_key}»" - -#, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "Дозволити групам вузлів створювати таблицю ключів «${primary_key}»" - -#, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "Дозволити групам вузлів отримувати таблицю ключів «${primary_key}»" - -#, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "Дозволити вузлам створювати таблицю ключів «${primary_key}»" - -#, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "Дозволити вузлам отримувати таблицю ключів «${primary_key}»" - -#, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "Дозволити користувачам створювати таблицю ключів «${primary_key}»" - -#, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "Дозволити користувачам отримувати таблицю ключів «${primary_key}»" - -msgid "Allowed to create keytab" -msgstr "Дозволено створювати таблицю ключів" - -msgid "Allowed to retrieve keytab" -msgstr "Дозволено отримувати таблицю ключів" - -#, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "" -"Заборонити групам користувачів створювати таблицю ключів «${primary_key}»" - -#, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "" -"Заборонити групам користувачів отримувати таблицю ключів «${primary_key}»" - -#, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "Заборонити групам вузлів створювати таблицю ключів «${primary_key}»" - -#, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "Заборонити групам вузлів отримувати таблицю ключів «${primary_key}»" - -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "Заборонити вузлам створювати таблицю ключів «${primary_key}»" - -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "Заборонити вузлам отримувати таблицю ключів «${primary_key}»" - -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "Заборонити користувачам створювати таблицю ключів «${primary_key}»" - -#, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "Заборонити користувачам отримувати таблицю ключів «${primary_key}»" - -msgid "Add Kerberos Principal Alias" -msgstr "Додати псевдонім реєстраційного запису Kerberos" - -msgid "New kerberos principal alias" -msgstr "Новий псевдонім реєстраційного запису kerberos" - -msgid "Remove Kerberos Alias" -msgstr "Вилучити псевдонім Kerberos" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "Ви хочете вилучити псевдонім kerberos ${alias}?" - -msgid "Inherited from server configuration" -msgstr "Успадковано з налаштувань сервера" - -msgid "MS-PAC" -msgstr "MS-PAC" - -msgid "Override inherited settings" -msgstr "Перевизначити успадковані параметри" - -msgid "PAD" -msgstr "PAD" - -msgid "Authenticating" -msgstr "Розпізнавання" - -msgid "Authentication with personal certificate failed" -msgstr "Не вдалося пройти розпізнавання за особистим сертифікатом" - -msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" -" Щоб увійти за допомогою " -"сертифіката, будь ласка, переконайтеся, що у вас є чинний " -"особистий сертифікат. " - -msgid "Continue to next page" -msgstr "Перейти до наступної сторінки" - -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" -" Щоб увійти за допомогою імені " -"користувача і пароля, вкажіть ці дані у відповідних полях, потім " -"натисніть кнопку «Увійти»." - -msgid "Login failed due to an unknown reason" -msgstr "Не вдалося увійти з невідомої причини" - -msgid "Logged In As" -msgstr "Вхід до системи від імені" - -msgid "Authentication with Kerberos failed" -msgstr "Не вдалося пройти розпізнавання за допомогою Kerberos" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" -" Щоб увійти до системи за допомогою " -"Kerberos, будь ласка, переконайтеся, що у вас є коректні " -"квитки (такі, які можна отримати за допомогою kinit) і налаштований належним чином браузер. " -"Далі натисніть кнопку «Увійти»." - -msgid "Loading" -msgstr "Завантаження" - -msgid "Kerberos Principal you entered is expired" -msgstr "Строк дії введених вами реєстраційних даних Kerberos вичерпано" - -msgid "Loading data" -msgstr "Завантажуємо дані" - -msgid "Log in" -msgstr "Увійти" - -msgid "Log In Using Certificate" -msgstr "Увійти за допомогою сертифіката" - -msgid "Log in using personal certificate" -msgstr "Увійти за допомогою персонального сертифіката" - -msgid "Log out" -msgstr "Вийти" - -msgid "Log out error" -msgstr "Помилка під час спроби вийти" - -msgid "Password or Password+One-Time Password" -msgstr "Пароль або Пароль+Одноразовий пароль" - -#, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "Вас буде переспрямовано за ${count} с" - -msgid "Sync OTP Token" -msgstr "Синхронізувати жетон OTP" - -msgid "Synchronizing" -msgstr "Синхронізація" - -msgid "The user account you entered is locked" -msgstr "Введений вами обліковий запис заблоковано" - -msgid "number of passwords" -msgstr "кількість паролів" - -msgid "seconds" -msgstr "секунд" - -msgid "Migrating" -msgstr "Перенесення" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" -"Із вашим запитом виникли проблеми. Будь ласка, повторіть спробу пізніше." - -msgid "Password migration was not successful" -msgstr "Не вдалося перенести паролі" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" -"

Перенесення паролів

Якщо вас було спрямовано на цю сторінку вашим " -"адміністратором, ваші особисті дані було перенесено до нового рішення з " -"керування профілями користувачів (IPA).

Будь ласка, введіть ваші " -"реєстраційні дані до форми, щоб завершити процес. Після успішного входу до " -"системи ваш обліковий запис kerberos буде активовано.

" - -msgid "The password or username you entered is incorrect" -msgstr "Вами введено помилкове ім'я користувача або пароль" - -msgid "Password migration was successful" -msgstr "Пароль успішно перенесено" - -msgid "Attribute" -msgstr "Атрибут" - -msgid "Add delegation" -msgstr "Додати уповноваження" - -msgid "Remove delegations" -msgstr "Вилучити уповноваження" - -msgid "Add permission" -msgstr "Додати права доступу" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "Додати привілеї до дозволів «${primary_key}»" - -msgid "Remove permissions" -msgstr "Вилучити дозволи" - -#, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "Вилучити привілеї з дозволів «${primary_key}»" - -msgid "Add privilege" -msgstr "Додати привілеї" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "Додати привілеї «${primary_key}» до дозволів" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "Додати ролі до привілеїв «${primary_key}»" - -msgid "Remove privileges" -msgstr "Вилучити привілеї" - -#, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "Вилучити привілеї «${primary_key}» з дозволів" - -#, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "Вилучити ролі з привілеїв «${primary_key}»" - -msgid "Role Settings" -msgstr "Параметри ролей" - -msgid "Add role" -msgstr "Додати роль" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "Додати групи користувачів до ролі «${primary_key}»" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "Додати вузли до ролі «${primary_key}»" - -#, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "Додати групи вузлів до ролі «${primary_key}»" - -#, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "Додати роль «${primary_key}» до привілеїв" - -#, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "Додати служби до ролі «${primary_key}»" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "Додати користувачів до ролі «${primary_key}»" - -msgid "Remove roles" -msgstr "Вилучити ролі" - -#, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "Вилучити роль «${primary_key}» з привілеїв" - -#, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "Вилучити групи користувачів з ролі «${primary_key}»" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "Вилучити вузли з ролі «${primary_key}»" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "Вилучити групи вузлів з ролі «${primary_key}»" - -#, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "Вилучити служби з ролі «${primary_key}»" - -#, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "Вилучити користувачів з ролі «${primary_key}»" - -msgid "Add self service permission" -msgstr "Додати права автослужби" - -msgid "Remove self service permissions" -msgstr "Вилучити дозволи на самообслуговування" - -msgid "Add rule" -msgstr "Додати правило" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "Додати включну умову до «${primary_key}»" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "Додати виключну умову до «${primary_key}»" - -msgid "Are you sure you want to change default group?" -msgstr "Ви справді хочете змінити типову групу?" - -msgid "Default host group" -msgstr "Типова група вузлів" - -msgid "Default user group" -msgstr "Типова група користувачів" - -msgid "Exclusive" -msgstr "Виключна" - -msgid "Expression" -msgstr "Вираз" - -msgid "Host group rule" -msgstr "Правило групи вузлів" - -msgid "Host group rules" -msgstr "Правила груп вузлів" - -msgid "Inclusive" -msgstr "Включна" - -msgid "Remove auto membership rules" -msgstr "Вилучити правила автоматичної участі" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "Вилучити умови виключення з правила «${primary_key}»" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "Вилучити умови включення з правила «${primary_key}»" - -msgid "User group rule" -msgstr "Правило групи користувачів" - -msgid "User group rules" -msgstr "Правила груп користувачів" - -msgid "Add automount key" -msgstr "Додати ключ автомонтування" - -msgid "Remove automount keys" -msgstr "Вилучити ключі автоматичного монтування" - -msgid "Add automount location" -msgstr "Додати місце автомонтування" - -msgid "Automount Location Settings" -msgstr "Параметри запису автомонтування" - -msgid "Remove automount locations" -msgstr "Вилучити місця автоматичного монтування" - -msgid "Add automount map" -msgstr "Додати карту автомонтування" - -msgid "Map Type" -msgstr "Тип карти" - -msgid "Direct" -msgstr "Безпосередній" - -msgid "Indirect" -msgstr "Опосередкований" - -msgid "Remove automount maps" -msgstr "Вилучити карти автоматичного монтування" - -msgid "Add certificate authority" -msgstr "Додати службу сертифікації" - -msgid "Remove certificate authorities" -msgstr "Вилучити служби сертифікації" - -msgid "Add CA ACL" -msgstr "Додати ACL CA" - -#, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "Додати служби сертифікації до ACL CA «${primary_key}»" - -#, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "Додати групи користувачів до ACL CA «${primary_key}»" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "Додати групи вузлів до ACL CA «${primary_key}»" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "Додати вузли до ACL CA «${primary_key}»" - -#, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "Додати профілі сертифікації до ACL CA «${primary_key}»" - -#, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "Додати служби до ACL CA «${primary_key}»" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "Додати користувачів до ACL CA «${primary_key}»" - -msgid "All" -msgstr "Всі" - -msgid "Any CA" -msgstr "Будь-який CA" - -msgid "Any Host" -msgstr "Будь-який вузол" - -msgid "Any Service" -msgstr "Будь-яка служба" - -msgid "Any Profile" -msgstr "Будь-який профіль" - -msgid "Anyone" -msgstr "Будь-хто" - -msgid "Rule status" -msgstr "Стан правила" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "Якщо не вказано CA, буде дозволено запити до типового CA." - -msgid "Remove CA ACLs" -msgstr "Вилучити ACL служб сертифікації" - -#, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "Вилучити служби сертифікації з ACL CA «${primary_key}»" - -#, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "Вилучити групи користувачів з ACL CA «${primary_key}»" - -#, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "Вилучити групи вузлів з ACL CA «${primary_key}»" - -#, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "Вилучити вузли з ACL CA «${primary_key}»" - -#, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "Вилучити профілі сертифікації з ACL CA «${primary_key}»" - -#, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "Вилучити служби з ACL CA «${primary_key}»" - -#, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "Вилучити користувачів з ACL CA «${primary_key}»" - -msgid "Specified CAs" -msgstr "Вказані CA" - -msgid "Specified Hosts and Groups" -msgstr "Вказані вузли і групи" - -msgid "Specified Profiles" -msgstr "Вказані профілі" - -msgid "Specified Services and Groups" -msgstr "Вказані служби і групи" - -msgid "Specified Users and Groups" -msgstr "Вказані користувачі і групи" - -msgid "Permitted to have certificates issued" -msgstr "Дозволено мати випущений сертифікат" - -msgid "Remove certificate profiles" -msgstr "Вилучити профілі сертифікації" - -msgid "AA Compromise" -msgstr "Компрометація AA" - -msgid "Add principal" -msgstr "Додати реєстраційний запис" - -msgid "Affiliation Changed" -msgstr "Змінено місце роботи" - -msgid "CA" -msgstr "CA" - -msgid "CA Compromise" -msgstr "Компрометація CA" - -msgid "Certificates" -msgstr "Сертифікати" - -msgid "Certificate Hold" -msgstr "Власник сертифіката" - -msgid "Cessation of Operation" -msgstr "Скасування дії" - -msgid "Common Name" -msgstr "Звичайне ім'я" - -msgid "the certificate with serial number " -msgstr "сертифікат із серійним номером " - -msgid "Expires On" -msgstr "Строк дії" - -msgid "Issued on from" -msgstr "Видано з" - -msgid "Issued on to" -msgstr "Видано до" - -msgid "Maximum serial number" -msgstr "Максимальний серійний номер" - -msgid "Minimum serial number" -msgstr "Мінімальний серійний номер" - -msgid "Revoked on from" -msgstr "Відкликано з" - -msgid "Revoked on to" -msgstr "Відкликано до" - -msgid "Valid not after from" -msgstr "Чинний не пізніше після" - -msgid "Valid not after to" -msgstr "Чинний не пізніше до" - -msgid "Valid not before from" -msgstr "Чинний не раніше від" - -msgid "Valid not before to" -msgstr "Чинний не раніше" - -msgid "Fingerprints" -msgstr "Відбитки" - -msgid "Get Certificate" -msgstr "Отримати сертифікат" - -msgid "Certificate Hold Removed" -msgstr "Затримання сертифіката вилучено" - -#, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "Видати новий сертифікат для вузла «${primary_key}»" - -#, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "Видати новий сертифікат для служби «${primary_key}»" - -#, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "Видати новий сертифікат для користувача «${primary_key}»" - -msgid "Issue new certificate" -msgstr "Видати новий сертифікат" - -msgid "Issued By" -msgstr "Видавець" - -msgid "Issued On" -msgstr "Видано" - -msgid "Issued To" -msgstr "Видано для" - -msgid "Key Compromise" -msgstr "Компрометація ключа" - -msgid "No Valid Certificate" -msgstr "Немає чинних сертифікатів" - -msgid "New Certificate" -msgstr "Новий сертифікат" - -msgid "Certificate in base64 or PEM format" -msgstr "Сертифікат у форматі base64 або PEM" - -msgid "Note" -msgstr "Нотатка" - -msgid "Organizational Unit" -msgstr "Підрозділ установи" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "Маємо ${count} сертифікатів" - -msgid "Privilege Withdrawn" -msgstr "Привілей відкликано" - -msgid "Reason for Revocation" -msgstr "Причина відкликання" - -msgid "Remove certificate hold" -msgstr "Вилучити затримання сертифіката" - -msgid "Do you want to remove the certificate hold?" -msgstr "Хочете вилучити затримання сертифіката?" - -msgid "Remove from CRL" -msgstr "Вилучити з CRL" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" -"
  1. Створити базу даних сертифікатів або скористатися вже створеною. " -"Щоб створити нову базу даних, віддайте команду:
    # certutil -N -d " -"<шлях до бази даних>
  2. Створити CSR з призначенням " -"CN=<${cn_name}>,O=<область>, наприклад:
    # " -"certutil -R -d <шлях до бази даних> -a -g <розмір ключа> -s 'CN=" -"${cn},O=${realm}'${san}
  3. Скопіюйте і вставте CSR (від " -"-----BEGIN NEW CERTIFICATE REQUEST----- до -----END NEW " -"CERTIFICATE REQUEST-----) до області для введення тексту, розташованої " -"нижче:
" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr " -8 '${cn}'" - -msgid "Certificate requested" -msgstr "Надіслано запит щодо сертифікації" - -msgid "Revoke certificate" -msgstr "Відкликати сертифікат" - -msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "Хочете відкликати цей сертифікат? Виберіть причину зі спадного списку." - -msgid "Certificate Revoked" -msgstr "Сертифікат відкликано" - -msgid "REVOKED" -msgstr "ВІДКЛИКАНО" - -msgid "SHA1 Fingerprint" -msgstr "Відбиток SHA1" - -msgid "SHA256 Fingerprint" -msgstr "Відбиток SHA256" - -msgid "Status" -msgstr "Стан" - -msgid "Superseded" -msgstr "Замінено" - -msgid "Unspecified" -msgstr "Не вказано" - -msgid "Valid Certificate Present" -msgstr "Є чинний сертифікат" - -msgid "Valid from" -msgstr "Чинний з" - -msgid "Valid to" -msgstr "Чинний до" - -msgid "Validity" -msgstr "Коректність" - -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "Сертифікат для ${primary_key} ${entity}" - -msgid "View Certificate" -msgstr "Переглянути сертифікат" - -msgid "Certificate Data" -msgstr "Дані сертифіката" - -msgid "Certificate For Match" -msgstr "Сертифікат для відповідності" - -msgid "Certificate Mapping Match" -msgstr "Відповідність за прив’язкою до сертифіката" - -msgid "Matched Users" -msgstr "Відповідні користувачі" - -msgid "User Login" -msgstr "Користувач" - -msgid "Add certificate identity mapping rule" -msgstr "Додати правило прив'язки сертифіката до профілю" - -msgid "Add certificate mapping data" -msgstr "Додати дані прив'язки сертифіката" - -msgid "Configuration string" -msgstr "Рядок налаштування" - -#, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "Хочете вилучити дані прив’язки до сертифікатів ${data}?" - -msgid "Remove certificate mapping data" -msgstr "Вилучити дані прив'язки сертифіката" - -msgid "Issuer and subject" -msgstr "Видавець і призначення" - -msgid "Remove certificate identity mapping rules" -msgstr "Вилучити правила прив'язки профілів сертифікації" - -msgid "Group Options" -msgstr "Параметри групи" - -msgid "Search Options" -msgstr "Параметри пошуку" - -msgid "SELinux Options" -msgstr "Параметри SELinux" - -msgid "Server Options" -msgstr "Параметри сервера" - -msgid "Service Options" -msgstr "Параметри служби" - -msgid "User Options" -msgstr "Параметри користувача" - -msgid "Forward first" -msgstr "Спочатку переспрямувати" - -msgid "Forwarding disabled" -msgstr "Переспрямовування вимкнено" - -msgid "Forward only" -msgstr "Лише переспрямовувати" - -msgid "Options" -msgstr "Параметри" - -msgid "Update System DNS Records" -msgstr "Оновити записи DNS системи" - -msgid "Do you want to update system DNS records?" -msgstr "Хочете оновити записи DNS системи?" - -msgid "System DNS records updated" -msgstr "Оновлено записи DNS системи" - -msgid "Add DNS forward zone" -msgstr "Додати зону переспрямовування DNS" - -msgid "Remove DNS forward zones" -msgstr "Вилучити зони переспрямовування DNS" - -msgid "Add DNS resource record" -msgstr "Додати запис ресурсу DNS" - -msgid "DNS record was deleted because it contained no data." -msgstr "Запис DNS було вилучено, оскільки у ньому не містилося жодних даних." - -msgid "Other Record Types" -msgstr "Інші типи записів" - -msgid "Address not valid, can't redirect" -msgstr "Адреса є некоректною. Переспрямування неможливе." - -msgid "Create dns record" -msgstr "Створити запис DNS" - -msgid "Creating record." -msgstr "Створення запису." - -msgid "Record creation failed." -msgstr "Спроба створення запису зазнала невдачі." - -msgid "Checking if record exists." -msgstr "Перевірка, чи існує запис." - -msgid "Record not found." -msgstr "Запис не знайдено." - -msgid "Redirection to PTR record" -msgstr "Переспрямовування на запис PTR" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "Виявлено зону: ${zone}" - -msgid "Target reverse zone not found." -msgstr "Не знайдено зворотної зони призначення." - -msgid "Fetching DNS zones." -msgstr "Отримання даних щодо зон DNS." - -msgid "An error occurred while fetching dns zones." -msgstr "Під час спроби отримання даних щодо зон DNS сталася помилка." - -msgid "You will be redirected to DNS Zone." -msgstr "Вас буде переспрямовано до зони DNS." - -msgid "Remove DNS resource records" -msgstr "Вилучити записи ресурсів DNS" - -msgid "Standard Record Types" -msgstr "Стандартні типи записів" - -msgid "Records for DNS Zone" -msgstr "Записи зони DNS" - -msgid "Record Type" -msgstr "Тип запису" - -msgid "Add DNS zone" -msgstr "Додати зону DNS" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "Ви справді хочете додати права доступу для зони DNS ${object}?" - -msgid "DNS Zone Settings" -msgstr "Параметри зони DNS" - -msgid "Remove DNS zones" -msgstr "Вилучити зони DNS" - -msgid "Remove Permission" -msgstr "Вилучити права доступу" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "Ви справді хочете вилучити права доступу для зони DNS ${object}?" - -msgid "Skip DNS check" -msgstr "Пропустити перевірку DNS" - -msgid "Skip overlap check" -msgstr "Пропустити перевірку перекриття" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "Хочете перевірити, чи є адреса нового основного сервера назв у DNS" - -msgid "Authoritative nameserver change" -msgstr "Зміна основного сервера назв" - -msgid "Level" -msgstr "Рівень" - -msgid "Set Domain Level" -msgstr "Встановити рівень домену" - -msgid "Add user group" -msgstr "Додати групу користувачів" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "Додати групи користувачів до групи користувачів «${primary_key}»" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "Додати групу користувачів «${primary_key}» до списку груп користувачів" - -#, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "Додати групу користувачів «${primary_key}» до правил HBAC" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "Додати групу користувачів «${primary_key}» до списку мережевих груп" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "Додати групу користувачів «${primary_key}» до списку ролей" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "Додати групу користувачів «${primary_key}» до правил sudo" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "Додати служби до групи користувачів «${primary_key}»" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "Додати користувачів до групи користувачів «${primary_key}»" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" -"Додати групи як керівників учасниками для групи користувачів «${primary_key}»" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" -"Вилучити групи з керівників учасниками для групи користувачів " -"«${primary_key}»" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" -"Додати користувачів як керівників учасниками для групи користувачів " -"«${primary_key}»" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" -"Вилучити користувачів з керівників учасниками для групи користувачів " -"«${primary_key}»" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" -"Додати перевизначення ідентифікатора користувача до групи користувачів " -"«${primary_key}»" - -msgid "Group Settings" -msgstr "Параметри групи" - -msgid "External" -msgstr "Зовнішній" - -msgid "Groups" -msgstr "Групи" - -msgid "Group categories" -msgstr "Категорії груп" - -msgid "Change to external group" -msgstr "Змінити на зовнішню групу" - -msgid "Change to POSIX group" -msgstr "Змінити на групу POSIX" - -msgid "Non-POSIX" -msgstr "Не-POSIX" - -msgid "POSIX" -msgstr "POSIX" - -msgid "Remove user groups" -msgstr "Вилучити групи користувачів" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" -"Вилучити групу користувачів «${primary_key}» зі списку груп користувачів" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "Вилучити групу користувачів «${primary_key}» зі списку мережевих груп" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "Вилучити групу користувачів «${primary_key}» зі списку ролей" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "Вилучити групу користувачів «${primary_key}» зі правил HBAC" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "Вилучити групу користувачів «${primary_key}» зі правил sudo" - -#, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "Вилучити групи користувачів з групи користувачів «${primary_key}»" - -#, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "Вилучити служби з групи користувачів «${primary_key}»" - -#, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "Вилучити користувачів з групи користувачів «${primary_key}»" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" -"Вилучити перевизначення ідентифікатора користувача з групи користувачів " -"«${primary_key}»" - -msgid "Group Type" -msgstr "Тип групи" - -msgid "Add HBAC rule" -msgstr "Додати правило HBAC" - -#, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "Додати групи користувачів до правила HBAC «${primary_key}»" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "Додати групи вузлів до правила HBAC «${primary_key}»" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "Додати вузли до правила HBAC «${primary_key}»" - -#, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "Додати групи служб HBAC до правила HBAC «${primary_key}»" - -#, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "Додати служби HBAC до правила HBAC «${primary_key}»" - -#, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "Додати користувачів до правила HBAC «${primary_key}»" - -msgid "Accessing" -msgstr "Доступ" - -msgid "Remove HBAC rules" -msgstr "Вилучити правила HBAC" - -#, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "Вилучити групи користувачів з правила HBAC «${primary_key}»" - -#, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "Вилучити групи вузлів з правила HBAC «${primary_key}»" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "Вилучити вузли з правила HBAC «${primary_key}»" - -#, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "Вилучити групи служб HBAC з правила HBAC «${primary_key}»" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "Вилучити служби HBAC з правила HBAC «${primary_key}»" - -#, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "Вилучити користувачів з правила HBAC «${primary_key}»" - -msgid "Via Service" -msgstr "Проміжна служба" - -msgid "Who" -msgstr "Хто" - -msgid "Add HBAC service" -msgstr "Додати службу HBAC" - -#, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "Додати службу HBAC «${primary_key}» до груп служб HBAC" - -msgid "Remove HBAC services" -msgstr "Вилучити служби HBAC" - -#, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "Вилучити службу HBAC «${primary_key}» з груп служб HBAC" - -msgid "Add HBAC service group" -msgstr "Додати групу служб HBAC" - -#, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "Додати служби HBAC до групи служб HBAC «${primary_key}»" - -msgid "Remove HBAC service groups" -msgstr "Вилучити групи служб HBAC" - -#, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "Вилучити служби HBAC з групи служб HBAC «${primary_key}»" - -msgid "Access Denied" -msgstr "Доступ заборонено" - -msgid "Access Granted" -msgstr "Надано доступ" - -msgid "Include Disabled" -msgstr "Включення вимкнено" - -msgid "Include Enabled" -msgstr "Включення увімкнено" - -msgid "HBAC Test" -msgstr "Тест HBAC" - -msgid "Matched" -msgstr "Встановлено відповідність" - -msgid "Missing values: " -msgstr "Пропущені значення: " - -msgid "New Test" -msgstr "Новий текст" - -msgid "Rules" -msgstr "Правила" - -msgid "Run Test" -msgstr "Запустити тест" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "Вкажіть зовнішній ${entity}" - -msgid "Unmatched" -msgstr "Невідповідний" - -msgid "Add host" -msgstr "Додати вузол" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "Додати вузол керування вузлами «${primary_key}»" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "Додати вузол «${primary_key}» до груп вузлів" - -#, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "Додати вузол «${primary_key}» до правил HBAC" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "Додати вузол «${primary_key}» до мережевих груп" - -#, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "Додати вузол «${primary_key}» до ролей" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "Додати вузол «${primary_key}» до правил sudo" - -msgid "Host Certificate" -msgstr "Сертифікат вузла" - -msgid "Host Name" -msgstr "Назва вузла" - -msgid "Delete Key, Unprovision" -msgstr "Вилучити ключ, скасування передбачення" - -msgid "Host Settings" -msgstr "Параметри вузла" - -msgid "Enrolled" -msgstr "Зареєстровано" - -msgid "Enrollment" -msgstr "Реєстрація" - -msgid "Fully Qualified Host Name" -msgstr "Повна назва вузла" - -msgid "Generate OTP" -msgstr "Створити OTP" - -msgid "Generated OTP" -msgstr "Створений OTP" - -msgid "Kerberos Key" -msgstr "Ключ Kerberos" - -msgid "Kerberos Key Not Present" -msgstr "Ключа Kerberos немає" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "Маємо ключ Kerberos, вузол передбачено" - -msgid "One-Time Password" -msgstr "Одноразовий пароль" - -msgid "One-Time Password Not Present" -msgstr "Одноразового пароля немає" - -msgid "One-Time Password Present" -msgstr "Є одноразовий пароль" - -msgid "Reset OTP" -msgstr "Скинути ОП" - -msgid "Reset One-Time Password" -msgstr "Скинути одноразовий пароль" - -msgid "Set OTP" -msgstr "Одноразовий пароль" - -msgid "OTP set" -msgstr "Встановлено одноразовий пароль" - -msgid "Set One-Time Password" -msgstr "Встановити одноразовий пароль" - -msgid "Remove hosts" -msgstr "Вилучити вузли" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "Вилучити вузол керування вузлами «${primary_key}»" - -#, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "Вилучити вузол «${primary_key}» з груп вузлів" - -#, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "Вилучити вузол «${primary_key}» з мережевих груп" - -#, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "Вилучити вузол «${primary_key}» з ролей" - -#, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "Вилучити вузол «${primary_key}» з правил HBAC" - -#, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "Вилучити вузол «${primary_key}» з правил sudo" - -msgid "Unprovision" -msgstr "Скасування передбачення" - -msgid "Are you sure you want to unprovision this host?" -msgstr "Ви справді бажаєте скасувати передбачення цього вузла?" - -msgid "Unprovisioning host" -msgstr "Вузол скасовування передбачення" - -msgid "Host unprovisioned" -msgstr "Вузол не передбачено" - -msgid "Add host group" -msgstr "Додати групу вузлів" - -#, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "Додати вузли до групи вузлів «${primary_key}»" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "Додати групи вузлів до групи вузлів «${primary_key}»" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "Додати групу вузлів «${primary_key}» до груп вузлів" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "Додати групу вузлів «${primary_key}» до правил HBAC" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "Додати групу вузлів «${primary_key}» до мережевих груп" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "Додати групу вузлів «${primary_key}» до правил sudo" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" -"Додати групи як керівників учасниками для групи вузлів «${primary_key}»" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" -"Вилучити групи з керівників учасниками для групи вузлів «${primary_key}»" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" -"Додати користувачів як керівників учасниками для групи вузлів " -"«${primary_key}»" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" -"Вилучити користувачів з керівників учасниками для групи вузлів " -"«${primary_key}»" - -msgid "Host Group Settings" -msgstr "Параметри групи вузлів" - -msgid "Remove host groups" -msgstr "Вилучити групи вузлів" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "Вилучити групу вузлів «${primary_key}» з груп вузлів" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "Вилучити групу вузлів «${primary_key}» з мережевих груп" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "Вилучити групу вузлів «${primary_key}» з правил HBAC" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "Вилучити групу вузлів «${primary_key}» з правил sudo" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "Вилучити вузли з групи вузлів «${primary_key}»" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "Вилучити групи вузлів з групи вузлів «${primary_key}»" - -msgid "Keycloak or Red Hat SSO" -msgstr "Keycloak або Red Hat SSO" - -msgid "Google" -msgstr "Google" - -msgid "Github" -msgstr "Github" - -msgid "Microsoft or Azure" -msgstr "Microsoft або Azure" - -msgid "Okta" -msgstr "Okta" - -msgid "OAuth 2.0 client details" -msgstr "Подробиці щодо клієнта OAuth 2.0" - -msgid "Identity provider details" -msgstr "Параметри надавача профілів" - -msgid "Verify secret" -msgstr "Перевірити реєстраційні дані" - -msgid "User to override" -msgstr "Користувач для перевизначення" - -msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "" -"Введіть назву облікового запису довіреного користувача або користувача IPA. " -"Зауваження: у списку результатів пошуку не буде записів користувачів із " -"довірених доменів." - -msgid "Enter trusted user login." -msgstr "Введіть назву запису довіреного користувача." - -msgid "Profile" -msgstr "Профіль" - -msgid "Group to override" -msgstr "Група для перевизначення" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "" -"Введіть назву запису довіреної групи або групи IPA. Зауваження: у списку " -"результатів пошуку не буде записів груп із довірених доменів." - -msgid "Enter trusted group name." -msgstr "Введіть назву довіреної групи." - -msgid "Add ID view" -msgstr "Додати перегляд ідентифікатора" - -msgid "Add group ID override" -msgstr "Додати перевизначення ідентифікатора групи" - -msgid "Add user ID override" -msgstr "Додати перевизначення ідентифікатора користувача" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "${primary_key} застосовується до:" - -msgid "Applied to hosts" -msgstr "Застосовується до вузлів" - -msgid "Apply to host groups" -msgstr "Застосувати до груп вузлів" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "" -"Застосувати ${primary_key} перегляду ідентифікаторів до вузлів груп вузлів" - -msgid "Apply to hosts" -msgstr "Застосувати до вузлів" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "Застосувати ${primary_key} перегляду ідентифікаторів до вузлів" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "${primary_key} перевизначає:" - -msgid "Remove ID views" -msgstr "Вилучити перегляди ідентифікаторів" - -msgid "Remove user ID overrides" -msgstr "Вилучити перевизначення ідентифікаторів користувачів" - -msgid "Remove group ID overrides" -msgstr "Вилучити перевизначення ідентифікаторів груп" - -msgid "Un-apply from host groups" -msgstr "Скасувати застосування до груп вузлів" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "" -"Скасувати застосування переглядів ідентифікаторів до вузлів груп вузлів" - -msgid "Un-apply" -msgstr "Скасувати" - -msgid "Un-apply from hosts" -msgstr "Скасувати застосування до вузлів" - -msgid "Un-apply ID Views from hosts" -msgstr "Скасувати застосування переглядів ідентифікаторів до вузлів" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "" -"Ви справді хочете скасувати застосування перегляду ідентифікаторів до " -"позначених записів?" - -#, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "" -"Скасувати застосування перегляду ідентифікаторів «${primary_key}» до вузлів" - -msgid "Kerberos Ticket Policy" -msgstr "Правила квитків Kerberos" - -msgid "Add netgroup" -msgstr "Додати мережеву групу" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "Додати мережеву групу «${primary_key}» до мережевих груп" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "Додати мережеві групи до мережевої групи «${primary_key}»" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "Додати групи користувачів до мережевої групи «${primary_key}»" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "Додати вузли до мережевої групи «${primary_key}»" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "Додати групи вузлів до мережевої групи «${primary_key}»" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "Додати користувачів до мережевої групи «${primary_key}»" - -msgid "Netgroup Settings" -msgstr "Параметри мережевої групи" - -msgid "Remove netgroups" -msgstr "Вилучити мережеві групи" - -#, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "Вилучити мережеву групу «${primary_key}» з мережевих груп" - -#, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "Вилучити групи користувачів з мережевої групи «${primary_key}»" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "Вилучити вузли з мережевої групи «${primary_key}»" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "Вилучити групи вузлів з мережевої групи «${primary_key}»" - -#, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "Вилучити мережеві групи з мережевої групи «${primary_key}»" - -#, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "Вилучити користувачів з мережевої групи «${primary_key}»" - -msgid "Add OTP token" -msgstr "Додати жетон OTP" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" -msgstr "Додати ключ керування записами користувачів OTP «${primary_key}»" - -#, python-brace-format -msgid "" -"You can use FreeOTP as a software " -"OTP token application." -msgstr "" -"Ви можете скористатися FreeOTP як " -"програмою для роботи з ключами OTP." - -msgid "Configure your token" -msgstr "Налаштувати ваш жетон" - -msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." -msgstr "" -"Налаштуйте ваш жетон скануванням QR-коду, наведеного нижче. Натисніть поле " -"QR-коду, якщо ви бачите правильні дані на пристрої, який ви хочете " -"налаштувати." - -msgid "OTP Token Settings" -msgstr "Параметри жетона OTP" - -msgid "Disable token" -msgstr "Вимкнути жетон" - -msgid "Enable token" -msgstr "Увімкнути жетон" - -msgid "Remove OTP tokens" -msgstr "Вилучити ключі OTP" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "Вилучити ключ керування записами користувачів OTP «${primary_key}»" - -msgid "Show QR code" -msgstr "Показати QR-код" - -msgid "Show configuration uri" -msgstr "Показати адресу налаштувань" - -msgid "Counter-based (HOTP)" -msgstr "На основі лічильника (HOTP)" - -msgid "Time-based (TOTP)" -msgstr "На основі часу (TOTP)" - -msgid "Add Custom Attribute" -msgstr "Додати нетиповий атрибут" - -msgid "Permission settings" -msgstr "Параметри прав доступу" - -msgid "Attribute breakdown" -msgstr "Розбиття за атрибутами" - -msgid "Privilege Settings" -msgstr "Параметри привілеїв" - -msgid "Public key:" -msgstr "Відкритий ключ:" - -msgid "Set public key" -msgstr "Встановити відкритий ключ" - -msgid "Show/Set key" -msgstr "Показати або встановити ключ" - -msgid "Modified: key not set" -msgstr "Змінено: ключ не встановлено" - -msgid "Modified" -msgstr "Змінено" - -msgid "New: key not set" -msgstr "Новий: ключ не встановлено" - -msgid "New: key set" -msgstr "Новий: ключ встановлено" - -msgid "Add password policy" -msgstr "Додати правила паролів" - -msgid "Password Policy" -msgstr "Правила для паролів" - -msgid "Remove password policies" -msgstr "Вилучити правила паролів" - -msgid "Add ID range" -msgstr "Додати діапазон ідентифікаторів" - -msgid "Range Settings" -msgstr "Параметри діапазону" - -msgid "Base ID" -msgstr "Основа ID" - -msgid "Primary RID base" -msgstr "Головна основа RID" - -msgid "Range size" -msgstr "Розмір діапазону" - -msgid "Domain SID" -msgstr "Домен SID" - -msgid "Secondary RID base" -msgstr "Вторинна основа RID" - -msgid "Remove ID ranges" -msgstr "Вилучити діапазони ідентифікаторів" - -msgid "Active Directory domain with POSIX attributes" -msgstr "Домен Active Directory з атрибутами POSIX" - -msgid "Detect" -msgstr "Визначити" - -msgid "Local domain" -msgstr "Локальний домен" - -msgid "IPA trust" -msgstr "Довіра IPA" - -msgid "Active Directory winsync" -msgstr "winsync Active Directory" - -msgid "Add RADIUS server" -msgstr "Додати сервер RADIUS" - -msgid "RADIUS Proxy Server Settings" -msgstr "Параметри проксі-сервера RADIUS" - -msgid "Remove RADIUS servers" -msgstr "Вилучити сервери RADIUS" - -msgid "Check DNS" -msgstr "Перевірка DNS" - -msgid "Do you also want to perform DNS check?" -msgstr "Хочете також виконати перевірку DNS?" - -msgid "Force Update" -msgstr "Примусове оновлення" - -msgid "Add SELinux user map" -msgstr "Додати карту користувачів SELinux" - -#, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "" -"Додати групи користувачів до прив'язки користувачів SELinux «${primary_key}»" - -#, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "Додати групи вузлів до прив'язки користувачів SELinux «${primary_key}»" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "Додати вузли до прив'язки користувачів SELinux «${primary_key}»" - -#, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "Додати користувачів до прив'язки користувачів SELinux «${primary_key}»" - -msgid "Remove selinux user maps" -msgstr "Вилучити прив'язки користувачів selinux" - -#, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "" -"Вилучити групи користувачів з прив'язки користувачів SELinux «${primary_key}»" - -#, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "" -"Вилучити групи вузлів з прив'язки користувачів SELinux «${primary_key}»" - -#, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "Вилучити вузли з прив'язки користувачів SELinux «${primary_key}»" - -#, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "" -"Вилучити користувачів з прив'язки користувачів SELinux «${primary_key}»" - -msgid "Server Roles" -msgstr "Ролі сервера" - -msgid "Server Role" -msgstr "Роль сервера" - -msgid "Warning: Consider service replication" -msgstr "Попередження: вам варто скористатися реплікацією служб" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" -"Наполегливо рекомендуємо вам встановити наступні служби одразу на декількох " -"серверах:" - -msgid "Delete Server" -msgstr "Вилучити сервер" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "" -"Вилучення запису сервера призведе до його остаточного вилучення з топології. " -"Зауважте, що скасувати результати виконання цієї дії неможливо." - -msgid "Add service" -msgstr "Додати службу" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "Додати службу керування вузлами «${primary_key}»" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "Додати службу «${primary_key}» до ролей" - -msgid "Service Certificate" -msgstr "Сертифікат служби" - -msgid "Service Settings" -msgstr "Параметри служби" - -msgid "Provisioning" -msgstr "Передбачення" - -msgid "Remove services" -msgstr "Вилучити служби" - -#, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "Вилучити службу «${primary_key}» з ролей" - -#, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "Вилучити службу керування вузлами «${primary_key}»" - -msgid "Are you sure you want to unprovision this service?" -msgstr "Ви справді бажаєте скасувати передбачення цієї служби?" - -msgid "Unprovisioning service" -msgstr "Служба скасовування передбачення" - -msgid "Service unprovisioned" -msgstr "Службу не передбачено" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "Маємо ключ Kerberos, службу передбачено" - -msgid "SSH public keys" -msgstr "Відкриті ключі SSH" - -msgid "SSH public key:" -msgstr "Відкритий ключ SSH:" - -msgid "Set SSH key" -msgstr "Встановити ключ SSH" - -msgid "Are you sure you want to activate selected users?" -msgstr "Ви справді хочете активувати позначені записи користувачів?" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "Ви справді хочете активувати ${object}?" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "Активовано ${count} записів користувачів" - -msgid "Add stage user" -msgstr "Додати користувача етапу" - -msgid "Stage users" -msgstr "Користувачі етапу" - -msgid "Preserved users" -msgstr "Зарезервовані користувачі" - -msgid "Remove preserved users" -msgstr "Вилучити збережених користувачів" - -msgid "Remove stage users" -msgstr "Вилучити користувачів етапів" - -msgid "Are you sure you want to stage selected users?" -msgstr "Ви справді хочете зробити користувачами етапу позначених користувачів?" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "Користувачами етапу зроблено ${count} користувачів" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "Ви справді хочете виставити ${object}?" - -msgid "Are you sure you want to restore selected users?" -msgstr "Ви справді хочете відновити позначені записи користувачів?" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "Ви справді хочете відновити ${object}?" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "Відновлено ${count} записів користувачів" - -msgid "User categories" -msgstr "Категорії користувачів" - -msgid "Add subid" -msgstr "Додати subid" - -msgid "Assigned subids" -msgstr "Призначені subid-и" - -msgid "DNA remaining" -msgstr "Залишковий DNA" - -msgid "Remaining subids" -msgstr "Залишкові subid-и" - -msgid "Subordinate ID Statistics" -msgstr "Статистика щодо підлеглих ідентифікаторів" - -msgid "Add sudo command" -msgstr "Додати команду sudo" - -#, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "Додати команду sudo «${primary_key}» до груп команд sudo" - -msgid "Remove sudo commands" -msgstr "Вилучити команди sudo" - -#, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "Вилучити команду sudo «${primary_key}» з груп команд sudo" - -msgid "Add sudo command group" -msgstr "Додати групу команд sudo" - -#, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "Додати команди sudo до групи команд sudo «${primary_key}»" - -msgid "Remove sudo command groups" -msgstr "Вилучити групи команд sudo" - -#, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "Вилучити команди sudo з групи команд sudo «${primary_key}»" - -msgid "Add sudo rule" -msgstr "Додати правило sudo" - -msgid "Add sudo option" -msgstr "Додати параметр sudo" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "Додати команди дозволу sudo до правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "Додати групи дозволу команд sudo до правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "Додати команди заборони sudo до правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "Додати групи заборони команд sudo до правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "Додати групи користувачів до правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "Додати групи вузлів до правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "Додати вузли до правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "Додати користувачів RunAs до правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "Додати групи користувачів RunAs до правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "Додати групи RunAs до правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "Додати користувачів до правила sudo «${primary_key}»" - -msgid "Allow" -msgstr "Дозволити" - -msgid "Any Command" -msgstr "Будь-яка команда" - -msgid "Any Group" -msgstr "Будь-яка група" - -msgid "Run Commands" -msgstr "Виконання команд" - -msgid "Deny" -msgstr "Відмовити" - -msgid "Access this host" -msgstr "Доступ до цього вузла" - -msgid "Option added" -msgstr "Додано параметр" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "Вилучено ${count} параметрів" - -msgid "Remove sudo rules" -msgstr "Вилучити правила sudo" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "Вилучити команди дозволу sudo з правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "Вилучити групи дозволу команд sudo з правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "Вилучити команди заборони sudo з правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "Вилучити групи заборони команд sudo з правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "Вилучити групи користувачів з правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "Вилучити групи вузлів з правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "Вилучити вузли з правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "Вилучити користувачів RunAs з правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "Вилучити групи користувачів RunAs з правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "Вилучити групи RunAs з правила sudo «${primary_key}»" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "Вилучити користувачів з правила sudo «${primary_key}»" - -msgid "As Whom" -msgstr "Від імені" - -msgid "Specified Commands and Groups" -msgstr "Вказані команди і групи" - -msgid "Specified Groups" -msgstr "Вказані групи" - -msgid "Remove sudo options" -msgstr "Вилучити параметри sudo" - -msgid "Autogenerated" -msgstr "Створено автоматично" - -msgid "Segment details" -msgstr "Подробиці сегмента" - -msgid "Replication configuration" -msgstr "Налаштування реплікації" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "" -"Для керованої топології потрібен мінімальний рівень домену ${domainlevel}" - -msgid "Add IPA location" -msgstr "Додати місце IPA" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "Додати сервер IPA до місця IPA «${primary_key}»" - -msgid "Remove IPA locations" -msgstr "Вилучити місця IPA" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "Вилучити сервери IPA з місця IPA «${primary_key}»" - -msgid "Add topology segment" -msgstr "Додати сегмент топології" - -msgid "Remove topology segments" -msgstr "Вилучити елементи топології" - -msgid "Account" -msgstr "Обліковий запис" - -msgid "Add trust" -msgstr "Додати довіру" - -msgid "Administrative account" -msgstr "Адміністративний обліковий запис" - -msgid "SID blocklists" -msgstr "Списки блокування SID" - -msgid "Trust Settings" -msgstr "Параметри довіри" - -msgid "Establish using" -msgstr "Встановити за допомогою" - -msgid "Fetch domains" -msgstr "Отримати домени" - -msgid "Pre-shared password" -msgstr "Попередньо оприлюднений пароль" - -msgid "Remove trusts" -msgstr "Вилучити записи довіри" - -msgid "Remove domains" -msgstr "Вилучити домени" - -msgid "Alternative UPN suffixes" -msgstr "Альтернативні суфікси UPN" - -msgid "User attributes for SMB services" -msgstr "Атрибути користувача для служб SMB" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "Шлях до скрипту, який буде виконано у системі Windows під час входу" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" -"Шлях до профілю користувача у форматі UNC \\\\сервер\\спільний_ресурс\\" - -msgid "Path to a user home directory, in UNC format" -msgstr "Шлях до домашнього каталогу користувача у форматі UNC" - -msgid "Drive to mount a home directory" -msgstr "Диск монтування домашнього каталогу" - -msgid "Account Settings" -msgstr "Параметри облікового запису" - -msgid "Account Status" -msgstr "Стан облікового запису" - -msgid "Active users" -msgstr "Активні користувачі" - -msgid "Add user" -msgstr "Додати користувача" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "Додати користувача «${primary_key}» до списку груп користувачів" - -#, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "Додати користувача «${primary_key}» до правил HBAC" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "Додати користувача «${primary_key}» до списку мережевих груп" - -#, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "Додати користувача «${primary_key}» до ролей" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "Додати користувача «${primary_key}» до правил sudo" - -msgid "Auto assign subordinate ids" -msgstr "Автоматично призначати підлеглі ідентифікатори" - -#, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "" -"Ви справді хочете автоматично призначити підлеглий ідентифікатор для " -"користувача ${object}?" - -msgid "Contact Settings" -msgstr "Параметри контакту" - -msgid "Delete mode" -msgstr "Режим вилучення" - -msgid "Employee Information" -msgstr "Відомості щодо працівника" - -msgid "Error changing account status" -msgstr "Помилка під час спроби зміни стану облікового запису" - -msgid "Password expiration" -msgstr "Обмеження терміну дії пароля" - -msgid "Mailing Address" -msgstr "Адреса ел. пошти" - -msgid "Misc. Information" -msgstr "Інша інформація" - -msgid "delete" -msgstr "вилучити" - -msgid "preserve" -msgstr "зберегти" - -msgid "No private group" -msgstr "Немає приватної групи" - -msgid "Remove users" -msgstr "Вилучити користувачів" - -#, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "Вилучити користувача «${primary_key}» з груп користувачів" - -#, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "Вилучити користувача «${primary_key}» з мережевих груп" - -#, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "Вилучити користувача «${primary_key}» з ролей" - -#, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "Вилучити користувача «${primary_key}» з правил HBAC" - -#, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "Вилучити користувача «${primary_key}» з правил sudo" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "" -"Ви справді бажаєте виконати щодо користувача дію «${action}»?
Зміни буде " -"внесено негайно." - -#, python-brace-format -msgid "Click to ${action}" -msgstr "Натисніть, щоб ${action}" - -msgid "Unlock" -msgstr "Розблокувати" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "Ви справді хочете розблокувати користувача ${object}?" - -msgid "Add vault" -msgstr "Додати сховище" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "Додати групи користувачів до списку учасників сховища «${primary_key}»" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "Додати служби до списку учасників сховища «${primary_key}»" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "Додати користувачів до списку учасників сховища «${primary_key}»" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "Додати групи користувачів до списку власників сховища «${primary_key}»" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "Додати служби до списку власників сховища «${primary_key}»" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "Додати користувачів до списку власників сховища «${primary_key}»" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" -"Реєстраційні дані можна додавати до сховища або отримувати з нього лише за " -"допомогою інструментів командного рядка vault-archive і vault-retrieve." - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" -"Вміст сховищ типу «стандартне» можуть переглядати користувачі із вищим " -"рівнем прав доступу (адміністратори)." - -msgid "Asymmetric" -msgstr "Асиметричний" - -msgid "Vaults Config" -msgstr "Налаштування сховища" - -msgid "Members" -msgstr "Учасники" - -msgid "My User Vaults" -msgstr "Сховища користувача" - -msgid "Owners" -msgstr "Власники" - -msgid "Remove vaults" -msgstr "Вилучити сховища" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" -"Вилучити групи користувачів зі списку учасників сховища «${primary_key}»" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "Вилучити служби зі списку учасників сховища «${primary_key}»" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "Вилучити користувачів зі списку учасників сховища «${primary_key}»" - -#, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "" -"Вилучити групи користувачів зі списку власників сховища «${primary_key}»" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "Вилучити служби зі списку власників сховища «${primary_key}»" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "Вилучити користувачів зі списку власників сховища «${primary_key}»" - -msgid "Service Vaults" -msgstr "Сховища служб" - -msgid "Shared" -msgstr "Спільне" - -msgid "Shared Vaults" -msgstr "Спільні сховища" - -msgid "Standard" -msgstr "Стандартне" - -msgid "Symmetric" -msgstr "Симетричний" - -msgid "Vault Type" -msgstr "Тип сховища" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" -"За допомогою вебінтерфейсу можна створювати лише стандартні сховища. " -"Скористайтеся командним інтерфейсом для створення інших типів сховищ." - -msgid "User Vaults" -msgstr "Сховища користувачів" - -msgid "Current password is required" -msgstr "Слід вказати поточний пароль" - -#, python-brace-format -msgid "Your password expires in ${days} days." -msgstr "Строк дії вашого пароля буде вичерпано за ${days} днів." - -msgid "First OTP" -msgstr "Перший OTP" - -msgid "New password is required" -msgstr "Слід вказати новий пароль" - -msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" -" OTP (одноразовий пароль): створити новий код OTP для кожного з полів OTP." - -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" -" OTP (одноразовий пароль): створити новий код OTP для кожного з полів OTP." - -msgid "Token synchronization failed" -msgstr "Спроба синхронізації жетонів зазнала невдачі" - -msgid "The username, password or token codes are not correct" -msgstr "Ім’я користувача, пароль або коди жетона є помилковими" - -msgid "Token was synchronized" -msgstr "Жетон синхронізовано" - -msgid "Password change complete" -msgstr "Зміну пароля завершено" - -msgid "Your password has expired. Please enter a new password." -msgstr "Термін дії вашого паролю вичерпано. Будь ласка, введіть новий пароль." - -msgid "Passwords must match" -msgstr "Паролі мають збігатися" - -msgid "Password reset was not successful." -msgstr "Не вдалося скинути пароль." - -msgid "Reset your password." -msgstr "Скинути ваш пароль." - -msgid "Second OTP" -msgstr "Другий OTP" - -msgid "Verify Password" -msgstr "Повторіть пароль" - -msgid "Are you sure you want to delete selected entries?" -msgstr "Ви справді бажаєте вилучити позначені записи?" - -#, python-brace-format -msgid "${count} item(s) deleted" -msgstr "Вилучено ${count} записів" - -msgid "Are you sure you want to disable selected entries?" -msgstr "Ви справді хочете вимкнути позначені записи?" - -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "Вимкнено ${count} записів" - -msgid "Are you sure you want to enable selected entries?" -msgstr "Ви справді бажаєте увімкнути позначені записи?" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "Увімкнено ${count} записів" - -msgid "Some entries were not deleted" -msgstr "Деякі з записів не вилучено" - -msgid "Quick Links" -msgstr "Швидкі посилання" - -msgid "Select All" -msgstr "Вибрати все" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "" -"За запитом повернуто більше за налаштоване максимальне значення результатів. " -"Показано лише перші ${counter} результатів." - -msgid "Unselect All" -msgstr "Скасувати вибір всього" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" -"

Налаштування браузера для Kerberos

\n" -"\n" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" -"

Firefox

\n" -"\n" -"

\n" -" Ви можете налаштувати Firefox на використання Kerberos для " -"служби універсального входу. Нижче наведено настанови, які допоможуть вам " -"налаштувати ваш браузер на надсилання реєстраційних даних Kerberos до " -"відповідного центру розповсюдження ключів, який надає доступ до служи " -"універсального входу.\n" -"

\n" -"\n" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" -"
    \n" -"
  1. \n" -"

    \n" -"Імпортування " -"сертифіката служби сертифікації (CA)\n" -"

    \n" -"

    \n" -" Переконайтеся, що вами позначено усі три поля для " -"позначок.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" У полі адреси Firefox введіть about:config, щоб " -"програма показала список поточних параметрів налаштувань.\n" -"
    3. \n" -"
  3. \n" -" У полі фільтрування введіть negotiate, щоб " -"фільтрувати список параметрів.\n" -"
    4. \n" -"
  4. \n" -" Двічі клацніть на пункті network.negotiate-auth." -"trusted-uris, щоб відкрити діалогову панель для введення значення " -"рядка.\n" -"
    5. \n" -"
  5. \n" -" Введіть назву домену, на якому ви хочете проходити " -"розпізнавання, наприклад, .example.com.\n" -"
    6. \n" -"
  6. Повернутися до інтернет-інтерфейсу
    7. \n" -"
\n" -"\n" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" -"

Chrome

\n" -"\n" -"

\n" -" Ви можете налаштувати Chrome на використання Kerberos для служби " -"універсального входу. Нижче наведено настанови, які допоможуть вам " -"налаштувати ваш браузер на надсилання реєстраційних даних Kerberos до " -"відповідного центру розповсюдження ключів, який надає доступ до служи " -"універсального входу.\n" -"

\n" -"\n" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" -"

Імпортування сертифіката служби сертифікації

\n" -"
    \n" -"
  1. \n" -" Отримайте сертифікат служби сертифікації. Крім того, якщо вузол є також клієнтом IdM, можете просто взяти цей " -"сертифікат з /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Натисніть кнопку меню із підказкою Налаштування та " -"керування Google Chrome, яку типово розташовано у верхньому правому " -"куті вікна Chrome, потім натисніть Налаштування.\n" -"
    3. \n" -"
  3. \n" -" Натисніть пункт Розширені, щоб отримати доступ до " -"ширшого списку параметрів, потім натисніть кнопку Керування " -"сертифікатами, яку розташовано у списку із заголовком «HTTPS/SSL».\n" -"
    4. \n" -"
  4. \n" -" На вкладці Центри сертифікації натисніть кнопку " -"Імпортувати у нижній частині сторінки.\n" -"
    5. \n" -"
  5. Виберіть сертифікат служби сертифікації, який ви отримали на першому " -"кроці.
    6. \n" -"
\n" -"\n" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" -"

\n" -" Вмикання SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) для використання розпізнавання Kerberos\n" -" у Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Переконайтеся, що у вас є потрібний каталог, за допомогою " -"такої команди:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Створіть файл /etc/opt/chrome/policies/managed/" -"mydomainjson із правами доступу на запис, обмеженими адміністратором " -"системи або root, із таким рядком вмісту:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*example.com\" }\n" -"
    \n" -"
    \n" -" Зробити це можна за допомогою такої команди:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com.\" }' > /etc/opt/chrome/" -"policies/managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Зауваження: якщо ви користуєтеся Chromium, скористайтеся " -"/etc/chromium/policies/managed/ замість /etc/opt/chrome/" -"policies/managed/ для двох кроків налаштовування для SPNEGO Chrome.\n" -"

    \n" -"
\n" -"\n" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" -"

Internet Explorer

\n" -"

ПОПЕРЕДЖЕННЯ: підтримку браузера Internet Explorer " -"припинено.

\n" -"

\n" -" Якщо ви здатні увійти до робочої станції за допомогою вашого " -"ключа kerberos, ви можете скористатися отриманим квитком у Internet " -"Explorer.\n" -"

\n" -"

\n" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" -"Увійдіть до системи Windows за допомогою облікового запису вашої " -"області Kerberos (адміністративного домену)\n" -"

\n" -"

\n" -"У Internet Explorer виберіть меню «Інструменти», потім пункт " -"«Параметри інтернету».\n" -"

\n" -"
\n" -"
    \n" -"
  1. Відкрийте вкладку «Безпека»
    2. \n" -"
  2. Натисніть «Локальна мережа»
    3. \n" -"
  3. Натисніть «Сайти»
    4. \n" -"
  4. Натисніть «Додатково»
    5. \n" -"
  5. Додайте ваш домен до списку
    6. \n" -"
\n" -"
    \n" -"
  1. Відкрийте вкладку «Безпека»
    2. \n" -"
  2. Натисніть «Локальна мережа»
    3. \n" -"
  3. Натисніть «Нетиповий рівень»
    4. \n" -"
  4. Виберіть «Автоматичний вхід лише у локальній зоні»
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Відкрийте kerberізований сайт за допомогою IE (вам слід використати у " -"адресі повноцінну назву домену)
    2. \n" -"
  2. Ось і усе.
    3. \n" -"
\n" -"
\n" -"\n" - -msgid "Working" -msgstr "Працює" - -msgid "Audit" -msgstr "Аудит" - -msgid "Authentication" -msgstr "Розпізнавання" - -msgid "Automount" -msgstr "Автоматичне монтування" - -msgid "DNS" -msgstr "DNS" - -msgid "Host-Based Access Control" -msgstr "Керування доступом на основі вузлів" - -msgid "Identity" -msgstr "Профіль" - -msgid "Network Services" -msgstr "Мережеві служби" - -msgid "Policy" -msgstr "Правила" - -msgid "Role-Based Access Control" -msgstr "Керування доступом на основі ролей" - -msgid "Subordinate IDs" -msgstr "Підлеглі ідентифікатори" - -msgid "Sudo" -msgstr "Sudo" - -msgid "Topology" -msgstr "Топологія" - -msgid "True" -msgstr "Так" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"\n" -msgstr "" -"

Не вдалося перевірити ваші реєстраційні дані Kerberos

\n" -"

\n" -" Будь ласка, переконайтеся, що у вас є чинні квитки Kerberos (їх " -"можна отримати за допомогою kinit), і що ви налаштували ваш " -"браузер належним чином.\n" -"

\n" -"\n" -"

Налаштовування браузера

\n" -"\n" -"
\n" -"

\n" -" Якщо це вперше, будь ласка, налаштуйте ваш браузер.\n" -"

\n" -"
\n" - -msgid "API Browser" -msgstr "Навігатор API" - -msgid "First" -msgstr "Перший" - -msgid "Last" -msgstr "Останній" - -msgid "Next" -msgstr "Далі" - -msgid "Page" -msgstr "Сторінка" - -msgid "Prev" -msgstr "Назад" - -msgid "Undo" -msgstr "Скасувати" - -msgid "Undo this change." -msgstr "Скасувати цю зміну." - -msgid "Undo All" -msgstr "скасувати всі дії" - -msgid "Undo all changes in this field." -msgstr "Скасувати усі зміни у цьому полі." - -msgid "Text does not match field pattern" -msgstr "Текст не відповідає шаблону поля" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "" -"Має бути значенням дати часу за Гринвічем (UTC) (наприклад, «2014-01-20 " -"17:58:01Z»)" - -msgid "Must be a decimal number" -msgstr "Має бути десятковим числом" - -msgid "Format error" -msgstr "Помилка форматування" - -msgid "Must be an integer" -msgstr "Має бути цілим числом" - -msgid "Not a valid IP address" -msgstr "Некоректна IP-адреса" - -msgid "Not a valid IPv4 address" -msgstr "Некоректна адреса IPv4" - -msgid "Not a valid IPv6 address" -msgstr "Некоректна адреса IPv6" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "Максимальним є значення ${value}" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "Мінімальним є значення ${value}" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "" -"Некоректна адреса у мережі (приклади коректних адрес: 2001:db8::/64, " -"192.0.2.0/24)" - -msgid "Parse error" -msgstr "Помилка обробки" - -msgid "Must be a positive number" -msgstr "Має бути додатним числом" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "«${port}» не є коректним визначенням порту" - -msgid "Required field" -msgstr "Обов’язкове поле" - -msgid "Unsupported value" -msgstr "Непідтримуване значення" - -msgid "kerberos ticket policy settings" -msgstr "параметри правил квитків kerberos" - -msgid "OTP max life" -msgstr "Макс. строк дії OTP" - -msgid "OTP token maximum ticket life (seconds)" -msgstr "Максимальний строк дії квитка ключа OTP (у секундах)" - -msgid "OTP max renew" -msgstr "Макс. вік поновлення OTP" - -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "" -"Максимальний вік, протягом якого можливе поновлення квитка ключа OTP (у " -"секундах)" - -msgid "RADIUS max life" -msgstr "Макс. строк дії RADIUS" - -msgid "RADIUS maximum ticket life (seconds)" -msgstr "Максимальний строк дії квитка RADIUS (у секундах)" - -msgid "RADIUS max renew" -msgstr "Макс. вік поновлення RADIUS" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" -"Максимальний вік, протягом якого можливе поновлення квитка PKINIT (у " -"секундах)" - -msgid "PKINIT max life" -msgstr "Макс. строк дії PKINIT" - -msgid "PKINIT maximum ticket life (seconds)" -msgstr "Максимальний строк дії квитка PKINIT (у секундах)" - -msgid "PKINIT max renew" -msgstr "Макс. вік поновлення PKINIT" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" -"Максимальний вік, протягом якого можливе поновлення квитка PKINIT (у " -"секундах)" - -msgid "Hardened max life" -msgstr "Макс. строк дії Hardened" - -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "Максимальний строк дії квитка Hardened (у секундах)" - -msgid "Hardened max renew" -msgstr "Макс. вік поновлення Hardened" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" -"Максимальний вік, протягом якого можливе поновлення квитка Hardened (у " -"секундах)" - -msgid "IdP max life" -msgstr "Макс. строк дії IdP" - -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "" -"Максимальний строк дії квитка зовнішнього надавача профілів (у секундах)" - -msgid "IdP max renew" -msgstr "Макс. вік поновлення IdP" - -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "" -"Максимальний вік, протягом якого можливе поновлення квитка зовнішнього " -"надавача профілів (у секундах)" - -#, python-format -msgid "Ticket policy for %s could not be read" -msgstr "Не вдалося прочитати правила щодо квитків для %s" - -msgid "Default ticket policy could not be read" -msgstr "Не вдалося прочитати типові правила щодо квитків" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" -"\n" -"Перехід на IPA\n" -"\n" -"Перенесення користувачів і груп з сервера LDAP на IPA.\n" -"\n" -"Надсилає запит LDAP до віддаленого сервера з метою пошуку користувачів\n" -"і груп у контейнері. З метою перенесення паролів вам слід прив’язатися\n" -"до сервера від імені користувача, який може читати атрибут userPassword\n" -"на сервері. Перелік таких користувачів зазвичай обмежено адміністраторами\n" -"вищого рівня, зокрема cn=Directory Manager на 389-ds (типовий користувач\n" -"bind).\n" -"\n" -"Типовим контейнером користувачів є ou=People.\n" -"\n" -"Типовим контейнером груп є ou=Groups.\n" -"\n" -"Записи користувачів і груп, які вже створено на сервері IPA буде\n" -"пропущено.\n" -"\n" -"Дві схеми LDAP визначають спосіб зберігання записів учасників групи:\n" -"RFC2307 і RFC2307bis. RFC2307bis використовує атрибути member і\n" -"uniquemember для визначення учасників групи, RFC2307 використовує\n" -"memberUid. Типовою є схема RFC2307bis.\n" -"\n" -"За допомогою додатка compat IPA може повторно форматувати дані для систем,\n" -"де не передбачено підтримки RFC2307bis. Рекомендується вимикати цей додаток\n" -"під час перенесення, щоб зменшити навантаження на систему. Ви зможете\n" -"увімкнути його після перенесення. Щоб перенести дані з увімкненим додатком\n" -"скористайтеся параметром «--with-compat».\n" -"\n" -"Перенесені користувачі не матимуть реєстраційних записів Kerberos,\n" -"перенесено буде лише пароль LDAP. Щоб завершити процес перенесення,\n" -"користувачам слід відкрити сторінку\n" -"http://ipa.example.com/ipa/migration і пройти розпізнавання за\n" -"допомогою пароля LDAP з метою створення запису реєстраційних даних\n" -"Kerberos.\n" -"\n" -"Типово перенесення вимкнено. Для його вмикання скористайтеся командою\n" -"ipa config-mod:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"Якщо основний DN не буде надано за допомогою --basedn, IPA " -"використовуватиме\n" -"значення defaultNamingContext, якщо його встановлено, або перше значення у\n" -"наборі namingContexts у кореневій теці віддаленого сервера LDAP.\n" -"\n" -"Записи користувачів додають до типової групи користувачів. Процес такого\n" -"додавання може бути доволі тривалим, отже під час перенесення він " -"виконується\n" -"у пакетному режимі, пакетами по 100 користувачів. У результаті буде певний\n" -"період, коли записи користувачів вже буде додано до IPA, але ці користувачі\n" -"ще не будуть учасниками типової групи користувачів.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Найпростіше перенесення з типовими параметрами:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Визначення контейнерів користувача і групи. Можна скористатися для\n" -" перенесення даних користувача і групи з сервера IPA версії 1:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Оскільки на сервері IPA версії 2 вже передбачено попередньо\n" -" визначені групи, які можуть збігатися з групами, які переносяться з\n" -" сервера (IPA версії 1), наприклад admins, ipausers, користувачів з\n" -" таких груп може бути перенесено до невідомої (unknown) групи на\n" -" новому сервері IPA версії 2.\n" -" Скористайтеся параметром --group-overwrite-gid для перезапису\n" -" ідентифікатора групи вже створених груп для запобігання цій\n" -" незручності:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Перенесені дані користувачів та груп можуть містити класи об’єктів та " -"супутні\n" -" атрибути, невідомі серверу IPA версії 2. Ці класти об’єктів та атрибутів\n" -" може бути виключено з процедури перенесення даних:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"ВЕДЕННЯ ЖУРНАЛУ\n" -"\n" -"Під час перенесення повідомлення з попередженнями та записами помилок\n" -"додаватимуться до журналу помилок Apache. З відповідним файлом слід\n" -"ознайомитися після завершення перенесення для виправлення та виявлення\n" -"помилок, які могли статися.\n" -"\n" -"Для кожного пакета зі 100 перенесених записів користувачів буде показано\n" -"інформаційне повідомлення, призначене для оцінки поступу обробки та\n" -"визначення її тривалості.\n" -"\n" -"Якщо визначено рівень ведення журналу debug за допомогою встановлення\n" -"debug = True у /etc/ipa/default.conf або у /etc/ipa/server.conf,\n" -"для кожного перенесеного запису додаватиметься власний запис, також\n" -"додаватиметься резюме щодо кожного оновлення типової групи\n" -"користувачів.\n" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "" -"Реєстраційний запис Kerberos %s вже існує. Скористайтеся командою «ipa user-" -"mod», щоб встановити його параметри вручну." - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "" -"Не вдалося визначити, чи існує вже реєстраційний запис Kerberos %s. " -"Скористайтеся командою «ipa user-mod», щоб встановити його параметри вручну." - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "" -"Не вдалося додати користувача до типової групи. Додати користувача вручну " -"можна за допомогою команди «ipa group-add-member»." - -msgid "Migration of LDAP search reference is not supported." -msgstr "Підтримки перенесення посилання пошуку LDAP не передбачено." - -msgid "Malformed DN" -msgstr "Помилкове форматування DN" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "%(user)s не є користувачем з групи POSIX" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "" -". Перевірте ідентифікатор вже створеної групи. Скористайтеся параметром --" -"group-overwrite-gid для перезапису ідентифікатора групи" - -msgid "Invalid LDAP URI." -msgstr "Некоректна адреса LDAP." - -#, python-format -msgid "%s to exclude from migration" -msgstr "%s, які слід виключити з перенесення" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "" -"список результатів пошуку об’єктів міграції\n" -"було обрізано сервером; ймовірно,\n" -"процес міграції не завершено\n" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" -"Пошуком LDAP у %(container)s не повернуто жодного результату (основа пошуку: " -"%(search_base)s, клас об’єктів: %(objectclass)s)" - -msgid "Default group for new users not found" -msgstr "Типової групи для нових користувачів не знайдено" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" -"\n" -"Правила паролів\n" -"\n" -"Правила паролів встановлюють обмеження щодо використання паролів IPA,\n" -"зокрема максимальний строк дії, мінімальний строк дії, кількість паролів,\n" -"які зберігатимуться у журналі, потрібна кількість класів символів (для\n" -"складних паролів) та мінімальну довжину пароля.\n" -"\n" -"Типово, визначено одні загальні правила для всіх користувачів. Ви можете\n" -"створити правило паролів, яке стосуватиметься однієї групи. Для одного\n" -"користувача може бути використано лише один набір правил паролів: груповий\n" -"або загальний. Групові правила паролів є незалежними, вони не є загальними\n" -"правилами з додаванням нетипових параметрів.\n" -"\n" -"Для кожного набору групових правил паролів має бути встановлено окреме\n" -"значення пріоритету. Якщо користувач є учасником декількох груп, для яких\n" -"встановлено правила паролів, пріоритет визначає, які з правил має бути\n" -"застосовано. Менші значення відповідають вищому пріоритету правил.\n" -"\n" -"Групові правила паролів автоматично вилучаються під час вилучення\n" -"відповідних груп.\n" -"\n" -"Період лояльності визначає кількість дозволених входів LDAP після завершення " -"строку дії.\n" -"-1 означає, що примусове вичерпання строку дії не буде застосовано (" -"попередня поведінка).\n" -"0 забороняє додаткові входи після завершення строку дії.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Внесення змін до загальних правил:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Додавання нових групових правил паролів:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Показ загальних правил паролів:\n" -" ipa pwpolicy-show\n" -"\n" -" Показ групових правил паролів:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Показ правил, які має бути застосовано до певного користувача:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Внесення змін до групових правил паролів:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" -"Клас об'єкта служби, який використовується для прив'язування правил до груп" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "" -"пріоритет повинен мати унікальне значення (%(prio)d вже використано для " -"%(gname)s)" - -msgid "Add Class of Service entry" -msgstr "Додати запис класу служби" - -msgid "Delete Class of Service entry" -msgstr "Вилучити запис класу служби" - -msgid "Modify Class of Service entry" -msgstr "Змінити запис класу служби" - -msgid "Display Class of Service entry" -msgstr "Показати запис класу служби" - -msgid "Search for Class of Service entry" -msgstr "Шукати запис класу служби" - -msgid "password policy" -msgstr "правила для паролів" - -msgid "password policies" -msgstr "правила щодо паролів" - -msgid "Password Policies" -msgstr "Правила щодо паролів" - -msgid "Max repeat" -msgstr "Макс. повторення" - -msgid "Maximum number of same consecutive characters" -msgstr "Максимальна кількість однакових символів поспіль" - -msgid "Max sequence" -msgstr "Макс. послідовність" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "Максимальна довжина можливої послідовності з абетки (abcd)" - -msgid "Dictionary check" -msgstr "Перевірка за словником" - -msgid "Check if the password is a dictionary word" -msgstr "Перевіряти, чи є пароль словом зі словника" - -msgid "User check" -msgstr "Перевірка на ім'я користувача" - -msgid "Check if the password contains the username" -msgstr "Перевіряти, чи не міститься у паролі ім'я користувача" - -msgid "Grace login limit" -msgstr "Обмеження входів лояльності" - -msgid "Number of LDAP authentications allowed after expiration" -msgstr "Кількість дозволених розпізнавань LDAP після завершення строку дії" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" -"Якщо визначено maxrepeat, maxsequence, dictcheck або usercheck, мінімальною " -"довжиною має бути число >= 6" - -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "" -"Максимальний строк дії пароля має бути рівним або перевищувати мінімальний " -"строк його дії." - -msgid "cannot delete global password policy" -msgstr "неможливо вилучити загальні правила паролів" - -msgid "priority cannot be set on global policy" -msgstr "для загальних правил не може встановлювати пріоритети" - -msgid "HBAC rule and local members cannot both be set" -msgstr "Не можна одночасно вказувати правило HBAC і локальних учасників" - -msgid "Invalid SELinux user name, must match {}" -msgstr "Некоректна назва запису користувача SELinux. Назва має відповідати {}" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" -"Некоректне значення MLS. Значення має відповідати {mls}, де максимальним " -"рівнем є {mls_max}" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" -"Некоректне значення MCS. Значення має відповідати {mcs}, де максимальною " -"категорією є {mcs_max}" - -msgid "SELinux user map list not found in configuration" -msgstr "Списку карт користувачів SELinux у налаштуваннях не виявлено" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "" -"Запису користувача SELinux %(user)s не виявлено у порядковому списку (у " -"налаштуваннях)" - -msgid "SELinux User Map rule" -msgstr "Правило карти користувачів SELinux" - -msgid "SELinux User Map rules" -msgstr "Правила карти користувачів SELinux" - -msgid "SELinux User Maps" -msgstr "Карти користувачів SELinux" - -msgid "SELinux User Map" -msgstr "Карта користувачів SELinux" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "Не знайдено правила HBAC %(rule)s" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "Додано карту користувачів SELinux «%(value)s»" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "Вилучено карту користувачів SELinux «%(value)s»" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "Змінено карту користувачів SELinux «%(value)s»" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "встановлено відповідність %(count)d карти користувачів SELinux" -msgstr[1] "встановлено відповідність %(count)d карт користувачів SELinux" -msgstr[2] "встановлено відповідність %(count)d карт користувачів SELinux" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "Увімкнено карту користувачів SELinux «%(value)s»" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "Вимкнено карту користувачів SELinux «%(value)s»" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" -"\n" -"Служби\n" -"\n" -"Служба IPA — це служба, що працює на вузлі системи. У записі служби\n" -"IPA можуть зберігатися дані реєстраційного запису Kerberos, сертифікат\n" -"SSL або обидва набори даних.\n" -"\n" -"Службою IPA можна керувати безпосередньо з комп’ютера, якщо системі\n" -"цього комп’ютера надано достатні права доступу. Це стосується навіть\n" -"комп’ютерів, відмінних від тих, з якими пов’язано службу. Наприклад,\n" -"вони можуть надсилати запит щодо сертифіката SSL за допомогою\n" -"реєстраційних даних служби вузла. Для керування службою за допомогою\n" -"реєстраційних даних вузла слід віддати команду ініціалізації kinit\n" -"від імені вузла:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Додавання служби IPA надає доступ пов’язаній службі до надсилання\n" -"запитів щодо сертифікатів SSL та таблиці ключів, але створення самих\n" -"запитів є окремим кроком: відповідні дані не створюються у результаті\n" -"простого додавання служби.\n" -"\n" -"У записі служби зберігаються лише відкриті дані сертифіката; закритий\n" -"ключ не зберігається.\n" -"\n" -"ПРИКЛАДИ:\n" -"\n" -" Додати нову службу IPA:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Дозволити вузлу керувати сертифікатом служби IPA:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Перевизначити типовий список підтримуваних типів PAC для служби:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Типовим випадком, коли потрібне перевизначення типу PAC є NFS.\n" -" У поточній версії ядра Linux відповідний код може працювати лише з\n" -" квитками Kerberos, розмір яких не перевищує максимально заданого.\n" -" Оскільки дані PAC можуть бути доволі об’ємними, для служб NFS\n" -" рекомендуємо встановити --pac-type=NONE.\n" -"\n" -" Вилучити службу IPA:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Знайти усіх служби IPA, пов’язані із вузлом:\n" -" ipa service-find web.example.com\n" -"\n" -" Знайти усі служби HTTP:\n" -" ipa service-find HTTP\n" -"\n" -" Вимкнути службу ключів Kerberos і сертифіката SSL:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Надіслати запит щодо сертифіката для служби IPA:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" -"\n" -" Дозволити користувачеві створювати таблицю ключів:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" -"\n" -" Створити і отримати таблицю ключів служби IPA:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" - -msgid "Trusted to authenticate as user" -msgstr "Довіра до розпізнавання як користувача" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "Службі дозволено проходити розпізнавання від імені клієнта" - -#, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "індикатори розпізнавання у службі «%s» заборонено" - -msgid "Malformed principal" -msgstr "Помилкове форматування реєстраційного запису" - -msgid "{} is required by the IPA master" -msgstr "{} потрібен основному серверу IPA" - -msgid "service" -msgstr "служба" - -msgid "services" -msgstr "служби" - -msgid "Service principal alias" -msgstr "Альтернативна назва реєстраційного запису служби" - -msgid "Base-64 encoded service certificate" -msgstr "Сертифікат служби у кодуванні Base-64" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" -"Визначає список дозволених індикаторів розпізнавання. Скористайтеся " -"значенням «otp», щоб дозволити розпізнавання 2FA на основі OTP. " -"Скористайтеся значенням «radius», щоб дозволити розпізнавання 2FA на основі " -"RADIUS. Скористайтеся значенням «pkinit», щоб дозволити розпізнавання 2FA на " -"основі PKINIT. Скористайтеся значенням «hardened», щоб дозволити захищене " -"від простого перебирання розпізнавання за паролем на основі SPAKE або FAST. " -"Якщо індикатор не буде вказано, буде дозволено усі механізми." - -msgid "NONE value cannot be combined with other PAC types" -msgstr "Значення NONE не можна поєднувати з іншими типами PAC" - -msgid "Add a new IPA service." -msgstr "Додати нову службу IPA." - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "Додано службу «%(value)s»" - -msgid "force principal name even if host not in DNS" -msgstr "" -"примусове значення назви реєстраційного запису, навіть якщо вузла немає у DNS" - -msgid "Skip host check" -msgstr "Пропустити перевірку вузла" - -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "" -"примусове створення служби, навіть якщо об'єкта вузла для керування не існує" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "Не існує вузла «%s», до якого слід було додати службу." - -msgid "Add a new SMB service." -msgstr "Додати нову службу SMB." - -msgid "SMB service NetBIOS name" -msgstr "Назва NetBIOS служби SMB" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "Вилучено службу «%(value)s»" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "Змінено службу «%(value)s»" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "встановлено відповідність %(count)d служби" -msgstr[1] "встановлено відповідність %(count)d служб" -msgstr[2] "встановлено відповідність %(count)d служб" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "Вимкнено службу «%(value)s»" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "Додано сертифікати до реєстраційного запис служби «%(value)s»" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "Вилучено сертифікати із реєстраційного запису служби «%(value)s»" - -msgid "Add new principal alias to a service" -msgstr "Додати нову альтернативну назву реєстраційного запису до служби" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "Додано нові псевдоніми реєстраційного запису служби «%(value)s»" - -msgid "Remove principal alias from a service" -msgstr "Вилучити альтернативну назву реєстраційного запису зі служби" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "Вилучено псевдоніми реєстраційного запису служби «%(value)s»" +" Додати користувача етапу з контейнера Delete\n" +" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" msgid "" "\n" @@ -31197,318 +15634,17 @@ msgstr "" " ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" "\n" -msgid "Stage Users" -msgstr "Користувачі етапу" - -msgid "Stage User" -msgstr "Користувач етапу" - -msgid "stage user" -msgstr "користувач етапу" - -msgid "stage users" -msgstr "користувачі етапу" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "Додано користувача етапу «%(value)s»" - -msgid "givenname is required" -msgstr "слід вказати ім’я" - -msgid "sn is required" -msgstr "слід вказати sn" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "Вилучено запис користувача етапу «%(value)s»" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "Змінено запис користувача етапу «%(value)s»" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "встановлено відповідність %(count)d користувача" -msgstr[1] "встановлено відповідність %(count)d користувачів" -msgstr[2] "встановлено відповідність %(count)d користувачів" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "Активувати користувача етапу «%(value)s»" - -msgid "Entry RDN is not 'uid'" -msgstr "RDN запису не належить до «uid»" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "У запису немає атрибута «%(attribute)s»" - -#, python-format -msgid "active user with name \"%(user)s\" already exists" -msgstr "запис активного користувача із іменем «%(user)s» вже існує" - -#, python-format -msgid "Stage user %s activated" -msgstr "Активовано користувача етапу %s" - -msgid "Add one or more certificates to the stageuser entry" -msgstr "Додати один або декілька сертифікатів запису користувача етапу" - -#, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "Додано сертифікати до запису користувача етапу «%(value)s»" - -msgid "Remove one or more certificates to the stageuser entry" -msgstr "Вилучити один або декілька сертифікатів запису користувача етапу" - -#, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "Вилучено сертифікати із запису користувача етапу «%(value)s»" - -msgid "Add new principal alias to the stageuser entry" -msgstr "" -"Додати новий псевдонім реєстраційного запису до запису користувача етапу" - -#, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "Додано нові псевдоніми до запису користувача етапу «%(value)s»" - -msgid "Remove principal alias from the stageuser entry" -msgstr "Вилучити псевдонім реєстраційного запису із запису користувача етапу" - -#, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "Вилучено псевдоніми із запису користувача етапу «%(value)s»" - -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "" -"Додати одну або декілька прив’язок сертифікатів до запису користувача етапу." - -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "" -"Вилучити одну або декілька прив’язок сертифікатів із запису користувача " -"етапу." - -msgid "ID View" -msgstr "Перегляд ідентифікаторів" - -msgid "system ID View" -msgstr "системний перегляд ідентифікаторів" - -msgid "ID Views" -msgstr "Перегляди ідентифікаторів" - -msgid "User object overrides" -msgstr "Пріоритет об’єкта користувача" - -msgid "Group object overrides" -msgstr "Пріоритет об’єкта групи" - -msgid "Hosts the view applies to" -msgstr "Вузли, до яких застосовний перегляд" - -#, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "Додано перегляд ідентифікаторів «%(value)s»" - -#, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "Вилучено перегляд ідентифікаторів «%(value)s»" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "Змінено перегляд ідентифікаторів «%(value)s»" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "встановлено відповідність %(count)d перегляду ідентифікаторів" -msgstr[1] "встановлено відповідність %(count)d переглядів ідентифікаторів" -msgstr[2] "встановлено відповідність %(count)d переглядів ідентифікаторів" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "Типовий перегляд довіри не може бути застосовано до вузлів" - -msgid "not found" -msgstr "не знайдено" - -msgid "ID View cannot be applied to IPA master" -msgstr "" -"Перегляд ідентифікаторів не може бути застосовано до основного сервера IPA" - -msgid "ID View already applied" -msgstr "Перегляд ідентифікаторів уже застосовано" - -msgid "value" -msgstr "значення" - -#, python-format -msgid "ID View applied to %i host." -msgstr "Перегляд ідентифікаторів застосовано до %i вузла." - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "Перегляд ідентифікаторів застосовано до %i вузлів." - -#, python-format -msgid "ID View cleared from %i host." -msgstr "Перегляд ідентифікаторів знято з %i вузла." - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "Перегляд ідентифікаторів знято з %i вузлів." - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" -"Ви намагаєтеся послатися на магічну приватну групу, яку не можна " -"перевизначати Спробуйте краще перевизначити атрибут GID запису відповідного " -"користувача." - -msgid "IPA object" -msgstr "Об’єкт IPA" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" -"системні об’єкти IPA (наприклад системні групи, приватні групи користувачів) " -"не може бути перевизначено" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "Не вдалося визначити прив’язку «%(anchor)s»." - -msgid "Default Trust View cannot contain IPA users" -msgstr "Типовий перегляд довіри не може містити користувачів IPA" - -msgid "Add a new ID override." -msgstr "Додати нове перевизначення ідентифікаторів." - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "Додано перевизначення ідентифікаторів «%(value)s»" - -msgid "Delete an ID override." -msgstr "Вилучити перевизначення ідентифікаторів." - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "Вилучено перевизначення ідентифікатора «%(value)s»" - -msgid "Modify an ID override." -msgstr "Змінити перевизначення ідентифікатора." - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "Змінено перевизначення ідентифікатора «%(value)s»" - -msgid "ID override" -msgstr "Перевизначення ідентифікатора" - -msgid "ID overrides cannot be renamed" -msgstr "Перевизначення ідентифікаторів не можна перейменовувати" - -msgid "Search for an ID override." -msgstr "Шукати перевизначення ідентифікатора." - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "встановлено відповідність %(count)d перевизначення ідентифікатора" -msgstr[1] "встановлено відповідність %(count)d перевизначень ідентифікаторів" -msgstr[2] "встановлено відповідність %(count)d перевизначень ідентифікаторів" - -msgid "Display information about an ID override." -msgstr "Показати дані щодо перевизначення ідентифікатора." - -msgid "User ID override" -msgstr "Перевизначення ідентифікатора користувача" - -msgid "User ID overrides" -msgstr "Перевизначення ідентифікатора користувача" - -msgid "Group ID override" -msgstr "Перевизначення ідентифікатора групи" - -msgid "Group ID overrides" -msgstr "Перевизначення ідентифікатора групи" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "Додати один або декілька сертифікатів запису idoverrideuser" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "Додано сертифікати до запису idoverrideuser «%(value)s»" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "Вилучити один або декілька сертифікатів запису idoverrideuser" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "Вилучено сертифікати із запису idoverrideuser «%(value)s»" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "Додано перевизначення ідентифікатора користувача «%(value)s»" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "Вилучено перевизначення ідентифікатора користувача «%(value)s»" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "Змінено перевизначення ідентифікатора користувача «%(value)s»" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "" -"встановлено відповідність %(count)d перевизначення ідентифікатора користувача" -msgstr[1] "" -"встановлено відповідність %(count)d перевизначень ідентифікаторів " -"користувачів" -msgstr[2] "" -"встановлено відповідність %(count)d перевизначень ідентифікаторів " -"користувачів" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "Додано перевизначення ідентифікаторів групи «%(value)s»" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "Вилучено перевизначення ідентифікаторів групи «%(value)s»" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "Змінено перевизначення ідентифікаторів групи «%(value)s»" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "" -"встановлено відповідність %(count)d перевизначення ідентифікаторів групи" -msgstr[1] "" -"встановлено відповідність %(count)d перевизначень ідентифікаторів групи" -msgstr[2] "" -"встановлено відповідність %(count)d перевизначень ідентифікаторів групи" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "" -"Не вдалося прочитати фільтр походження (originfilter) UPG Definition. " -"Переконайтеся, що у вас є відповідні права доступу." - msgid "" "\n" -"Manage Certificate Authorities\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" msgstr "" "\n" -"Керування службами сертифікації\n" +"У стандартному сховищі для передавання і зберігання реєстраційних\n" +"даних використовуються безпечні механізми. Реєстраційні дані\n" +"може бути отримано лише користувачами, які мають доступ\n" +"до сховища.\n" msgid "" "\n" @@ -31523,240 +15659,335 @@ msgstr "" msgid "" "\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" +"Subordinate ids\n" +"\n" +"Manage subordinate user and group ids for users\n" +"\n" +"EXAMPLES:\n" +"\n" +" Auto-assign a subordinate id range to current user\n" +" ipa subid-generate\n" +"\n" +" Auto-assign a subordinate id range to user alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Find subordinate ids for user alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Match entry by any subordinate uid in range:\n" +" ipa subid-match --subuid=2147483649\n" msgstr "" "\n" -"Служби сертифікації увімкнено при створенні, але їхнє використання " -"регулюється ACL служб сертифікації,\n" -"якщо у оператора немає дозволу обходити ACL служб сертифікації (CA).\n" +"Підлеглі ідентифікатори\n" +"\n" +"Керування підлеглими ідентифікаторами користувача і групи для користувачів\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Автоматично призначати діапазон підлеглих ідентифікаторів для поточного " +"користувача\n" +" ipa subid-generate\n" +"\n" +" Автоматично призначити діапазон підлеглих ідентифікаторів для користувача " +"alice:\n" +" ipa subid-generate --owner=alice\n" +"\n" +" Знайти підлеглі ідентифікатори для користувача alice:\n" +" ipa subid-find --owner=alice\n" +"\n" +" Встановити відповідність запису за будь-яким підлеглим uid у діапазоні:\n" +" ipa subid-match --subuid=2147483649\n" msgid "" "\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" msgstr "" "\n" -"Усі слжуби сертифікації, окрім служби сертифікації «IPA», можна вимикати і " -"повторно вмикати. Вимикання\n" -"служби сертифікації призводить до заборони для неї видавати сертифікати, але " -"не впливає на\n" -"чинність її сертифіката.\n" +"Sudo (su \"do\") надає системному адміністратору змогу делегувати\n" +"повноваження певним користувачам (або групам користувачів) на виконання\n" +"деяких (або усіх) команд від імені адміністратора (root) або іншого\n" +"користувача, зберігаючи водночас журнал виконання команд та\n" +"аргументів.\n" msgid "" "\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" msgstr "" "\n" -"Усі записи служб сертифікації (окрім служби «IPA») можна вилучати. Вилучення " -"запису служби сертифікації\n" -"призводить до відкликання її підписувального сертифіката і вилучення " -"закритого ключа.\n" +"Команди sudo\n" +"\n" +"Команди, використані як будівельні блоки для sudo\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Створення запису команди\n" +" ipa sudocmd-add --desc='Читання файлів журналу' /usr/bin/less\n" +"\n" +" Вилучення команди\n" +" ipa sudocmd-del /usr/bin/less\n" msgid "" "\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" +"Sudo Commands\n" +"\n" +"Commands used as building blocks for sudo\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new command\n" +" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" +"\n" +" Remove a command\n" +" ipa sudocmd-del /usr/bin/less\n" "\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" msgstr "" "\n" -" Створити новий запис служби сертифікації, підлеглий щодо служби " -"сертифікації IPA (потребує прав доступу\n" -" «Система: Додати CA»):\n" +"Команди sudo\n" +"\n" +"Команди, використані як будівельні блоки для sudo\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Створення запису команди\n" +" ipa sudocmd-add --desc='Читання файлів журналу' /usr/bin/less\n" +"\n" +" Вилучення команди\n" +" ipa sudocmd-del /usr/bin/less\n" "\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" msgid "" "\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" +"Sudo Rules\n" msgstr "" "\n" -" Вимкнути службу сертифікації (потребує прав доступу «Система: Змінити " -"CA»):.\n" -"\n" -" ipa ca-disable puppet\n" +"Правила sudo\n" msgid "" "\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" +"Sudo Rules\n" "\n" -" ipa ca-enable puppet\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" +" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" +" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"EXAMPLES:\n" +"\n" +" Create a new rule:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Add sudo command object and add it as allowed command in the rule:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Add a host to the rule:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Add a user to the rule:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Add a special Sudo rule for default Sudo server configuration:\n" +" ipa sudorule-add defaults\n" +"\n" +" Set a default Sudo option:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" msgstr "" "\n" -" Повторно увімкнути службу сертифікації (потребує прав доступу «Система: " -"Змінити CA»):\n" +"Правила sudo\n" "\n" -" ipa ca-enable puppet\n" +"Sudo (su \"do\") надає системному адміністратору змогу делегувати\n" +"повноваження певним користувачам (або групам користувачів) на виконання\n" +"деяких (або усіх) команд від імені адміністратора (root) або іншого\n" +"користувача, зберігаючи водночас журнал виконання команд та\n" +"аргументів.\n" +"\n" +"У IPA передбачено декілька параметрів налаштовування роботи sudo:\n" +" Users: користувачі або групи, які можуть викликати sudo.\n" +" Hosts: вузли або групи вузлів, користувачі якого можуть викликати sudo.\n" +" Allow Command: специфічні команди, які можна виконувати за допомогою " +"sudo.\n" +" Deny Command: специфічні команди, які не можна виконувати за допомогою " +"sudo.\n" +" RunAsUser: користувачі або групи, від імені яких sudo виконуватиме " +"команди.\n" +" RunAsGroup: групи, ідентифікатори яких буде використано sudo для " +"виконання команд.\n" +" Options: різноманітні параметри sudoers, які можуть змінити поведінку " +"sudo.\n" +"\n" +"До правила sudo можна додати порядок, який керуватиме порядком\n" +"обробки записів (якщо такий порядок передбачено на клієнтському боці).\n" +"Порядок визначається числовим індексом, який не повинен повторюватися.\n" +"\n" +"У IPA передбачено визначений binddn для використання з sudo, який " +"розташовано у\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"Щоб увімкнути binddn, віддайте таку команду для встановлення пароля:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" +" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" +" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Створити правило:\n" +" ipa sudorule-add readfiles\n" +"\n" +" Додати об’єкт команди sudo і записати його як дозволену команду до " +"правила:\n" +" ipa sudocmd-add /usr/bin/less\n" +" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +"\n" +" Додати запис вузла до правила:\n" +" ipa sudorule-add-host readfiles --hosts server.example.com\n" +"\n" +" Додати запис користувача до правила:\n" +" ipa sudorule-add-user readfiles --users jsmith\n" +"\n" +" Додати особливе правило sudo для типового налаштовування сервера sudo:\n" +" ipa sudorule-add defaults\n" +"\n" +" Встановити типовий варіант дій для sudo:\n" +" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" msgid "" "\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" +"Sudo Rules\n" "\n" -" ipa ca-del puppet\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" +"\n" +"IPA provides a means to configure the various aspects of Sudo:\n" +" Users: The user(s)/group(s) allowed to invoke Sudo.\n" +" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +"Sudo.\n" +" Allow Command: The specific command(s) permitted to be run via Sudo.\n" +" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +"invoked with.\n" +" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +" Options: The various Sudoers Options that can modify Sudo's behavior.\n" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +"\n" +"IPA provides a designated binddn to use with Sudo located at:\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" +" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" +" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"For more information, see the IPA Documentation to Sudo.\n" msgstr "" "\n" -" Вилучити запис служби сертифікації (потребує прав доступу «Система: " -"Вилучити CA»; також потребує попереднього вимикання\n" -" CA):\n" +"Правила sudo\n" "\n" -" ipa ca-del puppet\n" - -msgid "Certificate Authority" -msgstr "Центр сертифікації" - -msgid "Certificate Authorities" -msgstr "Центри сертифікації" - -msgid "Name for referencing the CA" -msgstr "Назва до посилання на CA" - -msgid "Description of the purpose of the CA" -msgstr "Опис призначення CA" - -msgid "Authority ID" -msgstr "Ід. центру" - -msgid "Dogtag Authority ID" -msgstr "Ід. Dogtag центру" - -msgid "Subject DN" -msgstr "DN призначення" - -msgid "Subject Distinguished Name" -msgstr "Унікальна назва призначення" - -msgid "Issuer DN" -msgstr "DN видавця" - -msgid "Issuer Distinguished Name" -msgstr "Унікальна назва видавця" - -msgid "Base-64 encoded certificate." -msgstr "Сертифікат у кодуванні Base-64." - -msgid "Certificate chain" -msgstr "Ланцюжок сертифікації" - -msgid "X.509 certificate chain" -msgstr "Ланцюжок сертифікації X.509" - -msgid "RSN Version" -msgstr "Версія RSN" - -msgid "Random Serial Number Version" -msgstr "Версія із випадковим серійним номером" - -msgid "Search for CAs." -msgstr "Шукати CA." - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "встановлено відповідність %(count)d CA" -msgstr[1] "встановлено відповідність %(count)d CA" -msgstr[2] "встановлено відповідність %(count)d CA" - -msgid "Include certificate chain in output" -msgstr "Включити ланцюжок сертифікації до виведення" - -msgid "Display the properties of a CA." -msgstr "Показати властивості CA." - -msgid "Create a CA." -msgstr "Створити запис CA." - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "Створено запис CA «%(value)s»" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "Недостатні привілеї «add» для запису «%s»." - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "Нерозпізнані атрибути: %(attrs)s" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "DN призначення вже використано CA «%s»" - -msgid "Delete a CA (must be disabled first)." -msgstr "Вилучити службу сертифікації (її спочатку має бути вимкнено)." - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "Вилучено запис CA «%(value)s»" - -msgid "Insufficient privilege to delete a CA." -msgstr "Недостатні права доступу для вилучення запису CA." - -msgid "IPA CA cannot be deleted" -msgstr "CA IPA не може бути вилучено" - -msgid "Must be disabled first" -msgstr "Слід спочатку вимкнути" - -msgid "Modify CA configuration." -msgstr "Змінити налаштування CA." - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "Змінено CA «%(value)s»" - -msgid "Insufficient privilege to modify a CA." -msgstr "Недостатні права доступу для внесення змін до запису CA." - -msgid "Disable a CA." -msgstr "Вимкнути службу сертифікації." - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "Вимкнено службу сертифікації «%(value)s»" - -msgid "IPA CA cannot be disabled" -msgstr "Службу сертифікації IPA не можна вимикати" - -msgid "Enable a CA." -msgstr "Увімкнути службу сертифікації." - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "Увімкнено службу сертифікації «%(value)s»" +"Sudo (su \"do\") надає системному адміністратору змогу делегувати\n" +"повноваження певним користувачам (або групам користувачів) на виконання\n" +"деяких (або усіх) команд від імені адміністратора (root) або іншого\n" +"користувача, зберігаючи водночас журнал виконання команд та\n" +"аргументів.\n" +"\n" +"У IPA передбачено декілька параметрів налаштовування роботи sudo:\n" +" Users: користувачі або групи, які можуть викликати sudo.\n" +" Hosts: вузли або групи вузлів, користувачі якого можуть викликати sudo.\n" +" Allow Command: специфічні команди, які можна виконувати за допомогою " +"sudo.\n" +" Deny Command: специфічні команди, які не можна виконувати за допомогою " +"sudo.\n" +" RunAsUser: користувачі або групи, від імені яких sudo виконуватиме " +"команди.\n" +" RunAsGroup: групи, ідентифікатори яких буде використано sudo для " +"виконання команд.\n" +" Options: різноманітні параметри sudoers, які можуть змінити поведінку " +"sudo.\n" +"\n" +"До правила sudo можна додати порядок, який керуватиме порядком\n" +"обробки записів (якщо такий порядок передбачено на клієнтському боці).\n" +"Порядок визначається числовим індексом, який не повинен повторюватися.\n" +"\n" +"У IPA передбачено визначений binddn для використання з sudo, який " +"розташовано у\n" +"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"Щоб увімкнути binddn, віддайте таку команду для встановлення пароля:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" +" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" +" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +"\n" +"Докладніші відомості наведено у документації з IPA щодо sudo.\n" msgid "" "\n" -"IPA certificate operations\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" msgstr "" "\n" -"Дії з сертифікатами IPA\n" +"Симетричне сховище є подібним до стандартного сховища, але\n" +"у ньому реєстраційні дані попередньо шифруються до\n" +"передавання за допомогою пароля.\n" +"Реєстраційні дані можна отримати лише за допомогою цього пароля.\n" msgid "" "\n" -"Implements a set of commands for managing server SSL certificates.\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" msgstr "" "\n" -"Реалізує набір команд для керування сертифікатами серверів SSL.\n" +"За допомогою програми automember-rebuild ви можете повторно застосувати " +"правила\n" +"автоматичної участі до вже створених записів, тобто перебудувати схему " +"участі.\n" msgid "" "\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" +"The date format is YYYY-mm-dd.\n" msgstr "" "\n" -"Запити щодо сертифікатів існують у формі Certificate Signing Request (CSR)\n" -"і форматі PEM.\n" +"Формат дати є таким: РРРР-мм-дд.\n" msgid "" "\n" @@ -31770,46 +16001,754 @@ msgstr "" msgid "" "\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" +"The following revocation reasons are supported:\n" +"\n" msgstr "" "\n" -"Сертифікат зберігається з реєстраційним записом, а реєстраційний запис\n" -"потребує вузла.\n" +"Передбачено підтримку таких причин відкликання:\n" +"\n" msgid "" "\n" -"In order to request a certificate:\n" +"The status of a role is either enabled, configured, or absent.\n" msgstr "" "\n" -"Для того, щоб створити запит щодо сертифіката:\n" +"Стан ролі може бути одним зі значень: enabled, configured або absent.\n" msgid "" "\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" msgstr "" "\n" -"* Вузол має існувати\n" -"* Служба має існувати (або слід скористатися параметром --add " -"дляавтоматичного додавання)\n" +"Передбачено декілька можливих призначень:\n" +"1. subtree: DN; право доступу застосовується до піддерева DN\n" +"2. target filter: фільтр LDAP\n" +"3. target: DN з можливими символами-замінниками, що визначає записи, яких " +"стосуються права доступу\n" msgid "" "\n" -"SEARCHING:\n" +"There are many structured DNS RR types where DNS data stored in LDAP server\n" +"is not just a scalar value, for example an IP address or a domain name, but\n" +"a data structure which may be often complex. A good example is a LOC record\n" +"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" +"minutes, seconds of latitude and longitude, altitude or precision).\n" msgstr "" "\n" -"ПОШУК:\n" +"Існує багато структурованих типів RR DNS, для яких дані DNS, що " +"зберігаються\n" +"на сервері LDAP, не є скалярним значенням, наприклад дані щодо IP-адресу " +"або\n" +"назву домену, а структурою даних, яка часто може бути складною. Прикладом\n" +"може бути запис LOC [RFC1876], який складається з багатьох обов’язкових і\n" +"необов’язкових частин (градусів, мінут, секунд широти і довготи, висоти\n" +"та похибки).\n" msgid "" "\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" msgstr "" "\n" -"Шукати сертифікати можна за призначенням сертифіката, серійним номером,\n" -"причиною відкликання, датами чинності та датою видання.\n" +"Цей код є розширенням до додатка otptoken, він надає підтримку " +"безпосереднього\n" +"читання та запису жетонів YubiKey.\n" + +msgid "" +"\n" +"To enable the binddn run the following command to set the password:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." +"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +"dc=example,dc=com\n" +msgstr "" +"\n" +"Щоб увімкнути binddn, віддайте таку команду для встановлення пароля:\n" +"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." +"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +"dc=example,dc=com\n" + +msgid "" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +msgstr "" +"\n" +"Щоб перевірити, що жоден сервер не від’єднано у топології вказаного " +"суфікса,\n" +"скористайтеся такою командою:\n" +" ipa topologysuffix-verify $suffix\n" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +msgstr "" +"\n" +"Топологія\n" +"\n" +"Керування топологією реплікації на домені рівня 1.\n" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology at domain level 1.\n" +"\n" +"IPA server's data is stored in LDAP server in two suffixes:\n" +"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " +"data\n" +"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" +" contains data for Certificate Server component\n" +"\n" +"Data stored on IPA servers is replicated to other IPA servers. The way it " +"is\n" +"replicated is defined by replication agreements. Replication agreements " +"needs\n" +"to be set for both suffixes separately. On domain level 0 they are managed\n" +"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " +"1\n" +"they are managed centrally using `ipa topology*` commands.\n" +"\n" +"Agreements are represented by topology segments. By default topology " +"segment\n" +"represents 2 replication agreements - one for each direction, e.g., A to B " +"and\n" +"B to A. Creation of unidirectional segments is not allowed.\n" +"\n" +"To verify that no server is disconnected in the topology of the given " +"suffix,\n" +"use:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Examples:\n" +" Find all IPA servers:\n" +" ipa server-find\n" +"\n" +" Find all suffixes:\n" +" ipa topologysuffix-find\n" +"\n" +" Add topology segment to 'domain' suffix:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Add topology segment to 'ca' suffix:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" List all topology segments in 'domain' suffix:\n" +" ipa topologysegment-find domain\n" +"\n" +" List all topology segments in 'ca' suffix:\n" +" ipa topologysegment-find ca\n" +"\n" +" Delete topology segment in 'domain' suffix:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Delete topology segment in 'ca' suffix:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Verify topology of 'domain' suffix:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Verify topology of 'ca' suffix:\n" +" ipa topologysuffix-verify ca\n" +msgstr "" +"\n" +"Топологія\n" +"\n" +"Керування топологією реплікації на домені рівня 1.\n" +"\n" +"Дані сервера IPA зберігаються на сервері LDAP у двох суфіксах:\n" +"* суфіксі домену, наприклад «dc=example,dc=com», тут містяться усі пов’язані " +"із доменом дані\n" +"* суфіксі ca, «o=ipaca», наявні лише на серверах із встановленим CA. Тут\n" +" містяться дані для компонента сервера сертифікатів.\n" +"\n" +"Дані, що зберігаються на серверах IPA, відтворюються на інших серверах IPA. " +"Спосіб\n" +"відтворення (реплікації) визначається угодами. Угоди реплікації потрібно\n" +"встановлювати для обох суфіксів окремо. На рівні домену 0 угодами керують\n" +"програми ipa-replica-manage та ipa-csreplica-manage. На рівні доменів 1\n" +"керування виконується централізовано за допомогою команд «ipa topology*».\n" +"\n" +"Угоди представляються сегментами топології. Типово, сегмент топології\n" +"представляється 2 угодами реплікації — по одній для кожного напрямку, " +"наприклад\n" +"від A до B і від B до A. Створення односпрямованих сегментів заборонене.\n" +"\n" +"Щоб перевірити, що жоден сервер не від’єднано у топології вказаного " +"суфікса,\n" +"скористайтеся такою командою:\n" +" ipa topologysuffix-verify $suffix\n" +"\n" +"\n" +"Приклади:\n" +" Знайти усі сервери IPA:\n" +" ipa server-find\n" +"\n" +" Знайти усі суфікси:\n" +" ipa topologysuffix-find\n" +"\n" +" Додати сегмент топології до суфікса «domain»:\n" +" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Додати сегмент топології до суфікса «ca»:\n" +" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" +"\n" +" Вивести список усіх сегментів топології у суфіксі «domain»:\n" +" ipa topologysegment-find domain\n" +"\n" +" Вивести список усіх сегментів топології у суфіксі «ca»:\n" +" ipa topologysegment-find ca\n" +"\n" +" Вилучити сегмент топології у суфіксі «domain»:\n" +" ipa topologysegment-del domain segment_name\n" +"\n" +" Вилучити сегмент топології у суфіксі «ca»:\n" +" ipa topologysegment-del ca segment_name\n" +"\n" +" Перевірити топологію суфікса «domain»:\n" +" ipa topologysuffix-verify domain\n" +"\n" +" Перевірити топологію суфікса «ca»:\n" +" ipa topologysuffix-verify ca\n" + +msgid "" +"\n" +"Topology\n" +"\n" +"Management of a replication topology.\n" +"\n" +"Requires minimum domain level 1.\n" +msgstr "" +"\n" +"Топологія\n" +"\n" +"Керування топологією реплікації.\n" +"\n" +"Потребує мінімального рівня домену 1.\n" + +msgid "" +"\n" +"USING STRUCTURED PER-TYPE OPTIONS\n" +msgstr "" +"\n" +"ВИКОРИСТАННЯ СТРУКТУРОВАНИХ ПАРАМЕТРІВ ДЛЯ ОКРЕМИХ ТИПІВ\n" + +msgid "" +"\n" +"Unlock a user account\n" +"\n" +" An account may become locked if the password is entered incorrectly too\n" +" many times within a specific time period as controlled by password\n" +" policy. A locked account is a temporary condition and may be unlocked " +"by\n" +" an administrator.\n" +" " +msgstr "" +"\n" +" Розблокувати обліковий запис користувача\n" +"\n" +" Обліковий запис може бути заблоковано, якщо відповідно до правил " +"безпеки\n" +" користувач перевищить обмеження на кількість введення помилкових " +"паролів\n" +" протягом певного часу. Запис блокується тимчасово, його може бути\n" +" розблоковано адміністратором.\n" +" " + +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +msgstr "" +"\n" +"Сховища користувачів — це сховища, власником яких є конкретний\n" +"користувач. Приватними є сховища, власником яких є поточний\n" +"користувач. Власником сховища служби є певна служба. Сховища\n" +"спільного використання належать адміністратору, але можуть\n" +"використовуватися іншими користувачами або службами.\n" + +msgid "" +"\n" +"Users\n" +"\n" +"Manage user entries. All users are POSIX users.\n" +"\n" +"IPA supports a wide range of username formats, but you need to be aware of " +"any\n" +"restrictions that may apply to your particular environment. For example,\n" +"usernames that start with a digit or usernames that exceed a certain length\n" +"may cause problems for some UNIX systems.\n" +"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" +"\n" +"Disabling a user account prevents that user from obtaining new Kerberos\n" +"credentials. It does not invalidate any credentials that have already\n" +"been issued.\n" +"\n" +"Password management is not a part of this module. For more information\n" +"about this topic please see: ipa help passwd\n" +"\n" +"Account lockout on password failure happens per IPA master. The user-status\n" +"command can be used to identify which master the user is locked out on.\n" +"It is on that master the administrator must unlock the user.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new user:\n" +" ipa user-add --first=Tim --last=User --password tuser1\n" +"\n" +" Find all users whose entries include the string \"Tim\":\n" +" ipa user-find Tim\n" +"\n" +" Find all users with \"Tim\" as the first name:\n" +" ipa user-find --first=Tim\n" +"\n" +" Disable a user account:\n" +" ipa user-disable tuser1\n" +"\n" +" Enable a user account:\n" +" ipa user-enable tuser1\n" +"\n" +" Delete a user:\n" +" ipa user-del tuser1\n" +msgstr "" +"\n" +"Користувачі\n" +"\n" +"Керування записами користувачів. Всі користувачі є користувачами POSIX.\n" +"\n" +"У IPA передбачено підтримку широкого діапазону форматів імен\n" +"користувачів, але вам слід враховувати всі обмеження, які накладаються\n" +"вашим робочим середовищем. Наприклад, імена, що починаються з цифри, або\n" +"занадто довгі імена можуть спричинити проблеми у деяких системах UNIX.\n" +"Скористайтеся командою «ipa config-mod» для зміни формату імені\n" +"користувача, яке дозволятиметься інструментами IPA.\n" +"\n" +"Вимикання облікового запису користувача лише заборонить отримання\n" +"користувачами нових реєстраційних даних Kerberos. Всі вже отримані\n" +"реєстраційні дані не втратять своєї чинності.\n" +"\n" +"Керування паролями не є завданням цього модуля. Докладніші дані щодо\n" +"керування паролями можна отримати у відповідь на команду ipa help passwd\n" +"\n" +"Блокування облікового запису виконується окремим основним вузлом IPA.\n" +"Для визначення основного вузла, на якому було заблоковано запис, можна\n" +"скористатися командою user-status. Адміністратор має розблоковувати\n" +"користувача саме на цьому основному вузлі.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додавання нового користувача:\n" +" ipa user-add --first=Ivan --last=Ivanenko --password tuser1\n" +"\n" +" Пошук всіх користувачів, чиї записи містять рядок «Ivan»:\n" +" ipa user-find Ivan\n" +"\n" +" Пошук всіх користувачів з іменем (не прізвищем) «Ivan»:\n" +" ipa user-find --first=Ivan\n" +"\n" +" Вимикання запису користувача:\n" +" ipa user-disable tuser1\n" +"\n" +" Вмикання запису користувача:\n" +" ipa user-enable tuser1\n" +"\n" +" Вилучення запису користувача:\n" +" ipa user-del tuser1\n" + +msgid "" +"\n" +"Vault is a secure place to store a secret. One vault can only\n" +"store one secret. When archiving a secret in a vault, the\n" +"existing secret (if any) is overwritten.\n" +msgstr "" +"\n" +"Сховище — безпечне місце для зберігання ключа. Одне сховище\n" +"може містити лише один ключ. При архівуванні ключа до сховища,\n" +"наявний ключ (якщо такий існує) буде перезаписано.\n" + +msgid "" +"\n" +"Vaults\n" +msgstr "" +"\n" +"Сховища\n" + +msgid "" +"\n" +"Vaults\n" +"\n" +"Manage vaults.\n" +"\n" +"Vault is a secure place to store a secret.\n" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +"\n" +"EXAMPLES:\n" +"\n" +" List vaults:\n" +" ipa vault-find\n" +" [--user |--service |--shared]\n" +"\n" +" Add a standard vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type standard\n" +"\n" +" Add a symmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type symmetric --password-file password.txt\n" +"\n" +" Add an asymmetric vault:\n" +" ipa vault-add \n" +" [--user |--service |--shared]\n" +" --type asymmetric --public-key-file public.pem\n" +"\n" +" Show a vault:\n" +" ipa vault-show \n" +" [--user |--service |--shared]\n" +"\n" +" Modify vault description:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --desc \n" +"\n" +" Modify vault type:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --type \n" +" [old password/private key]\n" +" [new password/public key]\n" +"\n" +" Modify symmetric vault password:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --change-password\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password \n" +" --new-password \n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --old-password-file \n" +" --new-password-file \n" +"\n" +" Modify asymmetric vault keys:\n" +" ipa vault-mod \n" +" [--user |--service |--shared]\n" +" --private-key-file \n" +" --public-key-file \n" +"\n" +" Delete a vault:\n" +" ipa vault-del \n" +" [--user |--service |--shared]\n" +"\n" +" Display vault configuration:\n" +" ipa vaultconfig-show\n" +"\n" +" Archive data into standard vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Archive data into symmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +" --password-file password.txt\n" +"\n" +" Archive data into asymmetric vault:\n" +" ipa vault-archive \n" +" [--user |--service |--shared]\n" +" --in \n" +"\n" +" Retrieve data from standard vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +"\n" +" Retrieve data from symmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out \n" +" --password-file password.txt\n" +"\n" +" Retrieve data from asymmetric vault:\n" +" ipa vault-retrieve \n" +" [--user |--service |--shared]\n" +" --out --private-key-file private.pem\n" +"\n" +" Add vault owners:\n" +" ipa vault-add-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault owners:\n" +" ipa vault-remove-owner \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Add vault members:\n" +" ipa vault-add-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +"\n" +" Delete vault members:\n" +" ipa vault-remove-member \n" +" [--user |--service |--shared]\n" +" [--users ] [--groups ] [--services ]\n" +msgstr "" +"\n" +"Сховища\n" +"\n" +"Керування сховищами.\n" +"\n" +"Сховище — безпечне місце для зберігання ключів і паролів.\n" +"\n" +"За правами власності сховища поділяються на три категорії:\n" +"* приватні сховища користувачів\n" +"* сховища служб\n" +"* сховища спільного використання\n" +"\n" +"Сховища користувачів — це сховища, власником яких є конкретний\n" +"користувач. Приватними є сховища, власником яких є поточний\n" +"користувач. Власником сховища служби є певна служба. Сховища\n" +"спільного використання належать адміністратору, але можуть\n" +"використовуватися іншими користувачами або службами.\n" +"\n" +"За механізмами захисту сховища поділяються на три\n" +"типи:\n" +"* стандартні сховища\n" +"* симетричні сховища\n" +"* асиметричні сховища\n" +"\n" +"У стандартному сховищі для передавання і зберігання реєстраційних\n" +"даних використовуються безпечні механізми. Реєстраційні дані\n" +"може бути отримано лише користувачами, які мають доступ\n" +"до сховища.\n" +"\n" +"Симетричне сховище є подібним до стандартного сховища, але\n" +"у ньому реєстраційні дані попередньо шифруються до\n" +"передавання за допомогою пароля.\n" +"Реєстраційні дані можна отримати лише за допомогою цього пароля.\n" +"\n" +"Асиметричне сховище є подібним до стандартного сховища, але\n" +"у ньому реєстраційні дані попередньо шифруються до\n" +"передавання за допомогою відкритого ключа.\n" +"Реєстраційні дані можна отримати лише за допомогою закритого ключа.\n" +"\n" +" Вивести список сховищ:\n" +" ipa vault-find\n" +" [--user <користувач>|--service <служба>|--shared]\n" +"\n" +" Додати стандартне сховище:\n" +" ipa vault-add <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --type standard\n" +"\n" +" Додати симетричне сховище:\n" +" ipa vault-add <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --type symmetric --password-file пароль.txt\n" +"\n" +" Додати асиметричне сховище:\n" +" ipa vault-add <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --type asymmetric --public-key-file відкритий_ключ.pem\n" +"\n" +" Показати сховище:\n" +" ipa vault-show <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +"\n" +" Змінити опис сховища:\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --desc <опис>\n" +"\n" +" Змінити тип сховища:\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --type <тип>\n" +" [старий пароль/закритий ключ]\n" +" [новий пароль/відкритий ключ]\n" +"\n" +" Змінити пароль до симетричного сховища:\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --change-password\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --old-password <старий пароль>\n" +" --new-password <новий пароль>\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --old-password-file <файл старого пароля>\n" +" --new-password-file <файл нового пароля>\n" +"\n" +" Змінити ключ асиметричного сховища:\n" +" ipa vault-mod <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --private-key-file <файл старого закритого ключа>\n" +" --public-key-file <файл нового відкритого ключа>\n" +"\n" +" Вилучити сховище:\n" +" ipa vault-del <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +"\n" +" Вивести налаштування сховищ:\n" +" ipa vaultconfig-show\n" +"\n" +" Архівувати дані до стандартного сховища:\n" +" ipa vault-archive \n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --in <файл вхідних даних>\n" +"\n" +" Архівувати дані до симетричного сховища:\n" +" ipa vault-archive \n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --in <файл вхідних даних>\n" +" --password-file пароль.txt\n" +"\n" +" Архівувати дані до асиметричного сховища:\n" +" ipa vault-archive \n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --in <файл вхідних даних>\n" +"\n" +" Отримати дані зі стандартного сховища:\n" +" ipa vault-retrieve <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --out <файл результатів>\n" +"\n" +" Отримати дані з симетричного сховища:\n" +" ipa vault-retrieve <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --out <файл результатів>\n" +" --password-file password.txt\n" +"\n" +" Отримати дані з асиметричного сховища:\n" +" ipa vault-retrieve <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" --out <файл результатів> --private-key-file private.pem\n" +"\n" +" Додати записи власників сховища:\n" +" ipa vault-add-owner <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" +"\n" +" Вилучити записи учасників сховища:\n" +" ipa vault-remove-owner <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" +"\n" +" Додати записи учасників сховища:\n" +" ipa vault-add-member <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" +"\n" +" Вилучити записи учасників сховища:\n" +" ipa vault-remove-member <назва>\n" +" [--user <користувач>|--service <служба>|--shared]\n" +" [--users <користувачі>] [--groups <групи>] [--services <служби>]\n" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +msgstr "" +"\n" +"Перевірити топологію реплікації для вказаного суфікса.\n" +"\n" +"Перевірки, які виконуються:\n" +" 1. перевірка того, чи не є топологія від’єднаною. Іншими словами, чи є\n" +" шляхи реплікації між усіма серверами.\n" +" 2. перевірка того, чи немає у сервера перевищення рекомендованої\n" +" кількості узгоджень реплікації.\n" + +msgid "" +"\n" +"Verify replication topology for suffix.\n" +"\n" +"Checks done:\n" +" 1. check if a topology is not disconnected. In other words if there are\n" +" replication paths between all servers.\n" +" 2. check if servers don't have more than the recommended number of\n" +" replication agreements\n" +" " +msgstr "" +"\n" +"Перевірити топологію реплікації для суфікса.\n" +"\n" +"Перевірки, які виконуються:\n" +" 1. перевірка того, чи є топологія роз’єднаною. Іншими словами, того, чи\n" +" пов’язано усі сервери шляхами реплікації.\n" +" 2. перевірка того, чи не перевищено кількість рекомендованих угод з\n" +" реплікації між серверами.\n" +" " + +msgid "" +"\n" +"When adding a record, either RR specific options or standard option for a " +"raw\n" +"value can be used, they just should not be combined in one add operation. " +"When\n" +"modifying an existing entry, new RR specific options can be used to change\n" +"one part of a DNS record, where the standard option for raw value is used\n" +"to specify the modified value. The following example demonstrates\n" +"a modification of MX record preference from 0 to 1 in a record without\n" +"modifying the exchanger:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" +msgstr "" +"\n" +"Під час додавання запису можна скористатися специфічними для RR параметрами\n" +"або стандартним параметром для необробленого значення. Втім, поєднувати\n" +"ці варіанти у одній дії із додавання не можна. Під час внесення змін до\n" +"наявного запису можна скористатися для зміни однієї частини запису DNS\n" +"новими специфічними параметрами RR, причому для визначення зміненого\n" +"значення буде використано стандартний варіант необробленого значення.\n" +"У наведеному нижче прикладі продемонстровано зміну пріоритетності запису\n" +"MX з 0 на 1 у записі без внесення змін до обмінника:\n" +"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" msgid "" "\n" @@ -31825,137 +16764,46 @@ msgstr "" msgid "" "\n" -"Dates are treated as GMT to match the dates in the certificates.\n" +"YubiKey Tokens\n" msgstr "" "\n" -"Дати обробляються як дати за Гринвічем, відповідно до дат визначених " -"усертифікатах.\n" +"Жетони YubiKey\n" msgid "" "\n" -"The date format is YYYY-mm-dd.\n" +"YubiKey Tokens\n" +"\n" +"Manage YubiKey tokens.\n" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +"\n" +"EXAMPLES:\n" +"\n" +" Add a new token:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" msgstr "" "\n" -"Формат дати є таким: РРРР-мм-дд.\n" +"Жетони YubiKey\n" +"\n" +"Керування жетонами YubiKey.\n" +"\n" +"Цей код є розширенням до додатка otptoken, він надає підтримку " +"безпосереднього\n" +"читання та запису жетонів YubiKey.\n" +"\n" +"ПРИКЛАДИ:\n" +"\n" +" Додати новий жетон:\n" +" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" msgid "" "\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" -"\n" -" Створити запит щодо нового сертифіката і додати реєстраційний запис: ipa " -"cert-request --add --principal=HTTP/lion.example.com example.csr\n" - -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "" -"\n" -" Отримати вже створений сертифікат:\n" -" ipa cert-show 1032\n" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" -"\n" -" Відкликати сертифікат (причини визначено у RFC 5280):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" -"\n" -" Вилучити сертифікат зі списку відкликання:\n" -" ipa cert-remove-hold 1032\n" - -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "" -"\n" -" Перевірити стан запиту щодо підписування:\n" -" ipa cert-status 10\n" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" -"\n" -" Пошук сертифікатів за назвою вузла:\n" -" ipa cert-find --subject=ipaserver.example.com\n" - -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "" -"\n" -" Пошук відкликаних сертифікатів за причиною:\n" -" ipa cert-find --revocation-reason=5\n" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" -"\n" -" Пошук сертифікатів за датою видання\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" -"\n" -" Пошук сертифікатів, власником яких є вказаний користувач:\n" -" ipa cert-find --user=user\n" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" -"\n" -" Перевірити сертифікат:\n" -" ipa cert-find --file=cert.pem --all\n" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" -"\n" -" Перевірити, чи є власником сертифіката вказаний користувач:\n" -" ipa cert-find --file=cert.pem --user=user\n" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" -"\n" -"У поточній версії IPA негайно виконує (або відхиляє) всі запити щодо\n" -"сертифікатів, отже дані щодо стану запиту не мають сенсу. Ці дані\n" -"можуть знадобитися у наступних версіях або у разі, якщо CA видає\n" -"сертифікат не одразу.\n" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" "\n" msgstr "" "\n" -"Передбачено підтримку таких причин відкликання:\n" +"http://www.ietf.org/rfc/rfc5280.txt\n" "\n" msgid " * 0 - unspecified\n" @@ -31964,6 +16812,9 @@ msgstr " * 0 - не визначено\n" msgid " * 1 - keyCompromise\n" msgstr " * 1 - keyCompromise\n" +msgid " * 10 - aACompromise\n" +msgstr " * 10 - aACompromise\n" + msgid " * 2 - cACompromise\n" msgstr " * 2 - cACompromise\n" @@ -31985,25 +16836,9781 @@ msgstr " * 8 - removeFromCRL\n" msgid " * 9 - privilegeWithdrawn\n" msgstr " * 9 - privilegeWithdrawn\n" -msgid " * 10 - aACompromise\n" -msgstr " * 10 - aACompromise\n" +msgid " ipa --help" +msgstr " ipa <команда> --help" + +#, python-brace-format +msgid " -8 '${cn}'" +msgstr " -8 '${cn}'" + +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr " Крім того, цю команду можуть виконати такі сервери: %(masters)s" + +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "«%s» не є коректним типом прав доступу" + +#, python-format +msgid "\"%s\" is not an object type" +msgstr "«%s» не є об’єктним типом" + +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "Маємо ${count} сертифікатів" + +#, python-brace-format +msgid "${count} item(s) added" +msgstr "Додано ${count} записів" + +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "Вилучено ${count} записів" + +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "Вимкнено ${count} записів" + +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "Увімкнено ${count} записів" + +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "Вилучено ${count} записів" + +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "Вилучено ${count} параметрів" + +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "Активовано ${count} записів користувачів" + +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "Відновлено ${count} записів користувачів" + +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "Користувачами етапу зроблено ${count} користувачів" + +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "Параметри ${primary_key} ${entity}" + +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "Оновлено ${primary_key} ${entity}" + +#, python-brace-format +msgid "${entity} successfully added" +msgstr "${entity} успішно додано" + +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "${primary_key} застосовується до:" + +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "${primary_key} міститься у:" + +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "${primary_key} керується:" + +#, python-brace-format +msgid "${primary_key} member managers:" +msgstr "Керівники учасника ${primary_key}:" + +#, python-brace-format +msgid "${primary_key} members:" +msgstr "Учасники ${primary_key}:" + +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "${primary_key} перевизначає:" + +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "${product}, версія: ${version}" + +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "%(attr)s не містить «%(value)s»" + +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "%(attr)s: некоректний синтаксис." + +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "%(attr)s: можна використовувати лише одне значення." + +#, python-format +msgid "%(command_name)s: %(oname)s not found" +msgstr "%(command_name)s: не знайдено %(oname)s" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" +msgstr "" +"Пошуком LDAP у %(container)s не повернуто жодного результату (основа пошуку: " +"%(search_base)s, клас об’єктів: %(objectclass)s)" + +#, python-format +msgid "" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "" +"Пропущено %(count)d %(type)s запис. Одночасно можна змінювати лише одне " +"значення на тип запису DNS." +msgstr[1] "" +"Пропущено %(count)d %(type)s записи. Одночасно можна змінювати лише одне " +"значення на тип запису DNS." +msgstr[2] "" +"Пропущено %(count)d %(type)s записів. Одночасно можна змінювати лише одне " +"значення на тип запису DNS." + +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "встановлено відповідність %(count)d ACI" +msgstr[1] "встановлено відповідність %(count)d ACI" +msgstr[2] "встановлено відповідність %(count)d ACI" + +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "встановлено відповідність %(count)d CA ACL" +msgstr[1] "встановлено відповідність %(count)d CA ACL" +msgstr[2] "встановлено відповідність %(count)d CA ACL" + +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "встановлено відповідність %(count)d CA" +msgstr[1] "встановлено відповідність %(count)d CA" +msgstr[2] "встановлено відповідність %(count)d CA" + +#, python-format +msgid "%(count)d Certificate Identity Mapping Rule matched" +msgid_plural "%(count)d Certificate Identity Mapping Rules matched" +msgstr[0] "" +"Встановлено відповідність %(count)d правила прив’язування сертифікатів до " +"профілів" +msgstr[1] "" +"Встановлено відповідність %(count)d правил прив’язування сертифікатів до " +"профілів" +msgstr[2] "" +"Встановлено відповідність %(count)d правил прив’язування сертифікатів до " +"профілів" + +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "встановлено відповідність %(count)d сервера DNS" +msgstr[1] "встановлено відповідність %(count)d серверів DNS" +msgstr[2] "встановлено відповідність %(count)d серверів DNS" + +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "" +"встановлено відповідність %(count)d перевизначення ідентифікаторів групи" +msgstr[1] "" +"встановлено відповідність %(count)d перевизначень ідентифікаторів групи" +msgstr[2] "" +"встановлено відповідність %(count)d перевизначень ідентифікаторів групи" + +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "встановлено відповідність %(count)d правила HBAC" +msgstr[1] "встановлено відповідність %(count)d правил HBAC" +msgstr[2] "встановлено відповідність %(count)d правил HBAC" + +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "встановлено відповідність %(count)d групи служб HBAC" +msgstr[1] "встановлено відповідність %(count)d груп служб HBAC" +msgstr[2] "встановлено відповідність %(count)d груп служб HBAC" + +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "встановлено відповідність %(count)d служби HBAC" +msgstr[1] "встановлено відповідність %(count)d служб HBAC" +msgstr[2] "встановлено відповідність %(count)d служб HBAC" + +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "встановлено відповідність %(count)d перегляду ідентифікаторів" +msgstr[1] "встановлено відповідність %(count)d переглядів ідентифікаторів" +msgstr[2] "встановлено відповідність %(count)d переглядів ідентифікаторів" + +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "встановлено відповідність %(count)d перевизначення ідентифікатора" +msgstr[1] "встановлено відповідність %(count)d перевизначень ідентифікаторів" +msgstr[2] "встановлено відповідність %(count)d перевизначень ідентифікаторів" + +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "встановлено відповідність %(count)d місця IPA" +msgstr[1] "встановлено відповідність %(count)d місць IPA" +msgstr[2] "встановлено відповідність %(count)d місць IPA" + +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "встановлено відповідність %(count)d сервера IPA" +msgstr[1] "встановлено відповідність %(count)d серверів IPA" +msgstr[2] "встановлено відповідність %(count)d серверів IPA" + +#, python-format +msgid "%(count)d Identity Provider server matched" +msgid_plural "%(count)d Identity Provider servers matched" +msgstr[0] "встановлено відповідність %(count)d сервера надавача профілів" +msgstr[1] "встановлено відповідність %(count)d серверів надавачів профілів" +msgstr[2] "встановлено відповідність %(count)d серверів надавачів профілів" + +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "встановлено відповідність %(count)d жетона OTP" +msgstr[1] "встановлено відповідність %(count)d жетони OTP" +msgstr[2] "встановлено відповідність %(count)d жетонів OTP" + +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "Встановлено відповідність %(count)d проксі-сервера RADIUS" +msgstr[1] "Встановлено відповідність %(count)d проксі-серверів RADIUS" +msgstr[2] "Встановлено відповідність %(count)d проксі-серверів RADIUS" + +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "встановлено відповідність %(count)d карти користувачів SELinux" +msgstr[1] "встановлено відповідність %(count)d карт користувачів SELinux" +msgstr[2] "встановлено відповідність %(count)d карт користувачів SELinux" + +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "встановлено відповідність %(count)d групи команд sudo" +msgstr[1] "встановлено відповідність %(count)d груп команд sudo" +msgstr[2] "встановлено відповідність %(count)d груп команд sudo" + +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "встановлено відповідність %(count)d команди sudo" +msgstr[1] "встановлено відповідність %(count)d команд sudo" +msgstr[2] "встановлено відповідність %(count)d команд sudo" + +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "встановлено відповідність %(count)d правила sudo" +msgstr[1] "встановлено відповідність %(count)d правил sudo" +msgstr[2] "встановлено відповідність %(count)d правил sudo" + +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "" +"встановлено відповідність %(count)d перевизначення ідентифікатора користувача" +msgstr[1] "" +"встановлено відповідність %(count)d перевизначень ідентифікаторів " +"користувачів" +msgstr[2] "" +"встановлено відповідність %(count)d перевизначень ідентифікаторів " +"користувачів" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "встановлено відповідність %(count)d ключа автоматичного монтування" +msgstr[1] "встановлено відповідність %(count)d ключі автоматичного монтування" +msgstr[2] "встановлено відповідність %(count)d ключів автоматичного монтування" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "встановлено відповідність %(count)d місця автоматичного монтування" +msgstr[1] "встановлено відповідність %(count)d місця автоматичного монтування" +msgstr[2] "встановлено відповідність %(count)d місць автоматичного монтування" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "встановлено відповідність %(count)d карти автоматичного монтування" +msgstr[1] "встановлено відповідність %(count)d карти автоматичного монтування" +msgstr[2] "встановлено відповідність %(count)d карт автоматичного монтування" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "встановлено відповідність %(count)d сертифіката" +msgstr[1] "встановлено відповідність %(count)d сертифікатів" +msgstr[2] "встановлено відповідність %(count)d сертифікатів" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "встановлено відповідність %(count)d уповноваження" +msgstr[1] "встановлено відповідність %(count)d уповноваження" +msgstr[2] "встановлено відповідність %(count)d уповноважень" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "встановлено відповідність %(count)d групи" +msgstr[1] "встановлено відповідність %(count)d груп" +msgstr[2] "встановлено відповідність %(count)d груп" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "встановлено відповідність %(count)d вузла" +msgstr[1] "встановлено відповідність %(count)d вузлів" +msgstr[2] "встановлено відповідність %(count)d вузлів" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "встановлено відповідність %(count)d групи вузлів" +msgstr[1] "встановлено відповідність %(count)d груп вузлів" +msgstr[2] "встановлено відповідність %(count)d груп вузлів" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "встановлено відповідність %(count)d групи" +msgstr[1] "встановлено відповідність %(count)d груп" +msgstr[2] "встановлено відповідність %(count)d груп" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "встановлено відповідність %(count)d запису" +msgstr[1] "встановлено відповідність %(count)d записів" +msgstr[2] "встановлено відповідність %(count)d записів" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "завантажено %(count)d додаток" +msgstr[1] "завантажено %(count)d додатки" +msgstr[2] "завантажено %(count)d додатків" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "встановлено відповідність %(count)d привілею" +msgstr[1] "встановлено відповідність %(count)d привілеїв" +msgstr[2] "встановлено відповідність %(count)d привілеїв" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "встановлено відповідність %(count)d профілю" +msgstr[1] "встановлено відповідність %(count)d профілів" +msgstr[2] "встановлено відповідність %(count)d профілів" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "встановлено відповідність %(count)d діапазону" +msgstr[1] "встановлено відповідність %(count)d діапазонів" +msgstr[2] "встановлено відповідність %(count)d діапазонів" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "встановлено відповідність %(count)d ролі" +msgstr[1] "встановлено відповідність %(count)d ролей" +msgstr[2] "встановлено відповідність %(count)d ролей" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "встановлено відповідність %(count)d правила" +msgstr[1] "встановлено відповідність %(count)d правил" +msgstr[2] "встановлено відповідність %(count)d правил" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "встановлено відповідність %(count)d сегмента" +msgstr[1] "встановлено відповідність %(count)d сегментів" +msgstr[2] "встановлено відповідність %(count)d сегментів" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "встановлено відповідність %(count)d самообслуговування" +msgstr[1] "встановлено відповідність %(count)d самообслуговування" +msgstr[2] "встановлено відповідність %(count)d самообслуговувань" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "встановлено відповідність %(count)d правила делегування служб" +msgstr[1] "встановлено відповідність %(count)d правил делегування служб" +msgstr[2] "встановлено відповідність %(count)d правил делегування служб" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "встановлено відповідність %(count)d призначення делегування служб" +msgstr[1] "встановлено відповідність %(count)d призначень делегування служб" +msgstr[2] "встановлено відповідність %(count)d призначень делегування служб" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "встановлено відповідність %(count)d служби" +msgstr[1] "встановлено відповідність %(count)d служб" +msgstr[2] "встановлено відповідність %(count)d служб" + +#, python-format +msgid "%(count)d subordinate id matched" +msgid_plural "%(count)d subordinate ids matched" +msgstr[0] "встановлено відповідність %(count)d підлеглого ідентифікатора" +msgstr[1] "встановлено відповідність %(count)d підлеглих ідентифікаторів" +msgstr[2] "встановлено відповідність %(count)d підлеглих ідентифікаторів" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "встановлено відповідність %(count)d суфікса топології" +msgstr[1] "встановлено відповідність %(count)d суфіксів топології" +msgstr[2] "встановлено відповідність %(count)d суфіксів топології" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "встановлено відповідність %(count)d запису довіри" +msgstr[1] "встановлено відповідність %(count)d записів довіри" +msgstr[2] "встановлено відповідність %(count)d записів довіри" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "встановлено відповідність %(count)d користувача" +msgstr[1] "встановлено відповідність %(count)d користувачів" +msgstr[2] "встановлено відповідність %(count)d користувачів" + +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d змінних" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "встановлено відповідність %(count)d сховища" +msgstr[1] "встановлено відповідність %(count)d сховищ" +msgstr[2] "встановлено відповідність %(count)d сховищ" + +#, python-format +msgid "%(count)s server matched" +msgid_plural "%(count)s servers matched" +msgstr[0] "Встановлено відповідність %(count)s сервера" +msgstr[1] "Встановлено відповідність %(count)s серверів" +msgstr[2] "Встановлено відповідність %(count)s серверів" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "встановлено відповідність %(count)s ролі сервера" +msgstr[1] "встановлено відповідність %(count)s ролей сервера" +msgstr[2] "встановлено відповідність %(count)s ролей сервера" + +#, python-format +msgid "%(count)s user matched" +msgid_plural "%(count)s users matched" +msgstr[0] "Встановлено відповідність %(count)s користувача" +msgstr[1] "Встановлено відповідність %(count)s користувачів" +msgstr[2] "Встановлено відповідність %(count)s користувачів" + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "Клієнт %(cver)s є несумісним з сервером %(sver)s на «%(server)s»" + +#, python-format +msgid "%(desc)s: %(info)s" +msgstr "%(desc)s: %(info)s" + +#, python-format +msgid "%(exception)s" +msgstr "%(exception)s" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "%(filename)s: файл не знайдено" + +#, python-format +msgid "%(host)s failed" +msgstr "Помилка %(host)s" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "Помилка %(host)s: %(error)s" + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "" +"%(key)s неможливо вилучити, оскільки він потрібен для %(dependent)s %(label)s" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "" +"%(key)s не може бути вилучено або вимкнено, оскільки він є останнім у " +"%(container)s %(label)s" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "%(key)s %(label)s не можна вилучати або змінювати: %(reason)s" + +#, python-format +msgid "%(line)s" +msgstr "%(line)s" + +#, python-format +msgid "%(metaobject)s: %(oname)s not found" +msgstr "%(metaobject)s: не знайдено %(oname)s" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "Сертифікат %(name)s не є чинним" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "Типовий атрибут %(obj)s, %(attr)s, не буде дозволено!" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "%(oname)s з назвою «%(pkey)s» вже існує" + +#, python-format +msgid "" +"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." +msgstr "%(oname)s з назвою «%(pkey)s» або для користувача «%(uid)s» вже існує." + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "" +"Підтримки %(operation)s для реєстраційних записів %(principal_type)s не " +"передбачено" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(otype)s «%(oname)s» не знайдено" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s: не знайдено %(oname)s" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s: не знайдено %(oname)s" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "%(port)s не є чинним портом" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +#, python-format +msgid "%(remaining)i remaining subordinate id ranges" +msgstr "%(remaining)i залишкових діапазонів підлеглих ідентифікаторів" + +#, python-format +msgid "%(subject)s: Malformed certificate. %(reason)s" +msgstr "%(subject)s: помилкове форматування сертифіката. %(reason)s" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "" +"Перевищення часу очікування на завершення завдання LDAP %(task)s, DN " +"завдання: «%(task_dn)s»" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "" +"Значенням категорії %(type)s не можна встановлювати «all», якщо існують " +"дозволені %(objects)s" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "%(user)s не є користувачем з групи POSIX" + +#, python-format +msgid "%(value)s" +msgstr "%(value)s" + +#, python-format +msgid "%i CA added." +msgstr "Додано %i CA." + +#, python-format +msgid "%i CA removed." +msgstr "Вилучено %i." + +#, python-format +msgid "%i CAs added." +msgstr "Додано %i CA." + +#, python-format +msgid "%i CAs removed." +msgstr "Вилучено %i CA." + +#, python-format +msgid "%i host or hostgroup added." +msgstr "Додано %i вузол або групу вузлів." + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "Вилучено %i вузол або групу вузлів." + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "Додано %i вузлів або груп вузлів." + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "Вилучено %i вузлів або груп вузлів." + +#, python-format +msgid "%i profile added." +msgstr "Додано %i профіль." + +#, python-format +msgid "%i profile removed." +msgstr "Вилучено %i профіль." + +#, python-format +msgid "%i profiles added." +msgstr "Додано %i профілів." + +#, python-format +msgid "%i profiles removed." +msgstr "Вилучено %i профілів." + +#, python-format +msgid "%i service added." +msgstr "Додано %i службу." + +#, python-format +msgid "%i service removed." +msgstr "Вилучено %i службу." + +#, python-format +msgid "%i services added." +msgstr "Додано %i служб." + +#, python-format +msgid "%i services removed." +msgstr "Вилучено %i служб." + +#, python-format +msgid "%i user or group added." +msgstr "Додано %i користувача або групу." + +#, python-format +msgid "%i user or group removed." +msgstr "Вилучено %i користувача або групу." + +#, python-format +msgid "%i users or groups added." +msgstr "Додано %i користувачів або груп." + +#, python-format +msgid "%i users or groups removed." +msgstr "Вилучено %i користувачів або груп." + +#, python-format +msgid "%s" +msgstr "%s" + +#, python-format +msgid "%s Record" +msgstr "Запис %s" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "%s не є коректним атрибутом." + +#, python-format +msgid "%s record" +msgstr "Запис %s" + +#, python-format +msgid "%s to add" +msgstr "%s для додавання" + +#, python-format +msgid "%s to exclude from migration" +msgstr "%s, які слід виключити з перенесення" + +#, python-format +msgid "%s to remove" +msgstr "%s для вилучення" + +#, python-format +msgid "%s: RADIUS proxy server not found" +msgstr "%s: проксі-сервер RADIUS не знайдено" + +#, python-format +msgid "%s: group not found" +msgstr "%s: групи не знайдено" + +#, python-format +msgid "%s: user is already preserved" +msgstr "%s: запис користувача вже захищено" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "«${port}» не є коректним визначенням порту" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "«%(attr)s» вже містить одне або декілька значень" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "«%(command)s» вважається застарілою. %(additional_info)s" + +#, python-format +msgid "'%(dn)s is not a valid user" +msgstr "'%(dn)s не є коректним користувачем" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "«%(entry)s» не містить сертифіката." + +#, python-format +msgid "'%(name)s' is required" +msgstr "Слід вказати «%(name)s»" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "Параметр «%(option)s» є застарілим. %(additional_info)s" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "«%(required)s» має бути порожнім, якщо вказано «%(name)s»" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "«%s» є обов’язковою частиною запису DNS" + +msgid "'add' option" +msgstr "параметр «add»" + +msgid "(deprecated)" +msgstr "(застаріле)" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "(докладніше про це у RFC %s)" msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" msgstr "" -"\n" -"Зауважте, що коди причини 7 не використовується. Докладніші дані у RFC " -"5280:\n" +". Перевірте ідентифікатор вже створеної групи. Скористайтеся параметром --" +"group-overwrite-gid для перезапису ідентифікатора групи" + +msgid "7 is not a valid revocation reason" +msgstr "7 не є коректною причиною відкликання" + +msgid "" +msgstr "<усі сервери DNS IPA>" msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" +"

Browser Kerberos Setup

\n" "\n" msgstr "" +"

Налаштування браузера для Kerberos

\n" "\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" + +msgid "" +"

Password Migration

If you have been sent here by your " +"administrator, your personal information is being migrated to a new identity " +"management solution (IPA).

Please, enter your credentials in the form " +"to complete the process. Upon successful login your kerberos account will be " +"activated.

" +msgstr "" +"

Перенесення паролів

Якщо вас було спрямовано на цю сторінку вашим " +"адміністратором, ваші особисті дані було перенесено до нового рішення з " +"керування профілями користувачів (IPA).

Будь ласка, введіть ваші " +"реєстраційні дані до форми, щоб завершити процес. Після успішного входу до " +"системи ваш обліковий запис kerberos буде активовано.

" + +msgid "" +"

Unable to verify your Kerberos credentials

\n" +"

\n" +" Please make sure that you have valid Kerberos tickets " +"(obtainable via kinit), and that you have configured your " +"browser correctly.\n" +"

\n" "\n" +"

Browser configuration

\n" +"\n" +"
\n" +"

\n" +" If this is your first time, please configure your browser.\n" +"

\n" +"
\n" +msgstr "" +"

Не вдалося перевірити ваші реєстраційні дані Kerberos

\n" +"

\n" +" Будь ласка, переконайтеся, що у вас є чинні квитки Kerberos (їх " +"можна отримати за допомогою kinit), і що ви налаштували ваш " +"браузер належним чином.\n" +"

\n" +"\n" +"

Налаштовування браузера

\n" +"\n" +"
\n" +"

\n" +" Якщо це вперше, будь ласка, налаштуйте ваш браузер.\n" +"

\n" +"
\n" + +msgid "" +"

Chrome

\n" +"\n" +"

\n" +" You can configure Chrome to use Kerberos for Single Sign-on. The " +"following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" +"

Chrome

\n" +"\n" +"

\n" +" Ви можете налаштувати Chrome на використання Kerberos для служби " +"універсального входу. Нижче наведено настанови, які допоможуть вам " +"налаштувати ваш браузер на надсилання реєстраційних даних Kerberos до " +"відповідного центру розповсюдження ключів, який надає доступ до служи " +"універсального входу.\n" +"

\n" +"\n" + +msgid "" +"

Firefox

\n" +"\n" +"

\n" +" You can configure Firefox to use Kerberos for Single Sign-on. " +"The following instructions will guide you in configuring your web browser to " +"send your Kerberos credentials to the appropriate Key Distribution Center " +"which enables Single Sign-on.\n" +"

\n" +"\n" +msgstr "" +"

Firefox

\n" +"\n" +"

\n" +" Ви можете налаштувати Firefox на використання Kerberos для " +"служби універсального входу. Нижче наведено настанови, які допоможуть вам " +"налаштувати ваш браузер на надсилання реєстраційних даних Kerberos до " +"відповідного центру розповсюдження ключів, який надає доступ до служи " +"універсального входу.\n" +"

\n" +"\n" + +msgid "" +"

Internet Explorer

\n" +"

WARNING: Internet Explorer is no longer a supported " +"browser.

\n" +"

\n" +" Once you are able to log into the workstation with your kerberos " +"key you are now able to use that ticket in Internet Explorer.\n" +"

\n" +"

\n" +msgstr "" +"

Internet Explorer

\n" +"

ПОПЕРЕДЖЕННЯ: підтримку браузера Internet Explorer " +"припинено.

\n" +"

\n" +" Якщо ви здатні увійти до робочої станції за допомогою вашого " +"ключа kerberos, ви можете скористатися отриманим квитком у Internet " +"Explorer.\n" +"

\n" +"

\n" + +msgid "" +"

\n" +" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) to Use Kerberos Authentication\n" +" in Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Make sure you have the necessary directory created by " +"running:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Create a new /etc/opt/chrome/policies/managed/mydomain." +"json file with write privileges limited to the system administrator " +"or root, and include the following line:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*.example.com\" }\n" +"
    \n" +"
    \n" +" You can do this by running:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" +"managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Note: If using Chromium, use /etc/chromium/policies/" +"managed/ instead of /etc/opt/chrome/policies/managed/ " +"for the two SPNEGO Chrome configuration steps above.\n" +"

    \n" +"
\n" +"\n" +msgstr "" +"

\n" +" Вмикання SPNEGO (Simple and Protected GSSAPI Negotiation " +"Mechanism) для використання розпізнавання Kerberos\n" +" у Chrome\n" +"

\n" +"
    \n" +"
  1. \n" +" Переконайтеся, що у вас є потрібний каталог, за допомогою " +"такої команди:\n" +"
    \n" +" [root@client]# mkdir -p /etc/opt/chrome/policies/" +"managed/\n" +"
    \n" +"
    2. \n" +"
  2. \n" +" Створіть файл /etc/opt/chrome/policies/managed/" +"mydomainjson із правами доступу на запис, обмеженими адміністратором " +"системи або root, із таким рядком вмісту:\n" +"
    \n" +" { \"AuthServerWhitelist\": \"*example.com\" }\n" +"
    \n" +"
    \n" +" Зробити це можна за допомогою такої команди:\n" +"
    \n" +"
    \n" +" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com.\" }' > /etc/opt/chrome/" +"policies/managed/mydomain.json\n" +"
    \n" +"
    3. \n" +"
\n" +"
    \n" +"

    \n" +"Зауваження: якщо ви користуєтеся Chromium, скористайтеся " +"/etc/chromium/policies/managed/ замість /etc/opt/chrome/" +"policies/managed/ для двох кроків налаштовування для SPNEGO Chrome.\n" +"

    \n" +"
\n" +"\n" + +msgid "" +"

Import CA Certificate

\n" +"
    \n" +"
  1. \n" +" Download the CA certificate. " +"Alternatively, if the host is also an IdM client, you can find the " +"certificate in /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Click the menu button with the Customize and control " +"Google Chrome tooltip, which is by default in the top right-hand corner " +"of Chrome, and click Settings.\n" +"
    3. \n" +"
  3. \n" +" Click Show advanced settings to display more " +"options, and then click the Manage certificates button located " +"under the HTTPS/SSL heading.\n" +"
    4. \n" +"
  4. \n" +" In the Authorities tab, click the Import " +"button at the bottom.\n" +"
    5. \n" +"
  5. Select the CA certificate file that you downloaded in the first step.\n" +"
\n" +"\n" +msgstr "" +"

Імпортування сертифіката служби сертифікації

\n" +"
    \n" +"
  1. \n" +" Отримайте сертифікат служби сертифікації. Крім того, якщо вузол є також клієнтом IdM, можете просто взяти цей " +"сертифікат з /etc/ipa/ca.crt.\n" +"
    2. \n" +"
  2. \n" +" Натисніть кнопку меню із підказкою Налаштування та " +"керування Google Chrome, яку типово розташовано у верхньому правому " +"куті вікна Chrome, потім натисніть Налаштування.\n" +"
    3. \n" +"
  3. \n" +" Натисніть пункт Розширені, щоб отримати доступ до " +"ширшого списку параметрів, потім натисніть кнопку Керування " +"сертифікатами, яку розташовано у списку із заголовком «HTTPS/SSL».\n" +"
    4. \n" +"
  4. \n" +" На вкладці Центри сертифікації натисніть кнопку " +"Імпортувати у нижній частині сторінки.\n" +"
    5. \n" +"
  5. Виберіть сертифікат служби сертифікації, який ви отримали на першому " +"кроці.
    6. \n" +"
\n" +"\n" + +msgid "" +" OTP (One-Time Password):Generate new OTP code for each OTP field." +msgstr "" +" OTP (одноразовий пароль): створити новий код OTP для кожного з полів OTP." + +msgid "" +" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." +msgstr "" +" OTP (одноразовий пароль): створити новий код OTP для кожного з полів OTP." + +#, python-brace-format +msgid "" +" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " +"configured the " +"browser correctly, then click 'Log in'." +msgstr "" +" Щоб увійти до системи за допомогою " +"Kerberos, будь ласка, переконайтеся, що у вас є коректні " +"квитки (такі, які можна отримати за допомогою kinit) і налаштований належним чином браузер. " +"Далі натисніть кнопку «Увійти»." + +msgid "" +" To log in with certificate, please make sure you have valid personal certificate. " +msgstr "" +" Щоб увійти за допомогою " +"сертифіката, будь ласка, переконайтеся, що у вас є чинний " +"особистий сертифікат. " + +msgid "" +" To log in with username and " +"password, enter them in the corresponding fields, then click 'Log " +"in'." +msgstr "" +" Щоб увійти за допомогою імені " +"користувача і пароля, вкажіть ці дані у відповідних полях, потім " +"натисніть кнопку «Увійти»." + +msgid "" +"
    \n" +"
  1. \n" +"

    \n" +"Import " +"Certificate Authority certificate\n" +"

    \n" +"

    \n" +" Make sure you select all three checkboxes.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" +"
    3. \n" +"
  3. \n" +" In the Filter field, type negotiate to restrict " +"the list of options.\n" +"
    4. \n" +"
  4. \n" +" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" +"
    5. \n" +"
  5. \n" +" Enter the name of the domain against which you want to " +"authenticate, for example, .example.com.\n" +"
    6. \n" +"
  6. Return to Web UI
    7. \n" +"
\n" +"\n" +msgstr "" +"
    \n" +"
  1. \n" +"

    \n" +"Імпортування " +"сертифіката служби сертифікації (CA)\n" +"

    \n" +"

    \n" +" Переконайтеся, що вами позначено усі три поля для " +"позначок.\n" +"

    \n" +"
    2. \n" +"
  2. \n" +" У полі адреси Firefox введіть about:config, щоб " +"програма показала список поточних параметрів налаштувань.\n" +"
    3. \n" +"
  3. \n" +" У полі фільтрування введіть negotiate, щоб " +"фільтрувати список параметрів.\n" +"
    4. \n" +"
  4. \n" +" Двічі клацніть на пункті network.negotiate-auth." +"trusted-uris, щоб відкрити діалогову панель для введення значення " +"рядка.\n" +"
    5. \n" +"
  5. \n" +" Введіть назву домену, на якому ви хочете проходити " +"розпізнавання, наприклад, .example.com.\n" +"
    6. \n" +"
  6. Повернутися до інтернет-інтерфейсу
    7. \n" +"
\n" +"\n" + +#, python-brace-format +msgid "" +"
  1. Create a certificate database or use an existing one. To create a " +"new database:
    # certutil -N -d <database path>
    2. " +"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " +"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " +"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " +"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" +msgstr "" +"
  1. Створити базу даних сертифікатів або скористатися вже створеною. " +"Щоб створити нову базу даних, віддайте команду:
    # certutil -N -d " +"<шлях до бази даних>
  2. Створити CSR з призначенням " +"CN=<${cn_name}>,O=<область>, наприклад:
    # " +"certutil -R -d <шлях до бази даних> -a -g <розмір ключа> -s " +"'CN=${cn},O=${realm}'${san}
  3. Скопіюйте і вставте CSR (від " +"-----BEGIN NEW CERTIFICATE REQUEST----- до -----END NEW " +"CERTIFICATE REQUEST-----) до області для введення тексту, розташованої " +"нижче:
" + +msgid "" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" +"

Якщо метод не вибрано, буде використано неявний метод (пароль).

Пароль + двофакторне розпізнавання: у LDAP і Kerberos " +"передбачено розпізнавання за одним із цих типів розпізнавання, а у Kerberos " +"використовується метод попереднього розпізнавання, який потребує " +"використання ccache armor.

RADIUS із іншим типом: у " +"Kerberos завжди використовується RADIUS, а у LDAP він не використовується " +"ніколи. LDAP розпізнає лише варіанти розпізнавання за паролем або " +"двофакторне розпізнавання.

" + +msgid "" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" +msgstr "" +"

Параметр для окремих користувачів, перевизначає загальне значення, якщо " +"буде вибрано один з варіантів.

Пароль + двофакторне " +"розпізнавання: у LDAP і Kerberos передбачено розпізнавання за одним " +"із цих типів розпізнавання, а у Kerberos використовується метод попереднього " +"розпізнавання, який потребує використання ccache armor.

RADIUS " +"із іншим типом: у Kerberos завжди використовується RADIUS, а у LDAP " +"він не використовується ніколи. LDAP розпізнає лише варіанти розпізнавання " +"за паролем або двофакторне розпізнавання.

" + +msgid "" +"Log into the Windows machine using an account of your Kerberos realm " +"(administrative domain)\n" +"

\n" +"

\n" +"In Internet Explorer, click Tools, and then click Internet Options.\n" +"

\n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Sites
    4. \n" +"
  4. Click Advanced
    5. \n" +"
  5. Add your domain to the list
    6. \n" +"
\n" +"
    \n" +"
  1. Click the Security tab
    2. \n" +"
  2. Click Local intranet
    3. \n" +"
  3. Click Custom Level
    4. \n" +"
  4. Select Automatic logon only in Intranet zone
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " +"Domain Name in the URL)
    2. \n" +"
  2. You are all set.
    3. \n" +"
\n" +"
\n" +"\n" +msgstr "" +"Увійдіть до системи Windows за допомогою облікового запису вашої " +"області Kerberos (адміністративного домену)\n" +"

\n" +"

\n" +"У Internet Explorer виберіть меню «Інструменти», потім пункт " +"«Параметри інтернету».\n" +"

\n" +"
\n" +"
    \n" +"
  1. Відкрийте вкладку «Безпека»
    2. \n" +"
  2. Натисніть «Локальна мережа»
    3. \n" +"
  3. Натисніть «Сайти»
    4. \n" +"
  4. Натисніть «Додатково»
    5. \n" +"
  5. Додайте ваш домен до списку
    6. \n" +"
\n" +"
    \n" +"
  1. Відкрийте вкладку «Безпека»
    2. \n" +"
  2. Натисніть «Локальна мережа»
    3. \n" +"
  3. Натисніть «Нетиповий рівень»
    4. \n" +"
  4. Виберіть «Автоматичний вхід лише у локальній зоні»
    5. \n" +"
\n" +"\n" +"
    \n" +"
  1. Відкрийте kerberізований сайт за допомогою IE (вам слід використати у " +"адресі повноцінну назву домену)
    2. \n" +"
  2. Ось і усе.
    3. \n" +"
\n" +"
\n" +"\n" + +msgid "" +"=======\n" +"WARNING:\n" +"\n" +"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " +"the\n" +"local domain. Currently the DNA plugin *cannot* be reconfigured itself " +"based\n" +"on the local ranges set via this family of commands.\n" +"\n" +"Manual configuration change has to be done in the DNA plugin configuration " +"for\n" +"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " +"be\n" +"modified to match the new range.\n" +"=======\n" +msgstr "" +"=======\n" +"ПОПЕРЕДЖЕННЯ:\n" +"\n" +"Додаток DNA у 389-ds розподілятиме ідентифікатори на основі діапазонів,\n" +"налаштованих для локального домену. У поточній версії додаток DNA *не може*\n" +"переналаштуватися на основі локальних діапазонів, встановлених цим\n" +"сімейством команд.\n" +"\n" +"Для використання нового локального діапазону до налаштувань додатка DNA\n" +"слід внести зміни вручну. Зокрема, слід змінити атрибут dnaNextRange " +"'cn=Posix\n" +"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' так, щоб\n" +"він відповідав новому діапазону.\n" +"=======\n" + +msgid "A Create reverse" +msgstr "Створити зворотний A" + +msgid "A IP Address" +msgstr "IP-адреса A" + +msgid "A SYSTEM permission may not be modified or removed" +msgstr "Права доступу SYSTEM не можна змінювати чи вилучати" + +msgid "A comma-separated list of fields to search in when searching for groups" +msgstr "" +"Відокремлений комами список полів, за якими виконуватиметься пошук груп" + +msgid "A comma-separated list of fields to search in when searching for users" +msgstr "" +"Відокремлений комами список полів, за якими виконуватиметься пошук " +"користувачів" + +msgid "A description of this RADIUS proxy server" +msgstr "Опис цього проксі-сервера RADIUS" + +msgid "A description of this auto member rule" +msgstr "Опис цього правила автоматичної участі" + +msgid "A description of this command" +msgstr "Опис цієї команди" + +msgid "A description of this host" +msgstr "Опис цього вузла" + +msgid "A description of this host-group" +msgstr "Опис цієї групи вузлів" + +msgid "A description of this role-group" +msgstr "Опис цієї групи ролей" + +msgid "A dictionary representing an LDAP entry" +msgstr "Словник, що відповідає запису LDAP" + +msgid "A group may not be a member of itself" +msgstr "Група не може бути елементом самої себе" + +msgid "A group may not be added as a member of itself" +msgstr "Групу не може бути додано як елемент самої себе" + +msgid "A host willing to act as a key exchanger" +msgstr "Вузол, який може працювати як обмінник ключів" + +msgid "A host willing to act as a mail exchanger" +msgstr "Вузол, який може працювати як обмінник поштовими даними" + +msgid "A hostname which this alias hostname points to" +msgstr "Назва вузла на яку вказує цей псевдонім вузла" + +msgid "A list of ACI values" +msgstr "Список значень ACI" + +msgid "A list of LDAP entries" +msgstr "Список записів LDAP" + +msgid "A list of SELinux users delimited by $ expected" +msgstr "" +"Мало бути вказано список користувачів SELinux, записи якого відокремлено " +"символом $" + +msgid "" +"A list of global forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Список загальних переспрямовувачів. Для кожного переспрямовувача можна " +"вказати нетиповий порт за допомогою стандартного формату «IP_АДРЕСА port " +"ПОРТ»" + +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Список переспрямовувачів для окремих зон. Для кожного переспрямовувача можна " +"вказати нетиповий порт за допомогою стандартного формату: «IP_АДРЕСА port " +"ПОРТ»" + +msgid "A managed group cannot have a password policy." +msgstr "У керованої групи не може бути власних правил для паролів." + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "" +"Під час перевірки виявлено проблему, всі записи учасників %(verb)s: %(exc)s" + +msgid "A record" +msgstr "запис A" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "" +"Розділений пробілами список атрибутів, які слід вилучати під час оновлено " +"реплікації." + +msgid "A string searched in all relevant object attributes" +msgstr "" +"Рядок, пошук якого відбуватиметься у всіх відповідних атрибутах об’єктів" + +msgid "A string that identifies the user at external IdP" +msgstr "Рядок, який ідентифікує користувача на зовнішньому IdP" + +msgid "A6 Record data" +msgstr "Дані запису A6" + +msgid "A6 record" +msgstr "Запис A6" + +msgid "AA Compromise" +msgstr "Компрометація AA" + +msgid "AAAA Create reverse" +msgstr "Створити зворотний запис AAAA" + +msgid "AAAA IP Address" +msgstr "IP-адреса AAAA" + +msgid "AAAA record" +msgstr "запис AAAA" + +msgid "ACI" +msgstr "ACI" + +msgid "ACI name" +msgstr "Назва ACI" + +msgid "ACI object." +msgstr "Об'єкт ACI." + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "ACI права доступу %s не знайдено" + +msgid "ACI prefix" +msgstr "префікс ACI" + +msgid "ACI prefix is required" +msgstr "Слід вказати префікс ACI" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "Не знайдено ACI з назвою «%s»" + +msgid "ACIs" +msgstr "ACI" + +msgid "ACL name" +msgstr "Назва ACL" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "" +"AD DC не вдалося отримати доступ до жодного з контролерів домену IPA. " +"Найімовірніше, цю помилку пов’язано із проблемами з DNS або брандмауером" + +msgid "AD Trust setup" +msgstr "Налаштування довіри AD" + +msgid "AD domain controller" +msgstr "Контролер домену AD" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "" +"Домен AD скаржиться на послідовність команд встановлення зв’язку. Це, " +"наприклад, може означати розсинхронізацію часу між комп’ютерами, які " +"обмінюються даними." + +msgid "AFSDB Hostname" +msgstr "Назва вузла AFSDB" + +msgid "AFSDB Subtype" +msgstr "Підтип AFSDB" + +msgid "AFSDB record" +msgstr "Запис AFSDB" + +msgid "API Browser" +msgstr "Навігатор API" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" +"Не було надіслано номера версії програмного інтерфейсу (API), сумісність з " +"найновішими версіями не можна гарантувати. Припускаємо таку версію API " +"сервера: %(server_version)s" + +msgid "APL record" +msgstr "запис APL" + +msgid "About" +msgstr "Про програму" + +msgid "Access Denied" +msgstr "Доступ заборонено" + +msgid "Access Granted" +msgstr "Надано доступ" + +#, python-format +msgid "Access granted: %s" +msgstr "Надано доступ: %s" + +msgid "Access this host" +msgstr "Доступ до цього вузла" + +msgid "Access time" +msgstr "Час доступу" + +msgid "Accessing" +msgstr "Доступ" + +msgid "Account" +msgstr "Обліковий запис" + +msgid "Account Settings" +msgstr "Параметри облікового запису" + +msgid "Account Status" +msgstr "Стан облікового запису" + +msgid "Account disabled" +msgstr "Обліковий запис вимкнено" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "Обліковий запис вимкнено: %(disabled)s" + +msgid "Actions" +msgstr "Дії" + +msgid "Activate" +msgstr "Задіяти" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "Активувати користувача етапу «%(value)s»" + +msgid "Activate a stage user." +msgstr "Активувати користувача етапу." + +msgid "Active Directory domain" +msgstr "Домен Active Directory" + +msgid "Active Directory domain administrator" +msgstr "Адміністратор домену Active Directory" + +msgid "Active Directory domain administrator's password" +msgstr "Пароль адміністратора домену Active Directory" + +msgid "Active Directory domain range" +msgstr "Діапазон доменів Active Directory" + +msgid "Active Directory domain with POSIX attributes" +msgstr "Домен Active Directory з атрибутами POSIX" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "Діапазон довіри Active Directory з атрибутами POSIX" + +msgid "Active Directory winsync" +msgstr "winsync Active Directory" + +msgid "Active directory domain administrator's password" +msgstr "Пароль адміністратора домену Active directory" + +msgid "Active users" +msgstr "Активні користувачі" + +msgid "Active zone" +msgstr "Активна зона" + +msgid "Add" +msgstr "Додати" + +msgid "Add CA ACL" +msgstr "Додати ACL CA" + +msgid "Add CAs to a CA ACL." +msgstr "Додати CA до ACL CA." + +#, python-brace-format +msgid "Add Certificate Authorities into CA ACL '${primary_key}'" +msgstr "Додати служби сертифікації до ACL CA «${primary_key}»" + +msgid "Add Class of Service entry" +msgstr "Додати запис класу служби" + +msgid "Add Custom Attribute" +msgstr "Додати нетиповий атрибут" + +msgid "Add Custom Authentication Indicator" +msgstr "Додати нетиповий індикатор розпізнавання" + +msgid "Add DNS forward zone" +msgstr "Додати зону переспрямовування DNS" + +msgid "Add DNS resource record" +msgstr "Додати запис ресурсу DNS" + +msgid "Add DNS zone" +msgstr "Додати зону DNS" + +msgid "Add HBAC rule" +msgstr "Додати правило HBAC" + +msgid "Add HBAC service" +msgstr "Додати службу HBAC" + +#, python-brace-format +msgid "Add HBAC service '${primary_key}' into HBAC service groups" +msgstr "Додати службу HBAC «${primary_key}» до груп служб HBAC" + +msgid "Add HBAC service group" +msgstr "Додати групу служб HBAC" + +#, python-brace-format +msgid "Add HBAC service groups into HBAC rule '${primary_key}'" +msgstr "Додати групи служб HBAC до правила HBAC «${primary_key}»" + +#, python-brace-format +msgid "Add HBAC services into HBAC rule '${primary_key}'" +msgstr "Додати служби HBAC до правила HBAC «${primary_key}»" + +#, python-brace-format +msgid "Add HBAC services into HBAC service group '${primary_key}'" +msgstr "Додати служби HBAC до групи служб HBAC «${primary_key}»" + +msgid "Add ID range" +msgstr "Додати діапазон ідентифікаторів" + +msgid "Add ID view" +msgstr "Додати перегляд ідентифікатора" + +msgid "Add IPA location" +msgstr "Додати місце IPA" + +#, python-brace-format +msgid "Add IPA server into IPA location '${primary_key}'" +msgstr "Додати сервер IPA до місця IPA «${primary_key}»" + +msgid "Add Kerberos Principal Alias" +msgstr "Додати псевдонім реєстраційного запису Kerberos" + +msgid "Add Many" +msgstr "Додати багато" + +msgid "Add OTP token" +msgstr "Додати жетон OTP" + +msgid "Add RADIUS server" +msgstr "Додати сервер RADIUS" + +#, python-brace-format +msgid "Add RunAs groups into sudo rule '${primary_key}'" +msgstr "Додати групи RunAs до правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Add RunAs user groups into sudo rule '${primary_key}'" +msgstr "Додати групи користувачів RunAs до правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Add RunAs users into sudo rule '${primary_key}'" +msgstr "Додати користувачів RunAs до правила sudo «${primary_key}»" + +msgid "Add SELinux user map" +msgstr "Додати карту користувачів SELinux" + +msgid "Add SIDs" +msgstr "Додати SID-и" + +msgid "Add SIDs for existing users and groups" +msgstr "Додати SID-и для наявних користувачів та груп" + +msgid "Add a manager to the stage user entry" +msgstr "Додати керування до запису користувача етапу" + +msgid "Add a manager to the user entry" +msgstr "Додати керування до запису користувача" + +msgid "Add a new DNS server." +msgstr "Додати новий запис сервера DNS." + +msgid "Add a new Group ID override." +msgstr "Додати нове перевизначення ідентифікаторів групи." + +msgid "Add a new HBAC service group." +msgstr "Додати нову групу служб HBAC." + +msgid "Add a new HBAC service." +msgstr "Додати нову службу HBAC." + +msgid "Add a new ID View." +msgstr "Додати новий перегляд ідентифікаторів." + +msgid "Add a new ID override." +msgstr "Додати нове перевизначення ідентифікаторів." + +msgid "Add a new IPA location." +msgstr "Додати новий запис місця IPA." + +msgid "Add a new IPA new service." +msgstr "Додати нову службу IPA." + +msgid "Add a new IPA service." +msgstr "Додати нову службу IPA." + +msgid "Add a new Identity Provider server." +msgstr "Додати новий сервер надавача профілів." + +msgid "Add a new OTP token." +msgstr "Додати новий жетон OTP." + +msgid "Add a new RADIUS proxy server." +msgstr "Додати новий проксі-сервер RADIUS." + +msgid "Add a new SMB service." +msgstr "Додати нову службу SMB." + +msgid "Add a new User ID override." +msgstr "Додати нове перевизначення ідентифікатора користувача." + +msgid "Add a new YubiKey OTP token." +msgstr "Додати новий жетон OTP YubiKey." + +msgid "Add a new delegation." +msgstr "Додати нове уповноваження." + +msgid "Add a new group password policy." +msgstr "Додати нову групу правил для паролів." + +msgid "Add a new host." +msgstr "Додати новий запис вузла." + +msgid "Add a new hostgroup." +msgstr "Додати нову групу вузлів." + +msgid "Add a new netgroup." +msgstr "Додати нову мережеву групу." + +msgid "Add a new permission." +msgstr "Додати нові права доступу." + +msgid "Add a new privilege." +msgstr "Додати новий привілей." + +msgid "Add a new role." +msgstr "Додати нову роль." + +msgid "Add a new segment." +msgstr "Додати новий сегмент." + +msgid "Add a new self-service permission." +msgstr "Додати нові права доступу автослужби." + +msgid "Add a new stage user." +msgstr "Додати нового користувача етапу." + +msgid "Add a new subordinate id." +msgstr "Додати новий підлеглий ідентифікатор." + +msgid "Add a new topology suffix to be managed." +msgstr "Додати новий суфікс топології для керування." + +msgid "Add a new user." +msgstr "Додати нового користувача." + +msgid "Add a permission for per-forward zone access delegation." +msgstr "" +"Додати право доступу до делегування доступу на основі окремих зон " +"переспрямовування." + +msgid "Add a permission for per-zone access delegation." +msgstr "Додати права доступу до надання доступу до окремих зон." + +msgid "Add a system permission without an ACI" +msgstr "Додати права доступу до системи без ACI" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "Додати системні права доступу без ACI (внутрішня команда)" + +msgid "Add a vault." +msgstr "Додати сховище." + +#, python-brace-format +msgid "Add allow sudo command groups into sudo rule '${primary_key}'" +msgstr "Додати групи дозволу команд sudo до правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Add allow sudo commands into sudo rule '${primary_key}'" +msgstr "Додати команди дозволу sudo до правила sudo «${primary_key}»" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "" +"Додати пару атрибут/значення. Формат: атрибут=значення. Атрибут має бути\n" +"частиною схеми." + +msgid "Add an automember rule." +msgstr "Додати правило автоматичної участі." + +msgid "Add an option to the Sudo Rule." +msgstr "Додати пункт до правила sudo." + +msgid "Add and Add Another" +msgstr "Додати і додати ще" + +msgid "Add and Close" +msgstr "Додати і закрити" + +msgid "Add and Edit" +msgstr "Додати і змінити" + +msgid "Add automount key" +msgstr "Додати ключ автомонтування" + +msgid "Add automount location" +msgstr "Додати місце автомонтування" + +msgid "Add automount map" +msgstr "Додати карту автомонтування" + +msgid "Add certificate authority" +msgstr "Додати службу сертифікації" + +msgid "Add certificate identity mapping rule" +msgstr "Додати правило прив'язки сертифіката до профілю" + +msgid "Add certificate mapping data" +msgstr "Додати дані прив'язки сертифіката" + +#, python-brace-format +msgid "Add certificate profiles into CA ACL '${primary_key}'" +msgstr "Додати профілі сертифікації до ACL CA «${primary_key}»" + +msgid "Add certificates to host entry" +msgstr "Додати сертифікати до запису вузла" + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "Додати команди і групи команд sudo, яких стосується правило sudo." + +msgid "Add conditions to an automember rule." +msgstr "Додати умови до правила автоматичної участі." + +msgid "Add custom value" +msgstr "Додати нетипове значення" + +msgid "Add delegation" +msgstr "Додати уповноваження" + +#, python-brace-format +msgid "Add deny sudo command groups into sudo rule '${primary_key}'" +msgstr "Додати групи заборони команд sudo до правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Add deny sudo commands into sudo rule '${primary_key}'" +msgstr "Додати команди заборони sudo до правила sudo «${primary_key}»" + +msgid "Add domain" +msgstr "Додати домен" + +#, python-brace-format +msgid "Add exclusive condition into '${primary_key}'" +msgstr "Додати виключну умову до «${primary_key}»" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "" +"Додати запис переспрямування для сервера назв, розташованого у створеній зоні" + +msgid "Add group ID override" +msgstr "Додати перевизначення ідентифікатора групи" + +msgid "Add group for Sudo to execute as." +msgstr "Додати групу виконання до запису sudo." + +#, python-brace-format +msgid "Add groups as member managers for host group '${primary_key}'" +msgstr "" +"Додати групи як керівників учасниками для групи вузлів «${primary_key}»" + +#, python-brace-format +msgid "Add groups as member managers for user group '${primary_key}'" +msgstr "" +"Додати групи як керівників учасниками для групи користувачів «${primary_key}»" + +msgid "Add host" +msgstr "Додати вузол" + +#, python-brace-format +msgid "Add host '${primary_key}' into HBAC rules" +msgstr "Додати вузол «${primary_key}» до правил HBAC" + +#, python-brace-format +msgid "Add host '${primary_key}' into host groups" +msgstr "Додати вузол «${primary_key}» до груп вузлів" + +#, python-brace-format +msgid "Add host '${primary_key}' into netgroups" +msgstr "Додати вузол «${primary_key}» до мережевих груп" + +#, python-brace-format +msgid "Add host '${primary_key}' into roles" +msgstr "Додати вузол «${primary_key}» до ролей" + +#, python-brace-format +msgid "Add host '${primary_key}' into sudo rules" +msgstr "Додати вузол «${primary_key}» до правил sudo" + +msgid "Add host group" +msgstr "Додати групу вузлів" + +#, python-brace-format +msgid "Add host group '${primary_key}' into HBAC rules" +msgstr "Додати групу вузлів «${primary_key}» до правил HBAC" + +#, python-brace-format +msgid "Add host group '${primary_key}' into host groups" +msgstr "Додати групу вузлів «${primary_key}» до груп вузлів" + +#, python-brace-format +msgid "Add host group '${primary_key}' into netgroups" +msgstr "Додати групу вузлів «${primary_key}» до мережевих груп" + +#, python-brace-format +msgid "Add host group '${primary_key}' into sudo rules" +msgstr "Додати групу вузлів «${primary_key}» до правил sudo" + +#, python-brace-format +msgid "Add host groups into CA ACL '${primary_key}'" +msgstr "Додати групи вузлів до ACL CA «${primary_key}»" + +#, python-brace-format +msgid "Add host groups into HBAC rule '${primary_key}'" +msgstr "Додати групи вузлів до правила HBAC «${primary_key}»" + +#, python-brace-format +msgid "Add host groups into SELinux user map '${primary_key}'" +msgstr "Додати групи вузлів до прив'язки користувачів SELinux «${primary_key}»" + +#, python-brace-format +msgid "Add host groups into host group '${primary_key}'" +msgstr "Додати групи вузлів до групи вузлів «${primary_key}»" + +#, python-brace-format +msgid "Add host groups into netgroup '${primary_key}'" +msgstr "Додати групи вузлів до мережевої групи «${primary_key}»" + +#, python-brace-format +msgid "Add host groups into role '${primary_key}'" +msgstr "Додати групи вузлів до ролі «${primary_key}»" + +#, python-brace-format +msgid "Add host groups into sudo rule '${primary_key}'" +msgstr "Додати групи вузлів до правила sudo «${primary_key}»" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "Додати вузли та групи вузлів, яких стосується правило sudo." + +#, python-brace-format +msgid "Add hosts into CA ACL '${primary_key}'" +msgstr "Додати вузли до ACL CA «${primary_key}»" + +#, python-brace-format +msgid "Add hosts into HBAC rule '${primary_key}'" +msgstr "Додати вузли до правила HBAC «${primary_key}»" + +#, python-brace-format +msgid "Add hosts into SELinux user map '${primary_key}'" +msgstr "Додати вузли до прив'язки користувачів SELinux «${primary_key}»" + +#, python-brace-format +msgid "Add hosts into host group '${primary_key}'" +msgstr "Додати вузли до групи вузлів «${primary_key}»" + +#, python-brace-format +msgid "Add hosts into netgroup '${primary_key}'" +msgstr "Додати вузли до мережевої групи «${primary_key}»" + +#, python-brace-format +msgid "Add hosts into role '${primary_key}'" +msgstr "Додати вузли до ролі «${primary_key}»" + +#, python-brace-format +msgid "Add hosts into sudo rule '${primary_key}'" +msgstr "Додати вузли до правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Add hosts managing host '${primary_key}'" +msgstr "Додати вузол керування вузлами «${primary_key}»" + +#, python-brace-format +msgid "Add hosts managing service '${primary_key}'" +msgstr "Додати службу керування вузлами «${primary_key}»" + +msgid "Add hosts that can manage this host." +msgstr "Додати записи вузлів, які можуть керувати цим вузлом." + +msgid "Add hosts that can manage this service." +msgstr "Додати вузли, які можуть керувати цією службою." + +#, python-brace-format +msgid "Add inclusive condition into '${primary_key}'" +msgstr "Додати включну умову до «${primary_key}»" + +msgid "Add member to a named service delegation rule." +msgstr "Додати запис учасника до іменованого правила делегування служб." + +msgid "Add member to a named service delegation target." +msgstr "Додати запис учасника до іменованого призначення делегування служб." + +msgid "Add members to Sudo Command Group." +msgstr "Додати учасників до групи команд sudo." + +msgid "Add members to a group." +msgstr "Додати учасників до групи." + +msgid "Add members to a hostgroup." +msgstr "Додати записи до групи вузлів." + +msgid "Add members to a netgroup." +msgstr "Додати учасників до мережевої групи." + +msgid "Add members to a permission." +msgstr "Додати учасників до запису прав доступу." + +msgid "Add members to a privilege." +msgstr "Додати учасників до запису привілею." + +msgid "Add members to a role." +msgstr "Додати учасників до запису ролі." + +msgid "Add members to a vault." +msgstr "Додати записи учасників сховища." + +msgid "Add members to an HBAC service group." +msgstr "Додати учасників до групи служб HBAC." + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "" +"Додавати перенесені записи користувачів без групи до типової групи (типове " +"значення: true)" + +msgid "Add netgroup" +msgstr "Додати мережеву групу" + +#, python-brace-format +msgid "Add netgroup '${primary_key}' into netgroups" +msgstr "Додати мережеву групу «${primary_key}» до мережевих груп" + +#, python-brace-format +msgid "Add netgroups into netgroup '${primary_key}'" +msgstr "Додати мережеві групи до мережевої групи «${primary_key}»" + +msgid "Add new DNS resource record." +msgstr "Додати новий запис ресурсу DNS." + +msgid "Add new certificates to a service" +msgstr "Додати нові сертифікати до запису служби" + +msgid "Add new principal alias to a service" +msgstr "Додати нову альтернативну назву реєстраційного запису до служби" + +msgid "Add new principal alias to host entry" +msgstr "Додати новий псевдонім реєстраційного запису до запису вузла" + +msgid "Add new principal alias to the stageuser entry" +msgstr "" +"Додати новий псевдонім реєстраційного запису до запису користувача етапу" + +msgid "Add new principal alias to the user entry" +msgstr "Додати новий псевдонім реєстраційного запису до запису користувача" + +msgid "Add one or more certificate mappings to the stage user entry." +msgstr "" +"Додати одну або декілька прив’язок сертифікатів до запису користувача етапу." + +msgid "Add one or more certificate mappings to the user entry." +msgstr "Додати одну або декілька прив’язок сертифікатів до запису користувача." + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "Додати один або декілька сертифікатів запису idoverrideuser" + +msgid "Add one or more certificates to the stageuser entry" +msgstr "Додати один або декілька сертифікатів запису користувача етапу" + +msgid "Add one or more certificates to the user entry" +msgstr "Додати один або декілька сертифікатів до запису користувача" + +msgid "Add owners to a vault container." +msgstr "Додати записи власників до контейнера сховища." + +msgid "Add owners to a vault." +msgstr "Додати записи власників до сховища." + +msgid "Add password policy" +msgstr "Додати правила паролів" + +msgid "Add permission" +msgstr "Додати права доступу" + +msgid "Add permissions to a privilege." +msgstr "Додати права доступу до привілею." + +msgid "Add principal" +msgstr "Додати реєстраційний запис" + +msgid "Add privilege" +msgstr "Додати привілеї" + +#, python-brace-format +msgid "Add privilege '${primary_key}' into permissions" +msgstr "Додати привілеї «${primary_key}» до дозволів" + +#, python-brace-format +msgid "Add privileges into permission '${primary_key}'" +msgstr "Додати привілеї до дозволів «${primary_key}»" + +msgid "Add privileges to a role." +msgstr "Додати привілеї до запису ролі." + +msgid "Add profiles to a CA ACL." +msgstr "Додати профілі до CA ACL." + +msgid "Add role" +msgstr "Додати роль" + +#, python-brace-format +msgid "Add role '${primary_key}' into privileges" +msgstr "Додати роль «${primary_key}» до привілеїв" + +#, python-brace-format +msgid "Add roles into privilege '${primary_key}'" +msgstr "Додати ролі до привілеїв «${primary_key}»" + +msgid "Add rule" +msgstr "Додати правило" + +msgid "Add self service permission" +msgstr "Додати права автослужби" + +msgid "Add service" +msgstr "Додати службу" + +#, python-brace-format +msgid "Add service '${primary_key}' into roles" +msgstr "Додати службу «${primary_key}» до ролей" + +#, python-brace-format +msgid "Add services into CA ACL '${primary_key}'" +msgstr "Додати служби до ACL CA «${primary_key}»" + +#, python-brace-format +msgid "Add services into members of vault '${primary_key}'" +msgstr "Додати служби до списку учасників сховища «${primary_key}»" + +#, python-brace-format +msgid "Add services into owners of vault '${primary_key}'" +msgstr "Додати служби до списку власників сховища «${primary_key}»" + +#, python-brace-format +msgid "Add services into role '${primary_key}'" +msgstr "Додати служби до ролі «${primary_key}»" + +#, python-brace-format +msgid "Add services into user group '${primary_key}'" +msgstr "Додати служби до групи користувачів «${primary_key}»" + +msgid "Add services to a CA ACL." +msgstr "Додати служби до CA ACL." + +msgid "Add services to an HBAC rule." +msgstr "Додати служби до правила HBAC." + +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "Додати вузли джерела та групи вузлів з правила HBAC." + +msgid "Add source hosts and hostgroups to an HBAC rule." +msgstr "Додати вузли джерела та групи вузлів до правила HBAC." + +msgid "Add stage user" +msgstr "Додати користувача етапу" + +msgid "Add subid" +msgstr "Додати subid" + +msgid "Add sudo command" +msgstr "Додати команду sudo" + +#, python-brace-format +msgid "Add sudo command '${primary_key}' into sudo command groups" +msgstr "Додати команду sudo «${primary_key}» до груп команд sudo" + +msgid "Add sudo command group" +msgstr "Додати групу команд sudo" + +#, python-brace-format +msgid "Add sudo commands into sudo command group '${primary_key}'" +msgstr "Додати команди sudo до групи команд sudo «${primary_key}»" + +msgid "Add sudo option" +msgstr "Додати параметр sudo" + +msgid "Add sudo rule" +msgstr "Додати правило sudo" + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "Додати вузли і групи вузлів призначення до CA ACL." + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "Додати вузли призначення та групи вузлів до правила HBAC." + +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "" +"Додати вузли призначення та групи вузлів до правила карти користувачів " +"SELinux." + +msgid "Add target to a named service delegation rule." +msgstr "Додати ціль до іменованого правила делегування служб." + +msgid "Add target to a named service delegation." +msgstr "Додати ціль до делегування іменованої служби." + +msgid "Add the host to DNS with this IP address" +msgstr "Додати запис вузла до DNS з цією IP-адресою" + +msgid "Add to default group" +msgstr "Додати до типової групи" + +msgid "Add topology segment" +msgstr "Додати сегмент топології" + +msgid "Add trust" +msgstr "Додати довіру" + +msgid "Add user" +msgstr "Додати користувача" + +#, python-brace-format +msgid "Add user '${primary_key}' into HBAC rules" +msgstr "Додати користувача «${primary_key}» до правил HBAC" + +#, python-brace-format +msgid "Add user '${primary_key}' into netgroups" +msgstr "Додати користувача «${primary_key}» до списку мережевих груп" + +#, python-brace-format +msgid "Add user '${primary_key}' into roles" +msgstr "Додати користувача «${primary_key}» до ролей" + +#, python-brace-format +msgid "Add user '${primary_key}' into sudo rules" +msgstr "Додати користувача «${primary_key}» до правил sudo" + +#, python-brace-format +msgid "Add user '${primary_key}' into user groups" +msgstr "Додати користувача «${primary_key}» до списку груп користувачів" + +msgid "Add user ID override" +msgstr "Додати перевизначення ідентифікатора користувача" + +#, python-brace-format +msgid "Add user ID override into user group '${primary_key}'" +msgstr "" +"Додати перевизначення ідентифікатора користувача до групи користувачів " +"«${primary_key}»" + +msgid "Add user group" +msgstr "Додати групу користувачів" + +#, python-brace-format +msgid "Add user group '${primary_key}' into HBAC rules" +msgstr "Додати групу користувачів «${primary_key}» до правил HBAC" + +#, python-brace-format +msgid "Add user group '${primary_key}' into netgroups" +msgstr "Додати групу користувачів «${primary_key}» до списку мережевих груп" + +#, python-brace-format +msgid "Add user group '${primary_key}' into roles" +msgstr "Додати групу користувачів «${primary_key}» до списку ролей" + +#, python-brace-format +msgid "Add user group '${primary_key}' into sudo rules" +msgstr "Додати групу користувачів «${primary_key}» до правил sudo" + +#, python-brace-format +msgid "Add user group '${primary_key}' into user groups" +msgstr "Додати групу користувачів «${primary_key}» до списку груп користувачів" + +#, python-brace-format +msgid "Add user groups into CA ACL '${primary_key}'" +msgstr "Додати групи користувачів до ACL CA «${primary_key}»" + +#, python-brace-format +msgid "Add user groups into HBAC rule '${primary_key}'" +msgstr "Додати групи користувачів до правила HBAC «${primary_key}»" + +#, python-brace-format +msgid "Add user groups into SELinux user map '${primary_key}'" +msgstr "" +"Додати групи користувачів до прив'язки користувачів SELinux «${primary_key}»" + +#, python-brace-format +msgid "Add user groups into members of vault '${primary_key}'" +msgstr "Додати групи користувачів до списку учасників сховища «${primary_key}»" + +#, python-brace-format +msgid "Add user groups into netgroup '${primary_key}'" +msgstr "Додати групи користувачів до мережевої групи «${primary_key}»" + +#, python-brace-format +msgid "Add user groups into owners of vault '${primary_key}'" +msgstr "Додати групи користувачів до списку власників сховища «${primary_key}»" + +#, python-brace-format +msgid "Add user groups into role '${primary_key}'" +msgstr "Додати групи користувачів до ролі «${primary_key}»" + +#, python-brace-format +msgid "Add user groups into sudo rule '${primary_key}'" +msgstr "Додати групи користувачів до правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Add user groups into user group '${primary_key}'" +msgstr "Додати групи користувачів до групи користувачів «${primary_key}»" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "Додати записи користувачів та груп, яких стосується правило sudo." + +msgid "Add users and groups for Sudo to execute as." +msgstr "" +"Додати користувачів та групи для виконання команд sudo від їхнього імені." + +msgid "Add users and groups to a CA ACL." +msgstr "Додати користувачів і групи до CA ACL." + +msgid "Add users and groups to an HBAC rule." +msgstr "Додати користувачів та групи до правила HBAC." + +msgid "Add users and groups to an SELinux User Map rule." +msgstr "Додати користувачів і групи до правила карти користувачів SELinux." + +#, python-brace-format +msgid "Add users as member managers for host group '${primary_key}'" +msgstr "" +"Додати користувачів як керівників учасниками для групи вузлів " +"«${primary_key}»" + +#, python-brace-format +msgid "Add users as member managers for user group '${primary_key}'" +msgstr "" +"Додати користувачів як керівників учасниками для групи користувачів " +"«${primary_key}»" + +#, python-brace-format +msgid "Add users into CA ACL '${primary_key}'" +msgstr "Додати користувачів до ACL CA «${primary_key}»" + +#, python-brace-format +msgid "Add users into HBAC rule '${primary_key}'" +msgstr "Додати користувачів до правила HBAC «${primary_key}»" + +#, python-brace-format +msgid "Add users into SELinux user map '${primary_key}'" +msgstr "Додати користувачів до прив'язки користувачів SELinux «${primary_key}»" + +#, python-brace-format +msgid "Add users into members of vault '${primary_key}'" +msgstr "Додати користувачів до списку учасників сховища «${primary_key}»" + +#, python-brace-format +msgid "Add users into netgroup '${primary_key}'" +msgstr "Додати користувачів до мережевої групи «${primary_key}»" + +#, python-brace-format +msgid "Add users into owners of vault '${primary_key}'" +msgstr "Додати користувачів до списку власників сховища «${primary_key}»" + +#, python-brace-format +msgid "Add users into role '${primary_key}'" +msgstr "Додати користувачів до ролі «${primary_key}»" + +#, python-brace-format +msgid "Add users into sudo rule '${primary_key}'" +msgstr "Додати користувачів до правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Add users into user group '${primary_key}'" +msgstr "Додати користувачів до групи користувачів «${primary_key}»" + +#, python-brace-format +msgid "Add users managing OTP token '${primary_key}'" +msgstr "Додати ключ керування записами користувачів OTP «${primary_key}»" + +msgid "Add users that can manage members of this group." +msgstr "Додати записи користувачів, які можуть керувати учасниками цієї групи." + +msgid "Add users that can manage members of this hostgroup." +msgstr "" +"Додати записи користувачів, які можуть керувати учасниками цієї групи вузлів." + +msgid "Add users that can manage this token." +msgstr "Додати записи користувачів, які можуть керувати цим жетоном." + +msgid "Add vault" +msgstr "Додати сховище" + +#, python-format +msgid "Added %(map)s" +msgstr "Додано %(map)s" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "Додано %(src)s до %(dst)s" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "Додано запис довіри Active Directory для області «%(value)s»" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "Додано CA ACL «%(value)s»" + +#, python-format +msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Додано правило прив’язування сертифікатів до профілів «%(value)s»" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "Додано перевизначення ідентифікаторів групи «%(value)s»" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "Додано правило HBAC «%(value)s»" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "Додано службу HBAC «%(value)s»" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "Додано групу служб HBAC «%(value)s»" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "Додано перегляд ідентифікаторів «%(value)s»" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "Додано перевизначення ідентифікаторів «%(value)s»" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "Додано діапазон ідентифікаторів «%(value)s»" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "Додано запис місця IPA «%(value)s»" + +#, python-format +msgid "Added Identity Provider server \"%(value)s\"" +msgstr "Додано сервер надавача профілів «%(value)s»" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "Додано жетон OTP «%(value)s»" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "Додано проксі-сервер RADIUS «%(value)s»" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "Додано карту користувачів SELinux «%(value)s»" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "Додано команду sudo «%(value)s»" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "Додано групу команд sudo «%(value)s»" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "Додано правило sudo «%(value)s»" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "Додано перевизначення ідентифікатора користувача «%(value)s»" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "Додано правило автоматичної участі «%(value)s»" + +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "Додано опосередковану карту автоматичного монтування «%(value)s»" + +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "Додано ключ автоматичного монтування «%(value)s»" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "Додано місце автоматичного монтування «%(value)s»" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "Додано карту автоматичного монтування «%(value)s»" + +#, python-format +msgid "Added certificate mappings to user \"%(value)s\"" +msgstr "Додано прив’язки сертифікатів до запису користувача «%(value)s»" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "Додано сертифікати до запису вузла «%(value)s»" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "Додано сертифікати до запису idoverrideuser «%(value)s»" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "Додано сертифікати до реєстраційного запис служби «%(value)s»" + +#, python-format +msgid "Added certificates to stageuser \"%(value)s\"" +msgstr "Додано сертифікати до запису користувача етапу «%(value)s»" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "Додано сертифікати до запису користувача «%(value)s»" + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "Додано умови до «%(value)s»" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "Додано уповноваження «%(value)s»" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "Додано групу «%(value)s»" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "Додано вузол «%(value)s»" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "Додано групу вузлів «%(value)s»" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "Додано групу мережеву групу «%(value)s»" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "Додано новий запис сервера DNS «%(value)s»" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "Додано нові псевдоніми до запису вузла «%(value)s»" + +#, python-format +msgid "Added new aliases to stageuser \"%(value)s\"" +msgstr "Додано нові псевдоніми до запису користувача етапу «%(value)s»" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "Додано нові псевдоніми реєстраційного запису служби «%(value)s»" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "Додано нові псевдоніми до запису користувача «%(value)s»" + +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "До правила sudo «%(rule)s» додано параметр «%(option)s»" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "Додано права доступу «%(value)s»" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "Додано привілей «%(value)s»" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "Додано роль «%(value)s»" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "Додано сегмент «%(value)s»" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "Додано самообслуговування «%(value)s»" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "Додано службу «%(value)s»" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "Додано правило делегування служб «%(value)s»" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "Додано ціль делегування служб «%(value)s»" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "Додано користувача етапу «%(value)s»" + +#, python-format +msgid "Added subordinate id \"%(value)s\"" +msgstr "Додано підлеглий ідентифікатор «%(value)s»" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "Додано системні права доступу «%(value)s»" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "Додано суфікс топології «%(value)s»" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "Додано користувача «%(value)s»" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "Додано сховище «%(value)s»" + +msgid "Additional instructions:" +msgstr "Додаткові настанови:" + +msgid "Address not valid, can't redirect" +msgstr "Адреса є некоректною. Переспрямування неможливе." + +msgid "Administrative account" +msgstr "Адміністративний обліковий запис" + +msgid "Administrator e-mail address" +msgstr "Адреса електронної пошти адміністратора" + +msgid "Advertised by servers" +msgstr "Повідомлено серверами" + +msgid "Affiliation Changed" +msgstr "Змінено місце роботи" + +msgid "Agreements deleted" +msgstr "Угоди вилучено" + +msgid "Algorithm" +msgstr "Алгоритм" + +msgid "All" +msgstr "Всі" + +msgid "All attributes to which the permission applies" +msgstr "Усі атрибути, яких стосуються ці права доступу" + +msgid "All commands should at least have a result" +msgstr "Виконання всіх команд має призводити до якогось результату" + +#, python-format +msgid "" +"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" +msgstr "" +"Не вдалося отримати відповідь на запит щодо зворотної зони DNS %(revdns)s " +"від жодного із серверів назв" + +msgid "All target filters, including those implied by type and memberof" +msgstr "" +"Усі фільтри призначення, зокрема ті, які визначаються типом та членством" + +msgid "Allow" +msgstr "Дозволити" + +msgid "Allow PTR sync" +msgstr "Дозволити PTR-синхронізацію" + +msgid "Allow access from the trusted domain" +msgstr "Дозволити доступ з довіреного домену" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "Дозволити додавання зовнішніх учасників поза IPA з довірених доменів" + +msgid "Allow dynamic updates." +msgstr "Дозволити динамічні оновлення." + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "" +"Дозволити повернення до резервного варіанта LDAP DC AD під час визначення " +"адрес довірених об’єктів AD. Лише для двобічних відносин довіри." + +#, python-brace-format +msgid "Allow host groups to create keytab of '${primary_key}'" +msgstr "Дозволити групам вузлів створювати таблицю ключів «${primary_key}»" + +#, python-brace-format +msgid "Allow host groups to retrieve keytab of '${primary_key}'" +msgstr "Дозволити групам вузлів отримувати таблицю ключів «${primary_key}»" + +#, python-brace-format +msgid "Allow hosts to create keytab of '${primary_key}'" +msgstr "Дозволити вузлам створювати таблицю ключів «${primary_key}»" + +#, python-brace-format +msgid "Allow hosts to retrieve keytab of '${primary_key}'" +msgstr "Дозволити вузлам отримувати таблицю ключів «${primary_key}»" + +msgid "Allow in-line DNSSEC signing" +msgstr "Дозволити вбудоване підписування DNSSEC" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "Дозволити вбудоване підписування DNSSEC записів у зоні" + +msgid "Allow query" +msgstr "Дозволити запит" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "Дозволити синхронізацію прямих (A, AAAA) і зворотних (PTR) записів" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "" +"Дозволити у зоні синхронізацію прямих (A, AAAA) і зворотних (PTR) записів" + +msgid "Allow transfer" +msgstr "Дозволити перенесення" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "Дозволити використання ресурсів IPA доменом правила довіри" + +#, python-brace-format +msgid "Allow user groups to create keytab of '${primary_key}'" +msgstr "" +"Дозволити групам користувачів створювати сховище ключів «${primary_key}»" + +#, python-brace-format +msgid "Allow user groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Дозволити групам користувачів отримувати сховище ключів «${primary_key}»" + +#, python-brace-format +msgid "Allow users to create keytab of '${primary_key}'" +msgstr "Дозволити користувачам створювати таблицю ключів «${primary_key}»" + +#, python-brace-format +msgid "Allow users to retrieve keytab of '${primary_key}'" +msgstr "Дозволити користувачам отримувати таблицю ключів «${primary_key}»" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" +"Дозволити користувачам, групам, вузлам і групам вузлів створювати таблицю " +"ключів цього вузла." + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "" +"Дозволити користувачам, групам, вузлам і групам вузлів створювати таблицю " +"ключів цієї служби." + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "" +"Дозволити користувачам, групам, вузлам і групам вузлів отримувати таблицю " +"ключів цього вузла." + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" +"Дозволити користувачам, групам, вузлам і групам вузлів отримувати таблицю " +"ключів цієї служби." + +msgid "Allowed Target" +msgstr "Дозволена ціль" + +msgid "Allowed to Impersonate" +msgstr "Дозволено виконувати імперсонацію" + +msgid "Allowed to create keytab" +msgstr "Дозволено створювати таблицю ключів" + +msgid "Allowed to retrieve keytab" +msgstr "Дозволено отримувати таблицю ключів" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "Уможливлює перенесення, незважаючи на використання додатка compat" + +msgid "Already registered" +msgstr "Вже зареєстровано" + +msgid "Alternative UPN suffixes" +msgstr "Альтернативні суфікси UPN" + +msgid "Altitude" +msgstr "Висота" + +msgid "Always ask" +msgstr "Завжди питати" + +msgid "Ambiguous search, user domain was not specified" +msgstr "Неоднозначні параметри пошуку: не вказано домену користувача" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "Основний вузол IPA не можна вилучати або вимикати" + +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "Сталася помилка (${error})" + +msgid "An error occurred while fetching dns zones." +msgstr "Під час спроби отримання даних щодо зон DNS сталася помилка." + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" +"Для цього зв’язку довіри вже існує діапазон ідентифікаторів. Вам слід або " +"вилучити попередній діапазон, або виключити з команди параметри --base-id/--" +"range-size." + +msgid "An interval between regular polls of the name server for new DNS zones" +msgstr "Інтервал між регулярними опитуваннями сервера назв щодо нових зон DNS" + +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "Не вдалося визначити прив’язку «%(anchor)s»." + +msgid "Anchor to override" +msgstr "Прив’язка для перевизначення" + +msgid "Any CA" +msgstr "Будь-який CA" + +msgid "Any Command" +msgstr "Будь-яка команда" + +msgid "Any Group" +msgstr "Будь-яка група" + +msgid "Any Host" +msgstr "Будь-який вузол" + +msgid "Any Profile" +msgstr "Будь-який профіль" + +msgid "Any Service" +msgstr "Будь-яка служба" + +msgid "Anyone" +msgstr "Будь-хто" + +msgid "Applied to hosts" +msgstr "Застосовується до вузлів" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" +"Застосовує перегляд ідентифікаторів до вказаних вузлів або поточних " +"учасників вказаних груп вузлів. Якщо до вузла застосовується якийсь інший " +"перегляд ідентифікаторів, його буде перевизначено." + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" +"Застосовує перегляд ідентифікаторів до вказаних вузлів або поточних " +"учасників вказаних груп вузлів. Якщо до вузла застосовується якийсь інший " +"перегляд ідентифікаторів, його буде перевизначено." + +msgid "Apply" +msgstr "Застосувати" + +msgid "Apply ACI to your own entry (self)" +msgstr "Застосувати ACI до вашого власного запису (self)" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts" +msgstr "Застосувати ${primary_key} перегляду ідентифікаторів до вузлів" + +#, python-brace-format +msgid "Apply ID view '${primary_key}' on hosts of host groups" +msgstr "" +"Застосувати ${primary_key} перегляду ідентифікаторів до вузлів груп вузлів" + +msgid "Apply to host groups" +msgstr "Застосувати до груп вузлів" + +msgid "Apply to hosts" +msgstr "Застосувати до вузлів" + +msgid "Arbitrary string identifying the segment" +msgstr "Довільний рядок для ідентифікації сегмента" + +msgid "Archive data into a vault." +msgstr "Архівувати дані до сховища." + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "Дані архівовано до сховища «%(value)s»" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "" +"Ви справді бажаєте виконати щодо користувача дію «${action}»?
Зміни буде " +"внесено негайно." + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "Ви справді хочете активувати ${object}?" + +msgid "Are you sure you want to activate selected users?" +msgstr "Ви справді хочете активувати позначені записи користувачів?" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "Ви справді хочете додати права доступу для зони DNS ${object}?" + +#, python-brace-format +msgid "" +"Are you sure you want to auto-assign a subordinate id to user ${object}?" +msgstr "" +"Ви справді хочете автоматично призначити підлеглий ідентифікатор для " +"користувача ${object}?" + +msgid "Are you sure you want to change default group?" +msgstr "Ви справді хочете змінити типову групу?" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "Ви справді хочете вилучити ${object}?" + +msgid "Are you sure you want to delete selected entries?" +msgstr "Ви справді бажаєте вилучити позначені записи?" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "Ви справді хочете вимкнути ${object}?" + +msgid "Are you sure you want to disable selected entries?" +msgstr "Ви справді хочете вимкнути позначені записи?" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "Ви справді хочете увімкнути ${object}?" + +msgid "Are you sure you want to enable selected entries?" +msgstr "Ви справді бажаєте увімкнути позначені записи?" + +msgid "Are you sure you want to proceed with the action?" +msgstr "Ви справді хочете виконати цю дію?" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "Ви справді хочете перебудувати записи автоматичної участі?" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "Ви справді хочете вилучити права доступу для зони DNS ${object}?" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "Ви справді хочете відновити ${object}?" + +msgid "Are you sure you want to restore selected users?" +msgstr "Ви справді хочете відновити позначені записи користувачів?" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "Ви справді хочете виставити ${object}?" + +msgid "Are you sure you want to stage selected users?" +msgstr "Ви справді хочете зробити користувачами етапу позначених користувачів?" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "" +"Ви справді хочете скасувати застосування перегляду ідентифікаторів до " +"позначених записів?" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "Ви справді хочете розблокувати користувача ${object}?" + +msgid "Are you sure you want to unprovision this host?" +msgstr "Ви справді бажаєте скасувати передбачення цього вузла?" + +msgid "Are you sure you want to unprovision this service?" +msgstr "Ви справді бажаєте скасувати передбачення цієї служби?" + +msgid "Arguments to details function" +msgstr "Аргументи до функції details" + +msgid "As Whom" +msgstr "Від імені" + +msgid "Asks for a non-random password to use for the principal" +msgstr "" +"Запитати невипадковий пароль, який слід використати для реєстраційного запису" + +msgid "Assigned ID View" +msgstr "Перегляд призначених ідентифікаторів" + +msgid "Assigned manager of the token (default: self)" +msgstr "Призначений керівник ключа (типове значення: self)" + +msgid "Assigned subids" +msgstr "Призначені subid-и" + +msgid "Assigned user of the token (default: self)" +msgstr "Призначений користувач ключа (типове значення: self)" + +msgid "Asymmetric" +msgstr "Асиметричний" + +msgid "At least the domain or IP address should be specified" +msgstr "Слід вказати принаймні домен або IP-адресу" + +msgid "Attribute" +msgstr "Атрибут" + +msgid "Attribute Key" +msgstr "Ключ атрибута" + +msgid "Attribute breakdown" +msgstr "Розбиття за атрибутами" + +msgid "Attribute for user identity in OAuth 2.0 userinfo" +msgstr "Атрибут для профілю користувача у даних користувача OAuth 2.0" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" +"Атрибут для фільтрування за формальним виразом. Приклад: fqdn для вузла або " +"manager для користувача" + +msgid "Attributes" +msgstr "Атрибути" + +msgid "Attributes for total update" +msgstr "Атрибути для загального оновлення" + +msgid "" +"Attributes that are not replicated to a consumer server during a fractional " +"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +msgstr "" +"Атрибути, для яких не відбуватиметься реплікація до сервера споживання під " +"час часткового оновлення. Наприклад, `(objectclass=*) $ EXCLUDE " +"accountlockout memberof" + +msgid "" +"Attributes that are not replicated to a consumer server during a total " +"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" +msgstr "" +"Атрибути, для яких не відбуватиметься реплікація до сервера споживання під " +"час загального оновлення. Наприклад, (objectclass=*) $ EXCLUDE accountlockout" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "Атрибути, які буде проігноровано для записів груп у DS" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "Атрибути, які буде проігноровано для записів користувачів у DS" + +msgid "Attributes to replicate" +msgstr "Атрибути для реплікації" + +msgid "Attributes to strip" +msgstr "Атрибути, які слід прибрати" + +msgid "Attributes to which the delegation applies" +msgstr "Атрибути, до яких застосовується уповноваження" + +msgid "Attributes to which the permission applies" +msgstr "Атрибути, до яких застосовується правило доступу" + +msgid "Attributes to which the permission applies by default" +msgstr "Атрибути, до яких типово застосовується правило доступу" + +msgid "Attributes to which the permission applies." +msgstr "Атрибути, до яких застосовується правило доступу." + +msgid "Audit" +msgstr "Аудит" + +msgid "Authenticating" +msgstr "Розпізнавання" + +msgid "Authentication" +msgstr "Розпізнавання" + +msgid "Authentication Indicators" +msgstr "Індикатори розпізнавання" + +msgid "Authentication indicator" +msgstr "Індикатор розпізнавання" + +msgid "Authentication indicators" +msgstr "Індикатори розпізнавання" + +msgid "Authentication with Kerberos failed" +msgstr "Не вдалося пройти розпізнавання за допомогою Kerberos" + +msgid "Authentication with personal certificate failed" +msgstr "Не вдалося пройти розпізнавання за особистим сертифікатом" + +msgid "Authoritative nameserver" +msgstr "Основний сервер назв" + +msgid "Authoritative nameserver change" +msgstr "Зміна основного сервера назв" + +msgid "Authoritative nameserver domain name" +msgstr "Назва домену основного сервера назв" + +msgid "Authority ID" +msgstr "Ід. центру" + +msgid "Authorization URI" +msgstr "Адреса уповноваження" + +msgid "Auto Membership Rule" +msgstr "Правило автоматичної участі" + +msgid "Auto Membership is not configured" +msgstr "Автоматичну участь не налаштовано" + +msgid "Auto assign subordinate ids" +msgstr "Автоматично призначати підлеглі ідентифікатори" + +msgid "Auto creation of private groups, one of allowed values" +msgstr "Автоматичне створення приватних груп, одне з дозволених значень" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "Правило автоматичної участі: %s не знайдено!" + +msgid "Auto private groups" +msgstr "Автоматичні приватні групи" + +msgid "Autogenerated" +msgstr "Створено автоматично" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "" +"Спроба автоматичного оновлення записів системи DNS зазнала невдачі. Будь " +"ласка, повторно запустіть оновлення записів системи вручну, щоб отримати " +"список пропущених записів." + +msgid "Automember" +msgstr "Автоматична участь" + +msgid "Automember Rule" +msgstr "Правило автоматичної участі" + +msgid "Automember rebuild membership task completed" +msgstr "Завдання з перезбирання правил автоматичної участі виконано" + +msgid "Automember rebuild membership task started" +msgstr "Виконується завдання з перебудови записів автоматичної участі" + +msgid "Automount" +msgstr "Автоматичне монтування" + +msgid "Automount Key" +msgstr "Ключ автомонтування" + +msgid "Automount Keys" +msgstr "Ключі автомонтування" + +msgid "Automount Location" +msgstr "Запис автомонтування" + +msgid "Automount Location Settings" +msgstr "Параметри запису автомонтування" + +msgid "Automount Locations" +msgstr "Записи автомонтування" + +msgid "Automount Map" +msgstr "Карта автомонтування" + +msgid "Automount Maps" +msgstr "Карти автоматичного монтування" + +msgid "Automount key name." +msgstr "Назва ключа автоматичного монтування." + +msgid "Automount key object." +msgstr "Об’єкт ключа автоматичного монтування." + +msgid "Automount location name." +msgstr "Адреса автомонтування." + +msgid "Automount map name." +msgstr "Назва карти автоматичного монтування." + +msgid "Automount master file." +msgstr "Основний файл automount." + +msgid "Available" +msgstr "Доступний" + +msgid "BIND update policy" +msgstr "Правила оновлення BIND" + +msgid "Back" +msgstr "Назад" + +msgid "Back to Top" +msgstr "Повернутися до початку" + +msgid "Bad format in credentials cache" +msgstr "Помилковий формат кешу реєстраційних даних" + +msgid "Bad or unsupported salt type.\n" +msgstr "Помилковий або непідтримуваний тип солі (salt).\n" + +msgid "Bad search filter" +msgstr "Помилковий фільтр пошуку" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "Помилковий фільтр пошуку %(info)s" + +msgid "Base DN" +msgstr "Кореневий DN" + +msgid "Base DN on remote LDAP server" +msgstr "Основний DN на віддаленому сервері LDAP" + +msgid "Base ID" +msgstr "Основа ID" + +msgid "Base URL" +msgstr "Базова адреса" + +msgid "Base URL for IdP provider templates" +msgstr "Базова адреса для шаблонів надавача IdP" + +msgid "Base for certificate subjects (OU=Test,O=Example)" +msgstr "Основа для створення записів об’єктів сертифікації (OU=Test,O=Example)" + +msgid "Base-64 encoded certificate." +msgstr "Сертифікат у кодуванні Base-64." + +msgid "Base-64 encoded host certificate" +msgstr "Сертифікат вузла у кодуванні Base-64" + +msgid "Base-64 encoded server certificate" +msgstr "Сертифікат сервера у кодуванні Base-64" + +msgid "Base-64 encoded service certificate" +msgstr "Сертифікат служби у кодуванні Base-64" + +msgid "Base-64 encoded user certificate" +msgstr "Сертифікат користувача у кодуванні Base-64" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Помилка декодування Base64: %(reason)s" + +msgid "Binary data to archive" +msgstr "Двійкові дані для архівування" + +msgid "Bind DN" +msgstr "DN для прив'язки" + +#, c-format +msgid "Bind password already provided (-w).\n" +msgstr "Пароль до Bind вже вказано (-w).\n" + +#, c-format +msgid "Bind password required when using a bind DN (-w or -W).\n" +msgstr "Для використання DN bind (-w або -W) потрібен пароль до bind.\n" + +msgid "Bind rule type" +msgstr "Тип правила прив’язування" + +msgid "Brief description of this profile" +msgstr "Короткий опис профілю" + +msgid "CA" +msgstr "CA" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "Службу сертифікації «%s» вимкнено" + +msgid "CA ACL" +msgstr "CA ACL" + +msgid "CA ACLs" +msgstr "CA ACL" + +msgid "CA Compromise" +msgstr "Компрометація CA" + +msgid "CA category" +msgstr "Категорія CA" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "" +"не можна встановлювати для категорії CA значення «all», доки є записи " +"дозволених CA" + +msgid "CA category the ACL applies to" +msgstr "Категорія CA, до якої застосовується ACL" + +msgid "CA certificate" +msgstr "Сертифікат CA" + +msgid "CA is not configured" +msgstr "CA не налаштовано" + +msgid "CAs" +msgstr "CA" + +msgid "CAs cannot be added when CA category='all'" +msgstr "Не можна додавати CA, якщо категорія CA='all'" + +msgid "CERT Algorithm" +msgstr "Алгоритм CERT" + +msgid "CERT Certificate Type" +msgstr "Тип сертифіката CERT" + +msgid "CERT Certificate/CRL" +msgstr "Сертифікат або CRL CERT" + +msgid "CERT Key Tag" +msgstr "Мітка ключа CERT" + +msgid "CERT record" +msgstr "запис CERT" + +msgid "CIFS credentials object" +msgstr "Об’єкт реєстраційних даних CIFS" + +#, python-format +msgid "CIFS server %(host)s denied your credentials" +msgstr "Ваші реєстраційні дані відхилено сервером CIFS %(host)s" + +#, python-format +msgid "" +"CIFS server communication error: code \"%(num)s\", message " +"\"%(message)s\" (both may be \"None\")" +msgstr "" +"Помилка обміну даними з сервером CIFS: код «%(num)s», повідомлення " +"«%(message)s» (обидва значення можуть бути «None»)" + +msgid "CIFS server denied your credentials" +msgstr "Ваші реєстраційні дані відхилено сервером CIFS" + +msgid "CLI metavar" +msgstr "Метазмінна CLI" + +msgid "CLI name" +msgstr "Назва CLI" + +msgid "CNAME Hostname" +msgstr "Назва вузла CNAME" + +msgid "CNAME record" +msgstr "запис CNAME" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "" +"Записом CNAME не можна користуватися разом з будь-якими іншими записами, " +"окрім PTR (RFC 1034, розділ 3.6.2)" + +msgid "CSR" +msgstr "CSR" + +msgid "Cancel" +msgstr "Скасувати" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "Не вдалося створити зворотний запис для «%(value)s»: %(exc)s" + +#, python-format +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "Не вдалося розшифрувати файл «%(filename)s»: %(exc)s" + +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "" +"Не вдалося встановити LSA-з’єднання з %(host)s. Чи запущено сервер CIFS?" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "" +"Не можна встановлювати довіру до AD, розгорнутою у тому самому домені, що і " +"IPA. Підтримки такої можливості не передбачено." + +msgid "Cannot find specified domain or server name" +msgstr "Не вдалося знайти домену або сервера з вказаною назвою" + +#, c-format +msgid "Cannot get host's FQDN!\n" +msgstr "Не вдалося отримати FQDN вузла!\n" + +msgid "Cannot hide CA renewal master." +msgstr "Не можна приховувати основний сервер оновлення CA." + +msgid "Cannot hide DNSSec key master." +msgstr "Не можна приховувати основний сервер ключів DNSSec." + +#, python-format +msgid "Cannot hide last enabled %(name)s server." +msgstr "Не можна приховувати останній увімкнений сервер %(name)s." + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"Виконати дію з перевірки SID без встановленої підтримки Samba 4 неможливо. " +"Переконайтеся, що вами встановлено на сервері підпакунок IPA server-trust-ad." + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"Виконати дію з перевірки зовнішніх учасників без встановленої підтримки " +"Samba 4 неможливо. Переконайтеся, що вами встановлено на сервері підпакунок " +"IPA server-trust-ad." + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" +"Без налаштовування власного домену не можна виконувати дію з приєднання. " +"Спочатку запустіть ipa-adtrust-install на сервері IPA." + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" +"Вибрану команду не можна виконати без екземпляра Samba 4, встановленого у " +"цій системі. Переконайтеся, що на цьому сервері було виконано ipa-adtrust-" +"install." + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" +"Виконати вибрану команду без встановленої підтримки Samba 4 неможливо. " +"Переконайтеся, що вами встановлено підпакунок IPA server-trust-ad." + +msgid "Cannot query Directory Manager with API" +msgstr "" +"Не вдалося опитати засіб керування каталогом за допомогою програмного " +"інтерфейсу" + +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "Не вдалося прочитати файл «%(filename)s»: %(exc)s" + +msgid "Cannot resolve KDC for requested realm" +msgstr "Не вдалося визначити KDC для бажаної області (realm)" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "Не вдалося отримати список GC довіреного домену" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" +"Без налаштовування власного домену не можна виконувати пошук у довірених " +"доменах. Спочатку запустіть ipa-adtrust-install на сервері IPA." + +#, c-format +msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" +msgstr "Не можна одночасно вказувати механізм SASL і DN прив’язки.\n" + +#, c-format +msgid "Cannot specify server and LDAP uri simultaneously.\n" +msgstr "Не можна одночасно вказувати сервер і адресу LDAP.\n" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "Не вдалося зберегти ACI прав доступу до %s" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "Не можна одночасно використовувати %(old_name)s і %(new_name)s" + +msgid "Car License" +msgstr "Водійська ліцензія" + +msgid "Certificate" +msgstr "Сертифікат" + +msgid "Certificate Association Data" +msgstr "Дані прив’язки сертифікатів" + +msgid "Certificate Authorities" +msgstr "Центри сертифікації" + +msgid "Certificate Authority" +msgstr "Центр сертифікації" + +msgid "Certificate Data" +msgstr "Дані сертифіката" + +msgid "Certificate For Match" +msgstr "Сертифікат для відповідності" + +msgid "Certificate Hold" +msgstr "Власник сертифіката" + +msgid "Certificate Hold Removed" +msgstr "Затримання сертифіката вилучено" + +msgid "Certificate Identity Mapping Global Configuration" +msgstr "Загальні налаштування прив’язки сертифікатів до профілів" + +msgid "Certificate Identity Mapping Rule" +msgstr "Правило прив’язування сертифікатів до профілів" + +msgid "Certificate Identity Mapping Rule description" +msgstr "Опис правила прив’язування сертифікатів до профілів" + +msgid "Certificate Identity Mapping Rule name" +msgstr "Назва правила прив’язування сертифікатів до профілів" + +msgid "Certificate Identity Mapping Rules" +msgstr "Правила прив’язування сертифікатів до профілів" + +msgid "Certificate Identity Mapping configuration options" +msgstr "Параметри налаштування прив’язки сертифікатів до профілів" + +msgid "Certificate Mapping Match" +msgstr "Відповідність за прив’язкою до сертифіката" + +msgid "Certificate Profile" +msgstr "Профіль сертифікатів" + +msgid "Certificate Profile to use" +msgstr "Профіль сертифіката, яким слід скористатися" + +msgid "Certificate Profiles" +msgstr "Профілі сертифікатів" + +msgid "Certificate Profiles to add" +msgstr "Профілі сертифікатів для додавання" + +msgid "Certificate Profiles to remove" +msgstr "Профілі сертифікатів для вилучення" + +msgid "Certificate Revoked" +msgstr "Сертифікат відкликано" + +msgid "Certificate Subject base" +msgstr "Базовий об’єкт сертифікації" + +msgid "Certificate Type" +msgstr "Тип сертифіката" + +msgid "Certificate Usage" +msgstr "Використання сертифіката" + +msgid "Certificate chain" +msgstr "Ланцюжок сертифікації" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "Сертифікат для ${primary_key} ${entity}" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "Помилка форматування сертифіката: %(error)s" + +msgid "Certificate in base64 or PEM format" +msgstr "Сертифікат у форматі base64 або PEM" + +msgid "Certificate mapping data" +msgstr "Дані прив’язки сертифіката" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "Не вдалося завершити дію з сертифікатом: %(error)s" + +msgid "Certificate profiles cannot be renamed" +msgstr "Профілі сертифікатів не можна перейменовувати" + +msgid "Certificate requested" +msgstr "Надіслано запит щодо сертифікації" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "" +"Не знайдено сертифікат із серійним номером %(serial)s, виданий CA «%(ca)s»" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "Сертифікати, що зберігаються у файлі «%(file)s»" + +msgid "Certificate/CRL" +msgstr "Сертифікат/CRL" + +msgid "Certificates" +msgstr "Сертифікати" + +msgid "Cessation of Operation" +msgstr "Скасування дії" + +msgid "Change current Domain Level." +msgstr "Змінити поточний рівень домену." + +msgid "Change password" +msgstr "Змінити пароль" + +msgid "Change to POSIX group" +msgstr "Змінити на групу POSIX" + +msgid "Change to external group" +msgstr "Змінити на зовнішню групу" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "Змінити пароль «%(value)s»" + +#, python-format +msgid "Changed server state of \"%(value)s\"." +msgstr "Змінено стан сервера «%(value)s»." + +msgid "Character classes" +msgstr "Класи символів" + +msgid "Check DNS" +msgstr "Перевірка DNS" + +msgid "Check connection to remote IPA server." +msgstr "Перевірити з’єднання із віддаленим сервером IPA." + +msgid "Check if the password contains the username" +msgstr "Перевіряти, чи не міститься у паролі ім'я користувача" + +msgid "Check if the password is a dictionary word" +msgstr "Перевіряти, чи є пароль словом зі словника" + +msgid "Check the status of a certificate signing request." +msgstr "Перевірити стан запиту щодо підписування сертифіката." + +msgid "Checking if record exists." +msgstr "Перевірка, чи існує запис." + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "Перевіряє, чи увімкнено на якомусь із серверів службу CA." + +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "Перевіряє, чи увімкнено на якомусь із серверів службу DNS." + +msgid "Checks if any of the servers has the KRA service enabled" +msgstr "Перевіряє, чи увімкнено на якомусь із серверів службу KRA" + +msgid "Choose a pre-defined template to use" +msgstr "Виберіть попередньо визначений шаблон для використання" + +msgid "City" +msgstr "Місто" + +msgid "Class" +msgstr "Клас" + +msgid "Class of Service object used for linking policies with groups" +msgstr "" +"Клас об'єкта служби, який використовується для прив'язування правил до груп" + +msgid "Clear" +msgstr "Спорожнити" + +msgid "Clear all fields on the page." +msgstr "Спорожнити усі поля на сторінці." + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "" +"Знімає перегляд ідентифікаторів із вказаних вузлів або поточних учасників " +"вказаних груп вузлів." + +#, python-brace-format +msgid "Click to ${action}" +msgstr "Натисніть, щоб ${action}" + +msgid "Client credentials may be delegated to the service" +msgstr "Реєстраційні дані клієнта може бути передано службі" + +msgid "Client identifier" +msgstr "Ідентифікатор клієнта" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "" +"Клієнтську частину не налаштовано. Віддайте команду ipa-client-install." + +msgid "Client version. Used to determine if server will accept request." +msgstr "" +"Версія клієнта. Використовується для визначення, якщо сервер приймає запит." + +msgid "Clock interval" +msgstr "Інтервал годинника" + +msgid "Clock offset" +msgstr "Зсув годинника" + +msgid "Close" +msgstr "Закрити" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "Спроба закриття таблиці ключів зазнала невдачі\n" + +msgid "Collapse All" +msgstr "Згорнути всі" + +msgid "Comma separated encryption types list" +msgstr "Список типів шифрування, відокремлених комами" + +msgid "Comma-separated list of attributes" +msgstr "Список атрибутів, відокремлених комами" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "" +"Список атрибутів, які буде проігноровано для записів груп у DS, " +"відокремлених комами" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "" +"Список атрибутів, які буде проігноровано для записів користувачів у DS, " +"відокремлених комами" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "" +"Список класів об’єктів, які буде проігноровано для записів груп у DS, " +"відокремлених комами" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "" +"Список класів об’єктів, які буде проігноровано для записів користувачів у " +"DS, відокремлених комами" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "" +"Список класів об’єктів, використаних для пошуку записів груп у DS, " +"відокремлених комами" + +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "" +"Список класів об’єктів, використаних для пошуку записів користувачів у DS, " +"відокремлених комами" + +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "" +"Права доступу, які слід надати, відокремлених комами (read, write). Типовим " +"варіантом є «write» (запис)." + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "" +"Права доступу, які слід надати, відокремлених комами (read, write, add, " +"delete, all)" + +msgid "Comma-separated list of raw A records" +msgstr "Список простих записів A, відокремлених комами" + +msgid "Comma-separated list of raw A6 records" +msgstr "Список простих записів A6, відокремлених комами" + +msgid "Comma-separated list of raw AAAA records" +msgstr "Список простих записів AAAA, відокремлених комами" + +msgid "Comma-separated list of raw AFSDB records" +msgstr "Список простих записів AFSDB, відокремлених комами" + +msgid "Comma-separated list of raw APL records" +msgstr "Список простих записів APL, відокремлених комами" + +msgid "Comma-separated list of raw CERT records" +msgstr "Список простих записів CERT, відокремлених комами" + +msgid "Comma-separated list of raw CNAME records" +msgstr "Список простих записів CNAME, відокремлених комами" + +msgid "Comma-separated list of raw DHCID records" +msgstr "Список простих записів DHCID, відокремлених комами" + +msgid "Comma-separated list of raw DLV records" +msgstr "Список простих записів DLV, відокремлених комами" + +msgid "Comma-separated list of raw DNAME records" +msgstr "Список простих записів DNAME, відокремлених комами" + +msgid "Comma-separated list of raw DNSKEY records" +msgstr "Список простих записів DNSKEY, відокремлених комами" + +msgid "Comma-separated list of raw DS records" +msgstr "Список простих записів DS, відокремлених комами" + +msgid "Comma-separated list of raw HIP records" +msgstr "Список простих записів HIP, відокремлених комами" + +msgid "Comma-separated list of raw IPSECKEY records" +msgstr "Список простих записів IPSECKEY, відокремлених комами" + +msgid "Comma-separated list of raw KEY records" +msgstr "Список простих записів KEY, відокремлених комами" + +msgid "Comma-separated list of raw KX records" +msgstr "Список простих записів KX, відокремлених комами" + +msgid "Comma-separated list of raw LOC records" +msgstr "Список простих записів LOC, відокремлених комами" + +msgid "Comma-separated list of raw MX records" +msgstr "Список простих записів MX, відокремлених комами" + +msgid "Comma-separated list of raw NAPTR records" +msgstr "Список простих записів NAPTR, відокремлених комами" + +msgid "Comma-separated list of raw NS records" +msgstr "Список простих записів NS, відокремлених комами" + +msgid "Comma-separated list of raw NSEC records" +msgstr "Список простих записів NSEC, відокремлених комами" + +msgid "Comma-separated list of raw NSEC3 records" +msgstr "Список простих записів NSEC3, відокремлених комами" + +msgid "Comma-separated list of raw NSEC3PARAM records" +msgstr "Список простих записів NSEC3PARAM, відокремлених комами" + +msgid "Comma-separated list of raw PTR records" +msgstr "Список простих записів PTR, відокремлених комами" + +msgid "Comma-separated list of raw RP records" +msgstr "Список простих записів RP, відокремлених комами" + +msgid "Comma-separated list of raw RRSIG records" +msgstr "Список простих записів RRSIG, відокремлених комами" + +msgid "Comma-separated list of raw SIG records" +msgstr "Список простих записів SIG, відокремлених комами" + +msgid "Comma-separated list of raw SPF records" +msgstr "Список простих записів SPF, відокремлених комами" + +msgid "Comma-separated list of raw SRV records" +msgstr "Список простих записів SRV, відокремлених комами" + +msgid "Comma-separated list of raw SSHFP records" +msgstr "Список простих записів SSHFP, відокремлених комами" + +msgid "Comma-separated list of raw TA records" +msgstr "Список простих записів TA, відокремлених комами" + +msgid "Comma-separated list of raw TKEY records" +msgstr "Список простих записів TKEY, відокремлених комами" + +msgid "Comma-separated list of raw TSIG records" +msgstr "Список простих записів TSIG, відокремлених комами" + +msgid "Comma-separated list of raw TXT records" +msgstr "Список простих записів TXT, відокремлених комами" + +#, python-format +msgid "Command '%(name)s' has been deprecated" +msgstr "Команда «%(name)s» вважається застарілою" + +msgid "Command category" +msgstr "Категорія команд" + +msgid "Command category the rule applies to" +msgstr "Категорія команд, до якої застосовується правило" + +msgid "Command name" +msgstr "Назва команди" + +msgid "Command not implemented" +msgstr "Команду не реалізовано" + +msgid "Commands" +msgstr "Команди" + +msgid "Common Name" +msgstr "Звичайне ім'я" + +msgid "Conditions that could not be added" +msgstr "Умови, які не вдалося додати" + +msgid "Conditions that could not be removed" +msgstr "Умови, які не вдалося вилучити" + +msgid "Configuration" +msgstr "Налаштування" + +msgid "Configuration of SID failed. See details in the error log" +msgstr "" +"Не вдалося виконати налаштовування SID. Подробиці можна знайти у журналі" + +msgid "Configuration string" +msgstr "Рядок налаштування" + +msgid "Configure this server as a trust agent." +msgstr "Налаштувати цей сервер як довірений агент." + +msgid "Configure your token" +msgstr "Налаштувати ваш жетон" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" +"Налаштуйте ваш жетон скануванням QR-коду, наведеного нижче. Натисніть поле " +"QR-коду, якщо ви бачите правильні дані на пристрої, який ви хочете " +"налаштувати." + +msgid "Configured administrative server limit exceeded" +msgstr "Перевищено налаштоване обмеження адміністративного сервера" + +msgid "Configured size limit exceeded" +msgstr "Перевищено налаштоване обмеження за розміром" + +msgid "Configured time limit exceeded" +msgstr "Перевищено налаштоване обмеження за часом" + +msgid "Confirm (password)" +msgstr "Підтвердження (пароль)" + +msgid "Confirmation" +msgstr "Підтвердження" + +msgid "Connectivity" +msgstr "Можливість з’єднання" + +msgid "Consecutive failures before lockout" +msgstr "Кількість помилок для блокування" + +msgid "Consume an entitlement." +msgstr "Використати іменування." + +msgid "Contact Settings" +msgstr "Параметри контакту" + +msgid "Contact this specific KDC Server" +msgstr "Встановити зв’язок з вказаним сервером KDC" + +msgid "" +"Content of 'standard' vaults can be seen by users with higher privileges " +"(admins)." +msgstr "" +"Вміст сховищ типу «стандартне» можуть переглядати користувачі із вищим " +"рівнем прав доступу (адміністратори)." + +msgid "Continue" +msgstr "Продовжити" + +msgid "Continue to next page" +msgstr "Перейти до наступної сторінки" + +msgid "Continuous mode: Don't stop on errors." +msgstr "Режим неперервної роботи: не зупинятися у разі помилок." + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "" +"Режим неперервної обробки. Програма повідомляє про помилки, але продовжує " +"обробку." + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "" +"Режим неперервної обробки. Програма повідомляє про помилки, але продовжує " +"обробку." + +msgid "Convert on server" +msgstr "Перетворити на сервері" + +#, python-format +msgid "Could not get %(name)s interactively" +msgstr "Не вдалося отримати %(name)s у інтерактивному режимі" + +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "" +"Не вдалося прочитати фільтр походження (originfilter) UPG Definition. " +"Переконайтеся, що у вас є відповідні права доступу." + +msgid "Counter" +msgstr "Лічильник" + +msgid "Counter-based (HOTP)" +msgstr "На основі лічильника (HOTP)" + +msgid "Create Stage user in from a delete user" +msgstr "" +"Створити запис користувача етапу на основі вилученого запису користувача" + +msgid "Create a CA." +msgstr "Створити запис CA." + +msgid "Create a new CA ACL." +msgstr "Створити запис CA ACL." + +msgid "Create a new Certificate Identity Mapping Rule." +msgstr "Створити правило прив’язування сертифіката до профілів." + +msgid "Create a new HBAC rule." +msgstr "Створити правило HBAC." + +msgid "Create a new SELinux User Map." +msgstr "Створити карту користувачів SELinux." + +msgid "Create a new automount key." +msgstr "Створити ключ автоматичного монтування." + +msgid "Create a new automount location." +msgstr "Створити новий запис автоматичного монтування." + +msgid "Create a new automount map." +msgstr "Створити карту автомонтування." + +msgid "Create a new group." +msgstr "Створити нову групу." + +msgid "Create a new indirect mount point." +msgstr "Створити опосередковану точку монтування." + +msgid "Create a new service delegation rule." +msgstr "Створити правило делегування служб." + +msgid "Create a new service delegation target." +msgstr "Створити ціль делегування служб." + +msgid "Create a new vault." +msgstr "Створити сховище." + +msgid "Create as a non-POSIX group" +msgstr "Створити як групу, що не відповідає POSIX" + +msgid "Create dns record" +msgstr "Створити запис DNS" + +msgid "Create new ACI." +msgstr "Створити запис ACI." + +msgid "Create new DNS forward zone." +msgstr "Створити зону переспрямовування DNS." + +msgid "Create new DNS zone (SOA record)." +msgstr "Створити зону DNS (запис SOA)." + +msgid "Create new Sudo Command Group." +msgstr "Створити групу команд sudo." + +msgid "Create new Sudo Command." +msgstr "Створити запис команди sudo." + +msgid "Create new Sudo Rule." +msgstr "Створити правило sudo." + +msgid "Create reverse" +msgstr "Створити зворотний запис" + +msgid "Create reverse record for this IP Address" +msgstr "Створити зворотний запис для цієї IP-адреси" + +#, python-format +msgid "Created ACI \"%(value)s\"" +msgstr "Створено ACI «%(value)s»" + +#, python-format +msgid "Created CA \"%(value)s\"" +msgstr "Створено запис CA «%(value)s»" + +msgid "Creating record." +msgstr "Створення запису." + +msgid "Credentials" +msgstr "Реєстраційні дані" + +msgid "Credentials cache permissions incorrect" +msgstr "Помилкові права доступу до кешу реєстраційних даних" + +msgid "" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" +msgstr "" +"Зв’язки довіри між областями не налаштовано. Спочатку запустіть ipa-adtrust-" +"install на сервері IPA." + +msgid "Current DNS record contents:\n" +msgstr "Поточний вміст запису DNS:\n" + +msgid "Current Password" +msgstr "Поточний пароль" + +msgid "Current domain level:" +msgstr "Поточний рівень домену:" + +msgid "Current password is required" +msgstr "Слід вказати поточний пароль" + +msgid "Custom value" +msgstr "Нетипове значення" + +msgid "Customization" +msgstr "Налаштування" + +msgid "DHCID record" +msgstr "запис DHCID" + +msgid "DLV Algorithm" +msgstr "Алгоритм DLV" + +msgid "DLV Digest" +msgstr "Контрольна сума DLV" + +msgid "DLV Digest Type" +msgstr "Тип контрольної суми DLV" + +msgid "DLV Key Tag" +msgstr "Мітка ключа DLV" + +msgid "DLV record" +msgstr "Запис DLV" + +msgid "DN commonName does not match user's login" +msgstr "У commonName DN не збігається із ім’ям користувача" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "" +"emailAddress DN не збігається із жодною адресою електронної пошти користувача" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "DN контейнера груп у DS відносно до основного DN" + +msgid "DN of container for users in DS relative to base DN" +msgstr "DN контейнера користувачів у DS відносно до основного DN" + +msgid "DN of the started task" +msgstr "DN запущеного завдання" + +msgid "DN to bind as if not using kerberos" +msgstr "" +"DN, до якого слід виконати прив’язку, якщо не використовується kerberos" + +msgid "DNA remaining" +msgstr "Залишковий DNA" + +msgid "DNAME Target" +msgstr "Ціль DNAME" + +msgid "DNAME record" +msgstr "Запис DNAME" + +msgid "DNS" +msgstr "DNS" + +#, c-format +msgid "DNS Discovery failed\n" +msgstr "Спроба виявлення DNS зазнала невдачі\n" + +msgid "DNS Forward Zone" +msgstr "Зона переспрямовування DNS" + +msgid "DNS Forward Zones" +msgstr "Зони переспрямовування DNS" + +msgid "DNS Global Configuration" +msgstr "Загальні налаштування DNS" + +#, python-format +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "Тип RR DNS «%s» не підтримується додатком bind-dyndb-ldap" + +msgid "DNS Resource Record" +msgstr "Запис ресурсу DNS" + +msgid "DNS Resource Records" +msgstr "Записи ресурсів DNS" + +msgid "DNS Server" +msgstr "Сервер DNS" + +msgid "DNS Server name" +msgstr "Назва сервера DNS" + +msgid "DNS Servers" +msgstr "Сервери DNS" + +msgid "DNS Zone" +msgstr "Зона DNS" + +msgid "DNS Zone Settings" +msgstr "Параметри зони DNS" + +msgid "DNS Zones" +msgstr "Зони DNS" + +#, python-format +msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" +msgstr "" +"Перевірка DNS зазнала невдачі: мало бути {%(expected)s}, отримано {%(got)s}" + +msgid "DNS class" +msgstr "Клас DNS" + +msgid "DNS configuration options" +msgstr "Параметри налаштування DNS" + +#, c-format +msgid "DNS discovery for domain %s\n" +msgstr "DNS-визначення для домену %s\n" + +msgid "DNS forward zone" +msgstr "Зона переспрямовування DNS" + +msgid "DNS forward zones" +msgstr "Зони переспрямовування DNS" + +msgid "DNS forwarder" +msgstr "Переспрямовувач DNS" + +msgid "" +"DNS forwarder semantics changed since IPA 4.0.\n" +"You may want to use forward zones (dnsforwardzone-*) instead.\n" +"For more details read the docs." +msgstr "" +"З виходом версії IPA 4.0 змінилася семантика засобу переспрямовування DNS.\n" +"Вам варто перейти на використання зон переспрямовування (dnsforwardzone-*).\n" +"Докладніше про це у документації." + +msgid "DNS is not configured" +msgstr "DNS не налаштовано" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "Довжина мітки DNS не повинна перевищувати 63 символів" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "Довжина мітки DNS не повинна перевищувати 63 символи" + +msgid "DNS record was deleted because it contained no data." +msgstr "Запис DNS було вилучено, оскільки у ньому не містилося жодних даних." + +#, python-format +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "Записи DNS вузла %(host)s не вдалося вилучити. (%(reason)s)" + +msgid "DNS records can be only updated one at a time" +msgstr "Записи DNS можна оновлювати лише поодинці" + +msgid "DNS resource record" +msgstr "Запис ресурсу DNS" + +msgid "DNS resource record type" +msgstr "Тип запису ресурсу DNS" + +msgid "DNS resource records" +msgstr "Записи ресурсів DNS" + +#, python-format +msgid "" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "" +"Зворотна зона DNS %(revzone)s для IP-адреси %(addr)s не керується цим " +"сервером" + +msgid "DNS server" +msgstr "Сервер DNS" + +#, python-format +msgid "" +"DNS server %(server)s does not support DNSSEC: %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"На сервері DNS %(server)s не передбачено підтримки DNSSEC: %(error)s.\n" +"Якщо на серверах IPA увімкнено перевірку DNSSEC, будь ласка, вимкніть її." + +#, python-format +msgid "" +"DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" +"If DNSSEC validation is enabled on IPA server(s), please disable it." +msgstr "" +"На сервері DNS %(server)s не передбачено підтримки EDNS0 (RFC 6891): " +"%(error)s.\n" +"Якщо на серверах IPA увімкнено перевірку DNSSEC, будь ласка, вимкніть її." + +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "Сервер DNS %(server)s: %(error)s." + +msgid "DNS servers" +msgstr "Сервери DNS" + +msgid "DNS zone" +msgstr "зона DNS" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "Зони DNS %(zone)s не знайдено" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "" +"Запис зони DNS для кожного realmdomain має містити записи SOA або NS. Для %s " +"таких записів не виявлено" + +msgid "DNS zone root record cannot be renamed" +msgstr "Кореневий запис зони DNS не можна перейменовувати" + +msgid "DNS zones" +msgstr "зони DNS" + +msgid "DNSKEY record" +msgstr "Запис DNSKEY" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "" +"Підтримка DNSSEC є експериментальною.\n" +"%(additional_info)s" + +#, python-format +msgid "" +"DNSSEC validation failed: %(error)s.\n" +"Please verify your DNSSEC configuration or disable DNSSEC validation on all " +"IPA servers." +msgstr "" +"Не пройдено перевірку DNSSEC: %(error)s.\n" +"Будь ласка, перевірте, чи правильно вказано налаштування DNSSEC, або " +"вимкніть перевірку DNSSEC на усіх серверах IPA." + +msgid "DNSec key master" +msgstr "Основний сервер ключів DNSec" + +msgid "DS Algorithm" +msgstr "Алгоритм DS" + +msgid "DS Digest" +msgstr "Контрольна сума DS" + +msgid "DS Digest Type" +msgstr "Тип контрольної суми DS" + +msgid "DS Key Tag" +msgstr "Мітка ключа DS" + +msgid "DS record" +msgstr "Запис DS" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "запис DS не повинен перебувати у апексі зони (RFC 4035, розділ 2.4)" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "" +"Запис DS має існувати паралельно із записом NS (RFC 4592, розділ 4.6, RFC " +"4035, розділ 2.4)" + +msgid "Data" +msgstr "Дані" + +msgid "Debugging output" +msgstr "Діагностична інформація" + +msgid "Default" +msgstr "Типовий" + +msgid "Default (fallback) Group" +msgstr "Типова (резервна) група" + +msgid "Default (fallback) group for entries to land" +msgstr "Типова (резервна) група для додавання записів" + +msgid "Default PAC types" +msgstr "Типові типи PAC" + +msgid "Default SELinux user" +msgstr "Типовий користувач SELinux" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "" +"Типовий користувач SELinux, якщо не буде знайдено відповідного у правилі " +"карти SELinux" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "Типовий перегляд довіри не може бути застосовано до вузлів" + +msgid "Default Trust View cannot contain IPA users" +msgstr "Типовий перегляд довіри не може містити користувачів IPA" + +msgid "Default attributes" +msgstr "Типові атрибути" + +msgid "Default e-mail domain" +msgstr "Типовий домен ел. пошти" + +msgid "Default from" +msgstr "Типовий з" + +msgid "Default group for entries to land" +msgstr "Типова група для додавання записів" + +msgid "Default group for new users" +msgstr "Типова група для нових користувачів" + +msgid "Default group for new users is not POSIX" +msgstr "Типовою групою для нових користувачів не є група POSIX" + +msgid "Default group for new users not found" +msgstr "Типової групи для нових користувачів не знайдено" + +msgid "Default group objectclasses" +msgstr "Типові класи об’єктів групи" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "Типові класи об’єктів груп (список класів, відокремлених комами)" + +msgid "Default host group" +msgstr "Типова група вузлів" + +msgid "Default location of home directories" +msgstr "Типова адреса домашніх каталогів" + +msgid "Default shell" +msgstr "Типова оболонка" + +msgid "Default shell for new users" +msgstr "Типова оболонка для нових користувачів" + +msgid "Default ticket policy could not be read" +msgstr "Не вдалося прочитати типові правила щодо квитків" + +msgid "Default time to live" +msgstr "Типовий час життя" + +msgid "Default types of PAC supported for services" +msgstr "Типові типи PAC, підтримувані для служб" + +msgid "Default types of supported user authentication" +msgstr "Типові типи підтримуваного розпізнавання користувачів" + +msgid "Default user authentication types" +msgstr "Типові типи розпізнавання користувачів" + +msgid "Default user group" +msgstr "Типова група користувачів" + +msgid "Default user objectclasses" +msgstr "Типові класи об’єктів користувачів" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "" +"Типові класи об’єктів користувачів (список класів, відокремлених комами)" + +msgid "Default users group" +msgstr "Типова група користувачів" + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. Use 'idp' to allow External Identity Provider authentications. With no " +"indicator specified, all authentication mechanisms are allowed." +msgstr "" +"Визначає список дозволених індикаторів розпізнавання. Скористайтеся " +"значенням «otp», щоб дозволити розпізнавання 2FA на основі OTP. " +"Скористайтеся значенням «radius», щоб дозволити розпізнавання 2FA на основі " +"RADIUS. Скористайтеся значенням «pkinit», щоб дозволити розпізнавання 2FA на " +"основі PKINIT. Скористайтеся значенням «hardened», щоб дозволити захищене " +"від простого перебирання розпізнавання за паролем на основі SPAKE або FAST. " +"Скористайтеся значенням «idp», щоб уможливити розпізнавання за допомогою " +"зовнішнього надавача профілів. Якщо індикатор не буде вказано, буде " +"дозволено усі механізми." + +msgid "" +"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" +"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " +"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " +"'hardened' to allow brute-force hardened password authentication by SPAKE or " +"FAST. With no indicator specified, all authentication mechanisms are allowed." +msgstr "" +"Визначає список дозволених індикаторів розпізнавання. Скористайтеся " +"значенням «otp», щоб дозволити розпізнавання 2FA на основі OTP. " +"Скористайтеся значенням «radius», щоб дозволити розпізнавання 2FA на основі " +"RADIUS. Скористайтеся значенням «pkinit», щоб дозволити розпізнавання 2FA на " +"основі PKINIT. Скористайтеся значенням «hardened», щоб дозволити захищене " +"від простого перебирання розпізнавання за паролем на основі SPAKE або FAST. " +"Якщо індикатор не буде вказано, буде дозволено усі механізми." + +msgid "Degrees Latitude" +msgstr "Градуси широти" + +msgid "Degrees Longitude" +msgstr "Градуси довготи" + +msgid "Delegation" +msgstr "Уповноваження" + +msgid "Delegation name" +msgstr "Назва уповноваження" + +msgid "Delegations" +msgstr "Уповноваження" + +msgid "Delete" +msgstr "Вилучити" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "Вилучити значення «%(value)s» %(name)s?" + +msgid "Delete ACI." +msgstr "Вилучити ACI." + +msgid "Delete Class of Service entry" +msgstr "Вилучити запис класу служби" + +msgid "Delete DNS forward zone." +msgstr "Вилучити зону переспрямовування DNS." + +msgid "Delete DNS record entry." +msgstr "Вилучити пункт запису DNS." + +msgid "Delete DNS resource record." +msgstr "Вилучити запис ресурсу DNS." + +msgid "Delete DNS zone (SOA record)." +msgstr "Вилучити зону DNS (запис SOA)." + +msgid "Delete IPA server." +msgstr "Вилучити сервер IPA." + +msgid "Delete Key, Unprovision" +msgstr "Вилучити ключ, скасування передбачення" + +msgid "Delete Server" +msgstr "Вилучити сервер" + +msgid "Delete Sudo Command Group." +msgstr "Вилучити групу команд sudo." + +msgid "Delete Sudo Command." +msgstr "Вилучити запис команди sudo." + +msgid "Delete Sudo Rule." +msgstr "Вилучити правило sudo." + +msgid "Delete a CA (must be disabled first)." +msgstr "Вилучити службу сертифікації (її спочатку має бути вимкнено)." + +msgid "Delete a CA ACL." +msgstr "Вилучити CA ACL." + +msgid "Delete a Certificate Identity Mapping Rule." +msgstr "Вилучити правило прив’язування сертифікатів до профілів." + +msgid "Delete a Certificate Profile." +msgstr "Вилучити профіль сертифікатів." + +msgid "Delete a DNS server" +msgstr "Вилучити запис сервера DNS" + +msgid "Delete a RADIUS proxy server." +msgstr "Вилучити проксі-сервер RADIUS." + +msgid "Delete a SELinux User Map." +msgstr "Вилучити карту користувачів SELinux." + +msgid "Delete a delegation." +msgstr "Вилучити уповноваження." + +msgid "Delete a group password policy." +msgstr "Вилучити групу правил для паролів." + +msgid "Delete a host." +msgstr "Вилучити вузол." + +msgid "Delete a hostgroup." +msgstr "Вилучити групу вузлів." + +msgid "Delete a netgroup." +msgstr "Вилучити мережеву групу." + +msgid "Delete a permission." +msgstr "Вилучити права доступу." + +msgid "Delete a privilege." +msgstr "Вилучити привілей." + +msgid "Delete a role." +msgstr "Вилучити роль." + +msgid "Delete a segment." +msgstr "Вилучити сегмент." + +msgid "Delete a self-service permission." +msgstr "Вилучити права доступу автослужби." + +msgid "Delete a stage user." +msgstr "Вилучити запис користувача етапу." + +msgid "Delete a subordinate id." +msgstr "Вилучити підлеглий ідентифікатор." + +msgid "Delete a topology suffix." +msgstr "Вилучити суфікс топології." + +msgid "Delete a trust." +msgstr "Вилучити запис довіри." + +msgid "Delete a user" +msgstr "Вилучити користувача" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "Вилучити користувача, зберігаючи запис для наступного використання" + +msgid "Delete a user." +msgstr "Вилучити користувача." + +msgid "Delete a vault container." +msgstr "Вилучити контейнер сховищ." + +msgid "Delete a vault." +msgstr "Вилучити сховище." + +msgid "Delete all associated records" +msgstr "Вилучити всі пов’язані записи" + +msgid "Delete all?" +msgstr "Вилучити все?" + +msgid "Delete an Group ID override." +msgstr "Вилучити перевизначення ідентифікаторів групи." + +msgid "Delete an HBAC rule." +msgstr "Вилучити правило HBAC." + +msgid "Delete an HBAC service group." +msgstr "Вилучити групу служб HBAC." + +msgid "Delete an ID View." +msgstr "Вилучити перегляд ідентифікаторів." + +msgid "Delete an ID override." +msgstr "Вилучити перевизначення ідентифікаторів." + +msgid "Delete an ID range." +msgstr "Вилучити діапазон ідентифікаторів." + +msgid "Delete an IPA location." +msgstr "Вилучити місце IPA." + +msgid "Delete an IPA service." +msgstr "Вилучити службу IPA." + +msgid "Delete an Identity Provider server." +msgstr "Вилучити сервер надавача профілів." + +msgid "Delete an OTP token." +msgstr "Вилучити жетон OTP." + +msgid "Delete an User ID override." +msgstr "Вилучити перевизначення ідентифікатора користувача." + +msgid "" +"Delete an attribute/value pair. The option will be evaluated\n" +"last, after all sets and adds." +msgstr "" +"Вилучити парну атрибут-значення. Цей параметр буде використано\n" +"останнім, після всіх встановлень і додавань." + +msgid "Delete an automember rule." +msgstr "Вилучити правило автоматичної участі." + +msgid "Delete an automount key." +msgstr "Вилучити ключ автоматичного монтування." + +msgid "Delete an automount location." +msgstr "Вилучити запис автоматичного монтування." + +msgid "Delete an automount map." +msgstr "Вилучити карту автоматичного монтування." + +msgid "Delete an existing HBAC service." +msgstr "Вилучити вже створену службу HBAC." + +msgid "Delete domain" +msgstr "Вилучити домен" + +msgid "Delete group." +msgstr "Вилучити групу." + +msgid "Delete mode" +msgstr "Режим вилучення" + +msgid "Delete service delegation target." +msgstr "Вилучити ціль делегування служб." + +msgid "Delete service delegation." +msgstr "Вилучити делегування служб." + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "Вилучено ACI «%(value)s»" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "Вилучено запис CA «%(value)s»" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "Вилучено CA ACL «%(value)s»" + +#, python-format +msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Вилучено правило прив’язування сертифікатів до профілів «%(value)s»" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "Вилучено зону переспрямовування DNS «%(value)s»" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "Вилучено сервер DNS «%(value)s»" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "Вилучено зону DNS «%(value)s»" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "Вилучено перевизначення ідентифікаторів групи «%(value)s»" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "Вилучено правило HBAC «%(value)s»" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "Вилучено службу HBAC «%(value)s»" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "Вилучено групу служб HBAC «%(value)s»" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "Вилучено перегляд ідентифікаторів «%(value)s»" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "Вилучено перевизначення ідентифікатора «%(value)s»" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "Вилучено діапазон ідентифікаторів «%(value)s»" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "Вилучено запис місця IPA «%(value)s»" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "Вилучено сервер IPA «%(value)s»" + +#, python-format +msgid "Deleted Identity Provider server \"%(value)s\"" +msgstr "Вилучено сервер надавача профілів «%(value)s»" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "Вилучено жетон OTP «%(value)s»" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "Вилучити проксі-сервер RADIUS «%(value)s»" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "Вилучено карту користувачів SELinux «%(value)s»" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "Вилучено команду sudo «%(value)s»" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "Вилучено групу команд sudo «%(value)s»" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "Вилучено правило sudo «%(value)s»" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "Вилучено перевизначення ідентифікатора користувача «%(value)s»" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "Вилучено правило автоматичної участі «%(value)s»" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "Вилучено ключ автоматичного монтування «%(value)s»" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "Вилучено місце автоматичного монтування «%(value)s»" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "Вилучено карту автоматичного монтування «%(value)s»" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "Вилучено уповноваження «%(value)s»" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "Вилучено групу «%(value)s»" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "Вилучено вузол «%(value)s»" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "Вилучено групу вузлів «%(value)s»" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "Вилучено мережеву групу «%(value)s»" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "Вилучено права доступу «%(value)s»" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "Вилучено привілей «%(value)s»" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "Вилучено профіль «%(value)s»" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "Вилучено запис «%(value)s»" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "Вилучено роль «%(value)s»" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "Вилучено сегмент «%(value)s»" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "Вилучено самообслуговування «%(value)s»" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "Вилучено службу «%(value)s»" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "Вилучено делегування служб «%(value)s»" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "Вилучено ціль делегування служб «%(value)s»" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "Вилучено запис користувача етапу «%(value)s»" + +#, python-format +msgid "Deleted subordinate id \"%(value)s\"" +msgstr "Вилучено підлеглий ідентифікатор «%(value)s»" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "Вилучено суфікс топології «%(value)s»" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "Вилучено запис довіри «%(value)s»" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "Вилучено користувача «%(value)s»" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "Вилучено сховище «%(value)s»" + +msgid "Deleted vault container" +msgstr "Вилучено контейнер сховищ" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "Вилучення керованих груп заборонено. Спочатку групу слід від’єднати." + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "" +"Вилучення запису сервера призведе до його остаточного вилучення з топології. " +"Зауважте, що скасувати результати виконання цієї дії неможливо." + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "" +"Вилучення цього сервера заборонено, оскільки воно залишить вашу встановлену " +"систему без CA." + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a KRA." +msgstr "" +"Вилучення цього сервера заборонено, оскільки воно залишить вашу встановлену " +"систему без KRA." + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "" +"Вилучення цього запису сервера залишить вашу встановлену систему без DNS." + +msgid "Deny" +msgstr "Відмовити" + +msgid "Department Number" +msgstr "Номер відділу" + +msgid "Deprecated options" +msgstr "Застарілі параметри" + +#, python-format +msgid "Deprecated; use %s" +msgstr "Застаріло; користуйтеся %s" + +msgid "Deprecated; use extratargetfilter" +msgstr "Вважається застарілою; скористайтеся extratargetfilter" + +msgid "Deprecated; use ipapermlocation" +msgstr "Вважається застарілою; скористайтеся ipapermlocation" + +msgid "Deprecated; use ipapermright" +msgstr "Вважається застарілою; скористайтеся ipapermright" + +msgid "Describe currently authenticated identity." +msgstr "Описати поточний розпізнаний профіль." + +msgid "Description" +msgstr "Опис" + +msgid "Description of the purpose of the CA" +msgstr "Опис призначення CA" + +msgid "Detach a managed group from a user." +msgstr "Від’єднати керовану групу від користувача." + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "Від’єднати групу «%(value)s» від користувача «%(value)s»" + +msgid "Detect" +msgstr "Визначити" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "" +"Визначити, чи налаштовано додаток сумісності схем (Schema Compatibility) на " +"обслуговування користувачів і груп довіреного домену" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "Визначити, чи було запущено ipa-adtrust-install для цієї системи" + +msgid "Determine whether ipa-adtrust-install has been run with sidgen task" +msgstr "Визначити, чи було запущено ipa-adtrust-install з завданням sidgen" + +msgid "Device authorization URI" +msgstr "Адреса уповноваження пристрою" + +msgid "Device authorization endpoint" +msgstr "Кінцева точка уповноваження пристрою" + +msgid "Dict of I18N messages" +msgstr "Словник перекладених повідомлень" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "Словник закодованих JSON команд IPA" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "Словник JSON-закодованих методів IPA" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "Словник закодованих JSON об’єктів IPA" + +msgid "Dictionary check" +msgstr "Перевірка за словником" + +msgid "Dictionary mapping plugin names to bases" +msgstr "Словник для встановлення відповідності назв додатків основним" + +msgid "Dictionary mapping variable name to value" +msgstr "Відображення назви змінної на значення за словником" + +msgid "Digest" +msgstr "Контрольна сума" + +msgid "Digest Type" +msgstr "Тип контрольної суми" + +msgid "Digits" +msgstr "Цифри" + +msgid "Direct" +msgstr "Безпосередній" + +msgid "Direct Membership" +msgstr "Безпосередня участь" + +msgid "Direction Latitude" +msgstr "Півкуля широти" + +msgid "Direction Longitude" +msgstr "Півкуля довготи" + +msgid "Direction of replication between left and right replication node" +msgstr "Напрямок реплікації між лівим і правим вузлами реплікації" + +msgid "Disable" +msgstr "Вимкнути" + +msgid "Disable DNS Forward Zone." +msgstr "Вимкнути зону переспрямовування DNS." + +msgid "Disable DNS Zone." +msgstr "Вимкнути зону DNS." + +msgid "Disable a CA ACL." +msgstr "Вимкнути CA ACL." + +msgid "Disable a CA." +msgstr "Вимкнути службу сертифікації." + +msgid "Disable a Certificate Identity Mapping Rule." +msgstr "Вимкнути правило прив’язування сертифікатів до профілів." + +msgid "Disable a Sudo Rule." +msgstr "Вимкнути правило sudo." + +msgid "Disable a user account." +msgstr "Вимкнути обліковий запис користувача." + +msgid "Disable an HBAC rule." +msgstr "Вимкнути правило HBAC." + +msgid "Disable an SELinux User Map rule." +msgstr "Вимкнути правило карти користувачів SELinux." + +msgid "Disable per-user override" +msgstr "Вимкнути перевизначення на рівні користувача" + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "Вимкнути ключ Kerberos і сертифікат SSL служби." + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "Вимкнути ключ Kerberos, сертифікат SSL і всі служби на вузлі." + +msgid "Disable token" +msgstr "Вимкнути жетон" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "Вимкнути використання ресурсів IPA доменом правила довіри" + +msgid "Disabled" +msgstr "Вимкнено" + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "Вимкнено службу сертифікації «%(value)s»" + +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "Вимкнено CA ACL «%(value)s»" + +#, python-format +msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Вимкнено правило прив’язування сертифікатів до профілів «%(value)s»" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "Вимкнено зону переспрямовування DNS «%(value)s»" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "Вимкнено зону DNS «%(value)s»" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "Вимкнено правило HBAC «%(value)s»" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "Вимкнено карту користувачів SELinux «%(value)s»" + +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "Вимкнено правило «%s»" + +#, python-format +msgid "Disabled domain '%(domain)s' is not allowed" +msgstr "Вимкнений домен «%(domain)s» не можна використовувати" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "Вимкнено вузол «%(value)s»" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "Вимкнено службу «%(value)s»" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "Домен довіри «%(value)s» вимкнено" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "Вимкнено обліковий запис користувача «%(value)s»" + +#, python-brace-format +msgid "Disallow host groups to create keytab of '${primary_key}'" +msgstr "Заборонити групам вузлів створювати таблицю ключів «${primary_key}»" + +#, python-brace-format +msgid "Disallow host groups to retrieve keytab of '${primary_key}'" +msgstr "Заборонити групам вузлів отримувати таблицю ключів «${primary_key}»" + +#, python-brace-format +msgid "Disallow hosts to create keytab of '${primary_key}'" +msgstr "Заборонити вузлам створювати таблицю ключів «${primary_key}»" + +#, python-brace-format +msgid "Disallow hosts to retrieve keytab of '${primary_key}'" +msgstr "Заборонити вузлам отримувати таблицю ключів «${primary_key}»" + +#, python-brace-format +msgid "Disallow user groups to create keytab of '${primary_key}'" +msgstr "" +"Заборонити групам користувачів створювати таблицю ключів «${primary_key}»" + +#, python-brace-format +msgid "Disallow user groups to retrieve keytab of '${primary_key}'" +msgstr "" +"Заборонити групам користувачів отримувати таблицю ключів «${primary_key}»" + +#, python-brace-format +msgid "Disallow users to create keytab of '${primary_key}'" +msgstr "Заборонити користувачам створювати таблицю ключів «${primary_key}»" + +#, python-brace-format +msgid "Disallow users to retrieve keytab of '${primary_key}'" +msgstr "Заборонити користувачам отримувати таблицю ключів «${primary_key}»" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "" +"Заборонити користувачам, групам, вузлам і групам вузлів створювати таблицю " +"ключів цього вузла." + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "" +"Заборонити користувачам, групам, вузлам і групам вузлів створювати таблицю " +"ключів цієї служби." + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "" +"Заборонити користувачам, групам, вузлам і групам вузлів отримувати таблицю " +"ключів цього вузла." + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "" +"Заборонити користувачам, групам, вузлам і групам вузлів отримувати таблицю " +"ключів цієї служби." + +#, c-format +msgid "Discovered server %s\n" +msgstr "Виявлений сервер %s\n" + +msgid "Display Class of Service entry" +msgstr "Показати запис класу служби" + +msgid "Display DNS resource." +msgstr "Показати ресурс DNS." + +msgid "Display Sudo Command Group." +msgstr "Показати групу команд sudo." + +msgid "Display Sudo Command." +msgstr "Показати команду sudo." + +msgid "Display Sudo Rule." +msgstr "Показати правило sudo." + +msgid "Display a segment." +msgstr "Показати сегмент." + +msgid "Display a single ACI given an ACI name." +msgstr "Показати окремий запис ACI за вказаною назвою ACI." + +msgid "Display an automount key." +msgstr "Показати ключ автоматичного монтування." + +msgid "Display an automount location." +msgstr "Показати запис автоматичного монтування." + +msgid "Display an automount map." +msgstr "Показати карту автоматичного монтування." + +msgid "Display configuration of a DNS server." +msgstr "Показати налаштування сервера DNS." + +msgid "Display current entitlements." +msgstr "Показати поточні іменування." + +msgid "Display effective policy for a specific user" +msgstr "Показати поточні правила для певного користувача" + +msgid "Display information about a Certificate Identity Mapping Rule." +msgstr "Вивести дані щодо правила прив’язування сертифікатів до профілів." + +msgid "Display information about a DNS forward zone." +msgstr "Показ даних щодо зони переспрямовування DNS." + +msgid "Display information about a DNS zone (SOA record)." +msgstr "Показати дані щодо зони DNS (запису SOA)." + +msgid "Display information about a RADIUS proxy server." +msgstr "Показати дані щодо проксі-сервера RADIUS." + +msgid "Display information about a class." +msgstr "Показати дані щодо класу." + +msgid "Display information about a command output." +msgstr "Показати інформацію щодо даних, які виводить команда." + +msgid "Display information about a command parameter." +msgstr "Показати інформацію щодо параметра команди." + +msgid "Display information about a command." +msgstr "Показати інформацію щодо команди." + +msgid "Display information about a delegation." +msgstr "Показати дані щодо уповноваження." + +msgid "Display information about a help topic." +msgstr "Показати дані щодо теми довідки." + +msgid "Display information about a host." +msgstr "Показати дані щодо вузла." + +msgid "Display information about a hostgroup." +msgstr "Показати дані щодо групи вузлів." + +msgid "Display information about a named group." +msgstr "Показати дані щодо іменованої групи." + +msgid "Display information about a named service delegation rule." +msgstr "Показати дані щодо іменованого правила делегування служб." + +msgid "Display information about a named service delegation target." +msgstr "Показати дані щодо іменованого призначення делегування служб." + +msgid "Display information about a netgroup." +msgstr "Показати дані щодо мережевої групи." + +msgid "Display information about a permission." +msgstr "Показати дані щодо прав доступу." + +msgid "Display information about a privilege." +msgstr "Показати дані щодо привілею." + +msgid "Display information about a range." +msgstr "Показати дані щодо діапазону." + +msgid "Display information about a role." +msgstr "Показати дані щодо ролі." + +msgid "Display information about a self-service permission." +msgstr "Показати дані щодо прав доступу автослужби." + +msgid "Display information about a stage user." +msgstr "Показати дані щодо користувача етапу." + +msgid "Display information about a subordinate id." +msgstr "Показати дані щодо підлеглого ідентифікатора." + +msgid "Display information about a trust." +msgstr "Показати дані щодо довіри." + +msgid "Display information about a user." +msgstr "Показати дані щодо користувача." + +msgid "Display information about a vault container." +msgstr "Показати дані щодо контейнера сховищ." + +msgid "Display information about a vault." +msgstr "Показати дані щодо сховища." + +msgid "Display information about an Group ID override." +msgstr "Показати дані щодо перевизначення ідентифікаторів групи." + +msgid "Display information about an HBAC service group." +msgstr "Показати дані щодо групи служб HBAC." + +msgid "Display information about an HBAC service." +msgstr "Показати дані щодо служби HBAC." + +msgid "Display information about an ID View." +msgstr "Показати дані щодо перегляду ідентифікаторів." + +msgid "Display information about an ID override." +msgstr "Показати дані щодо перевизначення ідентифікатора." + +msgid "Display information about an IPA location." +msgstr "Показати дані щодо місця IPA." + +msgid "Display information about an IPA service." +msgstr "Показати дані щодо служби IPA." + +msgid "Display information about an Identity Provider server." +msgstr "Показати дані щодо сервера надавача профілів." + +msgid "Display information about an OTP token." +msgstr "Показати інформацію щодо жетона OTP." + +msgid "Display information about an User ID override." +msgstr "Показати дані щодо перевизначення ідентифікатора користувача." + +msgid "Display information about an automember rule." +msgstr "Показати дані щодо правила автоматичної участі." + +msgid "Display information about password policy." +msgstr "Показати дані щодо групи правил для паролів." + +msgid "Display information about the default (fallback) automember groups." +msgstr "Показати дані щодо типових (резервних) груп автоматичної участі." + +msgid "Display name" +msgstr "Екранне ім'я" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "" +"Показати права доступу цього запису (потребує --all). Докладніше про це " +"можна дізнатися зі сторінки довідника (man) ipa." + +msgid "Display the current Kerberos ticket policy." +msgstr "Показати поточні правила квитків Kerberos." + +msgid "Display the list of realm domains." +msgstr "Показати список доменів області." + +msgid "Display the properties of a CA ACL." +msgstr "Показати властивості CA ACL." + +msgid "Display the properties of a CA." +msgstr "Показати властивості CA." + +msgid "Display the properties of a Certificate Profile." +msgstr "Показати властивості профілю сертифікатів." + +msgid "Display the properties of a SELinux User Map rule." +msgstr "Показати властивості правила карти користувачів SELinux." + +msgid "Display the properties of an HBAC rule." +msgstr "Показати властивості правила HBAC." + +msgid "Display user record for current Kerberos principal" +msgstr "" +"Показати запис користувача для поточного реєстраційного запису Kerberos" + +msgid "Do not display QR code" +msgstr "Не показувати код QR" + +msgid "Do not update records only return expected records" +msgstr "Не оновлювати записи, лише повернути список очікуваних записів" + +msgid "Do you also want to perform DNS check?" +msgstr "Хочете також виконати перевірку DNS?" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "Хочете перевірити, чи є адреса нового основного сервера назв у DNS" + +#, python-brace-format +msgid "Do you want to remove certificate mapping data ${data}?" +msgstr "Хочете вилучити дані прив’язки до сертифікатів ${data}?" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "Ви хочете вилучити псевдонім kerberos ${alias}?" + +msgid "Do you want to remove the certificate hold?" +msgstr "Хочете вилучити затримання сертифіката?" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "Хочете відкликати цей сертифікат? Виберіть причину зі спадного списку." + +msgid "Do you want to update system DNS records?" +msgstr "Хочете оновити записи DNS системи?" + +msgid "Documentation" +msgstr "Документація" + +msgid "Dogtag Authority ID" +msgstr "Ід. Dogtag центру" + +msgid "Domain" +msgstr "Домен" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "Домен «%(domain)s» не є кореневим доменом для лісу «%(forest)s»" + +msgid "Domain GUID" +msgstr "GUID домену" + +msgid "Domain Level" +msgstr "Рівень домену" + +msgid "Domain Level cannot be lowered." +msgstr "Не можна знижувати рівень домену." + +#, python-brace-format +msgid "" +"Domain Level cannot be raised to {0}, existing replication conflicts have to " +"be resolved." +msgstr "" +"Рівень домену не може бути піднято до {0}, слід розв’язати наявні конфлікти " +"реплікації." + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "" +"Не можна підняти рівень домену до {0}, оскільки на сервері {1} не " +"передбачено підтримки такого рівня." + +msgid "Domain NetBIOS name" +msgstr "Назва домену у NetBIOS" + +msgid "Domain SID" +msgstr "Домен SID" + +msgid "Domain SID of the trusted domain" +msgstr "SID довіреного домену" + +msgid "Domain Security Identifier" +msgstr "Ідентифікатор безпеки домену" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "Контролер домену Active Directory (необов’язковий)" + +msgid "Domain enabled" +msgstr "Домен увімкнено" + +msgid "Domain name" +msgstr "Назва домену" + +msgid "Domain resolution order" +msgstr "Порядок визначення доменів" + +msgid "Domain where the user entry will be searched" +msgstr "Домен, у якому слід шукати запис користувача" + +msgid "Don't create user private group" +msgstr "Не створювати закриту групу користувача" + +msgid "Don't wait for rebuilding membership" +msgstr "Не чекати на завершення перебудови записів участі" + +msgid "Download" +msgstr "Отримати" + +msgid "Download certificate as PEM formatted file." +msgstr "Отримати сертифікат у формі файла формату PEM." + +msgid "Drive to mount a home directory" +msgstr "Диск монтування домашнього каталогу" + +msgid "Dry run" +msgstr "Тестовий запуск" + +msgid "Duplicate keys skipped:" +msgstr "Пропущені дублікати ключів:" + +msgid "Duplicate maps skipped:" +msgstr "Пропущені дублікати карт:" + +msgid "Dynamic update" +msgstr "Динамічне оновлення" + +msgid "Edit" +msgstr "Змінити" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "Змінити ${entity}" + +msgid "Effective attributes" +msgstr "Ефективні атрибути" + +msgid "Email address" +msgstr "Адреса ел. пошти" + +msgid "Employee Information" +msgstr "Відомості щодо працівника" + +msgid "Employee Number" +msgstr "Номер працівника" + +msgid "Employee Type" +msgstr "Тип працівника" + +msgid "Empty domain is not allowed" +msgstr "Не можна використовувати порожні домени" + +msgid "Enable" +msgstr "Увімкнути" + +msgid "Enable DNS Forward Zone." +msgstr "Увімкнути зону переспрямовування DNS." + +msgid "Enable DNS Zone." +msgstr "Увімкнути зону DNS." + +msgid "Enable a CA ACL." +msgstr "Увімкнути CA ACL." + +msgid "Enable a CA." +msgstr "Увімкнути службу сертифікації." + +msgid "Enable a Certificate Identity Mapping Rule." +msgstr "Увімкнути правило прив’язування сертифікатів до профілів." + +msgid "Enable a Sudo Rule." +msgstr "Увімкнути правило sudo." + +msgid "Enable a user account." +msgstr "Увімкнути обліковий запис користувача." + +msgid "Enable adding subids to new users" +msgstr "Увімкнути додавання підлеглих ідентифікаторів для нових користувачів" + +msgid "Enable an HBAC rule." +msgstr "Увімкнути правило HBAC." + +msgid "Enable an SELinux User Map rule." +msgstr "Увімкнути правило карти користувачів SELinux." + +msgid "Enable migration mode" +msgstr "Увімкнути режим міграції" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "Увімкнути або вимкнути анонімний PKINIT." + +msgid "Enable support for trusted domains for old clients" +msgstr "Увімкнути підтримку довірених доменів для застарілих клієнтів" + +msgid "Enable token" +msgstr "Увімкнути жетон" + +msgid "Enabled" +msgstr "Увімкнено" + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "Увімкнено службу сертифікації «%(value)s»" + +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "Увімкнено CA ACL «%(value)s»" + +#, python-format +msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Увімкнено правило прив’язування сертифікатів до профілів «%(value)s»" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "Увімкнено зону переспрямовування DNS «%(value)s»" + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "Увімкнено зону DNS «%(value)s»" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "Увімкнено правило HBAC «%(value)s»" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "Увімкнено карту користувачів SELinux «%(value)s»" + +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "Увімкнено правило sudo «%s»" + +msgid "Enabled server roles" +msgstr "Увімкнені ролі сервера" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "Увімкнено домен довіри «%(value)s»" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "Увімкнено обліковий запис користувача «%(value)s»" + +msgid "Encryption types to request" +msgstr "Типи шифрування, запит щодо яких слід надсилати" + +msgid "Enctype comparison failed!\n" +msgstr "Спроба порівняння значень типу шифрування зазнала невдачі!\n" + +msgid "Enrolled" +msgstr "Зареєстровано" + +msgid "Enrollment" +msgstr "Реєстрація" + +msgid "Enrollment UUID" +msgstr "UUID надання ролей" + +msgid "Enrollment UUID (not implemented)" +msgstr "UUID надання ролі (не реалізовано)" + +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "Помилка реєстрування. %s\n" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "Введіть %(label)s ще раз для перевірки: " + +msgid "Enter LDAP password" +msgstr "Вкажіть пароль до LDAP" + +msgid "Enter trusted group name." +msgstr "Введіть назву довіреної групи." + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "" +"Введіть назву запису довіреної групи або групи IPA. Зауваження: у списку " +"результатів пошуку не буде записів груп із довірених доменів." + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "" +"Введіть назву облікового запису довіреного користувача або користувача IPA. " +"Зауваження: у списку результатів пошуку не буде записів користувачів із " +"довірених доменів." + +msgid "Enter trusted user login." +msgstr "Введіть назву запису довіреного користувача." + +msgid "Entry" +msgstr "Запис" + +#, python-format +msgid "Entry %s does not exist" +msgstr "Запису %s не існує" + +#, python-format +msgid "Entry %s not found" +msgstr "Запису %s не знайдено" + +msgid "Entry RDN is not 'uid'" +msgstr "RDN запису не належить до «uid»" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "У запису немає атрибута «%(attribute)s»" + +msgid "Enumerate all the hosts the view applies to." +msgstr "Пронумерувати усі вузли, до яких застосовний перегляд." + +msgid "Error" +msgstr "Помилка" + +msgid "Error changing account status" +msgstr "Помилка під час спроби зміни стану облікового запису" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "Помилка під час отримання типової області дії Kerberos: %s.\n" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "Помилка під час отримання початкових реєстраційних даних: %s.\n" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "Помилка під час обробки «%1$s»: %2$s.\n" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "Помилка при визначенні адрес таблиці ключів: %s.\n" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "Помилка під час спроби збереження реєстраційних даних у кеші: %s.\n" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "Встановлено двобічну довіру. Типово, довіра є лише однобічною вхідною." + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "" +"Встановити зовнішню довіру до домену у іншому лісі. Довіра не переходить за " +"межі домену." + +msgid "Establish using" +msgstr "Встановити за допомогою" + +msgid "Established and verified" +msgstr "Встановлено і перевірено" + +msgid "Exceeded number of tries to forward a request." +msgstr "Перевищено кількість спроб переспрямовування запиту." + +msgid "Exchanger" +msgstr "Обмінник" + +msgid "Exclude from" +msgstr "Виключити з" + +msgid "Excluded attributes" +msgstr "Атрибути виключення" + +msgid "Exclusive" +msgstr "Виключна" + +msgid "Exclusive Regex" +msgstr "Формальний вираз виключення" + +msgid "Expand All" +msgstr "Розгорнути всі" + +#, c-format +msgid "Expanding buffer in jsonrpc_handle_response failed" +msgstr "Не вдалося розгорнути буфер у jsonrpc_handle_response" + +msgid "Expires On" +msgstr "Строк дії" + +msgid "Export plugin meta-data for the webUI." +msgstr "Експортувати метадані додатка для webUI." + +msgid "Expression" +msgstr "Вираз" + +msgid "External" +msgstr "Зовнішній" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "" +"Зовнішня група, від імені якої можна віддавати команди (лише sudorule-find)" + +msgid "External Groups of RunAs Users" +msgstr "Зовнішні групи користувачів для запуску від імені" + +msgid "External Groups of users that the command can run as" +msgstr "Зовнішні групи користувачів, від імені яких можна виконувати команду" + +msgid "External IdP configuration" +msgstr "Налаштування зовнішнього IdP" + +msgid "External IdP user identifier" +msgstr "Ідентифікатор користувача зовнішнього IdP" + +msgid "External IdP user identifier attribute" +msgstr "Атрибут ідентифікатора користувача зовнішнього IdP" + +msgid "External Identity Provider" +msgstr "Зовнішній надавач профілів" + +msgid "External Identity Provider ticket maximum renewable age (seconds)" +msgstr "" +"Максимальний вік, протягом якого можливе поновлення квитка зовнішнього " +"надавача профілів (у секундах)" + +msgid "External Identity Provider ticket maximum ticket life (seconds)" +msgstr "" +"Максимальний строк дії квитка зовнішнього надавача профілів (у секундах)" + +msgid "External User" +msgstr "Зовнішній користувач" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "" +"Зовнішній користувач, від імені якого можна віддавати команди (лише sudorule-" +"find)" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "" +"Зовнішній користувач, до якого застосовуватиметься правило (лише sudorule-" +"find)" + +msgid "External host" +msgstr "Зовнішній вузол" + +msgid "External member" +msgstr "Зовнішній учасник" + +msgid "External trust" +msgstr "Зовнішня довіра" + +msgid "Extra hashes to generate in password plug-in" +msgstr "Додаткові хеші для створення у додатку паролів" + +msgid "Extra target filter" +msgstr "Додатковий фільтр призначення" + +#, c-format +msgid "Extracting the data from the JSON-RPC response failed: %s\n" +msgstr "Не вдалося видобути дані з відповіді JSON-RPC: %s\n" + +#, c-format +msgid "Extracting the error from the JSON-RPC response failed: %s\n" +msgstr "" +"Не вдалося видобути повідомлення про помилку з відповіді JSON-RPC: %s\n" + +msgid "Failed CAs" +msgstr "Помилкові CA" + +msgid "Failed RunAs" +msgstr "Помилка запуску від імені" + +msgid "Failed RunAsGroup" +msgstr "Помилка запуску від імені групи" + +msgid "Failed allowed to create keytab" +msgstr "Не вдалося дозволити створювати таблицю ключів" + +msgid "Failed allowed to retrieve keytab" +msgstr "Не вдалося дозволити отримувати таблицю ключів" + +msgid "Failed hosts/hostgroups" +msgstr "Помилка hosts/hostgroups" + +msgid "Failed logins" +msgstr "Кількість невдалих спроб увійти" + +msgid "Failed managedby" +msgstr "Помилка managedby" + +msgid "Failed member manager" +msgstr "Помилка керівника учасниками" + +msgid "Failed members" +msgstr "Помилка members" + +msgid "Failed owners" +msgstr "Записи власників із помилками" + +msgid "Failed profiles" +msgstr "Профілі із помилками" + +msgid "Failed service/service groups" +msgstr "Помилки служб/груп служб" + +msgid "Failed source hosts/hostgroups" +msgstr "Помилка hosts/hostgroups джерела" + +msgid "Failed targets" +msgstr "Помилкові цілі" + +msgid "Failed to add" +msgstr "Не вдалося додати" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "Не вдалося додати ключ до таблиці ключів\n" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "" +"Не вдалося додати користувача до типової групи. Додати користувача вручну " +"можна за допомогою команди «ipa group-add-member»." + +msgid "Failed to authenticate to CA REST API" +msgstr "" +"Не вдалося пройти розпізнавання за допомогою програмного інтерфейсу CA REST" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "Не вдалося прив’язати до сервера!\n" + +msgid "Failed to call DBus" +msgstr "Не вдалося викликати DBus" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "" +"Не вдалося вилучити %(principal)s memberPrincipal із запису s4u2proxy " +"%(dn)s: %(err)s" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "Не вдалося вилучити ключі Custodia для %(master)s: %(err)s" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "Не вдалося вилучити записи назви вузла DNA для %(master)s: %(err)s" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "Не вдалося вилучити записи DNS %(hostname)s: %(err)s" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "Не вдалося вилучити реєстраційні запис або ключі сервера: %(err)s" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "Не вдалося закрити таблицю ключів\n" + +msgid "Failed to connect to sssd over SystemBus. See details in the error_log" +msgstr "" +"Не вдалося встановити з’єднання із sssd за допомогою SystemBus. Докладніший " +"опис — у файлі error_log" + +#, c-format +msgid "Failed to create control!\n" +msgstr "Не вдалося створити керування!\n" + +#, c-format +msgid "Failed to create key material\n" +msgstr "Не вдалося створити вихідні дані для ключа\n" + +msgid "Failed to create key!\n" +msgstr "Не вдалося створити ключ!\n" + +msgid "Failed to create random key!\n" +msgstr "Не вдалося створити випадковий ключ!\n" + +msgid "Failed to decode control reply!\n" +msgstr "Не вдалося декодувати контрольну відповідь!\n" + +msgid "Failed to find users over SystemBus. See details in the error_log" +msgstr "" +"Не вдалося знайти користувачів за допомогою SystemBus. Докладніший опис — у " +"файлі error_log" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "Не вдалося отримати таблицю ключів\n" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "Не вдалося отримати таблицю ключів!\n" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "Не вдалося отримати результат: %s\n" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "Не вдалося відкрити таблицю ключів\n" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "Не вдалося відкрити файл налаштувань %s\n" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "Не вдалося відкрити таблицю ключів\n" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "Не вдалося відкрити таблицю ключів «%1$s»: %2$s\n" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "Не вдалося обробити файл налаштувань %s\n" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "Не вдалося обробити розширений результат: %s\n" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "Не вдалося обробити результат: %s\n" + +msgid "Failed to remove" +msgstr "Спроба вилучення зазнала невдачі" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "" +"Не вдалося вилучити запис сервера %(master)s зі списку серверів: %(err)s" + +#, python-format +msgid "Failed to remove server from security domain: %s" +msgstr "Не вдалося вилучити запис сервер з домену безпеки: %s" + +msgid "Failed to resolve symlink to keytab.\n" +msgstr "Не вдалося визначити таблицю ключів за символічним посиланням.\n" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "Не вдалося отримати жодного ключа" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "Не вдалося отримати дані щодо типу шифрування %1$s (№%2$d)\n" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "Не вдалося отримати дані щодо типу шифрування №%d\n" + +#, c-format +msgid "Failed to set cursor '%1$s'\n" +msgstr "Не вдалося встановити курсор, «%1$s»\n" + +msgid "Failed users/groups" +msgstr "Помилка users/groups" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "" +"Помилка під час декодування запиту на підписування сертифіката (CSR): %s" + +msgid "Failure reset interval" +msgstr "Проміжок скидання помилок" + +msgid "Fallback primary group" +msgstr "Резервна основна група" + +msgid "Fallback to AD DC LDAP" +msgstr "Повернення до резервного DC LDAP AD" + +msgid "False" +msgstr "Ні" + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "" +"False, якщо перенесення зазнає невдачі через увімкнення додатка сумісності." + +msgid "False if migration mode was disabled." +msgstr "False, якщо режим міграції було вимкнено." + +msgid "Fax Number" +msgstr "Номер факсу" + +msgid "Fetch domains" +msgstr "Отримати домени" + +msgid "Fetching DNS zones." +msgstr "Отримання даних щодо зон DNS." + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "" +"Спроба отримати список доменів із довіреного лісу зазнала невдачі. Подробиці " +"можна знайти у error_log" + +#, python-format +msgid "File %(file)s not found" +msgstr "Файла %(file)s не знайдено" + +msgid "File containing data to archive" +msgstr "Файл, що містить дані для архівування" + +msgid "File containing profile configuration" +msgstr "Файл, який містить налаштування профілів" + +msgid "File containing the new vault password" +msgstr "Файл, який містить новий пароль до сховища" + +msgid "File containing the new vault public key" +msgstr "Файл, який містить новий відкритий ключ сховища" + +msgid "File containing the old vault password" +msgstr "Файл, який містить старий пароль до сховища" + +msgid "File containing the old vault private key" +msgstr "Файл, який містить старий закритий ключ сховища" + +msgid "File containing the vault password" +msgstr "Файл, який містить пароль до сховища" + +msgid "File containing the vault private key" +msgstr "Файл, який містить закритий ключ сховища" + +msgid "File containing the vault public key" +msgstr "Файл, який містить відкритий ключ сховища" + +msgid "File to load the certificate from" +msgstr "Файл, з якого слід завантажити сертифікат" + +msgid "File to load the certificate from." +msgstr "Файл, з якого слід завантажити сертифікат." + +msgid "File to store retrieved data" +msgstr "Файл для зберігання отриманих даних" + +msgid "File to store the certificate in." +msgstr "Файл, у якому зберігатимуться дані сертифіката." + +msgid "Filename is empty" +msgstr "Порожня назва файла" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "" +"Назва файла профілю з необробленими даними. Підтримки формату XML не " +"передбачено." + +msgid "Filter" +msgstr "Фільтр" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "Доступний фільтр ${other_entity}" + +msgid "Find" +msgstr "Знайти" + +msgid "Find a server role on a server(s)" +msgstr "Знайти роль сервера на серверах" + +msgid "Fingerprint" +msgstr "Відбиток" + +msgid "Fingerprint (SHA1)" +msgstr "Відбиток (SHA1)" + +msgid "Fingerprint (SHA256)" +msgstr "Відбиток (SHA256)" + +msgid "Fingerprint Type" +msgstr "Тип відбитка" + +msgid "Fingerprint of schema cached by client" +msgstr "Відбиток схеми, кешований клієнтом" + +msgid "Fingerprints" +msgstr "Відбитки" + +msgid "First" +msgstr "Перший" + +msgid "First Code" +msgstr "Перший код" + +msgid "First OTP" +msgstr "Перший OTP" + +msgid "First Posix ID of the range" +msgstr "Перший ідентифікатор POSIX діапазону" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "" +"Перший ідентифікатор POSIX діапазону, зарезервованого для довіреного домену" + +msgid "First RID of the corresponding RID range" +msgstr "Перший RID відповідного діапазону RID" + +msgid "First RID of the secondary RID range" +msgstr "Перший RID вторинного діапазону RID" + +msgid "First date/time the token can be used" +msgstr "Час початку використання ключа (дата і час)" + +msgid "First name" +msgstr "Ім'я" + +msgid "Flags" +msgstr "Прапорці" + +msgid "Following segments were not deleted:" +msgstr "Вказані нижче сегменти не було вилучено:" + +msgid "Force" +msgstr "Примусово" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "" +"Примусове створення зони DNS, навіть якщо вона перекриватиметься із наявною." + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "" +"Примусово створити зону DNS, навіть якщо не вдається визначити адресу " +"сервера назв." + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "" +"Примусове створення зони DNS, навіть якщо адресу сервера назв не вдається " +"визначити. (застаріле)" + +msgid "Force Update" +msgstr "Примусове оновлення" + +msgid "Force adding domain even if not in DNS" +msgstr "Примусове додавання домену, навіть якщо назви немає у DNS" + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "" +"Примусово змінити сервер назв, навіть якщо запису сервера назв немає у DNS" + +msgid "Force server removal" +msgstr "Примусове вилучення сервера" + +msgid "Force server removal even if it does not exist" +msgstr "Примусове вилучення сервера, навіть якщо його не існує" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "" +"Долучити вузол у примусовому режимі. Повторне долучення виконуватиметься, " +"навіть якщо вузол вже долучено." + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "Примусово вилучаємо %(hostname)s" + +#, python-format +msgid "" +"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " +"prevents a trust to '%(conflict)s'" +msgstr "" +"У лісу «%(forest)s» наявні відносини довіри з лісами %(domains)s, що не дає " +"змоги встановити довіру до «%(conflict)s»" + +msgid "Format error" +msgstr "Помилка форматування" + +msgid "Forward first" +msgstr "Спочатку переспрямувати" + +msgid "Forward only" +msgstr "Лише переспрямовувати" + +msgid "Forward policy" +msgstr "Правила переспрямовування" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "" +"Для нього у DNS IPA визначено правила переспрямовування. Можливо, " +"переспрямовувач вказує не помилковий вузол?" + +msgid "Forward to server instead of running locally" +msgstr "Переспрямувати на сервер замість локального виконання" + +msgid "Forward zones only" +msgstr "Лише прямі зони" + +msgid "Forwarders" +msgstr "Переспрямовувачі" + +msgid "Forwarding disabled" +msgstr "Переспрямовування вимкнено" + +msgid "" +"Forwarding policy conflicts with some automatic empty zones. Queries for " +"zones specified by RFC 6303 will ignore forwarding and recursion and always " +"result in NXDOMAIN answers. To override this behavior use forward policy " +"'only'." +msgstr "" +"Правила переспрямовування конфліктують із деякими автоматично порожніми " +"зонами. Запити для зон, вказаних на основі RFC 6303, ігноруватимуть " +"переспрямовування і завжди призводитимуть до відповідей NXDOMAIN. Щоб " +"перевизначити цю поведінку, скористайтеся правилами переспрямовування «only»." + +#, python-format +msgid "Found '%(value)s'" +msgstr "Знайдено «%(value)s»" + +msgid "Full name" +msgstr "Повне ім’я" + +msgid "Fully Qualified Host Name" +msgstr "Повна назва вузла" + +msgid "Function to get details" +msgstr "Функція, подробиці щодо якої слід отримати" + +msgid "GECOS" +msgstr "GECOS" + +msgid "GECOS field" +msgstr "поле GECOS" + +msgid "GID" +msgstr "GID" + +msgid "GID (use this option to set it manually)" +msgstr "GID (за допомогою цього параметра можна встановити значення вручну)" + +msgid "GSSAPI|EXTERNAL" +msgstr "GSSAPI|EXTERNAL" + +msgid "General" +msgstr "Загальне" + +msgid "Generate OTP" +msgstr "Створити OTP" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "" +"Створити випадковий пароль, який буде використано для загальної реєстрації" + +msgid "Generate a random user password" +msgstr "Створити випадковий пароль для користувача" + +msgid "Generate and auto-assign subuid and subgid range to user entry" +msgstr "" +"Створити і автоматично призначити до запису користувача діапазон subuid та " +"subgid" + +msgid "Generate automount files for a specific location." +msgstr "Створити файли automount для певної адреси." + +msgid "Generated OTP" +msgstr "Створений OTP" + +msgid "Get" +msgstr "Отримати" + +msgid "Get Certificate" +msgstr "Отримати сертифікат" + +msgid "Github" +msgstr "Github" + +msgid "Global DNS configuration is empty" +msgstr "Загальні налаштування DNS є порожніми" + +msgid "Global Trust Configuration" +msgstr "Загальні довірені налаштування" + +msgid "Global forwarders" +msgstr "Загальні переспрямовувачі" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Переспрямовувачі загального рівня. Для кожного переспрямовувача можна " +"вказати нетиповий порт за допомогою стандартного формату: «IP_АДРЕСА port " +"ПОРТ»" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "" +"Загальні правил переспрямовування. Щоб вимкнути будь-які переспрямовувачі на " +"загальному рівні, встановіть значення «none»." + +msgid "Google" +msgstr "Google" + +msgid "Grace login limit" +msgstr "Обмеження входів лояльності" + +msgid "Granted rights" +msgstr "Надані права" + +msgid "Granted to Privilege" +msgstr "Надані привілеї" + +msgid "Granting privilege to roles" +msgstr "Надання привілеїв ролям" + +msgid "Group" +msgstr "Група" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "Групи з назвою «%s» не існує" + +msgid "Group ID Number" +msgstr "Ід. номер групи" + +msgid "Group ID override" +msgstr "Перевизначення ідентифікатора групи" + +msgid "Group ID overrides" +msgstr "Перевизначення ідентифікатора групи" + +msgid "Group Options" +msgstr "Параметри групи" + +msgid "Group Settings" +msgstr "Параметри групи" + +msgid "Group Type" +msgstr "Тип групи" + +msgid "Group categories" +msgstr "Категорії груп" + +msgid "Group container" +msgstr "Контейнер груп" + +msgid "Group description" +msgstr "Опис групи" + +msgid "Group name" +msgstr "Назва групи" + +msgid "Group object class" +msgstr "Клас об’єктів групи" + +msgid "Group object overrides" +msgstr "Пріоритет об’єкта групи" + +msgid "Group search fields" +msgstr "Поля пошуку груп" + +msgid "Group to apply ACI to" +msgstr "Група, до якої слід застосувати ACI" + +msgid "Group to override" +msgstr "Група для перевизначення" + +msgid "Grouping Type" +msgstr "Тип групування" + +msgid "Grouping to which the rule applies" +msgstr "Групування, якого стосується правило" + +msgid "Groups" +msgstr "Групи" + +msgid "Groups allowed to create keytab" +msgstr "Групи, яким дозволено створення таблиці ключів" + +msgid "Groups allowed to retrieve keytab" +msgstr "Групи, яким дозволено отримувати таблицю ключів" + +msgid "Groups of RunAs Users" +msgstr "Групи користувачів запуску від імені" + +msgid "HBAC Rule" +msgstr "Правило HBAC" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "Правило HBAC, яке визначає користувачів, групи і групи вузлів" + +msgid "HBAC Rules" +msgstr "Правила HBAC" + +msgid "HBAC Service" +msgstr "Служба HBAC" + +msgid "HBAC Service Group" +msgstr "Група служб HBAC" + +msgid "HBAC Service Groups" +msgstr "Група служб HBAC" + +msgid "HBAC Services" +msgstr "Служби HBAC" + +msgid "HBAC Test" +msgstr "Тест HBAC" + +msgid "HBAC rule" +msgstr "Правило HBAC" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "Не знайдено правила HBAC %(rule)s" + +msgid "HBAC rule and local members cannot both be set" +msgstr "Не можна одночасно вказувати правило HBAC і локальних учасників" + +msgid "HBAC rules" +msgstr "правила HBAC" + +msgid "HBAC service" +msgstr "Служба HBAC" + +msgid "HBAC service description" +msgstr "Опис служби HBAC" + +msgid "HBAC service group" +msgstr "група служб HBAC" + +msgid "HBAC service group description" +msgstr "Опис групи служб HBAC" + +msgid "HBAC service groups" +msgstr "Група служб HBAC" + +msgid "HBAC service groups to add" +msgstr "група служб HBAC для додавання" + +msgid "HBAC service groups to remove" +msgstr "групи служб HBAC для вилучення" + +msgid "HBAC services" +msgstr "Служби HBAC" + +msgid "HBAC services to add" +msgstr "служби HBAC для додавання" + +msgid "HBAC services to remove" +msgstr "служби HBAC для вилучення" + +msgid "HIP record" +msgstr "Запис HIP" + +msgid "HOTP Authentication Window" +msgstr "Вікно розпізнавання HOTP" + +msgid "HOTP Synchronization Window" +msgstr "Вікно синхронізації HOTP" + +msgid "HOTP authentication skip-ahead" +msgstr "Випереджальне пропускання розпізнавання HOTP" + +msgid "HOTP synchronization skip-ahead" +msgstr "Випереджальне пропускання синхронізації HOTP" + +msgid "HTTP Error" +msgstr "Помилка HTTP" + +msgid "Hardened Password (by SPAKE or FAST)" +msgstr "Захищений пароль (за допомогою SPAKE або FAST)" + +msgid "Hardened max life" +msgstr "Макс. строк дії Hardened" + +msgid "Hardened max renew" +msgstr "Макс. вік поновлення Hardened" + +msgid "Hardened ticket maximum renewable age (seconds)" +msgstr "" +"Максимальний вік, протягом якого можливе поновлення квитка Hardened (у " +"секундах)" + +msgid "Hardened ticket maximum ticket life (seconds)" +msgstr "Максимальний строк дії квитка Hardened (у секундах)" + +msgid "Hardware MAC address(es) on this host" +msgstr "Апаратні MAC-адреси цього вузла" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "Апаратна платформа вузла (наприклад, «Lenovo T61»)" + +msgid "Hello world" +msgstr "Привіт, світе" + +msgid "Help topic" +msgstr "Тема довідки" + +msgid "Hidden IPA CA servers" +msgstr "Приховані сервери CA IPA" + +msgid "Hidden IPA DNS servers" +msgstr "Приховані сервери DNS IPA" + +msgid "Hidden IPA KRA servers" +msgstr "Приховані сервери KRA IPA" + +msgid "Hidden IPA masters" +msgstr "Приховані основні сервери IPA" + +msgid "Hidden IPA servers configured as certificate authority" +msgstr "Приховані сервери IPA, які налаштовано як служби сертифікації" + +msgid "Hidden IPA servers configured as domain name server" +msgstr "Приховані сервери IPA, які налаштовано як сервери назв доменів" + +msgid "Hidden IPA servers configured as key recovery agent" +msgstr "Приховані сервери IPA, які налаштовано як агенти відновлення ключів" + +msgid "Hide" +msgstr "Приховати" + +msgid "Hide details" +msgstr "Сховати подробиці" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "" +"Приховати дані щодо того, які правила є відповідними, які не є відповідними " +"і які є некоректними" + +msgid "History size" +msgstr "Розмір журналу" + +msgid "Home directory" +msgstr "Домашній каталог" + +msgid "Home directory base" +msgstr "Адреса домашніх каталогів" + +msgid "Horizontal Precision" +msgstr "Точність за горизонталлю" + +msgid "Host" +msgstr "Вузол" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "Вузла «%(host)s» не знайдено" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "На вузлі «%(hostname)s» немає відповідного запису DNS A/AAAA" + +#, python-format +msgid "Host '%(hostname)s' is not an active KDC" +msgstr "Вузол «%(hostname)s» не є активним KDC" + +msgid "Host Certificate" +msgstr "Сертифікат вузла" + +msgid "Host Group" +msgstr "Група вузлів" + +msgid "Host Group Settings" +msgstr "Параметри групи вузлів" + +msgid "Host Groups" +msgstr "Групи вузлів" + +msgid "Host Groups allowed to create keytab" +msgstr "Групи вузлів, яким дозволено створення таблиці ключів" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "Групи вузлів, яким дозволено отримувати таблицю ключів" + +msgid "Host Masks" +msgstr "Маски вузлів" + +msgid "Host Name" +msgstr "Назва вузла" + +msgid "Host Settings" +msgstr "Параметри вузла" + +msgid "Host category" +msgstr "Категорія вузлів" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" +"Категорія вузлів (семантика розташування цього атрибуту призначена для " +"локальної обробки)" + +msgid "Host category the ACL applies to" +msgstr "Категорія вузлів, до якої застосовується ACL" + +msgid "Host category the rule applies to" +msgstr "Категорія вузлів, до якої застосовується правило" + +msgid "Host group rule" +msgstr "Правило групи вузлів" + +msgid "Host group rules" +msgstr "Правила груп вузлів" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "Апаратна платформа вузла (наприклад, «Lenovo T61»)" + +#, c-format +msgid "Host is already joined.\n" +msgstr "Вузол вже приєднано.\n" + +msgid "Host is not supported" +msgstr "Підтримки вузла не передбачено" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "Адреса розташування вузла (наприклад, «Київ, Україна»)" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "Розташування вузла (наприклад, «Lab 2»)" + +msgid "Host name" +msgstr "Назва вузла" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "Операційна система вузла і її версія (наприклад, «Fedora 9\")" + +msgid "Host unprovisioned" +msgstr "Вузол не передбачено" + +msgid "Host-Based Access Control" +msgstr "Керування доступом на основі вузлів" + +msgid "Host-based access control commands" +msgstr "Команди керування доступом на основі вузлів" + +msgid "Host-group" +msgstr "Група вузлів" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" +"Групи вузлів, до чиїх вузлів буде застосовано перегляд ідентифікаторів. Будь " +"ласка, зауважте, що перегляд не застосовується автоматично до жодних вузлів, " +"доданих до групи вузлів після виконання команди idview-apply." + +msgid "" +"Hostgroups whose hosts should have ID Views cleared. Note that view is not " +"cleared automatically from any host added to the hostgroup after running " +"idview-unapply command." +msgstr "" +"Групи вузлів, для вузлів яких знято обробку переглядами ідентифікаторів. " +"Зауважте, що після запуску команди idview-unapply перегляд з будь-якого " +"вузла, доданого до групи вузлів, не зніматиметься автоматично." + +msgid "Hostname" +msgstr "Назва вузла" + +msgid "Hostname (FQDN)" +msgstr "Назва вузла (FQDN)" + +msgid "Hostname of this server" +msgstr "Назва вузла цього сервера" + +msgid "Hosts" +msgstr "Вузли" + +msgid "Hosts allowed to create keytab" +msgstr "Вузли, яким дозволено створення таблиці ключів" + +msgid "Hosts allowed to retrieve keytab" +msgstr "Вузли, яким дозволено отримувати таблицю ключів" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "" +"Вузли або групи вузлів, з яких не можна зняти перегляд ідентифікаторів." + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "" +"Вузли або групи вузлів, до яких не можна застосувати цей перегляд " +"ідентифікаторів." + +msgid "Hosts that ID View was cleared from." +msgstr "Вузли, з яких знято перегляд ідентифікаторів." + +msgid "Hosts that this ID View was applied to." +msgstr "Вузли, до яких було застосовано цей перегляд ідентифікаторів." + +msgid "Hosts the view applies to" +msgstr "Вузли, до яких застосовний перегляд" + +msgid "Hosts to apply the ID View to" +msgstr "Вузли, до яких слід застосувати перегляд ідентифікаторів" + +msgid "Hosts to clear (any) ID View from." +msgstr "Вузли, з яких слід зняти (будь-який) перегляд ідентифікаторів." + +msgid "How long should negative responses be cached" +msgstr "Тривалість кешування відмов" + +msgid "ID Range" +msgstr "Діапазон ідентифікаторів" + +msgid "ID Ranges" +msgstr "Діапазони ідентифікаторів" + +msgid "ID View" +msgstr "Перегляд ідентифікаторів" + +msgid "ID View Name" +msgstr "Назва перегляду ідентифікаторів" + +msgid "ID View already applied" +msgstr "Перегляд ідентифікаторів уже застосовано" + +#, python-format +msgid "ID View applied to %i host." +msgstr "Перегляд ідентифікаторів застосовано до %i вузла." + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "Перегляд ідентифікаторів застосовано до %i вузлів." + +msgid "ID View cannot be applied to IPA master" +msgstr "" +"Перегляд ідентифікаторів не може бути застосовано до основного сервера IPA" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "Перегляд ідентифікаторів знято з %i вузла." + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "Перегляд ідентифікаторів знято з %i вузлів." + +msgid "ID Views" +msgstr "Перегляди ідентифікаторів" + +msgid "ID override" +msgstr "Перевизначення ідентифікатора" + +msgid "ID overrides cannot be renamed" +msgstr "Перевизначення ідентифікаторів не можна перейменовувати" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" +"Діапазон ідентифікаторів для довіреного домену вже існує, але належить до " +"іншого типу. Будь ласка, вилучіть попередній діапазон вручну або не " +"визначайте тип у примусовому порядку за допомогою параметра --range-type." + +msgid "ID range type, one of allowed values" +msgstr "Тип діапазону ідентифікаторів, одне з дозволених значень" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "" +"Тип діапазону ідентифікаторів. Можливі варіанти: ipa-ad-trust-posix, ipa-ad-" +"trust, ipa-local" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "" +"Вже існує діапазон ідентифікаторів з тією самою назвою але іншим доменом " +"SID. Діапазон ідентифікаторів для нового довіреного домену має бути створено " +"вручну." + +msgid "IP Address" +msgstr "IP-адреса" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "IP-адресу %(ip)s вже призначено у домені %(domain)s." + +#, python-format +msgid "IP address in subjectAltName (%s) does not have PTR record" +msgstr "IP-адреса у subjectAltName (%s) не містить запису PTR" + +#, python-format +msgid "IP address in subjectAltName (%s) unreachable from DNS names" +msgstr "IP-адреса у subjectAltName (%s) є недоступною з назв DNS" + +msgid "IP network to create reverse zone name from" +msgstr "Мережа IP для створення зворотних назв зони" + +msgid "IPA AD trust agents" +msgstr "Агенти довіри AD IPA" + +msgid "IPA AD trust controllers" +msgstr "Контролери довіри AD IPA" + +msgid "IPA CA cannot be deleted" +msgstr "CA IPA не може бути вилучено" + +msgid "IPA CA cannot be disabled" +msgstr "Службу сертифікації IPA не можна вимикати" + +msgid "IPA CA certificate" +msgstr "Сертифікат CA IPA" + +msgid "IPA CA renewal master" +msgstr "Основних вузол відновлення CA IPA" + +msgid "IPA CA servers" +msgstr "Сервери CA IPA" + +msgid "IPA DNS Server is not installed" +msgstr "Сервер DNS IPA не встановлено" + +msgid "IPA DNS records" +msgstr "Записи DNS IPA" + +msgid "IPA DNS servers" +msgstr "Сервери DNS IPA" + +msgid "IPA DNS version" +msgstr "Версія DNS IPA" + +msgid "IPA DNSSec key master" +msgstr "Основний сервер ключів DNSSec IPA" + +msgid "IPA Error" +msgstr "Помилка IPA" + +msgid "IPA KRA servers" +msgstr "Сервери KRA IPA" + +msgid "IPA Location" +msgstr "Місце IPA" + +msgid "IPA Location description" +msgstr "Опис місця IPA" + +msgid "IPA Locations" +msgstr "Місця IPA" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" +"Якщо вказано SID довіреного домену, типом діапазону IPA має бути ipa-ad-" +"trust або ipa-ad-trust-posix" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" +"private-groups is specified" +msgstr "" +"Якщо вказано auto-private-groups, типом діапазону IPA має бути ipa-ad-trust " +"або ipa-ad-trust-posix" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" +"Якщо не вказано SID довіреного домену, типом діапазону IPA не може бути ipa-" +"ad-trust або ipa-ad-trust-posix." + +msgid "IPA Server" +msgstr "Сервер IPA" + +msgid "IPA Server Role" +msgstr "Роль сервера IPA" + +msgid "IPA Server Roles" +msgstr "Ролі сервера IPA" + +msgid "IPA Server to use" +msgstr "Сервер IPA, який слід використовувати" + +msgid "IPA Servers" +msgstr "Сервери IPA" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "" +"IPA не керує зоною %(zone)s. Будь ласка, додайте запис на вашому сервері DNS " +"вручну" + +msgid "IPA location name" +msgstr "Назва місця IPA" + +msgid "IPA location records" +msgstr "Записи місць IPA" + +#, python-brace-format +msgid "" +"IPA manages DNS, please verify your DNS configuration and make sure that " +"service records of the '{domain}' domain can be resolved. Examples how to " +"configure DNS with CLI commands or the Web UI can be found in the " +"documentation. " +msgstr "" +"IPA керує DNS. Будь ласка, переконайтеся, що поточні налаштування DNS " +"уможливлюють визначення адрес службових записів домену «{domain}». Приклади " +"налаштовування DNS за допомогою командного інтерфейсу або вебінтерфейсу " +"наведено у документації. " + +msgid "IPA master capable of PKINIT" +msgstr "Основний IPA з можливістю PKINIT" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" +"Основний вузол IPA відмовив у запитах щодо затвердження довіри від AD DC " +"%(count)d разів. Найімовірніше, AD DC встановив зв’язок із реплікою, на якій " +"ще не виконано реплікацію даних щодо довіри. Крім того, будь ласка, " +"перевірте, чи може DNS AD визначати за записами SRV %(records)s коректний " +"сервер IPA." + +msgid "IPA master which can process PKINIT requests" +msgstr "Основний IPA, який може обробляти запити PKINIT" + +msgid "IPA masters" +msgstr "Основні вузли IPA" + +#, c-format +msgid "IPA namingContext not found\n" +msgstr "namingContext IPA не знайдено\n" + +msgid "IPA object" +msgstr "Об’єкт IPA" + +msgid "IPA role name" +msgstr "Назва ролі IPA" + +msgid "IPA server configured as DNSSec key master" +msgstr "Сервер IPA налаштований як основний сервер ключів DNSSec" + +msgid "IPA server domain cannot be deleted" +msgstr "Домен сервера IPA не можна вилучати" + +msgid "IPA server domain cannot be omitted" +msgstr "Домен сервера IPA не можна пропускати" + +msgid "IPA server hostname" +msgstr "Назва вузла сервера IPA" + +msgid "IPA server role name" +msgstr "Назва ролі сервера IPA" + +msgid "IPA servers configured as AD trust agents" +msgstr "Сервери IPA, які налаштовано як агенти довіри AD" + +msgid "IPA servers configured as AD trust controllers" +msgstr "Сервери IPA, які налаштовано як контролери довіри AD" + +msgid "IPA servers configured as certificate authority" +msgstr "Сервери IPA, які налаштовано як центри сертифікації" + +msgid "IPA servers configured as domain name server" +msgstr "Сервери IPA, які налаштовано як сервери назв доменів (DNS)" + +msgid "IPA servers configured as key recovery agent" +msgstr "Сервери IPA, які налаштовано як агенти відновлення ключів" + +msgid "IPA servers configured as key recovery agents" +msgstr "" +"Сервери IPA, налаштовані як агенти відновлення ключів (key recovery agents)" + +msgid "IPA trust" +msgstr "Довіра IPA" + +msgid "IPA unique ID" +msgstr "Унікальний ід. IPA" + +msgid "IPSECKEY record" +msgstr "Запис IPSECKEY" + +msgid "IdP max life" +msgstr "Макс. строк дії IdP" + +msgid "IdP max renew" +msgstr "Макс. вік поновлення IdP" + +msgid "IdP provider template" +msgstr "Шаблон надавача IdP" + +msgid "Identity" +msgstr "Профіль" + +msgid "Identity Provider server" +msgstr "Сервер надавача профілів" + +msgid "Identity Provider server name" +msgstr "Назва сервера надавача профілів" + +msgid "Identity Provider servers" +msgstr "Сервери надавачів профілів" + +msgid "Identity Settings" +msgstr "Параметри профілю" + +msgid "Identity provider details" +msgstr "Параметри надавача профілів" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "Якщо не вказано CA, буде дозволено запити до типового CA." + +msgid "If the problem persists please contact the system administrator." +msgstr "" +"Якщо проблему не вдасться усунути, зверніться до адміністратора системи." + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "" +"Ігнорувати перевірку на те, чи є сервер, який вилучають, останнім сервером " +"CA або DNS" + +msgid "Ignore compat plugin" +msgstr "Ігнорувати додаток compat" + +msgid "Ignore group attribute" +msgstr "Ігнорувати атрибут групи" + +msgid "Ignore group object class" +msgstr "Ігнорувати клас об’єктів групи" + +msgid "Ignore topology connectivity problems after removal" +msgstr "Ігнорувати проблеми із з’єднуваністю топології після вилучення" + +msgid "Ignore topology errors" +msgstr "Ігнорувати помилки топології" + +msgid "Ignore user attribute" +msgstr "Ігнорувати атрибут користувача" + +msgid "Ignore user object class" +msgstr "Ігнорувати клас об’єктів користувача" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "Проігноровано %(src)s до %(dst)s" + +msgid "Ignored keys:" +msgstr "Проігноровані ключі:" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "Ігноруємо ці попередження і продовжуємо процедуру вилучення" + +msgid "Ignoring topology connectivity errors." +msgstr "Ігноруємо помилки із з’єднуваністю топології." + +msgid "Import a Certificate Profile." +msgstr "Імпортувати профіль сертифікатів." + +msgid "Import an entitlement certificate." +msgstr "Імпортувати сертифікат надання імен." + +msgid "Import automount files for a specific location." +msgstr "Імпортувати файли automount для певної адреси." + +msgid "Imported keys:" +msgstr "Імпортовані ключі:" + +msgid "Imported maps:" +msgstr "Імпортовані карти:" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "Імпортовано профіль «%(value)s»" + +msgid "Include Disabled" +msgstr "Включення вимкнено" + +msgid "Include Enabled" +msgstr "Включення увімкнено" + +msgid "Include IPA master entries" +msgstr "Включити основні записи IPA" + +msgid "Include all disabled IPA rules into test" +msgstr "Перевірити всі вимкнені правила IPA" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "Перевірити всі увімкнені правила IPA [типова поведінка]" + +msgid "Include certificate chain in output" +msgstr "Включити ланцюжок сертифікації до виведення" + +msgid "Include in" +msgstr "Включити до" + +msgid "Included attributes" +msgstr "Атрибути включення" + +msgid "Inclusive" +msgstr "Включна" + +msgid "Inclusive Regex" +msgstr "Формальний вираз включення" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "Вказано несумісні параметри (-r і -P)\n" + +msgid "Indirect" +msgstr "Опосередкований" + +msgid "Indirect Member HBAC service" +msgstr "Опосередкована служба HBAC учасника" + +msgid "Indirect Member HBAC service group" +msgstr "Опосередкована група служб HBAC учасника" + +msgid "Indirect Member ID user overrides" +msgstr "Перевизначення ідентифікатора опосередкованого учасника користувача" + +msgid "Indirect Member groups" +msgstr "Опосередковані групи «member»" + +msgid "Indirect Member host-groups" +msgstr "Групи вузлів з опосередкованою участю" + +msgid "Indirect Member hosts" +msgstr "Вузли з опосередкованою участю" + +msgid "Indirect Member netgroups" +msgstr "Опосередковані мережеві групи учасника" + +msgid "Indirect Member of HBAC rule" +msgstr "Опосередковане правило HBAC «member of»" + +msgid "Indirect Member of Sudo rule" +msgstr "Опосередковане правило sudo «member of»" + +msgid "Indirect Member of group" +msgstr "Опосередкована група «member of»" + +msgid "Indirect Member of host-group" +msgstr "Опосередкований учасник групи вузлів" + +msgid "Indirect Member of netgroup" +msgstr "Опосередкована група «member of»" + +msgid "Indirect Member of role" +msgstr "Опосередкована роль «member of»" + +msgid "Indirect Member of roles" +msgstr "Опосередкований учасник roles" + +msgid "Indirect Member permissions" +msgstr "Опосередковані права доступу учасника" + +msgid "Indirect Member users" +msgstr "Опосередковані користувачі «member»" + +msgid "Indirect Membership" +msgstr "Опосередкована участь" + +msgid "Inherited from server configuration" +msgstr "Успадковано з налаштувань сервера" + +msgid "Initial counter for the HOTP token" +msgstr "Початковий лічильник для ключа HOTP" + +msgid "Initialize left node" +msgstr "Ініціалізувати лівий вузол" + +msgid "Initialize right node" +msgstr "Ініціалізувати правий вузол" + +msgid "Initials" +msgstr "Ініціали" + +msgid "Input data specified multiple times" +msgstr "Вхідні дані вказано декілька разів" + +msgid "Input file" +msgstr "Вхідний файл" + +msgid "Input filename" +msgstr "Назва вхідного файла" + +msgid "Input form contains invalid or missing values." +msgstr "" +"У форму введення даних не введено деякі з даних або у формі містяться " +"некоректні записи." + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "Недостатні привілеї «add» для запису «%s»." + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "" +"Недостатні привілеї «write» до атрибута «krbLastPwdChange» запису «%s»." + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "Недостатні привілеї «write» до атрибута «userCertificate» запису «%s»." + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "Недостатні права для доступу: %(info)s" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "" +"Недостатні привілеї для створення сертифіката з альтернативною назвою " +"призначення «%s»." + +msgid "Insufficient privilege to delete a CA." +msgstr "Недостатні права доступу для вилучення запису CA." + +msgid "Insufficient privilege to modify a CA." +msgstr "Недостатні права доступу для внесення змін до запису CA." + +msgid "Insufficient privilege to modify a certificate profile." +msgstr "Недостатні права доступу для внесення змін до профілю сертифікації." + +msgid "Internal Error" +msgstr "Внутрішня помилка" + +msgid "Internationalization messages" +msgstr "Повідомлення перекладу" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "некоректний запит JSON-RPC: %(error)s" + +msgid "Invalid LDAP URI." +msgstr "Некоректна адреса LDAP." + +#, python-brace-format +msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" +msgstr "" +"Некоректне значення MCS. Значення має відповідати {mcs}, де максимальною " +"категорією є {mcs_max}" + +#, python-brace-format +msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" +msgstr "" +"Некоректне значення MLS. Значення має відповідати {mls}, де максимальним " +"рівнем є {mls_max}" + +#, c-format +msgid "Invalid SASL bind mechanism\n" +msgstr "Некоректний механізм прив’язування SASL\n" + +msgid "Invalid SELinux user name, must match {}" +msgstr "Некоректна назва запису користувача SELinux. Назва має відповідати {}" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "Некоректна назва реєстраційного запису служби\n" + +msgid "Invalid URI: missing netloc" +msgstr "Некоректна адреса: пропущено netloc" + +msgid "Invalid URI: not an https scheme" +msgstr "Некоректна адреса: не використано схему https" + +msgid "Invalid credentials" +msgstr "Реєстраційні дані вказано з помилками" + +#, python-format +msgid "Invalid domain name '%(domain)s': %(e)s" +msgstr "Некоректна назва домену, «%(domain)s»: %(e)s" + +msgid "Invalid format. Should be name=value" +msgstr "Некоректний формат. Правильний формат: назва=значення" + +msgid "Invalid number of parts!" +msgstr "Некоректна кількість частин!" + +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "Некоректний або непідтримуваний тип. Дозволені значення: %s" + +#, python-format +msgid "Invalid or unsupported vault public key: %s" +msgstr "Некоректний або непідтримуваний відкритий ключ сховища: %s" + +msgid "Invalid vault type" +msgstr "Некоректний тип сховища" + +msgid "Is zone active?" +msgstr "Чи є зона активною?" + +msgid "Issue" +msgstr "Створити" + +msgid "Issue new certificate" +msgstr "Видати новий сертифікат" + +#, python-brace-format +msgid "Issue new certificate for host '${primary_key}'" +msgstr "Видати новий сертифікат для вузла «${primary_key}»" + +#, python-brace-format +msgid "Issue new certificate for service '${primary_key}'" +msgstr "Видати новий сертифікат для служби «${primary_key}»" + +#, python-brace-format +msgid "Issue new certificate for user '${primary_key}'" +msgstr "Видати новий сертифікат для користувача «${primary_key}»" + +msgid "Issued By" +msgstr "Видавець" + +msgid "Issued On" +msgstr "Видано" + +msgid "Issued To" +msgstr "Видано для" + +msgid "Issued on from" +msgstr "Видано з" + +msgid "Issued on from this date (YYYY-mm-dd)" +msgstr "Видано з цієї дати (РРРР-мм-дд)" + +msgid "Issued on to" +msgstr "Видано до" + +msgid "Issued on to this date (YYYY-mm-dd)" +msgstr "Видано до цієї дати (РРРР-мм-дд)" + +msgid "Issuer" +msgstr "Видавець" + +msgid "Issuer DN" +msgstr "DN видавця" + +msgid "Issuer Distinguished Name" +msgstr "Унікальна назва видавця" + +msgid "Issuer and subject" +msgstr "Видавець і призначення" + +msgid "Issuer of the certificate" +msgstr "Видавець сертифіката" + +msgid "Issuing CA" +msgstr "Видавничий CA" + +msgid "" +"It is strongly recommended to keep the following services installed on more " +"than one server:" +msgstr "" +"Наполегливо рекомендуємо вам встановити наступні служби одразу на декількох " +"серверах:" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "Використовується лише для встановлення атрибута MNAME SOA." + +#, c-format +msgid "JSON-RPC call failed with status code: %li\n" +msgstr "Виклик JSON-RPC завершився помилкою із кодом стану: %li\n" + +#, c-format +msgid "JSON-RPC call failed: %s\n" +msgstr "Помилка під час виконання запиту JSON-RPC: %s\n" + +#, c-format +msgid "JSON-RPC call was unauthorized. Check your credentials.\n" +msgstr "" +"Виклик JSON-RPC не було уповноважено. Перевірте, чи правильно вказано " +"реєстраційні дані.\n" + +#, c-format +msgid "" +"JSON-RPC request:\n" +"%s\n" +msgstr "" +"Запит JSON-RPC:\n" +"%s\n" + +#, c-format +msgid "" +"JSON-RPC response:\n" +"%s\n" +msgstr "" +"Відповідь JSON-RPC:\n" +"%s\n" + +msgid "JWKS URI" +msgstr "Адреса JWKS" + +msgid "JWKS endpoint" +msgstr "Кінцева точка JWKS" + +msgid "Job Title" +msgstr "Посада" + +msgid "Join an IPA domain" +msgstr "Долучитися до домену IPA" + +msgid "KEY Algorithm" +msgstr "Алгоритм КЛЮЧА" + +msgid "KEY Flags" +msgstr "Прапорці KEY" + +msgid "KEY Protocol" +msgstr "Протокол КЛЮЧА" + +msgid "KEY Public Key" +msgstr "Відкритий ключ KEY" + +msgid "KEY record" +msgstr "Запис KEY" + +msgid "KRA service is not enabled" +msgstr "Службу KRA не увімкнено" + +msgid "KX Exchanger" +msgstr "Обмінник KX" + +msgid "KX Preference" +msgstr "Пріоритетність KX" + +msgid "KX record" +msgstr "Запис KX" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "" +"Не знайдено кешу реєстраційних даних Kerberos. Чи є у вас квиток Kerberos?\n" + +msgid "Kerberos Key" +msgstr "Ключ Kerberos" + +msgid "Kerberos Key Not Present" +msgstr "Ключа Kerberos немає" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "Маємо ключ Kerberos, вузол передбачено" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "Маємо ключ Kerberos, службу передбачено" + +msgid "Kerberos Principal you entered is expired" +msgstr "Строк дії введених вами реєстраційних даних Kerberos вичерпано" + +msgid "Kerberos Service Principal Name" +msgstr "Назва реєстраційного запису служби Kerberos" + +msgid "Kerberos Ticket Policy" +msgstr "Правила квитків Kerberos" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "" +"Не знайдено реєстраційного запису користувача Kerberos. Ви маєте ви " +"коректний кеш реєстраційних даних?\n" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "Невдала спроба ініціалізації контексту Kerberos\n" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "Невдала спроба ініціалізації контексту Kerberos: %1$s (%2$d)\n" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Помилка Kerberos: %(major)s/%(minor)s" + +msgid "Kerberos keys available" +msgstr "Доступні ключі Kerberos" + +msgid "Kerberos principal" +msgstr "Реєстраційний запис Kerberos" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "" +"Реєстраційний запис Kerberos %s вже існує. Скористайтеся командою «ipa user-" +"mod», щоб встановити його параметри вручну." + +msgid "Kerberos principal expiration" +msgstr "Завершення строку дії реєстраційного запису Kerberos" + +msgid "Kerberos principal name for this host" +msgstr "Назва реєстраційного запису Kerberos для цього вузла" + +msgid "Key" +msgstr "Ключ" + +msgid "Key Compromise" +msgstr "Компрометація ключа" + +msgid "Key Tag" +msgstr "Мітка ключа" + +msgid "Key wrapping algorithm" +msgstr "Алгоритм обгортки ключа" + +msgid "Keycloak or Red Hat SSO" +msgstr "Keycloak або Red Hat SSO" + +msgid "Keytab" +msgstr "Таблиця ключів" + +msgid "Keytab File Name" +msgstr "Назва файла таблиці ключів" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "Таблицю ключів успішно отримати і збережено до: %s\n" + +msgid "LDAP DN" +msgstr "DN LDAP" + +msgid "LDAP SASL bind mechanism if no bindd/bindpw" +msgstr "Механізм прив’язування SASL LDAP, якщо без bindd/bindpw" + +msgid "LDAP URI" +msgstr "URI LDAP" + +msgid "LDAP URI of DS server to migrate from" +msgstr "URI LDAP сервера DS, з якого здійснюватиметься міграція" + +msgid "LDAP basedn" +msgstr "Базовий DN LDAP" + +msgid "LDAP password" +msgstr "Пароль LDAP" + +msgid "LDAP password (if not using Kerberos)" +msgstr "Пароль LDAP (якщо не використовується Kerberos)" + +msgid "LDAP schema" +msgstr "Схема LDAP" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "" +"Область пошуку LDAP для користувачів і груп: base, onelevel або subtree. " +"Типове значення: onelevel" + +msgid "LDAP suffix to be managed" +msgstr "Суфікс LDAP, яким слід керувати" + +msgid "LDAP timeout" +msgstr "Час очікування LDAP" + +msgid "LDAP uri to connect to. Mutually exclusive with --server" +msgstr "Адреса LDAP, з якою слід встановити з’єднання. Несумісний з --server" + +msgid "LOC Altitude" +msgstr "Висота LOC" + +msgid "LOC Degrees Latitude" +msgstr "Градуси широти LOC" + +msgid "LOC Degrees Longitude" +msgstr "Градуси довготи LOC" + +msgid "LOC Direction Latitude" +msgstr "Півкуля широти LOC" + +msgid "LOC Direction Longitude" +msgstr "Півкуля довготи LOC" + +msgid "LOC Horizontal Precision" +msgstr "Точність за горизонталлю LOC" + +msgid "LOC Minutes Latitude" +msgstr "Мінути широти LOC" + +msgid "LOC Minutes Longitude" +msgstr "Мінути довготи LOC" + +msgid "LOC Seconds Latitude" +msgstr "Секунди широти LOC" + +msgid "LOC Seconds Longitude" +msgstr "Секунди довготи LOC" + +msgid "LOC Size" +msgstr "Розмір LOC" + +msgid "LOC Vertical Precision" +msgstr "Точність за вертикаллю LOC" + +msgid "LOC record" +msgstr "Запис LOC" + +msgid "Label" +msgstr "Мітка" + +msgid "Labels" +msgstr "Мітки" + +msgid "Last" +msgstr "Останній" + +msgid "Last date/time the token can be used" +msgstr "Строк дії ключа (дата і час)" + +msgid "Last failed authentication" +msgstr "Останнє невдале розпізнавання" + +msgid "Last name" +msgstr "Прізвище" + +msgid "Last successful authentication" +msgstr "Останнє успішне розпізнавання" + +msgid "Leading and trailing spaces are not allowed" +msgstr "Використання пробілів на початку і у кінці заборонено" + +msgid "Left node" +msgstr "Лівий вузол" + +msgid "Left replication node - an IPA server" +msgstr "Лівий вузол реплікації — сервер IPA" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "Припустимий фільтр LDAP (наприклад, ou=Engineering)" + +msgid "Length of TOTP token code validity" +msgstr "Тривалість чинності коду ключа TOTP" + +msgid "Level" +msgstr "Рівень" + +msgid "List all service vaults" +msgstr "Список усіх сховищ служб" + +msgid "List all user vaults" +msgstr "Список усіх сховищ користувачів" + +msgid "List of IPA masters configured as DNS servers" +msgstr "Список основних серверів IPA, які налаштовано як сервери DNS" + +msgid "List of all IPA masters" +msgstr "Список усіх основних вузлів IPA" + +msgid "List of all hidden IPA masters" +msgstr "Список усіх прихованих основних серверів IPA" + +msgid "List of deletions that failed" +msgstr "Список вилучень, які не вдалося виконати" + +msgid "List of enabled roles" +msgstr "Список усіх увімкнених ролей" + +msgid "List of servers which advertise the given location" +msgstr "Вивести список серверів, які повідомляють про вказане місце" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "" +"Список довірених доменів успішно оновлено. Для отримання поточного списку " +"цих доменів скористайтеся командою trustdomain-find." + +msgid "Lists of objects migrated; categorized by type." +msgstr "Списки об’єктів, міграцію яких виконано; впорядкований за типами." + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "" +"Списки об’єктів, міграцію яких не вдалося виконати; впорядкований за типами." + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "Завантажити сертифікат CA сервера LDAP з вказаного файла" + +msgid "Loading" +msgstr "Завантаження" + +msgid "Loading data" +msgstr "Завантажуємо дані" + +msgid "Local domain" +msgstr "Локальний домен" + +msgid "Locality" +msgstr "Адреса" + +msgid "Location" +msgstr "Запис" + +msgid "Location name" +msgstr "Назва місця" + +msgid "Location of the ACI" +msgstr "Розташування ACI" + +msgid "Lockout duration" +msgstr "Тривалість блокування" + +msgid "Log In Using Certificate" +msgstr "Увійти за допомогою сертифіката" + +msgid "Log in" +msgstr "Увійти" + +msgid "Log in using personal certificate" +msgstr "Увійти за допомогою персонального сертифіката" + +msgid "Log out" +msgstr "Вийти" + +msgid "Log out error" +msgstr "Помилка під час спроби вийти" + +msgid "Logged In As" +msgstr "Вхід до системи від імені" + +msgid "Login failed due to an unknown reason" +msgstr "Не вдалося увійти з невідомої причини" + +msgid "Login shell" +msgstr "Оболонка входу" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" +"Менше число — вища пріоритетність. Клієнтські частини намагатимуться " +"встановити зв’язок із тією доступною для них адресою, у якої нижче число " +"пріоритетності." + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" +"Менше число — вища пріоритетність. Клієнтські частини намагатимуться " +"встановити зв’язок із ттим доступноми для них сервером, у якого нижче число " +"пріоритетності." + +msgid "MAC address" +msgstr "MAC-адреса" + +msgid "MS-PAC" +msgstr "MS-PAC" + +msgid "MX Exchanger" +msgstr "Обмінник MX" + +msgid "MX Preference" +msgstr "Пріоритетність MX" + +msgid "MX record" +msgstr "Запис MX" + +msgid "Mailing Address" +msgstr "Адреса ел. пошти" + +msgid "Make multiple ipa calls via one remote procedure call" +msgstr "" +"Виконати декілька викликів ipa за допомогою одного віддаленого виклику " +"процедури" + +msgid "Malformed DN" +msgstr "Помилкове форматування DN" + +msgid "Malformed principal" +msgstr "Помилкове форматування реєстраційного запису" + +#, python-format +msgid "Malformed principal: %(error)s" +msgstr "Помилкове форматування реєстраційного запису: %(error)s" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "Помилкове форматування реєстраційного запису: «%(value)s»" + +msgid "Manage password policy for specific group" +msgstr "Керування правилами обробки паролів для певної групи" + +msgid "Manage ticket policy for specific user" +msgstr "Керування правилами обробки квитків певного користувача" + +msgid "Managed LDAP suffix DN" +msgstr "DN керованого суфікса LDAP" + +msgid "Managed by" +msgstr "Керується" + +msgid "Managed suffix" +msgstr "Керований суфікс" + +msgid "Managed suffixes" +msgstr "Керовані суфікси" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "" +"Для керованої топології потрібен мінімальний рівень домену ${domainlevel}" + +msgid "Managedby permission" +msgstr "Права доступу managedby" + +msgid "Manager" +msgstr "Керівник" + +msgid "Managing" +msgstr "Керування" + +msgid "Map" +msgstr "Карта" + +msgid "Map Type" +msgstr "Тип карти" + +msgid "Mapping rule" +msgstr "Правило прив’язування" + +#, python-format +msgid "" +"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " +"helper" +msgstr "" +"Набір правил прив’язки «%(ruleset)s» містить декілька правил для допоміжного " +"засобу %(helper)s" + +msgid "Mark the token as disabled (default: false)" +msgstr "Позначення ключа як вимкненого (типове значення: false)" + +msgid "Master file" +msgstr "Основний файл" + +msgid "Match" +msgstr "Відповідність" + +msgid "Match cn attribute in subject" +msgstr "Порівняти із атрибутом cn у темі" + +msgid "Match users according to certificate." +msgstr "Встановити відповідність користувачів за сертифікатом." + +msgid "Match users by any subordinate uid in their range" +msgstr "" +"Встановити відповідній користувачів за будь-яким підлеглим uid у їхньому " +"діапазоні" + +msgid "Match value for subordinate user ID" +msgstr "Встановити відповідність за підлеглим ідентифікатором користувача" + +msgid "Matched" +msgstr "Встановлено відповідність" + +msgid "Matched Users" +msgstr "Відповідні користувачі" + +msgid "Matched rules" +msgstr "Відповідні правила" + +msgid "Matching Type" +msgstr "Відповідний тип" + +msgid "Matching rule" +msgstr "Правило відповідності" + +msgid "Max domain level" +msgstr "Макс. рівень домену" + +msgid "Max failures" +msgstr "Макс. к-ть помилок" + +msgid "Max life" +msgstr "Макс. строк дії" + +msgid "Max lifetime (days)" +msgstr "Макс. строк дії (у днях)" + +msgid "Max renew" +msgstr "Макс. вік поновлення" + +msgid "Max repeat" +msgstr "Макс. повторення" + +msgid "Max sequence" +msgstr "Макс. послідовність" + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "" +"Максимальний проміжок часу (у секундах) для виконання однієї дії з пошуку " +"(-1 або 0 — без обмежень)" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "" +"Максимальний проміжок часу (у секундах) для виконання однієї дії з пошуку " +"(>0, -1 — без обмежень)" + +msgid "Maximum domain level" +msgstr "Максимальний рівень домену" + +msgid "Maximum hostname length" +msgstr "Максимальна довжина назви вузла" + +msgid "Maximum number of agreements per replica" +msgstr "Максимальна кількість узгоджень на репліку" + +msgid "Maximum number of certs returned" +msgstr "Максимальна кількість сертифікатів у повернутому списку" + +msgid "Maximum number of entries returned" +msgstr "Максимальна кількість повернутих записів" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "Максимальна кількість повернутих записів (0 — без обмежень)" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "Максимальна кількість записів результатів пошуку (-1 — без обмежень)" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "" +"Максимальна кількість записів результатів пошуку (-1 або 0 — без обмежень)" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "" +"Максимальна кількість правил, які слід обробити, якщо не вказано параметра --" +"rules" + +msgid "Maximum number of same consecutive characters" +msgstr "Максимальна кількість однакових символів поспіль" + +msgid "Maximum password life must be equal to or greater than the minimum." +msgstr "" +"Максимальний строк дії пароля має бути рівним або перевищувати мінімальний " +"строк його дії." + +msgid "Maximum password lifetime (in days)" +msgstr "Максимальний строк дії пароля (у днях)" + +msgid "Maximum renewable age (seconds)" +msgstr "Максимальний вік, протягом якого можливе поновлення (у секундах)" + +msgid "Maximum serial number" +msgstr "Максимальний серійний номер" + +msgid "Maximum ticket life (seconds)" +msgstr "Максимальний строк дії квитка (у секундах)" + +msgid "Maximum username length" +msgstr "Максимальна довжина імені користувача" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "Максимальним є значення ${value}" + +msgid "May not be empty" +msgstr "Не може бути порожнім" + +msgid "Member Group" +msgstr "Група учасника" + +msgid "Member HBAC service" +msgstr "Служба HBAC учасника" + +msgid "Member HBAC service groups" +msgstr "Групи служб HBAC учасника" + +msgid "Member Host" +msgstr "Вузол-учасник" + +msgid "Member Hostgroup" +msgstr "Група вузлів учасника" + +msgid "Member ID user overrides" +msgstr "Перевизначення ідентифікатора учасника користувача" + +msgid "Member Sudo commands" +msgstr "Команди учасника Sudo" + +msgid "Member User" +msgstr "Користувач учасника" + +msgid "Member groups" +msgstr "Групи «member»" + +msgid "Member host-groups" +msgstr "Учасник host-groups" + +msgid "Member hosts" +msgstr "Вузли-учасники" + +msgid "Member netgroups" +msgstr "Мережеві групи учасника" + +msgid "Member of" +msgstr "Учасник" + +msgid "Member of HBAC rule" +msgstr "Правило HBAC «member of»" + +msgid "Member of HBAC service groups" +msgstr "Учасник груп служб HBAC" + +msgid "Member of Sudo rule" +msgstr "Правило Sudo «member of»" + +msgid "Member of a group" +msgstr "Учасник групи" + +msgid "Member of group" +msgstr "Учасник групи" + +msgid "Member of groups" +msgstr "Групи «member of»" + +msgid "Member of host-groups" +msgstr "Учасник host-groups" + +msgid "Member of netgroups" +msgstr "Мережеві групи «member of»" + +msgid "Member principals" +msgstr "Реєстраційні записи учасників" + +msgid "Member service groups" +msgstr "Групи служб учасника" + +msgid "Member services" +msgstr "Служби учасника" + +msgid "Member user group" +msgstr "Учасник групи користувачів" + +msgid "Member users" +msgstr "Користувачі «member»" + +msgid "Members" +msgstr "Учасники" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "Учасники довіреного домену у форматі ДОМЕН\\ім’я або ім’я@домен" + +msgid "Members that could not be added" +msgstr "Учасники, записи яких не вдалося додати" + +msgid "Members that could not be removed" +msgstr "Учасники, записи яких не вдалося вилучити" + +msgid "Method name" +msgstr "Назва методу" + +msgid "Method of" +msgstr "Метод" + +msgid "Microsoft or Azure" +msgstr "Microsoft або Azure" + +msgid "Migrate" +msgstr "Перенести" + +msgid "Migrate users and groups from DS to IPA." +msgstr "Перенести дані користувачів і груп з DS до IPA." + +msgid "Migrating" +msgstr "Перенесення" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" +"Режим міграції вимкнено.\n" +"Скористайтеся командою «ipa config-mod--enable-migration=TRUE», щоб " +"увімкнути його." + +msgid "Migration of LDAP search reference is not supported." +msgstr "Підтримки перенесення посилання пошуку LDAP не передбачено." + +msgid "Min domain level" +msgstr "Мін. рівень домену" + +msgid "Min length" +msgstr "Мін. довжина" + +msgid "Min lifetime (hours)" +msgstr "Мін. строк дії (у годинах)" + +msgid "Minimum domain level" +msgstr "Мінімальний рівень домену" + +msgid "" +"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " +"usercheck are defined" +msgstr "" +"Якщо визначено maxrepeat, maxsequence, dictcheck або usercheck, мінімальною " +"довжиною має бути число >= 6" + +msgid "Minimum length of password" +msgstr "Мінімальна довжина пароля" + +msgid "Minimum number of character classes" +msgstr "Мінімальна кількість класів символів" + +msgid "Minimum password lifetime (in hours)" +msgstr "Мінімальний строк дії пароля (у годинах)" + +msgid "Minimum serial number" +msgstr "Мінімальний серійний номер" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "Мінімальним є значення ${value}" + +msgid "Minutes Latitude" +msgstr "Мінути широти" + +msgid "Minutes Longitude" +msgstr "Мінути довготи" + +msgid "Misc. Information" +msgstr "Інша інформація" + +msgid "Missing credentials for cross-forest communication" +msgstr "Пропущено реєстраційні дані для обміну даними між лісами" + +msgid "Missing new vault public key" +msgstr "Не вказано нового відкритого ключа сховища" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "Не вказано HTTP Referer або вказано помилкове значення, %(referer)s" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "Немає списку керування відповідями!\n" + +#, c-format +msgid "Missing reply control!\n" +msgstr "Немає керування відповіддю!\n" + +msgid "Missing values: " +msgstr "Пропущені значення: " + +msgid "Missing vault private key" +msgstr "Не вказано закритого ключа сховища" + +msgid "Missing vault public key" +msgstr "Не вказано відкритого ключа сховища" + +msgid "Mobile Telephone Number" +msgstr "Номер мобільного телефону" + +msgid "Model" +msgstr "Модель" + +msgid "Modified" +msgstr "Змінено" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "Змінено налаштування довіри «%(value)s»" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "Змінено ACI «%(value)s»" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "Змінено CA «%(value)s»" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "Змінено CA ACL «%(value)s»" + +#, python-format +msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" +msgstr "Змінено правило прив’язування сертифікатів до профілів «%(value)s»" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "Змінено профіль сертифікатів «%(value)s»" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "Змінено запис сервера DNS «%(value)s»" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "Змінено правило HBAC «%(value)s»" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "Змінено службу HBAC «%(value)s»" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "Змінено групу служб HBAC «%(value)s»" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "Змінено діапазон ідентифікаторів «%(value)s»" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "Змінено запис місця IPA «%(value)s»" + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "Змінено запис сервера IPA «%(value)s»" + +#, python-format +msgid "Modified Identity Provider server \"%(value)s\"" +msgstr "Змінено запис сервера надавача профілів «%(value)s»" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "Змінено жетон OTP «%(value)s»" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "Змінено запис проксі-сервера RADIUS «%(value)s»" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "Змінено карту користувачів SELinux «%(value)s»" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "Змінено команду sudo «%(value)s»" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "Змінено групу команд sudo «%(value)s»" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "Змінено правило sudo «%(value)s»" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "Змінено перевизначення ідентифікаторів групи «%(value)s»" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "Змінено перегляд ідентифікаторів «%(value)s»" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "Змінено перевизначення ідентифікатора «%(value)s»" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "Змінено перевизначення ідентифікатора користувача «%(value)s»" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "Змінено правило автоматичної участі «%(value)s»" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "Змінено ключ автоматичного монтування «%(value)s»" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "Змінено карту автоматичного монтування «%(value)s»" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "Змінено уповноваження «%(value)s»" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "Змінено групу «%(value)s»" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "Змінено вузол «%(value)s»" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "Змінено групу вузлів «%(value)s»" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "Змінено мережеву групу «%(value)s»" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "Змінено права доступу «%(value)s»" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "Змінено привілей «%(value)s»" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "Змінено роль «%(value)s»" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "Змінено сегмент «%(value)s»" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "Змінено самообслуговування «%(value)s»" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "Змінено службу «%(value)s»" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "Змінено запис користувача етапу «%(value)s»" + +#, python-format +msgid "Modified subordinate id \"%(value)s\"" +msgstr "Змінено підлеглий ідентифікатор «%(value)s»" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "Змінено суфікс топології «%(value)s»" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "Змінено довіру «%(value)s» (зміни набудуть чинності за 60 секунд)" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "Змінено користувача «%(value)s»" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "Змінено сховище «%(value)s»" + +msgid "Modified: key not set" +msgstr "Змінено: ключ не встановлено" + +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "Змінити значення «%(value)s» %(name)s?" + +msgid "Modify ACI." +msgstr "Змінити запис ACI." + +msgid "Modify CA configuration." +msgstr "Змінити налаштування CA." + +msgid "Modify Certificate Identity Mapping configuration." +msgstr "Змінити налаштування прив’язки сертифікатів до профілів." + +msgid "Modify Certificate Profile configuration." +msgstr "Змінити налаштування профілю сертифікатів." + +msgid "Modify Class of Service entry" +msgstr "Змінити запис класу служби" + +msgid "Modify DNS forward zone." +msgstr "Змінити зону переспрямовування DNS." + +msgid "Modify DNS server configuration" +msgstr "Змінити налаштування сервера DNS" + +msgid "Modify DNS zone (SOA record)." +msgstr "Змінити зону DNS (запис SOA)." + +msgid "Modify ID range." +msgstr "Змінити діапазон ідентифікаторів." + +msgid "" +"Modify ID range.\n" +"\n" +msgstr "" +"Змінити діапазон ідентифікаторів.\n" +"\n" + +msgid "Modify Kerberos ticket policy." +msgstr "Змінити правила квитків Kerberos." + +msgid "Modify OTP configuration options." +msgstr "Змінити параметри налаштування OTP." + +msgid "Modify Sudo Command Group." +msgstr "Змінити групу команд sudo." + +msgid "Modify Sudo Command." +msgstr "Змінити команду sudo." + +msgid "Modify Sudo Rule." +msgstr "Змінити правило sudo." + +msgid "Modify a CA ACL." +msgstr "Змінити CA ACL." + +msgid "Modify a Certificate Identity Mapping Rule." +msgstr "Змінити правило прив’язування сертифікатів до профілів." + +msgid "Modify a DNS resource record." +msgstr "Змінити запис ресурсу DNS." + +msgid "Modify a OTP token." +msgstr "Змінити жетон OTP." + +msgid "Modify a RADIUS proxy server." +msgstr "Змінити запис проксі-сервера RADIUS." + +msgid "Modify a SELinux User Map." +msgstr "Змінити карту користувачів SELinux." + +msgid "Modify a delegation." +msgstr "Змінити уповноваження." + +msgid "Modify a group password policy." +msgstr "Змінити групу правил для паролів." + +msgid "Modify a group." +msgstr "Змінити групу." + +msgid "Modify a hostgroup." +msgstr "Змінити групу вузлів." + +msgid "Modify a netgroup." +msgstr "Змінити мережеву групу." + +msgid "Modify a permission." +msgstr "Змінити права доступу." + +msgid "Modify a privilege." +msgstr "Змінити привілей." + +msgid "Modify a role." +msgstr "Змінити роль." + +msgid "Modify a segment." +msgstr "Змінити сегмент." + +msgid "Modify a self-service permission." +msgstr "Змінити права доступу автослужби." + +msgid "Modify a stage user." +msgstr "Змінити запис користувача етапу." + +msgid "Modify a subordinate id." +msgstr "Змінити підлеглий ідентифікатор." + +msgid "Modify a topology suffix." +msgstr "Змінити суфікс топології." + +msgid "Modify a user." +msgstr "Змінити параметри користувача." + +msgid "Modify a vault." +msgstr "Змінити сховище." + +msgid "Modify an Group ID override." +msgstr "Змінити перевизначення ідентифікаторів групи." + +msgid "Modify an HBAC rule." +msgstr "Змінити правило HBAC." + +msgid "Modify an HBAC service group." +msgstr "Змінити групу служб HBAC." + +msgid "Modify an HBAC service." +msgstr "Змінити службу HBAC." + +msgid "Modify an ID View." +msgstr "Змінити перегляд ідентифікаторів." + +msgid "Modify an ID override." +msgstr "Змінити перевизначення ідентифікатора." + +msgid "Modify an Identity Provider server." +msgstr "Змінити сервер надавача профілів." + +msgid "Modify an User ID override." +msgstr "Змінити перевизначення ідентифікатора користувача." + +msgid "Modify an automember rule." +msgstr "Змінити правило автоматичної участі." + +msgid "Modify an automount key." +msgstr "Змінити ключ автоматичного монтування." + +msgid "Modify an automount map." +msgstr "Змінити карту автоматичного монтування." + +msgid "Modify an existing IPA service." +msgstr "Змінити вже створену службу IPA." + +msgid "Modify configuration options." +msgstr "Змінити параметри налаштування." + +msgid "Modify global DNS configuration." +msgstr "Змінити загальні налаштування DNS." + +msgid "Modify global trust configuration." +msgstr "Змінити налаштування довіри на загальному рівні." + +msgid "Modify information about a host." +msgstr "Змінити дані щодо вузла." + +msgid "Modify information about an IPA location." +msgstr "Змінити дані щодо місця IPA." + +msgid "Modify information about an IPA server." +msgstr "Змінити дані щодо сервера IPA." + +msgid "Modify realm domains." +msgstr "Змінити домени області." + +msgid "Modify trustdomain of the trust" +msgstr "Змінити значення довіреного домену (trustdomain) правила довіри" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "" +"Знайдено декілька записів ключів %(key)s, скористайтеся --info для вибору " +"певного запису." + +msgid "Mount information" +msgstr "Інформація щодо монтування" + +msgid "Mount point" +msgstr "Точка монтування" + +msgid "Move deleted user into staged area" +msgstr "Пересунути вилучений запис користувача до області етапу" + +msgid "Multi-value" +msgstr "Багато значень" + +msgid "Must be a decimal number" +msgstr "Має бути десятковим числом" + +msgid "Must be a positive number" +msgstr "Має бути додатним числом" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "" +"Має бути значенням дати часу за Гринвічем (UTC) (наприклад, «2014-01-20 " +"17:58:01Z»)" + +msgid "Must be an integer" +msgstr "Має бути цілим числом" + +msgid "Must be disabled first" +msgstr "Слід спочатку вимкнути" + +msgid "My User Vaults" +msgstr "Сховища користувача" + +msgid "NAPTR Flags" +msgstr "Прапорці NAPTR" + +msgid "NAPTR Order" +msgstr "Порядок NAPTR" + +msgid "NAPTR Preference" +msgstr "Пріоритетність NAPTR" + +msgid "NAPTR Regular Expression" +msgstr "Формальний вираз NAPTR" + +msgid "NAPTR Replacement" +msgstr "Замінник NAPTR" + +msgid "NAPTR Service" +msgstr "Служба NAPTR" + +msgid "NAPTR record" +msgstr "Запис NAPTR" + +msgid "NIS domain name" +msgstr "Назва домену NIS" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "Значення NONE не можна поєднувати з іншими типами PAC" + +msgid "NS Hostname" +msgstr "Назва вузла NS" + +msgid "NS record" +msgstr "Запис NS" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" +"запис NS не можна використовувати разом з записом %(type)s, якщо їх не " +"розташовано у запису кореня зони (RFC 2181, розділ 6.1)" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "Записи NS можна редагувати у апексі зони — «@». " + +msgid "NSEC Next Domain Name" +msgstr "Наступна назва домену NSEC" + +msgid "NSEC Type Map" +msgstr "Карта типів NSEC" + +msgid "NSEC record" +msgstr "запис NSEC" + +msgid "NSEC3 record" +msgstr "Запис NSEC3" + +msgid "NSEC3PARAM record" +msgstr "Запис NSEC3PARAM" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "" +"Запис NSEC3PARAM для зони у такому форматі: алгоритм_хешування прапорці " +"ітерації сіль" + +msgid "Name" +msgstr "Назва" + +msgid "Name for referencing the CA" +msgstr "Назва до посилання на CA" + +msgid "Name of command to export" +msgstr "Назва команди для експортування" + +msgid "Name of host-group" +msgstr "Назва групи вузлів" + +msgid "Name of issuing CA" +msgstr "Назва видавничого CA" + +msgid "Name of method to export" +msgstr "Назва методу, який буде експортовано" + +msgid "Name of object to export" +msgstr "Назва об’єкта, який слід експортувати" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "" +"Назва батьківської карти автомонтування (типове значення: auto.master)." + +msgid "Name of the trusted domain" +msgstr "Назва довіреного домену" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "Сервер назв «%(host)s» не має відповідного запису A/AAAA" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "Не можна задавати сервер назв для зворотної зони відносно назви DNS" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" +"Не надано ні --del-all, ні параметрів вилучення певного запису.\n" +"Всі підтримувані типи записів можна знайти у виводі команди help." + +msgid "Nested Methods to execute" +msgstr "Вкладені методи, які слід виконати" + +msgid "NetBIOS name" +msgstr "Назва NetBIOS" + +msgid "NetBIOS name of the IPA domain" +msgstr "Назва NetBIOS домену IPA" + +msgid "Netgroup" +msgstr "Мережева група" + +msgid "Netgroup Settings" +msgstr "Параметри мережевої групи" + +msgid "Netgroup description" +msgstr "Опис мережевої групи" + +msgid "Netgroup name" +msgstr "Назва мережевої групи" + +msgid "Netgroups" +msgstr "Мережеві групи" + +msgid "Network Services" +msgstr "Мережеві служби" + +msgid "New ACI name" +msgstr "Нова назва ACI" + +msgid "New Certificate" +msgstr "Новий сертифікат" + +msgid "New Password" +msgstr "Новий пароль" + +msgid "New Principal Password" +msgstr "Новий пароль реєстраційного запису" + +msgid "New Test" +msgstr "Новий текст" + +msgid "New kerberos principal alias" +msgstr "Новий псевдонім реєстраційного запису kerberos" + +msgid "New mount information" +msgstr "Інформація нового монтування" + +msgid "New password is required" +msgstr "Слід вказати новий пароль" + +msgid "New public key specified multiple times" +msgstr "Новий відкритий ключ вказано декілька разів" + +msgid "New users and groups automatically get a SID assigned" +msgstr "Нові користувачі і групи автоматично отримують SID" + +msgid "New vault password" +msgstr "Новий пароль до сховища" + +msgid "New: key not set" +msgstr "Новий: ключ не встановлено" + +msgid "New: key set" +msgstr "Новий: ключ встановлено" + +msgid "Next" +msgstr "Далі" + +msgid "Next Domain Name" +msgstr "Наступна назва домену" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "Не знайдено записів A, AAAA, SSHFP або PTR." + +msgid "No Common Name was found in subject of request." +msgstr "У темі запиту не було знайдено загальної назви (CN)." + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" +"Немає серверів DNS на місці IPA %(location)s. Без серверів DNS місце не " +"працюватиме як слід." + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "" +"Не встановлено основного ключа DNSSEC. Підписування у зоні DNSSEC не " +"працюватиме, доки не буде встановлено основний ключ DNSSEC." + +msgid "No Valid Certificate" +msgstr "Немає чинних сертифікатів" + +#, python-format +msgid "" +"No answers could be found in the specified lifetime for DNS reverse zone " +"%(revdns)s" +msgstr "" +"Не вдалося знайти жодної відповіді протягом вказаного періоду життя " +"зворотної зони DNS %(revdns)s" + +msgid "No archived data." +msgstr "Немає архівованих даних." + +msgid "No credentials cache found" +msgstr "Не знайдено кешу реєстраційних даних" + +msgid "No default (fallback) group set" +msgstr "Не встановлено типової (резервної) групи" + +msgid "No entries." +msgstr "Немає записів." + +msgid "No file to read" +msgstr "Немає файла для читання" + +msgid "No free YubiKey slot!" +msgstr "Немає вільних слотів YubiKey!" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "Жоден з ключів не прийнято KDC\n" + +msgid "No matching entries found" +msgstr "Відповідних записів не знайдено" + +msgid "No option to delete specific record provided." +msgstr "Не вказано параметр вилучення певного запису." + +msgid "No option to modify specific record provided." +msgstr "Можливості внесення змін у певний запис не передбачено." + +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "Немає дозволу на долучення цього вузла до домену IPA.\n" + +msgid "No private group" +msgstr "Немає приватної групи" + +msgid "No response" +msgstr "Немає відповіді" + +msgid "No such attribute on this entry" +msgstr "У цього запису немає такого атрибута" + +msgid "No such virtual command" +msgstr "Такої віртуальної команди не передбачено" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "Немає основних системних типів шифрування?!\n" + +msgid "No trusted domain is not configured" +msgstr "Не налаштовано жодного довіреного домену" + +#, c-format +msgid "No values for %s" +msgstr "Немає значень %s" + +msgid "No wait" +msgstr "Не чекати" + +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "Немає дозволу на запис до файла таблиці ключів «%s»\n" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "" +"Відповідь від програмного інтерфейсу REST CA, що не відповідає 2xx: " +"%(status)d. %(explanation)s" + +msgid "Non-Active Directory domain" +msgstr "Домен не-Active Directory" + +msgid "" +"Non-Kerberos user name was specified, please provide user@REALM variant " +"instead" +msgstr "" +"Вказано ім'я користувача не у форматі Kerberos. Будь ласка, надайте замість " +"нього дані у форматі «користувач@ОБЛАСТЬ»" + +msgid "Non-POSIX" +msgstr "Не-POSIX" + +msgid "Non-existent or invalid rules" +msgstr "Некоректні правила або правила, яких не існує" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "Неперехідна зовнішня довіра до домену у іншому лісі Active Directory" + +msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" +msgstr "Неперехідна зовнішня довіра до сумісної із RFC4120 області Kerberos" + +msgid "Nonce" +msgstr "Цей випадок" + +msgid "Not After" +msgstr "Не пізніше" + +msgid "Not Before" +msgstr "Не раніше" + +msgid "Not a managed group" +msgstr "Не є керованою групою" + +msgid "Not a valid IP address" +msgstr "Некоректна IP-адреса" + +msgid "Not a valid IPv4 address" +msgstr "Некоректна адреса IPv4" + +msgid "Not a valid IPv6 address" +msgstr "Некоректна адреса IPv6" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "" +"Некоректна адреса у мережі (приклади коректних адрес: 2001:db8::/64, " +"192.0.2.0/24)" + +msgid "Not allowed on non-leaf entry" +msgstr "Заборонено для записів, які не є записами листків (leaf)" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "Вказано недостатньо аргументів для виконання налаштовування довіри" + +msgid "Not matched rules" +msgstr "Невідповідні правила" + +msgid "Not registered yet" +msgstr "Ще не зареєстровано" + +msgid "Note" +msgstr "Нотатка" + +msgid "Number of IDs in the range" +msgstr "Кількість ідентифікаторів у діапазоні" + +msgid "Number of LDAP authentications allowed after expiration" +msgstr "Кількість дозволених розпізнавань LDAP після завершення строку дії" + +msgid "Number of conditions added" +msgstr "Кількість доданих умов" + +msgid "Number of conditions removed" +msgstr "Кількість вилучених умов" + +msgid "Number of days's notice of impending password expiration" +msgstr "Сповіщення про кількість днів, які залишилися до завершення дії пароля" + +msgid "Number of digits each token code will have" +msgstr "Кількість цифр у кожному з кодів ключа" + +msgid "Number of entries returned" +msgstr "Кількість повернутих записів" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "Кількість вузлів, з яких знято перегляд ідентифікаторів:" + +msgid "Number of hosts the ID View was applied to:" +msgstr "Кількість вузлів, до яких застосовано перегляд ідентифікаторів:" + +msgid "Number of members added" +msgstr "Кількість доданих учасників" + +msgid "Number of members removed" +msgstr "Кількість вилучених учасників" + +msgid "Number of owners added" +msgstr "Кількість доданих записів власників" + +msgid "Number of owners removed" +msgstr "Кількість вилучених записів власників" + +msgid "Number of permissions added" +msgstr "Кількість доданих прав доступу" + +msgid "Number of permissions removed" +msgstr "Кількість вилучених записів прав доступу" + +msgid "Number of plugins loaded" +msgstr "Кількість завантажених додатків" + +msgid "Number of privileges added" +msgstr "Кількість доданих привілеїв" + +msgid "Number of privileges removed" +msgstr "Кількість вилучених привілеїв" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "" +"Кількість секунд, протягом яких відбуватиметься очікування зовнішнім LDAP на " +"відповідь під час дій від віддаленої репліки, перш ніж дію буде припинено " +"через перевищення часу очікування і буде видано повідомлення щодо помилки" + +msgid "Number of variables returned (<= total)" +msgstr "Кількість повернутих змінних (<= загальної)" + +msgid "OAuth 2.0 authorization endpoint" +msgstr "Кінцева точка уповноваження OAuth 2.0" + +msgid "OAuth 2.0 client details" +msgstr "Подробиці щодо клієнта OAuth 2.0" + +msgid "OAuth 2.0 client identifier" +msgstr "Ідентифікатор клієнта OAuth 2.0" + +msgid "OAuth 2.0 client secret" +msgstr "Пароль клієнта OAuth 2.0" + +msgid "OAuth 2.0 scope. Multiple scopes separated by space" +msgstr "Область OAuth 2.0. Декілька профілів слід відокремлювати пробілами" + +msgid "OIDC URL" +msgstr "Адреса OIDC" + +msgid "OK" +msgstr "Гаразд" + +msgid "OTP" +msgstr "OTP" + +msgid "OTP Configuration" +msgstr "Налаштування OTP" + +msgid "OTP Token" +msgstr "Жетон OTP" + +msgid "OTP Token Settings" +msgstr "Параметри жетона OTP" + +msgid "OTP Tokens" +msgstr "Жетони OTP" + +msgid "OTP configuration options" +msgstr "Параметри налаштування OTP" + +msgid "OTP max life" +msgstr "Макс. строк дії OTP" + +msgid "OTP max renew" +msgstr "Макс. вік поновлення OTP" + +msgid "OTP set" +msgstr "Встановлено одноразовий пароль" + +msgid "OTP token" +msgstr "Жетон OTP" + +msgid "OTP token maximum ticket life (seconds)" +msgstr "Максимальний строк дії квитка ключа OTP (у секундах)" + +msgid "OTP token ticket maximum renewable age (seconds)" +msgstr "" +"Максимальний вік, протягом якого можливе поновлення квитка ключа OTP (у " +"секундах)" + +msgid "OTP tokens" +msgstr "Жетони OTP" + +msgid "" +"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " +"attributes." +msgstr "" +"Немає класу об'єктів ipaNTUserAttrs. Через це запис користувача не може " +"містити атрибутів SMB." + +msgid "Object class name" +msgstr "Назва класу об’єктів" + +msgid "Object does not belong to a trusted domain" +msgstr "Об'єкт не належить до довіреного домену" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "Класи об’єктів, які буде проігноровано для записів груп у DS" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "Класи об’єктів, які буде проігноровано для записів користувачів у DS" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "Класи об’єктів, використаних для пошуку записів груп у DS" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "Класи об’єктів, використаних для пошуку записів користувачів у DS" + +msgid "Okta" +msgstr "Okta" + +msgid "Old vault password" +msgstr "Старий пароль до сховища" + +msgid "Old vault private key" +msgstr "Старий закритий ключ сховища" + +msgid "One Time Password" +msgstr "Одноразовий пароль" + +msgid "One of group, permission or self is required" +msgstr "Слід вказати одне зі значень, group, permission або self" + +msgid "One time password commands" +msgstr "Команди для одноразового пароля" + +msgid "One-Time Password" +msgstr "Одноразовий пароль" + +msgid "One-Time Password Not Present" +msgstr "Одноразового пароля немає" + +msgid "One-Time Password Present" +msgstr "Є одноразовий пароль" + +msgid "Only one value is allowed" +msgstr "Можна використовувати лише одне значення" + +msgid "Only one zone type is allowed per zone name" +msgstr "Можна використовувати лише один тип зони на одну назву зони" + +msgid "" +"Only standard vaults can be created in WebUI, use CLI for other types of " +"vaults." +msgstr "" +"За допомогою вебінтерфейсу можна створювати лише стандартні сховища. " +"Скористайтеся командним інтерфейсом для створення інших типів сховищ." + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" +"Якщо додається зв’язок довіри AD, значенням --range-type має бути лише ipa-" +"ad-trust або ipa-ad-trust-posix." + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "Операційна система вузла і її версія (наприклад, «Fedora 9»)" + +msgid "Operating system" +msgstr "Операційна система" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "Невдала спроба виконання дії: %s\n" + +msgid "Operations Error" +msgstr "Помилка під час обробки" + +msgid "Option added" +msgstr "Додано параметр" + +msgid "Option group" +msgstr "Група варіантів" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "" +"Параметр rid-base не слід використовувати, якщо типом діапазону IPA є ipa-ad-" +"trust-posix" + +msgid "" +"Optional DN subtree from where an entry can be moved (must be in the " +"subtree, but may not yet exist)" +msgstr "" +"Необов’язкове піддерево DN, звідки має бути пересунуто запис (має належати " +"до піддерева, але може ще не існувати)" + +msgid "" +"Optional DN subtree where an entry can be moved to (must be in the subtree, " +"but may not yet exist)" +msgstr "" +"Необов’язкове піддерево DN, куди має бути пересунуто запис (має належати до " +"піддерева, але може ще не існувати)" + +msgid "" +"Optional DN to apply the permission to (must be in the subtree, but may not " +"yet exist)" +msgstr "" +"Необов’язковий DN, до якого застосовуватимуться дозвіл (має належати до " +"піддерева, але може ще не існувати)" + +msgid "Options" +msgstr "Параметри" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "Параметри dom-sid і dom-name не можна використовувати разом" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "Параметри dom-sid і rid-base слід використовувати разом" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "Параметри dom-sid і secondary-rid-base не можна використовувати разом" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "Параметри dom-sid/dom-name і rid-base слід використовувати разом" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "" +"Параметри dom-sid/dom-name і secondary-rid-base не можна використовувати " +"разом" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "Параметри secondary-rid-base і rid-base слід використовувати разом" + +msgid "Order" +msgstr "Порядок" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "" +"Порядок у збільшенні пріоритетності користувачів SELinux, відокремлений $" + +msgid "Org. Unit" +msgstr "Підрозділ" + +msgid "Organization" +msgstr "Установа" + +msgid "Organization ID or Realm name for IdP provider templates" +msgstr "Ідентифікатор організації або назва області для шаблонів надавача IdP" + +msgid "Organizational Unit" +msgstr "Підрозділ установи" + +msgid "Origin DN subtree" +msgstr "Піддерево DN походження" + +msgid "Original TTL" +msgstr "Початковий TTL" + +msgid "Other Record Types" +msgstr "Інші типи записів" + +msgid "Our domain is not configured" +msgstr "Наш домен не налаштовано" + +#, c-format +msgid "Out of Memory!\n" +msgstr "Не вистачає пам'яті!\n" + +msgid "Out of memory\n" +msgstr "Не вистачає пам'яті\n" + +#, c-format +msgid "Out of memory \n" +msgstr "Не вистачає пам'яті \n" + +#, c-format +msgid "Out of memory!" +msgstr "Не вистачає пам'яті!" + +#, c-format +msgid "Out of memory!\n" +msgstr "Не вистачає пам'яті!\n" + +msgid "Out of memory!?\n" +msgstr "Не вистачає пам'яті!?\n" + +msgid "Output debug info" +msgstr "Вивести діагностичні дані" + +msgid "Output file to store the transport certificate" +msgstr "Файл для зберігання сертифіката передавання даних" + +msgid "Output filename" +msgstr "Назва файла виводу" + +msgid "Output only on errors" +msgstr "Виводити лише повідомлення про помилки" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "" +"Перевизначити типовий список підтримуваних типів PAC. Скористайтеся " +"значенням «NONE», щоб вимкнути підтримку PAC для цієї служби." + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" +"Перевизначити типовий список підтримуваних типів PAC. Скористайтеся " +"значенням «NONE», щоб вимкнути підтримку PAC для цієї служби. Це, наприклад, " +"може бути необхідним для служб NFS." + +msgid "Override existing password" +msgstr "Перевизначити наявний пароль" + +msgid "Override inherited settings" +msgstr "Перевизначити успадковані параметри" + +msgid "Overwrite GID" +msgstr "Перезаписати ідентифікатор групи" + +msgid "Owner" +msgstr "Власник" + +#, python-format +msgid "Owner %s" +msgstr "Власник %s" + +msgid "Owner groups" +msgstr "Групи власника" + +msgid "Owner services" +msgstr "Служби власника" + +msgid "Owner users" +msgstr "Користувачі власника" + +msgid "Owners" +msgstr "Власники" + +msgid "Owners that could not be added" +msgstr "Власники, записи яких не вдалося додати" + +msgid "Owners that could not be removed" +msgstr "Власники, записи яких не вдалося вилучити" + +msgid "Owning user of subordinate id entry" +msgstr "Користувач-власник запису підлеглого ідентифікатора" + +msgid "PAC type" +msgstr "Тип PAC" + +msgid "PAD" +msgstr "PAD" + +msgid "PKINIT" +msgstr "PKINIT" + +msgid "PKINIT max life" +msgstr "Макс. строк дії PKINIT" + +msgid "PKINIT max renew" +msgstr "Макс. вік поновлення PKINIT" + +msgid "PKINIT maximum ticket life (seconds)" +msgstr "Максимальний строк дії квитка PKINIT (у секундах)" + +msgid "PKINIT status" +msgstr "стан PKINIT" + +msgid "PKINIT ticket maximum renewable age (seconds)" +msgstr "" +"Максимальний вік, протягом якого можливе поновлення квитка PKINIT (у " +"секундах)" + +msgid "POSIX" +msgstr "POSIX" + +msgid "PTR Hostname" +msgstr "Назва вузла PTR" + +msgid "PTR record" +msgstr "Запис PTR" + +#, python-format +msgid "PTR record for SAN IP (%s) does not match A/AAAA records" +msgstr "PTR-запис для SAN IP (%s) не відповідає записам A/AAAA" + +msgid "Page" +msgstr "Сторінка" + +msgid "Pager Number" +msgstr "Номер пейджера" + +msgid "Pagination Size" +msgstr "Розмір сторінки" + +msgid "Parameters" +msgstr "Параметри" + +msgid "Parent map" +msgstr "Батьківська карта" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "Обробити всі записи DNS і повернути дані у структурованій формі" + +msgid "Parse error" +msgstr "Помилка обробки" + +#, c-format +msgid "Parsing JSON-RPC response failed: %s\n" +msgstr "Не вдалося обробити відповідь JSON-RPC: %s\n" + +#, c-format +msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" +msgstr "" +"Не вдалося обробити відповідь JSON-RPC: не знайдено значення «result».\n" + +msgid "Password" +msgstr "Пароль" + +msgid "Password Expiration Notification (days)" +msgstr "Сповіщення про вичерпання строку дії пароля (у днях)" + +msgid "Password Policies" +msgstr "Правила щодо паролів" + +msgid "Password Policy" +msgstr "Правила для паролів" + +msgid "Password can be specified only for symmetric vault" +msgstr "Пароль можна вказувати лише для симетричного сховища" + +msgid "Password cannot be set on enrolled host." +msgstr "Не можна визначати пароль для вузла з визначеною роллю." + +msgid "Password change complete" +msgstr "Зміну пароля завершено" + +msgid "Password expiration" +msgstr "Обмеження терміну дії пароля" + +msgid "Password grace count" +msgstr "Лічильник лояльності паролів" + +msgid "Password history size" +msgstr "Розмір журналу паролів" + +msgid "Password is too long!\n" +msgstr "Пароль є надто довгим!\n" + +msgid "Password migration was not successful" +msgstr "Не вдалося перенести паролі" + +msgid "Password migration was successful" +msgstr "Пароль успішно перенесено" + +msgid "Password or Password+One-Time Password" +msgstr "Пароль або Пароль+Одноразовий пароль" + +msgid "Password plugin features" +msgstr "Можливості додатка паролів" + +msgid "Password reset was not successful." +msgstr "Не вдалося скинути пароль." + +msgid "Password specified multiple times" +msgstr "Пароль вказано декілька разів" + +msgid "Password used in bulk enrollment" +msgstr "Пароль для загального керування реєстраційними записами" + +msgid "Passwords do not match" +msgstr "Паролі не збігаються" + +msgid "Passwords do not match!" +msgstr "Паролі не збігаються!" + +#, c-format +msgid "Passwords do not match!\n" +msgstr "Вказано різні паролі!\n" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" +"Міграцію записів паролів здійснено у форматі до хешування.\n" +"IPA не вдасться створити ключі Kerberos, якщо не буде\n" +"надано текстових паролів. Всім користувачам з перенесеними\n" +"записами, доведеться пройти розпізнавання на\n" +"https://your.domain/ipa/migration/ до того, як вони зможуть\n" +"скористатися обліковими записами Kerberos." + +msgid "Passwords must match" +msgstr "Паролі мають збігатися" + +msgid "Path to a script executed on a Windows system at logon" +msgstr "Шлях до скрипту, який буде виконано у системі Windows під час входу" + +msgid "Path to a user home directory, in UNC format" +msgstr "Шлях до домашнього каталогу користувача у форматі UNC" + +msgid "Path to a user profile, in UNC format \\\\server\\share\\" +msgstr "" +"Шлях до профілю користувача у форматі UNC \\\\сервер\\спільний_ресурс\\" + +msgid "Path to the IPA CA certificate" +msgstr "Шлях до сертифіката CA IPA" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" +"Умовні правила переспрямування для окремого сервера. Встановіть значення " +"«none» для вимикання переспрямовувача загального рівня для цієї зони. Якщо " +"ви встановите це значення, умовні переспрямовувачі зони не братимуться до " +"уваги." + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Окремі переспрямовувачі для серверів. Нетиповий порт можна вказати для " +"кожного переспрямовувача за допомогою стандартної конструкції «IP_АДРЕСА " +"port ПОРТ»" + +msgid "" +"Per-zone conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" +"Умовні правила переспрямування для окремої зони. Встановіть значення «none» " +"для вимикання переспрямовувача загального рівня для цієї зони. Якщо ви " +"встановите це значення, умовні переспрямовувачі зони не братимуться до уваги." + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Переспрямовувачі для окремої зони. Можна вказати нетиповий порт для кожного " +"переспрямовувача у стандартному форматі: «IP_АДРЕСА port ПОРТ»" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "" +"Проміжок часу, по завершенню якого кількість помилок буде скинуто (у " +"секундах)" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "Проміжок часу, протягом якого діятиме блокування (у секундах)" + +msgid "Permission" +msgstr "Права доступу" + +msgid "Permission ACI grants access to" +msgstr "ACI прав доступу надає доступ до" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "Доступ заборонено: %(file)s" + +msgid "Permission flags" +msgstr "Прапорці прав доступу" + +msgid "Permission name" +msgstr "Назва прав доступу" + +msgid "Permission settings" +msgstr "Параметри прав доступу" + +msgid "Permission type" +msgstr "Тип прав доступу" + +msgid "Permission value" +msgstr "Значення прав доступу" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "Не можна змінювати чи вилучати права доступу з невідомим прапорцем %s" + +msgid "Permissions" +msgstr "Права доступу" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "" +"Права доступу, які слід надати (read, write). Типовими є права доступу write." + +msgid "Permissions to grant(read, write, add, delete, all)" +msgstr "Права доступу, які слід надати (read, write, add, delete, all)" + +msgid "Permitted Encryption Types" +msgstr "Дозволені типи шифрування" + +msgid "Permitted to have certificates issued" +msgstr "Дозволено мати випущений сертифікат" + +msgid "Ping a remote server." +msgstr "Перевірити луна-імпульсом (пінгом) віддалений сервер." + +msgid "Platform" +msgstr "Платформа" + +msgid "Please choose a type of DNS resource record to be added" +msgstr "Будь ласка, виберіть тип запису ресурсу DNS, який слід додати" + +msgid "Please specify forwarders." +msgstr "Будь ласка, вкажіть переспрямовувачі." + +msgid "Please try the following options:" +msgstr "Будь ласка, спробуйте такі параметри:" + +msgid "Policy" +msgstr "Правила" + +msgid "Port" +msgstr "Порт" + +msgid "Positional argument" +msgstr "Позиційний аргумент" + +msgid "Positional arguments" +msgstr "Обов’язкові аргументи" + +msgid "Pre-authentication is required for the service" +msgstr "Для роботи з цією службою потрібне попереднє розпізнавання" + +msgid "Pre-shared password" +msgstr "Попередньо оприлюднений пароль" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "Стандартний профіль «%(profile_id)s» не може бути вилучено" + +msgid "Preference" +msgstr "Пріоритет" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "" +"Пріоритет цього обмінника. Записи з меншим значенням мають вищий пріоритет." + +msgid "Preferred Language" +msgstr "Бажана мова" + +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "" +"Префікс, за яким визначається тип ACI (permission, delegation, selfservice, " +"none)" + +msgid "Preserved user" +msgstr "Зарезервований користувач" + +#, python-format +msgid "Preserved user \"%(value)s\"" +msgstr "Збережений користувач «%(value)s»" + +msgid "Preserved users" +msgstr "Зарезервовані користувачі" + +msgid "Prev" +msgstr "Назад" + +msgid "Primary RID base" +msgstr "Головна основа RID" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "" +"Основний діапазон RID і вторинний діапазон RID не повинні перекриватися" + +msgid "Primary key only" +msgstr "Лише первинний ключ" + +msgid "Principal" +msgstr "Реєстраційний запис" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "" +"Не вдалося виконати розпізнавання для реєстраційного запису %(principal)s: " +"%(message)s" #, python-format msgid "" @@ -32013,58 +26620,4702 @@ msgstr "" "Реєстраційному запису «%(principal)s» не дозволено використовувати службу " "сертифікації «%(ca)s» із профілем «%(profile_id)s» для видання сертифікатів." -msgid "enabledService/configuredService not in ipaConfigString kdc entry" +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" msgstr "" -"enabledService/configuredService не перебуває у записі kdc ipaConfigString" +"Реєстраційний запис «%s» у альтернативній назві об’єкта не відповідає " +"запитаному реєстраційному запису" + +msgid "Principal alias" +msgstr "Псевдонім реєстраційного запису" + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" +"Реєстраційний запис для цього сертифіката (наприклад HTTP/test.example.com)" #, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "Вузол «%(hostname)s» не є активним KDC" +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "" +"Реєстраційний запис вказано у формі, відмінній від користувач@ОБЛАСТЬ: " +"«%(principal)s»" -msgid "Issuing CA" -msgstr "Видавничий CA" +msgid "Principal name" +msgstr "Назва реєстраційного запису" -msgid "Name of issuing CA" -msgstr "Назва видавничого CA" +msgid "Print as little as possible" +msgstr "Виводити мінімум даних" -msgid "Subject email address" -msgstr "Адреса електронної пошти призначення" +msgid "Print debugging information" +msgstr "Вивести діагностичні дані" -msgid "Subject DNS name" -msgstr "Назва DNS призначення" +msgid "Print entries as stored on the server. Only affects output format." +msgstr "" +"Вивести записи у формі, у якій вони зберігаються на сервері. Стосується лише " +"формату виведення даних." -msgid "Subject X.400 address" -msgstr "Адреса X.400 призначення" +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "Вивести дані XML-RPC без обробки у режимі GSSAPI" -msgid "Subject directory name" -msgstr "Назва каталогу призначення" +msgid "Priority" +msgstr "Пріоритет" -msgid "Subject EDI Party name" -msgstr "Назва EDI Party призначення" +msgid "Priority (order)" +msgstr "Пріоритетність (порядок)" -msgid "Subject URI" -msgstr "Адреса призначення" +msgid "Priority of the policy (higher number means lower priority" +msgstr "Пріоритет правил (більше число — нижчий пріоритет)" -msgid "Subject IP Address" -msgstr "IP-адреса призначення" +msgid "Priority of the rule (higher number means lower priority" +msgstr "Пріоритет правила (більше число — нижчий пріоритет)" -msgid "Subject OID" -msgstr "OID призначення" +msgid "Private key specified multiple times" +msgstr "Закритий ключ вказано декілька разів" -msgid "Subject UPN" -msgstr "UPN призначення" +msgid "Privilege" +msgstr "Привілей" -msgid "Subject Kerberos principal name" -msgstr "Назва реєстраційного запису Kerberos призначення" +msgid "Privilege Settings" +msgstr "Параметри привілеїв" -msgid "Subject Other Name" -msgstr "Інша назва призначення" +msgid "Privilege Withdrawn" +msgstr "Привілей відкликано" + +msgid "Privilege description" +msgstr "Опис привілею" + +msgid "Privilege name" +msgstr "Назва привілею" + +msgid "Privileges" +msgstr "Привілеї" + +msgid "Profile" +msgstr "Профіль" + +msgid "Profile ID" +msgstr "Ід. профілю" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "" +"Ідентифікатор профілю, «%(cli_value)s», не збігається із вказаним у даних " +"профілю, «%(file_value)s»" + +msgid "Profile ID for referring to this profile" +msgstr "Ідентифікатор профілю для посилання на цей профіль" + +msgid "Profile category" +msgstr "Категорія профілів" + +msgid "Profile category the ACL applies to" +msgstr "Категорія профілів, до якої застосовується ACL" + +msgid "Profile configuration" +msgstr "Налаштування профілю" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "Налаштування профілів збережено до файла «%(file)s»" + +#, python-format +msgid "Profile data specifies profileId multiple times: %(values)s" +msgstr "У даних профілю profileId вказано декілька разів: %(values)s" + +msgid "Profile description" +msgstr "Опис профілю" + +msgid "Profiles" +msgstr "Профілі" + +msgid "Prompt for LDAP password" +msgstr "Запит щодо пароля LDAP" + +msgid "Prompt for the username" +msgstr "Запит щодо імені користувача" + +msgid "" +"Prompt for the username when multiple identities are mapped to a certificate" +msgstr "" +"Запитувати ім’я користувача, якщо із сертифікатом пов’язано декілька профілів" + +msgid "Prompt to set the user password" +msgstr "Надіслати запит щодо встановлення пароля користувача" + +msgid "Prospective" +msgstr "Очікуваний" + +msgid "Protocol" +msgstr "Протокол" + +msgid "Provisioning" +msgstr "Передбачення" + +msgid "Public Key" +msgstr "Відкритий ключ" + +msgid "Public key" +msgstr "Відкритий ключ" + +msgid "Public key can be specified only for asymmetric vault" +msgstr "Відкритий ключ можна вказувати лише для асиметричного сховища" + +msgid "Public key specified multiple times" +msgstr "Відкритий ключ вказано декілька разів" + +msgid "Public key:" +msgstr "Відкритий ключ:" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "" +"Ширина QR-коду перевищує розмір термінала для виведення. Будь ласка, змініть " +"розміри вашого термінала." + +msgid "Quantity" +msgstr "Кількість" + +msgid "Query current Domain Level." +msgstr "Надіслати запити щодо поточного рівня домену." + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "" +"За запитом повернуто більше за налаштоване максимальне значення результатів. " +"Показано лише перші ${counter} результатів." + +msgid "Quick Links" +msgstr "Швидкі посилання" + +msgid "Quiet mode. Only errors are displayed." +msgstr "«Мовчазний» режим. Буде показано лише повідомлення про помилки." + +msgid "RADIUS" +msgstr "RADIUS" + +msgid "RADIUS Proxy Server Settings" +msgstr "Параметри проксі-сервера RADIUS" + +msgid "RADIUS Server" +msgstr "Сервер RADIUS" + +msgid "RADIUS Servers" +msgstr "Сервери RADIUS" + +msgid "RADIUS max life" +msgstr "Макс. строк дії RADIUS" + +msgid "RADIUS max renew" +msgstr "Макс. вік поновлення RADIUS" + +msgid "RADIUS maximum ticket life (seconds)" +msgstr "Максимальний строк дії квитка RADIUS (у секундах)" + +msgid "RADIUS proxy configuration" +msgstr "Налаштування проксі RADIUS" + +msgid "RADIUS proxy server" +msgstr "Проксі-сервер RADIUS" + +msgid "RADIUS proxy server name" +msgstr "Назва проксі-сервера RADIUS" + +#, python-format +msgid "RADIUS proxy server with name \"%s\" already exists" +msgstr "Проксі-сервер RADIUS із назвою «%s» вже існує" + +msgid "RADIUS proxy servers" +msgstr "Проксі-сервери RADIUS" + +msgid "RADIUS proxy username" +msgstr "Ім’я користувача проксі-сервера RADIUS" + +msgid "RADIUS ticket maximum renewable age (seconds)" +msgstr "" +"Максимальний вік, протягом якого можливе поновлення квитка PKINIT (у " +"секундах)" + +msgid "REST API is not logged in." +msgstr "Вхід до програмного інтерфейсу REST не виконано." + +msgid "REVOKED" +msgstr "ВІДКЛИКАНО" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "Область Kerberos, сумісна з RFC4120" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "" +"RFC822Name не збігається зі жодною адресою електронної пошти користувача" + +msgid "RP record" +msgstr "Запис RP" + +msgid "RPC command used to log the current user out of their session." +msgstr "" +"Команда RPC, яка використовується для завершення сеансу поточного " +"користувача." + +msgid "RRSIG Algorithm" +msgstr "Алгоритм RRSIG" + +msgid "RRSIG Key Tag" +msgstr "Мітка ключа RRSIG" + +msgid "RRSIG Labels" +msgstr "Мітки RRSIG" + +msgid "RRSIG Original TTL" +msgstr "Початковий TTL RRSIG" + +msgid "RRSIG Signature" +msgstr "Підпис RRSIG" + +msgid "RRSIG Signature Expiration" +msgstr "Строк дії підпису RRSIG" + +msgid "RRSIG Signature Inception" +msgstr "Початок підпису RRSIG" + +msgid "RRSIG Signer's Name" +msgstr "Ім’я підписника RRSIG" + +msgid "RRSIG Type Covered" +msgstr "Об’єднувані типи RRSIG" + +msgid "RRSIG record" +msgstr "Запис RRSIG" + +msgid "RSN Version" +msgstr "Версія RSN" + +msgid "Random Serial Number Version" +msgstr "Версія із випадковим серійним номером" + +msgid "Random password" +msgstr "Випадковий пароль" + +msgid "Range Settings" +msgstr "Параметри діапазону" + +msgid "Range name" +msgstr "Назва діапазону" + +msgid "Range size" +msgstr "Розмір діапазону" + +msgid "Range type" +msgstr "Тип діапазону" + +#, python-format +msgid "Raw %s records" +msgstr "Необроблені записи %s" + +msgid "Raw A records" +msgstr "Прості записи A" + +msgid "Raw A6 records" +msgstr "Прості записи A6" + +msgid "Raw AAAA records" +msgstr "Прості записи AAAA" + +msgid "Raw AFSDB records" +msgstr "Прості записи AFSDB" + +msgid "Raw APL records" +msgstr "Прості записи APL" + +msgid "Raw CERT records" +msgstr "Прості записи CERT" + +msgid "Raw CNAME records" +msgstr "Прості записи CNAME" + +msgid "Raw DHCID records" +msgstr "Прості записи DHCID" + +msgid "Raw DLV records" +msgstr "Прості записи DLV" + +msgid "Raw DNAME records" +msgstr "Прості записи DNAME" + +msgid "Raw DNSKEY records" +msgstr "Прості записи DNSKEY" + +msgid "Raw DS records" +msgstr "Прості записи DS" + +msgid "Raw HIP records" +msgstr "Прості записи HIP" + +msgid "Raw IPSECKEY records" +msgstr "Прості записи IPSECKEY" + +msgid "Raw KEY records" +msgstr "Прості записи KEY" + +msgid "Raw KX records" +msgstr "Прості записи KX" + +msgid "Raw LOC records" +msgstr "Прості записи LOC" + +msgid "Raw MX records" +msgstr "Прості записи MX" + +msgid "Raw NAPTR records" +msgstr "Прості записи NAPTR" + +msgid "Raw NS records" +msgstr "Прості записи NS" + +msgid "Raw NSEC records" +msgstr "Прості записи NSEC" + +msgid "Raw NSEC3 records" +msgstr "Прості записи NSEC3" + +msgid "Raw PTR records" +msgstr "Прості записи PTR" + +msgid "Raw RP records" +msgstr "Прості записи RP" + +msgid "Raw RRSIG records" +msgstr "Прості записи RRSIG" + +msgid "Raw SIG records" +msgstr "Прості записи SIG" + +msgid "Raw SPF records" +msgstr "Прості записи SPF" + +msgid "Raw SRV records" +msgstr "Прості записи SRV" + +msgid "Raw SSHFP records" +msgstr "Прості записи SSHFP" + +msgid "Raw TA records" +msgstr "Прості записи TA" + +msgid "Raw TKEY records" +msgstr "Прості записи TKEY" + +msgid "Raw TLSA records" +msgstr "Прості записи TLSA" + +msgid "Raw TSIG records" +msgstr "Прості записи TSIG" + +msgid "Raw TXT records" +msgstr "Прості записи TXT" + +msgid "Raw target filter" +msgstr "Фільтр призначення без обробки" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "" +"Необроблене значення для запису DNS вже було встановлено за допомогою " +"параметра «%(name)s»" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "Відновлено довіру до домену «%(value)s»" + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "" +"Повторно синхронізувати локальний кеш іменування із сервером іменування." + +msgid "Realm Domains" +msgstr "Домени області" + +msgid "Realm administrator password should be specified" +msgstr "Має бути вказано пароль адміністратора області" + +msgid "Realm domains" +msgstr "Домени області" + +msgid "Realm name" +msgstr "Назва області" + +msgid "Realm-domain mismatch" +msgstr "Невідповідність між областю і доменом" + +msgid "Reason" +msgstr "Підстава" + +msgid "Reason for Revocation" +msgstr "Причина відкликання" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "Причина відкликання сертифіката (0-10)" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "" +"Причина відкликання сертифіката (0-10). Введіть «ipa help cert», щоб " +"ознайомитися із подробицями причин відкликання. " + +msgid "Rebuild auto membership" +msgstr "Повторне збирання правил автоматичної участі" + +msgid "Rebuild auto membership." +msgstr "Повторне збирання правил автоматичної участі." + +msgid "Rebuild membership for all members of a grouping" +msgstr "Повторне збирання правил участі для усіх учасників угрупування" + +msgid "Rebuild membership for specified hosts" +msgstr "Повторне збирання правил участі для вказаних вузлів" + +msgid "Rebuild membership for specified users" +msgstr "Повторне збирання правил участі для вказаних користувачів" + +msgid "Recommended maximum number of agreements per replica exceeded" +msgstr "Перевищено рекомендовану максимальну кількість узгоджень на репліку" + +msgid "Record Settings" +msgstr "Параметри запису" + +msgid "Record Type" +msgstr "Тип запису" + +msgid "Record creation failed." +msgstr "Спроба створення запису зазнала невдачі." + +msgid "Record data" +msgstr "Дані запису" + +msgid "Record name" +msgstr "Назва запису" + +msgid "Record not found." +msgstr "Запис не знайдено." + +msgid "Record type" +msgstr "Тип запису" + +msgid "Records" +msgstr "Записи" + +msgid "Records for DNS Zone" +msgstr "Записи зони DNS" + +msgid "Redirection" +msgstr "Переспрямування" + +msgid "Redirection to PTR record" +msgstr "Переспрямовування на запис PTR" + +msgid "Refresh" +msgstr "Оновити" + +msgid "Refresh list of the domains associated with the trust" +msgstr "Освіжити список доменів, пов’язаних з правилом довіри" + +msgid "Refresh the page." +msgstr "Оновити сторінку." + +msgid "Register to the entitlement system." +msgstr "Зареєструватися у системі іменування." + +msgid "Registration password" +msgstr "Пароль для реєстрації" + +msgid "Regular Expression" +msgstr "Формальний вираз" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" +"Назва відносного запису «%(record)s» містить як суфікс назву зони " +"«%(zone)s», що дає повну назву домену «%(fqdn)s». Зазвичай, такі назви є " +"помилковими, спричиненими пропущеною крапкою наприкінці специфікації назви." + +msgid "Relative weight for entries with the same priority." +msgstr "Відносна вага для записів із однаковою пріоритетністю." + +msgid "Relative weight for server services (counts per location)" +msgstr "Відносна вага служб для сервера (обчислюється для окремого місця)" + +msgid "Reload current settings from the server." +msgstr "Перезавантажити поточні параметри з сервера." + +msgid "Reload the browser." +msgstr "Перезавантажити переглядач." + +msgid "Remaining subids" +msgstr "Залишкові subid-и" + +msgid "Remote IPA server hostname" +msgstr "Назва вузла віддаленого сервера IPA" + +msgid "Remote server name" +msgstr "Назва віддаленого сервера" + +msgid "Remove" +msgstr "Вилучити" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "Вилучити записи A, AAAA, SSHFP і PTR вузлів, керованих DNS IPA" + +msgid "Remove CA ACLs" +msgstr "Вилучити ACL служб сертифікації" + +msgid "Remove CAs from a CA ACL." +msgstr "Вилучити CA з ACL CA." + +#, python-brace-format +msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" +msgstr "Вилучити служби сертифікації з ACL CA «${primary_key}»" + +msgid "Remove DNS forward zones" +msgstr "Вилучити зони переспрямовування DNS" + +msgid "Remove DNS resource records" +msgstr "Вилучити записи ресурсів DNS" + +msgid "Remove DNS zones" +msgstr "Вилучити зони DNS" + +msgid "Remove HBAC rules" +msgstr "Вилучити правила HBAC" + +#, python-brace-format +msgid "Remove HBAC service '${primary_key}' from HBAC service groups" +msgstr "Вилучити службу HBAC «${primary_key}» з груп служб HBAC" + +msgid "Remove HBAC service groups" +msgstr "Вилучити групи служб HBAC" + +#, python-brace-format +msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" +msgstr "Вилучити групи служб HBAC з правила HBAC «${primary_key}»" + +msgid "Remove HBAC services" +msgstr "Вилучити служби HBAC" + +#, python-brace-format +msgid "Remove HBAC services from HBAC rule '${primary_key}'" +msgstr "Вилучити служби HBAC з правила HBAC «${primary_key}»" + +#, python-brace-format +msgid "Remove HBAC services from HBAC service group '${primary_key}'" +msgstr "Вилучити служби HBAC з групи служб HBAC «${primary_key}»" + +msgid "Remove ID ranges" +msgstr "Вилучити діапазони ідентифікаторів" + +msgid "Remove ID views" +msgstr "Вилучити перегляди ідентифікаторів" + +msgid "Remove IPA locations" +msgstr "Вилучити місця IPA" + +#, python-brace-format +msgid "Remove IPA servers from IPA location '${primary_key}'" +msgstr "Вилучити сервери IPA з місця IPA «${primary_key}»" + +msgid "Remove Kerberos Alias" +msgstr "Вилучити псевдонім Kerberos" + +msgid "Remove OTP tokens" +msgstr "Вилучити ключі OTP" + +msgid "Remove Permission" +msgstr "Вилучити права доступу" + +msgid "Remove RADIUS servers" +msgstr "Вилучити сервери RADIUS" + +#, python-brace-format +msgid "Remove RunAs groups from sudo rule '${primary_key}'" +msgstr "Вилучити групи RunAs з правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Remove RunAs user groups from sudo rule '${primary_key}'" +msgstr "Вилучити групи користувачів RunAs з правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Remove RunAs users from sudo rule '${primary_key}'" +msgstr "Вилучити користувачів RunAs з правила sudo «${primary_key}»" + +msgid "Remove a manager to the stage user entry" +msgstr "Вилучити керування із запису користувача етапу" + +msgid "Remove a manager to the user entry" +msgstr "Вилучити керування із запису користувача" + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "" +"Вилучити права доступу до делегування доступу для окремих зон " +"переспрямовування." + +msgid "Remove a permission for per-zone access delegation." +msgstr "Вилучити права доступу до надання доступу до окремих зон." + +msgid "Remove all principals in this realm" +msgstr "Вилучити всі реєстраційні записи у цій області" + +#, python-brace-format +msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" +msgstr "Вилучити групи дозволу команд sudo з правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Remove allow sudo commands from sudo rule '${primary_key}'" +msgstr "Вилучити команди дозволу sudo з правила sudo «${primary_key}»" + +msgid "Remove an option from Sudo Rule." +msgstr "Вилучити пункт з правила sudo." + +msgid "Remove auto membership rules" +msgstr "Вилучити правила автоматичної участі" + +msgid "Remove automount keys" +msgstr "Вилучити ключі автоматичного монтування" + +msgid "Remove automount locations" +msgstr "Вилучити місця автоматичного монтування" + +msgid "Remove automount maps" +msgstr "Вилучити карти автоматичного монтування" + +msgid "Remove certificate authorities" +msgstr "Вилучити служби сертифікації" + +msgid "Remove certificate hold" +msgstr "Вилучити затримання сертифіката" + +msgid "Remove certificate identity mapping rules" +msgstr "Вилучити правила прив'язки профілів сертифікації" + +msgid "Remove certificate mapping data" +msgstr "Вилучити дані прив'язки сертифіката" + +msgid "Remove certificate profiles" +msgstr "Вилучити профілі сертифікації" + +#, python-brace-format +msgid "Remove certificate profiles from CA ACL '${primary_key}'" +msgstr "Вилучити профілі сертифікації з ACL CA «${primary_key}»" + +msgid "Remove certificates from a service" +msgstr "Вилучити сертифікати із запису служби" + +msgid "Remove certificates from host entry" +msgstr "Вилучити сертифікати із запису вузла" + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "Вилучити команди і групи команд sudo, яких стосується правило sudo." + +msgid "Remove conditions from an automember rule." +msgstr "Вилучити умови з правила автоматичної участі." + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "Вилучити типову (резервну) групу для невідповідних записів." + +msgid "Remove delegations" +msgstr "Вилучити уповноваження" + +#, python-brace-format +msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" +msgstr "Вилучити групи заборони команд sudo з правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Remove deny sudo commands from sudo rule '${primary_key}'" +msgstr "Вилучити команди заборони sudo з правила sudo «${primary_key}»" + +msgid "Remove domains" +msgstr "Вилучити домени" + +msgid "Remove entries from DNS" +msgstr "Вилучити записи з DNS" + +#, python-brace-format +msgid "Remove exclusive conditions from rule '${primary_key}'" +msgstr "Вилучити умови виключення з правила «${primary_key}»" + +msgid "Remove from CRL" +msgstr "Вилучити з CRL" + +msgid "Remove group ID overrides" +msgstr "Вилучити перевизначення ідентифікаторів груп" + +msgid "Remove group for Sudo to execute as." +msgstr "Вилучити групу виконання з запису sudo." + +#, python-brace-format +msgid "Remove groups from member managers for host group '${primary_key}'" +msgstr "" +"Вилучити групи з керівників учасниками для групи вузлів «${primary_key}»" + +#, python-brace-format +msgid "Remove groups from member managers for user group '${primary_key}'" +msgstr "" +"Вилучити групи з керівників учасниками для групи користувачів " +"«${primary_key}»" + +msgid "Remove hold" +msgstr "Вилучити затримання" + +#, python-brace-format +msgid "Remove host '${primary_key}' from HBAC rules" +msgstr "Вилучити вузол «${primary_key}» з правил HBAC" + +#, python-brace-format +msgid "Remove host '${primary_key}' from host groups" +msgstr "Вилучити вузол «${primary_key}» з груп вузлів" + +#, python-brace-format +msgid "Remove host '${primary_key}' from netgroups" +msgstr "Вилучити вузол «${primary_key}» з мережевих груп" + +#, python-brace-format +msgid "Remove host '${primary_key}' from roles" +msgstr "Вилучити вузол «${primary_key}» з ролей" + +#, python-brace-format +msgid "Remove host '${primary_key}' from sudo rules" +msgstr "Вилучити вузол «${primary_key}» з правил sudo" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from HBAC rules" +msgstr "Вилучити групу вузлів «${primary_key}» з правил HBAC" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from host groups" +msgstr "Вилучити групу вузлів «${primary_key}» з груп вузлів" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from netgroups" +msgstr "Вилучити групу вузлів «${primary_key}» з мережевих груп" + +#, python-brace-format +msgid "Remove host group '${primary_key}' from sudo rules" +msgstr "Вилучити групу вузлів «${primary_key}» з правил sudo" + +msgid "Remove host groups" +msgstr "Вилучити групи вузлів" + +#, python-brace-format +msgid "Remove host groups from CA ACL '${primary_key}'" +msgstr "Вилучити групи вузлів з ACL CA «${primary_key}»" + +#, python-brace-format +msgid "Remove host groups from HBAC rule '${primary_key}'" +msgstr "Вилучити групи вузлів з правила HBAC «${primary_key}»" + +#, python-brace-format +msgid "Remove host groups from SELinux user map '${primary_key}'" +msgstr "" +"Вилучити групи вузлів з прив'язки користувачів SELinux «${primary_key}»" + +#, python-brace-format +msgid "Remove host groups from host group '${primary_key}'" +msgstr "Вилучити групи вузлів з групи вузлів «${primary_key}»" + +#, python-brace-format +msgid "Remove host groups from netgroup '${primary_key}'" +msgstr "Вилучити групи вузлів з мережевої групи «${primary_key}»" + +#, python-brace-format +msgid "Remove host groups from role '${primary_key}'" +msgstr "Вилучити групи вузлів з ролі «${primary_key}»" + +#, python-brace-format +msgid "Remove host groups from sudo rule '${primary_key}'" +msgstr "Вилучити групи вузлів з правила sudo «${primary_key}»" + +msgid "Remove hosts" +msgstr "Вилучити вузли" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "Вилучити вузли та групи вузлів, яких стосується правило sudo." + +#, python-brace-format +msgid "Remove hosts from CA ACL '${primary_key}'" +msgstr "Вилучити вузли з ACL CA «${primary_key}»" + +#, python-brace-format +msgid "Remove hosts from HBAC rule '${primary_key}'" +msgstr "Вилучити вузли з правила HBAC «${primary_key}»" + +#, python-brace-format +msgid "Remove hosts from SELinux user map '${primary_key}'" +msgstr "Вилучити вузли з прив'язки користувачів SELinux «${primary_key}»" + +#, python-brace-format +msgid "Remove hosts from host group '${primary_key}'" +msgstr "Вилучити вузли з групи вузлів «${primary_key}»" + +#, python-brace-format +msgid "Remove hosts from netgroup '${primary_key}'" +msgstr "Вилучити вузли з мережевої групи «${primary_key}»" + +#, python-brace-format +msgid "Remove hosts from role '${primary_key}'" +msgstr "Вилучити вузли з ролі «${primary_key}»" + +#, python-brace-format +msgid "Remove hosts from sudo rule '${primary_key}'" +msgstr "Вилучити вузли з правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Remove hosts managing host '${primary_key}'" +msgstr "Вилучити вузол керування вузлами «${primary_key}»" + +#, python-brace-format +msgid "Remove hosts managing service '${primary_key}'" +msgstr "Вилучити службу керування вузлами «${primary_key}»" + +msgid "Remove hosts that can manage this host." +msgstr "Вилучити записи вузлів, які можуть керувати цим вузлом." + +msgid "Remove hosts that can manage this service." +msgstr "Вилучити вузли, які можуть керувати цією службою." + +#, python-brace-format +msgid "Remove inclusive conditions from rule '${primary_key}'" +msgstr "Вилучити умови включення з правила «${primary_key}»" + +msgid "Remove information about the domain associated with the trust." +msgstr "Вилучити дані щодо домену, пов’язаного з цим правилом довіри." + +msgid "Remove member from a named service delegation rule." +msgstr "Вилучити запис учасника із іменованого правила делегування служб." + +msgid "Remove member from a named service delegation target." +msgstr "Вилучити запис учасника із іменованого призначення делегування служб." + +msgid "Remove member from a named service delegation." +msgstr "Вилучити запис із делегування іменованої служби." + +msgid "Remove members from Sudo Command Group." +msgstr "Вилучити учасників з групи команд sudo." + +msgid "Remove members from a group." +msgstr "Вилучити учасників з групи." + +msgid "Remove members from a hostgroup." +msgstr "Вилучити записи з групи вузлів." + +msgid "Remove members from a netgroup." +msgstr "Вилучити учасників з мережевої групи." + +msgid "Remove members from a permission." +msgstr "Вилучити учасників із запису права доступу." + +msgid "Remove members from a privilege" +msgstr "Вилучити учасників з запису привілеїв" + +msgid "Remove members from a role." +msgstr "Вилучити учасників з запису ролі." + +msgid "Remove members from a vault." +msgstr "Вилучити записи учасників сховища." + +msgid "Remove members from an HBAC service group." +msgstr "Вилучити учасників з групи служб HBAC." + +#, python-brace-format +msgid "Remove netgroup '${primary_key}' from netgroups" +msgstr "Вилучити мережеву групу «${primary_key}» з мережевих груп" + +msgid "Remove netgroups" +msgstr "Вилучити мережеві групи" + +#, python-brace-format +msgid "Remove netgroups from netgroup '${primary_key}'" +msgstr "Вилучити мережеві групи з мережевої групи «${primary_key}»" + +msgid "Remove one or more certificate mappings from the stage user entry." +msgstr "" +"Вилучити одну або декілька прив’язок сертифікатів із запису користувача " +"етапу." + +msgid "Remove one or more certificate mappings from the user entry." +msgstr "" +"Вилучити одну або декілька прив’язок сертифікатів із запису користувача." + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "Вилучити один або декілька сертифікатів запису idoverrideuser" + +msgid "Remove one or more certificates to the stageuser entry" +msgstr "Вилучити один або декілька сертифікатів запису користувача етапу" + +msgid "Remove one or more certificates to the user entry" +msgstr "Вилучити один або декілька сертифікатів запису користувача" + +msgid "Remove orphan automember rules" +msgstr "Вилучити осиротілі правила автоматичної участі" + +msgid "Remove owners from a vault container." +msgstr "Вилучити записи власників із контейнера сховища." + +msgid "Remove owners from a vault." +msgstr "Вилучити записи власників сховища." + +msgid "Remove password policies" +msgstr "Вилучити правила паролів" + +msgid "Remove permissions" +msgstr "Вилучити дозволи" + +msgid "Remove permissions from a privilege." +msgstr "Вилучити права доступу з привілею." + +msgid "Remove preserved users" +msgstr "Вилучити збережених користувачів" + +msgid "Remove principal alias from a host entry" +msgstr "Вилучити псевдонім реєстраційного запису із запису вузла" + +msgid "Remove principal alias from a service" +msgstr "Вилучити альтернативну назву реєстраційного запису зі служби" + +msgid "Remove principal alias from the stageuser entry" +msgstr "Вилучити псевдонім реєстраційного запису із запису користувача етапу" + +msgid "Remove principal alias from the user entry" +msgstr "Вилучити псевдонім реєстраційного запису із запису користувача" + +#, python-brace-format +msgid "Remove privilege '${primary_key}' from permissions" +msgstr "Вилучити привілеї «${primary_key}» з дозволів" + +msgid "Remove privileges" +msgstr "Вилучити привілеї" + +msgid "Remove privileges from a role." +msgstr "Вилучити привілеї з запису ролі." + +#, python-brace-format +msgid "Remove privileges from permission '${primary_key}'" +msgstr "Вилучити привілеї з дозволів «${primary_key}»" + +msgid "Remove profiles from a CA ACL." +msgstr "Вилучити профілі із CA ACL." + +#, python-brace-format +msgid "Remove role '${primary_key}' from privileges" +msgstr "Вилучити роль «${primary_key}» з привілеїв" + +msgid "Remove roles" +msgstr "Вилучити ролі" + +#, python-brace-format +msgid "Remove roles from privilege '${primary_key}'" +msgstr "Вилучити ролі з привілеїв «${primary_key}»" + +msgid "Remove self service permissions" +msgstr "Вилучити дозволи на самообслуговування" + +msgid "Remove selinux user maps" +msgstr "Вилучити прив'язки користувачів selinux" + +#, python-brace-format +msgid "Remove service '${primary_key}' from roles" +msgstr "Вилучити службу «${primary_key}» з ролей" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "Вилучити служби та групи служб з правила HBAC." + +msgid "Remove services" +msgstr "Вилучити служби" + +#, python-brace-format +msgid "Remove services from CA ACL '${primary_key}'" +msgstr "Вилучити служби з ACL CA «${primary_key}»" + +msgid "Remove services from a CA ACL." +msgstr "Вилучити служби з CA ACL." + +#, python-brace-format +msgid "Remove services from members of vault '${primary_key}'" +msgstr "Вилучити служби зі списку учасників сховища «${primary_key}»" + +#, python-brace-format +msgid "Remove services from owners of vault '${primary_key}'" +msgstr "Вилучити служби зі списку власників сховища «${primary_key}»" + +#, python-brace-format +msgid "Remove services from role '${primary_key}'" +msgstr "Вилучити служби з ролі «${primary_key}»" + +#, python-brace-format +msgid "Remove services from user group '${primary_key}'" +msgstr "Вилучити служби з групи користувачів «${primary_key}»" + +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "Вилучити вузли джерела та групи вузлів з правила HBAC." + +msgid "Remove stage users" +msgstr "Вилучити користувачів етапів" + +#, python-brace-format +msgid "Remove sudo command '${primary_key}' from sudo command groups" +msgstr "Вилучити команду sudo «${primary_key}» з груп команд sudo" + +msgid "Remove sudo command groups" +msgstr "Вилучити групи команд sudo" + +msgid "Remove sudo commands" +msgstr "Вилучити команди sudo" + +#, python-brace-format +msgid "Remove sudo commands from sudo command group '${primary_key}'" +msgstr "Вилучити команди sudo з групи команд sudo «${primary_key}»" + +msgid "Remove sudo options" +msgstr "Вилучити параметри sudo" + +msgid "Remove sudo rules" +msgstr "Вилучити правила sudo" + +msgid "Remove target from a named service delegation rule." +msgstr "Вилучити ціль із іменованого правила делегування служб." + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "Вилучити вузли призначення та групи вузлів з CA ACL." + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "Вилучити вузли призначення та групи вузлів з правила HBAC." + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "" +"Вилучити вузли призначення та групи вузлів з правила карти користувачів " +"SELinux." + +msgid "Remove topology segments" +msgstr "Вилучити елементи топології" + +msgid "Remove trusts" +msgstr "Вилучити записи довіри" + +#, python-brace-format +msgid "Remove user '${primary_key}' from HBAC rules" +msgstr "Вилучити користувача «${primary_key}» з правил HBAC" + +#, python-brace-format +msgid "Remove user '${primary_key}' from netgroups" +msgstr "Вилучити користувача «${primary_key}» з мережевих груп" + +#, python-brace-format +msgid "Remove user '${primary_key}' from roles" +msgstr "Вилучити користувача «${primary_key}» з ролей" + +#, python-brace-format +msgid "Remove user '${primary_key}' from sudo rules" +msgstr "Вилучити користувача «${primary_key}» з правил sudo" + +#, python-brace-format +msgid "Remove user '${primary_key}' from user groups" +msgstr "Вилучити користувача «${primary_key}» з груп користувачів" + +msgid "Remove user ID overrides" +msgstr "Вилучити перевизначення ідентифікаторів користувачів" + +#, python-brace-format +msgid "Remove user ID overrides from user group '${primary_key}'" +msgstr "" +"Вилучити перевизначення ідентифікатора користувача з групи користувачів " +"«${primary_key}»" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from HBAC rules" +msgstr "Вилучити групу користувачів «${primary_key}» зі правил HBAC" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from netgroups" +msgstr "Вилучити групу користувачів «${primary_key}» зі списку мережевих груп" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from roles" +msgstr "Вилучити групу користувачів «${primary_key}» зі списку ролей" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from sudo rules" +msgstr "Вилучити групу користувачів «${primary_key}» зі правил sudo" + +#, python-brace-format +msgid "Remove user group '${primary_key}' from user groups" +msgstr "" +"Вилучити групу користувачів «${primary_key}» зі списку груп користувачів" + +msgid "Remove user groups" +msgstr "Вилучити групи користувачів" + +#, python-brace-format +msgid "Remove user groups from CA ACL '${primary_key}'" +msgstr "Вилучити групи користувачів з ACL CA «${primary_key}»" + +#, python-brace-format +msgid "Remove user groups from HBAC rule '${primary_key}'" +msgstr "Вилучити групи користувачів з правила HBAC «${primary_key}»" + +#, python-brace-format +msgid "Remove user groups from SELinux user map '${primary_key}'" +msgstr "" +"Вилучити групи користувачів з прив'язки користувачів SELinux «${primary_key}»" + +#, python-brace-format +msgid "Remove user groups from members of vault '${primary_key}'" +msgstr "" +"Вилучити групи користувачів зі списку учасників сховища «${primary_key}»" + +#, python-brace-format +msgid "Remove user groups from netgroup '${primary_key}'" +msgstr "Вилучити групи користувачів з мережевої групи «${primary_key}»" + +#, python-brace-format +msgid "Remove user groups from owners of vault '${primary_key}'" +msgstr "" +"Вилучити групи користувачів зі списку власників сховища «${primary_key}»" + +#, python-brace-format +msgid "Remove user groups from role '${primary_key}'" +msgstr "Вилучити групи користувачів з ролі «${primary_key}»" + +#, python-brace-format +msgid "Remove user groups from sudo rule '${primary_key}'" +msgstr "Вилучити групи користувачів з правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Remove user groups from user group '${primary_key}'" +msgstr "Вилучити групи користувачів з групи користувачів «${primary_key}»" + +msgid "Remove users" +msgstr "Вилучити користувачів" + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "Вилучити записи користувачів та груп, яких стосується правило sudo." + +msgid "Remove users and groups for Sudo to execute as." +msgstr "" +"Вилучити користувачів та групи для виконання команд sudo від їхнього імені." + +msgid "Remove users and groups from a CA ACL." +msgstr "Вилучити користувачів або групи з CA ACL." + +msgid "Remove users and groups from an HBAC rule." +msgstr "Вилучити користувачів і групи з правила HBAC." + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "Вилучити користувачів і групи з правила карти користувачів SELinux." + +#, python-brace-format +msgid "Remove users from CA ACL '${primary_key}'" +msgstr "Вилучити користувачів з ACL CA «${primary_key}»" + +#, python-brace-format +msgid "Remove users from HBAC rule '${primary_key}'" +msgstr "Вилучити користувачів з правила HBAC «${primary_key}»" + +#, python-brace-format +msgid "Remove users from SELinux user map '${primary_key}'" +msgstr "" +"Вилучити користувачів з прив'язки користувачів SELinux «${primary_key}»" + +#, python-brace-format +msgid "Remove users from member managers for host group '${primary_key}'" +msgstr "" +"Вилучити користувачів з керівників учасниками для групи вузлів " +"«${primary_key}»" + +#, python-brace-format +msgid "Remove users from member managers for user group '${primary_key}'" +msgstr "" +"Вилучити користувачів з керівників учасниками для групи користувачів " +"«${primary_key}»" + +#, python-brace-format +msgid "Remove users from members of vault '${primary_key}'" +msgstr "Вилучити користувачів зі списку учасників сховища «${primary_key}»" + +#, python-brace-format +msgid "Remove users from netgroup '${primary_key}'" +msgstr "Вилучити користувачів з мережевої групи «${primary_key}»" + +#, python-brace-format +msgid "Remove users from owners of vault '${primary_key}'" +msgstr "Вилучити користувачів зі списку власників сховища «${primary_key}»" + +#, python-brace-format +msgid "Remove users from role '${primary_key}'" +msgstr "Вилучити користувачів з ролі «${primary_key}»" + +#, python-brace-format +msgid "Remove users from sudo rule '${primary_key}'" +msgstr "Вилучити користувачів з правила sudo «${primary_key}»" + +#, python-brace-format +msgid "Remove users from user group '${primary_key}'" +msgstr "Вилучити користувачів з групи користувачів «${primary_key}»" + +#, python-brace-format +msgid "Remove users managing OTP token '${primary_key}'" +msgstr "Вилучити ключ керування записами користувачів OTP «${primary_key}»" + +msgid "Remove users that can manage members of this group." +msgstr "" +"Вилучити записи користувачів, які можуть керувати учасниками цієї групи." + +msgid "Remove users that can manage members of this hostgroup." +msgstr "" +"Вилучити записи користувачів, які можуть керувати учасниками цієї групи " +"вузлів." + +msgid "Remove users that can manage this token." +msgstr "Вилучити записи користувачів, які можуть керувати цим жетоном." + +msgid "Remove vaults" +msgstr "Вилучити сховища" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "Вилучити псевдоніми із запису вузла «%(value)s»" + +#, python-format +msgid "Removed aliases from stageuser \"%(value)s\"" +msgstr "Вилучено псевдоніми із запису користувача етапу «%(value)s»" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "Вилучити псевдоніми із запису користувача «%(value)s»" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "Вилучено псевдоніми реєстраційного запису служби «%(value)s»" + +#, python-format +msgid "Removed certificate mappings from user \"%(value)s\"" +msgstr "Вилучено прив’язки сертифікатів до запису користувача «%(value)s»" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "Вилучено сертифікати із запису вузла «%(value)s»" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "Вилучено сертифікати із запису idoverrideuser «%(value)s»" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "Вилучено сертифікати із реєстраційного запису служби «%(value)s»" + +#, python-format +msgid "Removed certificates from stageuser \"%(value)s\"" +msgstr "Вилучено сертифікати із запису користувача етапу «%(value)s»" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "Вилучено сертифікати із запису користувача «%(value)s»" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "Вилучено умови з «%(value)s»" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "Вилучити типову (резервну) групу для автоматичної участі «%(value)s»" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "Дані щодо довіреного домену «%(value)s» вилучено" + +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "З правила sudo «%(rule)s» вилучено параметр «%(option)s»" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "Вилучено системні права доступу «%(value)s»" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "Вилучаємо %(servers)s з топології реплікації, будь ласка, зачекайте…" + +#, c-format +msgid "Removing principal %s\n" +msgstr "Вилучення реєстраційного запису %s\n" + +msgid "Rename" +msgstr "Перейменувати" + +msgid "Rename an ACI." +msgstr "Перейменувати запис ACI." + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "Перейменувати об’єкт %(ldap_obj_name)s" + +msgid "Rename the DNS resource record object" +msgstr "Перейменувати об’єкт запису ресурсу DNS" + +msgid "Rename the Group ID override object" +msgstr "Перейменувати об’єкт перевизначення ідентифікатора групи" + +msgid "Rename the ID View object" +msgstr "Перейменувати об’єкт перегляду ідентифікатора" + +msgid "Rename the OTP token object" +msgstr "Перейменувати об’єкт жетона OTP" + +msgid "Rename the RADIUS proxy server object" +msgstr "Перейменувати об’єкт проксі-сервера RADIUS" + +msgid "Rename the User ID override object" +msgstr "Перейменувати об’єкт перевизначення ідентифікатора користувача" + +msgid "Rename the automount key object" +msgstr "Перейменувати об’єкт ключа автоматичного монтування" + +msgid "Rename the group object" +msgstr "Перейменувати об’єкт групи" + +msgid "Rename the permission object" +msgstr "Перейменувати об’єкт права доступу" + +msgid "Rename the privilege object" +msgstr "Перейменувати об’єкт привілеїв" + +msgid "Rename the role object" +msgstr "Перейменувати об’єкт ролі" + +msgid "Rename the stage user object" +msgstr "Перейменувати об’єкт користувача етапу" + +msgid "Rename the user object" +msgstr "Перейменувати об’єкт користувача" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "ACI перейменовано на «%(value)s»" + +msgid "Renewal master for IPA certificate authority" +msgstr "Основний сервер відновлення для центру сертифікації IPA" + +msgid "Replacement" +msgstr "Заміна" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" +"Репліка є активним основним сервером ключів DNSSEC. Вилучення може зашкодити " +"вашій системі DNS. Будь ласка, спочатку вимкніть або замініть основний " +"сервер ключів DNSSEC." + +msgid "Replication agreement enabled" +msgstr "Увімкнено угоду щодо реплікації" + +#, python-format +msgid "Replication agreement for %(hostname)s not found" +msgstr "Не знайдено угоди щодо реплікації для %(hostname)s" + +msgid "Replication configuration" +msgstr "Налаштування реплікації" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "Оновлення реплікації для сегмента: надіслано запит щодо «%(pkey)s»." + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "Топологія реплікації суфікса «%(suffix)s» містить помилки." + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "Топологія реплікації суфікса «%(suffix)s» у порядку." + +msgid "Report PKINIT status on the IPA masters" +msgstr "Звіт щодо стану PKINIT на основних елементах IPA" + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "" +"Надіслати запит щодо повної повторної ініціалізації вузла, щоб отримує дані " +"з іншого вузла." + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "Помилка під час виконання запиту, стан %(status)s: %(reason)s" + +msgid "Request id" +msgstr "Ід. запиту" + +msgid "Request is missing \"method\"" +msgstr "У запиті не вказано метод (\"method\")" + +msgid "Request is missing \"params\"" +msgstr "У запиті не вказано параметри (\"params\")" + +msgid "Request must be a dict" +msgstr "Запит має належати до типу словника (dict)" + +msgid "Request status" +msgstr "Стан запиту" + +msgid "Required" +msgstr "Обов’язкове" + +msgid "Required field" +msgstr "Обов’язкове поле" + +msgid "Requires pre-authentication" +msgstr "Вимагає попереднього розпізнавання" + +msgid "Reset" +msgstr "Скинути" + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "Відновити типові правила квитків Kerberos." + +msgid "Reset OTP" +msgstr "Скинути ОП" + +msgid "Reset One-Time Password" +msgstr "Скинути одноразовий пароль" + +msgid "Reset Password" +msgstr "Скинути пароль" + +msgid "Reset Password and Log in" +msgstr "Скинути пароль і увійти" + +msgid "Reset your password." +msgstr "Скинути ваш пароль." + +msgid "Resolve a host name in DNS." +msgstr "Визначити назву вузла у DNS." + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "Визначити назву вузла у DNS. (Застаріле)" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "" +"Визначати ідентифікатори безпеки користувачів та груп у довірених доменах" + +msgid "Response from CA was not valid JSON" +msgstr "Відповідь від CA не була коректним кодом JSON" + +msgid "Restore" +msgstr "Відновити" + +msgid "Result" +msgstr "Результат" + +msgid "Result of simulation" +msgstr "Результат імітації" + +msgid "Result of the command" +msgstr "Результат виконання команди" + +msgid "Results are truncated, try a more specific search" +msgstr "" +"Список результатів обрізано. Спробуйте точніше визначити критерії пошуку." + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "Результати мають містити лише атрибут основного ключа («%s»)" + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "Результати мають містити лише атрибут основного ключа («anchor»)" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "Результати мають містити лише атрибут основного ключа («сертифікат»)" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "Результати мають містити лише атрибут основного ключа («cn»)" + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "Результати мають містити лише атрибут основного ключа («command»)" + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "" +"Результати мають містити лише атрибут основного ключа («delegation-name»)" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "Результати мають містити лише атрибут основного ключа («domain»)" + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "Результати мають містити лише атрибут основного ключа («group»)" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "Результати мають містити лише атрибут основного ключа («group-name»)" + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "" +"Результати мають містити лише атрибут основного ключа («hostgroup-name»)" + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "Результати мають містити лише атрибут основного ключа («hostname»)" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "Результати мають містити лише атрибут основного ключа («id»)" + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "Результати мають містити лише атрибут основного ключа («location»)" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "Результати мають містити лише атрибут основного ключа («login»)" + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "Результати мають містити лише атрибут основного ключа («map»)" + +msgid "Results should contain primary key attribute only (\"name\")" +msgstr "Результати мають містити лише атрибут основного ключа («name»)" + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "Результати мають містити лише атрибут основного ключа («principal»)" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "Результати мають містити лише атрибут основного ключа («realm»)" + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "Результати мають містити лише атрибут основного ключа («service»)" + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "" +"Результати мають містити лише атрибут основного ключа («suydocmdgroup-name»)" + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "" +"Результати мають містити лише атрибут основного ключа («sudorule-name»)" + +msgid "Retries" +msgstr "Кількість спроб" + +msgid "Retrieve a data from a vault." +msgstr "Отримати дані зі сховища." + +msgid "Retrieve an existing certificate." +msgstr "Отримати вже створений сертифікат." + +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "" +"Отримати і вивести всі атрибути з сервера. Стосується лише виводу команд." + +msgid "Retrieve current keys without changing them" +msgstr "Отримувати поточні ключі без внесення до них змін" + +msgid "Retrieve data from a vault." +msgstr "Отримати дані зі сховища." + +msgid "Retrieve the entitlement certs." +msgstr "Отримати сертифікати іменування." + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "Отримано дані зі сховища «%(value)s»" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "Спроба отримання ланцюжка сертифікації CA зазнала невдачі: %s" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "Спроба отримання стану CA зазнала невдачі, стан %d" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "" +"Спроба отримання даних щодо стану служби сертифікації зазнала невдачі: %s" + +msgid "Retry" +msgstr "Повторити" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "" +"Повторюємо спробу з використанням способу отримання сховища ключів, який " +"використовувався до версії 4.0…\n" + +msgid "Return command defaults" +msgstr "Повернути типові параметри команди" + +msgid "Return to the main page and retry the operation" +msgstr "Повернутися до головної сторінки і повторити спробу" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "" +"Зворотний запис для IP-адреси %(ip)s вже існує у зворотній зоні %(zone)s." + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "" +"Зворотна зона %(name)s потребує точно %(count)d компонентів IP-адрес, надано " +"%(user_count)d" + +msgid "Reverse zone IP network" +msgstr "Мережа IP зворотної зони" + +msgid "Revert" +msgstr "Повернути" + +msgid "Revocation reason" +msgstr "Причина відкликання" + +msgid "Revoke" +msgstr "Відкликати" + +msgid "Revoke a certificate." +msgstr "Відкликати сертифікат." + +msgid "Revoke certificate" +msgstr "Відкликати сертифікат" + +msgid "Revoked" +msgstr "Анульований" + +msgid "Revoked on from" +msgstr "Відкликано з" + +msgid "Revoked on from this date (YYYY-mm-dd)" +msgstr "Відкликано з цієї дати (РРРР-мм-дд)" + +msgid "Revoked on to" +msgstr "Відкликано до" + +msgid "Revoked on to this date (YYYY-mm-dd)" +msgstr "Відкликано до цієї дати (РРРР-мм-дд)" + +msgid "Right node" +msgstr "Правий вузол" + +msgid "Right replication node - an IPA server" +msgstr "Правий вузол реплікації — сервер IPA" + +msgid "Rights" +msgstr "Права" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "" +"Права доступу, які слід надати (read, search, compare, write, add, delete, " +"all)" + +msgid "Role" +msgstr "Роль" + +msgid "Role Settings" +msgstr "Параметри ролей" + +msgid "Role name" +msgstr "Назва ролі" + +msgid "Role status" +msgstr "Стан ролі" + +msgid "Role-Based Access Control" +msgstr "Керування доступом на основі ролей" + +msgid "Roles" +msgstr "Ролі" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "" +"Кореневий домен правила довіри для наявного правила довіри завжди увімкнено" + +msgid "Rule name" +msgstr "Назва правила" + +msgid "Rule status" +msgstr "Стан правила" + +msgid "Rule type" +msgstr "Тип правила" + +msgid "Rule type (allow)" +msgstr "Тип правила (allow)" + +msgid "Rule used to check if a certificate can be used for authentication" +msgstr "" +"Правило, яке використовується для визначення того, чи придатний сертифікат " +"для розпізнавання" + +msgid "Rule used to map the certificate with a user entry" +msgstr "" +"Правило, яке використовується для прив’язування сертифіката до запису " +"користувача" + +msgid "Rules" +msgstr "Правила" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "" +"Правила для перевірки. Якщо не вказано, вважається, що використано --enabled." + +msgid "Run Commands" +msgstr "Виконання команд" + +msgid "Run Test" +msgstr "Запустити тест" + +msgid "Run as a user" +msgstr "Запуск від користувача" + +msgid "Run as any user within a specified group" +msgstr "Запускати від імені будь-якого користувача вказаної групи" + +msgid "Run with the gid of a specified POSIX group" +msgstr "Запускати з ідентифікатором вказаної групи POSIX" + +msgid "RunAs External Group" +msgstr "Зовнішня група для RunAs" + +msgid "RunAs External User" +msgstr "Зовнішній користувач для RunAs" + +msgid "RunAs Group category" +msgstr "Категорія запуску від імені групи" + +msgid "RunAs Group category the rule applies to" +msgstr "Категорія запуску від імені групи, до якої застосовується правило" + +msgid "RunAs Groups" +msgstr "Групи запуску від імені" + +msgid "RunAs User category" +msgstr "Категорія запуску від імені користувачів" + +msgid "RunAs User category the rule applies to" +msgstr "" +"Категорія запуску від імені користувачів, до якої застосовується правило" + +msgid "RunAs Users" +msgstr "Користувачі запуску від імені" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "Назва групи «%(name)s» є неприйнятною для RunAsGroup" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "Назва групи «%(name)s» є неприйнятною для RunAsUser" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "Не можна вказувати «%(name)s» як ім’я користувача у записі RunAsUser" + +msgid "SASL Bind failed\n" +msgstr "Помилка прив'язки SASL\n" + +msgid "SELinux Options" +msgstr "Параметри SELinux" + +msgid "SELinux User" +msgstr "Користувач SELinux" + +msgid "SELinux User Map" +msgstr "Карта користувачів SELinux" + +msgid "SELinux User Map rule" +msgstr "Правило карти користувачів SELinux" + +msgid "SELinux User Map rules" +msgstr "Правила карти користувачів SELinux" + +msgid "SELinux User Maps" +msgstr "Карти користувачів SELinux" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "" +"Запису користувача SELinux %(user)s не виявлено у порядковому списку (у " +"налаштуваннях)" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "Користувач SELinux «%(user)s» є некоректним: %(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "" +"Типового користувача типової карти користувачів SELinux немає у порядковому " +"списку" + +msgid "SELinux user map list not found in configuration" +msgstr "Списку карт користувачів SELinux у налаштуваннях не виявлено" + +msgid "SELinux user map order" +msgstr "Порядок карт користувачів SELinux" + +msgid "SHA1 Fingerprint" +msgstr "Відбиток SHA1" + +msgid "SHA256 Fingerprint" +msgstr "Відбиток SHA256" + +msgid "SID" +msgstr "SID" + +msgid "SID blacklist incoming" +msgstr "Чорний список вхідних SID" + +msgid "SID blacklist outgoing" +msgstr "Чорний список вихідних SID" + +msgid "SID blocklist incoming" +msgstr "Список блокування вхідних SID" + +msgid "SID blocklist outgoing" +msgstr "Список блокування вихідних SID" + +msgid "SID blocklists" +msgstr "Списки блокування SID" + +msgid "SID does not match any trusted domain" +msgstr "SID не відповідає жодному з довірених доменів" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "SID не збігається точно з будь-яким з SID довірених доменів" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "" +"Не вдалося знайти SID для вказаного довіреного домену. Будь ласка, вкажіть " +"SID безпосередньо за допомогою параметра dom-sid." + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "SID не розпізнано як чинний SID для довіреного домену" + +msgid "SID is not valid" +msgstr "SID не є чинним" + +msgid "SIG Algorithm" +msgstr "Алгоритм SIG" + +msgid "SIG Key Tag" +msgstr "Мітка ключа SIG" + +msgid "SIG Labels" +msgstr "Мітки SIG" + +msgid "SIG Original TTL" +msgstr "Початковий TTL SIG" + +msgid "SIG Signature" +msgstr "Підпис SIG" + +msgid "SIG Signature Expiration" +msgstr "Строк дії підпису SIG" + +msgid "SIG Signature Inception" +msgstr "Початок підпису SIG" + +msgid "SIG Signer's Name" +msgstr "Ім’я підписника SIG" + +msgid "SIG Type Covered" +msgstr "Об’єднувані типи SIG" + +msgid "SIG record" +msgstr "Запис SIG" + +msgid "SMB Home Directory" +msgstr "Домашній каталог SMB" + +msgid "SMB Home Directory Drive" +msgstr "Диск домашнього каталогу SMB" + +msgid "SMB logon script path" +msgstr "Шлях до скрипту входу до SMB" + +msgid "SMB profile path" +msgstr "Шлях до профілю SMB" + +msgid "SMB service NetBIOS name" +msgstr "Назва NetBIOS служби SMB" + +msgid "SOA class" +msgstr "Клас SOA" + +msgid "SOA expire" +msgstr "Застарівання SOA" + +msgid "SOA minimum" +msgstr "Мінімальний SOA" + +msgid "SOA mname (authoritative server) override" +msgstr "Перевизначити mname SOA (довірений сервер)" + +msgid "SOA mname override" +msgstr "Перевизначення mname SOA" + +msgid "SOA record class" +msgstr "Клас записів SOA" + +msgid "SOA record expire time" +msgstr "Час завершення строку дії запису SOA" + +msgid "SOA record refresh time" +msgstr "Час оновлення запису SOA" + +msgid "SOA record retry time" +msgstr "Проміжок між повторними спробами для запису SOA" + +msgid "SOA record serial number" +msgstr "Серійний номер запису SOA" + +msgid "SOA record time to live" +msgstr "Строк дії запису SOA" + +msgid "SOA refresh" +msgstr "Освіження SOA" + +msgid "SOA retry" +msgstr "Повторення спроби SOA" + +msgid "SOA serial" +msgstr "Серійний номер SOA" + +msgid "SOA time to live" +msgstr "Строк дії SOA" + +msgid "SPF record" +msgstr "Запис SPF" + +msgid "SRV Port" +msgstr "Порт SRV" + +msgid "SRV Priority" +msgstr "Пріоритетність SRV" + +msgid "SRV Target" +msgstr "Ціль SRV" + +msgid "SRV Weight" +msgstr "Вага SRV" + +msgid "SRV record" +msgstr "Запис SRV" + +msgid "SSH public key" +msgstr "Відкритий ключ SSH" + +msgid "SSH public key fingerprint" +msgstr "Відбиток відкритого ключа SSH" + +msgid "SSH public key:" +msgstr "Відкритий ключ SSH:" + +msgid "SSH public keys" +msgstr "Відкриті ключі SSH" + +msgid "SSHFP Algorithm" +msgstr "Алгоритм SSHFP" + +msgid "SSHFP Fingerprint" +msgstr "Відбиток SSHFP" + +msgid "SSHFP Fingerprint Type" +msgstr "Тип відбитка SSHFP" + +msgid "SSHFP record" +msgstr "Запис SSHFP" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "SSSD не вдалося визначити за об’єктом коректний SID" + +msgid "Salt" +msgstr "Сіль" + +#, python-format +msgid "Same as --%s" +msgstr "Те саме, що і --%s" + +msgid "Save" +msgstr "Зберегти" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "" +"Схема не потребує оновлення (Відбиток «%(fingerprint)s», TTL %(ttl)s с)" + +msgid "Scope" +msgstr "Область" + +msgid "Search" +msgstr "Пошук" + +msgid "Search Options" +msgstr "Параметри пошуку" + +msgid "Search command parameters." +msgstr "Шукати параметри команди." + +msgid "Search domains of the trust" +msgstr "Шукати довірені домени" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "Шукати %(searched_object)s у цих %(relationship)s %(ldap_object)s." + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "Шукати %(searched_object)s не у цих %(relationship)s %(ldap_object)s." + +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "" +"Спроба пошуку %1$s у rootdse завершилася невдало з повідомленням про помилку " +"%2$d\n" + +msgid "Search for CA ACLs." +msgstr "Шукати CA ACL." + +msgid "Search for CAs." +msgstr "Шукати CA." + +msgid "Search for Certificate Identity Mapping Rules." +msgstr "Шукати правила прив’язування сертифікатів до профілів." + +msgid "Search for Certificate Profiles." +msgstr "Шукати профілі сертифікатів." + +msgid "Search for Class of Service entry" +msgstr "Шукати запис класу служби" + +msgid "Search for DNS forward zones." +msgstr "Пошук зон переспрямовування DNS." + +msgid "Search for DNS resources." +msgstr "Шукати ресурси DNS." + +msgid "Search for DNS servers." +msgstr "Шукати сервери DNS." + +msgid "Search for DNS zones (SOA records)." +msgstr "Пошук зон DNS (записів SOA)." + +msgid "Search for HBAC rules." +msgstr "Шукати правила HBAC." + +msgid "Search for HBAC services." +msgstr "Шукати служби HBAC." + +msgid "Search for IPA locations." +msgstr "Шукати місця IPA." + +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "Спроба пошуку namingContext IPA завершилася помилкою %d\n" + +msgid "Search for IPA servers." +msgstr "Шукати сервери IPA." + +msgid "Search for IPA services." +msgstr "Знайти служби IPA." + +msgid "Search for Identity Provider servers." +msgstr "Шукати сервери надавачів профілів." + +msgid "Search for OTP token." +msgstr "Шукати жетон OTP." + +msgid "Search for RADIUS proxy servers." +msgstr "Шукати проксі-сервери RADIUS." + +msgid "Search for SELinux User Maps." +msgstr "Шукати карти користувачів SELinux." + +msgid "Search for Sudo Command Groups." +msgstr "Шукати групи команд sudo." + +msgid "Search for Sudo Commands." +msgstr "Знайти команди sudo." + +msgid "Search for Sudo Rule." +msgstr "Знайти правило sudo." + +msgid "Search for a netgroup." +msgstr "Шукати мережеву групу." + +msgid "Search for a self-service permission." +msgstr "Шукати права доступу автослужби." + +msgid "Search for an Group ID override." +msgstr "Шукати перевизначення ідентифікаторів групи." + +msgid "Search for an HBAC service group." +msgstr "Шукати групу служб HBAC." + +msgid "Search for an ID View." +msgstr "Шукати перегляд ідентифікаторів." + +msgid "Search for an ID override." +msgstr "Шукати перевизначення ідентифікатора." + +msgid "Search for an User ID override." +msgstr "Шукати перевизначення ідентифікатора користувача." + +msgid "Search for an automount key." +msgstr "Виконати пошук ключа автоматичного монтування." + +msgid "Search for an automount location." +msgstr "Шукати запис автоматичного монтування." + +msgid "Search for an automount map." +msgstr "Виконати пошук карти автоматичного монтування." + +msgid "Search for automember rules." +msgstr "Шукати правила автоматичної участі." + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "Шукати сертифікати із вказаними %s власника." + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "Шукати сертифікати, власником яких не є %s." + +msgid "Search for classes." +msgstr "Шукати класи." + +msgid "Search for command outputs." +msgstr "Шукати за даними, які виводить команда." + +msgid "Search for commands." +msgstr "Шукати команди." + +msgid "Search for delegations." +msgstr "Пошук уповноважень." + +msgid "Search for entitlement accounts." +msgstr "Шукати облікові записи іменування." + +msgid "Search for existing certificates." +msgstr "Шукати наявні сертифікати." + +msgid "Search for forward zones only" +msgstr "Шукати лише прямі зони" + +msgid "Search for group password policies." +msgstr "Знайти групу правил для паролів." + +msgid "Search for groups with these member groups." +msgstr "Шукати групи із вказаними групами-учасниками." + +msgid "Search for groups with these member of HBAC rules." +msgstr "Шукати групи із цими правилами HBAC участі." + +msgid "Search for groups with these member of groups." +msgstr "Шукати групи із вказаними групами участі." + +msgid "Search for groups with these member of netgroups." +msgstr "Шукати групи із вказаними мережевими групами участі." + +msgid "Search for groups with these member of roles." +msgstr "Шукати групи із вказаними ролями участі." + +msgid "Search for groups with these member of sudo rules." +msgstr "Шукати групи із цими правилами sudo участі." + +msgid "Search for groups with these member users." +msgstr "Шукати групи із вказаними користувачами-учасниками." + +msgid "Search for groups without these member groups." +msgstr "Шукати групи без вказаних груп-учасників." + +msgid "Search for groups without these member of HBAC rules." +msgstr "Шукати групи без цих правил HBAC участі." + +msgid "Search for groups without these member of groups." +msgstr "Шукати групи без вказаних груп участі." + +msgid "Search for groups without these member of netgroups." +msgstr "Шукати групи без вказаних мережевих груп участі." + +msgid "Search for groups without these member of roles." +msgstr "Шукати групи без вказаних ролей участі." + +msgid "Search for groups without these member of sudo rules." +msgstr "Шукати групи без цих правил sudo участі." + +msgid "Search for groups without these member users." +msgstr "Шукати групи без вказаних користувачів-учасників." + +msgid "Search for groups." +msgstr "Шукати групи." + +msgid "Search for help topics." +msgstr "Шукати у темах довідки." + +msgid "Search for host groups with these member host groups." +msgstr "Шукати групи вузлів із цими групами вузлів-учасників." + +msgid "Search for host groups with these member hosts." +msgstr "Шукати групи вузлів із цими вузлами-учасниками." + +msgid "Search for host groups with these member of HBAC rules." +msgstr "Шукати групи вузлів із цими правилами HBAC участі." + +msgid "Search for host groups with these member of host groups." +msgstr "Шукати групи вузлів із цими групами вузлів участі." + +msgid "Search for host groups with these member of netgroups." +msgstr "Шукати групи вузлів із вказаними мережевими групами участі." + +msgid "Search for host groups with these member of sudo rules." +msgstr "Шукати групи вузлів із цим учасником правил sudo." + +msgid "Search for host groups without these member host groups." +msgstr "Шукати групи вузлів без цих груп вузлів-учасників." + +msgid "Search for host groups without these member hosts." +msgstr "Шукати групи вузлів без цих вузлів-учасників." + +msgid "Search for host groups without these member of HBAC rules." +msgstr "Шукати групи вузлів без цього учасника правил HBAC." + +msgid "Search for host groups without these member of host groups." +msgstr "Шукати групи вузлів без цих груп вузлів участі." + +msgid "Search for host groups without these member of netgroups." +msgstr "Шукати групи вузлів без вказаних мережевих груп учасників." + +msgid "Search for host groups without these member of sudo rules." +msgstr "Шукати групи вузлів без вказаних учасників правил sudo." + +msgid "Search for hostgroups." +msgstr "Шукати групи вузлів." + +msgid "Search for hosts with these enrolled by users." +msgstr "Шукати вузли з цими користувачами, якими надано ролі." + +msgid "Search for hosts with these managed by hosts." +msgstr "Шукати вузли із цими керованими вузлами." + +msgid "Search for hosts with these managing hosts." +msgstr "Шукати вузли із цими керівними вузлами." + +msgid "Search for hosts with these member of HBAC rules." +msgstr "Шукати вузли із цими правилами HBAC участі." + +msgid "Search for hosts with these member of host groups." +msgstr "Шукати вузли із вказаними групами вузлів участі." + +msgid "Search for hosts with these member of netgroups." +msgstr "Шукати вузли із вказаними мережевими групами участі." + +msgid "Search for hosts with these member of roles." +msgstr "Шукати вузли із вказаними ролями участі." + +msgid "Search for hosts with these member of sudo rules." +msgstr "Шукати вузли із цими правилами sudo участі." + +msgid "Search for hosts without these enrolled by users." +msgstr "Шукати вузли без цих користувачів, якими надано ролі." + +msgid "Search for hosts without these managed by hosts." +msgstr "Шукати вузли без цих керованих вузлів." + +msgid "Search for hosts without these managing hosts." +msgstr "Шукати вузли без цих керівних вузлів." + +msgid "Search for hosts without these member of HBAC rules." +msgstr "Шукати вузли без цих правил HBAC участі." + +msgid "Search for hosts without these member of host groups." +msgstr "Шукати вузли без вказаних груп вузлів участі." + +msgid "Search for hosts without these member of netgroups." +msgstr "Шукати вузли без вказаних мережевих груп участі." + +msgid "Search for hosts without these member of roles." +msgstr "Шукати вузли без вказаних ролей участі." + +msgid "Search for hosts without these member of sudo rules." +msgstr "Шукати вузли без цих правил sudo участі." + +msgid "Search for hosts." +msgstr "Шукати вузли." + +msgid "Search for netgroups with these member groups." +msgstr "Шукати мережеві групи із вказаними групами-учасниками." + +msgid "Search for netgroups with these member host groups." +msgstr "Шукати мережеві групи із вказаними групами вузлів-учасниками." + +msgid "Search for netgroups with these member hosts." +msgstr "Шукати мережеві групи з цими вузлами-учасниками." + +msgid "Search for netgroups with these member netgroups." +msgstr "Шукати мережеві групи з цими мережевими групами-учасниками." + +msgid "Search for netgroups with these member of netgroups." +msgstr "Шукати мережеві групи з цими мережевими групами участі." + +msgid "Search for netgroups with these member users." +msgstr "Шукати мережеві групи з цими користувачами-учасниками." + +msgid "Search for netgroups without these member groups." +msgstr "Шукати мережеві групи без цих груп-учасників." + +msgid "Search for netgroups without these member host groups." +msgstr "Шукати мережеві групи без цих груп вузлів-учасників." + +msgid "Search for netgroups without these member hosts." +msgstr "Шукати мережеві групи без цих вузлів-учасників." + +msgid "Search for netgroups without these member netgroups." +msgstr "Шукати мережеві групи без цих мережевих груп-учасників." + +msgid "Search for netgroups without these member of netgroups." +msgstr "Шукати мережеві групи без цих мережевих груп участі." + +msgid "Search for netgroups without these member users." +msgstr "Шукати мережеві групи без цих користувачів-учасників." + +msgid "Search for permissions." +msgstr "Знайти права доступу." + +msgid "Search for privileges." +msgstr "Знайти привілеї." + +msgid "Search for ranges." +msgstr "Шукати діапазони." + +msgid "Search for roles." +msgstr "Знайти ролі." + +msgid "Search for servers with these managed suffixes." +msgstr "Шукати сервери із цими керованими суфіксами." + +msgid "Search for servers without these managed suffixes." +msgstr "Шукати сервери без цих керованих суфіксів." + +msgid "Search for service delegation target." +msgstr "Шукати ціль делегування служб." + +msgid "Search for service delegations rule." +msgstr "Шукати правило делегування служб." + +msgid "Search for services with these managed by hosts." +msgstr "Шукати служби із цими керованими вузлами." + +msgid "Search for services without these managed by hosts." +msgstr "Шукати служби без цих керованих вузлів." + +msgid "Search for stage users with these member of HBAC rules." +msgstr "Шукати користувачів етапу із цими правилами HBAC участі." + +msgid "Search for stage users with these member of groups." +msgstr "Шукати користувачів етапу із вказаними групами участі." + +msgid "Search for stage users with these member of netgroups." +msgstr "Шукати користувачів етапу із вказаними мережевими групами участі." + +msgid "Search for stage users with these member of roles." +msgstr "Шукати користувачів етапу із вказаними ролями участі." + +msgid "Search for stage users with these member of sudo rules." +msgstr "Шукати користувачів етапу із цими правилами sudo участі." + +msgid "Search for stage users without these member of HBAC rules." +msgstr "Шукати користувачів етапу без цих правил HBAC участі." + +msgid "Search for stage users without these member of groups." +msgstr "Шукати користувачів етапу без вказаних груп участі." + +msgid "Search for stage users without these member of netgroups." +msgstr "Шукати користувачів етапу без вказаних мережевих груп участі." + +msgid "Search for stage users without these member of roles." +msgstr "Шукати користувачів етапу без вказаних ролей участі." + +msgid "Search for stage users without these member of sudo rules." +msgstr "Шукати користувачів етапу без цих правил sudo участі." + +msgid "Search for stage users." +msgstr "Шукати записи користувачів етапу." + +msgid "Search for subordinate id." +msgstr "Шукати за підлеглим ідентифікатором." + +msgid "Search for topology segments." +msgstr "Шукати сегменти топології." + +msgid "Search for topology suffices." +msgstr "Шукати суфікси топології." + +msgid "Search for topology suffixes." +msgstr "Шукати суфікси топології." + +msgid "Search for trusts." +msgstr "Шукати записи довіри." + +msgid "Search for users with these member of HBAC rules." +msgstr "Шукати користувачів із цими правилами HBAC участі." + +msgid "Search for users with these member of groups." +msgstr "Шукати користувачів з вказаними групами участі." + +msgid "Search for users with these member of netgroups." +msgstr "Шукати користувачів із вказаними мережевими групами участі." + +msgid "Search for users with these member of roles." +msgstr "Шукати користувачів із вказаними ролями участі." + +msgid "Search for users with these member of sudo rules." +msgstr "Шукати користувачів із цими правилами sudo участі." + +msgid "Search for users without these member of HBAC rules." +msgstr "Шукати користувачів без цих правил HBAC участі." + +msgid "Search for users without these member of groups." +msgstr "Шукати користувачів без вказаних груп участі." + +msgid "Search for users without these member of netgroups." +msgstr "Шукати користувачів без вказаних мережевих груп участі." + +msgid "Search for users without these member of roles." +msgstr "Шукати користувачів без вказаних ролей участі." + +msgid "Search for users without these member of sudo rules." +msgstr "Шукати користувачів без цих правил sudo участі." + +msgid "Search for users." +msgstr "Шукати користувачів." + +msgid "Search for vaults." +msgstr "Шукати сховища." + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "Результат пошуку обрізано: %(reason)s" + +msgid "Search scope" +msgstr "Область пошуку" + +msgid "Search size limit" +msgstr "Обмеження розміру пошуку" + +msgid "Search time limit" +msgstr "Обмеження часу пошуку" + +msgid "Second Code" +msgstr "Другий код" + +msgid "Second OTP" +msgstr "Другий OTP" + +msgid "Secondary RID base" +msgstr "Вторинна основа RID" + +msgid "Seconds Latitude" +msgstr "Секунди широти" + +msgid "Seconds Longitude" +msgstr "Секунди довготи" + +msgid "Secret" +msgstr "Ключ" + +msgid "" +"Secrets can be added/retrieved to vault only by using vault-archive and " +"vault-retrieve from CLI." +msgstr "" +"Реєстраційні дані можна додавати до сховища або отримувати з нього лише за " +"допомогою інструментів командного рядка vault-archive і vault-retrieve." + +msgid "Security Identifier" +msgstr "Ідентифікатор безпеки" + +msgid "Security Identifiers (SIDs)" +msgstr "Ідентифікатори безпеки (SID)" + +msgid "Segment details" +msgstr "Подробиці сегмента" + +msgid "Segment name" +msgstr "Назва сегмента" + +msgid "Select All" +msgstr "Вибрати все" + +msgid "Select entries to be removed." +msgstr "Виберіть записи, які слід вилучити." + +msgid "Selector" +msgstr "Селектор" + +msgid "Self" +msgstr "Self" + +msgid "Self Service Permission" +msgstr "Права доступу автослужби" + +msgid "Self Service Permissions" +msgstr "Права доступу до самообслуговування" + +msgid "Self-service name" +msgstr "Назва самообслуговування" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "" +"Семантику %(label)s було змінено. %(current_behavior)s\n" +"%(hint)s" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "" +"Список відокремлених крапкою з комою записів IP-адрес або мереж, яким надано " +"доступ до надсилання запитів" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "" +"Список відокремлених крапкою з комою записів IP-адрес або мереж, яким надано " +"доступ до перенесення зони" + +msgid "Sensitive" +msgstr "З врахуванням" + +msgid "Serial" +msgstr "Серійний номер" + +msgid "Serial Number" +msgstr "Серійний номер" + +msgid "Serial Number (hex)" +msgstr "Серійний номер (шістнадцятковий)" + +msgid "Serial number" +msgstr "Серійний номер" msgid "Serial number (hex)" msgstr "Серійний номер (шістнадцятковий)" -msgid "Request status" -msgstr "Стан запиту" +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "Серійний десятковий номер або шістнадцятковий номер з префіксом 0x" + +msgid "Server" +msgstr "Сервер" + +#, python-format +msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" +msgstr "Сервер «%(srv)s» має %(n)d узгоджень із такими серверами:" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "Сервер %(srv)s не може встановити зв’язок із серверами: %(replicas)s" + +msgid "Server Name" +msgstr "Назва сервера" + +msgid "Server Options" +msgstr "Параметри сервера" + +msgid "Server Role" +msgstr "Роль сервера" + +msgid "Server Roles" +msgstr "Ролі сервера" + +msgid "Server does not support domain level functionality" +msgstr "" +"На сервері не передбачено підтримки функціональних можливостей рівня домену" + +msgid "Server has already been deleted" +msgstr "Запис сервера вже вилучено" + +#, python-format +msgid "Server has no information about domain '%(domain)s'" +msgstr "На сервері немає інформації щодо домену «%(domain)s»" + +msgid "Server location" +msgstr "Місце сервера" + +msgid "Server name" +msgstr "Назва сервера" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "Не надано назви сервера, сервер недоступний\n" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "Вилучення сервера перервано: %(reason)s." + +msgid "Server state" +msgstr "Стан сервера" + +msgid "Server will check DNS forwarder(s)." +msgstr "Сервер перевірятиме засоби переспрямовування DNS." + +msgid "Servers" +msgstr "Сервери" + +msgid "Servers details:" +msgstr "Параметри сервера:" + +msgid "Servers in location" +msgstr "Сервери у місці" + +msgid "Servers that belongs to the IPA location" +msgstr "Сервери, що належать до запису місця IPA" + +msgid "Service" +msgstr "Служба" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "" +"Для застосування змін у налаштуваннях службу %(service)s на сервері IPA " +"%(server)s слід перезапустити." + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "У базі даних Kerberos не виявлено служби «%(service)s»" + +msgid "Service Certificate" +msgstr "Сертифікат служби" + +msgid "Service Groups" +msgstr "Групи служб" + +msgid "Service Options" +msgstr "Параметри служби" + +msgid "Service Settings" +msgstr "Параметри служби" + +msgid "Service Vaults" +msgstr "Сховища служб" + +msgid "Service category" +msgstr "Категорія служб" + +msgid "Service category the ACL applies to" +msgstr "Категорія служб, до якої застосовується ACL" + +msgid "Service category the rule applies to" +msgstr "Категорія служб, до якої застосовується правило" + +msgid "Service delegation rule" +msgstr "Правило делегування служб" + +msgid "Service delegation rules" +msgstr "Правила делегування служб" + +msgid "Service delegation target" +msgstr "Ціль делегування служб" + +msgid "Service delegation targets" +msgstr "Призначення делегування служб" + +msgid "Service group name" +msgstr "Назва групи служб" + +msgid "Service name" +msgstr "Назва служби" + +msgid "Service name of the service vault" +msgstr "Назва служби сховища служби" + +msgid "Service principal" +msgstr "Реєстраційний запис служби" + +msgid "Service principal alias" +msgstr "Альтернативна назва реєстраційного запису служби" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "" +"Реєстраційний запис служби для цього сертифіката (наприклад HTTP/test." +"example.com)" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "" +"Реєстраційний запис служби вказано у формі, відмінній від: служба/повна " +"назва вузла: %(reason)s" + +msgid "Service principal is required" +msgstr "Слід вказати реєстраційний запис служби" + +msgid "Service relative weight" +msgstr "Відносна вага служб" + +msgid "Service unprovisioned" +msgstr "Службу не передбачено" + +msgid "Service weight" +msgstr "Вага служб" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "" +"Параметри служби, спільного використання та користувача не можна вказувати " +"одночасно" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "" +"Параметри служби, спільного використання та користувача не можна вказувати " +"одночасно" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "" +"Параметри служби, спільного використання та користувача не можна вказувати " +"одночасно" + +msgid "Services" +msgstr "Служби" + +msgid "Session error" +msgstr "Помилка сеансу" + +msgid "Session key wrapped with transport certificate" +msgstr "Ключ сеансу, пов’язаний із сертифікатом передавання" + +msgid "Session timeout" +msgstr "Час очікування сеансу" + +msgid "Set" +msgstr "Встановити" + +msgid "Set Domain Level" +msgstr "Встановити рівень домену" + +msgid "Set OTP" +msgstr "Одноразовий пароль" + +msgid "Set One-Time Password" +msgstr "Встановити одноразовий пароль" + +msgid "Set SSH key" +msgstr "Встановити ключ SSH" + +msgid "Set a user's password." +msgstr "Встановити пароль користувача." + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" +"Встановити атрибут для пари назва/значення. Формат: атрибут=значення.\n" +"Для атрибутів з багатьма значенням команда замінює вже вказані значення." + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "Встановити типову (резервну) групу для невідповідних записів." + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "Встановити типову (резервну) групу для автоматичної участі «%(value)s»" + +msgid "Set enabled/hidden state of a server." +msgstr "Встановити стан увімкнено/приховано для сервера." + +msgid "Set public key" +msgstr "Встановити відкритий ключ" + +msgid "Settings" +msgstr "Параметри" + +msgid "Setup SID configuration" +msgstr "Вказати налаштування SID" + +msgid "Shared" +msgstr "Спільне" + +msgid "Shared Vaults" +msgstr "Спільні сховища" + +msgid "Shared secret for the trust" +msgstr "Оприлюднений ключ для довіри" + +msgid "Shared vault" +msgstr "Сховище спільного використання" + +msgid "Show" +msgstr "Показати" + +msgid "Show IPA server." +msgstr "Показати сервер IPA." + +msgid "Show QR code" +msgstr "Показати QR-код" + +msgid "Show Results" +msgstr "Показати результати" + +msgid "Show all loaded plugins." +msgstr "Показати список завантажених додатків." + +msgid "Show configuration uri" +msgstr "Показати адресу налаштувань" + +msgid "Show details" +msgstr "Показати подробиці" + +msgid "Show environment variables." +msgstr "Показати змінні середовища." + +msgid "Show global trust configuration." +msgstr "Показати налаштування довіри на загальному рівні." + +msgid "Show managed suffix." +msgstr "Показати керований суфікс." + +msgid "Show role status on a server" +msgstr "Показати стан ролі на сервері" + +msgid "Show the current Certificate Identity Mapping configuration." +msgstr "Показати поточні налаштування прив’язки сертифікатів до профілів." + +msgid "Show the current OTP configuration." +msgstr "Показати поточні налаштування OTP." + +msgid "Show the current configuration." +msgstr "Показати поточні налаштування." + +msgid "Show the current global DNS configuration." +msgstr "Показати поточні загальні налаштування DNS." + +msgid "Show the list of permitted encryption types and exit" +msgstr "Показати список дозволених типів шифрування і завершити роботу" + +msgid "Show vault configuration." +msgstr "Показати налаштування сховища." + +msgid "Show/Set key" +msgstr "Показати або встановити ключ" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "Показано записи від ${start} до ${end} з ${total} записів." + +msgid "Signature" +msgstr "Підпис" + +msgid "Signature Expiration" +msgstr "Строк дії підпису" + +msgid "Signature Inception" +msgstr "Початок підпису" + +msgid "Signer's Name" +msgstr "Ім’я підписника" + +msgid "Simple bind failed\n" +msgstr "Невдала спроба простого прив’язування\n" + +msgid "Simulate use of Host-based access controls" +msgstr "Імітувати використання керування доступом на основі вузлів" + +#, python-brace-format +msgid "" +"Since IPA does not manage DNS records, ensure DNS is configured to resolve " +"'{domain}' domain from IPA hosts and back." +msgstr "" +"Оскільки IPA не керує записами DNS, слід налаштувати DNS так, щоб система " +"визначала адресу домену «{domain}» за даними щодо вузлів IPA, і навпаки." + +msgid "Size" +msgstr "Розмір" + +msgid "Size Limit" +msgstr "Обмеження розміру" + +#, python-format +msgid "" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +msgstr "" +"Об’єм даних перевищує обмеження. Поточне обмеження об’єму сховища — " +"%(limit)d Б" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "" +"Розмір діапазону ідентифікаторів, зарезервованого для довіреного домену" + +msgid "Skip DNS check" +msgstr "Пропустити перевірку DNS" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "" +"Пропустити перевірку того, чи вилучено останній основний сервер CA або " +"сервер DNS" + +msgid "Skip host check" +msgstr "Пропустити перевірку вузла" + +msgid "Skip overlap check" +msgstr "Пропустити перевірку перекриття" + +#, python-format +msgid "Skipped %(key)s" +msgstr "Пропущено %(key)s" + +#, python-format +msgid "Skipped %(map)s" +msgstr "Пропущено %(map)s" + +msgid "Some entries were not deleted" +msgstr "Деякі з записів не вилучено" + +msgid "Some operations failed." +msgstr "Деякі з дій не вдалося виконати." + +msgid "Source Host Groups" +msgstr "Групи вузлів-джерел" + +msgid "Source Hosts" +msgstr "Вузли-джерела" + +msgid "Source host" +msgstr "Вузол джерела" + +msgid "Source host category" +msgstr "Категорія вузлів-джерел" + +msgid "Source host category the rule applies to" +msgstr "Категорія вузлів-джерел, якої має стосуватися правило" + +msgid "Specified CAs" +msgstr "Вказані CA" + +msgid "Specified Commands and Groups" +msgstr "Вказані команди і групи" + +msgid "Specified Groups" +msgstr "Вказані групи" + +msgid "Specified Hosts and Groups" +msgstr "Вказані вузли і групи" + +msgid "Specified Profiles" +msgstr "Вказані профілі" + +msgid "Specified Services and Groups" +msgstr "Вказані служби і групи" + +msgid "Specified Users and Groups" +msgstr "Вказані користувачі і групи" + +msgid "Specified trusted domain name could not be found." +msgstr "Не вдалося знайти назву вказаного довіреного домену." + +msgid "Specifies where to store keytab information." +msgstr "Визначає, де слід зберігати дані таблиці ключів." + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "Вкажіть зовнішній ${entity}" + +msgid "Split DNS record to parts" +msgstr "Поділити запис DNS на частини" + +msgid "Stage" +msgstr "Етап" + +msgid "Stage User" +msgstr "Користувач етапу" + +msgid "Stage Users" +msgstr "Користувачі етапу" + +#, python-format +msgid "Stage user %s activated" +msgstr "Активовано користувача етапу %s" + +msgid "Stage users" +msgstr "Користувачі етапу" + +#, python-format +msgid "Staged user account \"%(value)s\"" +msgstr "Обліковий запис користувача етапу «%(value)s»" + +msgid "Standard" +msgstr "Стандартне" + +msgid "Standard Record Types" +msgstr "Стандартні типи записів" + +msgid "Start value for subordinate group ID (subgid) range" +msgstr "Початкове значення діапазону підлеглих ідентифікаторів групи (subgid)" + +msgid "Start value for subordinate user ID (subuid) range" +msgstr "" +"Початкове значення діапазону підлеглих ідентифікаторів користувача (subuid)" + +msgid "State" +msgstr "Стан" + +msgid "State/Province" +msgstr "Область/провінція" + +msgid "Status" +msgstr "Стан" + +msgid "Status of the certificate" +msgstr "Стан сертифіката" + +msgid "Status of the role" +msgstr "Стан ролі" + +msgid "Stop already started refresh of chosen node(s)" +msgstr "Зупинити вже почате оновлення вибраних вузлів" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "Зупиняємо реплікацію для сегмента: надіслано запит щодо «%(pkey)s»." + +msgid "Store and provide schema for commands and topics" +msgstr "Збереження і надання схеми для команд і тем" + +msgid "Store issued certificates" +msgstr "Зберігати видані сертифікати" + +msgid "Street address" +msgstr "Вулиця і будинок" + +msgid "Structured" +msgstr "Структурована" + +msgid "SubGID range size" +msgstr "Розмір діапазону SubGID" + +msgid "SubGID range start" +msgstr "Початок діапазону SubGID" + +msgid "SubUID match" +msgstr "Відповідність за SubUID" + +msgid "SubUID range size" +msgstr "Розмір діапазону SubUID" + +msgid "SubUID range start" +msgstr "Початок діапазону SubUID" + +msgid "Subject" +msgstr "Об’єкт" + +msgid "Subject DN" +msgstr "DN призначення" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "DN призначення вже використано CA «%s»" + +msgid "Subject DNS name" +msgstr "Назва DNS призначення" + +msgid "Subject Distinguished Name" +msgstr "Унікальна назва призначення" + +msgid "Subject EDI Party name" +msgstr "Назва EDI Party призначення" + +msgid "Subject IP Address" +msgstr "IP-адреса призначення" + +msgid "Subject Kerberos principal name" +msgstr "Назва реєстраційного запису Kerberos призначення" + +msgid "Subject OID" +msgstr "OID призначення" + +msgid "Subject Other Name" +msgstr "Інша назва призначення" + +msgid "Subject UPN" +msgstr "UPN призначення" + +msgid "Subject URI" +msgstr "Адреса призначення" + +msgid "Subject X.400 address" +msgstr "Адреса X.400 призначення" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "Використання типу альтернативної назви об’єкта %s заборонено" + +msgid "Subject directory name" +msgstr "Назва каталогу призначення" + +msgid "Subject email address" +msgstr "Адреса електронної пошти призначення" + +msgid "Subject of the certificate" +msgstr "Призначення сертифіката" + +msgid "Submit a certificate signing request." +msgstr "Надіслати запит щодо підписування сертифіката." + +msgid "Subordinate ID Statistics" +msgstr "Статистика щодо підлеглих ідентифікаторів" + +msgid "Subordinate IDs" +msgstr "Підлеглі ідентифікатори" + +msgid "Subordinate group ID count" +msgstr "Лічильник ідентифікаторів підлеглих груп" + +msgid "Subordinate id" +msgstr "Підлеглий ідентифікатор" + +msgid "Subordinate id description" +msgstr "Опис підлеглого ідентифікатора" + +msgid "Subordinate id statistics" +msgstr "Статистика щодо підлеглих ідентифікаторів" + +msgid "Subordinate ids" +msgstr "Підлеглі ідентифікатори" + +msgid "Subordinate user ID count" +msgstr "Лічильник підлеглих ідентифікаторів користувачів" + +msgid "Subtree" +msgstr "Піддерево" + +msgid "Subtree to apply ACI to" +msgstr "Піддерево, до якого слід застосувати ACI" + +msgid "Subtree to apply permissions to" +msgstr "Піддерево, до якого буде застосовано права доступу" + +msgid "Subtype" +msgstr "Підтип" + +msgid "Success" +msgstr "Успіх" + +msgid "Sudo" +msgstr "Sudo" + +msgid "Sudo Allow Command Groups" +msgstr "Групи дозволених команд sudo" + +msgid "Sudo Allow Commands" +msgstr "Дозволені команди sudo" + +msgid "Sudo Command" +msgstr "Команда sudo" + +msgid "Sudo Command Group" +msgstr "Група команд sudo" + +msgid "Sudo Command Groups" +msgstr "Групи команд sudo" + +msgid "Sudo Commands" +msgstr "Команди sudo" + +msgid "Sudo Deny Command Groups" +msgstr "Групи заборонених команд sudo" + +msgid "Sudo Deny Commands" +msgstr "Заборонені команди sudo" + +msgid "Sudo Option" +msgstr "Пункт sudo" + +msgid "Sudo Rule" +msgstr "Правило sudo" + +msgid "Sudo Rules" +msgstr "Правила Sudo" + +msgid "Sudo order" +msgstr "Порядок sudo" + +msgid "Suffix name" +msgstr "Назва суфікса" + +msgid "Superseded" +msgstr "Замінено" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "Підтримувані типи шифрування:\n" + +msgid "Suppress processing of membership attributes." +msgstr "Придушити обробку атрибутів участі." + +msgid "Symmetric" +msgstr "Симетричний" + +msgid "Sync OTP Token" +msgstr "Синхронізувати жетон OTP" + +msgid "Synchronize an OTP token." +msgstr "Синхронізувати жетон OTP." + +msgid "Synchronizing" +msgstr "Синхронізація" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "Синтаксична помилка: %(error)s" + +msgid "System DNS records updated" +msgstr "Оновлено записи DNS системи" + +#, python-format +msgid "" +"System encoding must be UTF-8, '%(encoding)s' is not supported. Set " +"LC_ALL=\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." +msgstr "" +"Кодуванням системи має бути UTF-8, підтримки «%(encoding)s» не передбачено. " +"Встановіть такі значення змінних середовища: LC_ALL=\"C.UTF-8\" або " +"LC_ALL=\"\" і LC_CTYPE=\"C.UTF-8\"." + +msgid "TA record" +msgstr "Запис TA" + +msgid "TKEY record" +msgstr "Запис TKEY" + +msgid "TLSA Certificate Association Data" +msgstr "Дані прив’язки сертифікатів TLSA" + +msgid "TLSA Certificate Usage" +msgstr "Використання сертифіката TLSA" + +msgid "TLSA Matching Type" +msgstr "Відповідний тип TLSA" + +msgid "TLSA Selector" +msgstr "Селектор TLSA" + +msgid "TLSA record" +msgstr "Запис TLSA" + +msgid "TOTP Synchronization Window" +msgstr "Вікно синхронізації TOTP" + +msgid "TOTP authentication Window" +msgstr "Вікно розпізнавання TOTP" + +msgid "TOTP authentication time variance (seconds)" +msgstr "Відхилення часу розпізнавання TOTP (у секундах)" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "Відхилення часу синхронізації TOTP (у секундах)" + +msgid "TOTP token / IPA server time difference" +msgstr "Часова розбіжність між ключем TOTP і сервером IPA" + +msgid "TSIG record" +msgstr "Запис TSIG" + +msgid "TXT Text Data" +msgstr "Текстові дані TXT" + +msgid "TXT record" +msgstr "Запис TXT" + +msgid "Take a revoked certificate off hold." +msgstr "Забрати відкликаний сертифікат." + +msgid "Target" +msgstr "Ціль" + +msgid "Target DN" +msgstr "DN призначення" + +msgid "Target DN subtree" +msgstr "Піддерево DN призначення" + +msgid "Target Uniform Resource Identifier" +msgstr "Універсальний ідентифікатор ресурсу призначення" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "Універсальний ідентифікатор ресурсу призначення відповідно до RFC 3986" + +msgid "Target group" +msgstr "Цільова група" + +msgid "Target host" +msgstr "Вузол призначення" + +msgid "Target members of a group" +msgstr "Цільові учасники групи" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "Цільові учасники групи (встановлює фільтр призначення memberOf)" + +msgid "Target reverse zone not found." +msgstr "Не знайдено зворотної зони призначення." + +msgid "Target your own entry (self)" +msgstr "Виконати над власним записом (self)" + +msgid "Task DN" +msgstr "DN завдання" + +#, python-format +msgid "Task DN = '%s'" +msgstr "DN завдання = «%s»" + +msgid "Telephone Number" +msgstr "Номер телефону" + +msgid "Test the ACI syntax but don't write anything" +msgstr "Перевірити синтаксис ACI, але не виконувати запису" + +msgid "Text Data" +msgstr "Текстові дані" + +msgid "Text does not match field pattern" +msgstr "Текст не відповідає шаблону поля" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" +"Параметр --domain не можна використовувати разом із параметрами --add-domain " +"і --del-domain. Скористайтеся параметром --domain для визначення усього " +"списку доменів області явним чином. Щоб додати або вилучити окремі домени, " +"скористайтеся параметрами --add-domain/del-domain." + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "ACI для прав доступу %(name)s у %(dn)s не знайдено " + +msgid "The IPA realm" +msgstr "Область IPA" + +msgid "The Identity Provider OIDC URL" +msgstr "Адреса OIDC надавача профілів" + +msgid "The OTP if the user has a token configured" +msgstr "OTP, якщо користувач має налаштований жетон" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be created " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please create the record " +"manually, containing the following value: '%(realm)s'" +msgstr "" +"Не вдалося створити запис TXT _kerberos з домену %(domain)s (%(error)s).\n" +"Причиною може бути те, що зона не є керованою IPA. Будь ласка, створіть " +"запис вручну так, щоб він містив таке значення: «%(realm)s»" + +#, python-format +msgid "" +"The _kerberos TXT record from domain %(domain)s could not be removed " +"(%(error)s).\n" +"This can happen if the zone is not managed by IPA. Please remove the record " +"manually." +msgstr "" +"Не вдалося вилучити запис TXT _kerberos з домену %(domain)s (%(error)s).\n" +"Причиною може бути те, що зона не є керованою IPA. Будь ласка, вилучіть " +"запис вручну." + +#, python-format +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "Ключа автоматичного монтування %(key)s з інформацією %(info)s не існує" + +#, python-format +msgid "The certificate for %(ca)s is not available on this server." +msgstr "Сертифікат %(ca)s на цьому сервері не доступний." + +#, python-format +msgid "The character %(char)r is not allowed." +msgstr "Не можна використовувати символ %(char)r." + +msgid "The default users group cannot be removed" +msgstr "Не можна вилучати типову групу користувачів" + +msgid "The deny type has been deprecated." +msgstr "Тип «deny» вважається застарілим." + +#, python-format +msgid "The domain %s is neither IPA domain nor a trusteddomain." +msgstr "Домен %s не є ні доменом IPA, ні довіреним доменом." + +msgid "" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "" +"Доменна назва вузла призначення або '.', якщо служба є явно недоступною на " +"цьому домені" + +#, python-format +msgid "" +"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." +msgstr "" +"Домени «%s» не можна використовувати для застосування перевірки " +"altSecurityIdentities." + +#, python-format +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "Вказані нижче домени не належать до цієї області: %(domains)s" + +msgid "The group doesn't exist" +msgstr "Такої групи не існує" + +#, python-format +msgid "The host '%s' does not exist to add a service to." +msgstr "Не існує вузла «%s», до якого слід було додати службу." + +#, python-format +msgid "The host was added but the DNS update failed with: %(reason)s" +msgstr "" +"Запис вузла було додано, але спроба оновлення DNS зазнала невдачі: %(reason)s" + +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "Назву вузла слід вказувати повністю: %s\n" + +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "Назва вузла не повинна бути такою: %s\n" + +msgid "The hostname or IP (with or without port)" +msgstr "Назва вузла або IP-адреса (з портом або без порту)" + +msgid "The hostname this reverse record points to" +msgstr "Назва вузла, на яку вказує цей зворотний запис" + +msgid "The hostname to register as" +msgstr "Назва вузла для реєстрації" + +#, python-format +msgid "" +"The key,info pair must be unique. A key named %(key)s with info %(info)s " +"already exists" +msgstr "" +"Пара ключ,інформація має бути унікальною. Ключ з назвою %(key)s та " +"інформацією %(info)s вже існує." + +msgid "" +"The keytab file to append the new key to (will be created if it does not " +"exist)." +msgstr "" +"Файл таблиці ключів, до якого слід долучати новий ключ (файл буде створено, " +"якщо його не існувало)." + +msgid "The keytab file to remove the principcal(s) from" +msgstr "Файл таблиці ключів, звідки слід вилучити реєстраційні записи" + +msgid "" +"The mapping rule with altSecurityIdentities should be applied to a trusted " +"Active Directory domain but no domain was associated with the rule." +msgstr "" +"До довіреного домену Active Directory має бути застосовано правило прив'язки " +"з altSecurityIdentities, але з цим правилом не пов'язано жодного домену." + +msgid "The max. length of monotonic character sequences (abcd)" +msgstr "Максимальна довжина можливої послідовності з абетки (abcd)" + +#, python-format +msgid "The most common types for this type of zone are: %s\n" +msgstr "Найпоширенішими типами для цього типу зон є: %s\n" + +msgid "The number of times to retry authentication" +msgstr "Кількість спроб пройти розпізнавання" + +msgid "The password or username you entered is incorrect" +msgstr "Вами введено помилкове ім'я користувача або пароль" + +msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" +msgstr "" +"Значення primary_key (основного ключа) запису, наприклад, «iivanenko» для " +"користувача" + +msgid "The principal for this request doesn't exist." +msgstr "Реєстраційного запису для цього запиту не існує." + +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" +"Реєстраційний запис, для якого слід отримати таблицю ключів (приклад: ftp/" +"ftp.example.com@EXAMPLE.COM)" + +msgid "" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "" +"Реєстраційні записи, які слід вилучити із таблиці ключів (приклад: ftp/ftp." +"example.com@EXAMPLE.COM)" + +msgid "" +"The realm for the principal does not match the realm for this IPA server" +msgstr "" +"Область дії реєстраційного запису не збігається з областю цього сервера IPA" + +#, python-format +msgid "" +"The realm of the following domains could not be detected: %(domains)s. If " +"these are domains that belong to the this realm, please create a _kerberos " +"TXT record containing \"%(realm)s\" in each of them." +msgstr "" +"Не вдалося виявити область таких доменів: %(domains)s. Якщо ці домени " +"належать до цієї області, будь ласка, створіть запис TXT _kerberos, що " +"міститиме «%(realm)s», на кожному з них." + +msgid "" +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" +msgstr "" +"Схема, використана на сервері LDAP. Підтримувані значення: RFC2307 і " +"RFC2307bis. Типове значення: RFC2307bis" + +#, python-format +msgid "" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "" +"Критерій пошуку не був достатньо точним. Мало бути вказано один критерій, " +"виявлено — %(found)d." + +msgid "The secret used to encrypt data" +msgstr "Ключ, який використовується для шифрування даних" + +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "Службі дозволено проходити розпізнавання від імені клієнта" + +#, python-format +msgid "" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "" +"Реєстраційного запису служби для альтернативної назви об’єкта %s запиту щодо " +"сертифіката не існує" + +msgid "The topic or command name." +msgstr "Назва теми або команди." + +msgid "The total timeout across all retries (in seconds)" +msgstr "Загальний час очікування за усіма спробами (у секундах)" + +msgid "The user account you entered is locked" +msgstr "Введений вами обліковий запис заблоковано" + +msgid "The username attribute on the user object" +msgstr "Атрибут імені користувача об’єкта користувача" + +msgid "The username, password or token codes are not correct" +msgstr "Ім’я користувача, пароль або коди жетона є помилковими" + +#, python-brace-format +msgid "" +"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " +"Please remove it manually on AD DC side." +msgstr "" +"Відносини довіри із {ipa_domain} вже встановлено із непідтримуваним типом " +"{trust_type}. Будь ласка, вилучте запис цих відносин вручну на боці AD DC." + +msgid "There was a problem with your request. Please, try again later." +msgstr "" +"Із вашим запитом виникли проблеми. Будь ласка, повторіть спробу пізніше." + +msgid "" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" +msgstr "" +"Цією командою не можна скористатися для зміни розподілу ідентифікаторів для " +"локального домену IPA. Щоб дізнатися більше, скористайтеся командою «ipa " +"help idrange»." + +msgid "" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "" +"Для виконання цієї команди має існувати група «editors», але групи з такою " +"назвою не знайдено." + +msgid "This command requires root access" +msgstr "Для виконання цієї команди потрібні права доступу користувача root" + +msgid "This entry already exists" +msgstr "Цей запис вже існує" + +msgid "This entry cannot be enabled or disabled" +msgstr "Цей запис не можна вмикати або вимикати" + +msgid "This entry is already a member" +msgstr "Цей запис вже є серед учасників" + +msgid "This entry is already disabled" +msgstr "Цей запис вже вимкнено" + +msgid "This entry is already enabled" +msgstr "Цей запис вже увімкнено" + +msgid "This entry is not a member" +msgstr "Цього запису немає серед учасників" + +msgid "This group already allows external members" +msgstr "У цій групі вже дозволено зовнішніх учасників" + +msgid "This group cannot be posix because it is external" +msgstr "Ця група не може належати до груп POSIX, оскільки є зовнішньою" + +msgid "This is already a posix group" +msgstr "Вже є posix-групою" + +msgid "This is already a posix group and cannot be converted to external one" +msgstr "" +"Ця група вже належить до груп POSIX, отже її не можна перетворити на зовнішню" + +msgid "This may take some time, please wait ..." +msgstr "Це доволі тривала дія. Будь ласка, зачекайте…" + +msgid "This page has unsaved changes. Please save or revert." +msgstr "" +"На цій сторінці виявлено незбережені зміни. Будь ласка, збережіть зміни або " +"скасуйте їх." + +msgid "Ticket expired" +msgstr "Сплив строк дії квитка" + +#, python-format +msgid "Ticket policy for %s could not be read" +msgstr "Не вдалося прочитати правила щодо квитків для %s" + +msgid "Time Limit" +msgstr "Обмеження часу" + +msgid "Time limit of search in seconds" +msgstr "Обмеження часу пошуку у секундах" + +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "Обмеження часу пошуку у секундах (0 — без обмежень)" + +msgid "Time now" +msgstr "Поточний час" + +msgid "Time to live" +msgstr "Строк дії" + +msgid "Time to live for records at zone apex" +msgstr "Час життя записів у апексі зони" + +msgid "Time to live for records without explicit TTL definition" +msgstr "Час життя записів без явного визначення TTL" + +msgid "Time-based (TOTP)" +msgstr "На основі часу (TOTP)" + +msgid "Timeout" +msgstr "Час очікування" + +#, c-format +msgid "Timeout exceeded." +msgstr "Перевищено обмеження за часом." + +msgid "" +"To establish trust with Active Directory, the domain name and the realm name " +"of the IPA server must match" +msgstr "" +"Для встановлення довіри з Active Directory назва домену і назва області " +"сервера IPA мають збігатися" + +msgid "To get command help, use:" +msgstr "Щоб отримати довідку щодо команди, скористайтеся такою командою:" + +msgid "Token ID" +msgstr "Ідентифікатор жетона" + +msgid "Token URI" +msgstr "Адреса жетона" + +msgid "Token description (informational only)" +msgstr "Опис ключа (лише інформаційний)" + +msgid "Token endpoint" +msgstr "Кінцева точка жетона" + +msgid "Token hash algorithm" +msgstr "Алгоритм хешування ключа" + +msgid "Token model (informational only)" +msgstr "Модель ключа (лише інформація)" + +msgid "Token secret (Base32; default: random)" +msgstr "Пароль ключа (Base32; типове значення: випадковий)" + +msgid "Token serial (informational only)" +msgstr "Серійний номер ключа (лише інформація)" + +msgid "Token synchronization failed" +msgstr "Спроба синхронізації жетонів зазнала невдачі" + +msgid "Token vendor name (informational only)" +msgstr "Назва виробника ключа (лише інформація)" + +msgid "Token was synchronized" +msgstr "Жетон синхронізовано" + +msgid "Topic commands:" +msgstr "Команди теми:" + +msgid "Topic or Command" +msgstr "Тема або команда" + +msgid "Topology" +msgstr "Топологія" + +msgid "Topology Segment" +msgstr "Сегмент топології" + +msgid "Topology Segments" +msgstr "Сегменти топології" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "" +"Топологія не дозволяє серверу %(server)s виконувати реплікацію із серверами:" + +msgid "Topology is disconnected" +msgstr "Топологію від’єднано" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "Керування топологією потребує мінімального рівня домену {0} " + +msgid "Topology suffix" +msgstr "Суфікс топології" + +msgid "Topology suffixes" +msgstr "Суфікси топології" + +msgid "Total number of variables env (>= count)" +msgstr "Кількість змінних env (>= count)" + +msgid "Transport Certificate" +msgstr "Сертифікат передавання" + +msgid "True" +msgstr "Так" + +msgid "True if not all results were returned" +msgstr "True, якщо повернуто було всі результати" + +msgid "True means the operation was successful" +msgstr "True означає, що дію було виконано успішно" + +msgid "Trust" +msgstr "Довіра" + +msgid "Trust Settings" +msgstr "Параметри довіри" + +msgid "Trust direction" +msgstr "Напрямок довіри" + +msgid "Trust setup" +msgstr "Налаштування довіри" + +msgid "Trust status" +msgstr "Стан довіри" + +msgid "Trust type" +msgstr "Тип довіри" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "Тип довіри (типовим для Active Directory є ad)" + +msgid "Trusted domain" +msgstr "Довірений домен" + +#, python-format +msgid "" +"Trusted domain %(domain)s is included among IPA realm domains. It needs to " +"be removed prior to establishing the trust. See the \"ipa realmdomains-mod --" +"del-domain\" command." +msgstr "" +"До доменів області IPA включено домен %(domain)s. Перш ніж встановлювати " +"довіру, це включення слід усунути. Див. команду «ipa realmdomains-mod --del-" +"domain»." + +msgid "Trusted domain and administrator account use different realms" +msgstr "" +"Довіреним доменом і обліковим записом адміністратора використовуються різні " +"області" + +msgid "Trusted domain did not return a unique object" +msgstr "Довіреним доменом не повернуто унікального об’єкта" + +msgid "Trusted domain did not return a valid SID for the object" +msgstr "Довіреним доменом не повернуто коректного SID об’єкта" + +msgid "Trusted domain partner" +msgstr "Партнер довіреного домену" + +msgid "Trusted domains" +msgstr "Довірені домени" + +msgid "Trusted for delegation" +msgstr "Довірено для уповноваження" + +msgid "Trusted forest" +msgstr "Довірений «ліс»" + +msgid "Trusted to authenticate as user" +msgstr "Довіра до розпізнавання як користувача" + +msgid "Trusting forest" +msgstr "«Ліс» довіри" + +msgid "Trusts" +msgstr "Записи довіри" + +msgid "Two factor authentication (password + OTP)" +msgstr "Двофакторне розпізнавання (пароль + OTP)" + +msgid "Two-way trust" +msgstr "Двобічна довіра" + +msgid "Type" +msgstr "Тип" + +msgid "Type Covered" +msgstr "Об’єднувані типи" + +msgid "Type Map" +msgstr "Карта типів" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "Тип об’єкта IPA (встановлює фільтри призначення subtree і objectClass)" + +msgid "" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "" +"тип об’єкта IPA (user (користувач), group (група), host (вузол), hostgroup " +"(група вузлів), service (служба), netgroup (мережева група), dns)" + +msgid "Type of the token" +msgstr "Тип ключа" + +msgid "Type of trusted domain ID range, one of allowed values" +msgstr "" +"Тип діапазону ідентифікаторів довіреного домену, одне з дозволених значень" + +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "" +"Тип діапазону ідентифікаторів довіреного домену, одне з таких значень: ipa-" +"ad-trust-posix, ipa-ad-trust" + +msgid "Types of supported user authentication" +msgstr "Типи підтримуваного розпізнавання користувачів" + +msgid "UID" +msgstr "UID" + +msgid "UPN suffixes" +msgstr "Суфікси UPN" + +msgid "URI" +msgstr "URI" + +msgid "URL" +msgstr "Адреса" + +msgid "UUID" +msgstr "UUID" + +msgid "Un-apply" +msgstr "Скасувати" + +msgid "Un-apply ID Views from hosts" +msgstr "Скасувати застосування переглядів ідентифікаторів до вузлів" + +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "" +"Скасувати застосування переглядів ідентифікаторів до вузлів груп вузлів" + +#, python-brace-format +msgid "Un-apply ID view '${primary_key}' from hosts" +msgstr "" +"Скасувати застосування перегляду ідентифікаторів «${primary_key}» до вузлів" + +msgid "Un-apply from host groups" +msgstr "Скасувати застосування до груп вузлів" + +msgid "Un-apply from hosts" +msgstr "Скасувати застосування до вузлів" + +msgid "Unable to communicate with CMS" +msgstr "Не вдалося обмінятися даними з CMS" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "Не вдалося обмінятися даними з CMS (стан %d)" + +msgid "" +"Unable to create new TLS context (OpenSSL failed to initialize or to load " +"certificates)\n" +msgstr "" +"Не вдалося створити контекст TLS (не вдалося ініціалізувати OpenSSL або " +"завантажити сертифікати)\n" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "Не вдалося створити закриту групу. Група «%(group)s» вже існує." + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "Не вдалося визначити сервер IPA з %s\n" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "" +"Не вдалося визначити, чи існує вже реєстраційний запис Kerberos %s. " +"Скористайтеся командою «ipa user-mod», щоб встановити його параметри вручну." + +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "Не вдалося визначити кореневий DN %s\n" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "" +"Неможливо показати код QR за допомогою налаштованого кодування виведення " +"результатів. Будь ласка, скористайтеся адресою ключа для налаштовування " +"вашого пристрою OTP" + +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "Не вдалося увімкнути SSL у LDAP\n" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "Не вдалося створити кеш реєстраційних даних Kerberos\n" + +msgid "Unable to initialize STARTTLS session\n" +msgstr "Не вдалося ініціалізувати сеанс STARTTLS\n" + +#, c-format +msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" +msgstr "Не вдалося ініціалізувати з'єднання із сервером ldap %1$s: %2$s\n" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "Не вдалося ініціалізувати бібліотеку ldap!\n" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "" +"Не вдалося долучити вузол: не знайдено кешу реєстраційних даних Kerberos\n" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "" +"Не вдалося долучити вузол: не знайдено реєстраційного запису користувача " +"Kerberos і не вказано пароля вузла.\n" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "" +"Не вдалося долучити вузол: невдала спроба ініціалізації контексту Kerberos\n" + +#, python-brace-format +msgid "Unable to parse option {item}" +msgstr "Не вдалося обробити параметр {item}" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "Не вдалося обробити реєстраційний запис\n" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "Не вдалося обробити назву реєстраційного запису\n" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "Не вдалося обробити реєстраційний запис: %1$s (%2$d)\n" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "Не вдалося вилучити запис\n" + +#, python-brace-format +msgid "Unable to resolve domain controller for {domain} domain. " +msgstr "Не вдалося визначити контролер домену для домену {domain}. " + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "Не вдалося встановити LDAP_OPT_PROTOCOL_VERSION\n" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "Не вдалося встановити LDAP_OPT_X_SASL_NOCANON\n" + +msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" +msgstr "Не вдалося встановити LDAP_OPT_X_TLS_CACERTFILE\n" + +msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" +msgstr "Не вдалося встановити LDAP_OPT_X_TLS_PROTOCOL_MIN\n" + +msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" +msgstr "Не вдалося встановити LDAP_OPT_X_TLS_REQUIRE_CERT\n" + +msgid "Unable to verify write permissions to the AD" +msgstr "Не вдалося перевірити права доступу на запис до AD" + +msgid "Undelete a delete user account." +msgstr "Відновити вилучений обліковий запис користувача." + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "Відновлено обліковий запис користувача «%(value)s»" + +msgid "Undo" +msgstr "Скасувати" + +msgid "Undo All" +msgstr "скасувати всі дії" + +msgid "Undo all changes in this field." +msgstr "Скасувати усі зміни у цьому полі." + +msgid "Undo this change." +msgstr "Скасувати цю зміну." + +msgid "Unenroll this host from IPA server" +msgstr "Скасувати реєстрацію цього вузла на сервері IPA" + +#, c-format +msgid "Unenrollment failed.\n" +msgstr "Спроба скасування реєстрації зазнала невдачі.\n" + +#, c-format +msgid "Unenrollment successful.\n" +msgstr "Успішне скасування реєстрації.\n" + +msgid "Unique ID" +msgstr "Унікальний ід." + +msgid "Unknown" +msgstr "Невідомо" + +msgid "Unknown Error" +msgstr "Невідома помилка" + +#, python-format +msgid "Unknown option: %(option)s" +msgstr "Невідомий параметр: %(option)s" + +msgid "Unlock" +msgstr "Розблокувати" + +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "Розблоковано обліковий запис «%(value)s»" + +msgid "Unmatched" +msgstr "Невідповідний" + +msgid "Unprovision" +msgstr "Скасування передбачення" + +msgid "Unprovisioning host" +msgstr "Вузол скасовування передбачення" + +msgid "Unprovisioning service" +msgstr "Служба скасовування передбачення" + +#, python-format +msgid "Unrecognized attributes: %(attrs)s" +msgstr "Нерозпізнані атрибути: %(attrs)s" + +msgid "Unresolved rules in --rules" +msgstr "Непридатні до обробки правила у --rules" + +msgid "Unrevoked" +msgstr "Відкликання скасовано" + +msgid "Unsaved Changes" +msgstr "Незбережені зміни" + +msgid "Unselect All" +msgstr "Скасувати вибір всього" + +msgid "Unspecified" +msgstr "Не вказано" + +msgid "Unsupported value" +msgstr "Непідтримуване значення" + +msgid "" +"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " +"allowed. Empty string is not allowed." +msgstr "" +"Можна використати до 15 символів і лише великих літер ASCII, цифр та " +"дефісів. Не можна лишати рядок порожнім." + +msgid "Update" +msgstr "Оновити" + +msgid "Update DNS entries" +msgstr "Оновити записи DNS" + +msgid "Update System DNS Records" +msgstr "Оновити записи DNS системи" + +msgid "Update location and IPA server DNS records" +msgstr "Оновити записи місць та серверів DNS IPA" + +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "" +"Спроба оновлення запису системи «%(record)s» зазнала невдачі. Повідомлення " +"про помилку: %(error)s" + +msgid "User" +msgstr "Користувач" + +msgid "User Group" +msgstr "Група користувачів" + +msgid "User Groups" +msgstr "Групи користувачів" + +msgid "User ID" +msgstr "Ід. користувача" + +msgid "User ID Number" +msgstr "Номер ідентифікатора користувача" + +msgid "User ID Number (system will assign one if not provided)" +msgstr "" +"Ідентифікаційний номер користувача (система призначить його, якщо не буде " +"вказано)" + +msgid "User ID override" +msgstr "Перевизначення ідентифікатора користувача" + +msgid "User ID overrides" +msgstr "Перевизначення ідентифікатора користувача" + +msgid "User Login" +msgstr "Користувач" + +msgid "User Options" +msgstr "Параметри користувача" + +msgid "User Vaults" +msgstr "Сховища користувачів" + +msgid "User attribute" +msgstr "Атрибут користувача" + +msgid "User attributes for SMB services" +msgstr "Атрибути користувача для служб SMB" + +msgid "User authentication types" +msgstr "Типи розпізнавання користувачів" + +msgid "User categories" +msgstr "Категорії користувачів" + +msgid "User category" +msgstr "Категорія користувачів" + +msgid "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "" +"Категорія вузлів (семантику цього атрибуту призначено для локальної обробки)" + +msgid "User category the ACL applies to" +msgstr "Категорія користувачів, до якої застосовується ACL" + +msgid "User category the rule applies to" +msgstr "Категорія користувачів, до якої застосовується правило" + +msgid "User check" +msgstr "Перевірка на ім'я користувача" + +msgid "User container" +msgstr "Контейнер користувачів" + +msgid "User group" +msgstr "Група користувачів" + +msgid "User group ACI grants access to" +msgstr "Група користувачів, до якої надає доступ ACI" + +msgid "User group rule" +msgstr "Правило групи користувачів" + +msgid "User group rules" +msgstr "Правила груп користувачів" + +msgid "User group to apply delegation to" +msgstr "Група користувачів, до якої слід застосувати уповноваження" + +msgid "User group to apply permissions to" +msgstr "Група користувачів, до якої буде застосовано права доступу" + +msgid "User group to apply permissions to (sets target)" +msgstr "" +"Група користувачів, до якої буде застосовано права доступу (встановлює " +"target)" + +msgid "User info URI" +msgstr "Адреса даних користувача" + +msgid "User information endpoint" +msgstr "Кінцева точка даних користувача" + +msgid "User login" +msgstr "Користувач" + +msgid "User logins" +msgstr "Користувачі" + +msgid "User name" +msgstr "Ім'я користувача" + +msgid "User object class" +msgstr "Клас об’єктів користувача" + +msgid "User object overrides" +msgstr "Пріоритет об’єкта користувача" + +msgid "User password" +msgstr "Пароль користувача" + +msgid "User password expiration" +msgstr "Вичерпання строку дії пароля користувача" + +msgid "User search fields" +msgstr "Поля пошуку користувачів" + +msgid "User to override" +msgstr "Користувач для перевизначення" + +msgid "User-friendly description of action performed" +msgstr "Зручний для користувача опис дії, що виконується" + +msgid "User-specified attributes to which the permission applies" +msgstr "Вказані користувачем атрибути, до яких застосовується правило доступу" + +msgid "" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "" +"Вказані користувачем атрибути, до яких права доступу явним чином не " +"застосовуватимуться" + +msgid "Username" +msgstr "Користувач" + +msgid "Username of the user vault" +msgstr "Ім’я користувача сховища користувача" + +msgid "Users" +msgstr "Користувачі" + +msgid "Users allowed to create keytab" +msgstr "Користувачі, яким дозволено створення таблиці ключів" + +msgid "Users allowed to retrieve keytab" +msgstr "Користувачі, яким дозволено отримувати таблицю ключів" + +#, c-format +msgid "Using discovered server %s\n" +msgstr "Використовуємо виявлений сервер %s\n" + +#, c-format +msgid "Using provided server %s\n" +msgstr "Використовуємо наданий сервер %s\n" + +#, c-format +msgid "Using server from config %s\n" +msgstr "Використовуємо сервер з налаштувань %s\n" + +msgid "Valid Certificate Present" +msgstr "Є чинний сертифікат" + +msgid "Valid from" +msgstr "Чинний з" + +msgid "Valid not after from" +msgstr "Чинний не пізніше після" + +msgid "Valid not after from this date (YYYY-mm-dd)" +msgstr "Чинний не пізніше, ніж з цієї дати (РРРР-мм-дд)" + +msgid "Valid not after to" +msgstr "Чинний не пізніше до" + +msgid "Valid not after to this date (YYYY-mm-dd)" +msgstr "Чинний не пізніше, ніж до цієї дати (РРРР-мм-дд)" + +msgid "Valid not before from" +msgstr "Чинний не раніше від" + +msgid "Valid not before from this date (YYYY-mm-dd)" +msgstr "Чинний не раніше від цієї дати (РРРР-мм-дд)" + +msgid "Valid not before to" +msgstr "Чинний не раніше" + +msgid "Valid not before to this date (YYYY-mm-dd)" +msgstr "Чинний не раніше цієї дати (РРРР-мм-дд)" + +msgid "Valid to" +msgstr "Чинний до" + +msgid "Validation error" +msgstr "Помилка під час перевірки" + +msgid "Validity" +msgstr "Коректність" + +msgid "Validity end" +msgstr "Завершення чинності" + +msgid "Validity start" +msgstr "Початок чинності" + +msgid "Vault" +msgstr "Сховище" + +msgid "Vault Container" +msgstr "Контейнер сховищ" + +msgid "Vault Containers" +msgstr "Контейнери сховищ" + +msgid "Vault Type" +msgstr "Тип сховища" + +msgid "Vault configuration" +msgstr "Налаштування сховища" + +msgid "Vault data encrypted with session key" +msgstr "Дані сховища зашифровано за допомогою ключа сеансу" + +msgid "Vault description" +msgstr "Опис сховища" + +msgid "Vault name" +msgstr "Назва сховища" + +msgid "Vault password" +msgstr "Пароль до сховища" + +msgid "Vault private key" +msgstr "Закритий ключ сховища" + +msgid "Vault public key" +msgstr "Відкритий ключ сховища" + +msgid "Vault salt" +msgstr "«Сіль» сховища" + +msgid "Vault service" +msgstr "Служба сховища" + +msgid "Vault type" +msgstr "Тип сховища" + +msgid "Vault user" +msgstr "Користувач сховища" + +msgid "Vaults" +msgstr "Сховища" + +msgid "Vaults Config" +msgstr "Налаштування сховища" + +msgid "Vendor" +msgstr "Постачальник" + +msgid "Verify Password" +msgstr "Повторіть пароль" + +msgid "Verify Principal Password" +msgstr "Перевірка пароля реєстраційного запису" + +msgid "Verify secret" +msgstr "Перевірити реєстраційні дані" + +msgid "Version" +msgstr "Версія" + +msgid "Vertical Precision" +msgstr "Точність за вертикаллю" + +msgid "Via Service" +msgstr "Проміжна служба" + +msgid "View" +msgstr "Перегляд" + +msgid "View Certificate" +msgstr "Переглянути сертифікат" + +msgid "Waiting for confirmation by remote side" +msgstr "Очікуємо на підтвердження з віддаленого боку" + +msgid "Warning" +msgstr "Попередження" + +msgid "Warning unrecognized encryption type.\n" +msgstr "Попередження: невідомий тип шифрування.\n" + +msgid "Warning unrecognized salt type.\n" +msgstr "Попередження: невідомий тип солі (salt).\n" + +msgid "Warning: Consider service replication" +msgstr "Попередження: вам варто скористатися реплікацією служб" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "Попередження: не вдалося виконати перетворення типу (№%d)\n" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "" +"Попередження: для випадкових паролів типи солі (salt) не мають значення " +"(див. параметр -P)\n" + +msgid "Weight" +msgstr "Вага" + +msgid "Weight for server services" +msgstr "Вага служб сервера" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "" +"Під час перенесення групи, яку вже створено у домені IPA буде перезаписано " +"ідентифікатор групи і повідомлено про успіх" + +msgid "Whether PKINIT is enabled or disabled" +msgstr "Визначає, увімкнено чи вимкнено PKINIT" + +msgid "" +"Whether a replication agreement is active, meaning whether replication is " +"occurring per that agreement" +msgstr "" +"Визначає, чи є активною угода щодо реплікації, тобто, чи відбувається " +"реплікація за цією угодою" + +msgid "Whether to store certs issued using this profile" +msgstr "" +"Визначає, чи слід зберігати сертифікати, видані за допомогою цього профілю" + +msgid "Who" +msgstr "Хто" + +msgid "Working" +msgstr "Працює" + +msgid "Write certificate (chain if --chain used) to file" +msgstr "" +"Записати сертифікат (ланцюжок сертифікації, якщо використано --chain) до " +"файла" + +msgid "Write profile configuration to file" +msgstr "Записати налаштування профілів до файла" + +msgid "X.509 certificate chain" +msgstr "Ланцюжок сертифікації X.509" + +msgid "" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." +msgstr "" +"Ви намагаєтеся послатися на магічну приватну групу, яку не можна " +"перевизначати Спробуйте краще перевизначити атрибут GID запису відповідного " +"користувача." + +#, python-brace-format +msgid "" +"You can use FreeOTP as a software " +"OTP token application." +msgstr "" +"Ви можете скористатися FreeOTP як " +"програмою для роботи з ключами OTP." + +#, python-format +msgid "You cannot specify %s without the --enable-sid option" +msgstr "Ви не можете вказати %s без параметра --enable-sid" + +msgid "You may need to manually remove them from the tree" +msgstr "Ймовірно, вам доведеться вилучити їх із ієрархії вручну" + +msgid "You must enroll a host in order to create a host service" +msgstr "Щоб створити службу вузла, вам слід зареєструвати вузол" + +msgid "" +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." +msgstr "" +"Вам слід вказати обидва параметри, rid-base і secondary-rid-base, оскільки " +"вже запущено ipa-adtrust-install." + +#, python-brace-format +msgid "You will be redirected in ${count}s" +msgstr "Вас буде переспрямовано за ${count} с" + +msgid "You will be redirected to DNS Zone." +msgstr "Вас буде переспрямовано до зони DNS." + +#, python-brace-format +msgid "Your password expires in ${days} days." +msgstr "Строк дії вашого пароля буде вичерпано за ${days} днів." + +msgid "Your password has expired. Please enter a new password." +msgstr "Термін дії вашого паролю вичерпано. Будь ласка, введіть новий пароль." + +msgid "Your session has expired. Please log in again." +msgstr "" +"Строк роботи у вашому сеансі вичерпано. Будь ласка, увійдіть до системи ще " +"раз." + +#, python-format +msgid "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "" +"Довіру до %(domain)s втрачено. Будь ласка, відновіть її за допомогою команди " +"«ipa trust-add»." + +msgid "YubiKey slot" +msgstr "Слот YubiKey" + +msgid "ZIP" +msgstr "Індекс" + +msgid "Zone forwarders" +msgstr "Переспрямовувачі зон" + +#, python-brace-format +msgid "Zone found: ${zone}" +msgstr "Виявлено зону: ${zone}" + +msgid "Zone name" +msgstr "Назва зони" + +msgid "Zone name (FQDN)" +msgstr "Назва зони (FQDN)" + +#, python-format +msgid "Zone record '%s' cannot be deleted" +msgstr "Запис зони «%s» не можна вилучати" + +msgid "Zone refresh interval" +msgstr "Інтервал між оновленнями даних зони" + +#, c-format +msgid "access() on %1$s failed: errno = %2$d\n" +msgstr "Невдала спроба виконання access() для %1$s: номер помилки = %2$d\n" + +#, python-format +msgid "active user with name \"%(user)s\" already exists" +msgstr "запис активного користувача із іменем «%(user)s» вже існує" + +#, python-format +msgid "added attribute value to entry %(value)s" +msgstr "додано значення атрибута до запису %(value)s" + +msgid "algorithm value: allowed interval 0-255" +msgstr "значення алгоритму: дозволеним є інтервал від 0 до 255" + +#, python-format +msgid "all masters must have %(role)s role enabled" +msgstr "для усіх основних серверів має бути увімкнено роль %(role)s" + +msgid "an internal error has occurred" +msgstr "сталася внутрішня помилка" + +#, python-format +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "на сервері «%(server)s» сталася внутрішня помилка" + +#, python-format +msgid "" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "" +"відповідь на запит «%(owner)s %(rtype)s» не містить підписів DNSSEC (немає " +"даних RRSIG)" + +msgid "any of the configured servers" +msgstr "будь-який з налаштованих серверів" + +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "api не надає такого простору назв: «%(name)s»" + +msgid "at least one of options: type, users, hosts must be specified" +msgstr "має бути вказано принаймні один з варіантів: тип, користувачі чи вузли" + +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "" +"слід вказати хоча б одне з: type, filter, subtree, targetgroup, attrs або " +"memberof" + +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "" +"має бути надано принаймні одне значення, що є рівним канонічній назві " +"реєстраційного запису" + +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "не можна використовувати атрибут «%(attribute)s»" + +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "не можна використовувати атрибут «%s»" + +msgid "attribute \"gidNumber\" not allowed with --nonposix" +msgstr "не можна використовувати атрибут «gidNumber» разом із --nonposix" + +msgid "attribute is not configurable" +msgstr "атрибут не можна налаштовувати" + +msgid "attrs and included attributes are mutually exclusive" +msgstr "не можна одразу вказувати attrs та атрибути включення" + +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "не можна одразу вказувати attrs та атрибути включення або виключення" + +#, python-format +msgid "authentication indicators not allowed in service \"%s\"" +msgstr "індикатори розпізнавання у службі «%s» заборонено" + +msgid "automatically add the principal if it doesn't exist" +msgstr "автоматично додати реєстраційний запис, якщо його не існує" msgid "" "automatically add the principal if it doesn't exist (service principals only)" @@ -32072,12 +31323,533 @@ msgstr "" "автоматично додати реєстраційний запис, якщо його не існує (лише " "реєстраційні записи служб)" -#, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "Сертифікати krbtgt можуть використовувати лише профіль %s" +msgid "automount key" +msgstr "ключ автомонтування" -msgid "No Common Name was found in subject of request." -msgstr "У темі запиту не було знайдено загальної назви (CN)." +msgid "automount keys" +msgstr "ключі автомонтування" + +msgid "automount location" +msgstr "запис автомонтування" + +msgid "automount locations" +msgstr "записи автомонтування" + +msgid "automount map" +msgstr "карта автомонтування" + +msgid "automount maps" +msgstr "карти автоматичного монтування" + +msgid "basedn" +msgstr "Базовий DN" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "Спроба виконання ber_init() зазнала невдачі. Некоректне керування?!\n" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "помилка ber_scanf(), не вдалося знайти kvno?!\n" + +msgid "bind password" +msgstr "пароль прив’язки" + +#, python-format +msgid "can be at most %(len)d characters" +msgstr "не повинне перевищувати %(len)d символів у довжину" + +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "не повинне перевищувати за розміром %(maxlength)d байтів" + +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "не повинне перевищувати %(maxlength)d символів у довжину" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "не може перевищувати %(maxvalue)d" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "не може перевищувати %(maxvalue)s" + +#, python-format +msgid "" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "" +"неможливо додати права доступу «%(perm)s» з типом прив’язки «%(bindtype)s» " +"до привілею" + +msgid "cannot be empty" +msgstr "не може бути порожнім" + +msgid "cannot be longer that {} characters" +msgstr "не може бути довшим за {}" + +msgid "cannot be used when a zone is specified" +msgstr "не можна використовувати, якщо вказано зону" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "не вдалося встановити з’єднання з «%(uri)s»: %(error)s" + +msgid "cannot delete global password policy" +msgstr "неможливо вилучити загальні правила паролів" + +msgid "cannot delete managed permissions" +msgstr "неможливо вилучити керовані права доступу" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" +"вилучення кореневого домену правила довіри неможливе, скористайтеся trust-" +"del для вилучення самого правила довіри" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "" +"вимикання кореневого домену правила довіри неможливе, скористайтеся trust-" +"del для вилучення самого правила довіри" + +msgid "cannot have an empty subject" +msgstr "поле призначення не може бути порожнім" + +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "не вдалося відкрити файл налаштувань %s\n" + +msgid "cannot rename managed permissions" +msgstr "неможливо перейменувати керовані права доступу" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "" +"не можна встановлювати типу прив’язки для прав доступу, які пов’язано з " +"привілеєм" + +msgid "cannot specify both individual endpoints and IdP provider" +msgstr "" +"не можна одночасно вказувати індивідуальні кінцеві точки та надавача IdP" + +msgid "cannot specify both raw certificate and file" +msgstr "не можна одночасно вказувати код сертифіката і файл із сертифікатом" + +msgid "cannot specify both subject/issuer and certificate" +msgstr "не можна вказувати одночасно subject/issuer і certificate" + +msgid "cannot specify both subject/issuer and ipacertmapdata" +msgstr "не можна вказувати одночасно subject/issuer і ipacertmapdata" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "" +"не можна одразу вказувати повне фільтрування за призначенням та фільтрування " +"за додатковими параметрами призначення" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "не вдалося обробити функцією stat() файл налаштування %s\n" + +msgid "change collided with another change" +msgstr "зміна конфліктує з іншою внесеною зміною" + +msgid "change to a POSIX group" +msgstr "змінити на групу POSIX" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "змінити для підтримки зовнішніх учасників поза IPA з довірених доменів" + +#, c-format +msgid "child exited with %d\n" +msgstr "дочірній процес завершив роботу з повідомленням %d\n" + +msgid "cn is immutable" +msgstr "cn є незмінним" + +msgid "colon-separated list of domains used for short name qualification" +msgstr "" +"список доменів, відокремлених двокрапками, які використовуються для обробки " +"коротких назв" + +msgid "comma-separated list of HBAC service groups to add" +msgstr "список груп служб HBAC, які слід додати, відокремлених комами" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "список груп служб HBAC, які слід вилучити, відокремлених комами" + +msgid "comma-separated list of HBAC services to add" +msgstr "список служб HBAC, які слід додати, відокремлених комами" + +msgid "comma-separated list of HBAC services to remove" +msgstr "список служб HBAC, які слід вилучити, відокремлених комами" + +msgid "comma-separated list of groups to add" +msgstr "список груп, які слід додати, відокремлених комами" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "список груп, які слід виключити з перенесення, відокремлених комами" + +msgid "comma-separated list of groups to remove" +msgstr "список груп, які слід вилучити, відокремлених комами" + +msgid "comma-separated list of host groups to add" +msgstr "список груп вузлів, які слід додати, відокремлених комами" + +msgid "comma-separated list of host groups to remove" +msgstr "список груп вузлів, які слід вилучити, відокремлених комами" + +msgid "comma-separated list of hosts to add" +msgstr "список вузлів, які слід додати, відокремлених комами" + +msgid "comma-separated list of hosts to remove" +msgstr "список вузлів, які слід вилучити, відокремлених комами" + +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "" +"список учасників довіреного домену у форматі ДОМЕН\\ім’я або ім’я@домен, " +"відокремлених комами" + +msgid "comma-separated list of netgroups to add" +msgstr "список мережевих груп, які слід додати, відокремлених комами" + +msgid "comma-separated list of netgroups to remove" +msgstr "список мережевих груп, які слід вилучити, відокремлених комами" + +msgid "comma-separated list of permissions" +msgstr "список прав доступу, відокремлених комами" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "" +"права доступу, які слід надати, відокремлених комами (read, write, add, " +"delete, all)" + +msgid "comma-separated list of privileges" +msgstr "список привілеїв, відокремлених комами" + +msgid "comma-separated list of privileges to add" +msgstr "список привілеїв, які слід додати, відокремлених комами" + +msgid "comma-separated list of privileges to remove" +msgstr "список привілеїв, які слід вилучити, відокремлених комами" + +msgid "comma-separated list of roles to add" +msgstr "список ролей, які слід додати, відокремлених комами" + +msgid "comma-separated list of roles to remove" +msgstr "список ролей, які слід вилучити, відокремлених комами" + +msgid "comma-separated list of sudo command groups to add" +msgstr "список груп команд sudo, які слід додати, відокремлених комами" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "список груп команд sudo, які слід вилучити, відокремлених комами" + +msgid "comma-separated list of sudo commands to add" +msgstr "список команд sudo, які слід додати, відокремлених комами" + +msgid "comma-separated list of sudo commands to remove" +msgstr "список команд sudo, які слід вилучити, відокремлених комами" + +msgid "comma-separated list of users to add" +msgstr "список записів користувачів, які слід додати, відокремлених комами" + +msgid "comma-separated list of users to exclude from migration" +msgstr "" +"список записів користувачів, які слід виключити з перенесення, відокремлених " +"комами" + +msgid "comma-separated list of users to remove" +msgstr "список записів користувачів, які слід вилучити, відокремлених комами" + +msgid "command" +msgstr "команда" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "команда «%(name)s» приймає не більше %(count)d аргументу" +msgstr[1] "команда «%(name)s» приймає не більше %(count)d аргументів" +msgstr[2] "команда «%(name)s» приймає не більше %(count)d аргументів" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "команда «%(name)s» не приймає ніяких аргументів" + +msgid "commands" +msgstr "команди" + +msgid "commands cannot be added when command category='all'" +msgstr "не можна додавати команди, якщо категорія команд=«all»" + +msgid "commands for controlling sudo configuration" +msgstr "команди керування налаштуванням sudo" + +msgid "communication with CIFS server was unsuccessful" +msgstr "спроба обмінятися даними з сервером CIFS зазнала невдачі" + +msgid "configuration options" +msgstr "параметри налаштування" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "не знайдено запис контейнера (%(container)s)" + +#, c-format +msgid "curl_easy_init() failed\n" +msgstr "помилка curl_easy_init()\n" + +#, c-format +msgid "curl_easy_setopt() failed\n" +msgstr "помилка curl_easy_setopt()\n" + +#, c-format +msgid "curl_global_init() failed\n" +msgstr "помилка curl_global_init()\n" + +#, c-format +msgid "curl_slist_append() failed for value: '%s'\n" +msgstr "помилка curl_slist_append() для значення «%s»\n" + +msgid "default CA ACL can be only disabled" +msgstr "типовий ACL CA можна лише вимкнути" + +msgid "delegation" +msgstr "уповноваження" + +msgid "delegations" +msgstr "уповноваження" + +msgid "delete" +msgstr "вилучити" + +msgid "description" +msgstr "опис" + +msgid "did not receive Kerberos credentials" +msgstr "не отримано реєстраційних даних Kerberos" + +msgid "does not match any of accepted formats: " +msgstr "не відповідає жодному з прийнятних форматів: " + +msgid "domain" +msgstr "домен" + +msgid "domain is not configured" +msgstr "домен не налаштовано" + +msgid "domain is not trusted" +msgstr "домен не є довіреним" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "назву домену «%(domain)s» слід нормалізувати до %(normalized)s" + +msgid "domain name cannot be longer than 255 characters" +msgstr "назва домену не повинна перевищувати за довжиною 255 символів" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "кожен з елементів ACL має бути відокремлено від інших крапкою з комою" + +msgid "empty DNS label" +msgstr "порожня мітка DNS" + +msgid "empty filter" +msgstr "порожній фільтр" + +msgid "enabledService/configuredService not in ipaConfigString kdc entry" +msgstr "" +"enabledService/configuredService не перебуває у записі kdc ipaConfigString" + +msgid "entries" +msgstr "записи" + +msgid "entry" +msgstr "запис" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "" +"помилка під час розміщення даних для каналу передавання XML-RPC: %(error)s" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "помилка на сервері «%(server)s»: %(error)s" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "спроба виконання ipa-getkeytab зазнала невдачі, номер помилки %d\n" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "" +"очікуваний формат: <0-255> <0-255> <0-65535> " +"парна_кількість_шістнадцяткових_цифр_або_дефіс" + +msgid "file to store DNS records in nsupdate format" +msgstr "файл для зберігання записів DNS у форматі nsupdate" + +msgid "file to store certificate in" +msgstr "файл, у якому зберігатимуться дані сертифіката" + +msgid "filename" +msgstr "назва файла" + +msgid "filter and memberof are mutually exclusive" +msgstr "filter і memberof не можна використовувати разом" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "" +"значенням прапорців (flags) має бути одна з літер, \"S\", \"A\", \"U\" або " +"\"P\"" + +msgid "flags value: allowed interval 0-255" +msgstr "значення прапорців: дозволеним є інтервал від 0 до 255" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "" +"примусово створити запис сервера назв, навіть якщо відповідної назви вузла " +"немає у DNS" + +msgid "force delete of SYSTEM permissions" +msgstr "примусове вилучення прав доступу SYSTEM" + +msgid "force host name even if not in DNS" +msgstr "примусове значення назви вузла, навіть якщо назви немає у DNS" + +msgid "force principal name even if host not in DNS" +msgstr "" +"примусове значення назви реєстраційного запису, навіть якщо вузла немає у DNS" + +msgid "force principal name even if not in DNS" +msgstr "" +"примусове значення назви реєстраційного запису, навіть якщо назви немає у DNS" + +msgid "" +"force service to be created even when host object does not exist to manage it" +msgstr "" +"примусове створення служби, навіть якщо об'єкта вузла для керування не існує" + +#, c-format +msgid "fork() failed\n" +msgstr "невдала спроба виконання fork()\n" + +msgid "" +"format must be specified as\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (degrees latitude)\n" +" d2: [0 .. 180] (degrees longitude)\n" +" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" +" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" +" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" +" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" +" See RFC 1876 for details" +msgstr "" +"формат має бути таким:\n" +" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " +"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" +" where:\n" +" d1: [0 .. 90] (широта у градусах)\n" +" d2: [0 .. 180] (довгота у градусах)\n" +" m1, m2: [0 .. 59] (мінути широти і довготи)\n" +" s1, s2: [0 .. 59.999] (секунди широти і довготи)\n" +" alt: [-100000.00 .. 42849672.95] крок — .01 (висота у метрах)\n" +" siz, hp, vp: [0 .. 90000000.00] (розміри, точність у метрах)\n" +" Див. RFC 1876." + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "" +"формат має бути встановлено так: \"%(format)s\", відповідно до %(rfcs)s" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" +"зона переспрямовування «%(fwzone)s» не є ефективною, оскільки не вказано " +"належного делегування NS у основній зоні «%(authzone)s». Будь ласка, додайте " +"запис NS «%(ns_rec)s» до батьківської зони «%(authzone)s»." + +msgid "gid cannot be set for external group" +msgstr "Не можна встановлювати gid для зовнішньої групи" + +msgid "givenname is required" +msgstr "слід вказати ім’я" + +msgid "group" +msgstr "група" + +msgid "group runAs" +msgstr "група, від імені якої виконуватиметься" + +msgid "group, permission and self are mutually exclusive" +msgstr "group, permission і self не можна використовувати разом" + +msgid "groups" +msgstr "групи" + +msgid "groups to add" +msgstr "групи для додавання" + +msgid "groups to exclude from migration" +msgstr "групи, які слід виключити з перенесення" + +msgid "groups to remove" +msgstr "групи для вилучення" + +msgid "host" +msgstr "вузол" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "" +"не можна встановлювати для категорії вузлів значення «all», доки є записи " +"дозволених вузлів" + +msgid "host group" +msgstr "група вузлів" + +msgid "host groups" +msgstr "групи вузлів" + +msgid "host groups to add" +msgstr "групи вузлів для додавання" + +msgid "host groups to remove" +msgstr "групи вузлів для вилучення" + +msgid "host masks of allowed hosts" +msgstr "маски для дозволених вузлів" + +msgid "hostgroup" +msgstr "група вузлів" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"Групу вузлів з назвою «%s» вже створено. Групи вузлів і мережеві групи мають " +"спільний простір назв." + +msgid "hostgroups" +msgstr "групи вузлів" + +msgid "hostname" +msgstr "назва вузла" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "назва вузла містить лише порожню мітку (послідовні крапки)" #, python-format msgid "" @@ -32095,315 +31867,500 @@ msgstr "" "назва вузла у призначенні запиту, «%(cn)s», не збігається з назвою вузла " "реєстраційного запису, «%(hostname)s»" -msgid "DN commonName does not match user's login" -msgstr "У commonName DN не збігається із ім’ям користувача" +msgid "hosts" +msgstr "вузли" -msgid "DN emailAddress does not match any of user's email addresses" +msgid "hosts cannot be added when host category='all'" +msgstr "не можна додавати записи вузлів, якщо категорія вузлів=«all»" + +msgid "hosts cannot be set when type is 'group'" +msgstr "не можна вказувати вузли, якщо типом є «group»" + +msgid "hosts to add" +msgstr "вузли для додавання" + +msgid "hosts to remove" +msgstr "вузли для вилучення" + +msgid "id range" +msgstr "діапазон ідентифікаторів" + +msgid "id range type" +msgstr "тип діапазону ідентифікаторів" + +msgid "incomplete time value" +msgstr "неповне часове значення" + +msgid "incorrect type" +msgstr "помилковий тип" + +msgid "integer to order the Sudo rules" +msgstr "ціле число для впорядковування правил sudo" + +#, python-format +msgid "invalid '%(name)s': %(error)s" +msgstr "некоректне «%(name)s»: %(error)s" + +#, python-format +msgid "invalid DN (%s)" +msgstr "некоректне DN (%s)" + +msgid "invalid IP address format" +msgstr "некоректний формат запису IP-адреси" + +#, python-format +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" msgstr "" -"emailAddress DN не збігається із жодною адресою електронної пошти користувача" +"некоректна версія IP-адреси (маємо: %(value)d, має бути: %(required_value)d)!" + +msgid "invalid IP network format" +msgstr "некоректний формат запису мережі IP" + +msgid "invalid Profile ID" +msgstr "некоректний ідентифікатор профілю" + +#, python-brace-format +msgid "invalid SID: {SID}" +msgstr "некоректний SID: {SID}" + +msgid "invalid SSH public key" +msgstr "некоректний відкритий ключ SSH" + +msgid "invalid address format" +msgstr "некоректний формат адреси" + +msgid "invalid attribute name" +msgstr "некоректна назва атрибута" + +msgid "invalid domain name" +msgstr "некоректна назва домену" + +#, python-format +msgid "invalid domain-name: %s" +msgstr "некоректна назва домену: %s" + +msgid "invalid domain-name: not fully qualified" +msgstr "некоректна назва домену: назва не є повною" + +#, python-format +msgid "invalid e-mail format: %(email)s" +msgstr "некоректний формат адреси електронної пошти: %(email)s" + +msgid "invalid escape code in domain name" +msgstr "некоректний керівний код у назві домену" + +msgid "invalid hostmask" +msgstr "некоректна маска вузлів" + +msgid "invalid port number" +msgstr "некоректний номер порту" + +msgid "invalid serial number 0" +msgstr "некоректний серійний номер 0" + +msgid "invalid valid hex" +msgstr "некоректне шістнадцяткове значення" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "Помилкові права доступу до ipa-getkeytab?\n" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "Не знайдено ipa-getkeytab\n" + +msgid "is required" +msgstr "є обов’язковим" + +msgid "iterations value: allowed interval 0-65535" +msgstr "значення кількості ітерацій: дозволеним є інтервал від 0 до 65535" + +#, c-format +msgid "json_dumps() failed\n" +msgstr "помилка json_dumps()\n" + +#, c-format +msgid "json_pack_ex() failed: %s\n" +msgstr "помилка json_pack_ex(): %s\n" + +msgid "kerberos ticket policy settings" +msgstr "параметри правил квитків kerberos" + +#, python-format +msgid "key %(key)s already exists" +msgstr "запис ключа %(key)s вже існує" + +#, python-format +msgid "key named %(key)s already exists" +msgstr "ключ з назвою %(key)s вже існує" + +msgid "keytab is a dangling symlink and owned by another user.\n" +msgstr "" +"keytab є осиротілим символічним посиланням, яке належить іншому " +"користувачу.\n" + +#, c-format +msgid "krb5_kt_close %1$d: %2$s\n" +msgstr "krb5_kt_close %1$d: %2$s\n" + +#, c-format +msgid "krb5_kt_get_entry %1$d: %2$s\n" +msgstr "krb5_kt_get_entry %1$d: %2$s\n" + +#, c-format +msgid "krb5_kt_remove_entry %1$d: %2$s\n" +msgstr "krb5_kt_remove_entry %1$d: %2$s\n" + +#, c-format +msgid "krb5_parse_name %1$d: %2$s\n" +msgstr "krb5_parse_name %1$d: %2$s\n" + +#, c-format +msgid "krb5_unparse_name %1$d: %2$s\n" +msgstr "krb5_unparse_name %1$d: %2$s\n" + +#, python-format +msgid "krbtgt certs can use only the %s profile" +msgstr "Сертифікати krbtgt можуть використовувати лише профіль %s" + +#, c-format +msgid "kvno %d\n" +msgstr "kvno %d\n" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "у лівому вузлі ({host}) не передбачено підтримки суфіксів «{suff}»" + +msgid "left node and right node must not be the same" +msgstr "лівий і правий вузли повинні бути різними вузлами" + +#, python-format +msgid "left node is not a topology node: %(leftnode)s" +msgstr "лівий вузол не є вузлом топології: %(leftnode)s" + +msgid "left or right node has to be specified" +msgstr "слід вказати лівий або правий вузол" + +msgid "limits exceeded for this query" +msgstr "цим запитом перевищено обмеження" + +msgid "local domain range" +msgstr "локальний діапазон доменів" + +msgid "location" +msgstr "місце" + +msgid "locations" +msgstr "місця" + +#, python-format +msgid "manager %(manager)s not found" +msgstr "керування %(manager)s не знайдено" + +#, python-format +msgid "map %(map)s already exists" +msgstr "запис карти %(map)s вже існує" + +msgid "maps not connected to /etc/auto.master:" +msgstr "карти, не з’єднані з /etc/auto.master:" + +msgid "match the common name exactly" +msgstr "повна відповідність загальній назві" + +msgid "maximum serial number" +msgstr "максимальний серійний номер" + +#, python-format +msgid "member %s" +msgstr "%s учасника" + +msgid "member Certificate Profile" +msgstr "учасник Профіль сертифікатів" + +msgid "member HBAC service" +msgstr "служба HBAC учасника" + +msgid "member HBAC service group" +msgstr "група служб учасника HBAC" + +msgid "member group" +msgstr "група учасника" + +msgid "member host" +msgstr "вузол-учасник" + +msgid "member host group" +msgstr "група вузлів учасника" + +msgid "member netgroup" +msgstr "мережева група учасника" + +msgid "member principal" +msgstr "учасник «реєстраційний запис»" + +msgid "member privilege" +msgstr "привілеї учасника" + +msgid "member role" +msgstr "роль учасника" + +msgid "member service" +msgstr "учасник служба" + +msgid "member service delegation target" +msgstr "учасник призначення делегування служб" + +msgid "member sudo command" +msgstr "команда учасника sudo" + +msgid "member sudo command group" +msgstr "учасник група команд sudo" + +msgid "member user" +msgstr "користувач учасника" + +msgid "minimum serial number" +msgstr "мінімальний серійний номер" + +msgid "missing base_id" +msgstr "не вистачає base_id" + +msgid "modifying primary key is not allowed" +msgstr "зміну основного ключа заборонено" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "" +"точка монтування вказується відносно батьківської картки, її запис не може " +"починатися з «/»" + +#, python-format +msgid "must be \"%s\"" +msgstr "має бути «%s»" + +#, python-format +msgid "must be '%(value)s'" +msgstr "має бути «%(value)s»" + +msgid "must be DNS name" +msgstr "має бути назвою DNS" + +msgid "must be Kerberos principal" +msgstr "має бути реєстраційним записом Kerberos" + +msgid "must be TRUE or FALSE" +msgstr "має дорівнювати TRUE або FALSE" + +msgid "must be True or False" +msgstr "має дорівнювати True або False" + +msgid "must be Unicode text" +msgstr "має бути текстом у Unicode" + +msgid "must be a certificate" +msgstr "має бути сертифікатом" + +msgid "must be a certificate signing request" +msgstr "має бути запитом щодо підписування сертифіката" + +msgid "must be a decimal number" +msgstr "має бути десятковим числом" + +msgid "must be absolute" +msgstr "має бути абсолютною" + +msgid "must be an integer" +msgstr "має бути цілим числом" + +#, python-format +msgid "must be at least %(minlength)d bytes" +msgstr "має бути розміром, не менше за %(minlength)d байтів" + +#, python-format +msgid "must be at least %(minlength)d characters" +msgstr "має бути не меншим за %(minlength)d символів довжиною" + +#, python-format +msgid "must be at least %(minvalue)d" +msgstr "має бути числом, не меншим за %(minvalue)d" + +#, python-format +msgid "must be at least %(minvalue)s" +msgstr "має бути принаймні %(minvalue)s" + +msgid "must be at least 0" +msgstr "має бути принаймні 0" + +msgid "must be at least 1" +msgstr "має бути принаймні 1" + +msgid "must be at least 10" +msgstr "має бути принаймні 10" + +msgid "must be binary data" +msgstr "має бути бінарними даними" + +msgid "must be datetime value" +msgstr "має бути значенням дати і часу" + +msgid "must be dictionary" +msgstr "має бути словником" + +msgid "must be enabled only on a single master" +msgstr "має бути увімкнено лише на одному основному" + +msgid "must be enclosed in parentheses" +msgstr "слід брати у дужки" + +#, python-format +msgid "must be exactly %(length)d bytes" +msgstr "має бути розміром точно у %(length)d байтів" + +#, python-format +msgid "must be exactly %(length)d characters" +msgstr "має бути точно %(length)d символів у довжину" + +#, python-format +msgid "must be one of %(values)s" +msgstr "має бути одним з таких значень: %(values)s" + +msgid "must be relative" +msgstr "має бути відносною" + +msgid "must contain a tuple (list, dict)" +msgstr "має містити кортеж (список, словник)" + +#, python-format +msgid "must equal %r" +msgstr "має дорівнювати %r" + +#, python-format +msgid "must have %(role)s role enabled" +msgstr "має бути увімкнено роль %(role)s" + +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "має відповідати шаблону «%(pattern)s»" + +#, python-format +msgid "must not contain trailing dot: %s" +msgstr "не може використовувати кінцеву крапку: %s" + +msgid "netgroup" +msgstr "мережева група" #, python-format msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "Недостатні привілеї «write» до атрибута «userCertificate» запису «%s»." +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "" +"Мережеву групу з назвою «%s» вже створено. Групи вузлів і мережеві групи " +"мають спільний простір назв." + +msgid "netgroups" +msgstr "мережеві групи" + +msgid "netgroups to add" +msgstr "мережеві групи, які слід додати" + +msgid "netgroups to remove" +msgstr "мережеві групи для вилучення" #, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "" -"використання типу альтернативної назви об’єкта %s заборонено для " -"реєстраційних записів користувачів" +msgid "no command nor help topic '%(topic)s'" +msgstr "не виявлено ні команди, ні запису довідки «%(topic)s»" + +msgid "no modifications to be performed" +msgstr "змін не внесено" + +msgid "no trusted domain is configured" +msgstr "Не налаштовано жодного довіреного домену" + +msgid "no trusted domain matched the specified flat name" +msgstr "вказаній простій назві не відповідає жоден довірений домен" + +msgid "not allowed to enable SID generation" +msgstr "заборонено вмикати створення SID" + +msgid "not allowed to modify group entries" +msgstr "заборонено змінювати записи груп" + +msgid "not allowed to modify user entries" +msgstr "заборонено змінювати записи користувачів" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "виконувати цю дію заборонено: %s" + +msgid "not allowed to perform server connection check" +msgstr "не дозволено виконувати перевірку з’єднання сервера" + +msgid "not allowed to remotely add agent" +msgstr "заборонено віддалено додавати агентів" + +msgid "not found" +msgstr "не знайдено" + +msgid "not fully qualified" +msgstr "вказано не повністю" + +msgid "not modifiable on managed permissions" +msgstr "не можна змінювати для керованих прав доступу" #, python-format msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" msgstr "" -"Реєстраційного запису служби для альтернативної назви об’єкта %s запиту щодо " -"сертифіката не існує" +"числовий клас «%(cls)s» не включено до списку дозволених числових класів: " +"%(allowed)s" + +msgid "number of passwords" +msgstr "кількість паролів" + +#, python-format +msgid "objectclass %s not found" +msgstr "клас об’єктів %s не знайдено" + +msgid "one or more values to remove" +msgstr "одне або декілька значень для вилучення" + +msgid "only \"ad\" is supported" +msgstr "передбачено підтримку лише «ad»" + +msgid "only available on managed permissions" +msgstr "доступне лише для керованих прав доступу" #, python-format msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" msgstr "" -"Недостатні привілеї для створення сертифіката з альтернативною назвою " -"призначення «%s»." +"можна використовувати лише літери, цифри, %(chars)s. Символ %(chars2)s не " +"повинен бути першим або останнім символом мітки DNS." + +msgid "only master zones can contain records" +msgstr "записи можуть містити лише основні зони" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "" +"можна використовувати лише один запис CNAME на назву (RFC 2136, розділ 1.1.5)" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "" +"можна використовувати лише один запис DNAME на назву (RFC 6672, розділ 2.4)" + +msgid "only one node can be specified" +msgstr "можна вказувати лише один вузол" + +msgid "operation not defined" +msgstr "дію не визначено" #, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "" -"Реєстраційний запис «%s» у альтернативній назві об’єкта не відповідає " -"запитаному реєстраційному запису" +msgid "option was renamed; use %s" +msgstr "назву параметра змінено; користуйтеся новою назвою — %s" -msgid "RFC822Name does not match any of user's email addresses" -msgstr "" -"RFC822Name не збігається зі жодною адресою електронної пошти користувача" - -#, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "" -"використання типу альтернативної назви об’єкта %s заборонено для " -"реєстраційних записів, які не пов’язано із користувачами" - -#, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "Використання типу альтернативної назви об’єкта %s заборонено" - -#, python-format -msgid "CA '%s' is disabled" -msgstr "Службу сертифікації «%s» вимкнено" - -msgid "'add' option" -msgstr "параметр «add»" - -msgid "The principal for this request doesn't exist." -msgstr "Реєстраційного запису для цього запиту не існує." - -#, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "IP-адреса у subjectAltName (%s) є недоступною з назв DNS" - -#, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "IP-адреса у subjectAltName (%s) не містить запису PTR" - -#, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "PTR-запис для SAN IP (%s) не відповідає записам A/AAAA" - -msgid "Revoked" -msgstr "Анульований" - -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "" -"Причина відкликання сертифіката (0-10). Введіть «ipa help cert», щоб " -"ознайомитися із подробицями причин відкликання. " - -#, python-format -msgid "Owner %s" -msgstr "Власник %s" - -#, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "" -"Не знайдено сертифікат із серійним номером %(serial)s, виданий CA «%(ca)s»" - -msgid "7 is not a valid revocation reason" -msgstr "7 не є коректною причиною відкликання" - -msgid "Status of the certificate" -msgstr "Стан сертифіката" - -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "Результати мають містити лише атрибут основного ключа («сертифікат»)" - -#, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "встановлено відповідність %(count)d сертифіката" -msgstr[1] "встановлено відповідність %(count)d сертифікатів" -msgstr[2] "встановлено відповідність %(count)d сертифікатів" - -#, python-format -msgid "Search for certificates with these owner %s." -msgstr "Шукати сертифікати із вказаними %s власника." - -#, python-format -msgid "Search for certificates without these owner %s." -msgstr "Шукати сертифікати, власником яких не є %s." - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" -"\n" -"Правила sudo\n" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" -"\n" -"Sudo (su \"do\") надає системному адміністратору змогу делегувати\n" -"повноваження певним користувачам (або групам користувачів) на виконання\n" -"деяких (або усіх) команд від імені адміністратора (root) або іншого\n" -"користувача, зберігаючи водночас журнал виконання команд та\n" -"аргументів.\n" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" -"\n" -"У IPA передбачено декілька параметрів налаштовування роботи sudo:\n" -" Users: користувачі або групи, які можуть викликати sudo.\n" -" Hosts: вузли або групи вузлів, користувачі якого можуть викликати sudo.\n" -" Allow Command: специфічні команди, які можна виконувати за допомогою " -"sudo.\n" -" Deny Command: специфічні команди, які не можна виконувати за допомогою " -"sudo.\n" -" RunAsUser: користувачі або групи, від імені яких sudo виконуватиме " -"команди.\n" -" RunAsGroup: групи, ідентифікатори яких буде використано sudo для " -"виконання команд.\n" -" Options: різноманітні параметри sudoers, які можуть змінити поведінку " -"sudo.\n" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" -"\n" -"Усі параметри слід додавати окремо. Перевірки коректності щодо обробки\n" -"параметра у sudo або коректності формату не виконуватиметься. Також слід\n" -"окремо встановлювати значення змінних середовища. Наприклад,\n" -"env_keep=\"ЩОСЬ ДЕСЬ\" у sudoers має бути представлено як\n" -"--sudooption env_keep=ЩОСЬ --sudooption env_keep+=ДЕСЬ.\n" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" -"\n" -"До правила sudo можна додати порядок, який керуватиме порядком\n" -"обробки записів (якщо такий порядок передбачено на клієнтському боці).\n" -"Порядок визначається числовим індексом, який не повинен повторюватися.\n" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" -"\n" -"У IPA передбачено визначений binddn для використання з sudo, який " -"розташовано у\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" -"\n" -"Щоб увімкнути binddn, віддайте таку команду для встановлення пароля:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" -"\n" -" Створити правило:\n" -" ipa sudorule-add readfiles\n" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" -"\n" -" Додати об’єкт команди sudo і записати його як дозволену команду до " -"правила:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" -"\n" -" Додати запис вузла до правила:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" -"\n" -" Додати запис користувача до правила:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" -"\n" -" Додати особливе правило sudo для типового налаштовування сервера sudo:\n" -" ipa sudorule-add defaults\n" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" -"\n" -" Встановити типовий варіант дій для sudo:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" - -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" -"\n" -" Встановити декілька типових параметрів для sudo:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" -"\n" -" Встановити переходи типу і ролі SELinux на правило:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" - -msgid "this option has been deprecated." -msgstr "цей параметр вважається застарілим." - -msgid "sudo rules" -msgstr "правила sudo" - -msgid "Sudo Rules" -msgstr "Правила Sudo" - -msgid "Sudo Rule" -msgstr "Правило sudo" +msgid "options are not allowed" +msgstr "не можна використовувати параметри" #, python-format msgid "order must be a unique value (%(order)d already used by %(rule)s)" @@ -32411,269 +32368,40 @@ msgstr "" "порядковий номер повинен мати унікальне значення (%(order)d вже використано " "для %(rule)s)" -#, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "Додано правило sudo «%(value)s»" +#, c-format +msgid "out of memory\n" +msgstr "не вистачає пам'яті\n" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "" +"дані поза зоною: назва запису має бути піддоменом зони або відносною назвою" #, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "Вилучено правило sudo «%(value)s»" +msgid "overlapping arguments and options: %(names)s" +msgstr "перекриття аргументів і параметрів: %(names)s" #, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "Змінено правило sudo «%(value)s»" +msgid "owner %s" +msgstr "власник %s" + +msgid "owner group" +msgstr "група-власник" #, python-format msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" msgstr "" -"Значенням категорії %(type)s не можна встановлювати «all», якщо існують " -"дозволені %(objects)s" +"не можна використовувати шаблон назви домену у полі власника записів " +"%(types)s (RFC 4592, розділ 4)" -msgid "users" -msgstr "користувачі" +msgid "owner service" +msgstr "служба-власник" -msgid "command" -msgstr "команда" - -msgid "commands" -msgstr "команди" - -msgid "runAs user" -msgstr "користувач, від імені якого виконуватиметься" - -msgid "runAs users" -msgstr "користувачі, від імені яких виконуватиметься" - -msgid "group runAs" -msgstr "група, від імені якої виконуватиметься" - -msgid "runAs groups" -msgstr "групи, від імені яких виконуватиметься" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "встановлено відповідність %(count)d правила sudo" -msgstr[1] "встановлено відповідність %(count)d правил sudo" -msgstr[2] "встановлено відповідність %(count)d правил sudo" - -msgid "commands cannot be added when command category='all'" -msgstr "не можна додавати команди, якщо категорія команд=«all»" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "" -"не можна додавати записи користувачів, якщо категорія запуску від імені " -"користувачів або запуску від імені груп=«all»" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "Не можна вказувати «%(name)s» як ім’я користувача у записі RunAsUser" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "Назва групи «%(name)s» є неприйнятною для RunAsUser" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "Назва групи «%(name)s» є неприйнятною для RunAsGroup" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "Додано користувача «%(value)s»" - -msgid "Default group for new users is not POSIX" -msgstr "Типовою групою для нових користувачів не є група POSIX" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "Вилучено користувача «%(value)s»" - -#, python-format -msgid "Preserved user \"%(value)s\"" -msgstr "Збережений користувач «%(value)s»" - -#, python-format -msgid "%s: user is already preserved" -msgstr "%s: запис користувача вже захищено" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "Змінено користувача «%(value)s»" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "Відновлено обліковий запис користувача «%(value)s»" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "користувач «%s» вже є активним" - -#, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "Обліковий запис користувача етапу «%(value)s»" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "Вимкнено обліковий запис користувача «%(value)s»" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "Увімкнено обліковий запис користувача «%(value)s»" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" -"\n" -" Розблокувати обліковий запис користувача\n" -"\n" -" Обліковий запис може бути заблоковано, якщо відповідно до правил " -"безпеки\n" -" користувач перевищить обмеження на кількість введення помилкових " -"паролів\n" -" протягом певного часу. Запис блокується тимчасово, його може бути\n" -" розблоковано адміністратором." - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "Розблоковано обліковий запис «%(value)s»" - -msgid "Failed logins" -msgstr "Кількість невдалих спроб увійти" - -msgid "Last successful authentication" -msgstr "Останнє успішне розпізнавання" - -msgid "Last failed authentication" -msgstr "Останнє невдале розпізнавання" - -msgid "Time now" -msgstr "Поточний час" - -msgid "Password grace count" -msgstr "Лічильник лояльності паролів" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" -"\n" -" Стан блокування облікового запису користувача\n" -"\n" -" Обліковий запис може бути заблоковано, якщо введено неправильний пароль\n" -" забагато разів протягом певного проміжку часу, який визначається " -"правилами\n" -" роботи з паролями. Блокування облікового запису є тимчасовим станом, " -"його\n" -" може бути розблоковано адміністратором.\n" -"\n" -" Ця програма з’єднується з кожним основним вузлом IPA і показує стан\n" -" блокування на кожному з них.\n" -"\n" -" Щоб визначити, чи слід блокувати обліковий запис на певному сервері, " -"слід\n" -" виконати порівняння кількості помилкових спроб входу та час останньої\n" -" невдалої спроби з еталонними значеннями. Обліковий запис буде " -"заблоковано,\n" -" якщо буде перевищено кількість maxfail помилкових спроб протягом " -"проміжку\n" -" часу failinterval. Відповідні значення задаються правилами обробки " -"паролів,\n" -" пов’язаними з обліковим записом користувача.\n" -"\n" -" Зміни до лічильника помилкових спроб входу вносяться, лише коли " -"користувач\n" -" виконує спробу увійти, тому може статися так, що обліковий запис " -"заблоковано,\n" -" хоча час, що минув з останньої помилкової спроби, перевищує час " -"блокування\n" -" (lockouttime), заданий правилам обробки паролів. Це означає, що " -"користувач\n" -" може увійти до системи знову. " - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "Помилка %(host)s: %(error)s" - -#, python-format -msgid "%(host)s failed" -msgstr "Помилка %(host)s" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "Обліковий запис вимкнено: %(disabled)s" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "Додано сертифікати до запису користувача «%(value)s»" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "Вилучено сертифікати із запису користувача «%(value)s»" - -msgid "Add new principal alias to the user entry" -msgstr "Додати новий псевдонім реєстраційного запису до запису користувача" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "Додано нові псевдоніми до запису користувача «%(value)s»" - -msgid "Remove principal alias from the user entry" -msgstr "Вилучити псевдонім реєстраційного запису із запису користувача" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "Вилучити псевдоніми із запису користувача «%(value)s»" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "для усіх основних серверів має бути увімкнено роль %(role)s" - -#, python-format -msgid "must have %(role)s role enabled" -msgstr "має бути увімкнено роль %(role)s" - -msgid "must be enabled only on a single master" -msgstr "має бути увімкнено лише на одному основному" - -msgid "Request must be a dict" -msgstr "Запит має належати до типу словника (dict)" - -msgid "Request is missing \"method\"" -msgstr "У запиті не вказано метод (\"method\")" - -msgid "Request is missing \"params\"" -msgstr "У запиті не вказано параметри (\"params\")" +msgid "owner user" +msgstr "користувач-власник" msgid "params must be a list" msgstr "params має бути списком (list)" @@ -32687,155 +32415,375 @@ msgstr "params[0] (або аргументи) має бути списком (li msgid "params[1] (aka options) must be a dict" msgstr "params[1] (або параметри) має належати до типу словника (dict)" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" -"\n" -"Топологія реплікації у суфіксі «%(suffix)s» є нез’єднаною:\n" -"%(errors)s" +msgid "password" +msgstr "пароль" + +msgid "password policies" +msgstr "правила щодо паролів" + +msgid "password policy" +msgstr "правила для паролів" + +msgid "password to use if not using kerberos" +msgstr "пароль, який слід використати, якщо не використовується kerberos" + +msgid "permission" +msgstr "права доступу" #, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" +msgid "permission \"%(value)s\" already exists" +msgstr "право доступу «%(value)s» вже існує" + +msgid "permissions" +msgstr "права доступу" + +msgid "pkinit" +msgstr "pkinit" + +msgid "preserve" +msgstr "зберегти" + +msgid "preserve and no-preserve cannot be both set" msgstr "" -"\n" -"Вилучення запису «%(hostname)s» призведе до нез’єднаної топології у суфіксу " -"«%(suffix)s»:\n" -"%(errors)s" +"не можна одночасно встановлювати ознаку зарезервованості та " +"незарезервованості" + +#, c-format +msgid "principal not found\n" +msgstr "реєстраційного запису не знайдено\n" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "реєстраційного запису не знайдено у XML-RPC відповіді\n" + +msgid "principal to add" +msgstr "реєстраційний запис для додавання" + +msgid "principal to remove" +msgstr "реєстраційний запис для вилучення" + +msgid "priority cannot be set on global policy" +msgstr "для загальних правил не може встановлювати пріоритети" #, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" msgstr "" -"Топологія не дозволяє серверу %(server)s виконувати реплікацію із серверами:" +"пріоритет повинен мати унікальне значення (%(prio)d вже використано для " +"%(gname)s)" + +msgid "privilege" +msgstr "привілей" + +msgid "privileged group" +msgstr "привілейована група" + +msgid "privileged hostgroup" +msgstr "привілейована група вузлів" + +msgid "privileged service delegation rule" +msgstr "привілейоване правило делегування служб" + +msgid "privileged service delegation target" +msgstr "привілейована ціль делегування служб" + +msgid "privileges" +msgstr "привілеї" + +msgid "privileges to add" +msgstr "привілеї для додавання" + +msgid "privileges to remove" +msgstr "привілеї для вилучення" msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" +"profile category cannot be set to 'all' while there are allowed profiles" msgstr "" -"\n" -"Класи для керування довіреними приєднаннями за допомогою викликів DCE-RPC\n" -"\n" -"Код цього модуля жорстко залежить від вмісту пакунка samba4-python\n" -"та обгорток для мови Python у Samba4.\n" +"не можна встановлювати для категорії профілів значення «all», доки є записи " +"дозволених профілів" -msgid "CIFS server denied your credentials" -msgstr "Ваші реєстраційні дані відхилено сервером CIFS" +msgid "profiles cannot be added when profile category='all'" +msgstr "профілі не можна додавати, якщо категорія профілів «all»" -msgid "communication with CIFS server was unsuccessful" -msgstr "спроба обмінятися даними з сервером CIFS зазнала невдачі" +msgid "pyhbac is not installed." +msgstr "pyhbac не встановлено." -msgid "AD domain controller" -msgstr "Контролер домену AD" +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "pysss_murmur на сервері не доступний, отже base-id не надано." -msgid "unsupported functional level" -msgstr "непідтримуваний функціональний рівень" - -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "" -"Домен AD скаржиться на послідовність команд встановлення зв’язку. Це, " -"наприклад, може означати розсинхронізацію часу між комп’ютерами, які " -"обмінюються даними." - -msgid "Cannot find specified domain or server name" -msgstr "Не вдалося знайти домену або сервера з вказаною назвою" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "" -"AD DC не вдалося отримати доступ до жодного з контролерів домену IPA. " -"Найімовірніше, цю помилку пов’язано із проблемами з DNS або брандмауером" - -msgid "At least the domain or IP address should be specified" -msgstr "Слід вказати принаймні домен або IP-адресу" +msgid "python-yubico is not installed." +msgstr "python-yubico не встановлено." #, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "запит «%(owner)s %(rtype)s» за допомогою EDNS0: %(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "запит «%(owner)s %(rtype)s»: %(error)s" + +msgid "range exists" +msgstr "діапазон вже існує" + msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" +"range modification leaving objects with ID out of the defined range is not " +"allowed" msgstr "" -"Помилка обміну даними з сервером CIFS: код «%(num)s», повідомлення " -"«%(message)s» (обидва значення можуть бути «None»)" +"не можна виконувати зміни діапазону, у результаті яких виникають об’єкти з " +"ідентифікаторами поза визначеним діапазоном" -msgid "no trusted domain is configured" -msgstr "Не налаштовано жодного довіреного домену" +msgid "range type change" +msgstr "зміна типу діапазону" -msgid "domain is not configured" -msgstr "домен не налаштовано" +#, c-format +msgid "read error\n" +msgstr "помилка читання\n" -msgid "SID is not valid" -msgstr "SID не є чинним" +#, c-format +msgid "realm not found\n" +msgstr "область не знайдено\n" -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "SID не збігається точно з будь-яким з SID довірених доменів" - -msgid "SID does not match any trusted domain" -msgstr "SID не відповідає жодному з довірених доменів" - -msgid "Trust setup" -msgstr "Налаштування довіри" - -msgid "Our domain is not configured" -msgstr "Наш домен не налаштовано" - -msgid "No trusted domain is not configured" -msgstr "Не налаштовано жодного довіреного домену" - -msgid "trusted domain object" -msgstr "об’єкт довіреного домену" - -msgid "domain is not trusted" -msgstr "домен не є довіреним" - -msgid "no trusted domain matched the specified flat name" -msgstr "вказаній простій назві не відповідає жоден довірений домен" - -msgid "trusted domain object not found" -msgstr "об’єкт довіреного домену не знайдено" - -msgid "Object does not belong to a trusted domain" -msgstr "Об'єкт не належить до довіреного домену" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "SSSD не вдалося визначити за об’єктом коректний SID" - -msgid "Ambiguous search, user domain was not specified" -msgstr "Неоднозначні параметри пошуку: не вказано домену користувача" - -msgid "Trusted domain did not return a unique object" -msgstr "Довіреним доменом не повернуто унікального об’єкта" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "Довіреним доменом не повернуто коректного SID об’єкта" - -msgid "trusted domain user not found" -msgstr "не знайдено користувача довіреного домену" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "Не вдалося отримати список GC довіреного домену" - -msgid "CIFS credentials object" -msgstr "Об’єкт реєстраційних даних CIFS" +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "" +"область або суфікс UPN перекриваються із простором назв довіреного домену" #, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "Ваші реєстраційні дані відхилено сервером CIFS %(host)s" +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "" +"запис «%(owner)s %(rtype)s» не пройшов перевірки DNSSEC на сервері %(ip)s" #, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgid "removed attribute values from entry %(value)s" +msgstr "вилучено значення атрибутів із запису %(value)s" + +#, python-format +msgid "request failed with HTTP status %d" +msgstr "помилка запиту зі станом HTTP %d" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "у відповіді XML-RPC не знайдено результату\n" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." msgstr "" -"Не вдалося встановити LSA-з’єднання з %(host)s. Чи запущено сервер CIFS?" +"отримати і вивести всі атрибути з сервера. Стосується лише виводу команд." + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "у правому вузлі ({host}) не передбачено підтримки суфіксів «{suff}»" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "правий вузол не є вузлом топології: %(rightnode)s" + +msgid "role" +msgstr "роль" + +msgid "roles" +msgstr "ролі" + +msgid "roles to add" +msgstr "ролі для додавання" + +msgid "roles to remove" +msgstr "ролі для вилучення" + +msgid "runAs groups" +msgstr "групи, від імені яких виконуватиметься" + +msgid "runAs user" +msgstr "користувач, від імені якого виконуватиметься" + +msgid "runAs users" +msgstr "користувачі, від імені яких виконуватиметься" + +#, python-format +msgid "salt value: %(err)s" +msgstr "значення солі: %(err)s" + +msgid "search for POSIX groups" +msgstr "шукати групи POSIX" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "" +"шукати групи з підтримкою зовнішніх учасників поза IPA з довірених доменів" + +msgid "search for managed groups" +msgstr "шукати керовані групи" + +msgid "search for non-POSIX groups" +msgstr "шукати групи, які не є групами POSIX" + +msgid "search for private groups" +msgstr "шукати закриті групи" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "" +"список результатів пошуку об’єктів міграції\n" +"було обрізано сервером; ймовірно,\n" +"процес міграції не завершено\n" + +msgid "seconds" +msgstr "секунд" + +msgid "segment" +msgstr "сегмент" + +msgid "segments" +msgstr "сегменти" + +msgid "self service permission" +msgstr "права доступу автослужби" + +msgid "self service permissions" +msgstr "права доступу до автослужби" + +msgid "server" +msgstr "сервер" + +msgid "server role" +msgstr "роль сервера" + +msgid "server roles" +msgstr "ролі сервера" + +msgid "servers" +msgstr "сервери" + +msgid "service" +msgstr "служба" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "" +"не можна встановлювати для категорії служб значення «all», доки є дозволені " +"служби" + +msgid "service delegation rule" +msgstr "правило делегування служби" + +msgid "service delegation rules" +msgstr "правила делегування служб" + +msgid "service delegation target" +msgstr "ціль делегування служб" + +msgid "service delegation targets" +msgstr "призначення делегування служб" + +msgid "service delegation targets to add" +msgstr "призначення делегування служб для додавання" + +msgid "service delegation targets to remove" +msgstr "призначення делегування служб для вилучення" + +msgid "services" +msgstr "служби" + +msgid "services cannot be added when service category='all'" +msgstr "не можна додавати записи служб, якщо категорія служб=«all»" + +msgid "services to add" +msgstr "служби для додавання" + +msgid "services to remove" +msgstr "служби для вилучення" + +msgid "setting Authoritative nameserver" +msgstr "встановлення основного сервера назв" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "не можна використовувати шаблон назви домену (RFC 4592, розділ 4)" + +msgid "sidgen_was_run" +msgstr "sidgen_was_run" + +msgid "single label {}s are not supported" +msgstr "підтримки одинарних міток {}ів не передбачено" + +msgid "skip reverse DNS detection" +msgstr "пропустити зворотне визначення DNS" + +msgid "sn is required" +msgstr "слід вказати sn" + +msgid "stage user" +msgstr "користувач етапу" + +msgid "stage users" +msgstr "користувачі етапу" + +msgid "subgidnumber must be equal to subuidnumber" +msgstr "subgidnumber має бути рівним subuidnumber" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "" +"використання типу альтернативної назви об’єкта %s заборонено для " +"реєстраційних записів, які не пов’язано із користувачами" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "" +"використання типу альтернативної назви об’єкта %s заборонено для " +"реєстраційних записів користувачів" + +msgid "subtree and type are mutually exclusive" +msgstr "не можна одночасно використовувати subtree і type" + +msgid "sudo command" +msgstr "команда sudo" + +msgid "sudo command group" +msgstr "група команд sudo" + +msgid "sudo command groups" +msgstr "групи команд sudo" + +msgid "sudo command groups to add" +msgstr "групи команд sudo для додавання" + +msgid "sudo command groups to remove" +msgstr "групи команд sudo для вилучення" + +msgid "sudo commands" +msgstr "команди sudo" + +msgid "sudo commands to add" +msgstr "команди sudo, які слід додати" + +msgid "sudo commands to remove" +msgstr "команди sudo для вилучення" + +msgid "sudo rule" +msgstr "правило sudo" + +msgid "sudo rules" +msgstr "правила sudo" + +msgid "suffix" +msgstr "суфікс" + +msgid "suffixes" +msgstr "суфікси" + +msgid "system ID View" +msgstr "системний перегляд ідентифікаторів" + +msgid "" +"system IPA objects (e.g. system groups, user private groups) cannot be " +"overridden" +msgstr "" +"системні об’єкти IPA (наприклад системні групи, приватні групи користувачів) " +"не може бути перевизначено" + +msgid "target and targetgroup are mutually exclusive" +msgstr "не можна одночасно використовувати target і targetgroup" #, python-format msgid "" @@ -32844,113 +32792,165 @@ msgstr "" "сервер IPA і віддалений домен не можуть використовувати спільно ту саму " "назву NetBIOS: %s" +msgid "the certificate with serial number " +msgstr "сертифікат із серійним номером " + +msgid "the entry was deleted while being modified" +msgstr "запис було вилучено під час внесення змін" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "значення не відповідає формату «РРРРММДДГГХХСС»" + +msgid "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "" +"має бути вказано хоча б один специфікатор запису призначення (наприклад " +"target, targetfilter, attrs)" + +#, python-format +msgid "these attributes are not allowed: %(attrs)s" +msgstr "ці атрибути не можна використовувати: %(attrs)s" + +msgid "this option has been deprecated." +msgstr "цей параметр вважається застарілим." + +msgid "this option is deprecated" +msgstr "цей параметр вважається застарілим" + +msgid "too many '@' characters" +msgstr "занадто багато символів «@»" + +msgid "trust" +msgstr "довіра" + +msgid "trust configuration" +msgstr "довірені налаштування" + +msgid "trust domain" +msgstr "довірений домен" + +msgid "trust domains" +msgstr "довірені домени" + +msgid "trust type" +msgstr "тип довіри" + +msgid "trusted domain object" +msgstr "об’єкт довіреного домену" + +msgid "trusted domain object not found" +msgstr "об’єкт довіреного домену не знайдено" + +msgid "trusted domain user not found" +msgstr "не знайдено користувача довіреного домену" + +msgid "trusts" +msgstr "записи довіри" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "" +"тип об’єкта IPA (user (користувач), group (група), host (вузол), hostgroup " +"(група вузлів), service (служба), netgroup (мережева група))" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "type, filter, subtree і targetgroup є взаємовиключними" + +#, python-format +msgid "unknown command '%(name)s'" +msgstr "невідома команда: «%(name)s»" + +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "%(server)s повідомляє про невідому помилку %(code)d: %(error)s" + +msgid "unknown provider" +msgstr "невідомий надавач" + +msgid "unsupported functional level" +msgstr "непідтримуваний функціональний рівень" + +msgid "unsupported trust type" +msgstr "непідтримуваний тип довіри" + +msgid "url" +msgstr "адреса" + +msgid "user" +msgstr "користувач" + +#, python-format +msgid "user \"%s\" is already active" +msgstr "користувач «%s» вже є активним" + +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "" +"не можна встановлювати для категорії користувачів значення «all», доки є " +"записи дозволених користувачів" + +msgid "users" +msgstr "користувачі" + +msgid "users and hosts cannot both be set" +msgstr "не можна одночасно вказувати користувачів і вузли" + +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "" +"не можна додавати записи користувачів, якщо категорія запуску від імені " +"користувачів або запуску від імені груп=«all»" + +msgid "users cannot be added when user category='all'" +msgstr "" +"не можна додавати записи користувачів, якщо категорія користувачів=«all»" + +msgid "users cannot be set when type is 'hostgroup'" +msgstr "не можна вказувати користувачів, якщо типом є «hostgroup»" + +msgid "users to add" +msgstr "користувачі для додавання" + +msgid "users to exclude from migration" +msgstr "записи користувачів, які слід виключити з перенесення" + +msgid "users to remove" +msgstr "користувачі, записи яких слід вилучити" + +msgid "value" +msgstr "значення" + +msgid "value is missing" +msgstr "не вказано значення" + +msgid "vault" +msgstr "сховище" + +msgid "vaultcontainer" +msgstr "контейнер сховищ" + +msgid "vaultcontainers" +msgstr "контейнери сховищ" + +msgid "vaults" +msgstr "сховища" + #, python-brace-format -msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" -"Відносини довіри із {ipa_domain} вже встановлено із непідтримуваним типом " -"{trust_type}. Будь ласка, вилучте запис цих відносин вручну на боці AD DC." +msgid "{algo} is not a supported vault wrapping algorithm" +msgstr "{algo} не є підтримуваним алгоритмом обгортки сховища" -#, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" -"Основний вузол IPA відмовив у запитах щодо затвердження довіри від AD DC " -"%(count)d разів. Найімовірніше, AD DC встановив зв’язок із реплікою, на якій " -"ще не виконано реплікацію даних щодо довіри. Крім того, будь ласка, " -"перевірте, чи може DNS AD визначати за записами SRV %(records)s коректний " -"сервер IPA." +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "{attr}: немає такого атрибута" -msgid "Credentials" -msgstr "Реєстраційні дані" +#, python-brace-format +msgid "{oname}: {command_name} not found" +msgstr "{oname}: {command_name} не знайдено" -msgid "Missing credentials for cross-forest communication" -msgstr "Пропущено реєстраційні дані для обміну даними між лісами" +#, python-brace-format +msgid "{role}: role not found" +msgstr "{role}: такої ролі не знайдено" -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" -"Вказано ім'я користувача не у форматі Kerberos. Будь ласка, надайте замість " -"нього дані у форматі «користувач@ОБЛАСТЬ»" - -#, python-format -msgid "must equal %r" -msgstr "має дорівнювати %r" - -msgid "Hello world" -msgstr "Привіт, світе" - -#, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "%s: проксі-сервер RADIUS не знайдено" - -#, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "Проксі-сервер RADIUS із назвою «%s» вже існує" - -msgid "must be at least 1" -msgstr "має бути принаймні 1" - -msgid "Out of memory\n" -msgstr "Не вистачає пам'яті\n" - -msgid "Warning unrecognized encryption type.\n" -msgstr "Попередження: невідомий тип шифрування.\n" - -msgid "Warning unrecognized salt type.\n" -msgstr "Попередження: невідомий тип солі (salt).\n" - -msgid "Out of memory!?\n" -msgstr "Не вистачає пам'яті!?\n" - -msgid "Enctype comparison failed!\n" -msgstr "Спроба порівняння значень типу шифрування зазнала невдачі!\n" - -msgid "Password is too long!\n" -msgstr "Пароль є надто довгим!\n" - -msgid "Failed to create random key!\n" -msgstr "Не вдалося створити випадковий ключ!\n" - -msgid "Failed to create key!\n" -msgstr "Не вдалося створити ключ!\n" - -msgid "Bad or unsupported salt type.\n" -msgstr "Помилковий або непідтримуваний тип солі (salt).\n" - -#, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "Не вдалося ініціалізувати з'єднання із сервером ldap %1$s: %2$s\n" - -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "Не вдалося встановити LDAP_OPT_PROTOCOL_VERSION\n" - -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "Не вдалося встановити LDAP_OPT_X_SASL_NOCANON\n" - -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "Не вдалося встановити LDAP_OPT_X_TLS_CACERTFILE\n" - -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "Не вдалося встановити LDAP_OPT_X_TLS_REQUIRE_CERT\n" - -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "Не вдалося встановити LDAP_OPT_X_TLS_PROTOCOL_MIN\n" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" -"Не вдалося створити контекст TLS (не вдалося ініціалізувати OpenSSL або " -"завантажити сертифікати)\n" - -msgid "Unable to initialize STARTTLS session\n" -msgstr "Не вдалося ініціалізувати сеанс STARTTLS\n" +msgid "{} is required by the IPA master" +msgstr "{} потрібен основному серверу IPA" #~ msgid "" #~ "\n" @@ -32996,6 +32996,24 @@ msgstr "Не вдалося ініціалізувати сеанс STARTTLS\n" #~ "AD.\n" #~ "\n" +#~ msgid "" +#~ "\n" +#~ " Delete a CA.\n" +#~ "\n" +#~ " ipa ca-del puppet\n" +#~ msgstr "" +#~ "\n" +#~ " Вилучити запис служби сертифікації.\n" +#~ "\n" +#~ " ipa ca-del puppet\n" + +#~ msgid "" +#~ "\n" +#~ "Commands to build certificate requests automatically\n" +#~ msgstr "" +#~ "\n" +#~ "Команди для автоматичної побудови запитів щодо сертифікації\n" + #~ msgid "" #~ "\n" #~ "ID ranges\n" @@ -33287,226 +33305,6 @@ msgstr "Не вдалося ініціалізувати сеанс STARTTLS\n" #~ "буде 1010. RID є унікальними в межах домену, є 32-бітовими значенням і\n" #~ "використовуються для користувачів і груп.\n" -#~ msgid "Maximum password life must be greater than minimum." -#~ msgstr "" -#~ "Максимальний строк дії пароля має перевищувати мінімальний строк його дії." - -#~ msgid "" -#~ "\n" -#~ "Sudo Rules\n" -#~ "\n" -#~ "Sudo (su \"do\") allows a system administrator to delegate authority to\n" -#~ "give certain users (or groups of users) the ability to run some (or all)\n" -#~ "commands as root or another user while providing an audit trail of the\n" -#~ "commands and their arguments.\n" -#~ "\n" -#~ "IPA provides a means to configure the various aspects of Sudo:\n" -#~ " Users: The user(s)/group(s) allowed to invoke Sudo.\n" -#~ " Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -#~ "Sudo.\n" -#~ " Allow Command: The specific command(s) permitted to be run via Sudo.\n" -#~ " Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -#~ " RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -#~ "invoked with.\n" -#~ " RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -#~ " Options: The various Sudoers Options that can modify Sudo's behavior.\n" -#~ "\n" -#~ "An order can be added to a sudorule to control the order in which they\n" -#~ "are evaluated (if the client supports it). This order is an integer and\n" -#~ "must be unique.\n" -#~ "\n" -#~ "IPA provides a designated binddn to use with Sudo located at:\n" -#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -#~ "\n" -#~ "To enable the binddn run the following command to set the password:\n" -#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." -#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -#~ "dc=example,dc=com\n" -#~ "\n" -#~ "EXAMPLES:\n" -#~ "\n" -#~ " Create a new rule:\n" -#~ " ipa sudorule-add readfiles\n" -#~ "\n" -#~ " Add sudo command object and add it as allowed command in the rule:\n" -#~ " ipa sudocmd-add /usr/bin/less\n" -#~ " ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -#~ "\n" -#~ " Add a host to the rule:\n" -#~ " ipa sudorule-add-host readfiles --hosts server.example.com\n" -#~ "\n" -#~ " Add a user to the rule:\n" -#~ " ipa sudorule-add-user readfiles --users jsmith\n" -#~ "\n" -#~ " Add a special Sudo rule for default Sudo server configuration:\n" -#~ " ipa sudorule-add defaults\n" -#~ "\n" -#~ " Set a default Sudo option:\n" -#~ " ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -#~ msgstr "" -#~ "\n" -#~ "Правила sudo\n" -#~ "\n" -#~ "Sudo (su \"do\") надає системному адміністратору змогу делегувати\n" -#~ "повноваження певним користувачам (або групам користувачів) на виконання\n" -#~ "деяких (або усіх) команд від імені адміністратора (root) або іншого\n" -#~ "користувача, зберігаючи водночас журнал виконання команд та\n" -#~ "аргументів.\n" -#~ "\n" -#~ "У IPA передбачено декілька параметрів налаштовування роботи sudo:\n" -#~ " Users: користувачі або групи, які можуть викликати sudo.\n" -#~ " Hosts: вузли або групи вузлів, користувачі якого можуть викликати " -#~ "sudo.\n" -#~ " Allow Command: специфічні команди, які можна виконувати за допомогою " -#~ "sudo.\n" -#~ " Deny Command: специфічні команди, які не можна виконувати за допомогою " -#~ "sudo.\n" -#~ " RunAsUser: користувачі або групи, від імені яких sudo виконуватиме " -#~ "команди.\n" -#~ " RunAsGroup: групи, ідентифікатори яких буде використано sudo для " -#~ "виконання команд.\n" -#~ " Options: різноманітні параметри sudoers, які можуть змінити поведінку " -#~ "sudo.\n" -#~ "\n" -#~ "До правила sudo можна додати порядок, який керуватиме порядком\n" -#~ "обробки записів (якщо такий порядок передбачено на клієнтському боці).\n" -#~ "Порядок визначається числовим індексом, який не повинен повторюватися.\n" -#~ "\n" -#~ "У IPA передбачено визначений binddn для використання з sudo, який " -#~ "розташовано у\n" -#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -#~ "\n" -#~ "Щоб увімкнути binddn, віддайте таку команду для встановлення пароля:\n" -#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." -#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -#~ "dc=example,dc=com\n" -#~ "\n" -#~ "ПРИКЛАДИ:\n" -#~ "\n" -#~ " Створити правило:\n" -#~ " ipa sudorule-add readfiles\n" -#~ "\n" -#~ " Додати об’єкт команди sudo і записати його як дозволену команду до " -#~ "правила:\n" -#~ " ipa sudocmd-add /usr/bin/less\n" -#~ " ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -#~ "\n" -#~ " Додати запис вузла до правила:\n" -#~ " ipa sudorule-add-host readfiles --hosts server.example.com\n" -#~ "\n" -#~ " Додати запис користувача до правила:\n" -#~ " ipa sudorule-add-user readfiles --users jsmith\n" -#~ "\n" -#~ " Додати особливе правило sudo для типового налаштовування сервера sudo:\n" -#~ " ipa sudorule-add defaults\n" -#~ "\n" -#~ " Встановити типовий варіант дій для sudo:\n" -#~ " ipa sudorule-add-option defaults --sudooption '!authenticate'\n" - -#~ msgid "" -#~ "\n" -#~ "Sudo Rules\n" -#~ "\n" -#~ "Sudo (su \"do\") allows a system administrator to delegate authority to\n" -#~ "give certain users (or groups of users) the ability to run some (or all)\n" -#~ "commands as root or another user while providing an audit trail of the\n" -#~ "commands and their arguments.\n" -#~ "\n" -#~ "IPA provides a means to configure the various aspects of Sudo:\n" -#~ " Users: The user(s)/group(s) allowed to invoke Sudo.\n" -#~ " Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -#~ "Sudo.\n" -#~ " Allow Command: The specific command(s) permitted to be run via Sudo.\n" -#~ " Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -#~ " RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -#~ "invoked with.\n" -#~ " RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -#~ " Options: The various Sudoers Options that can modify Sudo's behavior.\n" -#~ "\n" -#~ "An order can be added to a sudorule to control the order in which they\n" -#~ "are evaluated (if the client supports it). This order is an integer and\n" -#~ "must be unique.\n" -#~ "\n" -#~ "IPA provides a designated binddn to use with Sudo located at:\n" -#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -#~ "\n" -#~ "To enable the binddn run the following command to set the password:\n" -#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." -#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -#~ "dc=example,dc=com\n" -#~ "\n" -#~ "For more information, see the IPA Documentation to Sudo.\n" -#~ msgstr "" -#~ "\n" -#~ "Правила sudo\n" -#~ "\n" -#~ "Sudo (su \"do\") надає системному адміністратору змогу делегувати\n" -#~ "повноваження певним користувачам (або групам користувачів) на виконання\n" -#~ "деяких (або усіх) команд від імені адміністратора (root) або іншого\n" -#~ "користувача, зберігаючи водночас журнал виконання команд та\n" -#~ "аргументів.\n" -#~ "\n" -#~ "У IPA передбачено декілька параметрів налаштовування роботи sudo:\n" -#~ " Users: користувачі або групи, які можуть викликати sudo.\n" -#~ " Hosts: вузли або групи вузлів, користувачі якого можуть викликати " -#~ "sudo.\n" -#~ " Allow Command: специфічні команди, які можна виконувати за допомогою " -#~ "sudo.\n" -#~ " Deny Command: специфічні команди, які не можна виконувати за допомогою " -#~ "sudo.\n" -#~ " RunAsUser: користувачі або групи, від імені яких sudo виконуватиме " -#~ "команди.\n" -#~ " RunAsGroup: групи, ідентифікатори яких буде використано sudo для " -#~ "виконання команд.\n" -#~ " Options: різноманітні параметри sudoers, які можуть змінити поведінку " -#~ "sudo.\n" -#~ "\n" -#~ "До правила sudo можна додати порядок, який керуватиме порядком\n" -#~ "обробки записів (якщо такий порядок передбачено на клієнтському боці).\n" -#~ "Порядок визначається числовим індексом, який не повинен повторюватися.\n" -#~ "\n" -#~ "У IPA передбачено визначений binddn для використання з sudo, який " -#~ "розташовано у\n" -#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -#~ "\n" -#~ "Щоб увімкнути binddn, віддайте таку команду для встановлення пароля:\n" -#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." -#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -#~ "dc=example,dc=com\n" -#~ "\n" -#~ "Докладніші відомості наведено у документації з IPA щодо sudo.\n" - -#~ msgid "" -#~ "\n" -#~ "To enable the binddn run the following command to set the password:\n" -#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." -#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -#~ "dc=example,dc=com\n" -#~ msgstr "" -#~ "\n" -#~ "Щоб увімкнути binddn, віддайте таку команду для встановлення пароля:\n" -#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." -#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -#~ "dc=example,dc=com\n" - -#~ msgid "" -#~ "\n" -#~ " Delete a CA.\n" -#~ "\n" -#~ " ipa ca-del puppet\n" -#~ msgstr "" -#~ "\n" -#~ " Вилучити запис служби сертифікації.\n" -#~ "\n" -#~ " ipa ca-del puppet\n" - -#~ msgid "" -#~ "\n" -#~ "Commands to build certificate requests automatically\n" -#~ msgstr "" -#~ "\n" -#~ "Команди для автоматичної побудови запитів щодо сертифікації\n" - #~ msgid "" #~ "\n" #~ "Routines for constructing certificate signing requests using IPA data " @@ -33703,6 +33501,204 @@ msgstr "Не вдалося ініціалізувати сеанс STARTTLS\n" #~ "\n" #~ "Докладніші відомості наведено у документації з IPA щодо sudo.\n" +#~ msgid "" +#~ "\n" +#~ "Sudo Rules\n" +#~ "\n" +#~ "Sudo (su \"do\") allows a system administrator to delegate authority to\n" +#~ "give certain users (or groups of users) the ability to run some (or all)\n" +#~ "commands as root or another user while providing an audit trail of the\n" +#~ "commands and their arguments.\n" +#~ "\n" +#~ "IPA provides a means to configure the various aspects of Sudo:\n" +#~ " Users: The user(s)/group(s) allowed to invoke Sudo.\n" +#~ " Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +#~ "Sudo.\n" +#~ " Allow Command: The specific command(s) permitted to be run via Sudo.\n" +#~ " Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +#~ " RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +#~ "invoked with.\n" +#~ " RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +#~ " Options: The various Sudoers Options that can modify Sudo's behavior.\n" +#~ "\n" +#~ "An order can be added to a sudorule to control the order in which they\n" +#~ "are evaluated (if the client supports it). This order is an integer and\n" +#~ "must be unique.\n" +#~ "\n" +#~ "IPA provides a designated binddn to use with Sudo located at:\n" +#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +#~ "\n" +#~ "To enable the binddn run the following command to set the password:\n" +#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." +#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +#~ "dc=example,dc=com\n" +#~ "\n" +#~ "EXAMPLES:\n" +#~ "\n" +#~ " Create a new rule:\n" +#~ " ipa sudorule-add readfiles\n" +#~ "\n" +#~ " Add sudo command object and add it as allowed command in the rule:\n" +#~ " ipa sudocmd-add /usr/bin/less\n" +#~ " ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +#~ "\n" +#~ " Add a host to the rule:\n" +#~ " ipa sudorule-add-host readfiles --hosts server.example.com\n" +#~ "\n" +#~ " Add a user to the rule:\n" +#~ " ipa sudorule-add-user readfiles --users jsmith\n" +#~ "\n" +#~ " Add a special Sudo rule for default Sudo server configuration:\n" +#~ " ipa sudorule-add defaults\n" +#~ "\n" +#~ " Set a default Sudo option:\n" +#~ " ipa sudorule-add-option defaults --sudooption '!authenticate'\n" +#~ msgstr "" +#~ "\n" +#~ "Правила sudo\n" +#~ "\n" +#~ "Sudo (su \"do\") надає системному адміністратору змогу делегувати\n" +#~ "повноваження певним користувачам (або групам користувачів) на виконання\n" +#~ "деяких (або усіх) команд від імені адміністратора (root) або іншого\n" +#~ "користувача, зберігаючи водночас журнал виконання команд та\n" +#~ "аргументів.\n" +#~ "\n" +#~ "У IPA передбачено декілька параметрів налаштовування роботи sudo:\n" +#~ " Users: користувачі або групи, які можуть викликати sudo.\n" +#~ " Hosts: вузли або групи вузлів, користувачі якого можуть викликати " +#~ "sudo.\n" +#~ " Allow Command: специфічні команди, які можна виконувати за допомогою " +#~ "sudo.\n" +#~ " Deny Command: специфічні команди, які не можна виконувати за допомогою " +#~ "sudo.\n" +#~ " RunAsUser: користувачі або групи, від імені яких sudo виконуватиме " +#~ "команди.\n" +#~ " RunAsGroup: групи, ідентифікатори яких буде використано sudo для " +#~ "виконання команд.\n" +#~ " Options: різноманітні параметри sudoers, які можуть змінити поведінку " +#~ "sudo.\n" +#~ "\n" +#~ "До правила sudo можна додати порядок, який керуватиме порядком\n" +#~ "обробки записів (якщо такий порядок передбачено на клієнтському боці).\n" +#~ "Порядок визначається числовим індексом, який не повинен повторюватися.\n" +#~ "\n" +#~ "У IPA передбачено визначений binddn для використання з sudo, який " +#~ "розташовано у\n" +#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +#~ "\n" +#~ "Щоб увімкнути binddn, віддайте таку команду для встановлення пароля:\n" +#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." +#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +#~ "dc=example,dc=com\n" +#~ "\n" +#~ "ПРИКЛАДИ:\n" +#~ "\n" +#~ " Створити правило:\n" +#~ " ipa sudorule-add readfiles\n" +#~ "\n" +#~ " Додати об’єкт команди sudo і записати його як дозволену команду до " +#~ "правила:\n" +#~ " ipa sudocmd-add /usr/bin/less\n" +#~ " ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" +#~ "\n" +#~ " Додати запис вузла до правила:\n" +#~ " ipa sudorule-add-host readfiles --hosts server.example.com\n" +#~ "\n" +#~ " Додати запис користувача до правила:\n" +#~ " ipa sudorule-add-user readfiles --users jsmith\n" +#~ "\n" +#~ " Додати особливе правило sudo для типового налаштовування сервера sudo:\n" +#~ " ipa sudorule-add defaults\n" +#~ "\n" +#~ " Встановити типовий варіант дій для sudo:\n" +#~ " ipa sudorule-add-option defaults --sudooption '!authenticate'\n" + +#~ msgid "" +#~ "\n" +#~ "Sudo Rules\n" +#~ "\n" +#~ "Sudo (su \"do\") allows a system administrator to delegate authority to\n" +#~ "give certain users (or groups of users) the ability to run some (or all)\n" +#~ "commands as root or another user while providing an audit trail of the\n" +#~ "commands and their arguments.\n" +#~ "\n" +#~ "IPA provides a means to configure the various aspects of Sudo:\n" +#~ " Users: The user(s)/group(s) allowed to invoke Sudo.\n" +#~ " Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " +#~ "Sudo.\n" +#~ " Allow Command: The specific command(s) permitted to be run via Sudo.\n" +#~ " Deny Command: The specific command(s) prohibited to be run via Sudo.\n" +#~ " RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " +#~ "invoked with.\n" +#~ " RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" +#~ " Options: The various Sudoers Options that can modify Sudo's behavior.\n" +#~ "\n" +#~ "An order can be added to a sudorule to control the order in which they\n" +#~ "are evaluated (if the client supports it). This order is an integer and\n" +#~ "must be unique.\n" +#~ "\n" +#~ "IPA provides a designated binddn to use with Sudo located at:\n" +#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +#~ "\n" +#~ "To enable the binddn run the following command to set the password:\n" +#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." +#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +#~ "dc=example,dc=com\n" +#~ "\n" +#~ "For more information, see the IPA Documentation to Sudo.\n" +#~ msgstr "" +#~ "\n" +#~ "Правила sudo\n" +#~ "\n" +#~ "Sudo (su \"do\") надає системному адміністратору змогу делегувати\n" +#~ "повноваження певним користувачам (або групам користувачів) на виконання\n" +#~ "деяких (або усіх) команд від імені адміністратора (root) або іншого\n" +#~ "користувача, зберігаючи водночас журнал виконання команд та\n" +#~ "аргументів.\n" +#~ "\n" +#~ "У IPA передбачено декілька параметрів налаштовування роботи sudo:\n" +#~ " Users: користувачі або групи, які можуть викликати sudo.\n" +#~ " Hosts: вузли або групи вузлів, користувачі якого можуть викликати " +#~ "sudo.\n" +#~ " Allow Command: специфічні команди, які можна виконувати за допомогою " +#~ "sudo.\n" +#~ " Deny Command: специфічні команди, які не можна виконувати за допомогою " +#~ "sudo.\n" +#~ " RunAsUser: користувачі або групи, від імені яких sudo виконуватиме " +#~ "команди.\n" +#~ " RunAsGroup: групи, ідентифікатори яких буде використано sudo для " +#~ "виконання команд.\n" +#~ " Options: різноманітні параметри sudoers, які можуть змінити поведінку " +#~ "sudo.\n" +#~ "\n" +#~ "До правила sudo можна додати порядок, який керуватиме порядком\n" +#~ "обробки записів (якщо такий порядок передбачено на клієнтському боці).\n" +#~ "Порядок визначається числовим індексом, який не повинен повторюватися.\n" +#~ "\n" +#~ "У IPA передбачено визначений binddn для використання з sudo, який " +#~ "розташовано у\n" +#~ "uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" +#~ "\n" +#~ "Щоб увімкнути binddn, віддайте таку команду для встановлення пароля:\n" +#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." +#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +#~ "dc=example,dc=com\n" +#~ "\n" +#~ "Докладніші відомості наведено у документації з IPA щодо sudo.\n" + +#~ msgid "" +#~ "\n" +#~ "To enable the binddn run the following command to set the password:\n" +#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." +#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +#~ "dc=example,dc=com\n" +#~ msgstr "" +#~ "\n" +#~ "Щоб увімкнути binddn, віддайте таку команду для встановлення пароля:\n" +#~ "LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example." +#~ "com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," +#~ "dc=example,dc=com\n" + #~ msgid "CSR Generation Profile to use" #~ msgstr "Профіль створення CSR, яким слід скористатися" @@ -33727,6 +33723,10 @@ msgstr "Не вдалося ініціалізувати сеанс STARTTLS\n" #~ msgid "Generation rule \"%(rulename)s\" is missing the \"rule\" key" #~ msgstr "У правилі створення «%(rulename)s» немає ключа «rule»" +#~ msgid "Maximum password life must be greater than minimum." +#~ msgstr "" +#~ "Максимальний строк дії пароля має перевищувати мінімальний строк його дії." + #~ msgid "Name of CSR generation profile (if not the same as profile_id)" #~ msgstr "Назва профілю створення CSR (якщо не та сама, що і profile_id)" diff --git a/po/zh_CN.po b/po/zh_CN.po index 0a50a4c39..90e36bc1e 100644 --- a/po/zh_CN.po +++ b/po/zh_CN.po @@ -17,965 +17,33 @@ msgstr "" "Plural-Forms: nplurals=1; plural=0\n" "X-Generator: Zanata 4.6.2\n" -#, c-format -msgid "cannot open configuration file %s\n" -msgstr "不能打开配置文件%s\n" - -#, c-format -msgid "cannot stat() configuration file %s\n" -msgstr "不能stat()配置文件%s\n" - -#, c-format -msgid "out of memory\n" -msgstr "内存不足\n" - -#, c-format -msgid "read error\n" -msgstr "读取错误\n" - -#, c-format -msgid "Unable to parse principal name\n" -msgstr "无法解析主体名\n" - -#, fuzzy, c-format -msgid "krb5_parse_name %1$d: %2$s\n" -msgstr "解析\"%1$s\"：%2$s错误。\n" - -#, c-format -msgid "Removing principal %s\n" -msgstr "删除主体%s\n" - -#, c-format -msgid "Failed to open keytab\n" -msgstr "打开keytab失败\n" - -#, c-format -msgid "principal not found\n" -msgstr "主体没有找到\n" - -#, c-format -msgid "krb5_kt_get_entry %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Unable to remove entry\n" -msgstr "无法删除条目\n" - -#, c-format -msgid "kvno %d\n" -msgstr "" - -#, c-format -msgid "krb5_kt_remove_entry %1$d: %2$s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Failed to set cursor '%1$s'\n" -msgstr "获取结果失败：%s\n" - -#, c-format -msgid "Unable to parse principal\n" -msgstr "服务解析主体\n" - -#, c-format -msgid "krb5_unparse_name %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "realm not found\n" -msgstr "域找不到\n" - -msgid "Print debugging information" -msgstr "打印调试信息" - -msgid "Debugging output" -msgstr "调试输出" - -msgid "" -"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "从keytab中待删除的主体（例如：ftp/ftp.example.com@EXAMPLE.COM）" - -msgid "Kerberos Service Principal Name" -msgstr "Kerberos服务主体名" - -msgid "The keytab file to remove the principcal(s) from" -msgstr "" - -msgid "Keytab File Name" -msgstr "Keytab文件名" - -msgid "Remove all principals in this realm" -msgstr "删除该域中的所有主体" - -msgid "Realm name" -msgstr "域名" - -#, c-format -msgid "Kerberos context initialization failed\n" -msgstr "Kerberos文本初始化失败\n" - -#, c-format -msgid "Failed to open keytab '%1$s': %2$s\n" -msgstr "打开keytab'%1$s'：%2$s失败\n" - -#, c-format -msgid "Closing keytab failed\n" -msgstr "关闭keytab失败\n" - -#, c-format -msgid "krb5_kt_close %1$d: %2$s\n" -msgstr "" - -#, c-format -msgid "Kerberos context initialization failed: %1$s (%2$d)\n" -msgstr "Kerberos文本初始化失败：%1$s (%2$d)\n" - -#, c-format -msgid "Unable to parse principal: %1$s (%2$d)\n" -msgstr "不能解析主体：%1$s (%2$d)\n" - -#, c-format -msgid "No keys accepted by KDC\n" -msgstr "没有KDC可接受的密钥\n" - -#, c-format -msgid "Out of memory \n" -msgstr "内存不足\n" - -#, c-format -msgid "Unable to initialize ldap library!\n" -msgstr "不能初始化ldap库！\n" - -msgid "Simple bind failed\n" -msgstr "简单绑定失败\n" - -#, fuzzy -msgid "SASL Bind failed\n" -msgstr "简单绑定失败\n" - -#, c-format -msgid "Operation failed: %s\n" -msgstr "操作失败：%s\n" - -#, c-format -msgid "Failed to get result: %s\n" -msgstr "获取结果失败：%s\n" - -#, c-format -msgid "Timeout exceeded." -msgstr "严重超时" - -#, c-format -msgid "Failed to parse extended result: %s\n" -msgstr "解析扩展结果失败：%s\n" - -#, c-format -msgid "Failed to parse result: %s\n" -msgstr "解析结果失败：%s\n" - -#, c-format -msgid "Missing reply control list!\n" -msgstr "缺少应答控制列表！\n" - -#, c-format -msgid "Missing reply control!\n" -msgstr "缺少应答控制！\n" - -#, c-format -msgid "Out of Memory!\n" -msgstr "内存不足！\n" - -#, c-format -msgid "Failed to create control!\n" -msgstr "创建控制失败！\n" - -#, c-format -msgid "Failed to bind to server!\n" -msgstr "绑定服务器失败！\n" - -#, c-format -msgid "Failed to get keytab!\n" -msgstr "获取keytab失败！\n" - -#, c-format -msgid "ber_init() failed, Invalid control ?!\n" -msgstr "ber_init()失败，无效的控制？！\n" - -#, c-format -msgid "ber_scanf() failed, unable to find kvno ?!\n" -msgstr "ber_scanf()失败，没有找到kvno？！\n" - -#, c-format -msgid "Failed to retrieve encryption type type #%d\n" -msgstr "检索加密类型#%d失败\n" - -#, c-format -msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" -msgstr "检索加密类型%1$s (#%2$d)失败\n" - -#, c-format -msgid "Failed to retrieve any keys" -msgstr "未能检索任何密钥" - -msgid "Failed to decode control reply!\n" -msgstr "解码控制应答失败！\n" - -#, fuzzy, c-format -msgid "Passwords do not match!\n" -msgstr "密码不匹配！" - -#, c-format -msgid "Failed to open config file %s\n" -msgstr "打开配置文件%s失败\n" - -#, c-format -msgid "Failed to parse config file %s\n" -msgstr "解析配置文件%s失败\n" - -#, fuzzy -msgid "Failed to resolve symlink to keytab.\n" -msgstr "打开keytab失败\n" - -msgid "keytab is a dangling symlink and owned by another user.\n" -msgstr "" - -msgid "Print as little as possible" -msgstr "打印尽可能少" - -msgid "Output only on errors" -msgstr "仅输出错误" - -msgid "Output debug info" -msgstr "" - -msgid "Contact this specific KDC Server" -msgstr "无法连接指定的KDC服务器" - -msgid "Server Name" -msgstr "服务器名" - -msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" -msgstr "为主体获取一个keytab（例如：ftp/ftp.example.com@EXAMPLE.COM）" - -msgid "" -"The keytab file to append the new key to (will be created if it does not " -"exist)." -msgstr "" - -msgid "Encryption types to request" -msgstr "加密类型要求" - -msgid "Comma separated encryption types list" -msgstr "以逗号分隔的加密类型列表" - -msgid "Show the list of permitted encryption types and exit" -msgstr "显示允许的加密类型列表并退出" - -msgid "Permitted Encryption Types" -msgstr "允许的加密类型" - -msgid "Asks for a non-random password to use for the principal" -msgstr "要求一个非随机密码用于主体" - -#, fuzzy -msgid "LDAP DN" -msgstr "LDAP URI" - -msgid "DN to bind as if not using kerberos" -msgstr "DN绑定好像没有使用kerberos" - -msgid "LDAP password" -msgstr "LDAP密码" - -msgid "password to use if not using kerberos" -msgstr "如果没有使用kerberos，则使用密码" - -#, fuzzy -msgid "Prompt for LDAP password" -msgstr "LDAP密码" - -#, fuzzy -msgid "Path to the IPA CA certificate" -msgstr "CA证书" - -#, fuzzy -msgid "IPA CA certificate" -msgstr "CA证书" - -msgid "LDAP uri to connect to. Mutually exclusive with --server" -msgstr "" - -msgid "url" -msgstr "" - -msgid "LDAP SASL bind mechanism if no bindd/bindpw" -msgstr "" - -msgid "GSSAPI|EXTERNAL" -msgstr "" - -msgid "Retrieve current keys without changing them" -msgstr "检索当前密钥不去改变它们" - -#, c-format -msgid "No system preferred enctypes ?!\n" -msgstr "没有系统首选的加密类型？！\n" - -#, c-format -msgid "Supported encryption types:\n" -msgstr "支持的加密类型：\n" - -#, c-format -msgid "Warning: failed to convert type (#%d)\n" -msgstr "警告：转换类型失败（#%d）\n" - -#, c-format -msgid "Bind password already provided (-w).\n" -msgstr "" - -#, fuzzy -msgid "Enter LDAP password" -msgstr "LDAP密码" - -#, c-format -msgid "Bind password required when using a bind DN (-w or -W).\n" -msgstr "" - -#, c-format -msgid "Cannot specify both SASL mechanism and bind DN simultaneously.\n" -msgstr "" - -#, c-format -msgid "Invalid SASL bind mechanism\n" -msgstr "" - -#, fuzzy, c-format -msgid "Cannot specify server and LDAP uri simultaneously.\n" -msgstr "不能同时指定完整的目标滤波器和额外的目标滤波器" - -#, c-format -msgid "DNS discovery for domain %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "Discovered server %s\n" -msgstr "由服务器公布" - -#, c-format -msgid "Using discovered server %s\n" -msgstr "" - -#, c-format -msgid "DNS Discovery failed\n" -msgstr "" - -#, c-format -msgid "Using server from config %s\n" -msgstr "" - -#, c-format -msgid "Server name not provided and unavailable\n" -msgstr "服务器名没有提供或不可用\n" - -#, fuzzy, c-format -msgid "Using provided server %s\n" -msgstr "Ping一台远程服务器。" - -#, c-format -msgid "Incompatible options provided (-r and -P)\n" -msgstr "提供了不兼容的选项（-r和-P）\n" - -msgid "New Principal Password" -msgstr "新的主体密码" - -msgid "Verify Principal Password" -msgstr "验证主体密码" - -#, c-format -msgid "" -"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" -msgstr "警告：盐值类型没有授予随机密码（查看选项-P）\n" - -#, c-format -msgid "Invalid Service Principal Name\n" -msgstr "无效的服务主体名\n" - -#, c-format -msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" -msgstr "没有找到Kerberos凭证缓存。你有Kerberos票据吗？\n" - -#, c-format -msgid "" -"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" -msgstr "没有找到Kerberos用户主体。你有有效的凭证缓存吗？\n" - -#, c-format -msgid "Failed to open Keytab\n" -msgstr "打开Keytab失败\n" - -#, c-format -msgid "Retrying with pre-4.0 keytab retrieval method...\n" -msgstr "用pre-4.0 keytab检索方法重试...\n" - -#, c-format -msgid "Failed to create key material\n" -msgstr "创建密钥材料失败\n" - -#, c-format -msgid "Failed to get keytab\n" -msgstr "获取keytab失败\n" - -#, c-format -msgid "Failed to add key to the keytab\n" -msgstr "向keytab中添加密钥失败\n" - -#, c-format -msgid "Failed to close the keytab\n" -msgstr "关闭keytab失败\n" - -#, c-format -msgid "Keytab successfully retrieved and stored in: %s\n" -msgstr "Keytab检索成功并将其存储在：%s\n" - -#, c-format -msgid "Out of memory!\n" -msgstr "内存不足！\n" - -#, c-format -msgid "No permission to join this host to the IPA domain.\n" -msgstr "没有权限将该主机加入到IPA域。\n" - -#, c-format -msgid "No write permissions on keytab file '%s'\n" -msgstr "在keytab文件%s中没有写权限\n" - -#, fuzzy, c-format -msgid "access() on %1$s failed: errno = %2$d\n" -msgstr "在rootdse中查找%1$s失败，错误%2$d\n" - -#, c-format -msgid "Out of memory!" -msgstr "内存不足！" - -#, c-format -msgid "Unable to enable SSL in LDAP\n" -msgstr "在LDAP中不能启用SSL\n" - -#, c-format -msgid "Search for %1$s on rootdse failed with error %2$d\n" -msgstr "在rootdse中查找%1$s失败，错误%2$d\n" - -#, c-format -msgid "No values for %s" -msgstr "%s没有值" - -#, c-format -msgid "Search for IPA namingContext failed with error %d\n" -msgstr "查找IPA名称上下文失败，错误%d\n" - -#, c-format -msgid "IPA namingContext not found\n" -msgstr "IPA名称上下文没有找到\n" - -#, c-format -msgid "Unable to determine root DN of %s\n" -msgstr "无法确定%s的根DN\n" - -#, c-format -msgid "Enrollment failed. %s\n" -msgstr "注册失败。%s\n" - -#, c-format -msgid "principal not found in XML-RPC response\n" -msgstr "在XML-RPC响应中找不到主体\n" - -#, c-format -msgid "Host is already joined.\n" -msgstr "主机已加入。\n" - -#, c-format -msgid "curl_slist_append() failed for value: '%s'\n" -msgstr "" - -#, c-format -msgid "curl_easy_setopt() failed\n" -msgstr "" - -#, c-format -msgid "Expanding buffer in jsonrpc_handle_response failed" -msgstr "" - -#, c-format -msgid "curl_global_init() failed\n" -msgstr "" - -#, c-format -msgid "curl_easy_init() failed\n" -msgstr "" - -#, fuzzy, c-format -msgid "json_dumps() failed\n" -msgstr "fork()失败\n" - -#, fuzzy, c-format -msgid "" -"JSON-RPC request:\n" -"%s\n" -msgstr "无效的JSON-RPC请求: %(error)s" - -#, fuzzy, c-format -msgid "JSON-RPC call failed: %s\n" -msgstr "操作失败：%s\n" - -#, c-format -msgid "JSON-RPC call was unauthorized. Check your credentials.\n" -msgstr "" - -#, c-format -msgid "JSON-RPC call failed with status code: %li\n" -msgstr "" - -#, fuzzy, c-format -msgid "" -"JSON-RPC response:\n" -"%s\n" -msgstr "没有响应" - -#, c-format -msgid "Extracting the error from the JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: %s\n" -msgstr "" - -#, c-format -msgid "Parsing JSON-RPC response failed: no 'result' value found.\n" -msgstr "" - -#, c-format -msgid "Extracting the data from the JSON-RPC response failed: %s\n" -msgstr "" - -#, fuzzy, c-format -msgid "json_pack_ex() failed: %s\n" -msgstr "fork()失败\n" - -#, c-format -msgid "Unenrollment successful.\n" -msgstr "取消注册成功。\n" - -#, c-format -msgid "Unenrollment failed.\n" -msgstr "取消注册失败。\n" - -#, c-format -msgid "result not found in XML-RPC response\n" -msgstr "在XML-RPC响应中找不到结果\n" - -#, c-format -msgid "Unable to determine IPA server from %s\n" -msgstr "无法从%s中确定IPA主机\n" - -#, c-format -msgid "Unable to join host: Kerberos context initialization failed\n" -msgstr "无法加入主机：Kerberos上下文初始化失败\n" - -#, c-format -msgid "Unable to join host: Kerberos Credential Cache not found\n" -msgstr "无法加入主机：找不到Kerberos凭证缓存\n" - -#, c-format -msgid "" -"Unable to join host: Kerberos User Principal not found and host password not " -"provided.\n" -msgstr "无法加入主机：找不到Kerberos用户主体并且没有提供主机密码。\n" - -#, c-format -msgid "fork() failed\n" -msgstr "fork()失败\n" - -#, c-format -msgid "ipa-getkeytab not found\n" -msgstr "ipa-getkeytab没有找到\n" - -#, c-format -msgid "ipa-getkeytab has bad permissions?\n" -msgstr "ipa-getkeytab没有权限？\n" - -#, c-format -msgid "executing ipa-getkeytab failed, errno %d\n" -msgstr "执行has bad permissions失败，错误码%d\n" - -#, c-format -msgid "child exited with %d\n" -msgstr "结果以%d退出\n" - -#, c-format -msgid "Error resolving keytab: %s.\n" -msgstr "解析keytab错误：%s。\n" - -#, c-format -msgid "Error getting default Kerberos realm: %s.\n" -msgstr "获取默认Kerberos域错误：%s。\n" - -#, c-format -msgid "Error parsing \"%1$s\": %2$s.\n" -msgstr "解析\"%1$s\"：%2$s错误。\n" - -#, c-format -msgid "Error obtaining initial credentials: %s.\n" -msgstr "获取初始化证书错误：%s。\n" - -#, c-format -msgid "Unable to generate Kerberos Credential Cache\n" -msgstr "无法生成Kerberos凭证缓存\n" - -#, c-format -msgid "Error storing creds in credential cache: %s.\n" -msgstr "在凭证缓存中存储证书错误：%s。\n" - -msgid "Print the raw XML-RPC output in GSSAPI mode" -msgstr "以GSSAPI模式打印原始的XML-RPC输出" - -msgid "Quiet mode. Only errors are displayed." -msgstr "单用户模式。仅显示错误。" - -msgid "Unenroll this host from IPA server" -msgstr "从IPA服务器中取消注册该主机" - -msgid "Hostname of this server" -msgstr "该服务器的主机名" - -msgid "hostname" -msgstr "主机名" - -msgid "IPA Server to use" -msgstr "待使用的IPA服务器" - -msgid "Specifies where to store keytab information." -msgstr "指定存储keytab信息的位置。" - -msgid "filename" -msgstr "文件名" - -msgid "Force the host join. Rejoin even if already joined." -msgstr "强制主机加入。即使已经加入了也重新加入。" - -msgid "LDAP password (if not using Kerberos)" -msgstr "LDAP密码（如果没有使用Kerberos）" - -msgid "password" -msgstr "密码" - -#, fuzzy -msgid "LDAP basedn" -msgstr "LDAP密码" - -msgid "basedn" -msgstr "" - -#, c-format -msgid "Cannot get host's FQDN!\n" -msgstr "" - -#, c-format -msgid "The hostname must be fully-qualified: %s\n" -msgstr "主机名必须是完全限制的：%s\n" - -#, c-format -msgid "The hostname must not be: %s\n" -msgstr "主机名必须不能是：%s\n" - -msgid "Failed to add" -msgstr "添加失败" - -msgid "Write certificate (chain if --chain used) to file" -msgstr "" - -msgid "Unrevoked" -msgstr "未撤销的" - -msgid "Error" -msgstr "错误" - -msgid "Input filename" -msgstr "输入文件名" - -msgid "File to load the certificate from." -msgstr "从文件加载证书" - -msgid "cannot specify both raw certificate and file" -msgstr "不能同时指定原始证书和文件" - -#, fuzzy -msgid "Input file" -msgstr "输入文件名" - -#, fuzzy -msgid "File to load the certificate from" -msgstr "从文件加载证书" - -#, python-format -msgid "Profile configuration stored in file '%(file)s'" -msgstr "配置储存在文件'%(file)s'中" - -#, fuzzy -msgid "Split DNS record to parts" -msgstr "系统DNS记录已更新" - -msgid "Please choose a type of DNS resource record to be added" -msgstr "请选择一个待添加的DNS资源记录类型" - -#, python-format -msgid "The most common types for this type of zone are: %s\n" -msgstr "这种区域的最常见类型是： %s\n" - -msgid "DNS resource record type" -msgstr "DNS资源记录类型" - -#, python-format -msgid "Invalid or unsupported type. Allowed values are: %s" -msgstr "无效的或者不支持的类型。允许的值是：%s" - -msgid "No option to modify specific record provided." -msgstr "没有提供选项来修改具体的记录。" - -msgid "Current DNS record contents:\n" -msgstr "目前的DNS记录内容：\n" - -#, python-format -msgid "Modify %(name)s '%(value)s'?" -msgstr "修改 %(name)s '%(value)s'？" - -#, python-format -msgid "" -"%(count)d %(type)s record skipped. Only one value per DNS record type can be " -"modified at one time." -msgid_plural "" -"%(count)d %(type)s records skipped. Only one value per DNS record type can " -"be modified at one time." -msgstr[0] "%(count)d %(type)s记录已忽略。每个DNS记录类型一次只能修改一个值。" - -msgid "" -"Neither --del-all nor options to delete a specific record provided.\n" -"Command help may be consulted for all supported record types." -msgstr "" -"没有提供--del-all或者选项来删除一个特定的记录。\n" -"可以使用命令帮助来查询所有支持的记录类型。" - -msgid "No option to delete specific record provided." -msgstr "没有提供选项来删除具体的记录。" - -msgid "Delete all?" -msgstr "全部删除？" - -#, python-format -msgid "Delete %(name)s '%(value)s'?" -msgstr "删除%(name)s '%(value)s'？" - -msgid "Server will check DNS forwarder(s)." -msgstr "服务器将检查DNS转发器。" - -msgid "This may take some time, please wait ..." -msgstr "这可能需要一些时间，请稍等..." - -#, fuzzy -msgid "DNS forwarder" -msgstr "DNS正向区域" - -#, fuzzy -msgid "file to store DNS records in nsupdate format" -msgstr "系统DNS记录已更新" - -#, python-format -msgid "Certificate(s) stored in file '%(file)s'" -msgstr "证书存储在文件'%(file)s'中" - -msgid "Servers details:" -msgstr "服务器详细信息：" - -msgid "" -"Migration mode is disabled.\n" -"Use 'ipa config-mod --enable-migration=TRUE' to enable it." -msgstr "" -"迁移模式是禁用的。\n" -"使用'ipa config-mod --enable-migration=TRUE'来启用它。" - -msgid "" -"Passwords have been migrated in pre-hashed format.\n" -"IPA is unable to generate Kerberos keys unless provided\n" -"with clear text passwords. All migrated users need to\n" -"login at https://your.domain/ipa/migration/ before they\n" -"can use their Kerberos accounts." -msgstr "" -"密码已迁移成pre-hashed格式。IPA不能生成Kerberos密钥，除非提供明文密码。所有移" -"植过的用户在能使用他们的Kerberos账号之前需要登录https://your.domain/ipa/" -"migration/。" - -#, python-format -msgid "Removing %(servers)s from replication topology, please wait..." -msgstr "从复制拓扑中移除%(servers)s，请稍后..." - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" is in order." -msgstr "复制拓扑的后缀\"%(suffix)s\"是按序的。" - -#, python-format -msgid "Replication topology of suffix \"%(suffix)s\" contains errors." -msgstr "复制拓扑的后缀\"%(suffix)s\"包含错误。" - -msgid "Topology is disconnected" -msgstr "拓扑已断开连接" - -#, python-format -msgid "Server %(srv)s can't contact servers: %(replicas)s" -msgstr "服务器%(srv)s不能连接服务器： %(replicas)s" - -msgid "Recommended maximum number of agreements per replica exceeded" -msgstr "" - -#, fuzzy -msgid "Maximum number of agreements per replica" -msgstr "返回的最大条目数" - -#, python-format -msgid "Server \"%(srv)s\" has %(n)d agreements with servers:" -msgstr "" - -msgid "Delete a user, keeping the entry available for future use" -msgstr "删除一个用户，让这个用户可供将来使用" - -msgid "Delete a user" -msgstr "删除一个用户" - -#, fuzzy -msgid "preserve and no-preserve cannot be both set" -msgstr "用户和主机不能被同时设置" - -msgid "maps not connected to /etc/auto.master:" -msgstr "映射未连接到/etc/auto.master：" - -msgid "Import automount files for a specific location." -msgstr "在一特定位置导入自动挂载文件。" - -msgid "Master file" -msgstr "主文件" - -msgid "Automount master file." -msgstr "自动挂载主文件。" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues." -msgstr "连续操作模式。报告错误但是这个过程仍在继续。" - -#, python-format -msgid "File %(file)s not found" -msgstr "没有找到文件 %(file)s " - -#, python-format -msgid "key %(key)s already exists" -msgstr "键 %(key)s 已存在" - -#, python-format -msgid "map %(map)s already exists" -msgstr "映射 %(map)s 已存在" - -msgid "Imported maps:" -msgstr "已导入的映射：" - -#, python-format -msgid "Added %(map)s" -msgstr "已添加 %(map)s" - -msgid "Imported keys:" -msgstr "已导入的键：" - -#, python-format -msgid "Added %(src)s to %(dst)s" -msgstr "已添加 %(src)s 到 %(dst)s" - -msgid "Ignored keys:" -msgstr "已忽略的键：" - -#, python-format -msgid "Ignored %(src)s to %(dst)s" -msgstr "已忽略 %(src)s 到 %(dst)s" - -msgid "Duplicate maps skipped:" -msgstr "已忽略重复的映射：" - -#, python-format -msgid "Skipped %(map)s" -msgstr "已忽略 %(map)s" - -msgid "Duplicate keys skipped:" -msgstr "已忽略重复的键：" - -#, python-format -msgid "Skipped %(key)s" -msgstr "已忽略 %(key)s" - -msgid "" -"Unable to display QR code using the configured output encoding. Please use " -"the token URI to configure your OTP device" -msgstr "使用输出编码配置无法显示二维码。请使用令牌URI来配置你的OTP设备" - -msgid "" -"QR code width is greater than that of the output tty. Please resize your " -"terminal." -msgstr "二维码的宽度大于tty的输出。请调整你的终端。" - -msgid "Synchronize an OTP token." -msgstr "同步一个OTP令牌。" - -msgid "User ID" -msgstr "用户ID" - -msgid "Password" -msgstr "密码" - -msgid "First Code" -msgstr "第一个码" - -msgid "Second Code" -msgstr "第二个码" - -msgid "Token ID" -msgstr "令牌ID" - -msgid "python-yubico is not installed." -msgstr "" - msgid "" "\n" -"YubiKey Tokens\n" -msgstr "" -"\n" -"YubiKey令牌\n" - -msgid "" -"\n" -"Manage YubiKey tokens.\n" -msgstr "" -"\n" -"管理YubiKey令牌。\n" - -msgid "" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -msgstr "" -"\n" -"这段代码是otp令牌插件的一个扩展，并对读/写YubiKey令牌提供直接的支持。\n" - -msgid "" "\n" "EXAMPLES:\n" msgstr "" "\n" +"\n" "例如：\n" +msgid "" +"\n" +" Vault Container object.\n" +" " +msgstr "" +"\n" +" 库容器对象。\n" +" " + +msgid "" +"\n" +" Vault object.\n" +" " +msgstr "" +"\n" +" 库对象。\n" +" " + msgid "" "\n" " Add a new token:\n" @@ -985,4786 +53,95 @@ msgstr "" " 增加一个新的令牌：\n" " ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgid "Add a new YubiKey OTP token." -msgstr "增加一个新的YubiKey OTP令牌。" - -msgid "YubiKey slot" -msgstr "YubiKey槽" - -msgid "No free YubiKey slot!" -msgstr "没有空闲的YubiKey槽！" - -#, python-format -msgid "Cannot read file '%(filename)s': %(exc)s" -msgstr "不能读取文件'%(filename)s': %(exc)s" - -#, python-format -msgid "Cannot decode file '%(filename)s': %(exc)s" -msgstr "不能解码文件'%(filename)s': %(exc)s" - -msgid "Invalid credentials" -msgstr "无效的证书" - -msgid "Create a new vault." -msgstr "创建一个新库。" - -msgid "Vault password" -msgstr "库密码" - -msgid "File containing the vault password" -msgstr "文件包含库密码" - -msgid "File containing the vault public key" -msgstr "文件包含库公钥" - -msgid "Password can be specified only for symmetric vault" -msgstr "" - -msgid "Public key can be specified only for asymmetric vault" -msgstr "" - -msgid "Password specified multiple times" -msgstr "多次指定密码" - -msgid "Public key specified multiple times" -msgstr "多次指定公钥" - -msgid "Missing vault public key" -msgstr "缺少库公钥" - -#, python-format -msgid "Invalid or unsupported vault public key: %s" -msgstr "无效的或不支持的库公钥：%s" - -msgid "Modify a vault." -msgstr "修改一个库。" - -msgid "Change password" -msgstr "改变密码" - -msgid "Old vault password" -msgstr "旧的库密码" - -msgid "File containing the old vault password" -msgstr "文件包含旧的库密码" - -msgid "New vault password" -msgstr "新的库密码" - -msgid "File containing the new vault password" -msgstr "文件包含新的库密码" - -msgid "Old vault private key" -msgstr "旧的库私钥" - -msgid "File containing the old vault private key" -msgstr "文件包含旧的库私钥" - -msgid "File containing the new vault public key" -msgstr "文件包含新的库公钥" - -msgid "New public key specified multiple times" -msgstr "多次指定新公钥" - -msgid "Missing new vault public key" -msgstr "缺少新的库公钥" - -#, python-brace-format -msgid "{algo} is not a supported vault wrapping algorithm" -msgstr "" - -msgid "Archive data into a vault." -msgstr "数据归档到库。" - -msgid "Binary data to archive" -msgstr "" - -#, fuzzy -msgid "File containing data to archive" -msgstr "文件包含库私钥" - -msgid "Override existing password" -msgstr "覆盖已存在的密码" - -msgid "Input data specified multiple times" -msgstr "多次指定输入数据" - -#, python-format msgid "" -"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" -msgstr "数据大小超出限制。目前库数据大小限制为 %(limit)d B" - -msgid "Invalid vault type" -msgstr "无效的库类型" - -msgid "Retrieve a data from a vault." -msgstr "从库中检索一个数据。" - -msgid "File to store retrieved data" -msgstr "文件存储检索数据" - -msgid "Vault private key" -msgstr "库私钥" - -msgid "File containing the vault private key" -msgstr "文件包含库私钥" - -msgid "Data" -msgstr "数据" - -msgid "Private key specified multiple times" -msgstr "多次指定私钥" - -msgid "Missing vault private key" -msgstr "缺少库私钥" - -#, python-format -msgid "Enabled Sudo Rule \"%s\"" -msgstr "启用Sudo规则\"%s\"" - -#, python-format -msgid "Disabled Sudo Rule \"%s\"" -msgstr "禁用Sudo规则\"%s\"" - -#, python-format -msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" -msgstr "已添加\"%(option)s\"到Sudo规则\"%(rule)s\"" - -#, python-format -msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" -msgstr "已从Sudo规则\"%(rule)s\"中移除\"%(option)s\"" - -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street --attrs=postalcode --prefix=none \"admins edit the address of " -"editors\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street --" -"attrs=postalcode --filter=\"(manager=uid=boss,cn=users,cn=accounts," -"dc=example,dc=com)\" --prefix=none \"Edit the address of those who work for " -"the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" - -msgid "ACI name" -msgstr "ACI名称" - -msgid "Permission" -msgstr "权限" - -msgid "Permission ACI grants access to" -msgstr "ACI授予访问的权限" - -msgid "User group" -msgstr "用户组" - -msgid "User group ACI grants access to" -msgstr "ACI授予访问的用户组" - -msgid "Permissions" -msgstr "权限" - -msgid "Permissions to grant(read, write, add, delete, all)" -msgstr "授予权限（读，写，添加，删除，全部）" - -#, fuzzy -msgid "Attributes to which the permission applies" -msgstr "权限应用属性。" - -msgid "Attributes" -msgstr "属性" - -msgid "Type" -msgstr "类型" - -msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" -msgstr "IPA对象类型（用户，用户组，主机，主机组，服务，网络组）" - -msgid "Member of" -msgstr "隶属于" - -msgid "Member of a group" -msgstr "组成员" - -msgid "Filter" -msgstr "过滤" - -msgid "Legal LDAP filter (e.g. ou=Engineering)" -msgstr "合法的LDAP过滤（例如：ou=Engineering）" - -msgid "Subtree" -msgstr "子树" - -msgid "Subtree to apply ACI to" -msgstr "" - -msgid "Target group" -msgstr "目标组" - -#, fuzzy -msgid "Group to apply ACI to" -msgstr "待应用权限的用户组" - -msgid "Target your own entry (self)" -msgstr "设定你自己的条目" - -msgid "Apply ACI to your own entry (self)" -msgstr "应用ACI到你自己的条目" - -msgid "Create new ACI." -msgstr "创建新的ACI。" - -msgid "ACI prefix" -msgstr "ACI前缀" - -msgid "" -"Prefix used to distinguish ACI types (permission, delegation, selfservice, " -"none)" -msgstr "前缀用来区分ACI类型（权限，授权，自助，无）" - -msgid "Test the ACI syntax but don't write anything" -msgstr "测试ACI语法但不写任何东西" - -msgid "" -"Retrieve and print all attributes from the server. Affects command output." -msgstr "从服务器检索和打印所有属性。影响命令输出。" - -msgid "Print entries as stored on the server. Only affects output format." -msgstr "打印存储在服务器上的条目。仅影响输出格式。" - -msgid "User-friendly description of action performed" -msgstr "方便用户的执行操作描述" - -msgid "The primary_key value of the entry, e.g. 'jdoe' for a user" -msgstr "" - -msgid "Delete ACI." -msgstr "删除ACI。" - -msgid "True means the operation was successful" -msgstr "正确的表示操作成功" - -msgid "" -"\n" -"Search for ACIs.\n" -"\n" -" Returns a list of ACIs\n" -"\n" -" EXAMPLES:\n" -"\n" -" To find all ACIs that apply directly to members of the group ipausers:\n" -" ipa aci-find --memberof=ipausers\n" -"\n" -" To find all ACIs that grant add access:\n" -" ipa aci-find --permissions=add\n" -"\n" -" Note that the find command only looks for the given text in the set of\n" -" ACIs, it does not evaluate the ACIs to see if something would apply.\n" -" For example, searching on memberof=ipausers will find all ACIs that\n" -" have ipausers as a memberof. There may be other ACIs that apply to\n" -" members of that group indirectly.\n" -" " -msgstr "" - -msgid "A string searched in all relevant object attributes" -msgstr "在所有相关对象中搜索字符串" - -msgid "Primary key only" -msgstr "主键唯一" - -msgid "Results should contain primary key attribute only (\"name\")" -msgstr "结果应该只包括主键属性(\"name\")" - -msgid "Number of entries returned" -msgstr "返回的条目数" - -msgid "True if not all results were returned" -msgstr "如果不是所有结果都返回了，那么为真" - -msgid "Modify ACI." -msgstr "修改ACI。" - -msgid "Rename an ACI." -msgstr "重命名一个ACI。" - -msgid "New ACI name" -msgstr "新的ACI名" - -msgid "Display a single ACI given an ACI name." -msgstr "给出一个ACI名显示一个单一的ACI。" - -msgid "Location of the ACI" -msgstr "ACI的位置" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Description" -msgstr "描述" - -msgid "A description of this auto member rule" -msgstr "一个自动成员规则的描述" - -msgid "Default (fallback) Group" -msgstr "默认（回退）组" - -#, fuzzy -msgid "Default group for entries to land" -msgstr "新用户的默认组没有找到" - -msgid "Add an automember rule." -msgstr "添加一个自动成员规则。" - -msgid "Automember Rule" -msgstr "自动成员规则" - -msgid "" -"Set an attribute to a name/value pair. Format is attr=value.\n" -"For multi-valued attributes, the command replaces the values already present." -msgstr "" -"一个属性设置为一个名称/值对。格式是属性=值。对于多值属性，命令替换已存在的" -"值。" - -msgid "" -"Add an attribute/value pair. Format is attr=value. The attribute\n" -"must be part of the schema." -msgstr "添加一个属性/值对。格式是属性=值。属性必须时模式的一部分。" - -msgid "Grouping Type" -msgstr "组类型" - -msgid "Grouping to which the rule applies" -msgstr "组应用于哪种规则" - -msgid "Add conditions to an automember rule." -msgstr "添加条件到一个自动成员规则。" - -msgid "Inclusive Regex" -msgstr "兼容的正则表达式" - -msgid "Exclusive Regex" -msgstr "独占的正则表达式" - -msgid "Attribute Key" -msgstr "性键值" - -msgid "" -"Attribute to filter via regex. For example fqdn for a host, or manager for a " -"user" -msgstr "" -"通过正则表达式来过滤属性。例如：一个主机的fqdn属性，或者一个用户的manager属性" - -msgid "Conditions that could not be added" -msgstr "不能被添加的条件" - -msgid "Number of conditions added" -msgstr "已添加的条件数" - -msgid "Remove default (fallback) group for all unmatched entries." -msgstr "对所有不匹配的条目移除默认（回退）组。" - -msgid "Set default (fallback) group for all unmatched entries." -msgstr "对所有不匹配的条目设置默认（回退）组。" - -#, fuzzy -msgid "Default (fallback) group for entries to land" -msgstr "对所有不匹配的条目设置默认（回退）组。" - -msgid "Display information about the default (fallback) automember groups." -msgstr "显示默认（回退）自动成员组的信息。" - -msgid "Delete an automember rule." -msgstr "删除一个自动成员规则。" - -msgid "List of deletions that failed" -msgstr "删除失败的列表" - -msgid "Search for automember rules." -msgstr "查找自动成员规则。" - -msgid "Modify an automember rule." -msgstr "修改一个自动成员规则。" - -msgid "" -"Delete an attribute/value pair. The option will be evaluated\n" -"last, after all sets and adds." -msgstr "" - -msgid "Rights" -msgstr "权限" - -msgid "" -"Display the access rights of this entry (requires --all). See ipa man page " -"for details." -msgstr "显示该条目的访问权限（需要--all）。更详细的信息请查看ipa帮助页。" - -#, fuzzy -msgid "Rebuild auto membership." -msgstr "重建自动成员" - -msgid "Rebuild membership for all members of a grouping" -msgstr "" - -msgid "Users" -msgstr "用户" - -msgid "Rebuild membership for specified users" -msgstr "" - -msgid "Hosts" -msgstr "主机" - -msgid "Rebuild membership for specified hosts" -msgstr "" - -msgid "No wait" -msgstr "无需等待" - -#, fuzzy -msgid "Don't wait for rebuilding membership" -msgstr "你确定要重建自动成员吗？" - -msgid "Remove conditions from an automember rule." -msgstr "从一个自动成员规则中移除条件。" - -msgid "Conditions that could not be removed" -msgstr "不能被移除的条件" - -msgid "Number of conditions removed" -msgstr "已移除的条件数" - -msgid "Display information about an automember rule." -msgstr "显示一个自动成员规则信息。" - -msgid "" -"\n" -"Automount\n" -"\n" -"Stores automount(8) configuration for autofs(8) in IPA.\n" -"\n" -"The base of an automount configuration is the configuration file auto." -"master.\n" -"This is also the base location in IPA. Multiple auto.master configurations\n" -"can be stored in separate locations. A location is implementation-specific\n" -"with the default being a location named 'default'. For example, you can " -"have\n" -"locations by geographic region, by floor, by type, etc.\n" -"\n" -"Automount has three basic object types: locations, maps and keys.\n" -"\n" -"A location defines a set of maps anchored in auto.master. This allows you\n" -"to store multiple automount configurations. A location in itself isn't\n" -"very interesting, it is just a point to start a new automount map.\n" -"\n" -"A map is roughly equivalent to a discrete automount file and provides\n" -"storage for keys.\n" -"\n" -"A key is a mount point associated with a map.\n" -"\n" -"When a new location is created, two maps are automatically created for\n" -"it: auto.master and auto.direct. auto.master is the root map for all\n" -"automount maps for the location. auto.direct is the default map for\n" -"direct mounts and is mounted on /-.\n" -"\n" -"An automount map may contain a submount key. This key defines a mount\n" -"location within the map that references another map. This can be done\n" -"either using automountmap-add-indirect --parentmap or manually\n" -"with automountkey-add and setting info to \"-type=autofs :\".\n" -"\n" -"EXAMPLES:\n" -"\n" -"Locations:\n" -"\n" -" Create a named location, \"Baltimore\":\n" -" ipa automountlocation-add baltimore\n" -"\n" -" Display the new location:\n" -" ipa automountlocation-show baltimore\n" -"\n" -" Find available locations:\n" -" ipa automountlocation-find\n" -"\n" -" Remove a named automount location:\n" -" ipa automountlocation-del baltimore\n" -"\n" -" Show what the automount maps would look like if they were in the " -"filesystem:\n" -" ipa automountlocation-tofiles baltimore\n" -"\n" -" Import an existing configuration into a location:\n" -" ipa automountlocation-import baltimore /etc/auto.master\n" -"\n" -" The import will fail if any duplicate entries are found. For\n" -" continuous operation where errors are ignored, use the --continue\n" -" option.\n" -"\n" -"Maps:\n" -"\n" -" Create a new map, \"auto.share\":\n" -" ipa automountmap-add baltimore auto.share\n" -"\n" -" Display the new map:\n" -" ipa automountmap-show baltimore auto.share\n" -"\n" -" Find maps in the location baltimore:\n" -" ipa automountmap-find baltimore\n" -"\n" -" Create an indirect map with auto.share as a submount:\n" -" ipa automountmap-add-indirect baltimore --parentmap=auto.share --" -"mount=sub auto.man\n" -"\n" -" This is equivalent to:\n" -"\n" -" ipa automountmap-add-indirect baltimore --mount=/man auto.man\n" -" ipa automountkey-add baltimore auto.man --key=sub --info=\"-" -"fstype=autofs ldap:auto.share\"\n" -"\n" -" Remove the auto.share map:\n" -" ipa automountmap-del baltimore auto.share\n" -"\n" -"Keys:\n" -"\n" -" Create a new key for the auto.share map in location baltimore. This ties\n" -" the map we previously created to auto.master:\n" -" ipa automountkey-add baltimore auto.master --key=/share --info=auto." -"share\n" -"\n" -" Create a new key for our auto.share map, an NFS mount for man pages:\n" -" ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft," -"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n" -"\n" -" Find all keys for the auto.share map:\n" -" ipa automountkey-find baltimore auto.share\n" -"\n" -" Find all direct automount keys:\n" -" ipa automountkey-find baltimore --key=/-\n" -"\n" -" Remove the man key from the auto.share map:\n" -" ipa automountkey-del baltimore auto.share --key=man\n" -msgstr "" - -msgid "Key" -msgstr "键" - -msgid "Automount key name." -msgstr "自动挂载键名。" - -msgid "Mount information" -msgstr "挂载信息" - -msgid "description" -msgstr "描述" - -msgid "Location" -msgstr "位置" - -msgid "Automount location name." -msgstr "自动挂载位置名。" - -msgid "Map" -msgstr "映射" - -msgid "Automount map name." -msgstr "自动挂载映射名。" - -msgid "Create a new automount key." -msgstr "创建一个新的自动挂载键。" - -msgid "Delete an automount key." -msgstr "删除一个自动挂载键。" - -msgid "Continuous mode: Don't stop on errors." -msgstr "连续模式：有错误不停止。" - -msgid "Search for an automount key." -msgstr "查找一个自动挂载键。" - -msgid "Time Limit" -msgstr "时间限制" - -#, fuzzy -msgid "Time limit of search in seconds" -msgstr "时间限制在几秒钟内的搜索（0代表无限制）" - -msgid "Size Limit" -msgstr "大小限制" - -msgid "Maximum number of entries returned" -msgstr "返回的最大条目数" - -msgid "Modify an automount key." -msgstr "修改一个自动挂载键。" - -msgid "New mount information" -msgstr "新的挂载信息" - -msgid "Rename" -msgstr "重命名" - -msgid "Rename the automount key object" -msgstr "重命名自动挂载键对象" - -msgid "Display an automount key." -msgstr "显示一个自动挂载键。" - -msgid "Create a new automount location." -msgstr "创建一个新的自动挂载位置。" - -msgid "Delete an automount location." -msgstr "删除一个自动挂载位置。" - -msgid "Search for an automount location." -msgstr "查找一个自动挂载位置。" - -msgid "Results should contain primary key attribute only (\"location\")" -msgstr "结果应该只包括主键属性(\"location\")" - -msgid "Display an automount location." -msgstr "显示一个自动挂载位置。" - -msgid "Generate automount files for a specific location." -msgstr "在一特定位置生成自动挂载文件。" - -msgid "Create a new automount map." -msgstr "创建一个新的自动挂载映射。" - -msgid "Create a new indirect mount point." -msgstr "创建一个新的间接挂载点。" - -msgid "Mount point" -msgstr "挂载点" - -msgid "Parent map" -msgstr "父映射" - -msgid "Name of parent automount map (default: auto.master)." -msgstr "父自动挂载映射名（默认：auto.master）。" - -msgid "Delete an automount map." -msgstr "删除一个自动挂载映射。" - -msgid "Search for an automount map." -msgstr "查找一个自动挂载映射。" - -msgid "Results should contain primary key attribute only (\"map\")" -msgstr "结果应该只包括主键属性(\"map\")" - -msgid "Modify an automount map." -msgstr "修改一个自动挂载映射。" - -msgid "Display an automount map." -msgstr "显示一个自动挂载映射。" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -msgstr "" - -msgid "Nested Methods to execute" -msgstr "以嵌套的方法来执行" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"SEARCHING:\n" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -"\n" -"The date format is YYYY-mm-dd.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "Checks if any of the servers has the CA service enabled." -msgstr "检查是否有任何服务器启用了CA服务。" - -msgid "Search for existing certificates." -msgstr "查找已存在的证书。" - -#, fuzzy -msgid "Match cn attribute in subject" -msgstr "用户对象的用户名属性" - -msgid "Reason" -msgstr "原因" - -msgid "Reason for revoking the certificate (0-10)" -msgstr "撤消证书的原因(0-10)" - -msgid "minimum serial number" -msgstr "最小序列号" - -msgid "maximum serial number" -msgstr "最大序列号" - -msgid "match the common name exactly" -msgstr "完全匹配常用名" - -msgid "Valid not after from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not after to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Valid not before to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Issued on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on from this date (YYYY-mm-dd)" -msgstr "" - -msgid "Revoked on to this date (YYYY-mm-dd)" -msgstr "" - -msgid "Maximum number of certs returned" -msgstr "返回的最大证书数" - -#, fuzzy -msgid "Take a revoked certificate off hold." -msgstr "撤销证书。" - -msgid "Serial number" -msgstr "序列号" - -msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" -msgstr "十进制序列号或者以0x为前缀的十六进制序列号" - -msgid "Submit a certificate signing request." -msgstr "提交一个证书签名请求。" - -msgid "CSR" -msgstr "" - -msgid "Principal" -msgstr "主体" - -msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "该证书服务主体（例如：HTTP/test.example.com）" - -msgid "automatically add the principal if it doesn't exist" -msgstr "若主体不存在，则自动添加" - -msgid "Dictionary mapping variable name to value" -msgstr "" - -msgid "Revoke a certificate." -msgstr "撤销证书。" - -msgid "Retrieve an existing certificate." -msgstr "检索一个已存在的证书。" - -msgid "Output filename" -msgstr "输出文件名" - -msgid "File to store the certificate in." -msgstr "存储证书文件。" - -msgid "Check the status of a certificate signing request." -msgstr "检查证书签名请求的状态。" - -msgid "Request id" -msgstr "请求号" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -msgid "Maximum username length" -msgstr "最大用户名长度" - -msgid "Home directory base" -msgstr "主目录" - -msgid "Default location of home directories" -msgstr "主目录的默认位置" - -msgid "Default shell" -msgstr "默认shell" - -msgid "Default shell for new users" -msgstr "新用户默认shell" - -msgid "Default users group" -msgstr "默认用户组" - -msgid "Default group for new users" -msgstr "新用户默认组" - -msgid "Default e-mail domain" -msgstr "默认的电子邮件域" - -msgid "Search time limit" -msgstr "搜索时间限制" - -msgid "" -"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" -msgstr "最大的时间（秒）搜索（>0，或-1表示无限制）" - -msgid "Search size limit" -msgstr "搜索大小限制" - -msgid "Maximum number of records to search (-1 is unlimited)" -msgstr "最大数量的搜索记录（-1表示无限制）" - -msgid "User search fields" -msgstr "用户搜索字段" - -#, fuzzy -msgid "A comma-separated list of fields to search in when searching for users" -msgstr "在DS中用于查找用户条目以逗号分隔的对象类" - -msgid "Group search fields" -msgstr "组搜索域" - -#, fuzzy -msgid "A comma-separated list of fields to search in when searching for groups" -msgstr "在DS中用于查找用户组条目以逗号分隔的对象类" - -msgid "Enable migration mode" -msgstr "启用迁移模式" - -#, fuzzy -msgid "Certificate Subject base" -msgstr "证书请求" - -msgid "Base for certificate subjects (OU=Test,O=Example)" -msgstr "" - -msgid "Default group objectclasses" -msgstr "默认组对象类" - -msgid "Default group objectclasses (comma-separated list)" -msgstr "默认组对象类（以逗号分割）" - -msgid "Default user objectclasses" -msgstr "默认用户对象类" - -msgid "Default user objectclasses (comma-separated list)" -msgstr "默认用户对象类（以逗号分割）" - -msgid "Password Expiration Notification (days)" -msgstr "密码过期通知（天）" - -msgid "Number of days's notice of impending password expiration" -msgstr "密码即将过期通知天数" - -msgid "Password plugin features" -msgstr "密码插件功能" - -msgid "Extra hashes to generate in password plug-in" -msgstr "" - -msgid "SELinux user map order" -msgstr "SELinux 用户映射订单" - -msgid "Order in increasing priority of SELinux users, delimited by $" -msgstr "按SELinux用户优先级递增顺序排列，以$分割" - -msgid "Default SELinux user" -msgstr "默认的SELinux用户" - -msgid "Default SELinux user when no match is found in SELinux map rule" -msgstr "当在SELinux映射规则中找不到匹配项时使用默认SELinux用户" - -msgid "Default PAC types" -msgstr "默认PAC类型" - -msgid "Default types of PAC supported for services" -msgstr "默认PAC支持服务的类型" - -msgid "Default user authentication types" -msgstr "默认用户认证类型" - -msgid "Default types of supported user authentication" -msgstr "默认支持用户认证的类型" - -msgid "Modify configuration options." -msgstr "修改配置选项" - -msgid "Show the current configuration." -msgstr "显示当前配置。" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "Delegation name" -msgstr "授权名" - -msgid "Permissions to grant (read, write). Default is write." -msgstr "委托权限（读，写）。默认是写。" - -#, fuzzy -msgid "Attributes to which the delegation applies" -msgstr "权限应用属性。" - -#, fuzzy -msgid "Member user group" -msgstr "成员服务组" - -#, fuzzy -msgid "User group to apply delegation to" -msgstr "待应用权限的用户组" - -msgid "Add a new delegation." -msgstr "添加一个新的授权。" - -msgid "Delete a delegation." -msgstr "删除一个授权。" - -msgid "Search for delegations." -msgstr "查找授权。" - -msgid "Modify a delegation." -msgstr "修改一个授权。" - -msgid "Display information about a delegation." -msgstr "显示一个授权信息。" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-" -"policy=first --forwarder=203.0.113.1\n" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "Global forwarders" -msgstr "全局转发器" - -msgid "" -"Global forwarders. A custom port can be specified for each forwarder using a " -"standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"全局转发器。使用标准格式\"IP_ADDRESS port PORT\"为每个转发器指定一个自定义端" -"口" - -msgid "Forward policy" -msgstr "转发器策略" - -msgid "" -"Global forwarding policy. Set to \"none\" to disable any configured global " -"forwarders." -msgstr "全局转发器策略。通过设置\"none\"来禁用全局转发器的所有配置。" - -msgid "Allow PTR sync" -msgstr "允许PTR同步" - -msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" -msgstr "允许同步正向（A，AAAA）和反向（PTR）记录" - -msgid "Zone refresh interval" -msgstr "区域刷新间隔" - -msgid "Zone name" -msgstr "区域名" - -msgid "Zone name (FQDN)" -msgstr "区域名（FQDN）" - -msgid "Reverse zone IP network" -msgstr "反向区域IP网络" - -msgid "IP network to create reverse zone name from" -msgstr "IP网络创建反向区域名" - -msgid "Active zone" -msgstr "活跃区" - -msgid "Is zone active?" -msgstr "区域活跃吗？" - -msgid "Zone forwarders" -msgstr "区域转发器" - -msgid "" -"Per-zone forwarders. A custom port can be specified for each forwarder using " -"a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Per-zone转发器。使用标准格式\"IP_ADDRESS port PORT\"为每个转发器指定一个自定" -"义端口" - -#, fuzzy -msgid "" -"Per-zone conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" -"Per-server有条件的转发器策略。设置为\"none\"来禁止该区域转发至全局转发器。那" -"样的话，有条件的区域转发器被忽视了。" - -msgid "Record name" -msgstr "记录名" - -msgid "Time to live" -msgstr "存活时间" - -msgid "Records" -msgstr "记录" - -msgid "Record type" -msgstr "记录类型" - -msgid "Record data" -msgstr "记录数据" - -msgid "A record" -msgstr "一条记录" - -msgid "Raw A records" -msgstr "原始的记录" - -msgid "A IP Address" -msgstr "IP地址" - -msgid "IP Address" -msgstr "IP 地址" - -#, fuzzy -msgid "A Create reverse" -msgstr "创建反向" - -msgid "Create reverse record for this IP Address" -msgstr "为该IP地址创建反向记录" - -msgid "AAAA record" -msgstr "AAAA记录" - -msgid "Raw AAAA records" -msgstr "原始的AAAA记录" - -msgid "AAAA IP Address" -msgstr "AAAA IP地址" - -#, fuzzy -msgid "AAAA Create reverse" -msgstr "创建反向" - -msgid "A6 record" -msgstr "A6记录" - -msgid "Raw A6 records" -msgstr "原始的A6记录" - -msgid "A6 Record data" -msgstr "A6记录数据" - -msgid "AFSDB record" -msgstr "AFSDB记录" - -msgid "Raw AFSDB records" -msgstr "原始的AFSDB记录" - -msgid "AFSDB Subtype" -msgstr "AFSDB子类型" - -msgid "Subtype" -msgstr "子类型" - -msgid "AFSDB Hostname" -msgstr "AFSDB主机名" - -msgid "Hostname" -msgstr "主机名" - -msgid "APL record" -msgstr "APL记录" - -msgid "Raw APL records" -msgstr "原始的APL记录" - -msgid "CERT record" -msgstr "CERT记录" - -msgid "Raw CERT records" -msgstr "原始的CERT记录" - -msgid "CERT Certificate Type" -msgstr "CERT证书类型" - -msgid "Certificate Type" -msgstr "证书类型" - -msgid "CERT Key Tag" -msgstr "CERT键标记" - -msgid "Key Tag" -msgstr "键标记" - -msgid "CERT Algorithm" -msgstr "CERT算法" - -msgid "Algorithm" -msgstr "算法" - -msgid "CERT Certificate/CRL" -msgstr "CERT证书/CRL" - -msgid "Certificate/CRL" -msgstr "证书/CRL" - -msgid "CNAME record" -msgstr "CNAME记录" - -msgid "Raw CNAME records" -msgstr "原始的CNAME记录" - -msgid "CNAME Hostname" -msgstr "CNAME主机名" - -msgid "A hostname which this alias hostname points to" -msgstr "一个别名主机名指向主机名" - -msgid "DHCID record" -msgstr "DHCID记录" - -msgid "Raw DHCID records" -msgstr "原始的DHCID记录" - -msgid "DLV record" -msgstr "DLV记录" - -msgid "Raw DLV records" -msgstr "原始的DLV记录" - -msgid "DLV Key Tag" -msgstr "DLV键标记" - -msgid "DLV Algorithm" -msgstr "DLV算法" - -msgid "DLV Digest Type" -msgstr "DLV摘要类型" - -msgid "Digest Type" -msgstr "摘要类型" - -msgid "DLV Digest" -msgstr "DLV摘要" - -msgid "Digest" -msgstr "摘要" - -msgid "DNAME record" -msgstr "DNAME记录" - -msgid "Raw DNAME records" -msgstr "原始的DNAME记录" - -msgid "DNAME Target" -msgstr "DNAME目标" - -msgid "Target" -msgstr "目标" - -msgid "DNSKEY record" -msgstr "DNSKEY记录" - -msgid "Raw DNSKEY records" -msgstr "原始的DNSKEY记录" - -msgid "DS record" -msgstr "DS记录" - -msgid "Raw DS records" -msgstr "原始的DS记录" - -msgid "DS Key Tag" -msgstr "DS键标记" - -msgid "DS Algorithm" -msgstr "DS算法" - -msgid "DS Digest Type" -msgstr "DS摘要类型" - -msgid "DS Digest" -msgstr "DS摘要" - -msgid "HIP record" -msgstr "HIP记录" - -msgid "Raw HIP records" -msgstr "原始的HIP记录" - -msgid "IPSECKEY record" -msgstr "IPSECKEY记录" - -msgid "Raw IPSECKEY records" -msgstr "原始的IPSECKEY记录" - -msgid "KEY record" -msgstr "KEY记录" - -msgid "Raw KEY records" -msgstr "原始的KEY记录" - -msgid "KX record" -msgstr "KX记录" - -msgid "Raw KX records" -msgstr "原始的KX记录" - -msgid "KX Preference" -msgstr "KX优先权" - -msgid "Preference given to this exchanger. Lower values are more preferred" -msgstr "该交换器的优先级。值越低优先级越高" - -msgid "KX Exchanger" -msgstr "KX交换器" - -msgid "A host willing to act as a key exchanger" -msgstr "主机愿意充当关键交换器" - -msgid "LOC record" -msgstr "LOC记录" - -msgid "Raw LOC records" -msgstr "原始的LOC记录" - -#, fuzzy -msgid "LOC Degrees Latitude" -msgstr "LOC纬度方向" - -#, fuzzy -msgid "Degrees Latitude" -msgstr "纬度方向" - -msgid "LOC Minutes Latitude" -msgstr "LOC分钟纬度" - -msgid "Minutes Latitude" -msgstr "分钟纬度" - -msgid "LOC Seconds Latitude" -msgstr "LOC秒纬度" - -msgid "Seconds Latitude" -msgstr "秒纬度" - -msgid "LOC Direction Latitude" -msgstr "LOC纬度方向" - -msgid "Direction Latitude" -msgstr "纬度方向" - -#, fuzzy -msgid "LOC Degrees Longitude" -msgstr "LOC经度方向" - -#, fuzzy -msgid "Degrees Longitude" -msgstr "经度方向" - -msgid "LOC Minutes Longitude" -msgstr "LOC分钟经度" - -msgid "Minutes Longitude" -msgstr "分钟经度" - -msgid "LOC Seconds Longitude" -msgstr "LOC秒经度" - -msgid "Seconds Longitude" -msgstr "秒经度" - -msgid "LOC Direction Longitude" -msgstr "LOC经度方向" - -msgid "Direction Longitude" -msgstr "经度方向" - -msgid "LOC Altitude" -msgstr "LOC高度" - -msgid "Altitude" -msgstr "高度" - -msgid "LOC Size" -msgstr "LOC大小" - -msgid "Size" -msgstr "大小" - -msgid "LOC Horizontal Precision" -msgstr "LOC水平精度" - -msgid "Horizontal Precision" -msgstr "水平精度" - -msgid "LOC Vertical Precision" -msgstr "LOC垂直精度" - -msgid "Vertical Precision" -msgstr "垂直精度" - -msgid "MX record" -msgstr "MX记录" - -msgid "Raw MX records" -msgstr "原始的MX记录" - -msgid "MX Preference" -msgstr "MX优先权" - -msgid "MX Exchanger" -msgstr "MX交换器" - -msgid "A host willing to act as a mail exchanger" -msgstr "主机愿意充当邮件交换器" - -msgid "NAPTR record" -msgstr "NAPTR记录" - -msgid "Raw NAPTR records" -msgstr "原始的NAPTR记录" - -msgid "NAPTR Order" -msgstr "NAPTR规则" - -msgid "Order" -msgstr "规则" - -msgid "NAPTR Preference" -msgstr "NAPTR优先权" - -msgid "Preference" -msgstr "优先权" - -msgid "NAPTR Flags" -msgstr "NAPTR标记" - -msgid "Flags" -msgstr "标记" - -msgid "NAPTR Service" -msgstr "NAPTR服务" - -msgid "Service" -msgstr "服务" - -msgid "NAPTR Regular Expression" -msgstr "NAPTR正则表达式" - -msgid "Regular Expression" -msgstr "正则表达式" - -msgid "NAPTR Replacement" -msgstr "NAPTR替换" - -msgid "Replacement" -msgstr "替换" - -msgid "NS record" -msgstr "NS记录" - -msgid "Raw NS records" -msgstr "原始的NS记录" - -msgid "NS Hostname" -msgstr "NS主机名" - -msgid "NSEC record" -msgstr "NSEC记录" - -msgid "Raw NSEC records" -msgstr "原始的NSEC记录" - -msgid "NSEC3 record" -msgstr "NSEC3记录" - -msgid "Raw NSEC3 records" -msgstr "原始的NSEC3记录" - -msgid "PTR record" -msgstr "PTR记录" - -msgid "Raw PTR records" -msgstr "原始的PTR记录" - -msgid "PTR Hostname" -msgstr "PTR主机名" - -msgid "The hostname this reverse record points to" -msgstr "反向记录指向的主机名" - -msgid "RRSIG record" -msgstr "RRSIG记录" - -msgid "Raw RRSIG records" -msgstr "原始的RRSIG记录" - -msgid "RP record" -msgstr "RP记录" - -msgid "Raw RP records" -msgstr "原始的RP记录" - -msgid "SIG record" -msgstr "SIG记录" - -msgid "Raw SIG records" -msgstr "原始的SIG记录" - -msgid "SPF record" -msgstr "SPF记录" - -msgid "Raw SPF records" -msgstr "原始的SPF记录" - -msgid "SRV record" -msgstr "SRV记录" - -msgid "Raw SRV records" -msgstr "原始的SRV记录" - -msgid "SRV Priority" -msgstr "SRV优先级" - -msgid "Priority" -msgstr "优先级" - -msgid "SRV Weight" -msgstr "SRV重量" - -msgid "Weight" -msgstr "重量" - -msgid "SRV Port" -msgstr "SRV端口" - -msgid "Port" -msgstr "端口" - -msgid "SRV Target" -msgstr "SRV目标" - -msgid "" -"The domain name of the target host or '.' if the service is decidedly not " -"available at this domain" -msgstr "目标主机的域名或是'.'如果服务在该域中明显不存在" - -msgid "SSHFP record" -msgstr "SSHFP记录" - -msgid "Raw SSHFP records" -msgstr "原始的SSHFP记录" - -msgid "SSHFP Algorithm" -msgstr "SSHFP算法" - -msgid "SSHFP Fingerprint Type" -msgstr "SSHFP指纹类型" - -msgid "Fingerprint Type" -msgstr "指纹类型" - -msgid "SSHFP Fingerprint" -msgstr "SSHFP指纹" - -msgid "Fingerprint" -msgstr "指纹" - -msgid "TA record" -msgstr "TA记录" - -msgid "Raw TA records" -msgstr "原始的TA记录" - -msgid "TLSA record" -msgstr "TLSA记录" - -msgid "Raw TLSA records" -msgstr "原始的TLSA记录" - -msgid "TLSA Certificate Usage" -msgstr "TLSA证书用途" - -msgid "Certificate Usage" -msgstr "证书用途" - -msgid "TLSA Selector" -msgstr "TLSA选择器" - -msgid "Selector" -msgstr "选择器" - -msgid "TLSA Matching Type" -msgstr "TLSA匹配类型" - -msgid "Matching Type" -msgstr "匹配类型" - -msgid "TLSA Certificate Association Data" -msgstr "TLSA证书关联数据" - -msgid "Certificate Association Data" -msgstr "证书关联数据" - -msgid "TKEY record" -msgstr "TKEY记录" - -msgid "Raw TKEY records" -msgstr "原始的TKEY记录" - -msgid "TSIG record" -msgstr "TSIG记录" - -msgid "Raw TSIG records" -msgstr "原始的TSIG记录" - -msgid "TXT record" -msgstr "TXT记录" - -msgid "Raw TXT records" -msgstr "原始的TXT记录" - -msgid "TXT Text Data" -msgstr "TXT文本数据" - -msgid "Text Data" -msgstr "文本数据" - -msgid "Authoritative nameserver" -msgstr "权威的命名服务器" - -msgid "Authoritative nameserver domain name" -msgstr "权威的命名服务器域名" - -msgid "Administrator e-mail address" -msgstr "管理员电子邮件地址" - -msgid "SOA serial" -msgstr "SOA序列" - -msgid "SOA record serial number" -msgstr "SOA记录编号" - -msgid "SOA refresh" -msgstr "SOA刷新" - -msgid "SOA record refresh time" -msgstr "SOA记录刷新时间" - -msgid "SOA retry" -msgstr "SOA重试" - -msgid "SOA record retry time" -msgstr "SOA记录重试时间" - -msgid "SOA expire" -msgstr "SOA到期" - -msgid "SOA record expire time" -msgstr "SOA记录到期时间" - -msgid "SOA minimum" -msgstr "SOA最低值" - -msgid "How long should negative responses be cached" -msgstr "负面响应应该被缓存多久" - -msgid "Time to live for records at zone apex" -msgstr "区域定点记录的生成时间" - -msgid "BIND update policy" -msgstr "BIND更新策略" - -msgid "Dynamic update" -msgstr "动态更新" - -msgid "Allow dynamic updates." -msgstr "允许动态更新" - -msgid "Allow query" -msgstr "允许查询" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"issue queries" -msgstr "分号分割的IP地址或网络列表允许被查询" - -msgid "Allow transfer" -msgstr "允许传输" - -msgid "" -"Semicolon separated list of IP addresses or networks which are allowed to " -"transfer the zone" -msgstr "分号分割的IP地址或网络列表允许被传输" - -msgid "" -"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " -"zone" -msgstr "允许在区域中同步正向（A，AAAA）和反向（PTR）记录" - -msgid "Allow in-line DNSSEC signing" -msgstr "允许嵌套DNSSEC签名" - -msgid "Allow inline DNSSEC signing of records in the zone" -msgstr "允许在区域中嵌套DNSSEC记录签名" - -msgid "NSEC3PARAM record" -msgstr "NSEC3PARAM记录" - -msgid "" -"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" -msgstr "NSEC3PARAM区记录格式：散列算法 标记 迭代 盐值" - -msgid "Checks if any of the servers has the DNS service enabled." -msgstr "检查是否有任何服务器启用了DNS服务。" - -msgid "Resolve a host name in DNS." -msgstr "在DNS中解析主机名。" - -msgid "Modify global DNS configuration." -msgstr "修改全局DNS配置。" - -msgid "Show the current global DNS configuration." -msgstr "显示当前全局DNS配置。" - -msgid "Create new DNS forward zone." -msgstr "创建新的DNS正向区。" - -msgid "Add a permission for per-forward zone access delegation." -msgstr "为每个正向区访问授权添加一个权限。" - -msgid "Permission value" -msgstr "权限值" - -msgid "Delete DNS forward zone." -msgstr "删除DNS正向区。" - -msgid "Disable DNS Forward Zone." -msgstr "禁用DNS正向区。" - -msgid "Enable DNS Forward Zone." -msgstr "启用DNS正向区。" - -msgid "Search for DNS forward zones." -msgstr "查找DNS正向区。" - -msgid "Modify DNS forward zone." -msgstr "修改DNS正向区。" - -msgid "Remove a permission for per-forward zone access delegation." -msgstr "为每个正向区访问授权移除一个权限。" - -msgid "Display information about a DNS forward zone." -msgstr "显示DNS正向区信息。" - -msgid "Add new DNS resource record." -msgstr "添加新的DNS资源记录。" - -msgid "Force" -msgstr "强制" - -msgid "force NS record creation even if its hostname is not in DNS" -msgstr "即使NS记录不在DNS中，也强制创建它。" - -msgid "Structured" -msgstr "有条理的" - -msgid "Parse all raw DNS records and return them in a structured way" -msgstr "解析所有的原始DNS记录并以有条理的方式返回它们" - -msgid "Delete DNS resource record." -msgstr "删除DNS资源记录。" - -msgid "Delete all associated records" -msgstr "删除所有相关记录" - -msgid "Delete DNS record entry." -msgstr "删除DNS记录条目。" - -msgid "Search for DNS resources." -msgstr "查找DNS资源。" - -msgid "Modify a DNS resource record." -msgstr "修改DNS资源记录。" - -msgid "Rename the DNS resource record object" -msgstr "重命名DNS资源记录对象" - -msgid "Display DNS resource." -msgstr "显示DNS资源。" - -msgid "Create new DNS zone (SOA record)." -msgstr "创建新的DNS区域（SOA记录）。" - -msgid "Force DNS zone creation even if nameserver is not resolvable." -msgstr "即使命名服务器无法解析，也强制创建DNS区域。" - -msgid "Add a permission for per-zone access delegation." -msgstr "为每个区访问授权添加一个权限。" - -msgid "Delete DNS zone (SOA record)." -msgstr "删除DNS区域（SOA记录）。" - -msgid "Disable DNS Zone." -msgstr "禁用DNS区域。" - -msgid "Enable DNS Zone." -msgstr "启用DNS区域。" - -msgid "Search for DNS zones (SOA records)." -msgstr "查找DNS区域（SOA记录）。" - -msgid "Forward zones only" -msgstr "仅正向区域" - -msgid "Search for forward zones only" -msgstr "仅查找正向区域" - -msgid "Modify DNS zone (SOA record)." -msgstr "修改DNS区域（SOA记录）。" - -msgid "Force nameserver change even if nameserver not in DNS" -msgstr "即使命名服务器不在DNS中，也强制改变它" - -msgid "Remove a permission for per-zone access delegation." -msgstr "为每个区访问授权移除一个权限。" - -msgid "Display information about a DNS zone (SOA record)." -msgstr "显示DNS区域（SOA记录）信息。" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "Group name" -msgstr "组名" - -msgid "Group description" -msgstr "组描述" - -msgid "GID" -msgstr "GID" - -msgid "GID (use this option to set it manually)" -msgstr "GID（使用该选项来手动设置它）" - -msgid "Member users" -msgstr "成员用户" - -msgid "Member groups" -msgstr "成员组" - -msgid "Member of groups" -msgstr "组成员" - -msgid "Roles" -msgstr "角色" - -msgid "Member of netgroups" -msgstr "网络组成员" - -msgid "Member of Sudo rule" -msgstr "Sudo规则的成员" - -msgid "Member of HBAC rule" -msgstr "HBAC规则的成员" - -msgid "Indirect Member users" -msgstr "间接成员用户" - -msgid "Indirect Member groups" -msgstr "间接成员组" - -msgid "Indirect Member of group" -msgstr "间接组成员" - -msgid "Indirect Member of netgroup" -msgstr "间接网络组成员" - -msgid "Indirect Member of role" -msgstr "间接角色成员" - -msgid "Indirect Member of Sudo rule" -msgstr "间接Sudo规则成员" - -msgid "Indirect Member of HBAC rule" -msgstr "间接HBAC规则成员" - -msgid "Create a new group." -msgstr "创建一个新组。" - -msgid "Create as a non-POSIX group" -msgstr "创建一个非POSIX组" - -msgid "Allow adding external non-IPA members from trusted domains" -msgstr "允许从信任域中添加额外的非IPA成员" - -msgid "Suppress processing of membership attributes." -msgstr "抑制成员属性的处理。" - -msgid "Add members to a group." -msgstr "向一个组中添加成员。" - -msgid "External member" -msgstr "额外的成员" - -msgid "Members of a trusted domain in DOM\\name or name@domain form" -msgstr "信任域的成员是“DOM\\名称”或“名称@域名”格式" - -msgid "member user" -msgstr "成员用户" - -msgid "users to add" -msgstr "待添加用户" - -msgid "member group" -msgstr "成员组" - -msgid "groups to add" -msgstr "待添加用户组" - -msgid "Members that could not be added" -msgstr "不能被添加的成员" - -msgid "Number of members added" -msgstr "已添加的成员数" - -msgid "Delete group." -msgstr "删除组。" - -#, fuzzy -msgid "Detach a managed group from a user." -msgstr "查找管理组" - -msgid "Search for groups." -msgstr "查找组。" - -msgid "search for private groups" -msgstr "查找私有组" - -msgid "search for POSIX groups" -msgstr "查找POSIX组" - -msgid "" -"search for groups with support of external non-IPA members from trusted " -"domains" -msgstr "查找组，该组在信任域中支持额外的非IPA成员" - -msgid "search for non-POSIX groups" -msgstr "查找非POSIX组" - -msgid "Results should contain primary key attribute only (\"group-name\")" -msgstr "结果应该只包括主键属性(\"group-name\")" - -msgid "user" -msgstr "用户" - -msgid "Search for groups with these member users." -msgstr "查找包含这些成员用户的组。" - -msgid "Search for groups without these member users." -msgstr "查找不包含这些成员用户的组。" - -msgid "group" -msgstr "组" - -msgid "Search for groups with these member groups." -msgstr "查找包含这些成员用户组的组。" - -msgid "Search for groups without these member groups." -msgstr "查找不包含这些成员用户组的组。" - -msgid "Search for groups with these member of groups." -msgstr "查找包含这些组成员的组。" - -msgid "Search for groups without these member of groups." -msgstr "查找不包含这些组成员的组。" - -msgid "netgroup" -msgstr "网络组" - -msgid "Search for groups with these member of netgroups." -msgstr "查找包含这些网络组成员的组。" - -msgid "Search for groups without these member of netgroups." -msgstr "查找不包含这些网络组成员的组。" - -msgid "role" -msgstr "角色" - -msgid "Search for groups with these member of roles." -msgstr "查找包含这些角色成员的组。" - -msgid "Search for groups without these member of roles." -msgstr "查找不包含这些角色成员的组。" - -msgid "HBAC rule" -msgstr "HBAC规则" - -msgid "Search for groups with these member of HBAC rules." -msgstr "查找包含这些HBAC规则成员的组。" - -msgid "Search for groups without these member of HBAC rules." -msgstr "查找不包含这些HBAC规则成员的组。" - -msgid "sudo rule" -msgstr "sudo规则" - -msgid "Search for groups with these member of sudo rules." -msgstr "查找包含这些sudo规则成员的组。" - -msgid "Search for groups without these member of sudo rules." -msgstr "查找不包含这些sudo规则成员的组。" - -msgid "Modify a group." -msgstr "修改一个组。" - -msgid "change to a POSIX group" -msgstr "改变一个POSIX组" - -msgid "change to support external non-IPA members from trusted domains" -msgstr "改变以便从信任域中支持额外的非IPA成员" - -msgid "Rename the group object" -msgstr "重命名组对象" - -msgid "Remove members from a group." -msgstr "从一个组中移除成员。" - -msgid "users to remove" -msgstr "待移除的用户" - -msgid "groups to remove" -msgstr "待移除的用户组" - -msgid "Members that could not be removed" -msgstr "不能被移除的成员" - -msgid "Number of members removed" -msgstr "已移除成员数" - -msgid "Display information about a named group." -msgstr "显示指定组信息。" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts. You\n" -"can use HBAC to control which users or groups can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users and target hosts.\n" -"This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n" -" ipa hbacrule-add --hostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Rule name" -msgstr "规则名" - -msgid "Rule type" -msgstr "规则类型" - -msgid "Rule type (allow)" -msgstr "规则类型（允许）" - -msgid "User category" -msgstr "用户类别" - -msgid "User category the rule applies to" -msgstr "规则应用的用户类别" - -msgid "Host category" -msgstr "主机类别" - -msgid "Host category the rule applies to" -msgstr "规则应用的主机类别" - -msgid "Service category" -msgstr "服务类别" - -msgid "Service category the rule applies to" -msgstr "规则应用的服务类别" - -msgid "Enabled" -msgstr "启用" - -msgid "User Groups" -msgstr "用户组" - -msgid "Host Groups" -msgstr "主机组" - -msgid "Services" -msgstr "服务" - -msgid "Service Groups" -msgstr "服务组" - -msgid "External host" -msgstr "外部主机" - -msgid "Create a new HBAC rule." -msgstr "创建一个新HBAC规则。" - -msgid "Add target hosts and hostgroups to an HBAC rule." -msgstr "在一个HBAC规则中添加目标主机和主机组。" - -msgid "member host" -msgstr "成员主机" - -msgid "hosts to add" -msgstr "待添加主机" - -msgid "member host group" -msgstr "成员主机组" - -msgid "host groups to add" -msgstr "待添加主机组" - -msgid "Add services to an HBAC rule." -msgstr "在HBAC规则中添加服务" - -msgid "member HBAC service" -msgstr "成员HBAC服务" - -msgid "HBAC services to add" -msgstr "待添加的HBAC服务" - -msgid "member HBAC service group" -msgstr "成员HBAC服务组" - -msgid "HBAC service groups to add" -msgstr "待添加的HBAC服务组" - -msgid "Add users and groups to an HBAC rule." -msgstr "在一个HBAC规则中添加用户和用户组。" - -msgid "Delete an HBAC rule." -msgstr "删除一个HBAC规则。" - -msgid "Disable an HBAC rule." -msgstr "禁用一个HBAC规则。" - -msgid "Enable an HBAC rule." -msgstr "启用一个HBAC规则。" - -msgid "Search for HBAC rules." -msgstr "查找HBAC规则。" - -msgid "Modify an HBAC rule." -msgstr "修改一个HBAC规则。" - -msgid "Remove target hosts and hostgroups from an HBAC rule." -msgstr "从一个HBAC规则中移除目标主机和主机组。" - -msgid "hosts to remove" -msgstr "待移除的主机" - -msgid "host groups to remove" -msgstr "待移除的主机组" - -msgid "Remove service and service groups from an HBAC rule." -msgstr "从一个HBAC规则中移除服务和服务组。" - -msgid "HBAC services to remove" -msgstr "待移除的HBAC服务" - -msgid "HBAC service groups to remove" -msgstr "待移除的HBAC服务组" - -msgid "Remove users and groups from an HBAC rule." -msgstr "从一个HBAC规则中移除用户和用户组。" - -msgid "Display the properties of an HBAC rule." -msgstr "显示一个HBAC规则的属性。" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -msgstr "" - -msgid "Service name" -msgstr "服务名" - -msgid "HBAC service" -msgstr "HBAC服务" - -msgid "HBAC service description" -msgstr "HBAC服务描述" - -msgid "Member of HBAC service groups" -msgstr "HBAC服务组成员" - -msgid "Add a new HBAC service." -msgstr "添加一个新的HBAC服务。" - -msgid "Delete an existing HBAC service." -msgstr "删除一个存在的HBAC服务。" - -msgid "Search for HBAC services." -msgstr "查找HBAC服务。" - -msgid "Results should contain primary key attribute only (\"service\")" -msgstr "结果应该只包括主键属性(\"service\")" - -msgid "Modify an HBAC service." -msgstr "修改一个HBAC服务。" - -msgid "Display information about an HBAC service." -msgstr "显示一个HBAC服务信息。" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "Service group name" -msgstr "服务组名称" - -msgid "HBAC service group description" -msgstr "HBAC服务组描述" - -msgid "Member HBAC service" -msgstr "成员HBAC服务" - -msgid "Add a new HBAC service group." -msgstr "添加一个新的HBAC服务组。" - -msgid "Add members to an HBAC service group." -msgstr "在一个HBAC服务组中添加成员。" - -msgid "Delete an HBAC service group." -msgstr "删除一个HBAC服务组。" - -msgid "Search for an HBAC service group." -msgstr "查找一个HBAC服务组。" - -msgid "Modify an HBAC service group." -msgstr "修改一个HBAC服务组。" - -msgid "Remove members from an HBAC service group." -msgstr "从一个HBAC服务组中移除成员。" - -msgid "Display information about an HBAC service group." -msgstr "显示一个HBAC服务组信息。" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Simulate use of Host-based access controls" -msgstr "模拟使用基于主机访问控制" - -msgid "User name" -msgstr "用户名" - -msgid "Target host" -msgstr "目标主机" - -msgid "Rules to test. If not specified, --enabled is assumed" -msgstr "带测试规则。如果没有指定，--enable是假定的" - -msgid "Hide details which rules are matched, not matched, or invalid" -msgstr "隐藏规则匹配，不匹配或无效的细节" - -msgid "Include all enabled IPA rules into test [default]" -msgstr "在测试中包含所有启用的IPA规则【默认】" - -msgid "Include all disabled IPA rules into test" -msgstr "在测试中包含所有禁用的IPA规则" - -msgid "Maximum number of rules to process when no --rules is specified" -msgstr "当没有使用--rules来指定规则时，能处理的最大规则数" - -msgid "Warning" -msgstr "警告" - -msgid "Matched rules" -msgstr "已匹配规则" - -msgid "Not matched rules" -msgstr "不匹配规则" - -msgid "Non-existent or invalid rules" -msgstr "不存在或无效的规则" - -msgid "Result of simulation" -msgstr "模拟结果" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host name" -msgstr "主机名" - -msgid "A description of this host" -msgstr "该主机的描述" - -msgid "Locality" -msgstr "位置" - -msgid "Host locality (e.g. \"Baltimore, MD\")" -msgstr "主机地点(如\"Baltimore, MD\")" - -msgid "Host location (e.g. \"Lab 2\")" -msgstr "主机位置(如\"Lab 2\")" - -msgid "Platform" -msgstr "平台" - -msgid "Host hardware platform (e.g. \"Lenovo T61\")" -msgstr "主机硬件平台 (e.g. \"Lenovo T61\")" - -msgid "Operating system" -msgstr "操作系统" - -msgid "Host operating system and version (e.g. \"Fedora 9\")" -msgstr "主机操作系统及版本(e.g. \"Fedora 9\")" - -msgid "User password" -msgstr "用户密码" - -msgid "Password used in bulk enrollment" -msgstr "密码用于批量注册" - -msgid "Generate a random password to be used in bulk enrollment" -msgstr "生成一个随机密码用于批量注册" - -msgid "Random password" -msgstr "随机密码" - -msgid "Certificate" -msgstr "证书" - -msgid "Base-64 encoded server certificate" -msgstr "Base-64 编码格式的服务器证书" - -msgid "Principal name" -msgstr "主机名" - -msgid "MAC address" -msgstr "MAC地址" - -msgid "Hardware MAC address(es) on this host" -msgstr "主机硬件MAC地址" - -msgid "SSH public key" -msgstr "SSH公钥" - -msgid "Class" -msgstr "类" - -msgid "" -"Host category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "主机类别（该属性的语义是就近解读）" - -msgid "Assigned ID View" -msgstr "已分配的ID视图" - -msgid "Requires pre-authentication" -msgstr "需要预认证" - -msgid "Pre-authentication is required for the service" -msgstr "服务需要预认证" - -msgid "Trusted for delegation" -msgstr "允许授权" - -msgid "Client credentials may be delegated to the service" -msgstr "客户端证书可以授权给服务" - -msgid "Member of host-groups" -msgstr "主机组成员" - -msgid "Indirect Member of host-group" -msgstr "间接主机组成员" - -msgid "Keytab" -msgstr "" - -#, fuzzy -msgid "Managed by" -msgstr "管理者" - -msgid "Managing" -msgstr "管理" - -msgid "Users allowed to retrieve keytab" -msgstr "允许检索keytab的用户" - -msgid "Groups allowed to retrieve keytab" -msgstr "允许检索keytab的用户组" - -msgid "Hosts allowed to retrieve keytab" -msgstr "允许检索keytab的主机" - -msgid "Host Groups allowed to retrieve keytab" -msgstr "允许检索keytab的主机组" - -msgid "Users allowed to create keytab" -msgstr "允许创建keytab的用户" - -msgid "Groups allowed to create keytab" -msgstr "允许创建keytab的用户组" - -msgid "Hosts allowed to create keytab" -msgstr "允许创建keytab的主机" - -msgid "Host Groups allowed to create keytab" -msgstr "允许创建keytab的主机组" - -msgid "Add a new host." -msgstr "添加一个新主机。" - -#, fuzzy -msgid "force host name even if not in DNS" -msgstr "即使主体名在DNS中不存在，也强制添加它" - -msgid "skip reverse DNS detection" -msgstr "忽略反向DNS检测" - -msgid "Add the host to DNS with this IP address" -msgstr "用该IP地址将主机添加到DNS中" - -msgid "Add hosts that can manage this host." -msgstr "添加可以管理该主机的主机。" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this host." -msgstr "允许用户，用户组，主机或主机组来创建该主机的keytab。" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this host." -msgstr "允许用户，用户组，主机或主机组来检索该主机的keytab。" - -msgid "Delete a host." -msgstr "删除一个主机。" - -msgid "Remove entries from DNS" -msgstr "从DNS中移除条目" - -msgid "Disable the Kerberos key, SSL certificate and all services of a host." -msgstr "禁用该主机的Kerberos密钥，SSL证书和所有的服务。" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this host." -msgstr "不允许用户，用户组，主机或主机组来创建该主机的keytab。" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"host." -msgstr "不允许用户，用户组，主机或主机组来检索该主机的keytab。" - -msgid "Search for hosts." -msgstr "查找主机。" - -msgid "Results should contain primary key attribute only (\"hostname\")" -msgstr "结果应该只包括主键属性(\"hostname\")" - -msgid "host group" -msgstr "主机组" - -msgid "Search for hosts with these member of host groups." -msgstr "查找包含这些主机组成员的主机。" - -msgid "Search for hosts without these member of host groups." -msgstr "查找不包含这些主机组成员的主机。" - -msgid "Search for hosts with these member of netgroups." -msgstr "查找包含这些网络组成员的主机。" - -msgid "Search for hosts without these member of netgroups." -msgstr "查找不包含这些网络组成员的主机。" - -msgid "Search for hosts with these member of roles." -msgstr "查找包含这些角色成员的主机。" - -msgid "Search for hosts without these member of roles." -msgstr "查找不包含这些角色成员的主机。" - -msgid "Search for hosts with these member of HBAC rules." -msgstr "查找包含这些HBAC规则成员的主机。" - -msgid "Search for hosts without these member of HBAC rules." -msgstr "查找不包含这些HBAC规则成员的主机。" - -msgid "Search for hosts with these member of sudo rules." -msgstr "查找包含这些sudo规则成员的主机。" - -msgid "Search for hosts without these member of sudo rules." -msgstr "查找不包含这些sudo规则成员的主机。" - -msgid "Search for hosts with these enrolled by users." -msgstr "查找包含用户注册的主机。" - -msgid "Search for hosts without these enrolled by users." -msgstr "查找不包含用户注册的主机。" - -msgid "host" -msgstr "主机" - -msgid "Search for hosts with these managed by hosts." -msgstr "查找由该主机管理的主机。" - -msgid "Search for hosts without these managed by hosts." -msgstr "查找不由该主机管理的主机。" - -msgid "Search for hosts with these managing hosts." -msgstr "查找管理该主机的主机。" - -msgid "Search for hosts without these managing hosts." -msgstr "查找不管理该主机的主机。" - -msgid "Modify information about a host." -msgstr "修改主机信息" - -msgid "Kerberos principal name for this host" -msgstr "该主机的Kerberos主体名" - -msgid "Update DNS entries" -msgstr "更新DNS条目" - -msgid "Remove hosts that can manage this host." -msgstr "移除可以管理该主机的主机。" - -msgid "Display information about a host." -msgstr "显示一个主机信息。" - -msgid "file to store certificate in" -msgstr "存储证书文件" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "Host-group" -msgstr "主机组" - -msgid "Name of host-group" -msgstr "主机组名称" - -msgid "A description of this host-group" -msgstr "该主机组的描述" - -msgid "Member hosts" -msgstr "成员主机" - -msgid "Member host-groups" -msgstr "主机组成员" - -msgid "Indirect Member hosts" -msgstr "间接成员主机" - -msgid "Indirect Member host-groups" -msgstr "间接成员主机组" - -msgid "Add a new hostgroup." -msgstr "添加一个新的主机组。" - -msgid "Add members to a hostgroup." -msgstr "向一个主机组添加成员。" - -msgid "Delete a hostgroup." -msgstr "删除一个主机组。" - -msgid "Search for hostgroups." -msgstr "查找主机组。" - -msgid "Results should contain primary key attribute only (\"hostgroup-name\")" -msgstr "结果应该只包括主键属性(\"hostgroup-name\")" - -msgid "Search for host groups with these member hosts." -msgstr "查找包含这些成员主机的主机组。" - -msgid "Search for host groups without these member hosts." -msgstr "查找不包含这些成员主机的主机组。" - -msgid "Search for host groups with these member host groups." -msgstr "查找包含这些成员主机组的主机组。" - -msgid "Search for host groups without these member host groups." -msgstr "查找不包含这些成员主机组的主机组。" - -msgid "Search for host groups with these member of host groups." -msgstr "查找包含这些主机组成员的主机组。" - -msgid "Search for host groups without these member of host groups." -msgstr "查找不包含这些主机组成员的主机组。" - -msgid "Search for host groups with these member of netgroups." -msgstr "查找包含这些网络组成员的主机组。" - -msgid "Search for host groups without these member of netgroups." -msgstr "查找不包含这些网络组成员的主机组。" - -msgid "Search for host groups with these member of HBAC rules." -msgstr "查找包含这些HBAC规则成员的主机组。" - -msgid "Search for host groups without these member of HBAC rules." -msgstr "查找不包含这些HBAC规则成员的主机组。" - -msgid "Search for host groups with these member of sudo rules." -msgstr "查找包含这些sudo规则成员的主机组。" - -msgid "Search for host groups without these member of sudo rules." -msgstr "查找不包含这些sudo规则成员的主机组。" - -msgid "Modify a hostgroup." -msgstr "修改一个主机组。" - -msgid "Remove members from a hostgroup." -msgstr "从一个主机组中移除成员。" - -msgid "Display information about a hostgroup." -msgstr "显示一个主机组信息。" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "Range name" -msgstr "范围名称" - -msgid "First Posix ID of the range" -msgstr "该范围的第一个Posix ID" - -msgid "Number of IDs in the range" -msgstr "该范围的ID数" - -msgid "First RID of the corresponding RID range" -msgstr "匹配RID范围的第一个RID" - -msgid "First RID of the secondary RID range" -msgstr "次要RID范围的第一个RID" - -msgid "Domain SID of the trusted domain" -msgstr "信任域的域SID" - -msgid "Name of the trusted domain" -msgstr "信任域的名称" - -msgid "Range type" -msgstr "范围类型" - -msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" -msgstr "ID范围类型，是ipa-ad-trust-posix，ipa-ad-trust，ipa-local中的一个" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "Delete an ID range." -msgstr "删除一个ID范围。" - -msgid "Search for ranges." -msgstr "查找范围。" - -msgid "Modify ID range." -msgstr "修改ID范围。" - -msgid "Display information about a range." -msgstr "显示范围信息。" - -msgid "" -"\n" -"ID Views\n" -"\n" -"Manage ID Views\n" -"\n" -"IPA allows to override certain properties of users and groups per each " -"host.\n" -"This functionality is primarily used to allow migration from older systems " -"or\n" -"other Identity Management solutions.\n" -msgstr "" - -#, fuzzy -msgid "Anchor to override" -msgstr "待覆盖用户" - -msgid "Group ID Number" -msgstr "组ID号码" - -msgid "User login" -msgstr "用户登录名" - -msgid "UID" -msgstr "UID" - -msgid "User ID Number" -msgstr "用户ID号码" - -#, fuzzy -msgid "GECOS" -msgstr "GECOS字段" - -msgid "Home directory" -msgstr "主目录" - -msgid "Login shell" -msgstr "登录shell" - -msgid "ID View Name" -msgstr "ID视图名称" - -msgid "Add a new Group ID override." -msgstr "添加一个新的组ID覆盖。" - -msgid "Delete an Group ID override." -msgstr "删除一个组ID覆盖。" - -msgid "Search for an Group ID override." -msgstr "查找一个组ID覆盖。" - -msgid "Results should contain primary key attribute only (\"anchor\")" -msgstr "结果应该只包括主键属性(\"anchor\")" - -msgid "Modify an Group ID override." -msgstr "修改一个组ID覆盖。" - -msgid "Rename the Group ID override object" -msgstr "重命名组ID覆盖对象" - -msgid "Display information about an Group ID override." -msgstr "显示一个组ID覆盖信息。" - -msgid "Add a new User ID override." -msgstr "添加一个新的用户ID覆盖。" - -msgid "Delete an User ID override." -msgstr "删除一个用户ID覆盖。" - -msgid "Search for an User ID override." -msgstr "查找一个用户ID覆盖。" - -msgid "Modify an User ID override." -msgstr "修改一个用户ID覆盖。" - -msgid "Rename the User ID override object" -msgstr "重命名用户ID覆盖对象" - -msgid "Display information about an User ID override." -msgstr "显示一个用户ID覆盖信息。" - -msgid "Add a new ID View." -msgstr "添加一个新的ID视图。" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overriden." -msgstr "" -"应用ID视图到指定的主机或指定主机组的当前成员。如果该主机已有其他ID视图，则覆" -"盖它。" - -msgid "hosts" -msgstr "主机" - -msgid "Hosts to apply the ID View to" -msgstr "主机应用ID视图" - -msgid "hostgroups" -msgstr "主机组" - -msgid "" -"Hostgroups to whose hosts apply the ID View to. Please note that view is not " -"applied automatically to any hosts added to the hostgroup after running the " -"idview-apply command." -msgstr "" -"主机组的主机应用ID视图。请注意运行命令idview-apply后，视图并不会自动应用到主" -"机组中的主机中去。" - -msgid "Hosts that this ID View was applied to." -msgstr "应用过该ID视图的主机。" - -msgid "Hosts or hostgroups that this ID View could not be applied to." -msgstr "不能应用该ID视图的主机或主机组。" - -msgid "Number of hosts the ID View was applied to:" -msgstr "应用过该ID视图的主机数量：" - -msgid "Delete an ID View." -msgstr "删除一个ID视图。" - -msgid "Search for an ID View." -msgstr "查找一个ID视图。" - -msgid "Modify an ID View." -msgstr "修改一个ID视图。" - -msgid "Rename the ID View object" -msgstr "重命名ID视图对象" - -msgid "Display information about an ID View." -msgstr "显示一个ID视图信息。" - -msgid "Enumerate all the hosts the view applies to." -msgstr "列举应用视图的所有主机。" - -msgid "" -"Clears ID View from specified hosts or current members of specified " -"hostgroups." -msgstr "从指定主机或指定主机组的当前成员中清除ID视图。" - -#, fuzzy -msgid "Hosts to clear (any) ID View from." -msgstr "主机应用ID视图" - -#, fuzzy -msgid "" -"Hostgroups whose hosts should have ID Views cleared. Note that view is not " -"cleared automatically from any host added to the hostgroup after running " -"idview-unapply command." -msgstr "" -"主机组的主机应用ID视图。请注意运行命令idview-apply后，视图并不会自动应用到主" -"机组中的主机中去。" - -#, fuzzy -msgid "Hosts that ID View was cleared from." -msgstr "应用过该ID视图的主机。" - -msgid "Hosts or hostgroups that ID View could not be cleared from." -msgstr "ID视图不能被清除的主机或主机组。" - -msgid "Number of hosts that had a ID View was unset:" -msgstr "有ID视图未被设置的主机数量：" - -msgid "" -"\n" -"Plugins not accessible directly through the CLI, commands used internally\n" -msgstr "" -"\n" -"通过CLI不能直接访问插件，需要使用内部命令\n" - -msgid "Dict of I18N messages" -msgstr "国际化消息字典" - -msgid "Export plugin meta-data for the webUI." -msgstr "webUI中导出插件元数据。" - -msgid "Name of object to export" -msgstr "导出对象的名称" - -msgid "Name of method to export" -msgstr "导出方法的名称" - -msgid "Name of command to export" -msgstr "导出命令的名称" - -msgid "Dict of JSON encoded IPA Objects" -msgstr "JSON编码IPA对象字典" - -msgid "Dict of JSON encoded IPA Methods" -msgstr "JSON编码IPA方法字典" - -msgid "Dict of JSON encoded IPA Commands" -msgstr "JSON编码IPA命令字典" - -msgid "" -"\n" -"Joining an IPA domain\n" -msgstr "" -"\n" -"加入一个IPA域\n" - -msgid "Join an IPA domain" -msgstr "加入一个IPA域" - -#, fuzzy -msgid "The hostname to register as" -msgstr "主机名必须不能是：%s\n" - -msgid "The IPA realm" -msgstr "IPA域" - -msgid "Hardware platform of the host (e.g. Lenovo T61)" -msgstr "主机硬件平台（例如：联想T61）" - -msgid "Operating System and version of the host (e.g. Fedora 9)" -msgstr "主机操作系统版本（例如：Fedora 9）" - -msgid "" -"\n" -"Kerberos ticket policy\n" -"\n" -"There is a single Kerberos ticket policy. This policy defines the\n" -"maximum ticket lifetime and the maximum renewal age, the period during\n" -"which the ticket is renewable.\n" -"\n" -"You can also create a per-user ticket policy by specifying the user login.\n" -"\n" -"For changes to the global policy to take effect, restarting the KDC service\n" -"is required, which can be achieved using:\n" -"\n" -"service krb5kdc restart\n" -"\n" -"Changes to per-user policies take effect immediately for newly requested\n" -"tickets (e.g. when the user next runs kinit).\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current Kerberos ticket policy:\n" -" ipa krbtpolicy-show\n" -"\n" -" Reset the policy to the default:\n" -" ipa krbtpolicy-reset\n" -"\n" -" Modify the policy to 8 hours max life, 1-day max renewal:\n" -" ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n" -"\n" -" Display effective Kerberos ticket policy for user 'admin':\n" -" ipa krbtpolicy-show admin\n" -"\n" -" Reset per-user policy for user 'admin':\n" -" ipa krbtpolicy-reset admin\n" -"\n" -" Modify per-user policy for user 'admin':\n" -" ipa krbtpolicy-mod admin --maxlife=3600\n" -msgstr "" - -msgid "Manage ticket policy for specific user" -msgstr "管理指定用户的票据策略" - -msgid "Max life" -msgstr "最长存活期" - -msgid "Maximum ticket life (seconds)" -msgstr "票据最长存活期（秒）" - -msgid "Max renew" -msgstr "" - -#, fuzzy -msgid "Maximum renewable age (seconds)" -msgstr "票据最长存活期（秒）" - -msgid "Modify Kerberos ticket policy." -msgstr "修改Kerberos票据策略。" - -msgid "Reset Kerberos ticket policy to the default values." -msgstr "重置Kerberos票据策略为默认值。" - -msgid "Display the current Kerberos ticket policy." -msgstr "显示当前Kerberos票据策略。" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid --user-container='cn=users," -"cn=accounts' --group-container='cn=groups,cn=accounts' " -"ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' --group-" -"container='cn=groups,cn=accounts' --user-ignore-" -"objectclass=radiusprofile --user-ignore-" -"attribute=radiusgroupname ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -msgid "Migrate users and groups from DS to IPA." -msgstr "将DS中的用户和用户组移植到IPA。" - -msgid "LDAP URI" -msgstr "LDAP URI" - -msgid "LDAP URI of DS server to migrate from" -msgstr "" - -msgid "bind password" -msgstr "绑定密码" - -msgid "Bind DN" -msgstr "绑定DN" - -msgid "User container" -msgstr "用户容器" - -msgid "DN of container for users in DS relative to base DN" -msgstr "在DS中与基类DN相关的用户容器DN" - -msgid "Group container" -msgstr "组容器" - -msgid "DN of container for groups in DS relative to base DN" -msgstr "在DS中与基类DN相关的用户组容器DN" - -msgid "User object class" -msgstr "用户对象类" - -msgid "Objectclasses used to search for user entries in DS" -msgstr "在DS中用于查找用户条目的对象类" - -msgid "Group object class" -msgstr "组对象类" - -msgid "Objectclasses used to search for group entries in DS" -msgstr "在DS中用户查找用户组条目的对象类" - -msgid "Ignore user object class" -msgstr "忽略用户对象类" - -msgid "Objectclasses to be ignored for user entries in DS" -msgstr "在DS中被用户条目所忽略的对象类" - -msgid "Ignore user attribute" -msgstr "忽略用户属性" - -msgid "Attributes to be ignored for user entries in DS" -msgstr "在DS中被用户条目所忽略的属性" - -msgid "Ignore group object class" -msgstr "忽略组对象类" - -msgid "Objectclasses to be ignored for group entries in DS" -msgstr "在DS中被用户组条目所忽略的对象类" - -msgid "Ignore group attribute" -msgstr "忽略组属性" - -msgid "Attributes to be ignored for group entries in DS" -msgstr "在DS中被用户组条目所忽略的属性" - -msgid "Overwrite GID" -msgstr "覆盖GID" - -msgid "" -"When migrating a group already existing in IPA domain overwrite the group " -"GID and report as success" -msgstr "当移植一个在IPA域中已存在的组时覆盖组GID并报告成功" - -msgid "LDAP schema" -msgstr "LDAP模式" - -msgid "" -"The schema used on the LDAP server. Supported values are RFC2307 and " -"RFC2307bis. The default is RFC2307bis" -msgstr "" -"用在LDAP服务器上的模式。支持值是RFC2307和RFC2307bis。默认值时RFC2307bis" - -msgid "Continue" -msgstr "连续" - -msgid "" -"Continuous operation mode. Errors are reported but the process continues" -msgstr "连续操作模式。报告错误但这个过程仍在继续" - -msgid "Base DN" -msgstr "基DN" - -msgid "Base DN on remote LDAP server" -msgstr "远程LDAP服务器上的基DN" - -msgid "Ignore compat plugin" -msgstr "忽略兼容插件" - -msgid "Allows migration despite the usage of compat plugin" -msgstr "即使使用兼容插件也允许迁移" - -msgid "CA certificate" -msgstr "CA证书" - -msgid "Load CA certificate of LDAP server from FILE" -msgstr "从文件加载LDAP服务器的CA证书" - -#, fuzzy -msgid "groups to exclude from migration" -msgstr "不移植%s" - -#, fuzzy -msgid "users to exclude from migration" -msgstr "不移植%s" - -msgid "Lists of objects migrated; categorized by type." -msgstr "对象移植列表；按类型分类。" - -msgid "Lists of objects that could not be migrated; categorized by type." -msgstr "不能移植的对象列表；按类型分类。" - -msgid "False if migration mode was disabled." -msgstr "如果移植模式是禁用的，则错误" - -msgid "False if migration fails because the compatibility plug-in is enabled." -msgstr "如果移植失败是因为启用了兼容插件，则错误" - -msgid "" -"\n" -"Misc plug-ins\n" -msgstr "" -"\n" -"Misc插件\n" - -msgid "Show environment variables." -msgstr "显示环境变量。" - -msgid "Forward to server instead of running locally" -msgstr "转发到服务器而不是在本地运行" - -msgid "" -"retrieve and print all attributes from the server. Affects command output." -msgstr "从服务器检索和打印所有属性。影响命令输出。" - -msgid "Total number of variables env (>= count)" -msgstr "env变量总数（>= count）" - -msgid "Number of variables returned (<= total)" -msgstr "返回变量数（<= total）" - -msgid "Show all loaded plugins." -msgstr "显示所有加载的插件。" - -msgid "Dictionary mapping plugin names to bases" -msgstr "" - -msgid "Number of plugins loaded" -msgstr "已加载插件数" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "Netgroup name" -msgstr "网络组名称" - -msgid "Netgroup description" -msgstr "网络组描述" - -msgid "NIS domain name" -msgstr "NIS域名" - -msgid "IPA unique ID" -msgstr "IPA唯一ID" - -msgid "Member netgroups" -msgstr "成员网络组" - -msgid "Indirect Member netgroups" -msgstr "间接成员网络组" - -msgid "Member User" -msgstr "成员用户" - -msgid "Member Group" -msgstr "成员组" - -msgid "Member Host" -msgstr "成员主机" - -msgid "Member Hostgroup" -msgstr "成员主机组" - -msgid "Add a new netgroup." -msgstr "添加一个新的网络组。" - -msgid "Add members to a netgroup." -msgstr "向一个网络组添加成员。" - -msgid "member netgroup" -msgstr "成员网络组" - -msgid "netgroups to add" -msgstr "待添加的网络组" - -msgid "Delete a netgroup." -msgstr "删除一个网络组。" - -msgid "Search for a netgroup." -msgstr "查找一个网络组。" - -msgid "search for managed groups" -msgstr "查找管理组" - -msgid "Search for netgroups with these member netgroups." -msgstr "查找包含这些成员网络组的网络组。" - -msgid "Search for netgroups without these member netgroups." -msgstr "查找不包含这些成员网络组的网络组。" - -msgid "Search for netgroups with these member users." -msgstr "查找包含这些成员用户的网络组。" - -msgid "Search for netgroups without these member users." -msgstr "查找不包含这些成员用户的网络组。" - -msgid "Search for netgroups with these member groups." -msgstr "查找包含这些成员用户组的网络组。" - -msgid "Search for netgroups without these member groups." -msgstr "查找不包含这些成员用户组的网络组。" - -msgid "Search for netgroups with these member hosts." -msgstr "查找包含这些成员主机的网络组。" - -msgid "Search for netgroups without these member hosts." -msgstr "查找不包含这些成员主机的网络组。" - -msgid "Search for netgroups with these member host groups." -msgstr "查找包含这些成员主机组的网络组。" - -msgid "Search for netgroups without these member host groups." -msgstr "查找不包含这些成员主机组的网络组。" - -msgid "Search for netgroups with these member of netgroups." -msgstr "查找包含这些网络组成员的网络组。" - -msgid "Search for netgroups without these member of netgroups." -msgstr "查找不包含这些网络组成员的网络组。" - -msgid "Modify a netgroup." -msgstr "修改一个网络组。" - -msgid "Remove members from a netgroup." -msgstr "从一个网络组中移除成员。" - -msgid "netgroups to remove" -msgstr "待移除的网络组" - -msgid "Display information about a netgroup." -msgstr "显示一个网络组信息。" - -msgid "" -"\n" -"OTP configuration\n" -"\n" -"Manage the default values that IPA uses for OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic OTP configuration:\n" -" ipa otpconfig-show\n" -"\n" -" Show all OTP configuration options:\n" -" ipa otpconfig-show --all\n" -"\n" -" Change maximum TOTP authentication window to 10 minutes:\n" -" ipa otpconfig-mod --totp-auth-window=600\n" -"\n" -" Change maximum TOTP synchronization window to 12 hours:\n" -" ipa otpconfig-mod --totp-sync-window=43200\n" -"\n" -" Change maximum HOTP authentication window to 5:\n" -" ipa hotpconfig-mod --hotp-auth-window=5\n" -"\n" -" Change maximum HOTP synchronization window to 50:\n" -" ipa hotpconfig-mod --hotp-sync-window=50\n" -msgstr "" - -msgid "TOTP authentication Window" -msgstr "TOTP认证窗口" - -msgid "TOTP authentication time variance (seconds)" -msgstr "TOTP认证时间差异（秒）" - -msgid "TOTP Synchronization Window" -msgstr "TOTP同步窗口" - -msgid "TOTP synchronization time variance (seconds)" -msgstr "TOTP同步时间差异（秒）" - -msgid "HOTP Authentication Window" -msgstr "HOTP认证窗口" - -#, fuzzy -msgid "HOTP authentication skip-ahead" -msgstr "TOTP认证窗口" - -msgid "HOTP Synchronization Window" -msgstr "HOTP同步窗口" - -#, fuzzy -msgid "HOTP synchronization skip-ahead" -msgstr "HOTP同步窗口" - -msgid "Modify OTP configuration options." -msgstr "修改OTP配置选项。" - -msgid "Show the current OTP configuration." -msgstr "显示当前OTP配置。" - -msgid "" -"\n" -"OTP Tokens\n" -"\n" -"Manage OTP tokens.\n" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "Unique ID" -msgstr "唯一ID" - -msgid "Type of the token" -msgstr "令牌类型" - -msgid "Token description (informational only)" -msgstr "令牌描述（只是信息）" - -msgid "Owner" -msgstr "所有者" - -msgid "Assigned user of the token (default: self)" -msgstr "分配用户令牌（默认：自己）" - -msgid "Manager" -msgstr "管理者" - -msgid "Assigned manager of the token (default: self)" -msgstr "分配管理者令牌（默认：自己）" - -msgid "Disabled" -msgstr "禁用" - -msgid "Mark the token as disabled (default: false)" -msgstr "令牌标记为禁用（默认：错误的）" - -msgid "Validity start" -msgstr "有效期开始于" - -msgid "First date/time the token can be used" -msgstr "令牌被第一次使用" - -msgid "Validity end" -msgstr "有效期结束于" - -msgid "Last date/time the token can be used" -msgstr "令牌被最后一次使用" - -msgid "Vendor" -msgstr "供应商" - -msgid "Token vendor name (informational only)" -msgstr "令牌供应商名称（只是信息）" - -msgid "Model" -msgstr "模式" - -msgid "Token model (informational only)" -msgstr "令牌模式（只是信息）" - -msgid "Serial" -msgstr "序列号" - -msgid "Token serial (informational only)" -msgstr "令牌序列号（只是信息）" - -msgid "Token secret (Base32; default: random)" -msgstr "令牌密码（Base32；默认：随机）" - -msgid "Token hash algorithm" -msgstr "令牌散列算法" - -msgid "Digits" -msgstr "数字" - -msgid "Number of digits each token code will have" -msgstr "每个令牌码拥有的数字个数" - -msgid "Clock offset" -msgstr "时钟偏移量" - -msgid "TOTP token / IPA server time difference" -msgstr "TOTP令牌/IPA服务器时差" - -msgid "Clock interval" -msgstr "时间间隔" - -msgid "Length of TOTP token code validity" -msgstr "TOTP令牌码有效长度" - -msgid "Counter" -msgstr "计数器" - -msgid "Initial counter for the HOTP token" -msgstr "HOTP令牌初始计数器" - -msgid "Add a new OTP token." -msgstr "添加一个新的OTP令牌。" - -msgid "(deprecated)" -msgstr "（弃用）" - -msgid "Do not display QR code" -msgstr "不显示二维码" - -msgid "Add users that can manage this token." -msgstr "添加可以管理该令牌的用户" - -msgid "Delete an OTP token." -msgstr "删除一个OTP令牌。" - -msgid "Search for OTP token." -msgstr "查找OTP令牌。" - -msgid "Results should contain primary key attribute only (\"id\")" -msgstr "结果应该只包括主键属性(\"id\")" - -msgid "Modify a OTP token." -msgstr "修改一个OTP令牌。" - -msgid "Rename the OTP token object" -msgstr "重命名OTP令牌对象" - -msgid "Display information about an OTP token." -msgstr "显示一个OTP令牌信息。" - -#, fuzzy -msgid "" -"\n" -"YubiKey Tokens\n" -"\n" -"Manage YubiKey tokens.\n" -"\n" -"This code is an extension to the otptoken plugin and provides support for\n" -"reading/writing YubiKey tokens directly.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new token:\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" -msgstr "" -"\n" -"这段代码是otp令牌插件的一个扩展，并对读/写YubiKey令牌提供直接的支持。\n" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "Set a user's password." -msgstr "设置一个用户的密码。" - -msgid "New Password" -msgstr "新密码" - -msgid "Current Password" -msgstr "当前密码" - -msgid "OTP" -msgstr "OTP" - -msgid "One Time Password" -msgstr "一次性密码" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" "\n" "* A permission grants access to read, write, add, delete, read, search,\n" " or compare.\n" "* A privilege combines similar permissions (for example all the permissions\n" " needed to add a user).\n" "* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" +msgstr "" +"\n" +"* 权限允许访问读，写，添加，删除，读，查找或比价。\n" +"* 特权结合了相似的权限（例如所有权限需要添加一个用户）\n" +"* 角色为用户，用户组，主机或主机组授予一系列特权。\n" + +msgid "" +"\n" +"* The host must exist\n" +"* The service must exist (or you use the --add option to automatically add " +"it)\n" +msgstr "" +"\n" +"* 主机必须存在\n" +"* 服务必须存在（或者你使用--add选项来自动添加它）\n" + +msgid "" +"\n" +"A certificate is stored with a service principal and a service principal\n" +"needs a host.\n" +msgstr "" +"\n" +"一个证书是以一个服务主体存储，并一个服务主体需要一个主机。\n" + +msgid "" +"\n" +"A condition is a regular expression used by 389-ds to match a new incoming\n" +"entry with an automember rule. If it matches an inclusive rule then the\n" +"entry is added to the appropriate group or hostgroup.\n" +msgstr "" +"\n" +"条件是一个用于389-ds的正则表达式来用一个自动成员规则区匹配一个新添加的条目。" +"如果它匹配一个兼容规则，那么该条目被添加到合适的组或主机组中去。\n" + +msgid "" +"\n" +"A default group or hostgroup could be specified for entries that do not\n" +"match any rule. In case of user entries this group will be a fallback group\n" +"because all users are by default members of group specified in IPA config.\n" +msgstr "" +"\n" +"一个默认组或主机组可以指定给不匹配任何规则的条目。万一是用户条目，则该组会是" +"一个会退组，因为在IPA配置中所有用户默认是指定组的成员。\n" + +msgid "" "\n" "A permission is made up of a number of different parts:\n" "\n" "1. The name of the permission.\n" "2. The target of the permission.\n" "3. The rights granted by the permission.\n" +msgstr "" "\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" +"权限由许多不同部分组成：\n" "\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" +"1. 权限名。\n" +"2. 权限目标。\n" +"3. 权限授予的权限。\n" + +msgid "" "\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" +"A permission may not contain other permissions.\n" +msgstr "" +"\n" +"一个权限可能不包含其他权限。\n" + +msgid "" +"\n" +"A rule is directly associated with a group by name, so you cannot create\n" +"a rule without an accompanying group or hostgroup.\n" +msgstr "" +"\n" +"规则是和组名直接关联的，因此你不能创建一个没有组或主机组的规则。\n" + +msgid "" +"\n" +"API Schema\n" +msgstr "" +"\n" +"API 模式\n" + +msgid "" "\n" "Additionally, there are the following convenience options.\n" "Setting one of these options will set the corresponding attribute(s).\n" @@ -5773,2134 +150,182 @@ msgid "" "2. memberof: apply to members of a group; sets target filter\n" "3. targetgroup: grant access to modify a specific group (such as granting\n" " the rights to manage group membership); sets target.\n" +msgstr "" "\n" -"Managed permissions\n" +"同时，有以下合适的选项。设置其中一个选项将会设置相应的属性。\n" +"1. 类型：对象（用户，用户组等）的类型；设置子树和目标过滤器。\n" +"2. 组： 适用于一个组的成员；设置目标过滤器。\n" +"3. 目标组：允许修改一个指定组（例如授予管理组成员的权限）；设置目标。\n" + +msgid "" "\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" +"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" +"prevents it from issuing certificates but does not affect the validity of " +"its\n" +"certificate.\n" +msgstr "" +"\n" +"所有的CAs除了'IPA' CA都可以被禁用或重新启用。禁用一个CA会阻止它发布证书，但不" +"会影响它的证书的有效性。\n" + +msgid "" +"\n" +"An order can be added to a sudorule to control the order in which they\n" +"are evaluated (if the client supports it). This order is an integer and\n" +"must be unique.\n" +msgstr "" +"\n" +"顺序可以添加到一个sudo规则中来控制它们评估的顺序（如果客户端支持）。该顺序是" +"一个整数并且是唯一的。\n" + +msgid "" +"\n" +"Asymmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a public key before transport.\n" +"The secret can only be retrieved using the private key.\n" +msgstr "" +"\n" +"非对称库和标准库类似，但它在传输前会使用一个公钥来预加密密码。该密码仅能通过" +"对应的私钥来检索。\n" + +msgid "" +"\n" +"Auto Membership Rule.\n" +msgstr "" +"\n" +"自动成员规则。\n" + +msgid "" +"\n" +"Based on the ownership there are three vault categories:\n" +"* user/private vault\n" +"* service vault\n" +"* shared vault\n" +msgstr "" +"\n" +"基于所有者管理有三种库类别：\n" +"* 用户/私有库\n" +"* 服务库\n" +"* 共享库\n" + +msgid "" +"\n" +"Based on the security mechanism there are three types of\n" +"vaults:\n" +"* standard vault\n" +"* symmetric vault\n" +"* asymmetric vault\n" +msgstr "" +"\n" +"基于安全机制有三种库类型：\n" +"* 标准库\n" +"* 对称库\n" +"* 非对称库\n" + +msgid "" +"\n" +"Baseuser\n" +"\n" +"This contains common definitions for user/stageuser\n" +msgstr "" +"\n" +"基类用户\n" +"\n" +"这包含了用户/计划用户常见的定义\n" + +msgid "" +"\n" +"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " +"signing\n" +"certificate to be revoked and its private key deleted.\n" +msgstr "" +"\n" +"CAs (除了'IPA' CA)都可以被删除。删除一个CA会撤销它的签名证书并删除它的私" +"钥。\n" + +msgid "" +"\n" +"Certificate requests exist in the form of a Certificate Signing Request " +"(CSR)\n" +"in PEM format.\n" +msgstr "" +"\n" +"证书请求以PEM格式的证书签名请求(CSR)的形式存在。\n" + +msgid "" +"\n" +"Certificates may be searched on by certificate subject, serial number,\n" +"revocation reason, validity dates and the issued date.\n" +msgstr "" +"\n" +"证书可能通过证书主题，序列号，撤销原因，有效日期和发布日期来查询。\n" + +msgid "" +"\n" +"DNS server configuration\n" +msgstr "" +"\n" +"DNS服务器配置\n" + +msgid "" +"\n" +"Dates are treated as GMT to match the dates in the certificates.\n" +msgstr "" +"\n" +"GMT格式的日期用来匹配证书里的日期。\n" + +msgid "" "\n" "Deleting or renaming a managed permission, as well as changing its target,\n" "is not allowed.\n" +msgstr "" +"\n" +"删除或重命名一个管理权限，同时改变它的目标是不允许的。\n" + +msgid "" +"\n" +"Domain Name System (DNS)\n" +msgstr "" +"\n" +"域名系统（DNS）\n" + +msgid "" "\n" "EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" msgstr "" - -msgid "Permission name" -msgstr "权限名称" - -msgid "Granted rights" -msgstr "授予权限" - -msgid "Rights to grant (read, search, compare, write, add, delete, all)" -msgstr "授予权限（读，查找，比较，写，添加，删除，全部）" - -msgid "Effective attributes" -msgstr "有效属性" - -msgid "All attributes to which the permission applies" -msgstr "权限可以应用所有属性" - -msgid "Included attributes" -msgstr "包含的属性" - -msgid "User-specified attributes to which the permission applies" -msgstr "权限可以应用用户指定属性" - -msgid "Excluded attributes" -msgstr "排除的属性" +"\n" +"例如：\n" msgid "" -"User-specified attributes to which the permission explicitly does not apply" -msgstr "权限明确不能应用到用户指定的属性" - -msgid "Default attributes" -msgstr "默认属性" - -msgid "Attributes to which the permission applies by default" -msgstr "权限默认应用的属性" - -msgid "Bind rule type" -msgstr "绑定规则类型" - -#, fuzzy -msgid "Subtree to apply permissions to" -msgstr "待应用权限的用户组" - -msgid "Extra target filter" -msgstr "额外的目标过滤器" - -msgid "Raw target filter" -msgstr "原始的目标过滤器" - -msgid "All target filters, including those implied by type and memberof" +"\n" +"Get information about installed IPA servers.\n" msgstr "" - -msgid "Target DN" -msgstr "目标DN" +"\n" +"获取安装IPA服务器信息。\n" msgid "" -"Optional DN to apply the permission to (must be in the subtree, but may not " -"yet exist)" +"\n" +"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" msgstr "" - -msgid "Member of group" -msgstr "组成员" - -msgid "Target members of a group (sets memberOf targetfilter)" -msgstr "组目标成员（设置隶属于目标过滤器）" - -#, fuzzy -msgid "User group to apply permissions to (sets target)" -msgstr "待应用权限的用户组" - -msgid "Type of IPA object (sets subtree and objectClass targetfilter)" -msgstr "IPA目标类型（设置子树和对象类目标过滤器）" - -msgid "Deprecated; use extratargetfilter" -msgstr "过时的；使用额外的目标过滤器" - -#, fuzzy -msgid "Deprecated; use ipapermlocation" -msgstr "过时的；使用额外的目标过滤器" - -#, fuzzy -msgid "Deprecated; use ipapermright" -msgstr "已弃用；使用%s" - -msgid "Granted to Privilege" -msgstr "授于特权" - -msgid "Indirect Member of roles" -msgstr "间接角色成员" - -msgid "Add a new permission." -msgstr "添加一个新的权限。" - -msgid "Add members to a permission." -msgstr "将成员添加到权限。" - -msgid "member privilege" -msgstr "成员特权" - -msgid "privileges to add" -msgstr "待添加的特权" - -msgid "Add a system permission without an ACI (internal command)" -msgstr "添加一个没有ACI的系统权限（内部命令）" - -msgid "Permission flags" -msgstr "权限标记" - -msgid "Delete a permission." -msgstr "删除一个权限。" - -msgid "force delete of SYSTEM permissions" -msgstr "强制删除系统权限" - -msgid "Search for permissions." -msgstr "查找权限。" - -msgid "Modify a permission." -msgstr "修改一个权限。" - -msgid "Rename the permission object" -msgstr "重命名权限对象" - -msgid "Remove members from a permission." -msgstr "从一个权限中移除成员。" - -msgid "privileges to remove" -msgstr "待移除的特权" - -msgid "Display information about a permission." -msgstr "显示一个权限信息。" +"\n" +"获取由IPA主服务器提供的角色（DNS服务器，CA等）状态。\n" msgid "" "\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" +"IPA certificate operations\n" msgstr "" - -msgid "Ping a remote server." -msgstr "Ping一台远程服务器。" +"\n" +"IPA证书操作\n" msgid "" "\n" -"Kerberos pkinit options\n" -"\n" -"Enable or disable anonymous pkinit using the principal\n" -"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n" -"pkinit support.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Enable anonymous pkinit:\n" -" ipa pkinit-anonymous enable\n" -"\n" -" Disable anonymous pkinit:\n" -" ipa pkinit-anonymous disable\n" -"\n" -"For more information on anonymous pkinit see:\n" -"\n" -"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n" +"IPA locations\n" msgstr "" - -msgid "Enable or Disable Anonymous PKINIT." -msgstr "启用或禁用匿名PKINIT。" +"\n" +"IPA位置\n" msgid "" "\n" -"Privileges\n" -"\n" -"A privilege combines permissions into a logical task. A permission provides\n" -"the rights to do a single task. There are some IPA operations that require\n" -"multiple permissions to succeed. A privilege is where permissions are\n" -"combined in order to perform a specific task.\n" -"\n" -"For example, adding a user requires the following permissions:\n" -" * Creating a new user entry\n" -" * Resetting a user password\n" -" * Adding the new user to the default IPA users group\n" -"\n" -"Combining these three low-level tasks into a higher level task in the\n" -"form of a privilege named \"Add User\" makes it easier to manage Roles.\n" -"\n" -"A privilege may not contain other privileges.\n" -"\n" -"See role and permission for additional information.\n" -msgstr "" - -msgid "Privilege name" -msgstr "特权名" - -msgid "Privilege description" -msgstr "特权描述" - -msgid "Granting privilege to roles" -msgstr "给角色授予特权" - -msgid "Add a new privilege." -msgstr "添加一个新的特权。" - -msgid "Add members to a privilege." -msgstr "向一个特权中添加成员。" - -msgid "member role" -msgstr "成员角色" - -msgid "roles to add" -msgstr "待添加角色" - -msgid "Add permissions to a privilege." -msgstr "向一个特权中添加权限。" - -msgid "permission" -msgstr "权限" - -msgid "permissions" -msgstr "权限" - -msgid "Number of permissions added" -msgstr "已添加权限数" - -msgid "Delete a privilege." -msgstr "删除一个特权。" - -msgid "Search for privileges." -msgstr "查找特权。" - -msgid "Modify a privilege." -msgstr "修改一个特权。" - -msgid "Rename the privilege object" -msgstr "重命名特权对象" - -msgid "Remove members from a privilege" -msgstr "从特权中移除成员" - -msgid "roles to remove" -msgstr "待移除角色" - -msgid "Remove permissions from a privilege." -msgstr "从特权中移除权限。" - -msgid "Number of permissions removed" -msgstr "已移除权限数" - -msgid "Display information about a privilege." -msgstr "显示一个特权信息。" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Group" -msgstr "组" - -msgid "Manage password policy for specific group" -msgstr "管理指定组的密码策略" - -msgid "Max lifetime (days)" -msgstr "最大生存期（天）" - -msgid "Maximum password lifetime (in days)" -msgstr "最大密码生存期（天）" - -msgid "Min lifetime (hours)" -msgstr "最小生存期（小时）" - -msgid "Minimum password lifetime (in hours)" -msgstr "最小密码生存期（小时）" - -msgid "History size" -msgstr "历史大小" - -msgid "Password history size" -msgstr "密码历史大小" - -msgid "Character classes" -msgstr "字符类" - -msgid "Minimum number of character classes" -msgstr "最小字符类数量" - -msgid "Min length" -msgstr "最小长度" - -msgid "Minimum length of password" -msgstr "最短密码长度" - -msgid "Priority of the policy (higher number means lower priority" -msgstr "策略优先级（数字越大意味着优先级越低" - -msgid "Max failures" -msgstr "最大失败次数" - -msgid "Consecutive failures before lockout" -msgstr "连续失败后锁定" - -msgid "Failure reset interval" -msgstr "失败重置时间间隔" - -msgid "Period after which failure count will be reset (seconds)" -msgstr "一段时间后失败次数将被重置（秒）" - -msgid "Lockout duration" -msgstr "锁定时间" - -msgid "Period for which lockout is enforced (seconds)" -msgstr "锁定持续时间（秒）" - -msgid "Results should contain primary key attribute only (\"cn\")" -msgstr "结果应该只包括主键属性(\"cn\")" - -msgid "Add a new group password policy." -msgstr "添加一个新的组密码策略。" - -msgid "Delete a group password policy." -msgstr "删除一个组密码策略。" - -msgid "Search for group password policies." -msgstr "查找组密码策略。" - -msgid "Results should contain primary key attribute only (\"group\")" -msgstr "结果应该只包括主键属性(\"group\")" - -msgid "Modify a group password policy." -msgstr "修改一个组密码策略。" - -msgid "Display information about password policy." -msgstr "显示密码策略信息。" - -msgid "User" -msgstr "用户" - -msgid "Display effective policy for a specific user" -msgstr "显示一个指定用户的有效策略" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -"\n" -"Manage RADIUS Proxy Servers.\n" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "RADIUS proxy server name" -msgstr "RADIUS代理服务器名称" - -msgid "A description of this RADIUS proxy server" -msgstr "该RADIUS代理服务器的描述" - -msgid "Server" -msgstr "服务器" - -msgid "The hostname or IP (with or without port)" -msgstr "主机名或IP（有或没有端口）" - -msgid "Secret" -msgstr "密码" - -msgid "The secret used to encrypt data" -msgstr "密码用于数据加密" - -msgid "Timeout" -msgstr "超时" - -msgid "The total timeout across all retries (in seconds)" -msgstr "所有重试总超时（秒）" - -msgid "Retries" -msgstr "重试" - -msgid "The number of times to retry authentication" -msgstr "重试认证的次数" - -msgid "User attribute" -msgstr "用户属性" - -msgid "The username attribute on the user object" -msgstr "用户对象的用户名属性" - -msgid "Add a new RADIUS proxy server." -msgstr "添加一个新的RADIUS代理服务器。" - -msgid "Delete a RADIUS proxy server." -msgstr "删除一个RADIUS代理服务器。" - -msgid "Search for RADIUS proxy servers." -msgstr "查找RADIUS代理服务器。" - -msgid "Modify a RADIUS proxy server." -msgstr "修改一个RADIUS代理服务器。" - -msgid "Rename the RADIUS proxy server object" -msgstr "重命名RADIUS代理服务器对象" - -msgid "Display information about a RADIUS proxy server." -msgstr "显示一个RADIUS代理服务器信息。" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Domain" -msgstr "域" - -msgid "Add domain" -msgstr "添加域" - -msgid "Delete domain" -msgstr "删除域" - -msgid "Modify realm domains." -msgstr "修改realm域。" - -msgid "Force adding domain even if not in DNS" -msgstr "即使域在DNS中不存在，也强制添加它" - -msgid "Display the list of realm domains." -msgstr "显示realm域列表。" - -msgid "" -"\n" -"Roles\n" -"\n" -"A role is used for fine-grained delegation. A permission grants the ability\n" -"to perform given low-level tasks (add a user, modify a group, etc.). A\n" -"privilege combines one or more permissions into a higher-level abstraction\n" -"such as useradmin. A useradmin would be able to add, delete and modify " -"users.\n" -"\n" -"Privileges are assigned to Roles.\n" -"\n" -"Users, groups, hosts and hostgroups may be members of a Role.\n" -"\n" -"Roles can not contain other roles.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new role:\n" -" ipa role-add --desc=\"Junior-level admin\" junioradmin\n" -"\n" -" Add some privileges to this role:\n" -" ipa role-add-privilege --privileges=addusers junioradmin\n" -" ipa role-add-privilege --privileges=change_password junioradmin\n" -" ipa role-add-privilege --privileges=add_user_to_default_group " -"junioradmin\n" -"\n" -" Add a group of users to this role:\n" -" ipa group-add --desc=\"User admins\" useradmins\n" -" ipa role-add-member --groups=useradmins junioradmin\n" -"\n" -" Display information about a role:\n" -" ipa role-show junioradmin\n" -"\n" -" The result of this is that any users in the group 'junioradmin' can\n" -" add users, reset passwords or add a user to the default IPA user group.\n" -msgstr "" - -msgid "Role name" -msgstr "角色名" - -msgid "A description of this role-group" -msgstr "该角色组的描述" - -msgid "Privileges" -msgstr "特权" - -msgid "Member services" -msgstr "成员服务" - -msgid "Add a new role." -msgstr "添加一个新角色。" - -msgid "Add members to a role." -msgstr "向角色中添加成员。" - -msgid "member service" -msgstr "成员服务" - -msgid "services to add" -msgstr "待添加服务" - -msgid "Add privileges to a role." -msgstr "向一个角色中添加特权。" - -msgid "privilege" -msgstr "特权" - -msgid "privileges" -msgstr "特权" - -msgid "Number of privileges added" -msgstr "已添加特权数" - -msgid "Delete a role." -msgstr "删除一个角色。" - -msgid "Search for roles." -msgstr "查找角色。" - -msgid "Modify a role." -msgstr "修改一个角色。" - -msgid "Rename the role object" -msgstr "重命名角色对象" - -msgid "Remove members from a role." -msgstr "从一个角色中移除成员。" - -msgid "services to remove" -msgstr "待移除服务" - -msgid "Remove privileges from a role." -msgstr "从一个角色中移除权限。" - -msgid "Number of privileges removed" -msgstr "已移除权限数" - -msgid "Display information about a role." -msgstr "显示一个角色信息。" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address (using Bash\n" -" brace expansion):\n" -" ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c," -"st} \"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones.\n" -" Add telephoneNumber to the list (using Bash brace expansion):\n" -" ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "Self-service name" -msgstr "自助服务名" - -msgid "Attributes to which the permission applies." -msgstr "权限应用属性。" - -msgid "Add a new self-service permission." -msgstr "添加一个新的自助服务权限。" - -msgid "Delete a self-service permission." -msgstr "删除一个自助服务权限。" - -msgid "Search for a self-service permission." -msgstr "查找一个自助服务权限。" - -msgid "Modify a self-service permission." -msgstr "修改一个自助服务权限。" - -msgid "Display information about a self-service permission." -msgstr "显示一个自助服务权限信息。" - -msgid "" -"\n" -"SELinux User Mapping\n" -"\n" -"Map IPA users to SELinux users by host.\n" -"\n" -"Hosts, hostgroups, users and groups can be either defined within\n" -"the rule or it may point to an existing HBAC rule. When using\n" -"--hbacrule option to selinuxusermap-find an exact match is made on the\n" -"HBAC rule name, so only one or zero entries will be returned.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host " -"\"server\":\n" -" ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n" -" ipa selinuxusermap-add-host --hosts=server.example.com test1\n" -"\n" -" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an " -"existing HBAC rule for users and hosts:\n" -" ipa selinuxusermap-add --usercat=all --hbacrule=webserver --" -"selinuxuser=guest_u:s0 test2\n" -"\n" -" Display the properties of a rule:\n" -" ipa selinuxusermap-show test2\n" -"\n" -" Create a rule for a specific user. This sets the SELinux context for\n" -" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n" -" ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0." -"c1023 john_unconfined\n" -" ipa selinuxusermap-add-user --users=john john_unconfined\n" -"\n" -" Disable a rule:\n" -" ipa selinuxusermap-disable test1\n" -"\n" -" Enable a rule:\n" -" ipa selinuxusermap-enable test1\n" -"\n" -" Find a rule referencing a specific HBAC rule:\n" -" ipa selinuxusermap-find --hbacrule=allow_some\n" -"\n" -" Remove a rule:\n" -" ipa selinuxusermap-del john_unconfined\n" -"\n" -"SEEALSO:\n" -"\n" -" The list controlling the order in which the SELinux user map is applied\n" -" and the default SELinux user are available in the config-show command.\n" -msgstr "" - -msgid "SELinux User" -msgstr "SELinux用户" - -msgid "HBAC Rule" -msgstr "HBAC规则" - -msgid "HBAC Rule that defines the users, groups and hostgroups" -msgstr "HBAC规则定义了用户，用户组和主机组" - -msgid "Create a new SELinux User Map." -msgstr "创建一个新的SELinux用户映射。" - -msgid "Add target hosts and hostgroups to an SELinux User Map rule." -msgstr "向SELinux用户映射规则中添加目标主机和主机组。" - -msgid "Add users and groups to an SELinux User Map rule." -msgstr "向SELinux用户映射规则中添加用户和用户组。" - -msgid "Delete a SELinux User Map." -msgstr "删除一个SELinux用户映射。" - -msgid "Disable an SELinux User Map rule." -msgstr "禁用一个SELinux用户映射规则。" - -msgid "Enable an SELinux User Map rule." -msgstr "启用一个SELinux用户映射规则。" - -msgid "Search for SELinux User Maps." -msgstr "查找SELinux用户映射。" - -msgid "Modify a SELinux User Map." -msgstr "修改一个SELinux用户映射。" - -msgid "Remove target hosts and hostgroups from an SELinux User Map rule." -msgstr "从一个SELinux用户映射规则中移除目标主机和主机组。" - -msgid "Remove users and groups from an SELinux User Map rule." -msgstr "向SELinux用户映射规则中移除用户和用户组。" - -msgid "Display the properties of a SELinux User Map rule." -msgstr "显示一个SELinux用户映射规则的属性。" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "Service principal" -msgstr "服务主体" - -msgid "PAC type" -msgstr "PAC类型" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service, e.g. this might be necessary for NFS services." -msgstr "" -"覆盖默认支持的PAC类型列表。使用'NONE'来禁用该服务的PAC支持，例如，这可能是NFS" -"服务的必要条件。" - -msgid "Add a new IPA new service." -msgstr "添加一个新的IPA服务。" - -msgid "force principal name even if not in DNS" -msgstr "即使主体名在DNS中不存在，也强制添加它" - -msgid "Add hosts that can manage this service." -msgstr "添加可以管理该服务的主机。" - -msgid "" -"Allow users, groups, hosts or host groups to create a keytab of this service." -msgstr "允许用户，用户组，主机或主机组来创建一个该服务的keytab。" - -msgid "" -"Allow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "允许用户，用户组，主机或主机组来检索一个该服务的keytab。" - -msgid "Delete an IPA service." -msgstr "删除一个IPA服务。" - -msgid "Disable the Kerberos key and SSL certificate of a service." -msgstr "禁用一个服务的Kerberos密钥和SSL证书。" - -msgid "" -"Disallow users, groups, hosts or host groups to create a keytab of this " -"service." -msgstr "不允许用户，用户组，主机或主机组来创建该服务的keytab。" - -msgid "" -"Disallow users, groups, hosts or host groups to retrieve a keytab of this " -"service." -msgstr "不允许用户，用户组，主机或主机组来检索该服务的keytab。" - -msgid "Search for IPA services." -msgstr "查找IPA服务。" - -msgid "Results should contain primary key attribute only (\"principal\")" -msgstr "结果应该只包括主键属性(\"principal\")" - -msgid "Search for services with these managed by hosts." -msgstr "查找那些由主机管理的服务。" - -msgid "Search for services without these managed by hosts." -msgstr "查找那些不由主机管理的服务。" - -msgid "Modify an existing IPA service." -msgstr "修改一个已存在的IPA服务。" - -msgid "Remove hosts that can manage this service." -msgstr "移除可以管理该服务的主机。" - -msgid "Display information about an IPA service." -msgstr "显示一个IPA服务信息。" - -msgid "" -"\n" -"Session Support for IPA\n" -"John Dennis \n" -"\n" -"Goals\n" -"=====\n" -"\n" -"Provide per-user session data caching which persists between\n" -"requests. Desired features are:\n" -"\n" -"* Integrates cleanly with minimum impact on existing infrastructure.\n" -"\n" -"* Provides maximum security balanced against real-world performance\n" -" demands.\n" -"\n" -"* Sessions must be able to be revoked (flushed).\n" -"\n" -"* Should be flexible and easy to use for developers.\n" -"\n" -"* Should leverage existing technology and code to the maximum extent\n" -" possible to avoid re-invention, excessive implementation time and to\n" -" benefit from robustness in field proven components commonly shared\n" -" in the open source community.\n" -"\n" -"* Must support multiple independent processes which share session\n" -" data.\n" -"\n" -"* System must function correctly if session data is available or not.\n" -"\n" -"* Must be high performance.\n" -"\n" -"* Should not be tied to specific web servers or browsers. Should\n" -" integrate with our chosen WSGI model.\n" -"\n" -"Issues\n" -"======\n" -"\n" -"Cookies\n" -"-------\n" -"\n" -"Most session implementations are based on the use of cookies. Cookies\n" -"have some inherent problems.\n" -"\n" -"* User has the option to disable cookies.\n" -"\n" -"* User stored cookie data is not secure. Can be mitigated by setting\n" -" flags indicating the cookie is only to be used with SSL secured HTTP\n" -" connections to specific web resources and setting the cookie to\n" -" expire at session termination. Most modern browsers enforce these.\n" -"\n" -"Where to store session data?\n" -"----------------------------\n" -"\n" -"Session data may be stored on either on the client or on the\n" -"server. Storing session data on the client addresses the problem of\n" -"session data availability when requests are serviced by independent web\n" -"servers because the session data travels with the request. However\n" -"there are data size limitations. Storing session data on the client\n" -"also exposes sensitive data but this can be mitigated by encrypting\n" -"the session data such that only the server can decrypt it.\n" -"\n" -"The more conventional approach is to bind session data to a unique\n" -"name, the session ID. The session ID is transmitted to the client and\n" -"the session data is paired with the session ID on the server in a\n" -"associative data store. The session data is retrieved by the server\n" -"using the session ID when the receiving the request. This eliminates\n" -"exposing sensitive session data on the client along with limitations\n" -"on data size. It however introduces the issue of session data\n" -"availability when requests are serviced by more than one server\n" -"process.\n" -"\n" -"Multi-process session data availability\n" -"---------------------------------------\n" -"\n" -"Apache (and other web servers) fork child processes to handle requests\n" -"in parallel. Also web servers may be deployed in a farm where requests\n" -"are load balanced in round robin fashion across different nodes. In\n" -"both cases session data cannot be stored in the memory of a server\n" -"process because it is not available to other processes, either sibling\n" -"children of a master server process or server processes on distinct\n" -"nodes.\n" -"\n" -"Typically this is addressed by storing session data in a SQL\n" -"database. When a request is received by a server process containing a\n" -"session ID in it's cookie data the session ID is used to perform a SQL\n" -"query and the resulting data is then attached to the request as it\n" -"proceeds through the request processing pipeline. This of course\n" -"introduces coherency issues.\n" -"\n" -"For IPA the introduction of a SQL database dependency is undesired and\n" -"should be avoided.\n" -"\n" -"Session data may also be shared by independent processes by storing\n" -"the session data in files.\n" -"\n" -"An alternative solution which has gained considerable popularity\n" -"recently is the use of a fast memory based caching server. Data is\n" -"stored in a single process memory and may be queried and set via a\n" -"light weight protocol using standard socket mechanisms, memcached is\n" -"one example. A typical use is to optimize SQL queries by storing a SQL\n" -"result in shared memory cache avoiding the more expensive SQL\n" -"operation. But the memory cache has distinct advantages in non-SQL\n" -"situations as well.\n" -"\n" -"Possible implementations for use by IPA\n" -"=======================================\n" -"\n" -"Apache Sessions\n" -"---------------\n" -"\n" -"Apache has 2.3 has implemented session support via these modules:\n" -"\n" -" mod_session\n" -" Overarching session support based on cookies.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session.html\n" -"\n" -" mod_session_cookie\n" -" Stores session data in the client.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_cookie.html\n" -"\n" -" mod_session_crypto\n" -" Encrypts session data for security. Encryption key is shared\n" -" configuration parameter visible to all Apache processes and is\n" -" stored in a configuration file.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_crypto.html\n" -"\n" -" mod_session_dbd\n" -" Stores session data in a SQL database permitting multiple\n" -" processes to access and share the same session data.\n" -"\n" -" See: http://httpd.apache.org/docs/2.3/mod/mod_session_dbd.html\n" -"\n" -"Issues with Apache sessions\n" -"~~~~~~~~~~~~~~~~~~~~~~~~~~~\n" -"\n" -"Although Apache has implemented generic session support and Apache is\n" -"our web server of preference it nonetheless introduces issues for IPA.\n" -"\n" -" * Session support is only available in httpd >= 2.3 which at the\n" -" time of this writing is currently only available as a Beta release\n" -" from upstream. We currently only ship httpd 2.2, the same is true\n" -" for other distributions.\n" -"\n" -" * We could package and ship the sessions modules as a temporary\n" -" package in httpd 2.2 environments. But this has the following\n" -" consequences:\n" -"\n" -" - The code has to be backported. the module API has changed\n" -" slightly between httpd 2.2 and 2.3. The backporting is not\n" -" terribly difficult and a proof of concept has been\n" -" implemented.\n" -"\n" -" - We would then be on the hook to package and maintain a special\n" -" case Apache package. This is maintenance burden as well as a\n" -" distribution packaging burden. Both of which would be best\n" -" avoided if possible.\n" -"\n" -" * The design of the Apache session modules is such that they can\n" -" only be manipulated by other Apache modules. The ability of\n" -" consumers of the session data to control the session data is\n" -" simplistic, constrained and static during the period the request\n" -" is processed. Request handlers which are not native Apache modules\n" -" (e.g. IPA via WSGI) can only examine the session data\n" -" via request headers and reset it in response headers.\n" -"\n" -" * Shared session data is available exclusively via SQL.\n" -"\n" -"However using the 2.3 Apache session modules would give us robust\n" -"session support implemented in C based on standardized Apache\n" -"interfaces which are widely used.\n" -"\n" -"Python Web Frameworks\n" -"---------------------\n" -"\n" -"Virtually every Python web framework supports cookie based sessions,\n" -"e.g. Django, Twisted, Zope, Turbogears etc. Early on in IPA we decided\n" -"to avoid the use of these frameworks. Trying to pull in just one part\n" -"of these frameworks just to get session support would be problematic\n" -"because the code does not function outside it's framework.\n" -"\n" -"IPA implemented sessions\n" -"------------------------\n" -"\n" -"Originally it was believed the path of least effort was to utilize\n" -"existing session support, most likely what would be provided by\n" -"Apache. However there are enough basic modular components available in\n" -"native Python and other standard packages it should be possible to\n" -"provide session support meeting the aforementioned goals with a modest\n" -"implementation effort. Because we're leveraging existing components\n" -"the implementation difficulties are subsumed by other components which\n" -"have already been field proven and have community support. This is a\n" -"smart strategy.\n" -"\n" -"Proposed Solution\n" -"=================\n" -"\n" -"Our interface to the web server is via WSGI which invokes a callback\n" -"per request passing us an environmental context for the request. For\n" -"this discussion we'll name the WSGI callback \"application()\", a\n" -"conventional name in WSGI parlance.\n" -"\n" -"Shared session data will be handled by memcached. We will create one\n" -"instance of memcached on each server node dedicated to IPA\n" -"exclusively. Communication with memcached will be via a UNIX socket\n" -"located in the file system under /var/run/ipa_memcached. It will be\n" -"protected by file permissions and optionally SELinux policy.\n" -"\n" -"In application() we examine the request cookies and if there is an IPA\n" -"session cookie with a session ID we retrieve the session data from our\n" -"memcached instance.\n" -"\n" -"The session data will be a Python dict. IPA components will read or\n" -"write their session information by using a pre-agreed upon name\n" -"(e.g. key) in the dict. This is a very flexible system and consistent\n" -"with how we pass data in most parts of IPA.\n" -"\n" -"If the session data is not available an empty session data dict will\n" -"be created.\n" -"\n" -"How does this session data travel with the request in the IPA\n" -"pipeline? In IPA we use the HTTP request/response to implement RPC. In\n" -"application() we convert the request into a procedure call passing it\n" -"arguments derived from the HTTP request. The passed parameters are\n" -"specific to the RPC method being invoked. The context the RPC call is\n" -"executing in is not passed as an RPC parameter.\n" -"\n" -"How would the contextual information such as session data be bound to\n" -"the request and hence the RPC call?\n" -"\n" -"In IPA when a RPC invocation is being prepared from a request we\n" -"recognize this will only ever be processed serially by one Python\n" -"thread. A thread local dict called \"context\" is allocated for each\n" -"thread. The context dict is cleared in between requests (e.g. RPC method\n" -"invocations). The per-thread context dict is populated during the\n" -"lifetime of the request and is used as a global data structure unique to\n" -"the request that various IPA component can read from and write to with\n" -"the assurance the data is unique to the current request and/or method\n" -"call.\n" -"\n" -"The session data dict will be written into the context dict under the\n" -"session key before the RPC method begins execution. Thus session data\n" -"can be read and written by any IPA component by accessing\n" -"``context.session``.\n" -"\n" -"When the RPC method finishes execution the session data bound to the\n" -"request/method is retrieved from the context and written back to the\n" -"memcached instance. The session ID is set in the response sent back to\n" -"the client in the ``Set-Cookie`` header along with the flags\n" -"controlling it's usage.\n" -"\n" -"Issues and details\n" -"------------------\n" -"\n" -"IPA code cannot depend on session data being present, however it\n" -"should always update session data with the hope it will be available\n" -"in the future. Session data may not be available because:\n" -"\n" -" * This is the first request from the user and no session data has\n" -" been created yet.\n" -"\n" -" * The user may have cookies disabled.\n" -"\n" -" * The session data may have been flushed. memcached operates with\n" -" a fixed memory allocation and will flush entries on a LRU basis,\n" -" like with any cache there is no guarantee of persistence.\n" -"\n" -" Also we may have have deliberately expired or deleted session\n" -" data, see below.\n" -"\n" -"Cookie manipulation is done via the standard Python Cookie module.\n" -"\n" -"Session cookies will be set to only persist as long as the browser has\n" -"the session open. They will be tagged so the browser only returns\n" -"the session ID on SSL secured HTTP requests. They will not be visible\n" -"to Javascript in the browser.\n" -"\n" -"Session ID's will be created by using 48 bits of random data and\n" -"converted to 12 hexadecimal digits. Newly generated session ID's will\n" -"be checked for prior existence to handle the unlikely case the random\n" -"number repeats.\n" -"\n" -"memcached will have significantly higher performance than a SQL or file\n" -"based storage solution. Communication is effectively though a pipe\n" -"(UNIX socket) using a very simple protocol and the data is held\n" -"entirely in process memory. memcached also scales easily, it is easy\n" -"to add more memcached processes and distribute the load across them.\n" -"At this point in time we don't anticipate the need for this.\n" -"\n" -"A very nice feature of the Python memcached module is that when a data\n" -"item is written to the cache it is done with standard Python pickling\n" -"(pickling is a standard Python mechanism to marshal and unmarshal\n" -"Python objects). We adopt the convention the object written to cache\n" -"will be a dict to meet our internal data handling conventions. The\n" -"pickling code will recursively handle nested objects in the dict. Thus\n" -"we gain a lot of flexibility using standard Python data structures to\n" -"store and retrieve our session data without having to author and debug\n" -"code to marshal and unmarshal the data if some other storage mechanism\n" -"had been used. This is a significant implementation win. Of course\n" -"some common sense limitations need to observed when deciding on what\n" -"is written to the session cache keeping in mind the data is shared\n" -"between processes and it should not be excessively large (a\n" -"configurable option)\n" -"\n" -"We can set an expiration on memcached entries. We may elect to do that\n" -"to force session data to be refreshed periodically. For example we may\n" -"wish the client to present fresh credentials on a periodic basis even\n" -"if the cached credentials are otherwise within their validity period.\n" -"\n" -"We can explicitly delete session data if for some reason we believe it\n" -"is stale, invalid or compromised.\n" -"\n" -"memcached also gives us certain facilities to prevent race conditions\n" -"between different processes utilizing the cache. For example you can\n" -"check of the entry has been modified since you last read it or use CAS\n" -"(Check And Set) semantics. What has to be protected in terms of cache\n" -"coherency will likely have to be determined as the session support is\n" -"utilized and different data items are added to the cache. This is very\n" -"much data and context specific. Fortunately memcached operations are\n" -"atomic.\n" -"\n" -"Controlling the memcached process\n" -"---------------------------------\n" -"\n" -"We need a mechanism to start the memcached process and secure it so\n" -"that only IPA components can access it.\n" -"\n" -"Although memcached ships with both an initscript and systemd unit\n" -"files those are for generic instances. We want a memcached instance\n" -"dedicated exclusively to IPA usage. To accomplish this we would install\n" -"a systemd unit file or an SysV initscript to control the IPA specific\n" -"memcached service. ipactl would be extended to know about this\n" -"additional service. systemd's cgroup facility would give us additional\n" -"mechanisms to integrate the IPA memcached service within a larger IPA\n" -"process group.\n" -"\n" -"Protecting the memcached data would be done via file permissions (and\n" -"optionally SELinux policy) on the UNIX domain socket. Although recent\n" -"implementations of memcached support authentication via SASL this\n" -"introduces a performance and complexity burden not warranted when\n" -"cached is dedicated to our exclusive use and access controlled by OS\n" -"mechanisms.\n" -"\n" -"Conventionally daemons are protected by assigning a system uid and/or\n" -"gid to the daemon. A daemon launched by root will drop it's privileges\n" -"by assuming the effective uid:gid assigned to it. File system access\n" -"is controlled by the OS via the effective identity and SELinux policy\n" -"can be crafted based on the identity. Thus the memcached UNIX socket\n" -"would be protected by having it owned by a specific system user and/or\n" -"membership in a restricted system group (discounting for the moment\n" -"SELinux).\n" -"\n" -"Unfortunately we currently do not have an IPA system uid whose\n" -"identity our processes operate under nor do we have an IPA system\n" -"group. IPA does manage a collection of related processes (daemons) and\n" -"historically each has been assigned their own uid. When these\n" -"unrelated processes communicate they mutually authenticate via other\n" -"mechanisms. We do not have much of a history of using shared file\n" -"system objects across identities. When file objects are created they\n" -"are typically assigned the identity of daemon needing to access the\n" -"object and are not accessed by other daemons, or they carry root\n" -"identity.\n" -"\n" -"When our WSGI application runs in Apache it is run as a WSGI\n" -"daemon. This means when Apache starts up it forks off WSGI processes\n" -"for us and we are independent of other Apache processes. When WSGI is\n" -"run in this mode there is the ability to set the uid:gid of the WSGI\n" -"process hosting us, however we currently do not take advantage of this\n" -"option. WSGI can be run in other modes as well, only in daemon mode\n" -"can the uid:gid be independently set from the rest of Apache. All\n" -"processes started by Apache can be set to a common uid:gid specified\n" -"in the global Apache configuration, by default it's\n" -"apache:apache. Thus when our IPA code executes it is running as\n" -"apache:apache.\n" -"\n" -"To protect our memcached UNIX socket we can do one of two things:\n" -"\n" -"1. Assign it's uid:gid as apache:apache. This would limit access to\n" -" our cache only to processes running under httpd. It's somewhat\n" -" restricted but far from ideal. Any code running in the web server\n" -" could potentially access our cache. It's difficult to control what the\n" -" web server runs and admins may not understand the consequences of\n" -" configuring httpd to serve other things besides IPA.\n" -"\n" -"2. Create an IPA specific uid:gid, for example ipa:ipa. We then configure\n" -" our WSGI application to run as the ipa:ipa user and group. We also\n" -" configure our memcached instance to run as the ipa:ipa user and\n" -" group. In this configuration we are now fully protected, only our WSGI\n" -" code can read & write to our memcached UNIX socket.\n" -"\n" -"However there may be unforeseen issues by converting our code to run as\n" -"something other than apache:apache. This would require some\n" -"investigation and testing.\n" -"\n" -"IPA is dependent on other system daemons, specifically Directory\n" -"Server (ds) and Certificate Server (cs). Currently we configure ds to\n" -"run under the dirsrv:dirsrv user and group, an identity of our\n" -"creation. We allow cs to default to it's pkiuser:pkiuser user and\n" -"group. Should these other cooperating daemons also run under the\n" -"common ipa:ipa user and group identities? At first blush there would\n" -"seem to be an advantage to coalescing all process identities under a\n" -"common IPA user and group identity. However these other processes do\n" -"not depend on user and group permissions when working with external\n" -"agents, processes, etc. Rather they are designed to be stand-alone\n" -"network services which authenticate their clients via other\n" -"mechanisms. They do depend on user and group permission to manage\n" -"their own file system objects. If somehow the ipa user and/or group\n" -"were compromised or malicious code somehow executed under the ipa\n" -"identity there would be an advantage in having the cooperating\n" -"processes cordoned off under their own identities providing one extra\n" -"layer of protection. (Note, these cooperating daemons may not even be\n" -"co-located on the same node in which case the issue is moot)\n" -"\n" -"The UNIX socket behavior (ldapi) with Directory Server is as follows:\n" -"\n" -" * The socket ownership is: root:root\n" -"\n" -" * The socket permissions are: 0666\n" -"\n" -" * When connecting via ldapi you must authenticate as you would\n" -" normally with a TCP socket, except ...\n" -"\n" -" * If autobind is enabled and the uid:gid is available via\n" -" SO_PEERCRED and the uid:gid can be found in the set of users known\n" -" to the Directory Server then that connection will be bound as that\n" -" user.\n" -"\n" -" * Otherwise an anonymous bind will occur.\n" -"\n" -"memcached UNIX socket behavior is as follows:\n" -"\n" -" * memcached can be invoked with a user argument, no group may be\n" -" specified. The effective uid is the uid of the user argument and\n" -" the effective gid is the primary group of the user, let's call\n" -" this euid:egid\n" -"\n" -" * The socket ownership is: euid:egid\n" -"\n" -" * The socket permissions are 0700 by default, but this can be\n" -" modified by the -a mask command line arg which sets the umask\n" -" (defaults to 0700).\n" -"\n" -"Overview of authentication in IPA\n" -"=================================\n" -"\n" -"This describes how we currently authenticate and how we plan to\n" -"improve authentication performance. First some definitions.\n" -"\n" -"There are 4 major players:\n" -"\n" -" 1. client\n" -" 2. mod_auth_kerb (in Apache process)\n" -" 3. wsgi handler (in IPA wsgi python process)\n" -" 4. ds (directory server)\n" -"\n" -"There are several resources:\n" -"\n" -" 1. /ipa/ui (unprotected, web UI static resources)\n" -" 2. /ipa/xml (protected, xmlrpc RPC used by command line clients)\n" -" 3. /ipa/json (protected, json RPC used by javascript in web UI)\n" -" 4. ds (protected, wsgi acts as proxy, our LDAP server)\n" -"\n" -"Current Model\n" -"-------------\n" -"\n" -"This describes how things work in our current system for the web UI.\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected, is static and\n" -" contains no sensitive information. Apache replies with html and\n" -" javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json.\n" -"\n" -" 3. mod_auth_kerb is configured to protect /ipa/json, replies 401\n" -" authenticate negotiate.\n" -"\n" -" 4. Client resends with credentials\n" -"\n" -" 5. mod_auth_kerb validates credentials\n" -"\n" -" a. if invalid replies 403 access denied (stops here)\n" -"\n" -" b. if valid creates temporary ccache, adds KRB5CCNAME to request\n" -" headers\n" -"\n" -" 6. Request passed to wsgi handler\n" -"\n" -" a. validates request, KRB5CCNAME must be present, referrer, etc.\n" -"\n" -" b. ccache saved and used to bind to ds\n" -"\n" -" c. routes to specified RPC handler.\n" -"\n" -" 7. wsgi handler replies to client\n" -"\n" -"Proposed new session based optimization\n" -"---------------------------------------\n" -"\n" -"The round trip negotiate and credential validation in steps 3,4,5 is\n" -"expensive. This can be avoided if we can cache the client\n" -"credentials. With client sessions we can store the client credentials\n" -"in the session bound to the client.\n" -"\n" -"A few notes about the session implementation.\n" -"\n" -" * based on session cookies, cookies must be enabled\n" -"\n" -" * session cookie is secure, only passed on secure connections, only\n" -" passed to our URL resource, never visible to client javascript\n" -" etc.\n" -"\n" -" * session cookie has a session id which is used by wsgi handler to\n" -" retrieve client session data from shared multi-process cache.\n" -"\n" -"Changes to Apache's resource protection\n" -"---------------------------------------\n" -"\n" -" * /ipa/json is no longer protected by mod_auth_kerb. This is\n" -" necessary to avoid the negotiate expense in steps 3,4,5\n" -" above. Instead the /ipa/json resource will be protected in our wsgi\n" -" handler via the session cookie.\n" -"\n" -" * A new protected URI is introduced, /ipa/login. This resource\n" -" does no serve any data, it is used exclusively for authentication.\n" -"\n" -"The new sequence is:\n" -"\n" -" 1. Client requests /ipa/ui, this is unprotected. Apache replies with\n" -" html and javascript. The javascript requests /ipa/json.\n" -"\n" -" 2. Client sends post to /ipa/json, which is unprotected.\n" -"\n" -" 3. wsgi handler obtains session data from session cookie.\n" -"\n" -" a. if ccache is present in session data and is valid\n" -"\n" -" - request is further validated\n" -"\n" -" - ccache is established for bind to ds\n" -"\n" -" - request is routed to RPC handler\n" -"\n" -" - wsgi handler eventually replies to client\n" -"\n" -" b. if ccache is not present or not valid processing continues ...\n" -"\n" -" 4. wsgi handler replies with 401 Unauthorized\n" -"\n" -" 5. client sends request to /ipa/login to obtain session credentials\n" -"\n" -" 6. mod_auth_kerb replies 401 negotiate on /ipa/login\n" -"\n" -" 7. client sends credentials to /ipa/login\n" -"\n" -" 8. mod_auth_kerb validates credentials\n" -"\n" -" a. if valid\n" -"\n" -" - mod_auth_kerb permits access to /ipa/login. wsgi handler is\n" -" invoked and does the following:\n" -"\n" -" * establishes session for client\n" -"\n" -" * retrieves the ccache from KRB5CCNAME and stores it\n" -"\n" -" a. if invalid\n" -"\n" -" - mod_auth_kerb sends 403 access denied (processing stops)\n" -"\n" -" 9. client now posts the same data again to /ipa/json including\n" -" session cookie. Processing repeats starting at step 2 and since\n" -" the session data now contains a valid ccache step 3a executes, a\n" -" successful reply is sent to client.\n" -"\n" -"Command line client using xmlrpc\n" -"--------------------------------\n" -"\n" -"The above describes the web UI utilizing the json RPC mechanism. The\n" -"IPA command line tools utilize a xmlrpc RPC mechanism on the same\n" -"HTTP server. Access to the xmlrpc is via the /ipa/xml URI. The json\n" -"and xmlrpc API's are the same, they differ only on how their procedure\n" -"calls are marshalled and unmarshalled.\n" -"\n" -"Under the new scheme /ipa/xml will continue to be Kerberos protected\n" -"at all times. Apache's mod_auth_kerb will continue to require the\n" -"client provides valid Kerberos credentials.\n" -"\n" -"When the WSGI handler routes to /ipa/xml the Kerberos credentials will\n" -"be extracted from the KRB5CCNAME environment variable as provided by\n" -"mod_auth_kerb. Everything else remains the same.\n" -msgstr "" - -msgid "RPC command used to log the current user out of their session." -msgstr "RPC命令用于记录当前用户的会话。" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -msgstr "" - -msgid "Sudo Command" -msgstr "Sudo命令" - -msgid "A description of this command" -msgstr "该命令的一个描述" - -msgid "Sudo Command Groups" -msgstr "Sudo命令组" - -msgid "Create new Sudo Command." -msgstr "创建新的Sudo命令。" - -msgid "Delete Sudo Command." -msgstr "删除Sudo命令。" - -msgid "Search for Sudo Commands." -msgstr "查找Sudo命令。" - -msgid "Results should contain primary key attribute only (\"command\")" -msgstr "结果应该只包括主键属性(\"command\")" - -msgid "Modify Sudo Command." -msgstr "修改Sudo命令。" - -msgid "Display Sudo Command." -msgstr "显示Sudo命令。" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "Sudo Command Group" -msgstr "Sudo命令组" - -msgid "Commands" -msgstr "命令" - -msgid "Member Sudo commands" -msgstr "成员Sudo命令" - -msgid "Create new Sudo Command Group." -msgstr "创建新的Sudo命令组。" - -msgid "Add members to Sudo Command Group." -msgstr "向Sudo命令组中添加成员。" - -msgid "member sudo command" -msgstr "成员sudo命令" - -msgid "sudo commands to add" -msgstr "待添加的sudo命令" - -msgid "Delete Sudo Command Group." -msgstr "删除Sudo命令组。" - -msgid "Search for Sudo Command Groups." -msgstr "查找Sudo命令组。" - -msgid "" -"Results should contain primary key attribute only (\"sudocmdgroup-name\")" -msgstr "结果应该只包括主键属性(\"sudocmdgroup-name\")" - -msgid "Modify Sudo Command Group." -msgstr "修改Sudo命令组。" - -msgid "Remove members from Sudo Command Group." -msgstr "从Sudo命令组中移除成员。" - -msgid "sudo commands to remove" -msgstr "待移除的sudo命令" - -msgid "Display Sudo Command Group." -msgstr "显示Sudo命令组。" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA\n" -"domain, trust relationship needs to be established. Currently IPA supports\n" -"only trusts between IPA and Active Directory domains under control of " -"Windows\n" -"Server 2008 or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --" -"password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping " -"should\n" -"be done via use of external membership of non-POSIX group and then this " -"group\n" -"should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n" -"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used " -"as\n" -" a primary user GID if user authenticating to IPA domain does not have any " -"other\n" -" primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD " -"group\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" - -msgid "Domain NetBIOS name" -msgstr "域NetBIOS名" - -msgid "Domain Security Identifier" -msgstr "域安全标识符" - -msgid "SID blacklist incoming" -msgstr "进来的SID黑名单" - -msgid "SID blacklist outgoing" -msgstr "出去的SID黑名单" - -msgid "Security Identifier" -msgstr "安全标识符" - -msgid "NetBIOS name" -msgstr "NetBIOS名称" - -msgid "Domain GUID" -msgstr "域GUID" - -msgid "Fallback primary group" -msgstr "回退主要的组" - -msgid "Domain name" -msgstr "域名" - -msgid "Trusted domain partner" -msgstr "信任域合作伙伴" - -msgid "Determine whether ipa-adtrust-install has been run on this system" -msgstr "确定是否在该系统上运行ipa-adtrust-install" - -msgid "" -"Determine whether Schema Compatibility plugin is configured to serve trusted " -"domain users and groups" -msgstr "确定是否将模式兼容插件配置成服务器信任域用户和用户组" - -#, fuzzy -msgid "Determine whether ipa-adtrust-install has been run with sidgen task" -msgstr "确定是否在该系统上运行ipa-adtrust-install" - -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -" " -msgstr "" - -msgid "Trust type (ad for Active Directory, default)" -msgstr "信任类型（活动目录，默认）" - -msgid "Active Directory domain administrator" -msgstr "活动目录域管理员" - -msgid "Active Directory domain administrator's password" -msgstr "活动目录域管理员密码" - -msgid "Domain controller for the Active Directory domain (optional)" -msgstr "活动目录域的域控制器（可选的）" - -#, fuzzy -msgid "Shared secret for the trust" -msgstr "查找信任域" - -msgid "First Posix ID of the range reserved for the trusted domain" -msgstr "信任域范围的第一个Posix ID" - -msgid "Size of the ID range reserved for the trusted domain" -msgstr "信任域ID范围的大小" - -msgid "" -"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" -msgstr "信任域ID范围的类型，是ipa-ad-trust-posix和ipa-ad-trust中的一个" - -msgid "Delete a trust." -msgstr "删除一个信任。" - -msgid "Refresh list of the domains associated with the trust" -msgstr "刷新与信任相关的域列表" - -msgid "Search for trusts." -msgstr "查找信任。" - -msgid "Results should contain primary key attribute only (\"realm\")" -msgstr "结果应该只包括主键属性(\"realm\")" - -msgid "" -"\n" -"Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -msgid "Resolve security identifiers of users and groups in trusted domains" -msgstr "在信任域中重新解析用户和用户组的安全标识符" - -msgid "Security Identifiers (SIDs)" -msgstr "安全标识符（SIDs）" - -msgid "Display information about a trust." -msgstr "显示信任信息。" - -msgid "Modify global trust configuration." -msgstr "修改全局信任配置。" - -msgid "Show global trust configuration." -msgstr "显示全局信任配置。" - -msgid "Allow access from the trusted domain" -msgstr "允许访问信任域" - -msgid "Remove information about the domain associated with the trust." -msgstr "移除与信任相关的域信息。" - -msgid "Disable use of IPA resources by the domain of the trust" -msgstr "禁止使用信任域中的IPA资源" - -msgid "Allow use of IPA resources by the domain of the trust" -msgstr "允许使用信任域中的IPA资源" - -msgid "Search domains of the trust" -msgstr "查找信任域" - -msgid "Results should contain primary key attribute only (\"domain\")" -msgstr "结果应该只包括主键属性(\"domain\")" - -msgid "Modify trustdomain of the trust" -msgstr "修改信任的信任域" - -msgid "" -"\n" -"Users\n" -"\n" -"Manage user entries. All users are POSIX users.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"Disabling a user account prevents that user from obtaining new Kerberos\n" -"credentials. It does not invalidate any credentials that have already\n" -"been issued.\n" -"\n" -"Password management is not a part of this module. For more information\n" -"about this topic please see: ipa help passwd\n" -"\n" -"Account lockout on password failure happens per IPA master. The user-status\n" -"command can be used to identify which master the user is locked out on.\n" -"It is on that master the administrator must unlock the user.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new user:\n" -" ipa user-add --first=Tim --last=User --password tuser1\n" -"\n" -" Find all users whose entries include the string \"Tim\":\n" -" ipa user-find Tim\n" -"\n" -" Find all users with \"Tim\" as the first name:\n" -" ipa user-find --first=Tim\n" -"\n" -" Disable a user account:\n" -" ipa user-disable tuser1\n" -"\n" -" Enable a user account:\n" -" ipa user-enable tuser1\n" -"\n" -" Delete a user:\n" -" ipa user-del tuser1\n" -msgstr "" - -msgid "First name" -msgstr "名" - -msgid "Last name" -msgstr "姓" - -msgid "Full name" -msgstr "全名" - -msgid "Display name" -msgstr "显示名称" - -msgid "Initials" -msgstr "名字的首字母" - -msgid "Kerberos principal" -msgstr "Kerberos主体" - -msgid "Kerberos principal expiration" -msgstr "Kerberos主体过期" - -msgid "Email address" -msgstr "邮件地址" - -msgid "Prompt to set the user password" -msgstr "提示设置用户密码" - -msgid "Generate a random user password" -msgstr "生成一个随机用户密码" - -msgid "User ID Number (system will assign one if not provided)" -msgstr "用户ID号码（如果没有提供系统会分配一个）" - -msgid "Street address" -msgstr "街道地址" - -msgid "City" -msgstr "城市" - -msgid "State/Province" -msgstr "州/省" - -msgid "ZIP" -msgstr "" - -msgid "Telephone Number" -msgstr "电话号码" - -msgid "Mobile Telephone Number" -msgstr "移动电话号码" - -msgid "Pager Number" -msgstr "传真号码" - -msgid "Fax Number" -msgstr "传真号码" - -msgid "Org. Unit" -msgstr "组织单位" - -msgid "Job Title" -msgstr "职称" - -msgid "Car License" -msgstr "汽车执照" - -msgid "Account disabled" -msgstr "禁用账户" - -msgid "User authentication types" -msgstr "用户认证类型" - -msgid "Types of supported user authentication" -msgstr "支持的用户认证类型" - -msgid "" -"User category (semantics placed on this attribute are for local " -"interpretation)" -msgstr "用户类别（该属性的语义是就近解读）" - -msgid "RADIUS proxy configuration" -msgstr "RADIUS代理配置" - -msgid "RADIUS proxy username" -msgstr "RADIUS代理名称" - -msgid "Department Number" -msgstr "部门编号" - -msgid "Employee Number" -msgstr "员工编号" - -msgid "Employee Type" -msgstr "员工类型" - -msgid "Preferred Language" -msgstr "首选语言" - -msgid "Kerberos keys available" -msgstr "Kerberos密码可用" - -msgid "Add a new user." -msgstr "添加一个新用户。" - -msgid "Don't create user private group" -msgstr "不创建用户私有组" - -msgid "Delete a user." -msgstr "删除一个用户。" - -msgid "Disable a user account." -msgstr "禁用一个用户账户。" - -msgid "Enable a user account." -msgstr "启用一个用户账户。" - -msgid "Search for users." -msgstr "查找用户。" - -msgid "Self" -msgstr "自己" - -msgid "Display user record for current Kerberos principal" -msgstr "显示当前Kerberos主体的用户记录" - -msgid "Results should contain primary key attribute only (\"login\")" -msgstr "结果应该只包括主键属性(\"login\")" - -msgid "Search for users with these member of groups." -msgstr "查找包含这些组成员的用户。" - -msgid "Search for users without these member of groups." -msgstr "查找不包含这些组成员的用户。" - -msgid "Search for users with these member of netgroups." -msgstr "查找包含这些网络组成员的用户。" - -msgid "Search for users without these member of netgroups." -msgstr "查找不包含这些网络组成员的用户。" - -msgid "Search for users with these member of roles." -msgstr "查找包含这些角色成员的用户。" - -msgid "Search for users without these member of roles." -msgstr "查找不包含这些角色成员的用户。" - -msgid "Search for users with these member of HBAC rules." -msgstr "查找包含这些HBAC规则成员的用户。" - -msgid "Search for users without these member of HBAC rules." -msgstr "查找不包含这些HBAC规则成员的用户。" - -msgid "Search for users with these member of sudo rules." -msgstr "查找包含这些sudo规则成员的用户。" - -msgid "Search for users without these member of sudo rules." -msgstr "查找不包含这些sudo规则成员的用户。" - -msgid "Modify a user." -msgstr "修改一个用户。" - -msgid "Rename the user object" -msgstr "重命名用户对象" - -msgid "Display information about a user." -msgstr "显示一个用户信息。" - -msgid "" -"\n" -"Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again.\n" -" " -msgstr "" - -msgid "" -"\n" -"Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -" " -msgstr "" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" "IPA provides a means to configure the various aspects of Sudo:\n" " Users: The user(s)/group(s) allowed to invoke Sudo.\n" " Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " @@ -7911,427 +336,191 @@ msgid "" "invoked with.\n" " RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" " Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" msgstr "" - -msgid "Command category" -msgstr "命令类别" - -msgid "Command category the rule applies to" -msgstr "规则适用的命令类别" - -msgid "RunAs User category" -msgstr "作为用户类别来运行" - -msgid "RunAs User category the rule applies to" -msgstr "作为规则适用的用户类别来运行" - -msgid "RunAs Group category" -msgstr "作为用户组类别来运行" - -msgid "RunAs Group category the rule applies to" -msgstr "作为规则适用的用户组类别来运行" - -msgid "Sudo order" -msgstr "Sudo命令" - -#, fuzzy -msgid "integer to order the Sudo rules" -msgstr "向Sudo规则中添加一个选项。" - -msgid "External User" -msgstr "外部用户" - -msgid "External User the rule applies to (sudorule-find only)" -msgstr "规则适用的外部用户（只是sudorule-find）" - -#, fuzzy -msgid "Host Masks" -msgstr "主机" - -msgid "Sudo Allow Commands" -msgstr "Sudo允许命令" - -msgid "Sudo Deny Commands" -msgstr "Sudo阻止命令" - -msgid "Sudo Allow Command Groups" -msgstr "Sudo运行命令组" - -msgid "Sudo Deny Command Groups" -msgstr "Sudo阻止命令组" - -msgid "RunAs Users" -msgstr "作为用户来运行" - -msgid "Run as a user" -msgstr "作为一个用户来运行" - -msgid "Groups of RunAs Users" -msgstr "作为用户来运行的用户组" - -msgid "Run as any user within a specified group" -msgstr "作为任何一个有指定组用户来运行" - -msgid "RunAs External User" -msgstr "作为外部用户来运行" - -msgid "External User the commands can run as (sudorule-find only)" -msgstr "外部用户可以运行的命令（只是sudorule-find）" - -msgid "External Groups of RunAs Users" -msgstr "作为用户来运行的外部用户组" - -msgid "External Groups of users that the command can run as" -msgstr "外部用户组可以运行的命令" - -msgid "RunAs Groups" -msgstr "作为用户组来运行" - -msgid "Run with the gid of a specified POSIX group" -msgstr "以一个指定POSIX组的gid来运行" - -msgid "RunAs External Group" -msgstr "作为外部用户组来运行" - -msgid "External Group the commands can run as (sudorule-find only)" -msgstr "外部用户组可以运行的命令（只是sudorule-find）" - -msgid "Sudo Option" -msgstr "Sudo选项" - -msgid "Create new Sudo Rule." -msgstr "创建新的Sudo规则。" - -msgid "Add commands and sudo command groups affected by Sudo Rule." -msgstr "添加受Sudo规则影响的命令和sudo命令组。" - -msgid "member sudo command group" -msgstr "成员sudo命令组" - -msgid "sudo command groups to add" -msgstr "待添加的sudo命令组" - -msgid "Add hosts and hostgroups affected by Sudo Rule." -msgstr "添加受Sudo规则影响的主机和主机组。" - -msgid "host masks of allowed hosts" -msgstr "" - -msgid "Add an option to the Sudo Rule." -msgstr "向Sudo规则中添加一个选项。" - -msgid "Add group for Sudo to execute as." -msgstr "" - -#, fuzzy -msgid "Add users and groups for Sudo to execute as." -msgstr "添加受Sudo规则影响的用户和用户组。" - -msgid "Add users and groups affected by Sudo Rule." -msgstr "添加受Sudo规则影响的用户和用户组。" - -msgid "Delete Sudo Rule." -msgstr "删除Sudo规则。" - -msgid "Disable a Sudo Rule." -msgstr "禁用一个Sudo规则。" - -msgid "Enable a Sudo Rule." -msgstr "启用一个Sudo规则。" - -msgid "Search for Sudo Rule." -msgstr "查找Sudo规则。" - -msgid "Results should contain primary key attribute only (\"sudorule-name\")" -msgstr "结果应该只包括主键属性(\"sudorule-name\")" - -msgid "Modify Sudo Rule." -msgstr "修改Sudo规则。" - -msgid "Remove commands and sudo command groups affected by Sudo Rule." -msgstr "移除受Sudo规则影响的命令和命令组。" - -msgid "sudo command groups to remove" -msgstr "待移除的sudo命令组" - -msgid "Remove hosts and hostgroups affected by Sudo Rule." -msgstr "移除受Sudo规则影响的主机和主机组。" - -msgid "Remove an option from Sudo Rule." -msgstr "从Sudo规则中移除一个选项。" - -#, fuzzy -msgid "Remove group for Sudo to execute as." -msgstr "从Sudo规则中移除一个选项。" - -#, fuzzy -msgid "Remove users and groups for Sudo to execute as." -msgstr "移除受Sudo规则影响的用户和用户组。" - -msgid "Remove users and groups affected by Sudo Rule." -msgstr "移除受Sudo规则影响的用户和用户组。" - -msgid "Display Sudo Rule." -msgstr "显示Sudo规则。" - -msgid "Time limit of search in seconds (0 is unlimited)" -msgstr "时间限制在几秒钟内的搜索（0代表无限制）" - -msgid "Maximum number of entries returned (0 is unlimited)" -msgstr "返回的最大条目数（0代表无限制）" +"\n" +"IPA提供了一种方法来配置Sudo的各个方面：\n" +" 用户：用户/用户组允许调用Sudo。\n" +" 主机：主机/主机组上的用户允许调用Sudo。\n" +" 允许的命令：指定命令允许通过Sudo来运行。\n" +" 阻止的命令：指定命令禁止通过Sudo来运行。\n" +" 作为用户来运行：Sudo会调用用户或用户组的权限。\n" +" 作为组来运行：Sudo会调用组的gid权限。\n" +" 选项：各种Sudoers选项可以修改Sudo的行为。\n" msgid "" "\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which principals are\n" -"permitted to have certificates issued using a given certificate\n" -"profile.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile:\n" -" ipa caacl-add test --usercat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile:\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" +"IPA server roles\n" msgstr "" - -msgid "ACL name" -msgstr "ACL名称" - -msgid "Profile category" -msgstr "配置文件类别" - -msgid "Profile category the ACL applies to" -msgstr "ACL适用于配置文件类别" - -msgid "User category the ACL applies to" -msgstr "ACL适用于用户类别" - -msgid "Host category the ACL applies to" -msgstr "ACL适用于主机类别" - -msgid "Service category the ACL applies to" -msgstr "ACL适用于服务类别" - -msgid "Profiles" -msgstr "配置文件" - -msgid "Create a new CA ACL." -msgstr "创建一个新的CA ACL。" - -msgid "Add target hosts and hostgroups to a CA ACL." -msgstr "向一个CA ACL中添加目标主机和主机组。" - -msgid "Add profiles to a CA ACL." -msgstr "向一个CA ACL中添加配置文件。" - -msgid "member Certificate Profile" -msgstr "成员证书配置文件" - -msgid "Certificate Profiles to add" -msgstr "待添加的证书配置文件" - -msgid "Add services to a CA ACL." -msgstr "向一个CA ACL中添加服务。" - -msgid "Add users and groups to a CA ACL." -msgstr "向一个CA ACL中添加用户和用户组。" - -msgid "Delete a CA ACL." -msgstr "删除一个CA ACL。" - -msgid "Disable a CA ACL." -msgstr "禁用一个CA ACL。" - -msgid "Enable a CA ACL." -msgstr "启用一个CA ACL。" - -msgid "Search for CA ACLs." -msgstr "查找CA ACLs。" - -msgid "Modify a CA ACL." -msgstr "修改一个CA ACL。" - -msgid "Remove target hosts and hostgroups from a CA ACL." -msgstr "从一个CA ACL中移除目标主机和主机组。" - -msgid "Remove profiles from a CA ACL." -msgstr "从一个CA ACL中移除配置文件。" - -msgid "Certificate Profiles to remove" -msgstr "待移除的证书配置文件" - -msgid "Remove services from a CA ACL." -msgstr "从一个CA ACL中移除服务。" - -msgid "Remove users and groups from a CA ACL." -msgstr "从一个CA ACL中移除用户和用户组。" - -msgid "Display the properties of a CA ACL." -msgstr "显示一个CA ACL的属性。" - -msgid "Principal for this certificate (e.g. HTTP/test.example.com)" -msgstr "该证书的主体（例如：HTTP/test.example.com）" - -msgid "Profile ID" -msgstr "配置文件ID" - -msgid "Certificate Profile to use" -msgstr "待使用的证书配置文件" +"\n" +"IPA服务器角色\n" msgid "" "\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert --file UserCert.profile " -"--desc \"User Certificates\" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" +"IPA servers\n" msgstr "" +"\n" +"IPA服务器\n" -msgid "Profile ID for referring to this profile" -msgstr "指向该配置文件的配置文件ID" +msgid "" +"\n" +"IPA supports the use of OTP tokens for multi-factor authentication. This\n" +"code enables the management of OTP tokens.\n" +msgstr "" +"\n" +"IPA支持使用OTP令牌来多因素认证。这个码能管理OTP令牌。\n" -msgid "Profile description" -msgstr "配置文件描述" +msgid "" +"\n" +"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" +"authentications. This permits a great deal of flexibility when\n" +"integrating with third-party authentication services.\n" +msgstr "" +"\n" +"IPA对于krb5 OTP认证支持使用额外的RADIUS代理服务器。这在集成第三方认证服务时提" +"供了很多方便。\n" -msgid "Brief description of this profile" -msgstr "该配置文件的简要描述" +msgid "" +"\n" +"Implements a set of commands for managing server SSL certificates.\n" +msgstr "" +"\n" +"实现了一组命令来管理服务器的SSL证书。\n" -msgid "Store issued certificates" -msgstr "存储已发布证书" +msgid "" +"\n" +"In order to request a certificate:\n" +msgstr "" +"\n" +"为了请求一个证书：\n" -msgid "Whether to store certs issued using this profile" -msgstr "是否存储使用该配置文件的证书发布" +msgid "" +"\n" +"Joining an IPA domain\n" +msgstr "" +"\n" +"加入一个IPA域\n" -msgid "Delete a Certificate Profile." -msgstr "删除一个证书配置文件。" +msgid "" +"\n" +"Manage Certificate Authorities\n" +msgstr "" +"\n" +"管理证书颁发机构\n" -msgid "Search for Certificate Profiles." -msgstr "查找证书配置文件。" +msgid "" +"\n" +"Manage DNS zone and resource records.\n" +msgstr "" +"\n" +"管理DNS区域和资源记录。\n" -msgid "Import a Certificate Profile." -msgstr "导入一个证书配置文件。" +msgid "" +"\n" +"Manage OTP tokens.\n" +msgstr "" +"\n" +"管理OTP 令牌。\n" -msgid "Filename of a raw profile. The XML format is not supported." -msgstr "原始配置文件的文件名。不支持XML格式。" +msgid "" +"\n" +"Manage RADIUS Proxy Servers.\n" +msgstr "" +"\n" +"管理RADIUS代理服务器。\n" -msgid "Modify Certificate Profile configuration." -msgstr "修改证书配置文件配置。" +msgid "" +"\n" +"Manage YubiKey tokens.\n" +msgstr "" +"\n" +"管理YubiKey令牌。\n" -msgid "File containing profile configuration" -msgstr "文件包含配置文件配置" +msgid "" +"\n" +"Manage vaults.\n" +msgstr "" +"\n" +"管理库。\n" -msgid "Display the properties of a Certificate Profile." -msgstr "显示一个证书配置文件的属性。" +msgid "" +"\n" +"Managed permissions\n" +msgstr "" +"\n" +"管理权限\n" -msgid "Write profile configuration to file" -msgstr "将配置文件配置写进文件" +msgid "" +"\n" +"Manipulate DNS locations\n" +msgstr "" +"\n" +"设置DNS位置\n" -msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" -msgstr "最大的时间（秒）搜索（-1或0表示无限制）" +msgid "" +"\n" +"Manipulate DNS server configuration\n" +msgstr "" +"\n" +"设置DNS服务器配置\n" -msgid "Maximum number of records to search (-1 or 0 is unlimited)" -msgstr "最大数量的搜索记录（-1或0表示无限制）" +msgid "" +"\n" +"Misc plug-ins\n" +msgstr "" +"\n" +"Misc插件\n" + +msgid "" +"\n" +"Note that reason code 7 is not used. See RFC 5280 for more details:\n" +msgstr "" +"\n" +"注意没有使用原因码7。查看RFC 5280以获取更多详细信息：\n" + +msgid "" +"\n" +"Note the distinction between attributes and entries. The permissions are\n" +"independent, so being able to add a user does not mean that the user will\n" +"be editable.\n" +msgstr "" +"\n" +"注意属性和条目之间的区别。权限是独立的，能添加一个用户并不代表该用户是可编辑" +"的。\n" + +msgid "" +"\n" +"OTP Tokens\n" +msgstr "" +"\n" +"OTP令牌\n" + +msgid "" +"\n" +"Permissions\n" +msgstr "" +"\n" +"权限\n" + +msgid "" +"\n" +"Plugins not accessible directly through the CLI, commands used internally\n" +msgstr "" +"\n" +"通过CLI不能直接访问插件，需要使用内部命令\n" + +msgid "" +"\n" +"Provides API introspection capabilities.\n" +msgstr "" +"\n" +"提供API自省能力。\n" + +msgid "" +"\n" +"RADIUS Proxy Servers\n" +msgstr "" +"\n" +"RADIUS代理服务器\n" msgid "" "\n" @@ -8340,695 +529,186 @@ msgstr "" "\n" "提高IPA域级别。\n" -msgid "Query current Domain Level." -msgstr "查询当前域级别。" - -msgid "Current domain level:" -msgstr "当前域级别：" - -msgid "Change current Domain Level." -msgstr "改变当前域级别。" - -msgid "Domain Level" -msgstr "域级别" - -msgid "Add certificates to host entry" -msgstr "向主机条目中添加证书" - -msgid "Remove certificates from host entry" -msgstr "从主机条目中移除证书" - +#, python-format msgid "" "\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" +"Removal of '%(hostname)s' leads to disconnected topology in suffix " +"'%(suffix)s':\n" +"%(errors)s" msgstr "" +"\n" +"删除'%(hostname)s'导致在后缀'%(suffix)s'拓扑中失去连接：%(errors)s" +#, python-format msgid "" "\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " +"Replication topology in suffix '%(suffix)s' is disconnected:\n" +"%(errors)s" msgstr "" +"\n" +"复制拓扑后缀'%(suffix)s'已失去连接：%(errors)s" msgid "" "\n" -"Modify ID range.\n" -"\n" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -" " +"Rights define what operations are allowed, and may be one or more\n" +"of the following:\n" +"1. write - write one or more attributes\n" +"2. read - read one or more attributes\n" +"3. search - search on one or more attributes\n" +"4. compare - compare one or more attributes\n" +"5. add - add a new entry to the tree\n" +"6. delete - delete an existing entry\n" +"7. all - all permissions are granted\n" msgstr "" - -msgid "Fallback to AD DC LDAP" -msgstr "回退到AD DC LDAP" +"\n" +"权限定义了允许哪些操作，可能是下面的一个或多个：\n" +"1. 写 - 写一条或多条属性\n" +"2. 读 - 读一条或多条属性\n" +"3. 查找 - 查找一条或多条属性\n" +"4. 比较 - 比较一条或多条属性\n" +"5. 添加 - 添加一条新属性到树中\n" +"6. 删除 - 删除一条已存在的条目\n" +"7. 全部 - 授予的所有权限\n" msgid "" -"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" -"way trusts only." -msgstr "当解析AD信任对象时允许回退到AD DC LDAP。仅供双向信任。" - -msgid "" -"Applies ID View to specified hosts or current members of specified " -"hostgroups. If any other ID View is applied to the host, it is overridden." +"\n" +"SEARCHING:\n" msgstr "" -"ID视图适用于指定的主机或指定主机组的当前成员。如果该主机已有其他ID视图，则覆" -"盖它。" - -msgid "Add to default group" -msgstr "添加到默认组" - -msgid "Add migrated users without a group to a default group (default: true)" -msgstr "添加没有组的移植用户到一个默认组（默认：正确的）" - -msgid "Search scope" -msgstr "范围查找" +"\n" +"查找：\n" msgid "" -"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " -"to onelevel" -msgstr "用户和用户组的LDAP范围查找：基，一级，或子树。默认是一级" - -msgid "Remove users that can manage this token." -msgstr "移除可以管理该令牌的用户。" - -msgid "Target DN subtree" -msgstr "目标DN子树" - -msgid "" -"Optional DN subtree where an entry can be moved to (must be in the subtree, " -"but may not yet exist)" -msgstr "" - -msgid "Origin DN subtree" -msgstr "原始DN子树" - -msgid "" -"Optional DN subtree from where an entry can be moved (must be in the " -"subtree, but may not yet exist)" +"\n" +"Standard vault uses a secure mechanism to transport and\n" +"store the secret. The secret can only be retrieved by users\n" +"that have access to the vault.\n" msgstr "" +"\n" +"标准库使用一种安全机制来传输和存储密码。密码仅能被有权限访问该库的用户检" +"索。\n" msgid "" "\n" -"IPA servers\n" -"\n" -"Get information about installed IPA servers.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Find all servers:\n" -" ipa server-find\n" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" +"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " +"issuance\n" +"of X.509 certificates.\n" msgstr "" - -msgid "Server name" -msgstr "服务名称" - -msgid "IPA server hostname" -msgstr "IPA服务主机名" - -msgid "Managed suffix" -msgstr "管理的后缀" - -msgid "Min domain level" -msgstr "最低域级别" - -msgid "Minimum domain level" -msgstr "最低域级别" - -msgid "Max domain level" -msgstr "最高域级别" - -msgid "Maximum domain level" -msgstr "最高域级别" - -msgid "Delete IPA server." -msgstr "删除IPA服务器。" - -msgid "Search for IPA servers." -msgstr "查找IPA服务器。" - -msgid "Show IPA server." -msgstr "显示IPA服务器。" - -msgid "Add new certificates to a service" -msgstr "向一个服务中添加新证书" - -msgid "Remove certificates from a service" -msgstr "从一个服务中移除证书" +"\n" +"从属证书颁发机构（Sub-CAs）可以当作是X.509证书的发行范围。\n" msgid "" "\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" +"Sudo (su \"do\") allows a system administrator to delegate authority to\n" +"give certain users (or groups of users) the ability to run some (or all)\n" +"commands as root or another user while providing an audit trail of the\n" +"commands and their arguments.\n" msgstr "" - -msgid "Allowed Target" -msgstr "允许的目标" - -msgid "Create a new service delegation rule." -msgstr "创建一个新的服务授权规则。" - -msgid "Add member to a named service delegation rule." -msgstr "向一个命名服务授权规则中添加成员。" - -msgid "member principal" -msgstr "成员主体" - -msgid "principal to add" -msgstr "待添加主体" - -msgid "Add target to a named service delegation rule." -msgstr "向一个命名服务授权规则中添加目标。" - -msgid "member service delegation target" -msgstr "成员服务授权目标" - -msgid "service delegation targets to add" -msgstr "待添加的服务授权目标" - -msgid "Delete service delegation." -msgstr "删除服务授权。" - -msgid "Search for service delegations rule." -msgstr "查找服务授权规则。" - -msgid "Results should contain primary key attribute only (\"delegation-name\")" -msgstr "结果应该只包括主键属性(\"delegation-name\")" - -msgid "Remove member from a named service delegation rule." -msgstr "从一个命名服务授权规则中移除成员。" - -msgid "principal to remove" -msgstr "待移除的主体" - -msgid "Remove target from a named service delegation rule." -msgstr "从一个命名服务授权规则中移除目标。" - -msgid "service delegation targets to remove" -msgstr "待移除的服务授权目标" - -msgid "Display information about a named service delegation rule." -msgstr "显示一个命名服务授权规则信息。" - -msgid "Create a new service delegation target." -msgstr "创建一个新的服务授权目标。" - -msgid "Add member to a named service delegation target." -msgstr "向一个命名服务授权规则中添加成员。" - -msgid "Delete service delegation target." -msgstr "删除服务授权目标。" - -msgid "Search for service delegation target." -msgstr "查找服务授权目标。" - -msgid "Remove member from a named service delegation target." -msgstr "从一个命名服务授权目标中移除成员。" - -msgid "Display information about a named service delegation target." -msgstr "显示一个命名服务授权目标信息。" +"\n" +"Sudo (su \"do\")允许一个系统管理员给特定用户（或用户组）授予权限使其有以root" +"或其他用户的能力来运行一些（或全部）命令，同时会对命令和命令参数提供一个审计" +"跟踪。\n" msgid "" "\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries\n" -"contain credentials) and are candidate to become Active entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"User can authenticate with Active entries, at the condition they have\n" -"credentials\n" -"\n" -"Delete user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"User can not authenticate with those entries (even if the entries contain " -"credentials)\n" -"\n" -"The stage user container contains entries\n" -" - created by 'stageuser-add' commands that are Posix users\n" -" - created by external provisioning system\n" -"\n" -"A valid stage user entry MUST:\n" -" - entry RDN is 'uid'\n" -" - ipaUniqueID is 'autogenerate'\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the Delete container\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" +"Sudo Rules\n" msgstr "" +"\n" +"Sudo规则\n" -msgid "Activate a stage user." -msgstr "激活一个计划用户。" +msgid "" +"\n" +"Symmetric vault is similar to the standard vault, but it\n" +"pre-encrypts the secret using a password before transport.\n" +"The secret can only be retrieved using the same password.\n" +msgstr "" +"\n" +"对称库和标准库类似，但它在传输前会使用一个密码来预加密该密码。密码仅能使用相" +"同的密码来检索。\n" -#, fuzzy -msgid "Add a new stage user." -msgstr "添加一个新用户。" +msgid "" +"\n" +"The automember-rebuild command can be used to retroactively run automember " +"rules\n" +"against existing entries, thus rebuilding their membership.\n" +msgstr "" +"\n" +"automember-rebuild命令可以用来对现有条目跟踪运行自动成员规则，以此来重建它们" +"的成员组。\n" -msgid "Create Stage user in from a delete user" -msgstr "从一个删除用户中创建计划用户" +msgid "" +"\n" +"The date format is YYYY-mm-dd.\n" +msgstr "" +"\n" +"日期格式是YYYY-mm-dd。\n" -msgid "Delete a stage user." -msgstr "删除一个计划用户。" +msgid "" +"\n" +"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" +"subject to values configured in the server.\n" +msgstr "" +"\n" +"dogtag CA只是使用CSR的CN值，并强制主题的其他值在服务器中配置。\n" -msgid "Search for stage users." -msgstr "查找计划用户。" +msgid "" +"\n" +"The following revocation reasons are supported:\n" +"\n" +msgstr "" +"\n" +"支持下面的撤销原因：\n" -msgid "Search for stage users with these member of groups." -msgstr "查找包含这些组成员的计划用户。" +msgid "" +"\n" +"There are a number of allowed targets:\n" +"1. subtree: a DN; the permission applies to the subtree under this DN\n" +"2. target filter: an LDAP filter\n" +"3. target: DN with possible wildcards, specifies entries permission applies " +"to\n" +msgstr "" +"\n" +"有许多允许的目标：\n" +"1. 子树：一个DN；在该DN下应用权限的子树\n" +"2. 目标过滤器：一个LDAP过滤器\n" +"3. 目标：权限适用于带有可能通配符，指定条目的DN\n" -msgid "Search for stage users without these member of groups." -msgstr "查找不包含这些组成员的计划用户。" +msgid "" +"\n" +"This code is an extension to the otptoken plugin and provides support for\n" +"reading/writing YubiKey tokens directly.\n" +msgstr "" +"\n" +"这段代码是otp令牌插件的一个扩展，并对读/写YubiKey令牌提供直接的支持。\n" -msgid "Search for stage users with these member of netgroups." -msgstr "查找包含这些网络组成员的计划用户。" - -msgid "Search for stage users without these member of netgroups." -msgstr "查找不包含这些网络组成员的计划用户。" - -msgid "Search for stage users with these member of roles." -msgstr "查找包含这些角色成员的计划用户。" - -msgid "Search for stage users without these member of roles." -msgstr "查找不包含这些角色成员的计划用户。" - -msgid "Search for stage users with these member of HBAC rules." -msgstr "查找包含这些HBAC规则成员的计划用户。" - -msgid "Search for stage users without these member of HBAC rules." -msgstr "查找不包含这些HBAC规则成员的计划用户。" - -msgid "Search for stage users with these member of sudo rules." -msgstr "查找包含这些sudo规则成员的计划用户。" - -msgid "Search for stage users without these member of sudo rules." -msgstr "查找不包含这些sudo规则成员的计划用户。" - -msgid "Modify a stage user." -msgstr "修改一个计划用户。" - -msgid "Rename the stage user object" -msgstr "重命名计划用户对象" - -msgid "Display information about a stage user." -msgstr "显示一个计划用户信息。" - -#, fuzzy msgid "" "\n" "Topology\n" "\n" -"Management of a replication topology.\n" -"\n" -"Requires minimum domain level 1.\n" +"Management of a replication topology at domain level 1.\n" msgstr "" "\n" "拓扑\n" "\n" "域级别为1的复制拓扑的管理。\n" -msgid "Segment name" -msgstr "段名称" - -msgid "Arbitrary string identifying the segment" +msgid "" +"\n" +"User vaults are vaults owned used by a particular user. Private\n" +"vaults are vaults owned the current user. Service vaults are\n" +"vaults owned by a service. Shared vaults are owned by the admin\n" +"but they can be used by other users or services.\n" msgstr "" - -msgid "Left node" -msgstr "左节点" - -msgid "Left replication node - an IPA server" -msgstr "左复制节点-IPA服务器" - -msgid "Right node" -msgstr "右节点" - -msgid "Right replication node - an IPA server" -msgstr "右复制节点-IPA服务器" - -msgid "Connectivity" -msgstr "连接" - -msgid "Direction of replication between left and right replication node" -msgstr "" - -#, fuzzy -msgid "Attributes to strip" -msgstr "待复制属性" +"\n" +"用户库被特定用户拥有并使用。私有库被当前用户拥有。服务库被一个服务拥有。共享" +"库被管理员拥有但可以被其他用户或服务使用。\n" msgid "" -"A space separated list of attributes which are removed from replication " -"updates." -msgstr "从复制更新中删除的以空格分隔的属性列表。" - -msgid "Attributes to replicate" -msgstr "待复制属性" - -msgid "" -"Attributes that are not replicated to a consumer server during a fractional " -"update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof" +"\n" +"Vaults\n" msgstr "" +"\n" +"库\n" -msgid "Attributes for total update" -msgstr "所有更新的属性" - -msgid "" -"Attributes that are not replicated to a consumer server during a total " -"update. E.g. (objectclass=*) $ EXCLUDE accountlockout" -msgstr "" - -msgid "Session timeout" -msgstr "会话超时" - -msgid "" -"Number of seconds outbound LDAP operations waits for a response from the " -"remote replica before timing out and failing" -msgstr "在超时和失败前LDAP操作从远程复制服务器等待回应的用去的秒数" - -msgid "Replication agreement enabled" -msgstr "启用复制协议" - -msgid "" -"Whether a replication agreement is active, meaning whether replication is " -"occurring per that agreement" -msgstr "" - -msgid "Suffix name" -msgstr "后缀名称" - -msgid "LDAP suffix to be managed" -msgstr "待管理的LDAP后缀" - -msgid "Add a new segment." -msgstr "添加一个新段。" - -msgid "Delete a segment." -msgstr "删除一个段。" - -msgid "Search for topology segments." -msgstr "查找拓扑段。" - -msgid "Modify a segment." -msgstr "修改一个段。" - -msgid "" -"Request a full re-initialization of the node retrieving data from the other " -"node." -msgstr "请求一个完整的从另一个节点检索数据的节点重初始化。" - -msgid "Initialize left node" -msgstr "左节点初始化" - -msgid "Initialize right node" -msgstr "右节点初始化" - -msgid "Stop already started refresh of chosen node(s)" -msgstr "" - -msgid "Display a segment." -msgstr "显示一个段。" - -msgid "Add a new topology suffix to be managed." -msgstr "添加一个新的拓扑后缀到管理中。" - -msgid "Delete a topology suffix." -msgstr "删除一个拓扑后缀。" - -#, fuzzy -msgid "Search for topology suffices." -msgstr "查找拓扑后缀。" - -msgid "Modify a topology suffix." -msgstr "修改一个拓扑后缀。" - -msgid "Show managed suffix." -msgstr "显示已管理的后缀。" - -#, fuzzy msgid "" "\n" "Verify replication topology for suffix.\n" @@ -9038,7 +718,6 @@ msgid "" " replication paths between all servers.\n" " 2. check if servers don't have more than the recommended number of\n" " replication agreements\n" -" " msgstr "" "\n" "验证复制拓扑的后缀。\n" @@ -9047,1237 +726,690 @@ msgstr "" "径。\n" " 2. 检查是否服务器没有超过推荐的副本协议数\n" -msgid "Two-way trust" -msgstr "双向信任" - -msgid "" -"Establish bi-directional trust. By default trust is inbound one-way only." -msgstr "建立双向信任。默认信任仅是单项的。" - -msgid "Preserved user" -msgstr "备用用户" - -msgid "Add one or more certificates to the user entry" -msgstr "向用户条目中添加一个或多个证书" - -msgid "Remove one or more certificates to the user entry" -msgstr "向用户条目中移除一个或多个证书" - -msgid "Move deleted user into staged area" -msgstr "将已删除用户移植到计划区域" - -msgid "Undelete a delete user account." -msgstr "恢复删除用户账户。" - msgid "" "\n" -"Vaults\n" -"\n" -"Manage vaults.\n" -"\n" -"Vault is a secure place to store a secret.\n" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -"\n" -"EXAMPLES:\n" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" +"YubiKey Tokens\n" msgstr "" +"\n" +"YubiKey令牌\n" -msgid "Vault name" -msgstr "库名称" +#, python-format +msgid "" +" Alternatively, following servers are capable of running this command: " +"%(masters)s" +msgstr "另外，下面服务器可以运行该命令：%(masters)s" -msgid "Vault description" -msgstr "库描述" +#, python-format +msgid "\"%s\" is not a valid permission type" +msgstr "\"%s\"不是一个有效的权限类型" -msgid "Vault type" -msgstr "库类型" +#, python-format +msgid "\"%s\" is not an object type" +msgstr "\"%s\"不是一个对象类型" -msgid "Salt" -msgstr "盐值" +#, python-brace-format +msgid "${count} certificate(s) present" +msgstr "呈现${count}个证书" -msgid "Vault salt" -msgstr "库盐值" +#, python-brace-format +msgid "${count} item(s) added" +msgstr "${count} item(s)已添加" -msgid "Public key" -msgstr "公钥" +#, python-brace-format +msgid "${count} item(s) deleted" +msgstr "已删除${count}个条目" -msgid "Vault public key" -msgstr "库公钥" +#, python-brace-format +msgid "${count} item(s) disabled" +msgstr "已禁用${count}个条目" -msgid "Owner users" -msgstr "所有者用户" +#, python-brace-format +msgid "${count} item(s) enabled" +msgstr "已启用${count}个条目" -msgid "Owner groups" -msgstr "所有者用户组" +#, python-brace-format +msgid "${count} item(s) removed" +msgstr "${count} item(s) 已移除" -msgid "Owner services" -msgstr "所有者服务" +#, python-brace-format +msgid "${count} option(s) removed" +msgstr "已删除${count}个选项" -msgid "Failed owners" -msgstr "错误的所有者" +#, python-brace-format +msgid "${count} user(s) activated" +msgstr "已激活${count}个用户" -msgid "Vault service" -msgstr "库服务" +#, python-brace-format +msgid "${count} user(s) restored" +msgstr "已恢复${count}个用户" -msgid "Shared vault" -msgstr "共享库" +#, python-brace-format +msgid "${count} users(s) staged" +msgstr "已呈现${count}个用户" -msgid "Vault user" -msgstr "共享用户" +#, python-brace-format +msgid "${entity} ${primary_key} Settings" +msgstr "${entity} ${primary_key}设置" -#, fuzzy -msgid "Transport Certificate" -msgstr "主机证书" +#, python-brace-format +msgid "${entity} ${primary_key} updated" +msgstr "${entity} ${primary_key}已更新" -msgid "Service name of the service vault" -msgstr "服务库的服务名" +#, python-brace-format +msgid "${entity} successfully added" +msgstr "${entity}已添加成功" -msgid "Username of the user vault" -msgstr "用户库的用户名" +#, python-brace-format +msgid "${primary_key} applies to:" +msgstr "${primary_key}适用于：" -msgid "Add members to a vault." -msgstr "向一个库中添加成员。" +#, python-brace-format +msgid "${primary_key} is a member of:" +msgstr "${primary_key}是其中一个成员：" -msgid "Add owners to a vault." -msgstr "向一个库中添加所有者。" +#, python-brace-format +msgid "${primary_key} is managed by:" +msgstr "${primary_key}受管于：" -msgid "owner user" -msgstr "所有者用户" +#, python-brace-format +msgid "${primary_key} members:" +msgstr "${primary_key}成员：" -msgid "owner group" -msgstr "所有者用户组" +#, python-brace-format +msgid "${primary_key} overrides:" +msgstr "${primary_key}覆盖：" -msgid "owner service" -msgstr "所有者服务" +#, python-brace-format +msgid "${product}, version: ${version}" +msgstr "${product}，版本：${version}" -msgid "Owners that could not be added" -msgstr "不能被添加的所有者" +#, python-format +msgid "%(attr)s does not contain '%(value)s'" +msgstr "%(attr)s没有包含'%(value)s'" -msgid "Number of owners added" -msgstr "已添加的所有者数" +#, python-format +msgid "%(attr)s: Invalid syntax." +msgstr "%(attr)s：无效的语法。" -msgid "Session key wrapped with transport certificate" +#, python-format +msgid "%(attr)s: Only one value allowed." +msgstr "%(attr)s：仅允许一个值。" + +#, python-format +msgid "" +"%(container)s LDAP search did not return any result (search base: " +"%(search_base)s, objectclass: %(objectclass)s)" msgstr "" +"%(container)s LDAP搜索没有返回任何结果（搜索基：%(search_base)s，对象类： " +"%(objectclass)s）" -msgid "Vault data encrypted with session key" -msgstr "库数据用会话密钥加密" +#, python-format +msgid "" +"%(count)d %(type)s record skipped. Only one value per DNS record type can be " +"modified at one time." +msgid_plural "" +"%(count)d %(type)s records skipped. Only one value per DNS record type can " +"be modified at one time." +msgstr[0] "%(count)d %(type)s记录已忽略。每个DNS记录类型一次只能修改一个值。" -msgid "Nonce" -msgstr "临时的" +#, python-format +msgid "%(count)d ACI matched" +msgid_plural "%(count)d ACIs matched" +msgstr[0] "%(count)d个ACI已匹配" -msgid "Delete a vault." -msgstr "删除一个库。" +#, python-format +msgid "%(count)d CA ACL matched" +msgid_plural "%(count)d CA ACLs matched" +msgstr[0] "已匹配%(count)d个CA ACL" -msgid "Search for vaults." -msgstr "查找库。" +#, python-format +msgid "%(count)d CA matched" +msgid_plural "%(count)d CAs matched" +msgstr[0] "已匹配%(count)d个CA" -msgid "List all service vaults" -msgstr "所有服务库列表" +#, python-format +msgid "%(count)d DNS server matched" +msgid_plural "%(count)d DNS servers matched" +msgstr[0] "已匹配%(count)d个DNS服务器" -msgid "List all user vaults" -msgstr "所有用户库列表" +#, python-format +msgid "%(count)d Group ID override matched" +msgid_plural "%(count)d Group ID overrides matched" +msgstr[0] "已匹配%(count)d个组ID覆盖" -msgid "Remove members from a vault." -msgstr "从一个库中移除成员。" +#, python-format +msgid "%(count)d HBAC rule matched" +msgid_plural "%(count)d HBAC rules matched" +msgstr[0] "已匹配%(count)d个HBAC规则" -msgid "Remove owners from a vault." -msgstr "从一个库中移除所有者。" +#, python-format +msgid "%(count)d HBAC service group matched" +msgid_plural "%(count)d HBAC service groups matched" +msgstr[0] "已匹配%(count)d个HBAC服务组" -msgid "Owners that could not be removed" -msgstr "不能被移除的所有者" +#, python-format +msgid "%(count)d HBAC service matched" +msgid_plural "%(count)d HBAC services matched" +msgstr[0] "已匹配%(count)d个HBAC服务" -msgid "Number of owners removed" -msgstr "待移除的所有者数" +#, python-format +msgid "%(count)d ID View matched" +msgid_plural "%(count)d ID Views matched" +msgstr[0] "已匹配%(count)d个ID视图" -msgid "Display information about a vault." -msgstr "显示一个库信息。" +#, python-format +msgid "%(count)d ID override matched" +msgid_plural "%(count)d ID overrides matched" +msgstr[0] "已匹配%(count)d个ID覆盖" -msgid "Show vault configuration." -msgstr "显示库配置。" +#, python-format +msgid "%(count)d IPA location matched" +msgid_plural "%(count)d IPA locations matched" +msgstr[0] "已匹配%(count)d个IPA位置" -#, fuzzy -msgid "Output file to store the transport certificate" -msgstr "存储证书文件。" +#, python-format +msgid "%(count)d IPA server matched" +msgid_plural "%(count)d IPA servers matched" +msgstr[0] "已匹配%(count)d个IPA服务器" -msgid "Add owners to a vault container." -msgstr "向一个库容器中添加所有者。" +#, python-format +msgid "%(count)d OTP token matched" +msgid_plural "%(count)d OTP tokens matched" +msgstr[0] "已匹配%(count)d个OTP令牌" -msgid "Delete a vault container." -msgstr "删除一个库容器。" +#, python-format +msgid "%(count)d RADIUS proxy server matched" +msgid_plural "%(count)d RADIUS proxy servers matched" +msgstr[0] "已匹配%(count)d个RADIUS代理服务器" -msgid "Remove owners from a vault container." -msgstr "从一个库容器中移除所有者。" +#, python-format +msgid "%(count)d SELinux User Map matched" +msgid_plural "%(count)d SELinux User Maps matched" +msgstr[0] "已匹配%(count)d个SELinux用户映射" -msgid "Display information about a vault container." -msgstr "显示一个库容器信息。" +#, python-format +msgid "%(count)d Sudo Command Group matched" +msgid_plural "%(count)d Sudo Command Groups matched" +msgstr[0] "已匹配%(count)d个Sudo命令组" -msgid "Resolve a host name in DNS. (Deprecated)" -msgstr "在DNS中解析主机名。（不赞成）" +#, python-format +msgid "%(count)d Sudo Command matched" +msgid_plural "%(count)d Sudo Commands matched" +msgstr[0] "已匹配%(count)d个Sudo命令" -msgid "Hostname (FQDN)" -msgstr "主机名（FQDN）" +#, python-format +msgid "%(count)d Sudo Rule matched" +msgid_plural "%(count)d Sudo Rules matched" +msgstr[0] "已匹配%(count)d个Sudo规则" -msgid "Force DNS zone creation even if it will overlap with an existing zone." -msgstr "强制创建DNS区域，即使它会覆盖一个已有区域。" +#, python-format +msgid "%(count)d User ID override matched" +msgid_plural "%(count)d User ID overrides matched" +msgstr[0] "已匹配%(count)d个用户ID覆盖" + +#, python-format +msgid "%(count)d automount key matched" +msgid_plural "%(count)d automount keys matched" +msgstr[0] "已匹配%(count)d个自动挂载键" + +#, python-format +msgid "%(count)d automount location matched" +msgid_plural "%(count)d automount locations matched" +msgstr[0] "已匹配%(count)d个自动挂载位置" + +#, python-format +msgid "%(count)d automount map matched" +msgid_plural "%(count)d automount maps matched" +msgstr[0] "已匹配%(count)d个自动挂载映射" + +#, python-format +msgid "%(count)d certificate matched" +msgid_plural "%(count)d certificates matched" +msgstr[0] "已匹配%(count)d个证书" + +#, python-format +msgid "%(count)d delegation matched" +msgid_plural "%(count)d delegations matched" +msgstr[0] "已匹配%(count)d个授权" + +#, python-format +msgid "%(count)d group matched" +msgid_plural "%(count)d groups matched" +msgstr[0] "已匹配%(count)d个组" + +#, python-format +msgid "%(count)d host matched" +msgid_plural "%(count)d hosts matched" +msgstr[0] "已匹配%(count)d个主机" + +#, python-format +msgid "%(count)d hostgroup matched" +msgid_plural "%(count)d hostgroups matched" +msgstr[0] "已匹配%(count)d个主机组" + +#, python-format +msgid "%(count)d netgroup matched" +msgid_plural "%(count)d netgroups matched" +msgstr[0] "已匹配%(count)d个网络组" + +#, python-format +msgid "%(count)d permission matched" +msgid_plural "%(count)d permissions matched" +msgstr[0] "已匹配%(count)d个权限" + +#, python-format +msgid "%(count)d plugin loaded" +msgid_plural "%(count)d plugins loaded" +msgstr[0] "已加载%(count)d个插件" + +#, python-format +msgid "%(count)d privilege matched" +msgid_plural "%(count)d privileges matched" +msgstr[0] "已匹配%(count)d个特权" + +#, python-format +msgid "%(count)d profile matched" +msgid_plural "%(count)d profiles matched" +msgstr[0] "已匹配%(count)d个配置文件" + +#, python-format +msgid "%(count)d range matched" +msgid_plural "%(count)d ranges matched" +msgstr[0] "已匹配%(count)d个范围" + +#, python-format +msgid "%(count)d role matched" +msgid_plural "%(count)d roles matched" +msgstr[0] "已匹配%(count)d个角色" + +#, python-format +msgid "%(count)d rules matched" +msgid_plural "%(count)d rules matched" +msgstr[0] "已匹配%(count)d个规则" + +#, python-format +msgid "%(count)d segment matched" +msgid_plural "%(count)d segments matched" +msgstr[0] "已匹配%(count)d个段" + +#, python-format +msgid "%(count)d selfservice matched" +msgid_plural "%(count)d selfservices matched" +msgstr[0] "已匹配%(count)d个自助服务" + +#, python-format +msgid "%(count)d service delegation rule matched" +msgid_plural "%(count)d service delegation rules matched" +msgstr[0] "已匹配%(count)d个服务授权规则" + +#, python-format +msgid "%(count)d service delegation target matched" +msgid_plural "%(count)d service delegation targets matched" +msgstr[0] "已匹配%(count)d个服务授权目标" + +#, python-format +msgid "%(count)d service matched" +msgid_plural "%(count)d services matched" +msgstr[0] "已匹配%(count)d个服务" + +#, python-format +msgid "%(count)d topology suffix matched" +msgid_plural "%(count)d topology suffixes matched" +msgstr[0] "已匹配%(count)d个拓扑后缀" + +#, python-format +msgid "%(count)d trust matched" +msgid_plural "%(count)d trusts matched" +msgstr[0] "已匹配%(count)d个信任" + +#, python-format +msgid "%(count)d user matched" +msgid_plural "%(count)d users matched" +msgstr[0] "已匹配%(count)d个用户" + +#, python-format +msgid "%(count)d variables" +msgstr "%(count)d个变量" + +#, python-format +msgid "%(count)d vault matched" +msgid_plural "%(count)d vaults matched" +msgstr[0] "已匹配%(count)d个库" + +#, python-format +msgid "%(count)s server role matched" +msgid_plural "%(count)s server roles matched" +msgstr[0] "已匹配%(count)s个服务器角色" + +#, python-format +msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" +msgstr "%(cver)s客户端和在'%(server)s'的%(sver)s服务器不兼容" + +#, python-format +msgid "%(filename)s: file not found" +msgstr "%(filename)s：文件没找到" + +#, python-format +msgid "%(host)s failed" +msgstr "%(host)s已失败" + +#, python-format +msgid "%(host)s failed: %(error)s" +msgstr "%(host)s已失败：%(error)s" + +#, python-format +msgid "%(info)s" +msgstr "%(info)s" + +#, python-format +msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" +msgstr "%(key)s不能被删除因为%(label)s %(dependent)s需要它" + +#, python-format +msgid "" +"%(key)s cannot be deleted or disabled because it is the last member of " +"%(label)s %(container)s" +msgstr "%(key)s不能被删除或禁用因为它是%(label)s %(container)s的最后一个成员" + +#, python-format +msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" +msgstr "%(label)s %(key)s不能被删除/修改：%(reason)s" + +#, python-format +msgid "%(name)s certificate is not valid" +msgstr "%(name)s证书无效" + +#, python-format +msgid "%(obj)s default attribute %(attr)s would not be allowed!" +msgstr "%(obj)s默认属性%(attr)s是不允许的！" + +#, python-format +msgid "%(oname)s with name \"%(pkey)s\" already exists" +msgstr "名为\"%(pkey)s\"的%(oname)s已存在" + +#, python-format +msgid "%(operation)s is not supported for %(principal_type)s principals" +msgstr "%(operation)s不支持主体 %(principal_type)s" + +#, python-format +msgid "%(otype)s \"%(oname)s\" not found" +msgstr "%(otype)s \"%(oname)s\"没有找到" + +#, python-format +msgid "%(parent)s: %(oname)s not found" +msgstr "%(parent)s：%(oname)s没有找到" + +#, python-format +msgid "%(pkey)s: %(oname)s not found" +msgstr "%(pkey)s：%(oname)s没有找到" + +#, python-format +msgid "%(port)s is not a valid port" +msgstr "%(port)s不是一个有效的端口" + +#, python-format +msgid "%(reason)s" +msgstr "%(reason)s" + +#, python-format +msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" +msgstr "%(task)s LDAP任务超时，任务DN：'%(task_dn)s'" + +#, python-format +msgid "" +"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" +msgstr "%(type)s类别不能设置为all'，虽然有允许%(objects)s" + +#, python-format +msgid "%(user)s is not a POSIX user" +msgstr "%(user)s不是一个POSIX用户" + +#, python-format +msgid "%(value)s" +msgstr "%(value)s" + +#, python-format +msgid "%i CA added." +msgstr "%iCA已添加。" + +#, python-format +msgid "%i CA removed." +msgstr "%iCA已移除。" + +#, python-format +msgid "%i CAs added." +msgstr "%iCAs已添加。" + +#, python-format +msgid "%i CAs removed." +msgstr "%iCAs已移除。" + +#, python-format +msgid "%i host or hostgroup added." +msgstr "%i主机或主机组已添加。" + +#, python-format +msgid "%i host or hostgroup removed." +msgstr "%i主机或主机组已移除。" + +#, python-format +msgid "%i hosts or hostgroups added." +msgstr "%i主机或主机组已添加。" + +#, python-format +msgid "%i hosts or hostgroups removed." +msgstr "%i主机或主机组已移除。" + +#, python-format +msgid "%i profile added." +msgstr "%i配置文件已添加。" + +#, python-format +msgid "%i profile removed." +msgstr "%i配置文件已移除。" + +#, python-format +msgid "%i profiles added." +msgstr "%i配置文件已添加。" + +#, python-format +msgid "%i profiles removed." +msgstr "%i配置文件已移除。" + +#, python-format +msgid "%i service added." +msgstr "%i服务已添加。" + +#, python-format +msgid "%i service removed." +msgstr "%i服务已移除。" + +#, python-format +msgid "%i services added." +msgstr "%i服务已添加。" + +#, python-format +msgid "%i services removed." +msgstr "%i服务已移除。" + +#, python-format +msgid "%i user or group added." +msgstr "%i用户或组已添加。" + +#, python-format +msgid "%i user or group removed." +msgstr "%i用户或组已移除。" + +#, python-format +msgid "%i users or groups added." +msgstr "%i用户或用户组已添加。" + +#, python-format +msgid "%i users or groups removed." +msgstr "%i用户或用户组已移除。" + +#, python-format +msgid "%s Record" +msgstr "%s记录" + +#, python-format +msgid "%s is not a valid attribute." +msgstr "%s不是一个有效的属性。" + +#, python-format +msgid "%s record" +msgstr "%s记录" + +#, python-format +msgid "%s to add" +msgstr "待添加的%s" + +#, python-format +msgid "%s to exclude from migration" +msgstr "不移植%s" + +#, python-format +msgid "%s to remove" +msgstr "待移除的%s" + +#, python-format +msgid "%s: group not found" +msgstr "%s：找不到组" + +#, python-format +msgid "%s: user is already preserved" +msgstr "%s：用户已保存" + +#, python-brace-format +msgid "'${port}' is not a valid port" +msgstr "'${port}'不是一个有效的端口" + +#, python-format +msgid "'%(attr)s' already contains one or more values" +msgstr "'%(attr)s'已包含一个或多个值" + +#, python-format +msgid "'%(command)s' is deprecated. %(additional_info)s" +msgstr "'%(command)s'已被弃用。%(additional_info)s" + +#, python-format +msgid "'%(entry)s' doesn't have a certificate." +msgstr "'%(entry)s'没有证书。" + +#, python-format +msgid "'%(name)s' is required" +msgstr "需要'%(name)s'" + +#, python-format +msgid "'%(option)s' option is deprecated. %(additional_info)s" +msgstr "'%(option)s'选项已弃用。%(additional_info)s" + +#, python-format +msgid "'%(required)s' must not be empty when '%(name)s' is set" +msgstr "当'%(name)s'被设置时'%(required)s'必须不能为空" + +#, python-format +msgid "'%s' is a required part of DNS record" +msgstr "'%s'是DNS记录的必要部分" + +msgid "'add' option" +msgstr "'add'选项" + +msgid "(deprecated)" +msgstr "（弃用）" + +#, python-format +msgid "(see RFC %s for details)" +msgstr "（查阅RFC %s 来获取详细信息）" msgid "" -"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" -msgstr "即使命名服务器无法解析，也强制创建DNS区域。（不赞成）" +". Check GID of the existing group. Use --group-overwrite-gid option to " +"overwrite the GID" +msgstr "检查存在组的GID。使用--group-overwrite-gid选项来覆盖GID" + +msgid "7 is not a valid revocation reason" +msgstr "7不是一个有效的撤销原因" msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" +"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" msgstr "" +"

如果没有选择方法那么就使用隐式方法（密码）。

密码+双因素LDAP和Kerberos允许使用其中任一认证类型来认证但是Kerberos使用预认证方" +"法，该方法需要使用armor ccache

RADIUS和另外的类型： " +"Kerberos总是使用RADIUS，但是LDAP从不使用。LDAP仅识别密码和双因素认证选项。" msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --" -"rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-500 --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user " -"S-1-5-21-3035198329-144811719-1378114514-1203 --host `hostname` " -"--service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" +"

Per-user setting, overwrites the global setting if any option is checked." +"

Password + Two-factor: LDAP and Kerberos allow " +"authentication with either one of the authentication types but Kerberos uses " +"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " +"but LDAP never does. LDAP only recognize the password and two-factor " +"authentication options.

" msgstr "" +"

如果所有选项都检测了那么每个用户设置会覆盖全局设置。

密码+双" +"因素LDAP和Kerberos允许使用其中任一认证类型来认证但是Kerberos使用预认" +"证方法，该方法需要使用armor ccache

RADIUS和另外的类型： Kerberos总是使用RADIUS，但是LDAP从不使用。LDAP仅识别密码和双因素认证" +"选项。

" -msgid "Managed suffixes" -msgstr "已管理的后缀" +msgid "A IP Address" +msgstr "IP地址" -msgid "Check connection to remote IPA server." -msgstr "检测和远程IPA服务器的连接。" +msgid "A SYSTEM permission may not be modified or removed" +msgstr "系统权限可能不能被修改或删除" -msgid "Remote server name" -msgstr "远程服务器名称" +msgid "A description of this RADIUS proxy server" +msgstr "该RADIUS代理服务器的描述" -msgid "Remote IPA server hostname" -msgstr "远程IPA服务器主机名" +msgid "A description of this auto member rule" +msgstr "一个自动成员规则的描述" -msgid "suffix" -msgstr "后缀" +msgid "A description of this command" +msgstr "该命令的一个描述" -msgid "Search for servers with these managed suffixes." -msgstr "查找包含这些管理后缀的服务器。" +msgid "A description of this host" +msgstr "该主机的描述" -msgid "Search for servers without these managed suffixes." -msgstr "查找不包含这些管理后缀的服务器。" +msgid "A description of this host-group" +msgstr "该主机组的描述" -msgid "Add a manager to the stage user entry" -msgstr "向一个计划用户条目中添加一个管理员" +msgid "A description of this role-group" +msgstr "该角色组的描述" -msgid "Remove a manager to the stage user entry" -msgstr "从一个计划用户条目中移除一个管理员" +msgid "A dictionary representing an LDAP entry" +msgstr "一个字典代表一个LDAP条目" -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" +msgid "A group may not be a member of itself" +msgstr "一个组不能是自己的成员" -msgid "Managed LDAP suffix DN" -msgstr "已管理的LDAP后缀DN" +msgid "A group may not be added as a member of itself" +msgstr "一个组不能是自己的成员" -msgid "Search for topology suffixes." -msgstr "查找拓扑后缀。" +msgid "A host willing to act as a key exchanger" +msgstr "主机愿意充当关键交换器" -msgid "Add a manager to the user entry" -msgstr "向一个用户条目中添加一个管理员" +msgid "A host willing to act as a mail exchanger" +msgstr "主机愿意充当邮件交换器" -msgid "Remove a manager to the user entry" -msgstr "向一个用户条目中移除一个管理员" +msgid "A hostname which this alias hostname points to" +msgstr "一个别名主机名指向主机名" -msgid "" -"\n" -"Directory Server Access Control Instructions (ACIs)\n" -"\n" -"ACIs are used to allow or deny access to information. This module is\n" -"currently designed to allow, not deny, access.\n" -"\n" -"The aci commands are designed to grant permissions that allow updating\n" -"existing entries or adding or deleting new ones. The goal of the ACIs\n" -"that ship with IPA is to provide a set of low-level permissions that\n" -"grant access to special groups called taskgroups. These low-level\n" -"permissions can be combined into roles that grant broader access. These\n" -"roles are another type of group, roles.\n" -"\n" -"For example, if you have taskgroups that allow adding and modifying users " -"you\n" -"could create a role, useradmin. You would assign users to the useradmin\n" -"role to allow them to do the operations defined by the taskgroups.\n" -"\n" -"You can create ACIs that delegate permission so users in group A can write\n" -"attributes on group B.\n" -"\n" -"The type option is a map that applies to all entries in the users, groups " -"or\n" -"host location. It is primarily designed to be used when granting add\n" -"permissions (to write new entries).\n" -"\n" -"An ACI consists of three parts:\n" -"1. target\n" -"2. permissions\n" -"3. bind rules\n" -"\n" -"The target is a set of rules that define which LDAP objects are being\n" -"targeted. This can include a list of attributes, an area of that LDAP\n" -"tree or an LDAP filter.\n" -"\n" -"The targets include:\n" -"- attrs: list of attributes affected\n" -"- type: an object type (user, group, host, service, etc)\n" -"- memberof: members of a group\n" -"- targetgroup: grant access to modify a specific group. This is primarily\n" -" designed to enable users to add or remove members of a specific group.\n" -"- filter: A legal LDAP filter used to narrow the scope of the target.\n" -"- subtree: Used to apply a rule across an entire set of objects. For " -"example,\n" -" to allow adding users you need to grant \"add\" permission to the subtree\n" -" ldap://uid=*,cn=users,cn=accounts,dc=example,dc=com. The subtree option\n" -" is a fail-safe for objects that may not be covered by the type option.\n" -"\n" -"The permissions define what the ACI is allowed to do, and are one or\n" -"more of:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"The bind rule defines who this ACI grants permissions to. The LDAP server\n" -"allows this to be any valid LDAP entry but we encourage the use of\n" -"taskgroups so that the rights can be easily shared through roles.\n" -"\n" -"For a more thorough description of access controls see\n" -"http://www.redhat.com/docs/manuals/dir-server/ag/8.0/Managing_Access_Control." -"html\n" -"\n" -"EXAMPLES:\n" -"\n" -"NOTE: ACIs are now added via the permission plugin. These examples are to\n" -"demonstrate how the various options work but this is done via the " -"permission\n" -"command-line now (see last example).\n" -"\n" -" Add an ACI so that the group \"secretaries\" can update the address on any " -"user:\n" -" ipa group-add --desc=\"Office secretaries\" secretaries\n" -" ipa aci-add --attrs=streetAddress --memberof=ipausers --group=secretaries " -"--permissions=write --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Show the new ACI:\n" -" ipa aci-show --prefix=none \"Secretaries write addresses\"\n" -"\n" -" Add an ACI that allows members of the \"addusers\" permission to add new " -"users:\n" -" ipa aci-add --type=user --permission=addusers --permissions=add --" -"prefix=none \"Add new users\"\n" -"\n" -" Add an ACI that allows members of the editors manage members of the admins " -"group:\n" -" ipa aci-add --permissions=write --attrs=member --targetgroup=admins --" -"group=editors --prefix=none \"Editors manage admins\"\n" -"\n" -" Add an ACI that allows members of the admins group to manage the street and " -"zip code of those in the editors group:\n" -" ipa aci-add --permissions=write --memberof=editors --group=admins --" -"attrs=street,postalcode --prefix=none \"admins edit the address of editors" -"\"\n" -"\n" -" Add an ACI that allows the admins group manage the street and zipcode of " -"those who work for the boss:\n" -" ipa aci-add --permissions=write --group=admins --attrs=street,postalcode " -"--filter=\"(manager=uid=boss,cn=users,cn=accounts,dc=example,dc=com)\" --" -"prefix=none \"Edit the address of those who work for the boss\"\n" -"\n" -" Add an entirely new kind of record to IPA that isn't covered by any of the " -"--type options, creating a permission:\n" -" ipa permission-add --permissions=add --subtree=\"cn=*,cn=orange," -"cn=accounts,dc=example,dc=com\" --desc=\"Add Orange Entries\" add_orange\n" -"\n" -"\n" -"The show command shows the raw 389-ds ACI.\n" -"\n" -"IMPORTANT: When modifying the target attributes of an existing ACI you\n" -"must include all existing attributes as well. When doing an aci-mod the\n" -"targetattr REPLACES the current attributes, it does not add to them.\n" -msgstr "" +msgid "A list of ACI values" +msgstr "ACI值列表" -msgid "" -"comma-separated list of permissions to grant(read, write, add, delete, all)" -msgstr "以逗号分隔的授权列表（读，写，添加，删除，全部）" +msgid "A list of LDAP entries" +msgstr "LDAP条目列表" -msgid "Comma-separated list of attributes" -msgstr "以逗号分隔的属性列表" - -msgid "" -"\n" -"Auto Membership Rule.\n" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -"IPA certificate operations\n" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -"\n" -"If using the selfsign back end then the subject in the CSR needs to match\n" -"the subject configured in the server. The dogtag CA uses just the CN\n" -"value of the CSR and forces the rest of the subject.\n" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -"\n" -"In order to request a certificate:\n" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -"\n" -"The following revocation reasons are supported:\n" -"\n" -" * 0 - unspecified\n" -" * 1 - keyCompromise\n" -" * 2 - cACompromise\n" -" * 3 - affiliationChanged\n" -" * 4 - superseded\n" -" * 5 - cessationOfOperation\n" -" * 6 - certificateHold\n" -" * 8 - removeFromCRL\n" -" * 9 - privilegeWithdrawn\n" -" * 10 - aACompromise\n" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -msgstr "" - -msgid "" -"\n" -"Group to Group Delegation\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"Group to Group Delegations grants the members of one group to update a set\n" -"of attributes of members of another group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a delegation rule to allow managers to edit employee's addresses:\n" -" ipa delegation-add --attrs=street --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add postalCode to the list:\n" -" ipa delegation-mod --attrs=street,postalCode --group=managers --" -"membergroup=employees \"managers edit employees' street\"\n" -"\n" -" Display our updated rule:\n" -" ipa delegation-show \"managers edit employees' street\"\n" -"\n" -" Delete a rule:\n" -" ipa delegation-del \"managers edit employees' street\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write). Default is write." -msgstr "以逗号分隔的授权列表（读，写）。默认是写。" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -"\n" -"Manage DNS zone and resource records.\n" -"\n" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --name-" -"server=ns --admin-email=admin@example." -"com --ip-address=10.0.0.1\n" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE --update-policy=" -"\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM krb5-self * AAAA; grant " -"EXAMPLE.COM krb5-self * SSHFP;\"\n" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=80.142.15.0/24 --name-" -"server=ns.example.com.\n" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 15.142.80.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 1.2.3.4, 11.22.33.44\n" -"\n" -" Delete A record '1.2.3.4'? Yes/No (default No):\n" -" Delete A record '11.22.33.44'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 1.2.3.4 (A record 11.22.33.44 has been " -"deleted)\n" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -"\n" -" Find A records with value 10.10.0.1 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=10.10.0.1\n" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -"\n" -" If global forwarder is configured, all requests to sub.example.com will be\n" -" routed through the global forwarder. To change the behavior for example." -"com\n" -" zone only and forward the request directly to ns.sub.example.com., global\n" -" forwarding may be disabled per-zone:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -"\n" -" Forward all requests for the zone external.com to another nameserver using\n" -" a \"first\" policy (it will send the queries to the selected forwarder and " -"if\n" -" not answered it will use global resolvers):\n" -" ipa dnszone-add external.com\n" -" ipa dnszone-mod external.com --" -"forwarder=10.20.0.1 --forward-policy=first\n" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=10.0.0.1\n" -msgstr "" +msgid "A list of SELinux users delimited by $ expected" +msgstr "SELinux用户列表期望以$分隔" msgid "" "A list of global forwarders. A custom port can be specified for each " @@ -10286,21 +1418,1504 @@ msgstr "" "一个全局转发器列表。使用标准格式\"IP_ADDRESS port PORT\"为每个转发器指定一个" "自定义端口" +msgid "" +"A list of per-zone forwarders. A custom port can be specified for each " +"forwarder using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"一个Per-zone转发器列表。使用标准格式\"IP_ADDRESS port PORT\"为每个转发器指定" +"一个自定义端口" + +msgid "A managed group cannot have a password policy." +msgstr "管理组不能有密码策略。" + +#, python-format +msgid "" +"A problem was encountered when verifying that all members were %(verb)s: " +"%(exc)s" +msgstr "遇到的问题是什么时候验证所有成员是%(verb)s：%(exc)s" + +msgid "A record" +msgstr "一条记录" + +msgid "" +"A space separated list of attributes which are removed from replication " +"updates." +msgstr "从复制更新中删除的以空格分隔的属性列表。" + +msgid "A string searched in all relevant object attributes" +msgstr "在所有相关对象中搜索字符串" + +msgid "A6 Record data" +msgstr "A6记录数据" + +msgid "A6 record" +msgstr "A6记录" + +msgid "AAAA IP Address" +msgstr "AAAA IP地址" + +msgid "AAAA record" +msgstr "AAAA记录" + +msgid "ACI name" +msgstr "ACI名称" + +#, python-format +msgid "ACI of permission %s was not found" +msgstr "ACI权限%s没有找到" + +msgid "ACI prefix" +msgstr "ACI前缀" + +msgid "ACI prefix is required" +msgstr "需要ACI前缀" + +#, python-format +msgid "ACI with name \"%s\" not found" +msgstr "ACI名\"%s\"没有找到" + +msgid "ACIs" +msgstr "ACIs" + +msgid "ACL name" +msgstr "ACL名称" + +msgid "" +"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " +"or firewall issue" +msgstr "AD DC不能连接任何IPA域控制器。最有可能是一个DNS或者防火墙事件" + +msgid "AD Trust setup" +msgstr "AD信任设置" + +msgid "AD domain controller" +msgstr "AD域控制器" + +msgid "" +"AD domain controller complains about communication sequence. It may mean " +"unsynchronized time on both sides, for example" +msgstr "AD域控制器抱怨通信序列。这可能意味着双方时间不同步，例如" + +msgid "AFSDB Hostname" +msgstr "AFSDB主机名" + +msgid "AFSDB Subtype" +msgstr "AFSDB子类型" + +msgid "AFSDB record" +msgstr "AFSDB记录" + +msgid "API Browser" +msgstr "API概述" + +#, python-format +msgid "" +"API Version number was not sent, forward compatibility not guaranteed. " +"Assuming server's API version, %(server_version)s" +msgstr "" +"没有发送API版本号，不能保证向前兼容。假定服务器的API版本%(server_version)s" + +msgid "APL record" +msgstr "APL记录" + +msgid "About" +msgstr "关于" + +msgid "Access Denied" +msgstr "访问阻止" + +msgid "Access Granted" +msgstr "访问允许" + +#, python-format +msgid "Access granted: %s" +msgstr "访问授权：%s" + +msgid "Access this host" +msgstr "访问该主机" + +msgid "Access time" +msgstr "访问时间" + +msgid "Accessing" +msgstr "访问" + +msgid "Account" +msgstr "账户" + +msgid "Account Settings" +msgstr "账户设置" + +msgid "Account Status" +msgstr "账户状态" + +msgid "Account disabled" +msgstr "禁用账户" + +#, python-format +msgid "Account disabled: %(disabled)s" +msgstr "账户已禁用：%(disabled)s" + +msgid "Actions" +msgstr "操作" + +msgid "Activate" +msgstr "激活" + +#, python-format +msgid "Activate a stage user \"%(value)s\"" +msgstr "激活一个计划用户\"%(value)s\"" + +msgid "Activate a stage user." +msgstr "激活一个计划用户。" + +msgid "Active Directory domain" +msgstr "活动目录域" + +msgid "Active Directory domain administrator" +msgstr "活动目录域管理员" + +msgid "Active Directory domain administrator's password" +msgstr "活动目录域管理员密码" + +msgid "Active Directory domain range" +msgstr "活动目录域范围" + +msgid "Active Directory domain with POSIX attributes" +msgstr "带POSIX属性的活动目录域" + +msgid "Active Directory trust range with POSIX attributes" +msgstr "有POSIX属性的活动目录信任范围" + +msgid "Active directory domain administrator's password" +msgstr "活动目录域管理员密码" + +msgid "Active users" +msgstr "活跃用户" + +msgid "Active zone" +msgstr "活跃区" + +msgid "Add" +msgstr "添加" + +msgid "Add CAs to a CA ACL." +msgstr "向一个CA ACL中添加CAs。" + +msgid "Add Custom Attribute" +msgstr "添加自定义属性" + +msgid "Add Custom Authentication Indicator" +msgstr "添加自定义认证机构" + +msgid "Add Kerberos Principal Alias" +msgstr "添加Kerberos主体别名" + +msgid "Add Many" +msgstr "添加多个" + +msgid "Add a manager to the stage user entry" +msgstr "向一个计划用户条目中添加一个管理员" + +msgid "Add a manager to the user entry" +msgstr "向一个用户条目中添加一个管理员" + +msgid "Add a new DNS server." +msgstr "添加一个新的DNS服务器。" + +msgid "Add a new Group ID override." +msgstr "添加一个新的组ID覆盖。" + +msgid "Add a new HBAC service group." +msgstr "添加一个新的HBAC服务组。" + +msgid "Add a new HBAC service." +msgstr "添加一个新的HBAC服务。" + +msgid "Add a new ID View." +msgstr "添加一个新的ID视图。" + +msgid "Add a new ID override." +msgstr "添加一个新的ID覆盖。" + +msgid "Add a new IPA location." +msgstr "添加一个新的IPA位置。" + +msgid "Add a new IPA new service." +msgstr "添加一个新的IPA服务。" + +msgid "Add a new IPA service." +msgstr "添加一个新的IPA服务。" + +msgid "Add a new OTP token." +msgstr "添加一个新的OTP令牌。" + +msgid "Add a new RADIUS proxy server." +msgstr "添加一个新的RADIUS代理服务器。" + +msgid "Add a new User ID override." +msgstr "添加一个新的用户ID覆盖。" + +msgid "Add a new YubiKey OTP token." +msgstr "增加一个新的YubiKey OTP令牌。" + +msgid "Add a new delegation." +msgstr "添加一个新的授权。" + +msgid "Add a new group password policy." +msgstr "添加一个新的组密码策略。" + +msgid "Add a new host." +msgstr "添加一个新主机。" + +msgid "Add a new hostgroup." +msgstr "添加一个新的主机组。" + +msgid "Add a new netgroup." +msgstr "添加一个新的网络组。" + +msgid "Add a new permission." +msgstr "添加一个新的权限。" + +msgid "Add a new privilege." +msgstr "添加一个新的特权。" + +msgid "Add a new role." +msgstr "添加一个新角色。" + +msgid "Add a new segment." +msgstr "添加一个新段。" + +msgid "Add a new self-service permission." +msgstr "添加一个新的自助服务权限。" + +msgid "Add a new topology suffix to be managed." +msgstr "添加一个新的拓扑后缀到管理中。" + +msgid "Add a new user." +msgstr "添加一个新用户。" + +msgid "Add a permission for per-forward zone access delegation." +msgstr "为每个正向区访问授权添加一个权限。" + +msgid "Add a permission for per-zone access delegation." +msgstr "为每个区访问授权添加一个权限。" + +msgid "Add a system permission without an ACI" +msgstr "添加一个没有ACI的系统权限" + +msgid "Add a system permission without an ACI (internal command)" +msgstr "添加一个没有ACI的系统权限（内部命令）" + +msgid "" +"Add an attribute/value pair. Format is attr=value. The attribute\n" +"must be part of the schema." +msgstr "添加一个属性/值对。格式是属性=值。属性必须时模式的一部分。" + +msgid "Add an automember rule." +msgstr "添加一个自动成员规则。" + +msgid "Add an option to the Sudo Rule." +msgstr "向Sudo规则中添加一个选项。" + +msgid "Add and Add Another" +msgstr "添加并添加另一个" + +msgid "Add and Close" +msgstr "添加和关闭" + +msgid "Add and Edit" +msgstr "添加和编辑" + +msgid "Add certificates to host entry" +msgstr "向主机条目中添加证书" + +msgid "Add commands and sudo command groups affected by Sudo Rule." +msgstr "添加受Sudo规则影响的命令和sudo命令组。" + +msgid "Add conditions to an automember rule." +msgstr "添加条件到一个自动成员规则。" + +msgid "Add custom value" +msgstr "添加自定义值" + +msgid "Add domain" +msgstr "添加域" + +msgid "Add forward record for nameserver located in the created zone" +msgstr "为位于创建区域的命名服务器添加正向记录" + +msgid "Add hosts and hostgroups affected by Sudo Rule." +msgstr "添加受Sudo规则影响的主机和主机组。" + +msgid "Add hosts that can manage this host." +msgstr "添加可以管理该主机的主机。" + +msgid "Add hosts that can manage this service." +msgstr "添加可以管理该服务的主机。" + +msgid "Add member to a named service delegation rule." +msgstr "向一个命名服务授权规则中添加成员。" + +msgid "Add member to a named service delegation target." +msgstr "向一个命名服务授权规则中添加成员。" + +msgid "Add members to Sudo Command Group." +msgstr "向Sudo命令组中添加成员。" + +msgid "Add members to a group." +msgstr "向一个组中添加成员。" + +msgid "Add members to a hostgroup." +msgstr "向一个主机组添加成员。" + +msgid "Add members to a netgroup." +msgstr "向一个网络组添加成员。" + +msgid "Add members to a permission." +msgstr "将成员添加到权限。" + +msgid "Add members to a privilege." +msgstr "向一个特权中添加成员。" + +msgid "Add members to a role." +msgstr "向角色中添加成员。" + +msgid "Add members to a vault." +msgstr "向一个库中添加成员。" + +msgid "Add members to an HBAC service group." +msgstr "在一个HBAC服务组中添加成员。" + +msgid "Add migrated users without a group to a default group (default: true)" +msgstr "添加没有组的移植用户到一个默认组（默认：正确的）" + +msgid "Add new DNS resource record." +msgstr "添加新的DNS资源记录。" + +msgid "Add new certificates to a service" +msgstr "向一个服务中添加新证书" + +msgid "Add new principal alias to a service" +msgstr "向一个服务添加新的主体别名" + +msgid "Add new principal alias to host entry" +msgstr "为主机条目添加新的主体别名" + +msgid "Add new principal alias to the user entry" +msgstr "为用户条目添加新的主体别名" + +msgid "Add one or more certificates to the idoverrideuser entry" +msgstr "向id覆盖用户条目中添加一个或多个证书" + +msgid "Add one or more certificates to the user entry" +msgstr "向用户条目中添加一个或多个证书" + +msgid "Add owners to a vault container." +msgstr "向一个库容器中添加所有者。" + +msgid "Add owners to a vault." +msgstr "向一个库中添加所有者。" + +msgid "Add permissions to a privilege." +msgstr "向一个特权中添加权限。" + +msgid "Add principal" +msgstr "添加主体" + +msgid "Add privileges to a role." +msgstr "向一个角色中添加特权。" + +msgid "Add profiles to a CA ACL." +msgstr "向一个CA ACL中添加配置文件。" + +msgid "Add services to a CA ACL." +msgstr "向一个CA ACL中添加服务。" + +msgid "Add services to an HBAC rule." +msgstr "在HBAC规则中添加服务" + +msgid "Add source hosts and hostgroups from a HBAC rule." +msgstr "从一个HBAC规则中添加源主机和主机组。" + +msgid "Add target hosts and hostgroups to a CA ACL." +msgstr "向一个CA ACL中添加目标主机和主机组。" + +msgid "Add target hosts and hostgroups to an HBAC rule." +msgstr "在一个HBAC规则中添加目标主机和主机组。" + +msgid "Add target hosts and hostgroups to an SELinux User Map rule." +msgstr "向SELinux用户映射规则中添加目标主机和主机组。" + +msgid "Add target to a named service delegation rule." +msgstr "向一个命名服务授权规则中添加目标。" + +msgid "Add target to a named service delegation." +msgstr "添加目标到一个命名服务授权。" + +msgid "Add the host to DNS with this IP address" +msgstr "用该IP地址将主机添加到DNS中" + +msgid "Add to default group" +msgstr "添加到默认组" + +msgid "Add users and groups affected by Sudo Rule." +msgstr "添加受Sudo规则影响的用户和用户组。" + +msgid "Add users and groups to a CA ACL." +msgstr "向一个CA ACL中添加用户和用户组。" + +msgid "Add users and groups to an HBAC rule." +msgstr "在一个HBAC规则中添加用户和用户组。" + +msgid "Add users and groups to an SELinux User Map rule." +msgstr "向SELinux用户映射规则中添加用户和用户组。" + +msgid "Add users that can manage this token." +msgstr "添加可以管理该令牌的用户" + +#, python-format +msgid "Added %(map)s" +msgstr "已添加 %(map)s" + +#, python-format +msgid "Added %(src)s to %(dst)s" +msgstr "已添加 %(src)s 到 %(dst)s" + +#, python-format +msgid "Added Active Directory trust for realm \"%(value)s\"" +msgstr "已添加活动目录域\"%(value)s\"" + +#, python-format +msgid "Added CA ACL \"%(value)s\"" +msgstr "已添加CA ACL\"%(value)s\"" + +#, python-format +msgid "Added Group ID override \"%(value)s\"" +msgstr "已添加组ID覆盖\"%(value)s\"" + +#, python-format +msgid "Added HBAC rule \"%(value)s\"" +msgstr "已添加HBAC规则\"%(value)s\"" + +#, python-format +msgid "Added HBAC service \"%(value)s\"" +msgstr "已添加HBAC服务\"%(value)s\"" + +#, python-format +msgid "Added HBAC service group \"%(value)s\"" +msgstr "已添加HBAC服务组\"%(value)s\"" + +#, python-format +msgid "Added ID View \"%(value)s\"" +msgstr "已添加ID视图\"%(value)s\"" + +#, python-format +msgid "Added ID override \"%(value)s\"" +msgstr "已添加ID覆盖\"%(value)s\"" + +#, python-format +msgid "Added ID range \"%(value)s\"" +msgstr "已添加ID范围\"%(value)s\"" + +#, python-format +msgid "Added IPA location \"%(value)s\"" +msgstr "已添加IPA位置\"%(value)s\"" + +#, python-format +msgid "Added OTP token \"%(value)s\"" +msgstr "已添加OTP令牌\"%(value)s\"" + +#, python-format +msgid "Added RADIUS proxy server \"%(value)s\"" +msgstr "已添加RADIUS代理服务器\"%(value)s\"" + +#, python-format +msgid "Added SELinux User Map \"%(value)s\"" +msgstr "已添加SELinux用户映射\"%(value)s\"" + +#, python-format +msgid "Added Sudo Command \"%(value)s\"" +msgstr "已添加Sudo命令\"%(value)s\"" + +#, python-format +msgid "Added Sudo Command Group \"%(value)s\"" +msgstr "已添加Sudo命令组\"%(value)s\"" + +#, python-format +msgid "Added Sudo Rule \"%(value)s\"" +msgstr "已添加Sudo规则\"%(value)s\"" + +#, python-format +msgid "Added User ID override \"%(value)s\"" +msgstr "已添加用户ID覆盖\"%(value)s\"" + +#, python-format +msgid "Added automember rule \"%(value)s\"" +msgstr "已添加自动成员规则\"%(value)s\"" + +#, python-format +msgid "Added automount indirect map \"%(value)s\"" +msgstr "已添加自动间接映射\"%(value)s\"" + +#, python-format +msgid "Added automount key \"%(value)s\"" +msgstr "已添加自动挂载键\"%(value)s\"" + +#, python-format +msgid "Added automount location \"%(value)s\"" +msgstr "已添加自动挂载位置\"%(value)s\"" + +#, python-format +msgid "Added automount map \"%(value)s\"" +msgstr "已添加自动挂载映射\"%(value)s\"" + +#, python-format +msgid "Added certificates to host \"%(value)s\"" +msgstr "已向主机\"%(value)s\"中添加证书" + +#, python-format +msgid "Added certificates to idoverrideuser \"%(value)s\"" +msgstr "已添加证书到id覆盖用户\"%(value)s\"" + +#, python-format +msgid "Added certificates to service principal \"%(value)s\"" +msgstr "已添加证书到服务主体\"%(value)s\"" + +#, python-format +msgid "Added certificates to user \"%(value)s\"" +msgstr "已为用户\"%(value)s\"添加证书" + +#, python-format +msgid "Added condition(s) to \"%(value)s\"" +msgstr "已在\"%(value)s\"上添加条件" + +#, python-format +msgid "Added delegation \"%(value)s\"" +msgstr "已添加授权\"%(value)s\"" + +#, python-format +msgid "Added group \"%(value)s\"" +msgstr "已添加组\"%(value)s\"" + +#, python-format +msgid "Added host \"%(value)s\"" +msgstr "新增主机 \"%(value)s\"" + +#, python-format +msgid "Added hostgroup \"%(value)s\"" +msgstr "已添加主机组\"%(value)s\"" + +#, python-format +msgid "Added netgroup \"%(value)s\"" +msgstr "已添加网络组\"%(value)s\"" + +#, python-format +msgid "Added new DNS server \"%(value)s\"" +msgstr "已添加新的DNS服务器\"%(value)s\"" + +#, python-format +msgid "Added new aliases to host \"%(value)s\"" +msgstr "已为主机\"%(value)s\"添加新别名" + +#, python-format +msgid "Added new aliases to the service principal \"%(value)s\"" +msgstr "已添加新的别名到服务主体\"%(value)s\"" + +#, python-format +msgid "Added new aliases to user \"%(value)s\"" +msgstr "已为用户\"%(value)s\"添加新别名" + +#, python-format +msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\"" +msgstr "已添加\"%(option)s\"到Sudo规则\"%(rule)s\"" + +#, python-format +msgid "Added permission \"%(value)s\"" +msgstr "已添加权限\"%(value)s\"" + +#, python-format +msgid "Added privilege \"%(value)s\"" +msgstr "已添加特权\"%(value)s\"" + +#, python-format +msgid "Added role \"%(value)s\"" +msgstr "已添加角色\"%(value)s\"" + +#, python-format +msgid "Added segment \"%(value)s\"" +msgstr "已添加段\"%(value)s\"" + +#, python-format +msgid "Added selfservice \"%(value)s\"" +msgstr "已添加自助服务\"%(value)s\"" + +#, python-format +msgid "Added service \"%(value)s\"" +msgstr "已添加服务\"%(value)s\"" + +#, python-format +msgid "Added service delegation rule \"%(value)s\"" +msgstr "已添加服务授权规则\"%(value)s\"" + +#, python-format +msgid "Added service delegation target \"%(value)s\"" +msgstr "已添加服务授权目标\"%(value)s\"" + +#, python-format +msgid "Added stage user \"%(value)s\"" +msgstr "已添加计划用户\"%(value)s\"" + +#, python-format +msgid "Added system permission \"%(value)s\"" +msgstr "已添加系统权限\"%(value)s\"" + +#, python-format +msgid "Added topology suffix \"%(value)s\"" +msgstr "已添加拓扑后缀\"%(value)s\"" + +#, python-format +msgid "Added user \"%(value)s\"" +msgstr "已添加用户\"%(value)s\"" + +#, python-format +msgid "Added vault \"%(value)s\"" +msgstr "已添加库\"%(value)s\"" + +msgid "Additional instructions:" +msgstr "附加指示：" + +msgid "Address not valid, can't redirect" +msgstr "地址无效，不能重定向" + +msgid "Administrative account" +msgstr "管理员账户" + +msgid "Administrator e-mail address" +msgstr "管理员电子邮件地址" + +msgid "Advertised by servers" +msgstr "由服务器公布" + +msgid "Agreements deleted" +msgstr "协议已删除" + +msgid "Algorithm" +msgstr "算法" + +msgid "All" +msgstr "全部" + +msgid "All attributes to which the permission applies" +msgstr "权限可以应用所有属性" + +msgid "All commands should at least have a result" +msgstr "所有命令至少有一个返回值" + +msgid "Allow" +msgstr "允许" + +msgid "Allow PTR sync" +msgstr "允许PTR同步" + +msgid "Allow access from the trusted domain" +msgstr "允许访问信任域" + +msgid "Allow adding external non-IPA members from trusted domains" +msgstr "允许从信任域中添加额外的非IPA成员" + +msgid "Allow dynamic updates." +msgstr "允许动态更新" + +msgid "" +"Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-" +"way trusts only." +msgstr "当解析AD信任对象时允许回退到AD DC LDAP。仅供双向信任。" + +msgid "Allow in-line DNSSEC signing" +msgstr "允许嵌套DNSSEC签名" + +msgid "Allow inline DNSSEC signing of records in the zone" +msgstr "允许在区域中嵌套DNSSEC记录签名" + +msgid "Allow query" +msgstr "允许查询" + +msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records" +msgstr "允许同步正向（A，AAAA）和反向（PTR）记录" + +msgid "" +"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the " +"zone" +msgstr "允许在区域中同步正向（A，AAAA）和反向（PTR）记录" + +msgid "Allow transfer" +msgstr "允许传输" + +msgid "Allow use of IPA resources by the domain of the trust" +msgstr "允许使用信任域中的IPA资源" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this host." +msgstr "允许用户，用户组，主机或主机组来创建该主机的keytab。" + +msgid "" +"Allow users, groups, hosts or host groups to create a keytab of this service." +msgstr "允许用户，用户组，主机或主机组来创建一个该服务的keytab。" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this host." +msgstr "允许用户，用户组，主机或主机组来检索该主机的keytab。" + +msgid "" +"Allow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "允许用户，用户组，主机或主机组来检索一个该服务的keytab。" + +msgid "Allowed Target" +msgstr "允许的目标" + +msgid "Allowed to Impersonate" +msgstr "允许模仿" + +msgid "Allowed to create keytab" +msgstr "允许创建keytab" + +msgid "Allowed to retrieve keytab" +msgstr "允许检索keytab" + +msgid "Allows migration despite the usage of compat plugin" +msgstr "即使使用兼容插件也允许迁移" + +msgid "Already registered" +msgstr "已注册" + +msgid "Alternative UPN suffixes" +msgstr "可供选择的UPN后缀" + +msgid "Altitude" +msgstr "高度" + +msgid "Always ask" +msgstr "总是询问" + +msgid "Ambiguous search, user domain was not specified" +msgstr "模糊查找，用户域没有指定" + +msgid "An IPA master host cannot be deleted or disabled" +msgstr "IPA主主机不能被删除或禁用" + +#, python-brace-format +msgid "An error has occurred (${error})" +msgstr "出现一个错误(${error})" + +msgid "An error occurred while fetching dns zones." +msgstr "在抓取dns区域时发生错误。" + +msgid "" +"An id range already exists for this trust. You should either delete the old " +"range, or exclude --base-id/--range-size options from the command." +msgstr "" +"id范围已在该域中存在。你要么删除旧的范围，要么从命令中排除--base-id/--range-" +"size选项。" + msgid "An interval between regular polls of the name server for new DNS zones" msgstr "命名服务器新的DNS区域定期调查的间隔" -msgid "DNS class" -msgstr "DNS类" +#, python-format +msgid "Anchor '%(anchor)s' could not be resolved." +msgstr "锚'%(anchor)s'不能被解析。" + +msgid "Any CA" +msgstr "任何CA" + +msgid "Any Command" +msgstr "任何命令" + +msgid "Any Group" +msgstr "任何组" + +msgid "Any Host" +msgstr "任何主机" + +msgid "Any Profile" +msgstr "任何配置文件" + +msgid "Any Service" +msgstr "任何服务" + +msgid "Anyone" +msgstr "任何人" + +msgid "Applied to hosts" +msgstr "适用的主机" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overridden." +msgstr "" +"ID视图适用于指定的主机或指定主机组的当前成员。如果该主机已有其他ID视图，则覆" +"盖它。" + +msgid "" +"Applies ID View to specified hosts or current members of specified " +"hostgroups. If any other ID View is applied to the host, it is overriden." +msgstr "" +"应用ID视图到指定的主机或指定主机组的当前成员。如果该主机已有其他ID视图，则覆" +"盖它。" + +msgid "Apply" +msgstr "应用" + +msgid "Apply ACI to your own entry (self)" +msgstr "应用ACI到你自己的条目" + +msgid "Apply to host groups" +msgstr "适用的主机组" + +msgid "Apply to hosts" +msgstr "适用的主机" + +msgid "Archive data into a vault." +msgstr "数据归档到库。" + +#, python-format +msgid "Archived data into vault \"%(value)s\"" +msgstr "数据归档到库\"%(value)s\"" + +#, python-brace-format +msgid "" +"Are you sure you want to ${action} the user?
The change will take effect " +"immediately." +msgstr "你确定要${action}用户？
改变会立即生效。" + +#, python-brace-format +msgid "Are you sure you want to activate ${object}?" +msgstr "你确定要激活${object}？" + +msgid "Are you sure you want to activate selected users?" +msgstr "你确定要激活被选用户？" + +#, python-brace-format +msgid "Are you sure you want to add permission for DNS Zone ${object}?" +msgstr "你确定要为DNS区域${object}添加权限吗？" + +#, python-brace-format +msgid "Are you sure you want to delete ${object}?" +msgstr "你确定要删除${object}？" + +msgid "Are you sure you want to delete selected entries?" +msgstr "你确定要删除被选条目？" + +#, python-brace-format +msgid "Are you sure you want to disable ${object}?" +msgstr "你确定要禁用${object}？" + +msgid "Are you sure you want to disable selected entries?" +msgstr "你确定要禁用被选条目？" + +#, python-brace-format +msgid "Are you sure you want to enable ${object}?" +msgstr "你确定要启用${object}？" + +msgid "Are you sure you want to enable selected entries?" +msgstr "你确定要启用被选条目？" + +msgid "Are you sure you want to proceed with the action?" +msgstr "你确定要执行该操作吗？" + +msgid "Are you sure you want to rebuild auto membership?" +msgstr "你确定要重建自动成员吗？" + +#, python-brace-format +msgid "Are you sure you want to remove permission for DNS Zone ${object}?" +msgstr "你确定要为DNS区域${object}删除权限吗？" + +#, python-brace-format +msgid "Are you sure you want to restore ${object}?" +msgstr "你确定要恢复${object}？" + +msgid "Are you sure you want to restore selected users?" +msgstr "你确定要恢复被选用户？" + +#, python-brace-format +msgid "Are you sure you want to stage ${object}?" +msgstr "你确定要呈现${object}？" + +msgid "Are you sure you want to stage selected users?" +msgstr "你确定要呈现被选用户？" + +msgid "Are you sure you want to un-apply ID view from selected entries?" +msgstr "你确定要在选择的条目中不应用ID视图？" + +#, python-brace-format +msgid "Are you sure you want to unlock user ${object}?" +msgstr "你确定要解锁用户${object}？" + +msgid "As Whom" +msgstr "作为谁" + +msgid "Asks for a non-random password to use for the principal" +msgstr "要求一个非随机密码用于主体" + +msgid "Assigned ID View" +msgstr "已分配的ID视图" + +msgid "Assigned manager of the token (default: self)" +msgstr "分配管理者令牌（默认：自己）" + +msgid "Assigned user of the token (default: self)" +msgstr "分配用户令牌（默认：自己）" + +msgid "At least the domain or IP address should be specified" +msgstr "至少应该指定域或IP地址" + +msgid "Attribute" +msgstr "属性" + +msgid "Attribute Key" +msgstr "性键值" + +msgid "Attribute breakdown" +msgstr "属性分类" + +msgid "" +"Attribute to filter via regex. For example fqdn for a host, or manager for a " +"user" +msgstr "" +"通过正则表达式来过滤属性。例如：一个主机的fqdn属性，或者一个用户的manager属性" + +msgid "Attributes" +msgstr "属性" + +msgid "Attributes for total update" +msgstr "所有更新的属性" + +msgid "Attributes to be ignored for group entries in DS" +msgstr "在DS中被用户组条目所忽略的属性" + +msgid "Attributes to be ignored for user entries in DS" +msgstr "在DS中被用户条目所忽略的属性" + +msgid "Attributes to replicate" +msgstr "待复制属性" + +msgid "Attributes to which the permission applies by default" +msgstr "权限默认应用的属性" + +msgid "Attributes to which the permission applies." +msgstr "权限应用属性。" + +msgid "Audit" +msgstr "审计" + +msgid "Authentication" +msgstr "身份验证" + +msgid "Authentication Indicators" +msgstr "认证指标" + +msgid "Authentication indicator" +msgstr "认证指标" + +msgid "Authentication indicators" +msgstr "认证指标" + +msgid "Authoritative nameserver" +msgstr "权威的命名服务器" + +msgid "Authoritative nameserver change" +msgstr "权威命名服务器改变" + +msgid "Authoritative nameserver domain name" +msgstr "权威的命名服务器域名" + +msgid "Authority ID" +msgstr "授权ID" + +msgid "Auto Membership Rule" +msgstr "自动成员规则" + +msgid "Auto Membership is not configured" +msgstr "自动成员没有配置" + +#, python-format +msgid "Auto member rule: %s not found!" +msgstr "自动成员规则：%s没有找到！" + +msgid "Autogenerated" +msgstr "自动生成" + +msgid "" +"Automatic update of DNS system records failed. Please re-run update of " +"system records manually to get list of missing records." +msgstr "自动更新DNS系统记录失败。请手动重新运行更新系统记录来获取缺少的记录。" + +msgid "Automember" +msgstr "自动成员" + +msgid "Automember Rule" +msgstr "自动成员规则" + +msgid "Automember rebuild membership task completed" +msgstr "自动成员重建成员关系任务已完成" + +msgid "Automember rebuild membership task started" +msgstr "自动成员重建成员关系任务已开始" + +msgid "Automount" +msgstr "自动挂载" + +msgid "Automount Key" +msgstr "自动挂载键" + +msgid "Automount Keys" +msgstr "自动挂载键" + +msgid "Automount Location" +msgstr "自动挂载位置" + +msgid "Automount Location Settings" +msgstr "自动挂载位置设置" + +msgid "Automount Locations" +msgstr "自动挂载位置" + +msgid "Automount Map" +msgstr "自动挂载映射" + +msgid "Automount Maps" +msgstr "自动挂载映射" + +msgid "Automount key name." +msgstr "自动挂载键名。" + +msgid "Automount key object." +msgstr "自动挂载键对象。" + +msgid "Automount location name." +msgstr "自动挂载位置名。" + +msgid "Automount map name." +msgstr "自动挂载映射名。" + +msgid "Automount master file." +msgstr "自动挂载主文件。" + +msgid "Available" +msgstr "可用的" + +msgid "BIND update policy" +msgstr "BIND更新策略" + +msgid "Back" +msgstr "返回" + +msgid "Back to Top" +msgstr "回到顶部" + +msgid "Bad format in credentials cache" +msgstr "凭证缓存格式错误" + +msgid "Bad or unsupported salt type.\n" +msgstr "错误的或不支持的盐值类型。\n" + +msgid "Bad search filter" +msgstr "无效的搜索过滤器" + +#, python-format +msgid "Bad search filter %(info)s" +msgstr "不正确的查询筛选器%(info)s" + +msgid "Base DN" +msgstr "基DN" + +msgid "Base DN on remote LDAP server" +msgstr "远程LDAP服务器上的基DN" + +msgid "Base ID" +msgstr "基ID" + +msgid "Base-64 encoded certificate." +msgstr "Base-64编码的证书。" + +msgid "Base-64 encoded host certificate" +msgstr "Base-64编码的主机证书" + +msgid "Base-64 encoded server certificate" +msgstr "Base-64 编码格式的服务器证书" + +msgid "Base-64 encoded service certificate" +msgstr "Base-64编码的服务证书" + +msgid "Base-64 encoded user certificate" +msgstr "Base-64编码的用户证书" + +#, python-format +msgid "Base64 decoding failed: %(reason)s" +msgstr "Base64解码失败: %(reason)s" + +msgid "Bind DN" +msgstr "绑定DN" + +msgid "Bind rule type" +msgstr "绑定规则类型" + +msgid "Brief description of this profile" +msgstr "该配置文件的简要描述" + +#, python-format +msgid "CA '%s' is disabled" +msgstr "CA'%s'被禁用" + +msgid "CA category" +msgstr "CA类别" + +msgid "CA category cannot be set to 'all' while there are allowed CAs" +msgstr "CA类别不能设置为all'，虽然有允许CAs" + +msgid "CA category the ACL applies to" +msgstr "ACL应用的CA类别" + +msgid "CA certificate" +msgstr "CA证书" + +msgid "CA is not configured" +msgstr "CA没有配置" + +msgid "CAs cannot be added when CA category='all'" +msgstr "当CA类别='all'时CAs不能被添加" + +msgid "CERT Algorithm" +msgstr "CERT算法" + +msgid "CERT Certificate Type" +msgstr "CERT证书类型" + +msgid "CERT Certificate/CRL" +msgstr "CERT证书/CRL" + +msgid "CERT Key Tag" +msgstr "CERT键标记" + +msgid "CERT record" +msgstr "CERT记录" + +msgid "CIFS credentials object" +msgstr "CIFS凭证对象" + +#, python-format +msgid "CIFS server %(host)s denied your credentials" +msgstr "CIFS服务器%(host)s阻止你的凭证" + +#, python-format +msgid "" +"CIFS server communication error: code \"%(num)s\", message " +"\"%(message)s\" (both may be \"None\")" +msgstr "" +"CIFS服务器通信错误：代码\"%(num)s\"，消息\"%(message)s\"（两者都有可能没有任" +"何信息）" + +msgid "CIFS server denied your credentials" +msgstr "CIFS服务器阻止你的凭证" + +msgid "CLI name" +msgstr "CLI名称" + +msgid "CNAME Hostname" +msgstr "CNAME主机名" + +msgid "CNAME record" +msgstr "CNAME记录" + +msgid "" +"CNAME record is not allowed to coexist with any other record (RFC 1034, " +"section 3.6.2)" +msgstr "CNAME记录不允许与任何其他记录共存（RFC 1034，第3.6.2节）" + +msgid "Cancel" +msgstr "取消" + +#, python-format +msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" +msgstr "不能创建反向记录\"%(value)s\"：%(exc)s" + +#, python-format +msgid "Cannot decode file '%(filename)s': %(exc)s" +msgstr "不能解码文件'%(filename)s': %(exc)s" + +#, python-format +msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" +msgstr "不能和%(host)s建立LSA连接。CIFS服务器是否在运行？" + +msgid "" +"Cannot establish a trust to AD deployed in the same domain as IPA. Such " +"setup is not supported." +msgstr "不能建立一个信任到部署在IPA同一域中的AD。这样的设置不支持。" + +msgid "Cannot find specified domain or server name" +msgstr "找不到指定的域或服务器名称" + +msgid "" +"Cannot perform SID validation without Samba 4 support installed. Make sure " +"you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"没有安装Samba 4不能执行SID验证。确认你已经在IPA服务器上安装了server-trust-ad" +"子包" + +msgid "" +"Cannot perform external member validation without Samba 4 support installed. " +"Make sure you have installed server-trust-ad sub-package of IPA on the server" +msgstr "" +"没有安装Samba 4不能执行外部成员验证。确认你已经在IPA服务器上安装了server-" +"trust-ad子包" + +msgid "" +"Cannot perform join operation without own domain configured. Make sure you " +"have run ipa-adtrust-install on the IPA server first" +msgstr "" +"没有自己的域配置不能执行加入操作。首先确认你已经在IPA服务器上运行了ipa-" +"adtrust-install命令" + +msgid "" +"Cannot perform the selected command without Samba 4 instance configured on " +"this machine. Make sure you have run ipa-adtrust-install on this server." +msgstr "" +"没有在该机器上进行Samba 4实例配置不能执行被选命令。确认你已经在该服务器上运行" +"ipa-adtrust-install。" + +msgid "" +"Cannot perform the selected command without Samba 4 support installed. Make " +"sure you have installed server-trust-ad sub-package of IPA." +msgstr "" +"没有安装Samba 4不能执行被选命令。确认你已经在IPA上安装了server-trust-ad子包。" + +#, python-format +msgid "Cannot read file '%(filename)s': %(exc)s" +msgstr "不能读取文件'%(filename)s': %(exc)s" + +msgid "Cannot resolve KDC for requested realm" +msgstr "请求域中不能解析KDC" + +msgid "Cannot retrieve trusted domain GC list" +msgstr "不能检索信任域GC列表" + +msgid "" +"Cannot search in trusted domains without own domain configured. Make sure " +"you have run ipa-adtrust-install on the IPA server first" +msgstr "" +"没有自己的域配置不能在信任域中查找。首先确认你已经在IPA服务器上运行了ipa-" +"adtrust-install命令" + +#, python-format +msgid "Cannot store permission ACI to %s" +msgstr "不能存储权限ACI到%s" + +#, python-format +msgid "Cannot use %(old_name)s with %(new_name)s" +msgstr "不能使用%(old_name)s和%(new_name)s" + +msgid "Car License" +msgstr "汽车执照" + +msgid "Certificate" +msgstr "证书" + +msgid "Certificate Association Data" +msgstr "证书关联数据" + +msgid "Certificate Authorities" +msgstr "证书颁发机构" + +msgid "Certificate Authority" +msgstr "证书颁发机构" + +msgid "Certificate Hold Removed" +msgstr "证书持有已删除" + +msgid "Certificate Profile" +msgstr "证书配置文件" + +msgid "Certificate Profile to use" +msgstr "待使用的证书配置文件" + +msgid "Certificate Profiles" +msgstr "证书配置文件" + +msgid "Certificate Profiles to add" +msgstr "待添加的证书配置文件" + +msgid "Certificate Profiles to remove" +msgstr "待移除的证书配置文件" + +msgid "Certificate Revoked" +msgstr "证书已撤销" + +msgid "Certificate Type" +msgstr "证书类型" + +msgid "Certificate Usage" +msgstr "证书用途" + +#, python-brace-format +msgid "Certificate for ${entity} ${primary_key}" +msgstr "${entity} ${primary_key}证书" + +#, python-format +msgid "Certificate format error: %(error)s" +msgstr "证书格式错误：%(error)s" + +msgid "Certificate in base64 or PEM format" +msgstr "base64或PEM格式的证书" + +#, python-format +msgid "Certificate operation cannot be completed: %(error)s" +msgstr "证书操作没有完成：%(error)s" + +msgid "Certificate profiles cannot be renamed" +msgstr "证书配置文件不能被重命名" + +msgid "Certificate requested" +msgstr "证书请求" + +#, python-format +msgid "" +"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" +msgstr "由CA'%(ca)s'发布序列号为%(serial)s的证书没有找到" + +#, python-format +msgid "Certificate(s) stored in file '%(file)s'" +msgstr "证书存储在文件'%(file)s'中" + +msgid "Certificate/CRL" +msgstr "证书/CRL" + +msgid "Certificates" +msgstr "证书" + +msgid "Change current Domain Level." +msgstr "改变当前域级别。" + +msgid "Change password" +msgstr "改变密码" + +msgid "Change to POSIX group" +msgstr "更改为POSIX组" + +msgid "Change to external group" +msgstr "更改为外部组" + +#, python-format +msgid "Changed password for \"%(value)s\"" +msgstr "已改变\"%(value)s\"的密码" + +msgid "Character classes" +msgstr "字符类" + +msgid "Check DNS" +msgstr "检测DNS" + +msgid "Check connection to remote IPA server." +msgstr "检测和远程IPA服务器的连接。" + +msgid "Check the status of a certificate signing request." +msgstr "检查证书签名请求的状态。" + +msgid "Checking if record exists." +msgstr "检查记录是否存在。" + +msgid "Checks if any of the servers has the CA service enabled." +msgstr "检查是否有任何服务器启用了CA服务。" + +msgid "Checks if any of the servers has the DNS service enabled." +msgstr "检查是否有任何服务器启用了DNS服务。" + +msgid "City" +msgstr "城市" + +msgid "Class" +msgstr "类" + +msgid "" +"Clears ID View from specified hosts or current members of specified " +"hostgroups." +msgstr "从指定主机或指定主机组的当前成员中清除ID视图。" + +#, python-brace-format +msgid "Click to ${action}" +msgstr "点击${action}" + +msgid "Client credentials may be delegated to the service" +msgstr "客户端证书可以授权给服务" + +msgid "Client is not configured. Run ipa-client-install." +msgstr "客户端没有配置。运行ipa-client-install。" + +msgid "Client version. Used to determine if server will accept request." +msgstr "客户端版本。用来确定是否服务器接受请求。" + +msgid "Clock interval" +msgstr "时间间隔" + +msgid "Clock offset" +msgstr "时钟偏移量" + +msgid "Close" +msgstr "关闭" + +#, c-format +msgid "Closing keytab failed\n" +msgstr "关闭keytab失败\n" + +msgid "Collapse All" +msgstr "全部折叠" + +msgid "Comma separated encryption types list" +msgstr "以逗号分隔的加密类型列表" + +msgid "Comma-separated list of attributes" +msgstr "以逗号分隔的属性列表" + +msgid "" +"Comma-separated list of attributes to be ignored for group entries in DS" +msgstr "在DS中被组条目所忽略以逗号分隔的属性" + +msgid "Comma-separated list of attributes to be ignored for user entries in DS" +msgstr "在DS中被用户条目所忽略以逗号分隔的属性" + +msgid "" +"Comma-separated list of objectclasses to be ignored for group entries in DS" +msgstr "在DS中被组条目所忽略以逗号分隔的对象类" + +msgid "" +"Comma-separated list of objectclasses to be ignored for user entries in DS" +msgstr "在DS中被用户条目所忽略以逗号分隔的对象类" + +msgid "" +"Comma-separated list of objectclasses used to search for group entries in DS" +msgstr "在DS中用于查找用户组条目以逗号分隔的对象类" + +msgid "" +"Comma-separated list of objectclasses used to search for user entries in DS" +msgstr "在DS中用于查找用户条目以逗号分隔的对象类" + +msgid "" +"Comma-separated list of permissions to grant (read, write). Default is write." +msgstr "以逗号分隔的授权列表（读，写）。默认是写。" + +msgid "" +"Comma-separated list of permissions to grant (read, write, add, delete, all)" +msgstr "以逗号分隔的授权列表（读，写，添加，删除，全部）" msgid "Comma-separated list of raw A records" msgstr "以逗号分隔的原始A记录列表" -msgid "Comma-separated list of raw AAAA records" -msgstr "以逗号分隔的原始AAAA记录列表" - msgid "Comma-separated list of raw A6 records" msgstr "以逗号分隔的原始A6记录列表" +msgid "Comma-separated list of raw AAAA records" +msgstr "以逗号分隔的原始AAAA记录列表" + msgid "Comma-separated list of raw AFSDB records" msgstr "以逗号分隔的原始AFSDB记录列表" @@ -10337,24 +2952,6 @@ msgstr "以逗号分隔的原始IPSECKEY记录列表" msgid "Comma-separated list of raw KEY records" msgstr "以逗号分隔的原始KEY记录列表" -msgid "KEY Flags" -msgstr "KEY标记" - -msgid "KEY Protocol" -msgstr "KEY协议" - -msgid "Protocol" -msgstr "协议" - -msgid "KEY Algorithm" -msgstr "KEY算法" - -msgid "KEY Public Key" -msgstr "KEY公钥" - -msgid "Public Key" -msgstr "公钥" - msgid "Comma-separated list of raw KX records" msgstr "以逗号分隔的原始KX记录列表" @@ -10373,18 +2970,6 @@ msgstr "以逗号分隔的原始NS记录列表" msgid "Comma-separated list of raw NSEC records" msgstr "以逗号分隔的原始NSEC记录列表" -msgid "NSEC Next Domain Name" -msgstr "NSEC下一个域名" - -msgid "Next Domain Name" -msgstr "下一个域名" - -msgid "NSEC Type Map" -msgstr "NSEC类型映射" - -msgid "Type Map" -msgstr "类型映射" - msgid "Comma-separated list of raw NSEC3 records" msgstr "以逗号分隔的原始NSEC3记录列表" @@ -10394,90 +2979,15 @@ msgstr "以逗号分隔的原始NSEC3PARAM记录列表" msgid "Comma-separated list of raw PTR records" msgstr "以逗号分隔的原始PTR记录列表" -msgid "Comma-separated list of raw RRSIG records" -msgstr "以逗号分隔的原始RRSIG记录列表" - -msgid "RRSIG Type Covered" -msgstr "RRSIG类型覆盖" - -msgid "Type Covered" -msgstr "类型覆盖" - -msgid "RRSIG Algorithm" -msgstr "RRSIG算法" - -msgid "RRSIG Labels" -msgstr "RRSIG分类" - -msgid "Labels" -msgstr "分类" - -msgid "RRSIG Original TTL" -msgstr "RRSIG原始TTL" - -msgid "Original TTL" -msgstr "原始TTL" - -msgid "RRSIG Signature Expiration" -msgstr "RRSIG签名过期" - -msgid "Signature Expiration" -msgstr "签名过期" - -msgid "RRSIG Signature Inception" -msgstr "RRSIG签名开端" - -msgid "Signature Inception" -msgstr "签名开端" - -msgid "RRSIG Key Tag" -msgstr "RRSIG密钥标记" - -msgid "RRSIG Signer's Name" -msgstr "RRSIG签名者的名字" - -msgid "Signer's Name" -msgstr "签名者的名字" - -msgid "RRSIG Signature" -msgstr "RRSIG签名" - -msgid "Signature" -msgstr "签名" - msgid "Comma-separated list of raw RP records" msgstr "以逗号分隔的原始RP记录列表" +msgid "Comma-separated list of raw RRSIG records" +msgstr "以逗号分隔的原始RRSIG记录列表" + msgid "Comma-separated list of raw SIG records" msgstr "以逗号分隔的原始SIG记录列表" -msgid "SIG Type Covered" -msgstr "SIG类型覆盖" - -msgid "SIG Algorithm" -msgstr "SIG算法" - -msgid "SIG Labels" -msgstr "SIG分类" - -msgid "SIG Original TTL" -msgstr "SIG原始TTL" - -msgid "SIG Signature Expiration" -msgstr "SIG签名过期" - -msgid "SIG Signature Inception" -msgstr "SIG签名开端" - -msgid "SIG Key Tag" -msgstr "SIG密钥标记" - -msgid "SIG Signer's Name" -msgstr "SIG签名者的名字" - -msgid "SIG Signature" -msgstr "SIG签名" - msgid "Comma-separated list of raw SPF records" msgstr "以逗号分隔的原始SPF记录列表" @@ -10499,1491 +3009,305 @@ msgstr "以逗号分隔的原始TSIG记录列表" msgid "Comma-separated list of raw TXT records" msgstr "以逗号分隔的原始TXT记录列表" -msgid "SOA time to live" -msgstr "SOA存活时间" - -msgid "SOA record time to live" -msgstr "SOA记录存活时间" - -msgid "SOA class" -msgstr "SOA类" - -msgid "SOA record class" -msgstr "SOA记录类" - -msgid "" -"A list of per-zone forwarders. A custom port can be specified for each " -"forwarder using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"一个Per-zone转发器列表。使用标准格式\"IP_ADDRESS port PORT\"为每个转发器指定" -"一个自定义端口" - -msgid "Add forward record for nameserver located in the created zone" -msgstr "为位于创建区域的命名服务器添加正向记录" - -msgid "" -"\n" -"Entitlements\n" -"\n" -"Manage entitlements for client machines\n" -"\n" -"Entitlements can be managed either by registering with an entitlement\n" -"server with a username and password or by manually importing entitlement\n" -"certificates. An entitlement certificate contains embedded information\n" -"such as the product being entitled, the quantity and the validity dates.\n" -"\n" -"An entitlement server manages the number of client entitlements available.\n" -"To mark these entitlements as used by the IPA server you provide a quantity\n" -"and they are marked as consumed on the entitlement server.\n" -"\n" -" Register with an entitlement server:\n" -" ipa entitle-register consumer\n" -"\n" -" Import an entitlement certificate:\n" -" ipa entitle-import /home/user/ipaclient.pem\n" -"\n" -" Display current entitlements:\n" -" ipa entitle-status\n" -"\n" -" Retrieve details on entitlement certificates:\n" -" ipa entitle-get\n" -"\n" -" Consume some entitlements from the entitlement server:\n" -" ipa entitle-consume 50\n" -"\n" -"The registration ID is a Unique Identifier (UUID). This ID will be\n" -"IMPORTED if you have used entitle-import.\n" -"\n" -"Changes to /etc/rhsm/rhsm.conf require a restart of the httpd service.\n" -msgstr "" - -#, fuzzy -msgid "Consume an entitlement." -msgstr "显示当前权利。" - -msgid "Quantity" -msgstr "数量" - -msgid "Search for entitlement accounts." -msgstr "查找权利账户。" - -msgid "Retrieve the entitlement certs." -msgstr "检索权利证书。" - -msgid "Import an entitlement certificate." -msgstr "导入一个权利证书。" - -msgid "UUID" -msgstr "" - -msgid "Enrollment UUID" -msgstr "注册UUID" - -#, fuzzy -msgid "Register to the entitlement system." -msgstr "检索权利证书。" - -msgid "Username" -msgstr "用户名" - -msgid "Enrollment UUID (not implemented)" -msgstr "注册UUID（没有实现）" - -msgid "Registration password" -msgstr "注册密码" - -msgid "Display current entitlements." -msgstr "显示当前权利。" - -msgid "Re-sync the local entitlement cache with the entitlement server." -msgstr "重新同步在权利服务器上的本地权利缓存。" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users. By default, new groups are POSIX groups. You\n" -"can add the --nonposix option to the group-add command to mark a new group\n" -"as non-POSIX. You can use the --posix argument with the group-mod command\n" -"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add a list of users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1,test2 localadmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\n" -"ame, or name@domain format. IPA will attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "" -"comma-separated list of members of a trusted domain in DOM\\name or " -"name@domain form" -msgstr "以逗号分隔的信任域成员列表是“DOM\\名称”或“名称@域名”格式" - -msgid "comma-separated list of users to add" -msgstr "待添加的以逗号分隔的用户列表" - -msgid "comma-separated list of groups to add" -msgstr "待添加的以逗号分隔的用户组列表" - -msgid "comma-separated list of users to remove" -msgstr "待移除的以逗号分隔的用户列表" - -msgid "comma-separated list of groups to remove" -msgstr "待移除的以逗号分隔的用户组列表" - -msgid "" -"\n" -"Host-based access control\n" -"\n" -"Control who can access what services on what hosts and from where. You\n" -"can use HBAC to control which users or groups on a source host can\n" -"access a service, or group of services, on a target host.\n" -"\n" -"You can also specify a category of users, target hosts, and source\n" -"hosts. This is currently limited to \"all\", but might be expanded in the\n" -"future.\n" -"\n" -"Target hosts and source hosts in HBAC rules must be hosts managed by IPA.\n" -"\n" -"The available services and groups of services are controlled by the\n" -"hbacsvc and hbacsvcgroup plug-ins respectively.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a rule, \"test1\", that grants all users access to the host \"server" -"\" from\n" -" anywhere:\n" -" ipa hbacrule-add --usercat=all --srchostcat=all test1\n" -" ipa hbacrule-add-host --hosts=server.example.com test1\n" -"\n" -" Display the properties of a named HBAC rule:\n" -" ipa hbacrule-show test1\n" -"\n" -" Create a rule for a specific service. This lets the user john access\n" -" the sshd service on any machine from any machine:\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_sshd\n" -" ipa hbacrule-add-user --users=john john_sshd\n" -" ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n" -"\n" -" Create a rule for a new service group. This lets the user john access\n" -" the FTP service on any machine from any machine:\n" -" ipa hbacsvcgroup-add ftpers\n" -" ipa hbacsvc-add sftp\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=ftp,sftp ftpers\n" -" ipa hbacrule-add --hostcat=all --srchostcat=all john_ftp\n" -" ipa hbacrule-add-user --users=john john_ftp\n" -" ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n" -"\n" -" Disable a named HBAC rule:\n" -" ipa hbacrule-disable test1\n" -"\n" -" Remove a named HBAC rule:\n" -" ipa hbacrule-del allow_server\n" -msgstr "" - -msgid "Source host category" -msgstr "源主机类别" - -msgid "Source host category the rule applies to" -msgstr "规则应用的源主机类别" - -msgid "Source Hosts" -msgstr "源主机" - -msgid "Source Host Groups" -msgstr "源主机组" - -msgid "comma-separated list of hosts to add" -msgstr "待添加的以逗号分隔的主机列表" - -msgid "comma-separated list of host groups to add" -msgstr "待添加的以逗号分隔的主机组列表" - -msgid "comma-separated list of HBAC services to add" -msgstr "待添加的以逗号分隔的HBAC服务列表" - -msgid "comma-separated list of HBAC service groups to add" -msgstr "待添加的以逗号分隔的HBAC服务组列表" - -msgid "Add source hosts and hostgroups from a HBAC rule." -msgstr "从一个HBAC规则中添加源主机和主机组。" - -msgid "comma-separated list of hosts to remove" -msgstr "待移除的以逗号分隔的主机列表" - -msgid "comma-separated list of host groups to remove" -msgstr "待移除的以逗号分隔的主机组列表" - -msgid "comma-separated list of HBAC services to remove" -msgstr "待移除的以逗号分隔的HBAC服务列表" - -msgid "comma-separated list of HBAC service groups to remove" -msgstr "待移除的以逗号分隔的HBAC服务组列表" - -msgid "Remove source hosts and hostgroups from an HBAC rule." -msgstr "从一个HBAC规则中移除源主机和主机组。" - -msgid "" -"\n" -"HBAC Service Groups\n" -"\n" -"HBAC service groups can contain any number of individual services,\n" -"or \"members\". Every group must have a description.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service group:\n" -" ipa hbacsvcgroup-add --desc=\"login services\" login\n" -"\n" -" Add members to an HBAC service group:\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=sshd,login login\n" -"\n" -" Display information about a named group:\n" -" ipa hbacsvcgroup-show login\n" -"\n" -" Add a new group to the \"login\" group:\n" -" ipa hbacsvcgroup-add --desc=\"switch users\" login\n" -" ipa hbacsvcgroup-add-member --hbacsvcs=su,su-l login\n" -"\n" -" Delete an HBAC service group:\n" -" ipa hbacsvcgroup-del login\n" -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts and from " -"where.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--srchost= ] [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -" If --srchost is specified, it will be ignored. It is left because of " -"compatibility reasons only.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" matched: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --rules=my-" -"second-rule,myrule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --enabled " -"--disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" notmatched: my-second-rule\n" -" notmatched: my-third-rule\n" -" notmatched: myrule\n" -" notmatched: new-rule\n" -" matched: allow_all\n" -msgstr "" - -msgid "Source host" -msgstr "源主机" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -"\n" -"A host can only be enrolled once. If a client has enrolled and needs to\n" -"be re-enrolled, the host entry must be removed and re-created. Note that\n" -"re-creating the host entry will result in all services for the host being\n" -"removed, and all SSL certificates associated with those services being\n" -"revoked.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup:\n" -" ipa hostgroup-add-member --hosts=box1,box2,box3 baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - dom_sid: domain SID of the trusted domain\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-" -"base=1000 --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -msgstr "" - -msgid "" -"\n" -"Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --rid-bas\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -" WARNING:\n" -"\n" -" DNA plugin in 389-ds will allocate IDs based on the ranges configured " -"for the\n" -" local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -" on the local ranges set via this family of commands.\n" -"\n" -" Manual configuration change has to be done in the DNA plugin " -"configuration for\n" -" the new local range. Specifically, The dnaNextRange attribute of " -"'cn=Posix\n" -" IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has " -"to be\n" -" modified to match the new range.\n" -" " -msgstr "" - -msgid "" -"Comma-separated list of objectclasses used to search for user entries in DS" -msgstr "在DS中用于查找用户条目以逗号分隔的对象类" - -msgid "" -"Comma-separated list of objectclasses used to search for group entries in DS" -msgstr "在DS中用于查找用户组条目以逗号分隔的对象类" - -msgid "" -"Comma-separated list of objectclasses to be ignored for user entries in DS" -msgstr "在DS中被用户条目所忽略以逗号分隔的对象类" - -msgid "Comma-separated list of attributes to be ignored for user entries in DS" -msgstr "在DS中被用户条目所忽略以逗号分隔的属性" - -msgid "" -"Comma-separated list of objectclasses to be ignored for group entries in DS" -msgstr "在DS中被组条目所忽略以逗号分隔的对象类" - -msgid "" -"Comma-separated list of attributes to be ignored for group entries in DS" -msgstr "在DS中被组条目所忽略以逗号分隔的属性" - -msgid "comma-separated list of groups to exclude from migration" -msgstr "允许迁移的以逗号分隔的用户组列表" - -msgid "comma-separated list of users to exclude from migration" -msgstr "允许迁移的以逗号分隔的用户列表" - -msgid "" -"\n" -"Netgroups\n" -"\n" -"A netgroup is a group used for permission checking. It can contain both\n" -"user and host values.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new netgroup:\n" -" ipa netgroup-add --desc=\"NFS admins\" admins\n" -"\n" -" Add members to the netgroup:\n" -" ipa netgroup-add-member --users=tuser1,tuser2 admins\n" -"\n" -" Remove a member from the netgroup:\n" -" ipa netgroup-remove-member --users=tuser2 admins\n" -"\n" -" Display information about a netgroup:\n" -" ipa netgroup-show admins\n" -"\n" -" Delete a netgroup:\n" -" ipa netgroup-del admins\n" -msgstr "" - -msgid "comma-separated list of netgroups to add" -msgstr "待添加的以逗号分隔的网络组列表" - -msgid "comma-separated list of netgroups to remove" -msgstr "待移除的以逗号分隔的网络组列表" - -msgid "" -"\n" -"Permissions\n" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable form of a 389-ds Access Control Rule, or instruction " -"(ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -"\n" -"A permission may not contain other permissions.\n" -"\n" -"* A permission grants access to read, write, add or delete.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. add - add a new entry to the tree\n" -"4. delete - delete an existing entry\n" -"5. all - all permissions are granted\n" -"\n" -"Read permission is granted for most attributes by default so the read\n" -"permission is not expected to be used very often.\n" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -"\n" -"There are a number of allowed targets:\n" -"1. type: a type of object (user, group, etc).\n" -"2. memberof: a member of a group or hostgroup\n" -"3. filter: an LDAP filter\n" -"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n" -" super-set of the \"type\" target.\n" -"5. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership)\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "" -"Comma-separated list of permissions to grant (read, write, add, delete, all)" -msgstr "以逗号分隔的授权列表（读，写，添加，删除，全部）" - -msgid "" -"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" -msgstr "IPA对象类型（用户，用户组，主机，主机组，服务，网络组，dns）" - -msgid "Target members of a group" -msgstr "一个组的目标成员" - -msgid "User group to apply permissions to" -msgstr "待应用权限的用户组" - -msgid "comma-separated list of privileges to add" -msgstr "待添加的以逗号分隔的权限列表" - -msgid "Add a system permission without an ACI" -msgstr "添加一个没有ACI的系统权限" - -msgid "Permission type" -msgstr "权限类型" - -msgid "comma-separated list of privileges to remove" -msgstr "待移除的以逗号分隔的权限列表" - -msgid "" -"\n" -"Ping the remote IPA server to ensure it is running.\n" -"\n" -"The ping command sends an echo request to an IPA server. The server\n" -"returns its version information. This is used by an IPA client\n" -"to confirm that the server is available and accepting requests.\n" -"\n" -"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n" -"If it does not respond then the client will contact any servers defined\n" -"by ldap SRV records in DNS.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Ping an IPA server:\n" -" ipa ping\n" -" ------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" ------------------------------------------\n" -"\n" -" Ping an IPA server verbosely:\n" -" ipa -v ping\n" -" ipa: INFO: trying https://ipa.example.com/ipa/xml\n" -" ipa: INFO: Forwarding 'ping' to server u'https://ipa.example.com/ipa/" -"xml'\n" -" -----------------------------------------------------\n" -" IPA server version 2.1.9. API version 2.20\n" -" -----------------------------------------------------\n" -msgstr "" - -msgid "comma-separated list of roles to add" -msgstr "待添加的以逗号分隔的角色列表" - -msgid "comma-separated list of permissions" -msgstr "以逗号分隔的权限列表" - -msgid "comma-separated list of roles to remove" -msgstr "待移除的以逗号分隔的角色列表" - -msgid "comma-separated list of privileges" -msgstr "以逗号分隔的权限列表" - -msgid "" -"\n" -"Self-service Permissions\n" -"\n" -"A permission enables fine-grained delegation of permissions. Access Control\n" -"Rules, or instructions (ACIs), grant permission to permissions to perform\n" -"given tasks such as adding a user, modifying a group, etc.\n" -"\n" -"A Self-service permission defines what an object can change in its own " -"entry.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a self-service rule to allow users to manage their address:\n" -" ipa selfservice-add --permissions=write --attrs=street,postalCode,l,c,st " -"\"Users manage their own address\"\n" -"\n" -" When managing the list of attributes you need to include all attributes\n" -" in the list, including existing ones. Add telephoneNumber to the list:\n" -" ipa selfservice-mod --attrs=street,postalCode,l,c,st,telephoneNumber " -"\"Users manage their own address\"\n" -"\n" -" Display our updated rule:\n" -" ipa selfservice-show \"Users manage their own address\"\n" -"\n" -" Delete a rule:\n" -" ipa selfservice-del \"Users manage their own address\"\n" -msgstr "" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -msgstr "" - -msgid "" -"Override default list of supported PAC types. Use 'NONE' to disable PAC " -"support for this service" -msgstr "覆盖默认支持的PAC类型列表。使用'NONE'来禁用该服务的PAC支持" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less,/usr/bin/vim " -"admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa group-show localadmins\n" -msgstr "" - -msgid "comma-separated list of sudo commands to add" -msgstr "待添加的以逗号分隔的sudo命令列表" - -msgid "comma-separated list of sudo commands to remove" -msgstr "待移除的以逗号分隔的sudo命令列表" - -msgid "Active directory domain administrator's password" -msgstr "活动目录域管理员密码" - -msgid "GECOS field" -msgstr "GECOS字段" - -msgid "" -"\n" -"Sudo Rules\n" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W \\\n" -" -H ldap://ipa.example.com -ZZ -D \"cn=Directory Manager\" \\\n" -" uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -"\n" -"For more information, see the IPA Documentation to Sudo.\n" -msgstr "" - -msgid "comma-separated list of sudo command groups to add" -msgstr "待添加的以逗号分隔的sudo命令组列表" - -msgid "comma-separated list of sudo command groups to remove" -msgstr "待移除的以逗号分隔的sudo命令组列表" - -msgid "Failed members" -msgstr "失败的成员" - -msgid "Failed source hosts/hostgroups" -msgstr "失败的源主机/主机组" - -msgid "Failed hosts/hostgroups" -msgstr "失败的主机/主机组" - -msgid "Failed users/groups" -msgstr "失败的用户/用户组" - -msgid "Failed service/service groups" -msgstr "失败的服务/服务组" - -msgid "Failed to remove" -msgstr "移除失败" - -msgid "Failed RunAs" -msgstr "作为其他用户运行失败" - -msgid "Failed RunAsGroup" -msgstr "作为其他用户组运行失败" - -msgid "Failed profiles" -msgstr "错误的配置文件" - -#, fuzzy -msgid "Failed CAs" -msgstr "作为其他用户运行失败" - -#, fuzzy -msgid "Failed member manager" -msgstr "失败的成员" - -#, fuzzy -msgid "Failed managedby" -msgstr "失败的成员" - -msgid "Failed allowed to retrieve keytab" -msgstr "不允许检索keytab" - -msgid "Failed allowed to create keytab" -msgstr "不允许创建keytab" - -msgid "Failed targets" -msgstr "失败的目标" - #, python-format -msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'" -msgstr "%(cver)s客户端和在'%(server)s'的%(sver)s服务器不兼容" +msgid "Command '%(name)s' has been deprecated" +msgstr "命令'%(name)s'已被弃用" -#, python-format -msgid "unknown error %(code)d from %(server)s: %(error)s" -msgstr "%(server)s上未知的错误%(code)d：%(error)s" +msgid "Command category" +msgstr "命令类别" -msgid "an internal error has occurred" -msgstr "发生了内部错误" +msgid "Command category the rule applies to" +msgstr "规则适用的命令类别" -#, python-format -msgid "an internal error has occurred on server at '%(server)s'" -msgstr "服务器 '%(server)s' 已经发生了一次内部错误" - -#, python-format -msgid "unknown command '%(name)s'" -msgstr "未知的命令'%(name)s'" - -#, python-format -msgid "error on server '%(server)s': %(error)s" -msgstr "服务器'%(server)s'错误：%(error)s" - -#, python-format -msgid "cannot connect to '%(uri)s': %(error)s" -msgstr "不能连接到'%(uri)s'：%(error)s" - -#, python-format -msgid "Invalid JSON-RPC request: %(error)s" -msgstr "无效的JSON-RPC请求: %(error)s" - -#, python-format -msgid "error marshalling data for XML-RPC transport: %(error)s" -msgstr "XML-RPC传输数据整理错误：%(error)s" - -#, python-format -msgid "Missing or invalid HTTP Referer, %(referer)s" -msgstr "丢失或者无效的 HTTP Referer, %(referer)s" - -#, python-format -msgid "" -"System encoding must be UTF-8, '%(encoding)s' is not supported. Set LC_ALL=" -"\"C.UTF-8\", or LC_ALL=\"\" and LC_CTYPE=\"C.UTF-8\"." -msgstr "" - -#, python-format -msgid "Kerberos error: %(major)s/%(minor)s" -msgstr "Kerberos 错误： %(major)s/%(minor)s" - -msgid "did not receive Kerberos credentials" -msgstr "没有收到Kerberos凭证" - -#, python-format -msgid "Service '%(service)s' not found in Kerberos database" -msgstr "在Kerberos数据库中没有找到服务'%(service)s'" - -msgid "No credentials cache found" -msgstr "没有找到凭证缓存" - -msgid "Ticket expired" -msgstr "票据过期" - -msgid "Credentials cache permissions incorrect" -msgstr "凭证缓存权限不正确" - -msgid "Bad format in credentials cache" -msgstr "凭证缓存格式错误" - -msgid "Cannot resolve KDC for requested realm" -msgstr "请求域中不能解析KDC" - -msgid "Session error" -msgstr "会话错误" - -#, python-format -msgid "Principal %(principal)s cannot be authenticated: %(message)s" -msgstr "不能认证主体%(principal)s：%(message)s" - -#, python-format -msgid "Insufficient access: %(info)s" -msgstr "访问受限：%(info)s" - -#, python-format -msgid "command '%(name)s' takes no arguments" -msgstr "命令'%(name)s'没有参数" - -#, python-format -msgid "command '%(name)s' takes at most %(count)d argument" -msgid_plural "command '%(name)s' takes at most %(count)d arguments" -msgstr[0] "命令'%(name)s'最多能带%(count)d个参数" - -#, python-format -msgid "overlapping arguments and options: %(names)s" -msgstr "覆盖参数和选项：%(names)s" - -#, python-format -msgid "'%(name)s' is required" -msgstr "需要'%(name)s'" - -#, python-format -msgid "invalid '%(name)s': %(error)s" -msgstr "无效的'%(name)s'：%(error)s" - -#, python-format -msgid "api has no such namespace: '%(name)s'" -msgstr "api没有这样的命名空间：'%(name)s'" - -msgid "Passwords do not match" -msgstr "密码不匹配" +msgid "Command name" +msgstr "命令名" msgid "Command not implemented" msgstr "命令没有实现" -msgid "Client is not configured. Run ipa-client-install." -msgstr "客户端没有配置。运行ipa-client-install。" +msgid "Commands" +msgstr "命令" + +msgid "Common Name" +msgstr "通用名" + +msgid "Conditions that could not be added" +msgstr "不能被添加的条件" + +msgid "Conditions that could not be removed" +msgstr "不能被移除的条件" + +msgid "Configuration" +msgstr "配置" + +msgid "Configure your token" +msgstr "配置你的令牌" + +msgid "" +"Configure your token by scanning the QR code below. Click on the QR code if " +"you see this on the device you want to configure." +msgstr "" +"通过浏览下面的二维码来配置你的令牌。如果你想在你配置的设备上看到该二维码，请" +"点击它。" + +msgid "Configured administrative server limit exceeded" +msgstr "配置管理服务器超出限制" + +msgid "Configured size limit exceeded" +msgstr "配置大小超出限制" + +msgid "Configured time limit exceeded" +msgstr "配置时间超出限制" + +msgid "Confirm (password)" +msgstr "确认（密码）" + +msgid "Confirmation" +msgstr "确认" + +msgid "Connectivity" +msgstr "连接" + +msgid "Consecutive failures before lockout" +msgstr "连续失败后锁定" + +msgid "Contact Settings" +msgstr "联系方式设置" + +msgid "Contact this specific KDC Server" +msgstr "无法连接指定的KDC服务器" + +msgid "Continue" +msgstr "连续" + +msgid "Continuous mode: Don't stop on errors." +msgstr "连续模式：有错误不停止。" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues" +msgstr "连续操作模式。报告错误但这个过程仍在继续" + +msgid "" +"Continuous operation mode. Errors are reported but the process continues." +msgstr "连续操作模式。报告错误但是这个过程仍在继续。" + +msgid "Convert on server" +msgstr "在服务器上转换" #, python-format msgid "Could not get %(name)s interactively" msgstr "不能交互式地获取%(name)s" -#, python-format -msgid "Command '%(name)s' has been deprecated" -msgstr "命令'%(name)s'已被弃用" +msgid "Could not read UPG Definition originfilter. Check your permissions." +msgstr "不能读UPG原过滤器定义。检查你的权限。" + +msgid "Counter" +msgstr "计数器" + +msgid "Counter-based (HOTP)" +msgstr "计数型（HOTP）" + +msgid "Create Stage user in from a delete user" +msgstr "从一个删除用户中创建计划用户" + +msgid "Create a CA." +msgstr "创建一个CA。" + +msgid "Create a new CA ACL." +msgstr "创建一个新的CA ACL。" + +msgid "Create a new HBAC rule." +msgstr "创建一个新HBAC规则。" + +msgid "Create a new SELinux User Map." +msgstr "创建一个新的SELinux用户映射。" + +msgid "Create a new automount key." +msgstr "创建一个新的自动挂载键。" + +msgid "Create a new automount location." +msgstr "创建一个新的自动挂载位置。" + +msgid "Create a new automount map." +msgstr "创建一个新的自动挂载映射。" + +msgid "Create a new group." +msgstr "创建一个新组。" + +msgid "Create a new indirect mount point." +msgstr "创建一个新的间接挂载点。" + +msgid "Create a new service delegation rule." +msgstr "创建一个新的服务授权规则。" + +msgid "Create a new service delegation target." +msgstr "创建一个新的服务授权目标。" + +msgid "Create a new vault." +msgstr "创建一个新库。" + +msgid "Create as a non-POSIX group" +msgstr "创建一个非POSIX组" + +msgid "Create dns record" +msgstr "创建dns记录" + +msgid "Create new ACI." +msgstr "创建新的ACI。" + +msgid "Create new DNS forward zone." +msgstr "创建新的DNS正向区。" + +msgid "Create new DNS zone (SOA record)." +msgstr "创建新的DNS区域（SOA记录）。" + +msgid "Create new Sudo Command Group." +msgstr "创建新的Sudo命令组。" + +msgid "Create new Sudo Command." +msgstr "创建新的Sudo命令。" + +msgid "Create new Sudo Rule." +msgstr "创建新的Sudo规则。" + +msgid "Create reverse" +msgstr "创建反向" + +msgid "Create reverse record for this IP Address" +msgstr "为该IP地址创建反向记录" #, python-format -msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" -msgstr "域'%(domain)s'不是一个森林'%(forest)s'的根域" +msgid "Created ACI \"%(value)s\"" +msgstr "已创建ACI\"%(value)s\"" #, python-format -msgid "%(reason)s" -msgstr "%(reason)s" +msgid "Created CA \"%(value)s\"" +msgstr "已创建CA\"%(value)s\"" -msgid "This entry already exists" -msgstr "条目已经存在" +msgid "Creating record." +msgstr "创建记录。" -msgid "You must enroll a host in order to create a host service" -msgstr "要创建一个主机服务，你必须注册一个主机" - -#, python-format -msgid "" -"Service principal is not of the form: service/fully-qualified host name: " -"%(reason)s" -msgstr "服务主体不是这种格式：服务名/完全限定的主机名：%(reason)s" +msgid "Credentials cache permissions incorrect" +msgstr "凭证缓存权限不正确" msgid "" -"The realm for the principal does not match the realm for this IPA server" -msgstr "主体域在该IPA服务器域中不匹配" - -msgid "This command requires root access" -msgstr "该命令需要root访问权限" - -msgid "This is already a posix group" -msgstr "这已经是一个posix组" - -#, python-format -msgid "Principal is not of the form user@REALM: '%(principal)s'" -msgstr "主体不是这种格式user@REALM：'%(principal)s'" - -msgid "This entry is already enabled" -msgstr "条目已启用" - -msgid "This entry is already disabled" -msgstr "条目已禁用" - -msgid "This entry cannot be enabled or disabled" -msgstr "条目不能被启用或禁用" - -msgid "This entry is not a member" -msgstr "条目不是一个成员" - -msgid "A group may not be a member of itself" -msgstr "一个组不能是自己的成员" - -msgid "This entry is already a member" -msgstr "条目已经时一个成员" - -#, python-format -msgid "Base64 decoding failed: %(reason)s" -msgstr "Base64解码失败: %(reason)s" - -msgid "A group may not be added as a member of itself" -msgstr "一个组不能是自己的成员" - -msgid "The default users group cannot be removed" -msgstr "默认的用户组不成被删除" - -msgid "Deleting a managed group is not allowed. It must be detached first." -msgstr "删除一个管理组时不允许的。它必须先分离出来。" - -msgid "A managed group cannot have a password policy." -msgstr "管理组不能有密码策略。" - -#, python-format -msgid "'%(entry)s' doesn't have a certificate." -msgstr "'%(entry)s'没有证书。" - -#, python-format -msgid "Unable to create private group. A group '%(group)s' already exists." -msgstr "不能创建私有组。组'%(group)s'已存在。" - -#, python-format -msgid "" -"A problem was encountered when verifying that all members were %(verb)s: " -"%(exc)s" -msgstr "遇到的问题是什么时候验证所有成员是%(verb)s：%(exc)s" - -#, python-format -msgid "%(attr)s does not contain '%(value)s'" -msgstr "%(attr)s没有包含'%(value)s'" - -#, python-format -msgid "" -"The search criteria was not specific enough. Expected 1 and found %(found)d." -msgstr "查找条件不够具体。预期1和找到%(found)d。" - -msgid "This group already allows external members" -msgstr "该组已允许外部成员" - -msgid "This group cannot be posix because it is external" -msgstr "该组不是posix因为它是外部的" - -msgid "This is already a posix group and cannot be converted to external one" -msgstr "这已经是一个posix组了，并且不能转换为外部的" - -#, python-format -msgid "Server removal aborted: %(reason)s." -msgstr "服务器删除失败：%(reason)s。" - -#, python-format -msgid "%(operation)s is not supported for %(principal_type)s principals" -msgstr "%(operation)s不支持主体 %(principal_type)s" - -#, python-format -msgid "Request failed with status %(status)s: %(reason)s" -msgstr "请求失败状态%(status)s：%(reason)s" - -#, python-format -msgid "" -"Mapping ruleset \"%(ruleset)s\" has more than one rule for the %(helper)s " -"helper" +"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" +"install on the IPA server first" msgstr "" +"跨域信任没有配置。首先确认你已经在IPA服务器上运行了ipa-adtrust-install命令" + +msgid "Current DNS record contents:\n" +msgstr "目前的DNS记录内容：\n" + +msgid "Current Password" +msgstr "当前密码" + +msgid "Current domain level:" +msgstr "当前域级别：" + +msgid "Current password is required" +msgstr "需要当前密码" + +msgid "Custom value" +msgstr "自定义值" + +msgid "DHCID record" +msgstr "DHCID记录" + +msgid "DLV Algorithm" +msgstr "DLV算法" + +msgid "DLV Digest" +msgstr "DLV摘要" + +msgid "DLV Digest Type" +msgstr "DLV摘要类型" + +msgid "DLV Key Tag" +msgstr "DLV键标记" + +msgid "DLV record" +msgstr "DLV记录" + +msgid "DN commonName does not match user's login" +msgstr "DN通用名与用户登录名不匹配" + +msgid "DN emailAddress does not match any of user's email addresses" +msgstr "DN电子邮件地址不匹配任何用户的电子邮件地址" + +msgid "DN of container for groups in DS relative to base DN" +msgstr "在DS中与基类DN相关的用户组容器DN" + +msgid "DN of container for users in DS relative to base DN" +msgstr "在DS中与基类DN相关的用户容器DN" + +msgid "DN of the started task" +msgstr "已开始任务的DN" + +msgid "DN to bind as if not using kerberos" +msgstr "DN绑定好像没有使用kerberos" + +msgid "DNAME Target" +msgstr "DNAME目标" + +msgid "DNAME record" +msgstr "DNAME记录" + +msgid "DNS" +msgstr "DNS" + +msgid "DNS Forward Zone" +msgstr "DNS正向区域" + +msgid "DNS Forward Zones" +msgstr "DNS正向区域" + +msgid "DNS Global Configuration" +msgstr "DNS全局配置" #, python-format -msgid "'%(attr)s' already contains one or more values" -msgstr "'%(attr)s'已包含一个或多个值" +msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" +msgstr "DNS RR类型\"%s\"在bind-dyndb-ldap插件中不被支持" -#, python-format -msgid "no command nor help topic '%(topic)s'" -msgstr "没有命令也没有帮助主题'%(topic)s'" +msgid "DNS Resource Record" +msgstr "DNS资源记录" -msgid "change collided with another change" -msgstr "修改冲突" +msgid "DNS Resource Records" +msgstr "DNS资源记录" -msgid "no modifications to be performed" -msgstr "没有修改" +msgid "DNS Server" +msgstr "DNS服务器" -#, fuzzy, python-format -msgid "%(desc)s: %(info)s" -msgstr "%(info)s" +msgid "DNS Server name" +msgstr "DNS服务器名" -msgid "limits exceeded for this query" -msgstr "超出该查询的限制" +msgid "DNS Servers" +msgstr "DNS服务器" -#, python-format -msgid "%(info)s" -msgstr "%(info)s" +msgid "DNS Zone" +msgstr "DNS区域" -msgid "modifying primary key is not allowed" -msgstr "修改主键是不允许的" +msgid "DNS Zone Settings" +msgstr "DNS区域设置" -#, python-format -msgid "%(attr)s: Only one value allowed." -msgstr "%(attr)s：仅允许一个值。" - -#, python-format -msgid "%(attr)s: Invalid syntax." -msgstr "%(attr)s：无效的语法。" - -#, python-format -msgid "Bad search filter %(info)s" -msgstr "不正确的查询筛选器%(info)s" - -msgid "Not allowed on non-leaf entry" -msgstr "在非叶子条目上是不允许的" - -msgid "LDAP timeout" -msgstr "LDAP超时" - -#, python-format -msgid "%(task)s LDAP task timeout, Task DN: '%(task_dn)s'" -msgstr "%(task)s LDAP任务超时，任务DN：'%(task_dn)s'" - -msgid "Configured time limit exceeded" -msgstr "配置时间超出限制" - -msgid "Configured size limit exceeded" -msgstr "配置大小超出限制" - -msgid "Configured administrative server limit exceeded" -msgstr "配置管理服务器超出限制" - -#, python-format -msgid "Certificate operation cannot be completed: %(error)s" -msgstr "证书操作没有完成：%(error)s" - -#, python-format -msgid "Certificate format error: %(error)s" -msgstr "证书格式错误：%(error)s" - -msgid "Already registered" -msgstr "已注册" - -msgid "Not registered yet" -msgstr "尚未注册" - -#, python-format -msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it" -msgstr "%(key)s不能被删除因为%(label)s %(dependent)s需要它" - -#, python-format -msgid "" -"%(key)s cannot be deleted or disabled because it is the last member of " -"%(label)s %(container)s" -msgstr "%(key)s不能被删除或禁用因为它是%(label)s %(container)s的最后一个成员" - -#, python-format -msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s" -msgstr "%(label)s %(key)s不能被删除/修改：%(reason)s" - -#, python-format -msgid "%(name)s certificate is not valid" -msgstr "%(name)s证书无效" - -#, python-format -msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" -msgstr "模式是最新的（FP '%(fingerprint)s', TTL %(ttl)s s）" - -#, python-format -msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" -msgstr "主机'%(hostname)s'没有相配的DNS A/AAAA记录" +msgid "DNS Zones" +msgstr "DNS区域" #, python-format msgid "DNS check failed: Expected {%(expected)s} got {%(got)s}" msgstr "DNS检测失败：预期的{%(expected)s}，得到的{%(got)s}" -#, fuzzy, python-format -msgid "%(exception)s" -msgstr "服务选项" +msgid "DNS class" +msgstr "DNS类" -#, python-format -msgid "" -"Forest '%(forest)s' has existing trust to forest(s) %(domains)s which " -"prevents a trust to '%(conflict)s'" -msgstr "" +msgid "DNS configuration options" +msgstr "DNS配置选项" -msgid "Additional instructions:" -msgstr "附加指示：" +msgid "DNS forward zone" +msgstr "DNS正向区域" -#, python-format -msgid "" -"API Version number was not sent, forward compatibility not guaranteed. " -"Assuming server's API version, %(server_version)s" -msgstr "" -"没有发送API版本号，不能保证向前兼容。假定服务器的API版本%(server_version)s" +msgid "DNS forward zones" +msgstr "DNS正向区域" msgid "" "DNS forwarder semantics changed since IPA 4.0.\n" @@ -11993,25 +3317,42 @@ msgstr "" "自从IPA 4.0后DNS转发器语义改变了。你可以使用正向区域（dnsforwardzone-*）来替" "代。查看帮助文档获取更多详细信息。" -#, python-format -msgid "" -"DNSSEC support is experimental.\n" -"%(additional_info)s" -msgstr "DNSSEC支持是实验性的。%(additional_info)s" +msgid "DNS is not configured" +msgstr "DNS没有配置" + +msgid "DNS label cannot be longer than 63 characters" +msgstr "DNS标签不能长于63个字符" + +msgid "DNS label cannot be longer that 63 characters" +msgstr "DNS标签不能长于63个字符" + +msgid "DNS record was deleted because it contained no data." +msgstr "DNS记录已删除因为它没有数据。" #, python-format -msgid "'%(option)s' option is deprecated. %(additional_info)s" -msgstr "'%(option)s'选项已弃用。%(additional_info)s" +msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" +msgstr "主机%(host)s的DNS记录不能被移除。(%(reason)s)" + +msgid "DNS records can be only updated one at a time" +msgstr "一次只能更新一条DNS记录" + +msgid "DNS resource record" +msgstr "DNS资源记录" + +msgid "DNS resource record type" +msgstr "DNS资源记录类型" + +msgid "DNS resource records" +msgstr "DNS资源记录" #, python-format msgid "" -"Semantic of %(label)s was changed. %(current_behavior)s\n" -"%(hint)s" -msgstr "%(label)s语义已改变了。%(current_behavior)s %(hint)s" +"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " +"server" +msgstr "IP地址为%(addr)s的DNS反向区域%(revzone)s没有被该服务器管理" -#, python-format -msgid "DNS server %(server)s: %(error)s." -msgstr "DNS服务器%(server)s：%(error)s。" +msgid "DNS server" +msgstr "DNS服务器" #, python-format msgid "" @@ -12021,15 +3362,6 @@ msgstr "" "DNS服务器%(server)s不支持DNSSEC：%(error)s。如果DNSSEC认证在IPA服务器上启用" "了，请禁用它。" -#, python-format -msgid "" -"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " -"delegation in authoritative zone \"%(authzone)s\". Please add NS record " -"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." -msgstr "" -"正向\"%(fwzone)s\"无效因为在认证区域\"%(authzone)s\"缺少合适的NS记录。请添加" -"NS记录\"%(ns_rec)s\"到父区域\"%(authzone)s\"。" - #, python-format msgid "" "DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.\n" @@ -12038,6 +3370,41 @@ msgstr "" "DNS服务器%(server)s不支持EDNS0 (RFC 6891)：%(error)s。如果DNSSEC认证在IPA服务" "器上启用了，请禁用它。" +#, python-format +msgid "DNS server %(server)s: %(error)s." +msgstr "DNS服务器%(server)s：%(error)s。" + +msgid "DNS servers" +msgstr "DNS服务器" + +msgid "DNS zone" +msgstr "DNS区域" + +#, python-format +msgid "DNS zone %(zone)s not found" +msgstr "DNS区域%(zone)s没有找到" + +#, python-format +msgid "" +"DNS zone for each realmdomain must contain SOA or NS records. No records " +"found for: %s" +msgstr "DNS区域的每个realm域必须包括SOA或NS记录。没有找到记录：%s" + +msgid "DNS zone root record cannot be renamed" +msgstr "DNS根区域记录不能被重命名" + +msgid "DNS zones" +msgstr "DNS区域" + +msgid "DNSKEY record" +msgstr "DNSKEY记录" + +#, python-format +msgid "" +"DNSSEC support is experimental.\n" +"%(additional_info)s" +msgstr "DNSSEC支持是实验性的。%(additional_info)s" + #, python-format msgid "" "DNSSEC validation failed: %(error)s.\n" @@ -12047,6 +3414,6553 @@ msgstr "" "DNSSEC认证失败：%(error)s。请确认你的DNSSEC配置或者在所有IPA服务器中禁用" "DNSSEC认证。" +msgid "DS Algorithm" +msgstr "DS算法" + +msgid "DS Digest" +msgstr "DS摘要" + +msgid "DS Digest Type" +msgstr "DS摘要类型" + +msgid "DS Key Tag" +msgstr "DS键标记" + +msgid "DS record" +msgstr "DS记录" + +msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" +msgstr "DS记录不得在区域顶点（RFC 4035第2.4节）" + +msgid "" +"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " +"4035 section 2.4)" +msgstr "DS记录需要与一个NS记录共存（RFC 4592第4.6节，RFC 4035第2.4节）" + +msgid "Data" +msgstr "数据" + +msgid "Debugging output" +msgstr "调试输出" + +msgid "Default" +msgstr "默认" + +msgid "Default (fallback) Group" +msgstr "默认（回退）组" + +msgid "Default PAC types" +msgstr "默认PAC类型" + +msgid "Default SELinux user" +msgstr "默认的SELinux用户" + +msgid "Default SELinux user when no match is found in SELinux map rule" +msgstr "当在SELinux映射规则中找不到匹配项时使用默认SELinux用户" + +msgid "Default Trust View cannot be applied on hosts" +msgstr "默认信任视图不能应用于主机上" + +msgid "Default Trust View cannot contain IPA users" +msgstr "默认信任视图不能包含IPA用户" + +msgid "Default attributes" +msgstr "默认属性" + +msgid "Default e-mail domain" +msgstr "默认的电子邮件域" + +msgid "Default from" +msgstr "默认的" + +msgid "Default group for new users" +msgstr "新用户默认组" + +msgid "Default group for new users is not POSIX" +msgstr "新用户的默认组不是POSIX" + +msgid "Default group for new users not found" +msgstr "新用户的默认组没有找到" + +msgid "Default group objectclasses" +msgstr "默认组对象类" + +msgid "Default group objectclasses (comma-separated list)" +msgstr "默认组对象类（以逗号分割）" + +msgid "Default host group" +msgstr "默认主机组" + +msgid "Default location of home directories" +msgstr "主目录的默认位置" + +msgid "Default shell" +msgstr "默认shell" + +msgid "Default shell for new users" +msgstr "新用户默认shell" + +msgid "Default ticket policy could not be read" +msgstr "默认票据策略不可读" + +msgid "Default time to live" +msgstr "默认存活时间" + +msgid "Default types of PAC supported for services" +msgstr "默认PAC支持服务的类型" + +msgid "Default types of supported user authentication" +msgstr "默认支持用户认证的类型" + +msgid "Default user authentication types" +msgstr "默认用户认证类型" + +msgid "Default user group" +msgstr "默认用户组" + +msgid "Default user objectclasses" +msgstr "默认用户对象类" + +msgid "Default user objectclasses (comma-separated list)" +msgstr "默认用户对象类（以逗号分割）" + +msgid "Default users group" +msgstr "默认用户组" + +msgid "Delegation" +msgstr "授权" + +msgid "Delegation name" +msgstr "授权名" + +msgid "Delegations" +msgstr "授权" + +msgid "Delete" +msgstr "删除" + +#, python-format +msgid "Delete %(name)s '%(value)s'?" +msgstr "删除%(name)s '%(value)s'？" + +msgid "Delete ACI." +msgstr "删除ACI。" + +msgid "Delete DNS forward zone." +msgstr "删除DNS正向区。" + +msgid "Delete DNS record entry." +msgstr "删除DNS记录条目。" + +msgid "Delete DNS resource record." +msgstr "删除DNS资源记录。" + +msgid "Delete DNS zone (SOA record)." +msgstr "删除DNS区域（SOA记录）。" + +msgid "Delete IPA server." +msgstr "删除IPA服务器。" + +msgid "Delete Key, Unprovision" +msgstr "删除密钥，取消供应" + +msgid "Delete Server" +msgstr "删除服务器" + +msgid "Delete Sudo Command Group." +msgstr "删除Sudo命令组。" + +msgid "Delete Sudo Command." +msgstr "删除Sudo命令。" + +msgid "Delete Sudo Rule." +msgstr "删除Sudo规则。" + +msgid "Delete a CA ACL." +msgstr "删除一个CA ACL。" + +msgid "Delete a Certificate Profile." +msgstr "删除一个证书配置文件。" + +msgid "Delete a DNS server" +msgstr "删除一个DNS服务器" + +msgid "Delete a RADIUS proxy server." +msgstr "删除一个RADIUS代理服务器。" + +msgid "Delete a SELinux User Map." +msgstr "删除一个SELinux用户映射。" + +msgid "Delete a delegation." +msgstr "删除一个授权。" + +msgid "Delete a group password policy." +msgstr "删除一个组密码策略。" + +msgid "Delete a host." +msgstr "删除一个主机。" + +msgid "Delete a hostgroup." +msgstr "删除一个主机组。" + +msgid "Delete a netgroup." +msgstr "删除一个网络组。" + +msgid "Delete a permission." +msgstr "删除一个权限。" + +msgid "Delete a privilege." +msgstr "删除一个特权。" + +msgid "Delete a role." +msgstr "删除一个角色。" + +msgid "Delete a segment." +msgstr "删除一个段。" + +msgid "Delete a self-service permission." +msgstr "删除一个自助服务权限。" + +msgid "Delete a stage user." +msgstr "删除一个计划用户。" + +msgid "Delete a topology suffix." +msgstr "删除一个拓扑后缀。" + +msgid "Delete a trust." +msgstr "删除一个信任。" + +msgid "Delete a user" +msgstr "删除一个用户" + +msgid "Delete a user, keeping the entry available for future use" +msgstr "删除一个用户，让这个用户可供将来使用" + +msgid "Delete a user." +msgstr "删除一个用户。" + +msgid "Delete a vault container." +msgstr "删除一个库容器。" + +msgid "Delete a vault." +msgstr "删除一个库。" + +msgid "Delete all associated records" +msgstr "删除所有相关记录" + +msgid "Delete all?" +msgstr "全部删除？" + +msgid "Delete an Group ID override." +msgstr "删除一个组ID覆盖。" + +msgid "Delete an HBAC rule." +msgstr "删除一个HBAC规则。" + +msgid "Delete an HBAC service group." +msgstr "删除一个HBAC服务组。" + +msgid "Delete an ID View." +msgstr "删除一个ID视图。" + +msgid "Delete an ID override." +msgstr "删除一个ID覆盖。" + +msgid "Delete an ID range." +msgstr "删除一个ID范围。" + +msgid "Delete an IPA location." +msgstr "删除一个IPA位置。" + +msgid "Delete an IPA service." +msgstr "删除一个IPA服务。" + +msgid "Delete an OTP token." +msgstr "删除一个OTP令牌。" + +msgid "Delete an User ID override." +msgstr "删除一个用户ID覆盖。" + +msgid "Delete an automember rule." +msgstr "删除一个自动成员规则。" + +msgid "Delete an automount key." +msgstr "删除一个自动挂载键。" + +msgid "Delete an automount location." +msgstr "删除一个自动挂载位置。" + +msgid "Delete an automount map." +msgstr "删除一个自动挂载映射。" + +msgid "Delete an existing HBAC service." +msgstr "删除一个存在的HBAC服务。" + +msgid "Delete domain" +msgstr "删除域" + +msgid "Delete group." +msgstr "删除组。" + +msgid "Delete mode" +msgstr "删除模式" + +msgid "Delete service delegation target." +msgstr "删除服务授权目标。" + +msgid "Delete service delegation." +msgstr "删除服务授权。" + +#, python-format +msgid "Deleted ACI \"%(value)s\"" +msgstr "已删除ACI\"%(value)s\"" + +#, python-format +msgid "Deleted CA \"%(value)s\"" +msgstr "已删除CA\"%(value)s\"" + +#, python-format +msgid "Deleted CA ACL \"%(value)s\"" +msgstr "已删除CA ACL\"%(value)s\"" + +#, python-format +msgid "Deleted DNS forward zone \"%(value)s\"" +msgstr "已删除DNS正向区域\"%(value)s\"" + +#, python-format +msgid "Deleted DNS server \"%(value)s\"" +msgstr "已删除DNS服务器\"%(value)s\"" + +#, python-format +msgid "Deleted DNS zone \"%(value)s\"" +msgstr "已删除DNS区域\"%(value)s\"" + +#, python-format +msgid "Deleted Group ID override \"%(value)s\"" +msgstr "已删除组ID覆盖\"%(value)s\"" + +#, python-format +msgid "Deleted HBAC rule \"%(value)s\"" +msgstr "已删除HBAC规则\"%(value)s\"" + +#, python-format +msgid "Deleted HBAC service \"%(value)s\"" +msgstr "已删除HBAC服务\"%(value)s\"" + +#, python-format +msgid "Deleted HBAC service group \"%(value)s\"" +msgstr "已删除HBAC服务组\"%(value)s\"" + +#, python-format +msgid "Deleted ID View \"%(value)s\"" +msgstr "已删除ID视图\"%(value)s\"" + +#, python-format +msgid "Deleted ID override \"%(value)s\"" +msgstr "已删除ID覆盖\"%(value)s\"" + +#, python-format +msgid "Deleted ID range \"%(value)s\"" +msgstr "已删除ID范围\"%(value)s\"" + +#, python-format +msgid "Deleted IPA location \"%(value)s\"" +msgstr "已删除IPA位置\"%(value)s\"" + +#, python-format +msgid "Deleted IPA server \"%(value)s\"" +msgstr "已删除IPA服务器\"%(value)s\"" + +#, python-format +msgid "Deleted OTP token \"%(value)s\"" +msgstr "已删除OTP令牌\"%(value)s\"" + +#, python-format +msgid "Deleted RADIUS proxy server \"%(value)s\"" +msgstr "已删除RADIUS代理服务器\"%(value)s\"" + +#, python-format +msgid "Deleted SELinux User Map \"%(value)s\"" +msgstr "已删除SELinux用户映射\"%(value)s\"" + +#, python-format +msgid "Deleted Sudo Command \"%(value)s\"" +msgstr "已删除Sudo命令\"%(value)s\"" + +#, python-format +msgid "Deleted Sudo Command Group \"%(value)s\"" +msgstr "已删除Sudo命令组\"%(value)s\"" + +#, python-format +msgid "Deleted Sudo Rule \"%(value)s\"" +msgstr "已删除Sudo规则\"%(value)s\"" + +#, python-format +msgid "Deleted User ID override \"%(value)s\"" +msgstr "已删除用户ID覆盖\"%(value)s\"" + +#, python-format +msgid "Deleted automember rule \"%(value)s\"" +msgstr "已删除自动成员规则\"%(value)s\"" + +#, python-format +msgid "Deleted automount key \"%(value)s\"" +msgstr "已删除自动挂载键\"%(value)s\"" + +#, python-format +msgid "Deleted automount location \"%(value)s\"" +msgstr "已删除自动挂载位置\"%(value)s\"" + +#, python-format +msgid "Deleted automount map \"%(value)s\"" +msgstr "已删除自动挂载映射\"%(value)s\"" + +#, python-format +msgid "Deleted delegation \"%(value)s\"" +msgstr "已删除授权\"%(value)s\"" + +#, python-format +msgid "Deleted group \"%(value)s\"" +msgstr "已删除组\"%(value)s\"" + +#, python-format +msgid "Deleted host \"%(value)s\"" +msgstr "已删除主机 \"%(value)s\"" + +#, python-format +msgid "Deleted hostgroup \"%(value)s\"" +msgstr "已删除主机组\"%(value)s\"" + +#, python-format +msgid "Deleted netgroup \"%(value)s\"" +msgstr "已删除网络组\"%(value)s\"" + +#, python-format +msgid "Deleted permission \"%(value)s\"" +msgstr "已删除权限\"%(value)s\"" + +#, python-format +msgid "Deleted privilege \"%(value)s\"" +msgstr "已删除特权\"%(value)s\"" + +#, python-format +msgid "Deleted profile \"%(value)s\"" +msgstr "已删除配置文件\"%(value)s\"" + +#, python-format +msgid "Deleted record \"%(value)s\"" +msgstr "已删除记录\"%(value)s\"" + +#, python-format +msgid "Deleted role \"%(value)s\"" +msgstr "已删除角色\"%(value)s\"" + +#, python-format +msgid "Deleted segment \"%(value)s\"" +msgstr "已删除段\"%(value)s\"" + +#, python-format +msgid "Deleted selfservice \"%(value)s\"" +msgstr "已删除自助服务\"%(value)s\"" + +#, python-format +msgid "Deleted service \"%(value)s\"" +msgstr "已删除服务\"%(value)s\"" + +#, python-format +msgid "Deleted service delegation \"%(value)s\"" +msgstr "已删除服务授权规则\"%(value)s\"" + +#, python-format +msgid "Deleted service delegation target \"%(value)s\"" +msgstr "已删除服务授权目标\"%(value)s\"" + +#, python-format +msgid "Deleted stage user \"%(value)s\"" +msgstr "已删除计划用户\"%(value)s\"" + +#, python-format +msgid "Deleted topology suffix \"%(value)s\"" +msgstr "已删除拓扑后缀\"%(value)s\"" + +#, python-format +msgid "Deleted trust \"%(value)s\"" +msgstr "已删除信任\"%(value)s\"" + +#, python-format +msgid "Deleted user \"%(value)s\"" +msgstr "已删除用户\"%(value)s\"" + +#, python-format +msgid "Deleted vault \"%(value)s\"" +msgstr "已删除库\"%(value)s\"" + +msgid "Deleted vault container" +msgstr "已删除库容器" + +msgid "Deleting a managed group is not allowed. It must be detached first." +msgstr "删除一个管理组时不允许的。它必须先分离出来。" + +msgid "" +"Deleting a server removes it permanently from the topology. Note that this " +"is a non-reversible action." +msgstr "从拓扑中永久地删除一台服务器。注意这是一个不可逆的操作。" + +msgid "" +"Deleting this server is not allowed as it would leave your installation " +"without a CA." +msgstr "删除这台服务器是不允许的因为这将导致你的安装过程没有CA。" + +msgid "Deleting this server will leave your installation without a DNS." +msgstr "删除这台服务器将使得你的安装过程没有DNS。" + +msgid "Deny" +msgstr "阻止" + +msgid "Department Number" +msgstr "部门编号" + +msgid "Deprecated options" +msgstr "已弃用的选项" + +#, python-format +msgid "Deprecated; use %s" +msgstr "已弃用；使用%s" + +msgid "Deprecated; use extratargetfilter" +msgstr "过时的；使用额外的目标过滤器" + +msgid "Description" +msgstr "描述" + +msgid "Description of the purpose of the CA" +msgstr "CA描述的目的" + +#, python-format +msgid "Detached group \"%(value)s\" from user \"%(value)s\"" +msgstr "从用户\"%(value)s\"中分离组\"%(value)s\"" + +msgid "Detect" +msgstr "检测" + +msgid "" +"Determine whether Schema Compatibility plugin is configured to serve trusted " +"domain users and groups" +msgstr "确定是否将模式兼容插件配置成服务器信任域用户和用户组" + +msgid "Determine whether ipa-adtrust-install has been run on this system" +msgstr "确定是否在该系统上运行ipa-adtrust-install" + +msgid "Dict of I18N messages" +msgstr "国际化消息字典" + +msgid "Dict of JSON encoded IPA Commands" +msgstr "JSON编码IPA命令字典" + +msgid "Dict of JSON encoded IPA Methods" +msgstr "JSON编码IPA方法字典" + +msgid "Dict of JSON encoded IPA Objects" +msgstr "JSON编码IPA对象字典" + +msgid "Digest" +msgstr "摘要" + +msgid "Digest Type" +msgstr "摘要类型" + +msgid "Digits" +msgstr "数字" + +msgid "Direct" +msgstr "直接的" + +msgid "Direct Membership" +msgstr "直接成员" + +msgid "Direction Latitude" +msgstr "纬度方向" + +msgid "Direction Longitude" +msgstr "经度方向" + +msgid "Disable" +msgstr "禁用" + +msgid "Disable DNS Forward Zone." +msgstr "禁用DNS正向区。" + +msgid "Disable DNS Zone." +msgstr "禁用DNS区域。" + +msgid "Disable a CA ACL." +msgstr "禁用一个CA ACL。" + +msgid "Disable a CA." +msgstr "禁用一个CA。" + +msgid "Disable a Sudo Rule." +msgstr "禁用一个Sudo规则。" + +msgid "Disable a user account." +msgstr "禁用一个用户账户。" + +msgid "Disable an HBAC rule." +msgstr "禁用一个HBAC规则。" + +msgid "Disable an SELinux User Map rule." +msgstr "禁用一个SELinux用户映射规则。" + +msgid "Disable per-user override" +msgstr "禁用每个用户覆盖" + +msgid "Disable the Kerberos key and SSL certificate of a service." +msgstr "禁用一个服务的Kerberos密钥和SSL证书。" + +msgid "Disable the Kerberos key, SSL certificate and all services of a host." +msgstr "禁用该主机的Kerberos密钥，SSL证书和所有的服务。" + +msgid "Disable token" +msgstr "禁用令牌" + +msgid "Disable use of IPA resources by the domain of the trust" +msgstr "禁止使用信任域中的IPA资源" + +msgid "Disabled" +msgstr "禁用" + +#, python-format +msgid "Disabled CA \"%(value)s\"" +msgstr "已禁用CA\"%(value)s\"" + +#, python-format +msgid "Disabled CA ACL \"%(value)s\"" +msgstr "已禁用CA ACL\"%(value)s\"" + +#, python-format +msgid "Disabled DNS forward zone \"%(value)s\"" +msgstr "已禁用DNS正向区域\"%(value)s\"" + +#, python-format +msgid "Disabled DNS zone \"%(value)s\"" +msgstr "已禁用DNS区域\"%(value)s\"" + +#, python-format +msgid "Disabled HBAC rule \"%(value)s\"" +msgstr "已禁用HBAC规则\"%(value)s\"" + +#, python-format +msgid "Disabled SELinux User Map \"%(value)s\"" +msgstr "已禁用SELinux用户映射\"%(value)s\"" + +#, python-format +msgid "Disabled Sudo Rule \"%s\"" +msgstr "禁用Sudo规则\"%s\"" + +#, python-format +msgid "Disabled host \"%(value)s\"" +msgstr "已禁用主机\"%(value)s\"" + +#, python-format +msgid "Disabled service \"%(value)s\"" +msgstr "已禁用服务\"%(value)s\"" + +#, python-format +msgid "Disabled trust domain \"%(value)s\"" +msgstr "已禁用信任域\"%(value)s\"" + +#, python-format +msgid "Disabled user account \"%(value)s\"" +msgstr "已禁用用户账户\"%(value)s\"" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this host." +msgstr "不允许用户，用户组，主机或主机组来创建该主机的keytab。" + +msgid "" +"Disallow users, groups, hosts or host groups to create a keytab of this " +"service." +msgstr "不允许用户，用户组，主机或主机组来创建该服务的keytab。" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"host." +msgstr "不允许用户，用户组，主机或主机组来检索该主机的keytab。" + +msgid "" +"Disallow users, groups, hosts or host groups to retrieve a keytab of this " +"service." +msgstr "不允许用户，用户组，主机或主机组来检索该服务的keytab。" + +msgid "Display DNS resource." +msgstr "显示DNS资源。" + +msgid "Display Sudo Command Group." +msgstr "显示Sudo命令组。" + +msgid "Display Sudo Command." +msgstr "显示Sudo命令。" + +msgid "Display Sudo Rule." +msgstr "显示Sudo规则。" + +msgid "Display a segment." +msgstr "显示一个段。" + +msgid "Display a single ACI given an ACI name." +msgstr "给出一个ACI名显示一个单一的ACI。" + +msgid "Display an automount key." +msgstr "显示一个自动挂载键。" + +msgid "Display an automount location." +msgstr "显示一个自动挂载位置。" + +msgid "Display an automount map." +msgstr "显示一个自动挂载映射。" + +msgid "Display configuration of a DNS server." +msgstr "显示一个DNS服务器配置。" + +msgid "Display current entitlements." +msgstr "显示当前权利。" + +msgid "Display effective policy for a specific user" +msgstr "显示一个指定用户的有效策略" + +msgid "Display information about a DNS forward zone." +msgstr "显示DNS正向区信息。" + +msgid "Display information about a DNS zone (SOA record)." +msgstr "显示DNS区域（SOA记录）信息。" + +msgid "Display information about a RADIUS proxy server." +msgstr "显示一个RADIUS代理服务器信息。" + +msgid "Display information about a class." +msgstr "显示一个类信息。" + +msgid "Display information about a command output." +msgstr "显示一个命令输出信息。" + +msgid "Display information about a command parameter." +msgstr "显示一个命令参数信息。" + +msgid "Display information about a command." +msgstr "显示一个命令信息。" + +msgid "Display information about a delegation." +msgstr "显示一个授权信息。" + +msgid "Display information about a help topic." +msgstr "显示一个帮助主题信息。" + +msgid "Display information about a host." +msgstr "显示一个主机信息。" + +msgid "Display information about a hostgroup." +msgstr "显示一个主机组信息。" + +msgid "Display information about a named group." +msgstr "显示指定组信息。" + +msgid "Display information about a named service delegation rule." +msgstr "显示一个命名服务授权规则信息。" + +msgid "Display information about a named service delegation target." +msgstr "显示一个命名服务授权目标信息。" + +msgid "Display information about a netgroup." +msgstr "显示一个网络组信息。" + +msgid "Display information about a permission." +msgstr "显示一个权限信息。" + +msgid "Display information about a privilege." +msgstr "显示一个特权信息。" + +msgid "Display information about a range." +msgstr "显示范围信息。" + +msgid "Display information about a role." +msgstr "显示一个角色信息。" + +msgid "Display information about a self-service permission." +msgstr "显示一个自助服务权限信息。" + +msgid "Display information about a stage user." +msgstr "显示一个计划用户信息。" + +msgid "Display information about a trust." +msgstr "显示信任信息。" + +msgid "Display information about a user." +msgstr "显示一个用户信息。" + +msgid "Display information about a vault container." +msgstr "显示一个库容器信息。" + +msgid "Display information about a vault." +msgstr "显示一个库信息。" + +msgid "Display information about an Group ID override." +msgstr "显示一个组ID覆盖信息。" + +msgid "Display information about an HBAC service group." +msgstr "显示一个HBAC服务组信息。" + +msgid "Display information about an HBAC service." +msgstr "显示一个HBAC服务信息。" + +msgid "Display information about an ID View." +msgstr "显示一个ID视图信息。" + +msgid "Display information about an ID override." +msgstr "显示一个ID覆盖信息。" + +msgid "Display information about an IPA location." +msgstr "显示一个IPA位置信息。" + +msgid "Display information about an IPA service." +msgstr "显示一个IPA服务信息。" + +msgid "Display information about an OTP token." +msgstr "显示一个OTP令牌信息。" + +msgid "Display information about an User ID override." +msgstr "显示一个用户ID覆盖信息。" + +msgid "Display information about an automember rule." +msgstr "显示一个自动成员规则信息。" + +msgid "Display information about password policy." +msgstr "显示密码策略信息。" + +msgid "Display information about the default (fallback) automember groups." +msgstr "显示默认（回退）自动成员组的信息。" + +msgid "Display name" +msgstr "显示名称" + +msgid "" +"Display the access rights of this entry (requires --all). See ipa man page " +"for details." +msgstr "显示该条目的访问权限（需要--all）。更详细的信息请查看ipa帮助页。" + +msgid "Display the current Kerberos ticket policy." +msgstr "显示当前Kerberos票据策略。" + +msgid "Display the list of realm domains." +msgstr "显示realm域列表。" + +msgid "Display the properties of a CA ACL." +msgstr "显示一个CA ACL的属性。" + +msgid "Display the properties of a CA." +msgstr "显示一个CA属性。" + +msgid "Display the properties of a Certificate Profile." +msgstr "显示一个证书配置文件的属性。" + +msgid "Display the properties of a SELinux User Map rule." +msgstr "显示一个SELinux用户映射规则的属性。" + +msgid "Display the properties of an HBAC rule." +msgstr "显示一个HBAC规则的属性。" + +msgid "Display user record for current Kerberos principal" +msgstr "显示当前Kerberos主体的用户记录" + +msgid "Do not display QR code" +msgstr "不显示二维码" + +msgid "Do not update records only return expected records" +msgstr "不更新记录只返回预期的记录" + +msgid "Do you also want to perform DNS check?" +msgstr "你还想执行DNS检查吗？" + +msgid "Do you want to check if new authoritative nameserver address is in DNS" +msgstr "你想要检查在DNS中是否有新的权威命名服务器地址" + +#, python-brace-format +msgid "Do you want to remove kerberos alias ${alias}?" +msgstr "你要删除kerberos别名${alias}吗？" + +msgid "Do you want to remove the certificate hold?" +msgstr "你要删除证书持有吗？" + +msgid "" +"Do you want to revoke this certificate? Select a reason from the pull-down " +"list." +msgstr "你要撤销该证书吗？从下拉列表中选择一个理由。" + +msgid "Do you want to update system DNS records?" +msgstr "你要更新系统DNS记录吗？" + +msgid "Documentation" +msgstr "文档" + +msgid "Dogtag Authority ID" +msgstr "Dogtag授权ID" + +msgid "Domain" +msgstr "域" + +#, python-format +msgid "Domain '%(domain)s' is not a root domain for forest '%(forest)s'" +msgstr "域'%(domain)s'不是一个森林'%(forest)s'的根域" + +msgid "Domain GUID" +msgstr "域GUID" + +msgid "Domain Level" +msgstr "域级别" + +msgid "Domain Level cannot be lowered." +msgstr "域级别不能降低了。" + +#, python-brace-format +msgid "Domain Level cannot be raised to {0}, server {1} does not support it." +msgstr "域级别不能提高到{0}，服务器{1}不支持它。" + +msgid "Domain NetBIOS name" +msgstr "域NetBIOS名" + +msgid "Domain SID" +msgstr "域SID" + +msgid "Domain SID of the trusted domain" +msgstr "信任域的域SID" + +msgid "Domain Security Identifier" +msgstr "域安全标识符" + +msgid "Domain controller for the Active Directory domain (optional)" +msgstr "活动目录域的域控制器（可选的）" + +msgid "Domain enabled" +msgstr "域已启用" + +msgid "Domain name" +msgstr "域名" + +msgid "Don't create user private group" +msgstr "不创建用户私有组" + +msgid "Download" +msgstr "下载" + +msgid "Download certificate as PEM formatted file." +msgstr "下载证书为PEM格式文件。" + +msgid "Duplicate keys skipped:" +msgstr "已忽略重复的键：" + +msgid "Duplicate maps skipped:" +msgstr "已忽略重复的映射：" + +msgid "Dynamic update" +msgstr "动态更新" + +msgid "Edit" +msgstr "编辑" + +#, python-brace-format +msgid "Edit ${entity}" +msgstr "编辑${entity}" + +msgid "Effective attributes" +msgstr "有效属性" + +msgid "Email address" +msgstr "邮件地址" + +msgid "Employee Information" +msgstr "员工信息" + +msgid "Employee Number" +msgstr "员工编号" + +msgid "Employee Type" +msgstr "员工类型" + +msgid "Enable" +msgstr "启用" + +msgid "Enable DNS Forward Zone." +msgstr "启用DNS正向区。" + +msgid "Enable DNS Zone." +msgstr "启用DNS区域。" + +msgid "Enable a CA ACL." +msgstr "启用一个CA ACL。" + +msgid "Enable a CA." +msgstr "启用一个CA。" + +msgid "Enable a Sudo Rule." +msgstr "启用一个Sudo规则。" + +msgid "Enable a user account." +msgstr "启用一个用户账户。" + +msgid "Enable an HBAC rule." +msgstr "启用一个HBAC规则。" + +msgid "Enable an SELinux User Map rule." +msgstr "启用一个SELinux用户映射规则。" + +msgid "Enable migration mode" +msgstr "启用迁移模式" + +msgid "Enable or Disable Anonymous PKINIT." +msgstr "启用或禁用匿名PKINIT。" + +msgid "Enable token" +msgstr "启用令牌" + +msgid "Enabled" +msgstr "启用" + +#, python-format +msgid "Enabled CA \"%(value)s\"" +msgstr "已启用CA\"%(value)s\"" + +#, python-format +msgid "Enabled CA ACL \"%(value)s\"" +msgstr "已启用CA ACL\"%(value)s\"" + +#, python-format +msgid "Enabled DNS forward zone \"%(value)s\"" +msgstr "已启用DNS正向区域\"%(value)s\"" + +#, python-format +msgid "Enabled DNS zone \"%(value)s\"" +msgstr "已启用DNS区域\"%(value)s\"" + +#, python-format +msgid "Enabled HBAC rule \"%(value)s\"" +msgstr "已启用HBAC规则\"%(value)s\"" + +#, python-format +msgid "Enabled SELinux User Map \"%(value)s\"" +msgstr "已启用SELinux用户映射\"%(value)s\"" + +#, python-format +msgid "Enabled Sudo Rule \"%s\"" +msgstr "启用Sudo规则\"%s\"" + +msgid "Enabled server roles" +msgstr "已启用服务器角色" + +#, python-format +msgid "Enabled trust domain \"%(value)s\"" +msgstr "已启用信任域\"%(value)s\"" + +#, python-format +msgid "Enabled user account \"%(value)s\"" +msgstr "已启用用户账户\"%(value)s\"" + +msgid "Encryption types to request" +msgstr "加密类型要求" + +msgid "Enctype comparison failed!\n" +msgstr "加密类型比较失败！\n" + +msgid "Enrolled" +msgstr "已注册" + +msgid "Enrollment" +msgstr "注册" + +msgid "Enrollment UUID" +msgstr "注册UUID" + +msgid "Enrollment UUID (not implemented)" +msgstr "注册UUID（没有实现）" + +#, c-format +msgid "Enrollment failed. %s\n" +msgstr "注册失败。%s\n" + +#, python-format +msgid "Enter %(label)s again to verify: " +msgstr "再次输入 %(label)s进行校验: " + +msgid "Enter trusted group name." +msgstr "键入受信任的组名称。" + +msgid "" +"Enter trusted or IPA group name. Note: search doesn't list groups from " +"trusted domains." +msgstr "键入受信任的组或IPA组登录。注意：查找不列举信任域中的组。" + +msgid "" +"Enter trusted or IPA user login. Note: search doesn't list users from " +"trusted domains." +msgstr "键入受信任的用户或IPA用户登录。注意：查找不列举信任域中的用户。" + +msgid "Enter trusted user login." +msgstr "键入受信任的用户登录。" + +msgid "Entry" +msgstr "条目" + +#, python-format +msgid "Entry %s does not exist" +msgstr "条目%s不存在" + +#, python-format +msgid "Entry %s not found" +msgstr "条目%s没有找到" + +msgid "Entry RDN is not 'uid'" +msgstr "条目RDN不是'uid'" + +#, python-format +msgid "Entry has no '%(attribute)s'" +msgstr "条目没有'%(attribute)s'" + +msgid "Enumerate all the hosts the view applies to." +msgstr "列举应用视图的所有主机。" + +msgid "Error" +msgstr "错误" + +msgid "Error changing account status" +msgstr "错误更改帐户状态" + +#, c-format +msgid "Error getting default Kerberos realm: %s.\n" +msgstr "获取默认Kerberos域错误：%s。\n" + +#, c-format +msgid "Error obtaining initial credentials: %s.\n" +msgstr "获取初始化证书错误：%s。\n" + +#, c-format +msgid "Error parsing \"%1$s\": %2$s.\n" +msgstr "解析\"%1$s\"：%2$s错误。\n" + +#, c-format +msgid "Error resolving keytab: %s.\n" +msgstr "解析keytab错误：%s。\n" + +#, c-format +msgid "Error storing creds in credential cache: %s.\n" +msgstr "在凭证缓存中存储证书错误：%s。\n" + +msgid "" +"Establish bi-directional trust. By default trust is inbound one-way only." +msgstr "建立双向信任。默认信任仅是单项的。" + +msgid "" +"Establish external trust to a domain in another forest. The trust is not " +"transitive beyond the domain." +msgstr "建立外部信任到另一个森林域中。信任不会在域外传递。" + +msgid "Establish using" +msgstr "建立使用" + +msgid "Established and verified" +msgstr "已建立和验证" + +msgid "Exchanger" +msgstr "交换器" + +msgid "Exclude from" +msgstr "排斥" + +msgid "Excluded attributes" +msgstr "排除的属性" + +msgid "Exclusive" +msgstr "独占的" + +msgid "Exclusive Regex" +msgstr "独占的正则表达式" + +msgid "Expand All" +msgstr "全部展开" + +msgid "Expires On" +msgstr "有效期限" + +msgid "Export plugin meta-data for the webUI." +msgstr "webUI中导出插件元数据。" + +msgid "Expression" +msgstr "表达式" + +msgid "External" +msgstr "外部的" + +msgid "External Group the commands can run as (sudorule-find only)" +msgstr "外部用户组可以运行的命令（只是sudorule-find）" + +msgid "External Groups of RunAs Users" +msgstr "作为用户来运行的外部用户组" + +msgid "External Groups of users that the command can run as" +msgstr "外部用户组可以运行的命令" + +msgid "External User" +msgstr "外部用户" + +msgid "External User the commands can run as (sudorule-find only)" +msgstr "外部用户可以运行的命令（只是sudorule-find）" + +msgid "External User the rule applies to (sudorule-find only)" +msgstr "规则适用的外部用户（只是sudorule-find）" + +msgid "External host" +msgstr "外部主机" + +msgid "External member" +msgstr "额外的成员" + +msgid "External trust" +msgstr "外部的信任" + +msgid "Extra target filter" +msgstr "额外的目标过滤器" + +msgid "Failed RunAs" +msgstr "作为其他用户运行失败" + +msgid "Failed RunAsGroup" +msgstr "作为其他用户组运行失败" + +msgid "Failed allowed to create keytab" +msgstr "不允许创建keytab" + +msgid "Failed allowed to retrieve keytab" +msgstr "不允许检索keytab" + +msgid "Failed hosts/hostgroups" +msgstr "失败的主机/主机组" + +msgid "Failed logins" +msgstr "登录失败" + +msgid "Failed members" +msgstr "失败的成员" + +msgid "Failed owners" +msgstr "错误的所有者" + +msgid "Failed profiles" +msgstr "错误的配置文件" + +msgid "Failed service/service groups" +msgstr "失败的服务/服务组" + +msgid "Failed source hosts/hostgroups" +msgstr "失败的源主机/主机组" + +msgid "Failed targets" +msgstr "失败的目标" + +msgid "Failed to add" +msgstr "添加失败" + +#, c-format +msgid "Failed to add key to the keytab\n" +msgstr "向keytab中添加密钥失败\n" + +msgid "" +"Failed to add user to the default group. Use 'ipa group-add-member' to add " +"manually." +msgstr "添加用户到默认组失败。使用'ipa group-add-member'来手动添加。" + +msgid "Failed to authenticate to CA REST API" +msgstr "CA REST API认证失败" + +#, c-format +msgid "Failed to bind to server!\n" +msgstr "绑定服务器失败！\n" + +#, python-format +msgid "" +"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " +"%(err)s" +msgstr "从s4u2proxy条目%(dn)s中清除成员主体%(principal)s失败：%(err)s" + +#, python-format +msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" +msgstr "为%(master)s清除Custodia密钥失败：%(err)s" + +#, python-format +msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" +msgstr "为%(master)s清除DNA主机名条目失败：%(err)s" + +#, python-format +msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" +msgstr "清除%(hostname)s DNS条目失败：%(err)s" + +#, python-format +msgid "Failed to cleanup server principals/keys: %(err)s" +msgstr "清除服务器主体/密钥失败：%(err)s" + +#, c-format +msgid "Failed to close the keytab\n" +msgstr "关闭keytab失败\n" + +#, c-format +msgid "Failed to create control!\n" +msgstr "创建控制失败！\n" + +#, c-format +msgid "Failed to create key material\n" +msgstr "创建密钥材料失败\n" + +msgid "Failed to create key!\n" +msgstr "创建密钥失败！\n" + +msgid "Failed to create random key!\n" +msgstr "创建随机密钥失败！\n" + +msgid "Failed to decode control reply!\n" +msgstr "解码控制应答失败！\n" + +#, c-format +msgid "Failed to get keytab\n" +msgstr "获取keytab失败\n" + +#, c-format +msgid "Failed to get keytab!\n" +msgstr "获取keytab失败！\n" + +#, c-format +msgid "Failed to get result: %s\n" +msgstr "获取结果失败：%s\n" + +#, c-format +msgid "Failed to open Keytab\n" +msgstr "打开Keytab失败\n" + +#, c-format +msgid "Failed to open config file %s\n" +msgstr "打开配置文件%s失败\n" + +#, c-format +msgid "Failed to open keytab\n" +msgstr "打开keytab失败\n" + +#, c-format +msgid "Failed to open keytab '%1$s': %2$s\n" +msgstr "打开keytab'%1$s'：%2$s失败\n" + +#, c-format +msgid "Failed to parse config file %s\n" +msgstr "解析配置文件%s失败\n" + +#, c-format +msgid "Failed to parse extended result: %s\n" +msgstr "解析扩展结果失败：%s\n" + +#, c-format +msgid "Failed to parse result: %s\n" +msgstr "解析结果失败：%s\n" + +msgid "Failed to remove" +msgstr "移除失败" + +#, python-format +msgid "Failed to remove server %(master)s from server list: %(err)s" +msgstr "从服务器列表中删除服务器%(master)s失败：%(err)s" + +#, c-format +msgid "Failed to retrieve any keys" +msgstr "未能检索任何密钥" + +#, c-format +msgid "Failed to retrieve encryption type %1$s (#%2$d)\n" +msgstr "检索加密类型%1$s (#%2$d)失败\n" + +#, c-format +msgid "Failed to retrieve encryption type type #%d\n" +msgstr "检索加密类型#%d失败\n" + +msgid "Failed users/groups" +msgstr "失败的用户/用户组" + +#, python-format +msgid "Failure decoding Certificate Signing Request: %s" +msgstr "解码证书签名请求失败：%s" + +msgid "Failure reset interval" +msgstr "失败重置时间间隔" + +msgid "Fallback primary group" +msgstr "回退主要的组" + +msgid "Fallback to AD DC LDAP" +msgstr "回退到AD DC LDAP" + +msgid "False if migration fails because the compatibility plug-in is enabled." +msgstr "如果移植失败是因为启用了兼容插件，则错误" + +msgid "False if migration mode was disabled." +msgstr "如果移植模式是禁用的，则错误" + +msgid "Fax Number" +msgstr "传真号码" + +msgid "Fetch domains" +msgstr "获取域名" + +msgid "Fetching DNS zones." +msgstr "抓取DNS区域。" + +msgid "" +"Fetching domains from trusted forest failed. See details in the error_log" +msgstr "从信任森林中获取域失败。在error_log中查看详细信息" + +#, python-format +msgid "File %(file)s not found" +msgstr "没有找到文件 %(file)s " + +msgid "File containing profile configuration" +msgstr "文件包含配置文件配置" + +msgid "File containing the new vault password" +msgstr "文件包含新的库密码" + +msgid "File containing the new vault public key" +msgstr "文件包含新的库公钥" + +msgid "File containing the old vault password" +msgstr "文件包含旧的库密码" + +msgid "File containing the old vault private key" +msgstr "文件包含旧的库私钥" + +msgid "File containing the vault password" +msgstr "文件包含库密码" + +msgid "File containing the vault private key" +msgstr "文件包含库私钥" + +msgid "File containing the vault public key" +msgstr "文件包含库公钥" + +msgid "File to load the certificate from." +msgstr "从文件加载证书" + +msgid "File to store retrieved data" +msgstr "文件存储检索数据" + +msgid "File to store the certificate in." +msgstr "存储证书文件。" + +msgid "Filename is empty" +msgstr "文件名为空" + +msgid "Filename of a raw profile. The XML format is not supported." +msgstr "原始配置文件的文件名。不支持XML格式。" + +msgid "Filter" +msgstr "过滤" + +#, python-brace-format +msgid "Filter available ${other_entity}" +msgstr "${other_entity}过滤器可用" + +msgid "Find" +msgstr "查找" + +msgid "Find a server role on a server(s)" +msgstr "在服务器上找到一个服务器角色" + +msgid "Fingerprint" +msgstr "指纹" + +msgid "Fingerprint (SHA1)" +msgstr "指纹（SHA1）" + +msgid "Fingerprint Type" +msgstr "指纹类型" + +msgid "Fingerprint of schema cached by client" +msgstr "客户端缓存的模式指纹" + +msgid "Fingerprints" +msgstr "指纹" + +msgid "First" +msgstr "第一" + +msgid "First Code" +msgstr "第一个码" + +msgid "First OTP" +msgstr "第一个OTP" + +msgid "First Posix ID of the range" +msgstr "该范围的第一个Posix ID" + +msgid "First Posix ID of the range reserved for the trusted domain" +msgstr "信任域范围的第一个Posix ID" + +msgid "First RID of the corresponding RID range" +msgstr "匹配RID范围的第一个RID" + +msgid "First RID of the secondary RID range" +msgstr "次要RID范围的第一个RID" + +msgid "First date/time the token can be used" +msgstr "令牌被第一次使用" + +msgid "First name" +msgstr "名" + +msgid "Flags" +msgstr "标记" + +msgid "Following segments were not deleted:" +msgstr "下面部分没有被删除：" + +msgid "Force" +msgstr "强制" + +msgid "Force DNS zone creation even if it will overlap with an existing zone." +msgstr "强制创建DNS区域，即使它会覆盖一个已有区域。" + +msgid "Force DNS zone creation even if nameserver is not resolvable." +msgstr "即使命名服务器无法解析，也强制创建DNS区域。" + +msgid "" +"Force DNS zone creation even if nameserver is not resolvable. (Deprecated)" +msgstr "即使命名服务器无法解析，也强制创建DNS区域。（不赞成）" + +msgid "Force Update" +msgstr "强制更新" + +msgid "Force adding domain even if not in DNS" +msgstr "即使域在DNS中不存在，也强制添加它" + +msgid "Force nameserver change even if nameserver not in DNS" +msgstr "即使命名服务器不在DNS中，也强制改变它" + +msgid "Force server removal" +msgstr "强制服务器删除" + +msgid "Force server removal even if it does not exist" +msgstr "强制服务器删除即使它不存在" + +msgid "Force the host join. Rejoin even if already joined." +msgstr "强制主机加入。即使已经加入了也重新加入。" + +#, python-format +msgid "Forcing removal of %(hostname)s" +msgstr "强制删除%(hostname)s" + +msgid "Format error" +msgstr "格式错误" + +msgid "Forward policy" +msgstr "转发器策略" + +msgid "" +"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " +"incorrect host?" +msgstr "在IPA DNS中转发器策略阻止了它，也许是转发器指向了不正确的主机？" + +msgid "Forward to server instead of running locally" +msgstr "转发到服务器而不是在本地运行" + +msgid "Forward zones only" +msgstr "仅正向区域" + +msgid "Forwarders" +msgstr "转发器" + +msgid "Forwarding disabled" +msgstr "禁止转发" + +#, python-format +msgid "Found '%(value)s'" +msgstr "找到'%(value)s'" + +msgid "Full name" +msgstr "全名" + +msgid "Fully Qualified Host Name" +msgstr "完全限定的主机名" + +msgid "GECOS field" +msgstr "GECOS字段" + +msgid "GID" +msgstr "GID" + +msgid "GID (use this option to set it manually)" +msgstr "GID（使用该选项来手动设置它）" + +msgid "General" +msgstr "普通的" + +msgid "Generate OTP" +msgstr "生成OTP" + +msgid "Generate a random password to be used in bulk enrollment" +msgstr "生成一个随机密码用于批量注册" + +msgid "Generate a random user password" +msgstr "生成一个随机用户密码" + +msgid "Generate automount files for a specific location." +msgstr "在一特定位置生成自动挂载文件。" + +msgid "Generated OTP" +msgstr "生成OTP" + +msgid "Get" +msgstr "获得" + +msgid "Get Certificate" +msgstr "获取证书" + +msgid "Global DNS configuration is empty" +msgstr "全局DNS配置是空的" + +msgid "Global Trust Configuration" +msgstr "全局信任配置" + +msgid "Global forwarders" +msgstr "全局转发器" + +msgid "" +"Global forwarders. A custom port can be specified for each forwarder using a " +"standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"全局转发器。使用标准格式\"IP_ADDRESS port PORT\"为每个转发器指定一个自定义端" +"口" + +msgid "" +"Global forwarding policy. Set to \"none\" to disable any configured global " +"forwarders." +msgstr "全局转发器策略。通过设置\"none\"来禁用全局转发器的所有配置。" + +msgid "Granted rights" +msgstr "授予权限" + +msgid "Granted to Privilege" +msgstr "授于特权" + +msgid "Granting privilege to roles" +msgstr "给角色授予特权" + +msgid "Group" +msgstr "组" + +#, python-format +msgid "Group '%s' does not exist" +msgstr "组 '%s' 不存在" + +msgid "Group ID Number" +msgstr "组ID号码" + +msgid "Group ID override" +msgstr "组ID覆盖" + +msgid "Group ID overrides" +msgstr "组ID覆盖" + +msgid "Group Options" +msgstr "组选项" + +msgid "Group Settings" +msgstr "组设置" + +msgid "Group Type" +msgstr "组类型" + +msgid "Group container" +msgstr "组容器" + +msgid "Group description" +msgstr "组描述" + +msgid "Group name" +msgstr "组名" + +msgid "Group object class" +msgstr "组对象类" + +msgid "Group object overrides" +msgstr "组对象覆盖" + +msgid "Group search fields" +msgstr "组搜索域" + +msgid "Group to override" +msgstr "待覆盖的组" + +msgid "Grouping Type" +msgstr "组类型" + +msgid "Grouping to which the rule applies" +msgstr "组应用于哪种规则" + +msgid "Groups" +msgstr "用户组" + +msgid "Groups allowed to create keytab" +msgstr "允许创建keytab的用户组" + +msgid "Groups allowed to retrieve keytab" +msgstr "允许检索keytab的用户组" + +msgid "Groups of RunAs Users" +msgstr "作为用户来运行的用户组" + +msgid "HBAC Rule" +msgstr "HBAC规则" + +msgid "HBAC Rule that defines the users, groups and hostgroups" +msgstr "HBAC规则定义了用户，用户组和主机组" + +msgid "HBAC Rules" +msgstr "HBAC规则" + +msgid "HBAC Service" +msgstr "HBAC服务" + +msgid "HBAC Service Group" +msgstr "HBAC服务组" + +msgid "HBAC Service Groups" +msgstr "HBAC服务组" + +msgid "HBAC Services" +msgstr "HBAC服务" + +msgid "HBAC Test" +msgstr "HBAC测试" + +msgid "HBAC rule" +msgstr "HBAC规则" + +#, python-format +msgid "HBAC rule %(rule)s not found" +msgstr "HBAC规则%(rule)s没有找到" + +msgid "HBAC rule and local members cannot both be set" +msgstr "HBAC规则和本地成员不能被同时设置" + +msgid "HBAC rules" +msgstr "HBAC规则" + +msgid "HBAC service" +msgstr "HBAC服务" + +msgid "HBAC service description" +msgstr "HBAC服务描述" + +msgid "HBAC service group" +msgstr "HBAC服务组" + +msgid "HBAC service group description" +msgstr "HBAC服务组描述" + +msgid "HBAC service groups" +msgstr "HBAC服务组" + +msgid "HBAC service groups to add" +msgstr "待添加的HBAC服务组" + +msgid "HBAC service groups to remove" +msgstr "待移除的HBAC服务组" + +msgid "HBAC services" +msgstr "HBAC服务" + +msgid "HBAC services to add" +msgstr "待添加的HBAC服务" + +msgid "HBAC services to remove" +msgstr "待移除的HBAC服务" + +msgid "HIP record" +msgstr "HIP记录" + +msgid "HOTP Authentication Window" +msgstr "HOTP认证窗口" + +msgid "HOTP Synchronization Window" +msgstr "HOTP同步窗口" + +msgid "HTTP Error" +msgstr "HTTP错误" + +msgid "Hardware MAC address(es) on this host" +msgstr "主机硬件MAC地址" + +msgid "Hardware platform of the host (e.g. Lenovo T61)" +msgstr "主机硬件平台（例如：联想T61）" + +msgid "Help topic" +msgstr "帮助主题" + +msgid "Hide" +msgstr "隐藏" + +msgid "Hide details" +msgstr "隐藏细节" + +msgid "Hide details which rules are matched, not matched, or invalid" +msgstr "隐藏规则匹配，不匹配或无效的细节" + +msgid "History size" +msgstr "历史大小" + +msgid "Home directory" +msgstr "主目录" + +msgid "Home directory base" +msgstr "主目录" + +msgid "Horizontal Precision" +msgstr "水平精度" + +msgid "Host" +msgstr "主机" + +#, python-format +msgid "Host '%(host)s' not found" +msgstr "主机'%(host)s'没有找到" + +#, python-format +msgid "Host '%(hostname)s' does not have corresponding DNS A/AAAA record" +msgstr "主机'%(hostname)s'没有相配的DNS A/AAAA记录" + +msgid "Host Certificate" +msgstr "主机证书" + +msgid "Host Group" +msgstr "主机组" + +msgid "Host Group Settings" +msgstr "主机组设置" + +msgid "Host Groups" +msgstr "主机组" + +msgid "Host Groups allowed to create keytab" +msgstr "允许创建keytab的主机组" + +msgid "Host Groups allowed to retrieve keytab" +msgstr "允许检索keytab的主机组" + +msgid "Host Name" +msgstr "主机名" + +msgid "Host Settings" +msgstr "主机设置" + +msgid "Host category" +msgstr "主机类别" + +msgid "" +"Host category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "主机类别（该属性的语义是就近解读）" + +msgid "Host category the ACL applies to" +msgstr "ACL适用于主机类别" + +msgid "Host category the rule applies to" +msgstr "规则应用的主机类别" + +msgid "Host group rule" +msgstr "主机组规则" + +msgid "Host group rules" +msgstr "主机组规则" + +msgid "Host hardware platform (e.g. \"Lenovo T61\")" +msgstr "主机硬件平台 (e.g. \"Lenovo T61\")" + +#, c-format +msgid "Host is already joined.\n" +msgstr "主机已加入。\n" + +msgid "Host is not supported" +msgstr "主机不被支持" + +msgid "Host locality (e.g. \"Baltimore, MD\")" +msgstr "主机地点(如\"Baltimore, MD\")" + +msgid "Host location (e.g. \"Lab 2\")" +msgstr "主机位置(如\"Lab 2\")" + +msgid "Host name" +msgstr "主机名" + +msgid "Host operating system and version (e.g. \"Fedora 9\")" +msgstr "主机操作系统及版本(e.g. \"Fedora 9\")" + +msgid "Host unprovisioned" +msgstr "主机未分配" + +msgid "Host-based access control commands" +msgstr "基于主机访问控制命令" + +msgid "Host-group" +msgstr "主机组" + +msgid "" +"Hostgroups to whose hosts apply the ID View to. Please note that view is not " +"applied automatically to any hosts added to the hostgroup after running the " +"idview-apply command." +msgstr "" +"主机组的主机应用ID视图。请注意运行命令idview-apply后，视图并不会自动应用到主" +"机组中的主机中去。" + +msgid "Hostname" +msgstr "主机名" + +msgid "Hostname (FQDN)" +msgstr "主机名（FQDN）" + +msgid "Hostname of this server" +msgstr "该服务器的主机名" + +msgid "Hosts" +msgstr "主机" + +msgid "Hosts allowed to create keytab" +msgstr "允许创建keytab的主机" + +msgid "Hosts allowed to retrieve keytab" +msgstr "允许检索keytab的主机" + +msgid "Hosts or hostgroups that ID View could not be cleared from." +msgstr "ID视图不能被清除的主机或主机组。" + +msgid "Hosts or hostgroups that this ID View could not be applied to." +msgstr "不能应用该ID视图的主机或主机组。" + +msgid "Hosts that this ID View was applied to." +msgstr "应用过该ID视图的主机。" + +msgid "Hosts the view applies to" +msgstr "适用于主机的视图" + +msgid "Hosts to apply the ID View to" +msgstr "主机应用ID视图" + +msgid "How long should negative responses be cached" +msgstr "负面响应应该被缓存多久" + +msgid "ID Range" +msgstr "ID范围" + +msgid "ID Ranges" +msgstr "ID范围" + +msgid "ID View" +msgstr "ID视图" + +msgid "ID View Name" +msgstr "ID视图名称" + +msgid "ID View already applied" +msgstr "ID视图已应用" + +#, python-format +msgid "ID View applied to %i host." +msgstr "ID视图应用于%i主机。" + +#, python-format +msgid "ID View applied to %i hosts." +msgstr "ID视图应用于%i主机。" + +#, python-format +msgid "ID View cleared from %i host." +msgstr "从%i主机中清除ID视图。" + +#, python-format +msgid "ID View cleared from %i hosts." +msgstr "从%i主机中清除ID视图。" + +msgid "ID Views" +msgstr "ID视图" + +msgid "ID override" +msgstr "ID覆盖" + +msgid "ID overrides cannot be renamed" +msgstr "ID覆盖不能被重命名" + +msgid "" +"ID range for the trusted domain already exists, but it has a different type. " +"Please remove the old range manually, or do not enforce type via --range-" +"type option." +msgstr "" +"信任域的ID范围已存在，但它有一个不同类型。请手动删除旧的范围，或者通过--" +"range-type选项不强制类型。" + +msgid "ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local" +msgstr "ID范围类型，是ipa-ad-trust-posix，ipa-ad-trust，ipa-local中的一个" + +msgid "" +"ID range with the same name but different domain SID already exists. The ID " +"range for the new trusted domain must be created manually." +msgstr "同名但不同域SID的ID范围已存在。新信任域的ID范围必须手动创建。" + +msgid "IP Address" +msgstr "IP 地址" + +#, python-format +msgid "IP address %(ip)s is already assigned in domain %(domain)s." +msgstr "IP地址%(ip)s在域%(domain)s中已分配。" + +msgid "IP network to create reverse zone name from" +msgstr "IP网络创建反向区域名" + +msgid "IPA AD trust agents" +msgstr "IPA AD信任代理" + +msgid "IPA AD trust controllers" +msgstr "IPA AD信任控制器" + +msgid "IPA CA cannot be deleted" +msgstr "IPA CA不能被删除" + +msgid "IPA CA cannot be disabled" +msgstr "IPA CA不能被禁用" + +msgid "IPA CA renewal master" +msgstr "IPA CA更新主服务器" + +msgid "IPA CA servers" +msgstr "IPA CA服务器" + +msgid "IPA DNS records" +msgstr "IPA DNS记录" + +msgid "IPA DNS servers" +msgstr "IPA DNS服务器" + +msgid "IPA DNS version" +msgstr "IPA DNS版本" + +msgid "IPA DNSSec key master" +msgstr "IPA DNSSec密钥主机" + +msgid "IPA Error" +msgstr "IPA错误" + +msgid "IPA KRA servers" +msgstr "IPA KRA服务器" + +msgid "IPA Location" +msgstr "IPA位置" + +msgid "IPA Location description" +msgstr "IPA本地描述" + +msgid "IPA Locations" +msgstr "IPA位置" + +msgid "" +"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " +"the trusted domain is specified" +msgstr "" +"当信任域的SID被指定时，IPA范围类型必须是ipa-ad-trust或ipa-ad-trust-posix中的" +"一个" + +msgid "" +"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " +"SID of the trusted domain is not specified." +msgstr "" +"当信任域的SID没有被指定时，IPA范围类型必不能是ipa-ad-trust或ipa-ad-trust-" +"posix。" + +msgid "IPA Server" +msgstr "IPA服务器" + +msgid "IPA Server Role" +msgstr "IPA服务器角色" + +msgid "IPA Server Roles" +msgstr "IPA服务器角色" + +msgid "IPA Server to use" +msgstr "待使用的IPA服务器" + +msgid "IPA Servers" +msgstr "IPA服务器" + +#, python-format +msgid "" +"IPA does not manage the zone %(zone)s, please add records to your DNS server " +"manually" +msgstr "IPA没有管理区域%(zone)s，请手动在你的DNS服务器上添加记录" + +msgid "IPA location name" +msgstr "IPA位置名" + +msgid "IPA location records" +msgstr "IPA位置记录" + +#, python-format +msgid "" +"IPA master denied trust validation requests from AD DC %(count)d times. Most " +"likely AD DC contacted a replica that has no trust information replicated " +"yet. Additionally, please check that AD DNS is able to resolve %(records)s " +"SRV records to the correct IPA server." +msgstr "" +"IPA主服务器%(count)d次阻止来自AD DC的信任有效请求。最有可能是AD DC联系了一个" +"没有信任信息副本的副本。同时，请检查AD DNS能将%(records)s SRV记录解析到正确的" +"IPA服务器上。" + +msgid "IPA masters" +msgstr "IPA主服务器" + +#, c-format +msgid "IPA namingContext not found\n" +msgstr "IPA名称上下文没有找到\n" + +msgid "IPA object" +msgstr "IPA对象" + +msgid "IPA role name" +msgstr "IPA角色名" + +msgid "IPA server configured as DNSSec key master" +msgstr "IPA服务器配置为DNSSec密钥主机" + +msgid "IPA server domain cannot be deleted" +msgstr "IPA服务器域不能被删除" + +msgid "IPA server domain cannot be omitted" +msgstr "IPA服务器域不能被省略" + +msgid "IPA server hostname" +msgstr "IPA服务主机名" + +msgid "IPA server role name" +msgstr "IPA服务器角色名" + +msgid "IPA servers configured as AD trust agents" +msgstr "IPA服务器配置为AD信任代理" + +msgid "IPA servers configured as AD trust controllers" +msgstr "IPA服务器配置为AD信任控制器" + +msgid "IPA servers configured as certificate authority" +msgstr "IPA服务器配置为证书认证机构" + +msgid "IPA servers configured as key recovery agents" +msgstr "IPA服务器配置为密钥恢复代理" + +msgid "IPA trust" +msgstr "IPA信任" + +msgid "IPA unique ID" +msgstr "IPA唯一ID" + +msgid "IPSECKEY record" +msgstr "IPSECKEY记录" + +msgid "Identity" +msgstr "身份" + +msgid "Identity Settings" +msgstr "身份设置" + +msgid "If no CAs are specified, requests to the default CA are allowed." +msgstr "如果没有指定CAs，那么允许请求默认CA。" + +msgid "If the problem persists please contact the system administrator." +msgstr "如果问题仍然存在,请联系系统管理员。" + +msgid "Ignore check for last remaining CA or DNS server" +msgstr "不检查最后的CA或DNS服务器" + +msgid "Ignore compat plugin" +msgstr "忽略兼容插件" + +msgid "Ignore group attribute" +msgstr "忽略组属性" + +msgid "Ignore group object class" +msgstr "忽略组对象类" + +msgid "Ignore topology connectivity problems after removal" +msgstr "删除后忽略拓扑连通性问题" + +msgid "Ignore topology errors" +msgstr "忽略拓扑错误" + +msgid "Ignore user attribute" +msgstr "忽略用户属性" + +msgid "Ignore user object class" +msgstr "忽略用户对象类" + +#, python-format +msgid "Ignored %(src)s to %(dst)s" +msgstr "已忽略 %(src)s 到 %(dst)s" + +msgid "Ignored keys:" +msgstr "已忽略的键：" + +msgid "Ignoring these warnings and proceeding with removal" +msgstr "忽略这些警告并给予清除" + +msgid "Ignoring topology connectivity errors." +msgstr "忽略拓扑连通性错误。" + +msgid "Import a Certificate Profile." +msgstr "导入一个证书配置文件。" + +msgid "Import an entitlement certificate." +msgstr "导入一个权利证书。" + +msgid "Import automount files for a specific location." +msgstr "在一特定位置导入自动挂载文件。" + +msgid "Imported keys:" +msgstr "已导入的键：" + +msgid "Imported maps:" +msgstr "已导入的映射：" + +#, python-format +msgid "Imported profile \"%(value)s\"" +msgstr "已导入配置文件\"%(value)s\"" + +msgid "Include Disabled" +msgstr "包含禁用的" + +msgid "Include Enabled" +msgstr "包含启用的" + +msgid "Include all disabled IPA rules into test" +msgstr "在测试中包含所有禁用的IPA规则" + +msgid "Include all enabled IPA rules into test [default]" +msgstr "在测试中包含所有启用的IPA规则【默认】" + +msgid "Include in" +msgstr "包含" + +msgid "Included attributes" +msgstr "包含的属性" + +msgid "Inclusive" +msgstr "兼容的" + +msgid "Inclusive Regex" +msgstr "兼容的正则表达式" + +#, c-format +msgid "Incompatible options provided (-r and -P)\n" +msgstr "提供了不兼容的选项（-r和-P）\n" + +msgid "Indirect" +msgstr "间接的" + +msgid "Indirect Member HBAC service" +msgstr "间接成员HBAC服务" + +msgid "Indirect Member HBAC service group" +msgstr "间接成员HBAC服务组" + +msgid "Indirect Member groups" +msgstr "间接成员组" + +msgid "Indirect Member host-groups" +msgstr "间接成员主机组" + +msgid "Indirect Member hosts" +msgstr "间接成员主机" + +msgid "Indirect Member netgroups" +msgstr "间接成员网络组" + +msgid "Indirect Member of HBAC rule" +msgstr "间接HBAC规则成员" + +msgid "Indirect Member of Sudo rule" +msgstr "间接Sudo规则成员" + +msgid "Indirect Member of group" +msgstr "间接组成员" + +msgid "Indirect Member of host-group" +msgstr "间接主机组成员" + +msgid "Indirect Member of netgroup" +msgstr "间接网络组成员" + +msgid "Indirect Member of role" +msgstr "间接角色成员" + +msgid "Indirect Member of roles" +msgstr "间接角色成员" + +msgid "Indirect Member permissions" +msgstr "间接成员权限" + +msgid "Indirect Member users" +msgstr "间接成员用户" + +msgid "Indirect Membership" +msgstr "间接成员" + +msgid "Inherited from server configuration" +msgstr "继承了服务器配置" + +msgid "Initial counter for the HOTP token" +msgstr "HOTP令牌初始计数器" + +msgid "Initialize left node" +msgstr "左节点初始化" + +msgid "Initialize right node" +msgstr "右节点初始化" + +msgid "Initials" +msgstr "名字的首字母" + +msgid "Input data specified multiple times" +msgstr "多次指定输入数据" + +msgid "Input filename" +msgstr "输入文件名" + +msgid "Input form contains invalid or missing values." +msgstr "输入包含无效的或缺失的值。" + +#, python-format +msgid "Insufficient 'add' privilege for entry '%s'." +msgstr "对条目'%s'没有'add'权限。" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " +"'%s'." +msgstr "对条目'%s'的'krbLastPwdChange'属性没有'write'权限。" + +#, python-format +msgid "" +"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " +"'%s'." +msgstr "对条目'%s'的'userCertificate'属性没有'write'权限。" + +#, python-format +msgid "Insufficient access: %(info)s" +msgstr "访问受限：%(info)s" + +#, python-format +msgid "" +"Insufficient privilege to create a certificate with subject alt name '%s'." +msgstr "没有权限创建主题alt名为'%s'的证书。" + +msgid "Internal Error" +msgstr "内部错误" + +#, python-format +msgid "Invalid JSON-RPC request: %(error)s" +msgstr "无效的JSON-RPC请求: %(error)s" + +msgid "Invalid LDAP URI." +msgstr "无效的LDAP URI。" + +#, c-format +msgid "Invalid Service Principal Name\n" +msgstr "无效的服务主体名\n" + +msgid "Invalid credentials" +msgstr "无效的证书" + +msgid "Invalid format. Should be name=value" +msgstr "无效的格式。应该是“名称=值”" + +msgid "Invalid number of parts!" +msgstr "无效的部分！" + +#, python-format +msgid "Invalid or unsupported type. Allowed values are: %s" +msgstr "无效的或者不支持的类型。允许的值是：%s" + +#, python-format +msgid "Invalid or unsupported vault public key: %s" +msgstr "无效的或不支持的库公钥：%s" + +msgid "Invalid vault type" +msgstr "无效的库类型" + +msgid "Is zone active?" +msgstr "区域活跃吗？" + +msgid "Issue" +msgstr "发布" + +msgid "Issued By" +msgstr "发布方" + +msgid "Issued On" +msgstr "签发日期" + +msgid "Issued To" +msgstr "颁发给" + +msgid "Issued on from" +msgstr "发布于" + +msgid "Issued on to" +msgstr "发布到" + +msgid "Issuer" +msgstr "发行人" + +msgid "Issuer DN" +msgstr "证书颁发机构名字" + +msgid "Issuer Distinguished Name" +msgstr "发行人专有名称" + +msgid "Issuing CA" +msgstr "发行CA" + +msgid "It is used only for setting the SOA MNAME attribute." +msgstr "它仅被用来设置SOA MNAME属性。" + +msgid "Job Title" +msgstr "职称" + +msgid "Join an IPA domain" +msgstr "加入一个IPA域" + +msgid "KEY Algorithm" +msgstr "KEY算法" + +msgid "KEY Flags" +msgstr "KEY标记" + +msgid "KEY Protocol" +msgstr "KEY协议" + +msgid "KEY Public Key" +msgstr "KEY公钥" + +msgid "KEY record" +msgstr "KEY记录" + +msgid "KRA service is not enabled" +msgstr "KRA服务没有启用" + +msgid "KX Exchanger" +msgstr "KX交换器" + +msgid "KX Preference" +msgstr "KX优先权" + +msgid "KX record" +msgstr "KX记录" + +#, c-format +msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n" +msgstr "没有找到Kerberos凭证缓存。你有Kerberos票据吗？\n" + +msgid "Kerberos Key" +msgstr "Kerberos密钥" + +msgid "Kerberos Key Not Present" +msgstr "没有找到Kerberos密钥" + +msgid "Kerberos Key Present, Host Provisioned" +msgstr "找到Kerberos密钥，主机分配" + +msgid "Kerberos Key Present, Service Provisioned" +msgstr "找到Kerberos密钥，服务分配" + +msgid "Kerberos Service Principal Name" +msgstr "Kerberos服务主体名" + +msgid "Kerberos Ticket Policy" +msgstr "Kerberos票据策略" + +#, c-format +msgid "" +"Kerberos User Principal not found. Do you have a valid Credential Cache?\n" +msgstr "没有找到Kerberos用户主体。你有有效的凭证缓存吗？\n" + +#, c-format +msgid "Kerberos context initialization failed\n" +msgstr "Kerberos文本初始化失败\n" + +#, c-format +msgid "Kerberos context initialization failed: %1$s (%2$d)\n" +msgstr "Kerberos文本初始化失败：%1$s (%2$d)\n" + +#, python-format +msgid "Kerberos error: %(major)s/%(minor)s" +msgstr "Kerberos 错误： %(major)s/%(minor)s" + +msgid "Kerberos keys available" +msgstr "Kerberos密码可用" + +msgid "Kerberos principal" +msgstr "Kerberos主体" + +#, python-format +msgid "" +"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." +msgstr "Kerberos主体%s已存在。使用'ipa user-mod'来手动设置它。" + +msgid "Kerberos principal expiration" +msgstr "Kerberos主体过期" + +msgid "Kerberos principal name for this host" +msgstr "该主机的Kerberos主体名" + +msgid "Key" +msgstr "键" + +msgid "Key Compromise" +msgstr "密钥泄露" + +msgid "Key Tag" +msgstr "键标记" + +msgid "Keytab File Name" +msgstr "Keytab文件名" + +#, c-format +msgid "Keytab successfully retrieved and stored in: %s\n" +msgstr "Keytab检索成功并将其存储在：%s\n" + +msgid "LDAP URI" +msgstr "LDAP URI" + +msgid "LDAP password" +msgstr "LDAP密码" + +msgid "LDAP password (if not using Kerberos)" +msgstr "LDAP密码（如果没有使用Kerberos）" + +msgid "LDAP schema" +msgstr "LDAP模式" + +msgid "" +"LDAP search scope for users and groups: base, onelevel, or subtree. Defaults " +"to onelevel" +msgstr "用户和用户组的LDAP范围查找：基，一级，或子树。默认是一级" + +msgid "LDAP suffix to be managed" +msgstr "待管理的LDAP后缀" + +msgid "LDAP timeout" +msgstr "LDAP超时" + +msgid "LOC Altitude" +msgstr "LOC高度" + +msgid "LOC Direction Latitude" +msgstr "LOC纬度方向" + +msgid "LOC Direction Longitude" +msgstr "LOC经度方向" + +msgid "LOC Horizontal Precision" +msgstr "LOC水平精度" + +msgid "LOC Minutes Latitude" +msgstr "LOC分钟纬度" + +msgid "LOC Minutes Longitude" +msgstr "LOC分钟经度" + +msgid "LOC Seconds Latitude" +msgstr "LOC秒纬度" + +msgid "LOC Seconds Longitude" +msgstr "LOC秒经度" + +msgid "LOC Size" +msgstr "LOC大小" + +msgid "LOC Vertical Precision" +msgstr "LOC垂直精度" + +msgid "LOC record" +msgstr "LOC记录" + +msgid "Label" +msgstr "级别" + +msgid "Labels" +msgstr "分类" + +msgid "Last" +msgstr "最后" + +msgid "Last date/time the token can be used" +msgstr "令牌被最后一次使用" + +msgid "Last failed authentication" +msgstr "上一次认证失败" + +msgid "Last name" +msgstr "姓" + +msgid "Last successful authentication" +msgstr "上一次认证成功" + +msgid "Leading and trailing spaces are not allowed" +msgstr "开头和结尾空格是不允许的" + +msgid "Left node" +msgstr "左节点" + +msgid "Left replication node - an IPA server" +msgstr "左复制节点-IPA服务器" + +msgid "Legal LDAP filter (e.g. ou=Engineering)" +msgstr "合法的LDAP过滤（例如：ou=Engineering）" + +msgid "Length of TOTP token code validity" +msgstr "TOTP令牌码有效长度" + +msgid "Level" +msgstr "级别" + +msgid "List all service vaults" +msgstr "所有服务库列表" + +msgid "List all user vaults" +msgstr "所有用户库列表" + +msgid "List of IPA masters configured as DNS servers" +msgstr "IPA主服务器配置为DNS服务器列表" + +msgid "List of all IPA masters" +msgstr "所有IPA主服务器列表" + +msgid "List of deletions that failed" +msgstr "删除失败的列表" + +msgid "List of enabled roles" +msgstr "已启用角色列表" + +msgid "List of servers which advertise the given location" +msgstr "公布给出位置的服务器列表" + +msgid "" +"List of trust domains successfully refreshed. Use trustdomain-find command " +"to list them." +msgstr "信任域列表更新成功。使用trustdomain-find命令来列举它们。" + +msgid "Lists of objects migrated; categorized by type." +msgstr "对象移植列表；按类型分类。" + +msgid "Lists of objects that could not be migrated; categorized by type." +msgstr "不能移植的对象列表；按类型分类。" + +msgid "Load CA certificate of LDAP server from FILE" +msgstr "从文件加载LDAP服务器的CA证书" + +msgid "Local domain" +msgstr "本地域" + +msgid "Locality" +msgstr "位置" + +msgid "Location" +msgstr "位置" + +msgid "Location name" +msgstr "位置名" + +msgid "Location of the ACI" +msgstr "ACI的位置" + +msgid "Lockout duration" +msgstr "锁定时间" + +msgid "Logged In As" +msgstr "登录" + +msgid "Login shell" +msgstr "登录shell" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the URI " +"with the lowest-numbered priority they can reach." +msgstr "" +"数字越低代表优先级越高。客户端尝试用它们可以得到的最低数字优先级区访问URI。" + +msgid "" +"Lower number means higher priority. Clients will attempt to contact the " +"server with the lowest-numbered priority they can reach." +msgstr "" +"数字越低代表优先级越高。客户端尝试用它们可以得到的最低数字优先级区访问服务" +"器。" + +msgid "MAC address" +msgstr "MAC地址" + +msgid "MX Exchanger" +msgstr "MX交换器" + +msgid "MX Preference" +msgstr "MX优先权" + +msgid "MX record" +msgstr "MX记录" + +msgid "Mailing Address" +msgstr "邮件地址" + +#, python-format +msgid "Malformed principal: '%(value)s'" +msgstr "有缺陷的主体：'%(value)s'" + +msgid "Manage password policy for specific group" +msgstr "管理指定组的密码策略" + +msgid "Manage ticket policy for specific user" +msgstr "管理指定用户的票据策略" + +msgid "Managed LDAP suffix DN" +msgstr "已管理的LDAP后缀DN" + +msgid "Managed suffix" +msgstr "管理的后缀" + +msgid "Managed suffixes" +msgstr "已管理的后缀" + +#, python-brace-format +msgid "Managed topology requires minimal domain level ${domainlevel}" +msgstr "管理拓扑需要最小的域级别${domainlevel}" + +msgid "Manager" +msgstr "管理者" + +msgid "Managing" +msgstr "管理" + +msgid "Map" +msgstr "映射" + +msgid "Map Type" +msgstr "映射类型" + +msgid "Mark the token as disabled (default: false)" +msgstr "令牌标记为禁用（默认：错误的）" + +msgid "Master file" +msgstr "主文件" + +msgid "Matched" +msgstr "匹配" + +msgid "Matched rules" +msgstr "已匹配规则" + +msgid "Matching Type" +msgstr "匹配类型" + +msgid "Max domain level" +msgstr "最高域级别" + +msgid "Max failures" +msgstr "最大失败次数" + +msgid "Max life" +msgstr "最长存活期" + +msgid "Max lifetime (days)" +msgstr "最大生存期（天）" + +msgid "Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)" +msgstr "最大的时间（秒）搜索（-1或0表示无限制）" + +msgid "" +"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)" +msgstr "最大的时间（秒）搜索（>0，或-1表示无限制）" + +msgid "Maximum domain level" +msgstr "最高域级别" + +msgid "Maximum number of certs returned" +msgstr "返回的最大证书数" + +msgid "Maximum number of entries returned" +msgstr "返回的最大条目数" + +msgid "Maximum number of entries returned (0 is unlimited)" +msgstr "返回的最大条目数（0代表无限制）" + +msgid "Maximum number of records to search (-1 is unlimited)" +msgstr "最大数量的搜索记录（-1表示无限制）" + +msgid "Maximum number of records to search (-1 or 0 is unlimited)" +msgstr "最大数量的搜索记录（-1或0表示无限制）" + +msgid "Maximum number of rules to process when no --rules is specified" +msgstr "当没有使用--rules来指定规则时，能处理的最大规则数" + +msgid "Maximum password lifetime (in days)" +msgstr "最大密码生存期（天）" + +msgid "Maximum serial number" +msgstr "最大序列号" + +msgid "Maximum ticket life (seconds)" +msgstr "票据最长存活期（秒）" + +msgid "Maximum username length" +msgstr "最大用户名长度" + +#, python-brace-format +msgid "Maximum value is ${value}" +msgstr "最大值是${value}" + +msgid "May not be empty" +msgstr "可能不是闲置的" + +msgid "Member Group" +msgstr "成员组" + +msgid "Member HBAC service" +msgstr "成员HBAC服务" + +msgid "Member HBAC service groups" +msgstr "成员HBAC服务组" + +msgid "Member Host" +msgstr "成员主机" + +msgid "Member Hostgroup" +msgstr "成员主机组" + +msgid "Member Sudo commands" +msgstr "成员Sudo命令" + +msgid "Member User" +msgstr "成员用户" + +msgid "Member groups" +msgstr "成员组" + +msgid "Member host-groups" +msgstr "主机组成员" + +msgid "Member hosts" +msgstr "成员主机" + +msgid "Member netgroups" +msgstr "成员网络组" + +msgid "Member of" +msgstr "隶属于" + +msgid "Member of HBAC rule" +msgstr "HBAC规则的成员" + +msgid "Member of HBAC service groups" +msgstr "HBAC服务组成员" + +msgid "Member of Sudo rule" +msgstr "Sudo规则的成员" + +msgid "Member of a group" +msgstr "组成员" + +msgid "Member of group" +msgstr "组成员" + +msgid "Member of groups" +msgstr "组成员" + +msgid "Member of host-groups" +msgstr "主机组成员" + +msgid "Member of netgroups" +msgstr "网络组成员" + +msgid "Member principals" +msgstr "成员主体" + +msgid "Member service groups" +msgstr "成员服务组" + +msgid "Member services" +msgstr "成员服务" + +msgid "Member users" +msgstr "成员用户" + +msgid "Members of a trusted domain in DOM\\name or name@domain form" +msgstr "信任域的成员是“DOM\\名称”或“名称@域名”格式" + +msgid "Members that could not be added" +msgstr "不能被添加的成员" + +msgid "Members that could not be removed" +msgstr "不能被移除的成员" + +msgid "Method name" +msgstr "方法名" + +msgid "Method of" +msgstr "方法" + +msgid "Migrate users and groups from DS to IPA." +msgstr "将DS中的用户和用户组移植到IPA。" + +msgid "" +"Migration mode is disabled.\n" +"Use 'ipa config-mod --enable-migration=TRUE' to enable it." +msgstr "" +"迁移模式是禁用的。\n" +"使用'ipa config-mod --enable-migration=TRUE'来启用它。" + +msgid "Migration of LDAP search reference is not supported." +msgstr "LDAP搜索帮助移植不支持。" + +msgid "Min domain level" +msgstr "最低域级别" + +msgid "Min length" +msgstr "最小长度" + +msgid "Min lifetime (hours)" +msgstr "最小生存期（小时）" + +msgid "Minimum domain level" +msgstr "最低域级别" + +msgid "Minimum length of password" +msgstr "最短密码长度" + +msgid "Minimum number of character classes" +msgstr "最小字符类数量" + +msgid "Minimum password lifetime (in hours)" +msgstr "最小密码生存期（小时）" + +msgid "Minimum serial number" +msgstr "最小序列号" + +#, python-brace-format +msgid "Minimum value is ${value}" +msgstr "最小值是${value}" + +msgid "Minutes Latitude" +msgstr "分钟纬度" + +msgid "Minutes Longitude" +msgstr "分钟经度" + +msgid "Misc. Information" +msgstr "杂项信息" + +msgid "Missing new vault public key" +msgstr "缺少新的库公钥" + +#, python-format +msgid "Missing or invalid HTTP Referer, %(referer)s" +msgstr "丢失或者无效的 HTTP Referer, %(referer)s" + +#, c-format +msgid "Missing reply control list!\n" +msgstr "缺少应答控制列表！\n" + +#, c-format +msgid "Missing reply control!\n" +msgstr "缺少应答控制！\n" + +msgid "Missing values: " +msgstr "缺失值：" + +msgid "Missing vault private key" +msgstr "缺少库私钥" + +msgid "Missing vault public key" +msgstr "缺少库公钥" + +msgid "Mobile Telephone Number" +msgstr "移动电话号码" + +msgid "Model" +msgstr "模式" + +msgid "Modified" +msgstr "已修改" + +#, python-format +msgid "Modified \"%(value)s\" trust configuration" +msgstr "已修改\"%(value)s\"信任配置" + +#, python-format +msgid "Modified ACI \"%(value)s\"" +msgstr "已修改ACI\"%(value)s\"" + +#, python-format +msgid "Modified CA \"%(value)s\"" +msgstr "已修改CA\"%(value)s\"" + +#, python-format +msgid "Modified CA ACL \"%(value)s\"" +msgstr "已修改CA ACL\"%(value)s\"" + +#, python-format +msgid "Modified Certificate Profile \"%(value)s\"" +msgstr "已修改配置文件\"%(value)s\"" + +#, python-format +msgid "Modified DNS server \"%(value)s\"" +msgstr "已修改DNS服务器\"%(value)s\"" + +#, python-format +msgid "Modified HBAC rule \"%(value)s\"" +msgstr "已修改HBAC规则\"%(value)s\"" + +#, python-format +msgid "Modified HBAC service \"%(value)s\"" +msgstr "已修改HBAC服务\"%(value)s\"" + +#, python-format +msgid "Modified HBAC service group \"%(value)s\"" +msgstr "已修改HBAC服务组\"%(value)s\"" + +#, python-format +msgid "Modified ID range \"%(value)s\"" +msgstr "已修改ID范围\"%(value)s\"" + +#, python-format +msgid "Modified IPA location \"%(value)s\"" +msgstr "已修改IPA位置\"%(value)s\"" + +#, python-format +msgid "Modified IPA server \"%(value)s\"" +msgstr "已修改IPA服务器\"%(value)s\"" + +#, python-format +msgid "Modified OTP token \"%(value)s\"" +msgstr "已修改OTP令牌\"%(value)s\"" + +#, python-format +msgid "Modified RADIUS proxy server \"%(value)s\"" +msgstr "已修改RADIUS代理服务器\"%(value)s\"" + +#, python-format +msgid "Modified SELinux User Map \"%(value)s\"" +msgstr "已修改SELinux用户映射\"%(value)s\"" + +#, python-format +msgid "Modified Sudo Command \"%(value)s\"" +msgstr "已修改Sudo命令\"%(value)s\"" + +#, python-format +msgid "Modified Sudo Command Group \"%(value)s\"" +msgstr "已修改Sudo命令组\"%(value)s\"" + +#, python-format +msgid "Modified Sudo Rule \"%(value)s\"" +msgstr "已修改Sudo规则\"%(value)s\"" + +#, python-format +msgid "Modified an Group ID override \"%(value)s\"" +msgstr "已修改一个组ID覆盖\"%(value)s\"" + +#, python-format +msgid "Modified an ID View \"%(value)s\"" +msgstr "已修改一个ID视图\"%(value)s\"" + +#, python-format +msgid "Modified an ID override \"%(value)s\"" +msgstr "已修改一个ID覆盖\"%(value)s\"" + +#, python-format +msgid "Modified an User ID override \"%(value)s\"" +msgstr "已修改一个用户ID覆盖\"%(value)s\"" + +#, python-format +msgid "Modified automember rule \"%(value)s\"" +msgstr "已修改自动成员规则\"%(value)s\"" + +#, python-format +msgid "Modified automount key \"%(value)s\"" +msgstr "已修改自动挂载键\"%(value)s\"" + +#, python-format +msgid "Modified automount map \"%(value)s\"" +msgstr "已修改自动挂载映射\"%(value)s\"" + +#, python-format +msgid "Modified delegation \"%(value)s\"" +msgstr "已修改授权\"%(value)s\"" + +#, python-format +msgid "Modified group \"%(value)s\"" +msgstr "已修改组\"%(value)s\"" + +#, python-format +msgid "Modified host \"%(value)s\"" +msgstr "已修改主机 \"%(value)s\"" + +#, python-format +msgid "Modified hostgroup \"%(value)s\"" +msgstr "已修改主机组\"%(value)s\"" + +#, python-format +msgid "Modified netgroup \"%(value)s\"" +msgstr "已修改网络组\"%(value)s\"" + +#, python-format +msgid "Modified permission \"%(value)s\"" +msgstr "已修改权限\"%(value)s\"" + +#, python-format +msgid "Modified privilege \"%(value)s\"" +msgstr "已修改特权\"%(value)s\"" + +#, python-format +msgid "Modified role \"%(value)s\"" +msgstr "已修改角色\"%(value)s\"" + +#, python-format +msgid "Modified segment \"%(value)s\"" +msgstr "已修改段\"%(value)s\"" + +#, python-format +msgid "Modified selfservice \"%(value)s\"" +msgstr "已修改自助服务\"%(value)s\"" + +#, python-format +msgid "Modified service \"%(value)s\"" +msgstr "已修改服务\"%(value)s\"" + +#, python-format +msgid "Modified stage user \"%(value)s\"" +msgstr "已修改计划用户\"%(value)s\"" + +#, python-format +msgid "Modified topology suffix \"%(value)s\"" +msgstr "已修改拓扑后缀\"%(value)s\"" + +#, python-format +msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" +msgstr "已修改信任\"%(value)s\"（改变将在60s内生效）" + +#, python-format +msgid "Modified user \"%(value)s\"" +msgstr "已修改用户\"%(value)s\"" + +#, python-format +msgid "Modified vault \"%(value)s\"" +msgstr "已修改库\"%(value)s\"" + +msgid "Modified: key not set" +msgstr "已修改：密钥没有设置" + +#, python-format +msgid "Modify %(name)s '%(value)s'?" +msgstr "修改 %(name)s '%(value)s'？" + +msgid "Modify ACI." +msgstr "修改ACI。" + +msgid "Modify CA configuration." +msgstr "修改CA配置。" + +msgid "Modify Certificate Profile configuration." +msgstr "修改证书配置文件配置。" + +msgid "Modify DNS forward zone." +msgstr "修改DNS正向区。" + +msgid "Modify DNS server configuration" +msgstr "修改DNS服务器配置" + +msgid "Modify DNS zone (SOA record)." +msgstr "修改DNS区域（SOA记录）。" + +msgid "Modify ID range." +msgstr "修改ID范围。" + +msgid "Modify Kerberos ticket policy." +msgstr "修改Kerberos票据策略。" + +msgid "Modify OTP configuration options." +msgstr "修改OTP配置选项。" + +msgid "Modify Sudo Command Group." +msgstr "修改Sudo命令组。" + +msgid "Modify Sudo Command." +msgstr "修改Sudo命令。" + +msgid "Modify Sudo Rule." +msgstr "修改Sudo规则。" + +msgid "Modify a CA ACL." +msgstr "修改一个CA ACL。" + +msgid "Modify a DNS resource record." +msgstr "修改DNS资源记录。" + +msgid "Modify a OTP token." +msgstr "修改一个OTP令牌。" + +msgid "Modify a RADIUS proxy server." +msgstr "修改一个RADIUS代理服务器。" + +msgid "Modify a SELinux User Map." +msgstr "修改一个SELinux用户映射。" + +msgid "Modify a delegation." +msgstr "修改一个授权。" + +msgid "Modify a group password policy." +msgstr "修改一个组密码策略。" + +msgid "Modify a group." +msgstr "修改一个组。" + +msgid "Modify a hostgroup." +msgstr "修改一个主机组。" + +msgid "Modify a netgroup." +msgstr "修改一个网络组。" + +msgid "Modify a permission." +msgstr "修改一个权限。" + +msgid "Modify a privilege." +msgstr "修改一个特权。" + +msgid "Modify a role." +msgstr "修改一个角色。" + +msgid "Modify a segment." +msgstr "修改一个段。" + +msgid "Modify a self-service permission." +msgstr "修改一个自助服务权限。" + +msgid "Modify a stage user." +msgstr "修改一个计划用户。" + +msgid "Modify a topology suffix." +msgstr "修改一个拓扑后缀。" + +msgid "Modify a user." +msgstr "修改一个用户。" + +msgid "Modify a vault." +msgstr "修改一个库。" + +msgid "Modify an Group ID override." +msgstr "修改一个组ID覆盖。" + +msgid "Modify an HBAC rule." +msgstr "修改一个HBAC规则。" + +msgid "Modify an HBAC service group." +msgstr "修改一个HBAC服务组。" + +msgid "Modify an HBAC service." +msgstr "修改一个HBAC服务。" + +msgid "Modify an ID View." +msgstr "修改一个ID视图。" + +msgid "Modify an ID override." +msgstr "修改一个ID覆盖。" + +msgid "Modify an User ID override." +msgstr "修改一个用户ID覆盖。" + +msgid "Modify an automember rule." +msgstr "修改一个自动成员规则。" + +msgid "Modify an automount key." +msgstr "修改一个自动挂载键。" + +msgid "Modify an automount map." +msgstr "修改一个自动挂载映射。" + +msgid "Modify an existing IPA service." +msgstr "修改一个已存在的IPA服务。" + +msgid "Modify configuration options." +msgstr "修改配置选项" + +msgid "Modify global DNS configuration." +msgstr "修改全局DNS配置。" + +msgid "Modify global trust configuration." +msgstr "修改全局信任配置。" + +msgid "Modify information about a host." +msgstr "修改主机信息" + +msgid "Modify information about an IPA location." +msgstr "修改一个IPA位置信息。" + +msgid "Modify information about an IPA server." +msgstr "修改一个IPA服务器信息。" + +msgid "Modify realm domains." +msgstr "修改realm域。" + +msgid "Modify trustdomain of the trust" +msgstr "修改信任的信任域" + +#, python-format +msgid "" +"More than one entry with key %(key)s found, use --info to select specific " +"entry." +msgstr "找到不止一个拥有键%(key)s的条目，使用--info来选择指定条目。" + +msgid "Mount information" +msgstr "挂载信息" + +msgid "Mount point" +msgstr "挂载点" + +msgid "Move deleted user into staged area" +msgstr "将已删除用户移植到计划区域" + +msgid "Multi-value" +msgstr "多值" + +msgid "Must be a decimal number" +msgstr "必须是一个小数" + +msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" +msgstr "必须是一个UTC时间值（例如：\"2014-01-20 17:58:01Z\"）" + +msgid "Must be an integer" +msgstr "必须是一个整数" + +msgid "NAPTR Flags" +msgstr "NAPTR标记" + +msgid "NAPTR Order" +msgstr "NAPTR规则" + +msgid "NAPTR Preference" +msgstr "NAPTR优先权" + +msgid "NAPTR Regular Expression" +msgstr "NAPTR正则表达式" + +msgid "NAPTR Replacement" +msgstr "NAPTR替换" + +msgid "NAPTR Service" +msgstr "NAPTR服务" + +msgid "NAPTR record" +msgstr "NAPTR记录" + +msgid "NIS domain name" +msgstr "NIS域名" + +msgid "NONE value cannot be combined with other PAC types" +msgstr "NONE值不能与其他PAC类型相结合" + +msgid "NS Hostname" +msgstr "NS主机名" + +msgid "NS record" +msgstr "NS记录" + +#, python-format +msgid "" +"NS record is not allowed to coexist with an %(type)s record except when " +"located in a zone root record (RFC 2181, section 6.1)" +msgstr "" +"NS记录是不能和一个%(type)s记录共存的，除非它位于根区域记录（RFC 2181，第6." +"节）" + +msgid "NS record(s) can be edited in zone apex - '@'. " +msgstr "NS记录可以在带'@'的区域被编辑。" + +msgid "NSEC Next Domain Name" +msgstr "NSEC下一个域名" + +msgid "NSEC Type Map" +msgstr "NSEC类型映射" + +msgid "NSEC record" +msgstr "NSEC记录" + +msgid "NSEC3 record" +msgstr "NSEC3记录" + +msgid "NSEC3PARAM record" +msgstr "NSEC3PARAM记录" + +msgid "" +"NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt" +msgstr "NSEC3PARAM区记录格式：散列算法 标记 迭代 盐值" + +msgid "Name" +msgstr "名称" + +msgid "Name of command to export" +msgstr "导出命令的名称" + +msgid "Name of host-group" +msgstr "主机组名称" + +msgid "Name of issuing CA" +msgstr "签发的CA名称" + +msgid "Name of method to export" +msgstr "导出方法的名称" + +msgid "Name of object to export" +msgstr "导出对象的名称" + +msgid "Name of parent automount map (default: auto.master)." +msgstr "父自动挂载映射名（默认：auto.master）。" + +msgid "Name of the trusted domain" +msgstr "信任域的名称" + +#, python-format +msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" +msgstr "命名服务器'%(host)s'没有相配的DNS A/AAAA记录" + +msgid "Nameserver for reverse zone cannot be a relative DNS name" +msgstr "命名服务器的反向区域不能是一个相对的DNS名" + +msgid "" +"Neither --del-all nor options to delete a specific record provided.\n" +"Command help may be consulted for all supported record types." +msgstr "" +"没有提供--del-all或者选项来删除一个特定的记录。\n" +"可以使用命令帮助来查询所有支持的记录类型。" + +msgid "Nested Methods to execute" +msgstr "以嵌套的方法来执行" + +msgid "NetBIOS name" +msgstr "NetBIOS名称" + +msgid "Netgroup" +msgstr "网络组" + +msgid "Netgroup Settings" +msgstr "网络组设置" + +msgid "Netgroup description" +msgstr "网络组描述" + +msgid "Netgroup name" +msgstr "网络组名称" + +msgid "Netgroups" +msgstr "网络组" + +msgid "Network Services" +msgstr "网络服务" + +msgid "New ACI name" +msgstr "新的ACI名" + +msgid "New Certificate" +msgstr "新证书" + +msgid "New Password" +msgstr "新密码" + +msgid "New Principal Password" +msgstr "新的主体密码" + +msgid "New Test" +msgstr "新测试" + +msgid "New kerberos principal alias" +msgstr "新的kerberos主体别名" + +msgid "New mount information" +msgstr "新的挂载信息" + +msgid "New password is required" +msgstr "需要新密码" + +msgid "New public key specified multiple times" +msgstr "多次指定新公钥" + +msgid "New vault password" +msgstr "新的库密码" + +msgid "New: key not set" +msgstr "新的：密钥没有设置" + +msgid "New: key set" +msgstr "新的：密钥已设置" + +msgid "Next" +msgstr "下一个" + +msgid "Next Domain Name" +msgstr "下一个域名" + +msgid "No A, AAAA, SSHFP or PTR records found." +msgstr "没有找到A，AAAA，SSHFP和PTR记录。" + +msgid "No Common Name was found in subject of request." +msgstr "在请求的主题中找不到通用名。" + +#, python-format +msgid "" +"No DNS servers in IPA location %(location)s. Without DNS servers location is " +"not working as expected." +msgstr "" +"在IPA位置%(location)s没有DNS服务器。没有DNS服务器位置是不会按预期工作的。" + +msgid "" +"No DNSSEC key master is installed. DNSSEC zone signing will not work until " +"the DNSSEC key master is installed." +msgstr "没有安装DNSSEC密钥主机。DNSSEC区域签名不会工作直到安装DNSSEC密钥主机。" + +msgid "No Valid Certificate" +msgstr "无效的证书" + +msgid "No archived data." +msgstr "没有归档数据。" + +msgid "No credentials cache found" +msgstr "没有找到凭证缓存" + +msgid "No default (fallback) group set" +msgstr "没有设置（回滚）组" + +msgid "No entries." +msgstr "没有条目。" + +msgid "No file to read" +msgstr "无文件可读" + +msgid "No free YubiKey slot!" +msgstr "没有空闲的YubiKey槽！" + +#, c-format +msgid "No keys accepted by KDC\n" +msgstr "没有KDC可接受的密钥\n" + +msgid "No matching entries found" +msgstr "发现了不匹配的条目" + +msgid "No option to delete specific record provided." +msgstr "没有提供选项来删除具体的记录。" + +msgid "No option to modify specific record provided." +msgstr "没有提供选项来修改具体的记录。" + +#, c-format +msgid "No permission to join this host to the IPA domain.\n" +msgstr "没有权限将该主机加入到IPA域。\n" + +msgid "No private group" +msgstr "没有私有组" + +msgid "No response" +msgstr "没有响应" + +msgid "No such attribute on this entry" +msgstr "该条目没有这样的属性" + +msgid "No such virtual command" +msgstr "没有这样的虚拟命令" + +#, c-format +msgid "No system preferred enctypes ?!\n" +msgstr "没有系统首选的加密类型？！\n" + +msgid "No trusted domain is not configured" +msgstr "信任域已配置" + +#, c-format +msgid "No values for %s" +msgstr "%s没有值" + +msgid "No wait" +msgstr "无需等待" + +#, c-format +msgid "No write permissions on keytab file '%s'\n" +msgstr "在keytab文件%s中没有写权限\n" + +#, python-format +msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" +msgstr "从CA REST API的Non-2xx响应：%(status)d. %(explanation)s" + +msgid "Non-Active Directory domain" +msgstr "非活动目录域" + +msgid "Non-POSIX" +msgstr "非POSIX" + +msgid "Non-existent or invalid rules" +msgstr "不存在或无效的规则" + +msgid "" +"Non-transitive external trust to a domain in another Active Directory forest" +msgstr "不传递外部信任到另一个活动目录森林的域中" + +msgid "Nonce" +msgstr "临时的" + +msgid "Not After" +msgstr "不晚于" + +msgid "Not Before" +msgstr "不早于" + +msgid "Not a managed group" +msgstr "不是一个管理组" + +msgid "Not a valid IP address" +msgstr "不是一个有效的IP地址" + +msgid "Not a valid IPv4 address" +msgstr "不是一个有效的IPv4地址" + +msgid "Not a valid IPv6 address" +msgstr "不是一个有效的IPv6地址" + +msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" +msgstr "不是一个有效的网络地址（例如：2001:db8::/64, 192.0.2.0/24）" + +msgid "Not allowed on non-leaf entry" +msgstr "在非叶子条目上是不允许的" + +msgid "Not enough arguments specified to perform trust setup" +msgstr "执行信任设置时没有指定足够的参数" + +msgid "Not matched rules" +msgstr "不匹配规则" + +msgid "Not registered yet" +msgstr "尚未注册" + +msgid "Note" +msgstr "概述" + +msgid "Number of IDs in the range" +msgstr "该范围的ID数" + +msgid "Number of conditions added" +msgstr "已添加的条件数" + +msgid "Number of conditions removed" +msgstr "已移除的条件数" + +msgid "Number of days's notice of impending password expiration" +msgstr "密码即将过期通知天数" + +msgid "Number of digits each token code will have" +msgstr "每个令牌码拥有的数字个数" + +msgid "Number of entries returned" +msgstr "返回的条目数" + +msgid "Number of hosts that had a ID View was unset:" +msgstr "有ID视图未被设置的主机数量：" + +msgid "Number of hosts the ID View was applied to:" +msgstr "应用过该ID视图的主机数量：" + +msgid "Number of members added" +msgstr "已添加的成员数" + +msgid "Number of members removed" +msgstr "已移除成员数" + +msgid "Number of owners added" +msgstr "已添加的所有者数" + +msgid "Number of owners removed" +msgstr "待移除的所有者数" + +msgid "Number of permissions added" +msgstr "已添加权限数" + +msgid "Number of permissions removed" +msgstr "已移除权限数" + +msgid "Number of plugins loaded" +msgstr "已加载插件数" + +msgid "Number of privileges added" +msgstr "已添加特权数" + +msgid "Number of privileges removed" +msgstr "已移除权限数" + +msgid "" +"Number of seconds outbound LDAP operations waits for a response from the " +"remote replica before timing out and failing" +msgstr "在超时和失败前LDAP操作从远程复制服务器等待回应的用去的秒数" + +msgid "Number of variables returned (<= total)" +msgstr "返回变量数（<= total）" + +msgid "OTP" +msgstr "OTP" + +msgid "OTP Configuration" +msgstr "OTP配置" + +msgid "OTP Token" +msgstr "OTP令牌" + +msgid "OTP Token Settings" +msgstr "OTP令牌设置" + +msgid "OTP Tokens" +msgstr "OTP令牌" + +msgid "OTP configuration options" +msgstr "OTP配置选项" + +msgid "OTP set" +msgstr "OTP设置" + +msgid "OTP token" +msgstr "OTP令牌" + +msgid "OTP tokens" +msgstr "OTP令牌" + +msgid "Objectclasses to be ignored for group entries in DS" +msgstr "在DS中被用户组条目所忽略的对象类" + +msgid "Objectclasses to be ignored for user entries in DS" +msgstr "在DS中被用户条目所忽略的对象类" + +msgid "Objectclasses used to search for group entries in DS" +msgstr "在DS中用户查找用户组条目的对象类" + +msgid "Objectclasses used to search for user entries in DS" +msgstr "在DS中用于查找用户条目的对象类" + +msgid "Old vault password" +msgstr "旧的库密码" + +msgid "Old vault private key" +msgstr "旧的库私钥" + +msgid "One Time Password" +msgstr "一次性密码" + +msgid "One of group, permission or self is required" +msgstr "需要组，权限或它们自己中的一个" + +msgid "One time password commands" +msgstr "一次性密码命令" + +msgid "Only one value is allowed" +msgstr "只允许一个值" + +msgid "Only one zone type is allowed per zone name" +msgstr "每个区域名只允许一种区域类型" + +msgid "" +"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" +"type when adding an AD trust." +msgstr "" +"当添加一个AD信任时仅有ipa-ad-trust和ipa-ad-trust-posix允许--range-type值。" + +msgid "Operating System and version of the host (e.g. Fedora 9)" +msgstr "主机操作系统版本（例如：Fedora 9）" + +msgid "Operating system" +msgstr "操作系统" + +#, c-format +msgid "Operation failed: %s\n" +msgstr "操作失败：%s\n" + +msgid "Operations Error" +msgstr "操作错误" + +msgid "Option added" +msgstr "已添加选项" + +msgid "Option group" +msgstr "选项组" + +msgid "" +"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" +msgstr "当IPA范围类型是ipa-ad-trust-posix时，选项rid-base不能使用" + +msgid "Options" +msgstr "选项" + +msgid "Options dom-sid and dom-name cannot be used together" +msgstr "选项dom-sid和dom-name不能被同时使用" + +msgid "Options dom-sid and rid-base must be used together" +msgstr "选项dom-sid和rid-base必须同时使用" + +msgid "Options dom-sid and secondary-rid-base cannot be used together" +msgstr "选项dom-sid和secondary-rid-base不能同时使用" + +msgid "Options dom-sid/dom-name and rid-base must be used together" +msgstr "选项dom-sid/dom-name和rid-base必须同时使用" + +msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" +msgstr "选项dom-sid/dom-name和secondary-rid-base不能同时使用" + +msgid "Options secondary-rid-base and rid-base must be used together" +msgstr "选项secondary-rid-base和rid-base必须同时使用" + +msgid "Order" +msgstr "规则" + +msgid "Order in increasing priority of SELinux users, delimited by $" +msgstr "按SELinux用户优先级递增顺序排列，以$分割" + +msgid "Org. Unit" +msgstr "组织单位" + +msgid "Organization" +msgstr "组织" + +msgid "Organizational Unit" +msgstr "组织单位" + +msgid "Origin DN subtree" +msgstr "原始DN子树" + +msgid "Original TTL" +msgstr "原始TTL" + +msgid "Other Record Types" +msgstr "其他记录类型" + +msgid "Our domain is not configured" +msgstr "我们的域没有配置" + +#, c-format +msgid "Out of Memory!\n" +msgstr "内存不足！\n" + +msgid "Out of memory\n" +msgstr "内存不足\n" + +#, c-format +msgid "Out of memory \n" +msgstr "内存不足\n" + +#, c-format +msgid "Out of memory!" +msgstr "内存不足！" + +#, c-format +msgid "Out of memory!\n" +msgstr "内存不足！\n" + +msgid "Out of memory!?\n" +msgstr "内存不足！？\n" + +msgid "Output filename" +msgstr "输出文件名" + +msgid "Output only on errors" +msgstr "仅输出错误" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service" +msgstr "覆盖默认支持的PAC类型列表。使用'NONE'来禁用该服务的PAC支持" + +msgid "" +"Override default list of supported PAC types. Use 'NONE' to disable PAC " +"support for this service, e.g. this might be necessary for NFS services." +msgstr "" +"覆盖默认支持的PAC类型列表。使用'NONE'来禁用该服务的PAC支持，例如，这可能是NFS" +"服务的必要条件。" + +msgid "Override existing password" +msgstr "覆盖已存在的密码" + +msgid "Override inherited settings" +msgstr "覆盖继承设置" + +msgid "Overwrite GID" +msgstr "覆盖GID" + +msgid "Owner" +msgstr "所有者" + +#, python-format +msgid "Owner %s" +msgstr "所有者%s" + +msgid "Owner groups" +msgstr "所有者用户组" + +msgid "Owner services" +msgstr "所有者服务" + +msgid "Owner users" +msgstr "所有者用户" + +msgid "Owners that could not be added" +msgstr "不能被添加的所有者" + +msgid "Owners that could not be removed" +msgstr "不能被移除的所有者" + +msgid "PAC type" +msgstr "PAC类型" + +msgid "PTR Hostname" +msgstr "PTR主机名" + +msgid "PTR record" +msgstr "PTR记录" + +msgid "Page" +msgstr "页" + +msgid "Pager Number" +msgstr "传真号码" + +msgid "Parameters" +msgstr "参数" + +msgid "Parent map" +msgstr "父映射" + +msgid "Parse all raw DNS records and return them in a structured way" +msgstr "解析所有的原始DNS记录并以有条理的方式返回它们" + +msgid "Parse error" +msgstr "解析错误" + +msgid "Password" +msgstr "密码" + +msgid "Password Expiration Notification (days)" +msgstr "密码过期通知（天）" + +msgid "Password Policies" +msgstr "密码策略" + +msgid "Password Policy" +msgstr "密码策略" + +msgid "Password cannot be set on enrolled host." +msgstr "密码不能在注册主机上设置。" + +msgid "Password change complete" +msgstr "完成密码更改" + +msgid "Password expiration" +msgstr "密码过期" + +msgid "Password history size" +msgstr "密码历史大小" + +msgid "Password plugin features" +msgstr "密码插件功能" + +msgid "Password reset was not successful." +msgstr "密码重置失败。" + +msgid "Password specified multiple times" +msgstr "多次指定密码" + +msgid "Password used in bulk enrollment" +msgstr "密码用于批量注册" + +msgid "Passwords do not match" +msgstr "密码不匹配" + +msgid "Passwords do not match!" +msgstr "密码不匹配！" + +msgid "" +"Passwords have been migrated in pre-hashed format.\n" +"IPA is unable to generate Kerberos keys unless provided\n" +"with clear text passwords. All migrated users need to\n" +"login at https://your.domain/ipa/migration/ before they\n" +"can use their Kerberos accounts." +msgstr "" +"密码已迁移成pre-hashed格式。IPA不能生成Kerberos密钥，除非提供明文密码。所有移" +"植过的用户在能使用他们的Kerberos账号之前需要登录https://your.domain/ipa/" +"migration/。" + +msgid "Passwords must match" +msgstr "密码必须匹配" + +msgid "" +"Per-server conditional forwarding policy. Set to \"none\" to disable " +"forwarding to global forwarder for this zone. In that case, conditional zone " +"forwarders are disregarded." +msgstr "" +"Per-server有条件的转发器策略。设置为\"none\"来禁止该区域转发至全局转发器。那" +"样的话，有条件的区域转发器被忽视了。" + +msgid "" +"Per-server forwarders. A custom port can be specified for each forwarder " +"using a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Per-server转发器。使用标准格式\"IP_ADDRESS port PORT\"为每个转发器指定一个自" +"定义端口" + +msgid "" +"Per-zone forwarders. A custom port can be specified for each forwarder using " +"a standard format \"IP_ADDRESS port PORT\"" +msgstr "" +"Per-zone转发器。使用标准格式\"IP_ADDRESS port PORT\"为每个转发器指定一个自定" +"义端口" + +msgid "Period after which failure count will be reset (seconds)" +msgstr "一段时间后失败次数将被重置（秒）" + +msgid "Period for which lockout is enforced (seconds)" +msgstr "锁定持续时间（秒）" + +msgid "Permission" +msgstr "权限" + +msgid "Permission ACI grants access to" +msgstr "ACI授予访问的权限" + +#, python-format +msgid "Permission denied: %(file)s" +msgstr "权限阻止：%(file)s" + +msgid "Permission flags" +msgstr "权限标记" + +msgid "Permission name" +msgstr "权限名称" + +msgid "Permission settings" +msgstr "权限设置" + +msgid "Permission type" +msgstr "权限类型" + +msgid "Permission value" +msgstr "权限值" + +#, python-format +msgid "Permission with unknown flag %s may not be modified or removed" +msgstr "带有标记%s的权限可能不能被修改或删除" + +msgid "Permissions" +msgstr "权限" + +msgid "Permissions to grant (read, write). Default is write." +msgstr "委托权限（读，写）。默认是写。" + +msgid "Permissions to grant(read, write, add, delete, all)" +msgstr "授予权限（读，写，添加，删除，全部）" + +msgid "Permitted Encryption Types" +msgstr "允许的加密类型" + +msgid "Permitted to have certificates issued" +msgstr "允许颁发证书" + +msgid "Ping a remote server." +msgstr "Ping一台远程服务器。" + +msgid "Platform" +msgstr "平台" + +msgid "Please choose a type of DNS resource record to be added" +msgstr "请选择一个待添加的DNS资源记录类型" + +msgid "Please specify forwarders." +msgstr "请指定转发器。" + +msgid "Please try the following options:" +msgstr "请尝试下面选项：" + +msgid "Policy" +msgstr "策略" + +msgid "Port" +msgstr "端口" + +msgid "Positional argument" +msgstr "位置参数" + +msgid "Positional arguments" +msgstr "位置参数" + +msgid "Pre-authentication is required for the service" +msgstr "服务需要预认证" + +msgid "Pre-shared password" +msgstr "预先共享的密码" + +#, python-format +msgid "Predefined profile '%(profile_id)s' cannot be deleted" +msgstr "预定义的配置文件'%(profile_id)s'不能被删除" + +msgid "Preference" +msgstr "优先权" + +msgid "Preference given to this exchanger. Lower values are more preferred" +msgstr "该交换器的优先级。值越低优先级越高" + +msgid "Preferred Language" +msgstr "首选语言" + +msgid "" +"Prefix used to distinguish ACI types (permission, delegation, selfservice, " +"none)" +msgstr "前缀用来区分ACI类型（权限，授权，自助，无）" + +msgid "Preserved user" +msgstr "备用用户" + +msgid "Preserved users" +msgstr "备用用户" + +msgid "Prev" +msgstr "上一个" + +msgid "Primary RID base" +msgstr "主要的RID基" + +msgid "Primary RID range and secondary RID range cannot overlap" +msgstr "主要RID范围和次要RID范围不能覆盖" + +msgid "Primary key only" +msgstr "主键唯一" + +msgid "Principal" +msgstr "主体" + +#, python-format +msgid "Principal %(principal)s cannot be authenticated: %(message)s" +msgstr "不能认证主体%(principal)s：%(message)s" + +#, python-format +msgid "" +"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " +"'%(profile_id)s' for certificate issuance." +msgstr "" +"主体'%(principal)s'不允许使用含配置文件'%(profile_id)s'的CA '%(ca)s'来发布证" +"书。" + +#, python-format +msgid "Principal '%s' in subject alt name does not match requested principal" +msgstr "在主题alt名中的主体'%s'与请求的主体不匹配" + +msgid "Principal alias" +msgstr "主体别名" + +msgid "Principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "该证书的主体（例如：HTTP/test.example.com）" + +#, python-format +msgid "Principal is not of the form user@REALM: '%(principal)s'" +msgstr "主体不是这种格式user@REALM：'%(principal)s'" + +msgid "Principal name" +msgstr "主机名" + +msgid "Print as little as possible" +msgstr "打印尽可能少" + +msgid "Print debugging information" +msgstr "打印调试信息" + +msgid "Print entries as stored on the server. Only affects output format." +msgstr "打印存储在服务器上的条目。仅影响输出格式。" + +msgid "Print the raw XML-RPC output in GSSAPI mode" +msgstr "以GSSAPI模式打印原始的XML-RPC输出" + +msgid "Priority" +msgstr "优先级" + +msgid "Priority (order)" +msgstr "优先级（顺序）" + +msgid "Priority of the policy (higher number means lower priority" +msgstr "策略优先级（数字越大意味着优先级越低" + +msgid "Private key specified multiple times" +msgstr "多次指定私钥" + +msgid "Privilege" +msgstr "特权" + +msgid "Privilege Settings" +msgstr "特权设置" + +msgid "Privilege Withdrawn" +msgstr "特权撤销" + +msgid "Privilege description" +msgstr "特权描述" + +msgid "Privilege name" +msgstr "特权名" + +msgid "Privileges" +msgstr "特权" + +msgid "Profile ID" +msgstr "配置文件ID" + +#, python-format +msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" +msgstr "配置文件ID '%(cli_value)s'与配置文件数据'%(file_value)s'不匹配" + +msgid "Profile ID for referring to this profile" +msgstr "指向该配置文件的配置文件ID" + +msgid "Profile category" +msgstr "配置文件类别" + +msgid "Profile category the ACL applies to" +msgstr "ACL适用于配置文件类别" + +msgid "Profile configuration" +msgstr "配置文件配置" + +#, python-format +msgid "Profile configuration stored in file '%(file)s'" +msgstr "配置储存在文件'%(file)s'中" + +msgid "Profile description" +msgstr "配置文件描述" + +msgid "Profiles" +msgstr "配置文件" + +msgid "Prompt to set the user password" +msgstr "提示设置用户密码" + +msgid "Prospective" +msgstr "预期的" + +msgid "Protocol" +msgstr "协议" + +msgid "Public Key" +msgstr "公钥" + +msgid "Public key" +msgstr "公钥" + +msgid "Public key specified multiple times" +msgstr "多次指定公钥" + +msgid "" +"QR code width is greater than that of the output tty. Please resize your " +"terminal." +msgstr "二维码的宽度大于tty的输出。请调整你的终端。" + +msgid "Quantity" +msgstr "数量" + +msgid "Query current Domain Level." +msgstr "查询当前域级别。" + +#, python-brace-format +msgid "" +"Query returned more results than the configured size limit. Displaying the " +"first ${counter} results." +msgstr "返回比配置大小限制更多的结果。显示第一个${counter}结果。" + +msgid "Quick Links" +msgstr "快速链接" + +msgid "Quiet mode. Only errors are displayed." +msgstr "单用户模式。仅显示错误。" + +msgid "RADIUS Proxy Server Settings" +msgstr "RADIUS代理服务器设置" + +msgid "RADIUS Server" +msgstr "RADIUS代理服务器" + +msgid "RADIUS Servers" +msgstr "RADIUS代理服务器" + +msgid "RADIUS proxy configuration" +msgstr "RADIUS代理配置" + +msgid "RADIUS proxy server" +msgstr "RADIUS代理服务器" + +msgid "RADIUS proxy server name" +msgstr "RADIUS代理服务器名称" + +msgid "RADIUS proxy servers" +msgstr "RADIUS代理服务器" + +msgid "RADIUS proxy username" +msgstr "RADIUS代理名称" + +msgid "REST API is not logged in." +msgstr "REST API没有登录。" + +msgid "RFC4120-compliant Kerberos realm" +msgstr "RFC4120-兼容的Kerberos域" + +msgid "RFC822Name does not match any of user's email addresses" +msgstr "RFC822名称与任何用户的电子邮件地址都不匹配" + +msgid "RP record" +msgstr "RP记录" + +msgid "RPC command used to log the current user out of their session." +msgstr "RPC命令用于记录当前用户的会话。" + +msgid "RRSIG Algorithm" +msgstr "RRSIG算法" + +msgid "RRSIG Key Tag" +msgstr "RRSIG密钥标记" + +msgid "RRSIG Labels" +msgstr "RRSIG分类" + +msgid "RRSIG Original TTL" +msgstr "RRSIG原始TTL" + +msgid "RRSIG Signature" +msgstr "RRSIG签名" + +msgid "RRSIG Signature Expiration" +msgstr "RRSIG签名过期" + +msgid "RRSIG Signature Inception" +msgstr "RRSIG签名开端" + +msgid "RRSIG Signer's Name" +msgstr "RRSIG签名者的名字" + +msgid "RRSIG Type Covered" +msgstr "RRSIG类型覆盖" + +msgid "RRSIG record" +msgstr "RRSIG记录" + +msgid "Random password" +msgstr "随机密码" + +msgid "Range Settings" +msgstr "范围设置" + +msgid "Range name" +msgstr "范围名称" + +msgid "Range size" +msgstr "范围大小" + +msgid "Range type" +msgstr "范围类型" + +#, python-format +msgid "Raw %s records" +msgstr "原始的%s记录" + +msgid "Raw A records" +msgstr "原始的记录" + +msgid "Raw A6 records" +msgstr "原始的A6记录" + +msgid "Raw AAAA records" +msgstr "原始的AAAA记录" + +msgid "Raw AFSDB records" +msgstr "原始的AFSDB记录" + +msgid "Raw APL records" +msgstr "原始的APL记录" + +msgid "Raw CERT records" +msgstr "原始的CERT记录" + +msgid "Raw CNAME records" +msgstr "原始的CNAME记录" + +msgid "Raw DHCID records" +msgstr "原始的DHCID记录" + +msgid "Raw DLV records" +msgstr "原始的DLV记录" + +msgid "Raw DNAME records" +msgstr "原始的DNAME记录" + +msgid "Raw DNSKEY records" +msgstr "原始的DNSKEY记录" + +msgid "Raw DS records" +msgstr "原始的DS记录" + +msgid "Raw HIP records" +msgstr "原始的HIP记录" + +msgid "Raw IPSECKEY records" +msgstr "原始的IPSECKEY记录" + +msgid "Raw KEY records" +msgstr "原始的KEY记录" + +msgid "Raw KX records" +msgstr "原始的KX记录" + +msgid "Raw LOC records" +msgstr "原始的LOC记录" + +msgid "Raw MX records" +msgstr "原始的MX记录" + +msgid "Raw NAPTR records" +msgstr "原始的NAPTR记录" + +msgid "Raw NS records" +msgstr "原始的NS记录" + +msgid "Raw NSEC records" +msgstr "原始的NSEC记录" + +msgid "Raw NSEC3 records" +msgstr "原始的NSEC3记录" + +msgid "Raw PTR records" +msgstr "原始的PTR记录" + +msgid "Raw RP records" +msgstr "原始的RP记录" + +msgid "Raw RRSIG records" +msgstr "原始的RRSIG记录" + +msgid "Raw SIG records" +msgstr "原始的SIG记录" + +msgid "Raw SPF records" +msgstr "原始的SPF记录" + +msgid "Raw SRV records" +msgstr "原始的SRV记录" + +msgid "Raw SSHFP records" +msgstr "原始的SSHFP记录" + +msgid "Raw TA records" +msgstr "原始的TA记录" + +msgid "Raw TKEY records" +msgstr "原始的TKEY记录" + +msgid "Raw TLSA records" +msgstr "原始的TLSA记录" + +msgid "Raw TSIG records" +msgstr "原始的TSIG记录" + +msgid "Raw TXT records" +msgstr "原始的TXT记录" + +msgid "Raw target filter" +msgstr "原始的目标过滤器" + +#, python-format +msgid "Raw value of a DNS record was already set by \"%(name)s\" option" +msgstr "DNS记录的原始值已被设定为\"%(name)s\"选项" + +#, python-format +msgid "Re-established trust to domain \"%(value)s\"" +msgstr "重建信任域\"%(value)s\"" + +msgid "Re-sync the local entitlement cache with the entitlement server." +msgstr "重新同步在权利服务器上的本地权利缓存。" + +msgid "Realm Domains" +msgstr "Realm域" + +msgid "Realm administrator password should be specified" +msgstr "域管理员密码应该被指定" + +msgid "Realm domains" +msgstr "Realm域" + +msgid "Realm name" +msgstr "域名" + +msgid "Realm-domain mismatch" +msgstr "Realm-domain不匹配" + +msgid "Reason" +msgstr "原因" + +msgid "Reason for Revocation" +msgstr "撤销理由" + +msgid "Reason for revoking the certificate (0-10)" +msgstr "撤消证书的原因(0-10)" + +msgid "" +"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " +"revocation reason details. " +msgstr "撤销证书的原因（0-10）。输入\"ipa help cert\"来查看详细撤销原因。" + +msgid "Rebuild auto membership" +msgstr "重建自动成员" + +msgid "Record Type" +msgstr "记录类型" + +msgid "Record creation failed." +msgstr "记录创建失败。" + +msgid "Record data" +msgstr "记录数据" + +msgid "Record name" +msgstr "记录名" + +msgid "Record not found." +msgstr "记录没有找到。" + +msgid "Record type" +msgstr "记录类型" + +msgid "Records" +msgstr "记录" + +msgid "Records for DNS Zone" +msgstr "DNS区域记录" + +msgid "Redirection" +msgstr "重定向" + +msgid "Redirection to PTR record" +msgstr "重定向到PTR记录" + +msgid "Refresh" +msgstr "更新" + +msgid "Refresh list of the domains associated with the trust" +msgstr "刷新与信任相关的域列表" + +msgid "Refresh the page." +msgstr "刷新页面。" + +msgid "Registration password" +msgstr "注册密码" + +msgid "Regular Expression" +msgstr "正则表达式" + +#, python-format +msgid "" +"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " +"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " +"by a missing dot at the end of the name specification." +msgstr "" +"相对记录名'%(record)s'将区域名'%(zone)s'当作一个后缀，导致FQDN '%(fqdn)s'。这" +"通常是由于在名称规范后缺少一个点号引起的错误。" + +msgid "Relative weight for entries with the same priority." +msgstr "拥有相同优先级条目的相对权重。" + +msgid "Reload current settings from the server." +msgstr "从服务器重新加载当前设置。" + +msgid "Reload the browser." +msgstr "重新加载浏览器。" + +msgid "Remote IPA server hostname" +msgstr "远程IPA服务器主机名" + +msgid "Remote server name" +msgstr "远程服务器名称" + +msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" +msgstr "移除被IPA DNS管理的主机的A，AAAA，SSHFP和PTR记录" + +msgid "Remove CAs from a CA ACL." +msgstr "从一个CA ACL中移除CAs。" + +msgid "Remove Kerberos Alias" +msgstr "删除Kerberos别名" + +msgid "Remove Permission" +msgstr "删除权限" + +msgid "Remove a manager to the stage user entry" +msgstr "从一个计划用户条目中移除一个管理员" + +msgid "Remove a manager to the user entry" +msgstr "向一个用户条目中移除一个管理员" + +msgid "Remove a permission for per-forward zone access delegation." +msgstr "为每个正向区访问授权移除一个权限。" + +msgid "Remove a permission for per-zone access delegation." +msgstr "为每个区访问授权移除一个权限。" + +msgid "Remove all principals in this realm" +msgstr "删除该域中的所有主体" + +msgid "Remove an option from Sudo Rule." +msgstr "从Sudo规则中移除一个选项。" + +msgid "Remove certificates from a service" +msgstr "从一个服务中移除证书" + +msgid "Remove certificates from host entry" +msgstr "从主机条目中移除证书" + +msgid "Remove commands and sudo command groups affected by Sudo Rule." +msgstr "移除受Sudo规则影响的命令和命令组。" + +msgid "Remove conditions from an automember rule." +msgstr "从一个自动成员规则中移除条件。" + +msgid "Remove default (fallback) group for all unmatched entries." +msgstr "对所有不匹配的条目移除默认（回退）组。" + +msgid "Remove entries from DNS" +msgstr "从DNS中移除条目" + +msgid "Remove from CRL" +msgstr "从CRL中删除" + +msgid "Remove hold" +msgstr "删除持有" + +msgid "Remove hosts and hostgroups affected by Sudo Rule." +msgstr "移除受Sudo规则影响的主机和主机组。" + +msgid "Remove hosts that can manage this host." +msgstr "移除可以管理该主机的主机。" + +msgid "Remove hosts that can manage this service." +msgstr "移除可以管理该服务的主机。" + +msgid "Remove information about the domain associated with the trust." +msgstr "移除与信任相关的域信息。" + +msgid "Remove member from a named service delegation rule." +msgstr "从一个命名服务授权规则中移除成员。" + +msgid "Remove member from a named service delegation target." +msgstr "从一个命名服务授权目标中移除成员。" + +msgid "Remove member from a named service delegation." +msgstr "从一个命名服务授权中删除成员。" + +msgid "Remove members from Sudo Command Group." +msgstr "从Sudo命令组中移除成员。" + +msgid "Remove members from a group." +msgstr "从一个组中移除成员。" + +msgid "Remove members from a hostgroup." +msgstr "从一个主机组中移除成员。" + +msgid "Remove members from a netgroup." +msgstr "从一个网络组中移除成员。" + +msgid "Remove members from a permission." +msgstr "从一个权限中移除成员。" + +msgid "Remove members from a privilege" +msgstr "从特权中移除成员" + +msgid "Remove members from a role." +msgstr "从一个角色中移除成员。" + +msgid "Remove members from a vault." +msgstr "从一个库中移除成员。" + +msgid "Remove members from an HBAC service group." +msgstr "从一个HBAC服务组中移除成员。" + +msgid "Remove one or more certificates to the idoverrideuser entry" +msgstr "从id覆盖用户条目中移除一个或多个证书" + +msgid "Remove one or more certificates to the user entry" +msgstr "向用户条目中移除一个或多个证书" + +msgid "Remove owners from a vault container." +msgstr "从一个库容器中移除所有者。" + +msgid "Remove owners from a vault." +msgstr "从一个库中移除所有者。" + +msgid "Remove permissions from a privilege." +msgstr "从特权中移除权限。" + +msgid "Remove principal alias from a host entry" +msgstr "从一个主机条目中移除主体别名" + +msgid "Remove principal alias from a service" +msgstr "从一个服务中删除主体别名" + +msgid "Remove principal alias from the user entry" +msgstr "从用户条目中删除主体别名" + +msgid "Remove privileges from a role." +msgstr "从一个角色中移除权限。" + +msgid "Remove profiles from a CA ACL." +msgstr "从一个CA ACL中移除配置文件。" + +msgid "Remove service and service groups from an HBAC rule." +msgstr "从一个HBAC规则中移除服务和服务组。" + +msgid "Remove services from a CA ACL." +msgstr "从一个CA ACL中移除服务。" + +msgid "Remove source hosts and hostgroups from an HBAC rule." +msgstr "从一个HBAC规则中移除源主机和主机组。" + +msgid "Remove target from a named service delegation rule." +msgstr "从一个命名服务授权规则中移除目标。" + +msgid "Remove target hosts and hostgroups from a CA ACL." +msgstr "从一个CA ACL中移除目标主机和主机组。" + +msgid "Remove target hosts and hostgroups from an HBAC rule." +msgstr "从一个HBAC规则中移除目标主机和主机组。" + +msgid "Remove target hosts and hostgroups from an SELinux User Map rule." +msgstr "从一个SELinux用户映射规则中移除目标主机和主机组。" + +msgid "Remove users and groups affected by Sudo Rule." +msgstr "移除受Sudo规则影响的用户和用户组。" + +msgid "Remove users and groups from a CA ACL." +msgstr "从一个CA ACL中移除用户和用户组。" + +msgid "Remove users and groups from an HBAC rule." +msgstr "从一个HBAC规则中移除用户和用户组。" + +msgid "Remove users and groups from an SELinux User Map rule." +msgstr "向SELinux用户映射规则中移除用户和用户组。" + +msgid "Remove users that can manage this token." +msgstr "移除可以管理该令牌的用户。" + +#, python-format +msgid "Removed aliases from host \"%(value)s\"" +msgstr "已从主机\"%(value)s\"中移除别名" + +#, python-format +msgid "Removed aliases from user \"%(value)s\"" +msgstr "已从用户\"%(value)s\"中删除别名" + +#, python-format +msgid "Removed aliases to the service principal \"%(value)s\"" +msgstr "已从服务主体\"%(value)s\"中删除别名" + +#, python-format +msgid "Removed certificates from host \"%(value)s\"" +msgstr "已从主机\"%(value)s\"中移除证书" + +#, python-format +msgid "Removed certificates from idoverrideuser \"%(value)s\"" +msgstr "已从id覆盖用户\"%(value)s\"中移除证书" + +#, python-format +msgid "Removed certificates from service principal \"%(value)s\"" +msgstr "已从服务主体\"%(value)s\"中删除证书" + +#, python-format +msgid "Removed certificates from user \"%(value)s\"" +msgstr "已为用户\"%(value)s\"删除证书" + +#, python-format +msgid "Removed condition(s) from \"%(value)s\"" +msgstr "已从\"%(value)s\"中移除条件" + +#, python-format +msgid "Removed default (fallback) group for automember \"%(value)s\"" +msgstr "已为自动成员\"%(value)s\"移除默认（回滚）组" + +#, python-format +msgid "Removed information about the trusted domain \"%(value)s\"" +msgstr "删除信任域\"%(value)s\"的信息" + +#, python-format +msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\"" +msgstr "已从Sudo规则\"%(rule)s\"中移除\"%(option)s\"" + +#, python-format +msgid "Removed system permission \"%(value)s\"" +msgstr "已移除系统权限\"%(value)s\"" + +#, python-format +msgid "Removing %(servers)s from replication topology, please wait..." +msgstr "从复制拓扑中移除%(servers)s，请稍后..." + +#, c-format +msgid "Removing principal %s\n" +msgstr "删除主体%s\n" + +msgid "Rename" +msgstr "重命名" + +msgid "Rename an ACI." +msgstr "重命名一个ACI。" + +#, python-format +msgid "Rename the %(ldap_obj_name)s object" +msgstr "重命名%(ldap_obj_name)s对象" + +msgid "Rename the DNS resource record object" +msgstr "重命名DNS资源记录对象" + +msgid "Rename the Group ID override object" +msgstr "重命名组ID覆盖对象" + +msgid "Rename the ID View object" +msgstr "重命名ID视图对象" + +msgid "Rename the OTP token object" +msgstr "重命名OTP令牌对象" + +msgid "Rename the RADIUS proxy server object" +msgstr "重命名RADIUS代理服务器对象" + +msgid "Rename the User ID override object" +msgstr "重命名用户ID覆盖对象" + +msgid "Rename the automount key object" +msgstr "重命名自动挂载键对象" + +msgid "Rename the group object" +msgstr "重命名组对象" + +msgid "Rename the permission object" +msgstr "重命名权限对象" + +msgid "Rename the privilege object" +msgstr "重命名特权对象" + +msgid "Rename the role object" +msgstr "重命名角色对象" + +msgid "Rename the stage user object" +msgstr "重命名计划用户对象" + +msgid "Rename the user object" +msgstr "重命名用户对象" + +#, python-format +msgid "Renamed ACI to \"%(value)s\"" +msgstr "已重命名ACI为\"%(value)s\"" + +msgid "Renewal master for IPA certificate authority" +msgstr "为IPA证书认证机构更新主服务器" + +msgid "Replacement" +msgstr "替换" + +msgid "" +"Replica is active DNSSEC key master. Uninstall could break your DNS system. " +"Please disable or replace DNSSEC key master first." +msgstr "" +"副本是活跃的DNSSEC密钥主机。卸载会导致你DNS系统崩溃。首先请禁用或替代DNSSEC密" +"钥主机。" + +msgid "Replication agreement enabled" +msgstr "启用复制协议" + +msgid "Replication configuration" +msgstr "复制配置" + +#, python-format +msgid "Replication refresh for segment: \"%(pkey)s\" requested." +msgstr "副本更新段：要求\"%(pkey)s\"。" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" contains errors." +msgstr "复制拓扑的后缀\"%(suffix)s\"包含错误。" + +#, python-format +msgid "Replication topology of suffix \"%(suffix)s\" is in order." +msgstr "复制拓扑的后缀\"%(suffix)s\"是按序的。" + +msgid "" +"Request a full re-initialization of the node retrieving data from the other " +"node." +msgstr "请求一个完整的从另一个节点检索数据的节点重初始化。" + +#, python-format +msgid "Request failed with status %(status)s: %(reason)s" +msgstr "请求失败状态%(status)s：%(reason)s" + +msgid "Request id" +msgstr "请求号" + +msgid "Request is missing \"method\"" +msgstr "请求缺少\"method\"" + +msgid "Request is missing \"params\"" +msgstr "请求缺少\"params\"" + +msgid "Request must be a dict" +msgstr "请求必须是一个字典" + +msgid "Request status" +msgstr "请求状态" + +msgid "Required" +msgstr "必需的" + +msgid "Required field" +msgstr "必需字段" + +msgid "Requires pre-authentication" +msgstr "需要预认证" + +msgid "Reset" +msgstr "重置" + +msgid "Reset Kerberos ticket policy to the default values." +msgstr "重置Kerberos票据策略为默认值。" + +msgid "Reset OTP" +msgstr "重置OTP" + +msgid "Reset Password" +msgstr "重置密码" + +msgid "Reset your password." +msgstr "重置你的密码。" + +msgid "Resolve a host name in DNS." +msgstr "在DNS中解析主机名。" + +msgid "Resolve a host name in DNS. (Deprecated)" +msgstr "在DNS中解析主机名。（不赞成）" + +msgid "Resolve security identifiers of users and groups in trusted domains" +msgstr "在信任域中重新解析用户和用户组的安全标识符" + +msgid "Response from CA was not valid JSON" +msgstr "CA响应是无效的JSON" + +msgid "Restore" +msgstr "恢复" + +msgid "Result" +msgstr "结果" + +msgid "Result of simulation" +msgstr "模拟结果" + +msgid "Result of the command" +msgstr "命令返回值" + +msgid "Results are truncated, try a more specific search" +msgstr "结果被截断，请尝试更明确的搜索" + +#, python-format +msgid "Results should contain primary key attribute only (\"%s\")" +msgstr "结果应该只包括主键属性(\"%s\")" + +msgid "Results should contain primary key attribute only (\"anchor\")" +msgstr "结果应该只包括主键属性(\"anchor\")" + +msgid "Results should contain primary key attribute only (\"certificate\")" +msgstr "结果应该只包括主键属性(\"certificate\")" + +msgid "Results should contain primary key attribute only (\"cn\")" +msgstr "结果应该只包括主键属性(\"cn\")" + +msgid "Results should contain primary key attribute only (\"command\")" +msgstr "结果应该只包括主键属性(\"command\")" + +msgid "Results should contain primary key attribute only (\"delegation-name\")" +msgstr "结果应该只包括主键属性(\"delegation-name\")" + +msgid "Results should contain primary key attribute only (\"domain\")" +msgstr "结果应该只包括主键属性(\"domain\")" + +msgid "Results should contain primary key attribute only (\"group\")" +msgstr "结果应该只包括主键属性(\"group\")" + +msgid "Results should contain primary key attribute only (\"group-name\")" +msgstr "结果应该只包括主键属性(\"group-name\")" + +msgid "Results should contain primary key attribute only (\"hostgroup-name\")" +msgstr "结果应该只包括主键属性(\"hostgroup-name\")" + +msgid "Results should contain primary key attribute only (\"hostname\")" +msgstr "结果应该只包括主键属性(\"hostname\")" + +msgid "Results should contain primary key attribute only (\"id\")" +msgstr "结果应该只包括主键属性(\"id\")" + +msgid "Results should contain primary key attribute only (\"location\")" +msgstr "结果应该只包括主键属性(\"location\")" + +msgid "Results should contain primary key attribute only (\"login\")" +msgstr "结果应该只包括主键属性(\"login\")" + +msgid "Results should contain primary key attribute only (\"map\")" +msgstr "结果应该只包括主键属性(\"map\")" + +msgid "Results should contain primary key attribute only (\"name\")" +msgstr "结果应该只包括主键属性(\"name\")" + +msgid "Results should contain primary key attribute only (\"principal\")" +msgstr "结果应该只包括主键属性(\"principal\")" + +msgid "Results should contain primary key attribute only (\"realm\")" +msgstr "结果应该只包括主键属性(\"realm\")" + +msgid "Results should contain primary key attribute only (\"service\")" +msgstr "结果应该只包括主键属性(\"service\")" + +msgid "" +"Results should contain primary key attribute only (\"sudocmdgroup-name\")" +msgstr "结果应该只包括主键属性(\"sudocmdgroup-name\")" + +msgid "Results should contain primary key attribute only (\"sudorule-name\")" +msgstr "结果应该只包括主键属性(\"sudorule-name\")" + +msgid "Retries" +msgstr "重试" + +msgid "Retrieve a data from a vault." +msgstr "从库中检索一个数据。" + +msgid "Retrieve an existing certificate." +msgstr "检索一个已存在的证书。" + +msgid "" +"Retrieve and print all attributes from the server. Affects command output." +msgstr "从服务器检索和打印所有属性。影响命令输出。" + +msgid "Retrieve current keys without changing them" +msgstr "检索当前密钥不去改变它们" + +msgid "Retrieve the entitlement certs." +msgstr "检索权利证书。" + +#, python-format +msgid "Retrieved data from vault \"%(value)s\"" +msgstr "从库\"%(value)s\"中检索数据" + +#, python-format +msgid "Retrieving CA cert chain failed: %s" +msgstr "检索CA证书链失败：%s" + +#, python-format +msgid "Retrieving CA status failed with status %d" +msgstr "检索CA状态失败%d" + +#, python-format +msgid "Retrieving CA status failed: %s" +msgstr "检索CA状态失败：%s" + +msgid "Retry" +msgstr "重试" + +#, c-format +msgid "Retrying with pre-4.0 keytab retrieval method...\n" +msgstr "用pre-4.0 keytab检索方法重试...\n" + +msgid "Return to the main page and retry the operation" +msgstr "返回到主页面并重试操作" + +#, python-format +msgid "" +"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." +msgstr "在反向区域%(zone)s中IP地址为%(ip)s的反向记录已存在。" + +#, python-format +msgid "" +"Reverse zone %(name)s requires exactly %(count)d IP address components, " +"%(user_count)d given" +msgstr "反向区域%(name)s恰好需要%(count)d个IP地址组件，已给出%(user_count)d" + +msgid "Reverse zone IP network" +msgstr "反向区域IP网络" + +msgid "Revert" +msgstr "返回" + +msgid "Revocation reason" +msgstr "撤消原因" + +msgid "Revoke" +msgstr "撤回" + +msgid "Revoke a certificate." +msgstr "撤销证书。" + +msgid "Revoked" +msgstr "撤销" + +msgid "Revoked on from" +msgstr "撤销于" + +msgid "Revoked on to" +msgstr "撤销到" + +msgid "Right node" +msgstr "右节点" + +msgid "Right replication node - an IPA server" +msgstr "右复制节点-IPA服务器" + +msgid "Rights" +msgstr "权限" + +msgid "Rights to grant (read, search, compare, write, add, delete, all)" +msgstr "授予权限（读，查找，比较，写，添加，删除，全部）" + +msgid "Role" +msgstr "角色" + +msgid "Role Settings" +msgstr "角色设置" + +msgid "Role name" +msgstr "角色名" + +msgid "Role status" +msgstr "角色状态" + +msgid "Roles" +msgstr "角色" + +msgid "Root domain of the trust is always enabled for the existing trust" +msgstr "信任的根域总是支持现有的信任" + +msgid "Rule name" +msgstr "规则名" + +msgid "Rule status" +msgstr "规则状态" + +msgid "Rule type" +msgstr "规则类型" + +msgid "Rule type (allow)" +msgstr "规则类型（允许）" + +msgid "Rules" +msgstr "规则" + +msgid "Rules to test. If not specified, --enabled is assumed" +msgstr "带测试规则。如果没有指定，--enable是假定的" + +msgid "Run Commands" +msgstr "允许命令" + +msgid "Run Test" +msgstr "允许测试" + +msgid "Run as a user" +msgstr "作为一个用户来运行" + +msgid "Run as any user within a specified group" +msgstr "作为任何一个有指定组用户来运行" + +msgid "Run with the gid of a specified POSIX group" +msgstr "以一个指定POSIX组的gid来运行" + +msgid "RunAs External Group" +msgstr "作为外部用户组来运行" + +msgid "RunAs External User" +msgstr "作为外部用户来运行" + +msgid "RunAs Group category" +msgstr "作为用户组类别来运行" + +msgid "RunAs Group category the rule applies to" +msgstr "作为规则适用的用户组类别来运行" + +msgid "RunAs Groups" +msgstr "作为用户组来运行" + +msgid "RunAs User category" +msgstr "作为用户类别来运行" + +msgid "RunAs User category the rule applies to" +msgstr "作为规则适用的用户类别来运行" + +msgid "RunAs Users" +msgstr "作为用户来运行" + +#, python-format +msgid "RunAsGroup does not accept '%(name)s' as a group name" +msgstr "作为组来运行不能接受'%(name)s'来作为一个组名" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a group name" +msgstr "作为用户来运行不能接受'%(name)s'来作为一个组名" + +#, python-format +msgid "RunAsUser does not accept '%(name)s' as a user name" +msgstr "作为用户来运行不能接受'%(name)s'来作为一个用户名" + +msgid "SELinux Options" +msgstr "SELinux选项" + +msgid "SELinux User" +msgstr "SELinux用户" + +msgid "SELinux User Map" +msgstr "SELinux用户映射规则" + +msgid "SELinux User Map rule" +msgstr "SELinux用户映射规则" + +msgid "SELinux User Map rules" +msgstr "SELinux用户映射规则" + +msgid "SELinux User Maps" +msgstr "SELinux用户映射规则" + +#, python-format +msgid "SELinux user %(user)s not found in ordering list (in config)" +msgstr "SELinux用户%(user)s在顺序列表中（配置）没有找到" + +#, python-format +msgid "SELinux user '%(user)s' is not valid: %(error)s" +msgstr "SELinux用户'%(user)s'是无效的：%(error)s" + +msgid "SELinux user map default user not in order list" +msgstr "SELinux用户映射默认用户没有在列表中" + +msgid "SELinux user map list not found in configuration" +msgstr "SELinux用户映射列表在配置中没有找到" + +msgid "SELinux user map order" +msgstr "SELinux 用户映射订单" + +msgid "SHA1 Fingerprint" +msgstr "SHA1指纹" + +msgid "SHA256 Fingerprint" +msgstr "SHA256指纹" + +msgid "SID blacklist incoming" +msgstr "进来的SID黑名单" + +msgid "SID blacklist outgoing" +msgstr "出去的SID黑名单" + +msgid "SID does not match any trusted domain" +msgstr "SID不能匹配任何信任域" + +msgid "SID does not match exactlywith any trusted domain's SID" +msgstr "SID不能完全匹配任何信任域的SID" + +msgid "" +"SID for the specified trusted domain name could not be found. Please specify " +"the SID directly using dom-sid option." +msgstr "指定信任域名的SID没有找到。请使用dom-sid选项直接指定SID。" + +msgid "SID is not recognized as a valid SID for a trusted domain" +msgstr "对于一个信任域来说，SID不被认为是一个有效的SID" + +msgid "SID is not valid" +msgstr "SID是无效的" + +msgid "SIG Algorithm" +msgstr "SIG算法" + +msgid "SIG Key Tag" +msgstr "SIG密钥标记" + +msgid "SIG Labels" +msgstr "SIG分类" + +msgid "SIG Original TTL" +msgstr "SIG原始TTL" + +msgid "SIG Signature" +msgstr "SIG签名" + +msgid "SIG Signature Expiration" +msgstr "SIG签名过期" + +msgid "SIG Signature Inception" +msgstr "SIG签名开端" + +msgid "SIG Signer's Name" +msgstr "SIG签名者的名字" + +msgid "SIG Type Covered" +msgstr "SIG类型覆盖" + +msgid "SIG record" +msgstr "SIG记录" + +msgid "SOA class" +msgstr "SOA类" + +msgid "SOA expire" +msgstr "SOA到期" + +msgid "SOA minimum" +msgstr "SOA最低值" + +msgid "SOA mname (authoritative server) override" +msgstr "SOA mname（权威服务器）覆盖" + +msgid "SOA mname override" +msgstr "SOA mname覆盖" + +msgid "SOA record class" +msgstr "SOA记录类" + +msgid "SOA record expire time" +msgstr "SOA记录到期时间" + +msgid "SOA record refresh time" +msgstr "SOA记录刷新时间" + +msgid "SOA record retry time" +msgstr "SOA记录重试时间" + +msgid "SOA record serial number" +msgstr "SOA记录编号" + +msgid "SOA record time to live" +msgstr "SOA记录存活时间" + +msgid "SOA refresh" +msgstr "SOA刷新" + +msgid "SOA retry" +msgstr "SOA重试" + +msgid "SOA serial" +msgstr "SOA序列" + +msgid "SOA time to live" +msgstr "SOA存活时间" + +msgid "SPF record" +msgstr "SPF记录" + +msgid "SRV Port" +msgstr "SRV端口" + +msgid "SRV Priority" +msgstr "SRV优先级" + +msgid "SRV Target" +msgstr "SRV目标" + +msgid "SRV Weight" +msgstr "SRV重量" + +msgid "SRV record" +msgstr "SRV记录" + +msgid "SSH public key" +msgstr "SSH公钥" + +msgid "SSH public key fingerprint" +msgstr "SSH公钥指纹" + +msgid "SSH public key:" +msgstr "SSH公钥：" + +msgid "SSH public keys" +msgstr "SSH公钥" + +msgid "SSHFP Algorithm" +msgstr "SSHFP算法" + +msgid "SSHFP Fingerprint" +msgstr "SSHFP指纹" + +msgid "SSHFP Fingerprint Type" +msgstr "SSHFP指纹类型" + +msgid "SSHFP record" +msgstr "SSHFP记录" + +msgid "SSSD was unable to resolve the object to a valid SID" +msgstr "SSSD不能将对象解析成一个有效的SID" + +msgid "Salt" +msgstr "盐值" + +#, python-format +msgid "Same as --%s" +msgstr "相同于 --%s" + +msgid "Save" +msgstr "保存" + +#, python-format +msgid "Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s)" +msgstr "模式是最新的（FP '%(fingerprint)s', TTL %(ttl)s s）" + +msgid "Search" +msgstr "查找" + +msgid "Search Options" +msgstr "查找选项" + +msgid "Search command parameters." +msgstr "查找命令参数。" + +msgid "Search domains of the trust" +msgstr "查找信任域" + +#, python-format +msgid "" +"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." +msgstr "查找有这些%(relationship)s %(ldap_object)s的%(searched_object)s。" + +#, python-format +msgid "" +"Search for %(searched_object)s without these %(relationship)s " +"%(ldap_object)s." +msgstr "查找没有%(relationship)s %(ldap_object)s的%(searched_object)s。" + +#, c-format +msgid "Search for %1$s on rootdse failed with error %2$d\n" +msgstr "在rootdse中查找%1$s失败，错误%2$d\n" + +msgid "Search for CA ACLs." +msgstr "查找CA ACLs。" + +msgid "Search for CAs." +msgstr "查找CAs。" + +msgid "Search for Certificate Profiles." +msgstr "查找证书配置文件。" + +msgid "Search for DNS forward zones." +msgstr "查找DNS正向区。" + +msgid "Search for DNS resources." +msgstr "查找DNS资源。" + +msgid "Search for DNS servers." +msgstr "查找DNS服务器。" + +msgid "Search for DNS zones (SOA records)." +msgstr "查找DNS区域（SOA记录）。" + +msgid "Search for HBAC rules." +msgstr "查找HBAC规则。" + +msgid "Search for HBAC services." +msgstr "查找HBAC服务。" + +msgid "Search for IPA locations." +msgstr "查找IPA位置。" + +#, c-format +msgid "Search for IPA namingContext failed with error %d\n" +msgstr "查找IPA名称上下文失败，错误%d\n" + +msgid "Search for IPA servers." +msgstr "查找IPA服务器。" + +msgid "Search for IPA services." +msgstr "查找IPA服务。" + +msgid "Search for OTP token." +msgstr "查找OTP令牌。" + +msgid "Search for RADIUS proxy servers." +msgstr "查找RADIUS代理服务器。" + +msgid "Search for SELinux User Maps." +msgstr "查找SELinux用户映射。" + +msgid "Search for Sudo Command Groups." +msgstr "查找Sudo命令组。" + +msgid "Search for Sudo Commands." +msgstr "查找Sudo命令。" + +msgid "Search for Sudo Rule." +msgstr "查找Sudo规则。" + +msgid "Search for a netgroup." +msgstr "查找一个网络组。" + +msgid "Search for a self-service permission." +msgstr "查找一个自助服务权限。" + +msgid "Search for an Group ID override." +msgstr "查找一个组ID覆盖。" + +msgid "Search for an HBAC service group." +msgstr "查找一个HBAC服务组。" + +msgid "Search for an ID View." +msgstr "查找一个ID视图。" + +msgid "Search for an ID override." +msgstr "查找一个ID覆盖。" + +msgid "Search for an User ID override." +msgstr "查找一个用户ID覆盖。" + +msgid "Search for an automount key." +msgstr "查找一个自动挂载键。" + +msgid "Search for an automount location." +msgstr "查找一个自动挂载位置。" + +msgid "Search for an automount map." +msgstr "查找一个自动挂载映射。" + +msgid "Search for automember rules." +msgstr "查找自动成员规则。" + +#, python-format +msgid "Search for certificates with these owner %s." +msgstr "查找含这些所有者%s的证书。" + +#, python-format +msgid "Search for certificates without these owner %s." +msgstr "查找不含这些所有者%s的证书。" + +msgid "Search for classes." +msgstr "查找类。" + +msgid "Search for command outputs." +msgstr "查找命令输出。" + +msgid "Search for commands." +msgstr "查找命令。" + +msgid "Search for delegations." +msgstr "查找授权。" + +msgid "Search for entitlement accounts." +msgstr "查找权利账户。" + +msgid "Search for existing certificates." +msgstr "查找已存在的证书。" + +msgid "Search for forward zones only" +msgstr "仅查找正向区域" + +msgid "Search for group password policies." +msgstr "查找组密码策略。" + +msgid "Search for groups with these member groups." +msgstr "查找包含这些成员用户组的组。" + +msgid "Search for groups with these member of HBAC rules." +msgstr "查找包含这些HBAC规则成员的组。" + +msgid "Search for groups with these member of groups." +msgstr "查找包含这些组成员的组。" + +msgid "Search for groups with these member of netgroups." +msgstr "查找包含这些网络组成员的组。" + +msgid "Search for groups with these member of roles." +msgstr "查找包含这些角色成员的组。" + +msgid "Search for groups with these member of sudo rules." +msgstr "查找包含这些sudo规则成员的组。" + +msgid "Search for groups with these member users." +msgstr "查找包含这些成员用户的组。" + +msgid "Search for groups without these member groups." +msgstr "查找不包含这些成员用户组的组。" + +msgid "Search for groups without these member of HBAC rules." +msgstr "查找不包含这些HBAC规则成员的组。" + +msgid "Search for groups without these member of groups." +msgstr "查找不包含这些组成员的组。" + +msgid "Search for groups without these member of netgroups." +msgstr "查找不包含这些网络组成员的组。" + +msgid "Search for groups without these member of roles." +msgstr "查找不包含这些角色成员的组。" + +msgid "Search for groups without these member of sudo rules." +msgstr "查找不包含这些sudo规则成员的组。" + +msgid "Search for groups without these member users." +msgstr "查找不包含这些成员用户的组。" + +msgid "Search for groups." +msgstr "查找组。" + +msgid "Search for help topics." +msgstr "查找帮助主题。" + +msgid "Search for host groups with these member host groups." +msgstr "查找包含这些成员主机组的主机组。" + +msgid "Search for host groups with these member hosts." +msgstr "查找包含这些成员主机的主机组。" + +msgid "Search for host groups with these member of HBAC rules." +msgstr "查找包含这些HBAC规则成员的主机组。" + +msgid "Search for host groups with these member of host groups." +msgstr "查找包含这些主机组成员的主机组。" + +msgid "Search for host groups with these member of netgroups." +msgstr "查找包含这些网络组成员的主机组。" + +msgid "Search for host groups with these member of sudo rules." +msgstr "查找包含这些sudo规则成员的主机组。" + +msgid "Search for host groups without these member host groups." +msgstr "查找不包含这些成员主机组的主机组。" + +msgid "Search for host groups without these member hosts." +msgstr "查找不包含这些成员主机的主机组。" + +msgid "Search for host groups without these member of HBAC rules." +msgstr "查找不包含这些HBAC规则成员的主机组。" + +msgid "Search for host groups without these member of host groups." +msgstr "查找不包含这些主机组成员的主机组。" + +msgid "Search for host groups without these member of netgroups." +msgstr "查找不包含这些网络组成员的主机组。" + +msgid "Search for host groups without these member of sudo rules." +msgstr "查找不包含这些sudo规则成员的主机组。" + +msgid "Search for hostgroups." +msgstr "查找主机组。" + +msgid "Search for hosts with these enrolled by users." +msgstr "查找包含用户注册的主机。" + +msgid "Search for hosts with these managed by hosts." +msgstr "查找由该主机管理的主机。" + +msgid "Search for hosts with these managing hosts." +msgstr "查找管理该主机的主机。" + +msgid "Search for hosts with these member of HBAC rules." +msgstr "查找包含这些HBAC规则成员的主机。" + +msgid "Search for hosts with these member of host groups." +msgstr "查找包含这些主机组成员的主机。" + +msgid "Search for hosts with these member of netgroups." +msgstr "查找包含这些网络组成员的主机。" + +msgid "Search for hosts with these member of roles." +msgstr "查找包含这些角色成员的主机。" + +msgid "Search for hosts with these member of sudo rules." +msgstr "查找包含这些sudo规则成员的主机。" + +msgid "Search for hosts without these enrolled by users." +msgstr "查找不包含用户注册的主机。" + +msgid "Search for hosts without these managed by hosts." +msgstr "查找不由该主机管理的主机。" + +msgid "Search for hosts without these managing hosts." +msgstr "查找不管理该主机的主机。" + +msgid "Search for hosts without these member of HBAC rules." +msgstr "查找不包含这些HBAC规则成员的主机。" + +msgid "Search for hosts without these member of host groups." +msgstr "查找不包含这些主机组成员的主机。" + +msgid "Search for hosts without these member of netgroups." +msgstr "查找不包含这些网络组成员的主机。" + +msgid "Search for hosts without these member of roles." +msgstr "查找不包含这些角色成员的主机。" + +msgid "Search for hosts without these member of sudo rules." +msgstr "查找不包含这些sudo规则成员的主机。" + +msgid "Search for hosts." +msgstr "查找主机。" + +msgid "Search for netgroups with these member groups." +msgstr "查找包含这些成员用户组的网络组。" + +msgid "Search for netgroups with these member host groups." +msgstr "查找包含这些成员主机组的网络组。" + +msgid "Search for netgroups with these member hosts." +msgstr "查找包含这些成员主机的网络组。" + +msgid "Search for netgroups with these member netgroups." +msgstr "查找包含这些成员网络组的网络组。" + +msgid "Search for netgroups with these member of netgroups." +msgstr "查找包含这些网络组成员的网络组。" + +msgid "Search for netgroups with these member users." +msgstr "查找包含这些成员用户的网络组。" + +msgid "Search for netgroups without these member groups." +msgstr "查找不包含这些成员用户组的网络组。" + +msgid "Search for netgroups without these member host groups." +msgstr "查找不包含这些成员主机组的网络组。" + +msgid "Search for netgroups without these member hosts." +msgstr "查找不包含这些成员主机的网络组。" + +msgid "Search for netgroups without these member netgroups." +msgstr "查找不包含这些成员网络组的网络组。" + +msgid "Search for netgroups without these member of netgroups." +msgstr "查找不包含这些网络组成员的网络组。" + +msgid "Search for netgroups without these member users." +msgstr "查找不包含这些成员用户的网络组。" + +msgid "Search for permissions." +msgstr "查找权限。" + +msgid "Search for privileges." +msgstr "查找特权。" + +msgid "Search for ranges." +msgstr "查找范围。" + +msgid "Search for roles." +msgstr "查找角色。" + +msgid "Search for servers with these managed suffixes." +msgstr "查找包含这些管理后缀的服务器。" + +msgid "Search for servers without these managed suffixes." +msgstr "查找不包含这些管理后缀的服务器。" + +msgid "Search for service delegation target." +msgstr "查找服务授权目标。" + +msgid "Search for service delegations rule." +msgstr "查找服务授权规则。" + +msgid "Search for services with these managed by hosts." +msgstr "查找那些由主机管理的服务。" + +msgid "Search for services without these managed by hosts." +msgstr "查找那些不由主机管理的服务。" + +msgid "Search for stage users with these member of HBAC rules." +msgstr "查找包含这些HBAC规则成员的计划用户。" + +msgid "Search for stage users with these member of groups." +msgstr "查找包含这些组成员的计划用户。" + +msgid "Search for stage users with these member of netgroups." +msgstr "查找包含这些网络组成员的计划用户。" + +msgid "Search for stage users with these member of roles." +msgstr "查找包含这些角色成员的计划用户。" + +msgid "Search for stage users with these member of sudo rules." +msgstr "查找包含这些sudo规则成员的计划用户。" + +msgid "Search for stage users without these member of HBAC rules." +msgstr "查找不包含这些HBAC规则成员的计划用户。" + +msgid "Search for stage users without these member of groups." +msgstr "查找不包含这些组成员的计划用户。" + +msgid "Search for stage users without these member of netgroups." +msgstr "查找不包含这些网络组成员的计划用户。" + +msgid "Search for stage users without these member of roles." +msgstr "查找不包含这些角色成员的计划用户。" + +msgid "Search for stage users without these member of sudo rules." +msgstr "查找不包含这些sudo规则成员的计划用户。" + +msgid "Search for stage users." +msgstr "查找计划用户。" + +msgid "Search for topology segments." +msgstr "查找拓扑段。" + +msgid "Search for topology suffixes." +msgstr "查找拓扑后缀。" + +msgid "Search for trusts." +msgstr "查找信任。" + +msgid "Search for users with these member of HBAC rules." +msgstr "查找包含这些HBAC规则成员的用户。" + +msgid "Search for users with these member of groups." +msgstr "查找包含这些组成员的用户。" + +msgid "Search for users with these member of netgroups." +msgstr "查找包含这些网络组成员的用户。" + +msgid "Search for users with these member of roles." +msgstr "查找包含这些角色成员的用户。" + +msgid "Search for users with these member of sudo rules." +msgstr "查找包含这些sudo规则成员的用户。" + +msgid "Search for users without these member of HBAC rules." +msgstr "查找不包含这些HBAC规则成员的用户。" + +msgid "Search for users without these member of groups." +msgstr "查找不包含这些组成员的用户。" + +msgid "Search for users without these member of netgroups." +msgstr "查找不包含这些网络组成员的用户。" + +msgid "Search for users without these member of roles." +msgstr "查找不包含这些角色成员的用户。" + +msgid "Search for users without these member of sudo rules." +msgstr "查找不包含这些sudo规则成员的用户。" + +msgid "Search for users." +msgstr "查找用户。" + +msgid "Search for vaults." +msgstr "查找库。" + +#, python-format +msgid "Search result has been truncated: %(reason)s" +msgstr "查找结果被截断：%(reason)s" + +msgid "Search scope" +msgstr "范围查找" + +msgid "Search size limit" +msgstr "搜索大小限制" + +msgid "Search time limit" +msgstr "搜索时间限制" + +msgid "Second Code" +msgstr "第二个码" + +msgid "Second OTP" +msgstr "第二个OTP" + +msgid "Secondary RID base" +msgstr "次要的RID基" + +msgid "Seconds Latitude" +msgstr "秒纬度" + +msgid "Seconds Longitude" +msgstr "秒经度" + +msgid "Secret" +msgstr "密码" + +msgid "Security Identifier" +msgstr "安全标识符" + +msgid "Security Identifiers (SIDs)" +msgstr "安全标识符（SIDs）" + +msgid "Segment details" +msgstr "部分细节" + +msgid "Segment name" +msgstr "段名称" + +msgid "Select All" +msgstr "选择全部" + +msgid "Select entries to be removed." +msgstr "选择要删除的条目。" + +msgid "Selector" +msgstr "选择器" + +msgid "Self" +msgstr "自己" + +msgid "Self Service Permission" +msgstr "自助服务权限" + +msgid "Self Service Permissions" +msgstr "自助服务权限" + +msgid "Self-service name" +msgstr "自助服务名" + +#, python-format +msgid "" +"Semantic of %(label)s was changed. %(current_behavior)s\n" +"%(hint)s" +msgstr "%(label)s语义已改变了。%(current_behavior)s %(hint)s" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"issue queries" +msgstr "分号分割的IP地址或网络列表允许被查询" + +msgid "" +"Semicolon separated list of IP addresses or networks which are allowed to " +"transfer the zone" +msgstr "分号分割的IP地址或网络列表允许被传输" + +msgid "Sensitive" +msgstr "敏感的" + +msgid "Serial" +msgstr "序列号" + +msgid "Serial Number" +msgstr "序列号" + +msgid "Serial Number (hex)" +msgstr "序列号（十六进制）" + +msgid "Serial number" +msgstr "序列号" + +msgid "Serial number (hex)" +msgstr "序列号（十六进制）" + +msgid "Serial number in decimal or if prefixed with 0x in hexadecimal" +msgstr "十进制序列号或者以0x为前缀的十六进制序列号" + +msgid "Server" +msgstr "服务器" + +#, python-format +msgid "Server %(srv)s can't contact servers: %(replicas)s" +msgstr "服务器%(srv)s不能连接服务器： %(replicas)s" + +msgid "Server Name" +msgstr "服务器名" + +msgid "Server Role" +msgstr "服务器角色" + +msgid "Server Roles" +msgstr "服务器角色" + +msgid "Server has already been deleted" +msgstr "服务器已被删除" + +msgid "Server location" +msgstr "服务器位置" + +msgid "Server name" +msgstr "服务名称" + +#, c-format +msgid "Server name not provided and unavailable\n" +msgstr "服务器名没有提供或不可用\n" + +#, python-format +msgid "Server removal aborted: %(reason)s." +msgstr "服务器删除失败：%(reason)s。" + +msgid "Server will check DNS forwarder(s)." +msgstr "服务器将检查DNS转发器。" + +msgid "Servers" +msgstr "服务器" + +msgid "Servers details:" +msgstr "服务器详细信息：" + +msgid "Servers in location" +msgstr "本地服务器" + +msgid "Servers that belongs to the IPA location" +msgstr "属于IPA位置的服务器" + +msgid "Service" +msgstr "服务" + +#, python-format +msgid "" +"Service %(service)s requires restart on IPA server %(server)s to apply " +"configuration changes." +msgstr "应用改变的配置需要在IPA服务器%(server)s上重启服务%(service)s。" + +#, python-format +msgid "Service '%(service)s' not found in Kerberos database" +msgstr "在Kerberos数据库中没有找到服务'%(service)s'" + +msgid "Service Certificate" +msgstr "服务证书" + +msgid "Service Groups" +msgstr "服务组" + +msgid "Service Options" +msgstr "服务选项" + +msgid "Service Settings" +msgstr "服务设置" + +msgid "Service category" +msgstr "服务类别" + +msgid "Service category the ACL applies to" +msgstr "ACL适用于服务类别" + +msgid "Service category the rule applies to" +msgstr "规则应用的服务类别" + +msgid "Service delegation rule" +msgstr "服务授权规则" + +msgid "Service delegation rules" +msgstr "服务授权规则" + +msgid "Service delegation target" +msgstr "服务授权目标" + +msgid "Service delegation targets" +msgstr "服务授权目标" + +msgid "Service group name" +msgstr "服务组名称" + +msgid "Service name" +msgstr "服务名" + +msgid "Service name of the service vault" +msgstr "服务库的服务名" + +msgid "Service principal" +msgstr "服务主体" + +msgid "Service principal alias" +msgstr "服务主体别名" + +msgid "Service principal for this certificate (e.g. HTTP/test.example.com)" +msgstr "该证书服务主体（例如：HTTP/test.example.com）" + +#, python-format +msgid "" +"Service principal is not of the form: service/fully-qualified host name: " +"%(reason)s" +msgstr "服务主体不是这种格式：服务名/完全限定的主机名：%(reason)s" + +msgid "Service principal is required" +msgstr "需要服务主体" + +msgid "" +"Service(s), shared, and user(s) options cannot be specified simultaneously" +msgstr "服务，共享的和用户选项不能被同时指定" + +msgid "Service, shared and user options cannot be specified simultaneously" +msgstr "服务，共享的和用户选项不能被同时指定" + +msgid "Service, shared, and user options cannot be specified simultaneously" +msgstr "服务，共享的和用户选项不能被同时指定" + +msgid "Services" +msgstr "服务" + +msgid "Session error" +msgstr "会话错误" + +msgid "Session timeout" +msgstr "会话超时" + +msgid "Set" +msgstr "设置" + +msgid "Set Domain Level" +msgstr "设置域级别" + +msgid "Set OTP" +msgstr "设置OTP" + +msgid "Set SSH key" +msgstr "设置SSH公钥" + +msgid "Set a user's password." +msgstr "设置一个用户的密码。" + +msgid "" +"Set an attribute to a name/value pair. Format is attr=value.\n" +"For multi-valued attributes, the command replaces the values already present." +msgstr "" +"一个属性设置为一个名称/值对。格式是属性=值。对于多值属性，命令替换已存在的" +"值。" + +msgid "Set default (fallback) group for all unmatched entries." +msgstr "对所有不匹配的条目设置默认（回退）组。" + +#, python-format +msgid "Set default (fallback) group for automember \"%(value)s\"" +msgstr "已为自动成员\"%(value)s\"设置默认（回滚）组" + +msgid "Settings" +msgstr "设置" + +msgid "Shared vault" +msgstr "共享库" + +msgid "Show" +msgstr "显示" + +msgid "Show IPA server." +msgstr "显示IPA服务器。" + +msgid "Show QR code" +msgstr "显示二维码" + +msgid "Show Results" +msgstr "显示结果" + +msgid "Show all loaded plugins." +msgstr "显示所有加载的插件。" + +msgid "Show configuration uri" +msgstr "显示配置uri" + +msgid "Show details" +msgstr "显示细节" + +msgid "Show environment variables." +msgstr "显示环境变量。" + +msgid "Show global trust configuration." +msgstr "显示全局信任配置。" + +msgid "Show managed suffix." +msgstr "显示已管理的后缀。" + +msgid "Show role status on a server" +msgstr "显示服务器角色状态" + +msgid "Show the current OTP configuration." +msgstr "显示当前OTP配置。" + +msgid "Show the current configuration." +msgstr "显示当前配置。" + +msgid "Show the current global DNS configuration." +msgstr "显示当前全局DNS配置。" + +msgid "Show the list of permitted encryption types and exit" +msgstr "显示允许的加密类型列表并退出" + +msgid "Show vault configuration." +msgstr "显示库配置。" + +msgid "Show/Set key" +msgstr "显示/设置密钥" + +#, python-brace-format +msgid "Showing ${start} to ${end} of ${total} entries." +msgstr "从${start}到${end}显示${total}条目。" + +msgid "Signature" +msgstr "签名" + +msgid "Signature Expiration" +msgstr "签名过期" + +msgid "Signature Inception" +msgstr "签名开端" + +msgid "Signer's Name" +msgstr "签名者的名字" + +msgid "Simple bind failed\n" +msgstr "简单绑定失败\n" + +msgid "Simulate use of Host-based access controls" +msgstr "模拟使用基于主机访问控制" + +msgid "Size" +msgstr "大小" + +msgid "Size Limit" +msgstr "大小限制" + +#, python-format +msgid "" +"Size of data exceeds the limit. Current vault data size limit is %(limit)d B" +msgstr "数据大小超出限制。目前库数据大小限制为 %(limit)d B" + +msgid "Size of the ID range reserved for the trusted domain" +msgstr "信任域ID范围的大小" + +msgid "Skip DNS check" +msgstr "忽略DNS检查" + +msgid "Skip a check whether the last CA master or DNS server is removed" +msgstr "不检查最后一个CA主服务器或DNS服务器是否被删除了" + +msgid "Skip overlap check" +msgstr "忽略覆盖检查" + +#, python-format +msgid "Skipped %(key)s" +msgstr "已忽略 %(key)s" + +#, python-format +msgid "Skipped %(map)s" +msgstr "已忽略 %(map)s" + +msgid "Some entries were not deleted" +msgstr "一些条目没有被删除" + +msgid "Some operations failed." +msgstr "一些操作失败。" + +msgid "Source Host Groups" +msgstr "源主机组" + +msgid "Source Hosts" +msgstr "源主机" + +msgid "Source host" +msgstr "源主机" + +msgid "Source host category" +msgstr "源主机类别" + +msgid "Source host category the rule applies to" +msgstr "规则应用的源主机类别" + +msgid "Specified CAs" +msgstr "指定的CAs" + +msgid "Specified Commands and Groups" +msgstr "指定的命令和命令组" + +msgid "Specified Groups" +msgstr "指定的组" + +msgid "Specified Hosts and Groups" +msgstr "指定的主机和主机组" + +msgid "Specified Profiles" +msgstr "指定的配置文件" + +msgid "Specified Services and Groups" +msgstr "指定的服务和服务组" + +msgid "Specified Users and Groups" +msgstr "指定的用户和用户组" + +msgid "Specifies where to store keytab information." +msgstr "指定存储keytab信息的位置。" + +#, python-brace-format +msgid "Specify external ${entity}" +msgstr "指定外部的${entity}" + +msgid "Stage" +msgstr "呈现" + +msgid "Stage User" +msgstr "计划用户" + +msgid "Stage Users" +msgstr "计划用户" + +#, python-format +msgid "Stage user %s activated" +msgstr "计划用户%s已激活" + +msgid "Stage users" +msgstr "计划用户" + +msgid "Standard Record Types" +msgstr "标准记录类型" + +msgid "State/Province" +msgstr "州/省" + +msgid "Status" +msgstr "状态" + +msgid "Status of the role" +msgstr "角色状态" + +#, python-format +msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." +msgstr "停止副本更新段：要求\"%(pkey)s\"。" + +msgid "Store issued certificates" +msgstr "存储已发布证书" + +msgid "Street address" +msgstr "街道地址" + +msgid "Structured" +msgstr "有条理的" + +msgid "Subject" +msgstr "主题" + +msgid "Subject DN" +msgstr "证书持有者名字" + +#, python-format +msgid "Subject DN is already used by CA '%s'" +msgstr "主题DN已被CA'%s'使用" + +msgid "Subject DNS name" +msgstr "主题DNS名" + +msgid "Subject Distinguished Name" +msgstr "主题的专有名称" + +msgid "Subject EDI Party name" +msgstr "主题EDI参与方名称" + +msgid "Subject IP Address" +msgstr "主题IP地址" + +msgid "Subject Kerberos principal name" +msgstr "主题Kerberos主体名" + +msgid "Subject OID" +msgstr "主题OID" + +msgid "Subject Other Name" +msgstr "主题别名" + +msgid "Subject UPN" +msgstr "主题UPN" + +msgid "Subject URI" +msgstr "主题URI" + +msgid "Subject X.400 address" +msgstr "主题X.400地址" + +#, python-format +msgid "Subject alt name type %s is forbidden" +msgstr "主题alt名称类型%s被禁止" + +msgid "Subject directory name" +msgstr "主题目录名" + +msgid "Subject email address" +msgstr "主题电子邮件地址" + +msgid "Submit a certificate signing request." +msgstr "提交一个证书签名请求。" + +msgid "Subtree" +msgstr "子树" + +msgid "Subtype" +msgstr "子类型" + +msgid "Success" +msgstr "成功" + +msgid "Sudo Allow Command Groups" +msgstr "Sudo运行命令组" + +msgid "Sudo Allow Commands" +msgstr "Sudo允许命令" + +msgid "Sudo Command" +msgstr "Sudo命令" + +msgid "Sudo Command Group" +msgstr "Sudo命令组" + +msgid "Sudo Command Groups" +msgstr "Sudo命令组" + +msgid "Sudo Commands" +msgstr "Sudo命令" + +msgid "Sudo Deny Command Groups" +msgstr "Sudo阻止命令组" + +msgid "Sudo Deny Commands" +msgstr "Sudo阻止命令" + +msgid "Sudo Option" +msgstr "Sudo选项" + +msgid "Sudo Rule" +msgstr "Sudo规则" + +msgid "Sudo Rules" +msgstr "Sudo规则" + +msgid "Sudo order" +msgstr "Sudo命令" + +msgid "Suffix name" +msgstr "后缀名称" + +msgid "Superseded" +msgstr "作废的" + +#, c-format +msgid "Supported encryption types:\n" +msgstr "支持的加密类型：\n" + +msgid "Suppress processing of membership attributes." +msgstr "抑制成员属性的处理。" + +msgid "Sync OTP Token" +msgstr "同步OTP令牌" + +msgid "Synchronize an OTP token." +msgstr "同步一个OTP令牌。" + +#, python-format +msgid "Syntax Error: %(error)s" +msgstr "语法错误：%(error)s" + +msgid "System DNS records updated" +msgstr "系统DNS记录已更新" + +msgid "TA record" +msgstr "TA记录" + +msgid "TKEY record" +msgstr "TKEY记录" + +msgid "TLSA Certificate Association Data" +msgstr "TLSA证书关联数据" + +msgid "TLSA Certificate Usage" +msgstr "TLSA证书用途" + +msgid "TLSA Matching Type" +msgstr "TLSA匹配类型" + +msgid "TLSA Selector" +msgstr "TLSA选择器" + +msgid "TLSA record" +msgstr "TLSA记录" + +msgid "TOTP Synchronization Window" +msgstr "TOTP同步窗口" + +msgid "TOTP authentication Window" +msgstr "TOTP认证窗口" + +msgid "TOTP authentication time variance (seconds)" +msgstr "TOTP认证时间差异（秒）" + +msgid "TOTP synchronization time variance (seconds)" +msgstr "TOTP同步时间差异（秒）" + +msgid "TOTP token / IPA server time difference" +msgstr "TOTP令牌/IPA服务器时差" + +msgid "TSIG record" +msgstr "TSIG记录" + +msgid "TXT Text Data" +msgstr "TXT文本数据" + +msgid "TXT record" +msgstr "TXT记录" + +msgid "Target" +msgstr "目标" + +msgid "Target DN" +msgstr "目标DN" + +msgid "Target DN subtree" +msgstr "目标DN子树" + +msgid "Target Uniform Resource Identifier" +msgstr "目标统一资源标识符" + +msgid "Target Uniform Resource Identifier according to RFC 3986" +msgstr "目标统一资源标识符依据RFC 3986" + +msgid "Target group" +msgstr "目标组" + +msgid "Target host" +msgstr "目标主机" + +msgid "Target members of a group" +msgstr "一个组的目标成员" + +msgid "Target members of a group (sets memberOf targetfilter)" +msgstr "组目标成员（设置隶属于目标过滤器）" + +msgid "Target reverse zone not found." +msgstr "目标反向区域没有找到。" + +msgid "Target your own entry (self)" +msgstr "设定你自己的条目" + +msgid "Task DN" +msgstr "任务DN" + +#, python-format +msgid "Task DN = '%s'" +msgstr "任务DN = '%s'" + +msgid "Telephone Number" +msgstr "电话号码" + +msgid "Test the ACI syntax but don't write anything" +msgstr "测试ACI语法但不写任何东西" + +msgid "Text Data" +msgstr "文本数据" + +msgid "Text does not match field pattern" +msgstr "文本不匹配字段模式" + +msgid "" +"The --domain option cannot be used together with --add-domain or --del-" +"domain. Use --domain to specify the whole realm domain list explicitly, to " +"add/remove individual domains, use --add-domain/del-domain." +msgstr "" +"--domain选项不能和--add-domain或--del-domain选项一起使用。使用--domain来显示" +"地指定整个realm域列表，添加/删除个别域，使用--add-domain/--del-domain。" + +#, python-format +msgid "The ACI for permission %(name)s was not found in %(dn)s " +msgstr "ACI权限%(name)s在%(dn)s中没有找到" + +msgid "The IPA realm" +msgstr "IPA域" + #, python-format msgid "" "The _kerberos TXT record from domain %(domain)s could not be created " @@ -12067,551 +9981,45 @@ msgstr "" "不能移除域%(domain)s中的_kerberos TXT记录(%(error)s)。可能是因为该区域没有被" "IPA管理。请手动移除该记录。" -msgid "" -"No DNSSEC key master is installed. DNSSEC zone signing will not work until " -"the DNSSEC key master is installed." -msgstr "没有安装DNSSEC密钥主机。DNSSEC区域签名不会工作直到安装DNSSEC密钥主机。" - #, python-format -msgid "" -"Relative record name '%(record)s' contains the zone name '%(zone)s' as a " -"suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused " -"by a missing dot at the end of the name specification." -msgstr "" -"相对记录名'%(record)s'将区域名'%(zone)s'当作一个后缀，导致FQDN '%(fqdn)s'。这" -"通常是由于在名称规范后缺少一个点号引起的错误。" - -#, python-format -msgid "'%(command)s' is deprecated. %(additional_info)s" -msgstr "'%(command)s'已被弃用。%(additional_info)s" - -#, python-format -msgid "%(line)s" -msgstr "" - -#, python-format -msgid "Search result has been truncated: %(reason)s" -msgstr "查找结果被截断：%(reason)s" - -#, python-format -msgid "" -"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " -"trust-add' again." -msgstr "你对域%(domain)s的信任已中断。请再次运行'ipa trust-add'来重新创建它。" - -#, python-format -msgid "DNS record(s) of host %(host)s could not be removed. (%(reason)s)" -msgstr "主机%(host)s的DNS记录不能被移除。(%(reason)s)" - -msgid "" -"Forwarding policy conflicts with some automatic empty zones. Queries for " -"zones specified by RFC 6303 will ignore forwarding and recursion and always " -"result in NXDOMAIN answers. To override this behavior use forward policy " -"'only'." -msgstr "" - -#, python-format -msgid "Update of system record '%(record)s' failed with error: %(error)s" -msgstr "更新系统记录'%(record)s'失败：%(error)s" - -#, python-format -msgid "" -"IPA does not manage the zone %(zone)s, please add records to your DNS server " -"manually" -msgstr "IPA没有管理区域%(zone)s，请手动在你的DNS服务器上添加记录" - -msgid "" -"Automatic update of DNS system records failed. Please re-run update of " -"system records manually to get list of missing records." -msgstr "自动更新DNS系统记录失败。请手动重新运行更新系统记录来获取缺少的记录。" - -#, python-format -msgid "" -"Service %(service)s requires restart on IPA server %(server)s to apply " -"configuration changes." -msgstr "应用改变的配置需要在IPA服务器%(server)s上重启服务%(service)s。" - -#, python-format -msgid "" -"No DNS servers in IPA location %(location)s. Without DNS servers location is " -"not working as expected." -msgstr "" -"在IPA位置%(location)s没有DNS服务器。没有DNS服务器位置是不会按预期工作的。" - -#, python-format -msgid "%(subject)s: Malformed certificate. %(reason)s" -msgstr "" - -#, python-format -msgid "The host was added but the DNS update failed with: %(reason)s" -msgstr "" - -#, fuzzy, python-format -msgid "The certificate for %(ca)s is not available on this server." -msgstr "字符%(char)r是不允许的。" - -#, python-format -msgid "%(count)d variables" -msgstr "%(count)d个变量" - -#, python-format -msgid "%(count)d plugin loaded" -msgid_plural "%(count)d plugins loaded" -msgstr[0] "已加载%(count)d个插件" - -msgid "A dictionary representing an LDAP entry" -msgstr "一个字典代表一个LDAP条目" - -msgid "A list of LDAP entries" -msgstr "LDAP条目列表" - -msgid "All commands should at least have a result" -msgstr "所有命令至少有一个返回值" - -#, python-format -msgid "Enter %(label)s again to verify: " -msgstr "再次输入 %(label)s进行校验: " - -msgid "Passwords do not match!" -msgstr "密码不匹配！" - -msgid "No matching entries found" -msgstr "发现了不匹配的条目" - -msgid "Topic or Command" -msgstr "主题或命令" - -msgid "The topic or command name." -msgstr "主题或命令名。" - -msgid "Topic commands:" -msgstr "主题命令：" - -msgid "To get command help, use:" -msgstr "获取命令帮助，使用：" - -msgid " ipa --help" -msgstr "" - -msgid "Command name" -msgstr "命令名" - -msgid "Positional arguments" -msgstr "位置参数" - -#, python-format -msgid "Same as --%s" -msgstr "相同于 --%s" - -msgid "Deprecated options" -msgstr "已弃用的选项" - -msgid "No file to read" -msgstr "无文件可读" - -msgid "Results are truncated, try a more specific search" -msgstr "结果被截断，请尝试更明确的搜索" - -#, python-format -msgid "Unknown option: %(option)s" -msgstr "未知的选项：%(option)s" - -msgid "Client version. Used to determine if server will accept request." -msgstr "客户端版本。用来确定是否服务器接受请求。" - -#, python-format -msgid "%(filename)s: file not found" -msgstr "%(filename)s：文件没找到" - -#, fuzzy, python-brace-format -msgid "Unable to parse option {item}" -msgstr "服务解析主体\n" - -msgid "any of the configured servers" -msgstr "任何已配置的服务器" - -#, fuzzy -msgid "Exceeded number of tries to forward a request." -msgstr "重试认证的次数" - -msgid "Filename is empty" -msgstr "文件名为空" - -#, python-format -msgid "Permission denied: %(file)s" -msgstr "权限阻止：%(file)s" - -msgid "empty DNS label" -msgstr "空的DNS标签" - -msgid "DNS label cannot be longer that 63 characters" -msgstr "DNS标签不能长于63个字符" - -#, python-format -msgid "" -"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " -"with %(chars2)s" -msgstr "只允许字母，数字和%(chars)s。DNS标签不能以%(chars2)s开始或结束" - -#, fuzzy -msgid "single label {}s are not supported" -msgstr "主机不被支持" - -msgid "too many '@' characters" -msgstr "太多'@'字符" - -#, fuzzy -msgid "cannot be longer that {} characters" -msgstr "DNS标签不能长于63个字符" - -msgid "hostname contains empty label (consecutive dots)" -msgstr "主机名包含空的标签（连续的点）" - -msgid "not fully qualified" -msgstr "没有完全限制" - -msgid "invalid SSH public key" -msgstr "无效的SSH公钥" - -msgid "options are not allowed" -msgstr "选项是不允许的" - -msgid "invalid hostmask" -msgstr "无效的hostmask" - -#, python-format -msgid "query '%(owner)s %(rtype)s': %(error)s" -msgstr "查询'%(owner)s %(rtype)s'：%(error)s" - -#, python-format -msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" -msgstr "用EDNS0查询'%(owner)s %(rtype)s'：%(error)s" - -#, python-format -msgid "" -"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " -"data)" -msgstr "查询答案'%(owner)s %(rtype)s'缺少DNSSEC签名（没有RRSIG数据）" - -#, python-format -msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" -msgstr "记录'%(owner)s %(rtype)s'DNSSEC验证服务器 %(ip)s失败" - -msgid "invalid escape code in domain name" -msgstr "无效的域名转换代码" - -msgid "domain name cannot be longer than 255 characters" -msgstr "域名不能长于255个字符" - -msgid "DNS label cannot be longer than 63 characters" -msgstr "DNS标签不能长于63个字符" - -msgid "invalid domain name" -msgstr "无效的域名" - -#, python-format -msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" -msgstr "域名'%(domain)s'应该规范化：%(normalized)s" - -#, python-format -msgid "invalid domain-name: %s" -msgstr "无效的域名：%s" - -#, python-format -msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" -msgstr "无效的IP地址版本(是%(value)d，必须是%(required_value)d)!" - -msgid "invalid IP address format" -msgstr "无效的IP地址格式" - -#, python-format -msgid "%(port)s is not a valid port" -msgstr "%(port)s不是一个有效的端口" - -msgid "" -"at least one value equal to the canonical principal name must be present" -msgstr "必须存在至少一个值等同规范主体名称" - -msgid "realm or UPN suffix overlaps with trusted domain namespace" -msgstr "域或UPN后缀覆盖信任域命名空间" - -msgid "incorrect type" -msgstr "不正确的类型" - -msgid "Only one value is allowed" -msgstr "只允许一个值" - -msgid "this option is deprecated" -msgstr "该选项已被弃用" - -msgid "must be True or False" -msgstr "必须是True或False" - -msgid "must be an integer" -msgstr "必须是一个整数" - -#, python-format -msgid "must be at least %(minvalue)d" -msgstr "必须至少%(minvalue)d" - -#, python-format -msgid "can be at most %(maxvalue)d" -msgstr "最多%(maxvalue)d" - -msgid "must be a decimal number" -msgstr "必须是一个十进制数" - -#, python-format -msgid "must be at least %(minvalue)s" -msgstr "必须至少%(minvalue)s" - -#, python-format -msgid "can be at most %(maxvalue)s" -msgstr "最多%(maxvalue)s" - -#, python-format -msgid "" -"number class '%(cls)s' is not included in a list of allowed number classes: " -"%(allowed)s" -msgstr "数字类'%(cls)s'不在允许的数字类列表中：%(allowed)s" - -#, python-format -msgid "must match pattern \"%(pattern)s\"" -msgstr "必须匹配模式\"%(pattern)s\"" - -msgid "must be binary data" -msgstr "必须是二进制数据" - -#, python-format -msgid "must be at least %(minlength)d bytes" -msgstr "必须至少%(minlength)d字节" - -#, python-format -msgid "can be at most %(maxlength)d bytes" -msgstr "最多%(maxlength)d字节" - -#, python-format -msgid "must be exactly %(length)d bytes" -msgstr "必须恰好是%(length)d字节" - -#, fuzzy -msgid "must be a certificate" -msgstr "撤销证书。" - -#, fuzzy -msgid "must be a certificate signing request" -msgstr "提交一个证书签名请求。" - -#, python-format -msgid "Failure decoding Certificate Signing Request: %s" -msgstr "解码证书签名请求失败：%s" - -msgid "must be Unicode text" -msgstr "必须是Unicode文本" - -msgid "Leading and trailing spaces are not allowed" -msgstr "开头和结尾空格是不允许的" - -#, python-format -msgid "must be at least %(minlength)d characters" -msgstr "必须至少%(minlength)d字符" - -#, python-format -msgid "can be at most %(maxlength)d characters" -msgstr "最多%(maxlength)d字符" - -#, python-format -msgid "must be exactly %(length)d characters" -msgstr "必须恰好是%(length)d字符" +msgid "The automount key %(key)s with info %(info)s does not exist" +msgstr "信息为%(info)s的自动挂载键%(key)s不存在" #, python-format msgid "The character %(char)r is not allowed." msgstr "字符%(char)r是不允许的。" -#, python-format -msgid "must be '%(value)s'" -msgstr "必须是'%(value)s'" +msgid "The default users group cannot be removed" +msgstr "默认的用户组不成被删除" -#, python-format -msgid "must be one of %(values)s" -msgstr "必须是%(values)s中的一个" - -msgid "must be datetime value" -msgstr "必须是时间值" - -msgid "does not match any of accepted formats: " -msgstr "不匹配任何可接受的格式：" - -msgid "incomplete time value" -msgstr "不完整的时间值" - -msgid "must be DNS name" -msgstr "必须是DNS名" - -msgid "must be absolute" -msgstr "必须是绝对的" - -msgid "must be relative" -msgstr "必须是相对的" - -msgid "must be dictionary" -msgstr "必须是字典" - -msgid "must be Kerberos principal" -msgstr "必须是Kerberos主体" - -#, python-format -msgid "Malformed principal: '%(value)s'" -msgstr "有缺陷的主体：'%(value)s'" - -msgid "Service principal is required" -msgstr "需要服务主体" - -#, fuzzy -msgid "must be at least 0" -msgstr "必须至少%(minvalue)d" - -#, fuzzy -#| msgid "Invalid vault type" -msgid "invalid valid hex" -msgstr "无效的库类型" - -#, fuzzy -#| msgid "Minimum serial number" -msgid "invalid serial number 0" -msgstr "最小序列号" - -#, python-format -msgid "Retrieving CA cert chain failed: %s" -msgstr "检索CA证书链失败：%s" - -#, python-format -msgid "request failed with HTTP status %d" -msgstr "请求失败HTTP状态%d" - -#, python-format -msgid "Retrieving CA status failed: %s" -msgstr "检索CA状态失败：%s" - -#, python-format -msgid "Retrieving CA status failed with status %d" -msgstr "检索CA状态失败%d" - -#, python-format -msgid "objectclass %s not found" -msgstr "对象类%s没找到" - -msgid "Trusting forest" -msgstr "信任森林" - -msgid "Trusted forest" -msgstr "信任森林" - -msgid "Established and verified" -msgstr "已建立和验证" - -msgid "Waiting for confirmation by remote side" -msgstr "等待远程端的确认" - -msgid "Unknown" -msgstr "未知的" - -msgid "Non-Active Directory domain" -msgstr "非活动目录域" - -msgid "Active Directory domain" -msgstr "活动目录域" - -msgid "RFC4120-compliant Kerberos realm" -msgstr "RFC4120-兼容的Kerberos域" +msgid "The deny type has been deprecated." +msgstr "阻止类型已被弃用。" msgid "" -"Non-transitive external trust to a domain in another Active Directory forest" -msgstr "不传递外部信任到另一个活动目录森林的域中" - -#, fuzzy -msgid "Non-transitive external trust to an RFC4120-compliant Kerberos realm" -msgstr "不传递外部信任到另一个活动目录森林的域中" - -msgid "Failed to authenticate to CA REST API" -msgstr "CA REST API认证失败" +"The domain name of the target host or '.' if the service is decidedly not " +"available at this domain" +msgstr "目标主机的域名或是'.'如果服务在该域中明显不存在" #, python-format -msgid "Unable to communicate with CMS (status %d)" -msgstr "不能与CMS通信（状态%d）" +msgid "The following domains do not belong to this realm: %(domains)s" +msgstr "下面的域不属于该realm：%(domains)s" -#, fuzzy, python-format -msgid "Replication agreement for %(hostname)s not found" -msgstr "启用复制协议" +msgid "The group doesn't exist" +msgstr "组不存在" -msgid "automount location" -msgstr "自动挂载位置" +#, c-format +msgid "The hostname must be fully-qualified: %s\n" +msgstr "主机名必须是完全限制的：%s\n" -msgid "automount locations" -msgstr "自动挂载位置" +#, c-format +msgid "The hostname must not be: %s\n" +msgstr "主机名必须不能是：%s\n" -msgid "Automount Locations" -msgstr "自动挂载位置" +msgid "The hostname or IP (with or without port)" +msgstr "主机名或IP（有或没有端口）" -msgid "Automount Location" -msgstr "自动挂载位置" - -#, python-format -msgid "Added automount location \"%(value)s\"" -msgstr "已添加自动挂载位置\"%(value)s\"" - -#, python-format -msgid "Deleted automount location \"%(value)s\"" -msgstr "已删除自动挂载位置\"%(value)s\"" - -#, python-format -msgid "%(count)d automount location matched" -msgid_plural "%(count)d automount locations matched" -msgstr[0] "已匹配%(count)d个自动挂载位置" - -msgid "automount map" -msgstr "自动挂载映射" - -msgid "automount maps" -msgstr "自动挂载映射" - -msgid "Automount Maps" -msgstr "自动挂载映射" - -msgid "Automount Map" -msgstr "自动挂载映射" - -#, python-format -msgid "Added automount map \"%(value)s\"" -msgstr "已添加自动挂载映射\"%(value)s\"" - -#, python-format -msgid "Deleted automount map \"%(value)s\"" -msgstr "已删除自动挂载映射\"%(value)s\"" - -#, python-format -msgid "Modified automount map \"%(value)s\"" -msgstr "已修改自动挂载映射\"%(value)s\"" - -#, python-format -msgid "%(count)d automount map matched" -msgid_plural "%(count)d automount maps matched" -msgstr[0] "已匹配%(count)d个自动挂载映射" - -msgid "Automount key object." -msgstr "自动挂载键对象。" - -msgid "automount key" -msgstr "自动挂载键" - -msgid "automount keys" -msgstr "自动挂载键" - -msgid "Automount Keys" -msgstr "自动挂载键" - -msgid "Automount Key" -msgstr "自动挂载键" +msgid "The hostname this reverse record points to" +msgstr "反向记录指向的主机名" #, python-format msgid "" @@ -12620,1451 +10028,25 @@ msgid "" msgstr "“键，信息”对必须是唯一的。信息为%(info)s的键名%(key)s已存在" #, python-format -msgid "key named %(key)s already exists" -msgstr "键名%(key)s已存在" +msgid "The most common types for this type of zone are: %s\n" +msgstr "这种区域的最常见类型是： %s\n" -#, python-format -msgid "The automount key %(key)s with info %(info)s does not exist" -msgstr "信息为%(info)s的自动挂载键%(key)s不存在" +msgid "The number of times to retry authentication" +msgstr "重试认证的次数" -#, python-format -msgid "" -"More than one entry with key %(key)s found, use --info to select specific " -"entry." -msgstr "找到不止一个拥有键%(key)s的条目，使用--info来选择指定条目。" +msgid "The principal for this request doesn't exist." +msgstr "该请求的主题不存在。" -#, python-format -msgid "Added automount key \"%(value)s\"" -msgstr "已添加自动挂载键\"%(value)s\"" - -#, python-format -msgid "Added automount indirect map \"%(value)s\"" -msgstr "已添加自动间接映射\"%(value)s\"" - -msgid "mount point is relative to parent map, cannot begin with /" -msgstr "挂载点是相对于父映射的，不能以/开始" - -#, python-format -msgid "Deleted automount key \"%(value)s\"" -msgstr "已删除自动挂载键\"%(value)s\"" - -#, python-format -msgid "Modified automount key \"%(value)s\"" -msgstr "已修改自动挂载键\"%(value)s\"" - -#, python-format -msgid "%(count)d automount key matched" -msgid_plural "%(count)d automount keys matched" -msgstr[0] "已匹配%(count)d个自动挂载键" +msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "为主体获取一个keytab（例如：ftp/ftp.example.com@EXAMPLE.COM）" msgid "" -"\n" -"Manage Certificate Profiles\n" -"\n" -"Certificate Profiles are used by Certificate Authority (CA) in the signing " -"of\n" -"certificates to determine if a Certificate Signing Request (CSR) is " -"acceptable,\n" -"and if so what features and extensions will be present on the certificate.\n" -"\n" -"The Certificate Profile format is the property-list format understood by " -"the\n" -"Dogtag or Red Hat Certificate System CA.\n" -"\n" -"PROFILE ID SYNTAX:\n" -"\n" -"A Profile ID is a string without spaces or punctuation starting with a " -"letter\n" -"and followed by a sequence of letters, digits or underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Import a profile that will not store issued certificates:\n" -" ipa certprofile-import ShortLivedUserCert \\\n" -" --file UserCert.profile --desc \"User Certificates\" \\\n" -" --store=false\n" -"\n" -" Delete a certificate profile:\n" -" ipa certprofile-del ShortLivedUserCert\n" -"\n" -" Show information about a profile:\n" -" ipa certprofile-show ShortLivedUserCert\n" -"\n" -" Save profile configuration to a file:\n" -" ipa certprofile-show caIPAserviceCert --out caIPAserviceCert.cfg\n" -"\n" -" Search for profiles that do not store certificates:\n" -" ipa certprofile-find --store=false\n" -"\n" -"PROFILE CONFIGURATION FORMAT:\n" -"\n" -"The profile configuration format is the raw property-list format\n" -"used by Dogtag Certificate System. The XML format is not supported.\n" -"\n" -"The following restrictions apply to profiles managed by IPA:\n" -"\n" -"- When importing a profile the \"profileId\" field, if present, must\n" -" match the ID given on the command line.\n" -"\n" -"- The \"classId\" field must be set to \"caEnrollImpl\"\n" -"\n" -"- The \"auth.instance_id\" field must be set to \"raCertAuth\"\n" -"\n" -"- The \"certReqInputImpl\" input class and \"certOutputImpl\" output\n" -" class must be used.\n" -"\n" -msgstr "" - -msgid "CA is not configured" -msgstr "CA没有配置" - -msgid "invalid Profile ID" -msgstr "无效的配置文件ID" - -msgid "Certificate Profile" -msgstr "证书配置文件" - -msgid "Certificate Profiles" -msgstr "证书配置文件" - -msgid "Profile configuration" -msgstr "配置文件配置" - -#, python-format -msgid "%(count)d profile matched" -msgid_plural "%(count)d profiles matched" -msgstr[0] "已匹配%(count)d个配置文件" - -#, python-format -msgid "Imported profile \"%(value)s\"" -msgstr "已导入配置文件\"%(value)s\"" - -#, fuzzy, python-format -msgid "Profile data specifies profileId multiple times: %(values)s" -msgstr "多次指定输入数据" - -#, python-format -msgid "Profile ID '%(cli_value)s' does not match profile data '%(file_value)s'" -msgstr "配置文件ID '%(cli_value)s'与配置文件数据'%(file_value)s'不匹配" - -#, python-format -msgid "Deleted profile \"%(value)s\"" -msgstr "已删除配置文件\"%(value)s\"" - -#, python-format -msgid "Predefined profile '%(profile_id)s' cannot be deleted" -msgstr "预定义的配置文件'%(profile_id)s'不能被删除" - -#, python-format -msgid "Modified Certificate Profile \"%(value)s\"" -msgstr "已修改配置文件\"%(value)s\"" - -msgid "Certificate profiles cannot be renamed" -msgstr "证书配置文件不能被重命名" - -#, fuzzy -msgid "Insufficient privilege to modify a certificate profile." -msgstr "没有权限创建主题alt名为'%s'的证书。" - -msgid "delegation" -msgstr "授权" - -msgid "delegations" -msgstr "授权" - -msgid "Delegations" -msgstr "授权" - -msgid "Delegation" -msgstr "授权" - -#, fuzzy -msgid "ACI" -msgstr "ACIs" - -#, python-format -msgid "Added delegation \"%(value)s\"" -msgstr "已添加授权\"%(value)s\"" - -#, python-format -msgid "Deleted delegation \"%(value)s\"" -msgstr "已删除授权\"%(value)s\"" - -#, python-format -msgid "Modified delegation \"%(value)s\"" -msgstr "已修改授权\"%(value)s\"" - -#, python-format -msgid "%(count)d delegation matched" -msgid_plural "%(count)d delegations matched" -msgstr[0] "已匹配%(count)d个授权" +"The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM)" +msgstr "从keytab中待删除的主体（例如：ftp/ftp.example.com@EXAMPLE.COM）" msgid "" -"\n" -"DNS server configuration\n" -msgstr "" -"\n" -"DNS服务器配置\n" - -msgid "" -"\n" -"Manipulate DNS server configuration\n" -msgstr "" -"\n" -"设置DNS服务器配置\n" - -msgid "" -"\n" -" Show configuration of a specific DNS server:\n" -" ipa dnsserver-show\n" -msgstr "" - -msgid "" -"\n" -" Update configuration of a specific DNS server:\n" -" ipa dnsserver-mod\n" -msgstr "" - -msgid "DNS server" -msgstr "DNS服务器" - -msgid "DNS servers" -msgstr "DNS服务器" - -msgid "DNS Servers" -msgstr "DNS服务器" - -msgid "DNS Server" -msgstr "DNS服务器" - -msgid "DNS Server name" -msgstr "DNS服务器名" - -msgid "SOA mname override" -msgstr "SOA mname覆盖" - -msgid "SOA mname (authoritative server) override" -msgstr "SOA mname（权威服务器）覆盖" - -msgid "Forwarders" -msgstr "转发器" - -msgid "" -"Per-server forwarders. A custom port can be specified for each forwarder " -"using a standard format \"IP_ADDRESS port PORT\"" -msgstr "" -"Per-server转发器。使用标准格式\"IP_ADDRESS port PORT\"为每个转发器指定一个自" -"定义端口" - -msgid "" -"Per-server conditional forwarding policy. Set to \"none\" to disable " -"forwarding to global forwarder for this zone. In that case, conditional zone " -"forwarders are disregarded." -msgstr "" -"Per-server有条件的转发器策略。设置为\"none\"来禁止该区域转发至全局转发器。那" -"样的话，有条件的区域转发器被忽视了。" - -msgid "DNS is not configured" -msgstr "DNS没有配置" - -msgid "Modify DNS server configuration" -msgstr "修改DNS服务器配置" - -#, python-format -msgid "Modified DNS server \"%(value)s\"" -msgstr "已修改DNS服务器\"%(value)s\"" - -msgid "Search for DNS servers." -msgstr "查找DNS服务器。" - -#, python-format -msgid "%(count)d DNS server matched" -msgid_plural "%(count)d DNS servers matched" -msgstr[0] "已匹配%(count)d个DNS服务器" - -#, fuzzy -msgid "IPA DNS Server is not installed" -msgstr "KRA服务没有启用" - -msgid "Display configuration of a DNS server." -msgstr "显示一个DNS服务器配置。" - -msgid "Add a new DNS server." -msgstr "添加一个新的DNS服务器。" - -#, python-format -msgid "Added new DNS server \"%(value)s\"" -msgstr "已添加新的DNS服务器\"%(value)s\"" - -msgid "Delete a DNS server" -msgstr "删除一个DNS服务器" - -#, python-format -msgid "Deleted DNS server \"%(value)s\"" -msgstr "已删除DNS服务器\"%(value)s\"" - -#, fuzzy, python-brace-format -msgid "" -"Domain Level cannot be raised to {0}, existing replication conflicts have to " -"be resolved." -msgstr "域级别不能提高到{0}，服务器{1}不支持它。" - -msgid "Server does not support domain level functionality" -msgstr "" - -msgid "Domain Level cannot be lowered." -msgstr "域级别不能降低了。" - -#, python-brace-format -msgid "Domain Level cannot be raised to {0}, server {1} does not support it." -msgstr "域级别不能提高到{0}，服务器{1}不支持它。" - -msgid "" -"\n" -"Groups of users\n" -"\n" -"Manage groups of users, groups, or services. By default, new groups are " -"POSIX\n" -"groups. You can add the --nonposix option to the group-add command to mark " -"a\n" -"new group as non-POSIX. You can use the --posix argument with the group-mod\n" -"command to convert a non-POSIX group into a POSIX group. POSIX groups cannot " -"be\n" -"converted to non-POSIX groups.\n" -"\n" -"Every group must have a description.\n" -"\n" -"POSIX groups must have a Group ID (GID) number. Changing a GID is\n" -"supported but can have an impact on your file permissions. It is not " -"necessary\n" -"to supply a GID when creating a group. IPA will generate one automatically\n" -"if it is not provided.\n" -"\n" -"Groups members can be users, other groups, and Kerberos services. In POSIX\n" -"environments only users will be visible as group members, but nested groups " -"and\n" -"groups of services can be used for IPA management purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new group:\n" -" ipa group-add --desc='local administrators' localadmins\n" -"\n" -" Add a new non-POSIX group:\n" -" ipa group-add --nonposix --desc='remote administrators' remoteadmins\n" -"\n" -" Convert a non-POSIX group to posix:\n" -" ipa group-mod --posix remoteadmins\n" -"\n" -" Add a new POSIX group with a specific Group ID number:\n" -" ipa group-add --gid=500 --desc='unix admins' unixadmins\n" -"\n" -" Add a new POSIX group and let IPA assign a Group ID number:\n" -" ipa group-add --desc='printer admins' printeradmins\n" -"\n" -" Remove a group:\n" -" ipa group-del unixadmins\n" -"\n" -" To add the \"remoteadmins\" group to the \"localadmins\" group:\n" -" ipa group-add-member --groups=remoteadmins localadmins\n" -"\n" -" Add multiple users to the \"localadmins\" group:\n" -" ipa group-add-member --users=test1 --users=test2 localadmins\n" -"\n" -" To add Kerberos services to the \"printer admins\" group:\n" -" ipa group-add-member --services=CUPS/some.host printeradmins\n" -"\n" -" Remove a user from the \"localadmins\" group:\n" -" ipa group-remove-member --users=test2 localadmins\n" -"\n" -" Display information about a named group.\n" -" ipa group-show localadmins\n" -"\n" -"Group membership managers are users or groups that can add members to a\n" -"group or remove members from a group.\n" -"\n" -" Allow user \"test2\" to add or remove members from group \"localadmins\":\n" -" ipa group-add-member-manager --users=test2 localadmins\n" -"\n" -" Revoke membership management rights for user \"test2\" from \"localadmins" -"\":\n" -" ipa group-remove-member-manager --users=test2 localadmins\n" -"\n" -"External group membership is designed to allow users from trusted domains\n" -"to be mapped to local POSIX groups in order to actually use IPA resources.\n" -"External members should be added to groups that specifically created as\n" -"external and non-POSIX. Such group later should be included into one of " -"POSIX\n" -"groups.\n" -"\n" -"An external group member is currently a Security Identifier (SID) as defined " -"by\n" -"the trusted domain. When adding external group members, it is possible to\n" -"specify them in either SID, or DOM\\name, or name@domain format. IPA will " -"attempt\n" -"to resolve passed name to SID with the use of Global Catalog of the trusted " -"domain.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local POSIX " -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' ad_admins_external " -"--external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the " -"ad_admins_external\n" -" group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with ad_admins " -"POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see their " -"SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -msgstr "" - -msgid "groups" -msgstr "用户组" - -msgid "User Group" -msgstr "用户组" - -#, python-format -msgid "Added group \"%(value)s\"" -msgstr "已添加组\"%(value)s\"" - -msgid "gid cannot be set for external group" -msgstr "gid不能被设置为外部组" - -#, fuzzy -msgid "attribute \"gidNumber\" not allowed with --nonposix" -msgstr "不允许属性\"%s\"" - -#, python-format -msgid "Deleted group \"%(value)s\"" -msgstr "已删除组\"%(value)s\"" - -msgid "privileged group" -msgstr "特权组" - -#, python-format -msgid "Modified group \"%(value)s\"" -msgstr "已修改组\"%(value)s\"" - -#, python-format -msgid "%(count)d group matched" -msgid_plural "%(count)d groups matched" -msgstr[0] "已匹配%(count)d个组" - -msgid "" -"Cannot perform external member validation without Samba 4 support installed. " -"Make sure you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"没有安装Samba 4不能执行外部成员验证。确认你已经在IPA服务器上安装了server-" -"trust-ad子包" - -msgid "" -"Cannot perform join operation without own domain configured. Make sure you " -"have run ipa-adtrust-install on the IPA server first" -msgstr "" -"没有自己的域配置不能执行加入操作。首先确认你已经在IPA服务器上运行了ipa-" -"adtrust-install命令" - -#, python-format -msgid "Detached group \"%(value)s\" from user \"%(value)s\"" -msgstr "从用户\"%(value)s\"中分离组\"%(value)s\"" - -msgid "not allowed to modify user entries" -msgstr "不允许修改用户条目" - -msgid "not allowed to modify group entries" -msgstr "不允许修改组条目" - -msgid "Not a managed group" -msgstr "不是一个管理组" - -#, fuzzy -msgid "Add users that can manage members of this group." -msgstr "添加可以管理该令牌的用户" - -#, fuzzy -msgid "Remove users that can manage members of this group." -msgstr "移除可以管理该令牌的用户。" - -msgid "Host-based access control commands" -msgstr "基于主机访问控制命令" - -msgid "" -"\n" -"HBAC Services\n" -"\n" -"The PAM services that HBAC can control access to. The name used here\n" -"must match the service name that PAM is evaluating.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new HBAC service:\n" -" ipa hbacsvc-add tftp\n" -"\n" -" Modify an existing HBAC service:\n" -" ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n" -"\n" -" Search for HBAC services. This example will return two results, the FTP\n" -" service and the newly-added tftp service:\n" -" ipa hbacsvc-find ftp\n" -"\n" -" Delete an HBAC service:\n" -" ipa hbacsvc-del tftp\n" -"\n" -msgstr "" - -msgid "HBAC services" -msgstr "HBAC服务" - -msgid "HBAC Services" -msgstr "HBAC服务" - -msgid "HBAC Service" -msgstr "HBAC服务" - -#, python-format -msgid "Added HBAC service \"%(value)s\"" -msgstr "已添加HBAC服务\"%(value)s\"" - -#, python-format -msgid "Deleted HBAC service \"%(value)s\"" -msgstr "已删除HBAC服务\"%(value)s\"" - -#, python-format -msgid "Modified HBAC service \"%(value)s\"" -msgstr "已修改HBAC服务\"%(value)s\"" - -#, python-format -msgid "%(count)d HBAC service matched" -msgid_plural "%(count)d HBAC services matched" -msgstr[0] "已匹配%(count)d个HBAC服务" - -msgid "HBAC service group" -msgstr "HBAC服务组" - -msgid "HBAC service groups" -msgstr "HBAC服务组" - -msgid "HBAC Service Groups" -msgstr "HBAC服务组" - -msgid "HBAC Service Group" -msgstr "HBAC服务组" - -#, python-format -msgid "Added HBAC service group \"%(value)s\"" -msgstr "已添加HBAC服务组\"%(value)s\"" - -#, python-format -msgid "Deleted HBAC service group \"%(value)s\"" -msgstr "已删除HBAC服务组\"%(value)s\"" - -#, python-format -msgid "Modified HBAC service group \"%(value)s\"" -msgstr "已修改HBAC服务组\"%(value)s\"" - -#, python-format -msgid "%(count)d HBAC service group matched" -msgid_plural "%(count)d HBAC service groups matched" -msgstr[0] "已匹配%(count)d个HBAC服务组" - -msgid "" -"\n" -"Groups of hosts.\n" -"\n" -"Manage groups of hosts. This is useful for applying access control to a\n" -"number of hosts by using Host-based Access Control.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new host group:\n" -" ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n" -"\n" -" Add another new host group:\n" -" ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n" -"\n" -" Add members to the hostgroup (using Bash brace expansion):\n" -" ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n" -"\n" -" Add a hostgroup as a member of another hostgroup:\n" -" ipa hostgroup-add-member --hostgroups=baltimore maryland\n" -"\n" -" Remove a host from the hostgroup:\n" -" ipa hostgroup-remove-member --hosts=box2 baltimore\n" -"\n" -" Display a host group:\n" -" ipa hostgroup-show baltimore\n" -"\n" -" Add a member manager:\n" -" ipa hostgroup-add-member-manager --users=user1 baltimore\n" -"\n" -" Remove a member manager\n" -" ipa hostgroup-remove-member-manager --users=user1 baltimore\n" -"\n" -" Delete a hostgroup:\n" -" ipa hostgroup-del baltimore\n" -msgstr "" - -msgid "host groups" -msgstr "主机组" - -msgid "Host Group" -msgstr "主机组" - -#, python-format -msgid "Added hostgroup \"%(value)s\"" -msgstr "已添加主机组\"%(value)s\"" - -#, python-format -msgid "" -"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "网络组名\"%s\"已存在。主机组和网络组共享一个共同的名字空间" - -#, python-format -msgid "Deleted hostgroup \"%(value)s\"" -msgstr "已删除主机组\"%(value)s\"" - -msgid "hostgroup" -msgstr "主机组" - -msgid "privileged hostgroup" -msgstr "特权主机组" - -#, python-format -msgid "Modified hostgroup \"%(value)s\"" -msgstr "已修改主机组\"%(value)s\"" - -#, python-format -msgid "%(count)d hostgroup matched" -msgid_plural "%(count)d hostgroups matched" -msgstr[0] "已匹配%(count)d个主机组" - -#, fuzzy -msgid "Add users that can manage members of this hostgroup." -msgstr "添加可以管理该令牌的用户" - -#, fuzzy -msgid "Remove users that can manage members of this hostgroup." -msgstr "移除可以管理该令牌的用户。" - -msgid "" -"=======\n" -"WARNING:\n" -"\n" -"DNA plugin in 389-ds will allocate IDs based on the ranges configured for " -"the\n" -"local domain. Currently the DNA plugin *cannot* be reconfigured itself " -"based\n" -"on the local ranges set via this family of commands.\n" -"\n" -"Manual configuration change has to be done in the DNA plugin configuration " -"for\n" -"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n" -"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to " -"be\n" -"modified to match the new range.\n" -"=======\n" -msgstr "" - -msgid "" -"\n" -"ID ranges\n" -"\n" -"Manage ID ranges used to map Posix IDs to SIDs and back.\n" -"\n" -"There are two type of ID ranges which are both handled by this utility:\n" -"\n" -" - the ID ranges of the local domain\n" -" - the ID ranges of trusted remote domains\n" -"\n" -"Both types have the following attributes in common:\n" -"\n" -" - base-id: the first ID of the Posix ID range\n" -" - range-size: the size of the range\n" -"\n" -"With those two attributes a range object can reserve the Posix IDs starting\n" -"with base-id up to but not including base-id+range-size exclusively.\n" -"\n" -"Additionally an ID range of the local domain may set\n" -" - rid-base: the first RID(*) of the corresponding RID range\n" -" - secondary-rid-base: first RID of the secondary RID range\n" -"\n" -"and an ID range of a trusted domain must set\n" -" - rid-base: the first RID of the corresponding RID range\n" -" - sid: domain SID of the trusted domain\n" -"\n" -"and an ID range of a trusted domain may set\n" -" - auto-private-groups: [true|false|hybrid] automatic creation of private " -"groups\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for a trusted domain\n" -"\n" -"Since there might be more than one trusted domain the domain SID must be " -"given\n" -"while creating the ID range.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n" -" --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n" -"\n" -"This ID range is then used by the IPA server and the SSSD IPA provider to\n" -"assign Posix UIDs to users from the trusted domain.\n" -"\n" -"If e.g. a range for a trusted domain is configured with the following " -"values:\n" -" base-id = 1200000\n" -" range-size = 200000\n" -" rid-base = 0\n" -"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. " -"So\n" -"RID 1000 <-> Posix ID 1201000\n" -"\n" -"\n" -"\n" -"EXAMPLE: Add a new ID range for the local domain\n" -"\n" -"To create an ID range for the local domain it is not necessary to specify a\n" -"domain SID. But since it is possible that a user and a group can have the " -"same\n" -"value as Posix ID a second RID interval is needed to handle conflicts.\n" -"\n" -" ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n" -" --secondary-rid-base=1000000 local_range\n" -"\n" -"The data from the ID ranges of the local domain are used by the IPA server\n" -"internally to assign SIDs to IPA users and groups. The SID will then be " -"stored\n" -"in the user or group objects.\n" -"\n" -"If e.g. the ID range for the local domain is configured with the values " -"from\n" -"the example above then a new user with the UID 1200007 will get the RID " -"1007.\n" -"If this RID is already used by a group the RID will be 1000007. This can " -"only\n" -"happen if a user or a group object was created with a fixed ID because the\n" -"automatic assignment will not assign the same ID twice. Since there are " -"only\n" -"users and groups sharing the same ID namespace it is sufficient to have " -"only\n" -"one fallback range to handle conflicts.\n" -"\n" -"To find the Posix ID for a given RID from the local domain it has to be\n" -"checked first if the RID falls in the primary or secondary RID range and\n" -"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n" -"and the base-id has to be added to get the Posix ID.\n" -"\n" -"Typically the creation of ID ranges happens behind the scenes and this CLI\n" -"must not be used at all. The ID range for the local domain will be created\n" -"during installation or upgrade from an older version. The ID range for a\n" -"trusted domain will be created together with the trust by 'ipa trust-" -"add ...'.\n" -"\n" -"USE CASES:\n" -"\n" -" Add an ID range from a transitively trusted domain\n" -"\n" -" If the trusted domain (A) trusts another domain (B) as well and this " -"trust\n" -" is transitive 'ipa trust-add domain-A' will only create a range for\n" -" domain A. The ID range for domain B must be added manually.\n" -"\n" -" Add an additional ID range for the local domain\n" -"\n" -" If the ID range of the local domain is exhausted, i.e. no new IDs can " -"be\n" -" assigned to Posix users or groups by the DNA plugin, a new range has to " -"be\n" -" created to allow new users and groups to be added. (Currently there is " -"no\n" -" connection between this range CLI and the DNA plugin, but a future " -"version\n" -" might be able to modify the configuration of the DNS plugin as well)\n" -"\n" -"In general it is not necessary to modify or delete ID ranges. If there is " -"no\n" -"other way to achieve a certain configuration than to modify or delete an ID\n" -"range it should be done with great care. Because UIDs are stored in the " -"file\n" -"system and are used for access control it might be possible that users are\n" -"allowed to access files of other users if an ID range got deleted and " -"reused\n" -"for a different domain.\n" -"\n" -"(*) The RID is typically the last integer of a user or group SID which " -"follows\n" -"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user " -"from\n" -"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 is the RID of " -"the\n" -"user. RIDs are unique in a domain, 32bit values and are used for users and\n" -"groups.\n" -"\n" -msgstr "" - -msgid "ID Ranges" -msgstr "ID范围" - -msgid "ID Range" -msgstr "ID范围" - -msgid "local domain range" -msgstr "本地域范围" - -msgid "Active Directory domain range" -msgstr "活动目录域范围" - -msgid "Active Directory trust range with POSIX attributes" -msgstr "有POSIX属性的活动目录信任范围" - -msgid "ID range type, one of allowed values" -msgstr "" - -#, fuzzy -msgid "Auto private groups" -msgstr "没有私有组" - -#, fuzzy -msgid "Auto creation of private groups, one of allowed values" -msgstr "信任域ID范围的类型，是ipa-ad-trust-posix和ipa-ad-trust中的一个" - -msgid "" -"range modification leaving objects with ID out of the defined range is not " -"allowed" -msgstr "对象ID范围修改超出定义范围是不允许的" - -msgid "" -"Cannot perform SID validation without Samba 4 support installed. Make sure " -"you have installed server-trust-ad sub-package of IPA on the server" -msgstr "" -"没有安装Samba 4不能执行SID验证。确认你已经在IPA服务器上安装了server-trust-ad" -"子包" - -msgid "" -"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-" -"install on the IPA server first" -msgstr "" -"跨域信任没有配置。首先确认你已经在IPA服务器上运行了ipa-adtrust-install命令" - -msgid "SID is not recognized as a valid SID for a trusted domain" -msgstr "对于一个信任域来说，SID不被认为是一个有效的SID" - -msgid "" -"\n" -" Add new ID range.\n" -"\n" -" To add a new ID range you always have to specify\n" -"\n" -" --base-id\n" -" --range-size\n" -"\n" -" Additionally\n" -"\n" -" --rid-base\n" -" --secondary-rid-base\n" -"\n" -" may be given for a new ID range for the local domain while\n" -"\n" -" --auto-private-groups\n" -"\n" -" may be given for a new ID range for a trusted AD domain and\n" -"\n" -" --rid-base\n" -" --dom-sid\n" -"\n" -" must be given to add a new range for a trusted AD domain.\n" -"\n" -msgstr "" - -#, python-format -msgid "Added ID range \"%(value)s\"" -msgstr "已添加ID范围\"%(value)s\"" - -msgid "Options dom-sid and dom-name cannot be used together" -msgstr "选项dom-sid和dom-name不能被同时使用" - -#, fuzzy -msgid "Specified trusted domain name could not be found." -msgstr "信任域对象没有找到" - -msgid "Options dom-sid/dom-name and rid-base must be used together" -msgstr "选项dom-sid/dom-name和rid-base必须同时使用" - -msgid "" -"Option rid-base must not be used when IPA range type is ipa-ad-trust-posix" -msgstr "当IPA范围类型是ipa-ad-trust-posix时，选项rid-base不能使用" - -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of " -"the trusted domain is specified" -msgstr "" -"当信任域的SID被指定时，IPA范围类型必须是ipa-ad-trust或ipa-ad-trust-posix中的" -"一个" - -msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together" -msgstr "选项dom-sid/dom-name和secondary-rid-base不能同时使用" - -msgid "" -"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when " -"SID of the trusted domain is not specified." -msgstr "" -"当信任域的SID没有被指定时，IPA范围类型必不能是ipa-ad-trust或ipa-ad-trust-" -"posix。" - -#, fuzzy -msgid "" -"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when auto-" -"private-groups is specified" -msgstr "" -"当信任域的SID被指定时，IPA范围类型必须是ipa-ad-trust或ipa-ad-trust-posix中的" -"一个" - -msgid "Options secondary-rid-base and rid-base must be used together" -msgstr "选项secondary-rid-base和rid-base必须同时使用" - -msgid "Primary RID range and secondary RID range cannot overlap" -msgstr "主要RID范围和次要RID范围不能覆盖" - -msgid "" -"You must specify both rid-base and secondary-rid-base options, because ipa-" -"adtrust-install has already been run." -msgstr "" -"你必须同时指定 rid-base和secondary-rid-base选项，因为ipa-adtrust-install已经" -"运行了。" - -#, python-format -msgid "Deleted ID range \"%(value)s\"" -msgstr "已删除ID范围\"%(value)s\"" - -#, python-format -msgid "%(count)d range matched" -msgid_plural "%(count)d ranges matched" -msgstr[0] "已匹配%(count)d个范围" - -#, fuzzy -msgid "" -"Modify ID range.\n" -"\n" -msgstr "修改ID范围。" - -#, python-format -msgid "Modified ID range \"%(value)s\"" -msgstr "已修改ID范围\"%(value)s\"" - -msgid "" -"This command can not be used to change ID allocation for local IPA domain. " -"Run `ipa help idrange` for more information" -msgstr "" -"这个命令在本地IPA域中不能用来改变ID分配。运行`ipa help idrange`查看更多信息" - -msgid "" -"SID for the specified trusted domain name could not be found. Please specify " -"the SID directly using dom-sid option." -msgstr "指定信任域名的SID没有找到。请使用dom-sid选项直接指定SID。" - -msgid "Options dom-sid and secondary-rid-base cannot be used together" -msgstr "选项dom-sid和secondary-rid-base不能同时使用" - -msgid "Options dom-sid and rid-base must be used together" -msgstr "选项dom-sid和rid-base必须同时使用" - -#, python-format -msgid "" -"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry " -"'%s'." -msgstr "对条目'%s'的'krbLastPwdChange'属性没有'write'权限。" - -msgid "" -"\n" -"IPA locations\n" -msgstr "" -"\n" -"IPA位置\n" - -msgid "" -"\n" -"Manipulate DNS locations\n" -msgstr "" -"\n" -"设置DNS位置\n" - -msgid "" -"\n" -" Find all locations:\n" -" ipa location-find\n" -msgstr "" - -msgid "" -"\n" -" Show specific location:\n" -" ipa location-show location\n" -msgstr "" - -msgid "" -"\n" -" Add location:\n" -" ipa location-add location --description 'My location'\n" -msgstr "" - -msgid "" -"\n" -" Delete location:\n" -" ipa location-del location\n" -msgstr "" - -msgid "location" -msgstr "位置" - -msgid "locations" -msgstr "位置" - -msgid "IPA Locations" -msgstr "IPA位置" - -msgid "IPA Location" -msgstr "IPA位置" - -msgid "Location name" -msgstr "位置名" - -msgid "IPA location name" -msgstr "IPA位置名" - -msgid "IPA Location description" -msgstr "IPA本地描述" - -msgid "Servers" -msgstr "服务器" - -msgid "Servers that belongs to the IPA location" -msgstr "属于IPA位置的服务器" - -msgid "Advertised by servers" -msgstr "由服务器公布" - -msgid "List of servers which advertise the given location" -msgstr "公布给出位置的服务器列表" - -msgid "Add a new IPA location." -msgstr "添加一个新的IPA位置。" - -#, python-format -msgid "Added IPA location \"%(value)s\"" -msgstr "已添加IPA位置\"%(value)s\"" - -msgid "Delete an IPA location." -msgstr "删除一个IPA位置。" - -#, python-format -msgid "Deleted IPA location \"%(value)s\"" -msgstr "已删除IPA位置\"%(value)s\"" - -msgid "IPA Server" -msgstr "IPA服务器" - -msgid "Modify information about an IPA location." -msgstr "修改一个IPA位置信息。" - -#, python-format -msgid "Modified IPA location \"%(value)s\"" -msgstr "已修改IPA位置\"%(value)s\"" - -msgid "Search for IPA locations." -msgstr "查找IPA位置。" - -#, python-format -msgid "%(count)d IPA location matched" -msgid_plural "%(count)d IPA locations matched" -msgstr[0] "已匹配%(count)d个IPA位置" - -msgid "Display information about an IPA location." -msgstr "显示一个IPA位置信息。" - -msgid "Servers in location" -msgstr "本地服务器" - -msgid "netgroups" -msgstr "网络组" - -msgid "Netgroups" -msgstr "网络组" - -msgid "Netgroup" -msgstr "网络组" - -#, python-format -msgid "Added netgroup \"%(value)s\"" -msgstr "已添加网络组\"%(value)s\"" - -#, python-format -msgid "" -"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " -"common namespace" -msgstr "主机组名\"%s\"已存在。主机组和网络组共享一个共同的名字空间" - -#, python-format -msgid "Deleted netgroup \"%(value)s\"" -msgstr "已删除网络组\"%(value)s\"" - -#, python-format -msgid "Modified netgroup \"%(value)s\"" -msgstr "已修改网络组\"%(value)s\"" - -msgid "user category cannot be set to 'all' while there are allowed users" -msgstr "用户类别不能设置为all'，虽然有允许用户" - -msgid "host category cannot be set to 'all' while there are allowed hosts" -msgstr "主机类别不能设置为all'，虽然有允许主机" - -#, python-format -msgid "%(count)d netgroup matched" -msgid_plural "%(count)d netgroups matched" -msgstr[0] "已匹配%(count)d个网络组" - -msgid "One time password commands" -msgstr "一次性密码命令" - -msgid "OTP configuration options" -msgstr "OTP配置选项" - -msgid "OTP Configuration" -msgstr "OTP配置" - -msgid "" -"\n" -"OTP Tokens\n" -msgstr "" -"\n" -"OTP令牌\n" - -msgid "" -"\n" -"Manage OTP tokens.\n" -msgstr "" -"\n" -"管理OTP 令牌。\n" - -msgid "" -"\n" -"IPA supports the use of OTP tokens for multi-factor authentication. This\n" -"code enables the management of OTP tokens.\n" -msgstr "" -"\n" -"IPA支持使用OTP令牌来多因素认证。这个码能管理OTP令牌。\n" - -#, fuzzy -msgid "" -"\n" -" Add a new token:\n" -" ipa otptoken-add --type=totp --owner=jdoe --desc=\"My soft token\"\n" -msgstr "" -"\n" -" 增加一个新的令牌：\n" -" ipa otptoken-add-yubikey --owner=jdoe --desc=\"My YubiKey\"\n" - -msgid "" -"\n" -" Examine the token:\n" -" ipa otptoken-show a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "" -"\n" -" Change the vendor:\n" -" ipa otptoken-mod a93db710-a31a-4639-8647-f15b2c70b78a --vendor=\"Red Hat" -"\"\n" -msgstr "" - -msgid "" -"\n" -" Delete a token:\n" -" ipa otptoken-del a93db710-a31a-4639-8647-f15b2c70b78a\n" -msgstr "" - -msgid "OTP token" -msgstr "OTP令牌" - -msgid "OTP tokens" -msgstr "OTP令牌" - -msgid "OTP Tokens" -msgstr "OTP令牌" - -msgid "OTP Token" -msgstr "OTP令牌" - -#, fuzzy -msgid "URI" -msgstr "UID" - -#, python-format -msgid "Added OTP token \"%(value)s\"" -msgstr "已添加OTP令牌\"%(value)s\"" - -msgid "cannot be empty" -msgstr "不能为空" - -#, python-format -msgid "Deleted OTP token \"%(value)s\"" -msgstr "已删除OTP令牌\"%(value)s\"" - -#, python-format -msgid "Modified OTP token \"%(value)s\"" -msgstr "已修改OTP令牌\"%(value)s\"" - -#, python-format -msgid "%(count)d OTP token matched" -msgid_plural "%(count)d OTP tokens matched" -msgstr[0] "已匹配%(count)d个OTP令牌" - -msgid "" -"\n" -"Set a user's password\n" -"\n" -"If someone other than a user changes that user's password (e.g., Helpdesk\n" -"resets it) then the password will need to be changed the first time it\n" -"is used. This is so the end-user is the only one who knows the password.\n" -"\n" -"The IPA password policy controls how often a password may be changed,\n" -"what strength requirements exist, and the length of the password history.\n" -"\n" -"If the user authentication method is set to password+OTP, the user should\n" -"pass the --otp option when resetting the password.\n" -"\n" -"EXAMPLES:\n" -"\n" -" To reset your own password:\n" -" ipa passwd\n" -"\n" -" To reset your own password when password+OTP is set as authentication " -"method:\n" -" ipa passwd --otp\n" -"\n" -" To change another user's password:\n" -" ipa passwd tuser1\n" -msgstr "" - -msgid "The OTP if the user has a token configured" -msgstr "" - -#, python-format -msgid "Changed password for \"%(value)s\"" -msgstr "已改变\"%(value)s\"的密码" - -msgid "" -"\n" -"Kerberos PKINIT feature status reporting tools.\n" -"\n" -"Report IPA masters on which Kerberos PKINIT is enabled or disabled\n" -"\n" -"EXAMPLES:\n" -" List PKINIT status on all masters:\n" -" ipa pkinit-status\n" -"\n" -" Check PKINIT status on `ipa.example.com`:\n" -" ipa pkinit-status --server ipa.example.com\n" -"\n" -" List all IPA masters with disabled PKINIT:\n" -" ipa pkinit-status --status='disabled'\n" -"\n" -"For more info about PKINIT support see:\n" -"\n" -"https://www.freeipa.org/page/V4/Kerberos_PKINIT\n" -msgstr "" - -msgid "pkinit" -msgstr "" - -msgid "PKINIT" -msgstr "" - -#, fuzzy -msgid "PKINIT status" -msgstr "信任状态" - -#, fuzzy -msgid "Whether PKINIT is enabled or disabled" -msgstr "条目不能被启用或禁用" - -msgid "Report PKINIT status on the IPA masters" -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s server matched" -msgid_plural "%(count)s servers matched" -msgstr[0] "已匹配%(count)s个服务器角色" - -msgid "" -"\n" -"RADIUS Proxy Servers\n" -msgstr "" -"\n" -"RADIUS代理服务器\n" - -msgid "" -"\n" -"Manage RADIUS Proxy Servers.\n" -msgstr "" -"\n" -"管理RADIUS代理服务器。\n" - -msgid "" -"\n" -"IPA supports the use of an external RADIUS proxy server for krb5 OTP\n" -"authentications. This permits a great deal of flexibility when\n" -"integrating with third-party authentication services.\n" -msgstr "" -"\n" -"IPA对于krb5 OTP认证支持使用额外的RADIUS代理服务器。这在集成第三方认证服务时提" -"供了很多方便。\n" - -msgid "" -"\n" -" Add a new server:\n" -" ipa radiusproxy-add MyRADIUS --server=radius.example.com:1812\n" -msgstr "" - -msgid "" -"\n" -" Find all servers whose entries include the string \"example.com\":\n" -" ipa radiusproxy-find example.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration:\n" -" ipa radiusproxy-show MyRADIUS\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa radiusproxy-mod MyRADIUS --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete a configuration:\n" -" ipa radiusproxy-del MyRADIUS\n" -msgstr "" - -msgid "invalid attribute name" -msgstr "无效的属性名" - -msgid "invalid port number" -msgstr "无效的端口号" - -msgid "RADIUS proxy server" -msgstr "RADIUS代理服务器" - -msgid "RADIUS proxy servers" -msgstr "RADIUS代理服务器" - -msgid "RADIUS Servers" -msgstr "RADIUS代理服务器" - -msgid "RADIUS Server" -msgstr "RADIUS代理服务器" - -#, python-format -msgid "Added RADIUS proxy server \"%(value)s\"" -msgstr "已添加RADIUS代理服务器\"%(value)s\"" - -#, python-format -msgid "Deleted RADIUS proxy server \"%(value)s\"" -msgstr "已删除RADIUS代理服务器\"%(value)s\"" - -#, python-format -msgid "Modified RADIUS proxy server \"%(value)s\"" -msgstr "已修改RADIUS代理服务器\"%(value)s\"" - -#, python-format -msgid "%(count)d RADIUS proxy server matched" -msgid_plural "%(count)d RADIUS proxy servers matched" -msgstr[0] "已匹配%(count)d个RADIUS代理服务器" - -msgid "" -"\n" -"Realm domains\n" -"\n" -"Manage the list of domains associated with IPA realm.\n" -"\n" -"This list is useful for Domain Controllers from other realms which have\n" -"established trust with this IPA realm. They need the information to know\n" -"which request should be forwarded to KDC of this IPA realm.\n" -"\n" -"Automatic management: a domain is automatically added to the realm domains\n" -"list when a new DNS Zone managed by IPA is created. Same applies for " -"deletion.\n" -"\n" -"Externally managed DNS: domains which are not managed in IPA server DNS\n" -"need to be manually added to the list using ipa realmdomains-mod command.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Display the current list of realm domains:\n" -" ipa realmdomains-show\n" -"\n" -" Replace the list of realm domains:\n" -" ipa realmdomains-mod --domain=example.com\n" -" ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n" -"\n" -" Add a domain to the list of realm domains:\n" -" ipa realmdomains-mod --add-domain=newdomain.com\n" -"\n" -" Delete a domain from the list of realm domains:\n" -" ipa realmdomains-mod --del-domain=olddomain.com\n" -msgstr "" - -msgid "Realm domains" -msgstr "Realm域" - -msgid "Realm Domains" -msgstr "Realm域" - -msgid "" -"\n" -" Modify realm domains\n" -"\n" -" DNS check: When manually adding a domain to the list, a DNS check is\n" -" performed by default. It ensures that the domain is associated with\n" -" the IPA realm, by checking whether the domain has a _kerberos TXT " -"record\n" -" containing the IPA realm name. This check can be skipped by specifying\n" -" --force option.\n" -"\n" -" Removal: when a realm domain which has a matching DNS zone managed by\n" -" IPA is being removed, a corresponding _kerberos TXT record in the zone " -"is\n" -" removed automatically as well. Other records in the zone or the zone\n" -" itself are not affected.\n" -" " -msgstr "" - -#, python-format -msgid "" -"DNS zone for each realmdomain must contain SOA or NS records. No records " -"found for: %s" -msgstr "DNS区域的每个realm域必须包括SOA或NS记录。没有找到记录：%s" - -#, python-format -msgid "The following domains do not belong to this realm: %(domains)s" -msgstr "下面的域不属于该realm：%(domains)s" +"The realm for the principal does not match the realm for this IPA server" +msgstr "主体域在该IPA服务器域中不匹配" #, python-format msgid "" @@ -14076,2535 +10058,222 @@ msgstr "" "个包含\"%(realm)s\"的_kerberos TXT记录。" msgid "" -"The --domain option cannot be used together with --add-domain or --del-" -"domain. Use --domain to specify the whole realm domain list explicitly, to " -"add/remove individual domains, use --add-domain/del-domain." +"The schema used on the LDAP server. Supported values are RFC2307 and " +"RFC2307bis. The default is RFC2307bis" msgstr "" -"--domain选项不能和--add-domain或--del-domain选项一起使用。使用--domain来显示" -"地指定整个realm域列表，添加/删除个别域，使用--add-domain/--del-domain。" - -msgid "IPA server domain cannot be omitted" -msgstr "IPA服务器域不能被省略" - -msgid "IPA server domain cannot be deleted" -msgstr "IPA服务器域不能被删除" - -msgid "roles" -msgstr "角色" - -msgid "Role" -msgstr "角色" - -#, python-format -msgid "Added role \"%(value)s\"" -msgstr "已添加角色\"%(value)s\"" - -#, python-format -msgid "Deleted role \"%(value)s\"" -msgstr "已删除角色\"%(value)s\"" - -#, python-format -msgid "Modified role \"%(value)s\"" -msgstr "已修改角色\"%(value)s\"" - -#, python-format -msgid "%(count)d role matched" -msgid_plural "%(count)d roles matched" -msgstr[0] "已匹配%(count)d个角色" - -msgid "self service permission" -msgstr "自助服务权限" - -msgid "self service permissions" -msgstr "自助服务权限" - -msgid "Self Service Permissions" -msgstr "自助服务权限" - -msgid "Self Service Permission" -msgstr "自助服务权限" - -#, python-format -msgid "Added selfservice \"%(value)s\"" -msgstr "已添加自助服务\"%(value)s\"" - -#, python-format -msgid "Deleted selfservice \"%(value)s\"" -msgstr "已删除自助服务\"%(value)s\"" - -#, python-format -msgid "Modified selfservice \"%(value)s\"" -msgstr "已修改自助服务\"%(value)s\"" - -#, python-format -msgid "%(count)d selfservice matched" -msgid_plural "%(count)d selfservices matched" -msgstr[0] "已匹配%(count)d个自助服务" - -msgid "" -"\n" -"IPA server roles\n" -msgstr "" -"\n" -"IPA服务器角色\n" - -msgid "" -"\n" -"Get status of roles (DNS server, CA, etc.) provided by IPA masters.\n" -msgstr "" -"\n" -"获取由IPA主服务器提供的角色（DNS服务器，CA等）状态。\n" - -msgid "" -"\n" -"The status of a role is either enabled, configured, or absent.\n" -msgstr "" - -msgid "" -"\n" -" Show status of 'DNS server' role on a server:\n" -" ipa server-role-show ipa.example.com \"DNS server\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all roles containing 'AD' on a server:\n" -" ipa server-role-find --server ipa.example.com --role=\"AD trust " -"controller\"\n" -msgstr "" - -msgid "" -"\n" -" Show status of all configured roles on a server:\n" -" ipa server-role-find ipa.example.com\n" -msgstr "" - -msgid "" -"\n" -" Show implicit IPA master role:\n" -" ipa server-role-find --include-master\n" -msgstr "" - -msgid "server role" -msgstr "服务器角色" - -msgid "server roles" -msgstr "服务器角色" - -msgid "IPA Server Roles" -msgstr "IPA服务器角色" - -msgid "IPA Server Role" -msgstr "IPA服务器角色" - -msgid "IPA server role name" -msgstr "IPA服务器角色名" - -msgid "Role status" -msgstr "角色状态" - -msgid "Status of the role" -msgstr "角色状态" - -msgid "Show role status on a server" -msgstr "显示服务器角色状态" - -msgid "Find a server role on a server(s)" -msgstr "在服务器上找到一个服务器角色" - -#, python-format -msgid "%(count)s server role matched" -msgid_plural "%(count)s server roles matched" -msgstr[0] "已匹配%(count)s个服务器角色" - -#, fuzzy -msgid "Include IPA master entries" -msgstr "包含的属性" - -msgid "IPA role name" -msgstr "IPA角色名" - -#, python-brace-format -msgid "{role}: role not found" -msgstr "{role}：角色没有找到" - -#, python-brace-format -msgid "{attr}: no such attribute" -msgstr "{attr}：没有这样的属性" - -msgid "" -"\n" -"Service Constrained Delegation\n" -"\n" -"Manage rules to allow constrained delegation of credentials so\n" -"that a service can impersonate a user when communicating with another\n" -"service without requiring the user to actually forward their TGT.\n" -"This makes for a much better method of delegating credentials as it\n" -"prevents exposure of the short term secret of the user.\n" -"\n" -"The naming convention is to append the word \"target\" or \"targets\" to\n" -"a matching rule name. This is not mandatory but helps conceptually\n" -"to associate rules and targets.\n" -"\n" -"A rule consists of two things:\n" -" - A list of targets the rule applies to\n" -" - A list of memberPrincipals that are allowed to delegate for\n" -" those targets\n" -"\n" -"A target consists of a list of principals that can be delegated.\n" -"\n" -"In English, a rule says that this principal can delegate as this\n" -"list of principals, as defined by these targets.\n" -"\n" -"In both a rule and a target Kerberos principals may be specified\n" -"by their name or an alias and the realm can be omitted. Additionally,\n" -"hosts can be specified by their names. If Kerberos principal specified\n" -"has a single component and does not end with '$' sign, it will be treated\n" -"as a host name. Kerberos principal names ending with '$' are typically\n" -"used as aliases for Active Directory-related services.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new constrained delegation rule:\n" -" ipa servicedelegationrule-add ftp-delegation\n" -"\n" -" Add a new constrained delegation target:\n" -" ipa servicedelegationtarget-add ftp-delegation-target\n" -"\n" -" Add a principal to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ftp/ipa.example." -"com ftp-delegation\n" -"\n" -" Add a host principal of the host 'ipa.example.com' to the rule:\n" -" ipa servicedelegationrule-add-member --principals=ipa.example.com " -"ftp-delegation\n" -"\n" -" Add our target to the rule:\n" -" ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-" -"delegation-target ftp-delegation\n" -"\n" -" Add a principal to the target:\n" -" ipa servicedelegationtarget-add-member --principals=ldap/ipa.example." -"com ftp-delegation-target\n" -"\n" -" Display information about a named delegation rule and target:\n" -" ipa servicedelegationrule_show ftp-delegation\n" -" ipa servicedelegationtarget_show ftp-delegation-target\n" -"\n" -" Remove a constrained delegation:\n" -" ipa servicedelegationrule-del ftp-delegation-target\n" -" ipa servicedelegationtarget-del ftp-delegation\n" -"\n" -"In this example the ftp service can get a TGT for the ldap service on\n" -"the bound user's behalf.\n" -"\n" -"It is strongly discouraged to modify the delegations that ship with\n" -"IPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\n" -"ipa-ldap-delegation-targets. Incorrect changes can remove the ability\n" -"to delegate, causing the framework to stop functioning.\n" -msgstr "" - -msgid "Allowed to Impersonate" -msgstr "允许模仿" - -msgid "Member principals" -msgstr "成员主体" - -#, fuzzy, python-format -msgid "Malformed principal: %(error)s" -msgstr "有缺陷的主体：'%(value)s'" - -msgid "Add target to a named service delegation." -msgstr "添加目标到一个命名服务授权。" - -#, python-format -msgid "member %s" -msgstr "成员%s" - -msgid "Remove member from a named service delegation." -msgstr "从一个命名服务授权中删除成员。" - -msgid "service delegation rule" -msgstr "服务授权规则" - -msgid "service delegation rules" -msgstr "服务授权规则" - -msgid "Service delegation rules" -msgstr "服务授权规则" - -msgid "Service delegation rule" -msgstr "服务授权规则" - -#, python-format -msgid "Added service delegation rule \"%(value)s\"" -msgstr "已添加服务授权规则\"%(value)s\"" - -#, python-format -msgid "Deleted service delegation \"%(value)s\"" -msgstr "已删除服务授权规则\"%(value)s\"" - -msgid "privileged service delegation rule" -msgstr "特权服务授权规则" - -#, python-format -msgid "%(count)d service delegation rule matched" -msgid_plural "%(count)d service delegation rules matched" -msgstr[0] "已匹配%(count)d个服务授权规则" - -msgid "service delegation target" -msgstr "服务授权目标" - -msgid "service delegation targets" -msgstr "服务授权目标" - -msgid "Service delegation targets" -msgstr "服务授权目标" - -msgid "Service delegation target" -msgstr "服务授权目标" - -#, python-format -msgid "Added service delegation target \"%(value)s\"" -msgstr "已添加服务授权目标\"%(value)s\"" - -#, python-format -msgid "Deleted service delegation target \"%(value)s\"" -msgstr "已删除服务授权目标\"%(value)s\"" - -msgid "privileged service delegation target" -msgstr "特权服务授权目标" - -#, python-format -msgid "%(count)d service delegation target matched" -msgid_plural "%(count)d service delegation targets matched" -msgstr[0] "已匹配%(count)d个服务授权目标" - -msgid "" -"\n" -"Session Support for IPA\n" -msgstr "" - -msgid "" -"\n" -"Subordinate ids\n" -"\n" -"Manage subordinate user and group ids for users\n" -"\n" -"EXAMPLES:\n" -"\n" -" Auto-assign a subordinate id range to current user\n" -" ipa subid-generate\n" -"\n" -" Auto-assign a subordinate id range to user alice:\n" -" ipa subid-generate --owner=alice\n" -"\n" -" Find subordinate ids for user alice:\n" -" ipa subid-find --owner=alice\n" -"\n" -" Match entry by any subordinate uid in range:\n" -" ipa subid-match --subuid=2147483649\n" -msgstr "" - -msgid "Subordinate id" -msgstr "" - -msgid "Subordinate ids" -msgstr "" - -#, fuzzy -msgid "Subordinate id description" -msgstr "配置文件描述" - -msgid "Owning user of subordinate id entry" -msgstr "" - -msgid "SubUID range start" -msgstr "" - -msgid "Start value for subordinate user ID (subuid) range" -msgstr "" - -#, fuzzy -msgid "SubUID range size" -msgstr "范围大小" - -msgid "Subordinate user ID count" -msgstr "" - -msgid "SubGID range start" -msgstr "" - -msgid "Start value for subordinate group ID (subgid) range" -msgstr "" - -#, fuzzy -msgid "SubGID range size" -msgstr "范围大小" - -msgid "Subordinate group ID count" -msgstr "" - -#, fuzzy, python-format -msgid "" -"%(oname)s with with name \"%(pkey)s\" or for user \"%(uid)s\" already exists." -msgstr "名为\"%(pkey)s\"的%(oname)s已存在" - -#, fuzzy, python-format -msgid "'%(dn)s is not a valid user" -msgstr "%(port)s不是一个有效的端口" - -msgid "subgidnumber must be equal to subuidnumber" -msgstr "" - -#, fuzzy -msgid "Add a new subordinate id." -msgstr "添加一个新用户。" - -#, fuzzy, python-format -msgid "Added subordinate id \"%(value)s\"" -msgstr "已添加服务\"%(value)s\"" - -#, fuzzy -msgid "Delete a subordinate id." -msgstr "删除一个证书配置文件。" - -#, fuzzy, python-format -msgid "Deleted subordinate id \"%(value)s\"" -msgstr "已删除服务\"%(value)s\"" - -#, fuzzy -msgid "Modify a subordinate id." -msgstr "修改一个计划用户。" - -#, fuzzy, python-format -msgid "Modified subordinate id \"%(value)s\"" -msgstr "已修改服务\"%(value)s\"" - -#, fuzzy -msgid "Search for subordinate id." -msgstr "查找范围。" - -#, fuzzy, python-format -msgid "%(count)d subordinate id matched" -msgid_plural "%(count)d subordinate ids matched" -msgstr[0] "已匹配%(count)d个服务" - -#, fuzzy -msgid "Display information about a subordinate id." -msgstr "显示范围信息。" - -msgid "Generate and auto-assign subuid and subgid range to user entry" -msgstr "" - -msgid "Match users by any subordinate uid in their range" -msgstr "" - -msgid "SubUID match" -msgstr "" - -msgid "Match value for subordinate user ID" -msgstr "" - -msgid "Subordinate id statistics" -msgstr "" - -#, python-format -msgid "%(remaining)i remaining subordinate id ranges" -msgstr "" - -msgid "commands for controlling sudo configuration" -msgstr "控制sudo配置的命令" - -msgid "" -"\n" -"Sudo Commands\n" -"\n" -"Commands used as building blocks for sudo\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a new command\n" -" ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n" -"\n" -" Remove a command\n" -" ipa sudocmd-del /usr/bin/less\n" -"\n" -msgstr "" - -#, python-format -msgid "must not contain trailing dot: %s" -msgstr "" - -msgid "sudo command" -msgstr "sudo命令" - -msgid "sudo commands" -msgstr "sudo命令" - -msgid "Sudo Commands" -msgstr "Sudo命令" - -#, python-format -msgid "Added Sudo Command \"%(value)s\"" -msgstr "已添加Sudo命令\"%(value)s\"" - -#, python-format -msgid "Deleted Sudo Command \"%(value)s\"" -msgstr "已删除Sudo命令\"%(value)s\"" - -#, python-format -msgid "Modified Sudo Command \"%(value)s\"" -msgstr "已修改Sudo命令\"%(value)s\"" - -#, python-format -msgid "%(count)d Sudo Command matched" -msgid_plural "%(count)d Sudo Commands matched" -msgstr[0] "已匹配%(count)d个Sudo命令" - -msgid "" -"\n" -"Groups of Sudo Commands\n" -"\n" -"Manage groups of Sudo Commands.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new Sudo Command Group:\n" -" ipa sudocmdgroup-add --desc='administrators commands' admincmds\n" -"\n" -" Remove a Sudo Command Group:\n" -" ipa sudocmdgroup-del admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/" -"vim admincmds\n" -"\n" -" Manage Sudo Command Group membership, commands:\n" -" ipa sudocmdgroup-remove-member --sudocmds=/usr/bin/less admincmds\n" -"\n" -" Show a Sudo Command Group:\n" -" ipa sudocmdgroup-show admincmds\n" -msgstr "" - -msgid "sudo command group" -msgstr "sudo命令组" - -msgid "sudo command groups" -msgstr "sudo命令组" - -#, python-format -msgid "Added Sudo Command Group \"%(value)s\"" -msgstr "已添加Sudo命令组\"%(value)s\"" - -#, python-format -msgid "Deleted Sudo Command Group \"%(value)s\"" -msgstr "已删除Sudo命令组\"%(value)s\"" - -#, python-format -msgid "Modified Sudo Command Group \"%(value)s\"" -msgstr "已修改Sudo命令组\"%(value)s\"" - -#, python-format -msgid "%(count)d Sudo Command Group matched" -msgid_plural "%(count)d Sudo Command Groups matched" -msgstr[0] "已匹配%(count)d个Sudo命令组" - -msgid "" -"\n" -"Topology\n" -"\n" -"Management of a replication topology at domain level 1.\n" -msgstr "" -"\n" -"拓扑\n" -"\n" -"域级别为1的复制拓扑的管理。\n" - -msgid "" -"\n" -"IPA server's data is stored in LDAP server in two suffixes:\n" -"* domain suffix, e.g., 'dc=example,dc=com', contains all domain related " -"data\n" -"* ca suffix, 'o=ipaca', is present only on server with CA installed. It\n" -" contains data for Certificate Server component\n" -msgstr "" - -msgid "" -"\n" -"Data stored on IPA servers is replicated to other IPA servers. The way it " -"is\n" -"replicated is defined by replication agreements. Replication agreements " -"needs\n" -"to be set for both suffixes separately. On domain level 0 they are managed\n" -"using ipa-replica-manage and ipa-csreplica-manage tools. With domain level " -"1\n" -"they are managed centrally using `ipa topology*` commands.\n" -msgstr "" - -msgid "" -"\n" -"Agreements are represented by topology segments. By default topology " -"segment\n" -"represents 2 replication agreements - one for each direction, e.g., A to B " -"and\n" -"B to A. Creation of unidirectional segments is not allowed.\n" -msgstr "" - -msgid "" -"\n" -"To verify that no server is disconnected in the topology of the given " -"suffix,\n" -"use:\n" -" ipa topologysuffix-verify $suffix\n" -msgstr "" - -msgid "" -"\n" -"\n" -"Examples:\n" -" Find all IPA servers:\n" -" ipa server-find\n" -msgstr "" - -msgid "" -"\n" -" Find all suffixes:\n" -" ipa topologysuffix-find\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'domain' suffix:\n" -" ipa topologysegment-add domain --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" Add topology segment to 'ca' suffix:\n" -" ipa topologysegment-add ca --left IPA_SERVER_A --right IPA_SERVER_B\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'domain' suffix:\n" -" ipa topologysegment-find domain\n" -msgstr "" - -msgid "" -"\n" -" List all topology segments in 'ca' suffix:\n" -" ipa topologysegment-find ca\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'domain' suffix:\n" -" ipa topologysegment-del domain segment_name\n" -msgstr "" - -msgid "" -"\n" -" Delete topology segment in 'ca' suffix:\n" -" ipa topologysegment-del ca segment_name\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'domain' suffix:\n" -" ipa topologysuffix-verify domain\n" -msgstr "" - -msgid "" -"\n" -" Verify topology of 'ca' suffix:\n" -" ipa topologysuffix-verify ca\n" -msgstr "" - -#, python-brace-format -msgid "Topology management requires minimum domain level {0} " -msgstr "拓扑管理需要最小域级别{0}" - -msgid "segment" -msgstr "段" - -msgid "segments" -msgstr "段" - -msgid "Topology Segments" -msgstr "拓扑段" - -msgid "Topology Segment" -msgstr "拓扑段" - -#, python-format -msgid "left node is not a topology node: %(leftnode)s" -msgstr "左节点不是一个拓扑节点：%(leftnode)s" - -#, python-format -msgid "right node is not a topology node: %(rightnode)s" -msgstr "右节点不是一个拓扑节点：%(rightnode)s" - -msgid "left node and right node must not be the same" -msgstr "左节点和右节点必须不同" - -#, python-brace-format -msgid "left node ({host}) does not support suffix '{suff}'" -msgstr "左节点({host})不支持后缀'{suff}'" - -#, python-brace-format -msgid "right node ({host}) does not support suffix '{suff}'" -msgstr "右节点({host})不支持后缀'{suff}'" - -#, python-format -msgid "%(count)d segment matched" -msgid_plural "%(count)d segments matched" -msgstr[0] "已匹配%(count)d个段" - -#, python-format -msgid "Added segment \"%(value)s\"" -msgstr "已添加段\"%(value)s\"" - -#, python-format -msgid "Deleted segment \"%(value)s\"" -msgstr "已删除段\"%(value)s\"" - -#, python-format -msgid "Modified segment \"%(value)s\"" -msgstr "已修改段\"%(value)s\"" - -#, python-format -msgid "%(value)s" -msgstr "%(value)s" - -msgid "left or right node has to be specified" -msgstr "左或右节点没有被指定" - -msgid "only one node can be specified" -msgstr "仅有一个节点可以被指定" - -#, python-format -msgid "Replication refresh for segment: \"%(pkey)s\" requested." -msgstr "副本更新段：要求\"%(pkey)s\"。" - -#, python-format -msgid "Stopping of replication refresh for segment: \"%(pkey)s\" requested." -msgstr "停止副本更新段：要求\"%(pkey)s\"。" - -msgid "suffixes" -msgstr "后缀" - -msgid "Topology suffixes" -msgstr "拓扑后缀" - -msgid "Topology suffix" -msgstr "拓扑后缀" - -#, python-format -msgid "%(count)d topology suffix matched" -msgid_plural "%(count)d topology suffixes matched" -msgstr[0] "已匹配%(count)d个拓扑后缀" - -#, python-format -msgid "Deleted topology suffix \"%(value)s\"" -msgstr "已删除拓扑后缀\"%(value)s\"" - -#, python-format -msgid "Added topology suffix \"%(value)s\"" -msgstr "已添加拓扑后缀\"%(value)s\"" - -#, python-format -msgid "Modified topology suffix \"%(value)s\"" -msgstr "已修改拓扑后缀\"%(value)s\"" - -msgid "" -"\n" -"Verify replication topology for suffix.\n" -"\n" -"Checks done:\n" -" 1. check if a topology is not disconnected. In other words if there are\n" -" replication paths between all servers.\n" -" 2. check if servers don't have more than the recommended number of\n" -" replication agreements\n" -msgstr "" -"\n" -"验证复制拓扑的后缀。\n" -"检查完成：\n" -" 1. 检查是否还有没有连接的拓扑。换句话说，是否在所有服务器之间存在复制路" -"径。\n" -" 2. 检查是否服务器没有超过推荐的副本协议数\n" - -msgid "operation not defined" -msgstr "操作没有定义" - -#, python-format -msgid "not allowed to perform operation: %s" -msgstr "不允许执行操作：%s" - -msgid "No such virtual command" -msgstr "没有这样的虚拟命令" - -msgid "" -"\n" -"Return information about currently authenticated identity\n" -"\n" -"Who am I command returns information on how to get\n" -"more details about the identity authenticated for this\n" -"request. The information includes:\n" -"\n" -" * type of object\n" -" * command to retrieve details of the object\n" -" * arguments and options to pass to the command\n" -"\n" -"The information is returned as a dictionary. Examples below use\n" -"'key: value' output for illustrative purposes.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Look up as IPA user:\n" -" kinit admin\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: user\n" -" command: user_show/1\n" -" arguments: admin\n" -" ------------------------------------------\n" -"\n" -" Look up as a user from a trusted domain:\n" -" kinit user@AD.DOMAIN\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: idoverrideuser\n" -" command: idoverrideuser_show/1\n" -" arguments: ('default trust view', 'user@ad.domain')\n" -" ------------------------------------------\n" -"\n" -" Look up as a host:\n" -" kinit -k\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: host\n" -" command: host_show/1\n" -" arguments: ipa.example.com\n" -" ------------------------------------------\n" -"\n" -" Look up as a Kerberos service:\n" -" kinit -k -t /path/to/keytab HTTP/ipa.example.com\n" -" ipa console\n" -" >> api.Command.whoami()\n" -" ------------------------------------------\n" -" object: service\n" -" command: service_show/1\n" -" arguments: HTTP/ipa.example.com\n" -" ------------------------------------------\n" -msgstr "" - -msgid "Describe currently authenticated identity." -msgstr "" - -#, fuzzy -msgid "Object class name" -msgstr "主题DNS名" - -msgid "Function to get details" -msgstr "" - -msgid "Arguments to details function" -msgstr "" - -msgid "Cannot query Directory Manager with API" -msgstr "" - -msgid "" -"\n" -"IPA servers\n" -msgstr "" -"\n" -"IPA服务器\n" - -msgid "" -"\n" -"Get information about installed IPA servers.\n" -msgstr "" -"\n" -"获取安装IPA服务器信息。\n" - -#, fuzzy -msgid "" -"\n" -" Find all servers:\n" -" ipa server-find\n" -msgstr "在服务器上找到一个服务器角色" - -msgid "" -"\n" -" Show specific server:\n" -" ipa server-show ipa.example.com\n" -msgstr "" - -msgid "server" -msgstr "服务器" - -msgid "servers" -msgstr "服务器" - -msgid "IPA Servers" -msgstr "IPA服务器" - -msgid "Server location" -msgstr "服务器位置" - -#, fuzzy -msgid "Service weight" -msgstr "服务设置" - -msgid "Weight for server services" -msgstr "服务器服务权重" - -#, fuzzy -msgid "Service relative weight" -msgstr "服务授权目标" - -#, fuzzy -msgid "Relative weight for server services (counts per location)" -msgstr "拥有相同优先级条目的相对权重。" - -msgid "Enabled server roles" -msgstr "已启用服务器角色" - -msgid "List of enabled roles" -msgstr "已启用角色列表" - -msgid "Modify information about an IPA server." -msgstr "修改一个IPA服务器信息。" - -#, python-format -msgid "Modified IPA server \"%(value)s\"" -msgstr "已修改IPA服务器\"%(value)s\"" - -#, python-format -msgid "%(count)d IPA server matched" -msgid_plural "%(count)d IPA servers matched" -msgstr[0] "已匹配%(count)d个IPA服务器" - -#, python-format -msgid "Deleted IPA server \"%(value)s\"" -msgstr "已删除IPA服务器\"%(value)s\"" - -msgid "Ignore topology errors" -msgstr "忽略拓扑错误" - -msgid "Ignore topology connectivity problems after removal" -msgstr "删除后忽略拓扑连通性问题" - -msgid "Ignore check for last remaining CA or DNS server" -msgstr "不检查最后的CA或DNS服务器" - -msgid "Skip a check whether the last CA master or DNS server is removed" -msgstr "不检查最后一个CA主服务器或DNS服务器是否被删除了" - -msgid "Force server removal" -msgstr "强制服务器删除" - -msgid "Force server removal even if it does not exist" -msgstr "强制服务器删除即使它不存在" - -msgid "" -"Replica is active DNSSEC key master. Uninstall could break your DNS system. " -"Please disable or replace DNSSEC key master first." -msgstr "" -"副本是活跃的DNSSEC密钥主机。卸载会导致你DNS系统崩溃。首先请禁用或替代DNSSEC密" -"钥主机。" - -msgid "Deleting this server will leave your installation without a DNS." -msgstr "删除这台服务器将使得你的安装过程没有DNS。" - -#, fuzzy -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a KRA." -msgstr "删除这台服务器是不允许的因为这将导致你的安装过程没有CA。" - -msgid "" -"Deleting this server is not allowed as it would leave your installation " -"without a CA." -msgstr "删除这台服务器是不允许的因为这将导致你的安装过程没有CA。" - -msgid "Ignoring these warnings and proceeding with removal" -msgstr "忽略这些警告并给予清除" - -#, python-format -msgid "" -"Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: " -"%(err)s" -msgstr "从s4u2proxy条目%(dn)s中清除成员主体%(principal)s失败：%(err)s" - -#, python-format -msgid "Failed to clean up DNA hostname entries for %(master)s: %(err)s" -msgstr "为%(master)s清除DNA主机名条目失败：%(err)s" - -#, python-format -msgid "Failed to remove server %(master)s from server list: %(err)s" -msgstr "从服务器列表中删除服务器%(master)s失败：%(err)s" - -#, python-format -msgid "Failed to clean up Custodia keys for %(master)s: %(err)s" -msgstr "为%(master)s清除Custodia密钥失败：%(err)s" - -#, python-format -msgid "Failed to cleanup server principals/keys: %(err)s" -msgstr "清除服务器主体/密钥失败：%(err)s" - -#, python-format -msgid "Failed to cleanup %(hostname)s DNS entries: %(err)s" -msgstr "清除%(hostname)s DNS条目失败：%(err)s" - -msgid "You may need to manually remove them from the tree" -msgstr "你可能需要从树中手动删除它们" - -#, python-format -msgid "Forcing removal of %(hostname)s" -msgstr "强制删除%(hostname)s" - -msgid "Ignoring topology connectivity errors." -msgstr "忽略拓扑连通性错误。" - -#, fuzzy, python-format -msgid "Failed to remove server from security domain: %s" -msgstr "从服务器列表中删除服务器%(master)s失败：%(err)s" - -msgid "Server has already been deleted" -msgstr "服务器已被删除" - -msgid "Agreements deleted" -msgstr "协议已删除" - -msgid "Following segments were not deleted:" -msgstr "下面部分没有被删除：" - -#, python-format -msgid "must be \"%s\"" -msgstr "必须是\"%s\"" - -msgid "not allowed to perform server connection check" -msgstr "不允许执行服务器连接检查" - -#, fuzzy -msgid "Set enabled/hidden state of a server." -msgstr "显示服务器角色状态" - -#, fuzzy -msgid "State" -msgstr "状态" - -#, fuzzy -msgid "Server state" -msgstr "服务器名" - -#, fuzzy, python-format -msgid "Changed server state of \"%(value)s\"." -msgstr "已改变\"%(value)s\"的密码" - -#, fuzzy -msgid "Cannot hide CA renewal master." -msgstr "IPA CA更新主服务器" - -#, fuzzy -msgid "Cannot hide DNSSec key master." -msgstr "IPA DNSSec密钥主机" - -#, python-format -msgid "Cannot hide last enabled %(name)s server." -msgstr "" - -msgid "A list of ACI values" -msgstr "ACI值列表" - -msgid "type, filter, subtree and targetgroup are mutually exclusive" -msgstr "类型，过滤器，子树和目标组是互斥的" - -msgid "ACI prefix is required" -msgstr "需要ACI前缀" - -msgid "" -"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " -"required" -msgstr "至少需要其中一个：类型，过滤器，子树，目标组，属性或它的成员" - -msgid "filter and memberof are mutually exclusive" -msgstr "过滤器和它的成员是互斥的" - -msgid "group, permission and self are mutually exclusive" -msgstr "组，权限和它们自己是互斥的" - -msgid "One of group, permission or self is required" -msgstr "需要组，权限或它们自己中的一个" - -#, python-format -msgid "Group '%s' does not exist" -msgstr "组 '%s' 不存在" - -msgid "empty filter" -msgstr "空的过滤器" - -#, python-format -msgid "Syntax Error: %(error)s" -msgstr "语法错误：%(error)s" - -#, python-format -msgid "invalid DN (%s)" -msgstr "无效的DN（%s）" - -#, python-format -msgid "ACI with name \"%s\" not found" -msgstr "ACI名\"%s\"没有找到" - -#, fuzzy -msgid "ACI object." -msgstr "IPA对象" - -msgid "ACIs" -msgstr "ACIs" - -#, python-format -msgid "Created ACI \"%(value)s\"" -msgstr "已创建ACI\"%(value)s\"" - -#, python-format -msgid "Deleted ACI \"%(value)s\"" -msgstr "已删除ACI\"%(value)s\"" - -#, python-format -msgid "Modified ACI \"%(value)s\"" -msgstr "已修改ACI\"%(value)s\"" - -#, python-format -msgid "%(count)d ACI matched" -msgid_plural "%(count)d ACIs matched" -msgstr[0] "%(count)d个ACI已匹配" - -#, python-format -msgid "Renamed ACI to \"%(value)s\"" -msgstr "已重命名ACI为\"%(value)s\"" - -msgid "" -"\n" -"Auto Membership Rule.\n" -msgstr "" -"\n" -"自动成员规则。\n" - -msgid "" -"\n" -"Bring clarity to the membership of hosts and users by configuring inclusive\n" -"or exclusive regex patterns, you can automatically assign a new entries " -"into\n" -"a group or hostgroup based upon attribute information.\n" -msgstr "" - -msgid "" -"\n" -"A rule is directly associated with a group by name, so you cannot create\n" -"a rule without an accompanying group or hostgroup.\n" -msgstr "" -"\n" -"规则是和组名直接关联的，因此你不能创建一个没有组或主机组的规则。\n" - -msgid "" -"\n" -"A condition is a regular expression used by 389-ds to match a new incoming\n" -"entry with an automember rule. If it matches an inclusive rule then the\n" -"entry is added to the appropriate group or hostgroup.\n" -msgstr "" -"\n" -"条件是一个用于389-ds的正则表达式来用一个自动成员规则区匹配一个新添加的条目。" -"如果它匹配一个兼容规则，那么该条目被添加到合适的组或主机组中去。\n" - -msgid "" -"\n" -"A default group or hostgroup could be specified for entries that do not\n" -"match any rule. In case of user entries this group will be a fallback group\n" -"because all users are by default members of group specified in IPA config.\n" -msgstr "" -"\n" -"一个默认组或主机组可以指定给不匹配任何规则的条目。万一是用户条目，则该组会是" -"一个会退组，因为在IPA配置中所有用户默认是指定组的成员。\n" - -msgid "" -"\n" -"The automember-rebuild command can be used to retroactively run automember " -"rules\n" -"against existing entries, thus rebuilding their membership.\n" -msgstr "" -"\n" -"automember-rebuild命令可以用来对现有条目跟踪运行自动成员规则，以此来重建它们" -"的成员组。\n" - -msgid "" -"\n" -" Add the initial group or hostgroup:\n" -" ipa hostgroup-add --desc=\"Web Servers\" webservers\n" -" ipa group-add --desc=\"Developers\" devel\n" -msgstr "" - -msgid "" -"\n" -" Add the initial rule:\n" -" ipa automember-add --type=hostgroup webservers\n" -" ipa automember-add --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Add a condition to the rule:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -" ipa automember-add-condition --key=manager --type=group --inclusive-" -"regex=^uid=mscott devel\n" -msgstr "" - -msgid "" -"\n" -" Add an exclusive condition to the rule to prevent auto assignment:\n" -" ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-" -"regex=^web5\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Add a host:\n" -" ipa host-add web1.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user:\n" -" ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n" -msgstr "" - -msgid "" -"\n" -" Verify automembership:\n" -" ipa hostgroup-show webservers\n" -" Host-group: webservers\n" -" Description: Web Servers\n" -" Member hosts: web1.example.com\n" -"\n" -" ipa group-show devel\n" -" Group name: devel\n" -" Description: Developers\n" -" GID: 1004200000\n" -" Member users: tuser\n" -msgstr "" - -msgid "" -"\n" -" Remove a condition from the rule:\n" -" ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-" -"regex=^web[1-9]+\\.example\\.com webservers\n" -msgstr "" - -msgid "" -"\n" -" Modify the automember rule:\n" -" ipa automember-mod\n" -msgstr "" - -msgid "" -"\n" -" Set the default (fallback) target group:\n" -" ipa automember-default-group-set --default-group=webservers --" -"type=hostgroup\n" -" ipa automember-default-group-set --default-group=ipausers --type=group\n" -msgstr "" - -msgid "" -"\n" -" Remove the default (fallback) target group:\n" -" ipa automember-default-group-remove --type=hostgroup\n" -" ipa automember-default-group-remove --type=group\n" -msgstr "" - -msgid "" -"\n" -" Show the default (fallback) target group:\n" -" ipa automember-default-group-show --type=hostgroup\n" -" ipa automember-default-group-show --type=group\n" -msgstr "" - -msgid "" -"\n" -" Find all of the automember rules:\n" -" ipa automember-find\n" -msgstr "" - -msgid "" -"\n" -" Find all of the orphan automember rules:\n" -" ipa automember-find-orphans --type=hostgroup\n" -" Find all of the orphan automember rules and remove them:\n" -" ipa automember-find-orphans --type=hostgroup --remove\n" -msgstr "" - -msgid "" -"\n" -" Display a automember rule:\n" -" ipa automember-show --type=hostgroup webservers\n" -" ipa automember-show --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Delete an automember rule:\n" -" ipa automember-del --type=hostgroup webservers\n" -" ipa automember-del --type=group devel\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all users:\n" -" ipa automember-rebuild --type=group\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for all hosts:\n" -" ipa automember-rebuild --type=hostgroup\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified users:\n" -" ipa automember-rebuild --users=tuser1 --users=tuser2\n" -msgstr "" - -msgid "" -"\n" -" Rebuild membership for specified hosts:\n" -" ipa automember-rebuild --hosts=web1.example.com --hosts=web2.example." -"com\n" -msgstr "" - -msgid "Auto Membership Rule" -msgstr "自动成员规则" - -#, python-format -msgid "%(otype)s \"%(oname)s\" not found" -msgstr "%(otype)s \"%(oname)s\"没有找到" - -#, python-format -msgid "%s is not a valid attribute." -msgstr "%s不是一个有效的属性。" - -#, fuzzy -msgid "" -"\n" -" Add an automember rule.\n" -" " -msgstr "添加一个自动成员规则。" - -#, python-format -msgid "Added automember rule \"%(value)s\"" -msgstr "已添加自动成员规则\"%(value)s\"" - -msgid "Auto Membership is not configured" -msgstr "自动成员没有配置" - -#, fuzzy -msgid "" -"\n" -" Add conditions to an automember rule.\n" -" " -msgstr "添加条件到一个自动成员规则。" - -#, python-format -msgid "Added condition(s) to \"%(value)s\"" -msgstr "已在\"%(value)s\"上添加条件" - -#, python-format -msgid "Auto member rule: %s not found!" -msgstr "自动成员规则：%s没有找到！" - -msgid "" -"\n" -" Override this so we can add completed and failed to the return " -"result.\n" -" " -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Remove conditions from an automember rule.\n" -" " -msgstr "从一个自动成员规则中移除条件。" - -#, python-format -msgid "Removed condition(s) from \"%(value)s\"" -msgstr "已从\"%(value)s\"中移除条件" - -msgid "" -"\n" -" Override this so we can set completed and failed.\n" -" " -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Modify an automember rule.\n" -" " -msgstr "修改一个自动成员规则。" - -#, python-format -msgid "Modified automember rule \"%(value)s\"" -msgstr "已修改自动成员规则\"%(value)s\"" - -#, fuzzy -msgid "" -"\n" -" Delete an automember rule.\n" -" " -msgstr "删除一个自动成员规则。" - -#, python-format -msgid "Deleted automember rule \"%(value)s\"" -msgstr "已删除自动成员规则\"%(value)s\"" - -#, fuzzy -msgid "" -"\n" -" Search for automember rules.\n" -" " -msgstr "查找自动成员规则。" - -#, python-format -msgid "%(count)d rules matched" -msgid_plural "%(count)d rules matched" -msgstr[0] "已匹配%(count)d个规则" - -#, fuzzy -msgid "" -"\n" -" Display information about an automember rule.\n" -" " -msgstr "显示一个自动成员规则信息。" - -#, fuzzy -msgid "" -"\n" -" Set default (fallback) group for all unmatched entries.\n" -" " -msgstr "对所有不匹配的条目设置默认（回退）组。" - -#, python-format -msgid "Set default (fallback) group for automember \"%(value)s\"" -msgstr "已为自动成员\"%(value)s\"设置默认（回滚）组" - -#, fuzzy -msgid "" -"\n" -" Remove default (fallback) group for all unmatched entries.\n" -" " -msgstr "对所有不匹配的条目移除默认（回退）组。" - -#, python-format -msgid "Removed default (fallback) group for automember \"%(value)s\"" -msgstr "已为自动成员\"%(value)s\"移除默认（回滚）组" - -msgid "No default (fallback) group set" -msgstr "没有设置（回滚）组" - -#, fuzzy -msgid "" -"\n" -" Display information about the default (fallback) automember groups.\n" -" " -msgstr "显示默认（回退）自动成员组的信息。" - -msgid "Task DN" -msgstr "任务DN" - -msgid "DN of the started task" -msgstr "已开始任务的DN" - -msgid "at least one of options: type, users, hosts must be specified" -msgstr "至少指定其中一个选项：类型，用户，主机" - -msgid "users and hosts cannot both be set" -msgstr "用户和主机不能被同时设置" - -msgid "hosts cannot be set when type is 'group'" -msgstr "当类型是'group'是主机不能被设置" - -msgid "users cannot be set when type is 'hostgroup'" -msgstr "当类型是'hostgroup'是用户不能被设置" - -msgid "Automember rebuild membership task started" -msgstr "自动成员重建成员关系任务已开始" - -msgid "Automember rebuild membership task completed" -msgstr "自动成员重建成员关系任务已完成" - -#, python-format -msgid "Task DN = '%s'" -msgstr "任务DN = '%s'" - -msgid "Automember" -msgstr "自动成员" - -msgid "" -"\n" -" Search for orphan automember rules. The command might need to be run as\n" -" a privileged user user to get all orphan rules.\n" -" " -msgstr "" - -#, fuzzy -msgid "Remove orphan automember rules" -msgstr "从一个自动成员规则中移除条件。" - -msgid "Member service groups" -msgstr "成员服务组" - -msgid "Member HBAC service groups" -msgstr "成员HBAC服务组" - -#, fuzzy -msgid "Member ID user overrides" -msgstr "用户ID覆盖" - -#, fuzzy -msgid "Indirect Member ID user overrides" -msgstr "间接成员用户" - -msgid "Indirect Member permissions" -msgstr "间接成员权限" - -msgid "Indirect Member HBAC service" -msgstr "间接成员HBAC服务" - -msgid "Indirect Member HBAC service group" -msgstr "间接成员HBAC服务组" - -msgid "Invalid format. Should be name=value" -msgstr "无效的格式。应该是“名称=值”" - -msgid "An IPA master host cannot be deleted or disabled" -msgstr "IPA主主机不能被删除或禁用" - -msgid "entry" -msgstr "条目" - -msgid "entries" -msgstr "条目" - -msgid "Entry" -msgstr "条目" - -#, python-format -msgid "container entry (%(container)s) not found" -msgstr "容器条目(%(container)s)没有找到" - -#, python-format -msgid "%(parent)s: %(oname)s not found" -msgstr "%(parent)s：%(oname)s没有找到" - -#, python-format -msgid "%(pkey)s: %(oname)s not found" -msgstr "%(pkey)s：%(oname)s没有找到" - -#, python-format -msgid "%(oname)s with name \"%(pkey)s\" already exists" -msgstr "名为\"%(pkey)s\"的%(oname)s已存在" - -#, python-format -msgid "attribute \"%(attribute)s\" not allowed" -msgstr "不支持属性\"%(attribute)s\"" - -#, fuzzy, python-format -msgid "these attributes are not allowed: %(attrs)s" -msgstr "不允许属性\"%s\"" - -msgid "attribute is not configurable" -msgstr "属性没有配置" - -msgid "No such attribute on this entry" -msgstr "该条目没有这样的属性" - -#, python-format -msgid "Rename the %(ldap_obj_name)s object" -msgstr "重命名%(ldap_obj_name)s对象" - -msgid "the entry was deleted while being modified" -msgstr "正被修改的条目已被删除" - -#, python-format -msgid "%s" -msgstr "" - -#, python-format -msgid "%s to add" -msgstr "待添加的%s" - -#, python-format -msgid "%s to remove" -msgstr "待移除的%s" - -#, python-format -msgid "Results should contain primary key attribute only (\"%s\")" -msgstr "结果应该只包括主键属性(\"%s\")" - -#, python-format -msgid "" -"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s." -msgstr "查找有这些%(relationship)s %(ldap_object)s的%(searched_object)s。" - -#, python-format -msgid "" -"Search for %(searched_object)s without these %(relationship)s " -"%(ldap_object)s." -msgstr "查找没有%(relationship)s %(ldap_object)s的%(searched_object)s。" - -#, fuzzy, python-format -msgid "added attribute value to entry %(value)s" -msgstr "已为用户\"%(value)s\"添加新别名" - -#, fuzzy, python-format -msgid "removed attribute values from entry %(value)s" -msgstr "已从用户\"%(value)s\"中删除别名" - -msgid "one or more values to remove" -msgstr "待移除的一个或多个值" - -msgid "" -"\n" -"Plugin to make multiple ipa calls via one remote procedure call\n" -"\n" -"To run this code in the lite-server\n" -"\n" -"curl -H \"Content-Type:application/json\" -H \"Accept:application/" -"json\" -H \"Accept-Language:en\" --negotiate -u : --cacert /" -"etc/ipa/ca.crt -d @batch_request.json -X POST http://" -"localhost:8888/ipa/json\n" -"\n" -"where the contents of the file batch_request.json follow the below example\n" -"\n" -"{\"method\":\"batch\",\"params\":[[\n" -" {\"method\":\"group_find\",\"params\":[[],{}]},\n" -" {\"method\":\"user_find\",\"params\":[[],{\"whoami\":\"true\",\"all" -"\":\"true\"}]},\n" -" {\"method\":\"user_show\",\"params\":[[\"admin\"],{\"all\":true}]}\n" -" ],{}],\"id\":1}\n" -"\n" -"The format of the response is nested the same way. At the top you will see\n" -" \"error\": null,\n" -" \"id\": 1,\n" -" \"result\": {\n" -" \"count\": 3,\n" -" \"results\": [\n" -"\n" -"\n" -"And then a nested response for each IPA command method sent in the request\n" -"\n" -msgstr "" - -msgid "Make multiple ipa calls via one remote procedure call" -msgstr "" - -msgid "must contain a tuple (list, dict)" -msgstr "必须包含一个元组（列表，字典）" - -msgid "REST API is not logged in." -msgstr "REST API没有登录。" - -#, python-format -msgid "Non-2xx response from CA REST API: %(status)d. %(explanation)s" -msgstr "从CA REST API的Non-2xx响应：%(status)d. %(explanation)s" - -msgid "Unable to communicate with CMS" -msgstr "不能与CMS通信" - -msgid "Response from CA was not valid JSON" -msgstr "CA响应是无效的JSON" - -msgid "pyhbac is not installed." -msgstr "" - -msgid "" -"\n" -"Simulate use of Host-based access controls\n" -"\n" -"HBAC rules control who can access what services on what hosts.\n" -"You can use HBAC to control which users or groups can access a service,\n" -"or group of services, on a target host.\n" -"\n" -"Since applying HBAC rules implies use of a production environment,\n" -"this plugin aims to provide simulation of HBAC rules evaluation without\n" -"having access to the production environment.\n" -"\n" -" Test user coming to a service on a named host against\n" -" existing enabled rules.\n" -"\n" -" ipa hbactest --user= --host= --service=\n" -" [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n" -" [--sizelimit= ]\n" -"\n" -" --user, --host, and --service are mandatory, others are optional.\n" -"\n" -" If --rules is specified simulate enabling of the specified rules and test\n" -" the login of the user using only these rules.\n" -"\n" -" If --enabled is specified, all enabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --disabled is specified, all disabled HBAC rules will be added to " -"simulation\n" -"\n" -" If --nodetail is specified, do not return information about rules matched/" -"not matched.\n" -"\n" -" If both --rules and --enabled are specified, apply simulation to --rules " -"_and_\n" -" all IPA enabled rules.\n" -"\n" -" If no --rules specified, simulation is run against all IPA enabled rules.\n" -" By default there is a IPA-wide limit to number of entries fetched, you can " -"change it\n" -" with --sizelimit option.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Use all enabled HBAC rules in IPA database to simulate:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 2. Disable detailed summary of how rules were applied:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -"\n" -" 3. Test explicitly specified HBAC rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: myrule\n" -"\n" -" 4. Use all enabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --enabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Matched rules: allow_all\n" -"\n" -" 5. Test all disabled HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: new-rule\n" -"\n" -" 6. Test all disabled HBAC rules in IPA database + explicitly specified " -"rules:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --rules=myrule --rules=my-second-rule --disabled\n" -" ---------------------\n" -" Access granted: False\n" -" ---------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -"\n" -" 7. Test all (enabled and disabled) HBAC rules in IPA database:\n" -" $ ipa hbactest --user=a1a --host=bar --service=sshd \\\\\n" -" --enabled --disabled\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Not matched rules: my-second-rule\n" -" Not matched rules: my-third-rule\n" -" Not matched rules: myrule\n" -" Not matched rules: new-rule\n" -" Matched rules: allow_all\n" -"\n" -"\n" -"HBACTEST AND TRUSTED DOMAINS\n" -"\n" -"When an external trusted domain is configured in IPA, HBAC rules are also " -"applied\n" -"on users accessing IPA resources from the trusted domain. Trusted domain " -"users and\n" -"groups (and their SIDs) can be then assigned to external groups which can " -"be\n" -"members of POSIX groups in IPA which can be used in HBAC rules and thus " -"allowing\n" -"access to resources protected by the HBAC system.\n" -"\n" -"hbactest plugin is capable of testing access for both local IPA users and " -"users\n" -"from the trusted domains, either by a fully qualified user name or by user " -"SID.\n" -"Such user names need to have a trusted domain specified as a short name\n" -"(DOMAIN\\Administrator) or with a user principal name (UPN), " -"Administrator@ad.test.\n" -"\n" -"Please note that hbactest executed with a trusted domain user as --user " -"parameter\n" -"can be only run by members of \"trust admins\" group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" 1. Test if a user from a trusted domain specified by its shortname " -"matches any\n" -" rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 2. Test if a user from a trusted domain specified by its domain name " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --" -"service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 3. Test if a user from a trusted domain specified by its SID matches any " -"rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Matched rules: can_login\n" -"\n" -" 4. Test if other user from a trusted domain specified by its SID matches " -"any rule:\n" -"\n" -" $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\" -"\\\n" -" --host `hostname` --service sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -"\n" -" 5. Test if other user from a trusted domain specified by its shortname " -"matches\n" -" any rule:\n" -"\n" -" $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service " -"sshd\n" -" --------------------\n" -" Access granted: True\n" -" --------------------\n" -" Matched rules: allow_all\n" -" Not matched rules: can_login\n" -msgstr "" - -msgid "Unresolved rules in --rules" -msgstr "在--rules中不能解析的规则" - -msgid "" -"Cannot search in trusted domains without own domain configured. Make sure " -"you have run ipa-adtrust-install on the IPA server first" -msgstr "" -"没有自己的域配置不能在信任域中查找。首先确认你已经在IPA服务器上运行了ipa-" -"adtrust-install命令" - -#, python-format -msgid "Access granted: %s" -msgstr "访问授权：%s" - -msgid "" -"\n" -"Permissions\n" -msgstr "" -"\n" -"权限\n" - -msgid "" -"\n" -"A permission enables fine-grained delegation of rights. A permission is\n" -"a human-readable wrapper around a 389-ds Access Control Rule,\n" -"or instruction (ACI).\n" -"A permission grants the right to perform a specific task such as adding a\n" -"user, modifying a group, etc.\n" -msgstr "" - -msgid "" -"\n" -"A permission may not contain other permissions.\n" -msgstr "" -"\n" -"一个权限可能不包含其他权限。\n" - -msgid "" -"\n" -"* A permission grants access to read, write, add, delete, read, search,\n" -" or compare.\n" -"* A privilege combines similar permissions (for example all the permissions\n" -" needed to add a user).\n" -"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n" -msgstr "" -"\n" -"* 权限允许访问读，写，添加，删除，读，查找或比价。\n" -"* 特权结合了相似的权限（例如所有权限需要添加一个用户）\n" -"* 角色为用户，用户组，主机或主机组授予一系列特权。\n" - -msgid "" -"\n" -"A permission is made up of a number of different parts:\n" -"\n" -"1. The name of the permission.\n" -"2. The target of the permission.\n" -"3. The rights granted by the permission.\n" -msgstr "" -"\n" -"权限由许多不同部分组成：\n" -"\n" -"1. 权限名。\n" -"2. 权限目标。\n" -"3. 权限授予的权限。\n" - -msgid "" -"\n" -"Rights define what operations are allowed, and may be one or more\n" -"of the following:\n" -"1. write - write one or more attributes\n" -"2. read - read one or more attributes\n" -"3. search - search on one or more attributes\n" -"4. compare - compare one or more attributes\n" -"5. add - add a new entry to the tree\n" -"6. delete - delete an existing entry\n" -"7. all - all permissions are granted\n" -msgstr "" -"\n" -"权限定义了允许哪些操作，可能是下面的一个或多个：\n" -"1. 写 - 写一条或多条属性\n" -"2. 读 - 读一条或多条属性\n" -"3. 查找 - 查找一条或多条属性\n" -"4. 比较 - 比较一条或多条属性\n" -"5. 添加 - 添加一条新属性到树中\n" -"6. 删除 - 删除一条已存在的条目\n" -"7. 全部 - 授予的所有权限\n" - -msgid "" -"\n" -"Note the distinction between attributes and entries. The permissions are\n" -"independent, so being able to add a user does not mean that the user will\n" -"be editable.\n" -msgstr "" -"\n" -"注意属性和条目之间的区别。权限是独立的，能添加一个用户并不代表该用户是可编辑" -"的。\n" - -msgid "" -"\n" -"There are a number of allowed targets:\n" -"1. subtree: a DN; the permission applies to the subtree under this DN\n" -"2. target filter: an LDAP filter\n" -"3. target: DN with possible wildcards, specifies entries permission applies " -"to\n" -msgstr "" -"\n" -"有许多允许的目标：\n" -"1. 子树：一个DN；在该DN下应用权限的子树\n" -"2. 目标过滤器：一个LDAP过滤器\n" -"3. 目标：权限适用于带有可能通配符，指定条目的DN\n" - -msgid "" -"\n" -"Additionally, there are the following convenience options.\n" -"Setting one of these options will set the corresponding attribute(s).\n" -"1. type: a type of object (user, group, etc); sets subtree and target " -"filter.\n" -"2. memberof: apply to members of a group; sets target filter\n" -"3. targetgroup: grant access to modify a specific group (such as granting\n" -" the rights to manage group membership); sets target.\n" -msgstr "" -"\n" -"同时，有以下合适的选项。设置其中一个选项将会设置相应的属性。\n" -"1. 类型：对象（用户，用户组等）的类型；设置子树和目标过滤器。\n" -"2. 组： 适用于一个组的成员；设置目标过滤器。\n" -"3. 目标组：允许修改一个指定组（例如授予管理组成员的权限）；设置目标。\n" - -msgid "" -"\n" -"Managed permissions\n" -msgstr "" -"\n" -"管理权限\n" - -msgid "" -"\n" -"Permissions that come with IPA by default can be so-called \"managed\"\n" -"permissions. These have a default set of attributes they apply to,\n" -"but the administrator can add/remove individual attributes to/from the set.\n" -msgstr "" - -msgid "" -"\n" -"Deleting or renaming a managed permission, as well as changing its target,\n" -"is not allowed.\n" -msgstr "" -"\n" -"删除或重命名一个管理权限，同时改变它的目标是不允许的。\n" - -msgid "" -"\n" -" Add a permission that grants the creation of users:\n" -" ipa permission-add --type=user --permissions=add \"Add Users\"\n" -msgstr "" - -msgid "" -"\n" -" Add a permission that grants the ability to manage group membership:\n" -" ipa permission-add --attrs=member --permissions=write --type=group " -"\"Manage Group Members\"\n" -msgstr "" - -msgid "must be enclosed in parentheses" -msgstr "必须括在括号里" - -#, python-format -msgid "\"%s\" is not an object type" -msgstr "\"%s\"不是一个对象类型" - -#, python-format -msgid "\"%s\" is not a valid permission type" -msgstr "\"%s\"不是一个有效的权限类型" - -#, python-format -msgid "Deprecated; use %s" -msgstr "已弃用；使用%s" - -#, python-format -msgid "Permission with unknown flag %s may not be modified or removed" -msgstr "带有标记%s的权限可能不能被修改或删除" - -msgid "A SYSTEM permission may not be modified or removed" -msgstr "系统权限可能不能被修改或删除" - -#, python-format -msgid "Entry %s not found" -msgstr "条目%s没有找到" - -#, python-format -msgid "The ACI for permission %(name)s was not found in %(dn)s " -msgstr "ACI权限%(name)s在%(dn)s中没有找到" - -msgid "" -"cannot specify full target filter and extra target filter simultaneously" -msgstr "不能同时指定完整的目标滤波器和额外的目标滤波器" - -#, python-format -msgid "option was renamed; use %s" -msgstr "选项已被重命名；使用%s" +"用在LDAP服务器上的模式。支持值是RFC2307和RFC2307bis。默认值时RFC2307bis" #, python-format -msgid "Cannot use %(old_name)s with %(new_name)s" -msgstr "不能使用%(old_name)s和%(new_name)s" - -#, python-format -msgid "%s: group not found" -msgstr "%s：找不到组" - -msgid "target and targetgroup are mutually exclusive" -msgstr "目标和目标组是互斥的" - -msgid "subtree and type are mutually exclusive" -msgstr "子树和类型是互斥的" - -msgid "Bad search filter" -msgstr "无效的搜索过滤器" - -#, python-format -msgid "Entry %s does not exist" -msgstr "条目%s不存在" - msgid "" -"there must be at least one target entry specifier (e.g. target, " -"targetfilter, attrs)" -msgstr "必须有至少一个目标条目说明符（例如：目标，目标过滤器，属性）" - -#, python-format -msgid "Added permission \"%(value)s\"" -msgstr "已添加权限\"%(value)s\"" - -msgid "attrs and included attributes are mutually exclusive" -msgstr "属性和包含的属性是互斥的" - -#, python-format -msgid "Cannot store permission ACI to %s" -msgstr "不能存储权限ACI到%s" - -#, python-format -msgid "Deleted permission \"%(value)s\"" -msgstr "已删除权限\"%(value)s\"" - -msgid "cannot delete managed permissions" -msgstr "不能删除管理权限" +"The search criteria was not specific enough. Expected 1 and found %(found)d." +msgstr "查找条件不够具体。预期1和找到%(found)d。" -#, python-format -msgid "ACI of permission %s was not found" -msgstr "ACI权限%s没有找到" - -#, python-format -msgid "Modified permission \"%(value)s\"" -msgstr "已修改权限\"%(value)s\"" - -msgid "cannot rename managed permissions" -msgstr "不能重命名管理权限" - -msgid "not modifiable on managed permissions" -msgstr "管理权限没有修改" - -msgid "only available on managed permissions" -msgstr "仅在管理权限中可用" - -msgid "attrs and included/excluded attributes are mutually exclusive" -msgstr "属性和包含/排除属性是互斥的" - -msgid "cannot set bindtype for a permission that is assigned to a privilege" -msgstr "不能为已分配一个特权的权限设置绑定类型" +msgid "The secret used to encrypt data" +msgstr "密码用于数据加密" -#, python-format -msgid "%(count)d permission matched" -msgid_plural "%(count)d permissions matched" -msgstr[0] "已匹配%(count)d个权限" +msgid "The service is allowed to authenticate on behalf of a client" +msgstr "服务可以代表一个客户端进行认证" #, python-format msgid "" -"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " -"privilege" -msgstr "不能给一个特权添加带有绑定类型\"%(bindtype)s\"的权限\"%(perm)s\"" - -msgid "Privilege" -msgstr "特权" - -#, python-format -msgid "Added privilege \"%(value)s\"" -msgstr "已添加特权\"%(value)s\"" +"The service principal for subject alt name %s in certificate request does " +"not exist" +msgstr "在证书请求中主题alt名为%s的服务主体不存在" -#, python-format -msgid "Deleted privilege \"%(value)s\"" -msgstr "已删除特权\"%(value)s\"" - -#, python-format -msgid "Modified privilege \"%(value)s\"" -msgstr "已修改特权\"%(value)s\"" +msgid "The topic or command name." +msgstr "主题或命令名。" -#, python-format -msgid "%(count)d privilege matched" -msgid_plural "%(count)d privileges matched" -msgstr[0] "已匹配%(count)d个特权" +msgid "The total timeout across all retries (in seconds)" +msgstr "所有重试总超时（秒）" -msgid "" -"\n" -"API Schema\n" -msgstr "" -"\n" -"API 模式\n" +msgid "The username attribute on the user object" +msgstr "用户对象的用户名属性" -msgid "" -"\n" -"Provides API introspection capabilities.\n" -msgstr "" -"\n" -"提供API自省能力。\n" +msgid "The username, password or token codes are not correct" +msgstr "用户名，密码或令牌码不争取" msgid "" -"\n" -" Show user-find details:\n" -" ipa command-show user-find\n" +"This command can not be used to change ID allocation for local IPA domain. " +"Run `ipa help idrange` for more information" msgstr "" +"这个命令在本地IPA域中不能用来改变ID分配。运行`ipa help idrange`查看更多信息" msgid "" -"\n" -" Find user-find parameters:\n" -" ipa param-find user-find\n" -msgstr "" - -msgid "Name" -msgstr "名称" - -msgid "Documentation" -msgstr "文档" - -msgid "Exclude from" -msgstr "排斥" - -msgid "Include in" -msgstr "包含" - -msgid "Help topic" -msgstr "帮助主题" - -msgid "Version" -msgstr "版本" - -msgid "Parameters" -msgstr "参数" - -msgid "Method of" -msgstr "方法" - -msgid "Method name" -msgstr "方法名" - -msgid "Display information about a command." -msgstr "显示一个命令信息。" - -msgid "Search for commands." -msgstr "查找命令。" +"This command relies on the existence of the \"editors\" group, but this " +"group was not found." +msgstr "该命令依赖于\"editors\"组的存在，但是该组没有找到。" -#, fuzzy -msgid "Return command defaults" -msgstr "允许命令" +msgid "This command requires root access" +msgstr "该命令需要root访问权限" -#, fuzzy, python-brace-format -msgid "{oname}: {command_name} not found" -msgstr "{role}：角色没有找到" +msgid "This entry already exists" +msgstr "条目已经存在" -msgid "Display information about a class." -msgstr "显示一个类信息。" +msgid "This entry cannot be enabled or disabled" +msgstr "条目不能被启用或禁用" -msgid "Search for classes." -msgstr "查找类。" +msgid "This entry is already a member" +msgstr "条目已经时一个成员" -msgid "Display information about a help topic." -msgstr "显示一个帮助主题信息。" +msgid "This entry is already disabled" +msgstr "条目已禁用" -msgid "Search for help topics." -msgstr "查找帮助主题。" +msgid "This entry is already enabled" +msgstr "条目已启用" -msgid "Required" -msgstr "必需的" +msgid "This entry is not a member" +msgstr "条目不是一个成员" -msgid "Multi-value" -msgstr "多值" +msgid "This group already allows external members" +msgstr "该组已允许外部成员" -msgid "Always ask" -msgstr "总是询问" +msgid "This group cannot be posix because it is external" +msgstr "该组不是posix因为它是外部的" -#, fuzzy -msgid "CLI metavar" -msgstr "CLI名称" +msgid "This is already a posix group" +msgstr "这已经是一个posix组" -msgid "CLI name" -msgstr "CLI名称" +msgid "This is already a posix group and cannot be converted to external one" +msgstr "这已经是一个posix组了，并且不能转换为外部的" -msgid "Confirm (password)" -msgstr "确认（密码）" +msgid "This may take some time, please wait ..." +msgstr "这可能需要一些时间，请稍等..." -msgid "Default" -msgstr "默认" +msgid "This page has unsaved changes. Please save or revert." +msgstr "这个页面有未保存的更改。请保存或恢复。" -msgid "Default from" -msgstr "默认的" - -msgid "Label" -msgstr "级别" - -msgid "Convert on server" -msgstr "在服务器上转换" - -msgid "Option group" -msgstr "选项组" - -msgid "Sensitive" -msgstr "敏感的" - -msgid "Positional argument" -msgstr "位置参数" - -#, fuzzy, python-format -msgid "%(metaobject)s: %(oname)s not found" -msgstr "%(parent)s：%(oname)s没有找到" - -msgid "Display information about a command parameter." -msgstr "显示一个命令参数信息。" - -msgid "Search command parameters." -msgstr "查找命令参数。" - -#, fuzzy, python-format -msgid "%(command_name)s: %(oname)s not found" -msgstr "%(parent)s：%(oname)s没有找到" - -msgid "Display information about a command output." -msgstr "显示一个命令输出信息。" - -msgid "Search for command outputs." -msgstr "查找命令输出。" - -msgid "Store and provide schema for commands and topics" -msgstr "" - -msgid "Fingerprint of schema cached by client" -msgstr "客户端缓存的模式指纹" - -msgid "" -"\n" -"Cross-realm trusts\n" -"\n" -"Manage trust relationship between IPA and Active Directory domains.\n" -"\n" -"In order to allow users from a remote domain to access resources in IPA " -"domain,\n" -"trust relationship needs to be established. Currently IPA supports only " -"trusts\n" -"between IPA and Active Directory domains under control of Windows Server " -"2008\n" -"or later, with functional level 2008 or later.\n" -"\n" -"Please note that DNS on both IPA and Active Directory domain sides should " -"be\n" -"configured properly to discover each other. Trust relationship relies on\n" -"ability to discover special resources in the other domain via DNS records.\n" -"\n" -"Examples:\n" -"\n" -"1. Establish cross-realm trust with Active Directory using AD administrator\n" -" credentials:\n" -"\n" -" ipa trust-add --type=ad --admin --password\n" -"\n" -"2. List all existing trust relationships:\n" -"\n" -" ipa trust-find\n" -"\n" -"3. Show details of the specific trust relationship:\n" -"\n" -" ipa trust-show \n" -"\n" -"4. Delete existing trust relationship:\n" -"\n" -" ipa trust-del \n" -"\n" -"Once trust relationship is established, remote users will need to be mapped\n" -"to local POSIX groups in order to actually use IPA resources. The mapping\n" -"should be done via use of external membership of non-POSIX group and then\n" -"this group should be included into one of local POSIX groups.\n" -"\n" -"Example:\n" -"\n" -"1. Create group for the trusted domain admins' mapping and their local " -"POSIX\n" -"group:\n" -"\n" -" ipa group-add --desc=' admins external map' " -"ad_admins_external --external\n" -" ipa group-add --desc=' admins' ad_admins\n" -"\n" -"2. Add security identifier of Domain Admins of the to the\n" -" ad_admins_external group:\n" -"\n" -" ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n" -"\n" -"3. Allow members of ad_admins_external group to be associated with\n" -" ad_admins POSIX group:\n" -"\n" -" ipa group-add-member ad_admins --groups ad_admins_external\n" -"\n" -"4. List members of external members of ad_admins_external group to see\n" -" their SIDs:\n" -"\n" -" ipa group-show ad_admins_external\n" -"\n" -"\n" -"GLOBAL TRUST CONFIGURATION\n" -"\n" -"When IPA AD trust subpackage is installed and ipa-adtrust-install is run, a\n" -"local domain configuration (SID, GUID, NetBIOS name) is generated. These\n" -"identifiers are then used when communicating with a trusted domain of the\n" -"particular type.\n" -"\n" -"1. Show global trust configuration for Active Directory type of trusts:\n" -"\n" -" ipa trustconfig-show --type ad\n" -"\n" -"2. Modify global configuration for all trusts of Active Directory type and " -"set\n" -" a different fallback primary group (fallback primary group GID is used as " -"a\n" -" primary user GID if user authenticating to IPA domain does not have any\n" -" other primary GID already set):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"another AD group" -"\"\n" -"\n" -"3. Change primary fallback group back to default hidden group (any group " -"with\n" -" posixGroup object class is allowed):\n" -"\n" -" ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group" -"\"\n" -msgstr "" +msgid "Ticket expired" +msgstr "票据过期" #, python-format -msgid "" -" Alternatively, following servers are capable of running this command: " -"%(masters)s" -msgstr "另外，下面服务器可以运行该命令：%(masters)s" - -msgid "AD Trust setup" -msgstr "AD信任设置" - -msgid "" -"Cannot perform the selected command without Samba 4 support installed. Make " -"sure you have installed server-trust-ad sub-package of IPA." -msgstr "" -"没有安装Samba 4不能执行被选命令。确认你已经在IPA上安装了server-trust-ad子包。" - -msgid "" -"Cannot perform the selected command without Samba 4 instance configured on " -"this machine. Make sure you have run ipa-adtrust-install on this server." -msgstr "" -"没有在该机器上进行Samba 4实例配置不能执行被选命令。确认你已经在该服务器上运行" -"ipa-adtrust-install。" - -msgid "" -"Fetching domains from trusted forest failed. See details in the error_log" -msgstr "从信任森林中获取域失败。在error_log中查看详细信息" - -msgid "trust" -msgstr "信任" - -msgid "trusts" -msgstr "信任" - -msgid "Trusts" -msgstr "信任" - -msgid "Trust" -msgstr "信任" - -#, fuzzy -msgid "SID blocklist incoming" -msgstr "进来的SID黑名单" +msgid "Ticket policy for %s could not be read" +msgstr "票据策略%s不可读" -#, fuzzy -msgid "SID blocklist outgoing" -msgstr "出去的SID黑名单" +msgid "Time Limit" +msgstr "时间限制" -msgid "Trust direction" -msgstr "信任方向" +msgid "Time limit of search in seconds (0 is unlimited)" +msgstr "时间限制在几秒钟内的搜索（0代表无限制）" -msgid "Trust type" -msgstr "信任类型" +msgid "Time now" +msgstr "当前时间" -msgid "Trust status" -msgstr "信任状态" +msgid "Time to live" +msgstr "存活时间" -msgid "UPN suffixes" -msgstr "UPN后缀" +msgid "Time to live for records at zone apex" +msgstr "区域定点记录的生成时间" -#, fuzzy, python-brace-format -msgid "invalid SID: {SID}" -msgstr "无效的配置文件ID" +msgid "Time to live for records without explicit TTL definition" +msgstr "没有明确TTL定义的记录存活时间" -msgid "" -"\n" -"Add new trust to use.\n" -"\n" -"This command establishes trust relationship to another domain\n" -"which becomes 'trusted'. As result, users of the trusted domain\n" -"may access resources of this domain.\n" -"\n" -"Only trusts to Active Directory domains are supported right now.\n" -"\n" -"The command can be safely run multiple times against the same domain,\n" -"this will cause change to trust relationship credentials on both\n" -"sides.\n" -"\n" -"Note that if the command was previously run with a specific range type,\n" -"or with automatic detection of the range type, and you want to configure a\n" -"different range type, you may need to delete first the ID range using\n" -"ipa idrange-del before retrying the command with the desired range type.\n" -" " -msgstr "" - -#, fuzzy -msgid "Type of trusted domain ID range, one of allowed values" -msgstr "信任域ID范围的类型，是ipa-ad-trust-posix和ipa-ad-trust中的一个" - -msgid "External trust" -msgstr "外部的信任" - -msgid "" -"Establish external trust to a domain in another forest. The trust is not " -"transitive beyond the domain." -msgstr "建立外部信任到另一个森林域中。信任不会在域外传递。" - -#, python-format -msgid "Added Active Directory trust for realm \"%(value)s\"" -msgstr "已添加活动目录域\"%(value)s\"" +msgid "Time-based (TOTP)" +msgstr "计时型（TOTP）" -#, python-format -msgid "Re-established trust to domain \"%(value)s\"" -msgstr "重建信任域\"%(value)s\"" - -msgid "missing base_id" -msgstr "缺少base_id" - -msgid "pysss_murmur is not available on the server and no base-id is given." -msgstr "pysss_murmur在服务器上不可用并没有提供base-id。" - -msgid "trust type" -msgstr "信任类型" - -msgid "only \"ad\" is supported" -msgstr "仅支持\"ad\"" - -msgid "domain" -msgstr "域" - -msgid "" -"Cannot establish a trust to AD deployed in the same domain as IPA. Such " -"setup is not supported." -msgstr "不能建立一个信任到部署在IPA同一域中的AD。这样的设置不支持。" +msgid "Timeout" +msgstr "超时" -msgid "Realm-domain mismatch" -msgstr "Realm-domain不匹配" +#, c-format +msgid "Timeout exceeded." +msgstr "严重超时" msgid "" "To establish trust with Active Directory, the domain name and the realm name " "of the IPA server must match" msgstr "为了建立信任活动目录，IPA服务器的域名和realm名必须匹配" +msgid "To get command help, use:" +msgstr "获取命令帮助，使用：" + +msgid "Token ID" +msgstr "令牌ID" + +msgid "Token description (informational only)" +msgstr "令牌描述（只是信息）" + +msgid "Token hash algorithm" +msgstr "令牌散列算法" + +msgid "Token model (informational only)" +msgstr "令牌模式（只是信息）" + +msgid "Token secret (Base32; default: random)" +msgstr "令牌密码（Base32；默认：随机）" + +msgid "Token serial (informational only)" +msgstr "令牌序列号（只是信息）" + +msgid "Token synchronization failed" +msgstr "令牌同步失败" + +msgid "Token vendor name (informational only)" +msgstr "令牌供应商名称（只是信息）" + +msgid "Token was synchronized" +msgstr "令牌已同步" + +msgid "Topic commands:" +msgstr "主题命令：" + +msgid "Topic or Command" +msgstr "主题或命令" + +msgid "Topology" +msgstr "拓扑" + +msgid "Topology Segment" +msgstr "拓扑段" + +msgid "Topology Segments" +msgstr "拓扑段" + +#, python-format +msgid "Topology does not allow server %(server)s to replicate with servers:" +msgstr "拓扑不允许服务器%(server)s复制服务器：" + +msgid "Topology is disconnected" +msgstr "拓扑已断开连接" + +#, python-brace-format +msgid "Topology management requires minimum domain level {0} " +msgstr "拓扑管理需要最小域级别{0}" + +msgid "Topology suffix" +msgstr "拓扑后缀" + +msgid "Topology suffixes" +msgstr "拓扑后缀" + +msgid "Total number of variables env (>= count)" +msgstr "env变量总数（>= count）" + +msgid "True if not all results were returned" +msgstr "如果不是所有结果都返回了，那么为真" + +msgid "True means the operation was successful" +msgstr "正确的表示操作成功" + +msgid "Trust" +msgstr "信任" + +msgid "Trust Settings" +msgstr "信任设置" + +msgid "Trust direction" +msgstr "信任方向" + +msgid "Trust status" +msgstr "信任状态" + +msgid "Trust type" +msgstr "信任类型" + +msgid "Trust type (ad for Active Directory, default)" +msgstr "信任类型（活动目录，默认）" + +msgid "Trusted domain" +msgstr "已信任的域" + #, python-format msgid "" "Trusted domain %(domain)s is included among IPA realm domains. It needs to " @@ -16617,3400 +10286,315 @@ msgstr "" msgid "Trusted domain and administrator account use different realms" msgstr "信任域和管理员账户使用不同域" -msgid "Realm administrator password should be specified" -msgstr "域管理员密码应该被指定" +msgid "Trusted domain did not return a unique object" +msgstr "信任域没有返回一个唯一的对象" -msgid "id range type" -msgstr "id范围类型" +msgid "Trusted domain did not return a valid SID for the object" +msgstr "信任域没有为对象返回一个有效的SID" -msgid "" -"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-" -"type when adding an AD trust." -msgstr "" -"当添加一个AD信任时仅有ipa-ad-trust和ipa-ad-trust-posix允许--range-type值。" - -msgid "id range" -msgstr "id范围" - -msgid "" -"An id range already exists for this trust. You should either delete the old " -"range, or exclude --base-id/--range-size options from the command." -msgstr "" -"id范围已在该域中存在。你要么删除旧的范围，要么从命令中排除--base-id/--range-" -"size选项。" - -msgid "range exists" -msgstr "范围内存在" - -msgid "" -"ID range with the same name but different domain SID already exists. The ID " -"range for the new trusted domain must be created manually." -msgstr "同名但不同域SID的ID范围已存在。新信任域的ID范围必须手动创建。" - -msgid "range type change" -msgstr "范围类型改变" - -msgid "" -"ID range for the trusted domain already exists, but it has a different type. " -"Please remove the old range manually, or do not enforce type via --range-" -"type option." -msgstr "" -"信任域的ID范围已存在，但它有一个不同类型。请手动删除旧的范围，或者通过--" -"range-type选项不强制类型。" - -#, python-brace-format -msgid "Unable to resolve domain controller for {domain} domain. " -msgstr "" - -msgid "" -"Forward policy is defined for it in IPA DNS, perhaps forwarder points to " -"incorrect host?" -msgstr "在IPA DNS中转发器策略阻止了它，也许是转发器指向了不正确的主机？" - -#, python-brace-format -msgid "" -"IPA manages DNS, please verify your DNS configuration and make sure that " -"service records of the '{domain}' domain can be resolved. Examples how to " -"configure DNS with CLI commands or the Web UI can be found in the " -"documentation. " -msgstr "" - -#, python-brace-format -msgid "" -"Since IPA does not manage DNS records, ensure DNS is configured to resolve " -"'{domain}' domain from IPA hosts and back." -msgstr "" - -msgid "Unable to verify write permissions to the AD" -msgstr "不能在AD中验证写权限" - -msgid "Not enough arguments specified to perform trust setup" -msgstr "执行信任设置时没有指定足够的参数" - -#, python-format -msgid "Deleted trust \"%(value)s\"" -msgstr "已删除信任\"%(value)s\"" - -msgid "" -"\n" -" Modify a trust (for future use).\n" -"\n" -" Currently only the default option to modify the LDAP attributes is\n" -" available. More specific options will be added in coming releases.\n" -" " -msgstr "" - -#, python-format -msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)" -msgstr "已修改信任\"%(value)s\"（改变将在60s内生效）" - -#, python-format -msgid "%(count)d trust matched" -msgid_plural "%(count)d trusts matched" -msgstr[0] "已匹配%(count)d个信任" - -msgid "trust configuration" -msgstr "信任配置" - -msgid "Global Trust Configuration" -msgstr "全局信任配置" - -msgid "IPA AD trust agents" -msgstr "IPA AD信任代理" - -msgid "IPA servers configured as AD trust agents" -msgstr "IPA服务器配置为AD信任代理" - -msgid "IPA AD trust controllers" -msgstr "IPA AD信任控制器" - -msgid "IPA servers configured as AD trust controllers" -msgstr "IPA服务器配置为AD信任控制器" - -msgid "unsupported trust type" -msgstr "不支持的信任类型" - -#, python-format -msgid "Modified \"%(value)s\" trust configuration" -msgstr "已修改\"%(value)s\"信任配置" - -#, fuzzy -msgid "SID" -msgstr "GID" - -msgid "sidgen_was_run" -msgstr "" - -msgid "" -"This command relies on the existence of the \"editors\" group, but this " -"group was not found." -msgstr "该命令依赖于\"editors\"组的存在，但是该组没有找到。" - -msgid "trust domain" -msgstr "信任域" - -msgid "trust domains" -msgstr "信任域" +msgid "Trusted domain partner" +msgstr "信任域合作伙伴" msgid "Trusted domains" msgstr "已信任的域" -msgid "Trusted domain" -msgstr "已信任的域" +msgid "Trusted for delegation" +msgstr "允许授权" -msgid "Domain enabled" -msgstr "域已启用" +msgid "Trusted forest" +msgstr "信任森林" -#, python-format -msgid "Removed information about the trusted domain \"%(value)s\"" -msgstr "删除信任域\"%(value)s\"的信息" +msgid "Trusted to authenticate as user" +msgstr "信任用户认证" -msgid "" -"cannot delete root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "不能删除信任的根域，使用trust-del来删除它自己的信任" +msgid "Trusting forest" +msgstr "信任森林" -msgid "" -"List of trust domains successfully refreshed. Use trustdomain-find command " -"to list them." -msgstr "信任域列表更新成功。使用trustdomain-find命令来列举它们。" - -#, fuzzy -msgid "Configure this server as a trust agent." -msgstr "IPA服务器配置为AD信任代理" - -msgid "Enable support for trusted domains for old clients" -msgstr "" - -#, fuzzy -msgid "not allowed to remotely add agent" -msgstr "不允许修改用户条目" - -#, python-format -msgid "Enabled trust domain \"%(value)s\"" -msgstr "已启用信任域\"%(value)s\"" - -msgid "Root domain of the trust is always enabled for the existing trust" -msgstr "信任的根域总是支持现有的信任" - -#, python-format -msgid "Disabled trust domain \"%(value)s\"" -msgstr "已禁用信任域\"%(value)s\"" - -msgid "" -"cannot disable root domain of the trust, use trust-del to delete the trust " -"itself" -msgstr "不能禁用信任的根域，使用trust-del来删除它自己的信任" - -msgid "" -"\n" -"Vaults\n" -msgstr "" -"\n" -"库\n" - -msgid "" -"\n" -"Manage vaults.\n" -msgstr "" -"\n" -"管理库。\n" - -msgid "" -"\n" -"Vault is a secure place to store a secret. One vault can only\n" -"store one secret. When archiving a secret in a vault, the\n" -"existing secret (if any) is overwritten.\n" -msgstr "" - -msgid "" -"\n" -"Based on the ownership there are three vault categories:\n" -"* user/private vault\n" -"* service vault\n" -"* shared vault\n" -msgstr "" -"\n" -"基于所有者管理有三种库类别：\n" -"* 用户/私有库\n" -"* 服务库\n" -"* 共享库\n" - -msgid "" -"\n" -"User vaults are vaults owned used by a particular user. Private\n" -"vaults are vaults owned the current user. Service vaults are\n" -"vaults owned by a service. Shared vaults are owned by the admin\n" -"but they can be used by other users or services.\n" -msgstr "" -"\n" -"用户库被特定用户拥有并使用。私有库被当前用户拥有。服务库被一个服务拥有。共享" -"库被管理员拥有但可以被其他用户或服务使用。\n" - -msgid "" -"\n" -"Based on the security mechanism there are three types of\n" -"vaults:\n" -"* standard vault\n" -"* symmetric vault\n" -"* asymmetric vault\n" -msgstr "" -"\n" -"基于安全机制有三种库类型：\n" -"* 标准库\n" -"* 对称库\n" -"* 非对称库\n" - -msgid "" -"\n" -"Standard vault uses a secure mechanism to transport and\n" -"store the secret. The secret can only be retrieved by users\n" -"that have access to the vault.\n" -msgstr "" -"\n" -"标准库使用一种安全机制来传输和存储密码。密码仅能被有权限访问该库的用户检" -"索。\n" - -msgid "" -"\n" -"Symmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a password before transport.\n" -"The secret can only be retrieved using the same password.\n" -msgstr "" -"\n" -"对称库和标准库类似，但它在传输前会使用一个密码来预加密该密码。密码仅能使用相" -"同的密码来检索。\n" - -msgid "" -"\n" -"Asymmetric vault is similar to the standard vault, but it\n" -"pre-encrypts the secret using a public key before transport.\n" -"The secret can only be retrieved using the private key.\n" -msgstr "" -"\n" -"非对称库和标准库类似，但它在传输前会使用一个公钥来预加密密码。该密码仅能通过" -"对应的私钥来检索。\n" - -msgid "" -"\n" -" List vaults:\n" -" ipa vault-find\n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Add a standard vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type standard\n" -msgstr "" - -msgid "" -"\n" -" Add a symmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type symmetric --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Add an asymmetric vault:\n" -" ipa vault-add \n" -" [--user |--service |--shared]\n" -" --type asymmetric --public-key-file public.pem\n" -msgstr "" - -msgid "" -"\n" -" Show a vault:\n" -" ipa vault-show \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Modify vault description:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --desc \n" -msgstr "" - -msgid "" -"\n" -" Modify vault type:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --type \n" -" [old password/private key]\n" -" [new password/public key]\n" -msgstr "" - -msgid "" -"\n" -" Modify symmetric vault password:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --change-password\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password \n" -" --new-password \n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --old-password-file \n" -" --new-password-file \n" -msgstr "" - -msgid "" -"\n" -" Modify asymmetric vault keys:\n" -" ipa vault-mod \n" -" [--user |--service |--shared]\n" -" --private-key-file \n" -" --public-key-file \n" -msgstr "" - -msgid "" -"\n" -" Delete a vault:\n" -" ipa vault-del \n" -" [--user |--service |--shared]\n" -msgstr "" - -msgid "" -"\n" -" Display vault configuration:\n" -" ipa vaultconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Archive data into standard vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Archive data into symmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Archive data into asymmetric vault:\n" -" ipa vault-archive \n" -" [--user |--service |--shared]\n" -" --in \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from standard vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from symmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out \n" -" --password-file password.txt\n" -msgstr "" - -msgid "" -"\n" -" Retrieve data from asymmetric vault:\n" -" ipa vault-retrieve \n" -" [--user |--service |--shared]\n" -" --out --private-key-file private.pem\n" -msgstr "" - -msgid "" -"\n" -" Add vault owners:\n" -" ipa vault-add-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault owners:\n" -" ipa vault-remove-owner \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Add vault members:\n" -" ipa vault-add-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Delete vault members:\n" -" ipa vault-remove-member \n" -" [--user |--service |--shared]\n" -" [--users ] [--groups ] [--services ]\n" -msgstr "" - -msgid "" -"\n" -" Vault Container object.\n" -" " -msgstr "" -"\n" -" 库容器对象。\n" -" " - -msgid "vaultcontainer" -msgstr "库容器" - -msgid "vaultcontainers" -msgstr "库容器" - -msgid "Vault Containers" -msgstr "库容器" - -msgid "Vault Container" -msgstr "库容器" - -msgid "Service, shared and user options cannot be specified simultaneously" -msgstr "服务，共享的和用户选项不能被同时指定" - -msgid "Host is not supported" -msgstr "主机不被支持" - -msgid "KRA service is not enabled" -msgstr "KRA服务没有启用" - -msgid "Deleted vault container" -msgstr "已删除库容器" - -#, python-format -msgid "owner %s" -msgstr "所有者%s" - -msgid "" -"\n" -" Vault object.\n" -" " -msgstr "" -"\n" -" 库对象。\n" -" " - -msgid "vault" -msgstr "库" - -msgid "vaults" -msgstr "库" - -msgid "Vaults" -msgstr "库" - -msgid "Vault" -msgstr "库" - -msgid "Service, shared, and user options cannot be specified simultaneously" -msgstr "服务，共享的和用户选项不能被同时指定" - -#, fuzzy -msgid "Add a vault." -msgstr "修改一个库。" - -#, python-format -msgid "Added vault \"%(value)s\"" -msgstr "已添加库\"%(value)s\"" - -#, python-format -msgid "Deleted vault \"%(value)s\"" -msgstr "已删除库\"%(value)s\"" - -#, python-format -msgid "%(count)d vault matched" -msgid_plural "%(count)d vaults matched" -msgstr[0] "已匹配%(count)d个库" - -msgid "" -"Service(s), shared, and user(s) options cannot be specified simultaneously" -msgstr "服务，共享的和用户选项不能被同时指定" - -#, python-format -msgid "Modified vault \"%(value)s\"" -msgstr "已修改库\"%(value)s\"" - -msgid "Vault configuration" -msgstr "库配置" - -msgid "IPA KRA servers" -msgstr "IPA KRA服务器" - -msgid "IPA servers configured as key recovery agents" -msgstr "IPA服务器配置为密钥恢复代理" - -#, fuzzy -msgid "Key wrapping algorithm" -msgstr "令牌散列算法" - -#, python-format -msgid "Archived data into vault \"%(value)s\"" -msgstr "数据归档到库\"%(value)s\"" - -#, fuzzy -msgid "Retrieve data from a vault." -msgstr "从库中检索一个数据。" - -#, python-format -msgid "Retrieved data from vault \"%(value)s\"" -msgstr "从库\"%(value)s\"中检索数据" - -msgid "No archived data." -msgstr "没有归档数据。" - -#, fuzzy -msgid "Checks if any of the servers has the KRA service enabled" -msgstr "检查是否有任何服务器启用了CA服务。" - -msgid "" -"\n" -"Baseuser\n" -"\n" -"This contains common definitions for user/stageuser\n" -msgstr "" -"\n" -"基类用户\n" -"\n" -"这包含了用户/计划用户常见的定义\n" - -msgid "must be TRUE or FALSE" -msgstr "必须是TRUE或FALSE" - -msgid "" -"Object class ipaNTUserAttrs is missing, user entry cannot have SMB " -"attributes." -msgstr "" - -msgid "Principal alias" -msgstr "主体别名" - -#, fuzzy -msgid "User password expiration" -msgstr "密码过期" - -msgid "SSH public key fingerprint" -msgstr "SSH公钥指纹" - -#, fuzzy -#| msgid "Vault configuration" -msgid "External IdP configuration" -msgstr "库配置" - -msgid "External IdP user identifier" -msgstr "" - -msgid "A string that identifies the user at external IdP" -msgstr "" - -msgid "Base-64 encoded user certificate" -msgstr "Base-64编码的用户证书" - -#, fuzzy -msgid "Certificate mapping data" -msgstr "证书关联数据" - -msgid "SMB logon script path" -msgstr "" - -#, fuzzy -msgid "SMB profile path" -msgstr "%i配置文件已添加。" - -#, fuzzy -msgid "SMB Home Directory" -msgstr "主目录" - -#, fuzzy -msgid "SMB Home Directory Drive" -msgstr "主目录" - -#, python-format -msgid "invalid e-mail format: %(email)s" -msgstr "无效的电子邮件格式：%(email)s" - -#, python-format -msgid "manager %(manager)s not found" -msgstr "管理员%(manager)s没有找到" - -#, python-format -msgid "can be at most %(len)d characters" -msgstr "最多%(len)d个字符" - -msgid "Issuer" -msgstr "发行人" - -#, fuzzy -msgid "Issuer of the certificate" -msgstr "存储证书文件" - -msgid "Subject" -msgstr "主题" - -#, fuzzy -msgid "Subject of the certificate" -msgstr "存储证书文件。" - -#, fuzzy -msgid "cannot have an empty subject" -msgstr "不能为空" - -#, fuzzy -msgid "cannot specify both subject/issuer and certificate" -msgstr "不能同时指定原始证书和文件" - -#, fuzzy -msgid "cannot specify both subject/issuer and ipacertmapdata" -msgstr "不能同时指定原始证书和文件" - -#, fuzzy -msgid "Add one or more certificate mappings to the user entry." -msgstr "向用户条目中添加一个或多个证书" - -#, fuzzy, python-format -msgid "Added certificate mappings to user \"%(value)s\"" -msgstr "已为用户\"%(value)s\"添加证书" - -#, fuzzy -msgid "Remove one or more certificate mappings from the user entry." -msgstr "向用户条目中移除一个或多个证书" - -#, fuzzy, python-format -msgid "Removed certificate mappings from user \"%(value)s\"" -msgstr "已为用户\"%(value)s\"删除证书" - -msgid "" -"\n" -"Manage CA ACL rules.\n" -"\n" -"This plugin is used to define rules governing which CAs and profiles\n" -"may be used to issue certificates to particular principals or groups\n" -"of principals.\n" -"\n" -"SUBJECT PRINCIPAL SCOPE:\n" -"\n" -"For a certificate request to be allowed, the principal(s) that are\n" -"the subject of a certificate request (not necessarily the principal\n" -"actually requesting the certificate) must be included in the scope\n" -"of a CA ACL that also includes the target CA and profile.\n" -"\n" -"Users can be included by name, group or the \"all users\" category.\n" -"Hosts can be included by name, hostgroup or the \"all hosts\"\n" -"category. Services can be included by service name or the \"all\n" -"services\" category. CA ACLs may be associated with a single type of\n" -"principal, or multiple types.\n" -"\n" -"CERTIFICATE AUTHORITY SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more CAs by name, or by the\n" -"\"all CAs\" category. For compatibility reasons, a CA ACL with no CA\n" -"association implies an association with the 'ipa' CA (and only this\n" -"CA).\n" -"\n" -"PROFILE SCOPE:\n" -"\n" -"A CA ACL can be associated with one or more profiles by Profile ID.\n" -"The Profile ID is a string without spaces or punctuation starting\n" -"with a letter and followed by a sequence of letters, digits or\n" -"underscore (\"_\").\n" -"\n" -"EXAMPLES:\n" -"\n" -" Create a CA ACL \"test\" that grants all users access to the\n" -" \"UserCert\" profile on all CAs:\n" -" ipa caacl-add test --usercat=all --cacat=all\n" -" ipa caacl-add-profile test --certprofiles UserCert\n" -"\n" -" Display the properties of a named CA ACL:\n" -" ipa caacl-show test\n" -"\n" -" Create a CA ACL to let user \"alice\" use the \"DNP3\" profile on \"DNP3-CA" -"\":\n" -" ipa caacl-add alice_dnp3\n" -" ipa caacl-add-ca alice_dnp3 --cas DNP3-CA\n" -" ipa caacl-add-profile alice_dnp3 --certprofiles DNP3\n" -" ipa caacl-add-user alice_dnp3 --user=alice\n" -"\n" -" Disable a CA ACL:\n" -" ipa caacl-disable test\n" -"\n" -" Remove a CA ACL:\n" -" ipa caacl-del test\n" -msgstr "" - -msgid "CA ACL" -msgstr "" - -msgid "CA ACLs" -msgstr "" - -msgid "CA category" -msgstr "CA类别" - -msgid "CA category the ACL applies to" -msgstr "ACL应用的CA类别" - -msgid "CAs" -msgstr "" - -#, python-format -msgid "Added CA ACL \"%(value)s\"" -msgstr "已添加CA ACL\"%(value)s\"" - -#, python-format -msgid "Deleted CA ACL \"%(value)s\"" -msgstr "已删除CA ACL\"%(value)s\"" - -msgid "default CA ACL can be only disabled" -msgstr "默认的CA ACL只可以被禁用" - -#, python-format -msgid "Modified CA ACL \"%(value)s\"" -msgstr "已修改CA ACL\"%(value)s\"" - -msgid "CA category cannot be set to 'all' while there are allowed CAs" -msgstr "CA类别不能设置为all'，虽然有允许CAs" - -msgid "" -"profile category cannot be set to 'all' while there are allowed profiles" -msgstr "配置文件类别不能设置为all'，虽然有允许配置文件" - -msgid "" -"service category cannot be set to 'all' while there are allowed services" -msgstr "服务类别不能设置为all'，虽然有允许服务" - -#, python-format -msgid "%(count)d CA ACL matched" -msgid_plural "%(count)d CA ACLs matched" -msgstr[0] "已匹配%(count)d个CA ACL" - -#, python-format -msgid "Enabled CA ACL \"%(value)s\"" -msgstr "已启用CA ACL\"%(value)s\"" - -#, python-format -msgid "Disabled CA ACL \"%(value)s\"" -msgstr "已禁用CA ACL\"%(value)s\"" - -#, python-format -msgid "%i user or group added." -msgstr "%i用户或组已添加。" - -#, python-format -msgid "%i users or groups added." -msgstr "%i用户或用户组已添加。" - -msgid "users cannot be added when user category='all'" -msgstr "当用户类别='all'时用户不能被添加" - -#, python-format -msgid "%i user or group removed." -msgstr "%i用户或组已移除。" - -#, python-format -msgid "%i users or groups removed." -msgstr "%i用户或用户组已移除。" - -#, python-format -msgid "%i host or hostgroup added." -msgstr "%i主机或主机组已添加。" - -#, python-format -msgid "%i hosts or hostgroups added." -msgstr "%i主机或主机组已添加。" - -msgid "hosts cannot be added when host category='all'" -msgstr "当主机类别='all'时主机不能被添加" - -#, python-format -msgid "%i host or hostgroup removed." -msgstr "%i主机或主机组已移除。" - -#, python-format -msgid "%i hosts or hostgroups removed." -msgstr "%i主机或主机组已移除。" - -#, python-format -msgid "%i service added." -msgstr "%i服务已添加。" - -#, python-format -msgid "%i services added." -msgstr "%i服务已添加。" - -msgid "services cannot be added when service category='all'" -msgstr "当服务类别='all'时服务不能被添加" - -#, python-format -msgid "%i service removed." -msgstr "%i服务已移除。" - -#, python-format -msgid "%i services removed." -msgstr "%i服务已移除。" - -#, python-format -msgid "%i profile added." -msgstr "%i配置文件已添加。" - -#, python-format -msgid "%i profiles added." -msgstr "%i配置文件已添加。" - -msgid "profiles cannot be added when profile category='all'" -msgstr "当配置文件类别='all'时配置文件不能被添加" - -#, python-format -msgid "%i profile removed." -msgstr "%i配置文件已移除。" - -#, python-format -msgid "%i profiles removed." -msgstr "%i配置文件已移除。" - -msgid "Add CAs to a CA ACL." -msgstr "向一个CA ACL中添加CAs。" - -#, python-format -msgid "%i CA added." -msgstr "%iCA已添加。" - -#, python-format -msgid "%i CAs added." -msgstr "%iCAs已添加。" - -msgid "CAs cannot be added when CA category='all'" -msgstr "当CA类别='all'时CAs不能被添加" - -msgid "Remove CAs from a CA ACL." -msgstr "从一个CA ACL中移除CAs。" - -#, python-format -msgid "%i CA removed." -msgstr "%iCA已移除。" - -#, python-format -msgid "%i CAs removed." -msgstr "%iCAs已移除。" - -#, fuzzy -msgid "" -"\n" -"Certificate Identity Mapping\n" -msgstr "证书颁发机构" - -msgid "" -"\n" -"Manage Certificate Identity Mapping configuration and rules.\n" -msgstr "" - -msgid "" -"\n" -"IPA supports the use of certificates for authentication. Certificates can\n" -"either be stored in the user entry (full certificate in the usercertificate\n" -"attribute), or simply linked to the user entry through a mapping.\n" -"This code enables the management of the rules allowing to link a\n" -"certificate to a user entry.\n" -msgstr "" - -msgid "" -"\n" -" Display the Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify Certificate Identity Mapping global configuration:\n" -" ipa certmapconfig-mod --promptusername=TRUE\n" -msgstr "" - -msgid "" -"\n" -" Create a new Certificate Identity Mapping Rule:\n" -" ipa certmaprule-add rule1 --desc=\"Link certificate with subject and " -"issuer\"\n" -msgstr "" - -msgid "" -"\n" -" Modify a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-mod rule1 --maprule=\"\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-disable rule1\n" -msgstr "" - -msgid "" -"\n" -" Enable a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-enable rule1\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Display information about a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-show rule1\n" -msgstr "显示一个命名服务授权规则信息。" - -msgid "" -"\n" -" Find all Certificate Identity Mapping Rules with the specified domain:\n" -" ipa certmaprule-find --domain example.com\n" -msgstr "" - -msgid "" -"\n" -" Delete a Certificate Identity Mapping Rule:\n" -" ipa certmaprule-del rule1\n" -msgstr "" - -#, python-format -msgid "" -"The domain(s) \"%s\" cannot be used to apply altSecurityIdentities check." -msgstr "" - -msgid "" -"The mapping rule with altSecurityIdentities should be applied to a trusted " -"Active Directory domain but no domain was associated with the rule." -msgstr "" - -#, python-format -msgid "The domain %s is neither IPA domain nor a trusteddomain." -msgstr "" - -#, fuzzy -msgid "Certificate Identity Mapping configuration options" -msgstr "修改配置选项" - -#, fuzzy -msgid "Certificate Identity Mapping Global Configuration" -msgstr "修改证书配置文件配置。" - -#, fuzzy -msgid "Prompt for the username" -msgstr "提示设置用户密码" - -msgid "" -"Prompt for the username when multiple identities are mapped to a certificate" -msgstr "" - -#, fuzzy -msgid "Modify Certificate Identity Mapping configuration." -msgstr "修改证书配置文件配置。" - -#, fuzzy -msgid "Show the current Certificate Identity Mapping configuration." -msgstr "显示当前配置。" - -#, fuzzy -msgid "Certificate Identity Mapping Rules" -msgstr "证书颁发机构" - -#, fuzzy -msgid "Certificate Identity Mapping Rule" -msgstr "证书类型" - -#, fuzzy -msgid "Certificate Identity Mapping Rule name" -msgstr "证书配置文件不能被重命名" - -msgid "Certificate Identity Mapping Rule description" -msgstr "" - -msgid "Mapping rule" -msgstr "" - -#, fuzzy -msgid "Rule used to map the certificate with a user entry" -msgstr "向用户条目中移除一个或多个证书" - -#, fuzzy -msgid "Matching rule" -msgstr "匹配类型" - -msgid "Rule used to check if a certificate can be used for authentication" -msgstr "" - -msgid "Domain where the user entry will be searched" -msgstr "" - -#, fuzzy -msgid "Priority of the rule (higher number means lower priority" -msgstr "策略优先级（数字越大意味着优先级越低" - -#, fuzzy -msgid "Create a new Certificate Identity Mapping Rule." -msgstr "创建一个新的服务授权规则。" - -#, fuzzy, python-format -msgid "Added Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "已为用户\"%(value)s\"添加证书" - -#, fuzzy -msgid "Modify a Certificate Identity Mapping Rule." -msgstr "修改证书配置文件配置。" - -#, fuzzy, python-format -msgid "Modified Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "已修改配置文件\"%(value)s\"" - -#, fuzzy -msgid "Search for Certificate Identity Mapping Rules." -msgstr "查找证书配置文件。" - -#, fuzzy, python-format -msgid "%(count)d Certificate Identity Mapping Rule matched" -msgid_plural "%(count)d Certificate Identity Mapping Rules matched" -msgstr[0] "已匹配%(count)d个服务授权规则" - -#, fuzzy -msgid "Display information about a Certificate Identity Mapping Rule." -msgstr "显示一个命名服务授权规则信息。" - -#, fuzzy -msgid "Delete a Certificate Identity Mapping Rule." -msgstr "删除一个证书配置文件。" - -#, fuzzy, python-format -msgid "Deleted Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "已删除服务授权目标\"%(value)s\"" - -msgid "Enable a Certificate Identity Mapping Rule." -msgstr "" - -#, fuzzy, python-format -msgid "Enabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "已为用户\"%(value)s\"添加证书" - -#, fuzzy -msgid "Disable a Certificate Identity Mapping Rule." -msgstr "删除一个证书配置文件。" - -#, fuzzy, python-format -msgid "Disabled Certificate Identity Mapping Rule \"%(value)s\"" -msgstr "已修改配置文件\"%(value)s\"" - -#, fuzzy -msgid "Failed to connect to sssd over SystemBus. See details in the error_log" -msgstr "从信任森林中获取域失败。在error_log中查看详细信息" - -#, fuzzy -msgid "Failed to find users over SystemBus. See details in the error_log" -msgstr "从信任森林中获取域失败。在error_log中查看详细信息" - -#, fuzzy -msgid "User logins" -msgstr "用户登录名" - -msgid "" -"\n" -" Search for users matching the provided certificate.\n" -"\n" -" This command relies on SSSD to retrieve the list of matching users and\n" -" may return cached data. For more information on purging SSSD cache,\n" -" please refer to sss_cache documentation.\n" -" " -msgstr "" - -#, fuzzy, python-format -msgid "%(count)s user matched" -msgid_plural "%(count)s users matched" -msgstr[0] "已匹配%(count)d个用户" - -msgid "" -"\n" -"Server configuration\n" -"\n" -"Manage the default values that IPA uses and some of its tuning parameters.\n" -"\n" -"NOTES:\n" -"\n" -"The password notification value (--pwdexpnotify) is stored here so it will\n" -"be replicated. It is not currently used to notify users in advance of an\n" -"expiring password.\n" -"\n" -"Some attributes are read-only, provided only for information purposes. " -"These\n" -"include:\n" -"\n" -"Certificate Subject base: the configured certificate subject base,\n" -" e.g. O=EXAMPLE.COM. This is configurable only at install time.\n" -"Password plug-in features: currently defines additional hashes that the\n" -" password will generate (there may be other conditions).\n" -"\n" -"When setting the order list for mapping SELinux users you may need to\n" -"quote the value so it isn't interpreted by the shell.\n" -"\n" -"The maximum length of a hostname in Linux is controlled by\n" -"MAXHOSTNAMELEN in the kernel and defaults to 64. Some other operating\n" -"systems, Solaris for example, allows hostnames up to 255 characters.\n" -"This option will allow flexibility in length but by default limiting\n" -"to the Linux maximum length.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Show basic server configuration:\n" -" ipa config-show\n" -"\n" -" Show all configuration options:\n" -" ipa config-show --all\n" -"\n" -" Change maximum username length to 99 characters:\n" -" ipa config-mod --maxusername=99\n" -"\n" -" Change maximum host name length to 255 characters:\n" -" ipa config-mod --maxhostname=255\n" -"\n" -" Increase default time and size limits for maximum IPA server search:\n" -" ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n" -"\n" -" Set default user e-mail domain:\n" -" ipa config-mod --emaildomain=example.com\n" -"\n" -" Enable migration mode to make \"ipa migrate-ds\" command operational:\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -" Define SELinux user map order:\n" -" ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-" -"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n" -msgstr "" - -#, fuzzy -msgid "must be at least 10" -msgstr "必须至少%(minvalue)d" - -msgid "configuration options" -msgstr "配置选项" - -msgid "Configuration" -msgstr "配置" - -#, fuzzy -msgid "Maximum hostname length" -msgstr "最大用户名长度" - -msgid "Enable adding subids to new users" -msgstr "" - -msgid "IPA masters" -msgstr "IPA主服务器" - -msgid "List of all IPA masters" -msgstr "所有IPA主服务器列表" - -#, fuzzy -msgid "Hidden IPA masters" -msgstr "IPA主服务器" - -#, fuzzy -msgid "List of all hidden IPA masters" -msgstr "所有IPA主服务器列表" - -msgid "IPA master capable of PKINIT" -msgstr "" - -msgid "IPA master which can process PKINIT requests" -msgstr "" - -msgid "IPA CA servers" -msgstr "IPA CA服务器" - -msgid "IPA servers configured as certificate authority" -msgstr "IPA服务器配置为证书认证机构" - -#, fuzzy -msgid "Hidden IPA CA servers" -msgstr "IPA CA服务器" - -#, fuzzy -msgid "Hidden IPA servers configured as certificate authority" -msgstr "IPA服务器配置为证书认证机构" - -msgid "IPA CA renewal master" -msgstr "IPA CA更新主服务器" - -msgid "Renewal master for IPA certificate authority" -msgstr "为IPA证书认证机构更新主服务器" - -#, fuzzy -msgid "IPA servers configured as key recovery agent" -msgstr "IPA服务器配置为密钥恢复代理" - -#, fuzzy -msgid "Hidden IPA KRA servers" -msgstr "IPA KRA服务器" - -#, fuzzy -msgid "Hidden IPA servers configured as key recovery agent" -msgstr "IPA服务器配置为密钥恢复代理" - -msgid "Domain resolution order" -msgstr "" - -#, fuzzy -msgid "colon-separated list of domains used for short name qualification" -msgstr "允许迁移的以逗号分隔的用户组列表" - -msgid "IPA DNS servers" -msgstr "IPA DNS服务器" - -#, fuzzy -msgid "IPA servers configured as domain name server" -msgstr "IPA服务器配置为DNSSec密钥主机" - -#, fuzzy -msgid "Hidden IPA DNS servers" -msgstr "IPA DNS服务器" - -#, fuzzy -msgid "Hidden IPA servers configured as domain name server" -msgstr "IPA服务器配置为密钥恢复代理" - -msgid "IPA DNSSec key master" -msgstr "IPA DNSSec密钥主机" - -#, fuzzy -msgid "DNSec key master" -msgstr "IPA DNSSec密钥主机" - -#, fuzzy -msgid "Setup SID configuration" -msgstr "信任配置" - -msgid "New users and groups automatically get a SID assigned" -msgstr "" - -#, fuzzy -msgid "Add SIDs" -msgstr "添加一个新的ID视图。" - -msgid "Add SIDs for existing users and groups" -msgstr "" - -#, fuzzy -msgid "NetBIOS name of the IPA domain" -msgstr "信任域的名称" - -#, fuzzy -msgid "Empty domain is not allowed" -msgstr "选项是不允许的" - -#, fuzzy, python-format -msgid "Invalid domain name '%(domain)s': %(e)s" -msgstr "无效的域名：%s" - -#, fuzzy, python-format -msgid "Server has no information about domain '%(domain)s'" -msgstr "删除信任域\"%(value)s\"的信息" - -#, python-format -msgid "Disabled domain '%(domain)s' is not allowed" -msgstr "" - -#, fuzzy -msgid "not allowed to enable SID generation" -msgstr "不允许执行操作：%s" - -msgid "" -"Up to 15 characters and only uppercase ASCII letters, digits and dashes are " -"allowed. Empty string is not allowed." -msgstr "" - -#, fuzzy -msgid "Failed to call DBus" -msgstr "添加失败" - -#, fuzzy -msgid "Configuration of SID failed. See details in the error log" -msgstr "从信任森林中获取域失败。在error_log中查看详细信息" - -msgid "The group doesn't exist" -msgstr "组不存在" - -#, python-format -msgid "attribute \"%s\" not allowed" -msgstr "不允许属性\"%s\"" - -msgid "May not be empty" -msgstr "可能不是闲置的" - -#, python-format -msgid "%(obj)s default attribute %(attr)s would not be allowed!" -msgstr "%(obj)s默认属性%(attr)s是不允许的！" - -msgid "A list of SELinux users delimited by $ expected" -msgstr "SELinux用户列表期望以$分隔" - -#, python-format -msgid "SELinux user '%(user)s' is not valid: %(error)s" -msgstr "SELinux用户'%(user)s'是无效的：%(error)s" - -msgid "SELinux user map default user not in order list" -msgstr "SELinux用户映射默认用户没有在列表中" - -#, python-format -msgid "You cannot specify %s without the --enable-sid option" -msgstr "" - -msgid "" -"\n" -"Domain Name System (DNS)\n" -msgstr "" -"\n" -"域名系统（DNS）\n" - -msgid "" -"\n" -"Manage DNS zone and resource records.\n" -msgstr "" -"\n" -"管理DNS区域和资源记录。\n" - -msgid "" -"\n" -"SUPPORTED ZONE TYPES\n" -"\n" -" * Master zone (dnszone-*), contains authoritative data.\n" -" * Forward zone (dnsforwardzone-*), forwards queries to configured " -"forwarders\n" -" (a set of DNS servers).\n" -msgstr "" - -msgid "" -"\n" -"USING STRUCTURED PER-TYPE OPTIONS\n" -msgstr "" - -msgid "" -"\n" -"There are many structured DNS RR types where DNS data stored in LDAP server\n" -"is not just a scalar value, for example an IP address or a domain name, but\n" -"a data structure which may be often complex. A good example is a LOC record\n" -"[RFC1876] which consists of many mandatory and optional parts (degrees,\n" -"minutes, seconds of latitude and longitude, altitude or precision).\n" -msgstr "" - -msgid "" -"\n" -"It may be difficult to manipulate such DNS records without making a mistake\n" -"and entering an invalid value. DNS module provides an abstraction over " -"these\n" -"raw records and allows to manipulate each RR type with specific options. " -"For\n" -"each supported RR type, DNS module provides a standard option to manipulate\n" -"a raw records with format ---rec, e.g. --mx-rec, and special " -"options\n" -"for every part of the RR structure with format ---, e.g.\n" -"--mx-preference and --mx-exchanger.\n" -msgstr "" - -msgid "" -"\n" -"When adding a record, either RR specific options or standard option for a " -"raw\n" -"value can be used, they just should not be combined in one add operation. " -"When\n" -"modifying an existing entry, new RR specific options can be used to change\n" -"one part of a DNS record, where the standard option for raw value is used\n" -"to specify the modified value. The following example demonstrates\n" -"a modification of MX record preference from 0 to 1 in a record without\n" -"modifying the exchanger:\n" -"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n" -msgstr "" - -msgid "" -"\n" -"\n" -"EXAMPLES:\n" -msgstr "" -"\n" -"\n" -"例如：\n" - -msgid "" -"\n" -" Add new zone:\n" -" ipa dnszone-add example.com --admin-email=admin@example.com\n" -msgstr "" - -msgid "" -"\n" -" Add system permission that can be used for per-zone privilege delegation:\n" -" ipa dnszone-add-permission example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow dynamic updates for hosts own records in realm " -"EXAMPLE.COM:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE\n" -msgstr "" - -msgid "" -"\n" -" This is the equivalent of:\n" -" ipa dnszone-mod example.com --dynamic-update=TRUE \\\n" -" --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM " -"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n" -msgstr "" - -msgid "" -"\n" -" Modify the zone to allow zone transfers for local network only:\n" -" ipa dnszone-mod example.com --allow-transfer=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add new reverse zone specified by network IP address:\n" -" ipa dnszone-add --name-from-ip=192.0.2.0/24\n" -msgstr "" - -msgid "" -"\n" -" Add second nameserver for example.com:\n" -" ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a mail server for example.com:\n" -" ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n" -msgstr "" - -msgid "" -"\n" -" Add another record using MX record specific options:\n" -" ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n" -msgstr "" - -msgid "" -"\n" -" Add another record using interactive mode (started when dnsrecord-add, " -"dnsrecord-mod,\n" -" or dnsrecord-del are executed with no options):\n" -" ipa dnsrecord-add example.com @\n" -" Please choose a type of DNS resource record to be added\n" -" The most common types for this type of zone are: NS, MX, LOC\n" -"\n" -" DNS resource record type: MX\n" -" MX Preference: 30\n" -" MX Exchanger: mail3\n" -" Record name: example.com\n" -" MX record: 10 mail1, 20 mail2, 30 mail3\n" -" NS record: nameserver.example.com., nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete previously added nameserver from example.com:\n" -" ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add LOC record for example.com:\n" -" ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E " -"227.64m\"\n" -msgstr "" - -msgid "" -"\n" -" Add new A record for www.example.com. Create a reverse record in " -"appropriate\n" -" reverse zone as well. In this case a PTR record \"2\" pointing to www." -"example.com\n" -" will be created in zone 2.0.192.in-addr.arpa.\n" -" ipa dnsrecord-add example.com www --a-rec=192.0.2.2 --a-create-reverse\n" -msgstr "" - -msgid "" -"\n" -" Add new PTR record for www.example.com\n" -" ipa dnsrecord-add 2.0.192.in-addr.arpa. 2 --ptr-rec=www.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Add new SRV records for LDAP servers. Three quarters of the requests\n" -" should go to fast.example.com, one quarter to slow.example.com. If neither\n" -" is available, switch to backup.example.com.\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example." -"com\"\n" -" ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup." -"example.com\"\n" -msgstr "" - -msgid "" -"\n" -" The interactive mode can be used for easy modification:\n" -" ipa dnsrecord-mod example.com _ldap._tcp\n" -" No option to modify specific record provided.\n" -" Current DNS record contents:\n" -"\n" -" SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 " -"backup.example.com\n" -"\n" -" Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n" -" Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n" -" SRV Priority [0]: (keep the default value)\n" -" SRV Weight [1]: 2 (modified value)\n" -" SRV Port [389]: (keep the default value)\n" -" SRV Target [slow.example.com]: (keep the default value)\n" -" 1 SRV record skipped. Only one value per DNS record type can be modified " -"at one time.\n" -" Record name: _ldap._tcp\n" -" SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 " -"389 slow.example.com\n" -msgstr "" - -msgid "" -"\n" -" After this modification, three fifths of the requests should go to\n" -" fast.example.com and two fifths to slow.example.com.\n" -msgstr "" - -msgid "" -"\n" -" An example of the interactive mode for dnsrecord-del command:\n" -" ipa dnsrecord-del example.com www\n" -" No option to delete specific record provided.\n" -" Delete all? Yes/No (default No): (do not delete all records)\n" -" Current DNS record contents:\n" -"\n" -" A record: 192.0.2.2, 192.0.2.3\n" -"\n" -" Delete A record '192.0.2.2'? Yes/No (default No):\n" -" Delete A record '192.0.2.3'? Yes/No (default No): y\n" -" Record name: www\n" -" A record: 192.0.2.2 (A record 192.0.2.3 has been " -"deleted)\n" -msgstr "" - -msgid "" -"\n" -" Show zone example.com:\n" -" ipa dnszone-show example.com\n" -msgstr "" - -msgid "" -"\n" -" Find zone with \"example\" in its domain name:\n" -" ipa dnszone-find example\n" -msgstr "" - -msgid "" -"\n" -" Find records for resources with \"www\" in their name in zone example.com:\n" -" ipa dnsrecord-find example.com www\n" -msgstr "" - -msgid "" -"\n" -" Find A records with value 192.0.2.2 in zone example.com\n" -" ipa dnsrecord-find example.com --a-rec=192.0.2.2\n" -msgstr "" - -msgid "" -"\n" -" Show records for resource www in zone example.com\n" -" ipa dnsrecord-show example.com www\n" -msgstr "" - -msgid "" -"\n" -" Delegate zone sub.example to another nameserver:\n" -" ipa dnsrecord-add example.com ns.sub --a-rec=203.0.113.1\n" -" ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n" -msgstr "" - -msgid "" -"\n" -" Delete zone example.com with all resource records:\n" -" ipa dnszone-del example.com\n" -msgstr "" - -msgid "" -"\n" -" If a global forwarder is configured, all queries for which this server is " -"not\n" -" authoritative (e.g. sub.example.com) will be routed to the global " -"forwarder.\n" -" Global forwarding configuration can be overridden per-zone.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of forwarding in IPA matches BIND semantics and depends on the " -"type\n" -" of zone:\n" -" * Master zone: local BIND replies authoritatively to queries for data in\n" -" the given zone (including authoritative NXDOMAIN answers) and forwarding\n" -" affects only queries for names below zone cuts (NS records) of locally\n" -" served zones.\n" -"\n" -" * Forward zone: forward zone contains no authoritative data. BIND " -"forwards\n" -" queries, which cannot be answered from its local cache, to configured\n" -" forwarders.\n" -msgstr "" - -msgid "" -"\n" -" Semantics of the --forward-policy option:\n" -" * none - disable forwarding for the given zone.\n" -" * first - forward all queries to configured forwarders. If they fail,\n" -" do resolution using DNS root servers.\n" -" * only - forward all queries to configured forwarders and if they fail,\n" -" return failure.\n" -msgstr "" - -msgid "" -"\n" -" Disable global forwarding for given sub-tree:\n" -" ipa dnszone-mod example.com --forward-policy=none\n" -msgstr "" - -msgid "" -"\n" -" This configuration forwards all queries for names outside the example.com\n" -" sub-tree to global forwarders. Normal recursive resolution process is used\n" -" for names inside the example.com sub-tree (i.e. NS records are followed " -"etc.).\n" -msgstr "" - -msgid "" -"\n" -" Forward all requests for the zone external.example.com to another " -"forwarder\n" -" using a \"first\" policy (it will send the queries to the selected " -"forwarder\n" -" and if not answered it will use global root servers):\n" -" ipa dnsforwardzone-add external.example.com --forward-policy=first \\\n" -" --forwarder=203.0.113.1\n" -msgstr "" - -msgid "" -"\n" -" Change forward-policy for external.example.com:\n" -" ipa dnsforwardzone-mod external.example.com --forward-policy=only\n" -msgstr "" - -msgid "" -"\n" -" Show forward zone external.example.com:\n" -" ipa dnsforwardzone-show external.example.com\n" -msgstr "" - -msgid "" -"\n" -" List all forward zones:\n" -" ipa dnsforwardzone-find\n" -msgstr "" - -msgid "" -"\n" -" Delete forward zone external.example.com:\n" -" ipa dnsforwardzone-del external.example.com\n" -msgstr "" - -msgid "" -"\n" -" Resolve a host name to see if it exists (will add default IPA domain\n" -" if one is not included):\n" -" ipa dns-resolve www.example.com\n" -" ipa dns-resolve www\n" -msgstr "" - -msgid "" -"\n" -"\n" -"GLOBAL DNS CONFIGURATION\n" -msgstr "" - -msgid "" -"\n" -"DNS configuration passed to command line install script is stored in a " -"local\n" -"configuration file on each IPA server where DNS service is configured. " -"These\n" -"local settings can be overridden with a common configuration stored in LDAP\n" -"server:\n" -msgstr "" - -msgid "" -"\n" -" Show global DNS configuration:\n" -" ipa dnsconfig-show\n" -msgstr "" - -msgid "" -"\n" -" Modify global DNS configuration and set a list of global forwarders:\n" -" ipa dnsconfig-mod --forwarder=203.0.113.113\n" -msgstr "" - -msgid "invalid IP network format" -msgstr "无效的IP网络格式" - -msgid "each ACL element must be terminated with a semicolon" -msgstr "每个ACL元素必须以分好结束" - -msgid "invalid address format" -msgstr "无效的地址格式" - -msgid "" -"expected format: <0-255> <0-255> <0-65535> even-" -"length_hexadecimal_digits_or_hyphen" -msgstr "期望的格式： <0-255> <0-255> <0-65535> 每个长度是十六进制数字或连字符" - -msgid "algorithm value: allowed interval 0-255" -msgstr "算法值：允许间隔0-255" - -msgid "flags value: allowed interval 0-255" -msgstr "标记值：允许间隔0-255" - -msgid "iterations value: allowed interval 0-65535" -msgstr "迭代值：允许间隔0-65535" - -#, python-format -msgid "salt value: %(err)s" -msgstr "盐值：%(err)s" - -msgid "invalid domain-name: not fully qualified" -msgstr "无效的域名：没有完全限制" - -msgid "should not be a wildcard domain name (RFC 4592 section 4)" -msgstr "不应该是一个通配符域名（RFC 4592 第四节）" - -#, python-format -msgid "" -"All nameservers failed to answer the query for DNS reverse zone %(revdns)s" -msgstr "" - -#, python-format -msgid "" -"No answers could be found in the specified lifetime for DNS reverse zone " -"%(revdns)s" -msgstr "" - -#, python-format -msgid "" -"DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this " -"server" -msgstr "IP地址为%(addr)s的DNS反向区域%(revzone)s没有被该服务器管理" - -#, python-format -msgid "DNS zone %(zone)s not found" -msgstr "DNS区域%(zone)s没有找到" - -#, python-format -msgid "IP address %(ip)s is already assigned in domain %(domain)s." -msgstr "IP地址%(ip)s在域%(domain)s中已分配。" - -#, python-format -msgid "" -"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s." -msgstr "在反向区域%(zone)s中IP地址为%(ip)s的反向记录已存在。" - -#, python-format -msgid "%s record" -msgstr "%s记录" - -#, python-format -msgid "Raw %s records" -msgstr "原始的%s记录" - -#, python-format -msgid "%s Record" -msgstr "%s记录" - -#, python-format -msgid "(see RFC %s for details)" -msgstr "（查阅RFC %s 来获取详细信息）" - -#, python-format -msgid "'%s' is a required part of DNS record" -msgstr "'%s'是DNS记录的必要部分" - -msgid "Invalid number of parts!" -msgstr "无效的部分！" - -#, python-format -msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin" -msgstr "DNS RR类型\"%s\"在bind-dyndb-ldap插件中不被支持" - -#, python-format -msgid "format must be specified as \"%(format)s\" %(rfcs)s" -msgstr "格式必须被指定为\"%(format)s\" %(rfcs)s" - -msgid "Create reverse" -msgstr "创建反向" - -#, python-format -msgid "Cannot create reverse record for \"%(value)s\": %(exc)s" -msgstr "不能创建反向记录\"%(value)s\"：%(exc)s" - -msgid "Exchanger" -msgstr "交换器" - -msgid "" -"format must be specified as\n" -" \"d1 [m1 [s1]] {\"N\"|\"S\"} d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] " -"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n" -" where:\n" -" d1: [0 .. 90] (degrees latitude)\n" -" d2: [0 .. 180] (degrees longitude)\n" -" m1, m2: [0 .. 59] (minutes latitude/longitude)\n" -" s1, s2: [0 .. 59.999] (seconds latitude/longitude)\n" -" alt: [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n" -" siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n" -" See RFC 1876 for details" -msgstr "" - -#, python-format -msgid "'%(required)s' must not be empty when '%(name)s' is set" -msgstr "当'%(name)s'被设置时'%(required)s'必须不能为空" - -msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" -msgstr "标记必须是\"S\"，\"A\"，\"U\"或\"P\"中的一个" - -msgid "Priority (order)" -msgstr "优先级（顺序）" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the " -"server with the lowest-numbered priority they can reach." -msgstr "" -"数字越低代表优先级越高。客户端尝试用它们可以得到的最低数字优先级区访问服务" -"器。" - -msgid "Relative weight for entries with the same priority." -msgstr "拥有相同优先级条目的相对权重。" - -msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" -msgstr "值不是\"YYYYMMDDHHMMSS\"时间格式" - -msgid "" -"Lower number means higher priority. Clients will attempt to contact the URI " -"with the lowest-numbered priority they can reach." -msgstr "" -"数字越低代表优先级越高。客户端尝试用它们可以得到的最低数字优先级区访问URI。" - -msgid "Target Uniform Resource Identifier" -msgstr "目标统一资源标识符" - -msgid "Target Uniform Resource Identifier according to RFC 3986" -msgstr "目标统一资源标识符依据RFC 3986" - -#, python-format -msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record" -msgstr "命名服务器'%(host)s'没有相配的DNS A/AAAA记录" - -#, fuzzy -msgid "Managedby permission" -msgstr "" -"\n" -"管理权限\n" - -#, fuzzy -msgid "cannot be used when a zone is specified" -msgstr "当类型是'group'是主机不能被设置" - -msgid "Only one zone type is allowed per zone name" -msgstr "每个区域名只允许一种区域类型" - -#, python-format -msgid "Added system permission \"%(value)s\"" -msgstr "已添加系统权限\"%(value)s\"" - -#, python-format -msgid "permission \"%(value)s\" already exists" -msgstr "权限\"%(value)s\"已存在" - -#, python-format -msgid "Removed system permission \"%(value)s\"" -msgstr "已移除系统权限\"%(value)s\"" - -msgid "DNS zone" -msgstr "DNS区域" - -msgid "DNS zones" -msgstr "DNS区域" - -msgid "DNS Zones" -msgstr "DNS区域" - -msgid "DNS Zone" -msgstr "DNS区域" - -msgid "Default time to live" -msgstr "默认存活时间" - -msgid "Time to live for records without explicit TTL definition" -msgstr "没有明确TTL定义的记录存活时间" - -msgid "setting Authoritative nameserver" -msgstr "设置权威命名服务器" - -msgid "It is used only for setting the SOA MNAME attribute." -msgstr "它仅被用来设置SOA MNAME属性。" - -msgid "NS record(s) can be edited in zone apex - '@'. " -msgstr "NS记录可以在带'@'的区域被编辑。" - -#, fuzzy -msgid "" -msgstr "IPA DNS服务器" - -msgid "Nameserver for reverse zone cannot be a relative DNS name" -msgstr "命名服务器的反向区域不能是一个相对的DNS名" - -#, python-format -msgid "Deleted DNS zone \"%(value)s\"" -msgstr "已删除DNS区域\"%(value)s\"" - -msgid "is required" -msgstr "是需要的" - -#, python-format -msgid "Disabled DNS zone \"%(value)s\"" -msgstr "已禁用DNS区域\"%(value)s\"" - -#, python-format -msgid "Enabled DNS zone \"%(value)s\"" -msgstr "已启用DNS区域\"%(value)s\"" - -msgid "DNS resource record" -msgstr "DNS资源记录" - -msgid "DNS resource records" -msgstr "DNS资源记录" - -msgid "DNS Resource Records" -msgstr "DNS资源记录" - -msgid "DNS Resource Record" -msgstr "DNS资源记录" - -msgid "DS record must not be in zone apex (RFC 4035 section 2.4)" -msgstr "DS记录不得在区域顶点（RFC 4035第2.4节）" - -msgid "" -"out-of-zone data: record name must be a subdomain of the zone or a relative " -"name" -msgstr "区域外数据：记录名必须是区域或相对名的一个子域" - -#, python-format -msgid "" -"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " -"section 4)" -msgstr "%(types)s记录的所有者不应该是一个通配符域名（RFC 4592 第四节）" - -#, python-format -msgid "" -"Reverse zone %(name)s requires exactly %(count)d IP address components, " -"%(user_count)d given" -msgstr "反向区域%(name)s恰好需要%(count)d个IP地址组件，已给出%(user_count)d" - -msgid "only master zones can contain records" -msgstr "仅有主区域才可以包含记录" - -msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" -msgstr "每个名称仅允许有一个CNAME记录（RFC 2136，第1.1.5节）" - -msgid "" -"CNAME record is not allowed to coexist with any other record (RFC 1034, " -"section 3.6.2)" -msgstr "CNAME记录不允许与任何其他记录共存（RFC 1034，第3.6.2节）" - -msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" -msgstr "每个名称仅允许有一个DNAME记录（RFC 6672，第2.4节）" - -#, python-format -msgid "" -"NS record is not allowed to coexist with an %(type)s record except when " -"located in a zone root record (RFC 2181, section 6.1)" -msgstr "" -"NS记录是不能和一个%(type)s记录共存的，除非它位于根区域记录（RFC 2181，第6." -"节）" - -msgid "" -"DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC " -"4035 section 2.4)" -msgstr "DS记录需要与一个NS记录共存（RFC 4592第4.6节，RFC 4035第2.4节）" - -#, python-format -msgid "Raw value of a DNS record was already set by \"%(name)s\" option" -msgstr "DNS记录的原始值已被设定为\"%(name)s\"选项" - -msgid "DNS zone root record cannot be renamed" -msgstr "DNS根区域记录不能被重命名" - -msgid "DNS records can be only updated one at a time" -msgstr "一次只能更新一条DNS记录" - -#, python-format -msgid "Deleted record \"%(value)s\"" -msgstr "已删除记录\"%(value)s\"" - -#, python-format -msgid "Zone record '%s' cannot be deleted" -msgstr "区域记录'%s'不能被删除" - -#, python-format -msgid "Found '%(value)s'" -msgstr "找到'%(value)s'" - -#, python-format -msgid "Host '%(host)s' not found" -msgstr "主机'%(host)s'没有找到" - -msgid "DNS configuration options" -msgstr "DNS配置选项" - -msgid "DNS Global Configuration" -msgstr "DNS全局配置" - -msgid "IPA DNS version" -msgstr "IPA DNS版本" - -msgid "List of IPA masters configured as DNS servers" -msgstr "IPA主服务器配置为DNS服务器列表" - -msgid "IPA server configured as DNSSec key master" -msgstr "IPA服务器配置为DNSSec密钥主机" - -msgid "Global DNS configuration is empty" -msgstr "全局DNS配置是空的" - -msgid "DNS forward zone" -msgstr "DNS正向区域" - -msgid "DNS forward zones" -msgstr "DNS正向区域" - -msgid "DNS Forward Zones" -msgstr "DNS正向区域" - -msgid "DNS Forward Zone" -msgstr "DNS正向区域" - -msgid "Please specify forwarders." -msgstr "请指定转发器。" - -#, python-format -msgid "Deleted DNS forward zone \"%(value)s\"" -msgstr "已删除DNS正向区域\"%(value)s\"" - -#, python-format -msgid "Disabled DNS forward zone \"%(value)s\"" -msgstr "已禁用DNS正向区域\"%(value)s\"" - -#, python-format -msgid "Enabled DNS forward zone \"%(value)s\"" -msgstr "已启用DNS正向区域\"%(value)s\"" - -msgid "IPA DNS records" -msgstr "IPA DNS记录" - -msgid "IPA location records" -msgstr "IPA位置记录" - -msgid "Update location and IPA server DNS records" -msgstr "更新位置和IPA服务器DNS记录" - -msgid "Result of the command" -msgstr "命令返回值" - -msgid "Dry run" -msgstr "" - -msgid "Do not update records only return expected records" -msgstr "不更新记录只返回预期的记录" - -msgid "The deny type has been deprecated." -msgstr "阻止类型已被弃用。" - -msgid "HBAC rules" -msgstr "HBAC规则" - -msgid "HBAC Rules" -msgstr "HBAC规则" - -#, python-format -msgid "Added HBAC rule \"%(value)s\"" -msgstr "已添加HBAC规则\"%(value)s\"" - -#, python-format -msgid "Deleted HBAC rule \"%(value)s\"" -msgstr "已删除HBAC规则\"%(value)s\"" - -#, python-format -msgid "Modified HBAC rule \"%(value)s\"" -msgstr "已修改HBAC规则\"%(value)s\"" - -#, python-format -msgid "%(count)d HBAC rule matched" -msgid_plural "%(count)d HBAC rules matched" -msgstr[0] "已匹配%(count)d个HBAC规则" - -#, python-format -msgid "Enabled HBAC rule \"%(value)s\"" -msgstr "已启用HBAC规则\"%(value)s\"" - -#, python-format -msgid "Disabled HBAC rule \"%(value)s\"" -msgstr "已禁用HBAC规则\"%(value)s\"" - -msgid "Access time" -msgstr "访问时间" - -#, fuzzy -msgid "Add source hosts and hostgroups to an HBAC rule." -msgstr "从一个HBAC规则中添加源主机和主机组。" - -msgid "" -"\n" -"Hosts/Machines\n" -"\n" -"A host represents a machine. It can be used in a number of contexts:\n" -"- service entries are associated with a host\n" -"- a host stores the host/ service principal\n" -"- a host can be used in Host-based Access Control (HBAC) rules\n" -"- every enrolled client generates a host entry\n" -msgstr "" - -msgid "" -"\n" -"ENROLLMENT:\n" -"\n" -"There are three enrollment scenarios when enrolling a new client:\n" -"\n" -"1. You are enrolling as a full administrator. The host entry may exist\n" -" or not. A full administrator is a member of the hostadmin role\n" -" or the admins group.\n" -"2. You are enrolling as a limited administrator. The host must already\n" -" exist. A limited administrator is a member a role with the\n" -" Host Enrollment privilege.\n" -"3. The host has been created with a one-time password.\n" -msgstr "" - -msgid "" -"\n" -"RE-ENROLLMENT:\n" -"\n" -"Host that has been enrolled at some point, and lost its configuration (e.g. " -"VM\n" -"destroyed) can be re-enrolled.\n" -"\n" -"For more information, consult the manual pages for ipa-client-install.\n" -"\n" -"A host can optionally store information such as where it is located,\n" -"the OS that it runs, etc.\n" -msgstr "" - -msgid "" -"\n" -" Add a new host:\n" -" ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example." -"com\n" -msgstr "" - -msgid "" -"\n" -" Delete a host:\n" -" ipa host-del test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a one-time password:\n" -" ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a new host with a random one-time password:\n" -" ipa host-add --os='Fedora 12' --random test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Modify information about a host:\n" -" ipa host-mod --os='Fedora 12' test.example.com\n" -msgstr "" - -msgid "" -"\n" -" Remove SSH public keys of a host and update DNS to reflect this change:\n" -" ipa host-mod --sshpubkey= --updatedns test.example.com\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Disable the host Kerberos key, SSL certificate and all of its services:\n" -" ipa host-disable test.example.com\n" -msgstr "禁用该主机的Kerberos密钥，SSL证书和所有的服务。" - -msgid "" -"\n" -" Add a host that can manage this host's keytab and certificate:\n" -" ipa host-add-managedby --hosts=test2 test\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa host-allow-create-keytab test2 --users=tuser1\n" -msgstr "" - -msgid "Host" -msgstr "主机" - -msgid "Base-64 encoded host certificate" -msgstr "Base-64编码的主机证书" - -msgid "Serial Number" -msgstr "序列号" - -msgid "Serial Number (hex)" -msgstr "序列号（十六进制）" - -msgid "Not Before" -msgstr "不早于" - -msgid "Not After" -msgstr "不晚于" - -msgid "Fingerprint (SHA1)" -msgstr "指纹（SHA1）" - -#, fuzzy -msgid "Fingerprint (SHA256)" -msgstr "指纹（SHA1）" - -msgid "Revocation reason" -msgstr "撤消原因" - -msgid "Authentication Indicators" -msgstr "认证指标" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. Use 'idp' to allow External Identity Provider authentications. With no " -"indicator specified, all authentication mechanisms are allowed." -msgstr "" - -#, python-format -msgid "Added host \"%(value)s\"" -msgstr "新增主机 \"%(value)s\"" - -#, python-format -msgid "Deleted host \"%(value)s\"" -msgstr "已删除主机 \"%(value)s\"" - -msgid "Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS" -msgstr "移除被IPA DNS管理的主机的A，AAAA，SSHFP和PTR记录" - -msgid "No A, AAAA, SSHFP or PTR records found." -msgstr "没有找到A，AAAA，SSHFP和PTR记录。" - -#, python-format -msgid "Modified host \"%(value)s\"" -msgstr "已修改主机 \"%(value)s\"" - -msgid "Password cannot be set on enrolled host." -msgstr "密码不能在注册主机上设置。" - -msgid "cn is immutable" -msgstr "cn是不变的" - -#, python-format -msgid "%(count)d host matched" -msgid_plural "%(count)d hosts matched" -msgstr[0] "已匹配%(count)d个主机" - -#, python-format -msgid "Disabled host \"%(value)s\"" -msgstr "已禁用主机\"%(value)s\"" - -#, python-format -msgid "Added certificates to host \"%(value)s\"" -msgstr "已向主机\"%(value)s\"中添加证书" - -#, python-format -msgid "Removed certificates from host \"%(value)s\"" -msgstr "已从主机\"%(value)s\"中移除证书" - -msgid "Add new principal alias to host entry" -msgstr "为主机条目添加新的主体别名" - -#, python-format -msgid "Added new aliases to host \"%(value)s\"" -msgstr "已为主机\"%(value)s\"添加新别名" - -msgid "Remove principal alias from a host entry" -msgstr "从一个主机条目中移除主体别名" - -#, python-format -msgid "Removed aliases from host \"%(value)s\"" -msgstr "已从主机\"%(value)s\"中移除别名" - -msgid "" -"\n" -"External Identity Provider Servers\n" -msgstr "" - -#, fuzzy -#| msgid "" -#| "\n" -#| "Manage RADIUS Proxy Servers.\n" -msgid "" -"\n" -"Manage External Identity Provider Servers.\n" -msgstr "" -"\n" -"管理RADIUS代理服务器。\n" - -msgid "" -"\n" -"IPA supports the use of an external Identity Provider for Oauth2.0 Device " -"Flow\n" -"authentication.\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server:\n" -" ipa idp-add MyIdP --client-id jhkQty13 --auth-uri https://oauth2." -"idp.com/auth --token-uri https://oauth2.idp.com/token --secret\n" -msgstr "" - -msgid "" -"\n" -" Add a new external Identity Provider server using github predefined " -"endpoints:\n" -" ipa idp-add MyIdp --client-id jhkQty13 --provider github --secret\n" -msgstr "" - -msgid "" -"\n" -" Find all external Identity Provider servers whose entries include the " -"string\n" -" \"test.com\":\n" -" ipa idp-find test.com\n" -msgstr "" - -msgid "" -"\n" -" Examine the configuration of an external Identity Provider server:\n" -" ipa idp-show MyIdP\n" -msgstr "" - -msgid "" -"\n" -" Change the secret:\n" -" ipa idp-mod MyIdP --secret\n" -msgstr "" - -msgid "" -"\n" -" Delete an external Identity Provider server:\n" -" ipa idp-del MyIdP\n" -msgstr "" - -msgid "Invalid URI: not an https scheme" -msgstr "" - -msgid "Invalid URI: missing netloc" -msgstr "" - -#, fuzzy -msgid "Identity Provider server" -msgstr "Ping一台远程服务器。" - -#, fuzzy -msgid "Identity Provider servers" -msgstr "Ping一台远程服务器。" - -#, fuzzy -#| msgid "Remote server name" -msgid "Identity Provider server name" -msgstr "远程服务器名称" - -#, fuzzy -#| msgid "Authority ID" -msgid "Authorization URI" -msgstr "授权ID" - -msgid "OAuth 2.0 authorization endpoint" -msgstr "" - -msgid "Device authorization URI" -msgstr "" - -msgid "Device authorization endpoint" -msgstr "" - -#, fuzzy -#| msgid "Token ID" -msgid "Token URI" -msgstr "令牌ID" - -#, fuzzy -#| msgid "Mount point" -msgid "Token endpoint" -msgstr "挂载点" - -#, fuzzy -#| msgid "User login" -msgid "User info URI" -msgstr "用户登录名" - -#, fuzzy -#| msgid "Token serial (informational only)" -msgid "User information endpoint" -msgstr "令牌序列号（只是信息）" - -msgid "JWKS URI" -msgstr "" - -msgid "JWKS endpoint" -msgstr "" - -msgid "OIDC URL" -msgstr "" - -msgid "The Identity Provider OIDC URL" -msgstr "" - -#, fuzzy -#| msgid "Security Identifier" -msgid "Client identifier" -msgstr "安全标识符" - -msgid "OAuth 2.0 client identifier" -msgstr "" - -msgid "OAuth 2.0 client secret" -msgstr "" - -msgid "Scope" -msgstr "" - -msgid "OAuth 2.0 scope. Multiple scopes separated by space" -msgstr "" - -msgid "External IdP user identifier attribute" -msgstr "" - -msgid "Attribute for user identity in OAuth 2.0 userinfo" -msgstr "" - -#, fuzzy -#| msgid "Add a new RADIUS proxy server." -msgid "Add a new Identity Provider server." -msgstr "添加一个新的RADIUS代理服务器。" - -#, fuzzy, python-format -#| msgid "Added RADIUS proxy server \"%(value)s\"" -msgid "Added Identity Provider server \"%(value)s\"" -msgstr "已添加RADIUS代理服务器\"%(value)s\"" - -msgid "IdP provider template" -msgstr "" - -msgid "Choose a pre-defined template to use" -msgstr "" - -msgid "Organization" -msgstr "组织" - -msgid "Organization ID or Realm name for IdP provider templates" -msgstr "" - -#, fuzzy -#| msgid "Base DN" -msgid "Base URL" -msgstr "基DN" - -msgid "Base URL for IdP provider templates" -msgstr "" - -#, fuzzy -#| msgid "Unknown Error" -msgid "unknown provider" -msgstr "未知的错误" - -#, fuzzy -#| msgid "Request is missing \"method\"" -msgid "value is missing" -msgstr "请求缺少\"method\"" - -#, fuzzy -#| msgid "cannot specify both raw certificate and file" -msgid "cannot specify both individual endpoints and IdP provider" -msgstr "不能同时指定原始证书和文件" - -#, fuzzy -#| msgid "Delete an IPA service." -msgid "Delete an Identity Provider server." -msgstr "删除一个IPA服务。" - -#, fuzzy, python-format -#| msgid "Deleted IPA server \"%(value)s\"" -msgid "Deleted Identity Provider server \"%(value)s\"" -msgstr "已删除IPA服务器\"%(value)s\"" - -#, fuzzy -#| msgid "Modify an existing IPA service." -msgid "Modify an Identity Provider server." -msgstr "修改一个已存在的IPA服务。" - -#, fuzzy, python-format -#| msgid "Modified IPA server \"%(value)s\"" -msgid "Modified Identity Provider server \"%(value)s\"" -msgstr "已修改IPA服务器\"%(value)s\"" - -#, fuzzy -#| msgid "Search for IPA servers." -msgid "Search for Identity Provider servers." -msgstr "查找IPA服务器。" - -#, fuzzy, python-format -#| msgid "%(count)d IPA server matched" -#| msgid_plural "%(count)d IPA servers matched" -msgid "%(count)d Identity Provider server matched" -msgid_plural "%(count)d Identity Provider servers matched" -msgstr[0] "已匹配%(count)d个IPA服务器" - -#, fuzzy -#| msgid "Display information about an IPA service." -msgid "Display information about an Identity Provider server." -msgstr "显示一个IPA服务信息。" - -msgid "Internationalization messages" -msgstr "" - -msgid "Your session has expired. Please log in again." -msgstr "" - -msgid "Apply" -msgstr "应用" - -msgid "Rebuild auto membership" -msgstr "重建自动成员" - -msgid "Are you sure you want to rebuild auto membership?" -msgstr "你确定要重建自动成员吗？" - -msgid "Are you sure you want to proceed with the action?" -msgstr "你确定要执行该操作吗？" - -#, python-brace-format -msgid "Are you sure you want to delete ${object}?" -msgstr "你确定要删除${object}？" - -#, python-brace-format -msgid "Are you sure you want to disable ${object}?" -msgstr "你确定要禁用${object}？" - -#, python-brace-format -msgid "Are you sure you want to enable ${object}?" -msgstr "你确定要启用${object}？" - -msgid "Actions" -msgstr "操作" - -msgid "Add" -msgstr "添加" - -#, python-brace-format -msgid "${count} item(s) added" -msgstr "${count} item(s)已添加" - -msgid "Direct Membership" -msgstr "直接成员" - -#, python-brace-format -msgid "Filter available ${other_entity}" -msgstr "${other_entity}过滤器可用" - -msgid "Indirect Membership" -msgstr "间接成员" - -msgid "No entries." -msgstr "没有条目。" - -#, python-brace-format -msgid "Showing ${start} to ${end} of ${total} entries." -msgstr "从${start}到${end}显示${total}条目。" - -#, fuzzy -msgid "Remove" -msgstr "删除持有" - -#, python-brace-format -msgid "${count} item(s) removed" -msgstr "${count} item(s) 已移除" - -msgid "Show Results" -msgstr "显示结果" - -msgid "Authentication indicators" -msgstr "认证指标" - -msgid "Authentication indicator" -msgstr "认证指标" - -msgid "" -"

Implicit method (password) will be used if no method is chosen.

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" -"

如果没有选择方法那么就使用隐式方法（密码）。

密码+双因素LDAP和Kerberos允许使用其中任一认证类型来认证但是Kerberos使用预认证方" -"法，该方法需要使用armor ccache

RADIUS和另外的类型： " -"Kerberos总是使用RADIUS，但是LDAP从不使用。LDAP仅识别密码和双因素认证选项。" - -msgid "Add Custom Authentication Indicator" -msgstr "添加自定义认证机构" +msgid "Trusts" +msgstr "信任" msgid "Two factor authentication (password + OTP)" msgstr "双因素认证（密码+OTP）" -#, fuzzy -msgid "RADIUS" -msgstr "RADIUS代理服务器" +msgid "Two-way trust" +msgstr "双向信任" -msgid "Hardened Password (by SPAKE or FAST)" -msgstr "" +msgid "Type" +msgstr "类型" -msgid "External Identity Provider" -msgstr "" +msgid "Type Covered" +msgstr "类型覆盖" -msgid "Disable per-user override" -msgstr "禁用每个用户覆盖" +msgid "Type Map" +msgstr "类型映射" + +msgid "Type of IPA object (sets subtree and objectClass targetfilter)" +msgstr "IPA目标类型（设置子树和对象类目标过滤器）" msgid "" -"

Per-user setting, overwrites the global setting if any option is checked." -"

Password + Two-factor: LDAP and Kerberos allow " -"authentication with either one of the authentication types but Kerberos uses " -"pre-authentication method which requires to use armor ccache.

RADIUS with another type: Kerberos always use RADIUS, " -"but LDAP never does. LDAP only recognize the password and two-factor " -"authentication options.

" -msgstr "" -"

如果所有选项都检测了那么每个用户设置会覆盖全局设置。

密码+双" -"因素LDAP和Kerberos允许使用其中任一认证类型来认证但是Kerberos使用预认" -"证方法，该方法需要使用armor ccache

RADIUS和另外的类型： Kerberos总是使用RADIUS，但是LDAP从不使用。LDAP仅识别密码和双因素认证" -"选项。

" +"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)" +msgstr "IPA对象类型（用户，用户组，主机，主机组，服务，网络组，dns）" -msgid "About" -msgstr "关于" +msgid "Type of the token" +msgstr "令牌类型" -msgid "Activate" -msgstr "激活" +msgid "" +"Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust" +msgstr "信任域ID范围的类型，是ipa-ad-trust-posix和ipa-ad-trust中的一个" -msgid "Add and Add Another" -msgstr "添加并添加另一个" +msgid "Types of supported user authentication" +msgstr "支持的用户认证类型" -msgid "Add and Close" -msgstr "添加和关闭" +msgid "UID" +msgstr "UID" -msgid "Add and Edit" -msgstr "添加和编辑" +msgid "UPN suffixes" +msgstr "UPN后缀" -msgid "Add Many" -msgstr "添加多个" +msgid "Un-apply" +msgstr "不适用的" -msgid "Back" -msgstr "返回" +msgid "Un-apply ID Views from hosts" +msgstr "不将ID视图应用到主机" -msgid "Cancel" +msgid "Un-apply ID Views from hosts of hostgroups" +msgstr "不将ID视图应用到主机组中的主机" + +msgid "Un-apply from host groups" +msgstr "不适用的主机组" + +msgid "Un-apply from hosts" +msgstr "不适用的主机" + +msgid "Unable to communicate with CMS" +msgstr "不能与CMS通信" + +#, python-format +msgid "Unable to communicate with CMS (status %d)" +msgstr "不能与CMS通信（状态%d）" + +#, python-format +msgid "Unable to create private group. A group '%(group)s' already exists." +msgstr "不能创建私有组。组'%(group)s'已存在。" + +#, c-format +msgid "Unable to determine IPA server from %s\n" +msgstr "无法从%s中确定IPA主机\n" + +#, python-format +msgid "" +"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" +"mod' to set it manually." +msgstr "不能确定Kerberos主体%s是否存在。使用'ipa user-mod'来手动设置它。" + +#, c-format +msgid "Unable to determine root DN of %s\n" +msgstr "无法确定%s的根DN\n" + +msgid "" +"Unable to display QR code using the configured output encoding. Please use " +"the token URI to configure your OTP device" +msgstr "使用输出编码配置无法显示二维码。请使用令牌URI来配置你的OTP设备" + +#, c-format +msgid "Unable to enable SSL in LDAP\n" +msgstr "在LDAP中不能启用SSL\n" + +#, c-format +msgid "Unable to generate Kerberos Credential Cache\n" +msgstr "无法生成Kerberos凭证缓存\n" + +#, c-format +msgid "Unable to initialize ldap library!\n" +msgstr "不能初始化ldap库！\n" + +#, c-format +msgid "Unable to join host: Kerberos Credential Cache not found\n" +msgstr "无法加入主机：找不到Kerberos凭证缓存\n" + +#, c-format +msgid "" +"Unable to join host: Kerberos User Principal not found and host password not " +"provided.\n" +msgstr "无法加入主机：找不到Kerberos用户主体并且没有提供主机密码。\n" + +#, c-format +msgid "Unable to join host: Kerberos context initialization failed\n" +msgstr "无法加入主机：Kerberos上下文初始化失败\n" + +#, c-format +msgid "Unable to parse principal\n" +msgstr "服务解析主体\n" + +#, c-format +msgid "Unable to parse principal name\n" +msgstr "无法解析主体名\n" + +#, c-format +msgid "Unable to parse principal: %1$s (%2$d)\n" +msgstr "不能解析主体：%1$s (%2$d)\n" + +#, c-format +msgid "Unable to remove entry\n" +msgstr "无法删除条目\n" + +msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" +msgstr "不能设置LDAP_OPT_PROTOCOL_VERSION\n" + +msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" +msgstr "不能设置LDAP_OPT_X_SASL_NOCANON\n" + +msgid "Unable to verify write permissions to the AD" +msgstr "不能在AD中验证写权限" + +msgid "Undelete a delete user account." +msgstr "恢复删除用户账户。" + +#, python-format +msgid "Undeleted user account \"%(value)s\"" +msgstr "已恢复用户账户\"%(value)s\"" + +msgid "Undo" msgstr "取消" -msgid "Clear" -msgstr "" +msgid "Undo All" +msgstr "取消全部" -#, fuzzy -msgid "Clear all fields on the page." -msgstr "刷新页面。" +msgid "Undo all changes in this field." +msgstr "取消在这个字段做的所有更改。" -msgid "Close" -msgstr "关闭" +msgid "Undo this change." +msgstr "取消这个更改。" -msgid "Disable" -msgstr "禁用" +msgid "Unenroll this host from IPA server" +msgstr "从IPA服务器中取消注册该主机" -msgid "Download" -msgstr "下载" +#, c-format +msgid "Unenrollment failed.\n" +msgstr "取消注册失败。\n" -msgid "Download certificate as PEM formatted file." -msgstr "下载证书为PEM格式文件。" +#, c-format +msgid "Unenrollment successful.\n" +msgstr "取消注册成功。\n" -msgid "Edit" -msgstr "编辑" +msgid "Unique ID" +msgstr "唯一ID" -msgid "Enable" -msgstr "启用" - -msgid "Find" -msgstr "查找" - -msgid "Get" -msgstr "获得" - -msgid "Hide" -msgstr "隐藏" - -msgid "Issue" -msgstr "发布" - -#, fuzzy -msgid "Match" -msgstr "匹配" - -#, fuzzy -msgid "Match users according to certificate." -msgstr "查找已存在的证书。" - -msgid "Migrate" -msgstr "" - -msgid "OK" -msgstr "" - -msgid "Refresh" -msgstr "更新" - -msgid "Reload current settings from the server." -msgstr "从服务器重新加载当前设置。" - -msgid "Delete" -msgstr "删除" - -msgid "Remove hold" -msgstr "删除持有" - -msgid "Reset" -msgstr "重置" - -msgid "Reset Password" -msgstr "重置密码" - -#, fuzzy -msgid "Reset Password and Log in" -msgstr "重置密码" - -msgid "Restore" -msgstr "恢复" - -msgid "Retry" -msgstr "重试" - -msgid "Revert" -msgstr "返回" - -msgid "Revoke" -msgstr "撤回" - -msgid "Save" -msgstr "保存" - -msgid "Set" -msgstr "设置" - -msgid "Show" -msgstr "显示" - -msgid "Stage" -msgstr "呈现" - -msgid "Update" -msgstr "更新" - -msgid "View" -msgstr "查看" - -#, fuzzy -msgid "Customization" -msgstr "确认" - -msgid "Pagination Size" -msgstr "" - -msgid "Collapse All" -msgstr "全部折叠" - -msgid "Expand All" -msgstr "全部展开" - -msgid "General" -msgstr "普通的" - -msgid "Identity Settings" -msgstr "身份设置" - -#, fuzzy -msgid "Record Settings" -msgstr "角色设置" - -#, python-brace-format -msgid "${entity} ${primary_key} Settings" -msgstr "${entity} ${primary_key}设置" - -msgid "Back to Top" -msgstr "回到顶部" - -#, python-brace-format -msgid "${entity} ${primary_key} updated" -msgstr "${entity} ${primary_key}已更新" - -#, python-brace-format -msgid "${entity} successfully added" -msgstr "${entity}已添加成功" - -msgid "Add custom value" -msgstr "添加自定义值" - -msgid "Available" -msgstr "可用的" - -msgid "Some operations failed." -msgstr "一些操作失败。" - -msgid "Operations Error" -msgstr "操作错误" - -msgid "Confirmation" -msgstr "确认" - -msgid "Custom value" -msgstr "自定义值" - -msgid "This page has unsaved changes. Please save or revert." -msgstr "这个页面有未保存的更改。请保存或恢复。" - -msgid "Unsaved Changes" -msgstr "未保存的更改" - -#, python-brace-format -msgid "Edit ${entity}" -msgstr "编辑${entity}" - -msgid "Hide details" -msgstr "隐藏细节" - -#, python-brace-format -msgid "${product}, version: ${version}" -msgstr "${product}，版本：${version}" - -msgid "Prospective" -msgstr "预期的" - -msgid "Redirection" -msgstr "重定向" - -msgid "Select entries to be removed." -msgstr "选择要删除的条目。" - -msgid "Result" -msgstr "结果" - -msgid "Show details" -msgstr "显示细节" - -msgid "Success" -msgstr "成功" - -msgid "Validation error" -msgstr "验证错误" - -msgid "Input form contains invalid or missing values." -msgstr "输入包含无效的或缺失的值。" - -msgid "Please try the following options:" -msgstr "请尝试下面选项：" - -msgid "If the problem persists please contact the system administrator." -msgstr "如果问题仍然存在,请联系系统管理员。" - -msgid "Refresh the page." -msgstr "刷新页面。" - -msgid "Reload the browser." -msgstr "重新加载浏览器。" - -msgid "Return to the main page and retry the operation" -msgstr "返回到主页面并重试操作" - -#, python-brace-format -msgid "An error has occurred (${error})" -msgstr "出现一个错误(${error})" - -msgid "HTTP Error" -msgstr "HTTP错误" - -msgid "Internal Error" -msgstr "内部错误" - -msgid "IPA Error" -msgstr "IPA错误" - -msgid "No response" -msgstr "没有响应" +msgid "Unknown" +msgstr "未知的" msgid "Unknown Error" msgstr "未知的错误" -msgid "URL" -msgstr "" +#, python-format +msgid "Unknown option: %(option)s" +msgstr "未知的选项：%(option)s" -#, python-brace-format -msgid "${primary_key} is managed by:" -msgstr "${primary_key}受管于：" +msgid "Unlock" +msgstr "解锁" -#, python-brace-format -msgid "${primary_key} members:" -msgstr "${primary_key}成员：" +#, python-format +msgid "Unlocked account \"%(value)s\"" +msgstr "已解锁账户\"%(value)s\"" -#, python-brace-format -msgid "${primary_key} is a member of:" -msgstr "${primary_key}是其中一个成员：" +msgid "Unmatched" +msgstr "不匹配" -#, fuzzy, python-brace-format -msgid "${primary_key} member managers:" -msgstr "${primary_key}成员：" +msgid "Unprovision" +msgstr "取消供应" -msgid "Settings" -msgstr "设置" +msgid "Unresolved rules in --rules" +msgstr "在--rules中不能解析的规则" -msgid "Search" -msgstr "查找" +msgid "Unrevoked" +msgstr "未撤销的" -msgid "False" -msgstr "" +msgid "Unsaved Changes" +msgstr "未保存的更改" -#, fuzzy, python-brace-format -msgid "Allow user groups to create keytab of '${primary_key}'" -msgstr "允许用户，用户组，主机或主机组来创建一个该服务的keytab。" +msgid "Unselect All" +msgstr "取消选择全部" -#, fuzzy, python-brace-format -msgid "Allow user groups to retrieve keytab of '${primary_key}'" -msgstr "允许用户，用户组，主机或主机组来检索一个该服务的keytab。" +msgid "Unspecified" +msgstr "未指定的" -#, fuzzy, python-brace-format -msgid "Allow host groups to create keytab of '${primary_key}'" -msgstr "允许用户，用户组，主机或主机组来创建一个该服务的keytab。" +msgid "Unsupported value" +msgstr "不支持的值" -#, fuzzy, python-brace-format -msgid "Allow host groups to retrieve keytab of '${primary_key}'" -msgstr "允许用户，用户组，主机或主机组来检索一个该服务的keytab。" +msgid "Update" +msgstr "更新" -#, fuzzy, python-brace-format -msgid "Allow hosts to create keytab of '${primary_key}'" -msgstr "允许创建keytab" +msgid "Update DNS entries" +msgstr "更新DNS条目" -#, fuzzy, python-brace-format -msgid "Allow hosts to retrieve keytab of '${primary_key}'" -msgstr "允许检索keytab" +msgid "Update System DNS Records" +msgstr "更新系统DNS记录" -#, fuzzy, python-brace-format -msgid "Allow users to create keytab of '${primary_key}'" -msgstr "允许创建keytab" +msgid "Update location and IPA server DNS records" +msgstr "更新位置和IPA服务器DNS记录" -#, fuzzy, python-brace-format -msgid "Allow users to retrieve keytab of '${primary_key}'" -msgstr "允许检索keytab" +#, python-format +msgid "Update of system record '%(record)s' failed with error: %(error)s" +msgstr "更新系统记录'%(record)s'失败：%(error)s" -msgid "Allowed to create keytab" -msgstr "允许创建keytab" +msgid "User" +msgstr "用户" -msgid "Allowed to retrieve keytab" -msgstr "允许检索keytab" +msgid "User Group" +msgstr "用户组" -#, fuzzy, python-brace-format -msgid "Disallow user groups to create keytab of '${primary_key}'" -msgstr "不允许用户，用户组，主机或主机组来创建该服务的keytab。" +msgid "User Groups" +msgstr "用户组" -#, fuzzy, python-brace-format -msgid "Disallow user groups to retrieve keytab of '${primary_key}'" -msgstr "不允许用户，用户组，主机或主机组来检索该服务的keytab。" +msgid "User ID" +msgstr "用户ID" -#, fuzzy, python-brace-format -msgid "Disallow host groups to create keytab of '${primary_key}'" -msgstr "不允许用户，用户组，主机或主机组来创建该服务的keytab。" +msgid "User ID Number" +msgstr "用户ID号码" -#, fuzzy, python-brace-format -msgid "Disallow host groups to retrieve keytab of '${primary_key}'" -msgstr "不允许用户，用户组，主机或主机组来检索该服务的keytab。" +msgid "User ID Number (system will assign one if not provided)" +msgstr "用户ID号码（如果没有提供系统会分配一个）" -#, python-brace-format -msgid "Disallow hosts to create keytab of '${primary_key}'" -msgstr "" +msgid "User ID override" +msgstr "用户ID覆盖" -#, python-brace-format -msgid "Disallow hosts to retrieve keytab of '${primary_key}'" -msgstr "" +msgid "User ID overrides" +msgstr "用户ID覆盖" -#, python-brace-format -msgid "Disallow users to create keytab of '${primary_key}'" -msgstr "" +msgid "User Options" +msgstr "用户选项" -#, fuzzy, python-brace-format -msgid "Disallow users to retrieve keytab of '${primary_key}'" -msgstr "允许检索keytab的用户" +msgid "User attribute" +msgstr "用户属性" -msgid "Add Kerberos Principal Alias" -msgstr "添加Kerberos主体别名" +msgid "User authentication types" +msgstr "用户认证类型" -msgid "New kerberos principal alias" -msgstr "新的kerberos主体别名" +msgid "User categories" +msgstr "用户类别" -msgid "Remove Kerberos Alias" -msgstr "删除Kerberos别名" - -#, python-brace-format -msgid "Do you want to remove kerberos alias ${alias}?" -msgstr "你要删除kerberos别名${alias}吗？" - -msgid "Inherited from server configuration" -msgstr "继承了服务器配置" - -msgid "MS-PAC" -msgstr "" - -msgid "Override inherited settings" -msgstr "覆盖继承设置" - -msgid "PAD" -msgstr "" - -#, fuzzy -msgid "Authenticating" -msgstr "身份验证" - -msgid "Authentication with personal certificate failed" -msgstr "" +msgid "User category" +msgstr "用户类别" msgid "" -" To log in with certificate, please make sure you have valid personal certificate. " -msgstr "" +"User category (semantics placed on this attribute are for local " +"interpretation)" +msgstr "用户类别（该属性的语义是就近解读）" -msgid "Continue to next page" -msgstr "" +msgid "User category the ACL applies to" +msgstr "ACL适用于用户类别" -msgid "" -" To log in with username and " -"password, enter them in the corresponding fields, then click 'Log " -"in'." -msgstr "" +msgid "User category the rule applies to" +msgstr "规则应用的用户类别" -msgid "Login failed due to an unknown reason" -msgstr "" +msgid "User container" +msgstr "用户容器" -msgid "Logged In As" -msgstr "登录" +msgid "User group" +msgstr "用户组" -#, fuzzy -msgid "Authentication with Kerberos failed" -msgstr "认证指标" - -#, python-brace-format -msgid "" -" To log in with Kerberos, please make sure you have valid tickets (obtainable via kinit) and " -"configured the " -"browser correctly, then click 'Log in'." -msgstr "" - -msgid "Loading" -msgstr "" - -#, fuzzy -msgid "Kerberos Principal you entered is expired" -msgstr "Kerberos主体过期" - -#, fuzzy -msgid "Loading data" -msgstr "记录数据" - -msgid "Log in" -msgstr "" - -#, fuzzy -msgid "Log In Using Certificate" -msgstr "主机证书" - -msgid "Log in using personal certificate" -msgstr "" - -msgid "Log out" -msgstr "" - -#, fuzzy -msgid "Log out error" -msgstr "格式错误" - -msgid "Password or Password+One-Time Password" -msgstr "" - -#, fuzzy, python-brace-format -msgid "You will be redirected in ${count}s" -msgstr "你将会被重定向到DNS区域。" - -msgid "Sync OTP Token" -msgstr "同步OTP令牌" - -#, fuzzy -msgid "Synchronizing" -msgstr "HOTP同步窗口" - -msgid "The user account you entered is locked" -msgstr "" - -msgid "number of passwords" -msgstr "密码数" - -msgid "seconds" -msgstr "秒" - -#, fuzzy -msgid "Migrating" -msgstr "配置" - -msgid "There was a problem with your request. Please, try again later." -msgstr "" - -#, fuzzy -msgid "Password migration was not successful" -msgstr "密码重置失败。" - -msgid "" -"

Password Migration

If you have been sent here by your " -"administrator, your personal information is being migrated to a new identity " -"management solution (IPA).

Please, enter your credentials in the form " -"to complete the process. Upon successful login your kerberos account will be " -"activated.

" -msgstr "" - -#, fuzzy -msgid "The password or username you entered is incorrect" -msgstr "用户名，密码或令牌码不争取" - -#, fuzzy -msgid "Password migration was successful" -msgstr "密码重置失败。" - -msgid "Attribute" -msgstr "属性" - -#, fuzzy -msgid "Add delegation" -msgstr "授权" - -#, fuzzy -msgid "Remove delegations" -msgstr "授权" - -#, fuzzy -msgid "Add permission" -msgstr "权限" - -#, python-brace-format -msgid "Add privileges into permission '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove permissions" -msgstr "删除权限" - -#, fuzzy, python-brace-format -msgid "Remove privileges from permission '${primary_key}'" -msgstr "从一个角色中移除权限。" - -#, fuzzy -msgid "Add privilege" -msgstr "特权" - -#, python-brace-format -msgid "Add privilege '${primary_key}' into permissions" -msgstr "" - -#, python-brace-format -msgid "Add roles into privilege '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove privileges" -msgstr "成员特权" - -#, fuzzy, python-brace-format -msgid "Remove privilege '${primary_key}' from permissions" -msgstr "从一个权限中移除成员。" - -#, fuzzy, python-brace-format -msgid "Remove roles from privilege '${primary_key}'" -msgstr "从特权中移除成员" - -msgid "Role Settings" -msgstr "角色设置" - -#, fuzzy -msgid "Add role" -msgstr "添加一个新角色。" - -#, python-brace-format -msgid "Add user groups into role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into role '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add host groups into role '${primary_key}'" -msgstr "待移除的主机组" - -#, fuzzy, python-brace-format -msgid "Add role '${primary_key}' into privileges" -msgstr "${primary_key}覆盖：" - -#, fuzzy, python-brace-format -msgid "Add services into role '${primary_key}'" -msgstr "${entity} ${primary_key}证书" - -#, python-brace-format -msgid "Add users into role '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove roles" -msgstr "删除持有" - -#, fuzzy, python-brace-format -msgid "Remove role '${primary_key}' from privileges" -msgstr "从特权中移除成员" - -#, fuzzy, python-brace-format -msgid "Remove user groups from role '${primary_key}'" -msgstr "从一个HBAC规则中移除用户和用户组。" - -#, python-brace-format -msgid "Remove hosts from role '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from role '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove services from role '${primary_key}'" -msgstr "从一个CA ACL中移除服务。" - -#, fuzzy, python-brace-format -msgid "Remove users from role '${primary_key}'" -msgstr "从一个角色中移除成员。" - -#, fuzzy -msgid "Add self service permission" -msgstr "自助服务权限" - -#, fuzzy -msgid "Remove self service permissions" -msgstr "自助服务权限" - -#, fuzzy -msgid "Add rule" -msgstr "HBAC规则" - -#, python-brace-format -msgid "Add inclusive condition into '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add exclusive condition into '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Are you sure you want to change default group?" -msgstr "你确定要呈现被选用户？" - -msgid "Default host group" -msgstr "默认主机组" - -msgid "Default user group" -msgstr "默认用户组" - -msgid "Exclusive" -msgstr "独占的" - -msgid "Expression" -msgstr "表达式" - -msgid "Host group rule" -msgstr "主机组规则" - -msgid "Host group rules" -msgstr "主机组规则" - -msgid "Inclusive" -msgstr "兼容的" - -#, fuzzy -msgid "Remove auto membership rules" -msgstr "自动成员规则" - -#, python-brace-format -msgid "Remove exclusive conditions from rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove inclusive conditions from rule '${primary_key}'" -msgstr "" +msgid "User group ACI grants access to" +msgstr "ACI授予访问的用户组" msgid "User group rule" msgstr "用户组规则" @@ -20018,351 +10602,54 @@ msgstr "用户组规则" msgid "User group rules" msgstr "用户组规则" -#, fuzzy -msgid "Add automount key" -msgstr "自动挂载键" +msgid "User group to apply permissions to" +msgstr "待应用权限的用户组" -#, fuzzy -msgid "Remove automount keys" -msgstr "自动挂载键" +msgid "User login" +msgstr "用户登录名" -#, fuzzy -msgid "Add automount location" -msgstr "自动挂载位置" +msgid "User name" +msgstr "用户名" -msgid "Automount Location Settings" -msgstr "自动挂载位置设置" +msgid "User object class" +msgstr "用户对象类" -#, fuzzy -msgid "Remove automount locations" -msgstr "自动挂载位置" +msgid "User object overrides" +msgstr "用户对象覆盖" -#, fuzzy -msgid "Add automount map" -msgstr "自动挂载映射" +msgid "User password" +msgstr "用户密码" -msgid "Map Type" -msgstr "映射类型" +msgid "User search fields" +msgstr "用户搜索字段" -msgid "Direct" -msgstr "直接的" +msgid "User to override" +msgstr "待覆盖用户" -msgid "Indirect" -msgstr "间接的" +msgid "User-friendly description of action performed" +msgstr "方便用户的执行操作描述" -#, fuzzy -msgid "Remove automount maps" -msgstr "自动挂载映射" - -#, fuzzy -msgid "Add certificate authority" -msgstr "证书颁发机构" - -#, fuzzy -msgid "Remove certificate authorities" -msgstr "证书颁发机构" - -#, fuzzy -msgid "Add CA ACL" -msgstr "向一个CA ACL中添加CAs。" - -#, fuzzy, python-brace-format -msgid "Add Certificate Authorities into CA ACL '${primary_key}'" -msgstr "${entity} ${primary_key}证书" - -#, fuzzy, python-brace-format -msgid "Add user groups into CA ACL '${primary_key}'" -msgstr "向一个CA ACL中添加用户和用户组。" - -#, python-brace-format -msgid "Add host groups into CA ACL '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into CA ACL '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add certificate profiles into CA ACL '${primary_key}'" -msgstr "${entity} ${primary_key}证书" - -#, fuzzy, python-brace-format -msgid "Add services into CA ACL '${primary_key}'" -msgstr "向一个CA ACL中添加服务。" - -#, python-brace-format -msgid "Add users into CA ACL '${primary_key}'" -msgstr "" - -msgid "All" -msgstr "全部" - -msgid "Any CA" -msgstr "任何CA" - -msgid "Any Host" -msgstr "任何主机" - -msgid "Any Service" -msgstr "任何服务" - -msgid "Any Profile" -msgstr "任何配置文件" - -msgid "Anyone" -msgstr "任何人" - -msgid "Rule status" -msgstr "规则状态" - -msgid "If no CAs are specified, requests to the default CA are allowed." -msgstr "如果没有指定CAs，那么允许请求默认CA。" - -#, fuzzy -msgid "Remove CA ACLs" -msgstr "从CRL中删除" - -#, fuzzy, python-brace-format -msgid "Remove Certificate Authorities from CA ACL '${primary_key}'" -msgstr "${entity} ${primary_key}证书" - -#, fuzzy, python-brace-format -msgid "Remove user groups from CA ACL '${primary_key}'" -msgstr "从一个CA ACL中移除用户和用户组。" - -#, fuzzy, python-brace-format -msgid "Remove host groups from CA ACL '${primary_key}'" -msgstr "从一个CA ACL中移除用户和用户组。" - -#, fuzzy, python-brace-format -msgid "Remove hosts from CA ACL '${primary_key}'" -msgstr "从一个CA ACL中移除CAs。" - -#, fuzzy, python-brace-format -msgid "Remove certificate profiles from CA ACL '${primary_key}'" -msgstr "从一个服务中移除证书" - -#, fuzzy, python-brace-format -msgid "Remove services from CA ACL '${primary_key}'" -msgstr "从一个CA ACL中移除服务。" - -#, fuzzy, python-brace-format -msgid "Remove users from CA ACL '${primary_key}'" -msgstr "从一个CA ACL中移除服务。" - -msgid "Specified CAs" -msgstr "指定的CAs" - -msgid "Specified Hosts and Groups" -msgstr "指定的主机和主机组" - -msgid "Specified Profiles" -msgstr "指定的配置文件" - -msgid "Specified Services and Groups" -msgstr "指定的服务和服务组" - -msgid "Specified Users and Groups" -msgstr "指定的用户和用户组" - -msgid "Permitted to have certificates issued" -msgstr "允许颁发证书" - -#, fuzzy -msgid "Remove certificate profiles" -msgstr "成员证书配置文件" - -#, fuzzy -msgid "AA Compromise" -msgstr "密钥泄露" - -msgid "Add principal" -msgstr "添加主体" - -msgid "Affiliation Changed" -msgstr "" - -msgid "CA" -msgstr "" - -#, fuzzy -msgid "CA Compromise" -msgstr "密钥泄露" - -msgid "Certificates" -msgstr "证书" - -#, fuzzy -msgid "Certificate Hold" -msgstr "证书" - -#, fuzzy -msgid "Cessation of Operation" -msgstr "复制配置" - -msgid "Common Name" -msgstr "通用名" - -msgid "the certificate with serial number " -msgstr "证书编号" - -msgid "Expires On" -msgstr "有效期限" - -msgid "Issued on from" -msgstr "发布于" - -msgid "Issued on to" -msgstr "发布到" - -msgid "Maximum serial number" -msgstr "最大序列号" - -msgid "Minimum serial number" -msgstr "最小序列号" - -msgid "Revoked on from" -msgstr "撤销于" - -msgid "Revoked on to" -msgstr "撤销到" - -#, fuzzy -msgid "Valid not after from" -msgstr "有效起始日期" - -#, fuzzy -msgid "Valid not after to" -msgstr "有效起始日期" - -#, fuzzy -msgid "Valid not before from" -msgstr "有效起始日期" - -#, fuzzy -msgid "Valid not before to" -msgstr "有效起始日期" - -msgid "Fingerprints" -msgstr "指纹" - -msgid "Get Certificate" -msgstr "获取证书" - -msgid "Certificate Hold Removed" -msgstr "证书持有已删除" - -#, fuzzy, python-brace-format -msgid "Issue new certificate for host '${primary_key}'" -msgstr "${entity} ${primary_key}证书" - -#, fuzzy, python-brace-format -msgid "Issue new certificate for service '${primary_key}'" -msgstr "${entity} ${primary_key}证书" - -#, fuzzy, python-brace-format -msgid "Issue new certificate for user '${primary_key}'" -msgstr "${entity} ${primary_key}证书" - -#, fuzzy -msgid "Issue new certificate" -msgstr "新证书" - -msgid "Issued By" -msgstr "发布方" - -msgid "Issued On" -msgstr "签发日期" - -msgid "Issued To" -msgstr "颁发给" - -msgid "Key Compromise" -msgstr "密钥泄露" - -msgid "No Valid Certificate" -msgstr "无效的证书" - -msgid "New Certificate" -msgstr "新证书" - -msgid "Certificate in base64 or PEM format" -msgstr "base64或PEM格式的证书" - -msgid "Note" -msgstr "概述" - -msgid "Organizational Unit" -msgstr "组织单位" - -#, python-brace-format -msgid "${count} certificate(s) present" -msgstr "呈现${count}个证书" - -msgid "Privilege Withdrawn" -msgstr "特权撤销" - -msgid "Reason for Revocation" -msgstr "撤销理由" - -#, fuzzy -msgid "Remove certificate hold" -msgstr "撤销证书。" - -msgid "Do you want to remove the certificate hold?" -msgstr "你要删除证书持有吗？" - -msgid "Remove from CRL" -msgstr "从CRL中删除" - -#, python-brace-format -msgid "" -"
  1. Create a certificate database or use an existing one. To create a " -"new database:
    # certutil -N -d <database path>
    2. " -"
  2. Create a CSR with subject CN=<${cn_name}>,O=<realm>, for example:
    # certutil -R -d <database path> -a -g " -"<key size> -s 'CN=${cn},O=${realm}'${san}
  3. Copy and " -"paste the CSR (from -----BEGIN NEW CERTIFICATE REQUEST----- to " -"-----END NEW CERTIFICATE REQUEST-----) into the text area below:
" -msgstr "" - -#, python-brace-format -msgid " -8 '${cn}'" -msgstr "" - -msgid "Certificate requested" -msgstr "证书请求" - -#, fuzzy -msgid "Revoke certificate" -msgstr "撤销证书。" +msgid "User-specified attributes to which the permission applies" +msgstr "权限可以应用用户指定属性" msgid "" -"Do you want to revoke this certificate? Select a reason from the pull-down " -"list." -msgstr "你要撤销该证书吗？从下拉列表中选择一个理由。" +"User-specified attributes to which the permission explicitly does not apply" +msgstr "权限明确不能应用到用户指定的属性" -msgid "Certificate Revoked" -msgstr "证书已撤销" +msgid "Username" +msgstr "用户名" -msgid "REVOKED" -msgstr "" +msgid "Username of the user vault" +msgstr "用户库的用户名" -msgid "SHA1 Fingerprint" -msgstr "SHA1指纹" +msgid "Users" +msgstr "用户" -msgid "SHA256 Fingerprint" -msgstr "SHA256指纹" +msgid "Users allowed to create keytab" +msgstr "允许创建keytab的用户" -msgid "Status" -msgstr "状态" - -msgid "Superseded" -msgstr "作废的" - -msgid "Unspecified" -msgstr "未指定的" +msgid "Users allowed to retrieve keytab" +msgstr "允许检索keytab的用户" msgid "Valid Certificate Present" msgstr "有效证书展示" @@ -20373,877 +10660,137 @@ msgstr "有效起始日期" msgid "Valid to" msgstr "有效终止日期" +msgid "Validation error" +msgstr "验证错误" + msgid "Validity" msgstr "有效性" -#, python-brace-format -msgid "Certificate for ${entity} ${primary_key}" -msgstr "${entity} ${primary_key}证书" +msgid "Validity end" +msgstr "有效期结束于" -msgid "View Certificate" -msgstr "新证书" +msgid "Validity start" +msgstr "有效期开始于" -#, fuzzy -msgid "Certificate Data" -msgstr "证书" +msgid "Vault" +msgstr "库" -#, fuzzy -msgid "Certificate For Match" -msgstr "证书颁发机构" +msgid "Vault Container" +msgstr "库容器" -#, fuzzy -msgid "Certificate Mapping Match" -msgstr "证书关联数据" +msgid "Vault Containers" +msgstr "库容器" -#, fuzzy -msgid "Matched Users" -msgstr "已匹配规则" +msgid "Vault configuration" +msgstr "库配置" -#, fuzzy -msgid "User Login" -msgstr "用户登录名" +msgid "Vault data encrypted with session key" +msgstr "库数据用会话密钥加密" -#, fuzzy -msgid "Add certificate identity mapping rule" -msgstr "向一个服务中添加新证书" +msgid "Vault description" +msgstr "库描述" -#, fuzzy -msgid "Add certificate mapping data" -msgstr "TLSA证书关联数据" +msgid "Vault name" +msgstr "库名称" -#, fuzzy -msgid "Configuration string" -msgstr "配置" +msgid "Vault password" +msgstr "库密码" -#, fuzzy, python-brace-format -msgid "Do you want to remove certificate mapping data ${data}?" -msgstr "你要删除证书持有吗？" +msgid "Vault private key" +msgstr "库私钥" -#, fuzzy -msgid "Remove certificate mapping data" -msgstr "从一个服务中移除证书" +msgid "Vault public key" +msgstr "库公钥" -#, fuzzy -msgid "Issuer and subject" -msgstr "发布到" +msgid "Vault salt" +msgstr "库盐值" -#, fuzzy -msgid "Remove certificate identity mapping rules" -msgstr "从一个服务中移除证书" +msgid "Vault service" +msgstr "库服务" -msgid "Group Options" -msgstr "组选项" +msgid "Vault type" +msgstr "库类型" -msgid "Search Options" -msgstr "查找选项" +msgid "Vault user" +msgstr "共享用户" -msgid "SELinux Options" -msgstr "SELinux选项" +msgid "Vaults" +msgstr "库" -#, fuzzy -msgid "Server Options" -msgstr "服务选项" +msgid "Vendor" +msgstr "供应商" -msgid "Service Options" -msgstr "服务选项" +msgid "Verify Password" +msgstr "验证密码" -msgid "User Options" -msgstr "用户选项" +msgid "Verify Principal Password" +msgstr "验证主体密码" -#, fuzzy -msgid "Forward first" -msgstr "转发器" +msgid "Version" +msgstr "版本" -msgid "Forwarding disabled" -msgstr "禁止转发" - -#, fuzzy -msgid "Forward only" -msgstr "转发器策略" - -msgid "Options" -msgstr "选项" - -msgid "Update System DNS Records" -msgstr "更新系统DNS记录" - -msgid "Do you want to update system DNS records?" -msgstr "你要更新系统DNS记录吗？" - -msgid "System DNS records updated" -msgstr "系统DNS记录已更新" - -#, fuzzy -msgid "Add DNS forward zone" -msgstr "DNS正向区域" - -#, fuzzy -msgid "Remove DNS forward zones" -msgstr "DNS正向区域" - -#, fuzzy -msgid "Add DNS resource record" -msgstr "DNS资源记录" - -msgid "DNS record was deleted because it contained no data." -msgstr "DNS记录已删除因为它没有数据。" - -msgid "Other Record Types" -msgstr "其他记录类型" - -msgid "Address not valid, can't redirect" -msgstr "地址无效，不能重定向" - -msgid "Create dns record" -msgstr "创建dns记录" - -msgid "Creating record." -msgstr "创建记录。" - -msgid "Record creation failed." -msgstr "记录创建失败。" - -msgid "Checking if record exists." -msgstr "检查记录是否存在。" - -msgid "Record not found." -msgstr "记录没有找到。" - -msgid "Redirection to PTR record" -msgstr "重定向到PTR记录" - -#, python-brace-format -msgid "Zone found: ${zone}" -msgstr "找到区域：${zone}" - -msgid "Target reverse zone not found." -msgstr "目标反向区域没有找到。" - -msgid "Fetching DNS zones." -msgstr "抓取DNS区域。" - -msgid "An error occurred while fetching dns zones." -msgstr "在抓取dns区域时发生错误。" - -msgid "You will be redirected to DNS Zone." -msgstr "你将会被重定向到DNS区域。" - -#, fuzzy -msgid "Remove DNS resource records" -msgstr "DNS资源记录" - -msgid "Standard Record Types" -msgstr "标准记录类型" - -msgid "Records for DNS Zone" -msgstr "DNS区域记录" - -msgid "Record Type" -msgstr "记录类型" - -#, fuzzy -msgid "Add DNS zone" -msgstr "DNS区域" - -#, python-brace-format -msgid "Are you sure you want to add permission for DNS Zone ${object}?" -msgstr "你确定要为DNS区域${object}添加权限吗？" - -msgid "DNS Zone Settings" -msgstr "DNS区域设置" - -#, fuzzy -msgid "Remove DNS zones" -msgstr "DNS区域" - -msgid "Remove Permission" -msgstr "删除权限" - -#, python-brace-format -msgid "Are you sure you want to remove permission for DNS Zone ${object}?" -msgstr "你确定要为DNS区域${object}删除权限吗？" - -msgid "Skip DNS check" -msgstr "忽略DNS检查" - -msgid "Skip overlap check" -msgstr "忽略覆盖检查" - -msgid "Do you want to check if new authoritative nameserver address is in DNS" -msgstr "你想要检查在DNS中是否有新的权威命名服务器地址" - -msgid "Authoritative nameserver change" -msgstr "权威命名服务器改变" - -msgid "Level" -msgstr "级别" - -msgid "Set Domain Level" -msgstr "设置域级别" - -#, fuzzy -msgid "Add user group" -msgstr "用户组" - -#, python-brace-format -msgid "Add user groups into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into user groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add user group '${primary_key}' into HBAC rules" -msgstr "在一个HBAC规则中添加用户和用户组。" - -#, python-brace-format -msgid "Add user group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into roles" -msgstr "" - -#, python-brace-format -msgid "Add user group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add services into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for user group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user ID override into user group '${primary_key}'" -msgstr "" - -msgid "Group Settings" -msgstr "组设置" - -msgid "External" -msgstr "外部的" - -msgid "Groups" -msgstr "用户组" - -#, fuzzy -msgid "Group categories" -msgstr "用户类别" - -msgid "Change to external group" -msgstr "更改为外部组" - -msgid "Change to POSIX group" -msgstr "更改为POSIX组" - -msgid "Non-POSIX" -msgstr "非POSIX" - -#, fuzzy -msgid "POSIX" -msgstr "非POSIX" - -#, fuzzy -msgid "Remove user groups" -msgstr "成员服务组" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from user groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user group '${primary_key}' from netgroups" -msgstr "从一个网络组中移除成员。" - -#, python-brace-format -msgid "Remove user group '${primary_key}' from roles" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user group '${primary_key}' from HBAC rules" -msgstr "从一个HBAC规则中移除用户和用户组。" - -#, fuzzy, python-brace-format -msgid "Remove user group '${primary_key}' from sudo rules" -msgstr "从一个HBAC规则中移除用户和用户组。" - -#, fuzzy, python-brace-format -msgid "Remove user groups from user group '${primary_key}'" -msgstr "向SELinux用户映射规则中移除用户和用户组。" - -#, fuzzy, python-brace-format -msgid "Remove services from user group '${primary_key}'" -msgstr "从一个HBAC规则中移除服务和服务组。" - -#, fuzzy, python-brace-format -msgid "Remove users from user group '${primary_key}'" -msgstr "从一个组中移除成员。" - -#, python-brace-format -msgid "Remove user ID overrides from user group '${primary_key}'" -msgstr "" - -msgid "Group Type" -msgstr "组类型" - -#, fuzzy -msgid "Add HBAC rule" -msgstr "HBAC规则" - -#, fuzzy, python-brace-format -msgid "Add user groups into HBAC rule '${primary_key}'" -msgstr "在一个HBAC规则中添加用户和用户组。" - -#, python-brace-format -msgid "Add host groups into HBAC rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add HBAC service groups into HBAC rule '${primary_key}'" -msgstr "待移除的HBAC服务组" - -#, fuzzy, python-brace-format -msgid "Add HBAC services into HBAC rule '${primary_key}'" -msgstr "在HBAC规则中添加服务" - -#, fuzzy, python-brace-format -msgid "Add users into HBAC rule '${primary_key}'" -msgstr "在HBAC规则中添加服务" - -msgid "Accessing" -msgstr "访问" - -#, fuzzy -msgid "Remove HBAC rules" -msgstr "HBAC规则" - -#, fuzzy, python-brace-format -msgid "Remove user groups from HBAC rule '${primary_key}'" -msgstr "从一个HBAC规则中移除用户和用户组。" - -#, fuzzy, python-brace-format -msgid "Remove host groups from HBAC rule '${primary_key}'" -msgstr "从一个HBAC规则中移除用户和用户组。" - -#, python-brace-format -msgid "Remove hosts from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove HBAC service groups from HBAC rule '${primary_key}'" -msgstr "从一个HBAC规则中移除服务和服务组。" - -#, python-brace-format -msgid "Remove HBAC services from HBAC rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove users from HBAC rule '${primary_key}'" -msgstr "从一个HBAC规则中移除用户和用户组。" +msgid "Vertical Precision" +msgstr "垂直精度" msgid "Via Service" msgstr "通过服务" +msgid "View" +msgstr "查看" + +msgid "View Certificate" +msgstr "新证书" + +msgid "Waiting for confirmation by remote side" +msgstr "等待远程端的确认" + +msgid "Warning" +msgstr "警告" + +msgid "Warning unrecognized encryption type.\n" +msgstr "警告无法识别加密类型。\n" + +msgid "Warning unrecognized salt type.\n" +msgstr "警告无法识别盐值类型。\n" + +#, c-format +msgid "Warning: failed to convert type (#%d)\n" +msgstr "警告：转换类型失败（#%d）\n" + +#, c-format +msgid "" +"Warning: salt types are not honored with randomized passwords (see opt. -P)\n" +msgstr "警告：盐值类型没有授予随机密码（查看选项-P）\n" + +msgid "Weight" +msgstr "重量" + +msgid "Weight for server services" +msgstr "服务器服务权重" + +msgid "" +"When migrating a group already existing in IPA domain overwrite the group " +"GID and report as success" +msgstr "当移植一个在IPA域中已存在的组时覆盖组GID并报告成功" + +msgid "Whether to store certs issued using this profile" +msgstr "是否存储使用该配置文件的证书发布" + msgid "Who" msgstr "谁" -#, fuzzy -msgid "Add HBAC service" -msgstr "HBAC服务" +msgid "Working" +msgstr "工作中" -#, fuzzy, python-brace-format -msgid "Add HBAC service '${primary_key}' into HBAC service groups" -msgstr "在一个HBAC服务组中添加成员。" - -#, fuzzy -msgid "Remove HBAC services" -msgstr "成员HBAC服务" - -#, fuzzy, python-brace-format -msgid "Remove HBAC service '${primary_key}' from HBAC service groups" -msgstr "从一个HBAC服务组中移除成员。" - -#, fuzzy -msgid "Add HBAC service group" -msgstr "HBAC服务组" - -#, fuzzy, python-brace-format -msgid "Add HBAC services into HBAC service group '${primary_key}'" -msgstr "在一个HBAC服务组中添加成员。" - -#, fuzzy -msgid "Remove HBAC service groups" -msgstr "成员HBAC服务组" - -#, fuzzy, python-brace-format -msgid "Remove HBAC services from HBAC service group '${primary_key}'" -msgstr "从一个HBAC服务组中移除成员。" - -msgid "Access Denied" -msgstr "访问阻止" - -msgid "Access Granted" -msgstr "访问允许" - -msgid "Include Disabled" -msgstr "包含禁用的" - -msgid "Include Enabled" -msgstr "包含启用的" - -msgid "HBAC Test" -msgstr "HBAC测试" - -msgid "Matched" -msgstr "匹配" - -msgid "Missing values: " -msgstr "缺失值：" - -msgid "New Test" -msgstr "新测试" - -msgid "Rules" -msgstr "规则" - -msgid "Run Test" -msgstr "允许测试" - -#, python-brace-format -msgid "Specify external ${entity}" -msgstr "指定外部的${entity}" - -msgid "Unmatched" -msgstr "不匹配" - -#, fuzzy -msgid "Add host" -msgstr "添加一个新主机。" - -#, python-brace-format -msgid "Add hosts managing host '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host '${primary_key}' into host groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add host '${primary_key}' into HBAC rules" -msgstr "在HBAC规则中添加服务" - -#, python-brace-format -msgid "Add host '${primary_key}' into netgroups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add host '${primary_key}' into roles" -msgstr "${primary_key}覆盖：" - -#, python-brace-format -msgid "Add host '${primary_key}' into sudo rules" -msgstr "" - -msgid "Host Certificate" -msgstr "主机证书" - -msgid "Host Name" -msgstr "主机名" - -msgid "Delete Key, Unprovision" -msgstr "删除密钥，取消供应" - -msgid "Host Settings" -msgstr "主机设置" - -msgid "Enrolled" -msgstr "已注册" - -msgid "Enrollment" -msgstr "注册" - -msgid "Fully Qualified Host Name" -msgstr "完全限定的主机名" - -msgid "Generate OTP" -msgstr "生成OTP" - -msgid "Generated OTP" -msgstr "生成OTP" - -msgid "Kerberos Key" -msgstr "Kerberos密钥" - -msgid "Kerberos Key Not Present" -msgstr "没有找到Kerberos密钥" - -msgid "Kerberos Key Present, Host Provisioned" -msgstr "找到Kerberos密钥，主机分配" - -#, fuzzy -msgid "One-Time Password" -msgstr "一次性密码" - -#, fuzzy -msgid "One-Time Password Not Present" -msgstr "一次性密码" - -#, fuzzy -msgid "One-Time Password Present" -msgstr "一次性密码" - -msgid "Reset OTP" -msgstr "重置OTP" - -#, fuzzy -msgid "Reset One-Time Password" -msgstr "一次性密码" - -msgid "Set OTP" -msgstr "设置OTP" - -msgid "OTP set" -msgstr "OTP设置" - -#, fuzzy -msgid "Set One-Time Password" -msgstr "一次性密码" - -#, fuzzy -msgid "Remove hosts" -msgstr "删除持有" - -#, python-brace-format -msgid "Remove hosts managing host '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove host '${primary_key}' from host groups" -msgstr "从一个主机组中移除成员。" - -#, fuzzy, python-brace-format -msgid "Remove host '${primary_key}' from netgroups" -msgstr "从一个网络组中移除成员。" - -#, fuzzy, python-brace-format -msgid "Remove host '${primary_key}' from roles" -msgstr "从一个角色中移除权限。" - -#, fuzzy, python-brace-format -msgid "Remove host '${primary_key}' from HBAC rules" -msgstr "从一个HBAC规则中移除用户和用户组。" - -#, fuzzy, python-brace-format -msgid "Remove host '${primary_key}' from sudo rules" -msgstr "从Sudo规则中移除一个选项。" - -msgid "Unprovision" -msgstr "取消供应" - -#, fuzzy -msgid "Are you sure you want to unprovision this host?" -msgstr "你确定要执行该操作吗？" - -#, fuzzy -msgid "Unprovisioning host" -msgstr "取消供应" - -msgid "Host unprovisioned" -msgstr "主机未分配" - -#, fuzzy -msgid "Add host group" -msgstr "主机组" - -#, fuzzy, python-brace-format -msgid "Add hosts into host group '${primary_key}'" -msgstr "%i主机或主机组已移除。" - -#, python-brace-format -msgid "Add host groups into host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into host groups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into HBAC rules" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add host group '${primary_key}' into sudo rules" -msgstr "" - -#, python-brace-format -msgid "Add groups as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove groups from member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users as member managers for host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from member managers for host group '${primary_key}'" -msgstr "" - -msgid "Host Group Settings" -msgstr "主机组设置" - -#, fuzzy -msgid "Remove host groups" -msgstr "成员主机组" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from host groups" -msgstr "" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from netgroups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove host group '${primary_key}' from HBAC rules" -msgstr "从一个HBAC规则中移除用户和用户组。" - -#, python-brace-format -msgid "Remove host group '${primary_key}' from sudo rules" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from host group '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from host group '${primary_key}'" -msgstr "" - -msgid "Keycloak or Red Hat SSO" -msgstr "" - -msgid "Google" -msgstr "" - -msgid "Github" -msgstr "" - -msgid "Microsoft or Azure" -msgstr "" - -msgid "Okta" -msgstr "" - -msgid "OAuth 2.0 client details" -msgstr "" - -#, fuzzy -#| msgid "Servers details:" -msgid "Identity provider details" -msgstr "服务器详细信息：" - -#, fuzzy -#| msgid "Verify Password" -msgid "Verify secret" -msgstr "验证密码" - -msgid "User to override" -msgstr "待覆盖用户" +msgid "Write profile configuration to file" +msgstr "将配置文件配置写进文件" msgid "" -"Enter trusted or IPA user login. Note: search doesn't list users from " -"trusted domains." -msgstr "键入受信任的用户或IPA用户登录。注意：查找不列举信任域中的用户。" - -msgid "Enter trusted user login." -msgstr "键入受信任的用户登录。" - -#, fuzzy -msgid "Profile" -msgstr "配置文件" - -msgid "Group to override" -msgstr "待覆盖的组" - -msgid "" -"Enter trusted or IPA group name. Note: search doesn't list groups from " -"trusted domains." -msgstr "键入受信任的组或IPA组登录。注意：查找不列举信任域中的组。" - -msgid "Enter trusted group name." -msgstr "键入受信任的组名称。" - -#, fuzzy -msgid "Add ID view" -msgstr "添加一个新的ID视图。" - -#, fuzzy -msgid "Add group ID override" -msgstr "组ID覆盖" - -#, fuzzy -msgid "Add user ID override" -msgstr "用户ID覆盖" - -#, python-brace-format -msgid "${primary_key} applies to:" -msgstr "${primary_key}适用于：" - -msgid "Applied to hosts" -msgstr "适用的主机" - -msgid "Apply to host groups" -msgstr "适用的主机组" - -#, fuzzy, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts of host groups" -msgstr "不将ID视图应用到主机组中的主机" - -msgid "Apply to hosts" -msgstr "适用的主机" - -#, python-brace-format -msgid "Apply ID view '${primary_key}' on hosts" -msgstr "" - -#, python-brace-format -msgid "${primary_key} overrides:" -msgstr "${primary_key}覆盖：" - -#, fuzzy -msgid "Remove ID views" -msgstr "系统ID视图" - -#, fuzzy -msgid "Remove user ID overrides" -msgstr "用户ID覆盖" - -#, fuzzy -msgid "Remove group ID overrides" -msgstr "组ID覆盖" - -msgid "Un-apply from host groups" -msgstr "不适用的主机组" - -msgid "Un-apply ID Views from hosts of hostgroups" -msgstr "不将ID视图应用到主机组中的主机" - -msgid "Un-apply" -msgstr "不适用的" - -msgid "Un-apply from hosts" -msgstr "不适用的主机" - -msgid "Un-apply ID Views from hosts" -msgstr "不将ID视图应用到主机" - -msgid "Are you sure you want to un-apply ID view from selected entries?" -msgstr "你确定要在选择的条目中不应用ID视图？" - -#, fuzzy, python-brace-format -msgid "Un-apply ID view '${primary_key}' from hosts" -msgstr "不将ID视图应用到主机" - -msgid "Kerberos Ticket Policy" -msgstr "Kerberos票据策略" - -#, fuzzy -msgid "Add netgroup" -msgstr "网络组" - -#, python-brace-format -msgid "Add netgroup '${primary_key}' into netgroups" -msgstr "" - -#, python-brace-format -msgid "Add netgroups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into netgroup '${primary_key}'" -msgstr "" - -msgid "Netgroup Settings" -msgstr "网络组设置" - -#, fuzzy -msgid "Remove netgroups" -msgstr "成员网络组" - -#, fuzzy, python-brace-format -msgid "Remove netgroup '${primary_key}' from netgroups" -msgstr "从一个网络组中移除成员。" - -#, fuzzy, python-brace-format -msgid "Remove user groups from netgroup '${primary_key}'" -msgstr "从一个HBAC规则中移除用户和用户组。" - -#, python-brace-format -msgid "Remove hosts from netgroup '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove host groups from netgroup '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove netgroups from netgroup '${primary_key}'" -msgstr "从一个网络组中移除成员。" - -#, fuzzy, python-brace-format -msgid "Remove users from netgroup '${primary_key}'" -msgstr "从一个网络组中移除成员。" - -#, fuzzy -msgid "Add OTP token" -msgstr "OTP令牌" - -#, python-brace-format -msgid "Add users managing OTP token '${primary_key}'" +"You are trying to reference a magic private group which is not allowed to be " +"overridden. Try overriding the GID attribute of the corresponding user " +"instead." msgstr "" +"你正尝试引用一个不允许覆盖的神奇私有组。而不是尝试覆盖对应用户的GID属性。" #, python-brace-format msgid "" @@ -21253,2693 +10800,524 @@ msgstr "" "你可以使用FreeOTP 来充当OTP令牌的一" "个应用软件。" -msgid "Configure your token" -msgstr "配置你的令牌" +msgid "You may need to manually remove them from the tree" +msgstr "你可能需要从树中手动删除它们" + +msgid "You must enroll a host in order to create a host service" +msgstr "要创建一个主机服务，你必须注册一个主机" msgid "" -"Configure your token by scanning the QR code below. Click on the QR code if " -"you see this on the device you want to configure." +"You must specify both rid-base and secondary-rid-base options, because ipa-" +"adtrust-install has already been run." msgstr "" -"通过浏览下面的二维码来配置你的令牌。如果你想在你配置的设备上看到该二维码，请" -"点击它。" +"你必须同时指定 rid-base和secondary-rid-base选项，因为ipa-adtrust-install已经" +"运行了。" -msgid "OTP Token Settings" -msgstr "OTP令牌设置" - -msgid "Disable token" -msgstr "禁用令牌" - -msgid "Enable token" -msgstr "启用令牌" - -#, fuzzy -msgid "Remove OTP tokens" -msgstr "OTP令牌" - -#, python-brace-format -msgid "Remove users managing OTP token '${primary_key}'" -msgstr "" - -msgid "Show QR code" -msgstr "显示二维码" - -msgid "Show configuration uri" -msgstr "显示配置uri" - -msgid "Counter-based (HOTP)" -msgstr "计数型（HOTP）" - -msgid "Time-based (TOTP)" -msgstr "计时型（TOTP）" - -msgid "Add Custom Attribute" -msgstr "添加自定义属性" - -msgid "Permission settings" -msgstr "权限设置" - -msgid "Attribute breakdown" -msgstr "属性分类" - -msgid "Privilege Settings" -msgstr "特权设置" - -#, fuzzy -msgid "Public key:" -msgstr "公钥" - -#, fuzzy -msgid "Set public key" -msgstr "SSH公钥" - -msgid "Show/Set key" -msgstr "显示/设置密钥" - -msgid "Modified: key not set" -msgstr "已修改：密钥没有设置" - -msgid "Modified" -msgstr "已修改" - -msgid "New: key not set" -msgstr "新的：密钥没有设置" - -msgid "New: key set" -msgstr "新的：密钥已设置" - -#, fuzzy -msgid "Add password policy" -msgstr "密码策略" - -msgid "Password Policy" -msgstr "密码策略" - -#, fuzzy -msgid "Remove password policies" -msgstr "密码策略" - -#, fuzzy -msgid "Add ID range" -msgstr "修改ID范围。" - -msgid "Range Settings" -msgstr "范围设置" - -msgid "Base ID" -msgstr "基ID" - -msgid "Primary RID base" -msgstr "主要的RID基" - -msgid "Range size" -msgstr "范围大小" - -msgid "Domain SID" -msgstr "域SID" - -msgid "Secondary RID base" -msgstr "次要的RID基" - -#, fuzzy -msgid "Remove ID ranges" -msgstr "ID范围" - -msgid "Active Directory domain with POSIX attributes" -msgstr "带POSIX属性的活动目录域" - -msgid "Detect" -msgstr "检测" - -msgid "Local domain" -msgstr "本地域" - -msgid "IPA trust" -msgstr "IPA信任" - -#, fuzzy -msgid "Active Directory winsync" -msgstr "活动目录域" - -#, fuzzy -msgid "Add RADIUS server" -msgstr "RADIUS代理服务器" - -msgid "RADIUS Proxy Server Settings" -msgstr "RADIUS代理服务器设置" - -#, fuzzy -msgid "Remove RADIUS servers" -msgstr "RADIUS代理服务器" - -msgid "Check DNS" -msgstr "检测DNS" - -msgid "Do you also want to perform DNS check?" -msgstr "你还想执行DNS检查吗？" - -msgid "Force Update" -msgstr "强制更新" - -#, fuzzy -msgid "Add SELinux user map" -msgstr "SELinux用户映射规则" - -#, fuzzy, python-brace-format -msgid "Add user groups into SELinux user map '${primary_key}'" -msgstr "向SELinux用户映射规则中添加用户和用户组。" - -#, fuzzy, python-brace-format -msgid "Add host groups into SELinux user map '${primary_key}'" -msgstr "向SELinux用户映射规则中添加用户和用户组。" - -#, python-brace-format -msgid "Add hosts into SELinux user map '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add users into SELinux user map '${primary_key}'" -msgstr "向SELinux用户映射规则中添加用户和用户组。" - -msgid "Remove selinux user maps" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user groups from SELinux user map '${primary_key}'" -msgstr "向SELinux用户映射规则中移除用户和用户组。" - -#, fuzzy, python-brace-format -msgid "Remove host groups from SELinux user map '${primary_key}'" -msgstr "向SELinux用户映射规则中移除用户和用户组。" - -#, fuzzy, python-brace-format -msgid "Remove hosts from SELinux user map '${primary_key}'" -msgstr "向SELinux用户映射规则中移除用户和用户组。" - -#, fuzzy, python-brace-format -msgid "Remove users from SELinux user map '${primary_key}'" -msgstr "向SELinux用户映射规则中移除用户和用户组。" - -msgid "Server Roles" -msgstr "服务器角色" - -msgid "Server Role" -msgstr "服务器角色" - -msgid "Warning: Consider service replication" -msgstr "" - -msgid "" -"It is strongly recommended to keep the following services installed on more " -"than one server:" -msgstr "" - -msgid "Delete Server" -msgstr "删除服务器" - -msgid "" -"Deleting a server removes it permanently from the topology. Note that this " -"is a non-reversible action." -msgstr "从拓扑中永久地删除一台服务器。注意这是一个不可逆的操作。" - -#, fuzzy -msgid "Add service" -msgstr "HBAC服务" - -#, python-brace-format -msgid "Add hosts managing service '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add service '${primary_key}' into roles" -msgstr "" - -msgid "Service Certificate" -msgstr "服务证书" - -msgid "Service Settings" -msgstr "服务设置" - -#, fuzzy -msgid "Provisioning" -msgstr "取消供应" - -#, fuzzy -msgid "Remove services" -msgstr "成员服务" - -#, fuzzy, python-brace-format -msgid "Remove service '${primary_key}' from roles" -msgstr "从一个角色中移除权限。" - -#, fuzzy, python-brace-format -msgid "Remove hosts managing service '${primary_key}'" -msgstr "移除可以管理该服务的主机。" - -#, fuzzy -msgid "Are you sure you want to unprovision this service?" -msgstr "你确定要恢复被选用户？" - -#, fuzzy -msgid "Unprovisioning service" -msgstr "取消供应" - -#, fuzzy -msgid "Service unprovisioned" -msgstr "主机未分配" - -msgid "Kerberos Key Present, Service Provisioned" -msgstr "找到Kerberos密钥，服务分配" - -msgid "SSH public keys" -msgstr "SSH公钥" - -msgid "SSH public key:" -msgstr "SSH公钥：" - -msgid "Set SSH key" -msgstr "设置SSH公钥" - -msgid "Are you sure you want to activate selected users?" -msgstr "你确定要激活被选用户？" - -#, python-brace-format -msgid "Are you sure you want to activate ${object}?" -msgstr "你确定要激活${object}？" - -#, python-brace-format -msgid "${count} user(s) activated" -msgstr "已激活${count}个用户" - -#, fuzzy -msgid "Add stage user" -msgstr "计划用户" - -msgid "Stage users" -msgstr "计划用户" - -msgid "Preserved users" -msgstr "备用用户" - -#, fuzzy -msgid "Remove preserved users" -msgstr "备用用户" - -#, fuzzy -msgid "Remove stage users" -msgstr "计划用户" - -msgid "Are you sure you want to stage selected users?" -msgstr "你确定要呈现被选用户？" - -#, python-brace-format -msgid "${count} users(s) staged" -msgstr "已呈现${count}个用户" - -#, python-brace-format -msgid "Are you sure you want to stage ${object}?" -msgstr "你确定要呈现${object}？" - -msgid "Are you sure you want to restore selected users?" -msgstr "你确定要恢复被选用户？" - -#, python-brace-format -msgid "Are you sure you want to restore ${object}?" -msgstr "你确定要恢复${object}？" - -#, python-brace-format -msgid "${count} user(s) restored" -msgstr "已恢复${count}个用户" - -msgid "User categories" -msgstr "用户类别" - -#, fuzzy -msgid "Add subid" -msgstr "sudo规则" - -#, fuzzy -msgid "Assigned subids" -msgstr "已分配的ID视图" - -msgid "DNA remaining" -msgstr "" - -msgid "Remaining subids" -msgstr "" - -msgid "Subordinate ID Statistics" -msgstr "" - -#, fuzzy -msgid "Add sudo command" -msgstr "sudo命令" - -#, fuzzy, python-brace-format -msgid "Add sudo command '${primary_key}' into sudo command groups" -msgstr "待添加的以逗号分隔的sudo命令组列表" - -#, fuzzy -msgid "Remove sudo commands" -msgstr "成员sudo命令" - -#, fuzzy, python-brace-format -msgid "Remove sudo command '${primary_key}' from sudo command groups" -msgstr "从Sudo命令组中移除成员。" - -#, fuzzy -msgid "Add sudo command group" -msgstr "sudo命令组" - -#, fuzzy, python-brace-format -msgid "Add sudo commands into sudo command group '${primary_key}'" -msgstr "添加受Sudo规则影响的命令和sudo命令组。" - -#, fuzzy -msgid "Remove sudo command groups" -msgstr "成员sudo命令组" - -#, fuzzy, python-brace-format -msgid "Remove sudo commands from sudo command group '${primary_key}'" -msgstr "移除受Sudo规则影响的命令和命令组。" - -#, fuzzy -msgid "Add sudo rule" -msgstr "sudo规则" - -#, fuzzy -msgid "Add sudo option" -msgstr "Sudo选项" - -#, python-brace-format -msgid "Add allow sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add allow sudo command groups into sudo rule '${primary_key}'" -msgstr "待移除的sudo命令组" - -#, python-brace-format -msgid "Add deny sudo commands into sudo rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add deny sudo command groups into sudo rule '${primary_key}'" -msgstr "待移除的sudo命令组" - -#, python-brace-format -msgid "Add user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add host groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add hosts into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs users into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs user groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add RunAs groups into sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into sudo rule '${primary_key}'" -msgstr "" - -msgid "Allow" -msgstr "允许" - -msgid "Any Command" -msgstr "任何命令" - -msgid "Any Group" -msgstr "任何组" - -msgid "Run Commands" -msgstr "允许命令" - -msgid "Deny" -msgstr "阻止" - -msgid "Access this host" -msgstr "访问该主机" - -msgid "Option added" -msgstr "已添加选项" - -#, python-brace-format -msgid "${count} option(s) removed" -msgstr "已删除${count}个选项" - -#, fuzzy -msgid "Remove sudo rules" -msgstr "sudo规则" - -#, python-brace-format -msgid "Remove allow sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove allow sudo command groups from sudo rule '${primary_key}'" -msgstr "移除受Sudo规则影响的命令和命令组。" - -#, python-brace-format -msgid "Remove deny sudo commands from sudo rule '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove deny sudo command groups from sudo rule '${primary_key}'" -msgstr "移除受Sudo规则影响的命令和命令组。" - -#, fuzzy, python-brace-format -msgid "Remove user groups from sudo rule '${primary_key}'" -msgstr "从一个HBAC规则中移除用户和用户组。" - -#, python-brace-format -msgid "Remove host groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove hosts from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs users from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs user groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove RunAs groups from sudo rule '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from sudo rule '${primary_key}'" -msgstr "" - -msgid "As Whom" -msgstr "作为谁" - -msgid "Specified Commands and Groups" -msgstr "指定的命令和命令组" - -msgid "Specified Groups" -msgstr "指定的组" - -#, fuzzy -msgid "Remove sudo options" -msgstr "删除权限" - -msgid "Autogenerated" -msgstr "自动生成" - -msgid "Segment details" -msgstr "部分细节" - -msgid "Replication configuration" -msgstr "复制配置" - -#, python-brace-format -msgid "Managed topology requires minimal domain level ${domainlevel}" -msgstr "管理拓扑需要最小的域级别${domainlevel}" - -#, fuzzy -msgid "Add IPA location" -msgstr "添加一个新的IPA位置。" - -#, python-brace-format -msgid "Add IPA server into IPA location '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Remove IPA locations" -msgstr "" -"\n" -"IPA位置\n" - -#, python-brace-format -msgid "Remove IPA servers from IPA location '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Add topology segment" -msgstr "拓扑段" - -#, fuzzy -msgid "Remove topology segments" -msgstr "查找拓扑段。" - -msgid "Account" -msgstr "账户" - -#, fuzzy -msgid "Add trust" -msgstr "IPA信任" - -msgid "Administrative account" -msgstr "管理员账户" - -#, fuzzy -msgid "SID blocklists" -msgstr "进来的SID黑名单" - -msgid "Trust Settings" -msgstr "信任设置" - -msgid "Establish using" -msgstr "建立使用" - -msgid "Fetch domains" -msgstr "获取域名" - -msgid "Pre-shared password" -msgstr "预先共享的密码" - -#, fuzzy -msgid "Remove trusts" -msgstr "删除权限" - -#, fuzzy -msgid "Remove domains" -msgstr "Realm域" - -msgid "Alternative UPN suffixes" -msgstr "可供选择的UPN后缀" - -#, fuzzy -msgid "User attributes for SMB services" -msgstr "查找HBAC服务。" - -msgid "Path to a script executed on a Windows system at logon" -msgstr "" - -msgid "Path to a user profile, in UNC format \\\\server\\share\\" -msgstr "" - -msgid "Path to a user home directory, in UNC format" -msgstr "" - -#, fuzzy -msgid "Drive to mount a home directory" -msgstr "主目录的默认位置" - -msgid "Account Settings" -msgstr "账户设置" - -msgid "Account Status" -msgstr "账户状态" - -msgid "Active users" -msgstr "活跃用户" - -#, fuzzy -msgid "Add user" -msgstr "添加一个新用户。" - -#, python-brace-format -msgid "Add user '${primary_key}' into user groups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add user '${primary_key}' into HBAC rules" -msgstr "在HBAC规则中添加服务" - -#, python-brace-format -msgid "Add user '${primary_key}' into netgroups" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Add user '${primary_key}' into roles" -msgstr "${primary_key}覆盖：" - -#, python-brace-format -msgid "Add user '${primary_key}' into sudo rules" -msgstr "" - -msgid "Auto assign subordinate ids" -msgstr "" - -#, fuzzy, python-brace-format -msgid "" -"Are you sure you want to auto-assign a subordinate id to user ${object}?" -msgstr "你确定要解锁用户${object}？" - -msgid "Contact Settings" -msgstr "联系方式设置" - -msgid "Delete mode" -msgstr "删除模式" - -msgid "Employee Information" -msgstr "员工信息" - -msgid "Error changing account status" -msgstr "错误更改帐户状态" - -msgid "Password expiration" -msgstr "密码过期" - -msgid "Mailing Address" -msgstr "邮件地址" - -msgid "Misc. Information" -msgstr "杂项信息" - -msgid "delete" -msgstr "删除" - -msgid "preserve" -msgstr "保存" - -msgid "No private group" -msgstr "没有私有组" - -#, fuzzy -msgid "Remove users" -msgstr "成员用户" - -#, fuzzy, python-brace-format -msgid "Remove user '${primary_key}' from user groups" -msgstr "从一个组中移除成员。" - -#, fuzzy, python-brace-format -msgid "Remove user '${primary_key}' from netgroups" -msgstr "从一个网络组中移除成员。" - -#, fuzzy, python-brace-format -msgid "Remove user '${primary_key}' from roles" -msgstr "从一个角色中移除权限。" - -#, fuzzy, python-brace-format -msgid "Remove user '${primary_key}' from HBAC rules" -msgstr "从一个HBAC规则中移除用户和用户组。" - -#, fuzzy, python-brace-format -msgid "Remove user '${primary_key}' from sudo rules" -msgstr "从Sudo规则中移除一个选项。" - -#, python-brace-format -msgid "" -"Are you sure you want to ${action} the user?
The change will take effect " -"immediately." -msgstr "你确定要${action}用户？
改变会立即生效。" - -#, python-brace-format -msgid "Click to ${action}" -msgstr "点击${action}" - -msgid "Unlock" -msgstr "解锁" - -#, python-brace-format -msgid "Are you sure you want to unlock user ${object}?" -msgstr "你确定要解锁用户${object}？" - -#, fuzzy -msgid "Add vault" -msgstr "库" - -#, python-brace-format -msgid "Add user groups into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add user groups into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add services into owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Add users into owners of vault '${primary_key}'" -msgstr "" - -msgid "" -"Secrets can be added/retrieved to vault only by using vault-archive and " -"vault-retrieve from CLI." -msgstr "" - -msgid "" -"Content of 'standard' vaults can be seen by users with higher privileges " -"(admins)." -msgstr "" - -msgid "Asymmetric" -msgstr "" - -#, fuzzy -msgid "Vaults Config" -msgstr "库容器" - -#, fuzzy -msgid "Members" -msgstr "成员主机" - -#, fuzzy -msgid "My User Vaults" -msgstr "库" - -#, fuzzy -msgid "Owners" -msgstr "所有者" - -#, fuzzy -msgid "Remove vaults" -msgstr "删除持有" - -#, python-brace-format -msgid "Remove user groups from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove services from members of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from members of vault '${primary_key}'" -msgstr "" - -#, fuzzy, python-brace-format -msgid "Remove user groups from owners of vault '${primary_key}'" -msgstr "从一个HBAC规则中移除用户和用户组。" - -#, python-brace-format -msgid "Remove services from owners of vault '${primary_key}'" -msgstr "" - -#, python-brace-format -msgid "Remove users from owners of vault '${primary_key}'" -msgstr "" - -#, fuzzy -msgid "Service Vaults" -msgstr "服务" - -#, fuzzy -msgid "Shared" -msgstr "共享库" - -#, fuzzy -msgid "Shared Vaults" -msgstr "共享库" - -msgid "Standard" -msgstr "" - -msgid "Symmetric" -msgstr "" - -#, fuzzy -msgid "Vault Type" -msgstr "库类型" - -msgid "" -"Only standard vaults can be created in WebUI, use CLI for other types of " -"vaults." -msgstr "" - -#, fuzzy -msgid "User Vaults" -msgstr "库" - -msgid "Current password is required" -msgstr "需要当前密码" +msgid "You will be redirected to DNS Zone." +msgstr "你将会被重定向到DNS区域。" #, python-brace-format msgid "Your password expires in ${days} days." msgstr "你的密码将在${days}天到期。" -msgid "First OTP" -msgstr "第一个OTP" - -msgid "New password is required" -msgstr "需要新密码" - +#, python-format msgid "" -" OTP (One-Time Password):Generate new OTP code for each OTP field." -msgstr "" +"Your trust to %(domain)s is broken. Please re-create it by running 'ipa " +"trust-add' again." +msgstr "你对域%(domain)s的信任已中断。请再次运行'ipa trust-add'来重新创建它。" -msgid "" -" OTP (One-Time Password):Leave blank if you are not using OTP tokensfor authentication." -msgstr "" +msgid "YubiKey slot" +msgstr "YubiKey槽" -msgid "Token synchronization failed" -msgstr "令牌同步失败" - -msgid "The username, password or token codes are not correct" -msgstr "用户名，密码或令牌码不争取" - -msgid "Token was synchronized" -msgstr "令牌已同步" - -msgid "Password change complete" -msgstr "完成密码更改" - -#, fuzzy -msgid "Your password has expired. Please enter a new password." -msgstr "你的密码将在${days}天到期。" - -msgid "Passwords must match" -msgstr "密码必须匹配" - -msgid "Password reset was not successful." -msgstr "密码重置失败。" - -msgid "Reset your password." -msgstr "重置你的密码。" - -msgid "Second OTP" -msgstr "第二个OTP" - -msgid "Verify Password" -msgstr "验证密码" - -msgid "Are you sure you want to delete selected entries?" -msgstr "你确定要删除被选条目？" +msgid "Zone forwarders" +msgstr "区域转发器" #, python-brace-format -msgid "${count} item(s) deleted" -msgstr "已删除${count}个条目" +msgid "Zone found: ${zone}" +msgstr "找到区域：${zone}" -msgid "Are you sure you want to disable selected entries?" -msgstr "你确定要禁用被选条目？" +msgid "Zone name" +msgstr "区域名" -#, python-brace-format -msgid "${count} item(s) disabled" -msgstr "已禁用${count}个条目" - -msgid "Are you sure you want to enable selected entries?" -msgstr "你确定要启用被选条目？" - -#, python-brace-format -msgid "${count} item(s) enabled" -msgstr "已启用${count}个条目" - -msgid "Some entries were not deleted" -msgstr "一些条目没有被删除" - -msgid "Quick Links" -msgstr "快速链接" - -msgid "Select All" -msgstr "选择全部" - -#, python-brace-format -msgid "" -"Query returned more results than the configured size limit. Displaying the " -"first ${counter} results." -msgstr "返回比配置大小限制更多的结果。显示第一个${counter}结果。" - -msgid "Unselect All" -msgstr "取消选择全部" - -msgid "" -"

Browser Kerberos Setup

\n" -"\n" -msgstr "" - -msgid "" -"

Firefox

\n" -"\n" -"

\n" -" You can configure Firefox to use Kerberos for Single Sign-on. " -"The following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"
    \n" -"
  1. \n" -"

    \n" -"Import " -"Certificate Authority certificate\n" -"

    \n" -"

    \n" -" Make sure you select all three checkboxes.\n" -"

    \n" -"
    2. \n" -"
  2. \n" -" In the address bar of Firefox, type about:config to display the list of current configuration options.\n" -"
    3. \n" -"
  3. \n" -" In the Filter field, type negotiate to restrict " -"the list of options.\n" -"
    4. \n" -"
  4. \n" -" Double-click the network.negotiate-auth.trusted-uris entry to display the Enter string value dialog box.\n" -"
    5. \n" -"
  5. \n" -" Enter the name of the domain against which you want to " -"authenticate, for example, .example.com.\n" -"
    6. \n" -"
  6. Return to Web UI
    7. \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Chrome

\n" -"\n" -"

\n" -" You can configure Chrome to use Kerberos for Single Sign-on. The " -"following instructions will guide you in configuring your web browser to " -"send your Kerberos credentials to the appropriate Key Distribution Center " -"which enables Single Sign-on.\n" -"

\n" -"\n" -msgstr "" - -msgid "" -"

Import CA Certificate

\n" -"
    \n" -"
  1. \n" -" Download the CA certificate. " -"Alternatively, if the host is also an IdM client, you can find the " -"certificate in /etc/ipa/ca.crt.\n" -"
    2. \n" -"
  2. \n" -" Click the menu button with the Customize and control " -"Google Chrome tooltip, which is by default in the top right-hand corner " -"of Chrome, and click Settings.\n" -"
    3. \n" -"
  3. \n" -" Click Show advanced settings to display more " -"options, and then click the Manage certificates button located " -"under the HTTPS/SSL heading.\n" -"
    4. \n" -"
  4. \n" -" In the Authorities tab, click the Import " -"button at the bottom.\n" -"
    5. \n" -"
  5. Select the CA certificate file that you downloaded in the first step.\n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

\n" -" Enable SPNEGO (Simple and Protected GSSAPI Negotiation " -"Mechanism) to Use Kerberos Authentication\n" -" in Chrome\n" -"

\n" -"
    \n" -"
  1. \n" -" Make sure you have the necessary directory created by " -"running:\n" -"
    \n" -" [root@client]# mkdir -p /etc/opt/chrome/policies/" -"managed/\n" -"
    \n" -"
    2. \n" -"
  2. \n" -" Create a new /etc/opt/chrome/policies/managed/mydomain." -"json file with write privileges limited to the system administrator " -"or root, and include the following line:\n" -"
    \n" -" { \"AuthServerWhitelist\": \"*.example.com\" }\n" -"
    \n" -"
    \n" -" You can do this by running:\n" -"
    \n" -"
    \n" -" [root@server]# echo '{ \"AuthServerWhitelist\": \"*.example.com\" }' > /etc/opt/chrome/policies/" -"managed/mydomain.json\n" -"
    \n" -"
    3. \n" -"
\n" -"
    \n" -"

    \n" -"Note: If using Chromium, use /etc/chromium/policies/" -"managed/ instead of /etc/opt/chrome/policies/managed/ " -"for the two SPNEGO Chrome configuration steps above.\n" -"

    \n" -"
\n" -"\n" -msgstr "" - -msgid "" -"

Internet Explorer

\n" -"

WARNING: Internet Explorer is no longer a supported " -"browser.

\n" -"

\n" -" Once you are able to log into the workstation with your kerberos " -"key you are now able to use that ticket in Internet Explorer.\n" -"

\n" -"

\n" -msgstr "" - -msgid "" -"Log into the Windows machine using an account of your Kerberos realm " -"(administrative domain)\n" -"

\n" -"

\n" -"In Internet Explorer, click Tools, and then click Internet Options.\n" -"

\n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Sites
    4. \n" -"
  4. Click Advanced
    5. \n" -"
  5. Add your domain to the list
    6. \n" -"
\n" -"
    \n" -"
  1. Click the Security tab
    2. \n" -"
  2. Click Local intranet
    3. \n" -"
  3. Click Custom Level
    4. \n" -"
  4. Select Automatic logon only in Intranet zone
    5. \n" -"
\n" -"\n" -"
    \n" -"
  1. Visit a kerberized web site using IE (You must use the fully-qualified " -"Domain Name in the URL)
    2. \n" -"
  2. You are all set.
    3. \n" -"
\n" -"
\n" -"\n" -msgstr "" - -msgid "Working" -msgstr "工作中" - -msgid "Audit" -msgstr "审计" - -msgid "Authentication" -msgstr "身份验证" - -msgid "Automount" -msgstr "自动挂载" - -msgid "DNS" -msgstr "DNS" - -#, fuzzy -msgid "Host-Based Access Control" -msgstr "基于主机访问控制命令" - -msgid "Identity" -msgstr "身份" - -msgid "Network Services" -msgstr "网络服务" - -msgid "Policy" -msgstr "策略" - -#, fuzzy -msgid "Role-Based Access Control" -msgstr "基于主机访问控制命令" - -msgid "Subordinate IDs" -msgstr "" - -#, fuzzy -msgid "Sudo" -msgstr "Sudo规则" - -msgid "Topology" -msgstr "拓扑" - -msgid "True" -msgstr "" - -msgid "" -"

Unable to verify your Kerberos credentials

\n" -"

\n" -" Please make sure that you have valid Kerberos tickets " -"(obtainable via kinit), and that you have configured your " -"browser correctly.\n" -"

\n" -"\n" -"

Browser configuration

\n" -"\n" -"
\n" -"

\n" -" If this is your first time, please configure your browser.\n" -"

\n" -"
\n" -msgstr "" - -msgid "API Browser" -msgstr "API概述" - -msgid "First" -msgstr "第一" - -msgid "Last" -msgstr "最后" - -msgid "Next" -msgstr "下一个" - -msgid "Page" -msgstr "页" - -msgid "Prev" -msgstr "上一个" - -msgid "Undo" -msgstr "取消" - -msgid "Undo this change." -msgstr "取消这个更改。" - -msgid "Undo All" -msgstr "取消全部" - -msgid "Undo all changes in this field." -msgstr "取消在这个字段做的所有更改。" - -msgid "Text does not match field pattern" -msgstr "文本不匹配字段模式" - -msgid "Must be an UTC date/time value (e.g., \"2014-01-20 17:58:01Z\")" -msgstr "必须是一个UTC时间值（例如：\"2014-01-20 17:58:01Z\"）" - -msgid "Must be a decimal number" -msgstr "必须是一个小数" - -msgid "Format error" -msgstr "格式错误" - -msgid "Must be an integer" -msgstr "必须是一个整数" - -msgid "Not a valid IP address" -msgstr "不是一个有效的IP地址" - -msgid "Not a valid IPv4 address" -msgstr "不是一个有效的IPv4地址" - -msgid "Not a valid IPv6 address" -msgstr "不是一个有效的IPv6地址" - -#, python-brace-format -msgid "Maximum value is ${value}" -msgstr "最大值是${value}" - -#, python-brace-format -msgid "Minimum value is ${value}" -msgstr "最小值是${value}" - -msgid "Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24)" -msgstr "不是一个有效的网络地址（例如：2001:db8::/64, 192.0.2.0/24）" - -msgid "Parse error" -msgstr "解析错误" - -#, fuzzy -msgid "Must be a positive number" -msgstr "必须是一个小数" - -#, python-brace-format -msgid "'${port}' is not a valid port" -msgstr "'${port}'不是一个有效的端口" - -msgid "Required field" -msgstr "必需字段" - -msgid "Unsupported value" -msgstr "不支持的值" - -msgid "kerberos ticket policy settings" -msgstr "kerberos票据策略设置" - -#, fuzzy -msgid "OTP max life" -msgstr "最长存活期" - -#, fuzzy -msgid "OTP token maximum ticket life (seconds)" -msgstr "票据最长存活期（秒）" - -msgid "OTP max renew" -msgstr "" - -#, fuzzy -msgid "OTP token ticket maximum renewable age (seconds)" -msgstr "TOTP认证时间差异（秒）" - -#, fuzzy -msgid "RADIUS max life" -msgstr "最长存活期" - -#, fuzzy -msgid "RADIUS maximum ticket life (seconds)" -msgstr "票据最长存活期（秒）" - -#, fuzzy -msgid "RADIUS max renew" -msgstr "RADIUS代理服务器名称" - -msgid "RADIUS ticket maximum renewable age (seconds)" -msgstr "" - -#, fuzzy -msgid "PKINIT max life" -msgstr "最长存活期" - -#, fuzzy -msgid "PKINIT maximum ticket life (seconds)" -msgstr "票据最长存活期（秒）" - -msgid "PKINIT max renew" -msgstr "" - -msgid "PKINIT ticket maximum renewable age (seconds)" -msgstr "" - -msgid "Hardened max life" -msgstr "" - -#, fuzzy -msgid "Hardened ticket maximum ticket life (seconds)" -msgstr "票据最长存活期（秒）" - -msgid "Hardened max renew" -msgstr "" - -msgid "Hardened ticket maximum renewable age (seconds)" -msgstr "" - -#, fuzzy -msgid "IdP max life" -msgstr "最长存活期" - -#, fuzzy -msgid "External Identity Provider ticket maximum ticket life (seconds)" -msgstr "票据最长存活期（秒）" - -#, fuzzy -msgid "IdP max renew" -msgstr "RADIUS代理服务器名称" - -#, fuzzy -msgid "External Identity Provider ticket maximum renewable age (seconds)" -msgstr "TOTP认证时间差异（秒）" +msgid "Zone name (FQDN)" +msgstr "区域名（FQDN）" #, python-format -msgid "Ticket policy for %s could not be read" -msgstr "票据策略%s不可读" +msgid "Zone record '%s' cannot be deleted" +msgstr "区域记录'%s'不能被删除" -msgid "Default ticket policy could not be read" -msgstr "默认票据策略不可读" - -msgid "" -"\n" -"Migration to IPA\n" -"\n" -"Migrate users and groups from an LDAP server to IPA.\n" -"\n" -"This performs an LDAP query against the remote server searching for\n" -"users and groups in a container. In order to migrate passwords you need\n" -"to bind as a user that can read the userPassword attribute on the remote\n" -"server. This is generally restricted to high-level admins such as\n" -"cn=Directory Manager in 389-ds (this is the default bind user).\n" -"\n" -"The default user container is ou=People.\n" -"\n" -"The default group container is ou=Groups.\n" -"\n" -"Users and groups that already exist on the IPA server are skipped.\n" -"\n" -"Two LDAP schemas define how group members are stored: RFC2307 and\n" -"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n" -"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n" -"\n" -"The schema compat feature allows IPA to reformat data for systems that\n" -"do not support RFC2307bis. It is recommended that this feature is disabled\n" -"during migration to reduce system overhead. It can be re-enabled after\n" -"migration. To migrate with it enabled use the \"--with-compat\" option.\n" -"\n" -"Migrated users do not have Kerberos credentials, they have only their\n" -"LDAP password. To complete the migration process, users need to go\n" -"to http://ipa.example.com/ipa/migration and authenticate using their\n" -"LDAP password in order to generate their Kerberos credentials.\n" -"\n" -"Migration is disabled by default. Use the command ipa config-mod to\n" -"enable it:\n" -"\n" -" ipa config-mod --enable-migration=TRUE\n" -"\n" -"If a base DN is not provided with --basedn then IPA will use either\n" -"the value of defaultNamingContext if it is set or the first value\n" -"in namingContexts set in the root of the remote LDAP server.\n" -"\n" -"Users are added as members to the default user group. This can be a\n" -"time-intensive task so during migration this is done in a batch\n" -"mode for every 100 users. As a result there will be a window in which\n" -"users will be added to IPA but will not be members of the default\n" -"user group.\n" -"\n" -"EXAMPLES:\n" -"\n" -" The simplest migration, accepting all defaults:\n" -" ipa migrate-ds ldap://ds.example.com:389\n" -"\n" -" Specify the user and group container. This can be used to migrate user\n" -" and group data from an IPA v1 server:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Since IPA v2 server already contain predefined groups that may collide " -"with\n" -" groups in migrated (IPA v1) server (for example admins, ipausers), users\n" -" having colliding group as their primary group may happen to belong to\n" -" an unknown group on new IPA v2 server.\n" -" Use --group-overwrite-gid option to overwrite GID of already existing " -"groups\n" -" to prevent this issue:\n" -" ipa migrate-ds --group-overwrite-gid \\\n" -" --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" ldap://ds.example.com:389\n" -"\n" -" Migrated users or groups may have object class and accompanied attributes\n" -" unknown to the IPA v2 server. These object classes and attributes may be\n" -" left out of the migration process:\n" -" ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n" -" --group-container='cn=groups,cn=accounts' \\\n" -" --user-ignore-objectclass=radiusprofile \\\n" -" --user-ignore-attribute=radiusgroupname \\\n" -" ldap://ds.example.com:389\n" -"\n" -"LOGGING\n" -"\n" -"Migration will log warnings and errors to the Apache error log. This\n" -"file should be evaluated post-migration to correct or investigate any\n" -"issues that were discovered.\n" -"\n" -"For every 100 users migrated an info-level message will be displayed to\n" -"give the current progress and duration to make it possible to track\n" -"the progress of migration.\n" -"\n" -"If the log level is debug, either by setting debug = True in\n" -"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be " -"printed\n" -"for each user added plus a summary when the default user group is\n" -"updated.\n" -msgstr "" - -#, python-format -msgid "" -"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually." -msgstr "Kerberos主体%s已存在。使用'ipa user-mod'来手动设置它。" - -#, python-format -msgid "" -"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-" -"mod' to set it manually." -msgstr "不能确定Kerberos主体%s是否存在。使用'ipa user-mod'来手动设置它。" - -msgid "" -"Failed to add user to the default group. Use 'ipa group-add-member' to add " -"manually." -msgstr "添加用户到默认组失败。使用'ipa group-add-member'来手动添加。" - -msgid "Migration of LDAP search reference is not supported." -msgstr "LDAP搜索帮助移植不支持。" - -msgid "Malformed DN" -msgstr "" - -#, python-format -msgid "%(user)s is not a POSIX user" -msgstr "%(user)s不是一个POSIX用户" - -msgid "" -". Check GID of the existing group. Use --group-overwrite-gid option to " -"overwrite the GID" -msgstr "检查存在组的GID。使用--group-overwrite-gid选项来覆盖GID" - -msgid "Invalid LDAP URI." -msgstr "无效的LDAP URI。" - -#, python-format -msgid "%s to exclude from migration" -msgstr "不移植%s" - -msgid "" -"search results for objects to be migrated\n" -"have been truncated by the server;\n" -"migration process might be incomplete\n" -msgstr "查询待移植对象的结果被服务器拦截；移植过程可能没有完成\n" - -#, python-format -msgid "" -"%(container)s LDAP search did not return any result (search base: " -"%(search_base)s, objectclass: %(objectclass)s)" -msgstr "" -"%(container)s LDAP搜索没有返回任何结果（搜索基：%(search_base)s，对象类： " -"%(objectclass)s）" - -msgid "Default group for new users not found" -msgstr "新用户的默认组没有找到" - -msgid "" -"\n" -"Password policy\n" -"\n" -"A password policy sets limitations on IPA passwords, including maximum\n" -"lifetime, minimum lifetime, the number of passwords to save in\n" -"history, the number of character classes required (for stronger passwords)\n" -"and the minimum password length.\n" -"\n" -"By default there is a single, global policy for all users. You can also\n" -"create a password policy to apply to a group. Each user is only subject\n" -"to one password policy, either the group policy or the global policy. A\n" -"group policy stands alone; it is not a super-set of the global policy plus\n" -"custom settings.\n" -"\n" -"Each group password policy requires a unique priority setting. If a user\n" -"is in multiple groups that have password policies, this priority determines\n" -"which password policy is applied. A lower value indicates a higher priority\n" -"policy.\n" -"\n" -"Group password policies are automatically removed when the groups they\n" -"are associated with are removed.\n" -"\n" -"Grace period defines the number of LDAP logins allowed after expiration.\n" -"-1 means do not enforce expiration to match previous behavior. 0 allows\n" -"no additional logins after expiration.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Modify the global policy:\n" -" ipa pwpolicy-mod --minlength=10\n" -"\n" -" Add a new group password policy:\n" -" ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --" -"minlength=8 --priority=10 localadmins\n" -"\n" -" Display the global password policy:\n" -" ipa pwpolicy-show\n" -"\n" -" Display a group password policy:\n" -" ipa pwpolicy-show localadmins\n" -"\n" -" Display the policy that would be applied to a given user:\n" -" ipa pwpolicy-show --user=tuser1\n" -"\n" -" Modify a group password policy:\n" -" ipa pwpolicy-mod --minclasses=2 localadmins\n" -msgstr "" - -msgid "Class of Service object used for linking policies with groups" -msgstr "" - -#, python-format -msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" -msgstr "优先权必须是一个唯一值（(%(prio)d已被%(gname)s使用）" - -msgid "Add Class of Service entry" -msgstr "" - -#, fuzzy -msgid "Delete Class of Service entry" -msgstr "删除一个IPA服务。" - -#, fuzzy -msgid "Modify Class of Service entry" -msgstr "修改一个HBAC服务组。" - -msgid "Display Class of Service entry" -msgstr "" - -#, fuzzy -msgid "Search for Class of Service entry" -msgstr "查找一个HBAC服务组。" - -msgid "password policy" -msgstr "密码策略" - -msgid "password policies" -msgstr "密码策略" - -msgid "Password Policies" -msgstr "密码策略" - -msgid "Max repeat" -msgstr "" - -#, fuzzy -msgid "Maximum number of same consecutive characters" -msgstr "返回的最大条目数" - -msgid "Max sequence" -msgstr "" - -msgid "The max. length of monotonic character sequences (abcd)" -msgstr "" - -msgid "Dictionary check" -msgstr "" - -msgid "Check if the password is a dictionary word" -msgstr "" - -#, fuzzy -msgid "User check" -msgstr "用户名" - -msgid "Check if the password contains the username" -msgstr "" - -msgid "Grace login limit" -msgstr "" - -msgid "Number of LDAP authentications allowed after expiration" -msgstr "" - -msgid "" -"Minimum length must be >= 6 if maxrepeat, maxsequence, dictcheck or " -"usercheck are defined" -msgstr "" - -#, fuzzy -msgid "Maximum password life must be equal to or greater than the minimum." -msgstr "最小密码生存周期必须比最小值大。" - -msgid "cannot delete global password policy" -msgstr "不能删除全局密码策略" - -msgid "priority cannot be set on global policy" -msgstr "优先权布不能在本地策略上设置" - -msgid "HBAC rule and local members cannot both be set" -msgstr "HBAC规则和本地成员不能被同时设置" - -msgid "Invalid SELinux user name, must match {}" -msgstr "" - -#, python-brace-format -msgid "Invalid MLS value, must match {mls}, where max level {mls_max}" -msgstr "" - -#, python-brace-format -msgid "Invalid MCS value, must match {mcs}, where max category {mcs_max}" -msgstr "" - -msgid "SELinux user map list not found in configuration" -msgstr "SELinux用户映射列表在配置中没有找到" - -#, python-format -msgid "SELinux user %(user)s not found in ordering list (in config)" -msgstr "SELinux用户%(user)s在顺序列表中（配置）没有找到" - -msgid "SELinux User Map rule" -msgstr "SELinux用户映射规则" - -msgid "SELinux User Map rules" -msgstr "SELinux用户映射规则" - -msgid "SELinux User Maps" -msgstr "SELinux用户映射规则" - -msgid "SELinux User Map" -msgstr "SELinux用户映射规则" - -#, python-format -msgid "HBAC rule %(rule)s not found" -msgstr "HBAC规则%(rule)s没有找到" - -#, python-format -msgid "Added SELinux User Map \"%(value)s\"" -msgstr "已添加SELinux用户映射\"%(value)s\"" - -#, python-format -msgid "Deleted SELinux User Map \"%(value)s\"" -msgstr "已删除SELinux用户映射\"%(value)s\"" - -#, python-format -msgid "Modified SELinux User Map \"%(value)s\"" -msgstr "已修改SELinux用户映射\"%(value)s\"" - -#, python-format -msgid "%(count)d SELinux User Map matched" -msgid_plural "%(count)d SELinux User Maps matched" -msgstr[0] "已匹配%(count)d个SELinux用户映射" - -#, python-format -msgid "Enabled SELinux User Map \"%(value)s\"" -msgstr "已启用SELinux用户映射\"%(value)s\"" - -#, python-format -msgid "Disabled SELinux User Map \"%(value)s\"" -msgstr "已禁用SELinux用户映射\"%(value)s\"" - -msgid "" -"\n" -"Services\n" -"\n" -"A IPA service represents a service that runs on a host. The IPA service\n" -"record can store a Kerberos principal, an SSL certificate, or both.\n" -"\n" -"An IPA service can be managed directly from a machine, provided that\n" -"machine has been given the correct permission. This is true even for\n" -"machines other than the one the service is associated with. For example,\n" -"requesting an SSL certificate using the host service principal credentials\n" -"of the host. To manage a service using host credentials you need to\n" -"kinit as the host:\n" -"\n" -" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n" -"\n" -"Adding an IPA service allows the associated service to request an SSL\n" -"certificate or keytab, but this is performed as a separate step; they\n" -"are not produced as a result of adding the service.\n" -"\n" -"Only the public aspect of a certificate is stored in a service record;\n" -"the private key is not stored.\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new IPA service:\n" -" ipa service-add HTTP/web.example.com\n" -"\n" -" Allow a host to manage an IPA service certificate:\n" -" ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n" -" ipa role-add-member --hosts=web.example.com certadmin\n" -"\n" -" Override a default list of supported PAC types for the service:\n" -" ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n" -"\n" -" A typical use case where overriding the PAC type is needed is NFS.\n" -" Currently the related code in the Linux kernel can only handle Kerberos\n" -" tickets up to a maximal size. Since the PAC data can become quite large " -"it\n" -" is recommended to set --pac-type=NONE for NFS services.\n" -"\n" -" Delete an IPA service:\n" -" ipa service-del HTTP/web.example.com\n" -"\n" -" Find all IPA services associated with a host:\n" -" ipa service-find web.example.com\n" -"\n" -" Find all HTTP services:\n" -" ipa service-find HTTP\n" -"\n" -" Disable the service Kerberos key and SSL certificate:\n" -" ipa service-disable HTTP/web.example.com\n" -"\n" -" Request a certificate for an IPA service:\n" -" ipa cert-request --principal=HTTP/web.example.com example.csr\n" -msgstr "" - -msgid "" -"\n" -" Allow user to create a keytab:\n" -" ipa service-allow-create-keytab HTTP/web.example.com --users=tuser1\n" -msgstr "" - -msgid "" -"\n" -" Generate and retrieve a keytab for an IPA service:\n" -" ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/" -"httpd.keytab\n" -"\n" -msgstr "" - -msgid "Trusted to authenticate as user" -msgstr "信任用户认证" - -msgid "The service is allowed to authenticate on behalf of a client" -msgstr "服务可以代表一个客户端进行认证" - -#, fuzzy, python-format -msgid "authentication indicators not allowed in service \"%s\"" -msgstr "认证指标" - -#, fuzzy -msgid "Malformed principal" -msgstr "有缺陷的主体：'%(value)s'" - -msgid "{} is required by the IPA master" -msgstr "" - -msgid "service" -msgstr "服务" - -msgid "services" -msgstr "服务" - -msgid "Service principal alias" -msgstr "服务主体别名" - -msgid "Base-64 encoded service certificate" -msgstr "Base-64编码的服务证书" - -msgid "" -"Defines an allow list for Authentication Indicators. Use 'otp' to allow OTP-" -"based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA " -"authentications. Use 'pkinit' to allow PKINIT-based 2FA authentications. Use " -"'hardened' to allow brute-force hardened password authentication by SPAKE or " -"FAST. With no indicator specified, all authentication mechanisms are allowed." -msgstr "" - -msgid "NONE value cannot be combined with other PAC types" -msgstr "NONE值不能与其他PAC类型相结合" - -msgid "Add a new IPA service." -msgstr "添加一个新的IPA服务。" - -#, python-format -msgid "Added service \"%(value)s\"" -msgstr "已添加服务\"%(value)s\"" - -#, fuzzy -msgid "force principal name even if host not in DNS" -msgstr "即使主体名在DNS中不存在，也强制添加它" - -#, fuzzy -msgid "Skip host check" -msgstr "忽略DNS检查" - -#, fuzzy -msgid "" -"force service to be created even when host object does not exist to manage it" -msgstr "强制服务器删除即使它不存在" - -#, python-format -msgid "The host '%s' does not exist to add a service to." -msgstr "" - -#, fuzzy -msgid "Add a new SMB service." -msgstr "添加一个新的HBAC服务。" - -#, fuzzy -msgid "SMB service NetBIOS name" -msgstr "NetBIOS名称" - -#, python-format -msgid "Deleted service \"%(value)s\"" -msgstr "已删除服务\"%(value)s\"" - -#, python-format -msgid "Modified service \"%(value)s\"" -msgstr "已修改服务\"%(value)s\"" - -#, python-format -msgid "%(count)d service matched" -msgid_plural "%(count)d services matched" -msgstr[0] "已匹配%(count)d个服务" - -#, python-format -msgid "Disabled service \"%(value)s\"" -msgstr "已禁用服务\"%(value)s\"" - -#, python-format -msgid "Added certificates to service principal \"%(value)s\"" -msgstr "已添加证书到服务主体\"%(value)s\"" - -#, python-format -msgid "Removed certificates from service principal \"%(value)s\"" -msgstr "已从服务主体\"%(value)s\"中删除证书" - -msgid "Add new principal alias to a service" -msgstr "向一个服务添加新的主体别名" - -#, python-format -msgid "Added new aliases to the service principal \"%(value)s\"" -msgstr "已添加新的别名到服务主体\"%(value)s\"" - -msgid "Remove principal alias from a service" -msgstr "从一个服务中删除主体别名" - -#, python-format -msgid "Removed aliases to the service principal \"%(value)s\"" -msgstr "已从服务主体\"%(value)s\"中删除别名" - -msgid "" -"\n" -"Stageusers\n" -"\n" -"Manage stage user entries.\n" -"\n" -"Stage user entries are directly under the container: \"cn=stage users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries (even if the entries\n" -"contain credentials). Those entries are only candidate to become Active " -"entries.\n" -"\n" -"Active user entries are Posix users directly under the container: " -"\"cn=accounts, SUFFIX\".\n" -"Users can authenticate with Active entries, at the condition they have\n" -"credentials.\n" -"\n" -"Deleted user entries are Posix users directly under the container: " -"\"cn=deleted users,\n" -"cn=accounts, cn=provisioning, SUFFIX\".\n" -"Users can not authenticate with those entries, even if the entries contain " -"credentials.\n" -"\n" -"The stage user container contains entries:\n" -" - created by 'stageuser-add' commands that are Posix users,\n" -" - created by external provisioning system.\n" -"\n" -"A valid stage user entry MUST have:\n" -" - entry RDN is 'uid',\n" -" - ipaUniqueID is 'autogenerate'.\n" -"\n" -"IPA supports a wide range of username formats, but you need to be aware of " -"any\n" -"restrictions that may apply to your particular environment. For example,\n" -"usernames that start with a digit or usernames that exceed a certain length\n" -"may cause problems for some UNIX systems.\n" -"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n" -"\n" -"\n" -"EXAMPLES:\n" -"\n" -" Add a new stageuser:\n" -" ipa stageuser-add --first=Tim --last=User --password tuser1\n" -"\n" -" Add a stageuser from the deleted users container:\n" -" ipa stageuser-add --first=Tim --last=User --from-delete tuser1\n" -"\n" -msgstr "" - -msgid "Stage Users" -msgstr "计划用户" - -msgid "Stage User" -msgstr "计划用户" - -msgid "stage user" -msgstr "计划用户" - -msgid "stage users" -msgstr "计划用户" - -#, python-format -msgid "Added stage user \"%(value)s\"" -msgstr "已添加计划用户\"%(value)s\"" - -msgid "givenname is required" -msgstr "需要名字" - -msgid "sn is required" -msgstr "需要sn" - -#, python-format -msgid "Deleted stage user \"%(value)s\"" -msgstr "已删除计划用户\"%(value)s\"" - -#, python-format -msgid "Modified stage user \"%(value)s\"" -msgstr "已修改计划用户\"%(value)s\"" - -#, python-format -msgid "%(count)d user matched" -msgid_plural "%(count)d users matched" -msgstr[0] "已匹配%(count)d个用户" - -#, python-format -msgid "Activate a stage user \"%(value)s\"" -msgstr "激活一个计划用户\"%(value)s\"" - -msgid "Entry RDN is not 'uid'" -msgstr "条目RDN不是'uid'" - -#, python-format -msgid "Entry has no '%(attribute)s'" -msgstr "条目没有'%(attribute)s'" +msgid "Zone refresh interval" +msgstr "区域刷新间隔" #, python-format msgid "active user with name \"%(user)s\" already exists" msgstr "活跃用户名\"%(user)s\"已存在" -#, python-format -msgid "Stage user %s activated" -msgstr "计划用户%s已激活" - -#, fuzzy -msgid "Add one or more certificates to the stageuser entry" -msgstr "向用户条目中添加一个或多个证书" - -#, fuzzy, python-format -msgid "Added certificates to stageuser \"%(value)s\"" -msgstr "已为用户\"%(value)s\"添加证书" - -#, fuzzy -msgid "Remove one or more certificates to the stageuser entry" -msgstr "向用户条目中移除一个或多个证书" - -#, fuzzy, python-format -msgid "Removed certificates from stageuser \"%(value)s\"" -msgstr "已为用户\"%(value)s\"删除证书" - -#, fuzzy -msgid "Add new principal alias to the stageuser entry" -msgstr "为用户条目添加新的主体别名" - -#, fuzzy, python-format -msgid "Added new aliases to stageuser \"%(value)s\"" -msgstr "已为用户\"%(value)s\"添加新别名" - -#, fuzzy -msgid "Remove principal alias from the stageuser entry" -msgstr "从用户条目中删除主体别名" - -#, fuzzy, python-format -msgid "Removed aliases from stageuser \"%(value)s\"" -msgstr "已从用户\"%(value)s\"中删除别名" - -#, fuzzy -msgid "Add one or more certificate mappings to the stage user entry." -msgstr "向用户条目中添加一个或多个证书" - -#, fuzzy -msgid "Remove one or more certificate mappings from the stage user entry." -msgstr "向用户条目中移除一个或多个证书" - -msgid "ID View" -msgstr "ID视图" - -msgid "system ID View" -msgstr "系统ID视图" - -msgid "ID Views" -msgstr "ID视图" - -msgid "User object overrides" -msgstr "用户对象覆盖" - -msgid "Group object overrides" -msgstr "组对象覆盖" - -msgid "Hosts the view applies to" -msgstr "适用于主机的视图" +msgid "algorithm value: allowed interval 0-255" +msgstr "算法值：允许间隔0-255" #, python-format -msgid "Added ID View \"%(value)s\"" -msgstr "已添加ID视图\"%(value)s\"" +msgid "all masters must have %(role)s role enabled" +msgstr "所有的主服务器必须已启用角色%(role)s" + +msgid "an internal error has occurred" +msgstr "发生了内部错误" #, python-format -msgid "Deleted ID View \"%(value)s\"" -msgstr "已删除ID视图\"%(value)s\"" - -#, python-format -msgid "Modified an ID View \"%(value)s\"" -msgstr "已修改一个ID视图\"%(value)s\"" - -#, python-format -msgid "%(count)d ID View matched" -msgid_plural "%(count)d ID Views matched" -msgstr[0] "已匹配%(count)d个ID视图" - -msgid "Default Trust View cannot be applied on hosts" -msgstr "默认信任视图不能应用于主机上" - -msgid "not found" -msgstr "没有找到" - -#, fuzzy -msgid "ID View cannot be applied to IPA master" -msgstr "默认信任视图不能应用于主机上" - -msgid "ID View already applied" -msgstr "ID视图已应用" - -msgid "value" -msgstr "值" - -#, python-format -msgid "ID View applied to %i host." -msgstr "ID视图应用于%i主机。" - -#, python-format -msgid "ID View applied to %i hosts." -msgstr "ID视图应用于%i主机。" - -#, python-format -msgid "ID View cleared from %i host." -msgstr "从%i主机中清除ID视图。" - -#, python-format -msgid "ID View cleared from %i hosts." -msgstr "从%i主机中清除ID视图。" - -msgid "" -"You are trying to reference a magic private group which is not allowed to be " -"overridden. Try overriding the GID attribute of the corresponding user " -"instead." -msgstr "" -"你正尝试引用一个不允许覆盖的神奇私有组。而不是尝试覆盖对应用户的GID属性。" - -msgid "IPA object" -msgstr "IPA对象" - -msgid "" -"system IPA objects (e.g. system groups, user private groups) cannot be " -"overridden" -msgstr "" - -#, python-format -msgid "Anchor '%(anchor)s' could not be resolved." -msgstr "锚'%(anchor)s'不能被解析。" - -msgid "Default Trust View cannot contain IPA users" -msgstr "默认信任视图不能包含IPA用户" - -msgid "Add a new ID override." -msgstr "添加一个新的ID覆盖。" - -#, python-format -msgid "Added ID override \"%(value)s\"" -msgstr "已添加ID覆盖\"%(value)s\"" - -msgid "Delete an ID override." -msgstr "删除一个ID覆盖。" - -#, python-format -msgid "Deleted ID override \"%(value)s\"" -msgstr "已删除ID覆盖\"%(value)s\"" - -msgid "Modify an ID override." -msgstr "修改一个ID覆盖。" - -#, python-format -msgid "Modified an ID override \"%(value)s\"" -msgstr "已修改一个ID覆盖\"%(value)s\"" - -msgid "ID override" -msgstr "ID覆盖" - -msgid "ID overrides cannot be renamed" -msgstr "ID覆盖不能被重命名" - -msgid "Search for an ID override." -msgstr "查找一个ID覆盖。" - -#, python-format -msgid "%(count)d ID override matched" -msgid_plural "%(count)d ID overrides matched" -msgstr[0] "已匹配%(count)d个ID覆盖" - -msgid "Display information about an ID override." -msgstr "显示一个ID覆盖信息。" - -msgid "User ID override" -msgstr "用户ID覆盖" - -msgid "User ID overrides" -msgstr "用户ID覆盖" - -msgid "Group ID override" -msgstr "组ID覆盖" - -msgid "Group ID overrides" -msgstr "组ID覆盖" - -msgid "Add one or more certificates to the idoverrideuser entry" -msgstr "向id覆盖用户条目中添加一个或多个证书" - -#, python-format -msgid "Added certificates to idoverrideuser \"%(value)s\"" -msgstr "已添加证书到id覆盖用户\"%(value)s\"" - -msgid "Remove one or more certificates to the idoverrideuser entry" -msgstr "从id覆盖用户条目中移除一个或多个证书" - -#, python-format -msgid "Removed certificates from idoverrideuser \"%(value)s\"" -msgstr "已从id覆盖用户\"%(value)s\"中移除证书" - -#, python-format -msgid "Added User ID override \"%(value)s\"" -msgstr "已添加用户ID覆盖\"%(value)s\"" - -#, python-format -msgid "Deleted User ID override \"%(value)s\"" -msgstr "已删除用户ID覆盖\"%(value)s\"" - -#, python-format -msgid "Modified an User ID override \"%(value)s\"" -msgstr "已修改一个用户ID覆盖\"%(value)s\"" - -#, python-format -msgid "%(count)d User ID override matched" -msgid_plural "%(count)d User ID overrides matched" -msgstr[0] "已匹配%(count)d个用户ID覆盖" - -#, python-format -msgid "Added Group ID override \"%(value)s\"" -msgstr "已添加组ID覆盖\"%(value)s\"" - -#, python-format -msgid "Deleted Group ID override \"%(value)s\"" -msgstr "已删除组ID覆盖\"%(value)s\"" - -#, python-format -msgid "Modified an Group ID override \"%(value)s\"" -msgstr "已修改一个组ID覆盖\"%(value)s\"" - -#, python-format -msgid "%(count)d Group ID override matched" -msgid_plural "%(count)d Group ID overrides matched" -msgstr[0] "已匹配%(count)d个组ID覆盖" - -msgid "Could not read UPG Definition originfilter. Check your permissions." -msgstr "不能读UPG原过滤器定义。检查你的权限。" - -msgid "" -"\n" -"Manage Certificate Authorities\n" -msgstr "" -"\n" -"管理证书颁发机构\n" - -msgid "" -"\n" -"Subordinate Certificate Authorities (Sub-CAs) can be added for scoped " -"issuance\n" -"of X.509 certificates.\n" -msgstr "" -"\n" -"从属证书颁发机构（Sub-CAs）可以当作是X.509证书的发行范围。\n" - -msgid "" -"\n" -"CAs are enabled on creation, but their use is subject to CA ACLs unless the\n" -"operator has permission to bypass CA ACLs.\n" -msgstr "" - -msgid "" -"\n" -"All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA\n" -"prevents it from issuing certificates but does not affect the validity of " -"its\n" -"certificate.\n" -msgstr "" -"\n" -"所有的CAs除了'IPA' CA都可以被禁用或重新启用。禁用一个CA会阻止它发布证书，但不" -"会影响它的证书的有效性。\n" - -msgid "" -"\n" -"CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its " -"signing\n" -"certificate to be revoked and its private key deleted.\n" -msgstr "" -"\n" -"CAs (除了'IPA' CA)都可以被删除。删除一个CA会撤销它的签名证书并删除它的私" -"钥。\n" - -msgid "" -"\n" -" Create new CA, subordinate to the IPA CA (requires permission\n" -" \"System: Add CA\"):\n" -"\n" -" ipa ca-add puppet --desc \"Puppet\" \\\n" -" --subject \"CN=Puppet CA,O=EXAMPLE.COM\"\n" -msgstr "" - -msgid "" -"\n" -" Disable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-disable puppet\n" -msgstr "" - -msgid "" -"\n" -" Re-enable a CA (requires permission \"System: Modify CA\"):\n" -"\n" -" ipa ca-enable puppet\n" -msgstr "" - -msgid "" -"\n" -" Delete a CA (requires permission \"System: Delete CA\"; also requires\n" -" CA to be disabled first):\n" -"\n" -" ipa ca-del puppet\n" -msgstr "" - -msgid "Certificate Authority" -msgstr "证书颁发机构" - -msgid "Certificate Authorities" -msgstr "证书颁发机构" - -msgid "Name for referencing the CA" -msgstr "" - -msgid "Description of the purpose of the CA" -msgstr "CA描述的目的" - -msgid "Authority ID" -msgstr "授权ID" - -msgid "Dogtag Authority ID" -msgstr "Dogtag授权ID" - -msgid "Subject DN" -msgstr "证书持有者名字" - -msgid "Subject Distinguished Name" -msgstr "主题的专有名称" - -msgid "Issuer DN" -msgstr "证书颁发机构名字" - -msgid "Issuer Distinguished Name" -msgstr "发行人专有名称" - -msgid "Base-64 encoded certificate." -msgstr "Base-64编码的证书。" - -#, fuzzy -msgid "Certificate chain" -msgstr "证书" - -#, fuzzy -msgid "X.509 certificate chain" -msgstr "CA证书" - -#, fuzzy -#| msgid "Version" -msgid "RSN Version" -msgstr "版本" - -#, fuzzy -#| msgid "Serial Number (hex)" -msgid "Random Serial Number Version" -msgstr "序列号（十六进制）" - -msgid "Search for CAs." -msgstr "查找CAs。" - -#, python-format -msgid "%(count)d CA matched" -msgid_plural "%(count)d CAs matched" -msgstr[0] "已匹配%(count)d个CA" - -msgid "Include certificate chain in output" -msgstr "" - -msgid "Display the properties of a CA." -msgstr "显示一个CA属性。" - -msgid "Create a CA." -msgstr "创建一个CA。" - -#, python-format -msgid "Created CA \"%(value)s\"" -msgstr "已创建CA\"%(value)s\"" - -#, python-format -msgid "Insufficient 'add' privilege for entry '%s'." -msgstr "对条目'%s'没有'add'权限。" - -#, python-format -msgid "Unrecognized attributes: %(attrs)s" -msgstr "" - -#, python-format -msgid "Subject DN is already used by CA '%s'" -msgstr "主题DN已被CA'%s'使用" - -msgid "Delete a CA (must be disabled first)." -msgstr "" - -#, python-format -msgid "Deleted CA \"%(value)s\"" -msgstr "已删除CA\"%(value)s\"" - -#, fuzzy -msgid "Insufficient privilege to delete a CA." -msgstr "对条目'%s'没有'add'权限。" - -msgid "IPA CA cannot be deleted" -msgstr "IPA CA不能被删除" - -#, fuzzy -msgid "Must be disabled first" -msgstr "必须是一个小数" - -msgid "Modify CA configuration." -msgstr "修改CA配置。" - -#, python-format -msgid "Modified CA \"%(value)s\"" -msgstr "已修改CA\"%(value)s\"" - -#, fuzzy -msgid "Insufficient privilege to modify a CA." -msgstr "对条目'%s'没有'add'权限。" - -msgid "Disable a CA." -msgstr "禁用一个CA。" - -#, python-format -msgid "Disabled CA \"%(value)s\"" -msgstr "已禁用CA\"%(value)s\"" - -msgid "IPA CA cannot be disabled" -msgstr "IPA CA不能被禁用" - -msgid "Enable a CA." -msgstr "启用一个CA。" - -#, python-format -msgid "Enabled CA \"%(value)s\"" -msgstr "已启用CA\"%(value)s\"" - -msgid "" -"\n" -"IPA certificate operations\n" -msgstr "" -"\n" -"IPA证书操作\n" - -msgid "" -"\n" -"Implements a set of commands for managing server SSL certificates.\n" -msgstr "" -"\n" -"实现了一组命令来管理服务器的SSL证书。\n" - -msgid "" -"\n" -"Certificate requests exist in the form of a Certificate Signing Request " -"(CSR)\n" -"in PEM format.\n" -msgstr "" -"\n" -"证书请求以PEM格式的证书签名请求(CSR)的形式存在。\n" - -msgid "" -"\n" -"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n" -"subject to values configured in the server.\n" -msgstr "" -"\n" -"dogtag CA只是使用CSR的CN值，并强制主题的其他值在服务器中配置。\n" - -msgid "" -"\n" -"A certificate is stored with a service principal and a service principal\n" -"needs a host.\n" -msgstr "" -"\n" -"一个证书是以一个服务主体存储，并一个服务主体需要一个主机。\n" - -msgid "" -"\n" -"In order to request a certificate:\n" -msgstr "" -"\n" -"为了请求一个证书：\n" - -msgid "" -"\n" -"* The host must exist\n" -"* The service must exist (or you use the --add option to automatically add " -"it)\n" -msgstr "" -"\n" -"* 主机必须存在\n" -"* 服务必须存在（或者你使用--add选项来自动添加它）\n" - -msgid "" -"\n" -"SEARCHING:\n" -msgstr "" -"\n" -"查找：\n" - -msgid "" -"\n" -"Certificates may be searched on by certificate subject, serial number,\n" -"revocation reason, validity dates and the issued date.\n" -msgstr "" -"\n" -"证书可能通过证书主题，序列号，撤销原因，有效日期和发布日期来查询。\n" - -msgid "" -"\n" -"When searching on dates the _from date does a >= search and the _to date\n" -"does a <= search. When combined these are done as an AND.\n" -msgstr "" - -msgid "" -"\n" -"Dates are treated as GMT to match the dates in the certificates.\n" -msgstr "" -"\n" -"GMT格式的日期用来匹配证书里的日期。\n" - -msgid "" -"\n" -"The date format is YYYY-mm-dd.\n" -msgstr "" -"\n" -"日期格式是YYYY-mm-dd。\n" - -msgid "" -"\n" -" Request a new certificate and add the principal:\n" -" ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Retrieve an existing certificate:\n" -" ipa cert-show 1032\n" -msgstr "检索一个已存在的证书。" - -msgid "" -"\n" -" Revoke a certificate (see RFC 5280 for reason details):\n" -" ipa cert-revoke --revocation-reason=6 1032\n" -msgstr "" - -msgid "" -"\n" -" Remove a certificate from revocation hold status:\n" -" ipa cert-remove-hold 1032\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Check the status of a signing request:\n" -" ipa cert-status 10\n" -msgstr "检查证书签名请求的状态。" - -msgid "" -"\n" -" Search for certificates by hostname:\n" -" ipa cert-find --subject=ipaserver.example.com\n" -msgstr "" - -#, fuzzy -msgid "" -"\n" -" Search for revoked certificates by reason:\n" -" ipa cert-find --revocation-reason=5\n" -msgstr "撤销证书的原因（0-10）。输入\"ipa help cert\"来查看详细撤销原因。" - -msgid "" -"\n" -" Search for certificates based on issuance date\n" -" ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n" -msgstr "" - -msgid "" -"\n" -" Search for certificates owned by a specific user:\n" -" ipa cert-find --user=user\n" -msgstr "" - -msgid "" -"\n" -" Examine a certificate:\n" -" ipa cert-find --file=cert.pem --all\n" -msgstr "" - -msgid "" -"\n" -" Verify that a certificate is owned by a specific user:\n" -" ipa cert-find --file=cert.pem --user=user\n" -msgstr "" - -msgid "" -"\n" -"IPA currently immediately issues (or declines) all certificate requests so\n" -"the status of a request is not normally useful. This is for future use\n" -"or the case where a CA does not immediately issue a certificate.\n" -msgstr "" - -msgid "" -"\n" -"The following revocation reasons are supported:\n" -"\n" -msgstr "" -"\n" -"支持下面的撤销原因：\n" - -#, fuzzy -msgid " * 0 - unspecified\n" -msgstr "未指定的" - -#, fuzzy -msgid " * 1 - keyCompromise\n" -msgstr "密钥泄露" - -msgid " * 2 - cACompromise\n" -msgstr "" - -msgid " * 3 - affiliationChanged\n" -msgstr "" - -msgid " * 4 - superseded\n" -msgstr "" - -msgid " * 5 - cessationOfOperation\n" -msgstr "" - -#, fuzzy -msgid " * 6 - certificateHold\n" -msgstr "CA证书" - -msgid " * 8 - removeFromCRL\n" -msgstr "" - -#, fuzzy -msgid " * 9 - privilegeWithdrawn\n" -msgstr "特权撤销" - -msgid " * 10 - aACompromise\n" -msgstr "" - -msgid "" -"\n" -"Note that reason code 7 is not used. See RFC 5280 for more details:\n" -msgstr "" -"\n" -"注意没有使用原因码7。查看RFC 5280以获取更多详细信息：\n" - -msgid "" -"\n" -"http://www.ietf.org/rfc/rfc5280.txt\n" -"\n" -msgstr "" +msgid "an internal error has occurred on server at '%(server)s'" +msgstr "服务器 '%(server)s' 已经发生了一次内部错误" #, python-format msgid "" -"Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile " -"'%(profile_id)s' for certificate issuance." -msgstr "" -"主体'%(principal)s'不允许使用含配置文件'%(profile_id)s'的CA '%(ca)s'来发布证" -"书。" +"answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG " +"data)" +msgstr "查询答案'%(owner)s %(rtype)s'缺少DNSSEC签名（没有RRSIG数据）" -msgid "enabledService/configuredService not in ipaConfigString kdc entry" -msgstr "" +msgid "any of the configured servers" +msgstr "任何已配置的服务器" -#, fuzzy, python-format -msgid "Host '%(hostname)s' is not an active KDC" -msgstr "主机'%(host)s'没有找到" +#, python-format +msgid "api has no such namespace: '%(name)s'" +msgstr "api没有这样的命名空间：'%(name)s'" -msgid "Issuing CA" -msgstr "发行CA" +msgid "at least one of options: type, users, hosts must be specified" +msgstr "至少指定其中一个选项：类型，用户，主机" -msgid "Name of issuing CA" -msgstr "签发的CA名称" +msgid "" +"at least one of: type, filter, subtree, targetgroup, attrs or memberof are " +"required" +msgstr "至少需要其中一个：类型，过滤器，子树，目标组，属性或它的成员" -msgid "Subject email address" -msgstr "主题电子邮件地址" +msgid "" +"at least one value equal to the canonical principal name must be present" +msgstr "必须存在至少一个值等同规范主体名称" -msgid "Subject DNS name" -msgstr "主题DNS名" +#, python-format +msgid "attribute \"%(attribute)s\" not allowed" +msgstr "不支持属性\"%(attribute)s\"" -msgid "Subject X.400 address" -msgstr "主题X.400地址" +#, python-format +msgid "attribute \"%s\" not allowed" +msgstr "不允许属性\"%s\"" -msgid "Subject directory name" -msgstr "主题目录名" +msgid "attribute is not configurable" +msgstr "属性没有配置" -msgid "Subject EDI Party name" -msgstr "主题EDI参与方名称" +msgid "attrs and included attributes are mutually exclusive" +msgstr "属性和包含的属性是互斥的" -msgid "Subject URI" -msgstr "主题URI" +msgid "attrs and included/excluded attributes are mutually exclusive" +msgstr "属性和包含/排除属性是互斥的" -msgid "Subject IP Address" -msgstr "主题IP地址" - -msgid "Subject OID" -msgstr "主题OID" - -msgid "Subject UPN" -msgstr "主题UPN" - -msgid "Subject Kerberos principal name" -msgstr "主题Kerberos主体名" - -msgid "Subject Other Name" -msgstr "主题别名" - -msgid "Serial number (hex)" -msgstr "序列号（十六进制）" - -msgid "Request status" -msgstr "请求状态" +msgid "automatically add the principal if it doesn't exist" +msgstr "若主体不存在，则自动添加" msgid "" "automatically add the principal if it doesn't exist (service principals only)" msgstr "如果主体不存在则自动添加它（仅对服务主体）" +msgid "automount key" +msgstr "自动挂载键" + +msgid "automount keys" +msgstr "自动挂载键" + +msgid "automount location" +msgstr "自动挂载位置" + +msgid "automount locations" +msgstr "自动挂载位置" + +msgid "automount map" +msgstr "自动挂载映射" + +msgid "automount maps" +msgstr "自动挂载映射" + +#, c-format +msgid "ber_init() failed, Invalid control ?!\n" +msgstr "ber_init()失败，无效的控制？！\n" + +#, c-format +msgid "ber_scanf() failed, unable to find kvno ?!\n" +msgstr "ber_scanf()失败，没有找到kvno？！\n" + +msgid "bind password" +msgstr "绑定密码" + #, python-format -msgid "krbtgt certs can use only the %s profile" -msgstr "" +msgid "can be at most %(len)d characters" +msgstr "最多%(len)d个字符" -msgid "No Common Name was found in subject of request." -msgstr "在请求的主题中找不到通用名。" +#, python-format +msgid "can be at most %(maxlength)d bytes" +msgstr "最多%(maxlength)d字节" -#, fuzzy, python-format +#, python-format +msgid "can be at most %(maxlength)d characters" +msgstr "最多%(maxlength)d字符" + +#, python-format +msgid "can be at most %(maxvalue)d" +msgstr "最多%(maxvalue)d" + +#, python-format +msgid "can be at most %(maxvalue)s" +msgstr "最多%(maxvalue)s" + +#, python-format msgid "" -"hostname in subject of request '%(cn)s' does not match name or aliases of " -"principal '%(principal)s'" -msgstr "请求主题'%(cn)s'的主机名与主体主机名'%(hostname)s'不匹配" +"cannot add permission \"%(perm)s\" with bindtype \"%(bindtype)s\" to a " +"privilege" +msgstr "不能给一个特权添加带有绑定类型\"%(bindtype)s\"的权限\"%(perm)s\"" + +msgid "cannot be empty" +msgstr "不能为空" + +#, python-format +msgid "cannot connect to '%(uri)s': %(error)s" +msgstr "不能连接到'%(uri)s'：%(error)s" + +msgid "cannot delete global password policy" +msgstr "不能删除全局密码策略" + +msgid "cannot delete managed permissions" +msgstr "不能删除管理权限" + +msgid "" +"cannot delete root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "不能删除信任的根域，使用trust-del来删除它自己的信任" + +msgid "" +"cannot disable root domain of the trust, use trust-del to delete the trust " +"itself" +msgstr "不能禁用信任的根域，使用trust-del来删除它自己的信任" + +#, c-format +msgid "cannot open configuration file %s\n" +msgstr "不能打开配置文件%s\n" + +msgid "cannot rename managed permissions" +msgstr "不能重命名管理权限" + +msgid "cannot set bindtype for a permission that is assigned to a privilege" +msgstr "不能为已分配一个特权的权限设置绑定类型" + +msgid "cannot specify both raw certificate and file" +msgstr "不能同时指定原始证书和文件" + +msgid "" +"cannot specify full target filter and extra target filter simultaneously" +msgstr "不能同时指定完整的目标滤波器和额外的目标滤波器" + +#, c-format +msgid "cannot stat() configuration file %s\n" +msgstr "不能stat()配置文件%s\n" + +msgid "change collided with another change" +msgstr "修改冲突" + +msgid "change to a POSIX group" +msgstr "改变一个POSIX组" + +msgid "change to support external non-IPA members from trusted domains" +msgstr "改变以便从信任域中支持额外的非IPA成员" + +#, c-format +msgid "child exited with %d\n" +msgstr "结果以%d退出\n" + +msgid "cn is immutable" +msgstr "cn是不变的" + +msgid "comma-separated list of HBAC service groups to add" +msgstr "待添加的以逗号分隔的HBAC服务组列表" + +msgid "comma-separated list of HBAC service groups to remove" +msgstr "待移除的以逗号分隔的HBAC服务组列表" + +msgid "comma-separated list of HBAC services to add" +msgstr "待添加的以逗号分隔的HBAC服务列表" + +msgid "comma-separated list of HBAC services to remove" +msgstr "待移除的以逗号分隔的HBAC服务列表" + +msgid "comma-separated list of groups to add" +msgstr "待添加的以逗号分隔的用户组列表" + +msgid "comma-separated list of groups to exclude from migration" +msgstr "允许迁移的以逗号分隔的用户组列表" + +msgid "comma-separated list of groups to remove" +msgstr "待移除的以逗号分隔的用户组列表" + +msgid "comma-separated list of host groups to add" +msgstr "待添加的以逗号分隔的主机组列表" + +msgid "comma-separated list of host groups to remove" +msgstr "待移除的以逗号分隔的主机组列表" + +msgid "comma-separated list of hosts to add" +msgstr "待添加的以逗号分隔的主机列表" + +msgid "comma-separated list of hosts to remove" +msgstr "待移除的以逗号分隔的主机列表" + +msgid "" +"comma-separated list of members of a trusted domain in DOM\\name or " +"name@domain form" +msgstr "以逗号分隔的信任域成员列表是“DOM\\名称”或“名称@域名”格式" + +msgid "comma-separated list of netgroups to add" +msgstr "待添加的以逗号分隔的网络组列表" + +msgid "comma-separated list of netgroups to remove" +msgstr "待移除的以逗号分隔的网络组列表" + +msgid "comma-separated list of permissions" +msgstr "以逗号分隔的权限列表" + +msgid "" +"comma-separated list of permissions to grant(read, write, add, delete, all)" +msgstr "以逗号分隔的授权列表（读，写，添加，删除，全部）" + +msgid "comma-separated list of privileges" +msgstr "以逗号分隔的权限列表" + +msgid "comma-separated list of privileges to add" +msgstr "待添加的以逗号分隔的权限列表" + +msgid "comma-separated list of privileges to remove" +msgstr "待移除的以逗号分隔的权限列表" + +msgid "comma-separated list of roles to add" +msgstr "待添加的以逗号分隔的角色列表" + +msgid "comma-separated list of roles to remove" +msgstr "待移除的以逗号分隔的角色列表" + +msgid "comma-separated list of sudo command groups to add" +msgstr "待添加的以逗号分隔的sudo命令组列表" + +msgid "comma-separated list of sudo command groups to remove" +msgstr "待移除的以逗号分隔的sudo命令组列表" + +msgid "comma-separated list of sudo commands to add" +msgstr "待添加的以逗号分隔的sudo命令列表" + +msgid "comma-separated list of sudo commands to remove" +msgstr "待移除的以逗号分隔的sudo命令列表" + +msgid "comma-separated list of users to add" +msgstr "待添加的以逗号分隔的用户列表" + +msgid "comma-separated list of users to exclude from migration" +msgstr "允许迁移的以逗号分隔的用户列表" + +msgid "comma-separated list of users to remove" +msgstr "待移除的以逗号分隔的用户列表" + +msgid "command" +msgstr "命令" + +#, python-format +msgid "command '%(name)s' takes at most %(count)d argument" +msgid_plural "command '%(name)s' takes at most %(count)d arguments" +msgstr[0] "命令'%(name)s'最多能带%(count)d个参数" + +#, python-format +msgid "command '%(name)s' takes no arguments" +msgstr "命令'%(name)s'没有参数" + +msgid "commands" +msgstr "命令" + +msgid "commands cannot be added when command category='all'" +msgstr "当命令类别='all'时命令不能被添加" + +msgid "commands for controlling sudo configuration" +msgstr "控制sudo配置的命令" + +msgid "communication with CIFS server was unsuccessful" +msgstr "域CIFS服务器通信失败" + +msgid "configuration options" +msgstr "配置选项" + +#, python-format +msgid "container entry (%(container)s) not found" +msgstr "容器条目(%(container)s)没有找到" + +msgid "default CA ACL can be only disabled" +msgstr "默认的CA ACL只可以被禁用" + +msgid "delegation" +msgstr "授权" + +msgid "delegations" +msgstr "授权" + +msgid "delete" +msgstr "删除" + +msgid "description" +msgstr "描述" + +msgid "did not receive Kerberos credentials" +msgstr "没有收到Kerberos凭证" + +msgid "does not match any of accepted formats: " +msgstr "不匹配任何可接受的格式：" + +msgid "domain" +msgstr "域" + +msgid "domain is not configured" +msgstr "域没有配置" + +msgid "domain is not trusted" +msgstr "域是不受信任的" + +#, python-format +msgid "domain name '%(domain)s' should be normalized to: %(normalized)s" +msgstr "域名'%(domain)s'应该规范化：%(normalized)s" + +msgid "domain name cannot be longer than 255 characters" +msgstr "域名不能长于255个字符" + +msgid "each ACL element must be terminated with a semicolon" +msgstr "每个ACL元素必须以分好结束" + +msgid "empty DNS label" +msgstr "空的DNS标签" + +msgid "empty filter" +msgstr "空的过滤器" + +msgid "entries" +msgstr "条目" + +msgid "entry" +msgstr "条目" + +#, python-format +msgid "error marshalling data for XML-RPC transport: %(error)s" +msgstr "XML-RPC传输数据整理错误：%(error)s" + +#, python-format +msgid "error on server '%(server)s': %(error)s" +msgstr "服务器'%(server)s'错误：%(error)s" + +#, c-format +msgid "executing ipa-getkeytab failed, errno %d\n" +msgstr "执行has bad permissions失败，错误码%d\n" + +msgid "" +"expected format: <0-255> <0-255> <0-65535> even-" +"length_hexadecimal_digits_or_hyphen" +msgstr "期望的格式： <0-255> <0-255> <0-65535> 每个长度是十六进制数字或连字符" + +msgid "file to store certificate in" +msgstr "存储证书文件" + +msgid "filename" +msgstr "文件名" + +msgid "filter and memberof are mutually exclusive" +msgstr "过滤器和它的成员是互斥的" + +msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\"" +msgstr "标记必须是\"S\"，\"A\"，\"U\"或\"P\"中的一个" + +msgid "flags value: allowed interval 0-255" +msgstr "标记值：允许间隔0-255" + +msgid "force NS record creation even if its hostname is not in DNS" +msgstr "即使NS记录不在DNS中，也强制创建它。" + +msgid "force delete of SYSTEM permissions" +msgstr "强制删除系统权限" + +msgid "force principal name even if not in DNS" +msgstr "即使主体名在DNS中不存在，也强制添加它" + +#, c-format +msgid "fork() failed\n" +msgstr "fork()失败\n" + +#, python-format +msgid "format must be specified as \"%(format)s\" %(rfcs)s" +msgstr "格式必须被指定为\"%(format)s\" %(rfcs)s" + +#, python-format +msgid "" +"forward zone \"%(fwzone)s\" is not effective because of missing proper NS " +"delegation in authoritative zone \"%(authzone)s\". Please add NS record " +"\"%(ns_rec)s\" to parent zone \"%(authzone)s\"." +msgstr "" +"正向\"%(fwzone)s\"无效因为在认证区域\"%(authzone)s\"缺少合适的NS记录。请添加" +"NS记录\"%(ns_rec)s\"到父区域\"%(authzone)s\"。" + +msgid "gid cannot be set for external group" +msgstr "gid不能被设置为外部组" + +msgid "givenname is required" +msgstr "需要名字" + +msgid "group" +msgstr "组" + +msgid "group runAs" +msgstr "作为组来运行" + +msgid "group, permission and self are mutually exclusive" +msgstr "组，权限和它们自己是互斥的" + +msgid "groups" +msgstr "用户组" + +msgid "groups to add" +msgstr "待添加用户组" + +msgid "groups to remove" +msgstr "待移除的用户组" + +msgid "host" +msgstr "主机" + +msgid "host category cannot be set to 'all' while there are allowed hosts" +msgstr "主机类别不能设置为all'，虽然有允许主机" + +msgid "host group" +msgstr "主机组" + +msgid "host groups" +msgstr "主机组" + +msgid "host groups to add" +msgstr "待添加主机组" + +msgid "host groups to remove" +msgstr "待移除的主机组" + +msgid "hostgroup" +msgstr "主机组" + +#, python-format +msgid "" +"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "主机组名\"%s\"已存在。主机组和网络组共享一个共同的名字空间" + +msgid "hostgroups" +msgstr "主机组" + +msgid "hostname" +msgstr "主机名" + +msgid "hostname contains empty label (consecutive dots)" +msgstr "主机名包含空的标签（连续的点）" #, python-format msgid "" @@ -23947,472 +11325,439 @@ msgid "" "'%(hostname)s'" msgstr "请求主题'%(cn)s'的主机名与主体主机名'%(hostname)s'不匹配" -msgid "DN commonName does not match user's login" -msgstr "DN通用名与用户登录名不匹配" +msgid "hosts" +msgstr "主机" -msgid "DN emailAddress does not match any of user's email addresses" -msgstr "DN电子邮件地址不匹配任何用户的电子邮件地址" +msgid "hosts cannot be added when host category='all'" +msgstr "当主机类别='all'时主机不能被添加" + +msgid "hosts cannot be set when type is 'group'" +msgstr "当类型是'group'是主机不能被设置" + +msgid "hosts to add" +msgstr "待添加主机" + +msgid "hosts to remove" +msgstr "待移除的主机" + +msgid "id range" +msgstr "id范围" + +msgid "id range type" +msgstr "id范围类型" + +msgid "incomplete time value" +msgstr "不完整的时间值" + +msgid "incorrect type" +msgstr "不正确的类型" #, python-format -msgid "" -"Insufficient 'write' privilege to the 'userCertificate' attribute of entry " -"'%s'." -msgstr "对条目'%s'的'userCertificate'属性没有'write'权限。" +msgid "invalid '%(name)s': %(error)s" +msgstr "无效的'%(name)s'：%(error)s" #, python-format -msgid "subject alt name type %s is forbidden for user principals" -msgstr "主题alt名称类型%s禁止用户主体" +msgid "invalid DN (%s)" +msgstr "无效的DN（%s）" + +msgid "invalid IP address format" +msgstr "无效的IP地址格式" #, python-format -msgid "" -"The service principal for subject alt name %s in certificate request does " -"not exist" -msgstr "在证书请求中主题alt名为%s的服务主体不存在" +msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!" +msgstr "无效的IP地址版本(是%(value)d，必须是%(required_value)d)!" + +msgid "invalid IP network format" +msgstr "无效的IP网络格式" + +msgid "invalid Profile ID" +msgstr "无效的配置文件ID" + +msgid "invalid SSH public key" +msgstr "无效的SSH公钥" + +msgid "invalid address format" +msgstr "无效的地址格式" + +msgid "invalid attribute name" +msgstr "无效的属性名" + +msgid "invalid domain name" +msgstr "无效的域名" #, python-format -msgid "" -"Insufficient privilege to create a certificate with subject alt name '%s'." -msgstr "没有权限创建主题alt名为'%s'的证书。" +msgid "invalid domain-name: %s" +msgstr "无效的域名：%s" + +msgid "invalid domain-name: not fully qualified" +msgstr "无效的域名：没有完全限制" #, python-format -msgid "Principal '%s' in subject alt name does not match requested principal" -msgstr "在主题alt名中的主体'%s'与请求的主体不匹配" +msgid "invalid e-mail format: %(email)s" +msgstr "无效的电子邮件格式：%(email)s" -msgid "RFC822Name does not match any of user's email addresses" -msgstr "RFC822名称与任何用户的电子邮件地址都不匹配" +msgid "invalid escape code in domain name" +msgstr "无效的域名转换代码" + +msgid "invalid hostmask" +msgstr "无效的hostmask" + +msgid "invalid port number" +msgstr "无效的端口号" + +#, c-format +msgid "ipa-getkeytab has bad permissions?\n" +msgstr "ipa-getkeytab没有权限？\n" + +#, c-format +msgid "ipa-getkeytab not found\n" +msgstr "ipa-getkeytab没有找到\n" + +msgid "is required" +msgstr "是需要的" + +msgid "iterations value: allowed interval 0-65535" +msgstr "迭代值：允许间隔0-65535" + +msgid "kerberos ticket policy settings" +msgstr "kerberos票据策略设置" #, python-format -msgid "subject alt name type %s is forbidden for non-user principals" -msgstr "主题alt名称类型%s禁止非用户主体" +msgid "key %(key)s already exists" +msgstr "键 %(key)s 已存在" #, python-format -msgid "Subject alt name type %s is forbidden" -msgstr "主题alt名称类型%s被禁止" +msgid "key named %(key)s already exists" +msgstr "键名%(key)s已存在" + +#, python-brace-format +msgid "left node ({host}) does not support suffix '{suff}'" +msgstr "左节点({host})不支持后缀'{suff}'" + +msgid "left node and right node must not be the same" +msgstr "左节点和右节点必须不同" #, python-format -msgid "CA '%s' is disabled" -msgstr "CA'%s'被禁用" +msgid "left node is not a topology node: %(leftnode)s" +msgstr "左节点不是一个拓扑节点：%(leftnode)s" -msgid "'add' option" -msgstr "'add'选项" +msgid "left or right node has to be specified" +msgstr "左或右节点没有被指定" -msgid "The principal for this request doesn't exist." -msgstr "该请求的主题不存在。" +msgid "limits exceeded for this query" +msgstr "超出该查询的限制" + +msgid "local domain range" +msgstr "本地域范围" + +msgid "location" +msgstr "位置" + +msgid "locations" +msgstr "位置" #, python-format -msgid "IP address in subjectAltName (%s) unreachable from DNS names" -msgstr "" +msgid "manager %(manager)s not found" +msgstr "管理员%(manager)s没有找到" #, python-format -msgid "IP address in subjectAltName (%s) does not have PTR record" -msgstr "" +msgid "map %(map)s already exists" +msgstr "映射 %(map)s 已存在" + +msgid "maps not connected to /etc/auto.master:" +msgstr "映射未连接到/etc/auto.master：" + +msgid "match the common name exactly" +msgstr "完全匹配常用名" + +msgid "maximum serial number" +msgstr "最大序列号" #, python-format -msgid "PTR record for SAN IP (%s) does not match A/AAAA records" -msgstr "" +msgid "member %s" +msgstr "成员%s" -msgid "Revoked" -msgstr "撤销" +msgid "member Certificate Profile" +msgstr "成员证书配置文件" -msgid "" -"Reason for revoking the certificate (0-10). Type \"ipa help cert\" for " -"revocation reason details. " -msgstr "撤销证书的原因（0-10）。输入\"ipa help cert\"来查看详细撤销原因。" +msgid "member HBAC service" +msgstr "成员HBAC服务" + +msgid "member HBAC service group" +msgstr "成员HBAC服务组" + +msgid "member group" +msgstr "成员组" + +msgid "member host" +msgstr "成员主机" + +msgid "member host group" +msgstr "成员主机组" + +msgid "member netgroup" +msgstr "成员网络组" + +msgid "member principal" +msgstr "成员主体" + +msgid "member privilege" +msgstr "成员特权" + +msgid "member role" +msgstr "成员角色" + +msgid "member service" +msgstr "成员服务" + +msgid "member service delegation target" +msgstr "成员服务授权目标" + +msgid "member sudo command" +msgstr "成员sudo命令" + +msgid "member sudo command group" +msgstr "成员sudo命令组" + +msgid "member user" +msgstr "成员用户" + +msgid "minimum serial number" +msgstr "最小序列号" + +msgid "missing base_id" +msgstr "缺少base_id" + +msgid "modifying primary key is not allowed" +msgstr "修改主键是不允许的" + +msgid "mount point is relative to parent map, cannot begin with /" +msgstr "挂载点是相对于父映射的，不能以/开始" #, python-format -msgid "Owner %s" -msgstr "所有者%s" +msgid "must be \"%s\"" +msgstr "必须是\"%s\"" #, python-format -msgid "" -"Certificate with serial number %(serial)s issued by CA '%(ca)s' not found" -msgstr "由CA'%(ca)s'发布序列号为%(serial)s的证书没有找到" +msgid "must be '%(value)s'" +msgstr "必须是'%(value)s'" -msgid "7 is not a valid revocation reason" -msgstr "7不是一个有效的撤销原因" +msgid "must be DNS name" +msgstr "必须是DNS名" -#, fuzzy -msgid "Status of the certificate" -msgstr "存储证书文件。" +msgid "must be Kerberos principal" +msgstr "必须是Kerberos主体" -msgid "Results should contain primary key attribute only (\"certificate\")" -msgstr "结果应该只包括主键属性(\"certificate\")" +msgid "must be TRUE or FALSE" +msgstr "必须是TRUE或FALSE" + +msgid "must be True or False" +msgstr "必须是True或False" + +msgid "must be Unicode text" +msgstr "必须是Unicode文本" + +msgid "must be a decimal number" +msgstr "必须是一个十进制数" + +msgid "must be absolute" +msgstr "必须是绝对的" + +msgid "must be an integer" +msgstr "必须是一个整数" #, python-format -msgid "%(count)d certificate matched" -msgid_plural "%(count)d certificates matched" -msgstr[0] "已匹配%(count)d个证书" +msgid "must be at least %(minlength)d bytes" +msgstr "必须至少%(minlength)d字节" #, python-format -msgid "Search for certificates with these owner %s." -msgstr "查找含这些所有者%s的证书。" +msgid "must be at least %(minlength)d characters" +msgstr "必须至少%(minlength)d字符" #, python-format -msgid "Search for certificates without these owner %s." -msgstr "查找不含这些所有者%s的证书。" - -msgid "" -"\n" -"Sudo Rules\n" -msgstr "" -"\n" -"Sudo规则\n" - -msgid "" -"\n" -"Sudo (su \"do\") allows a system administrator to delegate authority to\n" -"give certain users (or groups of users) the ability to run some (or all)\n" -"commands as root or another user while providing an audit trail of the\n" -"commands and their arguments.\n" -msgstr "" -"\n" -"Sudo (su \"do\")允许一个系统管理员给特定用户（或用户组）授予权限使其有以root" -"或其他用户的能力来运行一些（或全部）命令，同时会对命令和命令参数提供一个审计" -"跟踪。\n" - -msgid "" -"\n" -"IPA provides a means to configure the various aspects of Sudo:\n" -" Users: The user(s)/group(s) allowed to invoke Sudo.\n" -" Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke " -"Sudo.\n" -" Allow Command: The specific command(s) permitted to be run via Sudo.\n" -" Deny Command: The specific command(s) prohibited to be run via Sudo.\n" -" RunAsUser: The user(s) or group(s) of users whose rights Sudo will be " -"invoked with.\n" -" RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n" -" Options: The various Sudoers Options that can modify Sudo's behavior.\n" -msgstr "" -"\n" -"IPA提供了一种方法来配置Sudo的各个方面：\n" -" 用户：用户/用户组允许调用Sudo。\n" -" 主机：主机/主机组上的用户允许调用Sudo。\n" -" 允许的命令：指定命令允许通过Sudo来运行。\n" -" 阻止的命令：指定命令禁止通过Sudo来运行。\n" -" 作为用户来运行：Sudo会调用用户或用户组的权限。\n" -" 作为组来运行：Sudo会调用组的gid权限。\n" -" 选项：各种Sudoers选项可以修改Sudo的行为。\n" - -msgid "" -"\n" -"Each option needs to be added separately and no validation is done whether\n" -"the option is known by sudo or is in a valid format. Environment variables\n" -"also need to be set individually. For example env_keep=\"FOO BAR\" in " -"sudoers\n" -"needs be represented as --sudooption env_keep=FOO --sudooption env_keep" -"+=BAR.\n" -msgstr "" - -msgid "" -"\n" -"An order can be added to a sudorule to control the order in which they\n" -"are evaluated (if the client supports it). This order is an integer and\n" -"must be unique.\n" -msgstr "" -"\n" -"顺序可以添加到一个sudo规则中来控制它们评估的顺序（如果客户端支持）。该顺序是" -"一个整数并且是唯一的。\n" - -msgid "" -"\n" -"IPA provides a designated binddn to use with Sudo located at:\n" -"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -"To enable the binddn run the following command to set the password:\n" -"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -H ldap://ipa." -"example.com -ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc," -"dc=example,dc=com\n" -msgstr "" - -msgid "" -"\n" -" Create a new rule:\n" -" ipa sudorule-add readfiles\n" -msgstr "" - -msgid "" -"\n" -" Add sudo command object and add it as allowed command in the rule:\n" -" ipa sudocmd-add /usr/bin/less\n" -" ipa sudorule-add-allow-command readfiles --sudocmds /usr/bin/less\n" -msgstr "" - -msgid "" -"\n" -" Add a host to the rule:\n" -" ipa sudorule-add-host readfiles --hosts server.example.com\n" -msgstr "" - -msgid "" -"\n" -" Add a user to the rule:\n" -" ipa sudorule-add-user readfiles --users jsmith\n" -msgstr "" - -msgid "" -"\n" -" Add a special Sudo rule for default Sudo server configuration:\n" -" ipa sudorule-add defaults\n" -msgstr "" - -msgid "" -"\n" -" Set a default Sudo option:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate'\n" -msgstr "" - -msgid "" -"\n" -" Set multiple default Sudo options:\n" -" ipa sudorule-add-option defaults --sudooption '!authenticate' --" -"sudooption mail_badpass\n" -msgstr "" - -msgid "" -"\n" -" Set SELinux type and role transitions on a rule:\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption type=unconfined_t\n" -" ipa sudorule-add-option sysadmin_sudo --sudooption role=unconfined_r\n" -msgstr "" - -msgid "this option has been deprecated." -msgstr "该选项已被弃用。" - -msgid "sudo rules" -msgstr "sudo规则" - -msgid "Sudo Rules" -msgstr "Sudo规则" - -msgid "Sudo Rule" -msgstr "Sudo规则" +msgid "must be at least %(minvalue)d" +msgstr "必须至少%(minvalue)d" #, python-format -msgid "order must be a unique value (%(order)d already used by %(rule)s)" -msgstr "序号必须是唯一值（%(order)d已被%(rule)s使用）" +msgid "must be at least %(minvalue)s" +msgstr "必须至少%(minvalue)s" + +msgid "must be binary data" +msgstr "必须是二进制数据" + +msgid "must be datetime value" +msgstr "必须是时间值" + +msgid "must be dictionary" +msgstr "必须是字典" + +msgid "must be enclosed in parentheses" +msgstr "必须括在括号里" #, python-format -msgid "Added Sudo Rule \"%(value)s\"" -msgstr "已添加Sudo规则\"%(value)s\"" +msgid "must be exactly %(length)d bytes" +msgstr "必须恰好是%(length)d字节" #, python-format -msgid "Deleted Sudo Rule \"%(value)s\"" -msgstr "已删除Sudo规则\"%(value)s\"" +msgid "must be exactly %(length)d characters" +msgstr "必须恰好是%(length)d字符" #, python-format -msgid "Modified Sudo Rule \"%(value)s\"" -msgstr "已修改Sudo规则\"%(value)s\"" +msgid "must be one of %(values)s" +msgstr "必须是%(values)s中的一个" -#, python-format -msgid "" -"%(type)s category cannot be set to 'all' while there are allowed %(objects)s" -msgstr "%(type)s类别不能设置为all'，虽然有允许%(objects)s" +msgid "must be relative" +msgstr "必须是相对的" -msgid "users" -msgstr "用户" - -msgid "command" -msgstr "命令" - -msgid "commands" -msgstr "命令" - -msgid "runAs user" -msgstr "作为用户来运行" - -msgid "runAs users" -msgstr "作为用户来运行" - -msgid "group runAs" -msgstr "作为组来运行" - -msgid "runAs groups" -msgstr "作为组来运行" - -#, python-format -msgid "%(count)d Sudo Rule matched" -msgid_plural "%(count)d Sudo Rules matched" -msgstr[0] "已匹配%(count)d个Sudo规则" - -msgid "commands cannot be added when command category='all'" -msgstr "当命令类别='all'时命令不能被添加" - -msgid "users cannot be added when runAs user or runAs group category='all'" -msgstr "当作为用户来运行或作为组来运行类别='all'时用户不能被添加" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a user name" -msgstr "作为用户来运行不能接受'%(name)s'来作为一个用户名" - -#, python-format -msgid "RunAsUser does not accept '%(name)s' as a group name" -msgstr "作为用户来运行不能接受'%(name)s'来作为一个组名" - -#, python-format -msgid "RunAsGroup does not accept '%(name)s' as a group name" -msgstr "作为组来运行不能接受'%(name)s'来作为一个组名" - -#, python-format -msgid "Added user \"%(value)s\"" -msgstr "已添加用户\"%(value)s\"" - -msgid "Default group for new users is not POSIX" -msgstr "新用户的默认组不是POSIX" - -#, python-format -msgid "Deleted user \"%(value)s\"" -msgstr "已删除用户\"%(value)s\"" - -#, fuzzy, python-format -#| msgid "Deleted user \"%(value)s\"" -msgid "Preserved user \"%(value)s\"" -msgstr "已删除用户\"%(value)s\"" - -#, python-format -msgid "%s: user is already preserved" -msgstr "%s：用户已保存" - -#, python-format -msgid "Modified user \"%(value)s\"" -msgstr "已修改用户\"%(value)s\"" - -#, python-format -msgid "Undeleted user account \"%(value)s\"" -msgstr "已恢复用户账户\"%(value)s\"" - -#, python-format -msgid "user \"%s\" is already active" -msgstr "用户%s已是活跃的" - -#, fuzzy, python-format -msgid "Staged user account \"%(value)s\"" -msgstr "已启用用户账户\"%(value)s\"" - -#, python-format -msgid "Disabled user account \"%(value)s\"" -msgstr "已禁用用户账户\"%(value)s\"" - -#, python-format -msgid "Enabled user account \"%(value)s\"" -msgstr "已启用用户账户\"%(value)s\"" - -msgid "" -"\n" -" Unlock a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator." -msgstr "" - -#, python-format -msgid "Unlocked account \"%(value)s\"" -msgstr "已解锁账户\"%(value)s\"" - -msgid "Failed logins" -msgstr "登录失败" - -msgid "Last successful authentication" -msgstr "上一次认证成功" - -msgid "Last failed authentication" -msgstr "上一次认证失败" - -msgid "Time now" -msgstr "当前时间" - -#, fuzzy -#| msgid "Password change complete" -msgid "Password grace count" -msgstr "完成密码更改" - -msgid "" -"\n" -" Lockout status of a user account\n" -"\n" -" An account may become locked if the password is entered incorrectly too\n" -" many times within a specific time period as controlled by password\n" -" policy. A locked account is a temporary condition and may be unlocked " -"by\n" -" an administrator.\n" -"\n" -" This connects to each IPA master and displays the lockout status on\n" -" each one.\n" -"\n" -" To determine whether an account is locked on a given server you need\n" -" to compare the number of failed logins and the time of the last " -"failure.\n" -" For an account to be locked it must exceed the maxfail failures within\n" -" the failinterval duration as specified in the password policy " -"associated\n" -" with the user.\n" -"\n" -" The failed login counter is modified only when a user attempts a log in\n" -" so it is possible that an account may appear locked but the last failed\n" -" login attempt is older than the lockouttime of the password policy. " -"This\n" -" means that the user may attempt a login again. " -msgstr "" - -#, python-format -msgid "%(host)s failed: %(error)s" -msgstr "%(host)s已失败：%(error)s" - -#, python-format -msgid "%(host)s failed" -msgstr "%(host)s已失败" - -#, python-format -msgid "Account disabled: %(disabled)s" -msgstr "账户已禁用：%(disabled)s" - -#, python-format -msgid "Added certificates to user \"%(value)s\"" -msgstr "已为用户\"%(value)s\"添加证书" - -#, python-format -msgid "Removed certificates from user \"%(value)s\"" -msgstr "已为用户\"%(value)s\"删除证书" - -msgid "Add new principal alias to the user entry" -msgstr "为用户条目添加新的主体别名" - -#, python-format -msgid "Added new aliases to user \"%(value)s\"" -msgstr "已为用户\"%(value)s\"添加新别名" - -msgid "Remove principal alias from the user entry" -msgstr "从用户条目中删除主体别名" - -#, python-format -msgid "Removed aliases from user \"%(value)s\"" -msgstr "已从用户\"%(value)s\"中删除别名" - -#, python-format -msgid "all masters must have %(role)s role enabled" -msgstr "所有的主服务器必须已启用角色%(role)s" +msgid "must contain a tuple (list, dict)" +msgstr "必须包含一个元组（列表，字典）" #, python-format msgid "must have %(role)s role enabled" msgstr "必须已启用角色%(role)s" -#, fuzzy -msgid "must be enabled only on a single master" -msgstr "必须括在括号里" +#, python-format +msgid "must match pattern \"%(pattern)s\"" +msgstr "必须匹配模式\"%(pattern)s\"" -msgid "Request must be a dict" -msgstr "请求必须是一个字典" +msgid "netgroup" +msgstr "网络组" -msgid "Request is missing \"method\"" -msgstr "请求缺少\"method\"" +#, python-format +msgid "" +"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a " +"common namespace" +msgstr "网络组名\"%s\"已存在。主机组和网络组共享一个共同的名字空间" -msgid "Request is missing \"params\"" -msgstr "请求缺少\"params\"" +msgid "netgroups" +msgstr "网络组" + +msgid "netgroups to add" +msgstr "待添加的网络组" + +msgid "netgroups to remove" +msgstr "待移除的网络组" + +#, python-format +msgid "no command nor help topic '%(topic)s'" +msgstr "没有命令也没有帮助主题'%(topic)s'" + +msgid "no modifications to be performed" +msgstr "没有修改" + +msgid "no trusted domain is configured" +msgstr "没有信任域配置" + +msgid "no trusted domain matched the specified flat name" +msgstr "没有信任域匹配指定的固定名" + +msgid "not allowed to modify group entries" +msgstr "不允许修改组条目" + +msgid "not allowed to modify user entries" +msgstr "不允许修改用户条目" + +#, python-format +msgid "not allowed to perform operation: %s" +msgstr "不允许执行操作：%s" + +msgid "not allowed to perform server connection check" +msgstr "不允许执行服务器连接检查" + +msgid "not found" +msgstr "没有找到" + +msgid "not fully qualified" +msgstr "没有完全限制" + +msgid "not modifiable on managed permissions" +msgstr "管理权限没有修改" + +#, python-format +msgid "" +"number class '%(cls)s' is not included in a list of allowed number classes: " +"%(allowed)s" +msgstr "数字类'%(cls)s'不在允许的数字类列表中：%(allowed)s" + +msgid "number of passwords" +msgstr "密码数" + +#, python-format +msgid "objectclass %s not found" +msgstr "对象类%s没找到" + +msgid "one or more values to remove" +msgstr "待移除的一个或多个值" + +msgid "only \"ad\" is supported" +msgstr "仅支持\"ad\"" + +msgid "only available on managed permissions" +msgstr "仅在管理权限中可用" + +#, python-format +msgid "" +"only letters, numbers, %(chars)s are allowed. DNS label may not start or end " +"with %(chars2)s" +msgstr "只允许字母，数字和%(chars)s。DNS标签不能以%(chars2)s开始或结束" + +msgid "only master zones can contain records" +msgstr "仅有主区域才可以包含记录" + +msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)" +msgstr "每个名称仅允许有一个CNAME记录（RFC 2136，第1.1.5节）" + +msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)" +msgstr "每个名称仅允许有一个DNAME记录（RFC 6672，第2.4节）" + +msgid "only one node can be specified" +msgstr "仅有一个节点可以被指定" + +msgid "operation not defined" +msgstr "操作没有定义" + +#, python-format +msgid "option was renamed; use %s" +msgstr "选项已被重命名；使用%s" + +msgid "options are not allowed" +msgstr "选项是不允许的" + +#, python-format +msgid "order must be a unique value (%(order)d already used by %(rule)s)" +msgstr "序号必须是唯一值（%(order)d已被%(rule)s使用）" + +#, c-format +msgid "out of memory\n" +msgstr "内存不足\n" + +msgid "" +"out-of-zone data: record name must be a subdomain of the zone or a relative " +"name" +msgstr "区域外数据：记录名必须是区域或相对名的一个子域" + +#, python-format +msgid "overlapping arguments and options: %(names)s" +msgstr "覆盖参数和选项：%(names)s" + +#, python-format +msgid "owner %s" +msgstr "所有者%s" + +msgid "owner group" +msgstr "所有者用户组" + +#, python-format +msgid "" +"owner of %(types)s records should not be a wildcard domain name (RFC 4592 " +"section 4)" +msgstr "%(types)s记录的所有者不应该是一个通配符域名（RFC 4592 第四节）" + +msgid "owner service" +msgstr "所有者服务" + +msgid "owner user" +msgstr "所有者用户" msgid "params must be a list" msgstr "参数必须是一个列表" @@ -24426,261 +11771,458 @@ msgstr "params[0] (aka args)必须是一个列表" msgid "params[1] (aka options) must be a dict" msgstr "params[1] (aka options)必须是一个字典" -#, python-format -msgid "" -"\n" -"Replication topology in suffix '%(suffix)s' is disconnected:\n" -"%(errors)s" -msgstr "" -"\n" -"复制拓扑后缀'%(suffix)s'已失去连接：%(errors)s" +msgid "password" +msgstr "密码" + +msgid "password policies" +msgstr "密码策略" + +msgid "password policy" +msgstr "密码策略" + +msgid "password to use if not using kerberos" +msgstr "如果没有使用kerberos，则使用密码" + +msgid "permission" +msgstr "权限" #, python-format -msgid "" -"\n" -"Removal of '%(hostname)s' leads to disconnected topology in suffix " -"'%(suffix)s':\n" -"%(errors)s" -msgstr "" -"\n" -"删除'%(hostname)s'导致在后缀'%(suffix)s'拓扑中失去连接：%(errors)s" +msgid "permission \"%(value)s\" already exists" +msgstr "权限\"%(value)s\"已存在" + +msgid "permissions" +msgstr "权限" + +msgid "preserve" +msgstr "保存" + +#, c-format +msgid "principal not found\n" +msgstr "主体没有找到\n" + +#, c-format +msgid "principal not found in XML-RPC response\n" +msgstr "在XML-RPC响应中找不到主体\n" + +msgid "principal to add" +msgstr "待添加主体" + +msgid "principal to remove" +msgstr "待移除的主体" + +msgid "priority cannot be set on global policy" +msgstr "优先权布不能在本地策略上设置" #, python-format -msgid "Topology does not allow server %(server)s to replicate with servers:" -msgstr "拓扑不允许服务器%(server)s复制服务器：" +msgid "priority must be a unique value (%(prio)d already used by %(gname)s)" +msgstr "优先权必须是一个唯一值（(%(prio)d已被%(gname)s使用）" + +msgid "privilege" +msgstr "特权" + +msgid "privileged group" +msgstr "特权组" + +msgid "privileged hostgroup" +msgstr "特权主机组" + +msgid "privileged service delegation rule" +msgstr "特权服务授权规则" + +msgid "privileged service delegation target" +msgstr "特权服务授权目标" + +msgid "privileges" +msgstr "特权" + +msgid "privileges to add" +msgstr "待添加的特权" + +msgid "privileges to remove" +msgstr "待移除的特权" msgid "" -"\n" -"Classes to manage trust joins using DCE-RPC calls\n" -"\n" -"The code in this module relies heavily on samba4-python package\n" -"and Samba4 python bindings.\n" -msgstr "" +"profile category cannot be set to 'all' while there are allowed profiles" +msgstr "配置文件类别不能设置为all'，虽然有允许配置文件" -msgid "CIFS server denied your credentials" -msgstr "CIFS服务器阻止你的凭证" +msgid "profiles cannot be added when profile category='all'" +msgstr "当配置文件类别='all'时配置文件不能被添加" -msgid "communication with CIFS server was unsuccessful" -msgstr "域CIFS服务器通信失败" - -msgid "AD domain controller" -msgstr "AD域控制器" - -msgid "unsupported functional level" -msgstr "不支持的功能级" - -msgid "" -"AD domain controller complains about communication sequence. It may mean " -"unsynchronized time on both sides, for example" -msgstr "AD域控制器抱怨通信序列。这可能意味着双方时间不同步，例如" - -msgid "Cannot find specified domain or server name" -msgstr "找不到指定的域或服务器名称" - -msgid "" -"AD DC was unable to reach any IPA domain controller. Most likely it is a DNS " -"or firewall issue" -msgstr "AD DC不能连接任何IPA域控制器。最有可能是一个DNS或者防火墙事件" - -msgid "At least the domain or IP address should be specified" -msgstr "至少应该指定域或IP地址" +msgid "pysss_murmur is not available on the server and no base-id is given." +msgstr "pysss_murmur在服务器上不可用并没有提供base-id。" #, python-format +msgid "query '%(owner)s %(rtype)s' with EDNS0: %(error)s" +msgstr "用EDNS0查询'%(owner)s %(rtype)s'：%(error)s" + +#, python-format +msgid "query '%(owner)s %(rtype)s': %(error)s" +msgstr "查询'%(owner)s %(rtype)s'：%(error)s" + +msgid "range exists" +msgstr "范围内存在" + msgid "" -"CIFS server communication error: code \"%(num)s\", message \"%(message)s" -"\" (both may be \"None\")" -msgstr "" -"CIFS服务器通信错误：代码\"%(num)s\"，消息\"%(message)s\"（两者都有可能没有任" -"何信息）" +"range modification leaving objects with ID out of the defined range is not " +"allowed" +msgstr "对象ID范围修改超出定义范围是不允许的" -msgid "no trusted domain is configured" -msgstr "没有信任域配置" +msgid "range type change" +msgstr "范围类型改变" -msgid "domain is not configured" -msgstr "域没有配置" +#, c-format +msgid "read error\n" +msgstr "读取错误\n" -msgid "SID is not valid" -msgstr "SID是无效的" +#, c-format +msgid "realm not found\n" +msgstr "域找不到\n" -msgid "SID does not match exactlywith any trusted domain's SID" -msgstr "SID不能完全匹配任何信任域的SID" - -msgid "SID does not match any trusted domain" -msgstr "SID不能匹配任何信任域" - -#, fuzzy -msgid "Trust setup" -msgstr "AD信任设置" - -msgid "Our domain is not configured" -msgstr "我们的域没有配置" - -msgid "No trusted domain is not configured" -msgstr "信任域已配置" - -msgid "trusted domain object" -msgstr "信任域对象" - -msgid "domain is not trusted" -msgstr "域是不受信任的" - -msgid "no trusted domain matched the specified flat name" -msgstr "没有信任域匹配指定的固定名" - -msgid "trusted domain object not found" -msgstr "信任域对象没有找到" - -#, fuzzy -msgid "Object does not belong to a trusted domain" -msgstr "SID不能匹配任何信任域" - -msgid "SSSD was unable to resolve the object to a valid SID" -msgstr "SSSD不能将对象解析成一个有效的SID" - -msgid "Ambiguous search, user domain was not specified" -msgstr "模糊查找，用户域没有指定" - -msgid "Trusted domain did not return a unique object" -msgstr "信任域没有返回一个唯一的对象" - -msgid "Trusted domain did not return a valid SID for the object" -msgstr "信任域没有为对象返回一个有效的SID" - -msgid "trusted domain user not found" -msgstr "信任域用户没有找到" - -msgid "Cannot retrieve trusted domain GC list" -msgstr "不能检索信任域GC列表" - -msgid "CIFS credentials object" -msgstr "CIFS凭证对象" +msgid "realm or UPN suffix overlaps with trusted domain namespace" +msgstr "域或UPN后缀覆盖信任域命名空间" #, python-format -msgid "CIFS server %(host)s denied your credentials" -msgstr "CIFS服务器%(host)s阻止你的凭证" +msgid "record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s" +msgstr "记录'%(owner)s %(rtype)s'DNSSEC验证服务器 %(ip)s失败" #, python-format -msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?" -msgstr "不能和%(host)s建立LSA连接。CIFS服务器是否在运行？" +msgid "request failed with HTTP status %d" +msgstr "请求失败HTTP状态%d" + +#, c-format +msgid "result not found in XML-RPC response\n" +msgstr "在XML-RPC响应中找不到结果\n" + +msgid "" +"retrieve and print all attributes from the server. Affects command output." +msgstr "从服务器检索和打印所有属性。影响命令输出。" + +#, python-brace-format +msgid "right node ({host}) does not support suffix '{suff}'" +msgstr "右节点({host})不支持后缀'{suff}'" + +#, python-format +msgid "right node is not a topology node: %(rightnode)s" +msgstr "右节点不是一个拓扑节点：%(rightnode)s" + +msgid "role" +msgstr "角色" + +msgid "roles" +msgstr "角色" + +msgid "roles to add" +msgstr "待添加角色" + +msgid "roles to remove" +msgstr "待移除角色" + +msgid "runAs groups" +msgstr "作为组来运行" + +msgid "runAs user" +msgstr "作为用户来运行" + +msgid "runAs users" +msgstr "作为用户来运行" + +#, python-format +msgid "salt value: %(err)s" +msgstr "盐值：%(err)s" + +msgid "search for POSIX groups" +msgstr "查找POSIX组" + +msgid "" +"search for groups with support of external non-IPA members from trusted " +"domains" +msgstr "查找组，该组在信任域中支持额外的非IPA成员" + +msgid "search for managed groups" +msgstr "查找管理组" + +msgid "search for non-POSIX groups" +msgstr "查找非POSIX组" + +msgid "search for private groups" +msgstr "查找私有组" + +msgid "" +"search results for objects to be migrated\n" +"have been truncated by the server;\n" +"migration process might be incomplete\n" +msgstr "查询待移植对象的结果被服务器拦截；移植过程可能没有完成\n" + +msgid "seconds" +msgstr "秒" + +msgid "segment" +msgstr "段" + +msgid "segments" +msgstr "段" + +msgid "self service permission" +msgstr "自助服务权限" + +msgid "self service permissions" +msgstr "自助服务权限" + +msgid "server" +msgstr "服务器" + +msgid "server role" +msgstr "服务器角色" + +msgid "server roles" +msgstr "服务器角色" + +msgid "servers" +msgstr "服务器" + +msgid "service" +msgstr "服务" + +msgid "" +"service category cannot be set to 'all' while there are allowed services" +msgstr "服务类别不能设置为all'，虽然有允许服务" + +msgid "service delegation rule" +msgstr "服务授权规则" + +msgid "service delegation rules" +msgstr "服务授权规则" + +msgid "service delegation target" +msgstr "服务授权目标" + +msgid "service delegation targets" +msgstr "服务授权目标" + +msgid "service delegation targets to add" +msgstr "待添加的服务授权目标" + +msgid "service delegation targets to remove" +msgstr "待移除的服务授权目标" + +msgid "services" +msgstr "服务" + +msgid "services cannot be added when service category='all'" +msgstr "当服务类别='all'时服务不能被添加" + +msgid "services to add" +msgstr "待添加服务" + +msgid "services to remove" +msgstr "待移除服务" + +msgid "setting Authoritative nameserver" +msgstr "设置权威命名服务器" + +msgid "should not be a wildcard domain name (RFC 4592 section 4)" +msgstr "不应该是一个通配符域名（RFC 4592 第四节）" + +msgid "skip reverse DNS detection" +msgstr "忽略反向DNS检测" + +msgid "sn is required" +msgstr "需要sn" + +msgid "stage user" +msgstr "计划用户" + +msgid "stage users" +msgstr "计划用户" + +#, python-format +msgid "subject alt name type %s is forbidden for non-user principals" +msgstr "主题alt名称类型%s禁止非用户主体" + +#, python-format +msgid "subject alt name type %s is forbidden for user principals" +msgstr "主题alt名称类型%s禁止用户主体" + +msgid "subtree and type are mutually exclusive" +msgstr "子树和类型是互斥的" + +msgid "sudo command" +msgstr "sudo命令" + +msgid "sudo command group" +msgstr "sudo命令组" + +msgid "sudo command groups" +msgstr "sudo命令组" + +msgid "sudo command groups to add" +msgstr "待添加的sudo命令组" + +msgid "sudo command groups to remove" +msgstr "待移除的sudo命令组" + +msgid "sudo commands" +msgstr "sudo命令" + +msgid "sudo commands to add" +msgstr "待添加的sudo命令" + +msgid "sudo commands to remove" +msgstr "待移除的sudo命令" + +msgid "sudo rule" +msgstr "sudo规则" + +msgid "sudo rules" +msgstr "sudo规则" + +msgid "suffix" +msgstr "后缀" + +msgid "suffixes" +msgstr "后缀" + +msgid "system ID View" +msgstr "系统ID视图" + +msgid "target and targetgroup are mutually exclusive" +msgstr "目标和目标组是互斥的" #, python-format msgid "" "the IPA server and the remote domain cannot share the same NetBIOS name: %s" msgstr "IPA服务器和远程域不能共享相同的NetBIOS名：%s" -#, python-brace-format +msgid "the certificate with serial number " +msgstr "证书编号" + +msgid "the entry was deleted while being modified" +msgstr "正被修改的条目已被删除" + +msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format" +msgstr "值不是\"YYYYMMDDHHMMSS\"时间格式" + msgid "" -"There is already a trust to {ipa_domain} with unsupported type {trust_type}. " -"Please remove it manually on AD DC side." -msgstr "" +"there must be at least one target entry specifier (e.g. target, " +"targetfilter, attrs)" +msgstr "必须有至少一个目标条目说明符（例如：目标，目标过滤器，属性）" + +msgid "this option has been deprecated." +msgstr "该选项已被弃用。" + +msgid "this option is deprecated" +msgstr "该选项已被弃用" + +msgid "too many '@' characters" +msgstr "太多'@'字符" + +msgid "trust" +msgstr "信任" + +msgid "trust configuration" +msgstr "信任配置" + +msgid "trust domain" +msgstr "信任域" + +msgid "trust domains" +msgstr "信任域" + +msgid "trust type" +msgstr "信任类型" + +msgid "trusted domain object" +msgstr "信任域对象" + +msgid "trusted domain object not found" +msgstr "信任域对象没有找到" + +msgid "trusted domain user not found" +msgstr "信任域用户没有找到" + +msgid "trusts" +msgstr "信任" + +msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)" +msgstr "IPA对象类型（用户，用户组，主机，主机组，服务，网络组）" + +msgid "type, filter, subtree and targetgroup are mutually exclusive" +msgstr "类型，过滤器，子树和目标组是互斥的" #, python-format -msgid "" -"IPA master denied trust validation requests from AD DC %(count)d times. Most " -"likely AD DC contacted a replica that has no trust information replicated " -"yet. Additionally, please check that AD DNS is able to resolve %(records)s " -"SRV records to the correct IPA server." -msgstr "" -"IPA主服务器%(count)d次阻止来自AD DC的信任有效请求。最有可能是AD DC联系了一个" -"没有信任信息副本的副本。同时，请检查AD DNS能将%(records)s SRV记录解析到正确的" -"IPA服务器上。" +msgid "unknown command '%(name)s'" +msgstr "未知的命令'%(name)s'" -#, fuzzy -msgid "Credentials" -msgstr "无效的证书" +#, python-format +msgid "unknown error %(code)d from %(server)s: %(error)s" +msgstr "%(server)s上未知的错误%(code)d：%(error)s" -msgid "Missing credentials for cross-forest communication" -msgstr "" +msgid "unsupported functional level" +msgstr "不支持的功能级" -msgid "" -"Non-Kerberos user name was specified, please provide user@REALM variant " -"instead" -msgstr "" +msgid "unsupported trust type" +msgstr "不支持的信任类型" -#, fuzzy, python-format -msgid "must equal %r" -msgstr "必须是\"%s\"" +msgid "user" +msgstr "用户" -msgid "Hello world" -msgstr "" +#, python-format +msgid "user \"%s\" is already active" +msgstr "用户%s已是活跃的" -#, fuzzy, python-format -msgid "%s: RADIUS proxy server not found" -msgstr "RADIUS代理服务器名称" +msgid "user category cannot be set to 'all' while there are allowed users" +msgstr "用户类别不能设置为all'，虽然有允许用户" -#, fuzzy, python-format -msgid "RADIUS proxy server with name \"%s\" already exists" -msgstr "活跃用户名\"%(user)s\"已存在" +msgid "users" +msgstr "用户" -#, fuzzy -msgid "must be at least 1" -msgstr "必须至少%(minvalue)d" +msgid "users and hosts cannot both be set" +msgstr "用户和主机不能被同时设置" -msgid "Out of memory\n" -msgstr "内存不足\n" +msgid "users cannot be added when runAs user or runAs group category='all'" +msgstr "当作为用户来运行或作为组来运行类别='all'时用户不能被添加" -msgid "Warning unrecognized encryption type.\n" -msgstr "警告无法识别加密类型。\n" +msgid "users cannot be added when user category='all'" +msgstr "当用户类别='all'时用户不能被添加" -msgid "Warning unrecognized salt type.\n" -msgstr "警告无法识别盐值类型。\n" +msgid "users cannot be set when type is 'hostgroup'" +msgstr "当类型是'hostgroup'是用户不能被设置" -msgid "Out of memory!?\n" -msgstr "内存不足！？\n" +msgid "users to add" +msgstr "待添加用户" -msgid "Enctype comparison failed!\n" -msgstr "加密类型比较失败！\n" +msgid "users to remove" +msgstr "待移除的用户" -#, fuzzy -msgid "Password is too long!\n" -msgstr "密码历史大小" +msgid "value" +msgstr "值" -msgid "Failed to create random key!\n" -msgstr "创建随机密钥失败！\n" +msgid "vault" +msgstr "库" -msgid "Failed to create key!\n" -msgstr "创建密钥失败！\n" +msgid "vaultcontainer" +msgstr "库容器" -msgid "Bad or unsupported salt type.\n" -msgstr "错误的或不支持的盐值类型。\n" +msgid "vaultcontainers" +msgstr "库容器" -#, fuzzy, c-format -msgid "Unable to initialize connection to ldap server %1$s: %2$s\n" -msgstr "不能初始化ldap库！\n" +msgid "vaults" +msgstr "库" -msgid "Unable to set LDAP_OPT_PROTOCOL_VERSION\n" -msgstr "不能设置LDAP_OPT_PROTOCOL_VERSION\n" +#, python-brace-format +msgid "{attr}: no such attribute" +msgstr "{attr}：没有这样的属性" -msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n" -msgstr "不能设置LDAP_OPT_X_SASL_NOCANON\n" - -#, fuzzy -msgid "Unable to set LDAP_OPT_X_TLS_CACERTFILE\n" -msgstr "不能设置LDAP_OPT_X_SASL_NOCANON\n" - -#, fuzzy -msgid "Unable to set LDAP_OPT_X_TLS_REQUIRE_CERT\n" -msgstr "不能设置LDAP_OPT_X_SASL_NOCANON\n" - -#, fuzzy -msgid "Unable to set LDAP_OPT_X_TLS_PROTOCOL_MIN\n" -msgstr "不能设置LDAP_OPT_PROTOCOL_VERSION\n" - -msgid "" -"Unable to create new TLS context (OpenSSL failed to initialize or to load " -"certificates)\n" -msgstr "" - -#, fuzzy -msgid "Unable to initialize STARTTLS session\n" -msgstr "不能初始化ldap库！\n" - -#~ msgid "Maximum password life must be greater than minimum." -#~ msgstr "最小密码生存周期必须比最小值大。" +#, python-brace-format +msgid "{role}: role not found" +msgstr "{role}：角色没有找到" #~ msgid "Delete a CA." #~ msgstr "删除一个CA。" +#~ msgid "Maximum password life must be greater than minimum." +#~ msgstr "最小密码生存周期必须比最小值大。" + #~ msgid "" #~ "Reverse zone for PTR record should be a sub-zone of one the following " #~ "fully qualified domains: %s"